From a0dd0fab64612211b1964ef1e97ea8c427c0ac07 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 23 Mar 2018 09:48:42 -0700 Subject: [PATCH 01/18] initial copy-into; still needs alt-text, title tweaks --- .../deployment/update/images/uc-DO-status.png | Bin 0 -> 72344 bytes ...update-compliance-delivery-optimization.md | 41 ++++++++++++++++++ .../update/update-compliance-using.md | 4 +- 3 files changed, 43 insertions(+), 2 deletions(-) create mode 100644 windows/deployment/update/images/uc-DO-status.png create mode 100644 windows/deployment/update/update-compliance-delivery-optimization.md diff --git a/windows/deployment/update/images/uc-DO-status.png b/windows/deployment/update/images/uc-DO-status.png new file mode 100644 index 0000000000000000000000000000000000000000..d4b47be324150f3878d02d013b36ed7b6a033456 GIT binary patch literal 72344 zcmeFYcQl-D+cqjlbdqQhLG(@-ok;XBdKooD8;lmc6TK7BG7M3IF?tszq8mnU(MyaT zy$9KoJiq6ApYQ$lUVDFQ?X~tl`w#cbJ$Jdz>#WClT$gA~btMwQ$Anl|SR~4?Mh#BT)5+=tt5+8KJ?_z39gNdnhX|JRU*-~`CZI8!P{4cZdh2P zoqzuB^g6?>u&{m?D9g*}dYkUv5Pj6u%h({2T$=y7kAgw>pxMsgq4{Ab)XjHD>IOC> z4WM(2*bQ?c{#uAs{Mhj@x9g$G9fb_pc12#=T%BrF9$QXc-cc4ARU}u{<5yk%EPBt3 z6<(_3;uk3Je6d9!g_W@dSN*1ar%nC3W9AkgNHTe@-Tux_P5M=RHoJ55b*F9mtEm^g zJeH6f%lpCk)~oBw&_g}REqy+UC$?=H*Oys4WJg_>7i(LB8Skh-DRXmVdpX2?1a+I& zLv#Dv1~a@hGEl?1WTwq)-MG-5{ieusCN>sHklKdS{X=BlqPNkSQr>g~p|=~${Xtmy z0~k)c(PM1cRH)!eQ|sRR7dME^HNkN( zO@KZlz*?Jq&_S0QuLjHs1Da|JgmzkjOTmRXdEwE%w(BSe`pqQIT}p8=DKJ|zloQ^U zo9hh_?aJVQ)4cGW*Ayv_H9{au$0v+=Azwb{r5XzXm^+;c0;GiuMo}rsNnmwSlEbd= zy;nXR%=6zOKi!B7Q@#BAkbu1ibvU;uR2|(S*ku1$=$l_oHpnMOVc=Z`Wl z``4@1-3;qMAHJDs!Em;VY3c%N#f>f$v4&qo>o?9Z6p(fSrUmG|5pk2a{Khw3=Eg)j zt-x!2G|gkZEMZkU}**q zu$zIkJD~#r=;c+uxS$Tt@6?`T5q*k($v(lOKYo<{A_Yip)4)6Ds;#b)EqJSCE$rG4ONqSVSEKk)}aY#tP;yoc&j)2#qO0{a=~7ghTpb@qcVr|p8p zaP^$zO3`npZy<{}o?z3~P}dJv+qS`UTMn9y60T~zti%J~Pv1N27W*VBbIW|soGBF} zq^fXj|=*14&7wAI17yCa%-gQ^CpAL&4CzjY{u z#azMbvaWrz9-f+7o$>)f0CT+p8r`@Y0zGj5XQvG4jNdxW>)hYvB^Lz8t{fTAOf&mQ zsL$F+EX0nZxCUI#mfNoi&4C_2#Dr1w97+-*j!2fW~8cyLNMje(h(81hZYF{32shAF;{w0|{k$WLzqFEzRH0w>`?R)M(ng^miKY z(CHoi{#1mK!$$?i<~@1pRXQ*H@^>;xjRZ#>jeyI_&{xAwPGRe<(w51vBC^<>+mNbp z>gd?JRpQQlai?Xi$7zkPf-C6fDH$pTWL-9?7h&mRf;i4Y@tA2LV&8{pS{I_QoQHsL zK^-uVK@L^{9drj0F>^@gaJ3LZi6o+bH+=7hBT;{k$Yg0Cmuju}qE3 zn-FzL{{Qd=08`)XZm_Pw15MhG=xShrR}QbFw`2I9M#K{rfTlJ z1(e5F(eaP7H5Idmo*=J^0+mIU8kMZG7Fg(a`JxH|J%iRS%a2+mHc=`3@xpjnp8q+~ z)F`!Opljko{@B+VnEu`0 z^)SR%3{czaqiyCh&4u%s(?ZFo*{wCiBb`f=VRJLi1#IhcCZNeJ942*d^$sP!P;Tq5 z$6q@#|GK&IX2wiY2&nT<<)B#}^!XDiT@bKOyFgZ-xCNgoGM^NaNNU4Q;_%XWYNa{- z8LKt=Sca+PtQFTIAM$*87oJlk9RF@E(sq4U-8I|gb@elfvRWs#KMCbug$%iXT9=<6HmJe1`q2b0VEj|N$lYiEii0}{ zOUJmWDz+2&S4IZjf86ljyyTxz{_QmX@1MG48n*J(HCeS~=#}CB^*uN^O_*3w+;;ud zJ8%Ln<|8LVT>3H_2V&859Ta%ee!R1v5twt6eY`<-^e|*~*FfQcC*ty@;SBFsx}Q{# zq;^DH`2+^`W7(+2DHH!g;8Mx2ZGmSbYjmZX4OT8k}8>p2*K%`#SOU@A# zbLYm9wPH6ugGpsvq>is!zu4h@ZAc--iFEK+j~3K&1Bt0?vvK8S#@z36V8L4a^dz`xP4OWNEa zPn7_PEUh+*yd)$htqLtOz)(XWq57C53tB2WaE1_>YaGlv}kZKO` z4DIKp2!@d8I~xjXlZIy)W*@lP*B4n&X0NTfs*Y`o?oUf;2FKPZnG=cvPB{*H zuQGqw53xyHSe7Xz7xnOL<`HBi7q@bEN36UnX?PibqJ5*CMZfU$D;Y2<@h6p)VrjIb z9{+_jE^x2lQ$&w-v(f&V2>p|el;=EPHVGn2MI1&Lzm!;8w<@_nIjOs= zbHEiyVetn3kB31t<%`wCZBJT+j$iDAZ_&BDTET?*2%nFJ6NB!F7$8o?VLk}>4l1i#yox^o(Ziy z%LKsT<{>4b6N9S6rY?y!)uAyI9G4l;k4wMhxN#(&TpxXmp%BD8w}^UNqh4WBl5sgXs2%8NAQN|aEx2F-^nRs~5 z&5YsCY=&T3I{Db;rtY&M>>Am+f4(oi6?T(z=-B$)_>^r}^Xf`dWxuI-6}DQ>dcw`; zZ8I`HHgd5H9B?kO;=JCh(?Pm7y=Ge)`R*^qsSy_k#dzrKrZXC0~$Sx0$ua9P*?M2*CPu6+=_Ov6@ad}YY!vbomm&BeD4lQH#plkG9 z85GH%$uzvDCa~*h-0_M3?qt`ZfkRN#tA~ zEP_YySB*_s^_wj5<=r@u9+R`ipk&atp8D*Fe$f z>p=OnXBu9!&CM^74*hoPrrV>U{3{i=I>V|;B2GnWbk)06#>E?-T0m#R&@Zln6?L38 zMQY6lclG&OX6|KqzR!V{;OO&b%&7YJI7v1(m&k6e zgY|gAwrrEH>+p`Xq>Ydb)(?Vw=&v<%rI5OMy)}7V(w}(;BMDPy{VqvTIY{`+FY++E zoIJylT9KXk^|AG^bSi`^WwY{PO(*CDbTz+JIKf>|4Q^?J4 zWCUc|XXO=(X;+i?#e*uD1ND1@J+)|0fYx6Ej@+f;Us_*JP*Q60Q483~rlxZpmnUF& zg5_#*NvrODch4U7ibDJrlQ-(qINV=k&=t?H?8J3VuUM0F!cPY5FZF40@Qj%B7ivCi z%YcaPI?#6S0CUdL#G#`yakrUscsnaeuM-?++6H>aM_Jz=j{k6=R%h#8+S z|0rAg+b5XTPL}f3sWQ1M0Zk?X&yk%X*bf(RKVz9*NAXT~ySWHfe%OxU410RZn=H#Z z{9)+n!AnJ1;e7DRk5ApKn^~7pB5&6nmQlHPhlp*?@L=M#-=N$-P|e_?x$>HjOIByn zPo@{L-4zV|F6&7Hp`a|yM~|+%5LAQ^oMk*Qw>Lu=j58ys!)LdUXpZNBOr~xQ`%%=j=sxo902pO_rGYCTF zIGC?eH&SE8R6_yV5Vsh$W)#~%f`InFkvLfGF_LiG?!P;ry0A<>VBn!yQnRdw>HDTy zvP>6~)!8L3>_v)}e6`CpL`yZz9*9BJ;{r~E#WO#8n(6y7El2|=z8@*;Y>IOJxF~1@ z7}w=?)^T%%h-L)c+JGHD%5?X28I(tG>52nHqP*0G_9c?`>~f=Da~F0MN<-=A)jb}X zO{oD@$@91hBra`tLLpxl@q3__W4&qT#0L(;F>Hp>$fK-5i+#%m%?ybyu;eHh&YwxYku`M7_yu1 zwDR5g2*o+5XCjarnM|Az9DU%xc`;Lx0 zw2W|NrSaaO#>(v4a#H;5W2TEz@37(@Gex}OZ z!?9#rRQ~<_BU}C1&$+k1nHL!P^|t(q)Rqb2?TRJf9_D$tHuPUU28h4@*vlLc`ty8Y z?1qt!vLv)|cl{T#*RND!B?p8P>YDmxky8uGA7DOHLTLSlh8wSLNOmu3Hyif!*5E}V zbPJzV#D|lAn$JZj>*>}Hfg00SH#{VyUMaq=`M5UfbOycL3iQ54g}h6*eU5`g$wDd5 zzgR-W{PWQ)SVEump&IlI<4uvGRb29TrkQts0>|#>*Rk7%^q^oFk8V$Eqh^*q%^i%C zG7c3hE!QUk zJx(^M2edIh%WG>^mtP4eTD%E1WOU+)Ua?m$krjgt2!r{2`12#GQw-hxuDLZRRif_; zb*+^qROU6Hf(gX|H`*I&%32xoiJD64Z}+*?w_U>wxya}_XP`=?FFu)5!B)B%_#SV%y|!SGA3G~Vf5W3PCqP{4zSqzA;f49P=RX=s z_v}Ajy_Iud<7Ws+L8J2Djio{_4%?V z-M#}vQi%azGYoInM?S2ewqIc73PrDvvER5GYXCq9P z2JE`YJu)3VRqCQsZ|S|!Kz(jGP|ITdF$(>~U{94azO~*nQC!CO?+db=^L*AZ}?2_)U=2?K`DFIv|L*gq=!usZJvV`joEg99Y(8L@DC6--oW9 zx;VB`T=Z|>*nj}38-1f>lPL@;bBM)YK{@D+mbLZ0Mb0&pJ6zg1*Y_&25Ix#zG2X!n z;lf+R&lZ`ta$1IVtz&cICED14Iv;`;!Oaeb^cWoKm|p^!OLJdkVwH(Lt$q zoKKU#*M8BkD#kV#nr|{zqj);^kjFT0ro%(wgbnr>=q};$VQ*ocCY_DTO9rj>J+)%~V5!n%MIWio1f6Gk+ zY^kwi$PwBIuy}F2x(drpFs5hGg|iSz6`>M*}-^?7G7go>BXzenimMPMWQEnfvef*{v=ok?B`$u4$CrBtute>W#X;qOj5buvVb_-6#|m%( zma+my^j;lB9CwVxCU;({J4vDJ^sAb~U6gKR7>A{Vj8A_12d%LfMn!uIQH!XrJ_KY# zr}ta2=J|x0GDQtZvT?dx!By#l1pNhq5l2HGDSDopF`o+#3qABCFPhS8nK6=`Ddp-Mq%}W!#aI-NwQ#xv(0qRqHS|82DDn8dR3XAmcS{! zN3JbO6|^0ILiq`7v%Db`ccXYG`0H-}6QgC+TX4`fjJl<5hFm7TDW!gp-q`!HjC>NK z4?B>oaa%@^p0!LSMm=%ueglX6j8m)@>G}!6!}Zhqcvv ze>Z7}16ezr3f1!6yriTVOd2rAA3`i zP;TPO#3!S3g&8p2w?X-)Z9AY=>2cV|dp4`|!gtu1_{jNZVni^SptO@bAU@S#~KL?xxtA8K*lYb-^9q%XTS*-e>L&Tdi(g*A) zS1?PpLM|`WD_|{G*X;=xYkpGkxC_oEx;|&cA6m71I zHyJLCvhF#o8^il?OOr0YUh5J_qC5QDtq|onKP^1bR!OCBi3erU?-g=<8zblRA7dGI zxN}id9q|cp7dFp$lWOB;q>k&7otL%&DGcRPPoEaPmYhKj&@95@-dZ;pVG}Mx1e^0d z=4Jde9VF=lhV_2B%STh%W+ z#mOx%#@>GVl-O%h{me=n7)4MnbY_K9K36HnnrBu|f?(Kt2Tw&N7q{hOe_*d6hMN_c z=qi{nrm@@1B8TRz(IdDD#zE8yk{q77AF#tKg`t58bumrksc`OvsHd|LYS4^eo)39R zw6V8(waKdHN6+VFg&ZBV`5&RtGsGI}b`d{bX@HUlW_FTrwS)<+LBM!1o?WY((qj*+ z(rWw&Hpy(%;-*CQh!vtX)QVPD^~}ns^f@#L@UyE-Pj>&66H&}N7eTE2JKlc|E6DA8 zm3`k>ha+Qfi8TSa;h7PQdwogF5JM|Xh2c=lk8q=*?B^wz2J%fl>oQV=>*2E;NHBXO zxrh;VwnIMC9UKIex2u@>|AUL##h=SfUi~!7bZSoMNF>ojwE&@>%7rYm&}| z5cDLA-cXm*VEWCa?>8G5%vG$H!}8shz`Hs=W-WQ5&b(d=P|2RTGA$Ay=cuW#S(mbl zEWV8_gXF%^BMNVL@d6=&75I;wA8fSs-7cO*I%rJEIGV6y?p;M1XONh5NTs{_eOe4pwN9fTk~1DOJBsc(wFZ^@3j zEc{k9a7scyLA+Gm#$3qZ9+J7}-1zi8U8zbRX?n$LEo5-WKQArjFr0$YwRj8OO??xE zxpfm++`3f5#b{Frd1~_x;1?X9_KtlH{wf?PI0$RcXV=k0Mo=QC__L*4_w+#|Yeb;K z<8U{9zT(d^^#7Y$-PPPMM0YZqvG99<)aCG4 z^ZNDZFhe!ushK8cs1!z?ug@>bNPx5!Y7+2*)X&a89eusX_qQ~G11~9`lW}R&D}KEl z5g9~1b3G)Y6i&V!PBajK+@<7C(X695Un@oQ;V(46Z4Iw~o`FlaN^@3&P5!bJra`&S64#3TiTc<_juVUE45oAF4%7 z5OZl?cT8q^nx-KP5@H;g!|eeGcl;bC!wPtf=kx(%Flyf;U+g+caazz3OeBxWc5Mgp6ysrC}#ZfkZYz`hY7{bwY|oImd9L;hv5EOy z6j>oO1Jm@gEFB?aCbeHBml3+ia&7&BUl>8UN=fMGB`TG>`@%rQ#qbVAV9GWUsZ(h7 zKuS$Xcqb8ezU?rv{CTKVTM+_A}BDp+;HCU(tG@hyq*< zkbQu~R0O7#R6XKNB*nM^XSTm>XI7z(fDreZz-?s)8UFTT6y4TMHM_CTK@^uSz3yiR z9>8R-t}0-1>v`rLo&!1D!KlvlQzw6aa@)KUD2fzAl=xo0 zdjfg}Y@kj&t3nP;w&46SSnecI2MzYQ(Mkcc{l`NT3bH!1{$#=w zwX`bjR{@QBWvOouX)TD>e!E}E7iB#C@M|(G)UHtCy5Z-NUI~epym(P~#slVy#pyXKDI=l~h} zxXHC8?S@EPbFTS(=rQer)y{bsNDGqzma=(FN?gh_1m58NSi*YH3>cfJDMec0y0~O_ zG9Wg6G?S{Uc=RHYfM;L$k~$6PFq+`F*}mlA0_4sQW3Bc%bxhB$xVMp9(vo6am@44!d$jCX9soFaoShT;q?P6V z2c-#x6f)^waf!7*5>Lln1A1c94k+>W;dvXF9=@kqmlUcRn^@F2zt&r!-dypc3%L4N zY`Ujkxg)Aqwb@MG_2X>wSgkJI#P&0p$q&QHN`ZCL<>aJ>@7aI5kK&3m2JUD1bY6o- z8+G+vTVwSYpG-)+C!pnB8BZqfuRwjXKM6Z%P+m0&dLw2t&C%ka;!}nxh-F?sALyM( zVVD4eG_KA*^jNRu@6AhEUQ2WiD0Ad1gisH-n7`wnp40ygai0{DrQjp^_%0^t6~GP= zUVlTx+A^bbHlqva&5fxaN$NriOIv6l&kmf_CmV58fh;c@}bk%rgmvG zOa4+z(o>J7j66DI%4*(A8qwQd*+xO$keF#WMb*XG!Pwa4ujbFk@0@*CI(Kz^8`u?A z`srx@aVeuiEw0pzB1XePI)GQ7U0?>3W+Rn(=_au~JyuNY8lI=@e(AmI_!`Ee1MG9B z&mn*K#Fg*%Eh0EJ{BI0EW!0&!JQ9QEiFlmloD&5q#z!`g>ysj= zma5Vhj9NZ@6-3om$Ufc`N3y+2t^^NZCsGBZnh)Eof_Updt|2uko67^e zH;HPDlF7+?gRPR%0lgSY!5>l8@<&EIT9SP3zH@K#ZEcv;7v4pwww<-WPeq5%F*WO3 zvQGLvl*9w`NZ&PJ_d#4a9`{-R8tdmk@V*H9SN|Y(z0MvdjhT3f6sRmmR zeH}(8e=rp%gOx;u|6DbIluK6Tl`)32%VDzq@!g(hs`j*1XY1tY%;tMBIE9TZL4fh`XBdUPOmvV?Km)71^!gb*54d@cD3z zlx?NGOG&mC@(=#HtlH(Vc?G+foLPxYuP~))lDJ;JC7GJtJ$T^^Luiw+>hdZ)zg(Sc z$-hSzxM4%2y)_ZOc3<4nb!~gee=o5Vf5v>1Yq8Q0|KCEeFI`T$hNwuCVw87kwYubi zruRyDQXhC!sPcI2->B~{^8BU0oeb+^3%C&mBbrl|!Jav7Xs2@YkZS@ z9m!tu(Pr1H)PKsI@Somf8M%VdMWgzko)jP~*%atzHn^yUh{?vIET)GW(P`JgXn&d+ zA#!EXaQ+!^1>b7l#z9vtEv^?$s-PO~-J_;yyi4qwa*}L@q)6zq~vE!#%0#$ zPo&Z3yE`#IliCC>sTOPIIB22S^KB7<^(2MUYIGGPAxp;d^e06%(N&3i1xx57%EsFK zTPxq25YDkz@((yRz9_qwei9B0l4unZNk=FIuBcrXM3NTZ`PoHtT*R2(ti0+dLm3Wh z#a2kZU#$NeP4tS$j@)s>qYC>o6R!XfhF`K}7re zs7HY!vf7J}(@dI|`e6#5MS;Kg(JlMh#;&WcYihAMHT;i_IJ2@}s0AiC%n#-fkPjcr zZd-K426L|?=fji6`xK=;Z|D-oU$_oM&~_Ww>DQkPw&}EJXS&4mPr1X4UOSZdM;D40 ze=VZAStdz!;0Yx1Inp{5$44WL_nI%CIez~x#XRLMwBUC`$89H0`920k1?x<tCciv(k^`EBmvoBWmlc)LZ$xCH-@yO_Pbtc2lO8#iCf?mw^L{3=G9B$N?Jc;5c zfTYqq#cXTAgejyDDJ+jc+!LbA2EmAMsTrfF`w{cM-=X+ldUz9!goe|C z@ol+m%r;KUo+l>n&M&u`R~}J|^;;+0XU0B%ecGql!I45tX=a0$g0c~_O(Gk;Eev+M zpPu=Q38#5_Xl}O{B#JbM9t5uI<&YK|9r;uXWfEI4H~D}r8yq;@>OC4VDsyd{7gimN z#9mJ;I%mQa5$1f}Yyr^=0pK2Y9qpTu{g!ZhH^+iawLYRfLAFd*nVNYaCeEZw=~l!u z6Ym&@dWUzIWO4VoIMM4wlLvXvzT{oX?+WF7mdgF380C7X?K>n>-`%`GICwppwZBEz z1K%Dv!f(vdEt&~6nXY0Hrn*k`*sZ1K>Aaw+iPbiP>HHyF^6jsNQ zv$iMkV;^QSixv_06;e#f{>rmUdV?WwOWATLsQDl`3prDrx39%$LQ^%vPayz{4X z@^CK$^oFl(lfL+iqQaqZOmACnNyncwhvWgH>HejpeKR+q-5d19o7m#D$)8#!_`{Q|!vUg3LwDfbU zHMrPB_@NDzI%dV=Nf}L5--$*=Tcrx1sU&b9oXjv0m&B@@On!{DdImzP|fxVTGaCYcniz z{ZuQGC~ieTAQ*k|u0mG)R9TOgM<;`jmc354{3xa+y3f@N!cDO8zCxDr9cZlHf_i9D za5iZ%UscUSZB0)h_oM%5$wQ1^)UzGe_Lb<|BbhAZX|t8m>sG&;ilblt%EZ)pEu8W% zo$#UbzF_YZayt!+OOW@0KC@`7VLz`huTl;qNs*b4Gu?+X0hO?A0EKSM$u^4Xs)3eC zaS>F&WO3tKCB&Vdln$jr8wR{;+H^65pE(m)2T_tt)jzJ+-UH>s#j;hWI4oe(ZhueuF&f;5EL9%f3G9Ozn> zY!E#|ccj1aY~Fx+I8p>6l5RQJXjy0}do6ZOk8~~Bq8AqeTI{7$F&n6CODrn|6pyjZu=Txafr_O6ZwBMwRUWkjZ=rgci+S?4bUHte)PZ1SDI+7yG{-O0hPRe8Q>D|LSx$0x$%_3eWwn^7@3 zk)e+1WS@u;-j38x{anJQpbuI5rX>}>M-xuy(KLP<8p2Mlv$D?gVwfJS3@J63jT$dS z=CN9ZZ>uCxB1#(F8(letxgg@w%XEJ`BQ&Bubz=TD4QsHTzv1yf&LMuY3=!kV?GRYR|Az4 zzC`~AwcIZDZx7!o7QiLcqkxES0E zB%%iZ-y>EiXM^lBy$3d0klT;Pr1DiRd9I{Hv!0~wetoa{HA&;sdD>RrMYR*AM3M!g zCGQMr@+l~i`^Rfu;|5B+k5B6xu`(yAogM^=@KWr@Qc$L&U$=k;aYNyBeC8vZ8;XC( zvJW_Zg5f#kO_UKlo!i>2&nMx6AQFuy>{8NWs_*iW=oCr9qrv@@fEi5 z2j7z~A3m3}gYLbiC{cj-)yl68`ru0Nt8;JSBG!;>puNG86wsG#(!VDD_6~7ZY5EU< z{vVO@uiXEa>c*5AYz|9QT>|~2s&EW3z zR37|Uc)=g84xUfq3;nw;y@CDjtvdWyfd04j3KI<~jRxE+tazmpX7ClXPA!u=ljOh2 zG@TsI{L@s@Irl||g%kL%s#yq>HyYY~_$^lx7KFNGzPW0ng3 z>+}x~^M9qkza-87fARlw4dH7nK41+zj5WjH8uQ`o=UiOxcW3KjG0@p?Fm&W)eZL~m zr05n0Yn$fpy4nA9z{0vumD7*;C)$?=@3?R4d?QXnEL-`^8^y6!nvVZ!v@Pb(TYLGM+Xq2AU) zefv6S8bV{3!$ul|`@_ql&sseqzV)5T+h&~=-MOYMNIpb|$K?+EAP{U;E8KN}Fr6>QWZ#1pUk#F}17&gYT^wUJ!#VnOUm>)t~QRRAPKs z*fNrmxxYx9HtFW?tB2Q!+ldyDe6hC1v98CE_pP@%^>>16lwtYmvDltGjf)&5j=tH6?{4UOfEB} z#J#$luR1LUl7REl`ZJ+5y_lj4Jfhnfunx;)V{De6+=wy* zL}I1f8F~}CX#u%s`NR|JjU~Mrc$NM$wkDgVHO8t>d0wX8!NPi1`F7!p+lKVjCiCg4 z^fQ%Q5Qt>&Q+vBiDk0Y8sE8st@_d^-OM*p-gBiS|w7>W!$ow>$K9pZ?YUPu|SG%_tA+w_R z35epOzM=}_v}J({ZEFCW4(GlQW}Jtzdi3Hq<&$<-Bn8FQq(40Q^bGIFXxizizZQ3< zdAFol&E<9xKe#02htBIK!IHtkOg2{=Jux&_x>sGRS;)16*}wX}pN1o}zt|P>`*Fz@ zkjNTQO{!ncsyBqiK?ZkqCy3^v{z}v9jIWX^4g;>Lf2xLuaV0*PGZ*$1XXMaZ$8x-f z#=*Q+SRb8K@uIe=??|o^p=#byj;HGx9E1(B9&0J3;s@ZC^i$m4_7rn9V5P{%>s=0< zFSVQ}WLi`eMi`8r>NsC%ZDc~aIaUXU7(_Lk3bA`u#{(`VKz)Ih&CC8d64 z7FRrEmJ4@vl@@oO%VsdR0TbLw>`hU8hk$LHnbW>os@$7a3Ow!U8%gKtHi`SJ4LmDr zFlq~X7AFJXNS%crjgq*%Dj*Ew)Y#S6+DXf%)G3v<4pZjkGW`ipqcM%sQ*0m-;FMH|; zksohK= z5!^SVD{5wtW>hZ_s>l#h;!$xwi3)1{NpR?_=ie{BAy#gqK(6tgpCwVM!SdMx&oE=w zLjA6RMAh|{4Qau+#zNz_!;~&p6?hT)W3uiqp1R98lIY;qWIAi#cOeY;_j39T&oqTT zM-0%WZ`e#%EKXt^wdLY)2V&`b0D`b(nbKz_OVzmzM4!xLr=2Mk^;uWvTGx#2FDhjQ zZ5gQ!XkC6n@jO4+)`=Xmyc`L7`>V&&N?~~9gPg`Nj6sKe`!o7vj7vSHiLGva=2|k| z?T|zElpvi8voh>SQBrKiTcQsZyDQM#AvZkaK`3U*i=Y$MM1NAPlo;t?^l-?Wt+aUG zzfC$}+4%lsROgTl5^*I7xpEODj#8d%fas-xMqTy&TgVyZQj2ZqevOnAnfbx;0-U)y zOTWW>t!#K#ST%(6rM-%oFn+-fmT;Q$mPQwtvEE*aF z54)AN)SIXFqnTze$~mdp?&|lIsCw&))1;@h=e`)f5BIZh(>lhP-xs1I{nAPt0HIQe zZ2dHAYLtu(GE5C+hsZs zPC8$hFOWa6p;3RxUi%v)F?ISjpoEt9zBctRybKY(_p&vtB4W5?FsA)*k~mpP+HW;1 z;`_zMq7G4D)#;%@sU51zxx^>Ze_$u7x~D%#e6TtOoALD44N?Nhjc*5HY~q`g`J;pe zN8+p3PIh=Hy04 z4r=Z~YAoLR3+F$wjT$s@Dn431+ojc+n!j-r%!