From 3ec491639695b90a3f6380054fdad5caab1f2440 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 28 Jul 2017 11:34:57 -0700 Subject: [PATCH 001/146] date and time format --- ...ngs-windows-defender-advanced-threat-protection.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 6dd42769f1..d30fbc3c7e 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -54,6 +54,17 @@ To set the time zone: 2. Select the **Timezone UTC** indicator. 3. Select **Timezone Local** or **-8:00**. +### Date-time format in browser +**Internet Explorer(IE) and Microsoft Edge (Edge)** +IE and Edge uses the local configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. + +**Google Chrome** +If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. + +1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. +2. Restart the browser for the settings to take effect. + + ## Suppression rules The suppression rules control what alerts are suppressed. You can suppress alerts so that certain activities are not flagged as suspicious. For more information see, [Suppress alerts](manage-alerts-windows-defender-advanced-threat-protection.md#suppress-alerts). From 2c1e4c4f5c9ea0379f87927f645f21aa52a899da Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 2 Aug 2017 14:04:12 -0700 Subject: [PATCH 002/146] spacing fix --- .../settings-windows-defender-advanced-threat-protection.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index d30fbc3c7e..66224e09dd 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -56,9 +56,11 @@ To set the time zone: ### Date-time format in browser **Internet Explorer(IE) and Microsoft Edge (Edge)** -IE and Edge uses the local configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. + +IE and Edge use the local configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. **Google Chrome** + If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. 1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. From ac93607e8cc2cb69c94bf3624d2e65db00d2af39 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 2 Aug 2017 14:12:03 -0700 Subject: [PATCH 003/146] add date time issue in troubleshooting topic --- ...ndows-defender-advanced-threat-protection.md | 4 +++- ...ndows-defender-advanced-threat-protection.md | 17 +++++++++++++++++ 2 files changed, 20 insertions(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 66224e09dd..0feb5f25ae 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -57,7 +57,7 @@ To set the time zone: ### Date-time format in browser **Internet Explorer(IE) and Microsoft Edge (Edge)** -IE and Edge use the local configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. +IE and Edge uses the locale settings configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. **Google Chrome** @@ -66,6 +66,8 @@ If you use Google Chrome to access the Windows Defender ATP portal, you might ne 1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. 2. Restart the browser for the settings to take effect. +>[!NOTE] +>There currently is no support for Japanese format (YYYY/MM/DD) in Windows Defender ATP when used in Google Chrome. ## Suppression rules The suppression rules control what alerts are suppressed. You can suppress alerts so that certain activities are not flagged as suspicious. For more information see, [Suppress alerts](manage-alerts-windows-defender-advanced-threat-protection.md#suppress-alerts). diff --git a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md index 5bb2935a52..8b2f4e8ebf 100644 --- a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md @@ -47,6 +47,23 @@ If onboarding endpoints successfully completes but Windows Defender ATP does not For more information, see [Ensure that Windows Defender is not disabled by policy](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md#ensure-that-windows-defender-is-not-disabled-by-a-policy). + +### Windows Defender ATP has some date-time format issues +**Internet Explorer(IE) and Microsoft Edge (Edge)** + +IE and Edge uses the locale settings configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. + +**Google Chrome** + +If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. + +1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. +2. Restart the browser for the settings to take effect. + +>[!NOTE] +>There currently is no support for Japanese format (YYYY/MM/DD) in Windows Defender ATP when used in Google Chrome. + + ### Related topic - [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) - [Review events and errors on endpoints with Event Viewer](event-error-codes-windows-defender-advanced-threat-protection.md) From cdeee01f0c933b5adf956a395e02e9be3408a1aa Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 2 Aug 2017 14:21:05 -0700 Subject: [PATCH 004/146] minor update --- .../troubleshoot-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md index 8b2f4e8ebf..b2e87a83f0 100644 --- a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md @@ -61,7 +61,7 @@ If you use Google Chrome to access the Windows Defender ATP portal, you might ne 2. Restart the browser for the settings to take effect. >[!NOTE] ->There currently is no support for Japanese format (YYYY/MM/DD) in Windows Defender ATP when used in Google Chrome. +>There currently is no support for Japanese date format (YYYY/MM/DD) in Windows Defender ATP when accessed through Google Chrome. ### Related topic From 0d32d11650de59e472c5bbf64d0b3b15e2efb20f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 2 Aug 2017 14:40:43 -0700 Subject: [PATCH 005/146] include details --- .../settings-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 0feb5f25ae..91ce5a0bb4 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -67,7 +67,7 @@ If you use Google Chrome to access the Windows Defender ATP portal, you might ne 2. Restart the browser for the settings to take effect. >[!NOTE] ->There currently is no support for Japanese format (YYYY/MM/DD) in Windows Defender ATP when used in Google Chrome. +>There currently is no support for Japanese date format format (YYYY/MM/DD) in Windows Defender ATP when when accessed through Google Chrome. ## Suppression rules The suppression rules control what alerts are suppressed. You can suppress alerts so that certain activities are not flagged as suspicious. For more information see, [Suppress alerts](manage-alerts-windows-defender-advanced-threat-protection.md#suppress-alerts). From f8220a64d2c06de5e3e0ccfc7e503a65d11f671c Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Fri, 4 Aug 2017 13:54:42 -0700 Subject: [PATCH 006/146] sync --- windows/configuration/TOC.md | 2 +- ...change-history-for-configure-windows-10.md | 6 +++ .../lock-down-windows-10-to-specific-apps.md | 46 +++++++++++++++++-- 3 files changed, 49 insertions(+), 5 deletions(-) diff --git a/windows/configuration/TOC.md b/windows/configuration/TOC.md index f4a06d5d6a..876c4c17b2 100644 --- a/windows/configuration/TOC.md +++ b/windows/configuration/TOC.md @@ -8,7 +8,7 @@ ### [Set up a shared or guest PC with Windows 10](set-up-shared-or-guest-pc.md) ### [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) ### [Guidelines for choosing an app for assigned access (kiosk mode)](guidelines-for-assigned-access-app.md) -### [Lock down Windows 10 to specific apps (AppLocker)](lock-down-windows-10-to-specific-apps.md) +### [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) ## [Configure Windows 10 Mobile devices](mobile-devices/configure-mobile.md) ### [Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise](mobile-devices/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) ### [Use Windows Configuration Designer to configure Windows 10 Mobile devices](mobile-devices/provisioning-configure-mobile.md) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 9d2b98bf69..2a495b4f5a 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -14,6 +14,12 @@ author: jdeckerms This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## RELEASE: Windows 10, version 1709 + +The topics in this library have been updated for Windows 10, version 1709 (also known as the Fall Creators Update). The following new topics have been added: + +- [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) + ## July 2017 | New or changed topic | Description | | --- | --- | diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 445d25bf22..eaf60f5ed2 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -1,6 +1,6 @@ --- -title: Lock down Windows 10 to specific apps (Windows 10) -description: Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. +title: Create a Windows 10 kiosk that runs multiple apps (Windows 10) +description: Learn how to configure a kiosk device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. ms.assetid: 14DDDC96-88C7-4181-8415-B371F25726C8 keywords: ["lockdown", "app restrictions", "applocker"] ms.prod: w10 @@ -11,14 +11,52 @@ author: jdeckerms ms.localizationpriority: high --- -# Lock down Windows 10 to specific apps +# Create a Windows 10 kiosk that runs multiple apps **Applies to** - Windows 10 ->For more info about the features and functionality that are supported in each edition of Windows, see [Compare Windows 10 Editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare). +A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using a provisioning package, rather than creating rules in **AppLocker**. + +>[!NOTE] +>For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](#1703) to configure a multi-app kiosk. + +The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for individuals by putting in front of them only the things they need to use, and removing from their view the things they don’t need to access. + +>[!WARNING] +>The assigned access feature is intended for corporate-owned fixed-purpose devices, like kiosks. When the multi-app assigned access configuration is applied on the device, certain policies are enforced system-wide, and will impact other users on the device. Deleting the multi-app configuration will remove the assigned access lockdown profiles associated with the users, but it cannot revert all the enforced policies (such as Start layout). A factory reset is needed to clear all the assigned access enforced policies. + +## new method (1709) + +Process: +1. [Create XML file](#create-xml-file) +2. [Add XML file to provisioning package](#add-xml) +3. [Apply provisioning package to device](#apply-ppkg) + +### Prerequisites + +- (latest version of WCD -- is Store version okay at GA?) +- kiosk device on 1709 + + +### Create XML file + + + +### Add XML file to provisioning package + + +### Apply provisioning package to device + +### mixed-reality + +*There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* + + + +## old method (pre-1709) Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to [a kiosk device](set-up-a-device-for-anyone-to-use.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. From efd642bf57b62c025b745416e43ccae627a0e1b2 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Mon, 7 Aug 2017 10:11:00 -0700 Subject: [PATCH 007/146] add art --- windows/configuration/images/profile-config.png | Bin 0 -> 42858 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/configuration/images/profile-config.png diff --git a/windows/configuration/images/profile-config.png b/windows/configuration/images/profile-config.png new file mode 100644 index 0000000000000000000000000000000000000000..473ad156eca9a18e94f3bd559a93019408431dfd GIT binary patch literal 42858 zcmZs?cQ{;8*EdWWQ6oefB}k(8UMC145+!<#&Jadt7)GKddhbNE=)E%%6TSCNMjO41 zHpAd`KhOPr-}}e6uj|xnon6k^Ypvf|YyZA!s=p;Aq9?+`!y{EydGiqu4}bCQe30y=#RlO9~3hTjmRY8M9FQZ}Fq*O7na3Kjkme z8=a>A-o=*=ORT)SxQD%YcJc1*+ajy~6?sEK;#8vc$-kQg4NsBbSA0x$5O#ZLgk5*k zND}lEjs9jcJJYv z5WxRDT1`{sPIf_=@`)eZ@y{Sl(jwUEh1SYA%LgaZk0yyMchY;*n)lV}ETb4cCg<)2 zlr1g4Dya5jq^MpPn|mqL)}q7J@2giO48*xNZ%Bjta64h0?R(R@ZX1Y<{F=5Gir>P+ zXBoFf>7|`?l1y$|Bh*MF~j9HKTN}1e_a(V z|8e;`j(OaN?0WAI`UL&wrk5Nf6BclZ;4fnbgeDU_=*^|I_^m8_nnJE1H_MD=i9(Hz z+zb=2Fz?0SV!Pe9iaKzz4;^{Dbj@NDyX1^mVC-grpKk8hetnzupsv$>rao5o+FsjJnu9`Xp?Bc}Y`CmLL z=l@Owm>^zA1_MIc|=i44kEncLVk2%4^b)o$?XQH`h25bXbM8FVmy z*BHRJ8a0}KK)zz{MR1LBG>vbFb_RK-SRX7!cQX~6l6C-b2M4UW=}JNlD$SWxxoIdew@3SEI%JtTrD{hCs^9%XJSfX2~2_YJ+XM?ME1o) zILkV~AGWS2?7LN@d6TUybnvC$QKa?CO@qC*zTG%|p=ELE=Lm;b<-p~62Rn9uo{XfJ zBSDyqmhVv7J-*FscWp9mN?okdJK{9W+hzFKCXi$z8@Yc7RqPeNyy*?IJss76VM16= zP4NgNB)`3XlBmO%eT5LG_g1{cn3gn^aDU%8;#6G!Rjjyv)HmgpD92np)AnuZqp2C| z2PZ~(oB8(RFzC&A0+XRO*QbDE4@jlnL4xf}pIS66FAXzLT^iri?H`5Pixz|u!0SZ1)pBWkq-gvn%N?op)n!>$k)a) zJ%p6cN!w3~w>ZiaUrqHFjby#bk+DmMZnkZsRsC-g&6xFf(QEvfKcB&Zxt4}sZ->(Q z;F$0~F}I4u3zIRhusQUv10xy-W-3izt+WL+n_SN-&*Z_kW(D2m7o{W*N8=o}sr}Lx zH&s^D(9=$D{=)J550kse>Y3g;v}bTJk4g2Y3@x1buB0W@-)IpOy-V_fY6bWKNZ2~| zddGxZeL{E)COAIb%zVUtDv#-Cw=35vW|cE7Ulu;|UFcgYP+i(&tuq-fOTEtO=wQ1V zjvS1n|M=?V{43%4>Y`DN5VerU8tJQP3g7>k$XtYx4}lmi2J*lG`uf$o-%`=R!VsTk zzW^`)1nAo3Gjs}pc&}`Pw+aMQJ;(NOP&_|OU$U}s^Ycq)qiU5XhAw>Rijf*4CUV)gM_6)GFL z9F@ECNBD&kAy#>X89N%ubjg|6(Krf&w6^-UpXBjpD@(35&5%1>`_6zUt#MUEh8=mP z6;SIu9IiqX{jbKCu9$Jes*p4(B8HiJX#N+(Ak&M$0@oU*;mOmv+^T6@$GC9=KuQ!!_F1O;RUQsNZfi2{*lWdzL|JWxK8>r?ss+)ET4J-;pg3^RPJ2{4W| zh(6UDP*d__E%^8|-rMeGPIFXyKB(PpOb@%}zq=m4o7@k&y^38d{Z5nVe?*uj)HWze zKU@^rlbKM-L0{Uy1Qkeye4_f1+uEwlo#?%bz2SiGu@dw1cRbEh6n6OPg*UHTNZl^M zMq{WJp{9eR9@r;t>;(keq{!fuZoAmm^ErK^A9Zaz@Yfb%`5(&^+LcvlW{b@imc2P2CZjVm zWmV*g5M@-&U`^5Em$Xa-$myk^vjFP|Mr@9E7rS6Xcf z)}ktSQ;t2K8NDW?d>3~$Byi8YbgHC}JjaAPOr3tmN3IrUSymJOluo$LgiKqGT6n~X zPZ65CW|>Rn`kv9S;2^@(;^kg38@Ekn|GPDfMNuxmaU`?eK>%fnUyxb+mnvhCGA{p0 zy1ddUBidJMlkrE2%z6~xMR?z=6n*6LJ2PqISpV^OkbKs z?BB(IXvUUe((!&kZspOLD>6q(7onpyH0kDYs`II$k8Kl*kU`u0?Ct8Ye6#ZuD_v7) zvI&x8k1_O7FlTlnxz@ORzx?)+%tcsdp#KkjD6fOaXmqPonS~}QCQXlh zLbR-JzVJPh7N_=G9aUXO8Xz=a3~9Akor!Xoj|3QPFGoCTWxrHES?as+jK1J>6Ji#v z*NaXU8Z2Phr`)GGWWEQi(y2@ae-SeQTPjP9I2{e3#AeJ9j zC^F5i!1}Kz<_alI#5K?xwk;2a#>8iqf!>?#XZj8tLHMSJpJD~n2VObLGOl$`?A8U% zRKy9bhE+)TSe7^7>sF{Q#0nw>?kSkEGfA;_In=)&6Uz{A(a3DxrYdZe4XcBX#ndM1 z58Oe?slk6KN`d+w4XO{a61fw}eZ=Jc&7Jf?L(9}NMRmB(2_?Ox`ZX7;Mq`{mm6HnU znZ&gj_|4HUO6yhlxz*x!4(ip9fBt^o=YQ5EY_pllwg06u-Y>;@EQK%retmp9_V2N? z#5T=*>-FdfdvSb;E8XpywB7*Y$mgkh3om=#Gry{o@r~4*wyZa)7Xoe1&QG#vR5&NX zWZK4LX=p%*+^7L*jjVq{j&DAs4ZNVX(flSZ-Y{SzUYR(xFu$IusNBCB&CER`16RFq zx%DmP;B^h_hwZe1D)8V}-Wsivg3Dh78bFxAi)>kNzL?5Jh2TO}-iPUJ&yeoh;C^{& zWvNNMRW*6}<)bHnyU%%p8I4Aj2cOkq1B^Ss?}lLD#L2PLmDC@%Re1P$#3 z;a&58lCNHsbwi*SdxL_yXL`2@ru#Alrz!#y_@qVr#iknvIwtR3Ui@^Lmq?LlG}t)= zTGd1{8NK?{YTK-bGip9M(yCaEMeQ~=_L=V7Fq1oZY|9tqiu=Zjk%6T^Z9H?cJSi*H zddt3O3CVzN0df6Cr3u&eLb|Bi@4V&nTLyH;@6H(0y?a&i$X)zqI-T6gjU3)9#r7B; z?X8TkU1a&GO)O(X@Dko8g7Vr?a%L{eHZcy8-0p{&8gl8u-FmwAitn<%%6fHcru~ZI z!kkA9Ed8QDW)^y)mx?|l+Llv-Z>H|`*uCiqs@hKzPz5tH>k)744zYjGw9(s0NB(6eGrM|H+JNgRd?~+%GQPY)Je>Fnao*~-s z&dhyJ!XG6xgZ~n&4|ep-;^Zq8FT+)g$@t9_C)DjFx3tN#eHNiExZPZwyHu~O4{VSxSj);xP1oN?C(JNzHMm}{SBTcQxkn5r zE~i9K{YmFP9It7Fx|iOetPSVC_iUv6b(*0!U+F5G3Q5}c*B=ibv8s1MEp_vfb4b(0 zoj&Goix)QN$U&!dbVujO98u&25%1gB*y2Am`!;uv)d?Te$rOXPxiCB%@%&sqP1sx| zx5>qCLO-d?mnq3B?PHa80j6J#3(up!oPbue>NwI>@BSJi(tT){4rpWrfT#ZT23lpO z%il$HX`lYE3#l<_s!(Mzp8J(nCde_uY4YLs3=sS^;YzRkxyba38690`ei@(qf&8^P zt?Z&3ReN9a(#D4V4jOR62^rnSCal=yG&%KfZhVr{y-suZW0&h{nG|+r4RGefp|gZ; zGeqQn!AM| z6X6T=$@e}f8NxYVn!89NO`H8K2z;?V=jr^1M(-b;QJlv31uUDo#%@|1 zlIETmPoDEV^4Y+zzk_4C^VqG}u)42;G0GBF^@0+X{ZE?xkzV2tVhnnf7xP4yitKHg zkHW|1k(^^hbxTXz{zCJ=uY{t0w^~JwS>!4P;fhK!Pe(y`IVMX#WIdfEM3>BdFw)Q~ zNQzNcb+{sNi#;TU>HLdr|RQsT{ZOA73}f zh5#2Ehee;aZ%8|}Ins)fN<=c+V34)193=s(%76-(TZD<*lAFFb6sr|dN-AZucdSe5 z)}uhbW{sJafLttoyWhW2nNfP?70x|#B1)dKG+OpOw{v6vv2a-5bhmn1M}xd{zJd6T z;`OKe?|2d4+hjlTiha%OXy{AgmU<_AI{c)%Huh{qX2`wsWI{?w{qdM*K1Ijbwo`@N zN9E{rsY%frZwD-^9F_3dO<9m~OO4+~-aLyAlk0ezGCr^F!=om#L~CIby}g(g&Uc?;BUl}Smblb%yL9XzN4l#{L?}oY02|) z;V>m><@l(8L&Wu#&Acxdb9683~J;^>+;D3v_+0)KW@)Zn^M3bow!X`Elds9 z)Hj6(!=D=0<*G7GzGt(2`i%+DPxZ1|-ETzPAx|Dm`{PZqy+PEeGu&n4Y4cvPE}Few zig~8LG0U& zs@8NN9u9~0X`#*I&%6@vJzQ0ZN>F0xeK%53_l7&HTb?D?+leUUebMT8M4lk#C?_W= zLp1wkMtbH{NT;0EGo0W&;g1((f(5HpK9NjJ$%`IN!DO`h`#f*P?XjC;7m}QzMrGn@ zgKSi<%c;dSQL!n?5nua{B-)jfiGR3SjDelEVjs@qB|4z~ge8#1v~f+fmCSf_oE9ck z-~oSatFT?2w9fR$X*<;8|MEz}+fXKWP?|POOezp{|Jk)uhvD-W`!G~YI*^2YtV)pQ z_LtZ>Y3h$1;*fWU*Fk?`H&ZH%N|Fy88eeZZe9-6lH&$;`G1f-;Fc&G|h#KsxQGV7( zAR3i3-q!Pu^}52xK-$Ye(%5R-VneE&#QhM~zO`eEsrTXMFagrXMl$bGz7%y(3E@hk zKzGbmj~>6<+rXlO}7hN8C4%%9W`8SI44T zN;p74yc+~F`n3V6H8#P_5QsNX@P-0ovh}#VfvpI}M?r(Z1D!oc(E_7SY8weKW1bX; zr53f5II>CX{FnkY52vy}R~=*XewtIXcO(}#8s`c8^c?1Eo@G+X=(YFAOX4V-BY@|n z)SSrVz1O-jy#qSBs#SvJqH| z@Z2gUo;y8g7(nH5nqpb)$Iy>h**-yF*; z^%V(XWlFPU$8GyF#EYE^Ku1Fs{>SWT-Ash*XM^7y1fKnLDHo%{i+JMFXjl1LX0Q1P z{Lh3YmA1~8YQbx6{%j;qFMB-!mULgY<0586f;;4Us3i;1AMq#YVS7?BTS?YaYiEMp zNGJJ!woX*j_V=#dYs0<}-hINn+Qe>qt3A0FWw!qwJ2Y#lf}pq9-bXV{!h0bk?@KDHqt1$ zc*q-U$&A?z|84tl0nj+Zw-xS*a4VO{$h7%~KxSwCX611b-k>jUI(_igK1j9Yh-?oC zw?c}cqAfgqv3x9NN?bziUox`ixl&e|`*j7B$*Qa?pg!$Jg?m?JvDN8zBpQ}u0^gC` zVZAfD&iy1r$ykQ6FUHx+dp_*NLNhP)LDdhSL53Bw*GT8y`dNRKbZDvN!3b%{rGPBY z&>mT*o73r{$XRdC3ZOSCN2u>!vOa^T9{d=chQ35ax%cC5Tm+PR1Dma)xV<^<192+p zn((fuI=oO+4f5;J+;aJZp%Mw0NzgMq54UwLs;*_R@$s$7$wKyW$wo`x@rbNXuwy>r z=ok0rUBf08?N9a5Vs&0kW8}Xx%bJTawV2}o@5h852;x;7tu0yyhUQ%^y0B%bW`5!&1SYJ`VWxLBg-zd?-OK@7JJT(`n5`TpqxtBGecqh zkB+$CczTjk`Dy&wV1?Rgr^NFZsNuzpEYygNoM(qrD^A(tH63H8ImEUdMzE=3X!6F` zeR9&mIoJ|gNZo8IEtpSnh^V{ArontU!RmA&mAN;ei`8IWOBy&lFfH;7C(C1ww<);r z2AdQ=GHUl@-{A=*#lY!Bc12|$Pt1=O%!6{B9)Y3D4~j5X73Aj?Ol{oTv1(^}sGge^ zgD7HVW+!aRrQXajp6)!|A4(x~cCRAf17LL_@}oYV@K7wPc$DmAyf7oE;6M`Joo$eD zH0Uq=b+_lhy8FDepE;<#RtWUK9RTNv?5`Rq8qQ+9i_4Zk&)Y!g2JKf8m*7J~l;INGCe@qm`G*38p;4l}O8B;^sYLg-j&0ZO{ncIPq2J7|ggMlf z=C8E4hN#(vnrdyr1@F%_LA-u$buB(*d!&=S%;y_gXKIL5l$7~}hCh>I8l{e7p%Il5KVf)TzoD0^pBzMDTv zi{;r#t87-a>hNt5)>Ouh%JnB%T!!ps2r-KOlOAXI7$o|bmT8c8CV=dzlFHHAH!#We2tXa3cG<|R5Ug6Gc+ ztfMOavb&dQA3wRg%i%_qxy&JuwdnfnEdIhuv=PQ0pTsFeO{?oTYmn=4=`Y>CLBlvU zmJ2_YV{^b!J@K)&X?L`1H&*8K&vbh)a97X>{FdKMaAJhRL#%fpqOG2r?e zII?8q^ez+ddgJAZmL}COaH**M6ev^co;tnDepbY}Pva~B4sd2?qt|*uCM))OL#*H* zvgf2x%+rD8JegsdAEC|CtJ$IQ_&3|V0qdYKcX>^ctXz*j(&||pInuBe>A^K^lzP&L zz1>&!hwgfT<>Y-L?By!8$>*#^I71l^WNx0x%Lk72wf`o9F6z3&B2Z7+=@61b^F{ym z4Cz0GUg2t2V0~S+qV`PZa&t5`^&&)jvELNe2`baLVF5iX=(Pyc9m3Dy29J1r|E!w) zw$Z2yuKSZMowTo&#XofdKhmMeIbO;#d&!tQv8arH`CI=7NsAz9^9O+v+gR9f$wmc~ zK>}_h=fA9joys6fw5roa93|5ru8yl*5Jw1av6ivd|H;jK&Ylpc)e8)za(Oyote(B4 z_h&+7!W?1AT%keGK1sf93Hg1L6;_~aG%xTK32>D9PC_BXo4BBrcSAj}N($HdOTW<= zLS#RhRj?1+-jE(k)CkMcx)L%e-uTUms)=Zmd<9uTFi%9s@pp6vTab7$@Zr}C`7Lu|Exck| z7F(8b7>*I^XKQ4#Y8GqsY=x{Gwz)OnkmV=qMU}wU0mt3Wm^?&<(cjRD`MSSEkA^`JTfr`XC_@7XEE)W`o zs&&~~xl2&!<1n1frsedZszBd!Dr`?Hd7QQ_xqG`Xubol2YZkA8(R=T6sXG_03^~)t zP87d!gG0~K3(zTH(>AXb`tZ!20ZUF#`8TG7s2}d!1+g{e79-#Gj`T9M-6L+}@L}mS zpywuERo?tPp^mxt{PjmlzQ@zU!}k zh!z_jEp$$W3MTx6Bm18F)OlA&Xpy4lYUcGnIz`sIOg7f_Io2%-^t36Io6}!v*!OJ0 zJ_#ZUf>r`-zpx+vMn6d(LqK^GJBs2W0Ux7HmP*J36>KC4k7u6oiVw_yDzRm(PH{S+kD0Zxq`tQ?z0Zq6~ z)$-tJ3;gbQyD4~oWX+xqq2k0|)Ah1!h1JvH+i~{kM5>>42=}fK+y&{;e11QyAGqS5 z3f(UdHdVYS2k7-CD{r13_c8a=AW{SL70SJ)R|3#4ns@xe`qW|=)|S6r`VD(CCnXtY z)DIdi&WRvp@CtR|$2Dn2MP$>%Tk>hX;u^b4G8ZKK7bOy~QcrNFO9LVpl>UKuGf1`Z z5bluNhB{Rh^3*8+d@#R8#MBS-_L4*ZOm-4*L@O+=iGxeyF|9F(ar&-INdF>)ALoJ( zBf~%Nk{Ws(!w0t2sGEsSi+f2t(z>)g^`}#vbw-!E`IxST5xT6pKqN+LquH8O!$ds|K$~8`Yd`tV z`R5uOPr8@qioSV}zM8Zn-5QWCC6}EM>{wsaT>QuQpzQA(dDB~+kq9L=k_)`};M_6_(XwvFgYi8@ z{?t|97#=8Qc7?hX@|^zJW`2!pn9x>jD58p?KmOv!($Vt~>nw2;1cU0`Db!PJy%%eRcEQN%Hxr)@Jr;Y9;zYeBNa1LW6!mAF zhe(qWq1Sr5GFaJg6S@69;WBPO^S?U&0VZk(!FBJMpXKOfpzPWvAw)w@OBi}c{tyW+dS0~t`Iw2n6N8;q#F z{$BVEYFb_2g@xUGVXHS&s1*^%*!A*+zW`VLNEOaE)3SzE%QNM4c>JpVfrn^#IsE+; zx!#E?{X-Aq(Yf7%S=r2QQ8J#Fy`W-TukxE`fG$V?q?}QAnP5s~+z2dmR*x}dB`@~XE%gawyL$iUq zp7f1vNl~Tujvjw@ZuP;}=s;$%5jYI<-YBO4(s?91!2!MHk2tB!bc{LI0+0J<;bypN|&QdW8dZ8VbQ?Clj zm#cz8v_{)sF8(BKr2}pfKWU^BZpzCV;u?K%uciNxlz#;di6w&TV7$7`Z*bB!6fM=L z*lBT|Y5Dt4gPFv+9~kbP)H|lMCV38O!#DE39YC$A6~Ecqf>rn8!b`o^-zV{eipE?f&U0+d9NmOHCwvY3vS*|m&qbIv!Xe%pUGSUhfjKP4dj zqO9(LF@1e*U{Tc55=m|HrDXhuMjxfVT)-;Xa|^SS?g%A|iZ4@b)?-gV>hm>bfm4N_ z|J>t|;1qDY0L7vr!(FO}R(EGWX=9f?dhsY`5rsRyPUVdOx^D(}{4i!Rgd_H?2r7XV zU%6}NLVVVrMZJQ|?CUWhEHSZ2rQg&^ds6o*88|1z+9YA3SIh+InBdY4wNHZzTih>} znV$p02Jom)aFs^2Il4AyU8Tu8CvM{8st|#T{D&LZcDwiS8jkILV-$JT5nQP&pe1ZW z%UcU=xwM%*;$Xwd(7)c3F~$tfCIwp=K1c_Z^_XX&sUvd4xqPpNgFu+ZiAF+h$&0HxVFe$ER`KLbeL<~`!(h)1a~aj06qU~ z_U*;`>YRQX4~{`TNenXxKy|jR@guUSOsFZ_Fh_z1qeMJiyz>;PI{KVoNl2SJmV5t? z6wrc-h$su3igz3vx9aQOtfE04`W`$~RwAq9x4=QWNi{dFz0xVSp{_4ao+k5VUf1Hu zOg?f0y-CU5q(syRVh`b^VW{o-`GATQF|4GdcN{kuOlI@^`kHd#Q8E~moaE4V>Q((c zLuAPR_Op);Lz${eYX7^SXx7EW(e1Ly87ArJV+G(k?bQ)p#>I+jzfa?ty|H#{+5G&g zyVV`mJ$`N<@{Dy=5sIggRcQs+NSgOvCr-}p?cG3Ml{9182U{xUFJs@b578f}-~0^I zn6K#yCwsOa@O!#Y?}Kp;teq{2=D#bqd{e@3KZWb^3QVP2jMs_vd9}K#6&&jLgqVH) zQt^U~_*LBL{Toj3q(VNmxP&GLvDWLQIxC(CQlxf1w{@fk7bcR_PI!O zJj$(oHPHA;a^XW*W)UM$ec@-@(Tx$031U#C|D@i%=Z{Dv{q<>usPl{MlDA?~O2IGp z%DIAxR$gATXMSGF;v1SBZgg|>D~vuK>~e2itFBBI8zg&r+$(nicbp_OH-5P={L6j4 zuX;XBVrA1s*z6avH_s`ycbZy#&|$nGq_~E3ezU4@v!^m+O_?-8Oux zNKv*=Ga|d-UqX&2F?@^@_a_n(fj_T^@||wuSb2zM`a9VWgr*a zpv8g6bFx;CD^LB)ZEAS_w_l9mJe2y`U4mSQ(@RKz|8^!!OrkM4Y4R;KdMscR@&o=c z>|jFuL6)LaMVX{|{uW{Vs3hiV%f-8LKjV5_^$H_}#Gi;DX}MFBQVB_hDDay8{t6jO zUV%Gd-k%GQx?PjO#`)QM_byWz)D7SCB}#huZlEV|7u?CZmvWg;yQSMMX9W+gSMr@` zJ%5@_B-OlL_**5(4G}b>E&qX=Kthr(C9N&Xcd3pg6_sJLR)dz>&;DfT{@#Y=lQSAB z3z)f{((W5Xd7ouE896qJOYcIkg?iq9U!6^7i4}Ne1bLYG?MX-q*Pa~%W-4L}GBT7( zf58EVhI{85AF~Y--`WwVr4Ey$mrf^bz0L0Dab-Fv&5u^NOED4znLl5`?&+m)!TmpW zl@TSYOWfobF1#R~aaVaN6-s6sma%CL7K98YcKWI3@Mx5kjMO3X-NmA0Wuh3fLJkm& zft^DthvpO)p-`Mi(+hMA(bEX!uV0l}ayzSZL;Alem=l`gs@~b*k1v?jeMxdRa7)8u z=wuFfCfqJ66d9TkH9=yUD!rO#;iKT^c4YW?Ad_jD5BYO8?bFS5yJMD#$s?hxXMYUd zGc*NGtpgraZgKu#cq5;8RA(#oFhoH$=+7#D=h=yAKsb59a>?O$lF#}I7PT6YkYXjH zKFMX5GqFVVZ(<5re5Ac>^knP(VpWf>vXUfeau-DMk0C%VpoJ0Jza`1Jgpy*)v3EN z^J$$@c69|{k{3fYKV*a&+q|jxIy!OpnjyB(@h~?PNGHGXYx~6O9z2#lxtkACug_tl~0N`)UkXX{oExH_Q!3q~%Vlse z-)8KTp$C%m;x0C4f;L0diF-O~QWB+l#1w}8Zzk^VF5$o4V=F|AAQ?S+U27E<>UGoM z9QwZrsZJ{Egd^9-4v-aZR^rwiRP9J;l-X?U7gRDLAKr|Fi8oE;Zc&X&7RfB0lVs6# zLe+#{_CmZbHDjg0N|BIX-%ldF9#2?NNZF&dA(f~+CWgtEgxsUbg(Xd z>w&*O8Z&kN(2&`rFiXDE&EnFnbJ+@=p{O-WwzZ(*4@)9ui#}m?c?&7pXJ-P)9X`$> zsGAAlS`5f6Xj873Se7G&@O3Is$N?@98jA5FwP2pu%r}LBRgbf~YG6=chJY9F2xEB)iyxB z0|Ug5-c1=X0Lvyx%NUN+Z)UxD1>tu%#PXxGMRC&Kv9~ODZm^PpoCnWB~$V|^~mNADNF%wu~ zr0ijRCS_odDZ*q>U|v6RE0t0*|&x}Vj-|3!4`Ri*|{?qc8tooY!q5moN zv%4$9sQlc?g28*bOG#C!l66@&dk#+eJ$^HRA;#>Ju?`+LHdceaz?$#3BcCLel0@MG z9#eUMEY@RCT$%oJ+)|EjYWGOFesh4^wKhrxM(s7e{pPWI9XIH0y9GW=78~$mAaG?F z>#N&VD_1odH^#0ES>$v{v-mu3+5kWkZ%9^GEM{E>8}HEjc1pczD$MKbWwaO%1@Sde zG({P)Z$Ho)aeI3|wugT>Kd48Bk4?wpuVx@e!2AOqXQ0i-wMF?y_1F{^k5%>#q*v*a z;6JW443vXEc^2+H$f?>oY7MbUr|ngfR`T`v$Cc5|w3Hqll2h=RB|ae$POuo@pWmEQ~7y+driGWbD1L2Z^rsbT3Gx> zV%kQAvB{eH$TEcZwZ(erOCBzB`+*@|Ya)&xCf**N_OwGKpE@L3 zV7y=O@q8u%QscFMOe6@Is z!&(KFXfqK#o=wYuMdO!nVUa}Ars2vJN3{)z9sszRSIlHKM~~Zi8y!{$fpEPDP}L5- z36D7y8t4hiJ+`EwCU6^FustTECRRMX6Wo)85P(2Wm325^U<>^X(ez`<>%kbJTmial zrDj2@q86QjU!Te-FRfJQFV+WGc}FHciPPt+<%BHD?E3DvOo{ew15K zP!d>ZuCyr(_U9L`ZU(r)7w-`OYF<}cXvPB9DV=D0iY)~&Rjx@_!|Tj> zuz6gIPzZB&T6`z@S>h4{1_4A*eCsUVKdQoQhC18O$79-SLe|#S1g#5g9xI!7WK!T`#@XFQZy*X*LrV2Dj<6p3qkS63>-w!8Hdw~iw!z`rP~AYmJMDZLx}Lvd;j1t0E`f^dd54Ce?$N_LDv{MhsRN_G)eruC8*5e zeXGG(66Kq**xF?FjEqka627vG|GRdj5A!8uBFHV)0}x6xj!xlR&hkRc0LEufVQSvj z`{~bV3PTQ0{*M2hdAO5Nkkxfx#ObVZBNq$+1u=@cWWg1JzUIjdFT>8go za>U1ThaxR%{`4ktUQ`4}7+>@(K{|mOQQl}9o-1`FqwWtWF4gK?5{BNOGqLw6a0~D( z`7CkZ(cI|W&$a@*J$wln!cTJPMy_xH!o5KErSP|jKzs-C;TV=qfe9QS#}AA|>_#z% zGRpzb$Gp(k5m>mU+&`E$h}IAfj{netw)r5cXOvm-(C`I`L|qE<&%Oh7bw9nLy`P${@f(xVj?}|BxKggrD8)n+6$w@CBjI_5dXw9o}Om-lk}D znovVS=P?{tS#VIr)bCIs6Fg&#%N14shQ|1#P>cBznl1;-(? z2Nn&AqF1_wPoG5}D_lHU3%S{E213jUvFDl8V5vtxT-aF888})7m#UhAC>trr{DyYj=2){X+c!Dl}-D)f0{!-~+sGY?lr(2x1oF5y1TojV>N@J@h z8+q16ZebC69CmYZocm`0#T-0xH}Qy>*H4&P6Uog5T@Jmtl`Em2^Na(LVP2hg*&aL+ zf*QL9guhcLIN|adiYJZ{Z2VnjPTUilNDzGEs|fdIB7|xDXp|se{X|dtVxp??l=wO$ zW7Nrr$)$%`U+8eW^Zw`+5ilR}!()4`+9BJ@7M$8KXZktU0-h$+zvw(R%+jaH)TtH< z>QGEeKnEQ$j&~AY2RoCplxqgi2B_T6^~*a85xHo`BAhUCpaWi+1OG0tj5~A72jZFR ztNtKO_-N&^{8ocNepf0%Zi?oQx|H4?@$@Bp+pw!*}op|9vrVv)?`zJ|RsS zib4U4n+g1%OhD-1jtN}R@wbUpQk!=tIWalZ0pX(^vKQ2_JNzoV4p6vNCdcO9!ZFHf za7Cj`mht7eQGF;&{K1{Jf}XL z<-g9M+&lxY7J@v}rMO%TIbMtA&VgcA-zBi)vNnNH8h7f*p`CsUy)y%f!FNj9h?&4x zq_V6$xfGZ3KA~Awg#W=P6R+I|xrVB=kW+Ni^vAu~;%f`46M4MSta-EiyQ0@l<_S7# zST-$mQ4x-R3)=p?6=i2ZyAn_oLckv>9NfI&?5xm;lm^H~veChWoE2$pw_csD=wnzE z%)n^6yKfmt-JO9WP0hw3qpXb~j&BewrhvtmH2)De%1JYXspufRt z{EJ~X`*WR-SeTC%_32dHS7_o7LMKw|&0pdX*&9dIrvZrKnKo{sWbS z5qo4U%bi6Bk37c$ULe#Ig(B;GZB_ho@?rN+msiDsxiI$(>g+M!f&1<>o1iW6i!|+9 zIrke8Nt=e-9}3~?s@e~^7p1A4li2k{n?4|#DdNo+@jc9b-uZ<&%=2x6U}qv%X4Y-F zU@R%Ik{tGuh&(%FDkDea*8iCI{lSk8=#z0YHjJh}Cx-ma$6#bKVCEL-(kD6jfX*X% z%mU7ZK(+CClx?6o6oftveX-IhK#zlu^Q4R%=dguQ4U|UHp#lycA4P%G_t0B8P+4rC z-P-+=g!hOSOTXRYsXK9Dgdo*`Psp=p)E5ftYAtG^Y19OSh{sF$*h6lpd0oD-xyS+D zf0f6-f;KOIvV#Lveoc{|f%jUZKwa zGxBNS#jbZ}mF_HgaVhNX zJ*CSPVk|sR;F-keft_645)7dC-4A9R?#NM#(wZXmp8W}2Fl_+y-wQX_@SEz1P+PhF zz3KqJ44LN8>%r{lVlwuaU-5=kHE2cSA82qHcqPrY?eGs}SZ~$8qpyrZTpitWbKAg! z_nD%X0X_DaEYx887du&hl<8@4ww zGBb|Dv-B4gp|&ZgsPSLkt8e(wnWq=brbn|sY;tO{5>N=yk)Bs4ZK@|S8Mb^Q?DpCE zs6O{{_MR6zeeqF4HJ{zZMj&Bn>1GMaIxQ=K9nNG0IrnFOX$ZmAZocz9N#_I#VjZ!w&(=`ClWs5_i0eBP4Jl$B>}PujFjGSNBwBl?cnz;cK)NO>u<1RVxZr+v^Y5iv9|3lYXKt=U_?cXY2MF~-95Jo_yL%K&rK)SoTyIVv`y1N9V zJBJjI8e*iS1!ial7$gP;_#gBa&-<+RajjW8t{FIU=A8T9``Xw3?2vzGRhE2FXTXb4 z7l8d%?ec-yyQX;xruLh#l;kSl!D*GmvBb(dClOWhW#fUnh z1_~zdr@^h_NvG^ceP(8!BZdPaJRID+5MdR|E*0&r4)?v6go$W=TEENpNjoB-Sn zK<{&UzM~Qw&`6}s%d2Pn3hb>v&)-|_Mvb6RsIV%zucrK3b3#dZ8dl+cRxnTCW+3k~TT;2*+G_do&I zK#5be*+aNa@5=LfF3T$#<P;Qur(Vd?OaP113g==@-H0A4>#qJc8V51DrRkXC7=Z!$9N0*H;y@!t{27 zN7aXR)56y~Vw95=>yR?~Mb6K{osKtOZ;97v7if|W)mD)|-!4k&R_SdDB(XEG z2^$u&P^D&_dYWsX;DFryMms~ahoR!N3j6BDD=(O7FeO|y0$kb>*`YWyC`{$M?11wH zD*>Dt1lq1FQ|ZaNSFK&!&g>p)-e;zib95a&FP|2h@3^DW0zW;iaFHHDWu9hSa*nw8 zIrPLw0nLmRNV;o*&`79SGaQ|u0}r7W2;@lENWTY~7A7EO3&C10K9NXKs3T|ex;jAJ zLocxoxu7uk;lh&9oubWesCBb5HVmG_u!37TkL1>(M{ToBFwc)L>u4RsXUQO84aAY? z$kAeexw zrG8tm?xm)kjqPM!*?lCu_6#d!Bb@&M`zP4Z!YMp^*o7tcEoxyZ;hiQ!{G)h67Mka82-*RtDEWF#J|_iO61|3Tho$EF}bw{nd}QbOO{*HFM2aM^|w1_n>rr0=1dU>&rdDLCk!i+UfP+^wuz&>orPD~riy zM|wL%Q|m)=0~scsBt}hyiVx5*4J8@C(O1$64>^B^n)xCjd2uVEqd>oP@ic!cmv1X) z{<+Yb!rW)B9z9LmYXYQ1k+gDLF&x9XXVmPjF7p#|;p&;naE~vV>BpaJez){AvkbGG zsau+bBfNM=O+C3;dM9m3O9;3`zGM@2k52?P@{sfk-BEv50Bc4D1Wht^$$UF z-j&F3fyd+7M_LlBk{#a%_49qGGdi5)l7|;%d!BJjtW8#<-~!Tt)PDBar>>G%Ss5E! zPU^G)+5A?yGO=KX?6sGa2E4;841$P({j>HB0i0ZhBH)!+o5F}87m2a~ml%!_=jHAc zt!w|QZN`9_@gcqW`}ZS?vbWyoNw0fR;0(Id*0Rt9qzl1GNsA7BT5ea`!3ZrNU%|_z zqd6M|T4W$}9Il{k@U%-5k5Y(t%g}a0ImW7Xk4=-s2d}`%&nA?+-u1noOe-ac)#Ngs zR*2=^ZhVM3tV*K^e>(&n|2!4T`iJB8NS6NaMaVN-%zmWGCC4r_Qz|T(ccH;-;jw)v zW$pX!-jbEa2JNCkXd#y#`Cox}YldP)-XkChNBLM1`%>8zL(quECVE@Bx0O}3dL z2#eIv`k!g$Or%!HpJce`1NyS`?IH>8z5WMwWF?Wx21~G-&K_{V=i`BK33vbYS}L(h z-l<$1UmiqEu&}~dM|^#~OXjJ)D&MrCey#qt59iWSi1$LS%Cgpd66bHG8BG+Pscsiy z2Rof}5AhFtIOq}XC+JzFxi7%n88b1M6P8dLA2rbm%h+hvXtMG`c01ReW^Yu43)8pN z3)APwUFjb!Y(H3eRMb+KC2b1fZV`5HIiyJ$av5oTG?~yROR*~(;5J{EZ85&wJL{7U z@$44%Ky8E|5cGKL;Qh4Z4Y~R#HaWj^CxvwZ4lj&I`*5R@Kc{a_V>=uoQ)lbjF}&Wg zQ())RwjjJ82LwHJs0(2QE6S-(cG4w1?X<(($tbN!mH^V51bSc07_)k-q3@N3+4%7zVwFhTpw&o0YfB>{0C^1C1|KQA9=jeJ#! zPQ~mK0axXyojCIM@KBBF4~y8EqC>j%_mt=zRIZ^($8UhkYMvP;h8pfugZO+ zT<5qAQDWco7;^2GM=#-{D<{J)BtfdJUPf5ZAaMiLxeiq3U4|ITOrvZCP*&>?f=*a- zuz7{h&4ptX3zC9+%^AlM>u8(Ctp~#BOFiR;f!$~0tL5-}jn3vDp}|S-vI(04g##?n z59vu?UrF^aFHl50D)AE4KN8j~8~YN)E&J>```&e%K-iJvm}-;GQ5S9PqX=GZh-Z&5SnuC7xbu?YN`KK|9Y=?2-nX)S3W#aEKq<_<< z-Mjz!r!aQdAB6$X7}%dNE&N4AwSOoE^t+osCwIPdNB#NFpSb_$3r~y=9)Cb&Xv5d< z>cA~LD&zK->Xq3b_Q9B6(`qQd8w%B^)MCS(;W5*deD_W`B@EjDKuTfdrdKYEZ_C5H ze9hX0yuzwjomw8|(7@Z)YM)$a-m+LfBXs9S?+&r2Z^_TDe98fiViC8Lm?uK8PfCqu zRZ8XYwn_m|Gv)RsIK!c${h1U zArI62h5?_yqB{#3`i|Fvd<+vELE|6k_Q_1?dZ^pXGa%~xm~n_nC0;08dzc6V-` zuXf)1+Bh-!?>E54HFcmr07y=g4tg&oJ;eWpxO6t~Nm$M%&doJC@MgR2TWxRAI>!h@ay~-w2Vwl@i*N`{%3PoaM(WoJ5ir2 zS8^4dyjr)R*w36LB@Ai}A1GFWNyU{X1li)_2<0B zEH5s;0Ek$e?wXKHQIAwz*9CsB>oh{dUXg4fDHX5w!)(nxA`p(iPL2gGAD+u83LSyt zxid(pT3Ms4p+bAp^L>^_%xR>Vwo~AD^|1t%=28Uxt(0Va?7pg{^#1JMgr&_J*jF&! z&7Jh-VW}Yf&qQJ!b|GU0Eb+NY!R_x_Zm7e$BB&26^*JduuXJ=Kr>cCqh%B3^QKl~t zRXZOZt}O)8HdeBd8u=F@7QdmdUMDCETz*)oZHI`lwOb|m?xmZd7Be&k#^qR%lQjSl z&Fp-Wi5y%`yTOsjg6i$;%nz_a*4S8)0D8ywXOd~!&6NR**XN74<#U9&cPV)9qR%Ai zgnsg&8Pp{nrq2(5JcKp^h%MqBMfB#Zis|YB4rHZ-6$Q8)2QRLh6_+kTgG+y^ONZa{ zTFRp{8y}G7GuS>gqwqvJ8##H|6w@ycbx$S41ZRz&I@hH>95$F>fR#HWCr8USIL|K( zN+Jqr0e}-HdTFE#zCwJA{8W3@yDzEs9-GDUl=?x(K8`crt_>#JYRMxVzP2H$i35Cv z_h_oKHP6Q9-eA=-b6j&1eOQ*F_@n7|b@WOG)|Y*JJIe_}x2*M-jvx0_GNhwwm4WXv zVR3&MW08e9n4UsSZc6|FrKv05L+YTlhb+i*(e?xz;Ss*3fp7Dk4@o+PDzU%<*sm=TSA~qFQ}-f zMyn*RxJTQAx&RK_37*3<4Cc?>2)ZT7nT&L{D;&e$r+KR_>Q8Y(C0gc5soi2a9%k)z z_&6U?s{u(MAH^;u$p!Wo=5)XU_PDW_0+ zbrovFm9VFRl6zU=oEEYTnSvIdGF=831Wtb`Ib((e$$1JEdTUfHtaKR$XHBf(AA2Oq z)U?Z?@}@UU<2$)=&Pz1;2mppws7ee%Ix1iXI_h&c6g=h5>kHRCmoN5S8zqDY zpL9`xsiObV#+#?am^Y${{zRYptI0D=Y-1U4N-P*9ft75bAnF{3)MqvD9m5lF%ycll zzzs-t)>>yVyYfV=z9Ib3U9HXy0v*`;emnZLZop~AvN)r%E=f*F9*|M>>iqRu%{2+q z6D7mP^M~URQ*P6vK2C)8Y6zleo&Rxqake(JhxW%u5 zlBthEbpOW~>MLQtkpC0FRzJVrssT#9TWSq;S>7Z+GgP|Qq-x% zLwSDNg$i;4 zeayOd$btw9yS&T2pec_(_X|l;zEbTI7MmQC6Vf%|G>FABn(JV01RVRl~3gl=Y<5qpUr*BCu~PF3RiwL zm^Wr(IaIF-r&)g*d#3d&p0duateaPP`PLns!qX+tgH$%Ej8$>VOLe2LJ@Y$zlc!Zb zPTx9tSkee;SIjhJ3U@L7AShGz>vtd>Ag$EhCedHnWGApy3~qnh$lcHy?9Er^b{*Hr zG9KN}M4q?h76?5Js7j;T7jcQVE#7y`3HVLI{&+6qcgW2R)(VBi+{7^V1RA;PArd)N zm%9{idvBj*6$An$=vgW}QBf!$aH2TXKCQt)`vRK!rPCJSOz{Rw?GmGq->=XYVmoTH z^)~0{?2NB81pHis>lU=9q!*?q3qSXF^X~Mm9(T5L?j)z>mo0GE*J+PAoFnc)EDqHz zrbOE-r9{t)EZ{~Bw&c8`M;}@uonfCctm>33!Rj(6K=0xg5~~Ev)l~zkmpMgX30>+~ zqa6{^lI7fHb@fuKEpPBp-QM1*XNiy5&O|J9p5E5*tPM-A6jo^M2YTfdmLGsNkjb*0 z&k)SIdkF+rn`K0UZ4ahUKWeG$HPgMUNJ3s=`_6x?uuuG_x1***FFW9uBV?;5wDlpL zL6z}9ix8LXo)L_u!h%}l6ccL>JGj>ki@AbC1B}ic!_+6t6;hN7i&(g!=KK?L`~N;& zY@*V!Dyh-gys~VqmdS0X)K{DVcKMi<4mVWxGMG+7q(h2WJbY61EQp0{$xZZ__v>^( zRJgcI=C4n*C)L;y9`s^IMepU)xQ0cpFZ1w6Q6`$HG}}0P^iid(2?p0bQEOm_X%2Gb z!8U7#&H+1^txHdX+tiEgqIV(1wo#?K({>Inn0VTdG^LM=qn}wvG?!j@Z+P70Mg(tt zOwumrX8D2Bt}w(>|AlZP1UBW6biNj$n){AtS23hpt%i`4ih#&LO@OMy8FE!3hoWhS zBwzJ+b_>eD>iqp>)_J%-Fa6#Mre4I_~0OTIW>oqv-+Pj${nnb?G?+N7Hkmvk|wRz#5_@&`v9ZF9xF?}|a|`qf)E+>R?o zWr~ZHe9Lk48wz_FtDlswziS@iZDjnTe!m4H(>{I6XOkF zVCm!mII6Mv9grTLasQQ3HGI!CAvE7IFK%f_4;(hAWL|Z^VF^fT)V+&px zo5$xnB7N0$8pdb)?mE`fGd_i?O4=+vHqZsfl2EHexC2;2(CuBJim_aU|K`m8*l>%H z0c%gUVVHK@?5qw!r&}nlR*R~6r{HXrB1ztI(r+wTikJlhsVEVvSTqLMgD}S;P5d%tX5Hn} zbNZ&|`RZrE2Gkr6*j>5F&fwVGY}sPqU=%KP3B}{bufn<(vU%KF?@>H8jQZz4F>+V0 zq*b-r#;lthswD@O0=sglv9;fI?16xNdTu)p4p|It(jZF7diR9(w);M_xF>Ivj0|H=u^UV;0pAijT!toK(S^@55{8=CkLpQdU^P zZcO5kaDs&adg>HCWd%GfAi}H6YH7Lg)WcLqSToDMXj=%XJ+wuB-~d3ewQ85oh|~yh zefdZL=7y2bty}ctS2%w@*KiPgFP|+U>t62))u_^XS#@?uh&n6vo?+zH5@|C-zVYOM zP~O8@w(R>G>lfI*0|L7~UOOxDB~y8a8N((QuvOEyq>={1R zRLP^dOYCdmD)ONl{vpQLt9Q)AbS2~^I@101mE*EDWV=SrUjM=*K#!#pVi5(+)=TXd zs@t@#)b6el@Gtk>|Du(y-eYgQTPdKh;;D<|5m274QFpv2}XQAdA* zYQI~WVw$fWV_~_}FqGfaM1frMZHL>Xb5q#%_gOboO&$FZJuGdVhz2LR7YuH*YdG>4 z{;lmb8<)Qz%+%AxU`|A5FEsVd3q6)^)>q7Aaci;3we`qlJ5#Xf(IBH@V#PY;#2pLj zFqFB0T@a-^QU{FwN-mzoJ})A)_}J|0#9&vfYg}Y8W5OKtNvHC~@(x0Xk1Zu-p?d&5DKB|C;CM1kq&^^<4f-kBPWxd0Ua$vunr~Q-~ z8kN#TKdErKsyQQyMBSED)mmQEn(MSy_Z}l8V_cZMyRvYbATBX-f@{$_H&2G77wz+s~AVd)D_0Ow=~o{ZqZK$uBd6Y}PS zS{7CaZzu_v-6-q<0(~yYCI9Vr4e2uQ90G@UY&9>9WRIZ`Dm&C30Oy>ut8o5tMu9%o zc^Iz)_Ws0FAA}g8kMbzXncY9nWfJM6nBAa9-I~cmQK;RHYpvkFt7{3(&H2l(`vl_T+?0x?f1#8SZE@i3Nto=1?>ZFcb z1Hv{jzl?dERxKg0?-i0!-lN4OYN2qN38$jD`8#93+q}-=ZBmA!3OTCUk~}eWTl-`m zo@;;q84AA05yf(YySv2dY1XOiJ+Uz^sN|agc<-=Rdy3~_qh93S%$+sDT zGvd2UO_Pw498E9ONJ|n_IEI=C*OW@R*SimBUS1+d-kI*AiHY4FowsY%}!kHnSh zvNw82Y-h2WV%sS>iFzZ*G13NQI*3 zHy@-X=Yxw!jko232LX_!X9tu2D@!Mf#B{t~vpRJ>)r??x&eFN<+)2=)lEfy~CdP!( z2x^O8L-o{u=#?nHe}W``vi^=)KE(Jg$DvbNTjo2p=VDCl!SqrdTw~n>1kNonPyJ8QuOXo1HO$BG>-;u^4pm^9;#J&hC@)zLu{j;e~%L zMzX%fkS!u<2oC0%k1{qK)NER106eFxKe`VK0rVNgxe!n>?hCrbW3DQ$GPeK)7s&G} z+{$V%zc2&^+tfPIM;~~2V&`Fk(g;TWiZMOTF92C6_KOnh<8s1~haULTmUANS{^(id!0Xh<83nu=O)>9_QS2*dyL19UO~sQha0&5tAV(NSXx>far?Yi zHWxJjqHYW5BL~pPgMc9V(%>8bTSKRY7M8S0lq#0yR@dWPNF~L0+5W!u&04>FG;hGd z7~8k<#Da!9f3$&nbjyhnsE6fSxK{0lQPjLCR&o}i{tPC{OIOVVh*vF(a{5qd{^z@) z&1vlBo@wpvAEqd1`Z?O>$s+eZ)(>hTB)PW>19`afFT$B8)pFEJG~t=QAC>o%D_ zYm_5MU}Ly=`}5!{gaF`{o5Rj{0Mp{Y{j8zCzvua45J$(2*(wwk!tL*{Lg~E*c=19x z@&CJ)-Xwk}kH6O?0)N^4J(*oy4|e;%k5e)5yDo!%eN#(>glgPe0j>9#JDCw4D3rnW z)*!*<3oon{y8J^~{fJh+(?N@cjQJl5a~C?g?t3`k!8MeD$o8dl0%P0F%}d-@WN$Va z1C8(;R|VoR?0Fu4-wP)6q}K#|fU$wx`uZT*fYnj*1&aR7Wj(?9Y4Ar9xdvFQj(&X@4ls@IMvkaL714AS7pJ$M*XB>e`-o1@q-TOiDoD0GnKXnOD z;Vu;TpW2ozSMH8)x(9N%=sk={>=gICr2dab`&c(_!Pwp%E7#W76pL)J z5>5YkYQX&n6%RZj)%m|bC?3}k^>KC zp!Bgn$)Du4-|yFFcUJ21Zl+)WHJC;Zw5o(WD^wlodaY{O*;F2|;!`m8_D^}{k^g>i z1$4J((eA>^4$L0>4d-ohKi|KK5n!1eB+~hFMMeIE-ejIG_#|>U`|9)`P}juA_?Stac*fPu{!7Tro#Wy`vIG7N?1kLHy`B>rUbd{qVI9q|26re zy{BlDr{3Lalz8x9Tbb|O?1H?$yH)S8Z>N5iJ{LF1R-$wYXG`}l+7m%-T~T}tpzZ|* zd4Idw>}#|qH_)I7Rj5p&`-Y*FLo)Vg~^h$xX41P*|L8m}*GhYSR^*juf@@!{cRQniCWgm2p*3tYu(WE)6qfHh! zIBW6#$b{uK^eqV7tPVc0A(x<#Eu`juFb6@A`?@QZ8q?B{2`;+?nW{Us20+W9&`ZPX{K-CZs z`*!Dj%f*?tA8>8MFGxp{mOIR{G4NyT0rq9rSYR9t7FyyzOmyvce z*2aXRt1HQ%O*9oVpjJx&1~qsbF@7!J>IK-P>Sax0Ne8+&^rC5~P~YHWg;63&ie=%k zOGsAfC)_9)9sFh=11@=PpOBQ891vYdVynD%gnPO>0n1aOPR47F-9IwqZmX|gLYAHo zv&p(gQ)D@#hudkAwnOPqgqe$2E9PR>uGUqh&RtOmahBEt53S0g!;Y?+#=N@zWVI6N zGV46S*|9JxL+5{oBwi=71{1J%l8p^{AKhj`JI>lUR z?Gd{;r@l9lIN~dN5%EG?oSCV%S_~d@bAnj$9R7QPqF6PXX%T*Q(|e@jM1Fr(mX5)G zl!>*Osa&v1?T1d;lz`pf1XF03v{qw@c!%SZvez1WPO`&NweHe&XfPo4jHCpJ)+&*d zp#U&?_;0+n}aHV{>c5MJg`(JYxr!LW#f8gm=qN>;sYdB}6o5~@Ku zG~|C)&~~j5k@=R5c?{QgoZT@zJ{e{S=a5r)dta<5&4vABQ~W z>7H2%-ZHTs(u?u9j8@kmw_(EQ+PQg^_}(w=LG&b1-uWb?H6)ue@B--M*v1Lp7S0H8&< zy-|u-H+-`6PH7pNTh;~uRF?1XnPAd_G)zsAV&Oz8Ft%XHsG^B&?xBY7eC6i0n(vw< z%yJ+yYuDkrFi^?I1Tja`NU0*}gwQ35b)a~q&#VOO_K!)8C zwAn?D{cwhw(chP1EZ@%7>_tJ7Y)P&vj^*^cS@X=Q{p7vwv*yC?C!L`n`E{9Btb0`U zao9bEn6I_3`pZkFwB#w>>jwd8Iq7(Qo-@iPJYgH zt-H+Ngbj*dV3-7uWc#F3J}jj5;WP4{b9s*&f#~SI*{9e+V6Y{JUiN-t61x%5*L732 zyT=DYh)I%(kN+5_!5`5>b#T!SUALPzwjKP6vwx#XA71XITy?y)y4Eik0C36^Ev9)& zjy2;;C~v)hhKZFh74vFTeU7-Fb3R>Y)~>VUa&C$~5_*^nYIm>1Y_1BRQak{je1?E7 zfZP`f-dNGd?p*O&gF{cLndnM~3d`%ivwk?Aq9jP%Z}*M{Ry7Ex8Zmg|m==6|6~@?r z+5s?S9;KZB6oEK&{V&&p;0hGWH$(`x$B2uIrjeUlx^Yo9{dbp)ik z8%@Xd?)mMA0g7Ay%^)(Crw~a=)3|E&NdPmA`nf^CmMq{$!k<#ar4fO$Y0$j!k_u=3 zrJ05(>{V7%e+jE}a3#*se-%O5qAH~{tJDGVy?QQSJFZyqY!&C6z`!N9ZEw=4QbW#X zeraqa5zV58s+#!hjqb&U>c~^?cc{NIw=7g2c$m~hfU5%1_vrq|3r4Pz$)Z`eKQ4V< z;!-q(4vlsvVYxVsP7{?C^|*3PUCZi&O-%q6+u(< zx%Kp&zgsrkFIAI>GC=&s&+Jgqip$KM#(HeY0r4I}8eN_E@Rn8FpP&R!UNrdg5;Ms(x>MWJc6@7@h3w~~N)e<$C8JyEs77Pz8immIq_z4o^fOi=?ke~R2c z&aC$!?gPz6N!m_D12g)9V)~`hm2KskNgMCInp!TQGGDC<$+lSZx4CMwL>!u*icA5S z)m+U)Xv@kjq4~6QFjJ3t6q%XV$377c+oZDM_fi&MJ2EnvNjWN7 z6$#a1V-S5xn{9}$Z@1?R%}SC?M12LJ*CTC}8ZZONAc=cbN;|HIWD@jG15$wi0BpwP z+{Eq&V15xx;5oy1&(`i^S`aeSL_TEkN1dd1gCu{P@{sx!F>M zTcE06!g+ZDXdPk!`p;)XJ9;68shGvi00~~88hhFH&v8sB-@tspMI>hH z>X^x(OxN>_0exj-KIj!189&&=tm}8Wf3N^|BEed@386F?Is<-+2e)2hnSJBH16_+6 zP2adx5*B~pTr49!%`<%0TFg*-to1P!<)qg%FRo0vN)ngM*3+s5k716i2R$~@R8chg z;QqHk+n0xWy#V%&vB~DlpxwMg*Z+coPvITx?9xKs)#tXB6=td|WpJkIc*afJC`3IO z3J^_m+vhk*XF|^1(bM?MaO|e@&w~e3W=-YJ$N;BPZ9aOH@^;q@9c!2>X6b{c8WRxl zr_q{(stxR;O&2njW{Of*9ymB(S=mje?3W#Q#H`E(`@lM&$w-oQ2$G7wy?1a~a3Phk*5Xah` z)6EZAlj)?LueR@@5sN#S7hDgECt9>u6OF=x(`S|^&s$7Q>X^h&pdQd;1zY!I-o3l6 z__uIhDIurQ68ejUb{l%%TJX40#Kzr?FE75wC)}X5NFu~>X$d<-F!4?sRKHAww~~^*&9OwjB+~(>!^;v;bRRH`?Glxa*!jTivm@8pMae9+wzifjRaRX$y&qZ)4SLkt9b*38 zr`8Yy#2pa7P5fk&d$Um~eZv=UO=;Jd7oR`4+BTGB8Gzh5_^IT`5;m+QZB!hyq)&DG zAJ>>P&@d+J)N5SMU{4RBSnVn`Mn9GTgM0?nY}Y##M+-n=PHJ=aZ5^yrGDvNc*$vv? z0oJWTRjU{NS8sX{;~KDW`R}HD2D=2F)n)8Ag5eG*=jk_ZGm%?4s~7WPl-ya#z;b#~ ze^cpj-kH!r{CXe;46EWH2esmqoxrOQHDmv(kdWp$543IL5>V6J*vSNW{5tcbPx7rr z^pDQWjb0H+f2LW9w4Z&@xt*$O9EIg&MtYyh;wa90h=HitVbHy(S?05E5k;^Zm8Y>= zyN;}Y5^)RV`p5$rU_6J=g1g89?VYUSktn-bbDxYgu9#hu->6)M+c;VLseOZT*z7Z- zqviLY#e|M3g5FI>w;HW4|6w6B`M|_Xu0YZ8m2kpnSEj?Qix=IUB!lP)(1JtvfVK}; zU;@Ut*+&)4`?Im<8KDr5YWhFbc4Fv0sQbrxU;)SFV~#)R6QBho{@yzJIy7S-*t6&1 z^P2g4MnJ=B%C6p8W0eS!pKN@52~#qOyBxl8bq^^D+rKedlPfs+I96SJGaBvItFBaH z?L4k@G%@><88VZ&=@MsK?vQY;VkUF9lwpdxR-11a3nVzk*Bszu7MayP6Fx_|!Mh&C<;Z;HoZl7~8f3s-PsTWA2KEKEL+FRewmoNr z8?~U^PggCLioUkJL#mtABwx1AQDqC(jx*}5){C2duMpHhdb^jkt%fQxz5WEzTw z7k(@+xm7714jncr$G?1Wzt*@cAQgiOi;?O>N6l7l@@YwB)CHCs6sDqJMcti- ztJ~|tp=AvlN%2!Q*{u6{hx5!lJCE#awiHPdeG>BT0qYE4xV@)J{%t+P&R$t6@% ztVEhTQ{xKn9t7N;zreI$N6hqiM9Q%N-eqp0sF}U{%1=nHjrW?d=3dxAxP_}eE&D?~ zB`s9T8^jRHg^WC&|rr*EeTk+A@?Q|r)- ziLiD@xOM19qc~GsRfT_lpcR#7vah#?(F^73R6Rn!xdDq-?o&A{uY*Vw%Unshd30ss z#QMXO1dEwLqlAzFPW%mEHj)4{P>&~33j5&5Q2$|x-bIo@nu!&^=e}AW%L+CwAGcuP zR(>CT`wH#e0~IaJQ3H5LFN)ys%)`u*kra>Tf_OND%}%NBA+w9~+knHk{DydWXIush zPnVkZsGIo9hf@Q6$h9}}nDkxdM(&|w1#}+E>!3ACqDRn<3zRDil^5*m^U^>{HviC; zcot?f;g!x?Dm_FQv1yrmiK9f(B&mi*cA#})haG^1T%cUvd{$s!<&>g(`f0iWaCC|d zZ6oTjwii~o9E7~Sltsv{)HkXa9IhP2q6SO-EE82o7`$*_Rp7m*(^ri$n3TwJIUWrs zgu)j!lL``&zPl4O=w$XHdL&Y`L$isYS7WOR-K#?=MwtPEqV{~1Z0$8-WN>Iq;%W9P zC17+)rp|BA-QPx)cIWdwl#}s=zUFVVA9?s##O zo&E7P3!k5)e+pNhmie4j8kc{n1!D7Q@?a)f)rag99FiEVYy6}u@L2F2!qE@~11+C^ zIR!iSo{vB(JgmhIj0jD`ppXsrVZ=k+vHHVxd=wQX~|SO{ejvO5_)zmmm5f}q{4I~8~eiVs=$G1rc70W=9wz@J7+?6 zWv;cE0RLW6hCk3)ujyZ&)@-x#XOl-|OP~FeI07<-LF~~?mQY#hRf$?fhS8Yh z*@pQ!U9G~0uM%M&8Mt+89bIaTu&44ZFm3=fC&uM=r(j?z*UQt8>tMB}WwO^#;@VAxJaANhs;$kQ z4x^6nX~1~%2MdQ<1>H}#fNl*|(A7|#eB2MNuWvA;%;v57d3KgC>cBpK5%4e$Ln;C5 zd>*vm4T+tl`p^{nIK!S3N+zyO)~DM-$;O-+-|&og{?-}xw4g?DKm(QDT21=MnN=6! zb&onr2MlNYgmV-#%2i`%QX0#p>Mm?GU+zzJcTBdo_xAc-rxj;H=y8Bg#)VLMM<@ znEil-yANiihq(H7I*)M9F8p{&UlM$R1_~4}*t1rkw8tUNorNWG$#&N6SA!9cdCctR zf*GHvd~l7=&1)+r{N5w&`>h{~jJ!_-k<$WQunRWl6vE!l5Yi=^t&pIuylVYCB0jq! z?{#SDv?JmP9ee-1kk?` zb=!eeO^eD!`&WS*3d!v4o*|h9R)KdqRf&&oIK|PB0>XhWrMV^d0qTs%D>5{V-7`#w z5$jv<>*ocPi#_^$u)d*wzE2nq+a8zxB1bNkyW!nu0EamF^vXZ)B%X316WMRT-%EuI z_&u3tFFFwbWy6cnw~8Y%R=;zO(@TqIV8z0Q1rolGxFgzTT+u#UVGA3U6j5Nc4KNfm zr0ydi9m!B!TUVF`Njgvlv2Z)xaE)Szy2_`%3)K`tn#LIsP2$Z9_>Ft>Zc>wEWal6hdx_tL@8-8m`U z^+fn>ZHF6ZcxA%-nhNFKv%&yY57DBS%0ve%K(ZMQBhu6UO^g26;Mwc*Fo|$u64G)F zljIWslTwRnN2ltRai6Skdd%&qGY1@YlSg0oWAmNuNr*$T>^;;Q%lO)G%_L1Ga+3EV z9R>U{8CZFem=ZdkNl#sjpsWI*ocYRaLL@Aok4)y=v-oYAp9*>vM=FgZ2D zbyNP8kVtb-F(||0glyzJHNl*A<8TbDGx=uNoQu!WnfJhs0@+46mjO+!;n>Hj`y}>c z{*`O>UR2-i;4$reW@Sa5YGFsYip37o*L@32Fbh#l98ANGcI{d|n^d1ULbm#i_E9mZ z6YM>=6h{$H1yxhb3&P`){9kbUJScHwasFcTriPY|bXsU1FN=6)*$ZLY)bDs1%?r8Q zsz3q8+jxUZizpeLM$W^fSx8O+OD>F52~VPfQAcd^rGY2Ju$6=)G=p-1m1FiktQ!w8 za)YPoGF-oCEgRB~CD*1>(qoFLT%gIpTo?oG0RB2TS{|BCBX)bz23zYc8g$QJCIfelS|AtERs`h0n@{vb4IfPi&z zMX*O)yko*lyfZ{?pz`*L-ZO8TxjCYysZp@t4>r?4I{(nE+|I<|r)&{jmh4xhRC)`} zt}iA8K>RN8n0>$!c*>T}yc}@M;Z_RMJuh@G@urq3~+6~n1G zc7^(O@6>nUw-G9iRCa0!rI;pID{UTAk(^*bkl>LesI*j|UM{4g-Ch^=`SPQxw)a5F zVvF)}-bfZ<29;>^05*l$eC3l@kKiP{@#C!is=ZD#b@L6jm9F_>ePZaPlH`RKfZ(h{ zV(a$VW9d7ESJxXlxM_nW`e49K!G8R_Q?~+6Qjt?=Uy5KSD4!XHYkM>v&K^lXDYN z!e2<0yH-{@-@elpF7^xBNj?Ak+U58OU)9L@htATek$M;;H1ft(4kagRg8_3`S+9LP zgH*mH*;_7!?!-Oz%@H3RGJOPKm-i{fOP}eM`mLgN5PPIgnYrjA9V4InyPr}(kcV=W zzu*#|JT9pIP#b#;SC3>1e~YMu=xP3Zo7XpP=jg)NVd#P)EaJOFE;VQy^4YYk(BXwz zur13Ni*62MNi^q^rjd4>StvlLYdqE#RcIs$N@5+_e81}ai2IHjVRfEmWzKprT&nTy zB=42j5S(+bOPP83v_IG$RJ9z_FS_>7V`&>;ZvZ{<(@^3VTh)jS%BKg4})N#tpPRkY^26JlmxNgnYrX=%r!8m3UOY`os=WdZ8M zhVg!fa$#&eMINt9QDox+#ot-zgZhp|l@R_1TRK&#YyR|Iq6;9Kp3`95uVxg(S8HuU z)JZL+k%(b?7n5oY$TqFrQmPd>mwGsn`8k*dvBW932T_-+n@b7?nj0 zNSeSxGvn!(H${{CFBzPTa)l51WQT+=Ot+rbI7Y;QqLn{w%{V**;WSK4nQfDPPIYWI ze&HWbM3w8ORhY~@71^x#WdNA=Rx-W9#&=#&!w5?efEydpA%9ZzGP?E4mL(`;a)~3g z+Qj@l=cTQzEtq3cGA8+r%(Ju)Rdj{A14RdR${GST^k6`%%)SCdVeMi+{HDXs`O8;> zCl>x^8_q)>OY!K!JU^wbo)H4p`22PG#K#S4(Q)5A7T)I-XGdZHn3IH^g{iazLlY;{EdaXIWWJJtLvpz%vQWgqOs+JZzmW4^Bt zHHoy3P>rnfGVs$sbyRv@*5uZF83@elJRsIzGop6yUFY@EWko0H%w@6+ytl~6t1HX- zNsFs`Po1tVD;#U7%Evi^GNko#i`Bm4!KrqN9*lgJe0nYoPvF<3;V0Sg{%>`K#P+`4 zrmr;57NQ(D^!JZHO2iQc@GtY?Ybp}3EYi>qm%4z0$nNvk!a$?(G{3_YuinPNU@n89 zGajuf@O2dz^pE0?z!G9)=H$2jh*Ca}i3z7j?7hx$z6Yjyqp?P9(yx^pQUcmbEN!*z zPi)nwoD>l3AS<7I90NQJmYPr8-+6Y`X6uSnYIOa1pEsk4NvsB3A4=TUEV)v*eEGp? z3YnXUonq&aWxvg3_u&Mgw~@}3D`2^{T$)(pc=@A=fG0z=eWf!FMmxnO;N+flk!bQi z#y-YzVSN;rHNW%UqCr+?-ERR!GR9pZT_&u~<0_V=pDY@pjZ(M{E`90TngGbE<5!(? zyudT{$8)~Ql|G&EY2xw;vQ_%=YNZ2*dM|)o#0)#xFJAoF= zk8mN<+~wX7WcY~v&tbLKh>5^vi$Pw9)s^{7!ij(JX0P&B{3eMP3Kdq4oYkl!?4}Ck z;ErC#7#cORG*#5+tkb4?DM<=C*&LCqqSgo?nmLg_5yGPz@mqej*NwIF|2jMKXei(R z|Gy(qwl;eR*@+O!Rz{Rvl6{RdvTs8MshCodJ$oXu@5@+5*|O6}mS#*7gOFi_!QgvM z-tYJK_xpZ7fBeqxKF2xEF$XjEeP8!=y{^ae@q#f!@dvZfyXvY^r)Z&uyT?YFdKL!Di)ZOSpLU&fPzxFqvz^NtnhHQRwm&_w-YcmG+2Fd?`$MGMz0}>g{jrhS zK&ggZ&rNKLVANd}O2`Qr{7D(ecq|mbogr5+XrN=jV@W{8D^!-nMtyImBrH)>({ff2a2? zv*5z#GWD8wBN(JkUwyXeKaJ?92z!eAPIJfVgu6 zZ$P*K%=iRnzl2&bZe|=)YK&#CAg_VO2+2dXvbO4eQ~og5_o?M{yFVk=eLuB%@T-D5Mul3oRGJY3}z(Ii24Dk63P3 z{&h)e9tsa~Bp(UsYK`RYJwv*hrh1kOrG_90V-c%|7~8{W{Z4H&6XY)sMXl_{sB=;& zx%@*6?Z8Q<#5wxiAt6F2@%dbh;TgQ&dMAkfuF1dN`b#M)Vg`y*?f=BO7@;PV-eZ0} z^+LTPxn*mpi(^oye6s6u9N4c-=^HDvU0|QF-I_l#fgYd5ki{!xOPt9csA*h5jl2o@ zX3ec#2QeFUY(o6Apu@si_zt3!o)L_N1AfXG_jJmTi_D zJPsux@H}l~CdZ5qm?vTFD+!K|z$XjJndHH<{t3WqNoK2{MRcYn>rgjLalj#`KE5Sz zB)(vaB+IXn*pn4EFvGZYR$A4MhxA}An};9Lp-*?Ay#F_=b^2=-Cj*8iqu03`YyCO; z0&OcV_#3}*Y*Ax5)Iwq4AH&xYvus}fMm)%c)Ayb_rdZf7v~e2zBp=Wq)bO*zY`YLR z8Nwl{c;fL{`f=VoHvbUAC=Z5gW=F+I`8{wY&AtK*UYjx`uLtPa7^dZ)_|W`06M9ic zr3RU_w;6Q+4IQJ?8mH1rq$xlmlHT%F~&UVuw~R*|VyX&<^8 zxqPT~1e2a#vl8*St%5pERJ#U6l6KYn!fx4hB;;=o%yFd&^cd|Jq^-}2{^a|e!XL$& z`N)I;*H)>*fQ`rtH-5Tfd}O(0i++oIgIda-zNG&ch2`)^fAJ`uspim6fQXLXeZSjY zh=X@$T6FOF{8+xdRaF3oOt-(ZJWsDo79E z;IDVocu~me5VDe9wQRM3^DY5hb)FgNLmCTr_|Sw%ur>&dqTA}>k5a6O z?W(^|j@vUzTZ>dFOo!C(@Z$uI)Y6Ri#>&=sB9^$DG;+TYeWb9 zj)M2#s2W~~b?%Kd*-F9}<2s_8DoPPK(k35F7PR;psz}i!4Y$oL6K0FAWO@DkWM|v9 z?(6IDa>!IqhGk;h3>7`&76q)Ab4pc^HC4>3yIrD8=r(f4$EKyQusR#=Y#2=!>quhc zUBFEEc6SKK<&@2dd(+--fV;njlvrYCJLxcSU16tA!#VN<|Bl@{%pzI`Y`t2q#&==S z9YIj&k$wY|0(1MZYzRPsj|bl5d*$!dicE(KXzp)hFy+de!%lh~k791C_~`I`Gg&l{ zsKyEQ{Jz3G7le1p`F!$Wl3OqXiXc!)}a7K&7w(DupBs&=M6osEFuL6&!LZ& z5dXDP6|o$kfjrcAI_S(EfONzW+F_9ia73tYSXMq*)1PYlJtRQGEz{(stY@8 zjV^#$e;^-ACr|D^PdqwIQ#+>skkbDLe3Xii{?D%mxsm@Tq52ODO66Bk_s-4;L(k4| zm3kjQ(vAgZf1$9!UoGBrBirT_z`opMEx;Hj_Xdrc{s4XeHT@f>Ht{=ysSlB|p}A4K zp}-df{F>T~mDJaUs~q?-z;r-~stzHSw|joZfRnMSb-){+ks`8uC59s!Ir7YQjE@$G z&%kvb01&L^V~^{Aq$x`&ZzdW&B@AZ}s%H6${T2KMzZpa2Ua3pIgES^t2IEhpxb>8^ z(`Y_UXJ<{P30Xd{Jj4;9^Cg32f@W^mwz0?t@*^X2SX%f!s#roJo1A+0eX&G}kO*rM z*e()2wOEvw*D(J1+hsEPc-3^H2A(=xZtDEItl!%KXLG!GzTZN;X{fFCA;TCV)2!`7 z)&Zj)J_AD5-K`0ZXsL zxjtljUQ3>w{?zwrC`*Excao@slBhLmQ1UYaW`NVFDs^3!ajEJiG`lxO_Ewt|+PKZ~ zywqIY0)n*%=)acY1McEj1DwL3n8_Lu$0PVr@^!aUt7Xe(=@*LLv zs1{%eRksW?)b!OUk9y?%{NMR2Gs?Y4nA04o*{75(pM<@lqOhVv8vK?rpntb*Sui}e zWNNbL*lp(!(*l*Res@BftbZ;$;v;JCCezU9fSuU#ok6X6psdBE{LcV^()#kQR$$N`I%kvaOojv@izQd#oReid*qdKLqi6<;> zN{ydxY-03h;@uR|_mFzaFdbLKi$ZC?)-mEev(0O6KiOT>-&uk1jh5ZoNCBqSJ2c@Q zPJs6CDg>?m(i0Z&Q=W8^pGf4e4(O{WI=Km21?c$hF{`(zzCg*4a=6s~0Nn?7S!Kv3 z{!vZTqa)bk>OAOs0vpomjM-`5np`Hk-H>GRDyh`GKX5IpOT|+=Q=i+eu(!?(Sa*;$ z#fsb}rc$+T6D+2EzDvVE=+QGkT5Xk1y0*yuu15J=;@c103MJ_HlT^T1=)Uq7loq#j zLh#f0(bj7vS2m-oY^Ocl7JYs6OHBJL1KdMImzyaKpSWGSgBqe3=j9WNt4eQ`>fSg+ z;k}U8A@0KRMQQ)9EsM`KrY0f@I=6aX=MW}SCF7#2oRprtlroH1B*tc{jlLVgREF8T z#;-{QdS(6Y@cYOLr3JV4f6l!nySv39l8LWOXPL&LP^yq${2)hq+2hr7EG(d!`I=V@ z{gA>$%PR8@U$y|6cYs$8xT%_#fxRF)_Y=4mqZ)F?B>A!Pvk(()DNRk}6v{gtv%aJ# zE+dYv>60)^JlEwc?!P<0c{n`%TVrN?X#3G=Kwq(@09YrH3b^JLjP^bHV0zSni6?|3H4G4bLjPLN#d_ zOSVn1T(WX!2szK{QYPI^GZ)f$?-6G6nPQn#fi)2pYL{b|5YzO08uG?bJlY(c}zOxR{E|C%)#h%V$1m zL#uK;j=`BmKrpxW(-!vHZ8sPrFHe5&V@H!cO#t5(D%&5wp+G-8`*o@B1z` z>*(`JfcSV+M)0urC9NdhuM5Vtw}Zp5NAD1XWL^u7dXCCERwC;3K)UZsv94j3nP`fw zg7u)X!xPi!X@r?_nR>3(l2SL6aa6r*m839#ky8{Z=r)YNfWwJ>}e}#6nH!KvOPU zvm=rMnmNAHR-qA_^FqP%ty)awcsZi-s&~RdoW2LouG;*euKo_4zHDISV0uC{=a!$j z+?;Qt9=hyLWiD^``91k&xT8Dn8P|uQ0|5#a; z{TFCy2~x0pQJoC{Hnq5NbSXtTN`2zEpzBkchysFHiiQ9%L%`?u4%f1qyyvy;vP(5ckjU(|iq24oY7%4Wl@qHL!q_h_T`b>bKKw;W%T^cHXbz~I#)A4i zl00YB(-;2x31z8lbWm5(g<~Ej8t=hO5$lxj_(;t{<(ZuJB;i^n?elb%+EdIz^q_D~n)pjwgEFF=tH>27*| z#agM%d)Z#uNP5w&#IS7u)&7>*0Oy$ zCE+>S2{np!LrYbWjh~qv_m@C=)t6s1cb)f{(AXq)H@MN243^*9;)(Xkf81xr zuWufr3cMAAt~ME+dUkCSj4{_utqb7z-gl%V0E>Z#s(*1{>SO&trxjCEJX;y!VofOR zwSg6x2H2`%ZIFS1{26R%Z&|na7j3hwTsN*N7Xeex@y+vvu=X0Mr!@XFbycMWIRm@r z%@^xrp;cwFSuJ#>jte_he_K(G7)O-`Wl76$r{XNz4;a|Q&R`BRVFW2n`N&cd=Yd4N|40zZYp17c& zJsfO!$jieGHe`XYNNreSNbg&j$kq-Z&j>7Yy?YjaG4eX&G-E;4a;fQ+2asF! zsew(6G#a4!v$Nivri5>;2$&K5L&l1jXQQ7(g;Itj7H%dnO00ba6O{qW!gAFIH8y+O zw1iz({WuNOv;$CcT^{3Vpln>6>{;oZLUg{BZH-|_&42kmQKt1Cm?)Lf_Y?xMwc4#V zd?Q+zG@@euocsGiEUXqjo_hQk)kMSo?~L;xdbdGQ$JA)6<`Jd~@W{E`W{EznWOsL< z*trvD^I%Ok_$HeS!V*4b<~M^aF!Hx{7=Qa%PP4};xNK^2R_gYwQf!*l;_R@2fNMl; zp?KkBTC?M6C!|#@(*#SQ^VLMf~4?v<>*l;a0U2yt1%2wjPx=u9<*{(An6 zb#_mCVwO+FAsNd33$iG^hy{dMcN%T^5r>T9vWzU zAdE>+mkDwbeiTc63Ji26RauU6 z9H)Z#XOzR9R-fB%2|}#-?d1qz`6i`f0Bst-J!?2I`9+vY!hdR=eKt^)i!9X%tGiIw zV#+MkYVMrx{8O2HD)%Ix->W`9#&)@h($4E(zBu!6^&;t`d_hAyH%qEDdEY&Xj^|L;(9rRyf1 z=Khfq{9#AXi-j7_dz>^>?cs;-cMNwLY45A=OAkk0LA__6s^&?<_PU^>q%SZRg`&a+ zeCr=Z2V-!cS2}V#6wxg#lP--5A2@>~0joClLTYKPMS{!19k`c0`R5ttNa;dBnOc)DiE)xTV|{en}sZn#P^2C476N0V+sP`7%@%au zFykWNDvWGiAc+#<*i>u~k&p{PUi==M_FjZzoYIK_75{sP!Xg+;a%N!hN2p6Ao>1KP zTrp#jGXXu~`fFo~-8%bK!T$OW;5jp`NBv%d0_dVBAZ{tVf+18Ie4T5D%1%`UM15MJGI zSNo|k*tBG#6#J7$&nkrbc?BVli-D)#xi}3}49Zu7S-|&cL5uNhKY|E%=-R)aUGOJ` zm`lX$3UxXAE)+kZh#mH8GL=Kvz4>x!Dvnkm+0!lXYpuBTk2|gB5f1u1W{+(YY_>D87|y=JuQs!EN}*%+v%yaAd@W7 z!6HBQC0adLH-NeQLlO>oK27N~-e3EXTBVN-pKfHUDn(*jtcf37yElo6dW>=Y*$3;E zX?dpoe=0ULQiGJ0Awn{-S$M54r3%yxuD(!fWgSa9MBT;$EkQt0fezK85`9Q%xB;T1 zF{P#>AP0}GtJ%Vb&*}XYkpN&g50GoYDokT!;(wmdiJMm}~U2 zx8pq zO=~V}+KlbIQvYH4w`>?T9>mRCpZ9F*=+6bKBul7IVR}KQri)9}j_xZ7EiV&amtD|qb5aa9iK?oc=8nMxHR=N=33O}#JOi@Pvc zi+|^6f!1tPb(#Fr9q*9}Ns6=Pk7R`#+m*O3`j(3*P~fi7+(lGH?v0Q|t>Vo%=)QnN#pU-SnN=%lw_~*NOx~FJhTkWX4ZeroPWj44MiBnBY zJ$5*h`ycl4&%E&IxEDT&<{RvF!rlPbJQ5z0PT6A2ldgc_=Z{5)z*FJn4{z#{a(48pEo&?|3=ClLLKhoxhiT+h{ty z-v;a%P1B-si%&~yt&J)40@dw%U)zFXL76t|<043(y+9C>vy{M2f%aS;kSTTj=bs!_ z&rLI)Xau_-2RTJ;xk#!>hAVJL9a9nE9N=aJIXW=^&$zuqldX;B?tSIiUj1R2Jqk3K z(#VVSgzQ5-cSu8ia$z8=l!|Pth=+gQ9f96qX)Ma1vw^b}>XF~to2BvxYJa|4`b}2< zILe5`(jV%X!KeL=tHJ4i4U&<++Of6QOdZ=9+M-0=Ee0|_U#Y^=Q8V2q`Jc45|CW8g zsokx_8PkO9^qSZ3PtZyWe|6B232r#O`Fn`|n8oiTTXK?CJUhyW`$dXKD^+O5_;((B z$1v&mL1D0>^zpHQj~*ZgUjg!kiatzUs~ z#a~B*ZcwszX%yg5<^1Pf*&I=iJe#G!2EzN__dTr%h73Pe;D(pdjLik)Ki%pB?o+w@ z{z)rHG;+EK^GqxC#65cTkD%*Hr0V{+*oHey6XiYT4$)dz7u2WTM^g22X4%yS`2~?f zEo*AvnX;DRI?Zi6qCFy%!oGJgY@R=jNFjp_H^E4HelMARjTq&vJA0u|H!}J*<$_T? zV>}uIttmsGdzs8{+NBi4oG3I=TGI5!zV;etGX>KMh2Q&-g}q@aGjm^8Ex?tOSNNw) zeZshMs{}K$$m47piuk7VjD*ecFS_8mAfkb<%Y6q4+szO59eZ0^7QFJ@sV0^9gW)O; z;uRGX0aMa3Sv;yseyzqN(BunzY)4mHltsE*UNeH|b zM0VHEwkVylVwKX?%A;1BEr#qQlHH+qYpY)Pg4NJe`TaBGtBB)Sdqd6DIMfp!LyN^2 zR{dGq=`~xY%RF61dTX*qAtWyE%OO(?zgD&rnl-64wo3koRv=zbr&O<(D`6StXXmAd zP&~U`Zd-ebncE(A$w{~LMVa&v`2`qZPQ77yi-8 Date: Mon, 7 Aug 2017 12:53:59 -0700 Subject: [PATCH 008/146] sync --- windows/configuration/images/sample-start.png | Bin 0 -> 94324 bytes .../lock-down-windows-10-to-specific-apps.md | 154 ++++++++++++++++++ 2 files changed, 154 insertions(+) create mode 100644 windows/configuration/images/sample-start.png diff --git a/windows/configuration/images/sample-start.png b/windows/configuration/images/sample-start.png new file mode 100644 index 0000000000000000000000000000000000000000..8ef9cc928c9559ee98d7e7801bdda01bcdf68049 GIT binary patch literal 94324 zcmXtfV~{9K&-U83ZQHhOn`dp?-m|uC+h=XtwvBJ^=dJI@)YNoWPfd4{E4h+Pgo2zn zEEE<{$^uG&Gw*WZ+0N|%sQbbV2UGLHd)Zf(Hfeu0zJ&Jcggi8A5p9xC6l&@|NUDI4zW_u40wGLa|IK^)W78p_B}+Ofr0WWh_o43Ti-5 zptEnXe8>`nqdI+!nD2RUIU6rvEPj~}hm3Zdb9`wHv?8a3{5e)}&SR$b;9PUa0G}mn zqaLvKfP&*vsny=NxNGxQAzRe-+QoMBIg5b*nqZ8TSWv1~ftI076zO6FDc~`>shZjv zot3Ind(yyerR z3;v79OS5kZ!=nD@(f&}fybZtoFdQiF_clgtw#f< zVxbZ8A`Rb=8m4unL=rAD(t(fHkzUNLNak55-!a#bj>%N-*6N&6{(qsYpsc2q5RrK4B^eA|zl+dv z+B54gk|Ibm6F>zacrz!K294zO%Vks~JY7u>;d;a8vv!B*`h@&rDmFcvV&2dtvI_1B z*WuO_bh)dA&|JVs(e-GZDP)!IvkkIQj!A;b^V`lnEG^`s;%L`h|Fj5i6uq;puIWiwV_U`vHQO8D`flVd* zwYgk`5!;b9%fY$bHGq4S{gg~=mdHyVKu(r#rt=j!0MXzpke5O#;eXs+d4$edZE1W; zCpo{4XOeme*#M~v4=NR`AR=ukOldjC)`j^*J6j54@)D+hwMWy!KUVP`OM~*e$IPax zA3*tqpa!d!t8QkXdC60OJjT5d1H0($a-W?aO5OrR0QmJ`ca{Nyi>~sorH7NLGPskFLX%cW!=C7&h*(E$t55Oi zu@HLuE$VW;31Q#9(9@|s(PCjo#?bVUB~vksR1&9~4N+l@&Sd5QmoF4~upAN!YGCo2 zF_n_*d?uXIKI63O*7lVSMaZw}E?TmDRJZWLFW*=&SQ-?E;GP$G*!(!+)}cAB$Y>|~ z6$?|0{l)5l;bCK;$JI)x_)8fOd7%Lji5{ChLU1>G9#B1dTk&-zd3Mr>h_dAwY@jt8 z2i=Qzo}7S~m+o&!!8@H9Db|0!wiJio@bJ3CC}>Cx*Q$j~(5Dm#J7INs?)4qJOZ=!T zsHdw>DKWzkeGps}JS!KdBwNW;!K<5?kVX$oM4_0`t|`MT#V_E0mUpaHo6CZ;x;iMt z`q4@kEfzE(^RX9PwwBQB!nh>BeGyy3aFUj{7)mUZ@2j0DR$WJ-|1|DIg(0Z;I^}=n z2vV*|K`m;jIFRr+#J_SoB=ROWfV!={4+hFl?|dQ^-LHjgs6HHaXujxM9lEwx2Aova zFo`2Pj1zF7H4crDdul*j;nBRykyhCfQ}B-I1|qW6Q3n@h-o%-+m0hf9R^JE=>PADs z$h0`ECYGzT065EE;YP`;DxL9EP1dCbLW(y$4+R?`T$4VXYVSc-!9+a5LN!o|^72VG zyE~zv!3j(DSsfHr>6KO6GVtC`+sx4!<~DJoYP!0kR{alCrK}vUn>22Tad)wGvHm+N zBk(-CcC-Txg$L;B@H4V9_QN3Rrw(exx*D?K+eN41)(l2ZSDUsAx$G$U(3}ZYDpivA zSpWoci8rO6v^Obf@HDMyreb=-ea|K3KQj>>Au%J2bMgbSz94N3+v# zJ}R#)E3+~*h+LPU?6$|9&=fjUoRLgL)dkN~5-6hRuB2M28xBB$7wczwP-Z%lxR!}2 z^}mI=|7d)o5FZKEnJyK)_sgX3UCQ55@mpnFC=M+3;eF z+0DjT<(HvUXE@LX*pFEdrA62WQ2BMa?LjQnIS<~=>HSm(VUDyzDD=pvS9GQC2D;sh zAQ96LI#*HRXM?hDqgnF}1j|=qILk2T*Gi z?7e37n_|0Q)e1q*@1R1uGJ-9kMs6`*{hjl*6@B_-A7Ef(!LVOEV#aKstiv z({LpqtGzYAnLaJu&4md!>)qa0cm4BtD)=C*Qu*xxJ*1|F!=?5WW#%q80N8y7yv$ht z9Y*JUpjUv}<(wE_2)EM_RPSZI_wGzXk7#nY{#2tI$8c{{7RH*rY7oBXb;tc*=5_!& z|Bt2nxoBKpVeYr%Wv?H8X8H;oN#MRMmP}an_T4focT}p8-N{muD7rW=g;pw@`b&q@ z=N>y~t~t6n?+?`m1T9KWFYj2~`a|@7mU!FaqR^Ss*Hm8SIj|u3b#VZxkcyCn{uy`B zzVu@7S`PdeW7m1JUx57QOD{9LGrnFmo9-Eer`gD==eSyuMmlv0?cg_XSlz|4cKy@m zL!IM4rez1n6}<^efWaI6dYp-OPluB$xAYws>=jKEuj{n{H+2sY`tu5{k-6egD6pu*+I+@z++2#6^BSv!^l zQ`C zgPG-a{_q?uLt-2=`g*wDt8Z!*KpJ8uD%=mp%3uLxd@KM*{qOIAw>@F;I zo=ZJxc##Pmd)BCre7`@16>=>YiTRjJWy9;C>w0?Gi)`yY<}eEY|ZE#QK1^ zTWzc6qXx_?4{Bk`N+SUjztRpoWn<3@IMwiI+Ew7uUK>Up8*e7$EjPCn8o zW>z*^gPcsise3;SxY--NZB!FeEKi^I&G+$7S2L%kE6{HigPcKgKlcY`#O^;3B_yT0 z=(^^}C5Aj*ubY6F3g2P?)`T5=VVid5UPs+7O6P>L zQm5`UobWU|eit>P+l(wK0)c1{SoklZ%Qr*i2W&@xeNuqq5t9);<3-*RFekuesH+=5 zY*`l%)ySPLt3^V1=+aO?rl{vm%5+ZBs{Dz{4qX%AYUvE)a>aG|V_N)%80SlI-Erf# zSl@ck%YWy~mg-tGPkFvde~>Qk3+Qqg)Al*BSa0Xfy?tA;V)(&{zMnY4gM!X`A$o%rJ89mlDt3{)ooWAr$AP=gHQw;o$lb20rFUZEY{0g+Ab+((80w?a%_=kH+DB zQI47USHKplwrC z^@`P1RWvwl?M5ScMmvXT$&v4x<+It#`xo50H31v56s-xFC7JAkP(a!2XTVvzq9E5x z^K;DP3B-8qu#$c~9=m}LngpCs)k#Hc_c2#i!%@Hc{)1i!xz3}+vRfKgiwJJ#MAsjU zMzDjRK~&rgS=`K`*snFaa$|f|P91B{=J}l1^HqD%k?%C*DY+KnP>(^{`T8#bvZ$76 zxzC%U+>wwt9|k=8V^Eneu&Q<+1Y$7)%r#o5F z>8YeWuk5jQrvmeA+4^dAUCz7>yQp${>(9hfy&&Ez)mSKb^;ETpC#P*XQi)!THw&Vs z+X&?`7Wl-t$6JD$&!d^U+?y{i0>5}r*_7l{0cq(dxA`u|BGL*>;vjl7X^R^R@l}*+ zpfN*HKm6fD%fxJ=fqT0POU|J+OkHrQyY-zd-KT}#DrjP(ZzysB|B}4n1K7YU1UdhV zgvn#aXccF<9hD3RV-4~<5s<-lw_~Qi^9wY?G?W>|XNriY3Pn>O)N!zed#A(DgY?X5 z9QTF7&eOR_)FtHQ;O&3CZgzE1VHqN z#F#D$yY3h3rsE1+mg8_p-~H1cVP)0^vwViGCBdojtL7IEr0(Y$j!SNSSP|Ff4|cxB z&;q~=5aCMVmh-bl<{u^}8%GfW!b)~c`>rLhq+j(Hq3T0+`>FLz?Am^;?_1Dk|WY8&_NRNK+5osg#!^I6(X; z7W(#*LoRsDS-IHo5QZwxJbI=<=%$>(h z-psnNv^MA%<-wI=6Xf{f(^>!0XXt&pEt_K#q6?PTp$uZ4iire#gg}?vP^EI{V@Wa=2Qtc=Fm1FW5 z)I#N?BcL1nk7+QW8nW(6bBp3uvuRLF!9K+-wEQ9K99hfs&W@jwi#!VSXv^k>g_!ON z8A+dd!T5NoY-Q!1G_f3kuKiHxf@P3c-2UHD?qJlOm)pE`q163AJ&(Bir?#<2@zH?*d%TJJ>J?ahnj9hD$L#r695 zdSnjXsClQF_S=tgI851?UD}Fxm|l$}7XDyhapayK^SV>_dpa+cSJF{ddB}lpbLCD| zu>WS!<|p@9u~uyXB@<>d>Qu8uua@onl&8*#o$YR^!y13YOkdOHQDchMXr!m*k4p?z zDW&j^bq2s~T42h5-ndL=d7tCH#>5SM+H7%YH1=p@x7kQ4a!)geNNIZOGT-5KAG6*G zt?c>o$Y>lu(#-;4`eUjy>#Agha(Y(F^P6I#QP5TiL;BE{aMvAocQp-by1&dj(R#hQ z=ui0TnTEjjapY|GQl_&R(5^Mx>0;?oYs_n|ptpHGD|148&z@_UDgAmOV_MO`zrRxd zC->?Km6t=x2dfay#)T`zR&3b45@x{({i(RcbumZWGRKhD8d?H4wvjNq|3C#%ruX@Q@ZNb**d{(ImAmo;9(>8-9WD=c+dAgJH?T6e{=t0 z=#{zEv+?!F=W`vO*#v+Um_<6APuam8xzFP$P}%sVW5M3)3*_JTwq%viQVK~5q~p?Qc)FXu zyp(CmUkRr1Ob@d&^!d7wo?_Q6WQLIH9vwpNkPRV~HINMAG&JxtiAs|WBE z!Yg>r7w_Q}N>id!!pEL1l^0dP%=$8uxPlIH&MqLuMoOwFa7?*T(b{{+f+LW11h?xg zxMVgB(q)z%z6|sRB&M;So*VtXyV5>!38Cc?o2kaI-gL9NoGwkhi)Q(H>`M551M9rK z#wR|xMaAaA4rzSb2~ld^yB_ulP8$BU*EHYFu%h$~U!CRIG^W>dOkznT5o5A~=H1^3 zFF*Uhl?s>=ATB8Pb2%ZxjC`Bau;+@%b-mXqN|K1)Ee}~H$ju1=<9eYyMcS4NTh?3! zd8V{qgiXt^YthEkb(f8;wzH&r*}uJHPO(Slow|!3NMsUF(6!Ek>BSaPpq8xnFx?Ee zfzEUE005>?=p4B4dSRtGb+~9}KY)pud`(?glxVou0+(PJ(6l=WJ6)+-*D0>+>@0Q< zx2{J7H&AiExfF?bZ6;ckmQc{SX~CWrDG98}EUwN^F1^~Y{!dBO#l4OjEQh6eeH1A#W+@CM z{(+8X_Uh~g+B(S_kjK(!Qgx3c8^Shva%2=YzLQNcQz&$N=yB8^X9^e7u!n(-m9QTo zfujLFw*8$i=8lXH)|P}k^9AzI>$0F7FZ|prOz;T1B7t0@jScYz-sg3`=}CBzbb*~v zScgwl^~zEjK_xYwEtt{BydOn~&KhcV-lw#@Q*A)63d;7%$p;Y-N9tGO5$oB#FwQqa z{dR2F4mKOj*7-S|S`P925d(9o_Ag7m`(rA%VO!CYps}PfX9ynwN~X(U86%)!5`T&1 zL?Co8Cd>?^)V6mQ3$8{if#^>pB(-BgzOP; zxj=cBA@D;h;ZAn7p=jWeu zzLGyMB<6>^KiQmt{!CZmpT#IMPhT<7h+D{S@x~G~WF?}A*)NCPAf3_Yo9DJ&b$xE$ zTaqp0IZ7kblB(sLnYPpAhX#(zt1AxPR0q01L}@O{$U0{vpdbh9dd4sSD?>`+vimw! z9CzUYy<|`pV#Z!1nS&9bdVH_jMp62r?p79xO=2WnWIsT%q#WxiL6jBODk{?L(D^Qv z9aQqKWw2QqvIZW%?t&|ef-u$ecu+5&#Cfy7QCJLGZ#`d6j{D?jZ8qd;v(KcO5kq7L zMnq=iK@UYL9D3iO+iOP5zZI6v*VD@gN!$(H(pqFz*LfNj-)p=7i@j2+^9s8_0Zo6i zR4em9Ef<{c|M1ErfIji_%WLvv~wlYk4W?N9JaM^sj*-CMO5^d)pNv1sBp7wcX&^C>N{46 zk}847os7*~*qUWh<^A^1qH&vgrc*p}REtJOhZ@1Zt(E5Yt;jyx?X*!g`T4vc1X4&z zb`V4wu2kDUHXU==@!rah2H89`K-#-aBH-#9xSutuv#&5>&3faBJeBK)o)h5e@-@x- zyNkrUA`f-!La*nO(Ezh|G${dvSU;H!17Mcm+_c4k9iK~s^485ZmGM=1h4W{J{j>!t zQ1wP<9c)$B*kUCHWx)t_Jq=qfk}C0Xfta``Siko7sCnso#=#JJJccc+z;WY5Y%l{8 zTe^!iRsR&bV`x2Wy~Hc!w_4?XCdZ>%FaA%tZ1oc}B{Uz8+R$=rsVg^?V@N!~J(*HG zWNQf0_(Nv+OsCw2B zi!9sxxWka=`Qk__tS0a}PA>&b#ca{*y`wgP|psR?`h+@R4ecC*>LFlb|N$;k)@|f&$W?+hPgt#X< zT+ICj#I#Sfc4`DEkYB0uS7}RO24i!VngUK2pRbO<8spJ0cJ-fAH;;@Z)S8Y%{rwzk zLZ@cQ{xxo*6Svx#+YRw79$_0n)g8Qo*R5&DB!$8dzzJr2KpY=NUf^*UTbC)MK`xCS+QTOH-(j}Z=aJSz55 zWtAem`t>->b=go`tKX#J!k9Yhed%DGOrCABTtt>c21Tex*nEBys}(g}b>QY3WYoB_ z*|jFSn24xQv3inSOm;!@Q4d_Y1{*L$;#jw=VJ(_Oh=r-4byBcxO& zwKjUy+nwzn?G`fMwM;}iA}QblYUUmyU{>6H=k_8#A&VWIoB>~}SLj9fkXDtX3#B0J z)h_xY!W-WJwUBbD%rQbH*4Q&JZ+xA)#_F53zN3}*Ww?a2GsQs}r?jtV8qo zowwj#yymAph)6zfvo}*L>#1b=k#-$jj@PNp?vb;Mz=7-=KJ&9m*;kahd&QmzO!vkL zb;RWmdV;NYmx2WH}ZoJ%aV$>`YaPy&lzix& zT(%Q4GRtJ`2W#)%=2XyiS(F=Qm-@2Mw z-nJWUzW#*H@p&At&;^K1MH#p+cvu1sLqybBgUNwQn8Ic5emq)7(S@j}dhkf`pGgguU(O zE0j|FNu&vgcZ{YE^Scf_ftZS%GEZ1e#G~zxVdDZXp0eC?*SuwQ=M?C?>jB!4C{@;E zMC2{7hXm{mhs|6U$|6jEPkkd*Wz^}R#K!FJCP^2Et8!%kQ{nnaI|UQT1#FW|o9iX7 zQ6;+H=NpIc&xj0KzJw&zeIUO9SKxgrDQein%DN9X!=!oJ$cnhoQF5fCsB6|+cHNkf zM{|iO1NoM*HEg!tuUJwT?meeXOPt>(9N84!D<$m%l;kTutK&Y1SN{GYi^)nE z5U5Mm_EX=%&N7Z93L|G`L+eyO@;Dp7yi%fxOs~Lr-VbyC8+O{AsoT`cr&Jw2$2=^_yv58 z^r}^)`0kNP@DR;azGE}jJoCS3(_>BO`LJ)#J8F#wu^+@Kp{?f;Mj@^ib6Weoi?v}Z zFiC!^LPtw0u#}ncE0akt;dgOml*7hR=7@`~rzYf!-*DkFOAs45|TEwLVK{ zebhZrMWH-{0F8mv<}17M&N#JiOPGIwTY+;&n`9Vy?c) ztn!+h=S!=C&K@Ij^G<)u+e<-QGvmqu>b{i!g|%>H4>( zN9Sz!Q5~2Gbd?lJKPDzIUYQos8mih ziVA|5V%x8Y0|hoH%u<~tWcMA}nd6@Tto1^=ANR)RMSH*jO;UgQ@RUe~=fS1a2)})i zIUb<*>jHytoaHG>Grycmpc@bp8s(|RQ6=0`mssw;Mo%M%yyhh{etr5U73yWHb)Q$* zWs8jRnBWiAaek*WnUJ zW2u^5y(|W(qR4+=l7vJRgc-_cILoA(6o>})(4?y}N)%P5wQP@8 z5K|ykFVzg2s`fIo*Q^(=x?E=?Uk-`L8d_`!ZQ$?vZQ$3I<6C))9%ya7%B0i|XZ`|2 zMg2+_r-Yp1_lzEA{R?Ue6fFiQ&=+Q|?4ik22lDwF%7FP9?R{Nb>>f|qrK8^# zgD#O!65%C-gGHz**01N5<&yy0f_`1P)7*1>PqA?&9T6jnmu&iTVxA2x-Xh$PC@wy1 zUE6Jkuzq_T)ZSTBGZab()<-^ z36NJb7>x@~j5J^hTUH>leqAwwx@CvkZ=~Y?$w68UUR{E6s&Aw(m=c~BUPe(>VT}JM zLsp4z>_koK*;0)!-=vCSRmwOfl{CX>W$eR1lQsa(v9{Y0_nw1X8wCbJ`l~nO6h&vj zT0o4jpON!{yZFRZD7d55_t=_|MWNKRdO*YW?iy0MJ;8AL#=>eR{}@m#CX=djA; z@-w0;P5*1o1NjTWs8YV^zo2~#Ok2q$*RXUB+b+pJ?^iu>Sw>$|kAP`lExcc%^4`-` z#HStMb|J#{?O(un!$T}4M(Pn}0_fyGI2WuUNhf$YUZxfOL&ACqK{edVE?p#as40og zlb^-_0D)M71l(wG%jj5AxaTR-i>5wfk1=dThv2zO2Sk##2(?~RwaFiMPYAdc3W8eS z5!E(`9Ip@g`v!!P3zDfL)S7{4=oZ_p{Gxs8iP=H^HYS$Ats!;XQL3WoKCCjYw{2*<8W9OD?82qV^O zF$CvTv_h?tSW9*8VJ@m4G1-%v84wLZu%DjwH_Z4?m|(G)A>cdkSRMMJu1GX_AROs? zWSBYsf07JWN7qVWzsTcjgHQ5??{~pcDxxz?_!j9eCIiWU$53KPZ!!h~L;>$iTDc+! z#y@LYpfT$XEF}3C(QxUYTB`g}Q3X5(KTl*t>*xVIbf)RF`aeS`xJQYx5scH+XbTwV zE?1^z4s6QPGtM#(WD2mR0FIpLCRCEAs#O8gFe$SG_wi2X<5OC``1fAWuyF#zw}?g{ zfIJ)i*Bn3NB!E`HSVDPeT&X%%veAxIg;<|A^e7b|3QF~_iP9HnnqS%O68K{M)82q< z=Zf-wHX@qWoWi3bD&3M1_}o~Of5(Uci;lk>riv*ftw8#VIUIrrS@2K@yRX680uKAK zZ2zNtO$s*-ReXJkAt>4kvcHF%i+~O3RYl_dpUBMmZI#sGAXCnOK_Czet_i7-N+V;G zsK8ASVd2KWAQ*Tb&ok3}`s9BPtW^Z}SM4zc-ji|32O@ z8-tF^J=WPx3wI1_Oox|IKE#V?@Nh1(zM&33ykzTqGw{cnW9DXE#}#>VHJ zv~NCGZ--Wl66edMq^1ic%ugRU^8cg=m;#n%%ZE2z7oKKckr^I}2p5JBX+g0EP^NFP z>;_A^tvTY~L<1O~^(fxp{(YZ$mvxPOJ9{dtp@wC|Ti@gSY%D2YIrn5y2niwO4={qw z!hur$1r1HWhJXv67C%`CWox*%U!6<_2Ed6N3+_l{Z{T(6xvP(_J)m#16SwjQyAOFK zb}x|CBdfU~dO#*Gb@GjUFUp!fZslJO*dcS1{$=RMGor02tA%Np<=i=(i#!Nz_sye@OdOK7 z`Uul*mw99T8TsI^x9&$YGnd2zwEd=gQpd5l0iX7G-*5J_JMO5j1-x_j8!@>iB$3k}F8k=ts4ec9~A z#@)Jl{mkyWX)tHtShkapriuz@pmwxixBurw4Qz7axjSYD+HjB)L<+Ssc{$F1ZDl`H zbWegbi!8Z60sl!#w~8^)m&1#Jk0)g14paWsc{ldBaNGPFe9P&+PVmq5v#4;Z{tuLp zq~r5Qj10X$NH6Y0kdkJ$86uaiM|q^vcmr=O%1J`OmXi)5QrXzqPQ);0q4G2~ByY6+ zb3CesE~{8ZA?er%@}w$mkK3;Waza~Zbe>{JrfHaX)JbO|ITB+6oiT^fh$DMgf-1-) z!-P~_#PyK@4xU_52F`FP)T!=={3pV0b0^5Fwa!+WGRjDiAdsm8|Mf^b4YMWpnzhgP zCox^q3M2&8z;3^cXneJ&AR3yjW!E8-+u{0LZRh~9DG3b0Mmvh-qCi8!*nlOfTNqTw zVTYl|%NmXTtR1gb$Cox#Y#5PLlZOLq*pDTE-FNq*I_gG0&Qt z>0|<90xgo@5#yM>;$eyA1s>$!;Rx-oCvkkE+0TcNx?>Qssg`JJBIx>q%f*%xIn)k6 z*rI{8=8U)J7$8U&0%U+SV3QSW?;m}B@}0aw3L=YhS?7Q`;W_SpHHh@uFU@vvAioh> zn%#_K?bTV=^9ue4^PQpN#v5Dh@(Y72@?dp!ApqR&d}v3%0TACyik!~pFeqNXVrC20cvc;q0(2 zu$M2%6_&=SYF-DWSqUAMRt_d!I;)#6TAim3SvZ|$OcJbcjYw*bLQ8x9c~~w~G=BPo zF>QMH)*UNd1*}{J?Ux6nPjbwUA^w3zt?wuVe*45AnjIfQvUHPf{_>il8V3B>zcTdR zTeH6XmTooFmFI4#`YRK0@OFDMtNDpcjxjNZiz{}6TRV8o?H8lM87b2eo!|^<{wzM5 zjyHV$0l(X;6gT*xR6A@?mi@MDXwa?K9Imh?ZoFMV!hG4yi}63D2IY?1-mTvWpG6x$ z!VmAV!7@p+?T+;p5^^DU`sc}*V3v8{>7Z!Oq^>?0fZPmSY#geK^u0IW z3uERqiar4mHaObggDZDr&yYT-(Gv`0{>FJ+t^o6pbA4}kC{21OteMd`YvHG52Ob+u zjyQi&omecO@Fzqlxqe6@a=cq*xIu2$CeE_IG^ZU9USlV8&l$=sW;1X@thRAy*&4GG zGal!SxKUsL(Q-thArBP&P*EtM=(cZLmxF~PoOm!y;aW@H&10Mh`7f2qH5a>BLe3JD zR1wPmwivS7-Tf@4S=ETa3jPAJM(T|+~!}p52ZG$HkW~UUF}8#eu$*ffX(vKe;gCHsEFDx zg-t|^$WZ5dU)6oSoYwsZSslo-WJ8;Y_pUDOZ9YK5hI-1;ddwlS7zUMIyuD`|A;;Ma z+_#rKBIt|=?g$El79}ArY<3G%JS~_uduES7a(uhr5J$3v+U^BKY7}*Vgq+ljJrI`K z%VB(+4kj)xPXq}WPCa&wj<1WwqK}SBRvLh)b`NR$v(A<0W>fWi8G{59XAGVIPtrho zgmUyGYBbv1zUYSXb>aNQ(9e>ZX^q2G1TRR%9T+MErQHpT=#vYiWVa=_9^c54Ub6Mev)SP+%kItGh2Lt zzOdzlV?j#Hf9P*-57}>T=je^4&GGI`FC?&}IsAm#)x=Uq(K6>1VjHXfNhmdC>m~e0 z(Pn8F)ZQ=!tfj&S?Vdzh}VDGgXu`w+%#OX5c)=weLRViKH@B(wPq(}y@dXoCwd z=+PN7VCVRPyt#rB5?ESZnvA#ZO(~9`B$7Ft$kQcfb^Wn4kf{&)FNj_{M{GrC5(E;C zs%Xn3%3vc#!7ioo`mTjvj6LoYEh5|sC5V*h%x342MBTRrf1A{)M6`)V)x5JiQ zQf|Rdb|=ZwK47y$umXDaD=%Oau@{xXwl_7g2MECX0`6d*OB*m`POfx>>rv+CP)r^` zFJ;XbnfRpc2QWPdql5y0&D#A<(t`-4FeYLS3aYIcdH7<3go7ZMH*Eb>1|2ypB>G`qxwQE4yLKgWexph zpv1HrRl7V%J(5xe%a*Wn?nQC@{SgUBcuK!vF{5{0xB<~lepfrSx-4y}e~`Ut_h3c~ zI=Y@-n)7JzbvbI~AR1NC`wjGhIyU9dP|H-|T|7g@ZcHLJfpommwNHmZP6wBJPEe!s zZiF_y7%vIEREo3_!l*y52{quFP7*VyP&3*TP>+K2FbZ^IU($^751VK#Zn+}{sNMtV zw3n!!gwa3<&^-yu$+O#>JjfN~^lfwEh^Dt1IOkJF#5hTxVx7C3Hr}tGIuJUq;KNP- zhTClhzUs0Qe&XASa-sD{=HON7Ek&_XcOcls5F$|)qD0u|D0)OyNQ{MO&+>XB$Kwno z=yp1^9q6E_XGO`BhwH>%OInS;;Y|G2hWy*YZ0-~)w0Yh^^5iDO-ul3TC~l6ztI&_Q zUY0ADG*caCpb!l3_Q2AMfvUqrh+n_-ZGoPalibhVuH5g1KLYNEzCRUxR(q-%fa==G zqbKy+v$bLX+fY+T!PzV1|BjvIT}sAq7VOqaZ&gajoX-04$iB#NObl>F3;T;Xz03>|HjZ&1k+v+TnHYcPjX0(QXx!8)zj5-A)gQ%; zK8G2%yJx-ZIG`uehVn0*FF-yv)g?D^r4|RgOu$s1<{$xky}q~?w(X0Ir1l+-srQFf zXfTYy(EtOukTVe`amW#o8y>Hpy`~2-Ro@Bw8Qx3*D(sPsW1b{pO$SN)`3vD7ND^l? zbKon^hdk^K1IjWHneEwxEQ;pB#?s%WueI42-x`{9QPxDUzLme`fuYdlCJ6YK+0)?K zAKxWUuf&!b@-Pf^Lx zrpS?}@GchQ#!f7*l1gt;-6A15W5gjkpvm=CC9EgTMceXWYb(GqKN3#|{4bVI1)DgH=<oln+-NWeH3 zxwO+Nxqgzo&w~T(^&p$7P3%}2z(#Ruc0^L50q5|Z1kEGb8m%YfRhbB`=Gygc2Y=U&CM1shaV9!xm4*`r4>;0Ft~DO_)x`}?nhMG0dA-%d zD3}YerQ3u-A?%s$affeoO)Qwma>IHT3+LTPK`G5mzt7jWFxn z7kmHq9LY9(LTSFJChotmNK-&~)S{+;1i3XV=CPy*ou0`Ns>-QPr^Gu)V-r#m{iVwz zo;0t{G2tDX&6+{%7&{r~s+CPt63aLwNeDM^vcn#3@W45Y_L<2ye5WN$#t|bat;Vy- z2c@P!?rT}cj9Z6N;mZ|ns)VnW?}f>v^Pm~0>D*I+`e!uCC**zBeo<%XMV|B1hsN{V zBo{sJ(}U9AkZ>`lx*62J^>VP?6NRYP9`ZzVuOS8{IKw{BF`e%r79|jo&FO!xD7E4IL$t9P=$M%rbMV!rVShw47|A;#Inkj#!5i zpw6wNv&ja832ldB;0TmxbBNkh<^(BdkADHV29b#oF)5E6Mtrz$pK`zPex94HZ$tFA z!}k6_N;0K|{ka}C&)JSs*PD%$NE?y|PdoEH>emM<^s0AqXNCLIk#yk84rvCNV1ZG& zF4Xq?u6?^PXhSh1p-=(qhM3Q1fDE}^27Uej{+!|PYbA10-d7>ij0}3iao0JojrS+D zvAdk+@}DW=`+^zL%sf6@jbg)KZ=ff$7sn6Bsk05-N_*YViLL zsz6o0|8qhfCI`u5TTds>Ska5t7zY{-Jf$)R+tG34i&3OT2GHIWM?_x_Eid&0ISUMy z)96?V@kAV>tc>gbv=dkS;#Pd~_eXHWp5?f6yxl&ws`IVmxeP{fMU0btB(;K7iXt?A z7=1(6WBf=4ceZRpcExs#7m|oF+`i5>9N2L`ZrY#1UaVkqZ`5EH3D!^8nLKH(ySNS* zAV7c<27R1Kef*ir@xH5uJ(Hu*XSJ6G+{iET;2Xr8vG|04MM5GaXHK2c(t}?FU28o$ z&r@KkAO%-$a_2;lxf4H}{ZfJQ!ZiN+F5sKjC-A?&jAGZGJT|np;rx}oc*w>C+PXUs z?rcXk)`CP!8#-D-XyuHzR1RaPkip(`8tGyVkKVi<_YEGwfuV5>C39$x7E!Q|w3U%g z9YT9+E84;&Ck1bdXQ`FNVu9uO^&1Z12RGb>Z(sd;T=k1v@Wp$gxF@^~q5ghccxn&A zF}+TlrW8@scTIA9E|Dmbpe!4?8EvBnu=~CPxc$u6qYw_0oJ6s4Wd}+Fhw)2>`|IRd zpuL;*z0?X_={ef5YP(BgXeCavRJN-E1PE}r7A{%LlJP>hNCtZslcY zS-lx+`x02)5y!3_cj5cj+=1^6tN}Xv*^ZaeV9t!&Az2Cgr=3G-ZIYl^p?MOtqW}R; zD7^lWUD!EX#E9NcT#AtX(UNcVN5nj-vIYs^h{L2s5YK+5@CUCj{ZbFktqt%s(g;)8 zEhb#LU705M5DDR>-_GDOzboU8eH=h`jpKQ}A-whcwRpi9oA97z9av66vb?o$hWU#97}B=XL=$DPncJ)pUo_l>U;qL1UTXFst0yr*T{sWhou84 z(*$Q#Q3(e|NldFCP9bSz0~6g{!S03*T?IgrNabKaUa$p-jSZAX&z>$yNA^->$>@f7*>T zZ~6|t{_Fc}AZ;(@u&h0fR@O^_od#%5*LxKQpIv8H%iPBhRVr_C7bDwvoQL5ky-OF{LL?7c+zKg;qhNMfH!=77ryzs zL)dpPjgMY?2p_p)1#a)Th;_s~mUES|Tq^rkk7fWr`q_*ysD%9rUVT{MSF_>711F?13 z6I+YH__DE(L<*Q$-}Z%ttGFfpkxQ#BC51u%IvXIjGOL2mbs=-PlW1@jS#fTi z9m`o;Qms9}sgI?TiC_6WzQFw0ISS^7QdSx3>_emCSxi_P8wYm%zS0)roxp|%u}QE# zmLgP!wZgVu&SvrZ>>0SB<>53tj@pj;kod&Vear{zLj6n=2=a{(mYuGi(HzuaR-6L7 z_)|c7^0yNL1UTWKfo*^t=NoUP;vzv=wgq_32P%W+V!)eWv~w1k;9xqRKR&Fn**v3d&J68jb{69d> z_iLKR1Ik)5(Nzh*yd zF+xJMrd1IABB~IU<`dzFRmh5FXGXwC1at;P_92R$N0HFK-g*$+TSFoZW!mXCXtb(i zB*>e!=_6x0yC8RQ3GZXPwlWR6*Y{gQc67i|ag}JN<#-c?Dbc;cqniK$PDa=na<+eU z1NBjLW3zD3WJxBCL`45MoKPJfkit{tP_z%N*BJGa_qhflJN+KFRVc+2CM7_C6BbTE zc`FlBtu%;eggEG%J1Q;_5|mYPO2N8B z^9VZ4+(V>7ge0emk#Y>9hl=dXHEnq0)@69|S<7+hIm>EfIUapVKh9g%hBdu0PSU7A zt98n-0-_S&goFr(L}xVA&Uw-Ac8IXJtsDOq3A;swaPTT6=%gMRnL8*9H$hXFT8ftV z-x$*UgovEz!o-xA)|gLp=-R&7qH`@25gCc>0%f}hP?@XkkT?cdcvyed4f{-9@%!VlKaHFBrE%-tG_9$`wO?*JvSAU;`6ZcQI{Pzx%G+pzmZz34kY`T=vIU!w&zb2p(XBmBKfyca&x*_Qq2AEf9J8)EQ z@qCmzv)g-%=VdJa%!Mw zu?@d@?Kb@2&sXE^kL|^C&Thj6>ta~ZF%>xxLg;P{8TyK^5tuA`(JOzC1>^^s(o$|6;r4I0vyk9 zZCD@5qZSi+5TDR>I;e};E)m1fwrGeXC#1J+d=e%x(E(SjKH8f&&YTjH(4YE~e(%Q) z;(DU6MS7}4!!L@w4rFdyQ(pK{rYFp2`!Tlw3k$0ZPXa6&+%PDTa-6;~eSAR*N-G$- z61J{t#lJjt4SxNa4S3PHzUAsBpl*}a8Iu{{wB<2e@v^n}((~8h(IhRlucz}aK_{F! z`~yyaMS{vcP7%w{3QCh-%ak{1x(V7&4m8>RXt zkQ4Sf{f3ag{W!5VifCtV73rDju_Q4piz~pwLG3~19t??#4kP;&32I|LAtfX}kSXFX zFI<6Ny?Pz~?lC>~$%Lt}V>plhx^@JAarq#g@`ZzV%%>0G5ueiESvRg!G zsl>?)AWb(x+s%;eH-d$$_MlG9H0jLD1W}u5qm|l^UudR}yy*i~{&ZQ>3fkA=fb|t% zNg+5SJ6{lKD3sAjLhzAGm*d6fd7tTSfIsce;$y!X#y4*p!-2tKWjjdgT=q$ALXZ06 z$cW9rI9O_RCQ-tR&g;izjN_pj66kN8poy#a!@dmu{OgDDr@iCsiwegA4KNk#kmerX zr|+#S?{{wip73`-mSq@V{$b_sKP0O*%YogRZ<>R=cUEL7$gRensyo;A8P04V?~S0Y zXA^)LG~3mRBu?F{fyW$&pISd&VTWW70M~q$eLN0yt_lvxE+p)bEcwKapR%87oKz>O zjA8XhvH-^hk%w#vYnCPOg=ep6OioBH{`aO7Uhw4uc*w_h;=g}>2nU9;tR#|>1Qk^a z!_jB8CHnNX_Ql<^eTJKE5_HS>zI5FoJoVE%ap5O-<3D~qgu~-UwPcFC^267S;Nc(J zi9hWg3CPKez_QZ$ApL+_>oS&occp#Z|yB)72q|5^WK2AesrBSBbg~ zyP%0QsOw7VS8lt;i9G14Hq(q)1OWn^j8JFN5AjGUohl$Ga}6n(TnVRb=)fQUVjG@* z24{G6aOHhDJob}&@uDy7#8+=Pg0y~=t&OC^e({r)W3L7~&DQ|Vod!_t8->caW!E^~ z{G9`M@W*!HT~`j_`h6KZ;q&|OhHvddF2guPZUS;LGic1nb3n|KJciYI0xS;HZdDoD zo}swMrr>wz*hQ0YUZpLy661)8#04dCqM4xH{?WFM2`zLkMcX(!lxx4=k7>~VH*`T_sv$p_~!7|k^-DXBeJjZ}^ibiu#R{>@Y zYp1&UL{-r=XH@%d_pUR9ID?3Y;!|JpCqmC=rf|(cMf3@K^OWFYjKX_u%i0Q#3#=B- ze}F}SsxiRAL*;IZC+as^{pW;`hO_9Y0UDxMMo(7)|Nev(SY2mV=k9?5p7fc6`2HUU zsH0d3nvIE6%=Lh$@I*%999TnSqH)Gm`x>(&C3(6jQCZrLqy@dRE;RV)XZDNiL8YV1 zj{z16EPt&=*jq6i+@0urikhs(`spB@XS<%WY~$=E70AEpU*tnX!-;$LAZL!RxW48@ z?a8))Xjhx3YQAV6VBw)UlLW=T@NjBX=Px}82+CYRukRKk`0k4~;9(mzOPYuu-JQbY zKfMQ6-+82RHg7(NNi7t<#ZeQFDN0^*VVt_E8((?JCOqS;{>rLapcp4ZWm3@Bd3l}h zItx$-EOV`5*^dBn@OBd62+zy31VvR=B`CAR1ahMQ6>+V2kTXX@^f190JHHP0+7=M? zgou|ugYVCm%mOSNT(zoxRP@29xOh<4Qhj*+HK>ZYfPJYogbzPw6&|%kGpULA=pT}J z@+Wp+=iwwLS*(G@9ON{}D!n8luYS~W{Q7n4@%%Fr_?IViV|5>UXz&%w`p~kYz5pB) z&jN!5ZbVzZPgAGgG}Dz-XL6?j=vZKNPhw%;%b2Pm(9V9B$0JboNq(kZKQd_P;mcL^mC-QIo+`CQ%S({dsClMJ)zIuJV ztnDEup8Eg`2W@eOSyxeSn=R0RO9BBwIaZX)=<9C7J09JSR;`ZsaA3HISA1t528MHN z_!I3G6zXjHm1E8hEme#|Qp^sjKH3r6EQbILcztSRoD{=%9ouln^1w1QLm5JqPC6#Ob->KD>B`C5)hPQ1sm#R59q{$ z*Lh13K0NYM2XOn&bcLKO*2;-G5c^$wTNEFB)&~6S_I(v(57~p0cWgk$L3|6Nl!;oWUtr21JsAwv5D?| z;!w}b;0$%}Yla_Y^M_S-WTJt}lv_t)s{ZQqdD%%3JF!3hh^7GB$QHJx3s38;v=x>| zOFW84ZR==EQZ!KJ=BQmUzBqN+!?v`eEx~d)k#vM@w^4^r^|C;{KCU|UyQiB|SG3?+ z=k+uuDXP2a^ufspHB)g!6`SrU0YNzysDtY4$&;6P21oI)R}bOdUBi`+t<4oVY1DBV zLGDSQ&fL&}pS)}n{_0`V|NhT|)?~e9>wRMw-#IbHHoQM9sgk7^a^;K1cijpK8jhdPU`gW z%{sTIvuVEa>S>K&OCKkJDj$`bD^FcXPTqCtDxA8KaV_M^*OCXz#`+68h~7L^KcY+| zC~^~^Iap&0;f+sRH)+`Vh~u>vkQi!9NOh~acCUu(m#F1l{$->#rM7W0L2vBXIUp)_o9R+Y zA}!v%t}?eD?sK9yX6UBOwyff^GV?_Dwc@wakN?>>O9VdK+cmuPs>C4Yen_cSAxkP- z3%3DmOIRYsESVk!wvAuyOyk>swiZYgk!PD2apXj8#s%r=iidA#!xOi6SK5xu_}}c+ z#?+={rrE06nz`{BrfYjLLu?N;^q0BrStqZ4NbgaCH&y#M=^*CLKBJ#|FcM$sauukY^c0j= zb6}&~u(}m*dDz6Su@z|k{%ek4aB!T;(d*k;ldI;pl>xo9lab(SZFOG51g^;V`z4MK#EL+#tHkOy-7o{C464>Dz9JUt}KyX zqL87Gz3V$AF?FB@eN3c8(b}%5>x&9Q7V@Wfc@fvq`ID;9omP9QBU^Lz*+x?Hq3e{qn1D;5O`tZA+ydER(JRP^P4c*0dvUzO>Ui;8qTy|~(|M|Ri*s`h}KYP_C zw!1C(=AUmfKSTd~I&Ne;Q(GJVm(!VCPP!hk9Dn%BO*r(9Q}Cb9-e?5+voF|){qHyx zKYiIoEN_chyFQ_y?5Nu8*QZq{jp6U(Ke=}dm%nNwuK7QktS=|n7GHniGFF|E~*bor8m0D zv0vp3FfF7I*sw0y)`@l9l_GRFFj~S7?iM-W!%SCCOwlmlWXSfFKlL1)8QF;6zIGF? z`-_eE<*QfWy4P;R)l@Ryd&x#T?}1d%C2B@nNv2~i@83LN%e_Coa~$XV z{T=wpT{&F1u?63I=|(*3%Lj1YJMO?~AGi-cdD%Mr<#!Ka-!SmlcifIMSF|8fj^oU? z-iq+w-HvxYZY3VNsSA(U5X0j?yC2W}z`g9l6WiU1j1UP#OLqqn-MvV3QTlrkqqLBu zMElnux}4W#D-r5l3G}W2I+p`ooH(?1Q|IxTpwerhh|Fju#J)Sie&ZMWV44%(v&f5H zF?apTFH)Q~L#AjJZAzAYje+PYGY{2U-AF`WBpRV~mHXzfvOS8Ie{(Nh@_=q^=}RC* zlCo-jJKplhPISNZ4xIV6+pu%6fTx|_&HjG~|MlB6{_1nP@X@EOB$+AU*Y~IKtkVs#@iJ2Lpk$FIZ(zqk{BI*`Th_hj(Avs@8QQOCVaO+{b;d@7L+o3FW4Ce9PC#=T7u>y{yipa7}BuHc) z{fYZ=&WG>CQ_g6|`>!~R+YaY&@uzm-j@|mP%M-37j~yx!PmXH2DmiIfIRQMdh+>H_ zF51dLyar#oIf>yxHoR$A_#~)PGoR@kC0jz8C73RUIg1S=9Sw8B)ruHNNR(tG(L?F&LulDD5|&j!pM<1kSwGOT zjKXVo56KIOeLG1+3q@NwA|xR#BZ@4jOj+)>@}l-HGY8qpj|hlJg?giiJjJ$}+;$Sp zR481UZp7w zOv?ZKc0b<3S< zdN@_a&b=9=IGAb=x{ZXRQ(BEZO@l>GYZ(82%>aJ;>a}?E8J)Q0U1#H8e|Z>(NJKPF zKH{N$xcOijFFdCOk3GK|AO7=A*v-L4_4wpdI`Myhybs&@+Oc_kr?tbA0wf9L4BKaR zoC9!%*EGsmmPxjZd|Kp%T+oxOj(xD`3)-sD>{NZRmF>8z9f__^wDhk;>+0OWT z@|6g$kgP&@C1o|Ge-#Oihz!e@?$PP3z{Dxq>e1G!^&4JeBqUM+jKVaj3G2i!T3Hd< zsXEdUwulKqEBn13rB(M$pd}WfRPy$oUmd}#FKDxN^@qFD7$CX$+h=dYB@gVz6HjZy zzy4wr!?`@3a#|EyR>tx9KOVw6E?R@LS0!-HDh|YKpFOQny!-*Zc+>-W@bRbi;5)aE zU~7K@g?t*9Z0*GQ?l|r}lEbr4@5Y-hU5Qsds0R;T+j3%ZV-ZVZ4U+m9^!M?6u4JTR zbw>>6uW8|U&_Xg;As`|o;vn6ej6_N1B&w$vuLEOYyyhXjXlZ8~I$8Q~Q(&Jid*UI2 zw&m~i?kja-GX`})UaZ4WJR|6H)9viM=RBPnK&Q`7QgFud;PowdJsX+MRyq9ao-DpV zB2eLZDzGM?o}Lfkv~`{M=_}TtmkfJ0c+A!o97+Sfzdu!}Ge?kgWwl*(UkbNtCNDc< z@4k3gzdh{eRVZQuZdq^0gc-EO+Hn_ZxgyyE59IWkagA*KTcey06 z?@yJst3s6?(l;y06m7w9kU)uzSR(x;rLXfO(sR;Xy3(o6-s$Xw&TPmyOyUsIDolje zM1m4WD4syLwF{9p_J!7Vlwu?)tt1s3$Pr`5Zl&ngh}H46*CE29{-I|b53!An=aEV0al@gEtrLY3(7;D@h)O^)lf5Z2$s`w#uwuQ4eE4rF#=x>t}t>BOQvUtG1-^cuT z?c!vFI?Lcr;Cp{pQCxkSfTz8iZD8VxlffM-76EkdoB8jx0-!2UvAXs`+e5l=IP2RyoO{5m=r9 zJg{*+W}_{WR56??;QGB}a%z+_K`D&CeQf_RlM_L@<+ra{&l~NB*HoD5wqE^OV*u_O z{apz4tpK`L0-fEJt)sRM)+Z%OiBQ6xNLed;jo@!Xg4%*3uv)cqZN{|` zwI#J1HyHZc9o<}YZ_-xj&`NvfM_1>@g{?UKW+&pn+Dw*e%U`ILsb}ZKB4 zB+KU%%`8JFZxB#FtUa>(WK6vjk?lOvJWA<1lkfk(>FZ(fDt9h3w@tt9##QN&1M zV(lG>b+#ea-Hlj}u5BbPlrBzs+Id~5!|AON{Ml!B;Scwdgw+nZCmUGR6UMlODE|Nz za55cn(h15@ZufwTwuRd!l zBn-&De?rlj1d*1q0%rnT*djSHVt+w_LV{v$Gx9@sI;4@UxG7}wlr;HI86|~p!IUW> z6e3Yd7=>5|3i>cuTRS4{U1;g*L0nr5wi>hmAW1pt$%zB2tttT)6xPMre=2i;QKXZ@ zNT-wR#j=q!i(s&#vJ0VYB0s@Enu574ow4I=qMa_{{H9xZu6_;B&t@i0|Dn zfG2+V9z6YXdoaxS8ev0!6r1}v8*7%JNI~=ej?u~F=M?wJ<^UDwP^P`j!I|!y2oNkQNP%JLbkG74poFd|qqM5c% zL|PbxZ8_zNDATMg-ebb&VwzDY{UkEQ95M_$r!UOf_gSKoMc;6lAZ(9KNj<+3#nY_N z{d7_{?s_7(4WwSUlcZkyjzt)zwF^RZs{`?~if5*2^t+z}saKvR)0DZ|!33e1dj(zx z&hdM*>>Qvj|1ruvp)I2G8l@W{Lxdr=L+6`Z4!U|-QB!Xsk(xk z1|xYSKX?w>Sa0=k$3Ov(`S?y8($RK2P`ZSRKDh@s?i!Rz z=P|!u?_NYjew%5sA{UB7ex*Paj>Rj>8Yp;kN6VZ)RisYl6%&L1-Z`}!y0bSYc(1pXlr$BAj2$d3GIa1+>Q=$Ha*}~aWi>rM$gMwI z7kxEtdQf>1B8hc^m;e`+uGRQ`ux&r~=iz<4(t+x>XDjbX995V8GMN@ijBBUV+jY;G zFifSz4qmgas|l=ut7~0V-nuHd2F|PYewcq(FM1GL_Mk_rF5YPMP+8}_hL|#mM1ua> zTB7J;_s|%%jPn*9vq`bc?>Lmkkx`L+TC(gyxlug)>~#n;oZEH}U`#8Qp;i{15*4>E ztXJYvS$l2X&Rg+WeNg%|$@2HNA34D)5)@T{3c#N^S{l^a&71~B2Dt1L5|sZA2uck> z`41A5H_w=$aK`lEbFI?r;mbEB@xrfoVfq_-zKB!ScH+)AZuAT$Vw42tNuNJ}-`veQ zYW5Xj5|kHTupD1_UO-SLz)w(Gx>yzLD04X4H|%|P2!Z(lvSXx`KzX%Hz5*3y~6859`yEx-TK@K_A0V>Z((S_(!DC3 zkUM|YbuTmX&p+;22@)A%SoWx(cq0x|jn}17S9`0-Jy$L^4#-#m$jp+U2N^0Lkpf;d zTh=%yE2|@lpte#?k09db<$jr>3wu(*9EG{9xk{8?KV14O zAC=pqhJ?LEBq4OjTV>@BgH~}8u{iroEYXT~Hon1@vicRP!xGf~C> z3CfS|PvNHBDP-~;2xrrXjO@Z|pYuR;vaNjg#+}$x>_morw^(XHR@DDa!b&tk{w@Os_?>?Y*){5fZ3uh!S>Li6V3J7FB{nEPJhdv4AXDw$Ww$L zV3x2ggSimaPgz?O65ZEvBZVSG=f3gLP~^WR40~<)Sj3xQ>%KZtOd)b>uK`aZQvUYV z3`P3H%&Ej`-DrEn(!l}4^bTjVCbf-P&z|T~=AfkkR3dLm-c-<_XF`YaFUX&hNuVPU zCmY1n(O7>WiPA$T)u9_3t!#aR)1GfCG1-H5Gl5J-@8#}i$M$GZ`4p|pCUukrSGBh=Ro zbW{2{BI!r%x=GBtcyB))&_TsSvrdN9PSIy-wc;SLttrOCOXZs|tkVed5YJo6nhdlst~TDc@?Ia?Yh}DGv~S^Hm*608*B*vLaqi8Y;p!Um z!gEr6roDc(IN`r4O*$-0QTp^oiSlGy5T58O!T#`^XvI)hy`i8tdNkvd=()PJK{2-q zgKn&RboIiPxrTqiX{6YP0(~NPX2-BBy)ImqjlPVVplFLU!un&mg!vrq=tNZK zomj73eO>5X-ifaM4kUWJ5Ne4aLjt0+;3MND>^+>uo&MFeek|{4!}4WaY)%OsvqHGDh)`UFrNAruj^+e9 zFBxW=S0A$TWt3v&8p3jK1%-7|7wR)=T)Gk4Tdpmhj|3|ywOc&DN#d`+H^UW_(LDCQ z=Nzo+^qy-lk}2acpV*0;bjsen?k6Qy3gc@p+l1$yq1v5{K{lkv{?8uVvS*A9!SgpA zvPHb`ATVze+pApr8=q?j&5CWx}P=Z z*_5mII4$Vj7&ptTSyc0+gfcFFf_1BbBFlEX>pG@`%2tVy0@h%mekLyyAWsU^TS;=k z`O8lCb@QZxreat6{r+mJ#@Pw7v#?#f@?QhLdzX%SX>jgj?(DPzYK|%XaLkR&nE;nQ z^Fv2^cK*em{OMO1(g~_p^X>~*?wnueUy!|PgQ{9>t7uDr7Ezj;cm63ANRFhRY<8sj zk%j)~S?*OfE;4~}yR?W53vw9mPTJ&A?@p zP#I`u?{v059>H@~F{g!li_Af{a&KiR1HWgbix;IskiFafGk0odYSV;^N8!2P{Xtm* zEU}e~;QZ)n>1TMVAKgoDIsdZPJ@Xm0x7sSt;>Pl2a{`fbP6o8a6A2Y)7P4-(GNKif z5H`1@aN6>2tZ0uzBmXrAa`^4eaU`?tJts&=6zY5`+@sdZ>%^4%dp@1ly&%r2Io(N zy9SCRD7&zKn2b~nq#2|Oc>Uwo;X_aA^$aTbho24LAAb-KlXLRxZkKk%FX;eA^reEV`M35X_4QpgjUxZ+nwk?3BQ92jfUHHp{=&b|60 z@Aar=->3_@AQhEurOKg4j2gl3M`^DIzjwKF1{2)VtgK8>65?o~*|zNDzg{=@hhym>d&d*11V9hknxP-*V8OYOdvoI;Ly9i8;-@&=-WDN$ z!i2h~omQ!|x+Q|pYbXe_NhuCuc5x6{^0kqBdr~ z8ALOAR~lU~&aqgdedN!xuri{5^D8r#K|ygVT$y`RfaR~Q#pxLOA_a6M3OI%7KYdw; zeSvtGu70^Mh3oH6A(`t$B%d~d@~Wpl0G-7QuDt6o2I6hxJ0vLVrLoE;Nl}wfUi^7GSwR+jI5n{#mbZlvYnBW+P*HsD z4^t0x=d4NK$UmQsk3D|_{_)b)xa;j_PDxILTMp*2e~5~qS)!!I&&IpHb8`CcI>J^n z!)%?<(3XRiAl>Vzb0+M(CxYmF&YTO|ApckNINP+er`~*#QdKuJa|g9~8AvPZs*y>{ z_I#F=>k@@DROV?urvmsUSi-r7=Axb~_MCplVf*FohR z@AYYR31`jaToUO_3Mo#s^sC4z=0D9ybJUNCwld;vCB$3X(b`67??7vJ8``ur(A$P^ zR|~?_H=!1a2$RRPOti{i`C`J#tP9)XlRl%wC~?+(JM9@h+Ucg9W*tnMCQA`Case4BWcu`)yS6nnXxnxWBedi4Q_yHE{-qHSWOSHxvPKVVoj-SI!=P)e`wv^#Ck z^p${fPcBBC7lS`v~3$KM#aMI5ayltc_Id~RurAwg1+;Gn5- zI>Z4vl&AlE7NH_1cEvG-IUvVb#_9VuvRbZ=MpG7EF9OBk=fQe-RaFAeE`rt z7RYCvJJDGZ5hI>mrZt6KNQuEh=>bYqLmiyl~^8V zZz6{b+w?vYZgs?4SN{gtInYu|7c5h&cRkyc=}W|{IWzot9*CsTEX~4?LkWv1Z2*n)X=KWdx@|MGFV>75Q zD!#6^D7Gw9FFuOlObNFgVn+z-KEP6f+M{Vg4FbH_;7QQ{EIu#^awG?)O=VEgrp}*4 z_f8Cogo@h+bNZ3FKd!1f53;i`<(3YNq&V@#+X%9DPU?j(OQl6yGIo_29V$*cOv`xe z9070Tw^juCQP_g+W$vEM9SyazQsRuLDjYZqo@nbKq?t6OC}Cvs=dvhK{1U;w#+&0n zmS=HD3Mi8F6nHJBN@K2sU;^u%V6DwlG$c1gz%$>W&ty>WFf37plA_+fw2TKf?ht!|{Kd zI(&%bMsh+z5{-@{LP8L=?Wj?Nb+{LF$MzK=8HzBSky3$tAcsYqiy}-b+Ak@{0md*~ebdZD?5z%S|b*vrM6%%3MMHrW@5;AVBf~eitPb>Ju z&evFl)4fkjFRQSbL90-aE{3fwt0J!@KC4c}dWs?(G}BRmO5@>$_qNi)z>E;l-d2%Z z2dfYb?;C^Fk1SiY=S$4CDqrqs!Apq$NLA@Bf-J`rojI}Qp{gy1QMR-Y%#x)k6enSc z(0zrtZ6KL1V1(^NVp$9@Ly(~S_I_3LQE03Dq3hHTT<>fGV!E*~zIwwTzIY=W z=rLkHdCtY3IzT<5*5WmW>7ZE|ThaFJR&48?*c^6_GH+*^tF~r}p7NXLaBKXD`D!+xxI>Qx`U@ZAVvk zoRho+;v^~&tSnAI3EtoMxD#?^-fZ5xK7-;WaUV4e-8uO;3^&t}H5)z)gb6^l9hz;#p^^u^+|1T{DK??P5o=1AsFK??i$Ww0^n!F8$Ie zJ5y^9aO%Zu|C+T1n0KiBvm^++Zsep(Gd!9(WoN`$3eJNboqa{eRz$kX;2dzIvsDP* zo0#QM$bHpJHxj2g3G+)w&Ps6z)p!VJXZHN#W{)zE|7rsLo;)~z66egp1>+nj{Vsf6 z6}D!@HoKJ*rdej1h$zh#o#$3(7<4{Cb{ZfoF6B{X)I&6$kT-g%KI>j^>6=Qb{&b^& zB-D{+uefOL!qGMWpWW_3k?Bfnxt|89ToFlmwMNjv^2{=gw-05pKUrk`#1R(x$|mvfGgkAy zfE`Cj%EGOzTGeeCIjyGHEADDrieLSh&uRwMhQ%~#t4!sj*}hhomN}29D%cuXlTcfX zhj7U@vFVBU`b`5&o0Pd{5Fo%(fZC(Fn5|Z74}agwq8 zNL|XG$f+F3%)2NaS=EbA_U49vY<*k~CB85kq3V|+=gzAi&W%KqNX27uQEb&ieVC$W zmoF1@MDCQS(;r7@J*i!!{{SP0#m2yX0&;-PEX@aQc)c-ZO=Y)KTcx}}I-#@9-cQ5Z~N z_wE7Qcke;$xMvscx_>|J-!qDxhXyf_%99`!tq3F05Td+^8Ie$XRA$viXsLYoNrj$O zCJy!km>fssMS=+H>F6kZ%=qm%*xzR1S!#Ko0eZ6Id{g4wt7DS z&QO7>4R~=XJjErElX`y5OztS=#{PI>iJ~+>t(A+%T^)4q#KA^UFL6@-em6>sZfw;> zx4bvugITeBG&KhdvQ+ulAbfiXVf@M^LyF=@I{cC^#~u)d4GSx|25>sHIm~ zFLs!haoaY9B#r{xM1iAcf$^p}CS~$vq_Rbf7eW{(8A+1O3}q4+CJ7o!6>%tCz(AIy zC6~dzWDa{XCG4W^92_ZNe2DqWN6?apShkO3!npU~e&{90Jk!^j=s|a98&>x8W7CR$ zY+KfjQ&)CjU4J{)cO|f*EryP05s4_nh=!1oNG@D`5Mnv_kG1X~s z^z7oW5eB0{YnXN&NhdkxDz6X}Bj6)Ui?|D7TZKXlYUe<+OmHEEtTS z=tFJSvn^`S^4g*v zYR2q`deptH=APoE_^+^dnbOkGSGynGOwL% zZz6Mw!V&ysD+ijOsxIWtM1zT!R<~6ocr)h8@BVoA?stf^%&+jA(8#1}CVQ5@ZD-Je zUd`U6$+@+>%B_ec4Z=|-HHs1k%RD7VB9krV?X~A*AwmL^$FLo`EMp{F##p9^!DOD~ zC6DBI7W+ptNVJBrtRqH!Tf`ssjN)KEhW)t`_NBrYpx<$J_i6s$peRZ#O9d z=F2kZ6P+Vc{n=#ED?^nBWaSjGKzYuN~>^%Bp!U$YNRt+>>W&DEZj!kT1MJdMMN~&2CQ!?U>j5@ipy&o zRj7^1zLH4Bdb(USh6XX!hTap`?>8*pc9MUn%|o$_7zxUqZ`z8@eJaqS_=lg3;UBNq zQ>pY>4es=(N|*N-S-HrERb~Zt;9WmGuUU&;hnr0ts#kWv2XE`c@BU(qXIMdsabNVw z{kZO4k{^rvB!>1ykL(04*Oz2D6X@RrJoDW^hJ$8+`G;ow`cT_7ALX=^lcR~+)z>Y& z8@*B*(&0f)k^Kh;g{oU0Y|QpssJ)X2sed%W1TJ6ePU)kW4v;!KB|*kDNk8h9H?o`1 z)nuvk`#o`FFi`@ko+sQ^;l=<#dC}^s9Y*vVJG+UhtAa`4(LnC~tHOGfm?o(mBbE%7Y1UWmh}iS$gEAHf}zX7(`1sa;XtKd|f*( z-r9}d-=D#iJI7ICUk^n~_AL(`hlq0wY+>1#>0U|EaWtK4iI5nzMZzQ>9Li}%o>O_V zn8CMD+^&^Wb)IFGqi#)-DCt)oq{mYnQgekOa+v}~vuTS@{8uT?v8=;%qb!%K+-YjR zOXUiIf!o)W1^IA`1}bZ{fBB*4tsb{Rqx9(NVC{jC=qCwmg@un*`w+T92`rC?u_m6x znSF7bLZ-DVAHuh9AHjYywrny>uPo%uVf@t#&gWci4Ac^+%FKTMg6e z=@y?#P=%y8G|_XFr}R&3^UZDX*dWM2#Psy3?_dSRDzlW% z{l7eDO@7wlpC}MH*A~wm-XU47pqw78pez_v{@UW%{Rfu6+M=|YuTARK#Jf?yvDv+# z87Xy^8{MjIJrQgG^BbzwYgXyaEbTy{1_t&yxswwGDQ6N(lM_J-n6Ni#6bAjfl?e4& z=S--2l|98)RXj1&^ zK+8v%)>-sN^EhpFH}2dwg1spYn`}n~+xiQUl+c~Fk;p1Cyid_jvJkc{_9N*m4yN)r zFq*=yp%nIwrLcc2hdrZtnip_58^Tbsh+&eGJlnG7JBhY1+S?-N?+9aUZwTvpBiP&< z$A%Sc*i2cwEQRJ2+UMo@|H@w;k6x~_btBv#7+A4LNoehd2!FwG(?qD15Wce*ml+fQA$1n-i z9sBY~X3A89agwMEB83zla_$=BQ)S#eTt+(7!rIk==L9*4!e=xryEvmSasr@|700dA z2NNN&*Py*Rv~*Q|3we6D#t~p55)pj=_lI!*kV^U}){$lY{o}eTg{{UtTR3H9WTi%` zN^BMoi!GIK**V>K)aHqA?x=PA_iqQuKc$>KqW}RG6Y4_N#nd3Fj4KaQK<@l91t#e> zzrV@=Rhi|97%*O?MMh3@PDqO1uN>&=24g~Q8ztR&Q+gzpXZo`PwX$$HL2Enkz}4+IcV!#SSsB9_D`MEvQ^Km&Jo>^J^pddXlk+W}#92nsd>#?|#tI8b zKRzi^V=GH6Kihg?x!9XulFFmLWs(l(kc;G)w-E9qfckDlk^K zw|?%Rf{1+tw~BC_VbLzEuMO*&!lYD1ZgrKpp~T0g4#_fRQNLgXWg=8Atc<&dOL*aV z9Wtnx6X&jO!FVx>Ywt+HJ~J%0O9D(wp@hEfc6{aetI*qCZ4HJm{xOaB{_Ietv4{wr z>WykN?k1B&jW%N-4tQi^rq{A$FL;?^@AJ7f8k zv93zeq;TZWb6_9Ps@$5fq#k5$?s#LbX-XKs4XUzKT3i5fsPKiFJgN-jL@=lPqruwF zG02aN;1q=|dwOu`leG)hg)tjgxHaO!u7*!XMjB{PD}p{8=f0Y1{#g#ngMEgdSF3AY zb(mIpRGdyMPrR|Xc`rBiQ9D%>@8w2*Ij(iZ(>Q%yAMV&YhC>BT+U!GWawpFki4zt7 zLbYsV&+=0`#9$&KHen9t5r(P{kkNg-okead;$yv1ACDY#vE_>xq#uiYV((KP27N8byC=3@dt~ln7S$MX{NZ9#8W3px^%c-X!l7b7_+7cxwKoaGt~_$`Ff4i!&(k zMh=-_m79H8m)D5Oo@Uy|GLodL(xGzIbF**p*sPs_1_Wg?ST=Vb$>G!$9XOk8){n<; zZ^g}n1vdIrr3@FFq*!C(m7Qq!+qPp(w|d%9WY{(y_@R54PBxrbZB3nk2nfpJ!V#4F zNl-MKwSFWE4H^|CR)x%^V5Q%xkm1CBISJl4V~~Hr`YQW@#p43iUcMgrY%8Odkjh2L z@E#|^JW$wPq@?w%M+L1eR?m;~;p-u;+QD0r2-}XJ z*h+`|dtP)ETrg(t8QNPj49CnUB7quwV-ajy)sB1i7jRglz_vnE=gJt{ovzmQG{~y& zGhMb##9IYsXPRW?O?Ff>m4l-bhm`Dyf=i^oP2Jij^EN1 z!**>U^(U}xSpr*oquAI%Qqx|-iqSUtNnbE>Ne|G0GMs<>Pn6SCqF6ld;vnE+>It0@#)ad7v{ldY~W0F}AL>$z9H z6sE3D1S2>arD!0+W@iaxUa_vaQyA`APn;iJCkQPig3@R1X<^$gN~6pvax1udU6o!x zykLxT2+p0tE9cSOTEr=B^9GFDiJ|XB98t@1S?q2J#qc?KpcmXCEU6%g`$0(R^^mIyflIf z&f9>|u`CV^Wszmtpuaz27rDiZfTl@wFGP#Htl!{23OcDWwI5;?&+_xfTEM)RlPgd9~+G zfFInE!KeRlgn6Mmkj5iU;RjS0|J7 zoDBWp$b*Dt&V4mbpG<%p%CAO0`Qx+oOFk-{3VwQRTya;09yGh>VCKgJH+7(-IH{&v z5AvuqYVxUc%IxT6fQU!SOn)j)eLsVNSKW9b zYh4w8E#yw-{m(Q?!w9$8LEhnL8wN;d_7?Nlqg9t=3U`mEaL4dC zZaXrD8;&IL$AKJfIg-ZBN3yv4PzLuN&fqZbkBk80BV`oGVA@EI+DTB?kc4b$kKx>| z2+myAiU+P}$C)cTaLVfCSk={mHfA-WpC(XY*~>Gkha#(mWyGvTdEXi?qq~qsqL4ug zMXy$Ovff(grHxrkXiJEMC!+jnTq-bsb_PlJ6rCNi^3mUB&!DKlwIma)piG9!hm~{t z-Ib-SOSY*29)*6i>h%xl#Vtc++_{$(st&PGBtRXS{W+S5;t#Lih)YkKm^R`1JsCXZ z^ZSt2=BWCDb;l?jULZ&mjd1z553 zZXNV&1C@7g(2ZZDL^V*-p=~kvtemx=Fsg8tUK(umL4N7Txp&s`Co_$WE*;K|fe)sa zm1kLcaPFw*t67{1a___r^-CClzF%PG5d&JPpph~N>?O={%{_NaL!WL#XN;cTv{V7NQAORu|wf7L)6-YMS&dc#AGfU?`;uYYvWE&+`;yhAYWp*Huvvz#6tdm3 zH+JAVFW!g;u2bWlh;g?2M}BlK21iJoG#Q)gv>fjU2+HE3mY|qfp)nL97e zo33h)^%CfJEOI1{xJ-IP=vhWd&&%G1*ljy++3*ES95gRKc3DanV zw~~%BMc+>;llYV!VO{CR{?b|n;WbOiv0r2;uv=@trw!{!`i(*B46kR&3+n(Tk9Q}M= z)fy*pNuZY#=Khu_I+^TFot-IX(ap(2qNuH)655!e2+Lnp9bm4&#!$%R@uu$|z|Zbh z1y01Wwh+Gf{AGCmv)5tWiY}66HY6=)IYKcPP*@61uLrmFGKJ{G1%uNh{YzEsh{6)U;dAR#|?K++p<>a~5j zmy=p38iPMx7tTx||2{u@bU{k|&kZ354Nx!b&A`Q3^)CZGXi_TCy%(=;Cy6}kb#Uk2 z6TPvKXE{l%ykt%fjq*2HWzj7iYultU=Qg7$p|Gpri&#ng{wl=7cBu4NFD+Wx5XrE6 z3Dd4G|B47GDLPOaWw=`5&}xU;!*n#v@o0=e4lquAigJwU z87;RVN#ZeDj4}qjR?H+RKt-b{yd;R9CUZFq4-eTFdb5;rE{z`A_cFfaktjBG#&Aks z1ZS;i!2?#d;Q^~!@G$+_^qMZ5y{Z%Etm(vqcs*@JFV5(VHc3#F0L5M{;Q)1^MjQ!Y z&ygH1`RERO;}$iR$$0a_y0Pmm8}RSX*?{)ej!H%AXSc2Md9^)L$e$W)wuERjikCcW zE$)5$HvIdO`>?ueay8#MP{89qcL-PCc7$zN9V4jQ0LLLrH&KkFOw)#)6N&t2OT$|X zsLcF*a6zeWYCv)E$o&Mk0A~yJP3Z|mBH{3%ef>uLQT<#qZJYTjaY=d;8JI&TpMoak z)nw?#rO`8V?gSZ`@Q>0ceO4OI>k4a2Gq#8bfBQ{-G@ zx2`r+%P+5bRvQSlB1y8Erkj-9DQTuMT?V~`Sa?c&8>6P^w}Iq7PsfFJ+R@D3Hqth_ z0#F33AB#_-`zg|F+dwYz8nNvhiPEc86P+VuJW8SygTjy~K0)_tA8J!1HevZw+FOw4 z1U9YLor@8qS+1iTKZY32XgG#Zjv-^=R*aP57-!{V3Sov6sfKRd#mbc)Xdp9n!NaWM zdq#@bKU&0{!{gX{WE}SmO48Ufl*GNf-aDkXk%|~h7ZBB|49VV#)-pDAlyO>r8RxEw z;6bY+c+}c<%l*_)#>EirQ@GVq2+#;>K>Dn7tc>S=We@)Ax?#^^BGlI2@`x_{?zQXi z_fJ}l&194Ilbuq4?lbm|urw06(V-%JGdUMVOFW9Fo!gBcy=)^s_uM{g={HR<3AZ20 z;<2CDhg)_qZ3(Z@2MBOHflc4EqJLns0Y{qCMh#CI!1>Xeby`U&ONp!V`TBxxB{qTZ z#6i(W3`&e<;!2DUmLBiw;QYyp#O|er6~9D=g3?mUhG?fP1>4$@XrSWNwjY{=KP^*1 zK`L2-OQ!~N6W+VLDa#UY7O@e}!d$mm`)(#Yh z*Dma;a;BM9W;A9fyEc9>0BxD7{j*Kw>9;`gl`KUuUMM2TaV5pN*7sa;w&fK^kp-k^ zbv!1jI<@*|oGd3L#hL_3mXcBm$2mN;Aj@m2$gpTQ%JFR^UB+lSg9GCk930JH*P%3a z42)26*g25J?jy7t%wuenl5FZrvP_6Fq$Mp86{RG=^w9ogA&)oz;4t3w!$YjR`UQ8! ziU{6yQ7``RmmBbf7jD5T9fY4@VKpNr1kN|8^eFPHYgGf+MxephubySbXT8DU z-ViZ+4n+1*u_oc-o(?W=5|>uL$jl{GG8N3;Ig%$0o_v;(lHN>u99*1Am#ykIK~fy# zyvPXk4GwE7eAauf9E>AOh!%N__Xu+9@~Rc9SwVp)ugatoJvV@B%gsW;I}ub2R%bLQ zFdi!(rCpiw9JyO-K70^CQ9sey8nq)zzFcH5`dmGS8m1^s%W4y zFXcQbP>DGUSq}Bqb%BH@OY0=sk&+Z6BtI>lw34v2kg&Az+J>=QD@NJv28_UjF`%Cb z7%X59NlOzy7D!PZ^dTBm?6U2^WxceF;ax+{wH?IHBHg>5xvI_wxK;6-0Kglq2|sx(sXa8!V4pjZ5Y z9}8SONZXC<2Y&G}P6U0wdFAwyQ|fwl<5bn0hDN}(>@Ej&;EdHL?BiT=uUTgkaL#Sa z(MYCvWZ;8y<3wrH)tO79Pk>91CK=3xd$bRMF_HF*&P_soEnoIjiCf8Zka;8B;o@~r zT5I8VQ_o&7H~gb~8nM!>$n&U+OM~u}K3)B3ZUnirFm)qQoi)l#4dh&~^5?*uFJN6; z4(FcMi|g(j!hlvb-Z547e!CWL>tVWQf+Hjh; zEojvb)$*yAM5jAEhRvN3Y+u)o>uw&w)%T2YETXNxpj#Y9FAm}jfBq=!**}W=_NS0+ zZL=deVYXX^o+UACW&MZC=?dp#$ofoO85v6DFsxd(Wr1na*9YQEBDHe;l?f!}Xlg_LmZc8Le)M_RKww;AHesZENIH~W-LZF2PM)x>jK&jqL4>@)5N-876QJG2& z`Q1qb7nZIGeEFDuNpaJSRXZ*%>WT%Ox zD=SO$aROHq_44P3^5*K$^5@u~Ji4|Ws=N%uyIiPXFJFnK$)!HouYVQtuh)VrP1#+u zyb0$+$gv!CT0s(KU`77Z;!d9a^hS|>`=~(jSET5g^(0rO8HrDl1aVRqnHoxhB*2WI zie$}}O9g!M_lI!qhj!rqUNMN>gHmMk1AX`ACwFJC{R8*oZ9m+Lkuk;p=cS1)OH)pIRmE)hAg z@2Mza4R11ZaDyV@(oipbjo|V%=TLgJ8l$xO(|dxz-yRIgBO95{Gum*Zwku>wMD&Zv zq9P(8^r-gAy37?bBrkGDGyBzUZ3tB$0-`7~+7b#!`CR#=e+c^eNsLiwGe|#*s9yw9 z$ofLA-VTZ~#wf`Ng=Dr6i<7vtG~H_nMXMK-bdXE;0cHesQjvpr2>XY#crQuAhWFls zhktwz{{G5A{C;l^Ssi$tC33|w_6`^D<2%Q3>E{lh`ycPa6F+9QcuNu>xTlHPrGFIF^kox)+6%iuxmZGr%w zH@^R;VWhGollrA%y-}n%gL(^avO!H=T}ULwRvD&PY4AfD*@y@|7paz|F{QWNAg18# z8!9x{eO)a|3u#+Nj^sve<;REyMFx6pRm3F1S$l+mYsEov$i1BSMebc+cKumrq^h50 zp9K_*6UE_3nqO2NUUUWnErfo9r2a16)u-ZWeq z%)i2^j=Igk>YAcB-Mt=kwJ*EYrgx5@bbDDocDRa~0Vb6(^J;I0sV#|$DDNdU-GY6* z&EEN-i4~8PlLDZL_ZD0<9;q(;>Bsx+UhSU-wql}Z1z`212Zu_bhsp(VRgb*zPgSNp zBr7-dM8XtKx1V0Q168lY`^B)*Q||r5C@wX9xo& zmp(c$J*x2L5H6{LTU96z)?Xn&7hKjNtp;RCva3zib@q{bza7iu{?Gj&f>Ox zY236sjhlUPTD?9dy(`_W zSz<*8AN8s)j2fY!#twBG=mz*v6NLU zTwva<2C{nIr-VE@X%aQgbG)Bi?ekFRHSr!h>IA6A>B>-Ul;LWo9YmgKNm88;m)$0% zL0*#nEjh&@r@YFjj2uN3D9}XaWrm=Sr#LgK>&lxuZFJDW@G8>=bsQZd(MqQhm1>fp z1XvhU$qGeFXL{R4B1Kj!GM5`iNK9c$0t5(9g{MI04$`;`PNw!i{kA%z+DpSc+ zP+2H$S2i<+OS_rFI`~@ooSR4t zD@MC6Y$*EKKUdVQs`NHbQEzzZ`zvZsy4TjA(Upp8uZIN)5a8qhJH7@@i9Pb_{~~ea zlaCeAm#a<$NXtoQ&KVS#MrZF<#iXkSN(U9M%GC{U+VY6-US~||!B0pOUcFTmM+oK< z3cpsAH5x06W2Q~j<;#tL?m8QybHaiJWIxKN!m2>U zqaPLY84>!P3G1F_I`b?_qN25Dde4!Flt|E>7gd#3Wb|%Ot`tVL6tx#b^cC7lf00Wz zw&IN5;t3ESz;OvjNOV$7XDYNQtb3VJc`WOQVf)HfJob!Uy!TlfvFBgTLF$9&;DS?n zP8^a_g{jV|!D5*nHIAf}WmFAb<;#oCW7vu(HMO3dI5J~yysKXp1BzE8f`6;Y5hbP3 zUv$o`#;>Zm-$9e`=h=y%pcHpAs7=?5;EPn@%-H`@fG-bo4mIqG4p0m_##%0F)5k0H zviJ4ac({@R{&5;ZWJXdd>vxm06)zNR1L>qdS^~hPBeWL zAi#+Xkr2HNRt}@1Erzq#cHv29_v3;sBp>>gHO-%PW)JRq%NG3n8_QCH~ z*4pmSz#ZmnFwRj{D+^lc&NIFoMc-4=PlqTCMixE4P6U}Lc@o_#+s@qtILlg*M_p$C zg{`7hkj-F1T9k2@;3ngBWo>0uBeOxZSug|koeozHb)dA%t-Yzk!8Kgw4Bj&rs_kC> z=W)=Rlc3ceYucoPt527mMyQsZA9@3)WTlv+o#r%ZuGs7Rdm@dSE8$HSF2navgNqqWovQ%HZqZ937`Jm zC_erB@k)3ev^2Z1iz>t34_s_04VuYG{pqTcs7oo>Vsecqb*cKIBd1TPrTeX44{AcD*vOx^*HbU3H+d zLD4)iVb1XxmtM-Ucnhp!dr*7x%5fIOIV}{XlBPIkjRpioMWOJgDnnP!b@QgJn<7h4 zA6e6@z?GzC3fi1e8MEE$BW*OdpY-vdl!Qn?!X$rDR%TQTgoLFKDX{s65HHb;60 zNUY0HCV+-A4-g>0aRX0Fm{L>M4xzmziVgj7Ja}^l-u{$LxZ(|4@SC@sijKC*zVHw4 z%;20gQ9NpE6stPINJK;EqSckJSd9mt-cF5^!YjVAA0Pb9#NXF?&;|~!IyR#Bt@ zofe$Qs6{xh`gQ{qrHKse+5o0yDOIiM%0L622+~xbTYL4FZc8M7Mjk2li^(J_MobvE z>d^8cJG!fio)x*?XwdT*h3?FKE#$7A5Dcc8Y(Es%oWmEd9R(x_K20UqRB){aBe zqEY(mxpz^UdzTg`+LD+m&!uV;KN?+a7(~6a91FZ)EnL^9=Nc}Kso>n0PO02Z1lzkv zGI8{;9IAdNM<5%OcE&5zl5213Z#1%|&1)?onH*9;Pyz%vzECLRj8$zoe`6;*IlFkV zgtJ$*LvbZ}IP zSvuTSp+ru2HG;&Ez`mf$dnx|B%=|*Pyx5P_g&3D)#)+4E#m~XTPcTbNkiA)Pj8O0j zR)d=jxP&%<;%*|Da}Jlh#fD461d<{{ zDgl}KQB7~1gwwAxRa3Tuu=cH!$!;6*Qa=KM5+K0wgj5l?zIhX_e)(Fw_lYZk@eqEy za~yyB<0GDfqj>!G1itpdbsST}xM$ZWF8bUa9IW}i;+e}MxbAfuv2|@bQsYUy%Mz{8lqM^ooJ||WUFwamUhQQ5_Fxyy_}2G=^G~^AGT_u!-2eaVi3{s zRIe@ywhA{o=qh(EZu+gAayrQAgn`9@e#$kg7`FA{(s7JXFbY~xOc>l{;Y84iQ-jgp zAI7}FpOzZfS(U|LCO%B6w|Ro%nJTNUh^lQ#25fY-#V7j)#cBS$`jnH3)5(sH+D(ms zpackToMB+RfUeds-ul=ceDvj;sSrZA{MY+&!N+%ESQAzsF51$H-@R@N)~;^D$l-B3 z;FCLW_0BAA++V=I{bGbfWIs0l+uhio;vk|!ZG{v*c=cXfb^9>(4Qr2?+NL_NE(JIZ zcnomf?WzK+DKvvDr5^R$I6gwr2rf(&mA*}sPtr_eKqG=16ayH_|$yL0C`&_x@Qu02$nb{$m1oC4t~ z6B{5vfTe{<2-oa9xD z2Dd6f;nm(+spD8-C<(Gwd^3T+_!N~ZKZ63Ej$IMX+WB`P@9y3eV>9Wi>qddp1It74 zyD~6m{A1s-X#h7s9}8U3s5&hFGEkeIMZ2B~wMDPAH!2FD>R#z7@^1(QTWP8o<=HRn z9UPZt_QPn5nefP-jO+gT0=+222~kf|j?EF2DFO%(Aix5G3hnyc6BXD$U($oWd{iIr z68P@TW4P=aNAT944C10s?!q}Ax)&FJdM7TwZOAwHu+!VmDo{J5F zf^#A?mG(;EN9ifgHXS0N53ztmP^^3umXVSYRY=@!tKs_FkY{eku8^&sOmgOSPO1UI zQ?*rt0H5A5MW^t4dIG= zQ`q(&ci{z}--QoeJ&2#(GKgFD=)8!hG_)e3ua~;tY7%6wCF|M9Vna!g*0Zw{8oBkr z{LWS{sYn!*NQ#28Jl2e;a$`luKlTZ3Id+D+_d(uF+qwrSb&5V~Z(%ri;hUmX#LA1# zowQMCCu@Z>(-jPtEC&VcMb#8sypm%@Z8{{=LJ2rZ4Q36+t@s)SB?k@ODw>PDA1_cb zsL0ifn`kF?$hDNETd#7p;^Ey^kY{UmKlnEd*tXUDTX{9r#D_>U(Xh!kS1mRDF+hL- ziwJ!{N?Q;jB>HM;LcN|nU0+w5Yte74OtsX#V2~!23S^pWkkPZYMP>;pM+Kq5%(B-& zQ_G#%yM<{<9fhc5Ss1Jb)sK-7nbpADDL~~#L`Eu@{^V7+WGejsp?xq~kv){A;i#=8ol z>5_T~VcF?E-whxaN@RhZbj2yai$BE)OwId>0Ro(e(Ek0AoxtUP$MK{U=-&)H^IzD* z#ykfLjBE+7d1Nm>_RKY&!Te(PND&+U;ciZOsCj0yrE;v$xryPuz||jM8kSegidrq= zh!XZz9*za3+xSO>qU;fd+I;%m2=;|h5)3&rJBkq!KG-)9vkUYaH$3b)Z{ z=HTLXWm-*({^&s>a!Ut#(<)pP7ZVh&rS*sJWXqSOZ=MM^A`SG_^2ieIy%8V9^Se8xUVH?}9bz>L)=Zn8WD%Zzu zK+k%WK6eC<+17_AUvwINdEX%Rj%QF#bR(OOF$e~t@A|km$MX8oK$S25v+V3ew`j>$ zQxfXaF3Vn;RK(N6a~vSR$qDru^(1L1$>Mg1w3NaEVJOY1j-7s6Oh}t)Q0G;9-_q*( zgnU(-9V-~7eF~owFnzbg>R9#dhv&wG1BsTr6+a&IU1p9P z9Lqpg3xz9a6~R^#oIwL9ElOvt$nR{5xOP;rf!CF(?rWf}105!wGM)6Vv?%O4K}>)@ z80WTnm8HZB&qhh!Gu%+5h=S@?qot)s^{IBoYi*oL$5hFk6&R=vQCqyTDfn4H`I0oM z>mtj?`WzjVRX%d2U*4%08K@tk@hEFo>nL8q=w~+UgM@OxGAz+t?n!E7WOD#H(UkZeL-=kkSX(nCr z;?I}LL1KPo>4mHMDtYx0E+Vh6w{e0Xu_v;WSHMCoYEv&r}@ut3o?ge#+ZFmskUuN7yWL#26ARZNqSN&uc;*0HUs z`B7#w@xu2ZASeL>1X$XT-V$G^)n79luO>i>QsJ2f)Qy(%-NDr%j(N3aritq00qY>5*NoXa+*@g?mYVWWbE~2BHBiZVrE3T9YYRAp zVktanH#s0E0RjX#zMw%!N^-UYMM_ZmQExzL0I!}@l%Xs&U`qT0DIqKI3?2B>0YPm^ z$gGN5tt}C8p(oq=@f=U^GoN63jGQQc3l`~QOe!Nc!ik)yjCJosj{Vy~GHVj@I@4_0 zK$&B;hHQYXZmwu#oI%tlE?gmm`7dh4lJl2~%3FpkyeV6m4v*{Hm{u#JDrGMaug*fD zFpBn-A2Ee5?tEapSed4$>(1d$AF2ico3 zgy~voS>K4J@mEGRzA_vegJnQywM8SLoa#E?n6#8W3n)J`ftOXgDxVX^9cL-Hw0Y%b z(7hAE@7{l32daX}W84&Q;gzZ}1_NRv94(!qwW*rAptY+pvvUv5nTVjRoY;dI*~M`c z&r7C|L6+hW)JK2-0hTzZy>x)CNX4aB7TrKJqrs>Sq-Pbb9pdx?lR|Z0$rP!m)y3vV zH-1CGOO&U3E7qRpYC3rz;w(~j&fUC%5zPfb5o*h!5#&Zi;dkrG%sz;x!f)KZ+AF?jD2iOU%qsTkO4hEdb(OeRjs5V|p)F>GqxSl;OGdczdlp_S z0RjXFu+$)>r$e4L*tQ-W*JcY((Hara@8%dm(Ta%9p%B%u^=658E67|)aN4s9SvY0S zdp+uRd_r0};Z@4n!clm+W@W-&6Ni-Kwtcu72-)-K)+%d#}Cr z+QV6UoqhH>S4V6q`QtH=hdV4=0_YLc4{O%H1m=)H)EDr0i+535YMb_)NYfB)#Ovcd zk>W$Qery{>R&QL>VuL1ql~0^tv&#-3_iV{t69X2!f~}=XBySuwmD()-v|LvzC*AC) zk=H-*)FivDn-Lryt}3F`AsQ_HDw-UY;;y1Xg$fnUH)NmK_ra#t%>ZIBidaAHj0?GV zBitP(itj!2L|D}Tcl!v#ZpyU!uOXv1X_DVp&e?>@ZOL0GO(q4(?a+s9U5I9hW1u)! zfF{xulgGN;o)H)X83lr zAf80IXIEYLfSGifUVm!KDoB3FP-pW>5Yp)wkvl0cSEx{-!g&O?X;?E9Mr<>IW8%xz zJWjwea%5t}@D`i>g3c5MVbmnPi{QdLQMYQ zr1X?LlQ-7mR8NK4pHlhi(GV-qT zkj6a+T}P~Z@TJ+FRlu|9JpUO0boQ9lS~w_O@RB+~z;mR2-gkuxPdacdRM*230)?4l zHsu6|V^-ZO^UCk;w{cXU5`5yqE;6wxh&ATDOY(6yi9dj^Qh@PthO;X+7~%#p7I+9p zd`^CoDWY6{)fy$2`JI~_G}$?C^V>=^s+6Go6!ha} zU`3rW!L;4^M5wZ+8a=1~4WeAwIvX0t5vN1h__;t35`74wYEduv2GG55_z}RX&1HDJ zqz*~g5Cb`itWe>}46XyNNT|ZO1#REMSttWGY+!8m>t(u#%O_&Dh{*O?zhh9t0a&fC z`DQ~rochxzK_gII|m5AnrJ z5f#jkt4CdeH5IjPtW_s3KywRkWbwm~tkyT=)%nIs9K{U&yGQhAPT5$XEKZ@-%B9HQ z$qA_3I==?qRap{MRzXUmZC1{hn*)kQ$3lK6OG0|8;d;bMU9RhTKq1sMCoTr$rIkJx zt@8PeB01ia7DED+SPXGTeMyYVyp=X&V>(6KVs9)N+-c^7KV+2dI5hn900?N&ofTt$;Q3pi9E$v6rrg?dw2{ zezzQbNG9wXh946fj~F0~cR!^37;3Ub*}0jdpZpP0AWsy?6KbpmU!9R0pR9F`2=a1A zIxMOapN5$iBCXA8Pw?>wT*Gi=OR#%up!Mn))% z!ubN_uQXL%fQ31R(ulqLo62)Wwn$KM}>{I{zyr2Ox_HHcqGNK!NkF% zD)F;V2K(*tOna-{*nsR| zwPTa^gn=w(R2Wx zM|l@?Z1F^y=L#dZ^3@-9mi6{*~4GoJ#YW@9goPU$RH#`we^6pVnRqpYFNao zFOR5uflqD^F%gRD%!HZ@Y9e2H)~VaKGQuinGP~M?Forgt7(npo$gQPYaQyhqmVvf*vbSr!iwl<%L0sHBFi!Z5s#C_5ke=+BoI3Kh;fhIBz6 zx!3H?uhw;>yO%vzo4xGkbv2$$4CflUT)ED5NAmQG$86_>?lD#vtuq4#rO|BLhaX+A zg?S0z>~D{(2TWck9yNQ{Z_1W&=aqwsGr?yj%qL~RCk*Tt20I`=ET%^(jY$zUvWE!l zcUN^ep$r5Q#-JvdFQ=ks>+wb`yNQNpnq}2fzoF;{k0{I23}~xdR}wveM^`MnkO9neh9nAbvp2_B0mk1vgCF_UQ?G-Rs_K&9UtrCLHg@llC?L zDUWA+r9L2DhH*)lLtIIJ^Wd-Kl(Sip5>tIz0T|vzot3sL}EA}z%b~*UH@v=>zRT{ zo;$|#2^^H;51YN?7d7|GparOROi+c2S!3XcFd4@j>`6?782XeUj3cKp5tZS$fbhk{ zBXEir=SLB?(?#+}Jn4?o<&UVmSlxi1J5mQ7$Z|bMX~-cOpiju>2nY`fcfO?au*xs$ zNgYC1KPVmj1JN$DGvW2@Y1ZPv{y8|SC@4q5}Kp&tG z1YaQdQ=E^-6t|YR9KNk%NcSf-+qHbkzDQ2oScnb`E7Kpc6Lkbj4Mu@B{{99b*yC`gzg+ypMk=;7iTAzu#Je*erP~jx>KeMR_4)pl`gn z;@_o8ge$V+stlLH|mnn+U_ z8uJb6$BGG$?R;Di20FInoREf`LKcNkUP5t7fWGfhubw3S785s4C7uys9SO6_dd20R*=1}jN_VyBwu+QQuUP98uqPE{%bjimil}c zc+s1zt#%wzmyi4B>zBpQkf3G7%O!N`R6~0Cz8>kxW@+CDox;mYVo8EKpd)&a53Vd+ zp~901Og0ToY)edl+*MT9z&Qnz;_PwJiEf%p#~F?%Wf?X3EvkPOuMQutvTU#66W;!1ov!Nli?U=p}a%joP?cVnW1m z$d-qd#^Yo9nVYR}h*)J~Ps;GHB#vFwsU@A0>eCmz{&dkTX8-b!bkXTzs!-vH4!$q( z*d1oC{f5pXh66X6ecS7+@qezsBeussYxaM>(`;f#iUcxd+=6ij-P2B&44I!|ZD9^W zr*Qnbu-|DWc#@1Ht4N;ae@=rk3&1Sif`>fFRnYmc;EE$XY^(zw^iO+X27&Xdtb#q& z!J)8!88@9eD3^9h2zHL%Zk)iAK>Uaj{2k8>lnWb^Wt2B8xy0uMa+--d4f3d-OkTb> zNXW7kIwjEs;HP~Y<-`FH`jFLEL#0BNGg&%r&wcupwrBgIz3qbsHRQJ2yzb(e zm{03~5RsqL-vX<89#$LQHn^r0a-RFsOX;Q)e7BoY5S) ze8vRz3i)y%Cgiy6)y>&+uis(YM)uij-~2A|PfMP7aBfZD#fy2SUYpn{FdL4lLO2a{h^eNZ_l z6`pLsK{+S~<+r|3SJPC-LHX9oK{;oj{oO(NH>VwxFlZ$^+X0anw2~nsiiyL&?;x2S z>(_}R3x*qboQS(qj4S7|!G81!8A^G=sFUWCw*vk)LW+YmluX$?fxATR!U_9ZEs19> zATyj0f9$~I7=p3r$Ra*Rl1((MUao+SppFBjBk3NefIC!z*H4MO{>w4nJHp-|W*t5Z zx0Zv2YuV%8L&p*cs|PIwOxfhd&nY#7?+RR z3!nE?+rP`~Q+FS+Me*aCE^18p+uNsOq?FscF~m8nLHeK50u!llHrB{2Tf2JFU&DPyEpEi5dHruXwIqdgZkJ{ryMn z)F3N#5`v#}COr^*K3S&| z4>GfnAqNS{$JbVa-`{dkFj$EuYdCzUQ-&|&Cuawq05WI-=J>p5m%|^Ce-58;u3r)o zr>Sa=T#kc$;-`K%WjK2J&z#+C&D)iiPTTdD?6>Lt`^2K_ys@n0rp+xa*rMt(yV$l9 zn*L5TTXw3kXlRi_Eqrvby5 zj-AIUh13pG9Z6aA{GECcVy&#htur2%fV@pWe9SMP^dXhcE7q;yrcIBG+vIrLeZq;c zA)6j*`TJ(K9jMuUF@5T;1$*6F-lhugRv8QOb!Ke5K5k$0WnXB|c*=G=#n)x!a4gE1 zZ>Ybx9ccS^dgP4gUu$_;j*GI1ZE2|{R|!`|@bMz2g};ixF(je;5f61;4V8mZ;mL+r zLHXU}ps<2cIVk52`3lO2929`j<>nC#V**z(URXD*_j=(g6{fs@i)=!hF_6bd;k-vd4d7K)}N{fsFc6DV&) z{3PS3(DZ>q{ZgL%)WyOma)*y|!R3k3(+362I6J8T+JLZcfL6ajg-#{-#13@SB4Wu~$R$9jvSp*)|O^9o?f*8pU(YO44S5veqpwYX|bKHHVi$TZ~Eu zVv@tufx_(>bxYgEhR5y7i?6ipBQ1OQ(Zlx0<8vxU1+gcJ@v_*kF*!98W8!Vkd&{+I zlNyq>&bI+Iu4+q*?&z_i;@gXqjSaKIy3Q!I!B`?tLT3d9ypj3FW zAsm$7&K#8L5zo0pI4FPcU1pQ{9+UwQ_N#~S>xsg^E2F4zvU>Ht6F<;Lt4O!Q< z9|+?^er&jHvuPL|sfe6NoEhFQDJDte<(2G(K6>{;-ZnIQQqkiG_ZWViNgEv!Jb%A3 zrDvfkeXJA4H*$IX#vK&aFm&`Wqqbq}FS*O1VidQav~jfqD|T!WmrbmYgP zw8aJ4=%y3YLv{=+K)p!w&D^AE>_uH6MFD3kltvGPK!oEw!d`HN3QsaH?iv4pYo)pl z&M|0kCWd&+AgIr6R}PXf?qS!~q5@=;eBWb$@nrz?C@Z2+(G9Vmod)Sx*&-_eR!o?X zQH%_n_mEu%EI~Oqr|hnB5{h%miaNkZnXCxqt3nF^9&xqs`aqH_uoMia-EJVE8 z!G=**ok;6BZ$~}>M+irt&|@u-u|!OItZ1-V6IFAfiV*N>WF5mQ3lp&C)w!IJw$5Ah ziSO!^KKz!EPyQmYd7a}GcYkw8M;t6qOzF`sT}0df1T#lgBp|}*$IS9OvuxYsNWJ|M+0*Ip8W(coKkd z&&8ImvkK=LOa#3M=YiK@!+Y!l`fN4IfzJaW5{jaHf~Tx-lzJf4aDE|t0`5-POW|Q6 zxie39=dJ)Uk)2-cEd#bPfzX{tFO*S~lZXi>CQ*MJ1gR`Oz|}?b;z>uEG}<7DI0v$V zxENH2kiqZ&EU8_h-9k` zTwcdzMZ|x{W}9eAS#XM!=C2u(SAy9<%f?q$O@2U{njO~&VCqV zF&QhK$+T!+@!&YEmk>m|&_2BgeOJU&FCBBBYoSYtD8nCV$tk1`9_ENcp}q@8XjBxx zzs06tqGiKVPk5e5gj|f8zdb8{D3?V!`vS;G9Kvz zMHXo|fSqv4ouIOO>4uLNb*EIQP@%$k0>(%N&sQCCB91$7pS=bERA{-8%&+J~umr_9>4`50wc`uF{zi|8-^D==Z|N)@Roc7_*X6+S9Us2UL;YK0@+(@(mfGv& zBT71Iiwh^LvB{^u0+aLq@$lsqD>qm_UY3c zu<uM&o3|AoTj~ng}N;?*z`H1xwd9= zjRk8YhoIeR*-~SvGw(u+FMTea?neuj#3AyZVxCHrj65?VotW?mr|a#eZ2*j^EsZL@wG@ zmru*TSduSX_tFv>G%r0d6c;I6d<-8Jx}4cpf#meCDilCR;q+TP0Hw)L zu2*mu4$2=_4oZb52i!rq%k1~RRo5dQYP;U-8(ypHNp}bp&OW$HJbaJYAHQ1d-@`%4 zY+7&R3<~>)*-o20ha2lP1$E{R^7=%_U2g(eOCr0#YQhR|w=a9@$5k>To8rPQ`%#fy zSztn+9&(Cmx$>uNJ2PaFCJ>*W17;E5CsIzxu}YfDB)yMrD^QZ{!#^Jeg_MoNYnQ%KY+>%`Pt4?2^BO(s5i` zy1QpThpSB6=6WhqQ@Q!s1IqC|C7qNmJtc?Xw506J_r7@5!=WLXkwOVxRnV)yKp~z0 z?M@pijEcY?uG74bUUQX$a*-UAulZ$Jt`mu& z!dV3l%F+AH-uh#j%coOh0(J?*n;Ysd#6U*SjkK>I$lAi^;Sw}y4a;%y8`+T6i%oo3_>LMc41QJ0DoEx4iGu>MFGlds!A|ZD@YR{_WR(j!kYG zw|C$1xV4(gHZRdb8dMEkR}FbSeE1GfqK^OuTvP2Y`^pAoSBdhYevnYJZ8#{M|DEi3 zT`4tC?8KGJv*$*$Z+l(kpj3Er0ONE-ckpl09sH<_)She1Uj7SmP);U>3TG8ePW+nj z+tucL$#*Sa!Z3c!7Z^Q2od03(M{e7a-P7%By)6eN^5I=zC`&*B#bFNGB999X41CT!{w4HD{lr$oL;45WB(pHA>}zCe#M;VD*HbQ9fF z`_O1BP|Az5(Bwnv$Lw>Sez`3+j@ccbeN5wFuVy;-KhP@bH=Gg|hm*ou26{6{P&B7r zpv*K7UC(lz6MCt8HsE6feN-T;DV(!$+QX!0if90GRv%ij%NAzr#ZNt8cOPuqU%l@$ z;@8a@D?`nO9F(K>9WQ^XO-)VM+wOea<|VVCu~r|htCdFF@j2Zc6cQL#OSWB1Ct81M zqv{q#_?tw0#?4c7Lga`pVE-jkHDXS_xhM%>xzdGIsPH5KcZ#FBHikqzBB(Baa}U1* zWfI7Ue(}wJ8S(gq-wE*#YbB~dI5(0Ja&SCZ5gQ?X!kQyBYYk7xE>2oYcF>O{YKr`g z56F}cTgloy{(`^8IV_&35}!!pra3$=`IIrFdp(hKF9D)k7j$D zwOS(S*^)d@M~;(Z)`?FtyNI|%lsU?)v?ARZ`w`NuD|fR^_8hQ^olh!S_2%sz>d)Bm*Q%KeX%Czt!ld^A;+gm*uj5=& zrVhR6Tp;w}hyED5cn$Ow^FD7UdAyi{blx78gE2I2OXEt@wbiB_SxurkY%*D1^k(rE zpdPHM3{R`c>edin+x-WPMJJ72U5}?}R6N5rul}1C@4V9IXixfv>saG)sI#M)!AZwZ zg9;TYbb-qPgUJzlRN>qL!-oZ2LFy1DMgJNq23FM1j`<`=Kpn^%3;r84#OZDlXQh~Y z*FcE&2^A~Nghf7%OjwD51LQ_KBBGp_>^YK;aGVF}oV!`_=4v6LOU)>RgpAniijEQG zItYYUu&ZH)HNb;sy&xZQynQzS^l@iFLRhV6Qg=~9ZNowZ*B&?hPGU|A5)Sglwb>An z#(6)$2ZcPqkK--ZI*%EY*z^kVC`bL^Hzev;%8h)3BG-*Dc?q8{gbuVR#}%aZ<~uko z^@AUEE`3|A<&IyY{vD%P*ev23Th(sDm=Y$%z~$s$wO63#ZP>P<DG9 z8bLm2Xp=$bw@NfR_G#c_Plw1)|(?dBk-duB{FD;IB|22Uil8 zNavdCk6z=a-?;3D_44N+Ur;ZEer3wbf@jd{_#gz6C2#hHL2Ll*6cDg~&AK=lfpiNh1=19*|O7U1*lKyc?#2I#Z~PGel` zB6h{{nk=uUfS3`h*@`MElDhXyPQ|lqr(yYpBs#)KLGl{H8zxun{zm zg7rEpPMu2P=hkFT+OaoD&I#L%`DG*6yHOXf(k0tTF$@77GkREm&UAQng9@rXH(xYn z*X^c5uqQNrrpD`bV27?Q{}`8$#^EJ9N4v*mKPY{;UbE{p21mGES&Ki1%G|$w#BMw= z=EoIdSo&SOW5lmZu9ItYZC<^1RQh5_1j-W6_~?*bMEN4cx_V6 zKWvl!{TszQ4=XG+TN)bi%L{OmSG(Jp<&iasUK5CfH}A$Mo+I+QNQ`_`%QHor zkPz)z%;;hf?{aFVqHdy%B2~Y0XRc!q&Zj#fSgyM#4x&()PQBt>A;;s2*#)DTlI&i@vF|l02xhKL; zK<(h;elr~uIR&r!yj|96F4>p=!aerYzkZ+X|Eas|p2IU5$0~3}7ac~E$)DpXNO7Fw zX304EIkccKPR6Ww(w&{>!P6p+yd1N;yhbv_|LnS5HZ-nE%fNp9Q+L_%g_fN_9tN0~ zumQ3OlP7eM6ZNMbI%41W>-VT-)hy&em(aOFg*7n47!$tp3+3bzUTWI+Ja>=ZwEOtP zQTK5#@^PgEj*R1U4Ltnlf_?3;e%9`LT$2UyeocsHKJmqPWqih+w&HI%u+8pxykTGe zL$@o7${w%VkI6B=a<49W${wrRfBEZ2?VtVjgZB3iE!fxm!9(_)zx9Cq&WBFecRYJf zN8iaYd&O&u#9r>n6UEMfnav(*32gX415pJUfdD-WhqQje}}5h%KoJ zhTUn+K|hF*iPYcv>BRO2deV-eV>!IqSR$=Qn|D#F_eMa~qIw*uOS!tYCGc zp}L6ApRg~y(@fH*IqZ*qc%|57$$?w)Uwf|UK48>pa!^heL0jSkv!aAR>cjX}`=ATW z@uSBU?A2d% zvEBZ|x7vL_aie|i)!Xd--+!Z>_}N=*`4^sQUwFedH_ZS2WtUmwmu|E9pTEt%|BElS zZ+`A>`@p}yS&oD>m%*J=e0_Ax{`PyXwL?F1v;F0(ZtzDk;iRw{b!@(E`=(oV^`2oH zn;x~Vx^=gG`mv@hXkz%f7wofle9yIJ$CosL?6tpo)wMP`F=QXp9q-)FKgE9IYp=4e zf8HK@`}gbaQxm|CzxXm+lzxYP`WAbs9G%KZsh|r%)LFdjg~^ec{pY_uW#9ez+x?p0 zPW{CyL;ZAajC+Mw!QeKNjr$+ zeo_X4yVZ7a z6Ae~ZFwG@dXD~MvShG4&2<1lwN{Hw_$s0y4D~cZko1sI`wncE}k(^064jo_Nme>XKc_kGIvQ9wQh?C^DpIK7`|<*pO-h2SnJ zQJl(wAzS*{2g=K!l=y|iE>h)vgHXA^)8HAq|0=Usa2#0fe)xy3x9@quUca-Pl5xE1 zyFP9&y?MKR_VFd#@vlE-&-tJC+h2U^m3H-|6ZYjdOxws0+-{RU_8I%m=k1hHKVetx z9=3}wp0fY>wU^s}d(UzEZ(q7cH;#4tjz4|WE}b^}vYRv!q{m0Y80jNR_SV}^*~?VM zQ!kmYdr!>S#}6*}if++ZY9B&PIW||xk*cc+CcpQS_8tH8PB+?1npkeQX3D-scameT zx!v~v;HT`(AD7b=Uz(}#Bn6`;jiElkA;10cMLRxQx6iw2m%a8IFSFOY?S#gD%}y?~ z>`mWrx&6>z9rCgN%kMj3Kl%kY^e62%zUFct=Qkf1vG4nfN9E`Y*%3J-fB$c;vOoC5 zG5d};KW5+Z%xU}OZ@AJfnI5)@@4v(T&1>)0T&BUyq&B~7|3hj2^_@rTOMdrZ`@^rj zQqIPd9XYjRcOBMs+i&RV!no(YllH*}7wmIgIHh^9{}kdRD#M5nBx?&A?*C zD?>!*#28}Hq8~hu>KkKF=j@Z6s*iP6NjkCVX{-LkY7+^bhmKoTF|3-%QSrqM7y{_X zBf3>QZC0rem3){evjZ+*p3VBN9p;plVfsNyhi9dX?&!GDIeu)(zU?>fwcr2PNnhX? z(H+}c@06D(<9cAaWz&evrSvH^ z7~hDg@FWIT8COiYdtU`R`H>{oI}Q=ihX>z422gZQ%qC$|~b` zd`S8px1asuz4naDM(uCzKH7CnZ8_u?i*~{$t_!R8-=>11Aexim1Lf#90r#@CXF6Gj zE?XVwNFOtYmD}qqflsx2(_AQRRDf}!`PnH`Jc6`ij5~;P(&D@qa(=!fTU)ka9jD|2 z@EFH!ljoH&ODnjXdXfCm_2@p3c$ekfIR8NAgbSHfARYlJgFoi$zTEo*W`0|sUrCBy zlymWOGN5<9`Z}B5Ic&SHoUki*j@Z%prj2WY-_A2_8NLrZuw-xlmg{Ux&dQIzXqP=Y zvt$QPwe0_U+8+CYXY8~ux@F3qb7|f4{l?!Pw4eUs-FDCMIa@w7Yah7pl)d7%UH0d9 z%-DPGo45OqEfh7t0bz1DsXM}t%kg>s)ph%wzk1XSK1=Tp9c$XNE}O8S{bTmLE5;Qs zedIm;jU1kr{{92@-Ou0QTU@5Z`^br=>+_;#?zGEykH~=%Z_FAMo`hhKVFdij?2A#2 zbDWXCyMNaH>9te#e?B>*>t@+kM8=f%$wwFM>z}^UCU*_ne|z!e_O5%6+597?wtrgs zXxu;e@Qgiha>>5y6<6E#y`%OsUwV=2^OXJLwtKJi#_LYtI+>6zg%6_g-u}UZ_RK3r zZ1?22-F;Y2`DzZ$`2gyKadi+7r9;Oo6^Y#lo`JD0=H3XMRxz2yKHNco40y@29*`#p zFnpOk&}*xs=+jXCECKPuYu|WmP0&asn?yB;rl0$bJ>ns*so=@0&k~8xt1TN>cuL`# ze>g3%OLiOQB*}5sgwxYxt@G)a$TJY+g~QCs3r}s_`5E8!W1YlRKqlIO^`32e&7S^M zx>(rgl7Ppr^xN;5vkx6wwqO3r1NM@er|r~2+kWH^9<-giNA0nhW&7AcrQdbRh9-yX z$G&KtlBJBMY`Du~RajKls-Nc^S$6?tw+S zao>pjyXWt+ue@=GoRm2`!5$SE)Vhehv44B-tbOFjvJCd3edwVDo1PxA2XzyJgzG?M;u`sl}G>S9$wKj@v)#PWK1DaF2b-_1o;8 zqmp+-p50b6+!f9~SXG=qVRq*`HO4i-CU%8N{n0?fV1maeUf>=_qN*lYg!h<)avId?Fy5O29-$^OF& zrtPb5+ir*FmhCw|f4BY1&);b;ylUG1?BmB}gga)0N3oM~qF8yT(pU?QG3?4JH5F3k2h?YFCFW;>hu;5dJi3Y3DJcU{oT5`NeJVWpfPv)4>i+D{x`9_HUfDDXE;LdA! zQs=1-&Z|HEYr;%AS>1@jals?(dUQt{vdj!fW92LZY?SBg*g42oDgy*R#(!NPV-KB? zMR$6gR{^|ag&0Dd2YTug8A|mX6p=j}YG(v@J|(bN-M~S~D_trGmJPMDGBu9cEjL|m zGn&&LJG@{^L;Pws&M*Smung2LeAb_0spm$3j_8+HW3zy45cS8eLf1k1qsS}8eBnW3 zS#_Myb+%9PcIi5~ZTFDfvVY9(n;W*@f5+`IOOw`W=ptyGuw7H*_MQLqa>cdm-S^Mh zjNeGK)ng-4gAcV00#@&%-qoN8rXY%mh-O1|! zALrd)VK@y0cVN%Zhn9?yrY{kUwfUP4|2{3wjX>Up= zxK5BEC?7zbxJ~Zq3Kc3;*koX!Tg+y_=kJmwVZT1C;T-Xp7MUKw0U*(`ws8C_+ z0|SW7DhwgUE%u}k7H!0u@rcMb5woW#jO8kzeAuz490x@_W+6Wms~cTT*Cr#%x?qu4 zfX>A!fdr&rvGibvn zMDtULd@yH~qWzCQZ1%VRLvzzqicDb7$ufHcCOcNN3=F8pud=TqipEYlB7);8c}Xso z)Hw-0?)FQMdq@Vou2&3r57j$~Jsukojjm-`gMhp%>Y8JXwptCV)@1|e(v=gwpRo#Z z{s_l$Rfu8vsNHg7+Jo|V+JnLubA3~+#uswDT~xV^*3o4M8|}L?LSBHexEAs})PcGb zkYnCnw#nL%O%9KF(so^6JBJo+hlb%TdnfIxiMBn|s@reA^8uT03|Wh}SQZ<0>Gqa= z^9!%A`DV-Bb02$9q)ctnmUaEHO{Ip<&t9;86^|sfjsF}Jr|2i2X?+d~zihbuVzcM| zE7d1951mI~fM^WfF2Y#FIur4}`}+w9zc~1#x|Z+0Hge&t2aJ@iGKg5Eor4!PXf+h| z67g|B>PL5`E?rZGe>7;FeIBw`19u8DN6bFE5)!^#JD)IAi! z4sZ+TpTFGm*%i z$sxl*nHnCq30*teYc1PRTeLlLP;TBcX%|hl?Ez){{lC56jx3E>dr?9b=k1amE&G-) zl!LO|vUfc&YjfDip)p%-4p~Di{FdkG&)0|ID3Fv1-IT;M?xSAkKBceAK>;`^OIyG> z0ccKR0KRk^jgMg(;cjbvRon8QI-~qiPd0VI_>YgJIugV#p6x1!58!I>r$;+;8u|dv z{UZ0Xl_1@Jr4%Ee$)v&RgqR~g*H5X40!3K_xXa=K=*OG^7UcKSDF;r<2zRpr&agWt zfU<}$l~=C2U!Z>0xh_|zhn!v$;Q&A$+1Cw}P{x|{r|ky;Z1m%x?Y0*DcW|VGJ1BIr z>hraDen`{%6zc7 zlmF|0hraSQ=X##8r`&pp9X)*9j+~T(Qcn&_+BE9?I4Eqy=H98uJ0Qrv;p?;qkk@z2 z^g)q_hCq>A84?>Z15LiAYTM+{kL#KoQ~mdiv~0KP`_z4twri|ykIE_kpYMFoj?GP4 zdr6gAIBr+$YTGxx@CrNCY}w!5KWmMlQ8^bi|KY`kM0b4P+=z3eL9z;@Bo53daFe_N z2Spvaywx@-QPI2_3ge()WS(dUJIgrZf^h??deQ`EVhjcW%^77dg4|$)4ke&Z7!