From 851287915b34df589313ae0b1672119c09b2adba Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Fri, 21 Feb 2025 14:28:38 -0800
Subject: [PATCH 01/37] do-8858158
---
.../deployment/do/delivery-optimization-configure.md | 9 +++++++--
.../deployment/do/waas-delivery-optimization-faq.yml | 11 +++++++++--
2 files changed, 16 insertions(+), 4 deletions(-)
diff --git a/windows/deployment/do/delivery-optimization-configure.md b/windows/deployment/do/delivery-optimization-configure.md
index 7722670c70..8e12148787 100644
--- a/windows/deployment/do/delivery-optimization-configure.md
+++ b/windows/deployment/do/delivery-optimization-configure.md
@@ -16,7 +16,7 @@ appliesto:
- ✅ Windows 11
- ✅ Windows 10
- ✅ Delivery Optimization
-ms.date: 07/23/2024
+ms.date: 02/21/2025
---
# Configure Delivery Optimization (DO) for Windows
@@ -232,7 +232,12 @@ Delivery Optimization is integrated with both Microsoft Endpoint Manager and Con
## Monitor Delivery Optimization
-Whether you opt for the default Delivery Optimization configurations or tailor them to suit your environment, you'll want to track the outcomes to see how they improve your efficiency. [Learn more](waas-delivery-optimization-monitor.md) about the monitoring options for Delivery Optimization.
+Whether you opt for the default Delivery Optimization configurations or tailor them to suit your environment, you'll want to track the outcomes to see how they improve your efficiency. The following options are available to monitor Delivery Optimization:
+
+- On clients, review the activity monitor, which displays a breakdown of downloads by source, average speed, and upload stats for the current month
+ - **Windows 11**: Settings > Windows Update > Advanced Options > Delivery Optimization > Activity Monitor
+ - **Windows 10**: Settings > Update & Security > Delivery Optimization > Activity Monitor
+- Windows Update for Business reports offers a Delivery Optimization report. For more information, see [Monitor Delivery Optimization](waas-delivery-optimization-monitor.md).
## Troubleshoot Delivery Optimization
diff --git a/windows/deployment/do/waas-delivery-optimization-faq.yml b/windows/deployment/do/waas-delivery-optimization-faq.yml
index 34e5020572..b86096bc45 100644
--- a/windows/deployment/do/waas-delivery-optimization-faq.yml
+++ b/windows/deployment/do/waas-delivery-optimization-faq.yml
@@ -17,7 +17,7 @@ metadata:
- ✅ Windows 10
- ✅ Windows Server 2019, and later
- ✅ Delivery Optimization
- ms.date: 10/15/2024
+ ms.date: 02/21/2025
title: Frequently Asked Questions about Delivery Optimization
summary: |
This article answers frequently asked questions about Delivery Optimization.
@@ -50,7 +50,7 @@ summary: |
**Device resources questions**:
- [Delivery Optimization is using device resources and I can't tell why?](#delivery-optimization-is-using-device-resources-and-i-can-t-tell-why)
-
+ - [How do I clear the Delivery Optimization cache?](#how-do-i-clear-the-delivery-optimization-cache)
sections:
- name: General questions
questions:
@@ -179,3 +179,10 @@ sections:
- question: Delivery Optimization is using device resources and I can't tell why?
answer: |
Delivery Optimization is used by most content providers from Microsoft. A complete list can be found [here](waas-delivery-optimization.md#types-of-download-content-supported-by-delivery-optimization). Often customers may not realize the vast application of Delivery Optimization and how it's used across different apps. Content providers have the option to run downloads in the foreground or background. It's good to check any apps running in the background to see what is running. Also note that depending on the app, closing the app may not necessarily stop the download.
+ - question: How do I clear the Delivery Optimization cache?
+ answer: |
+ Delivery Optimization in Windows clears its cache automatically. Files are removed from the cache after a short time period or when its contents take up too much disk space. However, if you need more disk space on your PC, you can manually clear the cache.
+ 1. In the search box on the taskbar, type **Disk Cleanup**, and then select it from the list of results.
+ 1. On the **Disk Cleanup** tab, select the **Delivery Optimization Files** check box.
+ 1. Select **OK**. On the dialog that appears, select **Delete Files**.
+
From b54aba093777aa5c868bbc53696246e5647ca02b Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 24 Feb 2025 08:10:53 -0800
Subject: [PATCH 02/37] rm-des-9720338
---
windows/whats-new/removed-features.md | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/windows/whats-new/removed-features.md b/windows/whats-new/removed-features.md
index 991c787969..78b659fd93 100644
--- a/windows/whats-new/removed-features.md
+++ b/windows/whats-new/removed-features.md
@@ -8,7 +8,7 @@ ms.author: mstewart
manager: aaroncz
ms.topic: reference
ms.subservice: itpro-fundamentals
-ms.date: 12/09/2024
+ms.date: 02/25/2025
ms.collection:
- highpri
- tier1
@@ -38,6 +38,7 @@ The following features and functionalities have been removed from the installed
|Feature | Details and mitigation | Support removed |
| ----------- | --------------------- | ------ |
+| Data Encryption Standard (DES) | DES, the symmetric-key block encryption cipher, is considered insecure against modern cryptographic attacks, and replaced by more robust encryption algorithms. DES was disabled starting with Windows Server 2008 R2 and is removed from Windows Server 2025 and later releases.| February 2025 |
| NTLMv1 | NTLMv1 is removed starting in Windows 11, version 24H2 and Windows Server 2025. | 24H2 |
| Windows Information Protection | Windows Information Protection is removed starting in Windows 11, version 24H2. | 24H2 |
| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is deprecated for Microsoft Edge for Business and is no longer available starting with Windows 11, version 24H2. | 24H2 |
From 8cc7a5c2557e6e30c4899dedfdf5909e1c47319a Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 24 Feb 2025 08:26:56 -0800
Subject: [PATCH 03/37] rm-des-9720338
---
windows/whats-new/removed-features.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/whats-new/removed-features.md b/windows/whats-new/removed-features.md
index 78b659fd93..bedd26e060 100644
--- a/windows/whats-new/removed-features.md
+++ b/windows/whats-new/removed-features.md
@@ -38,7 +38,7 @@ The following features and functionalities have been removed from the installed
|Feature | Details and mitigation | Support removed |
| ----------- | --------------------- | ------ |
-| Data Encryption Standard (DES) | DES, the symmetric-key block encryption cipher, is considered insecure against modern cryptographic attacks, and replaced by more robust encryption algorithms. DES was disabled starting with Windows Server 2008 R2 and is removed from Windows Server 2025 and later releases.| February 2025 |
+| Data Encryption Standard (DES) | DES, the symmetric-key block encryption cipher, is considered insecure against modern cryptographic attacks, and replaced by more robust encryption algorithms. DES was disabled starting with Windows Server 2008 R2 and is [removed from Windows Server 2025](/windows-server/get-started/removed-deprecated-features-windows-server-2025) and later releases.| February 2025 |
| NTLMv1 | NTLMv1 is removed starting in Windows 11, version 24H2 and Windows Server 2025. | 24H2 |
| Windows Information Protection | Windows Information Protection is removed starting in Windows 11, version 24H2. | 24H2 |
| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is deprecated for Microsoft Edge for Business and is no longer available starting with Windows 11, version 24H2. | 24H2 |
From 59410bc4da7c3dfd959be03da7e0a39e9bc6fd92 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 24 Feb 2025 09:25:09 -0800
Subject: [PATCH 04/37] add client vers
---
windows/whats-new/removed-features.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/whats-new/removed-features.md b/windows/whats-new/removed-features.md
index bedd26e060..00d74cdc32 100644
--- a/windows/whats-new/removed-features.md
+++ b/windows/whats-new/removed-features.md
@@ -38,7 +38,7 @@ The following features and functionalities have been removed from the installed
|Feature | Details and mitigation | Support removed |
| ----------- | --------------------- | ------ |
-| Data Encryption Standard (DES) | DES, the symmetric-key block encryption cipher, is considered insecure against modern cryptographic attacks, and replaced by more robust encryption algorithms. DES was disabled starting with Windows Server 2008 R2 and is [removed from Windows Server 2025](/windows-server/get-started/removed-deprecated-features-windows-server-2025) and later releases.| February 2025 |
+| Data Encryption Standard (DES) | DES, the symmetric-key block encryption cipher, is considered insecure against modern cryptographic attacks, and replaced by more robust encryption algorithms. DES was disabled starting with Windows 7 and Windows Server 2008 R2. It's removed and is removed from Windows 11, version 24H2 and later, and [Windows Server 2025](/windows-server/get-started/removed-deprecated-features-windows-server-2025) and later.| February 2025 |
| NTLMv1 | NTLMv1 is removed starting in Windows 11, version 24H2 and Windows Server 2025. | 24H2 |
| Windows Information Protection | Windows Information Protection is removed starting in Windows 11, version 24H2. | 24H2 |
| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is deprecated for Microsoft Edge for Business and is no longer available starting with Windows 11, version 24H2. | 24H2 |
From f075aa76118cc215b23e4b910c37aabc07c53e15 Mon Sep 17 00:00:00 2001
From: tiaraquan
Date: Mon, 24 Feb 2025 13:35:52 -0800
Subject: [PATCH 05/37] Removing Reliability report
---
...ishing.redirection.windows-deployment.json | 5 +
windows/deployment/windows-autopatch/TOC.yml | 2 -
.../windows-autopatch-reliability-report.md | 122 ------------------
...ity-and-feature-update-reports-overview.md | 3 +-
.../windows-autopatch-whats-new-2023.md | 1 -
.../windows-autopatch-whats-new-2024.md | 10 +-
6 files changed, 7 insertions(+), 136 deletions(-)
delete mode 100644 windows/deployment/windows-autopatch/monitor/windows-autopatch-reliability-report.md
diff --git a/.openpublishing.redirection.windows-deployment.json b/.openpublishing.redirection.windows-deployment.json
index 5d117ed99e..7efdfec5ae 100644
--- a/.openpublishing.redirection.windows-deployment.json
+++ b/.openpublishing.redirection.windows-deployment.json
@@ -1684,6 +1684,11 @@
"source_path": "windows/deployment/planning/windows-10-deployment-considerations.md",
"redirect_url": "/previous-versions/windows/it-pro/windows-10/deployment/planning/windows-10-deployment-considerations",
"redirect_document_id": false
+ },
+ {
+ "source_path": "windows/deployment/windows-autopatch/monitor/windows-autopatch-reliability-report.md",
+ "redirect_url": "/windows/deployment/windows-autopatch/monitor/windows-autopatch-windows-quality-and-feature-update-reports-overview",
+ "redirect_document_id": false
}
]
}
diff --git a/windows/deployment/windows-autopatch/TOC.yml b/windows/deployment/windows-autopatch/TOC.yml
index a011e4c21c..3a10604086 100644
--- a/windows/deployment/windows-autopatch/TOC.yml
+++ b/windows/deployment/windows-autopatch/TOC.yml
@@ -116,8 +116,6 @@
href: monitor/windows-autopatch-windows-quality-update-status-report.md
- name: Quality update trending report
href: monitor/windows-autopatch-windows-quality-update-trending-report.md
- - name: Reliability report
- href: monitor/windows-autopatch-reliability-report.md
- name: Hotpatch quality update report
href: monitor/windows-autopatch-hotpatch-quality-update-report.md
- name: Windows feature and quality update device alerts
diff --git a/windows/deployment/windows-autopatch/monitor/windows-autopatch-reliability-report.md b/windows/deployment/windows-autopatch/monitor/windows-autopatch-reliability-report.md
deleted file mode 100644
index c483164956..0000000000
--- a/windows/deployment/windows-autopatch/monitor/windows-autopatch-reliability-report.md
+++ /dev/null
@@ -1,122 +0,0 @@
----
-title: Reliability report
-description: This article describes the reliability score for each Windows quality update cycle based on stop error codes detected on managed devices.
-ms.date: 04/09/2024
-ms.service: windows-client
-ms.subservice: autopatch
-ms.topic: how-to
-ms.localizationpriority: medium
-author: tiaraquan
-ms.author: tiaraquan
-manager: aaroncz
-ms.reviewer: hathind
-ms.collection:
- - highpri
- - tier1
----
-
-# Reliability report (public preview)
-
-[!INCLUDE [windows-autopatch-enterprise-e3-f3-licenses](../includes/windows-autopatch-enterprise-e3-f3-licenses.md)]
-
-> [!IMPORTANT]
-> This feature is in **public preview**. It's being actively developed, and might not be complete.
-
-The Reliability report provides a reliability score for each Windows quality update cycle based on [stop error codes](/troubleshoot/windows-client/performance/stop-error-or-blue-screen-error-troubleshooting) detected on managed devices. Scores are determined at both the service and tenant level. Details on modules associated with stop error codes at the tenant level are provided to better understand how devices are affected.
-
-> [!NOTE]
-> **The Reliability report applies to quality updates only**. The Reliability report doesn't currently support Windows feature updates.Scores used in this report are calculated based on devices running both Windows 10 and Windows 11 versions.
-
-With this feature, IT admins can access the following information:
-
-| Information type | Description |
-| ----- | ----- |
-| Your score | **Your score** is a calculated tenant reliability score based on stop error codes detected on managed devices that updated successfully during the current update cycle. **Your score** is the latest single-day score in the current Windows quality update cycle. The monthly score values can be viewed under the **Trending** tab. |
-| Baseline | Use the **Baseline** to compare your score with past quality update cycles. You can choose the desired historical record from the **Comparison baseline** dropdown menu at the top of the page. **Baseline** is a single-day score calculated the same number of days from the start of patching as your score. |
-| Service-level | Use the **Service-level** to compare **your score** with a score computed across tenants in the Azure Data Scale Unit covering your geographic region. **Service-level** is a single-day score calculated the same number of days from the start of patching as **your score**. |
-| Score details | **Score details** provides information about specific modules associated with stop error code occurrence, occurrence rate, and affected devices. View single-day or multi-day results by selecting from the **Duration** menu. Data can be exported for offline reference. |
-| Trending | **Trending** provides a graphical visualization of reliability scores at both tenant and service level on a customizable timeline of 1 - 12 months. Monthly scores represent the aggregated value for a complete update cycle (second Tuesday of the month). |
-| Insights | **Insights** identifies noteworthy trends that might be useful in implementing reliability improvement opportunities. |
-| Affected devices | **Affected devices** are the number of unique devices associated with stop error code events. |
-
-## Report availability
-
-The Reliability report relies on device policies being configured properly. It's important to confirm that the minimum requirements are met to access the full Reliability report.
-
-| Data collection policies set | Devices registered in Autopatch | Devices updated | Report availability |
-| ----- | ------ | ----- | ----- |
-| No | - | - | No report available.In this state, a ribbon appears on the landing page alerting the user that the diagnostic data needed to generate a report appears to be turned off. The report is available 24 and 48 hours after the following conditions are met:
- [Diagnostic data device configuration policies enabled](../references/windows-autopatch-changes-to-tenant.md#device-configuration-policies)
- At least 100 devices registered in Autopatch
- At least 100 of these registered devices completed a quality update in the current update cycle (second Tuesday of the month)
|
-| Yes | 0 | - | The report includes only the historical comparison baseline and service-level score. The tenant and module impact scores are unavailable until 100 devices are updated. |
-| Yes | 0 < n < 100 | 0 < n < 100 | The report includes module failure details, historical comparison baseline, and service-level score. The tenant score is unavailable until 100 devices are updated. |
-| Yes | n >= 100 | 0 < n < 100 | The report includes module failure details, historical comparison baseline score, and service-level score. The tenant and module impact scores are unavailable until 100 devices are updated. |
-| Yes | n >= 100 | n >= 100 | Full reporting available |
-
-## View the Reliability report
-
-**To view the Reliability report:**
-
-1. Go to the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431).
-2. Navigate to **Reports** > **Windows Autopatch** > **Windows quality updates**.
-3. Select the **Reports** tab.
-4. Select **Reliability report**.
-
-> [!NOTE]
-> To use the Reliability report capability, ensure that at least 100 devices are registered in the Windows Autopatch service and capable of successfully completing a quality update. The report relies on device stop error code data being available to Microsoft (transmission of this data may take up to 24 hours).A score is generated when:
- 100 or more devices have completed updating to the latest quality update
- Windows Autopatch receives the stop error code data related to that update cycle
Windows Autopatch data collection must be enabled according to the [configuration policies](../references/windows-autopatch-changes-to-tenant.md#device-configuration-policies) set during tenant onboarding. For more information about data collection, see [Privacy](../overview/windows-autopatch-privacy.md)
-
-## Report information
-
-The following information is available as default columns in the Reliability report:
-
-> [!NOTE]
-> The report is refreshed no more than once every 24 hours with data received from your Windows Autopatch managed devices. Manual data refresh is not supported. The last refreshed date and time can be found at the top of the page. For more information about how often Windows Autopatch receives data from your managed devices, see [Data latency](../operate/windows-autopatch-groups-windows-quality-and-feature-update-reports-overview.md#about-data-latency).
-
-### Score details
-
-| Column | Description |
-| ----- | ----- |
-| Module name | Name of module associated with stop error code detection. |
-| Version | Version of module associated with stop error code detection. |
-| Unique devices | Number of unique devices seeing a stop error code occurrence associated with a specific module name and version. This information is hyperlinked to the **Devices affected** flyout. |
-| Total events | Total number of stop error codes detected associated with a specific module name and version. |
-| Module score impact | **Your score** associated with specific module name and version. |
-| Timeline | This information is hyperlinked to **Module details** flyout. |
-
-### Export file
-
-| Column | Description |
-| ----- | ----- |
-| DeviceName | Device name |
-| MicrosoftEntraDeviceId | Microsoft Entra device ID |
-| Model | Device model |
-| Manufacturer | Device manufacturer |
-| AutopatchGroup | Autopatch group assignment for the affected device |
-| LatestOccurrence | Time of the most recent reported failure |
-| WindowsVersion | Windows version (Windows 10 or Windows 11) |
-| OSVersion | OS version |
-| ModuleName | Name of the module associated with stop error code detection |
-| Version | Version of the module associated with stop error code detection |
-| BugCheckCode | Bug check code associated with stop error code |
-| TenantId | Your Microsoft Entra tenant ID |
-
-### Devices affected
-
-| Column | Description |
-| ----- | ----- |
-| Device name | Device name |
-| Microsoft Entra device ID | Microsoft Entra device ID |
-| Model | Device model |
-| Manufacturer | Device manufacturer |
-| Autopatch group | Autopatch group assignment for the affected device |
-| Latest occurrence | Time of the most recent reported failure |
-
-### Module details
-
-| Display selection | Description |
-| ----- | ----- |
-| Unique devices | Number of unique devices affected by module failure and the associated version |
-| Total events | Number of occurrences by module failure and the associated version |
-| Module impact | Score impact by module and version representing the relative importance of module failure. Higher positive values describe module failures that have a greater impact on the tenant and should be addressed with higher priority. Negative values describe module failures that have a lower-than-average impact on the tenant and thus can be treated with lower priority. Values around `0` describe module failures with average impact on the tenant. |
-
-## Known limitations
-
-The Reliability report supports tenant and service-level score data going back to September 2023. Data before that date isn't supported. A full 12 months of score data are available to select from the menu dropdowns in September 2024.
diff --git a/windows/deployment/windows-autopatch/monitor/windows-autopatch-windows-quality-and-feature-update-reports-overview.md b/windows/deployment/windows-autopatch/monitor/windows-autopatch-windows-quality-and-feature-update-reports-overview.md
index 714969f76e..d897d0e216 100644
--- a/windows/deployment/windows-autopatch/monitor/windows-autopatch-windows-quality-and-feature-update-reports-overview.md
+++ b/windows/deployment/windows-autopatch/monitor/windows-autopatch-windows-quality-and-feature-update-reports-overview.md
@@ -1,7 +1,7 @@
---
title: Windows quality and feature update reports overview
description: This article details the types of reports available and info about update device eligibility, device update health, device update trends in Windows Autopatch.