~#oL|bW$3H_9I;d?wmEv$`}(QmM* ziJgn5SE(OPI~Nfh(&O%k7SIF%1r2vgC#O9i7~La|`t+54I@P{>^aUX@5W;1%nnkuG z;N$Or^c)osPH6L*Jn!wwn4;4RY5pCZX%WvdN2a4XRvsL%`m!is>04Pc{W|{LkpOsl zPCaJ?rH>*?3yo_XCogM)cyB*8Ks)F(Z5r6Pa~siPSCr^}5Z>vVYo&K~dNJQu+%O6D z`N%{c{^}#5#R;P0FkhP%xwkGU_1J<2!O8u?$KEn2^M!v_FKCXUGo~f*>;nCK^(ji* z+K0rTSP*??>sx6K?wP?hdS!k)etOLT)GdzYBCGD!90~32_{i=(j%02r+l!Kmq9?K0 z;r^7fo+F9Kpr}M3{Fe#-*3gzmYm)wD0n3vSJ$S{1k1bX`i#msgphqW+3GbyxXPyDw zHORU$J>fE2-^ysoKZmRit*w>J6x|X2eaPoB%<&<+^NWI?xwe{f6wGE;W&J6l zdmQWdbG8ZM`pu-yA0^j~xxKy~G4Zb0ehR1!x)OWnplLH9o7&AGgVbKhSvAgMH7u@; zXQ0Gq?rnGuC;C9wGoR!Vk;8Vkw2-UFtZjN*nJE0R0A?|3A(Dy&LaX_HOz#pEILCDq z*|G0c@r427=tKt9tqQMhiYn0Rvi^Llx6?%8kh^Z4q~uiyMl25LhAlpbC8nj z5}6$eP;l5D>^RVM!E@|`?(Q)JNq~M39I6f!e~Q^qK_BM>+2e}_dwRNkupbZ4kfHi| zjZVh-{o(9qe%okXb|1r24#U*(V*6S8n8=bkAH-Qh{ZK<`-b;)M!hvg*uwBMW(z@Ly z+TJ3(dgo-SPLe_1W=G{@WA9@mJhuUKR`7pt_f|o5b=$fq1PdWZ(BKl>-7QF9;_i~* z?h+hA2*F`u!QCbf!7VrwcY?dSJDkD#_u94Yt~zzjeYh|8X;jTQMjw52X}!tUzBV&L z@Vu+!xnD&`WAUXq$rox=LX*?Q99}T5e~<53P`Z?%SgHu4 zTJyEtsAPMY*7mC=yNML4>_QZ*b|zYYbl>@0B_L_w&)-mku|?^jdza%_+p{kMRLY;s zb5C8*hk5P=mnpiaoK}uh+}wuOyOSV{?>%i7VNXTG{FpJ^jQr2?s^nlqgXyI&1hKkmxo+9YV*WkV$(AS{rQB*feyjJBr@LQQCYiT1R}@ zRAuAR!yojr3svs4lD=*&TYJ$GsC42(EFtV6%*1~d1zH-uEC4w-GJ(BIH{s5L8?6(e zER->Pr>4{`w`F*^69>tI!Q2HGWfj0o|MeO7cw0uRM}hGLlG{K0krw@R*JIv-NEPAF z^(NrV#~CLr?4`8dwNxJHRwnGW97DRF3wkZwnj`P>t>zm#6QBKs?CqD}Z65D2c+>d& zsD6UX*Ln{4LH5f#o9l*Rq`xua7>888OKBF*92MexR5Ddp@VNmW0s2!+)?QlgQ(&5( zm1|B=;M^dJUTUFABz*xGuLe-1J|q^qyLw#Si`2+vJ1C`i1cbp+$i=H`|M`FeD$kJ+ zi`Nc}rx%#;6ff=fWNO#xLryl*@CnBfM)sj+zlZr2C7Zfw6wMhwic{zgZgd{*F;u-!#qR>mC~c1#fy^xdl!;HcPN#joD6D2W`QO5oC< zHh7;SpDoRMx8@vdcs0YB=VboOKS22=7=6SyzxLu4o)kwW;?5fH(jlKd?m!~s+n7YW zT7w=YvCi*LR2xp-N-FY@@_v8=VZn}5z~;%m6Yo&dqlEvrr0oG~Z6$Cl3rq}8d^BD! z-mN32F2kl*Pe5XG6qa;cW^B1SH%f3|N1X$Kq@7=2__S)_E={Gkq zZ<+VA6bY$k4SQi%3lsng&YvJWKIGl~(%fXFZIsUmcq&nQ_0|}+?d__{cyEh7Kj%@s zrtL8?bAG2HPagnC2>pJG;3###_Ovo0rAxYDUVg7rFf?mXpPtkIZR3fF<|Zzrahc{J zuDrj9A@O&SgLKRJj&&RTnSM8>aF*6DOktV!kN>m>D6536_f^R;ayHn()&e|7an9l{ z7qwRCNu$V*dQF_~FM~qVPj%8i!so#P7Ez6|DTOQ3p$;x)3x+`D}2<1_y-2q z_*VJ-oNAZn?^T9RN@qxiJf`?k7-qmi8N|Q2uL+;dx(tgp{7GLaoAy|}Yg@f;Jfc9&4&TwUb1nNTy5DBnwyf7P_l_ss80Bg@}>u{!R5f$9?Z`xh3{ zTPx__^;-?me}BFhCpOe8`al<{|l{N_3>Un*AP4O_ynqT+M-AtiiX zn`^&_ueIcfY;M9jMF<-`B@fa4|LKjUX)Mc+VO*ctpNS5t%k=RSg@WoDrm+kkG!6Nm zwwCvQ83C5`$-Thwz4vQlBPF4iQ>ayqkJQjm*pHlV(r>FzG3waX>$!j_*uds_XS;=F zS-^4CnE>9;WA+J#w2+!hZPWYh+cfz|y+x6ev4M<>=as-xhNbxj8zar@g8N9cC#xHs zGi!VFb~q(IpmkH1LiX1j22LIE4+~)Yzfwnx zM})lfH~ddG2jCsLyFVLXQOpqbc@wTu=+jUsYwX}~vgp3-1LyzHe7)qQ6K}bO*LD-6 z0}Im!cUc^yrj6{*`PF%uoC^oPzEbv6-m6!pakE)fI3YTmp@n9~QwyvVf5oTYY_cXv zoW6B~w?#9r5bvX{?u?~TtZEPM=lBcwPmmq-wPDq-5Y!sPMC12g1Kt&QVKqMP-F9+5 zwj4)hdB!wO;WUNt2p*b=-OWnAT?r}l@`#$;*vC5IO3h*DtV^Sh2A0&$ogLQDkrp?3 ztx1#K@_ahRvzd+bfoI`u;x^b`h^Z0T9|B8=?+<2>^mQSKXe~)A`&^)MRc_U&<`a+qxR=bg z2(e1sJZOOeGAd3;wdw7_ex`a#R1Dq#bu0p@z^%d&QXzunRYHx|1dXS0WqyPdScpO5 zH$>2G$+kPwJor*Fpo);T5LJuzDKY=oouEF zV3}++f8HibG<{>feWXmVdV^=t`w1mf`up#Buck;Pxnwd~RRQ)Y`8Yj}q@R7p)V?YF zq_sU)E&4WBfL{KNe^Vz-Mx%s7ZjABgMF_mA*WdA8<@X{G!IpT{3<@2Nn6H9;WW5j%kS0x!+`Dtu# zio5_wdTPAxDY$MzLV~uO&{HJF|%RM~9Bozm*%9^OQ&=WG2@Y&ZCgd1?&B&v`+8uJge$>}x{Q(jNSngZ<+Q zb+Xmhoz2>(i|`^v0`6!79xpNeA~fMb`a;Yr5qYyrzOiaoZT?%x0jI6gg-_MEMz=Zt zqYeM;gj4bbU4K!w8GBHS)urI z`Kq^_Hfw-+&G1xoGvwf6krNa@`}{ZVvW$Krb8~W$C2d39C0}Y5M zM2hLa@JK2f@2-^W*FmgPg~Y|OVI9X=*Drx9C0WLPyYW|dBZ!msknU?vpz)!k92iz_ zYFnY1+RrBxj^Wj<5L(+=rQh)uk0lGiHGY_?$*p3dYcOM1jsf)4x7s;+VrG24z3gKG z$OB^<=9Jcqzfr`>#JO3{+_J4@3rbXK^jO8QCGt8wgdeA4UG%K6qoox*bTrab(RVju zLYA=rwh4~~)D7mj8hlcSU?a4)L0NId*i=cFtG08)cTcsycU`MtsR)pa&4Hnx(X~?p z4kghro0adhJY3-Zk%8gt0^jM85Y+hiu~jzRbGll^gQwIu-;hq*L>pS>KYxWpXlB*1j=wU_V&Z5z4}kl56IP}p6ifH zDhtmu7lvG{G$W%g1>vzN8u--!?&q?v8EQSzG&BCAW%mNeTAdmXo#@?6uG3yPR^Y=M zFu~`6rd&zE{@dl<9YrtjY7oLX@@_>#MV?{|Gyss*s7+wA;<`>ZbZt>lR$een9~;QF zG5TJ}(v8xmp>?k!gFy;Ie7uE-o`#_k`7df7yQd32_BYLK8DxMB8!$?(2C0n1Nu-#EkzviJrNFV=iZoGH(8ID$3+6Q*= z$?RfDpt~uzymfQHvO0w$cRM8TXH|ARsjP6G=m_6Z%`-E9hsq?t&;2CWr=DHW($xKQ zBbZlfHC$_a0ujdV^{o$&i&(qw4^h`rSMF!jm-?XRp5Q>;P_fWOk?aDv=!Yopi2@+H zy*?dL=<0|$;hE}u(!cuCNk^3T3VMP5sksJ&({FPh^TFjcPmYVNtK*%+RSR zSuZC$Gu%U}v#o@0EBDc}Iy&=uvPZVMYZCht*Pl}!6}ej|9Jg_I7S}+mbD>v-_i`=e zU3O!x`|}lP;UQ3u>^7#>^3)C5lGG_7|K`<&A@CJ}mB8j!h=K=U^T{1qljrPOT!aQU z7~|r7>ua5O4z?j>O@0vpiv?U3oqfqjB7{bzrIcIWlJz0i z>CcY-uXv&Z{a&2xXnMjW361uM;kGJM=&l56@n$ySciSDiUNzIrEQ*f>?qE!+@vIvs zDQqb!S(z0reaUEaPergWYvqu`>uu*Y5q&J(ti>|LyXO*sUxL^y&{WHlj$LB-dKWs?IFR~( zpx+l6qduvu5^H|d5ev6NGMydyfP~#Mk8g9C9GSf#fHAfx1e4>B0bwu1j8`#*A#%|F zAM50Q7c%S)rWbIR3Tq;|wfn@88|DLLixyy)pcvl99=ca%2&_jAvPa8B_LxaJkI7bs z{dWNJG^alj=3Ia54pGOox8(dLKrf&5IDbq1>`2csk;|IiUKTXQxS!G5Vi1~9@48ff zs*u*k@3ijJvMUq zW{D_vu6FNF8SX4j-!i1c91UF_Q{T=?STT)lCzAC|bf0FQmF zfRyM&69grz`PC!22l-Xi@8mDK4tVp9HX!)COqbbOjq zNTR|?FOj-@)kG2dw6eKOAEv4Af)cJwt5)D8s7TG<(8?76w#?U)Q*)P+0L2>M)zo?qnnRy)@K=Nl77ZKj8;N#p^poAd14DdLqvA z=4(pb!bso%$8=F9JserP>wiU-fne(8CENeCB(fC%B$3W-l#MU7JfUzi^H2!U z^bx7gKI3w#+;kuG49<(Zpn~4n^%M?`WNc)_lpmMaNCl8|QdaPv9J8v(}d2j7;^} zc3b0y)Ve8Rnf(rhN9m-h_k07Oq(dE5H4xu7Icc3S*oQe2S|q`dJYL{V%eVepRwJ2Q;PU!|C}EgXW4^0`8;PV=PM-4 zg~PECQf~2T%%%O2c{rjz8R?^tPAPjdqK~Z{f7sqz@=>72;U~dH-S-EnYBA?jfuvCC z&x(QddYOxxA~oFdGTB6AcPANaQAQU5B!!$Gi=7(6lRJqsi+1o2`1j0VPZVs`@V^IC z6tTbeS!w(~fD1DFGsgjl!$}yrdIC>e=sd%l<>>fx+_xTejpv7Cj_%nH6(G^_59Mzu z>eg_DJ(lyGb#wGA7E&~3{@V#4V!XL%tsUJpbaBQ8hq+=vHGbrdo<~0*u$Xqge(UDZ zdaUDJC=tpgnX??d?8b0BhxaR(U{hot6Z4z8>H0_F+dqMV-sGxT$i81Y`7(Fs)jETd zzqLPtjrYw?R}$zWyno8#a<8!P(Fdy(TAmTl_=KC=i%F8JyWJsu z2xIuF!pMbj`|KKdpUr3#8z1)siV3HhuA5=I{D>bY;$~`D79qp8v}8M#PTzE6M;II; zDhYoYKGo*@!T#kLbdOeL<$)`H4xWFk$2gTQ%zg|TK{ z^7a$n$6|IEZr(uD|EK5X#p9I(vGMVF3rjBW3u03$CMw#8|Ki&LOb<&|jsM~F@h)Uv zPS+e?bR70^^cEmmE}+SuD*X{hz1)q*eWM}dYMAZ3oaqJkB@J*F{o^L`F0OhwleHq&wLI^L60{&` z3U6m`OWfDVfl-!5s%Q8{%loZ*RD4!H3^wph{)P{Q?C&EXM53sZe`rKX60f?`w%^v2Y5s_!TJOokZLO6UPBDF22rw2Sk z?<@@%m^0Bwh|@2*@Be}VlD+*e&=`z5B7h<5cm<%nU|?RO{DUaN76rc`%9LP0FMo=` zQvT~tglM4n1`OH1|BNPw0?e0mB?q_@`^PF1f?iJ#?UzU+y_$!)MR14LqYz?%Cq;{D zZDGkb+8Bc(sEOa=+xiK;j7*ten@R~k?V4OZl>i;Wnj4>N$P063gXmGESB*kwy-$@^ zx1~y^iG5-*FC2g8TE-ko;oB9v(-e*>~&&{lu4XGWsfy7QmT=KLGd$<$y z-zMY)i^tt+cM;7Wm=uqi&?IHU_GaXo;d@Ol65T%6@Q*tX#ZrMDR$^jSxUh>JWlV zWL8+w@U$!>?$rNH*eKa^v*_%2M9w37QeLB{dByzNUNXOfDjVK)8%{LIM5byTal9{; zS?;RVr1gS_u_mN_E`SJlc8$(=VcS4f6( z$1Rh-v&TRb!Qmom)CYsG=kQQ$>GhNP5M(`8sLx{VYyFII+-zUpO((O zYHK;%fu_XO$MB%U4v3k2c6GQGFggAFsVa#S&=ZQTTj6Dcj}{q zX3smJTbf4oSV_J6?SQ%UF^}7><3Js{xj~&h!2JnogxqZ&ydmMzPw~;?&j4MuK$5St zk}m+0H2u4P@|vW&W0nMdp_3o8k2n@nngl~t4qr+RJKAKn$gzr3bk)Vhp27Chkv{V( zTlCBKpn^1H;XBOweE%|DmPNFxU*3PWT*}l--69JQbtTY|A**XO))AD+FO^7*uS!%x z{QNpA-L2Wc#!lzms?JY6v3C|4Zp08c$FtZvk#|=gf^l`gd6JHI*;qO13m~&?41X|` z3ObH4)M{zU6QPQL-5#eq@e{e1LG6v8B<>(6=GH6?U9SXOT56((LY|3iEUv6JSP0Rh>w%NlfH} z`c>wYg>;p5suTG69!cq^(eDIkjPI|I# zavE~gojU{cHg0!+qviB$*5Kt?Z4JEb=b1`R-R)Rki^W* zd{|bZ;19HX*s^L-Uv$X0_F<*KbdgD@wV|&bL#n=9Lu!X}TM2s@V~(a_Xv5xu5Xoff zjd_C{31IwfCbP_O*FL}VC-bL#0W@d9fZqa_@2{lUfeXePGAM8nrNscJBIXd-?K&wT z!$u>S(xO?>!H|jc>#{f4ef}(3ij))gA|z|vK;Bog=Jez+XAWC~_@>O;BNM-M-oW&Y z6lC~9yn9yo_sXX{S!MWq?tWVxf^Rlr71hLGHdZ&FvHg0(83mR#*f7xTNDh0t|)=fm9&#Y03{H*0s&e~^v2Iu|M7ynB`QAG&5pj^ z$KAt;iKypJpwJJIN=Sy@^#SP~t68rQ0Fa&dvsoRe$qX41#X*jz1b99oyf44pZ97kh zJfPaL0%%=M)cjR*l!PO%tMZYIC(rlx8;CWqKxg)p!BRh3Np8QI-&MA4x)mk0gH0F~ z8n-KB)MWBraJ;~~U3pzS4eyHlEN4Rq*{NpVU>QCxX%h_w?7e)MDrZ74VT5209$Y(k_8>(R#mVjm3p(xD4v>T*i2#o*+cmh}=%^fG`e(kp zj8)cYZ_l)8{{mMg+5{~n@=)U*v0a%9M1n7z=zHZ?7v8RV!U81%#!2Il&|mcBkx`km zJ}<@D$NX)jDoWKGfQsK$2q`XYn>|)-tQY)qE z*P~8N^>k4WH8pTI>_Veq-P=Fzw7Ourh10EddPSHxRAAM7w~Mp6jHe0`rA+F`XuVJE z#{uxkptHXCFpY`C_uryT-e9>2WjY~>db|u%J>~2ktt{$C5PJ}U-(_w;A#MB{kP|>U zT)ZfY4h#Icym&=J?*|~yUz(NxcW;UoCo+D3r-foqd!JPGQ_+UVNCU%GF|}hFv;w^H zg#n#Bvq+~j@&rwVda zDi^Aiv94b1ypN?+jHnFj`SQ>Ti<9?b^6Sg2wssgk1iFkb)0|7E6kL`4zLPgx1rQ4K zOe;xbQqYvAFk3`lvAtq+b^aw@AZG8r>^oNlYY6L3?mu1_L1|tTN4#ekhg5>8omDUm z(Gv$L96qBI_g;`#XqBj(q9dQ%KOZm`?_ZFp(f{H22&|bE#~0N0sXLR!?3!vRIzT_~2@lF9#HCwE zH-g=n_3#1Yc@%&;Ndof_5yMkJi_U47j8CwAg*9zS;SKeL%TvZR>jC@_)hcRBRx;99 z4mUXUxcOq$ysZ>RmI)$z=R$WkiHX+&5z0!K{GJRfZ!0=?*SuEV+*pMuf(o)igL%*|AB*|Zi$4O!M)J-EygjGI zqO3U^j4#l#W1+lS)JT9mc`>x@MkX?JJi38p3Y>4UBRO{FbZncrL*JiVH5cabfn*S`SVxw;9oK$r5U<>Lec}j z5^ZJ$oQQ$CWiqj zL}*4B6P@>CW$_rlgkX8vfh&xw?~Nr?cD<72)X9eYh9($q)&q7+5k{tTJAV1gJ-u$%WcT8tCvW;wdm#RM9O2o zHR@6=D`g+{X}WHAe#Jt`!9Q2g*cIF~Wu;5i7Js>PZME=Q-xExxW%fF3&Z*Z_B3)=$ z8MwJc$)}0ME>vRTgBhil_!Wvu7@*?8TkdH)*2bt9 zpax*CUs~z5336~b8`0K|<9`e4>0>*=W(mJg$U_&qIdO#jyATG^}fjhX39`*N1!TOE|dKo)0`o4sCAu zOe<^|0Z2j$J#a~U3Aw?tTeRR=YJ$OfOaZyCXi`Thp|$5+BQ994W9C&?$k7|11fb(0 zx+k)G+vSIvynlUNI(%}A8;iUdsH!3~-B_Rho0e%f7$^gRo*P?Dqwuraej97X#8fq1 z*yM8ZyNpa)eR?M`bLnEs7UI!2J{_FbqTp%(I`|$RaWVPL^;esA27CPlh!6qXOji&Mrq0{hk(TZA_Ox&@8>RH%~+kc z_F7&oF<<{iEqp}|-T+9RO;R!|sLuPqco6)L;2PW0S`5L}l;BRn;|&}0;G1k_9B4pd zG5*JH6fGY>VaV*<6Ak-Lc2s`#?FdN-5rFc`{59cJ&IgWJM4K0=f5wBJt@f9vM@6&! zgiFlkwnusU?5&R%ufr%wj~WwALElSMshahMMtMbrjj&Ug(2>Olmry@trD8lEeX5!B z*DOkcU{@g0lvUr2imev;<<&w2y@tIro5WaFQ@3ZR_T(qMyJ+3x9y*yFH_Ek|!b^)oRchNHax946Y@(bHwi4OG& zl@UY-q2!9zVhrKef2s?jW!$5qQTkRkNC+}W18intqHjEg0Pup z7Qb%HQXpmFhZCiT$&U3r;Q}b)c>}9niZT zg*u*8%b76A8Xa5UqY`6Xy}6G6EPhM=f;qy|m0w}0b_wNH`eH>3#kUVg|FHZ$8a=X8 zQ_Fr4<4OQVlRsO4dmE1C%s(+uMrSTP1ZV>#@%UoX z-aY!lwlL2ZMY6;IJ0XvS>5(?0s5=QTp5fbR!mKGpHW{l z>)DnGwrVrlk0hWR@Eoyv5+YMN++}1Vi5ydrIW&&BYNrp%<^(>XGTTk z3b%E-c2kGCoZcR@6ErI>-drrRmrCc2aOFA))x7)Nh~lJ28z0XVAeO%E;>OPJTOHuM zl^H-9ogdNWg_+0O9XW*wiF`rRlIuv~)k+2VbcF~tw4ZCJ_<%GO>@&w~=YyO*SaPG| zoFNtyq4Qhf^Aswd(ls1SsAduQ^y05|5`=z% z@)nf;LrE1J5+T1le^Q;6CbA^w=&568c-=o;aLn|O|ClJUI|F=g>c}&)G8T}$9eYaR zp|G??$B$YgP0<+ElMi5PN4wC*7qRs5-2<ws@j-M9n!mTEb*IL^Yj(sXSc_AS&NeP}2cwiRi5$sx zz*ydjGj(vsxjG?C`79gtc(5TS-Scl1&D`}USQ4*vtd|5Y+yXYuzAnqpP`ZRf_ycPHAp$r=r`rTmhg zM_}e^qdV@R#jII4L#A*)8JqSELm34`a*(h^A=Xrfhv#6D{N7=y9)Ihc?XJsJ+`C4{ zMATTIX8MFpNVn$I4^41gm^;p9?sKJ?@Tus!Wb!YTr42?hk9B0R8Av)AQ20xSqi8p9 zB(mEGWip$wEK=`f+8rJq@N2X`0`s0BoaO8qd!Pb+Z}iZgyHSkFR=2{Jn6aZ12cVGb zrJMC)6ThccQO>?V_*tF;<|t`ge$CS^{YapLKBAtXGO6t8)G|hUQltOs+SlHo^)NTr zEm^^cMQm;K3Hzbm_BWfG;b&y|*7Db8k3D(zpJS}@g_~zK7e)h-T` z{Z^hlTl`= zNYa7jY=)eo<%VsiLOi8Mr+tyUlT%f>>C`pd0)c(wWx(;ioKp82j@e7r26Ez^u3H$| zu~q#M@0PQ>CVRpi!ria3F&N3zgMB2JI)9TY30qg?J4C846UXmiq-V-)ZGxWWOp%G0xkssPK=Q-Ck32rUTlep(hp z_?M(3SCD4h#O`%%tt0i2!@wEQGU=we)hCtRmlbc=B5tdq&urLa2+ydB#9$K7n` z%e+G?JeAu=+?*exKORe3*w*>jl!yT@6;(4>E(^DLV>`zSpcqt6!ReuoX_jtyFm)vN z_RVQb`t!j1L0<5z6#4F3ouK?UMY>Z6m+hlN-)<1-hd@{SnD!8W^}HZlK8QWt9NKQ6 zY`D9&Or(O2JdxTR;-KPIrSJNGQj<15KQ-aMJuPNCof??2pkj)PK}<_2>jrD-d5bA` zMGdXKp$QpJIksw9obB(P8A8fS*LdgdDzAOZkvv!RS3kSXH9XRvR{w@dUYbgk~CnRv8)T$|mz)u%B%{($zJw}QGj zM@w>K;*+g@vHuoL?`bGOTZ2c3%$sjx*Hq3f>phqEyFm0|?ie7@#;R=zQz$v_WNbmBIB^oMt!yl7Y{j zQsc+;Xlc@~RZ+NQUwE~sH>cVh`pp>N6L^Zh3kJt=SlmZjDxm)~CO z`MPyNSnO{du=;Th)$DtsdM%%SCBlU=t5MQPfu$5$4qv{9Kh+~|I(h@BBNhGL3UpMk zi_@|kQXa{&Z#GZX_r3=peWtFWO5&ke@-!-YI5tX>SUu@h+L~uM&q6`Segn9H)U?5> zcnVF6@?)d7URE3-yjP^2VW0jyT!mMvW^5=p4}3$8q@>YQ*v{IPAMgSXqhu3<6w*_0 z@wRPH!ofa1u-Ep20?M`;*!tPhDv^|7ECRc8=a_PX%2hW$b~{SujMJRYbRKJ-lJ-s` zd*Z{l$OhTe8Xao#ABIP8fguX0=$p4D zg>RII$t42e?#!KId}20D)h^;(o?rd~D0L?(EFmaU>7!Jyl=C3qLA=3>G{*0|00(XM znmih#h|2{eF&2BwCCd4)?2fpOPF=GUEpCJ_koMI+COe$cCrIkuH#iW+8L~;pUnrpm zhaHjNoaV4KHLDrmtQ?F1?blT^+S4o6A%UL~c9h>a>JgVF{;FrI?lG+2U~!oh6gU$b z{he8vvIww%4DUYFsBfNLHWLMH3wx{EYGdmYVW>kWp(V6p8pMuNA64ppQ}SCNqf{iA z2$jPBjW%(nl$o%?u%y?%j2RyQ@BXxAF%9Nm8A*g3Sc38m@m14=xhQ7^v*`10U5d5g z0+irDOJ_)SQR`G2lpcDik~WLtvBhih=9^*Vn^UdgK*_EmqoT&z5W)o0AeyK!d*+BH z@-&kAFM6s6kwl8$u~fY@b$~_Z;0AD3Rncmjl7FyF=a2BU-&72{_}#TOu@Rglp$(kh zV`l_&u1Rrp&?0xg6^+c`=*HCRl=Swh)y@oEYGq!%dho4L<|`ogtE+2qrQ>rdPX&E0 zdB}BXkM7+h1uK2w9EHlx}e(^P`;%m_)^2kh5!>ZEnx4Sjztxo6D$Z$-T4e_ zU>EN1!PG8E$OTR%5Z=Dx4eC^UJ~;?dt!vIQaI*j}RD15fyF7hX_xiC>-4L8`O^Gff zq`J`kflAvqSXu2x>v1*;D{cSE7n09$dRc?~=J`%iB!gj^s*3j{*Y%ybd9amX~V-*+x}hcTopL={5*jN%}SPK2a|6H4HrP&g26LS?&Df%Jqk(+C03(SZjMuOXsi@C?|oQReU1ri!5>Ky zp&S#jYhI7e<;*gzYtsz9KGR^Rs_{lKx(QQ=6peY8ree|^rF;dYYWR(@zS=5VgOd7Z z&wu$C92yR`2VjYo1Y=L%HB;<3B~gwn3el~r7a6v;Rg-fsdCKJbT;0_Ao=T!x@;;&; z5d7uU#5Q>v%2smy2n3TxakR+vZVrI7tIcUkAPdNaVQF30kC0&2J&svdbsi25i|ftX`47NP3+lR@Y7 zDuke=xdS(TZF1MMA*%anU7=)Gz`>NzovUJf^_KH|Ci-sXKz{uFS6FwUNXmkdtC~<_ zvRlglpon_j^4HYb#yVLy1H@&Z-ox}!=#Oem!HgPemtCSrTkSc+0&` zx?X7C56djx1C?>Puf8!Se+1|aOc0wk>eThR+zGq!2ubIt4aBM@Jm+)xMbwzZaQ`usciB+-j^E_UWg=f2_nw;z}(}aA&{`#-= zKM@j4m=KvBc@|n87(ZI|@X2QfI-{AL1n3voy`OOzm}{~6SPyjbT=>o9cy9YSP3iR5 zs>)We**Bx@g8LF;9MtFRiEWe$7g%Dz^0f5!7A&uVu*62jx48)RPj}>O6dWbhR+U2( znf=dRPTVn|1jPA^gR*`+LiULutH_LhEn z6ZKf?V%24pc;Fzs(^;=6GH?IV?)u}F_a{76a_pIw4swO(-w_S#w=Q>oSw@gKUaA