>lY z=AeL_KgYm%VZ=dMjj@E%HPROt@nP=51%I_QzZ>XN_h_fkA4EKH1vo)YAA`FV^0L+q zmFp9~%8hY#&OlvxyM_utY<`q&k#Y0S(dXcHs-?K7=W62tvC$^}GZ^$;)<=;J@^FAS zfWzyPcaQ#c9{s`b^lx?O2m!`ac^t=ZK__?W0msZn^=yCA5S*Oj0MSv$je>GF+d(M< zJvU=qb=8*>Km_6FqdY!=sC>+T744>kAu} zi_WCKazwq>tAqCigR#dTZFgP@o*tRdsBGAz9F*bOlIg)$TspFGIvmPUATiH(fQ8>owLtcD{?}e zcijurQCoZ`HSc2Q4hq5bbm&$Eb%4Uf^ih}U$>~|NH;#~xarQA@(jiCaLz3&e3i|23 zuDs~M$$%K7tuWwAd?@Tg;+Itz(;e*7k%Um3i_c(^RJCkx#fxV ztOA8``l7#RPsOp~5i2Wz+pngamq$J$cDJydNg}e9f!L^4*+I$E0CFM@L>QuYe{K$Q zDi;I~>5NOx-BA${AGSYa#>5EV3CmlYNDx7ai9B5(5rIX^iGy;39F&t~2Zb>yqJMpLSMrh3x3BtOh5l!Vyk3K%(1FSj$opN1 z?Ijx-s@rsZSq{pWO~}ER9-6o5;bFUMqG8wVp0b@Ia!`hc?6=?hkUcsl2W3uja8UNj zLHPnXD6F91plI&xc2Kxb;*mH&8Tx7E*dvA5813udBzy5w%>LDzw$LWoei*!370v+O z%unF9=5fQ}yUpJ8Y8l%Jv%S}vz5M5Oz3~`oGwXc@vM$)>&lS(DZ5HpFWFInn*DuRz zvErb(nDp~30n&-bfaeZM#OISbap7D93d5iBmiM=W9FoY(1dRP%O{V~P!}1pLGuPka&6nHBqjFH<5s$B! zDr0-D)6c#qMQwE<51tsYX4yeml7sS4=@E~lcN`QJG@@{ni3@?W(+$(MCAD%*shvJuzk{;Ymt-qc zcp`xb^5}hLfA+&22W9tFW-s~atO#6Uy^XzYOgd$GobzZ2Cp8e+;UmmEmWzyd&?{WX=LF{<=>}ZqPH-iHKdlgOx+;Gk zcv<`r@s-xC>Y$J}+A6}{4S52Mzl#2_k|&n~iar1}8)_W2+itzw4zYp~Uy@}7o{hOU zC_X-(01isOzG%;DD9JIAQ^ub1DLE6Ypllca{;{_0);N3m{z?B`o`*(;?2kWq*zP|% zWQ};lv$vHTly=8Ksl^J)xEz$WB$roEKytJ_?X+U3IV5LkjJ4~j z+zyI~?=bjVN&z>2BCI>{I?9k1vxomK5AkuXFrU#ZgDC7PtV~$kVF!T_3Ci)k5brBzH{vs9VZ#ni;XbYjIibT=@tLRT%%gLOV<9Jm>PH;_=Z&y;eFPKMRIFlI@8A0a~ zz1pG--xNILS4OAm`l~#xmIk?;dVWR2S3?xtY-m77TX6KfkRIr~P%ECc7@MAh3xo>C zwZ#$si0^hz*h*L*l5@g|a3;-Np+bcU=N=d@sGrd#4g2TD5Xym(WO7TyhuT~acgPq^ zh%}DG!QTUv5%xAGK-pftkjJlue)Z`>#)N$j=Vwr0@o~C*LK>*R^8-|)jaN+OBoN7_ zY8X~Q%$uu19fgA;-mY#c=c7o7K3{LMMP0&KT~ViVfIh?cbbEFNEL&*v>NQ(!e`yV$ z#QoY<&1M#7RSlg`C)&70%Vn-a2*COGE+QhXIe3YTYb}GKxu+P(bj_qzs8FH87DpKR zUT|Y5gzXDM*#($_QAeMZFwnC)mht#q@@ec7aoi9i-7ltS5pjQwP86m!^T%(PXpfG4M{%k7upn*P&p_SDpc6|z;X zJ5EZp%@YODr_53t?23UA&3hrVA-dAv{T%gPD8^K;N)9QeEq9!FHnVoTdv6k5GhN)2 znU%ZhCzNXK&L@pxj5_GdK0n?mzS?rrcdK~eLgk=Ts8Hd;0Jat5n2eVL!xzSncu&hC zOTb#X#SF-T`p?6Il9$phEkU1cpcZv3CX+Ivf)Hjr%@myWsqO^}>O;M7OwP7*a-o5? zSx>vrj>VY5vnda-T4%3`RJgE!wF|;X$0HrLW?_^{xc2}6a9Bx1K~xGmhPD9FSW8bXKe|bL zx_c`C-#MB1b8|l^B2P)Vbv^3YNV(?$t|s*i8UU~j(su)iTSvL)64Y-)UDzX|x0Nmq z-qLlax8wQn1`coPkL zC@duQE^Jz1HSt#PMiSuhGzI*%+AJ+lyxEeiqIBJ%MnMUjo-q&-YxO0HIz^FL(We1# zQlzN6u$pdO4gKLKOW6HbE_cfTh3SZ#2AH<;G13c&C0*2REl6r&jy$CMhdwnX7#EC> zNZTk7x0YUK6NR^-aCtnrPHNkBrzIAoY>l_tc!r~hI(jSEFo@Wmdoe@G1ca0hGqiX!5YxoOcyUPzzCtp;fOS>8G1Wc+moJO2WegHoYFg$oy_E#ewDZS=as03kh0VV7*u zGv@^n*wixug36Qy)9DIz3k1VD;Bu4j<#Y@=l*2EHv$_IpDJNxyM28~KY| zTNX*-&>eqrJz({))@Oq%&WRj^X1ifc_5HjGX*K1vXsj$S98$6FtoTw1sCB-1q7YIe zwhZ18qQvp^kwLcI!h4#={n*m=H6}^p?!a`=OVbJ!Dpc4yzM+H=@uxbb7Q%=2>nAYx4O%!K<<>_tZeNWdvy%bW~w%iDDtk|dY~e#Yq0wR zBD~Q7(XXP4Pf0P{*Z|@{9lw@BNlgs_KEOsg;Tl7N9kl)kEP){Tdx&?ZCSg*}2kT)( z@lj|0u(PL6D1Nw;-8Zs#;wuNGLWK%j9~i9l-ZA!sTf@yk7-RH;HpPiTC^}}7P?U2v ze1({e*q^{1Ha{&8@Vy36_yvS$!qj}LVMtZxe%BMtCb!s8Hd;04o(8 zTi5|%tXP*N%V*piFz1;C)~DLddfZd%mK)*IXztnGV@=LzVt~H#KWt`8m1j=2j zU-|+i88b113(?O|^y8p_-}BJE1mpxU21G3t<$I~y<7&zgn`<_`o#vLCHWYi9Jey*h zVkQm|DcauWagdh@yktJZxULHF#@i@NG-m-(%{6rqqAB>p4+$i}X0?U$ZFw={ObAwXVE z#0>&;DfD0*GZqz58x}RlH|wfQZy;jB6LA^q)rSU~)Ikl_ zZ#xMhVH4qM#>a)*JfpZ!fX+E>SamXoD}YBaDyL+~7S$HZt)}mXU39NRoN=wKxZZRk z7NRCP5vSpz$-sa}o?z$<;;4AvA1m?=wCcXfL8(w-5Nw*Ut+1)UxMA=BeH7uINX)EV zvndpZg_V_l6F;)nlzBElf#@oV;JEMK8}FNVbmXPvRAaOI#> zs4xh)#^MgM!qx`M^o=$Cv3c2Ez% zw=RoX_KZ*j*_n_ybsb3OgqfFwv{9F6DD;G-$g>I}Pw<~_l=UG@oP$20y?RkXk(Kc0tpc;+Of7Y}%{SbPuD`=A?)YA32wp+be#!1agS;%cj~wLxF`5;VlK@$Am97huCe zdLH;O#}JXkmEYE3*JZz*mxBPgAj;#IgF%+bkNL8gH%Uh)2+OYnB1nhwFf<6(!#fDj z3EJrF68ezen~O?CzvPtd7l8%dhQ6A7Z;`fI5eI0(M$N6*|TC}!2h=%l?kt5X{9`QZY zZB|>@!#)988}nLSA+ER-^0ljWBq`4Ut(+k^a#S}@NE{Hi=gaVEmS2ODEx+kA`nkh7>;}o}rp84^P@ct!{IY&1%zlyVhx)Y$NruA{KNCA*R#3 zHER!#+VIe*YFf9t^cZd~SzXRdTWP2|G1Rhc?Rls1;dz@DZ5y7m$@+pEoVHEWs}+t$3}cSt)2E@;c)SuFytR$Ll#6KCE%%1R!feJKkni2 z4Oz!@$^)9V)o@};pl4W+3aO_xZFU~#h**6Ym1D9^j?%XFf@oRsi?&@3(ezNmrsTZT zL?bGDTo>XF37wWu`lmvL3Twgd7@!JINMKPnI;k?Dtr!{|6WvW^!F|3ZC2> z7e9^*k7JzVX7IR2;re3J#(0BA)OmcF*;$}$G6*oZBw>?`>0*Mdvx=gyh4R19Jmu{ z%<3pwITKZQqM)ZWT%*5B^GgR9aq>l81ar6Fs{nYJY#^+Cih>HH6Ap;znrPRFkc%AV zuQQRAV};IZAoz1aAE;>4h-B4-aE3fzB*B`8b5P%|t`uWilRpQw0UI_u44R-@JQ68^ zbmuvXpm;AsO8EwjM0JrTNKu>;9>LH?!}`-!+d#vjA<;+*J1O10g+%_9T*Z4HoIC;1 z?&!$I`6>+M#MqTPqO!--ChRpSK29Q0oo@+sPF;llk<3p9OzF5y$8Ezk+acPezSvW5 z+P?9oT{P9UOLvail{;&8{r;Lg<)Tr$>C$n#@v?Ed=F(BS>Y}>s+dFJi+lOsvynfc3 zyh4R12Dl06AN&?&H%_o97iwX41tQs>C(Fo;4SzSD2PNMbSi$mQqZ zmsOtcn1y**?YE>ZY}r)3W>-$u?aGNEIUvJ!?Vbs{df&KReqhS3xO|UYcF7*wfAKEc zwP(tvc1&4oeB4eb&tt72duXm@pFX^7pLlf9{{F#5`@4G=?XN#O+fl7Tg$fn6E--{W z?rK*9_E+|MLm;0o^D_%EIZ%FvIQ5yW7ou<`8jfT@4s{?cfoR`@AT!LNOx!&?KaLKh z^Nmi7K4E!*YtR7bmnGLd;5_;hgfl{9T@~T|)B31L-T~+Cl;lL+lebZh&dY+LSvkU! zgY+EU=A8_Dql5JWe*mKLM+iB8^c$qU<7=osE=p7`YY;>p9MgL42!$gOl>t#9(nRqX zhet8~!;Xv{9qT$DT2ed?goxLMmwD6^vUF7Y*IG+*IBLoUpYk%3n&fc-M?HX;_u$;6p^%uV&;BWn?t#~}c+dH)3?$IH;;=rU`v3Jb&PmkI* zvDAiZHrs65;p2;T|FK28{jml6@B^pp{db?VcicN`e{+As-hTg*{p|w__MS&h+WQ_? z`s0iC>67ALq<3~+J$MsS;R83Cebei8?Hx;z6)HS|!7Fr!?=gGRtIfuB2fOE1vzPs( z=9*K9;Q{~?152{ls?J*Wg#+FyIPtLAyM9q~^fpCM304vYFk94ng!*Dk*8t+uT-aH< zCND=KJ&Ox31U-}~qNxhvIgfdy3nZZb_-UTdaXp|N{7yTK-obXZQ z8Ie!MW0^@EN91HojgH!cBDX1wk36Ne+AS5YnXK6dA8y#|-hZDp>$}trYM;h&yKZ0I zzVQW@+DxNmA3M~v1@-03V$0^5%QhpzZCG?2YSxs%CGYDoxne`54>c37cE~O_TBkyV z3af#OsJK$fcQ{)dG6wabn%#QYlwG%fO6qe9exU*b2IVtEACSDBZh|)#>&^$A&b@UB z@OpYbMBzcmVGoKjMG{dl$#T8|Fv64`>wrO=6S5VgKae{llEWJqBhn+Bl`b8F61wCh zA{mvaJGwBD5RR+`pZ>5?!f`|ltdj6*t>1N%o-(k4P~=hAA2*b#!|LTlnX9z}ypYQj z`6^T*cTUs>uCvZ->~VleNs>8a{0^_KZ)VM|Hj*RZkADP2g&t6_^+Hy(^HDr?8b+RG zZO@Bbo%;%j;NKZZrPGo8<7UMN_xg2J@|VZi!~@3@?poP5(?c30Z#Qp+cqNavcw@|W*u zNr%6<%PR}yJZ7&FB5zFUUC87FA9d`!TGBxek&aviWET-hQQDxGa92St2ljIF5|@kV zvRg`k-&Y(6qpZTd0W;^z;QXE73fXI+kH{|IB(X8n+mH-u99B-E9O*x@JY!c)&D-aH z{>AozPaL)T4lUW@@OH6^-yJHLHSdv^M?;7yw@WX;N7kHoD4q*JAQZ`wu1)gGc^PUg zic2So=EwU+<+!kYq^))ym+)~popq(xhwC;ao*~t5`-q&Ckzu8^ZDM@H#_Kh!*N1FO z`Nrf(@WwFZ!`}SalafDV4LKrwHP+oaACqNJPZ~#wFwqp$ zxzx6mgK|D0=j5LMe3MPqY&h`IYA2Zw0V^v_QqRT2B9wwoJ(L1Uz4$#NemO@4B#juR5YX@vaZ?qNH+% zUw=5q-sfo!GN6w$_D4CHvXIjyONjCUq+@W(aj{Yn@ti`v5M`8g=!;TWA;6>cC)DBS zZKA&EYQvPsq202H)~sE=ZOLBvoc;FB+mGA*k1pEcIF7KG-MIoV1LaG_IkIR+oCk2$ zaEJ=9Qi2k!j-VWlkC5f#_mqc4{B+G2PUUjj&}Nj!FOs)oa?&P8TcR-=(fAx6m;0jX zP2hc?GD0+$ENW~oiCBo4TWtIH+DU8`g~Na-d?mDCztHYpLvme=HQUM>D{`?K`S{hwtPYk%1${b7s)|cvNzs2YYRAq ztc)E4O14cKoh~eRaZ*y-l0;Mz z;Xp=l9t`NBFtdz*a$I3oPig2~l$C+3!0Q9EkPaPiLdIb1fjlYKvrA4wS9yt%Hgnx@ zqQW@?rFP5p&&$lw(?r1>N(G1$Gi8&9jTFJhk^o2l8C>@~m6ZAhC&9CFrmy?ANcXx{)u2E^jzaVnFx;T%xj@Pf){d62$D zW#kTPoQ&yjeW+=}!*!YHnvKcX7?qyW?EBD7<@i|L_kr+qY*aEw^~V>4B#q+O)4C|{ zV_seeLl_5SuF>^?TgGV8x1(JK)z=G3a7>WTQN6Rezbw?Blj49X`Tr8A+`CEIz#tEhq~8XM{pE)nR% zNf=-9D;)fkiTIq#Dr3O?TO1KUJMpxs3UGbI!|S>1oj@)QRejMX?pAx*CP#-o`zXAMW7~|?#Xl-OWO_W4sEAGG z5O2Zw#0t%+s73j`GvZ_Oyr_24MwgcStEs!>C|^2Jv+H(_+6{X~?CE>A+0!l`w$Hs{ z(w=+mw7uZEX?ymy+wIv`P1|i3PuWxUP1q&dMr~3KOnYw0jvZOBJMKMfAG`Cgz5k9G z`}h~dyl@@o8I2Fmj zc0p;E?-{j^zv?=B@I=d=`ZJ$2+lDzVfr$u1BI8_>j5hMZvpJveM?8<3z3bQIm+*)u z>6BZoP?I>n%h!=fCYJZHy`C6GFw4x+Gwa>Jos)FExU6&}e{mUw92wrCU?CIfWs{U8 zpGIQzgXH*xpACNP{TbV*HCI3WQq zmxv^s<^4$aC}$vW8vaN~Z6EP2A3hDpdU_1vO3|O4vkq_KiAN=;6HgsGzf9HYwtd&6?H-?0w+`EsRK|ZC85TeOK)N>DYM({T%l>AsM9yh0pOqtWYGKx9 z7ix+Vsr&^#Ij^cMsLe;^P%NU3FeIVFI_I>(H5zj~pzZxmgjCwJQ)UNwxCh7*rhzc* zBWmBp8GGigC41>D2kc{qYWBzPx$nX{8PIrMvY z_2|bqDZ`!L6n3oCuX0e%CrS>=t{=bOj-S-Tx87GlH3{w9Ic)#%ombm+d&epVWiwHB zP!7mJdHEJ`P>wBG``4dlcRs#sFaF&J?CyiQKK&LZUFbL&I4`UL&nb>K5%|O-MlE+{ z+&LMtS3Yy6z2R#wvLka%+xs7G-x`}~3kT&lIu1%$D^!O#FX9yNyJhYG(~Rr}7Y42a zC@e6L0M^EtcxVsqx-q(eY|iYUhnz?ceVG4xA~E^_Ch17~_cYw;SjdcsvT)+1hfnYc z1j&;{^+bpSUQUYe-^T9*I}Q<(x`Z)CC>~zYIfBRsigIC0x6PiM^u|dDFBoR>#%fid zOFm;+{lf`yT#JkcPa~r2m=Kpir@jSAN7Nru*=*c|i!W?Usqgo;X6@Nm@3iZ#+HIeD z=!pG;Y-Xcfx7NsrE$ccN(PTTO>u0R3ysW~F$|;cpvVFX6qZ5-hHY{gBT`*2LQg=x5 zd5v~?v1yIPhBU0%k{prwrMAt_F52w;qRlPMi)YvxGzB{9z<1VK)Qz`T7`u!ODEg76 za1tXGa1bDOV)ABI9OF3N3hDy9w09qbIL2gz`NqoftbOj(l6~cE2kfJVm+g)3kv(J& z3Qi=Cc=mT5@jP^LaeWR7-G|Q9D_u@yMD;6d0q|4PzNvKsG$yAeJoE}@2{doAyITTs zKHqcCqTR4>*xvRnSGtqoh6QWPHhfJspMUKRd-=0=*-O7*r@i#~yX`BVy3206Y+A-a zJUm~7S5C}RF4<`%W-Hy>+04>}K^Zm5M(b5ev)-W*jICRcY(n8=7zk^>$r zVA%?$83LjHs6|H%DTG|wrqiGztf<=8y_O^=Wj(Ers6Z*NKX#FBtkTpp3AsZApOCXc zg*=^5FF&D7%4UK|lD zD^JqTAE}A_5er9A$RaL|L7p$QLocFiKGFf{f9DMxIV`NIu+kNI(Z@dx509cmEcoy= zX#0fOj;WgMo2uI-+uC-?_L^PJr`C6m*fkezw_C3{U{~##v>nZsUAJT0KL66)_OyLd z_AJqJFWzR)xqRB5f88E?{!It$c{g5c&$#+hyXB%?wtI5S>hnu>^2kwp=z$~lsXGqa zC+<3I|8VMmp-Og?>E9pe)eGu2w53=M$wBl+r3)@a3<^y! z(>sUlL*I3cUB7pojH>g74wR7;u$l@GO~n@VI(h; zCE%Ci0&eWNgXfs!7nV7p5S!%#zN%4roJ3yui3%~1%(*)OiYSU;LdnW46;YsEwLllY zPLR)pz)cNx^0w(Dd0-&jiVUao0lu>m@sU43wD(63Z%K1deLHQT|_i;Ni zH?Iq=S8w)5Q?t%q-68zfFWGMwZy%`~l+DCec2KzTF%o?BlJHQ&MkmJYO<#Yxefdoo zzqRo_Z#`e^btMrMfDDo$DYhrQITLuO@T(>JuMZ ziLsEMAum7VcwSNPwwju&hiqKVhW{p>`VQ8e;$u$7ruuK>>71XBfoD_+RC7qemi4c; z%&~3P?H#d;<>)UgHEfy37SfMbcw4faOM$! zWQ%zH{_;}Ni@j*OZQdE{POFVOI8MK$b2@}G|6H5-MoE)$vv5v@= zgY``}XJL zuj8(crDof{|1XZ(FTe9(XM)BU`UJ8?(9=P|vgQUmfm46%fc}hoIa@8|k4cpYfZs52 zCq?j;6DAY!Bhn{XId(ig2oWog@;XC=Im#jNRg(mgdrbfVcVcwJkaKh(2VFBcQ3O$L z^h=0zN0M1&*9nhVh-YP~*uNo^>xLZC3Vkxc-d-fAZ4g&L@&55KRg^b2aBxF@fUJ}i z$F5(@Edib`9ZDdsh;Lb4&U9OS&D@Spja1$&ch_7eu)2>a)p$a}K9BY?8&KtlH0E{5 zw5?fh*skFr+qGkx&77FCR%2N5h9rB*hR51AKDy)|KpP)#+vxD5P4C#QW*pbG#&66l zTVr9t4llLr_)Oat7VCC+reW=d+#lCdeaRj$2im0$Br2jK5cTrY$o#Mcv=>*#yk%O8mW#oV3T}0CkLYg$)B^IwxoR_PMEPuWp>M# zX#A%o=JSr!zcWpH&v##MFS}Jv)H=Xw-Iv`sX>*!f-gn0d873_I78*0O|Kg0<{r}i$ ze}DXmb5cS$9mV8^!Its%$2$S>@B?cF#6vpuO>>8XiJW3qAeB)DdrQLFlMh)Odo^R| z3EV+qf*~)ICZ@;;D?yTSeY(`p3E4<5h&qK%DUz}{?WI$|9n=&q9#JV1D^T7hN-WYv z-flP?L{KKj9!M%Up+`T)Tz1U4U8Dr&FD89Cn!IV&UT&#NTh@@1u*91$3eU(be7Io`AF11eM_YE!{quJBeTVJtM~>M8k1pEdM;GLnjM|Q!+id&xVcWlB#CGo) zw_V%EY+|CW>bBG!eA{GRm)4Th$I+1O@JBk3#-p$Jse*jh#YvU)aVp{$i}}30JIzXi z{QEBn{D>j^?(ixcIpfzAHDa8 ziW!y9tBmpk_H3K5r(C(sPRQ~5^y7=R%y=nQ52ZIjx_t#m@aJPfI48tWc!zpst8jks zj(g_q&p$I~fAoo2d+0=ToY@B+T(Y++{!czNYoFmkXu_utE!v-bdd~jz_F4PDLtACS ztZ>dD6r2kC^t^Su+vWOb>@iHv2wLQqW3DS{1# zaZ|@zyXAi&8o?iWH5oJDCPo+EcD0_lLvb8yEy(Wkzmd# zLpdr{wX;$r@)c6*ts|Rn(aqmr5|dAS3UW$wkQWMFX;Yk%Akus@FX>D&YBRrk5{1+1 zJR(k!>4KPCm<)RWKIR(c9@yvy91Y@F(%?&C-1s)jBxWYxMNQ6f7@QjFzlO@;wU~zV zYz%u9#>76#=1n$%VjdS&s2q)DQJe6*mvYDN#JZ4Stp*&!Yr`Ei?7_|*KgotkUg;gdCcQWqca?KUnf5|UsaC;gDdZ*dg)qh_wL36HI?Meyand(gh(7w)#NdBelD*jXcV zeCJyZ+E*(6<-h*0Kl=>)?0b*dOMd=td+9IUX9u^+6Nd`t7P1=ksS*1(&)tA7(+KF>)Hl~lsxR9ei zOzi%K3g>`?C?t-^k@0WioOok-Y++w}f%ar#W@RJZYKaNI7oym*OutJO6(60GzSNUC z`x`xqBb_`!I5J+oD4ZH6>BEn+QRg7q*WcXXs77L92{o0aOKvggD1c+c+ak#QR?)fKu1hjyvj+vHc(?dZW}d*r@D_UOIG?Y?`C+r#%iZigN| zY)6mI*{tfnr23C&R-YapwY|G=T(;Y#m+i32K640Z!`G^ z>eK=B0b>f?hg1g~86KbEP%<_c3r^@sg=kRsAUaTz6W4-Y4?W=fagqqN1=U}YC^jGa z0vq`g2uhQ_qI!c|s!u`mt&UD@e_Tf~6}AW%_Xn;RvwwKim3Hl(!UCupmu>W-G5hQ9 zzS5q3>FIbMI{QcMjo*E(z2p{kZiOc#c8w!Y#w{<*UvZySZL(ZxMpTJ2_L}7S|kQ3tY z#LmI*?wFlY9DqNGE)Y%uz{4tLBreaoVz#&T2o__&iJvn*bS4~O{1OvTTs3}pJb zWVkaS*)!6CFQ4J;ppTaePa=u%d73=%oAjlE= z|3Q27;Bom&E!#FRZU=Ua+m-vq?BYENi?;8XupK)_Y(mX6K0YLWMdkY@a4GELWv-)p zF_<_gg3a$f?o)J;ta=n6Oyv`F-SEAbaq%t4nZrR@R&)7NR#xXq@alWW1rGpZc;j|5 z+D&Vb~_u-y>gqq|J$##e|lqg{L>Ch+S|V6 zDtq~DGFBCyxX`39B!lp@%eUDV@)POTP5be4uiB=Ixn(=m{m_|WmyDi270_MSbFbkO z+?}#ssIsowqp^41ofMVt6KF->`2YsIACPk)L!i5CjpT!zT+-ZhaA z(NW5h6ME!D5XU*+DH-7opL`;JJjFCZ89LB7zB(Y{v5GqwkS1atiQpJ4DLfxEYc{Jq zGl}?Bx>@nfYGMp>heZ>e6Ap$7f|#_u9a0#F!B;fUNBPhNC&3@(AOj~u(Ks}|s-p9` zQym>}&bgh3d{svIHKF+=+)`ebqdfk&L-}Z9Z)ZVG(sATeHpvixmo`we6Y+T-?+;xE z9#(=oPAUs0D&&)o@endt&G7Qbt1-q{pzf?rP=Ahc6kE+PTW*YMULLdNOv7dm9=5~x zKVtWNR`i+2?4bvb+2KPo);clg{>IL+VcWfZ*!Ia`*{_R#*X}(wy<^ID@7!jS+v_&I zZP-Sp>Q?7-0s2p|zIUZYJBv8-NXhrL=*Uu(J2H4~3Og+;>%9ECwtN-2D(bt%rH1c^ z9^w&OQ>5|O`Q~n0)#k%?LpGxETJx1CNMZnOLs;F?c?_o$Xf_dJW?uccpuXiNm5+&Z ztlr`|pD4Y>b7H<_J0{XehT{uNLM!9x&xsy4&edByn~1IO7LOc*OLmRgKfLNXyF@-o zj@rNel)doT)AncIbeV0#7@Yy$cK57(>1!Xbn-7fHC;zSLnc+`9IcG2b-*;<%i`n=b zfyw#AV`lIBZTSj2bS{Gq{7#j0kvk|U9>hd}H7txS5h8vp=OT~CO5r^URyn;I!N+{kQ>O`*q4ifpCU%VXQWm03}LM`fxdfYJ{il2a%LzUU?~qD z;-t=Lh>`b#Ng$60y>Uh95VD94ptn0Za#BK!*T{x{D_=a{GU;cmyRFA2HlRMP~(js*hSo9 zG?w{wSmzsU`_RMl_K0p`ACPbKuzb%?KBkL3 zy+x5O^D_qX;Yk^<&mJ**NM%sg!BZ{!=s_8ia1PETFm4o!&Gc7UW!x}wzMq3gksH3m z3$dEOky+I@u(IMHV~TUa6`{m zL1H*{Tz9VO+!;A2(41&Vw4hFJh?b>?f0-Ck8!>_S-F`a8xlinn%7Os1;Ii(}8{DlY zL>hCYlN60dL_Sf8eC32y6V;s+6MqaO@_I=Ck8@%V2}j~WrzN!?`(6rtM7^$xh%QL= zgO{cbSw&heg1_9E8G7asMc?35aRd^zDk3i+54w3o>KBS`H+4xgZE1ed7EUbM$)gK) z{IO$p?4hG}?2$uu^vH2Ldia#h96M$6qNUk6WgD_RyGQJb0~2=rRpWO372|fvo^ji^ zcig6@CTz!K&9+Z2+xGFA?HO&_?uoiCx3;T3r~YWxr>r?LZlhxw=NkWPj;-n6k{q9z zR?}t{n*L3h#^Qpt+52-+G%K1vp>Zc-FEIL{k%%I#$>@TDR->buN}_ z1!WVl6;@CH6CoFJ{+NZX9jn{(ubZ|%|E9}iP|mEc|LU$;d+F~#sQFCg$jG?S4zM~i z&P;iZ!Aiub$IL$PI_V&T$i4w4Zl3-7l6&F{gz@jpIGW^i@JBirJjMAZ{N<>ynGjxI zwV+;Uvf z4wJHPidEk*!3Te0^BE+poA zA7 z^aYMBjaf8kH()CRJy*%n6S;;$Ey@wa< z|J{Aa7MAO_D96)3o#!_KI&yP>!|VD{a7Pt~$0bDbrZ{p}*dln@?;o^h{f~R?#lQ2Y zZgNid+IPS8pgmjhpZ6>G+rg8ka;1%GpgYe*S+ChsyeY58x;PNGagXi`$><0H*}MQljg6aPsoR@dsCb`G-n4NK4tgb zbJFg+7>2#Sy$SZ-m=?1|LPrf+hx1#;@x{}d~8xq&`A0ukrZKEvQkD{`OQY6xc=Zt2U@kl z7Qv&ZFh&jg)vvfn9&3z1vt#UpKiaVW{^k4ZS(k?;mYu?Q9bL8``igz_Ww+?=vci)O znr!cRc*Z_(pC+XV*WuZ3^k8<>(yVkx!!O z=x-5aaY1Y%!@*!R`lR}A_LMGa=%m7rCpseHag1m|v@Bv`jcPE< z#UzftDicS@H<3bW2eB3Y8}-47QMOK)$PDmBe6$7Oo+KTSj{|^SJig&;sQx@aLVN>m z4{D+pc@_3m5@e{bSoV)cJRVj#IiYtz$-PN`Ale4`=+^yAtPe>qcRsp=Wdu0VKq!Mu z_}4&Wr_E4>tcVyCksks@`zP`@V-$!V6687{jyZ)_y&F3BHq|%@@>j5jZU4UgcFiR_?Y677 z*>i5%Y0tQ3huwVbPP_b)UAFt;9kyfdHXEMarW+q!k4$Me^(xlM9ef&rcZl*wJe{}> z@=6D)M?9O0(j%Uy|I)+uniuV|SKP*P@YDFJ*FS16xoOhA>6trHOb4&|>%+ENch&#? zc{@`~2h}5@cMIW8Cnc4lNJVyJ3I_6`xj^sUO{Hn#ECmf8S9v|b07l?$zu-s z-6t8YA1r1}Hp=UFe#%S|j(|VfQJCyJdWo>q@^W}X!e416LHy`T5RjLNiFyW04&uUi z2jD64!=OY~Z#Z(ABh+`KM9O5JOv+kJ?Cy*ai7e^J-8b^#A)0(RIT7!xO|(l{X(40= zU_nM9i#X(^a6iN&9tT3`6VCApi;A5_tQL?Iaw)SPoOd+^1d0v)X@k{Jlm#=qwB>5@ zvpVE#WF={h;)6*Z1;25{% zWVjH24G-|fkw4o~R~UkPIt z%_~8;PbRNdsnLph3BBsETKRzDmf`&I+;yV?=Tbq^4a(3SSy5!oVZPZ45bM(>%} zrHB9zV^(>5Fw>?CBtRP@C+SjG*d0){WjN0Mhdk*#1y9=wl{JKe5`6`e;#jru>w_|M zWEIh`!yy~h#5X)TZo_gAYYNwR+$#O}!2Q(Zn6>MBa{j|*5nI|p(M8I2%0$Lw*sj}4p1#}u_#5`Ga9aD}Q->P%lHYyI?s@D)$JnsSz>wK0 zPDe4xM46*u=yFfV`nBjEqcN*9~;O*H7Vx()bd2JrYxPcYI zPP&l?9C4Bo3RNhd)tZP%%DNnc#N-eVA1ttQsm`~zI90+ke=QR?kv=R$BqAo-N zq%e=V^8F@VKmjJML69q$WCwEb!3LbQU)dRO9H|zpL5$Hn>}HOWynqD%Y&vNI$p!y_ z$i?<4!jX#Tr0ayS%igBA>yO80tkCiJu&RKB>Ql-^c9PX~9VyJJOr-f^RSDH;eW-42 z>DbW-=9JF?KSUhz%gR+aE0|eo8DDEYG2iy@9|iaUtQn1iQ~cPK@80i#xAA5c+fMu- zR)r@SxGpsYo_Xa?`WnOR-WY~_iJA*U8KGdEIeFPUbPuQPC;Fa)gdOu5hB`k6Zhsj=lkv4XGmkO_*89gV--21DlHKK;=78 zu6QXQK0biP$H#DXd>;l&*vcEWHUi-o@<_-Zp@;`@fs|a>{jRb}q+Li%$nye!OydDR z?R*DCx;QD^j=JgGH>fJwN&G!2rSqtZ6%qC(6t4y+QdB{CJiz%NPkiaM7m<(okE(^d za@gl7@fHPTR8#*^PuiWa;ChOX2}@b0$QsDS67Gjcb6%Zr0kYpC>OeZ5t7j7S52Iz| z?M+`R4|{QV#Ni*S6S3-m04~}f&S^JRCtPrufbx3d;Et0AD2-&_$D<={;3QWd!bRH? zR@uH+N6aAte+0y;q3`DrKO5I6j=Y@HxBk-v$WmrEND4#T2=V1&exaNjzhRNTSp{F) z_{Hg#=DV6rU(HA0I)#%rJZ{cW7DRltg0i_Nt)RU8^@r@SlM6PiyWijb>Pzg}J)M#8 zy?=4YK6w9vol=MY_E#UUXIXc zd9kl}=3aa4SM9fHmPo(vPF<%m8jCI4zi-OE^oB`$-j!2!V4Gj_jR&uNcYH+tNI>zf zLjXSXCY@7w;S-Zj>M)b;1!M^M;`jYN@R3&y&T{>r@W)=g_>mRmCb{0fJ@g3{2;}Wu zAlF}ECeL!Y(Jr~Xh&vM?&zpyGbz~9`U84+lJQ4<7!F0Jl?rfYIrTGb zNq@1@>JDWwfKuDRBS)#YkjOuwgZi8FWy$fqCL;ElpnH_zy2}0CgNjAIYQ` z|LKL4?y~q|3j!mLSAc;j5KrH6tZ+{7S9i?W`#*WY{^@m7g>wSld!OPzbi_XIvWdbu z0Uv*K);{>*qxRGTHGA<59p|LNlL!kf`@dg*kvk_p^>#TF-0^bJPYm0k%VTF%ic1O@oUX3+Tz@t&Ckq=PU*(-q&4T|V6h5v>adQ9cn$aXQN=yhp_59VIiVY> z^!7{qaGbx&ijhtfch){xVssO^ffxB(G3n^-ruG?DIA}!V{3ZCEqK+8cpd4X)v9n>= zAw)rhxdU~;kjfw`q5(I_m~QS`osYY5)zg2!Mn~$s$ep?JL;NmILE<4DJ|0*3%8ugM z1WA4m6GvK^l#V=rRD z9j}bMe2!UkMM=pyo;B{vX!3oox;lFPr z2459Zzu{>3CRc@Fj@3YZMcLbw6*cA>-VRNk2Wt5q6XhKiKl$-5d_|Kq5y{kz^PKqO zudlPOB@qtdl5||w(H{*djAP4}Y}0QWsbnOIe92TLums6cOt}yWuW(i|sy_M2S6pI0 z`bE1_Ob7h7!4G`Z752Ygwl~Fez^9D=<%=(~KYHb*Tk6G&CoJNc*ecNEcgN$4_WghP zxc$gqJ*WYs%Q=i2s~=2`nlv~(|Jo^g=H-*JO0h26j(^efp3L6q&XHPy?qx&PIFopqvlUiKEs&al+asdG%Hf3Eu&M{LzaHD-$z!bWVzk zM;I)f`^1KQ6AuoHFQY5oUxQ6Yk0WntBibq_+NM0&`Pd+wfm6(CU!aHTMqUuvIWi{@ zz!vj3hzZ0e4*Czu?6yC`N=L|lqejVouCOn`GYLV2i7S)hX=ne<8wfcme|*_>1re`w z^zla~@JnZiiFi;d^ZNuYQV|N2Nb!zxyvTo71}Y^Xhd8Nsx<80OcP8jaNQorT{z0%I z2juM>L>%?+BJl=A{-CG=jw=&<&_>}aWKxvf-h7Y8-?Cz|mmVM<(NJzY26Y`!hI~3< zrQLr5f&_?)N0_}Vk{OM_!B^D;9u1{vM`Y=VNK8aoh>0;1?L;!Zm8fP@2il!wm1rR< zLy8ol0RhQ0G#=AM)gzuwL+KIEAADraUil0*bams;KeK3Gdfiy(%ibB@`{1%YWpB-P zP0*XCQ9a_>MC6Zn#?&|auQ7Ys7J7?^F9|bg`j3KfWtXtrvKua%usdFTjo&Db|J#pu zKD@R9y2#mVivxq9lM$wiiA^7XmQp#7*N_ARsse}#)VHF}PgJ9IJq~^wv*FlI=%JCbGL^v$I!X{8} z_;6})>f(2!)`Vm@8_MGpa7;MUx|EBT{zIodCORf{PPm+LVSr$(aMsYvIRRgO(@N(A zJpc0H70yY8vjnb#!f0(FY}3HtE3d08p+ypV(z>2=cR@@{u>2U{RvS~Uzl@=8NaZMl z>S0Y9q+#qKCeoO!Rt1@YRssE;v#v$}9r_`+rGo(5PoBI!UOyEE`LcdS*zw|Aiu-Cw zssL$&5_@%`jDBSWkMHZriE^bRlen*@usXrSj^eET5MBckQ?w)Ov_mg~ha>I7aD{xJ zQ|A~6iCATFy>%L61@d#^$(QoF?uq=7-h79AL#Q(F4Un!ni;Da~p#uuC@&yr}4pF~N zLteIse&p!w!Jv!Eat;(nlqXTo6gLpm&^(I48Fc4HQ9);dym;n1NX5{S0@AaFq=LQ! zeNd$qS3h`C-+7Y~YNY-tVNxBGD3=2L(O4(gc{HH3obtyT9w)wn z^d}}r-bC`p9qKQCQ%7MYd;bwZ98Agfaz#-u5V8s#dQhaJGK4QsK#5&W1Pm&(rm~#~ z(-DgIukPyTkM(qfm-^#$@TiHmCOuv3IAzS3IVs8!x^Q$vLPS#Mggj4?Cn;aC7S3*aB?2`rz;I!PJ70wL0kbN(hz_{ED0*y8c zV>*lOtguO-g;}z_urTBkhOT`-T*!k0-E+bq#a+5)5T6`VG+mX?dmFJ`A!iUoxxLB? zb%VzpD4qDk8Tx1B4jA=;6!!fxI-U#i@}ul1KM^Zdg?=gQpY7);UME#B+MEi9!xDtU zz_jChDKBq_`XdzDLNdbJ@J+1PG4YneF1vH^vN(FXCL&yr5^3*(C|_mxS5H+guhNp= zH~s3|N#_8ax#M%vd6~G=XBLgJInu`t7upGSg$07}m&aG=e^!8Eg>uqWPNF-9=MbSn zPP89wnRz3Dnr*uXmL5I9hGnJvnSY`Ohx0LmCr5_SQ!_kAyB1#2%DC z|8cX)?J2ShH&lrT_t*yl;tBSePzLs(u+f+aWT56E4@OeN{3rUFcbbJj|R@5G0U$dmIFiNSy{jZs!= zh;rRTAo349R{H=sWgUn^e}_)Ew)}%}XBkl^fIj8xsn9V)%Cm}t0+i&x(kTf%pT_H~ z9F)xkPQ=*&gT8W3&Kz9CN93UV$q$*0PRl{LQVz;bUpNj5z%cvfSA{Pm=LCd<@@H~T zrsSaX9n$%Agk>&Sc#_FW(wcx-`FZ7$>&UMq;#YxBHe&Q&HddHs_B^Y!cdqhUD9Vpa zDT0ZO$1EsG(wRInUXMP36~$#ja(TY;Aszj9kn)7oKIO8JOB|~v>}~N!OP-=EO7#6T z(na5Cs-*iAwdMbU)Ib?k-U6BX+BhB$nQZ$X|H%WoAn9mVqDCR62{Y$CW! zxTlqBNotRZ_4Ds)r6A}kP$>p2fQSXt1Z zi|jZiP@I=32j}pzT0vJha%S3r{hq3eKTcu{q-gR4alTQ64lA%hp=67!c{oQN7d*5n z*Di!JxS9!yJiLjOsH;nQLp5b^(bB%7ne$Fcg$hqPlwUEdaBi@!W|z_Tw?-gkbfcGO zU{D|vs4&Q?3+#-I*yq5+$X*A3n}r)Z9gFX;Vz^ z+d*m{^p3Y?Al{e2wDG_Bv-W9r?C*;FntuRN3I)p>gRreBtKl0<4cvllKI*5akKnJsQ z>784l!jlb*eHl34R2CMb!Z`!YKaj!Btvi{RWE4mAy1Okalwcr4m-WfZDEJlOzn?{d zB6(9J$lnlA9FO2u#AoM0z8@oqbLH!b3nD)9Azy942kZDbe0OeAdM|Q)c;kdTnw*89SG!C1|He?qXnHu`Ap)xdBU-X z3sRmkKNGBnbzCv=u7{8n)GMx>mdIBuWa|B^pQW^3v!H>)Htx<13D|Q&9$_x)k!IXZdka8Qv};CiPWU5ke-%9*8mP^%mu0m@N7EW}>V= z=hPwUlBWd$9FuTfRzq1n8_W5X=h!@)%In)~6)IE!x{A2#TGHJhzg6Ntd(M?r;hZ9x zJd9%i16`VnP6I|+Iwn5;{3yLDvK~H1_i&4tXOzD zVd>%%yhI0KjB{|_YvSo!&ow|ba#{=Ucv~grE~h3%Lns-KhL#es85{kB2RY>D2oc90 zoQ%AT!l_^uj<`V(GJ+^P-eomADC`V(eS4ZXjNm)V2&C?2f zDX1%oPbaJy#UHn*0`XWS_LX=Vq;n=79lR(I^(CI8Q{w0MaC}uqM4p_d7a}d>cM&p4 z5QTp111Udlg8cg>nnj97H0gt1o`<8z+an_oNAz?jASJ?2zT)F;oRk17d{IYOaCTzf zPT};Bfba~FmuPpK;E@vvulJRLLGTsw(-9EY#ZUrKB*)Ae`GcJ>BSw#7B}Tj)heWmy6px%JyB|<9san7v4WWzV_+uN%>IL#qr@YVN(M{KkMnY*&kQa(}a7T!8 zq;rnoD|j<=F4&tMY)(i4dd6 z0$I@}>@^u4(UDCn5KtWLR%)NhL8(w-O=MRpZx-~m2o=sAvNk6e1mZ~7&{Yt|y9}RD znM5H?NU^-1QyBiB^5g{dip%3Ee@*0tMo%rbT9TPBc&onN3mptS%yZSC!r47{sSjdkY2a%jmN1TsfN{CZ;QV0-H;t51jp<|AapMg3D-wOU-P#^dvTx6|*f#hX~ zDh<*PWkg<_hRp!&S9ly6Z|9+Kwqy1DF=Yq!Md(lh6SY5%QMey5 zw-x8`uR?_*BN|R|(Pq(BLCD(>5R}@;_19_W*$b2%6mWg?$G?vvS-eH$y03y1j6I#>n$e9N~Jkp8BB?Cj5aGrU5xDh7>qAq7NE(GKh zUI!-`dZ<-7C>1JHxBw7VvKL{-u$)XRtQN>YaAGxtiBdcZGFK?q2cbfg zS?I5JDnE`14$YY zMkR#aMez!7o%r}qQ5ooo3Kc3;xWIwM!}?+6f;h*b%OJ-i5298h*vL{2bBFDe!tMk> zi4P*JfYL%pJW}yTElgxQT9RO#6VI#o2Iow|;^VEEoH~UnP2u7ZO_`E>-0=kCde41451_Cke>;5U633^d437tV{x=gzc+nAR=l(D zkv9LJTtsjz!OP%}PM0=zE-^ z?Sgvre?L%ms^+>7I#U!Yi!LNx3$C2vI6z6Q%0a16p~4dc7`1K<;PqeHAr zuvyeUuP(maZZoOm;hc!?1@dRds zqPo(1R19&{YpuHX1p>%Kd9=SrZUD;2YKpgq6zY1@XBD9&1^FL3lzb~Xs{>f*FaIDN zV?#OzNTVwK`nhOx%19s@&~`nGjJy!}a9}}X?12!EysW6cKoojM-|<^*MW5$HT~{eL zmy^p|4??^j`I91WnppkwzU@ST%0a16p~BV%hBzk3G7Vy&3qyz?CXtlcofSxNzWN{| zT@dGKLd_{axhqKW{ljG(F}BJ;QNAjocwZ3-UZru&WkY}?dkxC8-aQ8^1cN-BgLoz= zW``0_Sp;>WDWf?#u8PQ<3EIfy23$nQNwR!WkBNOPM7~uf<6Lz2$r=bgbu2p4F44ze zpmu_A7GhlaAc3-ju?I+sI&s`cKSo~az|kXA5w63i z5b>hQL8(xo!qx|Ns~2G)!{^|9RbU8v5l9xXpeUde&!dX`5lI(mlJrLqaz^~^9!)YH zhqI&jc+}xUoTwjqsR^yCz5y8VZZP+R5fqyVaw46Ho5_(0pJOqLbh42>Cyd_Rm89RHJ_W!QN7SRbnQt)=LXWOCiN}x%Cfa-l#V^o|dSSJ+GS zjMEsa{le=(7# z+&VxOR3cl12L=vEULK~u7lF{1b9BaONr)uc8Op<}0!9>O(v|XYn)la0a>@vWHiEVC zg_5*E0#S@Js4qe%`Z)tpQ9q9KVNXPUh=OQ;+Kpo>IG43vgy^1#M5v^HFXXZ|s!x$G z1u_+4L~agP;^ec-{2oJ4*|>5J544uyB^{XyQoJ88ukux>a6aMVRL2GV;TU6_^I{CA z@LGV!zsW#8oyTvR43hWBj4*1n8Pp3jVN5Oqkp%W4_Ce%Uw4k-ni?>I#R0^+teCkpAIPp>$ldaE;f_Z<%BF={EdA3k??gmBFw*;D*I#bUG_XK&P z^J$m}D}J-g0XpyqvI}wENB_-0xk$gJ)DZsTl8lc|x!n#5nKoK+8R4ON&Hn34ue2jS zd6PZ*<2Tt|ues4|wlv!0Z2aLjUE}1A$7)c+J>!ZU*8ch1%x37A5@g7qbM>SjD^xgd z&^Y~^%O~vkPv2@+>=`keZ`rSX%@y|WkKb%|vSF9(p0f5Y+-i2J#~98bCuDqN$et!y zT!)`~<)nT32XD2Vlajg7>+%T=uKO7g?Mhe_k6?J?g~u%H`@jH)ZHo`9!Rz6O-vrta zuz^XR5HhSV^&oC23!^u7JIY$u+yQfBh;T3Jht<*&25JZ71Y@d~*G&h&jD$Zh2tthK zMJ}?|K$No{^vgqh6uE*Y^ohqM>2XbrPd_ROVhDtP7;!-^C)z$_rZJBU+AHTLc~BsZ z8y|j8sklZsDuJ)Nwni0Sy1qI}t%S=GQJ0?eC;@&beN5Ix^QILybG&ZfP@6U8dpIcT zsbCJ>>3z?0_t?#Q&GvlHC+*@N_>}$dUmsH8Ds)yFW1Klkf#dT{Coc~tg)|%xUbUN} zh5`mgJWFyu9;c0HxVa<;UYwF64SUbGUuAY!9v2OaOwu8K%!7FO98Hn>Goionkx_Ck&>V+kbuJCDZvcZd|Xo_0iphP~%0)Ka^x1@f!~Wr>F_LLrMu!KAaT}wrG7$uLq>}}$DkG2b1FNP!!{e5${WHrY+M}Hle@~CLi zd8I<90V{HP)q{ABWnx%yB(D?Yo~F$i;&KFb?;f$Qd)jvUcYkrvOkvwKYJc<($LxxW z#_dx-e3KphZ#Uc9zUNwbOk-+?cBh&$s6Y0V7g^&MZ?$`W{6_nN8~50ozx`^(H|)|q z+w4u>d5s;D0mt{yt);#3Uted(|NAZWiPv0jSM3|Ow|xJ#HloSlvp;*QjgQytH(q&} z&HemSZ26a-Vz*tsL!S7s{pq(~XCL^1>+CgOvR`f7a}-smaAwf8G;K zVxtqo_SSE{!fx3&YVDuC*$&M#b%8G1C%^9+JNRF3u@~RA-R$_1{f95P%&&vRUwn$$ zqYL)U&)H|M|E6o~(Vx26zTmoP8HFd>IF|wN4W&?SEU|uW)x;ulLoH&txcE+q^7?Pg zh<6BnOkPU!FmYH(?s5lgH?romVdO$Ea+EK9dhTUWQeIfFm(eeN!=Oxr(oVEHZPf#r zYJ-6cDU)v|Wy7izXR;a;Q6}|8#X*!<(LSX-q!Yzmy-(2e1-JPnz!QYLLWh3HGeC?z zDodMko(?&!CC~YkzoxOv7y;u&4jZXYF%;?LON#S+{@jdDAxE zXxpj9rhWTYUTm*?+D;q!wvXD?Kk{k2=UBs@cJa6rY}?52klnI>%o+;&YuhtR_SLVu z&z}9O_u4z}Yua~x-fnxzPu^(mN8`zx0y5_Owf< z?SFspG5d%d^mpGsYd8Gd-S!Qiv)x|)Pxjka{nmZC*E<&-u)9d`_=YU zw@lf^-}7;M&u34`NIk*ExvvuG=s)w%QRg03&HY@2VZ#tYAYRR71$RWG8=1n0cOl}i zlxKh_JIY@-&?9IK1WOqGC^roJhIQzN&?^d|!8Z#bS45Edtk+3N*_~DcydZD4eucps zV`weGp##mrG4B(?P*0GN@^MmnFp(V14HY^EqF^XFDTs@xF5Xp8To*~6KT_0jIsG<~ zKk^|eFE8>809gA`h|7uMQ=L~jC>ybD%6ELe<$F+S{%lR9Ky%A>(VkKJgI8W*-}#)~ zwtc)NKLZUqdhF93x({H@WzV8e6 z*v<|V!jCNm?1*{Wfp^UuDvyD(S zFE{GAfhr6Rgb%t&WKe{{ss#Oty{BFr2SK!hxBD8EC)xS+hiwGD5{LIo1D4<`aG}f^ z2)RtGxv1zHMD!eku8ashIC37DgpeC-L4_<50!pC$B0Gfo@aAn9GI}Bv=8uqMOY+A@ zUHXR-O7}fqsyM{sIzE8t8IZLGQgQugbF7&J&7NAeKe_#+-TuATn;nya#~b!*Uw@fh zDTm?s{IdP~U%J~anHu%gkP(%NWAW%r!+!LOrqiC0w%vXI3A=HxjO^%`{j1N}*7>rt z8oVz4E9K~1zGK3^{kI;JuTn4U@JL-3%g%B8%exlrpFd^XWsP67!>-s-w?F&LNjXJg z8r_^~R;bVy8qY@$F32~o*>kTRv$x;3VDJCfQQJRNm*Y{hg%fg8=34f*_srY(|JDQc z(|`1cuMR%*@-h358q=RTylm5BHFw6hkBoH2zQk_R#WJkBe-;4P-}06_mgL0L?MMIg zuzla_9#u~|I1eB-I)YiU7NQ$ppcQPqtgE^(Cp{A2 zhwRj^-DanL@m9O%h}rFj7VYVmjM?$u{~Y^++fUe$xu)HHbjco*Bk|h5c+B4Tky$(S ztGC(RKYF8W-(9!=^U)bQ_Ft~I=Uh2z@4J6a2D@b+d~nh3KfYx59zSVEf8iv2TCQ4m49=xnUq59pff@r=Oo(sj1YB1V5;N5I;X;m-{*l=LFnr2I`MMUw(M2P%VY(C zrvZh`0cD4bC@12=_sB&OE*Nv!Ia2~`x%`3@=}#_#AJRGdQ#>w3g`+|qRkg^!7K$>X zoFED1=qs8c93prqgE!DTUBn$1PA7L@5$2^Be_IFAb&azVx+c_Y+eH*R81R}dy2b2Y z{*l?-u@qUtq6$rqad29Ese`u;D3_H%mQT{78yn*-2b9z~<6d`yo?rhvUY_zJgUzj^ z!5eA53?t&L2tYcIeemwUq|#_G@=R8bcPeZU^%1i}cbdKKUuwKfneD&9>>FRJc@n3i z2N=JM^$7;M!1#=@%5Lwt7IbRk`m?Aw;yL&I62yszVLd4sT*RX~GOQ!a^$_En>w|HQ zk>GlIqG3qa?%{jP{`l2u(;X>tgGf!b0_x(G2xhgdgL7z76mhGdToze2#SGQIwF_gT5vt|r_iI%YEK!_KCsq%)RFXI{V8-H zqDMOniYPDO*M2A1ja)J6Qp#AC6F{w^+Au+Mx+;L3h%ogD3VxZGp2&FyL0LEQ_d_^1 zTdb(!I7S#Svt+AEd2)nv_5gY@Cl3S!P>B#kM#{_t zphmw*ZoOdA>Zx=ez=~7Ds)qyJs36438^<09c0cl`S4R<_Q@I`1(Ya+&WM@?+#1)7L z^rkNHSR^5r5d^yWlSu3j`l%3qr9O>ew<{?b&~Lu)Mm+xZ8|R5gLqsp?DlZ}Q30e)_ z&nk~SEIj^+A8BkZ4(OoJJ}AKvs!*Xqg(nKIY1sW7{LvPcM0 zzM2YZ&4_3AG`0BsAjSFjS$Hc*deX1nw<2WqB6OxKs^2SpAd+4NhpQA3sU5tWv;weJ z`xh%b8HfszO!i$>jzowA%7FT`d9Z@enPWjpbc&7_u~~RoM4UTd#8U_ABJ%I8NHHhX z*PRI^wzqZCi@$gV+zjelVXDS82njBYASCqpouvpLky0e9EEtWjVLQ6AJgy zBch{>O!R5Mg#6ftgu@(+9O-}YxU&&n00`l!zx-o#LPQ5vlv`#<`FkrjAdrazBpEKA z_NHJwl}>!k#^s=_HJGRyJUk=XbB)&A827OzVW`5RUhNqTvKq*bW1T~B z?o@$TK|!xR{j~x(DdC&|${>H}jO-YsdHjV0_n>L`v!py?V*t@!YdMG)1Y#ic*lnI8 zPonN|;caE$q>N8@!cBGDVmAISIM7Elya$>RZ$oXM_ zsAH_W=#ZBSdNjf5ys3@_a))^}BpyWIH*m`19h9#%b&7+666@{owGb7&(11tjhC7zd z&H%K551t+%4bVn(`~?px#2{jT_W>;Bx?YH5)JQUs|_ zF%f1UEham#uDX*M`AIQ!C4aB#^#dY+mm7+%@u+1a(kN)1&L>$=mkqj+jnx6-A&*N5 zMY;my;o7WaB72q3PJlZJY zlJ0@f*UN~L0iBd!hvJC>;JjycMRGlkXxwsbdQ==GfUmZ4t-9k9f(JmavSP09DS`}i zikPCEgD;Xe$KeS%IXEwuxnd54Au+Mx)`hBmY&?$qo+lph5E%t;6c{4vb0#vj0xAb( zgNVxDqBEE{FM+7aLD?GU8s|OwYBLZ+qKx$x7cwH>s@Dum7@|$A7h)LF$zHFG&|!ed zERw_i_G+(92Zcg3B97cDI+C<%dj~R^Y-$aedEfP_+raVzNp4Y=+PS9V!1)urT>YV& zc)a3rCe;rL=XyFHq<}x}!M+VR5XcL9$qNzTzmD3GG_p%;Do){p4>etOn9C%I6Vr9fhj-FvE6nEd`HH zFu}Nv$z(MYvPA=l%M}D1G4`t=Z=PC4w=QqR; zIOd})vOz2QHyA<|=P-%<+c%|g0wN3WbUGt+3oynw7c&k@_$$EKlrO%LZD#*JWK}C2 T7h)D%00000NkvXXu0mjfK$-&g literal 0 HcmV?d00001 diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index eaf60f5ed2..a92afca98a 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -43,6 +43,156 @@ Process: ### Create XML file +Let's start by looking at the basic structure of the XML file. + +- A configuration xml can define multiple *profiles*. Each profile has a unique **Id** and defines a set of applications that are allowed to run. + +- A configuration xml can have multiple *config* section. Each config section associates a non-admin user account to a default profile **Id**. + +- Multiple config sections can be associated to the same profile. + +- A profile has no effect if it’s not associated to a config section. + + ![profile = app and config = account](images/profile-config.png) + +You can start your file by pasting the following XML (or any other examples in this topic) into a XML editor, and saving the file as *filename*.xml. + +``` + + + + + + + + + + + + + + + + + + +``` + +#### Profile + +A profile section in the XML has the following entries: + +- [**Id**](#id) + +- [**AllowedApps**](#allowedapps) + +- [**StartLayout**](#startlayout) + +- [**Taskbar**](#taskbar) + + +##### Id + +The profile Id is a GUID attribute to uniquely identify the profile. You can create a GUID using a GUID generator. The GUID just needs to be unique within this XML file. + +##### AllowedApps + +AllowedApps is a list of applications that are allowed to run. Apps can be Universal Windows Platform (UWP) apps or Classic Windows desktop apps. + +Based on the purpose of the kiosk device, define the list of applications that are allowed to run. This list can contain both UWP apps and desktop apps. When the mult-app kiosk configuration is applied to a device, AppLocker rules will be generated to allow the apps that are listed in the configuration. + +>[!NOTE] +>You cannot manage AppLocker rules that are generated by the multi-app kiosk configuration in [MMC snap-ins](https://technet.microsoft.com/library/hh994629.aspx#BKMK_Using_Snapins). + +- For UWP apps, you need to provide the App User Model ID (AUMID). [Learn how to get the AUMID](https://go.microsoft.com/fwlink/p/?LinkId=614867), or [get the AUMID from the Start Layout XML](#startlayout). +- For desktop apps, you need to specify the full path of the executable, which can contain one or more system environment variables in the form of %variableName% (i.e. %systemroot%, %windir%). + +Here are the predefined assigned access AppLocker rules for **UWP apps**: +1. Default rule is to allow all users to launch the signed package apps. +2. The package app deny list is generated at runtime when the assigned access user signs in. Based on the installed/provisioned package apps available for the user account, assigned access generates the deny list. This list will exclude the default allowed inbox package apps which are critical for the system to function, and then exclude the allowed packages that enterprises defined in the assigned access configuration. If there are multiple apps within the same package, all these apps will be excluded. This deny list will be used to prevent the user from accessing the apps which are currently available for the user but not in the allowed list. + +>[!NOTE] +>Assigned access multi-app mode doesn’t block the enterprises or the users from installing UWP apps. When a new UWP app is installed during the current assigned access user session, this app will not be in the deny list. When the user signs out and signs in back next time, it will be included in the deny list. If this is an enterprise-deployed line-of-business app and you want to allow it to run, update the assigned access configuration to include it in the allowed app list. + +Here are the predefined assigned access AppLocker rules for **desktop apps**: +1. Default rule is to allow all users to launch the desktop programs signed with Microsoft Certificate in order for the system to boot and function. The rule also allows the admin user group to launch all desktop programs. +2. There is a predefined inbox desktop app deny list for the assigned access user account, and this deny list is adjusted based on the desktop app allow list that you defined in the multi-app configuration. +3. Enterprise-defined allowed desktop apps are added in the AppLocker allow list. + +The following example allows Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, and Notepad apps to run on the device. + +``` + + + + + + + + + + + +``` + +##### StartLayout + +After you define the list of allowed applications, you can customize the Start layout for your kiosk experience. You can choose to pin all the allowed apps on the Start screen or just a subset, depending on whether you want the end user to directly access them on the Start screen. + +The easiest way to create a customized Start layout to apply to other Windows 10 devices is to set up the Start screen on a test device and then export the layout. For detailed steps, see [Customize and export Start layout](customize-and-export-start-layout.md). + +A few things to note here: + +- The test device on which you customize the Start layout should have the same OS version that is installed on the device where you plan to deploy the multi-app assigned access configuration. +- Since the multi-app assigned access experience is intended for fixed-purpose devices, to ensure the device experiences are consistent and predictable, use the *full* Start layout option instead of the *partial* Start layout. +- There are no apps pinned on the taskbar in the multi-app mode, and it is not supported to configure Taskbar layout using the `` tag in a layout modification XML as part of the assigned access configuration. +- The following example uses DesktopApplicationLinkPath to pin the desktop app to start. When the desktop app doesn’t have a shortcut link on the target device, [learn how to provision .lnk files using Windows Configuration Designer](#lnk-files). + +This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, and Notepad apps on Start. + +``` + + + + + + + + + + + + + + + + + + + + + + ]]> + +``` + +![What the Start screen looks like when the XML sample is applied](images/sample-start.png) + +##### Taskbar + +Define whether you want to have the taskbar present in the kiosk device. For tablet-based or touch-enabled all-in-one kiosks, when you don’t attach a keyboard and mouse, you can hide the taskbar as part of the multi-app experience if you want. + +The following example exposes the taskbar to the end user: + + `` + +The following example hides the taskbar: + + `` + +>[!NOTE] +>This is different from the **Automatically hide the taskbar** option in tablet mode, which shows the taskbar when swiping up from or moving the mouse pointer down to the bottom of the screen. Setting **ShowTaskbar** as **false** will always keep the taskbar hidden. + ### Add XML file to provisioning package @@ -54,6 +204,10 @@ Process: *There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* + +##### placeholder for lnk + + ## old method (pre-1709) From 96ad864e478f59d4163b6667c7469c7336cd21fe Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Mon, 7 Aug 2017 12:55:08 -0700 Subject: [PATCH 009/146] fix level heads --- .../lock-down-windows-10-to-specific-apps.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index a92afca98a..19996b5275 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -222,12 +222,12 @@ This topic describes how to lock down apps on a local device. You can also use A ![install create lockdown customize](images/lockdownapps.png) -## Install apps +### Install apps First, install the desired apps on the device for the target user account(s). This works for both Store and Win32. For Store apps, you must log on as that user for the app to install. For Win32 you can install an app for all users without logging on to the particular account. -## Use AppLocker to set rules for apps +### Use AppLocker to set rules for apps After you install the desired apps, set up AppLocker rules to only allow specific apps, and block everything else. @@ -268,7 +268,7 @@ After you install the desired apps, set up AppLocker rules to only allow specifi 13. Restart the device. -## Other settings to lock down +### Other settings to lock down In addition to specifying the apps that users can run, you should also restrict some settings and functions on the device. For a more secure experience, we recommend that you make the following configuration changes to the device: @@ -304,7 +304,7 @@ In addition to specifying the apps that users can run, you should also restrict To learn more about locking down features, see [Customizations for Windows 10 Enterprise](https://go.microsoft.com/fwlink/p/?LinkId=691442). -## Customize Start screen layout for the device (recommended) +### Customize Start screen layout for the device (recommended) Configure the Start menu on the device to only show tiles for the permitted apps. You will make the changes manually, export the layout to an .xml file, and then apply that file to devices to prevent users from making changes. For instructions, see [Manage Windows 10 Start layout options](windows-10-start-layout-options-and-policies.md). From 7c99a65fa5a3e3a692bccef679db8e81b1f786a8 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Mon, 7 Aug 2017 12:58:09 -0700 Subject: [PATCH 010/146] sync --- .../lock-down-windows-10-to-specific-apps.md | 27 +++++++++---------- 1 file changed, 13 insertions(+), 14 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 19996b5275..543adcbe20 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -18,7 +18,7 @@ ms.localizationpriority: high - Windows 10 -A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using a provisioning package, rather than creating rules in **AppLocker**. +A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using a provisioning package. >[!NOTE] >For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](#1703) to configure a multi-app kiosk. @@ -26,22 +26,21 @@ A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typicall The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for individuals by putting in front of them only the things they need to use, and removing from their view the things they don’t need to access. >[!WARNING] ->The assigned access feature is intended for corporate-owned fixed-purpose devices, like kiosks. When the multi-app assigned access configuration is applied on the device, certain policies are enforced system-wide, and will impact other users on the device. Deleting the multi-app configuration will remove the assigned access lockdown profiles associated with the users, but it cannot revert all the enforced policies (such as Start layout). A factory reset is needed to clear all the assigned access enforced policies. +>The assigned access feature is intended for corporate-owned fixed-purpose devices, like kiosks. When the multi-app assigned access configuration is applied on the device, certain policies are enforced system-wide, and will impact other users on the device. Deleting the multi-app configuration will remove the assigned access lockdown profiles associated with the users, but it cannot revert all the enforced policies (such as Start layout). A factory reset is needed to clear all the policies enforced via assigned access. -## new method (1709) Process: 1. [Create XML file](#create-xml-file) 2. [Add XML file to provisioning package](#add-xml) 3. [Apply provisioning package to device](#apply-ppkg) -### Prerequisites +## Prerequisites - (latest version of WCD -- is Store version okay at GA?) - kiosk device on 1709 -### Create XML file +## Create XML file Let's start by looking at the basic structure of the XML file. @@ -78,7 +77,7 @@ You can start your file by pasting the following XML (or any other examples in t ``` -#### Profile +### Profile A profile section in the XML has the following entries: @@ -91,11 +90,11 @@ A profile section in the XML has the following entries: - [**Taskbar**](#taskbar) -##### Id +#### Id The profile Id is a GUID attribute to uniquely identify the profile. You can create a GUID using a GUID generator. The GUID just needs to be unique within this XML file. -##### AllowedApps +#### AllowedApps AllowedApps is a list of applications that are allowed to run. Apps can be Universal Windows Platform (UWP) apps or Classic Windows desktop apps. @@ -135,7 +134,7 @@ The following example allows Groove Music, Movies & TV, Photos, Weather, Calcula ``` -##### StartLayout +#### StartLayout After you define the list of allowed applications, you can customize the Start layout for your kiosk experience. You can choose to pin all the allowed apps on the Start screen or just a subset, depending on whether you want the end user to directly access them on the Start screen. @@ -178,7 +177,7 @@ This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, ![What the Start screen looks like when the XML sample is applied](images/sample-start.png) -##### Taskbar +#### Taskbar Define whether you want to have the taskbar present in the kiosk device. For tablet-based or touch-enabled all-in-one kiosks, when you don’t attach a keyboard and mouse, you can hide the taskbar as part of the multi-app experience if you want. @@ -195,17 +194,17 @@ The following example hides the taskbar: -### Add XML file to provisioning package +## Add XML file to provisioning package -### Apply provisioning package to device +## Apply provisioning package to device -### mixed-reality +## mixed-reality *There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* -##### placeholder for lnk +#### placeholder for lnk From 53f8bfb3464bea8a375d85651ed9c4914dabc0f3 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Mon, 7 Aug 2017 13:06:47 -0700 Subject: [PATCH 011/146] add xml to code sample --- .../configuration/lock-down-windows-10-to-specific-apps.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 543adcbe20..e76ce71a80 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -46,7 +46,7 @@ Let's start by looking at the basic structure of the XML file. - A configuration xml can define multiple *profiles*. Each profile has a unique **Id** and defines a set of applications that are allowed to run. -- A configuration xml can have multiple *config* section. Each config section associates a non-admin user account to a default profile **Id**. +- A configuration xml can have multiple *config* sections. Each config section associates a non-admin user account to a default profile **Id**. - Multiple config sections can be associated to the same profile. @@ -56,7 +56,7 @@ Let's start by looking at the basic structure of the XML file. You can start your file by pasting the following XML (or any other examples in this topic) into a XML editor, and saving the file as *filename*.xml. -``` +```xml From 8e09327ace3db1b69e7ad133eb67f5b2cba9ae2e Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 8 Aug 2017 06:53:59 -0700 Subject: [PATCH 012/146] sync --- .../lock-down-windows-10-to-specific-apps.md | 48 +++++++++++++++---- 1 file changed, 40 insertions(+), 8 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index e76ce71a80..c732e8f652 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -54,7 +54,7 @@ Let's start by looking at the basic structure of the XML file. ![profile = app and config = account](images/profile-config.png) -You can start your file by pasting the following XML (or any other examples in this topic) into a XML editor, and saving the file as *filename*.xml. +You can start your file by pasting the following XML (or any other examples in this topic) into a XML editor, and saving the file as *filename*.xml. Each section of this XML is explained in this topic. ```xml @@ -92,11 +92,17 @@ A profile section in the XML has the following entries: #### Id -The profile Id is a GUID attribute to uniquely identify the profile. You can create a GUID using a GUID generator. The GUID just needs to be unique within this XML file. +The profile **Id** is a GUID attribute to uniquely identify the profile. You can create a GUID using a GUID generator. The GUID just needs to be unique within this XML file. + +```xml + + … + +``` #### AllowedApps -AllowedApps is a list of applications that are allowed to run. Apps can be Universal Windows Platform (UWP) apps or Classic Windows desktop apps. +**AllowedApps** is a list of applications that are allowed to run. Apps can be Universal Windows Platform (UWP) apps or Classic Windows desktop apps. Based on the purpose of the kiosk device, define the list of applications that are allowed to run. This list can contain both UWP apps and desktop apps. When the mult-app kiosk configuration is applied to a device, AppLocker rules will be generated to allow the apps that are listed in the configuration. @@ -107,20 +113,22 @@ Based on the purpose of the kiosk device, define the list of applications that a - For desktop apps, you need to specify the full path of the executable, which can contain one or more system environment variables in the form of %variableName% (i.e. %systemroot%, %windir%). Here are the predefined assigned access AppLocker rules for **UWP apps**: + 1. Default rule is to allow all users to launch the signed package apps. 2. The package app deny list is generated at runtime when the assigned access user signs in. Based on the installed/provisioned package apps available for the user account, assigned access generates the deny list. This list will exclude the default allowed inbox package apps which are critical for the system to function, and then exclude the allowed packages that enterprises defined in the assigned access configuration. If there are multiple apps within the same package, all these apps will be excluded. This deny list will be used to prevent the user from accessing the apps which are currently available for the user but not in the allowed list. ->[!NOTE] ->Assigned access multi-app mode doesn’t block the enterprises or the users from installing UWP apps. When a new UWP app is installed during the current assigned access user session, this app will not be in the deny list. When the user signs out and signs in back next time, it will be included in the deny list. If this is an enterprise-deployed line-of-business app and you want to allow it to run, update the assigned access configuration to include it in the allowed app list. + >[!NOTE] + >Multi-app kiosk mode doesn’t block the enterprise or the users from installing UWP apps. When a new UWP app is installed during the current assigned access user session, this app will not be in the deny list. When the user signs out and signs in again, the app will be included in the deny list. If this is an enterprise-deployed line-of-business app and you want to allow it to run, update the assigned access configuration to include it in the allowed app list. Here are the predefined assigned access AppLocker rules for **desktop apps**: + 1. Default rule is to allow all users to launch the desktop programs signed with Microsoft Certificate in order for the system to boot and function. The rule also allows the admin user group to launch all desktop programs. 2. There is a predefined inbox desktop app deny list for the assigned access user account, and this deny list is adjusted based on the desktop app allow list that you defined in the multi-app configuration. 3. Enterprise-defined allowed desktop apps are added in the AppLocker allow list. The following example allows Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, and Notepad apps to run on the device. -``` +```xml @@ -149,7 +157,7 @@ A few things to note here: This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, and Notepad apps on Start. -``` +```xml @@ -192,14 +200,38 @@ The following example hides the taskbar: >[!NOTE] >This is different from the **Automatically hide the taskbar** option in tablet mode, which shows the taskbar when swiping up from or moving the mouse pointer down to the bottom of the screen. Setting **ShowTaskbar** as **false** will always keep the taskbar hidden. +### Configs + +Under **Configs**, define which user account will be associated with the profile. When this user account signs in on the device, the associated assigned access profile will be enforced, including the allowed apps, Start layout, and taskbar configuration, as well as other local group policies or MDM policies set as part of the multi-app experience. + +The full multi-app assigned access experience can only work for non-admin users. It’s not supported to associate an admin user with the assigned access profile; doing this in the XML file will result in unexpected/unsupported experiences when this admin user signs in. + +Before applying the multi-app configuration, make sure the specified user account is available on the device, otherwise it will fail. + + +```xml + + + MultiAppKioskUser + + + +``` + + + ## Add XML file to provisioning package + + ## Apply provisioning package to device -## mixed-reality + + +## Considerations for mixed-reality devices *There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* From 7c6c964ce3f53611d05e560a80f7393a593dea4f Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 8 Aug 2017 09:00:36 -0700 Subject: [PATCH 013/146] modify toc --- windows/configuration/TOC.md | 2 + ...change-history-for-configure-windows-10.md | 1 + windows/configuration/kiosk-shared-pc.md | 2 +- .../lock-down-windows-10-applocker.md | 119 ++++++ .../lock-down-windows-10-to-specific-apps.md | 114 +----- windows/configuration/lock-down-windows-10.md | 15 - windows/configuration/multi-app-kiosk-xml.md | 364 ++++++++++++++++++ 7 files changed, 502 insertions(+), 115 deletions(-) create mode 100644 windows/configuration/lock-down-windows-10-applocker.md delete mode 100644 windows/configuration/lock-down-windows-10.md create mode 100644 windows/configuration/multi-app-kiosk-xml.md diff --git a/windows/configuration/TOC.md b/windows/configuration/TOC.md index 876c4c17b2..4166b7475b 100644 --- a/windows/configuration/TOC.md +++ b/windows/configuration/TOC.md @@ -9,6 +9,8 @@ ### [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) ### [Guidelines for choosing an app for assigned access (kiosk mode)](guidelines-for-assigned-access-app.md) ### [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) +#### [Use AppLocker to create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-applocker.md) +#### [Multi-app kiosk XML reference](multi-app-kiosk-xml.md) ## [Configure Windows 10 Mobile devices](mobile-devices/configure-mobile.md) ### [Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise](mobile-devices/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) ### [Use Windows Configuration Designer to configure Windows 10 Mobile devices](mobile-devices/provisioning-configure-mobile.md) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 2a495b4f5a..6e279b9adc 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -19,6 +19,7 @@ This topic lists new and updated topics in the [Configure Windows 10](index.md) The topics in this library have been updated for Windows 10, version 1709 (also known as the Fall Creators Update). The following new topics have been added: - [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) +- [Multi-app kiosk XML reference](multi-app-kiosk-xml.md) ## July 2017 | New or changed topic | Description | diff --git a/windows/configuration/kiosk-shared-pc.md b/windows/configuration/kiosk-shared-pc.md index 21d8d0d394..420e550a78 100644 --- a/windows/configuration/kiosk-shared-pc.md +++ b/windows/configuration/kiosk-shared-pc.md @@ -20,4 +20,4 @@ Some desktop devices in an enterprise serve a special purpose, such as a common | [Set up a shared or guest PC with Windows 10](set-up-shared-or-guest-pc.md) | Windows 10, version 1607, introduced *shared PC mode*, which optimizes Windows 10 for shared use scenarios, such as touchdown spaces in an enterprise and temporary customer use in retail. | | [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) | You can configure a device running Windows 10 Pro, Windows 10 Enterprise, or Windows 10 Education as a kiosk device, so that users can only interact with a single application that you select. | | [Guidelines for choosing an app for assigned access (kiosk mode)](guidelines-for-assigned-access-app.md) | You can choose almost any Windows app for assigned access; however, some apps may not provide a good user experience. This topic provides guidelines to help you choose an approprate app for a kiosk device. | -| [Lock down Windows 10 to specific apps (AppLocker)](lock-down-windows-10-to-specific-apps.md) | Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to a kiosk device, but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. | \ No newline at end of file +| [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) | Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to a kiosk device, but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. | \ No newline at end of file diff --git a/windows/configuration/lock-down-windows-10-applocker.md b/windows/configuration/lock-down-windows-10-applocker.md new file mode 100644 index 0000000000..398e2d77e9 --- /dev/null +++ b/windows/configuration/lock-down-windows-10-applocker.md @@ -0,0 +1,119 @@ +--- +title: Use AppLocker to create a Windows 10 kiosk that runs multiple apps (Windows 10) +description: Learn how to use AppLocker to configure a kiosk device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. +ms.assetid: 14DDDC96-88C7-4181-8415-B371F25726C8 +keywords: ["lockdown", "app restrictions", "applocker"] +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: edu, security +author: jdeckerms +ms.localizationpriority: high +--- + +# Use AppLocker to create a Windows 10 kiosk that runs multiple apps + + +**Applies to** + +- Windows 10 + +Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education, version 1703 and earlier, so that users can only run a few specific apps. The result is similar to [a kiosk device](set-up-a-device-for-anyone-to-use.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. + +>[!NOTE] +>For devices running Windows 10, version 1709, we recommend the [multi-app kiosk method](lock-down-windows-10-to-specific-apps.md). + +You can restrict users to a specific set of apps on a device running Windows 10 Enterprise or Windows 10 Education by using [AppLocker](/windows/device-security/applocker/applocker-overview). AppLocker rules specify which apps are allowed to run on the device. + +AppLocker rules are organized into collections based on file format. If no AppLocker rules for a specific rule collection exist, all files with that file format are allowed to run. However, when an AppLocker rule for a specific rule collection is created, only the files explicitly allowed in a rule are permitted to run. For more information, see [How AppLocker works](/windows/device-security/applocker/how-applocker-works-techref). + +This topic describes how to lock down apps on a local device. You can also use AppLocker to set rules for applications in a domain by using Group Policy. + +![install create lockdown customize](images/lockdownapps.png) + +## Install apps + + +First, install the desired apps on the device for the target user account(s). This works for both Store and Win32. For Store apps, you must log on as that user for the app to install. For Win32 you can install an app for all users without logging on to the particular account. + +## Use AppLocker to set rules for apps + + +After you install the desired apps, set up AppLocker rules to only allow specific apps, and block everything else. + +1. Run Local Security Policy (secpol.msc) as an administrator. + +2. Go to **Security Settings** > **Application Control Policies** > **AppLocker**, and select **Configure rule enforcement**. + + ![configure rule enforcement](images/apprule.png) + +3. Check **Configured** under **Executable rules**, and then click **OK**. + +4. Right-click **Executable Rules** and then click **Automatically generate rules**. + + ![automatically generate rules](images/genrule.png) + +5. Select the folder that contains the apps that you want to permit, or select C:\\ to analyze all apps. + +6. Type a name to identify this set of rules, and then click **Next**. + +7. On the **Rule Preferences** page, click **Next**. Be patient, it might take awhile to generate the rules. + +8. On the **Review Rules** page, click **Create**. The wizard will now create a set of rules allowing the installed set of apps. + +9. Read the message and click **Yes**. + + ![default rules warning](images/appwarning.png) + +10. (optional) If you want a rule to apply to a specific set of users, right-click on the rule and select **Properties**. Then use the dialog to choose a different user or group of users. + +11. (optional) If rules were generated for apps that should not be run, you can delete them by right-clicking on the rule and selecting **Delete**. + +12. Before AppLocker will enforce rules, the **Application Identity** service must be turned on. To force the Application Identity service to automatically start on reset, open a command prompt and run: + + ``` syntax + sc config appidsvc start=auto + ``` + +13. Restart the device. + +## Other settings to lock down + + +In addition to specifying the apps that users can run, you should also restrict some settings and functions on the device. For a more secure experience, we recommend that you make the following configuration changes to the device: + +- Remove **All apps**. + + Go to **Group Policy Editor** > **User Configuration** > **Administrative Templates\\Start Menu and Taskbar\\Remove All Programs list from the Start menu**. + +- Hide **Ease of access** feature on the logon screen. + + Go to **Control Panel** > **Ease of Access** > **Ease of Access Center**, and turn off all accessibility tools. + +- Disable the hardware power button. + + Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. + +- Disable the camera. + + Go to **Settings** > **Privacy** > **Camera**, and turn off **Let apps use my camera**. + +- Turn off app notifications on the lock screen. + + Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Logon\\Turn off app notifications on the lock screen**. + +- Disable removable media. + + Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Device Installation\\Device Installation Restrictions**. Review the policy settings available in **Device Installation Restrictions** for the settings applicable to your situation. + + **Note**   + To prevent this policy from affecting a member of the Administrators group, in **Device Installation Restrictions**, enable **Allow administrators to override Device Installation Restriction policies**. + +   + +To learn more about locking down features, see [Customizations for Windows 10 Enterprise](https://go.microsoft.com/fwlink/p/?LinkId=691442). + +## Customize Start screen layout for the device (recommended) + + +Configure the Start menu on the device to only show tiles for the permitted apps. You will make the changes manually, export the layout to an .xml file, and then apply that file to devices to prevent users from making changes. For instructions, see [Manage Windows 10 Start layout options](windows-10-start-layout-options-and-policies.md). \ No newline at end of file diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index c732e8f652..bb01d18c03 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -21,7 +21,7 @@ ms.localizationpriority: high A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using a provisioning package. >[!NOTE] ->For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](#1703) to configure a multi-app kiosk. +>For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](lock-down-windows-10-applocker.md) to configure a multi-app kiosk. The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for individuals by putting in front of them only the things they need to use, and removing from their view the things they don’t need to access. @@ -206,7 +206,21 @@ Under **Configs**, define which user account will be associated with the profile The full multi-app assigned access experience can only work for non-admin users. It’s not supported to associate an admin user with the assigned access profile; doing this in the XML file will result in unexpected/unsupported experiences when this admin user signs in. + + +The account can be local, domain, or Azure Active Directory (Azure AD). Groups are not supported. +• Local account can be entered as `machinename\account` or `.\account` or just `account`. +• Domain account should be entered as `domain\account`. +• Azure AD account must be specified in this format: `AzureAD\{email address}`. **AzureAD** must be provided AS IS (consider it’s a fixed domain name), then follow with the Azure AD email address, e.g. **AzureAD\someone@contoso.onmicrosoft.com**. + +>[!WARNING] +>Although **Start** > **Settings** > **Accounts** > **Other users** > **Set up assigned access** only supports specifying a local user account, Assigned Access can be configured via WMI or CSP to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the Assigned Access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with Assigned Access, and consider the domain resources potentially exposed by the decision to do so. + + Before applying the multi-app configuration, make sure the specified user account is available on the device, otherwise it will fail. + +>[!NOTE] +>For both domain and Azure AD accounts, it’s not required that target account is explicitly added to the device. As long as the device is AD-joined or Azure AD-joined, the account can be discovered in the domain forest or tenant that the device is joined to. For local accounts, it is required that the account exist before you configure the account for AssignedAccess. ```xml @@ -220,7 +234,6 @@ Before applying the multi-app configuration, make sure the specified user accoun - ## Add XML file to provisioning package @@ -240,105 +253,8 @@ Before applying the multi-app configuration, make sure the specified user accoun - -## old method (pre-1709) - -Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to [a kiosk device](set-up-a-device-for-anyone-to-use.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. - -You can restrict users to a specific set of apps on a device running Windows 10 Enterprise or Windows 10 Education by using [AppLocker](/windows/device-security/applocker/applocker-overview). AppLocker rules specify which apps are allowed to run on the device. - -AppLocker rules are organized into collections based on file format. If no AppLocker rules for a specific rule collection exist, all files with that file format are allowed to run. However, when an AppLocker rule for a specific rule collection is created, only the files explicitly allowed in a rule are permitted to run. For more information, see [How AppLocker works](/windows/device-security/applocker/how-applocker-works-techref). - -This topic describes how to lock down apps on a local device. You can also use AppLocker to set rules for applications in a domain by using Group Policy. - -![install create lockdown customize](images/lockdownapps.png) - -### Install apps -First, install the desired apps on the device for the target user account(s). This works for both Store and Win32. For Store apps, you must log on as that user for the app to install. For Win32 you can install an app for all users without logging on to the particular account. - -### Use AppLocker to set rules for apps - - -After you install the desired apps, set up AppLocker rules to only allow specific apps, and block everything else. - -1. Run Local Security Policy (secpol.msc) as an administrator. - -2. Go to **Security Settings** > **Application Control Policies** > **AppLocker**, and select **Configure rule enforcement**. - - ![configure rule enforcement](images/apprule.png) - -3. Check **Configured** under **Executable rules**, and then click **OK**. - -4. Right-click **Executable Rules** and then click **Automatically generate rules**. - - ![automatically generate rules](images/genrule.png) - -5. Select the folder that contains the apps that you want to permit, or select C:\\ to analyze all apps. - -6. Type a name to identify this set of rules, and then click **Next**. - -7. On the **Rule Preferences** page, click **Next**. Be patient, it might take awhile to generate the rules. - -8. On the **Review Rules** page, click **Create**. The wizard will now create a set of rules allowing the installed set of apps. - -9. Read the message and click **Yes**. - - ![default rules warning](images/appwarning.png) - -10. (optional) If you want a rule to apply to a specific set of users, right-click on the rule and select **Properties**. Then use the dialog to choose a different user or group of users. - -11. (optional) If rules were generated for apps that should not be run, you can delete them by right-clicking on the rule and selecting **Delete**. - -12. Before AppLocker will enforce rules, the **Application Identity** service must be turned on. To force the Application Identity service to automatically start on reset, open a command prompt and run: - - ``` syntax - sc config appidsvc start=auto - ``` - -13. Restart the device. - -### Other settings to lock down - - -In addition to specifying the apps that users can run, you should also restrict some settings and functions on the device. For a more secure experience, we recommend that you make the following configuration changes to the device: - -- Remove **All apps**. - - Go to **Group Policy Editor** > **User Configuration** > **Administrative Templates\\Start Menu and Taskbar\\Remove All Programs list from the Start menu**. - -- Hide **Ease of access** feature on the logon screen. - - Go to **Control Panel** > **Ease of Access** > **Ease of Access Center**, and turn off all accessibility tools. - -- Disable the hardware power button. - - Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. - -- Disable the camera. - - Go to **Settings** > **Privacy** > **Camera**, and turn off **Let apps use my camera**. - -- Turn off app notifications on the lock screen. - - Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Logon\\Turn off app notifications on the lock screen**. - -- Disable removable media. - - Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Device Installation\\Device Installation Restrictions**. Review the policy settings available in **Device Installation Restrictions** for the settings applicable to your situation. - - **Note**   - To prevent this policy from affecting a member of the Administrators group, in **Device Installation Restrictions**, enable **Allow administrators to override Device Installation Restriction policies**. - -   - -To learn more about locking down features, see [Customizations for Windows 10 Enterprise](https://go.microsoft.com/fwlink/p/?LinkId=691442). - -### Customize Start screen layout for the device (recommended) - - -Configure the Start menu on the device to only show tiles for the permitted apps. You will make the changes manually, export the layout to an .xml file, and then apply that file to devices to prevent users from making changes. For instructions, see [Manage Windows 10 Start layout options](windows-10-start-layout-options-and-policies.md).   diff --git a/windows/configuration/lock-down-windows-10.md b/windows/configuration/lock-down-windows-10.md deleted file mode 100644 index 0bcecb6b1a..0000000000 --- a/windows/configuration/lock-down-windows-10.md +++ /dev/null @@ -1,15 +0,0 @@ ---- -title: Lock down Windows 10 (Windows 10) -description: Windows 10 provides a number of features and methods to help you lock down specific parts of a Windows 10 device. -ms.assetid: 955BCD92-0A1A-4C48-98A8-30D7FAF2067D -keywords: lockdown -ms.prod: w10 -ms.mktglfcycl: manage -ms.sitesec: library -ms.pagetype: security, mobile -author: jdeckerms -ms.localizationpriority: high ---- - -# Lock down Windows 10 - diff --git a/windows/configuration/multi-app-kiosk-xml.md b/windows/configuration/multi-app-kiosk-xml.md new file mode 100644 index 0000000000..a532786d85 --- /dev/null +++ b/windows/configuration/multi-app-kiosk-xml.md @@ -0,0 +1,364 @@ +--- +title: Create a Windows 10 kiosk that runs multiple apps (Windows 10) +description: Learn how to configure a kiosk device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. +ms.assetid: 14DDDC96-88C7-4181-8415-B371F25726C8 +keywords: ["lockdown", "app restrictions", "applocker"] +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: edu, security +author: jdeckerms +ms.localizationpriority: high +--- + +# Create a Windows 10 kiosk that runs multiple apps + + +**Applies to** + +- Windows 10 + +A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using a provisioning package. + +>[!NOTE] +>For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](#1703) to configure a multi-app kiosk. + +The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for individuals by putting in front of them only the things they need to use, and removing from their view the things they don’t need to access. + +>[!WARNING] +>The assigned access feature is intended for corporate-owned fixed-purpose devices, like kiosks. When the multi-app assigned access configuration is applied on the device, certain policies are enforced system-wide, and will impact other users on the device. Deleting the multi-app configuration will remove the assigned access lockdown profiles associated with the users, but it cannot revert all the enforced policies (such as Start layout). A factory reset is needed to clear all the policies enforced via assigned access. + + +Process: +1. [Create XML file](#create-xml-file) +2. [Add XML file to provisioning package](#add-xml) +3. [Apply provisioning package to device](#apply-ppkg) + +## Prerequisites + +- (latest version of WCD -- is Store version okay at GA?) +- kiosk device on 1709 + + +## Create XML file + +Let's start by looking at the basic structure of the XML file. + +- A configuration xml can define multiple *profiles*. Each profile has a unique **Id** and defines a set of applications that are allowed to run. + +- A configuration xml can have multiple *config* sections. Each config section associates a non-admin user account to a default profile **Id**. + +- Multiple config sections can be associated to the same profile. + +- A profile has no effect if it’s not associated to a config section. + + ![profile = app and config = account](images/profile-config.png) + +You can start your file by pasting the following XML (or any other examples in this topic) into a XML editor, and saving the file as *filename*.xml. Each section of this XML is explained in this topic. + +```xml + + + + + + + + + + + + + + + + + + +``` + +### Profile + +A profile section in the XML has the following entries: + +- [**Id**](#id) + +- [**AllowedApps**](#allowedapps) + +- [**StartLayout**](#startlayout) + +- [**Taskbar**](#taskbar) + + +#### Id + +The profile **Id** is a GUID attribute to uniquely identify the profile. You can create a GUID using a GUID generator. The GUID just needs to be unique within this XML file. + +```xml + + … + +``` + +#### AllowedApps + +**AllowedApps** is a list of applications that are allowed to run. Apps can be Universal Windows Platform (UWP) apps or Classic Windows desktop apps. + +Based on the purpose of the kiosk device, define the list of applications that are allowed to run. This list can contain both UWP apps and desktop apps. When the mult-app kiosk configuration is applied to a device, AppLocker rules will be generated to allow the apps that are listed in the configuration. + +>[!NOTE] +>You cannot manage AppLocker rules that are generated by the multi-app kiosk configuration in [MMC snap-ins](https://technet.microsoft.com/library/hh994629.aspx#BKMK_Using_Snapins). + +- For UWP apps, you need to provide the App User Model ID (AUMID). [Learn how to get the AUMID](https://go.microsoft.com/fwlink/p/?LinkId=614867), or [get the AUMID from the Start Layout XML](#startlayout). +- For desktop apps, you need to specify the full path of the executable, which can contain one or more system environment variables in the form of %variableName% (i.e. %systemroot%, %windir%). + +Here are the predefined assigned access AppLocker rules for **UWP apps**: + +1. Default rule is to allow all users to launch the signed package apps. +2. The package app deny list is generated at runtime when the assigned access user signs in. Based on the installed/provisioned package apps available for the user account, assigned access generates the deny list. This list will exclude the default allowed inbox package apps which are critical for the system to function, and then exclude the allowed packages that enterprises defined in the assigned access configuration. If there are multiple apps within the same package, all these apps will be excluded. This deny list will be used to prevent the user from accessing the apps which are currently available for the user but not in the allowed list. + + >[!NOTE] + >Multi-app kiosk mode doesn’t block the enterprise or the users from installing UWP apps. When a new UWP app is installed during the current assigned access user session, this app will not be in the deny list. When the user signs out and signs in again, the app will be included in the deny list. If this is an enterprise-deployed line-of-business app and you want to allow it to run, update the assigned access configuration to include it in the allowed app list. + +Here are the predefined assigned access AppLocker rules for **desktop apps**: + +1. Default rule is to allow all users to launch the desktop programs signed with Microsoft Certificate in order for the system to boot and function. The rule also allows the admin user group to launch all desktop programs. +2. There is a predefined inbox desktop app deny list for the assigned access user account, and this deny list is adjusted based on the desktop app allow list that you defined in the multi-app configuration. +3. Enterprise-defined allowed desktop apps are added in the AppLocker allow list. + +The following example allows Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, and Notepad apps to run on the device. + +```xml + + + + + + + + + + + +``` + +#### StartLayout + +After you define the list of allowed applications, you can customize the Start layout for your kiosk experience. You can choose to pin all the allowed apps on the Start screen or just a subset, depending on whether you want the end user to directly access them on the Start screen. + +The easiest way to create a customized Start layout to apply to other Windows 10 devices is to set up the Start screen on a test device and then export the layout. For detailed steps, see [Customize and export Start layout](customize-and-export-start-layout.md). + +A few things to note here: + +- The test device on which you customize the Start layout should have the same OS version that is installed on the device where you plan to deploy the multi-app assigned access configuration. +- Since the multi-app assigned access experience is intended for fixed-purpose devices, to ensure the device experiences are consistent and predictable, use the *full* Start layout option instead of the *partial* Start layout. +- There are no apps pinned on the taskbar in the multi-app mode, and it is not supported to configure Taskbar layout using the `` tag in a layout modification XML as part of the assigned access configuration. +- The following example uses DesktopApplicationLinkPath to pin the desktop app to start. When the desktop app doesn’t have a shortcut link on the target device, [learn how to provision .lnk files using Windows Configuration Designer](#lnk-files). + +This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, and Notepad apps on Start. + +```xml + + + + + + + + + + + + + + + + + + + + + + ]]> + +``` + +![What the Start screen looks like when the XML sample is applied](images/sample-start.png) + +#### Taskbar + +Define whether you want to have the taskbar present in the kiosk device. For tablet-based or touch-enabled all-in-one kiosks, when you don’t attach a keyboard and mouse, you can hide the taskbar as part of the multi-app experience if you want. + +The following example exposes the taskbar to the end user: + + `` + +The following example hides the taskbar: + + `` + +>[!NOTE] +>This is different from the **Automatically hide the taskbar** option in tablet mode, which shows the taskbar when swiping up from or moving the mouse pointer down to the bottom of the screen. Setting **ShowTaskbar** as **false** will always keep the taskbar hidden. + +### Configs + +Under **Configs**, define which user account will be associated with the profile. When this user account signs in on the device, the associated assigned access profile will be enforced, including the allowed apps, Start layout, and taskbar configuration, as well as other local group policies or MDM policies set as part of the multi-app experience. + +The full multi-app assigned access experience can only work for non-admin users. It’s not supported to associate an admin user with the assigned access profile; doing this in the XML file will result in unexpected/unsupported experiences when this admin user signs in. + + + +The account can be local, domain, or Azure Active Directory (Azure AD). Groups are not supported. +• Local account can be entered as `machinename\account` or `.\account` or just `account`. +• Domain account should be entered as `domain\account`. +• Azure AD account must be specified in this format: `AzureAD\{email address}`. **AzureAD** must be provided AS IS (consider it’s a fixed domain name), then follow with the Azure AD email address, e.g. **AzureAD\someone@contoso.onmicrosoft.com**. + +>[!WARNING] +>Although **Start** > **Settings** > **Accounts** > **Other users** > **Set up assigned access** only supports specifying a local user account, Assigned Access can be configured via WMI or CSP to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the Assigned Access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with Assigned Access, and consider the domain resources potentially exposed by the decision to do so. + + +Before applying the multi-app configuration, make sure the specified user account is available on the device, otherwise it will fail. + +>[!NOTE] +>For both domain and Azure AD accounts, it’s not required that target account is explicitly added to the device. As long as the device is AD-joined or Azure AD-joined, the account can be discovered in the domain forest or tenant that the device is joined to. For local accounts, it is required that the account exist before you configure the account for AssignedAccess. + + +```xml + + + MultiAppKioskUser + + + +``` + + + + +## Add XML file to provisioning package + + + + +## Apply provisioning package to device + + + +## Considerations for mixed-reality devices + +*There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* + + +#### placeholder for lnk + + + + +## old method (pre-1709) + +Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to [a kiosk device](set-up-a-device-for-anyone-to-use.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. + +You can restrict users to a specific set of apps on a device running Windows 10 Enterprise or Windows 10 Education by using [AppLocker](/windows/device-security/applocker/applocker-overview). AppLocker rules specify which apps are allowed to run on the device. + +AppLocker rules are organized into collections based on file format. If no AppLocker rules for a specific rule collection exist, all files with that file format are allowed to run. However, when an AppLocker rule for a specific rule collection is created, only the files explicitly allowed in a rule are permitted to run. For more information, see [How AppLocker works](/windows/device-security/applocker/how-applocker-works-techref). + +This topic describes how to lock down apps on a local device. You can also use AppLocker to set rules for applications in a domain by using Group Policy. + +![install create lockdown customize](images/lockdownapps.png) + +### Install apps + + +First, install the desired apps on the device for the target user account(s). This works for both Store and Win32. For Store apps, you must log on as that user for the app to install. For Win32 you can install an app for all users without logging on to the particular account. + +### Use AppLocker to set rules for apps + + +After you install the desired apps, set up AppLocker rules to only allow specific apps, and block everything else. + +1. Run Local Security Policy (secpol.msc) as an administrator. + +2. Go to **Security Settings** > **Application Control Policies** > **AppLocker**, and select **Configure rule enforcement**. + + ![configure rule enforcement](images/apprule.png) + +3. Check **Configured** under **Executable rules**, and then click **OK**. + +4. Right-click **Executable Rules** and then click **Automatically generate rules**. + + ![automatically generate rules](images/genrule.png) + +5. Select the folder that contains the apps that you want to permit, or select C:\\ to analyze all apps. + +6. Type a name to identify this set of rules, and then click **Next**. + +7. On the **Rule Preferences** page, click **Next**. Be patient, it might take awhile to generate the rules. + +8. On the **Review Rules** page, click **Create**. The wizard will now create a set of rules allowing the installed set of apps. + +9. Read the message and click **Yes**. + + ![default rules warning](images/appwarning.png) + +10. (optional) If you want a rule to apply to a specific set of users, right-click on the rule and select **Properties**. Then use the dialog to choose a different user or group of users. + +11. (optional) If rules were generated for apps that should not be run, you can delete them by right-clicking on the rule and selecting **Delete**. + +12. Before AppLocker will enforce rules, the **Application Identity** service must be turned on. To force the Application Identity service to automatically start on reset, open a command prompt and run: + + ``` syntax + sc config appidsvc start=auto + ``` + +13. Restart the device. + +### Other settings to lock down + + +In addition to specifying the apps that users can run, you should also restrict some settings and functions on the device. For a more secure experience, we recommend that you make the following configuration changes to the device: + +- Remove **All apps**. + + Go to **Group Policy Editor** > **User Configuration** > **Administrative Templates\\Start Menu and Taskbar\\Remove All Programs list from the Start menu**. + +- Hide **Ease of access** feature on the logon screen. + + Go to **Control Panel** > **Ease of Access** > **Ease of Access Center**, and turn off all accessibility tools. + +- Disable the hardware power button. + + Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. + +- Disable the camera. + + Go to **Settings** > **Privacy** > **Camera**, and turn off **Let apps use my camera**. + +- Turn off app notifications on the lock screen. + + Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Logon\\Turn off app notifications on the lock screen**. + +- Disable removable media. + + Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Device Installation\\Device Installation Restrictions**. Review the policy settings available in **Device Installation Restrictions** for the settings applicable to your situation. + + **Note**   + To prevent this policy from affecting a member of the Administrators group, in **Device Installation Restrictions**, enable **Allow administrators to override Device Installation Restriction policies**. + +   + +To learn more about locking down features, see [Customizations for Windows 10 Enterprise](https://go.microsoft.com/fwlink/p/?LinkId=691442). + +### Customize Start screen layout for the device (recommended) + + +Configure the Start menu on the device to only show tiles for the permitted apps. You will make the changes manually, export the layout to an .xml file, and then apply that file to devices to prevent users from making changes. For instructions, see [Manage Windows 10 Start layout options](windows-10-start-layout-options-and-policies.md). + + +  + +  + + + + + From b2ee56a3681b00531d4939ccff35d672c2fdfa48 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 8 Aug 2017 10:01:44 -0700 Subject: [PATCH 014/146] sync --- .../images/multiappassignedaccesssettings.png | Bin 0 -> 5081 bytes .../lock-down-windows-10-to-specific-apps.md | 62 +++ windows/configuration/multi-app-kiosk-xml.md | 421 +++++------------- 3 files changed, 177 insertions(+), 306 deletions(-) create mode 100644 windows/configuration/images/multiappassignedaccesssettings.png diff --git a/windows/configuration/images/multiappassignedaccesssettings.png b/windows/configuration/images/multiappassignedaccesssettings.png new file mode 100644 index 0000000000000000000000000000000000000000..86e2e0a451e756326fa5d8891cb4e8d50c361f20 GIT binary patch literal 5081 zcmbW5XHb({x5tA@5fnuZdISUkArL@Ba_B{BLKg@qB~qjX2oS1-&_o46i1c0zN(oI` zkd8`|-diY&n1qh>P;Wf<(>wFd+?o5~+5f%Pv)7uvo@eiw-`=ku8bB^Hb20+}fXmuY z4PyX+u9Mb>F)`5E{ea^Yn$US0L(~9e{oG45pM% z$9wI<;yVtnUWy%5a$GXMYW;#ES&x?){wBcOkC&w1RVcxAkL4eJAD-Ua7y8Q-)8hS+$n8Y>8YB zM^ur)o6=&j%MNEfSf3uZ4KTXll-~lobjTb64^RuSp>rh(`v&#>1OFC z_8DvCDB{0~kQP3F`*qA~0fkYIU~~lQl|~%zv}5RbpVQi#^(ViTtD0h#peGHTUpFQw z{dDdd>W+*kI7Lvrjd@<`@CR_)H$k{_)jgR!W1Tgh z4k${SD?8&9R}4}IUa6PZ=Srtq`rx6_OLyfFgogG~U^!*;G-&5r*g<6t*Q8(h*!<-7 z@BO9fsl0>lLG=e=RMu7oilw=^xy*bJ10!Q!t?-?(-9)npDL2ghN{hVD$F`!(Y&&vN zu8s+iGxD+bVmjFevUbDocckGZOKYi?5S0^Z9-X%yg!9pH;mZLf10T(pYr8$S^Ewtr zW??+R`t5<`JBWAWoA&k;UZ8yDMU{egz2`TE$Vb-09CiNAZ8`a;&n*W$)4uF_b&tF+ zS+4A|K!} z?t%9h_wa0=@K=^L=*)=5qg5r%1J~fCrx83EC#r!=syCG}b~Rl49-pjVf`c+fJKS$6 z5v7AjqZLR(=^=k%%S0KSL7IXa5kIplgI538GvY^-KHC4}>xU}$KkPs|4&G3eqlaG) z%F*JQHw@PuKjAve4F~~FU7?5-7Z;N7*hmS{;uaQP4r5PQM^`r7K zmt-JqAG1g9w_Kg87`T$E&L;d6{n?;5Gf-jPa9)<7`0>#dj+{o<*@T{In;7&M3!(tN zH~jEKocyI9`Qjc++gx?uu7IdbAMLPswQ!dK_#yYr%7(-F-0$d&Y_6h@wZjg+BJtZ_(=zncRO{t(P`{LOcmkCVMDGInjNDv;}iL8>ob=T9rpH z&yXD80iO+!0|Vi%Cp$*8g$K)6#~GG*O+n$u(vr|1L)Hd1vx1?b$_H(X!VUAwbCE!jtZ(>%*;R)_FFk_Oc4nGbgxz&rmaZ3B{gIa*2YA63G>m*Q@5&-2nCN; zfoK$tK}oT-;VNhwz+!zwGQC0!YW+oRBYcLP%sxK}EgQtic7M6FzBoTAG2IXwx0JFi ziDlvfe)_YY4)R5>o>9|z0^`)B7!E~F!APIwv~eA2g|+R?`EqpwzHIRBgoM}6%xod5 zd0!7cGw)42mszY(O@r0|P;hiR+#1BVo%QI3K)!rDgpv*B&OfRI!Kvm4C@mO${sl(Ewcnz958X0*56G( z;P+gqD^OeN=^L@JmM%JMpg*F6zY|2kitd_!GD3nY2N#vF2Y1ACO>TG@*bG8c)4JO?qD;O7EZf>^+h`~h(kA&2v)k)gu=JdbBo+Walg6$hr4m|Efq`c6;N{mm6yiVQg z%(wZcd}-s|>Cn(;(x3|0Yp(+k$KOOh9(NsS2E>&u+`^NZHG9kLrFi5>`62uAj4Cm< zwV&rsi#Hti^3=dVCHLq18<3=BbcB~WTfZ?k-lJ>vu}4SDv+SW?)gk6zW=7x`&wpI_ zRQVm7@uy;$_<+qk72EYb6|0J#j!t#aN#h9>=oNaFV0-)1yx?Z}lpF^vbKR4avAVt< z^orw5q+HQ#AI1=0r!I1S==ck#I8ZajB~I^|Pw(Eu{gi{-V*(u3g`|TpKa3 zl9v`4T<<+#FjjF(XL(3hX0HTURazAAd2<2VnqBWkbScxv4S05_)#@@L8-Ao-S}mcA z*S-=l-P&aEqRI9n@VPY`#46~CUPNUz`U3!b;^E;oQl zROS$jidS*TQ7rL16+%JAMdb&@!5Nj2mbzfgicfj3Q(?8-;;((Aa8wCJy&OEoJR)+ZaU)cE}$FwV8>t81a z)hY#OpdAD0{(T=9hs-iF4Kd~4amun6k>yqz-0`yD_}{D^xM6&g4EYaQRmauZ_5a~6 z3i$s;TyY_M_nCZdWUM;dm0Dw=tL%Ndp zi&*a8$_ZeP*i{XSH{4Z;@DebyX_H>cb!zIA-eqh5FJ7Bz3vi2^{tR*bno4N<0zcfP z_-l#DZig@jMArwYeyXV6-mtRxS534V;do8;0{RWfIVcDol&tm1iu9QKvYJFVuP$tR zWW}d8Rnig=y6*KR-(3X(qJ=jaLmv-{TorRGPig2Ziz_a(_ho)I9NV2@tKGXC&%0X0FVyCk8+>ZIK%?| zg~X$OLO*lhL2%I+V?L8S`l`+t22KL~Yt9JW>W>d`Ka{g@Zf`)KYT4`pJt4!NKH>ON zK5f_RT(6{!p|``j^7%$~cMX)RbM2;LX(x(FD>B@%fYq1UE7iCKh4-SgeUqt}AmmeX zwcV<6mJhMTu&9~x*Ago1-iAr9cK43fY*jk(SRIFqlPC7P6%rB)ijHt6b|Y4iubzmo z>pEZ2IWyiRdKmV(@%=agf!GAA>2}`FgJ)l>tsCQwIiUwQCsE6R2>S)G%ilV-#Ioe1 zbgL4~>P`2kB9j7(^l3d+PL$pfV9_=>VDS=tMgl2yb-(N~@BT>rabxLUr12YzmpGPK z6taNlq?LxyZEr<}XFnji9SaZ$C6MN~FJ6eaj_r86o`+8mm1~sig+8yHwLa`5JEKv( z{`ha5Z&HiNzlt7;CGcWQ%Z(6VC_DasMM6t;VUO?;r%CW?qxm9)yz_ha=3U^?5ujMi z${GY8c`mqs>K7FVAw_n;_%t7Oe$r3TlVgTGRlNumZUOaN=Cr=QZNQb;$8BSq+~P-si3AHYtpo*U&#=0bCsjN>}{QzJx(W1*b?gygW*P z4d{0JMtSkSDL9w~i%deWW$alK{4!v$+Wra&vb$}Hza@b0bxq4C?;q|OyvjoP2d_UX zJrN9X(hSr5yEvd~gKhRMjPkrZeYU_CWe;o1Rjd@ZL24OCa7&6*X>UB2Zpzwu8hmK%L!~A&#R%rT(-)(PS(&QV3!BZk+z(m zw^O|_K1r14O~T|O#7uCxJ(EfCsZ2Q@iw0wqSU=$D{ZN!sV8(8ht;sxsb0_qg)}uo zr`YB#E{o|zoAZ>W>2tByFggsX-HEolV^`XB()5>0Tk}hKRg zl6mBc1mJf<+kx|998?)XNK*xttxicvdZ&r54klT$l6tpyp{&l{QZ6v z^jEhO!{2ts;l32Io08Y2|($`(17>m`Cp*I{y8dV`1v+=}!ODzu)Q3)%YoNj_dF9@qQ1| zdOY@>|MA-d=H|2B9lN*J%HCW+jOEk*bR;m8LL1(uhu2S@%nBeS8i!^<-Z()Yf5MO}G zk6$JnQWe-dP;oLU7v;65Lz2`PgyW|Gmgi4RW3@KRz1#%j7osE4s^mglW*L4Q10Xc! z9BKya*Bz%4AB+6Cz<%}RE)jBCm{W8?&KCff1S^4Jx5&hW;biSj`7p(SC%3~#pO7U* zjhn782oSHmhp9@8R-mZFZ&2Dm8(=8C98DiE|3|=oV}*b3mqM> ## Add XML file to provisioning package +Before you add the XML file to a provisioning package, you can [validate your configuration XML against the XSD](multi-app-kiosk-xml.md). +Use the Windows Configuration Designer tool to create a provisioning package. [Learn how to install Windows Configuration Designer.](provisioning-packages/provisioning-install-icd.md) + +>[!IMPORTANT] +>When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed. + +1. Open Windows Configuration Designer (by default, %systemdrive%\\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Imaging and Configuration Designer\\x86\\ICD.exe). + +2. Choose **Advanced provisioning**. + +3. Name your project, and click **Next**. + +4. Choose **All Windows desktop editions** and click **Next**. + +5. On **New project**, click **Finish**. The workspace for your package opens. + +6. Expand **Runtime settings** > **AssignedAccess** > **MultiAppAssignedAccessSettings**. + +7. Enter **layout.xml**. This value creates a placeholder in the customizations.xml file that you will replace with the contents of the layout.xml file in a later step. + +7. Save your project and close Windows Configuration Designer. + +7. In File Explorer, open the project's directory. (The default location is C:\Users\\*user name*\Documents\Windows Imaging and Configuration Designer (WICD)\\*project name*) + +7. Open the customizations.xml file in a text editor. The **<Customizations>** section will look like this: + + ![Customizations file with the placeholder text to replace highlighted](images/customization-start.png) + +7. Replace **layout.xml** with the text from the layout.xml file, [with markup characters replaced with escape characters](#escape). + +8. Save and close the customizations.xml file. + +8. Open Windows Configuration Designer and open your project. + +8. On the **File** menu, select **Save.** + +9. On the **Export** menu, select **Provisioning package**. + +10. Change **Owner** to **IT Admin**, which will set the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select **Next.** + +11. Optional. In the **Provisioning package security** window, you can choose to encrypt the package and enable package signing. + + - **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen. + + - **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Select...** and choosing the certificate you want to use to sign the package. + +12. Click **Next** to specify the output location where you want the provisioning package to go when it's built. By default, Windows Imaging and Configuration Designer (ICD) uses the project folder as the output location. + + Optionally, you can click **Browse** to change the default output location. + +13. Click **Next**. + +14. Click **Build** to start building the package. The provisioning package doesn't take long to build. The project information is displayed in the build page and the progress bar indicates the build status. + + If you need to cancel the build, click **Cancel**. This cancels the current build process, closes the wizard, and takes you back to the **Customizations Page**. + +15. If your build fails, an error message will show up that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again. + + If your build is successful, the name of the provisioning package, output directory, and project directory will be shown. + + - If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, click **Back** to change the output package name and path, and then click **Next** to start another build. + - If you are done, click **Finish** to close the wizard and go back to the **Customizations Page**. ## Apply provisioning package to device diff --git a/windows/configuration/multi-app-kiosk-xml.md b/windows/configuration/multi-app-kiosk-xml.md index a532786d85..642995cf1e 100644 --- a/windows/configuration/multi-app-kiosk-xml.md +++ b/windows/configuration/multi-app-kiosk-xml.md @@ -1,6 +1,6 @@ --- -title: Create a Windows 10 kiosk that runs multiple apps (Windows 10) -description: Learn how to configure a kiosk device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. +title: Multi-app kiosk XML reference (Windows 10) +description: XML and XSD for multi-app kiosk device configuration. ms.assetid: 14DDDC96-88C7-4181-8415-B371F25726C8 keywords: ["lockdown", "app restrictions", "applocker"] ms.prod: w10 @@ -8,128 +8,24 @@ ms.mktglfcycl: manage ms.sitesec: library ms.pagetype: edu, security author: jdeckerms -ms.localizationpriority: high +ms.localizationpriority: medium --- -# Create a Windows 10 kiosk that runs multiple apps +# Multi-app kiosk XML reference **Applies to** - Windows 10 -A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using a provisioning package. - ->[!NOTE] ->For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](#1703) to configure a multi-app kiosk. - -The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for individuals by putting in front of them only the things they need to use, and removing from their view the things they don’t need to access. - ->[!WARNING] ->The assigned access feature is intended for corporate-owned fixed-purpose devices, like kiosks. When the multi-app assigned access configuration is applied on the device, certain policies are enforced system-wide, and will impact other users on the device. Deleting the multi-app configuration will remove the assigned access lockdown profiles associated with the users, but it cannot revert all the enforced policies (such as Start layout). A factory reset is needed to clear all the policies enforced via assigned access. - - -Process: -1. [Create XML file](#create-xml-file) -2. [Add XML file to provisioning package](#add-xml) -3. [Apply provisioning package to device](#apply-ppkg) - -## Prerequisites - -- (latest version of WCD -- is Store version okay at GA?) -- kiosk device on 1709 - - -## Create XML file - -Let's start by looking at the basic structure of the XML file. - -- A configuration xml can define multiple *profiles*. Each profile has a unique **Id** and defines a set of applications that are allowed to run. - -- A configuration xml can have multiple *config* sections. Each config section associates a non-admin user account to a default profile **Id**. - -- Multiple config sections can be associated to the same profile. - -- A profile has no effect if it’s not associated to a config section. - - ![profile = app and config = account](images/profile-config.png) - -You can start your file by pasting the following XML (or any other examples in this topic) into a XML editor, and saving the file as *filename*.xml. Each section of this XML is explained in this topic. +## Full XML sample ```xml - - - - - - - - - - - - - - - - -``` - -### Profile - -A profile section in the XML has the following entries: - -- [**Id**](#id) - -- [**AllowedApps**](#allowedapps) - -- [**StartLayout**](#startlayout) - -- [**Taskbar**](#taskbar) - - -#### Id - -The profile **Id** is a GUID attribute to uniquely identify the profile. You can create a GUID using a GUID generator. The GUID just needs to be unique within this XML file. - -```xml - - … - -``` - -#### AllowedApps - -**AllowedApps** is a list of applications that are allowed to run. Apps can be Universal Windows Platform (UWP) apps or Classic Windows desktop apps. - -Based on the purpose of the kiosk device, define the list of applications that are allowed to run. This list can contain both UWP apps and desktop apps. When the mult-app kiosk configuration is applied to a device, AppLocker rules will be generated to allow the apps that are listed in the configuration. - ->[!NOTE] ->You cannot manage AppLocker rules that are generated by the multi-app kiosk configuration in [MMC snap-ins](https://technet.microsoft.com/library/hh994629.aspx#BKMK_Using_Snapins). - -- For UWP apps, you need to provide the App User Model ID (AUMID). [Learn how to get the AUMID](https://go.microsoft.com/fwlink/p/?LinkId=614867), or [get the AUMID from the Start Layout XML](#startlayout). -- For desktop apps, you need to specify the full path of the executable, which can contain one or more system environment variables in the form of %variableName% (i.e. %systemroot%, %windir%). - -Here are the predefined assigned access AppLocker rules for **UWP apps**: - -1. Default rule is to allow all users to launch the signed package apps. -2. The package app deny list is generated at runtime when the assigned access user signs in. Based on the installed/provisioned package apps available for the user account, assigned access generates the deny list. This list will exclude the default allowed inbox package apps which are critical for the system to function, and then exclude the allowed packages that enterprises defined in the assigned access configuration. If there are multiple apps within the same package, all these apps will be excluded. This deny list will be used to prevent the user from accessing the apps which are currently available for the user but not in the allowed list. - - >[!NOTE] - >Multi-app kiosk mode doesn’t block the enterprise or the users from installing UWP apps. When a new UWP app is installed during the current assigned access user session, this app will not be in the deny list. When the user signs out and signs in again, the app will be included in the deny list. If this is an enterprise-deployed line-of-business app and you want to allow it to run, update the assigned access configuration to include it in the allowed app list. - -Here are the predefined assigned access AppLocker rules for **desktop apps**: - -1. Default rule is to allow all users to launch the desktop programs signed with Microsoft Certificate in order for the system to boot and function. The rule also allows the admin user group to launch all desktop programs. -2. There is a predefined inbox desktop app deny list for the assigned access user account, and this deny list is adjusted based on the desktop app allow list that you defined in the multi-app configuration. -3. Enterprise-defined allowed desktop apps are added in the AppLocker allow list. - -The following example allows Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, and Notepad apps to run on the device. - -```xml - + + + @@ -140,25 +36,7 @@ The following example allows Groove Music, Movies & TV, Photos, Weather, Calcula -``` - -#### StartLayout - -After you define the list of allowed applications, you can customize the Start layout for your kiosk experience. You can choose to pin all the allowed apps on the Start screen or just a subset, depending on whether you want the end user to directly access them on the Start screen. - -The easiest way to create a customized Start layout to apply to other Windows 10 devices is to set up the Start screen on a test device and then export the layout. For detailed steps, see [Customize and export Start layout](customize-and-export-start-layout.md). - -A few things to note here: - -- The test device on which you customize the Start layout should have the same OS version that is installed on the device where you plan to deploy the multi-app assigned access configuration. -- Since the multi-app assigned access experience is intended for fixed-purpose devices, to ensure the device experiences are consistent and predictable, use the *full* Start layout option instead of the *partial* Start layout. -- There are no apps pinned on the taskbar in the multi-app mode, and it is not supported to configure Taskbar layout using the `` tag in a layout modification XML as part of the assigned access configuration. -- The following example uses DesktopApplicationLinkPath to pin the desktop app to start. When the desktop app doesn’t have a shortcut link on the target device, [learn how to provision .lnk files using Windows Configuration Designer](#lnk-files). - -This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, and Notepad apps on Start. - -```xml - + @@ -181,184 +59,115 @@ This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, ]]> -``` - -![What the Start screen looks like when the XML sample is applied](images/sample-start.png) - -#### Taskbar - -Define whether you want to have the taskbar present in the kiosk device. For tablet-based or touch-enabled all-in-one kiosks, when you don’t attach a keyboard and mouse, you can hide the taskbar as part of the multi-app experience if you want. - -The following example exposes the taskbar to the end user: - - `` - -The following example hides the taskbar: - - `` - ->[!NOTE] ->This is different from the **Automatically hide the taskbar** option in tablet mode, which shows the taskbar when swiping up from or moving the mouse pointer down to the bottom of the screen. Setting **ShowTaskbar** as **false** will always keep the taskbar hidden. - -### Configs - -Under **Configs**, define which user account will be associated with the profile. When this user account signs in on the device, the associated assigned access profile will be enforced, including the allowed apps, Start layout, and taskbar configuration, as well as other local group policies or MDM policies set as part of the multi-app experience. - -The full multi-app assigned access experience can only work for non-admin users. It’s not supported to associate an admin user with the assigned access profile; doing this in the XML file will result in unexpected/unsupported experiences when this admin user signs in. - - - -The account can be local, domain, or Azure Active Directory (Azure AD). Groups are not supported. -• Local account can be entered as `machinename\account` or `.