From 72af6def52c4b573ccc30efb2f0d8ee8c02b568c Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Jul 2016 15:27:30 +1000 Subject: [PATCH 01/54] change client onboarding to endpoint mgt --- ...ows-defender-advanced-threat-protection.md | 52 +++++++++++++------ ...ows-defender-advanced-threat-protection.md | 4 +- ...ows-defender-advanced-threat-protection.md | 2 +- 3 files changed, 39 insertions(+), 19 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index aede6f38ed..50fbb93363 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -19,7 +19,35 @@ author: iaanw [Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.] -You can use a Group Policy (GP) configuration package, a System Center Configuration Manager (SCCM) package, or an automated script to configure endpoints. +Endpoints in your organization must be configured so that the Windows Defender ATP service can get telemetry from them. There are various methods and deployment tools that you can use to configure the endpoints in your organization. + +Windows Defender ATP supports the following deployment tools and methods: + +- System Center Configuration Manager (current branch) version 1606 +- System Center 2012 Configuration manager or later versions +- Group Policy +- Microsoft Intune +- Mobile Device Management +- Local script + +## Configure with System Center Configuration Manager (current branch) version 1606 +System Center Configuration Manager (current branch) version 1606, currently in technical preview, has UI integrated support for configuring and managing Windows Defender ATP on endpoints. For more information see, the [Support for Windows Defender Advanced Threat Protection service](https://technet.microsoft.com/en-us/library/mt706220.aspx) section. + +## Configure with System Center 2012 Configuration Manager or later versions + +1. Open the SCCM configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): + + a. Click **Client onboarding** on the **Navigation pane**. + + b. Select **System Center Configuration Manager**, click **Download package**, and save the .zip file. + +2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the network administrators who will deploy the package. You should have a file called *WindowsDefenderATPOnboardingScript.cmd*. + +3. Import the configuration package by following the steps in the [How to Create Packages and Programs in Configuration Manager](https://technet.microsoft.com/en-us/library/gg682112.aspx#BKMK_Import) topic. + +4. Deploy the package by following the steps in the [How to Deploy Packages and Programs in Configuration Manager](https://technet.microsoft.com/en-us/library/gg682178.aspx) topic. + + a. Choose a predefined device collection to deploy the package to. ## Configure with Group Policy Using the GP configuration package ensures your endpoints will be correctly configured to report to the Windows Defender ATP service. @@ -50,25 +78,17 @@ Using the GP configuration package ensures your endpoints will be correctly conf For additional settings, see the [Additional configuration settings section](additional-configuration-windows-defender-advanced-threat-protection.md). +## Configure with Microsoft Intune -## Configure with System Center Configuration Manager +1. Open the Microsoft Intune configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): + + a. Click **Client onboarding** on the **Navigation pane**. -1. Open the SCCM configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): - - a. Click **Client onboarding** on the **Navigation pane**. - - b. Select **System Center Configuration Manager**, click **Download package**, and save the .zip file. - -2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the network administrators who will deploy the package. You should have a file called *WindowsDefenderATPOnboardingScript.cmd*. - -3. Import the configuration package by following the steps in the [How to Create Packages and Programs in Configuration Manager](https://technet.microsoft.com/en-us/library/gg682112.aspx#BKMK_Import) topic. - -4. Deploy the package by following the steps in the [How to Deploy Packages and Programs in Configuration Manager](https://technet.microsoft.com/en-us/library/gg682178.aspx) topic. - - a. Choose a predefined device collection to deploy the package to. + b. Select **Local Script**, click **Download package** and save the .zip file. -## Configure endpoints individually with an automated script + +## Configure endpoints individually with a script You can also manually onboard individual endpoints to Windows Defender ATP. You might want to do this first when testing the service before you commit to onboarding all endpoints in your network. diff --git a/windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md b/windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md index 4eaf0224ec..a387485cf2 100644 --- a/windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md @@ -1,7 +1,7 @@ --- title: Windows Defender Advanced Threat Protection portal overview description: Use the Windows Defender ATP portal to monitor your enterprise network and assist in responding to alerts to potential advanced persistent threat (APT) activity or data breaches. -keywords: Windows Defender ATP portal, portal, cybersecurity threat intelligence, dashboard, alerts queue, machines view, preferences setup, client onboarding, advanced attacks +keywords: Windows Defender ATP portal, portal, cybersecurity threat intelligence, dashboard, alerts queue, machines view, preferences setup, endpoint management, advanced attacks search.product: eADQiWindows 10XVcnh ms.prod: w10 ms.mktglfcycl: deploy @@ -44,7 +44,7 @@ You can navigate through the portal using the menu options available in all sect Area | Description :---|:--- (1) Settings | Provides access to configuration settings such as time zone, alert suppression rules, and license information. -(2) Navigation pane | Use the navigation pane to move between the **Dashboard**, **Alerts queue**, **Machines view**, **Preferences setup**, and **Client onboarding**. +(2) Navigation pane | Use the navigation pane to move between the **Dashboard**, **Alerts queue**, **Machines view**, **Preferences setup**, and **Endpoint Management**. **Dashboard** | Provides clickable tiles that open detailed information on various alerts that have been detected in your organization. **Alerts queue** | Enables you to view separate queues of new, in progress, and resolved alerts. **Machines view**| Displays the list of machines that are onboarded to Windows Defender ATP, some information about them, and the corresponding number of alerts. diff --git a/windows/keep-secure/service-onboarding-windows-defender-advanced-threat-protection.md b/windows/keep-secure/service-onboarding-windows-defender-advanced-threat-protection.md index fb5e5d5cbf..790d75a1dd 100644 --- a/windows/keep-secure/service-onboarding-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/service-onboarding-windows-defender-advanced-threat-protection.md @@ -112,7 +112,7 @@ page. Follow the steps in the onboarding wizard to complete the onboarding process. -At the end of the wizard, you can download the Group Policy configuration package which you will use to configure endpoints on your network. You can also download the package from the **Client onboarding** menu on the portal after you have completed the onboarding wizard. +At the end of the wizard, you can download the Group Policy configuration package which you will use to configure endpoints on your network. You can also download the package from the **Endpoint Management** menu on the portal after you have completed the onboarding wizard. ## Related topics - [Configure Windows Defender ATP endpoints](configure-endpoints-windows-defender-advanced-threat-protection.md) From 0c16ccecac7ce64d59b8767929f788b6286c8236 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Jul 2016 15:29:44 +1000 Subject: [PATCH 02/54] change to Endpoint Management --- ...ints-windows-defender-advanced-threat-protection.md | 10 +++++----- ...view-windows-defender-advanced-threat-protection.md | 2 +- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 50fbb93363..7d56e93872 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -1,7 +1,7 @@ --- title: Configure Windows Defender ATP endpoints description: Use Group Policy or SCCM to deploy the configuration package or do manual registry changes on endpoints so that they are onboarded to the service. -keywords: configure endpoints, client onboarding, configure Windows ATP endpoints, configure Windows Defender Advanced Threat Protection endpoints, sccm, system center configuration manager +keywords: configure endpoints, endpoint management, configure Windows ATP endpoints, configure Windows Defender Advanced Threat Protection endpoints, sccm, system center configuration manager search.product: eADQiWindows 10XVcnh ms.prod: w10 ms.mktglfcycl: deploy @@ -37,7 +37,7 @@ System Center Configuration Manager (current branch) version 1606, currently in 1. Open the SCCM configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): - a. Click **Client onboarding** on the **Navigation pane**. + a. Click **Endpoint Management** on the **Navigation pane**. b. Select **System Center Configuration Manager**, click **Download package**, and save the .zip file. @@ -56,7 +56,7 @@ Using the GP configuration package ensures your endpoints will be correctly conf 1. Open the GP configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): - a. Click **Client onboarding** on the **Navigation pane**. + a. Click **Endpoint Management** on the **Navigation pane**. b. Select **Group Policy**, click **Download package** and save the .zip file. @@ -82,7 +82,7 @@ For additional settings, see the [Additional configuration settings section](add 1. Open the Microsoft Intune configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): - a. Click **Client onboarding** on the **Navigation pane**. + a. Click **Endpoint Management** on the **Navigation pane**. b. Select **Local Script**, click **Download package** and save the .zip file. @@ -95,7 +95,7 @@ You can also manually onboard individual endpoints to Windows Defender ATP. You 1. Open the GP configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): - a. Click **Client onboarding** on the **Navigation pane**. + a. Click **Endpoint Management** on the **Navigation pane**. b. Select **Local Script**, click **Download package** and save the .zip file. diff --git a/windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md b/windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md index a387485cf2..6363ce613d 100644 --- a/windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md @@ -49,7 +49,7 @@ Area | Description **Alerts queue** | Enables you to view separate queues of new, in progress, and resolved alerts. **Machines view**| Displays the list of machines that are onboarded to Windows Defender ATP, some information about them, and the corresponding number of alerts. **Preferences setup**| Shows the settings you selected and lets you update your industry preferences and retention policy period. -**Client onboarding**| Allows you to download the onboarding configuration package. +**Endpoint Management**| Allows you to download the onboarding configuration package. (3) Main portal| Main area where you will see the different views such as the Dashboard, Alerts queue, and Machines view. (4) Search | Search for machines, files, external IP Addresses, or domains across endpoints. The drop-down combo box allows you to select the entity type. From 791d15cc291c47f9a0e3ba6eb02461e01a323788 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Jul 2016 16:27:27 +1000 Subject: [PATCH 03/54] add Intune instructions --- ...ows-defender-advanced-threat-protection.md | 34 ++++++++++++++++++- 1 file changed, 33 insertions(+), 1 deletion(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 7d56e93872..9c5d119032 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -79,14 +79,46 @@ Using the GP configuration package ensures your endpoints will be correctly conf For additional settings, see the [Additional configuration settings section](additional-configuration-windows-defender-advanced-threat-protection.md). ## Configure with Microsoft Intune +You can use mobile device management (MDM) solutions to configure endpoints. Windows Defender ATP supports MDMs by providing OMA-URIs to create policies to manage endpoints. + +For more information on using other MDMs see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). + +The following instructions will guide you on creating policies to manage Windows Defender ATP in Microsoft Intune. 1. Open the Microsoft Intune configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): a. Click **Endpoint Management** on the **Navigation pane**. - b. Select **Local Script**, click **Download package** and save the .zip file. + b. Select **Microsoft Intune**, click **Download package** and save the .zip file. +2. Extract the contents of the configuration package to a location on the endpoint you want to onboard (for example, the Desktop). You should have a file called *WindowsDefenderATPOnboardingScript.cmd*. +3. Use the Microsoft Intune custom configuration policy to deploy the following supported OMA-URI settings. For more information on Microsoft Intune policy settings see, [Windows 10 policy settings in Microsoft Intune](https://docs.microsoft.com/en-us/intune/deploy-use/windows-10-policy-settings-in-microsoft-intune). + +These policies are grouped into two: +- Onboarding - Use the onboarding policies to deploy configuration settings on endpoints. These policies can be sub-categorized to: + - Onboarding + - Health Status for onboarded machines + - Configuration for onboarded machines +- Offboarding - Use the offboarding policies to remove configuration settings on endpoints. These policies can be sub-categorized to: + - Offboarding + - Health Status for offboarded machines + - Configuration for offboarded machines + +> **Warming**  These two groups must not be deployed on same machine at same time, otherwise this will cause unpredictable collisions. + +Policy | OMA-URI | Type | Description | Value +:---|:---|:---|:---|:--- +Onboarding | ./Device/Vendor/MSFT/WindowsAdvancedThreatProtection/Onboarding | String | Onboarding | ? +Health Status for onboarded machines | ./Device/Vendor/MSFT/WindowsAdvancedThreatProtection/HealthState/SenseIsRunning | Boolean | Windows Defender ATP service is running | True + | ./Device/Vendor/MSFT/WindowsAdvancedThreatProtection/HealthState/OnBoardingState | Integer | Onboarded to Windows Defender ATP | 1 + | ./Device/Vendor/MSFT/WindowsAdvancedThreatProtection/HealthState/OrgId | String | Onboarded to Organization ID | ? + Configuration for onboarded machines | ./Device/Vendor/MSFT/WindowsAdvancedThreatProtection/Configuration/SampleSharing | Integer | Windows Defender ATP Sample sharing is enabled | 1 + Offboarding | ./Device/Vendor/MSFT/WindowsAdvancedThreatProtection/Offboarding | String | Offboarding | ? + Health Status for offboarded machines | ./Device/Vendor/MSFT/WindowsAdvancedThreatProtection/HealthState/SenseIsRunning | Boolean | Windows Defender ATP service is not running | False + | ./Device/Vendor/MSFT/WindowsAdvancedThreatProtection/HealthState/OnBoardingState | Integer | Offboarded from Windows Defender ATP | 0 + +> **Note**  Policies **Health Status for onboarded machines** and **Health Status for offboarded machines** use read-only properties and can't be remediated. ## Configure endpoints individually with a script From d59c8f6c41d7248bc38bb5a2d31a08a061ec7352 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Jul 2016 16:30:57 +1000 Subject: [PATCH 04/54] add MDM section --- ...nts-windows-defender-advanced-threat-protection.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 9c5d119032..c0462b7910 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -79,10 +79,6 @@ Using the GP configuration package ensures your endpoints will be correctly conf For additional settings, see the [Additional configuration settings section](additional-configuration-windows-defender-advanced-threat-protection.md). ## Configure with Microsoft Intune -You can use mobile device management (MDM) solutions to configure endpoints. Windows Defender ATP supports MDMs by providing OMA-URIs to create policies to manage endpoints. - -For more information on using other MDMs see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). - The following instructions will guide you on creating policies to manage Windows Defender ATP in Microsoft Intune. 1. Open the Microsoft Intune configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): @@ -95,7 +91,7 @@ The following instructions will guide you on creating policies to manage Windows 3. Use the Microsoft Intune custom configuration policy to deploy the following supported OMA-URI settings. For more information on Microsoft Intune policy settings see, [Windows 10 policy settings in Microsoft Intune](https://docs.microsoft.com/en-us/intune/deploy-use/windows-10-policy-settings-in-microsoft-intune). -These policies are grouped into two: +These policies are categorized into two groups: - Onboarding - Use the onboarding policies to deploy configuration settings on endpoints. These policies can be sub-categorized to: - Onboarding - Health Status for onboarded machines @@ -120,6 +116,11 @@ Health Status for onboarded machines | ./Device/Vendor/MSFT/WindowsAdvancedThrea > **Note**  Policies **Health Status for onboarded machines** and **Health Status for offboarded machines** use read-only properties and can't be remediated. +## Configure endpoints using Mobile Device Management tools +You can use mobile device management (MDM) solutions to configure endpoints. Windows Defender ATP supports MDMs by providing OMA-URIs to create policies to manage endpoints. + +For more information on using other MDMs see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). + ## Configure endpoints individually with a script You can also manually onboard individual endpoints to Windows Defender ATP. You might want to do this first when testing the service before you commit to onboarding all endpoints in your network. From fa69e44a10753d7db23213a824f34446ea0dfaeb Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Jul 2016 16:34:08 +1000 Subject: [PATCH 05/54] add hyperlink to topic --- ...ts-windows-defender-advanced-threat-protection.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index c0462b7910..61f6213dc8 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -23,12 +23,12 @@ Endpoints in your organization must be configured so that the Windows Defender A Windows Defender ATP supports the following deployment tools and methods: -- System Center Configuration Manager (current branch) version 1606 -- System Center 2012 Configuration manager or later versions -- Group Policy -- Microsoft Intune -- Mobile Device Management -- Local script +- [System Center Configuration Manager (current branch) version 1606](#configure-with-system-center-configuration-manager-(current-branch)-version-1606) +- [System Center 2012 Configuration manager or later versions] +- [Group Policy] +- [Microsoft Intune] +- [Mobile Device Management] +- [Local script] ## Configure with System Center Configuration Manager (current branch) version 1606 System Center Configuration Manager (current branch) version 1606, currently in technical preview, has UI integrated support for configuring and managing Windows Defender ATP on endpoints. For more information see, the [Support for Windows Defender Advanced Threat Protection service](https://technet.microsoft.com/en-us/library/mt706220.aspx) section. From 50623a9360192b52dbd435e7628a5e63a4b31474 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Tue, 12 Jul 2016 16:42:12 +1000 Subject: [PATCH 06/54] fixed typo --- ...ure-endpoints-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 61f6213dc8..73adc45bfd 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -101,7 +101,7 @@ These policies are categorized into two groups: - Health Status for offboarded machines - Configuration for offboarded machines -> **Warming**  These two groups must not be deployed on same machine at same time, otherwise this will cause unpredictable collisions. +> **Warming**  These two groups must not be deployed on the same machine at same time, otherwise this will cause unpredictable collisions. Policy | OMA-URI | Type | Description | Value :---|:---|:---|:---|:--- From f0713e4eb41aa2d65e908d68b3ead31d2d0376df Mon Sep 17 00:00:00 2001 From: jcaparas Date: Tue, 12 Jul 2016 16:58:26 +1000 Subject: [PATCH 07/54] update headings --- ...ints-windows-defender-advanced-threat-protection.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 73adc45bfd..870a028ee3 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -30,10 +30,10 @@ Windows Defender ATP supports the following deployment tools and methods: - [Mobile Device Management] - [Local script] -## Configure with System Center Configuration Manager (current branch) version 1606 +## Configure endpoints with System Center Configuration Manager (current branch) version 1606 System Center Configuration Manager (current branch) version 1606, currently in technical preview, has UI integrated support for configuring and managing Windows Defender ATP on endpoints. For more information see, the [Support for Windows Defender Advanced Threat Protection service](https://technet.microsoft.com/en-us/library/mt706220.aspx) section. -## Configure with System Center 2012 Configuration Manager or later versions +## Configure endpoints with System Center 2012 Configuration Manager or later versions 1. Open the SCCM configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): @@ -49,7 +49,7 @@ System Center Configuration Manager (current branch) version 1606, currently in a. Choose a predefined device collection to deploy the package to. -## Configure with Group Policy +## Configure endpoints with Group Policy Using the GP configuration package ensures your endpoints will be correctly configured to report to the Windows Defender ATP service. > **Note**  To use GP updates to deploy the package, you must be on Windows Server 2008 R2 or later. The endpoints must be running Windows 10 Insider Preview Build 14332 or later. @@ -78,7 +78,7 @@ Using the GP configuration package ensures your endpoints will be correctly conf For additional settings, see the [Additional configuration settings section](additional-configuration-windows-defender-advanced-threat-protection.md). -## Configure with Microsoft Intune +## Configure endpoints with Microsoft Intune The following instructions will guide you on creating policies to manage Windows Defender ATP in Microsoft Intune. 1. Open the Microsoft Intune configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): @@ -116,7 +116,7 @@ Health Status for onboarded machines | ./Device/Vendor/MSFT/WindowsAdvancedThrea > **Note**  Policies **Health Status for onboarded machines** and **Health Status for offboarded machines** use read-only properties and can't be remediated. -## Configure endpoints using Mobile Device Management tools +## Configure endpoints with Mobile Device Management tools You can use mobile device management (MDM) solutions to configure endpoints. Windows Defender ATP supports MDMs by providing OMA-URIs to create policies to manage endpoints. For more information on using other MDMs see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). From 0840109f7992f55fc9d689674d4b172fa951d00b Mon Sep 17 00:00:00 2001 From: jcaparas Date: Tue, 12 Jul 2016 16:59:42 +1000 Subject: [PATCH 08/54] Update configure-endpoints-windows-defender-advanced-threat-protection.md --- ...ts-windows-defender-advanced-threat-protection.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 870a028ee3..52b18cf2df 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -23,12 +23,12 @@ Endpoints in your organization must be configured so that the Windows Defender A Windows Defender ATP supports the following deployment tools and methods: -- [System Center Configuration Manager (current branch) version 1606](#configure-with-system-center-configuration-manager-(current-branch)-version-1606) -- [System Center 2012 Configuration manager or later versions] -- [Group Policy] -- [Microsoft Intune] -- [Mobile Device Management] -- [Local script] +- System Center Configuration Manager (current branch) version 1606 +- System Center 2012 Configuration manager or later versions +- Group Policy +- Microsoft Intune +- Mobile Device Management +- Local script ## Configure endpoints with System Center Configuration Manager (current branch) version 1606 System Center Configuration Manager (current branch) version 1606, currently in technical preview, has UI integrated support for configuring and managing Windows Defender ATP on endpoints. For more information see, the [Support for Windows Defender Advanced Threat Protection service](https://technet.microsoft.com/en-us/library/mt706220.aspx) section. From 114b2e654f333aaa4ae718dd3536f3c897209e33 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Tue, 12 Jul 2016 17:01:52 +1000 Subject: [PATCH 09/54] Update configure-endpoints-windows-defender-advanced-threat-protection.md --- ...gure-endpoints-windows-defender-advanced-threat-protection.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 52b18cf2df..b6443548cb 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -79,7 +79,6 @@ Using the GP configuration package ensures your endpoints will be correctly conf For additional settings, see the [Additional configuration settings section](additional-configuration-windows-defender-advanced-threat-protection.md). ## Configure endpoints with Microsoft Intune -The following instructions will guide you on creating policies to manage Windows Defender ATP in Microsoft Intune. 1. Open the Microsoft Intune configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): From 25749ca159cea055642425e85407452a21b0953e Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Jul 2016 17:38:57 +1000 Subject: [PATCH 10/54] update timeout to 3 hrs --- ...stigate-files-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/investigate-files-windows-defender-advanced-threat-protection.md b/windows/keep-secure/investigate-files-windows-defender-advanced-threat-protection.md index 2f82d6927e..c7e1a14928 100644 --- a/windows/keep-secure/investigate-files-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/investigate-files-windows-defender-advanced-threat-protection.md @@ -84,7 +84,7 @@ When the sample is collected, Windows Defender ATP runs the file in is a secure A progress bar is displayed and provides information on the different stages of the analysis. You can then view the report when the analysis is done. -> **Note**  Depending on machine availability, sample collection time can vary. There is a 1-hour timeout for sample collection. The collection will fail and the operation will abort if there is no online Windows 10 machine reporting at that time. You can re-submit files for deep analysis to get fresh data on the file. +> **Note**  Depending on machine availability, sample collection time can vary. There is a 3-hour timeout for sample collection. The collection will fail and the operation will abort if there is no online Windows 10 machine reporting at that time. You can re-submit files for deep analysis to get fresh data on the file. ## View deep analysis report From 7ca492f95fa8164da66880629a91496ba0db8f7e Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Jul 2016 18:51:50 +1000 Subject: [PATCH 11/54] fix typo --- ...ure-endpoints-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index b6443548cb..197683f521 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -100,7 +100,7 @@ These policies are categorized into two groups: - Health Status for offboarded machines - Configuration for offboarded machines -> **Warming**  These two groups must not be deployed on the same machine at same time, otherwise this will cause unpredictable collisions. +> **Warning**  These two groups must not be deployed on the same machine at same time, otherwise this will cause unpredictable collisions. Policy | OMA-URI | Type | Description | Value :---|:---|:---|:---|:--- From 20d551922b3ff2263685f1deeac219d641ae9cb3 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Jul 2016 19:45:24 +1000 Subject: [PATCH 12/54] update filed to WindowsDefenderATPOnboardingScript.onboarding --- ...ts-windows-defender-advanced-threat-protection.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 197683f521..d0ff0a4cd5 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -41,7 +41,7 @@ System Center Configuration Manager (current branch) version 1606, currently in b. Select **System Center Configuration Manager**, click **Download package**, and save the .zip file. -2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the network administrators who will deploy the package. You should have a file called *WindowsDefenderATPOnboardingScript.cmd*. +2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the network administrators who will deploy the package. You should have a file called *WindowsDefenderATPOnboardingScript.onboarding*. 3. Import the configuration package by following the steps in the [How to Create Packages and Programs in Configuration Manager](https://technet.microsoft.com/en-us/library/gg682112.aspx#BKMK_Import) topic. @@ -60,7 +60,7 @@ Using the GP configuration package ensures your endpoints will be correctly conf b. Select **Group Policy**, click **Download package** and save the .zip file. -2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the endpoints. You should have a folder called *OptionalParamsPolicy* and the file *WindowsDefenderATPOnboardingScript.cmd*. +2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the endpoints. You should have a folder called *OptionalParamsPolicy* and the file *WindowsDefenderATPOnboardingScript.onboarding*. 3. Open the [Group Policy Management Console](https://technet.microsoft.com/en-us/library/cc731212.aspx) (GPMC), right-click the Group Policy Object (GPO) you want to configure and click **Edit**. @@ -72,7 +72,7 @@ Using the GP configuration package ensures your endpoints will be correctly conf 7. Select **Run whether user is logged on or not** and check the **Run with highest privileges** check box. -8. Go to the **Actions** tab and click **New...** Ensure that **Start a program** is selected in the **Action** field. Enter the file name and location of the shared *WindowsDefenderATPOnboardingScript.cmd* file. +8. Go to the **Actions** tab and click **New...** Ensure that **Start a program** is selected in the **Action** field. Enter the file name and location of the shared *WindowsDefenderATPOnboardingScript.onboarding* file. 9. Click **OK** and close any open GPMC windows. @@ -86,7 +86,7 @@ For additional settings, see the [Additional configuration settings section](add b. Select **Microsoft Intune**, click **Download package** and save the .zip file. -2. Extract the contents of the configuration package to a location on the endpoint you want to onboard (for example, the Desktop). You should have a file called *WindowsDefenderATPOnboardingScript.cmd*. +2. Extract the contents of the configuration package to a location on the endpoint you want to onboard (for example, the Desktop). You should have a file called *WindowsDefenderATPOnboardingScript.onboarding*. 3. Use the Microsoft Intune custom configuration policy to deploy the following supported OMA-URI settings. For more information on Microsoft Intune policy settings see, [Windows 10 policy settings in Microsoft Intune](https://docs.microsoft.com/en-us/intune/deploy-use/windows-10-policy-settings-in-microsoft-intune). @@ -132,7 +132,7 @@ You can also manually onboard individual endpoints to Windows Defender ATP. You b. Select **Local Script**, click **Download package** and save the .zip file. -2. Extract the contents of the configuration package to a location on the endpoint you want to onboard (for example, the Desktop). You should have a file called *WindowsDefenderATPOnboardingScript.cmd*. +2. Extract the contents of the configuration package to a location on the endpoint you want to onboard (for example, the Desktop). You should have a file called *WindowsDefenderATPOnboardingScript.onboarding*. 3. Open an elevated command-line prompt on the endpoint and run the script: @@ -142,7 +142,7 @@ You can also manually onboard individual endpoints to Windows Defender ATP. You ![Window Start menu pointing to Run as administrator](images/run-as-admin.png) -4. Type the location of the script file. If you copied the file to the desktop, type: *`%userprofile%\Desktop\WindowsDefenderATPOnboardingScript.cmd`* +4. Type the location of the script file. If you copied the file to the desktop, type: *`%userprofile%\Desktop\WindowsDefenderATPOnboardingScript.onboarding`* 5. Press the **Enter** key or click **OK**. From e2f6806e5560529d1ef522f5b1c2bf326634f04d Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Jul 2016 20:29:37 +1000 Subject: [PATCH 13/54] add in table for intune troubleshooting --- ...ows-defender-advanced-threat-protection.md | 24 +++++++++++++++++-- 1 file changed, 22 insertions(+), 2 deletions(-) diff --git a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md index 7db942d7ba..b3617c8cca 100644 --- a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md @@ -104,7 +104,7 @@ If the the service is running, then the result should look like the following sc ![Result of the sq query sense command](images/sc-query-sense-autostart.png) -If the service **START_TYPE** is not set to **AUTO_START**, then you'll need to set the service to automatically start. +If the service ```START_TYPE``` is not set to ```AUTO_START```, then you'll need to set the service to automatically start. **Change the Windows Defender ATP service startup type from the command line:** @@ -192,7 +192,7 @@ If the service is enabled, then the result should look like the following screen ![Result of the sc query command for diagtrack](images/windefatp-sc-qc-diagtrack.png) -If the **START_TYPE** is not set to **AUTO_START**, then you'll need to set the service to automatically start. +If the ```START_TYPE``` is not set to ```AUTO_START```, then you'll need to set the service to automatically start. @@ -330,6 +330,26 @@ To ensure that sensor has service connectivity, follow the steps described in th If the verification fails and your environment is using a proxy to connect to the Internet, then follow the steps described in [Configure proxy and Internet connectivity settings](configure-proxy-internet-windows-defender-advanced-threat-protection.md) topic. +## Troubleshoot onboarding issues with Microsoft Intune +You can use Microsoft Intune to check error codes and attempt to troubleshoot the cause of the issue. + +Use the following tables to understand the possible causes of issues while onboarding. + +Microsoft Intune error codes and OMA-URIs: + +Error Code Hex | Error Code Dec | Error Description | OMA-URI | Possible cause and troubleshooting steps +:---|:---|:---|:---|:--- +0x87D1FDE8 | -2016281112 | Remediation failed | Onboarding
Offboarding | Possible cause: Onboarding or offboarding failed on a wrong blob: wrong signature or missing PreviousOrgIds fields
Troubleshooting steps: Check the event IDs in the [Ensure the endpoint is onboarded successfully](#ensure-the-endpoint-is-onboarded-successfully) section. Check the MDM event logs in the following table or follow the instructions in [Diagnose MDM failures in Windows 10](https://msdn.microsoft.com/en-us/library/windows/hardware/mt632120%28v=vs.85%29.aspx). + | | | Onboarding
Offboarding
SampleSharing | Possible cause: Windows Defender ATP Policy registry key does not exist or the OMA DM client doesn't have permissions to write to it.