-ms.date: 11/20/2024
+ms.date: 02/27/2025
ms.service: windows-client
ms.subservice: autopatch
ms.topic: overview
@@ -35,7 +35,6 @@ The Windows quality report types are organized into the following focus areas:
| ----- | ----- |
| Organizational | The [Summary dashboard](../operate/windows-autopatch-groups-windows-quality-update-summary-dashboard.md) provide the current update status summary for all devices.The [Quality update status report](../operate/windows-autopatch-groups-windows-quality-update-status-report.md) provides the current update status of all devices at the device level. |
| Device trends | The [Quality update trending report](../operate/windows-autopatch-groups-windows-quality-update-trending-report.md) provides the update status trend of all devices over the last 90 days. |
-| [Reliability report](../operate/windows-autopatch-reliability-report.md) | The Reliability report provides a reliability score for each Windows quality update cycle based on stop error codes detected on managed devices. |
## Windows feature update reports
diff --git a/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md b/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md
index c4cac7212b..285c7754e4 100644
--- a/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md
+++ b/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md
@@ -70,7 +70,6 @@ Minor corrections such as typos, style, or formatting issues aren't listed.
| ----- | ----- |
| [MC678305](https://admin.microsoft.com/adminportal/home#/MessageCenter) | September 2023 Windows Autopatch baseline configuration update |
| [MC678303](https://admin.microsoft.com/adminportal/home#/MessageCenter) | Windows Autopatch availability within Microsoft Intune Admin Center |
-| [MC674422](https://admin.microsoft.com/adminportal/home#/MessageCenter) | Public Preview: Windows Autopatch Reliability Report |
| [MC672750](https://admin.microsoft.com/adminportal/home#/MessageCenter) | August 2023 Windows Autopatch baseline configuration update |
## August 2023
diff --git a/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2024.md b/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2024.md
index 815d13a816..f9d30352a5 100644
--- a/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2024.md
+++ b/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2024.md
@@ -1,7 +1,7 @@
---
title: What's new 2024
description: This article lists the 2024 feature releases and any corresponding Message center post numbers.
-ms.date: 11/19/2024
+ms.date: 02/27/2025
ms.service: windows-client
ms.subservice: autopatch
ms.topic: whats-new
@@ -37,14 +37,6 @@ Minor corrections such as typos, style, or formatting issues aren't listed.
| ----- | ----- |
| All articles | Windows Update for Business deployment service unified under Windows Autopatch. Unification is going through a gradual rollout over the next several weeks. If your experience looks different from the documentation, you didn't receive the unified experience yet. Review [Prerequisites](../prepare/windows-autopatch-prerequisites.md) and [Features and capabilities](../overview/windows-autopatch-overview.md#features-and-capabilities) to understand licensing and feature entitlement.|
-## March 2024
-
-### March feature releases or updates
-
-| Article | Description |
-| ----- | ----- |
-| [Reliability report](../operate/windows-autopatch-reliability-report.md) | Added the [Reliability report](../operate/windows-autopatch-reliability-report.md) feature |
-
## February 2024
## February service releases
From 2db8b705031e2cdd380e508e2412bdcbcfd1a752 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Wed, 26 Feb 2025 15:58:21 -0800
Subject: [PATCH 06/37] rm-des
---
windows/whats-new/removed-features.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/whats-new/removed-features.md b/windows/whats-new/removed-features.md
index 00d74cdc32..0c7e01a1bf 100644
--- a/windows/whats-new/removed-features.md
+++ b/windows/whats-new/removed-features.md
@@ -38,7 +38,7 @@ The following features and functionalities have been removed from the installed
|Feature | Details and mitigation | Support removed |
| ----------- | --------------------- | ------ |
-| Data Encryption Standard (DES) | DES, the symmetric-key block encryption cipher, is considered insecure against modern cryptographic attacks, and replaced by more robust encryption algorithms. DES was disabled starting with Windows 7 and Windows Server 2008 R2. It's removed and is removed from Windows 11, version 24H2 and later, and [Windows Server 2025](/windows-server/get-started/removed-deprecated-features-windows-server-2025) and later.| February 2025 |
+| Data Encryption Standard (DES) | DES, the symmetric-key block encryption cipher, is considered nonsecure against modern cryptographic attacks, and replaced by more robust encryption algorithms. DES was disabled by default starting with Windows 7 and Windows Server 2008 R2. It's removed from Windows 11, version 24H2 and later, and [Windows Server 2025](/windows-server/get-started/removed-deprecated-features-windows-server-2025) and later.| September 2025 |
| NTLMv1 | NTLMv1 is removed starting in Windows 11, version 24H2 and Windows Server 2025. | 24H2 |
| Windows Information Protection | Windows Information Protection is removed starting in Windows 11, version 24H2. | 24H2 |
| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is deprecated for Microsoft Edge for Business and is no longer available starting with Windows 11, version 24H2. | 24H2 |
From 394dd27dcbf9719b6aebb5d2174bbe14a8630e03 Mon Sep 17 00:00:00 2001
From: Frank Rojas <45807133+frankroj@users.noreply.github.com>
Date: Thu, 27 Feb 2025 13:11:24 -0500
Subject: [PATCH 07/37] Update date
Update date based on review
---
windows/deployment/deploy-m365.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/deploy-m365.md b/windows/deployment/deploy-m365.md
index 83453c4766..ea37b8ed81 100644
--- a/windows/deployment/deploy-m365.md
+++ b/windows/deployment/deploy-m365.md
@@ -7,7 +7,7 @@ ms.service: windows-client
ms.localizationpriority: medium
author: frankroj
ms.topic: install-set-up-deploy
-ms.date: 02/13/2024
+ms.date: 02/27/2025
ms.subservice: itpro-deploy
appliesto:
- ✅ Windows 11
From bfa23f0516dbf74dbbd7944f357c9181db6b0edf Mon Sep 17 00:00:00 2001
From: Frank Rojas <45807133+frankroj@users.noreply.github.com>
Date: Thu, 27 Feb 2025 13:15:32 -0500
Subject: [PATCH 08/37] Update date
Update date based on review
---
windows/deployment/windows-missing-fonts.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/windows-missing-fonts.md b/windows/deployment/windows-missing-fonts.md
index f86ac6ce2f..11091fa358 100644
--- a/windows/deployment/windows-missing-fonts.md
+++ b/windows/deployment/windows-missing-fonts.md
@@ -7,7 +7,7 @@ author: frankroj
ms.author: frankroj
manager: aaroncz
ms.topic: how-to
-ms.date: 03/28/2024
+ms.date: 02/27/2025
ms.subservice: itpro-deploy
zone_pivot_groups: windows-versions-11-10
appliesto:
From 711f40cf6c77336612e76ef25678008587ef563f Mon Sep 17 00:00:00 2001
From: Frank Rojas <45807133+frankroj@users.noreply.github.com>
Date: Thu, 27 Feb 2025 13:22:14 -0500
Subject: [PATCH 09/37] Update date
Update date based on review
---
windows/deployment/windows-adk-scenarios-for-it-pros.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/windows-adk-scenarios-for-it-pros.md b/windows/deployment/windows-adk-scenarios-for-it-pros.md
index 2c3b28dac0..b6a137b5f0 100644
--- a/windows/deployment/windows-adk-scenarios-for-it-pros.md
+++ b/windows/deployment/windows-adk-scenarios-for-it-pros.md
@@ -6,7 +6,7 @@ ms.author: frankroj
manager: aaroncz
ms.service: windows-client
ms.localizationpriority: medium
-ms.date: 02/13/2024
+ms.date: 02/27/2025
ms.topic: article
ms.subservice: itpro-deploy
appliesto:
From 8896b4b0eae2ff9e21857b5b2dc6a71f677af6e5 Mon Sep 17 00:00:00 2001
From: Frank Rojas <45807133+frankroj@users.noreply.github.com>
Date: Thu, 27 Feb 2025 13:26:14 -0500
Subject: [PATCH 10/37] Update date
Update date based on review
---
windows/deployment/windows-deployment-scenarios.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/windows-deployment-scenarios.md b/windows/deployment/windows-deployment-scenarios.md
index ca61bef97b..faec964678 100644
--- a/windows/deployment/windows-deployment-scenarios.md
+++ b/windows/deployment/windows-deployment-scenarios.md
@@ -7,7 +7,7 @@ author: frankroj
ms.service: windows-client
ms.localizationpriority: medium
ms.topic: install-set-up-deploy
-ms.date: 02/13/2024
+ms.date: 02/27/2025
ms.subservice: itpro-deploy
appliesto:
- ✅ Windows 11
From 18d4fa6efac498ffb2e070e82d4d1958e4c6b138 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 27 Feb 2025 11:11:19 -0800
Subject: [PATCH 11/37] Feb 2025 release notes, update to host os prereqs
---
.../deployment/do/mcc-ent-prerequisites.md | 4 +-
.../deployment/do/mcc-ent-release-notes.md | 45 ++++++++++++++++---
2 files changed, 42 insertions(+), 7 deletions(-)
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 7c95fc63fb..c9e99fa963 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -43,7 +43,7 @@ This article details the requirements and recommended specifications for using M
### Additional requirements for Windows host machines
-- The Windows host machine must be using Windows 11 or Windows Server 2022 with the latest cumulative update applied.
+- The Windows host machine must be using Windows 11 or Windows Server 2022 (or later) with the latest cumulative update applied.
- Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
- Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](/azure/virtual-machines/trusted-launch-portal).
@@ -52,7 +52,7 @@ This article details the requirements and recommended specifications for using M
### Additional requirements for Linux host machines
- The Linux host machine must be using one of the following operating systems:
- - Ubuntu 22.04, 24.04
+ - Ubuntu 24.04
- Red Hat Enterprise Linux (RHEL) 8.* or 9.*
- If using RHEL, the default container engine (Podman) must be replaced with [Moby](https://github.com/moby/moby#readme)
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index 774d9cd43f..adc2e89934 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -18,11 +18,42 @@ ms.date: 10/30/2024
This article contains details about the latest releases of Connected Cache. Since Connected Cache is a preview service, some releases may contain breaking changes.
-## Install script v2.0.0.2
+## February 2025 Release
+
+Released on **2/27/2025**
+
+This release contains improvements that can only be applied by redeploying your cache nodes using the updated installation script.
+
+### New Connected Cache container version
+
+- v1.2.1.2083_E
+
+### New Linux-hosted installation script version
+
+- v1.08
+
+### New Windows-hosted installation script version
+
+- v2.0.0.3
+
+### Improvements to Windows-hosted cache nodes
+
+- **Connected Cache WSL distribution now uses Ubuntu 24.04**: The Windows Subsystem for Linux (WSL) distribution used by Connected Cache has been updated to Ubuntu 24.04 (was 22.04). This change ensures that the WSL distribution is up-to-date with the latest security patches and features.
+- **Connected Cache container now uses Ubuntu 24.04 Docker environment**: The Connected Cache container now runs using an Ubuntu 24.04 Docker environment (was 22.04). This change ensures that the container environment is up-to-date with the latest security patches and features.
+- **TLS-inspecting proxies no longer cause IoT Edge error during Connected Cache installation**: Fixed a bug that was causing proxy certificate path string to be improperly handled, leading to IoT Edge errors during Connected Cache installation.
+- **Security improvements**: Kept intentionally vague to protect previous versions of Connected Cache.
+
+### Improvements to Linux-hosted cache nodes
+
+- **Connected Cache container now uses Ubuntu 24.04 Docker environment**: The Connected Cache container now runs using an Ubuntu 24.04 Docker environment (was 22.04). This change ensures that the container environment is up-to-date with the latest security patches and features.
+- **TLS-inspecting proxies no longer cause IoT Edge error during Connected Cache installation**: Fixed a bug that was causing proxy certificate path string to be improperly handled, leading to IoT Edge errors during Connected Cache installation.
+- **Security improvements**: Kept intentionally vague to protect previous versions of Connected Cache.
+
+## Windows-hosted install script v2.0.0.2
Released on **2/7/2025**
-These changes only affect the installation scripts for Connected Cache. To take advantage of these changes, you'll need to redeploy your existing cache nodes using the updated installation script.
+This release only contains changes to the Windows-hosted installation scripts for Connected Cache. To take advantage of these changes, you need to redeploy your existing cache nodes using the updated installation script.
### Improvements
@@ -31,11 +62,15 @@ These changes only affect the installation scripts for Connected Cache. To take
- **Changes install error codes from decimal to hex code**: Install error codes for Windows-hosted cache nodes are now displayed in hex code format, improving error code readability.
- **Uses configured proxy to perform install**: If a proxy was configured for the Windows-hosted cache node in Azure portal, the cache node uses the specified proxy during installation.
-## Release v1.2.1.2076_E (public preview launch)
+## Public Preview Release
-The public preview released on **10/30/2024**
+Released on **10/30/2024**
-For customers that installed earlier versions of Connected Cache, this release contains breaking changes that affect both Linux and Windows host machines. See the [early preview documentation page](mcc-ent-early-preview.md) for more details.
+For customers that installed earlier versions of Connected Cache, this release contains breaking changes that affect both Linux-hosted and Windows-hosted cache nodes. See the [early preview documentation page](mcc-ent-early-preview.md) for more details.
+
+### New Connected Cache container version
+
+- v1.2.1.2076_E
### Feature updates
From df70f608ac0690c1e50c2e1bc34d4d43b603c976 Mon Sep 17 00:00:00 2001
From: tiaraquan
Date: Thu, 27 Feb 2025 13:39:59 -0800
Subject: [PATCH 12/37] Reporting prereqs
---
...s-quality-and-feature-update-reports-overview.md | 13 +++++++++++--
...-autopatch-changes-made-at-feature-activation.md | 10 +---------
2 files changed, 12 insertions(+), 11 deletions(-)
diff --git a/windows/deployment/windows-autopatch/monitor/windows-autopatch-windows-quality-and-feature-update-reports-overview.md b/windows/deployment/windows-autopatch/monitor/windows-autopatch-windows-quality-and-feature-update-reports-overview.md
index d897d0e216..c678156938 100644
--- a/windows/deployment/windows-autopatch/monitor/windows-autopatch-windows-quality-and-feature-update-reports-overview.md
+++ b/windows/deployment/windows-autopatch/monitor/windows-autopatch-windows-quality-and-feature-update-reports-overview.md
@@ -1,7 +1,7 @@
---
title: Windows quality and feature update reports overview
description: This article details the types of reports available and info about update device eligibility, device update health, device update trends in Windows Autopatch.
-ms.date: 02/27/2025
+ms.date: 03/03/2025
ms.service: windows-client
ms.subservice: autopatch
ms.topic: overview
@@ -19,6 +19,15 @@ ms.collection:
[!INCLUDE [windows-autopatch-enterprise-e3-f3-licenses](../includes/windows-autopatch-enterprise-e3-f3-licenses.md)]
+## Prerequisites
+
+Windows Autopatch requires, and uses Windows diagnostic data to display device update statuses in Autopatch reports.
+
+- Service state and substate data are included for all devices configured for Windows quality and feature updates. No data collection configuration is required.
+- Client and substate data are collected from devices only if Windows data collection data is properly configured.
+
+This data collection configuration method using Windows diagnostic data in Intune is shared across Autopatch reports. To support Autopatch reporting, you must configure the [Enable Windows diagnostic data collection settings](/windows/privacy/configure-windows-diagnostic-data-in-your-organization#diagnostic-data-settings) from devices at the **Required** or higher level.
+
## Windows quality update reports
The Windows quality reports provide you with information about:
@@ -86,7 +95,7 @@ Up to date devices are devices that meet all of the following prerequisites:
- Applied the current monthly cumulative updates
> [!NOTE]
-> Device that are [Up to Date](#up-to-date-devices) will remain with the **In Progress** status until either the current monthly cumulative update is applied, or an [alert](../operate/windows-autopatch-device-alerts.md) is received. If the device receives an alert, the device's status will change to [Not up to Date](#not-up-to-date-devices).
+> Devices that are [Up to Date](#up-to-date-devices) remain with the **In Progress** status until either the current monthly cumulative update is applied, or an [alert](../operate/windows-autopatch-device-alerts.md) is received. If the device receives an alert, the device's status changes to [Not up to Date](#not-up-to-date-devices).
#### Up to Date sub statuses
diff --git a/windows/deployment/windows-autopatch/references/windows-autopatch-changes-made-at-feature-activation.md b/windows/deployment/windows-autopatch/references/windows-autopatch-changes-made-at-feature-activation.md
index a39b3238a9..132fd4dedf 100644
--- a/windows/deployment/windows-autopatch/references/windows-autopatch-changes-made-at-feature-activation.md
+++ b/windows/deployment/windows-autopatch/references/windows-autopatch-changes-made-at-feature-activation.md
@@ -1,7 +1,7 @@
---
title: Changes made at feature activation
description: This reference article details the changes made to your tenant when you activate Windows Autopatch
-ms.date: 09/16/2024
+ms.date: 03/03/2025
ms.service: windows-client
ms.subservice: autopatch
ms.topic: concept-article
@@ -49,14 +49,6 @@ The following groups target Windows Autopatch configurations to devices and mana
| Modern Workplace Devices-Windows Autopatch-Fast | Fast deployment ring for quick rollout and adoption |
| Modern Workplace Devices-WindowsAutopatch-Broad | Final deployment ring for broad rollout into the organization |
-## Device configuration policies
-
-- Windows Autopatch - Data Collection
-
-| Policy name | Policy description | Properties | Value |
-| ----- | ----- | ----- | ----- |
-| Windows Autopatch - Data Collection | Windows Autopatch and Telemetry settings processes diagnostic data from the Windows device.Assigned to:
- Modern Workplace Devices-Windows Autopatch-Test
- Modern Workplace Devices-Windows Autopatch-First
- Modern Workplace Devices-Windows Autopatch-Fast
- Modern Workplace Devices-Windows Autopatch-Broad
|- [Allow Telemetry](/windows/client-management/mdm/policy-csp-system#system-allowtelemetry)
- [Limit Enhanced Diagnostic Data Windows Analytics](/windows/client-management/mdm/policy-csp-system#system-limitenhanceddiagnosticdatawindowsanalytics)
- [Limit Dump Collection](/windows/client-management/mdm/policy-csp-system#system-limitdumpcollection)
- [Limit Diagnostic Log Collection](/windows/client-management/mdm/policy-csp-system#system-limitdiagnosticlogcollection)
|- Full
- Enabled
- Enabled
- Enabled
|
-
## Windows feature update policies
- Windows Autopatch - Global DSS Policy
From 10b657110baa3b3f6694f6f198d9cbb1708be432 Mon Sep 17 00:00:00 2001
From: tiaraquan
Date: Thu, 27 Feb 2025 13:46:46 -0800
Subject: [PATCH 13/37] Fixed Acrolinx score
---
.../windows-autopatch-changes-made-at-feature-activation.md | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/windows/deployment/windows-autopatch/references/windows-autopatch-changes-made-at-feature-activation.md b/windows/deployment/windows-autopatch/references/windows-autopatch-changes-made-at-feature-activation.md
index 132fd4dedf..432b2cc9ba 100644
--- a/windows/deployment/windows-autopatch/references/windows-autopatch-changes-made-at-feature-activation.md
+++ b/windows/deployment/windows-autopatch/references/windows-autopatch-changes-made-at-feature-activation.md
@@ -60,7 +60,7 @@ The following groups target Windows Autopatch configurations to devices and mana
## Microsoft Office update policies
> [!IMPORTANT]
-> By default, these policies are not deployed. You can opt-in to deploy these policies when you [activate Windows Autopatch features](../prepare/windows-autopatch-feature-activation.md).To update Microsoft Office, you must [create at least one Autopatch group](../manage/windows-autopatch-manage-autopatch-groups.md) and the toggle the must be set to [**Allow**](../manage/windows-autopatch-microsoft-365-apps-enterprise.md#allow-or-block-microsoft-365-app-updates).