\account` or just `account`. -• Domain account should be entered as `domain\account`. -• Azure AD account must be specified in this format: `AzureAD\{email address}`. **AzureAD** must be provided AS IS (consider it’s a fixed domain name), then follow with the Azure AD email address, e.g. **AzureAD\someone@contoso.onmicrosoft.com**. - ->[!WARNING] ->Although **Start** > **Settings** > **Accounts** > **Other users** > **Set up assigned access** only supports specifying a local user account, Assigned Access can be configured via WMI or CSP to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the Assigned Access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with Assigned Access, and consider the domain resources potentially exposed by the decision to do so. - - -Before applying the multi-app configuration, make sure the specified user account is available on the device, otherwise it will fail. - ->[!NOTE] ->For both domain and Azure AD accounts, it’s not required that target account is explicitly added to the device. As long as the device is AD-joined or Azure AD-joined, the account can be discovered in the domain forest or tenant that the device is joined to. For local accounts, it is required that the account exist before you configure the account for AssignedAccess. - - -```xml - + + + + MultiAppKioskUser - + + ``` - - - -## Add XML file to provisioning package - - - - -## Apply provisioning package to device - - - -## Considerations for mixed-reality devices - -*There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* - - -#### placeholder for lnk - - - - -## old method (pre-1709) - -Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to [a kiosk device](set-up-a-device-for-anyone-to-use.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. - -You can restrict users to a specific set of apps on a device running Windows 10 Enterprise or Windows 10 Education by using [AppLocker](/windows/device-security/applocker/applocker-overview). AppLocker rules specify which apps are allowed to run on the device. - -AppLocker rules are organized into collections based on file format. If no AppLocker rules for a specific rule collection exist, all files with that file format are allowed to run. However, when an AppLocker rule for a specific rule collection is created, only the files explicitly allowed in a rule are permitted to run. For more information, see [How AppLocker works](/windows/device-security/applocker/how-applocker-works-techref). - -This topic describes how to lock down apps on a local device. You can also use AppLocker to set rules for applications in a domain by using Group Policy. - -![install create lockdown customize](images/lockdownapps.png) - -### Install apps - - -First, install the desired apps on the device for the target user account(s). This works for both Store and Win32. For Store apps, you must log on as that user for the app to install. For Win32 you can install an app for all users without logging on to the particular account. - -### Use AppLocker to set rules for apps - - -After you install the desired apps, set up AppLocker rules to only allow specific apps, and block everything else. - -1. Run Local Security Policy (secpol.msc) as an administrator. - -2. Go to **Security Settings** > **Application Control Policies** > **AppLocker**, and select **Configure rule enforcement**. - - ![configure rule enforcement](images/apprule.png) - -3. Check **Configured** under **Executable rules**, and then click **OK**. - -4. Right-click **Executable Rules** and then click **Automatically generate rules**. - - ![automatically generate rules](images/genrule.png) - -5. Select the folder that contains the apps that you want to permit, or select C:\\ to analyze all apps. - -6. Type a name to identify this set of rules, and then click **Next**. - -7. On the **Rule Preferences** page, click **Next**. Be patient, it might take awhile to generate the rules. - -8. On the **Review Rules** page, click **Create**. The wizard will now create a set of rules allowing the installed set of apps. - -9. Read the message and click **Yes**. - - ![default rules warning](images/appwarning.png) - -10. (optional) If you want a rule to apply to a specific set of users, right-click on the rule and select **Properties**. Then use the dialog to choose a different user or group of users. - -11. (optional) If rules were generated for apps that should not be run, you can delete them by right-clicking on the rule and selecting **Delete**. - -12. Before AppLocker will enforce rules, the **Application Identity** service must be turned on. To force the Application Identity service to automatically start on reset, open a command prompt and run: - - ``` syntax - sc config appidsvc start=auto - ``` - -13. Restart the device. - -### Other settings to lock down - - -In addition to specifying the apps that users can run, you should also restrict some settings and functions on the device. For a more secure experience, we recommend that you make the following configuration changes to the device: - -- Remove **All apps**. - - Go to **Group Policy Editor** > **User Configuration** > **Administrative Templates\\Start Menu and Taskbar\\Remove All Programs list from the Start menu**. - -- Hide **Ease of access** feature on the logon screen. - - Go to **Control Panel** > **Ease of Access** > **Ease of Access Center**, and turn off all accessibility tools. - -- Disable the hardware power button. - - Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. - -- Disable the camera. - - Go to **Settings** > **Privacy** > **Camera**, and turn off **Let apps use my camera**. - -- Turn off app notifications on the lock screen. - - Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Logon\\Turn off app notifications on the lock screen**. - -- Disable removable media. - - Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Device Installation\\Device Installation Restrictions**. Review the policy settings available in **Device Installation Restrictions** for the settings applicable to your situation. - - **Note**   - To prevent this policy from affecting a member of the Administrators group, in **Device Installation Restrictions**, enable **Allow administrators to override Device Installation Restriction policies**. - -   - -To learn more about locking down features, see [Customizations for Windows 10 Enterprise](https://go.microsoft.com/fwlink/p/?LinkId=691442). - -### Customize Start screen layout for the device (recommended) - - -Configure the Start menu on the device to only show tiles for the permitted apps. You will make the changes manually, export the layout to an .xml file, and then apply that file to devices to prevent users from making changes. For instructions, see [Manage Windows 10 Start layout options](windows-10-start-layout-options-and-policies.md). - - -  - -  - - - - - +## XSD for AssignedAccess configuration XML + +```xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +``` \ No newline at end of file From ecf0396ff22eff74f32d69c6ba54703b68b2ca03 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 8 Aug 2017 10:11:19 -0700 Subject: [PATCH 015/146] sync --- ...-by-using-provisioning-packages-and-icd.md | 2 +- .../lock-down-windows-10-to-specific-apps.md | 24 +++++++++---------- 2 files changed, 12 insertions(+), 14 deletions(-) diff --git a/windows/configuration/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md b/windows/configuration/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md index c4a13cef3a..18f215ad22 100644 --- a/windows/configuration/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md +++ b/windows/configuration/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md @@ -100,7 +100,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L - **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen. - - **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Select...** and choosing the certificate you want to use to sign the package. + - **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Browse** and choosing the certificate you want to use to sign the package. 12. Click **Next** to specify the output location where you want the provisioning package to go when it's built. By default, Windows Imaging and Configuration Designer (ICD) uses the project folder as the output location. diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index eec365b65e..302ba40b43 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -183,6 +183,10 @@ This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, ``` +>[!NOTE] +>If an app is not installed for the user but is included in the Start layout XML, the app will not be shown on the Start screen. + + ![What the Start screen looks like when the XML sample is applied](images/sample-start.png) #### Taskbar @@ -256,21 +260,13 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L 6. Expand **Runtime settings** > **AssignedAccess** > **MultiAppAssignedAccessSettings**. -7. Enter **layout.xml**. This value creates a placeholder in the customizations.xml file that you will replace with the contents of the layout.xml file in a later step. +7. In the center pane, click **Browse** to locate and select the assigned access configuration XML file that you created. -7. Save your project and close Windows Configuration Designer. + ![Screenshot of the MultiAppAssignedAccessSettings field in Windows Configuration Designer](images/multiappassignedaccesssettings.png) -7. In File Explorer, open the project's directory. (The default location is C:\Users\\*user name*\Documents\Windows Imaging and Configuration Designer (WICD)\\*project name*) +8. (**Optional**: If you want to apply the provisioning package after device initial setup and there is an admin user already available on the kiosk device, skip this step.) Create an admin user account in **Runtime settings** > **Accounts** > **Users**. Provide a **UserName** and **Password**, and select **UserGroup** as **Administrators**. With this account, you can view the provisioning status and logs if needed. -7. Open the customizations.xml file in a text editor. The **<Customizations>** section will look like this: - - ![Customizations file with the placeholder text to replace highlighted](images/customization-start.png) - -7. Replace **layout.xml** with the text from the layout.xml file, [with markup characters replaced with escape characters](#escape). - -8. Save and close the customizations.xml file. - -8. Open Windows Configuration Designer and open your project. +8. (**Optional**: If you already have a non-admin account on the kiosk device, skip this step.) Create a local standard user account in **Runtime settings** > **Accounts** > **Users**. Make sure the **UserName** is the same as the account that you specify in the configuration XML. Select **UserGroup** as **Standard Users**. 8. On the **File** menu, select **Save.** @@ -282,7 +278,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L - **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen. - - **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Select...** and choosing the certificate you want to use to sign the package. + - **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Browse** and choosing the certificate you want to use to sign the package. 12. Click **Next** to specify the output location where you want the provisioning package to go when it's built. By default, Windows Imaging and Configuration Designer (ICD) uses the project folder as the output location. @@ -300,6 +296,8 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L - If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, click **Back** to change the output package name and path, and then click **Next** to start another build. - If you are done, click **Finish** to close the wizard and go back to the **Customizations Page**. + +15. Copy the provisioning package to the root directory of a USB drive. ## Apply provisioning package to device From 20d7e2954a06b99f18c97b747c2f8274b14aa29b Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 8 Aug 2017 10:41:26 -0700 Subject: [PATCH 016/146] sync --- .../lock-down-windows-10-to-specific-apps.md | 41 +++++++++++++++++++ 1 file changed, 41 insertions(+) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 302ba40b43..0aa83ed072 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -302,6 +302,47 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L ## Apply provisioning package to device +Provisioning packages can be applied to a device during the first-run experience (out-of-box experience or "OOBE") and after ("runtime"). + + +### During initial setup, from a USB drive + +1. Start with a computer on the first-run setup screen. If the PC has gone past this screen, reset the PC to start over. To reset the PC, go to **Settings** > **Update & security** > **Recovery** > **Reset this PC**. + + ![The first screen to set up a new PC](../images/oobe.jpg) + +2. Insert the USB drive. Windows Setup will recognize the drive and ask if you want to set up the device. Select **Set up**. + + ![Set up device?](../images/setupmsg.jpg) + +3. The next screen asks you to select a provisioning source. Select **Removable Media** and tap **Next**. + + ![Provision this device](../images/prov.jpg) + +4. Select the provisioning package (\*.ppkg) that you want to apply, and tap **Next**. + + ![Choose a package](../images/choose-package.png) + +5. Select **Yes, add it**. + + ![Do you trust this package?](../images/trust-package.png) + + + +### After setup, from a USB drive, network folder, or SharePoint site + +1. Sign in with an admin account. +2. Insert the USB drive to a desktop computer, navigate to **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** > **Add a package**, and select the package to install. + +>[!NOTE] +>if your provisioning package doesn’t include the assigned access user account creation, make sure the account you specified in the multi-app configuration XML exists on the device. + +![add a package option](../images/package.png) + +### Validate provisioning + +- Go to **Settings** > **Accounts** > **Access work or school**, and then click **Add or remove a provisioning package**. You should see a list of packages that were applied to the device, including the one you applied for the multi-app configuration. +- Optionally, run Event Viewer (eventvwr.exe) and look through logs under **Applications and Services Logs** > **Microsoft** > **Windows** > **Provisioning-Diagnostics-Provider** > **Admin**. ## Considerations for mixed-reality devices From 7afa9eded4414290970ef1ee5326b906200bd5e7 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 8 Aug 2017 10:58:32 -0700 Subject: [PATCH 017/146] fix image links --- .../lock-down-windows-10-to-specific-apps.md | 93 +++++++++++++++++-- 1 file changed, 83 insertions(+), 10 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 0aa83ed072..c25edb0187 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -213,9 +213,9 @@ The full multi-app assigned access experience can only work for non-admin users. The account can be local, domain, or Azure Active Directory (Azure AD). Groups are not supported. -• Local account can be entered as `machinename\account` or `.\account` or just `account`. -• Domain account should be entered as `domain\account`. -• Azure AD account must be specified in this format: `AzureAD\{email address}`. **AzureAD** must be provided AS IS (consider it’s a fixed domain name), then follow with the Azure AD email address, e.g. **AzureAD\someone@contoso.onmicrosoft.com**. +- Local account can be entered as `machinename\account` or `.\account` or just `account`. +- Domain account should be entered as `domain\account`. +- Azure AD account must be specified in this format: `AzureAD\{email address}`. **AzureAD** must be provided AS IS (consider it’s a fixed domain name), then follow with the Azure AD email address, e.g. **AzureAD\someone@contoso.onmicrosoft.com**. >[!WARNING] >Although **Start** > **Settings** > **Accounts** > **Other users** > **Set up assigned access** only supports specifying a local user account, Assigned Access can be configured via WMI or CSP to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the Assigned Access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with Assigned Access, and consider the domain resources potentially exposed by the decision to do so. @@ -309,23 +309,23 @@ Provisioning packages can be applied to a device during the first-run experience 1. Start with a computer on the first-run setup screen. If the PC has gone past this screen, reset the PC to start over. To reset the PC, go to **Settings** > **Update & security** > **Recovery** > **Reset this PC**. - ![The first screen to set up a new PC](../images/oobe.jpg) + ![The first screen to set up a new PC](images/oobe.jpg) 2. Insert the USB drive. Windows Setup will recognize the drive and ask if you want to set up the device. Select **Set up**. - ![Set up device?](../images/setupmsg.jpg) + ![Set up device?](images/setupmsg.jpg) 3. The next screen asks you to select a provisioning source. Select **Removable Media** and tap **Next**. - ![Provision this device](../images/prov.jpg) + ![Provision this device](images/prov.jpg) 4. Select the provisioning package (\*.ppkg) that you want to apply, and tap **Next**. - ![Choose a package](../images/choose-package.png) + ![Choose a package](images/choose-package.png) 5. Select **Yes, add it**. - ![Do you trust this package?](../images/trust-package.png) + ![Do you trust this package?](images/trust-package.png) @@ -337,20 +337,93 @@ Provisioning packages can be applied to a device during the first-run experience >[!NOTE] >if your provisioning package doesn’t include the assigned access user account creation, make sure the account you specified in the multi-app configuration XML exists on the device. -![add a package option](../images/package.png) +![add a package option](images/package.png) ### Validate provisioning - Go to **Settings** > **Accounts** > **Access work or school**, and then click **Add or remove a provisioning package**. You should see a list of packages that were applied to the device, including the one you applied for the multi-app configuration. - Optionally, run Event Viewer (eventvwr.exe) and look through logs under **Applications and Services Logs** > **Microsoft** > **Windows** > **Provisioning-Diagnostics-Provider** > **Admin**. +### Validate multi-app kiosk configuration + +Sign in with the assigned access user account you specified in the configuration to check out the multi-app experience. + +>[!NOTE] +>The setting will take effect the next time the assigned access user signs in. If that user account is signed in when you apply the configuration, make sure the user signs out and signs back in to validate the experience. + +The following sections explain what to expect on a multi-app kiosk. + +#### App launching and switching experience + +In the multi-app mode, to maximize the user productivity and streamline the experience, an app will be always launched in full screen when the users click the tile on the Start. The users can minimize and close the app, but cannot resize the app window. + +The users can switch apps just as they do today in Windows. They can use the Task View button, Alt + Tab hotkey, and the swipe in from the left gesture to view all the open apps in task view. They can click the Windows button to show Start, from which they can open apps, and they can switch to an opened app by clicking it on the taskbar. + +#### Start changes + +When the assigned access user signs in, you should see a restricted Start experience: +- Start gets launched in full screen and prevents the end user from accessing the desktop. +- Start shows the layout aligned with what you defined in the multi-app configuration XML. +- Start prevents the end user from changing the tile layout. + - The user cannot resize, reposition, and unpin the tiles. + - The user cannot pin additional tiles on the start. +- Start hides **All Apps** list. +- Start hides all the folders on Start (including File Explorer, Settings, Documents, Downloads, Music, Pictures, Videos, HomeGroup, Network, and Personal folders). +- Only **User** and **Power** buttons are available. (You can control whether to show the **User/Power** buttons using [existing policies](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-start).) +- Start hides **Change account settings** option under **User** button. + +#### Taskbar changes + +If the applied multi-app configuration enables taskbar, when the assigned access user signs in, you should see a restricted Taskbar experience: +- Disables context menu of Start button (Quick Link) +- Disables context menu of taskbar +- Prevents the end user from changing the taskbar +- Disables Cortana and Search Windows +- Hides notification icons and system icons, e.g. Action Center, People, Windows Ink Workspace +- Allows the end user to view the status of the network connection and power state, but disables the flyout of **Network/Power** to prevent end user from changing the settings + +#### Blocked hotkeys + +The multi-app mode blocks the following hotkeys, which are not relevant for the lockdown experience. + +| Hotkey | Action | +| --- | --- | +| Windows logo key + A | Open Action center | +| Windows logo key + Shift + C | Open Cortana in listening mode | +| Windows logo key + D | Display and hide the desktop | +| Windows logo key + Alt + D | Display and hide the date and time on the desktop | +| Windows logo key + E | Open File Explorer | +| Windows logo key + F | Open Feedback Hub | +| Windows logo key + G | Open Game bar when a game is open | +| Windows logo key + I | Open Settings | +| Windows logo key + J | Set focus to a Windows tip when one is available. | +| Windows logo key + O | Lock device orientation | +| Windows logo key + Q | Open search | +| Windows logo key + R | Open the Run dialog box | +| Windows logo key + S | Open search | +| Windows logo key + X | Open the Quick Link menu | +| Windows logo key + comma (,) | Temporarily peek at the desktop | +| Windows logo key + Ctrl + F | Search for PCs (if you're on a network) | + + +#### Locked-down Ctrl+Alt+Del screen + +The multi-app mode removes options (e.g. **Change a password**, **Task Manager**, **Network**) in the Ctrl+Alt+Del screen to ensure the users cannot access the functionalities that are not allowed in the lockdown experience. + + + + + + + + ## Considerations for mixed-reality devices *There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* -#### placeholder for lnk +## placeholder for lnk From 9fef01eed8d22124633263f9ba3634f8d14dbb01 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 8 Aug 2017 12:31:38 -0700 Subject: [PATCH 018/146] test table --- .../lock-down-windows-10-to-specific-apps.md | 48 ++++++++++++++++++- 1 file changed, 46 insertions(+), 2 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index c25edb0187..61203cce6c 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -206,7 +206,7 @@ The following example hides the taskbar: ### Configs -Under **Configs**, define which user account will be associated with the profile. When this user account signs in on the device, the associated assigned access profile will be enforced, including the allowed apps, Start layout, and taskbar configuration, as well as other local group policies or MDM policies set as part of the multi-app experience. +Under **Configs**, define which user account will be associated with the profile. When this user account signs in on the device, the associated assigned access profile will be enforced, including the allowed apps, Start layout, and taskbar configuration, as well as other local group policies or mobile device management (MDM) policies set as part of the multi-app experience. The full multi-app assigned access experience can only work for non-admin users. It’s not supported to associate an admin user with the assigned access profile; doing this in the XML file will result in unexpected/unsupported experiences when this admin user signs in. @@ -406,12 +406,14 @@ The multi-app mode blocks the following hotkeys, which are not relevant for the | Windows logo key + Ctrl + F | Search for PCs (if you're on a network) | + #### Locked-down Ctrl+Alt+Del screen The multi-app mode removes options (e.g. **Change a password**, **Task Manager**, **Network**) in the Ctrl+Alt+Del screen to ensure the users cannot access the functionalities that are not allowed in the lockdown experience. +#### Auto-trigger touch keyboard - +In the multi-app mode, the touch keyboard will be automatically triggered when there is an input needed and no physical keyboard is attached on touch-enabled devices. You don’t need to configure any other setting to enforce this behavior. @@ -422,10 +424,52 @@ The multi-app mode removes options (e.g. **Change a password**, **Task Manager** *There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* + ## placeholder for lnk +## Policies set by multi-app kiosk configuration + +### Group Policy + +The following local policies affect all **non-administrator** users on the system, regardless whether the user is configured as an assigned access user or not. This includes local users, domain users, and Azure Active Directory users. + +| Setting | Value | +| --- | --- | +Remove access to the context menus for the task bar | Enabled +Clear history of recently opened documents on exit | Enabled +Prevent users from customizing their Start Screen | Enabled +Prevent users from uninstalling applications from Start | Enabled +Remove All Programs list from the Start menu | Enabled +Remove Run menu from Start Menu | Enabled +Disable showing balloon notifications as toast | Enabled +Do not allow pinning items in Jump Lists | Enabled +Do not allow pinning programs to the Taskbar | Enabled +Do not display or track items in Jump Lists from remote locations | Enabled +Remove Notifications and Action Center | Enabled +Lock all taskbar settings | Enabled +Lock the Taskbar | Enabled +Prevent users from adding or removing toolbars | Enabled +Prevent users from resizing the taskbar | Enabled +Remove frequent programs list from the Start Menu | Enabled +Remove Pinned programs from the taskbar | Enabled +Remove the Security and Maintenance icon | Enabled +Turn off all balloon notifications | Enabled +Turn off feature advertisement balloon notifications | Enabled +Turn off toast notifications | Enabled +Remove Task Manager | Enabled +Remove Change Password option in Security Options UI | Enabled +Remove Sign Out option in Security Options UI | Enabled +Remove All Programs list from the Start Menu | Enabled – Remove and disable setting +Prevent access to drives from My Computer | Enabled - Restrict all drivers + + + + + +### MDM policy + From ed412a7a5e6f06098c5a9d01216e1f4e798e04cd Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 8 Aug 2017 12:59:56 -0700 Subject: [PATCH 019/146] lnk files --- .../lock-down-windows-10-to-specific-apps.md | 28 +++++++++++++++---- 1 file changed, 22 insertions(+), 6 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 61203cce6c..fdc42e2380 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -425,8 +425,7 @@ In the multi-app mode, the touch keyboard will be automatically triggered when t *There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* - -## placeholder for lnk + ## Policies set by multi-app kiosk configuration @@ -471,15 +470,32 @@ Prevent access to drives from My Computer | Enabled - Restrict all drivers ### MDM policy +Some of the MDM policies affect all users on the system (i.e. system-wide). +Setting | Value | System-wide + --- | --- | --- +Experience/AllowCortana | Disabled | Yes +Start/AllowPinnedFolderSettings | Disabled | Yes +Start/HidePeopleBar | Enabled | Yes +Start/HideChangeAccountSettings | Enabled | Yes +WindowsInkWorkspace/AllowWindowsInkWorkspace | Disabled | Yes +Start/StartLayout | Configuration dependent | No +WindowsLogon/DontDisplayNetworkSectionUI | Enabled | Yes + +## Provision .lnk files using Windows Configuration Designer +First, create your desktop app's shortcut file by installing the app on a test device. Right-click the installed application, and choose **Send to** > **Desktop (create shortcut)**. Rename the shortcut to `.lnk` -  - -  - +Next, create a batch file with two commands. If the desktop app is already installed on the target device, skip the first command for MSI install. +``` +msiexec /I ".msi" /qn /norestart +copy .lnk "%AllUsersProfile\Microsoft\Windows\Start Menu\Programs\.lnk" +``` +In Windows Configuration Designer, under **ProvisioningCommands** > **DeviceContext**: +- Under CommandFiles, upload your batch file, your .lnk file, and your desktop app installation file +- Under CommandLine, enter cmd /c .bat From 37f226072848bb36e2dbad17d70eb95849e5f189 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 9 Aug 2017 06:54:32 -0700 Subject: [PATCH 020/146] Edu or Ent --- windows/configuration/lock-down-windows-10-to-specific-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index fdc42e2380..3eab3df448 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -37,7 +37,7 @@ Process: ## Prerequisites - (latest version of WCD -- is Store version okay at GA?) -- kiosk device on 1709 +- The kiosk device must be running Windows 10 (Enterprise or Education), version 1709 ## Create XML file From 0b0cf6d2edfa9d1454141905f75680762e0935f6 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 9 Aug 2017 12:37:23 -0700 Subject: [PATCH 021/146] Johnson feedback --- .../lock-down-windows-10-to-specific-apps.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 3eab3df448..47da3a434e 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -37,7 +37,7 @@ Process: ## Prerequisites - (latest version of WCD -- is Store version okay at GA?) -- The kiosk device must be running Windows 10 (Enterprise or Education), version 1709 +- The kiosk device must be running Windows 10 (Pro, Enterprise, or Education), version 1709 ## Create XML file @@ -195,11 +195,15 @@ Define whether you want to have the taskbar present in the kiosk device. For tab The following example exposes the taskbar to the end user: - `` +```xml + +``` The following example hides the taskbar: - `` +```xml + +``` >[!NOTE] >This is different from the **Automatically hide the taskbar** option in tablet mode, which shows the taskbar when swiping up from or moving the mouse pointer down to the bottom of the screen. Setting **ShowTaskbar** as **false** will always keep the taskbar hidden. From 87a2d0a7d0408baf31ee5cf1532594df9c9c7246 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Thu, 10 Aug 2017 07:04:27 -0700 Subject: [PATCH 022/146] Evan feedback --- .../lock-down-windows-10-to-specific-apps.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 47da3a434e..6f1dbb4855 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -480,7 +480,7 @@ Setting | Value | System-wide --- | --- | --- Experience/AllowCortana | Disabled | Yes Start/AllowPinnedFolderSettings | Disabled | Yes -Start/HidePeopleBar | Enabled | Yes +Start/HidePeopleBar | Enabled | No Start/HideChangeAccountSettings | Enabled | Yes WindowsInkWorkspace/AllowWindowsInkWorkspace | Disabled | Yes Start/StartLayout | Configuration dependent | No @@ -495,11 +495,11 @@ Next, create a batch file with two commands. If the desktop app is already insta ``` msiexec /I ".msi" /qn /norestart -copy .lnk "%AllUsersProfile\Microsoft\Windows\Start Menu\Programs\.lnk" +copy .lnk "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\.lnk" ``` In Windows Configuration Designer, under **ProvisioningCommands** > **DeviceContext**: -- Under CommandFiles, upload your batch file, your .lnk file, and your desktop app installation file -- Under CommandLine, enter cmd /c .bat +- Under **CommandFiles**, upload your batch file, your .lnk file, and your desktop app installation file +- Under **CommandLine**, enter cmd /c *FileName*.bat From ed13ede835e8e1b2d493cfa1cdf80e32802cefc2 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Thu, 10 Aug 2017 07:09:26 -0700 Subject: [PATCH 023/146] Chandler feedback --- .../lock-down-windows-10-to-specific-apps.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 6f1dbb4855..0f9c3e2e49 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -44,7 +44,7 @@ Process: Let's start by looking at the basic structure of the XML file. -- A configuration xml can define multiple *profiles*. Each profile has a unique **Id** and defines a set of applications that are allowed to run. +- A configuration xml can define multiple *profiles*. Each profile has a unique **Id** and defines a set of applications that are allowed to run, whether the taskbar is visible, and can include a custom Start layout. - A configuration xml can have multiple *config* sections. Each config section associates a non-admin user account to a default profile **Id**. @@ -96,8 +96,8 @@ The profile **Id** is a GUID attribute to uniquely identify the profile. You can ```xml - … - + … + ``` #### AllowedApps @@ -139,7 +139,7 @@ The following example allows Groove Music, Movies & TV, Photos, Weather, Calcula - + ``` #### StartLayout @@ -180,7 +180,7 @@ This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, ]]> - + ``` >[!NOTE] @@ -222,7 +222,7 @@ The account can be local, domain, or Azure Active Directory (Azure AD). Groups a - Azure AD account must be specified in this format: `AzureAD\{email address}`. **AzureAD** must be provided AS IS (consider it’s a fixed domain name), then follow with the Azure AD email address, e.g. **AzureAD\someone@contoso.onmicrosoft.com**. >[!WARNING] ->Although **Start** > **Settings** > **Accounts** > **Other users** > **Set up assigned access** only supports specifying a local user account, Assigned Access can be configured via WMI or CSP to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the Assigned Access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with Assigned Access, and consider the domain resources potentially exposed by the decision to do so. +>Assigned Access can be configured via WMI or CSP to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the Assigned Access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with Assigned Access, and consider the domain resources potentially exposed by the decision to do so. Before applying the multi-app configuration, make sure the specified user account is available on the device, otherwise it will fail. @@ -233,11 +233,11 @@ Before applying the multi-app configuration, make sure the specified user accoun ```xml - - MultiAppKioskUser - - - + + MultiAppKioskUser + + + ``` From fff16fccbb7870a0c3303141f082f75aa1bbd94d Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Thu, 10 Aug 2017 07:29:04 -0700 Subject: [PATCH 024/146] Chandler feedback --- .../lock-down-windows-10-to-specific-apps.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 0f9c3e2e49..851affbd69 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -474,17 +474,17 @@ Prevent access to drives from My Computer | Enabled - Restrict all drivers ### MDM policy -Some of the MDM policies affect all users on the system (i.e. system-wide). +Some of the MDM policies based on the [Policy configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider) affect all users on the system (i.e. system-wide). Setting | Value | System-wide --- | --- | --- -Experience/AllowCortana | Disabled | Yes -Start/AllowPinnedFolderSettings | Disabled | Yes -Start/HidePeopleBar | Enabled | No -Start/HideChangeAccountSettings | Enabled | Yes -WindowsInkWorkspace/AllowWindowsInkWorkspace | Disabled | Yes +Experience/AllowCortana | 0 - Not allowed | Yes +Start/AllowPinnedFolderSettings | 0 - Shortcut is hidden and disables the setting in the Settings app | Yes +Start/HidePeopleBar | 1 - True (hide) | No +Start/HideChangeAccountSettings | 1 - True (hide) | Yes +WindowsInkWorkspace/AllowWindowsInkWorkspace | 0 - Access to ink workspace is disabled and the feature is turned off | Yes Start/StartLayout | Configuration dependent | No -WindowsLogon/DontDisplayNetworkSectionUI | Enabled | Yes +WindowsLogon/DontDisplayNetworkSelectionUI | <Enabled/> | Yes ## Provision .lnk files using Windows Configuration Designer From e216a81eb02c29097cd41a4670d5099b936d79f8 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Thu, 10 Aug 2017 12:33:05 -0700 Subject: [PATCH 025/146] new troubleshooting topic multi-app --- windows/configuration/TOC.md | 1 + .../multi-app-kiosk-troubleshoot.md | 50 +++++++++++++++++++ 2 files changed, 51 insertions(+) create mode 100644 windows/configuration/multi-app-kiosk-troubleshoot.md diff --git a/windows/configuration/TOC.md b/windows/configuration/TOC.md index 4166b7475b..e418e5df3f 100644 --- a/windows/configuration/TOC.md +++ b/windows/configuration/TOC.md @@ -9,6 +9,7 @@ ### [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) ### [Guidelines for choosing an app for assigned access (kiosk mode)](guidelines-for-assigned-access-app.md) ### [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) +#### [Troubleshoot multi-app kiosk](multi-app-kiosk-troubleshoot.md) #### [Use AppLocker to create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-applocker.md) #### [Multi-app kiosk XML reference](multi-app-kiosk-xml.md) ## [Configure Windows 10 Mobile devices](mobile-devices/configure-mobile.md) diff --git a/windows/configuration/multi-app-kiosk-troubleshoot.md b/windows/configuration/multi-app-kiosk-troubleshoot.md new file mode 100644 index 0000000000..9f065e2414 --- /dev/null +++ b/windows/configuration/multi-app-kiosk-troubleshoot.md @@ -0,0 +1,50 @@ +--- +title: Troubleshoot multi-app kiosk (Windows 10) +description: Tips for troubleshooting multi-app kiosk configuration. +ms.assetid: 14DDDC96-88C7-4181-8415-B371F25726C8 +keywords: ["lockdown", "app restrictions"] +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: edu, security +author: jdeckerms +ms.localizationpriority: medium +--- + +# Troubleshoot multi-app kiosk + + +**Applies to** + +- Windows 10 + +## Unexpected results + +For example: +- Start is not launched in full-screen +- Blocked hotkeys are allowed +- Task Manager, Cortana, or Settings can be launched +- Start layout has more apps than expected + +**Troubleshooting steps** + +1. [Verify that the provisioning package is applied successfully](lock-down-windows-10-to-specific-apps.md#validate-provisioning). +2. Verify that the account (config) is mapped to a profile in the configuration XML file. +3. Verify that the configuration XML file is authored and formatted correctly. Correct any configuration errors, then create and apply a new provisioning package. Sign out and sign in again to check the new configuration. +4. If the issue persists, [capture traces](https://msdn.microsoft.com/library/windows/desktop/dn904629.aspx) for components with the following GUIDs: + - 94097d3d-2a5a-5b8a-cdbd-194dd2e51a00 + - ab84611c-2678-5cd7-d292-c940f9be6c6d + - f9f7f27c-5e5d-5273-468f-038e61965660 + - 3e8fb07b-3e10-5981-01a9-fbd924fd5436 + +## Apps configured in AllowedList are blocked + +1. Ensure the account is mapped to the correct profile and that the apps are specific for that profile. +2. Check the EventViewer logs for Applocker and AppxDeployment (under **Application and Services Logs\Microsoft\Windows**). + + +## Start layout not as expected + +- Make sure the Start layout is authored correctly. Ensure that the attributes **Size**, **Row**, and **Column** are specified for each application and are valid. +- Check if the apps included in the Start layout are installed for the assigned access user. +- Check if the shortcut exists on the target device, if a desktop app is missing on Start. From a756d2c12fc071651ff60efbb189fd9143e22c25 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Thu, 10 Aug 2017 12:35:53 -0700 Subject: [PATCH 026/146] plus feedback --- windows/configuration/multi-app-kiosk-troubleshoot.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/configuration/multi-app-kiosk-troubleshoot.md b/windows/configuration/multi-app-kiosk-troubleshoot.md index 9f065e2414..2e4d7088da 100644 --- a/windows/configuration/multi-app-kiosk-troubleshoot.md +++ b/windows/configuration/multi-app-kiosk-troubleshoot.md @@ -48,3 +48,7 @@ For example: - Make sure the Start layout is authored correctly. Ensure that the attributes **Size**, **Row**, and **Column** are specified for each application and are valid. - Check if the apps included in the Start layout are installed for the assigned access user. - Check if the shortcut exists on the target device, if a desktop app is missing on Start. + +## Feedback + +Feedback and bugs can be submitted in the Feedback Hub. You can use the Problems Steps Recorder to reproduce the issue, and attach the resulting .zip file to your feedback. \ No newline at end of file From 3b96acd451e306aa12d1c1e3dde8bbadff17e464 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Thu, 10 Aug 2017 12:37:01 -0700 Subject: [PATCH 027/146] add link --- windows/configuration/multi-app-kiosk-troubleshoot.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/multi-app-kiosk-troubleshoot.md b/windows/configuration/multi-app-kiosk-troubleshoot.md index 2e4d7088da..6d9ef040cc 100644 --- a/windows/configuration/multi-app-kiosk-troubleshoot.md +++ b/windows/configuration/multi-app-kiosk-troubleshoot.md @@ -51,4 +51,4 @@ For example: ## Feedback -Feedback and bugs can be submitted in the Feedback Hub. You can use the Problems Steps Recorder to reproduce the issue, and attach the resulting .zip file to your feedback. \ No newline at end of file +Feedback and bugs can be submitted in the Feedback Hub. You can use the [Problems Steps Recorder](https://support.microsoft.com/help/22878/windows-10-record-steps) to reproduce the issue, and attach the resulting .zip file to your feedback. \ No newline at end of file From 9fbecd8f17baccaae5ce699651f437a03f1dd246 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Thu, 10 Aug 2017 12:41:06 -0700 Subject: [PATCH 028/146] add policy links --- .../lock-down-windows-10-to-specific-apps.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 851affbd69..da932fc46b 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -478,13 +478,13 @@ Some of the MDM policies based on the [Policy configuration service provider (CS Setting | Value | System-wide --- | --- | --- -Experience/AllowCortana | 0 - Not allowed | Yes -Start/AllowPinnedFolderSettings | 0 - Shortcut is hidden and disables the setting in the Settings app | Yes +[Experience/AllowCortana](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-allowcortana) | 0 - Not allowed | Yes +[Start/AllowPinnedFolderSettings](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-start#start-allowpinnedfoldersettings) | 0 - Shortcut is hidden and disables the setting in the Settings app | Yes Start/HidePeopleBar | 1 - True (hide) | No -Start/HideChangeAccountSettings | 1 - True (hide) | Yes -WindowsInkWorkspace/AllowWindowsInkWorkspace | 0 - Access to ink workspace is disabled and the feature is turned off | Yes -Start/StartLayout | Configuration dependent | No -WindowsLogon/DontDisplayNetworkSelectionUI | <Enabled/> | Yes +[Start/HideChangeAccountSettings](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-start#start-hidechangeaccountsettings) | 1 - True (hide) | Yes +[WindowsInkWorkspace/AllowWindowsInkWorkspace](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowsinkworkspace#windowsinkworkspace-allowwindowsinkworkspace) | 0 - Access to ink workspace is disabled and the feature is turned off | Yes +[Start/StartLayout](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-start#start-startlayout) | Configuration dependent | No +[WindowsLogon/DontDisplayNetworkSelectionUI](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-dontdisplaynetworkselectionui) | <Enabled/> | Yes ## Provision .lnk files using Windows Configuration Designer From aa9bb660860770c7285d390d73643f46c40226fb Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Fri, 11 Aug 2017 06:36:54 -0700 Subject: [PATCH 029/146] sync --- .../lock-down-windows-10-to-specific-apps.md | 39 ++++++++++++++----- 1 file changed, 30 insertions(+), 9 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index da932fc46b..41c14f7bac 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -1,6 +1,6 @@ --- title: Create a Windows 10 kiosk that runs multiple apps (Windows 10) -description: Learn how to configure a kiosk device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. +description: Learn how to configure a kiosk device running Windows 10 so that users can only run a few specific apps. ms.assetid: 14DDDC96-88C7-4181-8415-B371F25726C8 keywords: ["lockdown", "app restrictions", "applocker"] ms.prod: w10 @@ -34,10 +34,12 @@ Process: 2. [Add XML file to provisioning package](#add-xml) 3. [Apply provisioning package to device](#apply-ppkg) +If you don't want to use a provisioning package, you can deploy the configuration XML file using [mobile device management (MDM)](#alternate-methods) or you can configure assigned access using the [MDM Bridge WMI Provider](#bridge). + ## Prerequisites - (latest version of WCD -- is Store version okay at GA?) -- The kiosk device must be running Windows 10 (Pro, Enterprise, or Education), version 1709 +- The kiosk device must be running Windows 10 (S, Pro, Enterprise, or Education), version 1709 ## Create XML file @@ -343,12 +345,31 @@ Provisioning packages can be applied to a device during the first-run experience ![add a package option](images/package.png) + + ### Validate provisioning - Go to **Settings** > **Accounts** > **Access work or school**, and then click **Add or remove a provisioning package**. You should see a list of packages that were applied to the device, including the one you applied for the multi-app configuration. - Optionally, run Event Viewer (eventvwr.exe) and look through logs under **Applications and Services Logs** > **Microsoft** > **Windows** > **Provisioning-Diagnostics-Provider** > **Admin**. -### Validate multi-app kiosk configuration + + +## Use MDM to deploy the multi-app configuration + + +Multi-app kiosk mode is enabled by the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp). Your MDM policy can contain the assigned access configuration XML. + +If your test device is enrolled with a MDM server which supports applying the assigned access configuration, you can use it to apply the setting remotely. + +The OMA-URI for multi-app policy is `./Device/Vendor/MSFT/AssignedAccess/Configuration`. + + + +## Use MDM Bridge WMI Provider to configure assigned access + + + +## Validate multi-app kiosk configuration Sign in with the assigned access user account you specified in the configuration to check out the multi-app experience. @@ -357,13 +378,13 @@ Sign in with the assigned access user account you specified in the configuration The following sections explain what to expect on a multi-app kiosk. -#### App launching and switching experience +### App launching and switching experience In the multi-app mode, to maximize the user productivity and streamline the experience, an app will be always launched in full screen when the users click the tile on the Start. The users can minimize and close the app, but cannot resize the app window. The users can switch apps just as they do today in Windows. They can use the Task View button, Alt + Tab hotkey, and the swipe in from the left gesture to view all the open apps in task view. They can click the Windows button to show Start, from which they can open apps, and they can switch to an opened app by clicking it on the taskbar. -#### Start changes +### Start changes When the assigned access user signs in, you should see a restricted Start experience: - Start gets launched in full screen and prevents the end user from accessing the desktop. @@ -376,7 +397,7 @@ When the assigned access user signs in, you should see a restricted Start experi - Only **User** and **Power** buttons are available. (You can control whether to show the **User/Power** buttons using [existing policies](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-start).) - Start hides **Change account settings** option under **User** button. -#### Taskbar changes +### Taskbar changes If the applied multi-app configuration enables taskbar, when the assigned access user signs in, you should see a restricted Taskbar experience: - Disables context menu of Start button (Quick Link) @@ -386,7 +407,7 @@ If the applied multi-app configuration enables taskbar, when the assigned access - Hides notification icons and system icons, e.g. Action Center, People, Windows Ink Workspace - Allows the end user to view the status of the network connection and power state, but disables the flyout of **Network/Power** to prevent end user from changing the settings -#### Blocked hotkeys +### Blocked hotkeys The multi-app mode blocks the following hotkeys, which are not relevant for the lockdown experience. @@ -411,11 +432,11 @@ The multi-app mode blocks the following hotkeys, which are not relevant for the -#### Locked-down Ctrl+Alt+Del screen +### Locked-down Ctrl+Alt+Del screen The multi-app mode removes options (e.g. **Change a password**, **Task Manager**, **Network**) in the Ctrl+Alt+Del screen to ensure the users cannot access the functionalities that are not allowed in the lockdown experience. -#### Auto-trigger touch keyboard +### Auto-trigger touch keyboard In the multi-app mode, the touch keyboard will be automatically triggered when there is an input needed and no physical keyboard is attached on touch-enabled devices. You don’t need to configure any other setting to enforce this behavior. From 6b9c893a165dd1f242f418767bc40f827fa31077 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Fri, 11 Aug 2017 09:10:37 -0700 Subject: [PATCH 030/146] add WMI Bridge --- .../lock-down-windows-10-to-specific-apps.md | 66 +++++++++++++++++++ 1 file changed, 66 insertions(+) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 41c14f7bac..c8b830041f 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -367,6 +367,72 @@ The OMA-URI for multi-app policy is `./Device/Vendor/MSFT/AssignedAccess/Configu ## Use MDM Bridge WMI Provider to configure assigned access +Environments that use WMI can use the [MDM Bridge WMI Provider](https://msdn.microsoft.com/library/windows/desktop/dn905224.aspx) to configure the MDM_AssignedAccess class. See [PowerShell Scripting with WMI Bridge Provider](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/using-powershell-scripting-with-the-wmi-bridge-provider) for more details about using a PowerShell script to configure AssignedAccess. + +Here’s an example to set AssignedAccess configuration: + +1. Download the [psexec tool](https://technet.microsoft.com/sysinternals/bb897553.aspx). +2. Run `psexec.exe -i -s cmd.exe`. +3. **WHAT GOES HERE? DOC JUST SAYS "powershell"** +4. Execute the following script: + +```ps +$nameSpaceName="root\cimv2\mdm\dmmap" +$className="MDM_AssignedAccess" +$obj = Get-CimInstance -Namespace $namespaceName -ClassName $className +$obj.Configuration = @" +<?xml version="1.0" encoding="utf-8" ?> +<AssignedAccessConfiguration xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"> + <Profiles> + <Profile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}"> + <AllAppsList> + <AllowedApps> + <App AppUserModelId="Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic" /> + <App AppUserModelId="Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo" /> + <App AppUserModelId="Microsoft.Windows.Photos_8wekyb3d8bbwe!App" /> + <App AppUserModelId="Microsoft.BingWeather_8wekyb3d8bbwe!App" /> + <App AppUserModelId="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" /> + <App DesktopAppPath="%windir%\system32\mspaint.exe" /> + <App DesktopAppPath="C:\Windows\System32\notepad.exe" /> + </AllowedApps> + </AllAppsList> + <StartLayout> + <![CDATA[<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"> + <LayoutOptions StartTileGroupCellWidth="6" /> + <DefaultLayoutOverride> + <StartLayoutCollection> + <defaultlayout:StartLayout GroupCellWidth="6"> + <start:Group Name="Group1"> + <start:Tile Size="4x4" Column="0" Row="0" AppUserModelID="Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic" /> + <start:Tile Size="2x2" Column="4" Row="2" AppUserModelID="Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo" /> + <start:Tile Size="2x2" Column="4" Row="0" AppUserModelID="Microsoft.Windows.Photos_8wekyb3d8bbwe!App" /> + <start:Tile Size="2x2" Column="4" Row="4" AppUserModelID="Microsoft.BingWeather_8wekyb3d8bbwe!App" /> + <start:Tile Size="4x2" Column="0" Row="4" AppUserModelID="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" /> + </start:Group> + <start:Group Name="Group2"> + <start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk" /> + <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk" /> + </start:Group> + </defaultlayout:StartLayout> + </StartLayoutCollection> + </DefaultLayoutOverride> + </LayoutModificationTemplate> + ]]> + </StartLayout> + <Taskbar ShowTaskbar="true"/> + </Profile> + </Profiles> + <Configs> + <Config> + <Account>MultiAppKioskUser</Account> + <DefaultProfile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}"/> + </Config> + </Configs> +</AssignedAccessConfiguration> +"@ + +Set-CimInstance -CimInstance $obj +``` ## Validate multi-app kiosk configuration From bc67748390c8a8b2da57ac3d9e895b48451fad55 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Fri, 11 Aug 2017 09:38:20 -0700 Subject: [PATCH 031/146] Lily feedback --- .../lock-down-windows-10-to-specific-apps.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index c8b830041f..cb6ea2db23 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -224,13 +224,13 @@ The account can be local, domain, or Azure Active Directory (Azure AD). Groups a - Azure AD account must be specified in this format: `AzureAD\{email address}`. **AzureAD** must be provided AS IS (consider it’s a fixed domain name), then follow with the Azure AD email address, e.g. **AzureAD\someone@contoso.onmicrosoft.com**. >[!WARNING] ->Assigned Access can be configured via WMI or CSP to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the Assigned Access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with Assigned Access, and consider the domain resources potentially exposed by the decision to do so. +>Assigned access can be configured via WMI or CSP to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the assigned access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with assigned access, and consider the domain resources potentially exposed by the decision to do so. Before applying the multi-app configuration, make sure the specified user account is available on the device, otherwise it will fail. >[!NOTE] ->For both domain and Azure AD accounts, it’s not required that target account is explicitly added to the device. As long as the device is AD-joined or Azure AD-joined, the account can be discovered in the domain forest or tenant that the device is joined to. For local accounts, it is required that the account exist before you configure the account for AssignedAccess. +>For both domain and Azure AD accounts, it’s not required that target account is explicitly added to the device. As long as the device is AD-joined or Azure AD-joined, the account can be discovered in the domain forest or tenant that the device is joined to. For local accounts, it is required that the account exist before you configure the account for assigned access. ```xml @@ -521,6 +521,11 @@ In the multi-app mode, the touch keyboard will be automatically triggered when t ## Policies set by multi-app kiosk configuration +It is not recommended to set policies enforced in assigned access multi-app mode to different values using other channels, as the multi-app mode has been optimized to provide a locked-down experience. + +When the multi-app assigned access configuration is applied on the device, certain policies are enforced system-wide, and will impact other users on the device. + + ### Group Policy The following local policies affect all **non-administrator** users on the system, regardless whether the user is configured as an assigned access user or not. This includes local users, domain users, and Azure Active Directory users. From 2d85f06145509ee674f5d7f339823568804160a5 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Fri, 11 Aug 2017 09:45:12 -0700 Subject: [PATCH 032/146] Chien-Her feedback --- .../configuration/lock-down-windows-10-to-specific-apps.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index cb6ea2db23..f05e2550d7 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -21,7 +21,7 @@ ms.localizationpriority: high A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using a provisioning package. >[!NOTE] ->For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](lock-down-windows-10-applocker.md) to configure a multi-app kiosk. +>For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](lock-down-windows-10-applocker.md) to configure a multi-app kiosk. Avoid applying AppLocker rules to devices running the multi-app kiosk configuration described in this topic. The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for individuals by putting in front of them only the things they need to use, and removing from their view the things they don’t need to access. @@ -109,7 +109,7 @@ The profile **Id** is a GUID attribute to uniquely identify the profile. You can Based on the purpose of the kiosk device, define the list of applications that are allowed to run. This list can contain both UWP apps and desktop apps. When the mult-app kiosk configuration is applied to a device, AppLocker rules will be generated to allow the apps that are listed in the configuration. >[!NOTE] ->You cannot manage AppLocker rules that are generated by the multi-app kiosk configuration in [MMC snap-ins](https://technet.microsoft.com/library/hh994629.aspx#BKMK_Using_Snapins). +>You cannot manage AppLocker rules that are generated by the multi-app kiosk configuration in [MMC snap-ins](https://technet.microsoft.com/library/hh994629.aspx#BKMK_Using_Snapins). Avoid applying AppLocker rules to devices running the multi-app kiosk configuration. - For UWP apps, you need to provide the App User Model ID (AUMID). [Learn how to get the AUMID](https://go.microsoft.com/fwlink/p/?LinkId=614867), or [get the AUMID from the Start Layout XML](#startlayout). - For desktop apps, you need to specify the full path of the executable, which can contain one or more system environment variables in the form of %variableName% (i.e. %systemroot%, %windir%). From 7fddc375e7014407e015a982346103e87ef5df10 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Fri, 11 Aug 2017 09:48:37 -0700 Subject: [PATCH 033/146] fix link --- windows/configuration/lock-down-windows-10-to-specific-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index f05e2550d7..644d811400 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -247,7 +247,7 @@ Before applying the multi-app configuration, make sure the specified user accoun ## Add XML file to provisioning package -Before you add the XML file to a provisioning package, you can [validate your configuration XML against the XSD](multi-app-kiosk-xml.md). +Before you add the XML file to a provisioning package, you can [validate your configuration XML against the XSD](multi-app-kiosk-xml.md#xsd-for-assignedaccess-configuration-xml). Use the Windows Configuration Designer tool to create a provisioning package. [Learn how to install Windows Configuration Designer.](provisioning-packages/provisioning-install-icd.md) From 588b2a64b717a578812bca04d286bcff0200ff9b Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Mon, 14 Aug 2017 12:07:14 -0700 Subject: [PATCH 034/146] fixed meta fields --- windows/configuration/lock-down-windows-10-applocker.md | 2 ++ windows/configuration/lock-down-windows-10-to-specific-apps.md | 2 ++ windows/configuration/multi-app-kiosk-troubleshoot.md | 2 ++ windows/configuration/multi-app-kiosk-xml.md | 2 ++ 4 files changed, 8 insertions(+) diff --git a/windows/configuration/lock-down-windows-10-applocker.md b/windows/configuration/lock-down-windows-10-applocker.md index 398e2d77e9..d4422e7212 100644 --- a/windows/configuration/lock-down-windows-10-applocker.md +++ b/windows/configuration/lock-down-windows-10-applocker.md @@ -9,6 +9,8 @@ ms.sitesec: library ms.pagetype: edu, security author: jdeckerms ms.localizationpriority: high +ms.date: 10/05/2017 +ms.author: jdecker --- # Use AppLocker to create a Windows 10 kiosk that runs multiple apps diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 644d811400..3d5708f045 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -9,6 +9,8 @@ ms.sitesec: library ms.pagetype: edu, security author: jdeckerms ms.localizationpriority: high +ms.date: 10/05/2017 +ms.author: jdecker --- # Create a Windows 10 kiosk that runs multiple apps diff --git a/windows/configuration/multi-app-kiosk-troubleshoot.md b/windows/configuration/multi-app-kiosk-troubleshoot.md index 6d9ef040cc..def3c5d507 100644 --- a/windows/configuration/multi-app-kiosk-troubleshoot.md +++ b/windows/configuration/multi-app-kiosk-troubleshoot.md @@ -9,6 +9,8 @@ ms.sitesec: library ms.pagetype: edu, security author: jdeckerms ms.localizationpriority: medium +ms.date: 10/05/2017 +ms.author: jdecker --- # Troubleshoot multi-app kiosk diff --git a/windows/configuration/multi-app-kiosk-xml.md b/windows/configuration/multi-app-kiosk-xml.md index 642995cf1e..d355221ba5 100644 --- a/windows/configuration/multi-app-kiosk-xml.md +++ b/windows/configuration/multi-app-kiosk-xml.md @@ -9,6 +9,8 @@ ms.sitesec: library ms.pagetype: edu, security author: jdeckerms ms.localizationpriority: medium +ms.date: 10/05/2017 +ms.author: jdecker --- # Multi-app kiosk XML reference From 2b87e7e324f520425b5327d82d15c65a7b56c880 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 16 Aug 2017 12:22:04 -0700 Subject: [PATCH 035/146] MR kiosk --- .../lock-down-windows-10-to-specific-apps.md | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 3d5708f045..c9c2485ef7 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -515,10 +515,22 @@ In the multi-app mode, the touch keyboard will be automatically triggered when t ## Considerations for mixed-reality devices -*There are some Mixed Reality specific bits we wanted to include. For example, the IT Admin needs to include the Mixed Reality Portal as an allowed app if they want to include Mixed Reality apps in kiosk mode.* +With the advent of [mixed-reality devices (video link)](https://www.youtube.com/watch?v=u0jqNioU2Lo), you might want to create a kiosk that can run mixed-reality apps. +To create a multi-app kiosk that can run mixed reality apps, you must include the following apps in the [AllowedApps list](#allowedapps): +- +- +- + +These are in addition to any mixed reality apps that you allow. + +**Before your kiosk user signs in:** An admin user must sign in to the PC, connect a mixed reality device, and complete the guided setup for the Mixed Reality Portal. The first time that the Mixed Reality Portal is set up, some files and content are downloaded. A kiosk user would not have permissions to download and so their setup of the Mixed Reality Portal would fail. + +After the admin has completed setup, the kiosk account can sign in and repeat the setup. The admin user may want to complete the kiosk user setup before providing the PC to employees or customers. + +There is a difference between the mixed reality experiences for a kiosk user and other users. Typically, when a user connects a mixed reality device, they begin in the [Mixed Reality home](https://developer.microsoft.com/windows/mixed-reality/navigating_the_windows_mixed_reality_home). The Mixed Reality home is a shell that runs in "silent" mode when the PC is configured as a kiosk. When a kiosk user connects a mixed reality device, they will see only a blank display in the device, and will not have access to the features and functionality available in the home. To run a mixed reality app, the kiosk user must launch the app from the PC Start screen. ## Policies set by multi-app kiosk configuration From b2e8ce08843fad85db358d43a3747994d3d702bd Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 16 Aug 2017 12:36:19 -0700 Subject: [PATCH 036/146] fix format --- .../configuration/lock-down-windows-10-to-specific-apps.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index c9c2485ef7..522492d226 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -520,9 +520,9 @@ With the advent of [mixed-reality devices (video link)](https://www.youtube.com/ To create a multi-app kiosk that can run mixed reality apps, you must include the following apps in the [AllowedApps list](#allowedapps): -- -- -- +- `` +- `` +- `` These are in addition to any mixed reality apps that you allow. From 1bd8cd5d0dd63c39a1547f9fe45aa596386b5d03 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 16 Aug 2017 12:49:43 -0700 Subject: [PATCH 037/146] test --- windows/configuration/lock-down-windows-10-to-specific-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 522492d226..d306a1794f 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -520,7 +520,7 @@ With the advent of [mixed-reality devices (video link)](https://www.youtube.com/ To create a multi-app kiosk that can run mixed reality apps, you must include the following apps in the [AllowedApps list](#allowedapps): -- `` +- `` test - `` - `` From cc4b1ebc7ed0b9c7179b0c1a9d3a7178510aab2d Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 16 Aug 2017 12:51:34 -0700 Subject: [PATCH 038/146] remove test --- windows/configuration/lock-down-windows-10-to-specific-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index d306a1794f..522492d226 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -520,7 +520,7 @@ With the advent of [mixed-reality devices (video link)](https://www.youtube.com/ To create a multi-app kiosk that can run mixed reality apps, you must include the following apps in the [AllowedApps list](#allowedapps): -- `` test +- `` - `` - `` From 326bea237934aad4d65430233388c1bad260c5a6 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 16 Aug 2017 12:57:17 -0700 Subject: [PATCH 039/146] reformat --- .../lock-down-windows-10-to-specific-apps.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 522492d226..68e5b214ee 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -520,9 +520,11 @@ With the advent of [mixed-reality devices (video link)](https://www.youtube.com/ To create a multi-app kiosk that can run mixed reality apps, you must include the following apps in the [AllowedApps list](#allowedapps): -- `` -- `` -- `` +```xml + + + +``` These are in addition to any mixed reality apps that you allow. From 1f00f87eeb91469ce0400ee303618ec723ca8361 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 16 Aug 2017 13:38:58 -0700 Subject: [PATCH 040/146] fix format --- .../configuration/lock-down-windows-10-to-specific-apps.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 68e5b214ee..93da718408 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -513,10 +513,10 @@ In the multi-app mode, the touch keyboard will be automatically triggered when t -## Considerations for mixed-reality devices +## Considerations for mixed reality devices -With the advent of [mixed-reality devices (video link)](https://www.youtube.com/watch?v=u0jqNioU2Lo), you might want to create a kiosk that can run mixed-reality apps. +With the advent of [mixed reality devices (video link)](https://www.youtube.com/watch?v=u0jqNioU2Lo), you might want to create a kiosk that can run mixed reality apps. To create a multi-app kiosk that can run mixed reality apps, you must include the following apps in the [AllowedApps list](#allowedapps): From 70c1756f3a73c5f7875db440c695afe4ccc3806c Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 29 Aug 2017 06:26:17 -0700 Subject: [PATCH 041/146] fixed MR section heading --- windows/configuration/lock-down-windows-10-to-specific-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 93da718408..173cf6862b 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -513,7 +513,7 @@ In the multi-app mode, the touch keyboard will be automatically triggered when t -## Considerations for mixed reality devices +## Considerations for Windows Mixed Reality immersive headsets With the advent of [mixed reality devices (video link)](https://www.youtube.com/watch?v=u0jqNioU2Lo), you might want to create a kiosk that can run mixed reality apps. From b78da12d5bda949f1ac347a809b1af9aee02782b Mon Sep 17 00:00:00 2001 From: Jan Pilar Date: Tue, 5 Sep 2017 13:30:18 +0200 Subject: [PATCH 042/146] Update minimum-requirements-windows-defender-advanced-threat-protection.md Secure Productive Enterprise no longer exists and has been replaced (renamed) with Microsoft 365 (M365) subscription. Jan --- ...-requirements-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/minimum-requirements-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/minimum-requirements-windows-defender-advanced-threat-protection.md index 897439c53a..e4bb4d521d 100644 --- a/windows/threat-protection/windows-defender-atp/minimum-requirements-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/minimum-requirements-windows-defender-advanced-threat-protection.md @@ -35,7 +35,7 @@ Windows Defender Advanced Threat Protection requires one of the following Micros - Windows 10 Enterprise E5 - Windows 10 Education E5 -- Secure Productive Enterprise E5 (SPE E5) which includes Windows 10 Enterprise E5 +- Microsoft 365 E5 (M365 E5) which includes Windows 10 Enterprise E5 For more information, see [Windows 10 Licensing](https://www.microsoft.com/en-us/Licensing/product-licensing/windows10.aspx#tab=2). From a7581f6be6c09f01f97c41ced21ade0e44449e87 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 6 Sep 2017 07:15:33 -0700 Subject: [PATCH 043/146] wmi powershell --- windows/configuration/lock-down-windows-10-to-specific-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index 173cf6862b..64859ceeb0 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -375,7 +375,7 @@ Here’s an example to set AssignedAccess configuration: 1. Download the [psexec tool](https://technet.microsoft.com/sysinternals/bb897553.aspx). 2. Run `psexec.exe -i -s cmd.exe`. -3. **WHAT GOES HERE? DOC JUST SAYS "powershell"** +3. In the command prompt launched by psexec.exe, enter `powershell.exe` to open PowerShell. 4. Execute the following script: ```ps From 1cd14bbb16a5475e6b124a9d845dd8ed4eaca7b8 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Wed, 6 Sep 2017 12:41:08 -0700 Subject: [PATCH 044/146] update wdav requirements for UC --- windows/deployment/update/update-compliance-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 5e3c80f9c4..2728abccb0 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -32,7 +32,7 @@ Windows Error Reporting | watson.telemetry.microsoft.com Online Crash Analysis | oca.telemetry.microsoft.com - 4. To use Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a 3rd party AV program), and must have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). See the [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) content library for more information on enabling, configuring, and validating Windows Defender AV. + 4. To use Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a 3rd party AV program), and must have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). For endpoints running Windows 10, version 1607 or earlier, Windows telemetry must also be set to **Enhanced**. See the [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) content library for more information on enabling, configuring, and validating Windows Defender AV. ## Add Update Compliance to Microsoft Operations Management Suite From 35c1f967f2a45a5b51902266f15a6142dc83b604 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Wed, 6 Sep 2017 12:46:10 -0700 Subject: [PATCH 045/146] include link to troubleshooting doc for reporting in UC --- windows/deployment/update/update-compliance-using.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-using.md b/windows/deployment/update/update-compliance-using.md index 9daa1a5103..a49a7adb06 100644 --- a/windows/deployment/update/update-compliance-using.md +++ b/windows/deployment/update/update-compliance-using.md @@ -147,7 +147,10 @@ Devices are evaluated by OS Version (e.g., 1607) and the count of how many are C You'll notice some new tiles in the Overview blade which provide a summary of Windows Defender AV-related issues, highlighted in the following screenshot. -![verview blade showing a summary of key Windows Defender Antivirus issues](images/update-compliance-wdav-overview.png) +![Overview blade showing a summary of key Windows Defender Antivirus issues](images/update-compliance-wdav-overview.png) + +>[!IMPORTANT] +>If your devices are not showing up in the Windows Defender AV assessment section, check the [Troublshoot Windows Defender Antivirus reporting](/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting) topic for help. The **AV Signature** chart shows the number of devices that either have up-to-date [protection updates (also known as signatures or definitions)](/windows/threat-protection/windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus), while the **Windows Defender AV Status** tile indicates the percentage of all assessed devices that are not updated and do not have real-time protection enabled. The Windows Defender Antivirus Assessment section provides more information that lets you investigate potential issues. From 0b721bcc78529ccd2d974d56e7dcfdcfc2746b10 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Wed, 6 Sep 2017 13:29:44 -0700 Subject: [PATCH 046/146] updates to troubleshooting uc --- .../troubleshoot-reporting.md | 58 +++++++++++++++++++ ...indows-defender-antivirus-compatibility.md | 32 +++++++++- 2 files changed, 88 insertions(+), 2 deletions(-) create mode 100644 windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md new file mode 100644 index 0000000000..bf8a1da73f --- /dev/null +++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md @@ -0,0 +1,58 @@ +--- +title: Troubleshoot problems with reporting tools for Windows Defender AV +description: Identify and solve common problems when attempting to report in Windows Defender AV protection status in Update Compliance +keywords: troubleshoot, error, fix, update compliance, oms, monitor, report, windows defender av +search.product: eADQiWindows 10XVcnh +ms.pagetype: security +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: iaanw +ms.author: iawilt +ms.date: 09/06/2017 +--- + +# Troublehsoot Windows Defender Antivirus reporting + +**Applies to:** + +- Windows 10 + +**Audience** + +- IT administrators + +When you use [Update Compliance to obtain reporting into the protection status of machines or endpoints](/windows/deployment/update/update-compliance-using#wdav-assessment) in your network that are using Windows Defender Antivirus, you may encounter problems or issues. + +Typically, the most common indicators of a problem are: +- You only see a small number or subset of all the devices you were expecting to see +- You do not see any devices at all +- The reports and information you do see is outdated (older than a few days) + +For common error codes and event IDs related to the Windows Defender AV service that are not related to Update Compliance, see the [Windows Defender Antivirus events](troubleshoot-windows-defender-antivirus.md) topic. + +There are three steps to troubleshooting these problems: + +1. Confirm that you have met all pre-requisites +2. Check your connectivity to the Windows Defender cloud-based service +3. Submit support logs + + +## Confirm pre-requisites + +In order for devices to properly show up in Update Compliance, you have to meet certain pre-requisites for both the Update Compliance service and for Windows Defender Antivirus protection: + +>[!div class="checklist] +>- Endpoints are using Windows Defender Antivirus as the sole antivirus protection app. Using any other antivirus app will cause Windows Defender AV to disable itself and the endpoint will not be reported in Update Compliance. + + + + + + +## Related topics + +- [Windows Defender Antivirus in Windows 10](windows-defender-antivirus-in-windows-10.md) +- [Deploy, manage updates, and report on Windows Defender Antivirus](deploy-manage-report-windows-defender-antivirus.md) diff --git a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md index 84504a1aae..6a237c878c 100644 --- a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md +++ b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md @@ -15,23 +15,51 @@ ms.date: 06/13/2017 --- -# Windows Defender Antivirus and Advanced Threat Protection: Better together +# Windows Defender Antivirus and third party protection products **Applies to:** - Windows 10 +- Windows Server 2016 **Audience** - Enterprise security administrators +Windows Defender Antivirus is automatically enabled and installed on endpoints and devices that are running Windows 10. + +However, on endpoints and devices that are protected with a non-Microsoft antivirus or antimalware app, Windows Defender AV will automatically disable itself. If you are also using Windows Defender Advanced Threat Protection, then Windows Defender AV will enter a passive mode. + +The following matrix illustrates how Windows Defender AV operates in these instances. Note that this matrix only applies to endpoints that are running Windows 10: + +Windows version | Antimalware protection offered by | Organization enrolled in Windows Defender ATP | Windows Defender AV state +-|-|- +Windows 10 | A third-party product that is not offered or developed by Microsoft | Yes | Passive mode +Windows 10 | A third-party product that is not offered or developed by Microsoft | No | Disabled mode +Windows 10 | Windows Defender AV | Yes | Active mode +Windows 10 | Windows Defender AV | No | Active mode +Windows 8 or earlier | A third-party product that is not offered or developed by Microsoft | N/A (Windows Defender ATP requires Windows 10) | N/A (Windows Defender AV requires Windows 10) +Windows 8 or earlier | Windows Defender AV | Yes | Active mode +Windows 8 or earlier | Windows Defender AV | No | Active mode +Windows Server 2016 | A third-party product that is not offered or developed by Microsoft | Yes | Passive mode +Windows Server 2016 | A third-party product that is not offered or developed by Microsoft | No | Disabled mode +Windows Server 2016 | Windows Defender AV | Yes | Active mode +Windows Server 2016 | Windows Defender AV | No | Active mode + +If you are using another antivirus or antimalware protection app. + +If you are enrolled in Windows Defender Advanced Threat Protection, and you are not using Windows Defender AV as your real-time protection service on your endpoints, Windows Defender AV will automatically enter into a passive mode. + + +On Windows Server 2016 SKUs, Windows Defender AV will not enter into the passive mode and will run alongside your other antivirus product. + Windows Defender Advanced Threat Protection (ATP) is an additional service beyond Windows Defender Antivirus that helps enterprises detect, investigate, and respond to advanced persistent threats on their network. See the [Windows Defender Advanced Threat Protection](../windows-defender-atp/windows-defender-advanced-threat-protection.md) topics for more information about the service. -If you are enrolled in Windows Defender ATP, and you are not using Windows Defender AV as your real-time protection service on your endpoints, Windows Defender will automatically enter into a passive mode. On Windows Server 2016 SKUs, Windows Defender AV will not enter into the passive mode and will run alongside your other antivirus product. +I In passive mode, Windows Defender AV will continue to run (using the *msmpeng.exe* process), and will continue to be updated, however there will be no Windows Defender user interface, scheduled scans won't run, and Windows Defender AV will not provide real-time protection from malware. From ef511b73a58ef7f70d0274fd4a752abd69b7ebff Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Wed, 6 Sep 2017 15:01:39 -0700 Subject: [PATCH 047/146] compat updates --- .../windows-defender-antivirus-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md index 6a237c878c..bf5df70ede 100644 --- a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md +++ b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md @@ -41,7 +41,7 @@ Windows 10 | A third-party product that is not offered or developed by Microsoft Windows 10 | Windows Defender AV | Yes | Active mode Windows 10 | Windows Defender AV | No | Active mode Windows 8 or earlier | A third-party product that is not offered or developed by Microsoft | N/A (Windows Defender ATP requires Windows 10) | N/A (Windows Defender AV requires Windows 10) -Windows 8 or earlier | Windows Defender AV | Yes | Active mode +Windows 8 or earlier | System Center Endpoint Protection (offered by System Center Configuration Manager) | Yes | Active mode Windows 8 or earlier | Windows Defender AV | No | Active mode Windows Server 2016 | A third-party product that is not offered or developed by Microsoft | Yes | Passive mode Windows Server 2016 | A third-party product that is not offered or developed by Microsoft | No | Disabled mode From 8b37014f331264cae58ccb88e66c7e3adbf4cb0e Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Thu, 7 Sep 2017 14:31:56 -0700 Subject: [PATCH 048/146] updates to compat topics --- .../images/server-add-gui.png | Bin 0 -> 61500 bytes ...indows-defender-antivirus-compatibility.md | 53 ++++++++++-------- ...fender-antivirus-on-windows-server-2016.md | 49 +++++++++++++--- ...dows-defender-security-center-antivirus.md | 4 +- .../windows-defender-security-center.md | 53 ++++++++++-------- 5 files changed, 104 insertions(+), 55 deletions(-) create mode 100644 windows/threat-protection/windows-defender-antivirus/images/server-add-gui.png diff --git a/windows/threat-protection/windows-defender-antivirus/images/server-add-gui.png b/windows/threat-protection/windows-defender-antivirus/images/server-add-gui.png new file mode 100644 index 0000000000000000000000000000000000000000..f9ef1da5f76500bd11da29b59b3518355dfbb247 GIT binary patch literal 61500 zcmdS>WmH>T^e>FkmKLW)ic68=?oN>whvM$;?pCZg6hd(+#flT0BEj7)xO=c5L4v&L z^B?COcid0sjC;P^Jw}q5xz}1*Hs|_H*@^zDEQ5tkf{uiQge4~{t%ij33Kt3KB?syo z1P2#vD2ez$bCK0`M?%8x{r7tDlNp;7!9?+pQ~HduiH7nXnO#FaKl(q`XB`g-PY)Ys zH>A?4QCS2F(*wbhwsbdlvvu*Xb#_9+L!+WW@X`PArJP-S-E6IGJdi5hjtU{T*#B|e zEKUCv{orBiXoj>Uzv%Gb;VFID+vJVa zS7gXzfQS$B`iNkjdxz})P zhASXu7a+rSW^o;mMLc5=R$D!%eca=XsW($Q^Nx_lPY5&OhcuJMteCIMnU|qc3rfjcUJn&6M=O498hnbdg-cQbhl)67p{!F4ZJCW9}CUeuS5>a_PI_oe>|88yS& z?v7iIQ(=e`Uj|Wf7dN%8TwE!XOY{Pf{KsuTPmU-J#j6#c6E3}hfl9)9O&1lx-geFt zEzt>~3J`N+U~0MX=YJdOMZd*wY5*#O47IEM$lo@>LSp}chCL(oz%_%m82VGv-pjXr zm%V{uKJHMaXN=|c@Ye!wU=*(uzp?a(#}}-s!Dn*>Sxg9?j+w_fzha|P+f2Q4D95wi zEy7%`I^4m&0#Z;pyl|~LRQ-|sm$cT%!l1RNs`Rrh=STYlId^4Iz2O7h{!)E=qNczo z`@eIUuIxf@rgk0D>^o0sw5oxj*yejpckzg&&jbZ+?uWf*CF;xFiN zZ!)VaCcs%f7ju}o0lcp|uLGfZ*49>OdZ~eWGam*zJKl$FnXJSnv<|m=CokIzZIjas zYef&mdFAK~ci@t}+BKXx-2DqVVF;VTbWPCF|ClV|7w`W)e!%s+1iVwXVzFaH?6dWJ z=QN?9wP2nQCJUd-NuP)HdHpT??7*2?pLF!$ zvwYxtRLa_Z%fF<8{xS+yCgr0>#!iv(ZmK9Ir1z7Um@#W870cz>6>>d!h zR00O=vPKT5Y>{B4j_hova%{b0P}jiPevThS3)#DxdX%vUanKN5o0k>8-)j86qJ25w7jbxeF(~WJ*$!qQuzXReH{&!WVDOefO?|~XTVYu{1~JX`r2Nxj zk42jHOPha2j8GZtFcEv)lXHak^B;?h@DnekT+%(bL ziZYCj#$9s)DNyIoL+sRh?7)fgTIZUbKY4 z!#LczhjBD43{k(5mTkc!pxa?^6_?pHu>z*l7g9p~CTh+_!{AA3`BG5!<4b{R?*53g zUJeVM4a-2}g%X}IGlEw+p4ZBjP3wUH9gj?i4Gp4C+saH}GyHoSaI~RF_t)dlO#*^x z$0a!7^`S*614T%j-R!J+KIkL5@`O0P@#)5Y>b~&EHnVp7L0m@izpp{T4@M5{-UjyI z8^7TXh*qgD;Kl#n=fVGbF#MkpH74KctS7X*$o@4;?S?jm_kVC!{qLM-|9?}4F|voH znLd5PWFI_-`FyTl4X>hjqFR3$Nw~5NbOe8wtAERvx+wrVf7!3RXvS{aC5jxWVj2rv z6Ms9P`TqP8QNWwR-RH#(J~OvK0J=V=r5a1>#)ivE>oG8rG-3Dr<x6}0gerB4kyx13X2C~^L4ls$DpKJMt%ADx1FY`ZGUsK z{HnG<`rp2|wmCPLJqA(S^s&}})5Jrt`?(2Lq{68PAV6<{#~)OJw)Y<%`TMu)Ybk>Tj>OuTGqDJo&138k~2%+Z?~fVoC=H#5#UkZE<*rOyT=SIInGE z!0Ud>KrcizS z;pu5LqLSW`?djoK#T8&RV)Fi|6Vma6NhC?Yog=YnkFBu4{2lp&1&I#?-;VM{2ND9MLg>EH3h zEHP#ehkJJulZ8JtFKB!W=Am}lv+(kf!_W4H_AK?gWaUN6=aA~F?-8}Bl5x|YZA82c ze7_LYe4{;JYKyrXb;c~IadE+u#C0rcV?MQ6J0vP_x&`ltuu1Hdt$jxCm4<= zKq2Pxp+zCuR$Dw6cfhl&3mN6c>a5wf%A8ptf)3Z(E2wK@){~_QufNs&YoH?Hs>AS^FtfC+r4% zX68TdcaQ0!(&?t+=%$>Ac)t%a@?T?_DENU<@e(guboBN^;+LkiA-K2auah~?X3Sr( zpFCKgkff$nSwKwrLulP1_W5`@@#qrXg73b-U_zMoJ80xa3|a+#>)09hEx?)0ul=9q z6!!3WL4$Jo!Bjf3Hqp_8+f|hH7|SIS5NIMEqN!bvMCJ`W^TcjGfxNYA19e;-DtZ3B zXi6fD=3~=>5&P3@8Ieftg=-3wU8!2>n>h*hk8{-lzF_)Y7$q|5#5+;Q#$OS){q1=B z>fu1>+n2E19ist2+^~jgbZ;)Tn8;EJoEoC7^PW)s#|evgPOaNK!GT7ZIvKpdt=Kq6 z*fW!cPrqoE712-7tM7*jT{y8s9eo_D{mm25dD@$-C~6&ixS3$_9*^0i)aqTpli0>S zt~b=ygZtH^PWTFg6Sl(g!wjd=pu#Z)%G<5{(>(5AW8evev+CbuxSa^Z$IT?Ye+Np( z+$v-UNMGB_TRG0Io;|R7Gar=G5ctN21=U-{kqP#O(Vq$-SUuv-*d8$p5$|U$+;S@q zO3~BnK=fH_bqSZ%`_At5 z#Tnb;@Jwr>TPHfN-F$xVGHUVKR0PBxuG{~7;p2Qr@C1Y~tm}uNR%xcCNAb0J$XM$c z8C@K93M#9g_gRZ{>a%vD?e(vq<7M8%iYs;%e79ZW`qjf*sW#19awsX-mzN)HOnPz z0R4*XfgC`v|C#zf+p$!Li7n|5IEmi>w0LIvvw`-u7DXHIm{D2Wf!F;81?AAoo}Hyf z()KHIQs;)%H*b9T z2x^dLq$5;cDB*ZpG}xWuEnWh_VQ!&OoUOFlZWK@4#C(4#y|wdqccry~!gl+t#88w} z{Lw+h%fTA^d~hHL2Xg^MWI+MU z6IK*-PaQr+2lkX2uV$Uz4R46Aj%Rs#ah%RP|I{luSpbXNKux#K;`jT^ELWaNmgPWZ z!sg<0(yHBSl_G6d35 z{2D#TgMHoc0FhZXfHaxCXC|K`jY%}4Q7kJhN!nt+G}U;L*>dxVV=s1iHb@&Xc#rb? z07ory!;Y_Pt~nd>R~ot|I(GK}g6Oy}QLMLYFK4t@Qp}v5C?xK|6if9^{8lD!_@1VL zW?BEiKEf}rgA=5cmiktD5>SMuZ{TC$C2b>k#`v48d4rE0%$JhO++__-k+j#uD~#c+ z%U(6*DNAnJ4yHjEcm+LeqK$th$a5qYveO2f2CP-G>nf~gJFMEgjb%s-cCIHw`q5o1 zWx2suA8D2w#)y38-d3>wY4$lunC2+tK8fu!5pE0#u8s(n&T501Uy}-PR80l#ISW{? zpU3{hlh8wEL#&D$V=F_RgQ0Le27BBy-dz*#MyzG5?WG=e3&mn@Q^l%x@@D1Irv2Wu zCD=%=Nortm-yAgN^^G?IbUpxCCd`UG(`wfZ{7WwM-My{d%O5AL$x&{Ct60I%W;eRQ zgB2BYZ)Pxj-)pe`XJ?N*QpZJ;`=0MIH(s-V(~$(F?hpm8kKv$HO@F%7^I#9v!hY0C zg8tJsvY%U`D4o6nAaHC8!&Y*|K>zovM&bkW1NUaZ#LJLA(R68HHodlas;v6|6YNlXYwwh7w41uS2};h!G3R`WU~}T$l|PBHt*C^ZcfxMF^#*(zLEFru zea|WN-yLP|N917bS0B0OueN>~jlVmB4j*ia_)s_>0~f0-`fY*m2LW#fh^Ce>y2vA|{&-&(b#@32QR={P;comWw97?>%MX83Va<_yzp7 zyxZ5tgZXq7pm1Mej0<$bD?qv0ZW*)>5Gz9Hy%#nj$29UF&)rMK?}0l4m%rSXRVtpr z939Q}oJN<)1>-xv(9rT0_~#O{yOkmM@VB4ciNsnsp^m?7#_h@E9RFa%4UL;NReBNNyF#1GZ@OHwwy+hYOd> za(QkVrj#muoVB0mB;e~1ddM;F`58VdK0bd|v9D?qmCF(Nt*0Qt9Tn7h;@*VVaR4`zHR&8Spko@ z9OP7_h0rp0%W_iR;}D#H8!+S!T9-(CcLzj|QInPqVh+-KW`6^+>B>c3*|?po5frC5#%N+ zI(q(2!kOG5!UGAGpIqGiZk&|B+Fk->W2Ta4oE9y~`P6%uAONsOUwE81WqrkWMb(Y2 z-pipiFHX{0bzF$-nqUkVOu6#j+OxTlxQUR{`j*Hj*y)?KaKP;Ll)WIH%?U#_gjrZ* znPMfIQx}DNcV%b+`0ChkK_qh1+-P4=rZqEh$ZbD#T&%^N#T-Sz+~X#sZaroX(>ukG z>y5c_;*gN+RQ8Liw_%rF@!8j;Bd##dsch4gt7&?Xr7FR8e{c7IvxJ`O*6m|@>%9A8 z>wyL=r}6X(!>UX9D~XSPvZX`SvxQ!1&$X>U-MRl7>1Tb0dv82XE~$V0s{WT3l%069 zZ!WsOj-O!!HXPe~TzA=^UPoeAsd(-G*4%OVdq^@LcA*>p7IN-nFM*lh>NKK7+RNxD$}YQ|aj(4UW9wq z^(G;*akH!%<2E6z!eBL9A3e=tgN95anN9`Li&9Vb?qh)Z; zc#)XVZBn(@GivA5N?(8uGJd7WqG#TD4#Id8e6$_b$h6c0>Q$2E!tgH1U#&Sp^te~` zdXGLjyNt-!iFOSdDn8Z7h?dAcHiyj6xYaljDXa>r)X+hN{XrFwzUeq}vayVAfQ;IS z=N_G^bpbqh2_{r=?C*niaw;MI{d`o`!vGk)pceCd&!z2;i+Y;7#s0tZ zGeCkO9CzM_^rttTCHg?Ux7;8JbQSCOq+gu%Wgv$MM9Zr~&_k_?NOAA$tTUn|pDRy2 zILntu>vt^)k8ld3?kH`q1$dwXn^yVH-}OW!lw+pD02$fGao5#7{tvr{EOv3(6Z?tl z2GAL%p(WG&I3qjVdhR6*jf;=Tv1?@($8!; z4FhV|{v&Qifx2J}=TrMm!;=*ZZ($GgqA@-UZtr^^Cf7X_82*!n-B0qr^&bMVBEW$u zuBTUt$B%pAko~_&I1i6LY>CykQ`IlpSr0G=RPMx0KtF&l@gFYKqXohotcT!dY-