Troubleshooting steps: Ensure that the following registry key exists: ```HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection```. If it doesn't exist, open an elevated command and add the key. + | | | SenseIsRunning
OnboardingState
OrgId | Possible cause: An attempt to remediate by read-only property. The root cause - onboarding has failed.
Troubleshooting steps: Check the troubleshooting steps in [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](#troubleshoot-windows-defender-advanced-threat-protection-onboarding-issues). Check the MDM event logs in the following table or follow the instructions in [Diagnose MDM failures in Windows 10](https://msdn.microsoft.com/en-us/library/windows/hardware/mt632120%28v=vs.85%29.aspx). + | | | All | Possible cause: Attempt to deploy Windows Defender ATP on non-supported SKU/Platform, particularly Holographic SKU. Currently is supported platforms: Enterprise, education, and professional.
Server is not supported. + 0x87D101A9 | -2016345687 |Syncml(425): The requested command failed because the sender does not have adequate access control permissions (ACL) on the recipient. | All | Possible cause: Attempt to deploy Windows Defender ATP on non-supported SKU/Platform, particularly Holographic SKU. Currently is supported platforms: Enterprise, education, and professional. + + + + + + + > **Note**  Policies **Health Status for onboarded machines** and **Health Status for offboarded machines** use read-only properties and can't be remediated. ## Configure endpoints with Mobile Device Management tools From 238f602ddd2abeb2fbcc916d1b98d102e86db275 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 13 Jul 2016 14:38:19 +1000 Subject: [PATCH 22/54] fix table, spacing, add new subtopic --- ...dows-defender-advanced-threat-protection.md | 18 ++---------------- ...dows-defender-advanced-threat-protection.md | 12 ++++++++---- 2 files changed, 10 insertions(+), 20 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 7ccf94ed12..32b1155571 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -106,29 +106,15 @@ These policies are categorized into two groups: ![Table of policies used in Microsoft Intune ](images/oma-uri.png) - - > **Note**  Policies **Health Status for onboarded machines** and **Health Status for offboarded machines** use read-only properties and can't be remediated. ## Configure endpoints with Mobile Device Management tools You can use mobile device management (MDM) solutions to configure endpoints. Windows Defender ATP supports MDMs by providing OMA-URIs to create policies to manage endpoints. -For more information on using other MDMs see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). +For more information on using Windows Defender CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). ## Configure endpoints individually with a script - + You can also manually onboard individual endpoints to Windows Defender ATP. You might want to do this first when testing the service before you commit to onboarding all endpoints in your network. diff --git a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md index 889889c973..ef2eb5a20f 100644 --- a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md @@ -360,7 +360,7 @@ Use the following tables to understand the possible causes of issues while onboa - Known issues with non-compliance table - Mobile Device Management (MDM) event logs table -If none of the event logs and troubleshooting steps work, download and run the Local script from the **Endpoint Management** section on the **Navigation pane** of the portal on the endpoint. +If none of the event logs and troubleshooting steps work, download the Local script from the **Endpoint Management** section of the portal, and run it in an elevated command prompt. **Microsoft Intune error codes and OMA-URIs**: @@ -370,9 +370,9 @@ Error Code Hex | Error Code Dec | Error Description | OMA-URI | Possible cause a | | | Onboarding
Offboarding
SampleSharing | Possible cause: Windows Defender ATP Policy registry key does not exist or the OMA DM client doesn't have permissions to write to it.
Troubleshooting steps: Ensure that the following registry key exists: ```HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection```. If it doesn't exist, open an elevated command and add the key. | | | SenseIsRunning
OnboardingState
OrgId | Possible cause: An attempt to remediate by read-only property. Onboarding has failed.
Troubleshooting steps: Check the troubleshooting steps in [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](#troubleshoot-windows-defender-advanced-threat-protection-onboarding-issues). Check the MDM event logs in the following table or follow the instructions in [Diagnose MDM failures in Windows 10](https://msdn.microsoft.com/en-us/library/windows/hardware/mt632120%28v=vs.85%29.aspx). | | | All | Possible cause: Attempt to deploy Windows Defender ATP on non-supported SKU/Platform, particularly Holographic SKU. Currently is supported platforms: Enterprise, education, and professional.
Server is not supported. - 0x87D101A9 | -2016345687 |Syncml(425): The requested command failed because the sender does not have adequate access control permissions (ACL) on the recipient. | All | Possible cause: Attempt to deploy Windows Defender ATP on non-supported SKU/Platform, particularly Holographic SKU. Currently is supported platforms: Enterprise, education, and professional. - + 0x87D101A9 | -2016345687 |Syncml(425): The requested command failed because the sender does not have adequate access control permissions (ACL) on the recipient. | All | Possible cause: Attempt to deploy Windows Defender ATP on non-supported SKU/Platform, particularly Holographic SKU. Currently is supported platforms: Enterprise, Education, and Professional. +
**Known issues with non-compliance** The following table provides information on issues with non-compliance and how you can address the issues. @@ -383,7 +383,7 @@ Case | Symptoms | Possible cause and troubleshooting steps 2 | Machine is compliant by OrgId, Onboarding, and OnboardingState OMA-URIs, but is non-compliant by SenseIsRunning OMA-URI. | Possible cause: Sense service's startup type is set as "Delayed Start". Sometimes this causes the Microsoft Intune server to report the machine as non-compliant by SenseIsRunning when DM session occurs on system start.
Troubleshooting steps: The issue should automatically be fixed within 24 hours. 3 | Machine is non-compliant | Troubleshooting steps: Ensure that Onboarding and Offboarding policies are not deployed on the same machine at same time. - +
**Mobile Device Management (MDM) event logs** View the MDM event logs to troubleshoot issues that might arise during onboarding: @@ -399,6 +399,10 @@ ID | Severity | Event description | Description 1819 | Error | Windows Defender Advanced Threat Protection CSP: Failed to Set Node's Value. NodeId: (%1), TokenName: (%2), Result: (%3). | Windows Defender ATP has completed to get specific node's value.
TokenName: Contains node name that caused the error
Result: Error details. 1820 | Information | Windows Defender Advanced Threat Protection CSP: Set Nod's Value complete. NodeId: (%1), TokenName: (%2), Result: (%3). | Windows Defender ATP has completed to get specific node's value.
TokenName: Contains node name
Result: Error details or succeeded. +## Troubleshoot onboarding issues with System Center Configuration Manager (current branch) version 1606 + +Review the issues in [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](#troubleshoot-windows-defender-advanced-threat-protection-onboarding-issues). +If none of the event logs and troubleshooting steps work, download the Local script from the **Endpoint Management** section of the portal, and run it in an elevated command prompt. !)$BqV+>}UwZ_m+mT|0|q zpDe)P8OvjRTTz!bpU>AG;hoi68QRLi$0ycPd~>ED-!31Lgy88*YmJ@UYuA9L(}bMd z@lcBBg95j3l5W8R!{FB7r0)?)sjk_lK;Mgnk-8=n#$pj8cigH8)dp7 zW6mD9tCSd``tjTg-EQ7nvik!*T7R04H?O0&YYj6FZlKYhRKVeI;NXVIqJ*WvPDtmG zygI4bxYC#uS$1Hz0vhlP2u3Kqa%+6c&&6if5a_K$s<`A zBVUo4exy<6Z$rXr1Fh4I;>%5C14Idj1fnQnwOg?&)u>U^W&D$LS-pbuR|=s|YaDh5 zlGwN~E86!hiw@QDx(bbH3Dux04oU*F>Iu{@!NqQ^S6%4M~!a0EH|g z19qbwukd8vTCtVHc~3L-vz3JYDHvC!)353cq}+nW{vzAKt|Mv8bFAqX%kz&-=JU;C znH2>p=U^Uq>CbevC-dB}7n#3!58uArAH7<{VXwiV0;ndxpc?zlflJ0A-D-0g@#Znt zH|rc3Np5W4zZ@ZN@6WO%A$a=WBibp*%>e>{I<95qV^nsyvj-)}a^vn<)1g>;oeEKH z#4I`y;O)lNtP9xbffBfOB@Ykpcv?rep!sPfx#dQsBvljX^^cnNNRKnk@$O_q|fT59L_AjlH`hj zh}QX^b;85iWeTm^bDtiSaC8PjLq(P9A`-Hiw$(dVFnv zxmBYMAH<|FJ6W=PCi?s&DznmXi+h3xySYJe1BUu~%uS=T-D0H9*nk8GlAXGmY&QI~ z7+YHp3ez?s40(i+-69E9=y|47Dqnv*m#ZE9ICVIW0V5xyUuQ3lgt(Hnc_FI{^z1!f zhPj)BjD)Ga9@*MdKBq{=-Q9yZD`zoBHI8Uq9jCKOu!WegD!dpn`aw>AIiEK_uOY@& zM&lez-!Vx%IXHs(-%sQ7+EKKTi@20ufj#sO>I>@9dHKPqxZXFLFCNpf?Mxkg{@jP= z2bM?<16PjkT+}jly0Ds4E?`89j_%LEa4L z8_%Z;UPl`EHZ!6dHDA^SBlWe_*mY4nF|I%FFaLlKd%f;AQnJ|j(41eH;ys3!s zEM#|K49~rBOWu5L$XmlTHXY0+Zs5bTY35R5Z7^UknJ@$G?ixy%^D>HJyAkUIR9L95 zHzEllmfRGkf0Idkd~2$*PmpCF#*4!uQ5$optE;_P?%R+h8jN)q8g4CGD$ecXXq7K7 z_K&$OsdH3Eg7r4m)+mT-7YaZ`Y%KbkkI47yM#q@O9Ra)5OnsdZJ7Bk%sIR}ZU@#kN zsWDn<9Xo^v!dCIs%(p4JD;c5qFy&PS%oZyI4C3X{TUfg61Ju_NxPB!Kzr?4xKgkKy z3B<@1%siLLqY>eRc$*Q6U+28XBtGxxiX-D7-&`!gv-%2RyJRBjFR*ggSvpL5lU_Y; z9cUS^Jk9FYSF=5HG>_chg_$ef=VRdkA{3RJzgCXDLzA{p+m7L#ow@h5b=*C74dH6A z`^OU#u$`UDe#9PF$MLLs{QFACk^^I1Jr?^7`7lvmQ-#?hf=4F|VfweTn5B4-02d`u zU4}CLfgyanVk)zwv9ytFxP~Xtug?IU?6Q`X^WMZhxG&E2=O`$xCEU?$Omf&T)Ys8q zbu_!wROj*ynW@KMu^=JQP+yP9($v4zVT`$V1RpPZkN4CM6Q;D|5*SBvcn>=I9cIgS zE2;Iq&Z%n#f^8PSiR6yaY})oCKgEa)>5~LjBegX()B(*uKXz*a_4THkWeDvtp63ot zYBs**FnILSbZadj*^`M;9%9+o-yz*Uio1qC#Nj!g@Zubi&H-AKk_SB=9m>-W4`s#= zH|k9!GU;9t+jpg-c0bF%`3B|q`*4%&7;3AjQ~5FSfeBprdf8ISp}~gOP|NmRX#{q8hS+B3P}|K$>J1{zEj1;ZnY#LVOjZe9^e`UpxQj*a zO(wr*9O`O;sQU*Jo!pJ}J9qKJ&r0gf9H*>aLKb9fW+Mhe16IJZeP`MWU$AuX57@_! zMj_cS)SGVl)L0tou{k8lat`q6cc+Q&7(h)<8doescxFU2Xhk|lg|HxHF{^_fp-W&7 zBHh1d^}>bI8|bytWYMRQv#96U6>HF<5s;@N`#DikSoQj9!uK7xEJUd-UjnM z6G)%;1#ixCBG$KXo6iPjuza{WkH-S2HklZb#hSShFmr@n|GQDPq2F1al-!e z1O0p4Qhs*x%wg3ti`jJSDH1dirB~Bfx%_8Ziw+zbKiaphVZ)XjqM}=4C^^fCvb%V8 zbOO%G42*_S4sQ4f_bd+_f{KXF14#~Rae%%-v%qZ%Jp97w6yK2$KX+XG+S4;B8e?TS zHiaLi*2H#Tt+Pyn-T#3i6|Ex4yLZQc+tk;n%(!qaGYaazq5d ze!oq4ZVTKdYH1Y|L1L%&l%y1TbT@_$?n{K9D+1u+8$e8AJmEpUv~GVF z3BfMZ)tFH_dDE_a2RbD6q*JI1hB`B{LQk9UwiIptg4BjMUUdokVB(F2*1iLA@$K<(QIo%W3Ev$u z^Z4se&}@SS*H%INKlbiAz>2DU;Q04;YD2)v5eVk>rnh#)8mq97dxcD*PV zU?YeEA_&s4KKgy+bp9d6`b-MNE7<`VAdI?~ciswV*Nw5SP}O zf&B-NnGk{wF!+X$nw?ErViZ9^5wy$6CM7-`0~&&3Qpm{2AU-mR&b|8(tZBjGGLSX! zB8Cp`Lw0f;p?+qPx(p)K-%VAclfZTtaQ9so5v&C;5to)i*M0-&)-D>O&WqTzj`SHa zkc=>26pfq8Bc)h1p=tyP zIb3ngATrWYhz16}xn4CmpaO){)mBE+T)EqizwIlr4 z5F3L}Fe%yDv`>k_OQXUsES`+)91l5SEZk zX8UZqq=w^aX~7uTi7T$Ykc`weLiE|GYVNqK6B5)j>n)cg>VD+4W&648;nAe||NL#tK~c2J?nG*A1V5D?P@98DZktV3 zax{Kk0d(j$fC!zn^|<97LP~lj**P6a_H|L?@S@WNgBd)q3rSItgoQ`bu0uA7F(H@& zlIYq#9FN0AP;6`bso7biB}QUWsR)crBqO^6DN&(loz1j(Wc0qtT=l@MbWiXD45X!J z5a})9FoclNV*q_p0q`wt@CuucHGyd3FV-3Cr9d3sOj|u|gyE9_cwZt3L_{XNxGba(Jr4dQe z5*V98+qiH-q7%sMm`QY)A1a*}QOTL)il-g^9a z->z*EfxbROCuWk}K8+B6s4Y24qr*V=p*JzSYYbYiK$6;bpnaP-d~^_+noWn8Py(Y8 ziHS`hD3l1eEJDav` zqA;sf_(#N(k)2I^cqmbcDP&}&5grgoOiDX4GgAoi(qr%sCpEJJsqxVyX7r&${IUPt z=qzHqi#gO7$Cdxd`PE6OKknCs+q{BfNo(64U$ulRYe~D{I!0dG3lm@pO{P!hbZqt2 zxCvp%t+z3tT`-_0wbx)`^;T*vZX!Eh#636l#SD0bM3UYyo5a{q60-WzAvoium`FrO2ubOgq^HH>t5@S45<~m!jwDBi{bEL_Ul(rs zNx^sT@$9_CH2bxoT}a>*=~4Pz+mHV>@b}k+ z+tdahV$-t7YM(-ox%D5{?Q|0qo5PTS9SJa=Fe)M_nl=e(L`Q^^)HaQzxES=33@9jC zZ<3Nz2{XEBc6iX5UZS&QxeE9bRmUO?OZZbl4EV=miO{TO#!FEqdZ zfzv{+-^HxCAJhKoF$~QTXCH*~+pbUMu(UXZ@ef^c$_25`Wm5TiraZTff%lA~cl?