^*$^gCUJgYL5I0hP;_$;!tw^P3rT3Sey$YEuL1shQ z1c%mSG4I5$?Xe;*ARHRAf$C|V#Yf)#qZr$$uQ{p$x#-ltzt-P+ z^CC-thXS1TCUwJ>Z!4#mZ#%k8J{xZ)T=SQ90lX!PN6*!$we5vXw!G0)ykJ3IzkFV6 zA)rd!-Keqkewq`M9qa%$NhaYqRhUQ+)rSG%DO|B8YrB52zRwLA-W$gt%r}Z252*^i zDs9`ws;<#Sg)OXX7ySJ-X{?Gt{EM+{1 zU|bg$ni4;-WH1py)UDO-rBgXU^xi>DB?Dv*AnLitNLr?i}6WyQPAGqfPxW`bajWySb{12YIM8X>od*!ZH#*_gU zdSI)8FPbRHi=wUumK*%~c&|aK*?BT$np%$L-w)h(7noS0QT#r;^jF#0V7ZGleiJT3`3?^~5yW;_;48`FOpI2}_=?+#&Fc5d)9d}u zr`nY*LDWAU{Z9G+j83+|+YiCFzf8_*oXMKr*|>eHOViY~I(cgIMP5Jb>!0+}>>nZC z;v=0J)*9r^zIQ(Ha4_HCfMp@Z03EzHB(3xO(;uX5U(y<0sen)zNy(8o@YS(#`J`$7 zY2$#^ZtE4!OQczh89Hc;(;7rmYy0kK141+vXJR%}-tU9sw(76h>kov!fnYK@wCkj1 zqw&LhNqXgj1Mtek6RMCmsy-kydh)^NYr`cUfRcO;79fKHTHKQab8VOD5!5*sO)1}@ z0$xy=nNuOdx2x%UR!R&Yvrj4?fLL=EyFX?JdX!D4rIivFFu-|7l-lBf@xbIf_m22Y z?D3;~Pr1`*d7g57Izulc02b&F(1p29mS=nYI&BSQvWL}T^j60^pJrk#HPV+oWeDQt zbKcz_m?i7Y5zXd0kHwg_2k2>wmx7<@KpPQ%FyW)9?aN9UBZra=epdp+zUKQMK!E>m zkp^cnXZz)Ct#IKgcXxOH#wf_zfrP!T7>mvT%o(5a)?2R17kI=$^~lx1>^UNg2iZ9p zhbjO(69j5GTpy|L!@x9k#)ZYe$QkE}uQT~J-}Fhu)IjzLXj@GzhgjN)FIB)j5_M}Zi34CWgJq-liEY$y z!^e_7+d-;x_kaiMq3M7fz3^VAD(|LD)>IAr5(P_%M4Lp3f(Kv$NCpxmemJn7NCGGm z;Q&+ynl$@+AyKfXPMx`=D!&kh;T5~&PkEi# zBTIZjzh4PFB|GtzR{n!3|Dx?kwMhjiqi7%9M82xw7Ccwdc|~PRu;I5je4gpljY<^& za_wv%K{??q#_L0zL$2Ke){-mW)Q6iXw#xj<;_Fcfz^d^&wEkT|&K>JpbRfkuX!(;% zIkP8k8J`f7!$=-fS+;4B9jFOXMJArLYt!3s>sU2uT+Pz7to^d(d?9dE>3g?XC35!T zXOF3USQH*daQZA8?NfQG?>$hT7W#qMs0U8Zo@bF}&6&woo9xiG;=V|{0}VQz-wi}L z@39~zI?Y-*SD1}yYL z6n78E@&zJRsz`sUjY12>-|5to(H^>U=t(+TSAOjP z?(Xn!KMj(zm6!4bD>L$oWL(R-GPceJ-9<~hX6qucLFr-4vqVLc+Y#zoSON*Q+ICNshX)8{^_Thezxzm z*IIl1e(SALJXz*<)d3j-oWj+<$fO@h?|f6$nXEF;tuvyDk`Ld|)Ec$q*{DjxfGjRB z(Jt`8>XI+$R`f)#&8Z8$T-Ll+6}?}h2%~54P_epSzEhG>D&ud$GFXp|%J2+>xisq6 zB`Pcz;0~dk59Cfk`w$}9`#FX0Ojd#AellWJG2B&O!~P+3@q(Ns5O-qtQrWppzw|h50T{#>;8wQ%&PtHOe+Fn;2*7pj-t(J4d<_C z^X2z!J$X2cos3xlkYHy~H~8)AQ2M!a>mNTTq9Q6bL#`{0VSsrH87AA^7Fb_j|pnX)9Y z<{Uqlb1~OAnPn~qGi9>}s$fJa#1`u5y+oCi|?$%Hs>w4vmwY z^-1b_wh&8TICflL8bzUp>;0 zn$iMmYT!#j=IYyE+{dx^AO3PiC8NY}ah~=@6y&Oj8xJvlO%uK!M>XY8$|w1Av9qJg zz$S`@4!$)np@|@)!dcv=0zB~B6Szd}17u^t)tg{wn^_81gF{s%ZQDou=ns1UsQW0s z;JGRe)fm!_WPms%^U%wF!IxqRW2&btg3ScOI(lCZGuElw7@!Q0sj8!8fUIMwI)R$7 zTlH^R%qu`mb&ma-1rw<6xhc8Ri9;*Af||O^WKw8OnYcbnP$;yrx9|OiiQE0a)&??> zZ|iqEHZq_J2msk;;Ky6TvS}F_FN;JXDO57q>shI20jPGF^a#tot#MBONYAXr`?ssJ zi*;kq{Gqmh%c$k|cB*?378el)*5?|>@plV6gqf3xsJlC)yx8plgzL65t@8rd2zaVS zraw!X%ASJ>4ev>nT!8BXM0?EuI!MjwwQjooG<7>yk_k5;urggDK^P9~HN zzsp>GI3&U73qae{9ffCXuogQV9mRXWAsJ|0r++$`x)`m_Y?6(;U?Rg}s;#Izv>v;@ zo-tM9N143YHsNMe$z_Bcm|He1tIkw|1eUKz|gc8_$0lkJYSYdv{a2U1-^*W$C6K(?ay)&>JW+y$^bg3}z~3Sse>mu`N>`ToB(kQY7<0Uweq*)B^#J_`hkGI>L}rH)!pI15Dha zZ#tn=oFTpkld%Fkr^E65P%&&@+K6Jy2Q7dH-1&@6NS;yQyNo724_jSKt{t5C#K-7hjlGNw9S z`Us_4INnlKa!iXJY&-g8hy!`uD#jvvWIfZuY`Yc&^8*@7g)$icrJedbQT|nDi`ojA|eC_)!YYQWo#Z# zRBnH+07?k0_Y|<-wS3Ga>GDr5XzX{1nOwpKT(cblD{ByynJ7zqk9ldW=rKQxGR`=G zmn8_xmT`Gc8#-UPV%8}wzx#7;dub>qqzi|e%)WG3O1;!pZj8F`S4J<5A6J|bR{T#& z%}DSByvK%9Q|pdlXZvq|?T>cGripx7lxgmYiMnT%R7(BSc;PIz9*GiF3*PUl4>!du zijiAB%e?x*XK|Ps1}ZT;v8O)KV!<^A6d4Q}DHOsdO$N}P-akd5?xO=b6A(|j@r~m9 z7(B%+dGxwH@Ys*eAmxn{Zt;Ioh2oeXv{_@rF*zi~G|RE9ro&0#(uC)KX=A6-EJWX) zVE1hl+ONr;VE5p^VE41{D=12o*l_bcg3*i7NFj)bZO;KqYgvn>@OeW5@;9b`1j81? z0l~0(K;Yq1FzhoR7`6?teV&40p98_Lo-3MQmx_(YG9+G)`TSl`n61wMMn+OSH?x8~ zSH;+{6p4ho1F@9jMgD}nNdL!dr+O_Nb1h@_bm+y2w=rH~AEguOKZ~Un19!KJ7UZ;f z-EDNb*>gW`l2sP{(Ag3>h>Z4t*8D6El?=k?Ga!6Z2%F~hm9a13GU=E5QXQo3fJ|TT zTJxZMzFQnWq?#iLf|pD`M*6aOh9}j8kbL*I*efGDKOVohZk*fol<@lVlPrrX8d8X( zQAK{0U3eC0Kc>UQ>jVhaVdB}GRWl1~^2{#V>k|g3+c>f)ffUDUf>CEODlWO01WU;{ zg!q-|02#CQIMN_6Qf0APBpP*_=4bNE*W6$OXr#|2`d#xWQ|OQsWeU9CeDX zu0t&W7Ied}dF4-b&%@0|{mmxikh&LVN#JE#JFlXRh}nB)Jx`^ol*(GI%j2m@VnarK zINr&Jde3I4y2Q@%x%)*Z$l?N9QHO3c}r)}nk)Dj9kTv*Sw_%{i= z(RMOp6x8LtKR@Tm@8sx8p%^#cTRSt>_>#+HZ653B)N3MYGr${9;0&XeQ?cZk4`mx7 z{*C0A)TgZ^|2qWp0&%W_I+F29Ygm?aI|pHhJhB(B4O@#(%3gR9ge6^1e-AdWeeqzu z0F~OvGcPv?p@D?RHH(qi`*IOTyb@PoNv};4s7+kdA;>6Im~shu-H4PDjXn)4P2wnx z^hTQDE68^)8}0Qer$AzH$7PJ9M(j3DrngAWpEwZ}Pl=pB&u1T=hxT5tq`N~kLRqGaQE12LB1_mD}X(^o7+b>^Ri zYkSK2+I8&mV@E4IUYO$QF* zbD5!iWJhqo;bw~>eWH`u1&6)M*SD!|(J{BsHfq#UsHJvVWR(Fo&9HUhtA*Bt%TC2| zYJx8kJv$%yUkxE(MS}?EB}W{pwkE$x`|bs0-HqDg39XL;aAdMKbgYAF6bVTtI}I6T zESD{jX7t74m3nx-tVO8S1EM6Jg)5j8+)Nf}4C5;%IqJET_72>iVlWoxHj$$!ph5$0 z#kK~fRfuHg!9(Wfi05)IDQ7ER%({gP97B1321&x}rz&Y|6S*ebGG$-~+3m6|8#zIH zyrRPm&m60?R}lTHp=0`oNX`{%)wCtWn4nPSDs1R&@R$BL+ zB)SO=kV(ASUX$AAowG&cBe7}m9k3PF^lXm(i>@)mnRH6BSXFKvqm(T(A*rfj+nl~H z5NbXEFFj&uDa<&j+OJ3Us6Sf_GhPk6b|+Bu5(Ytj z@PrFU4M*_}V2m-l#0kJ8jGr zEAo^|>^f3JxcyCx;u1$ph1FC=K#9Pev(6hf2CDUvt7AKH0OH^Z*wx>dq+^Uum_~TZ zPh0QfN5RnfI?>i*_e(8oT@i4)Mtk6z?#c~OggA->!~+jL(a1ttpsoM%i;OkFaH`E) zM~5xE8~6AmX(q-mm+yG|+=M6N&Jq5-k~TbXVj7 zss}Ge6Y5xbjz68^&j3~StGkjI)Dx!RQ>Dn3SEzjAKHwH52=Jerd@g9rbHLX#iPH<4 z%WeLU?DvUG;NvO<-MEW(@taX4nggx*YDbTU?bv$;-yh2v0n5_ZYDyqe%Quo$&el5* z(1>8Yg(_v*-xx}Z0SdMOybG3r6!nML;*>bSuh#~`SLZRjbbfk%cE4S z4WkbFCIO*pq@2B`0E|N}Ii95P&1|(%DM8-Z;;bcUfL$yw`E^>qRF$pRSAlDp>Pe^( zMfQab>LA~{33)noZtPm_4!sn^rRi}-UY5%>{V5y}F`li2$%UiQhpJ{5D=tzNUKKS+ z4OatWsh?|%kvSH08#Z&DUyxulwV=}7v=B)N`I3TRl(~U#xRdv(g`5M|KsA2SknGkY z;00&eL|lI-E2ZYTiWOPC@gD7s6V-JxeGGoV;0d>;r5+m{o$SZtto}Ik-&z3p93Vqk zKwHf$J)Is}{chf3SwN0uEs^~0iO#|rb;H0DZ|)3T4Rxi!4{X)J*fFFK49^3S>ykq^)F!#3g^;Gr>Ia>R=k|p33I?x{nE9focWs)-31>J4 z%1RAlo@XXvZoVIJKVdXV3!hjsS<-mv>H_`VV8YaX2D0DyNWOheo78DlfJMs4S^wn;Du>u zx&ZNmst(pAVWvplD_}gPhfE3AGaLM2Lrm&lSQL|BfKFj|@E2DXrmkr!zGJF)iSY|v zY~E5CKMmN?q+>{vbte!w=|u4lFfY0qj&Pfz&nSD;dQ_2x^{54 zz;$}hmx7StCf8m~1F5f00-2oB)HkiduP+(0p_?8B8)5k&_5#CZt-eX(?^^Vjvp*nH z9Y?Y5TC=i{F5Q$bby}Ae_xIvO>}#qK*?US>;nMT0b+>@6R4p$Oe-x@wSKTCh3#O@$ zm)bd@u2{WT%aG({s3$D5rzg!3LB_74m@E4UGVfm(I~#CA8FjRfd`Y3{i5Wo`gdd!u z%$9aX!I3!?UBDSfH_h${V6ZUL(@$3f11XdDMKk0yExpOJWNVOYk7)XC1CMQ$K7qSe zkS+-h0VjciL%+r3z3aj+N(`^`{ojB1T;H!blMZtQA?~h)t4G+qp@+=rKY!#RKZw)y zSTq@ntRj75U8zF=F7`?rD|F5&7LoszV-%YPmc_iI+h^&L{!L-YaNne>kU+sY{*9Iz zk|yO*N{1vd>xgsWSdhPu#&J}t8#wvc+pCYJ6 zcJ=4*pWi4P8m}}4lIAm2ALv4{vX3v{n8&9?XSR+jvW1d!#LQPYRpw#+y5S=4TI?-s z4O>)$d>B#Iqvf=tY}|g*RZ7sLPRgAO;v1!FQWZ_aY!oA+Sb1g#N_V4Ggrw?7*Ot{+ z^kAHG(G?%VW@V-FiMGj^B0nAn+BX)OO}wFdb|8sg!@9htOR)KQ<^>}J>Su)8$yys# z$;xFKfm~l|7)QkOssf?6SP*zwGP6&htKcnG94%qm%plzOY2_r;!%Fln;SDSh9$}_#BR0Vn3w0tRH=O${w4rV zt2%AXi#{>XKE_<&laxsmYn7>nQ{M?aWaV2)DjxgpCrny*kHmR4r>Q)@Uni~} ziFO|=P)?o&Q#nyVNT~sD{F^7l;LE4b8CCEzeLiUxxNpE^!N1I^r+Xd%WBBq3V+i;) zl=>5m_ENtfBF=Wi8ChaI2X^X{5f%;>!um!1AFQ)~FQ&7ag7?Vt_|8t;n>^n;B&E~y zK0&z6dh8k_`<85aj_j2Dxm;K_L<6snGG~1O=byC$c_*a2PD`bc7`deA&SbBQ-4p+`TjXw*hq{)%7f0rfe4!bd|a^p2`6 zVBbof%zkk1{(M&06QPeMdrV@QTNw)F%h6rGJ(#8WL!LHQxZaEB#C&?lzyFslRh;;J zE7nM@>~IS#>T!gfd9Xg6jhOHf(NL`|_p=0JfylSP_*fDpS&L=;eX19#lHk`CnihL* zu>~qqMRT#!WD0zes8DE8F|!D`8#I4a^MauuL~dL^4kC3*e)@xInG04LK4%zjCpb(! zmM_1Ny}<@z#T)F!D|$X9g+EoG7_{fA!=LoUPAZ{Hq5B;PJ6V*9Zt?aTNA2Euo^%@w zBT4(cuP0KtjUUru=W8@ox#T2SF-rMp~%AS@n6z8V7)wgsc$qyB!QCRvc=jUEvtx~8ZEKHrhJzxk_0B;0i zf+A&3U!s4O$LEgVqwzGmi1g%ek77ICJL`38# zf^$Z_+~bu{n1-g9Jyu>;si zz1RB}stLyni|o?!f^e~+i;MAN5pX~NR0zfQIRI|_F9U3)7$ele;$0>&%DUkDYGlo}@O4C1@=5WPRM{ERvtOcs`pw`)3nd zq^rDzES0J#HQTUL_0DJ)M=6|i+c0Z8E7BN9hG{zjR!824qdZSE+KQOio%&tXGdb@i zLC`brE@$bov`4p8M3-Q6?Pud0)}?+=Wxzu{>5=sY2cZ|H)|JKI#6STV4#ML)4V;~1 z3Tbf9X}U9k9L$}bTal*6J@OCP7~`I=E7{2KOTA!J@oOQqcyM`Nz;4Qjgn_4aZlzU@RlgF z2mN~=pP}b+UO6BDg{tp-JzbgSxy2QV0AAo-u3*ck; z%f$dhX_eW8{>97sw}bd8%mXk0)ZlUePw&Y|FG=-3Z{`0F&E&rXbEo} zq)7~B>fU{p_mGx0uA3aELz-RL8F2i&c32QcPHtJN>IE3N;s0yDy&5>Zf~kS2)TDG)Ni@^dE8qRJ&h-S; zt{$sLM2qugw;oWY{yEEOL88;9AFggOF}&}cZ00e5OMsV8t0oLg!96CG@>|BtIpYpP zM8^}EcC1Oe^_g}{ot8JhdBzKK~mN@obfZIJ8Vle+qa-ptEpo z$DRzcc;rxIa1QB zw1QR$@T&cz@kk_KLOJ*OGk}`mUnTtq8~MLg&Hu{{@IT|R`*-X4->+2uAD{dGzXBlg z>OWs={eORmVgR_4&;2=(e%$!Xj7A%Ui;GLiI$U43woR+CG^|{=dGZb1M@HvEXtFjK zNKPtK>e?9!KJj*=T*-CX&9>q{Q85FMF%23 z^)Do=4m^!}`K?LlQ-fta!c4u4B?u?UiYsyD+qzKwl2g=<5U+aj*QA;FcV8g<^`=eL zJ6Yv8reqhEj_mac&e=P$^`i7#$KF+0MPk z!;YU4!#BtThvm;>UNKC*R6>x%Ao69d5;ZT@Z3e1owk%U#SBU=5L@wRm$7-E-D*IFm z24tV@om*_S=3-7N=5D0w3qv}9R1TiF7xKISsqRM8H;b`H3-r>^`qg#97BqmAPR2i; zE`{CQL0gQF(7G@F$M418L&cR+;txbceYC1yiTb(NG`7>RsgdB$g&2`QrQbP1)>JGo zQ=CwL%5n~RNERr{P^VO@y}5V08jRH&1f_AK{EOdh>`FQnEI4z3Wd ztp@@v(!8h7ai0$t7?ygkC$W z$Q5a{_`~?rS9zon7)ppklCf2Gc08LrHgyn#R~o%boCD5uz&lpq;o*)5!}ZKBFkugz zWaGj8A8DQ@E@u7{VhyQ;aNe-~Qv&JDvT?FO=o@lrlxK~9xzuAi}%093+F z4d2q=7owTw>4XReSNm(8OY`hYQ+4%?CPFB%XYdyCQlC4eh|l=^G|WpI&ND^9^LQt9 z!e;#isw~M3X*il2ir+pwvU|tO+l5Ee8uP}CJ+kFC+hD|`$s5O$jtvp`lYgkYoVz^zRO%Ai3?GIr?>xeqo$v6XtP9`b$&a~gYA ziex4l2{A!B>EF?N``YKlg0;q9hdvCIRSv!w@>EVqUdTz^8k7_Lden~((w@b3TMpj= zQlE5|I>2@M&w8K@zirJ=GU1WQ-@w@;tBPn(Vl#Em3~S`;a!Y@a{+;ZZnDfLS)KEOZ zEJdTyF8pq<7Oyq5keRhh9dF?#i|v#s)95RieX83s=tDIFn1wdk#La;`vJf-gMBE0T zD64&Sbn+bTo7u{VKAXcIKvXUE@lmeCkJkZThWgq)v6ubzx9sv%Vmgv>59F?y zfcw@I(2}IvMCEyZK0`|a2d7B;{rmS~1&IF*C)SgMrAFnkP}@}w-y2Tny}aJaB;mFf zwSEIvC?cOJpj(o~;>4Nh2@B~5gmPRzBo?%jBzjJdGFd%l|Btt$0IIV;Yl?VlfHMFd z7X;*-CJK)QXd+edfsbJ9|Mz_p6cn>^T11DVG7~saq)O|??6h+l1LVR5EfHS>2o6*p zWj&v(u!=~*)IaB|dhHMW6&I~;H^)qEH&+u#dK41npPP92xI9;$c*$OT{0$_dN1Ck9 zEsSk+Po`4Q2vQc&i%jDeuy=p#JIRcq@CM(wZgpod`M4U*139RUuFldq<=cIZ2Mi@f z9(KRLU_bzQ<4PD#`H!GyaH9VlGmYe!0n>>YFu5s8E(%}9A~X5@zD@po`6&iK=Jt0Y zME!gNgEeNAbkT;v!F|yB#fA6H%-7ETXD&EV zStCdy(ptvmj_CG7O^f0K7dJ24bYao>j;c3f^JzragNl^y!;~xB#$bYu&$v2GK^wI$aGVe)Tz+eBV++0;h=ccY9{ZS6OMd%w739 z1R6@!3n5&ZL4t0#MRYUA{_hcKa*WetyVh>$dn-N{c0c{=&vgM%Nm((lONC$m-IOpE z`)jM+ZS32ms@<%*H6xVA?P~&`hgn}CzAj{8aowocZlsctjN^xp2I+v5r-oF2PqlT! zgF}=5ApeR~OFvBq?gX~W`7kMvQmTa51=K_0`4h|L?)gfVd@qDN5kWnn6S0>o zxr_6b7*A>?LJ#hn?UR^$ny0kjBjR?hVS&g}bHpj&Cje5(6%!Q^-icFQUbivH-7tA$ zjUB}RALMYgVC@6z-l#4HlGy*4{^t;o#S><)iQOWyym;>qH2?Bw$<`TnCP9dyD95e} z_dUrcQ#TiC;j119VY!cSaxpJ(9Mk;0$ftw1qA$zpqKHH=g?Z&SkFCDoWN5#t&1UR@ zta7ij9%*_LWur~ou>{Ru+%1o*L0g~06;l5FE|szdQ7!Gv6MT#RB((>aQLLUvasu@1Y)i@5T>2e`IdG z&!2o?CkH)Bw^-c5mitCE$P?QL8_%ZtHmY|lyC9Yt=7{c_<1+x?*$C4p55NZ3#)RQ> zbLjBsG@toNB9Y0KJrjFJ0Kg}-uP8_;Rtd+UZ=HM(kE8f zC(X2@)R)7-6-)W|Kp;`|OM-4K?7=YN)qy&aUVS=biYO~hwr&d|1q0;)#_+@(9{KXw z*6FB6t=$7PV03|@R@5x|z-INZy$=DvO?4>DC74h3i~Q+<)V9pHZtTgiPOre$b5k70@VCaiAqMvaM`LhG-^e(&=Wm5mO4`mS9n;it{LIk6c2x}vO)gmr1gccIi|!OyP>;8?9r2cs zLxrVE!fN}Kfr0qeDd=1}KpPv3q2w8ri0ZCY75GUGV40iJQdGN{U)8i`E?FzoN=?+c zoW~*3jWWq*1;ku47~noFGaQokpM2VBSWG$PNMe+VsivO?e$AICv_bG(rk+cR>+(*e5e=}86fArpR> z=}0Dn%JV$ITmxc(ffxJ&DvNjEWI9eiVN;Xsvf81DGOwMp2hdmi+tJ~PoEvLo16)v; z5X|!OQ>zfAaIufr5XtKCFreemwY$&Qk4XFbT(8!b=ZQ~#ruznTW3t<^9#qT5esztz}t8P=)6sj&4HiE8?C5otvo*>4k2?0~rRVvB>Kn z74?UG@`AA0Dt*tcTy_&2!-&}UQ~UZ@zP6I{I_8K8Y-?9gb(kH~c(C=tqSYblEW{il zQjwx7drQx3w)LLzKGMsP$%$EEp}|b1eYX2`nt?6M@v_U%#xt-fsf7qX6R~fxdHV|w zwj8nGrnYsn0CAo!G8{&DEYe3^P_cpIS)Kqd2?=y6^DIBde#w*RPf&P}k`{xjVAY8;yXSvuNo zke1q(Uz7E0F01F(-xSHoK(g+ND_II^2E>BVS6kqv&4&?tzR~FUdbhXt=9UCPY(;#O}6axLLgUkgdXRfRI zS6csUl2L4y2*DwtA+kSod8NvrLn*=2NUVUPC=WqoeO!uoX=>9ndeETrthNHnyHZY6 z%XTsJ!_+Y5@P1F)iaQb2+0;UKfr*cLcJ)*E+tIJ{TWqinn`|0Fw9S;TG)d)D~u%{7BKw8lh(hYq>Y3Z9XT z`{j6~(Z8z1Y9?VhKSUMZAWd#eYPr*Uu+MTb!&UusHypL|QS*R?v{bh+j}(8>HjS_9 z(XPZ4k^YWCpue0V6Tq*fF;fo3%azZXIdKH{alK9qqquL zcyl%X%-+pujAb1APwNm5^r~NoZ{JC@)OMB`V1<6(QXn?xBmt=#NT;5#NIwmnV^pll zmOw2k|MxfP?VR@4mbIx$(zNL}00H(N9v)wkCgYVS z{&V|>p|M;x6ish($Mjq2PjSuF+vKk)pP8h;^R3^ssOYpXOv6K3qug(Pr~=)22N*ks zU0Ani=DVv~7MyLkH$R)t<=rSKB0~@7>}45nC=}YK?2craN3&}UsRSMZwKBvqL;;-A zVLIb0@5-x#sC^azIJQ6a_R2llQa~!xARiMVqE}cv0{yOC7T2G4O7dQrHj}(dzboB> zWi0ZXg*T{CJRCDd4Igj{6ynz6gQC*hMt1T1-V|NV!@D-u-ocV@(iDgT1)$e`L=!#z zSz7dMS7Ox)#eD5eT>5Tb6;}wFAMf^7kSsWb^z$kbHjS325LPFr23HIN@7C5khz3MC z1=cj78i*gg&^qkw%WYoTnYH8{)Q-2OevPd960uv8jaYAeBPsSQk4(U7S)D1Ud$CnCcubNSl;ImNb9my@d#*ncy4hm-DObv)LFBy;*}Y}Y z?gamM=k>BIAJvDV+KS2fuAmCaN3kv0JvioQ+f&Ojz0W8x`($9+cE{_%2*|gK=Iuw= z+_boY&NtcYhpz(+2~3d?^xF2W%BOiN5-a#{Sx<(KoHjkS^eV4F&6~ZOr3LW%Cqy*o zl*LAmDIqWq2GUO!Eb`c#Vn;~^E-1eK7msPQw{-?<(64~zsDEUSKfK}7{_1Vk4D{Z* z&f2clVUwJ?!8aRX+4>15=s2u08+r!+m%HRQG-U76vOL%Og$P`|M#if|{C^^Vu| zQsO@1YOGMpXx#f#U-4bRF0{Yp*6tMZw`VOkcKf{tfp^_$yoR&$!!V74@@38JG5vP`%Fp9YCRTZpPow>*Qb9u-jk0Pb;N%$TiL2G7{LylH6NtJ zc`vdw25Kf5eC`9CzTrw<6)?%RzuQL0EsX)P%re!_s;=~}pseO@%$Z(aRI}4!aUmztrS(Xd zA*KZJ;2^?V?yPCbWrAE3q6;RKhX7PZiwSQ-1KO+EijIrG)ha8 z&l``rXK408B#U$EttBkuhNtZa`$MPBH$L+^y_HDKIO1! zIcj2?RN+rH0FEvPLZnYd0w$$hRr}3#vV=Edvy&(f6Qd(nXL^*?(yXL zh>yDzIlm;{wNRwcRFS?SlKoP5n%TQU6!}#h6LG!Sz-#%f`Mt(ij;}oz-GHr7VSN+m z6b>xS{zJm&uN59GPo^%% z`SKaIE4u<E`K#np4v3#@*9RuYZ>CCM&EWGLkz^+h_pGbLfzYdnP8a&yw z;6ZFNHogqn9j-(MZ=pCdDpxes3Lk0^ise2nTkclVWG^^;Nmq|}=_L}#L+@|A1m-2J z>8jloUVj>Vkmi+oK##c#-`RaaUVVs1F;NcB$$0A*tLZsVul-BR8039-uJR+tXq>b) zI%j-N!+{NNfPd;KSI9K;7t*Ywb&tO{qt>Wmox{d{2<+|D+SjDkmQ#k?i;JwNCX!4W zJ~}gJ&@`8(GPQtRU4@f7Qaus#PnR+?=%>32c8}2=1Sz>52su2-pL7w@tkX+zM(?Z( zB}QP-Fa>qld~cE^t|DGS9ysh0kNkIJ+LvI_caGT}BR}1Tod@gH>)P-7hc!OmjeR*O zS8?#a0FvBX%u3we`Za(XZ|*a-9tb3p<{um8gwQ^Pl;j0a^T=Z>W}bE0pT0z}IpP0< z0$HmNG;CQqnLpL${k(>dbluMy1k1ocfODn5Ut50;(vf+?%{2B7*H~)*GN^mOkY+jF zHzOfUA;|;v$HEN3c1qR^MD0T)MCPLrr>}j%c?W%sY(QBTawv*zB z1i^Hv8PTW)-R5{KEinO=c+kht;*vs{-@@&F@7!MP%+Y?1gQ5WC4KdR@rHyR@UQT}Zqlg*ZMRczk7HL+-!-jQB z&c*W?g?-NhRP#&-V>Q|1?Yc|mTT_nY+@VCs(s!DOYVs|=SyOfM$Fc7>gvp4-H2MNL zh3z6T-o)(Qk23Tl2XhV6K97zYbytS5ED)c0O*f_oVc4mOW8>pokDG#=_pd3>h%#Ka zwuf&I$%R?ZPRlwq77KmAf;Y0Ir^a);G6VNVi;44p>c4cW1*iGjoR{DEp5|vr!kRkw z7#ae9LvlfZ4&+76#$mZ%xUqmw${Bm%9Xik(^?yBX(zcxCs>4L_1 zUq}2UyV9)kK0j=`S+~Uo#i5N;2uXM`X!zXmTDz?hTI`Ij!B-%*g!FV|6ddK_-hd?d*#8smHpPj*g{u zdJ|OblFHsCKSO;oMr6%lU@Av(m%7k4T+VY z?aC>6q_%R^%yl3+n%biFU12SF*bZ^)SdNyux%S{a=Vn1yRgpx+iT^&b$fxZUk-fb$ zuP)!dFJXC%z+@v3E&C#>tj{EFx2*$ZJS>f8S^uq0GhhXxE zw6Jo!y*ONOm9|{|cI@R3*Wg%Rdm7kQIbCm8vYfd2 zdRgYSLoP;a$aaMDky1t)eEODWY=V2il6Q~}p8;4U*6i|>scExEVyYeGPji0GL0#Ec zAWUOuwc;oC0Bpc~Ejhw#kZZ5=dP%pWEnAvU-Bg^?E_Am#`(0)_pYza#2e4MDcA|V5 z*H2@6&&;1X`fKnw&}GR10##!Yv&6*gU|uyUvp2g;Daon8jJl3pa9!kXIm&ujovp`q zpvTP`9=nm4yjM-K-ROO@z;w36f0@q^bU%lFN2s1$Al_p2JL32*tW7=e2-#9H>@5 zW$f+adn?!ET+_{{)A*UMGH5NEWsBG`=yBfK1@^X=UPvZ&OVu*Sh*iF|F0y)ma^{bG z0U9+Y>(OXgazf&(F`e`CnH>hGWSVZ>aS3s_Pna9wh}Q=+WE9Oj@`9*62P3k=oM=48 zK$pj5*u`ODPOahP_78pX;PC%&ynn5PSa^lIRtULq+`GkdKY;uH9fESz{SUoe(*y9ni!G(W7W4m6QS%R3g!S zmFxbHsB2!muA5bro!8Ccv`TXfN4*!5%Ey9?%!pf|%&OUIa{~ry>n@pDtarb5s~6By zYPT!)Chw1kJ$PX@vO6#o71~@~`7|j-Z-S*m7U`4h zPM+V=bo>_m5FUGeiv)`ez2)@Q_1T`|_fzE$jgBgvI?~lZX|=UE-F#$>GdD@_5#WG4 zh_;Ci33O~EWJVrKGPVrCPr9nOc|Qnjqq;MQ?$mP-x1XE_i8GoUoq(<<+I;~&KZYsJ zZCib<+s1x`AR!l=xf`>@{1oRKmkJdj84 zv;J>S!sK}`q_b~c5EaCUmlv~CKD{N$68rjeTUnlF-;+8x7{yA*{o$M-Q!*^}V0|+u zB5eNae2sbI8?SDT#HE?)d=UlB)#M0HyUMIYMZGl7v$K;(y?e0_w}Z5;EN68Ba_W9O z!pUs(^1}xrbUA{}+t85Rb`&)RTYUGMK=WM{T6-Zu1!8ZXUSO>b>$ZYIGu18y?*?I- zTO&yxGZ+1?zOkzJ>7^D(tmP-$6A6Sh3npz1u&|iBE?Hi0nHEq95 z3CGh$$ZP%CeX7L$Z?Eo6>(VXmjg27eL%Ak-*tcY?+LsGktjJQC5I;GC^@%H&L~Kd zBs7^O=bUo`BC&xc=co-$Xp-a%)9$^`obSy2?wLE^o!|U5{RcK!Rd3a*de^g_XRYNf=<@FAW-(_S|KpRk+`3wNI{ALa*^iq z>dGC9IB6qa*^K;5{0zb85xC^}IR#vJu|b&ucjA;sk>-F#qMG5ghcfCpbzPLr4+kW> zp6j;CaR_h@%Kp*nxc!qy_)yxrhUx5Zl?xzq*-kzLs+JeKiRBLzRsVT)@uQ>z#?^VW zeTj9!P5#&x+hVMcUzgwgR~}~EL}}5Pa%FXXz;OCa%N85Hba3ey&-|W%G!&QCE+`U` zHk0ojblq)s$s#5CT(L(0-SqVwH#agUd!5(I+f%%?l?-d(82$_%y~J8$l->>1u*?+r zep$5M4X>YCcr#fM)0nv(g&u{L-P2#3d_3#$V2L+DBy_m^v^a^sskz7_o#oyvBqQW7 z6?gpl*6zhSl*qfiKMsd*$8XOMEBsW8b}0QAUKOT%?r&)~YC+oVv-cpHKeU}T8c}#T zsGp7vtV`ZXepovaFupX3zR@h8&~RJi(xy&!7pBbogh?J1<>W-)URIv}zRtlTh1Ar* zXWZ=*Tw>42ITiQ(Rj=u`TycsSq);P!>3YYJc5Kir(P^#~&+va_x1j9+BbhCjT=8{$`;w_&HjRpN)^iH%87{!hj zMS!l4i(dwe9j>gJzX-8XWW8eIL2fHR4RVUYAVJO*A{0O{r#v0|0>7RBhZ8zfblgL& z{lQ6Jg8tBLPh@yOcSg}tOTO8h{58jpFTs%Jz%DIUtH^~dV@GWdma>r;*Odg}IkicH z1G!m3g5}xv=CaR~<(thx-ks}rqV2Rq6Tt5`>(7@D+zgJ;C8j8ythOO-@6Gkm#Lvu~ zm(Ps~*D8kgD7ATNJ(DlKuqVgnkUC9&LsPqJ2}4NJD9?K7L1GddI_zq|Ev`2}|dh+Y2NYJbC3Q@3}8o|x5pIo37( zt=M>bMpe~#_No8VlQwKjv&K?MTcp;Ff@M`t?M$Jo=1F<7P)p72hXofYF39pnYS%x6 zxF{)f8eE134{u8ct{eKz_>Bb4BbQ4#$l_%#Eux?<c^FuJ0eFX?oW&@+~lYRogrqy>#Z~^R?l*zQ=LrRfK#G1tkE7&U+6> z|HrGbJ_YwLX1izB(VP6*Z8P!v4Samx;amlLG&2rtOwmUb{>?vh>W!Bz{+QIj5~#9o z$#k%A5Hn5}{GoxryW3>;$#2c4}1wwpQ`6aSPX(3+_iM5+P z165$xPw_8+q?~7ZbFBWn7u_-;qVxVYT+5FwEmc#_7Y^p$TD-oXm=WP5syE)R+e(i* z({>{euBtTKKb{_nY_Ajyg`kT2%gblE=JSjAo2u8_1}u$Q^+e!>REt-Jd#vC4mxXVh z9^N;Zq!#eKq5+*beNdfc;0U4?b=J#Zcb4$Y3tPGx;~EgVE{)J8_@+Q`;>(4y7F~8`~JxL@%BJAb!px++etoy$5~=glY{%$k2>@+paG$ex_)pl6N@#p z#6#^swg9Ws`?@2dd=q`>IDe)WUiUcjDIow0rIyWqKKQF?xdLZhu*gQew{JZ#gXa3z zz_t5>!%7PE;pHpA<)k-s#u~w(*+c8E=g=|nHL)bBhfH7}kTAC~kb?|VN-D2ezr@6+ z(ymMG1)fAvC!WE5-X&cfE|DDvt65AJhbM@L9F6vLW8O6;UXJvf$17&id>8^JQ1f8@KL1R`5LT*j>E@(T?^Bicd zd3%)&WC9-J6|qN*NNnegPo8dtidFay4qE4|b7Am4Mxx@TXRbb(tZX|n(D&!;Gz?U45Tq!ial+};c#vVZpC8oE*N2Dx7Qx!VT)3iA77GekxW?jd4Jmih%j`~=!9R~ zG-5?PWAxG?iCMJ9Z@~XA_bT%FdS-2WvP3`yJa_A4whaob=9;371*umQWSX)s(B!aH>P6ykYTW(ixe(&4v<+?Jebtc1h=kcErE>RCW zCQ*zUcTHbC;pSv63iHJIY;;)xhM;3j@Q(fdU%Sdn&>9D+4=1k`Zjta3=Jg@;!W~cB zdJHI%Q=g0Zoy2FVE9y3T%sZHd4xp?)o5?6=oVlF+Qeqc75)*Y&{k>zm=#g!d@xuK( zqDb>h19=Ptn7+Jhzdf2WLGm2`$qF&<>=d`v*KyUrmjJ4qUPe^`71knO@-aEh0Ns9i zs1m5I=$mr-c744dm8 zrxl)CzeE4a;d!l4n_c%);R{6K^Q7CY7AuF=^W|&gmTAhF`;^-sE!=V!-Tt>q1K0ed zdV0=1@PN=aQtl50Wg)rkb#5n#UTfhPE%!AB*IY5~s$tjHz9UMLy8Qx&V>@)?Vo$_P zu2KP#TXAd2b4yG9ZGsN?pg(UF?6f)(HheR>VvL_}nkzUKG>mD@J?vZ+FV2sI&;f>_ zq#afxy0Wghx1Ng&SjIk1FekM{mOF|sew#HEv&9e;cI{3XAV6;O)@BRa+v#>6K&u4l zg~u#rz{p+5$3Bmpo(P|8z7g~NBlG?5$L|HuE$q$S!A(m5oZMz%;`&0JCgaS2?ByGj z-b;*i(nZ0`lR@TL`e*D|$PXOA^XnT}${SuYpoGin2_tJ3) z<&pD*j0g5JGD!*TAu&enZ>;5)y~K-Lc^DLM$G>*Q2JMl zPV<{6cN~?^Z0?orc&zTMpVz5z*WBxZ$K(_!3m-4L^Xw3it;e<9q)u85rCkR^>tIQ%8Expa-j<;;l!oG4y;IBm*V#BbtxoJGih6GKleGlAHsg9l z2=@mKn_;(|9c>g5`)m;2SBd4HJ>L8k69^F1zv-V_yRtvYXd4muwK@Ot&2!7ocU4IK zGKg~IFz~sM*F{&(o_!0(ZTQ>mY?}a+?JjZvYlbamn#(fn#IyW9XqhAr z?_Fb``ns+Y{7F&%a8kPM>?FHhcVM1sJ7ng7g?>xQaJi?V@z>$`MgW~5${A%a_wAM5 zlT$WIkB#<|Ym{euU!v0>h!j&d|q_Hdu!?V_cX@DjKy?cNCU^(FT1DNH(OVN6K}m1gk$=u4^E+jj zDRt*7-~WLf9ZbOoBO@b1doZpyZz_E+Psr}p;*VOn?