+> By default, these policies aren't deployed. You can opt in to deploy these policies when you [activate Windows Autopatch features](../prepare/windows-autopatch-feature-activation.md).To update Microsoft Office, you must [create at least one Autopatch group](../manage/windows-autopatch-manage-autopatch-groups.md) and the toggle must be set to [**Allow**](../manage/windows-autopatch-microsoft-365-apps-enterprise.md#allow-or-block-microsoft-365-app-updates).
- Windows Autopatch - Office Configuration
- Windows Autopatch - Office Update Configuration [Test]
@@ -79,7 +79,7 @@ The following groups target Windows Autopatch configurations to devices and mana
## Microsoft Edge update policies
> [!IMPORTANT]
-> By default, these policies are not deployed. You can opt-in to deploy these policies when you [activate Windows Autopatch features](../prepare/windows-autopatch-feature-activation.md).To update Microsoft Edge, you must [create at least one Autopatch group](../manage/windows-autopatch-manage-autopatch-groups.md) and the toggle the must be set to [**Allow**](../manage/windows-autopatch-edge.md#allow-or-block-microsoft-edge-updates).
+> By default, these policies aren't deployed. You can opt in to deploy these policies when you [activate Windows Autopatch features](../prepare/windows-autopatch-feature-activation.md).To update Microsoft Edge, you must [create at least one Autopatch group](../manage/windows-autopatch-manage-autopatch-groups.md) and the toggle must be set to [**Allow**](../manage/windows-autopatch-edge.md#allow-or-block-microsoft-edge-updates).
- Windows Autopatch - Edge Update Channel Stable
- Windows Autopatch - Edge Update Channel Beta
@@ -92,7 +92,7 @@ The following groups target Windows Autopatch configurations to devices and mana
## Driver updates for Windows 10 and later
> [!IMPORTANT]
-> By default, these policies are not deployed. You can opt-in to deploy these policies when you [activate Windows Autopatch features](../prepare/windows-autopatch-feature-activation.md).To update drivers and firmware, you must [create at least one Autopatch group](../manage/windows-autopatch-manage-autopatch-groups.md) and the toggle the must be set to [**Allow**](../manage/windows-autopatch-manage-autopatch-groups.md#create-an-autopatch-group).
+> By default, these policies aren't deployed. You can opt in to deploy these policies when you [activate Windows Autopatch features](../prepare/windows-autopatch-feature-activation.md).To update drivers and firmware, you must [create at least one Autopatch group](../manage/windows-autopatch-manage-autopatch-groups.md) and the toggle must be set to [**Allow**](../manage/windows-autopatch-manage-autopatch-groups.md#create-an-autopatch-group).
- Windows Autopatch - Driver Update Policy [Test]
- Windows Autopatch - Driver Update Policy [First]
From 72b342bde76b4996522aa8f4f81b1786251d7592 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Thu, 27 Feb 2025 13:59:24 -0800
Subject: [PATCH 14/37] metadata
---
windows/deployment/do/delivery-optimization-configure.md | 2 +-
windows/deployment/do/waas-delivery-optimization-faq.yml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/windows/deployment/do/delivery-optimization-configure.md b/windows/deployment/do/delivery-optimization-configure.md
index 8e12148787..ac3bf9f54d 100644
--- a/windows/deployment/do/delivery-optimization-configure.md
+++ b/windows/deployment/do/delivery-optimization-configure.md
@@ -16,7 +16,7 @@ appliesto:
- ✅ Windows 11
- ✅ Windows 10
- ✅ Delivery Optimization
-ms.date: 02/21/2025
+ms.date: 02/27/2025
---
# Configure Delivery Optimization (DO) for Windows
diff --git a/windows/deployment/do/waas-delivery-optimization-faq.yml b/windows/deployment/do/waas-delivery-optimization-faq.yml
index b86096bc45..8b0fb66a41 100644
--- a/windows/deployment/do/waas-delivery-optimization-faq.yml
+++ b/windows/deployment/do/waas-delivery-optimization-faq.yml
@@ -17,7 +17,7 @@ metadata:
- ✅ Windows 10
- ✅ Windows Server 2019, and later
- ✅ Delivery Optimization
- ms.date: 02/21/2025
+ ms.date: 02/27/2025
title: Frequently Asked Questions about Delivery Optimization
summary: |
This article answers frequently asked questions about Delivery Optimization.
From b2b688c9dbb2a24a0121294694db4f3a05b66a92 Mon Sep 17 00:00:00 2001
From: Violet Hansen
Date: Fri, 28 Feb 2025 09:07:35 +0200
Subject: [PATCH 15/37] Added note about Native AOT to the known issues and
tips document
Added note about Native AOT to the known issues and tips document.
---
.../app-control-for-business/operations/known-issues.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md b/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md
index 4181691e76..70b974076b 100644
--- a/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md
@@ -62,7 +62,7 @@ Although App Control audit mode is designed to avoid impact to apps, some featur
### .NET native images may generate false positive block events
-In some cases, the code integrity logs where App Control for Business errors and warnings are written include error events for native images generated for .NET assemblies. Typically, native image blocks are functionally benign as a blocked native image falls back to its corresponding assembly and .NET regenerates the native image at its next scheduled maintenance window.
+In some cases, the code integrity logs where App Control for Business errors and warnings are written include error events for native images generated for .NET assemblies. Typically, native image blocks are functionally benign as a blocked native image falls back to its corresponding assembly and .NET regenerates the native image at its next scheduled maintenance window. To prevent that, consider compiling your .NET application ahead of time using the [Native AOT](https://learn.microsoft.com/dotnet/core/deploying/native-aot) feature.
### Signatures using elliptical curve cryptography (ECC) aren't supported
From d06574e60b678667fbec5be76d7564515dff078c Mon Sep 17 00:00:00 2001
From: "Yong Rhee [MSFT]" <56358587+YongRhee-MSFT@users.noreply.github.com>
Date: Fri, 28 Feb 2025 10:53:26 -0800
Subject: [PATCH 16/37] Learn Editor: Update defender-csp.md
---
windows/client-management/mdm/defender-csp.md | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md
index b3beaf7ff2..f03a64a586 100644
--- a/windows/client-management/mdm/defender-csp.md
+++ b/windows/client-management/mdm/defender-csp.md
@@ -2926,7 +2926,8 @@ This policy setting controls whether or not exclusions are visible to local admi
> [!NOTE]
-> Applying this setting won't remove exclusions from the device registry, it will only prevent them from being applied/used. This is reflected in Get-MpPreference.
+> Applying this setting won't remove exclusions from the device registry. They will be applied and enforced, but they will not be visible via the Defender manageability tools like Get-MpPreference nor by the registry editor to the Defender owned registry hive.
+
From 1873964ffaffa6e2985306cdae0054a0b8fce50e Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 28 Feb 2025 12:01:03 -0800
Subject: [PATCH 18/37] update to release date
---
windows/deployment/do/mcc-ent-release-notes.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index adc2e89934..ad4ce51e05 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -20,7 +20,7 @@ This article contains details about the latest releases of Connected Cache. Sinc
## February 2025 Release
-Released on **2/27/2025**
+Released on **2/28/2025**
This release contains improvements that can only be applied by redeploying your cache nodes using the updated installation script.
From db72a89ac72ead657578d09ebdf773f1d98092e6 Mon Sep 17 00:00:00 2001
From: Kevin Sheehan <116211220+kbsheehan@users.noreply.github.com>
Date: Fri, 28 Feb 2025 16:34:38 -0500
Subject: [PATCH 19/37] Update configuration-service-provider-ddf.md
Added new DDFs
---
.../mdm/configuration-service-provider-ddf.md | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/configuration-service-provider-ddf.md b/windows/client-management/mdm/configuration-service-provider-ddf.md
index bcb544c636..963ff93ebc 100644
--- a/windows/client-management/mdm/configuration-service-provider-ddf.md
+++ b/windows/client-management/mdm/configuration-service-provider-ddf.md
@@ -13,7 +13,7 @@ This article lists the OMA DM device description framework (DDF) files for vario
As of December 2022, DDF XML schema was updated to include additional information such as OS build applicability. DDF v2 XML files for Windows 10 and Windows 11 are combined, and provided in a single download:
-- [DDF v2 Files, September 2024](https://download.microsoft.com/download/a/a/a/aaadc008-67d4-4dcd-b864-70c479baf7d6/DDFv2September24.zip)
+- [DDF v2 Files, February 2025](https://download.microsoft.com/download/a8922fbe-20a9-431d-b24f-9d5344dda25e/DDFv2Feb25.zip)
## DDF v2 schema
@@ -574,6 +574,7 @@ DDF v2 XML schema definition is listed below along with the schema definition fo
## Older DDF files
You can download the older DDF files for various CSPs from the links below:
+- [Download all the DDF files for Windows 10 and 11 September 2024](https://download.microsoft.com/download/a/a/a/aaadc008-67d4-4dcd-b864-70c479baf7d6/DDFv2September24.zip)
- [Download all the DDF files for Windows 10 and 11 May 2024](https://download.microsoft.com/download/f/6/1/f61445f7-1d38-45f7-bc8c-609b86e4aabc/DDFv2May24.zip)
- [Download all the DDF files for Windows 10 and 11 September 2023](https://download.microsoft.com/download/0/e/c/0ec027e5-8971-49a2-9230-ec9352bc3ead/DDFv2September2023.zip)
- [Download all the DDF files for Windows 10 and 11 December 2022](https://download.microsoft.com/download/7/4/c/74c6daca-983e-4f16-964a-eef65b553a37/DDFv2December2022.zip)
From 8f84a753a7011b27954de041ef40941041cebeac Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Fri, 28 Feb 2025 14:06:14 -0800
Subject: [PATCH 20/37] edit ubuntu ver, update metadata
---
windows/deployment/do/mcc-ent-edu-overview.md | 4 ++--
windows/deployment/do/mcc-ent-prerequisites.md | 2 +-
windows/deployment/do/mcc-ent-release-notes.md | 2 +-
windows/deployment/do/mcc-ent-troubleshooting.md | 4 ++--
4 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index 4aefa039d1..c730c9e094 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -13,7 +13,7 @@ appliesto:
- ✅ Windows 11
- ✅ Windows 10
- ✅ Microsoft Connected Cache for Enterprise and Education
-ms.date: 10/30/2024
+ms.date: 02/28/2025
---
# Microsoft Connected Cache for Enterprise and Education Overview
@@ -57,7 +57,7 @@ Customers may have office spaces, data centers, or Azure deployments that meet s
- Have Azure VMs and/or Azure Virtual Desktop deployed
- Have limited internet bandwidth (T1 or T3 lines)
-To support the large enterprise scenario, customers can deploy a Connected Cache node to a server running Windows Server 2022 or Ubuntu 22.04.
+To support the large enterprise scenario, customers can deploy a Connected Cache node to a server running Windows Server 2022 (or later) or Ubuntu 24.04.
See [Connected Cache node host machine requirements](mcc-ent-prerequisites.md) for recommended host machine specifications in each configuration.
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index c9e99fa963..d40301587e 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -10,7 +10,7 @@ manager: naengler
appliesto:
- ✅ Windows 11
- ✅ Microsoft Connected Cache for Enterprise and Education
-ms.date: 10/30/2024
+ms.date: 02/28/2025
---
# Microsoft Connected Cache for Enterprise and Education Requirements
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index ad4ce51e05..c6f31e333e 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -11,7 +11,7 @@ appliesto:
- ✅ Windows 11
- ✅ Supported Linux distributions
- ✅ Microsoft Connected Cache for Enterprise and Education
-ms.date: 10/30/2024
+ms.date: 02/28/2025
---
# Release Notes for Microsoft Connected Cache for Enterprise and Education
diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index fd4a693300..60f3a726f3 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -11,7 +11,7 @@ appliesto:
- ✅ Windows 11
- ✅ Supported Linux distributions
- ✅ Microsoft Connected Cache for Enterprise
-ms.date: 01/15/2025
+ms.date: 02/28/2025
---
@@ -97,7 +97,7 @@ If the Connected Cache installation is failing due to WSL-related issues, try ru
Once the Connected Cache software has been successfully deployed to the Windows host machine, you can check if the cache node is running properly by doing the following on the Windows host machine:
1. Launch a PowerShell process as the account specified as the runtime account during the Connected Cache install
-1. Run `wsl -d Ubuntu-22.04-Mcc-Base` to access the Linux distribution that hosts the Connected Cache container
+1. Run `wsl -d Ubuntu-24.04-Mcc-Base` to access the Linux distribution that hosts the Connected Cache container
1. Run `sudo iotedge list` to show which containers are running within the IoT Edge runtime
If it shows the **edgeAgent** and **edgeHub** containers but doesn't show **MCC**, you can view the status of the IoT Edge security manager using `sudo iotedge system logs -- -f`.
From 0ff344207e78c9575f8ab54eddbd332a53f1b494 Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 28 Feb 2025 15:04:58 -0800
Subject: [PATCH 21/37] Update mcc-ent-release-notes.md
Updated release date
---
windows/deployment/do/mcc-ent-release-notes.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index c6f31e333e..9b566f4e6c 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -20,7 +20,7 @@ This article contains details about the latest releases of Connected Cache. Sinc
## February 2025 Release
-Released on **2/28/2025**
+Released on **3/03/2025**
This release contains improvements that can only be applied by redeploying your cache nodes using the updated installation script.
From 0911f28aca716ccfd3419c987fc9da199c31643b Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Mon, 3 Mar 2025 08:13:50 -0500
Subject: [PATCH 22/37] update syntax for AppLocker rules
---
windows/configuration/assigned-access/configuration-file.md | 2 +-
.../assigned-access/includes/example-restricted-experience.md | 4 ++--
.../includes/quickstart-restricted-experience-intune.md | 4 ++--
.../includes/quickstart-restricted-experience-ps.md | 4 ++--
.../includes/quickstart-restricted-experience-xml.md | 4 ++--
5 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/windows/configuration/assigned-access/configuration-file.md b/windows/configuration/assigned-access/configuration-file.md
index 26cb548ff8..d7a0a30536 100644
--- a/windows/configuration/assigned-access/configuration-file.md
+++ b/windows/configuration/assigned-access/configuration-file.md
@@ -149,7 +149,7 @@ Example:
-
+
diff --git a/windows/configuration/assigned-access/includes/example-restricted-experience.md b/windows/configuration/assigned-access/includes/example-restricted-experience.md
index 7ee28b6761..e8653f5e2f 100644
--- a/windows/configuration/assigned-access/includes/example-restricted-experience.md
+++ b/windows/configuration/assigned-access/includes/example-restricted-experience.md
@@ -23,7 +23,7 @@ ms.topic: include
-
+
@@ -81,7 +81,7 @@ ms.topic: include
-
+
diff --git a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-intune.md b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-intune.md
index 7267d16e53..4238a97dad 100644
--- a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-intune.md
+++ b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-intune.md
@@ -11,7 +11,7 @@ ms.topic: include
POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
Content-Type: application/json
-{ "id": "00-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example_Restricted_User_Experience - Assigned Access - Windows 10", "description": "This is a sample policy created from an article on learn.microsoft.com.", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "@odata.type": "#microsoft.graph.omaSettingString", "displayName": "AssignedAccess_Configuration", "description": null, "omaUri": "./Vendor/MSFT/AssignedAccess/Configuration", "secretReferenceValueId": null, "isEncrypted": true, "value": "\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n ]]>\n \n \n \n \n \n \n \n \n \n \n" } ] }
+{ "id": "00-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example_Restricted_User_Experience - Assigned Access - Windows 10", "description": "This is a sample policy created from an article on learn.microsoft.com.", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "@odata.type": "#microsoft.graph.omaSettingString", "displayName": "AssignedAccess_Configuration", "description": null, "omaUri": "./Vendor/MSFT/AssignedAccess/Configuration", "secretReferenceValueId": null, "isEncrypted": true, "value": "\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n ]]>\n \n \n \n \n \n \n \n \n \n \n" } ] }
```
::: zone-end
@@ -22,7 +22,7 @@ Content-Type: application/json
POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
Content-Type: application/json
-{ "id": "00-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example_Restricted_User_Experience - Assigned Access - Windows 11", "description": "This is a sample policy created from an article on learn.microsoft.com.", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "@odata.type": "#microsoft.graph.omaSettingString", "displayName": "AssignedAccess_Configuration", "description": null, "omaUri": "./Vendor/MSFT/AssignedAccess/Configuration", "secretReferenceValueId": null, "isEncrypted": true, "value": "\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n" } ] }
+{ "id": "00-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example_Restricted_User_Experience - Assigned Access - Windows 11", "description": "This is a sample policy created from an article on learn.microsoft.com.", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "@odata.type": "#microsoft.graph.omaSettingString", "displayName": "AssignedAccess_Configuration", "description": null, "omaUri": "./Vendor/MSFT/AssignedAccess/Configuration", "secretReferenceValueId": null, "isEncrypted": true, "value": "\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n" } ] }
```
::: zone-end
\ No newline at end of file
diff --git a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-ps.md b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-ps.md
index 35a15c446f..94bb914c0b 100644
--- a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-ps.md
+++ b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-ps.md
@@ -22,7 +22,7 @@ $assignedAccessConfiguration = @"
-
+
@@ -88,7 +88,7 @@ $assignedAccessConfiguration = @"
-
+
diff --git a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-xml.md b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-xml.md
index 514c6ab44c..52730d3c75 100644
--- a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-xml.md
+++ b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-xml.md
@@ -21,7 +21,7 @@ ms.topic: include
-
+
@@ -79,7 +79,7 @@ ms.topic: include
-
+
From c6b489f1474a8cb7d678239d152cf98b10247d99 Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Mon, 3 Mar 2025 09:48:25 -0700
Subject: [PATCH 23/37] Update policy-csp-admx-kerberos.md
---
windows/client-management/mdm/policy-csp-admx-kerberos.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/policy-csp-admx-kerberos.md b/windows/client-management/mdm/policy-csp-admx-kerberos.md
index 480281a102..756376d2de 100644
--- a/windows/client-management/mdm/policy-csp-admx-kerberos.md
+++ b/windows/client-management/mdm/policy-csp-admx-kerberos.md
@@ -174,7 +174,7 @@ This policy setting allows you to specify which DNS host names and which DNS suf
> [!NOTE]
-> The list of DNS host names and DNS suffixes has a 2048 character limit. This policy would not apply if you exceed this limit.
+> The list of DNS host names and DNS suffixes has a 2048 character limit. This policy would not apply if you exceed this limit. For more information, see [Kerberos realm to host mapping policy string-length limitations](https://support.microsoft.com/topic/e86856c2-1e02-43fe-9c58-d7c9d6386f01).
From 0615bc7e2aaa0483b8fda8f840d7d1fbd1cbc79f Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Mon, 3 Mar 2025 12:30:24 -0700
Subject: [PATCH 24/37] Update known-issues.md
---
.../app-control-for-business/operations/known-issues.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md b/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md
index 70b974076b..e2c44042bd 100644
--- a/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md
@@ -62,7 +62,7 @@ Although App Control audit mode is designed to avoid impact to apps, some featur
### .NET native images may generate false positive block events
-In some cases, the code integrity logs where App Control for Business errors and warnings are written include error events for native images generated for .NET assemblies. Typically, native image blocks are functionally benign as a blocked native image falls back to its corresponding assembly and .NET regenerates the native image at its next scheduled maintenance window. To prevent that, consider compiling your .NET application ahead of time using the [Native AOT](https://learn.microsoft.com/dotnet/core/deploying/native-aot) feature.
