From 90a16942c10ea0ab2e6b1ed7928abd02b265bc56 Mon Sep 17 00:00:00 2001 From: Rahul Kumar Singh <37482171+rahulkumarsingh73690@users.noreply.github.com> Date: Thu, 6 Sep 2018 12:18:10 +0530 Subject: [PATCH 001/138] Update index.md --- windows/hub/index.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/hub/index.md b/windows/hub/index.md index adbc774252..5c25ce59c8 100644 --- a/windows/hub/index.md +++ b/windows/hub/index.md @@ -70,10 +70,12 @@ The Windows 10 operating system introduces a new way to build, deploy, and servi These improvements focus on maximizing customer involvement in Windows development, simplifying the deployment and servicing of Windows client computers, and leveling out the resources needed to deploy and maintain Windows over time. - [Read more about Windows as a Service](/windows/deployment/update/waas-overview) +- [Read how much space does Windows 10 take](https://www.rahulit.com/how-much-space-does-windows-10-take/) ## Related topics [Windows 10 TechCenter](https://go.microsoft.com/fwlink/?LinkId=620009) +   From 3d6265a5ae9c4d1abdaa1d5a78e6701c4899f6ff Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 7 Sep 2018 14:58:46 -0700 Subject: [PATCH 002/138] added personal --- .../enlightened-microsoft-apps-and-wip.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md index e91d6c96e7..475d430104 100644 --- a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md +++ b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: security author: justinha ms.localizationpriority: medium -ms.date: 05/30/2018 +ms.date: 09/07/2018 --- # List of enlightened Microsoft apps for use with Windows Information Protection (WIP) @@ -32,7 +32,7 @@ Apps can be enlightened or unenlightened: - Windows **Save As** experiences only allow you to save your files as enterprise. -- **WIP-work only apps** are unenlightened line-of-business apps that have been tested and deemed safe for use in an enterprise with WIP and Mobile App Management (MAM) solutions. +- **WIP-work only apps** are unenlightened line-of-business apps that have been tested and deemed safe for use in an enterprise with WIP and Mobile App Management (MAM) solutions without device enrollment. Unenlightended apps that are targeted by WIP without enrollment run under personal mode. ## List of enlightened Microsoft apps Microsoft has made a concerted effort to enlighten several of our more popular apps, including the following: From a2cf8ceede0fd7af2712afe41857c9a93876c287 Mon Sep 17 00:00:00 2001 From: Ken <1176431+kenjohnson03@users.noreply.github.com> Date: Tue, 18 Sep 2018 18:07:22 -0500 Subject: [PATCH 003/138] Adding information on Microsoft Store updates --- .../stop-employees-from-using-microsoft-store.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/configuration/stop-employees-from-using-microsoft-store.md b/windows/configuration/stop-employees-from-using-microsoft-store.md index 27bc5fc49f..eb3d236c32 100644 --- a/windows/configuration/stop-employees-from-using-microsoft-store.md +++ b/windows/configuration/stop-employees-from-using-microsoft-store.md @@ -25,6 +25,9 @@ ms.date: 4/16/2018 IT pros can configure access to Microsoft Store for client computers in their organization. For some organizations, business policies require blocking access to Microsoft Store. +> [!Important] +> All executable code including Microsoft Store applications should have an update and maintenance plan. Organizations that use Microsoft Store applications should ensure that the applications can be updated through the Microsoft Store over the internet, through the [Private Store](/microsoft-store/distribute-apps-from-your-private-store), or [distributed offline](/microsoft-store/distribute-offline-apps) to keep the applications up to date. + ## Options to configure access to Microsoft Store @@ -80,8 +83,7 @@ You can also use Group Policy to manage access to Microsoft Store. 4. On the **Turn off Store application** setting page, click **Enabled**, and then click **OK**. > [!Important] -> Enabling **Turn off Store application** policy turns off app updates from Microsoft Store. - +> Enabling **Turn off Store application** policy turns off app updates from Microsoft Store. ## Block Microsoft Store using management tool From 52274edb2d201d940f0286729c19f1dd7369233c Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Sun, 7 Oct 2018 16:05:36 +0000 Subject: [PATCH 004/138] Updated supported-apis-windows-defender-advanced-threat-protection.md --- ...ported-apis-windows-defender-advanced-threat-protection.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/supported-apis-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/supported-apis-windows-defender-advanced-threat-protection.md index a6c64df7ff..bc16fe2624 100644 --- a/windows/security/threat-protection/windows-defender-atp/supported-apis-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/supported-apis-windows-defender-advanced-threat-protection.md @@ -34,4 +34,8 @@ File | Run API calls such as get file information, file related alerts, file rel IP | Run API calls such as get IP related alerts, IP related machines, IP statistics, and check if and IP is seen in your organization. Machines | Run API calls such as find machine information by IP, get machines, get machines by ID, information about logged on users, and alerts related to a given machine ID. User | Run API calls such as get alert related user information, user information, user related alerts, and user related machines. +KbInfo | Run API call that gets list of Windows KB's information +CveKbMap | Run API call that gets mapping of CVE's to corresponding KB's +MachineSecurityStates | Run API call that gets list of machines with their security properties and versions +MachineGroups | Run API call that gets list of machine group definitions From 9e8c4645f72592cf7f4e35742b518ddd8c6ea439 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Sun, 7 Oct 2018 16:14:44 +0000 Subject: [PATCH 005/138] Added file get-kbinfo-collection-windows-defender-advanced-threat-protection.md --- ...info-collection-windows-defender-advanced-threat-protection.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md diff --git a/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md new file mode 100644 index 0000000000..e69de29bb2 From 81f35d1255181fbb75694df7f48101b9e9a4977b Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Sun, 7 Oct 2018 16:15:28 +0000 Subject: [PATCH 006/138] Added file get-cvekbmap-collection-windows-defender-advanced-threat-protection.md --- ...bmap-collection-windows-defender-advanced-threat-protection.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md diff --git a/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md new file mode 100644 index 0000000000..e69de29bb2 From 1c1c742b0b9fd604c69292d2f7f7a649299d85f7 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Sun, 7 Oct 2018 16:16:05 +0000 Subject: [PATCH 007/138] Added file get-machinegroups-collection-windows-defender-advanced-threat-protection --- ...egroups-collection-windows-defender-advanced-threat-protection | 0 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection diff --git a/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection b/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection new file mode 100644 index 0000000000..e69de29bb2 From e5205246254297ba06179449daf469049bbc39d6 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Sun, 7 Oct 2018 16:16:49 +0000 Subject: [PATCH 008/138] Added file get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md --- ...ates-collection-windows-defender-advanced-threat-protection.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md diff --git a/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md new file mode 100644 index 0000000000..e69de29bb2 From 5fd781c70e367143b6ed339356829e83924e25ec Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Sun, 7 Oct 2018 16:29:57 +0000 Subject: [PATCH 009/138] Updated get-cvekbmap-collection-windows-defender-advanced-threat-protection.md --- ...ows-defender-advanced-threat-protection.md | 77 +++++++++++++++++++ 1 file changed, 77 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md index e69de29bb2..42220a68a4 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md @@ -0,0 +1,77 @@ +--- +title: Get CVE-KB map API +description: Retrieves a map of CVE's to KB's. +keywords: apis, graph api, supported apis, get, cve, kb +search.product: eADQiWindows 10XVcnh +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: leonidzh +author: mjcaparas +ms.localizationpriority: medium +ms.date: 10/07/2018 +--- + +# Get CVE-KB map API + +**Applies to:** + +- Windows Defender Advanced Threat Protection (Windows Defender ATP) + +Retrieves a map of of CVE's to KB's and CVE details. + +## Permissions +User needs read permissions. + +## HTTP request +``` +GET /testwdatppreview/cvekbmap +``` + +## Request headers + +Header | Value +:---|:--- +Authorization | Bearer {token}. **Required**. +Content type | application/json + +## Request body +Empty + +## Response +If successful and map exists - 200 OK. + +## Example + +**Request** + +Here is an example of the request. + +``` +GET https://graph.microsoft.com/testwdatppreview/CveKbMap +Content-type: application/json +``` + +**Response** + +Here is an example of the response. + +``` +HTTP/1.1 200 OK +Content-type: application/json +{ + "@odata.context":"https://graph.microsoft-ppe.com/testwdatpbeta/$metadata#CveKbMap", + "@odata.count": 4168, + "value": [ + { + "cveKbId": "CVE-2015-2482-3097617", + "cveId": "CVE-2015-2482", + "kbId":"3097617", + "title": "Cumulative Security Update for Internet Explorer", + "severity": "Critical" + }, + … +} + +``` From 397d4fc98bb5deb6d7da5e804c66988eb1dfa55f Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Mon, 8 Oct 2018 06:14:06 +0000 Subject: [PATCH 010/138] Updated get-kbinfo-collection-windows-defender-advanced-threat-protection.md --- ...ows-defender-advanced-threat-protection.md | 76 +++++++++++++++++++ 1 file changed, 76 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md index e69de29bb2..c145c2e5cd 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md @@ -0,0 +1,76 @@ +--- +title: Get KB collection API +description: Retrieves a collection of KB's. +keywords: apis, graph api, supported apis, get, kb +search.product: eADQiWindows 10XVcnh +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: leonidzh +author: mjcaparas +ms.localizationpriority: medium +ms.date: 10/07/2018 +--- + +# Get KB collection API + +**Applies to:** + +- Windows Defender Advanced Threat Protection (Windows Defender ATP) + +Retrieves a collection of KB's and KB details. + +## Permissions +User needs read permissions. + +## HTTP request +``` +GET /testwdatppreview/kbinfo +``` + +## Request headers + +Header | Value +:---|:--- +Authorization | Bearer {token}. **Required**. +Content type | application/json + +## Request body +Empty + +## Response +If successful - 200 OK. + +## Example + +**Request** + +Here is an example of the request. + +``` +GET https://graph.microsoft.com/testwdatppreview/KbInfo +Content-type: application/json +``` + +**Response** + +Here is an example of the response. + +``` +HTTP/1.1 200 OK +Content-type: application/json +{ + "@odata.context": "https://graph.microsoft-ppe.com/testwdatpbeta/$metadata#KbInfo", + "@odata.count": 271, + "value":[ + { + "id": "KB3097617 (10240.16549) Amd64", + "release": "KB3097617 (10240.16549)", + "publishingDate": "2015-10-16T21:00:00Z", + "version": "10.0.10240.16549", + "architecture": "Amd64" + }, + … +} +``` \ No newline at end of file From b3c99ce75fabbb9ccd0ea2c0c386f07c8f533ea3 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Mon, 8 Oct 2018 06:27:21 +0000 Subject: [PATCH 011/138] Updated get-machinegroups-collection-windows-defender-advanced-threat-protection --- ...indows-defender-advanced-threat-protection | 76 +++++++++++++++++++ 1 file changed, 76 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection b/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection index e69de29bb2..93b2b4a472 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection +++ b/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection @@ -0,0 +1,76 @@ +--- +title: Get RBAC machine groups collection API +description: Retrieves a collection of RBAC machine groups. +keywords: apis, graph api, supported apis, get, RBAC, group +search.product: eADQiWindows 10XVcnh +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: leonidzh +author: mjcaparas +ms.localizationpriority: medium +ms.date: 10/07/2018 +--- + +# Get KB collection API + +**Applies to:** + +- Windows Defender Advanced Threat Protection (Windows Defender ATP) + +Retrieves a collection of RBAC machine groups. + +## Permissions +User needs read permissions. + +## HTTP request +``` +GET /testwdatppreview/machinegroups +``` + +## Request headers + +Header | Value +:---|:--- +Authorization | Bearer {token}. **Required**. +Content type | application/json + +## Request body +Empty + +## Response +If successful - 200 OK. + +## Example + +**Request** + +Here is an example of the request. + +``` +GET https://graph.microsoft.com/testwdatppreview/machinegroups +Content-type: application/json +``` + +**Response** + +Here is an example of the response. +Field id contains machine group **id** and equal to field **rbacGroupId** in machines info. +Field **ungrouped** is true only for one group for all machines that have not been assigned to any group. This group as usual has name "UnassignedGroup". + +``` +HTTP/1.1 200 OK +Content-type: application/json +{ + "@odata.context":"https://graph.microsoft-ppe.com/testwdatppreview/$metadata#MachineGroups", + "@odata.count":7, + "value":[ + { + "id":86, + "name":"UnassignedGroup", + "description":"", + "ungrouped":true}, + … +} +``` \ No newline at end of file From bc44252f52d6057ad9570252d32354bc140122b6 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Mon, 8 Oct 2018 06:28:19 +0000 Subject: [PATCH 012/138] Renamed get-machinegroups-collection-windows-defender-advanced-threat-protection to get-machinegroups-collection-windows-defender-advanced-threat-protection.md --- ...ups-collection-windows-defender-advanced-threat-protection.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/windows-defender-atp/{get-machinegroups-collection-windows-defender-advanced-threat-protection => get-machinegroups-collection-windows-defender-advanced-threat-protection.md} (100%) diff --git a/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection b/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection.md similarity index 100% rename from windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection rename to windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection.md From fd8f1c8f51627bc566acf69333816ff2fd475acb Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Mon, 8 Oct 2018 06:39:56 +0000 Subject: [PATCH 013/138] Updated get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md --- ...ows-defender-advanced-threat-protection.md | 83 +++++++++++++++++++ 1 file changed, 83 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md index e69de29bb2..2c02695ffe 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md @@ -0,0 +1,83 @@ +--- +title: Get machines security states collection API +description: Retrieves a collection of machines security states. +keywords: apis, graph api, supported apis, get, machine, security, state +search.product: eADQiWindows 10XVcnh +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: leonidzh +author: mjcaparas +ms.localizationpriority: medium +ms.date: 10/07/2018 +--- + +# Get Machines security states collection API + +**Applies to:** + +- Windows Defender Advanced Threat Protection (Windows Defender ATP) + +Retrieves a collection of machines security states. + +## Permissions +User needs read permissions. + +## HTTP request +``` +GET /testwdatppreview/machinesecuritystates +``` + +## Request headers + +Header | Value +:---|:--- +Authorization | Bearer {token}. **Required**. +Content type | application/json + +## Request body +Empty + +## Response +If successful - 200 OK. + +## Example + +**Request** + +Here is an example of the request. + +``` +GET https://graph.microsoft.com/testwdatppreview/machinesecuritystates +Content-type: application/json +``` + +**Response** + +Here is an example of the response. +Field *id* contains machine id and equal to the field *id** in machines info. + +``` +HTTP/1.1 200 OK +Content-type: application/json +{ + "@odata.context":"https://graph.microsoft-ppe.com/testwdatppreview/$metadata#MachineSecurityStates", + "@odata.count":444, + "@odata.nextLink":"https://graph.microsoft-ppe.com/testwdatppreview/machinesecuritystates?$skiptoken=[continuation token]", + "value":[ + { + "id":"000050e1b4afeee3742489ede9ad7a3e16bbd9c4", + "build":14393, + "revision":2485, + "architecture":"Amd64", + "osVersion":"10.0.14393.2485.amd64fre.rs1_release.180827-1809", + "propertiesRequireAttention":[ + "AntivirusNotReporting", + "EdrImpairedCommunications" + ] + }, + … + ] +} +``` \ No newline at end of file From 4886013681dd8c1e02c86a3b0b852d0c2102776b Mon Sep 17 00:00:00 2001 From: Marc Shepard <37675325+marcshep-msft@users.noreply.github.com> Date: Mon, 8 Oct 2018 09:11:32 -0700 Subject: [PATCH 014/138] Update windows-analytics-get-started.md MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fixed spelling of Analytics (typo "Analtyics" from my last PR)…. --- windows/deployment/update/windows-analytics-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index c7518d3e77..4420182284 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -53,7 +53,7 @@ To enable data sharing, configure your proxy server to whitelist the following e | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | | `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | | `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | -| `https://login.live.com` | This end-point is required by Device Health to ensure data integrity and provides a more reliable device identity for all Windows Analtyics solutions on Windows 10. Those who wish to disable end-user MSA access should do so by applying [policy](https://docs.microsoft.com/windows/security/identity-protection/access-control/microsoft-accounts#block-all-consumer-microsoft-account-user-authentication) rather than blocking this end-point. | +| `https://login.live.com` | This end-point is required by Device Health to ensure data integrity and provides a more reliable device identity for all Windows Analytics solutions on Windows 10. Those who wish to disable end-user MSA access should do so by applying [policy](https://docs.microsoft.com/windows/security/identity-protection/access-control/microsoft-accounts#block-all-consumer-microsoft-account-user-authentication) rather than blocking this end-point. | | `https://www.msftncsi.com` | Windows Error Reporting (WER); required for Device Health to check connectivity. | | `https://www.msftconnecttest.com` | Windows Error Reporting (WER); required for Device Health to check connectivity. | From ddb096f98243d19845b5a7c73f5b16bd7f157818 Mon Sep 17 00:00:00 2001 From: "Robert Durff (Microsoft)" Date: Mon, 8 Oct 2018 10:54:51 -0700 Subject: [PATCH 015/138] Added new links for Fall Creators Update documents; fixed typos; adjusted title. --- .../windows-platform-common-criteria.md | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-platform-common-criteria.md b/windows/security/threat-protection/windows-platform-common-criteria.md index 86b6688059..1be7c7a0fb 100644 --- a/windows/security/threat-protection/windows-platform-common-criteria.md +++ b/windows/security/threat-protection/windows-platform-common-criteria.md @@ -1,14 +1,14 @@ --- -title: Windows Platform Common Criteria Certification +title: Common Criteria Certifications description: This topic details how Microsoft supports the Common Criteria certification program. ms.prod: w10 ms.localizationpriority: medium ms.author: daniha author: danihalfin -ms.date: 04/03/2018 +ms.date: 10/8/2018 --- -# Windows Platform Common Criteria Certification +# Common Criteria Certifications Microsoft is committed to optimizing the security of its products and services. As part of that commitment, Microsoft supports the Common Criteria certification program, continues to ensure that products incorporate the features and functions required by relevant Common Criteria protection profiles, and completes Common Criteria certifications of Microsoft Windows products. @@ -18,7 +18,8 @@ Microsoft is committed to optimizing the security of its products and services. The Security Target describes security functionality and assurance measures used to evaluate Windows. - - [Microsoft Window 10 (Creators Update)](http://download.microsoft.com/download/e/8/b/e8b8c42a-a0b6-4ba1-9bdc-e704e8289697/windows%2010%20version%201703%20gp%20os%20security%20target%20-%20public%20\(january%2016,%202018\)\(final\)\(clean\).pdf) + - [Microsoft Windows 10 (Fall Creators Update)](http://download.microsoft.com/download/B/6/A/B6A5EC2C-6351-4FB9-8FF1-643D4BD5BE6E/Windows%2010%201709%20GP%20OS%20Security%20Target.pdf) + - [Microsoft Windows 10 (Creators Update)](http://download.microsoft.com/download/e/8/b/e8b8c42a-a0b6-4ba1-9bdc-e704e8289697/windows%2010%20version%201703%20gp%20os%20security%20target%20-%20public%20\(january%2016,%202018\)\(final\)\(clean\).pdf) - [Microsoft Windows Server 2016, Microsoft Windows Server 2012 R2, and Microsoft Windows 10 Hyper-V](http://download.microsoft.com/download/1/c/3/1c3b5ab0-e064-4350-a31f-48312180d9b5/st_vid10823-st.pdf) - [Microsoft Windows 10 (Anniversary Update) and Windows 10 Mobile (Anniversary Update)](http://download.microsoft.com/download/1/5/e/15eee6d3-f2a8-4441-8cb1-ce8c2ab91c24/windows%2010%20anniversary%20update%20mdf%20security%20target%20-%20public%20\(april%203%202017\).docx) - [Microsoft Windows 10 (Anniversary Update) and Windows Server 2016](http://download.microsoft.com/download/f/8/c/f8c1c2a4-719c-48ae-942f-9fd3ce5b238f/windows%2010%20au%20and%20server%202016%20gp%20os%20security%20target%20-%20public%20\(december%202%202016\)%20\(clean\).docx) @@ -52,7 +53,9 @@ These documents describe how to configure Windows to replicate the configuration **Windows 10, Windows 10 Mobile, Windows Server 2016, Windows Server 2012 R2** - - [Microsoft Window 10 (Creators Update)](http://download.microsoft.com/download/e/9/7/e97f0c7f-e741-4657-8f79-2c0a7ca928e3/windows%2010%20cu%20gp%20os%20operational%20guidance%20\(jan%208%202017%20-%20public\).pdf) + + - [Microsoft Windows 10 (Fall Creators Update)](http://download.microsoft.com/download/5/D/2/5D26F473-0FCE-4AC4-9065-6AEC0FE5B693/Windows%2010%201709%20GP%20OS%20Administrative%20Guide.pdf) + - [Microsoft Windows 10 (Creators Update)](http://download.microsoft.com/download/e/9/7/e97f0c7f-e741-4657-8f79-2c0a7ca928e3/windows%2010%20cu%20gp%20os%20operational%20guidance%20\(jan%208%202017%20-%20public\).pdf) - [Microsoft Windows Server 2016, Microsoft Windows Server 2012 R2, and Microsoft Windows 10 Hyper-V](http://download.microsoft.com/download/d/c/4/dc40b5c8-49c2-4587-8a04-ab3b81eb6fc4/st_vid10823-agd.pdf) - [Microsoft Windows 10 (Anniversary Update) and Windows 10 Mobile (Anniversary Update)](http://download.microsoft.com/download/4/c/1/4c1f4ea4-2d66-4232-a0f5-925b2bc763bc/windows%2010%20au%20operational%20guidance%20\(16%20mar%202017\)\(clean\).docx) - [Microsoft Windows 10 (Anniversary Update) and Windows Server 2016](http://download.microsoft.com/download/b/5/2/b52e9081-05c6-4895-91a3-732bfa0eb4da/windows%2010%20au%20and%20server%202016%20gp%20os%20operational%20guidance%20\(final\).docx) @@ -127,7 +130,8 @@ These documents describe how to configure Windows to replicate the configuration An Evaluation Technical Report (ETR) is a report submitted to the Common Criteria certification authority for how Windows complies with the claims made in the Security Target. A Certification / Validation Report provides the results of the evaluation by the validation team. - - [Microsoft Window 10 (Creators Update)](http://download.microsoft.com/download/3/2/c/32cdf627-dd23-4266-90ff-2f9685fd15c0/2017-49%20inf-2218%20cr.pdf) + - [Microsoft Windows 10 (Fall Creators Update)](http://download.microsoft.com/download/2/C/2/2C20D013-0610-4047-B2FA-516819DFAE0A/Windows%2010%201709%20GP%20OS%20Certification%20Report.pdf) + - [Microsoft Windows 10 (Creators Update)](http://download.microsoft.com/download/3/2/c/32cdf627-dd23-4266-90ff-2f9685fd15c0/2017-49%20inf-2218%20cr.pdf) - [Microsoft Windows Server 2016, Microsoft Windows Server 2012 R2, and Microsoft Windows 10 Hyper-V](http://download.microsoft.com/download/a/3/3/a336f881-4ac9-4c79-8202-95289f86bb7a/st_vid10823-vr.pdf) - [Microsoft Windows 10 (Anniversary Update) and Windows 10 Mobile (Anniversary Update)](http://download.microsoft.com/download/f/2/f/f2f7176e-34f4-4ab0-993c-6606d207bb3c/st_vid10752-vr.pdf) - [Microsoft Windows 10 (Anniversary Update) and Windows Server 2016](http://download.microsoft.com/download/5/4/8/548cc06e-c671-4502-bebf-20d38e49b731/2016-36-inf-1779.pdf) From e371ce034296d53e5db8ee7d51678348a486418b Mon Sep 17 00:00:00 2001 From: Patti Short Date: Mon, 8 Oct 2018 11:07:53 -0700 Subject: [PATCH 016/138] fixed an Important note and added a missing link --- browsers/edge/microsoft-edge-kiosk-mode-deploy.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index f847f4c62e..9a3119296d 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -66,9 +66,10 @@ Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft Ed - **Windows Settings.** Use to set up a couple of single-app kiosk devices. If you hit the Windows key and type “kiosk” you can setup Microsoft Edge kiosk mode for a single-app (Digital / Interactive signage or Public browsing) expereince and define a single URL for the Home button, Start page, and New Tab page. You can also set the reset after an idle timeout. -IMPORTANT: Do not use the Windows 10 Settings to configure multi-app kiosks. + >[!IMPORTANT] + >Do not use the Windows 10 Settings to configure multi-app kiosks. -- **Microsoft Intune or other MDM service.** Use to set up several single-app and multi-app kiosk devices. Microsoft Intune and other MDM service providers offer more options for customizing the Microsoft Edge kiosk mode experience by using the [supported or available] Microsoft Edge policies. For a list of supported polices see [Supported policies for kiosk mode](). +- **Microsoft Intune or other MDM service.** Use to set up several single-app and multi-app kiosk devices. Microsoft Intune and other MDM service providers offer more options for customizing the Microsoft Edge kiosk mode experience by using the [supported or available] Microsoft Edge policies. For a list of supported polices see [Supported policies for kiosk mode](#supported-policies-for-kiosk-mode). >[!NOTE] >For other MDM service, check with your provider for instructions. @@ -124,7 +125,7 @@ When you set up a single-app kiosk device using Windows Settings, you must first 11. Once you've configured the policies, restart the kiosk device and sign in with the local kiosk account to validate the configuration. -*Congratulations!* You’ve just finished setting up Microsoft Edge in assigned access, a kiosk or digital sign, and configured Microsoft Edge kiosk mode. +**_Congratulations!_** You’ve just finished setting up Microsoft Edge in assigned access, a kiosk or digital sign, and configured Microsoft Edge kiosk mode. **_Next steps._** From 2502299f9f4a68aef0b1604915a915bd1855dc0d Mon Sep 17 00:00:00 2001 From: jaimeo Date: Mon, 8 Oct 2018 11:10:20 -0700 Subject: [PATCH 017/138] adjusted language in login.live.com endpoint description for style, voice, and tone --- windows/deployment/update/windows-analytics-get-started.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index c7518d3e77..30f586c3f1 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 10/01/2018 +ms.date: 10/08/2018 ms.localizationpriority: medium --- @@ -53,7 +53,7 @@ To enable data sharing, configure your proxy server to whitelist the following e | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | | `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | | `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | -| `https://login.live.com` | This end-point is required by Device Health to ensure data integrity and provides a more reliable device identity for all Windows Analtyics solutions on Windows 10. Those who wish to disable end-user MSA access should do so by applying [policy](https://docs.microsoft.com/windows/security/identity-protection/access-control/microsoft-accounts#block-all-consumer-microsoft-account-user-authentication) rather than blocking this end-point. | +| `https://login.live.com` | This endpoint is required by Device Health to ensure data integrity and provides a more reliable device identity for all of the Windows Analytics solutions on Windows 10. If you want to disable end-user managed service account (MSA) access, you should apply the appropriate [policy](https://docs.microsoft.com/windows/security/identity-protection/access-control/microsoft-accounts#block-all-consumer-microsoft-account-user-authentication) instead of blocking this endpoint. | | `https://www.msftncsi.com` | Windows Error Reporting (WER); required for Device Health to check connectivity. | | `https://www.msftconnecttest.com` | Windows Error Reporting (WER); required for Device Health to check connectivity. | From ce722cd55d84548c75fa1e6917ca55086b8f5627 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Mon, 8 Oct 2018 11:15:24 -0700 Subject: [PATCH 018/138] formatting fixes --- .../edge/microsoft-edge-kiosk-mode-deploy.md | 170 +++++++++--------- 1 file changed, 85 insertions(+), 85 deletions(-) diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index 9a3119296d..6787bb23c5 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -142,18 +142,18 @@ With this method, you can use Microsoft Intune or other MDM services to configur >[!IMPORTANT] >If you are using a local account as a kiosk account in Microsoft Intune or a provisioning package, make sure to sign into this account and then sign out before configuring the assigned access single-app kiosk. -1. In Microsoft Intune or other MDM service, configure [AssignedAccess](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) to prevent users from accessing the file system, running executables, or other apps. +1. In Microsoft Intune or other MDM service, configure [AssignedAccess](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) to prevent users from accessing the file system, running executables, or other apps. -2. Configure the following MDM settings to setup Microsoft Edge kiosk mode on the kiosk device and then restart the device. +2. Configure the following MDM settings to setup Microsoft Edge kiosk mode on the kiosk device and then restart the device. - | | | - |---|---| - | **[ConfigureKioskMode](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)**

![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode

**Data type:** Integer

**Allowed values:**

  • **Single-app kiosk experience**
    • **0** - Digital signage and interactive display
    • **1** - InPrivate Public browsing
  • **Multi-app kiosk experience**
    • **0** - Normal Microsoft Edge running in assigned access
    • **1** - InPrivate public browsing with other apps
| - | **[ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)**

![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout

**Data type:** Integer

**Allowed values:**

  • **0** - No idle timer
  • **1-1440 (5 minutes is the default)** - Set reset on idle timer
| - | **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**

![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages

**Data type:** String

**Allowed values:**

Enter one or more URLs, for example,
   \\ | - | **[ConfigureHomeButton](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)**

![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton

**Data type:** Integer

**Allowed values:**

  • **0 (default)** - Not configured. Show home button, and load the default Start page.
  • **1** - Enabled. Show home button and load New Tab page
  • **2** - Enabled. Show home button & set a specific page.
  • **3** - Enabled. Hide the home button.
| - | **[SetHomeButtonURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)**

![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.bing.com | - | **[SetNewTabPageURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)**

![](images/icon-thin-line-computer.png) | Set a custom URL for the New Tab page.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.msn.com | + | | | + |---|---| + | **[ConfigureKioskMode](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)**

![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode

**Data type:** Integer

**Allowed values:**

  • **Single-app kiosk experience**
    • **0** - Digital signage and interactive display
    • **1** - InPrivate Public browsing
  • **Multi-app kiosk experience**
    • **0** - Normal Microsoft Edge running in assigned access
    • **1** - InPrivate public browsing with other apps
| + | **[ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)**

![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout

**Data type:** Integer

**Allowed values:**

  • **0** - No idle timer
  • **1-1440 (5 minutes is the default)** - Set reset on idle timer
| + | **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**

![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages

**Data type:** String

**Allowed values:**

Enter one or more URLs, for example,
   \\ | + | **[ConfigureHomeButton](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)**

![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton

**Data type:** Integer

**Allowed values:**

  • **0 (default)** - Not configured. Show home button, and load the default Start page.
  • **1** - Enabled. Show home button and load New Tab page
  • **2** - Enabled. Show home button & set a specific page.
  • **3** - Enabled. Hide the home button.
| + | **[SetHomeButtonURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)**

![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.bing.com | + | **[SetNewTabPageURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)**

![](images/icon-thin-line-computer.png) | Set a custom URL for the New Tab page.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.msn.com | ---
@@ -176,14 +176,14 @@ With this method, you can use a provisioning package to configure Microsoft Edge 4. Switch to the advanced editor and navigate to **Runtime settings \> Policies \> Browser** and set the following policies: - | | | - |---|---| - | **[ConfigureKioskMode](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)**

![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode

**Data type:** Integer

**Allowed values:**

  • **Single-app kiosk experience**
    • **0** - Digital signage and interactive display
    • **1** - InPrivate Public browsing
  • **Multi-app kiosk experience**
    • **0** - Normal Microsoft Edge running in assigned access
    • **1** - InPrivate public browsing with other apps
| - | **[ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)**

![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout

**Data type:** Integer

**Allowed values:**

  • **0** - No idle timer
  • **1-1440 (5 minutes is the default)** - Set reset on idle timer
| - | **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**

![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages

**Data type:** String

**Allowed values:**

Enter one or more URLs, for example,
   \\ | - | **[ConfigureHomeButton](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)**

![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton

**Data type:** Integer

**Allowed values:**

  • **0 (default)** - Not configured. Show home button, and load the default Start page.
  • **1** - Enabled. Show home button and load New Tab page
  • **2** - Enabled. Show home button & set a specific page.
  • **3** - Enabled. Hide the home button.
| - | **[SetHomeButtonURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)**

![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.bing.com | - | **[SetNewTabPageURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)**

![](images/icon-thin-line-computer.png) | Set a custom URL for the New Tab page.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.msn.com | + | | | + |---|---| + | **[ConfigureKioskMode](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)**

![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode

**Data type:** Integer

**Allowed values:**

  • **Single-app kiosk experience**
    • **0** - Digital signage and interactive display
    • **1** - InPrivate Public browsing
  • **Multi-app kiosk experience**
    • **0** - Normal Microsoft Edge running in assigned access
    • **1** - InPrivate public browsing with other apps
| + | **[ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)**

![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout

**Data type:** Integer

**Allowed values:**

  • **0** - No idle timer
  • **1-1440 (5 minutes is the default)** - Set reset on idle timer
| + | **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**

![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages

**Data type:** String

**Allowed values:**

Enter one or more URLs, for example,
   \\ | + | **[ConfigureHomeButton](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)**

![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton

**Data type:** Integer

**Allowed values:**

  • **0 (default)** - Not configured. Show home button, and load the default Start page.
  • **1** - Enabled. Show home button and load New Tab page
  • **2** - Enabled. Show home button & set a specific page.
  • **3** - Enabled. Hide the home button.
| + | **[SetHomeButtonURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)**

![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.bing.com | + | **[SetNewTabPageURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)**

![](images/icon-thin-line-computer.png) | Set a custom URL for the New Tab page.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.msn.com | --- 5. After you’ve configured the Microsoft Edge kiosk mode policies, including any of the related policies, it’s time to [build the package](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-create-package#build-package). @@ -214,64 +214,64 @@ Use any of the Microsoft Edge policies listed below to enhance the kiosk experie | **MDM Setting** | **Digital /
Interactive signage** | **Public browsing
single-app** | **Public browsing
multi-app** | **Normal
mode** | |------------------|:---------:|:---------:|:---------:|:---------:| -| [AllowAddressBarDropdown](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowaddressbardropdown) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowAutofill](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowautofill) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowBrowser](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowbrowser) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | -| [AllowConfigurationUpdateForBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowconfigurationupdateforbookslibrary) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowCookies](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowcookies) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [AllowDeveloperTools](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdevelopertools) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowDoNotTrack](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdonottrack) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [AllowExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowextensions) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowFlash](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflash) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [AllowFlashClickToRun](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) | ![Supported](images/148767.png)2 | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [AllowFullscreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowfullscreenmode)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [AllowInPrivate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowinprivate) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowMicrosoftCompatibilityList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | -| [AllowPasswordManager](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowPopups](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpopups) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [AllowPrelaunch](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowprelaunch)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowPrinting](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowprinting)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [AllowSavingHistory](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsavinghistory)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowSearchEngineCustomization](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [AllowSideloadingExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsideloadingofextensions)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowSmartScreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [AllowSyncMySettings](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowsyncmysettings) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowTabPreloading](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowtabpreloading)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AllowWebContentOnNewTabPage](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowwebcontentonnewtabpage)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [AlwaysEnabledBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [ClearBrowsingDataOnExit](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-clearbrowsingdataonexit) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [ConfigureAdditionalSearchEngines](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configureadditionalsearchengines) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [ConfigureFavoritesBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurefavoritesbar)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [ConfigureHomeButton](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -|  [ConfigureKioskMode](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -|  [ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | -| [ConfigureOpenEdgeWith](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configureopenmicrosoftedgewith)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [ConfigureTelemetryForMicrosoft365Analytics](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configuretelemetryformicrosoft365analytics)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [DisableLockdownOfStartPages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-disablelockdownofstartpages) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowAddressBarDropdown](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowaddressbardropdown) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowAutofill](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowautofill) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowBrowser](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowbrowser) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | +| [AllowConfigurationUpdateForBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowconfigurationupdateforbookslibrary) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowCookies](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowcookies) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [AllowDeveloperTools](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdevelopertools) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowDoNotTrack](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdonottrack) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [AllowExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowextensions) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowFlash](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflash) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [AllowFlashClickToRun](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) | ![Supported](images/148767.png)2 | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [AllowFullscreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowfullscreenmode)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [AllowInPrivate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowinprivate) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowMicrosoftCompatibilityList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | +| [AllowPasswordManager](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowPopups](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpopups) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [AllowPrelaunch](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowprelaunch)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowPrinting](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowprinting)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [AllowSavingHistory](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsavinghistory)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowSearchEngineCustomization](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [AllowSideloadingExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsideloadingofextensions)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowSmartScreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [AllowSyncMySettings](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowsyncmysettings) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowTabPreloading](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowtabpreloading)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AllowWebContentOnNewTabPage](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowwebcontentonnewtabpage)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [AlwaysEnabledBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [ClearBrowsingDataOnExit](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-clearbrowsingdataonexit) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [ConfigureAdditionalSearchEngines](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configureadditionalsearchengines) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [ConfigureFavoritesBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurefavoritesbar)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [ConfigureHomeButton](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +|  [ConfigureKioskMode](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +|  [ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | +| [ConfigureOpenEdgeWith](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configureopenmicrosoftedgewith)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [ConfigureTelemetryForMicrosoft365Analytics](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configuretelemetryformicrosoft365analytics)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [DisableLockdownOfStartPages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-disablelockdownofstartpages) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | | [Experience/DoNotSyncBrowserSettings](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-donotsyncbrowsersetting)\* and [Experience/PreventTurningOffRequiredExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventturningoffrequiredextensions)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [EnableExtendedBooksTelemetry](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [EnterpriseModeSiteList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | -| [FirstRunURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-firstrunurl) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | -| [HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [LockdownFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [PreventAccessToAboutFlagsInMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventaccesstoaboutflagsinmicrosoftedge) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [PreventCertErrorOverrides](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventcerterroroverrides)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [PreventFirstRunPage](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventfirstrunpage) | ![Supported](images/148767.png) | ![Supported](images/148767.png)| ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [PreventLiveTileDataCollection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventlivetiledatacollection) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [PreventSmartScreenPromptOverride](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverride) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [PreventSmartScreenPromptOverrideForFiles](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverrideforfiles) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [PreventTurningOffRequiredExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventturningoffrequiredextensions)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [PreventUsingLocalHostIPAddressForWebRTC](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventusinglocalhostipaddressforwebrtc) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [ProvisionFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | -| [SetDefaultSearchEngine](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setdefaultsearchengine) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [SetHomeButtonURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [SetNewTabPageURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| [ShowMessageWhenOpeningInteretExplorerSites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | -| [SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | -| [UnlockHomeButton](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-unlockhomebutton)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | -| [UseSharedFolderForBooks](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-usesharedfolderforbooks) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [EnableExtendedBooksTelemetry](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [EnterpriseModeSiteList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | +| [FirstRunURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-firstrunurl) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | +| [HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [LockdownFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [PreventAccessToAboutFlagsInMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventaccesstoaboutflagsinmicrosoftedge) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [PreventCertErrorOverrides](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventcerterroroverrides)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [PreventFirstRunPage](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventfirstrunpage) | ![Supported](images/148767.png) | ![Supported](images/148767.png)| ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [PreventLiveTileDataCollection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventlivetiledatacollection) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [PreventSmartScreenPromptOverride](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverride) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [PreventSmartScreenPromptOverrideForFiles](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverrideforfiles) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [PreventTurningOffRequiredExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventturningoffrequiredextensions)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [PreventUsingLocalHostIPAddressForWebRTC](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventusinglocalhostipaddressforwebrtc) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [ProvisionFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | +| [SetDefaultSearchEngine](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setdefaultsearchengine) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [SetHomeButtonURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [SetNewTabPageURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| [ShowMessageWhenOpeningInteretExplorerSites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | +| [SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png)1 | ![Supported](images/148767.png) | +| [UnlockHomeButton](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-unlockhomebutton)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | +| [UseSharedFolderForBooks](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-usesharedfolderforbooks) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | --- *\* New policy as of Windows 10, version 1809.*

@@ -317,19 +317,19 @@ To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select **Micro ## Feature comparison of kiosk mode and kiosk browser app In the following table, we show you the features available in both Microsoft Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk mode and kiosk browser app work in assigned access. -| **Feature** | **Microsoft Edge kiosk mode** | **Kiosk Browser** | +| **Feature** | **Microsoft Edge kiosk mode** | **Kiosk Browser** | |---------------|:----------------:|:---------------:| | Print support | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | -| Multi-tab support | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | -| Allow URL support | ![Supported](images/148767.png)

*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | ![Supported](images/148767.png) | -| Block URL support | ![Supported](images/148767.png)

*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | ![Supported](images/148767.png) | -| Configure Home Button | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| Set Start page(s) URL | ![Supported](images/148767.png) | ![Supported](images/148767.png)

*Same as Home button URL* | -| Set New Tab page URL | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | -| Favorites management | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | -| End session button | ![Supported](images/148767.png) | ![Supported](images/148767.png)

*In Intune, must create custom URI to enable. Dedicated UI configuration targeted for 1808.* | +| Multi-tab support | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | +| Allow URL support | ![Supported](images/148767.png)

*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | ![Supported](images/148767.png) | +| Block URL support | ![Supported](images/148767.png)

*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | ![Supported](images/148767.png) | +| Configure Home Button | ![Supported](images/148767.png) | ![Supported](images/148767.png) | +| Set Start page(s) URL | ![Supported](images/148767.png) | ![Supported](images/148767.png)

*Same as Home button URL* | +| Set New Tab page URL | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | +| Favorites management | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | +| End session button | ![Supported](images/148767.png) | ![Supported](images/148767.png)

*In Intune, must create custom URI to enable. Dedicated UI configuration targeted for 1808.* | | Reset on inactivity | ![Supported](images/148767.png) | ![Supported](images/148767.png) | -| Internet Explorer integration (Enterprise Mode site list) | ![Supported](images/148767.png)

*Multi-app mode only* | ![Not supported](images/148766.png) | +| Internet Explorer integration (Enterprise Mode site list) | ![Supported](images/148767.png)

*Multi-app mode only* | ![Not supported](images/148766.png) | --- **\*Windows Defender Firewall**

From c5081fdbda13c9c5a82c3d761179c73acd20af93 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Mon, 8 Oct 2018 11:18:29 -0700 Subject: [PATCH 019/138] formatting fixes --- browsers/edge/microsoft-edge-kiosk-mode-deploy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index 6787bb23c5..e108dbfe88 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -155,7 +155,7 @@ With this method, you can use Microsoft Intune or other MDM services to configur | **[SetHomeButtonURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)**

![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.bing.com | | **[SetNewTabPageURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)**

![](images/icon-thin-line-computer.png) | Set a custom URL for the New Tab page.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.msn.com | --- -
+ **_Congratulations!_** You’ve just finished setting up a kiosk or digital signage and configuring group policies for Microsoft Edge kiosk mode using Microsoft Intune or other MDM service. From f72aa7b2151b590f1bd56286afe7ae5b8f8ecc1c Mon Sep 17 00:00:00 2001 From: Patti Short Date: Mon, 8 Oct 2018 11:35:22 -0700 Subject: [PATCH 020/138] fixed broken link --- browsers/edge/microsoft-edge-kiosk-mode-deploy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index e108dbfe88..1089a5e0a6 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -276,7 +276,7 @@ Use any of the Microsoft Edge policies listed below to enhance the kiosk experie *\* New policy as of Windows 10, version 1809.*

*1) For multi-app assigned access, you must configure Internet Explorer 11.*
-*2) For digital/interactive signage to enable Flash, set [AllowFlashClickToRun].(https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) to 0.* +*2) For digital/interactive signage to enable Flash, set [AllowFlashClickToRun](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) to 0.* **Legend:**

       ![Not supported](images/148766.png) = Not applicable or not supported
From 06defbb453e63302f0370d9ed4735d75f5832d22 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 8 Oct 2018 13:41:08 -0700 Subject: [PATCH 021/138] add QRadar integration --- ...egration-windows-defender-advanced-threat-protection.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/enable-siem-integration-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/enable-siem-integration-windows-defender-advanced-threat-protection.md index 123c537dc8..cad289b3e7 100644 --- a/windows/security/threat-protection/windows-defender-atp/enable-siem-integration-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/enable-siem-integration-windows-defender-advanced-threat-protection.md @@ -10,14 +10,12 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 04/24/2018 +ms.date: 10/08/2018 --- # Enable SIEM integration in Windows Defender ATP **Applies to:** - - - Windows Defender Advanced Threat Protection (Windows Defender ATP) @@ -54,7 +52,8 @@ Enable security information and event management (SIEM) integration so you can p You can now proceed with configuring your SIEM solution or connecting to the alerts REST API through programmatic access. You'll need to use the tokens when configuring your SIEM solution to allow it to receive alerts from Windows Defender Security Center. - +## Integrate Windows Defender APT with IBM QRadar +You can configure IBM QRadar to collect alerts from Windows Defender ATP. For more information, see [IBM Knowledge Center](https://www.ibm.com/support/knowledgecenter/SS42VS_DSM/c_dsm_guide_MS_Win_Defender_ATP_overview.html?cp=SS42VS_7.3.1). ## Related topics - [Configure Splunk to pull Windows Defender ATP alerts](configure-splunk-windows-defender-advanced-threat-protection.md) From 7a06be40a933b7e28c98ec6eabb90ac691ea5981 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 8 Oct 2018 16:48:36 -0700 Subject: [PATCH 022/138] typo --- ...m-integration-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/enable-siem-integration-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/enable-siem-integration-windows-defender-advanced-threat-protection.md index cad289b3e7..eddf4c93c0 100644 --- a/windows/security/threat-protection/windows-defender-atp/enable-siem-integration-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/enable-siem-integration-windows-defender-advanced-threat-protection.md @@ -52,7 +52,7 @@ Enable security information and event management (SIEM) integration so you can p You can now proceed with configuring your SIEM solution or connecting to the alerts REST API through programmatic access. You'll need to use the tokens when configuring your SIEM solution to allow it to receive alerts from Windows Defender Security Center. -## Integrate Windows Defender APT with IBM QRadar +## Integrate Windows Defender ATP with IBM QRadar You can configure IBM QRadar to collect alerts from Windows Defender ATP. For more information, see [IBM Knowledge Center](https://www.ibm.com/support/knowledgecenter/SS42VS_DSM/c_dsm_guide_MS_Win_Defender_ATP_overview.html?cp=SS42VS_7.3.1). ## Related topics From 9e354c50de80b0590c8b736549cfc70954552481 Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Tue, 9 Oct 2018 02:50:27 -0400 Subject: [PATCH 023/138] typo: Widows -> Windows --- .../overview-endpoint-detection-response.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response.md b/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response.md index 31b65ba716..cb4d987703 100644 --- a/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response.md +++ b/windows/security/threat-protection/windows-defender-atp/overview-endpoint-detection-response.md @@ -19,7 +19,7 @@ ms.date: 09/03/2018 - Windows Defender Advanced Threat Protection (Windows Defender ATP) -The Widows Defender ATP endpoint detection and response capabilities provides near real-time actionable advance attacks detections, enables security analysts to effectively prioritize alerts, unfold the full scope of a breach and take response actions to remediate the threat. +The Windows Defender ATP endpoint detection and response capabilities provides near real-time actionable advance attacks detections, enables security analysts to effectively prioritize alerts, unfold the full scope of a breach and take response actions to remediate the threat. When a threat is detected, alerts are be created in the system for an analyst to investigate. Alerts with the same attack techniques or attributed to the same attacker are aggregated into an entity called _incident_. Aggregating alerts in this manner makes it easy for analysts to collectively investigate and respond to threats. From 82e8bcfd78f21aeaa2cd969ada72c2f84c1b5ca4 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Tue, 9 Oct 2018 08:21:39 +0000 Subject: [PATCH 024/138] Updated TOC.md --- .../windows-defender-atp/TOC.md | 20 +++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index deb8c0e185..6b24986e33 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -89,11 +89,12 @@ ###### [Get alert related file information](get-alert-related-files-info-windows-defender-advanced-threat-protection.md) ###### [Get alert related IP information](get-alert-related-ip-info-windows-defender-advanced-threat-protection.md) ###### [Get alert related machine information](get-alert-related-machine-info-windows-defender-advanced-threat-protection.md) -######Domain -####### [Get domain related alerts](get-domain-related-alerts-windows-defender-advanced-threat-protection.md) -####### [Get domain related machines](get-domain-related-machines-windows-defender-advanced-threat-protection.md) -####### [Get domain statistics](get-domain-statistics-windows-defender-advanced-threat-protection.md) -####### [Is domain seen in organization](is-domain-seen-in-org-windows-defender-advanced-threat-protection.md) + +#####Domain +###### [Get domain related alerts](get-domain-related-alerts-windows-defender-advanced-threat-protection.md) +###### [Get domain related machines](get-domain-related-machines-windows-defender-advanced-threat-protection.md) +###### [Get domain statistics](get-domain-statistics-windows-defender-advanced-threat-protection.md) +###### [Is domain seen in organization](is-domain-seen-in-org-windows-defender-advanced-threat-protection.md) #####File ###### [Block file API](block-file-windows-defender-advanced-threat-protection.md) @@ -129,12 +130,19 @@ ###### [Restrict app execution API](restrict-code-execution-windows-defender-advanced-threat-protection.md) ###### [Run antivirus scan API](run-av-scan-windows-defender-advanced-threat-protection.md) ###### [Stop and quarantine file API](stop-quarantine-file-windows-defender-advanced-threat-protection.md) - +#####Machines Security States +###### [Get MachineSecurityStates collection](get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md) +#####Machine Groups +###### [Get MachineGroups collection](get-machinegroups-collection-windows-defender-advanced-threat-protection.md) #####User ###### [Get alert related user information](get-alert-related-user-info-windows-defender-advanced-threat-protection.md) ###### [Get user information](get-user-information-windows-defender-advanced-threat-protection.md) ###### [Get user related alerts](get-user-related-alerts-windows-defender-advanced-threat-protection.md) ###### [Get user related machines](get-user-related-machines-windows-defender-advanced-threat-protection.md) +#####Windows updates (KB) info +###### [Get KbInfo collection](get-kbinfo-collection-windows-defender-advanced-threat-protection.md) +#####Common Vulnerabilities and Exposures (CVE) to KB map +###### [Get CVE-KB map](get-cvekbmap-collection-windows-defender-advanced-threat-protection.md) #### [Managed security service provider support](mssp-support-windows-defender-advanced-threat-protection.md) From f82878a0ea24a89238b03d740e4a9d6d1a8bb798 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Tue, 9 Oct 2018 08:29:17 +0000 Subject: [PATCH 025/138] Updated TOC.md --- windows/security/threat-protection/TOC.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 6bc125f9d5..4f0ce0c343 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -130,6 +130,10 @@ ####### [Restrict app execution API](windows-defender-atp/restrict-code-execution-windows-defender-advanced-threat-protection.md) ####### [Run antivirus scan API](windows-defender-atp/run-av-scan-windows-defender-advanced-threat-protection.md) ####### [Stop and quarantine file API](windows-defender-atp/stop-quarantine-file-windows-defender-advanced-threat-protection.md) +######Machines Security States +####### [Get MachineSecurityStates collection](get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md) +######Machine Groups +####### [Get MachineGroups collection](get-machinegroups-collection-windows-defender-advanced-threat-protection.md) ######User ####### [Get alert related user information](windows-defender-atp/get-alert-related-user-info-windows-defender-advanced-threat-protection.md) @@ -137,6 +141,12 @@ ####### [Get user related alerts](windows-defender-atp/get-user-related-alerts-windows-defender-advanced-threat-protection.md) ####### [Get user related machines](windows-defender-atp/get-user-related-machines-windows-defender-advanced-threat-protection.md) +######Windows updates (KB) info +####### [Get KbInfo collection](get-kbinfo-collection-windows-defender-advanced-threat-protection.md) +######Common Vulnerabilities and Exposures (CVE) to KB map +####### [Get CVE-KB map](get-cvekbmap-collection-windows-defender-advanced-threat-protection.md) + + ##### [Managed security service provider support](windows-defender-atp/mssp-support-windows-defender-advanced-threat-protection.md) From 662d87457f97fb267db2db75f2c3973d113f1ffc Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Tue, 9 Oct 2018 08:39:52 +0000 Subject: [PATCH 026/138] Updated TOC.md --- windows/security/threat-protection/TOC.md | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 4f0ce0c343..7ff3a5b487 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -90,11 +90,11 @@ ####### [Get alert related file information](windows-defender-atp/get-alert-related-files-info-windows-defender-advanced-threat-protection.md) ####### [Get alert related IP information](windows-defender-atp/get-alert-related-ip-info-windows-defender-advanced-threat-protection.md) ####### [Get alert related machine information](windows-defender-atp/get-alert-related-machine-info-windows-defender-advanced-threat-protection.md) -#######Domain -######## [Get domain related alerts](windows-defender-atp/get-domain-related-alerts-windows-defender-advanced-threat-protection.md) -######## [Get domain related machines](windows-defender-atp/get-domain-related-machines-windows-defender-advanced-threat-protection.md) -######## [Get domain statistics](windows-defender-atp/get-domain-statistics-windows-defender-advanced-threat-protection.md) -######## [Is domain seen in organization](windows-defender-atp/is-domain-seen-in-org-windows-defender-advanced-threat-protection.md) +######Domain +####### [Get domain related alerts](windows-defender-atp/get-domain-related-alerts-windows-defender-advanced-threat-protection.md) +####### [Get domain related machines](windows-defender-atp/get-domain-related-machines-windows-defender-advanced-threat-protection.md) +####### [Get domain statistics](windows-defender-atp/get-domain-statistics-windows-defender-advanced-threat-protection.md) +####### [Is domain seen in organization](windows-defender-atp/is-domain-seen-in-org-windows-defender-advanced-threat-protection.md) ######File ####### [Block file API](windows-defender-atp/block-file-windows-defender-advanced-threat-protection.md) @@ -145,8 +145,6 @@ ####### [Get KbInfo collection](get-kbinfo-collection-windows-defender-advanced-threat-protection.md) ######Common Vulnerabilities and Exposures (CVE) to KB map ####### [Get CVE-KB map](get-cvekbmap-collection-windows-defender-advanced-threat-protection.md) - - ##### [Managed security service provider support](windows-defender-atp/mssp-support-windows-defender-advanced-threat-protection.md) From 8b8b6191ff4279e8a869829217078363fc9a20fb Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Tue, 9 Oct 2018 08:42:21 +0000 Subject: [PATCH 027/138] Updated get-kbinfo-collection-windows-defender-advanced-threat-protection.md --- ...fo-collection-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md index c145c2e5cd..5c2c0916cb 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md @@ -61,7 +61,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://graph.microsoft-ppe.com/testwdatpbeta/$metadata#KbInfo", + "@odata.context": "https://graph.microsoft-ppe.com/testwdatppreview/$metadata#KbInfo", "@odata.count": 271, "value":[ { From 5dd3804007a380030460dc9e7e1aec1f0d0e4cf0 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Tue, 9 Oct 2018 08:44:17 +0000 Subject: [PATCH 028/138] Updated get-cvekbmap-collection-windows-defender-advanced-threat-protection.md --- ...ap-collection-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md index 42220a68a4..4a3d1ffbeb 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md @@ -61,7 +61,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context":"https://graph.microsoft-ppe.com/testwdatpbeta/$metadata#CveKbMap", + "@odata.context":"https://graph.microsoft.com/testwdatppreview/$metadata#CveKbMap", "@odata.count": 4168, "value": [ { From ce9246d9e0085c15835f9db07c760ce132b5c8ee Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Tue, 9 Oct 2018 08:44:49 +0000 Subject: [PATCH 029/138] Updated get-kbinfo-collection-windows-defender-advanced-threat-protection.md --- ...fo-collection-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md index 5c2c0916cb..1c1cdeda69 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md @@ -61,7 +61,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://graph.microsoft-ppe.com/testwdatppreview/$metadata#KbInfo", + "@odata.context": "https://graph.microsoft.com/testwdatppreview/$metadata#KbInfo", "@odata.count": 271, "value":[ { From 43a436848e31cc604bdee12a4d17267cca60fb69 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Tue, 9 Oct 2018 08:46:13 +0000 Subject: [PATCH 030/138] Updated get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md --- ...-collection-windows-defender-advanced-threat-protection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md index 2c02695ffe..1402d68f04 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md @@ -62,9 +62,9 @@ Field *id* contains machine id and equal to the field *id** in machines info. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context":"https://graph.microsoft-ppe.com/testwdatppreview/$metadata#MachineSecurityStates", + "@odata.context":"https://graph.microsoft.com/testwdatppreview/$metadata#MachineSecurityStates", "@odata.count":444, - "@odata.nextLink":"https://graph.microsoft-ppe.com/testwdatppreview/machinesecuritystates?$skiptoken=[continuation token]", + "@odata.nextLink":"https://graph.microsoft.com/testwdatppreview/machinesecuritystates?$skiptoken=[continuation token]", "value":[ { "id":"000050e1b4afeee3742489ede9ad7a3e16bbd9c4", From 82dc29ee87e7dcab09a6b3d7944bc305ba2282b2 Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Tue, 9 Oct 2018 08:46:38 +0000 Subject: [PATCH 031/138] Updated get-machinegroups-collection-windows-defender-advanced-threat-protection.md --- ...ps-collection-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection.md index 93b2b4a472..2e2a0ae684 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection.md @@ -63,7 +63,7 @@ Field **ungrouped** is true only for one group for all machines that have not be HTTP/1.1 200 OK Content-type: application/json { - "@odata.context":"https://graph.microsoft-ppe.com/testwdatppreview/$metadata#MachineGroups", + "@odata.context":"https://graph.microsoft.com/testwdatppreview/$metadata#MachineGroups", "@odata.count":7, "value":[ { From 26122ed2ccf0bca5434448cfba14c50b130b499a Mon Sep 17 00:00:00 2001 From: Leonid Zhitomirsky Date: Tue, 9 Oct 2018 08:49:21 +0000 Subject: [PATCH 032/138] Updated machine-groups-windows-defender-advanced-threat-protection.md --- ...chine-groups-windows-defender-advanced-threat-protection.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/machine-groups-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/machine-groups-windows-defender-advanced-threat-protection.md index 2969a1b1a1..c32acad7cf 100644 --- a/windows/security/threat-protection/windows-defender-atp/machine-groups-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/machine-groups-windows-defender-advanced-threat-protection.md @@ -88,4 +88,5 @@ Machines that are not matched to any groups are added to Ungrouped machines (def ## Related topic -- [Manage portal access using role-based based access control](rbac-windows-defender-advanced-threat-protection.md) \ No newline at end of file +- [Manage portal access using role-based based access control](rbac-windows-defender-advanced-threat-protection.md) +- [Get list of tenant machine groups using Graph API](get-machinegroups-collection-windows-defender-advanced-threat-protection.md) \ No newline at end of file From e2a833e89ab2d6b1383858fe65269026adfcaa1a Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 07:41:58 -0700 Subject: [PATCH 033/138] added a link to the Microsoft Translator extension --- browsers/edge/about-microsoft-edge.md | 3 +++ browsers/edge/microsoft-edge-kiosk-mode-deploy.md | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/browsers/edge/about-microsoft-edge.md b/browsers/edge/about-microsoft-edge.md index 974364ebb1..348a6ea2ee 100644 --- a/browsers/edge/about-microsoft-edge.md +++ b/browsers/edge/about-microsoft-edge.md @@ -40,6 +40,9 @@ Some of the components might also need additional system resources. Check the co ## Supported languages +You can use the [Microsoft Translator extension](https://www.microsoft.com/en-us/p/translator-for-microsoft-edge/9nblggh4n4n3) with Microsoft Edge to translate foreign language webpages and text selections for 60+ languages. + +If the extension does not work after install, please restart Microsoft Edge. If the extension still is not working, please provide feedback through the Feedback Hub. Microsoft Edge supports all of the same languages as Windows 10, including: diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index 1089a5e0a6..001481fe48 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -327,7 +327,7 @@ In the following table, we show you the features available in both Microsoft Edg | Set Start page(s) URL | ![Supported](images/148767.png) | ![Supported](images/148767.png)

*Same as Home button URL* | | Set New Tab page URL | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | | Favorites management | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | -| End session button | ![Supported](images/148767.png) | ![Supported](images/148767.png)

*In Intune, must create custom URI to enable. Dedicated UI configuration targeted for 1808.* | +| End session button | ![Supported](images/148767.png) | ![Supported](images/148767.png)

*In Microsoft Intune, you must create a custom URI to enable. Dedicated UI configuration targeted for 1808.* | | Reset on inactivity | ![Supported](images/148767.png) | ![Supported](images/148767.png) | | Internet Explorer integration (Enterprise Mode site list) | ![Supported](images/148767.png)

*Multi-app mode only* | ![Not supported](images/148766.png) | --- From 16830acdde2172c6ee64e27b86b3e00828f23269 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 07:44:23 -0700 Subject: [PATCH 034/138] added a link to the Microsoft Translator extension --- browsers/edge/about-microsoft-edge.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/about-microsoft-edge.md b/browsers/edge/about-microsoft-edge.md index 348a6ea2ee..d51b7f60f9 100644 --- a/browsers/edge/about-microsoft-edge.md +++ b/browsers/edge/about-microsoft-edge.md @@ -35,7 +35,7 @@ Some of the components might also need additional system resources. Check the co | Display | Super VGA (800 x 600) or higher-resolution monitor with 256 colors | | Graphics card | Microsoft DirectX 9 or later with Windows Display Driver Model (WDDM) 1.0 driver | | Peripherals | Internet connection and a compatible pointing device | - +---   ## Supported languages From 683667aca9cfc4e8bdff28647e601ce1d36a3229 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 08:23:14 -0700 Subject: [PATCH 035/138] removed incorrect information about the idle timer --- browsers/edge/microsoft-edge-kiosk-mode-deploy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index 001481fe48..8e0e8d9a85 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -40,7 +40,7 @@ The single-app Microsoft Edge kiosk mode types are: - **Interactive signage**, on the other hand, requires user interaction within the page but doesn’t allow for any other uses, such as browsing the internet. Use interactive signage for things like a building business directory or restaurant order/pay station. -2. **Public browsing** runs Microsoft Edge InPrivate mode to protect user data with a browsing experience designed for publicly accessible kiosk devices. For example, the Microsoft Edge Settings are disabled, favorites, extensions, and books are unavailable to prevent users from customizing Microsoft Edge. Users can’t minimize, close or open a new Microsoft Window. Microsoft Edge is the only app users can use on the device.

The single-app public browsing mode is the only kiosk mode that has an ‘End session’ button that users click to end the browsing session and an idle timer that resets the session after a specified time of user inactivity. Both restart Microsoft Edge and clear the user’s session, including any downloads. Use the “Configure kiosk reset after idle timeout” policy to set the idle timer, which is set to 5 minutes by default.

A public library or hotel concierge desk are two examples of public browsing that restricts access to only Microsoft Edge. +2. **Public browsing** runs Microsoft Edge InPrivate mode to protect user data with a browsing experience designed for publicly accessible kiosk devices. For example, the Microsoft Edge Settings are disabled, favorites, extensions, and books are unavailable to prevent users from customizing Microsoft Edge. Users can’t minimize, close or open a new Microsoft Window. Microsoft Edge is the only app users can use on the device.

The single-app public browsing mode is the only kiosk mode that has an ‘End session’ button that users click to end the browsing session and an idle timer that resets the session after a specified time of user inactivity. Both restart Microsoft Edge and clear the user’s session, including any downloads.

A public library or hotel concierge desk are two examples of public browsing that restricts access to only Microsoft Edge. ![Public browsing Microsoft Edge kiosk mode on a single-app kiosk device](images/surface_hub_single-app_browse_kiosk_inframe.png) From e9585c43584a1448b5f071a45b9080473de4475c Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 08:26:07 -0700 Subject: [PATCH 036/138] removed incorrect information about the idle timer --- browsers/edge/microsoft-edge-kiosk-mode-deploy.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index 8e0e8d9a85..c41106b008 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -7,7 +7,7 @@ ms.prod: edge ms.sitesec: library title: Deploy Microsoft Edge kiosk mode ms.localizationpriority: medium -ms.date: 10/08/2018 +ms.date: 10/09/2018 --- # Deploy Microsoft Edge kiosk mode @@ -20,7 +20,7 @@ Microsoft Edge kiosk mode supports four configurations types. For example, you c In addition to digital/interactive signage, you can configure Microsoft Edge kiosk mode for public browsing either on a single or multi-app kiosk device. The public browsing kiosk types run Microsoft Edge InPrivate mode to protect user data with a browsing experience designed for public kiosks. For example, the Microsoft Edge Settings are disabled, favorites, extensions, and books are unavailable to prevent users from customizing Microsoft Edge. -In single-app public browsing, there is an “End session” button and reset after an idle timeout. Both restart Microsoft Edge and clear the user’s session. The reset after the idle timer is set to 5 minutes by default, but you can choose a value of your own. +In single-app public browsing, there is an “End session” button and reset after an idle timeout option. Both restart Microsoft Edge and clear the user’s session. The reset after the idle timer is set to 5 minutes by default, but you can choose a value of your own. In this topic, you learn about the different Microsoft Edge kiosk mode types to help you determine what configuration is best suited for your kiosk device. You also learn how to set up your Microsoft Edge kiosk mode experience. Learn more about [Configuring kiosk and shared devices running Windows desktop editions](https://docs.microsoft.com/en-us/windows/configuration/kiosk-shared-pc). From c8e94ea8dd3ad4fcdacc68df46fca6b88cf6f660 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 08:54:38 -0700 Subject: [PATCH 037/138] added the emie compatibility file back to the TOC --- .openpublishing.redirection.json | 2 +- browsers/edge/TOC.md | 2 + .../edge/emie-to-improve-compatibility.md | 61 +++++++++++++++++++ 3 files changed, 64 insertions(+), 1 deletion(-) create mode 100644 browsers/edge/emie-to-improve-compatibility.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 6ac2e03625..d1f63f2bf2 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -3,7 +3,7 @@ { "source_path": "browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md", "redirect_url": "https://docs.microsoft.com/en-us/microsoft-edge/deploy/emie-to-improve-compatibility", -"redirect_document_id": true +"redirect_document_id": false }, { "source_path": "browsers/edge/emie-to-improve-compatibility.md", diff --git a/browsers/edge/TOC.md b/browsers/edge/TOC.md index 304c8bd604..5432d5e42e 100644 --- a/browsers/edge/TOC.md +++ b/browsers/edge/TOC.md @@ -2,6 +2,8 @@ ## [System requirements and supported languages](about-microsoft-edge.md) +## [Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md) + ## [Deploy Microsoft Edge kiosk mode](microsoft-edge-kiosk-mode-deploy.md) ## [Group policies & configuration options](group-policies/index.yml) diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md new file mode 100644 index 0000000000..7649fe1405 --- /dev/null +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -0,0 +1,61 @@ +--- +description: If you're having problems with Microsoft Edge, this topic tells how to use the Enterprise Mode site list to automatically open sites using IE11. +ms.assetid: 89c75f7e-35ca-4ca8-96fa-b3b498b53bE4 +author: shortpatti +ms.author: pashort +ms.manager: elizapo +ms.prod: browser-edge +ms.mktglfcycl: support +ms.sitesec: library +ms.pagetype: appcompat +title: Use Enterprise Mode to improve compatibility (Microsoft Edge for IT Pros) +ms.localizationpriority: high +ms.date: 07/27/2017 +--- + +# Use Enterprise Mode to improve compatibility + +> Applies to: Windows 10 + +If you have specific web sites and apps that have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites open in Internet Explorer 11 automatically. Additionally, if you know that your intranet sites aren't going to work properly with Microsoft Edge, you can set all intranet sites to automatically open using IE11 with the **Send all intranet sites to IE** group policy. + +Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11. + + +## Interoperability goals +[!INCLUDE [interoperability-goals-enterprise-guidance](../includes/interoperability-goals-enterprise-guidance.md)] + +## Enterprise guidance +Microsoft Edge is the default browser experience for Windows 10 and Windows 10 Mobile. However, if you're running web apps that need ActiveX controls, we recommend that you continue to use Internet Explorer 11 for them. If you don't have IE11 installed anymore, you can download it from the Microsoft Store or from the [Internet Explorer 11 download page](https://go.microsoft.com/fwlink/p/?linkid=290956). + +We also recommend that you upgrade to IE11 if you're running any earlier versions of Internet Explorer. IE11 is supported on Windows 7, Windows 8.1, and Windows 10. So any legacy apps that work with IE11 will continue to work even as you migrate to Windows 10. + +If you're having trouble deciding whether Microsoft Edge is good for your organization, you can take a look at this infographic about the potential impact of using Microsoft Edge in an organization. + +![Microsoft Edge infographic](images/microsoft-edge-infographic-sm.png)
+[Click to enlarge](img-microsoft-edge-infographic-lg.md)
+[Click to download image](https://www.microsoft.com/download/details.aspx?id=53892) + + +|Microsoft Edge |IE11 | +|---------|---------| +|Microsoft Edge takes you beyond just browsing to actively engaging with the web through features like Web Note, Reading View, and Cortana.