C@Ys`lJd~7KQ;I{-q|k$M1TR@G6A$7#LwW3qv0n5 z#uF~Oo|OPZ)Zv*tJGkT#`;_+vdfJ~u<`lrqDM4A&Rhv9V6};0?UaQ+^MQTh2k=GU{ zkZL}YCOsX53wiZ@@e|X#=P9zHvA#S{_CiKMnXy@5aw3|I`93CdAz7_a<+>X994)GU z>|Gfa7G~=)GsEIaOUeJhn8}B9z04^P@NthEX3NblLzqQBqz?uvp+tu zN$Qkod5wR}Sh)IQ9Hs+lGCwyQGb|B;{P7P&aq=Pv^L{6Z$%*;B|j?!;dEyo8Vt zYVlO6R$j68o4@*|HLlcs52^zb(EwM?hU$hiUAik`#z+Z@FMsh3RE{gJ$dA)e10! zGw*b}WCqp+8=`q_(b4)1CD^G4)Xoy>v{?T_=Hf!L6Fmm!UEU>_XV)*nTWx0cpZ+{OLF#yQ7A1b{? z?u7D-lYami8vLB5aI@^^Dy4`Yan{}gtTKGm(^w7I3C8k{RuHa@dQYm~iV`%td;i0L zK+p+?uu`Z0y_C>Q`d-{a_4YWd4m{P|8u-Jpnm!F@(cH&U#<1$l1Z3~X>Xo)qDR%NE zvd-GWeJJ4Bf*?ZfkSXwq~EvHHl)@^66$dWFGnu zTo*m4*T3ohwZMwikH0mwx7l=MzD&7Pb1AfJX0OqIVZn@?o$WEZQI}pYfGujoZl12z zm%G3JIVnBWvx_4QWL3_w7y(wOjB$Jbl7NgdwUN!oL$TC|i4P zFhc0w!JsPRl9tP|lJj|`{(1WyukCsfVb+=Lf!$50X}OQpF1jRvz90p@bio_#%ZX*P z^!ZIviZRR@39M!4sJXW5<<@mvpgDzpkYFsr<^uCL3{oy<-5ymn8f@!Glh2C830Dtp z0=?I_A;zxP-WTLyM2n}?pjd50fXpy0(rr#Z2Q>)2xlDMq75l|6=oqI#YI6#6Zs_0Z zd$+k^c+gHcDy-}1>~oRWRzs=tlS$f5 zybgJLhrF9L>JSx1OZ}{Sp4=b3TTWfbXRr75e|^C(uMOJi!IV4f%IvMSiQ69gl*mWp z-jhQyz)N}evi;4%_BT4(fQ$FGoNu{>ie7_}Unx25cXfYfEmTx|8W*COT1t9&~&2o-Oa{7TqaJ#*?tl zu}YrZiS)DdL!q=}A@xoPULLYKD*+1uMruSpzSfS9rkw1z(NQI=I^(>Q1Gj8rxmT@j zZ_NtifEGXA8Rg24(ZT_!#?p6(&|c%@f}=8U8a4GkO>^z5cXvumEFakU(82F`Me?)5 z1Q7ODQkk3ztu&LQ2R<-EPV6*u4?yAUrsRKd{h=%SSggN*Y&)g&*5hJqC_R~riW?1( zc*tC3E7Dh@D|qUXWe69YxFHU+E~L$BBj0bf&&xe-&q*j@s1iyZgZZ@0SudRGraodj z`}ws|d6|o>-S;TgGDa(M$#JFZHdGox#^^|4T<0|w)HcY<0rI@_ECzng9Hg)F4w&0b5_M!CH>z|@@#^7ZYO9O?veCM{u>R{rru%M)m$ZIIU>bl!afgB<1wVt0NJ_Ndbz5_WIx5 zoL=7ywG?pRz5pCcQ#gN9-DO>*yAilm}~dE4B3Jktz2b6zWz_MAmLC1)6TbjrFaLj%Uhs zj@%TG2VecnlT$=1-X)Iil=@nj6uZ`obSXA@m)0`yz+TI-Op^oB0U(8|;8F|gn3wnR zR^Z;lq7jHYDDlZ7*WRI3X61DI!LD3Jw=aRwC=t3}f!5gAe;aF9?r7`1ynRDlUQIOI z+}N=Mx#7K8(=JN2Zwp%6I^Wj&d*5%Zj~Qt7;JpX&F7bIzxedGuY8QoYTq!~AAt!o% z^&{TKsd_Tdbz<@1ONet^KH0?m>cCHmw5D~Oz(WON&_MOSd>GJbsnU3>H%>ImsO+aY z`JF8cda54D&~0p|3k?j$sR;a?-6X+T=`u(&s-&pX(VluU1{b%I1xaH+fn?C8n{2l9 zhq`+Vj1R8Ko9myhP;sqQXzAC1tkg+z3BKB!NsrMwMzTSSoIVfc!|WE?#~NHK?#;49 z?_(L473Dop-$`smsr`=6i3yCB6reJFN4guuC=$+r9*4!Dh!txkz2!i+w+o7CGuadINw*ZP=(jD(SE0kylrsVcLKo)AAoVsU4j|=Y$eZ<7{u?>CDH)^s*iolV4bk7DF_gt-TQ7jma&58N=`TS&|~g`PX&6sB(bUbu&!EHO`;I3S`2QPdLRF6tQX8&O4dsANMFnBqi%6o*Tk8 z(TL@#nKA_z&4avy^4(2LKw$!{v%b49;lfg*AaFr}*^nZ-gOi&qL!mOy!&>@&vV1VL z!sGjM^00kVs&Gp>;-yTL`(s730=5lS1^-u=?k!`ZN)bYa za}U9AEledSaPkwDFYW|cZsxwOzkqwQvWNfpO3h^rzw@fJQDec7>kT58lB5~THoRZg zHwJTw)CL2+?$Iaw$zhjRyP5kWPJetcXhSeZG|af`IN{g){hril1>HJg-fSa1D=JJ6 zw!&ZKs=MDOl@%V*<5EbX7EPYZj5PlmZLt~cU}c=?_%*g;BxkGh!^XfQRmHE?e>2~o z)6zDUm%JM)uJ6_q; zbc+ps)(ABi*m80PRU=kQ5vz`Uk~c#!J=vs;()&2Df5R7_5d&}W=Z=UK!w8&RQ2ANTs7lp`_R*ESk?pMEy03Xb7;V44&gQq-Dn@w0304CoKkyqz z9@aJWFMC~iPS`lRf0uLgecNL^_fsX=@Wm61@$<*~`Q>Mf0K*a7YoYC{V}(4=aC(j* z9Vah_Xe0Py^SLNmaq+v8{dFR5(%+~fqqL(x9^i9cI5;2v4DE>MPpKm!&5>{K3hDRX zWo+G276@kCcH>mF9`5b?8)do-e6`=?>Lo7X_ctt;H>M-0tR4rG`L#X&aAAuDPp}jClL)}O2z$GbBtg=fmtvh_*5p0r@CCP@_Un$pOi3b5-xvnu?gU@=ozi^= zaFmL_7QC4#}FD&O5guvq-ppl`~a-0{yE#BY^H#t{m56rp|$?t*#`*APyrwc`&-}MdFr~ z{D+6tLdu@-&=9LO!RE3ekw{ng>$u4bNm@oCc_37Qd#Fw-unlAR*)0$)5!12-s>HMd z5StRcW(?o`-ZY$^k#%%d{&Za3&_GXK)Jsf(Ru>=p?ouupAznE zz^AGvT&8ZRq7A{(VE#YZwI$l!ABl^{cM`rsaxPTjG>ZQwGHAW*X_k&L(nS(| zo3mw4#8JaDHMA*#+5bi%>uX~N_(wz`D@KR^-zJbh1qlru-oehs zhG?^x`N{tEA*rk?h8`CoN+kf}wVAQQ!Zi3!Z46(prE(QkMK4f&A^kV;Tcbw)xkt!e3%wld=R!^#i_W=9E(0%r5TCHB zbG2C&5fgBE)pL6MDJ%vY5Is~BKo@J;J&p+2od_;?F(LrRvh3wM}Xt20*4Oval z6X!-|%FP4fW2-c~S!!!*2Zx8v77N-(G{1bE+85!!u%Zj}3kk!+xx+#)n~QdJX0tq; z{x}*`!CoR35Gs5Y7(ZssRHY2bZ5R!P2X;KnYu$(JSKzbc_MQtDLqGCu;QP;8ox{4Z z0_@cZsM2y37?O~<0D}p&CP1BA0#M^re&))0T#Z)dYAj@ z`!>-?_Y+H=e!t5S1PUv8t&WGMYXdZqV}$+bL?C|Q;rFq9Trr{f-$US48dj}lhO!68 zpWa+gNhh7SwzY7i;7pC5W}pICjE2YQMa8lhv=vn??5PGnyXxkA=dquUvl`2E9n)+W z(focQ{leH$wAXg{mNF$O%B4yVtIEcObu5d2zrSnS=OiBL!H_=CW*Ny;F|H>{xeLgC zO`AR}`=(4+@UK6HF=fNccla7vxrvswuy)XNRpwLwNYVbZJS{b@VVG4E9aF_O$pMwu zBknKt6>uozg3%wv2PU@17CGiK96hn`7v*!&MW^FWpU2XfoV-d8q5Zs(fS`+Prp7CR!#33`yTCxVG5~qIIUWm^ZgO z%P7*}<^10A6@+u_v=2>+cPKu!eBh#NO@a;Ob(aK}1V#$14Z7poJP4jCefP4NSO``$ z` z&ZOxJ=a~eq86j1C7HkvpLdtRCnc}=)dxDyZftJRhGsXOO%O~vz9tF|Zf&IxXl;b(@ zh_<)%TouNIPRElGSx-b5J6$1$EkG$kv*(VeQ0|fikw5{O^#!HLq!wC_sI8)g0o@dv-|%!ybfBrQ`?qW` z#a5#ezgt1+t0bvBYV#4CPBF)kSvXb64`R70D}{ZA9%P{ zZh+%{7#Olj7Y5CuJf6Ov(Be{5*5dqE)W^gcR2_rg;8EyyVFBtE|9Xl(doMqyUtBr3 zO}thG%^2TJ&_n*Q+1EY3@mmK=N@T%xZ`aJjwd-);7g`{&j)UlO^kR8qvfE|Ts7g@O z#L`0+J74hFU)@)Cu)g5)VoUxrW#7~j!{Qph*obQWj6x8<=Hc;|GoPBDA|`wGZj1s33{EnGp7ED=g^IfAWcF`4BNz>1m{mhdv78WaPeJJxg~a6=Vou_C3xB~L%o9K z_wE5ZRiqL(&&@ZHl$fS9rD)>g!QUh8#X6;2UmfDBb(Cr&4ui~V|DanS32$}fcm_H1 zU9Vfps{Z!DeOq8trCwl%uq%0vlg*&M`*WXpoYkn|Bd4Kzs?uVf+uk0U2u}?wR@q{6 zpfry-()x=A;j8`P^Gu_1%(5U>p!dLZEyd&}#T#$mjI_6ps0I-3(K^tn)yaOVjo7j6 zDK9S)i3=p~=0_5gB&*|z&=5)ggtYm3kAlbEWIJXYCtDv%{wy4TO~Rb``@+m|=>Oa%uFvKKx~W^}$@e@x}) z?=TX>yRXPlp)5SyL(Oa5iWd%1nBLj%CiO5|z9LW)iP7n;lyR_ttv+j&Cy%jnVCvI4 z`_3VX@%FyN%x&kx>$CXyb6u;3C2ckFUkpd?>kxvTzvKvGpZDPDb|4@f_JRDSee6Kk zJR?&*gc;|vG*if!)pl=cQ9w4S@?L7p%G zen!#-(GS|)83JfjYo_TXTpZP7(}&lhoJdHdsgJl$3o4rn@9!(+yLZi&8urw&EL$SO zNh)(hyV%7a`M$fk+1@)oz#<~Q3QP$)(r3NfKM)r}PtJB`jIokFaJae3J!U9|u~$w` zCpHnDSTbpPpku`EXVgXy%l@iIK?!N%$4w=~pP-4#A^F@0_Un-wIF9!;zx<9(i!caFKe-+QHy0&%iV zKQ`25%BN56UO+D?3YkPg;BDQt7^JS@SaO0uCgb^Dv5`U;3xuBpxF=wCgnbU8GCVaq z#xN&#S(NBldK~+F@B$|(M)PFFR+;SX`|sb>EDCDAJJI}T_uGIKaEnk{!;y4iIcPKI z**~()Tx*SRX3X)X37lko4U3l6+3_ebTME2cpL2fE7FnUx1~^x-GY zg%?%3s35ZSk&?5v2{5a9RNSN_YH4QK?QF3Nu3EO#xs94y%!v{Qb_#i3>jqUOe(Y>yU#Am>jAXfMnzEtrBT*TZzdzaQHdYQX1xvt)g;XwTNG3>rw zg)Q}$SAnnNaAI6=5PrK+gWH`ZzuQQ`5OTv|=O2Hu9m=Ssy3mL=ztmWS7YT3ex>=M_((+gR@{S#pz1U_dBZH zsEeB zGTjT=AvFrE5(_^PC#VGE`olZERVw2NttLrd5MwygK13X*8s}TRTIyBYxLY7FAiZ)n z5{L0T`#l+nDOP<6GfL!yUb63$AFp%>&OXlRybl%^KXxy>)#5e$mUv7`F)trSem^F(PdOxzURn`q|Fc>Q0yKl-rEQ*N^W>z1{6y#w&W0iB0KX3VRzX4HI>E(uQSls$ zo*;P3kO2Rkq4Lm1)D<}yG=WPAdgvp#tQt9_>0P^6fHb`=dXoWA!c)gidRaXrniO{*EkR) z=*#fBU zk2e1y)U{slu)DKey%xbflpf834aJ*iIxW_JLY!1>%o!)l#-eg9ADm8 zSYdLSa(#9+?G_y$*dDKAVF&+FEaBs(3Br8h(`TzfxGWb?CIIPCL-=Q$=e&g9xrR8J z->O7~lI_31p-tdWzC)wus_$%H&c;%m+GQw_cG02h>fQ3b9g7H8=EA({!Hc3U(dkZ7 z!7dP)_m@sYc(5>cN&w`4Ies;KK=>T4_~+#iChooZMgi-TswqDHy>SP^5dEoDP5CIq zX7$rP#V@8!lX=nKjXwgOy{xR>e1jSWzxt&$AfuBanoIE$x8m6jrbsvA3pgL)aY`qI zXj8ifERu;Gh+@Qk%z|pRC#7Xx&`J|tJTMgw)8ir`9923j0F&R`8G|J*zD!c0wO6!i zhBVt8k};y6P!lmdvC39`r8jnc&=N3XMHgM^@a`f;M>I6vV?2a?K0EiJ&=Su}xbC~UZ-rjqM<74BWnWr? zz2{ESoqMzYcGh1hc1_9m#tx47%98yI2qW_cu9EDtGyy^0n)=aU zQuz27Ri0#RGd;WS9FQx(5Tgy$&wpYtDu&|W&+k@?{cBg!B3Vuc zgd`khT72970>kAqiA$x`z(tuXYcjTkAo8n)CR)*U+&`Zu zc3v0uHJsxlLU)oKJq_90`c}Jc8a%JI*8)F zGO~4`|1RPk3EBdfzPDuG->`MVPykI;u&{&>SBSc+f%n|apzB8-rE;^d06N;oX(NW$ z(8Hay%wOSnL(<7(Qy)t>B4ludT&WL}PAzD~#q-Y3U4DI&WEcG6W5Iw&UyOHH#+`Q+ z{aV_R_5+ADgzojOl9;r#ym{T?LXGJw6l}7M-e^4OFJIK!{jTNXOXsh_Qy!OU9V>(~ zJ(YRDjyVpa<_Ci>n$|nirgR5R7RXVQYk>>pDm5z# zP{=Q|fPd#bdnt_juipA`kJSEom?_Uji|y<7ARC%;$2dsk%OUG`g^!!ULfR&_%|eWI z;ll$fwVk0wLsnLpqyycau5r$APQ3q)JAz}SypYzztPD;!I;CR$ntGRhC^e*ZKn;MX z21BzFJYw1$G*I&z?>5VDI;-X<Cum>s*2p$AGN$^jb1?Eja6N$Yc?koqX z{og9xSHMH`Qu_J=xNU^+AEF&$fqBfQYE_PUWHas@v@x(iBXi1{pJ?WdoFX%!oZ1Jf z#}5j+bGb|SMuP_1vw6`R-Ga3V%B~eT=hyQz?7yWLbQ1QnQis(OLwI@VN_{+32r>1WU6J%3+Dyu4p*-4E`ufiS$i$&IlZgtr zy2DlbUbmd?3&vV;kpi;MxU4Pho`iE-h)yL12WjO?03G)XPj!Tz02A3jY|ma#x>)*v zeg@{qb)72|is0cuaNC+A zP0QHY$(hD;FR)QQVU9U_R#8#2D<*v;=m% zKNz*|%KtdgoMkk)*49wiE7Xq=`?~1{f+9LmN|Gc0Z!4XvdDr*X1>l6ofC)y}@%lhg zOMzkRu*~?l`M}c_D^w)UuZi-|Fh?@X$1Q@?*^{_@I1_{ zujEH(otnMpJ`BRO_Y4UCoH~Wj^q7FdsI*e0_e1)}2;Y!7iDQ+$8!+?_z9t;uM}DZv z))kAahdo0Tx!79cRfDn1+kQzGBFFYg!eJ-2OZALMSfqS~h`$p!UTtkkrU@gVVzo_f z&7Qk<&ez9q!8%F{-qWMpZ1Q_N0J~B-3!S;;Esg3sS9#1!%U(W1r`=EK(FfATHpyk$ z8>sIm;VBV!q*c97CWZXkK^z&r1KF;Nb4RzRv2Jvvr*Uapw*zsp0jYq5)}w|hP(rc2 zv85?7{k?y-^$dKB8yBYDr)>9~ZuE z>6^=MIJh08cBAvQfHFCMd>r0;Z!A;=X5<51(`BLDKrgNeuk0bl$FTL*=k}`=XFt<6 z#J@~HPZbGNQiSG)ILB;T;LQpBf+|Mi;)uOMPGQ`ActZ(O+anfx992A43KF3f0QBLF zGpckhI&!y+3~2n}PZhk$Aacqh{5+3G?h`O%yB2)=MzLpIlDkm)z&2M{t!$^fGss^kWm$1;KUnFE<#Vm^sP%kb3)bkq^VF?! zq^fWcjT@`e~AN>I}J4hD#~|p>xW~Hhr*A-m}{r) zp2iWL^zZFWFpk|9(m#A(D7zpzb)9?DxiH;6Zns`CwO`i6%o*wY`QwXg?y)z=ruTC+ z=uPXNU6pz2O$j2h?ji)Q!i73BqEMUGR(hF<(ks_K0g5M_5}0B{>0Z0{Rg<9H*j%)PxSe4#og`8?BmUuE4v&rp4LpY zbd7Wu`|mvMFry!AvhufK12|EVs7!gMN*}VZ#EYb`tv?pY)_y|x^k5Wv*s+oL5jjyM zYM-ZjS6<40A^gYJg)hiNw6~A;C)R^<+%KuOpdRV&YIU*R&dXFEBBEXS@5^%&?R=sl;O;32D>u|e>-%a1WWYvitC&~lQOVz!PzH7 zBf0g;Uqsn=@q?lKs2o3zXvpFPN^2r_0E?LbI6lO3WCPndwIY%W2V!5%wP>!lW`0x7 zHU^EqJxk$lU(DqgF>!RDPzO~(-W<?^!?*)f2mO=*+=L9D6z3b>DF&Y_=*Uk&LOcE1oOAzyzA@x zb_3y@GL?1>6sl0W%QabWdtc%y<%kqxQQR682lx59m2v7f{rN#$ZE`BoP>*2}=R7kT z&zs*wyfrtg?w}lnH(RY&A?mM>)<{IQ>ewQr!P|>+sa;F%8K+&lzrgc(=a6#1? zzjJ0s+ejmdS{RQOkE$~|ilIUSg?sIOJ$OHGV1{#?>WS2uueLvw9{5mMC)%x|- z4b`9+OC>b)Uemc>NArVN)i_sTHTw^EDAHWazSh&)dU~$bYtQh(j)%d6!*JBe}a8#!UR^UzuG6A ze_uyVUAcMr%1*1Y)xj@KvFBW25h0lNsx%2`dT)=)X`2T$u6qvS^BbgXRoz3@rGUXhwvo)Py2q&;Gez|61;dLe-%6UmZ^jKZQ0n*EH0 zndj9e5?r4HZzH>V&z&k(Hsn*PwwYE+n1L1Oim{K z&8k|oaj2dPISQY2W090q^cYI>++q4ca_|Hn(%w;!e5{cdo4PVUaY*%6b(QwSf+1a{ zFfP6A;fsp;YJfXhn)As+34@>ub4)i)M2TlaG8>O!*hl|n`M(X8uNpa62ex@3 z^q~Ipd(5{U^L*@>CEzn?i|=?Yc|Sd)-%z!~WqZKzzz9};YZ}CX%xb2NK2lMiu&fS} zdM!0m5fmwPXgKM3O7JVlho_mIJcu04hVUk*LXXirHpvhxgkW1R?M=IqMs z+daOjY`q+UoP5;EI<8@`tD!^_ZEnH0qg`?+&-PKrl@@y)^}7ba_)!v#QoCuaBe|>5 z#*^>MWIE6vG-}6#@Tqr!L_0q$6`Xj}W13#CNoeVNkMSk`jeYgWZ>#gmtgGt}Mj9oL z)lvMY(Dk;K%2u3Q7ew+8h4$eh@Yz4@nJ-!U7c-2ME;3ksT7KUC?8tpIhlD2Or4igy zULRLy(n1mHqV0G4wi-+jvKh1=Ld3s6cVUaPUd_PqMwU^{Lw{4U{f zzv)+{o#l7_%UzzMYlMU*Qt-qi9(a>n>z6Ew=9Ya6R+(SA<|h2sn*{K@t(aB|==}DW z3_WfA`awbaUNod+UF64ZOS{SVvl;X@)8aCs<~a?)Woh80bUr~Im`{V|xIMdIhClrOj+h4Y#+A0Wtj7d-_lMu{+o;zfoToI=ZVt8);7EfJL zWsWzrUSvD2_6A*Gw1T;UDL-lG^)#z_ef}nmbca|-q&G0sHO+KJfi+r*iuQb?NRa(g z)O?e**;;QXA8JX&*#15*SIl6>g!%XOWnc05AEcAU5w78$nnQPt%1kb}|e(hCmf&9@EiB9`f z=95d`GmPE*C2J?~xQ;N9eeSU>HG28>VeI0=D{f1q?FuI2K=1pVZ%j^KBtj&r$!G*r z6(1@m?l7HE9A925F-pz@ot7#yM(m`9YLh{8G?WXSTCc9a(Ru>@&zK5K| zyCr&V%WdCNk+f4c*;)l-7lN|x`GtW>{a#Qdt@Bv8P|v}qr_Ia0xpJ$Tm0$Ilkg3*v zMvd~?-Hd7v-OE3Io5dQ8V>bD-B_(efHsxkZG#K~W3sxf4rrj2sMlYN$r}OjkR9kf6 z$wWMp>&|PQV`pa-1*UwO7oE0cF5gV=Yxge<=a!N~;`1NMM^9?Tg{`hQdF)noy_p2h zdT_yqsY93$4N2jKans?reU|5^%3%)S#=A*Z)Kt%o2hYnJ$+aTp)A+tPmXhbE?MNj7^n|kLJrBC16<6X9Y&O(u1J8kLQu0QN|UOCLhBw%Ix z06VU=?62*Nrc^BXPW#@B7w_9obE{EU!972}6S-X(=}4D_7VF%E1QxH=j%t4J^@AMR zT|gOz-QrNnanrgpHfA^2kHVE+TDG>IxEiqbKC7%1wCGL z!i@=;_Ra`57`)(uP;4idp6(-nAG+Q5XN`txJtBFr6x(mZ5%~tZ$nH-kkg^$}*q_2ni$w7~ zob;lFB{3YLOD6@XxoR?!m^ozYd8PD_3JIO@yqY&Rzus(jt5{RP&5oPI6*0ws!-#AD z$X_~pfxg;-e<1r&iggJ*50M4XoPhHY92(Nrw1B8C4^s=(WJP#HxuN8Er-`SS;PI=c zE=OC+PnXP_SOg#KgB^vPVy4g3m%mZbuQv8SA*J{l9O7_al0NiKhlrB0JiJPWR+4`v zMIv2F-xMZ_z~aG3Go)P_8E)cSY6A8A7PGIDBuO>@n%I=ICCo^)SwHt#h-lB4t#1%8 z=KwfT`*g2~v!dC{(6|dNu(2s|)a)G3p7HiSeTfZ(<7*sI^dp2cUIjsv(J zhG9i(rKbM-kTW@u8)Y(#)7d95P#gsYaGUgEK;kXAkKlJ&l*ub`Z>Ru-OIv#{FQIrYM>cXfb`!L%iu`=8G>IJ~sQ;TC!$v zroToIk9TMIkB>V0YkYRD8RtcHHcX2hds4HIrcuPDU*nebt=AhvT#AOU$f>e-c4Q)0u2-thK zQ)4{+CAs0k14mucVx|mACM9Bph=f+K@uX>5$)@_VzklD%ge!`33k!u$w(+ioF%S!! z5H5v0*|%pL(Q~wTa&ETRH+d*`an@biXZEIFRBR8r?|E!jQRc~~bj7%FeDS-m?8nr` zryk6j2CU16{p-;cw>M?lvuvVb_ou)sjo;0+A<^Hfk*1R~0)xi%%ZWPB;^3l+aMPt~ zZ8g0HmTFF>P+nY6tweSPSG$mzR*B^7Gh%+*zr!U{?Hm%f%i>VO%LA!(Tj`4C0K=0_ zS|wl^@=FMvZpc_J@_=n!Zt=9vF;W&eHrW<2pBj@=sGL%BJ;v?6jGD#WeTSTRi`?T2 zSU4d-SM-l1g)tWmpcnGQ>6i%&AK_bWV?GyXAT3x1|W#8MKbHQFaWwg=nAXP06Xf+rSC>XfF4F3e1@9vgv)68WFUoowS z@%Me?9%6~M$|pDGY$ONAhzBkhyjydNx>+4bcD54|Z3@ZI>;%qHNgiU9@zB22ytizN z>%$g}4TnYBr0s4Tzb^7=5RopDHEK6G*_F0vHf>`*uPF~yXGAmGnu55# z@MW$s_C?U?5TbAN(S5sHHQa4uV4ZtWOpU{tTvAlY3fkquFflJ#L%&SMAJkqSjF=V4 zzV{84f0bT_WqTn<5o+i+75g? zeB2AN+B-`E(^Ymo;N(2?#bj%iTQ#O)iE<+CNg-3}cBNPbbMfunN#Yuh{{5OYcXK3C zy_#t2-Gz$R+jZaV$~KnAk@d?hnnqO&j_fgKb5BQ8+t|qFjp^qmQY}6S&lZxw))j74 z*_CE0yx4elpE#j<-JgbwP7>}6zt(Qlv;))?OV8lW!-ngyN|AR2^Jm4)zb-o2G0do| zsrx_2$bPSVz5p&dZ;YjJl%Cm@bR8(X)l7*h(9=UTweeC1@@)CXWDbmBWRT32UIa-L0H;u(;SCuDN+@s zesXJvS=faftVgcigy;H*Ld*#q=E>Mf#J?L~cVFa<4C(fDb`?1*)Vo0XZ(k&oxUk0vUXEVGf)AyFV-qmCg`r-cxC~t)c4^STPXHi`9k-u zw%s{Nm&B(%Hm5AV{lWle7OnEx2Jb!6Pv5=@H$P4Gd?_`u57>O1y>B!fWe1sgY`sAY#A@}HhZk`@@M8}D^OuUe>jKEgJF{Jq)E+T)PA{kg z_#0Ah-$yR33a-{}1wW*gWZkS~Q@aj*ikW-?Xq?j_rcx*q?WR`)D!PhCG zo1-?85Kh8cjQ!oNnTg=`v{^$~^3Rs)BUHCcd6(GXj2ol(E2c7h>%%=8|GS+rGrToU zYIsjn>JPHCj1K6QIM^d;LSezQS^p4Y*ipvlg?UbMxcl?w&iRHJa%JS~>9MIE{0Mgl z`f`k>qS+BwPF~{A+=PdK7%`I1PL8*o5PN7|#il=j%v`q4v?pkL(|Hc| ziM6A!Bob89ZwVo$y9uMQX$0UrG%ji*0k*G)mqal&CZOWp`oM6w1p*KcuY+X`qHOeRuY}x z^+XtEd~Iu80M9lyrHc4I6;DekDw;1h+K(y`Q;N$@LVCO6h2JSBz-@Ibr?9?YKEG1U zVAWfKwrF*0c^1?sPxjWx-9w+Nn9sUr zAfyk~JcioDjkyQh?Ce{RhwCWYWz_F?yu!YtEzBApYvlojq;2wZqx(X4WW7wy`Hne_ zad*n@W`hhJfQOO`<6K~qq?VCFB(7+*hVy(pwYk?`mu7{f*$ zpt|iE*MetW`f?zA@At~}8j)C}Vq-)j4|FlN?2~lM?8q_K<_;RH@#tRPoM-~}>-y8& z9We%Qequ#2sc}g>&7>P1N*%vxcyxg4lN~;hdMFH{ZL*cM9v?91Q+kvIN2p(6!oA)k zw?s(2-8YG;emWNL?9bxy_H^F72EC5h;rwHt|9nZPC2L&h(<9U)^AF|>Nl^n%<)-40 z^yszWK6UXs1G!r zGQ@0Z<`x?VhXw{^cjov7aDFOw1zcCsj&?6SXI^<-_tJraACe0^aeX>(dqY0G#yH!18^pBwO&ZPqTbPU(xcV~wqnNMB1X8SQx+zKqwYjC)6aO33a8B*&TUTEBWqRC z_r%eQp9pc)L`@ibB{O&5s8dG%AzK*Ul=R{!? z+{$5kVJ5D(dsN0TMiRI@WJ2dvyOunU|)AGHx2|qh~!^(ACbM$ zWb3eBl1SEYOp07sl@cM<*{ENc9T{E>>{!Abu#Pk2SDXn!1W`F=>|f?6)= zaM_G8v)1iJr}sxPdBOu^im+mA10X|wyYCVTq;A?S25~pKsK1WI7AeiRchU3B*5k*I z*qdo|R6>>^2L4}!=bXI>vC+ek$E5af!_S-^{dayyk2&2pt?QFytWwcr@@v) z&ATP^q;Eg2AL_TJi;OuOF=&4%V;oVnO7g$|(X> zR=)Va^dd#WppFGFivwS^L--ZGP_%oC4PLxunL)={X|>{uiGB{#_yZ|_^Y$#iz{T#O zjh{u1M3&*AjV>SdF|5u>6afG$?V0*l@4jwuZFN}hKOm4a!rA))kGz79Zz$@jTMqoX z_D!tANZvF~`VD^*FcoxwsoC$I%EJXMb8dUsR}=$AqHz*NeNgsXW&%>w^@#B5o->}_ zcl6BBwE3GiC%TK>yMb?hyg4=Y3j2xDJ!c#-GAYv+%rl9xj9Q;#V!q`-?Ta29H%8@z zy-00UW?Xgnm0SoE&tb0pXeiI$?G!(jI8c2VL|B06&d`8CbIEvWXEI5)oiYw0#)XZF z-D~80#p!4~AbDuVSxrSXRvT^ANvR{-m)#&@O}UcoC3#3NX{7Y+OZ|Z!GLZi%6n@c; z5QtFob<~5L!{Y`=Wt;iRoT<|S;U9FQ_%NsRvB*A?-~8*RTd(?ZHrnnh(h^PV>PVCb`Jg2T=COt|QoJ4s&UMMKE4RzG0*4dLX&jdyl~w zz5>$yaHoO^6aP50Z*}XhBWd$Dl<_Ml`ttcD@Vwyt3pFbfFS~0eXc`V?=M|EGg=TLo zWf6lVibhu*RiOc4C|rU~YUhP~pw8kL^j2r@o2EAIKq#fP@!aBYa+{@TUvmkJGe!qZ zWSjHneqG?KbJ2{ka^DD8s1uRB=SU{h@j2Su&yF-7Dn(UiS`Eoaa44Z7FyMu#JqV0= zTEyrq{wpeyEYp2IKp$C7m7|a(jPu5+BYtlN?6+u=IJmPVJZ7Z=^?(r?Wk3D}B-_tz z;!CF7DWT!v)^nTFmf5&cg9yF~J7e>^0R2GM5zG--7*nwo+_0}H%Gsa}h;gYeYlv!wEB@Zh=DUM7 zY9@r(qX#NiNm(pFoCkwdjfCd-{S2%G-y>@9vdMvPb5-}66By^J<0WgE_r^K+G24a) z-PLSScy)<=>2uVuLt~d@=;gOSnb}nCZ4a*{FCD0;ttj@(h>M2rz=V}^e;I!e$UIr5 z%V@y2ke@!6q#k>d6RWw0Pb97BSWpI@R=zhssoc?%%=Bq%I@Ur}{?)9s$Z=nzY4jz* zqMmG&mTE27_Zy|faEDsl8)ZR$xSX*c_Bvx2AMD`w0F-Ntt14y#Br!K@dwf3G@Jz+8 zK{V^lcrcR3K1pPl$6fOk=>%PAX4U62Kx3JMEl>+MZ8ymc(%yoaDwd zf^+g$Env<*!3oTIWI&z4&_!UvLzN^x&QgZZtIO0rD2-zt?|;Zy7-8@x@JCabs+>zSRrjHK;L?(7u( z@&C$z-!Ua8pW2v(;;Ing5yg08NbTPP#=FBxuFxe5hn2wOOM5>iesxgZaW(HMmud@?Gj8d;4$FNH+7|E z)+V#t6%rW3bn3TBcRFEhh6Xquf9kj8y+hG!nT#5qSwjR*=e68#9e`H4EA94Him2|G zSIB%_kLIx3`kk7m%BXb9>AD@w%bZ%f>l`QJ{tECL30a9uwh6Wg>{aQDhwNnileqy} z(H|%?_p%VKfakoC8xCAE45}34tcn#-8%a0Q0Fl8ke;OP7Hx=!Y_+Po0sO>Mms^Go) zJh;BVNKv)q6Ba!bC@Erg0n5uuFm~7+=K#$c1$j@_5LiQ0RL$*@3mLEGLD6YNRE?2~ zY=o)VX(=@bk$%GURHdZAh=iDYx+Nute*ZliE55}+R?GfgbCqJOT-+QU?6UQS`-U!u z-YojQ)MVth7&Sm!-O_B-S16MV0GcGgr4hFfR1^%b#$Zm7n}6-`a-rudoRs1QwVq+1 zgsCtJ4q9pt{z!GSePsy13|UIW9nmjn!6!Yne62H9R+9)7PB+Z@Cpnuc z2*o%#V~>FO-vgZ{m6>w`pGVpK$5|16)Xqo@gUergL{&Wh|OyhnQv&a1k%V5z=~G@;GpY;L{HJSd59l9Gf0trUFWcatfVw(2sm zMl9=6ZF@Zo*W>l%EPqQ^iCmo8^lJC_c0%&_6*?Kfgw!SdtOeyO7rGC9bsz}+Q=bf7 zk`hxn0c^;~X@pc2Tk*Sdx%a0RrgtUE`ID=>BZO900E#_=s&?=n=IU1(73v&1cWcph z$$_F%c!Yn%!mcFoCyL>aA1i_lb>9K{g##Kryku(!lP!4hWioXH)Fd^(zST*0 zLTOQ+t2P_Akl^0Pk!r5|=pWfSGr{-Y%Ew<)e!45OLz(GMM*E!a>|7+}X^ z@)UoW=}H(y_DgxhOoo)?(g}qfYx#}G&sWN&iEJ5DF3yJvCi4+iKdz6%p`q|5kLr{paO|vZb>7WLPG@|o>}6$3A$D(?L7n>48*eb zu}xyZq3e`!2i!Hk|xKJyN?%2{qVfmmIm z|DSF)01h$0Dn}9s^vg~Jvp-guDERde?|oMYi5@y|kWKqWBjsPr$rJ_Cn8HlVxNR=p z($eN9$-V=Qgw+322(trC3)VAdO-)VULTVU9wHSsW)Rgd1Gh;yVP8IfU{?uP#;3hJp znSgP0_xsWRzW%EFcwqB36nCs^&@Fd8xaf?^&&_u8eppEEzp{OgErkXoVF`+3uapS8b$>tG#`95cPH< z3fL#hEDn<=z$#n?Xn1A98p`zt3t5iC8g1pi9s5>`tGn42M}V7=SsC&pY9Gc(&87acTU&4osO52u&IczoRfwsSO6b1SshP#yWFok6tx1D z?1L5Ar8y8d;E~Uxl!mL6BqxkVwffdLlp>VFW6rnH!lglQIfyxkW~6=c)wgKII{qbK zEWWTy0;1-CS>GwY9}6ps(xf;RICDXD&m70#cr*-Os&YWUnzDT_5v zVesl@PIzBR&rJNbSVdNU#&x_aacnG)Sn`?IOC>Bxho9XdU;b&RBQVE8I>vH7iyaA@ z06pCv+@k_L)?P_m_rg!WZeu=AWy4LgBIkXrVi*>g>Q&qj$@so&BX+t4DcCzZW0z*z zfZN<$(Gl0R-L{K%;eG294q~6>wY`*H#BBMsc{Y0}=#AEaVOs$D(fZ70pJ4^wz4ciJ z!xh$7cie=@@-0`$&NgiCs&5HQ-B)LmblX{3q$x=f*0Q(6uLE<-VV!_%#`tilgLGG= zgAfPp+)aNi0aEsg`T9`!=tOnDqr_+HAx#hEww`n)Of=HewWMNGzZt)ptOCjPuhY}u z;EwM%AvfLxX(9QU@&sPb&2CLpM0~tm6>rYfgIDyW@780S!caB|{3cdAkl;(&A)(_%j|S)zLVbQ} za_;YAY7JfOH`d>(@D6r`in&wmvfBwde>^}Chax6O_pg4sLCLTi`a-gLgrw4F&Fd-i z+%&EMIgJtrsE2>>J+0Wdu%h*Wz z(mzq)-l5|$AIROcij7>kEbGzTQv4}U<#~cM`j4v?BytHPgN^SxAqG`GJ|f3$N}%y~ z=2R(Yf2|84o6s3)Nxs;s+lL38)4iFvrAU*F%_@E22hNd?m&1sE@-}NqIrbDyafjg&5ALr?p3m&Op0d*2hkHEv2&OTG$IFyO49rH4b^4vp*9#~;rqYL;oVEnxybBF} z)U=bcG{{QM7;~qmXQ^%}bfhuALKQC2dfgq;;6+p(2d6 z!?LmQP+Rwc>RlB_1Y+^i**lV@%PmZiGsC}?gvCGku6~msd+j-VZ%JR?J8HDcy8Fo? zn8)P+-g)>lbpw*K1;+>oJPfR5OcT#)4BcKPz@?(SI5iz$^6>F!sS$he{Z3AisjcQ= z)(TR%Xj&^d>oZTbyaUC3x^Y1FbyELr@RDRj0wwbfiOXqpQ|Q8{j`s*z@?8IFh=s-R ziNKqeYqM47mN-44z`QUlXiaZD!T?>I$g_HkkIy!Tzs?ok$pgf~rK`eZXcO-Avx8n033wp85E`JR> zJ+FV5TyhR~%O~)4o6jik|Ft0XCYSW@sEhZ2k8tq5BndI%3~08yMa6lC8dvXE<@i2Ap4}2-y|$?h^sFUM{seYT4)z>4A3hND(4Uq_~J0K9LtYP*)v)K$RVkl zCCe)96{RlLd-GKOmHNV9PB2H_XWiGx>%`_%i-l~)eXM39iDuGPr++&yb|(XlmKr#m zc9j|5|Gc;>{YzbaBJN{?I8Lt%@}aM1u3>0o^0bu2j9z;M497mpb%`lGn)kfj|#MET&# zZ0J*Pqb|X{`0n$!n>^>{)Zt7UGG4YhB9FXw8Z7+dD&w5-P#Po8 zXA6$Qe#gVh8*g|kz;I^c_b=-zX6MA$$}4H#sb!0XmdzntNcPKak2lkxhUa`d9?zj% zmcDZ(muhk@adaoYWANGtXp*L;rRBCt&QvJ09U7WrV`J05z88#huj|Fhwmm{>mOHn# zNj1PFF|+JnARs=Y3`pq#NZSLELh`-6y>Jqqav~Wj05jjUYR*qdQd{oJNP%l&Q{kOU zS514mBoz~0z;`YZKKaVxwF?)t>(xXWdFiRhCA{@4Kq!tRP@STjw}1VI=anR{cNOti zGT$~h>91d>rmTZi9!*a~bV`b6&ab!Po4V?f()x<~{fGE<69$jANxXq;HyNfw+?ir+ zKLLYB%2Y8w&g?85J+Fp*#p>)2%LTX;!twyF4 zN1NUdz){m+Rx(lV@Y@iRY?ch1B&zc>*mFgq1YLP+`17abZIxm+IK4WEG;jK-(ZAb0 zYcWrq-B6U-LAUE*QIX3I<3698_vLqF+MrW_%nvw9q6JHWY zsQBz`@3UrwQ7n~YrSqe_idLdc<2> zUh?Ii1`XGXS2Vi2Z^X?r^l#LBq|X*?ZDaD_ipMA*)NQ*fy+|494HH>%7}EO#pA{_0 zqW1T3y*!`Tk6LEN`U@5%g1EDmbhJg6(UZ?#(Zh&!WD94sDQB8fd`3FOLf=c2BeB^~ zDgf7ym~lvsyh<%ZTw^9{x`=pHvk<;LaP5Sw z^jY^bIv$wW|4+dLC#l0m^SO$5m<#TIk?;Zk_#E@A3b;b$DVm3Mnm1?HMLow;Dk?uRMiWW9Z7wFA_9yo;NK;-qqVWm1 zJ>_*U4kPX_>-CAr%@r!ui0N}0ypXqKH`E2V_ZPnox7iA8KV^Yt4UV$pKr@0nKp12Z z5J-7=@ES|y>$dZ~U-AIW;aY`n{-gd9!&Uy@)O}{ThN_yn_}MN(I6r)!4IjAv<>)7Z z&IhuTL}Jt{iKE0qBNd1EucZfqR){3(n6#f4)UWNqDeC2Fd=ixm8ZlV;xs;?b1BQdn z#hJo}M1xvlZY);&&cmv}40A2B2CPB$ZNUA0O(84?6q-bA*@nNq-y#N1G*o`^G`8Nf zaG|~X=@Y@VnOQ$Nv|1_@PQIY6OaoX=x1>WcZ+d)YK%Tq@=`N$ctz{{4|ZpvKFqqI_2DLhV&f-x97k*C#9U29)<6Q%ik7 zFxCgS=p!gMxz@+q2Qo|TpC@^LofBp&z2TAfbfmr=kYWM)K}s0RJG%)i5-~NkH$ZRn zW=^DVc4g&nmiC*M1_lN=I5-n~P7zY_|Jo6&-o&c#dr(UxdL9B%adoVi%yChGqIX-$4rf{?Bys zG%d+}Fd~j6W9CKTow`05m(dwE-zI<;uqFWc171I7qt}sKG%kaiLP}zDfJM@th~|8Ruj{Wqxnl9qJG4IW|9Sz! z2861k*%k-HU^YfnS%%X0IX!DWLP{rln~%v#M8Na|YoldYGX*xz9d|tY@H_AKtatyc z`e*Z<7ZM;+X#k@e{80WMl<-&QQ53+Jd1w0&=E{6z=+qS^k*oe$OBs$ci>xSEi)r)g zC(I#$t~IlMb)Qd4UD2;Rv{8T^_S(!=EUElAf9H=ZH?K$BLb%H4s&#oM_=cBpT(rh5 zWa>E|f$bFd*P4pMn@f&ihDh8r8=2`jq@rJAtT8r2PJoS(5WQFbT;8Vxo=c?XM0f^W{L<_Y&Ucemj zjJ=Q(I@3mvSu9jESJX4)A}`7zS^}54%KcTJE4L5izC}b(t{NhG7swTWVP|;@Gglku zd^P62i;|e=XMgvVXS|HjF;*B#`v*byE-*2-?g*$@GdVp23}e_~>D zxtRPHn{A7uN`t)N5wYYb%p%#ujFIaYoWzy>x_iVX(coNgp$YJr8pHeV!CT&FO8Ar+ z>jFU(=3FeBe5?0tVf0?ND;qEce8;dU2DY`+q)*Rx2Lf-=6@#8%l;f;$Q8jO>~GGJnQw)R{;Fh5pNfu@PjU9 zH$S8tBJE4Nu|-Uwgc72I;0432-9&5~uajdcKO~h7uobFBemy=^E>r{mOUpVdUyrXf zhYmXH%R3(rNF<|-oZX#9pM5uXPDCswv* zDbq(Yz_MRA5ACu6IpyF_hvcp3s(u6@2X(_sO*WdK7Q32cDO6bBDds(KPn!Zb9%#NO zg=)9xp9H6R&w^_aOG0zaq=x@vVbcO{Yc~rM$PbU7E%T?RS*a)iWvw!-qx$sye;~-y z?YJ-Z4QUBO=xM*gX=8S#g@~hr60U}-i)_+=(nltzI|c&a6F06jBXufAwgFt(wj}P% zuK+`jiXc58w845U<~i%~D(Z5mjGkWiU)HyZr0N+HPZ8RJtUQ=3wzZuvO^Zv6J>-E7 zj`-yQ`;tTei8IoW0XS9CtR|`ZC+2jMqq#&l;bdh@DQ&uUzF1jY+9k@c&d5t6n9KqV zThWm5*`?fYIRdX{FYzX)g$nycbdHv=NSmrwT7RS;DYtj(@*{?moF|B#0 znKKNtz4EZYO!2(V`>{)FadB~8cY6gd0)v78%i>g~Q>kaoJcq{?ms^bu&^H6v-s7y3 zY$jG&!N_~|C*@p@S6Vy0+^$)#yQz!L=C4)5hQK%*;bE2vS68WJV2`G}V#&SkxQ+Ngc)2ep+Z_69 ze3b+3qV4kMWC^~_QK>L(xnKtAB?$lGx(7__Z=5A9*(6Qy%nE9RHEcxG);eC9MUfNl zW>IN?g#hKnp`%Y-6($p+`-D*T;{l&t9{ z7p{B2an$9T)#xa!I+G!x`cFjOJ}FOHf{rW#M%CWcbBA zNwLYW|Nj)cuhenTaO$7`c{Ad=Vn9Qi_u0J_G7xsGg>lQ_%^i;Ioc+P%FlCMEIk@y~k+4E`P*$cl=-#@76+@12WiWd zc~jsY%>~cQ@W8eHud2AYwN9K=5&K+1)$CQ@$k^7DUW%2_GY)MJ46$h!FvF~X4_+?bC+doe@roZm_uZxLpb+27T^EH*;~g&+3nrKiXtf}h%~5l2+|GG4N4;^ zozfj60#X7>Hxd%k-Q6wS-Q79B{PuX?=RD^==Q+}ilM5P$ByvR#pIJ>Q$nDs{gn zgq%;ut_ep)Z5El@dhWBr^&&4NnRy5v!l%0kVsE<%vfwJ@uO(I z1tQ3(0lo(U-4ovyVOfSneKt@#&X#@i;wgQb8%^-*;+(J`xSYEGZOT{Xt=w|pK|F@H z@4YhUd;}J=ro4(d)W+|E-u@ugX3zaQfq2pUvb8gjK&5on5UX(Xg#NhpGnUJ;^y@c> zIZtcS!;8E)P7l$|B{2V}7Si`=3`_a+J?PtYh$;A5_ytlI!7pGOgKZYm7dLyBi-0n7 zl&)cMGsWgs>VDcv0BIZafc1Xi=QPvLipI^jWnDlj#+Ls z-~TH`*mOLf2IlhXeaz+EeHJe!kkQP0d_2iLTn}OC68+YHQ;oc4H9OLYGDR|UNGLBA zLa=3!cka$t)Q%KWk$JC#2p@Fo7?5#zl=hTA7@{hq=L+g%dZ2<(?O)YPf;evi{jp>4Hn>|$)40o8#oF#}_=Nd%efY~)>@T{rFF zdXp>Y97nc&vq*$noD5m{KN-omdOSly{Hsdve~b}%GzXsuYJCH z@(?*?zg+<}rHM=!v}>UR6ol_9?7jI2D#BwU{Rxt$>pa3365K9}mZy!Oek4DQMTCrX z*VYUIUnGvJ)FCNKszu2}dDJj`stO?t(NB_X4t(%b8-yWflHm=^J-FQ(*n^I-eQT6; z9tAyPc^Z;3G9VWjuVG|l1PtqtfPgA73asY-KpInIKP)r3)(^xx;k^awc;gO^|9ktX zp$PDr={Y!li%Xa%t@5!=aUD;?M^m46o8QR^Fvg8wF*eVk1v{y*2K-5Z1WOHm_g&6x zD6o3*d*MX+5Ne?U(#r7H4Of2CAs-V~6icjBoLIP{-VdFgza8tPcnqkJhz1n^`FFAH zj;L`{m%rneSwZl&)(mx^&T!#M--EZLI?Nj>D&P~A#n1yv6BQhgp4Aqt8Iv1eftrn7 zn|Eh7rCv1}A8fLbn*TyDhX%#FY2m`xO{=#ccGM+ti!+nveBSL7b+-O?UX84zVQvpw zb=>yLR+#brt@lsPV-Z-xk74w#^sO2PtI-ce(RZJJZw>hvPg*i>^TuC7C_&Ks^$T-` z59k#7i`AT;#tpE>9Y#cn&1;$0I0^3M_+sB{w^>g5NG--t6D!01O!A)XBTg!V89^uK!ulPvGxYTd#WDQcrNB0HDUJKH3OG|g2w=?i&>c#Qf zHHtX#w(R-yDHQ}&ko;oL9*2CD*W*apHdT|H6W+>KCP)s6mwWIx&xrztyeuo17 ziMH?G7PVH*oF(dp_h(3F(IvNLS(WRsn3&W`sQi>!YBf;o>XbOXNk}@oPh5BNoFBLS z9@DpZ16}Z|wZFzfd2Yl-@!Z!?jIWR3qad#bZ7kxzl@3dd^*R4*8S+)F)vm;^G@G|jPp$ff_45iZ_C*0DBhJ_yMm6YvC3wh=tNcy$CA(Y z_VtEoL;J1r8S&{#p5`m9%3aSEkKH{bTRS8v1ezXnIzhr8y!5=8%}LbTW7+|Nm>!Qc zCN@dQnNisvM8wZ-R;J{49oVR{piZ#P&-Yfm`xeu&=tvh(8=j&clnUCIui~o|iCVH^ zcZMD8Z}@JTxu(R-wyib;LbTgm*uYBX{t(>1(D#hYqU&ozZS!g$z425HH>wW@QKUxW z>_n=2c}b^G4N4mpA97HJA_u)-&kwJbrp0%B7|xbmu$<}yX^m0O!M7sGIk8+A)8SjA zvqTMw>uGEvzUy#yszh8AnnV7zxHo;<0Nc!rAZwF8xVo{2inqQpcL5BTa$DU?m;9Oc zW7+Ti_^sL#J0y(a76FM7Rbs(DH5qqZ z8iF~iNrF6KU!Mp=!BtT)k4UX4gQ3+uvBP|B{D-XCctvE8(BssA{7I}g-RZ|$MK+X) zVtl9d+r~GEn!QpK4`FlRx?afuJeWpTwsm|T)uUX0%b}ZCPTZvhbJ%p<6_O1rV^Uyo zQk;wFrL`3J{#8k#7nQ%LdNk0vuGViwnE-khnJP22O&jHngoI?8-EOAE)V=Rv^{k&Q zlMo%zAM_U+luu#Lf?4)%k2Ot+Wm0QygC{CXN$3zYSK>)<>Uhtlq_%JQJpXFCf?3Wu z)47}$cn0Dsoyj;d>eN^PTuJlWfG1}mX#fnKT|+}!TYGMUlqfSSEDVKj(zVvIbtQJAgu*9=fgie4 zQZOT~rA3^hT9D*p;`3-&bVWNl7c7y(5fKqG4#;}BwX6K`XR;3PAX;mBI3N!AA}UXf zFt)3(te`y}aLL08UlI(yCG+n_d%^<|k#HSkUi&ByY)ik@H?bd8B~@0A15WK%(GwfBxFj|uwW+yusQxT_xvy0R+2f3X`x=t8s|opO+uW|xrcntxZK-eX5pr?CIZ8bW93gsqMcc5} zZS`fvWx3-SQu5ug(&{HY`@W|fzEIDe58QcwrN|mM$Jz4vOn=xySrptUGG&0zqmqQM zug%P9Nk+Jh&yx5fdp{Z96vS#(x{*Gk3|lCE4qeA~m>WuH3?l;Aw#zu0{Tn1#dFPb9 z7H|;$0VGXU70B967U-powteGAo|u!bslJm8Urg_vc1o?_?GD`jv5Zk%CUQhqph0(+ zYRlR{Bl)xplY5`3mE%bCxnZoJM@bI@+i^6%IvviKnaJFtWB#s=A!$dW`Wh@jfKsEe zDwsmMMg3`N!NNdjy%~HhpO%56JdYtjLQ?f`l{ByRYUkAT0W$6k?>Wz$kf93G_4{8V4X00?>k#=NR^f!?(^j>g`Ex^l8R5b zV#=^eU5ImwW#h=f-qY35h43Qe|JdEQmNZQC8sTZ>x-S+SJgKF8%Go85?8NQ473qhl}kI%kC9Gf=uwWMB8zeB5jo`pecm356w^~?ub3|Fd4 z)Tt{Wl?mAgd>$eelU>|aer6942_J67yGcl>8$~L`CbF_Id_SndqbtHY`ITu@$jSdD zYXZ-VJyf5?p%c#!(z|0j>{0SrZ(r-8wx!hRWC-&$r#wzR8s0r$@_jC9lyrmE%kzkf zy=$s4r^>{Txm%_O+)8+dgNKgMXIroJNc^Vr?lV4tnaMJ1Fy7y@L&2;hp~Xiey!m0C zvZTEBnAk4(#>I<{*4x>22j}b84#3WtrX^lH_jxTVuYY;jQ#)plLP3dju$NfbWWGE{ z%H*G!X)a`Q(Vbh(>x`w)C7~mwky9)s-=eg~LlU9K;DbJ@Y{zUIZ9{EyAINDC-JN#^EMW?SdXNv4Ds<`ZZFx11T z9K!t@#QyI?l;(&X9Q>|?quW9mF<_b+-GwhYkDiKJXi_;uD>3g7P?{^~bcpWX`ZJZN zu*~s3eWME7V$v~HR2$KJfU$Q_K#libLY<5PWlC=l<=Q)4u3s0iS|6$-opXKfdw*_6 zOJl?Dw^oR%4ZeNJqmFC!2aX}*Km0PX`aRQc4@uAee$JEJTi3=Kj(hd7J%IHgo3-od zi3h3n8R$&ovlE=M*5r;pgE`>9A8yyZO`re4vjV#R8qc;FoPxBr(!YKU6I-8>pDaas zP2pjRKFy1^gI61$p114+z=wH}F}xTnDX)#diZW6`qb{V*cxGkI)a3q2!?C#j-rK=3 z#Y)~-y}Sp=#;e^$c@i<>XVdzKW6q^-Et8|m>%XpcwW(?4x6c0%66$7taHNt#+?}#? zgTPMGQ*!l|#9%etiwgX`DH_rgWeN>`qZcf+L)fGNvY-#z@#ld_IPEc7KAGlNo4}!1wxHSmJTO2gvU$mMMS83iUq2o+W)w@fQ9{j0OBZ zwaBb!{1M2ejE`VPVe+lNKI)+fX>3$4_b2wke9!W~0Z~}85Z?;`M0qKuXAQ0Hu$KLL z8bK!VFe@b8EezY^j?32-AB$@Ap^fICUO7%`VE5WKB*rsVx4sr+GQDMzL&q5wfvL2& zjM%J9jdL8V7dd_0>!fHH@?E4y^8iPfJ{KbgIHCxgA7Oh32iYu33yU3MSa9&^oATqk zp?>T<@mUQYmTaM!O5UKzD^ZXHIMiQWXxEJC1^rAd8Id$R=#W@GEX|pG{*Z#{4jyMk z!J^q1mpxdXVUeFS`gEZ8N3#l+Hk!S6WbQ2=QPCF;=vd9R;Kp|(%fw#gBy2FQCd`SQ zex>RMBi}V#iYs$kU$ZXcy*$~K6ol?M)=WWcTvhy0XTh0)9e9wI@CpF+Av*d&GVC(B zw5&{49sSQrQ)E27WD{$vn~G_xE?fsppCE%Da_2kGSwSKBg%fwrYD=YL(zoVZkol=w z<``|L0I6OoUp6|y+@|sIyKRE(P=S5Ol)c)MqGRz7TyNhW4(c3pc?^H18U+t&4-Qrt z6T+B$KJW1qqhzR2Xy{qCOdan6)~(n@?>q*JgTM7%y%#9zQnso6g5~U`_uECB44~3( zKlw4ZGqT;L??=tupZ7hBRJ^=$iz5yeo(ieZG?SPdegW0}T+(}f{40z|(dnS{MtVbE z!=}N0MzB0e0yJeysIxcTK2{Zcuz46F`({#kA?8w_5c?0f6zp7RC>y77T&r zc}ZRMvDAiD9fYZ@O;dUS$SR>`9dN&6W#PB%MI%cY;Ud!EE&>o<;CZ4z=tc~ND>P3b zQ`+o7kg%Lc!C}r%AB1d2XN!N3hWW{x?>V$H5HaNN--?j9%Bb&^Eew-IOJF7 z4_B|Fm0wUoIWA{ck-JaXe~$Nw0|jF{iIEzEX_KwsCh(`ft$kfE3n3DxeK&W=p7ZC~ z$E$aXEb;A3Lnl`=&b{zn_$Bl8<5mndxa=O-FpHC5iqb6wv&5@?RqC!PH~Xx_o?^6D zGQCk6B|i7u6qWn%7laOcNiDVa=i|-&tdYGQpn`rZC+AyXAw^-Aycc9wik1GjAToQ| z*%iRu8CS!(a5aX`IR|>si?jIO4;Nn!{%`|o_Ns&2_Nt6gLvq9Z5JLVeY!M?|&|O_O zNV30(0(6(lvFOkd0%eS2xZN+FF4bRSxW&yMm^U`bz~5jiN`2pT(*!;2Fi~iFa>Hm# z!ZX?tpYY@AQ#|!1x%w?HJjNju?lWP7t+AaI6z_3UHCS`_{TzQRu#v*3hsJY*M46^b zCg#DySFel@)Ecp;Px!^Z^aS^4r*x?i4Se@14`cXS79g{uTG(p7Pj1fj?yxG>(|$$Y zrd8=NgPP!B>HZS#XR&X>YMH3X(+wt2dY>gF{bqsl4)TCiE_l!`8*$PMldR76F1iuz zpfN2ue_78m6T2JV&U}e+S)ms>);3~6QlH|63`1?%&}UgHBXI2poF%^gb2THF`V{bb zEapMJR!zH815|5iX(?mn!pxPRN2jvae12ObK>fjl8=lP;1E)!<}aC!Wc#HqHF;jtCyAnrU}-cnspC@ec^CO6jGB+*TJDM% zL#CVAd$v#OI)KV+B-Q=_1MaVxLn?b$W;Iewdtqle#Fs6On1uGBGfeLm8Q8U_WJ}CJ zNF0GwPEORnudBVYF0|8H;cTPEVC!XC{)7x07*V;}{(GIG!>+<1UfDdIT2PvJ`$X3L ztv>3T&($g!dkYU9hr1yFoDS*=1Pijo&v4{MhRu!iy|Armatqn5?aGZ=QYND@v-bE7 zS`To-ooeW%RD5&l8nd;vA4Ie%D|5@=LzBWQ!jMvnD*lb)@M~FP(-A~%{za6D+AlZ3 zufZVoOk&y(ei)>;*C^t2+w2BI-0H-;C*IPdVR zTaggnOoz%O&euM9)6cq*vVN6Fa7T^qX=RrM#nImrlSu<$tMpGRNm5R$RkajXV+ zj_qa)D|0p6omr#!O3pOV{Bnf*mD!boUb%~!Zu0d(B~F->dA2r( z(}d0KmY*`YdECt>*tLvD>%y-n+Q@TNOP7Y?eQDtx!z% zHB2Q}IIM{0OGjs}G2@C0)xsi|QmM?fMmD-Je%CFUl&^>2@NiT~nc8w6DD>r@79Of4 zv9Wi1=ei&D_h^yn&;>VZ5q9R;bjgM%-Ssq0k%=|bBx#jZ3^c9C9oj#S%BYk)|%Hp3(@BesGKI|!Wn$cd`OS_+G zpk9v^W&c}np&bq?zgbdirKD;2BbH8)b8!jD2sm$|j0b8`?5QW$)qqg zT-yecy|RvasVBa`(kMeL?s#CHvG>ev5Q9LtmZQ9dlSZS|`;a~U(cf9p^&sgBj#U|Z zarS^qY`15Li}dl<({F6(3Ceoy9a(!dj32XMNZ`fM;FJ~5L93g`frND-~YcM zGDY1=w!5}ia0vmU*e^0qje@z}HtJ`ncZliM96LeW+RI2(hLWRypfe?!-PPfcg!zce z>CYh)A_?{S_?$gL5nFh2-JhcreO)b`mF(Hs!oJ3Rj!SAkI#xx_XGIH15p?<*?-X-p z4pleo*w#|UQ(0P}qd}`BxwT_TFeJCCYwU~D+a&aXQ72J3^;q-J)leFu>25M2D+>?IR{7ONOuJROSVEwj>q^~)V_)TSxv+aEW#2QB{snd~3X;P^Y6iGq;S#S7**`WB(*Pfa4ca=^t z;4?jK1ls&TT~uQF`vrP8AbanQPsx?6G-H?}+-{*{+%KN5z$dwNH{0Hr=m2(Hw}L`ubJ6&pn2mf08y^ZcW* zAGmlJ%N;V)Se&i`6b3F`X3y|A%l)wI?TtJnwcE9#M*(3DGh=)@Z-`>(btxW)*2ixK zZJvao?Ho|N8oxNDirsJ}v{J%-K(2ZgsNTM`pd4(YmGkyi7tH7{v0(PfU^~q^;GWOe z4Ll)Ir{LQ~;dX^G)y!0avH@*^hiPLog@>Qpo+~g6$nYxJfek*Le@gUW1%H+3C3F5u zi9XGun601)66rw2ed$}n^`sE;T5_s)s&r7#Mm_u>6V*>9zsA~WK0RZiru%Eh;u+ws zIBTLE)|L?M#z3*G@z2NdXLaMvI&)8$Kl8lB0?J4m=7Wd(Cnb|^#r31$Y)XuZ;lXLh zdOdIkL@nNDLaaNfC-B}JJ>6?)H{&*yR|_zvHe2K8QRf`kx|Y(6v9GGhi~RbAiAM6a z@?JRI{(RflyZG~E1k-PTd5M?kev|WPxUtN9{9@0kL0VIDCW1%@E_a|syX?9pQZx13 zaocb0BCI`Y6D?*w4^FEP8u zyS(A3KyBh%GvRE?(U))Ra^Dx|TS}P35{jfl{Zjebz+fCeN+6Q$OsA-9x}P5j)|;+p zzzmcr%9eX^=Wjm2Pb>Z0|FH?M8#qFhuh^}(3rLP5*?mR(3>S1?2L!y8AAJn1gu5y- z)pG1985v%1-5;&iy&1dkJuX~mE4O`Ch;Aa3$)`YnEGeP>^qOSCPfKCW*@Cp@--J>_JCwpJWZ>M z6*1kFBss*y5G{xv4zESEY&chIneA>$9xaYY|sKD|)I6V(Q*$Xh_P*C5`Z#o11s_^bnrf z>3CjJ%wP69wa-{dN_P1qS@6w)rohG1NkCOVKh)Ni8aQ8%T!akR3NOy9;mr*n2US3qUp# zy8=Mm7#nkNLF*KJ-v_e^Q*zJ_CTX%2aYbY6{;xmzTEZ|^!bQ_K{Q+t9j>)p8Ul0mD!HI!6?do(2^ zfMe6eBILB@XyG_lhuhf98)0pReRF^FICwdM%TDd$TIX^JzGs;c!S6R+Bd1?vO7ns^ zs)x_c-PUvhZRC8)a#%E!%BxbKOv)sLH*r8f^Bm^Bv^!sTBp8fT=39T11j5J1gLIQ7 zai>=$k)%k(cHp7ry8mL}bA2^Q+l8-SwE8l$+I@Pf;3kr-c7`+E(!ZF3?S^S+o*qNX z?8%#VPw=cdop;9VU`Kf3JtQZ@<{O6vdPuJ}mLf-0<^wJxRj{6RYTsnPbomUaBzaN# zX5BEfD?}e|Y1rD@g6#~X+vk|3JjUCguGwebM^%d*Y8%a&V-4ZmM@Ec)+!ys>s|ciX z8s>hlH%Rj`)1|dHl#2al_#UK0Dv=>)^ZFIP$h1b@^%iOKrD43>v{lgMk~L1WRZCt) zkMmV!`(mg)|8-WdCEUu_>+?hs;Fa1d3C_(glL|eFszbk)&6e0QU| z-!ISjVsM)A5Oe&w#o_}`<7god=c~-p2G?c|^#+Gs07n{d3_88YF&w@U5zkQe4=Jd4W>LXiMGK(<=CcjQ6>hRXW7*(CS@$rY- zX?H79`2$r#bO!cwCIO1X_~^MNL&skeCwF`yh7?cjHqv1EtMo~@Vg@@ikN3CS)ZHFT z4QiYnwdrVdwStjqHE^e_ZH)L5DctU&Y)fJx#83 zNQ)-4d*Fqvg7Z$lR|_TmC0lN~)xlHT_^ZqKvL*`S3Z4Sn%{@JxUfn#_DmRCG;?80f z@~4zVr^#O)>%(VRyHNeDGV=S#dv$69IgmA>04b#0I_&dv`@^Z%_XIp`VKGot{YUZx z4ib0}B9+)thTAp=Qqlow{pF*(1mjviZt5AXhLWi;5ItR^LX-9z4|@?x>qm(^1zLal z?6)#cmh3YNR9<87Ku$W~Pu|y^=}j{%UkI>1ubRR{EX!F8*eun$J7J__e-t3*%gNYieC8mpp(~P*U;sTtb~2 zPay45*PcW#4uf`%ksNCfJYkm^*=_g8+ueYLQ0m&4^~VR3DY6j;HHp$&Jk;?)AP^_oy7zric-4 z4prEszVMN)@#1p&R!<&h`JpfH{lQZ!E9n(un88aycPc0{DSA~)J_Fr?+W`G*x^n(B z@<`jW5d~!Lj`NWrXs;P-pLVl<=h^|Z#`*TrkQ~>11i@@fN(X=JO^aS==UOL}=W@9S zU1~y$w|-6D#Vn;gWBQffE3As7H13DbDs|@F5C@+_C3Ud+#*)RYovpH(2GVP%S`^J$ zOQ%0pf3+-tMZwA!(V?!n=6W9eo*th5`~ZLbnPTkb^FyX@raQQ#A1!I5mz71XtgJ}x zmXw!A)z;QZ?qcU=D#@>OjV)V(fPpqRD6mO&FRi8~9vl`UFT@IJ*B7=0(kcMCOr@lx zGPv)Zvn6I+$Ofl5$%ST77Hye z6%%LRH=&aVmqz{;snY@>$A6C0ZL#)~AY6ozK%GS0lGZccZUCVT--cnPI2W{B>wSjj zDAeU7CEmxrl`lcleI%bOWzP$Cb@S{uY@nwQ1iWl|v_$MMC3(%E0GXhRsN4YaO*IkRHj>xlvn z{H$~J%^0WJx-O{Xi!S;*ZfCEm<{$~*?cmIa60Vm285Q`~%KblP1%5Fwnk}|zSlKmA zivYKGjaGdbg`Grd$9C9&s0r;SbY}aTK_Y7nGwM5T{sw z+r)AX&z}6?&uk>R!Ch_i3d1t?9V|N`)D=_Pc{`VSK>~+W@WP+yIi(E9M)+o!l3Q&9 z<7uBtiTQl9{P`9L9kXHnio73B$p=;Po4#!dWqSUX(% z*Ae<|3Jj-(dFfPgOQT(X3Z+{wuI=~ZXqUWAEGZfCg;^dO@A39J0li1^^5Z^B2a)Oy zE(hf4Vc+T_K#Gl?-)hL&jFhqeQ>50Ln=YwE__kR z2!yXK|5MHmS;%JmAL{%s9R;6%SI!c##&&4in5;G)9c$u;N#gb6B6P=s1jnpnJTTof zmw#n5x$A_b7Ts1+Cn!^yp6nVIst8}Nvk8LC;^}Owc!x#~-<(eq_}Ol&9WH#HL_H)j z5cfC4U2VeIapBYbfk?L*#06=S`-x6Kz<9r`YSV3CD$T|qU4ab_OGGPP_Cm<>_isB# zadr;nUPXe>Ed6h))Q=9)4HVyVse}8=l8a3-KY}nCUb)ND2_~Q^hfSIdgtyqyn&20w zemAgvtf980C$@h{d|;x~iE;iSIYekVUftUSDG=x*nDo|%Xi zD9$bOG3MfgOqnGSJBaM?VL|ge;WE73z1}~<0E+N1!11mpTc9>$Ce`G0J3(4BY=Wb4 z$K1ErAXt{@w*xuNr8NpuB4v>GdczkaK|3xccC~MFD&sEmOkt(*H3n zkOP+3r-;0b5C7M^S}Dk@z4$9S?L1z7m0);#PRU)r{KasPocNhZ!o6GBQb>zByJ->xGwbhEuDIWVl8uY7B=e>uQq?~(J( z#G|V0=1-OV@8uWUM_f)t7}3^T1lTW^33<6xe+Bl-O|ejbyM+gp9Y4#W0aML5xQe#~ z+_(|a?`oVvS zvc;)}jzfe`gg{zm567$9LyAg!lR@bYzu=q0`H0D7T%u@>2QBJiM`LI+xin(Zy_rLX zsXVqf`uba(#ln%~lk1xM=@vq(QYp*$H+3KBaIE(NE}Kx`+n{a={$D7#o&Q_EK72kE z_s{yZE?mD((b69IYmj`08Sj6=z&YDzz(AHpW%@R@;`T>W?jP~*t|Y2j`0`)yZ}L21_nhCH@11(AA}ur9G(3Ifu`0BGQyA1T?%i=ao@|i1{c=a9L@Fw` za*DGgB~d?;0X~ID)C7V5>Z-xEz2uGYk<96#YDqt0g1jz*<6p#VCZRQ>7BX?CmEtwC zr|UaM#X#3Cc zZF5Jgh3CXdTbcm)ic?kPkVubA-q<|cYd6V=^l#w^^AefxEI1AU)1VHY7nS~@KlX~C zJZ4>e%Tte#;SRx_o8W-w#`aFM7pnTmxYr1v#~H3^wO|DDd=m*3MGX2|762SKCvVMo{BD>c zB1WRI#%bw6L9iR7^%;pyUjN0v=JY1QKS2B4;3+-A77pg@*d6{yg|V84R>)(!qhW8L zpFC_d$6Zc+{LtrZWjMKTymqIvv^hfDR^hS5DRBNrlT?J5g*nK;t=@&c`_c{U^#B>`kC*{U>4_%HYRAWcp2l=My_4~KI#GIWNFkg6lZ;Mz(vYqlvR@FVCnMG2nwE94@Ih-Gl z=g|fu z?wd6XsL18~5mo2tdo#SO53P`tN_SSoQ~IBK&(I}p!Qtr@&VCP+E zLPhzPlO!<5Q{bApN=cHC2miw1ufG?st&V>wUgeeu)mfyEaLuY zUyY(IHLwQY^r=KsO^M!yfkS0VcWBZc#bFgB!}`w5A3O}k?UG7tpA^2MGo%m8HyJpd z=|%Qv9zlxwO0wF_hsYw-GTf3Wpe_~25!Je`9&Ot}Is8$|eT6L~8I|ajcSsJb7wk?U zr>+EkqhYxINS{fbUf7$JIf?knKU1EfWI-KfZiKrxhvXkXUK!DGdnuCWZ6PZ>jCHTu z4rB_-wf4d!JV!eOJ6Ij82p`HG=VRS3z`N+qcE9243u%9DDID=K8wBYJCVA79Ivdra zddJYf;yxzPThQw3RU&g7xuRAO?5N#js2Fs6rh_1lDqh~uAbN}41ey&1N4Ojq1?^-! ze(*#d*~5)_++k||f}9nDq2t^-(%Mz7dQNwz1n-^{_f;Op?12NU>_$(|M#ecbj~zD> zw=Zp(u((g(B`?=&%T^zkkKT~V;UcykTxwXLRPNQYixJ{fArd)R6zStBRO6^I;7oL2 zI$GDh;8>XOVqzq~QhXNaVk&)kz0`2A-wx3hU+qGquP>llD0{qgbN#aXdI5I?Dph^G zY*eaTNNdogzQFY|b)nMx<=u50HIg+#MmJ5`M91VHR89x71tRb6PNC$QvaL4(!)`mG zhzZs28|v3^rsn6R$2i^)Q2AUqf;HNIQZ829zE^yNqo&d1dl5s@#wCa)Z+@?sr*)`K zhlkQdG>!=xeg=Nm95>}D`Q{~@S-92(?*RB)RSzY}H3HE`c&VJAjG9)lw;0rSsZ`zU z9~fLB{WCZ6F-3kjUGT?A$zclL7zyC%rP1dWPM7Z(Oz3&Tm(*c;t_Ip?l5e|a#=E_6 z7FU!uN|g)9NC2ET3b@j(e)HoTbzVP)4|c2V%#o0rI#NfQi)tq#HqhF3Qis$vamVoV1|y%b$5|ce(CTh0;Kx1<5W4d zF9^uQF>dIL*X`!SaJ z%OO!9f-&Q)lI>CzJBVxjB25^+pFBqj<R#odH)$iP764Q<#XJ#P3&QkVaCiGvd#6?lr$yf}wE{p;iP=3VAZ+nO$}jl>l? zlWjEh_Z*-n?s1VJ)pjlMPy8nqtXWoj&p}g*vVx)G&`9OS=5@W?R=r=s$?%SpSE+jX zS(Cio4~+NI>w$#yB(#>XxuNxLOtJ7H^A<;QkToNO& zV*9pa=lDY5$<EHJki#m3e2`v+{u5{>O4Sste z$ZDbo!NE6Ub>^J9$-R7`d}8m6Nyk#I>F#xzYp2weghE=r*X-+)%$2q?+*Oox-*X|U z2pyaqZ-H@X8R#s3JTB{Kb0Z$fQhUlXz+vHc)e#*DHC^S%}3Ihe~;<^qP{pdHIH0i_pNhKc9g@;ZxJ#JN;gBhChXekHS!ee7}!NhkkrCRe0w}vXw_-1F+JDn z;`b9xro(T}JwCT>`AQ@+vTjvmcu07C z=`vftY$ab+1HIsU&j8_8;5mI?o{Y&E{dTW({`i7Bsm?K>`*Y59Ndaqb519SY&9IAD zk7yXH05Mbe5n{iF2AB!S(2Uuc`~IyRK4)c1L#pnGqC+cxK8RK^hv$dO zW@Vdx&nRKtLSRfjxL7LwGz=7hZm-pK{5UeWSf%m|h*i(gY;z-{emA4o|GahW96%%j z1+ZZ~GZozlZB1zxcgT`f6%&C;?JFThkeeq&rcPtt%I4->nJ}Y-PW2ZKRyY|x5kpcX z%nkUtxY@LuXhBGmRp9OcjluXn+idRts**WN1Qzw_8 zw`lj?#@;r{AN=Y}ZRLaM-~!q3*23J2_9W8w68PyM_yJ7k+R=`5MJ^M@W?$-nx2hSS|Kb0Q&(y-!IMewf3g8(#Rs%Vf($!qkF=>>Cupa-9N zW4peK$`^Qm)V34{s(W$g!xyKG87?zD4{k?IIXmE$&tt5wa^ z2j2od;bIWa=TaBV7BU~6DkOEvP|mxwi_}ayCnr1l4vXWOcwjBRiF?$oi{_HX=J{Io zIqxkxBqApT2eG_@ay68%JjPO#pv*COH51yYrJwBdrnkxCXTZSW^^!RCklelVV%yc_ zIgW_~r-3VIC5K;Fa{DCqf!l@6rRkMBlYUcl|k9rgw*aFx|dF%-NRZ?J+y| zU^ezeNji1@sX!mC{8Nc3$HxtLtIl_eLhSdPwwk4S$G-j`E)Sui!xQqiiTm%3tJdCySp(i<$|f-l#LI?j zvfFyI-BQShHY8wYMM5|B_Kf~HUuzTxvbEV5g8rsWCOl1tYsm*C-ipLs&K`1Ft2r|z zwMJ7^piR_<3LXye25m<%v$X@6g^-7km|ZqyCu*%Y{@MY{gAXoMPQl*u1(B?P)|LQW z5AOODCVe|x&c@J3$X%CyBJY3){*?XyUw7PAfAFt;vj3<%77>kuDE%6gG>l^y)I_Wg zUmoTpdN0!J5B>_`88l}AO`jU_aG`~5n`UJF9tozUBl}y(Z0qXTfCLgB--*$WundzY ziI(q;-(}TjAc1C>6Er79&`AQKnA!WoJZ<3%U$IXl^-~*MKiv-5ZCH+;dEZbDqF2H< zTFChPj~3auLYzIjmXOvZxtK@EO`M?cvS_h_al6b=^vOg6-PAEJ2a6CcT#kJ5TaJtX z$~ivJJnjHA$u@Y(yAA2vX`Y4NVfuDI`p%?4a+clKJX4c*FD~n=2|yCnG8z{cWPkc% zV#33f^eh4OTEzp@k|F`l&(C zf`#$!{XvJ>0{!syy4Gg1b=0@oQv?q4z?&c9psaPYAmucd)F=Csi6YyV;~G}ca#LpK`PF>6y(&jzmNeKW`F@s&pZ9i)sXuiK zvp~EikUx=msZ7(*any{ru-e0z1n?f&Ga!EcHhz3~aM);`zwPF+MzCt*u?D@=oWB!} z(s2GFT$IJw#Z|o8&s^6aWDN=l`XCo!Iiu1*-jRDqhSc>0JEb#?F48d@n|)++`p9GA%C7_zL|@LLbHNu74)$TQ=mV_uy6_QI0vQB;N9Bbv4Vp0`ovjv&EnB7Wtehh3iv)twV)|HUH z%E)0!$w3mqLqp?n_9^Kwk~fykvpxLhj558dVL+f?ukCzgeE3P&Z2mp6BMlnSBV_5* zKI@6yvoq7MJtdjI0A%uq2zPw2uu$&oS8oA%$IYLj^p&$%>G|#*B#Zwy6vMN9_3I(5kYCv1OybM6F{0$ zLN(#gRXPZv_a>q!RjJa8gkF?TLlc!wXrV|ybV5P`QbJ33!@cL;b=Q6GzV+66^Usv8 z&FpXQ-~P?4`Svc?hQd?2GoL2*zhh%>g|zjQ?sTls59Ci~^zByr!oJ2!gnpU-Jwh8= zE6`#OJNVk&S@6xIc+n-~B1+NeWPHwc;>a6v^-iK~om6TIUf5B*BQBw$`tc-RN0dv7 zLt3Jx;bD{K3EMc?i(%qxH>tKVD_b(K2R9vuiez|FP&Lz6qS6+PtG0KV%1}+3D3759 zF;4yQo<597Lm2}zZ1@w&g@PJaK6H66_J?=6oD&xinTUE`mLMX`mv${x(U@W5D(Q2| zWPp8#ph=>Lsi5X%qm3!ULFr%o9dXqq9!K`+q-Nfz&wP4= zsDwHqdzf|(LNW10f7qnq{BOF`CN=f6B-*atjYSS5^F1>B$qNY>A}V8^&RQPE+)cSk z_{g&Cln5cvSmQ9+YTfK*=s@%fAIPkPK_hZjwE>@&o=~SDFe5M?J_8{bmZ)WPg2Bcq zq}ge^Hl#{Xc~5ouZv3{vtSer;em!Ag!vAmy=czF9$YU_`mKN<+vxKB`Ce(A5#W=B< zWg@Lg-LcBCd&-bbyy?MGk9WG9%PS9TA}H+r#OC;#P>2ljt<~B(s<*e-rq*=YtAA$3 z9D%stLuIEH5OBm?@xo>I2K6_-z|}UVL+?RnOsz#~geU`4?zPDmJ`83wK2 zJ!;cO$51mmjbJdZ*v}VqCghnX{035+zFq4v zK)zzXICMWhKff{{CQ(4oGDHBx9a$uG4g><-i($RQ6=CieO3h~g0_9c!cEY`?l|4lb z0u7DdaXF8AQ1pwX^H}6h{vKQ7)#buz^L-sioK^nfbxT_OgF{olMriSLcwc3I&vlc# zXv*&yg>+*Cen+AcX5i#CWS>>aC4k7oHp zJ3w`lrYy z>#A|j_?g zB^(Evu~j8oVWB5g^ZKhc@JVJ6D2w(T_0U+_^J`ZQKhzN`QZio)iQXu9D-T>S$xD|Y z7#3x%ZnI4qBI0qymXm&2u%DYkp}ujVtLVl|n=E_+OR~unv8h$?kL(gb zBa*}OYzvQDJeuS;*mydvge^CRLQU^VUat1?;zAs)unb+zbGE4pP>%uqeB}j5xu_$C8kBa` zg{{68fJ%AWD7;wDwETj8-2&w;%~)0`DqkkZ76$b$jfM;z{20DG-)hYKx(O;BQb6Nx zoGcm)W68$OARy-?Ivij6`gBUXQstBaab0`=81(+kEqWm?`=m?G8GT=FEfE`{hli?t zozV*q2%V*|qN)!j%K>2^NL$n1&!EivSIvzE9WZuDGf88J=y0WaiTnAQG3+d`d zqoJmzrWtX9jm9Od3CR_)98@4nAXtCX#{J8eFDLyA%t4Tn|A09FsNPXCYJCJy4U}~O z%mnN}zw>-J+daL3fGGdgI70bND<1?>HUqAz^d~FSUOGcFgDGk+N8J^%mq2cxBzi)Hi2Ch%v^|>obXz0}?#@V(yHe4%3a;1Q?-xv8WgnF& zJP!KKR$qUwPOK0{a<(4`64`Cz0D&UzFkQ;k_N-EA8H4*f0It6-$E^fax2;>BM@Vww z=kKl z;HPwtRp)0x*5wpyDZz6)`1)B=0Eo{P@NHax^vfj9RG7zQ-b_T67HWR)@fF`6cWzg! zNZQXJbmajdh%*6i>3M zs8_fsL+gv{Kf#JC5}zg5?%O4UPkqsQZS8P_7LQfa^qG$tcagg@iG;~3_7tS)jAyMB zm=b2!Mygz;dxr^EXwpiZT<*6j4%`s6w_fDqSMAfu6rZO>JYnw+3d%WL{cY0o^FIZC&oMNh>i~s_UJoW=h$J zUR(TikIS#OuTM;iZ6F(5rW#3qLGU)HUHSGowx4(hOf5Z9Q|;lC_a-hwVJ{MF$34@RgvT!Le!iiuW)*^$A>zZ=^ma^AR%d$9 z=VH6zusZ69hV^v^cEzAS><6=xd4rEP>yNg+GkD`F>S<)fLF|D1!bZX7Q~=ffjKOCx zyODISopJ5Os5G0j!-k_OQ;+S~nxeJ^U%i&XpTZEBxlaqlxsCPh8@VjGXAYoAi6ShT z+g~VUMSJp>c8nE!^y4Z4{o zLk*i+XePKmR&S=y`{ z>G853NynlLc;`sopJJ>KVdq6UzsWY2hGL|aoiLvWyaFPV`C}!{P!#?`icUkq1|fAw}XujEb4wW14+8I`$u)a!mgIP;0QmO!YXVZLQc zfa8z1SH#nF+UaSPFK+nYJeid;O@6#$8ukWak@q;&)?q&ak?FOxwVg5d`A9;*(wFMm zVQbJ=9FTIfqSa^N+XZ$7KYdsk6j*HKC8pTmQ#dBMI-vKlg1p4k!M>Exf$o68o6Zw6Z<^!k! zrlzibL7w`1zn$l2RnU;`$G=>~U-cjJo;ACnar=w`f4#?aiR2h&ZZI(c4xhM6mv*GMaVWM|LMRn_EJfeYRRYmYN zveeH7&~Fa`mU&U$Z!7m~1UgPdbN)m@;QD$#${SaBaNy^S8;2Z|hzve5AQeV{6SkMb z%77G|UihE)$$+xA(_d6(ff*QZr}iP_iOmu}^Zx1*H&&KPXdzh!Z+EcB`E5P@{QcaJ zdX|j4iln3@>X^_pR-~8nG?I#o8i4zUZcDM!PQdgY;gN$t&tHIo+-P^1TXG>M4U0=l z-awMc3ujMP`sgzi2vyn|eC#w*pxI7OrOa}TnHf=BT>Lch9M_NgJpT~unUvoEJp
QO#>bqLLiXOOJ{>IssLv|=yTwu3OEaUzs>shJB|4VA^A^QcGmbm z+$rt~9w@Y!7(r;iVpr*In5ms=w1;<5d(hnoJnhcS&KVSPOFb?>U}tLBZ-4=h7nYkY z4Y&NPy1onKjJ-M(!VtqcJMbZ*H9UW|o&F(H4wUOW8K~~z|B^y~KWc>ke;NBQaY;Tlr<|LLm~4R(BLg6l(^0|U;KX%f?-YLj&`32p4DCfZ{EuF(U^QYEA$P}u z5BU7?wRWxWNyRkr{r3g^NzRahm3X@n6x|!Tn+j&r`$c_IG}f=f=cKcZH0Pd4nukn) z9uybeGrQ^gx|`iFb*DD2Ij5qz+OwUWx7)mQAidyY(%@eCce4DC1(|~5(z&ar9%5(q z{oBKwJMh)p%#^l1;-s)$4F9e|9>(Q?@Gv5R0rR;nxvYW5j*HFdNy9Vk)Q_7F1z>HD za8|5&^?fW@j`_}evDu31RN*&Z_UdPS3Fa)LllYwKD4y-`lZ zas8^o4>yuKIId;JZ-A zIB{70`+HvTPZoDWJZx+n_EH9dp(?M6@avC1R7=d{3~N}?8D>RQx8#@={_5TES|%$w zk-FxK3uUxfZ~9`d23PP9Pur1tZ|tXQt3u!}DGJ`@R!qbAy+tcYN>2P<3RmNktmM*1 zb8{8tnuLkxoZA`gZqVbp<5bPV_%WMP#&5mjps*pgWnYwYZ`skd#PpNZx5=_!zblHJ zw9G}PS3WvMol-gq!KjL_dDiuf@U5$x63cEjk4uf!S09MX2BeNFZY%8ubaDsFx#zoL z{5Shfl^F)R-`C7b6Am}AQOA%54|aN!6>Gc$`icKA!Zv@5*WV4)MdabMH|OT`-;`na)eK3^Qi8~eqi#(hvUi_$|U_qjfj zX?5CW%we`Xb_&B|Ai-pM=vv=pp{3cTJYl-_O4xqT}V8kh))SF(e`iIwA_$#a877Rxq#X0v9;;9c5T!5)kKq@q{0+Z(=+ zP!7?t@ysXYyYXhTJpKFmx8hj%8n3==nv=^FjDDl-;WS?@{lGm^HEy~zSyEOV&i*l9 zoiti@Fd1sFy=&p2<9On0WpyGvTN_$!e>b%h$uYi2(pX3LY@S@7z5zfB7j;m6^SnLQ znGe^2J;!^+YRzH%?Jd&am%$CO>CWP+f}MmTMa4%~;fVzSS&C4E*m&U`CzqwX;5ACo zH~tvdqA{!7E>;b40zZDTJNulhS5|PDXt^gByrGRo_iycKN6=+g9+LP=8}Nqj)IQS8 z3_oh~TfU^u+)Q})X(w8bqhiW9ZvE}%ey8D^H%K`W+PJi@N590^tUhCGt!5PL5yN!r zW)gDM43MbwjM2!_fV^Z)vu>A9)73=hqq$m(+46%Q)O(2qTMp_cs$W`V#Y{p+&895M zn=OJRdGf4qkrT{<@}%O{?KmIIA^ls~k2+CrW5$QcIhqyB;*EgN{KHd1mnmh3tqXD$ z3km%wV&mG%05gr#Xu%C~-F}S?xFlR@aHyGu+~rwPSEw@Iavy2{f8g3eS^EbuvdTVA zrl=3kUhI`>L);`2*xan)n)7V(5Y^br(#zPN^RBR?hr%`{NJu(4wvzV-n2$5B-fGXu}M#TH;#K*O&TZNi`S{-ycI_mR84ee;` zZHj1m%b6TQXnD*7bzT+XQk4Q#Pv^?Jo-KJ2u{F4uQr#at7Kh6tB?%%&>mEyVw-7nx z%?Z<)W&cV-T72+e3nDI{^hMw^jq@PJfFnNV7Vu$dWaG1w%j9_@25e4nEhJb{+P7__ zBEhvm&pKq6mdvkUEJovjSBisbwBrcywTpTaCxJ^zOtmmWD@cywu;-}1i(WiNOu=7$ zzOiv?{;-Hgf#wXsEhqPCkE>>Rk`IWd7LCpxNed+|8$O=RhLlYj_HHE3ZaRo=eK?mW zvNBceo_f^(SYK@v)cDII$-U-vS`6WXR?yw*PxDVwclSP!_PS;{apAmsF-b0^O~$vy z7d3+a$V9|^+SbarZ|-{wJ=VmENN^qBte?LzlPjO1F@#Eb85nOxw1KNvO7{qoYX?^}Z}&WhH6=-oDp%gaYcON`8d&`z~LmZqjx zJeMIE((rMs)1wJ(f<(}P8+o@#X*2gN<6C2^;4zZt^XK``pFa=3L5Dhj#uFrYq@-X7 z1R{0*O6miDkGJ4gObG?RB4BEHYOnhMp9HwgKj~!>@Krn937sz4PQQ?DpkE{ZlbcI9 z2<8$w&)xprDC3L<-C$~3mC*Y8;iG@P0{q_y5>V^=Uo>)D)uT%1i~)jP9-X=gX!|B= R3!=|XHPv<1Dpj6_{}&dtzbF6z literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md index bf5df70ede..6a778f6cc1 100644 --- a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md +++ b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md @@ -1,6 +1,6 @@ --- -title: Windows Defender Antivirus and Windows Defender ATP -description: Windows Defender AV and Windows Defender ATP work together to provide threat detection, remediation, and investigation. +title: Windows Defender Antivirus compatibility with other security products +description: Windows Defender AV operates in different ways depending on what other security products you have installed, and the operating system you are using. keywords: windows defender, atp, advanced threat protection, compatibility, passive mode search.product: eADQiWindows 10XVcnh ms.pagetype: security @@ -11,7 +11,7 @@ ms.pagetype: security ms.localizationpriority: medium author: iaanw ms.author: iawilt -ms.date: 06/13/2017 +ms.date: 09/07/2017 --- @@ -30,44 +30,53 @@ ms.date: 06/13/2017 Windows Defender Antivirus is automatically enabled and installed on endpoints and devices that are running Windows 10. -However, on endpoints and devices that are protected with a non-Microsoft antivirus or antimalware app, Windows Defender AV will automatically disable itself. If you are also using Windows Defender Advanced Threat Protection, then Windows Defender AV will enter a passive mode. +However, on endpoints and devices that are protected with a non-Microsoft antivirus or antimalware app, Windows Defender AV will automatically disable itself. -The following matrix illustrates how Windows Defender AV operates in these instances. Note that this matrix only applies to endpoints that are running Windows 10: +If you are also using Windows Defender Advanced Threat Protection, then Windows Defender AV will enter a passive mode. + +On Windows Server 2016, Windows Defender AV will not enter passive or disabled mode if you have also installed a third-party antivirus product. See [Windows Defender Antivirus on Windows Server 2016](windows-defender-antivirus-on-windows-server-2016.md) topic for key differences and management options for Windows Server installations. + +The following matrix illustrates how Windows Defender AV operates when third-party antivirus products or Windows Defender ATP are also used. Windows version | Antimalware protection offered by | Organization enrolled in Windows Defender ATP | Windows Defender AV state --|-|- +-|-|-|- Windows 10 | A third-party product that is not offered or developed by Microsoft | Yes | Passive mode -Windows 10 | A third-party product that is not offered or developed by Microsoft | No | Disabled mode +Windows 10 | A third-party product that is not offered or developed by Microsoft | No | Automatic disabled mode Windows 10 | Windows Defender AV | Yes | Active mode Windows 10 | Windows Defender AV | No | Active mode -Windows 8 or earlier | A third-party product that is not offered or developed by Microsoft | N/A (Windows Defender ATP requires Windows 10) | N/A (Windows Defender AV requires Windows 10) -Windows 8 or earlier | System Center Endpoint Protection (offered by System Center Configuration Manager) | Yes | Active mode -Windows 8 or earlier | Windows Defender AV | No | Active mode -Windows Server 2016 | A third-party product that is not offered or developed by Microsoft | Yes | Passive mode -Windows Server 2016 | A third-party product that is not offered or developed by Microsoft | No | Disabled mode +Windows Server 2016 | A third-party product that is not offered or developed by Microsoft | Yes | Active mode +Windows Server 2016 | A third-party product that is not offered or developed by Microsoft | No | Active mode Windows Server 2016 | Windows Defender AV | Yes | Active mode Windows Server 2016 | Windows Defender AV | No | Active mode -If you are using another antivirus or antimalware protection app. -If you are enrolled in Windows Defender Advanced Threat Protection, and you are not using Windows Defender AV as your real-time protection service on your endpoints, Windows Defender AV will automatically enter into a passive mode. +>[!IMPORTANT] +>Windows Defender AV is only available on endpoints running Windows 10 or Windows Server 2016. +>In Windows 8.1 and Windows Server 2012, enterprise-level endpoint antivirus protection is offered as [System Center Endpoint Protection](https://technet.microsoft.com/en-us/library/hh508760.aspx), which is managed through System Center Configuration Manager. +>Windows Defender is also offered for [consumer devices on Windows 8.1 and Windows Server 2012](https://technet.microsoft.com/en-us/library/dn344918#BKMK_WindowsDefender), although it does not provide enterprise-level management (or an interface on Windows Server 2012 Server Core installations). -On Windows Server 2016 SKUs, Windows Defender AV will not enter into the passive mode and will run alongside your other antivirus product. -Windows Defender Advanced Threat Protection (ATP) is an additional service beyond Windows Defender Antivirus that helps enterprises detect, investigate, and respond to advanced persistent threats on their network. -See the [Windows Defender Advanced Threat Protection](../windows-defender-atp/windows-defender-advanced-threat-protection.md) topics for more information about the service. +In the passive and automatic disabled modes, Windows Defender AV will continue to run (using the *msmpeng.exe* process), and will continue to be updated, however there will be no Windows Defender user interface, scheduled scans won't run, and Windows Defender AV will not provide real-time protection from malware. -I +The reasons for this are twofold: -In passive mode, Windows Defender AV will continue to run (using the *msmpeng.exe* process), and will continue to be updated, however there will be no Windows Defender user interface, scheduled scans won't run, and Windows Defender AV will not provide real-time protection from malware. +1. If you are enrolled in Windows Defender ATP, [the service requires common information sharing from the Windows Defender AV service](../windows-defender-atp/defender-compatibility-windows-defender-advanced-threat-protection.md) in order to properly monitor your devices and network for intrusion attempts and attacks. +2. If the protection offered by a third-party antivirus product goes out of date, is not updated, or stops providing real-time protection from viruses, malware, and other threats, then Windows Defender AV will automatically enable itself to ensure antivirus protection is maintained on the endpoint. + + Therefore, the Windows Defender AV service needs to update itself to ensure it has up-to-date protection coverage in case it needs to automatically enable itself. -You can still [manage updates for Windows Defender](manage-updates-baselines-windows-defender-antivirus.md), however you can't move Windows Defender AV into the normal active mode if your endpoints have an up-to-date third-party product providing real-time protection from malware. + You can still [manage updates for Windows Defender](manage-updates-baselines-windows-defender-antivirus.md), however you can't move Windows Defender AV into the normal active mode if your endpoints have an up-to-date third-party product providing real-time protection from malware. -If you uninstall the other product, and choose to use Windows Defender AV to provide protection to your endpoints, Windows Defender AV will automatically return to its normal active mode. + If you uninstall the other product, and choose to use Windows Defender AV to provide protection to your endpoints, Windows Defender AV will automatically return to its normal active mode. +>[!WARNING] +>You should not attempt to disable, stop, or modify any of the associated services used by Windows Defender AV, Windows Defender ATP, or the Windows Defender Security Center app. +>This includes the *wscsvc*, *SecurityHealthService*, *MsSense*, *Sense*, *WinDefend*, or *MsMpEng* services and process. Manually modifying these services can cause severe instability on your endpoints and open your network to infections and attacks. + ## Related topics -- [Windows Defender Antivirus in Windows 10](windows-defender-antivirus-in-windows-10.md) \ No newline at end of file +- [Windows Defender Antivirus in Windows 10](windows-defender-antivirus-in-windows-10.md) +- [Windows Defender Antivirus on Windows Server 2016](windows-defender-antivirus-on-windows-server-2016.md) \ No newline at end of file diff --git a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016.md b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016.md index 91520bc734..77b79508b8 100644 --- a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016.md +++ b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016.md @@ -11,7 +11,7 @@ ms.pagetype: security ms.localizationpriority: medium author: iaanw ms.author: iawilt -ms.date: 08/25/2017 +ms.date: 09/07/2017 --- @@ -56,21 +56,56 @@ This topic includes the following instructions for setting up and running Window - [Configure automatic exclusions](#BKMK_DefExclusions) -## Enable the interface -By default, Windows Defender AV is installed and functional on Windows Server 2016. The user interface is installed by default on some SKUs. +## Enable or disable the interface on Windows Server 2016 +By default, Windows Defender AV is installed and functional on Windows Server 2016. The user interface is installed by default on some SKUs, but is not required. -You can enable or disable the interface by using the **Add Roles and Features Wizard** or PowerShellCmdlets, as described in the [Install or uninstall roles, role services, or features](https://docs.microsoft.com/en-us/windows-server/administration/server-manager/install-or-uninstall-roles-role-services-or-features) topic. +If the interface is not installed, you can add it in the **Add Roles and Features Wizard** at the **Features** step, under **Windows Defender Features** by selecting the **GUI for Windows Defender** option. -The following PowerShell cmdlet will enable the interface: +![](images/server-add-gui.png) + +See the [Install or uninstall roles, role services, or features](https://docs.microsoft.com/en-us/windows-server/administration/server-manager/install-or-uninstall-roles-role-services-or-features) topic for information on using the wizard. + +The following PowerShell cmdlet will also enable the interface: ```PowerShell Install-WindowsFeature -Name Windows-Defender-GUI ``` -The following cmdlet will disable the interface: +To hide the interface, use the **Remove Roles and Features Wizard** and deselect the **GUI for Windows Defender** option at the **Features** step, or use the following PowerShell cmdlet: + + +```PowerShell +Uninstall-WindowsFeature -Name Windows-Defender-GUI +``` + + +>[!IMPORTANT] +> Windows Defender AV will still run normally without the user interface, but the user interface cannot be enabled if you disable the core **Windows Defender** feature. + +## Install or uninstall Windows Defender AV on Windows Server 2016 + + +You can also uninstall Windows Defender AV completely with the **Remove Roles and Features Wizard** by deselecting the **Windows Defender Features** option at the **Features** step in the wizard. + +>[!NOTE] +>Deselecting **Windows Defender** on its own under the **Windows Defender Features** section will automatically prompt you to remove the interface option **GUI for Windows Defender**. + + + + +The following PowerShell cmdlet will also uninstall Windows Defender AV on Windows Server 2016: + ```PS -Uninstall-WindowsFeature -Name Windows-Server-Antimalware +Uninstall-WindowsFeature -Name Windows-Defender +``` + +To install Windows Defender AV again, use the **Add Roles and Features Wizard** and ensure the **Windows Defender** feature is selected. You can also enable the interface by selecting the **GUID for Windows Defender** option. + +You can also use the following PowerShell cmdlet to install Windows Defender AV: + +```PS +Install-WindowsFeature -Name Windows-Defender ``` > [!TIP] diff --git a/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md b/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md index dc8b0b0597..495cc05eec 100644 --- a/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md +++ b/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md @@ -38,11 +38,11 @@ In Windows 10, version 1703 (also known as the Creators Update), the Windows Def Settings that were previously part of the Windows Defender client and main Windows Settings have been combined and moved to the new app, which is installed by default as part of Windows 10, version 1703. > [!IMPORTANT] -> Disabling the Windows Security Center service will not disable Windows Defender AV or [Windows Firewall](https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security). These will be disabled automatically when a 3rd party antivirus or firewall product is installed and kept up to date. +> Disabling the Windows Security Center service will not disable Windows Defender AV or [Windows Firewall](https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security). These will be disabled automatically when a third-party antivirus or firewall product is installed and kept up to date. > [!WARNING] > If you do disable the Windows Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Defender Security Center may display stale or inaccurate information about any antivirus or firewall products you have installed on the device. ->It may also prevent Windows Defender AV from enabling itself if you have an old or outdated 3rd party antivirus, or if you uninstall any 3rd party antivirus products you may have previously installed. +>It may also prevent Windows Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed. >This will significantly lower the protection of your device and could lead to malware infection. diff --git a/windows/threat-protection/windows-defender-security-center/windows-defender-security-center.md b/windows/threat-protection/windows-defender-security-center/windows-defender-security-center.md index 00470f7842..50c6d3b553 100644 --- a/windows/threat-protection/windows-defender-security-center/windows-defender-security-center.md +++ b/windows/threat-protection/windows-defender-security-center/windows-defender-security-center.md @@ -1,6 +1,6 @@ --- title: Windows Defender Security Center -description: The Windows Defender Security Center brings together common Windows security features into one place +description: The Windows Defender Security Center app brings together common Windows security features into one place keywords: wdav, smartscreen, antivirus, wdsc, firewall, device health, performance, Edge, browser, family, parental options, security, windows search.product: eADQiWindows 10XVcnh ms.pagetype: security @@ -22,17 +22,17 @@ ms.date: 08/25/2017 **Applies to** -- Windows 10, version 1703 +- Windows 10, version 1709 -In Windows 10, version 1703 we introduced the new Windows Defender Security Center, which brings together common Windows security features into one, easy-to-use app. +In Windows 10, version 1703 we introduced the new Windows Defender Security Center app, which brings together common Windows security features into one easy-to-use app. -![Screen shot of the Windows Defender Security Center showing that the device is protected and five icons for each of the features](images/security-center-home.png) +![Screen shot of the Windows Defender Security Center app showing that the device is protected and five icons for each of the features](images/security-center-home.png) @@ -41,60 +41,65 @@ Many settings that were previously part of the individual features and main Wind The app includes the settings and status for the following security features: -- Virus & threat protection, including settings for Windows Defender Antivirus +- Virus & threat protection, including settings for Windows Defender Antivirus and Controlled folder access - Device performance & health, which includes information about drivers, storage space, and general Windows Update issues - Firewall & network protection, including Windows Firewall -- App & browser control, covering Windows Defender SmartScreen settings +- App & browser control, covering Windows Defender SmartScreen settings and Exploit protection mitigations - Family options, which include a number of parental controls along with tips and information for keeping kids safe online -The Windows Defender Security Center uses the [Windows Security Center service](https://technet.microsoft.com/en-us/library/bb457154.aspx#EDAA) to provide the status and information on 3rd party antivirus and firewall products that are installed on the device. +The Windows Defender Security Center app uses the [Security Center service](https://technet.microsoft.com/en-us/library/bb457154.aspx#EDAA) to provide the status and information on third-party antivirus and firewall products that are installed on the device. -> [!IMPORTANT] -> Disabling the Windows Security Center service will not disable Windows Defender AV or [Windows Firewall](https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security). These will be disabled automatically when a 3rd party antivirus or firewall product is installed and kept up to date. + +>[!IMPORTANT] +>Windows Defender AV and the Windows Defender Security Center app use similarly named services for specific purposes. +>The Windows Defender Security Center app uses the Windows Defender Security Center Service (*SecurityHealthService* or *Windows Security Health Servce*), which in turn utilizes the Security Center service ([*wscsvc*](https://technet.microsoft.com/en-us/library/bb457154.aspx#EDAA)) to ensure the app provides the most up-to-date information about the protection status on the endpoint, including protection offered by third-party antivirus products, Windows Firewall, and other security protection. +>These services do not affect the state of Windows Defender AV. Disabling or modifying these services will not disable Windows Defender AV, and will lead to a lowered protection state on the endpoint, even if you are using a third-party antivirus product. +>Windows Defender AV will be [disabled automatically when a third-party antivirus product is installed and kept up to date](../windows-defender-antivirus/windows-defender-antivirus-compatibility.md). +>Disabling the Windows Security Center service will not disable Windows Defender AV or [Windows Firewall](https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security). > [!WARNING] -> If you do disable the Windows Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Defender Security Center may display stale or inaccurate information about any antivirus or firewall products you have installed on the device. ->It may also prevent Windows Defender AV from enabling itself if you have an old or outdated 3rd party antivirus, or if you uninstall any 3rd party antivirus products you may have previously installed. ->This will significantly lower the protection of your device and could lead to malware infection. +> If you disable the Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Defender Security Center app may display stale or inaccurate information about any antivirus or firewall products you have installed on the device. +>It may also prevent Windows Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed. +>This will significantly lower the protection of your device and could lead to malware infection. -## Open the Windows Defender Security Center + + +## Open the Windows Defender Security Center app - Right-click the icon in the notification area on the taskbar and click **Open**. - ![Screen shot of the Shield icon for the Windows Defender Security Center in the bottom Windows task bar](images/security-center-taskbar.png) + ![Screen shot of the icon for the Windows Defender Security Center app on the Windows task bar](images/security-center-taskbar.png) - Search the Start menu for **Windows Defender Security Center**. - ![Screen shot of the Start menu showing the results of a search for Windows Defender Security Center, the first option with a large shield symbol is selected](images/security-center-start-menu.png) + ![Screen shot of the Start menu showing the results of a search for the Windows Defender Security Center app, the first option with a large shield symbol is selected](images/security-center-start-menu.png) > [!NOTE] > Settings configured with management tools, such as Group Policy, Microsoft Intune, or System Center Configuration Manager, will generally take precedence over the settings in the Windows Defender Security Center. Review the settings for each feature in its appropriate library. Links for both home user and enterprise or commercial audiences are listed below. -## How the Windows Defender Security Center works with Windows security features +## How the Windows Defender Security Center app works with Windows security features - - -The Windows Defender Security Center operates as a separate app or process from each of the individual features, and will display notifications through the Action Center. +The Windows Defender Security Center app operates as a separate app or process from each of the individual features, and will display notifications through the Action Center. It acts as a collector or single place to see the status and perform some configuration for each of the features. -Disabling any of the individual features (through Group Policy or other management tools, such as System Center Configuration Manager) will prevent that feature from reporting its status in the Windows Defender Security Center. The Windows Defender Security Center itself will still run and show status for the other security features. +Disabling any of the individual features (through Group Policy or other management tools, such as System Center Configuration Manager) will prevent that feature from reporting its status in the Windows Defender Security Center app. The Windows Defender Security Center app itself will still run and show status for the other security features. > [!IMPORTANT] -> Individually disabling any of the services will not disable the other services or the Windows Defender Security Center itself. +> Individually disabling any of the services will not disable the other services or the Windows Defender Security Center app. -For example, [using a 3rd party antivirus will disable Windows Defender Antivirus](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus). However, the Windows Defender Security Center will still run, show its icon in the taskbar, and display information about the other features, such as Windows Defender SmartScreen and Windows Firewall. +For example, [using a third-party antivirus will disable Windows Defender Antivirus](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus). However, the Windows Defender Security Center app will still run, show its icon in the taskbar, and display information about the other features, such as Windows Defender SmartScreen and Windows Firewall. -The presence of the 3rd party antivirus will be indicated under the **Virus & threat protection** section in the Windows Defender Security Center. +The presence of the third-party antivirus will be indicated under the **Virus & threat protection** section in the Windows Defender Security Center app. ## More information -See the following links for more information on the features in the Windows Defender Security Center: +See the following links for more information on the features in the Windows Defender Security Center app: - Windows Defender Antivirus - IT administrators and IT pros can get configuration guidance from the [Windows Defender Antivirus in the Windows Defender Security Center topic](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus) and the [Windows Defender Antivirus documentation library](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) - Home users can learn more at the [Virus & threat protection in Windows Defender Security Center topic at support.microsoft.com](https://support.microsoft.com/en-us/help/4012987/windows-10-virus-threat-protection-windows-defender-security-center) From 0515bea69fe1117d417dbf1116d4d339a5e53843 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Thu, 7 Sep 2017 15:24:11 -0700 Subject: [PATCH 049/146] update troubleshooting for UC --- .../update/update-compliance-get-started.md | 12 ++-- ...llect-diagnostic-data-update-compliance.md | 65 +++++++++++++++++++ ...-connections-windows-defender-antivirus.md | 2 +- .../troubleshoot-reporting.md | 16 ++++- 4 files changed, 86 insertions(+), 9 deletions(-) create mode 100644 windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 2728abccb0..492435e8ac 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -25,14 +25,14 @@ Update Compliance has the following requirements: 2. The solution requires that Windows 10 telemetry is enabled on all devices that are intended to be displayed in the solution. These devices must have at least the [basic level of telemetry](https://technet.microsoft.com/itpro/windows/manage/configure-windows-telemetry-in-your-organization#basic-level) enabled. To learn more about Windows telemetry, see [Configure Windows telemetry in your organization](/windows/configuration/configure-windows-telemetry-in-your-organization). 3. The telemetry of your organization’s Windows devices must be successfully transmitted to Microsoft. Microsoft has specified [endpoints for each of the telemetry services](https://technet.microsoft.com/itpro/windows/manage/configure-windows-telemetry-in-your-organization#endpoints), which must be whitelisted by your organization so the data can be transmitted. The following table is taken from the article on telemetry endpoints and summarizes the use of each endpoint: -Service | Endpoint ---- | --- -Connected User Experience and Telemetry component | v10.vortex-win.data.microsoft.com
settings-win.data.microsoft.com -Windows Error Reporting | watson.telemetry.microsoft.com -Online Crash Analysis | oca.telemetry.microsoft.com + Service | Endpoint + --- | --- + Connected User Experience and Telemetry component | v10.vortex-win.data.microsoft.com
settings-win.data.microsoft.com + Windows Error Reporting | watson.telemetry.microsoft.com + Online Crash Analysis | oca.telemetry.microsoft.com - 4. To use Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a 3rd party AV program), and must have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). For endpoints running Windows 10, version 1607 or earlier, Windows telemetry must also be set to **Enhanced**. See the [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) content library for more information on enabling, configuring, and validating Windows Defender AV. + 4. To use Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a 3rd party AV program), and must have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). For endpoints running Windows 10, version 1607 or earlier, [Windows telemetry must also be set to **Enhanced**](https://docs.microsoft.com/en-us/windows/configuration/configure-windows-telemetry-in-your-organization#enhanced-level). See the [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) content library for more information on enabling, configuring, and validating Windows Defender AV. ## Add Update Compliance to Microsoft Operations Management Suite diff --git a/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md b/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md new file mode 100644 index 0000000000..14f81e83f6 --- /dev/null +++ b/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md @@ -0,0 +1,65 @@ +--- +title: Collect diagnostic data for Update Compliance and Windows Defender AV +description: Use a tool to collect data to troubleshoot Update Compliance issues when using the Windows Defender AV Assessment add in +keywords: troubleshoot, error, fix, update compliance, oms, monitor, report, windows defender av +search.product: eADQiWindows 10XVcnh +ms.pagetype: security +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: iaanw +ms.author: iawilt +ms.date: 09/06/2017 +--- + +# Collect Update Compliance diagnostic data for Windows Defender AV Assessment + +**Applies to:** + +- Windows 10 + +**Audience** + +- IT administrators + +This topic describes how to collect diagnostic data that can be used by Microsoft support and engineering teams to help troubleshoot issues you may encounter when using the Windows Defender AV Assessment section in the Update Compliance add-in. + +Before attempting this process, ensure you have read the [Troublehsoot Windows Defender Antivirus reporting](troubleshoot-reporting.md) topic, met all require pre-requisites, and taken any other suggested troubleshooting steps. + + +1. On at least two endpoints that are not reporting or showing up in Update Compliance, obtain the .cab diagnostic file by following this process: + 1. Open an administrator-level version of the commpand prompt: + 1. Open the **Start** menu. + 2. Type **cmd**. Right-click on **Command Prompt** and click **Run as administrator**. + 3. Enter administrator credentials or approve the prompt. + 2. Navigate to the Windows Defender directory. By default, this is C:\Program Files\Windows Defender, as in the following example: + ```Dos + cd c:\program files\windows\defender + ``` + 3. Enter the following command and press **Enter** + ```Dos + mpcmdrun -getfiles + ``` + 4. A .cab file will be generated that contains various diagnostic logs. The location of the file will be specified in the output in the command prompt, but by default it will be in C:\ProgramData\Microsoft\Windows Defender\Support\MpSupportFiles.cab. +2. Copy these .cab files to a location that can be accessed by Microsoft support. An example could be a password-protected OneDrive folder that you can share with us. +3. Send an email using the Update Compliance support email template, and fill out the template with the following information: + + ``` + I am encountering the following issue when using Windows Defender AV in Update Compliance: + + I have provided at least 2 support .cab files at the following location: + + My OMS workspace ID is: + + Please contact me at: + ``` + + + + +## Related topics + +- [Troublehsoot Windows Defender Antivirus reporting](troubleshoot-reporting.md) + diff --git a/windows/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md index cc04c936e3..f144ebfc04 100644 --- a/windows/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md +++ b/windows/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md @@ -147,7 +147,7 @@ After whitelisting the URLs listed above, you can test if you are connected to t Use the following argument with the Windows Defender AV command line utility (*mpcmdrun.exe*) to verify that your network can communicate with the Windows Defender AV cloud: ```DOS -MpCmdRun - ValidateMapsConnection +MpCmdRun -ValidateMapsConnection ``` > [!NOTE] > You need to open an administrator-level version of the command prompt. Right-click the item in the Start menu, click **Run as administrator** and click **Yes** at the permissions prompt. This command will only work on Windows 10, version 1703. diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md index bf8a1da73f..7e11c2e005 100644 --- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md +++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md @@ -39,13 +39,25 @@ There are three steps to troubleshooting these problems: 2. Check your connectivity to the Windows Defender cloud-based service 3. Submit support logs +>[!IMPORTANT] +>It typically takes 3 days for devices to start appearing in Update Compliance + ## Confirm pre-requisites -In order for devices to properly show up in Update Compliance, you have to meet certain pre-requisites for both the Update Compliance service and for Windows Defender Antivirus protection: +In order for devices to properly show up in Update Compliance, you have to meet certain pre-requisites for both the Update Compliance service and for Windows Defender AV protection: >[!div class="checklist] ->- Endpoints are using Windows Defender Antivirus as the sole antivirus protection app. Using any other antivirus app will cause Windows Defender AV to disable itself and the endpoint will not be reported in Update Compliance. +>- Endpoints are using Windows Defender Antivirus as the sole antivirus protection app. [Using any other antivirus app will cause Windows Defender AV to disable itself](windows-defender-antivirus-compatibility.md) and the endpoint will not be reported in Update Compliance. +> - [Cloud-delivered protection is enabled](enable-cloud-protection-windows-defender-antivirus.md). +> - Endpoints can [connect to the Windows Defender AV cloud](configure-network-connections-windows-defender-antivirus.md#validate-connections-between-your-network-and-the-cloud) +> - If the endpoint is running Windows 10 version 1607 or earlier, [Windows 10 telemetry must be set to the Enhanced level](https://docs.microsoft.com/en-us/windows/configuration/configure-windows-telemetry-in-your-organization#enhanced-level). +> - It has been 3 days since all requirements have been met + +If the abnove pre-requisites have all been met, you may need to proceed to the next step to collect diagnostic information and send it to us. + +> [!div class="nextstepaction"] +> [Collect diagnostic data for Update Compliance troubleshooting](collect-diagnostic-data-update-compliance-wdav.md) From 701d9e572b2d4a8f9413c92d549c24fc100b1425 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Thu, 7 Sep 2017 15:30:11 -0700 Subject: [PATCH 050/146] insert reporting troubleshoot to toc --- windows/threat-protection/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/threat-protection/TOC.md b/windows/threat-protection/TOC.md index c3b5a294aa..80a04ca0c3 100644 --- a/windows/threat-protection/TOC.md +++ b/windows/threat-protection/TOC.md @@ -143,6 +143,7 @@ #### [Deploy and enable Windows Defender Antivirus](windows-defender-antivirus\deploy-windows-defender-antivirus.md) ##### [Deployment guide for VDI environments](windows-defender-antivirus\deployment-vdi-windows-defender-antivirus.md) #### [Report on Windows Defender Antivirus protection](windows-defender-antivirus\report-monitor-windows-defender-antivirus.md) +##### [Troublehsoot Windows Defender Antivirus reporting in Update Compliance](windows-defender-antivirus\troubleshoot-reporting.md) #### [Manage updates and apply baselines](windows-defender-antivirus\manage-updates-baselines-windows-defender-antivirus.md) ##### [Manage protection and definition updates](windows-defender-antivirus\manage-protection-updates-windows-defender-antivirus.md) ##### [Manage when protection updates should be downloaded and applied](windows-defender-antivirus\manage-protection-update-schedule-windows-defender-antivirus.md) From 70da9f32542e1db478d5dfca455d13d079cc55c8 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Thu, 7 Sep 2017 15:37:58 -0700 Subject: [PATCH 051/146] layout updates for notes --- .../windows-defender-antivirus/troubleshoot-reporting.md | 2 +- .../windows-defender-antivirus-compatibility.md | 9 ++++++--- .../windows-defender-security-center.md | 6 ++++++ 3 files changed, 13 insertions(+), 4 deletions(-) diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md index 7e11c2e005..98a9a4946d 100644 --- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md +++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md @@ -47,7 +47,7 @@ There are three steps to troubleshooting these problems: In order for devices to properly show up in Update Compliance, you have to meet certain pre-requisites for both the Update Compliance service and for Windows Defender AV protection: ->[!div class="checklist] +>[!div class="checklist"] >- Endpoints are using Windows Defender Antivirus as the sole antivirus protection app. [Using any other antivirus app will cause Windows Defender AV to disable itself](windows-defender-antivirus-compatibility.md) and the endpoint will not be reported in Update Compliance. > - [Cloud-delivered protection is enabled](enable-cloud-protection-windows-defender-antivirus.md). > - Endpoints can [connect to the Windows Defender AV cloud](configure-network-connections-windows-defender-antivirus.md#validate-connections-between-your-network-and-the-cloud) diff --git a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md index 6a778f6cc1..1d49a1e634 100644 --- a/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md +++ b/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md @@ -51,9 +51,11 @@ Windows Server 2016 | Windows Defender AV | No | Active mode >[!IMPORTANT] ->Windows Defender AV is only available on endpoints running Windows 10 or Windows Server 2016. ->In Windows 8.1 and Windows Server 2012, enterprise-level endpoint antivirus protection is offered as [System Center Endpoint Protection](https://technet.microsoft.com/en-us/library/hh508760.aspx), which is managed through System Center Configuration Manager. ->Windows Defender is also offered for [consumer devices on Windows 8.1 and Windows Server 2012](https://technet.microsoft.com/en-us/library/dn344918#BKMK_WindowsDefender), although it does not provide enterprise-level management (or an interface on Windows Server 2012 Server Core installations). +>Windows Defender AV is only available on endpoints running Windows 10 or Windows Server 2016. +> +>In Windows 8.1 and Windows Server 2012, enterprise-level endpoint antivirus protection is offered as [System Center Endpoint Protection](https://technet.microsoft.com/en-us/library/hh508760.aspx), which is managed through System Center Configuration Manager. +> +>Windows Defender is also offered for [consumer devices on Windows 8.1 and Windows Server 2012](https://technet.microsoft.com/en-us/library/dn344918#BKMK_WindowsDefender), although it does not provide enterprise-level management (or an interface on Windows Server 2012 Server Core installations). @@ -73,6 +75,7 @@ The reasons for this are twofold: >[!WARNING] >You should not attempt to disable, stop, or modify any of the associated services used by Windows Defender AV, Windows Defender ATP, or the Windows Defender Security Center app. +> >This includes the *wscsvc*, *SecurityHealthService*, *MsSense*, *Sense*, *WinDefend*, or *MsMpEng* services and process. Manually modifying these services can cause severe instability on your endpoints and open your network to infections and attacks. diff --git a/windows/threat-protection/windows-defender-security-center/windows-defender-security-center.md b/windows/threat-protection/windows-defender-security-center/windows-defender-security-center.md index 50c6d3b553..804c2d9152 100644 --- a/windows/threat-protection/windows-defender-security-center/windows-defender-security-center.md +++ b/windows/threat-protection/windows-defender-security-center/windows-defender-security-center.md @@ -54,14 +54,20 @@ The Windows Defender Security Center app uses the [Security Center service](http >[!IMPORTANT] >Windows Defender AV and the Windows Defender Security Center app use similarly named services for specific purposes. +> >The Windows Defender Security Center app uses the Windows Defender Security Center Service (*SecurityHealthService* or *Windows Security Health Servce*), which in turn utilizes the Security Center service ([*wscsvc*](https://technet.microsoft.com/en-us/library/bb457154.aspx#EDAA)) to ensure the app provides the most up-to-date information about the protection status on the endpoint, including protection offered by third-party antivirus products, Windows Firewall, and other security protection. +> >These services do not affect the state of Windows Defender AV. Disabling or modifying these services will not disable Windows Defender AV, and will lead to a lowered protection state on the endpoint, even if you are using a third-party antivirus product. +> >Windows Defender AV will be [disabled automatically when a third-party antivirus product is installed and kept up to date](../windows-defender-antivirus/windows-defender-antivirus-compatibility.md). +> >Disabling the Windows Security Center service will not disable Windows Defender AV or [Windows Firewall](https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security). > [!WARNING] > If you disable the Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Defender Security Center app may display stale or inaccurate information about any antivirus or firewall products you have installed on the device. +> >It may also prevent Windows Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed. +> >This will significantly lower the protection of your device and could lead to malware infection. From c38810f392ff84fe390fc4b1d633b5cb9d5bfede Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 11 Sep 2017 14:06:26 +0000 Subject: [PATCH 052/146] Merged PR 3121: Add link --- devices/surface-hub/manage-surface-hub.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/devices/surface-hub/manage-surface-hub.md b/devices/surface-hub/manage-surface-hub.md index 25cca9e168..bd66726afe 100644 --- a/devices/surface-hub/manage-surface-hub.md +++ b/devices/surface-hub/manage-surface-hub.md @@ -40,3 +40,6 @@ Learn about managing and updating Surface Hub. | [Miracast on existing wireless network or LAN](miracast-over-infrastructure.md) | You can use Miracast on your wireless network or LAN to connect to Surface Hub. | | [Using a room control system]( https://technet.microsoft.com/itpro/surface-hub/use-room-control-system-with-surface-hub) | Room control systems can be used with your Microsoft Surface Hub.| +## Related topics + +- [View Power BI presentation mode on Surface Hub & Windows 10](https://powerbi.microsoft.com/documentation/powerbi-mobile-win10-app-presentation-mode/) \ No newline at end of file From e31e622561850d27154b18e443ae1b64a9db2f83 Mon Sep 17 00:00:00 2001 From: Elizabeth Ross Date: Mon, 11 Sep 2017 15:38:22 +0000 Subject: [PATCH 053/146] Merged PR 3122: Updated localization YAML --- .../configure-wd-app-guard.md | 1 - .../windows-defender-application-guard/faq-wd-app-guard.md | 1 - .../windows-defender-application-guard/install-wd-app-guard.md | 1 - .../windows-defender-application-guard/reqs-wd-app-guard.md | 1 - .../test-scenarios-wd-app-guard.md | 1 - .../windows-defender-application-guard/wd-app-guard-overview.md | 1 - .../windows-information-protection/app-behavior-with-wip.md | 2 +- .../collect-wip-audit-event-logs.md | 2 +- .../create-and-verify-an-efs-dra-certificate.md | 2 +- .../create-vpn-and-wip-policy-using-intune-azure.md | 2 +- .../create-vpn-and-wip-policy-using-intune.md | 2 +- .../create-wip-policy-using-intune-azure.md | 2 +- .../create-wip-policy-using-intune.md | 2 +- .../create-wip-policy-using-sccm.md | 2 +- .../deploy-wip-policy-using-intune-azure.md | 2 +- .../deploy-wip-policy-using-intune.md | 2 +- .../enlightened-microsoft-apps-and-wip.md | 2 +- .../guidance-and-best-practices-wip.md | 2 +- .../windows-information-protection/limitations-with-wip.md | 2 +- .../mandatory-settings-for-wip.md | 2 +- .../overview-create-wip-policy.md | 2 +- .../protect-enterprise-data-using-wip.md | 2 +- .../recommended-network-definitions-for-wip.md | 2 +- .../windows-information-protection/testing-scenarios-for-wip.md | 2 +- .../windows-information-protection/using-owa-with-wip.md | 2 +- .../wip-app-enterprise-context.md | 2 +- 26 files changed, 20 insertions(+), 26 deletions(-) diff --git a/windows/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md b/windows/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md index 5221675063..0018059252 100644 --- a/windows/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md +++ b/windows/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md @@ -8,7 +8,6 @@ ms.pagetype: security author: eross-msft ms.author: lizross ms.date: 08/11/2017 -localizationpriority: high --- # Configure Windows Defender Application Guard policy settings diff --git a/windows/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md b/windows/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md index 78a7228f40..d5206df9fb 100644 --- a/windows/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md +++ b/windows/threat-protection/windows-defender-application-guard/faq-wd-app-guard.md @@ -8,7 +8,6 @@ ms.pagetype: security author: eross-msft ms.author: lizross ms.date: 08/11/2017 -localizationpriority: high --- # Frequently asked questions - Windows Defender Application Guard diff --git a/windows/threat-protection/windows-defender-application-guard/install-wd-app-guard.md b/windows/threat-protection/windows-defender-application-guard/install-wd-app-guard.md index a93a6519fc..0504f9f546 100644 --- a/windows/threat-protection/windows-defender-application-guard/install-wd-app-guard.md +++ b/windows/threat-protection/windows-defender-application-guard/install-wd-app-guard.md @@ -8,7 +8,6 @@ ms.pagetype: security author: eross-msft ms.author: lizross ms.date: 08/11/2017 -localizationpriority: high --- # Prepare and install Windows Defender Application Guard diff --git a/windows/threat-protection/windows-defender-application-guard/reqs-wd-app-guard.md b/windows/threat-protection/windows-defender-application-guard/reqs-wd-app-guard.md index c9f657f6f9..15b33475fa 100644 --- a/windows/threat-protection/windows-defender-application-guard/reqs-wd-app-guard.md +++ b/windows/threat-protection/windows-defender-application-guard/reqs-wd-app-guard.md @@ -8,7 +8,6 @@ ms.pagetype: security author: eross-msft ms.author: lizross ms.date: 08/11/2017 -localizationpriority: high --- # System requirements for Windows Defender Application Guard diff --git a/windows/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md b/windows/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md index 152f404382..b7cb312c08 100644 --- a/windows/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md +++ b/windows/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md @@ -8,7 +8,6 @@ ms.pagetype: security author: eross-msft ms.author: lizross ms.date: 08/11/2017 -localizationpriority: high --- # Testing scenarios using Windows Defender Application Guard in your business or organization diff --git a/windows/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md b/windows/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md index ac7c37e883..df475ea509 100644 --- a/windows/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md +++ b/windows/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md @@ -8,7 +8,6 @@ ms.pagetype: security author: eross-msft ms.author: lizross ms.date: 08/11/2017 -localizationpriority: high --- # Windows Defender Application Guard overview diff --git a/windows/threat-protection/windows-information-protection/app-behavior-with-wip.md b/windows/threat-protection/windows-information-protection/app-behavior-with-wip.md index 5e1df99718..853ef9a50d 100644 --- a/windows/threat-protection/windows-information-protection/app-behavior-with-wip.md +++ b/windows/threat-protection/windows-information-protection/app-behavior-with-wip.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.pagetype: security ms.sitesec: library author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Unenlightened and enlightened app behavior while using Windows Information Protection (WIP) diff --git a/windows/threat-protection/windows-information-protection/collect-wip-audit-event-logs.md b/windows/threat-protection/windows-information-protection/collect-wip-audit-event-logs.md index 2b6985d243..922db68920 100644 --- a/windows/threat-protection/windows-information-protection/collect-wip-audit-event-logs.md +++ b/windows/threat-protection/windows-information-protection/collect-wip-audit-event-logs.md @@ -6,7 +6,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # How to collect Windows Information Protection (WIP) audit event logs diff --git a/windows/threat-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/threat-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index 50bf85a578..cee2d5b687 100644 --- a/windows/threat-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/threat-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Create and verify an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate diff --git a/windows/threat-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure.md b/windows/threat-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure.md index e4edc3e586..163ef51a0f 100644 --- a/windows/threat-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure.md +++ b/windows/threat-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Associate and deploy a VPN policy for Windows Information Protection (WIP) using the Azure portal for Microsoft Intune diff --git a/windows/threat-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune.md b/windows/threat-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune.md index 7b54968b51..83010d82bf 100644 --- a/windows/threat-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune.md +++ b/windows/threat-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Associate and deploy a VPN policy for Windows Information Protection (WIP) using the classic console for Microsoft Intune diff --git a/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index 6f9d99a876..48b2f0abd2 100644 --- a/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -6,7 +6,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Create a Windows Information Protection (WIP) with enrollment policy using the Azure portal for Microsoft Intune diff --git a/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune.md b/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune.md index 2f74bae405..b40ee0a441 100644 --- a/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune.md +++ b/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Create a Windows Information Protection (WIP) policy using the classic console for Microsoft Intune diff --git a/windows/threat-protection/windows-information-protection/create-wip-policy-using-sccm.md b/windows/threat-protection/windows-information-protection/create-wip-policy-using-sccm.md index 25be0c5cdc..af978f2b5a 100644 --- a/windows/threat-protection/windows-information-protection/create-wip-policy-using-sccm.md +++ b/windows/threat-protection/windows-information-protection/create-wip-policy-using-sccm.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Create and deploy a Windows Information Protection (WIP) policy using System Center Configuration Manager diff --git a/windows/threat-protection/windows-information-protection/deploy-wip-policy-using-intune-azure.md b/windows/threat-protection/windows-information-protection/deploy-wip-policy-using-intune-azure.md index b953181936..1324eed5be 100644 --- a/windows/threat-protection/windows-information-protection/deploy-wip-policy-using-intune-azure.md +++ b/windows/threat-protection/windows-information-protection/deploy-wip-policy-using-intune-azure.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Deploy your Windows Information Protection (WIP) policy using the Azure portal for Microsoft Intune diff --git a/windows/threat-protection/windows-information-protection/deploy-wip-policy-using-intune.md b/windows/threat-protection/windows-information-protection/deploy-wip-policy-using-intune.md index 1cdad28951..8dd0fcf76f 100644 --- a/windows/threat-protection/windows-information-protection/deploy-wip-policy-using-intune.md +++ b/windows/threat-protection/windows-information-protection/deploy-wip-policy-using-intune.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Deploy your Windows Information Protection (WIP) policy using the classic console for Microsoft Intune diff --git a/windows/threat-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md b/windows/threat-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md index 3694e13ba8..f3ef168e1c 100644 --- a/windows/threat-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md +++ b/windows/threat-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # List of enlightened Microsoft apps for use with Windows Information Protection (WIP) diff --git a/windows/threat-protection/windows-information-protection/guidance-and-best-practices-wip.md b/windows/threat-protection/windows-information-protection/guidance-and-best-practices-wip.md index 73eddd870d..08e74a6265 100644 --- a/windows/threat-protection/windows-information-protection/guidance-and-best-practices-wip.md +++ b/windows/threat-protection/windows-information-protection/guidance-and-best-practices-wip.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # General guidance and best practices for Windows Information Protection (WIP) diff --git a/windows/threat-protection/windows-information-protection/limitations-with-wip.md b/windows/threat-protection/windows-information-protection/limitations-with-wip.md index 67b6897a16..9c61e080b5 100644 --- a/windows/threat-protection/windows-information-protection/limitations-with-wip.md +++ b/windows/threat-protection/windows-information-protection/limitations-with-wip.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Limitations while using Windows Information Protection (WIP) diff --git a/windows/threat-protection/windows-information-protection/mandatory-settings-for-wip.md b/windows/threat-protection/windows-information-protection/mandatory-settings-for-wip.md index d810066027..34070f6316 100644 --- a/windows/threat-protection/windows-information-protection/mandatory-settings-for-wip.md +++ b/windows/threat-protection/windows-information-protection/mandatory-settings-for-wip.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Mandatory tasks and settings required to turn on Windows Information Protection (WIP) diff --git a/windows/threat-protection/windows-information-protection/overview-create-wip-policy.md b/windows/threat-protection/windows-information-protection/overview-create-wip-policy.md index 428c25c20d..6dcd047747 100644 --- a/windows/threat-protection/windows-information-protection/overview-create-wip-policy.md +++ b/windows/threat-protection/windows-information-protection/overview-create-wip-policy.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Create a Windows Information Protection (WIP) policy diff --git a/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip.md b/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip.md index 934aa9ae7c..d374d95478 100644 --- a/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip.md +++ b/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Protect your enterprise data using Windows Information Protection (WIP) diff --git a/windows/threat-protection/windows-information-protection/recommended-network-definitions-for-wip.md b/windows/threat-protection/windows-information-protection/recommended-network-definitions-for-wip.md index 418c24c0ef..5bd3eccc1f 100644 --- a/windows/threat-protection/windows-information-protection/recommended-network-definitions-for-wip.md +++ b/windows/threat-protection/windows-information-protection/recommended-network-definitions-for-wip.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Recommended Enterprise Cloud Resources and Neutral Resources network settings with Windows Information Protection (WIP) diff --git a/windows/threat-protection/windows-information-protection/testing-scenarios-for-wip.md b/windows/threat-protection/windows-information-protection/testing-scenarios-for-wip.md index 0c5aff23c1..88f14510a5 100644 --- a/windows/threat-protection/windows-information-protection/testing-scenarios-for-wip.md +++ b/windows/threat-protection/windows-information-protection/testing-scenarios-for-wip.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Testing scenarios for Windows Information Protection (WIP) diff --git a/windows/threat-protection/windows-information-protection/using-owa-with-wip.md b/windows/threat-protection/windows-information-protection/using-owa-with-wip.md index e2aacd97c4..dbba82c416 100644 --- a/windows/threat-protection/windows-information-protection/using-owa-with-wip.md +++ b/windows/threat-protection/windows-information-protection/using-owa-with-wip.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Using Outlook on the web with Windows Information Protection (WIP) diff --git a/windows/threat-protection/windows-information-protection/wip-app-enterprise-context.md b/windows/threat-protection/windows-information-protection/wip-app-enterprise-context.md index fbf77802f5..bc89db2205 100644 --- a/windows/threat-protection/windows-information-protection/wip-app-enterprise-context.md +++ b/windows/threat-protection/windows-information-protection/wip-app-enterprise-context.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: eross-msft -ms.localizationpriority: high +ms.localizationpriority: medium --- # Determine the Enterprise Context of an app running in Windows Information Protection (WIP) From fc552120f62af40320c1c8c9bee232f5eb508cc6 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 11 Sep 2017 20:51:59 +0000 Subject: [PATCH 054/146] Merged PR 3126: System/LimitEnhancedDiagnosticDataWindowsAnalytics in Policy CSP --- ...ew-in-windows-mdm-enrollment-management.md | 26 +++++++++++ .../policy-configuration-service-provider.md | 3 ++ .../mdm/policy-csp-system.md | 45 +++++++++++++++++++ 3 files changed, 74 insertions(+) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 8d2e232161..f1d59d391c 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1044,6 +1044,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s
  • Education/PreventAddingNewPrinters
  • Education/PrinterNames
  • Security/ClearTPMIfNotReady
    • +
  • System/LimitEnhancedDiagnosticDataWindowsAnalytics
  • Update/AllowAutoWindowsUpdateDownloadOverMeteredNetwork
  • Update/DisableDualScan
  • Update/ScheduledInstallEveryWeek
    • @@ -1335,6 +1336,31 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware ## Change history in MDM documentation +### September 2017 + + ++++ + + + + + + + + + + + +
    New or updated topicDescription
    [Policy CSP](policy-configuration-service-provider.md)