+In some cases, the code integrity logs where App Control for Business errors and warnings are written include error events for native images generated for .NET assemblies. Typically, native image blocks are functionally benign as a blocked native image falls back to its corresponding assembly and .NET regenerates the native image at its next scheduled maintenance window. To prevent that, consider compiling your .NET application ahead of time using the [Native AOT](/dotnet/core/deploying/native-aot) feature.
### Signatures using elliptical curve cryptography (ECC) aren't supported
From 2190af72975d0195717a1b1d5b232a8c8fd3a3f5 Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Mon, 3 Mar 2025 16:41:38 -0500
Subject: [PATCH 25/37] initial writing
---
.../assigned-access/configuration-file.md | 2 +-
.../configuration/assigned-access/index.md | 4 +-
.../configuration/assigned-access/overview.md | 4 +-
.../assigned-access/quickstart-kiosk.md | 2 +-
.../assigned-access/recommendations.md | 2 +-
.../images/settings-page-visibility.png | Bin 0 -> 36044 bytes
.../configuration/settings/page-visibility.md | 72 ++++++++++++++++++
7 files changed, 79 insertions(+), 7 deletions(-)
create mode 100644 windows/configuration/settings/images/settings-page-visibility.png
create mode 100644 windows/configuration/settings/page-visibility.md
diff --git a/windows/configuration/assigned-access/configuration-file.md b/windows/configuration/assigned-access/configuration-file.md
index 26cb548ff8..5cce923ee6 100644
--- a/windows/configuration/assigned-access/configuration-file.md
+++ b/windows/configuration/assigned-access/configuration-file.md
@@ -90,7 +90,7 @@ A configuration file can contain one or more profiles. Each profile is identifie
A profile can be one of two types:
-- `KioskModeApp`: is used to configure a kiosk experience. Users assigned this profile don't access the desktop, but only the Universal Windows Platform (UWP) application or Microsoft Edge running in full-screen above the Lock screen
+- `KioskModeApp`: is used to configure a kiosk experience. Users assigned this profile execute a Universal Windows Platform (UWP) application or Microsoft Edge running in full-screen
- `AllAppList` is used to configure a restricted user experience. Users assigned this profile, access the desktop with the specific apps on the Start menu
> [!IMPORTANT]
diff --git a/windows/configuration/assigned-access/index.md b/windows/configuration/assigned-access/index.md
index 198d5e431c..dc51e3a588 100644
--- a/windows/configuration/assigned-access/index.md
+++ b/windows/configuration/assigned-access/index.md
@@ -29,8 +29,8 @@ This option runs a single application in full screen, and people using the devic
Windows offers two different features to configure a kiosk experience:
-- **Assigned Access**: used to execute a single Universal Windows Platform (UWP) app or Microsoft Edge in full screen above the lock screen. When the kiosk account signs in, the kiosk app launches automatically. If the UWP app is closed, it automatically restarts
-- **Shell Launcher**: used to configure a device to execute a Windows desktop application as the user interface. The application that you specify replaces the default Windows shell (`Explorer.exe`) that usually runs when a user signs in. This type of single-app kiosk doesn't run above the lock screen
+- **Assigned Access**: used to execute a single Universal Windows Platform (UWP) app or Microsoft Edge in full screen. When the kiosk account signs in, the kiosk app launches automatically. If the UWP app is closed, it automatically restarts
+- **Shell Launcher**: used to configure a device to execute a Windows desktop application as the user interface. The specified application replaces the default Windows shell (`Explorer.exe`) that usually runs when a user signs in
:::row:::
:::column span="1":::
diff --git a/windows/configuration/assigned-access/overview.md b/windows/configuration/assigned-access/overview.md
index 9e87bd19a5..e271659707 100644
--- a/windows/configuration/assigned-access/overview.md
+++ b/windows/configuration/assigned-access/overview.md
@@ -9,7 +9,7 @@ ms.topic: overview
Assigned Access is a Windows feature that you can use to configure a device as a kiosk or with a restricted user experience.
-When you configure a **kiosk experience**, a single Universal Windows Platform (UWP) application or Microsoft Edge is executed in full screen, above the lock screen. Users can only use that application. If the kiosk app is closed, it automatically restarts. Practical examples include:
+When you configure a **kiosk experience**, a single Universal Windows Platform (UWP) application or Microsoft Edge is executed in full screen. Users can only use that application and once the kiosk app is closed, it automatically restarts. Practical examples include:
- Public browsing
- Interactive digital signage
@@ -170,7 +170,7 @@ Here are the steps to configure a kiosk using the Settings app:
>[!NOTE]
>If there are any local standard user accounts already, the **Create an account** dialog offers the option to **Choose an existing account**
-1. Choose the application to run when the kiosk account signs in. Only apps that can run above the lock screen are available in the list of apps to choose from. If you select **Microsoft Edge** as the kiosk app, you configure the following options:
+1. Choose the application to run when the kiosk account signs in. If you select **Microsoft Edge** as the kiosk app, you configure the following options:
- Whether Microsoft Edge should display your website full-screen (digital sign) or with some browser controls available (public browser)
- Which URL should be open when the kiosk accounts signs in
diff --git a/windows/configuration/assigned-access/quickstart-kiosk.md b/windows/configuration/assigned-access/quickstart-kiosk.md
index b0583377da..fe38439c87 100644
--- a/windows/configuration/assigned-access/quickstart-kiosk.md
+++ b/windows/configuration/assigned-access/quickstart-kiosk.md
@@ -79,7 +79,7 @@ Here are the steps to configure a kiosk using the Settings app:
>[!NOTE]
>If there are any local standard user accounts already, the **Create an account** dialog offers the option to **Choose an existing account**
-1. Choose the application to run when the kiosk account signs in. Only apps that can run above the lock screen are available in the list of apps to choose from. If you select **Microsoft Edge** as the kiosk app, you configure the following options:
+1. Choose the application to run when the kiosk account signs in. If you select **Microsoft Edge** as the kiosk app, you configure the following options:
- Whether Microsoft Edge should display your website full-screen (digital sign) or with some browser controls available (public browser)
- Which URL should be open when the kiosk accounts signs in
diff --git a/windows/configuration/assigned-access/recommendations.md b/windows/configuration/assigned-access/recommendations.md
index 10a4e13dcf..1aeb40f5c9 100644
--- a/windows/configuration/assigned-access/recommendations.md
+++ b/windows/configuration/assigned-access/recommendations.md
@@ -116,7 +116,7 @@ The following guidelines help you choose an appropriate Windows app for a kiosk
- Windows apps must be provisioned or installed for the Assigned Access account before they can be selected as the Assigned Access app. [Learn how to provision and install apps](/windows/client-management/mdm/enterprise-app-management#install_your_apps)
- UWP app updates can sometimes change the Application User Model ID (AUMID) of the app. In such scenario, you must update the Assigned Access settings to execute the updated app, because Assigned Access uses the AUMID to determine the app to launch
-- The app must be able to run above the lock screen. If the app can't run above the lock screen, it can't be used as a kiosk app
+- The app must be able to run *above* the lock screen. If the app can't run above the lock screen, it can't be used as a kiosk app
- Some apps can launch other apps. Assigned Access in kiosk mode prevents Windows apps from launching other apps. Avoid selecting Windows apps that are designed to launch other apps as part of their core functionality
- Microsoft Edge includes support for kiosk mode. To learn more, see [Microsoft Edge kiosk mode](/microsoft-edge/deploy/microsoft-edge-kiosk-mode-deploy)
- Don't select Windows apps that might expose information you don't want to show in your kiosk, since kiosk usually means anonymous access and locates in a public setting. For example, an app that has a file picker allows the user to gain access to files and folders on the user's system, avoid selecting these types of apps if they provide unnecessary data access
diff --git a/windows/configuration/settings/images/settings-page-visibility.png b/windows/configuration/settings/images/settings-page-visibility.png
new file mode 100644
index 0000000000000000000000000000000000000000..6688529348ec99b1040d5d68c3ac723eaa5f3b95
GIT binary patch
literal 36044
zcmd>l`8(9_7q=E4MN(NRLXv%}?CZ!**^PZo_BCskK?>PLs1ak|_hsxO6e0U=Fl0Bz
zK86{?^H$&M`4gUB9@o{?<-OeZx$pPwoY#4s*NN29P^KiOCnq5xp;T2-&>Oewr
z<s4xCqB7uIp2VA`5siQ1MQaHgBH5#&*x1`sUQK?48dmZ|-LA@dNGB^RyFp=sI!Rx-;VU3mBiJn1?CaYGlfq4Z
zMed{kg*A^QPpD?ctp6g~Y_f?Thu2kc22j+VFcCl$(m>U>r#B-)KVj!DD)Q
zdc0FX1PrQAfSY^9|9E#%nf~8h=(qpexCI1uDpobpd^X1%c>ZT|(&+k(pP!#J?TA-_
zz`tihR<(6>Mx>8&bP<>SzMMIId*t6J3bGUO(654a{~PpK(s;t^CuOE8r}D-w4~LcB
zWS>bh-)VKxx#c*~;Ilxdn0OiduL00`;J?|f`5*L)CavD=<;V!w7Vpb14HFVY1=gsi
zON?(ft}*rH<;2U(=$9H=wfbYL{SHntsWhmILQ*
zMqe+hf%|sf7G+fC#P}FQoWD@m2GYjPqr4_?0U8F6byqe5{q*INCX*f663VJPCy
zhWv0KM1>qOcIep0SMPP;X{P?q6sXdZ!p776zPUlut3o4%3AST}+U1SIA8)gos(ext
zfzmoKFLlTJwntZlh#yT^&pn%aOsd!!LFG%!*ZsgV#^mVqV6a(M38dIZ!0j*xS6H&E
zSpBw+mtK{lClygUJhWP`gOArm;pepak37s+cN0)tvnzQ(Ya}Ep4N5zO(SHs&1x~)YP?N
z3!$Ql`^=wT=Uh*Wquv5b%)V6X^AeSZqpJy?U{cftx2svPj^b
zu=KvFPWkab0K~1g*kdpKaI*nXL9cx-TtDj(9Z<%uxdsbHI7Q`>GmuIc8*CUf^=F-)
zjmK$beFl+f>lRqv%1yZTcknSyvxs#+$?59V!{35~kGCFAkqK``v87$%T8VuizF+#(
zx@*?eD05Y&SfmHLu5_^4?+F^8C4miDDHG=XId(;N*6^Ymut(vbNayXcf1hiU;Zki#wS^A|J;K|)^LvG|2)Os
zH6V0c{5%Rt_&3(W%l}_p${aGzY-y1aU0GXe?ir*gE-H%D93LOwoBX#e+GDTe=)<0n
zl9KX&zE1Y6X997$jRFTczEZjN~`T}7w4?jwV!U}b@O?uH+rHmm~`?p-=X%ES{czf
zuOte~7Qn3|YaK?nPS#+)pdAEZ`>h~{upj*s%MjtzBHe-}cBA%#3y(A8FKi;oij_}_
z-Ib>jaBIa*C{aE2|25JHwq~yMiaR+uIn=yTd#9Zo3OLFMrI>r#b|*mCasWbFq4eo)
zr%%^?yT9>BDB1S915F@juEP!Rz`6xu?f2It_eMDe5as=6Kh)IJO0(8s|Jh3eA^v`F
znc7zc3E%B+H6cplL3mG9t50z`55qVLCd4x;GH=4
z;$nL@oKh0l8Hhvc7EP(VMmjtG{zF5ZKc03!u#U~j%+Jp581mm}H=;_9*&J=+a^CHK
zg!OZJT!7~+y>@m#n_Xv-{DCIqS7Bsgq0ZWjQ$?&m^T}$O%Sf&&gK(eTwQLAJQywz(
zq2!8pIgx;iZ!@Uj1rx8%c~6>^iyOQ>$IDo}T@2d}?C2nv);T7ddG-r4Fj^oj+}lZA
zQ4-;Cv@-uO@?D&@*wJOkNa2Q-b((mQpRUBE*fnMZLr&G2wCk+cO!kyvHv=k@l
zL0{7*q-%2{85bXpD%h$?hRK_CeG
zG|Rk?;TR1CFk3rn*pf3FwW4q-iu3Boj$&mmhi;BitVf$cnl#-%sB
z{Qe$9lUjIAJM7~*bD9|WcM)+F+_Wg(4FE+{
z2tH^)@gEcBntgYUox%h*<(0iOW>U-L2}4y7u^f<{mrDufPF2!r|F{%DGk1r+#s1#WqkR4R3tUW#L0o2RS|qI_>42=ny8=u>Q}oz74Q2x
z(rL-kxQfK}#2T=~MNYlzXD12kgQ4!f0tTgVV?}iP6-4Z2OH!DSL^vFW@(#|B`7m5Z
z@IF0Zdb{w>yO@@i{2$h&9L?=dr|}TdXYc>kahN%07`w4M+wq8%W?u4l93Tb(e2O6E_m*V2pq!lCh3C)ForZ}3HT-1L^pDBXXF
zssM0l)4)!s-1i0iBD>}cyP;~1T8hFQqK0UGHSfI}8-uBqvP-0dIo0t)-F6+Zm>an1
zoDiNsL_49weG&LNvYmAe3HdBwq3Nj!r!C=iE2Tw+%IObGj(5U@95pg;{Ul?fq`WqE
zz3?c9Y`|eOzi~60LzV9rYQFZhhK!75pQbs4e;K;rE%_(G%lW>gFQ|hr^8y5VN!tv@uqf@dbf!H;5B_
zz=P49%yH6Ueh_KjSj>G28EsXaSR*rLf^;7eM}1%P#~+$eL{Kf>^a2b2Ibqjq$C)=A
zY*?oo)r3LR~-W8B-Iff&yh|h=dz63-QBSI6m`k+u&dEbe#W?
z<6?o!8cA5yq}ULpL)pCHbowS25l;8w;^OLXt!vrrr2g(B@7pfZkUs5MU(`-w-cVhP
zgKOfR_kdzH4BNSB<|s(njJG8@C*Hr#=Kk~=*AIJN&c(R7#5#)8WS8K|4x+YLZZsQo#6^i@WuoV0&N
z$kAidA4L}1cX)04e;@5kXX+h+BpjeOz7*43)7{P4weJ1Q;NImVK+2
zOqiPer8{ml#l$rd<|Kk|z82TJge%z0c2AC*7?!5`PuZS{Xmw7bvra@K+
zRPix+{NeXi$>Q-Vnde5Rw$B7_Vy-6^GO*qnoOy%lq->!ZXOhI@s6i_wx>qs&LxCl6
z0N7BbP>61>rH#Dx#tc>q9nbiHUP^`b#aZB~c%deJtuvk%0()6BvDbl$RbaeEmL`!$
zUA^vW*pE3(cXKXiZU<3qI(b}R^M^CWrfjh{=!JfTkqg@XR&gS}yFw=7xQ?lGHjTy?
z49N#q58EhES+wVikel2AcU~pEa!b3Qa7KwS^FQ25d;$Vk?mvY8{fV*-mF~3(C&=HT-OyuvF50
z$aw9hD5EKdn3`@jN}H5d=H=K<8kKSf<9}pDuU@{heCyW~EW$?N9=i5Ner8u3?LY3N
zMQgn%;|nZ+L_vA}*C*CNdcb;2inU|*XBYp6MHRvH;GtZ{pdqcVBK3}((xxXGJ`9qf
zQ7D5{elwBcn_4j5$W>9%;DPCT(n>7JOqQUtH#&W
zcyfNox@8sZXu4mN8
zE#h)WR4;u3g{P2qnp3{m;o7<`+I9$rWQ3v=+EWJFM|Uo8RmkrcM#-Zs_LAHlQfbo-
zi!9nPUh|fz6n?YKRdl-z(xtwx{XJRzafD-fFua^)9FZ;Y!BwQ9EsM}UE}psJQ2Qjz
zwcWAm^|%rK_c*gob?-e=zQqJ~F$LcQW~-O9A>=PZS(W_o2fPn<*YCAkq2438UuysS
z%IS4I?iOu%;X!Cl!3Eg-m_f%l^6|`O22@BQ3!%~ByrE6{BKu*d@4d1GR&Wj6eN+})
z_?Y6LRv_$&F=*DgM^x}7O~(45D0sh6^;HAx+rrSk#Go=WWQy?6`(^Zc5(eyz?Ip*&e(7>%7gu|Q-XLXh++Qv+y(3Jk_9K`|P&xxN
z=mo#dET09ia3mr2P9v)to27LujN6;fRT!_9i0i^RpNzck185}r!;0P}x>_lz!bhLN
z!+jjtSFX^5t8<%S;Xzb_;+hCFFo0|y&Bm&R=j!jOf(-xOYIQ387b(1N2%yz3*3X!V
zA`9AkwQjn>Q3Y$^g6V;LEgQ+
zy}SlY{_9y1IjtWc06(<-faJA?m1}m0QvbJmBNw1e77n}-8yfpkl1g9jGU};a`D=;I
z&*fPx?~>#`NAoxRnyGhlYpk^Ghkj-mDmALvYA0i^tr?K$!(-8Q+F7@q^ujWS9YYF7
ze7#PO_e4BbUy3@8T<|q(Ekd4u*Qc&N^QJNs8X6i}JBjidRrh2Xc|G$o3kcX)?S|}x
zya3#`1K*3fpl6ygC%FNcdcx}23AP&}dHTl2#vBT2J`c)xzCJ+hXohwlFDGf1n$)}g
zr!e=Xo6+uKPZC~yy6NyACH-pvlYL#$IX@!`8n+b}_f~Jr2kdxfMTAla7adOz2GLb;
zYhz=%EoolapEwkx)45G7Pa1&kW5H|3kOx7>i{xOUi1=Wo6J#<66dXP#tD4_{_5&6DvBueuTdAu&jR4JfIP0obNQ^
zy*Z0*WC}jrb7c%us<9jN=^lQ1VJeAz2~;X~_%jSzaPNSD+j
zJfcS*&UtP4jK=F@2Thm=x%t=)6)>+qW3J;p(g)e!SAnVA+ts*dQsKH!a)ur^#9sbv
z`DA%eel6d+q^WCkk7nW61)MJExBvPs)3|c?(euGCPpzHXh)14C($0Tb=u9;`T5PJX
z_KppZ@0Ghjozb(6HI$4JLOCwgb7QLD$K;$+q_pHu_1bsSmF3i+$hOR*oWu#kd^LscU>827q$X>a~r>r|#HkHh0p
zNBS_X3z7^-08PqA2b`xo`uNO7zrB>8)c^Sc4g|04&HK!8AFkX(&8j?)ynF}zYfSlF
zbm(nx`&&nk~K7I|%*Yh@QX0*V3sojeP8g^OC36*75|%%LaEv
zFbiU7=A{Ec`e=%EX&^KY$lI#blLg!30>?{VScSW#6ZEz6v{V3$jWzC1@8~b=P|x$)J~J<-wrXQew`Nx#^AHyj|2s9GV$BDk
z;#_U5Bvp=%Y!)|RKBMX%tG~Z4g_4loMNgEyXh3k=&@de%TjyFfDFI<@`UBg
z_<007Wpr7P70vJCxVJ~iE_1xBJH=YbDqCQmBksDMDdy`u;go2fV|
zSaJwPTu;O|YhTO#z9QOo65DJCtvGYgkjCoymLnQJ+h?E(j&iuuy*gMmyRnRq2?(FR
zM%qX3E5$wVn*dILYdw2@LRMknFXHd;U9GvFKY!jAwo_ADj48ISp0;xTQf#EBo@lRv
zR_F_~c(y2GP0uDbI@y^!XCx74)xnZ
zA3GvnUsBAr`5OLkL#1}`^;+`gF{QX@$Nj%AL9M(B9x{h2fOW6_WBW)(N?Bq#uNIY-
z))o$n-yZt=R7n1abANj1*wYFL>H%A3Vajnm^>2Ugkc2{86T712#N=fE$G5zAEl0n{
z63OiZg~qA=-;0l-lB6dxjxQ@#
zFg_;!3Kz-0YTrId=%TneUY5`mA>7W@g5ZqVTf9N+
z|7UNZ<5L#(gpQQeb<=;e`9p(8!c7;U1MsLOiYotXy>;os{}z2)_W$`MEqfA@wUty0
zcux`sl3G*B$|7(tY-MGo@kCfyn4yfpl+IjWyn5j%@+fUxEC_@xgRM&?x=@>^^fdLP
z2p2FIAwvkH7i%P0*=(n%J9c
z3VVf1vegR@8+cpHi*4GyM{dt*N}$6Ba}Y$4*K@D?=>6L|2&&$t3X{0)=A9V;k=g-t
zeoZVhXdW0eBqd6Xp2P)u84A>me%t>3Vr75Q70a+D2M5TEi){}{2?ye4T7GXdZa%=R
zGv@Si&B%Z)MuPrPc~fs`%Wr3lV@>b=u`_tw8E`iuj$@pEZM`E0j5?8O5##`H$9>`V
ze`5Omov8^)RZ~NuoS8=WvLE$#fa@%jAtEIjcI|mW
z(GGiK@mde<4|2Tz-cr=Z=N6Th!vTWL2n+@XejEcTYZB
zXJ1EW8-B%V5kgu|wJkXPh8n{&T-8a?^hw9gjqaXxcHgkDt40s!4vLRU^u)o|AKXa~
z&JMVj(t~4}ej2)#0E1cB87=^c_c|g^Vn=W7>v}-yI^l~mtbH&yGxIyZp3Qn^ek#m%
zU_2BrmbdEL8l(W$_K=*Oab&$6g54YkBJd{rna&L%$}nN4$#UcHGiDB=6
zCrO4L0FM@i=395iO&}lvSBAW3o~+|ESmce2zEY@ux_=ou5j%L1hVZH9AXW7A^^Kc-
zFgIimhIW{#awz4o+UTw|V9Jmbb{D|I6}D#(%J-F)k8N?rt6CyLnP7OrA<4VGB+`|
z<(Vk0WaCMhYWeBuvN{{@j4yCQ_D)G%*xsKr%tE=cEPJqoyY(~dC%jMO3g-I`lXJlK
zAq3s1s@bQfXcN|d=9too?a>Q394B*WAE_v1>s#IVdAPAN1(2=IKx~JDOY|FW9uST&
zP8=C;6J4r)((Peuw>Angs(oLf1xy=;$_iG1`eq%Ae7I{ZD$NzT0Nuk0`^6d>st$aiM#^s{!=t@t!OVAV{dmS_ccGnMZ*K>^Bo9>$CYVSqT!S?q|enG_aj@W17t@kr|IRIHDNMv
zz;T#Z4{cRqxcIrNh-8eGYY)6XxlDK;9G_a=9T~6M`ME!in)zd6ft>84o2gFjb2j^F
zTwiLYEs37Ziblef>oX?uoxe?_Vl
z^6NDAhg;L5bo_=3p_eTpvm?Bj4LO|~AJPRKMiW1$TKG-7A~x6q+##eds~w|(uZ6TY
z!%u$B>RM=To&lYE2cHtpn@>G_gCypGlw-4$;RdtUHo3ajcFn6x9|l%73Sb_W-j}yW
z$Qz?9I&G>l3s871g~<}FuD&j8zC2;CyJ0tbjG+Bx`3k*RlH~b!@r|H$^NkkTv19Zu
zZaqeDAcoY6!?;@`eU<=ZD9?_Jywv=qn6I6uZz8@JoegZ>r}0Q9~cP`uLtP-<@HXSg;@YTIdET73SfPFf^(zBJy<
zr`OGS!RP%PVe@hFGvTUp2z)^|U_1D{>aLv>Glc^}y8^ZW+QfbjUW%o5j?Q3!CTw7{-r;0schPte=5=J3*D9yBp}O
z(cHDYrx~sJ9c8zzi;=-aTDTXOrvrms|4#uMGt1~r!)9B4vj1~`H
z5yPwC=6!|$r&R`@9l_ul*y$M!!ND1N+O?#wkKjj~hlW0qw8ybJkE{n9oy$lXjcxd5
zSGC&;ZQbRFhx0Rvz8M!B
zFW1jM3U-{KIW^MNwQfIm&@0$+22Cl!e3FSvqUUfJ;~Ru`EQX`BxT)8+|9mP4heOR!