  • **Web Note.** Microsoft Edge lets you annotate, highlight, and call things out directly on webpages.
  • **Reading view.** Microsoft Edge lets you enjoy and print online articles in a distraction-free layout that's optimized for your screen size. While in reading view, you can also save webpages or PDF files to your reading list, for later viewing.
  • **Cortana.** Cortana is automatically enabled on Microsoft Edge. Microsoft Edge lets you highlight words for more info and gives you one-click access to things like restaurant reservations and reviews, without leaving the webpage.
  • **Compatibility and security.** Microsoft Edge lets you continue to use IE11 for sites that are on your corporate intranet or that are included on your Enterprise Mode Site List. You must use IE11 to run older, less secure technology, such as ActiveX controls.
|IE11 offers enterprises additional security, manageability, performance, backward compatibility, and modern standards support.
  • **Backward compatibility.** IE11 supports 9 document modes that include high-fidelity emulations for older versions of IE.
  • **Modern web standards.** IE11 supports modern web technologies like HTML5, CSS3, and WebGL, which help to ensure today's modern websites and apps work just as well as your old, legacy websites and apps.
  • **More secure.** IE11 was designed with security in mind and is more secure than older versions. Using security features like SmartScreen and Enhanced Protected Mode can help IE11 reduce your risk.
  • **Faster.** IE11 is significantly faster than previous versions of Internet Explorer, taking advantage of network optimization and hardware-accelerated text, graphics, and JavaScript rendering.
  • **Easier migration to Windows 10.** IE11 is the only version of IE that runs on Windows 7, Windows 8.1, and Windows 10. Upgrading to IE11 on Windows 7 can also help your organization support the next generation of software, services, and devices.
  • **Administration.** IE11 can use the Internet Explorer Administration Kit (IEAK) 11 or MSIs for deployment, and includes more than 1,600 Group Policies and preferences for granular control.
| + + +## Configure the Enterprise Mode Site List +[Available policy options](includes/configure-enterprise-mode-site-list-include.md) + + +## Related topics +* [Blog: How Microsoft Edge and Internet Explorer 11 on Windows 10 work better together in the Enterprise](https://go.microsoft.com/fwlink/p/?LinkID=624035) +* [Enterprise Mode Site List Manager for Windows 10 download](https://go.microsoft.com/fwlink/?LinkId=746562) +* [Enterprise Mode for Internet Explorer 11 (IE11)](https://go.microsoft.com/fwlink/p/?linkid=618377) +- [Download the Enterprise Mode Site List Manager (schema v.2)](https://go.microsoft.com/fwlink/p/?LinkId=716853) +- [Download the Enterprise Mode Site List Manager (schema v.1)](https://go.microsoft.com/fwlink/p/?LinkID=394378) +- [Use the Enterprise Mode Site List Manager](../enterprise-mode/use-the-enterprise-mode-site-list-manager.md) +- [Web Application Compatibility Lab Kit for Internet Explorer 11](https://technet.microsoft.com/browser/mt612809.aspx) +- [Download Internet Explorer 11](https://go.microsoft.com/fwlink/p/?linkid=290956) +- [Microsoft Edge - Deployment Guide for IT Pros](https://technet.microsoft.com/itpro/microsoft-edge/index) +- [Internet Explorer 11 (IE11) - Deployment Guide for IT Pros](https://go.microsoft.com/fwlink/p/?LinkId=760644) +- [Internet Explorer Administration Kit 11 (IEAK 11) - Administrator's Guide](https://go.microsoft.com/fwlink/p/?LinkId=760646) +- [Internet Explorer 11 - FAQ for IT Pros](https://technet.microsoft.com/itpro/internet-explorer/ie11-faq/faq-for-it-pros-ie11) \ No newline at end of file From 4bf7474275886e58055e932d0e628f37cf61957a Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 9 Oct 2018 16:05:15 +0000 Subject: [PATCH 038/138] Updated TOC.md --- windows/security/threat-protection/TOC.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index da3ee1f863..8b98253ff3 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -17,10 +17,6 @@ #### [Endpoint detection and response](windows-defender-atp/overview-endpoint-detection-response.md) ##### [Security operations dashboard](windows-defender-atp/security-operations-dashboard-windows-defender-advanced-threat-protection.md) -##### [Incidents queue](windows-defender-atp/incidents-queue.md) -###### [View and organize the Incidents queue](windows-defender-atp/view-incidents-queue.md) -###### [Manage incidents](windows-defender-atp/manage-incidents-windows-defender-advanced-threat-protection.md) -###### [Investigate incidents](windows-defender-atp/investigate-incidents-windows-defender-advanced-threat-protection.md) From a67e578c5f6d80ec9d978dae6bea806d9d25de8e Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 9 Oct 2018 16:05:47 +0000 Subject: [PATCH 039/138] Updated TOC.md --- .../security/threat-protection/windows-defender-atp/TOC.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index a5eb991e8b..84687a4883 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -16,10 +16,6 @@ #### [Security operations dashboard](security-operations-dashboard-windows-defender-advanced-threat-protection.md) -#### [Incidents queue](incidents-queue.md) -##### [View and organize the Incidents queue](view-incidents-queue.md) -##### [Manage incidents](manage-incidents-windows-defender-advanced-threat-protection.md) -##### [Investigate incidents](investigate-incidents-windows-defender-advanced-threat-protection.md) From a1bf0b2c10338f292c24e64b5a09190cd3469dd1 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 9 Oct 2018 16:06:34 +0000 Subject: [PATCH 040/138] Deleted incidents-queue.md --- .../windows-defender-atp/incidents-queue.md | 35 ------------------- 1 file changed, 35 deletions(-) delete mode 100644 windows/security/threat-protection/windows-defender-atp/incidents-queue.md diff --git a/windows/security/threat-protection/windows-defender-atp/incidents-queue.md b/windows/security/threat-protection/windows-defender-atp/incidents-queue.md deleted file mode 100644 index 783f74ac70..0000000000 --- a/windows/security/threat-protection/windows-defender-atp/incidents-queue.md +++ /dev/null @@ -1,35 +0,0 @@ ---- -title: Incidents queue in Windows Defender ATP -description: -keywords: incidents, aggregate, investigations, queue, ttp -search.product: eADQiWindows 10XVcnh -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.author: macapara -author: mjcaparas -ms.localizationpriority: medium -ms.date: 10/08/2018 ---- - -# Incidents queue in Windows Defender ATP -**Applies to:** -- Windows Defender Advanced Threat Protection (Windows Defender ATP) - -[!include[Prerelease information](prerelease.md)] - -When a cybersecurity threat is emerging, or a potential attacker is deploying its tactics, techniques/tools, and procedures (TTPs) on the network, Windows Defender ATP will quickly trigger alerts and launch matching automatic investigations. - -Windows Defender ATP applies correlation analytics and aggregates all related alerts and investigations into an incident. Doing so helps narrate a broader story of an attack, thus providing you with the right visuals (upgraded incident graph) and data representations to understand and deal with complex cross-entity threats to your organization's network. - - -## In this section - -Topic | Description -:---|:--- -[View and organize the Incidents queue](view-incidents-queue.md)| See the list of incidents and learn how to apply filters to limit the list and get a more focused view. -[Manage incidents](manage-incidents-windows-defender-advanced-threat-protection.md) | Learn how to manage incidents by assigning it, updating its status, or setting its classification and other actions. -[Investigate incidents](investigate-incidents-windows-defender-advanced-threat-protection.md)| See associated alerts, manage the incident, see alert metadata, and visualizations to help you investigate an incident. - - From f18509765f663fe558f84e64e28b6244c61dd0d2 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 9 Oct 2018 16:06:52 +0000 Subject: [PATCH 041/138] Deleted view-incidents-queue.md --- .../view-incidents-queue.md | 74 ------------------- 1 file changed, 74 deletions(-) delete mode 100644 windows/security/threat-protection/windows-defender-atp/view-incidents-queue.md diff --git a/windows/security/threat-protection/windows-defender-atp/view-incidents-queue.md b/windows/security/threat-protection/windows-defender-atp/view-incidents-queue.md deleted file mode 100644 index 823c7f396e..0000000000 --- a/windows/security/threat-protection/windows-defender-atp/view-incidents-queue.md +++ /dev/null @@ -1,74 +0,0 @@ ---- -title: View and organize the Incidents queue -description: See the list of incidents and learn how to apply filters to limit the list and get a more focused view. -keywords: view, organize, incidents, aggregate, investigations, queue, ttp -search.product: eADQiWindows 10XVcnh -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.author: macapara -author: mjcaparas -ms.localizationpriority: medium -ms.date: 10/08/2018 ---- - -# View and organize the Windows Defender Advanced Threat Protection Incidents queue -**Applies to:** -- Windows Defender Advanced Threat Protection (Windows Defender ATP) - -[!include[Prerelease information](prerelease.md)] - -The **Incidents queue** shows a collection of incidents that were flagged from machines in your network. It helps you sort through incidents to prioritize and create an informed cybersecurity response decision. - -By default, the queue displays incidents seen in the last 30 days, with the most recent incident showing at the top of the list, helping you see the most recent incidents first. - -There are several options you can choose from to customize the Incidents queue view. - -On the top navigation you can: -- Customize columns to add or remove columns -- Modify the number of items to view per page -- Select the items to show per page -- Batch-select the incidents to assign -- Navigate between pages -- Apply filters - -![Image of incidents queue](images/atp-incident-queue.png) - -## Sort and filter the incidents queue -You can apply the following filters to limit the list of incidents and get a more focused view. - -Incident severity | Description -:---|:--- -High
(Red) | Threats often associated with advanced persistent threats (APT). These incidents indicate a high risk due to the severity of damage they can inflict on machines. -Medium
(Orange) | Threats rarely observed in the organization, such as anomalous registry change, execution of suspicious files, and observed behaviors typical of attack stages. -Low
(Yellow) | Threats associated with prevalent malware and hack-tools that do not necessarily indicate an advanced threat targeting the organization. -Informational
(Grey) | Informational incidents are those that might not be considered harmful to the network but might be good to keep track of. - -### Category -Incidents are categorized based on the description of the stage by which the cybersecurity kill chain is in. This view helps the threat analyst to determine priority, urgency, and corresponding response strategy to deploy based on context. - -### Alerts -Indicates the number of alerts associated with or part of the incidents. - - -### Machines -You can limit to show only the machines at risk which are associated with incidents. - -### Users -You can limit to show only the users of the machines at risk which are associated with incidents. - -### Assigned to -You can choose to show between unassigned incidents or those which are assigned to you. - -### Status -You can choose to limit the list of incidents shown based on their status to see which ones are active or resolved - -### Classification -Use this filter to choose between focusing on incidents flagged as true or false incidents. - -## Related topics -- [Incidents queue](incidents-queue.md) -- [Manage incidents](manage-incidents-windows-defender-advanced-threat-protection.md) -- [Investigate incidents](investigate-incidents-windows-defender-advanced-threat-protection.md) - From 22cbd2ab4576c3ae4ca95607a2ced53e06f9cbe9 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 9 Oct 2018 16:07:45 +0000 Subject: [PATCH 042/138] Deleted manage-incidents-windows-defender-advanced-threat-protection.md --- ...ows-defender-advanced-threat-protection.md | 61 ------------------- 1 file changed, 61 deletions(-) delete mode 100644 windows/security/threat-protection/windows-defender-atp/manage-incidents-windows-defender-advanced-threat-protection.md diff --git a/windows/security/threat-protection/windows-defender-atp/manage-incidents-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/manage-incidents-windows-defender-advanced-threat-protection.md deleted file mode 100644 index 2df623ec62..0000000000 --- a/windows/security/threat-protection/windows-defender-atp/manage-incidents-windows-defender-advanced-threat-protection.md +++ /dev/null @@ -1,61 +0,0 @@ ---- -title: Manage Windows Defender ATP incidents -description: Manage incidents by assigning it, updating its status, or setting its classification. -keywords: incidents, manage, assign, status, classification, true alert, false alert -search.product: eADQiWindows 10XVcnh -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.author: macapara -author: mjcaparas -ms.localizationpriority: medium -ms.date: 010/08/2018 ---- - -# Manage Windows Defender ATP incidents - -**Applies to:** -- Windows Defender Advanced Threat Protection (Windows Defender ATP) - -[!include[Prerelease information](prerelease.md)] - - -Managing incidents is an important part of every cybersecurity operation. You can manage incidents by selecting an incident from the **Incidents queue** or the **Incidents management pane**. You can assign incidents to yourself, change the status, classify, rename, or comment on them to keep track of their progress. - -![Image of the incidents management pane](images/atp-incidents-mgt-pane.png) - -Selecting an incident from the **Incidents queue** brings up the **Incident management pane** where you can open the incident page for details. - -![Image of incident detail page](images/atp-incident-details-page.png) - - -## Assign incidents -If an incident has not been assigned yet, you can select **Assign to me** to assign the incident to yourself. Doing so assumes ownership of not just the incident, but also all the alerts associated with it. - -## Change the incident status -You can categorize incidents (as **Active**, or **Resolved**) by changing their status as your investigation progresses. This helps you organize and manage how your team can respond to incidents. - -For example, your SoC analyst can review the urgent **Active** incidents for the day, and decide to assign them to himself for investigation. - -Alternatively, your SoC analyst might set the incident as **Resolved** if the incident has been remediated. - -## Classify the incident -You can choose not to set a classification, or decide to specify whether an incident is true or false. Doing so helps the team see patterns and learn from them. - -## Rename incident -By default, incidents are assigned with numbers. You can rename the incident if your organization uses a naming convention for easier cybersecurity threat identification. - -![Image of incident renaming](images/atp-rename-incident.png) - -## Add comments and view the history of an incident -You can add comments and view historical events about an incident to see previous changes made to it. - -Whenever a change or comment is made to an alert, it is recorded in the Comments and history section. - -Added comments instantly appear on the pane. - -## Related topics -- [Incidents queue](incidents-queue.md) -- [View and organize the Incidents queue](view-incidents-queue.md) -- [Investigate incidents](investigate-incidents-windows-defender-advanced-threat-protection.md) From 321ad9abe983577ec543f5c2495b445f16fb2b84 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 9 Oct 2018 16:07:59 +0000 Subject: [PATCH 043/138] Deleted investigate-incidents-windows-defender-advanced-threat-protection.md --- ...ows-defender-advanced-threat-protection.md | 78 ------------------- 1 file changed, 78 deletions(-) delete mode 100644 windows/security/threat-protection/windows-defender-atp/investigate-incidents-windows-defender-advanced-threat-protection.md diff --git a/windows/security/threat-protection/windows-defender-atp/investigate-incidents-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/investigate-incidents-windows-defender-advanced-threat-protection.md deleted file mode 100644 index 596bd63508..0000000000 --- a/windows/security/threat-protection/windows-defender-atp/investigate-incidents-windows-defender-advanced-threat-protection.md +++ /dev/null @@ -1,78 +0,0 @@ ---- -title: Investigate incidents in Windows Defender ATP -description: See associated alerts, manage the incident, and see alert metadata to help you investigate an incident -keywords: investigate, incident, alerts, metadata, risk, detection source, affected machines, patterns, correlation -search.product: eADQiWindows 10XVcnh -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.author: macapara -author: mjcaparas -ms.localizationpriority: medium -ms.date: 10/08/2018 ---- - -# Investigate incidents in Windows Defender ATP - -**Applies to:** -- Windows Defender Advanced Threat Protection (Windows Defender ATP) - -[!include[Prerelease information](prerelease.md)] - -Investigate incidents that affect your network, understand what they mean, and collate evidence to resolve them. - -## Analyze incident details -Click an incident to see the **Incident pane**. Select **Open incident page** to see the incident details and related information (alerts, machines, investigations, evidence, graph). - -![Image of incident details](images/atp-incident-details.png) - -### Alerts -You can investigate the alerts and see how they were linked together in an incident. -Alerts are grouped into incidents based on the following reasons: -- Automated investigation - The automated investigation triggered the linked alert while investigating the original alert -- File characteristics - The files associated with the alert have similar characteristics -- Manual association - A user manually linked the alerts -- Proximate time - The alerts were triggered on the same machine within a certain timeframe -- Same file - The files associated with the alert are exactly the same - -![Image of alerts tab in incident page showing the Linked by tool tip](images/atp-incidents-alerts-tooltip.png) - -![Image of alerts tab with incident details page showing the reasons the alerts were linked together in that incident](images/atp-incidents-alerts-reason.png) - -You can also manage an alert and see alert metadata along with other information. For more information, see [Investigate alerts](investigate-alerts-windows-defender-advanced-threat-protection.md). - -### Machines -You can also investigate the machines that are part of, or related to, a given incident. For more information, see [Investigate machines](investigate-machines-windows-defender-advanced-threat-protection.md). - -![Image of machines tab in incident details page](images/atp-incident-machine-tab.png) - -### Investigations -Select **Investigations** to see all the automatic investigations launched by the system in response to the incident alerts. - -![Image of investigations tab in incident details page](images/atp-incident-investigations-tab.png) - -## Going through the evidence -Windows Defender Advanced Threat Protection automatically investigates all the incidents' supported events and suspicious entities in the alerts, providing you with auto-response and information about the important files, processes, services, and more. This helps quickly detect and block potential threats in the incident. -Each of the analyzed entities will be marked as infected, remediated, or suspicious. - -![Image of evidence tab in incident details page](images/atp-incident-evidence-tab.png) - -## Visualizing associated cybersecurity threats -Windows Defender Advanced Threat Protection aggregates the threat information into an incident so you can see the patterns and correlations coming in from various data points. You can view such correlation through the incident graph. - -### Incident graph -The **Graph** tells the story of the cybersecurity attack. For example, it shows you what was the entry point, which indicator of compromise or activity was observed on which machine. etc. - -![Image of the incident graph](images/atp-incident-graph-tab.png) - -You can click the circles on the incident graph to view the details of the malicious files, associated file detections, how many instances has there been worldwide, whether it’s been observed in your organization, if so, how many instances. - -![Image of indcident details](images/atp-incident-graph-details.png) - -## Related topics -- [Incidents queue](incidents-queue.md) -- [View and organize the Incidents queue](view-incidents-queue.md) -- [Manage incidents](manage-incidents-windows-defender-advanced-threat-protection.md) - - From 379d91ed8984a78fd9b7ebcef4879bf72d309454 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 9 Oct 2018 16:09:29 +0000 Subject: [PATCH 044/138] Updated preview-windows-defender-advanced-threat-protection.md --- .../preview-windows-defender-advanced-threat-protection.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md index 53f9b9de62..007a810594 100644 --- a/windows/security/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md @@ -41,9 +41,6 @@ The following features are included in the preview release: - [Threat analytics](threat-analytics.md)
Threat Analytics is a set of interactive reports published by the Windows Defender ATP research team as soon as emerging threats and outbreaks are identified. The reports help security operations teams assess impact on their environment and provides recommended actions to contain, increase organizational resilience, and prevent specific threats. -- [Incidents](incidents-queue.md)
-Windows Defender ATP applies correlation analytics and aggregates all related alerts and investigations into an incident. Doing so helps narrate a broader story of an attack, thus providing you with the right visuals (upgraded incident graph) and data representations to understand and deal with complex cross-entity threats to your organization's network. - - [Custom detection](overview-custom-detections.md)
With custom detections, you can create custom queries to monitor events for any kind of behavior such as suspicious or emerging threats. This can be done by leveraging the power of Advanced hunting through the creation of custom detection rules. From b063c09889aa90191a95dbf3b1f698ef86f67f6d Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 09:15:24 -0700 Subject: [PATCH 045/138] added the emie compatibility file back to the TOC --- .openpublishing.redirection.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index d1f63f2bf2..3368ac7296 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -8,7 +8,7 @@ { "source_path": "browsers/edge/emie-to-improve-compatibility.md", "redirect_url": "https://docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/interoperability-enterprise-guidance-gp", -"redirect_document_id": true +"redirect_document_id": false }, { "source_path": "windows/deployment/update/windows-update-sources.md", From 0945a8057c3132cffe5be53ac7ec9a5b12e78b59 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 09:30:43 -0700 Subject: [PATCH 046/138] added the emie compatibility file back to the TOC --- .openpublishing.redirection.json | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 3368ac7296..c2fc8e0e73 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -3,12 +3,7 @@ { "source_path": "browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md", "redirect_url": "https://docs.microsoft.com/en-us/microsoft-edge/deploy/emie-to-improve-compatibility", -"redirect_document_id": false -}, -{ -"source_path": "browsers/edge/emie-to-improve-compatibility.md", -"redirect_url": "https://docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/interoperability-enterprise-guidance-gp", -"redirect_document_id": false +"redirect_document_id": true }, { "source_path": "windows/deployment/update/windows-update-sources.md", From 7da5bf9af987052b24b9bd57df204e0de816e881 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 10:08:43 -0700 Subject: [PATCH 047/138] added the emie compatibility file back to the TOC --- browsers/edge/emie-to-improve-compatibility.md | 2 +- .../images/microsoft-edge-infographic-sm.png | Bin 0 -> 13171 bytes .../edge/img-microsoft-edge-infographic-lg.md | 11 +++++++++++ 3 files changed, 12 insertions(+), 1 deletion(-) create mode 100644 browsers/edge/images/microsoft-edge-infographic-sm.png create mode 100644 browsers/edge/img-microsoft-edge-infographic-lg.md diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md index 7649fe1405..db717b5c39 100644 --- a/browsers/edge/emie-to-improve-compatibility.md +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -10,7 +10,7 @@ ms.sitesec: library ms.pagetype: appcompat title: Use Enterprise Mode to improve compatibility (Microsoft Edge for IT Pros) ms.localizationpriority: high -ms.date: 07/27/2017 +ms.date: 10/09/2018 --- # Use Enterprise Mode to improve compatibility diff --git a/browsers/edge/images/microsoft-edge-infographic-sm.png b/browsers/edge/images/microsoft-edge-infographic-sm.png new file mode 100644 index 0000000000000000000000000000000000000000..1794540e5c53bf2bbf2688cedb3388458ce4dd36 GIT binary patch literal 13171 zcmV-(GmOlMP)Px#1ZP1_K>z@;j|==^1poj532;bRa{vGf5&!@T5&_cPe*6Fc02y>eSaefwW^{L9 za%BK;VQFr3E^cLXAT%y8E-^Ag1Z(U705aoAL_t(|UhSO+bd*VU?|t4m&(HS8=d`=t zXnXy3-+G_D_IlTwCNMKhU^2sy1|*`$LyjUx2?PQO2?c_3Mku13bIuY%Ip@yZ%FO$H zUElPynud`WW`n)=+*91Dx|RNQ>(>3gZZ&`M(I08n^hdDfKz{^l4)oswtYM9MNUb!C zkIDHbB}=f%8{2-eV*h^u_KnYym-Nv`=OX>Ph6l@A8=LyN`c;a`wkFc*_U7)9q1w*Y z_QAg9zV3TH9hB5{wpFz^*LSs(Rq3^I`;W;Ith}nmKl{y!{{sBy&#d&ilPVVF92;8L zSa&GEb8>phJ0<2qR8Vwrj!S%aNN%cUax{3I47=5<7!J%%E^BG@&r0;qN^(z(RO@x3 zxrzSEf(8HiZ&tX3Ca@@vq$s6M3lKFOEh$wcz8ML@IVt{`iGG<0$QWAQy_$yZ_Mn`U z>W-H9vVxmw@j=U%j-Jl(EnGL>+Pu{`zYhzWwIr zznZ`HYp>XS^Yx7gr2qTHHQ#(fJpiwV@MQq5q8q8|eR; z^+&(^))vaY^1|w!&c5GzV-wS02qyN;*EfB6-YWE|Md!8cXP;Sr%=Wn3FV`Fvke&CB zk=OQ_$+~4-3XJ>W^R}TWc~?U2hNa|#9fiK}nOiU1JbmN#F|RQ1sMM9mu12I4`ov|% z=9HegaoaCG%QG@%=Oy3htdbki=`4vR?;p7I^0qS<{9|CZ@Wl7_Ukpshxpq7Gojn)k zZ93r_m-*_4XDJ6qQjonGp6C;sal|8Zm$RQoWD2bu{i5B%lj!;IwU8G#p8`SG&;%MX zCHL?o4w_5oT?S1mtUTv)XU(Z=M?FIs@$VLF{OSv<1z7OO8@J`QQ--+_`8&6f|3)w9;k5QP(>pL76+Jf!f zL*x~H2KvMHS-)B_p^(w1Q<1^fLI6Ls2{w)lM%`O^~>wfhp|~)(hHkTQcjkt*)ujc z{TcAG0@nXqw&%>v$n$>Dp+;AQ8@?5rQPJ3j`#9_o!YN=G+b-O6^o`=^#pjlNc<~k< z2Xp`wm-K^0J2(i}qtf2oO}I<2?{ue|8MC8vNG91Wi9dUP69oX6u{ zVYH3OF5wzEc|C%0Z>JXu-9>#-Z4|2ji8vq>g)s+nx2KaL*NgP$NYj7yEB3_CI5H zj5`~DboSOAR(Q-aEG#vD)d{z4PB$?hqZKRh$p=(pjs-r9Zs-F;3L zg^yw`5Kg5<;ZtWWqVb7IdCjvXORx%R?&E0w&>25yQSvZj(R0Pi60AScW5^OL)o6ER z@9moY=%>ilvtWxRpA%aQ`Y;Q%vhE=LghEEdj4Z+G)zl2>n-Tg)RD(*j)-bBj=+rvH zkW!=4>h+^zn65@=;2&hl2Ni0qezd)BsI6y^VoLO*;{ziql%?kSQH|a(HZe&ndY~Z+ zJwu9??g6TlT0Kn3z4jhz(eD{l&~S8oqN8s}>RhQ-YINO$BRaz<Z<8sTn-AUte${N~xk_xN1#ba~I!qWeH5}Q8qhCoXt|SFoL}9TTvQ#ERT7_99-UoU-`1U8 zQhO((I507nq0>ui>AbYQrMRw{K2dA#>d!2%NABz&W)7$o)ipDdnCw!91JLTG4!UjX z>ZAXt%o3Wj0rVW4oOdH8J*T1pyb|&&8T58~QCMmL6Jvp7Yg@YR=2uX7zf%Ti&R{Vo z3M#m_`2zrN<*hO3KAd6}0>L+E3XhK^SKy!?c-5XG-xvlSa z^b)VJr8FE?X<;k{b6`sWhz@B^huAU}Op4WFCKxOog7~mXgTPoA0{YB^Q82fvrVfS> z4XI-YCQr}py+i0Dh!h>npV8}DyHI9(M2DoXSiYb+gVj5v$SkWTk`UXQQdFH$TFWHT zN@|%XTM?gI&T)|Txu7zqvLUmqj%|lgX6Mnzj#7)OdDv#tFdr7#H84zXck?Pb`iDYN z^08L>XY<)xVKUezwHO^HLq8ZPZ2?j0u(%p!0#S?JWdK-d;! z7JyU0YQU65qQhP>33RY8YQYg#!jr|5g?}cRn0)f)_y<|~G_uf~GgwWXeVm$z^g{ea z`8~<7*=;rlkH8*cS#h~#xCv~EO-nASDr;!XD6PWk@-Wf7{g zXNA7oqU3kZlhZRkn;4(cD-0d8=emKrbRsu4BTKMGCspA3ht4(qF_pa$9mgUN)A z^#cjr>WVq>InJ9JxfyF~AmsdG=$t?*V~N!EF0=p5s<`@%HOIVxRJbe9sf(dGL6VVYebngihy z-^!76&cteOWa+l}tABG&Y0g^%)PqX>^pn0J`JIy$u-?3)Iv1ziAFeqOrS(Xc&^Z*L zq3~*|4hG7jcQmVRs1HVHjznsJ=4_nyc$C&HO?T{$_GY%u@ve4Hs0Mu3-LeD={=iG! z)~}zM;}xmUKd9`SoD)}fO;&e5A>Zq>K0Pa7J?o%+<)Vs(z2~NycU}oPuQ{t0II9re zaaDoZ{ENy(?y46rNL8e$%{S`LlHYb!{L54QUwilLFV@%-oynszgzCs{@YQ%_jcyCn z9*ofK3em2*p*b6`KM}3>%pAR(Vz9X`)t-yjyJr}725XN+>5kmdos7|6NYo#X)}K$% zZw=HsCg}0eAw^?!B8GtH0M;Tm)h0hR)3Uv;UVKeue_OLPK(jkUv(j6=%u~JIN4@@* z`b4z$4WojcubMNsEl^_`X_ox!vm@VL=Kh2CcGS0a%L6}}Okib5)Yie*rhZDmx*WA>6;H6o8^OGf@ zCJ#K5tbi3;u8A$zVk|Lbnz(YE5G+b!%P=mvaY#6D7oWnD}% zfS0(GDcKXoDKVgMB1Vse0<`Gd#B%^^e0+R#baZTNObC!giG}demQ&AfJn;lP&zL@I zcZ?n?@3+gtTO)Iywcba=A$rkC@{&NX(N9Z>ov&25JxG$VDGJy5XqJ1bu^Lgk$XyMx zl&`&|*%ziG1xiv-rq0 z`!d>(6%UzsPg<)G_GPpkFBv|N)wwsV6#=}`d!$bmEXV{FPKssIF-SE=Mjqzx+{xQrA?2PwptL%{kdX{6Qg_my!%bt>_cVqA7-e z=KvN@A-`B{4=&$)eWQCsa^J8LD{JiNJ?IwnrRQuZKjaoHt3HbiJ=8qAB zC2=f=H?VLFOZ3efg>RRRNoEzNr%7n>7!N%JZr}xWVq6Qd1na?r2mkQSR=^5M%q6SQ z8`hk<_SWw6$GpOX!j|(lsNL*%U1T3c`1Ld83ReEs<*3)4Zohca|D{s_^G^q^3oU-l zF>HNU$&07_SNLSTbUNVK!#Cb?j>71cc%=xi&Q&NZf{E06>CipQI2zp0^CCTO6wXO0 z54MtUUQ#fXW0eR(S+G=c-mJ;TkKb?360GK~ez3r)i&p~q)r}h+yzgWbm(;fig`A28 z6n^r-K9PMCwWue=%7x(^%IQ9s(~T(|&hN9&>#@)4J(%5fv~U0cK9t)-)&9&5(FE?& z&G;6=qrm!{c(z~_)i!~}KfJR|WT&R5PhOAs@zULgugPCC;sE0Kfg-ER@KcNg*EqMvP<9G<*3j|t|YUp9)*8hzSpS!Nb;^% zi)C})!5`jj;08q4ez##;TpgF=u9W7TiH&>H+dho1KakyJf=O`c;EYck%)#Q+xThQN zEXdq$*D?&tz0~*}9-(=DUg)OAJ&9NIsO`1Q-P1B&?lMwtM!Y!D(@Ntj8cIl)dZ<6}(h!#cC<+^VrPngF+G_SDOYm&L zf==Iz1deaLzR~o-U&F^jWJVEJAz@e9y;hY;^kJM3kBKnap zEaw0g2k<{^4uaR$Ua`9r7}we(edDF_e*2C~K3{m&hVlj5&!H9)5&}|=j*f|miKK&r zgQ7VU*RC@yd()lD4Y$j<1ch1IMU>*9Hb$23N@;qOWjR(TL>%uHner#UUIG7R(@D}F z?Z~uP6$WB+U3xpZEl>+IfC7BGL$w$bcu|NoiFa7o6fnK#rY2IQ3al5oTlt7U@B-&q zg9Y^tD}S~22)J0~@4x#YIvyS#;o;#eEiD|A($dnZsw&YIa;f>`nHg&WCeqbG1-N!R zI>HjKWTJMHjs?ee$Z^)jPJdRbfG3gtx|jr3skC~F4@V~^CZeOG z!@|NE8ygD?3$Zd2SjB^*rj^6QQ#>AW;s~P%rgkMa5nhoJc41tkM+ygsvrPJVeey@a zIIIPGoW8$gw_jpzXjMg|TG!oHlGoDiIyoyD~nF!MFT z#yb^jLJB#Fs{-;cD_pyce-0^Tg{|3zmzu|-ciMEOJxMOE`5(`$ycw7E=P#@=39mWS zV@;otxiKx!S>Yw!7$zq2kS8&do)E0a$VdTJa&oc|AhlXOKK0;q*(XTB96AE4Ez#95 z0PRj`Hm^13#7^v2?jLfENXDuEaQVKs_FtN}?d;Fi9VHu)Su9t722vRw;OR_AakuKn zXPlcy(Pss#qM|}r76e%JW^mNBg$kEpaSytvkaqq0lo>d#CQQy*POG<1&4 z;fohf2-bg3vIMJRMEa7;pk`V-_F!!CL61@bzI8}?8~1R^woFccG_0Lgk3L|dx)qO8 zrWPHA?g1`?R$@yZrOddDjwbq3(;syV&td;RKeA$3xIv*Y#6=Wm?38M)@vwRiV9UGR_DbH$(d zdHW?Fo8xXyGUS_Y>X`UwhS#czgF{fAlw;^G4YqRA!|h_(CJ2B-WCb)rHr7al zEV2sa@UUWFW-498X@qeb(pB+S49O?XLjSA@^X?WrwdE_6P;6b3Rf3xbQ=s zLr``LPXbB_U&kBv*Fv0w?3e>h9}moKgP>Ig|VoX~VEuJMpLOoD5A?i#_75g|nuf{=v(8MUNr`(RZ_jop%SbNlmNbH=_7 zTn)My7Y!LN+02EK_w1)`Zq&|#Sx8b+6PBm=LS|t z&AOnP)#mFIj9HoFpqe!%`BCg!J|kPz6%Pcnw5iU)`p}w9E}6EkA6~h@{^{@=hgWYp z=e5Prdkfym!E4hwPg1f%7FC-ay|-4DVzg^ZFOkwRn4Az9vox5vuE?zRRUA{KE{cN`1vN;?k$sAEi z0~}sxqJUeWW)B@#sjzOKa9DzFaExLME%yd`-gC3&S{c6bIY*>IFEc= z_Z-`cDYgegY$(UaUCWbdO<+}bOP2NU%mg7Tl*)mDf%f+Hu)LwzGFA7$Csnd!lttFG z&JpDhcWzC0;=SJNfsrnw)+cI$gluX8F;GWGM^K(Jx1QV9sAQ%l!!eVrgT+!=v%_7R zojx|_6Kxz4Y&Z_EV}i}uILV7qbt+ntosw-y9TROXB-y&>eu9ft1}rffL8h4rxu{XO z(pwdhQde49`hj~NPq{BSDX*m}M~q8B4MI({5~NU!l(dJ1)onBlfpf@ixi+NeGgq^a z8{7J;tE(9W5}&FrysEleKBH$Dj+tZ$){wr5Avr;3<85~P+Z>CuITUKcWp^aP=47-a zvNN>7qF@)flh6CXBvD%D*Li0ynb{a{^t8Qy=8yX%=t2a0& zYv(&jkoo6)vU4&VGs!ww4|713Wyuq;39OlGR`w04-gcF~{ZrgJIyp6AVvS+^L*w_L z!wMud(Mk|bihL2(v_kltL3Ut6Z#NxeTRD9dFg8)%>y$AY8x8E zxY(+S7P*NG$4r_nSWks3yJE$pjgyxM84ApkEXXHUXTAWzLz?mV7nO_M@n$pdC5@`z zb1i+@DgT8RqZZqI_~HipR}Oo=z2(HKu1QO87Oe=XUe*8c0|R6nM|nD0vY@Pc28&VP z;#LDy_7RdA`Z63d>9-12Rd=kIifPRvyFXM~!+?4`sn)>h%eprjQKC03vplT)@io;OSL6pT8IGA`9W1sbtZq|y-KNmm4Z$^QDeuvmadB`H`MivQFt{?`aHF~ zS#D))t?C-8r$e8TmGbDR%K*+LaVc4!;+5XHA5dsAWK%0{3_D*neO^k^G0OF9Jp%18omdKkFc?%5cmi>tH1|9j_gXt?Umcuu5(@eIeNvzfRCZR7JY|rtJ0Y+@$b| zP@b#PDaDo>fViJHOA58ZC6`ZE=3LPk4Kz%}d;!q@Pz7-Gsm3$!jRqI$i9toSUz!W>uz zYSKE4Wb8nBxAB;%=MT>;*nIreC3f>XvzCjJklOX;0fcCBGD;e#u-S^ws_Y!4>R_0p z$;4zhW|AdX!$zc;Q0m4v`bi(MM-+?*eMmH6 zJx%?E0vC9x-Ml61=l%4jKfMt7z9=bb4-{&~Msll)7AZPe=%(r%md>4tdzE8LJfyGZ z7Bt8M$#Bf1M}U2#($kAL-of39vbSM|y|>Ccpv$WR4yRL|Ygd$CL6iu@a61 zt~>+rBy==FipUNI+wfe8&tlS&MSW~jVrEc5gA{@?-6MB2oIWnB8`(PI36MG+qmh+9 zHV`?ZQk8W?1XizN!l(QeatwDnz2TKDd8^E}%LMkalChO(P`_;HGI`~a(j!BMi50aN zu;>NOQlVG6q%1ULIA)S{u%0>#H(b^kDNV;nV$EV^LauC4t-mFqV`7$cBSVVc(J^l# zWRbz7qw`7^+k;h0I5VClzIwcW{e zy(x7)DYZSxFhX5#sw8(yOqIDTXU){&?;SNw{qDUJ_xlQ(`U|8Nr+o#zLoMdZ7G#op z2L=h=IVoWU%79!|YPG6=NYqG#nnf$Rf`*m-$U}-=?nmMYqm~slA&bJ!p1#3hWpb6$ zJ6-9Wp-QS$;s+peH5rbXWC_;v^t5PT>KYQV#gLFu%Ti6D9L{QW1F3|@lfw$>QP`@Q zaS4)5mDe|UMkZekOZficUH`OX_r<{2DSs^xmBxAdt3^NyBHW_Qd>YAqwVI)hqdg_=&MGa)5N$j-s>uk3XE zKTG%g+ba9{I~;z#{@8O{&-`SS{ZH2%M*jJ_qyJ)i2!3JP*}s2(=P&J!(P~i9eKC6R z@tf}wd>+02j&t0SlfLg>ieBs#_5PWl_b5bm3|r(FvB)D+x*P{aq=H_ch(cMxJT;c1gQobr&#D@bF=>-cNq|XU#r@;r-G9Gm=g-z1{qf2J-+p&H z%lL=)cd?}ZyL{g_-`V!V<@;RS&1=pou=MtSUeg6BDe~gcNJI91{QRmecI&PuCn_ zW0^YEG;iCPmv=fMn}5*(#ZD(HE;Xt?8?7ywH2bZ6%J^I|1(?It8)-wq3iyxl*pU>IO7A)P^gVS;P z)3G`uTNQ--_>zaKJ{IEir=rz_m2vi|PvZ4ZM* ztHF^TLWCOyD`141g)6W!mxQI55)V2UnrHTM@4OFg70YiRuq+1p&88DrE(873(mh{) za|;78$`6&xx0Ls5<)P>*8v7f;k+I=Z}3> zuY2mUvqA4+Qy3BUB{?tecg_SZJmtSo_$hPlAMT{pD?1%t-|K|i!l2j*tm)s^9LCT% zm~ZU8h}*&^ic$V_mLIYTuxziZH~6aGcUNr>(k%6m(`C}19IH3`sWDOej& zwl1W`jwd$3$UI2WYQ+gR+}0xd%cQ^BaQx*R4$F>ReRY>3*UM|W&%eIs!hftejB&v~ zUa?<>VsXZbTDtC3jP`bk{!Xbrp~?_hs`t&+#Z~HEQgr9ywElTIqV2P>S{_6% zC2E&@s(AqR%hT-$(nOW%?^fw|g=ns4NxvR)B1*eEM05VGl`na&ywM(Cd!?=`lWk`) zf=n{LNn{aBvav=YWQ*+V)l9MwAfwidtPICYvJTdgYpO-=s?GlDw_T(^k@~<>`di19 z-jX%F>ni<`8Cle@j(1#DuU?XVHw5#c6{bg%548R6=do`2EL6DH9BeJ&;03l#RcwVXp8nS%M|V^bIKs0s9m}!(hsthMiBBqwnn* z)Zdq9@Ow$t!TLR<+}zx#sHm2fmbA3AoSdAhs;bh`(v*}G%JcH_{Qdp!-@l)knMom4 zqEK#WBp&0~W~jNZBrYzlyu7@qsHmx_sivl;#7LARCML$m$J3T>g?8s%w48X zC}>L$BO@bp&T5gVLLM3#qPDNEufM;aTDhf>fJq33F&zpZ%e3jOwY9aOp@D|^`T3M| zbab#TN`$fn%>gXdylvaIlP6D}J$v@_>C*_icI`?^N^)^=Id$rkgM-7KJ$t;oypRta zIusfjdi3bg)YR0qYu7qDI$pkf`ND+@=Z&;)-#%=FlHM;wUOhcM_wL<8hLGtW9EH9)eU8VF4V0xvkVd1y9OR5OY8{&5MiY;vt*vb%BZ|SH zA?#*&cmxY#^Dr@CaTpiYK?$->r=#b=L3D>m2L`0ShBtx5Q2>$R;$jdX1*zKFTBgbo z238IuhEGacp>Ix)1B+p>XV$|GkP6}?wzah}c2jTlg~;vOufKUM;i%i)!&l?&H(q<` zYWyK&c+ai(93r*|`FQXeX2UWdX3y3M8Dh0e3xUOtXa|~mYwEj7wWIQ`if=9p+UO_! z^waiWt@NjuzH>Ogf=poXB+nTX(_nQ>j0vznAhQaPIXw<6jy=l|Uu$7iVv%APyj4v{ z(e9fI-*foU$&huxaV&WCf|K7p8ng--Uh4Fd9oOFy@&@-8m<=<7*f+2iGQ`F*T?8hY zR374$bkZg6KzU1!n1DH0>wPs&iH5_Gy3PJtJKs6~Mx+TW+$fg-hZ^GWa+bL+m=gXT zLFhb+9tRe81eQtHbj0~*VfX^P1~SI~)WK>SXvn{pbhj+9xvy4Cz#J@`SI+&3OG$>j zritn<>wlE-7&3uHOvU8cY)&gfi(m-CwF`k-NGMy-llUxpB%PQVSLug`HT`OXLamp0 zNZls{ctkUx)C~(+p&Q~RwMvtdlR^;Js0EpW<&iqFKV zhQahhN9JI$PryMaL|5E>bV7hiR7rD!0MRW92uzQuq6u(vV>1-!=gyrwetv!-At8l@ zg`{LFD=R4p3=G7J2{o%U+hd431U0r75Wx=XcJAa@{y7GK_%~wN4JIr01c>fCcE3Aeg|C-mQF0=3rr`OFsU6 z(aix*9%r#4tQcY%qGa~;DPVD`Ar2s3fI9*oLEy`gsT$G3!z&%jXx$th^ZWpu8{b03SopSduEOX7mc;_ z>2PpdUNkXA2vX=kTOotEDUA5kHxR@JAd8JN0r6^uK#5D4tB}HqiVC(wR<%YCgGKa% zb5N<3>CH}M-N7UJHo4-_^yy%kmH}jhju4B)+SQ{EYP%$ zpyT?~gU9`l_@{%FmX<~sLds5xM|1oaHV;mP6iIPxW51Q7#BF#wR*xauUYCAA zMJ}B+VMiZ>^&qq5a$v>k*8cL*vGK9-$q{|ey}`7|+8yAP)#_r@u}+p?0XD%N3t&~O zfdfL&Ojaz3vml6L_0+*q86ITcpWp}+j>xkyqjf%-cdtr6<@BE0lY|Z?uv!)QfD%== zS2wQWnZd-madmY4eyZ9Pg`&yBWC<3B4lfQItPt10F=3s+N7nRg0dW#LMy7poM;#ON zVZ~!1#$Oj?=Q$&iTs(F$$#5fQw6RH`%7`!wF z-Ne*%SoN0R%5@JuvObwdg2fXS5f+yY&x7KIEHyujq|sj{>Ez?mfBx= z|Df}t1DC$^{Hpi%UqXhz_x4r{P@J_{9>cqN71yKFedDuQd*omGG$(pUPfzDrH8nLA z8)qis!waH65SNucji#o@11eVCsog!G8uUnXwGY@s3a3@2#Fj+$D+iRXl_cKNBzfi356Y;?H3;hgsm7w@z?>xB&ea_wOt0A+|C08Yphf}M~72q!3H z+|9(~ltQf=H@@PMhc_c`!z}^QJJR`1(hrHrrE@3Z18k?FC&J{~O-C)R7wbL?Semi^;Hve64h@5;Q`6F?+(v%TIFu1sxjLlEPCI7B2?(+T zi<{Nr#1b)L7X-@05I8bYEQ|A4(b$F^y|DS@KG%RfSNwNh_WQ+}!@HdQkWbx+z?!(} zP=l~0afBg^h~9(@VYAp50`57#`hHw)*|pm#R)6R^s(j2VYjl&p);oKY@Io$qBI-~U z$m;yW?OaG?#V-Y0tc<~q0j;P5j4vO<{^D^;{8)NdoU7A zNHMH$6}1mOny%@$@&f16!7?YDy?76Sfjo7v#Q$m8Kccegz3G7mK%O6%13lBKv9Xa7 zk;V5_S65Sl?<1Ald>U!T2gQG*rW+rYi;VPiz%r+?iHU&`RoB1>tLz(A3@O!}(tqx$ zq;N#7HM;2;Lz_l-nH8s4r_%unGLV6?2&BmZI*%M2YPrpm($fda zoQT4RfY@7hp54Z*2+i$?tz*@t|u&P&M80qeB)fk5L<4U!Dn5=G0p&cDj z>xW23CoJ2}l?@ZBS%IZ6ble|K|09nWti0Z`1PkJ61|x57ZpOShM?70_vM_j}2TC|% z)N z6v%k`-x^Yo70cqbBA8+x2;u`6t{9$gh)$6axQWC|6-q>kGCH6}N)u{@Cd6XUfv6&- z96|>ig@PzVATC8lpf~Xbl~nYM&!!(Ch$hU9DjLd@{;iM|u>MGoqCbK)2l^vev!;(e Z`u}}cT4Q8ysGR@+002ovPDHLkV1mSnz=Hq) literal 0 HcmV?d00001 diff --git a/browsers/edge/img-microsoft-edge-infographic-lg.md b/browsers/edge/img-microsoft-edge-infographic-lg.md new file mode 100644 index 0000000000..e9d8b67cc2 --- /dev/null +++ b/browsers/edge/img-microsoft-edge-infographic-lg.md @@ -0,0 +1,11 @@ +--- +description: A full-sized view of the Microsoft Edge infographic. +title: Full-sized view of the Microsoft Edge infographic +ms.date: 11/10/2016 +--- + +Return to: [Browser: Microsoft Edge and Internet Explorer 11](enterprise-guidance-using-microsoft-edge-and-ie11.md)
+Download image: [Total Economic Impact of Microsoft Edge: Infographic](https://www.microsoft.com/en-us/download/details.aspx?id=53892) + +![Full-sized Microsoft Edge infographic](images/img-microsoft-edge-infographic-lg.png) + From 22b6d4230a72f04a1c260a9675360989567b7105 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 10:25:33 -0700 Subject: [PATCH 048/138] added the emie compatibility file back to the TOC --- browsers/edge/emie-to-improve-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md index db717b5c39..d1678cd996 100644 --- a/browsers/edge/emie-to-improve-compatibility.md +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -52,7 +52,7 @@ If you're having trouble deciding whether Microsoft Edge is good for your organi * [Enterprise Mode for Internet Explorer 11 (IE11)](https://go.microsoft.com/fwlink/p/?linkid=618377) - [Download the Enterprise Mode Site List Manager (schema v.2)](https://go.microsoft.com/fwlink/p/?LinkId=716853) - [Download the Enterprise Mode Site List Manager (schema v.1)](https://go.microsoft.com/fwlink/p/?LinkID=394378) -- [Use the Enterprise Mode Site List Manager](../enterprise-mode/use-the-enterprise-mode-site-list-manager.md) +- [Use the Enterprise Mode Site List Manager](../internet-explorer/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager.md) - [Web Application Compatibility Lab Kit for Internet Explorer 11](https://technet.microsoft.com/browser/mt612809.aspx) - [Download Internet Explorer 11](https://go.microsoft.com/fwlink/p/?linkid=290956) - [Microsoft Edge - Deployment Guide for IT Pros](https://technet.microsoft.com/itpro/microsoft-edge/index) From a3eb944210fbdd24375a439112690198b9eb5e1d Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 10:43:04 -0700 Subject: [PATCH 049/138] valid links were in fact valid --- browsers/edge/emie-to-improve-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md index d1678cd996..d4248940b2 100644 --- a/browsers/edge/emie-to-improve-compatibility.md +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -52,7 +52,7 @@ If you're having trouble deciding whether Microsoft Edge is good for your organi * [Enterprise Mode for Internet Explorer 11 (IE11)](https://go.microsoft.com/fwlink/p/?linkid=618377) - [Download the Enterprise Mode Site List Manager (schema v.2)](https://go.microsoft.com/fwlink/p/?LinkId=716853) - [Download the Enterprise Mode Site List Manager (schema v.1)](https://go.microsoft.com/fwlink/p/?LinkID=394378) -- [Use the Enterprise Mode Site List Manager](../internet-explorer/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager.md) +- [Use the Enterprise Mode Site List Manager](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager) - [Web Application Compatibility Lab Kit for Internet Explorer 11](https://technet.microsoft.com/browser/mt612809.aspx) - [Download Internet Explorer 11](https://go.microsoft.com/fwlink/p/?linkid=290956) - [Microsoft Edge - Deployment Guide for IT Pros](https://technet.microsoft.com/itpro/microsoft-edge/index) From 505735163b2d1fd3690f2034c556f5a07c50a810 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 11:10:39 -0700 Subject: [PATCH 050/138] fighting invalid links that are valid --- browsers/edge/emie-to-improve-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md index d4248940b2..b89f29f72e 100644 --- a/browsers/edge/emie-to-improve-compatibility.md +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -3,7 +3,7 @@ description: If you're having problems with Microsoft Edge, this topic tells how ms.assetid: 89c75f7e-35ca-4ca8-96fa-b3b498b53bE4 author: shortpatti ms.author: pashort -ms.manager: elizapo +ms.manager: dougkim ms.prod: browser-edge ms.mktglfcycl: support ms.sitesec: library From eb2b01a7d97f9e773a9a6256acef04e4209fa648 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 9 Oct 2018 11:49:21 -0700 Subject: [PATCH 051/138] fix links in toc --- windows/security/threat-protection/TOC.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 7ff3a5b487..ad433dc3ab 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -131,9 +131,9 @@ ####### [Run antivirus scan API](windows-defender-atp/run-av-scan-windows-defender-advanced-threat-protection.md) ####### [Stop and quarantine file API](windows-defender-atp/stop-quarantine-file-windows-defender-advanced-threat-protection.md) ######Machines Security States -####### [Get MachineSecurityStates collection](get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md) +####### [Get MachineSecurityStates collection](windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md) ######Machine Groups -####### [Get MachineGroups collection](get-machinegroups-collection-windows-defender-advanced-threat-protection.md) +####### [Get MachineGroups collection](windows-defender-atp/get-machinegroups-collection-windows-defender-advanced-threat-protection.md) ######User ####### [Get alert related user information](windows-defender-atp/get-alert-related-user-info-windows-defender-advanced-threat-protection.md) @@ -142,9 +142,9 @@ ####### [Get user related machines](windows-defender-atp/get-user-related-machines-windows-defender-advanced-threat-protection.md) ######Windows updates (KB) info -####### [Get KbInfo collection](get-kbinfo-collection-windows-defender-advanced-threat-protection.md) +####### [Get KbInfo collection](windows-defender-atp/get-kbinfo-collection-windows-defender-advanced-threat-protection.md) ######Common Vulnerabilities and Exposures (CVE) to KB map -####### [Get CVE-KB map](get-cvekbmap-collection-windows-defender-advanced-threat-protection.md) +####### [Get CVE-KB map](windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md) ##### [Managed security service provider support](windows-defender-atp/mssp-support-windows-defender-advanced-threat-protection.md) From aced6553b38064d091e4d15672c6c44b5b32ed3b Mon Sep 17 00:00:00 2001 From: Paramesh Babu Date: Tue, 9 Oct 2018 11:56:15 -0700 Subject: [PATCH 052/138] Add CSPs supported in 1809 --- .../mdm/configuration-service-provider-reference.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 350ea6ad5e..270926b2f3 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2744,11 +2744,15 @@ The following list shows the configuration service providers supported in Window - [DMAcc CSP](dmacc-csp.md) - [DMClient CSP](dmclient-csp.md) - [EnterpriseAppManagement CSP](enterpriseappmanagement-csp.md) +- [HealthAttestation CSP](healthattestation-csp.md) - [Policy CSP](policy-configuration-service-provider.md) - [Provisioning CSP (Provisioning only)](provisioning-csp.md) +- [Reboot CSP](reboot-csp.md) +- [RemoteWipe CSP](remotewipe-csp.md) 1 - [RootCATrustedCertificates CSP](rootcacertificates-csp.md) - [Update CSP](update-csp.md) - [VPNv2 CSP](vpnv2-csp.md) - [WiFi CSP](wifi-csp.md) - + Footnotes: +- 1 - Added in Windows 10, version 1809 From ae70ee5e0c17f1b317e6c0b9f537ccd8b4561d9b Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 9 Oct 2018 14:52:23 -0700 Subject: [PATCH 053/138] removed extra heading 2 title --- browsers/edge/emie-to-improve-compatibility.md | 1 - 1 file changed, 1 deletion(-) diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md index b89f29f72e..f421d94a6d 100644 --- a/browsers/edge/emie-to-improve-compatibility.md +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -22,7 +22,6 @@ If you have specific web sites and apps that have compatibility problems with Mi Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11. -## Interoperability goals [!INCLUDE [interoperability-goals-enterprise-guidance](../includes/interoperability-goals-enterprise-guidance.md)] ## Enterprise guidance From fa7c469d347a97bf4aea6a7b9b9a2bfcb26f2509 Mon Sep 17 00:00:00 2001 From: Richard Finegold Date: Tue, 9 Oct 2018 16:18:39 -0700 Subject: [PATCH 054/138] PS AppvClientConfiguration: spelling, example This fixes the spelling of AppvClientConfiguration and provides a clearer example. --- ...ow-to-modify-client-configuration-by-using-powershell51.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mdop/appv-v5/how-to-modify-client-configuration-by-using-powershell51.md b/mdop/appv-v5/how-to-modify-client-configuration-by-using-powershell51.md index 4bf8017105..af53d695b0 100644 --- a/mdop/appv-v5/how-to-modify-client-configuration-by-using-powershell51.md +++ b/mdop/appv-v5/how-to-modify-client-configuration-by-using-powershell51.md @@ -24,9 +24,9 @@ Use the following procedure to configure the App-V 5.1 client configuration. `$config = Get-AppvClientConfiguration` - `Set-AppcClientConfiguration $config` + `Set-AppvClientConfiguration $config` - `Set-AppcClientConfiguration –Name1 MyConfig –Name2 “xyz”` + `Set-AppvClientConfiguration –AutoLoad 2` **Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). From be1d34b6a1b4e93f1f7d935cb8fb6fa7ff7f0a44 Mon Sep 17 00:00:00 2001 From: Richard Finegold Date: Tue, 9 Oct 2018 16:22:56 -0700 Subject: [PATCH 055/138] PS AppvClientConfiguration: spelling, example (5.0) --- .../how-to-modify-client-configuration-by-using-powershell.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mdop/appv-v5/how-to-modify-client-configuration-by-using-powershell.md b/mdop/appv-v5/how-to-modify-client-configuration-by-using-powershell.md index c6f0c89d68..ded98a3926 100644 --- a/mdop/appv-v5/how-to-modify-client-configuration-by-using-powershell.md +++ b/mdop/appv-v5/how-to-modify-client-configuration-by-using-powershell.md @@ -24,9 +24,9 @@ Use the following procedure to configure the App-V 5.0 client configuration. `$config = Get-AppvClientConfiguration` - `Set-AppcClientConfiguration $config` + `Set-AppvClientConfiguration $config` - `Set-AppcClientConfiguration –Name1 MyConfig –Name2 “xyz”` + `Set-AppvClientConfiguration –AutoLoad 2` **Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issu**e? Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). From 0dd3c40c5cc2627515278193176b855131e5786a Mon Sep 17 00:00:00 2001 From: Richard Finegold Date: Tue, 9 Oct 2018 17:28:13 -0700 Subject: [PATCH 056/138] Fix typo in clientcertificateinstall-csp.md whtether --> whether --- windows/client-management/mdm/clientcertificateinstall-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/clientcertificateinstall-csp.md b/windows/client-management/mdm/clientcertificateinstall-csp.md index a901666530..64ded7b00e 100644 --- a/windows/client-management/mdm/clientcertificateinstall-csp.md +++ b/windows/client-management/mdm/clientcertificateinstall-csp.md @@ -90,7 +90,7 @@ The following image shows the ClientCertificateInstall configuration service pro

Supported operations are Get, Add, and Replace. **ClientCertificateInstall/PFXCertInstall/*UniqueID*/PFXCertPasswordEncryptionType** -

Optional. Used to specify whtether the PFX certificate password is encrypted with the MDM certificate by the MDM server. +

Optional. Used to specify whether the PFX certificate password is encrypted with the MDM certificate by the MDM server.

The data type is int. Valid values: From 33ca7ee1b26938906af8ffe0a2510af5ec6ce561 Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Wed, 10 Oct 2018 02:18:34 -0400 Subject: [PATCH 057/138] typo: Widows -> Windows --- .../hello-for-business/hello-cert-trust-policy-settings.md | 2 +- .../hello-for-business/hello-key-trust-policy-settings.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md index 97f8ceee36..f33d7bbf02 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md @@ -131,7 +131,7 @@ In the Windows 10, version 1703, the PIN complexity Group Policy settings have m ## Review Before you continue with the deployment, validate your deployment progress by reviewing the following items: -* Confirm you authored Group Policy settings using the latest ADMX/ADML files (from the Widows 10 Creators Editions) +* Confirm you authored Group Policy settings using the latest ADMX/ADML files (from the Windows 10 Creators Editions) * Confirm you configured the Enable Windows Hello for Business to the scope that matches your deployment (Computer vs. User) * Confirm you configure the Use Certificate enrollment for on-premises authentication policy setting. * Confirm you configure automatic certificate enrollment to the scope that matches your deployment (Computer vs. User) diff --git a/windows/security/identity-protection/hello-for-business/hello-key-trust-policy-settings.md b/windows/security/identity-protection/hello-for-business/hello-key-trust-policy-settings.md index bbc808feae..f9c8f46088 100644 --- a/windows/security/identity-protection/hello-for-business/hello-key-trust-policy-settings.md +++ b/windows/security/identity-protection/hello-for-business/hello-key-trust-policy-settings.md @@ -104,7 +104,7 @@ In the Windows 10, version 1703, the PIN complexity Group Policy settings have m ## Review Before you continue with the deployment, validate your deployment progress by reviewing the following items: -* Confirm you authored Group Policy settings using the latest ADMX/ADML files (from the Widows 10 Creators Editions) +* Confirm you authored Group Policy settings using the latest ADMX/ADML files (from the Windows 10 Creators Editions) * Confirm you configured the Enable Windows Hello for Business to the scope that matches your deployment (Computer vs. User) * Confirm you configure the Use Certificate enrollment for on-premises authentication policy setting. * Confirm you configure automatic certificate enrollment to the scope that matches your deployment (Computer vs. User) From 370e25b2d907c56fa8be65f5aee14440bbb054d9 Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Wed, 10 Oct 2018 02:22:23 -0400 Subject: [PATCH 058/138] typo: Double word "of" --- ...ap-collection-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md index 4a3d1ffbeb..9a0bbc0992 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/get-cvekbmap-collection-windows-defender-advanced-threat-protection.md @@ -19,7 +19,7 @@ ms.date: 10/07/2018 - Windows Defender Advanced Threat Protection (Windows Defender ATP) -Retrieves a map of of CVE's to KB's and CVE details. +Retrieves a map of CVE's to KB's and CVE details. ## Permissions User needs read permissions. From e33b4fae3dffba7e74db88c36d4cd9bdb0a53bbc Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Wed, 10 Oct 2018 02:23:25 -0400 Subject: [PATCH 059/138] typo: Double word "can" --- ...p-support-windows-defender-advanced-threat-protection.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-mssp-support-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-mssp-support-windows-defender-advanced-threat-protection.md index 82a78124e7..0672d19364 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-mssp-support-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-mssp-support-windows-defender-advanced-threat-protection.md @@ -20,7 +20,7 @@ ms.date: 09/03/2018 >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-mssp-support-abovefoldlink) -[!include[Prereleaseinformation](prerelease.md)] +[!include[Prerelease information](prerelease.md)] You'll need to take the following configuration steps to enable the managed security service provider (MSSP) integration. @@ -58,7 +58,7 @@ This action is taken by the MSSP. It allows MSSPs to fetch alerts using APIs. >[!NOTE] > These set of steps are directed towards the MSSP customer.
-> Access to the portal can can only be done by the MSSP customer. +> Access to the portal can only be done by the MSSP customer. As a MSSP customer, you'll need to take the following configuration steps to grant the MSSP access to Windows Defender Security Center. @@ -269,7 +269,7 @@ You'll need to have **Manage portal system settings** permission to whitelist th You can now download the relevant configuration file for your SIEM and connect to the Windows Defender ATP API. For more information see, [Pull alerts to your SIEM tools](configure-siem-windows-defender-advanced-threat-protection.md). -- In the ArcSight configuration file / Splunk Authentication Properties file you will have to write your application key manually by settings the secret value. +- In the ArcSight configuration file / Splunk Authentication Properties file – you will have to write your application key manually by settings the secret value. - Instead of acquiring a refresh token in the portal, use the script from the previous step to acquire a refresh token (or acquire it by other means). ## Fetch alerts from MSSP customer's tenant using APIs From 298316d785d1e5331d7dc6bff33fe6df50aa4f2d Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Wed, 10 Oct 2018 02:24:20 -0400 Subject: [PATCH 060/138] typo: Double word "and" --- .../security-policy-settings/increase-scheduling-priority.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/security-policy-settings/increase-scheduling-priority.md b/windows/security/threat-protection/security-policy-settings/increase-scheduling-priority.md index 1ae321bd87..83b3cbd192 100644 --- a/windows/security/threat-protection/security-policy-settings/increase-scheduling-priority.md +++ b/windows/security/threat-protection/security-policy-settings/increase-scheduling-priority.md @@ -84,11 +84,11 @@ A user who is assigned this user right could increase the scheduling priority of ### Countermeasure -Verify that only Administrators and and Window Manager/Window Manager Group have the **Increase scheduling priority** user right assigned to them. +Verify that only Administrators and Window Manager/Window Manager Group have the **Increase scheduling priority** user right assigned to them. ### Potential impact -None. Restricting the **Increase scheduling priority** user right to members of the Administrators group and and Window Manager/Window Manager Group is the default configuration. +None. Restricting the **Increase scheduling priority** user right to members of the Administrators group and Window Manager/Window Manager Group is the default configuration. ## Related topics From 79a1a6ed3ebfc1e9efbbc966e34d18bd4bf50d10 Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Wed, 10 Oct 2018 02:25:21 -0400 Subject: [PATCH 061/138] typo: Double word "Enable" --- .../security/threat-protection/intelligence/support-scams.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/intelligence/support-scams.md b/windows/security/threat-protection/intelligence/support-scams.md index 6ba6ba9440..c63043dc53 100644 --- a/windows/security/threat-protection/intelligence/support-scams.md +++ b/windows/security/threat-protection/intelligence/support-scams.md @@ -40,7 +40,7 @@ It is also important to keep the following in mind: * Use [Microsoft Edge](https://www.microsoft.com/windows/microsoft-edge) when browsing the internet. It blocks known support scam sites using Windows Defender SmartScreen (which is also used by Internet Explorer). Furthermore, Microsoft Edge can stop pop-up dialogue loops used by these sites. -* Enable Enable [Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) in Windows 10. It detects and removes known support scam malware. +* Enable [Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) in Windows 10. It detects and removes known support scam malware. ## What to do if information has been given to a tech support person @@ -60,4 +60,4 @@ Help Microsoft stop scammers, whether they claim to be from Microsoft or from an **www.microsoft.com/reportascam** -You can also report any **unsafe website** that you suspect is a phishing website or contains malicious content directly to Microsoft by filling out a [Report an unsafe site form](https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site) or using built in web browser functionality. \ No newline at end of file +You can also report any **unsafe website** that you suspect is a phishing website or contains malicious content directly to Microsoft by filling out a [Report an unsafe site form](https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site) or using built in web browser functionality. From 0cd17c133b099e56993a4eec680295125e623923 Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Wed, 10 Oct 2018 02:27:54 -0400 Subject: [PATCH 062/138] typo: Double word "that" --- ...validate-the-mbam-installation-with-configuration-manager.md | 2 +- windows/client-management/windows-10-mobile-and-mdm.md | 2 +- windows/deployment/update/device-health-using.md | 2 +- .../information-protection/tpm/how-windows-uses-the-tpm.md | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/mdop/mbam-v2/how-to-validate-the-mbam-installation-with-configuration-manager.md b/mdop/mbam-v2/how-to-validate-the-mbam-installation-with-configuration-manager.md index 349e62903b..78e6044a28 100644 --- a/mdop/mbam-v2/how-to-validate-the-mbam-installation-with-configuration-manager.md +++ b/mdop/mbam-v2/how-to-validate-the-mbam-installation-with-configuration-manager.md @@ -51,7 +51,7 @@ After installing Microsoft BitLocker Administration and Monitoring (MBAM) with C To view the configuration baselines with System Center 2012 Configuration Manager: Click the **Assets and Compliance** workspace, **Compliance Settings**, **Configuration Baselines**. -5. Use the Configuration Manager console to confirm that that the following new configuration items are displayed: +5. Use the Configuration Manager console to confirm that the following new configuration items are displayed: - BitLocker Fixed Data Drives Protection diff --git a/windows/client-management/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md index 4349340530..480f8257ed 100644 --- a/windows/client-management/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -1055,7 +1055,7 @@ If you choose to completely wipe a device when lost or when an employee leaves t A better option than wiping the entire device is to use Windows Information Protection to clean corporate-only data from a personal device. As explained in the Apps chapter, all corporate data will be tagged and when the device is unenrolled from your MDM system of your choice, all enterprise encrypted data, apps, settings and profiles will immediately be removed from the device without affecting the employee’s existing personal data. A user can initiate unenrollment via the settings screen or unenrollment action can be taken by IT from within the MDM management console. Unenrollment is a management event and will be reported to the MDM system. -**Corporate device:** You can certainly remotely expire the user’s encryption key in case of device theft, but please remember that that will also make the encrypted data on other Windows devices unreadable for the user. A better approach for retiring a discarded or lost device is to execute a full device wipe. The help desk or device users can initiate a full device wipe. When the wipe is complete, Windows 10 Mobile returns the device to a clean state and restarts the OOBE process. +**Corporate device:** You can certainly remotely expire the user’s encryption key in case of device theft, but please remember that will also make the encrypted data on other Windows devices unreadable for the user. A better approach for retiring a discarded or lost device is to execute a full device wipe. The help desk or device users can initiate a full device wipe. When the wipe is complete, Windows 10 Mobile returns the device to a clean state and restarts the OOBE process. **Settings for personal or corporate device retirement** - **Allow manual MDM unenrollment** Whether users are allowed to delete the workplace account (i.e., unenroll the device from the MDM system) diff --git a/windows/deployment/update/device-health-using.md b/windows/deployment/update/device-health-using.md index 3e28db2683..890e0c33bb 100644 --- a/windows/deployment/update/device-health-using.md +++ b/windows/deployment/update/device-health-using.md @@ -57,7 +57,7 @@ Clicking the header of the Frequently Crashing Devices blade opens a reliability Notice the filters in the left pane; they allow you to filter the crash rate shown to a particular operating system version, device model, or other parameter. >[!NOTE] ->Use caution when interpreting results filtered by model or operating system version. This is very useful for troubleshooting, but might not be accurate for *comparisons* because the crashes displayed could be of different types. The overall goal for working with crash data is to ensure that most devices have the same driver versions and that that version has a low crash rate. +>Use caution when interpreting results filtered by model or operating system version. This is very useful for troubleshooting, but might not be accurate for *comparisons* because the crashes displayed could be of different types. The overall goal for working with crash data is to ensure that most devices have the same driver versions and that the version has a low crash rate. >[!TIP] >Once you've applied a filter (for example setting OSVERSION=1607) you will see the query in the text box change to append the filter (for example, with “(OSVERSION=1607)”). To undo the filter, remove that part of the query in the text box and click the search button to the right of the text box to run the adjusted query.” diff --git a/windows/security/information-protection/tpm/how-windows-uses-the-tpm.md b/windows/security/information-protection/tpm/how-windows-uses-the-tpm.md index 1ff26cb46d..1cc72bd01d 100644 --- a/windows/security/information-protection/tpm/how-windows-uses-the-tpm.md +++ b/windows/security/information-protection/tpm/how-windows-uses-the-tpm.md @@ -75,7 +75,7 @@ The adoption of new authentication technology requires that identity providers a Identity providers have flexibility in how they provision credentials on client devices. For example, an organization might provision only those devices that have a TPM so that the organization knows that a TPM protects the credentials. The ability to distinguish a TPM from malware acting like a TPM requires the following TPM capabilities (see Figure 1): -• **Endorsement key**. The TPM manufacturer can create a special key in the TPM called an *endorsement key*. An endorsement key certificate, signed by the manufacturer, says that the endorsement key is present in a TPM that that manufacturer made. Solutions can use the certificate with the TPM containing the endorsement key to confirm a scenario really involves a TPM from a specific TPM manufacturer (instead of malware acting like a TPM. +• **Endorsement key**. The TPM manufacturer can create a special key in the TPM called an *endorsement key*. An endorsement key certificate, signed by the manufacturer, says that the endorsement key is present in a TPM that the manufacturer made. Solutions can use the certificate with the TPM containing the endorsement key to confirm a scenario really involves a TPM from a specific TPM manufacturer (instead of malware acting like a TPM. • **Attestation identity key**. To protect privacy, most TPM scenarios do not directly use an actual endorsement key. Instead, they use attestation identity keys, and an identity certificate authority (CA) uses the endorsement key and its certificate to prove that one or more attestation identity keys actually exist in a real TPM. The identity CA issues attestation identity key certificates. More than one identity CA will generally see the same endorsement key certificate that can uniquely identify the TPM, but any number of attestation identity key certificates can be created to limit the information shared in other scenarios. From acfa5de7e8b92282a38b6c5546253b386769e0d8 Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Wed, 10 Oct 2018 02:31:17 -0400 Subject: [PATCH 063/138] typo: Double word "indicates" --- .../basic-level-windows-diagnostic-events-and-fields-1703.md | 4 ++-- .../basic-level-windows-diagnostic-events-and-fields-1709.md | 4 ++-- .../basic-level-windows-diagnostic-events-and-fields-1803.md | 4 ++-- .../basic-level-windows-diagnostic-events-and-fields-1809.md | 4 ++-- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1703.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1703.md index 3c72b3297d..01eca368a9 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1703.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1703.md @@ -334,7 +334,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.DecisionApplicationFileRemove -This event indicates Indicates that the DecisionApplicationFile object is no longer present. +This event indicates that the DecisionApplicationFile object is no longer present. This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). @@ -670,7 +670,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.InventoryApplicationFileStartSync -This event indicates indicates that a new set of InventoryApplicationFileAdd events will be sent. +This event indicates that a new set of InventoryApplicationFileAdd events will be sent. This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md index 2a059112f5..31cd1521d6 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md @@ -358,7 +358,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.DecisionApplicationFileRemove -This event indicates Indicates that the DecisionApplicationFile object is no longer present. +This event indicates that the DecisionApplicationFile object is no longer present. This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). @@ -705,7 +705,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.InventoryApplicationFileStartSync -This event indicates indicates that a new set of InventoryApplicationFileAdd events will be sent. +This event indicates that a new set of InventoryApplicationFileAdd events will be sent. This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1803.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1803.md index df5f2eb5b0..f7d3c8537c 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1803.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1803.md @@ -369,7 +369,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.DecisionApplicationFileRemove -This event indicates Indicates that the DecisionApplicationFile object is no longer present. +This event indicates that the DecisionApplicationFile object is no longer present. This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). @@ -701,7 +701,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.InventoryApplicationFileStartSync -This event indicates indicates that a new set of InventoryApplicationFileAdd events will be sent. +This event indicates that a new set of InventoryApplicationFileAdd events will be sent. This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index 0089755870..f840faba43 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -666,7 +666,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.DecisionApplicationFileRemove -This event indicates Indicates that the DecisionApplicationFile object is no longer present. +This event indicates that the DecisionApplicationFile object is no longer present. This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). @@ -1013,7 +1013,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.InventoryApplicationFileStartSync -This event indicates indicates that a new set of InventoryApplicationFileAdd events will be sent. +This event indicates that a new set of InventoryApplicationFileAdd events will be sent. This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). From 2b608242f4dc95c4bb0a6f9bf56c81730de711e5 Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Wed, 10 Oct 2018 02:33:02 -0400 Subject: [PATCH 064/138] typo: Double word "in" --- windows/privacy/windows-personal-data-services-configuration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-personal-data-services-configuration.md b/windows/privacy/windows-personal-data-services-configuration.md index 3743dc7b3b..3dd67f4b7e 100644 --- a/windows/privacy/windows-personal-data-services-configuration.md +++ b/windows/privacy/windows-personal-data-services-configuration.md @@ -123,7 +123,7 @@ This setting determines whether a device shows notifications about Windows diagn ### Configure telemetry opt-in setting user interface -This setting determines whether people can change their own Windows diagnostic data level in in *Start > Settings > Privacy > Diagnostics & feedback*. +This setting determines whether people can change their own Windows diagnostic data level in *Start > Settings > Privacy > Diagnostics & feedback*. #### Group Policy From 673f6dcc8986f5fb43d118f719b4fa4a8df71ce9 Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Wed, 10 Oct 2018 02:34:14 -0400 Subject: [PATCH 065/138] typo: Double word "used" --- .../basic-level-windows-diagnostic-events-and-fields-1703.md | 2 +- .../basic-level-windows-diagnostic-events-and-fields-1709.md | 2 +- .../basic-level-windows-diagnostic-events-and-fields-1803.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1703.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1703.md index 3c72b3297d..e707855390 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1703.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1703.md @@ -4388,7 +4388,7 @@ The following fields are available: - **ReportId** With Windows Update, this is the updateID that is passed to Setup. In media setup, this is the GUID for the install.wim. - **Setup360Extended** Detailed information about the phase/action when the potential failure occurred. - **Setup360Mode** The phase of Setup360. Example: Predownload, Install, Finalize, Rollback. -- **Setup360Result** The result of Setup360. This is an HRESULT error code that can be used used to diagnose errors. +- **Setup360Result** The result of Setup360. This is an HRESULT error code that can be used to diagnose errors. - **Setup360Scenario** The Setup360 flow type. Example: Boot, Media, Update, MCT. - **SetupVersionBuildNumber** The build number of Setup360 (build number of target OS). - **State** The exit state of a Setup360 run. Example: succeeded, failed, blocked, cancelled. diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md index 2a059112f5..11024655eb 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md @@ -4352,7 +4352,7 @@ The following fields are available: - **ReportId** With Windows Update, this is the updateID that is passed to Setup. In media setup, this is the GUID for the install.wim. - **Setup360Extended** Detailed information about the phase/action when the potential failure occurred. - **Setup360Mode** The phase of Setup360. Example: Predownload, Install, Finalize, Rollback. -- **Setup360Result** The result of Setup360. This is an HRESULT error code that can be used used to diagnose errors. +- **Setup360Result** The result of Setup360. This is an HRESULT error code that can be used to diagnose errors. - **Setup360Scenario** The Setup360 flow type. Example: Boot, Media, Update, MCT. - **SetupVersionBuildNumber** The build number of Setup360 (build number of target OS). - **State** The exit state of a Setup360 run. Example: succeeded, failed, blocked, cancelled. diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1803.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1803.md index df5f2eb5b0..f439bd54e5 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1803.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1803.md @@ -4538,7 +4538,7 @@ The following fields are available: - **ReportId** With Windows Update, this is the updateID that is passed to Setup. In media setup, this is the GUID for the install.wim. - **Setup360Extended** Detailed information about the phase/action when the potential failure occurred. - **Setup360Mode** The phase of Setup360. Example: Predownload, Install, Finalize, Rollback. -- **Setup360Result** The result of Setup360. This is an HRESULT error code that can be used used to diagnose errors. +- **Setup360Result** The result of Setup360. This is an HRESULT error code that can be used to diagnose errors. - **Setup360Scenario** The Setup360 flow type. Example: Boot, Media, Update, MCT. - **SetupVersionBuildNumber** The build number of Setup360 (build number of target OS). - **State** The exit state of a Setup360 run. Example: succeeded, failed, blocked, cancelled. From f29fb2d2bdf75f481849a7b1782bfa591462141a Mon Sep 17 00:00:00 2001 From: Richard <9120292+Reisclef@users.noreply.github.com> Date: Wed, 10 Oct 2018 12:37:02 +0100 Subject: [PATCH 066/138] Double word 'the' --- browsers/edge/group-policies/index.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/browsers/edge/group-policies/index.yml b/browsers/edge/group-policies/index.yml index 8be9af2e9d..4d51332890 100644 --- a/browsers/edge/group-policies/index.yml +++ b/browsers/edge/group-policies/index.yml @@ -202,7 +202,7 @@ sections: - href: https://docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/sync-browser-settings-gp - html:

Learn how to you can prevent the "browser" group from syncing and prevent users from turning on the the Sync your Settings toggle.