>H zY`E({Jf~%E#_s7j8S({AS@crIyzo9>LT9-AUHn&$4LR zP51-O<|>X>)L}1N$0N_YNZjx_j2;|^DJTYW!H3*FW+DBae4C5n>RCK-8U?A>Fn7ub z!cSZ200o!Rg<7jat2woSWwOVOM^>TLYyaoav|kr)6aE=Q!f=}WkxI{kAP9nRKHBo( ze7-HVVb&U{DcDAF)D_Hl@Jgb5PQ3$oJ|+y!`#<5KM?a;*rR`bsc|Lc}oyULLoRFFq zt>VU!Q%JsR36m~q9Wq+8c@ZNgzt6QVeaWTqD$15mX5b5Dy!Pr#^osc@W01+;_&Fc1 z%Ofjv>1*U6X>KF^>|4gE+h#&}pAP9e})SiRr z)u{^^nVDR8^LSn!f7M?~7S2y@wygM);>aG{Fnk2P{0{QT*Sk3JEUw$-Mo~cWxPJLj zl^Wf#v0X>=kD$?-@j78hQqA`FczE{57~6CqBRLAA;^LcyPw>`;dOG&)P0iPHcy`GT zSR4&}vG55VoBl2h>JY+|!@Tj@LO$DC55WHAuQLD3E!b_4Y=$0?xXi<46b4AMkAwcxq`S`eFCORjGD-41l2!bF8XIS~R_2f1;viGZ(dFGj^EZtOwqiz@9 z@2dU-pKhJW%Hs)S_~a?vc~uuqyu&7{?;Xszz8&vBc{TS;|A50q7F-4+!2xD0jg2H- z^bm7LT~4Upj>GLocv#@EPX;k)Kq7^C+u6PKTXNk2^z7OWjl+QqsAUh$RaIyb+maac za~IOuP=`7w6mP{slRb#r9-Ya97bfv*ipPP+FP-rd#$nn#l^broi?4F){z@|nXNb7M zAP9mW2!e1XDHVM1@fMQ%-O0FHJLB=lsI?m6v`_KP(q#GbH6#DI}Y*wEoY;tZf9_2AlTf1Y&3S+^OFsNS-QH3#Y# zI&&Dw$v=faH!bD$ zUFDd|_Y%_S0=jkTL1+6#OkXmN31$5WZjp)We=&nP=#iaHJkrlqBeWq|T+mM9-i3#m zaL)yp0FR>JcG$5xAm)PMjOw+Pm!^ziduk+x_^#a8XE+abo51X`qv_f%4sElU&iCIy z_aLw1%auHCT#5!={XyRPY7I>d)#T~ha^-;ZzqyTt)8Vwvl2p0lQx?9tk6}-bqf@{M zRg$F&UU~Rwn!DY~nCrTnm*b+uEJ=bO2!inUIX`Aek_iqD!ctj8QH7nj%y#&lIM1xR zk-fPk_(UfX7wU~-ujf!<3C8eL;)7e01GlA$!r~f&liCq%`t2T+y{3@Oy9;q@eMrgd zL_%O|AFT4wkL)e6Aj<~g(z8j8(o(qlFoxJ9q62pMs{!6MwL}TYX~K~YX*UapW|yNEugZ+M4KdU z4s72=MWYM<#4Nfd|MK?~vn2g9oz{fm@Tvto@aTF*eZ7Rip(i8^at$9$e+g^WW!!dg z=6P8@T_g;GAP9o+_c=cjhF{fT5dI&LF#I!|{bO`x&DI7CC!Ox3<4(u!*tTukwr$(l zv2EMzaL2Z7+j(=}=bY#J{=V-R`_~?0tyMK^R!!Bsu1s1&F}@_;%A^`qD^o|~F<~m# zGe&hT*XQRPg~qPQ^9BQ#7QTESaP=+%u6xwD=OSr3y+h6d*7fx%C-Iz-iH+9HEq}3$ z7rXZgn8n$pE%q%+c+lJov=YH)Hmv!grIvA77SrpB9Z#XLnQ=FXDW#)hDie@Q`X4Z- z@7uUruDx4j%RLR#&@uMx`i=>9q|MRRDp~?9@4q&!*Zd^XCytKcr?bpAGT*;*RQ3!t zBB!iq_AZH36D!X5HW@jn*3?D*@zJ5DX^;3&2g5jd{@86+Q>#g?Q`ZsZyhlPMZn)a% zM69{%%%~i=I>L-8n3($(_LLROs7!1vR2Xc=OMdUxf+%K{kS{d(CC_J@r zMin1U98N?tA4ux_t*R_fsW(LQx^PV@m02T*`|%&ZMLyOjZ=AS-xap(3<5?o?#uY(V zRYEhn9>-BQ!Kl;%GHCnHmXF_Fy^F@&mx9?OwQ!y!UuzbK!M_>|XN zz17!i@5>ZPs#Lxu!bM>iCI%;T^`SdhpwzAS4jb}T&(hPfrA-~;9G;s2cIG-pI=%X2 zbf6*sGlbsmrO914B*>8Q=+h<5j=0sZ^^2Uwgb@ExJ>dS0Ze>+L&uB>ClI~jJ>+rgc zU*9i&;Dy%}TSK6cMp=#O39I^gAaH-s+GUH489sj18n|uWOg(80JWc{ZFCGsboo&+| z*zL788$|!2E9|!=Z}J@03xNz!@0HgO@p2*(xtCjW-wfz~Z6PhSWQ{*3`d2Vl)%ip8 z#Wvbf+u0XS$l!?^fVm9Gy!R-OCt-rq^kvGJv~++gz`lsEZxDm5xh%i z;}bH4bZt-5VEm>FObYbnJ*HoKj+b;&`z2;ccBm}G&fL)#?-lAzAHJEJV?v&Ja2Ny^ zW*jpk{<|NZ7O&#F&GiGbmr}*_FsMKZ58OTZuA!q z=-c4cikCE%BkYm}!e|BVo8bZqUlUzOdhsm|R5(m2^~AD8M28EhS99FDDtGj*OuYOm9&@w<^QV$w_m zj<$!JTUda}hDSJ3eBuBij;_mC;}=>>)S~dl@P)7Bi~{Ulq0)shGP4uXh2dkW75gsklx@$Q@Ekpc%hzVX6Arr&BsVal1`12(QXHFn4e-;8MqCO z=~d+xdfluU+M}0SyX@?FgHb#lK7R2H2`g%TEEvW;&(bu(Pe<(Bxf2u>)CsWvbC&YIn3`kzml*XsK#6>7bV;a~l(5Fu!x*ml+ek`5 zu~F~N13PnL0+4g~`C^GOqBm8uG(`Acc)^WDa+J{N%o|J_c-Cdggv)1hr%OQ5#UTGM zFrkCx+(P~NyC!N?5Ag%G$8Wd*m=0ot-}~3xte?zm>ZGAWiJX_eJfgtBoe=~y_e(Ly z=aLWV+qGq+0Uwnrh%j=7CdIo1ZZVUR`B25NqW`s36SRrqJ-c?>;If?m5O+$4OdIyk z>i0NRBwN|k`ick0!N&ok0x>#2SWrXphbu?H2mugca``MEEv9D9`J`nAHi>qv8mBtL zaeO@tv z84!ZK|6O=tvKC9KhNTSBFTmXO8QuV(pm4RsP(#($y%7hiW<&NPHxKXX*oR?|A2aDU zFE6t82P9b&r%(MbY7giIl-F83(O;Pv;nfz{Iu#?uuE1u`?oV3fNE!kP3R8(}-)z@8}@7nq#9 zxD2&ZEFuK_y0wjz3JY{HNv=nn_w+{#?R$koM;4b!i1N@l?oZ7Qu1!%RBALC9-|T? z!eS-FFdw;jIakB^dO#ou!NdWE<%=!*{fY3UHCxLq%k6ovCPv{eez0^h7ef2_tqLB_ z(dax<)kqAf}mFShCO2CM2Yb5fjCO@<>fMkp7Vt>tU-V^%rl1=6N$~rZkceo5?PZ!k3zy zI~&xhe(6y!q+V4{Zm{}S_&x^_Y($&b2ayE zH!(300U6n;sqdHcpNp^A7^(>;?bl-m|2uC~LpAQ=>XiuZ9$W&k-{E-~v)%X4qW=@j zrz(_mG4!!&Rj#OYhV|q!tk}~c!hfaNt2QH>1YD?GU23u-A(HBr{Eh|d;dT-G+WIGj$@*76Ff{f7S-*}v3cgWkN(5PJ!~`f+6vZS9(giJQ{Xg>lR% zOq@ZsQjhKX?{4qy1_V^%((F|-2|Wb`ZWosA+ZN&`Yk3d|yb|VvH+kO?kKPEl9`;T5 zTfozvY&_EGTqDVB98K;@pvY-haS_ClH(@;BQWo@l069LZ4xk?Pm8N#Mqx>LEBLBD0 z6E&TqMGX6i<7=!22z?IzpiA|4=r|eli0cx!M~KS6td2g@-QXOvilRJ2)DWX1WYeO7 zZGMXzJ{$joHgZboD_FQbklWXhH-3~TpsumCx-2c%o44n55CP)dKw`Zoyc-B z%?CPmCIT;8K@PK+C{;U<+PVGHI`HE{xcdc~9gTNSWv(}w62CXV5B!=-zIJgj_ zHL8yv+7j)J5~uAB#jYwBPLXl7P1uqAtHJRk6S)RrkJ_ovx#4K57n5RLpfxa#%` zK>Rb7CIh#h>wh^Kc`rx^OKQnjy>3r!Y(eunzqh=6M=Vd&Wap?s9t*Td&UZ!`Kv#Iq zmM-`vThJ+uq{t~*e#LME#U=V^@YOWU`HxLDu**#NRrfk zC2kol&~f`C%pryQ9v!ERKI#&+bJ)8W<^cl^s}lb-&%^CzgAYsl`Zs`vYa|r%*7YG( zqI$rJ(GIgsPEZq`phj<=FOU!GRj*#3|pUhF|3 zcix=0%6NN;#cuf=n19EL-NFka#x4^|A@q;M{PWW!jyXdE7)ebvOC@a^L zd1%t**FHPG<|4V-#F zi;cFX3@oDAFt%}HgJ7x9wNax?ew5~`W5NI8S~jyboGq$EN?esSQ*^~*u3!e%e(w=& zhvT{$(HhH}4^mV_seS8HLYh~zExQvmxhF1s;7F?6;M3BgQfdt$Re7GpBY^-0FRHaw zW|WnAQGS|IAyY{UzBk?m7=L*K@srNK4hho7gVies4e2w_W&eqJwlfYL*<%SIX=tkJ zu}8@4Sg}aM{g*Al|NdGE_U57|UArTqShO-(1+2y>Q16z8R1x=o-^#7(Ki>%&|Ia@C5`Dq{ z`IIQCqb~JN<1EjX64T3YLccyp{%89$^l(PC4;3IBv2o84ys{;Y{_Xvanh- z9cfv^;LKhxC>9Tk0o;M0Dlo+wdGJml-n#cM^xqI0EjK-XULL_|I*6fYB+(dI_(j15 zRPV%DhlOGc_il>8{FkAJHQ>%0p+O>A#O4OC(g5{$=c($;PCVy*uRSAZ?RWFj=d))y zN>w>t^>|UYHkjn>J3Ao?*{{2~2W7W5Uv_y%$ zfgA)AXCPuKNA}Lw@-}C|tlyS!+lJ)-#x5l%i}a)L9yA<(JGNk95no11KeL$dyyx0zyYFW({XA zyUzD7)?j2uu$x4dfxZ#DeV?5FOXPOZg&t$I{nmr%TLS7(9E2Eq7S|uQwIO_qUmwQg zLI@i3$Fdq45yJU+fBtM)hT#9B^@klrMZ{lBLAklPCL9S0GgDK(gks+zAi%cFs_?s4 zgdHuvahpSn+)&Vp01-|MSU*w+<2ujSG@-e-9Zyn%(Q8&18!cM+9%(9OCnGr&71qv!C>FZI^`-2hlw0RWUVzTQJnJZq0eK zY(qD^J9r*D;fw|(bzSSm1>oaa+}3Y;nq=Thv}k4VGuDy^ z1kRRSLjC>u;ZRZJ%AbBCn{pRA`7qcp#%r%iERK3?yFg_>HYmn=l%%wU%b!$AcYwVC z5_2HdqRu9%{+8bMF21Q8xH{KfREkA@wIKw&9O`l=&dtyEe|QD8+43%fE3^@Pf3~JG6dNZzmaFIb)pvor)aM8GjD$m7P*MTj zOep7Uis^A9URqgRd~&1*hr=mo7cc25`fJ62ZuJxpry(1VUmIv%?w{QakHK4~TzjdD zARPtoZH&E@TUO#5$Bvq)v0;2C5D|vX9BA5yo55UV$6r1>BjR{v*YLfEaTmf~0OCri*#2(3hYV4WZi$L91;>bb-kI3A{}mWT zrM<}==+}P9=IQEuC&v8odTW}{Nw*?FMrzSd@dsqRR!BTa`~jO<m*3YK?H8EthS`tZ~ouJEz+)_0j!O?TbFT5 z58H~uo!-89s7^(DvubNR4~Q$8bb&wDOKIwD7u}uDC<;nia13;(s-xSBL%!m-IKqyO z4iMY9MB9=AjC`A4#n&XCtN)ABcP%UabmxE!P<*4|%4sPjW#{E3*foG`@E@(hHAaQy2Cmx-f{^rL(}yt?`la<*(`c)c!m z9U}b7H3;#{YXq~}Hhdyi>gY|O=0<3c^OkrY4xZv*4cM|AvDD>4)9SH6?=qum+<8rg zJi*hw)^8oqx-*mYl%=oPI%>?|{SjiR^~~NJnKm|edYS$=?HiDc`kh4m zOllsh(o&FpU=}xOm1i#&l3{uE%y=>+zQufLAkx$B2MKd(u{Q|=Zc75R4chpjM>=oS z;V2tC-EphSa;*uxMzW89byQSRe!A<4A3{fmCvmJTfaYtFwP6yZ7@&k4~E_P4J z@@2ipr1b+%)nBJKK|p$AwY2^S=4Q=FCGd+^VUe`4xl6wFn##KCjr_o~CI21v~w`S zHF^(eSYW~=yzn&&}>Y5SSFkwKy-E%<7tYK@~^B&_e$l7Y} z^YO;CDy=Tcs{>`)Vy_Eh;Z_&hukDMRl^0PngT2skfRM5F<*;bHT1UOS-k&((K`EFSs$1SodFf#$L{>ciNIOOxytzozw0}G^ z9*A?}WVeHSMw$H7jBKY*M$fO(9a*(lN>3k+Q`=3U-Q^P3_)taji3T@ufEA%Qv2DR4 ztt3&=VhO!cSc64U;VRFBJxYq@)Kc;-*8_6dgXhkLA$B%JzrJIw@5LC zqB`R0XG@X$YKIpY$e$!~BX#=_N1nq5hJk2HhAOcur%;2OtZ2U5>6?2+99aYA;l?xf znX+I^L?I-f}ESwOCnBd+Beuu&^`WqH^P52F0$SSJ^h#!hbYO?ZVmMdE}?jbMcFr{A|ji=m^ zSo&K-heU|mk%Hsv??Td+%5lPBoSvt6GAb%9?joa!)c|m6uJ%!Rel5I{gZI1D4w~U} z)1}==jjC#~rbNW4SD#_MTwsb9+REqk(V5PZ4s6oi-g9Zb4i>L15}?J{ib6#PNHY%F zemDRLG}G<*an>sdWJfDH5-r8rLvh@|BLoKf?i5tDAsF!f)OKg0wg5v(4)*2MnX8Lm z86lR$%XKZS#GSmO6APyytN&9pn z7rBuV#h%ebjDeB)6cVB@3)W&*Vk)?M88Rp*pk~AnCoW>^2!po)ezjCuZL`iTPGLTU z_7)Zf%h6RyPQ`?TRmnG#@)HmS+$`x`Ruz|XV<`G-y3^|;9Y8fNqTbvILcvah%NPfi z-M_K+!7Eep6s^_XG;6%n$@!K|3v#34KWy5&?wSC$@BHT97Y1|vV~ue^mDUxrq`I8X z2#Sb)D6+jZqpvXP=$$|;^zMt~$^sxSH|t+9gZLX$qDD<*ciM{5%>b06FMSxMJ20gL zM6oU@0VkQ>d{5T&Y~p;8yZ5x5TJOOKvVoPixL!`10x|iQA5IBdnoN{XF9m6M3oS08 z23LERTe8|^0-r9v0DC_Iy6!g>f{=)jtD|pXqLEKN=ftNSkT)y}ZN`xG+M~epCu zFhN3>-Ma6P<1!}i>*Gi$iQ9^if`g4sw=%D3*Tr5cry`PXldsgSs*n5R1qBf;%%j=s zJY`d-4c)A#1@actr%okGJomB*20*Iu+Fg{bCV6dT;dm`RlN$o&u0~i!b!_l_gx12W zbsZZ0gB^32o-mj*v=Cv7zpIx0+8To&?wEdh2!Rmp22`2@V=6B8&!eMg^DI~~we1;m zdzHJD$%nIRVgmNOJUjRTc5}(H+7=LvSv60t-(bv7ZkTT-C~iw96-6PjL^Um0!I9^Z z_vNNbeqkg_hCWVi))d-OQQUgAzCKIPE?nr(6aY;xc%q&OAPl~nviW4n6L*C5f%d4-Joff*#-NcDzWGXu1+_IO0Yxi4esYiG*C!oqt zAN3!h^64v{I#ea8i;tSyiko)?^oBy-LvS+AGv_m4nwpmgF@HxyKKl_3egjaO>oc~6uuzrt(vhmks(H$V8L z7gz1>323(-?fcb#rjn0Pbf%!XNo6? zrzUMVXJ*?cQ8pZ}Uty5jrgAmRj9)ZzvvPoea{cL!Q#I4IHb?0f-)llv~-|MA=Ds$n=4G9^SB7#Q< z5*FDYBO~$fx8{U--rOpw+#FAVV?NzUwYXF{J}JEvk2-@E)!ux-WtNN?QmE~@(73<8c^{2lfpQ_mLA`kC!{r-#9yG2dSz1oVpnwaXUX8(Ml z%XEwyO*{;;pU$njkw+8rj%d5kY&(z-m<1lvDp-5NXdFU|UDwCA>*1F60U18p;8Y`+ zuWlls*-8lG(9dP|{eCOHC^lf&eyu=f(CkwcT`;NAkDzFnBI#BD^UJ$r=Q-U8{%#LV znqIONaGxvQ7Hhe;&6DCC_$UC)icS5y4ffBP)_9qW_g1e6c%DPz_54ae1GXcACA;rx zzAss*EDcF}_iA7xkjOQ^rvx-PFGs#KhLA<~X&>-a?~GF_7@IVH zkV^Dp59X9l;zK%|ybqnr=l6OadoE|QA*dBa_g)W#vfZu%L9LZ*I^e;5 z$ZXTE{Guhy5SO*>UP4(#knX;9RgF%MF}r%SaFj_6WbQ(z2bzW^Z!JaCIDzIFg5t}q z)1}$y53GeA!uez-@Cecy{fu12eakq_N|TFLSxsi&BVj zhb8V=lDrrcFx=pbtyM9eQfx_jzSYT-mB#0$4#(@e%&jybn51zHbKhhZMV`NFJEW`n zf=?SxLrs0|QHJq`Borwbs&4vK_4)j}5vVVqtk`mnlEb7YYvCwb^;_BNhOF%?d50T= zPG?1|(olbWBLH6`gB*xQpSA&3Wn#LDqMgkVPhV}A5H8-fc1^0{5@m9q&hXTO6W&^y z(p%;_IOg@;?G!wku`DJt{mItoPqQWqOs90fnVl|#q%dwrKu(W&q3O8>C!GT_-ujBK zipgMfSIQu=LrQa7?2s|KzK4Fj2c|hb}!2dp_;F z;%~Yw;ft;=p0eJ?F|Gw`F*2*88S12+&Ja3sIA)*Dgsm73(dv&Bl7sWZ?Mall*@kQv z?TkTT39M~<^Z|L1B5o&^>oen#aYVCY&KM*fh*r#pSo`~YPIm#32H#>m-14TRsrw`m zx^HzeD@8?!&ZzZr0QExt!i8_v&YraKi;KxS`3yVs!nTw7@QB`q1U8gv;Xo__H*0D= zuM54mp%2q9_*8bVs6>b-??;5Oy0I5z+-+QY5=d~ai6nky&pW!T-t#lE2fZ6GROu2b)V)=Q(OyupIR<)=P%@^kitfbwUkI6~>bcU=4IzL8Kl)R&M17^Mr5(n3}M)Rx> zbGWEWDT6`OeaE%}hVfSy*|lGjEk6LWbh7$~uL^24ZP8aTyl;(Cp7n)E6u9ZY&htLV z+xr@qbz%$%?I<4dNcN}e5T=A?Q@ev|gXJ_{>(&+)%*~VuV-ePsm%aq`6$a}G(zIr) zoVC0jwVLR{a!)k69s9F#9peuY4LbJ_U6oO8F2GQ{stJf)V9Ovqf&|jY#Ew%OV+0+?hi%fh^j7qz++xj>yul8g6 z9Io%rY-hFu@hDYACx1bmPu;IJBH$5cTvJ>Qq>Ljtz!j{BrcpNrwfa1+?mO(hLe!v~ zNLBoum)k3@fa?#i*xmJL9I`ITkyY_Z&X^)D4Y_@oJiwmr=L4rH=D-IhlbYAdFEiGW zISE`|hgpWmcGZK_bljd5w?D%laQ2Ir1kWdSoX!Fy6+)P9_XDU)G$e88yI)7TK5YYE zIjGAx-i8KiV&i?SVCg8Cqap2isRyZ-4Gay=`H+MIE`R%@fi)&wat0ahRsTRPrT2lJ zbC7l)0V?Ble=n1uaR2n~4JP^m(>6SjkWVTU@4-;+yQq~%4EoxOp|mlhj`fmI>O1(G zH1~1Z?P(wJrM=4IE&l=Z^UXr6scDFl)#^r~a zTxLsok5zWuJ?&ejc{3pzcL+bM%ETL*8$T~%LXM*I0eL}e+U{_NcA6h#$#ejh6INJO zaC&?5S~>f_>JK`CPyNHj+KM?OfH1~44%ycmDVA%@6fXtPu6qmAXOQWC1L0BRp0Y_7 zC{u=wca131yfKZ*Q+*EYF{ZZ*n`%!oQ#(8eV+U*`i6s?!?hsgR&)Th09V|HGDl?LD zw#P7i2=s*E|I{1Y+n<2F*vn1S3e=zVT1n>Up!%SAKhZ&GfXBtWvT0=0MxHK)^ z5yucUrV|`jXH{GFM=q0OnB|DCX8&|TFTlQ)jgx>NUy9DwA)G91EZyTW_nhd)s_iF zi`NCc^$6R-YW%6{^|tX&$eP6B9?TwJ80YgdlsNS$zOvF7G{d2MiaV~2Obb>NLpF)^ zdjfmAq^Y?JJ7LGfV72#_pSDU&yE*nniz9n;1YyT`{v8ZdU=bLnS6?5cmRHP!fFo-K zil+iN{Y9H)Qx|huF}Ld2JebJ!z!>^lNoxub4R>falx-rd$DX7;Sjg>3fyFZ0qx;|& z)U&gUX1~KN5B|r4%5(R_1w&Ujxy{zo<-^^EfP285cF7Df5(oazw(!n6)kQDm{tY=7 zr}J>ACM7<>GRJSZM0lCn{OYpEU=srC~-(jHg6j+!3b z#`|$Lwr}lg7HHG(KIA@Rr6{ zHe8NWuiELuurghu3mP;I7fuc-Xc&>j?Ma{M?ljPgnqv$K#&pgKM5hp%KwKLP@FiPO z98G5EgD!12OSR!1Fa${-N{Ci>?95>95s}To@qC5jGS8^x>dT$rLmnghDi$T1&2cap zF0qMrpY7<|c(f^N|h#R4(U1n=9n8hf49G z;>fS6Zc8McJFM-&SKI>H@8&1xszg*lsB1$5kmqX*+w3Sb8^a|UB6KbjMq}Q02u0YX zJ0}*_J9T*1ky+k|7A%)VHcMJ-90brAzYn!ONt1)Y^?B-2J&JgGH_NCG0SYE`uJ6*( zi5nAOiwE1>ZNVH_pZ;sB+6E7-JXu`_o(COrLwO;@xy*}ot`01H)+xTYwvL~8>;#CA z@7gS-M=h$1Y3FA=mV`4_xgtBaUkwJhq5ah2JfLu=#^6w21b z$2&l>@OfP`^?om!YW+7{RNK)|(FZE`3``xbgt0exGF%62cpV&Hb^6=o_vV{t5gi7- zp+w!w9D&S%+xiOiH@Tpu*Mi=sWTz7vnU=xGa zpp+zfY(JaI`bhBjJQi73)NA!HM00;jszWLgMr6Gg#iNv0s0@qNNT14>{!_3O~yD$VWRAKPQ?*54dH(k6FAXkI_c(|vja#tnJVc~X{H0J<`71Z&SP z5{x=G#EX+H36l?=ef#w|yZ%Te&yH}DKBqgW&knaXGS%LzQ&TL;anrTBuREO#+1cIfjZZ9k7oFCrg z^|#_j%TvA6)~FjEk9L3c`Ya}KYTDQgl@;vy2qjQIf*y`e-9CpSJ}Vh+6v#jfIjltB zcafF7>zue~SwWKLLY84deYYbKK>O6TEY~MSDv1ZVouxmwSf4|1=%6IMI-iakQlb|e z`b!B-k1fWu&U=5S%A^3`(SHPlxw+tIq;Z6;)M2x^!4ULys8UhLnmG-vdn_AG(VvBj z6%R7pVHf3&hHrExnjFq;(TBvRV)>ncKl;H|Y*INaj|Rvncg{eC#62C%R&09v4xMY% z7DpB0BP}V&L`+9bUKnwHOo^Y#Lmks`w^X1cl!@9iyg(Q~gTLg?KImC;2wH`tk5LFu zZ>FFNJA0#efAy6=%GY;CrR1H4DS`?zxZD1gaAuq?1n`%l{f)894}+Zp!Ki7tnrHDK zdtDz7%t|t_4hcECr6GQP|3YE4r^4eXLyO^w_h&^#34y_3$szQZ0rOOJ#<7{q9G!Jp z_dCplXWf(l6X$^fYW52Syvde%g*`k2k*D$#M@!D5cDf+d-Z35JkPhIDXJ4W$asF)o z95pcX2IV5twp?m}ExrF)+M53pgq;gYkzC0Kl)5|=MhcIKAMy))beo>)fIE8Ls+gi9 zvPbQ`dxnQ0Q zx$})6exHOuzxW~Y(EU6=o$HtJLp#?6&5IUG(hnf{b6HiuUW4{RwT4JG$v2fz`Gt$_ z5Oh9|<;q8W(dU|vQzcXZ=?UJZru5iEzevoCiMYwd*$NsHFDH&x0&C*wP4V49aTMuDEDMNLCTj09d&5!?AHrKNOwcP2HzdMP1q7cv@r* z$3B)&YzPOk9qcdfs2@Sf87QTzu@b4-8VCsPq?jO|B3xacq`ftF85q;qi4w!p$m|Vl z4F}fy>xv<--#^Tv^SRS5vJN=`Pdgfr3LyP-b@;J7jEvI;F#Ltlgf3ekAfDgerb^-T zZNJ^!