zbu&5O+T3AfM)eX17+(`MDoi1`Zj|cetD>1T)RrrExBX}NdtHNfoXfjD>e^4Ay|#Dp
z%nhTUbFF=8)qWq%eB{=&!R}P*I{_PApjq3N?Dj^t3C@epc{xeZ#B>Fz94e6$<;vd4HGBU+yjjR;=t1^QrJMhgqw?wjctGO`S-`m;?}NlXIFxH<7h
zzkHif)fl_XzA^#pa<_5deaVCy%tC8H4k}0`IT=Oqg14AnS9MALnkvU*cQo5QF0NlV
zx9nY(+uk=yzsp{d%N__4TzntS=b!JZks(JR%r{cUd8lQdRmraH{%IR)+be1^(kk}U
zXUpsAjsq&FM;@ASeY;zDscV`gVoZOE^RvWBF11w=8{(ztdhJ5Q
zgA_g=x`N47O`4Sg$xSGnQur?)Pk4>C>3nGZOVYKe>m=0hFwe!<-x9r0b%DYVb4Z
zBQ)cfSlrQ$yPNI!6)4GctvUUm1S=P6egXphqaeyNt67j2dJRyCYz3eQ<|9rtm^Ory
zUYq2M0c0|IeaM&1NNjC`kibi$fCSH!zmGi~c5`0OB$}~B*TY+WX9N*=?@bna%>f!EQ3O5s~3SAflf85JBZ|Dp1-dcjleJ
zudZzf>}5%ZDJ~ylX9&lU-Ff`Yv#R9JwKYhllO#oLUC}Ey{*#PMt*FJv&Ogr1%~LL#QoX_qJ)hTB{snaEZ+R3-xb=!I?@(Y)V`WmOiU&$JulWFr;0B7{sYTE
zo#w@Shf+NQ-%v8bq^(w4j$a@4dl?mGjdv@Rdq&yA$aGz8tg$kM=a;r!J2ngqoY1fK
z@VNK14Oh8ZRNxs@Du?(96Sr8hd*m-@5+4AnuI<*#U+_#G<6|oC;wKmw2`|1L(Qdys
z41P{c%9ZU6i71!I?_gBVexlqxF3u^Wo%yGp`h216Oj&0xdRKV6Zqj_aWlT?v@wcr<
z?8kgOcNWdELSv_skThilWPY!$cBlI?bVfVP(bO|n6!do7)qfWUe?2{k-L~#;5*BgV
zR(ADYI0?WEwZ{953#LnY#a7gS<6X9zDBNn4ElvxFCwpmk^i{ZNng|<`7_?0^rh{6b
zF1usqJn%t1ipsigVkWnz-grzXzfl(@n{*%5oai)3MjzNp?$SZTtT#kV
zWo22rS>@bh#7Hpd7be-;@5fg7%8$oE4cJVA^)qu8o(O}H-jivjVxBHr#@=pYZ>qv?
zQ%Nij$vXq`u<}tG;l5%w1%BY@zZ7}_6Uxqf{_X=TQCl&JN`*%McvTIm=l!Si&M;b!
zsxipS1-IAD-0Th3rp`YxRvs6S$N(Wgnxyh)54<#DF@<8o!kh2R2nLp)dxRfB0fucE
z0V=vILh5czrOvU*$j|(A`7HyY`}Ur#nj_qckRv*i9DM()zAWozpDpTK@)!R{QXWzB
zeFMpp?}BB84MhB^CPV(I;X|+4N?i=@?yO^)*LH?iux8ud7qbiJyD!Z12gwB5qCui1
z%bbp_q`e3TwG4lJ(PuRGhxO*5LOT?T%NHnxx&>;dFM)>G@X_rkS1qvs=08I($I7kh
zQt&;JV7N!@2P9(?sc{|jpu;)}8#-S5U94ks@Z7m1Ssuq15|vw7TClkT+`u<0U}zR&F-ld9lR4yz&{gbn;K?&91I%4{#LCJH;HB
zk=q8-i}Gy_L_B+$qKHkj9g(v2UNbRb7j7hDvYpG;n4}ZU|8~uR@(>iG{7H)Bwlwkb!<~w&>}~a_l1EgZ8-U
zlOIDZ3N-nJI?scP_R(#7T@0$Yid6&X;Xp_yGrv*s{+$q#ujL+12rB==Tbc+C$9br1Y1`
zo6}NA{)Sz-$;T?hZu>FzvJx^MFsg7yfr?PfsjbTlqSulL?a!cBdmazHaUx^mC4Dvv
zsbR&Q-`OGnnclALZu$F3U#6BPbh9mYEGB(Fr(w|QO6mBsmQ*-0n)hPy>RgXenfC@
zzBF1J_k_GnjsbCmv6Gv0z$Oc|bI{+CWI$npErDO$6w+*JX->
z=~2NND1SJBZB_E7C2kIc9}Gwi3NsIPmUVoxMDbgZOX;;{7T*iw!c!Pldt*t;*fkKN
z7R1A3A^%?!Pc0zW@wX3i{QRdT{AcPV9v|h%Y!qD1Dgmgia4O~uuWPH$rmWeTFth4a
z2)R=(%X9THg8p+nJcg7{dCOBr%KU5n`U}EZ@R`nzkEC;JjoH~K%4AYwZX!a^5AI|3
zwUq#{7)P-^BA8BtvZj2AMYv*^B7DvFs7@Z?8v`jo`7RxZMw1G+N&AMH`79a1omaYu
zzLc|8qUez-WcZW9{4Ve%MMXGwo}O^F!#EIa_T}224;ubjEP1L^R`MiQ*O{n*j>6lh
zD&|n+nVM_nMP0sb0eQxAEBo-}os7Z?T6GFKUU#sN#CZl+Xv)h9QCdj4(?*d7AlBiXUoi`pw4l0#jKeNh=c(f|5uXmWVmuVo&;
zQyFk_PGxvVK2~R~9dTmXRG90)D8zeIDNPk`kl!Ne1Z@@cbnJE6KiJ1)>y}pzq>C7#
zepXJC!8GbYr!KW+hIPN6X`7k32%PU25dzx_MDPV|^-OaCjVI^z2lGC&yQ5n>n)8ci
zzd>HV_I&W#YbI~B-?W^6Eim`{we7!Ui&ws=+0kbyiuyWI2!(#;ej_sHHF~_el;yCSIE+EUSbr{5phHShn1*S)AZ
z9NN4fNWhe(PL1E4b2OWbpYj^3)ZHQ)9_I|h;uwOO(h98g_4TLPGR|tG@w1Rm&9D!t
zfCcsr*Bl;c^h1SA8<-clh7)E<#wp4=D_i4Z42FN>_pcC8$`u8s!6g~U>2~?}Shs_f
zP;sBmIRg>y%so2(uXdudo_R!k!DQ0{XGP|BrF3kB;qE79P{u6wSpDem1(l+$0tYZn
zCL3$6!=498}3F1IXCR<6A(f%?n07wDs6aD
zjo~dIv`gClYLd^dgr&IvQlV_w{Nkn=_IcmBRshrk$p?w7&oTo^<}_x^x6*&x8_W&0
z4LsHF#g5-_Xp@fr7$za?>K{CDzJq4s
zfPnz+RG$9q&J7_DRI)Dc3fWd8VhKfW(%^;QJF|V>i}l^WnelM)#<(5)pg6BJH8em>
zoQa?KloS{FEDmqhm28DKmsi%$2lQmep)UB{TA^6i?c4;V;M?q_m!J_!%g;L%RtEXf
zl`ArkKhyXiyFKTdl=qHK+phdUSC|>t)_~5xd)Ukn1dy2Xdv=ie>7Qo@BkzyKvj@xA
z7TR6_BicJu-x(>?Mc!nTxEGRN?>Z;J!U@~`3Psa<9&PLHS8S_eoDbn3q-wR9c9-u6{Api`h`&D{oPF@3RwJ8ujEgMi
z85aLgf1Mc=*xK%Ls;Ryhkg#r=$jCD;JmI_L6`ySH2Z5Po2N+2>X|&F}wGm5&-vWhtj3nwLju1g_2FnMyk&9Z|v(#jfJL!_X
za6mXe3uIY5{0??t|12#QI>hJHiWiMR1vkx{t}xo%s>1e7ls$DWty)|G8bFrLF1lrVD6WP!~vz6wT>znamxydCec|$gd4I
zKC|k$YQW;rPI|WiNA5yzeRg_M-n%@et67&1$PPxi3cmd*Ht`Bfk65qkpe0qF_5eBs
znkp~!?3D6Ak*vQ|g05E&8J;f==(xEi1uP8o?T8&6ujGBW5{A7__qw~+ym#j3=;a7|
zmsGP!IwL?m&}(ca<|vR(SrwIDTITL{Q6W=$}aYCv+~9_9$*4MEMIG-
zz0qd}q=EpMf#G({%@y-z>!|O$Yf|ZxZyiw{zO{ep15}a`kW4V}8PqV5-fXuiR@43&
zb@{f-+WU-)wwX+YgXQdKeh;L>e7f)a29(9Y!WdToB05MZX#ebkou959pV%XgDlC7x
ztr6Z0%TSX(1Z3PEkcGlX-6vYZQfBW#%);#>gA2kRq5dbUFS9-M!ajitERU1c5$j?=
zgNVCS?tV9G=>?F80d)S*>0VmYOw)dyzK#yz)?C#nJJ%$vZCCK_=5htqSNM8k9ZNHf
zEN7|K_smQ=NCW5YuOEQ!b_@8VF%kUaLZR;>;bTV@l1gZr1D!^&mz?c@X^fqzu$^umtD2
z_p~(2BA$bT0+pesDamM2xQ-g*Ri10puaneGe`UEprY85+@xHaiqfKL5Xf!fY=Vay`
z!)d7P{X#5rFGqf3HZU*lXp!*sy6yoh=~Hrhy`G#&N{mT2u4w5B{dL4mT?;XCuTY#U
zn&;5b`CJCDs*E;Sh-9X;P{`M~p8v@G4D$$GE%R;qRkX|I-0B>adEFHe&~)qe17tap
zUD|msarVYfGd)9RkoZCUgi{~Jd0#ildDBEw+2bwRRO?q(ToA3tEFfRuH&h)v<(h^U
z9XsB~=)Tja48BMDDDpB>Tb!H3%DBNwPVas7;@87ZA;OyMiP)kfN8+yZ(2?Wja@t$q
zlVz8x&)^PJ=7061WrborW{((zGQ1dEpuDJVg
z{6)i)Z-u7J#w$RtktTiK(ND=3g&>K0di6ryfB6Oh?DT!6ERxee+(J=uDdgpemf7X$Tu+G6$?sR@cS<{VuRkRWnr%lu`247%L}-giMWfJuzpaGm&ay2
z=mZAV2O9=G&nmh-k@-#@(6m$6l-CPnKt(6!XDU;*v&7zy
z=(5bpDaXt5LFlUyH>JB~>ICY@n7>)l(xOX+b?#-wxzTb0s-`YsF8pwO&~i#qvC_Nu
z_+ss$YM`?H+LSR{15y`^9nM|_ZMG>^C=!1cUa^Y(lS|}L8TJ70*(0FlTp`2H(oL%4
zV(UPdPK);g+N>&(<~+N@!uH4uhv^D3wm>>Su#lzqk4P0}^w+lDf1C3~NpE0*wZ=M{
z=PmJ+YM;wU1OuPsaf+zN@~@h%nERg1mt+}gfHnfR!bej+3BvV)gDuaFD$gM}|DOQS
zjcX&QZk_70nYA@E{NQgrbepI{+inw~!aQ5s%@uH?n)xbcvGs*fOy+wH;ndzAyr#!r
zUEqE@5{%c-hQ8|bPCzvmuJYwCGvG?c(@tK0xDW%#AP~?!WZYU&7C^s
z7UqZnphOg}Z=|~dcQBag3EIthQKlT-99T1cCjivq9drru!XB44r`DJerw2PvP^%h7cF5p46`1{0E*b-F1s4mKcebEn~T
z6Y!V*PjGR2Z`y7LndsIAk22)Uc34MnG-Xxjo-8NTW5x}Ds>Y}cUCQb4H`Me5a{Co!
z9om&_ri$aNqqK4gQ&ajXU3%{a%w=PQRK#u|K*V9h&1EAhudX|WO&9`au(!(~HtREt
z0qZ7F4+DJiqwGK+r4m~?Gu*Xu<;GMuVtf~hxaxMe!$T}Wr0BPU}y08R*3~ZDn3cr8j%;8@V-0UJQ)j#3z!9~0A
zW;3u&SgXv6#nHl?!AvSF_*O;N9{6c;)sy^#{MNEH_?5CXkt=1^_2yM8e%{=6r$Tl|
zl1D$TOd2Vk%zWtP=H#um>Nb6S!p8Uq*@E57fxnubyuc`#R)x8jLasrdoeaVqb}s49
zRHc>pZ;0A|Nlq?#i%Yn5T_tyFa9d{}3&+-aVjM=|Pz+s%dDthw>5(kl<6?N+
z)2zF7qRe4v^RwxLQ}MnnjCG)@pRlzY`p`%SXPtJmFHgrN3#XrD7U*a
z*1l#|-KU2VJf^7B-*EvQ$L0OzuJ
zYUFB&IsG#d3l-%%@h>N?F&h-zuqTg3A``3ysu+DhrSKCyXKs_`u8iPye-rrIaz#oY
zL|-Hje>XKv9J66Kqh;C5>3EXn;NOG1qw{>
z$9@zAR0P3oP;;h0D{8uhmOZWQ-h{d^cwA&DuMJsR4}({OQS8$3+a^af(lRvVQY`XaKUIL+E9Zzq@j{h#_q+H@vts3@dw^%0|JRY&%pw{C(_
z?!^{nD2vXPt~ll2PY7(mQIO^0fp
z+m($6P)ttqn|z*HBuX~m>ebC`mFJ}g=UeR=F0@P@?*QLp9AY$@QC&UG<2>0pP?tDT
z&QPH>HlSwxPCbD_cav_i;dUkhe=JN`#wt5ccZf59QE!W9rX5p>rRTV~`hhg;n}a~o
z{$jUPB$_IwhSnn3N;@xKW7>ZEFx^l^@O9b*yiX6p7$$mxa0^E
zs_BBGRyImyLguxmpS74Djq?&Vb5dQlW4Pe1{rkCS_|DiIoZc(bg)rAynmfwwn!(WS
zKx97gw3Bk$A>s!0?^kJrrgiMsfwv2&UIIofayv<+(o987Jqr`Be=yg{C%IDP1bHX2;0PMjtAg`&ySP-*+yNWwfq%la&
zQ!`h1pnV-IECtfXIf7grp;+7okLk+b>`JoFj;gfTcc4i;B!vxAAQmPFB~dT|gOk$^
zEzR}xUaOR|`S3RTPs;`Pja0ax&n3t3H;JFnzb8u=(kK7pdC~U83WnI%G(p(Mfx#)=
zBS*zE=z;h!KSfL#Cmgbt0Vy+qrMo1}OB${5!DIOZ+yk^m+1>g@DV&dZ&MQxL+U&70
zD|5x1_x#xC5;>hu%y^}=fBliCCly-Ts)|f+HgK^S{p8zUV^Y9h|K=7AH+=k9Q3M05rMcvMG(I8vUgW2hDXETCdacGxY0EXfP=Cu26lXY95
z59}B(Ay9UX^EH@S{#t^WgSnxP3MyB}2zQ5g0oEXsRE;MW&}=@=ykvZjIIs#d;1<(A
zp3vdBT*5su{jDf|#z4@b1`~1m-G93Uwn9t89-|@QCOzbXIbbZ|6{y+V_ja{+4dXpI
z2}?0Bd>zKd$SV*mugkz!_Z?EiY2x5%-ZThEW2yt@CT8(n&zc43LVw4Gu`k`6;br>8
z>7{MxaU2rIuXP*T*|L8EeXDXnbeZW+W1=)V$G0jvS+}bdm3RyvZGJI?pbn>Ve}Px0
z@Cml5d{IltGfuks)9pOBSA?=MXPsL)7$Sa?M|o`}O>#qOAUJSXslOUH%eNp7M2z}5
zH&y0}wwAogsDGK+SsmnwUueG{HVBQK>vS1qJgQFQmlmOE`a!rC*UIVW=BJpazp(0J
zn5Dzh;OZc9Rd75R?Tq~+;5-~5Fx}w`iwu)rQb66RElNtfKRQy5QF21~cdbmw<2O~#=r8xNU
zaXy6$+#G}7c@==mc3FBpK%kg3vNnagiQav9k-^yH+@!bv`SzDaS=}77url6f0O{J>
zCs3O`!mmG47g2|93M;AP;>9?U{=}5#H_a6HP8$B~WrMr^pZ2~p8qP1=SBi*{M9N4+
zO(RM~B8KQK2%;OkCEBQwFhmy#B5ERt5y9xAGdd%rAflJiOGGzn)G^%s`k#B(Icwdu
z?!D`NIA8wri79X0d%w@~{K~WQ#HiZ)Wu8&dH{4HMJkIMq>Fm;Qto(4OTmoPBH@
zvUl#)4}?^4jb{R5V2*Xquo9&uOC1xmJ@I95TElMoPmT>DvT;3or{XOS9
z%)BzMS!s_d?~D%$B~E>1^33Qjg#-5@I@_M2s$cc=2~?4aO`uQS!nJG2ihKEVER}Q_cUY>@3l%Y~P2kP0@YX
zhsEQ2qWXb6%a&I!fBBUAkW7%S`I4e_%v65&;*nz~`g^jq`G|JBD7&w5k9yqx8pW)-
zZIId#-?36aZsC8?X0gA>MqB9^mGpH%K}*f3_pNt0hR9%bm+qc?>O$qOn~e~*f&N|i
zp!;w=_~164tW375I!En=Z5&8(W8O0E3AEb-!J0W>HYD
z|LX}vZzrfsmq%+yxTM>DK0U=}Jbq7SJL8Zjic%_O>(bHVdXtSiZTBRa4&{Ak@@N8&
zaDgaeM=t$yyRV;^${j7ZKg^BQ)lnAA4xV>wDzZ)m4LN23BZvOUNGT^O!^mhg(PkJO
z@e({=UzR~ZC8OPG0J}Z(`}Y$ukPSe!*?;yDL(HW|+40)od^9FyKVn|ID4FoNl1%$r
zB)sVPl(L?Z%TMmi3Uh^M;3*(9*HMOPSl43BA-K>ktE?Xp{5TKO$wCVJ@oib)!