+ html:

Learn how to you can prevent the "browser" group from syncing and prevent users from turning on the Sync your Settings toggle.

image: @@ -228,4 +228,4 @@ sections: src: https://docs.microsoft.com/media/common/i_policy.svg - title: All group policies \ No newline at end of file + title: All group policies From 4f0bdbfc5e05413c823507538bcc289002f74b3d Mon Sep 17 00:00:00 2001 From: Patti Short Date: Wed, 10 Oct 2018 08:08:45 -0700 Subject: [PATCH 067/138] removed content related to bugs being investigated --- .../edge/microsoft-edge-kiosk-mode-deploy.md | 41 +------------------ 1 file changed, 2 insertions(+), 39 deletions(-) diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index c41106b008..bd0ee52418 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -74,15 +74,13 @@ Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft Ed >[!NOTE] >For other MDM service, check with your provider for instructions. -- **Windows PowerShell.** Best for setting up multiple devices as a kiosk. With this method, you can set up single-app or multi-app assigned access using a PowerShell script. For details, see For details, see [Set up a kiosk or digital sign using Windows PowerShell](https://docs.microsoft.com/en-us/windows/configuration/setup-kiosk-digital-signage#set-up-a-kiosk-or-digital-sign-using-windows-powershell).  -- **Windows Configuration Designer.** Best for setting up multiple kiosk devices. Download and install both the latest version of the [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) and [Windows Configuration Manager](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-install-icd#install-windows-configuration-designer-1). ### Prerequisites - Microsoft Edge on Windows 10, version 1809 (Professional, Enterprise, and Education). -- Configuration and deployment service, such as Windows PowerShell, Microsoft Intune or other MDM service, or Windows Configuration Designer. With these methods, you must have the AppUserModelID (AUMID) to set up Microsoft Edge:

Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge +- Configuration and deployment service, such as Microsoft Intune or other MDM service. With these methods, you must have the AppUserModelID (AUMID) to set up Microsoft Edge:

Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge ### Use Windows Settings @@ -161,41 +159,6 @@ With this method, you can use Microsoft Intune or other MDM services to configur **_Next steps._** Use your new kiosk. Sign in to the device using the user account that you selected to run the kiosk app. -### Use a provisioning package - -With this method, you can use a provisioning package to configure Microsoft Edge kiosk mode in assigned access. After you set up the provisioning package for configuring Microsoft Edge in assigned access, you configure how Microsoft Edge behaves on a kiosk device. - ->[!IMPORTANT] ->If you are using a local account as a kiosk account in Intune or a provisioning package, make sure to sign into this account and then sign out before configuring the assigned access single-app kiosk. - -1. Open Windows Configuration Designer and select **Provision Kiosk devices**. - -2. Name your project, and click **Next**. - -3. [Set up a kiosk](https://docs.microsoft.com/en-us/windows/configuration/kiosk-single-app#set-up-a-kiosk-using-the-kiosk-wizard-in-windows-configuration-designer). - -4. Switch to the advanced editor and navigate to **Runtime settings \> Policies \> Browser** and set the following policies: - - | | | - |---|---| - | **[ConfigureKioskMode](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)**

![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode

**Data type:** Integer

**Allowed values:**

  • **Single-app kiosk experience**
    • **0** - Digital signage and interactive display
    • **1** - InPrivate Public browsing
  • **Multi-app kiosk experience**
    • **0** - Normal Microsoft Edge running in assigned access
    • **1** - InPrivate public browsing with other apps
| - | **[ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)**

![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout

**Data type:** Integer

**Allowed values:**

  • **0** - No idle timer
  • **1-1440 (5 minutes is the default)** - Set reset on idle timer
| - | **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**

![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages

**Data type:** String

**Allowed values:**

Enter one or more URLs, for example,
   \\ | - | **[ConfigureHomeButton](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)**

![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton

**Data type:** Integer

**Allowed values:**

  • **0 (default)** - Not configured. Show home button, and load the default Start page.
  • **1** - Enabled. Show home button and load New Tab page
  • **2** - Enabled. Show home button & set a specific page.
  • **3** - Enabled. Hide the home button.
| - | **[SetHomeButtonURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)**

![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.bing.com | - | **[SetNewTabPageURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)**

![](images/icon-thin-line-computer.png) | Set a custom URL for the New Tab page.

**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL

**Data type:** String

**Allowed values:** Enter a URL, for example, https://www.msn.com | - --- - -5. After you’ve configured the Microsoft Edge kiosk mode policies, including any of the related policies, it’s time to [build the package](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-create-package#build-package). - -6. Click **Finish**.

The wizard closes and takes you back to the Customizations page. - -7. [Apply the provisioning package](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-apply-package) to the device, which you can do during the first-run experience (out-of-box experience or OOBE) and after (runtime). - -**_Congratulations!_** You’ve finished creating your provisioning package for Microsoft Edge kiosk mode. - -**_Next steps._** Use your new kiosk. Sign in to the device using the user account that you selected to run the kiosk app. - --- ## Microsoft Edge kiosk mode policies @@ -302,7 +265,6 @@ Use any of the Microsoft Edge policies listed below to enhance the kiosk experie - **[AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/en-us/windows/client-management/mdm/assignedaccess-csp):** The AssignedAccess configuration service provider (CSP) sets the device to run in kiosk mode. Once the CSP has executed, then the next user login associated with the kiosk mode puts the device into the kiosk mode running the application specified in the CSP configuration. -- **[Create a provisioning page for Windows 10](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-create-package):** Learn to use Windows Configuration Designer (WCD) to create a provisioning package (.ppkg) for configuring devices running Windows 10. The WCD wizard options provide a simple interface to configure desktop, mobile, and kiosk device settings. --- @@ -330,6 +292,7 @@ In the following table, we show you the features available in both Microsoft Edg | End session button | ![Supported](images/148767.png) | ![Supported](images/148767.png)

*In Microsoft Intune, you must create a custom URI to enable. Dedicated UI configuration targeted for 1808.* | | Reset on inactivity | ![Supported](images/148767.png) | ![Supported](images/148767.png) | | Internet Explorer integration (Enterprise Mode site list) | ![Supported](images/148767.png)

*Multi-app mode only* | ![Not supported](images/148766.png) | +| Available in Microsoft Store | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | --- **\*Windows Defender Firewall**

From 3f9eaff0755929fa5cf9070b423f8640a698e014 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Wed, 10 Oct 2018 08:09:34 -0700 Subject: [PATCH 068/138] removed content related to bugs being investigated --- browsers/edge/microsoft-edge-kiosk-mode-deploy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index bd0ee52418..b607ecd61e 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -7,7 +7,7 @@ ms.prod: edge ms.sitesec: library title: Deploy Microsoft Edge kiosk mode ms.localizationpriority: medium -ms.date: 10/09/2018 +ms.date: 10/10/2018 --- # Deploy Microsoft Edge kiosk mode From 4ae1d275aec763e8614bf8fd0d640f70dd9c72f3 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 10 Oct 2018 15:54:54 +0000 Subject: [PATCH 069/138] Merged PR 12018: fix link --- .../windows-10-start-layout-options-and-policies.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/windows-10-start-layout-options-and-policies.md b/windows/configuration/windows-10-start-layout-options-and-policies.md index 00f8037780..b22277a8f5 100644 --- a/windows/configuration/windows-10-start-layout-options-and-policies.md +++ b/windows/configuration/windows-10-start-layout-options-and-policies.md @@ -20,7 +20,7 @@ ms.date: 06/19/2018 - Windows 10 -> **Looking for consumer information?** See [Customize the Start menu](https://windows.microsoft.com/windows-10/getstarted-see-whats-on-the-menu) +> **Looking for consumer information?** [See what's on the Start menu](https://support.microsoft.com/help/17195/windows-10-see-whats-on-the-menu) Organizations might want to deploy a customized Start and taskbar configuration to devices running Windows 10 Pro, Enterprise, or Education. A standard, customized Start layout can be useful on devices that are common to multiple users and devices that are locked down for specialized purposes. Configuring the taskbar allows the organization to pin useful apps for their employees and to remove apps that are pinned by default. From 3f4d65eab8ab15a688260c646d1e59799c30cb63 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 10 Oct 2018 16:07:09 +0000 Subject: [PATCH 070/138] Merged PR 12019: Added new event --- ...ndows-diagnostic-events-and-fields-1709.md | 112 ++++++++++-------- 1 file changed, 63 insertions(+), 49 deletions(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md index 2a059112f5..36829a25a1 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1709.md @@ -9,7 +9,7 @@ ms.pagetype: security localizationpriority: high author: brianlic-msft ms.author: brianlic -ms.date: 09/10/2018 +ms.date: 10/10/2018 --- @@ -28,6 +28,7 @@ Use this article to learn about diagnostic events, grouped by event area, and th You can learn more about Windows functional and diagnostic data through these articles: + - [Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md) - [Windows 10, version 1803 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1803.md) - [Windows 10, version 1703 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md) @@ -76,9 +77,9 @@ The following fields are available: - **SystemProcessorNx** The count of the number of this particular object type present on this device. - **SystemProcessorPrefetchW** The count of SystemProcessorPrefetchW objects present on this machine. - **SystemProcessorSse2** The count of SystemProcessorSse2 objects present on this machine. -- **SystemTouch** The count of SystemTouch objects present on this machine. +- **SystemTouch** The count of the number of this particular object type present on this device. - **SystemWim** The count of SystemWim objects present on this machine. -- **SystemWindowsActivationStatus** The count of SystemWindowsActivationStatus objects present on this machine. +- **SystemWindowsActivationStatus** The count of the number of this particular object type present on this device. - **SystemWlan** The count of the number of this particular object type present on this device. - **Wmdrm_RS1** An ID for the system, calculated by hashing hardware identifiers. - **Wmdrm_RS4** The total Wmdrm objects targeting Windows 10, version 1803 present on this device. @@ -1544,14 +1545,14 @@ This event provides information on about security settings used to help keep Win The following fields are available: - **AvailableSecurityProperties** This field helps to enumerate and report state on the relevant security properties for Device Guard. -- **CGRunning** Credential Guard isolates and hardens key system and user secrets against compromise, helping to minimize the impact and breadth of a Pass the Hash style attack in the event that malicious code is already running via a local or network based vector. This field tells if Credential Guard is running. +- **CGRunning** Is Credential Guard running? - **DGState** This field summarizes the Device Guard state. - **HVCIRunning** Is HVCI running? - **IsSawGuest** Indicates whether the device is running as a Secure Admin Workstation Guest. - **IsSawHost** Indicates whether the device is running as a Secure Admin Workstation Host. - **RequiredSecurityProperties** Describes the required security properties to enable virtualization-based security. -- **SecureBootCapable** Systems that support Secure Boot can have the feature turned off via BIOS. This field tells if the system is capable of running Secure Boot, regardless of the BIOS setting. -- **VBSState** Virtualization-based security (VBS) uses the hypervisor to help protect the kernel and other parts of the operating system. Credential Guard and Hypervisor Code Integrity (HVCI) both depend on VBS to isolate/protect secrets, and kernel-mode code integrity validation. VBS has a tri-state that can be Disabled, Enabled, or Running. +- **SecureBootCapable** Is this device capable of running Secure Boot? +- **VBSState** Is virtualization-based security enabled, disabled, or running? ### Census.Speech @@ -2956,6 +2957,19 @@ The following fields are available: ## Sediment events +### Microsoft.Windows.Sediment.Info.DetailedState + +This event is sent when detailed state information is needed from an update trial run. + +The following fields are available: + +- **Data** Data relevant to the state, such as what percent of disk space the directory takes up. +- **Id** Identifies the trial being run, such as a disk related trial. +- **ReleaseVer** The version of the component. +- **State** The state of the reporting data from the trial, such as the top-level directory analysis. +- **Time** The time the event was fired. + + ### Microsoft.Windows.Sediment.OSRSS.UrlState This event indicates the state the Operating System Remediation System Service (OSRSS) is in while attempting a download from the URL. @@ -3579,14 +3593,14 @@ The following fields are available: - **BIOSVendor** The vendor of the BIOS. - **BiosVersion** The version of the BIOS. - **BundleId** Identifier associated with the specific content bundle; should not be all zeros if the bundleID was found. -- **BundleRepeatFailFlag** Has this particular update bundle previously failed to install? +- **BundleRepeatFailFlag** Indicates whether this particular update bundle previously failed to install. - **BundleRevisionNumber** Identifies the revision number of the content bundle. - **CachedEngineVersion** For self-initiated healing, the version of the SIH engine that is cached on the device. If the SIH engine does not exist, the value is null. - **CallerApplicationName** The name provided by the caller who initiated API calls into the software distribution client. - **ClientVersion** The version number of the software distribution client. - **CSIErrorType** The stage of CBS installation where it failed. -- **CurrentMobileOperator** Mobile operator that device is currently connected to. -- **DeviceModel** What is the device model. +- **CurrentMobileOperator** The mobile operator to which the device is currently connected. +- **DeviceModel** The device model. - **DriverPingBack** Contains information about the previous driver and system state. - **EventInstanceID** A globally unique identifier for event instance. - **EventScenario** Indicates the purpose of sending this event - whether because the software distribution just started installing content, or whether it was cancelled, succeeded, or failed. @@ -3602,21 +3616,21 @@ The following fields are available: - **HardwareId** If this install was for a driver targeted to a particular device model, this ID indicates the model of the device. - **HomeMobileOperator** The mobile operator that the device was originally intended to work with. - **IntentPFNs** Intended application-set metadata for atomic update scenarios. -- **IsDependentSet** Is the driver part of a larger System Hardware/Firmware update? -- **IsFinalOutcomeEvent** Does this event signal the end of the update/upgrade process? -- **IsFirmware** Is this update a firmware update? -- **IsSuccessFailurePostReboot** Did it succeed and then fail after a restart? +- **IsDependentSet** Indicates whether the driver is part of a larger System Hardware/Firmware update. +- **IsFinalOutcomeEvent** Indicates whether this event signals the end of the update/upgrade process. +- **IsFirmware** Indicates whether this update is a firmware update. +- **IsSuccessFailurePostReboot** Indicates whether the update succeeded and then failed after a restart. - **IsWUfBDualScanEnabled** Is Windows Update for Business dual scan enabled on the device? - **IsWUfBEnabled** Indicates whether Windows Update for Business is enabled on the device. -- **MergedUpdate** Was the OS update and a BSP update merged for installation? +- **MergedUpdate** Indicates whether the OS update and a BSP update merged for installation. - **MsiAction** The stage of MSI installation where it failed. - **MsiProductCode** The unique identifier of the MSI installer. - **PackageFullName** The package name of the content being installed. - **PhonePreviewEnabled** Indicates whether a phone was getting preview build, prior to flighting being introduced. -- **ProcessName** The process name of the caller who initiated API calls, in the event where CallerApplicationName was not provided. -- **QualityUpdatePause** Are quality OS updates paused on the device? +- **ProcessName** The process name of the caller who initiated API calls, in the event that CallerApplicationName was not provided. +- **QualityUpdatePause** Indicates whether quality OS updates are paused on the device. - **RelatedCV** The previous Correlation Vector that was used before swapping with a new one -- **RepeatFailFlag** Indicates whether this specific piece of content had previously failed to install. +- **RepeatFailFlag** Indicates whether this specific piece of content previously failed to install. - **RevisionNumber** The revision number of this specific piece of content. - **ServiceGuid** An ID which represents which service the software distribution client is installing content for (Windows Update, Windows Store, etc.). - **Setup360Phase** If the install is for an operating system upgrade, indicates which phase of the upgrade is underway. @@ -3626,8 +3640,8 @@ The following fields are available: - **SystemBIOSMinorRelease** Minor version of the BIOS. - **TargetGroupId** For drivers targeted to a specific device model, this ID indicates the distribution group of devices receiving that driver. - **TargetingVersion** For drivers targeted to a specific device model, this is the version number of the drivers being distributed to the device. -- **TransactionCode** The ID which represents a given MSI installation -- **UpdateId** Unique update ID +- **TransactionCode** The ID that represents a given MSI installation. +- **UpdateId** Unique update ID. - **UpdateID** An identifier associated with the specific piece of content. - **UpdateImportance** Indicates whether a piece of content was marked as Important, Recommended, or Optional. - **UsedSystemVolume** Indicates whether the content was downloaded and then installed from the device's main system storage drive, or an alternate storage drive. @@ -3995,7 +4009,7 @@ The following fields are available: - **ScenarioId** Indicates the update scenario. - **SessionId** Unique value for each update attempt. - **SetupMode** Mode of setup to be launched. -- **UpdateId** Unique ID for each update. +- **UpdateId** Unique ID for each Update. - **UserSession** Indicates whether install was invoked by user actions. @@ -4014,7 +4028,7 @@ The following fields are available: - **CV** Correlation vector. - **DetectorVersion** Most recently run detector version for the current campaign. - **GlobalEventCounter** Client side counter that indicates the ordering of events sent by this user. -- **key1** Interaction data for the UI +- **key1** UI interaction data - **key10** UI interaction data - **key11** UI interaction data - **key12** UI interaction data @@ -4025,7 +4039,7 @@ The following fields are available: - **key17** UI interaction data - **key18** UI interaction data - **key19** UI interaction data -- **key2** Interaction data for the UI +- **key2** UI interaction data - **key20** UI interaction data - **key21** Interaction data for the UI - **key22** UI interaction data @@ -4036,13 +4050,13 @@ The following fields are available: - **key27** UI interaction data - **key28** UI interaction data - **key29** UI interaction data -- **key3** Interaction data for the UI +- **key3** UI interaction data - **key30** UI interaction data -- **key4** Interaction data for the UI +- **key4** UI interaction data - **key5** UI interaction data - **key6** UI interaction data -- **key7** Interaction data for the UI -- **key8** Interaction data for the UI +- **key7** UI interaction data +- **key8** UI interaction data - **key9** UI interaction data - **PackageVersion** Current package version of the update notification. - **schema** UI interaction type. @@ -4194,9 +4208,9 @@ The following fields are available: - **Setup360Extended** Detailed information about the phase or action when the potential failure occurred. - **Setup360Mode** The phase of Setup360. Example: Predownload, Install, Finalize, Rollback. - **Setup360Result** The result of Setup360. This is an HRESULT error code that is used to diagnose errors. -- **Setup360Scenario** The Setup360 flow type. Example: Boot, Media, Update, MCT +- **Setup360Scenario** The Setup360 flow type. Example: Boot, Media, Update, MCT. - **SetupVersionBuildNumber** The build number of Setup360 (build number of target OS). -- **State** Exit state of a Setup360 run. Example: succeeded, failed, blocked, cancelled. +- **State** Exit state of a Setup360 run. Example: succeeded, failed, blocked, cancelled - **TestId** A string to uniquely identify a group of events. - **WuId** Windows Update client ID. @@ -4388,17 +4402,17 @@ This event provides the results from the WaaSMedic engine The following fields are available: - **detectionSummary** Result of each applicable detection that was run. -- **featureAssessmentImpact** WaaS Assessment impact for feature updates. +- **featureAssessmentImpact** Windows as a Service (WaaS) Assessment impact on feature updates - **hrEngineResult** Indicates the WaaSMedic engine operation error codes -- **insufficientSessions** Device not eligible for diagnostics. -- **isManaged** Device is managed for updates. -- **isWUConnected** Device is connected to Windows Update. -- **noMoreActions** No more applicable diagnostics. -- **qualityAssessmentImpact** WaaS Assessment impact for quality updates. +- **insufficientSessions** True, if the device has enough activity to be eligible for update diagnostics. False, if otherwise +- **isManaged** Indicates the device is managed for updates +- **isWUConnected** Indicates the device is connected to Windows Update +- **noMoreActions** All available WaaSMedic diagnostics have run. There are no pending diagnostics and corresponding actions +- **qualityAssessmentImpact** Windows as a Service (WaaS) Assessment impact for quality updates - **remediationSummary** Result of each operation performed on a device to fix an invalid state or configuration that's preventing the device from getting updates. For example, if Windows Update service is turned off, the fix is to turn the it back on. -- **usingBackupFeatureAssessment** Relying on backup feature assessment. -- **usingBackupQualityAssessment** Relying on backup quality assessment. -- **versionString** Version of the WaaSMedic engine. +- **usingBackupFeatureAssessment** The WaaSMedic engine contacts Windows as a Service (WaaS) Assessment to determine whether the device is up-to-date. If WaaS Assessment isn't available, the engine falls back to backup feature assessments, which are determined programmatically on the client +- **usingBackupQualityAssessment** The WaaSMedic engine contacts Windows as a Service (WaaS) Assessment to determine whether the device is up-to-date. If WaaS Assessment isn't available, the engine falls back to backup quality assessments, which are determined programmatically on the client +- **versionString** Installed version of the WaaSMedic engine ## Windows Store events @@ -4667,9 +4681,9 @@ FulfillmentComplete event is fired at the end of an app install or update. We us The following fields are available: - **FailedRetry** Tells us if the retry for an install or update was successful or not. -- **HResult** Resulting HResult error/success code of this call -- **PFN** Package Family Name of the app that being installed or updated -- **ProductId** Product Id of the app that is being updated or installed +- **HResult** The HResult code of the operation. +- **PFN** The Package Family Name of the app that is being installed or updated. +- **ProductId** The product ID of the app that is being updated or installed. ### Microsoft.Windows.StoreAgent.Telemetry.FulfillmentInitiate @@ -5028,14 +5042,14 @@ This event collects information regarding the install phase of the new device ma The following fields are available: -- **errorCode** The error code returned for the current install phase -- **flightId** The unique identifier for each flight -- **objectId** Unique value for each Update Agent mode -- **relatedCV** Correlation vector value generated from the latest scan -- **result** Result of the install phase of update. 0 = Succeeded 1 = Failed, 2 = Cancelled, 3 = Blocked, 4 = BlockCancelled -- **scenarioId** The scenario ID. Example: MobileUpdate, DesktopLanguagePack, DesktopFeatureOnDemand, or DesktopDriverUpdate -- **sessionId** Unique value for each Update Agent mode attempt -- **updateId** Unique ID for each update +- **errorCode** The error code returned for the current install phase. +- **flightId** Unique ID for each flight. +- **objectId** Unique value for each diagnostics session. +- **relatedCV** Correlation vector value generated from the latest USO scan. +- **result** Outcome of the install phase of the update. +- **scenarioId** Indicates the update scenario. +- **sessionId** Unique value for each update session. +- **updateId** Unique ID for each Update. ### Microsoft.Windows.Update.DeviceUpdateAgent.UpdateAgentModeStart @@ -5108,7 +5122,7 @@ The following fields are available: - **interactive** Indicates whether the session was user initiated. - **revisionNumber** Update revision number. - **updateId** Update ID. -- **updateScenarioType** Device ID +- **updateScenarioType** Update Session type - **wuDeviceid** Device ID From e78eba6a3b13455c7b0a9b13f5f4e28121740ea9 Mon Sep 17 00:00:00 2001 From: Patti Short <35278231+shortpatti@users.noreply.github.com> Date: Wed, 10 Oct 2018 10:00:35 -0700 Subject: [PATCH 071/138] Update index.md --- windows/hub/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/hub/index.md b/windows/hub/index.md index 5c25ce59c8..d753d93faa 100644 --- a/windows/hub/index.md +++ b/windows/hub/index.md @@ -70,7 +70,7 @@ The Windows 10 operating system introduces a new way to build, deploy, and servi These improvements focus on maximizing customer involvement in Windows development, simplifying the deployment and servicing of Windows client computers, and leveling out the resources needed to deploy and maintain Windows over time. - [Read more about Windows as a Service](/windows/deployment/update/waas-overview) -- [Read how much space does Windows 10 take](https://www.rahulit.com/how-much-space-does-windows-10-take/) +- [Read how much space does Windows 10 take](https://www.microsoft.com/en-us/windows/windows-10-specifications) ## Related topics [Windows 10 TechCenter](https://go.microsoft.com/fwlink/?LinkId=620009) From c90151d76801a4c80f2ca7a748abae3f8302f557 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Wed, 10 Oct 2018 17:32:12 +0000 Subject: [PATCH 072/138] Updated safety-scanner-download.md Git Issue 1810, added note about portable exe --- .../threat-protection/intelligence/safety-scanner-download.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/intelligence/safety-scanner-download.md b/windows/security/threat-protection/intelligence/safety-scanner-download.md index 907f9c9a3a..6a509aa69d 100644 --- a/windows/security/threat-protection/intelligence/safety-scanner-download.md +++ b/windows/security/threat-protection/intelligence/safety-scanner-download.md @@ -21,6 +21,8 @@ Safety Scanner only scans when manually triggered and is available for use 10 da > **NOTE:** This tool does not replace your antimalware product. For real-time protection with automatic updates, use [Windows Defender Antivirus on Windows 10 and Windows 8](https://www.microsoft.com/en-us/windows/windows-defender) or [Microsoft Security Essentials on Windows 7](https://support.microsoft.com/en-us/help/14210/security-essentials-download). These antimalware products also provide powerful malware removal capabilities. If you are having difficulties removing malware with these products, you can refer to our help on [removing difficult threats](https://www.microsoft.com/en-us/wdsi/help/troubleshooting-infection). +> **NOTE:** Safety scanner is a portable executable and does not appear in the Windows Start menu or as an icon on the desktop. Note where you saved this download. + ## System requirements Safety Scanner helps remove malicious software from computers running Windows 10, Windows 10 Tech Preview, Windows 8.1, Windows 8, Windows 7, Windows Server 2016, Windows Server Tech Preview, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, or Windows Server 2008. Please refer to the [Microsoft Lifecycle Policy](https://support.microsoft.com/en-us/lifecycle). From 9bba984a2a50bebea0251765b38cd887835032d1 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 10 Oct 2018 11:29:20 -0700 Subject: [PATCH 073/138] update downlevel topic --- ...ts-windows-defender-advanced-threat-protection.md | 2 +- ...el-windows-defender-advanced-threat-protection.md | 12 ++++++++++-- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md index a6f0c0497c..9f50187aab 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: security author: mjcaparas ms.localizationpriority: medium -ms.date: 09/06/2018 +ms.date: 10/09/2018 --- # Onboard servers to the Windows Defender ATP service diff --git a/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection.md index 1428a1b310..fc15466da7 100644 --- a/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 06/18/2018 +ms.date: 10/10/2018 --- # Onboard previous versions of Windows @@ -50,7 +50,7 @@ The following steps are required to enable this integration: ### Before you begin Review the following details to verify minimum system requirements: -- Install the [February monthly update rollout](https://support.microsoft.com/help/4074598/windows-7-update-kb4074598) +- Install the [February monthly update rollup](https://support.microsoft.com/help/4074598/windows-7-update-kb4074598) or a later monthly update rollup. >[!NOTE] >Only applicable for Windows 7 SP1 Enterprise and Windows 7 SP1 Pro. @@ -60,6 +60,14 @@ Review the following details to verify minimum system requirements: >[!NOTE] >Only applicable for Windows 7 SP1 Enterprise and Windows 7 SP1 Pro. +- Install either [.NET framework 4.5](https://www.microsoft.com/en-us/download/details.aspx?id=30653) (or later) or [KB3154518](https://support.microsoft.com/en-us/help/3154518/support-for-tls-system-default-versions-included-in-the-net-framework) + + >[NOTE] + >Only applicable for Windows 7 SP1 Enterprise and Windows 7 SP1 Pro. + >Don't install .NET framework 4.0.x, since it will negate the above installation. + + + - Meet the Azure Log Analytics agent minimum system requirements. For more information, see [Collect data from computers in your environment with Log Analytics](https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-concept-hybrid#prerequisites) 1. Download the agent setup file: [Windows 64-bit agent](https://go.microsoft.com/fwlink/?LinkId=828603) or [Windows 32-bit agent](https://go.microsoft.com/fwlink/?LinkId=828604). From 2980e23ac37ca03ff7a77a4a6296c14918347f07 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Oct 2018 12:32:34 -0700 Subject: [PATCH 074/138] fixed linj --- windows/security/information-protection/index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/index.md b/windows/security/information-protection/index.md index 5c7a8d5795..8d7bde1868 100644 --- a/windows/security/information-protection/index.md +++ b/windows/security/information-protection/index.md @@ -6,7 +6,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security author: brianlic-msft -ms.date: 09/17/2018 +ms.date: 10/10/2018 --- # Information protection @@ -16,7 +16,7 @@ Learn more about how to secure documents and other data across your organization | Section | Description | |-|-| | [BitLocker](bitlocker/bitlocker-overview.md)| Provides information about BitLocker, which is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers. | -| [Encrypted Hard Drive](bitlocker/bitlocker-overview.md)| Encrypted Hard Drive uses the rapid encryption that is provided by BitLocker Drive Encryption to enhance data security and management. | +| [Encrypted Hard Drive](encrypted-hard-drive.md)| Encrypted Hard Drive uses the rapid encryption that is provided by BitLocker Drive Encryption to enhance data security and management. | | [Kernel DMA Protection for Thunderbolt™ 3](kernel-dma-protection-for-thunderbolt.md)| Kernel DMA Protection protects PCs against drive-by Direct Memory Access (DMA) attacks using PCI hot plug devices connected to Thunderbolt™ 3 ports. | | [Protect your enterprise data using Windows Information Protection (WIP)](windows-information-protection/protect-enterprise-data-using-wip.md)|Provides info about how to create a Windows Information Protection policy that can help protect against potential corporate data leakage.| | [Secure the Windows 10 boot process](secure-the-windows-10-boot-process.md)| Windows 10 supports features to help prevent rootkits and bootkits from loading during the startup process. | From 9730a695dbb0de35305f8da8d1a2112e7047f87c Mon Sep 17 00:00:00 2001 From: Patti Short Date: Wed, 10 Oct 2018 12:40:28 -0700 Subject: [PATCH 075/138] clarified the gp options --- browsers/edge/available-policies.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 93f763fc07..a4fecd5083 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -26,11 +26,11 @@ Other policy settings in Microsoft Edge include allowing Adobe Flash content to When you edit a Group Policy setting, you have the following configuration options: -• Enabled - writes the policy setting to the registry with a value that enables it. -• Disabled - writes the policy setting to the registry with a value that disables it. -• Not configured leaves the policy setting undefined. Group Policy does not write the policy setting to the registry and has no impact on computers or users. +- **Enabled** - writes the policy setting to the registry with a value that enables it. +- **Disabled** - writes the policy setting to the registry with a value that disables it. +- **Not configured** - leaves the policy setting undefined. Group Policy does not write the policy setting to the registry and has no impact on computers or users. -Some policy settings have additional options you can configure. For example, if you want to set the default search engine, set the Start page, or configure the Enterprise Mode Site List, you would type the URL. +Some policy settings have additional options you can configure. For example, if you want to set the default search engine, set the Start page, or configure the Enterprise Mode Site List, you would type the URL. ## Allow a shared books folder From 5e92af48db205897878d4b6694bac54706c5026e Mon Sep 17 00:00:00 2001 From: Paramesh Babu Date: Wed, 10 Oct 2018 09:59:01 -0700 Subject: [PATCH 076/138] Add missing CSP for IoTCore --- .../mdm/configuration-service-provider-reference.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 270926b2f3..bca3651044 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2750,6 +2750,7 @@ The following list shows the configuration service providers supported in Window - [Reboot CSP](reboot-csp.md) - [RemoteWipe CSP](remotewipe-csp.md) 1 - [RootCATrustedCertificates CSP](rootcacertificates-csp.md) +- [UnifiedWriteFilter CSP](unifiedwritefilter-csp.md) - [Update CSP](update-csp.md) - [VPNv2 CSP](vpnv2-csp.md) - [WiFi CSP](wifi-csp.md) From 370e777ce345d4e97d3058887f7fb471a657d7ad Mon Sep 17 00:00:00 2001 From: Paramesh Babu Date: Wed, 10 Oct 2018 11:03:18 -0700 Subject: [PATCH 077/138] Adding missing CSP - 2 --- .../mdm/configuration-service-provider-reference.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index bca3651044..bac0f13074 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2745,6 +2745,7 @@ The following list shows the configuration service providers supported in Window - [DMClient CSP](dmclient-csp.md) - [EnterpriseAppManagement CSP](enterpriseappmanagement-csp.md) - [HealthAttestation CSP](healthattestation-csp.md) +- [NetworkProxy CSP](networkproxy-csp.md) - [Policy CSP](policy-configuration-service-provider.md) - [Provisioning CSP (Provisioning only)](provisioning-csp.md) - [Reboot CSP](reboot-csp.md) From e2bc79425627ed3b3d6724bb840497325634bd48 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 10 Oct 2018 13:50:13 -0700 Subject: [PATCH 078/138] corrected licensing statement in UR --- windows/deployment/upgrade/upgrade-readiness-get-started.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index e5eab8199a..35d32c83e9 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 09/26/2018 +ms.date: 10/10/2018 ms.localizationpriority: medium --- @@ -45,7 +45,7 @@ Upgrade Readiness is offered as a *solution* which you link to a new or existing 1. Sign in to the [Azure Portal](https://portal.azure.com) with your work or school account or a Microsoft account. If you don't already have an Azure subscription you can create one (including free trial options) through the portal. >[!NOTE] - > Upgrade Readiness is included at no additional cost with Windows 10 [education and enterprise licensing](https://docs.microsoft.com/en-us/windows/deployment/update/device-health-monitor#device-health-licensing). An Azure subscription is required for managing and using Upgrade Readiness, but no Azure charges are expected to accrue to the subscription as a result of using Upgrade Readiness. + > Upgrade Readiness is included at no additional cost with Windows 10 Professional, Education, and Enterprise editions. An Azure subscription is required for managing and using Upgrade Readiness, but no Azure charges are expected to accrue to the subscription as a result of using Upgrade Readiness. 2. In the Azure portal select **Create a resource**, search for "Upgrade Readiness", and then select **Create** on the **Upgrade Readiness** solution. ![Azure portal page highlighting + Create a resource and with Upgrade Readiness selected](../images/UR-Azureportal1.png) From ef0488a4f3a3d35d1bfa96a892e717a698b29bf4 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Oct 2018 14:16:22 -0700 Subject: [PATCH 079/138] edits --- .../how-wip-works-with-labels.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md index d6e203d6de..3786a4bcce 100644 --- a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md +++ b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md @@ -29,7 +29,7 @@ Microsoft information protection technologies include: - [Windows Information Protection (WIP)](protect-enterprise-data-using-wip.md) is built in to Windows 10 and protects data at rest on endpoint devices, and manages apps to protect data in use. -- [Office 365 Information Protection](https://docs.microsoft.com/office365/securitycompliance/office-365-info-protection-for-gdpr-overview) is a solution to classify, protect, and monitor personal data in Office 365 and other Software-as-a-Service (SaaS) apps. +- [Office 365 Information Protection](https://docs.microsoft.com/office365/securitycompliance/office-365-info-protection-for-gdpr-overview) is a solution to classify, protect, and monitor personal data in Office 365 and other first-party or third-party Software-as-a-Service (SaaS) apps. - [Azure Information Protection](https://docs.microsoft.com/azure/information-protection/what-is-information-protection) is a cloud-based solution that can be purchased either standalone or as part of Microsoft 365 Enterprise. It helps an organization classify and protect its documents and emails by applying labels. End users can choose and apply sensitivity labels from a bar that appears below the ribbon in Office apps: @@ -50,7 +50,7 @@ For more information about labels, see [Overview of labels](https://docs.microso ## Use cases -This sections covers how WIP works with sensitivity labels in specific use cases. +This section covers how WIP works with sensitivity labels in specific use cases. ### User downloads from or creates a document on a work site @@ -60,7 +60,7 @@ If the document also has a sensitivity label, which can be Office or PDF files, ### User downloads a confidential Office or PDF document from a personal site -Windows Defender ATP scans for any file that gets modified or created, including files that were created on a personal site. +Windows Defender Advanced Threat Protection (Windows Defender ATP) scans for any file that gets modified or created, including files that were created on a personal site. If the file has a sensitivity label, the corresponding WIP protection gets applied even though the file came from a personal site. For example: @@ -74,7 +74,7 @@ The PDF file doesn't need any work context beyond the sensitivity label. ## Prerequisites - Windows 10, version 1809 -- [Windows Defender Advanced Threat Protection (WDATP)](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection) scans content for a label and applies corresponding WIP protection +- [Windows Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection) scans content for a label and applies corresponding WIP protection - [Sensitivity labels](https://docs.microsoft.com/office365/securitycompliance/labels) need to be configured in the Office 365 Security & Compliance Center - [WIP policy](create-wip-policy-using-intune-azure.md) needs to be applied to endpoint devices. From c4cfb138fc5a5c7e4d7651d7ad626ef51f379def Mon Sep 17 00:00:00 2001 From: karthigb Date: Wed, 10 Oct 2018 15:21:44 -0700 Subject: [PATCH 080/138] Update firewall-csp.md --- windows/client-management/mdm/firewall-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/firewall-csp.md b/windows/client-management/mdm/firewall-csp.md index 4d654c47d2..ae0487cc9c 100644 --- a/windows/client-management/mdm/firewall-csp.md +++ b/windows/client-management/mdm/firewall-csp.md @@ -332,7 +332,7 @@ Sample syncxml to provision the firewall settings to evaluate

Value type is bool. Supported operations are Add, Get, Replace, and Delete.

**FirewallRules/_FirewallRuleName_/LocalUserAuthorizationList** -

Specifies the list of authorized local users for the app container. This is a string in Security Descriptor Definition Language (SDDL) format.

+

Specifies the list of authorized local users for this rule. This is a string in Security Descriptor Definition Language (SDDL) format.

Value type is string. Supported operations are Add, Get, Replace, and Delete.

**FirewallRules/_FirewallRuleName_/Status** From 96f95808bc99de7fafabbc6dc3f13fe624130417 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 10 Oct 2018 15:31:32 -0700 Subject: [PATCH 081/138] edits --- .../windows-information-protection/how-wip-works-with-labels.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md index 3786a4bcce..2c1defabc1 100644 --- a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md +++ b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: security author: justinha ms.localizationpriority: medium -ms.date: 10/04/2018 +ms.date: 10/10/2018 --- # How Windows Information Protection protects files with a sensitivity label From 12c6ca15149e3809212155e951b09c29d8cf6dd8 Mon Sep 17 00:00:00 2001 From: Corey Plett Date: Wed, 10 Oct 2018 23:04:26 +0000 Subject: [PATCH 082/138] Merged PR 12034: Client ownership update --- .../configuration/changes-to-start-policies-in-windows-10.md | 2 +- windows/deployment/windows-autopilot/add-devices.md | 4 ++-- windows/deployment/windows-autopilot/configure-autopilot.md | 4 ++-- .../windows-autopilot/demonstrate-deployment-on-vm.md | 2 +- windows/deployment/windows-autopilot/enrollment-status.md | 4 ++-- windows/deployment/windows-autopilot/profiles.md | 4 ++-- windows/deployment/windows-autopilot/rip-and-replace.md | 4 ++-- windows/deployment/windows-autopilot/self-deploying.md | 4 ++-- windows/deployment/windows-autopilot/troubleshooting.md | 4 ++-- windows/deployment/windows-autopilot/user-driven-aad.md | 4 ++-- windows/deployment/windows-autopilot/user-driven-hybrid.md | 4 ++-- windows/deployment/windows-autopilot/user-driven.md | 4 ++-- windows/deployment/windows-autopilot/windows-10-autopilot.md | 4 ++-- .../windows-autopilot-requirements-configuration.md | 4 ++-- .../windows-autopilot-requirements-licensing.md | 4 ++-- .../windows-autopilot-requirements-network.md | 4 ++-- .../windows-autopilot/windows-autopilot-requirements.md | 4 ++-- .../windows-autopilot/windows-autopilot-reset-local.md | 4 ++-- .../windows-autopilot/windows-autopilot-reset-remote.md | 4 ++-- .../deployment/windows-autopilot/windows-autopilot-reset.md | 4 ++-- .../windows-autopilot/windows-autopilot-scenarios.md | 4 ++-- windows/deployment/windows-autopilot/windows-autopilot.md | 4 ++-- .../windows-information-protection/wip-learning.md | 3 ++- 23 files changed, 44 insertions(+), 43 deletions(-) diff --git a/windows/configuration/changes-to-start-policies-in-windows-10.md b/windows/configuration/changes-to-start-policies-in-windows-10.md index 2317f9ef8e..603ee4e60e 100644 --- a/windows/configuration/changes-to-start-policies-in-windows-10.md +++ b/windows/configuration/changes-to-start-policies-in-windows-10.md @@ -6,7 +6,7 @@ keywords: ["group policy", "start menu", "start screen"] ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library -author: coreyp +author: coreyp-at-msft ms.author: coreyp ms.topic: article ms.localizationpriority: medium diff --git a/windows/deployment/windows-autopilot/add-devices.md b/windows/deployment/windows-autopilot/add-devices.md index d494ef7054..1632f15877 100644 --- a/windows/deployment/windows-autopilot/add-devices.md +++ b/windows/deployment/windows-autopilot/add-devices.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/18 --- diff --git a/windows/deployment/windows-autopilot/configure-autopilot.md b/windows/deployment/windows-autopilot/configure-autopilot.md index 320afb60dd..7bdfb8857c 100644 --- a/windows/deployment/windows-autopilot/configure-autopilot.md +++ b/windows/deployment/windows-autopilot/configure-autopilot.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/18 --- diff --git a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md index ca44b1c9f9..17268284ab 100644 --- a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md +++ b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md @@ -7,7 +7,7 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft +author: greg-lindsay ms.author: greg-lindsay ms.date: 07/13/18 --- diff --git a/windows/deployment/windows-autopilot/enrollment-status.md b/windows/deployment/windows-autopilot/enrollment-status.md index 2f7e82b15e..8577555397 100644 --- a/windows/deployment/windows-autopilot/enrollment-status.md +++ b/windows/deployment/windows-autopilot/enrollment-status.md @@ -8,8 +8,8 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: ms.localizationpriority: medium -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/profiles.md b/windows/deployment/windows-autopilot/profiles.md index 4868e24cd2..4b3d210f36 100644 --- a/windows/deployment/windows-autopilot/profiles.md +++ b/windows/deployment/windows-autopilot/profiles.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/18 --- diff --git a/windows/deployment/windows-autopilot/rip-and-replace.md b/windows/deployment/windows-autopilot/rip-and-replace.md index 0f85771ec9..28a55a5c49 100644 --- a/windows/deployment/windows-autopilot/rip-and-replace.md +++ b/windows/deployment/windows-autopilot/rip-and-replace.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: low ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/self-deploying.md b/windows/deployment/windows-autopilot/self-deploying.md index deba1e8e5e..5e6d1bd137 100644 --- a/windows/deployment/windows-autopilot/self-deploying.md +++ b/windows/deployment/windows-autopilot/self-deploying.md @@ -8,8 +8,8 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: ms.localizationpriority: medium -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/troubleshooting.md b/windows/deployment/windows-autopilot/troubleshooting.md index 2ea0af92da..d03b5ca36e 100644 --- a/windows/deployment/windows-autopilot/troubleshooting.md +++ b/windows/deployment/windows-autopilot/troubleshooting.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/user-driven-aad.md b/windows/deployment/windows-autopilot/user-driven-aad.md index 91d9bbf472..ce4d3c158a 100644 --- a/windows/deployment/windows-autopilot/user-driven-aad.md +++ b/windows/deployment/windows-autopilot/user-driven-aad.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: low ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/user-driven-hybrid.md b/windows/deployment/windows-autopilot/user-driven-hybrid.md index 091783afa4..65cd547243 100644 --- a/windows/deployment/windows-autopilot/user-driven-hybrid.md +++ b/windows/deployment/windows-autopilot/user-driven-hybrid.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: low ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/user-driven.md b/windows/deployment/windows-autopilot/user-driven.md index bb9b722bb6..b3ffeb0cd7 100644 --- a/windows/deployment/windows-autopilot/user-driven.md +++ b/windows/deployment/windows-autopilot/user-driven.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-10-autopilot.md b/windows/deployment/windows-autopilot/windows-10-autopilot.md index 810bdf70be..33f04c305b 100644 --- a/windows/deployment/windows-autopilot/windows-10-autopilot.md +++ b/windows/deployment/windows-autopilot/windows-10-autopilot.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 08/22/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements-configuration.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements-configuration.md index 919b0f5efa..7cdf271f76 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements-configuration.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-requirements-configuration.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing.md index 8cd71d80c3..c14fc72ee3 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: high ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements-network.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements-network.md index 6ed585912e..d44ee7fbfe 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements-network.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-requirements-network.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: high ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md index 1ffd9e4582..237de23838 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-requirements.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-requirements.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: high ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-autopilot-reset-local.md b/windows/deployment/windows-autopilot/windows-autopilot-reset-local.md index b8259e9016..2d8e2d0506 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-reset-local.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-reset-local.md @@ -8,8 +8,8 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: ms.localizationpriority: medium -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-autopilot-reset-remote.md b/windows/deployment/windows-autopilot/windows-autopilot-reset-remote.md index 7efd53c9f0..8b900be698 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-reset-remote.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-reset-remote.md @@ -8,8 +8,8 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: ms.localizationpriority: medium -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-autopilot-reset.md b/windows/deployment/windows-autopilot/windows-autopilot-reset.md index 4417198067..8cd3d090a5 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-reset.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-reset.md @@ -8,8 +8,8 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: ms.localizationpriority: medium -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md b/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md index b832512df1..619ad5926c 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/deployment/windows-autopilot/windows-autopilot.md b/windows/deployment/windows-autopilot/windows-autopilot.md index 39eb571f2a..01cad0042d 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot.md +++ b/windows/deployment/windows-autopilot/windows-autopilot.md @@ -7,8 +7,8 @@ ms.mktglfcycl: deploy ms.localizationpriority: high ms.sitesec: library ms.pagetype: deploy -author: coreyp-at-msft -ms.author: coreyp +author: greg-lindsay +ms.author: greglin ms.date: 06/01/2018 --- diff --git a/windows/security/information-protection/windows-information-protection/wip-learning.md b/windows/security/information-protection/windows-information-protection/wip-learning.md index 429aa1c479..bfb361fe81 100644 --- a/windows/security/information-protection/windows-information-protection/wip-learning.md +++ b/windows/security/information-protection/windows-information-protection/wip-learning.md @@ -8,7 +8,8 @@ ms.prod: w10 ms.mktglfcycl: ms.sitesec: library ms.pagetype: security -author: coreyp-at-msft +author: justinha +ms.author: justinha ms.localizationpriority: medium ms.date: 08/08/2018 --- From 1e3fa375e58cd1810533701b9e669fa106a5cf0c Mon Sep 17 00:00:00 2001 From: JeffStong Date: Thu, 11 Oct 2018 09:06:16 -0400 Subject: [PATCH 083/138] Fix typo of "version" Fix typo of "version" in FirewallRules/FirewallRuleName/Status section --- windows/client-management/mdm/firewall-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/firewall-csp.md b/windows/client-management/mdm/firewall-csp.md index ae0487cc9c..9842a88a1e 100644 --- a/windows/client-management/mdm/firewall-csp.md +++ b/windows/client-management/mdm/firewall-csp.md @@ -336,7 +336,7 @@ Sample syncxml to provision the firewall settings to evaluate

Value type is string. Supported operations are Add, Get, Replace, and Delete.

**FirewallRules/_FirewallRuleName_/Status** -

Provides information about the specific verrsion of the rule in deployment for monitoring purposes.

+

Provides information about the specific version of the rule in deployment for monitoring purposes.

Value type is string. Supported operation is Get.

**FirewallRules/_FirewallRuleName_/Name** From 7e1ad5be70a80dc72d7d077ceeb63d69f8c36fbf Mon Sep 17 00:00:00 2001 From: Patti Short Date: Thu, 11 Oct 2018 09:17:09 -0700 Subject: [PATCH 084/138] minor updates for now --- browsers/edge/about-microsoft-edge.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/browsers/edge/about-microsoft-edge.md b/browsers/edge/about-microsoft-edge.md index d51b7f60f9..82aa65a162 100644 --- a/browsers/edge/about-microsoft-edge.md +++ b/browsers/edge/about-microsoft-edge.md @@ -40,11 +40,9 @@ Some of the components might also need additional system resources. Check the co ## Supported languages -You can use the [Microsoft Translator extension](https://www.microsoft.com/en-us/p/translator-for-microsoft-edge/9nblggh4n4n3) with Microsoft Edge to translate foreign language webpages and text selections for 60+ languages. +Microsoft Edge supports all of the same languages as Windows 10 and you can use the [Microsoft Translator extension](https://www.microsoft.com/en-us/p/translator-for-microsoft-edge/9nblggh4n4n3) to translate foreign language webpages and text selections for 60+ languages. -If the extension does not work after install, please restart Microsoft Edge. If the extension still is not working, please provide feedback through the Feedback Hub. - -Microsoft Edge supports all of the same languages as Windows 10, including: +If the extension does not work after install, restart Microsoft Edge. If the extension still does not work, provide feedback through the Feedback Hub. | Language | Country/Region | Code | From 4d3c09911e3abf8edd9a48a4d18740e14e2115dc Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Oct 2018 09:30:56 -0700 Subject: [PATCH 085/138] date --- .../enlightened-microsoft-apps-and-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md index 475d430104..4c3170832f 100644 --- a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md +++ b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: security author: justinha ms.localizationpriority: medium -ms.date: 09/07/2018 +ms.date: 10/11/2018 --- # List of enlightened Microsoft apps for use with Windows Information Protection (WIP) From 41be5e612fe54d836a30ed5d46bfbe7e696d9816 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Oct 2018 09:54:02 -0700 Subject: [PATCH 086/138] typo --- .../enlightened-microsoft-apps-and-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md index 948df78c6d..a51b744067 100644 --- a/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md +++ b/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md @@ -32,7 +32,7 @@ Apps can be enlightened or unenlightened: - Windows **Save As** experiences only allow you to save your files as enterprise. -- **WIP-work only apps** are unenlightened line-of-business apps that have been tested and deemed safe for use in an enterprise with WIP and Mobile App Management (MAM) solutions without device enrollment. Unenlightended apps that are targeted by WIP without enrollment run under personal mode. +- **WIP-work only apps** are unenlightened line-of-business apps that have been tested and deemed safe for use in an enterprise with WIP and Mobile App Management (MAM) solutions without device enrollment. Unenlightened apps that are targeted by WIP without enrollment run under personal mode. ## List of enlightened Microsoft apps Microsoft has made a concerted effort to enlighten several of our more popular apps, including the following: From 6a25dd2be65e786bdfd51dbdab349fd1c60b59f4 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Oct 2018 10:53:53 -0700 Subject: [PATCH 087/138] added link to KB --- .../security-policy-settings/account-lockout-policy.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/account-lockout-policy.md b/windows/security/threat-protection/security-policy-settings/account-lockout-policy.md index b85e285e97..bad79b3f4b 100644 --- a/windows/security/threat-protection/security-policy-settings/account-lockout-policy.md +++ b/windows/security/threat-protection/security-policy-settings/account-lockout-policy.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium author: brianlic-msft -ms.date: 04/19/2017 +ms.date: 10/11/2018 --- # Account Lockout Policy @@ -22,6 +22,9 @@ Someone who attempts to use more than a few unsuccessful passwords while trying The following topics provide a discussion of each policy setting's implementation and best practices considerations, policy location, default values for the server type or Group Policy Object (GPO), relevant differences in operating system versions, and security considerations (including the possible vulnerabilities of each policy setting), countermeasures that you can implement, and the potential impact of implementing the countermeasures. +>[!NOTE] +>Acccout lockout settings for remote access clients can be configured separately by editing the Registry on the server that manages the remote access. For more information, see [How to configure remote access client account lockout](https://support.microsoft.com/help/816118/how-to-configure-remote-access-client-account-lockout-in-windows-serve). + ## In this section | Topic | Description | From fd660c286071245196d0e9486d228e3410da3272 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Oct 2018 10:57:07 -0700 Subject: [PATCH 088/138] typo --- .../security-policy-settings/account-lockout-policy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/account-lockout-policy.md b/windows/security/threat-protection/security-policy-settings/account-lockout-policy.md index bad79b3f4b..c481a744c3 100644 --- a/windows/security/threat-protection/security-policy-settings/account-lockout-policy.md +++ b/windows/security/threat-protection/security-policy-settings/account-lockout-policy.md @@ -23,7 +23,7 @@ Someone who attempts to use more than a few unsuccessful passwords while trying The following topics provide a discussion of each policy setting's implementation and best practices considerations, policy location, default values for the server type or Group Policy Object (GPO), relevant differences in operating system versions, and security considerations (including the possible vulnerabilities of each policy setting), countermeasures that you can implement, and the potential impact of implementing the countermeasures. >[!NOTE] ->Acccout lockout settings for remote access clients can be configured separately by editing the Registry on the server that manages the remote access. For more information, see [How to configure remote access client account lockout](https://support.microsoft.com/help/816118/how-to-configure-remote-access-client-account-lockout-in-windows-serve). +>Account lockout settings for remote access clients can be configured separately by editing the Registry on the server that manages the remote access. For more information, see [How to configure remote access client account lockout](https://support.microsoft.com/help/816118/how-to-configure-remote-access-client-account-lockout-in-windows-serve). ## In this section From 197ad13bc25f389661af44431b09d5fe42b83c3f Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 11 Oct 2018 17:57:26 +0000 Subject: [PATCH 089/138] Merged PR 12043: Update placeholder text, rename feature file Not sure I will be able to publish 'rip and replace' content this week, so updating the incorrectly published pages for now with generic placeholder text. --- ...rip-and-replace.md => existing-devices.md} | 38 +++++++++---------- .../windows-autopilot/user-driven-aad.md | 4 +- .../windows-autopilot/user-driven-hybrid.md | 4 +- 3 files changed, 23 insertions(+), 23 deletions(-) rename windows/deployment/windows-autopilot/{rip-and-replace.md => existing-devices.md} (70%) diff --git a/windows/deployment/windows-autopilot/rip-and-replace.md b/windows/deployment/windows-autopilot/existing-devices.md similarity index 70% rename from windows/deployment/windows-autopilot/rip-and-replace.md rename to windows/deployment/windows-autopilot/existing-devices.md index 28a55a5c49..be48f47d26 100644 --- a/windows/deployment/windows-autopilot/rip-and-replace.md +++ b/windows/deployment/windows-autopilot/existing-devices.md @@ -1,19 +1,19 @@ ---- -title: Rip and Replace -description: Listing of Autopilot scenarios -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: low -ms.sitesec: library -ms.pagetype: deploy -author: greg-lindsay -ms.author: greglin -ms.date: 06/01/2018 ---- - -# Rip and replace - -**Applies to: Windows 10** - -DO NOT PUBLISH. Just a placeholder for now, coming with 1809. \ No newline at end of file +--- +title: Autopilot for existing devices +description: Listing of Autopilot scenarios +keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: low +ms.sitesec: library +ms.pagetype: deploy +author: greg-lindsay +ms.author: greglin +ms.date: 10/11/2018 +--- + +# Autopilot for existing devices + +**Applies to: Windows 10** + +Placeholder. Content coming. \ No newline at end of file diff --git a/windows/deployment/windows-autopilot/user-driven-aad.md b/windows/deployment/windows-autopilot/user-driven-aad.md index ce4d3c158a..1310d1aab1 100644 --- a/windows/deployment/windows-autopilot/user-driven-aad.md +++ b/windows/deployment/windows-autopilot/user-driven-aad.md @@ -9,11 +9,11 @@ ms.sitesec: library ms.pagetype: deploy author: greg-lindsay ms.author: greglin -ms.date: 06/01/2018 +ms.date: 10/11/2018 --- # Windows Autopilot user-driven mode for Azure Active Directory **Applies to: Windows 10** -DO NOT PUBLISH. This eventually will contain the AAD-specific instuctions currently in user-driven.md. +Placeholder. Content coming. diff --git a/windows/deployment/windows-autopilot/user-driven-hybrid.md b/windows/deployment/windows-autopilot/user-driven-hybrid.md index 65cd547243..8a55a84cc1 100644 --- a/windows/deployment/windows-autopilot/user-driven-hybrid.md +++ b/windows/deployment/windows-autopilot/user-driven-hybrid.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: deploy author: greg-lindsay ms.author: greglin -ms.date: 06/01/2018 +ms.date: 10/11/2018 --- @@ -17,4 +17,4 @@ ms.date: 06/01/2018 **Applies to: Windows 10** -DO NOT PUBLISH. This eventually will contain the AD-specific (hybrid) instuctions. This will be in preview at a later point in time. +Placeholder. Content coming. From 29daddd211bf7619f1d2a84b04e2aef85d3557ba Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Thu, 11 Oct 2018 21:04:20 +0000 Subject: [PATCH 090/138] Merged PR 12048: ToC changes for certifications --- windows/security/threat-protection/TOC.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 391cca39d8..7b94429cea 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -404,10 +404,10 @@ #### [Software developer FAQ](intelligence/developer-faq.md) #### [Software developer resources](intelligence/developer-resources.md) -## Certifications +## Windows Certifications -### [FIPS 140 Validation](fips-140-validation.md) -### [Windows Platform Common Criteria Certification](windows-platform-common-criteria.md) +### [FIPS 140 Validations](fips-140-validation.md) +### [Common Criteria Certifications](windows-platform-common-criteria.md) ## More Windows 10 security From d36d8d190428322fe182a234a92834a8264bc584 Mon Sep 17 00:00:00 2001 From: Harshitha Chidananda Murthy Date: Thu, 11 Oct 2018 15:02:49 -0700 Subject: [PATCH 091/138] SDU Support to SP6 and SL --- devices/surface/surface-dock-updater.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/devices/surface/surface-dock-updater.md b/devices/surface/surface-dock-updater.md index 445be071c9..88ab59eb40 100644 --- a/devices/surface/surface-dock-updater.md +++ b/devices/surface/surface-dock-updater.md @@ -117,6 +117,15 @@ Microsoft periodically updates Surface Dock Updater. To learn more about the app >[!Note] >Each update to Surface Dock firmware is included in a new version of Surface Dock Updater. To update a Surface Dock to the latest firmware, you must use the latest version of Surface Dock Updater. +### Version 2.23.139.0 +*Release Date: 10 October 2018* + +This version of Surface Dock Updates adds support for the following: + +- Add support for Surface Pro 6 +- Add support for Surface Laptop 2 + + ### Version 2.22.139.0 *Release Date: 26 July 2018* From 8188c42f591b0e79b85a14eb8ed2c24b40e9aa31 Mon Sep 17 00:00:00 2001 From: Harshitha Chidananda Murthy Date: Thu, 11 Oct 2018 15:06:27 -0700 Subject: [PATCH 092/138] SDE Update to SP6 and SL2 --- devices/surface/microsoft-surface-data-eraser.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index 3ba289e3e6..785ed4733a 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -148,6 +148,14 @@ After you create a Microsoft Surface Data Eraser USB stick, you can boot a suppo Microsoft Surface Data Eraser is periodically updated by Microsoft. For information about the changes provided in each new version, see the following: +### Version 3.2.69.0 +*Release Date: 11 October 2018* + +This version of Surface Data Eraser adds support for the following: + +- Surface Pro 6 +- Surface Laptop 2 + ### Version 3.2.68.0 This version of Microsoft Surface Data Eraser adds support for the following: From 40bbd3eeba1dcc132da8f24b98741c7c248f5980 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 11 Oct 2018 16:59:46 -0700 Subject: [PATCH 093/138] typo --- windows/security/information-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/TOC.md b/windows/security/information-protection/TOC.md index 2853e95b50..d1af453ff6 100644 --- a/windows/security/information-protection/TOC.md +++ b/windows/security/information-protection/TOC.md @@ -48,7 +48,7 @@ ### [How to collect WIP audit event logs](windows-information-protection\collect-wip-audit-event-logs.md) ### [General guidance and best practices for WIP](windows-information-protection\guidance-and-best-practices-wip.md) #### [Enlightened apps for use with WIP](windows-information-protection\enlightened-microsoft-apps-and-wip.md) -#### [Unenlightened and enlightened app behavior while using WI)](windows-information-protection\app-behavior-with-wip.md) +#### [Unenlightened and enlightened app behavior while using WIP](windows-information-protection\app-behavior-with-wip.md) #### [Recommended Enterprise Cloud Resources and Neutral Resources network settings with WIP](windows-information-protection\recommended-network-definitions-for-wip.md) #### [Using Outlook Web Access with WIP](windows-information-protection\using-owa-with-wip.md) ### [Fine-tune WIP Learning](windows-information-protection\wip-learning.md) From 53240f60087dea0424b2becf47fcb683b3cbce1c Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Fri, 12 Oct 2018 14:14:14 +0000 Subject: [PATCH 094/138] Merged PR 12057: fix assignedaccess json and SH Start xml example --- devices/surface-hub/surface-hub-start-menu.md | 12 ++++++++++-- .../client-management/connect-to-remote-aadj-pc.md | 3 +++ windows/client-management/mdm/TOC.md | 2 +- .../mdm/device-update-management.md | 4 ++-- windows/client-management/mdm/index.md | 2 +- .../change-history-for-configure-windows-10.md | 6 ++++++ windows/configuration/kiosk-prepare.md | 6 ++++++ windows/configuration/kiosk-single-app.md | 6 +++--- .../configuration/multi-app-kiosk-troubleshoot.md | 6 +++++- windows/configuration/wcd/wcd-assignedaccess.md | 2 +- 10 files changed, 38 insertions(+), 11 deletions(-) diff --git a/devices/surface-hub/surface-hub-start-menu.md b/devices/surface-hub/surface-hub-start-menu.md index 5e6469aab1..06e75a666a 100644 --- a/devices/surface-hub/surface-hub-start-menu.md +++ b/devices/surface-hub/surface-hub-start-menu.md @@ -145,7 +145,7 @@ This example shows a link to a website and a link to a .pdf file. TileID="2678823080" DisplayName="Bing" Arguments="https://www.bing.com/" - Square150x150LogoUri="ms-appdata:///local/PinnedTiles/2678823080/lowres.png" + Square150x150LogoUri="ms-appx:///" Wide310x150LogoUri="ms-appx:///" ShowNameOnSquare150x150Logo="true" ShowNameOnWide310x150Logo="false" @@ -164,7 +164,10 @@ This example shows a link to a website and a link to a .pdf file. TileID="6153963000" DisplayName="cstrtqbiology.pdf" Arguments="-contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x45b7376e -pinnedTimeHigh 0x01d2356c -securityFlags 0x00000000 -tileType 0x00000000 -url 0x0000003a https://www.ada.gov/regs2010/2010ADAStandards/Guidance_2010ADAStandards.pdf" - Square150x150LogoUri="ms-appdata:///local/PinnedTiles/2678823080/lowres.png" Wide310x150LogoUri="ms-appx:///" ShowNameOnSquare150x150Logo="true" ShowNameOnWide310x150Logo="true" + Square150x150LogoUri="ms-appx:///" + Wide310x150LogoUri="ms-appx:///" + ShowNameOnSquare150x150Logo="true" + ShowNameOnWide310x150Logo="true" BackgroundColor="#ff4e4248" Size="4x2" Row="4" @@ -177,6 +180,11 @@ This example shows a link to a website and a link to a .pdf file. ``` +>[!NOTE] +>Microsoft Edge tile logos won't appear on secondary tiles because they aren't stored in Surface Hub. +> +>The default value for `ForegroundText` is light; you don't need to include `ForegroundText` in your XML unless you're changing the value to dark. + ## More information - [Blog post: Changing Surface Hub’s Start Menu](https://blogs.technet.microsoft.com/y0av/2018/02/13/47/) diff --git a/windows/client-management/connect-to-remote-aadj-pc.md b/windows/client-management/connect-to-remote-aadj-pc.md index 1aa38eb7ba..7c666a3977 100644 --- a/windows/client-management/connect-to-remote-aadj-pc.md +++ b/windows/client-management/connect-to-remote-aadj-pc.md @@ -23,6 +23,9 @@ From its release, Windows 10 has supported remote connections to PCs that are jo ![Remote Desktop Connection client](images/rdp.png) +>[!TIP] +>Starting in Windows 10, version 1809, you can [use biometrics to authenticate to a remote desktop session.](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809#remote-desktop-with-biometrics) + ## Set up - Both PCs (local and remote) must be running Windows 10, version 1607 (or later). Remote connection to an Azure AD-joined PC that is running earlier versions of Windows 10 is not supported. diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 10bf5bf5c8..170d3d38f2 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -17,7 +17,7 @@ ### [Add an Azure AD tenant and Azure AD subscription](add-an-azure-ad-tenant-and-azure-ad-subscription.md) ### [Register your free Azure Active Directory subscription](register-your-free-azure-active-directory-subscription.md) ## [Enterprise app management](enterprise-app-management.md) -## [Device update management](device-update-management.md) +## [Mobile device management (MDM) for device updates](device-update-management.md) ## [Bulk enrollment](bulk-enrollment-using-windows-provisioning-tool.md) ## [Management tool for the Microsoft Store for Business](management-tool-for-windows-store-for-business.md) ### [REST API reference for Microsoft Store for Business](rest-api-reference-windows-store-for-business.md) diff --git a/windows/client-management/mdm/device-update-management.md b/windows/client-management/mdm/device-update-management.md index 84e3a07225..82cf5ef7d9 100644 --- a/windows/client-management/mdm/device-update-management.md +++ b/windows/client-management/mdm/device-update-management.md @@ -1,5 +1,5 @@ --- -title: Device update management +title: Mobile device management MDM for device updates description: In the current device landscape of PC, tablets, phones, and IoT devices, the Mobile Device Management (MDM) solutions are becoming prevalent as a lightweight device management technology. ms.assetid: C27BAEE7-2890-4FB7-9549-A6EACC790777 keywords: mdm,management,administrator @@ -12,7 +12,7 @@ ms.date: 11/15/2017 --- -# Device update management +# Mobile device management (MDM) for device updates >[!TIP] >If you're not a developer or administrator, you'll find more helpful information in the [Windows Update: Frequently Asked Questions](https://support.microsoft.com/help/12373/windows-update-faq). diff --git a/windows/client-management/mdm/index.md b/windows/client-management/mdm/index.md index a5e489976e..72b31a82e2 100644 --- a/windows/client-management/mdm/index.md +++ b/windows/client-management/mdm/index.md @@ -61,7 +61,7 @@ When an organization wants to move to MDM to manage devices, they should prepare - [Azure Active Directory integration with MDM](azure-active-directory-integration-with-mdm.md) - [Enterprise app management](enterprise-app-management.md) -- [Device update management](device-update-management.md) +- [Mobile device management (MDM) for device updates](device-update-management.md) - [Enable offline upgrades to Windows 10 for Windows Embedded 8.1 Handheld devices](enable-offline-updates-for-windows-embedded-8-1-handheld-devices-to-windows-10.md) - [OMA DM protocol support](oma-dm-protocol-support.md) - [Structure of OMA DM provisioning files](structure-of-oma-dm-provisioning-files.md) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 3483fedd7a..f14d66e522 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -17,6 +17,12 @@ ms.date: 10/02/2018 This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## October 2018 + +New or changed topic | Description +--- | --- +[Troubleshoot multi-app kiosk](multi-app-kiosk-troubleshoot.md) and [Set up a single-app kiosk](kiosk-single-app.md) | Added event log path for auto-logon issues. + ## RELEASE: Windows 10, version 1809 The topics in this library have been updated for Windows 10, version 1809. The following new topic has been added: diff --git a/windows/configuration/kiosk-prepare.md b/windows/configuration/kiosk-prepare.md index 346ce64c96..7932dafc17 100644 --- a/windows/configuration/kiosk-prepare.md +++ b/windows/configuration/kiosk-prepare.md @@ -38,6 +38,12 @@ Disable the camera. | Go to **Settings** > **Privacy** > **Camera**, a Turn off app notifications on the lock screen. | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Logon\\Turn off app notifications on the lock screen**. Disable removable media. | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Device Installation\\Device Installation Restrictions**. Review the policy settings available in **Device Installation Restrictions** for the settings applicable to your situation.