%pb0zF&=o!djU3Ws3Ehb3wsfXy5UGGr@i~0Cv#VE?WsQCYOd4&Rt=e|nz^R}HIJ#$1P@XM!#mRK91R@;?q^t9_ z9QME4pEx81IAPUL$l9n5t!dF4e`>}FFtreVjQfq@$OgwIPvcIxzrJo)(oLCwEg$#q zUT@X3gND6(JnGrDs@>cOc%IiG#A}7ih#=03j2A?6#@c`yChj5DiHEJ27d-1y7;F5( z7&Dx+H54Rd>A!NiKog{)j_R zcC@l!rT(*jO*dh<#6Q&BoRz`sKNYO zGo%HV_yAMDE0}vDMj~+x!tBL%({^#$dGtaft0pzp#D~979H;N^#AH-%aoY4TAP<=y zUFs_YsYTk|nsEJfX#skmFp<#+|uW8plOTpRIPARqSwshElybx+Eu_07diF*pJ3~rE`=` zhOXLf$>0}IEQjX0(*i|b2flqj?5XW0A@UORxSM~kHq8@) zz)76}QWr=_CR;jx^!6sF3a`&~JzI$q2}eQ?b#*UtUZY>f28z8zwPfks+kgjykrH-! z^TYGWhr(B{dXVwbual|oU1?|FpU&;P}rz3QJ657AB|rJWfa1>;S<;wwpa@3Ue2J1ecywD*>*9X) zT66Qwq~ymex$%TYHd!lmR=YD4kPtn_uAN9aQ5z?NIV_PHHQ(WD<7hTY8J%r1Ic2^%M}D z9R9Qa#9T}S-dOhoP{CWMlnW=Rzf#c(!^WmOI}!pfy`35D@ccF&qBokpc6A5d#iLO` z+4}19YF3@Xg@Y=M`W{fPNROk&%_e2Z>q_nN#m7A{OrX}#6l4~VcRhrIbn*d)_5Lt9 zmbLgdz@~fj2~;GN!HQVA^wY3~2r{UQXGiXok<=@%_3403Qj({#$=t^1xJ-RVWK${} zgI7#ko2?Xj(?lyit6(Q*7uT`2ybYbqo^@bay{VO}g$T9k12D@v@8eE{a6cv% z0s4FV!7Ex6gnBD2Ia=a5ZBqPWCqi>Y-{#C;=ts_Ay`|X>PX#*6gYi9@kc^@Cd2&OS zPsVZaC^(zOIO^RnzFd0ce8_hEx673+BwxbJhqG%^xw82q&-a*0uO;a*MN1|F`?jqH zk1-y~2#su?*er_R+x->cstK9C-RqpGyF;Vbm+qU_Vi(%isK=H+tsx@SZ7)yPUCD>) zOyrlM)GgOCnsLtx#v5Q)Z|nEvCpOAG=b%x_u%uHZ$lnWK4nIV!xt)C2HCjF$AV(i> zqfBKjrpS>6_oTMAMQAwAUn|C%C5FVqJ`KsClx)EZkKwxBPFG3$=vxWbF=<5Tz%(tM zwq}KUe%rMuNBU7HYrLBYz| zT|4?r^M-)MIoTfR!uuf*5r%`pm?WeS9ZS;A-%Lrd+{}?Q{=wZno%bN)a-p0qMh=z^ z340)TEwwPqbz8K@@p@8opDD6C4f+vSoT!j%rr#5SE5A6yKU#Foc!$P|I3bjOTl##a zri=-0?=9rRxLu=0d-59d&7q|LKR8Y3R#jfU2{NTd7g+vmuoUJ<%QS)Pe8+(Q zy%ghu&-h{bmVa$u*n>;X<-7sM^@Hld?fA?&Aq=|2gc+pMiX_^&vL^3wpjZj~B`>bR z$k7+P)Om`eF(Epo2=mQ?|2$(eW4+OU{DadTT^=cTqve3%oI&l!-!qvyi1cOK4*QKs z_ma5zC~IQLvZo28@Yo+hf+x|n?h$@te(&=o8UEio0G7F8n8I?}pQ|*@v%$lrJ+Lk3 z%96ws??&~J>z2GW@u4HwVzu?*%^R=&gM;rCAD(3Gj|~P6?RajS$wio|Z_^xS)|Q6P zJ2tdtA+~&GKf?<&cVJ$h^@R{~+1U0Hkat!ZeH&i|(Bu#TJZr+FUfqX>s7MIuVIFMu zGlkN{I&D$vt=ls>E?NRsZQ2tdj1y*C&YYMrIY?w~%co(pa_H|nLF?!W}`$w~RLO_YHqA6Arvw!WJb^!OLJA`@DA}a-g_-#sQZ&BFsiLT z9F3CZa#@snP3r}v)6j)O*@=C&+7@}gs$ti@?h6lw&wpfDlDEA@XGv|VCZ%fW!$T3b zs&^{Wcb#TEvL(SPqA|RRTUAh68~dzt@rT=hQ{cBEDL=$7U9)0y2_`Eq^6=5%t;SRA z4NW-_2M6eT4U6NSBStqaH&!Gb8rV;;qJ%>m1JPC-W(-T$Em$cpFSO5t^xk*BI5{@9 z;-jP(FSN&Y$YJ9LVF+dxqq`QbGCdY8oAMLZD|G5mx+@T1!Z?`zELb(`GN!R|Dc5R@ zqe&81P+yJW49hxk;d(zI+*46CC|>N;Z1|2yKxj*^JYJYQpNyYbH2TZ?eKr3ZHf@7@ z>hD~$VCS2!TC+>SaZf9tb9xBv}%nc4F|2Hq2u$$ zDq9}QBFJo6V`u!pk;D!$(`@%2Nt5P`!$k7#5BhFf;LJc3vNCN5V9m!F0q85j3bB!xKp;X%x*0E*0rMM$&Y{W_^bAyGfwSQ3IyE2PfT!T-2Dv@sP!s zNCzSnIk^&STb9rHC!1A)lWvIp4XN?(hGf!p<@(su_@J|Ca6&ZldwbJkgFpZ(wGI@kXHE-TVU z_J%iiQmMXnOHK@Ims|84+R6$^IZuCPiD8t-*4Z)huPBS^y3F%$)?7o6s2+?tc6V## zp>p(Q_81>IZUYJ1X3xEqId~}B3A$9qb~9*#-FkH3?Ky@SDF;MKZ#q6@zZ}m?aN_gX zs^+DueKT+v!UVSP=E<^m$=_ULuOw+7T9Mrnsyi8c`qd_7?&nmO#7qW#y_(U-?a!`o1^J<R;!nc+s5p#ujH${;g5rOkxGeJYARIZ>dAnmoX%Ysnf!{1 zKo9fVTo=?b{H811ywpao;e8*zgYUXAt-$OfFk#s6@e9c<&h@*SdBbGGdn-NH0{fJYLee=yAmyhGT1|?}pdl>m;g*efrG6KKMbUKjAo5(q35P2rvy)Uij7iAM z3nwJz3IpZg>7lSuvK-;<#okk+6y=brgV!fZX(k$|R;)#bE)Ub#y01ArbO`kd!ttQH zG^Xib>j^Chm*OsjRI1`&D!7nD3{}MLAX`*2O8}U`Y~uF5Nr;VJ0+O5G@KM6)&ILzE zH$N>n?grGn5jDWe$zu!Tu`o9@+ED_;tAUYt5xmH`cVu{Wq%2$&a9h49%s)BJn^iB@ zV~M&Gau<9u3hsz6W8|s{#zKOt>|8!*xI;ipXIJ9iB@)i6p_YV}L18f=uMggQjMR_ZoMMcjp??3gx>}{Dw>w4nc&k&DC z$Sgvp;@~o^{dFPY+q#8rgB7V02J$e;{@5TL><<qbLecnni@MkW#l$Y)m2lyYwzA5 z2(%VGMN!5pYwGjL%*2kovQ^p@s>=Raf!sm*$vQx%b*$6Uj>>M?#_+#qkK%}Cv%)7+ z#Y>9k)YLTqXE!%8OKdqBQNxuk-)qMijGh=Gbe=z>!ksy&^Nj)7P{+rUy~n03;;;=x zo>m4P3Cv!id1#G6h8iNOTBG{2+EO+83B-M>m@fW%y4iIQph6XX{DP8+FD<3d1qCT# zj>A^1;e`8xOlmznCwu}9a&EXpwdaQGmx+nW#u25BakDxUMqel_Y}i9bCJZ#4;ncRv zf?SWPGi&Jo8R1*z=GWy=U`y`D0@$#FN9PTC%1Ag&^V*R@RdEZKE;AKhKg^$Gfb7=d z$kwjBD9857+krFpr``1v5-7;CJ+t@XHF)^hN{?IzEh)K^4` z`-llyusg6(_;iN$@#Ef4Cd@JNPy@ZW0#7zi9hwW<)r9*zo#n+JJTPnQDXO|jl^nPZ z9X5uKY3wXJd&LbUKMU_K{iw4xAh{ESbyH`9kGpQ61$_>b$z!zkmPpp6Q%@+*Fkci{ z8|z#grG4DJZC1w0v%l_aaegC1{7hP=3L_z#6*jcw4aJB&Wn* ze$S%$7x#J?SJ`D_XT~6f-V6RWbz7Qv&o88EGt#`13|Q{jcMam+es`l+@xC0Yj=Ww~ zUFs^_<^QI~D{41ZW^YCMMH*iqqvtcFoT<&oRt@Z%uN%yP7EJUR=A8a2tmn3ZAGx#kHrtlzbt8vnitD=t$Qi%t z2Dhui%jJRhT8u>U7j(BbU$)&1lrEPVWbY{}7~>|V0-*I4fw#|0W=Se7mmS9e4zG41 zE>_~pKb?EY`L%mD4O$JKyWtb-I8l#S83TUpz?%bk1dSW&u7Ylt=lXxXX+COE!Xdt; z0|=o-qLhd15i05?pp_Zj&c!Fb z>%YVI+TdhZe=rGcx5PwdEvZ9K-dwy*HQLgXL7YtMDx9A?ot~h%oSqW3a9Aa=|F)%v zik3ioh|ninU`*5Ou!e-MA!c7qg$$My{o4xH$qKX%Q$}q_RJ9B1^m@V5<^HRwqwPnD z{R6bhy=TVGl%ZphRDWz|nEQOSq#u}Hc5F}7W%CN|Mv5Vep3MY9^tWiFDnuLHZ?@R((?6E%N>j9iuV{}T`*4ayAZ|_Tfe$o6F?*j+;9?rQFC!XCA zNSBUpf<@KrwG8P8$0a(8jk_bnJqe$5*=6DRIwkMVX7kSV!bGg@b5EqkKk_>hFZnqy zI5q5inqxC+D8Q??1e+i;f^M>NWB52Zs5#hmXUBQu*+7flKvL` z?whpK{5*raj-QhKaLES7*x2VH*V7^{|>DA`v}y@`tw)*YaV0g^0H1iuUpQ_7$|bd5E1^e9$tA<~7NjO#)Xf7O{No9Y+a;A%$n>LHTwc7?`8^0y+20 znUo!a-wQG@CA=kiEc={$oK6fuA3gC-PlKBatl*7{zg%t*tls7*lpU*U_0m-i>mP3> zUrX$f10I?dkL(c~)Vdp$C|GLiZ|1kVF2YR3piY@u!wRWbEX$Apr;FY_=bHQVTH0KLX(-C2ZP^udOakN+#yV;f z7fTc1>SNxVgsjGO29+GJ@(Kf70yr#jb7%lQR(jI{^&jS-?4+M$*i6~b*inB2MLc%t zZ7pZmLj;$9U!IeEYC)aj;{TTZJI7tJ>b<&m>x$lyji;1=mj*(xQHuQck?N%eS*IFx z`&Q_fM(O=I1}JjkQFi9LxL*eO^CAox&tf-M`qeRutGK$g@0$)pQ<@HRnQpG-S2($r z>=UE*PueyR1pLhizplNt34ExPj*1wa9}cyg>)mIiR5j1Skm?(?IxKxv{$I!soW|$p zW3}>FrKHXwTx$Puj^3=(65}zD-~#{vds&{_56#UA?3%0(9}?ebtc*S_v*@S7N35_2 zNhEgMYuVejhWu#%M#4w-ESn4wNiu1<>F_<0c_izG8w*|^vKI0kR%dt~Mgrteps`k$ z^{i0@WCe21Nyx}Hj^KdFw~N7FPOH3bSs<>!CKVoybfci*$p%gXz3O_2_q}JktTe0i`}@8f7NA53i*1N*+3~}BiufaKe*_(7G;MM* z`8;1cwQZTXr2Vyj@k&MZ-d0vMRGf6)kFQ+7DYu}OI%gm(>ou<1Udq5|IMmnI%zL@H z(Py(=2RXF4_aJZwMD%Y(F#QQFw=@fhjxMJix=Gcd^Bd$)G*p9WNk1{@MNQL5Ko?YI z>!)DX_18p`9?l;Q2(@jN#HU192zw2kwXc3z4>B7oTh@7#K19oPB>sWZ!KlPaUUV24 z3wX^-rm-$_QaR5aWwbPE8?n=av#Ux*pVTo{NfVWvw0Vf>kbtH`a)?SjW|w{y2J&RXV$p5UP~(QJSA6ya1+1O!#9 z>HgO|-`>x^W!l^VKm776>7lez`3%vMK1qlajL$gt_WXfeoV%O?glUZz4EexUmxN1m+0yE9}zy1!aIo+bFu?*)TA23O zgrT5|%lo-!44yny+TB30k_Vx;0)I<)I)Ly_j1l9qKz%q$)w=m;>RjL0^<;# literal 57074 zcmbSy2Ut^Ew=GsI6g?`vsDOah=_<(QQ^gFBBIN@ zL_`-6*RBF1-dDa;0RLTgRM2xFA|m@m_;(?WgNzm!Bz9F)ktLoXCMCYcP%Lxz!r73l zuIn?1t2Nk}D8Hmz0T?221%_T&xR^QHIJ(+^9f%b@137=?yEnVGBoh^ur98U>{-#k0Hjf|oZPInjR_ZQ&5-8@#ePeKHnw0J8$^%eQjekfS6e*wDt_*-hI-1I$VS=bSi=Vjymx8mKns^S)!&NEjao)y=#6F z>`xKe^1MdD|Kw<(8jMt>Cj}<=xma>M+8*kb>GK_WDh{~}3<0mIj7yi!-c(EzL*86= z=2D8cu;KkQ)c029YKN7>7N7SO;Ny2Y*xNW|lWnP@b-%j_GyYwt*A11J8tv~G%=c^I z`XyVSNwOWMhdcq3n?D}R-3s6+d^M9JFtXFnW*=WnnUk_oj!C}kTpTr;ESe-m9yh_9 zX5Ejws}-cqGHTwRK&e>Pc4KOD6#aP3>499yv$P|N?wH97aKa9)cdQ|>Z1hKZU|U}@1VAL$QJ99{WO~=nENsDqsU-t zn(2v^Q@j^D#q*p?t?=BPxx$I{CSH1#=2xavwyRk}$7~|0K|y_rH4e0q$vh7o5t7?E z0$N|}2G?~$*7CDK-f!2Ek_A1wmeH3$)UFKQyb)hz)8uwa*+lS}120Lk905gYH z!1sEM$Sq2ue)0$&K4eWGKCo*Uc!SwSz80KOr9XE1 zUQJ8;YKmUq(wu1WoFm2gs?AzG< z5pQitokRU`ThDC~1cIN1J;`P&;ofpfLYAG8iOz=0n3-*XJCfu2{5%A#WXDHD)I^Ec z^%D1|XRH}p+lyAe+2S1-Z&L0)rOYa~Ee0{r7v40x!GuskyJXEZ4DhQ>eO*t>*E=D0 zaEq;ks>>cM+BZPEPTjP43OfD3MpGr;y!^8zj6t379@m=U`O3p;NI)bOT$WsdDc7yC z(vEBl87B+#z|^e%sM}-~sXMr2#)UZ~eXKGjb+t@;jmexErWXO}6k<+fJ#3&2y0tOq z3-3gg&6=&z9xLqNj@+ZfR{G1kty3(>p}vI^Ax0%$$~|cgFnXiHTdl#NLVCFIemh`6 zeJ{gf-4?Jn*A(_?EF8?|JKpRVKfnxw4|+_-AX|GCmz|Z+X8euN13!zsa%WJ)H_$<2 zs1bVYAr$K8pdN>bn!xKP{77CZ#6307i8SY4xa3~(WbhXwJ?KZTOL3dY4@+XXh5YnA zek{U;)DSTtA=s* zjw1ukkJ=~dbw8($Tz7bKg*j2`wMYVYe@uepL9w?s6MDrAMOCu8?c5p0ZgnUdtay=# zNb~ox*TkrY8O&2mMZ^UJj!ZycHJ;>TwGU||=VBrwwnPR7P4sQA$Fr$(83Eoo(E?nx8OtfBGU51GYlOCd_bA>6@CyjgFH#UD2 zWf$ew3deSU@2i{D<-x^qRWiY3HLB~s|MbX748kN({L}w>(iCbv zgZp%ce@!7)bkBEcz!g2{6DH{0U6h@$(WqNoictTn#hzGGV2wCG8OMpzi)@TI-KePK z8*bRJS;!5o^EiO2piHYx4->bdg>H^s7@x<|ecvqRI)Fb!s^MJP^sjoa!pz3}%9d61 zs5@N+ixYjUCU?!f2KIEQEr4k2di|23MKQ?p!0Wmp#O}rrl~j8o3u|1#{`81ekUjkl zqfqS{e;kn0zJA@ty3HmTy&KwdK^krRcSYN1kt1Wd~LRY!*Xl3pz^& zpXSUcTRUI!S37bTb1f^s?vYj;FqZzH0F8S>-O)c;C*w+@oGu+rCM$N z_XyV<)`nWpYFWvLKAzL++9J#kt8vfEt%{e`3O#N1BvUDYD{WGDY9O5#8`aiw?d;B)Y_60XrY$Hp_e4?1>2NXJ zeW&*8&nMSgk|YlKQ-kG(UPMRHj2@bp{s?MPk?I0hGX#7;g0net>3#S#7liM*TB?)6 zkH2B4G}@l9V5j*JEVUl+Xxr&$PfG)u{WUYRaoUn;UAabOh_+@_uD(;s&ORU%i}VNX zjDWiLna`hRmAaI_KaZc!Y3cs4J05&`jP>0<#zR{g*BE*HPWR#aCu_)`!bnPK{tGAg zHT)bt5*gaq!5E6B#pB(#*YG&mM_-=b^}p-4`ZFY#y|!7r*DZ5msc57``H$Ns+b<_ZFz`1& zfoo2;RC6_pCC`@a7-G}6~ zudn13oPM)y3~seah8?GM%I8#H_;W+779@-dU*K|q)%FU}?-en6u!#54op42_(S_XH zc6eXok6(-y(|^5&tKdfCkK~V2WXsUO1$6%ErAQBiD9B|bDqo~0VTFg(;KpQ+$fxzY zn-3xqrzLp<&+f_bEr4e;f&knO?&$Kh>P#eKQ8W@6t`K;IEE`3NX#}>2TX`2vP%4dD zS4QPHm_C%lsYZ+?P>#Wn{PLM=K{Q>1?HGZ&Yl}4EziepD^1LU8^1vMis`Tt*(Dl-v zGR;$5mQUoB&NF= zVPYVBY1F<>s(|(CQ6A?p$i1LV)|RVnzwVyzEB*h?O{9T*qv@KVQar8C0=F9l zuoYar)3SmDh0W_=?qM2rQI22CMiO1P5?sRFM@ww>Z*2Uss{304WJXid+LWEC3br*% z^TAf-g|8g1S~x2w(^Ca-bd@=uUX5{qYsxWgzqn-gRWXI(O`w>g8}`0R-1b zdG*(pm5QHOX>^lUNGG4`S;3(NHyv)-@&7*ZIqn;g)2xb9q-pH&ir-u_?8?_psuDnd z{*7e7=3RLi8Omc2B*YIIzJZ`>QXEcQYh)gO=yMxC&9v?;?a}VrE_IS{T?=^5#^#-g zK{Pa7eLx;C8SNg}^<>NBj1?G#$OPs_ytw%bDj>VpkVeWvIcr&3KjbwtMiX2DlOIRR zFP`#C&TfPj4Jbpmc{OqqXjOKXmG<^^^A8MZEgp6Fr!1Ek_@!J`OZzrwRgyiBoM}^Y zqC!VWlM@d6yc$Gf**u_|VUU_I(aG$W%Ceo@s8rj~00h;Z?_Ybe^yP%#n^|jkAk@lw zzrKMXb(de<(IUKJY;!Rpbm3^Mda2EZv2f4x*Ot`0XlIqWp&3zbIo7aICfVf#l2mnV zV{6Q!Y)$fgRw|kpH{Qme&BQy`q2?J??6hxK^KrA2G}n0{|8&ILjz{||D^Ikqf&2K& zwSX17;X~H ddg1;^leWmfeT5Sp&8?(xTzEEbkY{7h<1~w5^pF>O)2A#NNx(`3r5-@^uGqmsE1}N+AsDg0=(Ij}It>hh+TT2~eOXz)5h3tynBrsE!wZ@s6_maGdcSFl7sa(@oJ=?{ge zzeaTq>WUR-ep3bKIOXShx5b(`6W>!~Se(GY8mGg$CXVjdf-;mHK=$4*gQY_e_x9Jm@+M=+6pLTr)QR)V1o$+bv%H)4;Eu$6rJdH^J8@8{0AHhr71ei6)M$i{t_r zk+<78+*})uF%;=fIdWs-=q%6S(4mZljK@YtC)+?qL^Kwr+dIVg?akxnzz)eKp;&0= z&#}GZCBK)=CwTAedGC%ByXJy%6W_VLv};I@Mr`i)9b6BH+MiY}upXZ$u_R0zvHoW0B6pe>RW1P5<`L}CN${tGZO<6slhgfJ* z7#}#fdKh*1otV)-DdBtEEQYirsn8g!L{_=@TF|O%q5HB_!3$SF>MFYFCJq)5tS;(d zr}@TL@4t=E#O{-A@Ds2%rM$N3@9LFhQ=ya2ewDu1>7~F~<}pxKiFkYijd8S80G$=8 zKTF2xxNT%8yToAsWO^EwKKMO6gCXUrnU3ucyKf5LY`>) zX-fQwrI-a1{@}dg{6qUwkQOEM%$XcESO>Fitls*CtQa<(Q613@ai*(>?@I; zp^=Y?`&#Agnov%RUb;H>)Wp&9=L&9dx15M98zVJ$zL8q}-~{^8I@NMb$;TE-^|W+m zb=B#~2i2!ep1<~-BX?9{=3(k5_V?O1yhGOUN1qoSp|T6+8*iOd`IK;HT5cnuMg?ra zMtvL{hGvG7LRa-O25RBTBM^lRw}e-@HleB-4)Riz>W@6dr;}{`_5Ab>0jT_14 z7CfyiM(&uM6*0tXK|~$D($>AIsFGp6>@kV>*lrL~S7u;&*=x)rOPUOz;iT)Lj2hFw zK3spaItWpy;i@n+FLrXCtDVlu8obJbxu@u>WNa!>&dNnD0p2U{5RJ{yjgdF81na{^ zUmHz3Oz9YT4SIN}-3TgyC59eDPG!rt$V+IoCSr#VddzaU!|kTTnLM?73LhWbN-UcO2KRt2cZknH4}?QUR@&2C1~Y5DzA*#81Uk3|ym~#WA%X`Nt}DB%jBvAJ52d zWXcT&L{Vrv3#bohHuT+F(Z>%#Q;$>O9&k~bZh>-+9? zjQZ-lWN1b-#xc7K6zt|t?!e=$Cum<444ILjExef;E|kS7q25^XGI=O?sTD7$*r4kW{lxP!58PGKp~rS+%D^DAO{b-qwg;(< z-6Wx2?btQGTceZI_f1PaEFS#(nxS4MoU<=hKqc)n53=U3aL$83-{Goemet78K5J>a zh~(6uRi9Yc{NcN!C*RG$?w~$YcC=ZV9m!WAsU<`IN7kWm(N1%u_ur&r_#ctu^5L#G z6k+`tI87(|SgDah!(B__Z9{NZT2G%1@WHAQdgqeK3`Tu6 z?Psry*TvdQWy!q9jYZwBzAfZWf*|w-H=!MH+o5uXZ|RJ%Mw$Hy!F*bkRi9Kji+B>J zP)lf1{kq4bF~oKFM*w6<$H9v~GchgAGK4?WwWO=lh|AgYvsrwXmb|6lklj{6;-D*m z*o7OvckjuJuFiHf3Y--bn3OhpI-2;HqV(j;$ALq7+W7sh?6LecOyK2&0+J`m3jl=_sVfZ(D=f)S*H~!d9WH5PM z_DOQTcB$3k(I(y?@(vDl;iYO;v^RFxk-;!Zy0g17ROlcvk<}h3G?Y%*>iT{PN5^s% z0ok48BzBhpk>}4wvon-9@(w7xfT+cEmD6#`Ce`nNr-q zQ%lk?^O~I=^RIA=Md7lxjGw;XhxYQR@^+Gwt*(MSyXKIoS3|0P>9w`LjC3@tzMeR5 zLRYNCsz#7vK5hM5o{vcn*E~D-bTv>a$75+W2mOxHW6n{P1EaWZM*S;*48LG)T^T&QW@c^a>wgk^Fz*;UD>bz9VIP9p7C76 z)eG4}q9tTueWPC5WqqIx4I}Efz-pcPs(i_%+E(kO-8K^Lejvww5Ps_qDjcei?Mca* zjBw`G|EB!7*~T^Uz7U*I!kW?hjIxosKgq+IMlzg^mGV?|ZIJdqS)Ql{XCtqaWViKJ zz;WwghWcKeDF!rsTyP??X1-IWagXo-w}QGoyO_SbAyhOaYT?VG+yPyij)e3Pa!=*E zkyvg6FA2PI?i0iDRcMX`WkP%!KPtY}C6wn~vtzgaSAn`#qN;DI>8zc_zHrOL{(#bQ z-55o`QA3FXcIaDGZw`QV3hqlN$LwZj=XTd-Z%@wMoZ+S0k$1j;pn6IMIh0U$*pNx& zJO<+*wF?X<;^NYU-N~Rxpv2s06}rkz`mZBOueM$>bD##uB*c&N$}g6DujT)DnLONi@-e|MLj$E_*bh+FY;XqL9JP!!#1}>@`c>(Wf!{ zE^}c+U(Z=6NB-6=z1iU?c8y*^O)A)`@V=1*b)NK^4NcIE=2x@(`o`(1VM=m;X70Z1 zg<(dSvY8#I0|hm;&E8A$*6g>p)d-U}d0sbO;D|nqum7oIiDu^e$@k0k8GIJ*f z=*Clu+=w&Uf#_)}pj2L=r=nc_FX@2)??o|uR;AO?sY+0{(_N| z4jO15yVj-O)*=!*=M@~sVAW;!@_(ysOGTO|@3)RaT~p8BBK@uFR5M}ci*aTS62lONRS2Dtg_n%*5ny5U0Y+7N^hkx@TZDi0 z;;#H*K5?LF9&bu#RIXpfj_JY#O|WTM&xhS*+1mRT5wDST#^5`ui}m5!skdpJw7*iC z1g`KZ`fN-%l;yOwCrBCx;l3sxmy=l2pOa69@WKe?2AeUp+rVY}7M74q?JCQbBg{2r zjtcaEz|olSeE`sTL0zC|-d$lec{yf!