=4+V>4SU^-~jkJY9bVA9s^<3 zuNTI;L)_rHrNt2!NeE~^8dET(Y~{Ighxin;$oQ9Y^dCs`YyUfiiO(D*GyR_2K|5`X zWGRbXAN~5->7}?IrlJdDsvp(I!jxol7?*L#lG;N{X{2&O-SD@^6&M*8BQd4ccN9~u z7wXa-b3#KQI2E5VT1Z82ubk5eNTfbtd%4bTGXp|&< zJ2dBLSo4NGjxN{t@QEg?*8Cw6xL=t}e;dZRyfVr3Wv=EK2jeFSRh6>0gL-zj@nH~! zPnb=+;C)(u9atK=(EJ~^!YIejn;m}=0_gPbKj(f%kV+1A+G4UDHtov%!&XwF?lIEb zW1~4p1{z`i)MLa%*xs@WURF{l5>6OMR7iM#lIb86!o26OqxWGHvxFKOKS-~4k-cB@ z9oCj3OrzY!uKl1V-M78ZnXIW z(d7u5S4kl2S2`j^=qoWz8s&oT&hJ?UMN7>M8g#i zCgvU6e|(XV!k>8R;-{HrJry*)IPb4w0iN$aoU>f2)TP-ilc|WGWrl)V${F(tN9N|( z4M)zmg^JlMY`TJ)Oy^~kjc5{cKX?o%jjt`YvzJrbSpOK^Gnx}scNAM`5A)*gjbQpt z=ty2y&ODiN$bK}^>pHzik&6!KXehO# z8}TeoJd&|cE5;YPFu4StcB8(Oc3T`Dt@4V#F>^WUTSKk0dieO0OgUn7FLIpewios8 zE9S%(b7Eq1jYqH`5$vNmok@P(vQpUoh$h&?2P1ROwYQr!x_8%ZWmL+@g;$8qH8wh& zuQ8@1oGiG*2Zb&)p+1vzsoKM!_EzoBMixPu-u zqnr7DvnH))FSlBK9N`(B<6>zW%ptEZ)fRkEN8n(@<$ludko_H&k908RMLY-4%rtt; zEu`|co?su7MsQ>F_Z?FNr3`aUd|=C-{+pWXbVJj=uVv+}W)~Ql@p)?us`h1tM1OkA zF6*_-1d(7q=B0jLsobu#Tcrc^CO@=CdmEroy9yKhm3EUyCz>s*3Qiv#QW-)BdE^HT zst^mJ_#h*EPc=d;wx7wm_Mh07YKV;BK)0VPbdDLD5ne+p9do?-bvY z$I(veU6HxDi=7PWs1N@>sQ&(g5?XC7oV_deSTDMx*m~c$H+KepZkssv-k8M z4}lG=7#Ba*dVPibwwbA=*>V`>bsTlN2u7@CIel2+V{g2ux*k2!1o2*-5}HV#Je*Ge32+M5dd{*O{^;FV>2Lw!R*r*wPgD?6 zD(Z+YdUov&C4!zlg0rV6*+RCnG^K{xaGV&fUbOFstbyN$M?a0=W4!s5h=~u&wKAj) zWL$^)4^}tWif-c$9qR0RpsPBG8w`3*101%mz&mCdkcL*(S+IKu83kiA(%c-pbG@6^ zu7}qjz`@t1lPv;+p7=X_;@E!FSc9pU_`#ggRQ5v(oaCgO)tF~4zfw6Wc z%V&Ur`SjP+svhojTRi<$;VA{n;wrA4~NW5F3pgPDA@%Ou_RY(-Qs7_H&PTl$h zAWh*j@1_PyOZbRq&Y zjpDsf!U`sogo|c={o(!ur|HIga-+Cwc4OXVso(nR^C;Eq_%9JfTB}bL7HX0480ixB zRtau;;xyM@g8TppOXUOgFTf4D)9iV4d|63VbTN?G} zfBv?+&SNE2hrNbdnuePwk;W)sM*LPcuQu|vJr~ac-!%huhK5Fhs9{{lSyP-3v6h&U z3x)KXDSBs0xml-eim)z$31+)=t+4ouNT)rDm7X_xo~P$RxAt1|(9|hunn%DQ32()k zMAD4KJ^XiAC1mOCCTU(3!fY8oeNTG{)S2}`&ZdgWCz!&k%3{J zKZ|TPQZ#IF>Sl7!p*o|bKJRemdp+Z_M6#fNe?ZGF^3XyKfk_?-r6*8(xL9Ado~Sp@ z=eR%JVUwvZgD&~aN4IQaVZWaip&p%It*;~zQp4Tze(V3ud#Zc+%np+XQ{NA{+)JWf zBn-#Q6T9X@#$S8Kk`Qfo4bGf0=xDmte4+Yc=cQlU%L|>Bn=9D(jsxT?k$%6X$OU9( z-MIOv_riHPC!UXYj^G5O*cR^J=#Mh68rz)op5^w0vH(QJ%VB2WKGOMcK9}Re)eXbR zrV><3^Ux2*WjnjnwdGBvQy1^@9}xtm%^z-RlUHyzo+)G26&hc`WGQLAKnn3E^oQ$1 zIz{O;drf<>O*=K6r#fbx*Y5oU^xXtzPfr8Iu)W&G+FbTEH}|j!9Cl$fx4&W#11Np_ z_;pZ1hGnrPCY|AHEOyb85U&k1Zj-_flYkIUtorRAuZ0zo6Lfc(T3(L1?vB&D51~~E z0@hr;M9dDI&Ohs(M(}7Wr}{4&?Pm+0Jtf$Vw>uSisa0$Wmi~c7Nj98R1Zs?RXO9YF z8V6UydNBD`{L`-+z6AUhYO}X9Z;zKOX58%~F_^!|w`SnlKB&VoI=b32ypR3v?CDoYqASUlU znwGTH@=cL;VfGZ{X_HcBXO>xxQ)W*bC|Cq)b&6WQViSXXHVHJhp*+c3m{-I*RnqsB zS@t-I@}%aIYDnywVZ7Dc{GJzXm2~bV{4y`Xb{K!Fb1AVz6Cy5dH+8~dlFDw0>g%1p^%uedju2_A&3b6CfBERRve}( z_js~1_3nc?gD zW-t_@uZ=kmx(Db-VvZir(wczmXEUeGMoiFq#(E_} zu4s)qeqGQf2CaV{_z_ZCT^R~lbi#PruE4egT(LFzvg>|C>L|8*GpP}`S4 zhM4|%j1rH1{vt*;S5U2vUtlIe@+Ic`g_;Ps`lgTfBWYK=@&lDSlNe5fX;Fu~`%`}4 z{CE$eUEEpy@;A}DFAl}M(}!6sONFfq{-*$U=PUEyw2$NtrsySQU`?WK#} zGZ^D4Oq7wq_9kuem%mPPZuUN|Zs_miQ{CKDh^;f(R*0uWj7^pIa?)%}$0m{SN1#gQwst}%M${Rfub{d&O%{l4p@BhDvfM@gAGM`do~1*NoUZQ`PCg(7((0~>2+n1QERTg?*P>6fYb z>Mv?4Bxvg}x|v0;rt-PG$x;U6FIvrM8u_(V6aH`mscOEW#BE<0Nbe|f+C4??kHPzx zS9lhikIfD1Oh>_O(fk4qW@QZ}@^*!7;S{Id=2j}R&cQEy-RdNKEY}%EXUW{NR%1HD zHKFml9N|(f10RGnE%Fk}&^!Ub)H4mgzN{M)#Ma-k)iqibCSydZ6ehBWE~8vu z%GkJjFs6qXo$1g4hx|J09@nT z-pX(0QPub3arEmT^CrG0GPg9h(hU^vg;{~gjkOU03G5-)$2{?JgP!o$gXUpyVplg$ zdb<8x=fI}uh*^ykaa);i?dEAplGmIgao}ovWA&vQRm$FqVv?wb@ReSy5+R?n_w|lC zyALd9?b5;mTUun1bAdOrafXfuYRd%=y{k**z3j(riq_%PeCHy3jrub!0X4}&xk(nD zGjVuh(zq4Fb9fp(M+&C8Y10m?)tA_KqCDQaX)OJ6bFBz?@XR#L{@}@eP_9)cyi%vA z;=6$MhrIKc*>D_VwgKVrV(y$gohY2%b)!U%HG?J&Nzp*9S6$k+C327UCnXmBYQ1}o4%~hj_ajC z@Mg7EI90JZ=6gfrhl63}^L@t_`IbfaNPY&fyXUd(M&)wk2y?A&iLr7Kj>;~wEtE0U zxKU6sZ9yFRRfx5^BcboAq^RrheWX0t_Kli_?6kJIab!Nq@-(8n#PT%{1!tQmM^PC>8qKie9NhKdFVC8qi ztAmnjLU(d3YBHrGt<7flkpqMS@6GDSnBC+y2a9%EP(hldP1nw)kKewlTR2>e124O2 zUKWo}FVH1fSfOSD6@L|9j}Pd$2(}0II;T7`AEuw`J@pVH2z&oZRMn^O$le3MIk2Xw zw9U+bEwHS+2;IQ-@GR%deJHUL-nyE>pyBu>N!K7oJ8N=FLEdJ#P{DE-qMnjrT?LL$ z)=oqGIgG{3fKNxsnzFyIOY>0{EvvWNK(Q5>K*X}-VZ);bBHr0&*~JmEMW`qB{xO|# z4?o-^qLwcd%p|`t+CKr(GbAgh;OsB(w3?KpyWdmeT%p!72zb4e)cBP@dmL`Rr(92+ z&p7ecU)U%w;XUcJW(}iRcI`EDb(uv(a_(vDvgo2^QBt@Xj_sMkBJ|mEKZG zaf3+n4qkyp3PjS1&l5g$eZI34<&5Yq&D2EW0>h}hx^X-!tVY4zd>-Wxjy9qpxNkE% z-mBsHFdEd0%>y9x_oAl-{v6gEOfq9HmggM=6Y0C1&KWW+ZKqLym9w;an(C&X((95` zKg$^xsE`h_w`G-oUk)80#17l)CXLcBK6W$LXK>`U#^2(7Dr7CQFs22=Q;er?Vi)+C zH!BjpRcxq-pjhIWi;d==rfkcd(hwa#K7W5gWrkDw@}>7JHIv4rk8(frgxuU z7E*DN`ZvI;i4S%%cK6n9H%hn=N<6|vqee$N(xrAY)cn_>yGE_s4sROYC;Jzs9JwL3 zw#Nswj8C)69rq?o5wR9KLlofV)hJU`Hl8gpX2HnAtH3h>c53JI>#dxZYC$wlr+)-L zH{`5d=r@p8DxgQ2kA9t7-^dj**%^HHvgc*PKr}N|8pBA(cnEc)q^qPWlgx3)v4Z{6 zUS_4%R8!Ca2k$i#$$9L!OLtJ$ykenJcC%bJJfCMuoi5ucu`Ka2)HagT*4%BvmWFRz zBbUWKQH~_W2VUypNE+6xGG1@~biiSNoMWA&2paMM6 z-Wv!{f_+}~YEr1>gkbJ-8PC=-r!e|UKqBTvB`vvLufb0W$Y)sc;@onQ^r9fF#j~+;SGF5#pQf9rQWnA(+4xx}?2&33d8WgW&fXy5{SpoKYq^O-u zG85vBZiA~g)ZYj0hlGOjxSQspp6v2tii7clst%%vf}gP!N6pmxTr?k_QL%=it+SjI zCaT?AY|89x2r)`ewsA-qxb!CVWuC~i+vg9xbHiIa1>zl`YKbiP=7N{LD;p%eE4zDT%q<0Alz_SOh=Mu@Pm!_(nPaio6^|(H=A%{c)JXBusZlS}%*;clS zXLWc|ISr%pT344!13Mo(DOn{>2X;va@+G}*^0MIz=@S2GoYUm`5?hHJ5PjShI>Ya$ znPke$zPLu#F$M`A9SI zHn-04%0~OA(i-mQvxR})R}$6GM*WIt18LKxZY+}B~-uhbS2g%-I{7;pKFOOunCQmiR+IEM;C)sre!K^gt;Ps-kSx9e|U1&$q^cq-X4N;xw2s z6zW6@0_=CX%)wI34ur`FC`Z>+{_?x-i&{}T0%igtvc#sWE>vl3SxXq06Kem$jDUjI zJ8a8|NhB{}u~TsPjp7yp*=(zAh7hEGVkJ6MInE9Zue;_}y$6ImNyQYLIXtjjo>-)W zvpxy&mICgiD!g<1jUYB*`~up@{8(sa1UwlJ%Nif@1>#JI2XhB|KVm9U2(Pg%=cag&6JI8D zz?UZ113zI1vU~-)t12eH@bIeT9e<^@C2kmmf^D$JCMU$6=;t4r)V)IsS2>fN&tGAR z``DA?9dE`RgMPA(;R?YcC$osi6Ql^s23MPH6SZpGJ|Cg0`la&XvRKO{@z6WOX^Z4{ z?Gwh_Ku;PJHPnK>YI&K}+bXK5_rh%`?OF{rtthiMWy)k&yOiWD;NT{(>vv?vtjzFGC#R8tt_V00qB5cm3Erv{51pvufqZfm9g% zF1B@2LMTKNTX{>;TCPZQbD6?mNTsOvu+32$V!z7TAYuw#u(mt{x} zDK;xNBHbBVq!+Z*GgG2Y?3UQ>uf@~*$Z}V`IKQ#$tp@E7b@xOZ)dhmhx^XQU(h9T< z#+mg+)&ml9j%}F7cNwi2d1eH$D#VW9JYg?1ChafAr&lA2e=YcdF!1(-3W6{wN z2Va2(kfvRjRrh+K156;0IXCx;R3Boq$P_l(hq>WC0mm1Af{k*lFqh%Jkp*BLzmKQ_D!@v6m z#Lul<9eWKW^L|6~nkcX|hc(_OGHjEz0obyDlO3^C=plMun`IP`iG^WENy)iqwH}H^ z2oLBMktySe7;XLPp-TlA4Of$S-%{PczGP&O(lj>5Rzn_^JtCld0*^C76PR1WETbV7 zd|`V!Oq*<*cr4&sdBdW_?zY!l54Zz_`U-H9c6F#7e`r=wDX%8{#cs?Si@6J@%7Hxl~AV$)1#FN}IBOG^Pjvfo^zJ(ufDE zX_@mrvJ%TZV_I{YB<@iRFSj^Kg$%*@J&T_DN3r^0j`OlqWuLwad};hbdpLwDl>87M zc7a@-V0=3j2eWW@N2eUjnOh0xZhWaxYIu}ltUCJ^xXBI-Ei6`cAk{7rQu%`;dYsSV z@h;Eq`)&y&bt``px~+~#CY#~yO{sHt zaG$g9mnX;-?9A_Rjja$&{K~n1lKOe}8~&nWr*%1yTEk0kvniSE^(_Sp`EMCZZ`B({ zw9Sf$X(keXG;t~1^yR3bUWw)I9Y*Ru|C^3P3#mH#T8_@C2&{~h|;XH4+E#yV$$PkWL!JzH=qOC(NQhF2O`n(xc8+$Ed|7S-3(Vq z7SN-HX+5f}t1H!R9(>?tuj-#7m?G|rVi_#9*Bg}*5QsQb9)K$@f~$+dGoysFn}VI= z!#LG(9PX_=ASPIsHo-weya1P-YYMQp_OBX&S?Al5ot$H26sRPY?2hE!CyKp)Rbf}v zjCZ-_f%5a(%(WTjF`U3W*rCeY$*@kLL{}=I-S~CBUm)w`Q;cqQvc?1h78E9`mFQQv zSW-iFj&-?Md532HsGx>SVmN`5*=Q;8J8@WxAZVfJ=&qD^>`JHy{JD(%UfrwK$R8*J zZlPA)Ik^}8z3k?Q3dAo>ZX@O{xDj!G3082Yg2xg^M10$(j|0Qjz^FK8}pK$%@czO$j4kUi%Z`!i%bE?oTnrPsXI9yH?*=C`m>=6RGbS zl#P|vQb{yE7~Q?-0|JZF9AB!lyjrShk`+%utA-1hc&CMjFu`f{4`t_5|^E zXE&YCh*znfbx|DETx`(LEUBRc zOec-@ERJICbxqF3rKNXMX%F_kt*}ZVM{)4`u2!?nKtOMXnhJfs%%i6536Ks>Y-xoD zWfc{EyV;OSfsUS*lwt2N8%3aj+gxs=sUssfoCO%wQUKFWPH_sRp5M37SK6EgOUW?f zxhue_n961grVEWL(I5%AT6fg&kH2=jYX) z@~}M~k5Vl*%AU26FSljT4|llpMYNiaGuNI}0cNfj(>(KGa6)^P_eHY5I?HdzUOZJg z?lsBVoPesHFYdP7Z>ydTwYU`}nr_MR&Nif3lw7zM#%BELR1z=W$-=o%-t7BtsdaZ9 z{@T2y>fOhg8AYAN!=3>*7^KW<_5$xUF^d(YfR3b$a|=C!Ev^*l!B1?F_t?3zft}5& zKs$%LRu5|Loi|VH&=9GYV*|0ll8tAhg7#e%?G@>L@R6cXi4wbb_}(w~$C)(uYYa;$ zT*&?quFX;q7bxV2P0wx=OAmUBlI|TeGuIp|8?{qiP^pf^WQ3SFiW`~g$m@*8gU2si ztI_d4B-fNdt&Xp5-XGt^G=4PH(xom|>*>d8$9b?gmtIgu5NfQK@unUPSwz!fe;#5x4sJ-j%R$nmUp|dZqA%UjlCk+EiX89t&wVN2 zQAQr6rlPKZ`qvLGuDhpT8zH=J)P>_wQ;hGml$I8>tWqCCl1ddBfKg1c3|1SzEO#7N z;@*AH2Zw>_?BNN{Y~Fteymake30oYc(rPQ9DN77Y)!X!Q*}AfphZ~5T!x#9T;j7PhxEV zMLQ!7Geh2w^L45lF|z%HJEuzljosO=M%3!{3{9AO2Y?`=0~PzlQn$PKJudlrqipfJTEQT47l- z>`DRrCRQ0n&)>mje_YUmA6zugCl=y{1_>;-I>r0&2*F~t$jep<#-aRj8)`6?9@`lZby;*KQ* z92?69Ry#mWKP|swvPWK)cC)IC@}~GKe1}>WIbWH+NFKTY*Ik})gO)F&K)~M-)*N0Hlmt5rBy>8GftZJRhOv`TPvc~dVTw7FbqU|{^ zzT}mkgfVi^uSqONQaOe`OmhfR&TUOCxJUy7A^RF%>&D-HW_7;O&GLm8NuR3{UyzglXc6;+8qJ1>}l z%3vJhr!CF}vZ}bU zr%JhpOb`k?Ez;07#y#{{#Q=M&N9qJoc$B3v5oLIGWk~$`B>h*X?4qa9Vse{O>-CJY z#m*&NYJI}M=LX9b=s^t!11n&pVA*V~LX}BAg_A(Bb^)?v+GXw|qZ@9>+nBo*$4M57 zl6p2c9UJ*!m^yb7ih|H#$g$I#PL+){#J95hB0s$2H7#Tb15~B9>2GnLv-6EL;tkr< zf^7G@6bekfDbl=E?bZ-go*K}!q?pii9K2GIC6_ks$dIp7l^VniCF+?LN<ZDTd^_$F8Q}Sd+vw>KwNLgO|!3wJJyXg}(wtpW5e#rf~9X zv4k9>{?OR>5`Yz2xW8E0-L!g_E{l30tRTNtofYG5Xj5fyJfGqJq{hrvhz6ihqOOwr z9?{(3l!~pc3tn3+DW4-=4ClGZ4tK9@a^m{RI8*e#|CKzGS%-dSQKIG6VlA`ip;|i< z<8y6CiNKsA+0fTy2RucXie z7XAOP6o4Lj4_ae?ovAmtjB$D4yoC_F6P6S%kgE1+HoeF`+yUs-vL=-pw&N;_I>C5p zIeSvpOw#Zb?4|d3I$Q1I5OX`k=^%OGGrd!1D#3VTc`Zf?Bl) zw)Z8nnv9Ydz=x?&|2s7^N#YlsNMjK8v0qeqDBxD3M)YTm%I~!y{sE8b7!m5BXOwRx z6E&uf{|0|GA5(D0bdBmH-S#($wg;$KIq zj)q|KvFO*nSGj$0^rt9?%B?b%BBt2ZtpC4DWyoySF@iKQ9Tg_Hn+gC z2izep_{w}KwC-|Rj3wPGnSczai%%MvkN1H~4#{iy))R5K{?jVz)POCr!DF5Wa>uRwlbb+A)yRYQdRc@{`eLw9>}a*_PLp6_C~B&@9A1u&iH zKm>pNIy_W=;Jb-G=qjX)KajtP@SkUf$(}N%wmFI}EWQ2bAOF>~|9TVuT{NWmAIoX} zk+(y7{+lwF|LREpF8%j!dH??%@W0|t|F20g4Qv1KSpVPW!@oYIw*S+nn~qhdekxI) zvrYmrA5^^dGx0kUO1QM`my3I%H)ks*jNwZN|Kmw*_wAW1zWaAfkX@0|gWAjfx7T_r xzguvAe|}e%VLl(jF$nzo^S}7-$C)a#Td_{Kyl~Sh Date: Fri, 23 Mar 2018 10:21:45 -0700 Subject: [PATCH 02/18] tweaking a few details --- .../update/update-compliance-delivery-optimization.md | 2 +- windows/deployment/update/windows-analytics-get-started.md | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/update-compliance-delivery-optimization.md b/windows/deployment/update/update-compliance-delivery-optimization.md index 3558027e1a..97ea94c567 100644 --- a/windows/deployment/update/update-compliance-delivery-optimization.md +++ b/windows/deployment/update/update-compliance-delivery-optimization.md @@ -24,7 +24,7 @@ The Delivery Optimization Status section provides you with information about you ## Device Configuration blade -Devices can be set to use different download modes; these download modes determine in what situations Delivery Optimization will use peer-to-peer distribution to accomplish the downloads. The top section shows the number of devices configured to use peer-to-peer distribution in *Peering On* compared to *Peering Off* modes. The table shows a breakdown of the various download mode configurations seen in your environment. For more information about the different configuration options, see [Configure Delivery Optimization for Windows 10 updates](waas-delivery-optimization#download-mode). +Devices can be set to use different download modes; these download modes determine in what situations Delivery Optimization will use peer-to-peer distribution to accomplish the downloads. The top section shows the number of devices configured to use peer-to-peer distribution in *Peering On* compared to *Peering Off* modes. The table shows a breakdown of the various download mode configurations seen in your environment. For more information about the different configuration options, see [Configure Delivery Optimization for Windows 10 updates](waas-delivery-optimization.md#download-mode). ## Content Distribution (%) blade The first of two blades showing information on content breakdown, this blade shows a ring chart summarizing **Bandwidth Savings %**, which is the percentage of data received from peer sources out of the total data downloaded (for any device that used peer-to-peer distribution). diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index e346db089e..1d975fd1c8 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -76,7 +76,8 @@ The compatibility update scans your devices and enables application usage tracki >[!IMPORTANT] >Restart devices after you install the compatibility updates for the first time. ->[!NOTE] We recommend you configure your update management tool to automatically install the latest version of these updates. There is a related optional update, [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513), which can provide updated configuration and definitions for older compatibiltiy updates. For more information about this optional update, see . +>[!NOTE] +>We recommend you configure your update management tool to automatically install the latest version of these updates. There is a related optional update, [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513), which can provide updated configuration and definitions for older compatibiltiy updates. For more information about this optional update, see . From 98ddbcc7df505a5a244e07d8df1fedc5480ffc8d Mon Sep 17 00:00:00 2001 From: Matt Zeller <33294058+mattzmsft@users.noreply.github.com> Date: Sat, 24 Mar 2018 02:19:44 -0700 Subject: [PATCH 03/18] Recommending new URL for Commercial Suite features I'd recommend using the article we have specifically on commercial features rather than the release notes for the build where they were introduced. It's also updated with the docs.msft.com URL since we migrated all our dev documentation off Dev Center. --- devices/hololens/hololens-upgrade-enterprise.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-upgrade-enterprise.md b/devices/hololens/hololens-upgrade-enterprise.md index cc97f37aba..3e75988d92 100644 --- a/devices/hololens/hololens-upgrade-enterprise.md +++ b/devices/hololens/hololens-upgrade-enterprise.md @@ -12,7 +12,7 @@ ms.date: 02/02/2018 # Unlock Windows Holographic for Business features -Microsoft HoloLens is available in the *Development Edition*, which runs Windows Holographic (an edition of Windows 10 designed for HoloLens), and in the [Commercial Suite](https://developer.microsoft.com/windows/mixed-reality/release_notes_-_august_2016#introducing_microsoft_hololens_commercial_suite), which provides extra features designed for business. +Microsoft HoloLens is available in the *Development Edition*, which runs Windows Holographic (an edition of Windows 10 designed for HoloLens), and in the [Commercial Suite](https://docs.microsoft.com/en-us/windows/mixed-reality/commercial-features), which provides extra features designed for business. When you purchase the Commercial Suite, you receive a license that upgrades Windows Holographic to Windows Holographic for Business. This license can be applied to the device either through the organization's [mobile device management (MDM) provider](#edition-upgrade-using-mdm) or a [provisioning package](#edition-upgrade-using-a-provisioning-package). From 88d62c0676209337ca458e0047e2eb1973bddb49 Mon Sep 17 00:00:00 2001 From: Matt Zeller <33294058+mattzmsft@users.noreply.github.com> Date: Sat, 24 Mar 2018 02:23:24 -0700 Subject: [PATCH 04/18] Fixed broken WARNING block quote --- devices/hololens/hololens-provisioning.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/devices/hololens/hololens-provisioning.md b/devices/hololens/hololens-provisioning.md index 2c07c79718..eae5a880c2 100644 --- a/devices/hololens/hololens-provisioning.md +++ b/devices/hololens/hololens-provisioning.md @@ -36,7 +36,6 @@ When you run ADKsetup.exe for Windows 10, version 1607, select **Configuration D >Settings in a provisioning package will only be applied if the provisioning package includes an edition upgrade license to Windows Holographic for Business or if [the device has already been upgraded to Windows Holographic for Business](hololens-upgrade-enterprise.md). 1. On the Windows Configuration Designer start page, select **Advanced provisioning**. - 2. In the **Enter project details** window, specify a name for your project and the location for your project. Optionally, enter a brief description to describe your project. 3. Click **Next**. @@ -68,7 +67,7 @@ When you run ADKsetup.exe for Windows 10, version 1607, select **Configuration D 6. On the **Select security details for the provisioning package**, click **Next**. - >[WARNING!] + >[!WARNING] >If you encrypt the provisioning package, provisioning the HoloLens device will fail. 7. Click **Next** to specify the output location where you want the provisioning package to go once it's built. By default, Windows Configuration Designer uses the project folder as the output location. From 3e6310b3075bae0f895e4b63684797fc6558002a Mon Sep 17 00:00:00 2001 From: Marc Shepard <37675325+marcshep-msft@users.noreply.github.com> Date: Sun, 25 Mar 2018 15:42:25 -0700 Subject: [PATCH 05/18] Update windows-analytics-get-started.md Fixed spelling error (compatibitly->compatibility). Clarified that windows 10 contains the compatibility update so all they need to do is keep installing cumulative updates to get the latest. Added info on the new (1803) device name opt-in. --- windows/deployment/update/windows-analytics-get-started.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index e346db089e..3fb9ec5ab2 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -69,14 +69,14 @@ The compatibility update scans your devices and enables application usage tracki | **Operating System** | **Updates** | |----------------------|-----------------------------------------------------------------------------| -| Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](../upgrade/upgrade-readiness-requirements.md) for more information. | +| Windows 10 | Windows 10 includes the compatibility update, so you will automatically have the latest compatibility update so long as you continue to keep your Windows 10 devices up-to-date with cummulative updates.