**NOTE**: To prevent this policy from affecting a member of the Administrators group, in **Device Installation Restrictions**, enable **Allow administrators to override Device Installation Restriction policies**. +## Enable logging + +Logs can help you [troubleshoot issues](multi-app-kiosk-troubleshoot.md) kiosk issues. Logs about configuration and runtime issues can be obtained by enabling the **Applications and Services Logs\Microsoft\Windows\AssignedAccess\Operational** channel, which is disabled by default. + +![Event Viewer, right-click Operational, select enable log](images/enable-assigned-access-log.png) + ## Automatic logon In addition to the settings in the table, you may want to set up **automatic logon** for your kiosk device. When your kiosk device restarts, whether from an update or power outage, you can sign in the assigned access account manually or you can configure the device to sign in to the assigned access account automatically. Make sure that Group Policy settings applied to the device do not prevent automatic sign in. diff --git a/windows/configuration/kiosk-single-app.md b/windows/configuration/kiosk-single-app.md index 9f16d7bc3b..4af964b132 100644 --- a/windows/configuration/kiosk-single-app.md +++ b/windows/configuration/kiosk-single-app.md @@ -8,7 +8,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: jdeckerms ms.localizationpriority: medium -ms.date: 10/02/2018 +ms.date: 10/09/2018 --- # Set up a single-app kiosk @@ -185,7 +185,7 @@ Clear-AssignedAccess >[!IMPORTANT] ->When Exchange Active Sync (EAS) password restrictions are active on the device, the autologon feature does not work. This behavior is by design. For more informations, see [How to turn on automatic logon in Windows}(https://support.microsoft.com/help/324737/how-to-turn-on-automatic-logon-in-windows). +>When Exchange Active Sync (EAS) password restrictions are active on the device, the autologon feature does not work. This behavior is by design. For more informations, see [How to turn on automatic logon in Windows](https://support.microsoft.com/help/324737/how-to-turn-on-automatic-logon-in-windows). When you use the **Provision kiosk devices** wizard in Windows Configuration Designer, you can configure the kiosk to run either a Universal Windows app or a Windows desktop application. @@ -200,7 +200,7 @@ When you use the **Provision kiosk devices** wizard in Windows Configuration Des ![step three](images/three.png) ![account management](images/account-management.png)

Enable account management if you want to configure settings on this page.

**If enabled:**

You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device

To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.

Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 30 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.

**Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards.

To create a local administrator account, select that option and enter a user name and password.

**Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. ![join Active Directory, Azure AD, or create a local admin account](images/account-management-details.png) ![step four](images/four.png) ![add applications](images/add-applications.png)

You can provision the kiosk app in the **Add applications** step. You can install multiple applications, both Windows desktop applications (Win32) and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see [Provision PCs with apps](provisioning-packages/provision-pcs-with-apps.md)

**Warning:** If you click the plus button to add an application, you must specify an application for the provisioning package to validate. If you click the plus button in error, select any executable file in **Installer Path**, and then a **Cancel** button becomes available, allowing you to complete the provisioning package without an application. ![add an application](images/add-applications-details.png) ![step five](images/five.png) ![add certificates](images/add-certificates.png)

To provision the device with a certificate for the kiosk app, click **Add a certificate**. Enter a name for the certificate, and then browse to and select the certificate to be used.![add a certificate](images/add-certificates-details.png) -![step six](images/six.png) ![Configure kiosk account and app](images/kiosk-account.png)

You can create a local standard user account that will be used to run the kiosk app. If you toggle **No**, make sure that you have an existing user account to run the kiosk app.

If you want to create an account, enter the user name and password, and then toggle **Yes** or **No** to automatically sign in the account when the device starts.

In **Configure the kiosk mode app**, enter the name of the user account that will run the kiosk mode app. Select the type of app to run in kiosk mode, and then enter the path or filename (for a Windows desktop application) or the AUMID (for a Universal Windows app). For a Windows desktop application, you can use the filename if the path to the file is in the PATH environment variable, otherwise the full path is required.![Configure kiosk account and app](images/kiosk-account-details.png) +![step six](images/six.png) ![Configure kiosk account and app](images/kiosk-account.png)

You can create a local standard user account that will be used to run the kiosk app. If you toggle **No**, make sure that you have an existing user account to run the kiosk app.

If you want to create an account, enter the user name and password, and then toggle **Yes** or **No** to automatically sign in the account when the device starts. (If you encounter issues with auto sign-in after you apply the provisioning package, check the Event Viewer logs for auto logon issues under **Applications and Services Logs\Microsoft\Windows\Authentication User Interface\Operational**.)

In **Configure the kiosk mode app**, enter the name of the user account that will run the kiosk mode app. Select the type of app to run in kiosk mode, and then enter the path or filename (for a Windows desktop application) or the AUMID (for a Universal Windows app). For a Windows desktop application, you can use the filename if the path to the file is in the PATH environment variable, otherwise the full path is required.![Configure kiosk account and app](images/kiosk-account-details.png) ![step seven](images/seven.png) ![configure kiosk common settings](images/kiosk-common.png)

On this step, select your options for tablet mode, the user experience on the Welcome and shutdown screens, and the timeout settings.![set tablet mode and configure welcome and shutdown and turn off timeout settings](images/kiosk-common-details.png) ![finish](images/finish.png)

You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device.![Protect your package](images/finish-details.png) diff --git a/windows/configuration/multi-app-kiosk-troubleshoot.md b/windows/configuration/multi-app-kiosk-troubleshoot.md index 8f46fb44df..d724cae559 100644 --- a/windows/configuration/multi-app-kiosk-troubleshoot.md +++ b/windows/configuration/multi-app-kiosk-troubleshoot.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: edu, security author: jdeckerms ms.localizationpriority: medium -ms.date: 07/30/2018 +ms.date: 10/09/2018 ms.author: jdecker ms.topic: article --- @@ -39,6 +39,10 @@ For example: ![Event Viewer, right-click Operational, select enable log](images/enable-assigned-access-log.png) +## Automatic logon issues + +Check the Event Viewer logs for auto logon issues under **Applications and Services Logs\Microsoft\Windows\Authentication User Interface\Operational**. + ## Apps configured in AllowedList are blocked 1. Ensure the account is mapped to the correct profile and that the apps are specific for that profile. diff --git a/windows/configuration/wcd/wcd-assignedaccess.md b/windows/configuration/wcd/wcd-assignedaccess.md index ae8d42c8ee..ff12b64898 100644 --- a/windows/configuration/wcd/wcd-assignedaccess.md +++ b/windows/configuration/wcd/wcd-assignedaccess.md @@ -30,7 +30,7 @@ Enter the account and the application you want to use for Assigned access, using **Example**: ``` -"Account":"domain\user", "AUMID":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" +{"Account":"domain\user", "AUMID":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"} ``` ## MultiAppAssignedAccessSettings From a4a43f0e2113f84da0e60dc815940c20a99b6ca0 Mon Sep 17 00:00:00 2001 From: Harshitha Chidananda Murthy Date: Fri, 12 Oct 2018 10:47:36 -0700 Subject: [PATCH 095/138] SDE Compatible device list --- devices/surface/microsoft-surface-data-eraser.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index 785ed4733a..fece916499 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -26,6 +26,8 @@ Find out how the Microsoft Surface Data Eraser tool can help you securely wipe d Compatible Surface devices include: +* Surface Pro 6 +* Surface Laptop 2 * Surface Go * Surface Book 2 * Surface Pro with LTE Advanced (Model 1807) @@ -149,7 +151,7 @@ After you create a Microsoft Surface Data Eraser USB stick, you can boot a suppo Microsoft Surface Data Eraser is periodically updated by Microsoft. For information about the changes provided in each new version, see the following: ### Version 3.2.69.0 -*Release Date: 11 October 2018* +*Release Date: 12 October 2018* This version of Surface Data Eraser adds support for the following: From 291458eca88786692b3faeb60432f586ceb1b375 Mon Sep 17 00:00:00 2001 From: Harshitha Chidananda Murthy Date: Fri, 12 Oct 2018 10:49:43 -0700 Subject: [PATCH 096/138] Typo --- devices/surface/surface-dock-updater.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/surface-dock-updater.md b/devices/surface/surface-dock-updater.md index 88ab59eb40..b8ee7359dc 100644 --- a/devices/surface/surface-dock-updater.md +++ b/devices/surface/surface-dock-updater.md @@ -120,7 +120,7 @@ Microsoft periodically updates Surface Dock Updater. To learn more about the app ### Version 2.23.139.0 *Release Date: 10 October 2018* -This version of Surface Dock Updates adds support for the following: +This version of Surface Dock Updater adds support for the following: - Add support for Surface Pro 6 - Add support for Surface Laptop 2 From 5eef27b4eddb81eb9f0144ff0815dc3ab51c4c80 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 12 Oct 2018 11:51:02 -0700 Subject: [PATCH 097/138] edits --- .../how-wip-works-with-labels.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md index 2c1defabc1..67d918b484 100644 --- a/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md +++ b/windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: security author: justinha ms.localizationpriority: medium -ms.date: 10/10/2018 +ms.date: 10/12/2018 --- # How Windows Information Protection protects files with a sensitivity label @@ -76,7 +76,9 @@ The PDF file doesn't need any work context beyond the sensitivity label. - Windows 10, version 1809 - [Windows Defender ATP](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection) scans content for a label and applies corresponding WIP protection - [Sensitivity labels](https://docs.microsoft.com/office365/securitycompliance/labels) need to be configured in the Office 365 Security & Compliance Center -- [WIP policy](create-wip-policy-using-intune-azure.md) needs to be applied to endpoint devices. +- WIP policy needs to be applied to endpoint devices by using [Intune](create-wip-policy-using-intune-azure.md) or [System Center Configuration Manager (SCCM)](overview-create-wip-policy-sccm.md). + + From 373750e1ea979d0fb769a4f94324e3f02c4fc325 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 12 Oct 2018 12:03:46 -0700 Subject: [PATCH 098/138] new topic from Ted Hardy --- windows/security/threat-protection/TOC.md | 1 + .../how-to-list-xml-elements-in-eventdata.md | 83 +++++++++++++++++++ 2 files changed, 84 insertions(+) create mode 100644 windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 7b94429cea..76837097e0 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -465,6 +465,7 @@ ##### [Planning and deploying advanced security audit policies](auditing/planning-and-deploying-advanced-security-audit-policies.md) ##### [Advanced security auditing FAQ](auditing/advanced-security-auditing-faq.md) ###### [Which editions of Windows support advanced audit policy configuration](auditing/which-editions-of-windows-support-advanced-audit-policy-configuration.md) +###### [How to list XML elements in ](auditing/how-to-list-xml-elements-in-eventdata.md) ###### [Using advanced security auditing options to monitor dynamic access control objects](auditing/using-advanced-security-auditing-options-to-monitor-dynamic-access-control-objects.md) ####### [Monitor the central access policies that apply on a file server](auditing/monitor-the-central-access-policies-that-apply-on-a-file-server.md) diff --git a/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md b/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md new file mode 100644 index 0000000000..a332ef1410 --- /dev/null +++ b/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md @@ -0,0 +1,83 @@ +--- +title: How to get a list of XML elements in (Windows 10) +description: This reference topic for the IT professional explains how to use PowerShell to get a list of XML elements that can appear in . +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: tedhardyMSFT +ms.date: 10/12/2018 +--- + +# How to get a list of XML elements in + +**Applies to** +- Windows 10 + +Since the Security log uses a manifest, you can get all of the event schema from the workstation. + +Run this from an elevated powershell prompt: + +```powershell +$secEvents = get-winevent -listprovider "microsoft-windows-security-auditing" +``` + +The .events property is a collection of all of the events listed in the manifest on the local machine. +For each event there is a .Template property for the XML template used for the event properties (if there are any.) + +For example: + +```powershell +PS C:\WINDOWS\system32> $SecEvents.events[100] + + +Id : 4734 +Version : 0 +LogLink : System.Diagnostics.Eventing.Reader.EventLogLink +Level : System.Diagnostics.Eventing.Reader.EventLevel +Opcode : System.Diagnostics.Eventing.Reader.EventOpcode +Task : System.Diagnostics.Eventing.Reader.EventTask +Keywords : {} +Template : + +Description : A security-enabled local group was deleted. + + Subject: + Security ID: %4 + Account Name: %5 + Account Domain: %6 + Logon ID: %7 + + Group: + Security ID: %3 + Group Name: %1 + Group Domain: %2 + + Additional Information: + Privileges: %8 + + + +PS C:\WINDOWS\system32> $SecEvents.events[100].Template + + +``` From a79f88000ef735a643cae9c4c8d787aab346e410 Mon Sep 17 00:00:00 2001 From: Patti Short <35278231+shortpatti@users.noreply.github.com> Date: Fri, 12 Oct 2018 13:00:29 -0700 Subject: [PATCH 099/138] Update whats-new-windows-10-version-1809.md --- windows/whats-new/whats-new-windows-10-version-1809.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1809.md b/windows/whats-new/whats-new-windows-10-version-1809.md index bf50ffbf86..1a8be89a59 100644 --- a/windows/whats-new/whats-new-windows-10-version-1809.md +++ b/windows/whats-new/whats-new-windows-10-version-1809.md @@ -112,9 +112,6 @@ We’ve continued to work on the **Current threats** area in [Virus & threat pr ![Virus & threat protection settings](images/virus-and-threat-protection.png "Virus & threat protection settings") -You can enable a new protection setting, **Block suspicious behaviors**, which brings [Windows Defender Exploit Guard attack surface reduction technology](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard) to all users. To enable this setting, go to the **Virus & threat protection** section and click **Manage settings**, as shown in the following screenshot: - -![Block suspicious behaviors](images/block-suspicious-behaviors.png "Block suspicious behaviors") With controlled folder access you can help prevent ransomware and other destructive malware from changing your personal files. In some cases, apps that you normally use might be blocked from making changes to common folders like **Documents** and **Pictures**. We’ve made it easier for you to add apps that were recently blocked so you can keep using your device without turning off the feature altogether. From f2ca16c468141217f7a66ec3b417c06e52d90b94 Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Fri, 12 Oct 2018 20:11:35 +0000 Subject: [PATCH 100/138] Merged PR 12073: Add Partner topic add new topic and add topic to toc --- store-for-business/TOC.md | 1 + .../images/msfb-find-partner.png | Bin 0 -> 23633 bytes .../images/msfb-provider-list.png | Bin 0 -> 34482 bytes ...k-with-partner-microsoft-store-business.md | 79 ++++++++++++++++++ 4 files changed, 80 insertions(+) create mode 100644 store-for-business/images/msfb-find-partner.png create mode 100644 store-for-business/images/msfb-provider-list.png create mode 100644 store-for-business/work-with-partner-microsoft-store-business.md diff --git a/store-for-business/TOC.md b/store-for-business/TOC.md index 9709bdc21e..232fd3b343 100644 --- a/store-for-business/TOC.md +++ b/store-for-business/TOC.md @@ -24,6 +24,7 @@ ### [Manage Windows device deployment with Windows Autopilot Deployment](add-profile-to-devices.md) ### [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md) ### [Manage software purchased with Microsoft Products and Services agreement in Microsoft Store for Business](manage-mpsa-software-microsoft-store-for-business.md) +### [Working with solutin providers in Microsoft Store for Business](work-with-partner-microsoft-store-business.md) ## [Device Guard signing portal](device-guard-signing-portal.md) ### [Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md) ### [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) diff --git a/store-for-business/images/msfb-find-partner.png b/store-for-business/images/msfb-find-partner.png new file mode 100644 index 0000000000000000000000000000000000000000..23759cfb5f8187d1fe0b60eff072d44bffe46a06 GIT binary patch literal 23633 zcmX`Rbyyrv)3!};f(Q2iK|*j3?h-5ncXxMZgS)$HaCdiicUaur7T5(oe)sbp-ybV8 zJ6+RVJKfc1T^06QUJ~^);b$l)C{$@Fu|H5ypB_HGk03&Sy!*CZ`F(tRa{41F0#!9d zeDZMsYbGow3;Kl?BO6yQsOjy}n_aX~H9cOqe zM0$Es&aiDrEGj&49$mcWvpPl%^k*rRn!i$UXq@!ewYlnX6yk-T=v?($w^~riiJqhP0|$weIUd zir!nlIVTYC{<_)jX1Ce)@H3!S-`i89e zLT)76W(q0RH| zaPt2CJ~A>g0*~qKeqMq3_WAAz0KRB0w)TI{`sl532@v`AF5}A0T2)oG$>Z*DDRftQ z-xu<9gN(=cb%Q!h0fz1wayK0n8CjE|)nqMvq>v+Uadeat8~ay9VgCIP{0evn1M@^f z9G#p%SHO4hRrmZx$lXy6U`|+y3|jI$&0s+!KJ( zEsDYGdY&ra;`yj-Cns>+{U-TlVH#|N3p;&pzO7Piy6epS2|q@oI9*zYLQBW^gK@ z`q*JNRa8_IO5Lp^2oERH0QEOmd_N6B^pvz2>362@7#aDI{ufh^Kh~ z08p$+UU?M=X>#Qvnyn08sRhp_}tS4O0k0x;cDZ!eT(9j?_ z6~k%~?^*kJPICp-gE|A&EG;cD^7BQA>-L6Y3bIR;iap)kBZ;_dueLfd5N7!w4R3Y_ z@r@e{?d${rZ;lpjhe&Ythq$cZPtSilNq#veW__^%uGyn_y#^T*4Jyb*ppK;0000xJG;!ZgM$N3PEITu z`2k&hAm+J3HXi{;uE<2RIdtWoJ>X^#Z^b7}>0NE*DRo7&{zrsTL!lyLE zKOJG)V_;7QbO?h9Ly+=Nnnb9le$c-G-(UZm$IQIDB?h52d;1MP-7bk;v4U#Jhdv>Y zm@vQYZAi?UN650Fzzgqy0O3G#?MySnTKr`vW8-g(hh9A#ky!Ugq-J|#!#MuPII4Xv zE7+M`+!^HN$0wuMG5lh~`T6;=xf-8i1IkJGy8$X}7STWl%w7NK@$vqLuphX*a4^Y< ziM0K-2>ymG+6Fe~0wO=PCq{%-%#p{0pu;6G!UO!lUsf>GxHZYi83N_S!h|WO{q-d# zu<(sTMfLRFZx6+9=l zj%HHx6PCyG-kjKB0cz9B!((S(Sc?`NC*N*F@_k2=xV@!?TNbAT;SOs_M9b6Dvjjta zfEWr!q_nH6YvnV^)YKFw3yU9Y?dN%@LzoHN<8ShO#H@*d#w-^G2rPsYafqUUS^nON z!4pCyz>N*!g22xPmX5UnMmD4=(`a9pwJZE>2)3C6_Rpe{LNIOBI4b7p|sG)gM@qjIT zMn*<)xm2XE1H#yUBgn{!qLC{C#Uo*i{a_`6_j~jZ*ByFA4=@lsK8yVou%D##lSQHY z65IC?0iKhhYREI;{3xQLd;fBO4jsmP7fClqOb*O7U>QL+!DY~dbweTHaUO~!P!EE7 zoJeECAnQQq&x0o;Ba*tw&< z4`m)P(T=#z(oX4DkG2Q3m>*(}&A)@pNkQL3_YEUp@7uRDeEUcwx-@13=wJCr)>5kE z7(-#7W#V6!E43s~5mJc`r?MjUg4j*D&zT%!gG(J!l(e-YSK%U3p?)KM85w}0@Ux@E zF@wHjut#KGz!$QH8#iL0W~SdgAC!$W3V+!#M8Q-w=n{0;g@uRB8kh|%nq@rH*OsJ> zF)aDavDfky>p(FzlKfCdIXXZlJ@^GvC>Mn_B0T)ERY#w1ntl0-d({4R2X;_A^e*1^ z)y;gC2KtCLUDe--Bo3J##%8nC>1cEx?Kk>8Ha>o6S*}R>_z`7==vO3R_DKMJ`kq@P zktt?dE|kA}12FH~O2Rh`RZ-k;%7G607~i(tDDaM9nna*K0#CB`bqzxo=6xK3@HI5F z>o@zG{thX9c8qLFAqhxyo{-kZnmhc}2#4L+#6(3;552zsiZ+J*mPNIMSaUcOv-m4k zuBq7AwL%U}_>1dE&UtfQ9`ckAKD_BEwNP2q@vl+nU zaOAhyOX2TKVU=l$FI^$7FU&chgXm!k<3ceptRMgV6A6@*K5I{H&rMKQZ7AEP{)o6< z-JWi4<9(>_Sifde&N;p?v$iJMmx)et7jZ8t65&4kM-6P35VVJhM}8^&EVrGzM-9{2 zXCaI0ux(H4Ffzl_%@J_JEvN^_eP@5LZP*_cbkC3JfDFw-J|z5uyEv|>RRMPDtZ zI5@b^b4-a$_fGTDPiO9*Uk<_ag*4X&@rtE^-&4nM@` zF!B^inQ2xmkTA$pd|oJ3ayZN-KgWEDX~JO9hp1I*9(=?#o;+XLFI>3Xm!Z+K#~+KW zwD-lq0i5D4_t4-n4w{^BKAK9tP@-0Ay&^IaxBr=riW z(C3S94C@2q!jzy>zJviCxMKqXzYxLf7lqj3;5VrXC8=Mn)@FL zd~czHB8JV|=8^1xH`%Tm?i8%@uE;+i%{hD`8T|TvV7nzU=_>-!+!u6cG=Fe9^$0rW zSJt^5rDFNsY@jcg;kFi65_O4^oDL1cI=Vbd``J7lHWg}c#;het3btokeZc0^?JVx+ zeyeYsG>vh8v60w+dHUPT@)!cJ`apt&FV&P|SO_9INi0&u2F)HG~ z=g2l6GoSX-VGC)Q$7Kep2kFLXVPFqYuW0PYiYIpafH}t~qllqTKYfeZ#xs%PhuRTz zMFmH&hvCNxAusrBb3NR0zo{+*@-utf%X} z0O;Ux1?(p44;qR1TLik?^m^xbSMT9Pyg2Fe>EY&1+#d^pC3~e0y&34K-zV^i`0EtL z&tuj=udwU(7cmG{xbhPO%_Tmx5zeAa8UOmktmyEmGpWa*?`a+mKA_hfL*dwMhA<9X zFV6e&fjP`?aWo*_fd3<&RA3JAq1%5%X7GRbRsRl1`amHmY+t)aa2yKNHCRp0XK`lc z?^QLy2Y>|#zv?Qhk3imFz29F!T+iJe{u>1AsOz&ARaNq+dBbNeRI!l-V`APr4 zhdk9bW~Rki=7ZBq^Peohc#Nrn8UImdCDMbJg`(fTfB(Xdd~tHd=>$+KpKdx|!jGyH z1TTLPnKI*}NRzXPlH&_)CsQt{W-z?NgW|R6qE595J1pdQBeP@yI zTPKFfRN#Mun^)}H{qRNaaUwR}K1(;-hbfxE(El98%tLkl{J-nvNhy6ng5|qzs#Jd! z5H?bVG)+bkeE+XKgT>n&Xc;f_U4QnO>yWbqma~KB3IdK`?BKW}o@1Kkf4|H});Y}a z+Ub&edo=Jh`xtanp~elb;T;^FsQjzW6{n!EHDO=@3&o(`+J%oDZF zpX<`Y-!K*_DauFR0HK+h!8X8KMOTayRL_+>a3pNzwe{`MS8g(fE`RcaWZPn@X$ zKU3$OhPudP^u)bI@SpStg^uf8ULMg&nzdY}M^)-M)5n9sty_mZ*%txhtB=2=IR7ix z`rO!QPEI!hXUW9Rf?c2Bh=bZ=FNwjU$nYzTBz-ZE_gf||__@qMOnwh^L|yux!RQ28 z=e%*>d!XnCDGSWhrdw{lXDy$E;~os=w%neZ1WR>pxx{8<-DrK&5?<~)T>mw`#DEM> zv>XBgXow$}=%{H$*gC%^%umj|_1sYO$~f2l?6_?@xeUI8%a~0WG&w-X_YRy?gvb!W z5EC=NUCoMrOscfe@zEEvZg7rD8o*&_>;1g_K0sm31P2(*k_24TdAqvJKcjP!w=x5$ zcsv(3WaV@dtg+sJzji+ea=mF{o4(rxUFlxfD%(RM+Cz3jy2@|I%CB6&+ZSq25Vf`k z5{n`76Yvz#mD|Nuvzr15Wj(p(#>Dk*$V-2#iYOfabDjNqx43BQuBh`%*My*tM|-t1 zcCuvD@m7$Nkz3^r0S--BJaHsyRPoC{?Vs^SEK?=G;V}e`>Zo<)IBZMd6kX4UNl;sq zy)2(wF5`-I;jxizpGS3bpw-+$3j*e`m7UL=LM50cAJddNAJl@tL{^U8=UMP(39%e2 zCo5|YuH^SBo0xLErhx?S`ceM29?&PZ0B70ecyBbjG3gl93p*Yp-ko~wm7THD2Wq!9 ztE{}eTD?ES|7xCA_5!>xcE1hA2%M}J6S?8tzYM>&oK6In0wDQgGIqZAI|wb$&oye* zATJOm8Y>GM0r^uX3QdSJbMSz2`!Lw}Mvv^Ccrau1~l(aDTg?``2l7B4sXxiOe>5h34HuQr?L`S`rU4q{2`PGl4|J22AHu`f-) zx?DT=a!D?bw#4){4pq%m3la1yjM45`RrVGR-lZA+pWs0z0=OhHrpWWE-{)4HfdW71n6mlOzX;f69^2e} z1?O*aln6SiJXY1YX!^93bkIbUcDuGzIQl&K*LDhgiOJE5PYZ;0X?OMFJ)O~1R^Ix} zrjf1adN*{lLQ5t+tv~|FkNDxFNKeyE!8nFQO0r#lI#KDgGa4qtXPpSpeO`1MR=ya^ zVcq_hqWivL+TWx+jg*SwAOHDJavZ_2UOk259N#xO{%^=^GR+bUgTC@yJ}2TZIc;O! zMmRX@a#SHqq==E>;ZkF~U2FzVTE8I(N&$WKj(dHShM*-}h4bgB@hec6?DSR*Ck3DP zD}4gGrxm&k6XQ^-gl%Y@cQ-Qd^T)c}V=t&@GX-X|!S9aIZQ(TNXB|Ee*FcWqZgq_t z#x;J9j;f$t(Z3E3A1X-{O{)i9-d3r-RTZWcj8f-z1Jl>d+%lYZM07<#`>#}folnOg zJ&7vtqe*Evn5l{%hdq(+&f|FyRLG(NUXEHkz*E^!RaUDe3kcMc^~k(Jkm_J^{2_CH zHdU>1`(hREaW+p|Cx)GCdM_4M%Ws1=WSwb6d| z^b>rVAh2Jr>#lLonD@rVqMJRF!t}F`rqb~O zHmvj^u0Jg2`X?PznJkL5K;of9vaV0u;1!BQNO3DbuL3ovJ0oQ9paS$8Q?82kBhi@> zzTx0=`71_YE4`_J+5ie-8{ffYQxu#o@ylc`SJxSfdBsg!S`{`2vht(UG^{jLK~&b# zpw;CQjIk)m^5UW`k}H=7k>^}msvb%43mU`R=0>GA_;guiE33VW&VzKhzYE5@ym<Rr{Yhu!C(xW)%3 zG3|-hTK&to*G9~)PrbdppPZa*v&u8dgvT61B@}?|ygNQPNe;s0%@X)C+Bi7VD-91$ zurIo^;uaC+$^L3U5}n3&^CIaKM!Rkf^MSsyx_tqrl8M#CBz%Erz4w>Mn#wS?K&Hnf z)J;t-9Kq!x!R08m;3qq#QGZ~u^>2#)2Rt|5YNHe$jpR*yZ6(A5Y3L0AErlzk0 z@K#}wgTGltr5dGq{;&b422j?V+#2xkgC_&t1t5Kd404NP;QHe$!4p5zcPa6M#+n8H z8jI{7Y-630zPY!4Am1P$sBkLL{4+A>kdX5MoQXsAQ_=g@C?|092mQwmRGK0GTqu+g zuk3TkN_BYol*ZA5Q>clmT)g^C+n|l8#c2Hp^klR>Qty-VGZ&#p`YkjvY5a4fK6yJO=I#O5pg=+E#C`@9l~K ze14VORv={jDzA3+NAT>2KXY6(i1@ ujyqS|at>*VAT>B=@87YcGkrt3Gi2X}Z$`EVU%SiQ}RPm*ogN#^m9dQZ{3 zc?HeNdz}8j~B~q6OcTm;aOQ!aVwD-LC5*%i|l@La_Di z5Ro0~jh0GWx4)jJ&GmgG*2B27yN_EAaYHq?M%7E4Cexcm;D|49l}AU;!`;Ov8rh@c z?xk#BhnwVduj`ZKW4fOzKf_^I~?oFN`S8 z=X&V(s@2w+KW7y<9A@M-biZc{yLDlq)>Y6a0qKJRE*`AL6&A*;0g2Swxu#VkWZcw1 zC3G@uPbp)$9w#oV$Xh*ykG)U%5qc)F^T$hf376H5=w;T+$;vc5<>u3Cig8wj`MdFd znmoc_nrp+yCUB65ygly;4z-#o53s(Zzk@3UblO0W?Rxa*Bb~keI`l&@=wkMWqY7+S zF(#OB0cw6@!;g#}*?WCEUADOamlqsXO|C>fkr1Bas5p36@`Jt>$V~s_9pgOi&dcZY zzPq&1)lpGydnB!CZJ_urz$oCmDVyNdSj03Yr!{5+w{9SCQ4UUZ2ZZ{NdC`$ zoo@Ux6-i(rY^!Tra%}J_l}x}%Q@h>F%UfI9&~PfB1tRJJ2R&cfxXyLIO&!BEQ9SW| zLnBD_ms0|S*m#8Sw4H*+gk0~MN!NG2rsi$`(HncCqn-{psrh#TPmr{xB)5o`-1c>M zVQnH@DnbFSfX3_qZ+Os#ZX}X3-UT4M+{w;m6B-`gUv$plbaKw^aPjeY$9q(uqvnhIBM*(iYz{u7`yN|p^#2`hlq+NLj zWJv3(bNxQA*NT6!H7Tc4Quh8txWY6etX?imo05QuF|O0q9#E(kw~Nud*Z$B@g-2F}hym<6c)=?<3$OP}`&O z9(caGc(+&Z__nr4s$%W+70~@OwEpg^aj*yg&CQ6V>FPXl>iOKgg0==mdN}-2s=t?`0tn97HSS0}1<;G&j!Q z^@tQZawtU5^#OwalO{Q1c0k1t=Km3*)}KGhJ&>vY6j6-FcdifAl{hN=h??gog8xaD z0kg^MXIEGaBO(9e$hG+4r+2lS+y4Kxu#vude_t$q{ePDF{?827e?Z=QoJkAOt^VSz zL3OPC!&jur7r*BJnLxaK19wBmluUG%e)0T=BY0;E!0;Bz9eRCW{Aj1&!1IwFQ%%Mi zpmu!?UN3JvH47{-Z)wz~RxDE9w=_mbF; zK^|{--<8sV8^%LO|8jmX|EqUW@A3TxCCQ^jJvu*>4cY^51dt$7ewu&IAcqq?12c2@ z-}tAIFRC(*qFl-BKZd{Ok+dj=qN$lX=0O=MdjpZ;~cWw4`*iMWCB+#!epzCyP})4`!3?t)8_r$|JvFk zntYKPBv-}@HU3i@+!p+#hyaThE2gCM)n`p-KwX-HgI(-TWyo@Xl2S!g6{AENC!qof z2}7w+01=W&#BqswE_tlLqsGhMPj*_^zE`P&dW-Q$aOtk~0V(3u>aB(z&Z*5OBf|60 z$zl^ALOvli>XdoIn4o0suge4%q+f7II*q3$cD{rqR=NAe{o3!JAi))*N7n1Ge}e?= z#Qng1;vpmqEkq~L*WO``llq1kF=1207_QxAJlpq-j4L6=h@8!@p&%K(3L@WjObQh< z{8O8(T{REbx9*1GRWc%|(if-?+99UE6(*NzWOq!n&TTc4ifssrfHl9Oh2kY+T;uW529Tz#*J0F%_QReqZdk$xFcSl(Q4* z&!-btMaCp_R;P#SRPOxl`z`_<`7Wa*F|2pFmt-CMqx!@s;NeSkgb)Kr(wHyD{II@ zLk>9gHX|xZFbDsq(7i>>^a4i^Hx6_0FRJu1K1;$-G8Y%-qw=ycO3s|M^*>ln+OSg7Ft=$%3cF0N~;*vR0OT_^Zd*uCg5tdU%%ACe>OKa zw5q_88Zbn~{-e^5B$d8|{Yz24BFuDgfc0nE5hhY-;L7jDoHiaj@=|0IR)#Lbmmqa% z|14~)_$3w0A@j52UxC^-8>JOgYF8otA`GRlNcWOh@AiWO45XtYg^vAk$+q=J^jd13 zxAwwM+6tgjtPp&mh!(d#X7g>HLkS7`0o#&ND@67eiwq4WtuA$ie9n~x%jDvtw);6s zFJ%AMqY3Bq+~Oa2NSK)Ug++m6LSesigI^ah5ZM?1EnUva_`{c$h8b)Asnrji++}mS zOdfJS4qf0zpiEB;Z&h7bfYnARWx#Y;FWYHxRIvyPLX3VEC*VRc%qtS2-{DM<34->M z)spe2m&>Cb!ZRskjce>&Qyq`>k( zBH8cVqx1INwhe)&h9Ny;Fb^3bFy4??)1R8C9IS5Xr{<=GR5RH2<|PF-n5a4j_^Vr; zo{wZZdi88hFX|hWH;wu@w$M-gMdV*K_;@mjYP*lSgucx#Ee18VZmOMy7_!zDtxVJx zcKQAr|Ef&{ore#O!R&RwwkSD`af;OCB!i(NHRl;zT>Vfp2b{PKS~wRLf{xLv95aa_ zy@#hq2(g?IdAK|9q62QyI^TM?tz=s3(pzwPCi9b%af8zYX@c;TGkMcDd}x*hnr0VB zt@qA(94cywl?XJ?!K=fkqPPcFYlj>f(YIeNV?Vv&%1K5dDk~|8l2r0-A8!b5+sGn3 zwoBDd(}wghk%J;4bQV0NB&V*?9qsXT9Cwxlug=pB&-Sjat`3dKOYfPy9Rsw{?MD5MU$zQcwdOwC;Jd3;drUBB7!3c@iZ3y{vx`a>$n&aYR6SF zbIO26P)|pFtEhJ0KQ8^`=Xa^34GHKNM&pbfHU1KIS>iAc4dYYHD}RfGgyvjN!e_Ye z{2rStq=2>QM>$zUexPrGa+bk6h4LA-ft8f*s0yL=x2U1%Nq97zr~AYsa^{|?4ZHHP zhpYbIBV{$9J`)04tq|YXRKl5?R84)WUvPR`>tte2PtQ$3u=xqPD+u}CHH%$8@Y(vk z$6{VPYZF=|AV6CpCf4e+*5hGLcZFD|m$#{5dj-2&ZCr;I8HYA%JUJzae;;lT+!X20 z!tV6+m5~Wfd*79fzpHzwk{%LvKOJ61%9zO#$Zr+ee2w?o>6uJw#X6gVi+-1UXQ@pk zY_oSLxtiE%n+Y7E{c#iv7vbNb!w?zbMU$At*Ws0P6`2<75uqN*z(_^I*iucYS6$g&6ZI60dvxa+O+@-9(U~$CH5!KK6Y2f4z zm*Mk`1A*n=)R$7mX|PKH)m-cv*bL7)>mw_6qd_)7p&1|{SJ%Womk?7|mu7s$y~$>7 zPy%YngE29z{awQ5PV2jL&Z$^|Gl?R6r``cjun2gP z1jV1x`XHN? z4~2vQlHBb)8E0pq|Nfl7YDs1wVNDLn5wrbKqs2IlNhfBvt15Q8Zaa_X=CZQL5y&^# z^AW+N&m=OpDTXSRiP z{Q^|rl3J3#8eNWw+BG?j9S7)q@u_h zSfIGSC)xO}kG0{${&w{%ynga;8&fO<&L(?2+luI;j1AE8uzmESaVyzU_-n1n#rmTyOKZq$^Sdt?OYJ-bxt%`}A$*{P(n6y_EPWSANlgV?EDilMpQgN&XMPFxGx{A!)7JkC1LUAL26!NEoa z305)ZFSn`Nu^S}qPAMM078`7!)oj#Hcm-Mi73tTfWp6CFnz+~~4(#SO zh6SMx|KO8lceW8xVvENGgDba`ES`1S^ zMxw)Rk%1kJJT$9{MW!rvug~R2dxrTbgUL&3Gz!cMyS5$;RHtSAlug8~o<;1g()J5w z{-^OPJE91(8X7(q8-7p!$eWBR@FeWUwvvzW>b^C$Pzy{LcAV|Ly#B-$6)(%LE&XRQ zz5&g3con0^ETw;*uB@HagIcPUOAMMBuHVHbf*Bv;~R-Y*gcs7_`IyMju#?^te-hixRXj-add67Ta zA`eb%;BN)gj`um=SL~ty+Vu7Wf(vF!{7sB8tXPQREx@_ClPipA z0`Fyr#!FH3fgb1E)gvPaDS(EF>8-x@MqP8{JeQ)PQ@wH4@)(1EgVaiT;e~KQqYXXH z;SWVD4|36@c^2)2gvJ&9BSpB1({`yF7|Flb?>2z01$YKUJWi|6;P4{o5(A0LaoAxekB{?g7 zbBT*8n_8s`hK+tD^sC97Ga}VSw-E4?A0grEw^Peo0)uC*Wz?(UwdU&J%BwO+1M}=K z*=i6~qHR>-!=iJjY~^a5p}HNS7A+^UZoEcP(~8c+yuxCj$m>q>s!ND!Ys}U2&2ZTZ zWs|CM@DwvhhHfhAcKKpa#%cFFa?bkbP2z4z<$Oeo{CIP+hoYj2b5*2z8Gjiys8p9H zpLBzgy{(=B`U;dQ7i5LkKGhQ~hBEgX6#8SOZoy~quyS0q0$f^7fWlGN)P$^_-qLM) zS7R`AH;=w#o%a1@zdw((wh<0V)sQ3V6AX>ImcpHuW^?hx;;O0WXm*ru6MwsJF2_Q1 z3!htZ+GYMi`bWy{QB_r7d~S-kx`yMD$)6)9@xP$FfU)Y1cOj^n)yUwaWtloGmL_g) zBG=U(Ho{+fum4geOa}N?e_yqh{c~!J(RX-@`)D@D`GV6PvQbu+_`N_HGWFV`q9tRu z!EJ?*vfY=?e+G@>plUvPU})2sy36m80cm{kE~=u&C&LBQ(A#861mN> zv)al#wm9@N|6c!O*RSjMN}=DP3}<<2;H6Nqxjij_>T8|Lx@iKVoQsAZmamRPtD$2B-iVt^qqZcvy^G+K}TbG z<>@tjd)o#Ku!S`B8H^BBKe9v#LY(%v!2Zefd|NB-G*)T%|3E`t`(NF+NXMT^cxh&4 z@M}9zlIhcJE%>GmOpW%Q$8g9x-?N+IuA&49tFJcr%!F}JGRSOK+N;|liBP{oE{S}h znm?7kiKsMl01XM%4|%nRk7qzpf|-*ER-q(ncJCK4b_&3@+i?(Aeo@SE0r_nFFLqQE zqiCPyr!y6R&jWgUOnKYWQFTgF&(*pe=bJ;Lh~ARcy!%e$JBP0Z$V$(rADI71(`aw84}X$Nkp1C%U)MQeb8@)m`c*tm+MgKTSm`t8om_qFf@#n@`JTTcLcNX8zlLw~Ec{ZmCkUtJYef|IM35 zR8h*)kcq;40U5 zLEa68Vo3!T0de+%d_rD7Fhv$ij2jxqb8;X2ZLx~l2U)-!jRa`jIs=!VD>@l+iTsW8IBN19H z+=dzhbI)(}a;W#&*NxEGV3&TuoSX6QQ_iHhl(AC(C{Xz`f--@UVP zO?z`MUa9EFN-Jff4{5LX#jt`+tu&vA3?3~C#yzCgOr74))Ise=sF0st?||jFc9o$#6Krf-Kd8e+VtB zk%TOK9-yS5A;EYU)5Pqzyqob&Q5Sf)%GLRmCnxLc!kPO7DQlf=fkmes7uW%>Gz$`yR}Z5-bfV5+*kD?^N9Fj+_ry!%lz2E^v zz5G6%6+loxb-H278rHVd6NHmet1?PxR{k8;{I>iwzUuzed8oSgUS-F{j)9CqouUUW zxCu#c(k6ycP2RpV7+%xhR9r177GUJ*`GM-jkaM-O3%Ucazd4wgm6RW>@pIYV)r_uY z3dU&Ro`S|iPTg`iJd&g%*ac4K{#n_jZT;;HMqC2>mT`KEoBF5*M&0bE{YzRca26*N zK?(y#G>H>@^-V!V9IK$y;we{4X%;vxE34$P@0sz_wCwbXps{A)ZTLC!+sxHiTz=y^ zJLlI#)?HIdpa-vPLv3@~c|%nLwZOutg~e_3f_cCezaWm(LzLv;;e`}>PSN8D4WZ+6 z><*R^9jM|Vd!~GS*iv-JSS1m>7M0miR71a{P;dqgW=px;R5PqL;OqjQ|N6Alg74X1&E@6r8fK)**L)15Xb-;_E;dPOV6id7O3IaGMDQ9m}g%hXMC&Zv;ac(SFkIKxv==luB1Y4|vQ zP3&DbJ?E4=aOs>ri$(0Lz%~aZ4Odkqn^Qu;=C6^Er-hF1BPW;DW>*>R4P3h+1YS1g zSM?}jiuY1uakPr|>)T`kjryc|dx7WX?@9En=iG9k_U`N^dd_k>fj%X<0wZu|?$_@A zXC1oZa<1>MskIy|+nWmiq0v|VWj8q_JGeXoSU6)?g!zDpxu6C@kXqluF zVO`z_wEuwM2NuLop5Tddk2Q*`mK;JNB16$hg!Jr}#+&Bx!57C#Qp?@gF&Wz5?OWns zF>bXiq{Z^{D1AU#N7)RoN4Jx9?{~v7NAa1~@Jl{n9{NW$y=$kZgrcv@nRz639lCLc z>{4>({NQ~z?P9?5+bt+6N{>X!A2|K`bc8PGE7|7J;{4CAN`3B@3Cq#9**>cByN-Zo zEZw2VMQ_#jBwnZaC9x`Coo^nKVM;?}2aY1k_f-vkM6&7W4Tzqym(ehm$>4 zrY3r?R=*~xZ`i0TH*{rN3HW4K^>kF6E30$7%rqZ0EmRqGY+pKvjpu5!O&IgqDw|#igso)xj!4V{dhhMj=taMBTV9lfAlzM4bAI$>8bH%8JPK8VYi@S)lj5 zdBi`A$+g8xoxUg>aV-ct_<_i_Rv+m1 z1sqrRDFM$~u)}Td3py5zbVQfo@UxGsxroac-F!B`v8wH22zuZe+9^$9^*EyzfjKz| z?~mp(J`=g8;5mLtODvQqxjt49j)Xie=*)=Es(&l}TS(kqvT4c@jU=NCqo7mal0zT! z-U&<6di~NMy^Jg^ZyT4}k`(Gq;NSDM(+Rm9MI)1W|;~y;22#AuSW|SMz)@$0o4HEluk+$1R`*F-;-*|N!7-YC+ZRpjpIIbRc zoSt*cH;UDroHbwlLL#J4S;Rm?`>gQ&$Ea=_A7??Xeo#o7Y~lAr_7dMHjxtP2>pv2Et?~pGGkSDIy&2k!T+EI34i2@%oXV2axQGoy z@{YS)F2tNtWkuv1gnpJf)RA*)9fOrr38(lOvW^aEJgzNG8zU2=gM&lPsa;iFjr9=; zlP#a%10tdgs3yKOZC~OhZlP%><0KE zoN+bpp)9WTrmd-jXAy((t0Qh zshD|xWAG*nk=6Q?-)O_F@tk_a7bP6#!wPDk7}6}-_(}HGtp0(ZjQ*>(6+3+0QEgR zI!m9&`mZ_#fx*f4$NC@kPWXPzJ&ysRV(a#eZ<-y&&y>rv)$45su7BW_$M`yvWzJG1^Su1;o z_NXI?`d&-I)~T|DDd`!8iB7Eu(qeM-IYqQ6gt2W|X6NwzB7-m0iSUS5MzJP_qS;8S zg%~j}Q#$Su&~sSFhbKMif(BROBwj~9w zqyp1f`THG`lPM9-qy~2tlhNw=`9As_Mab)VETmJL`(A>Cc4;e5Jw$Cp6G_G?RrEa; zg|q(Q`u4^-gH>BWh87#0&?30MiYa9jOcYt0&TTmY#c;WUgV)Wp+CnMl+jKWUKw9-E z0WabwHas)Y=XhW9ws8jj5@!7uRo>LDx->z;A_DFY14(Q0hI?kvzfooqmfarVf?)-A zvOJnEpPl9C%{)9?c~&C{IF=^NW3@jtKyJ(MjN<0v;r$y*@h`2b+!3?X65LqNvmGh_ z38iy>uT%VhBi%QZV)NVZr7sksSS+m2j^rZxEFja`CT05EAp3;US%vd1h^x_F3>8tZ z%f(W}kGp0)zWH6weZ9N`)`JbAQDQ{zAE3+E4z5fswt(bn(f0OnhJ&`Oed2OzJtJa_Fj8x#h=aAiL5L`E#6rs zcvb{2LAz3C6qyv>2^0d7N^?h9*GHe^Q!3<5#{SGL|ORkw?dn-N>vGxd3 zjb&J3a$Eu5le^oo4gVR@{?DCGN^U@?S4&Eri}9b0Dk*agbt+tYB1_9~7A1Q-JSU>h zgRE7mvQQ#&a@uDi>_L=cSI8EG%Yt}l;nD?&G|y#Em92jzL9E;G}!*3*QyFM zu9dO8?OV5yeoe^UvZy98#i0lS~$`+<5TT+oI`##y1EXkVe%ZL!!WoINs_9W}r_iY&4 z7-sk#^?rYTkMDo;m^qJg-{(5lb>G*S^L)J;x}M%8J}z)lRlUA-Wq&)6`1+^)V4~h4 zQOnGbfffV?gRrSe5FrQb!W5>_o~1t8w&p`#Ul^aC!b~c-8xkQ`9duO**>~%1f>W0GGdRi=0eyz_|ZI6c;ACJ{Z#F`7&&8l zdFSW#eD*OHDyKYu$<4l3-;66c((Ff0fkE{jW&H{XfbGV0SKKh~E0a z-=DSk;vNHR(D!PF1Lb*Oxo4l#OOc5FqosKkbPP1yGq#Dp%TXd{*P-Wx5p+_7kex$~ z3Ora!k@+Lb8BqAkIw}5Dru2h=xdGxDgMWv7zoUG1O857>e~M=I+}!^M6J@{6a_srb zJ<+V={0<3!)HWQ$+pqo=+(-b&?~U#KL86S|sOp?@>2qC9=&_2haK;~|N{NLQRgHTF zXpHjQb9c_+qVrGc#O$2T={Ore(qcgQf2Z@m2zVc!{+XwA(M)x9mH8sE>)gP?1c0{6 z2qRL+7KB1gCRuuqog(mim9%52Mcej_-(DY}H&+9+J6AimIu{K(gASMH2Hj}wB=W`w z_ZH@ADrQi`!%0A=|MNR1-7P&Banu3hMQ7&>0beZ)T9!_yS5bq24}5QZm$TT20>XBS zI_zOzU-j(X-`jRo>aJ$KZ*I=9uqx#%0u`6%b-aS?)-i}MzC@*@MDogdRW7+sHm^VcfY z;DyfJ861&pNd9T1K{*K7)#3YaRAHg>Q$Ue4!6X*6tj;#JJh+?zGpQk~2_6XszZ8dY z`OwtBExw%3iKd7oo%-IR!f?#`b+Ag~76lO9pL|GFJBV?xBiP?%nxgSN8?tFaX;9sn z(vF-qUXv$zFJ9V_>cH3hx!C!^v2Y$4hT=B42;CNt$4zmV_h+^?JEN&uvKo3yT+KJ0 z^;+Qe$_l;$Zm*qI5ySatouTGA5w^0yhpmFhyzf2&=Yfj|dRc;iTX{i?CJ=V_S?sng z$dsPH(b6Ec3X0lG6HeLA$2x^as9aj_c}72Rk{lGvx{v@z2@48I1BJIm;}7czy;)ot z0rMZnB8dyRX8K5Rb24eWH(Hv+)~9;RIKS}oDF_4Suh5n~WGs?YhSUT?WlDfq>%pjE zuy*J5`V6w(+)p_r|J~@E1BC9u`Mo4oTcxte)^UrAS2u~AR12K1{;70V$Hib-fk5XA z{3&~p;mE8Djm~chgO0OQavopHwk%>&=J1%gXh?eCt1JCCjg8ca{Q>8SylYCF!`qv< zjPopi3*>fc{I&7($pJqw3~z&?uzw3M4H*y@Jt;G8%ltRxfohX?M0foyFwnnXA&_3^ zir{~1XL#E+D(XglJGTdZpJa{gl735BP^1M&v>IhT^VFGoZu+)y39$;iwZlUTJJxwPgl%f>Acs#WjUa z6`zX$!^~l%Zjl~IBJN2qzscWoyIzm=w!>)h>O<+wwMqMy_*DFE&I;$|X@}KbBW%O4g6XTm+(=XK( z(3>JKmJzwrPZ+gd#RVlB!Q2scIoSa7S!kH?{rpD#3}K8?3n_3jNl(iEXqN%ISvI>q z(;&Q(Ep1bYm)Rm&8{p@i!lVLM(vN*Sa2}-#8Um-V$Z^mhqpTo95-`NR?huaTsg-^E z(n)=XCWnMo!4d?VMumxx(R!(Ig5!<64U#Fbh7lnb8UJvz+05^^wU8c4aG}UIk+-5+ z-!YzvaqIi(@B1gLgpgHfBh6mlzT27>uTNqop#Qd?acYKP4e_gG6$mFaHT9q97lvsQ z9?QIIN-VGyW-MiCVg7yB!m8dSdj;L#EChgBw(PJjD zZ%-4-TviV$^S!NYkx#Ch)F`}e@_t`+%U>(x*#C~H>5HQ*h&zz;ez0Bx_yhrhkx~W) z@bQ08i89Ps&oJd`nTvWvJ#_sW|cN6$)Zc%oxks>{ZSU&9QXn-oAFZ-vQWDw1H zVXVA^pK3#nRm8-q-kqM(sSHD9qQCgiYNOlwiwfdhbU~b%Ucvj+AXU>9xRNC(K^dNI z$yuS9f>X$%;ieUuzeP5$>a{s`hf>QY9#+6yMLW0@7}87ap$t8innT>Tivtu2Uy>k?8H+~Qb_yJM200UFr}|yvW^z5B zjv3T|BaiBN(^7SN$O8%h(et6ce@|B1I-C zukkhO+=z3sPWUw63XbZ7L`Tzs;9F(2Ym(2W9_Rn7&^p!}|urM@sAOa_UCf zSdc%MiVIKTGZz-=14oYNjFrhKyDE|Dh6w)PPXRn_Mn*?9H;$$O6Qle0M*!ObO-;>} zfgIGMFClEz_(L;_)%zzukBY@Q4> zB+U6Mi{Z1uF1QPhl(yXKI5zQQU{6q@gCCNsd1KX0eOTNgMgglHf9ims_sFY!)Xz zzp#Gt1n}HpCwj-T9Jo{*{)~UZ#Kbf=H>Y>jpD3tztz3pOEtR3bAnUoab53@4tiQT5 zsgOWWzx*p3F}^x}NAmQ%04oT0AEAGh7d@u}c6E;$$aRo##bHu9wlgQT0}vZ~lh6L? z=T`7ILgS<5?<`|Da%S*kpxuh)V0C}t*!_?GXQ0b7zQ~Pq>Zx0#SRW&8p#!D3q0R0t zZVhAAsBkosef#F1k{<=%jCibRxPHyF{;(GeC#(JON_-RiI0Xl`K8hJy+A&Zpd0*gBYn!FWz$gK zWewt~=C^N4vXdLNAD*q)a2T6xYa2|P-+kzbKQ4Vy=ad8WZ9UzoB)lJLPju7f$*EqE zeAu9Sc9Ev6MY8p19&jkDr-NU`JM~lIZ?{=Zu`azT4MUA>_bry5qqwSzSDH)Yr9Zs;xRgcc5*TTPu&QRV3pMHRnolA2Ibk zzNP4Yyl<#R+}|5eTWAtJb0lNeA=z$D47$O0X*cG2q2wi%5R&cNuC6yV{GwB`E^c>~c&+B~-+n1~hx#HV!*kAMqTCq6}^=%u(e;mjPT_j0z6y4|ADQTGAN9@{h z4XAd^QhaE7x1)Ndx7tl1FM}h!Af9U$M?Q5o`0i@Q+Txw2U3+DO&@UN>nI`Y;GRr2f z9oT1@_qpbYA|fKZ!O#RrQu``xW`(w5#6z%o1}OKG_L+rji0a1#s6ff z#{@G?od1|D<9)45n>h({zx{+z4o|n4-hM*%2F*IwfEQ7jW>w(kHFhrc4EtWO62&6? z=uk5PEXvchiEgN_txblyL_Dv?dr$7|?n<-SVB<}Ou~`WTxxIcAB6u2jkZ~DB+S=OM zDjgNArtYoH;CMbq+VAlNJ{VC=Dl^cn)B>NbRQXr24tu-{0%T*ooq(`ikjH6d_eWJSJS z{?hhz>mH@s&RpH>bZ~>m(sO&Wd$zV;Fe=pjG7pq|j%=nd$D7UbN&5~ygsvaeO*o$E z`@uMvhhP|wq$C9Y9tbeWn< zeNp}XU_zc9Pt1EGKeZgG$nuQ$#!$=ClTaqNES4fU)_LB`@P}vmd;^9Mj-_w`18Utu zcbwtt)GVl@u$pdZdAYC}Ntj`s^UOmtGc$AZ*E^hv`uh5U&V}*Y`T6;ai#C2N+P3bn zA6l>rqP%HXEOtlr*a*PYF~T&d0Y`N{A|g9>c8Zj#jS%&F_t?BpqFr}1sv%&+#RD4P z!R3?H0HNRK(xbx?f;?DWbw@eV{bb^E28Tr35d3V5tIo-)+3#RzNqpz%>MN|yeESDI zVS{Ydz`3E{8}bTkd8!>d-l!{A%TpIPuK6!J%mfX7oBJtlQr^=gQ8ej}MApCm^s+Pi znE!+U5;{^@|JZ20F$TmnpQzhiGGJNnwZ8f7S1Lnn<`waB6`$2%j7r3H={>NuhJrU@ z6w}g#!!&suJk1z%0RYqoX*njJ*U@vErGR2_A_Oi0+C7m<*y3!wI}md zum^PUx03Xwfv2`zzQA7zgjQz6ut9HZMOHIultM}upgR*$Q&STb7QTL+<;w}+m8Pko z(caz;n2~WYF{uZv*o{{`1v;LDQaW?>jcA`_0{5}6z9GfO3jCv)cfdAPy_0~XTKDdS zU0w3de7;X%(9|83!lb+`TO~YXw=y* zS+)cZo@Vez7$&oult#xyKV)jUY-{N=+`am)@9U2}UcDmgQ)owJiiID9Z)mys0FNF#_$jJamBr?Ii~w*jOo~fiFz{^?@1})s%Qz( z&SH-s^Hv&0+;2^r@bUUP^x9wtFnBM%ZsM`m?p?XwGP+6eBa;V=4VsupG#?IdM@>os z1Qjq}UtbOmj%UwSW@jJKq}audTD~Ai_EsdECX=~Y6-Fl~8PXrJG)c*q+v#tHBWDq! zA14ntRp6!%?wdXc*cq(c$Sg;x`YqnD^?GP;_IoZ*xZkSTZGL!M-!hOSjB0J4+Hh=+ z2d=ii<0>3@2=!aMJyjO^;i>Ern`{I)=hMfjtPCsDyY~b3kA47)iM5hOip~u>wZwjJ zzsSCf_rprAO2HkQ0*{1U8>Q=os3N+fqCq!0I=Wz@OPyp?DC#B21IE(rxwAGBDP;tN zz9A(!Ik8J6<1E46-29)#?99x~jSXeDMQu&ZufUT^Q&ZDGhCD;~tDf|a=7RZt*Fp63 z-{cd7lxFu*<5AjqVT73U*r1dYjssu479Kocs5_sTx5AsZr*RqA6B$)LRZqlE^`w-s zEpkZGTCA_n%k@kN^8(U@ik&6#5rIORUaJZjRjJQ&=%)(D!)X`jSIQr>c%3YlN`iS5 z&CF|6{4M&A>9J8d_MT1a-XmKKG?~iJdnp!NSqhGO)2exUe@s~$bTx-1d3#2PKe|^kTKH^vYuejxp!Mqs_|nz#Y0{rLO8!_h{)O)$q`P1AidY%c zi{Rne7rUN5;eS9aVcFodw0>{iyNaViK*vKSa)fk9;L&9etOlH9VDdbRkZHtOt+_$? z%8W_4;9#&%k56=tyyzvwK0QNmMV0L6nCA{HH?TV!;bp=JP`LeJX6B{TtgtN|9UWjF zadmaw7%9ELz>uTtEzt|s)W0*kx*A#EDhiGZV}B0m)_0k?<~Si^Vqziyx!^Fw1Y6k- zK5qGtJpfnEA!c^o9bDYK+tOrJFdVfo8G`Eo18sPSEIm(WWooGa~*T~jndUmys zj`6*Nets>(EQN8GwcQwT6E!vOQ?VzG`FcIYDK|TTnA;eklNW^hmzPrdcXzq$9|N|g zPrDt;$AiD*>a}ZfT#eDw9si7*9S_&5Q$1VnKA4nM#+5y&R(<|0y%*i?n1=WOWMf=b zfA`e~mmrpR8;Rfh$|Wot5l3Ag$*JRblmnLAa`}&poy%1`jzo^%WNSt;3SNnGu9D=Y zzw8|(N7sB68ME+nVdS%4Hi7lIwXz<2aQH-ik*qYiZiD z4#}t^@{pMZUC!6PoW`pn^zt*$z8U-QTqmWq)`GKz_@7RF>qVmEAkZf}-@Yw+9!1>Q(Z1&SnYAcJ?#EvJJ8SQv85R~6A&a`88Pw7Ig-pc0pN+@E zN9?An(UPrD_vHr~8oR~sD%qA~e^}I(nzcxgxaBO*t+7?e_$g|vg}a*={i^!PfB#DK z!>qR!56sLWdZSaESlREfv+=b$1tolCzxjA8I8<2TL369`%-l}un3UYx&Pm1Fd%LcC zSof^0rRA-SHJ)Y{9UFC>Z(pnn#frU?O}0$yqyolY|CV|o=b+P9H1;s%trc@hYGRg= z+j8&H^=Fd&ZZm*U8E=^BqS#G`ZTPPGaglOL<65amDXb$ z%rOC0M?ck84#|hNPlqHCLa~{q*=*wXKP{X6cF@KzYfg`uHMj{*9BUn+6!7pP)Qxdz zq}=g}6arJ8=^P(&Q~F4MZt=8Vd3z@j_&*j9l?S^k$Fu;iHUL{GI|o9b&n|0-{q1>q Rzy_Q|=cd7pGL1(e{|~8>o8$lh literal 0 HcmV?d00001 diff --git a/store-for-business/images/msfb-provider-list.png b/store-for-business/images/msfb-provider-list.png new file mode 100644 index 0000000000000000000000000000000000000000..2fbafca80fa6e1103c11db1d8c4dcc9da1882193 GIT binary patch literal 34482 zcmb@sQ+Q@u6EzyWv2EMz*fu*IC!M5|j`PO0ZQHhOcWm3}*vX&0_jh-2ah`LrFkKU? z)~Fg4s-z%^0E-I?0s?{{EhVM`0s;p5^}YiQ_I2OXzs~%6fZD4_ihxv2;-7paAWVhj zg+V}Sqv76u0>08Pwo;n*ARq+6|6HKa2iLzqK!PNt#e~&d^e!?18W`hXK1-LEVg>E( zvLea_vStt`mr7bnB4T1~yx(ImmEh^og~iZ8#X)1OC)3erX=(NDbz3GrFQ9nq>pM+9 zQa4sK1Co+3eT9gTN7liUKgY*q1WVdB<`!l?iteKk8Ll>)8byhbp^YW{P(c0gzsD3c zF%jRCkU5lp#P^p%k|1cSh(JSt`A&%0A}T4z=$WYbY4Ax-SbXjqtobqJMQTHR6$+V9 z_JE$r$s(s8g*aYhx0*F$cU#b zPo~q8pAr6Ryn4UvO*pNyRUx;spMkmzhM(wDug?lg#UU7sc7^YP-B=ASoQ3)>$6b}O zwm%^>6+E{^La+{A0xenH>fW@0wcX>WOWWu6)-MAt?atO)tgh~dQ`&_U&bt-WkEuOE zjsiR}cCSg5a6mNg*k5Pwb739`YSNt5gM%JKoBf9{Gp3!LQ#yZZDVBMVuy{FcvC$pA zKZn|qd@b+u-rESM`f+iWTx|89dOftZc}55Ks@Qi0k`9ysHbc_TjWgTmkZuC6QxMdL zHsJhs&OybMs`XJ>v`maQ?ZZlqdf-OcU`h+1{Sg)Ua--4kIS&wy#h}*=@TM9<2w%FS zARpMeVd>Xxfk!G>?R1>+aQOW^bP*5`fTy1Kqsy(`)=N5x^s1=Ro!m~P4{7d7>sgs6 zK?V`!=$x}suh!`mF>Yh68I9INY=EF|s}a9GCe!@^74=-tN4nMaBrY)ghxKs(Rt-ev zFPmPnp5b)0@|5P^P?bu`zYvM;dE{J3miHB5lIV5$ycgWw_}h~hdVW3fJiuHRwPQGthRGi*t3Fq72@0pX&}0_8ztaw+W;C`24{bv@@U{K0@mjeaU+yKy?rX|TT$ zj);5}9y%Z55`_IO3Pn%#GqT;jyM`~^o|k7q1Z?Oypq(St*P$G1^em8j{7O8jicP?i zW$ZB_y`BUIq1Mz~Pf4YrGwR&j(4=|V#ha7!Gr$;1c@;pnIL-yo!;SO;ztlMAG!RUQ@meFs7j__INO~KccAlOogl3xaYc2yx6ChKd}f>lj*l| zfRxi>DR$r#HgXYbv<+5Gt*%e!WLgUO<|tm9TO04>cn2!N<4UFqtm>NYcQ+#TKOUFg z@Q*|rgn0X8hM59hUWO=L>4nRty(GtcHHI;WmnU0XC*>HBEmztlt5 zl;RmElsykx84pgUIhK1je90+r)B}J|92IKJ{f^G^8jPqRKI$kyBC|&JmeGm~4SU@F zg#9W330YgIUGX#Xq_iPfeTjQ<4&q0Ou79$!uEn@0h(z==c{YckgyiLp)L29TnsQio zTu>H>IYPRbC~JKpG^a1HP4ru`px^P+5Vp@3|f6{n)Y!@Xph;Qsh)0Y^J8p)Ir${Ip7$+k$pi@ps& z72|5*Or;kF0EC57;QGe3uQqf_&{xox`y2JThV(STW_lsPU{TkC zlO;^I3%><7Q}+rQn#fY<~TP@R60t$7*Y&LK)jsc3>1U z(*?zn)^EG`kX(wuSe`+lXvp}f9HwQgs!-Xm$zrD?IuYU@Z9ypLNm$d1k=hxY|g+&EuHZhm;7Kurm+{`j* zwj9@th9)daIf4!m;d^|oYwtf=!{iZawLSRZb%_DV(si9*-2rdz+Z`c~$}Z<>5EvA> zPLwX<*kF=x>I&zZrPvV(`*rP14`>-?DI+X|-6cu!y}+i;iWq8avUE2TdSG(~JVOn# zc=BEBVEa^&J_?lcOb$}_UQ)zvkI*~OnV*!JU?6P45{n6J_R0g*WOnyhQO0lW;jRW0(35AkMlA&X_EhZ*Mzv(Q-GU3pR0XzTmsCLU#Bu= z2{KZ;6Lb7=pG(6y{-e=|$gO}2Dc$!UqGClSmOPx4k=@nm))>F6%jVg!^T-{zL-({wG?GM& zsb>y2&^I9kS$XHQA zTsb%Fwe*N&;3PQ?iH&#!?51Zx4k^6feY)9hx~4o8%H_l_K|ooV=T*2jV_&Y1f^(z) zY3&4zR5ioO;d=wYo=8S0Cu5F1d}OmAq={xj=sF`e|G-B`US4fz#f0GmnPJbY)qZky zVVq5Bv#+tYibPvhP*~|gYK&@|MG^yFqUS*f^`YLJ_M86C@%b0F#eg}{*oq!|QiPi9@J(j-) zm??U}H|&nKE)8)q|#AJd7Y{-_w_PR&rdD z8al+kG^1fTxVyaMH#KK|IqZlQn7XvtOeT>H6vK*$n-XlN3n8V>-uQwseVj^4`rG)o z94s1p5TvLzvl=FIVfm?nzk{P?!^wQHbPLMC3#} zycU8opU4A_H#A!;IVcwN?v!LVcsX&$If`URrL%S9H59^yy z5D!BFTrn{*nf*FzZ;^cdotGxeB4|ZL1u@;Q_&d-4TK{jx9vFX9dk%=ciyznCK z8s-}+)=}evpSe=Jy5{O(|Elg{3J}vVwCc;riD6SZ<1d`Y(DXqR=ol!txiL80&YMBg z2Zu)g4EOg+LCL^Gz~3FiB_>BlV?-FLzPuk`^O9`PSQAhlHFPnSR{ZffOgE#l`r57>~)}uN$bkXli~eOJ{=B z5KVN5UH_HzZNl}^cUxdgg2NqN$Jt8t;3i1*P0Ee$^K%KY>E2|PNSU8yU3|o9` zY)qW53b_V74Gw^Sp8&uOpl0-cgP_M(qhN;n1u;nN0H(rf2WyAxR+E`o%!zTI5Q*rJJkg$@KBddmW#;1C}&ba z6k$Iw%O04K30yOIOIn&Iy$oi&d-0S6r-d94*qe8=?51O5kbXM?Sw3P6%NL$IMtT4DC9}P$H!O0zg>cY z67Sa!vnZw@Q{%`Ms{M44`{-OCjy*zCdlVZ14Gy5-IMf2*4MLy74lGO2;!@g@O3jcM zs=)r$Ut{`dTe9&&EVyaSr?Rc(rlrCh8sH-$HFg&9D1d2aj<8hJY%@iam`6+j#T%9y z3ty3)l;#%_0--Zb9P~EVhK*f=1-YyggN(k1^SfkPJ3=5SVLRAg7Yv4mnteJh)&~W7 zR7j!0ln&>It(mH-SqL*)i=I@o%?ge4Ti>)&aeNjw3W^gY>D_k`N&hbE=_T|R=j--h zJinjjP(C1J;~%1NDk`(Hv#d}L*E2JI0bkmMeOr(clmNRpw@`daRPoV<*C#6|CE^cV z8T)C$eh`8-j^?sP3X%k6VYVIHH)hsEfgbQWOLHwkc~5&hZ8jWG1z6ZsaMn6INsfui zO7?=m;}Pm!Yb8}x7_;mS;O!6%fh(?^9Z(zrPuo2+AIgkIn)`u3MWD>Aq?&B#kAkRd zf6o8~S#d#OxlK_uNsFS=+_H+kd{knVtg^IkcxIMgl(L+}4hRy|ivl_W2RB=CT32dn z=%%u(E9f_qSny!AMu%u3RY*Xk=-BYZc?HM*V5wAz7}BUT0Xj%)$uY_3d!NU8Ufh_S zB>Y4rJo~TI;}NfJ5qK{K_5uiAjevJF)P-d;nCVu6cVP@&cWsM6|BQltbid$etrd-O zS{ZzGUe`10!0Jv^wi8CwpOwoY1}q{TB6ccvnARNNaN72s%7o^I<|a5Cp4t|3{iLt# zm5N)PKTHbA#3iMvJqBo5^10Xs6l1brjkgmb_)cFAozy8&`*a58DG-k|?k0GfzfV43tahGteK2*UqheCH>$mmfFNzOei*f4F33zqOQuw#G9XbG5vmMW!47P<{ob)9e&8XWZVe;yDUb$7OK)D z>N%Y2X&*G$P=AYlIKg+(D94~~QVr0Nm!DuA7rQEHJd|W*71jBMwx)K`a^eAS0EHE4 zRkgXl%%%6lu0%DJw?S}gyp*}Ecx}IHYT;waV zfd>u)nKmAtC;|YNR7FqO)ric>kwBgfj;&SnEkVs->qPjHxIC}YSx0nmx^H$}BPG#S zVLK-)G`Fd#Ha7_#gF7=WsW!4QGHaDYM#d>}50j@1b)H=f_LOJX5n%# zOk!hffQy_KEpp#}3};1UqRd$XF|4m1k{%VQzciwB)>2!0iNdJfU`X6Om4FCBL4s+` zf`Q?Rsg>j6W@2LErlsY?=vDh}__luTz}_Htu9H(oOFsf7gK98mhZP&2zLAnFm!0Ob4mh78cTILLIdj}ugVN2~V z6^SJObAh|eAGox_^1*#^hCk#n5Xg=SQjm4Y&PL|Z@vQV%=E6CU#&qQy0=P7UeKUQ( ze|voKAEJUY!V*el=0?p3xO+iYYlZ)E=DieFBIyyM`3LpE>y0UCPO~svT zSbd6`nq;pco)3efgmc^JK3h~&dW;GsC8dCDL|8<|t7m}at|B-q%Tq3+x-G-Y#jYW~ zHMO!av?56qsQE#I_e()b#SP~DsU%!w9(|yJo~L*Uz@3(!@i!X2hA;0jE5T!EY+zDM zQhac}vVw0)tf#wlDT3nQP*7{8gYAM!{P#K-nGo&+%OlHz z{K6wNbjP8E^>qdYGB?5C{gvYm)ueTI=qHi9_&W|)hPbh-Ut%k(uZKm$QkQ5B5$!6- z?s^YXTt53PjTR0PS`H35%m@PI1wS2L4(^u!lF3D&h6Q1&Q(9vg`B`y@Az5sC-aI9g zUpxQ25SV?Jk%Zn3PNBEJ_tFd!R( z4P)U-_f-R`K&|1P1B*r`{HB(Th#C6pltY}H{`zsBFTs=E2BlmwqjUjoIHrE3RFd^^ z`RI@4Z?!aY4+3kBY96$ARG+=L(0M`NrS1GZB0bA5E-o#KzpBB+<4*Lw-qaM|u~2tc zFd~nK_f?6EsPAH6!P8LLzY-F1v3Xc2Qn-nobahI(WcbMFO063b@z_iG5*=sRS0s>D z`Zo{6eFT!z{asWvyg07KvG$M;#MP>nq*BQP)O8-cSk4Wc`9f%Ox>Ctbvb@cZa!DBk z6DZp!3A*|3oGUFipFsCngHH{crQqw(D7J?~8l zH<0##j=GF}uWw4Id3h#BC^1P1=;*6dWOQ^rlM^(=A>dDe+NPJ>8dIoC7yS zVu+ux)M8=4t$GAJ>CDLw1`dD|G7MEw@v7F^FXO=*HWceM;d5Mc$61wL1`;YINt4^v z%r?Z@Yhf)l^nG}C^nJdY-drrCnR*vfeaG*}D@|tcF}bqynw;WuIds6uyMcD<-^V9r zrPwPNvrMLR7i30C4sEE;Nv=nj{8w<+i>o*4M@Cb}(q>!|na;)qq=iMf28T198Ofwm z-Ol_h=@vR=qh48PM|)Ge<`>JOSm}utRTC{g`xyc6J|k=_b9(L7Pz6GoPotq0rFUUSD6Vz*?SRuy$qsBL{~$n|r4vabQ@P;JMg_f&;Jf3C`&S z2MeZ5^E?z9Kaw%?JqWD~kLLH`l#&s;#AqMl3}dm7(9n~VKv{i6M2GpntR{mUrOrph zd-~zX06&h7m;T@Ko27HL{os{BFG&adC6WS%`(WlA)M~knZEYts=;i}bS?Myv?L-{d z#)gjf3(MtnrX|ueq_o;WX|xyosLCb2Xj(T(!ko%zQw{|up`*WhY?!O+fKPvPNqBJ6 z@66T48H~n#80W=`;&B1t(|e$5j%{!_pzgDoy}d`Hh+V)v|7sBta4q+CU3y0mYln_@ z6zj9tu&U&d8Y%7I$SCJFExZkD0*gupxKP^PS1z$>+wX=Dj&yxVzJAd5NMJWmDXX9$ zZdz`X>N}#dk_iV-t;+zU@p8J+(9rWATzQlvV}m0DjHFIN>dF}NU?;AFCO+WPNK~aT zPBt5I6IgLsS9a%8wsK*$xJWFGVjePik&&wAD#%y_A5obDR8tZe4a!cD3ihh}Ev_4v zMom9aiWhvrkIkq{0;7T?#mDTgpG^)^WUsH5>%@h&xM`!?$afqiy|hW!c;w-wFW;FZ74N_H92 zlgyh_?yStSbLt4u8hj)SqWW>xdnSC`x}VhgqEJ)zM||v@Hk*6rL??!>`ysM&e#Mj@ zhxd7DNiZ{AJ&N9|pl?{HaQ^FREiMoN5P)S(Gn~{w%XcFq##I=5x&g`nsT(voClH2W z1wCL@Y#B6Cb_}r~5;!oZPh%?dRBV%iv=S#wH>n#nyEO*Qf zGt~?$;Q0FSe9-ieqay>&JtPwv2`O4{f{Tv-khwqW4=*+RMn1UQ{UihxH<9UjT|5;R z?MVw{wyT3g&TOyle8y&KvhE#rnq7hQ@&9q{z>(3PgKAuIHId&F` zQ{?fi%7hFr=}?KAww=`HEQ#H94?jP!xAO{B!PZOxqBBq%cYO@0@LPLkwsX!7u7Fbj z;z$esvfFs7uiTy6`%~sD+f4Lk)V%H?Iq9ubrTF~@6e2MNS+1!{skLY)Lv$;0EZeu4 zJz@$!uNyJ>A!15*p2`Naz_u){r;cBD%3&Lqo%6kqyszc<8J>ocklF~1f2tevPxC9E zjT^L;O88{IBft@DgXl`D+c8`T%nPLyZrnSUyf`4`ZMZWgb>si0uDK0?!tgPQvs|4_ zRw`K<#%KwZF7*N5rPGK1wq;C3#Sgs4DXY~P-nGOsKhG#YrU<_aXPM80(C(FkCp_gl5CvwvYtw322$r_HGsxO-+qu4b7Al*MbA| zhif2g*r*iIe(}-k5`mDSti&I)-&bb_76pYi7#KK3^wc=u`ZR52ZZTQ1bNsKnIO-kzm`8bUil1`hsUQyue!;Lf5}$sX2HYc=F+!> z^NrnUC^i*FDc=ZOKr5{4M!9jij`ZtE^Oba5v6#v**dLYa`Ftv z`S}@^`6ZPF)@Jsly1xjaw#|oVF_Y9IoYQL2e@1K7FxTr%uL!}kwhA&-zqMfsU+)xK zG00V@si7lG4h=x^q~mCsmzSGaD zr+){o+7_CP32x}Af|{sre68ve7wr9m?)WPTx_OP3dW3I4LQ0bOtrL`a$@|IPq7%CL zQ$PeY3=9f?xSHF{#;al$LY`9cx)uBzYp;~OJ#Sez=km7C>I!?ztd3l-U^PzQsrSq* zg!+$D7dg4fJ8;@RnR(7o{CdjjJZmpTGL# ztw+*8=YW4;tMd3{Wkm&wZpRD=gL-)ZVNOK*Jn+{=!eDP+p8#SHFhILosd2hN4V9#o^DZEx5emB11mv@;#T?=YaakSx_%nJIr6-9a)6c&E2fOBRC2x@X$Ibqv26u znc|rVGm6*+v5jiR7V}$KS~Y%oCT1eNr%7{-u#|Z0#A0HTGW?V^htCVj!+pnoYT2O@ z0>vE%{pC`KxVYHiCp-*N!7|_{{7`A_ROAv83|V1kp#aY3}QrfQ} z$b!{DlIsV*1?lj#>y5(b*$rsjfZcHX3}^M9$UrBk*xk(9+zvRXqjqa1i3FN;}74ij8Pd z9U8hzzw8DCgz~bg#L84iIy43Z4vyfGJpcI2jGCIXtj@wNax(rUpgk2@7T2tT_r1%;;973|bOj7-J0^pw=}Ri0z1FqL=~3+xs5mX(q6QB5u` znp=A%rI}-mEUtrtU!}!ja$-%2_!Ga$`o>8;H0DM}MN*`SmcFRLUU`Uz!lh^#WsZGg* zm;$5g{Pafu+~Vx=WbezgfP@H-o+lm_)0JuxE^5Y`NRonrIVx#G&U6s3Va(P6?>&f{ z1f>&6?K>1AKJv!!6hv49as2KY6{DAu0};{4>T=5y()m`mqLfd1e4=mSt-dqJiyjLH z1~&`Jbunfz`o8fz`&|lU=rN=>e8YSJxd9K%m;V(2p6+elw5EK$!Rr*SqT<;xGXZTU z4I4v{KYUEhT)8IYONfngQbIG$z$Lg5(bJGqTxgV23<@BUVdljE&;U5nyB1dN5^PuA z@e>kKQ0e&j8NloFqCztp4?@{;Nj8JpVf(TY@yb)A1v?ISYQvD5RtU zXp4jkxUlb|8-Vv@9BW%GgG<5OxN6DV73HsC=B6w783kI?O9z?Zj)xHb?g2t*eq%sz z!n_O3>96#I&4B08lH+5kT45yMpkYCQ(E!l^W8i-=n44wE&AyG#)z|A|hZ-mvxEK}$ z(EA33q0aq|1AUX^lmbxU+7FqP()2*a#`&Qs$iqFP;cuX0?Dy^;t9LXQjQ1k?=@t|i zsVs_TPsexVk`%))r_z}Ho>uMcicwYa?h^3=x8)m=4uuXKJ)T($?|OiSf$lXQk%kr) z#(Oi64uuIB?P=?QP61n#gP=5s;(Gy6jzvL3Mvje(K}JOdr7+n2JwpQ{q=gy-^g{#1 zMDp7nm}6s^QHt}wo8M;6mxPv*k_v%=kuLo$1PWR2VJKrKLn>;EPftjSbatY(}3;IoRJ%CH8sAe1+q)GNUb`7^w|L!&P>CQAkb&5VoV` zp{!Xlh?l1Bp~)4x0t0=b$aeizlz?A`%ps=W zkwfs?<^ibm$mNQ2`n)}^1$~fi2lr4lL?`~MF4K6F(gpD!Corzfni@g5MxMR?%ZG?Rl=`TDu+uDRumEzAPi7B zX6rLI8*{(<))VRttbPI%L}|R}xqnSsG0^(w%RRpZt`ZcalFIw+J3i0E!wy(X>VP0` zu052wgFM{)590bD?$duF3VlKT$B6nlg22JS9UguNLi`(B_z&NRiHy8`aB#4_z5Q1F zADdYbkd>7c8HvE^wj+I-x|qJ=RQf8cg9y-_-wx z{=bmA{}QV9SpQ%6;QybSB4J-#x_y3lE^SjYz7c`{yP`z~6}OrZThh`fUJ8s}poEBw zpvtm8KF401*7rYQ|0Qp4I1qmA^jS^>FVL&l%MvbecKvp7%O{^2-i2l$XxA3IhG1Oq z2K{$_&wht%F!T|Y#VVJ(eeo`ui8M08KZ%^cv9jL(+bZ%Gyhgw>{x0E;AGO-rT>3L7 z(Hr2n`r3B1)* znam|$FMzp&v7MOGv*TWHMg^M3;F5LrV_<4gLt9q#U3Ok=!GrW>n8i%%@=!xV1B2hZ zKi~tql}b(8*{q{K(1e{IDbL9&-TBf4i}7u(;ro%6rpEq;#bDqOpKj#R1wDOSm0*9M zx0F>F3Mj^kzqQU^CT7DTa__1J7_2^9vRRoi9%!r{=9jYVnwZ^-$xjh^kS_^lAIT#v zNkqo%HI$XV0{-HH3pW_|4GChdC=nQuD!1+Aj-!>23y0;*nCWm=?geCW$aRUd?m@9W z#35hYAcJd%QHLAnBzs7{-!b%jNfNCh*9*E+D>LvVh-VT4Kh$`Bw?-g-t#a%G)9-;m z=JklC#Co_P05g1d3vI1p=_x-WSGh18$lqlA>Bpk3f|7=leyncL5%}C@O8;L=X#qSs zwla`BS-OAde!B`rzF&n|3fcP(f73cVvjGZ^ zT-`nr_?S;T?x8JMXC`!SN%NH+qDH~x;P6(`6uG|8GO~|91E3tXqW5;uLq-^>+uT;R z#G^$u>T-4@1tW~zDG-v;?=*fyhBsPJIP}2p={pGZuGyld1gZ@F*7^Mvm< z$f=}e>s=z~WO*?#GE}k9?%qt9>2hukqg`dTO32z`YTZ67sw^_Gv}e7XjWlaaz&Yvk zE`Ku9CUWyQwi0%WNY6}dD+{Vu{JSugR-I+@&}~st;^woN8hW|g0IkT0)%|zh$>9mD z|N9bS;8W|FS*iI+>T{sjmdhI~C*Y6R#yj59m3-8*--Bs1E$wA~bf46Z@6v|;*2a*AmkdU?VE zpor!g&@U+0ceS4K$R|RhA~eK=*G8WMN}Jv$6UU_=wE12sqdh$+d}7hPIcZ*5R4u5e zpb&6;30wv+dr!noFP2NaE`3ZXW?nVTuAR{clokPWb<@0l-PRljp!IFp`o#X%ROn7N zE0k3p>nHm#Wb$Sm-_MZnBorrG&t&qRN~N35DHG>d?HnBHSQkx-*E@q##yA?Vlfn9b zApY(~>jLCTm8P1*rP(!KZR{rmPu{EW6@-Aab290*c_6WH1Grc8NDUWy_?XT1f$MSi z1-Xg(=kN8i%wD*0e|V+$IU)%%GAiU7Rz@GUQIvTk6LwV$o|NK6qRtiE*VDYTf-_Q7 zRK$tSGrPueBgfV4$}=rL&3YSdL6Kk#V{bdo^rAXIc)^21LL>d-{Ualg_r@0Rkg%T| z<#>b|%?{VN2JtqVTT5W$RDd{|DdlD5-Tgo(73B8!&^wZfU69L#wg@nCjmXtF?42VJyb*y?(Dv2?kf#Kt!qe&X&jxKl@i z-STpumJ$wabxDq~+)V!Z;Y7H2%0v+3-5Z+bz(i0T5ZGDopGd-VFFo26#|68 zk7|EDBFg*-e+vVrTmYBgJ&PzndeN@}?1@@M!$*&B=}T2twG!_5e1-}&jp zK^@!SzArTLTOnakJeqR&&^gRYry@n4*lMVM^uKcAqd)Ec5uE{qf2b$#$qZ%9e2*?; zBjbORJ>InNzd!0mTm;?uF6dS@=gwq)k2sWY8f~UkJyVMkHdYz}ls#I1_ULU`!kD$v zBQ>xC+SQ&6Hr~2e{3y$iJ5EdB>}<!fwmb zHCk;^nL#sO=Q{R zcw#I7v%$c`ZH8$gE@j+be5n%cm!_x^)P!&fPf_>v90CQe?lw%PIK9^IrI&(L5^4T;z=qNYNiJ^MQ2h_sA$JRFXnX!}JIY{0X)cp@>{PkEgfu`&Q^ zRYgyAw@?lJc8S;?E&!cxwbYV)aWnquQP*~AhtphnxO8oH`rZ*rglm05bZGjMv=|HB zgSE5)$Uk5_2kB8=!J8eg;2^ms&7>ombbmKzW-cHxS#D%WMMs9K`V4fh;k_l3ptC2f zkdJJbSNlHCju820GQgzkwdmv9+SkAEj(>E0SghLO(!jKoimLh;EisxOx7GB%ab1-q z-vs-pLOzf*a)bQf;w^lpn>kIjVMz z`-ql$T#7=qLHzUar0+@2*>iGp5LzJpB6{E7q~Zwtuxc=Q9addixbN}rd%^jQg+wO0 z6g7L-?~!Z3yW#+}I$TQ7j-S2?rme#>S##%FU#LMEjBl?27Bwc-+`_v+WdwK9s zOwp|7Ir5<|w;A9R{;iKrpa1NLv7XbqEwH)be#HH|%SQL&JyE-bJv(i)F5yN?q-z-{ zcZh{QeM|jCPVkZP^G{AC#fug+z_`0m`85utJ|S6@l$U|1eSZYrK`E0=b_cJJHE+E#f`L}y%qMx`C1GvFf% zTuW8~tp@nRD^=h7z-Mjdu>4!y#&Z_ZaCSJF<=hR;K+sE;9;pPf_$R8RE$fD}$m972 z?yW7Xg;!Cr1Uk_Q*)G@pMe2@e-#|Ljn*LA_Zn%PPhOmuFBDAcH{9BcL`kU81M^a>6dgu0$aZyi(w6>vShECCAIN}LIS}1(p-Aw;)5NXL2tgLR^6IgBps^7SmmY01r zMXW@P=7PJ3l1+)deY)B#7a3#=?lSng`lxaq2&#}D8o~9F<6Sh0_n%1 ziDHS2M6Qtme(xB(rxW`ff`@^{=#M&Z%E=PcSZa5}q2fb7NI+yAcvH`UZn|{0i-pUA znxcwU*u$*KOH$Vmptzu1E5>eTCa1doK3eWchOL&cuJ7X^OP{~i1;O=jubSvahu1U0 zpn7}mYKhQBuYq`(QY*Mp@}3`se4_&GNt`KN(O$>-%Aob0<>+G!RC!UQeMP=|i9^z} zjf3E<*tCy;N3A`9&#uO|+Dv9kN`$~3$$fXz46X8r^TTVw7V(x2QAiN&n|ZHZ1bC$6 za|%CGzJ*63%QwSS>+CS1?O>iL<*PgV9BodpvI*h7Iyd?3Q?I@Le5EDt?9Jg5`u0Wg z_rDnL)dbU8G7^zTF0N&=zn)TI8MMDz=NSScUPLWVf7F*Z66}ZRCMn_`nZQh+QKUmGyOWDvS*rJ6{AN zy67{=bPv!whT#co?A~kQAQARop5EdI|6=#x>^h;?@8}gaRCpyyn9&MB~_1E)F+l-udFdYV)H)fSPmD!%nJUFyl^Xh&0XICPciKScakL6ofUlOn%5wvEwdxi z0q%jvX7Tu;O6p8yI65~qIox@C47-{7dL*ATz@_zpsf- zpm_v1wBeQfcYkv_s-MPBt>DK=DRRI^e94YpQz*Vab!&e*Kd+Z~d3MSM{h8b$vC_gW z-BHjJ(hbXjj}`)aGRy6;T-Pj@AW`2AW>Hb~J3dwz^m%fo#Ecg}ldrz)@*jENLwFd@HY~7RL8;6Dip?OwN~nhQD9Vkl;Sr{T@oy)@ zWaZnMy~ywV?!wtPW>eAJgNk)tP@}$aJQI!_o4Je~x&ybcCO7l@E#|1G7KZkvHu%V$ z&M>lzbES+kNg{@{Z(o*jG3fg@jA)06r}_Qov5NhLAt%|tuZYO``i37HZarc-@N`Q* z-OsNf5s9~XHD3QjLE;gT9yq=T^XC*!Cz~_r>CFvi80N|Tu&oZ^ICNC5;nkxhpO9Ro zOx3AE*mb%f2JN+{3u!# zqcyw+&Ag9jBRt5BePauq!#1Sz%nr)UqTyX#=K z$DR-D=ib0T-~E<1p%QLMv-@!F5s?ixh;`Ode?I@R59386!LOC_mtU@LvQTnQ$F@5J z4xgJVuE@VcgvVd5Nd|eXU_0`wvh|PO1$sc?F@^Q{l6(w&5mVaV z^Qnouv&diyt8KeejnjxSSUmUS(N6T|H67o@eNx>4o)4acc&F|9A^hI^Uhc`MWTl89 zqPg21_(ZK*y*#e{S&NHm^QY5S{xuj274z8V3XFi+`MDhN*wZf5@}AVcG%N$DK68l# zj+(3HVytTzO7z8wk4K+#AKOin@=vqr1?kH^O?J596Y1l#lzha81Z&gla*`i7LRxw;haB&@r^*sHdT;bD$KcXlJzaqYX*1I4~Pm1Q-(Jk z7NOfjaHV&IS#}F9_9^*R7HOy8Z!rWV&&%JAoC&6H#e$p!>H@Y6ud&|ujEkt=Oo(5n2LV)M7t%OH312PXZx!mc!BEa>581&6}`d&7+2M0$X~9S zyjw!f57_JI$0*7(kf)As$>B-Z1{_y0qfsOvaZi8K`;bK{Mp6xGB_k^yS z#cXO*HGJp05tLZf>SWB@3Md6RI`2hYv6BxfU~?2b0~{o|lLND2eJ4)o+u!S^9$W9F zgYZTC-MAM?4A*0MFAvUQRvnv^L|*D`+}&nxvL&P}D7lDx^5C{3 z^-k;;uA^X6&H<@!q3MzyV~tvLWH5`2nA5zscN<4?);Yx-L&DYpjYM137ObG%_N$ z8HR))3)H2HoXC!QZX$189ECRX(wZpe_X5I5$TsbK{Dj4-E%&Os+aZUgqB*9%=+srv zUt)I-f@XLxAFB zD-~@X{uil z2;dZD7%!b|t_ebJrl{3DYP1d6#y5J8m&-IEy`auD3u)^I0#(p;<4xJPj&}1vi`THR z(p)5plK|V2>QJp?!MO@#GiPbXEcVMLxzi@U{NnA|7WKk9G=b$pB{&|mN3fSaVlw4h z)rM04yKA^r+orJZVOep^jWz@6*ie=RFeMf$uTMvO$VWK zRjspjxdA02ZG{Zs+DJ3Y)n-^I6H=4O8<}j+JWXN`4_~JdPPY&dqC!)dzZKB&~0i6MI8GLN=H^q!CGs0j5tkG4N)Sr z=zT2v(xdBS5+in7epwheVNdQ5O;F*kO(Vd&aXbF$Iq~H%#97fH?l+OPDw_r&CJ?GwC9-kGRLCbw;EiH4KzIF1Cc3~ni>497Rk;KyguSM7PNTh6i z;SdGsy*C{yJ2K*=-I`4U~jkEY_paLBKFjM&V5?WxoLW{R{8;M{96?4vrr44 z^kR`+k$-2WIj#n8Qo6S{Te*>0m|MCue?T>k;jcX#S+MlBdGAub8w~53f=iHgA>h(j zS@oJ4jt49_5gvW^ExI$VIUk&Ea%qhv>h(r$vO3U@HFVrQL1S=Q49U7P?z=l{Q-9=~ z;OF-qoCu!(GM?^pGGiwraeNj}9h6bc!d7K>B{xKC+HoiK1me-*bDLugY^0XxMD%(& zJKhdD@|uoH#XdDPvOYeEci+{p;C#XibF8166?}CrS<>Yj3u`ttu{J#2AWBTud_5_7 znvhcds%`O%rkkB!@(=ms5R}nM3`q9>_dVPJV1V=gybHQV3pB&Vrxbw~5@6GY4}&m@ zsHmvI#()j6un75mH#(Rr%JY(YMIik5ZNHBLkdiEB=82V+6{KV+FvjHcbsCk&w1K`p z^s5>DfR;gKH3{|G*fpxwM`%3ajB+5!J7rUIvu>Lwq849!9`p4y3=;(AanjdV1q*wVBg;r3044CoYxK2D%sW9pFy`iSWYqal^j({R<`?}-@2Tyy%qz@b=xB#*GZF!eo=zzdcB9j$ZP`9 zVLQ1G?UDCR4wqLbh=`ZB_ScAVr=Z@iT@VNo3&CLALhy3I>y8~_7Sr3D{Gv&h(TR~n zZKrRn&G?7jH1im2_!;H#I5)UU+M+g@%s{>AvuEZf9~UUn=rkG%lK8#534QTLYoyS@PVr#=k`~z_E2gi;P$kBNq_{=(i>U({p zUjOhGIdNTB7+PCY9)TAs4zm5P?;WSVPgb@{E-x?DY-Uly4PyNN6kb|e z%g^QQJe;(|6fa|KZcZBA>-s+Uj+v-cZEbBc&em;KwXMxZRtS2-Nt`9>G(Dd1n_rB! zrfA-xoeP$k6%K?u)m+guU$^tGX}u@ z?@iEb>=af+TwLT+;jYx-IP!X2R0!bQ+N(U0Y>&$*H2DlDwMDeSA+t6{KM994jc$=sqkkQGfB1>2sVX1PWWPUrPrR=rQ;pcUE z(o#}|G+SNmmKgnj&!mE*E6e7UyrMcvg41t)V8xQnD-&7Z#5u>uhKpb(9bV`+aq~rC4ncDh~IH5 z9^qbve>oA=u9wzo^Ta7zyZDULaUWmU9|zM!);lJeBG4j-V*Nyv*CHbY>E#+U?kqFQ z_LM|eq`v8<5G1MrCC;=5&0C!t{T{a! zCCE(iIf?2{c{i6O-ZKl$CsWz?28DIhd5S+jUD6J^m}>|M@Cu>SthC#5v=~6o+V9Jl z5r84ye@vxFHVX6vPG`R3TYw-W7prsvYy+vo6F4ZsPTpizbyuh-gFCm5) zxY$R3R9vEr16;ymT>RrdYXBu@lyE1sNVG8Tr&YPc5JcveD=jv{1MuNRDuic_jD*xH zz;`bk9B}Q?;e$?2O(9)pBI{kaAW$llBsdlC@g_+nL*XYsr!1(kMy6FkA}S|vJo36z*?RHWu%yFdi|p5E~*!s!fv+tKq2WHOLshH__`r^Wm3 zbBYT-P=kj)SdyAkKK;u-=J`DoNaBO}pEV_v1<_{%0{lu}9t8=zz=HTuQHfF)ns4+f z>MjZe>q@`cJMqHDE*rClT@8jF4TfRcK>9-ukWbk|T;#(GTjkffZkZ~pgsYtF!%tHX z4}dxWRgLz~!AI-?xFVWS6Z!thKh^64Tb1$H{Tg4(FQ~O}epNj1tiP{)R35`|3J1<$ zv6k#)w2$^%tyn^8KzJZ=n?NSen3Zi9Dyw2%Qe_!OW2JTcoA&5NS|9yBeIY)LD;Zwg z4eVBhPul9c?FKy6FUD=}sViiDgLg>KCl{=1E9B(#1>y_U%&e`0P?P?SkiZADQOSM| zX(hdHNO|hxpG!sK0t4e-U{%JD=pGR9#Swxqk$S#1bAUnF<#xTgIG)o^@bw{V1Q1DN z)`pLZivxQWz_J1h3kx4c*WR;$Z$xapP(RBw$to822X?+Q$nLD z?*fEZk)g|_J!$h+iZ~x~+6NDO_{6jf7`!dH1>RiT{a$kZInzU)joA{lqN1Wi5;lM> zSvsGaA1}*0L=xNk!)%3q45tjxg&SfW8+vc=0Oga(CMjPyi7P$wFNpZ*9eL93hfw6d zF*LYkYoceX0wSz%aJUB%KV75KN$Se=HWdNQH>Ave)L8 z0or-X2>RW8q8`7ZXylpXoUP1>mBt5vr%**|e`Q8aM-_pWgFgT_A~<%eZ@=rHx%!H= zh`sklh_x)DYZoR`7{?4)#np_nt79T`@Hw^HwIsPmML7o)D%Y8=eLa&2gBvPd7&>E( zSD8#)HIi@Z1gVUHAab?*0B?AsYxJ4{7e&%6^VjD9WKD0vJOMQgasQ0apo{y5cb-he zoNWHey8iZjf)7x7JA*xya6ruRk=WNpG(;u*v5I;^tVzbBzY@|SX z)!;GT@#xR~u2!fN`?ys-es$eW?Fp{Pw)ygqFwd>!ok`^5rR#{dU;mF}hPU)RRnnsW zN17l;5XTqw!Qijs1KYT}a1%H^RK+)X}W89}H;b&pxcubXG z!+{9y|F={IDC+5IxT4-$)M6ev@`Hi6k9;Q72B7*oOE*Q<00F8OuwmTQGjj4W%fyOX zt>jk88YI(1o8qqda^)4?KWaywBdEST^0SUt4|5uEZyf?l{@uPLGgLs!xrK}LtlEXa zyy!YIIzsc=j3E1=MV=rG=Ht4Pp!r#;>9ehkE$%g_aIxFcMaXduL^(|(n{k4%U+x}= z_1ve$o8idM_i8M6mli;OkM3|zy}JhQ)A`Zo(AreP==)q+wC*_v;eQwOg)C@U!HJOg z9c}w&X#V6NmA;f7^^meZC^0ixLdikpEk4Rr(b#Z z3_eW*|9hc-QE@YHedeeAy1c_|teIs&7o~@w>Kd10-W!*B_@E%}JZ+p9^D+|_oqo%k zX($R&gqc9h7M<3!9>!BhA?S$szuGqT(lC#0j?urJmdVX3dkM-+y!)Vu4YsXP{bv-8aE2Qh|hmH>mms?4y3s z3`!QJwQ9;1ub!Ec(6paC^G4(Fy>aZlpX_cAdGz%4^&K5CU$I;U+EKVZZ7)RLzbpT9 zG80g2!Rki`S_9yEca_p0xBssBlgx^z)pjFuBmH=RsvAk6Q9gl@8`F|2y? zzr)Efhdi0>?d=c)iN^{AP-izk;?fyFX zTU!bF!Z0D0j)__^#r&Iu0-1`AL}^XZx1XIl+%O7oi=-i+_aqaLehqQ8SSB}x798>b zu5_V!HqId~+94?%)pdS$nU{HmlUa<`IMPy?o%>U8Dp&+I(3rd=5c?!SOM;?4?i)7m zXR0Xm049E)`=5rXTvhTg6aXI_YmD^J&rnsETXb^|{uO&7v1@=)>>D=AP%XQRcts7Bs zk#OIq=X>$ty1gB(ItOhdq@yF&t1BPxm%qxxQ=C!8ZtcwTXCGNwdNGngrUaCw?9I8X zw!T+FMvgM$JQe|kB;Z){;n9d7k^k-eeY<<$neGQe;?dDjQBl#^*;%y;o!5&^pwt}X zHSK@w2}c2k2np%WR~nUrHcyx9@6T3;$HvZ%j_`?y#)gKP91o{9NXl!wePZyA!F}cT zlA)mjVIzL$fOlHs93T>X#@SAlm3#PE%3ud0;UZ=5NgNLE7K=cU+xT(aSk_@$fBsxV z%ht0rH>dZ8H$-;_6hMHg2V@*Z3Mwj{M*H2v=>k1Mv53gX{+^zl-CbBXxcvNlY%DC_ z5zx+IfkH-kNeK{9h>;i@TUAkUb8|B~H8nLO18r_=cNYr;LP-Gb!CsQsnbDSSUQ1Hx zrt3L6<9s(M1^L zvAHPlJUFZSd6$=Y`DIgUVCgvYOpSJq?`ics) z&po4~D3~w4M1KDMkeeZ#lJUjd54GbG9`x<{>{MRYrl&vnXexdlxc<7+;S;ua0B-aB znF6FnggteC3Kp7}24=La+tUwD?PH0Eme*AQIuL;a5^( zp{9ld`Fi{L@e#^|i`4;1$7+8U}H;0Q(tJtybD z{A8i0X932XP#ZA`aJ!;-10H?L0@}XN!q?p2Blk&=IwuS)0w~Bd{%*Mo?qSLWhlE_V zWz~aPo%n$a2HWHf3+i2#j)0CCa=gV-Ok6c+NHN;+l6XO*UgQa@l96G~gQC}Z{i$}D zRT?EHQCj2>ula_;ut`mJx->`A|)25-y5FzDp-M1<0RNH zYx^|i6+WXmrLH1LeKtw>n~+z>|3*{|XI_BJ(M@-1=q^C30MHE`)(nQA;Kl zY$+hsS1#I<&2Ljc@eLY*jF)o%JX&3@u=0;Z82?z+RtgMukl>Yqrb98)MQe13lX$dA0N>@=H zl!4XdXsD3~+5-k(B6HcAqFkOOnb^mW-o{Y}tl!FkYac#{@!RB%4N35=e5Bq0c+>#1 z4WcikD5#=~9wc5$=4}eh1-Li_W@gu2-;Jb>tOg5N<(b72?ZmaW!+3JhKUh3DD65Ic=Nw%j;U!u;N8ykE3`Xa)^v2bwwy96$T zfBqzmf+~ap;Au5E7S+_$G&ImKd}+)(wR()*>!81Xaj>4}fz47zAAir+if0?d@z=E%g-2YWZ`1fcV)@wrb`*5U~flywRBUx_HhPZp5D_kJsV`) z`;xZ(6};@#ySe5xvB)UFj^L|z!FJ;16{F^>WoVpANn@=K4mGlR7hF_MLl*UuvzS~_Q zj}^Ktu>;o8z@CvAJOE}^b}rVNM`vM$`(U(lyK}sVhz~B#8~C4rqTu%0iZ!~&Tx2c^ zQ+UH$G}NpdJfhYOKB{Udjqa$D z38>hI5Fm4RS7D;8ehRh$9CHy5ULwYZP-}D5b)x_Q}1d;c)vh@=?=Y@`n=%vagi>_`>Q4GJkLwF zWmlhS1S#eGS)1Ga@cMHA#CJnRe-l3iYw$d$@VX1$pvcR~)i~X@ogMj1&vFU~O!Bh7 zG&Hszxh+r6$y>(mx)48IoqeHkHTjh;r+Pi?Iq{HRTYax=v6nEm*37h~U18;RRqS?}-Gu$5`>c`MOSCJ&soWlZ^TY=2Y3t`iV5IJ<<;vp#@3w zc~)EF2V?&Tz|kslKZ^NY?#Z(~kSxa>fU`o33v&2PAALO*bteOK<7xL=5w6Gl`aZH( zcMq9QLaKIN46hYqE4%1Jrg-)}#lh2TTho!7GJnT6QkOgg?*T>D!&`{5{hyIqw-|T<~_WUteOI5lFNh4sT z^l@-}=lv8+8-yeEz(&Dp5d$Y=MS>LaRctFJdgp|RFiJ}<76Vg-G46ZkwTjMrD`|ch zXO_M0axi>D*`Ll4bNCgvh05Pzu%>$L#q$TaP0Zi#OA#}^2f1YUwpzFj)_U;sdo9Gp z;(-Y03k&OP!&iliqMZ+^81I7r30%C7zztKuN(@ptxMiQG0g^AUBc{F(#*%wW)A3z>_IkdjX}`WW z9jh|@gaFs|Cj09IW6Kw^k9yEbb@pj;z11mxb3$=w{ca<)5!f)9{R+!_c;wBf0g zG?RghSLwJw4{;3;quONu2ny{f$gX~Sz@(tV4^a?RVy^X#%Ra@kE0CpBrf+B)I`Dz` zzDtUAzKO+W%=&n?B=u83hi^{$fV{e4@JZl-r{&0TT?Fm=Mh^Fl|rXk&7-