    Added the following new policies for Windows 10, version 1709:

    +
      +
    • Search/AllowCloudSearch
      • +
    • System/LimitEnhancedDiagnosticDataWindowsAnalytics
      • +
    +
    + ### August 2017 diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index a36b8b8b5f..de942d3846 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2646,6 +2646,9 @@ The following diagram shows the Policy configuration service provider in tree fo
    System/DisableSystemRestore
    +
    + System/LimitEnhancedDiagnosticDataWindowsAnalytics +
    System/TelemetryProxy
    diff --git a/windows/client-management/mdm/policy-csp-system.md b/windows/client-management/mdm/policy-csp-system.md index 53b9ec2f30..d077ea3454 100644 --- a/windows/client-management/mdm/policy-csp-system.md +++ b/windows/client-management/mdm/policy-csp-system.md @@ -554,6 +554,51 @@ ADMX Info: +**System/LimitEnhancedDiagnosticDataWindowsAnalytics** + + +
    + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobile Enterprise
    cross markcheck mark3check mark3check mark3check mark3check mark3check mark3
    + + + +

    This policy setting, in combination with the System/AllowTelemetry + policy setting, enables organizations to send Microsoft a specific set of diagnostic data for IT insights via Windows Analytics services. + +

    To enable this behavior you must complete two steps: +

      +
    • Enable this policy setting
      • +
    • Set Allow Telemetry to level 2 (Enhanced)
      • +
    + +

    When you configure these policy settings, a basic level of diagnostic data plus additional events that are required for Windows Analytics are sent to Microsoft. These events are documented here: [Windows 10, version 1703 basic level Windows diagnostic events and fields](https://go.microsoft.com/fwlink/?linkid=847594). + +

    Enabling enhanced diagnostic data in the System/AllowTelemetry policy in combination with not configuring this policy will also send the required events for Windows Analytics, plus additional enhanced level telemetry data. This setting has no effect on computers configured to send full, basic or security level diagnostic data to Microsoft. + +

    If you disable or do not configure this policy setting, then the level of diagnostic data sent to Microsoft is determined by the System/AllowTelemetry policy. + + + + + **System/TelemetryProxy** From 035a28b92794ca2b16ae02ea653885f5af0f27cd Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 11 Sep 2017 14:04:32 -0700 Subject: [PATCH 055/146] add compliance --- ...e-privacy-windows-defender-advanced-threat-protection.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md index b10e923513..bbc29cc9fb 100644 --- a/windows/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md @@ -73,5 +73,9 @@ Your data will be kept for a period of at least 90 days, during which it will be ## Can Microsoft help us maintain regulatory compliance? -Microsoft provides customers with detailed information about Microsoft's security and compliance programs, including audit reports and compliance packages, to help customers assess Windows Defender ATP services against their own legal and regulatory requirements. Windows Defender ATP has a roadmap for obtaining national, regional and industry-specific certifications, starting with ISO 27001. The service is designed, implemented, and maintained according to the compliance and privacy principles of ISO 27001, as well as Microsoft’s compliance standards. +Microsoft provides customers with detailed information about Microsoft's security and compliance programs, including audit reports and compliance packages, to help customers assess Windows Defender ATP services against their own legal and regulatory requirements. Windows Defender ATP is ISO 27001 certified and has a roadmap for obtaining national, regional and industry-specific certifications. + + By providing customers with compliant, independently-verified services, Microsoft makes it easier for customers to achieve compliance for the infrastructure and applications they run, including this new Microsoft cloud service. + +For more information on the Windows Defender ATP ISO certification reports, see [Microsoft Trust Center](https://www.microsoft.com/en-us/trustcenter/compliance/iso-iec-27001). From 45eedd17ffc82e28708251cbc4955f7126715a46 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 11 Sep 2017 14:18:42 -0700 Subject: [PATCH 056/146] edit to add newer version of powerbi --- ...bi-reports-windows-defender-advanced-threat-protection.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md index 1419c95077..4fe1246001 100644 --- a/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md @@ -78,9 +78,12 @@ You can create a custom dashboard in Power BI Desktop to create visualizations t 7. Click **File** > **Options and settings** > **Custom data connectors**. 8. Select **New table and matrix visuals** and **Custom data connectors** and click **OK**. + + >[NOTE] + >If you're using Power BI Desktop July 2017 version (or later), you won't need to select **New table and matrix visuals**. You'll only need to select **Custom data connectors**. ![Power BI options page](images/atp-powerbi-options.png) - + 9. Restart Power BI Desktop. ## Customize the Windows Defender ATP Power BI dashboard From b5e96b7e61c4a93a40a33b17ccdc6359ce00cfd5 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 11 Sep 2017 14:23:35 -0700 Subject: [PATCH 057/146] minor update --- ...orage-privacy-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md index bbc29cc9fb..c482403b20 100644 --- a/windows/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md @@ -76,6 +76,6 @@ Your data will be kept for a period of at least 90 days, during which it will be Microsoft provides customers with detailed information about Microsoft's security and compliance programs, including audit reports and compliance packages, to help customers assess Windows Defender ATP services against their own legal and regulatory requirements. Windows Defender ATP is ISO 27001 certified and has a roadmap for obtaining national, regional and industry-specific certifications. -By providing customers with compliant, independently-verified services, Microsoft makes it easier for customers to achieve compliance for the infrastructure and applications they run, including this new Microsoft cloud service. +By providing customers with compliant, independently-verified services, Microsoft makes it easier for customers to achieve compliance for the infrastructure and applications they run. For more information on the Windows Defender ATP ISO certification reports, see [Microsoft Trust Center](https://www.microsoft.com/en-us/trustcenter/compliance/iso-iec-27001). From ecc252ddbb63bc8439c693b9e399c330136a7695 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 11 Sep 2017 14:57:24 -0700 Subject: [PATCH 058/146] minor update --- ...werbi-reports-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md index 4fe1246001..afcd9030c3 100644 --- a/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md @@ -80,7 +80,7 @@ You can create a custom dashboard in Power BI Desktop to create visualizations t 8. Select **New table and matrix visuals** and **Custom data connectors** and click **OK**. >[NOTE] - >If you're using Power BI Desktop July 2017 version (or later), you won't need to select **New table and matrix visuals**. You'll only need to select **Custom data connectors**. + >If you are using Power BI Desktop July 2017 version (or later), you won't need to select **New table and matrix visuals**. You'll only need to select **Custom data connectors**. ![Power BI options page](images/atp-powerbi-options.png) From 1cc9476a718de7b4295efa37673c86fc2479da14 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 11 Sep 2017 22:24:27 +0000 Subject: [PATCH 059/146] Merged PR 3134: Added link to Defender/AttachSurfaceReductionRules policy in Policy CSP --- windows/client-management/mdm/policy-csp-defender.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index 81e87eb957..3f35e2d4eb 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -572,7 +572,7 @@ ms.date: 08/30/2017

    Added in Windows 10, version 1709. This policy setting allows you to prevent Attack Surface reduction rules from matching on files under the paths specified or for the fully qualified resources specified. Paths should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of a path or a fully qualified resource name. As an example, a path might be defined as: "c:\Windows" to exclude all files in this directory. A fully qualified resource name might be defined as: "C:\Windows\App.exe".. -Value type is string. +

    Value type is string. @@ -609,7 +609,9 @@ Value type is string.

    Added in Windows 10, version 1709. This policy setting enables setting the state (Block/Audit/Off) for each Attack surface reduction (ASR) rule. Each ASR rule listed can be set to one of the following states (Block/Audit/Off). The ASR rule ID and state should be added under the Options for this setting. Each entry must be listed as a name value pair. The name defines a valid ASR rule ID, while the value contains the status ID indicating the status of the rule. -Value type is string. +

    For more information about ASR rule ID and status ID, see [Enable Attack Surface Reduction](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction). + +

    Value type is string. From 101c1cd5874c931ea588db4b400d404a8553c10b Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 12 Sep 2017 07:29:22 -0700 Subject: [PATCH 060/146] add 1709 to change history for config & client mgt --- .../change-history-for-client-management.md | 5 +++++ .../configuration/change-history-for-configure-windows-10.md | 4 ++++ 2 files changed, 9 insertions(+) diff --git a/windows/client-management/change-history-for-client-management.md b/windows/client-management/change-history-for-client-management.md index 457e51889a..cc7f5fb34a 100644 --- a/windows/client-management/change-history-for-client-management.md +++ b/windows/client-management/change-history-for-client-management.md @@ -16,6 +16,11 @@ ms.date: 06/13/2017 This topic lists new and updated topics in the [Client management](index.md) documentation for Windows 10 and Windows 10 Mobile. +## RELEASE: Windows 10, version 1709 + +The topics in this library have been updated for Windows 10, version 1709 (also known as the Fall Creators Update). + + ## July 2017 | New or changed topic | Description | diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 76c39cc45d..cee30eb876 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -14,6 +14,10 @@ author: jdeckerms This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## RELEASE: Windows 10, version 1709 + +The topics in this library have been updated for Windows 10, version 1709 (also known as the Fall Creators Update). + ## August 2017 New or changed topic | Description From 9c8e5587f1c6d68a7208a5f0bc5f7c43354d6b2d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 12 Sep 2017 08:29:08 -0700 Subject: [PATCH 061/146] copyedits and added to change history --- windows/application-management/TOC.md | 2 +- .../change-history-for-application-management.md | 5 +++++ .../application-management/per-user-services-in-windows.md | 6 ++++-- 3 files changed, 10 insertions(+), 3 deletions(-) diff --git a/windows/application-management/TOC.md b/windows/application-management/TOC.md index b99f534e69..6b96cc2abc 100644 --- a/windows/application-management/TOC.md +++ b/windows/application-management/TOC.md @@ -100,6 +100,6 @@ #### [Viewing App-V Server Publishing Metadata](app-v/appv-viewing-appv-server-publishing-metadata.md) #### [Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications](app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md) ## [Service Host process refactoring](svchost-service-refactoring.md) -## [Per User services in Windows](per-user-services-in-windows.md) +## [Per-user services in Windows](per-user-services-in-windows.md) ## [Deploy app upgrades on Windows 10 Mobile](deploy-app-upgrades-windows-10-mobile.md) ## [Change history for Application management](change-history-for-application-management.md) diff --git a/windows/application-management/change-history-for-application-management.md b/windows/application-management/change-history-for-application-management.md index 92e5039334..7641745172 100644 --- a/windows/application-management/change-history-for-application-management.md +++ b/windows/application-management/change-history-for-application-management.md @@ -14,6 +14,11 @@ author: jdeckerms This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## September 2017 +| New or changed topic | Description | +| --- | --- | +| [Per-user services in Windows](per-user-services-in-windows.md) | New | + ## July 2017 | New or changed topic | Description | | --- | --- | diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index 6d2daad557..b12b4e484d 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -1,5 +1,5 @@ --- -title: Per-user services in Windows 10 and Windows Server 2016 +title: Per-user services in Windows 10 and Windows Server description: Learn about per-user services introduced in Windows 10. ms.prod: w10 ms.mktglfcycl: deploy @@ -10,7 +10,9 @@ author: lizap ms.date: 08/14/2017 --- -# Per-user services in Windows 10 and Windows Server 2016 +# Per-user services in Windows 10 and Windows Server + +> Applies to: Windows 10, Windows Server Per-user services are services that are created when a user signs into Windows or Windows Server and are stopped and deleted when that user signs out. These services run in the security context of the user account - this provides better resource management than the previous approach of running these kinds of services in Explorer, associated with a preconfigured account, or as tasks. From f21a42ca784af9f977f239adf161af3618c4171e Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 12 Sep 2017 09:01:32 -0700 Subject: [PATCH 062/146] added link to Windows server system services --- windows/application-management/per-user-services-in-windows.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index b12b4e484d..a31b464390 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -24,7 +24,8 @@ You can't prevent per-user services from being created, but you can configure th > [!IMPORTANT] > If you change the template service's Startup Type, make sure you carefully test that change prior to rolling it out in your production environment. -Use the following information to understand per-user services, change the template service Startup Type, and manage per-user services through Group Policy and security templates. +Use the following information to understand per-user services, change the template service Startup Type, and manage per-user services through Group Policy and security templates. +For more information about disabling system services for Windows Server, see [Guidance on disabling system services on Windows Server with Desktop Experience](https://docs.microsoft.com/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server). ## Per-user services From d96b9d1718074266e319e91b29f959a83c7a4b42 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 12 Sep 2017 18:17:55 +0000 Subject: [PATCH 063/146] Merged PR 3148: Search/AllowCloudSearch policy in Policy CSP --- ...ew-in-windows-mdm-enrollment-management.md | 1 + .../policy-configuration-service-provider.md | 3 ++ .../mdm/policy-csp-search.md | 36 +++++++++++++++++++ 3 files changed, 40 insertions(+) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index f1d59d391c..c3759e1aab 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1043,6 +1043,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s

  • Education/DefaultPrinterName
  • Education/PreventAddingNewPrinters
  • Education/PrinterNames
    • +
  • Search/AllowCloudSearch
  • Security/ClearTPMIfNotReady
  • System/LimitEnhancedDiagnosticDataWindowsAnalytics
  • Update/AllowAutoWindowsUpdateDownloadOverMeteredNetwork
    • diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index de942d3846..c6e4757c28 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2383,6 +2383,9 @@ The following diagram shows the Policy configuration service provider in tree fo ### Search policies
    +
    + Search/AllowCloudSearch +
    Search/AllowIndexingEncryptedStoresOrItems
    diff --git a/windows/client-management/mdm/policy-csp-search.md b/windows/client-management/mdm/policy-csp-search.md index 8c510ae5c1..783aac1e8d 100644 --- a/windows/client-management/mdm/policy-csp-search.md +++ b/windows/client-management/mdm/policy-csp-search.md @@ -19,6 +19,42 @@ ms.date: 08/30/2017 ## Search policies + +**Search/AllowCloudSearch** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobile Enterprise
    cross markcheck mark3check mark3check mark3check mark3check mark3check mark3
    + + + +

    Added in Windows 10, version 1709. Allow search and Cortana to search cloud sources like OneDrive and SharePoint. This policy allows corporate administrators to control whether employees can turn off/on the search of these cloud sources. The default policy value is to allow employees access to the setting that controls search of cloud sources. + +

    The following list shows the supported values: + +- 0 – Not allowed. +- 1 (default) – Allowed. + + + **Search/AllowIndexingEncryptedStoresOrItems** From b2ab3042051e20689f21c040c1a67595a821e576 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 12 Sep 2017 18:27:03 +0000 Subject: [PATCH 064/146] Merged PR 3149: Add procedural info to license topic to address escalations Add procedural info to license topic to address escalations --- .../deployment/deploy-enterprise-licenses.md | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index a05a03bbe9..472e7ccf66 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -15,8 +15,18 @@ author: greg-lindsay This topic describes how to deploy Windows 10 Enterprise E3 or E5 licenses with [Windows 10 Enterprise Subscription Activation](windows-10-enterprise-subscription-activation.md) or [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md) and Azure Active Directory (Azure AD). ->Note: Windows 10 Enterprise Subscription Activation (EA or MPSA) requires Windows 10 Pro, version 1703 or later. ->Windows 10 Enterprise E3 in CSP requires Windows 10 Pro, version 1607 or later. +>Note: Windows 10 Enterprise Subscription Activation (EA or MPSA) requires Windows 10 Pro, version 1703 or later.
    +>Windows 10 Enterprise E3 in CSP requires Windows 10 Pro, version 1607 or later.
    + +## Enabling Subscription Activation with an existing EA + +If you are an EA customer with an existing Office 365 tenant, use the following steps to enable Windows 10 Subscription licenses on your existing tenant: + +1. Work with your reseller to place an order for $0 SKU. There are two SKUs available, depending on their current Windows Enterprise SA license:
    + a. **AAA-51069** - Win10UsrOLSActv Alng MonthlySub Addon E3
    + b. **AAA-51068*** - Win10UsrOLSActv Alng MonthlySub Addon E5
    +2. After placing an order, the OLS admin on the agreement will receive a service activation email, indicating their subscription licenses have been provisioned on the tenant. +3. The admin can now assign subscription licenses to users. Also in this article: - [Explore the upgrade experience](#explore-the-upgrade-experience): How to upgrade devices using the deployed licenses. @@ -195,5 +205,4 @@ Devices must be running Windows 10 Pro, version 1703, and be Azure Active Direct A popup window will display the Windows 10 version number and detailed OS build information. - If a device is running a previous version of Windows 10 Pro (for example, version 1511), it will not be upgraded to Windows 10 Enterprise when a user signs in, even if the user has been assigned a subscription in the CSP portal. - + If a device is running a previous version of Windows 10 Pro (for example, version 1511), it will not be upgraded to Windows 10 Enterprise when a user signs in, even if the user has been assigned a subscription in the CSP portal. \ No newline at end of file From 05dcb15cf0a6367fc277ff5b3b095a869a7d3b32 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 12 Sep 2017 11:30:37 -0700 Subject: [PATCH 065/146] added MDM policy option --- .../change-history-for-configure-windows-10.md | 6 ++++++ ...ng-system-components-to-microsoft-services.md | 16 ++++++++++------ 2 files changed, 16 insertions(+), 6 deletions(-) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 76c39cc45d..08c50e3ed2 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -14,6 +14,12 @@ author: jdeckerms This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## September 2017 + +New or changed topic | Description +--- | --- + [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) | Added that Windows Spotlight can be managed by the Experience/AllowWindowsSpotlight MDM policy. + ## August 2017 New or changed topic | Description diff --git a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index e5ebed0c80..4a46d77e09 100644 --- a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -113,7 +113,7 @@ See the following table for a summary of the management settings for Windows 10 | [21. Wi-Fi Sense](#bkmk-wifisense) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | ![Check mark](images/checkmark.png) | | | [22. Windows Defender](#bkmk-defender) | | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | | [23. Windows Media Player](#bkmk-wmp) | ![Check mark](images/checkmark.png) | | | | ![Check mark](images/checkmark.png) | -| [24. Windows spotlight](#bkmk-spotlight) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | ![Check mark](images/checkmark.png) | | +| [24. Windows Spotlight](#bkmk-spotlight) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | | [25. Microsoft Store](#bkmk-windowsstore) | | ![Check mark](images/checkmark.png) | | ![Check mark](images/checkmark.png) | | | [26. Windows Update Delivery Optimization](#bkmk-updates) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | | [27. Windows Update](#bkmk-wu) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | ![Check mark](images/checkmark.png) | | | @@ -558,7 +558,7 @@ The following Microsoft Edge MDM policies are available in the [Policy CSP](http | Browser/FirstRunURL | Choose the home page for Microsoft Edge on Windows Mobile 10.
    Default: blank | -For a complete list of the Microsoft Edge policies, see [Available policies for Microsoft Edge](http://technet.microsoft.com/library/mt270204.aspx). +For a complete list of the Microsoft Edge policies, see [Available policies for Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/available-policies). ### 13. Network Connection Status Indicator @@ -1636,7 +1636,7 @@ You can stop sending file samples back to Microsoft. -or- -- For Windows 10 only, apply the Defender/SubmitSamplesConsent MDM policy from the [Defender CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx), where: +- For Windows 10 only, apply the Defender/SubmitSamplesConsent MDM policy from the [Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender), where: - **0**. Always prompt. @@ -1682,9 +1682,9 @@ To remove Windows Media Player on Windows Server 2016: - Run the following DISM command from an elevated command prompt: **dism /online /Disable-Feature /FeatureName:WindowsMediaPlayer** -### 24. Windows spotlight +### 24. Windows Spotlight -Windows spotlight provides features such as different background images and text on the lock screen, suggested apps, Microsoft account notifications, and Windows tips. You can control it by using the user interface or through Group Policy. +Windows Spotlight provides features such as different background images and text on the lock screen, suggested apps, Microsoft account notifications, and Windows tips. You can control it by using the user interface, MDM policy, or through Group Policy. If you're running Windows 10, version 1607 or later, you only need to enable the following Group Policy: @@ -1695,6 +1695,10 @@ If you're running Windows 10, version 1607 or later, you only need to enable the -or- +- For Windows 10 only, apply the Experience/AllowWindowsSpotlight MDM policy from the [Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience), with a value of 0 (zero). + + -or- + - Create a new REG\_DWORD registry setting in **HKEY\_CURRENT\_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent!DisableWindowsSpotlightFeatures**, with a value of 1 (one). If you're not running Windows 10, version 1607 or later, you can use the other options in this section. @@ -1847,7 +1851,7 @@ You can turn off automatic updates by doing one of the following. This is not re -or- -- For Windows 10 only, apply the Update/AllowAutoUpdate MDM policy from the [Policy CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx), where: +- For Windows 10 only, apply the Update/AllowAutoUpdate MDM policy from the [Policy CSP](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update), where: - **0**. Notify the user before downloading the update. From 74f9e76ec7743d1588695c4760290aabf4ac0c01 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 12 Sep 2017 11:45:53 -0700 Subject: [PATCH 066/146] corrected registry paths --- ...ows-operating-system-components-to-microsoft-services.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 4a46d77e09..12d7249ed9 100644 --- a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -1699,7 +1699,7 @@ If you're running Windows 10, version 1607 or later, you only need to enable the -or- -- Create a new REG\_DWORD registry setting in **HKEY\_CURRENT\_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent!DisableWindowsSpotlightFeatures**, with a value of 1 (one). +- Create a new REG\_DWORD registry setting in **HKEY\_CURRENT\_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightFeatures**, with a value of 1 (one). If you're not running Windows 10, version 1607 or later, you can use the other options in this section. @@ -1731,13 +1731,13 @@ If you're not running Windows 10, version 1607 or later, you can use the other o -or- - - Create a new REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent!DisableSoftLanding**, with a value of 1 (one). + - Create a new REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableSoftLanding**, with a value of 1 (one). - **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Cloud Content** > **Turn off Microsoft consumer experiences**. -or- - - Create a new REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent!DisableWindowsConsumerFeatures**, with a value of 1 (one). + - Create a new REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsConsumerFeatures**, with a value of 1 (one). For more info, see [Windows Spotlight on the lock screen](windows-spotlight.md). From 06c2dc7ea3127bbb0e9c8c5ef70bdacae980e21c Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 12 Sep 2017 19:36:23 +0000 Subject: [PATCH 067/146] Merged PR 3150: Add USMT workaround for Start menu Add USMT workaround for Start menu --- windows/deployment/usmt/usmt-common-issues.md | 27 +++++++++++++ .../usmt/usmt-what-does-usmt-migrate.md | 39 +++++++++++-------- 2 files changed, 50 insertions(+), 16 deletions(-) diff --git a/windows/deployment/usmt/usmt-common-issues.md b/windows/deployment/usmt/usmt-common-issues.md index 118d52b056..12589a4f94 100644 --- a/windows/deployment/usmt/usmt-common-issues.md +++ b/windows/deployment/usmt/usmt-common-issues.md @@ -5,6 +5,7 @@ ms.assetid: 5a37e390-8617-4768-9eee-50397fbbb2e1 ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library +ms.date: 09/07/2017 author: greg-lindsay --- @@ -28,6 +29,8 @@ The following sections discuss common issues that you might see when you run the [Hard Link Migration Problems](#bkmk-hardlink) +[USMT does not migrate the Start layout](#usmt-does-not-migrate-the-start-layout) + ## General Guidelines for Identifying Migration Problems @@ -222,6 +225,26 @@ There are three typical causes for this issue. **Resolution:** To migrate PST files that are not linked to Outlook profiles, you must create a separate migration rule to capture these files. +### USMT does not migrate the Start layout + +**Description:** You are using USMT to migrate profiles from one installation of Windows 10 to another installation of Windows 10 on different hardware. After migration, the user signs in on the new device and does not have the Start menu layout they had previously configured. + +**Cause:** A code change in the Start Menu with Windows 10 version 1607 is incompatible with this USMT function. + +**Resolution:** The following workaround is available: + +1. With the user signed in, back up the Start layout using the following Windows PowerShell command. You can specify a different path if desired: + + ``` + Export-StartLayout -Path "C:\Layout\user1.xml" + ``` +2. Migrate the user's profile with USMT. +3. Before the user signs in on the new device, import the Start layout using the following Windows PowerShell command: + + ``` + Import-StartLayout –LayoutPath "C:\Layout\user1.xml" –MountPath %systemdrive% + ``` + ## Offline Migration Problems @@ -286,6 +309,10 @@ USMTutils /rd You should also reboot the machine. + + + + ## Related topics diff --git a/windows/deployment/usmt/usmt-what-does-usmt-migrate.md b/windows/deployment/usmt/usmt-what-does-usmt-migrate.md index 6ff122772a..02e64c33e8 100644 --- a/windows/deployment/usmt/usmt-what-does-usmt-migrate.md +++ b/windows/deployment/usmt/usmt-what-does-usmt-migrate.md @@ -1,6 +1,6 @@ --- -title: What Does USMT Migrate (Windows 10) -description: What Does USMT Migrate +title: What does USMT migrate (Windows 10) +description: What does USMT migrate ms.assetid: f613987d-0f17-43fe-9717-6465865ceda7 ms.prod: w10 ms.mktglfcycl: deploy @@ -8,23 +8,23 @@ ms.sitesec: library author: greg-lindsay --- -# What Does USMT Migrate? +# What does USMT migrate? -## In This Topic +## In this topic -- [Default Migration Scripts](#bkmk-defaultmigscripts) +- [Default migration scripts](#bkmk-defaultmigscripts) - [User Data](#bkmk-3) -- [Operating-System Components](#bkmk-4) +- [Operating-system components](#bkmk-4) -- [Supported Applications](#bkmk-2) +- [Supported applications](#bkmk-2) -- [What USMT Does Not Migrate](#no) +- [What USMT does not migrate](#no) -## Default Migration Scripts +## Default migration scripts The User State Migration Tool (USMT) 10.0 is designed so that an IT engineer can precisely define migrations using the USMT .xml scripting language. USMT provides the following sample scripts: @@ -43,7 +43,7 @@ The User State Migration Tool (USMT) 10.0 is designed so that an IT engineer ca - Access control lists (ACLs) for folders outside the user profile. -## User Data +## User data This section describes the user data that USMT migrates by default, using the MigUser.xml file. It also defines how to migrate ACLs. @@ -52,6 +52,9 @@ This section describes the user data that USMT migrates by default, using the Mi My Documents, My Video, My Music, My Pictures, desktop files, Start menu, Quick Launch settings, and Favorites. + >[!IMPORTANT] + >Starting in Windows 10, version 1607 the USMT does not migrate the Start menu layout. To migrate a user's Start menu, you must export and then import settings using the Windows PowerShell cmdlets **Export-StartLayout** and **Import-StartLayout**. For more information, see [USMT common issues](https://docs.microsoft.com/windows/deployment/usmt/usmt-common-issues#usmt-does-not-migrate-the-start-layout). + - **Folders from the All Users and Public profiles.** When you specify the MigUser.xml file, USMT also migrates the following from the **All Users** profile in Windows® XP, or the **Public** profile in Windows Vista, Windows 7, or Windows 8: - Shared Documents @@ -84,7 +87,7 @@ To migrate ACLs, you must specify the directory to migrate in the MigUser.xml fi   -## Operating-System Components +## Operating-system components USMT migrates operating-system components to a destination computer from computers running Windows 7 and Windows 8 @@ -151,7 +154,7 @@ Some settings, such as fonts, are not applied by the LoadState tool until after   -## Supported Applications +## Supported applications Although it is not required for all applications, it is good practice to install all applications on the destination computer before restoring the user state. Installing applications before migrating settings helps to ensure that the migrated settings are not overwritten by the application installers. @@ -361,12 +364,12 @@ When you specify the MigApp.xml file, USMT migrates the settings for the followi   -## What USMT Does Not Migrate +## What USMT does not migrate The following is a list of the settings that USMT does not migrate. If you are having a problem that is not listed here, see [Common Issues](usmt-common-issues.md). -### Application Settings +### Application settings USMT does not migrate the following application settings: @@ -382,7 +385,7 @@ USMT does not migrate the following application settings: - You attempt to migrate from a 32-bit computer to a 64-bit computer. This is because the ICQ Pro default installation directory is different on the two types of computers. When you install ICQ Pro on a 32-bit computer, the default location is "C:\\Program Files\\...". The ICQ Pro default installation directory on an x64-based computer, however, is “C:\\Program Files (x86)\\...”. -### Operating-System Settings +### Operating-System settings USMT does not migrate the following operating-system settings. @@ -402,10 +405,14 @@ You should also note the following: - You can use the /**localonly** option to exclude the data from removable drives and network drives mapped on the source computer. For more information about what is excluded when you specify /**localonly**, see [ScanState Syntax](usmt-scanstate-syntax.md). +### Start menu layout + +Starting in Windows 10, version 1607 the USMT does not migrate the Start menu layout. To migrate a user's Start menu, you must export and then import settings using the Windows PowerShell cmdlets **Export-StartLayout** and **Import-StartLayout**. For more information, see [USMT common issues](https://docs.microsoft.com/windows/deployment/usmt/usmt-common-issues#usmt-does-not-migrate-the-start-layout). + ## Related topics -[Plan Your Migration](usmt-plan-your-migration.md) +[Plan your migration](usmt-plan-your-migration.md)   From cad8702f849ff1431231d7c1e1fdb8baf85763de Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 13:07:52 -0700 Subject: [PATCH 068/146] updates --- .../images/atp-region-control-panel.png | Bin 0 -> 22441 bytes ...ows-defender-advanced-threat-protection.md | 37 ++++++++++++------ 2 files changed, 24 insertions(+), 13 deletions(-) create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-region-control-panel.png diff --git a/windows/threat-protection/windows-defender-atp/images/atp-region-control-panel.png b/windows/threat-protection/windows-defender-atp/images/atp-region-control-panel.png new file mode 100644 index 0000000000000000000000000000000000000000..58d25e0f9d298114ba24ace8d1f807fe609fad9a GIT binary patch literal 22441 zcmcG$bzD{5+BLlCkVd50gb31-lADs0?gjzr?gl|hN~J_Vx*IlK(t@OPcX#LJUFbQ_ zx$oyW=X<~Ri$C}&bI-N*T5GOrT-O-mnuICJOJbsvpo2glOlc``We^B%6$FB(L`4Qh zR3Ri?z&~jAQd&+R5LU;-4_q807AY`@;w&xq3S|im1E1n?@R4-q@1a+k&LS?(=5~&t z{F0wizz~KrFeGm3Wb9~R?`&ab3&KaEq5;OyAI8P(>^&SU%*>rZMc6<2fKja9qmHIV z4^t_fEo@9dTo>4Az$a)ApQzZqb#^myGzIC|-#<)$^!wx%PR70#&FpT;z ztYPG6Yhh~!Y9(C{0me}N9Pi?2YzjKN58V0ZG%-6H8&g|n(D~2!7GMndVVbIiv$ZKG zZ-0ai1fm2&<8IWZV^2)V-hm%`<6~q)%;92f}Ol{PH8>!?k9O{p$8QnH?I7&H@y!!4) zk1Zia-d0&njE83Gv?P0NZ*sJxt}taPj)AqHprKxC%rDQ@_2aEC$f)D`WK?BL@b>(q zFjuYDt@$Jc=Mu4S0fw_t(h|7z7_eBf>Rr!YG(Kj z1F;u6_Z0j{7wX?tTb(0#U+#ZfEVMKDP8xY4HBPrN>by^yU+s5DHQ#hccUe`3H?aV- z;f%Wd!O+|^J$n<$xX>2IBIAuyZ@PF6#~@c(Qxdj*_J>^Vzz1htboo0l_Cl~*M0x3!-F^o99^!s+o_o1x zr}v%I!w>S)LokF51N)Ze>Za0ckOUH96q>8>ZF%cguKVdGE~gy-aw;BX@Nvq4H{ER@ zccG!7t-{Z!sTtsr*>Q1|;MiiqLPOF0173@ZtAfn18diRp z4IU2OFB=%0EOlS*bmP|^L-F=uU`U&tzQ6}N*qwAT_`Xx*{4;P)asHFTrS@hw&*Q6& z+9SWDNyv%VZ3zB7+J4J19_+9IJvPkga)UJbkkw7772>r+df9J~LM)m9e4~6Sq3_;= zZ}CA2Z07y~`^c|_=}3X))>yasun?Ff7;SLnMR@q0)d#n<>HO90>Tuy@DQw3ta?Y;- z62yX!i<=_gvmiEqcWQUEaJS|c*aG{Za=Y~b(t)nu{lValHi)$;;+v2caz5v4Vd}_n}sFUz;=^@UVScR`{X>V`s ze8YjK@@^0ua=C*2Sm5T~mk?clcMn9!vIx&zUW4LKqYJ!Fwdab+_M2?T*Ql!pK7ND? z_e&cuc^t4xzmay|pSIjSy3Jg;b-69Mh970UM;*I|QTbli7++2)K)M-?4O%Pj@4hX& z`E6(%9?J?+EPqE3AZh`93_6;BmNnZ!0a}EgmysCAUt8heAX@PDcc5b9fPuiX^AY#+ z&3^S{6m~ouQT_dShC)I#l$smQs56AJ#fV$e+le+`#N5BN!~Pz4V067)x{S1jbbD(C zK>&F#K{XEB94cPg*?v69!)|k7@Y9wH$s}xunaO&0Z6Ov1<~bD{8Ivl+e2N9#EUdrl4mfnb zfARXPW?A{_8O2Ys3RQVv6+nVW#|F1+7l%-T8-m+INl4d}!7aQ#-wAc9_c?JY?Dl!v zA+f&48o}+#!WF;!efGuS8VX65-xcE}cCXnHHf*lc*@Cw@B*I*D96>i!^1Ih$I|ap4 zBTQg5#QVCJY3vJ;c>*0qA>lY z?JcjK(&lUS=G$!6qs!ujOP8OpaY*ZK%e_k;VRNv7_Z6-88QnsA z>HVR>A{aI@Xur>B@EuqruYDw%AITa!3(aWRGGt+!7F*W?#e21b6NUKJWpbQ?f?BfdfIc=f%HFq$tr zU)=87-8~zKid=eB+Vn2vK&WHkw%=f7=DyP}T*JVJz-%D-`=c)lg8QrRZ{KoLK_)wp zUIf;3U}VMCreK7#Hoo7n(`(fMe)h0!SGboyxx9U95PA_^Ei1F~)0mo?Bxr0*O}EaG z*6DF_(DC**Ly1Alywlh4m6z!_87mUs{9wGW(UYTP#uk6GB@XX1MuRSmuEFI;tW7}= zp#DSQo8bm44Bqcx!msJzvnPw!*BD1^j*z?k-{39v+>24G<@UHQvH6he_BI#N^@W3V zX_v4iD5d3=ksj6IzG0#L?gl$bC<0Dka<*gs^5w=GT-@REiIa<%!BoKy3qz{6R|8lS z)^$Klhr9#p~DUBRm{GBYsF0xa9TCx2u+yCSy z)fLp=gG4>z;^Ihu(i7<4oQE9TQrpnrrF!?09UmV*a~~eK6*#?bA-W`6C($T{`lZqJ zkAO3LsYgDRcEXdq8zpC?5m$B2WrHe|rdX==+Vu2avY$gJ* zIEex>3g(&(=F8?WBHEkkab1HBWe>hX2^?Q5E1krzU%RHKohYC>3;e|g7mbqM{Xni- zyF!?%QT}crOpPv|sIS`g1P(*2YX(`d6J2!h-8PD%9Co@HTs*nW0UF|YQ{GeN#nHW!H9j!m} z(cExdornlEcSiQco(ecT5NUh&Jj3h9wi+B4YDSD2Qb|`|I=Zf$El=)!>Y)vhHhWSv z`#xzxdI4T=&i7i4uJ8?Efr}qm)^is&=#@uge|-+b^VJ`Hb7b2WNY zyIl2K@s!6!98XL5qD;@%hw&^l27jHHe+@knxHD*VT)pox7}?2mH~vR+zLeL;{zNUi%Ky=(38dt^+eVQXac;pLIBH)qXzE2ZPb zb*NRVZq@CPB#*z91M1JY?~>8r?!JvO7bi?7H(SH&R(jS_8<399WKsh@)WM8IhX>oB zWKLVB{dAVh-{NOK6^l*{#mzwE=%ka?qhCBi;R9Q58|Azyn0+=UySZi?c_aDrt=Q&# zF{`WD1l>@g!3*DY2PdqtoSbwbM{dTaNvhY^*+Q6S8>@r2_@hbhv>LkbcyP%T0H_V57Co(57uiZ{!yV#}s810vn zQ{wz|n|g%+TE!Octj8^`?Q0r}{Lakws0$sZ>8Kgmc;jmibf}VhvEB#CHlCUc94pBA zsWZoE&PEJb{o27E-?;&C>$NigRUwXuyF))pSirRF`{oUK*o*@b3F1)Gmw}4|$CE{ictleTq zWHJwjLxcOp&^==w^9HH?woA?I;fqLe>}D+@k|jMCoUAademNLWK)P1C!ArsZ$Y&Gh+tj-ePTl*LZ8p~Z zp;lI{v%1brIU8&|O~KHvo$p#x;?CX#rxeGyGxcARbe*4=mD((IrH~2>h-~#kdA*(K z>cL*Xi42Ri-gc(&*S-)8A?5Lh);dooZgP<$85+YYSFz>peb>?vt7J+hUp4`%?H>#)^~!8C|3E zmhyV<0|Z`Nc78qU3a?$h0pd`_N6)G7}$+tBa?UC2t;s zZ9Jb`9;y+nt(uJm@#bOk=;gEZvoqb~b*+kv5862g?9L3a%eD{q^srUc{v?i$HF5G1 z>!O{BV6Wv=rrnT`p70OCmi>?*jS&7e^8!wF7GRMdqw?>=4=aBl7dQw@Z7qM}F?^PP~s zF?Gf;-#g(bzx?XkwpcdKN2YYo&9qS?oI|frM+t(`5k6KKAut++4&lZGzw;;(zu|*# zHsxs(eQFbo6;x$(124ZR{4{&B#B|=-@7IN(k7jev%eOmqMZ&Hv8Voj?rgWK1^PZ_& zCzj}oH>R;SBorHGf*)NXpJK>~K3(%dDYI#bJ|VCd#TK>9pAfu(ZtijQZ7Iw{Rr}~~ zgdBxfaBv9*J}!v4B7z{oAh_YnHH)^#Lbqvk3OlHZ@1bubXtk**M|R%(3;UKa@%@c36ME&D{!gjnzN{s5Bf9>KC4qZS27K2PdWs*#MJswYIe@J`gRm5>hH9# z;ohBQu><*ybQo2uHLNc&JVSW+Y0!p%fj`Kf&FFjhGuY3Y{Na!OI5zk}j?np&eVC6r z99?s1F+KYFuozBG^S44R(?lO1LYYoAxE`;5U$kzk)S8S|)FLr&+JZZhSEaa2#Wrnf z(Ho4tholoqfoiVHrHxSX+>HsQT!_a6`{7bTUuSBVym)NJ%P4&Pdgtd(Yy0~wGT9@z zZd-{bHs(p#9AvF15%S%MDC&*}f!|z(b~oWM*S!{ia7foLHGcCZV}%>4y%#hm#sad? zDPCwHM;_}4j~PlmSU(A)#l%#fG9khrE_Zx8O8ye&J(+}Ds3h{lzHKR5SM8VB%T;4C zjW#q7o6yZkBT7ikW})DEUV{h#OC+)Y+5K-dB*qy9P4qRfE7SxzHqt^P-)`WGZ3Dev#^&%`nzeDwKqqOLv1#CTz4Vsi2; zs8F7jAinmUSfGr(5f=1XcnZd zGa$GeA9aJlmU9m5pM+V|7!tJ$GOk+m$;Y<2pD-3X?6SOmDl$;92w!AO#zsfOS;2s z{Q1t-ifs)A2b5)QVf@%bhc->WbNAiMm2LwC|J+-3{v*$tKCV7*n~Zbq>lGG5$LetT zz|_FKQ!krB6ob!QImHk&aG{EqxmWQM`$NYXKf@1Eb!BWbvqCkI$rJ1wcOTEL#od(O za+Ih*X4cOf6c3I@dEKUS_u5}5z47w{yB*BGDpuz&D^V|8+MjEfTvz~$3?f^Jf3A1l ztp6a9T?-S^-82UWZTIm{PECCu7+`m<3AfbiJ_i01TUOf~m|{vk%nH@2z4mO}!%B*4 z=Zi0BElx3?@$3un7e`Z3Idd0ojO26HW!V}!v$38SHeJ>4R@RG-ni*;S@P3N+b?03R z5|7L5xC{Tzhe`cV__S>A{rX83E=Dw9ka`; zOgjQg<u-$|ZYItT%3zxidr> zheWvVS_!UmG*}VSow2Qm8asoA7rr>kt55ZKF&&pgv);&kJYSPC5B}j|;h~Tl<+3O^ zzfw&;cv5z7ROGaOJ}sB7+6(iG%@d4O&?Z92yq#82W^gUcdwaKBqVb{u#B{K0Xl6$K zp}kRr5GB2#2~!Xzr&(WwaCQ-W4s*!#-fx>5chG9VAa}9OWkk(JA9r)Le{`^#P~^p@ z&bl{Ro)QPCD~*imUFI$riGggRy_P z?&TXNl%2E%%RBSAs%v0ZeNHl>h+aNDU&toc|2kqyZeN&pek_tRF;Tm5@>MiHmPD>T z|C9NAxu<(EUrSAW#P;!YkJo~$w;zVI!p4_!g_eop8L!Ib$h}oA>fVn*$I_3C4M*?U zLiNADd7e94q)`@{Z4TeVf2K;mJ#==ORf5N`)0e27)Srm>s}PT6hc+#?Ihy<)Phj+? z9eLl8V8f3e(v5-6qv}r z-M2=vf5tU5G|UPs-j5qi z7izq?!Lqk%Izi;#&Wf^h#=R2sAPJ3(jBFFYuKQOKjJ$V#hN&rNCf^!UJC^_JHAA*r}Iz$x!`8TE9MD9WC|5L6LdH(P; zHa7m92Kml|NqSy=aRih~Rc9uxzsNOzNrDXjPMP^XDEJKU2@?1Ca+BS=(pL0K}``i0oVAT-oGR{BGa2Q5*V z_XT+@Vk{e5=ghc|R1DOTb6yAz%~M3wfQ6UQnE0V~>keKPr6D^ZbY*+%P&RJ<6sv)1 zK>U47!>ILPhXWN(oaz|$yxk#j18xzmD5R9e`$E*&@9dnW$4=kBl>+02s&~R{u^$BU zg5v~jr$>+FHwhA*Qv~rM90>ULqYTY^!5{TcOl$kX?=(5M9}EclT%so3ZItE%>tg*=<&T+R8S;=PtFi8lmS4yC{bb1+PsL40U{m5GQHH zr?~yrx(mhPihIpR=(d5C&Tv?rMp1woh11`kq>z7Y(anJTpC3=RlXc=MBcfe)aHDm2G zfu?7$15Q?OHoPp%$Og_F=xcb=L5h9{0*Fbb<|kkKU6k^DX=<7_lpwnyS&XfZ`WrY{%vG>(|b+ zIqHR&Zb3zjg0}~~LEql<{!F)??ZXWnwLd`XSSP#5IqVTclww$%wcN-Z?oB6H7 zB5z#&ru9()`m*DKRPzCYD zc*Sd02)C#4amoFV&{jF&x+~LU!fZc!*XJwtW$q&YlD`Zb0%N^5Dh4LuDaY*T@gLP**Zs~U^IuBKhS1Nd_on{&oZWiX}%A5P3~ zJ|0Auu{h#i&0gNKtH213X9m<~RSV%4j}hZT*i<>9Cbk4BKDNL!{IeGzI&PoFn=~os zyKT`0ZXSiGBobvN+g?7apuU$yD+51jQy_Nf?kNQ&HA#-IV-6~?(5)xBF{;w)B>BTd zNj`(4*f^~rqmMOzuu~0Dq+HqLm%SdIRA`l0L=g5DhL+)#D$C)wRbaaajmvnqXrQ7Z zDwY;Zb?>YRjNF3Y5I^mUaT%dMVwZANp(@F_I4Eazm~?GAHzg?GOq-%;ti~4Z-t$AH z<|B?;F-%LOwYsOsGLX=E#W~FZqQk%qrYMTyNEC0>yY03hEk7F@r+49v&K%h}Q~txb zD}m(XEQN%znsrMO_Zs&>R57K*+D@JuW$%qCu4jg!ZLeImT17!Fs)aL}MVo@v3kT=o z;+ugzm6mOfGk0+?M@AnnHZMGBE_tLe;Xo;|bI_hrkfyv{e&kz2mmzw6 zxe|>H-OnQSp?n0lq?0&E>WIu;RhwL#U32uckKk3nFp-)hjb{6hGOaxj)xs~>gXewg z@6t@;IFt4yZ)AwH_MoS;I4Q}NvEs%Gq z z%BITF#taE>tNlaP-B3Ubx3xhl?@($`x-=^5{5YKTc%=%!IUn($)m`7%r>`6bC>4L$ z9(kPPvHQlz6;0(20cEbWcdB7cR~}xf?`PJXc(1S3bu1jO(JJzC*ghgM@;j$oQE6#S zkRx!d*VlZne|1bwPNI6bJEP|Q(VP1sBA^Y? z@ikZZoBSBZw90y{T+@m#D22uq;pA^AG+Cne2eNzF2i`^50~E_7j$faVVs5_@Lvh-S}pbneM{OFgv6Ls#C4Eav<@XaLy8~ghKtbNBw&hn zR%Oo-2Pgg{*z;dACEpk2%-*hx%G+^m%=R$n=Zu^4q`D#bRx@pO*9R`&|UvgE}b#))h;kvpBu zIG|D(s2{S+mK=DvdrogMs$Xb|qNYA5ap}x-)FeVtf5kB-tzWHwpa)Rko*;Zd&Y01_ z0Wv$sf3^qcT!w{$7=GQ!Ap4t_PaewA5Y=z#4-WQUwXx5Nbqa* z4jQ!?^P*oP?c<}qNj4kNmO9mswAH0EJ#;%`j$U9&U6xguXnBD#d(6$~lOk0hF@TQ1 z&l?6X+Mnt*AuT0=%GvMovl)_Jt?(6$*)XYNNf_Z)+t`i_UX3fIq=?I!&g!+U?!rGo zu4qJ$TC*5BzqoL?*w-7igd*%%LP;K==XvdKw|$R-h`9(JV1+R2c+=X>!o%(3==iYw~fj`9f5l54jB`zkl~U;HQB6A;nbFF zs`H7E{COlbeSskS5-9MtjRxTiYA77Sq8nrBBi4-V`v1# zNOzQj2LFbpP@NR`9Ml<#@TlH51P7`+iJ}BE*TpXnQJ~4@FFz?(+mM3f^@tE&QBXZ- z`Ba~m^6lE=^KqSW@4SJU<4I|XVB21m-eS9kS}a^^3(6Ob_fa?QX|MaedW0>|RnBNt zR|?FUlIq>~B3znW(Bpa^$3KY&-8m-sKX0uL5m@*mvDEvg7KC71@(!0hP4^~gC!&8% zncLeOiKY!7Wkx0SOv3`NZO8N}!{W<~7tgIIsLj4%&7k2wDKf7ZZ;Y;(o|Oy*l$5;a zvZ`t{L&Qx@{qZFhar{s7BA(BVaK_L0wxmi8%d;|-x2Oyyn)j#%YaS2PEHETr+d&G-W-$It5qr}n&0#vd-8 z-p1P6*@wcB>X=TwbmGN}7sC!;wTsnbagPtBW-Q~sZ3Q_l)$^UI;FIVL)abwBvcemG zKyJn4R%tyUYq`L&+5pDIpj_{+ldxQ4j}6XjiTU55(5c)M)OmI`dbb5EY=#kEKtNI3 zsc2&6J~B{MrB^fu_6|KHfRxLJGH2M~PrryizGg*^($wT6kqcpHXcRLtJEnL|DJ2fB zlG%U868Y_n08KqTa^R57$Glf|F=+xCMFy1mC`Z<*`x|5IOF?y zbQ!oAb1yI2<4v7r;)5};?Tdp;j-81O;K*B$JP|d9SWs%XFxD|B){Ke5-mZ-;E~~aUK7i#K?=qTD&=b`% zzBl_G&<1rTf6SJCvw;)-iwwWER{iZPT_28m8^}T!ITmkxe41!ut)L|16B9;B&w%$` zVzNC`#a|d1M39q!XvG(+rpfqBm6Al7MtBk75CIVfM>@FR0jsc+Zo&!!YjJ0NZ&e#m zuJNO*;>@e|Zr~`%g7h2j^HtlHi_v93X*)yZk$Zd~A7cKUqvM}@GDEE0R=;k}nwW9P zQTF~B(cOP+LKMEjozT$rjw&|04nTL)8u|0ND5Y#e_NceQwc?m#t{?~+!Tyw_Ztst8 zIJyiYqgOehaIB8^0$QRzK8;l{1|SL5L@D@NtS15BjRj1cc}c>{>&~k`MhbsMC4e&J z!9*!Oo>gMIbIphLG8IX)AI)HJf&w!hOHV;z+4BBNX!sjz>s{607a;n-%LuV`C4?6T z3*DU`2(gF>;$-@AMFBueL`8$mos_p{{i{Ue-WFf@=r}Ef3+Si;fXsxmfzN3(yDl9SN_kc zBfT)CEKxY}4A_Ckn^YV3+TjhL%l<3&kWg2ZEN&>%k`6_&bNEK&m5i$V(iTxLs7Xpx z$bhG-iumudeWuRuY!6+3$o6Kj9kdvo4<5Zr8WCPG&HCj*#nkV(s;5v;!jJ;R{En;A zzs6O&>_6j*M&Yk<_02{nN=eeiwW7TL-Pan7{1v9(78>9vYMS5FnHp1jV%^-_)Oua8 zSVE@*T%g*RfKk;6gTYWeT~E=;dhmh)juC{~j+1Ui#WwPNyZ!i8)d21xGe3G;^_@B; z6?PT#Kk|Lmy@(JKsb<(r!h^BDN~R#{?f@ZgU60(<{BO}!@%QL5wk42N=^N(e=hqx} zis#zYoYxAD!h13S6bp^B=auumh}3*p|JfyqmUlpy!p0F6eyWw9#P%K=BE_v}^yNr~ ziV}zNaOF<*(GP|(&W{8&bNOZJuk#|$)j|s`&yPNRtj3G1_JM$c0*5|aK%g?3jcOuj zAZK#E>T*4lG*)9XLH*P^J+$jJcN@l2a&Bu)>@dz5ELEkEhcveAKpL8`q103zbJly&>$c%QoUHn z(3`oB3djH`W)gD&-%pIJNQ%1pb>Qd(_9|1tLi0A|4JixRnsEO3=A$9_1`lDzhxLy* zhL;`ZWB|V4p~-T%yi+(QVDp>+5zxIN{5-gDrND(T!)NU#p#l_ zh*=-D@l-yC(ic+(cq{+b4%^M;PxE zceTixu_c|l;jS_iw~|idelUigz5X(f~xzaoDHCEa@{HYH^n|(_A@x{wEUK#T{0Hh^Ep)h;g|rXNKH1(6%|7kN z>n;^s2=)~v?exF-1m3%|izU(SHDymy!bg>|iQ4mkm5${)PFUU)(@d!Q;E0bi@8t2o zH@mdx*nb?*7PPQ4Bd*tZ1=SbL&S-b}s#90;s7YBw)-80i=l@dY!0Rc#h^cfEe_u<2 zqNDYmArgURP}dibG!47<3Ub2Y#h!jH9m$lVqBOyq#bY<$Ul?IQ6tB<))J(9i|3ELp zD5XEPa4)Fsv40~9SZH5bd}9j*bp))6fwq8soIsb$UMhlK>Vf&541T zdIH-Rg+JhEi-n|OB*_w}p7L!+!rA5XW{kURPIkEp&X)pIM(sfq32gY0=b27CT8}m7 zLK?7d%X2}OG5inMGJ>yDC_rPyD1Uc_MYBzD#hn3X8p?KR$n{CKwF-W+8hfD{H?%PD z5f{)1`gH#aj~%C$p+vM*a&aLrsC7&goLqJ#lFhr^ud|P!r~_Y*Ba@Kc-g#q7FqVnl z>Pb-fsP!0lme43qXt>QCyJWXGQViAubhbKRt|nS~9x@S#44GyX z#VegNPe$rgx;i~2`>n!)fR^B#B;`_c;pwu^N>=I(G3Kh(KBU#JBNI>fg9_nePNatl zYZ>6BW>7vYM$c5w6oNeZR$M#7QBd-?zlR=BNy_A@=9E>HA(|i=0$fQd0a}<>4^S)H z%HP_{_OpiUeKorYCDu4LByrQ@QMu)RvL)Xy4zE=oOVfYrVndFyqU4eJiOyMw@k4Gi{; zo>WJznKr%f*dfn)Yr8|h^yYce;h8+S%2seT`b(lpMdO^k6{c_Bz$xq%B_@*c>fA(52hf;Q?)gu8#eM+BC+GhUat;5n z&1ArPg5aYc%F+9#3vY<*2HKb;MAE;x-p?dY|*)2Nou*!1f8T*-2(b6bFqOYlgt z=Zk8hKC08`TpHXT>h#bi6&vuo#`2f_j{U1X8?;T|Sxg`5rdH4UDcl?rL7h$%= z&+lK}HSloB-ktyjDjo8_=>z-QR=2>-|z8Y2@DMdacK?4yfP7l8-%Eo?e7np57CaUp3d^Tz{aU@*2YN&c~GW;J<2 zQZ^>D+WEOnak))qafA)Dkp#LhE1`tZqq-nrpif7g@!2F#!E5_;vvZtIA;T$biCu}qbeX#VwzWDD^(lCkq6Cxujd1ENsFtJb?=1*iuqAE+7XJs zUxT7#_^(LOhr=xenRk5SRHiW|u&j@aqpzYuM1;@NSb>TPKe$4}$oV#E_&H^ifhKxC zAG{-LZ^h8*?`r>We8#cB4TRr9H?#Pn5VGFI7dc&Wb0XNc;TUaxS8g~M5z9n<*XTkm zq<-6t`;e8ziVRa9iU^WKc$A7DBar+iNW%M``)~;;SwH}u37k%R_U`dI8h{B(83Vi|KTi9sg@1gV+o;F5xPmR|K&#E?<`9g$cmyg;#CQ}q0@FTVqXw|$A--5dg-MtI zCj`)N=x_St z?7`1#L_Q15N7)DZAcm!t{wAI>I{ruk7XI|ldoC=pPX(rhqg!q1mj?WfHr)TYvGT8P z+i&-!Uy^~F!ifm->`3a~v{#Aj1W~#v>PvK$wFjG2h0n1k-G|uJnVz|7707hd7hmy> z?-!J~!^40jQX{}d{ouVIU(eVNQS}WCj2`m=rs;{zL{EqfO4;jxE{<$k?fW0f3lfx{ zLOh%;XxwI27liE$Qhi>JohD&pqlvl4qmQw3z@Dp7XDpHUQ09V(;5wqk$V@{v*>1h? z%n`r%TclrsqRkO{Dv0l$vKd~p`g*Es_gNVPPs0?x=FIfWsLM!Ev0s05`uPN}S}pj8 zpGsV)gyCrb6Jn5^k&s;v@#IiNZ?vzI$Br>hCT@|DdH%8S=^;Apj#e08)QoSi<;Z3X zH{(gDdolZj^`(sXXG|>$^DQrYrU$!csnfxEw?sHHkeX7ozP)Nv113QW~37*Cn7laYWzK=ypT$yH<{t-BKLnYGifNDl_?{Ov}c^Zbm=Dmepv3qVC`mAMUVWq)<%uoU&yz-Q9kR@IyG6uT}%H zW=82J^Gx!8?~rW&^2XL8VS875JT%y&GF?_t-ET=_H&cPG*4tH#IU|YJ*22g}oAjhZvJRgYpzfWe z_SWxcCgS3fa{n%5eRLb$kA`l3InWuI!~NW-PY?>_4&AJJ{x=09rE7!g*D$VqBXyOC zxT<$1>qDCp?(aUow^)@U;6spvwJENC&K(T-Dft;D?X}K6aMBe0jsVXO^iRle7vHQ(G3oP2 zNO!%_jjL&jjS=k#U@+A7Z`{}b*Srt1i8G?8!FCZ3QQdtof%8Y=hKce!Xt4QnAIDEC zRPNm>$@IC3^cBS86;Z7ilf)bvS^TIt7wXF9vJf7&e(Y)JoHZ>OZUZsXYd1k0gH2zY zCB3pCDt4J1D2>FyX?}lI#Pj+sWX0*@mhaW(&fTZsU@D!y8Wfo(k(;CXi($4Zv3Ng( zOJCx(RHyQ~CNQGnSXVb`-Wog5)n8^89*g>tFGnS-6=*pzf6^=ce6$jWXv<(*h{-^F zhYW6^;%keyGGL3W-@dB(1KO|E+y(ky)+2EkizRGlj$<7jmCyE1HvD`%!zv%TO z5b}KuIQ~U}ET|zmza8J{@7Mu#rO@AybMd_BO03a9+2$qugMJwoap5)(TvstZYOf3_F`ySZ1AR&B|_w%3Tp-g|Luiux=Vjz$dg$xjBSV+lY|12j|2Er;4tkv~F4aFx88wlrPOHst;d2OD zt9>r3BZYPM?gBqqzUfp}q1n~fw*rfFhwr8>uKF4#l zwYqrP`|h4~cuRTqx9*a0)G+kNq5b9CjMU)JH!wi4nyy!ZQ)2)$`Z8Vw zOf%ZJ*T*ob`o68&(;ahhB^A-L$0h?mn=&Aop_1!aKI%({ABswk>63yEJ?rji0R?CA z@gD_;yc+)*ljiVhq6dWQ%PXK)-a@yzE#o+$+{xU*W8^~wt@@0@Bs6d^}9qoPyN^SSMwEvsNV#REwQ>hweBtKS!= zIma3eId?3>jvBm0cflaCA@qO@nEjXu|Ck0rN1pmxft|14t7+J zi}?!;V|9~}@j)^|vVVMl6#N($vn%X3f|8^BwZ!>bLH(ci^LC=H#^-hrMM^@6!-GWx zq)W{Hm?tArG-o8wK1_dGjf3jIxcgnSN+Tn_J&lFRHL`4kNj4X+RY{9Gp8{41Gj=>S zt|!C00HNkOt(3Hq7s9P zQPHX9V@$yNI3Xdb{2a6;*;!drn>vghFPkMs+N>Tgb#9*>(dxpK~e zZV5ellG+dRQ7ao5bDR0k)^MAQBpV`f7U>&qG$su*$^z%^$H}t=ra^qF(w#%37 zP?cs|CeiD-7DVi~S0iZNu1bm{{a5j0^++9bXf)L-LloI~+r_GeCiZum<$hs)uCn^$ zo&(uEF^hF3XWgq^nO7OlpK=8V7pQ)~ICqxqvOOp0DeEZ}PSRLhdUu9CB91>2iHWO| zjZQRct{U-4w39kp+8C-eCz`n-3E9@X@}+$GGx-ZIAN$qT?MBauuOht5HEnZaEpbnF>-W9Q= zUH7xGD6;N^h5IRVNY8``DM*tQ0ccK&<+q|8!q0 zR8bv9BNz|q=5;%6*;_r69N-`O=AJ{&N{!xLzp6S~e8jX4yEElcQ7Ja?O(pqCZ1eQT zbF6(*{-|H16T}+_(LU9&>ZV;ds@=dewXVnK6(e z5EenYB3d^kw&kM%twXDo`TB~TVJx1htFJLGQ_SaZtbw(k6seVM=Nr|{zGnVaAeiB^ zG%KHIZ&uv6Ioe3vPV~=2u=eb?e0Hvj7}^E3=X%LleZ%EnCb}F}F?@wY>q=NRy6hY! zI^Sq#2Yy;@G!<4O;QYU`QN~P|E(Z$dU=d9)E9i1aiZ`e%++55EEQ?A&WsusD7 z6~Dy)`hfw9J3H>nS%8@>sex}(*2M=QT4r9q&3fhhEHxoB)9_ck>802-T3_X5VIg6M zXFgX^nPD2}pqe+Xlp!S*G_;*YXKbl+^(d9HaWvhgdTtWZ|ErSo4r)5v;&`aK6x|gN zr3kAC649VYM^F(F5Rl%BVgN%z?!2`YqubV5jY zzn$6Hoj3D#W_RZPdw=K7o%wuExxaH}#=FL1BcFnyOeksabijd6bm%Lt4wo{=Nc_## zF`ZlsSytAl$g{_2C3{8f5=10p>ArU~oJqG)w@$xh^ZbEX7FKo5uguo6jhdYKNw?M8 z34PX2;FI@h2_oTG!+G>YKlKJ{bC&BhTivW%<=DE<7bFhK)sZt1jF$xdZ?A`Hh)X#a zc`=19n&Tv2A4kcBH!BWTQixqqjmoRZ8NuGx&0Wok{aLt+(6F!5}BF#TDL@ zBDi>F-@o>!f+AY)fLgew3M!bYMmS&}H`}{Okevo~((}ZL0Ez1U`-g?@@nDUjx8WT( z-PMfzB-AUb&V1;B8vb(Cy{ttI^o9I-i!gC9NF!MSO5HjXebw$94PeUo2c{x6;4E(f zTa~Ey z>>np(^EtJ$iHTu@eh&<4=X5@z%o+$xq)Apq>+_if92lK29IL9Ky*Z_pEYZ=?tDZ^Q z_m}W^>LzK`#>yJUPfO1(cCnI(obrQwH~ zWp*wmh%CF;C5Dj$Azofa&tGE2#?lrNFE6)MIO|x6UEXV(WvCe0*7eL8zdCf9XCNf3 zV95vYHO;r^K)nns(?k)xXtb^zAyxgiaLp5Y%OKTD^ZyXxbsi*5{GE3M}Y}u@K43H z_q|oB<{{?(mP-xblOR`&pa7NPlL)TGiGx6n?>^*IbAUnx{ssT5EY+YW<_?_z;Q)1( zgw(~tdoxr(AVtaZUjJA_e*XqXi;I*F(lJC7bdCkQ#n4vYHvdTMXq1C3#IW zh*M^{ldSGH+gWv`m)-J*7skozvg)^`uzJ#5w)x)_QdgevVT22=Y`?2Zy21NKHm#qN zM8Q6yPn-Le)!$9lT1+=MpJA}r{-L{Qb7$KlD|Um_&Z(zC+BW(uq|~1lAd_JrSoOtE z6QVPbBc4Y%!kE88HlnAs&m?*!I%(G3$YAwBmJUB_C#R&S`p*=wJCAZ-joE(DFH9UG zoF`4?)ZFkWS)7`QGhZxw*;i&F;+ZR%u(Lf0RwXw;ms+MQ8{wuaQabvL;njDLO^y;v zG7S;TUQDr&kFOvu`d*`grmZ>bxE89k*N<5iK6^BCfTy8qJ*+qVD_VBn!FlLVFUnC- zTZzeK0m%ATu}v+-W-a?QI?6#~{qwgMVldktaChtj5k9d;J;hNMUD}JD!6#WpLw z{?I$xm6P*y=R1B*p0WDMlA@97x1ANQ zy1gp@Nxne=UFuAVdLLJ2^|~?~UNQKBcYJ5nE4%IOUgEaL7=EcDdf{i_NM{^>_+XfKOd#oO?SvZ9R zRRP7xo)oFDDWNY3T8sW^e0?I?zVOt91b(+O9jEltUR{sCyy*i50pj^vb_I5`@PjBqRid zaCBb!iP(A0qt`|gG;{1-`LoQ4c`dGM>729k({R|Ky}V|`w-E@AV0r)bIlLF z1goC!qzt*;nT#IV@-pnP_}>})bf;Ll&hcu+BVb*I_-q-}q?J4N5BplkKyobmnL%g1 ziiMRdWLRj2#*Aw#uZovNRcvk!>`%4MucPYr4;WS6;d@c%QaK!5Qf)3nL@JGy^Np2F zFY&Y%d|5=K4lK!7SvR|0hwF^XZ20%`j1l*QOAiKT*1KR+HOUyP5UklaX=M6mV84aT zfY-Mc`|Q~Po2uVn>S!TIt~Y%#(?_Dp9wUXx_YzuCNKH27KeymkHB-GT%FyyR)mRQZ zF%{NYa=Qw#qOhw1XzaKUO8$kpq46`L-gFUeu>`7g-Hd_ZBJ5_zy_0$#e2=`MDg0+H zZOaAp9*H;V3kze+>;)Udb1nvy&=(#DQw6c6l&cfBQ5gF;NyNn>IatN4nd1|}$l})k zRAC|QU=uxM{{|mjSyvc@RG%3lXpKW1y!55HTC~aLFqi`@(jl<8U_2Flqid_1F%HeK zLVQ54RMtEbo!d+ji(eV0?D&HzXGog8M#0M7bC4+gjbu){@^e^$WR*QieW?i!-QABV z{S^~(O~E0gR1UJ+gvFMtYDzloWCT%y4dUpM=cj7aN~dAX*ycu7C&ZH%X(1XzOE{}s zx^Cw)a^I~w4ZSd2$(Pig{;HhFe(Fw2xczEFKlaImWK)_Nd)m6lWnnc(s#u9fW9)Iq z7y?j0IwesfUU)HG<8;Bqke!=_4}ai@chJac0j<45e$d*(!TfU^MrgeZFl~==R*wLV zVc32j#&oQ~G}UBJO>5d87+sR$RRZqbjZVgh!S0##h^3vK9+N&%-2(R#4XhTDL_``Z zyVJ?mzcuDTRPSqx62aX{^FW`dcIgCo*JG*=5amif3uuDi;Nz;S&rzc(O`-iOk} zrzn%wxKUu4fuWsSwt%X8HCkRM4NNC{`D!YC&m^k`I_4_tHd?A(&o)73S$)XfK`c>; z;)yB6HyDqiMZ#f{#@1gEqE*KMP*e|iGD1Bx_&5c;q_QH0OOUQDQ!%#*yF}npm z+m^0j^NZ_hlf$yi3B$Xa*j>b$CoZ4@D6qK7;=KXWv__yrcOK$wnYnp(a+Ig)Ma>hF z6y*Ss9a*5VYen}|)Fu_kWtm#Nfr})gr71|^YuPA+r^5}xRM~!|de(*XsJ03$w+0Mb zii#V#2Vc8O$7sYQ*ItfDz-nWIx4uBNrcu}^R|m}>2BCMWErA?Fa@`Y1ho_a z^ykZoT=E3~A6gJS{f=RM`W=}}ejYt#@wH0Z#Sk*re(LyW*mO@*5Tg~1QiW{)$U_5u zDS4XWa!}#`ytbYr4+5Zr|RN?>_f{WPBeV;i`X<1;{x+pBWMH#%mC@j zA4$ny@;5)|Cg8IM2+6Ed=*ZDWpVAyK`y%8k&#+ieo-5Y6B(Z;x(tMYy*v*XV8~P99 zkg)vTB|=QA4(C^U7!_62v12}z0tw%(EgC6|Ufv!K>tX#TC&XijeK%jqWn_BG-ZVOL z5Er7e6}}}_!t@C8qUIhV!^%T+oN0CVOr!vtjRP`jg&V8)U-}ZlAXGY$a!s-kY*paM2c(wcPZcn$Z@v79$1K)o1+F)VIX@?A^cZUKKX+Z{hCbw&Exjy+XU)%60 literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 4f5fd7e713..6088cd305c 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -25,7 +25,7 @@ ms.date: 09/05/2017 [!include[Prerelease information](prerelease.md)] -Use the **Settings** menu ![Settings icon](images/settings.png) to configure the time zone, suppression rules, and view license information. +Use the **Settings** menu ![Settings icon](images/settings.png) to configure the time zone and view license information. ## Time zone settings The aspect of time is important in the assessment and analysis of perceived and actual cyberattacks. @@ -39,7 +39,7 @@ Your current time zone setting is shown in the Windows Defender ATP menu. You ca ### UTC time zone Windows Defender ATP uses UTC time by default. -Setting the Windows Defender ATP time zone to UTC will display all system timestamps (alerts, events, and others) in UTC for all users. Choosing this setting means that all users will see the same timestamps in Windows Defender ATP, regardless of their regional settings. This can help security analysts working in different locations across the globe to use the same time stamps while investigating events. +Setting the Windows Defender ATP time zone to UTC will display all system timestamps (alerts, events, and others) in UTC for all users. This can help security analysts working in different locations across the globe to use the same time stamps while investigating events. ### Local time zone You can choose to have Windows Defender ATP use local time zone settings. All alerts and events will be displayed using your local time zone. @@ -55,25 +55,36 @@ To set the time zone: 1. Click the **Settings** menu ![Settings icon](images/settings.png). 2. Select the **Timezone UTC** indicator. -3. Select **Timezone Local** or **-8:00**. +3. Select **Timezone UTC** or your local time zone, for example -7:00. + +### Regional settings +To apply different date formats for Windows Defender ATP, use regional settings for IE and Edge. If you're using another browser such as Google Chrome, follow the required steps to change the time and date settings for that browser. + -### Date-time format in browser **Internet Explorer(IE) and Microsoft Edge (Edge)** -IE and Edge uses the locale settings configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. +IE and Edge uses the **Region** settings configured in the **Clocks, Language, and Region** option in the Control panel. -**Google Chrome** +Take the following steps to change the date and time format to conform to the format that you need. -If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. +1. Go to **Control Panel** > **Clock, Language, and Region**. +2. Click **Region** > **Change date, time, or number formats**. You can choose to use match the current format to match the Windows display language or you can specify date and time formats to suit your preference. -1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. -2. Restart the browser for the settings to take effect. + ![Image of region settings in control panel](images/atp-region-control-panel.png) ->[!NOTE] ->There currently is no support for Japanese date format format (YYYY/MM/DD) in Windows Defender ATP when when accessed through Google Chrome. +#### Known issues with regional formats +There are some known issues with the time and date formats. + +The following date formats are supported: +- MM/dd/yyyy +- dd/MM/yyyy + +The following date and time formats are currently not supported: +- Date format yyyy/MM/dd +- Date format dd/MM/yy +- Date format with yy. Will only show yyyy. +- Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. -## Suppression rules -The suppression rules control what alerts are suppressed. You can suppress alerts so that certain activities are not flagged as suspicious. For more information see, [Suppress alerts](manage-alerts-windows-defender-advanced-threat-protection.md#suppress-alerts). ## License Click the license link in the **Settings** menu to view the license agreement information for Windows Defender ATP. From cb294217990b252055ad5243152843951355fce0 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 12 Sep 2017 13:18:42 -0700 Subject: [PATCH 069/146] corrected registry paths --- ...ows-operating-system-components-to-microsoft-services.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 12d7249ed9..f76eec93a1 100644 --- a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -1699,7 +1699,7 @@ If you're running Windows 10, version 1607 or later, you only need to enable the -or- -- Create a new REG\_DWORD registry setting in **HKEY\_CURRENT\_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightFeatures**, with a value of 1 (one). +- Create a new REG\_DWORD registry setting in **HKEY\_CURRENT\_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent!DisableWindowsSpotlightFeatures**, with a value of 1 (one). If you're not running Windows 10, version 1607 or later, you can use the other options in this section. @@ -1731,13 +1731,13 @@ If you're not running Windows 10, version 1607 or later, you can use the other o -or- - - Create a new REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableSoftLanding**, with a value of 1 (one). + - Create a new REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent!DisableSoftLanding**, with a value of 1 (one). - **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Cloud Content** > **Turn off Microsoft consumer experiences**. -or- - - Create a new REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsConsumerFeatures**, with a value of 1 (one). + - Create a new REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent!DisableWindowsConsumerFeatures**, with a value of 1 (one). For more info, see [Windows Spotlight on the lock screen](windows-spotlight.md). From ef907b775097bf7518c6ea39a34711c6b7236267 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 12 Sep 2017 14:35:37 -0700 Subject: [PATCH 070/146] added user-service-flags --- .../media/user-service-flag.png | Bin 0 -> 66480 bytes .../per-user-services-in-windows.md | 7 ++++++- 2 files changed, 6 insertions(+), 1 deletion(-) create mode 100644 windows/application-management/media/user-service-flag.png diff --git a/windows/application-management/media/user-service-flag.png b/windows/application-management/media/user-service-flag.png new file mode 100644 index 0000000000000000000000000000000000000000..56e03d1bc557ac17f2fa990fcf58dbacc25cf291 GIT binary patch literal 66480 zcmb5V1ymeSyDf;jyK91LaCdhI?he7dad!(4B)B9%a7mEHwQ&g^+#$F-Oq1mP@4k66 z>&~pzy^8LpPMtckzy0m~RkW(I3@Q>45(ESUs+_E(Is^pNDfkVG00;i&``zFK_yFmq zE+Y<6HAb=z{s3bwrX&UdQJaYTXbKDdjOZ+@>jnXV*8Td1#HEuDf`EAWDkmxS9$<9% zg#L+G`}1zRNOD{BE{N5$vmRUU4cwwStK%>vLr3=WRR)*JgM@=?d}qQOGoVeCOU z8zzNw{nRSw%Yj#(uao97gJx=3+05_2aZtOVX5;S_V3|l``^~qK<9LXmekd^vm_ILt zpweutzkkBi!mu%&W=cl@LMRZxFEh&x8N?!It+VpnoSzGu7}bxx*F=(3YIU91|4u-% zD8az-)hiKPI(Hyt-I4vTA0&xukezwN(Dv@S+l;3vCZ^Ut!M7h(EE$PH<^E|pgu;L= zjMKQTu*yyEBo1eT43Vk)7U}^zn&4d?jNre%eaG$rI)dn{aK&58zZ-Uvmn#qR{q0$Z z4$@x8qLZrWuxD3-PnOIeFW-z67k9b6wF&NCrA>Lz%S}-tVer38rNJ23`-ahc!nNdsl?o0cuDf8(~U+`DsdB)te?Jx|GNvk@1o?+oL|-c}L1!oEF? z6d6hP4mfNaX@A1QKN=T)K=Ip?AWz%23NEoE@NRfs_DQB2p3}x&>(50e46Z*YvNFk+ z1v$HJJQ%cYzE5;3hJtR@G>Zt1F~E(G##B$j!6A0_HagX}T2fB?O1(|>I<+A>!ubPN zNXQYJRi96-GEcwdJ;JCD;s`#B)Sq%=9}z_6177x3^1^ez<(#JEJyN$`&FZrW2n^4; z#0k1cqmRy;FYbtk&R!D(XWfPclwB6G-r)Q`xA;`AI)uWuPn@iSM)N~%pl{0+JEk-j zTmG{yf!weS57YJsZNfj7r-*9!`3r)@`RBYMcHwrL&-t6fUv0>_zQ^9pP;2`oxgjEt zp(0_l0go_#w-V$LGv(S6)5qdPyS7_)tHIGmBMpcE7^xOAsHEd?rfHMRUgp0`rWPZg zAB}1YGdJSNbUl>(7DDi>H<2<`zH2<-ngg)2U$VaXm=y^9a+~-vuxzck>a}E~I1=RY zAuO6<_sZKC>UlldIT|*gfFKJG8GB7_+ZqaezEQ^n<-!aWmg@ZLaWl<@jUlJ~Oa%KPoj-O2zTB*=^hVf?1)VhR8#~dbIM|GEg;e4pGb#M-+{Z>nzfxC{9eKO;?3ngO`!Wa`;cnzS!OdiV;TA* zLdrHu$97#$pf#S))l;u4TSg_+^ZQ_R;XjBF6@<|ClOKaw)TIg@*HRaMPetU3)9x>(mo&g_QrP?YabaZgy8)Rs7~rV=DjNCyM5KwU zYjP|A=bG+(@?EvwK@Zjv{PP^X?!|^K$K&j;o$a9f8UCab{A21`7Fp3jnms}SWEJ-*|foq}iMM(Huf7&#}cF@QVwBFYtrr$R}^iTwwRwWVSb z9G=K`BOK$WiQ0Ye<>VWV98T?bG>={6kC1|QTPZbeyUHx59-Eg2h{w?6F9=J3McQ}> z;ti$YE-_?Y(ROkX5~UtlQv8k9@NQ_HqI$r}@|UQCNMUPj+(!t_;@Dkmwt)v{MG2?b zYshb;?xu2|@;?z=?j@*S1%uGFYF*aq4U{Y~I_hbrq?%Sc+=nUuVoJdt|1dKX&E-2& zo@5*Em#5Vif3n0hPnOXX-o~ zn+2Ur&{@vt38wug7ey^8pf=lt@4aaM;)RxAX`Y8z0(o^IBPz>gE6c3fNYMjIm4saz z*(#F6=X$~=1LJEUtOK(z@3JF5)Dd^jKah&y%BmNB;-7yTkE=D|2MK;<`%PztQ zWdJWIx9##)rc<%cQW7Mfpt! zm0oE5Cr0*?ATTcFOkTK-r~D`4!ARmC9bueUkzKcDU(i7Q3q%-{8RWyhcK-4`u3ifwkIh}YGIgG9BcJ8 z05U60)Q0&)NsHSj$cP=LsOhHzDwLa)NJ-s8Yn=X!sP8Eem|8&<$3{PY-t@;3TwcB{ z;ARepT^F7TyEu`-&rYs-{(M{g7P6m4(kMQfJ?NM>4?XdMPd;(Lb4h{&G&$FW+2qa?QhMv3{ME9(0Q$~?N^^IPZe57AdVu|e^O zq#biq!`28U@1Ly(ZWufMB75P5$<2xMNB^#J!*2NN;2RvHc-zu%-3%HZ&PmY|fPwU6 zE+T_aB%ds!x8XiVWgD9b`IiC%Rb-C40OfC8$p{dVWP=XH#ZVzneFR^=wS?O!@veMm#qi{tSe51jBIiLtR( zUpt3G%obO?s`v+YYi~2)$#0oHX{vE~X&h`oEZdl%&@f;hI*~Wo=|-+rmpJ5`SlLcB z3Bq1Um$&Xf023`l)4rmGe~GhJ$`1`EYLw=Qkx)H2z})yz$x90Tc#6B4cIhUzjESGw zIY-4kw#D>kY4uWlZG#e?g+-+M(dAGK+m!c#EaEGIB;~I|@hQiNcsPo@!J@$>-Amwe zK$2&LG5$!CLFm~!{Y~qRygyRepyL`VQcZ#Cb}h*nw<$pc2#c-sMu&RX5inN+*QuI; z?xAl0{R;HDcH&+#nLK{Rv6?+OawN3(ynn_&s!u74`P7zRJ)qZRAK2BMtyCF941?Sa z8+ufd9j-3jdnJ*#&u>bJ+NS%t9hJryr(I4(8|!9uT#5sG(nrsrD)qzjl6v|?sPQ!?7|lVAE$;|%Ky}}n zH^sgB!3ZyKo#Re4e*v9$g50Qw(4CzkDpd*=j!I&}(0DK4@h_t4g?js|9wNy!<3x)fgh`){417C}!xLeJ>wxS!a#R@&nQS)enBt27cY zkqHb5qeO>tZ7oHMUAiktuoTM=i|Cz{4=%#DKd?x|`s;t}nA`T^jG=Eh*=fzbDc{s` zY;^s0##^1I-B`EKsD0hnEh;tI6S3VC>!6pbpU!EOO(-d>Y`H<${74q;T_H3yu6uZM zX2w8Hrm&sq#+&|(;HfnF8O-1lZsZA;hFGd)sOcV%+g`Nhs)!pdwutYD^;R_Abw@Xl z9Y}Ti8Kl67jS#OuH-V%Osdyiz_yuJq-&s`!8=}I1gQ>DMk^eHjuafHL_?_7z%1qtIO4QM_ z^^~wL=47}8W7^xTA#(wX0Xe1%@6;h$Oht@Y=HSwpp;c#xHBTaJ8{&7HJrp>o(to_O zNPSY-F?*M|V<)?|tK)01=pfSW*0tWAlYSnK>&0y__Eq3_K&YXH8%M@?;6RadMdQ;9VV=T#4ga}vO`1b$Jjj#>sbM}AmJ=q-NxASQ3WLe&{@FCB-T(N%x3nHSX1gt$Hhzr z0rZ{#0{jC+Kh4hdd$~6x=cREH^uu95gK3x5lScz<|IkB0blCb0ek0;5`cj$}N*4Th zSMMDCMozcR@mkOJ2K)#A)`4LjkQ?D%rk=&^H%9Yju>mcRNrL8J2*#IZy=$f_ccUSr60gLT3%QrNA}M_3**;TAHSI!rbR8M2 zImykM5Cz8OUGxogdbq2^z1^12>G7~lyxGZ4PLz;-nh3Sk&ImZeZX%4$Tn|WJ<^41G{@a~ z6fjDmYD+?^C6P!6L(U$;3Jd3l*j7X>@80lj#a35FQRX6T8-()j5fIWYhJ46h6=Cj8 z-`fwTm8ZpMENHc+IGjz$_C)=T=%)UDo6!INRr(7Kme zp;l|!Iiwx#kYX+Fzy@-yEh?U4w3Jpv7+j~qW>5`cTj3y?b5jfd2F$(^G)BQun1EN5 ziH+pY&&=8$xz02kHU2sipr5)p*KA88q;7?7(`Yxi@5g6I45&o(db>1x{?S#ak<3=m zr8$B(AmPXGkLB}QpMn*EYs(W~7Lggo&8vsy{dUWdAGv2OdBt_U+vS^{EI9$bOQs!S zRrDer^KTT<>h9my#%cHG{CN7iz&!O`QZToEtK*DpOn3#8#bxN83vZeD}9N)mZ~Xx!5fk(aCq||{AfijU4O|9 zwoPivy<;)MPH59hM9K1INV{*{z~|W$9O&pfJP4l0em3EJz$K{WBY;zl)2e5)xtViY zlzHWpaibx_&P*+zg>zNrC2Nrcc-r$I8CZ64hI2Us8NF69>&ZZ92M|FhcBc}2TSAt8 zOZ%3br{1Iuyr3%YrnIgj9azB^l1MwO3wPk`(m5?cp?MQB;QJ?)7|MasbzPWS`CL%!Y+Ht3|j1uow8%xl*8uj36~N2M%`r*mk86k zU(@z=w7u?|Rf$nIJl^4;4Z+*QUW9{Kbc29;E*Ftq27TDa>0CDNDwvd0eP0*CO}6P> zVxiQxAH(qp+rLcEJui~Qjh`9b=>O>L{&FT2YtCG2v{;$o6y!Ui-03^^8E@OpPN-;& z$GFjrFa5q4)jP&XF2WSRv~CZZidt0Ms&`18mSy3gkM$wu4xsE|DbQ7?J=zcRXO24* zfMfa9QD2{@ZCzBpk$at6V<)1jbRI-t7o&)ccgW;y11g)hRWKw$r=A6-;+lau#ri7L zPY^$zTXc(L|myUQT_IBXzpMfIl2TRRnAvR!0<{1hd0I(KWe z%0S9MXual?v1$$fqqz%yJLsQ<7JZwIWne@{E{;3eSW;=SJdrT{>Fh@mm}u@`($OH4 zSUo2+8xwRx0t#3)oA#ULKzpcN<1n6c+rM5kygoR{L~<5n7oq8uk6zh%=Qi)X{k&>r zM8%lyPryRd&D`(mKU!O5PhN3od7*b?EhFkr#`(fRBdOvh^^G1Nku=SYU0KOs@ z^mt!FfjNIK1lq;HDno%B@6i6wV3kDGbUqY`4excU1_uvdxX{ z_NjMp@BK3JW7>8TpTicz=q)r!8@$p~n{~FjVASqpCAiHxVjL!E?2Ui%+?n@)7NMR>dTrsHwAqZjd?%#0EHvC))k>1OUG z6Y6=TgMKaSRUfrjIwN;XatrA(7NXe&^VO)--owT8wHKaS>n&(-VqTkZ*PR}d0QKw^ zn46*i=B>T*P#_~64Dwrn<0gqQW)!#O7x5BW1T$MU4i1hI(F%j-ySx|OG0b61{tii- zm4Gaj0jQ2B@29(iK5xvIzV{+3LxRd$PqQ>S>9p8@_ zO;+TscAG|k1D;(AhQB$onJyOQ(*#pgkci)HO}0M44)7%*HII1yY`lW4e)Ch-ii1Xb zuF_wM9%YHHyCyNgjx6|cAk#X2KXJml;Sd&hOCgRFgWAl1kP4Y3tQi)OyDKVHHQjal z@$R29koyr<7{+u8{&@_7=Z11ciiD++3NakmKdi*#nFg{zGZSP% z9Mpr$4*?+IIw4tGQPV_@;bFJp|6c(l7-*)#p18`;Twm6$O8pGM(ski zg#*wlR&s1`C@q`jP=eS>ks0s6X??$SK8)r7i29?t((V}v3eEY%iIuX`5b*`q#RtzW z%BbylmX)U{fafCTI*zqixhOYL@LsTtWmp)9wqV{yB1epg0E8}S>Hh)s8%O3V#|eRdmn^>*dzTOd&%CEeSH{K$u{njtD-IRBq* z(u~k3gsD=vAC`-#aw`Yqd9nwyo%1K<5yzD^ZdML zga$7k3dMUHP9mM&&G_MPALO&D(e^>>AB_Q{X>A|zoM!W*cCl4wpXQ0DR5fO$-n}hV zp7BPikh~8YauOqw9zq;IUt}N{Z$&h-EQq-hFQC}nQRxlDT3&3|3A)hH1aA>Z)A2bU z$XA(W5>fp9o<%Ua*!(5khQ>D>1J4CZgWfzoH|eUg{M79n=5Yf6npUL|G>1q>Ik2gp+S=-JS44T*Vnm8{6W0A!wkg*OMc$TfYu|k(@AU_aRNWO6x&Z0XZ;5`pRFu{N1m}^xku@_3a z&T`3Qrn^Yv_`ssHi1}tk0bnt=6R0TK65{oKXoOkdAMRtF-X#S*3Sb0fMCPd#uBH-Bj`%4Fb=-RL@J_rS z8TZD56IzDrYIvU1d2gPy2C?XRsq?Ag;o1?a+?nu$s>tx~+ej)HD@V3^%*bZVa%quR zCmB2nmHKc4Un3}X(uKSv)jxTM z*5{bjqo}XpttEqh`dNF`67X~{x{=d!p#8W>xw7!d$x0EdnAl4;bXq6kuHTIq_539J zHkY5N2*H1DYfZb>qDe*?HIT;Z-lOK)tRrc^(n4N{?vMC-?#oCNzP!7a10JAZily!$v_nKKf16_Q|-s$#b$Sv4Q0SQIfYL+DLQE>D84<7M8e z1ML&TEW5G;&t6vuCu5d}(;vDeqR7|cF}Kaf9U9v&eJQpD%b3qdig}hC8y(pn4khaX z%U2<_-;(bvg3;o1WMpKZ*||c$5iR1FvD@0IL#iL4{qcu68^BAM1#>tl@Od{dV)bcx zHC3Ujb0wUt-33n`xYm;!uH_Hepj2d6#PB;h+>B*6U1xu!PI|d49P?EiXN1H$mDK4* z5`1i+^cZG(Ji_*#ddY!#EDVJa#3Z9!8-y2zLC*POOEV1wtZDa=hdqH@$H=R(U~26t zkRPdbu6C=PJk!}9ZAQGaEAA_mYFN&2+Z8c-H-ebJEf0vdv=&?_gheu)7VN*jQ_HXR z9}m#+^&qckxu?MshSWB4qekYbIduW-O5;^6z@PkT!e6;Zy`m8Pt88NB8`+3Y)SkOR z3p{s`S#AAK0T`FyqhVO|M1}=XwF`;<7 z$)TED)Z>CIK%U8m+~z4pb`acdfm&Sa^6}UbHC*sA@_ddGfeN8SB@Yb;56JQ=V|I(- z-D1EfC2n}#952_H_C%Oak$E(;o>i$lO@Yll`UQBQZge=fKQet6Sf)qmG7Q(dDUGsb ztow;-t@?cM$H#HLflN^ds6n>>x; zHO6IJ-kP8?Y=k4DA~W~4a6i!G&8*yW>0gWMjH}6lE)eMs0uI5#I{g9FXRP<(_f~HT zR7(A<%QW(xY^6MYM2k6MJ*^_E4u6cIjk*(`CVXz%h+(|NLB;xe3B3RBVbnCBx6GE> zqDq>-CsZN z>KY)J8GZ~(-r(L$C)k1m7Xy?UN)!qxlYx~*P7DUAuPsAxigB8hwwXJKAv&VhM~k4I zD#I3wxYYV^97%M+q2Hg8EQ-!ib5Op8jCXA^=(hX2TVsx0@H12Rt;%U7a?%P1Q2g#7 z8Agn}NSa|Zt@c2vbRkGiDy^;B_DGd$}r4Ke{lw7pIS#UwS8q)LYXdn?0 zDo5dU*K8A~MD|1I{vvah;K*U)4L%%m+9cgb;{PVwAT6=c)&FttDvT;aBn{|D?pDcx z??{#Q340i^j+4*6A+)_8C}}Z~_Zp4v1-mI(2jC=_XKdvWl6roU`Ao;!Wcj=2kzR8@ zO!!I(IgoHHO_;{qQ?wvK$f%azx&dYJ_}5Rpnu3f&J}7vd9JYr|68o5e+nV{_$6R$% z$AG=5gpGi^qU^+TNZy~+y+1^CLE>`ls(o(2`UA0fRTnlmpc1wn14Hs zv8i(-r|Vz?ZzD&AT`vz9LY`8#EcENujH~?U{nb=uGZ{Vx@V4?tdl%=mA0jx_zw~vu zm>&m-s`i>^CvfGCbGsb-qKj`8ALK}Rg)PrbNy!F0QA%+FYoQzZ^c`^$2Ji+}>rwx( z1heqET{vC{uF||K-mzc0x97}!^W4E6P2TEL#>`^Xjj|CejjRw zZXt3i-dDe?o$M@!s36Gc8T%tS+J%*w_rJY7yL)vo2ak0^VuZg*j(#>)?8jj)56-|~ z%Mrhqn)A-xh>^LoDa+(o&uDNc9txdfOriVo3`SW|>7Np36tM*uFzFj`6zZ1N1TJV2 z@)qWV`7OD7h&AG$Nh`ZF*XYh>r4eHCIu5F+l=oquCUIDIH}5jxC%ll7C>=*0G&V8X z95DrCxf5R=Ct(JdpoT7%dEdUDTvpn*cR@&4@mZ=l$3B8sR#NLI@^cbpw>)@+gjfAk zR8XW49U#Kj!PltY?J%5RC|f>o6uT4k8xJ2(!KW=dqyNwo*le)DqdR5ty^V?GuD69! zH*2RO@T~+Gz{2D@{2x49#_Qiht*-k;Liv&ir8FFTQbR&wO1*awpPev0Kw zcf*jYH(v>QLU&kSENj0+;Ql4-hTmDx@*>-haa4e&AuWS(uFvuHBJ$PA4K2iPzKjBF z_P2Pmpwf#kqaU_=9Et0NBkp}OYF5H4yBCcY^e4kQgxWj+sJH=y*0a3o7x#;KPEt*e zl^KUBJAQaEC@k@jKRS;8fNxEO{>#p_f`U!