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](../upgrade/upgrade-readiness-requirements.md) for more information. | | Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see | | Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see | >[!IMPORTANT] >Restart devices after you install the compatibility updates for the first time. ->[!NOTE] We recommend you configure your update management tool to automatically install the latest version of these updates. There is a related optional update, [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513), which can provide updated configuration and definitions for older compatibiltiy updates. For more information about this optional update, see . +>[!NOTE] We recommend you configure your update management tool to automatically install the latest version of these updates. There is a related optional update, [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513), which can provide updated configuration and definitions for older compatibility updates. For more information about this optional update, see . @@ -136,6 +136,7 @@ These policies are under Microsoft\Windows\DataCollection: | CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. | | AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level (for example, Device Health requires Enhanced diagnostic data and Upgrade Readiness only collects app usage and site discovery data on Windows 10 devices with Enhanced diagnostic data). For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | | LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).| +| AllowDeviceNameInTelemetry (in Windows 10) | In Windows 10 1803 and later, a separate opt-in is required to enable devices to continue to send the device name. | | CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8. | From 18d30320ee9de67f3167945639346b6344fa74f5 Mon Sep 17 00:00:00 2001 From: Marc Shepard <37675325+marcshep-msft@users.noreply.github.com> Date: Sun, 25 Mar 2018 15:51:52 -0700 Subject: [PATCH 06/18] Update windows-analytics-FAQ-troubleshooting.md Added an FAQ for device names not being collected by default anymore for win10 1803... --- .../deployment/update/windows-analytics-FAQ-troubleshooting.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 9a2dd2a71e..046d4a01c4 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -155,7 +155,8 @@ Double-check that IE site discovery opt-in has been configured in the deployment Also, on Windows 10 devices remember that IE site discovery requires data diagnostics set to the Enhanced level. Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). -[comment]: # (Device names are not showing up properly? Starting with Windows 10 1803, the device name is no longer collected by default and requires a separate opt-in by setting HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection\AllowDeviceNameInTelemetry:DWORD == 1. This is done by default if you run the latest version of the deployment script, or can be set via policy. If the policy is not set, then the device name will show up as "Unknown (aka.ms/analyticsDeviceName)") +### Device Names don't show up on Windows 10 1803 devices +Starting with Windows 10 1803, the device name is no longer collected by default and requires a separate opt-in. For more information, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). ### Disable Upgrade Readiness From 2e725ff97f006a10f367c1549a16291b64debd76 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 26 Mar 2018 15:27:27 +0000 Subject: [PATCH 07/18] Merged PR 6642: specify Enterprise --- .../configure-windows-diagnostic-data-in-your-organization.md | 2 +- windows/deployment/update/windows-analytics-get-started.md | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md b/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md index 9529995ecb..ec20ebc2bc 100644 --- a/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md @@ -15,7 +15,7 @@ ms.date: 10/17/2017 **Applies to** -- Windows 10 +- Windows 10 Enterprise - Windows 10 Mobile - Windows Server diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index e346db089e..898d4144d7 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -76,7 +76,8 @@ The compatibility update scans your devices and enables application usage tracki >[!IMPORTANT] >Restart devices after you install the compatibility updates for the first time. ->[!NOTE] We recommend you configure your update management tool to automatically install the latest version of these updates. There is a related optional update, [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513), which can provide updated configuration and definitions for older compatibiltiy updates. For more information about this optional update, see . +>[!NOTE] +>We recommend you configure your update management tool to automatically install the latest version of these updates. There is a related optional update, [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513), which can provide updated configuration and definitions for older compatibiltiy updates. For more information about this optional update, see . From 6fe1872fcb2b978043d34c6b11fdf62ff7cb51a5 Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Mon, 26 Mar 2018 10:37:31 -0700 Subject: [PATCH 08/18] Removed locale from link --- devices/hololens/hololens-upgrade-enterprise.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/hololens/hololens-upgrade-enterprise.md b/devices/hololens/hololens-upgrade-enterprise.md index 3e75988d92..1ac6bbeed2 100644 --- a/devices/hololens/hololens-upgrade-enterprise.md +++ b/devices/hololens/hololens-upgrade-enterprise.md @@ -12,7 +12,7 @@ ms.date: 02/02/2018 # Unlock Windows Holographic for Business features -Microsoft HoloLens is available in the *Development Edition*, which runs Windows Holographic (an edition of Windows 10 designed for HoloLens), and in the [Commercial Suite](https://docs.microsoft.com/en-us/windows/mixed-reality/commercial-features), which provides extra features designed for business. +Microsoft HoloLens is available in the *Development Edition*, which runs Windows Holographic (an edition of Windows 10 designed for HoloLens), and in the [Commercial Suite](https://docs.microsoft.com/windows/mixed-reality/commercial-features), which provides extra features designed for business. When you purchase the Commercial Suite, you receive a license that upgrades Windows Holographic to Windows Holographic for Business. This license can be applied to the device either through the organization's [mobile device management (MDM) provider](#edition-upgrade-using-mdm) or a [provisioning package](#edition-upgrade-using-a-provisioning-package). From 5d1c8afe86da6ecf4ff5e696c777efec58882136 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 26 Mar 2018 10:48:02 -0700 Subject: [PATCH 09/18] revised impact statement --- .../maximum-lifetime-for-user-ticket-renewal.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md b/windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md index 1b64be5e1d..4434ee24a3 100644 --- a/windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md +++ b/windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md @@ -84,7 +84,7 @@ Configure the **Maximum lifetime for user ticket renewal** setting to 7 days. ### Potential impact -None. This is the default configuration. +Seven (7) days is the default configuration. Changing the default configuration is a tradeoff between user convenience and security. A shorter time period requires users to authenticate with a DC more often. But remote users who authenticate with a DC infrequently can be locked out of services until they reauthenticate. ## Related topics From 35733bee9f8842ec87e127768cedc6c5546381c3 Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Mon, 26 Mar 2018 11:40:03 -0700 Subject: [PATCH 10/18] Update windows-analytics-get-started.md --- windows/deployment/update/windows-analytics-get-started.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 3fb9ec5ab2..db5b6e872f 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -44,7 +44,7 @@ To enable data sharing, configure your proxy sever to whitelist the following en | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -| `https://v10.events.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for Windows 10, version 1803| +| `https://v10.events.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for use with the build of Windows 10 available in the Windows Insider Program| | `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for Windows 10, version 1709 or earlier | | `https://vortex-win.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for operating systems older than Windows 10 | | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. @@ -136,7 +136,7 @@ These policies are under Microsoft\Windows\DataCollection: | CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. | | AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level (for example, Device Health requires Enhanced diagnostic data and Upgrade Readiness only collects app usage and site discovery data on Windows 10 devices with Enhanced diagnostic data). For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | | LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).| -| AllowDeviceNameInTelemetry (in Windows 10) | In Windows 10 1803 and later, a separate opt-in is required to enable devices to continue to send the device name. | +| AllowDeviceNameInTelemetry (in Windows 10) | In the build currently available in the Windows Insider Program for Windows 10, a separate opt-in is required to enable devices to continue to send the device name. | | CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8. | From 522208c8619d1ee0439cf68df25f94b433f79190 Mon Sep 17 00:00:00 2001 From: Andreas Stenhall Date: Mon, 26 Mar 2018 21:40:51 +0200 Subject: [PATCH 11/18] Update hello-features.md Spelling error on smartd => smart. --- .../identity-protection/hello-for-business/hello-features.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-features.md b/windows/security/identity-protection/hello-for-business/hello-features.md index 1800c4b80f..b53fb11810 100644 --- a/windows/security/identity-protection/hello-for-business/hello-features.md +++ b/windows/security/identity-protection/hello-for-business/hello-features.md @@ -150,6 +150,6 @@ On-premises deployments provide users with the ability to reset forgotton PINs e The privileged credentials scenario enables administrators to perform elevated, admistrative funcions by enrolling both their non-privileged and privileged credentials on their device. -By design, Windows 10 does not enumerate all Windows Hello for Business users from within a user's session. Using the computer Group Policy setting, Allow enumeration of emulated smartd card for all users, you can configure a device to all this enumeration on selected devices. +By design, Windows 10 does not enumerate all Windows Hello for Business users from within a user's session. Using the computer Group Policy setting, Allow enumeration of emulated smart card for all users, you can configure a device to all this enumeration on selected devices. -With this setting, administrative users can sign-in to Windows 10, version 1709 using their non-privileged Windows Hello for Business credentials for normal workflow such as email, but can launch Microsoft Managment Consoles (MMCs), Remote Desktop Services clients, and other applications by selecting **Run as different user** or **Run as administrator**, selecting the privileged user account, and providing their PIN. Administrators can also take advantage of this feature with command line applications by using **runas.exe** combined with the **/smartcard** argument. This enables administrators to perform their day-to-day operations without needing to sign-in and out, or use fast user switching when alternativing between privileged and non-privileged workloads. \ No newline at end of file +With this setting, administrative users can sign-in to Windows 10, version 1709 using their non-privileged Windows Hello for Business credentials for normal workflow such as email, but can launch Microsoft Managment Consoles (MMCs), Remote Desktop Services clients, and other applications by selecting **Run as different user** or **Run as administrator**, selecting the privileged user account, and providing their PIN. Administrators can also take advantage of this feature with command line applications by using **runas.exe** combined with the **/smartcard** argument. This enables administrators to perform their day-to-day operations without needing to sign-in and out, or use fast user switching when alternativing between privileged and non-privileged workloads. From 513efc88d7abdf95afa119156e57479ac2d31f0b Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Mon, 26 Mar 2018 13:47:06 -0700 Subject: [PATCH 12/18] minor fixes and public github bugs updates for 14393.2155 [KB4088889 update](https://support.microsoft.com/en-us/help/4088889) --- .../hello-for-business/hello-cert-trust-adfs.md | 10 +++++----- .../hello-hybrid-cert-trust-devreg.md | 4 ++-- .../hello-hybrid-cert-trust-prereqs.md | 4 ++-- .../hello-hybrid-cert-whfb-provision.md | 8 +++++--- .../hello-hybrid-cert-whfb-settings-adfs.md | 7 +------ .../hello-for-business/hello-hybrid-key-new-install.md | 4 ++-- .../hello-for-business/hello-identity-verification.md | 6 +++--- .../hello-for-business/hello-key-trust-adfs.md | 4 ++-- .../hello-for-business/hello-planning-guide.md | 7 +++---- 9 files changed, 25 insertions(+), 29 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md index d5f526f94f..10032d6303 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md @@ -6,10 +6,10 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security, mobile -author: DaniHalfin -ms.localizationpriority: high -ms.author: daniha -ms.date: 09/08/2017 +author: mikestephens-MS +ms.author: mstephen +localizationpriority: high +ms.date: 03/26/2018 --- # Prepare and Deploy Windows Server 2016 Active Directory Federation Services @@ -36,7 +36,7 @@ Prepare the Active Directory Federation Services deployment by installing and up Sign-in the federation server with _local admin_ equivalent credentials. 1. Ensure Windows Server 2016 is current by running **Windows Update** from **Settings**. Continue this process until no further updates are needed. If you’re not using Windows Update for updates, please advise the [Windows Server 2016 update history page](https://support.microsoft.com/help/4000825/windows-10-windows-server-2016-update-history) to make sure you have the latest updates available installed. -2. Ensure the latest server updates to the federation server includes [KB4034658 (14393.1593)](https://support.microsoft.com/en-us/help/4034658). +2. Ensure the latest server updates to the federation server includes [KB4088889 (14393.2155)](https://support.microsoft.com/en-us/help/4088889). >[!IMPORTANT] >The above referenced updates are mandatory for Windows Hello for Business all on-premises deployment and hybrid certificate trust deployments for domain joined computers. diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-devreg.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-devreg.md index 866c851a11..0ed566fedc 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-devreg.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-devreg.md @@ -9,7 +9,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 02/23/2018 +ms.date: 03/26/2018 --- # Configure Device Registration for Hybrid Windows Hello for Business @@ -88,7 +88,7 @@ Once you have your AD FS design ready, review [Deploying a Federation Server far > [!IMPORTANT] > During your AD FS deployment, skip the **Configure a federation server with Device Registration Service** and the **Configure Corporate DNS for the Federation Service and DRS** procedures. -The AD FS farm used with Windows Hello for Business must be Windows Server 2016 with minimum update of [KB4034658 (14393.1593)](https://support.microsoft.com/en-us/help/4034658), which is automatically downloaded and installed through Windows Update. If your AD FS farm is not running the AD FS role with updates from Windows Server 2016, then read [Upgrading to AD FS in Windows Server 2016](https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/upgrading-to-ad-fs-in-windows-server-2016) +The AD FS farm used with Windows Hello for Business must be Windows Server 2016 with minimum update of [KB4088889 (14393.2155)](https://support.microsoft.com/en-us/help/4088889). If your AD FS farm is not running the AD FS role with updates from Windows Server 2016, then read [Upgrading to AD FS in Windows Server 2016](https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/upgrading-to-ad-fs-in-windows-server-2016) #### ADFS Web Proxy ### Federation server proxies are computers that run AD FS software that have been configured manually to act in the proxy role. You can use federation server proxies in your organization to provide intermediary services between an Internet client and a federation server that is behind a firewall on your corporate network. diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md index 6b742dba4b..5886646c01 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md @@ -9,7 +9,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 11/08/2017 +ms.date: 03/26/2018 --- # Hybrid Windows Hello for Business Prerequisites @@ -80,7 +80,7 @@ Organizations using older directory synchronization technology, such as DirSync ## Federation ## Federating your on-premises Active Directory with Azure Active Directory ensures all identities have access to all resources regardless if they reside in cloud or on-premises. Windows Hello for Business hybrid certificate trust needs Windows Server 2016 Active Directory Federation Services. All nodes in the AD FS farm must run the same version of AD FS. Additionally, you need to configure your AD FS farm to support Azure registered devices. -The AD FS farm used with Windows Hello for Business must be Windows Server 2016 with minimum update of [KB4034658 (14393.1593)](https://support.microsoft.com/en-us/help/4034658), which is automatically downloaded and installed through Windows Update. If your AD FS farm is not running the AD FS role with updates from Windows Server 2016, then read [Upgrading to AD FS in Windows Server 2016](https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/upgrading-to-ad-fs-in-windows-server-2016) +The AD FS farm used with Windows Hello for Business must be Windows Server 2016 with minimum update of [KB4088889 (14393.2155)](https://support.microsoft.com/en-us/help/4088889). If your AD FS farm is not running the AD FS role with updates from Windows Server 2016, then read [Upgrading to AD FS in Windows Server 2016](https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/upgrading-to-ad-fs-in-windows-server-2016) ### Section Review ### > [!div class="checklist"] diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md index 5109222155..622367ea79 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md @@ -9,7 +9,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 10/23/2017 +ms.date: 03/26/2018 --- # Hybrid Windows Hello for Business Provisioning @@ -48,12 +48,14 @@ The provisioning flow has all the information it needs to complete the Windows H The remainder of the provisioning includes Windows Hello for Business requesting an asymmetric key pair for the user, preferably from the TPM (or required if explicitly set through policy). Once the key pair is acquired, Windows communicates with Azure Active Directory to register the public key. AAD Connect syncrhonizes the user's key to the on-prem Active Directory. > [!IMPORTANT] -> The minimum time needed to syncrhonize the user's public key from Azure Active Directory to the on-premises Active Directory is 30 minutes. The Azure AD Connect scheduler controls the synchronization interval. +> The following is the enrollment behavior prior to Windows Server 2016 update [KB4088889 (14393.2155)](https://support.microsoft.com/en-us/help/4088889). + +> The minimum time needed to synchronize the user's public key from Azure Active Directory to the on-premises Active Directory is 30 minutes. The Azure AD Connect scheduler controls the synchronization interval. > **This synchronization latency delays the the user's ability to authenticate and use on-premises resouces until the user's public key has synchronized to Active Directory.