SBvy7LfYOuPMJSQ?|Y^jL}*JS&swpYlW-hv$Vl?VXR~w<}B;VVg;q{;e_Z( z#rHp&9yMcDYM0}srL9T2wX&}#a7MbJm0BABsNe;0B^_Bxex%~`HEYw=96RT-7~+A5 zb(i~;0G-}>9!Voiy7TBHpX1B!KF-XraU_{zY(=^JpOKJ(g>)9uj{cXm;}%c(?Coy6 ze5~dK+AR{BBNDsQfoSPKcuUpG)hr?@`_IffO1-Z^^Znzxi+OkrD!sZrEOpI39W)d! z1@0Y0rzF^Mc=<&XfJspqrC!^*vz?Q*Zb@1C0#n z1{l@tzKmyh^TR>nVXd74RD@QIUJK%W^G|M6WtMubVxxkoW9)x!9v&A;>MIdFS*=Ue zc&eqQWC!VCVQgmFmhz9El;9Dz3aN)t5u;{l4(u^Wgj5#*X zxx4y=9|OgD$Tlw@5WVFCe;3U+ZhPMW^sd0xwBI|YAF$Ovr)`cnLpblqb2Ud{XDM<` zO7UF=f=)scyUSsFpLX1F_|QXrfw_FjE*5a7-)`w!LYslM zcUNg{@Y>N{@=DYOLX{hx*S$(a0|JtCR_p0Hj)>9YR7js(w8>5z<%X;Vh4(49#*opt z$h({oQbYV?OGOQd$V?+IejGkfqJ@Pi9mA2V?EM0}b)KgDrmnyya)gpKW37PxLel?-6so^KSPpC#ElhNmGEWELV0EnA0WQh3@l&d3=O2P<> z7^?XZuRHb(^BY;Z>SYP^#&5>`Vsk!T0blD69M{RGsDK@;bx{stEs^4|QbD~#bf=u+ zv1P%)>&#m^Pi{kht}117+K?;zDsuV`Atbn)<4%&xE|3ydeg5;r8z*QYzsdjm>Mo=c z5@qeXM6yOYGi!ESpvSumXpBziJ6O0&n5^eq! zyIZuyO^bDk;4yVj>|&JbW6>IV646u2at>4;yhwJ_w529|5ad*KT>XDqMr3T0w}e{oeLaM|tdkyH6Q=*jLOYF^@H z#5;WuG$pWKxXUgzD6F}CyeMV0%Ag3)CjQB5jq@iWt+i@zH|F&Yp#rNmU%_y#EDv6R zOazq|lV5XrGF(;Au7e8Z=VV%c-f-y|or%|7)ZhAm=z_3ATH4oGRFkft;Pz#x;SUZS z4iu%I5N(9?ZOEk`r5v~BaCJ|Imsob8Y1=P8CZS=z=L~Vh*buocU<&YXSTuRPqHzI8 z$j$>S(RF1?D_tW;=tSHMYniLIFGQdpAu;BHnx7yV#qaA&!zfD68NMg4q_d!Whyrb- z5ph@hy0CCuT*>E$dP5!^jheJzj{aXQ&Qy0Yr8WGtbN+Fa2A+QJN-452mhXFeW|P0(0Uhk-n+GYe@*Tc z6Kd-s_{Igf)h05F2{~`Fc`cts9iD?E4!(AMoWwvDJ1t);?WDSprWId6`M77GRJSk0 zeD2K9We`wFL>^OndLqH8#51+U z2ndO?1h#%n(28G^V+}sq2oFGD~P7m-i04^B)0sG$I9#Bez=*T;&VAJUnxAYm2MX z&t{QrMsVCDAK1W)qWIC3IK0yY@xzQ63~KU?W7ukaMB!G5zr7JRj*9^ttoeVKio=i% zU;pm5;JFx92s(MZzTsR=CwKUCL(SXptGAtQWVcqyA{gSFMfbHaw1nAC2~nVZ@I8qW zn>$&ScI#Q=J{g?WJpkQBasgKB72iuNy4aUp^Wt315V*dKugYC7v>5f1!sb;c($mF^ z%gPWgG&`5{CYyTL^?gl6ln*MPA=KkKNYr)JFoMUcj`4fQPg_BBQ=>fmgrxXI=js+l za>ZEv{=1Lg8K+a5iQn&%^=u${8uvcG64II6B*I2L1oi*f{*5E;4#Ado-#BamMPup# z^Y*@AX>X%19KH%7P+f(ntk!t4j%p$<=DK716Cz0}ICh2RjX~*ON3La?ntq|A>BU~y z1!v}#PVt)c)`P|~vLPSk%cbhNT#|WMv6kmue zTQtc$CE6qKxot4X?Hfck6R%JBTSA5zW6_}USwYeeb9Ll%u_Maw`I^hKlP5*^&ps1S zMNH4p7gReUK>N!_CbX>ZBpg_LP6~DhEw^pQ_G9_yg9)ki=QGXwRKE&=8HHvBDEr3) z`GB`M(UaD-d>tNnyTe5mls zhuHk()o-I?-P*R}RILv4=F+fyf3!pUbMypj5t_Hj`&J3H#!Sq%Hc{RkySkpuI0{a!fdg~j^kxk@&)B#Z^l6MH>1<_5f4R1Yw!4BA;l@_tQ##0%p;+Pjg_mW=94AhdR&Q#}qne=*qJ#*gqtm=u7F zrSt0#j`~f~(>0($1x0C4`EzK_B&uv>fP)CRA~Xp_Qe~w?yfF8p=VUlv@%hqv`{4^o z?(y#^SuzUvPg_7!w$p`RCi@SVcdgyiiBad0&evqkt{=%r1Hi=UlI>}?7pX3S?zekr zJR9c29cOXIEjwxtw9}wpN~zLQDTfXky`gJ|Yo5dxxy?JHdi@jg_2=-x&1;UUC01XX zrw@F}#-M06r?hKNnu`<9EwBYRT6NCt&vyfZ>RQIun$#!X_B~!q2rqKacJW(8uU!bW z{Fp)r?qnF2$U`jGB1?Cuv-sVY1RrmYiNC17LA4)(<@u*TCG}DE_E!&*5_FfJqF5bb zPFIUgQr>cDT%Qxd!?ga?74Y9-Fp}zTQ~hX?>ZX2IFQ1=s8~)P5IP`n+{GOro1LsPE z0~$5_DkD!(cIxg{&A=nU>b(EV$1wwkQK%fz*YoB!w|8&LLX7M3>5Sb1)L#wm&zVjK zq@fNtQ=vjcR-ROwQIlr0%IC|o4f{}wl=YO3e^AYqJYahD2?qJfeTppigj;p}Ei;A$ zREBXzD-Ch=fn`cKTnW~E@_Oz%rVN|Lq1MDGn#lhS;odT*kN7aIq5Hlr1h=YZMubIv&G8=(39*YBMvL$~ z0C`TcO-u>CSi9D^Sb8?q$Cz-v9FdcgEtIjzi<#OeO;4~(JCJjk}JID3K+10fW?|v?h zW>eBe8oz$g0s85y{L|^BW&ub4jZif`ej9k^3~4-KVq$!vL(vM8N(hycXb%lr*I3c+ z10nNHCifScJ#_18zHrpH9lHv0@Nhtx(@IWY%N4J&PF8O{F-MEL^8Jg7?bI%aPX>XMxGKJL;Sh5mT3F!iVzawHl9-dva~4hQxRWGkyJ)-c@B4jCyPoD-ae6gD6II;@7Ww*vvV#{suNo<o&(5 zFsl15*sDaALD$3%fQ>W%0>Pr-H^>8O9HQ|w&^okM18qvw84HyQFHM&ZoNC&=E_S%1 zHzwUEL=cE@{Q4V{0y5$>mwGm5LKB%-t}~(3iD>o(eBN5BtE-EO4j}}vo}sBJ!V9dp z#zz>z6UbnwItZUxSLX*qvM@ajMC}U2Vd{A3=n#^WgvW&+hN?xf{Ajov9v-eo`1!Fr z7;QYAA4uy<(V<)U!}8Hx24aFbmhcuEvCA}?t&bzV@;X_`;7d&o6P8H>^jO zbgy+$BVhM-ezoqUZqxGh{DLF?PlzH<)Zyr;l{z-oBm&LUKJKss3;mp7pu7Ls3l*6Zg z{`_@-T5I!w@2S)~MB-Gqc}`MsIX@*OgLP0}<^}8RKi{9McwQ%#PjKaj%D>!!P{@%h zkqeQ)wOWJC?uRng-ajV?1`sBwG2rK4jOdLpmP=7?=3FdqoXWEs|R>2X~3gP45|Wr8uN z?G$l^d_jhb-#^HK($awb{vA*q7=3#Q+S=L`x)98}_ExxuNYl=w)pisMJX>o=8-c3w zX3Ah2GRMD80Lye-+R3%Y{DA+gUcENgSyWL`QGM-YVnSUAqi1q*a3FMS_(*5qfNa4l z$xKE<7W68zGGe02wV}Rkp_XANZnd7%59E89(pcYUo4d~{SnuRtTl?Z{i{Qd2GeivH zY|Zo>LCd`n%y=!5HdS&DEV5b%Rcn87#)VWr|EHX713c{w)d5AK;G>}{$j3KQuK*J_ zibz|y(BPKL-SC6U4R?XdWdo!9NBw0i5b)HOFRNBTo|g?9D@3`$laCGnpk^BBYgfAw zP%`*OEkFtURODb>3!u=N#|K}N;;5A_*CfXIf#dXN^BJo1&;d!0s8VB1f1OL%{SZdh z$^0$jM6eOC;!l5gnF56q&?M@nLlu4*MI!#tx2F?a$#Ml+?RZ zob$6}SY7l!)^5-@&E*>BlAWtt^tMj!(F$H2_SR8)uZihki>nGN!e5^;#8po?Ymhqo z8vaNN@7ej|0}AO)Q{YGuB9H6@KUUa};HZ;nd4gWscGwS32_9y?<3e=v-zq;ru8n|_ z=j?b3p@{XHquGgxj}=iDe!C??b#EI#opwhxA;P$)Jz8M$Q@2Kc)DRwU6DF5XvD$!Q zb6#tI!#Pu_2dcC@g#%(#Hx=BXl@PD`JXB&_^Q=)rkHMB{wYx#=#V5tdhQh^;4=&)- z5Gk0Sj*g+dfz+2-1wL%abg@y88I)_*NGcy;q8UwMJ_YdeA+0Jnd|fSZE9o(Xk?U+I z9y2ox(Yw5rJm4-6KD>oD8S{B->Tm>IZ1si)1i;vak-YP4h<#VvezJZx`M2&e2uLM( zetJ#}2(*i8zdpwRLENQT<#<4vmX;mux5BeC>zl7H(&GVtAK=r0s3iHB=_^&(_k4P{ zJe+8byO_i?}V`tG1W3bwiQpwsk&NnGHr2x0{IGk7n|$Ek|KIR-FfN&i<5bJs>w`V<(gd5kF(emS@9mDa(ovPC1_#VA)fWEtU_0L ziUpeU0x1Mso20HzkgEA(aY><^KG(>we67K#yG}c>_dv(n1et9SG9(Bi>;>+69$~$- z>$dwLq#UgkhP{~JZb*U}t2Ymm{8*euoxQ)Gn(s9xI#8>)X$^Tkgkk-&cLlx+dZf8K z8FE7?{lq=o@8R>)pHUSaLEeD^+cMnuq~zN4x{Bh*L(K|w=W_$5JOoQ=wGL>t_PtIy z$dG9YE6pxwIN+C(7S~G%9P7J+2QhPT^)xHsDg*j8+nwNX7i%yg(*sx69(z(b8zMh@ zJ%EegKWph99|VL$fvxm*x5TlTT)JDRUm(vr1)!2p6r`*y!xXYJJJ|d0`qx@6)H!t5 zfl4^77ON~2)Wu;LVe^S9ji=|n@?QLwt=P;q2C}{AL`8%U`+f6Be{4!qQ9NvQvk3Ue zOmc$I6;!%fZ<=Fjr5*bo_!%ZkcD!lNg%L&A)afg9{HNmJ&K9?xrR9l?_1a?Q^*y!9w4{VY6_Yj+pUW0y6d3z9`jUcpf#*c4 z2Zm=p@#t|tI<;aSt5Lx(sB9}xfc5G@G5DR|o=d5ui)`rLws1XxM#i9QA=mFX-y(vaCd{ zLUmUDvIR2M^4~@>h+hP(G^m%^oOCmq_f)U6}W8mD#DfAa$ z(-tl!sBTQc|85-Ml&9-J1n%->p z&jTQ(g3`1_ZBQo1>2urJ%-`3VycoH1bAT>B#3L~dkH6#7TC<88gX_m%;TwpM;hx~f zf&+BM#C?(+SUGK01x|4;%0c&LyES1Wl>>zetsmmG=&!kUy_Uw`!+bg#H;{ez{X4mE z`C7e*_{4NaK281&p*34@iH8pkLXU}g9fO-wFfW6lY4;}QqPQtRm4RfRV`7x82>*o1 zjaq^JpvNjNt+n-jeTMWU9$wTFUKDd_Y!|}UnG_ZC>Aogy-QU}P_*!}`^IHjh>P+DE z%q;cVQJnXWJNsc3vAgo_?jNql;~_|makAhUAnJ=U8!KccRd8TzaD1xGz7CnahD4O0 zeu3XgY}{{WY5~%WsDZZEt)4h`g1S?_d>eo~3x}|SEHW$uu*$Y*fpjo^O~;a=V`=T@ z;u1>zdFFFA6m+G7qfWaMH38>3DXlsglDUj~e!=Z{2SpV1R%{e~QL%yXQ&>sx{O?)< z8?`JGc=bo$?x~%coAdQ;cb4mmD>zM&@hk*L-obOq(!MhQw(LLzW#o* zq#uE3gk9dh_jiY>DkTgrtGcVMVg(h9Esde>^6JiL8N)=dFtP0}kRaeIIK*F5Ov^7Y z)Pz6)it964+w~9yq|4($6V;SfftBYh`1Hq)@TA*v7(oS+-z@t|+w&tOLc|!&Gh1zj zPjO*%{k<3A7PUB}*uwO!6oQzW>wy_jLD65B1c_I3AW=m;r;Ri{O`wFBUr}a5>(6CI zW7KjBBcs+|NaXIMp^cx9l-Pg`pgfH2U;(6tk=@!gZV_#^=;=q+QjNbV)|?UC1~m*%RX`^N0y;nDa2>+Yf1?c*9E!BB3pi>hF3RgvtOcBUX9Ps>5pGin_RPvccaAOD9L7x(bU4!`4OlD@4VI z;yeITM^=W6`-wzKfltrR;yq|qi?#c6oNiA80|OHiGsN?OkoGKHUcmR`HrSp-NX{Y@ zi*2~ZRXf?(z}6bTrlX9l|1oH|Ivra=me#B%@oj+9A+@ulQwQR(1or*9ySraorxGU?4{98Xg2dy5+q`2PMQq25-O^UM@SItGw+oqHNS;yk}!sRO;fwp)QEZ8Sfwb z`I7=i=Jjf)i{PcWgpP)pC8%D(o6!x9Cp%zhcu4!W z{(|MJICup@BO*UNO91>W2XJzWf9U`V8@r+5VK#0)D$K{uKs?p~*vArqLBR`_t<20u zw{!&b_4mJQde!u*85pjmwRLpl^E2?tKnF|*oCD-#rJiHDkpgutP?rQJ>BA&IZL6T5 z031+o&ISeshKGl-ClA&8)K$}?wioMwk;GHlDOI12;K;oke-UwUS=j^HW+Cl^<1eo# zO7b0$m6cU8_j~ph-4!b2OGa|fpYjN}G Date: Fri, 12 Oct 2018 14:27:11 -0700 Subject: [PATCH 101/138] edits --- .../auditing/how-to-list-xml-elements-in-eventdata.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md b/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md index a332ef1410..a53e3cf169 100644 --- a/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md +++ b/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md @@ -17,14 +17,15 @@ ms.date: 10/12/2018 Since the Security log uses a manifest, you can get all of the event schema from the workstation. -Run this from an elevated powershell prompt: +Run the following from an elevated PowerShell prompt: ```powershell $secEvents = get-winevent -listprovider "microsoft-windows-security-auditing" ``` The .events property is a collection of all of the events listed in the manifest on the local machine. -For each event there is a .Template property for the XML template used for the event properties (if there are any.) + +For each event, there is a .Template property for the XML template used for the event properties (if there are any). For example: From e1a4cfdca10328174b8af1f49de7fbd270916e39 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 12 Oct 2018 15:44:10 -0700 Subject: [PATCH 102/138] update mstp content --- windows/security/threat-protection/index.md | 6 +++--- .../windows-defender-atp/TOC.md | 4 ++-- .../windows-defender-atp/get-started.md | 6 +++++- .../windows-defender-atp/onboard.md | 5 ++++- .../windows-defender-atp/overview.md | 5 ++++- .../threat-protection-integration.md | 18 +++++++++++++----- ...dows-defender-advanced-threat-protection.md | 4 ++++ 7 files changed, 35 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 4d2ab21ce3..e5fa21a032 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -30,7 +30,7 @@ Windows Defender Advanced Threat Protection (Windows Defender ATP) is a unified