z4$T-uGvy}rF2n)ydXKQG1$w@x8AaCWRX
zI0>N_E9P6CgLqq~%4u8n@)5TLkW%{G-qT#c`hc`+-^s)=HEI@I4!0IpNx;qxXE$3v
z_?sy;;8abrrouErRI54)=_%MH?gtGh3=zS0mblm-X6fMqL9$Lig58JbfKINiX^+vtz0cs&2nlik_tM
zvi)%|>-15!T0Jo8rS|F*lcX;CPp6EL=q0zm?C-Su4Pp@Xxm8tFLb)k(+M%g1Ojnl{
zxwpV~N>UFTT5@``%tP(O7Y{Oj4!%pU3m!3*!f8(hol6wb8MDlMukiRSP6z&(>(uJY
zHwDI>-nF_NzY`vC>uBDYj7zs;ODDOWGDA<6>-C0>wdwVu2&M~}%a;_F=b9MboIsXl
z7ZrfZ_?|z
z;YEK%^slqu?~t2=fO6-ZjloujM^!H(ikM
zgp1lu2POEez%5qa#6@w}z1=q9Xs_sb{lRv?gJ0ZD(qxwdwdTWYFa4(yhiVNy2Iow5
zVLp_z@E2|&KiUyy+2a?+<*m7X9of1~cr4C7&-J>q=}NOgAnb%Rl_3qX8`bp{D#K9;
zma>E`>4?d8gS*ieIjB?g*ffSY!;9isl+9TfAM9tR}`ewZHoC(4yWz4c?y)0d*V8}L6_%S?GWU*s8t
zCHsLXMw@S`86v)GbFcvCxVLL~Q$GfZxPibdzvkU_#m@|M_ng#AwKC~U!|P1{l1;Sp
z?2ffn7dxH3aLV?#ln>;rZz7cgNQ?
z<3TF#&ef8yL&wEv)n*u_;VAs!=}6-b5y4!&u1|jb1h?)5*nnC;ry+JE?gRf0?v|72$e-U4C-u;{((yI`!T`R)kH
z17z;QR8G(aJD#L7biv{9l|mZ)o!!K#t&7mRh7tIr@wcI&Cfy-Fe=6tX=L=DFre=g-
zbSN3l42M5^Zuz%;aj)f&w@)SQ)RDsly-g*39H=l3Uk|9RLhJhf@vTYQW2h24Tu$B-
zM}tM1nBJbALosY$W^!Q@Y^W4K8neV~NZJt%@Ayz)V8uaF$xFk_Ez&QFL!+UiYL?xi
z#p2*jwc7>{?^4IzHJQ_p&LjJYNqlK21ffTc6To;e79w=Erb?O&>-~)gp{c*#)h{Be
zWK=8GGVTJUk4T#@{1lpZYe?z{da&cd1Tn9!;7;W
zx7!c2qoe@3+lAfgQX@!bsHPuFH96kPjc8Z?5kruzY5tJ<7ny~NYN}$Xoi!Tg1eHD$)&>Na*v0DtQ
z-{~v0{JO`ltKY}o4u=uq_-^4rIfaR-+i^hs;e5Y*>I^h-=q8T
zE4$$SQTGM$>Z=zAy$Ry&5w&%Lv3Wy<`*B4c$AnwdNNA#nS;G*-|iH{`lBJm5IFb$R;OIg%o|w;h-U8Hw&~
z*s+VonfFh&n?*gR_SO|HP!soH19rBhT=XRU<+%i{dy2wL=h
zpFrS!QQeBk$A001kzCH5t9z97M&c^u`4tY}As*zGe2?7gc9%(Z2I%j67-2%FZ}v
zN(Q2#fCT5#NVA*z&nAhTs|?#*Z`P3FlDE3-0SbDBJ?wDt>FAnDd!M0FUA0WJb;s*Z
zn)gtKy<^O;_(Lcsg;=AZ|Qog(W;`;;L>cZ(je*48h{rmT(@Zv(~AH;+U}wg1p+{95lb*AF}ZUSV|V6$+DB
z+TCRrq?6@AuByf)XQbtO|pLhz5VyXwK
zY8Wv`)|0jwevWR_lf7;V4u)lJU-!7$l
z35{{c?vG}S6il-;|!gZt9yHh{Ihi+NCA
z&sRSDzVLFSEDfSX(}hdoFK^n(txKso)ziA
z6$U_Ti|u_q*V}`f6~YdawOUms4yW`(xPC41$ikiuX_8#3g!etCc+Dk
zAGT*E`PvOVt*b=@Z5G+}@-PdcqM&J{>NxOQzAs<j_@azYCn8gghJ*x1Z0+K5Ct8MJ1WfLFA8(o3@V&c
zjNE|0YY3P&B&;yj?X*4xXxkWis4f0pBkMA7lO+sA`r;7X&_k`k()R);+o-w<<|iqRXqXyh;vz(mb&$lu=>o_Tf}s50|_
zFQsmz_}Uvf8^Kz@uUL&zcpNFq(h5DQ3`;%<0YC>Y33G&FkB@oHyXqea2Y#nHhMeaR
z1zJ?8=8Ew7H%D2e&VN8vZeBPO3V!3?2k<_s!gGN)VDddR+>c@eq3k)4ZVUtw=-3^9
z&h1fmX_hn(T=C_5)?sws0SnvbGIR{C@5X1HhxUnb#H3YT0QEY}qru)vxAU3|^0L}ctP6^e>1bBD&;gH}9vAxX;6)*)ISf>+rr#@4QTZ`N!c$Kbqf}B*y@7yz$q^
zyI-kAnj>Z?TXhF{C67{meG9oTQknGxI=H;>Gn3D)q1~Y|*MtP3sIY0?
znoa^pw{fhA!Lk_3tI)_YltiSORlDV}0)LMa&`HE!GV|_)>JfUEqiF+~U@tJ&(lkrb
zUB%ab-CHFB??F@zeY|rL0+-tvHDs7?tx=zRQ=c_0N>R>}h6p*&&M&I0!>Izvm0;#d
zFFXUj6aA2~KKiCQXVzU%nDqYyh_msC2gH06zIk}tjd|eICZ5>&@qJ!qhK4I6NR>K-
zSe|`5m(MOsjc{ZINy`;2LC+7E``pPXU(LZSFMFAsaS^Ju7^GMOOa|jR{*tE3pR+Sd
z1Dp@47T&Wrr|wq_NiiY&6~}YX7I=4o`gkBJj{?2|ZuXdf9F9C2a
z>N?Cezj{e@$a5j@9)`_(MTQv+HbfvOHxZ{>6XIM4ZYFs@2~Y76KiFIE`{3FJK5#c&
z$On`Pr#gz;R*9tWu=A_Z2fNT&@oLN#NYiP
zH$S5^dk8*cyx5qE+Zg-_G!NVcZ8JHHmzGt_A~t~2%pmQ}Pv-G!j}r*)ObsPhftOAf
zjD&fAG!snj77B;%%*C2UO)*e>5{PLV`#K2u3^ct2(?s6_A^-5Y=f^~Zy>23nR3Nvc
zF>Tke6t*W9_%2A~F35}=GzwLGj-9(7zt}D1ze@?+GE34~uph$|(2TjZ-yD$4d=&rw
zPMVV2-lJ*ZO$?gVYq_>Out4)Y>0S-}NTe$chxZkVNVkgx<|lPNQTZagl+=o4ulfYB4+_ctnfYp6?
zLiU=32F@U&O@`d*Hdrv7%_BR5C6zuR*8v&K`yj6033qqaHP5Chk#%B%{IaCTizOpF
z#^_$;s=dzm@0?)xMUZLSC72<9WgWdyq3*a`U=Qqe+-I1@gCacIL}tFp-9emQL$Vn;
zmd4Osca3zVFAWEznz_C_qrLs6BQz}IOBMo9&Q`5nWfPJ=;76#RHmM4(VynCLVrx&s5WBcgkh3J)#`LkMgc`94o+BqhOMS^Di}9zS6H4HVXT7$>p&bQ=Zpu(KmQ%
zY_v*rofBstOA0RAA|o}4KIoZEwjrL
zaY>#hx9Hoef?>Dugr)L=ADuQSJDzWd=ron2;H6BE5}ChVj?3q-P!H6qw^kH&T5-{F
zPEM9f3Te3D7e3cf^x(*Au8LE-TGUe4^KvHVe5xAPT37eB6vxg50!hON-fU#+3hS6(
z-Jbgmmaf@*z{Egjk325rGGdchVrp-s8iMhluA`|cmu#Zr@7{zdyqZXDQ>;taRhzB)
zYdAJx$)H;0H`wP_wqG6Nv<}GrXHUDboT753Pw@Q6An`Gn9NziraUoWQ{*|Zm2K_ed
z@!r>TwxA0Vw}P{kuU4o_ygtD$UHVIp2NmDet~cFt^M&MYwu@HNpRJfIm?Ayi^C3Ok
zy@wM)WBCMM&w$30qx55%B}aL{KC9SFa$@IXM)W?`Cz_LSdfIpetZss|yBQyT$lWRM&
z)_qzmJxw2rnyxUFFznsHe&Mb-
z2x3!7LSrBQ{yNrdxh21)xn(%U8hCZz>)dc=8=t04b(J0=B%#2675-+MQ?FUJ^}(2&
zkKb23f8r}My_wvFRn@;;?`ErG)cOG*6&nc3ZB!9#3LEAhXU)bK;Ik>ZK6cx8lKr9SfL*eiAZw-mX{BFx&-1{E~_ZsLuw&lF4QvA>I@}II8
z7DE$9q3fIUVRS9_W-7tnC8VKVHP)<|BOTxVXCBh@$mgqe=5_Hu&Q;`71@0gts8mC0
zI})QN-uTFeMWhFh0ti7ek0c-mnaluBEfh^^#wS6d&c%59!=fGX)Q=7O%jj%PIjhc#ZzL}n!
znB`$45N~X;qF8;71Bk{oc?9*eYOJz?V+7L=dxP{>#D2rx-$R(iPp
z>v_r0rK#^Z*7K=n6=Q_9`0k2Xbz^d0BX)`HP~QbkwNI!-Q8cdP5$j1)FH$MDN>{?G
zhG;+Hq+4fq89Q^>WC?PV`~;Vvtpif6s!?maH_Bq__a5BMs_PTqql1y&t?Rv&bBvl~FA%=HA>;yN
z&C1CvEsC??YQhi}Rw8w~sbs6Kr++|#iFitR;yb7+k}?vUiot`6XpkX&-2_-T7lX`a
z1gc?$Vj%-u;JW>IYuF`H6(iUjC=NxxKOJ59<_qtcKz$>43+h0(j69Lq^{R#Z>O}x}
z-=%6|K(gOhxB&Eb`tNab8Y&XH8BEM>fd{7V-URjZ0isM)Nbcqdm*wBzj;P8TRPs@t
zg!pXKdy}6G&NyMnZJ-jVGE#hpG!AhuUq~1c}=xU9QOlsz44V&1>3&Pq98Uk$KrE
zszSWx)__m`^0ple3SvQ&8rvJCK>2w*$E?r0
zMD${l_v4b$kM?GM2G%WcQv;Z_^TK(CCganso)({dRyT+B^|jB9!{;r-UiNBISpp#a
zdpHsLPM?4eX0k8oBJYH>@z$vJ1Gn1=T;QGu8z}PWvghScP87(@ctRCGmtJ+`)tv<(
zeODZ=ob^WRzNr(cBjjtgydrCJSHzkD!|zr5UQuAfV%Ol6VlgX;^4p!;%4~l?On2#%
zbj^d#lnSq4aN1T-t9yC3ry|*U^%KYDPMCa|wMo%b`GO^&6x}LFZdzNTv(Ie!-Cy&*
zzc@m-EWg8AJ&}3Hx`+;irw8V5_uB4%4Mc>yRMoSu4!ia!(_Y<
z_;C7~2SRqr9Fo6QrI4f)A`YcVl_D)e_67=#VFEmv%k|{$%2#?vfIBlIIJ6$7taoi@
z58@a0;2&o{F<5U?xVYA2R7Bx~Sr&A@s5*Q8?DqV1#m8|=FY{H21r{d?RJVi~P3N`^
zGstsu``a5n6*sE%s`!2VFnFmE6~_W{!3KJ7+U_}I1572IZ{@RMPmP!?&&B_I`jf9N
z&EnQaZow9nPQ~z8ZhT0d(f)=g^H_<1{gLoY8lON|h%6m2EWQfA!gWjI3U*)bJv9sL
zj(2)k88VtDyy?cE!sCDdmcUb>aYsRS?!zOm0)ow{m9T07KF&I3(y3Pz8+8#85j&uI
z@;z?O^PVj(-Pf_^7`^x%tBr^@RU)^qMB>c7cJT{lilmLNtU@&8jm}M9Bgf1wyP&C=
zx!Quk!q3q%Zq?#7gjZjm#gH`j#O=z9B_m>YgC
zKS5tJ$&s(XBpZFZt;CO|xN_qbU!jAxfAU$`-m5Ul05}X7rfwRgn#;?mUW47y*+@An
zI|S70Q@6Q53Vd49RTHTM+H{;u8JC?1F^fgH(k5meP1HFOF3W+$X7R``%vJS-J#;;T
zb5rVBek8;dw${u4IiK$ZVZxttK)g;W@oB}+H=6&LQ#vXE_~dd&`jv}SuB8|D_dfF_
z?kL^*+f-g7j{KGDr%{kqgp&`=+f8_yJLJ#0$eu|u7elu{r&aZrrQdjm#YJDCrhz$k
zvDPXvu)!X}7r7pEY!c?>WWq6e9uvOK_{3?b7Y}#j#IZ|(w+K%-ek~8tT&_=6n8{dZ
zMmD8T=7+m3k6dH*ZCWw!{s-P0#N-OQ!?ZNk+oQ|M+R{lTeuA+{Wv^Om%$D=gw+G-=G#I#D_OTnj^#eP6zW1DyW8g_lE7-Y9drk7puJQV51(i
z#s;(o0mJu%TRvO(WXGSY|8W7%06q^cT0sf-3;OdWMx0+U!QA*R3Z1F_
zb``Ve?jaOO#V4;O$25@M&bisql+ss8`O*5Z%9W=m*cZ{`Hd>sDpr&R7ewU9DX?&6W
zsBfIefh?H(bvkNAd#x<&ySMm6`ZI#+GH=+|49Um~8RosAra5&?r0z)TG~kDjqYkIC
zHE~S1m8Cfq)`m>wwLPdh5hx7xL`W!DZ#xkvFh8lVCH*+8PKZ@|CUcT^&khxZrEo`e
zHK~aPZRT*A`TA9j;bgmtojKsp9HPpT|IZG^%k3uCjb>YK^SE-JFPliOw_H`d*a7@D
zzpPEQ$ORj(oSsW=S60D}5c=-QP}i(y01*C3++`
z7#i&;=2$*cOOhzMD2qwVZE-+kA)3=6F0X1(u8!%6)aU!Xx*v!Sc#_Wro@x#V(rM{>
zw_u*a9S~}{b!Dhgt*q{c@8Kd&^}qx;*8dK`=-=;7$M=iIO%v!LY6Pf;#A21e#kT8)
z7+=u;RnJGC-8uY|Y90bkRe!d$lz@UiRJQBb?d{PqQUN}T(A)flXnS1oH
zYCxcbnYYW)H@ZkRumZ-6(1wyXxB>mV!HvWiz)XczKBBsVLF#r9dX$yLzU_Z$16dNd
zv!VNU%fvV7OYHRuihrMBz0Tfqh+FgY#TZogvjb=z`W9Yow^5&xI7YedXb{iPxc^e<
z=WI0aP}DIou>DRN{ErKihVMbUoJE5=+~6(Dedx|QzQTx+*56a!@b8<+P1w6wwZQniI6b{bk=<8Wc
z+2@dKj*02Vy%#Tcm~ViIE$lD|tt_i77O?03v%LA2ao&s(jQqvzE|rvMwv=JYy5_j0
zO6T~^U35^!DDK
zv_>fIRugL-^P3M|gEw42XfXtN8ZCf>7=*flnJzGuK9c!|2Z4%z
zuBCLZM(v?8da4?%1X$Tm5!kD_r2(c91DPvIRsI#07c@60?-=zqGo^fB6B0p4Z|+M48Zzr$SO
z_?>Wu!zdP2Z8?M*c`$SX=)hE9`duTzeX4zMo(lG{Fi2SlhA@k&(D8D5D_oA9kWSaP
zQFrdP5@XFfsVlO*JU9Ul&>3U?mfl(Hv;wB52L&pItDJJUF9U!kuvoL+=As&c7q1ED
zbe#Okgvjoy8ngygrbuB$Ptf}2e4F3)MDT*3``XN6Wai`;K(JS>4E2U?bk+I!xw8$H
z_jTL1cKiMvW$*6x_ESAPnB*PAz}aEk=j`mV4c6n00hkR|>Y4XP!=WZNwYu6jsjt*e
z%ftBbdq92Zx{Q2@Rc1h3(s~FX%iqN|He|vY&X8K3f`E@$;XyR@$|GmvSp80!(Wd%Z
zo^MsR9If#$UX
zy~*RRVl3Cc_Na$vxk@u)
zic7s)5wWE>Xgr(}Q$M52cmy@%RJ)-|1~tWnUt%B)aU_$<4}nJ293@$%(mL1;wEw#if_PP;MJ)Gu+|!O&(qGu
zzHe0zKAH;L|6#U}o!6E&`In^*H|V&uI8c)Jbd0cByX?a+S)drncDUZoA(UJ)$x^pn
zSWobNoMQ|P6umh0Jwd!yv|zZnRe0gDgeRWv`d*sz4`H&VGd6h&P(&i0&Lqg5W|tgB
z*ux@5(};r#F|j_gq^bN3TGwQv9-Gsv~sOd+gpTV=||6L-pDpi56Ge|91WLO2xQ4
zb7<7m>iU*)f%dR#wun0RimXf^&K_Po3;-dgwdt5@U;!|1Eh4Ap)`_t;sq|4D~3=ewK5c8m=%5|<-bDa~}am$S0o$9!^
zw<6R$ee=D;SUfDL`sfX6t<$u={(aV@pHqG4dzg*AwYWMwUs->{i8CyWN$vmztd5eG
zc`Iuh$o2bR5ApFFJp9KkyYx9*SB;Rn38_h~NP0TgL}hZleWxzMiICxCllwf8
z?z(VKc{p2IPv#lc6US85Q-UyTcDuj@$Rz!fu^(k)$$cHb(CCTqqY3Xm1zw0{M
zL9G_&wzEkY{q8idhCpt9FIJXw$}(f!cqMo5X7XINEMzlo(-Rl7n>h#oq>*CqKpO<|
z*2(Es45DRY2o3c7M(`{VZS2Y)P8f03!>MZ=Z5l2RTs_lFwrx*
zF`*5Y$7<$4l_j(wm1wAVHS8#Jp38FWR#ikWVj0YB^g6@r@dO15IL>m={cg)}2=xuh
zknpOIEo-SgaS(9foKOLsiBwnKK9{KK22Z2uqo)uS=h-{Nx5r=IPJV~QVnv7cRwMmf
zWx{!EdmboX4L2(nq2{#|F!*d&y}L;ZL64IF6mvd!6St5Y1U8i%t`+zw?snos<;5Tk$1j2JF
zkz`4$o=f3b0-%khniS>lhas-y)%vhL;^Fi%lGe}$Hoa8OrN27m+%xx>OONYvDoZ0h
zNL&|kpQ#5YD6I{Wzvi1s->OfcLLn4|HcOfF5vBb`s>Tc;u0xqXa-PPRpx9#JtBnO>
z`ykID1eaGnD$4dNi^m!aH0He2bBTDDL$33YnkQbb|c=Avyp|q0OH=oto#YFcFHm&HaKF
z^pY(9;eIC&H=$uhQ8!?i?KM*CwRNKOpcdfW#y6jWf66kj7N1}I4q5sH>cMXA
zW*b!^v)h3FgNccag)$_8dw>zS&&D7PG_Ze~ATtUDl-BGu*yB;p1->omf*oMc?v50k
zua#u%07`WkL?8{jcgJ*FqCH6VN@>_$d~vFnIMMP!mW}or)`ycxC=4&B|sw^
zr&{OWhRQU*S`CJ`%8&eZTFk1x{Lo8>6!z5DCU`)=(Var!1&zySL^^8bdAi4$iOqItBpprjPY~x6Y)Z}S^NIy?J
zc^I;tRY0=&{<#@=54XLdnvTKH(|aS|4$_ce@IW|Na*OEBn)*@DUTe)aP1ZTt&0ic6
zJpuMOK^}L*jaKf?=a}4i2A~{$Rn>5>ye}M@UVn5Nb<8A1g{g1ij&~6rkh`Ag>|EQ;
z-q;5Mib~4tAY5b4Gs$n?!`)Go#z$fQKGZK{C@FS_{F~PW-v)TFqzJ!Wq+X@fU^{3X
z@|(z5!!|;PXz405%&@TUy4!21JhVM2tk=y4T~U5$Ox;Dc{rW61RI6JWCd-6yKOcyg
z_fnvr?qWF-PR|8;aY)M)_?&%n?_C?tv>`4aRJ8-2(Jb*+2l9_j;Ym69zp$%InOj
zQatSP(+XvQHHO7;BJIs_ONhwPi7cOCGK0n8M6hH9!Fp#sKq$I)Ri8R
zg-|cJ)}tiJ5rm7Dvj8A7U%GO-^Txf>^;XTO_+@c}##OjNb_3^t&||wY266Sg$pnGkM&Y`y
zjSCQa9d80Dz3;;m;qa`3OGr1aKN^`8FeUigtb$8{C&|lobqn_2h3R0rgvIhP-&Hl|
zR}8{1^TUR}rN3XDM3?1EX3xu$^-iWWZ?#Wye|d<0q)yh567W4BJY^dD)MO_2k>`c0
zsp#0a2tdW1Bn9V&$_wcH@KUUeTN4**{6y7F>gaR+5(v{ORb%_R(I!w)U@+)V^nd_e
z7=}($4Mvsn#u*V?JsGv^o6ZiOHki&)*P>>cJ4H^M_vSEIPu&grb!NHbF1h7T4Tu$@
zBw8-=7rP}^>FYqU1_#h9f=Y?o@*!OCM#5N!)!gd~*_%dVq8pBJ^V=bt10N~rUXX?W
zFYy^PN3R9w>2@9C@-
zA)fIud4`8&7DINl%lQ7%Sc=6W`tO1cc;Mj;cE46-`OxqRK$ivOd*}%O{(3_N_5{8B
zPhLrb_VVvr|6YlI$Hc!=;czMVcPjil75-bM!uUbCI}P_c<0Di-)t(p6-?{RuLG}3e
zdoPZbH>1B@&r)nU_oUd~J?KW%XmyXniBDH$lz#ZJ49ms{pjDT@$cC9cRKvLIQ+XFLXU<2zo$dX
zLl^SO$_nu$*pk1EySw|ACu5LQ_$vJ2b?M^}owZ5L7o?@okjxvXj*X>hk
z>gqRnd3g&=A7yqAg@=d7MB8XdF1k1rmwWIx;fyR98<=_##p7I&`>_Ki6DI3kwS+p`oEA
zbFRBBYwa1Ssi{K;Gr{ye_`15fo$c)kkyBq=zOPIjo^~X
literal 0
HcmV?d00001
diff --git a/windows/configuration/settings/page-visibility.md b/windows/configuration/settings/page-visibility.md
new file mode 100644
index 0000000000..d333b27aae
--- /dev/null
+++ b/windows/configuration/settings/page-visibility.md
@@ -0,0 +1,72 @@
+---
+title: Configure the Settings Page Visibility in Windows
+description: Learn how to configure the pages listed in the Windows Settings app.
+ms.topic: how-to
+ms.date: 03/03/2025
+author: paolomatarazzo
+ms.author: paoloma
+---
+
+# Configure the Settings Page Visibility in Windows
+
+*Settings* is a Windows application that provides users with a unified interface to manage their system settings. However, in certain scenarios, you may want to restrict access to specific settings pages to ensure a more controlled and secure environment. This is especially beneficial for devices used in specific environments, such as kiosks or student devices, where limiting access to certain settings can prevent unauthorized changes and maintain a consistent user experience.
+