(!Jj!wiF?J!yn8nFS3ov1qG2uD4+6CKN)D~ zi6jFSc5(!r_@MpRhuc66V3Aw*W!12_S)hvfk|^u>3a;@1p#Bo3Ra(IIS+vtoOfB8W z76C?96rVmvq)uKV&2-_C-7!y6h!GMjsNxfY85bj>lzsIgfRpJF1uEx0+nNKrs;0cgjjGBA|4M3PVUh_;PE!Wp z?%Rf50^%~a-luy^HxW`VW%p)g?$0Vw(v7I_@JeFu81tdWaE?(RNami>a5C>g;p-bvdT{W2k!%(+X@TzLdFX_QZYl8sXecDBj`Pc+DyW zE7%*$5}BEI$0X^wgI}TWMHa>}GnG^ktW}~BEF&j1;4r@Ou-i4~MsV$jkn51ZqG$BZ z_mjzgQl#sz?nNw@XX5uX@{Oy4?^%=`{vN~SZF9}xF5BH|YQ zB(S#Y1Y*3n^my(%};SytxKxJTMLxZE=!s4RBrC-3m?=IZxjI(CP+kkDPiZ4$jB-B@lC4Y{w! zx9|7GpRxSMH=(ofl)46SfCRcPpq07hH`~;sHlIiRye<{9)53O9S)wkuSi8~P2%F>O`M;>Y2IBmB2c6r{2JY;^gB z;%%A>SRu9*uDo$IBSX7+?eu3fVLoH?7B%EB_OWg%DUK8|ev8gT%ee*pRd2+BM?<(U zVyAtn&&6-yEDI1NFe3wQ14U7wEH4+wDf}&<0y3i>xHM0mQ|piDiH$_OGr`s#U?uR* zl>D_X5e%a|Pe)byib$=-9^8lWbdA%os4rPNO@;Yb8r_uXu`0{bFl`O=kR&knM+y;! zCug_lSbLIy?{XF7@{CTeA9Ouv3-ytGy>$GuFdcWJu><1s+bhA1mc?#@X3|Y3{x!Jt{gRfJ=SbARlAMu*tC%?r6MvuW0$JrEV$8b;?F`EK|_mOvTSDWZk=TfuM^K z&2St7cuW|;#AbRldWm&z-bK6zug_p{ILXj}t9_yLV{)a}UPGHU0H*916?MgZiU;6p z_+V=i0}FnP1`&;P4JLQCJcb-@l;-p%AC@mhE@AlX{{GUd*%xkX621Hu|waBY2}hQ zcf1t*5);9&c!-tU9omVhoLju5G_1952R+w39NmN+iU@pid_qKp1C1(7 z$_Ty6^zfi#PN(OgV$zBbgJn(;E6*dU9Df#Y&ZJMX8RtEW(8~U@!Oj%suJxO~>d%Cy z)l|DiAZnFOGJm`<*=`B=0X%pHJ9~LdTEX=2_nR`!#JMLe-Ce zeLCO-qEhK3G-411h)BL+j_)p>XF?wkumVB^{nbtki^XsMgXpAJ*m#5bZUA~>qH|8h zPuHXuQ(*0*D8JPQ2U2G_cu6G$kTrlb%+u`gnc?P|(t3S5tWp5rs>&b}al;L9zD4SH zR_-SEj@zFmhI z*uVpOx{X`V$tO#&7+O+O*OF}O5_d&8F`BoA)vJqXc=mg00H5z>84R!zG?KQ?h^gWo zz%)}m%EzCY|J;jb3rJstA8D%+U{20h5sHA{+r`Y|I1#*PuiqRZ@uA{Cd$h^E!yb)Y zjS}&%ctp;{wx8!n-$eJm`vM@tMXLrB_HKgvf1^aQP3vupzhq;iB5zF4nWcsRoHQFX zdnv$j9g9E+po8Z?j-uk9ES}@>EkGz59Eq)`b9!@DmbdpbL@_x|t%|s=?<9xwIt&Xi zc}fd_Nv|7*mo+m*lrk!Ym&uwXNcI z2tl7fx4Cj7=QLr(36@+&eBIw(POEl}!i%%{I~TElZXSA@N`Vl`0@$2Bm?wRni3hSG zw&>B34|n19+?6P5_Se{N&p~1Xn?+gO>rQ!{S?6Ido<6(0*1Xv+Q)v+{_%>9~v*Boj z_xLMOf}Vye%;YhlJVk=TZ?+Ah*t$^Vu$*Sf{&laJf@jI6?f>V zKF5|kw@0pxz2ZkX%wGh^5v+x0n~_oNT97!YyPa)f+SZ=zsC5p)qh{<@T)o(8ihXP% z^QqIfItN*+o|xRXcj#;4<-id+vxg#1hF`XHA$((`Lft{-i&xDJ5;=8#jvg6xZfqFs zD3qaxL}LA4r9Sxtu)7M;k5`vl1O$DijU&m7bJqc9qFq*x8;`poGo`VwonOjcscpJE z30fc`vrKrEd9S;#cw=5_mO-~_Oae6Qm;Ry5%;sy1>s!O&gKW0sK7hpWGr2VIDWJ;Q zP4c^Er1RgxA5@3Rn;)iqzPsEJYK|N=QiUuA0WK`)z?(sg)+d3LmFZ6HEWM7$F9=X{ zWqFem&-1dgThKx-E$t zRNXz(kaEpmbpKBhl1rA>ERSr=&dX$9OZ;z5VYLaWMl)W)`f3&m@*~}qho9BAUy!8G zkB33o5COLV(86hV+}C6B>52nJ&!H|PdCW&Qxp2;5BH^OQsqcfZ@EY^E+cnzUerSVv zk^ZdDA0L?-hRw+OWzrsCwwSoPCbzc+TC7S;E7^Q$awQHfR^T2} zw_kX((dHQ0a3Ul+8iHr%Do@*_*YNA0*OctZr^yac$xE$$HCzn>>gjz9h-u<~X_ zaM=9m0%6P1(8B`kIeN*JL6(S%|udcXs?L?E;7;V0w!EG#td8OK!NKHI%pLd7}b zGxRfqd=x!_0_eHGeKwqDYo?C!;?{F+Z=p1~XRHtIa4 zs#&<|?8`M6xT?Ei53+7Gx|Cwa>t}_rjbj@g)A>_BD68xRwpch{pPn279*Sec9CDF3 zv@sMZ4d;QM>ib9A@Az)d ze7o%}wPp-&?+^deW5k<6W^nmIO_X$PPfWcog)GRJ0wXl_W}9ON@9)3Zg+-$o1Cd8Y zN5>OyOoUbx=L~ z>6lPvC_3SGs5_XLgG&_~hB&FNIhVpuPNGK9KTD&FyOL)YBSTxa9bCicr%M=}4L1kV zv_~?1`y_kjbke1h7mb|^??yDVqVjxkdJ6IcnoGxzj^0?OEL}tr8e64A96Kf_S@6<7 z)5~N^Dn8izsH`WbGAg&O0$G(nTfoX}WFb z7#mx(y@(NhQ$3GnYjeqT%hfafD!JO3yXy7EJ6YXd1y<=d$C<^%JIER^zn;?Vs!(+L z1%UsBd;+q9{gg=Rr9|(}8WtXx1K5$`lt!(q$GT{pV?>7ei}fn!LPfPh)s1zx zj@_uVQ7GJj$`5o5);`@6ALU=|?50|Ui_$;vh)P$obK9{B)R4y<(yEQmBuJt&uC3;H!f5z3b|Nq-eQXJvAU{_H{RDb(4f(-}68WBFLM_}Cv1y#E zSHKWg#xhMBQ93m-*mE>-S|jn+8`f5v+u=0D=3jN=EW7*q(Z@VO<^9jflk}?4Q!U!c zfq3Rq=g?Pv`iUSlrOdt3H@KP&e}}?IBww%1Yfsuy-u0B#Dqa&Fxk1rM@PonBiH{*5 zw;Q;y66*2;35NSO)*rQivN#~hHo}oCLP$jG>Uh~2P9rWN9P}_B+`-{vu}2f+^eq17 zdm&W^2}E+N>s$M-u3hH&9^-rD!TfjaFw0%*DqWPF`Ca&8e1Vc04LMrzN57VcOKIa~ zqcsKLp&Jq&`sz^4XoHLSp2^)BBgl|MHCl%H^+CU{Ssq}+DEcK)wm_*M>%K#lD=S8k1yV)g!;qRH%vq;Ub&gg-`9qpR;T507f*nM2exQ z`LJ?%T6I_t_iWmbkXgsi;8D)wB1PIQxI7+GH1C=2+`K5Jom_gGp|^##A&}WKvO@iPG^-4WiGlT?1ibhi|)YBF`A9>$RFYA`rr;+C^`@l8Muy7jZ9l^eR?A>J{hF*ObZm>P;V38g_}4 zykJuDGi6lFRo%IZU^HW#ihsEQR$Gf$yM#dv@pz1<^(lF$=m`6~N~Hg)hpz!o?nzf` zwL;ZvCNwKd#eR?(eUrnE*7Qq5HNa1bx?*j}UjwNDH$w`|Yw`w+(V9y0OC_=MLE zFJ&;7SE^tE`TwhuMfdtNiNP+slau;Ab&s)-Cp+04P;?MeK{DKVD2BRccUMp&RxiuN zNPE*Zs_O$?xgk(*W+obc(CLZI>G}`$r=BZ&?J-Gi;)C*)i)Fo`a>V+ z-nMw_6Hxx|pbgqRIRo7)71ILaf*M^LyOIvosaAR=U?)v?`_|JYz%8Sg>@>penVFh3 zBA8e1D^3v~O%}Ebd3nMnUM)GgVAYW_{pd*DlH2k@N-MrI<<=Zf^^&SyUC}3=?(3e+ zZt5Xd;+Sf@TeE^x`6+4;VAwVICVKJ(i^feFsb^uVG+7M`g|mQBgFo&cajTlyS9a>- z{3HB$S{gG0Q+Ov0G{`2u(*4-Zt7zkuB_Q=<77ie5Kx;@SnA+pNr)^zVmCt~LjYA~k zQ^lZ8%^tac{3$s;XqZJN%B?n)CM;G`y`a`Y+POWa@wzVrKbh1gWHHQ4DqnZ?_jdiD zD7SdL-hi>i@2|d`r0#8p6}VcE(ouwyYN2hj8)@C+l-D-Id-G*I3J6(D+Nf#uO49l; zXmWaRzOD+s?tPrLeY;KIvxdFEpgIC0^tdW&bNOqvS%##xh62nX&&CSS!HVIWsY4Tg zZ{+P*7YDyfjL1ox9x2AJ!ji-;VG~@Il;wv?i%&)$SOCU54V!+GK9#DrBr))6->AVq zynsNMq;`!Al@+-5zV65~!!O8Gk_#jvX$uI{qH`wTk}ye2DYm1I4YZ1sscnt-1t~>V ztY#P6*3$q2*v?@!qI8rwJh5hSSJ@LG#AM9e!N{IGnMoFkq%o06wNtbZ*(ogRjOhN2 z;OnxeO$%8te_RgmtP*NDJD)r1YU{h}P5w>)a%oAwNIK=PQY4 zLfB6Q(?+#Ay(hS8fEmo_*CB4TvXkT(LsjkNmxOixoZv8?SRaQoA&OzMF` zyhZT|w!tpEdC1lHYd}*^EaHB7ll|a5-i61#YG zE8|M8fEHB_<7F4mOnH?}SRz^Bu2$;2`Ed*`oQ+d{`R^65TUaxL%_VNqbMLdyg&Z-R zu2T_nX32AAv3%L~T(e4Axxz~?Y3}`3XVrCMTjLRGLMaqkPXCv9t0}7DLPGF49mG9> z(OLw29;`cV>40?ckbMV+WGPQLn1^ZTei8DmJY3h>c4U(&eH01rp04n@fB+7%5APBa zNoqAkR9v9^cy1P_?CsxrGRzCu01wL~1oZ5+qRs8-VB^@pEP~raWXMip_!ZENR<)Uq z+mQIpLuRAgIV2~2mHXDYrsqRyq+=>-q}Eq+=ECj4idG8%ggO&Yy%Wd^d=>1{HwWq9 zUk?hu2+v&nqqvk^iRn&$GA$IDwH6WO_FUnlU90N!zT=L+&dT(7^l4tYKnJ_Y(L;4u zx@&3ArTJHhz*qUsoV87X$z5GVe5PU=lDWsE=Nfi=w-sxRR^_+KGoQdYc@>k5yg{8uwDxa^Qd_FwF0dbXfZ ztDO%QG~G=T;3nkY>)ZTN1#Z&k5Q*5;?~){5rJHO8z{sxaZW;Xo=Nx{`1_AUv77K1#8-$G-H>s;O;%2NenT#k;Lq1BcAqaongL9j*U*iD_UI^9)a4 z^ATuc1y;wW655>1pBL8Wul+G%6ZvrdQ4i~zD$Q#H<_IEZ2O!3BjGDjc;Hv+@n?^E- z=J2aK^i|mxnpnpqkGOTAxpZQlAH9RVKaX{j57L8bl58Y0fqgO?yT$?Q;O2Zf&s9oq zsU-Vyvzl{Gl^|_aWa{npL^e_W(OjWFTz7dVcOV~Yku>K8q4bS!9m3*)v_RM6dTHTE zSvr9(tu>)}Cve^&@(wx+E1$>ToZgYOVf@2rL|-$yP;<% zMq(PprDrxrsO%oUfJ$y(lA`{jFXox|d}{X|v>oei8flldNZ}8o#da$IFp5@w{I2v& z%%6>=i$92*z-%wty)G_(Y&#p}@Oq$QchH%i6FfP%Z<3wPxhY;01f^p zc(k-}CZWd!Xv^6EWQ1qLt$}mLoxq}v z*`V=$4}JG1Veq6K#Zm%>^}bH>s^xRfH?nNyJ`v`ex^|qsDCrrcj8dH%M3a)DK^^{j z;g5Aoz-Ocx$AJ#tOQvd-j`qKga4c(Q?Yq#Rs=lezt?e zF)Rl(_vTt z5i(ZMOYHQdU3A#|K)Ki`;v2rYw<8f76(ot-z=9dGKqpdzbcxt)n8PgI+j|YLISU7QId)G9tEDYSFw--1^lmPEiLwL`HgA%3JTOQ7 zdB+H|A^-;xrJ>@TZq!s~A!DTPZ~R*h_PQ3yed$fwZ2j$VO0?_6;B#k7lZ6sE%L-Z=qy<&-P3IV_+$4t&_#q^s zOK6GjwpYqw0LKdN#sz`_Qf9uCkoFht{CVpxSp}V&TeuAgUiNnHf*PwxA-*Lzsx!RjakO;>XoCudC6WwR7fp)niE7rM`)^LD zqXzWV4xDlmApdv)fR=NCOm;#+!P=-cl=#?idc@sG1yJU@Admml5A4k6^@9!)6MubR z*i*y5YP#UOAE$HoB_Lji|6N+U23)LKCY%NQMApJUEP&}xOW<{%u>U)z_}@k?(SNh? zj^GpuhymKz;%QUFXcz(Qz?}3^h#Gy=O{XF;my$*2lI`AcAySi!)P4Jelw6fTw~m!Y z!Ir)EWtZMT!^udPfxbP!YbDyC`@JaK|3e4$6o2*#HA&GpZFV{Q)?@baae~xQ)U$il zA)`nDsWWm#*S>_;q+V^;+bWY-iigE1~lpGDhD`;Kl`H>u%`yLyHl)<%|LNITW`5a+ zzzj?8wsrv(C-<5zToA+wrZd3B6SEal0Opvg)>+MnT3;6*BiA?gYoFP>GJ&miF}o7d z3$BtCm9}|CRmAo7$#b_x|GoER+4U1vEYy6@!I_c+GRrfcG?9}fz$$VX!aLxtcvmE7 zC0=E%eY3D8eUN``Wtwj>Ve(l^jQqh~!zNT@9wU7E_h#PzRo56BN||)4&6sLAOfu$0 zy2XSRylqqYK+rXWgA-8cc|tvn0Ppk26ZyhV+F&qBQ3iBmi(v)2K$%RUp#xRyTypYb z&4r#mFIV+iq^cKP^r*E05m_5kd_JQe3)+$iF@B+1-_PR zrJFakE=2w1%7NHW$-1VWfqfx|c(r(o5V!4kXlBYKPMw%&)1%_YXz~iKKC(~VF+S5P z`fFdvdpzC^Iv7>cGw}@g-83u$x^sU9@Mj%1H%}WeKu60G?o1hhADK}bZ;JR+`kxB_)=}|_7NxA>IIuU^Ki5qp zY2C`8_D3-wKduuaV%Yxnu{ZZ*IOuURdsgP7@WPseY{>Tixjn{U5|JCH1Q6Rs+@lDj z^x&b9sCF5|Q=tCHX+U&39AIqM#+QVH=@L{hQj`hNUc>caB5Rnv{Sj23Wvvb!WuO`K zv6M>0sT`g&E0e%ma7agxK{>|ylGAivPGn!|w9jPF%5GF|fI2XCHB0)9SvDV*a&JXf z!Qa@W7Afq=8FpeE45-)LBkU%%{hOYAHCk+FEVFBDZ1i9E<3!)awI0+DRgRu?V&3jZ zl-J9ROOT)93!hElvFL(LAE1^l!+OR_s~+gB-B`>*Qojg#ZJ>u3+`+Lr>f#>*1g z01~-3J`h6G7vpncVqMgzFG&KHtk2ZWV}LmzM?<*mwDIsC%|e`R^cDYmmoE6~pxI=e z&TsBSsllNh+w!2<?`(JN}bWlD-!6+ah{)fS*1rNjbq$V<9Eh)=5Yv^ z<>BXC{{}=r?&7hYbRCzJ(EmcuSikWvJ>w2w)*r@X%eMqDGnr2GN@p8Js|K}sazg$GY407@ z)VA)8T9#dOsUS#I0qMPW6;X{Cok|cB<*q9! zVe+bK=>4{%AJ%o2_alSeWE{b&GF~Mk7{6MVZ?Q*QUPQl-pEVy^7JxP9*0{|C1Z zJ^~S0{r43EFPz7&BRQ|w?C2n+L>(*bsKvfnj;r~PXUg!+)GxJNUN`eajey&S;w&Oh z#V{IJvhOMX(7NOo%uYr=XaEV~SN91zU~>CEMYCD7}mSj7U`GnSeq|t+3SljF)YRD zT>Xi@Ix===*Y;xf-RR?b`nz*2S#o5QrMg)QcOM8sYEf|9vX9`WRvB4~ice~@fM;gL zrncQp#1}bf1?tlRpMq0w7$8t6Ypmb^9Rj%>$e3S{)hv@jBqILuIS5IZBKb!syi%*% z??o2T@^f!F8o>QnUzOh%jKqDc!>xx_&4yg7)5p_n0>^k(rYV*OUhWFDPM;n`N)Kh^ zC8F6#Cc{Y%_)s?Vb^;q8h5-2N^4e-Kd!mkqCb(2#XY5f#RgwKIn7U`7eMKhgVwvb; z&#{0tb9m0pOqiYceZrTp+r*y=xBehO{C*`*IG*`H=79&Ku+Bi4D%42Qt;z;I`gk{7G3~33pjS>Z6fzeD;zQJz z2rX@@slW9m;(y01+SifXV_`cG&IK}8{b+o)ct^TMLPTIndGiy(K**=(;g!#24H{pL z=v-N4H^dkZWUo>R1-a(zQ=s&pHQm@-ds%Z!c&cLf4hdcAPsdtDA6CxRQ1aw(56$7} zJ}(4I+C59*EJ*9%e_%~qzErkTNHQP=$FyUZfuskEqrjg}Uw(#dI7LjwlNyvVEXLfc! zn4~YI+sI>_(vAAx6nKxg3YbWs%O}J=dcBTl=}K2gPO9iVo?bXojzDpGWT4J3gi(rW z+pE;vL$ItkKv*a-d3H97wI;Evv_*3|YkdPzTy&OzEWzz+Ut8dux7@VW+h)VJS7_Vg z7Q#{?_!O@_F07}q-T8KVZ*!tCKU+o8)3h=7K=Z!G2X9<_1L9J10Sp7R^z6Vxxh_$1M`K%nzWx%IxY* zF<-UlRrt=YSqv})%GxjGEVgR-AZxq@J!Nbc*0VHBRlS3)dL8SxtL6yJxmH?+8isV5 zR3-WO6JEP~$>{0Kg-2f_q`xTiExf*nQ_-M_W|7V;BNG{PY6>=lyZr`s;#>+SOX-xXZV znCAEt&KBIl-k?^;@VRm-@GlDwmBpNqDIIMpjZk-$H2qN3NN&sG#0*qMeCL+>9TlvsV~CDRVL*7~pn? zP_Khc3%J=(ElHt~4@u{mqEmcVs0}e`vgnb9^hKBJ!8;*dm2u)%O(LZXIf{bvRi-3zW@bwb#sU=;SlSzd?kc%ApF z!boq!_`}!?mF&)Rb{6wrwh6xZLR>a9W1X=qB-4%~U`gh+&B#kesJ$tjRnH^AMz}Nd zRlzIjKWbp#Yo}9^yjoyCB(_|AS_O<14KYBXTM>$z9XI|X(KV%KDEj$#+Axsl-oJ{d zG#AJF;+6v0>kwTJD0ViUr(a5F+DI%jpd#yk^+%%H^3+~+@WZt_=4b38(Ysw{X7=s- zikp=Sq>rVESX&Yf5*`-pN70+_QE4n56<$btx}`&=A3T!rv?i(QA*kf{I%@0KyWNS* zshg*s+&?lRA?IOm?Xra`)vEK~qwN`gB6j8`xR)7_YK`F&DH)&FM%Dy=K99e0-XK0e z`5%EUvpvNR7aw@yDXql$vCoAl$tWPu)rGD%?tuEy$jgjhtl(Z#kfYL4)!+b{%~!%|LS0@9lLJ&)2`?0%l|tE zCql-3GL;VZ5wEz;2!YEN>0%cip-)dfx^SwK^baBX zp$VqYx1_khpi0WIAM7$O79`yNc&4RDywrN`Lfx@sUBAY}i%Y6ZARtMD+U92zx#Co7 zOg9n!4)_CqKa?O8KHbc$iW;M$93D_zTH(ogURWo?yMQXnTN{g0q4c$7eSD9!9;q!v zzZNhS^G#b$fs-c1oUCiJjt2${R*1E@{`kevi`y)n1(AKhgugb97dk5Xa8HSkgK`2T z%sS}v#w96c4XzHTM+l_xUmSWwIq=#qIE{NHYlnwRPZ`-cmG9T=qEqg18&O& z2za9REUP@WKG_@1z|H0Dizk?az6q*gs9Hi`629T2vy30-!eXchFNnL-Wm+i!e;eR- z#5}=bdO>wsqQdM&Jd>dlUDp+`k0m>`YjV_eNzDweEK3*NBRtS)g#wW zyi3X(ufu5<2n5v3mP&mZdCk{wq+cgT$p{<`vqFhNs@rw1A%Y8V+J%|%u; z42)A#o@Zf2qdqik)*0<^!ZdPuIukk0G+>${-nhnGDB9zqjT9Z}Jap~m4BV(#2>8RbJ4QtlQE7|k#yh!S+V#dRIxIGS*VvWQPV^bqL_59+4FS(fK~!A zNF6tgZEd}DS7_e5Qu1S>v@YS#0#(4fxL{>&RIXs%k_kD{>;`s~^OnWB7hC2|JzaSS-rxiUGoH>c`4w);=O+-?Q%ey@f%QfbVDD5T$hajCAcVXV+qD5KJT* zIND7r$1+1@b!3i>(Lulv%CT?%gFD^jk?)k`RA1!Gex!9%oF<8>MP5(X^Jv3zD&i_u zLC}AtnE5K;8rlUCQDXMu(iQ#AUPZM1D(o*b4h14pGh`!&pZU=)5E1h2`5$jJ@#KLK zLNYA(gK5SCPc?Q;Kubi-?32&0CNhR2#2RHJ8pzKS35ZS&-4Bl)O`jLziG#O;OZ?<1 zHapR((HyCM89g)Clkap)x}E5Fm-5v){lQENrD&0t+QO91X}K=Ha#zwfa&!}!$PZ`n z2723)YI)WpH1h%s)-`BSRNn}>r;OE&V{SE}N28gY{ZnP6;@b)iiFVgo7l>aYX&9(y z&UjeXJd)Ouf~XZ9s9(!uV5F2fD-h`A&EN%1yezj^48eRkk0qh{KJ>kcx25l3Mt`2_ z>-2FbqJwJFFQu|mBwC{%dDNd*ZCAR*U2U!`r5Y6o%)o~%7urd4uU(|Mo-&<}`}{HJ ztMqoOYHp1pGumk?w+8-5A9Dm&=*^sN~ zBhuvHV}JP#d~4vn*)XDx`B>pK-_w#s<`L~j$+E)f`UcaCPq@frFgN?m_P0JBtKXei zZcAJD&7Ekji4|-aVw^ru=Nun)xex+dbX98Z5E(va?=-g}X$muVxM%ateOdU^!#C=@ znq%@~VF^Jyz&?RBtY10P$`OUl94j|jZ?-mEzv0n0EA|mBBa_%`#&|2&KL5ASnmjad z#~Y%z^zG5){_Hf$hfI21uvad+uJ>hhBNVZ&&W6%cq^h+MD@nVVCC*uAL(|8coYohq z5|3_xPB%yVh{E}Iifylp-r7`7cAd+B+7fys$1A>S#mqn{QF9}m?vBr&-g(Wy;-1J_ zwzy`)T>Dl3R!&sM>Ec}u%?;bnco_lds+Z+IlwEf2S_^{`UORCzDrlWTcH_aA`{Hbx;Xbq-l*@h#{KS#ZW^^d)D&roZVBzU5Ck-tx#o9&YZw%+1^HED=Kz8%P*cP4T zrv(QGc-xw-_?W_KtSA+_;siaGi!{C$*Y}mCMU0yHC*`GRqCI^l?-Dn^LNk96DMaAv zt3w6~8Y23E2IV|SaEx)-%p3BG4o`Bs%@v~_r zcZ?cBhQ!h8TT^UhPbdcpcV`0{bimQ%P_9qd?GmU&lnj_B(Z#byTY5O#Sd&V`h)NaX zOT9!4_q1MSCE5~PgzX%t{X~mjym%BkX{c4gM}3NhLYD4tDv2M5b(FY9oz!RH1P_rC z=t#k@PQ5GTh(WlxxY)sZRYl)4lcz-2T4@hXRU$8!b5}<9(vZ5#Z&E+Yjb;y|>_qF| zYdMxQgo@T>^*$YCS48&bi3_Z^q*x0UU0iG9qRUsrl0#C|naa!LaZkmxJ+9(ry9vl| zG52}Js&scDR(#1CTpG3lW6^BoY?oCy$}w2BuT_?>)kFBR6o}Dl&`&n*rVD1+a z`dmD7Q}G?TO7R{z67Ka79WHR0;S8l+T$hncq*P5@W@c(){s(6@5v|^zRZDRRoijD?Q6f&>YrZRT^u{>*gM6f=xkXXfEM&USVS(aE{?6f$aKVZC)=%B z?