Management and APIs
-
Microsoft threat protection
+
Microsoft Threat Protection

@@ -111,8 +111,8 @@ Integrate Windows Defender Advanced Threat Protection into your existing workflo -**[Microsoft threat protection](windows-defender-atp/threat-protection-integration.md)**
-Bring the power of Microsoft threat protection to your organization. +**[Microsoft Threat Protection](windows-defender-atp/threat-protection-integration.md)**
+Bring the power of Microsoft threat protection to your organization. Windows Defender ATP is part of the Microsoft Threat Protection solution that helps implement end-to-end security across possible attack surfaces in the modern workplace. - [Conditional access](windows-defender-atp/conditional-access-windows-defender-advanced-threat-protection.md) - [O365 ATP](windows-defender-atp/threat-protection-integration.md) - [Azure ATP](windows-defender-atp/threat-protection-integration.md) diff --git a/windows/security/threat-protection/windows-defender-atp/TOC.md b/windows/security/threat-protection/windows-defender-atp/TOC.md index ee621938a2..3a7c584172 100644 --- a/windows/security/threat-protection/windows-defender-atp/TOC.md +++ b/windows/security/threat-protection/windows-defender-atp/TOC.md @@ -151,7 +151,7 @@ #### [Managed security service provider support](mssp-support-windows-defender-advanced-threat-protection.md) -### [Microsoft threat protection](threat-protection-integration.md) +### [Microsoft Threat Protection](threat-protection-integration.md) #### [Protect users, data, and devices with conditional access](conditional-access-windows-defender-advanced-threat-protection.md) #### [Microsoft Cloud App Security integration overview](microsoft-cloud-app-security-integration.md) @@ -316,7 +316,7 @@ #### [Configure managed security service provider (MSSP) support](configure-mssp-support-windows-defender-advanced-threat-protection.md) -### Configure Microsoft threat protection integration +### Configure Microsoft Threat Protection integration #### [Configure conditional access](configure-conditional-access-windows-defender-advanced-threat-protection.md) #### [Configure Microsoft Cloud App Security integration](microsoft-cloud-app-security-config.md) diff --git a/windows/security/threat-protection/windows-defender-atp/get-started.md b/windows/security/threat-protection/windows-defender-atp/get-started.md index ea37ae0629..3018be7cef 100644 --- a/windows/security/threat-protection/windows-defender-atp/get-started.md +++ b/windows/security/threat-protection/windows-defender-atp/get-started.md @@ -14,6 +14,10 @@ ms.date: 09/03/2018 --- # Get started with Windows Defender Advanced Threat Protection +**Applies to:** + +- Windows Defender Advanced Threat Protection (Windows Defender ATP) + Learn about the minimum requirements and initial steps you need to take to get started with Windows Defender ATP. The following capabilities are available across multiple products that make up the Windows Defender ATP platform. @@ -40,7 +44,7 @@ Advanced hunting allows you to hunt for possible threats across your organizatio Integrate Windows Defender Advanced Threat Protection into your existing workflows. **Microsoft threat protection**
-Bring the power of Microsoft threat protection to your organization. +Bring the power of Microsoft Threat Protection to your organization. ## In this section Topic | Description diff --git a/windows/security/threat-protection/windows-defender-atp/onboard.md b/windows/security/threat-protection/windows-defender-atp/onboard.md index 39ee66db3c..0df14919d3 100644 --- a/windows/security/threat-protection/windows-defender-atp/onboard.md +++ b/windows/security/threat-protection/windows-defender-atp/onboard.md @@ -14,6 +14,9 @@ ms.date: 09/03/2018 --- # Configure and manage Windows Defender ATP capabilities +**Applies to:** + +- Windows Defender Advanced Threat Protection (Windows Defender ATP) Configure and manage all the Windows Defender ATP capabilities to get the best security protection for your organization. @@ -24,7 +27,7 @@ Topic | Description [Configure attack surface reduction capabilities](configure-attack-surface-reduction.md) | By ensuring configuration settings are properly set and exploit mitigation techniques are applied, these set of capabilities resist attacks and exploitations. [Configure next generation protection](../windows-defender-antivirus/configure-windows-defender-antivirus-features.md) | Configure next generation protection to catch all types of emerging threats. [Configure Secure score dashboard security controls](secure-score-dashboard-windows-defender-advanced-threat-protection.md) | Configure the security controls in Secure score to increase the security posture of your organization. -Configure Microsoft threat protection integration| Configure other solutions that integrate with Windows Defender ATP. +Configure Microsoft Threat Protection integration| Configure other solutions that integrate with Windows Defender ATP. Management and API support| Pull alerts to your SIEM or use APIs to create custom alerts. Create and build Power BI reports. [Configure Windows Defender Security Center settings](preferences-setup-windows-defender-advanced-threat-protection.md) | Configure portal related settings such as general settings, advanced features, enable the preview experience and others. diff --git a/windows/security/threat-protection/windows-defender-atp/overview.md b/windows/security/threat-protection/windows-defender-atp/overview.md index b40bd3d25d..df39986e0f 100644 --- a/windows/security/threat-protection/windows-defender-atp/overview.md +++ b/windows/security/threat-protection/windows-defender-atp/overview.md @@ -14,6 +14,9 @@ ms.date: 09/03/2018 --- # Overview of Windows Defender ATP capabilities +**Applies to:** + +- Windows Defender Advanced Threat Protection (Windows Defender ATP) Understand the concepts behind the capabilities in Windows Defender ATP so you take full advantage of the complete threat protection platform. @@ -28,7 +31,7 @@ Topic | Description [Secure score](overview-secure-score-windows-defender-advanced-threat-protection.md) | Quickly assess the security posture of your organization, see machines that require attention, as well as recommendations for actions to better protect your organization - all in one place. [Advanced hunting](overview-hunting-windows-defender-advanced-threat-protection.md) | Use a powerful search and query language to create custom queries and detection rules. [Management and APIs](management-apis.md) | Windows Defender ATP supports a wide variety of tools to help you manage and interact with the platform so that you can integrate the service into your existing workflows. -[Microsoft threat protection](threat-protection-integration.md) | Microsoft security products work better together. Learn about other security capabilities in the Microsoft threat protection stack. +[Microsoft Threat Protection](threat-protection-integration.md) | Microsoft security products work better together. Learn about other security capabilities in the Microsoft threat protection stack. [Portal overview](portal-overview-windows-defender-advanced-threat-protection.md) |Learn to navigate your way around Windows Defender Security Center. diff --git a/windows/security/threat-protection/windows-defender-atp/threat-protection-integration.md b/windows/security/threat-protection/windows-defender-atp/threat-protection-integration.md index b491a5a109..f0210ed5ce 100644 --- a/windows/security/threat-protection/windows-defender-atp/threat-protection-integration.md +++ b/windows/security/threat-protection/windows-defender-atp/threat-protection-integration.md @@ -1,7 +1,7 @@ --- -title: Microsoft threat protection -description: -keywords: +title: Windows Defender ATP in Microsoft Threat Protection +description: Learn about the capabilities within the Microsoft Threat Protection +keywords: microsoft threat protection, conditional access, office, advanced threat protection, azure atp, azure security center, microsoft cloud app security search.product: eADQiWindows 10XVcnh ms.prod: w10 ms.mktglfcycl: deploy @@ -10,10 +10,18 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 09/12/2018 +ms.date: 10/12/2018 --- -# Microsoft threat protection +# Microsoft Threat Protection + +**Applies to:** + +- Windows Defender Advanced Threat Protection (Windows Defender ATP) + +Windows Defender ATP is part of the Microsoft Threat Protection solution that helps implement end-to-end security across possible attack surfaces in the modern workplace. + +For more information on Microsoft Threat Protection, see [Announcing Microsoft Threat Protection](https://techcommunity.microsoft.com/t5/Security-Privacy-and-Compliance/Announcing-Microsoft-Threat-Protection/ba-p/262783). Microsoft's multiple layers of threat protection across data, applications, devices, and identities can help protect your organization from advanced cyber threats. diff --git a/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md index 42e5a71b83..9c74c8d5f5 100644 --- a/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md @@ -15,6 +15,10 @@ ms.date: 03/12/2018 # Overview of Windows Defender Security Center +**Applies to:** + +- Windows Defender Advanced Threat Protection (Windows Defender ATP) + >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-usewdatp-abovefoldlink) Windows Defender Security Center is the portal where you can access Windows Defender Advanced Threat Protection capabilities. From 2440e3da3c95eb664b8984309033167cf09fee81 Mon Sep 17 00:00:00 2001 From: wesinator <5124946+wesinator@users.noreply.github.com> Date: Fri, 12 Oct 2018 22:55:52 -0400 Subject: [PATCH 103/138] Fix name of event 4782 Fixes #1857 --- windows/security/threat-protection/TOC.md | 2 +- .../auditing/audit-other-account-management-events.md | 4 ++-- windows/security/threat-protection/auditing/event-4782.md | 8 ++++---- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 76837097e0..3bbbacf2d9 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -504,7 +504,7 @@ ####### [Event 4752 S: A member was removed from a security-disabled global group.](auditing/event-4752.md) ####### [Event 4753 S: A security-disabled global group was deleted.](auditing/event-4753.md) ###### [Audit Other Account Management Events](auditing/audit-other-account-management-events.md) -####### [Event 4782 S: The password hash an account was accessed.](auditing/event-4782.md) +####### [Event 4782 S: The password hash of an account was accessed.](auditing/event-4782.md) ####### [Event 4793 S: The Password Policy Checking API was called.](auditing/event-4793.md) ###### [Audit Security Group Management](auditing/audit-security-group-management.md) ####### [Event 4731 S: A security-enabled local group was created.](auditing/event-4731.md) diff --git a/windows/security/threat-protection/auditing/audit-other-account-management-events.md b/windows/security/threat-protection/auditing/audit-other-account-management-events.md index 01d32dee4a..2118e8090b 100644 --- a/windows/security/threat-protection/auditing/audit-other-account-management-events.md +++ b/windows/security/threat-protection/auditing/audit-other-account-management-events.md @@ -30,13 +30,13 @@ This subcategory allows you to audit next events: | Computer Type | General Success | General Failure | Stronger Success | Stronger Failure | Comments | |-------------------|-----------------|-----------------|------------------|------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Domain Controller | Yes | No | Yes | No | The only reason to enable Success auditing on domain controllers is to monitor “[4782](event-4782.md)(S): The password hash an account was accessed.”
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | +| Domain Controller | Yes | No | Yes | No | The only reason to enable Success auditing on domain controllers is to monitor “[4782](event-4782.md)(S): The password hash of an account was accessed.”
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | | Member Server | No | No | No | No | The only event which is generated on Member Servers is “[4793](event-4793.md)(S): The Password Policy Checking API was called.”, this event is a typical information event with little to no security relevance.
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | | Workstation | No | No | No | No | The only event which is generated on Workstations is “[4793](event-4793.md)(S): The Password Policy Checking API was called.”, this event is a typical information event with little to no security relevance.
This subcategory doesn’t have Failure events, so there is no recommendation to enable Failure auditing for this subcategory. | **Events List:** -- [4782](event-4782.md)(S): The password hash an account was accessed. +- [4782](event-4782.md)(S): The password hash of an account was accessed. - [4793](event-4793.md)(S): The Password Policy Checking API was called. diff --git a/windows/security/threat-protection/auditing/event-4782.md b/windows/security/threat-protection/auditing/event-4782.md index b41a078e08..7139478b3a 100644 --- a/windows/security/threat-protection/auditing/event-4782.md +++ b/windows/security/threat-protection/auditing/event-4782.md @@ -1,6 +1,6 @@ --- -title: 4782(S) The password hash an account was accessed. (Windows 10) -description: Describes security event 4782(S) The password hash an account was accessed. +title: 4782(S) The password hash of an account was accessed. (Windows 10) +description: Describes security event 4782(S) The password hash of an account was accessed. ms.pagetype: security ms.prod: w10 ms.mktglfcycl: deploy @@ -10,7 +10,7 @@ author: Mir0sh ms.date: 04/19/2017 --- -# 4782(S): The password hash an account was accessed. +# 4782(S): The password hash of an account was accessed. **Applies to** - Windows 10 @@ -108,7 +108,7 @@ Typically **“Subject\\Security ID”** is the SYSTEM account. ## Security Monitoring Recommendations -For 4782(S): The password hash an account was accessed. +For 4782(S): The password hash of an account was accessed. - Monitor for all events of this type, because any actions with account’s password hashes should be planned. If this action was not planned, investigate the reason for the change. From 1b0ba849b5e14bea8fdc8c15279886bc789d3ee6 Mon Sep 17 00:00:00 2001 From: fadingflower Date: Sat, 13 Oct 2018 15:22:08 +0800 Subject: [PATCH 104/138] Update deploy-m365.md typo for "fantasic",change to "fantastic" --- windows/deployment/deploy-m365.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-m365.md b/windows/deployment/deploy-m365.md index ded250b312..6ea42e8bc1 100644 --- a/windows/deployment/deploy-m365.md +++ b/windows/deployment/deploy-m365.md @@ -21,7 +21,7 @@ This topic provides a brief overview of Microsoft 365 and describes how to use a [Microsoft 365](https://www.microsoft.com/microsoft-365) is a new offering from Microsoft that combines [Windows 10](https://www.microsoft.com/windows/features) with [Office 365](https://products.office.com/business/explore-office-365-for-business), and [Enterprise Mobility and Security](https://www.microsoft.com/cloud-platform/enterprise-mobility-security) (EMS). -For Windows 10 deployment, Microsoft 365 includes a fantasic deployment advisor that can walk you through the entire process of deploying Windows 10. The wizard supports multiple Windows 10 deployment methods, including: +For Windows 10 deployment, Microsoft 365 includes a fantastic deployment advisor that can walk you through the entire process of deploying Windows 10. The wizard supports multiple Windows 10 deployment methods, including: - Windows Autopilot - In-place upgrade From c2712e1512b0d5f8f3504a2161f42591eda05ba5 Mon Sep 17 00:00:00 2001 From: Patti Short <35278231+shortpatti@users.noreply.github.com> Date: Sat, 13 Oct 2018 07:17:46 -0700 Subject: [PATCH 105/138] Update TOC.md Fixed typo --- store-for-business/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/store-for-business/TOC.md b/store-for-business/TOC.md index 232fd3b343..d383fa3117 100644 --- a/store-for-business/TOC.md +++ b/store-for-business/TOC.md @@ -24,7 +24,7 @@ ### [Manage Windows device deployment with Windows Autopilot Deployment](add-profile-to-devices.md) ### [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md) ### [Manage software purchased with Microsoft Products and Services agreement in Microsoft Store for Business](manage-mpsa-software-microsoft-store-for-business.md) -### [Working with solutin providers in Microsoft Store for Business](work-with-partner-microsoft-store-business.md) +### [Working with solution providers in Microsoft Store for Business](work-with-partner-microsoft-store-business.md) ## [Device Guard signing portal](device-guard-signing-portal.md) ### [Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md) ### [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) From 7ed8e26a34d1098acb47ebee1f6888be41e7cca9 Mon Sep 17 00:00:00 2001 From: Daniel Niccoli Date: Sat, 13 Oct 2018 19:31:40 +0200 Subject: [PATCH 106/138] Update Provisioned Apps for 1809 --- .../apps-in-windows-10.md | 97 ++++++++++--------- 1 file changed, 51 insertions(+), 46 deletions(-) diff --git a/windows/application-management/apps-in-windows-10.md b/windows/application-management/apps-in-windows-10.md index b6515bbde1..5ee9f992a3 100644 --- a/windows/application-management/apps-in-windows-10.md +++ b/windows/application-management/apps-in-windows-10.md @@ -131,53 +131,58 @@ Here are the typical installed Windows apps in Windows 10 versions 1703, 1709, a ## Provisioned Windows apps -Here are the typical provisioned Windows apps in Windows 10 versions 1703, 1709, and 1803. +Here are the provisioned Windows apps in Windows 10 versions 1703, 1709, 1803 and 1809. + +``` +> Get-AppxProvisionedPackage -Online | Select-Object DisplayName, PackageName +``` + +| Package name | App name | 1703 | 1709 | 1803 | 1809 | Uninstall through UI? | +|----------------------------------------|--------------------------------------------------------------------------------------------------------------------|:----:|:----:|:----:|:----:|:---------------------:| +| Microsoft.3DBuilder | [3D Builder](ms-windows-store://pdp/?PFN=Microsoft.3DBuilder_8wekyb3d8bbwe) | x | | | | Yes | +| Microsoft.BingWeather | [MSN Weather](ms-windows-store://pdp/?PFN=Microsoft.BingWeather_8wekyb3d8bbwe) | x | x | x | x | Yes | +| Microsoft.DesktopAppInstaller | [App Installer](ms-windows-store://pdp/?PFN=Microsoft.DesktopAppInstaller_8wekyb3d8bbwe) | x | x | x | x | Via Settings App | +| Microsoft.GetHelp | [Get Help](ms-windows-store://pdp/?PFN=Microsoft.Gethelp_8wekyb3d8bbwe) | | x | x | x | No | +| Microsoft.Getstarted | [Microsoft Tips](ms-windows-store://pdp/?PFN=Microsoft.Getstarted_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.HEIFImageExtension | [HEIF Image Extensions](ms-windows-store://pdp/?PFN=Microsoft.HEIFImageExtension_8wekyb3d8bbwe) | | | | x | No | +| Microsoft.Messaging | [Microsoft Messaging](ms-windows-store://pdp/?PFN=Microsoft.Messaging_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.Microsoft3DViewer | [Mixed Reality Viewer](ms-windows-store://pdp/?PFN=Microsoft.Microsoft3DViewer_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.MicrosoftOfficeHub | [My Office](ms-windows-store://pdp/?PFN=Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe) | x | x | x | x | Yes | +| Microsoft.MicrosoftSolitaireCollection | [Microsoft Solitaire Collection](ms-windows-store://pdp/?PFN=Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe) | x | x | x | x | Yes | +| Microsoft.MicrosoftStickyNotes | [Microsoft Sticky Notes](ms-windows-store://pdp/?PFN=Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.MixedReality.Portal | [Mixed Reality Portal](ms-windows-store://pdp/?PFN=Microsoft.MixedReality.Portal_8wekyb3d8bbwe) | | | | x | No | +| Microsoft.MSPaint | [Paint 3D](ms-windows-store://pdp/?PFN=Microsoft.MSPaint_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.Office.OneNote | [OneNote](ms-windows-store://pdp/?PFN=Microsoft.Office.OneNote_8wekyb3d8bbwe) | x | x | x | x | Yes | +| Microsoft.OneConnect | [Paid Wi-Fi & Cellular](ms-windows-store://pdp/?PFN=Microsoft.OneConnect_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.People | [Microsoft People](ms-windows-store://pdp/?PFN=Microsoft.People_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.Print3D | [Print 3D](ms-windows-store://pdp/?PFN=Microsoft.Print3D_8wekyb3d8bbwe) | | x | x | x | No | +| Microsoft.SkreenSketch | [Snip & Sketch](ms-windows-store://pdp/?PFN=Microsoft.ScreenSketch_8wekyb3d8bbwe) | | | | x | No | +| Microsoft.SkypeApp | [Skype](ms-windows-store://pdp/?PFN=Microsoft.SkypeApp_kzf8qxf38zg5c) | x | x | x | x | No | +| Microsoft.StorePurchaseApp | [Store Purchase App](ms-windows-store://pdp/?PFN=Microsoft.StorePurchaseApp_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.VP9VideoExtensions | | | | | x | No | +| Microsoft.Wallet | [Microsoft Pay](ms-windows-store://pdp/?PFN=Microsoft.Wallet_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.WebMediaExtensions | [Web Media Extensions](ms-windows-store://pdp/?PFN=Microsoft.WebMediaExtensions_8wekyb3d8bbwe) | | | x | x | No | +| Microsoft.WebpImageExtension | [Webp Image Extension](ms-windows-store://pdp/?PFN=Microsoft.WebpImageExtension_8wekyb3d8bbwe) | | | | x | No | +| Microsoft.Windows.Photos | [Microsoft Photos](ms-windows-store://pdp/?PFN=Microsoft.Windows.Photos_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.WindowsAlarms | [Windows Alarms & Clock](ms-windows-store://pdp/?PFN=Microsoft.WindowsAlarms_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.WindowsCalculator | [Windows Calculator](ms-windows-store://pdp/?PFN=Microsoft.WindowsCalculator_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.WindowsCamera | [Windows Camera](ms-windows-store://pdp/?PFN=Microsoft.WindowsCamera_8wekyb3d8bbwe) | x | x | x | x | No | +| microsoft.windowscommunicationsapps | [Mail and Calendar](ms-windows-store://pdp/?PFN=microsoft.windowscommunicationsapps_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.WindowsFeedbackHub | [Feedback Hub](ms-windows-store://pdp/?PFN=Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.WindowsMaps | [Windows Maps](ms-windows-store://pdp/?PFN=Microsoft.WindowsMaps_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.WindowsSoundRecorder | [Windows Voice Recorder](ms-windows-store://pdp/?PFN=Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.WindowsStore | [Microsoft Store](ms-windows-store://pdp/?PFN=Microsoft.WindowsStore_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.Xbox.TCUI | [Xbox TCUI](ms-windows-store://pdp/?PFN=Microsoft.Xbox.TCUI_8wekyb3d8bbwe) | | x | x | x | No | +| Microsoft.XboxApp | [Xbox](ms-windows-store://pdp/?PFN=Microsoft.XboxApp_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.XboxGameOverlay | [Xbox Game Bar](ms-windows-store://pdp/?PFN=Microsoft.XboxGameOverlay_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.XboxGamingOverlay | [Xbox Gaming Overlay](ms-windows-store://pdp/?PFN=Microsoft.XboxGamingOverlay_8wekyb3d8bbwe) | | | x | x | No | +| Microsoft.XboxIdentityProvider | [Xbox Identity Provider](ms-windows-store://pdp/?PFN=Microsoft.XboxIdentityProvider_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.XboxSpeechToTextOverlay | | x | x | x | x | No | +| Microsoft.YourPhone | [Your Phone](ms-windows-store://pdp/?PFN=Microsoft.YourPhone_8wekyb3d8bbwe) | | | | x | No | +| Microsoft.ZuneMusic | [Groove Music](ms-windows-store://pdp/?PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe) | x | x | x | x | No | +| Microsoft.ZuneVideo | [Movies & TV](ms-windows-store://pdp/?PFN=Microsoft.ZuneVideo_8wekyb3d8bbwe) | x | x | x | x | No | -| Name | Full name | 1703 | 1709 | 1803 | Uninstall through UI? | -|---------------------------------|----------------------------------------|:------:|:------:|:------:|:---------------------------:| -| 3D Builder | Microsoft.3DBuilder | x | | | Yes | -| Alarms & Clock | Microsoft.WindowsAlarms | x | x | x | No | -| App Installer | Microsoft.DesktopAppInstaller | x | x | x | Via Settings App | -| Calculator | Microsoft.WindowsCalculator | x | x | x | No | -| Camera | Microsoft.WindowsCamera | x | x | x | No | -| Feedback Hub | Microsoft.WindowsFeedbackHub | x | x | x | Yes | -| Get Help | Microsoft.GetHelp | | x | x | No | -| Get Office/My Office | Microsoft.Microsoft OfficeHub | x | x | x | Yes | -| Get Skype/Skype (preview)/Skype | Microsoft.SkypeApp | x | x | x | Yes | -| Get Started/Tips | Microsoft.Getstarted | x | x | x | Yes | -| Groove | Microsoft.ZuneMusic | x | x | x | No | -| Mail and Calendar | Microsoft.windows communicationsapps | x | x | x | No | -| Maps | Microsoft.WindowsMaps | x | x | x | No | -| Messaging | Microsoft.Messaging | x | x | x | No | -| Microsoft 3D Viewer | Microsoft.Microsoft3DViewer | x | x | x | No | -| Movies & TV | Microsoft.ZuneVideo | x | x | x | No | -| OneNote | Microsoft.Office.OneNote | x | x | x | Yes | -| Paid Wi-FI | Microsoft.OneConnect | x | x | x | Yes | -| Paint 3D | Microsoft.MSPaint | x | x | x | No | -| People | Microsoft.People | x | x | x | No | -| Photos | Microsoft.Windows.Photos | x | x | x | No | -| Print 3D | Microsoft.Print3D | | x | x | No | -| Solitaire | Microsoft.Microsoft SolitaireCollection| x | x | x | Yes | -| Sticky Notes | Microsoft.MicrosoftStickyNotes | x | x | x | No | -| Store | Microsoft.WindowsStore | x | x | x | No | -| Sway | Microsoft.Office.Sway | * | x | x | Yes | -| Voice Recorder | Microsoft.SoundRecorder | x | x | x | No | -| Wallet | Microsoft.Wallet | x | x | x | No | -| Weather | Microsoft.BingWeather | x | x | x | Yes | -| Xbox | Microsoft.XboxApp | x | x | x | No | -| | Microsoft.OneConnect | x | x | x | No | -| | Microsoft.DesktopAppInstaller | | | x | No | -| | Microsoft.StorePurchaseApp | x | x | x | No | -| | Microsoft.WebMediaExtensions | | | x | No | -| | Microsoft.Xbox.TCUI | | x | x | No | -| | Microsoft.XboxGameOverlay | x | x | x | No | -| | Microsoft.XboxGamingOverlay | | | x | No | -| | Microsoft.XboxIdentityProvider | x | x | x | No | -| | Microsoft.XboxSpeech ToTextOverlay | x | x | x | No | --- - >[!NOTE] >The Store app can't be removed. If you want to remove and reinstall the Store app, you can only bring Store back by either restoring your system from a backup or resetting your system. Instead of removing the Store app, you should use group policies to hide or disable it. - - ---- +--- \ No newline at end of file From 4771d16e64ad04adc6399b6aaa6385b31f3d728a Mon Sep 17 00:00:00 2001 From: Arden <43725759+ardenasasvc@users.noreply.github.com> Date: Sun, 14 Oct 2018 14:58:15 -0500 Subject: [PATCH 107/138] Fixing Fast Users Switching's broken link Issue #1855 --- windows/security/threat-protection/auditing/event-4778.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/auditing/event-4778.md b/windows/security/threat-protection/auditing/event-4778.md index 686af7ea86..5459b8a5c7 100644 --- a/windows/security/threat-protection/auditing/event-4778.md +++ b/windows/security/threat-protection/auditing/event-4778.md @@ -23,7 +23,7 @@ ms.date: 04/19/2017 ***Event Description:*** -This event is generated when a user reconnects to an existing Terminal Services session, or when a user switches to an existing desktop using [Fast User Switching](https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/fast_user_switching.mspx?mfr=true). +This event is generated when a user reconnects to an existing Terminal Services session, or when a user switches to an existing desktop using [Fast User Switching](https://docs.microsoft.com/en-us/windows-hardware/drivers/display/fast-user-switching). This event also generates when user reconnects to virtual host Hyper-V Enhanced Session, for example. From ae1747cdb6f657a02f5ec82dbc922c25bfff2271 Mon Sep 17 00:00:00 2001 From: Austin Wise Date: Sun, 14 Oct 2018 23:28:57 -0700 Subject: [PATCH 108/138] Fix typo --- windows/deployment/update/waas-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-overview.md b/windows/deployment/update/waas-overview.md index 9cfb7ab6bf..3e82500cc3 100644 --- a/windows/deployment/update/waas-overview.md +++ b/windows/deployment/update/waas-overview.md @@ -74,7 +74,7 @@ As part of the alignment with Windows 10 and Office 365 ProPlus, we are adopting * Long-Term Servicing Channel -  The Long-Term Servicing Branch (LTSB) will be referred to as Long-Term Servicing Channel (LTSC). >[!IMPORTANT] ->With each Semi-Annual Channel release, we recommend beginning deployment right away to devices selected for early adoption (targeted validation) and ramp up to full deployment at your discretion, regardless of the "Targeted" designation. This will enable you to gain access to new features, experiences, and integrated security as soon as possible. For nmore information, see the blog post [Windows 10 and the "disappearing" SAC-T](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-and-the-disappearing-SAC-T/ba-p/199747). +>With each Semi-Annual Channel release, we recommend beginning deployment right away to devices selected for early adoption (targeted validation) and ramp up to full deployment at your discretion, regardless of the "Targeted" designation. This will enable you to gain access to new features, experiences, and integrated security as soon as possible. For more information, see the blog post [Windows 10 and the "disappearing" SAC-T](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-and-the-disappearing-SAC-T/ba-p/199747). >[!NOTE] >For additional information, see the section about [Servicing Channels](#servicing-channels). From e4ff718555da3b0a8a0432b92c61423e1f612594 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 15 Oct 2018 14:09:08 +0000 Subject: [PATCH 109/138] Merged PR 12090: Add link to Surface GO driver download --- devices/surface/change-history-for-surface.md | 1 + ...-the-latest-firmware-and-drivers-for-surface-devices.md | 7 ++++++- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/devices/surface/change-history-for-surface.md b/devices/surface/change-history-for-surface.md index 86bde3c803..b7bdc5e148 100644 --- a/devices/surface/change-history-for-surface.md +++ b/devices/surface/change-history-for-surface.md @@ -19,6 +19,7 @@ This topic lists new and updated topics in the Surface documentation library. New or changed topic | Description --- | --- [Battery Limit setting](battery-limit.md) | New +|[Download the latest firmware and drivers for Surface devices](deploy-the-latest-firmware-and-drivers-for-surface-devices.md) | Added Surface GO | ## May 2018 diff --git a/devices/surface/deploy-the-latest-firmware-and-drivers-for-surface-devices.md b/devices/surface/deploy-the-latest-firmware-and-drivers-for-surface-devices.md index a023fdb141..116df9446d 100644 --- a/devices/surface/deploy-the-latest-firmware-and-drivers-for-surface-devices.md +++ b/devices/surface/deploy-the-latest-firmware-and-drivers-for-surface-devices.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.pagetype: surface, devices ms.sitesec: library author: brecords -ms.date: 09/13/2018 +ms.date: 10/15/2018 ms.author: jdecker ms.topic: article --- @@ -39,6 +39,11 @@ Recent additions to the downloads for Surface devices provide you with options t >A battery charge of 40% or greater is required before you install firmware to a Surface device. See [Microsoft Support article KB2909710](https://go.microsoft.com/fwlink/p/?LinkId=618106) for more information. +## Surface GO + +Download the following updates for [Surface GO from the Microsoft Download Center](https://www.microsoft.com/en-us/download/details.aspx?id=57439). +* SurfaceGO_Win10_17134_1802010_6.msi - Cumulative firmware and driver update package for Windows 10 + ## Surface Book 2 From 901866d21e77bfa34b566687e783b25f1a999b5d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 15 Oct 2018 09:17:06 -0700 Subject: [PATCH 110/138] edits --- .../auditing/how-to-list-xml-elements-in-eventdata.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md b/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md index a53e3cf169..85e99bef67 100644 --- a/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md +++ b/windows/security/threat-protection/auditing/how-to-list-xml-elements-in-eventdata.md @@ -6,16 +6,16 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: tedhardyMSFT -ms.date: 10/12/2018 +author: justinha +ms.date: 10/15/2018 --- -# How to get a list of XML elements in +# How to get a list of XML elements in EventData **Applies to** - Windows 10 -Since the Security log uses a manifest, you can get all of the event schema from the workstation. +The Security log uses a manifest where you can get all of the event schema. Run the following from an elevated PowerShell prompt: From 59626bde4f61814343c9341e3be125a285536173 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 15 Oct 2018 10:10:50 -0700 Subject: [PATCH 111/138] edits and updated screenshots --- .../images/access-wip-learning-report.png | Bin 415226 -> 47432 bytes .../images/wip-in-oms-console-link.png | Bin 334040 -> 24538 bytes .../images/wip-learning-select-report.png | Bin 107667 -> 13361 bytes .../wip-learning.md | 16 ++++++---------- 4 files changed, 6 insertions(+), 10 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/images/access-wip-learning-report.png b/windows/security/information-protection/windows-information-protection/images/access-wip-learning-report.png index cf48ea50fcb65cf8db645c6ee0e2694f34b0017c..12d4f6eefd01599bc9cc5a4e36da7424a1bda8e0 100644 GIT binary patch literal 47432 zcmbrlbzD^4_dkk+v>@RC($XQ_9a2&PBO*9}bW2HtphHQQbm!0|9nzg5-5nA`4tWng z&-3{{_j|whzV7S$`-3<$=bXLP-Yeekwe}8DSCz-bBEv#LLckkvp!LV1UTge-)C z416+y-F*oBdElraFO5_(M7|ANpqfdkNFgDWhhtwGq5;>K9~5*Pk&qs>-~T-5w#zq0 zLaLotl$FwQh5Ww3j4{!6+YIWnaxUI?FRj-%DRsA+KD~BdR?>FSE(`lIw*{%2 z=vjc&AF46av{G|MC_^92Mtn-Z#grQmL?c6@A$TDDFeVX7r-7l!lrs_^P5X>@jXa@G zNF#yy$lLx-MB@8U(_^=NPrJQ4yAoWsJ&~Ank#}1AxH!V>p5(Dq)jBY&a-M?6uNV{mO@7Boq!Ev)aU+~k1 z((7c@Cc*+aS}DxgI*W4x?>3vuepLruZ=W0+iyi;8wuR&6#8S5vI+F3rW)|=tc+b zr&==6x$qP<@&j}-jBGqqce(D{rMwv9o7DuQDXtZWy~O(k4|8e!ETRJAz#ufL+fSV@ zSXh#{`EB~qaKa=!_fpbeUQpi4**Y zqW)s#YpK;ItZenGkzOnPs~Ig)Qsbrp_K5)0QsoB6B{4s(ZIs5z^F<#YSk+1hCNTN_ zFW_xi^GB?9uI7Wz4foTN;-$|*A$D21SRDj=^1?PgKI3|!T8&9zcJlhhDJB*rSj&$+ zAvxJ|Q)JO?(W`~TNqp-!l*;1^{lwE~!&}*SJg_N&E~&tVBpK!&wl0`H!)=n<&nYJ` z(cHo|{#!L)An0{vus2c2>+JPje2)yF?*2kAqS5OR4h{}B;Ku<{H1ER622Nun-4vv0jDaczk8VR*yRR_SFJ(PjBP48dC z#y;h!HFSaTUgS7ZsxQANtSQgGp5Y6RR9w!zI*(4jxO%=Qm7v1H`hZD2M{;;{7Fk(E zQ@Kv^IjIs5v|yV>@Mty=sS8Qr|H}l*1--= zNrW7130zJKG?+Tqn*A!US9{yVEu*a>1)p_DVXt`)40mq26#jD z?ywzC^J0GS<{iBzSRHM}EdoB-a(g=2wC_yBA{&8vns$!Fg=)2u{VFUKY)l~x#+O{dBsZ}IIg;GoV5^5wipN(pK%AJ7AcaYqOqP!7`5Ck# z%HpMt$P1x*Eck1`jN?gJH21F{8nyJIAzvNlH0Oa45~BfXMaYE~VDf!~EhiNLEMNIw zNJSvB(DBM-8%+@X0{b_E;BY34n4s*wYwPKXbzD2w_Ea$sjV9ugVJ42tj*~R~Ls{83 zJROUk9*k%!);STI7zFV?uz^Y|-d?ju!FfvGIo$4I_}tNEScFW`5Ug=7l)d-}r=(%| zhQ;ZAkE`D`cb)pzosrMvHJXC%C*d2!-2!HOy(KTPa#qSsmZAS91S6kD>U-{prrI*= zPADHH)^|EGSnFH+t{g%vpQ{?5LcgAXuWMM!;l(4OPB`e+Imb+!y&*lQOc6!MBm9f@ zQglA^Kiy2+*VZ&che)|*HiXKGb9V8f!C}ndqVWNU_1L7Lwd^emZ6UdkX zeHDz@(3n}@&|HS-NZkfUO7it_E%yv>;>>vY5y96(I1UB|20Rw87DV=IpH1lgXu39{ zx_Secl0!fH+$~t{(TEEzkwf!Qs2zS@I`2jJ-H`-Ac57lPaZ&nrKg*l|l5aZeVjZGJ zWV}Cfh1Z(a8(vS}#QQAxnE3lqZZU#YH?_H0i!&V`f*+4sjcMjp-&4 z(fv$laa!{D%M_Xe1`KD0g{YSh?qx>pubD8~8x8})<&TKQL%?>91#FrQH*N~XkS6kp zP!npzJ>%(D*!xe;k`Cr`4Jg7W#e#_-9>1###3cZuA%a}@b}!t`izVWL{j-#oo%N@G zG!1{a6q7#zQ$g-pd0cNC(!ZI1HDdLJkE+MTb@*Vq9w za^5U*(8x2fx%^Al?p?hTU^Hv?wr7rgl_oD88323fE6|MpVe;*robTz=g~NwvDD;(K z4iJ3aY(gvy`30F1ws^?GP6($X+;PiSP=+(Y;S+DC;)rO*`b(k&&c)^k!W5(i{Lfv@ zS`MEqk3T4LZzQzHKK|l5c${J>%Bdv!qRwgKxy_0;SAc>J6mAJs<9O%z&ws+*1Aj%H|h?vKd#-c z-_`Jv+KPL{G$OPf|CI2mmDq!sQxPq8Wa@%9$-MLJF$f4f)H=GyDyVM7TBfW?iTy%H zZCypwKCy7^)Gs|j?+OQmKBh?zesj6Iy@_hm(#N-5n>*E9-_Db`JqmZ6{HDg_M{Ye| zAB!Am=Y5=ng|%X>5-X>zWT2w+gIdj$D3&-I=8BVn8rp9Re=ZVrZa{Iv zY1`bdg!GXv7ZgD%qL3TKTKcepHbgp$?Qi4o2bKBKX>Md{p60Z4o`$_q9lQ%DSVjr<&`^BTvN&2Rh!*#7KPT#DPxg*X~N(%@bk~ z1PSFUCGrPtyvwp#kR1RSv&AO(fA5-;Z7f3+!L@?~*Gb-`l*xLV3|WuipXx6Fu;RR= zVP7ehtOu#1FP1gv`l4Gx4y`Jd`anAd1=az^@BhZp{Z{L>suo%bYYFn>Q+&eobY-kH zPV`Q`2c|hJTJ8`eQ{s6n+`dE_xR+Ye)9CP8NCcKL8^M@lg``b=?fU>^uS*rX z#*z3}>C-u~81nkP#4G{KiZdH1SC|1j_jo`7-j?>1=T=!&mDaEzs@(n5GMgQI`A~*a z9cIi)&k)B_+=@L}s-MOJ+&pkt21@Mw+ysRAknM*a8Gq1RLOaC#9?2PPl!3?qYwd~` z+Jgd@AzY@9{<-Cu+j9G#k8-WA8}Fay>KZWQ;LSN6;29RZIT>eEOZD6-$O9a^Pwl0} z=X+d8awe_Gds!plx*SBvXliDLMC?T?%H>noDx+%<*ORSL#x&2dd%<(x>_KzQ|46KC zz`^^%=>9Y1TGP^i z<=U~eOCf_aHJ%6uu$igpuTuTe3a(Sq!LKkb)5fh(&`#Gw1u&La68+0KCYlMKTSu_` z4$F7jdEwj+tvZ=fy*lm}pf6W7AL%9rF%DA>JU0=;KHe|+=z16kG`z|nwWfn)kJu?V zTZbv(Ex{m`0AsL9n5xE-d@T`o-YBaPA8(hFOn4K1VyTkekMZvVX>shj{=P>jwyp~v7Hoesr>W2MWaKDYhBk@O2~tYUf<6wK2@SIUs=#u(Bs3_gsYP5LP$BAPNe4% ziD^~##O8Xvn+h3`vM#&V!n$>a0^=p1?@4yTxtad#IrtBkp!uJ?g)$sKn~eBkM53#P zzqoF8-IxxQDnuIN-Nod0^7;}_4zbd`;m<6YwkmWMk7ou2x^Utl?is0$hbUIT{7W+` zoZfwEqmiT$!w&VCBi{;_s z4hg2Y8b0pZ_*O_t@M$tm^@QQIYLkNcFo4Kvg_+qI6Fca?`VVkIjHwwRJ`V9^XS@Lz z2`t?o(uWg?^F};POqJO2Qcd9&5sIv|u!kpd8=mMBo(M!CV-+9m0Lvn_{$j{BE3mez zb}0x1?x#W&b@Sw(#Z3`k(^Wl6+?|lMj;m^!BB*+u3XN@6gmX%q+~|jj;xW;jJ3C(_ zgv#|>sOq5DXVB<8E-{ZG4dkuq8oAQ$@ z29eOA=^S?XVQJbzn!;#PRMH0VsU<(mz=mB*nB%~&7+hx zT>EzWJ!n#8NxFc%kL;C6hW~(BN!A{$`%NOOL}kR&t?#^$p6n6J#8%~)3_TT5Z$Lip zXwgci;UIlf;6}mhLlv?*$F0*K%ot@)&!Rkk_KC7Z$kg>M|2Ujt(xd+Hs?eVt&t7ZO zCS%Nzhj&0txYzelvEb`dP27%h#{O5E_*wFVrv(+y(eN!&GRE~lgy|95%OS_3U)y!4 z8j2Y9s$s-rDrwFIukg6?33l{TsB^Pf@`E6b8M_3fx{XWhYMXVC)OpVEt)5<&I7Jqz zgTON{-_MNly~=zOl`fTa#7Xbfd+=DyhqR5GDMo*}qHPI`PAsADd{EVn*l9DW~c)#4a)?tKp)rLhX^NjD1}^m(Od)@QH%1TpXo&$Q9P2 zvk1}SdF%(1)5pG8vr#oUsIC*FQy7XZq6lSFQNKu1AGX)fOiyen7RvCG^&LlDekN3tzwwOlC(W*s(8!kw zl!hXfCGKAFDY-RK`DOEXdw`tPUAdfcc&FfPGH&kLLWij0Xg0uT9;Pw+T zsacjrlWAzBlvXxM1;cWq8q9F!C$p!ANpzZo2Sfbza;UH3#2+v?fuI2n}?7 zV->PZ*mN#E;w;7JIES+_w4Ga+G35EqmPNw&tEftqvh5>{U%XQtu{m&abuGWaZ+TFT z7)fr-kqRt6LO2b}XUo@v-(J0_3P-#i*T8yFN%m;zK=s5M9M+VKwr~VpTvU?DmrW#e zpwpde(Y%??`xG|d$!d^~%17l4ach+IKA~>2V>$Xh()nd5!7#o2J+fIco(j{ZJB;c* z%|u!#|GKoAF6~Jci~yb@ygH#+%3@AvZq=`yyAEbGcRDWecaxP5qr`paR)&}|599p| z?LVefDP^$%zq?2ewp^2;e~|y0RUG9tR}9ka3fSn>f`gEjegB_{t=vB$COmXE7~zn zsxcFy_cMudI511V#v`ZBJxf_@y2e~bze0X$V4)=`D8%}@8j_=sR}uG`y9Jco-M%K1 zrmr}BP!!bJ9b?Z#5MKNW>}NY59K`$DJFGjX)H2yB;y??1ORLzEvKX`bgIRL;MnntQ zASjxgUuq!1Hb>TdQWEp%vb9Z{(YzTsLYdF5P12p^NiPE57ZUBMnOfvE9G>jzSf6`DBIBf7BeQcRA>F$s3^fX%WuA`{Dl~cp&q10e5dFq?pfep zNpFO_c3N6u{ndlmJdpxEmc^!$N~i3Wg~)spbg`A2j3mtq>7vCzb#_7j_!=_?Gpg%# zUv{s;%!`%@`D3l&kuQ8Jq?=iwxZdcfX5hp&= zLv_x`)>TQW_Gf7O5DU^wf)~7|MHD`0B#V8=i4A~1RElNyUElWb^F->TC*Iv4S07f~ z3?aa921qlQ%X5n|CVa^2$L?szAK^YuqNEf;Pc_qIv(4GQQpj43&7$! z@AVxtXpHbHdTCN@&!+sc`30CM-=Py(=b3SBqG!qaYn%5?pFk|q;9hK3LmVk7up9`H z3=lFlvU^Getd9Z-T0uN*#wYV9R*@bVsbkFf41TE2FOykJm?=^UeSXcm(m>-NO!`_K zfY6y8_d**$Fk+>dsG+VHAgT1?l?d%DDzLAL)@D&zhI?NKFSU3YC@PmSkXJa#YHAFd zndt#rU>8XxQ#r6o+xN>H!e#X3o(}%usF?o~wL|vEU?%%RObPFoX6l|o#<%`4jz3G^ zi(LmI)1<}|I~f7$(ig2Lcylg`UgvX;!$845f&ZSot}kx_3Ia?vKJlwm=+P|96=kQeI_`+ob{Y#YiM5iTaffn7FG*9l|V-^H8m9g(ZO_lE@2kc9e(8Ex7 z3VSgA-WC83n#*w3_8qW2uFk(CQ&!o7+5nWMipv0c2G}cj1Y)k-ubGwL?XkQdlLr(>bZ?IeYsB47wu#8hgb&+VF1i-f z^eZL6A*2Mr^Qeo6As6pcZ6D{=uFyGzH&7D2va$0>S^>TjJWe4SJZZ;POLaFr>)>JW zS>Hf$rNKsffiFv-MJe*PN}a>VF5-Y>36~leV&~Gy2WsLqtJ(`yxTN)KzdpB|eP?!C zZt?8?nNve?