** Once synchronized, the user can authenticate and use on-premises resources. > Read [Azure AD Connect sync: Scheduler](https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnectsync-feature-scheduler) to view and adjust the **synchronization cycle** for your organization. > [!NOTE] -> Microsoft is actively investigating ways to reduce the syncrhonization latency and delays in certificate enrollment with the goal to make certificate enrollment occur real-time. +> Windows Server 2016 update [KB4088889 (14393.2155)](https://support.microsoft.com/en-us/help/4088889) provides synchronous certificate enrollment during hybrid certificate trust provisioning. With this update, users no longer need to wait for Azure AD Connect to sync their public key on-premises. Users enroll their certificate during provisioning and can use the certificate for sign-in immediately after completeling the provisioning. After a successful key registration, Windows creates a certificate request using the same key pair to request a certificate. Windows send the certificate request to the AD FS server for certificate enrollment. diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md index 4acb7d887b..732ecc5a7e 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md @@ -9,7 +9,7 @@ ms.pagetype: security, mobile localizationpriority: high author: mikestephens-MS ms.author: mstephen -ms.date: 10/23/2017 +ms.date: 03/26/2018 --- # Configure Windows Hello for Business: Active Directory Federation Services @@ -36,11 +36,6 @@ Sign-in the AD FS server with *Domain Admin* equivalent credentials. ``` -The `Set-AdfsCertificateAuthority` cmdlet should show the following warning: ->WARNING: PS0343: Issuing Windows Hello certificates requires enabling a permitted strong authentication provider, but no usable providers are currently configured. These authentication providers are not supported for Windows Hello certificates: CertificateAuthentication,MicrosoftPassportAuthentication. Windows Hello certificates will not be issued until a permitted strong authentication provider is configured. - -This warning indicates that you have not configured multi-factor authentication in AD FS and until it is configured, the AD FS server will not issue Windows Hello certificates. Windows 10, version 1703 clients check this configuration during prerequisite checks. If detected, the prerequisite check will not succeed and the user will not provision Windows Hello for Business on sign-in. - >[!NOTE] > If you gave your Windows Hello for Business Enrollment Agent and Windows Hello for Business Authentication certificate templates different names, then replace **WHFBEnrollmentAgent** and WHFBAuthentication in the above command with the name of your certificate templates. It's important that you use the template name rather than the template display name. You can view the template name on the **General** tab of the certificate template using the **Certificate Template** management console (certtmpl.msc). Or, you can view the template name using the **Get-CATemplate** ADCS Administration Windows PowerShell cmdlet on a Windows Server 2012 or later certificate authority. diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md index 3ade5c7cd8..52ec97995f 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md @@ -9,7 +9,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 10/20/2017 +ms.date: 03/26/2018 --- # Windows Hello for Business Key Trust New Installation @@ -70,7 +70,7 @@ Sign-in using _Enterprise Admin_ equivalent credentials on Windows Server 2012 o ## Configure a Production Public Key Infrastructure -If you do have an existing public key infrastructure, please review [Certification Authority Guidance](https://technet.microsoft.com/library/hh831574.aspx) from Microsoft TechNet to properly design your infrastructure. Then, consult the [Test Lab Guide: Deploying an AD CS Two-Tier PKI Hierarchy](https://technet.microsoft.com/library/hh831348.aspx) for instructions on how to configure your public key infrastructure using the information from your design session. +If you do not have an existing public key infrastructure, please review [Certification Authority Guidance](https://technet.microsoft.com/library/hh831574.aspx) from Microsoft TechNet to properly design your infrastructure. Then, consult the [Test Lab Guide: Deploying an AD CS Two-Tier PKI Hierarchy](https://technet.microsoft.com/library/hh831348.aspx) for instructions on how to configure your public key infrastructure using the information from your design session. > [!IMPORTANT] > For Azure AD joined device to authenticate to and use on-premises resources, ensure you: diff --git a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md index 96d449f9d3..6f5dbd7e6a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md +++ b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md @@ -10,7 +10,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 12/04/2017 +ms.date: 03/26/2018 --- # Windows Hello for Business @@ -48,7 +48,7 @@ The table shows the minimum requirements for each deployment. | Windows Server 2008 R2 Domain/Forest functional level | Windows Server 2008 R2 Domain/Forest functional level| Windows Server 2008 R2 Domain/Forest functional level |Windows Server 2008 R2 Domain/Forest functional level | | Windows Server 2016 Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | Windows Server 2016 Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | | Windows Server 2012 or later Certificate Authority | Windows Server 2012 or later Certificate Authority | Windows Server 2012 or later Certificate Authority | Windows Server 2012 or later Certificate Authority | -| N/A | Windows Server 2016 AD FS with KB4022723 update (domain joined), and
Windows Server 2012 or later Network Device Enrollment Service (cloud joined) | N/A | Windows Server 2012 or later Network Device Enrollment Service | +| N/A | Windows Server 2016 AD FS with [KB4088889 update](https://support.microsoft.com/en-us/help/4088889) (hybrid Azure AD joined clients),
and
Windows Server 2012 or later Network Device Enrollment Service (Azure AD joined) | N/A | Windows Server 2012 or later Network Device Enrollment Service | | Azure MFA tenant, or
AD FS w/Azure MFA adapter, or
AD FS w/Azure MFA Server adapter, or
AD FS w/3rd Party MFA Adapter| Azure MFA tenant, or
AD FS w/Azure MFA adapter, or
AD FS w/Azure MFA Server adapter, or
AD FS w/3rd Party MFA Adapter | Azure MFA tenant, or
AD FS w/Azure MFA adapter, or
AD FS w/Azure MFA Server adapter, or
AD FS w/3rd Party MFA Adapter | Azure MFA tenant, or
AD FS w/Azure MFA adapter, or
AD FS w/Azure MFA Server adapter, or
AD FS w/3rd Party MFA Adapter | | Azure Account | Azure Account | Azure Account | Azure Account | | Azure Active Directory | Azure Active Directory | Azure Active Directory | Azure Active Directory | @@ -65,7 +65,7 @@ The table shows the minimum requirements for each deployment. | Windows Server 2008 R2 Domain/Forest functional level | Windows Server 2008 R2 Domain/Forest functional level | | Windows Server 2016 Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | | Windows Server 2012 or later Certificate Authority | Windows Server 2012 or later Certificate Authority | -| Windows Server 2016 AD FS with [KB4022723 update](https://support.microsoft.com/en-us/help/4022723) | Windows Server 2016 AD FS with [KB4022723 update](https://support.microsoft.com/en-us/help/4022723) | +| Windows Server 2016 AD FS with [KB4088889 update](https://support.microsoft.com/en-us/help/4088889) | Windows Server 2016 AD FS with [KB4088889 update](https://support.microsoft.com/en-us/help/4088889) | | AD FS with Azure MFA Server, or
AD FS with 3rd Party MFA Adapter | AD FS with Azure MFA Server, or
AD FS with 3rd Party MFA Adapter | | Azure Account, optional for Azure MFA billing | Azure Account, optional for Azure MFA billing | diff --git a/windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md b/windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md index da1578c94d..827025586d 100644 --- a/windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md @@ -9,7 +9,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 10/10/2017 +ms.date: 03/26/2018 --- # Prepare and Deploy Windows Server 2016 Active Directory Federation Services @@ -36,7 +36,7 @@ Prepare the Active Directory Federation Services deployment by installing and up Sign-in the federation server with _local admin_ equivalent credentials. 1. Ensure Windows Server 2016 is current by running **Windows Update** from **Settings**. Continue this process until no further updates are needed. If you’re not using Windows Update for updates, please review the [Windows Server 2016 update history page](https://support.microsoft.com/help/4000825/windows-10-windows-server-2016-update-history) to make sure you have the latest updates available installed. -2. Ensure the latest server updates to the federation server includes [KB4034658 (14393.1593)](https://support.microsoft.com/en-us/help/4034658). +2. Ensure the latest server updates to the federation server includes [KB4088889 (14393.2155)](https://support.microsoft.com/en-us/help/4088889). >[!IMPORTANT] >The above referenced updates are mandatory for Windows Hello for Business all on-premises deployment and hybrid certificate trust deployments for domain joined computers. diff --git a/windows/security/identity-protection/hello-for-business/hello-planning-guide.md b/windows/security/identity-protection/hello-for-business/hello-planning-guide.md index 331d1f28df..2f063b0b79 100644 --- a/windows/security/identity-protection/hello-for-business/hello-planning-guide.md +++ b/windows/security/identity-protection/hello-for-business/hello-planning-guide.md @@ -9,13 +9,12 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 10/20/2017 +ms.date: 03/26/2018 --- # Planning a Windows Hello for Business Deployment **Applies to** - Windows 10 -- Windows 10 Mobile > This guide only applies to Windows 10, version 1511 or higher. @@ -176,7 +175,7 @@ A successful Windows Hello for Business requires all devices to register with th If box **1a** on your planning worksheet reads **cloud only** or **hybrid**, write **Azure** in box **1c** on your planning worksheet. -If box **1a** on your planning worksheet reads **on-premises**, write **AF FS** in box **1c** on your planning worksheet. +If box **1a** on your planning worksheet reads **on-premises**, write **AD FS** in box **1c** on your planning worksheet. ### Key Registration @@ -184,7 +183,7 @@ All users provisioning Windows Hello for Business have their public key register If box **1a** on your planning worksheet reads **cloud only** or **hybrid**, write **Azure** in box **1d** on your planning worksheet. -If box **1a** on your planning worksheet reads **on-premises**, write **AF FS** in box **1d** on your planning worksheet. +If box **1a** on your planning worksheet reads **on-premises**, write **AD FS** in box **1d** on your planning worksheet. ### Directory Synchronization From d50115375a51caf98447dd4d96cfb453d2d56fe0 Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Mon, 26 Mar 2018 14:08:16 -0700 Subject: [PATCH 13/18] Update windows-analytics-FAQ-troubleshooting.md --- .../update/windows-analytics-FAQ-troubleshooting.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 046d4a01c4..f195cc6375 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -155,8 +155,8 @@ Double-check that IE site discovery opt-in has been configured in the deployment Also, on Windows 10 devices remember that IE site discovery requires data diagnostics set to the Enhanced level. Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). -### Device Names don't show up on Windows 10 1803 devices -Starting with Windows 10 1803, the device name is no longer collected by default and requires a separate opt-in. For more information, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). +### Device Names don't show up on Windows 10 devices +Starting with the build currently available in the Windows Insider Program, the device name is no longer collected by default and requires a separate opt-in. For more information, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). ### Disable Upgrade Readiness From 1398d5fb1966d048e247ca97cc20b78857868c0b Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Mon, 26 Mar 2018 14:08:43 -0700 Subject: [PATCH 14/18] one more update --- .../hello-for-business/hello-hybrid-cert-trust-prereqs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md index 5886646c01..ed3b027ada 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md @@ -85,7 +85,7 @@ The AD FS farm used with Windows Hello for Business must be Windows Server 2016 ### Section Review ### > [!div class="checklist"] > * Windows Server 2016 Active Directory Federation Services -> * Minimum update of [KB4034658 (14393.1593)](https://support.microsoft.com/en-us/help/4034658) +> * Minimum update of [KB4088889 (14393.2155)](https://support.microsoft.com/en-us/help/4088889)
From a39dd13e0aace3f18c4cafc7bbb4e60331d143e3 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Mon, 26 Mar 2018 14:34:21 -0700 Subject: [PATCH 15/18] added client support version for synchronous certificate enrollment. --- .../hello-for-business/hello-identity-verification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md index 6f5dbd7e6a..c8fbfbe290 100644 --- a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md +++ b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md @@ -43,7 +43,7 @@ The table shows the minimum requirements for each deployment. | Key trust
Group Policy managed | Certificate trust
Mixed managed | Key trust
Modern managed | Certificate trust
Modern managed | | --- | --- | --- | --- | -| Windows 10, version 1511 or later| Windows 10, version 1703 or later (domain joined)
Windows 10, version 1511 or later (cloud joined) | Windows 10, version 1511 or later | Windows 10, version 1511 or later | +| Windows 10, version 1511 or later| **Hybrid Azure AD Joined:**
*Minimum:* Windows 10, version 1703
*Best experience:* Windows 10, version 1709 or later (supports synchronous certificate enrollment).
**Azure AD Joined:**
Windows 10, version 1511 or later| Windows 10, version 1511 or later | Windows 10, version 1511 or later | | Windows Server 2016 Schema | Windows Server 2016 Schema | Windows Server 2016 Schema | Windows Server 2016 Schema | | Windows Server 2008 R2 Domain/Forest functional level | Windows Server 2008 R2 Domain/Forest functional level| Windows Server 2008 R2 Domain/Forest functional level |Windows Server 2008 R2 Domain/Forest functional level | | Windows Server 2016 Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | Windows Server 2016 Domain Controllers | Windows Server 2008 R2 or later Domain Controllers | From da4ebd0f091c390cebc68a70ef589b2cf18476ca Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 26 Mar 2018 22:32:57 +0000 Subject: [PATCH 16/18] Merged PR 6656: RemoteWipe CSP - removed nodes from the draft documentation. --- .../provisioning-csp-remotewipe-dmandcp.png | Bin 14617 -> 8830 bytes ...ew-in-windows-mdm-enrollment-management.md | 24 +---- .../client-management/mdm/remotewipe-csp.md | 28 +----- .../mdm/remotewipe-ddf-file.md | 92 +----------------- 4 files changed, 8 insertions(+), 136 deletions(-) diff --git a/windows/client-management/mdm/images/provisioning-csp-remotewipe-dmandcp.png b/windows/client-management/mdm/images/provisioning-csp-remotewipe-dmandcp.png index 8a01ad0dffb9aea12a951667fc57971f7bb5670b..69effac5fd51e44e36fbf3330823f2c69cb0ddc8 100644 GIT binary patch literal 8830 zcmdsdXIN8Pw{8Fx=}J`*5fzXwBE3WbrAjYSLldNl6zLEV5d{GSBO)DXq1Vts(SY<8 zdI_MkKImUS3cZ`+SdOB(hv=?YWAP|Fw zx~c&PL~#VPr%zJ?@59QG*1!jaw}F~6sHFGe3UG14>CXK-AW(T6-J$JC;F{)%x|uf! z#Q5#_MbYk&?*IZ_VbM^%W8`m*P2KP?Rts$3Zy-?P?-H{NAiqu;usK^?sdq`_D|9o} zujh1sUo_?ZX;^f+hwnZM!cL$0^a+P3E_M2`=Fv8pm(N%(^O$jJJJY(p66vCx3UFNP zR@g~N^4`ET;T7@0U?OdA5_-=@$!Wd3ZtVdT2=w;69vB32P@}`4n}YmwytlS@QQaq) zdv3!|I@=)ndzO$5(sZ#1`( zq?~L;eZ7mAI0%HIDh;hhNA3lsrE?z~{o0jDI|PATB8CD1eC zZA?qZ0lwj?$7$Q@&M(~)Q~hP-l}e`z8l@XFO)+97%hMt+v!04hrQ3Io@Ky%xZlz@& zAVQF-MOjfxJ#(hbL}Gp2JP6e9r%oD5%nkKCq;54C&LmYx@{Q)`FmYG|DR;sVS7gJu6LRn1A6#M4$#Q%#_fSrRh-R z$=(+X0!iAocXoExExy_`ihi3q?x-*(oS+z;r)WMBaX!f*=KJ{2IWfo#a*DHC^{XBV z`C&&&c#gI>V_z=X-V@xvA%S}K^&mVgAL@TNHb0-$gaLMF>Z{M|EWUG*;eLA{F#iC?& zfFW4;S`FP0v{&-inuGdvz~ z!?CT3Sp5l0z~2vtXL(7p(v0e`>O%t}Ec<=BU(RFl>}$-;VNEn!>sQ!}75XlQ+7$(? z&wYzr%%TF_hVtMb`}38MR6=uPC}Kxk(|)&aY25N(`kKKeXFI``*niB0>K z^v8Ijy%7D0o|KX+z9f9x?Jak}DZ1Lz(>^8LFue!@5gFm+nWiBAcBM0jC_a*ZwkUjw z7R?p#6OWx-i~{b4=D`V}(u}a$5oMY*eydNlxlGl`X|68x>9eOm`AjAxEiJ9|TQ4`o zNt|bKv6@Y#H%HF{f&R?6#cq93Iq$UBU0)cS3)kN1<`YnnSfT!~OhDmA^69_a;fdh`p_cjSYPp*I0tp+2Snwol` zn-!&{r6ncw3lDM7;9Qg#?Lk^;OI>+cSy@GeoftQ;Rah;NTfslWQfflxVEqRt0Iu8H zTY0W9?xurer~=^wuyAYcz?CoU2fdPNd}6oOXPR8ac!7aT@FTUjOIAmR^DA2{oe$?( zUcZytnUBKX_VLSooR6Nsi>9f zEyw&1I66Np+w`0_*L^f1ao~pyta~h5Q$7QBFNB6+ zeum-&#?;&F=g=d!7X)E0$NvJ2*SQ6RXmqPtuxf)fQ;ce9h-AaT5YM2~itDKEi^U1+ z@hQlQ$<_<-010@g^g9oTq?VH`5DM~s>tlt-4DhghdwV-+(RmK;+lu%S=(>jZM&trD z2aQ-7RIS&l(bjP{MLV6V|oj-!UMT9e22#~cxt2d;V# zP=GR8-V#f#$%mu-az{U;GDC|!YVJt!J>4?*$O)b7_Wkv3$N+%o#HF7>bPC@iWtBOdzZk-lKFb7PS#~HA zK!KKvQ$jCbhEjSYu}}i)SH#OdnxKe?>)Q`Tt+W%|KD)gqrpq3Fhqq+}LLQb#06|Al z7>Xo^1}%LbwDNeru2{ljA{C0G#v<3&7;?% zj3xEm58ejAOxZzQEnuH81i zCx5OZ-zHNnFd1)F=r_Q=iP9y~eR0wkVg}mA0j$GyluM|AFUra(@O2%01l;p!=7j`% z(^6=x2Zj>lqGLcx86F-+%581G>+0jGCG@nC$9FC~V{$kJa^smWfKHDEZDLBKMbULF zE`0#*`B45}A>QBks3mHhmaF@d;xf}G7KUJYjhDAc@om4x0Bm99?s$E9Qu5o+c6JU9 ztSR`%seA|}?yA{IOdret-tvPjj{U4ICuN<1duALdgb{i5pr+0$B&tg9te&I&>UKc2 zy^7xtYl_6vPfJrb)2_Jx=g*u*!NE^#-5)<1gVA>v6)TFux^E3rpjzg_h&v}RiML5s zImOgU*LEYu74b%B8g@I4>##K0gB7JGR+wZ*}q~diY`ynuLycNUUaI_>;)4Up>lj44xl==dkAZ{(Sy|6Gb zYuS0!Lm~N@q!iSUaiPHvlt~=EJVIFGJoQ!e5D`|zk`LBJWE0Z^SECHbZ42B-1hM&2 z>i9SQGC%1>(+_Lg_vVebKCUk?N9jQwUi|Q5BnS*%(SxSBY2e6M`E;Q>2AhbYJsc3Sl+u+ErF`36U91{4wPs=DCuB0?t^}WIobyVjECaF-JTJ73BPo%70xEe|8XUClfRwnzqK5+ z3dquVOE6-433)tik2RmWL-3EyT9mvD;m}{vLHNczw<2P)ecWgpK3dr!`Jom`K;`#Y z5KE4LBxJzxUr^|9=%criiFKK_;~6_Xh%|-=&oq!X>+9{XFG&KCrTRI(H79-_uLjwV z^o^Q>l8LcfUBaM4+mOqr_$aHi8SNv6W?!9?h#I;i@+I35!y#4|lPD1A{^*bSB>iVq z0?j{8+w0;|Z8D7pn|M`PY9~8R@y&njvHHTtTO4Y^+#D&CH|6@161PNy5?g5^cAyq} zj;8vBO46UuglC0 z5JArVs?Ex=Hn`!aColE0y~>@L?$v!(3+5Kh_xVo>O+Ox9&Dc(Iq~?&o0?W)#%ypE{Pz1a^GtzVcoqo zwB)syPmS+F3Mx2wo_hKRl!Z#A(n&t)Tb<(Mnz^|Ka~nzcvj%dXTC))bok5?jIH`rB zJCF&NfUU}Ky)t}iQ=h1HUHe4X<=`MV7@bOt&(@AYUYl$o6LKwd266GtfR2k;J<1cR2g+gkO1QM+)bXHDcve!GWG@1d~^Ae3O>89cgj;^J4 zNN_`M4H7#1X62bMyRSoRz8+Xw7qAqa$3f-qx?J;#S08zg zLR8;ZzUvaoWd8XWv*0x6SDIm3|7ZDtx8Q05G_J2@zL=;!FQ8XrUKxn*OsO0poy`%Z~eqh5z&(`i&Xzg~-jJ+uT$#WF#AXM*l` z#|eyD1?_)pIdm0p-x)cE{bLx6b71=)TOGSd_$knSznid_*yR5isFm{$lSk?-G)df6 zb*{guz4e0;ITJ3gNdgd^5l}?o4Ss85ijQ=a1q-r#CPH`MWLg#=$$6%8dE6ND_}efP zTb;^9Z}|BB=k;LhC&jB#0dky4%e!n(Dem(w4bmZe5cK)npneL?+YNrE#FEyRsZlp) znpN%?dOr>yULXU*D67;z=xehI@I(#nmciM!rBoZ^zxOd10uxWOJ{)g8ep$`Is-Tg^&im?;r0yh)d5cxMIH&6_t6eXl&dt;ZbRs zB&Mb{7Jp;SASEY~Ve-IG|56&qH#mAl+SsWtn8l@3W70xfU)EmhkB7k!!;qVFNm@aj zT<8418Nsgm8POwckf^UU>Q$y6!>G+xyGkZ<|#yM7SIaWBWYJn8Dk0trqbLP1PyBcP}#wr10=K1eD&YC%dam5%XY8`^u zzU7*zFO;ykI`mVmJL(25zXKHhnEaPc8B+pW3hc|%ePin=y2g!N|aa_ zF{a-`2U3|w)OiB_MDxcg|u>4eAa4!0lV%A9Y#H zU0pOTP5=Bi&4HTL6Mh-&pOzb_bMV`l$=YdNh;Wbmi$R0PMTBjv?aN+mHz8bfq(txR z_ISjkPxRmPmEq9wnbwlcKR(;+jo}m_S$XJ0Dj>FNYXN=FvjT|B&SE2_tRp1qUJTL&uPP{PW=Ul>> z)zA}2?1Z@;FX*`wDISY2g19-RHV!IDit8%i;Sf6Thd;tJ>SUSQ8={ssFMC;9vmSU% z6i7AP_uQ?Sb3$(EUNKBIyDBE=w|@hFcIQM6*w< z2gBEM_C2$_%hyXDCjV_7Ad#u)ImUZ?pw{!Q-buay0@YUD-#If9eN=TqDusNRT6asF zwo!B-=bNtO*yZC`Y?--Dvbd=SS!6B;;4F;)cL6y18tAQM+!yU2!v}qEuGI zRc78DtuE!abStd%dR(W*$SF4SjmD&4h6@-2@!?z`wB8dT!5c$MjFzfzFK!Pk8==#2 zYA;F^1^ZjyxI8#`UzUrDaq#xjVIf2<=f|oRTVEB@?PW7i9CZZ7HrL`8_I1U0)cNXe z?2LDIMv*WZ947nP?FdzFYNMzGL3pCawd97K^WZas0u_ub)Erjn_DHtw$ZHfC`@rD9J!Z-(t`nqj^D! zi_R|QLA2gi+XNdU6&XY;PWQZmoT-dXwkh{BA_eHOd`2h;^n(%LKTrh~aHnT$|8(Eh z)i|u8*Vkvu8Nw&)l1x8>fbV^t@83bvPP^9<tzFKF^r@*Qa64g=MyRS#N4K^!iaL$<{(uMp^BJ#l)UZY+o&n%o`a)rx^91 zFQ}O=2~)mh;0k_ARi{7Re#D-4Ov4pJcu(cM)ymYIc*dfRl^$9Pn`+TT=C1WkV}Mc? zNabz6URQFQ0oYGLT2frny@hCTCvafflbT&ldMy}RU6Gk(+?>^fzqEL}@{C}amEC$J z2GyP$zHiL29G`_aSLgMhK)7?#|8DT%6OlDoEu3}E?b7JjWgV@hVc-VUGzL&^6ybEd z3ck_XIoPf<6j$@*^Z=LKUFU^y+MhS_GK|>7mcotc7i{B)u+hCnmvFfodfLdBdXXiD z`j+AV`!r4&vGOBRzRx};=3kll|At^!$h#t#F5W1+XUD|f3IFCTKQsGy$k_NL+GA6% zWeleOO5nTZcW0r$=-PK!Y&iExg>8M-%?Q_|fNzw-fK7V+9cQ?50#}f@e^o;0{;diSCL$c1?k<(4a z#C<|GsBt@MHjF#KO8Z$C*i_ickS|0E4xQQ-OeA^l9N0bUw7m~jE_yp*rio|dr|WwF zKAGIXJR&r;Y%F0yh0{XB5TQ4lu1u^olp}mMdUaJhV(P3sEae0HE)ojxD&hVnvCU$f zK54xphK*4L@i^XK=O}mo2JGx)qYWnz*NDCnGD*IM@@!vf-YCCTZ@K}sRbk6=;fD0| zWD7Fz#kjNy$u3LE+N#tMo$?p44p4D3FBh-49v5sL!!+yB*^#;4H3iq^+p*XjR+B}DK z5`)Kiyrxv4#-E~0dSm(Z=HQ@@0HiATxEQeF!OFJ1v)T)CI@*6#iD(TCG6d1qawxyN z<}^F;4*X+^#wf*?gSM;il9-g2yzkbrrNs(fbuk(k>+7w_e{V%7m+V9CEZ&g1!qGxZ z|0;nCn*CEkVt_kpYug=cBoBB-5P5UWrhGc^`cDlqUry^BejKiTchbnu1M2=RvCV_i zF6BLurN@Q&SQ8WwrDH!StuD3cJ6n((lk0Rz=0Ea*WYUeT0R20e-1@9p(PU|RCQue7 zq~w_OL5C`RQ0uLH2rMh;z*R`>Ti@MqLR*IwwBGFgpHc&SwI-lL)5K|lF9N7Rz0SRM zXY`ooY25D4_;5NHz*5x{BQM<&IMC-GZZ;rQA*zT0BG4ovo9yVSWP7)@53owR^FEk+ zBMIy=xO7U>77Oct<{qa7&sEmO#ZEgy=#XayG&8(RTG2vJ+V!#fhL5|w)FQd=5Z>`l zSYwPm+7xp;*RHB%~v{!T@)b-2R0oh|;v0i}Vm5=R20mKot%(8^*MgC-3m^!h)8!`N$L1oaT3K>%GpD5dBNA zgdzsPs<{9O{Dpkmuf3^rTB}TYEyszlCRf^D^lu*HGL{5O8o3qUGc9|6Rw(PU9CLMG zOp$`DsXERw`6NnAA47iRgQ=t90Ft#v!b~2CELCc(G*m7!&`trH&(_2&aCR)NHwNJh zoy%0q7r$%er@0IP^*P|7)KFqc3VE0LxkJ1wBm^M2gGgpO0)#zY#y+a(mXoc;$SX!G zYPoW$b#szi(Q})gEuO1QL@J;Fo=@>hbxzaWAPz2ce%MF&m86|WObyQ1~ZJz%J{8*D< literal 14617 zcmb_@1yq#L*7ks;bPWhnDxffwbT^0~9YYVGbR%6#iijxPrF0G54bmx{0@5Yj@V{f- z`_;Yw|E+&5U9*^(^PauW+56egjtN#$kiof4ej5Y=;mAIbQ~`mIJ3%0%=NQPqJ0&;T zkAN2>M->@yP+|Ywb>I&aQ?X}aAW(4_)}y&2)7mSAF0DO`#A{2TPQ0j zrsk@@oirV$z8bf3W%@n5NB5l2zFkjdqgu3EN_#twVE7$lh4iOPJcq4fZ4M2cV*hmR zIGd^Uw%O0?cPQv4V%uJGlNrCuxkVhghsn^U*H5gJY!MRw7%2u~*XN==@80M_X+b?! zSZ`4@uNanH-mrUx>!F;xI%&B(bu@?uNG2+Q4*_0M+1+o04ZMy<$wx{W8mL&nz$ZaD z*x-|$*^B3Um5v7-rKP2$CIczSXLPwk0*&xcP8E_SLXzuv5V$yz7@&iAF?11Q;jLB6Z~rH?gcxk_Vi0!QR*uVx#scPbYMZ-GGa{It-ST9@7JYMv@h_S;FxXUkJl z@s0h!#u3jjz`I^mKm3R;BJbOzSFacGWa8z0G2!}7r~_}MIy_`O?$?X+{_*W~;|TC| zqIWo8mz^0m$Cb||tH+Fd2J9%{isV01_Nyoo=8S-a@ug~ucoK5-BS$i@U&&#MMLb@B3QU@tYC_ zTPoHI`mh_Vk8s_AJk4^bq+7Yf=TkHc;yLcgUZ8j;HnmovhH;x~JuOo%xY7<8BueVq zc_rML(2dIT@yOf$KCN52Z9Sg{Wt-INUYCG?i#Ig-S)B!XxO-i#tda6Bg8ZGe?nmyh zO*GD!I_D1u*2);s%kNlo5<>LdF0z=Im=W{)5-8 zowIuItO{WtBI&*l6LgmOMxGz}=wqe~o#S`Eu3&1W`UON-6T7wJx|p}hvBKf|}|Th6$*Z#MA7>|phro9;n$Vzq-4TnWjj36@6Tc!78Do#G)5Si|Pvx_IPs z(41d;FqTN8*M)P{2EsDldK|25aWk%_joG8H!N^tJclmU4GUYb*j6F