=SLp5<(ZpE{!8>iUku?C9PJr!ZvbhIt~&KS|xKi7op2G7MBPV^5b^$_PS-2yjxq< zHS@D|*b2#fgI3FqL8r=EV4x{o>?#bmN9B%_0Rs&V7-(#V`ZUW2rYmezH+)OfOVWNr zYX+l*GLdy&ns`{dql)N8Uq)uj@)&c6s^lTIGdpQHq5qZt7iD>Wrg z67x&apalD#1xzwsZi9r^$ZtSG(1 zm)T60TbkSNAnKu;T9&n(ll|CT=V9vywPt9RFRVmTsU;U)m|qQ_jK5gV>*uk;xOqp2 zy>Lej5vw@x%blKuskS4fOkqxo?C7%mzG#qIYSWHCZ@)>`wUU7N1B=g`7lF*(E z3WOF{O>d2ZzjvG{_Xl;dS!)k-+9uAWaMJ{Qw$p^u(VHE$ggM`*VUKHF>;u!Ji^}E( zD+R-`P!X$9^=YeH2HxKnc+p+kDlAl8BfkKymLWbeP+4TD>0M11qu5%PGRUuK+syzY zL7AsLOHx~wTn|_S#FE0eJ?r#3w1<7KIx(iNr=iNZr?rw{Pw4Ur6-+bHwnHIp)wpHD za%gg}Pu8-^AVRQmnL^^1W3Y0e0ub%(OQyf9h9JJ$I)9opJHXoqo8);KIx!K}**7GF zXt#7vP+tgi^L7k8^Of?dqr90%M3+(!z!QvEHfevK0dZ_f7W-=&EzfUDe`pGQ-8P!; z;h1id|F%^?K&VM0CYhaPKjPc#OuGd$p8=nr>|PMp0B2b-jH-BdHA5QbUi^xMi%V_A zbI!ZWjT*_#84Jo<@YU2#d`^5+C5*h~V~+n8_yL~0UDHsOR(K83edIU-BHA?IhY@W8 zFhza}+2V5SQAArZ2Z(4>v)L$d+)Go=jwy*4cZ`;WNRKNFM%(j8C2Q#4LF&-Ln!9=u zXDSPfaI;5#7)h($;&{n-f^x3FxV_eT^}|bD!JX(a_#|9~mNG|SGR`)R7DI)~l*iT1 zM=h!$pAw0mc&|CV4$p*`oY@!iB3A8{43HXuMVUU-HEWlJQf5Dvkr9JaytE*mOJCy7nIli1hA7*{kG?9Blp+>HQauVY*||{iq=vc|SYgT@ zosD0+!u#2F(=3p@oColruf?e$Ol${#!%EhE)7IEWmIXH6tGr~obzK&d)~A2Dy1dLU z6e)jJD6Tekc8}jAi>cd3Wd>p?7%U}fBsp4e&7;UKgncYhOwQ+yVT~grt?os6$Mi(e zc4vK`Am5d|7anPprnpwkJ5mX8lW;Qp=Uy6&XCyj_#&gKpQ-o{I0ixrWE;=M#ygG@n z92y^tPGqu1lP~f$R`o&jls;SdPU_>)-!o~2n#Htyljsc*_cB!OWC{zN%KSnaj?6Q& z`Wiyn0Su2!@3-@g>dTEOUg*Wv7b}HK8(`n@&GGDuE0* z(}ToNKqH!K5=fsq6}AvM`padJh)m|VDZh8-mwr@5bQvj!-6Nbak5AXjk!reG51;Zj zRWP$xl(%&ru-UeY7pF$S*Jx6`u7o8iHv6PGjZW^CF1oYWy~qbYxRvM&BIm z>Sn6V3SCBctT5}^F0(cFNV*fVrJ9_CbXv4G_oIb^cc^3ZrpB2mX)si+=Iz0=<6UY$ zJ6av>*r($}t-}3lI~3gY474aSO;Mt3L)llT66n|(Mv5fn9c}r}Ud83MYxOY#*Z{{> zLWSY#KYCUi^Mlb>(@p2G&Y|%V$a=P$QVf!LB3z5^5@P+OCxkfx;im!it3CoKO|;)8+M;S zupp0Z_TzeyHppXh4kqTY)p2#hengEt^|mvp#wo20M?FMq*&sx2-UNAU{|%EO|DTzZ zS)cy}lOn1(Z>FDD?y@PX(qP@V(L93-wYIVJFY^+%wdP888K$1ujwknMa2d>A%yJ8q zRGpfCxz8f@qxAEcuF@#Vyw#Nt;f|nn-gKOUSy4t5ZigVXEye0#EKMU#D>C^CI86_slSz{e%xZNkFRYp6J~hcE-{f)m>H0l#Cy(0yLWd}6!Usep zYR}Prb6|++Z{p-p7KS6pZFyQfuMSY&tIfUf9mbINdYKG}OP-)(_+sX}R@AV=D{gkU zGX-=Zgod3+UPXRda;;OcO`9v2yzbLBi`R$x8Gm08rVIK4P?W9k%TTkB0ELqY4Q!2$ zlAMLX5Tm3)deG!ek>4&2RHM4tO>-}?8T-<@&wtEZacysqDWwU$EJtax#!c~li{^Lu{+2_0uLfZHARY9qC-g!^{!qj5U#EV z7@NQ3kFRzcCR`5S&SIrEk0$HrQEU=6=cGrfZ^(o#7Y0v4t;$-yEx5|lTwZtd2O<4=rfL*FlG1a1z89Zg;5H>Yw`#7h?C$!(5Zd zOuU=Igu*Fs;J*KfV0-tl_OEb>*3fWb17UhL6j0R)ysOA+#j(FL%VRIvzZVEZexLWC zA1Fj-7P#v}kZXI1wLD3!1;MXr^_`us_58LDbtu0++Y&SEKm0yqLAlZ_4~OR&Ev=Dw z{2V;j6DO3Iyi{)MrLE+hO-r)|6o&$xat|i)o67|dgw@E06=Jdf13qTE>o>Acg_~fS zi#h2Od$88Y4&{ej0*66Me6i(;7W3noPYz!XVSsA5^X)E7=ve?St}XAY=rp7;7RU_N z!Y>_z-I>Jj`1@SgGn7S`S1%D8m!;^GA}Vgu(>mcH48`T`%OHMkRdb?1B*snTSH6U|w$;d#I9I7K`{ zqJ5+c5K-4WGAx&_H(NO2ggg}+@=@$n=Fa;`&EkkqvPI{?@c0xVC$ z#eS}G)^DFqX8nohj~?*c;!PyKeuVaI2&PE6smUoqy^B$5MRgp;o-y`t)G@;$Uj7^0O)(MzMlRO0P5K`W;`c*V~On8qmk;H zq%q?7kx0g_H)HJqv+9p4IpH9DB(|@x0N(I`Ob?EAwIeERz|%6+wcQA02*Gze!|oz? zZpoc__V&n%5R>o8rdQayN4i+74Y!p48hFu|;~Rh(p$f@oI$4iD&;c?ssJaxs2tU7m z{nM<(aEs>WU9EA2+p#ndj(yJj*M(bRw>C|6G`EpP0rE3CzKdgQs+#8;aze}*+f?;^ z=O1#B8yK<`8^7W^N|}5Wh*9+9j;1GGsYtSB9u*6<%#HlWy2MT7WCBuU zRSt>J?9~?({gg7mcn=-qqyJC4%1{mgBCfQd85 zj(m+2|)@*&f9g9rlkted)~9W8Fv)HzrE*E#`TK z^F(A-`Ab1jhM#jBG`EbvprW%}7oz||=i~BS*6%DjEHx~@-&OncX>$K#Bhxpd^v3RP zbw|6f4(#1z1JQirF-&MAJeR!&J<%oD*eJ~?2S{In8*+pS@fDX#+bIcN? zxWb6^2}S|a&F!qF`0COhI`>Yz(Y3#pTkj^~-o$==VUS$)sns#rQ%`orl47d-)=WqA zo0J&6biSWkqgpm&mX$S+1=q2Ttgv(u8bzRc&AL5y?M8?*J?G&OprqFneqv{5Ec*s= zZJ$VPAWCI=?J+gn7%=-LF`_Oh1G=E&PB8H+hvcoXJJ(oj z6IXw8;3;9M1HC=wNOKZ0Qb|6nQj!4om0M6|^fFW;U~RZv(p|)4i}=4j$~VD8ylYk} zL1|jE{`h&OZaad+6Bz4y%eS+^g4=(UIHtHPySrYcg%KSHpgU4iO zUUN3E0;1Ei4I&;aJh7I3J1zTm4hf_SJ+fh1>=}<(qpSy)$F+;+TS0=Fh%dw1)K<9I zhp8yN*q<6P3w*?zCeQfKYK^Ud!OmY_qrg$$R@402l!k(cOFZ37`N1w)If4w^Qd%VSDySvT|k7s6N*>F3!~Q9>n_zA zNfxk?kw$#p6*b8VKE8>dy@GUt|pgg29m~xM}b%i4l;<%mJh_VW}2( zH*G7b3QW0sYH6c~e#AuB8XxgcyjZ2XGS+@KL7n~LIS~1~@I$07ti9J4W&Oh~xV_#T)awsTyK2rR2M3PQW z{6?Pm0Z}wEot!_JtrvKgSg4glq`m`6B&UK-7oteDqve zJfy99>bE$a|ICp!ZVw ztnI{3$Y^gHjoXV~P}_XkIYlsUc4K8UmN*-p7+3(J@*185`@Ag2d%cH=^zq67hUU@Y znULG_Uw+V55VX8vW0${qxQV#8XCl zA7IgAYfSF90>tK-S!JW4k9-q7Ia? z+jO3;1LllDXVFqX>XHNd@D@Za=y=dy>bzMgzbN3C_-kk!&{*I5gTGuGwVJ?s3AJ5D#<1t5x#%Mx};uY=nj!gLl+ znM;>yz9r>Ve zBR;pcI%V~!%;QRLB<>`W6HgI<=k{sW=OEt836LUM?jE7W(-SMw%E6I>_7pgDd!Dd} zxakTsQ9bH;@kgQg%lmIm?yO zbeiDqP@%%FcGg*q(4tZX+ba7|m2ffpA#pF?)$isz*G+Y+GDZBwlcg!8P${U1Po@gB z<9}N`xzBf?w=Wbqy;Vgk{s&QF?G~Z1_R$+m^^4Hm}G~q6z%>9 zB182~xqr@y^gq-T)bQD?kwMKu@8-A518#AdY^ZV94{S#thd4K3ya>BX8y2Y@X=wq- zn|cqOeot)rFUP#(5u&rLt`+?u#oTi1x7BryO}X%{#R)uZ zTUFRuf`g#TU$!|BQ_wiL{RStQktc>ddajy(&bTx-g1DnIS^|R94OCI_LqFwwLN9_7 zF+XYZVzbQPwMp&bh6FlHqx+Y`fltY4>88!05&@)GzUX)U$jJcDxV}U&-Dh0Eh?C|M zk?xj|A<=iz$^N<%;e)#};DZ{3fH0$$Nxo@TEM$8-q2ry`bTp1uLUiuE0QYT{o(MWr zU4Hc=C{cr9_W1?gA343!T^p4T^gq3%Oh70H&rLRWH$`Oebw}RX@yPMIPAt)R+gHrP zVOnzu+(E|rw>AF{$Ee8S#v?QLretsm2B+ubd6Mf>F z)OAvmEbV&`qRJ4lx}d(Yz7mUhWn7(J^UKYGX+9cgd49OiMN7?407eBqfx|B+O8`0^ zG+97%DP$kgO^{-V51rczAVawVz3Arhi7?Q`6p5rqmx>Bm^BCfdtKq8L(`kA_;e+9yx0Je#hrTJ;{`QH!sOTe%>?M%6@VQSn=M z_3I3?kDGw9vW%GCjcK?OA}0+xE+DeG;2g|JyGkaMA+Vv?T;&;8+U$T>X!c##0WDmv z^_wV+gN`0XtRx?uAEQ1m@Ohk&<`v|lKZZ%q zh$SiFhNi`P7?kx!tZ7ojIkVdhBd0XF`_&iWZYkVgn27?KmaUq0!o3vFQdMy63AuIM z(&pwam^rmN<|8E;djLjG?e1(EuKL7Kwfh`wNge?5vP%#!n=4|P{Tz8_U?wB+Ul8d{ zUt7V(QoTCOZ(#1!{-h_*KCqIJ?k61pqEkYv3?wkUJM!dNj;<2)<$PYO^5+Mp=CoV0 zj18P!HLTn_*wbL&1pg;;gCKUWQ~p3-fRJqk>KcLE@_X~eb#|Ll2&>sVR^+PBbbS#z z2j#i9tT%LXg(vdcNaSdVjkD>}va9=0FAU`f)2)r{PAJ7XdG77eTaRTJGmb@THL%f= z2X~LmPz)W^RHGd$+X;3MvBCAhPIlNjwpe%3IwY{G5VJ*DWSx-V)zhn@;nv&ybKjQn zfDmdr!P=qFdnGyqy2-DXNbc0^Ea{q2rEQ2A!mMWYq3&`CU|zweLqkJvn!06qR<5{P zO!7R7iMfXxoE%*`kI8_jkL>L2?HTU~7B{%hIBfoiPiBkL*1JjG^&34Rzo%YOITskZ z)6eSfWzfFp^Iq`%WLE6M@I6uC*3Czz4JL1!jjn#i&8BRaM?o5Rk66pXm^@NLpby-q z5FKMjAhfpkJ4Pv#P5TEr;k$y$bwGjSmk9+5U-E8>xOdARh=in`tKxJNnYZciN6f=I z@@g=w>W5!h$Vy=4E%_%Kwyc=AT?(Pus4|7j(6y4eDO->hxMR~Nxgm*|oo%C-L5S1b z@ltvA!`ge*T;_(>N@A2@uhjRtgg8Tb!5sNTVq8GU)-{Hw{&%zDqj1gdV+CrL*(B2p zs>&OG-qF!}Ij>LEvQm|>V3gxrdYMZ~9vW+IxtA45g0pi7vh_jeanz55qE06*zN`@B z7eP=(p&#SkgcZWHs9$tWQ5G$1arxF~Ctxrt#cOnHl(q9vtTwJ+5CKCpl1=0HhWeKA zrriRcRcPmaI_Z7{YQGU~iPBA{T+>3Fww;T_&_~3`0tu#nr^>}dk51ZOcx=%L3Du72 z`CT8~o86o(Es31a-?g6?8mL)~S|ukuyYtbMUd?I!wKCj6&BZNiK z{6qS0$Nap9?A4Mxo^zHW1=s*`r5Dn~ImWADUS~$?% z0RJJCVbBF^aXNRQB)(jhdUZe5y)_+uYs}o&XcW3vE)J3%O|9C>T1MM#|2;UP|8tIF zXhR=Uu`9XiRgNl68F#EL^vWU1vTx-8U1OAeP@I8uPRN1nN};_7-4t{hg z@mrt;T5wy#POV9v~6B*6@9 zR=L;=(SqON>bx5g>OlN0f_ASy6akB%aX@?QwWDTNIjR1bfNk`E_3&I+YNP7RfECJL zWfdNh?_DKXmgnkP)JV2=q!DjjQ9aNM|JIOIWayLRDgm?cINiFvOYv50VE-9cO6Ee9 z5+ZoK{J~pM6m0@svsCZAcuQ#f2*a(n<}x(On)`RQEpY7;Zez^0|CM%zJi46 zI)4RmNtBXxtha_OHq3H1yFaE7CoQD7W(@G}&%FORK|+V;i=0+)maGGY7@H;I($6c3S74bMe3xeI@;!m$mc zK2=s$Ypj$Jje%le>`s+2(tRimCWtJnSFgHG9kI>0&oy3c=GZu-T9uS)5l*!c%W)g8 zL@J{)KE_c0%ck2|228!eS8@_h#-8bFMV#0p0`*;qc;I2i)-)6FA2Bnn#*%tZ2YhmT znnX5gzsc*j51P4ut$#ef`KfvI>#Qjxp%Ny!x|M~(aN2qe;RnorZ}v<#L8vFZeBOKJ zOIN20`Yf=*y%aRM>zpN5t6ukk*C?zVchQePSO8jJvQ;l35fklj(#y`yee&b{A#ASU zicM9URQmiyr&0Cje0?g9#usK$%L*wmdm{`%X&10M(c6=2cUTj3JD146o8)=-vF-7Y zdaD`m;izuXLZzaHtF#jHvaA1%eSK+1rx@zXF`EZeDPDvJBjRh%4BVrBGx_Yv7+F(w z#YbuVod;ZS`MJNik;)P#wd|aTP&FKVJI*2;xZutZLOwYp#Cyi>wRRENR_45t+Q!P% zeTt!ReJ$A@+GeaA+7%e}ER6|yl`K;F9;|~pA|1h4eYGcwD-H$LYum=7pesa|<;?Y;35@JT)t4c6C8zazU zoLmSCT>wQWqi%xpVhrX(-j%*F1@8&y>3kJ2kk=#==d$g@j-M=Ub+03#=4Bs1h=%q# z$;RNU!top<6k3?>@AD{~Ha5P)_AXfZJLnXdRL68WU}aC@D(s!$jWr=AmKNBK!427; zH(yYX81W#XSN$^xBRK9d3vA5pb`7WCHVejO3N=y@{XoNQgE`#X=DoF=cY3G{1%_y< z<0_3S4^0g5z31MRfrXp5)+25$-`AS)L%H4vIZN?X|VcU7~v0k$O701xs3&c9@ zw((Nl2Pf#~IbBU>z8!ZANlD{zQ~OK!c<_;iH#xB%%J4md?$5wxwpL=7hr2F4mx^&{ zBQiUdixC(h5rkl$0uW8+lzh2&rE7n7VNYp1vROU8^^IVCj^g^;)gteU7dW**Pt^IV zH*$L7U-;AHK;hrT>z49rgB^o1Jt!^5*Yk^aSO5Ce1EebfL9dh2rctrv|H}QM2WVCg zJLi?d&Uu^P96vXU&8_&p;rhY-ROe&z6-o`ze#42BtCJdh9c!TT{zlcGzs&>owoiH> zEN%&Uq-_7cXGc!xE~e8^q?os?e5)-d!cngv)T{23#Yv`aX5X~F9!)eq(dls@20bN+ z^9V}?vRq=5U$&-$<`w4~&pjRle!`+Q^h!`;O*ZJnfsP$mT_&o#%ykzkb~}myir89= z40o(AP;~duT;7@3#}f1d>o4s@c9&c?Gn`ESduDr)_@VkqB z97UQ`51>cKdZ%iq3dPln3Aq#JgPv!_49TjHvH;JQv0;cQu8>boD)62Y7S%%cj;o6~ zAbKqRwO{38gri{yS7iiNPzo8~IEsHUzaQ1Q6WJ9BB>r#-#hW-v2+FnSw9u_wsmmsz zH*xNr?X+hOky)&u#AzG1djo52#n+ow?>AMI*tkVskWgs&V$dXnvzTr6N3l6H0Ssb8 z)<9^do@kk9aarfqruIHU{B~yc@E%E3bSH@%Uge@RaN*4TES4n3+4=C>pRZS)mpt;8 zCGuBEVdDzn$iQccP()w)Iq(p^oXK%N+mDaUWDTk^>5)R!5ZUKO^UG_$;uQHR-@lut z(N7 zk+M(@_{$9#I7uU%4!YiAfOAmMd`_(G0ue^#9F;_$u!a5B@dvkt*c0WxDe-Q!D3Ck0 zmZQFY_6M*Ck|^j>t9J`m8wmPvNR@)*%oAT42eG%Fck`j|00-P(R)=Aee&3Q7D9i>9#>bs@3{1w?uZ<`&&B}AVtaa``U05bsH(VL z?e%>DcX8qb^?Tq>4Ku|`6$=E27Y3al} zO~LqMo0>t&iRoj03#|R48~hKfOx-)c9vs_NWEgH*tC5zmAo&1Wu*abjote|i9*L^>9sr4#KNvj|CGX0BeVG zd?Ip@9K@++INOb%gwAzwsFa`}e?{@7F{IxeXl>YBKSmA99Rxmg{krT1GdYr{^R4y5 zv$J0a|4?R6$o{xBwamCSo1x|dVYgdm^c9w$E_O9fc*%;=4?Tv&@@T7M%lM`59PV zytD*8Hexp7kL{Pr2S7Bkdg2g##%mld93}UQALesbEjTix!JkLBKd`Oic>ghWcnJ}W z9r5?5E2#g!q!#~cDt`}PECu;7l?t<+L`PQ?Zu{Cuhi*7F9$folD z-<|ym$@zy%besLI{?B`GpY>l!L#4=ct~>vL#iAT|o>Rol@PvaCK%r5T@@c@)wm^rp~DvHwy3upJS3noo2oAf;~4PDoxmQi+^kiaf#x zDHU(XJ+ab8`DC1-ddRhxS25!B*SCqCB5>5MH_KBt#a}hbz4-kxW! zuBqk4H;(j?WiqztMfP%?3u5GU-2jj-4M*glDdQ)N_BO|W50!Y9OJ3OYR*00T&hJ5w zjjhs+`Ly{QjMOY1YV5%n^aIz*)!ofdAgQn4=dfLc?bDP0I{dqXEs2BpeV&85>tpq+ zhGX?;=dY3BTWKZeF~V5=PP!#Do*zPRC~_mmA!K(D+>!l2*Vb=N$*-;~UP?mZglyn_VgFInT z4=h&1sbs)W3VS)C;wab(*6*62LW!G0NG1}MeUppW2CnN;K@+Jw(~lRtF5t|Tc=C;x z(P4BkWkZ6)wvi~u_}yrIXxnUw-RmQl_le91iCrbb8zdnch#nvq!EJMrj8P1?Y|yR8 zUFPr94t_8@$1l!9$exR0&cS7J>j}j&#qN8D+I*X^gVutKPCZz} z56$s~$&ZAQlgCmqCNqmAYRkVpiU5Q&E=DA=?j_byqjbGN^BR?$Fdt@T$ga~6 z8qB{ee}jiu*@W!&_l@|8Py!jBY_y-|$H2RwISGR+2EAUeF_dl&um2>fdJPHoLs-KI zr|Fq}xM}<4$R_&*69HUI@lHNn z?v9+t&Pp$l@$Tuop;rwrNQh@T7)wi(a6hQxY~oAf>NpM;coq0_J#|}#vpOmD$4+|B zua8H5R*-&rd|>@|r{KTtIOT@t9s~9Vl)TY31>417g~GfBt{m}F;d>)Z{N7}SDRZcK zk{uECcoB?;2*zdFHr^lUkhEoEt^yx6K9Rr5IK(%dx{;z(S8|Z=b)9&#o%UPd22 z;ABgQ-qsb(?#Cd`_<&?S%a%3t(rRwsi{N3A*~yQ;X-^A(sIuOR`Cd5_q{1|$J6vwF zlTffA@_AN!Kp+G%1?oYeaQLuXNzK4B;65}_R1h);f*9W3>Q<(liDJIa^}8~eO5Z;) z0v2W?F^MFj_6?iRq>k7U8|~9ghrA-gDW)n|m_Wj;z%2`GT;!qSZAP5y7aQ~*iyJlG z+*J`wkwUJpFoXAEOkXh-D=DYC4e=Uzt0UBPo36tzet$j4(p$(`T!(lOg zFqLL&pjcv;vmPW4k#ZXy4pG`3dIT(A4QH4!*u+(Z4;8uiSO9H)ZQvg9BXWAA&$bAi2hjM zDNUi|Yjh^vr1+BU^}DogPndihHMlMEA~DYV+uKH!#e5iHucN!@` zovd>sJJ!w76#}m zZy>w}o}mv_c-ep9nvAFc*EG2P|H3udiF4&!vf-Kt#z~$*T(HpBn%b`UV=f`g<%Cr` zbV6W9%ED~xd(rIk<&KGS8wt z><=|2~g|e14+sK}6 zWXYPLgqWDDV;5tHv5sYovAn;T(fMB2{a*L;dG6t;_fwSNFkyPFFA?onUm`7}-U`7wbtBvo2s(zU`V;z`s(a&OJ2F*a^8Rdl z^P=Mo&mHa@b;Bv!#R%{_k3r*CrZ(S7l>$oG-Am9xw3ry!s8vQdgLsyEMG zeDRtSdUq?ZV`LEeN2rHX=%G{qPbbE2&jca3T18tJ6s+E*6~K4ANAXqtXNKFigX3l* zJ#Lxz7JMqaRv5YXW~yz>*S**83v%g&9|!jIURB*IF4yv5AFkZOJTt{&gk((p93*Dv zxO97TMq4fR2)fYXEhRca)fASVSX+EPT9>&}NjJ^arlIRfY(m8N)m*~|hxyNrG5UpC+YEm6u;JFg!>YscJ3C}P z`A3g>CFd;EKk)uq_gTC$Xtc(6m%c$r+sLrLrPMKnXT|ABptm~jsqlr?M~PEB#B3-g zh;Q3`#@CNSJbce`y*t5wfQT&nBHGd?Z}pCWWfWiN>_?wJy2#Ql>eb~-Sp4BU!xIwNjB;NQEB3?0^TxE#$28lz;ixpT0?lG8e3GPULg7Y938MX#a^ z7V#a}7p7knE_SNS7=+Etu0$QHvPp<764z3{fvJnTFz`6{X6cj>K_ewe-odwv)FXN2 z`LmP2C4cmWU+i4c7QPeTY1Nm*8y>os`S@pkir;`mm4(=ey>}aW zJ=OTOwQ@B<#p$pPINY0kTZ3=~YW)O&vzYr*8Yn_qE}=YvKU-WQYsn}%!OjWs_GYD@ zt45PuBxmichJ6++cTl|2b#!oZd!g1v%h<5L*$pM3S%OcS$y1+4mG)-Q1( z{@m6$FMBI|h6~JK{sUy{y$(g-nGXq;;UN|_D35Q51)&BxUB-Z4Cw+Z>$(PalmRT+l zUqA^^8Ub)s72iwFk!g$yc0SFga-B2aEWehXoURayN4nuGOK;{JiU zH>!KKNA;FIQ+S}D+#hva{wyUdj|}*oLB>f27fKRmi&7IZGxT4|ICBVsRcEVkWM|`s9wQ{ysxQ}WRJmcmD=2!|$KiocavV`6k|3}! zc0qew48GtyI_Bxw9rets$#4;N1Dg+lo`0lH=3~VmB4W=|fiKtmbhe7&^pw{?fW^bYBADo_R%LNoSqzSa{_nZBH<- zsn4b@>w-2pN6>M+948c7CW4eV$M+dFxjokZ+tTHedFD#Vh>@k$J5?ZhBViLN-(>sS zUa{ICuv+U$5TEVwOY%GYimyGu{OoK{@=ngEFU#)VZzKB9CKnCOC-_&j zj@M6)&mKR4-Vz6tPL5V(TrjtTd(kLJHx=pqFqczpY2ql(#~6w7i^e#0VRHD69UM?bY^jC%=f?u0N$i#0M!ZCcU8T9zQA}FS&r|h6ruV@TP|`*cIRdK)pkvnvl!(Aif7_fFuw!T) z(O2xl0cFS0W~am5Zs{GE0#YQ>_dj-4ZSQpK_``jIu zI62gKqKr`}lRLzou?