-Fkk;?l%97E~J2L2AF`cVvzTE{3ta=qzaqo=58Sp0 zZ7Jxgx2xKAvDia3*I5#?!quCymYlEer)~^|Lz&*lzZv`0aW5DYqjsOIS7BM{-(wIru6Qzbn{%oBSUA-$;AXP;-3$}^0Wp7qf=v~GJ$DBPVn2RVFsf|VbhuVv z=IuHhsor{b(2$EaoGT%dduX?C9=~#TP-A=5H;DdT^AUu^MP!K>y;s+%qOYRo`$G9~Q5j<3<@IKrkIk5c4lURb3YSA&fW04sT) zzPbvy!xI59Q4Eh=Xx&+Phs${2!5o5(!&vbt_lhZwy~M^4I}Z{8(a%u*^U3RGRZe$m zChSODS@P&W5iju-(t>R$$IVF?;53lfcI?w{Gmq2o2J>jivG=TFOcYqqtwX(6OtO9a z+)b$M6gY+Hgdhp#*mNDb__)M0xI`K0#WUYHY5GP*S7NdZ(@|rOReOFKGs)VyNgD;g zJhY~*U^}SrZ@ko*^Wj2kBm8HXbv7@1CIbhG-OR2AsT(6^f1gh3-&H@Xng94yV5#ay zJSA5%WUI3MBsTK2EzKs$Yg6F-Ip9!Z%|3Ud-Ny%6Zby0FSykK6n`=tf)94((uJf}= zD`D(-L zTq2}z9|i$%HO1VV)~(Q0S9kxFNofIpc)Sd&!`o(91eLV%=Ty)>u7WyYz0I_l{&oXs zf41hJQ2%D<a z3m(isH|a$dwoOWSl5Ks^wU$oAtX)gWLXVpBIEB#;R9xikN@Z3+ND(MF{Kg>dI(+?H zqWmWDDy*#WWL$(ckSO;jgA-3~s~3o9EjKC4bQ$*@Ed)qJ~RuP73HSl zYr>btJ!&hR^GpvTLMHr*;7L;tjT3q4YY|XVO;p`O)EE8@EwPC)k<+{?#lx37o-ygY zyVUCX9kh3wue5QdTpyvjF7k8@(UJ0W|N@f*cE8kTTJ{Sbp8 z&m*k0t>+7c9(AOe94FJGA;Vz{WA_0=qVdp&&m~hVe#5gm6ZI1Dre;&j|gmG2#Q7+~sI^x`7!{Y)OqdqHL+>A@JU|AZkyP0K@Tz<-mK>LVS|ZJL7| z@WN(A1?FqJ9lHl@Tb`rkaJ=uI#eXnU| zq8;O0gzOx@#?48dMb%1f8?GE!Yzj$CZ!}asawCt;dO{P|-F$%z*SEqpGsYRuCYOrFK$VsA?*YY*yymoj$#^WK;joDs^`Q26}{F2JkBN}CNP zB`zzA>3$wbFNKvn6-C=ml*W|JMoSkd9Jv8^h$Tq}B9D9~fUk)fiqD)%FQFAYgSJA} z;13cRp@@%hmL0l7X=@4*ln>@NQY0H2-I9Bm@-2^bk=9rmPt#rmKU4y@`QIGlJi=VACmPW~($aFRaW~|D| zlN#1}YVeR@OzpEMLPx9S(CWtH^(*P~bqB=6rwN5M zO<9>--1Cj@E`ANuJ{O?4E^Lmy_S+WZMTG;409_wK6MbxDA#RcHh4-crA%&bDL$r&k zsd)Rw?3;CQ`PeEgixa9rm2Xa-$4}#cfe)v-NbV5@sXhle7WAN*RR3}vim)j)s>QQE zcx;cpa+?uo`?Ox-L2v!}ngCro40S%BCummfxG8w;ni(U(5_>ccW=%^_qe%UxZem@_ z6fO2?#nxcCx3*=Y=FK=g z#p3nD10XlB08Ye8kw!N7H>!?lc3ocorY{~=BlaVOBenS?D2Z&5Ac`dy6cPz2@P;If z0>Ddx0G2XU-u?9J<#z%tsQ9=k?0~;fdL;?a zFB>QDST4JV`8nti^8u!aupa(<8pGoR;9WinSHtC(?ld8!to5hTMqP=`?ipNPF&iT) z+es>G|HB&^4>64f-go~OP3VdNM!IJ}@reMrVSeym1c6Kw`5&GF(2QKvzvYsRW=i*b4E*_8XzUp%OcC3MS*Bi`wTCyt_VTeWDO+0OJK#O%qw{xa~BY%60ctceu`STu9qS zyvf@A_*B=2_tdzL)AWQS1SIahbT~{9|mEF2RNKg*jdQmFv>bX)L#a6C5PfApn+?B_e4H*10 zV~Pvr2*6r61dj^6MKlAAiqO4hge@m5)wl zvDHLx21INVEZsiJ8lSD@d*<#{W-U!F*Z;NH&~x#Wt^j+6o-HEd+$4 z^CBN!2@!Ebv7k6ue>-S8z5+k#Wg=;24>y8p=QvMys5Xb_=>Sh@qkDhlP*|F%+;v>{qcy2GVJdn@$;&-XF}iJt z&AkUm)<7;UGN$_|_W5@C30s^k_4lD{4dKblR#vssYXY!OBKYS#`(kr7L>U9~fye?Z z#4B<+BKmXrKl%HLR)_MGZF0=ew$&fI8?es9ie3$@WR*f(w+b|4D`i^rr}m&%rfRTW z&kJD0&3gX(Isx*$J5BO&`$^;BULpV8?M#pa!~^d~FsS*Y0=JS;joC-MwxNT9Ro>;9 ztuztQs92FhUbZq_OWFg99dFW#};+Ho`9!#om(!5+iT|MR@|0lc;sUn zIRTyQ{-x6wwRv&kCl}36YxJt!hHLg0k1}8SSoqv7O>5(cy4)L*g%m3{1^vYu*0 zWacf4$4I1&c&ToMO?hr=2G|RPilp_0<~n|e){MAa-GHIS4rUr7L0m673Vf#O57-56 zR`gTNrEpssOib?*Zdd5Kfe~r`HR5}R#nItKuA5(ll$Y&xwgxu|vw7bK$Q5TpNELz3 z{7Sh@H;0Gof&78%b+Ler(amYVnKIRhggk%ye=MB?2-@XF20)(5kNkgx=)b(-@5Dp& za;$0QU%7`lF59E}kMaJMel*$sk?gMw^e0E;szEMlxlCjJNklzA< zta@J-`;#1+;L_QLqw-WL(VRe({MReTSvfrS%DZ#(^2X^xxSsj{l?MMvbJBrL<#TP{ z_+j?DjRiqh{NumM!RA1Af!MgOL&L={x1NQIMll$MkaGP?s{g~x^?yDse*^&1m73V` z0DCya#i1J2-PuM05x40V00R6cd5!>^8n7fP4ZDF{WIA1SKoU6}tyY>a<-D?O7Bhku z_xxSG`{|CB8$YlWNx$Kv4UA+Q3jhZHS(v7iHeE^)YG%*b!EK*RAGq0Ufj8pz9qgCk z&E=_?39vmV7xy=?pCf8`tH6PwhfV@KFa>1!KkJdT1l1d><6wJN&pTmN32bXAnVO$d zAHpC!R{6n(?7jq*a6f5n@D>flZr;C?UxO~ra-Y+{3(Qid9Zx#U`1f2-t94`Ds)}6>_700GCW?Oh)8ts&-fw<29jCT0p ziGbfU*v5ND6=P)5j-!XO`WQMe6KS1h(fEH$b1>dvl=v?Hn%wIQ@Ra0>z<<8KVaDaDJ%_bK_6rG-le|`Hb9O)RpOi`l2(1%`8w;oUA%nM%?zOH;*+|N*4|6uPzmlFx>s8 zw0$2rc=R}u6&BRNCoNsRZ5=Un;) znXdN(gyj%vymWD(RIj!aR{pIF`fuo0g1>!-v;_3tK+l)8Cr(|iq)V%A=4E{1vt_6x zO$)R7M5m|&5o5lf)ryeplPyMh8%_Ft!;P6|bZRM8Gsx@W|Ktyli=V9Tf~|x(-e-y4h`H9?dO|V>X9!Q znw=r+KotCYYC6)Kik~1Diz{TFk6x}f#yx)5Ymv|D=86200qj2HSQV7M;vN<7g-@$CTO&;kywu!Pl`c0GULM^hteYm z6araTy=DGznOuf)pkQyX`mZ`H7W`3gdStwTIju6o#30E(aY5!p+B)c~&3dA_BAAe-Wbqnh>evZ2(w3eY{l;#d-$qd9&gf?clCOa?8m~?JU-5n+NOzkI*=En$hjyLBHoMaZ zkUU?s`c<_2wzR>|Ry4+0YO}ty8z&tv8_w|fOD*Y#=#lwIk0^)0ksw?CqjDlyU8A@6 zWTpLvyiRTFGj$r_prWXU8hXq;s(Ypd{(VDm0nl^6(p>tVH}a8&B7LHXTH2jBt+O;_nNjcrEYC zQo|GzrqZWHwyWfr7?F#Y%CwnepvvT@6LU(Y?chk9$Z^?vo?% zt8fS*N8q^p>`2@VV^#4x(mpf1t6ss6EGR?GqqlDF6XyNPP z#Q6Alp&PS)_YQMquYXYgJyQ)S1!aD|BzM~$%efUN8-MWcH$Lg!?CEln{9j;@|8=&{ zErkf0C{rl}XixroR<;X4lsvh3+3kf^{}%qj(fEIaK>zFEfd~J@>wj_b|8ETDb=p?B z;O)WoZLa!Ch-w-i+$Wpa7d1n|^B*esS2^JSovj1hQ?&30kQg*>HYL&$5_BqzF@IpsPzeu*UY&yp4Ctxdw;?$vLP^2EdTU;Vbvs;K6m+L~vcO`3WMk>8g$R?)Uw(V8 zLTpq|{SURWYy2=>VNwKSK_Z<|pza`-R_+1mv8V>N*?ONSIU5Pz1B5>$47l@jXX0fX z+h~)egF{pgAXXdpdSL5~^1gx_V1!!7>B2M>PTOO^eofkrSQ$FdU{A>RE~hS6H=4XD zV9U0S<655jDkiPjmmwmc#n-gL!Wu8}KD#J=z2d_^D|a%0z3!$pS)}v1ecL}9^=5|# zxf?e~xz9Q?M2bb_oUt!TG_jD?%UF(V%TzAH7|kRUu{qgQ)enq;-l+Oy2u<|?nh;vP z68iCR7_wP#-`bY4VX@;#{6AI?)D!^m<_l|y?RWbQ)ZF7U7(JJv_Kv~amkNp3YLNK6 zSLsT=Dn!U8WaFepYtUpp@ol5pEOKM<2!-bsk| zfw!_j?GA+P7up@6U%#ih?ry9SiC;}=7E-zex5?*)RjQ{eMId8lze>l%WgfwN_bOdi zIImR_N8UFh0SS$vJ%)+1NrqANrjK3iwzNh}NJQkyXW{!dC^Fd3n(PK~OslzsHmvV+ zUr3S0>W^bzjr)A}>Jf)tr77-Xujd04FB3-T`o@&Rurun*K$eAE^E`4sE^W;CO5KQ9 z3G9$@R6&u%H0BLeMP!rNjQiNR>~6>s%F-Q9CE+UqBT>Pp1Y3LTLL!q+_ayMb>Pn z^*6f7Ch0O8(uIFA$ud>u3QvCJqTrGn#&!n!ENuC%G#0_p_#nO%DHd$ilEzr(2w*9X zHhYLwlLhUUT74-*J}R7|en)qu*^oai@21pESE{24b{y0hC#D#)Av1W@+9^ND`li|v z9DGLjP$}nQkM1_S7T99$jUi_?{*(^be7hE2L5aJgo=!cSRirPeWy;&zZ=EwB>O6umUxDRzT!ywuH!Guyrj2sXPaYnK4 zw%HxiOv5nrp4X}?tEmM{O;oi)3!Rvxv=V4Ym~e%VovxpJ!P&CIftL!~`lG@%O(=)r z2`AgX_vrHJb9yM;3ng~g_M??TwZdE(j}#cQS@nnzGzt3U4pGp_9tu{9P%6^}a zD|zoWY0s#Dvper3R|OB=Y`&kIWq~NfB6EN~=Pm~*b=yg~(rgLKfkByo*?aY-XmOON zt`)tl4yIm;#K>umFz$__KVCl!GuOOz&iCr0s_;`JSaPTNN`{OK|7zHx-=TC>(3PMS?9%gz znT9W45>r`_=l;bTA~5PF^5^#Pq~P)oswEkp(kxWetrXF^y3&uUGdB<0JWpz;-g~o* z9Ld%wh?gfcw)4RvpEd+gRpe+6vwYIa{fZn-dEo3!?X@4c*%jpdHaugK>A zO$bWIN)|kmu0*;AyRsafLpJgn7E9!U9}FxlEdd)&RtbEYpOm_ZThzxY=i8fYftwt* zh@23yzuH6oxDORMxB4Rkd$ zaHZkzddtu62YwO%A<;dJG*SXn0Ojvu`CnXW3wlmT)**oSJza^uK2v28ePX3M>BBa5 zu=DdL(e8YMOCH4*<7YSQ0j9qT?tc-`leSH}t*e0e*&4ev>+4SYE$!Pt+n7S-q~5&w zt*0oi*aLz8zW?i~;~F8OD&XGX1w=4mKEBT9C#O_f2*)*ttzXzeH$*l_~QWMsd1Z+`@( z7cE86zceMg>zNAqyZP~t;+_*SVzy3g%H z0Jth;jI)*X;$Z*lF<`176-{P~t!+Z763oWzS#LeTAEQ%L8s_=t8_`%_7e!nb>()Gn zs>;YForL=j{&zE|u@OpDn*Sjb#tD_S*Yjnp&?qo*y05 z#c$E8^}e|z5>~ku>#H#7*XY3kS||SzpY(h%J#X9;JLf%cpKQ=TF_H@cVx!}NcX3>0i|eGzzB?@}X0h(fH($KDlw)z)YM||} zXmN-#3z+0H`7ml_SB-sTv7!poN#O8Td{-f^ih0l6mef12`+l?1=AJiMsb;+!cGUSa zcJ~+Cro%byl$!U06NCK+K9^Lt!!1ps>{Qp6Zks9J$VhmU0PK6;r5b$W6Bfe4l~1QQ zl)Y&wRDKYagiChLk#+JGu0AzZ2KdBE z2NY=@Pykj|W;wy4`rN!(r28Bc))P7_dC+vI*5W+uQ@a%=;XSWAEOtKU(sDHq();iO zUE<;gsBsC6!>#wFMiL?@Z}5Fl3sMT=d;)u0B32m$2nj6j19ts-dw7Y>RhE+5e8-SV z!^ee|<0mopi;?`#Ygx5R)&iAcmw)iih>7)5{gUXx8cbyP4CD%MqZ{mIcs};q!V6r4Jb_f^Bp-t*TuH( zAgIA^{w(zCzWXl7PU2wp-0N`R_vF49+}zTU!FBOfa>iYcF^3-NUzS>y#4)@oj1xuI zlTt7byIf|8tl#Is$+mAuaD>>Ln+$KmS?Rv9>9kd2!*?H=pn1865dnOlvZZ|AMBjB= z_xX*PkJq|{=}mBW%aVtOqFf-Zs@VGFB&~nL<|rgD`ZRakg9gqM7ka zQR^_7CBlTTf~!1@DY}{NPw}V7O6(-OL@}YaVu(btw&Ar|hSsOBhBEBPugiTETFG!1 zH+$RJOc>;kZ;{IbG{z-TFBybM`WbBz?dSS;RBtqr(3TaJ%nego4rB$b1GgdqSM^QM zRwITA$lnU7(D_H$JDzvY(WnmesanJ&D@pJ1F(Grw z;>f?f)yQt_im6()konH+Zd(^_r1BR^6}dHgnmnrOaUwuYPE%xN=5d{t2=ZU%4M3Pq z>_2y6tA2OepTKAJYwP4eN~68Bl=p37#yAg$XD0}9c)L6N)_Ks!tMi7+SOwv%e zh_!=$9v}(1!HxIbC=QUpj~qVIoz61M-znA(O`ERp@&dKy#>3>V;>|lSpD)i9UVhQCNEZi( zE%%Iiy^uOhmv*9*!M3H0#q5ZgB9f_Mlh;j`1pnyCPN!aLFcJnT9~T$RMsLr^g}v7< zn1KzE5-zi>cW3e(QAEFv+60lMHebZ7GC>7{6~fwsz6)nN_6!UoQ}mKSohh|QGacnZ z+PQ~m@_W}(0;jSo!q)1JIg@18%EAPn@vEhxnqaBm{46#=wj^nPq5T+B;a9)zwyaq6 zqG*6U<6j)N)IC2s&j}!Y-2o1YFpSrOEYGVg#&aJvCzWY)@)Bbz5e0JVy|59=(3a=t(=7>1m}9QAME+CGPi)P4fCH!~YzE~$df$$TcXck5IO zSDTZAUV(G#$I^bnQOJJQ6ZB74gi9z_yz#d()1ntcKT(ePKeSX;o%2}v{unLto3A&o zz>4sSQQrG;PZMqnV*KG6WHdBiRAOZTAkO(*J*%;F>(4naPMRuka5ePw(;LS=&We1- z686Cl@q-*4M?Nr2GM~JPR-#H0-Ey#9moe9GZLKUw^}YK81eZ_W|3%zehgI2i;l3&$ z!a^DsAPthjqPx30Utl3pA`;S#fP_kShjf=pg96fxgrsyzOUIteSKrU?-Fu&X&UMap z9WVJyS!+J?d7e4vxW_$ygFouPn<6}Y2$FnE{P<3=*DISWrpc8)N)?-}4%pzSg7ET6 zVhHT-$f3brh3>k`8q_aie5nvG=zhj9qP5{DyER=KZP`}LKT92U(BEWTQC0mhgnGt( zzNC8AeLW|>>Do`n*f+iI$7%X?7ddIlOivPfB#+@~q7J+<#{?F_Sg}~9*}v=S;$TqKa+{xF<02Yc z?L4LHF^hP%z!*2g@JI>d`nnnMdhm!|<_$KU`T`T{BQ6_=H^?^~5*K7bepLkh*5F zj2JX&nQ6oz86H!PR*}`LbvPLvW0kI)hGySNUA?@spA}tWEh)Bi{Hg)Z-tp{njO-i3 zCwew+J>UW*#Sd-kjCbL#m#sYB^K@lbyP?hT3iGQz`-NZ3$;6-d@$%|*-0Z@MBKLiM zXg|S8et}HQ7uJ{*1g0S<#w3FRi;+XbJ*#+rK{l6U)%I|%VMkQFr!iMl%PcS-Bh`h# zgpD8VG^``nJh%fMBJe9V?DDeqIX(xp6G9Xw@hwv+cl$9ht{=R&Scz!L`ct6!`<0Hn zwtM^_Oh_2M4|~~TbGd8eg++Rib8L8SRFQiTXzO*zHQs;uSxz6`Nx&yNG?M+qAOESr z+2Rq>AvV;Jn}H8^|7uYi-wq--rR>w)%Rkv}P2KEsXXdRWI+uA7I1Ad;^K;=f~CseS*8vL3C)OLB-%hC3viDNPKa^ zTX|)?7%86>tjzaOmIPzk*QpcSzXly&VX&0vsVkZIrlgf(B?bz*{T4xW65*y3Hi!b0%b<*)KFn4VV4 z^EvS#z)(lQjGLHOdT&HzSc2g0#{E)I!^2XS#?2C<^piHaVQv%YKw~$`XEPq-bxP?T z`xE_|JD{H9XWR|0NZ6-!NV5=??mcq8p+$F5GPm`{z7P5_Qf`}|z*JVg`nL!2LStDo z;N^u~?gN9EAEmo-84%<9e`yVf_9wo=3T1mlC0slt8S zob8SIfyf?EngA-Qeq{>R0-B#&c#uDqf1zt@bv?kYY1YR@>BRGxl})KKnRF>sc4qYN zq5gLym%=|b3u~nm9T^!ZK9Di{QKS)i?H+$dESCW1xxUKww`F^F%*?v@6Y&7jAqZnZ z$k1x%gi1%hWbFRY_bCk{YP1oPsMD0G8KdrkGWQb@=>BOT05QFTjn!f}4R3q}xh3|J zwq}+5{6t0M6|qHb9-0KIfNX4hFqF|r$N$6ZEsn82WN)BG>~=*DWUJrhjf^BCksWAn z!I>(|ZK^W|e}JeAu&G z>>wXwDXyXfjg2C!IG(Fbtj+S)lOR#U78^vz)Iz89iE`~JQnQW$}Z>i{{71I_Lch4YG>|)Kd%NT z!Q$7$85e4LeT-IA;9??BR^kd|ue$6zSmm6n{7E%q^+rz1~H(h zetS0hMaQMsu>KyT4O46M_)D=tt@z1}TD?`jb2QCSFwwYeu z*WYjR{p>o`PEU5msRM-P*@0(ptF7c!+BcOYJMlo5W|RMfOo;QPT9#X7~}Qa-cu8ap!(_(Gp!pgvb=_}; z>|?9;h^3`xwX@t|Rr%*S(Tr|zSKWpBHlD;z((1If69_2_>VK{;YZcI|cyenGV6EUk z5-)9bXbyOuBsPn5Thuj^h!kuXI|k=3;$SnpZsQ*=)p8n+!a5i(X1MhAb_Dh{pQ<7~ ze2K)M6^M>{aKpUCi6ZtkrbG_}`tu$EIqrC{0I}$^Z)91RWU5+g`MTw9OJmUH60tNu zAexzmo7RX0Q6aq1Zu#!I#8OxzD-T_1&ztqyq((brqKnl|+w=Cu@wt<%ooV*H;epw` zEb{B6v3hcT`-V^m3*G1a+E}dkF|i0Ieb*la?tA-R=V(mb^OjE zAPd`4Vv%v_=mmJ0=QojZ+>dtEUCdC3{Ceq`eES*v7lv3@?j8Sl0*RF7Gmn~cS=Saj zQ=)A~y#~5iH{)vSr$lODWnBUf-?^vNQyfm?F!FSAkBB`~S#FdehPMSm(u=Y}D zICp|8S4_{}FR*iH^Ip~x8k$H>5Yif-I? z#D2N8Uj4{#Y24@&fp)y1;UL4B&8MWN20jc{Rv^eStPvB!e&y+&kCDw(V}lgKK>xOc zSW{_@djWsp13p^s%gWoKU)95EKR3SYCEN?~l4hN3$E=hS8)5N3Y>72$Jgy(VTsqUY zkw6tW8w$Sy)V~=7yzF2=B;D$;)bPD>1h4%<#;vdoUgZ^mh<$$%ipr0CxIrml#%3!W z97=E96d#H_TxU#I6gD2FFQ+X{WFiZom%+kLWqs*>gPrT`k>TBgamq)5$XS$TcT)%S z_yDKSt^u<V3hlNg?p*2-Mq8$t)@yY)@D_AT zI_};}U<0+#C!l)bGPAQASqA4zM~5q!sC29q`LL1Jk$u&e#hPKtTQ z{_6um9lH3ws9+>piLPNG#|a_Zeu}e zj4Y_Md;@gD#q%)BuMTS`k&AgBY&^|#Wge14mV^b)Tf-i9k07|`eP_|_{jfC6*V)8 zX{~WGxxj@KWFv zy2ACfx+C04Zsz9ZCeeMhA>ewpDMI}Q6P!A7K@QT$sZYCMm%93Dp^gvOlE^(5x2MQw z=0c(NkqY8u64XI~q6 z z*f#}Xz2Qul*}N@_6gbZvpKG@HW&?3YEc=wCK+>^Ids6zkm_f%cR_$$)3N3BQ4i4)* zODgx=;#;b@c*Bp2f?b7ul!Ud2m+%4!g~)I1dkv*5I^{PAN6@Y2TO{TGmDm*=0jx5M zKlm!Wu~dj@n1-XPJ{0ykjN~ezVv#APViM$jGOe4Y9*Yq;X_WH`Gr$D$7tajuX=M?2 z52U&I`FLBue_opRijs)uZq(gy+eE(MMCe9gq4)s-Q4Q55S(XBaB-Yb}5t6RV^fgIM zs*qdw3t(OnIcEqY+e~au8)=T>D{aKpZhR+2nUq%Llu<;**mqbGxw=U0gS&nv(D6KJ zC7-RbP$?Y1+Trbx4#Q02m6h~HZ^IFPS<`(Jt-vu!Ub2I5X^+=kPoot1K)+?KYF21uq;8dB#o)Pxwca+*iNoE*||DULw{Bhvz0D|Wm z@AaiV?=lK~Bd4mWs#5f4c%NdbuZ3PP;=H!S%!-GH*LXI^hm-|;(M?$1Cj@2sr|AR2 z$8*iQSZUWXu=sddE#ULX0gzd;qMVd&tiq=wl^iCK{L8eHsMqbctAbHRUl9*Yq8b(74$aEF#7JqbZnYORP8GSaey^7Vp75JTz)!O7 zCa(%hc@KCrT`a>kx&1Mz0wkMu17P`Go_0%19ej3#Yd0Q|b`YYf1DY!JOMjUlrT*!g zhg%NWxI>g3Lxh(SB#p(32_Y1H)UtfUxL>e0l+4E1405XJqe=24V!jrVJ+f&JRc3^# zrP$n*81(l`3Uq%XgkrxBRYe=p3PDM_ao427M1$iH+k=h&ZxwY{3+w$}x~D%tzp<&> zNS#JkooRI!Yvf7zb=loH-O zUiuq*uII5xoH{T4s0Ke#+B}L#r}kNyESc8ZX*f`pR0ZeG0+*}PRojVjUj^r<99RwG zv5=dnXgdN{q%`~(6d**FJ-r$Cc7PT$Q#SZcP!ScetQm!v49u!KmZB|E1%ONO9$Ar$ z79YHllJFbiFrz9|57wZLqK?*}Siy*4q6?tKc$#24N>3F~Ilo`}w$@yk%UO{7=4nNb zs@snAOT;Q(HV}zIi=4`!S*4bvjM@*fky$RykiuN$sqDq-7Y@D}6k5c2TFY(E;#V~4 z6FFAwJ~*?6ddl?69((YU8>pPQ%dPuDSGM>)FZ}Asgf6}?#Cdfn=d)HEs4BsLMRrcuL@WYTkIsyB*CHUx&qIr z!KBXZbUt^6A?t=~>sG*Gi)zE}O0w-34Bx)-n|#Tm4p3!m&wRfC?-N{?@^6{ac4~Mw zo)tA^Jms+~fp#{XMezf<@7jsnC?rfyLfBwS;Jof%NzrlZV_4(S<-N}VQ>0+*l0Cqt^W_zm6w}5RYFmF;w5XotIm90H)C?aGe{UjDSFu;GC0?wMW`0~k z=_?qP5LPKMfxW0Cjw&NsX;sT9l3u7{N1zaf336q*2G&slhYYE~_^9Q%F+F@jU%DHT zh_U!uO#reLK!7-llZeRNzWq6rMoyPB5WoM6UThcEx9bd6WF$6Di;DK|=KY##ityK8 zJkAe~9F|z`k1-aZYaYCm*DsNK#55`S7exRrv%^Ze>k&O;56aDSYG1!$&A`rLMd`g- z<@*tGv5$lYbO+vBit5eyvBK{y3ItDhQTLd?77x*|CM_dtz$nnp>aoavF2B=vF}$q^(i*9w@&Y&a0c%y zE>`^|rCSt&rZyTa7(h8wmh)8rDdJD8{>Z8~sIc3y zD2>UzgVtFFg*{f0YnT%i%pwIjF=H!34aj$OyXA5Y4M0NI1wdT)({C#YyZHE_w29XI z{OG%`nhLVQs8TYwnwgRN)wc-D^|*cz2-T&S!p-{Lq_?jHgOPcKycsKx^VKp9=1Pvq z!qTF?iKm|OzF3xAK0^xD3I|CVOj4;@UuZM8>8 zZYvsUM>3CXsS)Q|xq7XUtoNqdh{rpO(G7tVV?r26yz3@JFmj;(88M#-!(IXjElWlg zmz~byHLB%|j`3=LYE>1fcPlxRJZS{2QLN0IKnwmo>>7h_?Fxh@et(o*gsksCZv)4Q ziNQ;TlvlDUg+S*~XB*r41_aCD2#7fGWn0XXsb$WUqNAmq0r&lT2^D{OCfbi3OrL{* zodziSO7n`R4)4=6^)@B+L&ZtVrklJ3_(Xjf#kkjb@Z|zAZ$B;S4$F(rfSjH2RT44$ zDZm87C-&l3wI;ysj^(u(0=A3-vS}wK2)b;nl4SqH2Rf~8r>kRkQuiPC5{7t9o+?+h*U8MO$T9T<)--O%xc3VwGUKU`w|81e(P#ez#W?ee}H2mhb5 zSK|}*kasyp$-T5aiJgCRybu(k8jhA#CT~5P{9d~Lr#}MePvHfaDmF4PufJ43ILo#2 z5~H}nmmX~{Y_Mx8@hY@eQV^Ji0F%R^lDD`~a|i$EeWSYx`@MJmbb&}5wlEzZo@{1? zlkipMh}mdf7Ii~BhP6@|50`9}?Ekh%s1h&CdEYQYiRZjRlYgCL4C-tCsj+#p=&HjK646VavjN-MXon2Pm>LH@XIk9##c3?$WVVaNi0|+qP)GCC%}@UF?jUz?c=t=4%)0Ql5^8$n;abRRV%Z768*C%3gnp zgbynRBK;E+i9+P(ctZ^XY=4w9!cuIl$_l+M2^wu?{Z5u!er%5C4O%Yjr~zDRoVfYK zzlLynKP*?>XRukki@arCU#R%!{Pi#%USKIP0*grJ#iN_Bm-y_hx!`ctrQ*F006|`# znc#Z?Fwc2E2#ao``;Rw97YnPx$F)Xh!}02YY+3R~jk|od&Cc`7dHTmWnkKiE|Bk(P zgd7=T&)T=P9wv=S==A)&POXAlD75L$S+?N2Xm+ZgVQ2{Xq)6l-&i0Bvj>qRf1_pB0 zK8MF57ZV-AaqJ;PTEBIa3hyuyJBE+d3CV{L`}>=@jIb>^9XA4cj_>b~F0(-%+%3J) zP7#!!HeIe1=*~JWE+LABfFk$v*+-aafp-+BxjtZOzrMGM|AM_dIhiGb8VNnhX42By z9!V#wMtn?Di1|&};aqA6X5(?oIQ+O1yD?(XR(CF?bTJt%pOudbnr^Y@T1$9DJrzUL( zWRPhSa|N)$?cTVUd1Y&n1xUBM%@Nv1dkh7F4fZ|vAnc8tLt?)?4l^Uk>66%rw$ViQgpOKbd9tx0^=2=(UGhREHNU(z$yu}@ z@DKWm`Hd*EvAh~%7!uiHh-EYDG;`NT|9Y+YDw!PT6GVlS?`%y6rgZn|N8@&^F(d(u zt$;TO<1a$xU;RK`z^Mxm$6QlkO3GSp#unCEIlb=g?q?GfO`e~RiPl$`gJBHMuGopG zCOLul3Z7L^5H?WnY~?yH08mXxsF>N=?wlg_i*|_o|BdzB1Ud~0IGVkPhPPlwSl(A= zA5Jwo@xTtzf;6FqFNS=y5|ZihXt#67KQQuf;~1-kDkv*bM8y{1=&gD^T}u!w=h~4h zc^Q@ImX@37>o)JvbUrv#u%3L~XKPq}=rdcpodjn0dXdg%s(!Ug;QD0CD*XV)<8!!J z(C4=sxZhM2CPC~-(>9OuQ?0p~7)`!=AhniwrDZdVep(SvHz?o1%Eyl%TSj5^`F`!_ z0UNQj-sxc(X?U=En7@ITDie;F#;FR9NF!<6Mqp}{qB$g&mZ8kK z;CaBwhjh>~cY1PWSbx-WD<`l6i?pinQcI`iY5j4NZ)$Q#L?#kCrf5^j?wHiJi`deErP?CrTidFndFqBzUNaF3DD@jR zO21lIS~R-YM+iq)UTYGr^BuxR70su~&9w*p0vbntb|_^en7#7Ij-b_BQbYtxDSI*Hp@sHm+<`c!SRlO0b2NOr$EE^VltL_B`c> zM(nkmq8Uw8ddT0n-R z*=W)rJ(^CXzqj|9m1p6bI_t@IavRdfp^)ez&E
%Jll4UGm~eBLKSYi+OaEWa6# zTq?wbTqb@Ts0?e|)fxxy_w|B8yzxr})9-4Y{K~h8dwG3*J*JVu;M2i<0y~=L zgV>5PgO-jo>tsmyF=b@DSqm#P!P#+nUAA-?rRq6i52EH$7I<^9B}VdWMBWXradyeP zV!V_TjN+0&LD_3pTm_V7u6JDgmM&?u77_5y{X*E>WmUTH;YWchbZXPuJ)g_If;TL3 zUoEI+^@3Y(@3*2Yc!js#P6}sH#df>^{MnnI2;VJhuV72uDP*hgR88V2njn@yJ!QF} zF^p40`GwJ)Hk~5if&vxyiLA~BhiYX3LVN*-0vuCkXJ=pspeJ?i++GSl#_t82&FKeq zl)~bI;qNz^^4#f*fd}zQXCJsGYaX6VlZd&m1lR&wmf2l~i@~I_b-8)KBI?whb>gE! zZQO^7#{bal+GfIEh>K`t_Ch~c(9^dyT!5`r0yM=gJ=7AL)RVN(q+jpjG9iBdwx5;}?6OI(+*I?)F zp0qLT|0xjvDIQ8KMd~0hOB@m|SART=BXgaf^W60>bG=NyI^ZiiIfl72^wiItH>r4S zXw-b;8t?Vucb>AYR=XOjZhG%??Y#^WogRMS5Lo1CaOh;B%105zo9#Y^#1mM8f_ovBa8OzDL-n?=%U7rOYNw0+Fitcd{n zY5|q#5gpjGl`oN5sa|0us9GQE%cxVFNN${FO0g>6oV`TB^ahP?mQdBPv))Z7VdY&p zAu~qB`?8M=enNw&pb^HCqzap|tC9>j5}>*X-z>!Ew81c4`59hq2JA=q*dG|92Z2K4 z9+5PrEzgZaAGdQHbp0^l%jOxkm=>WR<;(i|Rdf;W{VzLn9w9BG9CX)9zIy0$vrY>Q zL96IcYmvRNz77V@ql!Fjp?&;-aAi`9Owm{h6kORX08LWQz^i*JTJ5Op>q{7ROM>Gj zx}tfOA5^IJ}>UmeKKT2H6buW2JM<*TqS!U=@1=bKPo zcT5M<>+x_{qb$fj+Aq$sKqmtgAuBZn?v-cJk7enw z_@X!bExu4_(wjKcsHAd+Np9N!LaHz~(kYrJcTjv~mnn)JgbRzQMeN@e$D5U2R$Z^~ z_v7zIijV_waB(0ql);zG)tE!S+NKe7cWVAoVr%@;==y9Nrz7+}Pp&mes~4MOU&tMh z2|zlY@oBx@zwTjX{j%Fs-JleS`K<=MqDSmil9^Sc@4;!x#y_=1UVGxt_m||h%4f=0 z4T?3%ToZ7NKLX!m^X7JUme`lw$N|so#OTy(cw{51mSQq^O@6Xd*0P|)+uaW7CaLY} zynYxUTjcv+|Bgts>-~1`|BJTre}cOFe^eU($Ep4Q@c`V{0zl6FK95bq_0>7uzlj0e z5OR;Lih_ayX8jKtfmlQ)(tjq$*Iz+zJ>?Y=3MCfa@1)ib{TFUv5Hb%41)niP*|Po% zL(mNg*cv3{cnS*0%X}_32fVnUMxJ|6psND;an)_WW7a|C09ZtrxLD0&KptGUVrOC# zR=fInbq=m~wRYfQz*WKVfCvGl8O^N*4J?S1fZy1`$Z7U9mktlC`Fh>wMCAHt|DEUV z=4z@7{OO}!dH^%IDC!~4Cp3NtyWAp04NsMIYsc^h$Io9tk@+6@K_J0gU0&tI(4DrF0M%%8YM%^6dg#SDrZ@|bmMb1mOsxOUJ%M^NK zU_Q%CMqOS!@7L)-IiF#pyHg>d11(62cFw)&Z@zR9Zn~QDS{j=>8)UxjK()F09zK0` z(R{hLb3LOn;dtp^uMQXL=ie-TZ#ACV{ni8&^N|`fdwUgH*hxFU^W?2vOV(Jm0zZM0 zy~G>QMopf4W>V4{8!^9l6dA|xlf1dQRS^Tn4)W&hlGQYi?fSXPZ3s)vH-C`jfWUYC z;v1G86!cx#{aBSJez;JdL4*TF*L)Q}emN;n>eWA`|4?DhZN>@f-D&_|Wj@7tfoHU1 z8wS~Iq%0GO3dpY@o318Y17G@Q$2pUe4c`_Y$iJeS{QtD2owcN(u!5g-1bZ^y2w zBGDVH*Tps8nmv#2Ht%)mo4ED4?05{^O*WCUe)^HGr2xm`wWO+uWI^v=$roFmy1UK~ zjhY0tltCcg9wH2aDyV@y9sH#GxYYZ+PvbAR&n5M$!TZzW+5NOH=H86(JExbhG}?`O z33QvvdT90p+TI2kAdRVG;WdHGso94AnW7Pxy}sqTz^nGcI?|uP)6QcBfd6`)K6aNY zo%Z>KhVF@Me>!dZfou21&9}9^fgDnM=9y|bL#+Mm?0i2QOBvoGtA-Ij#fwl8#A?sz z)(M)#ZxvINYs$e9D^pL~GfzXjuLh3=Oqi(2P>%I|HSVU)4`21B~aS1qV zF8JMtE_ddk4u6TI%2fon>3Y+{rr32p&xhS@SXmG^JQ&9|gmtbu6!EN=mjAWx)#w+xjq)&~AHBLU00Ne2xPM+HVwp$P= z%Aid5RHP2F8EwwUgg+oIyg`%CgToOrL@7<9r=P_HdJ@q_xNzM7OAF8r716*N<#SZ1 zlX|`%Z^gH22J@IbNWY$56$)RD^*Qx+n@>05Ii|FaAAq3QGxranXvXUVE0nuGY3kmb zjmUy3Y4abfD4hyO)4XQp)LtN}iGX*W1kX;ew;Bs{uDx z`#lr+SHyz6@L$~0La+ULV^x7g4m;6rh|3^Nj?S&9;T1X!Qh+C33B3##ziA1cQ5(jq zBD`SBwy|zOw8~eHt`;;4sdnytiMZ7mN&e}=EWDt74f}3Z>jm?RPED;Yq<_ka0X1Z^ zq#Ev?gjj&%Q&yaI&I#2|KK%A`wA5r&H#|jxsv16BlqVL-H&%9_$>_SJ-$w(hG_G-Rg3z;>n@gu;rSS$X#HHThQz4VgE3#_ z7sU-;-_rMx1riYgr30MGcEYp!kq3J~gHV)52fBt~&0W^X4v%U&yYiq} z5+Q^Krlk7G#?ePb|9Qd7piL{2wavViJ&@Y+-zl?!rWz!nwg<6F@?kF;%=3XDx$W8WP51d^?$-~K~IYHrwl`-TOSEzSNI3sLc0!29_bVBu{_ z4Vv}-(S8~i!wJ+L1^vrwMGs>X1n6!MhNyZZ%!YZ|F;mm|MhvxcPStm)qDH1f^QGCig1g2msfVm`VJXQmubinU(!jU*k z3c)!?yxpvz!3DnYU;lP*zeT>S=Lw5VKk)|XHBQH6-cKYn8Sq{)D&&;Jr#(Ds`JcaME8xF>9aO0`PeAH_5BxWo ziVzDXxLI6flbDdbJ3Xi8y=|qvlHBm;e++_mHqt4z5OO>QYiG4GdHAxgP@ebxgoav< zB2D4L*bfKHx{t7N+>B8ncdvtt^#4L*$^8tU_-8i$n{1W!qhWX7YCP*jv6j^O)tP@0 z!vq8h+Liq?*njb^+Ml>l-h!$pz~%!6E>oA&8=sW;tu~oIcpj`0H)g8I{&_NN@WcQSeF;* zyElxWa<$)aqpTdgkX2Erf-ac8E|+XI_)^Y~vU|qOY=Rxw+*a*r*>}p<@Y>{ zc@WOu-#9U_2C`mPMX_9OBX<;DH$=!PTfk*)3oh4F_m9Cfa7egfM< z2-^SPu~@|iAbLy2u@nkz`oge~9A+2|p)mCB0ojwz8hl1Lp-_kTU+;)79{>B-{(=YF zFFy@_hLbtC6_B7O)vs$`)YGWyuA@hl=oC!)$@Lzg1U)4Udz4A0+ynMb#1yi#{A{xZ z8tIJ{*eL#k10iIFnMS^Rs!Cb>)n4$ zk38uHwq^}XoDaCBB^mazv`QsZvNx%-De{#S6^nH%#7BXyzu|8lyFPgKu(B(B<9(zQ9zl}jYPd^!|A zP;9F{m~aYYKv3k0fR&P*f8NpL>3Pwpx);&FDkxU21K0#&CO>tKzX2(~R*cpkE#0e~ zx`v)%23@`Wvh%=;t6Az9R^0K@G^z~wfB6gIu|r~o`DyG-`da<|XVLgtLt>nf>^Rw~ z=^7djnj@`x8^9jZXV(~!^;dY8e{ILgKv)PDlTL1#xWW(a`PJ5o;?+DQ7KV)o@r%s+ zcCp|7`V<~HxiQDbMu1pzPEt3_fme%|qZ@pRk}o{?nOI>j5_hfam0?XN{)P{vQ!XXGii`4a!~MI ze&NMyNnADkzD#yxK>v8#i#*XG@5d&#-=fKp%bMo4l9-q7efFz)<4~5&&%TWE2>D-n z3}Pl8Oj?Ma{(3=06nlX~d%x@1X&1wD%@DFqBcN-O$t6;xs;b8N#)t-;Z6z=Q9!anW zaaOS~SIRJbK3}SgpXg8mF50uViXw;P(Rrd=WIueHHk)oeZzRT*M{&5bp@T-`hglG1 zDZmN9zldHSf7ks6dt{m_Cl4}E6>G&hsZpehXD?%Sd}K_MRF%+F73o_JXpFFw-AU@Y zzwzAMw2;|DCh=CZX2Y#y&QVWcK4c;(Gx*K!%GS6zOL;^N{&yZea5G>ntby)h1pX&` zQ}5ugFEUA5zPzW5oc@v<4siPxOf4-UwbqGz`8?6Rh5>_}j7qt?iBGE%R_-2X`xPF& z5%0|tf2OWOaMLXOjywxeZe~y zU4D^bzKlyLojor%52ukKvO>nSD{e?{=+*AtOTpb7&Rrwtpr-2T>1r(BZ(!BoM`ue% zuaG-!FnIl@y9m0pNKE}_HoXQ;Kib->N(8C^v5q3hE^}mcG06gFGtJ(;?bdeF+O`8- z3(%}GR_$P+vZ|Fi?2YSP>GogpZmSb7s*jnzNNJB5*`dYFEdFp4XMsjFOj$PYB9d$m zAoDsO7H|g|G7E(cydfCJSWiqUn{@kRDGSo5OPXdPq7oQb626rhGc1PX4pUA5N`4 zBM%1#N?QdMAM}Uf{Bi2ya0J0O#tm>30lek;7&b2oQn=x7Kq9Y}ZoIj8{A0=dtAL2@$kq;(9PaiIjDHn0U1fW5%AWP0( z)b1GCk8gizPl!a6G%`_p-$=Gq(>0t>_0(`5$ zHsy6$fLMNhdhmaq(LjGC9_z`&K?$r9qvorlDcg7`BWQMXu@ok-z19x-k#i*G*{Ff& zR^$2Wjrm(FOaxzeeR)EDujcupG}Q^or}WD$i-gC=@O*Z4!es=q@f7_0vnPZ41_Z|M zS$bNUG3?|kwaQ}PXasQd z4VZl#WfEntF0k^SGMNz|M|I>HkWli+K-J@DpK9cwYS03BGms=orz&0MmqBCNyk{o2 zrGAHUv#ylNxf-dEAkg^2HlnyZ4f@#W?(sRwd;r7Z;i9NtY@V0qt1K^LZ&680WJ_I3 z+}4~rhA052^Rk&JH=Ze}Zr z$~>M;efYjzzcUN&%Hg3S>HtLQGeoD$d=5CLrK3qQv8M z9yH!?s1dItSzZZl^0(iQIk;hht64yAKW)~XJzi$gF{;}xYd%aBJn_Ra)LT74e1XV3wKy@(dmbZZ{^s7%xMT zk16|`wBKO{s6%a^>9Cn~7ww6~+B%;IRk;`-Z$1W;vfZh4pWTB^7lW$3u8F$i&R0ML zGxZg(i<1$pX8V+?_{m^v-&08M<*qmdi;*U#rs5Zb`T$;3z|B`+slV7#F?fB^xFB$B zc)DBa>9%fmA9OnaEXzw8JouCDeYk4>x{uWsf`wmc8L3?8W`+|CJ@4#G_J3xb4xaa!Js@KkyC*^P) zbU~e+uYvIyhC&u2Y0Mo)WlF~g5>>w7*$EokXnbz&{@C|n%AGpIr)-b27HiYKW{YDd zi=GY^VSQ3M{vGooqTY*sqc_A_j$KlIM94+g2tp6Z|5ucz0&Y;fDM?!aJ zPcjdfsC4x35z z|GWbsJv&ftfjHrOGiHUXhr=s@P-#JAw!E+4i2Aa+LJQ|fKNhTa{XjCg3lu%K4u zoEK*+qCEdMaSvQZ`TlVyMNpG3=xPUQNfG3tq@+o3ydE0?AmPepK4c!- z*#_$=?kG!fiKM)+-a8tdK2AHKP#f0^2Ob-*o@4Th#W&j*=}m{xKDo;PpYmPc_;OZB zA7sfpuCEF-f;0-*vJidV{*DZp0B>#Kqc4(x^H#(L+B2+O@!s$alW?IAqOtZ8_^U}( zxlH`oQ=A{)-iQaOg{nB1QQC&c_37k$t5@$XU`j&1{Tl15A{H^8YyE>Pfc^7OuaYL< z9#`XDivjAv@`e6&7pl!k&asitSae6O`hR^jN<4%GAD9{`ow=Cp<{3%lv9-+a+?JOJ z1xc14osf ztG-|$to+129kqb`bQRADq|A&GEYLfSQ5Wl0%8a(i$_oOeTKKTZxVes``37(rNx`oGB}!PM=>BOt#V2 znOOxs&95L#)z(~3DUlyc@@(+qU3O_YNOc@u+gcs^P6cu)t_Re%QyxpcufF?SSMyx* zM720KM#KxqW-6n>dgnt|?<&X6etPyjz$EC`t%%tQ0M#5{-sRZn-&Z-;#meZmMo|)U zTvJWzuAxkQ49iySBswol8Q4QB6(nVj60$_2KPf5P@bE%DmWkS;+l7D?Txx z5iRPgyv|2tmgWol59(nn8MHMNW=ap+A1g6EXbY2Mk6>WBD`tQUd{D5aO`mCplUeY* zknhY~Ex*TuS&l;%M|EPylU!t%`@zB&@Jk9vW^ddDj|nh=088rPepr4$-MZWC$HIok z_z8+hV<#C?{3zQE_Pp;D&mKULv*kbJ2{d)bmTVxeMNr_>srv;_xtsdcsq68rQ9sUj zzp$Zdwokd^Tj@+W7Ksr|9hT{Y9x4JnVm_|BSlrw2^Dh0X9UbA5!enwcpL%%bRPUQK z#(}_Ni8g(zxpDnFdu0ApAGI6x9Tisbb@QzA!oNI`HJ^+iA~Pesi!D*5g%i9IliV0V zEC1#LHj-31AMV|+C{l#7IN$HIH7%XnO#X&6%OAA-1hi=x!V^RW?#stovJ&|zK2&;6 zGI%%U)-eNyii@d@-Sng`wU1_Pd_m!PD!8V1ed$njb0w{BZlaWdcr-Bm55;>mcH3^5 z!fCY8_T9WQFOj=95^=cVy5$G|a=CVe=i68kL`sPQ2mIWS(X@t&u+S7JiFmte>wsyi zn2*KBU%n*AA3`5JGI3RGiW{T28YzmUnN@5``V?#*u?&(D-A`pJ@l{dfO-vxL?80@i z-q)u~NPWYkMH?ZyD+#_}kVQ4V+GDuJ13v$sh(hfMh=wX}I1%Khunci#PQ4Xa$4~ zJvw``kLWSTHyzd*w+1>@&tA0*cwWzy)_VCa5AH=5gtGY~_BHw47JpPMDmWn_JQ#og zLPH;E;n1e!+9-wt-zdC!In;H2Bl$X6f#+g27OP3VhXAX=K>Z|E;JReEUzSDarf|%; zQLv^0teD0`6R&cI)lu~Cb3ksg z&DjxFncI3EOIh$EGw|YmLTvJHW+8y=;BSv`be+8~*%Z0A?&9?H>FXccGxZ~wgd-5p zRG~vf_!JBPs`tq3bWQ2n^!!tLP6LPU+>&zuQkQE4_t*O`Z@)hjC!k8K>0 z5IzH$1Hx|~!yNiTh=CSfRnuq(94iJN9WJ}cheGXREjdo#-EVhPvTeY2CYiQd_Ae`x zokwwbI8}4r9ixUNgoQ_G5h4DyBX`>NFL&cvB);x}Mpbsy7zY^|jpwS!^g-VvGwNYh zIR&q9-(ss;oA%*Y`-)NX8om6=chRaJydc39 zkqQA?x*CEsdoKrSKgK~MT266XvRC*NHj(6!|K$<%w|}{ zQBCfk<-1b{&1+H!$6M4P+*J1xq4wPh+2Z9Neyk0M1?n!F8i!B3e-};dUwYfGDlIzI zsnBAzi3kOusvzFP2A}JzyU{9wI|@8K*DHvcazhmdSg(WQo>J^>$uE-MbmfCf_wOv% zW(R)n>gq(JGs&19pvR-6Bxl>nPGl8C-!SS`s$e7fP)N~fOdD%D!iIP(6B;7$jIM=g zpvAAL!z^RR;|xtuM@qwPr}U_QyePV&XQ~0N*~@yIzY9JP#gHg*a3R=|aNcHdVc%cc zuTtawp;!R)w2+4WDSUufF z?Bj=Tt@_H28FL^DFR3k{K4*A{d!L9co=W=~D?i^Aw?vz4@jrdEtx<|k33_{iq#1oBpH9kYcqVhP$ zBxPR+-ipbh$-e2*1DonL(utlK*+IZuIl7LeCC1>vMN2+=ik5TBj5C+Ph5Jyjz@Spq#aH(n6-kB^JR8sdl zA!eFXhsyS}_J(-1?-)u+a74QO`HNkRg&(uny|&Aw1K9y=0V=!)RC>st6JN2vlC5fV6G-3E*Zk zmk6*?qC4M2k}EK(uwp=5ma$i^+v_7)q)v0U}eyWc)>!mXc(ORPv^Z4?eW9Bc7g9FMrR z{$0j^h--fz?<$VOHD8H6kh7;1(%F=AI^LeKOkhEn4kf&BXFh=dP5<|4jK2N{a#ujGN0g``=J+R-rtJTcn22NnN))3+yh_BBJsU+2XgMAt zE*$*)Bwr|ky27hVupBqyJ~Rkr7l?A-xetPwM;V0G$$Ulpe0*IBk?!OV_Z|fF8A$^? zC@n4RzoDKQu(lx4DCAm>_xf5Q1`pK7y#jqXZFn5|i;%n(ldHh1erj|TZyG~z7}QDq zt1tE61J8omOWS@QnzN$_0JJ>|jd3L3->^Ll#ivZgp!^a24%7YXwJ4{;>a#`(4#_`< zPSR-i^eOrSbU8qcn6n$ia{jDE^+P}u#Egj^@Q!*>0+^|cdNUFo^b?5>bTt1@J=bJ4 z;Q!2R!%X=Pvn@BcFxT4LbS)9Io)U;|cDwS5UDgq{J62$sjR6HPLcgbTtHJJnk317B zru!d-oq0S|egFT(@+{on`+4UnD9rt5xF<0pP^w_j#ewYmLE7{+{O<>5_36h8^CgQt!14w^^_>)R!AsB3J8sjxo7vJp4TszF<2& zb`w{5)x`v-M~6P}D_MR52KJt}7=22j=^A@txc@sZ1g42L%6DH3+NGh(z$hOB_TI#v zzFcczp@=UhA@XhSJMNA&0Ev*%8#$aXstaYAUg0E_8rVRGoEa0!o@wWANaP} zZ%U7wZ?o&?ayXB|=??R73jsI`?@poR&JL_ACW6yzQeP^BIXb#|@PP-x^`@W=KH@Gx z`}0UCCDwHBZiJbh!GVs}1{~QaG<}b(i?tKji)y1})9BjdR7hz3F%|)>{4LTcPMJIpt7N zVZO{1Ia)DSrENDiD-!P-;6L_~YldE^;O(#@`?=&7oUc2}(dRyLbgMRc-4ZvJ&i+sl zVbr$}T||65K3$oKWd1s7`$@Aw4xyBA&$mX*6hUxFl4#cibz7Zt|4L$bX?abdz0V)5 zgjesZec&FE%=tL?RAxE3*K4zoktKR7$zSKCvo~VFKE7A7vOBYbTawWx{g8HuMu-jo zp%+M3B&5>km9C{KQlwn{nxu;$i0M>PD^nBm*r3w*D(zEWWJm@q5r{fLaJvY|P?!bPsjAV` zO6jv{{cTlZ>m`&igy6M-UDpsu-2O2X8@b|Mr8L?X4VQi}YFlU{eiz=_@}9->IL5RG z?`*^2rWyWi8Mh@0krq8KpA3gcJ0QUoWHNE|^wOdh!qI32;kv0IUb+lGZpJSOlaZAq~Fsq5BiFPNEKE^Y6 zY^abrl*FlKUyWM{wPiK}&E-ZErN(DSSe!P)wN%uV$hy+V>WwKsPMYimbS5_sst`tB z&xv7zWna<_4&uyd;J->$J=Yk!b173(f0Ks-G5slrrdwCyl@QU?d+vAg(2nW{x4C8@ z)=l4-lVKcQ3()3(YILfn=Vh`N1beE7g_rTNf_mQWtH>vVXpj`0y@b%fu=ZN%(ng`!Q;v-t-_>CUK*rgaNsY8H?T2j|7*|_A`%V!R2&zi&_`+u= z{7DUr8W`A8&v{S;cCjT@?(|-b z{&|jLfWn5v)VKcw!iF&50dp^lCA8@2+>tAh76Z03_y?NV&ULf+90v5DK&uVK%PSR1 z#tkt;^2G6?vvvnft3sTY2R6tJq^91!axAz+UhLVNq`v+>W;VF$1-#(S9-kpmxQF_l zy8dHZJVMVm2?<}TY^q5choFLb!)F)($x~8?iE(CY8Ib_0S?8$?{7HF6>`A0tMVwxr zTnV|WtQl;1(^rLvmieUWnYShASB=v*l^N&-8JV-MN)Dmxn$6fd?uPeF2hT@)Kb>kl z$1dRV(BD)D5_N#H67&;P9Sli9XSpXu?k@y@GRxE9*+kmK;D=eyPKGW$Ir**`Q15tH z4f36mxh;UyJY^1ZuwxbFI_acWriB$4Q~m<8Eo%Pk$CGh7Bjm~(!}BkS+X7E(o6{(S zMIS^rR&cTHn|({}oW8vz*>cfP{@BJ#w9{6HPq@d=s9pzc4aSfs0USFc;LekmM|>823lA4-iw>AW|&& zUb{W8*YvXGX^x7j}BqGpuPS(%%zP^2Qz&{9hld_9vwSdp8(o3(KU&~+IS;)@e zhh8HEz>M(-n@1HnhiWVHrfllg{8DjJpgA=wwSn*|f36d~O)n{73_GPosUUYy^Ht#| ztj2f61;$;K24~C39OefI-)MeMRHq*7h0wVT^Q(&UdcW>B1?KIqv@{?0xKH~|Cth(l z9cm~bJRq(X{nY~>ACs-bdkyMRK|K=h^Mu_@eIZ=Uj24!%YV|Dk=O38suv3c{5nAA> znMuVoGs}ow6{ZL#Ww569R1ed7e7RH|(}?@_d6Tl=DAbmryheaQ#Vai`ic| z<3=#a2SNGn$;5rgvOg8t`w_4eM?Jv=X-cJk6O=AMFHByUduYtU8yMnVyt9x|Nnl0i zGsq+byeq+~{zpEaR?}A5usAUwGzuH=KoKxdCSgFo{HT8eJt*())0uS^2Vk$@gSVBk z!-%+8TymU$L0!V3F+=Co&?U!{nHy)fo1eEaLf(_c{U}fKhl4G z4$QWt^AXux&e9{yJ#n-}Cp)y+T4t94HhOP7cgLU76aZ@!48Bh%auJ3y&n9k#f(P#iBl_s?rpMF_>MxR5e(w}f zwIKw`3g~yakdT}*X6!7f83wz z0>RURiF63$3LF6;{S;S|F8p*WjDe5+y(tKgQayYp)O6^S({Dcl{WCMJ)Ch<~%U~ze z{$8(2G+aIpMA2>wE6b(u0?06S(709h5n@Z(Js-|my67qHJdu3+6(xJg+ruU;45v|F zW)DM+AuAi3@F*%{!*i`5Me!saoA0~+}X3RavAbHf4TQH9gF=PLZ@dfd@E!_a>^xcK}T&P2u<#IbG71 z0H@woRVX;8hO{L{(`PP+Ib)rg$fuzc!s9$0*_x zllE5zBTv4##g=DsV7k1%rz7db14WTdd0*_|Tp?Scy7kx-Fpx6&JiY_AjZdJY^pZ(B z_y!TXwY=oZqO*;vo{+=_(n!}bJLq!hBMANt*I9L<^7NpLae4bUT<73eaNT`2s#C znxA79NrX&@R=jEN6(}3+Xpzpik2OuG_VJ3X^e$1?I3g(p9t5J_D9=u;lrJh6~A$9tE_|Zcn4=u#Az4>4fhkZ zXgoE-sq~Y?#MFhyfK-M=_@0hXzQcr3Pi6Y$9JK%VuX}VyVgO)X)O*j>DBA%9jOw?@ z1hE?_x64vD!Cc-owrCBl&B=7`6Mi(;)ZDO}fC=@zuhl}gidvR`Sg}cxF+kX6C%qZ8 zeBO3|z~%li4pu?8OT8k1eWW#x?-IB$l*1IF+(BSveiuP-GjK;Vi{cp{5v|F4!QQZA z`}10{K#vOA5}TvxxfK?50=eZFRN@}CO4s%PuLa|xs6OaSRr49iUb5(&?8smu;LQw5 zRt3IK@{I$#xpeCmZ_mk^V4s~Ui{o`rBZd$=^;f4nD|PZvmZfNclC&2zYI=#SkU@A+ZT# zcj&^_)<;!;eqqPy#$di_&md_rZk9oN!8dzZd+F8e^%vyfyTlO_uZn@@bPhYn#YiuCk!#&lXZ4! zVgnN1?-eaxu5lGKsHOUKc5mUAL|rNG08=HE8!A|x95%JS{muxy*a3xN%dyJ%B4SGB zrYGH2>>;P^oLAByOi*~TO`e8eVaa&EP9k7 zygLk0Xf8E+6hi;FxxR>10{3RwmYuBuPl}OEpo%D@)>A1`L$2w3a+RhD zo;FK_0L!6*kY({OM=PDC=n3Fkb^-k{XrGvHW_SXAW>>0G&_y*|RtHT*Vk*QL0&~)X z%U#EKk-*d*dz$J2b|I2VNCY6Y8Y02{h1!##E8yX~s1Y(i`dtsEW6=RV(Qyl754 zqTHuW0zZ%tj8W-RydU75Km8~jb%rT~lma1<5F|i~FjUa0iSVmXvg{`Tw#tf5W}yk$ z`Dy-&+eJr&n(gc*R^eEC7lK>I1v6vU>5lnRLqP}~w>H^%l}=OhJ}Di5g$~=*bXJgUDfI7q-a6#)&vFN*1+Ll$ zsxvVW_KpOd@J=Ggmx}IQN*Rvr+mR_bZ(~O=ToZ_v=3#eps@yWn}X>!)8#cNHrzPZfsRj&=pgm3Q+G4eR&2v* zt~#+jXe1pY#u?1+O*65LWk!SsvLIhY#oCLjG&``J<(wIY6@B1OR0HikXzyY~5`k{# z?eq&5-Xqm!P$J*66zxFq+Kf%c3;6gc-fpaVrC48;v4)@yIO={(ZJXkloVK^sBCuQTt-BG6%3t)esxsk+EN4ROTVtpkn^)Z;uKS)4qyH)Z9i0+1Pq^m-x^6;% zNKrCP9FEX2XR+A4YO3TI6)E&Hmh_K-*S5BvmQJ;bYsjrFan=lnx0e)Yd<_N|E5NXt z#UU@c2LfmC0zjgIB6{OviA+`lPLm{J1E1Ck%*J}c)j>QoQ4OXtpx3xKf&g8?0y3^f(=NDkCq8GfFp-_Db^p5{KFKVNAul$_L#QeXG zl)ol1-uwX^i%N4qQ>uMIV+Ivp)RyfW1VCeoX_2f#XMq2t+(!Q)Ze{WShRIu#{^k4j zJG2M+p)U~Iv=tkKssNywmbMy4VM0QJsQr>=%+rZkM5!ZqnqctMLFl@;FY?b_V zm7Z=%)cjw>&p?538#M<#7}c-=4!G}CD!#7L#xOvZ4n5tlo?>cxVx;eb?u%9IP_A5C zp%i!1$p)mS+EXgJy%r#%QWjt|1%?)>M|3nK$UY}OCj)X<(=9f|I9dEau~MR0P`Yko z2Q!Ok=OHX`fSHNQzFsw3mQ!LS7WTHmpHkO3nS1J|4$l@qtQ?jHQQZ$;Eh%Ch@6~|& zCC=)yT2gZi=SaZrj;cc|aORzKXF+Hc5U5DH_gv@Y+4>9YH$eBYKYw_kDkL z4v(gLFF7(0J9goh3oHr6E$Ds#R>cux27H2ouMrEvT-yT6>m9bY6vBFB6Y-N((<(VL z_i((@r0N|Ze-62I=D-u2XQTUdO17ajavh0a3rqwa_b)|-8z@v7I^3}!X`+zdcB&qj zRpArVb4~MKdlfH1!gBF% zXK64R$(29XXmWi?6IUs?_yS>fXUIMOxwdAb>^*m$+ zD4(i{``mcEvB{ct>;J1=g2c370OFJJqeyIg6Cl(yzpum7LRMO?=q1#@Wre*+ov9T_ zgfB$vWyQH6Ws^g|qjI^bRyIIP=~^@hjFy&`6a+@Lmg$gx2i|;MP|@tyH~TDC><{K> z|DbajYO~do-|TGd`cOT~QWQ;xxhk76;fjoE(ZRmv5-&~ioInKw)xg#h#Fc0eV56N@ zj{G5@U--l~RaZRG`Nm2F7`brY6FtD(sZgBWk}4BE_P z-$ba=gf*q9y8q~(jOqq(kpHFs0k!Y-;hK9q6Q~+jG4gM)7HFdC==`nFToEf3ALbfi zAaghQPeS)|Vw=4{nH&Sc-=mp2aAUdcrU%ZoY}HJK%T}gb_W~2R7a)|e!z$`i{Ap5t z`Q#-HGlnsWz>f8*HHr8$dn$XrgtJK5(6DFwO%?h+MBX~xN;R&Q#$kVaXMkuKd73Y1 z{eg*^-L(lA0=;JI?p||Q%#C4VXY%f<=&H-k94xpP%|$_m@zqN-{f^rI3Y%%f3qO}$ zN0kWA3in)4sCrtX&T`Bk^W62Kr8a*aP+mNGST9t;L1qbhM$V&E?l|uzwuGJ3*ctcD zt9EE5n=~Hd3u4P3w`x0u#Y=S&{;Zy#sJ$&Eo`u{^p@RQj38>`tQxqeFq-;2`w^6QlO$L?%kpjmf;Hm@hBV=0gVTP(AwhBrH7?l@@d z_NZJ5)q77|z>^WbMl_uvFN*hNM4-718Fdj!HUchzoVwLk9zpo!LdGx18`q#O0Ry+d zZ94Wyat$-z4f^YQ#t`+@)3)L(<{6YmjkLi9o;;<#aJ;9*-qWwwB$8e`ALF|(E}Oix z8a&s+choxCs)rrt2L(rI5;~{p;GBjia;S9qXWSA<&#rHpK_v{XTG}flQK0BPyFGx? z@E;XO|Bp_@;4`QfUB1WNc67Z!O`Sm)kWP-md{6|C@)mu5A)+=P(v&$bq8g&Q>cP>V zsOHa+gWrOS-!mA$OQT0Dn?I_KN4EiV8h>pA0BHd&D)|3nqWmxQ$gk`gd zZatQ6IDh$T$-M-ZsfIbRN*pLWwwnIqEh&I>TpMUeRIJ3~Kx2XxMd>fxW~2}ZE!hH$!06M-d%9%yUx*^6e{ zV>f_y9Tfk-QyT#8i@)cnE+TF^E+vx$R+1plcAEe|IaG{o@-P59*fQ8ilrds%nw73j zzU}yeKO}k}E1kdQR^byZ;2HXWwCXz zev6^1o%z@QX|8ZBAn?n^_zzOCwfX~t($#fR*X_}k>#M@WW@Gtb7OhZL{P&t^1JuR) zKZBG%DaF5En1B8VXeQ`?KH^QVH{1=B2J+w0I1J7`E6!J-s`7OHG4OXsN>MUbLf`ZM E0qBa(rvLx| literal 415226 zcmagFWmr_<8a1qff|L@{-3>#BfVAKMQi7x~ARyf!B_KUR$AE;?P}1E}LrHgchm>@@ z8$IWI_2c8Z_%XwtJ?!U>XRURwC*-ZNJT?X?#)AhBuoYg*s6BY_B>uqzlsoh%4<0;h z{5~KA{NbUan!MD5qJHu%;03Cgq>|)=2c;31*G7+l*H7(Uzju7_fC%^g_hAp?vBZN1 zci9Ruk{WIXyN!?C$ZPBPJUPA2X77GF{3KR~C#DGfsyAB4<^_JN;faaDQzmV{e%ZtG zyyHHaL@@cEPEv~IzkHE5wrx`@Z>#l&qw(@vV4&QuMF~FsmFIJq1_lO$*Hv&%eUY%O zD(&yD9)@j!Bvn)f&}TBHZ;Kc2@ULxK?g*To!3l>`-j{r6v5lvsq$K>UU_wHHJZT#U zF@c{a{9ei%Zn^_WQSwAhRT;NZHD9q7evDBzpKOvyav`OcR#9p5dOjxLyQt!KhnJ;V z8zh-XDDGJ7$irT@`cM&PizwbEin5uS+AFDKkA2EPcJ{Y%eyH>AB0Q;ivO45) zr?}Z1F{0N#-%1lI?}qf zlLZ1PJEY}SWus!EBVJ@F9#(Rl&b&qVyy|Cp6~FcB9WLSC=<{aI&#(&V2Lpy`>8rGh z)ni|(<&6ox-D0IaKN25EwhgAHS_amsup9z zkOmqDsulMR&`WvB7SCnRmJ8|Ci=*{^|Lc|~{@n>$Ujw9`x7KvU$P<&T%o3&W@gr0- z<%}jvjEIFDOuk;N{Qk|=*5Z%WHZZ`|Do)yWx;K+8X|GEXQ(Y~1dwbTLsTjwKdlbW_ zRn#6KaU1;OeRit#G^snHYJd?!`w9rSpjU)`+i=RSU=wqQ?@TFeWXKY#v=K|c<|*|TSi zn>;Vr5uHzDD+}4QCAoGJWiHM+Wc3GsO)Rz@`@8? zjoe5q-rI4at&s}pIzHU99F?>uQ^N?kqUc`{iN<&BsLKssH-06kBY@It0OxYK!W zS~GAYa8x=dwQ*=aqK|pdf;LHu4OX!=OlMt0d(f};qC1*UdPEXGlGjWbI{A_$4x?JC ze?f=FG4SL-DTRt9nz3zloCH*FrWA|S|HX-fm)3eo@pWngv09E|NPM=}V1WsD;25?P zPt?crZ+w}Gs@9dDDLOXm4T^vD9eSFG-&HwfWC$OkCIFjm5q z%YypU>OTH@t1(k!1fH9?lmEI0&tiaFc8pN1xKa@o>q)v@EaU7qqDZB^l+3@@jBMw6 z;99)fQZLALxWAQ#t{6pXNre5AOQKq?Z#6Hnz*~iV!A&Ze>AC#+>Gk&Pco$N@C@G#s z`U$&s$txrWiTaqa#etpcn``mUM2}=@rP9P@J2iKfs1}2=tsS~v7N@01-$*qsE$#T{ zs2F~~9F4*4SGC<_M@4kvpC-@2BYnClpgI_Z>66rX6m;ziOF~Fs@ypm92F4 zfv{=|gX(P0pON%b{Cq%id+lhkh?Gj6lECj(7XO;&L%lurgZ9*YrR&XitG)|2Z+prz z#OpAA{{rKS4ze2mtJj-LWG*)H=G}0I_}qZyHUV@9M(m4L!$>g^mf){@c4<0t`n(7A^PwOM7Nwx-0hx|{WfRJK%EXJ@`? z-NK>tN9}WAylYL1{V`DmIV?lJt;gY zDkHGc+tR$22j%_EfvBk=QQ}!-0)htw%>jbZA*X@W5r&h0mRV&hVPrj{mc0wKR-N>8 zS4l)8&>l+z93S!TSkG8=!G_s6E+u2St{Nn^8~-qU zuFXQ{98TN(%MmNF-f=iffpBCF#{2PC37m3*CBM*v3?F+_W`U=s-m&Si|7G1bp}eUo zwl0fD_78QdZTOM1MB9QIP?hIn<6f{WmyLsOHa6gxQ+?^K@BHYBmu!UkK7oXg@fEuT zcKA%=bMNy!EIVtOhMONgG4_G`pTI<127E{?J6DKW^TMpKW9u>od0ht!QF{`$u8BEj znuL!W0-RXldErodvzv*N*He2V;yNkwM zxCxT9L{?bO2te4$XHHXoUhc`;skcW^@M-MJcM3j8Gg#bBVRM+#e2Y9e-P08o9!dfg z>er7G^DdSzCOKP{dan@fig{4EMv$IKG_v~Z=Cs~%cIHPx-ZrPPq`}x>^{&5{`%^@_ z;GoQ3uAX-IyVJGmNDIvJ@aBgG^8!}izGUJM9A#ld;Ge~7{fz1xDLwgR37&2yn=yEB zWlPF#qgOD`bA4hjCO#|X8$wq6L2^p1#>YG!>{C(lw4XgGM4HaBcMtD^XE_Es6_{JK zZwp576|RD0wb(|c=0r=D7EM>)t>W(WIPE>){B3A98!Yn6=Z)IZihRMaF|J{gXG?ns zeyP)z8bondT0{3tfYJ3k1H@R?1udyH8uVU-5n+L$E`4cdp9bRhex;#n4L;2krPd3h zlMi3)j$t|s&zSxMDU-Jb7X=6)hy$|~DRf7Xt2*Y8P$Rh3X4Ri)naOa4x^JM;voO!& zbr`7Qfh#Ygrn2Mx1toX|3R+Mf@kHt$4g-dzPa7G*$U*zIwbSJ>vPhN?qUnKI--qSn zJ$%kT*vxz320nIKBcqkUP*CGlJI*1z!yoM#eP23^B`_VUlft|Y-cu+NRLevs?k@ae zb*w<^C^Mtg7X|HLsSR!A-Ds)z&FAi!YC3O^(vRRj0{X~{K|!J8$q$|=Pq2P2cZ8Kf zI&o@m_UA-N#63>IF2eN~`N`{pNP@N!jXX$LRV>Q@6&e&IZOYeib9Dv-EzUQ3AhkzJ zEk+m>yf^s*I85_P#T&vdM{?}=P4(igfQxGER|28+kAT~73o?qEpC5$m{N2y^9V&#n zjo9|Tb`h&v{Zxfy;C7+~e=2}=lTLA_XE<$-cDvQL+8?j?X=m~xO}5VA83K%gdKZn7ZgqHJqjmDg+_%~!*JYd{2`_)AmD8`;Lm~B-AW8{uXr_FG zq9MA|RIgV@7*Rs{mV0t`J{C49ANPDwvHfAUE`)vkd(R(^hIOyH^6diOh1pmI&Rur< z$A53xBknFyrZOEtPOD*2s8iV*%c9P0)QWn3e*RjX&gq~qn~c&DKD8Z%z$HzFuA5s=@QIch!kMR5hRI z_7IT0T^mOJeTyuHKfmXB0&J@%j?L|GSr$GZcB(93F^no3Mi@6U^z=Werky_vQqm-; z;E~1oUs!7)N%=fL9+GPa|IH#JojebyqW{*;Fk~EgVr0Rhmi6`pPG1Mmj0_u3{;F{J=C8t}lFAMX z3Ew5+(E0ki=?Z7A&N&9sKbhG{CSkYu>UziU4ny>Q^=OL7)O%VwBRvN}ZYQ_Ba6I0( zYkWcF$o7^pB2K-?K&P8aXN%XfO`red)2}3O$@!Y_*|zDwR$`x_5{#Ftij{Cto{s;)^ZN+}rtJApU=Y{e1=;<@E*BSD{NV!DN#wIV_HN0N zJ*iEO8~sN8$-=}UPPv|sKZvda9q9b5`3|->x=79_$tKKVI4eqjHU3msQIq5c=|~sNX4z8OrpV{e+4UIvyW5*#&BI_^IulZ~ z+9SQ)t;|w<1h1WN;WzcU6kpbaOk~BK8nawDIg5hR*08L&9Y8mjauRY~kiQanRSVv6 zOz~cHQu%c8ohlzm5|EOHia2j~@jcFdpjq&)(kXOlGZQNJ^l-P@}39RiNiUu9m@*f_;- z{=ahura*#+9e^}Zu&-G-ffTu4^$$r2Q(>AJI;(6NszT7FF#$E|-+R__L2;y|R4}tt9vc!ujPgK$tC2#MD6rNS z4>eFc?*9>9q|DnWbM6L2Ee%L{xNDc=jXGb75o){TMe`2OP_D>EPW3$o&wg^eygFcz zGF5?drzhj|3+4QX>A|#o_3Fzmr&-b#sQ<0z6HDZ%=Po(cEX6I~OYiHNAIzv8$D8(X zEA!LUwp@+m_Eb5gT)I_Ymzj<37`l|q)63YD8xMyt)(=c&YBhd#{*@|5c60eBM(lIX&-H<{h>d}?OrS6w zX7KJ4_6G>p(>#eZI}OsCfTy}X6Ieda=0ro6WZVdO6o~P$`1egvC{h;U z!t`&4)-(kmfpD%v5*;gYwf}#a`k#2+BOv#V{$yY4^k9o2V7~#@yn265wfr5&%DZ1c z15|~u3b_@VfTe-kuOm-3hv;5#=DWCEtDV^ag*+7 zSsVQBXoeW^yHRdBmw3A_d{H)`wkcKMaoc9$%b0)Z8OF&UwB=rKKNf8oxdC}`FuyZ6l`F{0qa za$3%oy%dgIduJ+mLq>ab27HM$nL1XR+FG~;PyzpG@)e*CZg$OmI3gb_9vV_?UMdUZ z0knJg5G4Emx3g>WA{5#B>D-=&sQikfM@4Ul( zAwf82BP7f%p5*27MCSKc699=#ct`*Vk_kfdrj82Gw>`MoVR7*^Es=5^^Ywr<_Wo4d zogH!yZam!0hgA=WQawZX^Bp?0AfW~S>Y$AF<$ja`X*A2zciU_O z)b8&G8(QU=DnYeOGWS#x_5*!A(Bu<%j7U%V&&9-`W3N|jitrl&;Rr>|%NwHofDU~H zYw-Tlzu}1A?fXK#@>OEwWD}7GnydFXV}o24SD_uG`CTw3$Ia;8)&+~VbwWBrENiaG zg|0T~ikcse?~3_4U#Toj_HAs6S&@e?c$2gUC1(pTo_+mGjG9tIhCX-lC)e5wvcq0j zobAt*u_e#dCa)=0*PO)33)TX%Y*?~yw`3MT`{VreYafZCB@f5NZCw;by=WP?G_V>X zfh>O+r;!ePedl#uUu!2|HsHW*Q)=7+t<6B2hR+Vd0j(f-QJD_+#3KPcZmzfYP4ttF zNDD+*a$-1vVBbn^YhKTXJe1{(x2cmEtO<0;EX4O>?NTY_2ragj<0bsL`)>P}NcB*R z08qpgCVvlDgMWZjO@-OMjOc7$`G&tEx8KbeEO1wFnn6zL#}@FTV%qkaBqwP+>ZL-t z(Q!r=Cj8u?i}BSJZKsT4=Ke6}Ofv1CTQv>8N6*&(&{Hx$qsUuT%HY_$m!yOnx}X#d z$8KZ%zhn-;hCfI~)-X3#BkFf6+|KaM_o^3GUx%fNdGuH-Kcd&i)-1AZfyb5(+JSF2 z09i88;VPT)rB2(QxD>lP#goSQ(0gdr9*!aquW%p0e5|Ti3sEu<2uqXG49aqqbu;O@ z5@OFrODlRYKzZMeb3uo{GfM~GjuxckwQ$?)pN3uhpvkFDz}l_gePlQ%X=k)Drb zf5XqEp`on~$?$U+Ll3uI&6v(_ohZ`R4Rk_uzu=l=BYkn-;s7RQ{}vWY``$l~=1_Bx zR2gdRr)!omK=hAR^Ad8j<+AW{d#}%y@R4?Ij}@$SnTgkG3!8%_t`ATEKFDN7Z=6!ED2sDAmRzR?Pu)z;3wPJ`im!4TIwv11l$%Xuo^-3SzwMR4;b1qMJIBdNUY2 zDZFHr^OX(QP5;5AIuzQ!7=R8b6Q^4267IwaZ+ddHL`wGGO$TVK0{Z4(4n2JMY&ys_ zYM0AFELvSz7X>r7zO{pN{%Q8T57skT^G-Fb{_^&FP|gpTcF79>5#lJ9WwLQJIV8Vy zSG!bSVZ)TCD)Cz#NHhHWMyH~S+xkliTfbBsn>bmF#hG9mx|;``onPSVM{-mCCpn(3fS7hiAPpCBTQ%HSz^WDE^*~IW z>`adzRM?E+He-vkk7Pdj+f+pQPTJy_%(y>A_-N}Op(KYBhCWLG#w`m9f6`$cF1dnj z%8>WIoKdIRhNHf}{9_-f%a40L;QC4ihfjH!Je)M2&}Tp`=O4f)pUHHyeq-N%9A9$fd(@ydxLKHm z4x+~rO}Ef7oUQy3T1%NRy^Vuz>C_JQ-u*}%pmcqE^&6>u(nmu( zf%dN%$OBr#;t!C$!>S*?YnuqQki_mNOB-o5xmtUXC+Qu)?;|;M1!kLl4EKAZ=+Jmf zd+38ql#=)q5W*;0q%kZ)pW6~m-#{?_awq$13gHhwzo5s7)sYxNLy*y*PHc9Y2tR>K zn=k^|aP^U^MSl~;qBE*!@R!-eDyB4UuuZ4OV22#Z^MT5kUM37JpbBKd9M5o@FfUszfei9^QDrjnFSJF#SBxDTs$C0%* zaW?rd00(<%>Uk1+IF0@VHe=R|mKA1TpSios#+$vFYV9V^+Uq7B>uEknzNJwwJeGz< z$Ds>PeY7VF#sWQs=H0dE=9UR~=3=HK*j=KLb&*F9>BqGvff7lh@+`|n&K78Q+HbTy z*F!oKZDCr5Eyi`3qsV`sWvK$zlcM>L6b_RbQls{rnAP<$JE8S#7{Xc<(sDW1^{ttj zQ~WWG!RKI}HMW%`?yQ!T9HYzOKg1wY&bm{o@Xty*v?_Mq;N)s@rr%AsJ#N29EFjCw z0bI5+?Te7>(Ku1J!$V&270h|D+JGD?311IOLEEp8&hVw#6f_>gxr;OV-@CXCUQQHg zlL2 zPG$ZzWbz>hnEuuFKX2LE(Thv*{~+8OZ$EN8oyh@I$0QFU&aS8PiA# zQ;dUC^e`sH*w>#~*IrEkGdv?8KZXTSwceX0xB9nk>dc>aWsa zJ^&Z@x}d$7>iPMwayGjFU>5f9K{Hil{^Ve>aEvzzoN@j#VT2r?!1fdsAPWdarWlZ- zfFeIpWC$QhyQwl$hj#v;XMm>sP8kpD=~Kyim%YIp6{@Y<-WP+&RRnT%W9>4r;*{7B z%2M^50@;pxPA*JI(#hgn*WWRVPkRI+K#}8!vG`LL(bn|B-_&zBzL&W1lAH7t?mym^ z5E@IAt5%9P&Z*CQHUoeFKp!UY!(8bPJ7We}NoptQ=+EH}+ooRd@OT!2=Bi|@!K(gj zFoiz-3>tep>Kuby7GiP_i-BTF(C0P=C*4ZYLPbIOQ{%=Gk5?ZFthn(UFB77#EKdc5 zYH2Vgs4$A-R~D&=>60ITL-!pgZ`-_trTX+9$w_pKCb?4{qDHBIai-=QOJgrZjU8ei zEr(1*sp{9{YixqQ^SY z7mE-6Cqh-2f+Hx!LixSfkXaf*#k*C|ueTG45g2ln%U@O|zx>5yAaQ2=`sM^-!s@pqI9D{^Het9|U;u(XRxokkw1V0&i)RDYv$U9RaCc~+ z2-=SX=lDPW%W!;0<~Y(@XCRVa_W=1AFW3D+g&KWOP6|lVNm>2 z6<1F>-{uMXbD*yaDEYAh!kXwOs(_7-QaZ ztdV0^s>9tq`Gza=yEX*dJ=u{Lr9PjQTX`#IjD14+M%Flj>Nv@VCz$2GTs?RPsbSss zm~Y16F$vSYAVNk4P*T?}Hk+l4W^3$`+N*zW0_#5UXK$vlH_j5){`lupjsa$&(P&^8 zb3!IYu45+^isdxH&&Ih-EKz+xtgQsyYgzX5@Nt94Cvo0>E$|u_4*38(Nt8ET$-?D& zH?+3%4K=R6Q=Mc;NdBQpT66MkfA*D6x+FN#BjFfz4q+VsNZ!n?=<7HJ`F|wMe(wG` z0oe};my(vIt4Jf(YIMo^LvkJMTp=;WruD`~7D3Ob;=Su? zKY#8Fr&wB9@dwCYmt-NLQ!XH%r`;4{Y#PRq4?tTI2<>?x6xli9yk^mwU13WJ_%<3QspYud3$4J(V#X%~U=?aUrSZ6KKbb$I&z(S5AXY~_Ze$R8D zQGIKB4^dkblFxp{_l`9>vy;`0sn`4;gaHBuY#*1gi)vBHN&Ow;lh4=rz5pYb9$Wf$ zKuKQ}%mL(xUW}hbUS>X?Z{DssjKakYS^WkQ-Yg%(;D^JR04)#iB8{p4pNd@162o8f zjpx1pe>u@8l0Xb#%A9HWfi@kcq4#8&MRWQmfVCv8!9yqjr{^LVtE&1S+>-2P;J0rC zeso87p84TZORHZTY60f>=%|zQ`12pE+B)1}--8wx9?!MHZ*>nA{2uyEJ;r=WNW`9= zw-snI$4(2^;*MM7^1EX@r}8Vs(cv?V4mctLv%uxlM_}F6xzv*R!xE2K&}|;-@L@{l zWl7yocTI>ZDY>q@`rSP@;qBlsI3zHC%RcDyw9GCkXb*SgYI(k#UwV5Sa=h2OiG zMy@{GX1!Y_=N+*&1+VocBy|2TXcTGnR!i9dglrxSWV_=~aYLnL2P&B}F?H?76@ec! z4f>=S%Q8<7^#fY4WyX}ax_*P7qRv5>qiR76mX3riVGkk1R-3{%bJ7;~{_r|z zVi3$Mq?>n+Gna3Z9K{v}#(Fm$)%f+1wscOAQ7XKl?i8Z72=ZVSbrkj1_k8+7%K&Bv z>r&HXCmpGE+%WN++h@=gXyA`$Pl;%7eqy{6ovvMGQ9dhJYsoRX%k$Lz2sP88Go*`( z9I8b2kybrEqbo9x&ta{f<9Mwr5sjuf;?)rNeTkaEoaQe%e% z9_>bVmZJaynHao)QpY`+>-oKBV1s7;^$;Aw-^~K-Mf<*mJ$(#sm8#=F_Mb2&7}k42 z5myS%;xAYsp8$fY=N)Iy+4Ykfp|C<@0Up`lN;r&u@o6P3V8-c%W;Of+j-*73&(otA z<=xg<_{$4_w@|9}jo(X4n&<%tg8+GBuGsgdxFJ3Y!OM;YG-tU9UGV1TN18TY%6bh$ zR$eZ$g!h#{XBN46>RDDP9WVL&!16Bd^@yhgM%50<5@{3znQ$ zuyfSq?LXAQ6}DggdP4dQ80Mj$1+7lE0mIjLds8r9=xTQir1k4l+@t7wKa$F_QMaj2 zO(8U-)BEn`%%RYD>6q=FSsIxN~;A(0YRmt!^$V@jjH19IEq%vXFx2dTq ziIX;`N?Wm7wvMqRc3=5ge*RKgb}Soos5#&T?XDl6EM6ziT#* zrkHw=+>VS_6BAC!cU^_BZpJB+pM%#(Q>C~^kCC(T2VcXwVl7_`BNRDDMo8E`jZ;oU z(x{L`?FXq96w~U5Qk$GyJS5>Udv#fn7nNzpW1{r!Niz=I&l7u_E~UG+yE2T?cq?n3 zxY-nk)OG92x~v18dORz$S|wLcC3(PTo?5_KUn(2%Jc%M*wh!KFm-;hV%n6xPtF5;) z5)Zm#8032lJ-)vR8)6bNsq4dA4ZDFsdo}IhV%Z;hd4E;EBJEzBK z{mJ9&cDs$;Kj-x|nMU9Ku7fO5!id(k!R;6?ZC*UcESmcI9D@6@uHli-y!X*qt##C! z@!iQ%Iw?}Gkwlws4z1fHJSPWFTg%N<>^v;hHBMEaf%t?=%DGF^ZCX_LMh{ZMZv1Dk z+6YKmM5BIa^74H-bJ976!#f z5-g?>JZ58x|CO{LkGNnul{{m~8LY6!j?H~fw88mX3YNcyORyPXfbC#pR-lnPUWVDT zI^aj`qe6f5+D}#~zY9XY{Siv|2{*rt~L zPKD=wNo~}q$|C_|=@JD|?%D+X{7QL#7?g2vc15vu(`dTJFVW0@L>9g!P;Wv4Fx{6@ zb<44ZZw?NY`3}!=zE)R1GnkzTQfFERSoCY-w|N51PpD;ie9kW!I;Tv%N(yWVHOy;S zcFE@@J4`1%J0U0EN)0ReJaMV3h|-$F>2fAWkIv7jRWs&m>`Nq$OtAfmCzUt1!VHe9 z(l_C42e|HC)DjY_9MdS7--uoXj{0_KHh>7znlKjHo4@LF6{)esAflcOsAL~~@tiDQ#J3302LKA!(!#q{Pv3e z9PJ$9SU_&Bx60%MFwaiG_xnqsSp0e@f5>dKo5k6c?XDrw^nqg|wv^NK((=!n*f-E1 z=4A54%>qcP#W78G{U$s&Bkk^Xf=*=#Ze){OG6?bT<_fa*osh@IU7#4sZCaZY5xQy>uSTd5GT>yKbPNN8)iAs2ERJ*Wo1JRmp|Jn4wayD9mu!>~JVRKs-5@rhrb zZKXy)K6&;z!;|=v$Mbuw!n3cAl>--s@n+}YuboF;D6zSNhw$G0&^CfjA?KaZV5O4} zCn6nCRVY)rkr~g{n;A&ngOi0+hxMN`LAxo;af-Aza4OI^>ppJPz_WDDm0Df|u7(42 zmYQD=^Eg|38Kn{={2F_rRm~I%-u|MENrbp zgJeZyZW=zC#rAGp8QW`V$rMhuia+}VCSNRjaf%P}a5Cd#iy{me)_S$kL&9zU$`SQ3 zstmm1h2}I5;#r#BWb+>NGT>%n%gOE`p2&;qmei5%;NOUX9C@$26Ow}x(|EO(3RZD5+v>Nbp3miztsU0{3qVtmJzVaHV%22b+DK}8J~`=g zb6I(9pUZ4jpX(?Sc;dSk9`~+!y_RVi3M%bnpUJv0Ldu{Wl2@rfdLn83ostc!tlmSZ zBq(E;ROEVMSxkS&ipZO627^k2epMuZmjLTgjq}bs?Uhs`V2W${G9O5u)In=Tve6y_ z{#+g%)*OHld=+5au^Wd2euS^Utg|bRSTkQEs<+~Rd446-6|^%V3 z7_qd?jDMO6wVElL)vNx<*zVD_ciT1N*eY?!+>%V=a{#1ek&bj=!IH!K6_pQ``gZ!iYu z!(`S7PDz63GeF3o>TzF(qt*bd?@2_62B#*Eq&uRhdN=8%lmP` z@x9t80_6e{aMFEm2p5uHu}WX2B4IomN&-|b(z@2qhhN(oc=b1T0b_@3#vREk9`tv4WKZd)#x;G zlV3eOXv8zDp76uH7V^Il4hAK<_!%ht^<$+?oGt(Saq*?;IqACj_=zaE*Vy2~I)TSybA@ zb^2CIltby&zU-*NZQjo8*-(LH%BCTC>uFtjy3F>2Ockw@(o^PQn4w*@800zhnLOnk zc0_-%?9#QY-NE{2r$i6(Z-LHId3e7v0o489YTOD2;a*d}p-V3vd|jg$C=4ipa%V@` z_AetJpXj(gCQ7J?K9s7}fh_yh|7_e75^v^Mcj`l-D%R6>?cjbHQXHKZ%@B9UJK(EB zqMq({<^6g&0gJclm(*S=W=X}8?dy2H#9#Pk(7Xv>U1GOY$$O1P0Ff&hH>4&^!Ou9h zrX(GDK(Y0wyTtY_A3d_LvKTznq$9aoxBinX-rQZoYd-lwvKl%No1w`x92tvs;v*JUGpV5XxU^uaQ!5(hC5gDKP2VkE~7IuV! zHgHKGI=2%PtFAzql#(=D!j45_BO+8{o8*O!!3=VoEptRm z;)mO#d2}8plMDkw6smZhVk9r!O31$hzHNQscrJQ+RA4TW&}e*r>f(Z25@;Sh;g*}F z!p(rv*M!63uaNq(_6PI_yziS}g8$cNlrMuVMiAZB%Yay5v{ax~Y%*otsFru%xdAuP z;BP=*#b`&PkLx}e>rYzxw$iera&W+NQc_0>xN!V0`MEy5HLcK4HiLB&kbgW`oi}8B zV^@cE-*W0n@n5u2^qS(__jqV1sFv;i-FN?qP9>;=nw>;_931$9#W)n`9>GS^uu{0R z2{dnUv5~lP=<+OK^UHmsNFu}cO73(#^0_4_|)NGNb|0Qc0FEDD`whcW8MWsATc9I`-rSu?p8qQ#n{l4)tph3L%+n=lN zJ!uWV>;(l{Pgg{>!A47~o|8b5YIj(x$e&WV&(*uyZb_%4ptl1qD-$k?Vil?