UpH2OBs{wgb3s?@YAz>=BB35PJi|X8MsVQIRM8>3f^qPD zF9RRa?HoJN_yk*es4MIt}`Sl41+QA3U0-nRa=(vu@BbZcb+ z7gw9(!`WJwD-wh{Fe^CQOr6_Or;dn98(ti+Pz^0)K;-7~%2LymwZ9Gk z+x0kuil;Y6DWum2X(wt+6HdU*Y;A1;C+~SYX^KZBh%rt8V7y!;N{E2Vj;?m>Mf(}) z&3Rjjh__YPdBQjA!IZko-RtjW6g(z}0491n?=X}ekZNdZwxS|H7MmXmnZ2Binbd!RNqCfjxV+7;9o|=6<#t+t7Bymokaq+P4%b;e$KBM72%HY!Nv_|Yqtgffy1bB# zghq}WajpC0D)c&b^MD>T5*T2Y-8nDIW8xD==`_uOn*-C7+5Pc503elMHZSgvh9E$$ zn?U)#`{JnWfNotA);-`XQLW%mJv}e4^H>0l%WtNJ$0;b3d&a3$QH?)Nj~*HhIUo?) z;O=CRw$0Z3$-Z$`!w+<~@i#BO7f{dExwRVD1ILZ|1uZ1Z`>GjF(Oc1NA+rQbg>!NE zae2rz1cJYIEa}W3m!;4VeWhu=GsLX9+S@#a8j|Hxd@>xR<B?RDxU22Cg~U${DIgtgb%TK=vTv7b8)~sCZeuU z4;t7OY)MXaFdBrSWwTf*nJAXTGoox5CckXa+isoQoa!eI;gx9y8q$@myp*d1)A=Mww^E@2$ClFaT*&hEF9(H!Ya7}@0J(h*`@cDT4zij?v38=F3Z*-b&C@! z!~{p>9cB=bdV60SZ`+L`PMG*)rLQ^;Ntm3;O|R*Wot^F#L?m|)rtEgmw7U&Ibhn7| zH7bK~hdJ@-Y@Hs6iIsJdQ$pHo^NG==={OFvsgp0~WE!uV{u&rM9#yYy9b1!(miz}# zxKe1}+JOF9Yo&?e9zOg@%sA|K;*n#_dRZTR-ryVZw~gd?N9XF zZAB#-Y2iZnJsMqe3oO~x=Wr9xWYt7L_w)=aD_KftgLKs(F)o4o<6?i3z=8_!z?Z@M zFoJ5Yi({3G(}g`I>4neFJg?7IXEFdsV=0w|n=yo4ewX+JkOB~>;Pt;py?+UogZTvo z0eEX@Yarn4Jb!!>JKaGCk&*ibm;elDfdhTSfK8x3q=yO~ zZMcjWh|8F%9Cc5N&_O|>e!%-ESR;=JAfQw&3^2Jb>P94hyMquEESzR!r>B4zW?D{y$A!0;?(-a9 z_;?iw^}CmjOZFDW^?kA!ttSn$NMo^K&sP0y`@B}-j#^T4I9r6jAnjcCN5}&S%nd2T$wXUw zb{M@pXJx%k0+uso=vTZs6K$j?oaatc=zC4AZ&j?)oc=s8+{LO>wJi9jX4AY-&zGAg zp9XtOSFfjwWk&D})E<%0xZ{AejM!c*s^d9r-eWE8;A(DZ#0ZyT@!ybwgI<{|2!YAx zjE7Rt>Wm5WOL=u&Ed#9BbFsnpdR`sKM+|>&W=)lw-M>=OKLK4>apIVaz)D!j)~j=e z^Rt%Nysc8R(bp4bs`t+)(n8HJz+OyPC}Zo}_I1h&B>|dU6pRt6G}_<2-Y-&y@S57g z)E?i;CH;HeW$MDvY-!H?zZaBVa1Z)U@~?#qX%Il9@BI};G>P!<(o}_Dz~cMF;eZ(` zWl1750``}O^Lnl{A^a&Di{EQO6Y(T`-+(WdAM}vd2m$z9sHFzM05JiV`CqdK;GsWB zN5IPQ_Vj|^d!(A?tBaG?KR$6u@Ob3Wo=oR2>%X?*--tXdUH>=s|KF?jjvLzh%%`5+ z3(A#_`L*KQfd02@7~_F2ikNfaTY0z}t`|GKM;(lB8e)JvCP1XK);%Wa`F)G^5p%u4 z#`Ea`4DN60jiG5Q+KPlXJ?qAt7JA8m=F5LZXeT*A# z#!se}@-=xs{F86(2dJEcH|T5I-i}u2JL?F4W<$xD_fqHSioAPP(TZbW{9BwzX0-}B zx2XK5+ja2P&z1X)O%(=7n@dI-SFBlK>>6W&ER!Yc!W8%j0bWp`hY+kEo*jguVVPn! zQ`ISB-gH7brouSi&D^(+tJnNkV^Zg#{G;<5bSEkxJb+O=ct%vcex^=!GBm=o|9q|` zXF}94E!Xlzk?i8&c}e6p?QTK*Shv#)V{6SS40TeO3Wke;v67BBD=|+xrn%1_qt>&# zOQio;Cf8j^WM#W2jjyjNCxw#*?&S}okSKUuoAW$vz?gQbW<^~0c@@$moqno4 z;YH4FpF#-5Ll!l+f-MPLxzE%6V8%&_Ih_-O5Bj}OEhqcj>liG&$($dcq}<0T;SkGT zZliyDi1SkAjYE;E_Ns+O^%-VqF;yHcF|HaBY-S#)8_nfP3W>hSD`zc=s=$XtNY>a{)8 zR!GXza?295y6(fyoG^ND_u)}XRpHbtrQp>&>SLsr`rX2J1#&(6-_GqXE{b!FGj3@F z!`b>xR zYtXiRnW!nDKApx#6x1P=<rNs8v%FD?NYTCA@3YT+J*7_^8`+Pm_2XYG*jND4l zhnCo-IhM<$PggNHVs>b?DlN2q*h{|(Lj4PQP3QFY8m-2=LylJTt`GEfTx5-G-P0I* z;(uD^FW0d8sKP3l>=9rpYuKmOmQ7{|*Haa3u%QTfDxy_+P_ds=0!^(Ba@nuwA&y zSM{fjM>>iZE*S7~Aiqjg%#Rw2U+?s5Ke|)ETjTS2@lZWymexFM6DoU%+uTB|?tY>esrHO#0S?%EAn-Z!bi5F* z8#bFX1~@({D(Z(=2WS@NyK6*J$1|$hMdX=tc?qaxw+QF5)t%9O=DRz=pQ&alIhHM`$E$10lr=+EVXAN3mEjpQ1a*D05n+z}{=uzJ=LoTH~Io!)!5$CtdM&n^52BGiw} zru~~ronwK=s?#GdDOBInUlrxbC8Vy~WpSxuN|sW7&{P`ZFTL_$nyqSi`7Pa7Br7fy ztUiDA5DrTN+k8s3&}^4yGpJia(8zO*9jl#AWmkIr$tV}zlH>TC$89FVZ~0x04xSDi zGs}8$i*1*ACrWJ(j-lS3q|t*25iMaGWr$AMz9}6qz+eL-?xj5fYcqG{+v1n;JSN55 z==Ka5Z-=YX+`qy2>Qq^8P}+$XC`KG2BTnA+`&xHj+e!?J`BEiwOnd#D9{FT~N|KcUF`$3W%5ea0Z2h2{rrgOd*_?n*!-P^Ue{pmz0*SGLHhnw_g zcBBO9izbWWak-Vbtzzri$16cr*c;~gd<8YHB7Tv>-Qq#{DGx{_!7(}H@jTayMKr$} zr;jm{OYtz;TmI^95T#qjaz`3HEnGIIaw)eB@s{RZxFv ziG<$Q7tmsUr=nX%;;ub54nUrIIt~r(7&v+CK>n(dlNU z77hHpS=c95{?=oaoEApR+v#-0>IAq}yBQqz{fkZ6Y<^@+>e%2kcI+6PP(0?8te4E} zf*QyC6)VUJzVz(SD!g)txBGHx)j$RD*JbM3xCpPcjIBJfmQ~}H&k}&7r>oF+N(h=g z;!FUs2&RtJ6H3x!_D9u8T1K7F5U z#9Vs&IVb}3_X|12=vY_8!dx5g%-S=jZ!#PuxO;KC?5uO#V)~6KvJ~1r(qYmtB(XI2 zQJ%llnqQG7Am{g5h9lf&U_Oge%b(qGU&kuY zk}7JHyisV3|Kxe^6{asDyGvEbL1hhic*{8`z0a_2HU<2w;Q`5asT#rLY1IAqi}~T* zbDvuS(6utD{aSHzv~I(YX%M+cwyH&|2juCZzoU6T>5@u>i;Xp=a5CxozN-ysr@&Lw zP_@Gvp|{7~9jMDbGx=K%jn7=HArL|)p3&iZ=xgka;1 z@MRS>M@heB9kb`7tS^=q7qaZ`gf9)4uPF|J@KPA~Lq+?iVpF$G$Rk zfynKK`vP5KWr?vRJ~q#yv_R570b5j0mAbiwU-RW-L*wqD&o}B$ z=0u#7J7xcfghL;h)rO6_wDS;gFuyo5j9q3&`ps@|-h>gmIqEv0vt3F0)SV{RUq)=X zAq3@RklPc^6jV>vaEj_(=C{Zse6zCF_x`QB#2UN7<6WGf^$%P5?o(yLBI?`gZrn*{ z7LBnDcF{2t?lMl?N^&EG7;G%R_(QxqE*N#bq+v~$jmq`8p?Zu(*oZtGexI|bzOu6I z526(O(RQ!|x7ZP&?1)^}s$m0>s(1Ff{QT-ikg+ddHTq#!~T}XaqrYrm6BI zKXyFhrPIGvY+H^mCuwE)_%Xv|U^6qTCL|6QmItKr^gwN?8eV9D%VJ}dUnrQP4UVBY z>pEJ>yQbOQ&~pw?JX(@*61&;36`A~$ZFxt2U4ld2BzBYi|4T%V@2WPof4Qt-bRc(d zytf{G#<2ohgMAEjGB-K3D(>=DvmvvFD`6e|Sc}*8>KW-s;6Va$`vGwz708Q)=C!M+ z6!iM502{wXli2vgp8rmX&O3$NO?6CP*wKAFD?3wT{xKrFiUGiJjE0qPOK`J;^f}ya zVE0y3k=KL=W{BLi!MtTyss2KM33mkdH*hAS5oEN-&kNLIxMSP>@_E6Qn;tHII+JuM)h+iAdsJ~jqS>$om?N?TyJcH zfjn5DIlFEXi=n4?fIO|N@bXI_bLk0VTLG@>-CcbQ^dlCsI@LPm`&!xeB0F)^Mtk}M zqGox!R`Yk61)gbl?{**702?*XH+U28_H}l@RC}T2fk=1JCciWrNxEOQp8(p*a=ka` zrZE=A7i)ermHa2Vlj$4zyVX0dc~(&-L|A8*2-}D{2a}p5ws~)O$SHh{4qvF>E#P%5 z{*uRN{-~?u7?Bj>l!W@Va};^;-=_4u;wef_3KMahzW1}v71tH_*wABROiJG*%n~T~ z#6(?~z3|FmpOy~7U^+`Ys;8sKrk=Z)drB3LO=ppu3sYA9eJZYD0ht-Q#UH#)MjYWk z6hGp{`*7qjRght_%KwV~*==5-jGITeM3X_rGEoCsLzap}l@)km^BHX2fhP@>i`@I= zTMyjqmnlOwe#;5)gR-N(gs}r(E&ihJeShmPZVmVZG`~cAD%>^AY5DZ~9JwL1vpkDs zQ~jkuR_^%}%!+5DecpdwOSy zFY3=S-fXUrcF<61uiND%AFqV_)700oG`r61u75UcS*+018YBN>mD_uK;QNty;9P=d zCG;%+1I>sK_;$da1`Im@1z%sOaiA+okLJ6vzGXoRnb?5vyfL1fv0FnjqeWDHePKgf zdn!*zXbC1*qqJyti7{IV6-R$eO@in_KuzHQC=Dwt;eea#TI0Ak-mSI$gIhc--XC_e zS{e!FRoO`u<=68~5I9^f+0rfVXhQnKEx1C@0B$jBRyO36VJyd5F`95*2H$^9#WRso z<;<6pEJ2g0+Swiv1<}gd?97^f&i=|8?`H<2_qEF4Ho?waJgJ1%s$vo5c+X(v)&ImS zmeIB7sr;CGC(4<;%s>%nzZXu-8!HnsB+4-*n#aU@9$GIfH9U#waI6)bQ|7n)oIbv- zT&7tVrP2s)Iu3%RRRcZJ!!5c9X8eseCaWtgE;m&euf=1%%&1Xw81+&v$doRM;$@M(|W3^Et>_*F?Z|=SWWd=-fkJ* zg(>=u;{i<*-8)^$Jz0=DsBGqlj2so(p{}sy$=`88ayf<9`;du{q&n+_81j=-gwvvA zSaz8|Az?fFkKNJ#!Xo}{Q#Ibe;O6G?g##t zv>F2((YL=}B1?uRa{1#ur2tUVkZF0P3^3hab>KDJkdTl8p_4>eGN3Cf=)46rLp1~1 z7{A&LQs{AUag(K{1HejLN`B&aP&|Oz2!a_58`1)kk|IWP`fR-qzIR2WVWwgtVy4vQ zOA~8j5+^C!`Pn^K$`6KzjpzTPN;i~94ZQ61T&P(Akko}Rjcxg%vW`HEHIEe zo`3zsRC(SFjv#?dRZ#n)x&rNDgiJC%hcX77P<0n#$`6i?@4w{ z=umRZ3QsTg@qE5ebOE)|FFh6t1C6gveX+qAN0~!b0>X*k zX{~Canejb(D)@WpZigCGQQu=)CZWi}0H*>MHc{`vGl`65@+T#AH+60RnhpsO0u|B} zSMp^P8H#Iig2DpjdTGNH$%42|$C!O(?xLOa-m<5Vgul8ctdn0jWoz`xdosFtalSFthnG8B z)z-jD4vtaecly=Lb%FQXOAkKCdJpRN^48L8_3aP3kMBNo=~avXMfSvbJxDMhP0*`W z9i^&NQ!iq9vi>Qrj#zqeYDMnQIoN$BoGhJXc0vmNN<|@A@T|brizyLw*jj;TC%POc zhUxmOlq<@l@v!Pz$ikoWP0%Le#KcD{XP|0Jm2UNMh34De=EecLx6@py%~9udQ95f{ zgu801i&()sD;bU_r|CBA<&56cyfg+f;@pW^7uH4w*U*@2P3SCVe8_T0o?}(U(;<`?$)Kpk04ucv z1`bRBP%41j0sk?VgAYoZJ+JScFD6}iex;}}RcN-*z*EXTG+Jv(FP(rA;z`2iH~U$4 z2v5;hNFk5M}cg>IV9{Xf@P9n5Z$+3vN&bV&V{#NVLZLkeV z$}La&H_zod&W>(D3Qkz4#-G{HzNwGWe=F}ScdmTs5NuHyIoe5kE@IYu4=PH6f<=an zF!>bY*X}ACi+)|_Uh5&`L@d6jYGUwL%|A)>7I=U@vK&xA0VR!kl~q8{L}-r4A~b|bo$rksU!gKP61;p zXu!-$!7CWjAos5$HA6+gdR6gDJ5eT}TT_PfQ+Q-;q-Nw)>pz=?*m@0&o(@+Rab=0?uSD>1DF-^SfPlPfcn6(}%!LX_u2wW`p z?vdxz%MOAS*X(~55vp;>o3~=uYBtinp#A$zUJCB0vFg9 zCofw35gwpYN{niM5QPB2D}9!)W)+mw3j6qN4$GF4$i?+mm94tzgAW5QXiHS|{R@C9 z{x9`ai!SrdUZ0+<+SGZvW!PI=!|mP^zH3Veb)lKuxvM~?Z=$d>L2iA>F=X=~c`z&4 zT8*o5MuJU5#BigeOWeVs`~&YOQ~ZJ~+%A|lf#VVQMM?d>!#V;9o$c?G)~|;ya~&ho zkB`->eC?o{dMW4dq=MR`F6z(0O&(X_sn3Dh#WK1nku;+_er_>M?n_`g$LRWi(xK+ROW5*0u?c zs_57y^=g=b7TzxniCBG%ylE6#D6y6;_R9LVBdG=2N*9vl^Bk_{bia0zXTiS0(lpD4 z2bM}@55MEqGI7ZY7UWWML%$0U>umow5By%&Aud!D%B{NU99*om9AWhb@iqeXRgaz| zeQ$c+U$Pi}T$PdQ?j$x`0^T+&7QG7H(G2_-(Y)|VIkno1ZrDebdal3w49?%y5-4Ys+F7XRpSu zqf1Av!|xMTxUP9vHQ)b+<1Cp;&9R32 zqsNna>oP+BhB-VWMGFpVD=$!E!C;Z9jp+2vjuXPH%=q~(DZ_M|^$M@lffDw0-@ znE~uEV!lx4@=JRRu8eIWNZst0RmX1~KeV6-fCvECh#j$0+FEIspwUoE>@eoo=lS4o-kTfMEF(Sj2S~ZzbF|X$7 ziUTF0x#M_fA|q8#dl<_acM{n8@`{D#CF3Ebt?5Q1cG9##iAJtx> zTe?fuTJ4;a(o19h_7*fLI2jTSS_m1*mmvcL&s;yFeI6{XRj5LDM}2Tp9EUU_0_(l zn&x%7_Z}h(;#+@d*uvIAd7+?}Il!D=hw~@)E1_VmHV%y!?A1iHy*AD(Qpndjl=9DD zIH+pAZY%GRJ-Um`t`|sc6TB221u-&pt4=oi%NvwXLVS^GC5Bem=5`cA=ncYe@88p- z8rVj5ld;#3EgnY?$hoy6x8`VFA}@j#l$2+Z!wirpfE%$p3su7#04nf2&5Lbvl5h+c zY%#bd31^c;?=P4TaCuw0G>q|WW{S{Lkac)@Z-(WAOJqN}a=nf1I<(SeS^LqEr8VUQ-8?MP8M z(BDSzo-ZuE?GJ)s3+y(vmKIN4>&urP-xQQD_x4DA6nb}SOZLY(t*=xKm&*#nGyZ+C zOg=oa^>6kPKlu|`En|8UP`zAuyuxalsD*`tCLlTH@2bo`J$(7)e2;^v(rWg6@6*P} zcw|8~`nj~)BVVZ|)K??+N$9Jm4dN(2ZgF(Km6WphVJ`bPk0ELLL#QJEzAV$&(;m68 zI{>#dL-kqoZC_X)&~K<4u2RrH|L&90aL;EeJ-s{q)zRr0#{%a}1h2(RecP1W4iuwA zR$iE`vx-JBR5!PCrPwiW&WJ7-5#})vJkI!L)A%T&SWL+Aa8`nWHBb6;*?I`6*6X8F z9jtM6TU*wEiDLE~Vuh=E{5UEju{6Tbw=g7Qf5b%zfQ>cXh~Xy;C}~Yob@v;c#NcL8 zKv)AB_=C4y!`dg*2~l-(-#F{5z#K(8!6+dbz#P}FrNA9qgCY6lF(hwbwC?EGU~iH$ zst`8J=5!H&dcON}1r(?c`e&t<&i4YiED!cI#XnDWkUl#URlKI^oq`dN-*V%mg&qR) zYd|;RC#;C${1p!N(>t2Te$h;tk<>qeVSq8X5G3{gVF`fNJ2TZB0z9VPBgilPf$yC(ddS_lE{u;W2i@JH#&;|LJo=T3T%#NDngh*vrIJdfu`ue_Yqotx7TQg)kbLwG#l0_lyCm1db&hCP5ow|?s)y7 zB%DkmZrPOe4V1)2>OnB=@mS1qbNXTf2D#`T5pEW!4*?1;1visKRDf>slIM&KLuU1Y zfL8Fn0xl;o3HyuT3F|lTTutAc3>D0WiKB#k`R*;$Htiz|$8QugT4#llRgddJW@^ZO z=UK6y7~sCHFTVS*1r;fI?5p`={F2b;Az7Bb|4?rjj^=d1CLguLYnT`;s9!L$lf`B>R z3|hbTmX;PoiIVhy7juyGmmt}y7U5h-p>mIi5x!kz#} z0#qQCvN%QIv2k&3rwc(TUdNMmxNInY9<#v&g|M*f0Cf#ufPTDC59=AI6`-lV_NMX+ z2qp%)ud~I*9l$?vB2gm1ruTtyoITQciR}CCOD)UiFm?_OpzKFQ^yqKd4=G|Gh}s~< z=fumOKb=Wa1ZohL@+iEts_JycaX{$uM=MZ2{LX^<4i}htY_CjT-y&?sXbP&Hrfg$s~T>H>PWIB+HvkKAy m7%wn6`uhheIK{<#H%Qf?I#08+KkWkVgJh)?Bn!o1zW)c_+7Xuk diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index af947d4d1e..d7a8fb3533 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1276,16 +1276,6 @@ For details about Microsoft mobile device management protocols for Windows 10 s -[RemoteWipe CSP](remotewipe-csp.md) -