(&lq>f!?lfWg|nU^jD&B{PtWhjyA*cW z1mW<XHrO7KtD3` z`U^eLAEKHLDt}gcrMEwVJPN4|Yq(~*{VjBw1n{J+ z?1uT?F2RJX&{L~I3 zn(^^RN^gLnwkgIr1922bmm(TRKg^^jvAx;dyb@#mpwBubc zOI+LQ>Gs&SKjZiq3H5lB4X76%p|$1JDRnvEMeEj?^52}?4!a=^zA+$0l52Mn6?dl; z(%$0nDw-JY1MZt{HZuJtj!8uZPgBjrJ~%Wkv5^HphNj|aIUK)B2|bRcUIH@qu20TV zso&9I5kst2#sHR#sl2h2=e{DyWedVhb;lXu`UkkF#icMYvMs#5W8p_cmTeDj1k z;DtJ0adm8y+GCabOE&{hiX_m`cX!uu!h(uM+G2hzgp7&Csh?pk_48}q$#sT}#2`-{1r>fA;6j{61SjIPru|I=UfzES`y*4BG>bo36tGI*;Gfead$ zuS?8@CV^C-U!ra0w@?Fo5_8Q7O)-AEmyt9@%(#a;LW9zHCOONHk?nT@^NlMW$Ia=! zt=yIZ2=954_|7sF74}J%%}J%rTxjR8A8>$Qkws%wr1l~_D+~r6myfk-r(3g?jQX1>=iy^dpxW zOyn&zMJN<1w1(?+tr-s64O$_O zJO<jWLCNADG`spKe!^hIX~Mxek6-mz!U>e|WgNJRfG|*>Jz~7#J9c+CHKHwtR8? z9Nyti)dA?M^~6JJ5r$4O7oiccH}eiYW^L@i0&b-bA1M=8HM4Z==HN_g!W01qYkErxs9W8tx+ z3yT!69FTWau*%4muQk?szy?;#?#o$M;K8QJ8w4|>`348#>gvm&VSe63s^?&MvNhAu zOfJ`WM4$n$e;iP!lZ77N?Jf;v-tfyg_7 zuz|E^91*&lu#c2Caz-D1o*>mOQCO6l=Lb-4CcbfR@w+D#R{2*)#rn!WCobuFS&do| zSle%@1fOp=gCzy=_n3QqO|Fh5r!e{vfCFHadq{_`m;EEQ^Y7|?+{ZrUzE)_|Y z*k$>3;p_;5{v*{^kZDCV%S{n_r6PtThH{=TDIL>y_HeL_iva&RL^S@KM5s&~Y6GqX zE8?wo^-kxyN0r9)maHSDF|{W%b;qD%zAzW8dqt_^Acb6#x0Q1rhy5U8D)@L|#V`sw zec+ycJ%z;+^K=(0Wy$t}B}yi-S5cy7|7<;`P56J%vP=V<87ejyOd~a}hf*k_l&OfG z{xSLk4y->U8~MLT_NHufI*Z{(+HIwN8~h92xS7*g!ddzX0Jmz%nb{!IJGU>~q^gJh zq04T-lEjpSZ~TEa3O8gD!R!B-w=4SKoa}Ljrg?!6%At7PD)Z2dsQ?hYaE5ked$vjs z``r4cr!}rER}|M2OIf;yl0+Ruv*(3ICvx-_&!c2^tjJ*h%k^7)9HXi?IK=XX+Jh0S zC7BIM(D-MV_C>e;D#Y*Hde$E;uK1_yNTG+*<0Rufz|tD;iPrni+Lu8WCPvoC^ik($ zB06x&yVCJ)I)RTtx@cUdZUYVEQ7C{s?8u8qOZAJNp^HvB*-^?A72M1vyzl^POyLGQ zo_hjz!97w_j0?oq8RQf~I{3p{EB}kNf`jJ{`=v7zJXrl%R;M+vIRuM8<-8T(HI|Fk z$aA9t7Oi@hczrM6<4j~4dpFx6`on+N%?)ue2;{4RSUxNW@##l6csc0$QAHs(+3b8* zAA>s#w25WKOceLDPK3jDg(zCshnY_F)hcZ7#I&cit_{dKQTzDmLPHor#%CHXsxBcs zxkBa6>DUM3dTy0_R>@ujb!9ADzyvhihPOUy3iZ(5QszoY!i#~=3g6O>COPs>Wrt^& zdC5f}koPv@c@ba&f}?_8^ZknZZVf+h3@DV2nTHxoVNyg1T}!<$X=Irh_*!wgtP4-n9mFq^fNa2f8tumQ8ux(yUc!7An)j(9An*jvGw2R`c zPZ;$^-W-#@`dsLF4BYw$ZA0F^p0r-Xax_JFb2!i3Cf1ll^`Ocss`-g|dN5k6Y&Ip< z&J=1QLvqxkNeroXtmP)E}N*m=VE%3 zvBirqeB7}gOdAucLk>pH3{bRn=h*cmjgB{)2b$bjEf$*h8Z)l?+L@1Q_N-EV%Gj0E z8t)+e0cjzlFTo}%o7!U{NY$;U{@hQHt$xSkYugthA?ahL02G#N0Z9BY;V$=<{*t7b zlaGjCxc-a~e$`D|y*+i~zpE>JC650XY+~k_e;`oI*bmc*k4ou*bskvRwQAOWMb&AT zhiBFxmD!@aO0h8vpYJo5jxs4Yks2zg+oTmIO%_&^shc=P(@2P?lS+q8S8{Og$>J^Z zQ`JYmX~|@{;{Ky=>c#sT9#gHXu;06mp+)FfEK(qHVWh_8l+cV1Nz!NSjBw~H?pj-Y zQ1~gi52wfiV=j{rQNoXi8BZ=~+=P++1|{5R)0kGOKt0}$pv!5 ztg1WIb0;l=txeqB;Iu;7(T{9rKO@b;*km6-wJNZc#AISr!f8E_YBTE957Wkc<@@+C1lgA%z`CQ2>Cq}nw3 zUbXQ0jJe6k_=x^n+xl#N;LJmA_Dsp5FL?l_@TShS)f~;$1MHN)q>#~)wqL{HBJ7U2 z7l-LhAJog*)#O9QS_`d{Lj@BI+HNBCa`@UaJpUWs{#J>4VLXA}&*v>#Cyrzmn zfW+)$E@@e;@&6ncw461Q$qP%%SANRxUOK5IRGT!e! zHKh*>)^AV)JxlwUclXL%%AE4dAf1$25@6H7xx}|LyvILkwyl$hH~Q^a#7Q@GYLD~D z=Z7pJMhL@+obO~1_N9tl4WheLDAyNW4Yz~?5|Ga=mFwT#O?DaRtv#9m%A(pBql^Lx z1mOWJO^chwAx`ci2Mx9(1P$Y0TS9MT%DF~$Q_F|sTifhh5z3|P2=1Th-!~3?_PL#L zdsx#JS%l{x2mqoR`Fd6(j30(;=N+%Fr>k6bDjum=f{jqEcm1JUCa03XI~2RRHExuAa-yd)Ucv$!T00grEps&mI%ABEbqQo zLUX>BnXEKB>*hFePr^9l;ThCG!zfV5^X||)oDa`vEi2l=%YSGQH-d}zxLpM5t_shP z1K5?|^_=VQ@nBF4te|8OGul5rH0Fj0IPuxLD@3Q=|E}a29ftqnxQkvL{BZm;u2EDW zg~0u7*~gQ)r@l$z2-0DD)|B3^=xv&UF-ecgLCNt`qN2V8@RX+(Zn#bbMb|RCY3ZY_ ztj!e;sx>7bQ^>&cB6|4B{3nZH5D|Vq*KRFR(FR1HHT1_u&I@9!ZcYj(*16?v1?$vv zhoN2$OUO=7#X{&%U_FzCS9Ph@90Vwx3k6!ttNB$FNz^#_%svvRUdtCP6Jl5YbRjN^ z9VD&s|IIhx?M2Q9ba+Z zkt>P!rX}xvA3yff*RWr=`CudutAIMI+OB72W|IW{vCuB}ENEpF&)oSgCEd=#5p`aw zhwXDIqWZc=M&h!OK|qfKlf8B-zw2v#i@3F6V*$8OuidR=j<4#`Di8m+gl1p~{5&6Q zU3q(FZvgGR7`S|2Cz$OBKe~zv*^hwVDtI?gKh`T7f6+%R7_zNzB=kO&uSz3*myoD7 zo?<7*o*Vhw`xs<5ls#bNFhO-SF)1nP95QNcYiC5d!{scWm%{=Jp4$R~nHWYt=J_8R zHh9%_ZAZAbC8}pzYoMxVzTuHMW5alk-KLj2WRC!>Y;VHB3$4|mjTJ=&t_8ybbn30* z4J0afCp6{m^3&kI-ekgBvZu#W;9B!X?y7FLD2 z0aKD9`}ipTriGYp!y{HOg0H7fD|N{ltkCZezBXawgR_CpY7~ZV?1xDf_;?mnUA~Y4 z3Ei421W^tD(uYE~|1*8?uS-kz&rclhl<^>jBCx#E zk?}C6YWv%QDgW!Ry;>!O%YTfLpE5<0om6Cf4EVqQH^si2L=3g%6N5^j=&YQ$>3f#) zBH$gt*HITv-q!~B$M&a6pu@wfV!`@Gl=EN9r6>xN*w4~(_>N^`Jlll`W=WcHSU^9w z`IMwWuMN&BAb?f>y8AIob86|{+ktjoBdA>j?{&;Gv}+Q?Iy^;8H~ZsjY^P}crUppU zfnWkCHGgU20t(h*F$DH9pXoO`rrKq%6M?H3K(`7`tw`FAO?WJ$g5w*%6hEr{djDqz zc{eI^M5>xLkc6c|VWPqHF;QP(|D;0yn*nV1nHH#egK@&!7kLdffZ=@r53~bx4h)=T z#9~Y^{lu)1svY~#f~A7z1JoALuZz;`^)AJxHbXgT0M^cY;B@MOUiv^o`*c%{gj9`1 zuco@58RW`l8wHVgBsf*uX=vk2?3WykD zVwRnr$N1Y6G0atS+>`eNrhI7woynL542g`bhAIro#QT-+uLYBRN+Yzn-L%MX9@6QTy z1^V`aHw=$R1;!=AZ9)R4fc_sS6*rZm09FbkLQ>mZ&%x z*#u|dJ=$}@9IN;xpkb^c%a$Z0q$?s~$Db8H+Y$@6da+oe1(o(xV;eXWQ8$2p?naBtS-E}9ePHX0nZyfR%Gi8n+a=AYr^Y zE|jD*qq~Mo(wAvYlC53Yyp!PQX*PEyhMTf#w*{m|J3E&73ww|-$@!&QTulP;amZkU z(ZJEI5cl^+3alr5@OthMPtT)3=tku1u^~zr5gdjEvi!u1n^N0VYkd$8P^}7>Sm9L7 z`cA~%QRW!~g4aiagFBt!F2*13R)4$8xFZ~fj1I2V`QoKE%%MKT&a|yQOws5@3~;2^ zAZ(03SPwc(ZnT7lVMu^J(Oox>vA|VeorJ3ig`fN^Q8e!q7y2%vRJ<@YXX{doZu-(O z9ZV*iP&OVjtx&&-y?=bFD6q1#fhUuk3>fEM_C*2tu$9~?t#HD4dW+^|PiNAum=4;?;3-*{LE#qEfsm(U8_Uim^) zYhVhOs~;n)7KHBgyv|K@PLQ_Q-&8 zsrsz};jcd0-;&}t^ohp(?N$b3)0ZaB_%GotvKRC&{OM$&bll6s$~UI#>aTr z>rObmp4YzPM|#)5yyaQGIn3t-OtM6nI3+qB$tf2d7|8LR=!UB+S>CmUyTGVwFW-U z+qY^9`Wa50x$53*Gv+LTes&%3v^=taE-=;zPA|pT5S1*rN8;R+z9V`X!9hq%ZyXY2 zIg-V1Kqy|u)wqR&R(75#zoC3FxnFy8srZE=A%G{YV!3V5mF0|xAkrwnu*Q3NM$*x| zIsIrZcB%Lq83E*?hh@juw58=r0JDHWeg6~5jn15Vwf>o~G*jieV~?{C8nV~Oanz_d zXI%`_sp;PP`&)%MiNkK;sJ15b29w)e|C+m(1;*}|Hhk_U4RrLAhYp`LFXKmz&oQt1 z{4cYWo1>Df5Dmfp{erhku+)&ZaK>wFs#%BLA8_t-m>UXgJKdGWu(amc$x}nuyt_d= zY?Tec>kpIgD-xtX(Y@(9ODW$+HFV3+Xfq#yAIV7XrP~9r>H+oB*j#vFLJe>P0=|DU z=Syb^rMquW*GHKrfa#b!H?Z-J`#F&{&{Om5OPbgtPR_A@BP)DLx%d9=thefau3LES z`|9=%7hF?8{C?9k1RwVfsHfMm1ot6j?cg^*HUigsvI2PX^33YGr+cSJQh;ML_Ash= zNDILrf{d#B+5}0Af)b+v_zu_+RS9McNu#c*d?dSkY5Z%@`F@aVKlFBZ+p5(TQcRt*d2xd~D)Ix!q#2`RMu5_N87S}DxXlcOo?QboA)I3kJ zQl))s{@gj4_h09l06kB<-uQg@nPOKvX}*MLXh95BpVELuXpYi5uOJ-q32u&YtyIpa=8pM zKl%AASf&%Z@Za-q*%=e>&oB1P&OeEOivdFdmI;R)Vvq5UoIYhfZ@x48+S3d8aG$?1 zyfP9(%0cr)HHiRL;W4=V*QBu=k0n}Tc?}$4V?0rFoAbMF+aO-9RANt62%g$W{5HGQ zF~7^*wsA?2&g;nX9a<*^qb7@(&b<*R0T|_Z*AYL@C2sMX zNu`WhfuH(!F-?FxU^eIn_%GL*7g72aP^RI}n9i!xmce`(brSCE$>g%zA~M@fiolGO&897oWqMb`Lp-Y^af5xI+eI6@o>6d3O@6Bi zR>)J=|9cT@{*Uq>0BZr0spfpWtnJ6dnA4M0(qQ!3(>`*<8=P#=>4}0ex$%JeSIFI? z33dBkm0{WFx?_nGvLHFnP(QosWHLj^>!C*2IHeaC46{6PtHu4Aqm$~c!23k-b3$z1 zs^cl)p+M%r^+xVg!p+I$QlytFYWZKqu2d@>i}fguAo=G2e^Ro*gsJBj2UfeN?ez<^ z{do7NZ35tyN(Jvv*{ZT#SR- zB`NsZ)p+CoqU^1M;%c;Q-z0c&_r??4g1bWk1QOgmKyY_=?T`d_2ol`gJ-EBOyX##| zzP-;r=e~FEdsS5N54CD_vt-UW#`sOG)Z4Ap52DA%L3g^bnRE!4MORSsVT|}oy>0DY z7(PSoxz;1PeM1@@<*%hxjvS^V5hlUwWS0ypn>I}0G)>nvC?2Dob;eCF))mmlZa*y+z2x_>e?A~s zHXwr2H6DSNKA;LDrk3oGZaB z(uvv|ZtIJAS|It8{YIy#^~n~ioqoaVCzIC1fp%PAR}kVcJ`GmwU1S{g-cQ?=?zo|; z6NC3}Wa6b7*B0=-t=PSO#@~WrOy-&Bdw)E^nGspre1$3;obN60Y%uH2>UY%a3vpgw zQ3ujgodgte#w%3?g{DWfUT>zGyF0Fb?8lXK;ozRcZ9%O`K<$>kJH4(4@(d7dXjPH| z(cPpiTM`{CkQ1xrh>v?>JeU+^#%E&WV%+x*H^omWf2!pc@v02+p~e|%EVh6D^3WZk zajjLg-qyd+_G58gl@#a73sb=E>rQsKmK%Ul2>e%y#7hU|u#uC7;mGv5zmeTC ztGk*ZV$V&Jz^udem83p02F`4p2yiO?&kpWH5X0fL+}VG+kJ{+EG#U)f9=5Ve^%2#oxF7eX&c1Aud(I!NldL=w_vBFjQjzJ zxprq2dO^>hiNDUv9ds*$OQ3mW_;UHIEhsU_Pv+<0fY92a-?#5E>%2d~s>qKA!q;*n zjy7b`;X*uNO7ibBRnrhjRL&fcNIU5bgm^wQ~%AJ zYViPyyYb4)NcTa){zr@58vUZp?PzWHa^3*R#@JKN-X|P6G&?_7+pnm}pdQn&Uwh96 zwAVIKPfhRBx315lBta_*>-RTjh?bfV9)!AIa^^qHqK|g7XQNkNJ&Kir3oykv9SElZ zbXUP=|JNbJ|Ml^#Mc~%@J_&-W`HAPkEd7f62$)Ibi|7D;NE`ggIAYt=OzLh0eez}B_;kJbREET<{ z9uEjh$&MzA0w=y=i1GUavj@iwgcZJMgHELpH|`<4o7`1Vey3jfBkDz)7X(IH+$=Cf zN0ZifNJ46s`4jbe2?vxhiEN{1Etf+<*Eu%VbHRAb)B@}#{F8nPXw~oouaN+|R&p^D z6w-SiFhzjKjO!uspb_(Ce)_%xLr|;sN5O7tR9e$os%w7R=BrR1$U& zeFko$V{%WG^?JdSdI#rxa}Qq5vcm)UA#Qza2`HCiUMM=*+0S$8@dvab#dElan9|f! z@3i1`&IA=-n zNoW?z3A4{22T~B5)odhie0fC$agRz^TD*ixQ0YY|-BTJO&rv1JmPN zrF)_&*P1q)cIv>0`?9HM!*SR>d=yTtanut=(CQoNJzv@_GG>RZkNdLUm?_Ein1aIb zqt`^|*3iKdTI#O3=P^FT$K`pEprXllc;?`|o%}=y`ZgS^%sU2E6ZOO;QC@mX=OSqlT zQrMBFO1TNYsL(#l&i%^9(fv;ECy7@>QMcPk6Z6#Cr>!j^?e<%C{&{xOMM0t*yWfjr zti3fcuDWfuItKY7@4vYX?5TfIJ;lAjGjh;;>zUJ-^xSNDdVjiDES<7) z*aoRj8#p37a%zIqfEgDvz5NX^VoE{}#8b+xex+rij!e7t9sv3vT6X{m; zgVh$Sx2$BNsc_Up6}hDPgX4OyJ8JXfUY=hBzau>QcuI5mW-^+&a6C^M^R=oyuBiak z$F0#dZL_*!7XJEFdna7aOt*!%o`9v{K)vh!q%f*Kb%LTY+_SN+(2h1|$-uvx;-vv* zFY<^z5zb?r7HsTU;j>d)%M+O6NXB_~_i9U4w()ja-J+m;^gh|-vHCu2;nj+F6lh3e z@X!<84pPrN6(;Iy)vbE1@R7-8*tIj@m;UdzsqMh}j{t)L##s3CMteha*RJ2JKNy2KeR-{UTQDoS zs`TCRSUuBTtI_P^d!j$z#Vt_>I~SVyY_aGYNr%gpP|(}(pdfnmFJgUyFK*=hV=Q>5 z#$CmN`_w;l`E`~Kwd7b9C(?AbZ%KD$kDh3vBK8A)xXEllaoO=wh0eW!dNw({ ze(5oQks6>Oy?T^Qrva@cT?{0s5uXcEY^`Zq6qA>0duHnY;%Y9jUWhSF%5; zRBBB=9v)hBl*E&2ryUmkY;ii@8MYOCG@3k5D{?MWtJX{LN@Eu8@OHR5>n-+>1iM!$ zLvIXyi1jiamR-=Nbhz_VNy2|zp=qa{@~JYf&Qx{Pe%g}V-zvM&#ymclKQx=V>!?cJ zDsxEALPEKTE$?Nq)|jdggdyqf>F@4vCF-|j>|jZpSX{mN0ZbW*=>${AAK~2Mq7*b8 z4?+Nh%qu!S=2pZ9hsydVHg)?MKg6$rYK32$LM>%lRFz6&c5+E3Pb{42-~NlBl#M9- zj-@9egZ)!!h1>d0qAD(>YGl}uMOVD4~zK9i=hBKH~=S688wFR|W;mhc-BQ&AggvQpSNFTWs-ZUx41>JSn zGW6XeTSZHt2Yx66ov3ep2s5Cxxs986ZclgkTYjLr!}BP4o=9C#EE;PFc-}y%Hql}T zpSX3P(uz3P`MU(}93qSbERfLE-v|u*9`Be(S#2-X1+&bAWjaKt%#zx#ljoLGc&FRLi7Qs^V_TLHq(C*B@I)^xv39ru(=m%Lo+NH-B)e;u8y!t6!iW6)S-gh7tZ}jIygZ#QnKeQ zl=Z^3bXfJ15iYgKk=vDb+KErd8l?PE{{Y^<1#0 zhq{I*M^^LY*fo8`MXBGD9`<%$kse@V!<`ZikM@` z8GgZFxk4>N2C>Q9g$$ZBs{PimLjt^BN^PNyEuq@T&vMx!7Dr&xu~G>UZ~fnU?T*uM z*{q7CErL3@PpcaC&SY^aaF)&T%pH)%!G*D}L!ecgF(hf%OdN!n$Pyn^8J-YRT)%eg-nZ?anP`<#v9}3X zE~0b2uL%E1z1JZsTBDD*b5i+pRbs>g&0~F>F?ae>lpT2Oyq4X6r@|C=6WaT?PmNaT zaQz=WYI0P+>C?55D?94LKMiW2wL|HeGd-5GU!ID~FxNh&j)L!Ea6wDWZgbD+Q7VCd z6sT6lUmp;_=9kmpG$&hKuuf3z>y+R|(97}87 z`4msDSmI12VNv;2$m?&3Vo!oHLz8RALoou8op1u1-E^4r-J46Ri?|h`3h^g;I3-8Q z-G94PRql>Xcy~VHORBIF%e(F}*zLI~_9xOB62#2(AdedY{Q3h-L7{QM;kF+Ih_F>2 zf_lN;OgEwt zbdnw(x%FriKrXnwLJm5!-_4n1cp`QF8Q?`3MBeC>RQSV+N7G9I{W{I5h99wUEn|OG zlwwyS0ix~AlR}~%kS4acfaxDSj+6=%N4_B*tl3p5;*ul_Cebh;8phn~NKSurP30A#(RE@W z4bTCzN^xRvjNXHVYCF>iA`ljzVm=kwGc~c}d9S!*=iTDop71H=y95^>r##b;M4p2f z&u#6%+<&&UGPo-`IP;ynT{^C7N;S6amDZ-4E;!Zjt*8X?@MCZ?>xaDh$^{0}10ES4 zrtr^)dbm7f0xZc9dW=tT&`pLTo6?lp&KC%>k*1m7^Xzw9JT={3D%CgH{t<*PG7=7Y zOMGq`o9S4$|86qcJCAjhxbB9s9#!4LW)DW{4Whi0hlW^gl7I(~yy|vc+<%!T|C?e6 zL`MHAhT`evUoSS?>$rrS@K&V3$`hX3P-Am3g=V{$(IKN)mvZ3`m9M33yZ*dN6o3!- z6~+r+1T}(d|I6z&hEL&=#dbZrBK|P3#Q9VHk>q}t(Nl`Y-Kxgx{T$_oxN+crT=SDk z09o{w)yZSj16u1c9^_Luf@%fLn)Wjp9%hned+PA5`FssJhsCTIIgs7cNAT5wx0$GR z?pzv$12Z_1;Y&5VV|=89+T+YP|DLfR+^}|@We09mN))8cuE#mkrGPFii;ItsvRhHD zwj@ScQ1KsH^aNxz_Zzcr-Q&X~P1g8?1mD9$%i8e-APxl$=~cz=MF^E4s2@3KDD|ByGQzwE839kHlub15`X?XuQwJ%c*gY}jAZ zRMk4RcAL5TiE`PIWodZcKarF=_SoPV%YMKr%KeeSD`&1snradDC{k7M1jY2Y?(9SJ z=fC$*HzG5dj8voT<0t2hfTQvq)a4DkC!pheLT|7~X*aN5nMbIxzC_5LV;6`h@C=fX zLW5pOg_te5qlx8n*QkdwKB*)G;SfhwC4_gSJA!AN-S1SPA0MxYpwGXfuh@z2D200& z{AyxXa3fOaauqr$id<J4ReW+H0MPLDNwR=Y^VII>L~d z1W-#`dHs6zWE+I^XYH7m2EAzZhWg6Ei!*Qm+!na7v^AFh9kuT#q-mC)=i{vk7}|?* z0tU&%dkslDY=2`+Qa_CuBK)NGQF^jWU*rfmN9gH!L;YIucAb1_GD;!5SQUag{o@u7 z^TbkWG8-9Dz!5o-8mnbr5XY^nEwarz$oxr^sz?2j#BZM36U_?6)427_X{NUyu%t#atGKRr_dTi5bBRV)A0;!fVKrLv{Ncn9_Yr!|MhWGxI$p%K}%}?=v55 zqz`+S2Q$fNAz$LH%NS#49&45OG1#@;2#YwYDmKceD|ao1>m`ev(v-9V+77zv6jzdh zb)tPJX5aU8XQJ^Ro1A$z_SPs0r?2spRf(bGPSTCbI~!J)%pVWB)e%6YxBIIe9q#!0 zljZF(E6EDsP8~7cZQaxcpDQ;@GxV{xolg3;*3Ty=EQ?+fTG1U_NaVp|cU$Z+y3jW{ z(|z?DI^gPItLj?&0GX8mdf8NJGsyE|Uf_CS=&}_lF!j(6sK@Bq-np$zt`&S6Enrwy1(O1sO9M$C(puV<YGW1|+kJwqpW=b+ zw}Hl!ktQv5CK>q3_X|Fquv(7iw<54~>#}E;d*gsHKN`#Shi#}TmeRp>cR8f``GA-%pQX7F3Y3!`lsn-HcGIUqP8_0n3V)*yzTDuXD zgJ_@4ztdfq;4D2xs5wml2pv8F;C5clGV1{W=c%s7<4LQ*KZ+1*Z%vw!aJN7);!RG| zgMdJ%kpm%SCmblCSnv1JOAjE<=F*`#IhYaru5fo7<*Zgiu5G6-WjcXFogdk9?bF?# zz2OBf$}d;*FW}N(FUl>+`K0h;UyqW^k3@)FV5?{vVzpxS$(A`78OcPF_6X171(NWE zUWno1&Yf7U?CMsh<=s{5Z*D!*C&`a7I*l^>8W5h^a45SM1uZG12pgZ#9xZ2C% z5858r#1^`TT7;RziI1_57v*fI6oEu`n0#Nbef}zH+rU`fT||U^$X(jr+!iK5e`c`>Jc7s|@>x@X}_4PsyuBUEKuZk9^Im+^+c zwE7}@=|3UDayl3-r=>Kvt>q!RPm#YQ6E49dDl&CAEqhMf(MIuTeXYN2l4{C%c_opl zvya{N4B)`h$gI;r&1+SbF7$2Ah|UZ&jbqMPzvYCL>dXrjOL|v(i?wj@1k+&L$i(k8 zuSniJ{8q?WUhNF?kC2(+bw54EZZ?8CrFz!G>K|$I4Ih2#@JJ8DeW_S0ZF&q(cn8UwW{S(Q6r3`$PoV)l!TN5y0*>^<`8h%1*#$LgR@mC|Qf46TFwFV5%R@<@I0qKSR_AsGN3DdNai))~xMq$FdRV463W zza5e#@qe{W7CCn=C+tgq3|(r-<#B7DRx;d$1yo+-M2Mpi>mQ)N2LOk_H^ix{Gu04~ zD}GLYuHXfvmL~f{mYT0;lAZRkqRrhzyR_d)d1Q0yqr|Ekl&vo9wY?r3ocBw+m!DM% zMTkmq?-!{0*L}!0yf;;hO1a40AiKe^X!B3NLeUpb|Jg>@c^m#W5+4SGeoQw4_n*bv z3H9Z_Asfo9KorCMIJ*vg-{uzLn*+D}J2gc1H#IbZK>~mItrJ~Y$7SWt{1(djW?rzR zZ_5jsDY^X^Pm{~(6=RZz?~da?nN=R2hx_k$NWulso=;y+N^j+w=`5W+W(Kz;mQeZm z`Af{E81X4aXun15Lfr;`qfPojmpDQYM20OZTI;pR>1>2ZCW98FJEgYlG&k1iab#m<>^ykUuR;r!ZKF=y4r zP9l^E0jv`2D59+7XR$Wq3u?~mWZ6LI!FRyz%I|V`soljv#r$C6WCIvxs&Q7IPce3-ZhpHv_+z`s_Zpp%u0G@X%9{ho_&&hW#tB4%}N^B$0 z-Up#dQ!WRhU!}c8ZY~FPDPdpkH;%$J)CFBW&+3{wKyJs6(Ikb2W=rKHliCY#dqqtl z0dg(TQ}aD-$n@?+i-0xW?6S3<<1nDwbL}t{!Wd{(tR#6{cLD961viBY<6aHGpP1q1 zyG2S>C(N+UUtTnS#X0cdLddCW{&Pwz468%p-Z-4PEzaTG-p$Qf7{5oZliWV8wk6g*-sgm3Y(Q|-&a zb=Xu)?u}O0Yg|7-Hf|R~EfUbYZkj(e#PTA$twiYf%!rV1S-`L8HIDE5~NfX~SFs`TG0(TOm2$Lxg zI1W@TGz@47{j!|Pq2hH)Jf9b7V!S6mmcmAe98Y0=T2Ug9ekTJYAoMT~8OvZU7oe@T zJeIchYHErXVXxNbJ}EH5&OejU{O$=3iX_*TcwcF*$Cx3q zPtDDRzjf+PR0bcciGQ`_)qZ z=3t|jkUIV!7G8M}ed1ZR{#~0+p}&n*{)bxZvt&VGG(_aO9-)bDh& zVr;hgJsPiZExD&?t(UZvau;hmb9MBcl!fnZpP04Gd7xiE(B@k;BcyI_sA4g)0jXk~ zui0KTgbepn9zM!vzs|caUrC-@-lkQ)YIku2o!PAMbmEGK+m%;K| zwF>-{oIfE@MuoCqJ#L-I(!%!VRg!`~KL;rE4+XO)(O7z}z0{UZ6O#;Bx7~1iubKeo zM%nz2oXDCy#>c1BuyzNQ7{c=vS~7vqzHa`ym*y~6nO78PBQVfz1%HIzcfqG#z8b%< z>k%b>{Re~DV%EQTse*4sq~MLV{iVaLZB>s+yUok}Flg z(ni?t+k5QMfe?RS0Eg@HC$7iiPt!JI0xJTU?WYH|GzgL;o{IZxA*|;0eHFuYeO!G< zT^a$>D4Pbthxsw+hdh7ldn(<|a|tIBeKNrLTcEzG8*S$+H|NfeE9Xibv$Z$e#UVs@wuOP7t4)f_30HW}c zot*BH!;hq(3gaku(Wd0>KGPy`!|$N9xm@=NqiUBR`v#H~zWmXb-veGzo*D>@s!gq= z5#cY;|6uUrzzEW(MN#nk;MK_$*DB9B&Oq`7y<=4W|2^VA5IP_7`Te}%!^4AnXn15~ zFSk#frJiNg_y1K2vO6R_Z8ji5B&t{uthLeg!{C!((l2dbDd z!Dl#)&JWzL4L0{a5o+J$NS;sS81=+hGlKyXQ2;m0N5iq?32|(`2UV^YIDaX7`QxHS&<7fBgF0;PIL}uSOFQDxI0`G`aQ{Z<-y-MP|{1P-- zphhu;Mh9jKx6TYD@U_>HLKDk*rV>F$)u{b_jP>DR*YAu6d)Pt$d!^2#S%+grC~zu? zOJskrI=2ib!$UA?5bmS8chiVTBczH05e)C+dt#)FkVkX$DL6s%aEly>^ocQ z|EIz|kM^+mlQ(+#bUxIb}?BuK{p@~Q+!+J%)ZW$6k@9CCDA2Oz< zqNC~yef0LIOF-3gMw*a?n9iU}+tRg7cwT_!m>Y*R@882tT8T+w(aaJ92i4)Z!qcq0 z$<(jwo79?hZ*%(<@7u~zx2B8AzSj7`iVeEdf5)DQ4S;^d*gamapnBCT!(v041w0cm zDxe|-x;3cAf1rGGii-g03BU!-a?`fEj1gxOFQ;LipU?{X!|vgnn_XdYSkA*Ia#*Na z$4WpB!G%b^tdfCx56pj8>h_Axm=^IxzPW`tm8Qss@3@ZwE1>EoOTN(<`CS>V1^45^ zA>d~fQ6P}h3oriCw&}!n4~0eeZy|rIMju^NNDR0a&eV0|{{J>f<x6gP?8 z3r{H)fX5O>(_=Xr+8nOgxpJ0wS&x$J!GO?cJD$fe&!u+&xTsh3l$V&$X)g9y?SPEiM9K9z^3sXSzYky8udsFaC(kNy$+4=hFNu? z^vlsWXG3jZ(+#g%uZ;9rV*I_QAa2s5G*Gi1VBj)6x^gA`o4jj!Y}o~KZhN^3T{;~t zevn0bD6^JNKb3*G3)D&qoBQ=SzLRj-%$&QS5a!=K_!*$RR~^@Aa$00xu(a9IN5A}2 z07AK3%Iwac;svg%zrYxEo6Aj9yw*s|5XpSL%WstsxYn1_Qb@C)J$Osz4Fo2Uwi+w0 z%dq!9Qm7Pk&^tw)3OcKR6uSaj|^O~;)BzGnZ% zeR28_I=wabg-oOUQ;kuQFvj;v8N||@m>i@K_jwKbH7kxTkY4&C@|gLVs^#ZRGAQ1_ z=`D4aPv>d!J}adHxo2h3F9X+4+6~~0_HOL2En4LXr4BmwZjt;NlRP6o5xAC9$-}x> zVV>Fa?+yd>tL|6h=WCswL-xhtTT^a=O9aoYQuHIh77WtiuSWH}DEDCYTLEbOmBv@0 z$Nk#Q7ds%3=Zzw2|M;UK#L+=TLF7m38)OQZeaeVW4aD-@AYpy(9`*;_H$ALWJuzDb-tCS)TUM`OCtw4M zm#W~89XzW1HVrz8$1drvT}Y8l8>hK8Ba#T0L!`Z9-ph}gi*1CKv z{S{2>4R&D8357@!~(C>nkS+zT74Up=i)=?AA%K?e#h2 zm}fX683$cbD*2_XqP4wZ26qpM$TaAa#lR`96wJJi(fcCGFX z8a4|s+|2dv)(rkm5&)xXlgL`R?RV=%5x?Wpp3&YrS{~QS`zqyzq8u$lhY=PLpL#e^ zq0;oHjYZb&hLGMpIUqCP@^eT4x@`Ti63!zbqRxotiQ#{9{pehO{e9gkUKE zvpd5J?ab&8V9}T?`!@0BOXs~0yh)UzFmF)b2Go6g6rX*JRc|Z>Tt^ix-vUaZyfK|2 z2(DLOX-)ofn9ygnx7DJmo_tmsd~%tw!da$*AGB?oW6F4=9sc-iN%GaZ^z=gYl@=Oo zMHLs~Rv4D0P26zQ#Qoem;p^#nqj}2Oa&dV+$<;*S(Hz4%UMccfHb499U9sPd_ZMzx z*d%3L!5C!MSu*7XR{$sY0WOwh@{D1^jnc^;o0!UI&9O;#w zL&z;+tmg*{l*%it<7q|pRf=V8byx!}pWck29{{j`KcdIDZr2&sK_S5hH#`ULE!nqr zSRts}1v(AYF%|*GDURz!Ozuyx9eRR;)4fG84(};E!ilw{6a{TM$<^2&76MS6XSz*h z8C_Utq42W>F_cN1A}c{BV>} z{K+;;`V*tG%a-Eucv|E9X-cqxX>M2y{U1pzcM1jv*1=I8l=T8OSHL-P!8{w!r%C(Ija7RjYFpT2>Y)E!dxIchW0LgWLZ(`kr! z%&h@7yjGTXO?}(M#y7bFm#Yjd@=nBWq7kFrfu5-J{5pIERoUuuQ81Eg-kJAtI(!S3wU z`o`H0j}4*?>#^cFLLUm&ce|^@zQKC_wzptz>HD($d9bYx|o#TU-FoMJ`K3*rT>EF=13GFJ| zX-*+au7rs{HSJj5sr_CK%9!R2sFo1%dG!rERLP0v9}=3LP(cqYBnh1a#ss#4+rC&T zuDPOQJDbf#TVan~mWsNhktCb5_bE!W;$c*F`US7wTNZW0!VoMa3pQyHEff0E>;>i1 z7Bxo@^FKzkGGkV(CPHCXoKMD27jsu`I*S&ME4NzI3K%_haZ8?PeOGoWb||XglEBCT zs~vRf34_(LGUf%b@tFQpe~8xWd0S#bKAHQhlgbtcJK~-Ueii1h5I^h2+N4YOCQ+|A zGeGtwo$Xp*rzGNa3=eW$=yuz3EZ?%Uj9B;!FcTIzVj%-i(H$?jzN0$`H&-oLr?)y# zjEN5)hT}VkE8e`AKnFj}JLg+>o5pvSiGCr(ZQ zwc0S_4tzqEac{xrd>{DH&kDZl7NxiA{h4GUOYBlttKD~M;rIM}yQ=I2-|Sw{oJu;8q;MWhDq4BF{M$_yc*~N%X47JUa~#*1qbDU7W)#~f z&Yo@dA}c(e36WMctgOp=>w4cenO>V%R>(g0p_} z#@sCOY6d^>dj$OxefQw^@JNlTgP*y-Fvgv*U#`I zT0IjDtMXVDLF;h;{v3^ZiMh+C+vxWXD}WuCSx|x(V>vZ-gF9a|39~b}lUKA)WdEQK zS{jxZeh_;?`+){%MfW`n^rZ$8Kw!{B#kKl(0H6TG{x>Jh!{`h5cbJhJo&`WCqM_7c zjzhb6`+tfa2`)msh(S&XZL|*;bHLgwG(;H!iE*A}IMn7-@jtfL$Ol5_s%;B$IF(*c z`ue7zcaSHy*3LpUPr+krGkr~%Q+V@vSHAT|pxMf3{~7&YSRVJO*0eDH<_Z+9FDVWz z)=8Z>sJ#LGnaGH)`~l1gOgAuR3V(eewuwFd*AWeN9R5lWs2xiAOj`<8-@nCSXpxDl zd(<9%AQYH{c!+=>5kC&JqFePa!Hltg+L90k@p?b!?j7kZkY7HBm!gbQ?L~w4qtA7x zKxHpNhQj|DV-55=bO>xI-ytr9@|Ha>!0z+$=F2k`srMNtP+JED*;j!G1@xe43OfP+ z0q|C)9WnWNS9ym($Z6>>o5&Fr42k6XKHsV3EoR5PH);y! z4Eeu*(@fV*G&)_Bb9#Bp8K8!M@4F2m&I@0g1n z!h!h5?kyII)sYYD&jtbJ&zW(bSAPoef3HN~3vzzy>2ztWLJc~Tp||V-nBD(>h>XJU zX7!+bHp^Rn(D49WWLq7inUL@axiZ;g!`dx(=e4MMc}Fs%Ooh&iKswAP35DE4-08E@w@=kW{U?v z&Hlm*uvsF``AQznUOt-0H)n19m-tDNklQwNwJv7`#iFN<=So5C+55jDdVu zD0RhpqY1PFC*$7wf{{;p4>+{^t1KX?=S_vded5{kWK$I^n3nMvhN2O4BJ{7_la2LD zA%tCfdVVkY6_R~D0EatM`IZ2J%Tbk06DMx3Z9+Xw^RwaEb?<1EDoXB*O0e=<GrQq{;yRVg=UZV>*F`l)XBQgp)3b*u+|2&n?JD3T9rk1h##AsPusTPaQy#!SbE@ zl<~@$#*wcac5(!EH)_wl8uREMTO!89J4w378Q+~(8BL$88MgFu{;pzncKD3;<=ny? zPw{N{NKe@UD=6(JL!z>$zGrEzkXmDmDh0ztLlLWP7k3>ucZzXTtdX64`3j@T_Qv)>l@k&&VgQjBq6utTy{tg+X3Bt<{1;xUqx`s% z4fCZ{?23>foYMltm=YhN`*(H3?@bTpOQI1ik6!D!sizM!UG$mC0E&(k{Thjnv0BoJCxqf-G0XZR2I>A8{ZsybQ)2EtZ~S(59Q1ZJeMfkcDVV=j@9FiDop*)NqY z>2Jh_Q)EW5tHQjN}ciZR%tdR(Wtm8N^ z;yu%R-?09QeoC4DQk#WJZb~gnxjcB+#6*F0j%t~S&z1Mvh`A5m&2l-yucpwni)DCj< zGz4S&UzHX!o>x=1VWlYE1R4$R7~+xSW<<{;2c3n-xU9|QwKx~PXeh)v`ZA^2HTQY2 zFOQA#9hKwFjtWV=fTWS%k9sevbU81N^*-WoA;@bzQf>K0bRq~CU84-?$m#!GFep;{ z{&u+AK35zJjgfO60^Jfv;Io{+U_RL`Dl#0&2PiUrZS$a{)deAy_@?zwc!G=+l+<-3 zd5)s)VM@R3D$1EXx@yToB`gC%)U@Qk%Env>?bi~%Hoj~*=pOJ$-|HI$$?h9ey}Zg< z5B097OiK0*sTmQGEw!ve+w<+v^haNk8!hPpN^JlQ9RA%^XI@o6z7UExU{Q6@4pL|% zYGr-(;1{tkw|JxG2>}Av)~}#04ENu?SKSP8e15`k@ViM>q8;rI>W*=s85iF8S2t(k zF2KQ&>A74?c(2MMzlL+$ur-^Ff&-jT;Xy_%x@2WAhc#O-h;}|bOpJ6=!p%N-y~G!7 zPW`(dEUufCyFT-mn>B&}w-lOjqUA70wn@AQPv^5T(bjPz|6YCFz*#UlfzWmrE^q$B zkU?QhigAAxs;)V(<+Y{ayYw-`$K;TQ1ciM0m`bDe@9@u#FQ6-0K7Zcwa~&j!Lc*UV z*((5ow%h^uxk_}n%4*(YK}w8|@kGroXwZ7bwze35nZW{*S75;J<8vjp(MT}xLdJwS zUPVjWvE}mj(DB8HGfLgtNa|H>jDKklrzx={@%j`i5ShU&41K6R#Bgp2sH}}v=D58N zc~FUF$zt(LqJ#L%zZhu&Vun;j87t3<@*tHDpfhM>s&^-lz}QyDvzFNXD(({+=!1C! zl+h9bHiuVye>jSes7dGvTuPS@{N6*i?GTljDc02-J0BVp)k~!#A_+7HknqB;z}kIV zBD4wLbE@Uk9DE12V2?pXO$9r!C${qr*rF#@P3-R2#~Ma_R#paYpiw6O?wdBd)z z8w>+?=iFUHt`Xv7aVZOUOS_kK9`}Ms%Wj|gR+DnQuRmzQF__&(fcF6Z5@S7Xdm^S_ zD8WmrMPpZLkvtMzdses$ANcUA3~+ryvxN?<@aebr@cL0>J5j1iAE<1qFR#iILu_s~ z{$dIMP2rbE7k0&@WcSKiImLi4fa;=xxzwjfX=n9SwJs4B173Xa+O5Vwh5~i@Z=F)W7ky2 zIziQ^d=L`&AsJNr?J?@0$B#7FVy?=j-5X@B2DkO8L-4o-imyPeT%rg8ya?urT>g4~ zFGByagivUKYphL5v;fUe=V&`ybcu)l!}DV$Ybu~F2w=e~S3Uc0EJQs+K(8y7-)hyB zuX5cPtDD3F&s{qh@dnGNZf2EX&c@!|EHz}U1xPAjRNRs7&yf+nI6Z9-oF}^7$yn6sfGSd-8%Q~d_cJ}R zKs7%s3by@dk4b{q;JNOg8{GOBSr%k*oPAa4?Pp(k-JY8Q(H)Y<;~+#!d5D9@7kHk0 zgB-K<|Ac{G&LFlp;`+y(-0^{uAj0;)U|ZSTUOypcXb&obtaR_kOs;B?la&>Aa;nz+ zIzR#Ddj&YP*T_@;8h{|ENyGFp;16qjy6~$1PU3~p?$XI`6JQR{ z-2k(>AsfnPZUmN?Kf5fq>f_k;#QC}D6Wi}|)iB9IAT9+N%3E*usF0u8;=gMCBvZa*ZI_D%Z;t`#R&5ha&r5#64Kujj zp6LzxpR9R33X%iLfi03`zEEe>d%YnvxqTCZfWwE-7LERSA+bBKHN%y=_nT5L-%ie& z%{>FY?$odTOkjY&|Dwb82dfQ^YLM6rt=K3< zp`@lPC9r(hJYJf%2arFZL*sFOt$h2$kssSSXjh8!#^j87BD7-QofW zJIN+{s5Qh7KDX>u+ep_x7W}Z%0yboy(39W^U6J!ghzcNuX<&MN)1O89d5%7Q5oDHY zJ6*EAay(y@xHo}5m)M5~eOHRs*BNLnSY{YxDKq~dxg^n*Uqd9xE}%rOK31QF01#(@ zZElTUU!KAI3po=oMMvc>n_x=j{s4SUy@^@{qLuW9#5(PDD>m(1t4bWcsx-l_%K>uQ zeK|*WgXQkK0gTs)+$B^>5)y zgQXXEj=IyaKg*}X;~l|Re2-QtDlJfe@ztMT_vm~WFE`yD02bB_!3Pjjm@xPAn&OS@ z4s+scHD~V3bf)k=xadZNXJs#Znxgw^&OQNh@v&K1l zEYrwv1zC7O#pVYtoNu~RH{n)vQ`^m^Z(64I41HBof?Y+^{#EKr@QD%8p{+;?XfTPK z?xDs{Zai<3BUlyq&i(4G+?2RG0O9Qfl@dE?*j8q5_J!UcdADg_k$R|R$L-Z_^`}8=;8ckXt!sM&72jr4K5u#dvkv>rN{}*jJ7C62E6_X zx2CP{AXNAwE6G~d3L^x9U4(q8sV+--c%`s25V>gTn=`wth?$gxiGR;?UM8Ux&cAJ^kR-rkO zEv^AFQh&RG2X7La$VEY_g1+x2>&kI)6EGRD<&pw#rYcgc?>-B(h)Xw-Kso>A`+B`q zKajgPP!MZ=m&}J!#BB3UJ-4!IwX=@2^_QqgJ0xDKi}Z%}T4Lh;bVoWb1m3IqUPz^H ztAl8zo77ZQjlw-cL*f7Tks%(B)Gc=cXtmK9D)URcXxMp2=4CgUo|=B z&OLYLn>G2v%7WEhRbBnoe)hYiTaZNS1iYws{s<@sS!M|^)fPYuRe|L3J`LPUI$`hW zVscPtR1=x?;Q{rMY%<+V-dj?`)s&q4-O+b+PXxHB7xZ!V#d6EjTtc)dEEABCRBjgb z%?QxRTle}(k9>D@!aZHzhhgIQ*YiQE!zmzBA4M7FmFT;;{mAhw_4|J7GA1SG`;DE` zLhJa0p{pi>1+2i@)qL$oIu4fU%zOV$T1cP3#q^0j`vH+h$C&$y^I3hh0n`=TD5p4c zR~7NYn-O?uvbfX!%j7=Bl~PQ<-Sf` zpHM`9_Vs=FV1Iy(eCb>}QywbxQp++%Kst^3!tn>X{O|>;QE%C@0)Y;bK-l2@nX80i z((xWOO)R$$dm}~PH*p*_ZHUXWV9fnUEiWEZ49%*JE$12|+WSyOz9#i}KfNM$Frt9C zH@mAxnDnlV&qNj=iMPXG+l}A^bXivM9@z?>^||YG4u~0n&oG4!v*HK*CB*zAK7oMuW#rD%&=_P>&>!F=F4-O&v&N z;2(&Ya@=RT6p#_cgO+7K|wxn<>~`xbCsfeHUU2ZtqdbbjC4I9aGMcxvu3} z-s+wg+C&4%=%C?pSj7Rg0k28L(xt0LEi5eT=(rxj?kKf>u+M-VRA_EQUZHmg5Kav_ z`g)!H->NkxWg_M)1EbxrVRbgwvIV!mj444Pc~B8thHr2n5bU>HZ&#qU9_&~U;*m&u z>>A(o56kKdl1?~YS4`PG%-d#QfzrGHXAlpj6~Y-c5ce?i~e{;6kjQa!iM}Lp}|aMeqK5%K5M!`WS7-JPRdT z-lzCx(eMJrs&IeCW&JqII z5)PI}q}L^0*{{g-q!iMEf9xg1KVqZ3YNelFmu2{j44oeGf7neh#s0G>u7h%xUP>a& zsDS1W+2(l0ckK+Cz|#M+lkt1V8}=r82jbt0#85Vt*3=6P&~(4vWHA5RAJ&fk?dMs} zJ9}R1s~kOoO&9~*es7*P<#fp-A5|ZbYN>7+mi>qWd~+t~{!M)KVVgY?B-}Gt?G|Cf z;4Jk42l;c~jT*i3*cyzFX;R&7e7f5|nbi$zyFK6j^5Tjm0SJAvmlDqQKw`f*>f%~& z$ueG*UiNg*D_Q{!(XpKIlh)ft0wlS~%6M%jgmF%lg6GC}adFZ5qL%_v zG+Z|b0F?-h8H^3T3BI2k3sjeI?;w8vMtqKfmnlo%3;`bs>jV{vywVRlgYy;PEyDvK zylPgjxSn^DH^yI9gHlhbvEP%{qM0WdzAiuxx=^rdy=PLz4MC zUA5!)l5@g<0%#-m?n>RwXxEF?Qhx3}l8&sxaL*8Sqg)s&YX1yMTjl^X1e z646pAmgX|rI%(XwOWF=>!S{N$HTqsQH4ex&blOB%t*N7yxv%l#H+L)NnD7G*JO$Kg zUV2GlaKBvPb(W3Zq}t|F$V`_pq$8WR^)$5dpA6buLq)1 zu?Z8#;{0&sv`yR56+x2w20fT2icTihcP*S3AzfxVgU83^F?vpIxYRgWh;ok(&LPf6 z)rUGku{KTu^Zc^J=MK-@KU^UpCo2jw>R%y(HIT|3pW!pw<$om$g1UdEf z?F_5@ckB`i14)2+C{xyg1yaf>%##V`+qdloxB$u})J|iVLTFFSkFw)AHhExwZ=;6TeiB45H1})l(LeFK>36(UcAmlCl%V)(s z6D2koc5%jPzQWo`hdq~7p^A&&#nVQYpy#j!0b)JBix-&;7eI0%%qR2viW%A4BL^NTt% zyHox$DBw+0GNgp?t8pj-jPLnAsgJ($RadIfZYv&?{P!1U@wWJgPN5taN78Hk%<6YSJFK1 zLVsra#1^qM<`H8?1k7sgmUdQ{sTbD~$BOiHRQR(A;uB_=bQ7%QOwK34w(}3RKd3g= z%TJksWGp>mPQ9c(i^5>Gp~v9cyShfk5PrpUD#RnPLS~L-G*O^hfESNuTFGzUaK@Q1 zVCGn*&lc!*RhKz2gKBsh7562;+g`7elg4!|3Mli_sfxazIr9Sv^#SC6^WTxbOm0Jf zLp21O8N^@R^f_$Tx~Hp3BHRSI0eV4MnksKPH4f*`KYJ6qwnJsfkk4-0kvvbf5QY>qsl) zzW3ha3D}>o2HFqJEzA{Q|5!Vf+K!i+0LSGlidg44%n$UvWKd`*Apf>TUolePiX%#z zJvG27+fWDf$j}gx-7sR@6)W?(<_E_Ta|Jl1Ifj9DwdOR;g-|-ZJ=-sVibDiyJHVT9 zN|dbhZnG+&kZ9$#4n#OigvvnX5; z#WA6W*m2j*ECFpK!IUk<@<#gXVJSfJLkeL1{O|S+p#uEsn>;6rnDVrK|0Q0+fvU@a4-ul@_izt@lX#>B z-zE!olWZ&-UBn+aE8qzXYYT!C>rVL|3b?$DP-R1>l^UpGvo zm`<4*#IpjB6a6$#?)9HS1*_TfnEy!=uTk*(3(x|H*;wI6Y6&`zZiQhcUZo^-TdfTr9pJCx8FOpS&Z3TtBGe~yn(xQ-fOp@6m%MA5`Gq-|lS-vttw5!O zar%46+>7KlvdY5PS?C%8?Wtjei1cwc;QM=ppV=o0B&vd3sQV>f+PggR+mACdck|$; zt+z3fCx$jkL$9$C4W{0`wh6AW$e?rCH1j4BzhtHyp*9(80YY79njK`Y9Tzn-^ zMExbgI`d_yqHii&T2dqWHbeEMi>Hy)l`2^Ycx0 z*l+LN8{qh;3oN;8J!K=CDIytuN3|=)*;+FeL?Pin9Ak&J3iJ2)%k_cBXJc5(MfC8~0NN2`yuoDORvLef3GYxR_=h z{r}Yz>>A`C#FE$eckSBC6reN=)D)x?Am6FQ?>}{9_h8Br$60!8K4hHq!!H|55CJ~q zCohlEJCJP1D(L>N3{j(Rmt5ZjUZx0GojQS+l7n+0a&^O#DaN}>m{otihgEMpIp7_( zyqgHs;ArCDhrU*|?vFwMjfb~j>KA|yW{di-z@Ew#x{!as`YtEb=Po%u$$oALg~#dl zO0hSuHQ&SPSdALNKLFhpwhj&hanm3xHK;g*ZmqBMBTAyJr%Tir=^acmDi~cXE z8oaX;sx8X+g3dtpLaA1h*QyWuRESpC#5OAW>7P;)mA^1`ofpABG4=QM<7FB@MIeQz z>ofUXdD2KoGm*2iv(`+pI+Ji(B!(NJZh*d3r;EQ7UUARr&1Sy- zuk)`MLq*gOS8Z38_vjP}E5az!>@v{T72DgDd?m|z;thjRp|S(ZyDyk{CHFvMhCtJz zsgwo?-?8a;$a>i*|2z1C_oAWctU|uLm;!^TQ#{mKD_n>Dj`{#6xOx~wL#iXX%Pwe7kKXwV&~|JaQ71g z?;W`aa-I4j%Jm+Tj`Z#c6!*@$Ste6o>!NK5rZcMhe5f9EXyEWSR_>kl+q&J-jsA>>iw9XY z*?NCJS4QiqQPa3yuJWw3y%{W!Is8ot(B58d&Ju)+P8ene#Q-gQ@wUlVg~zy3FX6RC z9TTLasbAk&j5D+o5`xga_8+t#vi%u^_MxsUM2Xeb*KG2jNX2S2s1|_gZBw@p<3PaG*Z|K)>EDIOPwi935k7MDRoCC z2V#RcG}=MAa%c$q^B*dF{c|C?M55=MGWx<33bOJayt}kZa`1_U9d>RHo8nqt1ciN@ z|HG_7Qy!eRW%urqeZw-NitZ)2p8?^*H%OO6P9m%EO#qv{)Qn5tRznx<6fju|alzd> zqNl@j=8p6r3x%+|I47E0weU2^76!59kp71Kk^POxGU-5A7rZ-Pc?YAPio1+(M>NJ0 zZ^?@AVmkn3f00K$oI%KrAUhv!XYFoL@0ptqD`IKSAx}?PSZPUxK}Q`fS3>+FV^(eG z%6zaKDplzGwECG+ts|1kOb)bmrU(sN2HOppxsho|PxQs2j zOWYr-YZVnyJ9gso*WX3I5jE1{j5^ET6%~FHdUL)Nd}#?~(RBNhDf7pt{briY3C+Cz zGxWnJd+ZdiH*)b>TBjSuf`!*zZAN1qXL6p} z6lJpYeB`06fGe|L0uo@wD@1etxcm@&8PB5@oOxOmGeus`1oRxH7J80>cThXBSpcnC z(@eqTcJJzh3uPbJ2EYV`SC#bmx~QB8Q+%mP7JxgQt$&YB5L1)WTd7-1p5$2Mk30Kz z`2OZXFr`z^|Be(8)7+FnS6sd=Ku#Cv32V< z>6m`30E)&r&O-8zaLC18ZkPgep?! zLIvnAoVsowg&2owZktsOr7CB{!G{Np>I2^(`Rt+<5$g2uPt+bmC6;zIapQVsN(C#=u3G_p`A8Pc+`YYfl{l`dKz}-W44Rs&*WWqv* zTmfhEm+Q|RA@1h?h1e@=B_$-<{|Yu#XbOWdm}L#}P`1Q6#`f3^QC#guoN3RB-&R(G zt<@7Q3ugJjAZL797FC)3L0ROx$2|i=!8FzrmyQKq!JXQ%igi zaC|^kl2Gacw%y30l-8P=4GVYyFAo%4P4T;f-2gVyuDY>`xc`Vw5}>YuW-S2{$Eg=( ztWV6SxK3lj#QzdxSR= zKdN6>m4po59+Cl?@x)dGo`M)*9zKokZiM9kzWt`Xw$0ZTo#jS7P!B+64=9#VsF4&a z-cz#$)idA#KLrpzuZ+zm$16gKI{nos#2fy26t2OL`LD8+KGBmsj0K%)HjY{uQU zVCt4X!xTHDaE1l#eD7;eJJtBhl85v|QiB{Ix1~ot&J&PNO7(|u>-?0QW*-pGvrP3BHMCz)@;pAItb) zIOvpEcvmD|N_UFUEC#fCtjrmtMBB8@mFtO$!Z#A&;}=ieyx}ZqdE(^0n$@*@dT?T* z0?D*MDMgVISt4G|S3LLHhf{8)M|%lMH;`&hLm@N^t?fOlNkD3yK2f8|x`yLE`}Q|b zohlVS0;8gu6;z6jTV?n%87gqDZGfR$0I-HVC>(TdV z{e@h);!6k##H;PghC-uQoPI0gTdqYA4usWYZynC&`VcOA&Z?W;wqH!Si~)i}qtft= z$RI~t9R{dJ;$5)@Snsuq{DS!hxlyyeSYYF1?MD@0It26G9VSEs{FrV$TuGjHR(y71 zFr|Udbup}O8X(>qSbe_wEW6}QQ0Shp>10v?P!BVh0fZ=|8mi;=_!Uc2FBOH-nT5J- z*yny>mORjI{q;aeVdMRw)H#*lTO#&O5Lxe_hN==`l*^CN{eF=Aqi#KPpZT2Xo7ZJx z;(aB6B-|9N|N_{V&85Uob&B~z&GgL7-~*b~V495l@# z?hILi$Fm#_|JP^L@X9sNfo+5x@#9~h_R>@}4)jr-z)a)u{msz_-3e(W#WKH+;Ed7+ z%EwbW(xry7umm!zvorKUGPS?e!}gW%bwd6KRz=8kiEqtot2AgD=#&CknN2NwDTJNL zdIJg$u4mxG0pUh`cYuRnIhz@_DK46BI0ZUb_QiXC2qpB3%N3-#C;zYERR?^~b<&l0 z2>*?=|I)#4A29in5sIbCoxK0${ho;PEiU^Bt`1f(e&-l1Vi1v7>3}{5+tLH5Vbm57 zD}Sv-Irf@rK&zg~pPq@K#K!*IXNN<BFIoac}Rcu4o7X9*<#E1@Cud1+gG=MCRabbcVOZxO- z#DQjd|GHYQ0W%eY2Pcp%r)ty5B@1Eh#nAlCPD)OxJ*of4XOp|t^7xv)C!JJ_87*0t zB_yHhi;tRT6v0FW@cCWtNG%@2sfJ&#Ud{BGv%J?T{N<~WR@jc#v8)Mh?%3lripVDL zea7>BRkrueSVWOBFd4e>sDj!l7|2z(Ao*Ezry*vJ_(pu( z2*+X>2Zx8xv_MY6dBoZ0QB2ujVIZLT8Xo|03GG)m9Y73=i*+enoZ}*f4~zvT^*$Wp zSK&)y$TB)prvM;%=)EeE7$maorcx8}f}H;Trw@yykNshP(vrAaVunktfoVagwhClN zwNXZ#ZGKkqY3W+-J@akgr9HFz=)*JQ1k^ov%f*b~#-K2aqE&6e#5OVbbcvx^jF~8F|dq&O`_g)G8v= z++Ew3?TD21I#qdvG<+`@K^()Ng#7tco^HyF?*sF)6H$u$PE@Taumj-z*drh{!z4`- z3`zwJ<)v8=i8~?WbAx@-K~CTanx1;mvLsLbSQ9Mv2ePa%QST>*(@z=@ot1fE>sws` zYlUS!;Var?&oF#(F4bZA#Qy%dSN@@kuM(70`G*{e2g{w!R2Q5FU1O`vJ`4WHzzf_1 zwsLzZyvbt{zU_|^qxq5T2rG0T6LvYL2hBVJL8ENiHQoOR8pThJqK^5uQQ`3GFs?cvR_mPoRrmIm0 z+HwoYdH93$MERVEEETc;H5(K$g9^6u;0n0DC;TJ8)c&sk)3UCb6tL+#y%*D0@rAi8 z!KqXi-_d`DCc?ienT`HYCH*~32G8}~q2rNA^P9=hMy=+vO=NGNzx!$*O9X|Qu#kvh zN9lh=|E${W4r^&t2ea=9+yAYIoULQ6_}(|86!|MC50(G!C-W$g`%4m&(>GD~H@NGEs^V=X+mix_8)1fuVDxf`IcG+(r5;tOwlPVQvByg-i+{F zB^-`?sWHP+ZKMZRnmP?>E)bpW_XPQZl$`(S%i44S_}yC;{56v&T$i_Ln-uL0I5q|7 zV=dD4gOEqf17>_Ts3y?Hjc>3Nu7jV-sOsll`XN-DB>+ESJfKXv>1GGgRf}5cAtl}R zn;QFD^LR_>3aqFic&t7wzI&X`U_6@ViD&QnyLUW0;1gC1xe!(mw>S!X<-r`3x+cS7 z{*902x$T#YqKjj~22nQb*(>&?JF)_wPXBBTy-!%b4rNnT_tUK`R)@+qX&KyZGR8<| z*?9I3mXGA7LrH*%!nfq#Ckmwf#W75~f?qQzwlmS@lpKsZyQ1Jq&2H`6kO{d@$Df@6 zbMQ_W>#hn|$?~RLj2^hlkvMJ-To~%r!unaF?ZPx|7*y~zl!mBt2`g>x-|4GV>+%kc zry_$`e<@1r+y7D9g)yN%%tKD2XF2M3x}>KfjW+PhAjM5#7|LKEhPKpvk@KcK_J?JU zNA0KX*GL|h*sez-Hr9RdGI^ajH4Eb-IlVw{qP0Y7@%`@^Va$cvafQ*fragEu%M8yG znL_|7;+E!cD$s^FyEg`h;518ncDJ2@|A}JVra8GI0_bay2t{2#H38AB@hgf~pMFL7 z*Q{E@83%?$P}8L+i>6~e!;jtFAjot&v9F>kv57h6D+ z8qLXUyFR-S24A>(U6HAdQAIeWBOefA|EpnfC$&_QEgTAPdAxiF$2s5|p-U1y&^7)) zshi$G_LWWRFaFq7>yM$W*%6N90k@zg2)|G6%7G4$_x>qGk&Xc7Ru%y42*d$Sf2CSA z)1JIQdr(`Q@=G{3=)e7d*)1pzNV(QX#5&a!yZj%8D;bh5DDF2MM3MXeg4YRru`=X8 zP>jwr8}Jo2)gw=qUc;4L1rWjh=IPFpEZIAh_z z8tIINAtpfZJIR0_@p~B@th_w10Ajd)55Z`<8{ThZ7qk;m2 zDqjMG{!K@|G-7e@cM9hftc$4UN09I)95;B<#80H@z+{U=WM%pgh#abw;QJVS#QKW`P?s$~Z> zG9SjX>IwbVV+(#64U0BGpKz9i*7(fN2Mb2O3dqG<{aYh5aOW)d7jZ7o#XQIG92oU9nI~(x)*1Mbl<;+%1=^v+TG9}V8D6KgPk2#iTW5dW zG{Cs7zMybop0~JnzZCom$4^o+`Ef8&x17d6(0VdLHrkFRc!yLu!!az3Kc&1lF%JBc zt{aiHgo*6TN>DA!WzM|^!)ob82_xoI%93poeh?Z2g{~X_D^io-u6vDbZ1eAc`e=lY zb2mwkgcgIq=#cAJ?FYA;X8t&o!W$EGe}y^A`kN2v3~w|%bw(@=10*q$bhmVZAOix> zm1>SW-aLCW<3lBzq;{H11N`1MSom~W&@Ovk+?3dTh_ZKjnyBAFwjaSzx+1e z2ZVZF4oUV@pExa^g#vDWT>yV~j=x(Rz*S+5yF#Z!q`2B9k*-DxjU~i+rM_GPL;zia zlZmdU^M<{kYo!ys{|#Nc5^x_pxSl+ySC`X}gUV*E`p+Z%d=60Z{)l4axViAwtH6VQ z~bqjM!Yl3f_zC!veoO9GzYhr(0FU9OH0pn-Ac(Cw~_e|2w~(!~&=TECGdz8*0ncFcPl0 zjHBE4=H&@eDf-FTbzI$!$2T*Oj-Xg8aUbn@ORRw*LTvMs@9lCnMSn!>K6Yb2M9Ch5qt2(8_r zt}RBL_Y{Mv&QT6X(-4SoWziHIVA&n8T--U`-D6dMzYAS#%FH9lT&X@3=xRW~(2R$p>ZWIa-ydxN)TT3A!T44Sa^j z@mMsgK627iW2M$nD~>k)VG{fqd6pE+g0iBN#s!)VPRc+-aH3CQi2 zqq#5Pa&%*0L+B81&i{H$n%~0Ada_M$AU{~8hzxOxs>RD2Yk_icoQ1wm?;)DtFQ(!C zrfYqcgC4|R%Zx(}j05@nBM(wzKdz6hDF&=x;eF~)DAu+Q=xlngZZL{0&IeML$Z>m! zvXhO(KUm^WgV!9=Ix3A&Lxhhl-_#xY&`SsoP05?wwwbu-JZY_|-={pEdl)a@P1oF9 z9M&wym^9vY@ny6AGswl)S6lqv<4AW^^w*WgbCvz-DIZe~2p0XNxL#_Z1QgeaXh3qk zFsOj<`Dyui-hl#BnP);sc|bshdU7*8Gf{6O#8jD%M5n=&Ew6@Nn^ChcS@okTJKR}A;y}5nRA|%( zVY{MmmXX-aICe8?*m0Qdj{{I<`Agn!F9o?Ox*R@j+h!W09ukl9)@?=w(y8zgmJwOSC} zbrTb|Bi1mX_`9}0)Y{d(jNJJTEsjjIm0a!m7f$ZQozKr6E*5xrJylz`JhbEGJlz51 zRe_{R0=F?}&G??%o|Pf+^pL{<66~vb#1_m}`Jv0z2JA!l&Sh zH5*vhJN9R7Ie3pyO3Z-5(R@AZOXd@@Va|pl>PG3anB5qM9CI! za!z2aOJIbKU|_QxcYP3H*f-b*a`(%w7u*ESd#uTk%fjX|ta&oWMY~BJ&pEame3~0Z zV67V3# z(Jj?I+*HCBXxwM&a}XeWejk=$DkZLw$0MCST(2bLg#IciO>D}kt1P6EvrZ>F{+m|} z9tj}_R<#CMdNCT z!xQ<&kdeNW{fb+=<7@%5w!aLQ=1<4Lqc@?L-ot~<@;*&Gf3@)NIBnTw)+9gHGd|+W zE-Pc?yg#VO?rb|Is|g}+7LA&oYNcyp*zqc!jxX?!(UTW(x%}p_@0fta>$AnU=Tg39 z;DgU`*o+m@7*TWST`+R}uBA#nZ?neYaKyrie}C$Cbx&z?PU!wz@sT^_b!zc67hj_! z-faWC@iKiY1d&gY*|Kt@h{CZd1J`2KR;aoKz6|eIy?iOgu1#YfW5t@jlUvHKSoD_S z{+!X-1uQo13mZ@qVaCSUqV9M#l1=slSNL%%4iCz|5`Ur)#&4^WgWV-8^V;@`9fFl7 zg}$LZa~D;|$wiznW@qbwX;ztO6rikb++O~y7vjJuxhZ`wlxwH1pH#Ee?~w8M$^*I5EGQK-70L9?IdWO=94HPm=7Y`SHrxA0-H(r8%(bj}1O^!407 z9UaC`CPgRYhBpicd4$VSlivS|Lj2S-bJEQyP|-NHk(89}f__q9qE9Jo$gTO_p+%!b z$hEgLW)tSRj%m1{&FxI0VcZ&AYr=f4F)ioEPmK+0<`T|5SdTP;sZ|c15r-tO9mEZb zhv($y1moYQjiMU;1S&a0of6WjX8zl?IjZ;(eWQ_!_B8td4 zNGmEDdywFX&>WY4QPS@`+8D<%P07#rXtuCO?&2)bmwd>9v|D@IpO@6~!Mgvag|d6( zYnyT+i;5OxHTn@HXE?hq=YU3V)Xf66}Vt%9JZ~`=%DD`*Q#r zCPXX>?MGhM-N`KF*M{_ZVd`j>q)4kO)#kmDp{M2v=Q-V75|v^VhCW%N{6aMu57DEk z*XIr`8>%(a*Xm(JWlCuFXxHIT31Lb zpH34Jk=q@U>dZ1wH|+AzEZ9kmWM}5e=%WqmIR!)6j_IVk;Xd*a-$M;Cmn_O{C1EBu z&TegGmw%>FPt|cAI}lAoL9BbN?`uHwM!doJcOCfqdxE<196@rGPiApf1C`uUxYcEq zQrQofFkZ0R=tJAT*iZa$GS*iN$*V>5#kuN!DB7D($MPm9K5sd;C@NIpEFb5oDy^$y z=LiEAMFVS}tgHSkE#>w5^TVj*T(Vuc-&Q|Ml@t|KHeVN_ZqO3SbvK`ldmoy@sg$^H zp<~3n3l=I?I9X2o9&_Tb{_J+7ScujvL3S%tHct6aP~!zGYKz9pbapF`O|IotSjRHW zr-!k&H#^LgW$qyZYdT%D_7{`i^GxWhLNF6zJL&}z^ai>I{fG2tky1YVY*;Y^*Wx2- zfF#8vXq*TQe|C5tIL^P|yPuD=n1=IpZ0XNPc9F7usGx2Z9*FTDase1F)ETdHV2+Y(aM!=VupJ^N(+1!e?1lge6!AK7r~?j5#4ZJ<{`#h7|5M3&&PQtai@2F z5tUZcO5WtkN?U+m6WbqwBUG9lNdpjM|NK33Zd~wKIpbqY-x96w(YC+ozgRu98l}m* zi@({zrxN_;ZZas-uy!#zf%g?5@SIa}v0FjJJdW&_aMn7}j_xKG+>M5Fvy@pPGuS3x zLbqwPQI|Q~bH?V7WX4JH*?|~yPke(+sq=9Jjb62ZAaR-V)hJ%CdFv8}P||d7+n5+9 z#i>c7?w2}kxyB)9Ra0|eC!3D=G6_0^BLnmIx=xcFm9a{*`Dcj(P25wxNZtXuw&4so z*M9Z5$Ma%NC}u4=bm`54k8Y6ZiTLU$+(Y* z;qzzMpDI4&?ZMM1-xTUiS6_UTAr!JqfL*#HgaVzJoQs{g_l4+vbtw`+Q=D_te$JsltC zd8ax)Eki1aeG0m_=z_y4zuKo#EB|a=HZ`Simh>}7&Jfb(l0Asl|1zz-qk$sIZPG{${73}p4ZdZkTzqc8I-a96l7M(sY`g+ ztu&$^gSS={u!XkyOD5omdzo5|G{>+DPWwxyTyU-XH{ISV?>8ZOR5_}W6u$z_Kd$*E zxa}6drRfM#leTRR3&i-^K zaw|l}PQSRTt_-80#0a<8sUs+oC1#yIV^d$YuD>sE`+L}PZZ%EHlwm6=m(TQo1r3k) zhm3{eFHjBV7G&3Uy~pp!x$dYYa~B#9Rcq9VTuK|EZdJ>ZCD0~?C33}k6qfp+wnZ3;% zn2>>++oD*PuAyOo`)c#A)_MfUJ{&x6Rwx!bWlUZExW$zmM(IsC!mgwdJl+(M23to5iO0bJwe zvc#jP@eFCsG{*h-+Feqd>-_0x`O!kIS?vi6A!}Z-!a+e!PJm5kJ)(-Y2GcQB(Tyb@JIzK1s<$$Iv5>3VoGVATaN#0X+gd)^5`FeQGE$V4+nI0H`Rf7^O{I4k?&g%Er!gS@r_@mh4h27LL zl!e{L&b>3^!aOcQ1(Wl*`%S{Ml9{cTmM;jlP?l0DfFvO66qvb0zAz^8tT=Ioc zcVD=Qkc`Z9hCMAFAX|n*J-id9zNACjrwyX*9YEu@pt}_L?lgTK(}<>DUEgM13S7?>w7G~)?lz{C?!u4=p4kMVl}y^R2g_J${YQL^#ecG3pI>62YE zljJb`Nc|UcW54_fGYKTZ0I_rVMbL?YxxEG+;Q_xjzTYHqIqXaqsoGxdO?`f=0e6A4 z##8RR?0w}bDWOjp5x0?e2**B=wME@_X;PP^CSW~SP-GVClK)Y5_pNwk{Z_(f!{A*} zG4{*-5gd{IMpL7}ugW<|{Ou+iRpS7V2mXx~fM8|r;it@G9+#LwYZZAo_l4eh&93KQ6l~M(GS;^Ox}w1pM~7uvA!Z zMR@VJv4|pj&`}o)2K}tLb#`-q(K*Y}&iOa5>@y6Nz`Gp<91$lkNto~NRC0&InT0^_ z2Hai1Bc#)e{w;69(0H2%iV#44!)+zaUnJ~)<{=Z&}mIFg%@Zm%V2Sa z0hS)TW%n=sVZ4HP`!lts^bwiuiQjvb!b-%F(^<9`c4D0avj<{Cc)|P1@W&pY>KPhLXTmle?2K>lD4Ra+9l|n{2j{G6w2700&(U7tvU)Kdry;n}Hix2LD zC1ojCTN)BC+~YVNp7KO_ocnwuUN5$JA=kM*1pzwR15NwQPZE!Qt~F<{eV^Bo>dp(K zIjsdUi%<`F*VM;Hrs*c4Bt0Z^fMs&?v19z3H)c29Mx8&VC(kR54M;Gs)cF7ibl~y{ znbB)rM39QS4RrA3%y|ufjC^DB-y)xH5Y089fcN>BQbrBlOr*O4kfDOx!%6T!=LBu9 zPgg_oNMOPhgxw{+BZfP(zlaFvTb-5vSx$l=y}1%LOj zMZa6YS~g(oa`<}jX+v=O5Hb2aG!ZkROA;A?{jNN4%8o&&w!?)2T65+hbpYl7%oY!r zwZGNOznrz_6M!0c1{Y1}ca}dr&*YtRDNjTqa61E<3@mv8GE#t7NZ8eE7<733MC8UY}qL_ zOoMALn!Z@R+HrDaN%F^+cOG4Snb^)-3q}~$+?c<+Yo_;oce>9jr-|Ovj{!dYa{lvq zVtRRFH?Mq}iHVW%Z?!dr)hiQWJ{RQsQMA%LxfUOk?)AlIce&t8ORxdM|d1lBdJqH8pF__u2q! z-Nm23arS=Sw*EaeYM;Z&zOsmVxkWw$vm5{9)!WYFg*w3+^TqT6#S-B+r(aVYP>v&} z?lCLL-K?2R+Br-|>f`BH1$oPj{eFhY#8b(MS=D{-BI}_L8UEshx!<9iL!qv*@>?K8 zfy#(;bH@QAfBk#J>?-@x>1;2z@)A&jcNxcBx!b}z*`uK-{QLXsQ$`D)%ZtT&F@uBT zOB|f-s2pIS3|79LDK~_xkWS+lNZ16Of9f&lLQBsFt#G)kHw5E~}t@%PQauLWdDUloHp zlDaqtZp$`cL$(Vlsiah!sF%eX6!B%x=9Dn|kS^FzD_b+?JUJat#BjcY5 zlFB;VUwreXQ8Kf9nKpCCSUyj4eLAoEW#9z5dv-)XS3U6x1_?iaX6;ihW!lm|7u%Q$ zLotkr%Go#U$#Ae{+7Yfx6vC&3QK%cdwQEYCF=UUAwGhf$^r7KL*vLdJsZbQuuYRsI z%~{UmTR2)B!N8f+ry{A8EMKb4Y-^^E!y>S!5xo5wMadp$=f|!+fn!Ya3m9j`$naNs z+nwzJj<@EE1sI~0Qb{D2RWtNsuJ0selPtc14)r4u7_uwES~V7G%8>ruQn0G$8~lNBBAs53LcU!SPW~9fnCl^x!W7q@Eg&h$k@*s+5<}7 zH?J%O-Gs=t4NZm4sO8Yo3X5?+XQ3k+$Q{1_nwo$@Y?oo-vt`(hHXdoQlt?wbYwB|! zpU{Urau1u7l1Ek2q(+jr)m?~213D@&M9_12UW5B+U|^uKtSpWD6e#Usvw6^dBu_Ct z>}vRF;d=j$fcFl;tWa~kTwOSD{cQ+l(dVC;oo!fohCMB!IMIC}*m<#r^`=gPHQ{Ls z3rw_;J^PEHtxr*8+vw+Lp`T-1qcQ0UdvW|whdA+j-DO6`ec#G2pb(3fmx{4suE^Js zX~)bVBp7wb^u5M-Q{vIp#FQpszePXlduuzfPPc6IUZ@3hs5|g~KJ2$k?@WcckAWYF z!rW(G9|U+lHi}XuFL|~3%hy+Yc5Q&eu~Hv>>&IMJb9m#N*YhRlh9FHDjW@krT<*Ye zy8xWD;=TPsQ(Xl?+aq+qb;u?i=VuAGFy5fBwjF(7l<0lZx**x^IZIO!)Lw_3_RQ1V22Vh}*K|mWP8{ zp7@(poxXn~I~`uQouVM%AYmE~uqQgD+chwW-R;Y1$(bnB{`S|_A*`L+r>=O}(HCd#iVy;a-K-T8vZ)Jn73|MOH9LB5VFvb&u;lwnX?O|W6 z<6z8tS^cakn;+Vs&S8=X!{BaXX|rZeXGlyL z;%tdxrR{6YAUC3LlLpou7hs@!d42(lZ@KI`mY4fZ-ptNu89pL`OY|WIr|W}Wb?mH0 zW{+ekfk$%khg1B;XZ`=z-gibd@vi%#sDP-52uMeYbdcUbK&2N6NE1+y-jv=u(gdUv zs-gGZTL39iLX|E-LI)v2=n%LQ`0su8Id|`U&pP+pT{mBn1av-|e9<#%q7V^-|jdMOGd;TU**B1EP<-aCDu{3Nx`C(NW| z^4KFkk(q)IdRH+PE*RLyBaZ$~p+paT`6G`8XEh>!16F)(pKftdi}bV(zLYGdWIv?; za-Sx5UL?M9P)NFUVVvA!Vzoa%vGOrI?(&${W7;0zlFpmaj?09&=s!7Dd2gOOp|+@I zca~vJUm0^#*OomN<$Q5aeS0Q)M=YL{{ie2I4y&g5xw-?({y3}2C(x6_uYY!B`{N9k zoOC(WdKR{cmu^_ZnMeEJ9CMJ@ywlxE_80W`^kcSD@GlrCU@@cQ)u7s9I9V1gONM5> zP#|ThO7Gx}N#PX;jNKW%0fn*7&$J032xq260;;xO?mfj0_0)YUHKN(qp5 zfiPp|i#UqS+#iE#lY=(OHoa_O>cVQC$Ihv+_nF^zSqSl@MWqAlj^G( zrP>!NeLTXWk_$k&XM<%V79{3|9tjR50lW(ftC8UUgzd8dY_B{Ow520B#%MPc`1iio zY48tykNtK({u{mg5d}u&JW6z_w3B0o5$w-hq^tG&bauN+lVfiP<<^Pa-TjKm_-FwL zLT)B7y_$WDtjWylW%uz?fgBNs@dUbtT~}K3r&`=22&aK(k7-5qv*k0PetVn@liIUx zpfC@P)sOj}W@v*mr@3QsfUR$<#nk1@TGAbdgWozL?tA8Zgnv_{L-MMByQ>G?)(l>) zPtj3q6E2rCAk$)^i|7*53?tQUj2N~yj^0(#9xSd_7%iw?j5etlRJUViF_>X33HxP5 z7{YD|dZD0r6uwu~A^7{q9=a3qRilEbxp_KanaeKp&|=<4F`po+Ao;Q2fNUvwp#3@* zMwEPY2+MtK$l;J~|3oP?Saxjt_VgzGygs0>7vw%A89LUm!W|uz2JeC%kTYziWgfqQ zRW&nL)1-vykVdz*K`UlIHks@St!j7l%Tr`L8_7hSen8`GUwAJ0VM+ll-JiA|T9s35 zoO{nncIcAh)R44rij>12?-$P}FrNo|7cXLMC=mOylE`0{{whj($4N&qZV6&IYdNe!>Y_M^H?E0S7bhJINi5` z5x-wIJBsU%n8Sl{TQH(4gEl$##Cj3m{rCRpjSB&X$J;5GbFVGn`u}}bu$Ds*ryi1p9(kr-c_aX5TPZ~BZycrb>jo=sl2!%sdiFr zXNW^d2hX^+uhw!*ppGf8b?#k7Mm7z(=5yl1zCe*_F!UMe%9t{;&NB~uAAM`Y)>_fN zCm^7+Iwi$_mYvs)RhihSMw3ZzVjUifxC|dbgYovt2Vus_oZI2g7x_wGi^K3bZe=NkE3+nvgQ+kQRZbOon|hr ztWSBYjCw@fT>?(Eq#H(?>1dBF8)oc-o+a>qW1?rV7!uGmd9~qMQep;C6pA64bqAjX z)uTK!+$8P8UZ<)hJXh!%ZQ?%LxRI~4T#eS3ua6L`te7q{tZT0()3c1vO=}LbaG|D| zF$L3CY4pPcp+pinGwv6c&9XN3MvA(ZDA)N3&av$>VN7(VsKcsOmg7?3cOm*2ug<3I zj1v7^ri}A+l?=3RKhWm<_V=B5iK8Hp$0xmdjP8r4WhoC}v&a@z$@5q3OTb>)BSJh2 zxCG$+q+Uzkqva6#kii1~uBPn5Fqd=(__D9~%_|VsoE`o4)j=1GU@ctLr+a;9 z9aUpEyejA;pHUL3pF3-%wRXTnQ)z3L&&Pd~WPyuW5tch~XB#$Fn}FXVz*NSXdr8>= zoRe?=CroqP;Km6g&mc>t$DYsew`Q%@+Mk`oX#*pVXlluJ=QB5VM5lw}MGF7e?aLMK z@wnbrzT;fn^51FhO@|E&I-5@Cm%n@q#Z+wPAJ{ZkwlSRyFF$(V!~Sb@=mV*5SHb`n zfS1}M-F|%wb4kCKGtcpt_50xAWyfl3y^hh{txpH9#HYZ?_ZId%irbq!%q;L6DH_b`pJiYw4zS&8yK0Cz`EMXDWsq=eRz)_;*ULUZ z;YKBizXGtJ@D*Zo4OwBN2setZ6~vcOwC-kIwSh*DngVtGd0vGaAIIGUPBre9Dc#93 z_77lxaS6=wFWEiD6CkWq$OpJ%1kA&-^5ccoAkHg@k%C7ZsEdz-ll1#IG7gfOwX#{H zks}r%svxZMwZJpzwWXLo^f@YCOqn>DgSb$+>Y~#e%sNU7K!9CllPytGbf14hL3uZ( z?_mx1U{H;1ja_2xa4%}`KRarfZbX|0u9c|j{1bsErA{P>elc-bB3St&C=cehSod!O z0A#r2U`rimqJFn`!k}64xVz49bRlbKxch{kbMtyHC@zua~1Uhws8p)452lxOD3V5~L#)v#`Q=Z)c&Q4$3 zfJaA3znwiU|1}J4!-fVocx>H7H?3WWIC(Q!>BjiUs*b9iWcC50xCPv09@ta?V9oFI zy1A~She2f{5MyC-kptFQHpio*erv9Z7P+X5x1#4_;vW&hjTf+F3yfd^Onox3peMIP z1-zHvCK9-He3p;joQp-^T>?xjFKnQuOmP!5pWLB`3(Bk=GA73frZy(zsLu_Ag`u8| zTZd|pPNZlOg~}T|xLn*6CvXU*0Hqnp`(@*CXA@_vCle1J$SVKi57Uq^qL;q1{;D@# zVgRsr0)AX^BD1JM^>;4?XvECZ66yBKX=_aZj01oso0DZ@@oZY=4xk$@Le;+xL!2dn z1P5fV=|$z!7sq{K`eDmKL&G2XlqO#1$B;c?>Zby|>r}d2gl{Q^=Kyf-vG?jA6%dCa z(Qk3*j|tJb-V)#%RSd7AUEl}u5d#7;Z#%2DKXoyfs}n1DxSZQL&R6{75 z@a`Q6=}j7F?=fw%V1=csN8&q(q+l#}`XQl+Bq(QHUEl4rsDXR){bd)$>cqI4fHX~g zxV&sKGc~1_egs@OoFaVA90ABQ|FmE<5I)_1pq$7N)eKYbb*D5*JoH6`H=`!jeBc za>}x>Ot-HQpgxTTRU38KKL~vYC{IrW(g`aDnXWJI)sMgKupwd5|G|xd)nCd>Soc3+ zfWRD)Ph0qZ)tJlviN=iO+tPM&(g+Ug86LimUMhLevV)#f4qe$ggy+#*YA{>QT3{Stv3Hf$o~@k(~soJKV1AjS#6Yr?39T6 z)eCG*Ur3*X&Q3rmye`ktJtoX#us!{LNG7*`AEBQp-%3Q5T)_WB$ddPY7k~g{{sRF3 z%HU*~VIG@S>F`P}?)C@sb|m4JHzF-BE1iM?9~4(MFviG?!975r?Gi)%YlBKUO<~&9 z6}A+^Vyid!Lm`fTSx1y47tXHA@T6cmUf*Z@;nk7J|I2);{+H&HqP^**7o=;U%Y z(6atxO`vm*|IaMWKgdPFqx}ji$nA;d0D?C4zU%0fB6(Buo6INE6{XqekA0x{*Etqm z@p;Mpa-S0lD%Ho9!DJ$KDp(pvk?B|6i4YSx0ql&BA=4_yKfk0H5q3Z8->uyEr=Yr)wA(eI-dn0*W@pE$$i30 zQRH8EOnDxcsSzU!_2A~DVR9;g*zAs7x}0zp7X!1QGhA5VDo9|KL4%&tZ~)|{k*KV8 z@9|Y9XJWX~^*c|1^{sQmd)mEYWTG?JJj-)4Yw*=T5vC9n&q|4s^OK9S4X ze99Mkm1%1=6|FPplT{(-X64o&lwB}lL)(q%QNxCq=_<5UW(ZZ$Dt!ZiDHHx&81|p1 zpFwwuss@iDNv?!6N4ySF%$nXBUi>@lDt!qk%FMF(?UXIkgqCzEN>@liD7 zG@Z_ouQRB!LuzMlGshQ5cRfr5-_z@GJtMs=9p!eIi3S)nU&Q`}LBlt}QfYEkI~bl@ zJ9ox~o2LUg$=xe8${nZONK_Lj6L=K`fJt4gzlML6`L?z_aI;82Dixn>Fx*RK`ZCB&svvf`0?|o;aQxZL-GQ%$Zu2DgGE|d z^VeN1DJIz~EL!+(#BJ>^7@xb&)`$v7s%d1${YcS<@QDHXI)LN3A6P5wcai#hCEA_q zqi3KGby@j~#nk`LSxhvB#bnkda-DpSrjPDyl1>BN40n;&O;#6XSIH&ll8!18x)m5F` z?SrBwc*Md?4eiKV7O|~auuoG@M%rY=7SjvIe^uT}v>3BVGjT1Udbfc|S9ll>vrY8> zA81h|j=_y)>#{+C+0VHSF6|`hxtj!3)R}eX>rHz&l1HNMB#AVSJd@zwtEy`~7e_Sq zX-Ez5OGzWm4~Imbo-TNdK2Z|KdS-{1v)jAg(x@7{?+?sPz)YV`x+lI*P9>6%1u-tG zY>^I*f({%!m<``M!mC{z8UvnDl65*?41SH}isGEJE+@e;n&ve-qQ?Q zP5jMaFN%G4{Do;CNuvQS&H@8)9@VAoS#V^) z#;CBw2eCso+H&u20tN3fXAW2y8Cwch=t<%cArdpq8%jUFu#SGIza!3*p113tlZ%lS zZo>>M!*)(A<9WWZ#2RlfCYP?T7^XP~weEp*3f4crvw$cae{?G<{sIB(I^3yJ;RXcR z8hx1z0D?XJca^oMP^x@5T@B%tVBI3dqnAY{>zRk~+!Ig<< zgGtCwH<662+~Gv;KK%E`OBRq+CM_uTaNc)frW8|wR1p^|w_2C9t!j({FwFKB01KIK za0s@YYkZ+qW)Q)E7?)}Ya77lw!GPPbyU2mikIe>IESdnqMC6M6<_C_6;2xD%GsKJh zx&_(maYgef{u08u51UCYMpbi_N_l+%f4jB+*4MfbriFH9LK+3=sU{CPcnULv)~GPV z_s0RkN%Zf9J2Ai>LkhQ|hZCK%Kk=F>gu88hFsm4}_huKCUOWcu0iMI#J12|@r|Q9Z zdYwKo-S%XKg)iZM$RN^PaYWdX7H%8Y)@ZEFnv<*Xn~mmRyMe#&VPahfL<=460qH-2 zzZnlESu4Hr*)b8DzmYVTGS*z7PW5Wztzg0jpJ+3IZ0$kyskV~nw94ionFg-Hu0_0T2bB5i+OBTYb?9? zW?pKvS2XWktTm3`Hccj?hqkB~B>(2SE9Os!sG4S{5_44xJpvwwoFshBaktsQ8+{TEe9=Uh9{q%GoCqIR*UfdgZ=7N;9xK5EmTkSLr%rtzv{z~ztSto~C zTUV;!?K4xVa>*~oekbGQD7bfLKV!NJArcWv8r2+f;(WFbr2=tT+JGDmq+=I|`12)6eb zKh6s-X}vM$Y@#5k^HOp@R~if^=h%#Vv<_V6JJ)(`O@9JvL-l)GD`w3_1?d)hFBv)kS-)#!qx_UaiMl%l>Buw@eaMUd*il)^{b z4X?~*BG$%Gcl27i^8sF^2jRZN<;XJBB zI^ApT8!H9mIdT!t5co-!Bt-J4eSYQks6Ro6XXW`|*Wp^m*%~yf3Cd0F?LwTA7CzPn zAL0|B@El%gCX3P~xwzOHQ$7Cb4duG$3gk^Iz4|XmT*nf;hLPvn$ii6X8tBf%W-knS z`1&^W5e}`T$8ly9rSJp!X0{)n7-@ho1xD+C$pDa}=`R%bkwB_TtGXy+%o-9SL{T(T z%8_au!IF5Oo-MH-NH~L|{gsI7m&VY2M=E~9C-ns2vS!qos@O+M1@JYe)h7tCemf<+o2*|6Vabd(ydjs2`&|c3~7h|@DJ9YEpK;9R~-{vIA%>cSbM^ozyRe-S`ZYrL0h*8CwuJ%=F zuzwbD!_Lp}=b3No(VkiAd8&lrX;9<4{eO(Y)l?|_C5ryW8+fHr>lrHUwHV<~GMwsi z9ZLhB#@BYwUT2giG(LfUQx5c22%4QKr1{RFsdtN}hd_%)TbU@+Hpz-P?rR z-GzddOK}EmxI%_hzFdEFr#4a9Ygcw`@1VHO!q^tQ()w+GAf@>v?n2!9G>FV?v*mGd zNa8pMT7I$sS*}%NVjOPvXnKwiH=RH!QGTRUsu)q z*;r`P({=$uKP1=ZPoxuzrE|@ix9UlWnUIZ_)5dSp~Oqk+WjUE)o73 zy|H}vkDQ~|s$N4wZSG7VKXQBHw0sL6*RN{jBQEbb&N_|ny&Gq4Ze}%SHOY6+*7H;g zhee#ofALM>r!3c2Kwl4%AZzpMr0$$yU&fkWeW7yI-W14Hg-?gckszCtNL`uGdeD8n zK1EKaC5xwYl{Z(DSaGyRR`j@yW*H$fAwoXpe`sm295Y;y-pZ2b_0P$IZAJ#cf8-+d zP>(2+`-!rFXRveq5-csBAUk$KfY0w{f(<2=QHD5Etpd}|(`V<@&Go4IP+q9c|?AiNUf#~nwOQGHGB?SH#*acY&ZO*&_<2et|8q+W?pRmI8H0JkiSJOE-$kl z&Psqa6*g^uef?njyr^tKGY=u|vj&l3{B?0o;FF&~pNW3#Mt>1go9a>RUnUAsee zE#+5oK0XFjh+ASS*N~r9$pgMWU%YR_e0r-+2^N97pMXSFTT2-qE@mV)S#Uw58nzN z3YOg=VGkXMf3qlDD{S+#(ZklsmLuWIA@Awzyc zDU%*hgFDPz@1^{_U(|fsZ0LH3XyOwURYW$U1?HeGszKv-D8G=t=&dzN#%~1iPjjRa z-qP`*g@)I_&mc<6I_32%aa|RrlJ4&kgiRg~Z1-4s?*|k+iO)Xr2|2DozMmcOQPkr; zH=l%q^ESHpfe${OW3GwDi@)ufZPHHW@<3%JC{eF6&X@%V&iFi6h`9?p`=y}j(IZMi zUZdPATkbk(5<~E^(*p>pzbGvdcfPBe{YuL->ho$r^V@>;6IRUvX;fk|Yh$Z!&cKJh zr6eHqUF6oMm8W09f!26!DPpXx%M9{<17~IXu4kBHoa7XCZHn_f3fFk{S-)RkBIJBq z=R?0#9B<)NdYQ$&T$Zga#|CjNFA=Jwa|WkVL6co+Ch&xpTtl3|TH7^?;?3_GbpxbT z<~UGiQDfzbQQeiKc`-XM)TUk6Fz7^F%<#GFZ-Lt5U!X3#RBw_%Lo}_!#ewd`B#%|A z;i-yg-D*^cDeTY+X=Xcne{1XbjBu{_z#A=@-_Xy^^sz8i@`osJ*M1(bsl#mjMC4aD zZ^uF;uOUG`$6%7l**#mZNsAKF{nxS`;0n|+rz0#3BX7CZ-5*}{C#(jVkD=ECyF6|*5dZ<&mzx&-f!jy6+jXYP$DW0;y z0LWxn2vazAxu#*_#W1Z}1**QZJe08IZLjsb=4T12=_Gw__WPn(Uj7bPAMeH7hHEd= z7T(~ugDOxqqD&|RDIEF*U=C?U@yT!{#Mc9|+!l9@)Z~d=lDirA@@>4h)27hE6RECPN;E23wfsySL=7zk ziy9F|uux9KLEXOH%P&9hAh8j{X?YU0wHD}8`vE;OiinFZDHpn{>jbJgilsU;MSI0K ztv~{S?FnKcpMIh(Ft2(|Y@P0-Z z=atmGOqcDS5a2ExBjZI{^r5cfJ~)F6dLdX?*m3gDr8IVIxr#Vyhzpl`^g5fK$mflA z_X8dfB`kJgLARJ7DlM~`t=p>Rkn+beO)PnD;# zvK_e1YEiD*@B&|K?1S^z9P0@pXZi)<=@<{hwP*Md$PT^9XqzevylL5bH@McHTB~sD zo;}dJrDs-&_?1I3)o!%$MAtrMvMq`?5-AqWYWK(T@Tw|_A$Q-W!eFO>G%my1{BowQ z<{FJv!MDXbh^|m&pjzr8$E^-_z53qkq|QJa*cHzu0%6K-D3sK` zy5QtBmVAxw8OpjPG)#(odIGOSwTc5$+`v`kG3jM5o>i2JPHZ9oZKaxsPW*1NXbJZ; ztejY(t>g{C@oswI89>nO9!#<`l^smMY z-gg%#C~j7dV9@&FyCF|XRvwh6ZE>Gj70=msuatZm>z$AGhu0#{SJ>heuxk#Vp6VP|H$8144a)XR)kG1{NGRE%M?5fUQQ6!G z!JUmBx$`X4g>Nf*Met4L>e|6B#ABi#6w5jIre=QemeFoUp2s1w0Nbno>qGTl>z$c8 z`bb$lt2#SUygXxhSKXiseCGxgK6qCn@75=Sz1Eg#RmCWhlI2FGCP^@Ieg2MiB*VF! zSC2IVvN~GhTm&}%3a44oa>b;tx~^$Q;Dd$ew}AO1B|Uz&w*%XB9i08`X5up=m7jfY zrJYm;n~&Sf4iwUOZ~0p~8|c{GjZY+iub4Dx9sbJqc)xdGS10#frvV=QfhBLd*pw9_v>3zuH$1poj5 literal 0 HcmV?d00001 diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index a31b464390..f3ee9ec120 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -19,7 +19,12 @@ Per-user services are services that are created when a user signs into Windows o > [!NOTE] > Per-user services are only in available in Windows Server if you have installed the Desktop Experience. If you are running a Server Core or Nano Server installation, you won't see these services. -You can't prevent per-user services from being created, but you can configure the template service to create them in a stopped and disabled state. You do this by setting the template service's **Startup Type** to **Disabled**. +There are two ways to control the creation of per-user services: + +- Set the template service's **Startup Type** to **Disabled** to create them in a stopped and disabled state. +- Create a new entry named **Start** under the service configuration in the registry as a DWORD (32-bit) value set to 4. This creates the per-user service in a stopped and disabled state. Beginning with Windows 10, version 1709 and Windows Server, version 1709, you can create a new entry named **UserServiceFlags** under the same service configuration in the registry as a DWORD (32-bit) value set to 0 to prevent the per-user service from being created, as shown in the following example: + + ![Create per-user services in disabled state](media/user-service-flag.png) > [!IMPORTANT] > If you change the template service's Startup Type, make sure you carefully test that change prior to rolling it out in your production environment. From ffb99aedde8eed1f4038e2d491e47621592f8816 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 14:44:33 -0700 Subject: [PATCH 071/146] minor update --- .../settings-windows-defender-advanced-threat-protection.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 6088cd305c..bf8283a33f 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -86,5 +86,6 @@ The following date and time formats are currently not supported: - Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. + ## License Click the license link in the **Settings** menu to view the license agreement information for Windows Defender ATP. From c2296fd40839bb2203da126e897d36bde5482b92 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 14:46:53 -0700 Subject: [PATCH 072/146] fix note --- ...rbi-reports-windows-defender-advanced-threat-protection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md index afcd9030c3..5a68d11f07 100644 --- a/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md @@ -44,8 +44,8 @@ Windows Defender ATP makes it easy to create a Power BI dashboard by providing a ![Preferences setup with create dashboard button](images/atp-create-dashboard.png) - >[!NOTE] - >Loading your data in the Power BI service can take a few minutes. + > [!NOTE] + > Loading your data in the Power BI service can take a few minutes. 3. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. From 7c5f80ddc0f01a0235003d3d30a073b0168187d4 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 14:50:56 -0700 Subject: [PATCH 073/146] fix note --- ...i-reports-windows-defender-advanced-threat-protection.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md index 5a68d11f07..703b227b63 100644 --- a/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md @@ -44,8 +44,8 @@ Windows Defender ATP makes it easy to create a Power BI dashboard by providing a ![Preferences setup with create dashboard button](images/atp-create-dashboard.png) - > [!NOTE] - > Loading your data in the Power BI service can take a few minutes. + >[!NOTE] + >Loading your data in the Power BI service can take a few minutes. 3. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. @@ -79,7 +79,7 @@ You can create a custom dashboard in Power BI Desktop to create visualizations t 8. Select **New table and matrix visuals** and **Custom data connectors** and click **OK**. - >[NOTE] + >[!NOTE] >If you are using Power BI Desktop July 2017 version (or later), you won't need to select **New table and matrix visuals**. You'll only need to select **Custom data connectors**. ![Power BI options page](images/atp-powerbi-options.png) From 2db24561a2dc1cf21aa5438c71d9b909f361943e Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 12 Sep 2017 14:59:37 -0700 Subject: [PATCH 074/146] added user-service-flags --- .../per-user-services-in-windows.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index f3ee9ec120..eaee98039e 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -19,12 +19,7 @@ Per-user services are services that are created when a user signs into Windows o > [!NOTE] > Per-user services are only in available in Windows Server if you have installed the Desktop Experience. If you are running a Server Core or Nano Server installation, you won't see these services. -There are two ways to control the creation of per-user services: - -- Set the template service's **Startup Type** to **Disabled** to create them in a stopped and disabled state. -- Create a new entry named **Start** under the service configuration in the registry as a DWORD (32-bit) value set to 4. This creates the per-user service in a stopped and disabled state. Beginning with Windows 10, version 1709 and Windows Server, version 1709, you can create a new entry named **UserServiceFlags** under the same service configuration in the registry as a DWORD (32-bit) value set to 0 to prevent the per-user service from being created, as shown in the following example: - - ![Create per-user services in disabled state](media/user-service-flag.png) +You can set the template service's **Startup Type** to **Disabled** to create per-user services in a stopped and disabled state. > [!IMPORTANT] > If you change the template service's Startup Type, make sure you carefully test that change prior to rolling it out in your production environment. @@ -136,13 +131,18 @@ REG.EXE ADD HKLM\System\CurrentControlSet\Services\WpnUserService /v Start /t RE ### Managing Template Services with regedit.exe -If you cannot use Group Policy preferences to manage the per-user services, you can edit the registry with regedit.exe. To disable the Template Services change the Startup Type for each service to 4 (disabled), as shown in the following example: +If you cannot use Group Policy preferences to manage the per-user services, you can edit the registry with regedit.exe. To disable the template services, change the Startup Type for each service to 4 (disabled), as shown in the following example: ![Using Regedit to change servive Starup Type](media/regedit-change-service-startup-type.png) > [!CAUTION] > We recommend that you do not directly edit the registry unless there is no other alternative. Modifications to the registry are not validated by the Registry Editor or by the Windows operating system before they are applied. As a result, incorrect values can be stored, and this can result in unrecoverable errors in the system. When possible, instead of editing the registry directly, use Group Policy or other Windows tools such as the Microsoft Management Console (MMC) to accomplish tasks. If you must edit the registry, use extreme caution. +Beginning with Windows 10, version 1709 and Windows Server, version 1709, you can prevent the per-user service from being created by creating a new entry named **UserServiceFlags** under the same service configuration in the registry as a DWORD (32-bit) value set to 0, as shown in the following example: + +![Create per-user services in disabled state](media/user-service-flag.png) + + ### Manage template services by modifying the Windows image If you're using custom images to deploy Windows, you can modify the Startup Type for the template services as part of the normal imaging process. From 42607bb113d3a8f6a5578968a6c6f90393b8dc40 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 15:15:17 -0700 Subject: [PATCH 075/146] update to include dot in numbers --- .../settings-windows-defender-advanced-threat-protection.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index bf8283a33f..d47d1f13da 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -73,6 +73,8 @@ Take the following steps to change the date and time format to conform to the fo ![Image of region settings in control panel](images/atp-region-control-panel.png) #### Known issues with regional formats + +**Date and time formats**
    There are some known issues with the time and date formats. The following date formats are supported: @@ -85,6 +87,8 @@ The following date and time formats are currently not supported: - Date format with yy. Will only show yyyy. - Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. +**Use of comma to indicate thousand**
    +Support of use of comma as a separator in numbers are not supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5K is displayed as 15.5K. ## License From 0c650fbf09e560f5feeb3abb286125974dd8b155 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 15:17:27 -0700 Subject: [PATCH 076/146] add to troubleshooting topic --- ...ows-defender-advanced-threat-protection.md | 25 ++++++++++--------- 1 file changed, 13 insertions(+), 12 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md index 18014303d9..de337b11fd 100644 --- a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md @@ -50,22 +50,23 @@ If onboarding endpoints successfully completes but Windows Defender ATP does not For more information, see [Ensure that Windows Defender is not disabled by policy](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md#ensure-that-windows-defender-is-not-disabled-by-a-policy). +#### Known issues with regional formats +**Date and time formats**
    +There are some known issues with the time and date formats. -### Windows Defender ATP has some date-time format issues -**Internet Explorer(IE) and Microsoft Edge (Edge)** +The following date formats are supported: +- MM/dd/yyyy +- dd/MM/yyyy -IE and Edge uses the locale settings configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. +The following date and time formats are currently not supported: +- Date format yyyy/MM/dd +- Date format dd/MM/yy +- Date format with yy. Will only show yyyy. +- Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. -**Google Chrome** - -If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. - -1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. -2. Restart the browser for the settings to take effect. - ->[!NOTE] ->There currently is no support for Japanese date format (YYYY/MM/DD) in Windows Defender ATP when accessed through Google Chrome. +**Use of comma to indicate thousand**
    +Support of use of comma as a separator in numbers are not supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5K is displayed as 15.5K. ### Related topic From ff3adcc5d159caea5dc334ce317d93f839c82903 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 16:00:16 -0700 Subject: [PATCH 077/146] add before you begin section --- ...ints-mdm-windows-defender-advanced-threat-protection.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md index a1f1d75d60..53ff695a32 100644 --- a/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md @@ -29,6 +29,13 @@ You can use mobile device management (MDM) solutions to configure endpoints. Win For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/library/windows/hardware/mt723297(v=vs.85).aspx). +## Before you begin +If youre using Microsoft Intune, you must have the device MDM Enrolled. Otherwise, settings will not be applied successfully. + +For more information on enabling MDM with Microsoft Intune, see [Setup Windows Device Management](https://docs.microsoft.com/intune-classic/deploy-use/set-up-windows-device-management-with-microsoft-intune). + + + ## Configure endpoints using Microsoft Intune For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/library/windows/hardware/mt723297(v=vs.85).aspx). From 4e1dd0c43e981c46317fd7d517bb015d1f0e184c Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Tue, 12 Sep 2017 16:03:14 -0700 Subject: [PATCH 078/146] updates from feedback (%20 instead of +) --- .../deployment/update/update-compliance-get-started.md | 6 +++++- .../collect-diagnostic-data-update-compliance.md | 2 +- .../windows-defender-antivirus/troubleshoot-reporting.md | 8 ++++---- 3 files changed, 10 insertions(+), 6 deletions(-) diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 492435e8ac..8e3da008da 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -32,7 +32,11 @@ Update Compliance has the following requirements: Online Crash Analysis | oca.telemetry.microsoft.com - 4. To use Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a 3rd party AV program), and must have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). For endpoints running Windows 10, version 1607 or earlier, [Windows telemetry must also be set to **Enhanced**](https://docs.microsoft.com/en-us/windows/configuration/configure-windows-telemetry-in-your-organization#enhanced-level). See the [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) content library for more information on enabling, configuring, and validating Windows Defender AV. + 4. To use Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a 3rd party AV program), and must have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). See the [Troublehsoot Windows Defender Antivirus reporting](/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md) topic for help on ensuring the configuration is correct. + + For endpoints running Windows 10, version 1607 or earlier, [Windows telemetry must also be set to **Enhanced**](https://docs.microsoft.com/en-us/windows/configuration/configure-windows-telemetry-in-your-organization#enhanced-level). + + See the [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) content library for more information on enabling, configuring, and validating Windows Defender AV. ## Add Update Compliance to Microsoft Operations Management Suite diff --git a/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md b/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md index 14f81e83f6..b7d59b8952 100644 --- a/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md +++ b/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md @@ -44,7 +44,7 @@ Before attempting this process, ensure you have read the [Troublehsoot Windows D ``` 4. A .cab file will be generated that contains various diagnostic logs. The location of the file will be specified in the output in the command prompt, but by default it will be in C:\ProgramData\Microsoft\Windows Defender\Support\MpSupportFiles.cab. 2. Copy these .cab files to a location that can be accessed by Microsoft support. An example could be a password-protected OneDrive folder that you can share with us. -3. Send an email using the Update Compliance support email template, and fill out the template with the following information: +3. Send an email using the Update Compliance support email template, and fill out the template with the following information: ``` I am encountering the following issue when using Windows Defender AV in Update Compliance: diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md index 98a9a4946d..a723a79704 100644 --- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md +++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md @@ -14,7 +14,7 @@ ms.author: iawilt ms.date: 09/06/2017 --- -# Troublehsoot Windows Defender Antivirus reporting +# Troubleshoot Windows Defender Antivirus reporting in Update Compliance **Applies to:** @@ -24,7 +24,7 @@ ms.date: 09/06/2017 - IT administrators -When you use [Update Compliance to obtain reporting into the protection status of machines or endpoints](/windows/deployment/update/update-compliance-using#wdav-assessment) in your network that are using Windows Defender Antivirus, you may encounter problems or issues. +When you use [Windows Analytics Update Compliance to obtain reporting into the protection status of machines or endpoints](/windows/deployment/update/update-compliance-using#wdav-assessment) in your network that are using Windows Defender Antivirus, you may encounter problems or issues. Typically, the most common indicators of a problem are: - You only see a small number or subset of all the devices you were expecting to see @@ -54,10 +54,10 @@ In order for devices to properly show up in Update Compliance, you have to meet > - If the endpoint is running Windows 10 version 1607 or earlier, [Windows 10 telemetry must be set to the Enhanced level](https://docs.microsoft.com/en-us/windows/configuration/configure-windows-telemetry-in-your-organization#enhanced-level). > - It has been 3 days since all requirements have been met -If the abnove pre-requisites have all been met, you may need to proceed to the next step to collect diagnostic information and send it to us. +If the above pre-requisites have all been met, you may need to proceed to the next step to collect diagnostic information and send it to us. > [!div class="nextstepaction"] -> [Collect diagnostic data for Update Compliance troubleshooting](collect-diagnostic-data-update-compliance-wdav.md) +> [Collect diagnostic data for Update Compliance troubleshooting](collect-diagnostic-data-update-compliance.md) From 650388efbdd31093caae77984ad4003a0aea9639 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Tue, 12 Sep 2017 16:10:48 -0700 Subject: [PATCH 079/146] update url to collect diag data and some formatting --- ...llect-diagnostic-data-update-compliance.md | 22 ++++++++++++++----- 1 file changed, 17 insertions(+), 5 deletions(-) diff --git a/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md b/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md index b7d59b8952..83993b92f7 100644 --- a/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md +++ b/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md @@ -26,26 +26,38 @@ ms.date: 09/06/2017 This topic describes how to collect diagnostic data that can be used by Microsoft support and engineering teams to help troubleshoot issues you may encounter when using the Windows Defender AV Assessment section in the Update Compliance add-in. -Before attempting this process, ensure you have read the [Troublehsoot Windows Defender Antivirus reporting](troubleshoot-reporting.md) topic, met all require pre-requisites, and taken any other suggested troubleshooting steps. +Before attempting this process, ensure you have read the [Troubleshoot Windows Defender Antivirus reporting](troubleshoot-reporting.md) topic, met all require pre-requisites, and taken any other suggested troubleshooting steps. 1. On at least two endpoints that are not reporting or showing up in Update Compliance, obtain the .cab diagnostic file by following this process: - 1. Open an administrator-level version of the commpand prompt: + + 1. Open an administrator-level version of the command prompt: + 1. Open the **Start** menu. + 2. Type **cmd**. Right-click on **Command Prompt** and click **Run as administrator**. + 3. Enter administrator credentials or approve the prompt. + 2. Navigate to the Windows Defender directory. By default, this is C:\Program Files\Windows Defender, as in the following example: + ```Dos cd c:\program files\windows\defender ``` + 3. Enter the following command and press **Enter** + ```Dos mpcmdrun -getfiles ``` + 4. A .cab file will be generated that contains various diagnostic logs. The location of the file will be specified in the output in the command prompt, but by default it will be in C:\ProgramData\Microsoft\Windows Defender\Support\MpSupportFiles.cab. -2. Copy these .cab files to a location that can be accessed by Microsoft support. An example could be a password-protected OneDrive folder that you can share with us. -3. Send an email using the Update Compliance support email template, and fill out the template with the following information: +2. Copy these .cab files to a location that can be accessed by Microsoft support. An example could be a password-protected OneDrive folder that you can share with us. + +3. Send an email using the Update Compliance support email template, and fill out the template with the following information: + + ``` I am encountering the following issue when using Windows Defender AV in Update Compliance: @@ -61,5 +73,5 @@ Before attempting this process, ensure you have read the [Troublehsoot Windows D ## Related topics -- [Troublehsoot Windows Defender Antivirus reporting](troubleshoot-reporting.md) +- [Troubleshoot Windows Defender Antivirus reporting](troubleshoot-reporting.md) From 5402d1849b24fbc0f5285ae88cc3814122981cb2 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 16:13:26 -0700 Subject: [PATCH 080/146] add before you begin --- ...endpoints-mdm-windows-defender-advanced-threat-protection.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md index 53ff695a32..2e1f4aabd2 100644 --- a/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md @@ -34,8 +34,6 @@ If you For more information on enabling MDM with Microsoft Intune, see [Setup Windows Device Management](https://docs.microsoft.com/intune-classic/deploy-use/set-up-windows-device-management-with-microsoft-intune). - - ## Configure endpoints using Microsoft Intune For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/library/windows/hardware/mt723297(v=vs.85).aspx). From eae3d7fce2b53fdd0a1876ba46e4ed243d47ac83 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 12 Sep 2017 23:22:41 +0000 Subject: [PATCH 081/146] Merged PR 3158: fix stray asterisk fix stray asterisk --- windows/deployment/deploy-enterprise-licenses.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 472e7ccf66..a3c44c5ab1 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -24,7 +24,7 @@ If you are an EA customer with an existing Office 365 tenant, use the following 1. Work with your reseller to place an order for $0 SKU. There are two SKUs available, depending on their current Windows Enterprise SA license:
    a. **AAA-51069** - Win10UsrOLSActv Alng MonthlySub Addon E3
    - b. **AAA-51068*** - Win10UsrOLSActv Alng MonthlySub Addon E5
    + b. **AAA-51068** - Win10UsrOLSActv Alng MonthlySub Addon E5
    2. After placing an order, the OLS admin on the agreement will receive a service activation email, indicating their subscription licenses have been provisioned on the tenant. 3. The admin can now assign subscription licenses to users. From 25f4a79e2251e9967ba98e36f145ba13b9002d76 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 16:33:19 -0700 Subject: [PATCH 082/146] add explicit PE files only --- ...-alerts-windows-defender-advanced-threat-protection.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md index 328a0ff719..3a6162d10c 100644 --- a/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md @@ -93,12 +93,16 @@ You can roll back and remove a file from quarantine if you’ve determined that > Windows Defender ATP will remove all files that were quarantined on this machine in the last 30 days. ## Block files in your network -You can prevent further propagation of an attack in your organization by banning potentially malicious files or suspected malware. If you know a potentially malicious file, you can block it. This operation will prevent it from being read, written, or executed on machines in your organization. +You can prevent further propagation of an attack in your organization by banning potentially malicious files or suspected malware. If you know a potentially malicious portable executable (PE) file, you can block it. This operation will prevent it from being read, written, or executed on machines in your organization. >[!NOTE] >This feature is only available if your organization uses Windows Defender Antivirus and Cloud–based protection is enabled. For more information, see [Manage cloud–based protection](../windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md).