+You can configure the visibility of settings pages using the *page visibility list* policy setting. This policy allows you to block a given set of pages from the Settings app. Blocked pages will not be visible in the app, and if all pages in a category are blocked the category will be hidden as well. Direct navigation to a blocked page via URI, context menu in Explorer or other means will result in the front page of Settings being shown instead.
+
+This policy has two modes:
+
+- Specify a list of settings pages to show. In this case, the policy string must begin with `showonly:`. After this, the policy string must contain a semicolon-delimited list of settings page identifiers. The identifier for any given settings page is the published URI for that page, minus the `ms-settings: protocol part
+- Specify a list of pages to hide. In this case, the policy string must begin with `hide:`. After this, the policy string must contain a semicolon-delimited list of settings page identifiers. The identifier for any given settings page is the published URI for that page, minus the `ms-settings:` protocol part
+
+## Examples
+
+> [!NOTE]
+> The availability of per-user support is documented [here](https://go.microsoft.com/fwlink/?linkid=2102995).
+
+To specify that only the **About** and **Bluetooth** pages should be shown (their respective URIs are `ms-settings:about` and `ms-settings:bluetooth`) and all other pages hidden:
+
+`showonly:about;bluetooth`
+
+To specify that only the Bluetooth page (URI `ms-settings:bluetooth`) should be hidden:
+
+`hide:bluetooth`
+
+## Configuration
+
+[!INCLUDE [tab-intro](../../../includes/configure/tab-intro.md)]
+
+#### [:::image type="icon" source="../images/icons/intune.svg" border="false"::: **Intune/CSP**](#tab/intune)
+
+[!INCLUDE [intune-settings-catalog-1](../../../includes/configure/intune-settings-catalog-1.md)]
+
+| Category | Setting name | Value |
+|--|--|--|
+| **Settings** | - Page Visibility List
- Page Visibility List (User)| List of URIs to show or hide, separated by semicolons.|
+
+[!INCLUDE [intune-settings-catalog-2](../../../includes/configure/intune-settings-catalog-2.md)]
+
+Alternatively, you can configure devices using a [custom policy][INT-1] with the [Policy CSP](/windows/client-management/mdm/policy-csp-settings#pagevisibilitylist).
+
+| Setting |
+|--|
+|- **OMA-URI:** `./Device/Vendor/MSFT/Policy/Config/Settings/PageVisibilityList`
- **Data type:** string
- **Value:** List of URIs to show or hide, separated by semicolons.|
+|- **OMA-URI:** `./User/Vendor/MSFT/Policy/Config/Settings/PageVisibilityList`
- **Data type:** string
- **Value:** List of URIs to show or hide, separated by semicolons.|
+
+#### [:::image type="icon" source="../images/icons/group-policy.svg" border="false"::: **GPO**](#tab/gpo)
+
+[!INCLUDE [gpo-settings-1](../../../includes/configure/gpo-settings-1.md)]
+
+| Group policy path | Group policy setting | Value |
+| - | - | - |
+| **Computer Configuration** > **Administrative Templates** > **Control Panel** > **Settings Page Visibility** | Turn off the Store application| **Enabled**|
+| **User Configuration** > **Administrative Templates** > **Control Panel** > **Settings Page Visibility** | Turn off the Store application| **Enabled**|
+
+[!INCLUDE [gpo-settings-2](../../../includes/configure/gpo-settings-2.md)]
+
+---
+
+## User Experience
+
+By controlling the visibility of settings pages, you can create a tailored user experience that meets the specific needs of your organization. In the following picture, a device is configured to show only the **System**, **Network**, and **Ease of Access** pages. The policy setting is configured with the value: `showonly:display;quiethours;network-wifi;easeofaccess-display;easeofaccess-closedcaptioning`:
+
+:::image type="content" source="images/settings-page-visibility.png" alt-text="Screenshot of the Settings app configured with a policy setting to limit the categories displayed.":::
From 8a5e2a0da1a773bcad4593fd1e0cfe2cfa09bd21 Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Mon, 3 Mar 2025 16:53:10 -0500
Subject: [PATCH 26/37] updates
---
windows/configuration/settings/page-visibility.md | 2 +-
windows/configuration/toc.yml | 2 ++
2 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/windows/configuration/settings/page-visibility.md b/windows/configuration/settings/page-visibility.md
index d333b27aae..00bb35324c 100644
--- a/windows/configuration/settings/page-visibility.md
+++ b/windows/configuration/settings/page-visibility.md
@@ -11,7 +11,7 @@ ms.author: paoloma
*Settings* is a Windows application that provides users with a unified interface to manage their system settings. However, in certain scenarios, you may want to restrict access to specific settings pages to ensure a more controlled and secure environment. This is especially beneficial for devices used in specific environments, such as kiosks or student devices, where limiting access to certain settings can prevent unauthorized changes and maintain a consistent user experience.
-You can configure the visibility of settings pages using the *page visibility list* policy setting. This policy allows you to block a given set of pages from the Settings app. Blocked pages will not be visible in the app, and if all pages in a category are blocked the category will be hidden as well. Direct navigation to a blocked page via URI, context menu in Explorer or other means will result in the front page of Settings being shown instead.
+You can configure the visibility of settings pages using the *page visibility list* policy setting. This policy allows you to block a given set of pages from the Settings app. Blocked pages won't be visible in the app, and if all pages in a category are blocked, the category is hidden too. Direct navigation to a blocked page via URI, context menu in Explorer or other means results in the first page of Settings displayed instead.
This policy has two modes:
diff --git a/windows/configuration/toc.yml b/windows/configuration/toc.yml
index 45b8217fab..fcf36620e5 100644
--- a/windows/configuration/toc.yml
+++ b/windows/configuration/toc.yml
@@ -9,6 +9,8 @@ items:
href: taskbar/toc.yml
- name: Windows spotlight
href: windows-spotlight/index.md
+- name: Settings
+ href: settings/page-visibility.md
- name: Microsoft Store
href: store/toc.yml
- name: Cellular settings
From d3c74291c63c8055cfa0aa2f8222525083b96c71 Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Mon, 3 Mar 2025 17:10:58 -0500
Subject: [PATCH 27/37] background topic
---
.../images/contoso-lockscreen-10.png | Bin 0 -> 122846 bytes
.../images/contoso-lockscreen-11.png | Bin 0 -> 129770 bytes
windows/configuration/background/index.md | 50 ++++++++++++++++++
windows/configuration/toc.yml | 2 +
.../images/contoso-lockscreen-10.png | Bin 49659 -> 122846 bytes
.../images/contoso-lockscreen-11.png | Bin 63683 -> 129770 bytes
6 files changed, 52 insertions(+)
create mode 100644 windows/configuration/background/images/contoso-lockscreen-10.png
create mode 100644 windows/configuration/background/images/contoso-lockscreen-11.png
create mode 100644 windows/configuration/background/index.md
diff --git a/windows/configuration/background/images/contoso-lockscreen-10.png b/windows/configuration/background/images/contoso-lockscreen-10.png
new file mode 100644
index 0000000000000000000000000000000000000000..029e9ef7653a0a2359dc10b806cd8dd7e29ea3e0
GIT binary patch
literal 122846
zcmeFY_d8rs*Edc=qW2a=3n99Q=)Fr2i5kqPAwl%$M)VpXN(d%eh~7IBM2}uZ^genW
zql}q(huqKoynn#=`u_CJb#eANbI#uDtnyi9uZeo0qfSc1NQ8rfL#nBv@)8FJF9-+c
zHV(lZ>=iQzGYR%U=%Qibj)Oy>bNz=KD}u9&y@>1nQe6qBY>0UadxB@DsI7>DQyEWu
zWr>f2yXdZ|qNwkUyNmK^0T?77#C>X{P8`X*{Y8OFL+J|vVJSr(H$hz_>1&q!ZJsQt
zf)=n}{0hvyXH#W+N
zi|~bhbr_WFVQ??AJGlR$s(H~!eE6h944UCyDhB&vcQwUeE%n;XO%+Ste?As-W9t7i
z#=)^LyNyfm-&2c>|9AF}8UJ5#LNrZ{&!7wQ7U*DBY9RT4Gu}Q{5VsKHnF9rIon01d
zo+nIjybyc)a(?HLO2C)@6$uW>pG}G&<8vQRFM+F;sb;fD-Tm4?Au59}+hw|GQ{H!Q
z|0}&99W?-suM>HrY_ol#cjaa>{ZAof-
z55oT!fxpq@xI3U$_gWzY;^N{AqB&cC00-*^%;tNn+sPSWP+X;c8z!$ImJb3jGoU{HoM84u;k6)?pe%fI6^`~YR}x1f1>RvWms6+MQ^3j@XwP&pfA}huZ{QSy<|R#;
zT)g7;#c&l*)YaBwB6TD!@5SLk1Gi#4CXC{0NGci4DSTXxv$d(
zBB5=5)aFK*qo;`IW#KZ<;rBU0W+w)(>s`N)|Foi;oE7rl*=l217(RUrM$HOcxUpiE
zY~dr$S%*#)^h3}x$fKzqTb7bD5ikZ`;4e!qhYl4Qc0nqK?N~Z<`;bvB^uWB=Vd!qq
zn}a;!ZFif5Xw|CHQsLj(4&aM5+BWc9!7%zv=%UI@aH4NP#cZGNv=L|yKI`+GZvm?c
z{a5U}rU($(_gkWNLwTjrAAS#4+x=lUWS}EY@!$&CKYYwc#7<8ZqX0xMXxFsS+56j1
zz~4wms8yaHhk?$E4v1q|TjHpVPoC20Hpp~ZkwQ;KoSE7;keGAZ%PRx$@u^!Q1;TUL
zq@d?e^nFM?q>?UV`gX+5n+E;}pt<`zG{D?!Be?zpY-<^{th+&vc0eQBGr&J4%IL$8ompK>5q`x3JdN?@{Xk@T1pwKA2e}pK@k|W8-CddAA$C
zB<7*`T-6M;3m~>@;^EL5r)){EoKJp%5|`LfG3TKGrEx#O|Dufu999N$$3D2viW?m?5bW=q{{25u%
z?6SM{`J6GyiqS%MIX_FKaE&
z5P$`!K!Xa7fDm$w)hNdl(D)ms6iWc;1Le}h`v+mK+~w_5Vp}+F
z<$HZ~)rBV~2Z15)OT#jm(0knQ3k>3|5FWlap*Q*u-^YL}UBLo!vx}c@x4+yuKy@xZ
zXYQ{-d}6&A=8tumruEA^e7s5GH+ML8xGT2$MGUG$5D{4E(%y3fE3aL);I|KT`qQT2
z@+aUNjYU0E)|On#uTS?ge|f9}(Q)N4>b;ly;!`W6#G>prgB`FQcBkblrDnyoMA&_c
zgeZJbx-cb;X;0u~4t?plubZ*iG}-^WLr_3OE*CfCD7H^|`4rl_7ueVkqukQwwP(~i
za?a{B`J4=h!Pkc_Z^e&hNQnHX-$w=}+irou`~}j5HYI3_i*ku7&zXy)VW8eg@g0f`F!C?|F>gmH&~b
z$k(u-sVtxW@poidK>jMCwt_NI&7Fxp@X`a^sj+c!k5`$tsHuN;Z?2r;p;w5>o&zw(
z8oQzb{nR)u=Haz%TjU6H6bBi+`jIeu`qGs(M!_g>!yS!!#HVwZGfa;`GeQD>`4+Hf
zbm9~9Gtbn@8!|ExG5dD$y&rt{MG@?~rLMLfZ-o9R>$l4RJHPa3}m
zxO9NbEr*z^{$LC*M%I7}u+G#QIO%3W%H#1LZohXsU91rCiKb7v=7O;6a@U<}koTD6
zF6Sxpm1Hm`Y1+U1b`|oyb+GpC%`GzwlDLsfi`6lOpDBEM6|SzQd-#Oe&HvO+ZrupZ
ztYb`Y*&zlDqrk&{5hOAkNuYthzEDT7shgMTe}caZf5y+-_z_5Sz8H8}X7;Jxy}`)*(*Q*8
z2o_!*n8wm@VJZhySVESHtlha>&Ci|TbuNSBA5IE}6tkVZ@<^|+`
zf6akzB7SrUdPAO6^U4IX`>^SVyEx!ID|$6=n4FY-S(H0*C~AKf@Ir`?a^wOYN#)*k`{pACWP<+sz;TL7yf&t_cwS!Em2Nfy?;NQX~>HJ>IkTt?ZawnNGp`=QLGIW~UG=u@WK7;ll1iXmp5jvv*oiEn&$)Aa%
z*?SE@NG?bXQUNpNnxk8uJhYSjdw`Gq6v3j&)3{N17bKKYT237tFr4M2t1FeL9
z0*haGNw887^BF>nQ338k~)v>xmgZ#qC1*YG(OdgSk1M6hEHZ7Rc-
z&vp|!ox+&$#3xpWiB*pycAY$>vt<{0Jgb8`ZH>KG&d4X7dTrk~0$VOVA>CkP%zU^30IAP~P$-Z=(99q>W_u9N-_AY}P<
zO)gIEeF6mm{?8Rb?jJQC_DKd$$$klhS8C9h4gGZwAE?s!E&s%Xf(UtjmmTBkeUDfv
z7A3;i^)>T0Mk7;9)aRjV>s-8p%1~Ar>koeWqs6;&rzXj(5%DnA+THCTB^t0eb_wBh
z%Xp)UL*)((S=Eb9a@}yIvg%X<&Q`Y@+))#y2zqT?c*G)?TELpR8`sJ5xV;rg&D!$E
z*?M|4ywy+c6=suIaAg5mKxbdpjD9Fo;lB=s$gOeB>z3`nSyaXg#(Q?!4v*Mf*JtdQ
zmcua(aR8V5S9wp?M3w@>DC%A0uF}4kzgHz=yMEn_VXuoo#7g}1|og=O5Wk%JOTJLvnx&aYJKrM;OfC=YQB>%5Vm78sNkc4b?5^6
z0Y*yyT>T-8X3080@OzW)TnhQgW8~FIQ53s|jLfwfFeRfHGe?jw_5S(0m^=CR|1n^MM^wFXP$bzia
zpOAIiKw<%Qi!nU8IlPz!dy@r_nog$TFoYiAF%R}%FPDe4f&_r}vL64~%104&J(Y0L
zas=;gBX4RTxuuD+&vZu&OU2#2oT+b-^eRit^2&tJ4LKQ?llsT;oB%OLkT=K8)4Kxy
zd3t-f#cvU_othiLA7M@U^njdLephjVR;~Lqj8-gSh8~e;E0o6+Se1Ug7S6RSuaCm-
zm+=OTyf{DCnW2))vECWi((L*=1NeE)-w2@g^%!S0Hak*27HE+j$p2xsJRBtHbA2@^
z;SP(!^?<>PA0P}WH(a$b41f8pyIr=nd
zHT7c8k~aCU{*nnZVbWt@1W?4rGM&)&^*jl#v*eU@eC(WRROqw)Rcr=_pd-WYRK9n;
zPOSLD8k{H9bY>Dmn109=6BwR={}l@kzcr+z?;Np&S~y
z3&Ok{_Vv~@MXyfk7{e`%%`Ts#vW$SP>R=_P8PfAQSyQ9FI+$YWg5AE!+!)lK{~#n2
zLiz3peUrd2y*JS=hFs{v({usLsUEh@Y;!#{Qy#4|X$zC7p5ysE#R&xlEKeQ;oN0CXxTG~v>C7c|cAJm6&Rvaxk^
z?#U$X!yay;e`bpu%7oLh|L#4TOZ{T1$j5KQG*nNYO(r;uT9OmFQb|??zv!_@UAkru
zg1&QkkO@71?SpX`gxKzWUe10!(ojKbYD{8f{O3YNz~2nDrF+4e+!8RFaMH>~V@PB<
zoc$sN%;;tk9>$3Hbun}H{#ci@ks0c`s%too#cbZXu8M|^^}5MmvikO%mxm3@d*qW!