|C(=g8<(`XryHvsBLo53v#Ic8!xU>)!Ag3rB=UlSYlHF_4mu|4 z7w^{X8>wG_l)yv#_2u#`RENz0fXY6lkS&x0<`LSllmzlu1T{2R!?S*C0YIn9i5zf( z^qrW)6UH|KcYPKq?8Jcs$h!M*EZ+P4?8lUV8?vquKNQ3sQh(6NpM*Ehg-PP0LC(@I z=QFoi|LavfEmvy^Fa~zTQXt>A@jc$>+!;<)fTvg*1EF@wE78v9`xi9G^xP20S90&w z#NO4J${&8%0A47%;BXdXINa^}Wq?%TY7x&mNCUkrZ&UU@Vy{cL-;*y=u-B}^SQC*~ z)B>5GWiLc&9K=@peA*S2%|G@pSLk)IPSXTWHT_AN3e+qi1w`T`_n}u_@hj18+0Qbd zj2n7z{hpzKF=ghd7W)0#)cr@wD9Aqge44QOrgadd7p#Ws8G3~_+OQ*C;I1?>{v33T z^yqS#Iz``ndLKcA?Oy?KD$(A+|M+8DiUv)tK5mP5sW<*WFUhLZ=*LsHoWQ-^Vot@t zR9P1AgUvtW$i;3#Ly_B`Gni=UV*h;L08#jFFXBEICF|*lrxXo1aQ|EC;P@HZutJ#p zGVY^0N)f+42r}E{>8cJ&RylDXk9NPF7WUUy4%%m#*rA&W4ev@{(myyV*>Cec?{2t~fWXQ=%g zC*i;ZOShBf>JB;LH{~FHyqW1&o4Ch8J!dYZ=e<%c&cwzbHFwaOJuDm?&}c%7>KQ zH)%pBS4I-Q9KqgpK1riaq!QoyYScFB-E1e;(-@32C+p`V(P?IGWmmq?G7@+Q6MejJ|@?Q1raE9Lv1n=c73uXu7Q zH+F;m*tnQ}zv$O$UGzz@6N+Nd{4h7qdQSy9QOVvvtM{MeO^&il7jB()z1N+j^_Dr+ zmeh;8A7xR~cN=I~FE(`Cj0RTx`VsE5S1k?x%^O+$Jx+wWo|U>n{1`X5&JiaVAi;;j^XqMoG|1lE4Cgap54#t4)(0(nP7)~_pHerIl3`B zxg!lW)Aw1Fc}vWGKjRYj!39;EMF%>ihI?}bJ$~C46p#FWcq~|Qx4OVRgLLDPqaI*NswZ}Y>22D~t?j1Lq z1j}{3>pjyRwRLW+R3sn2%rut>X9?!=TK}0G7NEKl*8exOH9y=5Ix?sIdaLQ?hCTCQ z?BX>E(IX{cJcxTq?z}Zpz6or5l}shXiRtWI(yFeA4^8Bc$sBlkX2!OyV~77*n&sm{Z;6=ps71!HXBi9X@5YwoTSDlSV#W z2uY5%ZVUMmp}qohw>g4thO-5)QWu`a^(~7D;htjSU~5wAy=RZwN~aPlMg4LDj?-~g zDrE1#j*WPStr~l}ZIUdI)h8nYGxuoSluvJ4DFa0p3W@b1gr`!io?~VcfHJ4yuZoGd&oP`*oA@e+sl!_^lN!?&0gd4hw96Bf8q85F>^Z#%=ko$ z758+Xo;OM3GZ!;H5!Bg*k&nvr>Tpuw?b!L3_!fm(Gq%#bGA-9%459B{V9lb#Pjy($ zR`xvppo$}DitXa~D><9v7%Bhb>C&&DI?2J_^~;eIh0)m1!kf%B4eI`ujXAfl?OTFq z5xvHPjqXLKUq%EQr}Ms{cQin>gQ|m-R&*G4KEkP4Vf1tCNPf9igFJZV5=G4y#S+s~ zxF|LWXobHTuwYZwPyC5-uP&PiQ~u|H@m|jG=0{-N{OPg1yJM;txGm))2EM<17;L4; zF&-43zJGJfyiPVd{s^1fTcFJ;aW4(lP&RJPpr4~rH;LSUJ=Qx3l_Z*r-;X)p?%_Wg zm01rnsnX4K8-G(m2#Xt>F||8%*Dr5eFAXDDX!=KMCT;2?epq?L-d@gT94Mjp$w6xH zPjY<<`sEa(#+Vo|Clpj!zfSQG1_>>%cNk!UbCEd+o>zJ@B@RuYRvkpyyqkxP3ej58 z5)u18JF*q~$K1x?;}&3E0}OS-UKupMEr5wdu4bLz@QvtnU*h(q{r#}@Mkx8N!>J>v6XC;pV#zPy`kT91ms|YU^C~TQdIet3lM%JV%Jbhn zVDHyC zB1cuZ-1v(^r1#r1x5TcQC0jgN!uED3Q#Swsh7X94jeMA_X!3#<|aQW3c^N*QO%$7uVT z<@$i{45)r9Lv`L~10MQk*=y04v^-L$pan(`D8LUg1$l*KzURQ_vi!}fcN$_YU|!hEltt=Gg>>z9B^7yr-;=Ejt-=HVfzoY@8hs_OH2M=?>au}UWJyXY za$SeQxfXM6TL)G2D=Z=I885w9rx_g-9 zT@y`A7EWYY`V`Q!%s%(3#JgjrLTv~ky(7hjn|#9PMi0bM@us=GNqCX4^S;donZeTd zjb7|KRJJ!@;X|a-1|MMWI}CV?LqzH@+1Fpq@I`S2Q|FVgjc_leb`8|(+3{{TI30_& zk40Us_pS=M(5c0&?Eh-t7gbPKg-q>s*L)zujK=5OYl+QKwJkClZk+-?%nTJ)$>Q+) zZ|pX%cK2t4+))q#Zhp_T*38hQZiLuYT`Mq<^-2aEbq#6aQYtOsVFAkX_jss?vQj02IyL4hWMqNciu^LyJ)?HzNFR7@Zp(;y64pTeF#G0E);SgI@t zT~0%oi`>l@1Oe5AprN)`$$B3`jdFQw)7x0I))P)j@TZ0)B?`Bxz}1e!TVcOk9EyBb z^bui7=H3@ThGi$Q4GCV2w`+%XBYs3BW#yE!r z#n}1QM>uDubRB)y>9*~x>gHCt1c&4Y*ZGkjY&F9AE}%~^AhYEksYr~938!Ryj`hn_ z>q98VlGRfJY<33pc2g@w0`q`r%3dR)e$Q->?YJ9B<)qn5EIb|Yad%tcIAu@Nz;Vi! zq4fj66KEl~Rv-vFl3(FORY;X|>Alev?wkg_sRrTTQZ~D)_CCEWfh>ujeN3= zY{^NniM@`vEv5V8mojqe^P^$k5efPmYyH0ZA2n;trW(fL?NVleX~dle=RA!YGtVFt zoCwPL6yI)USy$gaHZA?0e>la#Y;LwooI&r?tt(i&!y8!~uAm+a0-xIwjU!Br8Sud! z4rwgS>Uhsyxt@ABX0WS+u=F5_RN$X~t&mh^R%4z)&!32yKLQ)q#Fz<7j)=YViFI;b zf_b7yveUJ4`sOA++WB?1j#xvFKw3_tU@J35bF5!ym*B_&0Io{h+qzBk&%y!lGnrpt2)~6D9l4` z%8(;s{Nz3xKT{S%w-R;yWO_4&)td1ecJq!4-aex~u^8qGbMcsYxDGr|9RaA;tulYU zR%w0|j<7{cHzo<0^OMRxF+)~r?b()8Fat;%s7Hzw0u?aV4aL3p<#0{Fjjjy4jSqh# z3SyLJhn)O_WY*s1c=l4@u|7=Kip`Zh-yX8MO}*zGI5aK`I_s*pScQr1n}930u3AD< zdjjT`0+t-ay^OL5Pwq;gU|t{H5L(4*!miWGFbntZVV2^?si&WMALtIX6EVx!{Tk}WHXO0Ns7{J0?b5PCPmD{hc zzJ74!H)F+UYOc|me{z`VSN?TB*Y}JT?&~Hde{RK9_on3&xQ-v@=X%S6tz&?9*ZOQrjxI{%R-@ zH@H|KR=}yT5j{LXtlZj6n}qY|V=U>Kga#mt7f{XjS)hm`UEjvMz9v97juZceGp^3~ zG66THyUj;6_Q!X3yfX2m*Zxhop_P#uGRdLpIXq~V)Wb5%4IgA$jjTBt8Re2_)kkE% z;5p2<;GPBSPBXyn)H?k3l0oJ1EQxgeVAUuG*#7|%I$=Pg! z1>(etxo^&bsRdlWT`naSGR=c50_;ydqiEYMEwC6;+)o$CT)ZL$5hVbJn04Apu)qF# zdI_&46Ilnprd@)0vi1iHk+ z#hUWARbAcm?d@=M`OJ-i*1Lvhs{@=(PIj{zKa4)FY;4(XyQC1A+$ToQeAnwuS;9&i zhtF7a&7(os{54ta^}?9*5S93yzt>>)`X8JQ$1Ti?9EmR5$*=`BsLCT1X%rij9E#&Y zdh4k-iX`*libLg2NFYH^LP=Mt1IeLU{uqF9h*pWk&#d}KP` znu}O^OJT^{zT^8QC=AL~@Hh9>t&%p)hiGU~sN;wqvPkSV$Ec>J3kQ90Ap1gOej>{z zVhQtqbLP%LkikM9*^b(me|wt12CdO z7{2uM1cezAV>%!EZTFshxV*gS<&Pd7e{pdBz0PRj0t2qd|9jd@ z4Nr7(_JlS1fZv!QOREi9j$iibDc0WT_=!bhI6bmz;pP4l8PGI#K`W=|AlcX0&U*DS zNf`fOcumfGQD*Vs;JUdfgg(F=czkGdrb?wx6VfP|Qxz+7z?Xl6x+`7!Vf}Y5s_L3kTm2S44Pa z>S^a;l%<2e&(PuPLz`C`cIAX5VXvKJ2)M;m)VphPe&^dnz1f@$VcC7cvco)Qpm7N% z9jLKe7?W7B=}C8tC~mxe?a7<$hwuH}wTA=)?fmJyT(0PkMi}_UFD1FX2ZXJ=0z+E| zgDn=pOG4fw^7$-I6Fjhin*Yk5vGMPob^Pg-f>9bqls?CIJy;HfBnrOQaKd7ywkZ?^ zwayEFJix=+-#ei^%xbY9eU1R?yq-^fL_xfIy;Wz7ji0X>4(Tfzyzsm0E3-LP$rac- z-cx}8u+ucgp%w4R!D}HraT8*A{At&y)TRbq%p)6w^WtrOlU$K?<+d^vs@;=vidTQ@u65!Vo6IwLF zg`Z*{ccgR7tlgjybOPrN^vjb2B%xA_v)s*fyn9g70gDVe(sR^W&`i{U&Wqrn!A(?9y6zHze6ok-L<3{L)t;Ec`@9T)Y#%v)mSL2w9-Bw+(t z_c>SC9X{EAq_tuMx&)_I5WiP0QKQ`O&@HRTa8z_E`)(5-zS}8pa-UbiN zp@I#5wnD`*qrWTI(A%Z7y);NCN)T|0W{7&q)kTxadug=Hoq9f^eio0*H9S|MQZhSo zg&O=w%DDOYe#6MC%&X*!sVGj$!q-8^cwGDhw_lvr&#lrk!MM{|SBLG;Qf#j))q^Xz zS%~b?5IgZp_P{xIq*A5JssCc4ip^9&j}efH=5wMOt>4=mHYof{F@8-M+# z^87CSGe1NEOc0+Bkzj& zWysQM5o1f)8J_X$px|bz{UqGUFZh7PGa9vm=>TwM1b{QQun)4HccU>%JZvO4hdm&| zu}NBMR)iyMgm+)Hpg(Ug*ndg-W3aZwam1b_G@z$a6Lb($1UL@SZ=fqcp`#Drq$a6@ z=`SvEQ?4A5O5qXq3ot~@1y#B;VoO-SM8B)&+II6$y#vcI%wOJlNjxvW4rJYhyIHe2c6+}BFQZ1@_Su0Lq&UvlM*yECv&bZD zXN5EzAX6AXfljZ-EY}qXEjiQtuo_A#)rqh(5O1X*y zkBi?@ha+GS#tIHnNx!$dJ~g|KgNm$4=Ch*3KHrNCo!iPJz&^ZX=Zgfyh#25YNEU-oPO)CP!~hzOc)Hy0rzM7!$Rw{5a16a^Ga_++En&Q6{;dx}vGHof{cSh}kS1PPGxG54Fq(3#m-0LQu zGN~Lm0QH%=#+@NY0pj?=$_&Cl&6b?Pqt<+j@F&YG6b(Bq!n=)lnnuDyJw~o^gN@!; zZT`iihLVN`Drz6aC#Y30D*{|=Gb(}hG&aLN>zqK=7J@|BQ3O~#XGuf*bQciW$19(` zl0FEz?|YBZi`3-i()Wf6yDJe-P%mg`zWNe3ExJ^CoEBYray8`+C7{$qJH`^Y(9#EN z?|a=FhW&%N@?^JJL4jf?jQoD0Y&uNs6o%)x4&Qs+T9;$z&V~I=STPxVs znk?`xo(eaXkDHjHmBBRRnEj1B*6^-UJm^Ot?{D6DxhBdim?}~DaR(D#X1Q>H{?;j~ z^xz*Rx*A6Df!?OTEU1`1PJSH#r^hf}sM2iNnI{X95gR4P8f;SnHjJTF+hYVVq2^PY zLiiDCL!`GzP6g*^8$)Pz1s~^+o@=XpGS@L@A`#}s1 z7$&=vYgbc7$Y{`#zTq>5|Dv$?Y3i5Gc+}VbyXlSAubLowLq81SH+j@wWFN5AolQMg zx|i8kk(7~V`M6UG_Zy*QP#rq2_%nQ;avi3u%77=s-N*qnqlu_mE|?K3Z>aHOkNOu= z7{tkuH;pr!JLIas?M=5ud+=HPJh41q<-ITi_&G|p+@rDVwv})L;1FSajRH`Rynmdw!DtMFhbOr~deVrce22 zkWg%Z|A(51eW}ZT_)`S{9~RW02wn;mPXHU!9LoDH(5Zl8OwrJTsY836?9>N!^9Dda zna(RvrtPCDzDmAPCBr(|n8gkBmq9yKrpB}K*C}t!{}8P{&zxGHw-@P&mrbdsi>Vp2 z0Wbqr^ngXkz7#>2c`t@@m_@ndns?E z20j6fh7vai_i!G|12ZjbRDlq}RAMd5#}Gbqc_x=jSGVI_zU&iyPf3IEqykA};sBGL z{{{62*L#J1GOwyDo&;1)plU4USp;tU))1KsdQ%PLhLwGKb6I$YJ5?>~>NS7GwME16 z!bz!XFBWphAO}Cq=!PGDDw^tb&NO76)hbIx#^q$GG2LX{AA#IzrPG{8=WT0Y?U5R@ zRG(Gi{g~U-C$DCVGvtUiXxsAbJC})%M+Q~o5PjVsQQdCWnk0_E+&jKVP^jFTNWR(6 zK+aa0>#Ejt{i*jmTFKYl?u>JuW8Ql6!*2V)2-t40#J3`V)Io^#UP8UJoJRBE2hKR; zn4DJimH9|0mAOUU@S|%wVDk6=c1F-i;4PqNoCOk-NpJc4i#eQBlEjDAbmvwE&%YB5A*Rs6>zDZZ)+t@8#==b(HImrw>Q+fx|MW*pOQXaIqPB92Upx=a;|$ z5d2J&A&oz!?5gU(CfSAoS*rRb)2bFSfRI7=!@h-5;vqDusi@=Zhcg0lq!36ldU0W zuRoeov6G#S@_-zqZpar@c7NXA*His(iPZkXll#9Vobo?K(JN8I`aD#RG$Ma1*&1g~ z;G~f*s&625Gf^j=D$&MeneYqTCR)fb9x3?X_n~P{Sao zh`T{s!Xm^bXBa0)q^lp17~IuQKPa^?$U`KHJkb|(vuTf$eRWg zvf>JaMr*4eWHg|<>m}$#91N)J_!`elb{EhM0;F}vHm{C{kUCg-iZ9jGN(raz!V6a*1jCjdP*DB;~1zaY5GJkkQ#VdK=Qv* zwFaES&ueGjvQ99k4aX`oY%bDP14_RzO$H}0>S=xLN0A)#FzUk}cE7)A<6-<~lV?th zUgnChMd{A_FP_W?kiEYrOZ(V=+ppfiAAW4G*4St)h(RN5+p5t(bnaPj!y}*Mp1;yL zEJ-(>0pE1Q_-mzPFC_N_LEG04`-WyQ9jaF;3FbHt&N5T+c6c+F-DJVweetC^TSk z$65%4uf${AmH!0fEl{v*gCgs3Tp81Nv2RSXYk8_oYi+N8L43}_7glb1pPSN-&)V^m z!_$_L?(83N|HAzl-d?gM;tR?GbcnlLAB7sUfhwScM{x6qy4R3T!Sf#{mF`|tQy zTTrcMQRlp_X&8H3!;RuVBUP&C1ZvJ>K~!eft1s=Q|H9j~^7B~9AB~Zh(RW1l|7PzD zs+L2Ak&^^Fc+Ny!p<2ZlubR4KSY+AjSrwM4rY?KDFcWFh1r<95O>S}By~Gf;0p_T| zXorDxecR5xkdq7bPp4TvPz*2M=mL5_w(;e4e?19~n7 z8--#3JKH6^OmVQ+>CR{lrq}1^nxk!81-#QRAa8!^cd;6LvEI2k83}EX+NbrV(rPZF z@9Emk<8ug5;a-9LZne_Qr%p`iZqEn4#}ZiPI9I8;=0%%dYN3J~{HKwdVGD0myagI$ zu#eAxe1wrXW_&|24>4YX+`d(sKPjzA*~C<;+T#})0!!ff4;D%W%~#+ z_LDeU#Yah3SWm{;lLXI$G

7h)y?JdW|!sNGXIofW|cCE3U9iR3~vB*5zh?r)ufwu zHdkWE&}Lt1I!(CsETk@^f{7g`Tr$0qf7Q-3ss=A-i0i6cPVTLj#pl#!h(<2)_tAHh zN7~PSYpT6*1zN&c72@~McW7@cLBjU!VpD=eYdP5q0U6}q^B&MQ*g*KSdzkh1GV<0O zHG;P=G$otFkEh#Xq-A*)H9J=!Xp`c-u9Lj6pBz|H=0+J<=>g*Zy}RxxvgR*xgN9?5BCbtXN$VUK@juU#>` z!JWLfiUBXhaiW%wleeojml}?=7N}{n%yfG*q%R!bOK%7i3f%o3n#RG;x#yYEaAB|L zkU8jax4SeF39Ss#Rae#g|CpZxH~e&Bn0v2Wv?PkKxY?JU-r+y)ZXSoIhpsrd??}qn z^09mQ>M=mpy*&Mm+k(c{kPnQ7+27c);_OYgSmVhH>sDUXdFWw(qacLnr%Z(KpfOKX zwl9~E{)~$u2b*`albK=A7x{PQq=4!IJ8zy`SLD$;N zHk#+8F96m13D`q_pSBcGxz?JCZKqbQf#WV823H0kh3_HGQ+q)lHAYL^!S+rEDO;3L zadajM*q2(XbxSG$%a)zz#pT+xtZAr?4}=2IVmDci>~)c>91zDUoa_~V%5$?yu_3Ph ztl891nfPD(#d?-8o$C54^|Rl4>k<^bgB=Y2^eXqLof9d~5f5xKoYEj72V}YVQHV5t zE@Kl+{j{c+OaBDUkE^6d0J;=k#x+KVC`A~m_hhBXN_KRPPhf0fJ;v`t*$OKi&NhV1 z*yRBUI*^iuo0Iq_dp5T~<{)0q6`f_fqF4kOia9kr_dc?gQn$9DhR-KB`2pa<&MXBHws6YLARRU-b)6sEM6=c<0>5HqS2TCcXA{bm~dvsiqP#<4cJYEUyq4cetjAs=jSf zF17`tcTAK03m*M32oNl~bn(DnxxyKmlcUQlC+Z0rnQ8D8EA%)5pR2>dQV@Lj{Chz!H5p$g1)+2xP1J1fMQoLR zfw;-ejrHF_p3(2Z4nKR4D{@V<+kMlFF*XC&!n@#s6NjhNwP!O7L)wRd%FI zhpt%=&}bD|Zk^_^S!uUTP)tk4=Q5l#q48#1tQ#Acjnz+{jR7`Iytu(L$$inGEelWm zOu-?cpAo#P+CHpKu-JmRh*yHwy>l~dS-LW=fmMTia~T?1iVA%IA;@hHl4+io^OrSs zZDwyQ_KF_r_;RWP8`ek52gF}a(flVLP;tUJ_K5~?%Mln$M}%LtZP&LM4+pq-2UKaZ zD4-C4=iW}etWby8Q<)*X+`P^+4ZmnHz_@!y2(xmrty4`=gicFanuxvywMIDK7y%J|0tcZY_S|ih2xB>rfh8j6;d85E90k zn`283isj!nLnJpkxBHpcthqVE80(D2hNPo`yc*1 z?Reb*ayZXeVLc9LG-?$7A0{!M#?a|f&tVD&cJ+J3DEC;>mXiSSW)e7pjj!7Le2aIF z7V{5N!K_EEmg6$EJt>PY&T3H(E$-XPO{dzY;rpM6u&C-P=I42y4y%#AuWo~cY>T|N zsu%f>qC6#q_>cC=rt4dX9j_83jb8S{D20wWnI;FO-jX<#yyvvD9cON+I%@dXi|IDO zT#)zA;SF~qmhm)iQn*B58;DP%9?yKP`encW&;`Oe{N4`fkoAHoF;p#4RtxIU70EB$ zhPg8%yC0zTjb%0EG-|9Fdk+*NC4Af}a^Lnh{$Fxi_1{Yf*TzM$_w&9df>8OG6#nl( zSx5*-TGU+}>A=mjkie0$#GG%r$x_<2MdST54D|ex7{L_G`gyO06U!sO5fl_G z%@4+tf8xs~YWD7ZTyb&_jCjTYr381Rdj%k+Zz#y3jGIM#`m`zQ?AWc9A)68z$GWW5 zqM}<{{0jw~{9oj=<=6vVHA3@8Bg07viyVA1Vw~;7y$7{E3GvVIY3KrBmXP6)ZI{@3 z?ASKM@62q;>rPC$A0*D4R_NgC}zG6VJR6MoI7#3>mViS6fH>|zJDsvNQo z(=p}sRhEUJKA(8Bc`Gt~s zqwnGv3L->IS>3ndgn77GpZmxm&&c>RmL?)LY`<@(5NBgt7!(y$cqUSb*ZbIvZ~f&_ zllR6C3y5o1>nd)mOP$CbF*5@oZoB42?KbEV!pttt@Q8G{CX#`c*f#ij(Hz$Kg|Uo* zW!(={Fb1u8jowUwX9b|bjeY8MyXmqQFiU4UJ&0ooA)>($$+RiCRK6d@DlL)L>OGXz zOzqY5(vbZ272pn#)j6L-jvz;|m6WqMo(0|9w@&j~VH)7^3KUuboKMOeO0*}hSAjp6a(UsO%^&#m}`P&&J3*5ieBW?wwE z5;h#)8xuY?eit@O4ap$-_KRMI+J8_TgDFc{z2p5|Bm@UVLLNgNmrawPeX`sX=8V!L zE zwdNZ~o^(WU68ccxJ!zd>0V=i_IHcUn&Z!N?5# z>6)zkphqaZKb_Tw+9RZ06Y{o()+4k&&_d}EqF6`&Gq=GqlQ{~Q<1iY!2Qqj5D@FpU zg=inbe{fg+4}q(B{@(#$n@ORwsJZBP|FKI?!&e$SXuO?*>5WCy3N{i=(Fi;%wX@HV zYsD;F?RFxHt;nWRstG}FYsn#I99mM_xTXIp!Bf`@(&28@= z?24n$aly^dYb=_#(bxR zKa+o;cW&(x`8+_jv_Lg%R2Iz!B#(2;UT!vYu7wq_tXcvXe2ZXlo9+{u^Yo#4Y;^OZ sQYjzqW$E88y8l;B+5eyB0peaoUFFSd5AN?$9x*j#tviU@5C8tZ05=+XP5=M^ From ce114b078c1501a73c8491891778053d5f2af058 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 13 Jul 2016 18:45:54 +1000 Subject: [PATCH 37/54] changes based on Naamas feedback --- ...nboarding-windows-defender-advanced-threat-protection.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md index eceb315694..8d059989f4 100644 --- a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md @@ -55,7 +55,7 @@ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Advanced Threat Protection If the **OnboardingState** value is not set to **1**, you can use Event Viewer to review errors on the endpoint. -You can check the event viewer for the onboarding script results. +If you configured your endpoints with a deployment tool that required a script, you can check the event viewer for the onboarding script results. **Check the result of the script**: 1. Click **Start**, type **Event Viewer**, and press **Enter**. @@ -401,10 +401,6 @@ ID | Severity | Event description | Description 1819 | Error | Windows Defender Advanced Threat Protection CSP: Failed to Set Node's Value. NodeId: (%1), TokenName: (%2), Result: (%3). | Windows Defender ATP has completed to get specific node's value.