    This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. The coverage will be extended over time. The action takes effect on machines with the latest Windows 10 Insider Preview build. +>[!IMPORTANT] +> The PE file needs to be in the machine timeline for you to be able to take this action. + + ### Enable the block file feature 1. In the navigation pane, select **Preference Setup** > **Advanced features** > **Block file**. @@ -109,9 +113,7 @@ This feature is designed to prevent suspected malware (or potentially malicious 3. Type a comment and select **Yes, block file** to take action on the file. - The Action center shows the submission information: - ![Image of block file](images/atp-blockfile.png) - **Submission time** - Shows when the action was submitted.
    From 8f79ff9660dc530846faa5929a1afafb6f731dc2 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 16:47:29 -0700 Subject: [PATCH 083/146] update note --- ...d-file-alerts-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md index 3a6162d10c..16aee5e453 100644 --- a/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md @@ -97,7 +97,7 @@ You can prevent further propagation of an attack in your organization by banning >[!NOTE] >This feature is only available if your organization uses Windows Defender Antivirus and Cloud–based protection is enabled. For more information, see [Manage cloud–based protection](../windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md).

    -This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. The coverage will be extended over time. The action takes effect on machines with the latest Windows 10 Insider Preview build. +This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. The action takes effect on machines with the latest Windows 10 Insider Preview build. >[!IMPORTANT] > The PE file needs to be in the machine timeline for you to be able to take this action. From d4619de414aa7c4b91d9dd11f35723b6a10d0e31 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 17:08:20 -0700 Subject: [PATCH 084/146] add image to preview experience --- .../images/atp-preview-features.png | Bin 0 -> 63886 bytes ...ndows-defender-advanced-threat-protection.md | 3 +++ 2 files changed, 3 insertions(+) create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-preview-features.png diff --git a/windows/threat-protection/windows-defender-atp/images/atp-preview-features.png b/windows/threat-protection/windows-defender-atp/images/atp-preview-features.png new file mode 100644 index 0000000000000000000000000000000000000000..aeae7b6a4225b4d5e3df2a6253bb9c2b8c2305d9 GIT binary patch literal 63886 zcmdqJXIxWV(>{v50=J-o(o}*7hzJNsw}L?d5s=;mDFRYLFIEtxC`fNAC_ODPG*i)51p;-?dX{Io#ck&`;p^U?H{^3 zTHUvFrpsikmx7}VzmGban;@s2aJI5FrxROd+y|fRLq1Wrw{UhfaWtnhc({d}e&F}T zt(?prn82xybOm4XLg4UTz>s9R4d|DJZ$-qzOK z&Y5nhK7t6xb|a^0SUEp1r%Rn~;iaQHL5IF}S;H-ElI*Fiv0S#i!65Nj3~)O5y0$0$tqYAOH)Pe%=Pnuc-ic? z1H}*fzZv`g8Di;q(~7+f(V~hAqm7a6*3_bSwIl_rt~{$4aod=f*jUWUtVwu8#L~?x ziPz-*-t^a}^X~KayeWEpEkiY78(ntSu011Av+Tz|S8=u;5GsAw)ul_!|9#8f-#DKc z#43E{X5_i{_0tjB#UhYlU;$}xWx%r5zXTQPXW)>$sV>+i+CWQ)N=Wa$;CEcZAy zK3bH3@d@e|-rl!wUssV+imsj>t!L!^`al1fwr#v;&)#a3S*U-+GgtC5D5yO`Q19^3 zqaCC9H->iny{KP&b@dJNd-p5{DgvG!EeE@VM@Ogesef8beqQOR{Q21|9KP4obUTPsRyVY*x%vIll8e}d3#sYpwJ9!&!R%=tZ$?hQ z%+i+ zX}r8|uT}Khw}+LZ&R@2&vf@8`b}=oHHeI6XyHd{OJU4JXgk;U+p3|rK zFJ9D!#a`?@ekY_ZB0PM2ezrjX z`T6)9N^V(Or>oy-x9lTT2|v6_l6ZoZXAv^gxO(;J{sRY&Ff$J>`v~y!*GFfwv9V#M zy2Oaf!urXdKBa&7aE0ZZ{zH$!9}Nv0le6ms-<}^Rb{u{QX4@@&7=7pR<;NF!L&f%5AMSmKco8RdGe4+DRlD z@5PIj_V!w4W=Z9$+S*Z>cQfv&t79hG_=vsd!PV66+zIXK?iTZ2bH0B4y4Cv1oR5v~ z#hU8sraB>FW^yv>`n79ORVig<26rwf?_RM8S&z4T zd>I@ZfpSXpfA;K*l$0*AAYW_ie;0pEGd(lzLvLei8{Tf+-tzHgJJ{xg@IwPO9|)=% zYHH1tM?2}h%-+`49y|YV1k4QcHXeCdc~*Wf*YW!G=c_SuatUwV2)}r^d4T9Oju>b#7s;~)RRKP!j2q1oSc_;L0-{k0oI>z z-@CxXckfP^TUewQ7weupd2%H6q3;b<)ksvlwCj)lsBdbwZUs6zIv!?X`taeysa?Bv zMOWQl9Ba<$eBiOQvAjq67Lirnr&J+?Gi!44fj@~j7i51%PR`J*GH`sE)zQf*JS;3J zJNvw*mX?5^pmLI8h|5ZBcIN}@2M;Efwe^oxdkeQY6a9kNBviy>l^Yrwz%H_KbHhUV zB)`PPMQ0u!o*L872VKt4J@Prs%$#(9<=pRhGUKx>-T6Qq{wZ6ZuUmt}g=6MbIT(E{ zyM*^h*~T&JbNYqvAR(l`e}CD*!J)Rg`nH0C-@w2?TT>Hqd;;e1DThVkv8Sa9LB~JB zky?vftF6tA5qFp+sh=l3&YnA`0{*XVW0T?Di_g!W`1SSa%U7?QihjI2A^=x0K4*0I z?x&R%x0K7(wpQcr-H}=M zCQEsU9_+&Qc}}yxE)%_60s{lv9`D$bXI90KGE+@%Z)>xx3FYa^HhJ3JB1T@0SBpsT z%*00M!L`*rdncbh-NOi@joz9rjuY}`+i;cjsVo{y*MB21we*R&WM0@>oxi6Rd}hq!79E(o&g}KDMNQ*x1-3 zhYr2RP&%v{V#HMH$QY7AXmaBE5bp-tdG?{FlQ$natW!aH+WUzX06B& zYZ%k+Wt%{XK}In@Kd*87HZrA3p~0N8>EJVvv!ihIn!>`uUB#FTn6r2S8&)S*K~qz+ ztIX3ivDWM$k{-#vTN@DFFmATZAFdZ~ZPLUb!1=4q!sInWu;l0(%c@*=B`k2HknUpj z(~gN+TqM)I2niv5HmizTo2mgfsNabE>C!Vc?J&YKqA4zK_>!_!(5#BN&;O zh@;IAjWX_LO|;651xR=c>E>0BpMK;p?L0$@w4E1M@SUvMl+*HTjr5>~I#VY!ckS8Z zS-K7x8-<3PCAVy);p)IM(oB8n?fi7rS7FGrf2yD_0#(306@-@TbsyzGOUPYxMxx{E z*Z+WrLvl(@Jat_aCQnme|15fK)OU0AEB(l6)4)=K<8bW>MUnN5AzpdmM6ZXD6;(}P zk&!7K9e1BUe-7ChsnLf=M>CR=lB%T2AhbxiPRIFdP>dLj?-8UO2A)ME1H;u>z$vXmjhi$_X?CQawz@inkIFvCGZ)?Qwv z=@}Vd>v~SwR8TXq-5N<|1A~L@KYykc7G8{0-S5UPB63IIZe~+3hjjh3#jj8I;7!VR zi;g^dwiAMubmnrG4UX^JxgRF;-Mvfk&4iNSqe6z6`T62m`b90nmcFV>UkARwYPjdR zoL@H8ZTi`=+>hSc#zu7cxx+y%tp51xpG%ln{qdQNpM9g&_S1!f!E#x?!?j0(j)^Lm zRRvQm-3NP8v$Ci~jgU>r!xZ5I9Re<2ccU+l*r4XiW(QsgDLHObUxloqv(U|IHDg_* z$mOjO>g2s18p^bwmVgbc(n@Cg=owh!93YQ7(n&t{Bp)ID!X_cHJQB_b2Zdrm2ySR(L`p_#$hz-X zRej-$#st}JeF7~fA@BZqPR&re$#N`SP&HAGJm`PSD8wD2YWclXcu+M>&G5R|y9SLl zJw5shZq$yDIg{L!Rqpjei6t1Ft+kz#xQy6fYy{N zZf3%oixqP`C?>{$%b#6EzkPx-<#l0aEha04)myd~vd75k1dj5wKp5?dyWfpB7(Aq@ zdhGKt3LCR}$#J!@8hrCltx93MZWhDmW9tsGlRhf?g%2O^!*4UDgOV=Bsf0Sz-M8tI z$mBFjL~;*IH6-^tZf=EgYh&CCuH?iI8)Hc!hdDXzdn!B7a7sDf7#<$x7ZQ?C z{Jh*|Z~s6%_HLH0dF5?&^`tV-W&R5n+D=AK3nuvynx_MgiC(bpm62T?3QJE*6E>SB zOa%o6CtqtUo5z+0G#k-A6C2w%mqz8cbO2PG=QWpM2?=QnpTMR=bre1@EeT%N_w=)TW% zz}(kMj&czY@pa2Q@ZZYIHI0nydygf^dghn=C+FU8O#l43S%w#YVM7gHN$~60ys~M2 ze*Qe;uiFg>UOMgV?cjKt&dzyI`skl_UURH>o$1YjvEuXc#$c>D-BT|i6Qrr9^vDIr zKm={i(DIa#x+p74&YUARHT{}1!xAd)Pdb^!!|25%Bm|_Sx^P^(4;(lk=DGC1$?l+Q zpwoA^wscxijt%J?dYUUGFd#rUYyn$~!L*ZV@mj(5E46WU+03JxU^^>xbc1Nqt;OfFCN3a#C=B@n7uN@%+^VcBG zz{!H>k$lB#*DRs%zLkA|ZU^e@*-TR7%g}n>^5|P4=kEcwhOz4AKZxcR5I~+wn!PGB z^Q^xa-lE|+QrD$tX10wq#ELl%Ri6}fBxgGgD*^3rKf8QZ;MMmJa4Hnf(NA9%N8S=< zDu6X$A(D%O+)A@$Kyf$svM6ltxuMY*E1~LAQbwAZN$3fIM7^=xhnt^wEL)q%up?1y zxg^BJVL^D7_LX+->0KhXwIxgRd8q@CK*|MzcL@TFQVQ3Ll%L|cf(ZWKybMMg6G;db z?zSsY=HuhDi;O*Q@?@I0<%4dS8?2(WrF=JaSP7my7a;VedO7BeoA^XO+jPl{9J=KV zw<2moHoyYaeo%p&1QoVN`wXB&WOW=l@^NVBUJ#djuZ-H!bNXZ14wKc3t(nbz1|%wkhsqEx9ONiv0O~+NiSoYO_{!*Gj5T|J%TViZC1WC^Gbx)V zn+xBY$dt_jYtVFdmx#~0n`kdMt;dD*3KlFAtHSo|q9Psj6qWY3eClsszkcU1SeZs3 z7y@z|8T$sM6u_-!LlV#vx`ur_`VQw2a9Qr;nVFmd-~U%*n} zAq?S*`}gf@&bRH>$I{3%K3cG(fM-FnuOe4PgpiTl=>=E}VB>bPD}9kGu=wh|6Cxr$ zrKX)X+K0MUKS3JML>q7ZsrypcKG$>ZE?{=9cVgYa4PX!?>jsct7YlF&2`XBjk@^d50V7 z>RJijH2tM!jI7qa8dwQV&*JBv_uROon|0TpF{G%d2pmv23`4f}LI^j2mLrz`B>A;_ z&XkR2>l+xvD<&y<^{3zUR8o40kPG*Ju&0cy9@?XGcrUK>s;emf5uXt z3JD*Z`CiF>)(;?l$PdLq`=KtpjS5XnTDtpWFTt>6LlCO(DOzK5k|Gb9QGR{)QN?yT z34y_~@~}6Zm9(p**a}t|Ac8c(maUgw02s6GBY2O{uXxjz_;`7%OroDW+5Ry(d2FIR zW5+Q^B8`gk&5DSKI5`*Ho9e`Q{CN6Re+H|O`e=(FOp@JNLp`fzUu)QRENj3$duoL7 zbYmL2 z7}uk~o!+FJ9SZYBl=||@Bq~A1bb4AP?+uC~H9#I~H5jNjFzq?>xK;gI!;3N-#|pPK zV{$QO#HKYxRU(WBpcey+v6(N%`&O-`YyY?BJCv2=0*XZb`!oTSqQ%!G#M`$V8Uq1I0k;_R)w zk2+*yZCy&x8F>Y)KCLWk`eSO~s>B3^Li2v|fZN2XCwuZoYI`Sjrf+tWHdCTs z|Nb*_klfNTAi^*xn@edm?bYY<3aD`tIt!d_p|iFY;*X;Tl9q_l-bF6UEUwbA$&B_cT!5Dm4U5Hg^p<%dIGaPtxw=Pnv**+MY_1*1 zdWFoDDr{DXxZ@gB?~DEZTru*twzkDS8^uVb{`m2uyNoba+E;bJ9_rM_G>=54RUN1D z_SHclkB!z@jXa|ct_L#&8aA28s~OZhLfqPz;fN5eeaBjZ=6-MdHfhdJ!u3Ot+7@BV zR(25m6kBs>5Rda378tPsP&48q<++qu9>mD~o+Q=@>i{WnA%9c@Y-Jvzj#_@3oqdS@ z!L9ZoDTyQ0(!kfN|E6azCy~Iu05Pdxj=DIqmLk7Vld^dbgTYu_={r-^jDHX&G>2fy z&}FCFD<8_r$T*1u2>Xj+Mz=_Y68$h2SKr{5RLEZt z4Wf8Rk1m;_<_u(4kBvdu#=(>%YEl1iO)sx|%7fajbp+zVXrga#+^^PD9MPoQZ(ET2 z3D$r?pi`i_9c$Mz(gasX@ZEHGN?wLM7?(F1247$7gX$H=N)T{7^0dF)pE{9&o1l`6Bz%Fg!T|jPT@Hi*Z7y|R zxL{s;IFXjQQE$M>GsiQ2G|{stK=bZhemS{b_HgU<#~7Tak)|e3Mti!w*C1PMU0oPZ z6rP^6*Ia`9XbujJ5h5v5CkcXDEWQXZ0raRWA~;tzW_)qLJeuFXFCZ&x07Tch<*VS< z!29P}HlKpZ!3Iihq?CY+FthA!5$I@VYl}G^(9+d45xI7EqdkEL%RQEPtJrCC-93f0 zj=2S{f{Ybf8`ai$egNzyLjgi_t4`Y$T|HjauvGTdLP}`Zun8=sI^VN3H~)x0wUk)n zGM?dLIq$YaX!~(s#mGfcKSqDVQyO3Iex_F5(~a?9+DpRsnl28z(Z0pHlm?_h${MT+ z(E@;A(Gc?y5LK38nJysf#g#fssE2^91Jci|LyKJIS>q+_LB zu|UO*&u*#%<+tm=(L%wGFTbj(slA8!@*fP1kI#ZYBkd(o+t8p15WQRk0Za&q2n_2< zd46Jc_HF1wv_K!tUxTUdh6Ye-H=xf^c8&-@{$D z$%t$5r0_%wLkzkBm6dLhB%PagrauMvc6 zuo*R1VO3Gyo*zHpTQC}ot6B$NG32GEl>>t*1W{Te|9j-h2>8WZB(p2c_WbFCdO+|( z&(%UjB`!StBa}JuGVU!I;s6Y=FJA10Iayug5fl{_J;90J1o$BF?&D>@+}R9L`M+9# z_t2b49h_>QevOO@99CCX$9pc@IXT*^Dq6O+w@2gGa={XiRh;DBU>6Q7R^huz6cg2u z(Bnp5z;51*2kDwJAPhl)H%4~tYlqg$Vg<8mYJPslt(VXJ{VDJST?O_=#D>ee`vQ-P zDS_El5+%j$do!WBi8(@78O%Y^_;enY9|XW{bKY2-MSawJAoS?dPz00V+HgS6Z4i_W zLl6Tenfm$pDl~#>8yj7IgZRliC{g>CvowrkRYb|L00R=rm8$ncDVoi}R;QMFE%vaKBBv6%t0IqM(_Hpvg(IeQF zf+J!fDafw;dOE^xl8{Q^{8&p-3%xJtg>I`}MnmZg7CeGPqOylni&o4jZEneNeuqhW zsIj5ucA(ubUzT8cs@7LPLrEJHWxTh2Kq??^*nS6wpFrsC;f17?j>C}*T*>Ag%`=96 zsU^k5QUD~Div@w_PrVJ;5(y`#M=#{luqD&;H)^Z`!d7>Ys4k&dncQp-QR8I zJhx0(mc^|tNDO+2*mPuG4l=vQx}Su9EY%A&&iWyB;IDML@w6V61eltR%?%n)O@AfY zSHFbjC_Bk_bkJh}d-p8eyP4wCa{zqaLf8S^FCZ$ajx;*+04!t~5e)%TvN@vHc@x~O z(9_e8+>;3T=hjnh#bke8P|v#|Vvv{2(Av0CCrjJ4Iw*0*9e(K7PBk$AD(wOY&~RA46)X4`gu~xDhBETwl%s#|N&gW@7Tb&J6?uGID;Kb~s)F z=R%~Bk4{SvV>OnE04$}PL4`iw*|W~l`|jDo)^>IgP(1+jYn_3B zxFI6C-e7!2pR{|z&C|(ymgltAj5_dDp)zbi2{ADfjzqHiXnZJp-O7sNl=#TgeTTCdS!oy+$3pgdSn5XAeCc0nI)97_9wA%83n1iZ=v1T4y6~d(jp#b7w2Cy&D z-D_X>aE$@EHbealOGCK0CL6{yA*CbC>;`QaNhOfyombA<$>8m(8yec71&d%ah^G?} zZLiL+xE$HLqpoQSsvvl-j}Y3%!2MjK2GgMVcl4FHwo2T~$L$>*Bh)Zi^-s5&$C{I9 z8ZmjGf&l0#MkG>)6qw|d;(HH%-?D$(G1rXqp$ar4$m#)`CEHOZF)@DAQO74mJ~<@? z#?qXbRbpOu6n*F6!|YS1P9g0{D=3;&D96N>fOg{tY8saAw@i8&mq~31@o7axox_uJ z5V~MmFL2@A=f1OW_-utGt|Q46y4DOyRC+{vkmo_Q_V4Ne)&=1oHAdOR*LC8Nf_k3-(Op+mq_m}}GvM)oZl%#}t$kBPgA`$;_ld}TE@r``N6{$d zGf~237XYEbdX#E&5npJfRxZpLQ}cayHoP+nnmlgCq#$9|fut3qet+ zDxua|zF3qYWau?_9TvzX;59)qa$8Z+AKDn~wdTM(0^!$NYWFrGVy#UJib#kHZvk*Z zRQi2Cnv14F2H0OQgcA`)G<5Y=&R1?OVD1c0dvvp?%5NYPIWjtbv%zyNg%XFcHajq- zWkqssY+=H7v4udEhyM;|pZvnV%vDtUSk*#JOA!(tfTs{$%2-+k2KGA=ELU7bc;usT3QHh`D zPc%Dte(_$ys|5X0H#O$dx5gZz(McvCOrslb0X8Qt`U23I`qIi!Cdlo z5lf$Svw)k-c_6MA!sP`V1JHy(*9gA)Zi@9BZ{Y#=MN}$w1xe}YN-aTbN6Ex&mLo@^ zX?5*ufGtOY=wNC9;{gM#B2VjVWUuXWJB313JgBn9$2hUZ$++JEH3Ss4b_HLfGG~Dj zf`)_297yqSoU3!Lp0ab)C|(q5?7loLx_nb2c=e`G*${Qpbu>t#_cjKD*V$b?R%KT} zfheYQ^QP0Wl!7^^Gpv5ZNvhDifO3~|pHGHD+Ui^^v~YnY1q}}LS8suHeEs^>hdhl1 z!AhQepBylj{HIP`0bgdoFCMI97VN#{NKtZh%n=b4ZP?&EbjV~n1Y(sF(KS3F!EQPX zOQIXEOg*C|G4IvfO{fNn4&1w8^+Mo9BuoIvO)2c}yl4qIE(VhS4=gCAY856s<(-T&$m{m*i*MrS7 z5YGIr$NSPf2ANQ8MoqGP8TBr(svjFSjz2B#DHGB%C`eyxt&!uMN_ zl(={FJnZCjl>humI>Fg8Gqn!Wwp6=U(M|?9Imy74}sW;bW4B()&gEj@~f?iN-&@$F^~{JRnTB^m`J3raB%^-SkmI+ z;CFjJ;>e{+rkpPK#YbPUhQlb1nL1=#h%9%;5f)MiTW(eE>+b1(Wt zLGQV}!F!p^TSG(Jfxhtky7zKPAAKsy$G5x0)&3G{Zci=P9`C+j0joCc(Hxz*9hB$3Fyf;;z_>d}gpO|Irh~)hs<2*8S&zI%wAXlL7#-L~1-(82tIH^4LY=Aa z5^}#A(AWl=!#if^D9F&t`=AkF7lR@sZ{zyNu@|NYx)Q%;o$bKqn3$OS)+_RV1CcY; z%XgURn#ch6sNW67 z96oXJd?Q-=YFoPemS78CfP9VPtAw}($?MO(?|$WevglBiV!bs~Iax4wh&%kKw1Oa) z5lK&Z%A>#Gm0kBT-7 zVThyBzxqy@IK`pX~psC*A7J$y&j! z>fycK*8f$_W@TvMtbqfN0tAfo$cgy|PUQ4j;`Q;?A4J|cULCt;RhB>!i#=mUUARlU z)y6d#u0+^M*jb565>eMxXUotDo%B>b3A5#MIZF#i@nn1^u)+CCT^{ux&1-oVNLZag zWo+A>uME}e+|5`ql6_#sjMV2TRGr}3+`9C=W2?t(*ZUgySHcX!%H=Xf>U_hT%?@ui za>c$Y^^H1#Mm_-JT^Rk*y!Jz&L8`e4yO{RA>%yoLgSQ&@ALVoYSB5__Teor0IAjoIq5R{wP>`UK6f3G24 zTI=)Y&xkfyk=({9N2Jm*(Q*T{@{H-yY&i8gR_f`yY4jLe?aN%j>?Ybw)ks zM2FvqfdDB+j`_m3B=KCMt=nN|3&v_B6T{5g?q3*o`pSPJF?mT3iSN~+^&tb|A)iTN{|`gK}-I3okRW^1zga?sO%RmXI6(T$@g~334V|M9^Pe1I_FsBw^laq=vnhjtXEeeaP}OL^ssjgsbNKxAdei**E`Hhlu> z_Ze2m89aM@lMA-IbTKpWY?BZFoOM1BqdE`*0+n@F`x-BBNjoJ4rY+ZDO(i4Ry0QNs zUH>DKOiw1?o&qxB?{WhmNUPxnKl%JyhZgklFDg#A$?L;yvB;{(Ib-{j@eiLT%4{HeCA8G)^e|8gU&k6!&qT^&A(rjLn5n zr^1^0_35(6-~A<555fH;j)eY|?z39M_J_jp*Y$sgcl!$RYytQFKAYcu7z*^zKVN?FL(SGU3ogim zR+Xi;oltz*Zw-o`wUDh9Mg*1BMF{@u#pSGG5TWE^#cU!HJf|gXJ9Dl>O>S*v^`^ms zZ8F;#^tI?apq%+4bMjGt3bZ#$O@3D&mwb_EIhG6BZf^*@5va1&k=Uo~^nVO93lmBA ziv{)}grY#gbkGsmCkC(b1Mt9qU)x#3$lK}G$cP>o2t@Bu>Aq%APau#Ic_aW)pziMg z(iWiNNM0{UJ2Z54ku!f|Xeh?JYp#PRf@8A}gaxy@_wFUbR-Kkn9~2_1MwB$27GQ(~ z?=gp_t-`0FhifOnH5UH8dYUR?bsG z#;&b-*!B?&kP*i-4TJ15G#Lt{7>RwL1Z7xQhIYjKO?fiLmKP*l;9E!~+HD(o&yMIk z=yw%LXi$y!^tL@DsenBJ?Z|<^3Y1^tUmov(M%TFT2-LK;y``PE=s?>i3JnXKLCJ{7 z8zKm2pv@FRAv;uY6vNi8&Sj(m0lZmUdh#=nIPn)9uCxSslQA>_0Rd#c7Bn~s`Fh&g zsrM7yEBh^;p}c3m?m-${@IZO@YMA_EnSn=Pr~?Z}jVhDO*VIW1Srqq0m;pCT@9&b? zj{(919TD_^p(rxI2)js02<{B*7vCvzx?dBIZSX1sdcD6-Ayfo-KN}JjbK~1|AJGWf zBFK$kN;niG*^)q~JMY@#;18+Xdn%>mexmo?&^)J6mE0g~H%hYii`(SqD)!KFh{C`c zMIxjD3|Rr%s&Pl&=3Us9g-*hmU|QticPIr=iOyXjuBw zst5!?Wz-Hm6$(gd0FBFTt_(6zVB?x~cfKvMd_j5^zeIy>DQ2KzAE>J-Mw`P%acez5 z;nht|1>vS#lm}9hlP}8Bo8)#bf=(EjmY54xp`FtZW$MlD2fmvj2(78Zu8fW>y_Dc! zhDh$^ph8(m``>Z<>KBs_UDPj&F!h!MP+M44EO|IhftT#_IU>@q7#gj)9JXOGVb#v|oATcYF z<_LY*&}7)A;K8BgyE@3Vbq2k*+UPs&=xHk+O8}Bwsn`JvVT8f*cl3F*c^L^$xv(L? z1~xueL`TBqGpkz8xRe-x{@syAgRqKpO<{)>#Lu_g!+?&FCM;NVgGSscAvw@;6G0^d znu*q_y&hA7 za6+Nm`dk&+&gQ{`Opwm-pnnG$A6M9Kh5j)dv{oDGQefMC8kTf*bv36wCy+4( zDx{^PJY;rms4M=m#f>ZNhkIU&3j9hY{ zu?On9XV5X!88*}03k`iYpaS_neTeClHqF0@O-!VW69vu$V%JnxCaW zb1NJb8CJVg*|)LyRz^ap{+fb<2fR70Je9Cl!V4rfV|e(Y;06M z;RUK|@L}$Uj~}lC#n0(+2V(t#czul6O}+dF&A>>v!Rb@o1(feBMr|N)^-d3(331tQ zkl7vMVD@`)K6E+>`IPm1!s++r<>d`;#>>X*s?B^C2glbS>K6|NOUnc!s;EKpJuknT z!fu~A_YKIskjktedhiPhYC={(VjoDVpchw>bZCC_0V$PxCII@IiKf5njW1kCTG{?% zFhqV@jbrwGO9%>y*HR#NeY7~N0?f3OloTY{2{oPf)6-?ky_~#V)HVn$c~-5bAx`nj z%Nv0L7FpkuE}n@Bqn_Q<##|wr&Ol`UMXtXT+hAUI9yDvCfi&3vx;*SDeT%9ovRF4h zpRjkOGM%c3K^*5qHd6iU3>5MnzZtqF|5fVt#tn(nzVwWYkz~8&?wvS7j1(pvHB%tX z!*e}ULr*UQGM2ADPi({Knk@Oxnb+y;q$Pz8Wo8V@-+@^`X=MkBJvs&yvftj>U=JgK82 zMq&@p6J@=pjk@BYj^uP7Is}6qi@u-W;3;|^F6Ob=tca9DkwhW@4<0nqJifYRuw~n` z^G$N%=3Rg|0QFS z96h>Am(VwFszY>zBxoDQmR@K3eDv;`xxwwLW5F{amDAL{K{9xMMyvy zAUWLJZgk2jfZVe+N9MER4aS(JuH;UB=m1pP&`A>R7D0h-~wJk|YtI;1# zOG%jb@bt1JS>z%+b&;w8_TV8i7fHE!2Uy8ELThU)6|#C7L=jb)xo2Q_fCa6|UyxZq z5;|lYq_z_xtb8aU!fr2Qi-VwEzS{-h7ROO}idTWrVq;2X`a?oJ1%IkgUT1){q6Tjly!*g%UM zatjr7lm@^jc~9eb%WRh+oC6O({ac?388Q#5REQE#C)S*FPlR*{YK*>8ohAeVy#?(G z?B0*<=3r-kU{`=ks-m?_J2lFtK&Ay93k8rl1BH#&@4MN!H7b7t@*H4H zgBrDR=!-#QH*BtN-OSfMi$EfERoRbFcZAeY9(3iQ5rhW17+AdxOU0Zen{xihW7F*r z_)DexZVi78-a+U0@yGI-uZS`*zkf>dOxPUm-@J*O`{>I(nc*46J&c^m3jh9$0Nvxj z{}Kq>{%_w;Mr=Ni8Tk=V+xr?zBV4%7%x$M$oobA}Lu+Ti>*r;p=U=AyW@`b6r8J(0 z5%}dnX=8`bvhX_i!RO{sB>VcCQ09~~_cXF&^mH{BND9|gIfc;anX*YhSn!Jt8-DCb zeD|`pRkuho^4WhzOQvtw?>7VkB@ivO5w6;w!Tl0L_wtm_?>B7iVDZU%F?;^VG>y>c zaN+Hg+Nh_0ypIeze+Mh4>2zEwv*M=mvGIjcLkVv01QqsGiGQhxy{usE#;w}Ob~nOx zn}i>tM%}~(X~Y^K%%+{vjH$)g%Y4hci+m9i#k+TrSEI@sljjoE;qu{lJ9J{#?tfM$ zdZkm$h+9dH35NZeBJywpc=sNTaEICd!TTqSS9snezL8TkiO{3QlKNcSHfY_;Hehxs z&BF4*XPelqWnTf9Ye(PL{UJ@a2B%m3fw&fjWv9%hz)WlSrO;A0GBG#Vefn7lv$RHe;)G@@~>rB3BsHF{1X%)Cw(`bkYz z_pNj^2%9SVZhIpzKC`xq?V}$Pry=jS0+TNoSxIm6s*|@C#RZ(Jst+q1DQs6ucNGof zUFgam6Yh2P$#`QQ|If7Jy#ir=-|wORZwX88K_#PXfWtEl#=T~;Gnv0_9Jz~w%ce}m z@2THnOIiw=ijt<>w8r~RW(U6cMJ(-@qlgqws>o~7Yb7^=;H8{)n z`S9oIVKV|N2OruaX|ZvCZqLN+h)*TCESq)xTiB(?D9sM35KDQ_e&W4j(z>CPA$JnS zfc)zrOF{p}Cr0+otrdBh6KEB59adsj@n&Cp*sd?P+hn6vnf|5qo*OZ(F5T2}&KhJ! z7(s@lQu^!PXHrvFI0TI@XwjQ{E+$fyL-j*y6LVLLkm!SPUT@%fFZnr;W9s(tl=lxp zHW@vaxi~a2GeKKHrl(FQnx0CHMt!UpI?k%svZ5{Wvehl^G>c7P!9NGfFb#r7eKS+G zN$Ip~XY%c!p%lL5=G`eYilB;!ytln(l{$P#(fN|~@yy3f`vR=0uN_q0xrYaJdtt+D zS}x9LK{V{v-Wif^=Jz;B!1_z8;j3}pa-P{`D&e0L#^;Xn@^{#m*JnB(%qR5^8EtxM zPkg-B=BN99g5y>pqf(`^(IdW=X%-Hjj;fZ1!yORwPpF}LFnyQI~U$HsYf>r&xwB}8>F8iw$ zt9tp(6xtxf`D2w$oMX1v%L`UNpRT^&KGNSI{Tl9?J*qjfK^j@$EoLPzhmHR7*!t&x z+`k#Q{}y50lkQ6+=VrmX1$>_GlcHC52V<`bG&Qxotav8iTsF^TFqHi|)~ZH1`+hEUxGC9;@I5RSWX^@Jiv<_EpnM-7-$6b3XO`j<@mmV*CI)@- z5zTGUq)6r4Gpno;G(4v% z&k{z(+r22YN*cqj)?Q!`3hB?Qxtf(L<4LXWoQMytPI0azlJk3JN$oe?Paij!HUFWx z3dz3YYeC7ZP2&7DSl%=mrkQSt8yt@@z$!fO9F#>aEBV^so+lGkuOod#-A8Vi#)R%$ zxvW9$TB`I!p3IRPSQ}GfDb^7l{?2sOR5RNkdWU?E$DYuHtw(WYMmmK2hPT77FcoXt z4*WZ&Lx*-rOowY39$R0=6NAtuIJ*_TqkT?n36T162QY^=sGeo%oc7c?;9~sIP4C3?adX^lj?7` z2Fyncc|QmTq+wqCeVvp2tdhmNz`1(mCXLrIVI5=6Q`qX5J3%Yx;Tqqa$n)EI{`?1T za$rb6)^PA%Q^LRBe(~bWeqoNui2wfm!t~W+um67OgIeJKU;g}XsH3C9Z*z0gP3!5O z=RL=CaOl6jd??8D|NWn8Z6M|V8u7^wP<6hEjFh+{cKo=1`D6HHj*INUZd$tl=%>5n zc2Au-bLNFvkY(mel7kSI9t0QJ$;vge{~vJV=CQ$t7jGLFaLjt@em&3Tsqj`llC?eMY3 z>%y-99C7h}p};n^`o%x!@B#5y`cRY!sKe*5`wfzRawj4NbOuopXk1Qg?RW$#xK$_A z<#p%}zSw??`(sYd9TNAQ2d?k~5^>ho`(K(f&cn|}{hV5gdW#W$S>@2z-o6VRYRXw5 zbmmOqkViet%r|SiLf$QVdm#}Kkt-?(l3`~UfeZK@Iy#Uz@u{-Cy6n|Viybga?l$t2 z(>{Cj!i5X(;Q1#+rd&L=%d&07^{NXv%D)ea7iv$EZh-cRDLOh@STKyX((>(++@B>L zlsY{Vt80<`35*xmz2uBaGcK`6?w$vN=Y?hU+afH! z>3d?T75O)xPsE>g3^*PxIA8tBS3%a{da&MHWBF=O{}<3nVNUd z{M<{70O^Q|z0_3x^{#RmZE}Tctw_)(tG-)%J9@9Yi<|hck%!sa<}%=E>$#h964#>$ z+OFaaEV=KiN7pN=XPIH4{<(G^(TUEiDP_K3TZi@T2jZG+0^K4SA--x6mU>BMx;ifJ zHh|jOKD?zl62UN9sKwc+Fl?2wi*i!?_HDYzI-W$|E^&Gn>@KPM6>DB{TyZKX=?y`_ znzkWY!oB|5L`PpfQkwTG-WG~Z;pnx(Dpl~CdW+nNhTT&bHJ$sz!q5Xk&FD?#X_vic zvh5ZKX}nEx6P%JvmSsrd>$b?P`9IvfcRbbo`v-ocXqY8CyG2owy^4&KlD$P%_TF14 z$taXWsK{1iZz8fYvW|6-W3S_I9KY+`ec#{D@BiO_KaU=Fcjq|o^M1cx*Xx?k>v{c| zeZKv6yNm*tM`L&9`LNV4v9yoX>^3X6(*4`SBmL+W{OJ~UdGpPN&F-u0`DHnY-z=&9 zwydy}mFL5uFc-1?TEjl%HGk(<*}=n3V;kPpVS^_z?n2kE|G;V)soy*^GWqST+E`>{ zBxQjyz>Y``Qm%Tt$oecXOy3A~$+d|##7M>(NR(_?C2I0BSk*pGyeckSGN)T8a`6@J z!Wu4YU7U7NI(_UMrs$L{JIfifHoK>@4$oxw79RMV;!k00MT~1Yr}g8~lb zc$6P}r0#VVWv$o+a!2{`ORU}=wn1?iixjs+elZH_WQt`|isQk*jufg^QCB|&2vUvqSx{1tEHko% zwOiPw|FLx`&V_4qx&`C>5UL65mX%{vnSGy!JpelGY;xD@=i3eod|AIL%b#DO3U<^x zBicUFhfh4x*3wFchVJ-TKvFW3`Ey_Nf!gZ&zMR)G3DHd6Ym5$;exF(nBpP~)aw=rX z4fw}GlriEZbD^<7Wz&DXd){cqRU9)7^fGWAW{{n1;lATqBehN$mqf8^i|egjo#u6Z!MFY49cL zKh1>S7C|+uzoNPL{;PJzchsQu*U^Amqf}B=O*mi^POnmYiUA-VCa~PO_SrU#JCId~ z8}lf~)l!#4H`4w<(*+*rXe{%^8bv9Pk>U}*L5SzvOXV%@QfR%I$Z4Evv4CWa3^7%$o?R9hNK`b@5yglEsW}Az#`@;7V70W z{|*YyybZbU>?K<4QIXa&s$-YvPe7_~W<_6L|6z%qCdm#Iip65sbE``rjm95?=m+xC z+}4#kS-H8PU32P74t4B{)Z5eESv<;uwwZ`sXmNc{&aPm75o>H@l<&jH-KGURKbm>e ztEu6peh4{XNszO#^%M0J!3k(-r2t5+o+2EF1)bx~la6(B8=u+2fH+7ljz?_h+Ao)L zbT5B=5I0(KuUuv{s&KssQa{>$>ga(t{SPtP&NX#i-DApe8iPWK?H@-xph}=tGHvz2 z&gaJAtiTg3jZp7Dl<*a(I{Hf(S65EG{J|sB`uv+MH(0?qp3g7zBb$Q(yBRYlfzrHE z3aQhrm`lkn4H4VSR;~g74qv~@)hqaPFVH#ZOQLhxpthZl6={fM*UO?dlW3kQy;yR*h&6&jyTmtW(Sx&ZDwv?0Wmf(9voZq> zy&c1!67|<24s0ONNb_OeO*OWc>1`U0^JtGFh;g2uLTDD>($6c#&7U>W(jtRpJ8|3!%83ns zT;b1xwKCIRT}1}ZyG`AO)=7JJ-@CT zN0FHcEhwM1wzm}wv@9&nL6JQqVQI@7vu^<$c64z36wJ-fg4|P**2N}3H^SvoYfvZ5 z%*@cVivs5fT5fiHr8Tecy#kFS*8d_wFqL?}^UeL@!7p&y#VEtH00_@&LXG=Z2&UaD zHA#4#426zoDaFxk)|*x_jVYoSjT%X#3OKx}S)v$XU~MF#xh_h?zy&l>21t3NFp>%k#w2SF0voD3%nj@bF+*~>RaPSI~=emf$N56?j0Huof+Se^=$DjtnbRG zc7HbAFmFV+I0`$a>{NAlcTcd}?b2(wx>(eMLh)g+^^P*#Ui48)2cN)CAprnEOk!d< z94N9iMaF**e|i(Oer)QXtuXl=OD=DTr>ylL#olhfJa>4X6VNlPjY%z9PEJ?hknozY z@uKYz>_K+o=bcGwus(ncM?@$1TH3IFyRC3WQ4uYiea-;7zSZMfX5zphLp4(|X5aYU zkOyQLNIK4dM&)z1M zvE;?FV8>L4t`tnh2d?H@7FDH0T%~%|bk+V9zx-Qa8=hNz+dbXVWxw*T^_mH?1}$GR zG&H>7!$|sl&Ic%&d@qH%s4`wIxO?MdZH zSJCD13!sMO&CJYN$!kpaZ!0*6g^CZr-MHcL@nIVdMOKHsPjDrknc+4nsY?;OXI>8M9=0O6PTp8hr@8aQ&Y0RkmgozV$ zi}$Hw&ie-ffoYrAe91*&sHynA;MXZc85L;vv-C_lwxape*$;n#PUf*dTL^os9zTBe z13TNs{wa30fT|Q}i32=k;2<_WsvsKGVe&zT&u!_s!mDv@dPMZZUsSzYo21zbKcp zqz2{n85kJISwn^6)}dQ>a?2Y4CY+g0_X&rq?jsN_MBWrcnM_q2JFx`2s=|hd#%{CW)>qdGa{3U;T z)_x=B`lJm61pP01j=J4_Eo`T!v&RhuCkDC~+e0sk5$ii@F9IAYaz-u9o)_D`kbX2f z=AIi#APkd4+|sAQp-p2?j^vFF3ctOaO%CY68t0Kw`_k;{R{=S2a{JNe0@tMJ=W@Ti zm?XYqT5v!CXhb~VUW(+!%+t@B{X&Ax9-rajdZy#&C-uz%ji@#}bpmj(+<7N{nm+Of zdT$&T^X}c5IlYrTR%tQ|<5)bBbmlW7M?cln&<`t$0e9Z=1+F%4}gLOOgKxXS%I zoabI%Oy9gzL}xdm*giiL&vWtIpe=@U2G&HZGYl(DT%07I^xiQ`MnsYsH!(p+9GhvXiatxw~?n`tqNjCQx?-@(Tqp=UjL?6>W$LNpta7Upp=>bLJ*P* zz0rf%@#!@a;AM2mK0`~}j96>FCx>Y%-zi1aaY#p<<-$pX?5v&d{k+P2N~~azrGLaq zK9;damNH+(Z9lOPNN8i<+q)r{&Ky#{+ik|5uW%rn~$W*tS5Fs|PL zx<*Zv;+nA6C@X1?{e3R4**mQEVquUg&Z&{uw4mJWq%!%FK|!FQjj{l4Cx|!Is(I(v zJPQE^A|x!_Ft-7{&m_=ssspV@*@HL#8g7Aa_G8b0Dq{kgb{QENV_Zo1^}pTG{?<5I z2UG^#0|R6zC1vIMcOK)Pce&d@>xMW%8**!ik>|=X@9d!X(k9hZ1wXrWpFE5W3)vkvGtMTLOD8LepDS?~ zZ+;gzXl~E`1Nq>eKX12GvI~6`k*4jr04p%Dfxi+!Bt#@`c}fCBY6t{D00qDLu;K9L z*48B4Iq2IK&=js0z1jRW)ljlXl(GUYCPF6P&sPf8Vcq0TOP|KTe^`KYhI=+Pe95Zk zD=I790z$XpGEnJ{+xP|S?6>*n06&nu3(!pzAVHz6l8k)$ELSfLspNyjE1CSXhR1ib ze#{FQ;NBPQ-VY2QRjZ=#;V}Nq5|Egqwq=OvT8_4HAeik5*L&r!mg zV38=)_dz9@fkj>Ql+5NJ0R3nz^pm%*q`rCc6d{JvxO<9pq{4vzpS%+I=NIz%S(ZxR^Ci___a%hYP8UH51jxFuhYq?pN#_GEU}{LoRJzmeQCtLM@I2ju)4 z?|+RPWH9!nU6p_X23fFvnaVN#fLieAenO{gV)`dg9)N@eXQV&A9Ec>ws^WOkpk*y( z8%Rz}O-xXL$LqaptfLbV6huM*OrO?WhR;F8L3q%1V?wbk>(G=-Qu+=FB;d!2hr%YB z;EDU53g@PCT59Ka)Me`GmoTFb3x_klBqt18YvUXM9X+mWVNm z4jE`%4p}J>9s0PHp`XO`;x860Y-4B*!q+-u%~1tbp8Cv z`Yq^1nBFq5O?3D5g+SQRU#CwM9`b+10Or$Smlgf9#&=Mwmp3Rz{Z(EpqpxclU;n^C ztoU;BPVBkK!CD`dKpDn^jJN02Yu>d(1#*qNWEAlW;*B_1Chu_e3fF&eBroLX6x{MT0Tp@7?itAEVL>J zb%$2Tl_a8ZtqwXgQCdO4c#0`S3qYSLDJcc^{Q)k?CzFzy_fiM$UVGay|L4zDU(|gy zH4+HfHT~!>t=5idXls*4w`A;gF1b&`*pjDNlIBco(d0;vti~2s`Xq2aGxRhz#d73r zm<(*NQ!u;t6t}WkRlojXvd6R*> za@OfZQ^=S-wP=D`F0i=M(a}+;{DyQ};mA_s1NUOj=m?4x+Kl!xO+`oe-2086-o)vL zXk&TT`oa$b$9}QM#K<`ez@vKK3El||h#9eSs5&3uU-kXzGfZR%mAAfCM>C!E$$^6a zhpbNrB^`VL0trhVa|IGeW; zn`>!lDFdu96h0m%PD2=A4wjvnszJr|b1#|aPm62cY=5839Bvwb6}jTED_`~XlH7H_ z$pL=Cryt=A%hgoWUCOC_|Y;n#1P7K&pxsZrlx2EH8oo3 zJBNt;Sm{UcAoa&4-eTN+Wf^ zj$D6LtoP&-2IPHM+!LUv^A-L5rP(|uf(qMUGZZ~Mke~>HKMv)SKua9^_HE?C!aO>H ziy4WRAXVaOrUdqwdavTd@#8SE) z;yZ?pt;cz87Y+!F7n8h!GqBqF;@;ZS-g$1SZ#%oS4av`o`bZwZHhs7~-Gh;cX27Lt zoH^h2jh3WVHpt4HrC{iH)Ygh0*~;9UqWOCTmY=N0sx65@n-{g4ihsf{H*rfyNA0Hl zYKH0xN#Mf6MaL+!M?6~8L0-{}XNqr_J5i1hWA8CkQ9Z#Oo%RX+64hLSeGxUM2&FOd zEcuLkKS}ZFB1C{s7pS zJ&8^e)$j7GVm;JziZ!oUPjz*rhK(uKz6uFFoV>6{{^?Gcc!Tf{5Jc@` zKP_8_t^nY(ciWk)^>4XS$luoOFF>}^ zf4iDrcT4v}FRlFJR9URLpk-!`G}^jccME?Rrw9fnxsXkeCdwUb&$QtYz-K_}|Abg{ zYE7|S8>P+xM5C15;$(hq&g$E9TifgsZd6|#${rAN@1${fw_UDXVkQidXU@D2 zRnsHuyQT;NNsU^sD3B)IB3KDF42h#xgkI5=+95`*Y z$;$`4R^AaH%kqg`Xd9z)zoHn)HD}l=#k!TdU98QojwMci`usF|>oIQ6A&Ib5MXc_+ zBDN-oXY3x(X01&>pVy<$m|i-cJ0}C=!~t2}!_P2>ovI@Lw3+?18it$d9*}sCtc*udJY~l5GtY7U%MRqEwB%j4xkKs?I$@HxFaKm1#kzLDoXH zUx-Q$)NYlPm7Ti?z%c=&`RSm+f#WM|B!{k3ssW0e=1gM_Q*P1s{i)pUvMfk7SdA(4 zHHlq(v8OZ2jXGG%qZC$jiKcO*FP_u9v_dX_^kbeYMQB}WPLbie?%56WyCTu zcTClsr6W1Ps*EU$W8z}2cunoD58xLUhP;G>cVgID9o`KLwIU5W%71&cmPEGB=-b^C zDu}g22vjKIYUd5a%i`rQ0-Km7VskTJ|8Qx*P60YLGmnoiR((IB3$=ZApOIn1No7GKj!N;HiIAsM7*Xh;cTavUYp zKdxmP#aBlAKLvf6b?8jsK{);ou^{HH_s54~4ZAq$#;+dtnkT-BJOuk@;;_e5PEp5x zfrJp$TyN>n0Ppqhw;C6HWr<$gp+k$Ptoy=$JRh}W>cDGYPH$!lu~kMJd4BE1$JRdo zo`0hLCHMJV%=9!#r8=_M^n>rGa#1=`YVA3-;Od@l^yVa+KLa6H}y$LmAO0q z9W1k|(elt|mx`b*^v;ncHhEiQiF*vRD6WG)c*M+Fr0miI;V8D1J4K1)v0TwA?lS?FlP05?bZ@|3{K zXcg4@+U|A>!=XEN)uds6gxFGEhQi_?j}B(fboKY!nYz;A&Jd;_$Fi5SsSYm?TG@}% zp}Ue3E~I*_Txzd7fioh9YtUFrJ1jY^PZ3`_qweIMDs$}28~S~DPF>rdJwnO)T)r6u zKkFW8`A+twEO54&PbMwU(v@<`?yeQdCr>IP=Nq^TI>+4k@l*UZ?GS!d#*w9vQCHC?@YrNq%UmOOvE+qW)Ih zbCO!)R{2!a>7`xLG0O<6c`y&!f^CU11~+_BNLT=-fqvEJ>U@r1M4l_yz{YPP<8nw8 zVYCMpvyrV>`)~*O2v(zf_m(aM58-!Qu3_^9kwgx>jln##y|>Vd25_84o&!X4AI*0S zI^h6+hjd6zTaHc*Bm6_FqtB~KF{MTA>&esD(m!pt!McEyFz+MA?8BiryVY&*x5nwvRL`dNZC=b8a09T) zBO@p3*y|uPeQ+cb(lieR-`v;EWS>)f{qm~XmfR-DX_R#Ei zP+qRjqI`jv7qHa?g2csj0^)8Sxm_AC)A-Z+X*QefNa6?6*jKe7Ch&(+9I2Chyu$pPeGcqQzA_(<8K(`EwSS@?2e#3%nd(co5jGl zE$?6lF$Av_Bl}7R7j6G0T~C1}@Yy57$>JaN_d2tKyM_aGixJ6(%XsdL)MI0KqqMg~ z{Va9E_^qg9-I7V_#<#C|ZZCgcx9mx2GrRr!T)MXPkB;vo)o@n2w`|`@_@$51gKazs zV!!UuqWVtVPoRwf-_%$Hr{hCYyGHeIv~EIB-@fsWpmdJ}^Q_K3FA>!TTY_x7h?wu4 z*KE0nx>ThbSHL&kwQsHSs{JrFiW&v2tm{IwSyXe(z?ygL>+js-_KHc&-5BRIAexD% zcY>^O43F|w41M6jE>yLtl;fb7RueIhS*@s(rv(L71r3G5FRCe~aSr}ke<7*<~7a31uMd(t1Y=gd!p1G&z?Y5c8-*Yt#aQxR2@X~ z6nq|&FSEmye#+T|x|`)h6U1;Nz0Mp^JBeSv#o;R&vQziOU^8gZ`Fi$j&ukAlp`Kvk z^);klpNW+r{g`w3h_C|o+GElTeDU+)hOA|U4Fn@LbS_vHO5TtyN6LAC^#ZRMO3yH3 z$1OxoCGJ4+5hUNBX!!76Clmz=zjxhF628mML3@LlR#H$;`@w?=_Hi_RS6n!ofn8@9Is zp1^*XKpf-gbfC<-pXwc1*OdJH>A}ly6Rk1ic*(WqClfLAhIzhYMn?y}R<(N=sb45?E)yzXAglgwo-r=VuDml*@g~h!+>$T6d z%B1`jTv&n3;huGW|H-mnpAsU@E;%_b{t{zdUKYuHIqxJ1(XpX72RAs(kQfKlPzBw! zNrUMsBZsCz&9iHT0~e%T@F+uKUh8gqYqx`nhsPr+2V~elUxPB1-Wte&*=QG&=-Yjo zK+8Ye_euRRw=rpdpfA}gPL1gPs2|5f#}48N9G4StM=|A$ONiP#yTB0X({z8}<7uo< z==S(&TXck(#-8J*LNjTSRmm0=BOAKSkFnD)EF#QesFTOefiOumbqd+>RY2y&ZJgrs z=_79!pxE(Idgj~84U?=m)A7h5)eI2j#ARy`hv`Ah#WZxi*R zhPC84afd?H*U2cpc7R<&sTusW8TQ|khohp3x2Uq#Wl1NGye~1074dL>y~LEmT0L@* zN&Z=_?tBsnWe7%>jVkSsD;T1-xdu4+%(Jsv$F%~?If{y~mq4Agwk$z@A^X?8*zVc< z0p`+$qYpl=tzZ4zF)hP-^T<4TYPE8wnBA*N1Leaj5YIswJhL(^tm6B}Pl60?R}$N# z4wbEbuY*fCSHqSEeb4{8>hEu~^`1Wg7Xg;u4d0h>kq>Of3&$1OA{_>rJs)`?T>d1p zt(cdoCuubG)(slkBf_?TyscjQ2XM{I@~T?kRzX*Oew~-`%ec51wvEQShYQk`e{(+w zL>~CTi3mxwK+Os|ER8HU)9Cv6mF93k%d4nH159A8W$hQm(M6X0COGaxXeY7_`{cuQ zXt~YSr~dHS){CcJje|}?e3zM~c2}_}L|G;Bjy;?Ioz>CB)&?(XNbO}jtnijp#RYuS zFa5S;TEstblb6w)&D=c2-7Y(2(o~2sUvMm(wugHoi>p5>7L*#YvTb(E^RF3hFq?Pj zb5GURA+NMNKgz=<;l}?++9_}5X=2WI%kGm>H{*kd_uVvl*;Fz^a#dnZ3iMS|K9rx? zPnGcF8n?xB%@ClzUJpJRWNQzDk2Y|<^O0a$(N#y@!TU{ex*1Mtpe+FI<=Q7epExCD z3V|FvnF+2(0HYxQ5uv>P3hG7jytZBBm0vzhurr9CgnpS`tr+TKbmY{s6c;`A&{RM) z&7hZ^v^S=VCwP09{_(+`H;(1Jnn~~PtT8Nu45y1+3i35~Ahe~9b#WjF&YoL9t^Oxi z3=kt>Jj%{A(4MzICX$<*`)cDtr0>pf&i zQuR=J72L}Su#H!}E*l*7YBC86l(~}M(Fk#pGMkWwM5!v2b)9WVLi*i4;~Yx^&v&SZ;6+WE{b zrNmTY=2W#aJq{6CK7X-?C43d4J@uNF`ot^jiNx0Mf-|8He0=#zl_lU`vN?TqWKe7+*+WPvi@UqlKbYOM<8LIFF?~81&^e!b7<~sp~9Vy_M7j7I|=cu>-{yjf@4`8gtWqn+N2|3V@yjt#RbH)d%o z%mRTh*Qg-Z$*{8}FXp3CoufjnFRC*(MF&CBmt$O$13;K6F~SGcKOP~m@=O;Lbs&Fu zfvec|Koyfyf>dt<4RiXLw@soTQ^5?FYfY@++YU|_1sRzD zW+FC39kp5T0WEZ$HoP)Jg~ap`;sN{q4y|4(0^%1P|B>t2f@UT8;F!Dq;R=NW#pIh(pTd1^bYW&2ZHU-2yOd;4U7ZnUNZ?(? z;-fY9E`n#Ta{lTbSwIENl1aH9c;WXyPSUuoNu^xw;$Cm$BgfKR^f**veqq?P$;(c(_TF^QYlGp>;Ac)5OOJANRJ@x;~Vi zn%>?vHM|5G;-8;e@4>K~J8$%zL%N6Yifzc)f2AVYp4KZ;E*jUj0~t?EKze0LhmY%7 z{KFry|Leivwp4Hqemr^-wJypb@49Bj@fYeIG0!!*kB>rblQ!xBt44yA?O*7`e~l9V zKWdZsuiEkdz47DOiGLa&0QT>xeb#=_T>^+8Cmcl^lF-v@brxSaWn|bPhyEL_RE0m1!~Kop4#C^7zIBHM-f0A zT@lc80BI)2*|SF=`?HqcdA1(D2)or_D?I&#!H98tON^C@0G!p|kt{PpT(Y$(0_lPsG)R^C*`A0Zk9o*1`6z@J4wB5I0guP(ObB;Qmqr5JdQn=dBh0eNq&u z>0U5}{$_c5d;S_+^$H0Jkh^E*nE#Wa`N)DzssDs$;ikGVcrtZ@B@_}(-81+ z*5RRsENnL%3Rec0BM%P`2P_Prqq6ZpZUz|P<0ORs zaBsds1;Ia_K2T(yz`@E<}sk{%j=T+-HlQ~?bjBRabG+1baXQ>mfx{xDPpX1v@N zhl1eXqGWI1KE7PFp*l8n0&2VRKtWCTguF(7Nyns&`st0Pv9teS0sdL&?C8ICEoEug^9LKVsV~ih!DiUyv zGsW>d>7RuRNp*EK;NOCOJh}-~0r^plpCcP5p@J9s;}Ou}9zn5+yB_6FJOPBma2jM4 z6v%S5_y8u0NhTC2&Go^xGE=;d18xQt2m(N|Dx=dq@EK5tfQ%d)8(Sw0diL!2;%K?L zHV!5;Q>d2uHVsz>@z=l`&4)u3qt@hL0gU4M)~RKfH! zrhjF70p+`zwstrU9bjBK4*bj@k*%M7Q4_%H+fTWxXJGIguI4Gprdi;NQo4P+0fB&Z zrDyH{9%V+hre!)dWEo0pJ$BK~$impOsm%h4Vg?K{5P3JQ1Mk4vkXbZSLIK#GBcLGw z-~+@E+1?F`4-$cpgmL)-|jpcOoCHqH(RnT2g1h4VQ5=@vmg8B*b15?iRV&T*9r=I{H zlLIm0zjfQ)T^PY!V_=|rMrNks>EzSY)X41IdM`T~_P|kfLkfxK!-ZupMmlKLVu{(Vyle`CaVBvbLDLZ$sldMBbIBxx>(>7 z48B|>9l0I%!CL~g%6<>_QwN4b*b{-Q1jMp+Zyi80&JO-(mqu9r*+6+SS|8|8QyUr& zIPlZdgRa76ul=n-jI0wN_CS+du^G73_yrlV-Uk?;a9BxA?{|a70cTK!j*~b0tDq2B zP)igC3{4M6E8HjaMI!6d`BM;JzU+~>H&&BY*NN}hFtLlD+%h7?iZd3X8@|A2p3}w_!$tA#YV#4 zrUbZoGp4_ymjD`B>^|ECD}a(=P&utZY)@ekLHFp!8)c@Yk;L)*>Ftg1#R68P3!fv{IZ-HtFNC+wp>!mit~EMTSldtXi8@1c3u$KG zQ`l{Atg_g&kV2!!>5${4XZUz|Q9JBPRbZc>+0GM?brgO7c_mS2e^3-~@5=n)LDU z$ru%v>B;c}wiuE*+ARs!`TMQw_El>NC|Q_NJBgcoMSF+GjkbK&62|iQOmigt68H1- ztFR9Gb}hznctpv|ON_W0E(6AZRn(Cq-5lw1gCBkcr1eov34z&wJ*fejJMv^puoVC_ zfZil-RDd@#SP3}yqO4T?Rlp%5>bd&hO)!T~U1G@o z!z*g;;CKMM_5g$g>IY*Upy1ZGVX_~nl!@p7LPmZSXzkY@z8)*(4;Drl>*_KI#RTkb zTK_$3$S<|Va%bDEdrBgPQr?YvU>syJT5>&tP!41>rM@?B9s=9PrFZ@xQ`^%Vfpo@R z_yCDjR5$MVAPoLcfK~!lDso7Zt^tD?Bapt(fd^a!m_45J=Q9cl5Mq)hIC!MnpNQL~ zwNXH>cL)WgW|A?S#aAXM1OfA|0w`^RS=a*r5NC|5{_PSuDf&(o$io0{#R7cusEL&= zA`H)@0R%n3_bx&=1Ej!vMn^AE>+v~v$N(76+2;~)L~0vBi=!l4bk!L-T6@E$9a0dv zzzz#JpuseV2ALX@dje%BX#E2nHwh>#u<)-ou#tYy5p|B*bYy5K0?fZ~`uIL9{r?Mj za1?1A;}`_)x4S90q87Hsc7fVU_ppnL^7roD>n7~}r%#Uj)hG8sF@UoTz`4c-^k%^C!4xt602~m7L(;qr z4fBRgmq*LXfJ==#|KNl`71D(YGE;|fuE#h}0;_i`@W-*=L=nS90uJ`j7%%Aqf(y8l z&y$>v|0DJhVSWFLO+G!TshG?xoY`0Z)n3U$d5ALg(=F}##O zU*On&^=CznZRlhAp&zvbktE48uPd!e2>8uJKhDyih?^|71(6=7Bdq8EBN_r0-_+C; z02u%5KqEjMI4sP8?T_kSG~pLE|HkmvMYYRs-TjU~D5yNQ;Kn{udJF<01j-cBSz5aN zr*Jl-`vsKqt4r>+R5Jg&kBEltEu3wQ{-o%U>s>JJ*RuE?jrLbjy)$qs~0$!))$ z$8VaPwnN6NH}qllvHx6A2w#4%;sG-Nh@?>H6%Rw#!b2lyGXMs>aP0VZU68-HuAL*r z*YsI-1Ex-f7jN0PvQlFv3{M+|e)>yt3Jo<#iaGVpYk*4gu`0~Z<(bEwKUha+y9%{z z+cm(us|#VN*$I5bvkL>4dk;OSTn5M`lf4{AI)DAJxuNdUsubV`fSRVN2KK)=3Nir` z-ydz<}6EbETi51Do}J5+7}Oe8np1z5VDz_;KGPd|~R`#EXuU!Yij1z&GZGMuivllo` zy;@PxATIj%Z?eY|t|2@FWj}!iVWta^Vt@mqm|b-B8vbs{)-ai1hKP#fQcbF4IFM0f ze|bf+v~FBQf#M_|kizUeC?Os=6J<1?y@#zqK+3=!p@CfnLJ5btcL{Hu+HfDUrP~BE zVnJL+DFZa~)GMq1ClNxD-))hlgG%wwpA|Hr#@brJ07#pu^X3R2&y7`Yg;H|3kQWzZ zr3mnPVYR<;H(*(CS<)-c*TXc?`S*M@QxQZ&c9+5p@4D36O25_s>hPND?(x?rFEGQh zAys9HJ^(QP_tUe=+!sVZh!O%%NKG=(V=^{8@72{+wBDnZji*;sVKHG>hRv%W5Zb~| zM-Pgs75TFOoq`!u&JbCVGqUt1k^*~02-McD4jD15cO3ekC_H<&)~Gg5sa`;W61%{* zv|fblFG31&0Ys{|*J=!4kARo^%4_!`_FyZDrE%Gu-3E4v>ko^}QSmO=w(`N6qqE_9 z=jdX2tsIv65MU*WU-AOy|9waLXH86rqTIarJP~+{z`^WZva3t?3cd& ztG-q5)9W>s?9SC7OfRvg?*I`8V11M|qv6D8zTc%@VQm8RXJZbFfA;OMjX~j+LUJ4; zh>B+qC=@$xYf|rlx|oK|^MtZK^1loML@lb}$f{krV^cQl*$7#R9VNqXFCd_6ERvYr z5WmfJ?YH0NiK@L)X-~hotB(FO#*{C7&+ymUvYzB;57+qP{8KqKuwgMrq2}a2_s`8? z5kx?6$p{{tUwb-6Js%V!1qfSx>CbDXy)UZ>3<4Sc?ZYu!Py&_hl%U?}TZc;OIclC0 zJAFS0B^{A)GBI@50%bCZN=i^A1X`?cnIgagM1YoT20ODBfOuc!M# zT^6*FqG}^V)AD9r{9O!LQm)MVb5k_sgF7wSA@h5WY4WO#(@Jox$?WgG6W-=G;4JUH z@aX?Xt(iU^+keCVnmr}$Pm)uZSz9GjiF!^i^NM??-`x8|N3;i-w<&s?K zo)PZ3F_Z45#41nip!vA#Zgcj4XRCiC$O#kl#`}+r%vl};&5cVu9Y`VR5aD_+WB(xs zJZNieIzbHXlWcoP*y_4|Mmc zDeFEJK;wkMmg0@`=G-Xukc z{W-N70BE?hdwZ0LZu?6V&+IFXKQR3%c)OQz4MsPmWoD8?=*ZNwCB5}aeIAPiw@47^ zAH>qJfA2Sv;h)CGNAvqHq?5(>s1L$LKmK~--tYNpR8p6ri2;&+VZ9DYLz0fi*#q2{ z8yF5YwgXodwM88lDQ3q!HJh;XB-$S{Q~kxKoG)Afd?LgrW1B_8odVUHC(i*1@f0;R zA}jM#E&p&vFgdeJ?8zKN8mqq3?<;7MF?`GDno@AqkOVt;esa1?)$p|_70s5r-zb9` zhwkj9vlf_bO_C#Pj9)urhU}`K>*BBS?rW4^f6jy!&Z?xE{*q}vSWVm5 zX#JK^Q^V#m`%~@68i@%E7<_%rl4^Se&93G}_vWlhf(Z-*gyDbGQ-<-cC18Fo5L+PU zmf_;|U*ZEUxw!*QB17$AyqJ39iJ2~?ng){vQB=qdZ*Z|Jk~@OY;D@%$VBV56pu**B z$0|+(ljIE*l@mt(cx2+#Bn+ZRP+zn1*-(E3Yj@!w0Oo}Z)dt8Q@K0mo=wqkOwSKln z`d4OWExg8oK@~}sFxeFlfs7qS+n#}~zTxI}9X^}2@J1lvRMQB9X~mbp%AVpxBkyB@ zHPFBLlLkue1c-4K zpRM2WdAbq`M6Uh9)+6s6J|l8ZDf3VBMQb-+iEAPwu9g^U`~6Q}CgcrHx~72Zoh4^$~-12Ze-{xHQh=M%J>$TA4Yz^FyZyTyCJ{JG4p#A+lbc|5BlQIk&ewcY9?N`BD z2Vs2A;2=ZcoF{;xVd5!IKxbRqO+7tkAi03D!$)8(!S9Wa8$n}gD>`zW+spGS%%=J9 z@#E(O4d7LPcgmNkrFY&hJe1ecqWAXpZZJ~3fJm^PG$bJwJjntP(o`!42Xd4z5kCk0 zYg+x`)zGFD5fR3Ygf6tSv1x0Gq;s{;9L^Bk*I8@gz0F(kRjH}eJ7Z->+2yT#Mp)E7 z`I7{G`0ydCjZ-F;o(u(`ZMTaLQCWxDxmxoKRB85R6ZGxtkpKzT=J5D2+=b%o)1HUIZ*+6??8flmu!q1VemL5YG(vZ{B+zgJfpIb1@d`eBWt+Y1H*9( z^W$ggQjN}Q6}Q+!Y=;~`$4f_h@>zG@z-?PSx*GGhx)64!*Ryy#MNZOXrZ!;lQjL=# zm!SHgxi%aq*Og)xN-puECak@mLK7|7QIIb?hm)j&5qIZJyy>645G+y2O=yRehA5G> z6{da5!%(sA^m}Al1Y26%HB)ug+Bf(0(K6rnWWT4H=m2jx?xQ9Ah&(IMk*D z)U&RaZ)1TiurBj+k$sMTh=$=@=tk8S>Xe>01%3xY?S3 zMWd%-$|5qz?-!ghzZ7)2i{)F4ZnxBP&6%Zs3lU-aj;=0k(0DmNW+8Q`@>ur>TFdx* zND!nVHY7|~b8>R9j$F_*RbynHGzuf7_?kZS059Mt`3zU-rXu12=TRRp5j` z#>!qecTNF%8~nFm97A9y_usKLsrk{zUS8fj*vFc#(qpg_490v?nR*WK@A}df3OWYa z6hnxZE#}jywvS8fJX>+O)I7si;od?Wu1`goow+;1vb8EzYx7;2 zyIB-+ewjGkkDvvQTu&wn-TY8zRScH2b$L5w+d27?(da_$2gj71ethiVhh^- zggYzBQTMTQjnok5j)s(F7{(8i>T&qu$%%D_jrPh*D;e&y&^L+9F!kHrFLXjM}!jsspjqmFG(b@T_m{3?W{wnURoX{F=$xEqx{t z_qurR^_JL*wvEZZe5MBJI|VGLy0a@KiNx%^IigaRG~Q~DAw#aL^h#*B?>!p}d0scu zfG6Pw52cuLZ>_LRZ&!awB-XA??(W-#TrUf8`#Y`X{rTxyV4L;#+Ww(fQaj<-Uc^^G z(KEr>_{tT#RI$}r8A8Vtxa>MOM69r}4ZtM4)AYv=?h<}_y*sGwcr1?IZ(o-ySp3LW zJE)=^Zk)zq+Tgl}Ypj$agGWNmQz7HA&Ik%VOtvK@Q;t)8#oqVh*|ayl;9kz!sP0(N z>fDW|e_lM1p&lMelvuv3ca2-x;M$aOGV+A79vsM!lNffMF;iVX;}~4RH^~jfYJ7m8 z^3LB86ew2`WC9a^8|9B{*B>v+zmr+%9VxK*Z%$2MI~5;%J44<*tJj!)cms>6mCjQZ z83jUf2d#k(7T4uPrhP(vi>uuFosA?ysmGs3%}&a_nxx!9=6YY~M=S5d6?^~TdY3Dj zAF#W`ew|1zQ@m;Hm3t?^b4Qz*=BiHg0sd^eXYKCb`AdWLW5qXa`D|=z`n}_^wpu)@ za`zzI-@B5>dLQlKRWkC`=Iy6Xqo0~p4mu?LS6@XZ^%>euNLl zze{T~GZzmS|L8xte_F;qZuSGe*3VW?7dB46UC$_oMdd5!-HMiVc3d|0@A(sLuBS-k z;LzS3f|>Y8e~eoy;Z5zHjtm}Opt*;c+nvZ8}cH%@P1Y2|mx-K~=T-TqqXw9sSfu3x6gj&GpXZr`6< z>FmL8@TWet@jzBg+(MwgHPngus&_6-wQ#L9B4YdEKIpGh=@&U26DL@w9bX?8WEWJ5 ztNx%Ar{Vw0{?CSqS`bf(#5XnP3m@*WBlpbn!)y1|HbYgxDNM`ePO9+(Se~=vuhRWi zs?s`G4odNL6BFmzvx~E2<;)a4H$1Q?L}gNqhVjGH6dEyW?65@PyFaCphhnx$~Fy6WI41QeCz-hX)vbiB#1R z|C9y@&GGwH-rQf(1`q3j@-aUW7;c3x}O8mDA+ zHwJhP^k%M^JkoX#d((>ZATHmIJYMA=G@)X->+U!9A;4(k6~<>ZJUrlI?*Y!FX*E$M zzgv6D&B)Jq@gE*vgSIT>+!hB{m2SerE`Z40uDaNa^+m4|jg;rcB#Z|@Dn5=K#0+kU zj7rMQbyYr+(Yd6I+)Tj&))h`ihYf5RavEVJOE<9>50(ro9-D+}3yQ*$Dnz}@N)pgJ zx%vH>2QD6mEY-%GVFhvajZw)#t)yC7y1oxnSaj-V z!EX+~DfxZp!TIr5Q!f64Xvse8POwknpX?yoY)P$wNqi;Cb$8QBWkTn+6lj67_R|{@ za3bMhcuEK-(`F-2F~7Nz-_PT3*+TC4XQaq1943C4)u4gce|u?!p(%pK7O~jKz$7iL z0b(;rF(9^K%*y}6-h0JGm3`a7__x)zZJSoa45)xeRuPeGKon6>M3Af^K@gCf!3+{5 z2og(0M6yVZrIJLFl5-(B=UfGK$Hwk^&Ub#_eY=mh9=frhYVW<)Tr-S0=A4(rZAJzf z%-1k{vfV?dC6=iv9n$gg;GGBC?*&x<_TkD@QH0-NSK4cxG%?xHV3NGQ%X2GFpJsXf zUh65_{`3C+29?G_RiV|212p^KF%mUOC7I9~yXlYEjG%AIzfm8NoD2_o%#XCZ`&gq$ zZ1*tE0Qh1auATkLbFfvlEo03i4rdLE*u!)dxtb=q#&u3k43ZSgiRry};+Wz0 zeeD+I{Gb2YFmVT&ot%3=A7bDsOe1_X+dm0C;^uX6r@_G+g-f$nZz)}H+xo6wi+^^? zyJewZryPaQ0;0{kf~Lgg{141-8aLy9)NQ#pvr?~B$VvI3g34Zz;U3i!Bl@|oQ`oKE z&|Y$6E-lcL`<#t;S4RZg&R30GFI#GCLH(BtAgk6j@ZQn{)( zyNMsA`wYbucvH7G2ud94Ui*6zXcJGKKK(XmwO%~1yaUX#It*lmCokFbS~Cz%g$?y3 zF+>?f`)fPKv8_nt#mEIL7$EOA;f?n6ug+kjK96_W>{5SwR^2AD2ukTs&mfVUX1%D&{&WNgE8Zs7_-H3><2q~+C4!l7GeV1 z1d9v?>wHgqx|uCDR8V06et}U#j9Gc2ZAW4uX?v)i>f4|qN5}O#LKlT~!Y}uxd^~PE zD9_KSm$ZB5>nOJi9AzK7Tq}xXMsZvD%SIUmI7&@fk8MhQ*lZICoeTLIP(59+Z=8Qr z&`u}7G)wO0^3olOxLKNmEB0Zw`5d&673|2g^SM6C6|MSA@_Zt1|N4C=a57@Pf4@u& zt4^(!s(r@9CHCSg1p}QB5LV2O={cZ0v)3Y46c=Nq)bWehd%>+4f@sr=qD zWIEr3O?!vT|8P?7nE#B4J-hAbi|5U_`03N9x3RJ&Aw8&8a_s4a*!v?MdPNyDTc#L=#tYPNToZyOKm?{8_L zfmpfsFSn;7TUmQW!?L1L2e_*gI66SYTsddL46Iw_vw^o zeuh^XgawwXp_=9EH-}#{iZx!TyD)q(OV)q+@?@!)!+RMV%!Tv=9a#sb1&8yih+R5v zMxzAj;{EqfO+3;@jrE1MD!WBEs+GwTE8kolgR3GWyBnJ_JM1%ICmMg8*-+uFxtTC& zP~m!_8T{R9IB&_Kv7YI6gXCBpJ6FQP${+LXp%zF|d!h(;guB*XT$1iH5LeKeW7d8| z>VBuF^-!Q%((Q>(V$jOa#QJw7B~d`IM07A_TglYaG=5nuLP35i9X&2_cnpP~5ltsH zvxwD=xPE_iikKGL8;X^SMO4)%3~?5&M$5S&q)vl&ZibiMh#cWD^Ddcb%`;~nWq%$= zLq0weBohrYg#D{ava_WTJlopF}Zxl zd6jDr;2ZI=v3?v##D$ikLd|K8jg2jNak`%u7sae+;<`)}X!Z|IeUH{}{&@GX1~T^9 z$@mpoxA@m7v3|{BD-mYl-$jh_^JWoO!6zCKUcol#2Mw8%DJAqBfC7>sgX#sw3=FUO zb$$gr%WU8bjWol33Bo}S^p#>!g@&pfZiE5a#4twUd7=oYy|?cVrN z=F!U9BaX4G)ZWvZ_ed!z$#2}P(`#Qs?{p*lDkCZB*KBm(W98ZLZpCp^*Fy+TW!zsR zvrS4zJoUJ7xsYpJfuz}c_{jyPM#@hL1sWT5!WxO)Uy3VGuvFR+7GG{a$v-bhpS@#J zZl}VSG^e1FOUZ;2raWD|adUzGOL)r(wbSG7Nh9L3k$Npt6>PJOF|4W`!>yH)>*J)8 zmFk`wE)VID25KhPSdnpRi8($q13&z+7zbm~91t`gZQgc`RIER7LOveV@Yh?H^}`I~ zXS%w((_QH<(9)r!kT29I@JzoHjNI4&EP;UAP*&mL>#J&NnsoZi8UFYI@8b|5k@5}M zLjIp2G~d6!KErS6B@8%5y{BdAnEaPmRbLCStpg*W+-Q#YZcHr_Vmoh_WW^?7_n}dcO`zn}sYiVC zi_nPEOMGsd_vrgHH#NP7rqXEnu$ztHexxs9URouy9P%?vTVB1%w{OvzDBvJmmE9t} z>q*a+1}$AyU0;N3lkt0ff0A6N=SC}95K`Rw`mI)$8PYz2tm(H);OBI;D^OLpM`$mdDQe7x2dl!OagkVwOK` zn%a&4N`sZPB0Tf5UNi|F?5DOF>zd6XiwQd@ev7uss%4 z(VOM=U3N+r2MJ%KK*-8yZgRawA5$IdUqtLv{wiw$qMw{IlfD+NeMe>X~)yN7|Y< zU-i~GAam}VW5lM78&f#Q&Xd=K3ZP1PT$pR;tq?RZJ@k(<8{1Q?@H6T9zsE8HvW~;vxt-?`A%} za!y)-E{?58rvoBnB{rZ9F4T5IDVY#N^8EWZ_ffP2`1rjs`2ot5*);ydneLx z(6Gw!ST&p}5s~YrqYo}SN(@&!5~HiszMY@S-*M_ydhja%{soK6v$OYpXJD9-Am)x? z&e1lg;DFnS#%6gqiIrPjGu&Sx9ZFmw&#BrIe-q)Z%cKDVt+0Yc?32({smh$Di=0 zcWo93j&IlD1`{S(7i?ZkpE67LP7$L_vpVd?F@xP!Gb1N%VDYzR&J!$ov?iwZ&dPsY zzOOf1%E*68PdpNLXTy*+ZVPyyHAP7og9MGLeF(1g@qZ*4Wau}>Ra#rJVDK@ z?|nmbJae+!df>QyvZ-S!5d3rvhiJ@rayq12)Y9BZwaF^Mkpb^lqYU(VH95WMKdSUvF^oTAlpBlY}!%beS32x=@~WL>4pAKdv2zl zu1+_#Yvp8#rB}nBdyZdJh^aj~4qcs^-!ExHFBoaftWMtSvxed1eAFtUb>B1-;)0v9 z=WN+5%Q6l=)xxzxD*UV(IBR^I4o)vN9r4c}o9*=OG1Z7q>F(~nrlDaRt2gomZ z@KH=`$^X&4D5t;iAPSA|!F_1#AIZLQ3@Deq16u7yFS5A~JD%ZW_*8u7f53=o7MuZXoHAUDG{^K2)pw@%9&TW}Z|B*9&L6BSjD4n6zMu48zRf`Ab|{Yyq>NZa=> zs*9hiKv2_%U%(LjpW`;`@Ge7VZoK@~#p;A?MWzDjHYfW0==e}}aK}`R>5Thp_2ueK z!Xu$UB;iQO#<%o}rs&3LkDLR1#0QC&fasb_J(SFQ?^Y(hRv-J+P;EhbH(WBLGe(MO zmUoF^FV#3cXRlxBtUeVm_{XNrDVpNE_8wB)=7%P$W==j`1@`bQpEw5{9}Eo?JQ13$ z^UxVEZnRHyFp78Zei@_9-p9SacTIkz>f6_-F(SEQ$9b)vQU93voy!4~p z*J$=B-*lT_HYuTr`TQ%_SH3%!caF8+NDoPt5?TW7r6FCTdUBg zPjCJ(n;KX(d7EQ|q&~Un1#9g01vWwBbn+8TeV*=PnnmN zddt?nY#6ijC^Pu@ifm@PgxcEVq(Pih!$xYgNDm1w+c_r(1RsXm9udH46(ZyF3|M^V0 z<>PEncf82$6gU{aUiakw`07C$YDwlBKj*tMZvG?bd%fS5Z7F^<5!lySao@d zC10E0Kxun*vr)#dGhMo#kc87;?j`#R5$|GGD(546pA1Pa=dN#B0y->Sy{PrE#F8~W zvc;%5>Juru>Oy2!I@^O}7pG#Qkqw8j;e3pD+WK4l78!o`d8yOEJo5LihxqPsKjEul zo{-iv+jqbxpP6kMkEhZ{)rdWNC~i8V9%80xTWhUrJyE$?+quK3@I-`7N zTxMlp%bEInC**OB@|7x~k5A_79~rO6SLe?JmC)@%RF6_5o5v5)Pj}0f#w{+`lpD7V zTz}D2F21+?ld)@DZIvaG8(OoZmG*w&O=DSC#$BDhYMQS&X!~{07oMBu+J9_JALDH# z(Q1#&edPG;Elpi2eqb(zCusDr(iL9$EFv<1o7A&jS*Fh=+s=CAoFFv80G%N?J ze{01Uv=;rat2z-T(=(I>?<@;&mD zpkTForQT3h>yt0t^uE1PQkk2#b$OmYJT^v!b{d*c{Uc2}UnSVKVQ8~jXymagOk1C7 z_&AzY4J8xGiP&J?;OHT$`46#CiN>LKAD*64eUfS4VL9D=(%3i&zvIzAe>-NJ@Y;yi zE8}%(kQ&*#ubT-#~}rJ!U7xKd-dxhJWk z4U_bQxSYzR39f?owbC-@ti^&d7KBuzoP4N~^D)PzdM$okfZ>(nZxVij>7)wV{*WSR z3)=0NQmt&hdgDB`va41&nfx2)3H?bdGv47dp_IFPNjASQ!o1t&(qo95Lp^E!c0yWm zQ*N0>o4e&=z%GwnTL*O6Pc!0&nY zgBr{mwL@6AKS0{Dexzv6wznIT<@w8Iq3|Z+SSZ*-a>@0q8A`pAQ!bBmGE$Ulp$4ul z$GBz|rO&1_a-=6bCc$F$mE=YC3#vF;Iz!fo#lm9$NLV&2sttlNnenXCs2o02`L7IV zMKz-EC6qpyX_CxC-U&nF{g0ix?!Tzz2U=I;Q}3uX3uq;~jfEvq%6aKGaU#*maB>IO z)oX@%#l>@tk=C5Prth|zCR|<4mBEiSVqYdBpOc z&dfDy*Z(F?Ord;LzB<2}6Qh1n8JHL;$j3KQa6`bdB;Uu=vo?_XYF$&)&XMP_9F}_vG1=M4bR@^9p2r!yr@r)pTVdk1NxK};ejEdXIpt8OsGeyWp|*+AG?I}% z>^+@WDI_heQ!P!;Bc_X3iE+xI4LUJx7{rDO`?02!Gw8r;k*)d1#*J4_pMI$4Qex*1 zUVp!E!4^`#%kP-qj>3?-pM`FflW6uNjHdbRuJq*~V{a*K)a77A@)gVn#^-~^-NdWM zFBnsZa0>3I0TEbfb)f+;4-ZcbwvQvd&X$sPCjikK8jdG{C&0) zJQWcV5{q3sd+r>ssA%(u5b6(!UbS)8;{UUI935cOZO64QMM|i3m-;s1pVyR>x|lJ@ zu@S`y6;mRzchC8W>am0%vNG>G_m_@d^0g9$5(RhrKpRsxd}%0Vi>h{iri7vrkI!*W6Y=S zTP!M)X}+6bqv~fnnRKBF$Uub5Iu*Se6T>erudy24!Ihrf=XQg zyK@%;xi~n`xcVEP0n>Rjh17m#s4GlGS>|ol)?C}<1MKYiw*uZ`E;Kg>hYSw&pLR|K zc}qj_5Wi3nGwm=rCpjtA;yt`$(u+L-3f`oEfGEI<5Sixwh52?{5(nkkyyIAQ>68>| zWdP?w^7~SNx5!N`<#|`Hs>b`{9v%KOy;-TmXk!6!)!?Ta#2*X%)Rrplj92!$(p9Xb ztQ-iiGS8^WmsL{T->T>9mhwp&%?VI<9AGX$lh4t9-uT0Y(Ef0aJ53*M`oB#z&{z=- z2?$`vV4BJ9(##g$Bc)?E>f*?#G;YmrFwGoBnPNTGG8QGAnDspPhRuB^;|X>71SH)w zcvTXV^0$0*F0g+>6jTfhSLq#p$Z5PlSuq6NDP6*frHmtcXP~+s}_~FdJ zRw4b037&whhh)EK8Z{3zyl-cPHM&{&^iJLTD`IvNH-Zzs&bv_s*E>8!si3-l%O%s? z#uQ(SuYSJ&4D{;FF~#p{V*02Ev#Gv5r{0_%_)Cke$_mjN~7ih?dGcZ{BT;9(jJp-%vPYh<|DC z>3A0tQ{HQFXK7|odlYG||FD*$J{9URX0$aEN-Mk4LMXDk9}Gy-%uI*;{``4PNE)Gh zq3tnVqsam9-}Qe zMt3k{W=q=cMgN(v?7qZWqux#lHIdmoD=0354A;PX=53|HPGfwTL+67H+rYS*n7Egy zo<8(OSMI_EVut$1j~~;ZZ-_(Gc6$Npe5twG1wF=(P5&$e0w`=$cj%YSYw9n_11HvD zX)xxRre?y-j1}JJ;pUF5zwPAUkV9zP#Oo=i1~<;x#9=C2SiwWIp1z9yFbmm zTNX1tPzR5~aS*avct88fD`Km@eEAai@}(iG@$k=@UJNmmQ`IzIC%0;_M-Qx0iNN6{ zmBw5Q+4@1Ipw53^)z`0wOEEXDR@YZjKWXYOVyJ~l(}z=pO2$>uhk!#4Q2vEWmu4?? z$=6_FS2`wh5m$v$!Az=6*Con>1sgxyEKGx#;{EgfP*{P_pWjF_a)J4sp;GAD5P6tu zLge3^^+evM@5R^Pw>tEtMh8$=Ujzqp!H@v($giIS$ec)Y6DEWJ6x!?@F#!RE`8Lby zvnE~=P=BjtTr#8i?gb2N$e-_M9hCYZgsBr+=EcmrMNGqcPlW9xHvYa@KKcjONLU&_ zwZ9L(-gnW+XzK;)wv)#Hg*4r8t9e%&qi8Ef#{B^}4VAFB2y29<2l%Vuvx|2D<=xk= zUhPiZMy%`-h;vdqCq@i9KRtkW8e6yFoI$7zkpP5JP3G%$ZF4D4{X4RMTg*z#K!;abyT)~tpvw}rgBml0W_B5tN+q(W5G}`2@ zu+LegV{QGE4(C~~V#%tclV$vPs2Pq(JsCk+lwlL>35M_aKyKfI5I=y^5PHJ=R(zu< zGLBsf_@{nYQpEP@f4KlK~O@`XT_f9CIOCi#^u;kpZQvGW;vrEmtwZoqi70Wv| zQJki|amM*l7Frv6Ee7M03y!u11qDINmuw~by|q=G2o4Gg?QhLZmfcE`+&({t2VxNG zbNoyw76uAG@LdmY?-%90O5m2pZ`7`?Z&lT@exY|w9@*&pZyzD&fGs z>OK#q9gpRE+3r0vlqK+_c59+CjBD~G)<-IY|O=|Fl-d^EJQ5+M#HUKEU;&2!xQz-TzT zIcZWfO~vIaiQ0n4ljA49Ay(_&QDhwCFCxogU!Ak?6nfryvUrES zeFP+9;o>XDhNxh5{~@ixFtdV5(IkVd?F8e%Ms>{gtcLAM8!2Nfe)8U{H*dZSTM}`_ zck@+<|8FZe6hyguNML5`sEdhDOR|nMq)U!p&w6QYblCdR;jLeHq^86tdmH3NC5pSc zql@gFl-im#Z!(Q6UXYxCBu zJa=cbt=Kn9iRv23#EqLb*Nae`bh!<>eeo>B!ItW8eqkcHYrax7mVJJjB|90DO@{A* zd;+;4lp4c*Q@zaAeE%ZZ10Co6-N0nQ7ne<7TS#FU7x;UPpgWfE#Y+l#ZNVpT9Y_~*Pq&pbV^-nkPCk6!u8 zmDjvUS*KyH=G5r@j>Ae(Chep2=L2*?56N$tg7!+{CNtRXEld#wOo~~sGPJ+GW8(;kYRf2HaUcFCBQo-r|G*lVo_~*{U`+ngu2QfhNLjl@6 za1$c8`Z}qI0ZRY;{6C`Muy$fCOhH~j*$eZ?VdAeo6?y!M81b{ihgY0aFgL=^OIC1F z;#8Bhhw9^lOMF=3g^e429gL zrXwaDd7?XC|B9cm>`_)!51RDyprShJrirqE-1emQTw7z&>0pZ}v_6sDLi%3BILW4_>vH_OGpb3Nv8Z?%?a0?4TBCqy zo_4F)W9&~z-RkQ;Ym5fdBKoYUAYDtuc+=O7V7x+}VU%a+$I zEiLyebtk)uGf%eCV*0hnuqH)WszVV4kPgS-3DnoysW1^Xt1H0M3R(R?74#% z5j?I?hY-4gV`T%I(<|6{xgq8MNO5wW#YDb7bY$Rp#oI5vG{BC=R_SYo$8)PpGdHYa z4a64?q~tiKw!-91SEr<;ETLHH7+m5+&Fq?sT@Xjyl7j!XUAydm=(37gomVOsBtEqI z$_lj7IDl3KgJMn#AA$t5j6_X2rkR+SDme-`2vQ(2+$=otwV15^JJ<#nmE^gDweuZf zv$C2JEXTEdDfuh;)C(?A?J#1qRpR6CAu>S=4GC(xclsAQ_Z>Z|#ayxj(C zBc*HE-yGau__wZ8Hyo=red?Ul+U|m#$q2zR>@iZJxGx(&8le#1|MnuES9OUc={NS{ zkEqs(&Zhs|F$Pcu$*kZjiR&584%HJOY2zX!!kIQ%s=w7066DYyVH*hE-1A9DGveJC z2c(Hccb4!UrJq_vapDVF}ellFGfNh<&C(R(kyx};B>^IAPLoD z^^oWMtv|$V$LgRK+hQ}|hXysFoGs74FVYzw*7(Li&}K+3OR@H*7?evO9`+qgnV<5V zHN2MQ@D;+zY)5aqM@!F7n_J z5;;Z9vbuf5`Njz;kAC~sPOD!#s5BVAy5yhNx08uUx0&gre-e3R>3+KK@!yW$ZTj$; zH+HN_)nD7lJ_|z@xaD#d`@*ajCT^0MI#cy4mC%f-dP=-R@DBi-`l3=6J?AYMAD;{n zHV$e`Iig$ga+=VFc-@!3Hl8%pMB-TS7U_5ou|dL^AZ-!YjO2Vc<{QOp;+RzC7RWU18YGt9@Q=vci!S!n%{o0=SHEoLG#A zS~q+jamY0j%>o&XybYf1vqe~))4QBIUNGEf4JU%o7h}2OQm$YA$+zBT<$d*xCNKI- zF#RrVD89qdk+%j@)e@ke`LBQYWZ_g9Dr{ov@0emD8U5~^5h29RyQbA}c!|^0Cj^yh zS*Tf^y~lc1Bh_y5R%+tRXkTWD#}dkE?m!^~86$k-6J7u^X2NP4408cFm(R8BurD>( zOPtENlJ%vDqpPkB@$A7K_v^os>jD;@VtFhBGz$^kw3uX~Vag?vRC`U8YW~8>%vqw0 zD7m0bWCF7>uid`=w$XlG>G)WGOT3?;nsKLNiAf;GR6@YGwtDIE%@Ul{G^`DA`%p4L z*KwMn>f=?7ad+BBP*_@jcigP)*TOU0;~q%YD-Y@m(I9Kh?oAiUER3KLr+F=-1m*}k zU8Ya6(SKU6D9Lqo*ARym;ONUT*L^SJ`YS%B$`<pd(lYk!4;?f%sZB$Eh7OBou8+a*3@Ha1KAtBtqFfSeDt>h?|g+exTZd5@dd6N@6Lxy&4 zumYgzM%!~$F=_28W{4j>di0nJ%?|GbBTJ&We*K?2_sM~+HPT=X{^=pPZwyD%ec4;1k{Fd%iQ^5XWz%rioAS$7ZIuQ2naNIF!L&_sl{UcAf@IV z034tzs>n3-MoL0;19%v2(6L>Wt9#s=uEPz#XRm>@QA46e3{Z!mLPqJC7LN3IASROP z8Fxbf=H+i)Ecs)>e!347Q;B`u1aYw0fFvAHfyfb?nR1sQ*R)*>m~|YMElSpVDsGXE zkC%Z`HOlooGBODt!*6*2%^@bL&)+~u3a*v0+W-I&k;y7IIDF$119X=9+_uAA^oc@7 z&h)$bVVE2ZSPQ_<9Z1`#i;qe1of#5r7mBFMv(elk+0M&x0(INgt!wwMK9PVmws|c> z7L6!etd^oCVAqg?Nq1RZQg|U38y9!9JRys$9)K@KIt}w-G``gU`@s*!DB#!LxZ-&P zDqjAm*#7;e5WWH+bg2|Zl`U=ofOll0$F$>kzAETq+Wy)OgPf=vAT=goT;}nx#Cmgp zYx!Fz2wc5o=LviP@Q5AhDJB}`2Lbx`RfOQ%^s`wXA!hS10E+1Uw$P2yR*ZG^#tV$E zBMhC;z&>FkxDa_@q%k)VGO(kU5do@x$q;M3?%h8{r5$-vl8@>TCRF z7gpJK&EuUUk#B?fn}Gy}J)@yjlp-=;?MfXn>{XGHymBTDkz~MJoa>}QOzKjCi4DN4 z&5Mwi8dMAm8l9Dr`z4kSJqgBcEm}V&qI#G}v!H__qv5kXiiE?2%R(e8U-aQ0Lmwvv zf~3>?*Or-PBG*%Hz(NHUZlkex^^W&V5LuC|L(3pC2bmKMFbTbdPM!dzXVhHtxek9@ z-`n4x>6mz>q*Qg(8HBox5}QaxRQW^7wr~ff{D{oMDv> zMw^{ipYWbJf#OV*gSv`7cxK!P(a;u|H z&6f!-=NV2@$TV=~JfCyt&SkbLA`^)x-zTTttNRe65m(Y9U03X(M4^xd=UUBz>pqH_ zAz4UdMW#RFJl5iwtg9vGuP@ob6A6UELjMf>J(2Z-79euKGf+vkha$0zdbe*A*1?~s zU_vL;ihd7zbE?5`l&@3`b|)ID4)#8yc^>I|;k!+T%fr2{k0S*k(9X8%RNo)ZSuK~2 z%ob*EGH3Xt$7N(-`r*tc&asSE(*TbA$&x*%e13a?L9hQOCPUcnMTF{vd5TL+tVibP zA?xu*uVZ*{nh;&QL<7DR(>E@#V#()-Ee!rDuA#Z3J5j( zk2ylZx=?A-ey?yd(ArHFk5@mlugO8arat;7k(j$b{uc290JoQW>Mrny)xCT7ZfJ!% z&Uowg>Yu)fxj_&sPt8;aRsSLv08S~qf&|mA*Z+Wc{u|-pFmcPjUNbj-QG_jJ{SlG%`t^FX;a4XB;$J5j|Bo2b|E&u&h&K_N=G0hJT)gfVknxH0F?a|6yk>4_ z6&#?0ylGAO65`>Jcj3sH1C`w|5&g=luCi=wC*oevC;ff)N;lWP{`VvI$_78mtT=Bn z7)o(ndIm~PTuNDVfKFr$m5uFa_59}1sDb@k)InRyF)o?q;S-G`xR9z({sqoHamIqO zDk?}*N%fB*sAL%ha}Tx)EYGVXN4$_YYfQKHGtDtgC|Fon$FH_Ra*#}Z&->+{5R#$O zpJ`(EBEcF2IY`;z?P-yU<>2E13;r`8uo3h(g0+`1QP46sQkY}*v*M)NzwDJyoZN_; z2s$P~i~|pk`0MJNd1gnE!Dw&tq*#H&nIKlpX&wK!!i@ZNAla?mrT!@|c=<7SiH^au z(%`;^`kFO@-DTCh^ONo8Vj4@$Rr<>6kpS>{_0!fx;(?NOHI`plA--KLz7b5zx(~+d z7bWJ~@3)7?H**6@rEIbq85p`?)pfDR{Y<6mPqSL|>d_;nh3bD31#zskcQLgle zr9{sJd|4j5Uf+l%>uM}`T;~gE|B7FdbkcXrhuw?BYH{3|^QUMjOA`!07qM}Df_qtc zA+jdcVX;K;KLTgLfQ@Z*w~sI~9;T>*pSi~8_Xo##?Js;dv!HOog7&txL1)8;z^67WJgNQloU9UZ?s161(;0cvSIJ@2yrOb;nz-5YThQ5U6Bo`TD5 z6UP6kA?0E-13}D9ABs&}Iy;mIMi)0G*yO3C)Q-*O6oADzT@5zhP->h}`68Ak9qg`9 zP_VwWO+5dXF?t8Y(%GSL@Oh7!S|vm)R-1=mw;CFy4hK8~+fj>i&O)vR%sb&^A(gQ` zmi`=@@7$rZEGWrG&^K-@oUPN*sg2vPUGHi2+H*~~DX84|UF5RybxjV9 z*u5>{>~*=qEPivfj}JJfiugZUvsecu?B$;;2`~?@I}`BjYe?Ou-?qHU`eUDBG2Lr#pPsw z`WxLIOY*d@=~wBPwx;>fws5+}&S6gg%o>*r~hi^Nq*yL>t=dEhU!Q#mSY+BBPMj5_Q# zZ9x=nSn z@D^2za+#~p%)4C=4U8KII*W*9wgph;W-N0zJzQ~*x;e9!Q98hE`cq+bQKg8cmh#cQ z>)n;Ha#aFZJGNX=?smvuV`rO866#saX5s9{3Lgj^VEv{3pP(%#?3qK zw&wiwWKuVriZyY)_IC^YD*c9x3}5c#{6UGx)tg9Z{SoP6YU}cDF-j}9>qX<-*-I8S zF7$HWMBhgtXVwX&CT9ZBvsUo@4g}#e>8N=koUw` zo1)XZSMAr=&oMGTE|8{OF;lLNlXx9E%)3I{vu-&e-~=zL-9iX0qix4__8t29kc3TN zs`PXg)c02G^{8I?OeRg(og?2}`04Agx?8Tk^Sc6bG8@~hZ1ER74x-c8glWNWi*CpH z@Ap05+ieMbr8w-K-5+_5a{ zWb}i1GWM*hOwr_y(25r_iw&w~B>!FCy46PJ%EstdC#W&>sp*G*FA`E#Ug#CbJAAZ- zLTi`aMsrCsRwW*AQx$#I-Tl3s_D0VkZRjtmH^-o<3!}m)D(5BKtM^wbC^# z<2-!m&GMAWVBcr%G;0N`JPi@2Bc=sEhy1A})IUpdGRIkW`{>Y{&TY!@b{T^Ndz6IQ z&+D+8&xI^f$ZFQwc~dO~Z_K@%3Phvmf62}l#|q_CD9HRi$+hpr1!h`Dy0Pl*qaklb zQw?^|=_z}yZEZ_IgL#7>2a%I)8^+hqrT|A^k{U;a}adK#AB7U`qQwwD?B-2z!UqbY&ApQd=<+Al=TJ>JMp+9Si1d*>kN( z-APNCnha^W6C(dDsp6{!omR^|DmXnxR=DFDb9&6)JL#wNmF&=2Jk^w*^@S%(-OlUl zQ+ecF>?gnF7O$b*?kSk+TsE9M}dUFY`l2U{GrJf!W|U3&FM(MIBw(Ddu=&$i0HsDI}E zX7{A4`8nNioI@Rh0>ONOz4t)fwl-oqumDvF+Vk!KNBV#z}Qzp&}253x@l*OoJrjfvG)6 zc6i@Dx(nUeo?-fc(U;|L)aY?Z5M zP6}oZh;&i3>|AEXm-}OPcDyCbOq7F)-sfAfg3=i-72lWo_9O}XK1i4#;$S)53)9$^ z;k>N1u5@`Mdb|X>g?l6OxyD73QMTFwJ861gcvmu3=~=nJ;%twIT+VsXclC^o z!U}E5Ak&(bnAHC~(H|N%=3}|lpcsl)ut{pksoNS`my}3f*yy|I8@)_?u=m#n-&f!L&>0o(It5PlR#sL;32LcRRM)8hl8lB%>qfUl6rH;RuB9zv zJJ|!uw&g1mit}4-U|@s&s5e_FZ}O-o7TUb*EcwbYPnX*v5$^8043zh#DwkyzI5<|E zh&nKKCrtC+mAJ@78TqK5)5F5H9pU4{gZ(z8wbi2nqP(t^&WtksL5@E51(wp2A$E%? zv+H!jzWMVLW+9Jo0LHyX&9QV<%S8t7-ctM;+U8GwmQ;fwHScF@Km5}r3HGZg)6%kl z^kDhSB<%LKy04_KLMP^#NY6<5Gwp92#jgo$%8gK+4%s47+sJkQ;@U8yPrPRafSz-Bikg5}|$i-kI{YNFS}Blc_8A6%$LA z3tYCFYe$I=oPGa9}sEWsO?@{IRU=DE0BKFiXbw2nR^pBy}5n>P7)E{e*{{MA=D zW76y9fkv?$veKw5opsz!UNZiN&cQ&jvEI^#(pm&QQrpJ(>_o!|C&Vapcc>|!PDfXB&au(33lwdV)}(oaxNk9&`Nqz)TW`#w9g z?e??v`2ID??jz75cH+eK@1{JQTc16gknCz|RQraWlRJTgoL%M!D0?aG>H>X!(ZNY0 zlXcmM$k(o0t_l(2!fJi?e4b)uYum4L9N5q~XMz-QqU;^tS63KmiG`w6bHYs{PUNl| zE|$aHM?Sb3R@`49R)?xWH_wx_It*7QEbjH>8q3d%LQ#VG^U92CPxxr=3h}c@o$%c& zs+491X!2~U#i@lDP$7;~PXkx#rHe->l%nO_HZ$_F4H(i~U=-|y?P6l3%3Pcgli#&- zr#rM5)TD04;MiE?_pUTi`hqY0`ehZa7-+^NDz*Ey8!L~)gTE)^XV=Px3K=LQfQA1> z7Z1RoP!YIpamzV_-HjZAUhwG-YrEWarhO*4q`$AIy1su!r|rj1ouyi7ba<>c(NJtY zkQwNkxTj#}j&S<$I-S2qTC+vrXGibd>~y~8;e;}euzuJkfh;tr!@QZO=x9!C2EfV^ zoc&usVUHX>{P*(mGM8>vKv1PVyWjbuhwHcsl1k4*?=SAyrJK(|sHj~%|2PNJWTN%P zLBhokKX7$-4~!INO?Gc&mQ?yahn0D{JKM_p`ImY!Ns9dL4br)s0=Ye3>>LMf@aZg) z-z6l8j+?no+tUAz&=})>FE5S#(CmG5pD}2%E`{>p<{23oEJMb=dua9{K;0+ZHBhm_ zl-MZU!tN`vb&D?fcl*WOVBLH7KJ?tB$6jBhfV|v&m9^)b44?MOi-oq2!(HX{S?N;Z zsFT#K&e9e}NhQ9N#XAL+AqL^B*HZOM$cYkMPZZ!04zqG~|)BivXmHk#yH3s?&K| z2|yxzFZs9@iz@`p{APP%N>?>`ORf%^yN8Ew(fIP1SwFop#My;L`~K6e^QS@AR55+j zc~{rk!}&o1l1oR;@I8JCF`MQH2M*nBwLgpkhFeD#7Z>;R*>lG(%kJk$z|EPL7W

    _%X|1cnQLrC{>j zZOb}>9?H8Er5100USL0JV;nDxDzqUOE5Q3ZyCE5 z84fcaH*MRA6b{k`TQKScjs!D+Yov#AuIJjA6tqJ@zroFR*!M>a3=Mg#tgK}925J1U z{VvPkG>PsMZeFsB_)K!al2N#2m1wOCKcRu4$Dylzp`ac*4>u^D7gP4*l06u!+{MW$0Xfot-U;z5F8sj9+k2 zt(}Ihl00A^uL^y*(*UpsGeXX`B8j0pSQAa0OaIZUvC0V=nPay%Ghulb7?^t29^MbU z`v|;5clV}L14Y=*b8wvUKn6SedTxUpvQ!lj;vxqQAeJFQn&W02d$HLNNPCZSwnqOI zDYcXnHGMDFW1|ke=18!1ZDJb$5_HJ-etx+QhXi30ab6G#*?nn@D7$?N8FMBn z0j|ukPblPIHp`z?xl1XK#PACTtX+2*7s(6!F?V+~^j7#0`dd`;Fo12rEJhMi{PIaR z4@dR~Tm?LVwVkX_b`dU^i54vG?7TsYWOA8!#MaY_aZP8jc``CY^99T|+lF{x3@Yn< zOsyYseZxF(JTER4;G}yoVf3BB!m7ALjZ@fsjQ4?LLv7D%1)1J~qEJXzNxb!-q3VdH_xV==6 zUuq@0Pn8vYDwr%08$ydhy^PTRc5=(x3xDYF;HIv_|G(Rsk$C9q`1rWsQqDfraxwx8 zwjRZvMXwof^kfeBxueEs$4L3Chy%+5h~n4VN6m*5Gq>l-z#oV#(gK)!pHWbFYR${E zs;VkOLqqqA2bmhRY_(jdg!i^(3rgpB#E@_2hLgec=+UFakY+GPJ>eG-o`nq&(rY>l zMicM@@w1C#(ntlfswO;L_|e{Xk84b6g8SqQ+eT!e{>b3k`V1a;dDa=4``79@#b~7~ zn65+|=VWab5P`bKbotN+OYnENlpTdI(Qhoyl-)jxet{$sv$PTh3;pnX(zbg&q3vC{ zmYghbMz6TL@?j2_hx;M*b2suz2^)Sc1n2lM<}CEe=k`D*AMSIwapTpinMy+-5rkbp z4e4okrPs6W-Grp~8g#_e4#GL`8crrlp>p%eWgC4+Cbn)jy!`Ey6ay2{<%rQsdg+I63D{E} zUz#;X7bn4yF^53+oLO{ZbvSh3fJ(ykE!YOaKmuqaPO0Pkm^Tu4{l1dm+{wrkR5^0* z(7gBgafuKsmeDl3H;Az7055be07yVN>n~SvlR{Q9gf#d4c))&yOUA~=;P~xFcl9@D zAdZ9CWl5s81yTs|>cYNNmF>BmpC_(TirK&Hc0ph{h`GAZNI-0#yEZ0i9l=>5B(46M zDl?0;!>QJQn;=XQOLb>h+VA|uGVA=g7UQdjL(5{5lYOBBA&fqAb900he zhHy^30+1HGn2kH|7jCe$*wngGHBM7-X}zYZ#f%v2QW_JuVAKO!wIFErNjZbTV?^57`_{PN^#2Yqtv=RmPJ`vF9#p4tL| zIg|i-1E?MkQbd=%6li$>u$g^#An~6FW7bdjL4Z^n{{4DHDL|b4tmF{$ApRWhXC zk`MAbIh*V%iRX%fSMb!$4Z|g*kYi^?iL|G@VE!>2Ea(LgdcE+e>!?F|)<$H57A|jr z6TpvuZ-oY!1W!R0)gm%`H;2MkXmc1&}nTLQc?&7W=H&W?l&ivwLj|6g0TW=#+9LegWv^+U^+{13Xe9@2FM_S2rO zUkzLtAtfyh8q;xo`~2)|ap2MDg~0siqBgk`=tST?u})w;E_(O- zFr;EK-Y74x0vg|$nUw`@ZP^0P_+&_!H3O;@iw;aPMn$j&Eh)ir`3Z2@hWed2XhdCp z0vs6W2kuSjS^XBc5$h3r1K+y0*ZYorNN)YP*!fS)?UHLx&K~&KWFp!{v2S}4-6Iq cSEU~L&sFVdQ&MBb@0OQ3xPyhe` literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md index 096f49bab4..e9237f713e 100644 --- a/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md @@ -34,6 +34,9 @@ You'll have access to upcoming features which you can provide feedback on to hel Turn on the preview experience setting to be among the first to try upcoming features. 1. In the navigation pane, select **Preferences setup** > **Preview experience**. + + ![Image of Preferences setup and preview experience](images/atp-preview-features.png) + 2. Toggle the setting between **On** and **Off** and select **Save preferences**. ## Preview features From 8adf81b60baa9692e22a2a5abda5052d694eeb88 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Tue, 12 Sep 2017 17:10:14 -0700 Subject: [PATCH 085/146] update image --- .../enable-attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md b/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md index 910db87d44..045207e8de 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md +++ b/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md @@ -80,7 +80,7 @@ See the [Attack Surface Reduction](attack-surface-reduction-exploit-guard.md) to - Audit mode = 2 - ![](images/asr-rules-gp.png) + ![](images/asr-rules-gp.png) From bea7bdfacea4fffa453361ac15770aa9395a0172 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 17:10:23 -0700 Subject: [PATCH 086/146] typo --- ...endpoints-mdm-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md index 2e1f4aabd2..42a6f77d4d 100644 --- a/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md @@ -30,7 +30,7 @@ You can use mobile device management (MDM) solutions to configure endpoints. Win For more information on using Windows Defender ATP CSP see, [WindowsAdvancedThreatProtection CSP](https://msdn.microsoft.com/library/windows/hardware/mt723296(v=vs.85).aspx) and [WindowsAdvancedThreatProtection DDF file](https://msdn.microsoft.com/library/windows/hardware/mt723297(v=vs.85).aspx). ## Before you begin -If youre using Microsoft Intune, you must have the device MDM Enrolled. Otherwise, settings will not be applied successfully. +If you're using Microsoft Intune, you must have the device MDM Enrolled. Otherwise, settings will not be applied successfully. For more information on enabling MDM with Microsoft Intune, see [Setup Windows Device Management](https://docs.microsoft.com/intune-classic/deploy-use/set-up-windows-device-management-with-microsoft-intune). From 634be613e79651e10c4ceae3a91b615301b34871 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Tue, 12 Sep 2017 17:15:31 -0700 Subject: [PATCH 087/146] update email template with url encoding --- .../collect-diagnostic-data-update-compliance.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md b/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md index 83993b92f7..bc96824baa 100644 --- a/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md +++ b/windows/threat-protection/windows-defender-antivirus/collect-diagnostic-data-update-compliance.md @@ -55,7 +55,7 @@ Before attempting this process, ensure you have read the [Troubleshoot Windows D 2. Copy these .cab files to a location that can be accessed by Microsoft support. An example could be a password-protected OneDrive folder that you can share with us. -3. Send an email using the Update Compliance support email template, and fill out the template with the following information: +3. Send an email using the Update Compliance support email template, and fill out the template with the following information: ``` From b773e56e7d67ac3d3c6385490f6f25f7a7b2e4d5 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Tue, 12 Sep 2017 17:29:23 -0700 Subject: [PATCH 088/146] image ref changes --- .../enable-attack-surface-reduction.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md b/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md index 045207e8de..6b1a83871a 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md +++ b/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md @@ -79,8 +79,7 @@ See the [Attack Surface Reduction](attack-surface-reduction-exploit-guard.md) to - Disabled = 0 - Audit mode = 2 - - ![](images/asr-rules-gp.png) +![](images/asr-rules-gp.png) From 602d3fcde4e57c1a4970006542dcb53b69734899 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Tue, 12 Sep 2017 18:10:34 -0700 Subject: [PATCH 089/146] update ps for asr enabling and remove cloud reqs for CFA and ASR --- .../attack-surface-reduction-exploit-guard.md | 2 +- .../controlled-folders-exploit-guard.md | 2 +- .../enable-attack-surface-reduction.md | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md b/windows/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md index 0916abe7b6..0817855e6a 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md +++ b/windows/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard.md @@ -129,7 +129,7 @@ The following requirements must be met before Attack Surface Reduction will work Windows 10 version | Windows Defender Antivirus - | - -Insider Preview build 16232 or later (dated July 1, 2017 or later) | [Windows Defender AV real-time protection](../windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus.md) and [cloud-delivered protection](../windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md) must be enabled +Insider Preview build 16232 or later (dated July 1, 2017 or later) | [Windows Defender AV real-time protection](../windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus.md) must be enabled diff --git a/windows/threat-protection/windows-defender-exploit-guard/controlled-folders-exploit-guard.md b/windows/threat-protection/windows-defender-exploit-guard/controlled-folders-exploit-guard.md index 2cda929649..2945821a44 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/controlled-folders-exploit-guard.md +++ b/windows/threat-protection/windows-defender-exploit-guard/controlled-folders-exploit-guard.md @@ -62,7 +62,7 @@ The following requirements must be met before Controlled Folder Access will work Windows 10 version | Windows Defender Antivirus -|- -Insider Preview build 16232 or later (dated July 1, 2017 or later) | [Windows Defender AV real-time protection](../windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus.md) and [cloud-delivered protection](../windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md) must be enabled +Insider Preview build 16232 or later (dated July 1, 2017 or later) | [Windows Defender AV real-time protection](../windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus.md) must be enabled ## Review Controlled Folder Access events in Windows Event Viewer diff --git a/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md b/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md index 6b1a83871a..d128c1da67 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md +++ b/windows/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction.md @@ -90,13 +90,13 @@ See the [Attack Surface Reduction](attack-surface-reduction-exploit-guard.md) to 2. Enter the following cmdlet: ```PowerShell - Add-MpPreference -AttackSurfaceReductionRules_Ids + Set-MpPreference -AttackSurfaceReductionRules_Ids -AttackSurfaceReductionRules_Actions Enabled ``` You can enable the feature in audit mode using the following cmdlet: ```PowerShell -Set-MpPreference -AttackSurfaceReductionRules_Actions AuditMode +Add-MpPreference -AttackSurfaceReductionRules_Ids -AttackSurfaceReductionRules_Actions AuditMode ``` Use `Disabled` insead of `AuditMode` or `Enabled` to turn the feature off. From 929bffd0d92d9672bbe9f2a90c64f49840e406e6 Mon Sep 17 00:00:00 2001 From: Elizabeth Ross Date: Wed, 13 Sep 2017 14:42:33 +0000 Subject: [PATCH 090/146] Merged PR 3161: Removed old links Removed old links --- browsers/edge/available-policies.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 097833b6a3..b7642204dd 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -21,7 +21,7 @@ Microsoft Edge works with Group Policy and Microsoft Intune to help you manage y By using Group Policy and Intune, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple security settings in a GPO that's linked to a domain, and then apply all of those settings to every computer in the domain. > [!NOTE] -> For more info about Group Policy, see the [Group Policy TechCenter](https://go.microsoft.com/fwlink/p/?LinkId=214514). This site provides links to the latest technical documentation, videos, and downloads for Group Policy. For more info about the tools you can use to change your Group Policy objects, see the Internet Explorer 11 topics, [Group Policy and the Group Policy Management Console (GPMC)](https://go.microsoft.com/fwlink/p/?LinkId=617921), [Group Policy and the Local Group Policy Editor](https://go.microsoft.com/fwlink/p/?LinkId=617922), [Group Policy and the Advanced Group Policy Management (AGPM)](https://go.microsoft.com/fwlink/p/?LinkId=617923), and [Group Policy and Windows PowerShell](https://go.microsoft.com/fwlink/p/?LinkId=617924). +> For more info about the tools you can use to change your Group Policy objects, see the Internet Explorer 11 topics, [Group Policy and the Group Policy Management Console (GPMC)](https://go.microsoft.com/fwlink/p/?LinkId=617921), [Group Policy and the Local Group Policy Editor](https://go.microsoft.com/fwlink/p/?LinkId=617922), [Group Policy and the Advanced Group Policy Management (AGPM)](https://go.microsoft.com/fwlink/p/?LinkId=617923), and [Group Policy and Windows PowerShell](https://go.microsoft.com/fwlink/p/?LinkId=617924). ## Group Policy settings Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: @@ -1027,5 +1027,4 @@ These are additional Windows 10-specific MDM policy settings that work with Mic - **1 (default).** Employees can sync between PCs. ## Related topics -* [Group Policy TechCenter](https://go.microsoft.com/fwlink/p/?LinkId=214514) * [Mobile Device Management (MDM) settings]( https://go.microsoft.com/fwlink/p/?LinkId=722885) \ No newline at end of file From 719f36b9a7dee07d77ae783954664b7724eb9248 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 13 Sep 2017 09:42:11 -0700 Subject: [PATCH 091/146] copyedits --- .../per-user-services-in-windows.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index eaee98039e..fadfcdb39f 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -22,14 +22,14 @@ Per-user services are services that are created when a user signs into Windows o You can set the template service's **Startup Type** to **Disabled** to create per-user services in a stopped and disabled state. > [!IMPORTANT] -> If you change the template service's Startup Type, make sure you carefully test that change prior to rolling it out in your production environment. +> Carefully test any changes to the template service's Startup Type before deploying to a production environment. Use the following information to understand per-user services, change the template service Startup Type, and manage per-user services through Group Policy and security templates. For more information about disabling system services for Windows Server, see [Guidance on disabling system services on Windows Server with Desktop Experience](https://docs.microsoft.com/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server). ## Per-user services -Windows 10 and Windows Server 2016 (with the Desktop Experience) have the following per-user services. The template services are located in the registry at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services. +Windows 10 and Windows Server (with the Desktop Experience) have the following per-user services. The template services are located in the registry at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services. Before you disable any of these services, review the **Description** column in this table to understand the implications, including dependent apps that will no longer work correctly. @@ -131,18 +131,17 @@ REG.EXE ADD HKLM\System\CurrentControlSet\Services\WpnUserService /v Start /t RE ### Managing Template Services with regedit.exe -If you cannot use Group Policy preferences to manage the per-user services, you can edit the registry with regedit.exe. To disable the template services, change the Startup Type for each service to 4 (disabled), as shown in the following example: +If you cannot use Group Policy preferences to manage the per-user services, you can edit the registry with regedit.exe. To disable the template services, change the Startup Type for each service to 4 (disabled): ![Using Regedit to change servive Starup Type](media/regedit-change-service-startup-type.png) > [!CAUTION] > We recommend that you do not directly edit the registry unless there is no other alternative. Modifications to the registry are not validated by the Registry Editor or by the Windows operating system before they are applied. As a result, incorrect values can be stored, and this can result in unrecoverable errors in the system. When possible, instead of editing the registry directly, use Group Policy or other Windows tools such as the Microsoft Management Console (MMC) to accomplish tasks. If you must edit the registry, use extreme caution. -Beginning with Windows 10, version 1709 and Windows Server, version 1709, you can prevent the per-user service from being created by creating a new entry named **UserServiceFlags** under the same service configuration in the registry as a DWORD (32-bit) value set to 0, as shown in the following example: +Beginning with Windows 10, version 1709 and Windows Server, version 1709, you can prevent the per-user service from being created by setting **UserServiceFlags** to 0 under the same service configuration in the registry: ![Create per-user services in disabled state](media/user-service-flag.png) - ### Manage template services by modifying the Windows image If you're using custom images to deploy Windows, you can modify the Startup Type for the template services as part of the normal imaging process. From 006c6ed1f372232ac0ea27bf28bd74302c76a74f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 13 Sep 2017 09:42:21 -0700 Subject: [PATCH 092/146] update windows version --- ...d-file-alerts-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md index 16aee5e453..d72c4014ff 100644 --- a/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md @@ -97,7 +97,7 @@ You can prevent further propagation of an attack in your organization by banning >[!NOTE] >This feature is only available if your organization uses Windows Defender Antivirus and Cloud–based protection is enabled. For more information, see [Manage cloud–based protection](../windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md).