#&$uim z-SwqG=F97u8v9Ij$I8D@0I=MktUy88zqB4nDq!#MM%|wweO8Z*&FN6c3V2`xodSdaym{#=Y2rwZPRUGKTHZi*9^{EEaW7lU&}dXG zrw8Csx?cjFe5ifO{dxlyk$=1DUw{Pbeqv2Ba&`6_0!wDJE!0~taqA4%s0~}h7_c;^N}ZB)0+vR9p!FAL;w*L-oFNPCWHuV8?nA{_9DMljj!X+E zDrDHCD~D$YF>rvdIQdPI%}7w{R#Vp?E`)XZ>KWfOxj24ou^^B>9YD8_V$KQuoiWk_qY{F%_}9VYsxdrKsxTv<>%A=hX%3;ww0jXDPwZ zyCt4Oca@wtyf@R=e)gRSa?|TgvHMAU&zc*#EFhc%CHOZt0j~|ZBji&4j{^F36Ni+J zlX`Vx#*_O;t@sG`2-0XTO6`W}2DTK4k(nUCtZ zH4FYYaQpqsh6KrX-+7f_EEOJ46ap|+n%YTScVW#)f`oJ+AaNiTX|-#&8*S~5rfaMk zT1qGa7y{(My2bAQY5^uf3S#kQ=w?tLmVb;+7(SqwSdh%F)oRW^=&hn?ua&2=Un$(d zRssfBw93TlA3i*fX1uB^lNVHiZJ9Ll7zJiQxB4xqZ-Qgab$h*xUWh>uznBdx8Q=XD z4&1T*vNnU$ePZ3oNvAP;P#z(^SSO^s7J+r|?OBHMV2eAEt%T3V`Mny%An4$qJ++XFzB{y@jJI-4>dTOoPP*{E z%nh2$qauUGI`UBIXA(v2)gQq8t5hX@&gceNKq zD(MrTe1!)?-RCDs30}kA3XhK!i6~T@?-L9dTmKTP8!my%*%{~N(Xdn-R(;SG9$X9> z8oLKC%KlHjaiwoGeKViVO$V=h+R;-E6yFf~7C$n)^_2%OWDjowetD*2`#}a#?$0Ni zzV8Zky7QK{8%~MSU?Gj}h{eg5F0btt*|5XTB8whoJo@{c?QnA;L|}UjgWc!GJb5kM ze&(=>q~M=?k72q+vH-}sbS9Q?`j3fY$TIu zDE8mP04!4kA;_h!9$!BCKRU!@|H1$u&AV4Y&OW?09av4k@T}2=k5&G=0cPIY>v+PE z|6DURh`rgwk^vI)CT}XDFyz>x4J%Fs4zk3GH$JV}LO*>{b`}w{P2N!rAV^1FzTear zjdvyhoB|-B?%XQCAh^XF*Vn!s5{)POe3y&q%^-{^LNZK2msW+R4y_Bn`?klZAr&`FPVaTIDw` zom|%ouH5gYz439Z!Zx!)TbPkz9zVXLii#x%{Kd7Oz`JhWL3s|^{yZY2(R~eQpEH#T z5V=|cV$%Y)f#0{o>_3f}IL)k0vXWLkH-lQ7q`o?NUaao>FtF6^MB!jWMMA;wnUhj) z%MV~nPMA57tNYOMNZ24^i$O6q5{V3eDGgXe0Jft~-wn}a9Rah%*Uw`R(clzJ4NCQr z>iDa~B540O+x*TI?LfAr+rj3;eSJaB@Y5~+gY_to{3>pa!SSQ(RWV+ep5bhg zw)u|vudS-|;6((L$=CtSh0%D;WFikeD}0-@`mtdeJu}F>-oCf;p4b89GX0}2FtohY zknNY)HQZ0UUf;JS16;(-=ogwL-j!eEK#E_jWVrX*V-Y>rZ{f1Xw^ULdy5%!X^=fTu zNrG0ZMxC1iwHFu7DroQpT&m6qpf4N1-kV>29cuz^)kMl1j46>s??Rs=+qGW(`LtoK zb)HA`dua>bVu4uv7XldFJBTd;j?HdsPQRZ5W&qu76OTkFr|2|E z9g5re(M({vJSpO1beygAka#DzJ0k^@01n!6gwng*w=_}#5z2K1AlZ*=KM5eGv}2og zMB1lKZSei-gbC7&5%?@Fz^a8TT_!>Vv@4sjNCm7IM<%)F%FQCkBRT^zrc!zzmP*{7 zXU^X3PVowF#zD>i?8lT4YxH{_AVQ|%&NjMG72qHYK#K#Bt1Bz8083E?0rNp2sQ^I+ zFEVY#2zCGk#5^-3fq>9FkSCu^)3^;^5T((KZvqF0(16+M{g!=Z=<{=&EMuLxrK)2v zUD|$gFdaPwyXY$iM6HPxY|+i~20RFimY@Bn*Tq#5(Z3LqT?QbY!!l_joh%w)11m(? zk>h3z_wEv~_tBQkamaOZQYDKKKyV{F1Y&ro)ys?vx_$FATq(H8iBcb(H4#HUZAVwa zt6k96i>7>m6XT`Eokms?-m;gs1ru2>IG?V}xF3ngDW?PhG;?t`Gh*`ds@miQJBSA< zW4I#f!Pr?kvSGivNkT5+jYVZ3(f&PpE!*QuXfsaaMR;#%0B}t8*dV0q*Jq`}wPU7+ zOH@6NMxuy*su<42d9Q1z(o{$jAX%-qEv)qTuQ$9f1)=@)aLwv1iqW0>1AC zpWugNoayiV_sz%8U5z+@MvAlu38%yKtm>UZcFkui)F)eKY;E@93>;1M4rUW3%yqqm zo+xiIk0g!d!NMXIAle0G4x%EsfZfsgi3BPGw$%5u;@Nc#=PD&3=qgZu=Nl4tEM_Ca zGz`rt06jyQsj_Z6Tkzp(mbU}!`{;nZ#aK^+v2`}mI4p_>Ap{kIfGybgrH5CS`Zdmd zqi)GJt+E}~dWOv&*0*fg1*H0(XTNmapPj6AWIA6<7N_3i@_Y09Tj~TM1wW$4a`zd; zo?(|Hrv4RKjCUVqCLQwRT|-2~HCsbj?x8DroMY52+lubPz;9|WOO8_jkEP9jk zI{bMsJ8;UZW#kzov709u!0`fr;5QAg00n@GsuI~-JRPW8v=+UtPP=W5W%`o%RhzxN zgujde-j#c|(_uHDTn!n4Pl{UvxHmYX;`^Lf81|{&e|d^e)LV2WPDidg&f8C{p2?y0)^#Pj#5&wfV6M1JG7(FdVumk; zd(P$SG(6*p7AZbY1yH<5ZJ|j=^QS0i zII%`1@LiVw)|Z2p2%F0s#nr#q1IfsPLjZNNFvh= zT|O6ge5>kGFB1IVd{AEh0~EmV-_*i zWIhYLDyu143v4T*D9}?g7+`49gs26!_dj+du$`VE#zZ^L2kffnLH8I2$4`(db#ZH2 zHTPX%5_n~M%Lzkjg_O@ca<_8DO{}h4vr{%sgWe;qYPdDCOZ?(HKtnn0r6bCBoio$y zB_t$-D^tZ_CmGVebMIBb6kK+}`ool#Y7;PdmzAwB$z#%#?OdR*J#sW9Kc1^yw44BR{|F=esR$ET4z630N>B$-X`TMY*NAF|#8DylB*9ydT5 zq(QnHhLQ%6?i7?BLZrJ(x=U(kX$e8PLApUeK&4|qlm_YepYeU)@B4l0f7f!&a&+d- zz4x5+>}Nmw*{AOjm=zOC{>d>4|G^UPZSAv0jxPysq(>d9{0I#Zizetu8CX7H(*v-6x8JB z`H+p3Z}rBFa3$7n%huVgBe+uD*T0g;qlqcNQ`*?t4Sn*vk8PMrA%Qa& zYRJer+jr;&0A?Z;w*U}rT29u`l*L7}0z^>#pq~hV#ixN7<-@Zw75dg;6`ij48bW3A zvq+IWYrlN()9TGh@bH2_pbO{l+(d7w<-WPt$~~f48(;BTH!;;ENqT@K z_hdR#Yn2s_B>ZA1x^eQWP364u)1N>m&kz}gMK%mk%MqOt5T5(UaDKB5biOHvAE;gU`+i)BGY9qp%`@d?z7E1!N|j=sJWIG%vNZrm+-Wlu^HY21#G>2(mX*4j@*h zhv`6asX01AiioiO-*TG6ihxkQ(PT6A&mSaZxkMv2`SvSP{KZdeW4GFpbB8eN=xOncxX_g_{4@-kG#}lub zC7!Xwrurpsl^_09YN5K;YxVzhjivC8h#t!H@hV%JoePiw|qonFEQx8lf4&IehJ5+g{qQv?-;& z_Z*Akx#`{d<==`E{W)8u^PcyK36Gazpc3^B@j0W4a4i<=x+IS`_7sY)!&VjFOhJ(e|kPbtkPvgq)n5jAd$$nb4oK zVpsY=+#tMLn`|H5>qhbf$Zx(^jHsIrr(Ts`9=KfD zk-LA!5xFDSKv4jqb~(yZjbooEA{MPTP-n4b=?E5~)^}PdpeV@}JL}u|`kGo-qfwg* z*bvdDCFf1YN8&T-jhZQLHYVFEDs^iY$YM3?iHMy$7Kt5)7cf9go8!rag0RS*nt)a@ z?QA+K^T`VgpABy*vflMToqw_j1+F?k@aLfGHOdtQ24=gUqxr~T#fde(6ymhp;`ZCT4O9-CcVG7l{k{pO z@<$yZUJi}qpk)v*#A9$?EZ%*y;PmWUN7e=Uh}rFn8hx9?rZFy<9HiC6yQ?sWoNTPR z*j9$cX^MkszWYQYV(>2SS@7cx=5*xrfqRsl*KeQO{h~F;?LI2nK2t>3DGpRywcr~! zzETU8%cmyDz9G$#fXf^eDqwA8(Tpcj(;aDlpbKTOP_OxPd`|e}t>*D^-sl<*Gp{L3 z{P$aktK)|aW5Po-}9)0duWiE>EE6;(vdcKU>-Uxp`&n2VF@ z9;V7!%10dxuj7s9^AC_UnB^XA3}xcj{U#VVijC&B{Vq$uu8p)CWiAzpck!i878;{3 zszj+Z5)da*;Im^$2=2#QfB4`ylGCIHyQb?aNT+{)A00`~uQsP4g<1fsJVB zroL58I)}V(Qn>SRNxsme%PpRAy4XVtHeJb%Hla_}whz;}Dj}BJ?mzWQ>7A4JV>d5s zG4Q8<$|mN~&h79{SPqAv;r}4ya)IVkWr3(p=d{-AoPMuGIZugzli@vLoGfN*muV|p zDwv92PUq$8<;}1=ZhoO$Z2?|%w>(CI!V?IP9Q{pw(1rs!*@y4W#SH0N^R+9e*eM`(<|i7V33r%Zo; zK5TE;MQkRRRZy_4{ypiPl>&_5;uDu)OI@E|gM6YUpGxD`lmQz@Kaxs}0_mRQ)RrSp zWuP8YuQruodAfPU;Rdf}FH%f-4i+JHcM*RKLoc`uU(6THn%-Yn^C9p%Imh6xH79+g zgj>vEbRyhQ8hI2<&6e1FYzcBT*ECAtY;Z=K8cS`YwrsbCYC59adF>683po$Y;PHc_pgUkAj#~NT zQ&H#;Q5_`I9G7V3|6AHdMFhBK1MIQ@@@WnUE`v%(`gf%`m zB47!xxEP_cywF2sc}1~3T`VjAXN`HPM&gK|EN;d5Pol^R9)c&_WJM_Ba)Fyz2?e%d z8yqRzJKm*QC9-+XL%SO+V{F3TzBeFQYG*4}C69DE)-mlap7}6sgO}mDAELuQk}q5I z?n5pE#+2pY+bP2Gyf=TAnDy!yhU>{fojX${H^cl6^|xuETlCY#tU*CymU$-W4a|BK zG|t*~p~Iai(!x%0ULIyJYc~j66Ag#z&9LR^k5&9MXk)%?C=EHSS9-s_|3af~ zQhj420r$I&t4z`BUG+jqE&>M#D(Q5Q+`tg8dYL2S5g%JfeqZ!^y~z9z2F>&tk(~}3 z=i_ha_LTG{g&`bC#jkBOF_MzLbem_l^qugJe6`56y6&$#@tyk0 z@%ygQu!AG@m%a;emhx-a1PUsrBBP)0*=EgSM~=7y=cl(c95UAQC-QhS%MIynbhZPJ zgrI=%-zGY9GM_7ZQEr~~{403*Hr$QLiNSVL;-2{a6B{2w8kbaEt&^=Tt%U^@Od-RI8NM@7$72MnERn2Re41&NW zPdkZskIw1Jzv&E^;~y3}?`}UURLa#5O@5fjuk;#;QHkc%LiQPt6X&KvhIS5{;V%MU z5mYP4NWCNas@5D`#MpHb7uwQZ#u&Gk5#xPR{Qk=qtb;@O7<0+{@*8H4(`F0Oy3|6_ z1iq%uHwU4t&o!_mKDAKXplHUre?*gonT^lbn?X93_+g2e{*V{9SbFK@RMq34Hv9tH zJj|xfT7J!@kx6sY zFND+^x#@guWk&~N^$=X3?&=VhCYWT%UOuIateVLPqB3EE{?f(;-y_e`Lr!P?(=uOOx2j_ z;$~N-qz%R{Ps9u2qdlorcPMG5hp~+VkNuaIs4$$NJVN?B z&xHz{wz|6)G0Zb`gJe+^e@I8E^%diHOaB~&OUb9OKlX|~4Q%{2u2acvztk3sS^BU# zFNZ5C)hLFZw*9PI<-D{Pbz_uqXT-DO^^OLZ5srm@($Jb@)ylRTJhNi1=UXgkE4wKq zSFgvPo#{ym@_7nUl4nJ8SXSlvj&YOlzOEoh=SzPMF+ZR`u}{_~-w!QVjSh3eC;f3 z!nDefZOr!q4{#LG1E>z~5tAeo^PhCLI$;WZ%fHxu5#AZuGaa4q_oj2|S^6)9T}MjmnX1t|qgC~e zxLVmAa5*oK4a$W(;1X;Evy2Ug<|>6y8m$h%cs{FL6ZH!QD52xWALDMZfAf3le=9?7 zLwn2X!Jcvjj}Cjxp3Z4h2-_U!l)3gt!)L^!P3}!l`${Z9)sscNsRCn8Y>GQyoN-_? zR>k~iaYx@TOb?U4HjHeSZV~jL^@ig9>C*a&^MmM)a*2y_pJ7i${oTQ_O+RNnL6eCYhQVMNn_HPji;`ykj2 zymIWKYrUnCZDfz$o&I6={I}~H5*PtZIGQ_BWb=G$WuP6x}B88z(!_Z6Vv`;&v`%J9)lvhQFHrnVs`(7CaO5U?Xj z+&v>;HXyNjxbRyfkgoe=tq((mPQw5CO&eS4Y6Rq!@P4DB3v8a+YkRG)YHG9#&MxkI zZn6+14#*FbTyZ}hdn?#;aG4Oo;%0tYbbO&22jcSXUTCG&?G2r1?M;+;57YaVh>y-2 zFV&}tU)Ebo@Cf8aHDjdZpNEJ|eP2Dd$xZw=hf|J1__>IV335CaB-r396vl_zn~ywl zsPA|Z!x+t;ZO6U4(5w|ku4;!CaC=e0{hD-Q&q$yjQ_yQ2IgUc`ZLI($nO4MHKZM*; zm7KTVl$f|rYKkb!j@$3{nzYKO{oM#}Tfp5C>`B}W3ietyw>_={6$#y=ED=9!53a1w zUBSdLEWMVZydr;sF&Y9&z6CX7Es50QxNMDHu-^2YEL+@yN&*d_M4UA`rNXfl(zJ0X zN%n>+jtJkjmdos5{BZvnf0ov0sy>13Y#gp?Xwl@lWWYD7LqK)#c(Fw#*=qI~7u>+Q z0I)f4zSk6SzgRflW#e|dW?wlqI@z0)S=fsg?0C=dJod^V`+H33Kn`?0VXWy$#-O!; zxo6k#%@5P3ao3X+J~I8&zr&!@OJX0so1kMG1w_WSx0rsnfLhw?xyE6O?XL~bM5ba-;#5`I9WvBAoa#sW+$GeBH*JU7H>OnL!{ zYCorE!AYvOnbYj&=e^M|)wPbg?Utd0E(MTr;%ypwZKf>X>3&rqTZNq~T82hO*K7E` z$x3x}{PV-^K@cGI8t42zsWtE8~Z`RvR4lJeyD5tXJL{3Vc_mzhZqJgR!D508a3@1Z=k8`$MVf!`9&$2~|p8$1tQ_c=V>^CD%sZM#AKJxkTM zezoQwa1q1Xdb-kn4kfY`VLA0j+AnMEddIQUGq0!)2fp^NpK}r=mN#5NY$e zeOx8s+h2e(aUdHq(d%W@b{8bTWgIz8YV>t!sB_@u>A=9jYBL0K-zaJKoR}-*zTZWJ zze+nu&mxtqZ6=`PT0tR$&h1*;4SSFWta2 z5E>=&wR?lU4)Usmi1GJ|JQp_3Q-*Mc`5^E&NM~B1*nj`S7ES9g;U1>#@8}68{P${X zROc6=`^Q7`c+s=AQZ;;}>I}NiF)6=1mh5bhdzLZvvd$DMXv(7R9lw4e{U3)n5^pGp zDt?4L)eT~~74 zYxnTN78+1El%2x$U|AvUMAM^zO9v`=A)EEIl^DtNaulQum8lO&U39}rEOiJ*QqVeB zqD*&shfo!h(2R0AKIk=5PF-BBoZ(q%G)|afk_q3#zk|hUD=Y-;l30dXb){c@s5yPW zNYNQS6)m(QNQ*G!173n;jqJfL9&6q7G7QSauJsVV>uY4fxvYWH%n1$eQ0UKQ7SCK@ zgJiK#6Svi$*Sm*#?4$4_n5ei30bQSaz+aWrc5D032yNtCGMyUW$ea$%B1bHmfO1Yh z=-+{7$S6ht^%AXAaUww}5r-ZSq#^SxW;?EYzHj@Zj^)9wn}iS>Xr5n8eSUX4ZArT1 zPwK>IyT8;9C(i)3cS>Dbe!#GZ0XT#(icw%v2y5>#d3LfCXI*=p{M1O_RQ*2>5Ak^S zhHK+skBc49HqYMGq4;#059x==?mYV^x1gp%+B9Uz7Ix#&VZ(9(!;52dpTP=854MI~ z_jklRI+A=QVd~pt)ZzQe{pt<02Ac!;PhPas@6yzCe=X9aF=MCYTxh(BRnO~LvFnG0 z6@cMIUxB9ezKVD=w<$Q!r}BvdN5bnJ%EGE;vFGB#k@PClgDWd0fPd?npC&BJP|2-K`cb%o945<$0FZP?6`avUEdx76ALbrM;obb0dNXL!oeZzM%;7ugQ&Q{Zk`rcEi>y@l4Ap5U7OeOFa)>?$pfD) zTeoB`W6E-!kMDBw(;HQ@g}*gAP#tYe#AA~3tbpRxAed?u=+l6Z=dYv=-#fUoX>-1NKQqV*L)kA`x5;h9fKCe77zg_XAL1%*K4lde0cF2j0PikQr?*jq$nSpHD(D^f@RL-e{PPc66{+>kuF|~_gdp5 z5cI79dEc@D+Z^e?Uov`Kry27!XFOtxFv)D>A_f(L&)5>M`mhv00uoTlGUyfp)_v!o zmKcX{;==W~e*GEOgF@IfVZ@wD*cBBGkN$0ZeEjG{WnPWNh-q&GZjgrMNucCk_r=&J=32-ewnkdxm=}ANu`d-0XDyC|{Pxe{)sU@#$RY_nwW@;oAMlLW8$4CBK`D z!m_;^yJ~~YEEY8Wy%%dWu7ZvN`0nUVm-Wu*JI&DcKIuRjmFer7o7Jr?rXjm9WeiNr zfWi~-9 z)iftL3Y|1a5bWzRNI3U#q*}L@h>zv!)G`M_>F=15m4PArx57PLo^xi0p8lFqYPb|M z21Y_MFFXCk_Le)jj)CYywSh>$eu24hoz?U?>}i%y5SiMtSBqIt_My{y#PocDYea7f9 zYgfLfQzq10qgkC*)ZYRYw7Qxi9p;3Lh$KXe58a|cbhXhnGPoK4JC+^mA?Xd?%)$h| zGtW)4wof8VF?N1f8Zl^#GL=p-tHuOezd0dUMT#mu?p9idT8Xt4ZACRb_$Sx~g6|Bz z1xCDo=db~bG6AlQp?l(P80eG85)H?rpQ`hTf5@CAbEVk4N}5brwHPo|gNj%sZPD;M zkxAEBV>&@7CP&2Uze}_(8ot~ti)4%6l{<`DL!FsZ&-qVKWY4SfUE!mv?U~5fL|X2sPtjJxV=nq zKkpEprl88l#SgE}lq3S_*AGd#X_V(D#JgjGwXgFoOGCET8|B#Czrm+T5vDDWjYrS_ zvnz35QmY@cFNL@ti%p%jaD1dvjK5`HpVYJx43uwpj1pbOCH9hg%OWNhMJ0n8?;)%& z$_QwvB+kLOAORDpXTH&)8W=`zSEQ&K3N;2&_HW&#If%a-A!BuVG_FbwUB%b(od!*+NRE-X(qD@e{Rn{S^m80mA$S$ej>}U7>tY2VPqZX7Sw@65x6b3it$dU zY5AJQ3kYA$M!A88qnpHq^1mmxUtlFbCL`rXToY>Xhj-A?+fR*D@8NH;2^&`V9o7wg zy6J3U;{T>cOBq|$O-pCq{N^=}TBz#n$1)Ev$EOhv_+TK5s)C4{d zEC-1NH zg@hBa-{nc-($9f-Du)HLdsL1{#yT~Y6P#4eK!S#fPtx$YnM~f-m3de06LX3R@AVqxc^C0>(a4qRns2Q2P z_HTX;V>kS*{~m!uz;{T0ihdOt@oP$Jt#EDpS$zVtD*;`<%Ea%Ti-<|GaZ{^oZDx^m z@;K3j`0XCD_YTMQ@>C=tBK;D7`Wp@f>&;OeJurf_nntsF^ zx7a`CbwY56Tw57g)6pJ_Rh#kt*^JZq`UXl!454eD_yJPb05Yu_u-jI@~>75ucPFiZas#TIe)BkH+v%{DWwd=8n6S_fMcX7 z{or)n@N?NkQ)ld!zW-fHkPL%0Ald?C>$VE%9{b$mM343L02EA{TOAZ{2x52p&f>IQ zElSnnfQ4AtUO@4JT#tr)zJ7o6LHeVIflMerkXm^~pH$?z@Ig^#H`8Sh7Yg50_uVJH!zFH-!DN3cs>yR@S zP@QRPylxt`_p+;@tD!4p%N8nV^sh+#$kKD%xP%gC`e$>N1(YJb93GT_XLjjH{JhAnguNAZGerXu? zZ_HpUf}iM7Y*$ArH+>jAFbizPJSk|97J+Bg%jNMLF}7(~8jdFR>y`a^VDEDAX#=$l z$PA^hrB?^FDCa)v3wUA5CDh~`LDk4b+?Bn*G74(C-dKMjt;wR*0(Aj<8b-fLH95aaMnoIDC#6# z-S_;#M&-OtLq0p4#?Q~MXRUfQgul%7g)XI7aaP+M-oW0E^aWg*I{U>RB+(STuDVN9 z0Z;k+JHnpKs!R%mmS5un85*_ij zm25Sgn!9CYFp{<&i_77kFiUxD@*adm@)H5Zxo!j$e4Nx>h|7Ii<0O<5snbv+X48~4*Z_ziZ#L&}QSVHaY6UIowdcE@c% zE|<^EKr47JglcH4%SPm(zg8aAb2)Y3*J?IekAOE*uM5o8!^eKsY{YQ$(}Kj)GUofE zcJr6r>Aa~EHt5~~5%zyCbO$Y|`0DRD8I=QX6%txPx}d)|#Ess(7($;n&vfd{YG0>}uzfR2|Pk3^U6u*ZzX zG>RL$bWGKpd1>7I?bfSdilKp&A9AUIbrNL)i9 z*@FJ$OseDqL-P#kW=W@Bv4n3pf8(VZH<)w- zqHkvsAqppFbIOT8IFx1;x6XDr+j{g?2{>cGac#Q&%`hkJTK zI*md20Aa^3i4TEcq|5qThd&J(76%zt2OPN?WX$21J>gHX`fLoXsqvaY!+bOSXnJ^- zNIzhxZdq4CdhyAKqs1$f=61oaj<^2(GdKEYdtt#3(TC3?l8h4qMx98RI79qp#~DY= zuj6@*KV9KDUf|?h&A8KDQxZe# zA3i|~_JE_XPm2}GLrmqYw>*oDp=C|hU3WN9D|oyj7N(jNDIA+&_G_*FW$hMBULt&+ z>a9z>_^_y4r9{f%ab9k<`!ZU^d;t0t*FsOVK3BE(8TSblKWX_H`9P6n^_=PSe+t!CD36|4(+I}d``ldemuYjKAGsiZtcTezH3f<^I;W;&GqNydc4H2 zMX!)vyoWd=OX!CUP^z<|Va` z`Ts1r2&kBK*-wwuW$G>Zz8R9}-PGjvb9L=sDy|_Ul5$^&E868TkW8~n*_V4kxsfpn z<_jLBx&~X)E&n|&r!WJ> z5L1~J^n$0$&-(W=C*5kHcmXN?$6enhzPCb;T}+hs444<)gj(FJB3~ypu2wnqIqvqp zPWO1zoJF!w%Uj9ez|!b(rpVY6g-iyO++Uuo(I8&%aiQQk#qOP%Z|tS=M-F@1Y=fAP zh>=a$eX??j^}XKpY>y&KB7ibl?a8br56Ya3W)70_sv=#SJpc{=5R>4(f!mvu!}~Ix zg=gof<$`vC_LFs1E`4>ywwJlhV}jG?hJs~Hms{R3{tB!yK^~n@3O&7)I(;ja-G5{^xFoC|lK6Rg;Bh1!;$c;w;iCYLau1@E zIit@}N_ig|w`(GdrKe@FI)_KPP|2@9tJ`I6X%zh4NyM=V6AdpqmL_)7&2foffug6M zGA#vM#`Kl!nJ!}m#|tB4$E`4HLTq!3H(t8m!6>tGCt&%P zLHPO;0(k)_#+5yc6A{Oee8}WI!4`Yq(ebj$F^>RWcxa<1XvF(&`R*pyHBJFayA3(c zy}K@P)gIPC4vip8P06`>mDqWA>$6RgIu6<1sR0EvpsRYg)Zxd*R< zO=R9Mgpz=0u>*=NsTXUY6=rIcwFLjmUH${AO63BSqlsLJkuP;3R)DfNx<3S;vK-5> zsP^G6{);9Yiy)Jg+G!N)1dkbL6;HB5OQ~7%%s%L8C0b2pFVsJ(B_=T->tp!KgS8wn ztJ2BF^!7$3LHw_g>fTIFnRc8%<4_)#^nm{_*P@H09@IOFYm7~*Yo*aOlEwuWI$ta8 zkgMkJ6RbM^_?Ns~{s*w;D0mYmQQTLH(DS11mS?zC{r>O6gK=i-!xp+S(ZPHS~b8=M{p| zGMq8}#fen9wb==shuiljJ07&^ft^u`!ZEy`zN|5ibiyeti2=s63c(10cQt6}{hl&h z{{aMKhPjVx&s_};I04OlM8e7btxy5qb>|x{qNy6=#~~Ryag~0n`^SY`S{d~8xfuYZ z*FJ|;Xx&Q3DO@p}W%`*#sr|$IXu^`I7d!m)!)&<^eICn2$P!vZkS3H8HJ2-ym6y>G z1qGk(WOgrVovhNxsIm2`ITTF~xKKDitLUDyLnw*vJCx?+ooD4;IAa;4v$#BdpHsl5 zIbi@e4>)w*gjvs&4ZW}xar;HDtG3Ba{Qu(c>=!JfIwfbi%0qZtF7ULFX{szIeFe=A^ouT} zk~+SETSHBMI{-}>)c0h#8pTfgb7WEV{lE33@{mYRaKdjMR8eT5(ta3g`(v(hVNq-! z%seS`;jByM*E3-!&0n?L;|;QR=V-(r7F_TW0nzdqMc=HzrN!BE~>f0uVG zjr|o5X_;uT_Qm;A8-Mm`Py2cbimx0Xgmi-OX`7NhO$oS8q)<6O9G>j(!j@HL)-q&* z+eKzyo{v^W)0`p<@-emL30vp0|KY9{Mc6O)rkI@qwY9nJQ#rmq3&gU%APFPT)}_=} zvRza+SJoFRUJIRLDxxlJ6V*Y(n@*;7`ttBh4%u#aqyI21OeZs~3T&qEcPMdy(uE?d zY^*&Zz)d_Ns99CDwGx;%vjkE=}}c3D~&rl40J-aHqQuD$>9P|f=1psQr~ZVWr&QxQX*(c4_cRA zU<{p*B`OwBYrseZ>{QY>ixQg4LJ8h2;8(>4pQC$u(r{vhPJ*Ss4nq2q6?(LDLu}2} z6yjd)K%%u{271~1UoJ>0qiVhRiNBHMdykNqQYyVUz>oht@Y5fah-D7D)!Un^{+ByF z6rn@p*1b7aX^X@(%Bd|o`6#*F3&|>irY9-{a)_G=h*P-iU~=jaXfAY69;aapiKN>S zWSz)R$_HKbd7v-_#d*#@TnQe1?Y$76|zcl*m^-OFUsCn*9zn9Z(NC-2VXuQ2dTlLB!es>(eJpA2ZEsn&>*Y-w1ul-p0EB2$d z?iAwB<63i0iW}><(>O~bZNG7{Qs+e{(!=-ryq1R6oAwt9;*Uh@pYRc0EGrOkX<=JZ z`6XN_Tv4Go(?n* zP)*io;WWp4wVaSedD*zXx4BzwV$?I3`NjA71+LD=8xi3@q%p5|TTOeDn-MLotTP{i zL&@9={A*`lHXozPs$|A9WS*_(KOR7syZ7W;e#tlUNDuhgn+|LC#pjd&jkxxKQo58Q z$E7tgVcZPLK961`tnMuhf&B~QD;C|c#>&G@X7gD*gU!@iYJ5#G$lL!A)s}rtnx8IK zlWVs))9CCcC(oXJSSO;#)Nb ztej(?+4Kmg&9`z#Zs5X4M9$iyGWYiPng`q~*WoA2^qTO$5wW2R>h!sANQ?IK$a?t= zIdni0%fLeCBm0Pk`{sop?D?1^gh_7Ym7?y(ufo(RLj{0fXlj;WMpYC9k|Cp3+j%z} zkm3*pI`@AThvLyiOKJ!;>it_u9_2({q`;0P+#^RX8*#^`I^pnGEnn~=H}CY7BD-no znV@(41KCawa$(g1T39?r5pbVX^M1C%gM+YB-`bRy5Dv=bwTyFJ8)lf>W}iK|tjuQ% zjogo?syMUi#gMi*2<9Lc@!rTR{C6$`0R-t!bg1`D7lh^bWPJ|iacYxxn=Rt;w0}(; z;HQok2*`;*$cSYU%%bLfM(jl&mhkAL;M+DkP^$3z2Kw?<#<^%}%!g>(aX+QJDpDlW z{;2nYb59rSkfxk%?Kr<*2~fxr34c)@72ybW{4)hTX9WUdKuGw55;sCK{g-(JfKxC% zgEO*8-Xs;x7-Je>O}Mwo@T-r`biHmJKR@X-GlR{$NPwwSEC>+!z^e-;=tPSsT%I*! zfK=AuU+5N70hvsPH_AtaUEDY$1R>|RN!W{+>#>#^RBNOADb^|a9zp-DWjT-{9L^BN z`O1Rf5IE7<0P!y(KyEFA(y<3IV+*m?ZwR+4&U(x-Lnw{H{u<_Xe$2+vNo6k;FUsm{ zRK`!nCxbS|_wqa=+}K(RoEK?Ow>!{OW<`-~Ooop>u4MA@KgGIJp%l1!@?#CO+ZCRTsf?&|nMKV<&$;KIw6CJ&LY;B!cd@!JUn* z-)tZW%>Ch0NY~@f<55q1KXZ~4^9F#{-J*E0N;zPy^q^T4H#~K&;+2-S@`|^#K@~G- z4fF(Aoo10@C}Q^*0aO2pyl~{{njiUWA)qx|_gg@buu-RgXLZ~J_U!*?QqR&h`rRwIk`VWHW+*}*QPr2+XoX|j-hu-srjmJ|3(a{a#6o+5 zKAyKqzz_zi@ZI^Mf#t57MOr#hq|;4fuGlPF1SEHj8ajzg(l>miBp_M?K<628BeB2rTsJaJdE_}P@Hfv-5RxR!wUf=$7H_k@3_i9aC@YCmONo$8OS|Et} zuS%^U%1o;m^3{2JK_?pN2p+j+erwuGM3goJrJTvg_hbQO??VIY0P}>A0XAFYc~BH+ zn&62)MMQN3&x&Bv{!=jogL(WQUs~F&M?*e&P`xfIR5U4h53I(9Dqc4yx85lx`M1_GC-!HTmFMH9 zCUgXt$bd}J{EoygaoQ3Z(0XuYoZFMzSez$6nU8zqB+o46|7q)O7_j&omP7$KP)1%p z!eA)1e9U>~)!w=ZYFvgAP|JoK_daEj-o$wnx8w4NkSP0Ek%gs(Z5PW1%!{0ANsiB2 z++2l<2pHT)*El`3w>>yf{?cfo{C~2_)>-ZHupsF}lLaG>`HWOj3&G;7G|Z2IK?6j1 z6Jy624WnNRf1dvpAL&F}O|CI`9v@a8&PEAPX`~A}kMrTk#T@$R~u^p^RGE2QaBTDjw2U{bJo{u7_AbYrqqGgn05mO)xWS zB%Q)f?0C|}rcDS9i#*()fA>$(5fpe~=* zK@|F*GL)$_EQI8Ro}K4gyQa$%HfX+<&Y#&a{Z2zbVnbbq^58E>A9$ko<4)0xa1x5jrpf4rL^!VNJngYHmKeKk6p( z{5w}8zmqiUNE&A?N{}KiNaFc&_Cs?WG?lm2pRm*t@G zV{vJl;wPAHeJU*eIpK>C`eVMs>y_9hzHbJIipPxU@T(ef^v0b~V!xX}+yJRuYp+Ch zw+vLTCcgVr@<0@oM0YAkpYf;%J}rd%t|xsvIpulZ@c16#^!j2bK#RddjB`O}pqA}} z``jl&70QE5@kuk{+)y434_VGV6CJ7<)O$m~%%FO<-#TmcB}6!s+p!TE%d!0aD^Cm? zB9@VF53}uV#hcTfC|P?2_?l>kSOLb0$M^cY+Lr{ta4CD2E@5vjYF6zJ)KdNv?}^=1 zUsCeEj!|C!gJ$m{k=;6lFA}~WVE2OnD9O^66`I!UK*!w<=4vcLQuYts2vFh^jc^24 z-^oo%GDC!awMh|JaIw?%Vk=U?H@cf3yE6$WKOg?91ZrX9y3ErD8RP%+o*pcp3bEw+ zbQf-m^WhgC1rZcy1?j;m-U_S+Al*rH%4Jm-&I*nRiai@Nb_hs}uQctPmXVpRqiECJ9#8e7h zQ(wUmBRX@OET-+-fAng^vhuca;~ukSR2%f~B~<2ZAHR_L{~vT6U3ECxTHu)G|N7}s z%OENiRv(~Y=$mO7q>4)gOBbvlv3$!<$F8m~T$;z!;Xdr+XCW7!_Upi1&Z^Lga=NW> z*rvlcd%2DM*AMo1MXi8v*4!Ts83V~-$5A|J;(pc<5`M!zeK&16f!6b)=Kh2Mw^?T= z)iG@1t74n{qtB1ho5ZbJxK64CZzBbBS87Yv9MCL`dKy@(E|zU5Gwx=?I=R~n*j;|E z%kcnv;j?3hr-kKaFR=+5-HpP+T#nmtN8Ybl=dv~`GR-(hA1$!Pdkx-LXYz^3?wT!} z_$q4+IA#W9UW#0hk)B3gnOtX%#`8)vu9AoSW_vPDGwvX|bRt@I`>tZ1r)sDHU1j~3 zXw?W8`I7C5xTmSN(TRN0U8r zp65TENT{N(aj3%Ax_SnJ;t!q`E(RQ+p3zgSb;!5+?BCx*U24BmFXr{X+Vfk`$$PKZ z>UCuwVn?{t;-W_B@MKF|rg(&}tM!a(NHok(bTjbVrW|EPi{cs1`KU8%&I9wv?v>-^b|f*`M3n+b7&kxj9Gsr?ecqIEqpl zYmScm^Z)@Uhlkogc|!X#Kag70I9vN?)@f6b=Mfb(DHt!)f0%5dd*VSJ61ICa^2xon zQhsfVin~fOSCa%;7m9?X7C=#(?w}i1+hV1Wjg4I1hPGu z&1?Y&%JFOwrU_`yKpQ(~eCM@aYzYZ!D`ge`9qu5csViHUX9go&3re*x0FmRN>rA z@#z59h49^CZCdaWl2A%HS>)_@3VgE%j)mQ)Ny|aZFUqD3&~b!34y{?_qs&UiG3IqY zO6vD;KhhYcmv>mTLTVNc?xenn(S&`=9;g&u)T14B@D%h@ue;->zy1Ejma}?A+&M*w zZf$ARE2JxQOQ2t6x+99Lp;q;Vz42H%_%U^oXb>p|QY6Y%C+56p{|Px1QzC8KYcX&$ z|7(#_+9yFOJfPe_pRb(sLwAO=1Z!R#g%`atn`ygXFK*@C;v^>}!Wl{`@jhj|eD0l|uwI*=7hCLjxJPvNFP3kYE!Vp~O(>U@gQvtB$ z1IJ71LMUPK4lgNXWE7oS27zYs|Hsx_KvlIxZNn-eNOw0JI3OJY(%p^HAt9yG(jc9Z zM@sTgf}|oH(kTrB(v5T<`dfJK`@i=a-_IC29Kz=8z4lr&o;m09c#|37vq9{yp1s2r z#t*NqeK?=JZ7OA1!g&@efBE=){odog;y|4x>V-w}AQz-&n#Hr*0J-QJROOEtdN&Bx zfpc^xbd5uK80U8C&CYJCR>OynDa~rHy;^w|W1vmjjW|@)E5-Zv?%~eFMe~n(K2gW| z^v?BMw5`|Q2B?*0>=S#m^-+2866XOx{H_sIGxm-Z@c}Yg(9Y#|NjqM)7Z0D;M@bJT z3#xyXe+>JXi1f|tS4Wk~QEc_WJ%ZkJOytN@@!LmwoJHoy9y4Q>i(|KX;3{s}{(<3UP=gEu(_N~$oVHYKjfxJMlzpG-F zbbj$6V!@l%T0QsPQx)sbDWMlx>K&ckdil)0Z1IFrejMyaQF>o7r}`#jqNj~C3}KFv zk!HGFxmJq|C)%U;6&ly~JXn&^ zy{M*9RCMW%_K}sr$s?K#k)Gs;;R@5VX~7FHM8w#!Y9vpZncV^IE;GIMO8T(70~8G9 zD-GaH&!qb$O-m(q&7%y%yR?v-Sn9zz$GagH^iyG9x&eduAC#45|4=jt*^N79QuMa+sZCG`5za;66uaC$i zD3m-gh&*oFC;FIasi0pe5>IT8J^$XpF;XQp0xx(2Q15kr;^#=^w`Z3c4b`n}^%y#e z@kkc+!u$H_XGm4TQ@UJvOkP$^RJJGUt>wY!vGvNB$0@Z)$Y>wM6YxCRk+`TCT?#)O zrr+RnsgoS$7+z~^@H%2StwIA5Wze(5Ga7U&eAxk57`Y$}Q7_ak7ho4dv+NBpb)4<5 z?SsEc!GqEvf4%3lUJ^7iUPs?JnaS^FdG$j0A@bq(){#XOb^8T^u|J%T1f3GayL!H0 z{vs#|(r>e(%@ojS6djEdvQlvQqI)l)4kkMry*%VG@_OaTxNbuWalGI9w(oaN_bI&N zG*KN`1vHhA<$Y`I5!~X&8){G%L-2I;a%s2WPp}k=%+6Ej6iL?gR`9|*Zno5O(K2{k!=BC@8fKAU*vKb8zP8VJ9MT9h!N7)W5M zmhanp%sX()Q3(&9%^dSkmZrHw-(#6p0bYp!+BnhBH5hxz3rpjyVvsU@DcA z*>8n$M9dk4naUq$^O~9T6#RQBHN<84`(dOV@e-GCHLaSzw?`ZkM<2r>!O}s?;bNLv znvjWuF#&21M=AB(Y%+f}Lg)xNCsvPib-wE>`B8_fei1g1>P;$%H>!WP2ofLeIWTB~ z>d`OL1L`Ot6f``b#G)|%JRdlV6>PDq_W(3o?EFCfl{`lBrP?G=yN1dzg2|-6BP^gj z)fWO?`%SU%PPr7x8S*?%&BhkHoii@zY|O;zEbKO5mlOX zV=#DewJVj19#spC^Y{1v`XnaM#=ZF5R|#xFNRf6SU7r;Tdqm>HkkwT#icPDgJp&ww zQ|A>Su5?e@H=PSAOaJQjE_{%06J9VYy9#`CoQ=8_z;6i z2E}0sE95l;+<iO|!NMBO+v*>%?^VOj>hy-$3X%VKGEkCf3OP99fVq2Ht)StXI?! zJhzavZwyYr-_z{6U#_9s`0@(@eMnBHDlG6j-3nirricVY(ej}n*}qpP?`LjnO;jrT zBF4v}-fF^F^M2FSKVZwNPaT-PUyuELCz;E`GeXlxf=v-?K}@ffk1YW^5=>Xx+1lF5 zrrLZ%vD0vRpbt~lt$r(_{aIbYmvgO3M5EW(hI6DqB^<~u>dn|IW;`)z@@BNzRL^>= zgqtrrC;JiCu%Nt0w68z8jLm6cgLQe+my#?oBhR|IyoN9JmaWhUCVd)Z6Q>FjQ<<*h zW>fiNYN3+wB8WMT)`vEir)Li%QrkL!R~6NBGxa;Yu@Z$ri6QFrQ)Y77Oy;BKtBpME zk+3rSmznwbLK>0r&O>kui>J%VUeU6eHmB0eZe4v)o@ExNSA7u++}}0IU#Sq-PGJV8 zV#uC0q{NmW%DU4SU4zU8vWIchLg|dwX;hl9phLAthigv)0xZdC%y)lw>lZU05-~?o ze7q4KFxkr4hohjTATZ8DjAb1L>APbE*+!lUM{i#n)4S~?bdR1AI8~+wRQ7=1mXpw} z@%BFVbHnholhE*H+N)_$TfmHD;@B5rbS({U;*q0qy}*DP!-acSe+Ck{_T}hhuu78j z(mG%7e%7zX90|KZjwERNAzNE+>y52!@C@e(<4Jq_%f{i{x0n|FIKG%SMvb3zAqIrFdK`rh3^g zGZ^!8jJ6A2*{+CHt_EYa;tdUyC$g?Tf|~eZpINGol^Bwpp!~#N@ALn<>IwIlclG0+S(Pj_=X6%C{cqt+`@U|=V+s}8*yaai#eKNu(608rjf5#MmctIo8_(l?@ zO6!wf+&#UHJd&$S^sW(1CQ2i`;zO^ZS0K-5ycmZidy^?e6*O~R9(Y6JCs2MKS|!1? z-Bz3!@afV;ee^NxP3|9sPIM)A7INC3pekFRJz-Sc_6LKjv^q~6=lZ8&`J82QRpY2v zxh+~Z#4Z3O!|UW~OS~5`Z-QwP*29i+TXL!LIL)_s`*%*rr=wG1miR7nR0nUM)4q6` z;dZVmReB-mqW;Cl4=)f^YS|=hdr(3f^Z^eAQ;h#Mm*?4M|P3A7i^m)jE-`F!1G*UL1wRc75FTS%KhP>d&oHAaVJ?PdpF07KrxG z9!nNkB%b-Hh(&cLF-hu&Gg8Je{NRnruU7{aqWp=XZ&QzY-S8mMS%(|AS!vgh#WJ== z3*p;h^vMY!-2B(Z55zd^h20McL`DlFM>TUe%Ty$lr`^a0GYmuhOmWyn+=Ci((CJl5 zo!k#sNF!bycg|Yv?H~8Bd3zsG1mk=5I=`J0#HG4^w{X!Gsyi%-U%D(ZCn^^DlYXoF zTCVG%=}`)j`{_2a6FRLttn^Was80aH5?N7HDV>ZZsOcjR2RQ_JAcoQZ3HlX;Kpo)E z7Z*9{!rlB&A?|sqljX&b2RKa0!?m0nec)PLhBwtmAvXBVvy?TyqJV(FRWFw^Y7r*4d2^f?8BZWs6k;DP<%nNSRd~r!0NRWK?#fFNr3jE?9Cz7 z=keQlZq?K^J?EwOT)Ux!&+!(P`a+@e&UkpYqtqXj)Z|7On)VM>!#}3?E$ok*bKA$W z26G|?)k(|L{m6ZKtI>iS33eR=*gJUpJf4h8+&@gpH^*yPMta z;_e@uwlGJGbj+HG$rO@f?U6xz-VhG%U7+Cpnpvz9J$}?e{j;aqou@UI>3ww_o0uOlkL?Wjh*R2U#*Ms*E!_fKe@qG;m*CTqX-~2 zp-6lw9v#1bdlr*Cw5W4%iJbk;lw0`1Irqv(2eX9ZNFBz4ToB+_^Z@nzh8W}X=KVbr zryOZn$N4L*oL6Sp+qm!*gHn|E$VBak{@}RE-3RVo=QJ|YE|V2m{NDIX(ibp=p-S~v z8t?p+_cTei>MC*8)dFl}H54=G1RLeX@li{~d?*xtAEWI!08^=e??FkAtIhY-`jS&b<~97vD*SI4QxfQeG8SLCS%$9y}04r-hk|UVuE=Vq^0Y z!CZzhDxQ6TAyVk9wKq?a2Obli4Z%rnhz}hbCrx-1N|?7ohe4^Z99_km*Du{YJ?RT$ z7H94sz7fWG+%EW_qmA)ptMn2r0Ryoi%%ek!8#<(xF=+Cd=jX?jeRrkJ=n+~CJY^OV z8vUdwFHg-YjI+K`ohu?ZWN9Z3HC)(Z9`mfbkAwL^``!;>#r~<0h3f;nC4tu$Pp?`p z+4R|%wNyIPgp=IBZ1bF#tC2I~>0{z|G3^v9J zZJw#h$@Gk~>Vu9*U5L^P#doVI>lIz%eqt*FBsUIa8oWz^8J8;6e0(Z}GChKmgb;=0 zPt(=1Y>K5hQg8-+4gwrM6AlJ7%d2R!K+(C7iM*&tqR`DdjqPj@*eoPNeR9U&E6<+M zDf-IPnZEnAq$})4$8tvXAztMo+vI${{B@f*>vTD(<+uEfx^bQ%vq=h!GU_O{EgiGb z3Cw*3yfDWc{g>Mao6pIms4qB-q7K*&O)U~4lApeL^c8Z}{?&Dh)mTf5r|$0dtTn!Z zLvv@4%{tx66$_DIcAY_3S=v}DzMv?BL4*MCD#l&AAMbLcapF0-p4B3;e`j;d&z zsEVyuz0NVzvt&Mft6lByQaH10U-fT4Cu}3v5f4ri%W4rVMXqK?G)rW%z%aZAN z^c`9oU2&qKpv6;l_u;yPd8FebG?iWRGoWK!`R-nbAV2Lt-YvY01~(zSvwknN zNi9&Wd_CV}G>QyJwwMw*Ox`+X<{zbTz6|JaQ8`ST>7jcug; zB&uGk?fVd%fUjXzZ10HyZ$Zc<2x*B`bfAa^9A8Ii{hCOjplXe?y2a7FYYB|s;EssS3ET8jMsNKpBR3z81d3&( z=4AOp@D&O;gW?TgDD49EZFnq94XcU~e{> zHra`cu4x{!-TP%cC(-8kM7_D~)z}lup9ap`!&Iti0xzR%yw49iNWNit!S5Q2%$3bS zt++G!zFH{Jb?>9S^l7UKCaF8U%9nwzHIF8Y;(om!)U9xW%=tWhI~{PHNeG&Ke`rY4IculFXIG{`SoV)_l8yqjT#XNzESQ z@M?}Q@&&uptYc(_>82v@pQn$1vG1Th39TQZ>X!+p=2MZZnZQVQN5 zeOB4EtQJDgmJRwFHhz^+gS7UJO`;>&_D6J5$TKmYt<2==bJn$;<_N5GrtV6eY^$Lv zS0P-lfR|FTrf228$*zBpiV}O-ZAFKw-gu>y*{!Qu?;E@@^pyF8h{A#k|4>ri8Q0oH z5q;Uydf;B}M@5wB9iA<;3*Q@p{0J?uo|m}#Y0sW*Uj~8d7d# zrS?G|ZE2NZ$1QV5WJePs%2w*g+xB`pg9@`*UPssU>^mbzkViFJucToX%%gIf6X8S5 zdEkF)%A%Ml7OL~hva^~)Ya5*HkWUk(gmhTNg!UEoqRkx#l%E_de#tiA);akOK1vC# zVJtq}W=qZI%u;#ccy(d5JzIm%^p4|zs)Pep?oNVr znav*jt)+5{oa|437K-?4&Iu-KJ^9#yE&+KL|8hrg)+AyZQ+!^E8cMg@1VoR_U66r#i+djLQ7QJ;dllL+?BM7pw=xLLBMPw3|Q_2 zyb6JWWSuW@)tHRVBu zO~NUTb*Z!UMxkLU6d;V*NB(D@xo^1#`bmS(q=+LZL*`G0S68_WJy&4_*@Kzw6<(Jw zw}QwJc5}Mha~1ec^j{=;s9tHjxOz)o{`OpWN?-8u_-kcO?N_TqB&^8HTEFI$$?xkN z4^MsvR+p)n&4yu_&C3ZlRO?JDRkJO+x^xGi>pCvhelGZ7Yp%BWxlJ-1A_{j8*OZ@f z=dpci{DEz>%lzW_yCh1p@080!U>2nwYS8_BQUgh)#y7FSUSrDxg~mI!GxvQOGrP|B zZZ#f@59gY_B9-ciQIQ$~-PAb3j;&%%%->Qh-9Bo-`q)x3#Lq4K^)2Dt3_`2jINY!G zp_oW}Uv=yI((Qyx?A>(_GvY*jMLyfHSZoNgl}w>r43!ha;0UF%b@6hk;{1kkPWV;z z0E+PC{v+!4Hmx~KT&96Ju7(HAmk3hyQ_`jq;U-5zh8Y66u*CIxHTSbqO!fnRgl3xh zLRm=#$Kk28!f+z=U{&73&5D06PYFi1gf1G9xiytQ?2dau5@X^cel4SOAlX3b<9UgP zof(#tQ5`}Im&;Z=xDzX`eq?L~3au}--OpzB(+_?|7C`yWIgKNZlD7CMv8hQ%sEv$6 z3b3ieCz+UeS^JLMO!m*O?WX8Fj=LRZF2`-5L7K)qARCE3Rl%_it96 z^-gnVCuom*$i2^5A8uy5o1dFmLja{D>Yxb;!N$q&7{t|XumEwHeM6^L6?I3-Jh{GG z14{p`@fh}85^BqKxnHhV%EI5uHDRc9l-3~ z2uUPW`6t(<_VD;Lu{>N{uo2pH;JMa?tp>fsnKsy-SyBS<9%=QyH7SM7A3D19*Pisi_)lZ6Mw5pkbb_#8ppp^HU$3B#vzN@xQ2$Z4FWB&eBzt zqm8GR@NPO%b^g5D2;wr2hB!>B9^G7zk+VK)65zAs=&KtAy49$Z84eADHmz=S6*M4JXP}ux{mH;$0BpI<(B| z0X$-PjR=UAqSgm9LuaLA&_1$RYXD+D;Ei8LXkO0yIGV|rDetU*kR6W?+C#_qv5hID zp5tO1W$=~ES8%#Tj1$!l!zP^e8-KQA$`whqDSpV==U}c#S+ky^pCq$i@Dq!t{QG56 z%?^q@a7&j<$I7up1!{cGiH6_5A7d>*+%Y7ac0 z;SgvNcGOMH#mTGv^e#(#j<-9L?O|d3WzL&Tn0&f0xp!kimSpH~a*Z`lYLary<32eW zw+hkymZx
{Vs*~PNRRW+kNoDkk?(6 zzXQ-RI9#5-Sx&S}6Y-iLaW(;OX#VaE9gCxoyF9`+_KU?H`mU2fGaBU6&E?VT7<1n+ z#9vjZmWGTv7nq`si4p_LvtMAW1xSX`P8}xm*%5&b?NHEL(Sw4YL=L!GKOV5|B9+?O zs(LxRfU!hgPI=v`Xye1%YnWj?hV0o*?{@S(_5{RD!G!(YKqu>9C^ogj{(?j;YfGig z=n9wNtHo~IwmQY#06-Px?aHy4(Mj~5y*Wf$9$7f@$C<=${~34md?Xrrt+2iT3?SBH zsDw{mzy{<(G08&!bHqy^Y8wwAZ7C3V41dw#cs*02;rX-FaH_mJrQTo3^wa3w5=Gbz zcV=(S_dy83g3uwJakBfjTtWBB$G^Z{}Yc=g{Wc^JHTu-xT- zwDzIrfm<}&H{66Ub`7)H;V7RuzZ>Joc>Ft5m~7(Z4Gv_7mK%w(30XQ6su9IEgXFo1 zc9&Fi1Ju%226KzkFAPxNfnx%e(;ggoU<4i_J$TSWb}enI8+tAUs|1E3F+Y*!cTq_3bnx&o*;5JKC<&cU+Gpl@+y>Jz5z8fQ0D=c z*qm-pX(odvVYq?fJJY+H^2av)P==epmWR!;o84B$1f*dbn!E-`z6E~aiNeK{yNi!N zqB905qJ7>|WHPKdSED-Xvo73E4F}Ahz@Q`(2EW!xPp~v4>30?y!7qcS0fY0uz3W@C*a>KK!ZjBalHG{9Ztr`jQ@l^^g+EB>C-5R*j|H4^Gvueo%(KHO{DCP0VE$7h&!A6(b4z2_#3tc*_4NpGzk?;@J6SEO@w3fQ z6ehKdc977m9;8XA@w0%^Y#cr%V1$l5S|98a6gYmx>5Xsz?Wh|0DH%eH3Vv>D*vQ=6 z?g)L|bN=_;GaTT}<0il@L}mJ1v^wesMBhgFq|ZBAb7|gXQ`-?EwQ^;g7H5PF=leZH zP)EFFP=vAEg6me8ajV9`?T91rki&U)@tIUvF&(<1DMzd~PV)dnzJGWaF`gLzMcQUH zPrY*T9bp$$L+iNJUR2?uAt@w{a#IP?)WBUwWeH-zwa;Mek&Eautp9rCpOqxz!Uk@v zB_C>;S!oh)mMb|b3_4Fb0Hfu?&JNq`h6~^=sq#i6W{+Z2NtJKO-lB+rWoA;##!!6# zL~>@`v9u$r=(DZrWA0dhe~U7~B^WwPh~+asEJtp%bUf+RR@3!fBJfd9tYkW91luGF zHTrZMEO)&1OD&`w9GU&iQ6^GqF0-Ixaq+T;4OY8LA85GGlz>aTGn#kHQXHZA)g^^> z;#BNehv{l;uD(z_i6V6G-6SF^$szJetp!x22T5I4%6+<0$g_2Sb zM5HN~gz2+x`Y<}p$oR|uIrs*O1N2~d{ItGeuqhsp{}XNid-sAlqvb@tv(2C1~N*W+w1=_soKnd)4(SGKlw z>tfDNtt7+Ij7?y)0!Ba>U3&kyto=f8#$vDlwQJD`1N}1rAt5>a(zRyd?@&D~yJ@gb zJlat-;QK)#A-(P&uXaBw9`Rew^n#K8KHNB#(!3JnKd#*b-gQm)bDp`$>~x9@d+g#C z+a+kRa=l*vYT8`1YC$G<8M)oXJymcb`Fg`pGk<;j5XIT~`Rjlkq-Qyc8^{QAeZtz} zmflNUJ~|TDB63NOH^jn1c?7BrNS-PN3`c0=X*31W;cH)_3Mau^TYGHd0-vICW6!cCL2o3D55L6;<(A5IiGKi2Ku?KJ@H(hb(QP@iDW zfX1&oHd^kHmfM@XTRIRJA_i}-2IYTO@c-wbEj7$UqTcklwZc#VZ=}ajewt=1qD3iR zu+j6xw%y5K(Y0Ipn5y<3(zL5gf^Q#}>lt5=>X#4LWl$at%l5+%%+#K*ljHc*8S@D} zb0urb-9d@mM)g{9uqV^_&Seieu354dyFF^Y6^0s4SS+I#laofRvB`Cx&jzgLCwAoR zNO4~5lY0wr;>c{N#Px;AmgtacRRE7>8KwaX8Q7PtwYA~0&EO9iJe6(1i%Z8t`f|EC zD(9Qustp6(YwS6}x7T}qNk;^!{zxc_acF30lBT9v-nj7`A`?Z=(Ql8$ZUaI4Y0n`+ z7#bmqw@!7gOplZ9sBvQ0$jtKD;>hhoZVZuN?}QuiI$GLJ$YX5B=dckSd;t#SVr;6bYK+uNz4EPG|PVQ<-||VDnKyK2{GPN%7OtK7c!; zVPo^Z?Rd7Lv>H@JPyAziim*C^48GBY0(?FOh)tTG!`zo#cc!1qUc8#0tT69dQKJBzACvFc=KXF_I8|h@2CM3%uw_#W8 z#mB?~=8jOg3m(>RdiNNI$CV2 z#%z4yTJiQoHUWB?ULcJ}t#$Gc{=Hhq;A4CjDy*T(*XvP}E(a3JuP81(#b*y7hdGzC;93 zGb;iz`*0ivJ^_gjY0JEf4PFEhi}-6K>-~W_Cu8QqS`ubdDI|B90q_ufRr8W3Z2Uu3 z!>?G0iIH{q&*Uu;t#tE61&B0Z56!vreG8~&ZkYGCjEPJp;`#B-+4^dN5-=>#XIY?{ zjz@gZ=HTQc2@zB~d!dwYAmw_qsukU=3sxHjs&xZ_e!Uu0v+Yzmunp=KlF=Z0ep z7Ix9#G#)j$_Uu|Ggp0l@^u(M z?zRoZ>!m#yPA&Wr{&-W#mFU)_6aEE|pAUTelPMA~aI^A* zp<6v{lON{dIfZ5z04^Fuh6F@VJyFj zB1MIKTjRutvzO}*KQmI~GsB?cWhN$~(YfZ^!#SZYkykeuErVVTeqqSyMBTg`qCs`Z zhwW?TDzZ8S(4Q$ha-ydeshP-&^YKh-R31xvQ{UuD&9VRb2+hgmUjiQ2T(U8wOzS9^ zWDEuQS@T?Vyi0SY50MxIHYc2u-tWHtFz5#Fr_Jk(81P25I6$$itsU4p@#%T$cCWzZYS`4c}`JtvFA{TQIV8KvD4YcopzvHM5ZH{nb4SZ3QnJ=`Itplj%Z5=K@Q zJ_c9&`x*k5Dx?l$|2Gl`+47l!&W!QDvl09Gk(ow4arB`sPW5eC031V^a9MZdBJr9_4~n&F@7 z0virZg!#bYJ)b8WB{*;Yzx~6M5^PBb7+ei+Wy*NZ{?4o9%a3NAV2U%>+$x>H&u>D> zUy+qP{LV)H4fX%VDMXMX#4x5P)bJ2~PSD|1RNAk!?XvJ*9q?Uw7)AR$XlYT|q zikV)|1-i3qj#hAMd;zPftO*5ld#^dvBK#+#r_KVDj+Vl1y z?Bai(Y)tiU{4mW7eD*uVhbDbte`295whUC%Z5lOZNYqmr?J%0c#kJxjco(lxN(TaQ ze>Y>!or+s+;OQr4{IYqU_M>Gjf8uI~>jT1?ydJispU-aZm+n%1u13&#Yt=7RsV6wR zEF1CgFk7or*gt&&>2oFT`%y})4l$>0XlN#9!iti-m;rU3nYl-MhN~5hhL{W2loZqT z_cPd|Hvmt4ua!b*sdLhg4#6j~?9cp-W+UlLPF*&>?bJ=8U}I1jVxAX~K3c-LOOcDg zyw~od80a1og!kVd8En2VbZ|5TUF7rrm;DqpN~ z!sbXLV;1gF@UJVZ{p0qdkw0_DVe5I+GbgDg6Z29-?}Gn?NpyFv3k zDfRoOf)cu-$(-@oi)}cRq-`#Cx4OsevE!?!!>}R;T7@QYL}+O5V#@=-bb%_dIOcLM z2rmVd-&H28->A(=OM=_gz*YneFSy^<`{F%pSCqRJZY6U(iQ{M7F#b2Z$@|Jv)$_>6 z;YO6Dq&}>i*nZfh>$|*VJflhkTqaTxrK5WOJl-7e6R6iXyd*VxZ+S;D-S*(1efhqM zk_lY;F==+T%BQD@-}5(&^PUBq+NFkivi7E&FAPHQBEqZi^4`^#=1gBGp$d9VCSQ_9 zZTvvTq(_%V=6E<^Hkz+e<9FNSxO>_1*F#REVMw*5Flm^rNNhJBW7Km5Mb30{WP$#> zk>m@{&+^#$3m*t`_`KN=@x_~7it`suDu#HFfG&EOAb6`U1BCm}m1XMg#-Hz7sFz3H zL7yV@U*uWpwb-{@@)IxUOyaO1sbSOWHTj0P2;arAI3-ZRT^{5;QQvqoZJQk#-f2%{ zp4%Gg!v6Mf{MC+RrcIzbkvDn#XB@pyGfxuyq3b=k2PPylyaO}rdwF8)2QR@`3>Ycn z&ZnI3UU!PX%ONVq`rg!N^F+h;iFDy|qLQxnAtO;*lewYUdo&*HIv1PQv%T3l9jm`@ z?g;jop7q2^dB0HG{#~tRyiM|Ep(B#`>#X|-Pt5Rr_jsOewk=J`uI$F*bwDB>Uu2%T z^_%Q(1X#(=K%rt4n$=yNlk8AV<@x5P6$mAY?CEG|#AUlpb1?|_Vs^wii#h-s?uug% zjyMKNyEXd5-^p*<)TJA8ba0Sn)mRGxY z3fWvnp=RPq9hJR2>AoD(iZELhy}-rG(yaN?K3(S)oIzE8czYz2+F4!MoogjHej$7? zAz2b`h|iH6rIg5HrJCXf_&LKO8P@fDK{Y@Vrkl7>Ze*;!`3S1rAh7>!?DRd~j%7IX z=ZrIwKho(^b^a%=*J{BW(h867QQtp$6_)J_1a+usZ)^>&j3ysl1)-%2{tl5EoDv*- zYG%Owl=8RMHRe^iJmeGuLz(N(NFMq#mkk^+c*eL@0OcxYM($0O({|K=5kSQ?ki#Y0 zj!(AugP}e|461;g-ttXw%$_lQi63r??>h_O!xR1)@%F!|FBg`}!sq%dA`y+6TNgpJ zK||6GfM@m=;-w>`4Z`AEN4_lzxa|p68Qz@Mw zS}DbbXhCbQw1B%akOQXer!`@C=)l0($$;cbG%TK3SIp=#({HYIw*1RT$2XINU9DxM zf3x-fAVB;YBjq50zsr;X0Qf&imG?H`ced|P2*v+%fpr0_{9i9S2DcCdAIPS-2I>$m z?@*inD>ZC0hPR&u^7;vL%rz9q^gL*1QKX_OjAQ$T;_V~c&#s1A84Nw3By8#%`L2`{ zM$C`T{f~LqKH~zTjs7(Uo_^;0&Si6)bL2WuQL*{%zru#seLvcxR z$0!ftz{On3iXbd05~5ehe;wD`pDsiUl-|P#TKqYN>uPIzHZc25Kvj(ZvIazzlw}>{ zGlV^)+Z{Uxe}f8e+In47c-M)xp6c`2Q#fe;?Y&U%&*Ym029;$*Jn#`_u0SCa<4&8z zzMDrItEF7>Pe709cW*6GgR0kujW`?}9HepYUnY};zdw)q^CL+JfCn6Y*s>F-K#|Aq z7Z~`m6ajEa+$ca!x(nG%0iMC4h{eXgWSR{ZpuWMY|9VcE4Xd2B}_>> z+m~e$OeS+DIh!c^xMKQ9#bSst*mF=1EG*La(MUO{2zW-{Ob1rs=3!gcF0-Vn89>^Q zOLQw*YufKY6hSC%jX^-Qnua*T18k%pa2P_WXc6+U>XroB2%3czTT zcg=OXVr}#4pHT_#n*nkUr;C!X=@%BS%jE&`|NfhUe2@O?A4Ju>?zjCo_(KF&J0z!} z*(Dq9`jyr%4bAQa`%V<=eO2*@V*WhoM&Q|5pOYo?A-2VH>YZ>Evu!)z^rZ8pHjw5Ae=GWR6^j9wBT{19WN{UH0$~pXAHu&9O7zmG$IX68FPB9(Q_Ilq{D{^-#weIpu z*DR^B{COq;mJUUck>!Gv9QJCaH?)f3n7|M5!C@fd`1c2&!|;&)*EU#dC{BVi{(q+i zLvUC*D3<>lWs?vJa>WO-7Tc6fO83lE;US$XijP%|!C?;I;N1Pp|HiAK?-U<@`hN_K zJ`C^azt9*6m_mr2IbXmUlGD%xnN2)Zy6HA2-rk7)@geSai>;(W=WF%m}ZzJCbp z9Xha^Z>E}vP|CEs{J*SLc>8?}I}5`jd&8(0sYZ9ZjlWTTKw!%*WDER$#KzD!D>XsL z(ia-sf3RHh7}`^#Q;ka;-bI}0Hw~u1ceA`&00l2j>mizyo8hpFPet=y7snh@YRr>T zu;YR!OIYA9R;egBtawl%t%frCx7u#bW&RWS^f{&xC*yw7vS=GsN=i!03>(sT4NC1) zj-DbHP`;$=_<5;O84evU4rFOtr?)CN*eKt7TJ)wCY}NO8dCy$`bcYc!NFnXaH44!M z4dp5%SP-CxU`A~Hbv1e9*v53vKdEd~oztm?h;*zCU3Nk;vn3e|%OyUtJdf83*tu)* zOA&Qk3QD6AeT@q1+gAb%RSC@sAsD2&v79lENSB}=5Lk#FC(yc(poNAmCC=sY0@yZn zP+cJn58^rlJQPp*IPo60?CU-Blj>yN9xKGZ<0_D0_Pe=qaCD5je1*oQ_!v~0?w`Y=)3!#<_#8EowNx|gh%4OU!F^=b zx);4q*V064oJNZJ?L~<`kd+I@kjwq^4F&AweCvuW#-cY(Z_{|*ONba58Cl+mnL`1x zC+#g9Vqq4>81SYI-8hCyWX0Ps7(^03#Y2ZtO3mj#G?%X^*Kjd$yU%b%5lY?X65ybjdUsK<#lKgefJ?>>B zKjau|5Z8i{P{*)G4u2hgx+7r_scCi>D1CsYw2l;{1BUj*(XC(f^E3_K=OF%m%4;{l z+WG;A0BWh0_!H#?f!bvv?W=;Z8&qFgFPxJkLy02Mu4WvFtmWD)^{CLh?bzW$yRpx- z1^4d*m~9gXDJd0XQF*8r3+w?hewi?{&b`@vtfZJ{2>Dg&Kd>!1Pryuy_Q-1Ge|3vWnm=N>TAsIo1{W~PW zY*(vShxm5f=}E(*bn!nS`2C3rsQ(*l9MDVKOj(+SD)1X^rCzHyn;I<7SiSbcoIyu# zJDEE1|7Bole2es>Hn^=kSA~a*2`$-lC__g;go(r+3xjhF_5Swu2Z`_FDC{N+JqD(> zU%E3%6}ta^E%7u4x2MAg4Ox6UgrA^}yp)&B_~hr-Lbe9eN-$ycQ)J`x zF8t*yFhHM0_4bjD=6o7AM#Ca!j1l$wQa-sw@l2K<^itHHZ(-yl+BD><)H9*Q z^oU*f%iNEx!E%`nn`P47UDM1{cy((3U%W-~99H#qjzA#_t|<|zY0(La4F3(sz_u3f=vF|f67LC!%pdzAfzv+54wsucag=6J$IGCjTpEG?|W=WO~pAo1bZEb69>gFfR zD?%^LJ}(l}@LA+j7QVvaBQlC{0bB=u5XoS#y8V5mfmt8=BY}CpF@_W>F)QYXBz9_> zbOBIZ{_jnhzJ|L<0G;JEg9TXUPvd|ldd95h>r{y48-s0(+6b}}vK;jaJg9Ev!$Tt0 zfUh5mvgf-MHYV+|46Sa1h0J{E8hp634L_1W4dIn(_EUvIRaDIc8fR_*7x;ANy+MKg zE`dBp$(Q)XzKMCX1pkR%-Pm@01?^-|{GwCRdY$sKxtobTT=O@Q{P@|!o19q*UVUGr z+wq$rVtA!P+goP&^}Xh{9XIjS)D!hD5?TaLjIfX+2*7A;y@s=)2bv)fyX{R~y7g3r zP%pX!i&g~-i}sh`$IeO17wBP!9dv(gcEQ%xy7Oy)_n?bn#%6=Yo6+YOqE6%`jI6O- zyYNI>fjrQHHNacI@`l9%!?q{cEdM-TYxE?CJ(I@@%ec`Kf|ODe%idp&Tr1+r#Yvc+ z9=O%l^-hP~B$3zX^mHsl9)4W*RxZwW!{%z_8meD*j^BJD@amgr-Y^eQuT4T#dXw&{ z6!6%f9si%`9@G{Z-vL%V*Cb9Z28zgm`6Pc9l_ViS!Jb$NjCbdkd(HGlbuOQEE8tPC zXKO#nnQ8oPFXt_(mKOoXMBm9%`#Dx5EpF>ozuPmv9MDeT)a14|$L+obijG5hO2i&c zH(MsR@mriVj0NaKtg*z^fTc!yyQ_Lc8z!%H5FQ;=2!*gr>%kD8@S}QvF2C=3obv`B z^r|Gp)t-L>3^(`hL`(Uf2|oqe-~WfPw~VT4d*enG>F#c%yHi5C*?`jBC@F|YDM)vB zH%KEL(hU*2_vIy96^9TgjmSZ9v#-GwdHGb~mU0!O z@2+o&%ZdJ2j*FbPJCl#HHbFJN@1a*Ry(y57>&a|Ke_c(Pz|;o!|ElYbB;saOhnFI~ z+LTU6tVvIat$i*(D0Gr*FZTz+Al;E547%(v)pUH=meiZ- z*iob~UyO5dU7y1Lf8p5;jw_u6c0>eH!4c1cq0leZ&1oDZBrA@xigaMSYS^q1D1b;_ z-SD-D3KCfr%t&0Gf3#lkA$4@-7;JXyIKxA$vY?`g@#+34*wNsA!B^SZJew(OUAGLQ z3wwe?Jmz?QZ7`2#Uv#c6NwJ~s-Fkl{n%3t1|t1) z(SJ`6pdNasYA?6FJKgm;>_$nIzPyrDZKp!YH`0Q&qbw4mfQ7u=(J?8-?i!^yDB*6xN{G zsRqzvE)XEz?X5KF0(`1wvAVM^fDK!`ZeDsLXLMx=YKoTsA5D`$Fk)05yWHb_geu z{yc%KIZP4t*HXJ!XIB@eX*Z%^yUiq>Ac#OIO9NA|Kt1x9YlJ{%P3R87d!n?*|$t~Le#3y219?laR=73&roSW)<%AYuE|B$wo#E` zK*4IjaWZRFNW`Bds`(7zv0!)wl~6Cd-N=@+(3FBx0i8MPWXspo1PCfJGFK`^{EqZb zUpN%+s$s+0d;s%68KKY#=}%%le)SZh)VtkJdgsT$Y~0qgiH|XRC@VdY%W!I~{9WGY zG6BF`FE6DNlYZ6m4!cGBo}n8KqCOg^QRlxc4oAzC7Kt{`H$$aN7We+PPe{8y|MGB? zu6mu-DygvvnUQ3aBX8|7l#M5p4t`!seTr3())v}3SDv*n=odW*GkS%TjaFVfoe+nsS`GYz(Cm8J32t;ayd%^Ld~K!fY0tHB^WHvr9!@z^rB1` z4~#yFy#g0a7iikV!Aeg3+m99OLjNdqLezKh`hegC%F3=3UdqLp1OsW_D}7VUd{AlU zs#2g6zypm_01!D35xzI;4U+)yp@laXNWPvs1>7_PR}>$CGy)fWvd_iywzrme%6L1p zO5s~WxdO9<>CfYfBvC3GWGj6nj}L?HUXGg;m)xB%pw04&xCBGbphbiSsj~2Fqo5c- zEPD?3aXiPRc)JS5RO7VYos&!ysz!p=-uU+N$XTuko0fbYsEpzz^obB6y_is22HyW_ zXkcS!0OOrv3DUt<)gK#nboQ&Rfo#&N67ElfJ){n?6}D2W&8cZ1NwFs5k-6G2(iu;bh(?1pB=eT5NwL6*g19IFmR$M0-^-{l+z{22OD$ zCb?RYaFpI8ajSX@QNj1;VS<@d&kaf6eLGq-x#n6U^(T#qD z5!rs{Y(HBmAw-wKg8P*GTfvPniY~K4SXXa5JLd$T05s#;@I95Jv^}zK#sQIN4hSkK z&-nq7jM$x{0^a4X6w^a*63tr&-8sdo{yu{JSTwT1!u`QOfXO8jM##v%xH;J4W?T3V zzUUFG?g&kCt19+@d&ZGZ!nbR|CI0lA(%iGGDQg=;{V>f zuzOoC`%^@FD>gkZb>y4^>fh}F0H&gzN|#gth_AqQ2@wKAm-jrBUYoaTPu1NT=1A3> zGRe8{xo~?vC7#P|o-Bp$WOT*v<~z)27v5DrbJp8|7@Gc7(tLZF!(%)4(DUi8-FQ9Y zp(FXwzgK^5_08-Z1<*Pv3Ij$pS|!+zFpiQjuzM*u2P;)$aKdCZ? zE_;2~?{R5b_-Y^;O?r$5@WbhKRB?AW;WjU~S zdQ@MG*0vzuUeo*)1OW*NX>ATE@Mnf6Xh=5Z_6f%wycX#7aNt4Z2}W0l5&$z&>}FSw zjQ`aELC@a%p?$;UW}{rd&8=988HB%dCvjz&55zbVaxFFMf^jIG4gm+IPOvm)YmCwA z)V;ELo<5jniazJ&=S$gc}NG zLUjxcDUPy(DI#q%Jp=(HJl2$JOMntoZBvvy%s26mio(1yB$QS_3NH!VU=Sx&8Cx!2 zTwFZvG4CZ>Qyl(F9Y9=!QAy$2q02cUoo2WHxZB=twslm=QsDl!UdMYNfgI0$Vzw~d z+Y##U?{~yGOVacs=%1T0I&h~CSjY7w4)|T2SKI##}`Ht7W2ZrBOX9N4js94a+zawvNjtqx9#CFCkP1iM;iy6;)Kt)OQCG!!Q*`-E-6g3}oeK^c19 zzJVU=8)0^RC`~pQj7TbAB`0Rg+SwSppcHS0C~(*09Ft2e1&-P zB$f~|f90OB8Ui3ks4~zr!hn+s#yMf2=EQi%fq^VK^CEIjyAYe696{d_$&i8q={zHW zq>4gWuU5LxJzy>SO<&zRXA6v<^{+lgT5b8YHT}Mhv>tEb4G7!utCzJLau&meVoS9- zn(dJYi{9@dCNCm#$2tN9-kHJDkp{DfgMBsr?r9j!biISokI0U!MAXkErcqV%z#d~E zYPQZv$b2J6N=j<}Xav*){h{!g>@|@VKwEVD{Ogk>x7u3{a=-c%`r9pk!3~Hn{QY>XgnC?)Lp$YGa8vHE z*!f)s^a}~Po7!y+GebEl)VZ|}W!ZP%yiQb$rmnW+EaDiBDA)ZLmX;_$6!mie*IUqw zWD?cP1E@L*Oe$tnvL%{X+hSv|4D;%H=O%)bG!|P80JLNC!Ht6q-Q?}?5`=~)n8csU|%kg<2ES$hg+ zA~$&UD)<}RudofJub)mL=r=H=&D?A?yj$_b{HR(z+@(c1E_foSr)M8^%+vPW$vo z&6mMAJ#t7f#P*{bkaq1?NPMWD!%i359N)^}zp~D4fQ15RFChx3K(7;@>4nu(Xe3?- zu?iDJA^_F*TZK(5tu*WoIqDrw68}%-fi_L#8WOA3Cwhs01z+G zQ_4aa^iHX02zs!u6jvEM6NlGbZ)PW>LC|UcsAiPXkaPcC{qo%|PXCMAQj^W^NCKC{ z)JcCBOd#I1qgD96=}+BNsnKsM69+sQtc3tPjrJ2H9FX{Eq_Uy59!A7H*pGHg%#IMv z0gENviezYg*@o7>J~SSLD}d)4M8NP?6O7*zGxhSOPCJ-&6yTP`Icg=<>-?k9bW)DP zo$c$EbyP6VLD$XF$YEfV;9^yDGSyLUr8sAOcX5pg69P|SX_)>=a&-SMvkw%iU}uVZ zGpqx}oB;Hacrdj$->9Kd`l6H$!8vJBkV~6cmiD-{0;+mz0Wp<>p&uBbX@^Vskmapa zqjtV9Hq#_3@9WgeNP0p&RTJQf$9imN2M6TG>JVbDb-tYn5oR3+i%zen#9Gq9%V=oQ z0iC(9jH}W5zwktw930hfX}$+ab>w)M3Z|}f=`~yt26zXuZGV_XVWsG}0Hn|#9t7O^ z6elbix4@3<3r@4qnU9&_kq&>j3qIzE?9QCnqFMpiAM{>70;A|7SEwz}TjY8_0a@YT zhdQUnPC9Y80^%QY^5A*ZT*?jF84-jIH|4G(hdFBK+4Rb;JJi z8El2U&H&UiCESi*XqeC-J z)8#Fj)idUopQ9=`!M$X!Yk5S#{8B053&N@&gEX9UNMt0%-I+E#(R2{`pCz^18{-X+ z7GE3SlAzBZ3x58J`sf4w-$J#_B2Nz3d?5paCQ_h>oqi+T~9=TY4 zj#WzGDQ;oD|6RXCy;F(ze+qR4mVbc~(7TcF*>`75{)U}18|j#cQRM#;rWrtRfVNPNwdbWmZv9 zu^!Ly_iX8mcp(~MvOtQ)4&JG zOf`V$ji{ewC{o*}BuqeLL*mHK28rdPl&-cSt{P5f3Z?o|FEVEJbdUwuOt(PL|)s)7?^kgZN>M~l=P#hkEJPeFA>2JA&dG&J_V&qd} zYCbqLW1rIMNN@gAGR`Ga9gIExM;i|n6h!yA$Qzt5Mop5a()gf;J8dJ1ZdnOvivfG^xu1$I(AN0KY52@ zP>4|hkiaNt;#1?0qjW=YjhoRLsrvz%%91-(qJifrq=1pns?%`w_2ny_@~tRNtRc2w zi?p{pyqE;!-cc6cg$fT^!e-G=>PVX@hdA!~?%W!#Nd+F3TY+*$%c5-M0yp2Sx1r_W z_hEcXBIhTP_a}q5Rs&0I?p8`(z0LKRyYB4XH(*}Pf4&7955R5Q`d>!PR2X!n!x>O- z6oW!Uvmn!dC3duxEid4G!r9rg^l)9#{QOzQN_X&3^=%ik zmD5qDt4PCJm_+-w=uEbJYDCfZ%H-j~e$CR!NA*470@A_0-0my3q>aboLL>=m)j!cv z%^t3Vt3~_^bQb~|80~kq3*Kfl(WPsjHHACwvT}I+fY-TC!7Q}=-IS#~V@N3c3TcPO z{^QVd$*DG-L7<<_RUt0et$1P}6NX*vmL&Fy4rEgMXS|Rl#z$649&|$i(qNjEm-om$ zL4495`*zo@`fn&6jk1ykgfi0`pETZ7w>&Ve}N@krF-Ge^Ej~e74Ped>&f%SXS1&qX`nvnWaT`CFeQdK6$-H|M%)lhp4}M zC$PWRn)<8XfnR6R5Yp2}+O<_1+MsPjz~=8qh6@<00{!NTyfn5SEn?K{>(ez3&g@IE zOB!*#d=;Or&(Jtwc6kU)uQzcNLTnCxP+9ARt%`d-ufZSb_*Qqdb0&T;*fU<|$;Wwt z8NNv>8$C>mHJ^vh7h&xuR35F2q$R%m{e0vk^b6r(5{(?}1dKib@7@tdxjFZqLS*UJR*V zPv8#2EJP*iW-s9y2|_8bz`e4pY4r4F`;bY%Q6F|oK0ffbWcO4Z2*XUCn3opL*1&L) z`-eyZmKW6umqSN4zvfhWk;y!nlv?us=}AhFkT54%tU(}L4|A&bymG#xnJU%70MtMq zP^hnqh>dt{4ihz^s|t8i#XpxkcjIc+z$O5azR4hzx(4fJl)lvz;^evT5Y2$`7T{rJ zW#0j614-Z%7zYXqqJh+$TB|W~cV}oc*7G>SmUmR?5Fn0P59|cT@LTN(H3NUD{^^~Q znStx>bbKbPmAO;GS`+NrUh=*ltMx0$d%MVNWhd0>TCLZhacv}bK9eMv z)Qq=JkQ5791x;euKFMT6M=HiGkv$m4=oRK1U32V!zf)pU6X5&By!LnSf) zR(hEEZWLlBQ^CRvRmURx?e7CaUa=D=5{h5Q%Jy#qfvd$5A%)`c4Wz(&sjby>k7%Z6 z;7`TRyw2 zlhpsw&){y>KtAlT0A10F0lt zUTkT+Z4nj2cgT%61CBTcwuKTA0JJRB1vG?lNk58O6=?h!l^}+qi9s&;pKr&nU z7n@v}$B#f(#>@Id+F3^`(%8s*o8{=#Uj5yUzFf%w)M$b`Xyf;Xz}w4t$~J31sM> z?+6GNKVu!Puo?zksrYRT-tN3$dTfQCqnjR3q}zyGXY`)U*(h7xe^5ZQl~J^XvwNac zvkK;tGhFwDwEN?_^Xj8qr`K1GE+pSo;WNJAL96N{X?gw6yKJH#@P+Lum77pEhn_zA zACdiTPInLsE>*}lnA@3;cvP?Hn>RrU86=ob-keH!N5%!m`>I@OsQg(~y{eWAi!f@u zh~N18H8K(J2l~Z(P70d2@b2Mb=@03x%bA57O|QLt7igM8zhqLy)+c^06mQOVZc--= zd7=w9=u%ugDN#)Pvzk~1(go{m&gLLD`v}@tfFuR0Z7Ng|PZWf%jO?9&p~F*!8)>4q zAcla*-Gd0bm6eGP3M8MTbu*9JSyI2Xh1~=dq0BR|NJeDTN4W@-MU@Y=G zEcRncwBH`1fZ07%Lnr&e2*ni@6~pZM4IKAZV?GMmrsP8wBPlQ1`nrx$F9)}Qc>i0D zGzzJZ3u38OMZ#mFA37sIYd#a09Sp?I?5a}dB$boGfc$VKu{AQw0odu%MzyxjPsc-g zmp|PD4Os+%e<5;D9h6M2+`gv902!=2G~0E01LT)Mzh0@^zI zJcW4VcxJ8M_WLt-T;`W7)O?FRw|zeS;uT8VJMU6>Y|LA6^E>)hu zsXB*JZ(<)iwtmjDNrUm*oYCjJbbu6%FmMQC^-1zMiuW-Bxv>{9Isf4Z4Ad^7xVXS1 zE7gC>N!BA5zu~+AOv15j!=G&1~k`}|1d8Sd>5N0pCq48QX<&1O0dWA*tqQ~<~ z+HSST5a-Bm^+N%cB#X9yI?Q}YtygP1cRCFhF8m3Bxcr;m@Y2DMv0Pu1KmqEoRoxOz z#_e0g5aFd}2wLbumxG5ooyA5jj#RwB#RiCsL3Bk`|#{v$v!4d*$!Q zQ|oqD>S-f)bD&<8j#-LVx1K3a_goin`K5Lx$Hl>+b{_d1Ojl()_?G2YyBCEa(M+LHHD2yhiDUn^tFR3N_Mk8Hh;7;NWlZ2jbIvErs_icdviLdXrg zIpgtqo8I*}Jsq1}{QEXwkp|LFY?A*yCLrNA?=SMAj?}>>Pc~$GXClcZQ{x%-g~UwdGey&reWL zHkaYZbfHaBHY}3^(%ZqUMMni)YJ=Wm(VBJ5gv5k~hPFs%SgH?=$<^w7T->^2* z%Cc-IwzRL;Gh8(Fvm3R~ZFnmyD_E|8NZ|&agap}le-`>$%Msl)G@~G$K3`07d~`7} zv6_ulVMYZ&kly$vd~hgz;}XM&!}ZTCJ^YdrH+x7Uy$xh5(K0_6wIs)bl;d=9T_l@B zt`3*OIcbP1$&sUqDLIvApwi`k)-OPwbfjC!hL0eh{ybVr;sn6+7AYZhkkb+2O9rr+J15&b6H5t$#X8Fo*Y$nu2cLT!a>CHQ zj_N#$EKx8x0#pdgNI>mq2Bf8rZHP`MbZ`4Pr2j}OpgvYvYg|O~OkC6gLEDJu*e3^P zSow3TF~y4{4nsCBYSds7&f6r*g?W{K$U>kt8_9TvP_aa!5+*xzvvzbno+RM?I*$v= zPaqJeGKF9Z=MhCinPslmY5*3q=%)x6HIaJK+gKy5>7X}hnNth2IU~Xmx7;(-W{m~C zwD6?DZ&87rJLc#CN)VYnI{!5eRih?ep;Ao&xXcBlG9(-T!%LIf0h`!~GAsgu86Y;S z=NqbCt1ep9z5b!jX6Ax8%@0(-jpVX`JVJ3>HXG!Sb#n26i5pApjT?ZqgUrrr%S0n8`vkGT-^P7$D>C?Im1fE$g} zGIO@yJF&>_s#PkukJN{NJQWwMiD+?3P3qlZ?5=!0-k%d~ z779T;2r1~SOLR){6WH`3u2AreC)Ninhn~WMB?mENAl_r>aNAD+Gc%og^Cvza>Uj&i zf%u*Mcib=y8>&l|H3Pk*1PDX8E6aKm{W%omFKmb)XdHUg|KrOA4W0tazqVe0?1AhA zY>LTbFrXF-{R3q?T!~mPAgLL6o7n&1#s4$YfVh%A)vvKL2Q-}7)NBHP3HRJn)5KMfN*LO<)Z|5|<{Zfs)K?f4Px zgoyK&4E=QqQZGBk;x+tSr!%nGEG z;*LCKV;Pz4GJ}wC*u1#gnC~$^K-Cz0_C=VS}mjVCCaCxTdr1QL%CU+uERrQ82?%`9)WsYIKqsR3gRUDy?8X zWhPMY{Sjiw%$Hq$thc)@E~zCf(hMa)oN!v^M{=C!D0Raby0W<%AeQNQbv6g4V?#ya zkmEz~GRVoe_XV1!p?j}qGOYOj`JQ3pfT{*dK{Jlh$u^|`%mioCZ}`+)k9NQvt?;R# ze49o%W*aC#iRz67{|RdG=}NRR3RLoY6RX2TM)7wMU;J@5elqJtB{wr}a!)*^`-a$% z$g7P(3n+?$crph{PeE`6%>*=H>fbC8sJ9W9?A}m84J7rH2X2?n*e@GuubV6>rJl1y)cqL0|NIRq%fbtlxZT&u6^&$K85Kjb9RblHO7jRjzC2aiOE5Lt9U! zlVp*u?r)2U%v$I`kd~PJ1~jE?lBiIDOmDAVqq9Yx&??Lyf&eTzt5sd0dZsjDhJ;^O zeZccIk0I&|bbI3vKPm>k#0q`M+03mCXErk(jlk~ew4X2sOKE{dRAwRrfgaI$Qny#1 zf}uNb8H0NeifdI}E2Jh_08{3HVA1Uc>E89H6caZ{vVf-iM3@hz@RpLM=w&~L172YS z&|fAv9lSHH(5Zn3dI#sJ*wj?Lf6uHgGUP`=K@}ArMB#H#sLB9tiH|%I`b`uApQopr z*gVI#k2z8wEmAB5vm|;PYtcl%j?=U%DckA6pp12AVoF1I?$1xi=HV`$%14|>uojDjwc+{Sn|7ynP7)10SRJR5iMy#(-f&Ot{K%<+=&A(-8m7zjV1%Im zQuH8DIi+oRutQZ0v2+2WvphBva)teJFa??A#!Dm}vgEg@K`={^KN_5JJ#lq`6*#%C zO~5`-4mIa=yT{41MZNP=52$#_YyU(3eWuogC)xXSQz9ZS-xlJwKX^l(W4C{a2DJ-D zFN$A%Zgn6E_VUTUD0%(?_$P-b&DTed9!}+@BsBj&eqAT|I;XpXAFLBS0K4Py;Yf6t z2WuY8KWpBp7kH@Ng2IVs4PDYfERW$k!BoyE9#FT5%xloty~n5-!bbkW;6(wh02#=b zq#%|q&M;=}V1kZXL$<_s0e^1p`+$2Z=KDZ%$=chjJ_iIX+@?5oO|xreO{XHHe5Qa4^AG#olys{Yr>LzL>`eb zSrb5hk2Jvw89710$Iojbz%kGLpL34ozuHqgCK!I&U#QLq>w|S`B=I&MTs&hMwd{w? zLU;}y|9B{p0 zNhHwTF4MFa!7(b0`f56d;MiHhcZB^jml{8IM%7UE3O9si|57SsftClxMcy{*NwX&Q zvspxiq@rnDIzC*ywA>?g~IKtQ9*PtQ23uYy>rA z%9eOkA*^efo1AuOTt*4>I@1lKl559-^L3nM1tA3|Oe4okk=uRqTMQOTlWEncg