TokenName: Contains node name that caused the error

Result: Error details. 1820 | Information | Windows Defender Advanced Threat Protection CSP: Set Nod's Value complete. NodeId: (%1), TokenName: (%2), Result: (%3). | Windows Defender ATP has completed to get specific node's value.

TokenName: Contains node name

Result: Error details or succeeded. -## Troubleshoot onboarding issues with System Center Configuration Manager (current branch) version 1606 - -Review the issues in [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](#troubleshoot-windows-defender-advanced-threat-protection-onboarding-issues). -If none of the event logs and troubleshooting steps work, download the Local script from the **Endpoint Management** section of the portal, and run it in an elevated command prompt. +- [Assign user access to the portal](assign-portal-access-windows-defender-advanced-threat-protection.md) - [Configure endpoint proxy and Internet connectivity settings](configure-proxy-internet-windows-defender-advanced-threat-protection.md) - [Additional Windows Defender ATP configuration settings](additional-configuration-windows-defender-advanced-threat-protection.md) - [Monitor the Windows Defender ATP onboarding](monitor-onboarding-windows-defender-advanced-threat-protection.md) From ba248ab72861f51d0f93dbb1d332242d14420678 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 14:24:34 +1000 Subject: [PATCH 44/54] remove extra applies to section --- ...-access-windows-defender-advanced-threat-protection.md | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/windows/keep-secure/assign-portal-access-windows-defender-advanced-threat-protection.md b/windows/keep-secure/assign-portal-access-windows-defender-advanced-threat-protection.md index fe9aed2b3a..9f3059a07b 100644 --- a/windows/keep-secure/assign-portal-access-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/assign-portal-access-windows-defender-advanced-threat-protection.md @@ -12,17 +12,13 @@ author: mjcaparas **Applies to:** - Windows 10 Insider Preview Build 14332 or later +- Azure Active Directory +- Office 365 - Windows Defender Advanced Threat Protection (Windows Defender ATP) [Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.] # Assign user access to the Windows Defender ATP portal -**Applies to:** - -- Windows 10, version 1607 -- Azure Active Directory -- Office 365 -- Windows Defender Advanced Threat Protection (Windows Defender ATP) Windows Defender ATP users and access permissions are managed in Azure Active Directory (AAD). User can be assigned one of the following levels of permissions: - Full access (Read and Write) From c90513ec3a37a66148d2bf5c37f8c04d4176d4b3 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 14:46:47 +1000 Subject: [PATCH 45/54] removed deployment channels - already in config endpts --- ...nts-windows-defender-advanced-threat-protection.md | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/windows/keep-secure/minimum-requirements-windows-defender-advanced-threat-protection.md b/windows/keep-secure/minimum-requirements-windows-defender-advanced-threat-protection.md index 91db7537e8..1bc9344b78 100644 --- a/windows/keep-secure/minimum-requirements-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/minimum-requirements-windows-defender-advanced-threat-protection.md @@ -43,15 +43,4 @@ Internet connectivity on endpoints is also required. See [Configure Windows Defe Before you configure endpoints, the telemetry and diagnostics service must be enabled. The service is enabled by default in Windows 10, but if it has been disabled you can turn it on by following the instructions in the [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) section. -### Deployment channel operating system requirements -You can choose to onboard endpoints with a scheduled Group Policy (GP) or System Center Configuration Manager (SCCM) update (using a configuration package that you download from the portal or during the service onboarding wizard), or by manually running a script to modify the registry. - -The following describes the minimum operating system or software version -required for each deployment channel. - -Deployment channel | Minimum server requirements -:---|:--- -Group Policy settings | Windows Server 2008 R2 -System Center Configuration Manager | SCCM 2012 -Manual (script) | No minimum requirements From 65b856ddcd9b70105f389f64337dcd390e17e4a0 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 15:36:03 +1000 Subject: [PATCH 46/54] update configure endpoints desc --- ...ard-configure-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/onboard-configure-windows-defender-advanced-threat-protection.md b/windows/keep-secure/onboard-configure-windows-defender-advanced-threat-protection.md index bcc1f3fd29..668883a264 100644 --- a/windows/keep-secure/onboard-configure-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/onboard-configure-windows-defender-advanced-threat-protection.md @@ -34,7 +34,7 @@ You need to onboard to Windows Defender ATP before you can use the service. ## In this section Topic | Description :---|:--- -[Configure endpoints](configure-endpoints-windows-defender-advanced-threat-protection.md) | You'll need to configure endpoints for it to report to the Windows Defender ATP service. Learn how you can use the configuration package to configure endpoints in your enterprise. +[Configure endpoints](configure-endpoints-windows-defender-advanced-threat-protection.md) | You'll need to configure endpoints for it to report to the Windows Defender ATP service. Learn about the tools and methods you can use to configure endpoints in your enterprise. [Configure proxy and Internet settings](configure-proxy-internet-windows-defender-advanced-threat-protection.md)| Enable communication with the Windows Defender ATP cloud service by configuring the proxy and Internet connectivity settings. [Additional configuration settings] (additional-configuration-windows-defender-advanced-threat-protection.md) | Learn how to configure settings for sample sharing used in the deep analysis feature. [Monitor onboarding](monitor-onboarding-windows-defender-advanced-threat-protection.md) | Learn how you can monitor the onboarding to ensure your endpoints are correctly configured and are sending telemetry reports. From b01aabb69b52cc202c318a12c238d0307976e495 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 15:39:43 +1000 Subject: [PATCH 47/54] fix typo --- ...e-endpoints-windows-defender-advanced-threat-protection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 045704f3b8..2a02ddf3e6 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -31,10 +31,10 @@ Windows Defender ATP supports the following deployment tools and methods: - Local script ## Configure endpoints with System Center Configuration Manager (current branch) version 1606 -System Center Configuration Manager (current branch) version 1606, currently in technical preview, has UI integrated support for configuring and managing Windows Defender ATP on endpoints. For more information see, the [Support for Windows Defender Advanced Threat Protection service](https://technet.microsoft.com/en-us/library/mt706220.aspx#BKMK_ATP) section. +System Center Configuration Manager (current branch) version 1606, currently in technical preview, has UI integrated support for configuring and managing Windows Defender ATP on endpoints. For more information, see the [Support for Windows Defender Advanced Threat Protection service](https://technet.microsoft.com/en-us/library/mt706220.aspx#BKMK_ATP) section. ## Configure endpoints with System Center 2012 Configuration Manager or later versions -You can use System Center Configuration Manager’s existing functionality to create a policy to configure you endpoints. This is supported in System Center 2012 Configuration Manager or later versions, including: System Center 2012 R2 Configuration Manager, System Center Configuration Manager and System Center Configuration Manager (current branch), version 1602 or earlier. +You can use System Center Configuration Manager’s existing functionality to create a policy to configure your endpoints. This is supported in System Center 2012 Configuration Manager or later versions, including: System Center 2012 R2 Configuration Manager, System Center Configuration Manager and System Center Configuration Manager (current branch), version 1602 or earlier. 1. Open the SCCM configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): From ae249fe4b40afdb6f79571d26e4e7a88f47f05f4 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 15:44:23 +1000 Subject: [PATCH 48/54] fix to alphabetical order of list --- ...ows-defender-advanced-threat-protection.md | 23 ++++++++++--------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/windows/keep-secure/configure-proxy-internet-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-proxy-internet-windows-defender-advanced-threat-protection.md index e0564e8606..0c31cc5832 100644 --- a/windows/keep-secure/configure-proxy-internet-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-proxy-internet-windows-defender-advanced-threat-protection.md @@ -116,15 +116,16 @@ For more information on how to use Netsh see, [Netsh Commands for Windows Hypert If a proxy or firewall is blocking all traffic by default and allowing only specific domains through, make sure that the following URLs are white-listed to permit communication with Windows Defender ATP service in port 80 and 443: -- us.vortex-win.data.microsoft.com +- *.blob.core.windows.net +- crl.microsoft.com - eu.vortex-win.data.microsoft.com - sevillegwcus.microsoft.com - sevillegweus.microsoft.com -- sevillegwweu.microsoft.com - sevillegwneu.microsoft.com +- sevillegwweu.microsoft.com +- us.vortex-win.data.microsoft.com - www.microsoft.com -- crl.microsoft.com -- \*.blob.core.windows.net + If a proxy or firewall is blocking anonymous traffic, as Windows Defender ATP sensor is connecting from system context, make sure anonymous traffic is permitted to the above listed URLs. @@ -165,13 +166,13 @@ Verify the proxy configuration completed successfully, that WinHTTP can discover 7. Repeat the same steps for the remaining URLs with the following arguments: - - portqry.exe -n eu.vortex-win.data.microsoft.com -e 443 -p tcp - - portqry.exe -n sevillegwcus.microsoft.com -e 443 -p tcp - - portqry.exe -n sevillegweus.microsoft.com -e 443 -p tcp - - portqry.exe -n sevillegwweu.microsoft.com -e 443 -p tcp - - portqry.exe -n sevillegwneu.microsoft.com -e 443 -p tcp - - portqry.exe -n www.microsoft.com -e 80 -p tcp - - portqry.exe -n crl.microsoft.com -e 80 -p tcp + - portqry.exe -n eu.vortex-win.data.microsoft.com -e 443 -p tcp + - portqry.exe -n sevillegwcus.microsoft.com -e 443 -p tcp + - portqry.exe -n sevillegweus.microsoft.com -e 443 -p tcp + - portqry.exe -n sevillegwweu.microsoft.com -e 443 -p tcp + - portqry.exe -n sevillegwneu.microsoft.com -e 443 -p tcp + - portqry.exe -n www.microsoft.com -e 80 -p tcp + - portqry.exe -n crl.microsoft.com -e 80 -p tcp 8. Verify that each URL shows that the name is **resolved** and the connection status is **listening**. From 6d95e7baf6a9373b99fce4b40489933a0b126bd3 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 16:31:05 +1000 Subject: [PATCH 49/54] fix order of tools to reflect drop down menu --- ...ows-defender-advanced-threat-protection.md | 57 +++++++++---------- 1 file changed, 28 insertions(+), 29 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 2a02ddf3e6..b6041796fb 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -23,33 +23,13 @@ Endpoints in your organization must be configured so that the Windows Defender A Windows Defender ATP supports the following deployment tools and methods: +- Group Policy - System Center Configuration Manager (current branch) version 1606 - System Center 2012 Configuration manager or later versions -- Group Policy -- Microsoft Intune - Mobile Device Management +- Microsoft Intune - Local script -## Configure endpoints with System Center Configuration Manager (current branch) version 1606 -System Center Configuration Manager (current branch) version 1606, currently in technical preview, has UI integrated support for configuring and managing Windows Defender ATP on endpoints. For more information, see the [Support for Windows Defender Advanced Threat Protection service](https://technet.microsoft.com/en-us/library/mt706220.aspx#BKMK_ATP) section. - -## Configure endpoints with System Center 2012 Configuration Manager or later versions -You can use System Center Configuration Manager’s existing functionality to create a policy to configure your endpoints. This is supported in System Center 2012 Configuration Manager or later versions, including: System Center 2012 R2 Configuration Manager, System Center Configuration Manager and System Center Configuration Manager (current branch), version 1602 or earlier. - -1. Open the SCCM configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): - - a. Click **Endpoint Management** on the **Navigation pane**. - - b. Select **System Center Configuration Manager**, click **Download package**, and save the .zip file. - -2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the network administrators who will deploy the package. You should have a file called *WindowsDefenderATPOnboardingScript.cmd*. - -3. Import the configuration package by following the steps in the [How to Create Packages and Programs in Configuration Manager](https://technet.microsoft.com/en-us/library/gg682112.aspx#BKMK_Import) topic. - -4. Deploy the package by following the steps in the [How to Deploy Packages and Programs in Configuration Manager](https://technet.microsoft.com/en-us/library/gg682178.aspx) topic. - - a. Choose a predefined device collection to deploy the package to. - ## Configure endpoints with Group Policy @@ -79,6 +59,31 @@ You can use System Center Configuration Manager’s existing functionality to cr For additional settings, see the [Additional configuration settings section](additional-configuration-windows-defender-advanced-threat-protection.md). +## Configure endpoints with System Center Configuration Manager (current branch) version 1606 +System Center Configuration Manager (current branch) version 1606, currently in technical preview, has UI integrated support for configuring and managing Windows Defender ATP on endpoints. For more information, see the [Support for Windows Defender Advanced Threat Protection service](https://technet.microsoft.com/en-us/library/mt706220.aspx#BKMK_ATP) section. + +## Configure endpoints with System Center 2012 Configuration Manager or later versions +You can use System Center Configuration Manager’s existing functionality to create a policy to configure your endpoints. This is supported in System Center 2012 Configuration Manager or later versions, including: System Center 2012 R2 Configuration Manager, System Center Configuration Manager and System Center Configuration Manager (current branch), version 1602 or earlier. + +1. Open the SCCM configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): + + a. Click **Endpoint Management** on the **Navigation pane**. + + b. Select **System Center Configuration Manager**, click **Download package**, and save the .zip file. + +2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the network administrators who will deploy the package. You should have a file called *WindowsDefenderATPOnboardingScript.cmd*. + +3. Import the configuration package by following the steps in the [How to Create Packages and Programs in Configuration Manager](https://technet.microsoft.com/en-us/library/gg682112.aspx#BKMK_Import) topic. + +4. Deploy the package by following the steps in the [How to Deploy Packages and Programs in Configuration Manager](https://technet.microsoft.com/en-us/library/gg682178.aspx) topic. + + a. Choose a predefined device collection to deploy the package to. + +## Configure endpoints with Mobile Device Management tools +You can use mobile device management (MDM) solutions to configure endpoints. Windows Defender ATP supports MDMs by providing OMA-URIs to create policies to manage endpoints. + +For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). + ## Configure endpoints with Microsoft Intune For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). @@ -109,13 +114,7 @@ These policies are categorized into two groups: > **Note**  Policies **Health Status for onboarded machines** and **Health Status for offboarded machines** use read-only properties and can't be remediated. -## Configure endpoints with Mobile Device Management tools -You can use mobile device management (MDM) solutions to configure endpoints. Windows Defender ATP supports MDMs by providing OMA-URIs to create policies to manage endpoints. - -For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). - - -## Configure endpoints individually with a script +## Configure endpoints individually with a local script You can also manually onboard individual endpoints to Windows Defender ATP. You might want to do this first when testing the service before you commit to onboarding all endpoints in your network. From 137c2addb09b151ac5b4bd74741b84796b55c478 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 17:13:41 +1000 Subject: [PATCH 50/54] add note for sccm mdm gp --- ...ts-windows-defender-advanced-threat-protection.md | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index b6041796fb..62877f2b33 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -7,14 +7,14 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security -author: iaanw +author: mjcaparas --- # Configure Windows Defender ATP endpoints **Applies to:** -- Windows 10 Insider Preview Build 14379 or later +- Windows 10 Insider Preview Build 14332 or later - Windows Defender Advanced Threat Protection (Windows Defender ATP) [Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.] @@ -32,7 +32,6 @@ Windows Defender ATP supports the following deployment tools and methods: ## Configure endpoints with Group Policy - > **Note**  To use GP updates to deploy the package, you must be on Windows Server 2008 R2 or later. 1. Open the GP configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): @@ -62,6 +61,8 @@ For additional settings, see the [Additional configuration settings section](add ## Configure endpoints with System Center Configuration Manager (current branch) version 1606 System Center Configuration Manager (current branch) version 1606, currently in technical preview, has UI integrated support for configuring and managing Windows Defender ATP on endpoints. For more information, see the [Support for Windows Defender Advanced Threat Protection service](https://technet.microsoft.com/en-us/library/mt706220.aspx#BKMK_ATP) section. +> **Note**   If you intend to use this deployment tool, ensure that you are on Windows 10 Insider Preview Build 14379 or later. This deployment method is only available from that build or later. + ## Configure endpoints with System Center 2012 Configuration Manager or later versions You can use System Center Configuration Manager’s existing functionality to create a policy to configure your endpoints. This is supported in System Center 2012 Configuration Manager or later versions, including: System Center 2012 R2 Configuration Manager, System Center Configuration Manager and System Center Configuration Manager (current branch), version 1602 or earlier. @@ -84,10 +85,14 @@ You can use mobile device management (MDM) solutions to configure endpoints. Win For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). +> **Note**   If you intend to use this deployment tool, ensure that you are on Windows 10 Insider Preview Build 14379 or later. This deployment method is only available from that build or later. + ## Configure endpoints with Microsoft Intune For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723297(v=vs.85).aspx). +> **Note**   If you intend to use this deployment tool, ensure that you are on Windows 10 Insider Preview Build 14379 or later. This deployment method is only available from that build or later. + 1. Open the Microsoft Intune configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): a. Click **Endpoint Management** on the **Navigation pane**. @@ -143,7 +148,6 @@ You can also manually onboard individual endpoints to Windows Defender ATP. You See the [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) topic for details on how you can manually validate that the endpoint is compliant and correctly reports telemetry. ## Related topics -- [Assign user access to the portal](assign-portal-access-windows-defender-advanced-threat-protection.md) - [Configure endpoint proxy and Internet connectivity settings](configure-proxy-internet-windows-defender-advanced-threat-protection.md) - [Additional Windows Defender ATP configuration settings](additional-configuration-windows-defender-advanced-threat-protection.md) - [Monitor the Windows Defender ATP onboarding](monitor-onboarding-windows-defender-advanced-threat-protection.md) From 963dc1e28b1a5dedc82dfdea466716cb851750e8 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 17:31:16 +1000 Subject: [PATCH 51/54] change with to using --- ...ot-onboarding-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md index 59f71186dd..5cb5400bb0 100644 --- a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md @@ -354,7 +354,7 @@ To ensure that sensor has service connectivity, follow the steps described in th If the verification fails and your environment is using a proxy to connect to the Internet, then follow the steps described in [Configure proxy and Internet connectivity settings](configure-proxy-internet-windows-defender-advanced-threat-protection.md) topic. -## Troubleshoot onboarding issues with Microsoft Intune +## Troubleshoot onboarding issues using Microsoft Intune You can use Microsoft Intune to check error codes and attempt to troubleshoot the cause of the issue. Use the following tables to understand the possible causes of issues while onboarding: From e3334cf3f84d93a765a662754f80a26b5d808987 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 18:03:01 +1000 Subject: [PATCH 52/54] add wdatp changes, fixed typos --- .../keep-secure/change-history-for-keep-windows-10-secure.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/keep-secure/change-history-for-keep-windows-10-secure.md b/windows/keep-secure/change-history-for-keep-windows-10-secure.md index 812c222e48..2c19fa25f2 100644 --- a/windows/keep-secure/change-history-for-keep-windows-10-secure.md +++ b/windows/keep-secure/change-history-for-keep-windows-10-secure.md @@ -17,6 +17,7 @@ This topic lists new and updated topics in the [Keep Windows 10 secure](index.md |New or changed topic | Description | |----------------------|-------------| |[Create an enterprise data protection (EDP) policy using System Center Configuration Manager](create-edp-policy-using-sccm.md) |New | +|[Windows Defender Advanced Threat Protection](windows-defender-advanced-threat-protection.md) (multiple topics) | Updated | ## June 2016 @@ -25,7 +26,7 @@ This topic lists new and updated topics in the [Keep Windows 10 secure](index.md |----------------------|-------------| |[Create an enterprise data protection (EDP) policy using Microsoft Intune](create-edp-policy-using-intune.md) |Added an update about needing to reconfigure your enterprise data protection app rules after delivery of the June service update. | | [Windows Firewall with Advanced Security](windows-firewall-with-advanced-security.md) (multiple topics) | New | -| [Advanced security audit policy settings](advanced-security-audit-policy-settings.md) (mutiple topics) | New security monitoring reference topics | +| [Advanced security audit policy settings](advanced-security-audit-policy-settings.md) (multiple topics) | New security monitoring reference topics | | [Windows security baselines](windows-security-baselines.md) | New | ## May 2016 @@ -37,7 +38,7 @@ This topic lists new and updated topics in the [Keep Windows 10 secure](index.md | [Microsoft Passport guide](microsoft-passport-guide.md) | Updated Roadmap section content | |[Protect your enterprise data using enterprise data protection (EDP)](protect-enterprise-data-using-edp.md) |Updated info based on changes to the features and functionality.| | [User Account Control Group Policy and registry key settings](user-account-control-group-policy-and-registry-key-settings.md) | Updated for Windows 10 and Windows Server 2016 Technical Preview | -|[Windows Defender Advanced Threat Protection](windows-defender-advanced-threat-protection.md) (mutiple topics) | New | +|[Windows Defender Advanced Threat Protection](windows-defender-advanced-threat-protection.md) (multiple topics) | New | ## April 2016 From 8bb3d8ba3751a0166812ac6262b401d650418449 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 18:19:36 +1000 Subject: [PATCH 53/54] fix file extension --- ...ure-endpoints-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 62877f2b33..5c9558f9b9 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -99,7 +99,7 @@ For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThre b. Select **Microsoft Intune**, click **Download package** and save the .zip file. -2. Extract the contents of the configuration package to a location on the endpoint you want to onboard (for example, the Desktop). You should have a file called *WindowsDefenderATPOnboardingInformation.mdm*. +2. Extract the contents of the configuration package to a location on the endpoint you want to onboard (for example, the Desktop). You should have a file called *WindowsDefenderATPOnboardingInformation.onboarding*. 3. Use the Microsoft Intune custom configuration policy to deploy the following supported OMA-URI settings. For more information on Microsoft Intune policy settings see, [Windows 10 policy settings in Microsoft Intune](https://docs.microsoft.com/en-us/intune/deploy-use/windows-10-policy-settings-in-microsoft-intune). From 91830abba6c25cbc89bcebd6f05d9ad8b226cb87 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 14 Jul 2016 18:30:18 +1000 Subject: [PATCH 54/54] fix file extension --- ...ure-endpoints-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 5c9558f9b9..a31bfe61a7 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -99,7 +99,7 @@ For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThre b. Select **Microsoft Intune**, click **Download package** and save the .zip file. -2. Extract the contents of the configuration package to a location on the endpoint you want to onboard (for example, the Desktop). You should have a file called *WindowsDefenderATPOnboardingInformation.onboarding*. +2. Extract the contents of the configuration package to a location on the endpoint you want to onboard (for example, the Desktop). You should have a file called *WindowsDefenderATP.onboarding*. 3. Use the Microsoft Intune custom configuration policy to deploy the following supported OMA-URI settings. For more information on Microsoft Intune policy settings see, [Windows 10 policy settings in Microsoft Intune](https://docs.microsoft.com/en-us/intune/deploy-use/windows-10-policy-settings-in-microsoft-intune).