z&o`;-+fRqeK;Nq(4T9rg*3Q(yx&*gZE6UovrCjgruabI#0-8_#=yE0SVs{9$6t5||
z`7pFT_a^^NwR_rei`ef^#Tju78-LYd-4f}^bt=Qp+FxZymTF5G)s<0fdccC1S)Nq!
zX7xjxP5Rz-P3&`F?p#pV)$3dk78SgNBT_(g47nKV2k
z9*70ovx7#!0%Wbl3;AIIcowr<7d(A(^xFSYOW<+9G9U016|bvoPR-K2LLT!1YQ7k0
zh^6qCy@f=}t7ew68){<>*l_Oo+tbC|cRE(5Gh;xs5#AypR^c*cTb8HuVA<`Bt2SqD
zo}aMZS(o!BXB~~lX55p;@AtZoAW
zpx9yjU#{8_>TMzr2~1?g_gu*PEJ>+eDe_)~SJj%BlK$4895o?(J4?I(0d(M;r#NxbBp47@Q{R^CS8$7^kz);Z`$iIb`eSH
zKw9B{W9e<3E@+3{=<5PJFg;$5#Ru
z-VoZ>Lu$;O7SUr*|9JpSHk@nax0rjp`rV{9a-2ZCnk;P#c;UR!UVVjDTU#C$McD-k
zsj@^BCubHJdUq7h4TU;oKc9v!E*=1V#>-@zR~Gk;yn3AYDUM+C<@-5C9}aTv3pvNz
zva#IEED`ii$3)Z*htj0o1+_CfR)$J=5Pveogs9z0?8hCNX+0bpHR|P92Vptb|4<^8S$3+Mc@>xiBpW%d85^W`Cq`!Xr>HYR
z2Gf6QxW&Z%?FM`G%t*-w_jAn(!dX8;{*=Gf_w(*mO9jAO;w@f*Y;#mf24?@`fY4W6AbMx`
z;uwrN0B-a5tdRK~|4EmN+4v*VLhGOIBEaV@Y|in=B8=Yj{Y=g6O?mX+zaH>W_bXVb
zDKH0fu!u5+i73+s-8trAB*~Y025#QAb&c%oHzx5#hrMQdw|I?@7Arv%*Cu5_<9eNO
zUZ;#rd#PumVXR1Z#(~4e7R+Ap74o_mI#cIfKt8-8Pv^5S^zJvyH+MVXTUt@=(SnA(
z7hlN1%U$3e)A)22^*wS$QfnR>%dn*nK^B3d8WQiKf6W?nU`E`!>&-xLB#Rq{w`m#D
zUl=YEdH5{546$x(71Vo7Evg#N7eA}03SfK=f)_8yF_h?h01nZE*7@eutDJPBBX
z(8lN@X7dV04xW}qHHKps!x66gk9x9q29rlnSB|)^WvBv#2}qKPxp%*m-wu;LeI49t
zgi;=ah$gj2wYDTSDRnp19XKuSez<5H$StJLulwu3=S`GZx%(Uvr^<#P@pW6JMkjyK
zxe=nrza2A%yIB30hs`dl43cmI+D@@@Y>N99?lD()UwSLt)X=V{a;ftcPA6e{`Q;L9
zB2Xt!288Cv1dji3s_{E>K%)}5oR5p&$)3$2cmzYMENcbO{+Fh7NT_);Fu#XoR>QQu
z&1_c)>bmst)n@1_OngDQHt-n!%5-z9*3_z%d5HGY0ab+3-wX980a=F7v_u8S?#}01
z#NeLbi)xhX+{TZ%S^sa%A6nBV4|d9S=9@~ldPI8uI1Qbx%X(mLGg-9;1O)sQvz#hJ
zDLX==CDeu9UiLbr&XB-*LfO=*PXJ1K6ut<;nF?E3
znNTdNgY*b)yn;pS$vWhc+5EJRFB(~f?l;;Z#vD$rv=x`N1j}L4bVp0>je7=wP?DGZ
z@}NvK26OJjI@T4A&hd$PJ5>^5b#LbZ6V
zeOEL-JbOU50EqE5Z#^J~FPvq~5%3A5w!v&JhrISrJ@J)Hoh6<0%+WLkSqoDHv>CtB
z;;|7VYXKO&do+wEygF
zZMDK%P@m}|cw7$wcRE?{h^Xn5pWbF)oWo~hMl6#UxD;@%&8}Nm@rv+Ssr>mlbs#d#
zE^EIlv$*^n9!oPxv(&ybM5P|REtme(mJuZ{f2`TGqD+4g0L%3MM6dicNj-c8_A5eu
zq9mt_gw4>fxq{ciDd#+p_`&X9_p2lIkuGQHkAkgm8s8E+
z!#s)(rJe|f><~-WFnrF9&0N@}^^hcTdOC}STPyn&f6ig!puE+?O!pzzg;yI;$otUf
z0`S7_K;=@G5`iCMWv@GQ9+FEB@UA>kC_;8PRoQpmB8J-GQ_0EGB{!7M*0nx=Rj_eO
zTVf;G2yuS0+?L_D?+W-`)v_)SgW4%S0MZY~)mKjchH3)7D3iclTZ2~>$T!QZ2<9Mboe8%Efs2^>7ovwwHdxo2lDo#=t#E)
z9>E3xV*G7~tbYB|Pyd>3NkbQz!nk5ub@;tqfl6PEHp@vc#{d$l#iF2tqwX4Wl<#DUwWRhJDRo>=sr@3Mfze;OjYZfdlz>a1ktNaN&(r-F|PjT
z$K1n-h;$eEbC#r`NAS$y{9?{PhV_dL+R=TLb6}V{Chw@bj>d@IcFIc
z3txfPEg3jSGVhxp#yW|3VP>sjId9NB^mE0R1%D+cd!X7gdcoX!uzTBLcaGw(vX`gl
z&VdJAnbxn_I~b9QSC*BVAk2V}exc!p_KF7+u3VkI*CSl`6~1=xT0xF@A^?#A1Yzbr
zOfGy6E#zJNk;qv-zakshWRVatz~cJ5gx~V`)qTPgztb4y!C)Lt>L>1F4jXpzNbTL7
zD?_$fIC9SfW%<{uEaZSRM*mfTj^M-6y0c==U6LCAD+SLYzhQRYy+pVud6p_R?$REh
z&s32HEbJ@)o{~AilWlxUdK2n+{|nP&^^}e`oTR>N+5=9mkgDqZa6;d|n{qkk
z7tvkB;ZE)jz3w`U4>{>l?p)QpePv~}iaCXVD8n*d2omBo$%h;@Ekj4@=HyBT!LO(y
z5*d=9Z)dfAB7?tu{uu)w+ht~)^7J2vs=bgr{3Qb!E;9lMWaX;9hh53}JN>ne=*s&1
z-0$M}0ubx_v0N;bJAifXou!$%M4ZvP(TIZwFhO2Ih5Qqye)Ls(oh>uh$I^Q?PGN(d
zDW@mV_WXF2Y&BL#eKp8Q^T4Q!2yozZ%(c76@m~E8;!*NnGE0LVWqQE-2wV9ELt!x{qC+3z{*PfZ1n7;)_GC)+ta^5db*TgjhE}|r
z>(vqQ%<9t*zI$_5A$MC3+m)zb#|ybCw_V6TEMG!qP2Qa8%jL-G(&}&cLo<^
zv2MPS{?IXy9khRn3Eu2H6Y+NJ`|)*sfd0~`E&gMwsYovjKmCKk)G*hW1OFAbw{|Ub
zGT|^Mapg5~G12J7jPA?jM+oWI$>>l8Lrf)uM|YLzmXIK-96lO@jy3citya#vb~{10
zZbDY!@TJKnL8*1BOOP1?__i~>`!g)Rb667D@Z1#}`SAlP&U&pO7XdVK)19I5)*@W|
z4_FFkR&_uF9H6-X2w?GNuFLy0&=t7;qD5woEF#1+iZ8QR7r*j*k(6@Yd2d11!mcU>
z*`V)1K6fz%H=Vqk|HZvWcqMv<(OGis(ouYSj^%qhx-+)p7cJhk0)+J!b|Bvr5Gk~p
zgL->yO!8$rZhtK%&eAp~5P?`eIf5o3$I3P)CA7p)=?R*G1
zFXSUS-GXX48tIsn-G6WtFay$;rC&IiIvXu`C$c%uSDAQSQxK*gz`b$T>@6Ke*iva%
zfa4zw+zxVdYfxKUUIp|r2G4QRz3{~$jpXHKBcNvKG3H$UJ$1H(cGf+zzbhjGV3!6u
zzYbUSCx2LtQeD|S3Y77!T-hhOf~n}Qu<=@VWSIhJ=l+-VUP@Z}Z;>mJx!*wNFB~Jf
zNXgB^(-vif$_9UOolwRG%H&uO!a8zi?2JFoa)K8-v3i=$p`?yP(Mu0~96R7bxrHoDWx
z!VjxGmTDg9@h`0c{7M)7YW$n!_Vekz#KTOXF(Y^C2bb03^Z-5yAC>=jvl2hlhSZHK
zI{6@;`nV0A95IuZhW*?U{V}=ni`BlfTBye91sou``RnHsyCIL)&1DOa(7j#G2Zst!fwHjn`F9>6DTgfDBm}E<}f8g&$R61
zFB9L+vlJFwU5w!mY{G5r#{Pu78N*gmP{+quDdH@F
zL{l@&D6fZVq&)&=YR;1Hxde#V1%@`pCgrH(ESY5-d3-e_%-K%lG(C-+bm%Mbnhvje
zcc7=7xSdgELIwqQKb@YxV3!XYw&}m4n=_(jk7+%S{Oea!;ic8z?`x53^%4Q|?b~JEOCx
zs^ezh{Po_P7VOoW6QVt%{2Qq
zs&^Alqwx4%D!f>rYoDge!8OpliV6q$)zG+AwFoAQ>_1xbb=8Wk?D*&)eP6j{Ceut;
z;})ui9*|?)k?-!NWTKH;)PHGD%`EMv->xLe-{=iN!ade$NTOnPF0*tr;H$emk$3
zv(NrdOiTXoZUS<~{S0OlRk<=zb(|q_Id2D0lYYl;-AW`zh!d+0*e-dB3G-;&E
z>&i_PsjaWC?EBY#27ZGR5rRXemx;0@+xSg%iMeI?c|iG`h5C766nlR;>JsQ8a@Z(p
zer*0#>hDzX_0ZQxoN6pcyw?BRMJ8`$X!hQmM;E=m5~Fh%Oc?PHwNTEmVHI+eZj7&P
z(Zw4;dfC_i0MWo1oR8GA^)$+K;ynuI*;ra$8y;1DM(F?Pc%0J7u&Mm5Sud)IJDK7j
z9dq`moLzuTYVy4=DeYO5NWLuxRjGlBs-*yd=Ias?YvWWerS%vANr6xiQE$l$EVCcqHmE%P0oBg8l6h
zEyjFHJa|~ziE}v$TCCDDlb9p%`eF*5W*Miuzo`-m>VV2F`M7j`b|)|D7R5Kl8ewwY
zXd*w~j!M;p*^Vf8tnQRUQWGr_ijt^8A2eq^w>S55;(N6Fq$fhSp=ix%HFSwm3CtT1
z_%yE%IfQaVmz3<_l)82AEoOc5Y=soHRcu8^0H8EpG)M$l>{NzryJ{l=dR)<(-k
zzSV4T=|1W5%rHe?U{IhIX~D{&;+O!W^x2pKCoAhC1c?XcSq=&5i#BD6XlRkX8eGI|
zwl#=+5I^_hrDjqlIFl#XNysU`nYHz{PcW9?SciXAVB|;IXFA7{fg9Lt%Y1=45n%Nq
zM4w|u;3bWlGhUj+cGYPaKVGZMo5rn6
zzqD0aBA#$-kcz~MNooBX{es|}A@GnfkwfErE`_xSs@~_9zqbBTj>)vlw0G&lrR2Rz
ziaT2CYp^k~t^EkmzC^zHl+xT6cD)5QT@@d@Ul1Mf#p4EK@~$@LsL}$%Hc~(S6sMNZT93L@G8<0((>=APesB7N
z?aN)O`8UmwH+m9Z`m$!Nl~$~`D~nR!R<99G_>|>a|F&y3pI;>tc|;(iIP!=vwrbe?
zmW^gjB4OXpZGy8ZPcqx*8tjp7mFf$tHGc_52Wx$Tj*q52;{*((enIcDW2*44TLbxa6(Df(xM_i
z=Ep5=4BWBZRM$SVoA+jWD#-E|vHZYrLE2sMY`{ckHTON36dspoxIoA4PR6Mj(Oe5o
zY3RM7FVIQHxH}#Oo@Y@!#D5>f2*io&Zl#mh1bO-N7dGu(5GX^0e8U(($-!(1?B$Iz
z!yT=kIkW{cUPOEyy%NuSwVf^nUKxGK5KYeqaQF+POiMlMi%qM@<}3+yd16HI-LY{*
zqn=xLyz-?R43J}SaoNwuk5>{Hu;Rv|e}CDgN(9@eVJL)GsXj75abu4H|LoB@=mCsB
zCq}0=bYm#1AQq%{FJ3joglUG$IT{fDp{~?o?sfGvZL4r7x5`iQocnw{D!NpBPdt45
zJ|8|DL--!etyN}rq)ILFHj`%$ja9mqZ#~luEr_QJ3O%&C9OD8c$r#-^_U{{@mjRY6
zX_y0K*8PC@x_FXE#RUz@kqTWJ(GNx)~nQgFKl+4Su7zsTG#@t
z41AE3^1G`dOu2Jk$^P2aiQxUK@d{Zi!!l@LqY3Wx>dHyHk0ot+ZCz5_`gr0~KKYAs
zDa+q$7Nj=2L-o?bT*b|RJ5#;zMTpo}QN=F3Z5)SogaX!PT2aB`4oOlYq8U%nqzMnfW1++QoWjZv$d@i3wl1+ryY3brW-*N&z-
zRihp&9kQ<)Sj+0VC3M?zd}?{KEu$IZl}55MCU$&)EauFR@If_{2b`hA3S0p
zT#nN4p870BzT-OK330FNf7zs?lR+MZ*mW&iJwFyXo_VwEP5KgcF2hKgwH!mUh#fELXIi{J3Nsc%Dl2-ijkLm=E0hpPpUZL
zx14s3woL;+9sl`_&;kHKpO1dA_lL#ydvq<3Yn|HWos3k`>IqRsM?)1N-Y=`HzRg`%=-bd_k^4a
z_Jp2VO3wmkwg=oa$g7c)^PY|7M+OL)qq5jg!iG8+HP4?O1B&X$Np4~ZbiIx1aax@hbFJ`lFU;BPh
ztCojxtvTsRfYIVutwnn{KI79Cue}9TY2aS~u|)X;fyKMV9dLE{+(~7e`BL27)jW=I6k!dkvE7KjVy4%l-q!ACEEJR1|
z+2_a@B{Q^F7S-s+dXM|dJv1eJ={Z0gSNfIaoyT7vJ=Zd?;WU5$JCu<=9($dETi$DT
zZ(%D0jQ{rK82q!qug@)Udx;*;d{gnWd@^g!@_~l*cua&Vq^bD%&$b$Y({kSaSB(@3
znafY}Pa?xh>xziirB#9(;=?PzzhQ46^ge(EHPbpd-C4k#8n(K+fuFT^ioD*cj>7ZH
zAN(d8|6}6T=v>-~{X%xc_(b0;`~BU{FbVxOFsYTofFG~j&|Ex&FJ
z#oxYvl6nGP6&{6t$u~2pd3(a9si&Vj{@zlb(b`St=ot_wN%I(tY28pX{ei}q$Iq!j
z0PgXu%~-YlrGa~6g7$>V09c6xWZnutZX@9M@a>2EIk6dnBsGV^{AWCmqNIM3yG{Nq
zs`YVSt>!$O{!k+;T~V*D^+KjX!k{k@fB8EH