Added the following nodes in Windows 10, version 1803:

-
    -
  • AutomaticRedeployment
  • -
  • doAutomaticRedeployment
  • -
  • LastError
  • -
  • Status
  • -
- - [Defender CSP](defender-csp.md)

Added new node (OfflineScan) in Windows 10, version 1803.

@@ -1684,6 +1674,10 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware [MultiSIM CSP](multisim-csp.md)

Added SyncML examples and updated the settings descriptions.

+ +[RemoteWipe CSP](remotewipe-csp.md) +

Reverted back to Windows 10, version 1709. Removed previous draft documentation for version 1803.

+ @@ -1887,16 +1881,6 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware -[RemoteWipe CSP](remotewipe-csp.md) -

Added the following nodes in Windows 10, version 1803:

-
    -
  • AutomaticRedeployment
  • -
  • doAutomaticRedeployment
  • -
  • LastError
  • -
  • Status
  • -
- - [Defender CSP](defender-csp.md)

Added new node (OfflineScan) in Windows 10, version 1803.

diff --git a/windows/client-management/mdm/remotewipe-csp.md b/windows/client-management/mdm/remotewipe-csp.md index 27677b6c69..fc9618891f 100644 --- a/windows/client-management/mdm/remotewipe-csp.md +++ b/windows/client-management/mdm/remotewipe-csp.md @@ -7,15 +7,12 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/29/2018 +ms.date: 03/23/2018 --- # RemoteWipe CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - The RemoteWipe configuration service provider can be used by mobile operators DM server or enterprise management server to remotely wipe a device. The RemoteWipe configuration service provider can make the data stored in memory and hard disks difficult to recover if the device is remotely wiped after being lost or stolen. The following diagram shows the RemoteWipe configuration service provider management object in tree format as used by both OMA DM and OMA Client Provisioning. Enterprise IT Professionals can update these settings by using the Exchange Server. @@ -47,29 +44,6 @@ Supported operation is Exec. **doWipePersistUserData** Added in Windows 10, version 1709. Exec on this node will perform a remote reset on the device and persist user accounts and data. The return status code shows whether the device accepted the Exec command. - -**AutomaticRedeployment** -Added in Windows 10, version 1803. Node for the Automatic Redeployment operation. - -**AutomaticRedeployment/doAutomaticRedeployment** -Added in Windows 10, version 1803. Exec on this node triggers Automatic Redeployment operation. This works like PC Reset, similar to other existing nodes in this RemoteWipe CSP, except that it keeps the device enrolled in Azure AD and MDM, keeps Wi-Fi profiles, and a few other settings like region, language, keyboard. - -**AutomaticRedeployment/LastError** -Added in Windows 10, version 1803. Error value, if any, associated with Automatic Redeployment operation (typically an HRESULT). - -**AutomaticRedeployment/Status** -Added in Windows 10, version 1803. Status value indicating current state of an Automatic Redeployment operation. - -Supported values: - -- 0: Never run (not started). The default state. -- 1: Complete. -- 10: Reset has been scheduled. -- 20: Reset is scheduled and waiting for a reboot. -- 30: Failed during CSP Execute ("Exec" in SyncML). -- 40: Failed: power requirements not met. -- 50: Failed: reset internals failed during reset attempt. -   ## Related topics diff --git a/windows/client-management/mdm/remotewipe-ddf-file.md b/windows/client-management/mdm/remotewipe-ddf-file.md index 215cc85669..a9ec625e99 100644 --- a/windows/client-management/mdm/remotewipe-ddf-file.md +++ b/windows/client-management/mdm/remotewipe-ddf-file.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/29/2018 +ms.date: 03/23/2018 --- # RemoteWipe DDF file @@ -17,7 +17,7 @@ This topic shows the OMA DM device description framework (DDF) for the **RemoteW Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). -The XML below is the DDF for Windows 10, version 1803. +The XML below is the DDF for Windows 10, version 1709. ``` syntax @@ -43,7 +43,7 @@ The XML below is the DDF for Windows 10, version 1803. - com.microsoft/1.1/MDM/RemoteWipe + The root node for remote wipe function. @@ -131,94 +131,8 @@ The XML below is the DDF for Windows 10, version 1803. Exec on this node will perform a remote reset on the device and persist user accounts and data. The return status code shows whether the device accepted the Exec command. - - AutomaticRedeployment - - - - - - - - - - - - - - - - - - - doAutomaticRedeployment - - - - - - - - - - - - - - - - text/plain - - - - - LastError - - - - - 0 - Error value, if any, associated with Automatic Redeployment operation (typically an HRESULT). - - - - - - - - - - - text/plain - - - - - Status - - - - - 0 - Status value indicating current state of an Automatic Redeployment operation. 0: Never run (not started). The default state. 1: Complete. 10: Reset has been scheduled. 20: Reset is scheduled and waiting for a reboot. 30: Failed during CSP Execute ("Exec" in SyncML). 40: Failed: power requirements not met. 50: Failed: reset internals failed during reset attempt. - - - - - - - - - - - text/plain - - - - - ``` ## Related topics From 14358bc5744af1aeac619bf76948c6e0fa042314 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 27 Mar 2018 17:47:31 +0000 Subject: [PATCH 17/18] Merged PR 6678: AccountManagement CSP - new configuration service provider --- windows/client-management/mdm/TOC.md | 2 + .../mdm/accountmanagement-csp.md | 62 ++++++ .../mdm/accountmanagement-ddf.md | 201 ++++++++++++++++++ ...onfiguration-service-provider-reference.md | 74 ++++--- .../provisioning-csp-accountmanagement.png | Bin 0 -> 10205 bytes ...ew-in-windows-mdm-enrollment-management.md | 11 +- 6 files changed, 318 insertions(+), 32 deletions(-) create mode 100644 windows/client-management/mdm/accountmanagement-csp.md create mode 100644 windows/client-management/mdm/accountmanagement-ddf.md create mode 100644 windows/client-management/mdm/images/provisioning-csp-accountmanagement.png diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 5b232fca9e..b0b0610178 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -68,6 +68,8 @@ ### [ICSPValidate](icspvalidate.md) ### [Samples for writing a custom configuration service provider](samples-for-writing-a-custom-configuration-service-provider.md) ## [Configuration service provider reference](configuration-service-provider-reference.md) +### [AccountManagement CSP](accountmanagement-csp.md) +#### [AccountManagement DDF file](accountmanagement-ddf.md) ### [ActiveSync CSP](activesync-csp.md) #### [ActiveSync DDF file](activesync-ddf-file.md) ### [AllJoynManagement CSP](alljoynmanagement-csp.md) diff --git a/windows/client-management/mdm/accountmanagement-csp.md b/windows/client-management/mdm/accountmanagement-csp.md new file mode 100644 index 0000000000..f43068ab86 --- /dev/null +++ b/windows/client-management/mdm/accountmanagement-csp.md @@ -0,0 +1,62 @@ +--- +title: AccountManagement CSP +description: Used to configure settings in the Account Manager service +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/23/2018 +--- + +# AccountManagement CSP + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + +AccountManagement CSP is used to configure setting in the Account Manager service in Windows Holographic for Business edition. Added in Windows 10, version 1803. + +> [!Note] +> The AccountManagement CSP is only supported in Windows Holographic for Business edition. + + +The following diagram shows the AccountManagement configuration service provider in tree format. + +![accountmanagement csp](images/provisioning-csp-accountmanagement.png) + +**./Vendor/MSFT/AccountManagement** +Root node for the AccountManagement configuration service provider. + +**UserProfileManagement** +Interior node. + +**UserProfileManagement/EnableProfileManager** +Enable profile lifetime mangement for shared or communal device scenarios. Default value is false. + +Supported operations are Add, Get,Replace, and Delete. Value type is bool. + +**UserProfileManagement/DeletionPolicy** +Configures when profiles will be deleted. Default value is 1. + +Valid values: + +- 0 - delete immediately when the device returns to a state with no currently active users +- 1 - delete at storage capacity threshold +- 2 - delete at both storage capacity threshold and profile inactivity threshold + +Supported operations are Add, Get,Replace, and Delete. Value type is integer. + +**UserProfileManagement/StorageCapacityStartDeletion** +Start deleting profiles when available storage capacity falls below this threshold, given as percent of total storage available for profiles. Profiles that have been inactive the longest will be deleted first. Default value is 25. + +Supported operations are Add, Get,Replace, and Delete. Value type is integer. + +**UserProfileManagement/StorageCapacityStopDeletion** +Stop deleting profiles when available storage capacity is brought up to this threshold, given as percent of total storage available for profiles. Default value is 50. + +Supported operations are Add, Get,Replace, and Delete. Value type is integer. + +**UserProfileManagement/ProfileInactivityThreshold** +Start deleting profiles when they have not been logged on during the specified period, given as number of days. Default value is 30. + +Supported operations are Add, Get,Replace, and Delete. Value type is integer. \ No newline at end of file diff --git a/windows/client-management/mdm/accountmanagement-ddf.md b/windows/client-management/mdm/accountmanagement-ddf.md new file mode 100644 index 0000000000..eddb5ce0ba --- /dev/null +++ b/windows/client-management/mdm/accountmanagement-ddf.md @@ -0,0 +1,201 @@ +--- +title: AccountManagement DDF file +description: Used to configure settings in the Account Manager service +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/23/2018 +--- + +# AccountManagement DDF file + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +This topic shows the OMA DM device description framework (DDF) for the **AccountManagement** configuration service provider. + +The XML below is for Windows 10, version 1803. + +``` syntax + +]> + + 1.2 + + AccountManagement + ./Device/Vendor/MSFT + + + + + + + + + + + + + + + com.microsoft/1.0/MDM/AccountManagement + + + + UserProfileManagement + + + + + + + + + + + + + + + + + + + EnableProfileManager + + + + + + + + false + Enable profile lifetime mangement for shared or communal device scenarios. + + + + + + + + + + Enable profile manager + + text/plain + + + + + DeletionPolicy + + + + + + + + 1 + Configures when profiles will be deleted. Allowed values: 0 (delete immediately upon device returning to a state with no currently active users); 1 (delete at storage capacity threshold); 2 (delete at both storage capacity threshold and profile inactivity threshold). + + + + + + + + + + Profile deletion policy + + text/plain + + + + + StorageCapacityStartDeletion + + + + + + + + 25 + Start deleting profiles when available storage capacity falls below this threshold, given as percent of total storage available for profiles. Profiles that have been inactive the longest will be deleted first. + + + + + + + + + + Storage capacity threshold to start profile deletion + + text/plain + + + + + StorageCapacityStopDeletion + + + + + + + + 50 + Stop deleting profiles when available storage capacity is brought up to this threshold, given as percent of total storage available for profiles. + + + + + + + + + + Storage capacity threshold to stop profile deletion + + text/plain + + + + + ProfileInactivityThreshold + + + + + + + + 30 + Start deleting profiles when they have not been logged on during the specified period, given as number of days. + + + + + + + + + + Profile inactive threshold + + text/plain + + + + + + +``` \ No newline at end of file diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 2ca9f64f6a..85c2515f2c 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/12/2018 +ms.date: 03/23/2018 --- # Configuration service provider reference @@ -29,6 +29,7 @@ Footnotes: - 1 - Added in Windows 10, version 1607 - 2 - Added in Windows 10, version 1703 - 3 - Added in Windows 10, version 1709 +- 4 - Added in Windows 10, version 1803
@@ -36,7 +37,7 @@ Footnotes: ## CSP support -[APPLICATION CSP](application-csp.md) +[AccountManagement CSP](accountmanagement-csp.md) @@ -50,13 +51,13 @@ Footnotes: - - - - - - - + + + + + + +
Mobile Enterprise
check markcheck markcheck markcheck markcheck markcheck markcross markcross markcross markcross markcross markcross markcross mark
@@ -119,6 +120,34 @@ Footnotes: + +[APPLICATION CSP](application-csp.md) + + + + + + + + + + + + + + + + + + + + + +
HomeProBusinessEnterpriseEducationMobileMobile Enterprise
check markcheck markcheck markcheck markcheck markcheck mark
+ + + + [AppLocker CSP](applocker-csp.md) @@ -2509,7 +2538,8 @@ Footnotes:  Footnotes: - 1 - Added in Windows 10, version 1607 - 2 - Added in Windows 10, version 1703 -- 3 - Added in Windows 10, version 1803 +- 3 - Added in Windows 10, version 1709 +- 4 - Added in Windows 10, version 1803 ## CSP DDF files download @@ -2527,6 +2557,7 @@ The following list shows the configuration service providers supported in Window | Configuration service provider | Windows Holographic edition | Windows Holographic for Business edition | |--------|--------|------------| +| [AccountManagement CSP](accountmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)3 | | [Application CSP](application-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [AppLocker CSP](applocker-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [CertificateStore CSP](certificatestore-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png)| @@ -2549,30 +2580,11 @@ The following list shows the configuration service providers supported in Window Footnotes: - 2 - Added in Windows 10, version 1703 - -## New CSPs added in Windows 10, version 1703 - -- [BitLocker CSP](bitlocker-csp.md) -- [CleanPC CSP](cleanpc-csp.md) -- [DeveloperSetup CSP](developersetup-csp.md) -- [DynamicManagement CSP](dynamicmanagement-csp.md) -- [EnterpriseAppVManagement CSP](enterpriseappvmanagement-csp.md) -- [Messaging CSP](messaging-csp.md) -- [NetworkProxy CSP](networkproxy-csp.md) -- [NetworkQoSPolicy CSP](networkqospolicy-csp.md) -- [Office CSP](office-csp.md) -- [Personalization CSP](personalization-csp.md) - -## New CSPs added in Windows 10, version 1511 - -- [AllJoynManagement CSP](alljoynmanagement-csp.md) -- [Maps CSP](maps-csp.md) -- [Reporting CSP](reporting-csp.md) -- [SurfaceHub CSP](surfacehub-csp.md) -- [WindowsSecurityAuditing CSP](windowssecurityauditing-csp.md) +- 3 - Added in Windows 10, version 1803 ## CSPs supported in Microsoft Surface Hub +- [AccountManagement CSP](accountmanagement-csp.md) - [APPLICATION CSP](application-csp.md) - [CertificateStore CSP](certificatestore-csp.md) - [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) diff --git a/windows/client-management/mdm/images/provisioning-csp-accountmanagement.png b/windows/client-management/mdm/images/provisioning-csp-accountmanagement.png new file mode 100644 index 0000000000000000000000000000000000000000..1475cb600f9fdf143fac032351256afc54d55fdc GIT binary patch literal 10205 zcmb`N1yodh*XR#J3W^{tp|tb}0@6r#HzFeq64E6MBO=n$Af-*Nam$g_Y=KO2__x|lTCqhR{`5N&}VgLZHsj4XG0RTi60B{(H zAmE+14>O;F2OLj5WjUaHfMFfHz_Wj#`2YZ_;z-UP_5&ow_+Or z;Pg;ccwpf7XgllDlc^(X^>lZK5EX7S_TgU&3+i|3iKwsE$e zSDtW_{||wN)0WMLrYqXS1O+ie<~!Gf2qU+*waw-&yx>9bnZQ zJO~(TDqdYLYAUkN?p|GH;z9-S0YC`w00sbLY;(lUo}QkJkjH_6=5QAP7-KhvNk~Za z_V%WhkFpN*w+M;(M&iYj*f}T&^QB|`@_1)Ktl;&F3}x-v z%i*cEoQ#~GLo9&76?K?8Pk(oVzKq{5b1i%}s;*ydQqZ}Rx$*Ioi;p+}gp+D=;_~8K zL_=L>sd6dho-)NxDC#kwbL|sSL6@Q+rp0*qU@~JNy-D)x;8)-+!~tQ^Zljv5!f zc_J%kUC!%5p>%glUp^b!=XG?h;+p9{(jGTbi0YA(7v1=&n&L!3@1vg7=Y2;cF1sFH z`Uzgl}N%+Jq1v>xYrN=Q{Dp=x_O zs($aVuYCQZ{rPJ?-FWAR4k`yFJ~MRd^35ylxm?g)1E-9!S1;2JY>evf*>UqZQ8I2R z)#OLNo;E4%SN{6yf1;7FYw$c8KD5g5DEN4FE)m zXX6tSoU2-5_&czKlIc#LZ_n23BQzDZQoGn=lyoV5jq<4fXhwPPl#mx1AJ9_nh698^8{F*e?F;WN8`R-Oe4~pXPsOmZ$&cb9&thI?v6!gb6SKL!vvl7h8jLqjpC4O5xPAq3yx=`1zz+Aot>Q>b!O`S zAZ006H#i(nP5U}2(;!jFCO?m`HF9uJIquCT};@OD84|lWIxxYDDeHg(pmGigmU_zBPmOm8Z;od1ra5ku-$E-M~{|eLf9HR zI4QM?6bj;VSaOynmko0Zhf6pf3_C~=p6#aub7 znOu4?ushOQT(x)bbyCR%FU3#YJEelJZrxu`(++RN{9OUvR}Gc{QjJYbj%|G=M2o~( z=UkI-o&*5g*2zcu`1%UmE4(G;-lo6uGWDF$)mHV?c+xl6WB;?d@yRt(fQX3;`gwm} zZyRGNp6u#S<*Q|@0X_jAc<2}8;=+fX#{s@5k~qWRm&0QXIoarP{VkP_{kS#^Gn|kR zFu>)5e%{&H*;+mbKk`+J$L$)_lHt8bW4WlzZSw#^UaR7BOwP||H%YSgWa^)&;O~EF zr#P6ndCq$3fopo!N%!>gv2UEg-~cNDDS*=WT6F zwB-;3e|QVHtwKf%!3BtJ;Jriwz;iqVGZYB9{QyRE^?&x04;f@;YRWYH`{dl**upI! z=?0z%FJgOpd#=HAb>rwXphbEl?Muz0{KvEg{>*ep6%c*+7-d_qK31BA_X(!dE1!bNx zQb!g=8}ZzV=j#evl~dt3NjP{$X-L;+e%m?oL475@`2qfq7b7z2$~WB@0n+PuM$yRH z+ShFk0Q@DF}XpS!8rKL3mM-j z=v9Ef!tbnMu$dfVXNbS@@I|cuVLN7#ewFhv5KaQ&k%g6&m2nnYdN@67(ik_&XO7iy z{zQETfHtlO$HQ?dUb9}bZ5S$4D=57uacSIK%R(X2xv)e zQ`U>b$Ne&B(0J4yucl9byE@y)NyAsYmV8;iXDzSTVkg(&a;4p7S|(dTn!WTbwTa%ME!#+i7ffQwbx>Smr-_HKxQP+gU3eE1t z3FxSXL@59Uf;^text74o^~q~LE9Lev@Sqv4rw#GR)6*0u+S)&olA?FdsiE{f+6eQOtVj_XxBrco5p^Bnfv)*ogijdp&|E*~*ht}gg* zjdR}G$hZQKh7M7s{n+f6u{57?|20&jJtXDP}x#>b_1ZaE83>+B*weJQ^IvyT-`7cZ9sBCUF z2)s^G3Q?^G@>rWx054IcG^Ynv?^c7 z^kNZsEj24EOTu^O9#2nO^Km!sH`iB}8^_7=&wS6@l5x~XAfXpx(rw&$92aE^xB$a# zqN`{^1P+qj22*E`G34Ysssb0gU!g~WGalYhUGZVhJAvoaBbhXIw z@$vGxdhv<0tV{{^{f$5w-;0kHdZ*1I-n?kkW{jA-&?|Gf1qOiVD#2qv2nBqx)vF*F z+@!%wu^t&RHHCJU+pYxe>aXanJw5do?m(w+L)UVcue@(K4?Cd{y?k?XPidCce$&2P zGuMrV_Awdl;UE;xXS4dcb|$>L#PmfPdDC6@#8>8u3-_R<*tTErQDYlf`a;4*X5@=8 z^@i=&^4u6{Rl$bZRgjtK>3}xr&)Ur@spNG%Uca_bsM=Np>`)f=U8aM0YdWS3oYw|r z$y1@$(Z-1zj#?Ua)2W?()Wg2**H~TYgK$5uAwbCzQ%mk8-PNwtSQ#5Nsyui|XYSmCikVKElU__O)sAdwYK?)lW5>cL-m0F-X}*8@ zNk3!Sz8(^_syn?l_c&%M@WYflrd9w^@HH=*?~@r1eSazO``ulwS&_w+p*r$tT5vy$ zWDypPdb>x*E7j~3yDV$%*~)LM-^B+{8@@n#XpFeWm&$A2ceCA7nJ(vGpb=4o`Lw&R zx-tdPe}47X}!VVi$F?B zwRraYY*ZYy)^cb@l`H$cmXP@y_5HWasc(Apmkv!ypyP^}{5ZB*hVHnnt~s$CM4|G{ zMZfLy4{kX=IxS~$rFTDAn;}xVibsI)bVjQ)SIT)TEpIMd_Sa=ik4hI(%~EeF>*yLJ zN1xGiyoxN*?cYvceu8nVEfOvo8ks{hQ1ndrZ$?O@6_K^o;!}6u4sg+?zn&Dsh>n`r zZ$5MtkaC#c?~8i-5BZ~y4l^4%x4?L-mFsa5R^V=rk|jXmTf&b%TVA3Cvc8N;PbI7h z^yoe;h#(y@pBnL(yR)iWV9I{isIcfLl%G6LUKz1m&biL}B*=?c4{)mIgYxVtrxXbC zXe4UceqdvopIa6j>=plme^dRVG?Jr(rluxz;R{^|;sMv43-VmyLZwDI+^$J3yp?DkqH+&dcVB98~O^&zV$GI z!K_%aJzdt89-WRC+w-kdcAdP7zM(Jl2()EJbZ2{3Dp<9^SDN;`6Tusj1JB zvw0Ty7i)j!G%=WhG6_2ki_*>t?&8w6nbbuIw*Lw!9zC5}53hKXGa*VA%|vvy=L<+B zgP`FO9h=F$?TzQ;wD7pmSE0za3g?g4QBU+QwPG6Pm*w6aqX7p>M9g1^qeV#g!wz5nhgX4b@xSKIix?ag%<0txhxLU4aS z{}0E39}sO(|@gjp_M1UC@0?5K%+y^J~I0Q-L4i4}IK#(uuA#h&cKv>(aKyZn0@y11zIYi7z zt`+Ip{i#RvIWj0MAB?6bWvaY-Qg`K{WQ; zxUe(cp`l>>6rN|_xXx3pOJ6;sdIOJujKGlE1V=akhUf@N5()4%u^!iPvxIo|OVxgN z`ru6I;m%EueF}^``S5%Wdfg7s<{!ZPtIkwB{feAun4t@%UO|U%OfGvC<3Cww-hb5B zQQ{1)o>l>pfmzc2@)%?LGpZ?(Wa3xzV2n;%McznHr<*FXx!$-JKKABC2({j@IE9PNki4DXD3@XMKEC3O47 zWXP$2K=AL0whQ$lVg}by)~0+{4)dJiw2eqE_2%+lx-GHjw17%>ajG*>9P zcp|{rCM-WG%0!4(YL3xF@bPtJQFtUZ2+I{I-_3Sg>+p;H{6iyw)m0ysPWNh>cM4d! zl3m$S=9H!qK=)E`%ACzikL_Nr%xF>FpPdvIk1%|;odYen+c}LfoQjz*B(B=<9{pB) zR-%xITadU`-wPG@qBJ?n>y_T8WU1*o(984SkJUKWHKtKhI383{kL$O1w8E0aMRfJ{ z)fb2tNY~h&LFE4CN8Xy3Zikcn_;yzf+|Nw9M|U3JkFT!W%er%6-WP`}ZuhHe#49muAim+()$0Lsn9lR>b=aB;CuR-2nJ zFux3@rnIzpDdcIT9RcsR7Dfhk3#kfuVl@Z>)UZ>Od6rP<7OV1ZH53#y) z8!G7c%v>Cg0FWm@#Ir2Iqv;&}x-XY`8yW)r+gN_LEu6{`IlpTtSvV$zuu_p=r$$ql z5{4|4ZY*0kjwJ)Vw?_YAh4&1Du&8Z&ImapgpXhTy|Qw=&f!5fG2FAP}S z2Ac;gS4hZ!Z>z>($aeVA+5FEOeP$|>%S>XdH2(Kh|AUBY0>9L;d9s#uiQWYjliD8{ zRl2f}1oif9`4wu5v~2zaBdklMDw?UxG%pDoii)Rie;Em2HI2+f)ZHN8U}%br5kF-e zT8Uh&vX1J1Wb_L8{x1>Fv6Zn*ebl8FGW*ya>oHsVAa!+`+0Fu0{Yd^Rus|86|{Xa-mFW z(E!2SQM{{ag)lX*DxRy1q8+OWbrm(shxUC)Xv&JTRCXGYS~h9v7vvptE%m}#SDPJE zx|_eet5brNf*-oiF>omT4=mBd)$v z_TGYNl$oQc)2dbCAK|Z{CR9aYli|U4u&4^jL3mTNIp&IIx3La^tLdr*gAos7`fH!! z9t~l~xqo^lLyQ>X4=z|Z9_YHf+46p!$umE1+NaW2XphV>%I4MF2W3P}1~;Qsbd3?u zG~Z13cAh=ls0!OS4ZT)QHc6u2iw@e2jzlgN!3B4O?in7AkecS5NaSnNXntOsP?OYs z|MiF)8vn12XcK!UX*AEwO@)O!QM6aax&6C8_JfP3)Yy0D9IZt8uU}|R*FH{P9#^pa z(HdH2t^Z_+f9oV@U)wu7`aPhkQ1>6t_0w*ae!!no^54E&DgO&pBfW!Z{Zu@Vy z4!YpLz`zOV6U_M+MY+;=9+Fg1QBm^0oHLk!(`<}@(b22dPD|VA6Q?t4IFPqwh`qs* z*W6)nEqu^O{;$jJ(!pjub@x{8rAT50BYojyPPDZYi!x*ZJft)-KKCC0`) zFGyk_k+$iU31K*6LrBcDNg)O{Jhn~~w4RBW@^5V5V2qnT-hWAh-Pz??#1xe#CSKCt zBRSZnmNTxp{r8FjYd}JZfv2VRFUJhEnE@w5vFppt7{$Caovf(nbt*S_la#cw;p`J7 zI40gYwyL8rU}m}CfFIf5nvGx@G3hzXNxjQG^SP-RC7;`c3VV6HPfdm$>{fYK4gyoR zcRg;f0+l+!U*0TucQq*lF`O3TlyVxvuPzOS4$Qj4S`D?-k@zMuZUI`ZE#k1#4k&c7wkH+RJhVaVd#oN?Z|zHT)a zqnZ2!4uSKb0wGpDsdlR5G|iTNsx+!RetOTI6XRsmV7iRhljFm&b7`DjuX-<~X#7B< zwX28y6mdOGuHD74j9yJc31?JMlc^KiVt?FKW{bb^nmv+n@}P)c+T&axlUqmDW^BZE zn$J_}ibg+$i>8fDcgmb3x$NZxcM^0G3^b(+}Oo7uM7M@ zt?zVc7NKv{EX3`#k{v{(zy(^H&4F-vE46$^mzM68^E0Jk2TVfjhi{|?PW6}MyW4x_ zz3$X+RXk6On(ztJEbQOR@tj?H+nT3rzmX=WI#AGS@pPrpmh_E9sIy~JFge&~xHITN zLr_VYu#fp1%No=i7DvNoC3#mVkMBwMQ(BeTlSMvGaJ<(1vUBNW~10#=!^rZssJ*&}hpbz{T*1-+&rtBqo~G2Mp4$;x|{ zb%&Ju{LU+*(aiG|CTxw(d**lq&^JkEw$-VT^h<>!J#Z#DAh2up+s~ z88BgwzjPaKB@>^E8*AZ8`mlz$YT{lTA`K?FOBQyndw=d4!d@)>aXRBU$1ji<8_U;0 z@BILlZv|@G=i7K3xeJGXhb9DgO0VcZbGVB8r@lT^jB5}9zGMXN0Jy|g-zI=C2lD^` z%-duE@SGRy9{|s(u@8Xf*yskpBY2IEz`+9`xLx4pLjVMh4LA@^2om`C@6FH0dT$XU zTrmFHZG>POGCbucbuW-cqCVi{Of4-Z;9(51>|}NKz%D~R7XXW2a#J5vNQyP*6Q!X6GY0!kICTKYn&f%8c!-hw~rOala`~WmQuhae;>8@`N+uEC_M%Kb0*xdgE&bMa-J2nO=X8R7{Zzw~IuX;j(1X0g5KZO3s^K zu+X>}vyD1oFbt}o!yGBc%5+j^Y`CPRmiI%>pP(E%6AIvRfd;j4_AXg3*E&JSeW9kn z?&|fJ-ZqlGaGS5-Hfmfm9OHA1&)K+1lPpriU$hgk z8b5bzOFj;HuqImieuCx&ae25`ku8jLzoXzhU}he0BJAxPj1P_J_IW z%9`Llq*T$2qR_bS=9p%Vk9@SZSya;Y%Px{Xd1BSx4b)A^%hQg{IEG7-BC@NrhO#63 z8wTQrC5b&e38N!RVKR*YcKHS2^|?2yOX?aR)mBM%)>?FzrNb9u2b}iX*{yFDIAQ5N zsr<){5liJ_o?gF3ntAMEHwxp_&?3HBD3&=_d@%UK`^tLBaf|uFX+_=MaxAEwbSrFu z$+uMYZhV+_s$<ZeC`dYbD35*eMOFm9VHbXw#zj5xlByiOgCSM zebXe}kO=T9jP*`fdf2#wZ^z3O=ruL$v&^zy?25h*)(Zfyd}m0a@LXxF(zO~CU5~80 z_AmWvmNJt8oje8YyVb(xH%xE!C%jSWw+_xf9Qil8W&K09wSUo#s<}x$)pt(8W89gS zHB#J_C4ZL3F4}44+kF9Rm3i@HgY{!@ElTM(c8~@^(Fq3Kled&~M}+w!E#8hmigKOY zC4c4`r4HS(z8bONccWT*`c_G@A7|XA^T#iT3LfYv+9GS}owb_P!@PZ$8ZY1V<_S$U z-~P@|+~ar1FR9dNau&XsW=OR+4LHOPJps8k{fBE-t^ziZ6`?*^Al8mV6@(o~ZTbuT zSSg6Ms+gxiMzW-G1Ouj58Sps3IQ;qJd-&8;nLaOh*;mtuDwF6Ra9CbGRRaTbLu}Dd1;~ zdi2C+){(&j+Ypbt@}FY2PRd;VOCQR~*VpX%I#XjA`-%tFYa+o)%%-|X*6?5^2sSh` zSchSEbFP|-`}%&-f$QfFd^_#QA?=nABC3U)kOQpM$>Zbs9G*POow!WFM!EY?pKYybM03- zd4Aa=cai7wKb7(_+qZu4E44!T=xGk?LnX%71&#|l&8??&r+K9V*;`g`@Nv0n-%>|; zJ=hBCR&LsxR0MPL)9Ar@{~we6$`{+eIJFmcBxC}%J1N{GS1F&r>*V#{ui^L9ox7)= zU7D7iy+hiUrPEs5`9=^bu1sZ`>Nu4>K$pC~Rs+`>qV9X!B= zCm+KNS53Idsh)jw&OQIJolhw|7UEe}P5WfjHt$EFve)%gC7K}Zj?}wxu5HN&Pp;5e zOO=gTWBxVPncB)D;;DWwnDMSM(rLi7ax!~`M?q~KTC9W?5dtF zuGa91MSU?4lnT6&cBz*i|8>sW%+u^3>I83vp^MRj4AkK~MSuK4v-f5>D(aNqP!Rp2 zIbX_Z&)}9?yuuXb>-POzE2=zx16H|pJnGdvN?f86_pQC7W^XhUETq>GB9<*9?@15Y ztse5vn51o4OG1t^J1RkoP>Q-iq9M9LXleIumlwKcMzv$(_fR8?RP4xXyYW!=h{PNH zv@;+<|9gj7UA;YLQH|MqQj|%$#^s%zPf|o0?Y>;OxE;Ef8H?A=yI4ZIv|j0$y*g}uXnJ+lHeH?c7^+)Drys%K;eVeO5C7(g__-l z>ZN0wLlE)U(nB=09PCo?6rL@PA!B~G3g&O*v`C^o@O2hg@_u1(+nAak{4#(Q3Vt60 umN^070od7}uQ0%m@jwFsLIB5_3mN6Zs}sH-y7&O_PgPM%p +<<<<<<< HEAD +[AccountManagement CSP](accountmanagement-csp.md) +

Added a new CSP in Windows 10, version 1803.

+======= [RootCATrustedCertificates CSP](rootcacertificates-csp.md)

Added the following node in Windows 10, version 1803:

  • UntrustedCertificates
+>>>>>>> 2aa0839b99c52229c7cf43d58f467019b1284a6a @@ -1640,6 +1645,10 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware +[AccountManagement CSP](accountmanagement-csp.md) +

Added a new CSP in Windows 10, version 1803.

+ + [RootCATrustedCertificates CSP](rootcacertificates-csp.md)

Added the following node in Windows 10, version 1803:

    From 17e57fd0cc94eafc44a88cea83fcf14ff07e76b3 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 27 Mar 2018 12:18:09 -0700 Subject: [PATCH 18/18] added revision from Steve --- .../maximum-lifetime-for-user-ticket-renewal.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md b/windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md index 4434ee24a3..09d483458c 100644 --- a/windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md +++ b/windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md @@ -84,7 +84,7 @@ Configure the **Maximum lifetime for user ticket renewal** setting to 7 days. ### Potential impact -Seven (7) days is the default configuration. Changing the default configuration is a tradeoff between user convenience and security. A shorter time period requires users to authenticate with a DC more often. But remote users who authenticate with a DC infrequently can be locked out of services until they reauthenticate. +Seven (7) days is the default configuration. Changing the default configuration is a tradeoff between user convenience and security. A shorter time period requires users to authenticate with a DC more often, but remote users who authenticate with a DC infrequently can be locked out of services until they reauthenticate. ## Related topics