    -This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. The action takes effect on machines with the latest Windows 10 Insider Preview build. +This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. The action takes effect on machines with Windows 10, version 1703 or later. >[!IMPORTANT] > The PE file needs to be in the machine timeline for you to be able to take this action. From d72f07b9461112474ddc1089b1bcd00f78314444 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 13 Sep 2017 09:44:44 -0700 Subject: [PATCH 093/146] removed userserviceflag info --- .../application-management/per-user-services-in-windows.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index fadfcdb39f..8def5b6bb7 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -138,10 +138,6 @@ If you cannot use Group Policy preferences to manage the per-user services, you > [!CAUTION] > We recommend that you do not directly edit the registry unless there is no other alternative. Modifications to the registry are not validated by the Registry Editor or by the Windows operating system before they are applied. As a result, incorrect values can be stored, and this can result in unrecoverable errors in the system. When possible, instead of editing the registry directly, use Group Policy or other Windows tools such as the Microsoft Management Console (MMC) to accomplish tasks. If you must edit the registry, use extreme caution. -Beginning with Windows 10, version 1709 and Windows Server, version 1709, you can prevent the per-user service from being created by setting **UserServiceFlags** to 0 under the same service configuration in the registry: - -![Create per-user services in disabled state](media/user-service-flag.png) - ### Manage template services by modifying the Windows image If you're using custom images to deploy Windows, you can modify the Startup Type for the template services as part of the normal imaging process. From 26ef02168746f926e84dfafc91c46ac8203f5734 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 13 Sep 2017 09:55:04 -0700 Subject: [PATCH 094/146] adding UserServiceFlag --- .../media/user-service-flag.png | Bin 0 -> 66480 bytes .../per-user-services-in-windows.md | 4 ++++ 2 files changed, 4 insertions(+) create mode 100644 windows/application-management/media/user-service-flag.png diff --git a/windows/application-management/media/user-service-flag.png b/windows/application-management/media/user-service-flag.png new file mode 100644 index 0000000000000000000000000000000000000000..56e03d1bc557ac17f2fa990fcf58dbacc25cf291 GIT binary patch literal 66480 zcmb5V1ymeSyDf;jyK91LaCdhI?he7dad!(4B)B9%a7mEHwQ&g^+#$F-Oq1mP@4k66 z>&~pzy^8LpPMtckzy0m~RkW(I3@Q>45(ESUs+_E(Is^pNDfkVG00;i&``zFK_yFmq zE+Y<6HAb=z{s3bwrX&UdQJaYTXbKDdjOZ+@>jnXV*8Td1#HEuDf`EAWDkmxS9$<9% zg#L+G`}1zRNOD{BE{N5$vmRUU4cwwStK%>vLr3=WRR)*JgM@=?d}qQOGoVeCOU z8zzNw{nRSw%Yj#(uao97gJx=3+05_2aZtOVX5;S_V3|l``^~qK<9LXmekd^vm_ILt zpweutzkkBi!mu%&W=cl@LMRZxFEh&x8N?!It+VpnoSzGu7}bxx*F=(3YIU91|4u-% zD8az-)hiKPI(Hyt-I4vTA0&xukezwN(Dv@S+l;3vCZ^Ut!M7h(EE$PH<^E|pgu;L= zjMKQTu*yyEBo1eT43Vk)7U}^zn&4d?jNre%eaG$rI)dn{aK&58zZ-Uvmn#qR{q0$Z z4$@x8qLZrWuxD3-PnOIeFW-z67k9b6wF&NCrA>Lz%S}-tVer38rNJ23`-ahc!nNdsl?o0cuDf8(~U+`DsdB)te?Jx|GNvk@1o?+oL|-c}L1!oEF? z6d6hP4mfNaX@A1QKN=T)K=Ip?AWz%23NEoE@NRfs_DQB2p3}x&>(50e46Z*YvNFk+ z1v$HJJQ%cYzE5;3hJtR@G>Zt1F~E(G##B$j!6A0_HagX}T2fB?O1(|>I<+A>!ubPN zNXQYJRi96-GEcwdJ;JCD;s`#B)Sq%=9}z_6177x3^1^ez<(#JEJyN$`&FZrW2n^4; z#0k1cqmRy;FYbtk&R!D(XWfPclwB6G-r)Q`xA;`AI)uWuPn@iSM)N~%pl{0+JEk-j zTmG{yf!weS57YJsZNfj7r-*9!`3r)@`RBYMcHwrL&-t6fUv0>_zQ^9pP;2`oxgjEt zp(0_l0go_#w-V$LGv(S6)5qdPyS7_)tHIGmBMpcE7^xOAsHEd?rfHMRUgp0`rWPZg zAB}1YGdJSNbUl>(7DDi>H<2<`zH2<-ngg)2U$VaXm=y^9a+~-vuxzck>a}E~I1=RY zAuO6<_sZKC>UlldIT|*gfFKJG8GB7_+ZqaezEQ^n<-!aWmg@ZLaWl<@jUlJ~Oa%KPoj-O2zTB*=^hVf?1)VhR8#~dbIM|GEg;e4pGb#M-+{Z>nzfxC{9eKO;?3ngO`!Wa`;cnzS!OdiV;TA* zLdrHu$97#$pf#S))l;u4TSg_+^ZQ_R;XjBF6@<|ClOKaw)TIg@*HRaMPetU3)9x>(mo&g_QrP?YabaZgy8)Rs7~rV=DjNCyM5KwU zYjP|A=bG+(@?EvwK@Zjv{PP^X?!|^K$K&j;o$a9f8UCab{A21`7Fp3jnms}SWEJ-*|foq}iMM(Huf7&#}cF@QVwBFYtrr$R}^iTwwRwWVSb z9G=K`BOK$WiQ0Ye<>VWV98T?bG>={6kC1|QTPZbeyUHx59-Eg2h{w?6F9=J3McQ}> z;ti$YE-_?Y(ROkX5~UtlQv8k9@NQ_HqI$r}@|UQCNMUPj+(!t_;@Dkmwt)v{MG2?b zYshb;?xu2|@;?z=?j@*S1%uGFYF*aq4U{Y~I_hbrq?%Sc+=nUuVoJdt|1dKX&E-2& zo@5*Em#5Vif3n0hPnOXX-o~ zn+2Ur&{@vt38wug7ey^8pf=lt@4aaM;)RxAX`Y8z0(o^IBPz>gE6c3fNYMjIm4saz z*(#F6=X$~=1LJEUtOK(z@3JF5)Dd^jKah&y%BmNB;-7yTkE=D|2MK;<`%PztQ zWdJWIx9##)rc<%cQW7Mfpt! zm0oE5Cr0*?ATTcFOkTK-r~D`4!ARmC9bueUkzKcDU(i7Q3q%-{8RWyhcK-4`u3ifwkIh}YGIgG9BcJ8 z05U60)Q0&)NsHSj$cP=LsOhHzDwLa)NJ-s8Yn=X!sP8Eem|8&<$3{PY-t@;3TwcB{ z;ARepT^F7TyEu`-&rYs-{(M{g7P6m4(kMQfJ?NM>4?XdMPd;(Lb4h{&G&$FW+2qa?QhMv3{ME9(0Q$~?N^^IPZe57AdVu|e^O zq#biq!`28U@1Ly(ZWufMB75P5$<2xMNB^#J!*2NN;2RvHc-zu%-3%HZ&PmY|fPwU6 zE+T_aB%ds!x8XiVWgD9b`IiC%Rb-C40OfC8$p{dVWP=XH#ZVzneFR^=wS?O!@veMm#qi{tSe51jBIiLtR( zUpt3G%obO?s`v+YYi~2)$#0oHX{vE~X&h`oEZdl%&@f;hI*~Wo=|-+rmpJ5`SlLcB z3Bq1Um$&Xf023`l)4rmGe~GhJ$`1`EYLw=Qkx)H2z})yz$x90Tc#6B4cIhUzjESGw zIY-4kw#D>kY4uWlZG#e?g+-+M(dAGK+m!c#EaEGIB;~I|@hQiNcsPo@!J@$>-Amwe zK$2&LG5$!CLFm~!{Y~qRygyRepyL`VQcZ#Cb}h*nw<$pc2#c-sMu&RX5inN+*QuI; z?xAl0{R;HDcH&+#nLK{Rv6?+OawN3(ynn_&s!u74`P7zRJ)qZRAK2BMtyCF941?Sa z8+ufd9j-3jdnJ*#&u>bJ+NS%t9hJryr(I4(8|!9uT#5sG(nrsrD)qzjl6v|?sPQ!?7|lVAE$;|%Ky}}n zH^sgB!3ZyKo#Re4e*v9$g50Qw(4CzkDpd*=j!I&}(0DK4@h_t4g?js|9wNy!<3x)fgh`){417C}!xLeJ>wxS!a#R@&nQS)enBt27cY zkqHb5qeO>tZ7oHMUAiktuoTM=i|Cz{4=%#DKd?x|`s;t}nA`T^jG=Eh*=fzbDc{s` zY;^s0##^1I-B`EKsD0hnEh;tI6S3VC>!6pbpU!EOO(-d>Y`H<${74q;T_H3yu6uZM zX2w8Hrm&sq#+&|(;HfnF8O-1lZsZA;hFGd)sOcV%+g`Nhs)!pdwutYD^;R_Abw@Xl z9Y}Ti8Kl67jS#OuH-V%Osdyiz_yuJq-&s`!8=}I1gQ>DMk^eHjuafHL_?_7z%1qtIO4QM_ z^^~wL=47}8W7^xTA#(wX0Xe1%@6;h$Oht@Y=HSwpp;c#xHBTaJ8{&7HJrp>o(to_O zNPSY-F?*M|V<)?|tK)01=pfSW*0tWAlYSnK>&0y__Eq3_K&YXH8%M@?;6RadMdQ;9VV=T#4ga}vO`1b$Jjj#>sbM}AmJ=q-NxASQ3WLe&{@FCB-T(N%x3nHSX1gt$Hhzr z0rZ{#0{jC+Kh4hdd$~6x=cREH^uu95gK3x5lScz<|IkB0blCb0ek0;5`cj$}N*4Th zSMMDCMozcR@mkOJ2K)#A)`4LjkQ?D%rk=&^H%9Yju>mcRNrL8J2*#IZy=$f_ccUSr60gLT3%QrNA}M_3**;TAHSI!rbR8M2 zImykM5Cz8OUGxogdbq2^z1^12>G7~lyxGZ4PLz;-nh3Sk&ImZeZX%4$Tn|WJ<^41G{@a~ z6fjDmYD+?^C6P!6L(U$;3Jd3l*j7X>@80lj#a35FQRX6T8-()j5fIWYhJ46h6=Cj8 z-`fwTm8ZpMENHc+IGjz$_C)=T=%)UDo6!INRr(7Kme zp;l|!Iiwx#kYX+Fzy@-yEh?U4w3Jpv7+j~qW>5`cTj3y?b5jfd2F$(^G)BQun1EN5 ziH+pY&&=8$xz02kHU2sipr5)p*KA88q;7?7(`Yxi@5g6I45&o(db>1x{?S#ak<3=m zr8$B(AmPXGkLB}QpMn*EYs(W~7Lggo&8vsy{dUWdAGv2OdBt_U+vS^{EI9$bOQs!S zRrDer^KTT<>h9my#%cHG{CN7iz&!O`QZToEtK*DpOn3#8#bxN83vZeD}9N)mZ~Xx!5fk(aCq||{AfijU4O|9 zwoPivy<;)MPH59hM9K1INV{*{z~|W$9O&pfJP4l0em3EJz$K{WBY;zl)2e5)xtViY zlzHWpaibx_&P*+zg>zNrC2Nrcc-r$I8CZ64hI2Us8NF69>&ZZ92M|FhcBc}2TSAt8 zOZ%3br{1Iuyr3%YrnIgj9azB^l1MwO3wPk`(m5?cp?MQB;QJ?)7|MasbzPWS`CL%!Y+Ht3|j1uow8%xl*8uj36~N2M%`r*mk86k zU(@z=w7u?|Rf$nIJl^4;4Z+*QUW9{Kbc29;E*Ftq27TDa>0CDNDwvd0eP0*CO}6P> zVxiQxAH(qp+rLcEJui~Qjh`9b=>O>L{&FT2YtCG2v{;$o6y!Ui-03^^8E@OpPN-;& z$GFjrFa5q4)jP&XF2WSRv~CZZidt0Ms&`18mSy3gkM$wu4xsE|DbQ7?J=zcRXO24* zfMfa9QD2{@ZCzBpk$at6V<)1jbRI-t7o&)ccgW;y11g)hRWKw$r=A6-;+lau#ri7L zPY^$zTXc(L|myUQT_IBXzpMfIl2TRRnAvR!0<{1hd0I(KWe z%0S9MXual?v1$$fqqz%yJLsQ<7JZwIWne@{E{;3eSW;=SJdrT{>Fh@mm}u@`($OH4 zSUo2+8xwRx0t#3)oA#ULKzpcN<1n6c+rM5kygoR{L~<5n7oq8uk6zh%=Qi)X{k&>r zM8%lyPryRd&D`(mKU!O5PhN3od7*b?EhFkr#`(fRBdOvh^^G1Nku=SYU0KOs@ z^mt!FfjNIK1lq;HDno%B@6i6wV3kDGbUqY`4excU1_uvdxX{ z_NjMp@BK3JW7>8TpTicz=q)r!8@$p~n{~FjVASqpCAiHxVjL!E?2Ui%+?n@)7NMR>dTrsHwAqZjd?%#0EHvC))k>1OUG z6Y6=TgMKaSRUfrjIwN;XatrA(7NXe&^VO)--owT8wHKaS>n&(-VqTkZ*PR}d0QKw^ zn46*i=B>T*P#_~64Dwrn<0gqQW)!#O7x5BW1T$MU4i1hI(F%j-ySx|OG0b61{tii- zm4Gaj0jQ2B@29(iK5xvIzV{+3LxRd$PqQ>S>9p8@_ zO;+TscAG|k1D;(AhQB$onJyOQ(*#pgkci)HO}0M44)7%*HII1yY`lW4e)Ch-ii1Xb zuF_wM9%YHHyCyNgjx6|cAk#X2KXJml;Sd&hOCgRFgWAl1kP4Y3tQi)OyDKVHHQjal z@$R29koyr<7{+u8{&@_7=Z11ciiD++3NakmKdi*#nFg{zGZSP% z9Mpr$4*?+IIw4tGQPV_@;bFJp|6c(l7-*)#p18`;Twm6$O8pGM(ski zg#*wlR&s1`C@q`jP=eS>ks0s6X??$SK8)r7i29?t((V}v3eEY%iIuX`5b*`q#RtzW z%BbylmX)U{fafCTI*zqixhOYL@LsTtWmp)9wqV{yB1epg0E8}S>Hh)s8%O3V#|eRdmn^>*dzTOd&%CEeSH{K$u{njtD-IRBq* z(u~k3gsD=vAC`-#aw`Yqd9nwyo%1K<5yzD^ZdML zga$7k3dMUHP9mM&&G_MPALO&D(e^>>AB_Q{X>A|zoM!W*cCl4wpXQ0DR5fO$-n}hV zp7BPikh~8YauOqw9zq;IUt}N{Z$&h-EQq-hFQC}nQRxlDT3&3|3A)hH1aA>Z)A2bU z$XA(W5>fp9o<%Ua*!(5khQ>D>1J4CZgWfzoH|eUg{M79n=5Yf6npUL|G>1q>Ik2gp+S=-JS44T*Vnm8{6W0A!wkg*OMc$TfYu|k(@AU_aRNWO6x&Z0XZ;5`pRFu{N1m}^xku@_3a z&T`3Qrn^Yv_`ssHi1}tk0bnt=6R0TK65{oKXoOkdAMRtF-X#S*3Sb0fMCPd#uBH-Bj`%4Fb=-RL@J_rS z8TZD56IzDrYIvU1d2gPy2C?XRsq?Ag;o1?a+?nu$s>tx~+ej)HD@V3^%*bZVa%quR zCmB2nmHKc4Un3}X(uKSv)jxTM z*5{bjqo}XpttEqh`dNF`67X~{x{=d!p#8W>xw7!d$x0EdnAl4;bXq6kuHTIq_539J zHkY5N2*H1DYfZb>qDe*?HIT;Z-lOK)tRrc^(n4N{?vMC-?#oCNzP!7a10JAZily!$v_nKKf16_Q|-s$#b$Sv4Q0SQIfYL+DLQE>D84<7M8e z1ML&TEW5G;&t6vuCu5d}(;vDeqR7|cF}Kaf9U9v&eJQpD%b3qdig}hC8y(pn4khaX z%U2<_-;(bvg3;o1WMpKZ*||c$5iR1FvD@0IL#iL4{qcu68^BAM1#>tl@Od{dV)bcx zHC3Ujb0wUt-33n`xYm;!uH_Hepj2d6#PB;h+>B*6U1xu!PI|d49P?EiXN1H$mDK4* z5`1i+^cZG(Ji_*#ddY!#EDVJa#3Z9!8-y2zLC*POOEV1wtZDa=hdqH@$H=R(U~26t zkRPdbu6C=PJk!}9ZAQGaEAA_mYFN&2+Z8c-H-ebJEf0vdv=&?_gheu)7VN*jQ_HXR z9}m#+^&qckxu?MshSWB4qekYbIduW-O5;^6z@PkT!e6;Zy`m8Pt88NB8`+3Y)SkOR z3p{s`S#AAK0T`FyqhVO|M1}=XwF`;<7 z$)TED)Z>CIK%U8m+~z4pb`acdfm&Sa^6}UbHC*sA@_ddGfeN8SB@Yb;56JQ=V|I(- z-D1EfC2n}#952_H_C%Oak$E(;o>i$lO@Yll`UQBQZge=fKQet6Sf)qmG7Q(dDUGsb ztow;-t@?cM$H#HLflN^ds6n>>x; zHO6IJ-kP8?Y=k4DA~W~4a6i!G&8*yW>0gWMjH}6lE)eMs0uI5#I{g9FXRP<(_f~HT zR7(A<%QW(xY^6MYM2k6MJ*^_E4u6cIjk*(`CVXz%h+(|NLB;xe3B3RBVbnCBx6GE> zqDq>-CsZN z>KY)J8GZ~(-r(L$C)k1m7Xy?UN)!qxlYx~*P7DUAuPsAxigB8hwwXJKAv&VhM~k4I zD#I3wxYYV^97%M+q2Hg8EQ-!ib5Op8jCXA^=(hX2TVsx0@H12Rt;%U7a?%P1Q2g#7 z8Agn}NSa|Zt@c2vbRkGiDy^;B_DGd$}r4Ke{lw7pIS#UwS8q)LYXdn?0 zDo5dU*K8A~MD|1I{vvah;K*U)4L%%m+9cgb;{PVwAT6=c)&FttDvT;aBn{|D?pDcx z??{#Q340i^j+4*6A+)_8C}}Z~_Zp4v1-mI(2jC=_XKdvWl6roU`Ao;!Wcj=2kzR8@ zO!!I(IgoHHO_;{qQ?wvK$f%azx&dYJ_}5Rpnu3f&J}7vd9JYr|68o5e+nV{_$6R$% z$AG=5gpGi^qU^+TNZy~+y+1^CLE>`ls(o(2`UA0fRTnlmpc1wn14Hs zv8i(-r|Vz?ZzD&AT`vz9LY`8#EcENujH~?U{nb=uGZ{Vx@V4?tdl%=mA0jx_zw~vu zm>&m-s`i>^CvfGCbGsb-qKj`8ALK}Rg)PrbNy!F0QA%+FYoQzZ^c`^$2Ji+}>rwx( z1heqET{vC{uF||K-mzc0x97}!^W4E6P2TEL#>`^Xjj|CejjRw zZXt3i-dDe?o$M@!s36Gc8T%tS+J%*w_rJY7yL)vo2ak0^VuZg*j(#>)?8jj)56-|~ z%Mrhqn)A-xh>^LoDa+(o&uDNc9txdfOriVo3`SW|>7Np36tM*uFzFj`6zZ1N1TJV2 z@)qWV`7OD7h&AG$Nh`ZF*XYh>r4eHCIu5F+l=oquCUIDIH}5jxC%ll7C>=*0G&V8X z95DrCxf5R=Ct(JdpoT7%dEdUDTvpn*cR@&4@mZ=l$3B8sR#NLI@^cbpw>)@+gjfAk zR8XW49U#Kj!PltY?J%5RC|f>o6uT4k8xJ2(!KW=dqyNwo*le)DqdR5ty^V?GuD69! zH*2RO@T~+Gz{2D@{2x49#_Qiht*-k;Liv&ir8FFTQbR&wO1*awpPev0Kw zcf*jYH(v>QLU&kSENj0+;Ql4-hTmDx@*>-haa4e&AuWS(uFvuHBJ$PA4K2iPzKjBF z_P2Pmpwf#kqaU_=9Et0NBkp}OYF5H4yBCcY^e4kQgxWj+sJH=y*0a3o7x#;KPEt*e zl^KUBJAQaEC@k@jKRS;8fNxEO{>#p_f`U!(&lq>f!?lfWg|nU^jD&B{PtWhjyA*cW z1mW<XHrO7KtD3` z`U^eLAEKHLDt}gcrMEwVJPN4|Yq(~*{VjBw1n{J+ z?1uT?F2RJX&{L~I3 zn(^^RN^gLnwkgIr1922bmm(TRKg^^jvAx;dyb@#mpwBubc zOI+LQ>Gs&SKjZiq3H5lB4X76%p|$1JDRnvEMeEj?^52}?4!a=^zA+$0l52Mn6?dl; z(%$0nDw-JY1MZt{HZuJtj!8uZPgBjrJ~%Wkv5^HphNj|aIUK)B2|bRcUIH@qu20TV zso&9I5kst2#sHR#sl2h2=e{DyWedVhb;lXu`UkkF#icMYvMs#5W8p_cmTeDj1k z;DtJ0adm8y+GCabOE&{hiX_m`cX!uu!h(uM+G2hzgp7&Csh?pk_48}q$#sT}#2`-{1r>fA;6j{61SjIPru|I=UfzES`y*4BG>bo36tGI*;Gfead$ zuS?8@CV^C-U!ra0w@?Fo5_8Q7O)-AEmyt9@%(#a;LW9zHCOONHk?nT@^NlMW$Ia=! zt=yIZ2=954_|7sF74}J%%}J%rTxjR8A8>$Qkws%wr1l~_D+~r6myfk-r(3g?jQX1>=iy^dpxW zOyn&zMJN<1w1(?+tr-s64O$_O zJO<jWLCNADG`spKe!^hIX~Mxek6-mz!U>e|WgNJRfG|*>Jz~7#J9c+CHKHwtR8? z9Nyti)dA?M^~6JJ5r$4O7oiccH}eiYW^L@i0&b-bA1M=8HM4Z==HN_g!W01qYkErxs9W8tx+ z3yT!69FTWau*%4muQk?szy?;#?#o$M;K8QJ8w4|>`348#>gvm&VSe63s^?&MvNhAu zOfJ`WM4$n$e;iP!lZ77N?Jf;v-tfyg_7 zuz|E^91*&lu#c2Caz-D1o*>mOQCO6l=Lb-4CcbfR@w+D#R{2*)#rn!WCobuFS&do| zSle%@1fOp=gCzy=_n3QqO|Fh5r!e{vfCFHadq{_`m;EEQ^Y7|?+{ZrUzE)_|Y z*k$>3;p_;5{v*{^kZDCV%S{n_r6PtThH{=TDIL>y_HeL_iva&RL^S@KM5s&~Y6GqX zE8?wo^-kxyN0r9)maHSDF|{W%b;qD%zAzW8dqt_^Acb6#x0Q1rhy5U8D)@L|#V`sw zec+ycJ%z;+^K=(0Wy$t}B}yi-S5cy7|7<;`P56J%vP=V<87ejyOd~a}hf*k_l&OfG z{xSLk4y->U8~MLT_NHufI*Z{(+HIwN8~h92xS7*g!ddzX0Jmz%nb{!IJGU>~q^gJh zq04T-lEjpSZ~TEa3O8gD!R!B-w=4SKoa}Ljrg?!6%At7PD)Z2dsQ?hYaE5ked$vjs z``r4cr!}rER}|M2OIf;yl0+Ruv*(3ICvx-_&!c2^tjJ*h%k^7)9HXi?IK=XX+Jh0S zC7BIM(D-MV_C>e;D#Y*Hde$E;uK1_yNTG+*<0Rufz|tD;iPrni+Lu8WCPvoC^ik($ zB06x&yVCJ)I)RTtx@cUdZUYVEQ7C{s?8u8qOZAJNp^HvB*-^?A72M1vyzl^POyLGQ zo_hjz!97w_j0?oq8RQf~I{3p{EB}kNf`jJ{`=v7zJXrl%R;M+vIRuM8<-8T(HI|Fk z$aA9t7Oi@hczrM6<4j~4dpFx6`on+N%?)ue2;{4RSUxNW@##l6csc0$QAHs(+3b8* zAA>s#w25WKOceLDPK3jDg(zCshnY_F)hcZ7#I&cit_{dKQTzDmLPHor#%CHXsxBcs zxkBa6>DUM3dTy0_R>@ujb!9ADzyvhihPOUy3iZ(5QszoY!i#~=3g6O>COPs>Wrt^& zdC5f}koPv@c@ba&f}?_8^ZknZZVf+h3@DV2nTHxoVNyg1T}!<$X=Irh_*!wgtP4-n9mFq^fNa2f8tumQ8ux(yUc!7An)j(9An*jvGw2R`c zPZ;$^-W-#@`dsLF4BYw$ZA0F^p0r-Xax_JFb2!i3Cf1ll^`Ocss`-g|dN5k6Y&Ip< z&J=1QLvqxkNeroXtmP)E}N*m=VE%3 zvBirqeB7}gOdAucLk>pH3{bRn=h*cmjgB{)2b$bjEf$*h8Z)l?+L@1Q_N-EV%Gj0E z8t)+e0cjzlFTo}%o7!U{NY$;U{@hQHt$xSkYugthA?ahL02G#N0Z9BY;V$=<{*t7b zlaGjCxc-a~e$`D|y*+i~zpE>JC650XY+~k_e;`oI*bmc*k4ou*bskvRwQAOWMb&AT zhiBFxmD!@aO0h8vpYJo5jxs4Yks2zg+oTmIO%_&^shc=P(@2P?lS+q8S8{Og$>J^Z zQ`JYmX~|@{;{Ky=>c#sT9#gHXu;06mp+)FfEK(qHVWh_8l+cV1Nz!NSjBw~H?pj-Y zQ1~gi52wfiV=j{rQNoXi8BZ=~+=P++1|{5R)0kGOKt0}$pv!5 ztg1WIb0;l=txeqB;Iu;7(T{9rKO@b;*km6-wJNZc#AISr!f8E_YBTE957Wkc<@@+C1lgA%z`CQ2>Cq}nw3 zUbXQ0jJe6k_=x^n+xl#N;LJmA_Dsp5FL?l_@TShS)f~;$1MHN)q>#~)wqL{HBJ7U2 z7l-LhAJog*)#O9QS_`d{Lj@BI+HNBCa`@UaJpUWs{#J>4VLXA}&*v>#Cyrzmn zfW+)$E@@e;@&6ncw461Q$qP%%SANRxUOK5IRGT!e! zHKh*>)^AV)JxlwUclXL%%AE4dAf1$25@6H7xx}|LyvILkwyl$hH~Q^a#7Q@GYLD~D z=Z7pJMhL@+obO~1_N9tl4WheLDAyNW4Yz~?5|Ga=mFwT#O?DaRtv#9m%A(pBql^Lx z1mOWJO^chwAx`ci2Mx9(1P$Y0TS9MT%DF~$Q_F|sTifhh5z3|P2=1Th-!~3?_PL#L zdsx#JS%l{x2mqoR`Fd6(j30(;=N+%Fr>k6bDjum=f{jqEcm1JUCa03XI~2RRHExuAa-yd)Ucv$!T00grEps&mI%ABEbqQo zLUX>BnXEKB>*hFePr^9l;ThCG!zfV5^X||)oDa`vEi2l=%YSGQH-d}zxLpM5t_shP z1K5?|^_=VQ@nBF4te|8OGul5rH0Fj0IPuxLD@3Q=|E}a29ftqnxQkvL{BZm;u2EDW zg~0u7*~gQ)r@l$z2-0DD)|B3^=xv&UF-ecgLCNt`qN2V8@RX+(Zn#bbMb|RCY3ZY_ ztj!e;sx>7bQ^>&cB6|4B{3nZH5D|Vq*KRFR(FR1HHT1_u&I@9!ZcYj(*16?v1?$vv zhoN2$OUO=7#X{&%U_FzCS9Ph@90Vwx3k6!ttNB$FNz^#_%svvRUdtCP6Jl5YbRjN^ z9VD&s|IIhx?M2Q9ba+Z zkt>P!rX}xvA3yff*RWr=`CudutAIMI+OB72W|IW{vCuB}ENEpF&)oSgCEd=#5p`aw zhwXDIqWZc=M&h!OK|qfKlf8B-zw2v#i@3F6V*$8OuidR=j<4#`Di8m+gl1p~{5&6Q zU3q(FZvgGR7`S|2Cz$OBKe~zv*^hwVDtI?gKh`T7f6+%R7_zNzB=kO&uSz3*myoD7 zo?<7*o*Vhw`xs<5ls#bNFhO-SF)1nP95QNcYiC5d!{scWm%{=Jp4$R~nHWYt=J_8R zHh9%_ZAZAbC8}pzYoMxVzTuHMW5alk-KLj2WRC!>Y;VHB3$4|mjTJ=&t_8ybbn30* z4J0afCp6{m^3&kI-ekgBvZu#W;9B!X?y7FLD2 z0aKD9`}ipTriGYp!y{HOg0H7fD|N{ltkCZezBXawgR_CpY7~ZV?1xDf_;?mnUA~Y4 z3Ei421W^tD(uYE~|1*8?uS-kz&rclhl<^>jBCx#E zk?}C6YWv%QDgW!Ry;>!O%YTfLpE5<0om6Cf4EVqQH^si2L=3g%6N5^j=&YQ$>3f#) zBH$gt*HITv-q!~B$M&a6pu@wfV!`@Gl=EN9r6>xN*w4~(_>N^`Jlll`W=WcHSU^9w z`IMwWuMN&BAb?f>y8AIob86|{+ktjoBdA>j?{&;Gv}+Q?Iy^;8H~ZsjY^P}crUppU zfnWkCHGgU20t(h*F$DH9pXoO`rrKq%6M?H3K(`7`tw`FAO?WJ$g5w*%6hEr{djDqz zc{eI^M5>xLkc6c|VWPqHF;QP(|D;0yn*nV1nHH#egK@&!7kLdffZ=@r53~bx4h)=T z#9~Y^{lu)1svY~#f~A7z1JoALuZz;`^)AJxHbXgT0M^cY;B@MOUiv^o`*c%{gj9`1 zuco@58RW`l8wHVgBsf*uX=vk2?3WykD zVwRnr$N1Y6G0atS+>`eNrhI7woynL542g`bhAIro#QT-+uLYBRN+Yzn-L%MX9@6QTy z1^V`aHw=$R1;!=AZ9)R4fc_sS6*rZm09FbkLQ>mZ&%x z*#u|dJ=$}@9IN;xpkb^c%a$Z0q$?s~$Db8H+Y$@6da+oe1(o(xV;eXWQ8$2p?naBtS-E}9ePHX0nZyfR%Gi8n+a=AYr^Y zE|jD*qq~Mo(wAvYlC53Yyp!PQX*PEyhMTf#w*{m|J3E&73ww|-$@!&QTulP;amZkU z(ZJEI5cl^+3alr5@OthMPtT)3=tku1u^~zr5gdjEvi!u1n^N0VYkd$8P^}7>Sm9L7 z`cA~%QRW!~g4aiagFBt!F2*13R)4$8xFZ~fj1I2V`QoKE%%MKT&a|yQOws5@3~;2^ zAZ(03SPwc(ZnT7lVMu^J(Oox>vA|VeorJ3ig`fN^Q8e!q7y2%vRJ<@YXX{doZu-(O z9ZV*iP&OVjtx&&-y?=bFD6q1#fhUuk3>fEM_C*2tu$9~?t#HD4dW+^|PiNAum=4;?;3-*{LE#qEfsm(U8_Uim^) zYhVhOs~;n)7KHBgyv|K@PLQ_Q-&8 zsrsz};jcd0-;&}t^ohp(?N$b3)0ZaB_%GotvKRC&{OM$&bll6s$~UI#>aTr z>rObmp4YzPM|#)5yyaQGIn3t-OtM6nI3+qB$tf2d7|8LR=!UB+S>CmUyTGVwFW-U z+qY^9`Wa50x$53*Gv+LTes&%3v^=taE-=;zPA|pT5S1*rN8;R+z9V`X!9hq%ZyXY2 zIg-V1Kqy|u)wqR&R(75#zoC3FxnFy8srZE=A%G{YV!3V5mF0|xAkrwnu*Q3NM$*x| zIsIrZcB%Lq83E*?hh@juw58=r0JDHWeg6~5jn15Vwf>o~G*jieV~?{C8nV~Oanz_d zXI%`_sp;PP`&)%MiNkK;sJ15b29w)e|C+m(1;*}|Hhk_U4RrLAhYp`LFXKmz&oQt1 z{4cYWo1>Df5Dmfp{erhku+)&ZaK>wFs#%BLA8_t-m>UXgJKdGWu(amc$x}nuyt_d= zY?Tec>kpIgD-xtX(Y@(9ODW$+HFV3+Xfq#yAIV7XrP~9r>H+oB*j#vFLJe>P0=|DU z=Syb^rMquW*GHKrfa#b!H?Z-J`#F&{&{Om5OPbgtPR_A@BP)DLx%d9=thefau3LES z`|9=%7hF?8{C?9k1RwVfsHfMm1ot6j?cg^*HUigsvI2PX^33YGr+cSJQh;ML_Ash= zNDILrf{d#B+5}0Af)b+v_zu_+RS9McNu#c*d?dSkY5Z%@`F@aVKlFBZ+p5(TQcRt*d2xd~D)Ix!q#2`RMu5_N87S}DxXlcOo?QboA)I3kJ zQl))s{@gj4_h09l06kB<-uQg@nPOKvX}*MLXh95BpVELuXpYi5uOJ-q32u&YtyIpa=8pM zKl%AASf&%Z@Za-q*%=e>&oB1P&OeEOivdFdmI;R)Vvq5UoIYhfZ@x48+S3d8aG$?1 zyfP9(%0cr)HHiRL;W4=V*QBu=k0n}Tc?}$4V?0rFoAbMF+aO-9RANt62%g$W{5HGQ zF~7^*wsA?2&g;nX9a<*^qb7@(&b<*R0T|_Z*AYL@C2sMX zNu`WhfuH(!F-?FxU^eIn_%GL*7g72aP^RI}n9i!xmce`(brSCE$>g%zA~M@fiolGO&897oWqMb`Lp-Y^af5xI+eI6@o>6d3O@6Bi zR>)J=|9cT@{*Uq>0BZr0spfpWtnJ6dnA4M0(qQ!3(>`*<8=P#=>4}0ex$%JeSIFI? z33dBkm0{WFx?_nGvLHFnP(QosWHLj^>!C*2IHeaC46{6PtHu4Aqm$~c!23k-b3$z1 zs^cl)p+M%r^+xVg!p+I$QlytFYWZKqu2d@>i}fguAo=G2e^Ro*gsJBj2UfeN?ez<^ z{do7NZ35tyN(Jvv*{ZT#SR- zB`NsZ)p+CoqU^1M;%c;Q-z0c&_r??4g1bWk1QOgmKyY_=?T`d_2ol`gJ-EBOyX##| zzP-;r=e~FEdsS5N54CD_vt-UW#`sOG)Z4Ap52DA%L3g^bnRE!4MORSsVT|}oy>0DY z7(PSoxz;1PeM1@@<*%hxjvS^V5hlUwWS0ypn>I}0G)>nvC?2Dob;eCF))mmlZa*y+z2x_>e?A~s zHXwr2H6DSNKA;LDrk3oGZaB z(uvv|ZtIJAS|It8{YIy#^~n~ioqoaVCzIC1fp%PAR}kVcJ`GmwU1S{g-cQ?=?zo|; z6NC3}Wa6b7*B0=-t=PSO#@~WrOy-&Bdw)E^nGspre1$3;obN60Y%uH2>UY%a3vpgw zQ3ujgodgte#w%3?g{DWfUT>zGyF0Fb?8lXK;ozRcZ9%O`K<$>kJH4(4@(d7dXjPH| z(cPpiTM`{CkQ1xrh>v?>JeU+^#%E&WV%+x*H^omWf2!pc@v02+p~e|%EVh6D^3WZk zajjLg-qyd+_G58gl@#a73sb=E>rQsKmK%Ul2>e%y#7hU|u#uC7;mGv5zmeTC ztGk*ZV$V&Jz^udem83p02F`4p2yiO?&kpWH5X0fL+}VG+kJ{+EG#U)f9=5Ve^%2#oxF7eX&c1Aud(I!NldL=w_vBFjQjzJ zxprq2dO^>hiNDUv9ds*$OQ3mW_;UHIEhsU_Pv+<0fY92a-?#5E>%2d~s>qKA!q;*n zjy7b`;X*uNO7ibBRnrhjRL&fcNIU5bgm^wQ~%AJ zYViPyyYb4)NcTa){zr@58vUZp?PzWHa^3*R#@JKN-X|P6G&?_7+pnm}pdQn&Uwh96 zwAVIKPfhRBx315lBta_*>-RTjh?bfV9)!AIa^^qHqK|g7XQNkNJ&Kir3oykv9SElZ zbXUP=|JNbJ|Ml^#Mc~%@J_&-W`HAPkEd7f62$)Ibi|7D;NE`ggIAYt=OzLh0eez}B_;kJbREET<{ z9uEjh$&MzA0w=y=i1GUavj@iwgcZJMgHELpH|`<4o7`1Vey3jfBkDz)7X(IH+$=Cf zN0ZifNJ46s`4jbe2?vxhiEN{1Etf+<*Eu%VbHRAb)B@}#{F8nPXw~oouaN+|R&p^D z6w-SiFhzjKjO!uspb_(Ce)_%xLr|;sN5O7tR9e$os%w7R=BrR1$U& zeFko$V{%WG^?JdSdI#rxa}Qq5vcm)UA#Qza2`HCiUMM=*+0S$8@dvab#dElan9|f! z@3i1`&IA=-n zNoW?z3A4{22T~B5)odhie0fC$agRz^TD*ixQ0YY|-BTJO&rv1JmPN zrF)_&*P1q)cIv>0`?9HM!*SR>d=yTtanut=(CQoNJzv@_GG>RZkNdLUm?_Ein1aIb zqt`^|*3iKdTI#O3=P^FT$K`pEprXllc;?`|o%}=y`ZgS^%sU2E6ZOO;QC@mX=OSqlT zQrMBFO1TNYsL(#l&i%^9(fv;ECy7@>QMcPk6Z6#Cr>!j^?e<%C{&{xOMM0t*yWfjr zti3fcuDWfuItKY7@4vYX?5TfIJ;lAjGjh;;>zUJ-^xSNDdVjiDES<7) z*aoRj8#p37a%zIqfEgDvz5NX^VoE{}#8b+xex+rij!e7t9sv3vT6X{m; zgVh$Sx2$BNsc_Up6}hDPgX4OyJ8JXfUY=hBzau>QcuI5mW-^+&a6C^M^R=oyuBiak z$F0#dZL_*!7XJEFdna7aOt*!%o`9v{K)vh!q%f*Kb%LTY+_SN+(2h1|$-uvx;-vv* zFY<^z5zb?r7HsTU;j>d)%M+O6NXB_~_i9U4w()ja-J+m;^gh|-vHCu2;nj+F6lh3e z@X!<84pPrN6(;Iy)vbE1@R7-8*tIj@m;UdzsqMh}j{t)L##s3CMteha*RJ2JKNy2KeR-{UTQDoS zs`TCRSUuBTtI_P^d!j$z#Vt_>I~SVyY_aGYNr%gpP|(}(pdfnmFJgUyFK*=hV=Q>5 z#$CmN`_w;l`E`~Kwd7b9C(?AbZ%KD$kDh3vBK8A)xXEllaoO=wh0eW!dNw({ ze(5oQks6>Oy?T^Qrva@cT?{0s5uXcEY^`Zq6qA>0duHnY;%Y9jUWhSF%5; zRBBB=9v)hBl*E&2ryUmkY;ii@8MYOCG@3k5D{?MWtJX{LN@Eu8@OHR5>n-+>1iM!$ zLvIXyi1jiamR-=Nbhz_VNy2|zp=qa{@~JYf&Qx{Pe%g}V-zvM&#ymclKQx=V>!?cJ zDsxEALPEKTE$?Nq)|jdggdyqf>F@4vCF-|j>|jZpSX{mN0ZbW*=>${AAK~2Mq7*b8 z4?+Nh%qu!S=2pZ9hsydVHg)?MKg6$rYK32$LM>%lRFz6&c5+E3Pb{42-~NlBl#M9- zj-@9egZ)!!h1>d0qAD(>YGl}uMOVD4~zK9i=hBKH~=S688wFR|W;mhc-BQ&AggvQpSNFTWs-ZUx41>JSn zGW6XeTSZHt2Yx66ov3ep2s5Cxxs986ZclgkTYjLr!}BP4o=9C#EE;PFc-}y%Hql}T zpSX3P(uz3P`MU(}93qSbERfLE-v|u*9`Be(S#2-X1+&bAWjaKt%#zx#ljoLGc&FRLi7Qs^V_TLHq(C*B@I)^xv39ru(=m%Lo+NH-B)e;u8y!t6!iW6)S-gh7tZ}jIygZ#QnKeQ zl=Z^3bXfJ15iYgKk=vDb+KErd8l?PE{{Y^<1#0 zhq{I*M^^LY*fo8`MXBGD9`<%$kse@V!<`ZikM@` z8GgZFxk4>N2C>Q9g$$ZBs{PimLjt^BN^PNyEuq@T&vMx!7Dr&xu~G>UZ~fnU?T*uM z*{q7CErL3@PpcaC&SY^aaF)&T%pH)%!G*D}L!ecgF(hf%OdN!n$Pyn^8J-YRT)%eg-nZ?anP`<#v9}3X zE~0b2uL%E1z1JZsTBDD*b5i+pRbs>g&0~F>F?ae>lpT2Oyq4X6r@|C=6WaT?PmNaT zaQz=WYI0P+>C?55D?94LKMiW2wL|HeGd-5GU!ID~FxNh&j)L!Ea6wDWZgbD+Q7VCd z6sT6lUmp;_=9kmpG$&hKuuf3z>y+R|(97}87 z`4msDSmI12VNv;2$m?&3Vo!oHLz8RALoou8op1u1-E^4r-J46Ri?|h`3h^g;I3-8Q z-G94PRql>Xcy~VHORBIF%e(F}*zLI~_9xOB62#2(AdedY{Q3h-L7{QM;kF+Ih_F>2 zf_lN;OgEwt zbdnw(x%FriKrXnwLJm5!-_4n1cp`QF8Q?`3MBeC>RQSV+N7G9I{W{I5h99wUEn|OG zlwwyS0ix~AlR}~%kS4acfaxDSj+6=%N4_B*tl3p5;*ul_Cebh;8phn~NKSurP30A#(RE@W z4bTCzN^xRvjNXHVYCF>iA`ljzVm=kwGc~c}d9S!*=iTDop71H=y95^>r##b;M4p2f z&u#6%+<&&UGPo-`IP;ynT{^C7N;S6amDZ-4E;!Zjt*8X?@MCZ?>xaDh$^{0}10ES4 zrtr^)dbm7f0xZc9dW=tT&`pLTo6?lp&KC%>k*1m7^Xzw9JT={3D%CgH{t<*PG7=7Y zOMGq`o9S4$|86qcJCAjhxbB9s9#!4LW)DW{4Whi0hlW^gl7I(~yy|vc+<%!T|C?e6 zL`MHAhT`evUoSS?>$rrS@K&V3$`hX3P-Am3g=V{$(IKN)mvZ3`m9M33yZ*dN6o3!- z6~+r+1T}(d|I6z&hEL&=#dbZrBK|P3#Q9VHk>q}t(Nl`Y-Kxgx{T$_oxN+crT=SDk z09o{w)yZSj16u1c9^_Luf@%fLn)Wjp9%hned+PA5`FssJhsCTIIgs7cNAT5wx0$GR z?pzv$12Z_1;Y&5VV|=89+T+YP|DLfR+^}|@We09mN))8cuE#mkrGPFii;ItsvRhHD zwj@ScQ1KsH^aNxz_Zzcr-Q&X~P1g8?1mD9$%i8e-APxl$=~cz=MF^E4s2@3KDD|ByGQzwE839kHlub15`X?XuQwJ%c*gY}jAZ zRMk4RcAL5TiE`PIWodZcKarF=_SoPV%YMKr%KeeSD`&1snradDC{k7M1jY2Y?(9SJ z=fC$*HzG5dj8voT<0t2hfTQvq)a4DkC!pheLT|7~X*aN5nMbIxzC_5LV;6`h@C=fX zLW5pOg_te5qlx8n*QkdwKB*)G;SfhwC4_gSJA!AN-S1SPA0MxYpwGXfuh@z2D200& z{AyxXa3fOaauqr$id<J4ReW+H0MPLDNwR=Y^VII>L~d z1W-#`dHs6zWE+I^XYH7m2EAzZhWg6Ei!*Qm+!na7v^AFh9kuT#q-mC)=i{vk7}|?* z0tU&%dkslDY=2`+Qa_CuBK)NGQF^jWU*rfmN9gH!L;YIucAb1_GD;!5SQUag{o@u7 z^TbkWG8-9Dz!5o-8mnbr5XY^nEwarz$oxr^sz?2j#BZM36U_?6)427_X{NUyu%t#atGKRr_dTi5bBRV)A0;!fVKrLv{Ncn9_Yr!|MhWGxI$p%K}%}?=v55 zqz`+S2Q$fNAz$LH%NS#49&45OG1#@;2#YwYDmKceD|ao1>m`ev(v-9V+77zv6jzdh zb)tPJX5aU8XQJ^Ro1A$z_SPs0r?2spRf(bGPSTCbI~!J)%pVWB)e%6YxBIIe9q#!0 zljZF(E6EDsP8~7cZQaxcpDQ;@GxV{xolg3;*3Ty=EQ?+fTG1U_NaVp|cU$Z+y3jW{ z(|z?DI^gPItLj?&0GX8mdf8NJGsyE|Uf_CS=&}_lF!j(6sK@Bq-np$zt`&S6Enrwy1(O1sO9M$C(puV<YGW1|+kJwqpW=b+ zw}Hl!ktQv5CK>q3_X|Fquv(7iw<54~>#}E;d*gsHKN`#Shi#}TmeRp>cR8f``GA-%pQX7F3Y3!`lsn-HcGIUqP8_0n3V)*yzTDuXD zgJ_@4ztdfq;4D2xs5wml2pv8F;C5clGV1{W=c%s7<4LQ*KZ+1*Z%vw!aJN7);!RG| zgMdJ%kpm%SCmblCSnv1JOAjE<=F*`#IhYaru5fo7<*Zgiu5G6-WjcXFogdk9?bF?# zz2OBf$}d;*FW}N(FUl>+`K0h;UyqW^k3@)FV5?{vVzpxS$(A`78OcPF_6X171(NWE zUWno1&Yf7U?CMsh<=s{5Z*D!*C&`a7I*l^>8W5h^a45SM1uZG12pgZ#9xZ2C% z5858r#1^`TT7;RziI1_57v*fI6oEu`n0#Nbef}zH+rU`fT||U^$X(jr+!iK5e`c`>Jc7s|@>x@X}_4PsyuBUEKuZk9^Im+^+c zwE7}@=|3UDayl3-r=>Kvt>q!RPm#YQ6E49dDl&CAEqhMf(MIuTeXYN2l4{C%c_opl zvya{N4B)`h$gI;r&1+SbF7$2Ah|UZ&jbqMPzvYCL>dXrjOL|v(i?wj@1k+&L$i(k8 zuSniJ{8q?WUhNF?kC2(+bw54EZZ?8CrFz!G>K|$I4Ih2#@JJ8DeW_S0ZF&q(cn8UwW{S(Q6r3`$PoV)l!TN5y0*>^<`8h%1*#$LgR@mC|Qf46TFwFV5%R@<@I0qKSR_AsGN3DdNai))~xMq$FdRV463W zza5e#@qe{W7CCn=C+tgq3|(r-<#B7DRx;d$1yo+-M2Mpi>mQ)N2LOk_H^ix{Gu04~ zD}GLYuHXfvmL~f{mYT0;lAZRkqRrhzyR_d)d1Q0yqr|Ekl&vo9wY?r3ocBw+m!DM% zMTkmq?-!{0*L}!0yf;;hO1a40AiKe^X!B3NLeUpb|Jg>@c^m#W5+4SGeoQw4_n*bv z3H9Z_Asfo9KorCMIJ*vg-{uzLn*+D}J2gc1H#IbZK>~mItrJ~Y$7SWt{1(djW?rzR zZ_5jsDY^X^Pm{~(6=RZz?~da?nN=R2hx_k$NWulso=;y+N^j+w=`5W+W(Kz;mQeZm z`Af{E81X4aXun15Lfr;`qfPojmpDQYM20OZTI;pR>1>2ZCW98FJEgYlG&k1iab#m<>^ykUuR;r!ZKF=y4r zP9l^E0jv`2D59+7XR$Wq3u?~mWZ6LI!FRyz%I|V`soljv#r$C6WCIvxs&Q7IPce3-ZhpHv_+z`s_Zpp%u0G@X%9{ho_&&hW#tB4%}N^B$0 z-Up#dQ!WRhU!}c8ZY~FPDPdpkH;%$J)CFBW&+3{wKyJs6(Ikb2W=rKHliCY#dqqtl z0dg(TQ}aD-$n@?+i-0xW?6S3<<1nDwbL}t{!Wd{(tR#6{cLD961viBY<6aHGpP1q1 zyG2S>C(N+UUtTnS#X0cdLddCW{&Pwz468%p-Z-4PEzaTG-p$Qf7{5oZliWV8wk6g*-sgm3Y(Q|-&a zb=Xu)?u}O0Yg|7-Hf|R~EfUbYZkj(e#PTA$twiYf%!rV1S-`L8HIDE5~NfX~SFs`TG0(TOm2$Lxg zI1W@TGz@47{j!|Pq2hH)Jf9b7V!S6mmcmAe98Y0=T2Ug9ekTJYAoMT~8OvZU7oe@T zJeIchYHErXVXxNbJ}EH5&OejU{O$=3iX_*TcwcF*$Cx3q zPtDDRzjf+PR0bcciGQ`_)qZ z=3t|jkUIV!7G8M}ed1ZR{#~0+p}&n*{)bxZvt&VGG(_aO9-)bDh& zVr;hgJsPiZExD&?t(UZvau;hmb9MBcl!fnZpP04Gd7xiE(B@k;BcyI_sA4g)0jXk~ zui0KTgbepn9zM!vzs|caUrC-@-lkQ)YIku2o!PAMbmEGK+m%;K| zwF>-{oIfE@MuoCqJ#L-I(!%!VRg!`~KL;rE4+XO)(O7z}z0{UZ6O#;Bx7~1iubKeo zM%nz2oXDCy#>c1BuyzNQ7{c=vS~7vqzHa`ym*y~6nO78PBQVfz1%HIzcfqG#z8b%< z>k%b>{Re~DV%EQTse*4sq~MLV{iVaLZB>s+yUok}Flg z(ni?t+k5QMfe?RS0Eg@HC$7iiPt!JI0xJTU?WYH|GzgL;o{IZxA*|;0eHFuYeO!G< zT^a$>D4Pbthxsw+hdh7ldn(<|a|tIBeKNrLTcEzG8*S$+H|NfeE9Xibv$Z$e#UVs@wuOP7t4)f_30HW}c zot*BH!;hq(3gaku(Wd0>KGPy`!|$N9xm@=NqiUBR`v#H~zWmXb-veGzo*D>@s!gq= z5#cY;|6uUrzzEW(MN#nk;MK_$*DB9B&Oq`7y<=4W|2^VA5IP_7`Te}%!^4AnXn15~ zFSk#frJiNg_y1K2vO6R_Z8ji5B&t{uthLeg!{C!((l2dbDd z!Dl#)&JWzL4L0{a5o+J$NS;sS81=+hGlKyXQ2;m0N5iq?32|(`2UV^YIDaX7`QxHS&<7fBgF0;PIL}uSOFQDxI0`G`aQ{Z<-y-MP|{1P-- zphhu;Mh9jKx6TYD@U_>HLKDk*rV>F$)u{b_jP>DR*YAu6d)Pt$d!^2#S%+grC~zu? zOJskrI=2ib!$UA?5bmS8chiVTBczH05e)C+dt#)FkVkX$DL6s%aEly>^ocQ z|EIz|kM^+mlQ(+#bUxIb}?BuK{p@~Q+!+J%)ZW$6k@9CCDA2Oz< zqNC~yef0LIOF-3gMw*a?n9iU}+tRg7cwT_!m>Y*R@882tT8T+w(aaJ92i4)Z!qcq0 z$<(jwo79?hZ*%(<@7u~zx2B8AzSj7`iVeEdf5)DQ4S;^d*gamapnBCT!(v041w0cm zDxe|-x;3cAf1rGGii-g03BU!-a?`fEj1gxOFQ;LipU?{X!|vgnn_XdYSkA*Ia#*Na z$4WpB!G%b^tdfCx56pj8>h_Axm=^IxzPW`tm8Qss@3@ZwE1>EoOTN(<`CS>V1^45^ zA>d~fQ6P}h3oriCw&}!n4~0eeZy|rIMju^NNDR0a&eV0|{{J>f<x6gP?8 z3r{H)fX5O>(_=Xr+8nOgxpJ0wS&x$J!GO?cJD$fe&!u+&xTsh3l$V&$X)g9y?SPEiM9K9z^3sXSzYky8udsFaC(kNy$+4=hFNu? z^vlsWXG3jZ(+#g%uZ;9rV*I_QAa2s5G*Gi1VBj)6x^gA`o4jj!Y}o~KZhN^3T{;~t zevn0bD6^JNKb3*G3)D&qoBQ=SzLRj-%$&QS5a!=K_!*$RR~^@Aa$00xu(a9IN5A}2 z07AK3%Iwac;svg%zrYxEo6Aj9yw*s|5XpSL%WstsxYn1_Qb@C)J$Osz4Fo2Uwi+w0 z%dq!9Qm7Pk&^tw)3OcKR6uSaj|^O~;)BzGnZ% zeR28_I=wabg-oOUQ;kuQFvj;v8N||@m>i@K_jwKbH7kxTkY4&C@|gLVs^#ZRGAQ1_ z=`D4aPv>d!J}adHxo2h3F9X+4+6~~0_HOL2En4LXr4BmwZjt;NlRP6o5xAC9$-}x> zVV>Fa?+yd>tL|6h=WCswL-xhtTT^a=O9aoYQuHIh77WtiuSWH}DEDCYTLEbOmBv@0 z$Nk#Q7ds%3=Zzw2|M;UK#L+=TLF7m38)OQZeaeVW4aD-@AYpy(9`*;_H$ALWJuzDb-tCS)TUM`OCtw4M zm#W~89XzW1HVrz8$1drvT}Y8l8>hK8Ba#T0L!`Z9-ph}gi*1CKv z{S{2>4R&D8357@!~(C>nkS+zT74Up=i)=?AA%K?e#h2 zm}fX683$cbD*2_XqP4wZ26qpM$TaAa#lR`96wJJi(fcCGFX z8a4|s+|2dv)(rkm5&)xXlgL`R?RV=%5x?Wpp3&YrS{~QS`zqyzq8u$lhY=PLpL#e^ zq0;oHjYZb&hLGMpIUqCP@^eT4x@`Ti63!zbqRxotiQ#{9{pehO{e9gkUKE zvpd5J?ab&8V9}T?`!@0BOXs~0yh)UzFmF)b2Go6g6rX*JRc|Z>Tt^ix-vUaZyfK|2 z2(DLOX-)ofn9ygnx7DJmo_tmsd~%tw!da$*AGB?oW6F4=9sc-iN%GaZ^z=gYl@=Oo zMHLs~Rv4D0P26zQ#Qoem;p^#nqj}2Oa&dV+$<;*S(Hz4%UMccfHb499U9sPd_ZMzx z*d%3L!5C!MSu*7XR{$sY0WOwh@{D1^jnc^;o0!UI&9O;#w zL&z;+tmg*{l*%it<7q|pRf=V8byx!}pWck29{{j`KcdIDZr2&sK_S5hH#`ULE!nqr zSRts}1v(AYF%|*GDURz!Ozuyx9eRR;)4fG84(};E!ilw{6a{TM$<^2&76MS6XSz*h z8C_Utq42W>F_cN1A}c{BV>} z{K+;;`V*tG%a-Eucv|E9X-cqxX>M2y{U1pzcM1jv*1=I8l=T8OSHL-P!8{w!r%C(Ija7RjYFpT2>Y)E!dxIchW0LgWLZ(`kr! z%&h@7yjGTXO?}(M#y7bFm#Yjd@=nBWq7kFrfu5-J{5pIERoUuuQ81Eg-kJAtI(!S3wU z`o`H0j}4*?>#^cFLLUm&ce|^@zQKC_wzptz>HD($d9bYx|o#TU-FoMJ`K3*rT>EF=13GFJ| zX-*+au7rs{HSJj5sr_CK%9!R2sFo1%dG!rERLP0v9}=3LP(cqYBnh1a#ss#4+rC&T zuDPOQJDbf#TVan~mWsNhktCb5_bE!W;$c*F`US7wTNZW0!VoMa3pQyHEff0E>;>i1 z7Bxo@^FKzkGGkV(CPHCXoKMD27jsu`I*S&ME4NzI3K%_haZ8?PeOGoWb||XglEBCT zs~vRf34_(LGUf%b@tFQpe~8xWd0S#bKAHQhlgbtcJK~-Ueii1h5I^h2+N4YOCQ+|A zGeGtwo$Xp*rzGNa3=eW$=yuz3EZ?%Uj9B;!FcTIzVj%-i(H$?jzN0$`H&-oLr?)y# zjEN5)hT}VkE8e`AKnFj}JLg+>o5pvSiGCr(ZQ zwc0S_4tzqEac{xrd>{DH&kDZl7NxiA{h4GUOYBlttKD~M;rIM}yQ=I2-|Sw{oJu;8q;MWhDq4BF{M$_yc*~N%X47JUa~#*1qbDU7W)#~f z&Yo@dA}c(e36WMctgOp=>w4cenO>V%R>(g0p_} z#@sCOY6d^>dj$OxefQw^@JNlTgP*y-Fvgv*U#`I zT0IjDtMXVDLF;h;{v3^ZiMh+C+vxWXD}WuCSx|x(V>vZ-gF9a|39~b}lUKA)WdEQK zS{jxZeh_;?`+){%MfW`n^rZ$8Kw!{B#kKl(0H6TG{x>Jh!{`h5cbJhJo&`WCqM_7c zjzhb6`+tfa2`)msh(S&XZL|*;bHLgwG(;H!iE*A}IMn7-@jtfL$Ol5_s%;B$IF(*c z`ue7zcaSHy*3LpUPr+krGkr~%Q+V@vSHAT|pxMf3{~7&YSRVJO*0eDH<_Z+9FDVWz z)=8Z>sJ#LGnaGH)`~l1gOgAuR3V(eewuwFd*AWeN9R5lWs2xiAOj`<8-@nCSXpxDl zd(<9%AQYH{c!+=>5kC&JqFePa!Hltg+L90k@p?b!?j7kZkY7HBm!gbQ?L~w4qtA7x zKxHpNhQj|DV-55=bO>xI-ytr9@|Ha>!0z+$=F2k`srMNtP+JED*;j!G1@xe43OfP+ z0q|C)9WnWNS9ym($Z6>>o5&Fr42k6XKHsV3EoR5PH);y! z4Eeu*(@fV*G&)_Bb9#Bp8K8!M@4F2m&I@0g1n z!h!h5?kyII)sYYD&jtbJ&zW(bSAPoef3HN~3vzzy>2ztWLJc~Tp||V-nBD(>h>XJU zX7!+bHp^Rn(D49WWLq7inUL@axiZ;g!`dx(=e4MMc}Fs%Ooh&iKswAP35DE4-08E@w@=kW{U?v z&Hlm*uvsF``AQznUOt-0H)n19m-tDNklQwNwJv7`#iFN<=So5C+55jDdVu zD0RhpqY1PFC*$7wf{{;p4>+{^t1KX?=S_vded5{kWK$I^n3nMvhN2O4BJ{7_la2LD zA%tCfdVVkY6_R~D0EatM`IZ2J%Tbk06DMx3Z9+Xw^RwaEb?<1EDoXB*O0e=<GrQq{;yRVg=UZV>*F`l)XBQgp)3b*u+|2&n?JD3T9rk1h##AsPusTPaQy#!SbE@ zl<~@$#*wcac5(!EH)_wl8uREMTO!89J4w378Q+~(8BL$88MgFu{;pzncKD3;<=ny? zPw{N{NKe@UD=6(JL!z>$zGrEzkXmDmDh0ztLlLWP7k3>ucZzXTtdX64`3j@T_Qv)>l@k&&VgQjBq6utTy{tg+X3Bt<{1;xUqx`s% z4fCZ{?23>foYMltm=YhN`*(H3?@bTpOQI1ik6!D!sizM!UG$mC0E&(k{Thjnv0BoJCxqf-G0XZR2I>A8{ZsybQ)2EtZ~S(59Q1ZJeMfkcDVV=j@9FiDop*)NqY z>2Jh_Q)EW5tHQjN}ciZR%tdR(Wtm8N^ z;yu%R-?09QeoC4DQk#WJZb~gnxjcB+#6*F0j%t~S&z1Mvh`A5m&2l-yucpwni)DCj< zGz4S&UzHX!o>x=1VWlYE1R4$R7~+xSW<<{;2c3n-xU9|QwKx~PXeh)v`ZA^2HTQY2 zFOQA#9hKwFjtWV=fTWS%k9sevbU81N^*-WoA;@bzQf>K0bRq~CU84-?$m#!GFep;{ z{&u+AK35zJjgfO60^Jfv;Io{+U_RL`Dl#0&2PiUrZS$a{)deAy_@?zwc!G=+l+<-3 zd5)s)VM@R3D$1EXx@yToB`gC%)U@Qk%Env>?bi~%Hoj~*=pOJ$-|HI$$?h9ey}Zg< z5B097OiK0*sTmQGEw!ve+w<+v^haNk8!hPpN^JlQ9RA%^XI@o6z7UExU{Q6@4pL|% zYGr-(;1{tkw|JxG2>}Av)~}#04ENu?SKSP8e15`k@ViM>q8;rI>W*=s85iF8S2t(k zF2KQ&>A74?c(2MMzlL+$ur-^Ff&-jT;Xy_%x@2WAhc#O-h;}|bOpJ6=!p%N-y~G!7 zPW`(dEUufCyFT-mn>B&}w-lOjqUA70wn@AQPv^5T(bjPz|6YCFz*#UlfzWmrE^q$B zkU?QhigAAxs;)V(<+Y{ayYw-`$K;TQ1ciM0m`bDe@9@u#FQ6-0K7Zcwa~&j!Lc*UV z*((5ow%h^uxk_}n%4*(YK}w8|@kGroXwZ7bwze35nZW{*S75;J<8vjp(MT}xLdJwS zUPVjWvE}mj(DB8HGfLgtNa|H>jDKklrzx={@%j`i5ShU&41K6R#Bgp2sH}}v=D58N zc~FUF$zt(LqJ#L%zZhu&Vun;j87t3<@*tHDpfhM>s&^-lz}QyDvzFNXD(({+=!1C! zl+h9bHiuVye>jSes7dGvTuPS@{N6*i?GTljDc02-J0BVp)k~!#A_+7HknqB;z}kIV zBD4wLbE@Uk9DE12V2?pXO$9r!C${qr*rF#@P3-R2#~Ma_R#paYpiw6O?wdBd)z z8w>+?=iFUHt`Xv7aVZOUOS_kK9`}Ms%Wj|gR+DnQuRmzQF__&(fcF6Z5@S7Xdm^S_ zD8WmrMPpZLkvtMzdses$ANcUA3~+ryvxN?<@aebr@cL0>J5j1iAE<1qFR#iILu_s~ z{$dIMP2rbE7k0&@WcSKiImLi4fa;=xxzwjfX=n9SwJs4B173Xa+O5Vwh5~i@Z=F)W7ky2 zIziQ^d=L`&AsJNr?J?@0$B#7FVy?=j-5X@B2DkO8L-4o-imyPeT%rg8ya?urT>g4~ zFGByagivUKYphL5v;fUe=V&`ybcu)l!}DV$Ybu~F2w=e~S3Uc0EJQs+K(8y7-)hyB zuX5cPtDD3F&s{qh@dnGNZf2EX&c@!|EHz}U1xPAjRNRs7&yf+nI6Z9-oF}^7$yn6sfGSd-8%Q~d_cJ}R zKs7%s3by@dk4b{q;JNOg8{GOBSr%k*oPAa4?Pp(k-JY8Q(H)Y<;~+#!d5D9@7kHk0 zgB-K<|Ac{G&LFlp;`+y(-0^{uAj0;)U|ZSTUOypcXb&obtaR_kOs;B?la&>Aa;nz+ zIzR#Ddj&YP*T_@;8h{|ENyGFp;16qjy6~$1PU3~p?$XI`6JQR{ z-2k(>AsfnPZUmN?Kf5fq>f_k;#QC}D6Wi}|)iB9IAT9+N%3E*usF0u8;=gMCBvZa*ZI_D%Z;t`#R&5ha&r5#64Kujj zp6LzxpR9R33X%iLfi03`zEEe>d%YnvxqTCZfWwE-7LERSA+bBKHN%y=_nT5L-%ie& z%{>FY?$odTOkjY&|Dwb82dfQ^YLM6rt=K3< zp`@lPC9r(hJYJf%2arFZL*sFOt$h2$kssSSXjh8!#^j87BD7-QofW zJIN+{s5Qh7KDX>u+ep_x7W}Z%0yboy(39W^U6J!ghzcNuX<&MN)1O89d5%7Q5oDHY zJ6*EAay(y@xHo}5m)M5~eOHRs*BNLnSY{YxDKq~dxg^n*Uqd9xE}%rOK31QF01#(@ zZElTUU!KAI3po=oMMvc>n_x=j{s4SUy@^@{qLuW9#5(PDD>m(1t4bWcsx-l_%K>uQ zeK|*WgXQkK0gTs)+$B^>5)y zgQXXEj=IyaKg*}X;~l|Re2-QtDlJfe@ztMT_vm~WFE`yD02bB_!3Pjjm@xPAn&OS@ z4s+scHD~V3bf)k=xadZNXJs#Znxgw^&OQNh@v&K1l zEYrwv1zC7O#pVYtoNu~RH{n)vQ`^m^Z(64I41HBof?Y+^{#EKr@QD%8p{+;?XfTPK z?xDs{Zai<3BUlyq&i(4G+?2RG0O9Qfl@dE?*j8q5_J!UcdADg_k$R|R$L-Z_^`}8=;8ckXt!sM&72jr4K5u#dvkv>rN{}*jJ7C62E6_X zx2CP{AXNAwE6G~d3L^x9U4(q8sV+--c%`s25V>gTn=`wth?$gxiGR;?UM8Ux&cAJ^kR-rkO zEv^AFQh&RG2X7La$VEY_g1+x2>&kI)6EGRD<&pw#rYcgc?>-B(h)Xw-Kso>A`+B`q zKajgPP!MZ=m&}J!#BB3UJ-4!IwX=@2^_QqgJ0xDKi}Z%}T4Lh;bVoWb1m3IqUPz^H ztAl8zo77ZQjlw-cL*f7Tks%(B)Gc=cXtmK9D)URcXxMp2=4CgUo|=B z&OLYLn>G2v%7WEhRbBnoe)hYiTaZNS1iYws{s<@sS!M|^)fPYuRe|L3J`LPUI$`hW zVscPtR1=x?;Q{rMY%<+V-dj?`)s&q4-O+b+PXxHB7xZ!V#d6EjTtc)dEEABCRBjgb z%?QxRTle}(k9>D@!aZHzhhgIQ*YiQE!zmzBA4M7FmFT;;{mAhw_4|J7GA1SG`;DE` zLhJa0p{pi>1+2i@)qL$oIu4fU%zOV$T1cP3#q^0j`vH+h$C&$y^I3hh0n`=TD5p4c zR~7NYn-O?uvbfX!%j7=Bl~PQ<-Sf` zpHM`9_Vs=FV1Iy(eCb>}QywbxQp++%Kst^3!tn>X{O|>;QE%C@0)Y;bK-l2@nX80i z((xWOO)R$$dm}~PH*p*_ZHUXWV9fnUEiWEZ49%*JE$12|+WSyOz9#i}KfNM$Frt9C zH@mAxnDnlV&qNj=iMPXG+l}A^bXivM9@z?>^||YG4u~0n&oG4!v*HK*CB*zAK7oMuW#rD%&=_P>&>!F=F4-O&v&N z;2(&Ya@=RT6p#_cgO+7K|wxn<>~`xbCsfeHUU2ZtqdbbjC4I9aGMcxvu3} z-s+wg+C&4%=%C?pSj7Rg0k28L(xt0LEi5eT=(rxj?kKf>u+M-VRA_EQUZHmg5Kav_ z`g)!H->NkxWg_M)1EbxrVRbgwvIV!mj444Pc~B8thHr2n5bU>HZ&#qU9_&~U;*m&u z>>A(o56kKdl1?~YS4`PG%-d#QfzrGHXAlpj6~Y-c5ce?i~e{;6kjQa!iM}Lp}|aMeqK5%K5M!`WS7-JPRdT z-lzCx(eMJrs&IeCW&JqII z5)PI}q}L^0*{{g-q!iMEf9xg1KVqZ3YNelFmu2{j44oeGf7neh#s0G>u7h%xUP>a& zsDS1W+2(l0ckK+Cz|#M+lkt1V8}=r82jbt0#85Vt*3=6P&~(4vWHA5RAJ&fk?dMs} zJ9}R1s~kOoO&9~*es7*P<#fp-A5|ZbYN>7+mi>qWd~+t~{!M)KVVgY?B-}Gt?G|Cf z;4Jk42l;c~jT*i3*cyzFX;R&7e7f5|nbi$zyFK6j^5Tjm0SJAvmlDqQKw`f*>f%~& z$ueG*UiNg*D_Q{!(XpKIlh)ft0wlS~%6M%jgmF%lg6GC}adFZ5qL%_v zG+Z|b0F?-h8H^3T3BI2k3sjeI?;w8vMtqKfmnlo%3;`bs>jV{vywVRlgYy;PEyDvK zylPgjxSn^DH^yI9gHlhbvEP%{qM0WdzAiuxx=^rdy=PLz4MC zUA5!)l5@g<0%#-m?n>RwXxEF?Qhx3}l8&sxaL*8Sqg)s&YX1yMTjl^X1e z646pAmgX|rI%(XwOWF=>!S{N$HTqsQH4ex&blOB%t*N7yxv%l#H+L)NnD7G*JO$Kg zUV2GlaKBvPb(W3Zq}t|F$V`_pq$8WR^)$5dpA6buLq)1 zu?Z8#;{0&sv`yR56+x2w20fT2icTihcP*S3AzfxVgU83^F?vpIxYRgWh;ok(&LPf6 z)rUGku{KTu^Zc^J=MK-@KU^UpCo2jw>R%y(HIT|3pW!pw<$om$g1UdEf z?F_5@ckB`i14)2+C{xyg1yaf>%##V`+qdloxB$u})J|iVLTFFSkFw)AHhExwZ=;6TeiB45H1})l(LeFK>36(UcAmlCl%V)(s z6D2koc5%jPzQWo`hdq~7p^A&&#nVQYpy#j!0b)JBix-&;7eI0%%qR2viW%A4BL^NTt% zyHox$DBw+0GNgp?t8pj-jPLnAsgJ($RadIfZYv&?{P!1U@wWJgPN5taN78Hk%<6YSJFK1 zLVsra#1^qM<`H8?1k7sgmUdQ{sTbD~$BOiHRQR(A;uB_=bQ7%QOwK34w(}3RKd3g= z%TJksWGp>mPQ9c(i^5>Gp~v9cyShfk5PrpUD#RnPLS~L-G*O^hfESNuTFGzUaK@Q1 zVCGn*&lc!*RhKz2gKBsh7562;+g`7elg4!|3Mli_sfxazIr9Sv^#SC6^WTxbOm0Jf zLp21O8N^@R^f_$Tx~Hp3BHRSI0eV4MnksKPH4f*`KYJ6qwnJsfkk4-0kvvbf5QY>qsl) zzW3ha3D}>o2HFqJEzA{Q|5!Vf+K!i+0LSGlidg44%n$UvWKd`*Apf>TUolePiX%#z zJvG27+fWDf$j}gx-7sR@6)W?(<_E_Ta|Jl1Ifj9DwdOR;g-|-ZJ=-sVibDiyJHVT9 zN|dbhZnG+&kZ9$#4n#OigvvnX5; z#WA6W*m2j*ECFpK!IUk<@<#gXVJSfJLkeL1{O|S+p#uEsn>;6rnDVrK|0Q0+fvU@a4-ul@_izt@lX#>B z-zE!olWZ&-UBn+aE8qzXYYT!C>rVL|3b?$DP-R1>l^UpGvo zm`<4*#IpjB6a6$#?)9HS1*_TfnEy!=uTk*(3(x|H*;wI6Y6&`zZiQhcUZo^-TdfTr9pJCx8FOpS&Z3TtBGe~yn(xQ-fOp@6m%MA5`Gq-|lS-vttw5!O zar%46+>7KlvdY5PS?C%8?Wtjei1cwc;QM=ppV=o0B&vd3sQV>f+PggR+mACdck|$; zt+z3fCx$jkL$9$C4W{0`wh6AW$e?rCH1j4BzhtHyp*9(80YY79njK`Y9Tzn-^ zMExbgI`d_yqHii&T2dqWHbeEMi>Hy)l`2^Ycx0 z*l+LN8{qh;3oN;8J!K=CDIytuN3|=)*;+FeL?Pin9Ak&J3iJ2)%k_cBXJc5(MfC8~0NN2`yuoDORvLef3GYxR_=h z{r}Yz>>A`C#FE$eckSBC6reN=)D)x?Am6FQ?>}{9_h8Br$60!8K4hHq!!H|55CJ~q zCohlEJCJP1D(L>N3{j(Rmt5ZjUZx0GojQS+l7n+0a&^O#DaN}>m{otihgEMpIp7_( zyqgHs;ArCDhrU*|?vFwMjfb~j>KA|yW{di-z@Ew#x{!as`YtEb=Po%u$$oALg~#dl zO0hSuHQ&SPSdALNKLFhpwhj&hanm3xHK;g*ZmqBMBTAyJr%Tir=^acmDi~cXE z8oaX;sx8X+g3dtpLaA1h*QyWuRESpC#5OAW>7P;)mA^1`ofpABG4=QM<7FB@MIeQz z>ofUXdD2KoGm*2iv(`+pI+Ji(B!(NJZh*d3r;EQ7UUARr&1Sy- zuk)`MLq*gOS8Z38_vjP}E5az!>@v{T72DgDd?m|z;thjRp|S(ZyDyk{CHFvMhCtJz zsgwo?-?8a;$a>i*|2z1C_oAWctU|uLm;!^TQ#{mKD_n>Dj`{#6xOx~wL#iXX%Pwe7kKXwV&~|JaQ71g z?;W`aa-I4j%Jm+Tj`Z#c6!*@$Ste6o>!NK5rZcMhe5f9EXyEWSR_>kl+q&J-jsA>>iw9XY z*?NCJS4QiqQPa3yuJWw3y%{W!Is8ot(B58d&Ju)+P8ene#Q-gQ@wUlVg~zy3FX6RC z9TTLasbAk&j5D+o5`xga_8+t#vi%u^_MxsUM2Xeb*KG2jNX2S2s1|_gZBw@p<3PaG*Z|K)>EDIOPwi935k7MDRoCC z2V#RcG}=MAa%c$q^B*dF{c|C?M55=MGWx<33bOJayt}kZa`1_U9d>RHo8nqt1ciN@ z|HG_7Qy!eRW%urqeZw-NitZ)2p8?^*H%OO6P9m%EO#qv{)Qn5tRznx<6fju|alzd> zqNl@j=8p6r3x%+|I47E0weU2^76!59kp71Kk^POxGU-5A7rZ-Pc?YAPio1+(M>NJ0 zZ^?@AVmkn3f00K$oI%KrAUhv!XYFoL@0ptqD`IKSAx}?PSZPUxK}Q`fS3>+FV^(eG z%6zaKDplzGwECG+ts|1kOb)bmrU(sN2HOppxsho|PxQs2j zOWYr-YZVnyJ9gso*WX3I5jE1{j5^ET6%~FHdUL)Nd}#?~(RBNhDf7pt{briY3C+Cz zGxWnJd+ZdiH*)b>TBjSuf`!*zZAN1qXL6p} z6lJpYeB`06fGe|L0uo@wD@1etxcm@&8PB5@oOxOmGeus`1oRxH7J80>cThXBSpcnC z(@eqTcJJzh3uPbJ2EYV`SC#bmx~QB8Q+%mP7JxgQt$&YB5L1)WTd7-1p5$2Mk30Kz z`2OZXFr`z^|Be(8)7+FnS6sd=Ku#Cv32V< z>6m`30E)&r&O-8zaLC18ZkPgep?! zLIvnAoVsowg&2owZktsOr7CB{!G{Np>I2^(`Rt+<5$g2uPt+bmC6;zIapQVsN(C#=u3G_p`A8Pc+`YYfl{l`dKz}-W44Rs&*WWqv* zTmfhEm+Q|RA@1h?h1e@=B_$-<{|Yu#XbOWdm}L#}P`1Q6#`f3^QC#guoN3RB-&R(G zt<@7Q3ugJjAZL797FC)3L0ROx$2|i=!8FzrmyQKq!JXQ%igi zaC|^kl2Gacw%y30l-8P=4GVYyFAo%4P4T;f-2gVyuDY>`xc`Vw5}>YuW-S2{$Eg=( ztWV6SxK3lj#QzdxSR= zKdN6>m4po59+Cl?@x)dGo`M)*9zKokZiM9kzWt`Xw$0ZTo#jS7P!B+64=9#VsF4&a z-cz#$)idA#KLrpzuZ+zm$16gKI{nos#2fy26t2OL`LD8+KGBmsj0K%)HjY{uQU zVCt4X!xTHDaE1l#eD7;eJJtBhl85v|QiB{Ix1~ot&J&PNO7(|u>-?0QW*-pGvrP3BHMCz)@;pAItb) zIOvpEcvmD|N_UFUEC#fCtjrmtMBB8@mFtO$!Z#A&;}=ieyx}ZqdE(^0n$@*@dT?T* z0?D*MDMgVISt4G|S3LLHhf{8)M|%lMH;`&hLm@N^t?fOlNkD3yK2f8|x`yLE`}Q|b zohlVS0;8gu6;z6jTV?n%87gqDZGfR$0I-HVC>(TdV z{e@h);!6k##H;PghC-uQoPI0gTdqYA4usWYZynC&`VcOA&Z?W;wqH!Si~)i}qtft= z$RI~t9R{dJ;$5)@Snsuq{DS!hxlyyeSYYF1?MD@0It26G9VSEs{FrV$TuGjHR(y71 zFr|Udbup}O8X(>qSbe_wEW6}QQ0Shp>10v?P!BVh0fZ=|8mi;=_!Uc2FBOH-nT5J- z*yny>mORjI{q;aeVdMRw)H#*lTO#&O5Lxe_hN==`l*^CN{eF=Aqi#KPpZT2Xo7ZJx z;(aB6B-|9N|N_{V&85Uob&B~z&GgL7-~*b~V495l@# z?hILi$Fm#_|JP^L@X9sNfo+5x@#9~h_R>@}4)jr-z)a)u{msz_-3e(W#WKH+;Ed7+ z%EwbW(xry7umm!zvorKUGPS?e!}gW%bwd6KRz=8kiEqtot2AgD=#&CknN2NwDTJNL zdIJg$u4mxG0pUh`cYuRnIhz@_DK46BI0ZUb_QiXC2qpB3%N3-#C;zYERR?^~b<&l0 z2>*?=|I)#4A29in5sIbCoxK0${ho;PEiU^Bt`1f(e&-l1Vi1v7>3}{5+tLH5Vbm57 zD}Sv-Irf@rK&zg~pPq@K#K!*IXNN<BFIoac}Rcu4o7X9*<#E1@Cud1+gG=MCRabbcVOZxO- z#DQjd|GHYQ0W%eY2Pcp%r)ty5B@1Eh#nAlCPD)OxJ*of4XOp|t^7xv)C!JJ_87*0t zB_yHhi;tRT6v0FW@cCWtNG%@2sfJ&#Ud{BGv%J?T{N<~WR@jc#v8)Mh?%3lripVDL zea7>BRkrueSVWOBFd4e>sDj!l7|2z(Ao*Ezry*vJ_(pu( z2*+X>2Zx8xv_MY6dBoZ0QB2ujVIZLT8Xo|03GG)m9Y73=i*+enoZ}*f4~zvT^*$Wp zSK&)y$TB)prvM;%=)EeE7$maorcx8}f}H;Trw@yykNshP(vrAaVunktfoVagwhClN zwNXZ#ZGKkqY3W+-J@akgr9HFz=)*JQ1k^ov%f*b~#-K2aqE&6e#5OVbbcvx^jF~8F|dq&O`_g)G8v= z++Ew3?TD21I#qdvG<+`@K^()Ng#7tco^HyF?*sF)6H$u$PE@Taumj-z*drh{!z4`- z3`zwJ<)v8=i8~?WbAx@-K~CTanx1;mvLsLbSQ9Mv2ePa%QST>*(@z=@ot1fE>sws` zYlUS!;Var?&oF#(F4bZA#Qy%dSN@@kuM(70`G*{e2g{w!R2Q5FU1O`vJ`4WHzzf_1 zwsLzZyvbt{zU_|^qxq5T2rG0T6LvYL2hBVJL8ENiHQoOR8pThJqK^5uQQ`3GFs?cvR_mPoRrmIm0 z+HwoYdH93$MERVEEETc;H5(K$g9^6u;0n0DC;TJ8)c&sk)3UCb6tL+#y%*D0@rAi8 z!KqXi-_d`DCc?ienT`HYCH*~32G8}~q2rNA^P9=hMy=+vO=NGNzx!$*O9X|Qu#kvh zN9lh=|E${W4r^&t2ea=9+yAYIoULQ6_}(|86!|MC50(G!C-W$g`%4m&(>GD~H@NGEs^V=X+mix_8)1fuVDxf`IcG+(r5;tOwlPVQvByg-i+{F zB^-`?sWHP+ZKMZRnmP?>E)bpW_XPQZl$`(S%i44S_}yC;{56v&T$i_Ln-uL0I5q|7 zV=dD4gOEqf17>_Ts3y?Hjc>3Nu7jV-sOsll`XN-DB>+ESJfKXv>1GGgRf}5cAtl}R zn;QFD^LR_>3aqFic&t7wzI&X`U_6@ViD&QnyLUW0;1gC1xe!(mw>S!X<-r`3x+cS7 z{*902x$T#YqKjj~22nQb*(>&?JF)_wPXBBTy-!%b4rNnT_tUK`R)@+qX&KyZGR8<| z*?9I3mXGA7LrH*%!nfq#Ckmwf#W75~f?qQzwlmS@lpKsZyQ1Jq&2H`6kO{d@$Df@6 zbMQ_W>#hn|$?~RLj2^hlkvMJ-To~%r!unaF?ZPx|7*y~zl!mBt2`g>x-|4GV>+%kc zry_$`e<@1r+y7D9g)yN%%tKD2XF2M3x}>KfjW+PhAjM5#7|LKEhPKpvk@KcK_J?JU zNA0KX*GL|h*sez-Hr9RdGI^ajH4Eb-IlVw{qP0Y7@%`@^Va$cvafQ*fragEu%M8yG znL_|7;+E!cD$s^FyEg`h;518ncDJ2@|A}JVra8GI0_bay2t{2#H38AB@hgf~pMFL7 z*Q{E@83%?$P}8L+i>6~e!;jtFAjot&v9F>kv57h6D+ z8qLXUyFR-S24A>(U6HAdQAIeWBOefA|EpnfC$&_QEgTAPdAxiF$2s5|p-U1y&^7)) zshi$G_LWWRFaFq7>yM$W*%6N90k@zg2)|G6%7G4$_x>qGk&Xc7Ru%y42*d$Sf2CSA z)1JIQdr(`Q@=G{3=)e7d*)1pzNV(QX#5&a!yZj%8D;bh5DDF2MM3MXeg4YRru`=X8 zP>jwr8}Jo2)gw=qUc;4L1rWjh=IPFpEZIAh_z z8tIINAtpfZJIR0_@p~B@th_w10Ajd)55Z`<8{ThZ7qk;m2 zDqjMG{!K@|G-7e@cM9hftc$4UN09I)95;B<#80H@z+{U=WM%pgh#abw;QJVS#QKW`P?s$~Z> zG9SjX>IwbVV+(#64U0BGpKz9i*7(fN2Mb2O3dqG<{aYh5aOW)d7jZ7o#XQIG92oU9nI~(x)*1Mbl<;+%1=^v+TG9}V8D6KgPk2#iTW5dW zG{Cs7zMybop0~JnzZCom$4^o+`Ef8&x17d6(0VdLHrkFRc!yLu!!az3Kc&1lF%JBc zt{aiHgo*6TN>DA!WzM|^!)ob82_xoI%93poeh?Z2g{~X_D^io-u6vDbZ1eAc`e=lY zb2mwkgcgIq=#cAJ?FYA;X8t&o!W$EGe}y^A`kN2v3~w|%bw(@=10*q$bhmVZAOix> zm1>SW-aLCW<3lBzq;{H11N`1MSom~W&@Ovk+?3dTh_ZKjnyBAFwjaSzx+1e z2ZVZF4oUV@pExa^g#vDWT>yV~j=x(Rz*S+5yF#Z!q`2B9k*-DxjU~i+rM_GPL;zia zlZmdU^M<{kYo!ys{|#Nc5^x_pxSl+ySC`X}gUV*E`p+Z%d=60Z{)l4axViAwtH6VQ z~bqjM!Yl3f_zC!veoO9GzYhr(0FU9OH0pn-Ac(Cw~_e|2w~(!~&=TECGdz8*0ncFcPl0 zjHBE4=H&@eDf-FTbzI$!$2T*Oj-Xg8aUbn@ORRw*LTvMs@9lCnMSn!>K6Yb2M9Ch5qt2(8_r zt}RBL_Y{Mv&QT6X(-4SoWziHIVA&n8T--U`-D6dMzYAS#%FH9lT&X@3=xRW~(2R$p>ZWIa-ydxN)TT3A!T44Sa^j z@mMsgK627iW2M$nD~>k)VG{fqd6pE+g0iBN#s!)VPRc+-aH3CQi2 zqq#5Pa&%*0L+B81&i{H$n%~0Ada_M$AU{~8hzxOxs>RD2Yk_icoQ1wm?;)DtFQ(!C zrfYqcgC4|R%Zx(}j05@nBM(wzKdz6hDF&=x;eF~)DAu+Q=xlngZZL{0&IeML$Z>m! zvXhO(KUm^WgV!9=Ix3A&Lxhhl-_#xY&`SsoP05?wwwbu-JZY_|-={pEdl)a@P1oF9 z9M&wym^9vY@ny6AGswl)S6lqv<4AW^^w*WgbCvz-DIZe~2p0XNxL#_Z1QgeaXh3qk zFsOj<`Dyui-hl#BnP);sc|bshdU7*8Gf{6O#8jD%M5n=&Ew6@Nn^ChcS@okTJKR}A;y}5nRA|%( zVY{MmmXX-aICe8?*m0Qdj{{I<`Agn!F9o?Ox*R@j+h!W09ukl9)@?=w(y8zgmJwOSC} zbrTb|Bi1mX_`9}0)Y{d(jNJJTEsjjIm0a!m7f$ZQozKr6E*5xrJylz`JhbEGJlz51 zRe_{R0=F?}&G??%o|Pf+^pL{<66~vb#1_m}`Jv0z2JA!l&Sh zH5*vhJN9R7Ie3pyO3Z-5(R@AZOXd@@Va|pl>PG3anB5qM9CI! za!z2aOJIbKU|_QxcYP3H*f-b*a`(%w7u*ESd#uTk%fjX|ta&oWMY~BJ&pEame3~0Z zV67V3# z(Jj?I+*HCBXxwM&a}XeWejk=$DkZLw$0MCST(2bLg#IciO>D}kt1P6EvrZ>F{+m|} z9tj}_R<#CMdNCT z!xQ<&kdeNW{fb+=<7@%5w!aLQ=1<4Lqc@?L-ot~<@;*&Gf3@)NIBnTw)+9gHGd|+W zE-Pc?yg#VO?rb|Is|g}+7LA&oYNcyp*zqc!jxX?!(UTW(x%}p_@0fta>$AnU=Tg39 z;DgU`*o+m@7*TWST`+R}uBA#nZ?neYaKyrie}C$Cbx&z?PU!wz@sT^_b!zc67hj_! z-faWC@iKiY1d&gY*|Kt@h{CZd1J`2KR;aoKz6|eIy?iOgu1#YfW5t@jlUvHKSoD_S z{+!X-1uQo13mZ@qVaCSUqV9M#l1=slSNL%%4iCz|5`Ur)#&4^WgWV-8^V;@`9fFl7 zg}$LZa~D;|$wiznW@qbwX;ztO6rikb++O~y7vjJuxhZ`wlxwH1pH#Ee?~w8M$^*I5EGQK-70L9?IdWO=94HPm=7Y`SHrxA0-H(r8%(bj}1O^!407 z9UaC`CPgRYhBpicd4$VSlivS|Lj2S-bJEQyP|-NHk(89}f__q9qE9Jo$gTO_p+%!b z$hEgLW)tSRj%m1{&FxI0VcZ&AYr=f4F)ioEPmK+0<`T|5SdTP;sZ|c15r-tO9mEZb zhv($y1moYQjiMU;1S&a0of6WjX8zl?IjZ;(eWQ_!_B8td4 zNGmEDdywFX&>WY4QPS@`+8D<%P07#rXtuCO?&2)bmwd>9v|D@IpO@6~!Mgvag|d6( zYnyT+i;5OxHTn@HXE?hq=YU3V)Xf66}Vt%9JZ~`=%DD`*Q#r zCPXX>?MGhM-N`KF*M{_ZVd`j>q)4kO)#kmDp{M2v=Q-V75|v^VhCW%N{6aMu57DEk z*XIr`8>%(a*Xm(JWlCuFXxHIT31Lb zpH34Jk=q@U>dZ1wH|+AzEZ9kmWM}5e=%WqmIR!)6j_IVk;Xd*a-$M;Cmn_O{C1EBu z&TegGmw%>FPt|cAI}lAoL9BbN?`uHwM!doJcOCfqdxE<196@rGPiApf1C`uUxYcEq zQrQofFkZ0R=tJAT*iZa$GS*iN$*V>5#kuN!DB7D($MPm9K5sd;C@NIpEFb5oDy^$y z=LiEAMFVS}tgHSkE#>w5^TVj*T(Vuc-&Q|Ml@t|KHeVN_ZqO3SbvK`ldmoy@sg$^H zp<~3n3l=I?I9X2o9&_Tb{_J+7ScujvL3S%tHct6aP~!zGYKz9pbapF`O|IotSjRHW zr-!k&H#^LgW$qyZYdT%D_7{`i^GxWhLNF6zJL&}z^ai>I{fG2tky1YVY*;Y^*Wx2- zfF#8vXq*TQe|C5tIL^P|yPuD=n1=IpZ0XNPc9F7usGx2Z9*FTDase1F)ETdHV2+Y(aM!=VupJ^N(+1!e?1lge6!AK7r~?j5#4ZJ<{`#h7|5M3&&PQtai@2F z5tUZcO5WtkN?U+m6WbqwBUG9lNdpjM|NK33Zd~wKIpbqY-x96w(YC+ozgRu98l}m* zi@({zrxN_;ZZas-uy!#zf%g?5@SIa}v0FjJJdW&_aMn7}j_xKG+>M5Fvy@pPGuS3x zLbqwPQI|Q~bH?V7WX4JH*?|~yPke(+sq=9Jjb62ZAaR-V)hJ%CdFv8}P||d7+n5+9 z#i>c7?w2}kxyB)9Ra0|eC!3D=G6_0^BLnmIx=xcFm9a{*`Dcj(P25wxNZtXuw&4so z*M9Z5$Ma%NC}u4=bm`54k8Y6ZiTLU$+(Y* z;qzzMpDI4&?ZMM1-xTUiS6_UTAr!JqfL*#HgaVzJoQs{g_l4+vbtw`+Q=D_te$JsltC zd8ax)Eki1aeG0m_=z_y4zuKo#EB|a=HZ`Simh>}7&Jfb(l0Asl|1zz-qk$sIZPG{${73}p4ZdZkTzqc8I-a96l7M(sY`g+ ztu&$^gSS={u!XkyOD5omdzo5|G{>+DPWwxyTyU-XH{ISV?>8ZOR5_}W6u$z_Kd$*E zxa}6drRfM#leTRR3&i-^K zaw|l}PQSRTt_-80#0a<8sUs+oC1#yIV^d$YuD>sE`+L}PZZ%EHlwm6=m(TQo1r3k) zhm3{eFHjBV7G&3Uy~pp!x$dYYa~B#9Rcq9VTuK|EZdJ>ZCD0~?C33}k6qfp+wnZ3;% zn2>>++oD*PuAyOo`)c#A)_MfUJ{&x6Rwx!bWlUZExW$zmM(IsC!mgwdJl+(M23to5iO0bJwe zvc#jP@eFCsG{*h-+Feqd>-_0x`O!kIS?vi6A!}Z-!a+e!PJm5kJ)(-Y2GcQB(Tyb@JIzK1s<$$Iv5>3VoGVATaN#0X+gd)^5`FeQGE$V4+nI0H`Rf7^O{I4k?&g%Er!gS@r_@mh4h27LL zl!e{L&b>3^!aOcQ1(Wl*`%S{Ml9{cTmM;jlP?l0DfFvO66qvb0zAz^8tT=Ioc zcVD=Qkc`Z9hCMAFAX|n*J-id9zNACjrwyX*9YEu@pt}_L?lgTK(}<>DUEgM13S7?>w7G~)?lz{C?!u4=p4kMVl}y^R2g_J${YQL^#ecG3pI>62YE zljJb`Nc|UcW54_fGYKTZ0I_rVMbL?YxxEG+;Q_xjzTYHqIqXaqsoGxdO?`f=0e6A4 z##8RR?0w}bDWOjp5x0?e2**B=wME@_X;PP^CSW~SP-GVClK)Y5_pNwk{Z_(f!{A*} zG4{*-5gd{IMpL7}ugW<|{Ou+iRpS7V2mXx~fM8|r;it@G9+#LwYZZAo_l4eh&93KQ6l~M(GS;^Ox}w1pM~7uvA!Z zMR@VJv4|pj&`}o)2K}tLb#`-q(K*Y}&iOa5>@y6Nz`Gp<91$lkNto~NRC0&InT0^_ z2Hai1Bc#)e{w;69(0H2%iV#44!)+zaUnJ~)<{=Z&}mIFg%@Zm%V2Sa z0hS)TW%n=sVZ4HP`!lts^bwiuiQjvb!b-%F(^<9`c4D0avj<{Cc)|P1@W&pY>KPhLXTmle?2K>lD4Ra+9l|n{2j{G6w2700&(U7tvU)Kdry;n}Hix2LD zC1ojCTN)BC+~YVNp7KO_ocnwuUN5$JA=kM*1pzwR15NwQPZE!Qt~F<{eV^Bo>dp(K zIjsdUi%<`F*VM;Hrs*c4Bt0Z^fMs&?v19z3H)c29Mx8&VC(kR54M;Gs)cF7ibl~y{ znbB)rM39QS4RrA3%y|ufjC^DB-y)xH5Y089fcN>BQbrBlOr*O4kfDOx!%6T!=LBu9 zPgg_oNMOPhgxw{+BZfP(zlaFvTb-5vSx$l=y}1%LOj zMZa6YS~g(oa`<}jX+v=O5Hb2aG!ZkROA;A?{jNN4%8o&&w!?)2T65+hbpYl7%oY!r zwZGNOznrz_6M!0c1{Y1}ca}dr&*YtRDNjTqa61E<3@mv8GE#t7NZ8eE7<733MC8UY}qL_ zOoMALn!Z@R+HrDaN%F^+cOG4Snb^)-3q}~$+?c<+Yo_;oce>9jr-|Ovj{!dYa{lvq zVtRRFH?Mq}iHVW%Z?!dr)hiQWJ{RQsQMA%LxfUOk?)AlIce&t8ORxdM|d1lBdJqH8pF__u2q! z-Nm23arS=Sw*EaeYM;Z&zOsmVxkWw$vm5{9)!WYFg*w3+^TqT6#S-B+r(aVYP>v&} z?lCLL-K?2R+Br-|>f`BH1$oPj{eFhY#8b(MS=D{-BI}_L8UEshx!<9iL!qv*@>?K8 zfy#(;bH@QAfBk#J>?-@x>1;2z@)A&jcNxcBx!b}z*`uK-{QLXsQ$`D)%ZtT&F@uBT zOB|f-s2pIS3|79LDK~_xkWS+lNZ16Of9f&lLQBsFt#G)kHw5E~}t@%PQauLWdDUloHp zlDaqtZp$`cL$(Vlsiah!sF%eX6!B%x=9Dn|kS^FzD_b+?JUJat#BjcY5 zlFB;VUwreXQ8Kf9nKpCCSUyj4eLAoEW#9z5dv-)XS3U6x1_?iaX6;ihW!lm|7u%Q$ zLotkr%Go#U$#Ae{+7Yfx6vC&3QK%cdwQEYCF=UUAwGhf$^r7KL*vLdJsZbQuuYRsI z%~{UmTR2)B!N8f+ry{A8EMKb4Y-^^E!y>S!5xo5wMadp$=f|!+fn!Ya3m9j`$naNs z+nwzJj<@EE1sI~0Qb{D2RWtNsuJ0selPtc14)r4u7_uwES~V7G%8>ruQn0G$8~lNBBAs53LcU!SPW~9fnCl^x!W7q@Eg&h$k@*s+5<}7 zH?J%O-Gs=t4NZm4sO8Yo3X5?+XQ3k+$Q{1_nwo$@Y?oo-vt`(hHXdoQlt?wbYwB|! zpU{Urau1u7l1Ek2q(+jr)m?~213D@&M9_12UW5B+U|^uKtSpWD6e#Usvw6^dBu_Ct z>}vRF;d=j$fcFl;tWa~kTwOSD{cQ+l(dVC;oo!fohCMB!IMIC}*m<#r^`=gPHQ{Ls z3rw_;J^PEHtxr*8+vw+Lp`T-1qcQ0UdvW|whdA+j-DO6`ec#G2pb(3fmx{4suE^Js zX~)bVBp7wb^u5M-Q{vIp#FQpszePXlduuzfPPc6IUZ@3hs5|g~KJ2$k?@WcckAWYF z!rW(G9|U+lHi}XuFL|~3%hy+Yc5Q&eu~Hv>>&IMJb9m#N*YhRlh9FHDjW@krT<*Ye zy8xWD;=TPsQ(Xl?+aq+qb;u?i=VuAGFy5fBwjF(7l<0lZx**x^IZIO!)Lw_3_RQ1V22Vh}*K|mWP8{ zp7@(poxXn~I~`uQouVM%AYmE~uqQgD+chwW-R;Y1$(bnB{`S|_A*`L+r>=O}(HCd#iVy;a-K-T8vZ)Jn73|MOH9LB5VFvb&u;lwnX?O|W6 z<6z8tS^cakn;+Vs&S8=X!{BaXX|rZeXGlyL z;%tdxrR{6YAUC3LlLpou7hs@!d42(lZ@KI`mY4fZ-ptNu89pL`OY|WIr|W}Wb?mH0 zW{+ekfk$%khg1B;XZ`=z-gibd@vi%#sDP-52uMeYbdcUbK&2N6NE1+y-jv=u(gdUv zs-gGZTL39iLX|E-LI)v2=n%LQ`0su8Id|`U&pP+pT{mBn1av-|e9<#%q7V^-|jdMOGd;TU**B1EP<-aCDu{3Nx`C(NW| z^4KFkk(q)IdRH+PE*RLyBaZ$~p+paT`6G`8XEh>!16F)(pKftdi}bV(zLYGdWIv?; za-Sx5UL?M9P)NFUVVvA!Vzoa%vGOrI?(&${W7;0zlFpmaj?09&=s!7Dd2gOOp|+@I zca~vJUm0^#*OomN<$Q5aeS0Q)M=YL{{ie2I4y&g5xw-?({y3}2C(x6_uYY!B`{N9k zoOC(WdKR{cmu^_ZnMeEJ9CMJ@ywlxE_80W`^kcSD@GlrCU@@cQ)u7s9I9V1gONM5> zP#|ThO7Gx}N#PX;jNKW%0fn*7&$J032xq260;;xO?mfj0_0)YUHKN(qp5 zfiPp|i#UqS+#iE#lY=(OHoa_O>cVQC$Ihv+_nF^zSqSl@MWqAlj^G( zrP>!NeLTXWk_$k&XM<%V79{3|9tjR50lW(ftC8UUgzd8dY_B{Ow520B#%MPc`1iio zY48tykNtK({u{mg5d}u&JW6z_w3B0o5$w-hq^tG&bauN+lVfiP<<^Pa-TjKm_-FwL zLT)B7y_$WDtjWylW%uz?fgBNs@dUbtT~}K3r&`=22&aK(k7-5qv*k0PetVn@liIUx zpfC@P)sOj}W@v*mr@3QsfUR$<#nk1@TGAbdgWozL?tA8Zgnv_{L-MMByQ>G?)(l>) zPtj3q6E2rCAk$)^i|7*53?tQUj2N~yj^0(#9xSd_7%iw?j5etlRJUViF_>X33HxP5 z7{YD|dZD0r6uwu~A^7{q9=a3qRilEbxp_KanaeKp&|=<4F`po+Ao;Q2fNUvwp#3@* zMwEPY2+MtK$l;J~|3oP?Saxjt_VgzGygs0>7vw%A89LUm!W|uz2JeC%kTYziWgfqQ zRW&nL)1-vykVdz*K`UlIHks@St!j7l%Tr`L8_7hSen8`GUwAJ0VM+ll-JiA|T9s35 zoO{nncIcAh)R44rij>12?-$P}FrNo|7cXLMC=mOylE`0{{whj($4N&qZV6&IYdNe!>Y_M^H?E0S7bhJINi5` z5x-wIJBsU%n8Sl{TQH(4gEl$##Cj3m{rCRpjSB&X$J;5GbFVGn`u}}bu$Ds*ryi1p9(kr-c_aX5TPZ~BZycrb>jo=sl2!%sdiFr zXNW^d2hX^+uhw!*ppGf8b?#k7Mm7z(=5yl1zCe*_F!UMe%9t{;&NB~uAAM`Y)>_fN zCm^7+Iwi$_mYvs)RhihSMw3ZzVjUifxC|dbgYovt2Vus_oZI2g7x_wGi^K3bZe=NkE3+nvgQ+kQRZbOon|hr ztWSBYjCw@fT>?(Eq#H(?>1dBF8)oc-o+a>qW1?rV7!uGmd9~qMQep;C6pA64bqAjX z)uTK!+$8P8UZ<)hJXh!%ZQ?%LxRI~4T#eS3ua6L`te7q{tZT0()3c1vO=}LbaG|D| zF$L3CY4pPcp+pinGwv6c&9XN3MvA(ZDA)N3&av$>VN7(VsKcsOmg7?3cOm*2ug<3I zj1v7^ri}A+l?=3RKhWm<_V=B5iK8Hp$0xmdjP8r4WhoC}v&a@z$@5q3OTb>)BSJh2 zxCG$+q+Uzkqva6#kii1~uBPn5Fqd=(__D9~%_|VsoE`o4)j=1GU@ctLr+a;9 z9aUpEyejA;pHUL3pF3-%wRXTnQ)z3L&&Pd~WPyuW5tch~XB#$Fn}FXVz*NSXdr8>= zoRe?=CroqP;Km6g&mc>t$DYsew`Q%@+Mk`oX#*pVXlluJ=QB5VM5lw}MGF7e?aLMK z@wnbrzT;fn^51FhO@|E&I-5@Cm%n@q#Z+wPAJ{ZkwlSRyFF$(V!~Sb@=mV*5SHb`n zfS1}M-F|%wb4kCKGtcpt_50xAWyfl3y^hh{txpH9#HYZ?_ZId%irbq!%q;L6DH_b`pJiYw4zS&8yK0Cz`EMXDWsq=eRz)_;*ULUZ z;YKBizXGtJ@D*Zo4OwBN2setZ6~vcOwC-kIwSh*DngVtGd0vGaAIIGUPBre9Dc#93 z_77lxaS6=wFWEiD6CkWq$OpJ%1kA&-^5ccoAkHg@k%C7ZsEdz-ll1#IG7gfOwX#{H zks}r%svxZMwZJpzwWXLo^f@YCOqn>DgSb$+>Y~#e%sNU7K!9CllPytGbf14hL3uZ( z?_mx1U{H;1ja_2xa4%}`KRarfZbX|0u9c|j{1bsErA{P>elc-bB3St&C=cehSod!O z0A#r2U`rimqJFn`!k}64xVz49bRlbKxch{kbMtyHC@zua~1Uhws8p)452lxOD3V5~L#)v#`Q=Z)c&Q4$3 zfJaA3znwiU|1}J4!-fVocx>H7H?3WWIC(Q!>BjiUs*b9iWcC50xCPv09@ta?V9oFI zy1A~She2f{5MyC-kptFQHpio*erv9Z7P+X5x1#4_;vW&hjTf+F3yfd^Onox3peMIP z1-zHvCK9-He3p;joQp-^T>?xjFKnQuOmP!5pWLB`3(Bk=GA73frZy(zsLu_Ag`u8| zTZd|pPNZlOg~}T|xLn*6CvXU*0Hqnp`(@*CXA@_vCle1J$SVKi57Uq^qL;q1{;D@# zVgRsr0)AX^BD1JM^>;4?XvECZ66yBKX=_aZj01oso0DZ@@oZY=4xk$@Le;+xL!2dn z1P5fV=|$z!7sq{K`eDmKL&G2XlqO#1$B;c?>Zby|>r}d2gl{Q^=Kyf-vG?jA6%dCa z(Qk3*j|tJb-V)#%RSd7AUEl}u5d#7;Z#%2DKXoyfs}n1DxSZQL&R6{75 z@a`Q6=}j7F?=fw%V1=csN8&q(q+l#}`XQl+Bq(QHUEl4rsDXR){bd)$>cqI4fHX~g zxV&sKGc~1_egs@OoFaVA90ABQ|FmE<5I)_1pq$7N)eKYbb*D5*JoH6`H=`!jeBc za>}x>Ot-HQpgxTTRU38KKL~vYC{IrW(g`aDnXWJI)sMgKupwd5|G|xd)nCd>Soc3+ zfWRD)Ph0qZ)tJlviN=iO+tPM&(g+Ug86LimUMhLevV)#f4qe$ggy+#*YA{>QT3{Stv3Hf$o~@k(~soJKV1AjS#6Yr?39T6 z)eCG*Ur3*X&Q3rmye`ktJtoX#us!{LNG7*`AEBQp-%3Q5T)_WB$ddPY7k~g{{sRF3 z%HU*~VIG@S>F`P}?)C@sb|m4JHzF-BE1iM?9~4(MFviG?!975r?Gi)%YlBKUO<~&9 z6}A+^Vyid!Lm`fTSx1y47tXHA@T6cmUf*Z@;nk7J|I2);{+H&HqP^**7o=;U%Y z(6atxO`vm*|IaMWKgdPFqx}ji$nA;d0D?C4zU%0fB6(Buo6INE6{XqekA0x{*Etqm z@p;Mpa-S0lD%Ho9!DJ$KDp(pvk?B|6i4YSx0ql&BA=4_yKfk0H5q3Z8->uyEr=Yr)wA(eI-dn0*W@pE$$i30 zQRH8EOnDxcsSzU!_2A~DVR9;g*zAs7x}0zp7X!1QGhA5VDo9|KL4%&tZ~)|{k*KV8 z@9|Y9XJWX~^*c|1^{sQmd)mEYWTG?JJj-)4Yw*=T5vC9n&q|4s^OK9S4X ze99Mkm1%1=6|FPplT{(-X64o&lwB}lL)(q%QNxCq=_<5UW(ZZ$Dt!ZiDHHx&81|p1 zpFwwuss@iDNv?!6N4ySF%$nXBUi>@lDt!qk%FMF(?UXIkgqCzEN>@liD7 zG@Z_ouQRB!LuzMlGshQ5cRfr5-_z@GJtMs=9p!eIi3S)nU&Q`}LBlt}QfYEkI~bl@ zJ9ox~o2LUg$=xe8${nZONK_Lj6L=K`fJt4gzlML6`L?z_aI;82Dixn>Fx*RK`ZCB&svvf`0?|o;aQxZL-GQ%$Zu2DgGE|d z^VeN1DJIz~EL!+(#BJ>^7@xb&)`$v7s%d1${YcS<@QDHXI)LN3A6P5wcai#hCEA_q zqi3KGby@j~#nk`LSxhvB#bnkda-DpSrjPDyl1>BN40n;&O;#6XSIH&ll8!18x)m5F` z?SrBwc*Md?4eiKV7O|~auuoG@M%rY=7SjvIe^uT}v>3BVGjT1Udbfc|S9ll>vrY8> zA81h|j=_y)>#{+C+0VHSF6|`hxtj!3)R}eX>rHz&l1HNMB#AVSJd@zwtEy`~7e_Sq zX-Ez5OGzWm4~Imbo-TNdK2Z|KdS-{1v)jAg(x@7{?+?sPz)YV`x+lI*P9>6%1u-tG zY>^I*f({%!m<``M!mC{z8UvnDl65*?41SH}isGEJE+@e;n&ve-qQ?Q zP5jMaFN%G4{Do;CNuvQS&H@8)9@VAoS#V^) z#;CBw2eCso+H&u20tN3fXAW2y8Cwch=t<%cArdpq8%jUFu#SGIza!3*p113tlZ%lS zZo>>M!*)(A<9WWZ#2RlfCYP?T7^XP~weEp*3f4crvw$cae{?G<{sIB(I^3yJ;RXcR z8hx1z0D?XJca^oMP^x@5T@B%tVBI3dqnAY{>zRk~+!Ig<< zgGtCwH<662+~Gv;KK%E`OBRq+CM_uTaNc)frW8|wR1p^|w_2C9t!j({FwFKB01KIK za0s@YYkZ+qW)Q)E7?)}Ya77lw!GPPbyU2mikIe>IESdnqMC6M6<_C_6;2xD%GsKJh zx&_(maYgef{u08u51UCYMpbi_N_l+%f4jB+*4MfbriFH9LK+3=sU{CPcnULv)~GPV z_s0RkN%Zf9J2Ai>LkhQ|hZCK%Kk=F>gu88hFsm4}_huKCUOWcu0iMI#J12|@r|Q9Z zdYwKo-S%XKg)iZM$RN^PaYWdX7H%8Y)@ZEFnv<*Xn~mmRyMe#&VPahfL<=460qH-2 zzZnlESu4Hr*)b8DzmYVTGS*z7PW5Wztzg0jpJ+3IZ0$kyskV~nw94ionFg-Hu0_0T2bB5i+OBTYb?9? zW?pKvS2XWktTm3`Hccj?hqkB~B>(2SE9Os!sG4S{5_44xJpvwwoFshBaktsQ8+{TEe9=Uh9{q%GoCqIR*UfdgZ=7N;9xK5EmTkSLr%rtzv{z~ztSto~C zTUV;!?K4xVa>*~oekbGQD7bfLKV!NJArcWv8r2+f;(WFbr2=tT+JGDmq+=I|`12)6eb zKh6s-X}vM$Y@#5k^HOp@R~if^=h%#Vv<_V6JJ)(`O@9JvL-l)GD`w3_1?d)hFBv)kS-)#!qx_UaiMl%l>Buw@eaMUd*il)^{b z4X?~*BG$%Gcl27i^8sF^2jRZN<;XJBB zI^ApT8!H9mIdT!t5co-!Bt-J4eSYQks6Ro6XXW`|*Wp^m*%~yf3Cd0F?LwTA7CzPn zAL0|B@El%gCX3P~xwzOHQ$7Cb4duG$3gk^Iz4|XmT*nf;hLPvn$ii6X8tBf%W-knS z`1&^W5e}`T$8ly9rSJp!X0{)n7-@ho1xD+C$pDa}=`R%bkwB_TtGXy+%o-9SL{T(T z%8_au!IF5Oo-MH-NH~L|{gsI7m&VY2M=E~9C-ns2vS!qos@O+M1@JYe)h7tCemf<+o2*|6Vabd(ydjs2`&|c3~7h|@DJ9YEpK;9R~-{vIA%>cSbM^ozyRe-S`ZYrL0h*8CwuJ%=F zuzwbD!_Lp}=b3No(VkiAd8&lrX;9<4{eO(Y)l?|_C5ryW8+fHr>lrHUwHV<~GMwsi z9ZLhB#@BYwUT2giG(LfUQx5c22%4QKr1{RFsdtN}hd_%)TbU@+Hpz-P?rR z-GzddOK}EmxI%_hzFdEFr#4a9Ygcw`@1VHO!q^tQ()w+GAf@>v?n2!9G>FV?v*mGd zNa8pMT7I$sS*}%NVjOPvXnKwiH=RH!QGTRUsu)q z*;r`P({=$uKP1=ZPoxuzrE|@ix9UlWnUIZ_)5dSp~Oqk+WjUE)o73 zy|H}vkDQ~|s$N4wZSG7VKXQBHw0sL6*RN{jBQEbb&N_|ny&Gq4Ze}%SHOY6+*7H;g zhee#ofALM>r!3c2Kwl4%AZzpMr0$$yU&fkWeW7yI-W14Hg-?gckszCtNL`uGdeD8n zK1EKaC5xwYl{Z(DSaGyRR`j@yW*H$fAwoXpe`sm295Y;y-pZ2b_0P$IZAJ#cf8-+d zP>(2+`-!rFXRveq5-csBAUk$KfY0w{f(<2=QHD5Etpd}|(`V<@&Go4IP+q9c|?AiNUf#~nwOQGHGB?SH#*acY&ZO*&_<2et|8q+W?pRmI8H0JkiSJOE-$kl z&Psqa6*g^uef?njyr^tKGY=u|vj&l3{B?0o;FF&~pNW3#Mt>1go9a>RUnUAsee zE#+5oK0XFjh+ASS*N~r9$pgMWU%YR_e0r-+2^N97pMXSFTT2-qE@mV)S#Uw58nzN z3YOg=VGkXMf3qlDD{S+#(ZklsmLuWIA@Awzyc zDU%*hgFDPz@1^{_U(|fsZ0LH3XyOwURYW$U1?HeGszKv-D8G=t=&dzN#%~1iPjjRa z-qP`*g@)I_&mc<6I_32%aa|RrlJ4&kgiRg~Z1-4s?*|k+iO)Xr2|2DozMmcOQPkr; zH=l%q^ESHpfe${OW3GwDi@)ufZPHHW@<3%JC{eF6&X@%V&iFi6h`9?p`=y}j(IZMi zUZdPATkbk(5<~E^(*p>pzbGvdcfPBe{YuL->ho$r^V@>;6IRUvX;fk|Yh$Z!&cKJh zr6eHqUF6oMm8W09f!26!DPpXx%M9{<17~IXu4kBHoa7XCZHn_f3fFk{S-)RkBIJBq z=R?0#9B<)NdYQ$&T$Zga#|CjNFA=Jwa|WkVL6co+Ch&xpTtl3|TH7^?;?3_GbpxbT z<~UGiQDfzbQQeiKc`-XM)TUk6Fz7^F%<#GFZ-Lt5U!X3#RBw_%Lo}_!#ewd`B#%|A z;i-yg-D*^cDeTY+X=Xcne{1XbjBu{_z#A=@-_Xy^^sz8i@`osJ*M1(bsl#mjMC4aD zZ^uF;uOUG`$6%7l**#mZNsAKF{nxS`;0n|+rz0#3BX7CZ-5*}{C#(jVkD=ECyF6|*5dZ<&mzx&-f!jy6+jXYP$DW0;y z0LWxn2vazAxu#*_#W1Z}1**QZJe08IZLjsb=4T12=_Gw__WPn(Uj7bPAMeH7hHEd= z7T(~ugDOxqqD&|RDIEF*U=C?U@yT!{#Mc9|+!l9@)Z~d=lDirA@@>4h)27hE6RECPN;E23wfsySL=7zk ziy9F|uux9KLEXOH%P&9hAh8j{X?YU0wHD}8`vE;OiinFZDHpn{>jbJgilsU;MSI0K ztv~{S?FnKcpMIh(Ft2(|Y@P0-Z z=atmGOqcDS5a2ExBjZI{^r5cfJ~)F6dLdX?*m3gDr8IVIxr#Vyhzpl`^g5fK$mflA z_X8dfB`kJgLARJ7DlM~`t=p>Rkn+beO)PnD;# zvK_e1YEiD*@B&|K?1S^z9P0@pXZi)<=@<{hwP*Md$PT^9XqzevylL5bH@McHTB~sD zo;}dJrDs-&_?1I3)o!%$MAtrMvMq`?5-AqWYWK(T@Tw|_A$Q-W!eFO>G%my1{BowQ z<{FJv!MDXbh^|m&pjzr8$E^-_z53qkq|QJa*cHzu0%6K-D3sK` zy5QtBmVAxw8OpjPG)#(odIGOSwTc5$+`v`kG3jM5o>i2JPHZ9oZKaxsPW*1NXbJZ; ztejY(t>g{C@oswI89>nO9!#<`l^smMY z-gg%#C~j7dV9@&FyCF|XRvwh6ZE>Gj70=msuatZm>z$AGhu0#{SJ>heuxk#Vp6VP|H$8144a)XR)kG1{NGRE%M?5fUQQ6!G z!JUmBx$`X4g>Nf*Met4L>e|6B#ABi#6w5jIre=QemeFoUp2s1w0Nbno>qGTl>z$c8 z`bb$lt2#SUygXxhSKXiseCGxgK6qCn@75=Sz1Eg#RmCWhlI2FGCP^@Ieg2MiB*VF! zSC2IVvN~GhTm&}%3a44oa>b;tx~^$Q;Dd$ew}AO1B|Uz&w*%XB9i08`X5up=m7jfY zrJYm;n~&Sf4iwUOZ~0p~8|c{GjZY+iub4Dx9sbJqc)xdGS10#frvV=QfhBLd*pw9_v>3zuH$1poj5 literal 0 HcmV?d00001 diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index 8def5b6bb7..fadfcdb39f 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -138,6 +138,10 @@ If you cannot use Group Policy preferences to manage the per-user services, you > [!CAUTION] > We recommend that you do not directly edit the registry unless there is no other alternative. Modifications to the registry are not validated by the Registry Editor or by the Windows operating system before they are applied. As a result, incorrect values can be stored, and this can result in unrecoverable errors in the system. When possible, instead of editing the registry directly, use Group Policy or other Windows tools such as the Microsoft Management Console (MMC) to accomplish tasks. If you must edit the registry, use extreme caution. +Beginning with Windows 10, version 1709 and Windows Server, version 1709, you can prevent the per-user service from being created by setting **UserServiceFlags** to 0 under the same service configuration in the registry: + +![Create per-user services in disabled state](media/user-service-flag.png) + ### Manage template services by modifying the Windows image If you're using custom images to deploy Windows, you can modify the Startup Type for the template services as part of the normal imaging process. From 58fbef0bb476b06ad0257ba8090b15f0e0440fb9 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 13 Sep 2017 10:09:20 -0700 Subject: [PATCH 095/146] feature availability --- ...d-file-alerts-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md index d72c4014ff..89beeaac45 100644 --- a/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/respond-file-alerts-windows-defender-advanced-threat-protection.md @@ -97,7 +97,7 @@ You can prevent further propagation of an attack in your organization by banning >[!NOTE] >This feature is only available if your organization uses Windows Defender Antivirus and Cloud–based protection is enabled. For more information, see [Manage cloud–based protection](../windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md).

    -This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. The action takes effect on machines with Windows 10, version 1703 or later. +This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. This response action is available for machines on Windows 10, version 1703 or later. >[!IMPORTANT] > The PE file needs to be in the machine timeline for you to be able to take this action. From 0b077f268381dfaa5b3977397a46b7e9b0d5e59d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 13 Sep 2017 10:10:59 -0700 Subject: [PATCH 096/146] copyedits --- .../per-user-services-in-windows.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index a31b464390..f784c78af2 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -7,7 +7,7 @@ ms.sitesec: library ms.pagetype: mobile ms.author: elizapo author: lizap -ms.date: 08/14/2017 +ms.date: 09/13/2017 --- # Per-user services in Windows 10 and Windows Server @@ -19,17 +19,17 @@ Per-user services are services that are created when a user signs into Windows o > [!NOTE] > Per-user services are only in available in Windows Server if you have installed the Desktop Experience. If you are running a Server Core or Nano Server installation, you won't see these services. -You can't prevent per-user services from being created, but you can configure the template service to create them in a stopped and disabled state. You do this by setting the template service's **Startup Type** to **Disabled**. +You can configure the template service to create per-user services in a stopped and disabled state by setting the template service's **Startup Type** to **Disabled**. > [!IMPORTANT] -> If you change the template service's Startup Type, make sure you carefully test that change prior to rolling it out in your production environment. +> Carefully test any changes to the template service's Startup Type before deploying in production. Use the following information to understand per-user services, change the template service Startup Type, and manage per-user services through Group Policy and security templates. For more information about disabling system services for Windows Server, see [Guidance on disabling system services on Windows Server with Desktop Experience](https://docs.microsoft.com/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server). ## Per-user services -Windows 10 and Windows Server 2016 (with the Desktop Experience) have the following per-user services. The template services are located in the registry at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services. +Windows 10 and Windows Server (with the Desktop Experience) have the following per-user services. The template services are located in the registry at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services. Before you disable any of these services, review the **Description** column in this table to understand the implications, including dependent apps that will no longer work correctly. From 41291a3454d1fd8deded6406eeb4b5183707597d Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 13 Sep 2017 11:44:10 -0700 Subject: [PATCH 097/146] minor update --- .../preview-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md index e9237f713e..592ff41e1c 100644 --- a/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md @@ -25,7 +25,7 @@ ms.date: 09/05/2017 [!include[Prerelease information](prerelease.md)] -The Windows Defender ATP service is constantly being updated to include new feature enhancements and capabilities. +The Windows Defender Advanced Threat Protection service is constantly being updated to include new feature enhancements and capabilities. Learn about new features in the Windows Defender ATP preview release and be among the first to try upcoming features by turning on the preview experience. From 0ba1dab8ffde7081ca4a50a0e81e58c961e095e4 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 13 Sep 2017 12:56:00 -0700 Subject: [PATCH 098/146] update product name --- .../preview-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md index 592ff41e1c..e9237f713e 100644 --- a/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/preview-windows-defender-advanced-threat-protection.md @@ -25,7 +25,7 @@ ms.date: 09/05/2017 [!include[Prerelease information](prerelease.md)] -The Windows Defender Advanced Threat Protection service is constantly being updated to include new feature enhancements and capabilities. +The Windows Defender ATP service is constantly being updated to include new feature enhancements and capabilities. Learn about new features in the Windows Defender ATP preview release and be among the first to try upcoming features by turning on the preview experience. From 8167b35df64d0d708007cd2c84d652811a2a0295 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 13 Sep 2017 20:13:09 +0000 Subject: [PATCH 099/146] Merged PR 3176: Authentication/AllowAadPasswordReset in Policy CSP --- ...ew-in-windows-mdm-enrollment-management.md | 2 + .../policy-configuration-service-provider.md | 3 ++ .../mdm/policy-csp-authentication.md | 42 ++++++++++++++++--- 3 files changed, 42 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index c3759e1aab..4542abf9dd 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -992,6 +992,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s [Policy CSP](policy-configuration-service-provider.md)

    Added the following new policies for Windows 10, version 1709:

      +
    • Authentication/AllowAadPasswordReset
    • Browser/LockdownFavorites
    • Browser/ProvisionFavorites
    • CredentialProviders/DisableAutomaticReDeploymentCredentials
      • @@ -1355,6 +1356,7 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware [Policy CSP](policy-configuration-service-provider.md)

      Added the following new policies for Windows 10, version 1709:

        +
      • Authentication/AllowAadPasswordReset
      • Search/AllowCloudSearch
      • System/LimitEnhancedDiagnosticDataWindowsAnalytics
      diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index c6e4757c28..eaafad9a16 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -307,6 +307,9 @@ The following diagram shows the Policy configuration service provider in tree fo ### Authentication policies
      +
      + Authentication/AllowAadPasswordReset +
      Authentication/AllowEAPCertSSO
      diff --git a/windows/client-management/mdm/policy-csp-authentication.md b/windows/client-management/mdm/policy-csp-authentication.md index fcc6506c15..3c483fb097 100644 --- a/windows/client-management/mdm/policy-csp-authentication.md +++ b/windows/client-management/mdm/policy-csp-authentication.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 08/30/2017 +ms.date: 09/06/2017 --- # Policy CSP - Authentication @@ -19,6 +19,42 @@ ms.date: 08/30/2017 ## Authentication policies + +**Authentication/AllowAadPasswordReset** + + + + + + + + + + + + + + + + + + + + + +
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark3check mark3check mark3check mark3cross markcross mark
      + + + +

      Added in Windows 10, version 1709. Specifies whether password reset is enabled for Azure Active Directory accounts. This policy allows the Azure AD tenant administrators to enable self service password reset feature on the windows logon screen.  + +

      The following list shows the supported values: + +- 0 (default) – Not allowed. +- 1 – Allowed. + + + **Authentication/AllowEAPCertSSO** @@ -46,10 +82,6 @@ ms.date: 08/30/2017 -> [!NOTE] -> This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile. - -

      Allows an EAP cert-based authentication for a single sign on (SSO) to access internal resources. > [!IMPORTANT] From dcc4afcb1b59d2d1568c015b52baec3118c93e4d Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 13 Sep 2017 13:18:01 -0700 Subject: [PATCH 100/146] udpate portal overview --- ...-overview-windows-defender-advanced-threat-protection.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index 7a8e8393e6..9e98297388 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -30,7 +30,7 @@ Enterprise security teams can use the Windows Defender ATP portal to monitor and You can use the [Windows Defender ATP portal](https://securitycenter.windows.com/) to: - View, sort, and triage alerts from your endpoints - Search for more information on observed indicators such as files and IP Addresses -- Change Windows Defender ATP settings, including time zone and alert suppression rules +- Change Windows Defender ATP settings, including time zone and licensing information. ## Windows Defender ATP portal When you open the portal, you’ll see the main areas of the application: @@ -48,10 +48,10 @@ You can navigate through the portal using the menu options available in all sect Area | Description :---|:--- -(1) Search bar, Feedback, Settings, Help and support | **Search** - Provides access to the search bar where you can search for file, IP, machine, URL, and user. Displays the Search box: the drop-down list allows you to select the entity type and then enter the search query text.
      **Feedback** -Access the feedback button to provide comments about the portal.
      **Settings** - Gives you access to the configuration settings where you can set time zones, alert suppression rules, and license information.
      **Help and support** - Gives you access to the Windows Defender ATP guide, Microsoft support, and Premier support. +(1) Search bar, Feedback, Settings, Help and support | **Search** - Provides access to the search bar where you can search for file, IP, machine, URL, and user. Displays the Search box: the drop-down list allows you to select the entity type and then enter the search query text.
      **Feedback** -Access the feedback button to provide comments about the portal.
      **Settings** - Gives you access to the configuration settings where you can set time zones and view license information.
      **Help and support** - Gives you access to the Windows Defender ATP guide, Microsoft support, and Premier support. (2) Navigation pane | Use the navigation pane to move between the **Dashboards**, **Alerts queue**, **Machines list**, **Service health**, **Preferences setup**, and **Endpoint management**. **Dashboards** | Enables you to view the Security operations or the Security analytics dashboard. -**Alerts queue** | Enables you to view separate queues of new, in progress, and resolved alerts. +**Alerts queue** | Enables you to view separate queues of new, in progress, resolved alerts, alerts assigned to you, and suppression rules. **Machines list** | Displays the list of machines that are onboarded to Windows Defender ATP, some information about them, and the corresponding number of alerts. **Service health** | Provides information on the current status of the Window Defender ATP service. You'll be able to verify that the service health is healthy or if there are current issues. **Preferences setup** | Shows the settings you selected during onboarding and lets you update your industry preferences and retention policy period. You can also set email notifications, activate the preview experience, and enable or turn off advanced features. From f28c357c48b27c60b5063de6de68495e95e74ba5 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 13 Sep 2017 14:26:30 -0700 Subject: [PATCH 101/146] remove steps, add formats, update decimal --- ...ows-defender-advanced-threat-protection.md | 19 +++++++------------ 1 file changed, 7 insertions(+), 12 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index d47d1f13da..81b976e914 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -61,16 +61,10 @@ To set the time zone: To apply different date formats for Windows Defender ATP, use regional settings for IE and Edge. If you're using another browser such as Google Chrome, follow the required steps to change the time and date settings for that browser. -**Internet Explorer(IE) and Microsoft Edge (Edge)** +**Internet Explorer (IE) and Microsoft Edge (Edge)** -IE and Edge uses the **Region** settings configured in the **Clocks, Language, and Region** option in the Control panel. +IE and Edge use the **Region** settings configured in the **Clocks, Language, and Region** option in the Control panel. -Take the following steps to change the date and time format to conform to the format that you need. - -1. Go to **Control Panel** > **Clock, Language, and Region**. -2. Click **Region** > **Change date, time, or number formats**. You can choose to use match the current format to match the Windows display language or you can specify date and time formats to suit your preference. - - ![Image of region settings in control panel](images/atp-region-control-panel.png) #### Known issues with regional formats @@ -82,14 +76,15 @@ The following date formats are supported: - dd/MM/yyyy The following date and time formats are currently not supported: -- Date format yyyy/MM/dd +- Date format yyyy-MM-dd +- Date format dd-MMM-yy - Date format dd/MM/yy +- Date format MM/dd/yy - Date format with yy. Will only show yyyy. - Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. -**Use of comma to indicate thousand**
      -Support of use of comma as a separator in numbers are not supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5K is displayed as 15.5K. - +**Decimal symbol used in numbers**
      +Decimal symbol used is always a dot, even if a comma is selected in the **Numbers** format settings in **Region** settings. For example, 15,5K is displayed as 15.5K. ## License Click the license link in the **Settings** menu to view the license agreement information for Windows Defender ATP. From a078b82f0c6173cd550859f098a26220e73e891c Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 13 Sep 2017 21:29:33 +0000 Subject: [PATCH 102/146] Updated toc.yml --- store-for-business/breadcrumb/toc.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/store-for-business/breadcrumb/toc.yml b/store-for-business/breadcrumb/toc.yml index 104d0bb7a6..4b1853471b 100644 --- a/store-for-business/breadcrumb/toc.yml +++ b/store-for-business/breadcrumb/toc.yml @@ -2,6 +2,6 @@ tocHref: / topicHref: / items: - - name: Windows Store for Business + - name: Microsoft Store for Business tocHref: /microsoft-store topicHref: /microsoft-store/index \ No newline at end of file From 5ca7656bcf161e95c185e319c94d657135ae40a4 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 14 Sep 2017 15:13:18 +0000 Subject: [PATCH 103/146] Merged PR 3190: Added USB error text --- windows/configuration/wcd/wcd-usberrorsoemoverride.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/wcd/wcd-usberrorsoemoverride.md b/windows/configuration/wcd/wcd-usberrorsoemoverride.md index 31685f534d..47596e69d3 100644 --- a/windows/configuration/wcd/wcd-usberrorsoemoverride.md +++ b/windows/configuration/wcd/wcd-usberrorsoemoverride.md @@ -13,7 +13,7 @@ ms.date: 08/21/2017 # UsbErrorsOEMOverride (reference) -Use UsbErrorsOEMOverride settings to . +Allows an OEM to hide the USB option UI in Settings and all USB device errors. ## Applies to @@ -24,4 +24,4 @@ Use UsbErrorsOEMOverride settings to . ## HideUsbErrorNotifyOptionUI - +Configure to **Show** or **Hide** the USB error notification. From cd59adc8976a5495296ec9902dc1a51ade24641c Mon Sep 17 00:00:00 2001 From: Elizabeth Ross Date: Thu, 14 Sep 2017 16:51:02 +0000 Subject: [PATCH 104/146] Merged PR 3191: Updated text, formatting, and content organization --- ...change-history-for-configure-windows-10.md | 9 ++-- .../configuration/windows-diagnostic-data.md | 48 +++++++------------ 2 files changed, 22 insertions(+), 35 deletions(-) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 08c50e3ed2..2a2a60a09d 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -29,11 +29,12 @@ New or changed topic | Description ## July 2017 | New or changed topic | Description | | --- | --- | -| [Add image for secondary tiles](start-secondary-tiles.md) | Added XML example for Edge secondary tiles and **ImportEdgeAssets** | -| [Customize and export Start layout](customize-and-export-start-layout.md) | Added explanation for tile behavior when the app is not installed | -| [Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md) | Added that Microsoft Edge is not supported for assigned access | +|[Windows 10, version 1703 Diagnostic Data](windows-diagnostic-data.md)|Updated categories and included diagnostic data.| +|[Add image for secondary tiles](start-secondary-tiles.md) | Added XML example for Edge secondary tiles and **ImportEdgeAssets** | +|[Customize and export Start layout](customize-and-export-start-layout.md) | Added explanation for tile behavior when the app is not installed | +|[Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md) | Added that Microsoft Edge is not supported for assigned access | |[Windows 10, version 1703 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md)|Updated several Appraiser events and added Census.Speech. | -| [Manage connections from Windows operating system components to Microsoft-services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) | Updated Date & Time and Windows spotlight sections. | +|[Manage connections from Windows operating system components to Microsoft-services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) | Updated Date & Time and Windows spotlight sections. | ## June 2017 diff --git a/windows/configuration/windows-diagnostic-data.md b/windows/configuration/windows-diagnostic-data.md index 611432abea..9f56ccf841 100644 --- a/windows/configuration/windows-diagnostic-data.md +++ b/windows/configuration/windows-diagnostic-data.md @@ -6,12 +6,14 @@ ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library ms.localizationpriority: high -author: brianlic-msft +author: eross-msft +ms.author: lizross +ms.date: 09/14/2017 --- # Windows 10, version 1703 Diagnostic Data -Microsoft collects Windows diagnostic data to keep Windows up-to-date, secure, and operating properly. It also helps us improve Windows and, for users who have turned on “tailored experiences”, can be used to provide relevant tips and recommendations to tailor Microsoft products to the user’s needs. This article describes all types diagnostic data collected by Windows at the Full telemetry level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1703 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md). +Microsoft collects Windows diagnostic data to keep Windows up-to-date, secure, and operating properly. It also helps us improve Windows and, for users who have turned on “tailored experiences”, can be used to provide more relevant tips and recommendations to tailor Microsoft products to the user’s needs. This article describes all types diagnostic data collected by Windows at the Full telemetry level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1703 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md). The data covered in this article is grouped into the following categories: @@ -21,10 +23,8 @@ The data covered in this article is grouped into the following categories: - Product and Service Usage data - Product and Service Performance data - Software Setup and Inventory data -- Content Consumption data -- Browsing, Search and Query data +- Browsing History data - Inking, Typing, and Speech Utterance data -- Licensing and Purchase data > [!NOTE] > The majority of diagnostic data falls into the first four categories. @@ -66,8 +66,15 @@ This type of data includes details about the health of the device, operating sys | Category Name | Description and Examples | | - | - | -| Device health and crash data | Information about the device and software health such as:

      • Error codes and error messages, name and ID of the app, and process reporting the error
      • DLL library predicted to be the source of the error -- xyz.dll
      • System generated files -- app or product logs and trace files to help diagnose a crash or hang
      • System settings such as registry keys
      • User generated files – .doc, .ppt, .csv files where they are indicated as a potential cause for a crash or hang
      • Details and counts of abnormal shutdowns, hangs, and crashes
      • Crash failure data – OS, OS component, driver, device, 1st and 3rd party app data
      • Crash and Hang dumps
        • The recorded state of the working memory at the point of the crash.
        • Memory in use by the kernel at the point of the crash.
        • Memory in use by the application at the point of the crash.
        • All the physical memory used by Windows at the point of the crash.
        • Class and function name within the module that failed.
        | -| Device performance and reliability data | Information about the device and software performance such as:
        • User Interface interaction durations -- Start Menu display times, browser tab switch times, app launch and switch times, and Cortana and search performance and reliability.
        • Device on/off performance -- Device boot, shutdown, power on/off, lock/unlock times, and user authentication times (fingerprint and face recognition durations).
        • In-app responsiveness -- time to set alarm, time to fully render in-app navigation menus, time to sync reading list, time to start GPS navigation, time to attach picture MMS, and time to complete a Microsoft Store transaction.
        • User input responsiveness – onscreen keyboard invocation times for different languages, time to show auto-complete words, pen or touch latencies, latency for handwriting recognition to words, Narrator screen reader responsiveness, and CPU score.
        • UI and media performance and glitches/smoothness -- video playback frame rate, audio glitches, animation glitches (stutter when bringing up Start), graphics score, time to first frame, play/pause/stop/seek responsiveness, time to render PDF, dynamic streaming of video from OneDrive performance
        • Disk footprint -- Free disk space, out of memory conditions, and disk score.
        • Excessive resource utilization – components impacting performance or battery life through high CPU usage during different screen and power states
        • Background task performance -- download times, Windows Update scan duration, Windows Defender Antivirus scan times, disk defrag times, mail fetch times, service startup and state transition times, and time to index on-device files for search results
        • Peripheral and devices -- USB device connection times, time to connect to a wireless display, printing times, network availability and connection times (time to connect to Wi-Fi, time to get an IP address from DHCP etc.), smart card authentication times, automatic brightness environmental response times
        • Device setup -- first setup experience times (time to install updates, install apps, connect to network etc.), time to recognize connected devices (printer and monitor), and time to setup Microsoft Account.
        • Power and Battery life – power draw by component (Process/CPU/GPU/Display), hours of screen off time, sleep state transition details, temperature and thermal throttling, battery drain in a power state (screen off or screen on), processes and components requesting power use during screen off, auto-brightness details, time device is plugged into AC vs. battery, battery state transitions
        • Service responsiveness - Service URI, operation, latency, service success/error codes, and protocol.
        • Diagnostic heartbeat – regular signal to validate the health of the diagnostics system
        +|Device health and crash data | Information about the device and software health such as:
        • Error codes and error messages, name and ID of the app, and process reporting the error
        • DLL library predicted to be the source of the error -- xyz.dll
        • System generated files -- app or product logs and trace files to help diagnose a crash or hang
        • System settings such as registry keys
        • User generated files – .doc, .ppt, .csv files where they are indicated as a potential cause for a crash or hang
        • Details and counts of abnormal shutdowns, hangs, and crashes
        • Crash failure data – OS, OS component, driver, device, 1st and 3rd party app data
        • Crash and Hang dumps
          • The recorded state of the working memory at the point of the crash.
          • Memory in use by the kernel at the point of the crash.
          • Memory in use by the application at the point of the crash.
          • All the physical memory used by Windows at the point of the crash.
          • Class and function name within the module that failed.
          | +|Device performance and reliability data | Information about the device and software performance such as:
          • User Interface interaction durations -- Start Menu display times, browser tab switch times, app launch and switch times, and Cortana and search performance and reliability.
          • Device on/off performance -- Device boot, shutdown, power on/off, lock/unlock times, and user authentication times (fingerprint and face recognition durations).
          • In-app responsiveness -- time to set alarm, time to fully render in-app navigation menus, time to sync reading list, time to start GPS navigation, time to attach picture MMS, and time to complete a Microsoft Store transaction.
          • User input responsiveness – onscreen keyboard invocation times for different languages, time to show auto-complete words, pen or touch latencies, latency for handwriting recognition to words, Narrator screen reader responsiveness, and CPU score.
          • UI and media performance and glitches/smoothness -- video playback frame rate, audio glitches, animation glitches (stutter when bringing up Start), graphics score, time to first frame, play/pause/stop/seek responsiveness, time to render PDF, dynamic streaming of video from OneDrive performance
          • Disk footprint -- Free disk space, out of memory conditions, and disk score.
          • Excessive resource utilization – components impacting performance or battery life through high CPU usage during different screen and power states
          • Background task performance -- download times, Windows Update scan duration, Windows Defender Antivirus scan times, disk defrag times, mail fetch times, service startup and state transition times, and time to index on-device files for search results
          • Peripheral and devices -- USB device connection times, time to connect to a wireless display, printing times, network availability and connection times (time to connect to Wi-Fi, time to get an IP address from DHCP etc.), smart card authentication times, automatic brightness environmental response times
          • Device setup -- first setup experience times (time to install updates, install apps, connect to network etc.), time to recognize connected devices (printer and monitor), and time to setup Microsoft Account.
          • Power and Battery life – power draw by component (Process/CPU/GPU/Display), hours of screen off time, sleep state transition details, temperature and thermal throttling, battery drain in a power state (screen off or screen on), processes and components requesting power use during screen off, auto-brightness details, time device is plugged into AC vs. battery, battery state transitions
          • Service responsiveness - Service URI, operation, latency, service success/error codes, and protocol.
          • Diagnostic heartbeat – regular signal to validate the health of the diagnostics system
          | +|Movies|Information about movie consumption functionality on the device. This isn't intended to capture user viewing, listening or habits.
          • Video Width, height, color pallet, encoding (compression) type, and encryption type
          • Instructions for how to stream content for the user -- the smooth streaming manifest of chunks of content files that must be pieced together to stream the content based on screen resolution and bandwidth
          • URL for a specific two second chunk of content if there is an error
          • Full screen viewing mode details| +|Music & TV|Information about music and TV consumption on the device. This isn't intended to capture user viewing, listening or habits.
            • Service URL for song being downloaded from the music service – collected when an error occurs to facilitate restoration of service
            • Content type (video, audio, surround audio)
            • Local media library collection statistics -- number of purchased tracks, number of playlists
            • Region mismatch -- User OS Region, and Xbox Live region
            | +|Reading|Information about reading consumption functionality on the device. This isn't intended to capture user viewing, listening or habits.
            • App accessing content and status and options used to open a Microsoft Store book
            • Language of the book
            • Time spent reading content
            • Content type and size details
            | +|Photos App|Information about photos usage on the device. This isn't intended to capture user viewing, listening or habits.
            • File source data -- local, SD card, network device, and OneDrive
            • Image & video resolution, video length, file sizes types and encoding
            • Collection view or full screen viewer use and duration of view
          | +|On-device file query | Information about local search activity on the device such as:
          • Kind of query issued and index type (ConstraintIndex, SystemIndex)
          • Number of items requested and retrieved
          • File extension of search result user interacted with
          • Launched item kind, file extension, index of origin, and the App ID of the opening app.
          • Name of process calling the indexer and time to service the query.
          • A hash of the search scope (file, Outlook, OneNote, IE history)
          • The state of the indices (fully optimized, partially optimized, being built)
          | +|Purchasing| Information about purchases made on the device such as:
          • Product ID, edition ID and product URI
          • Offer details -- price
          • Order requested date/time
          • Store client type -- web or native client
          • Purchase quantity and price
          • Payment type -- credit card type and PayPal
          | +|Entitlements | Information about entitlements on the device such as:
          • Service subscription status and errors
          • DRM and license rights details -- Groove subscription or OS volume license
          • Entitlement ID, lease ID, and package ID of the install package
          • Entitlement revocation
          • License type (trial, offline vs online) and duration
          • License usage session
          | ## Software Setup and Inventory data @@ -78,25 +85,13 @@ This type of data includes software installation and update information on the d | Installed Applications and Install History | Information about apps, drivers, update packages, or OS components installed on the device such as:
          • App, driver, update package, or component’s Name, ID, or Package Family Name
          • Product, SKU, availability, catalog, content, and Bundle IDs
          • OS component, app or driver publisher, language, version and type (Win32 or UWP)
          • Install date, method, and install directory, count of install attempts
          • MSI package code and product code
          • Original OS version at install time
          • User or administrator or mandatory installation/update
          • Installation type – clean install, repair, restore, OEM, retail, upgrade, and update
          | | Device update information | Information about Windows Update such as:
          • Update Readiness analysis of device hardware, OS components, apps, and drivers (progress, status, and results)
          • Number of applicable updates, importance, type
          • Update download size and source -- CDN or LAN peers
          • Delay upgrade status and configuration
          • OS uninstall and rollback status and count
          • Windows Update server and service URL
          • Windows Update machine ID
          • Windows Insider build details
          -## Content Consumption data +## Browsing History data -This type of data includes diagnostic details about Microsoft applications that provide media consumption functionality (such as Groove Music), and is not intended to capture user viewing, listening or reading habits. - -| Category Name | Examples | -| - | - | -| Movies | Information about movie consumption functionality on the device such as:
          • Video Width, height, color pallet, encoding (compression) type, and encryption type
          • Instructions for how to stream content for the user -- the smooth streaming manifest of chunks of content files that must be pieced together to stream the content based on screen resolution and bandwidth
          • URL for a specific two second chunk of content if there is an error
          • Full screen viewing mode details
          | -| Music & TV | Information about music and TV consumption on the device such as:
          • Service URL for song being downloaded from the music service – collected when an error occurs to facilitate restoration of service
          • Content type (video, audio, surround audio)
          • Local media library collection statistics -- number of purchased tracks, number of playlists
          • Region mismatch -- User OS Region, and Xbox Live region
          | -| Reading | Information about reading consumption functionality on the device such as:
          • App accessing content and status and options used to open a Microsoft Store book
          • Language of the book
          • Time spent reading content
          • Content type and size details
          | -| Photos App | Information about photos usage on the device such as:
          • File source data -- local, SD card, network device, and OneDrive
          • Image & video resolution, video length, file sizes types and encoding
          • Collection view or full screen viewer use and duration of view
          - -## Browsing, Search and Query data - -This type of data includes details about web browsing, search and query activity in the Microsoft browsers and Cortana, and local file searches on the device. +This type of data includes details about web browsing in the Microsoft browsers. | Category Name | Description and Examples | | - | - | | Microsoft browser data | Information about Address bar and search box performance on the device such as:
          • Text typed in address bar and search box
          • Text selected for Ask Cortana search
          • Service response time
          • Auto-completed text if there was an auto-complete
          • Navigation suggestions provided based on local history and favorites
          • Browser ID
          • URLs (which may include search terms)
          • Page title
          | -| On-device file query | Information about local search activity on the device such as:
          • Kind of query issued and index type (ConstraintIndex, SystemIndex)
          • Number of items requested and retrieved
          • File extension of search result user interacted with
          • Launched item kind, file extension, index of origin, and the App ID of the opening app.
          • Name of process calling the indexer and time to service the query.
          • A hash of the search scope (file, Outlook, OneNote, IE history)
          • The state of the indices (fully optimized, partially optimized, being built)
          | ## Inking Typing and Speech Utterance data @@ -105,13 +100,4 @@ This type of data gathers details about the voice, inking, and typing input feat | Category Name | Description and Examples | | - | - | -| Voice, inking, and typing | Information about voice, inking and typing features such as:
          • Type of pen used (highlighter, ball point, pencil), pen color, stroke height and width, and how long it is used
          • Pen gestures (click, double click, pan, zoom, rotate)
          • Palm Touch x,y coordinates
          • Input latency, missed pen signals, number of frames, strokes, first frame commit time, sample rate
          • Ink strokes written, text before and after the ink insertion point, recognized text entered, Input language - processed to remove identifiers, sequencing information, and other data (such as names, email addresses, and numeric values) which could be used to reconstruct the original content or associate the input to the user.
          • Text of speech recognition results -- result codes and recognized text
          • Language and model of the recognizer, System Speech language
          • App ID using speech features
          • Whether user is known to be a child
          • Confidence and Success/Failure of speech recognition
          | - -## ​​​​​​​Licensing and Purchase data - -This type of data includes diagnostic details about the purchase and entitlement activity on the device. - -| Category Name | Data Examples | -| - | - | -| Purchase history | Information about purchases made on the device such as:
          • Product ID, edition ID and product URI
          • Offer details -- price
          • Order requested date/time
          • Store client type -- web or native client
          • Purchase quantity and price
          • Payment type -- credit card type and PayPal
          | -| Entitlements | Information about entitlements on the device such as:
          • Service subscription status and errors
          • DRM and license rights details -- Groove subscription or OS volume license
          • Entitlement ID, lease ID, and package ID of the install package
          • Entitlement revocation
          • License type (trial, offline vs online) and duration
          • License usage session
          | \ No newline at end of file +| Voice, inking, and typing | Information about voice, inking and typing features such as:
          • Type of pen used (highlighter, ball point, pencil), pen color, stroke height and width, and how long it is used
          • Pen gestures (click, double click, pan, zoom, rotate)
          • Palm Touch x,y coordinates
          • Input latency, missed pen signals, number of frames, strokes, first frame commit time, sample rate
          • Ink strokes written, text before and after the ink insertion point, recognized text entered, Input language - processed to remove identifiers, sequencing information, and other data (such as email addresses and numeric values) which could be used to reconstruct the original content or associate the input to the user.
          • Text input from Windows Mobile on-screen keyboards except from password fields and private sessions - processed to remove identifiers, sequencing information, and other data (such as email addresses, and numeric values) which could be used to reconstruct the original content or associate the input to the user.
          • Text of speech recognition results -- result codes and recognized text
          • Language and model of the recognizer, System Speech language
          • App ID using speech features
          • Whether user is known to be a child
          • Confidence and Success/Failure of speech recognition
          | \ No newline at end of file From ec31357472af9ebee6d163a162a7e44293e46ffc Mon Sep 17 00:00:00 2001 From: John Tobin Date: Thu, 14 Sep 2017 09:59:08 -0700 Subject: [PATCH 105/146] Add dbghost and dbgsvc to block list --- .../device-guard/deploy-code-integrity-policies-steps.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md index 9f7bef9162..be6f4de127 100644 --- a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md +++ b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md @@ -36,6 +36,8 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you - bginfo.exe[1] - cdb.exe - csi.exe +- dbghost.exe +- dbgsvc.exe - dnx.exe - fsi.exe - fsiAnyCpu.exe @@ -110,7 +112,9 @@ Microsoft recommends that you block the following Microsoft-signed applications - + + + @@ -177,6 +181,8 @@ Microsoft recommends that you block the following Microsoft-signed applications + + From baa5a1b402815d3f2f035ffb29b6f1045e6cb351 Mon Sep 17 00:00:00 2001 From: Nicholas Brower Date: Thu, 14 Sep 2017 17:20:24 +0000 Subject: [PATCH 106/146] Merged PR 3193: Merge Olympia enrollment methods into a single topic --- windows/deployment/TOC.md | 2 - .../enrollment-keep-current-edition.md | 44 ---------- .../enrollment-upgrade-to-enterprise.md | 57 ------------ .../olympia/olympia-enrollment-guidelines.md | 87 ++++++++++++++++++- 4 files changed, 84 insertions(+), 106 deletions(-) delete mode 100644 windows/deployment/update/olympia/enrollment-keep-current-edition.md delete mode 100644 windows/deployment/update/olympia/enrollment-upgrade-to-enterprise.md diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index b070057f1d..3d057730dc 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -222,8 +222,6 @@ #### [Windows Insider Program for Business using Azure Active Directory](update/waas-windows-insider-for-business-aad.md) #### [Windows Insider Program for Business Frequently Asked Questions](update/waas-windows-insider-for-business-faq.md) #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md) -##### [Keep your current Windows 10 edition](update/olympia/enrollment-keep-current-edition.md) -##### [Upgrade your Windows 10 edition from Pro to Enterprise](update/olympia/enrollment-upgrade-to-enterprise.md) ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) ## Windows Analytics diff --git a/windows/deployment/update/olympia/enrollment-keep-current-edition.md b/windows/deployment/update/olympia/enrollment-keep-current-edition.md deleted file mode 100644 index b0016c44ee..0000000000 --- a/windows/deployment/update/olympia/enrollment-keep-current-edition.md +++ /dev/null @@ -1,44 +0,0 @@ ---- -title: Keep your current Windows 10 edition -description: Olympia Corp enrollment - Keep your current Windows 10 edition -ms.author: nibr -ms.topic: article -ms.prod: w10 -ms.technology: windows -author: nickbrower -ms.date: 09/01/2017 ---- - -# Olympia Corp enrollment - -## Keep your current Windows 10 edition - -1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)). - - ![Settings -> Accounts](images/1-1.png) - -2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**. - -3. Click **Connect** and enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**. - - ![Set up a work or school account](images/1-3.png) - -4. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password. - - > [!NOTE] - > Passwords should contain 8-16 characters, including at least one special character or number. - - ![Update your password](images/1-4.png) - -5. Read the **Terms and Conditions**. Click **Accept** to participate in the program. - -6. If this is the first time you are logging in, please fill in the additional information to help you retrieve your account details. - -7. Create a PIN for signing into your Olympia corporate account. - -8. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**. - - > [!NOTE] - > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness). - -9. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**. diff --git a/windows/deployment/update/olympia/enrollment-upgrade-to-enterprise.md b/windows/deployment/update/olympia/enrollment-upgrade-to-enterprise.md deleted file mode 100644 index 6643971428..0000000000 --- a/windows/deployment/update/olympia/enrollment-upgrade-to-enterprise.md +++ /dev/null @@ -1,57 +0,0 @@ ---- -title: Upgrade your Windows 10 edition from Pro to Enterprise -description: Olympia Corp enrollment - Upgrade your Windows 10 edition from Pro to Enterprise -ms.author: nibr -ms.topic: article -ms.prod: w10 -ms.technology: windows -author: nickbrower -ms.date: 09/01/2017 ---- - -# Olympia Corp enrollment - -## Upgrade your Windows 10 edition from Pro to Enterprise - -1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)). - - ![Settings -> Accounts](images/1-1.png) - -2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**. - -3. Click **Connect**, then click **Join this device to Azure Active Directory**. - - ![Update your password](images/2-3.png) - -4. Enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**. - - ![Set up a work or school account](images/2-4.png) - -5. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password. - - > [!NOTE] - > Passwords should contain 8-16 characters, including at least one special character or number. - - ![Update your password](images/2-5.png) - -6. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**. - -7. If this is the first time you are signing in, please fill in the additional information to help you retrieve your account details. - -8. Create a PIN for signing into your Olympia corporate account. - -9. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**. - -10. Restart your PC. - -11. In the sign-in screen, choose **Other User** and sign in with your **Olympia corporate account**. Your PC will upgrade to Windows 10 Enterprise*. - -12. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**. - - > [!NOTE] - > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness). - -13. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**. - -\* Please note that your Windows 10 Enterprise license will not be renewed if your PC is not connected to Olympia. - diff --git a/windows/deployment/update/olympia/olympia-enrollment-guidelines.md b/windows/deployment/update/olympia/olympia-enrollment-guidelines.md index 17b87bd7b0..fddd959017 100644 --- a/windows/deployment/update/olympia/olympia-enrollment-guidelines.md +++ b/windows/deployment/update/olympia/olympia-enrollment-guidelines.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 09/01/2017 +ms.date: 09/14/2017 --- # Olympia Corp enrollment guidelines @@ -17,6 +17,87 @@ As part of Windows Insider Lab for Enterprise, you can upgrade to Windows 10 Ent Choose one of the following two enrollment options: -1. [Keep your current Windows 10 edition](./enrollment-keep-current-edition.md) +1. [Keep your current Windows 10 edition](#enrollment-keep-current-edition) + +2. [Upgrade your Windows 10 edition from Pro to Enterprise](#enrollment-upgrade-to-enterprise) + + + +## Keep your current Windows 10 edition + +1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)). + + ![Settings -> Accounts](images/1-1.png) + +2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**. + +3. Click **Connect** and enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**. + + ![Set up a work or school account](images/1-3.png) + +4. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password. + + > [!NOTE] + > Passwords should contain 8-16 characters, including at least one special character or number. + + ![Update your password](images/1-4.png) + +5. Read the **Terms and Conditions**. Click **Accept** to participate in the program. + +6. If this is the first time you are logging in, please fill in the additional information to help you retrieve your account details. + +7. Create a PIN for signing into your Olympia corporate account. + +8. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**. + + > [!NOTE] + > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness). + +9. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**. + + + +## Upgrade your Windows 10 edition from Pro to Enterprise + +1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)). + + ![Settings -> Accounts](images/1-1.png) + +2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**. + +3. Click **Connect**, then click **Join this device to Azure Active Directory**. + + ![Update your password](images/2-3.png) + +4. Enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**. + + ![Set up a work or school account](images/2-4.png) + +5. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password. + + > [!NOTE] + > Passwords should contain 8-16 characters, including at least one special character or number. + + ![Update your password](images/2-5.png) + +6. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**. + +7. If this is the first time you are signing in, please fill in the additional information to help you retrieve your account details. + +8. Create a PIN for signing into your Olympia corporate account. + +9. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**. + +10. Restart your PC. + +11. In the sign-in screen, choose **Other User** and sign in with your **Olympia corporate account**. Your PC will upgrade to Windows 10 Enterprise*. + +12. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**. + + > [!NOTE] + > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness). + +13. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**. + +\* Please note that your Windows 10 Enterprise license will not be renewed if your PC is not connected to Olympia. -2. [Upgrade your Windows 10 edition from Pro to Enterprise](./enrollment-upgrade-to-enterprise.md) From abfb498772c4d82ca6dc6a159922c9776424cab0 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 14 Sep 2017 22:30:30 +0000 Subject: [PATCH 107/146] Merged PR 3205: Add link in parent to child Add link to parent topic pointing to important procedure in child topic --- .../deployment/windows-10-enterprise-subscription-activation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-10-enterprise-subscription-activation.md b/windows/deployment/windows-10-enterprise-subscription-activation.md index c767d18075..9f6b5c02a8 100644 --- a/windows/deployment/windows-10-enterprise-subscription-activation.md +++ b/windows/deployment/windows-10-enterprise-subscription-activation.md @@ -102,7 +102,7 @@ changepk.exe /ProductKey %ProductKey% ### Obtaining an Azure AD licence Enterprise Agreement/Software Assurance (EA/SA): -- Organizations with a traditional EA must order a $0 SKU, process e-mails sent to the license administrator for the company, and assign licenses using Azure AD (ideally to groups using the new Azure AD Premium feature for group assignment). +- Organizations with a traditional EA must order a $0 SKU, process e-mails sent to the license administrator for the company, and assign licenses using Azure AD (ideally to groups using the new Azure AD Premium feature for group assignment). For more information, see [Enabling Subscription Activation with an existing EA](https://docs.microsoft.com/en-us/windows/deployment/deploy-enterprise-licenses#enabling-subscription-activation-with-an-existing-ea). - The license administrator can assign seats to Azure AD users with the same process that is used for O365. - New EA/SA Windows Enterprise customers can acquire both an SA subscription and an associated $0 cloud subscription. From 6376a76a3d5f40e7a5393103e3298f24df9128c6 Mon Sep 17 00:00:00 2001 From: John Tobin Date: Thu, 14 Sep 2017 16:06:58 -0700 Subject: [PATCH 108/146] Correct Cred Guard CI File Rule for KD_KMCI --- .../device-guard/deploy-code-integrity-policies-steps.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md index be6f4de127..8b11311fb6 100644 --- a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md +++ b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md @@ -108,6 +108,7 @@ Microsoft recommends that you block the following Microsoft-signed applications + @@ -167,7 +168,7 @@ Microsoft recommends that you block the following Microsoft-signed applications - + From fe11b1a3d50fad12bd97661a017d706fd1048956 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Fri, 15 Sep 2017 19:53:34 +0000 Subject: [PATCH 109/146] Merged PR 3224: Merge maricia-13755838 to master --- ...ew-in-windows-mdm-enrollment-management.md | 20 +++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 4542abf9dd..ecdd2bbd8a 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -929,6 +929,16 @@ For details about Microsoft mobile device management protocols for Windows 10 s +The [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://msdn.microsoft.com/en-us/library/mt221945.aspx) +

          The Windows 10 enrollment protocol was updated. The following elements were added to the RequestSecurityToken message:

          +
            +
          • UXInitiated - boolean value that indicates whether the enrollment is user initiated from the Settings page.
            • +
          • ExternalMgmtAgentHint - a string the agent uses to give hints the enrollment server may need.
            • +
          • DomainName - fully qualified domain name if the device is domain-joined.
            • +
          +

          For examples, see section 4.3.1 RequestSecurityToken of the the MS-MDE2 protocol documentation.

          + + [Firewall CSP](firewall-csp.md)

          Added new CSP in Windows 10, version 1709.

          @@ -1361,6 +1371,16 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
        • System/LimitEnhancedDiagnosticDataWindowsAnalytics
        + +The [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://msdn.microsoft.com/en-us/library/mt221945.aspx) +

        The Windows 10 enrollment protocol was updated. The following elements were added to the RequestSecurityToken message:

        +
          +
        • UXInitiated - boolean value that indicates whether the enrollment is user initiated from the Settings page.
          • +
        • ExternalMgmtAgentHint - a string the agent uses to give hints the enrollment server may need.
          • +
        • DomainName - fully qualified domain name if the device is domain-joined.
          • +
        +

        For examples, see section 4.3.1 RequestSecurityToken of the the MS-MDE2 protocol documentation.

        + From 3d21ef1009a8fbdacb4ceb8f6cf526f426362e24 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 15 Sep 2017 13:09:36 -0700 Subject: [PATCH 110/146] add api parameters --- ...ows-defender-advanced-threat-protection.md | 267 +++--------------- 1 file changed, 33 insertions(+), 234 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md index 2d146c99a0..4890e798ee 100644 --- a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md @@ -36,240 +36,39 @@ The ArcSight field column contains the default mapping between the Windows Defen Field numbers match the numbers in the images below. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        Portal labelSIEM field nameArcSight fieldExample valueDescription
        1AlertTitlenameA dll was unexpectedly loaded into a high integrity process without a UAC promptValue available for every alert.
        2SeveritydeviceSeverityMediumValue available for every alert.
        3CategorydeviceEventCategoryPrivilege EscalationValue available for every alert.
        4SourcesourceServiceNameWindowsDefenderATPWindows Defender Antivirus or Windows Defender ATP. Value available for every alert.
        5MachineNamesourceHostNameliz-beanValue available for every alert.
        6FileNamefileNameRobocopy.exeAvailable for alerts associated with a file or process.
        7FilePathfilePathC:\Windows\System32\Robocopy.exeAvailable for alerts associated with a file or process. \
        8UserDomainsourceNtDomaincontosoThe domain of the user context running the activity, available for Windows Defender ATP behavioral based alerts.
        9UserNamesourceUserNameliz-beanThe user context running the activity, available for Windows Defender ATP behavioral based alerts.
        10Sha1fileHash5b4b3985339529be3151d331395f667e1d5b7f35Available for alerts associated with a file or process.
        11Md5deviceCustomString555394b85cb5edddff551f6f3faa9d8ebAvailable for Windows Defender AV alerts.
        12Sha256deviceCustomString69987474deb9f457ece2a9533a08ec173a0986fa3aa6ac355eeba5b622e4a43f5Available for Windows Defender AV alerts.
        13ThreatNameeviceCustomString1Trojan:Win32/Skeeyah.A!bitAvailable for Windows Defender AV alerts.
        14IpAddresssourceAddress218.90.204.141Available for alerts associated to network events. For example, 'Communication to a malicious network destination'.
        15UrlrequestUrldown.esales360.cnAvailabe for alerts associated to network events. For example, 'Communication to a malicious network destination'.
        16RemediationIsSuccessdeviceCustomNumber2TRUEAvailable for Windows Defender AV alerts. ArcSight value is 1 when TRUE and 0 when FALSE.
        17WasExecutingWhileDetecteddeviceCustomNumber1FALSEAvailable for Windows Defender AV alerts. ArcSight value is 1 when TRUE and 0 when FALSE.
        18AlertIdexternalId636210704265059241_673569822Value available for every alert.
        19LinkToWDATPflexString1`https://securitycenter.windows.com/alert/636210704265059241_673569822`Value available for every alert.
        20AlertTimedeviceReceiptTime2017-05-07T01:56:59.3191352ZThe time the activity relevant to the alert occurred. Value available for every alert.
        21MachineDomainsourceDnsDomaincontoso.comDomain name not relevant for AAD joined machines. Value available for every alert.
        22ActordeviceCustomString4Available for alerts related to a known actor group.
        21+5ComputerDnsNameNo mappingliz-bean.contoso.comThe machine fully qualified domain name. Value available for every alert.
        LogOnUserssourceUserIdcontoso\liz-bean; contoso\jay-hardeeThe domain and user of the interactive logon user/s at the time of the event. Note: For machines on Windows 10 version 1607, the domain information will not be available.
        Internal fieldLastProcessedTimeUtcNo mapping2017-05-07T01:56:58.9936648ZTime when event arrived at the backend. This field can be used when setting the request parameter for the range of time that alerts are retrieved.
        Not part of the schemadeviceVendorStatic value in the ArcSight mapping - 'Microsoft'.
        Not part of the schemadeviceProductStatic value in the ArcSight mapping - 'Windows Defender ATP'.
        Not part of the schemadeviceVersionStatic value in the ArcSight mapping - '2.0', used to identify the mapping versions.
        +> [!div class="mx-tdBreakAll"] +| Portal label | SIEM field name | ArcSight field | Example value | Description | +|------------------|---------------------------|---------------------|------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| 1 | AlertTitle | name | A dll was unexpectedly loaded into a high integrity process without a UAC prompt | Value available for every alert. | +| 2 | Severity | deviceSeverity | Medium | Value available for every alert. | +| 3 | Category | deviceEventCategory | Privilege Escalation | Value available for every alert. | +| 4 | Source | sourceServiceName | WindowsDefenderATP | Windows Defender Antivirus or Windows Defender ATP. Value available for every alert. | +| 5 | MachineName | sourceHostName | liz-bean | Value available for every alert. | +| 6 | FileName | fileName | Robocopy.exe | Available for alerts associated with a file or process. | +| 7 | FilePath | filePath | C:\Windows\System32\Robocopy.exe | Available for alerts associated with a file or process. \ | +| 8 | UserDomain | sourceNtDomain | contoso | The domain of the user context running the activity, available for Windows Defender ATP behavioral based alerts. | +| 9 | UserName | sourceUserName | liz-bean | The user context running the activity, available for Windows Defender ATP behavioral based alerts. | +| 10 | Sha1 | fileHash | 5b4b3985339529be3151d331395f667e1d5b7f35 | Available for alerts associated with a file or process. | +| 11 | Md5 | deviceCustomString5 | 55394b85cb5edddff551f6f3faa9d8eb | Available for Windows Defender AV alerts. | +| 12 | Sha256 | deviceCustomString6 | 9987474deb9f457ece2a9533a08ec173a0986fa3aa6ac355eeba5b622e4a43f5 | Available for Windows Defender AV alerts. | +| 13 | ThreatName | eviceCustomString1 | Trojan:Win32/Skeeyah.A!bit | Available for Windows Defender AV alerts. | +| 14 | IpAddress | sourceAddress | 218.90.204.141 | Available for alerts associated to network events. For example, 'Communication to a malicious network destination'. | +| 15 | Url | requestUrl | down.esales360.cn | Availabe for alerts associated to network events. For example, 'Communication to a malicious network destination'. | +| 16 | RemediationIsSuccess | deviceCustomNumber2 | TRUE | Available for Windows Defender AV alerts. ArcSight value is 1 when TRUE and 0 when FALSE. | +| 17 | WasExecutingWhileDetected | deviceCustomNumber1 | FALSE | Available for Windows Defender AV alerts. ArcSight value is 1 when TRUE and 0 when FALSE. | +| 18 | AlertId | externalId | 636210704265059241_673569822 | Value available for every alert. | +| 19 | LinkToWDATP | flexString1 | `https://securitycenter.windows.com/alert/636210704265059241_673569822` | Value available for every alert. | +| 20 | AlertTime | deviceReceiptTime | 2017-05-07T01:56:59.3191352Z | The time the activity relevant to the alert occurred. Value available for every alert. | +| 21 | MachineDomain | sourceDnsDomain | contoso.com | Domain name not relevant for AAD joined machines. Value available for every alert. | +| 22 | Actor | deviceCustomString4 | | Available for alerts related to a known actor group. | +| 21+5 | ComputerDnsName | No mapping | liz-bean.contoso.com | The machine fully qualified domain name. Value available for every alert. | +| | LogOnUsers | sourceUserId | contoso\liz-bean; contoso\jay-hardee | The domain and user of the interactive logon user/s at the time of the event. Note: For machines on Windows 10 version 1607, the domain information will not be available. | +| | InternalIPv4List | No mapping | 192.168.1.7, 10.1.14.1 | | +| | InternalIPv4List | No mapping | fd30:0000:0000:0001:ff4e:003e:0009:000e, FE80:CD00:0000:0CDE:1257:0000:211E:729C | | +| Internal field | LastProcessedTimeUtc | No mapping | 2017-05-07T01:56:58.9936648Z | Time when event arrived at the backend. This field can be used when setting the request parameter for the range of time that alerts are retrieved. | +| | Not part of the schema | deviceVendor | | Static value in the ArcSight mapping - 'Microsoft'. | +| | Not part of the schema | deviceProduct | | Static value in the ArcSight mapping - 'Windows Defender ATP'. | +| | Not part of the schema | deviceVersion | | Static value in the ArcSight mapping - '2.0', used to identify the mapping versions. |1234567891011121314151617181920212223242526272829303132 ![Image of alert with numbers](images/atp-alert-page.png) From e54ffd815cbc6a1654d26eb7bce05c5447524d1d Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 15 Sep 2017 13:30:48 -0700 Subject: [PATCH 111/146] table fix --- ...ortal-mapping-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md index 4890e798ee..a65efde847 100644 --- a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md @@ -36,7 +36,7 @@ The ArcSight field column contains the default mapping between the Windows Defen Field numbers match the numbers in the images below. -> [!div class="mx-tdBreakAll"] +> [!div class="mx-tableFixed"] | Portal label | SIEM field name | ArcSight field | Example value | Description | |------------------|---------------------------|---------------------|------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | 1 | AlertTitle | name | A dll was unexpectedly loaded into a high integrity process without a UAC prompt | Value available for every alert. | From 21e94fe377909313bf6c80a0c4f54ee36deef596 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 15 Sep 2017 13:31:36 -0700 Subject: [PATCH 112/146] typo --- ...ortal-mapping-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md index a65efde847..1732c065bd 100644 --- a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md @@ -45,7 +45,7 @@ Field numbers match the numbers in the images below. | 4 | Source | sourceServiceName | WindowsDefenderATP | Windows Defender Antivirus or Windows Defender ATP. Value available for every alert. | | 5 | MachineName | sourceHostName | liz-bean | Value available for every alert. | | 6 | FileName | fileName | Robocopy.exe | Available for alerts associated with a file or process. | -| 7 | FilePath | filePath | C:\Windows\System32\Robocopy.exe | Available for alerts associated with a file or process. \ | +| 7 | FilePath | filePath | C:\Windows\System32\Robocopy.exe | Available for alerts associated with a file or process. | | 8 | UserDomain | sourceNtDomain | contoso | The domain of the user context running the activity, available for Windows Defender ATP behavioral based alerts. | | 9 | UserName | sourceUserName | liz-bean | The user context running the activity, available for Windows Defender ATP behavioral based alerts. | | 10 | Sha1 | fileHash | 5b4b3985339529be3151d331395f667e1d5b7f35 | Available for alerts associated with a file or process. | From 670c70f9959c482300da7390c3d260f9bd1b9a04 Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Fri, 15 Sep 2017 22:31:20 +0000 Subject: [PATCH 113/146] Merged PR 3231: Add new article described default apps in W10 Enterprise SKU --- windows/application-management/TOC.md | 1 + .../apps-in-windows-10.md | 153 ++++++++++++++++++ ...ange-history-for-application-management.md | 4 +- windows/application-management/index.md | 3 + 4 files changed, 160 insertions(+), 1 deletion(-) create mode 100644 windows/application-management/apps-in-windows-10.md diff --git a/windows/application-management/TOC.md b/windows/application-management/TOC.md index 6b96cc2abc..3f1e9a5aaa 100644 --- a/windows/application-management/TOC.md +++ b/windows/application-management/TOC.md @@ -101,5 +101,6 @@ #### [Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications](app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md) ## [Service Host process refactoring](svchost-service-refactoring.md) ## [Per-user services in Windows](per-user-services-in-windows.md) +## [Understand apps in Windows 10](apps-in-windows-10.md) ## [Deploy app upgrades on Windows 10 Mobile](deploy-app-upgrades-windows-10-mobile.md) ## [Change history for Application management](change-history-for-application-management.md) diff --git a/windows/application-management/apps-in-windows-10.md b/windows/application-management/apps-in-windows-10.md new file mode 100644 index 0000000000..215e71f9f0 --- /dev/null +++ b/windows/application-management/apps-in-windows-10.md @@ -0,0 +1,153 @@ +--- +title: Windows 10 - Apps +description: What are Windows, UWP, and Win32 apps +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: mobile +ms.author: elizapo +author: lizap +ms.localizationpriority: low +ms.date: 09/15/2017 +--- +# Understand the different apps included in Windows 10 + +The following types of apps run on Windows 10: +- Windows apps - introduced in Windows 8, primarily installed from the Store app. +- Universal Windows Platform (UWP) apps - designed to work across platforms, can be installed on multiple platforms including Windows client, Windows Phone, and Xbox. All UWP apps are also Windows apps, but not all Windows apps are UWP apps. +- "Win32" apps - traditional Windows applications, built for 32-bit systems. + +Digging into the Windows apps, there are two categories: +- System apps - Apps that are installed in the c:\Windows\* directory. These apps are integral to the OS. +- Apps - All other apps, installed in c:\Program Files\WindowsApps. There are two classes of apps: + - Provisioned: Installed the first time you sign into Windows. You'll see a tile or Start menu item for these apps, but they aren't installed until the first sign-in. + - Installed: Installed as part of the OS. + +The following tables list the system apps, installed Windows apps, and provisioned Windows apps in a standard Windows 10 Enterprise installation. (If you have a custom image, your specific apps might differ.) The tables list the app, the full name, show the app's status in Windows 10 version 1511, 1607, and 1703, and indicate whether an app can be uninstalled through the UI. + +Some of the apps show up in multiple tables - that's because their status changed between versions. Make sure to check the version column for the version you are currently running. + +> [!TIP] +> Want to see a list of the apps installed on your specific image? You can run the following PowerShell cmdlet: +> ```powershell +> Get-AppxPackage |Select Name,PackageFamilyName +> Get-AppsProvisionedPackage -Online | select DisplayName,PackageName +> ``` + + +## System apps +System apps are integral to the operating system. Here are the typical system apps in Windows 10 versions 1511, 1607, and 1703. + +| Name | Full name | 1511 | 1607 | 1703 | Uninstall through UI? | +|------------------|-------------------------------------------|------|------|------|--------------------------------------------------------| +| Cortana UI | CortanaListenUIApp | | | x | No | +| | Desktop Learning | | | x | No | +| | DesktopView | | | x | No | +| | EnvironmentsApp | | | x | No | +| Mixed Reality + | HoloCamera | | | x | No | +| Mixed Reality + | HoloItemPlayerApp | | | x | No | +| Mixed Reality + | HoloShell | | | x | No | +| | Microsoft.AAD.Broker.Plugin | x | x | x | No | +| | Microsoft.AccountsControl | x | x | x | No | +| Hello setup UI | Microsoft.BioEnrollment | x | x | x | No | +| | Microsoft.CredDialogHost | | | x | No | +| | Microsoft.LockApp | x | x | x | No | +| Microsoft Edge | Microsoft.Microsoft.Edge | x | x | x | No | +| | Microsoft.PPIProjection | | x | x | No | +| | Microsoft.Windows. Apprep.ChxApp | | x | x | No | +| | Microsoft.Windows. AssignedAccessLockApp | x | x | x | No | +| | Microsoft.Windows. CloudExperienceHost | x | x | x | No | +| | Microsoft.Windows. ContentDeliveryManager | x | x | x | No | +| Cortana | Microsoft.Windows.Cortana | x | x | x | No | +| | Microsoft.Windows. Holographic.FirstRun | | | x | No | +| | Microsoft.Windows. ModalSharePickerHost | | | x | No | +| | Microsoft.Windows. OOBENetworkCaptivePort | | | x | No | +| | Microsoft.Windows. OOBENetworkConnection | | | x | No | +| | Microsoft.Windows. ParentalControls | x | x | x | No | +| | Microsoft.Windows. SecHealthUI | | | x | No | +| | Microsoft.Windows. SecondaryTileExperience | x | x | x | No | +| | Microsoft.Windows. SecureAssessmentBrowser | | x | x | No | +| Start | Microsoft.Windows. ShellExperienceHost | x | x | x | No | +| Windows Feedback | Microsoft.WindowsFeedback | x | * | * | No | +| | Microsoft.XboxGameCallableUI | x | x | x | No | +| Xbox logon UI | Microsoft.XboxIdentityProvider | x | | | No | +| Contact Support | Windows.ContactSupport | x | x* | x* | In 1511, no.* | +| | Windows.Devicesflow | x | | | No | +| Settings | Windows.ImmersiveControlPanel | x | x | x | No | +| Connect | Windows.MiracastView | x | x | x | No | +| Print UI | Windows.PrintDialog | x | x | x | No | +| Purchase UI | Windows.PurchaseDialog | x | | | No | + +> [!NOTE] +> - The Windows Feedback app changed to the Windows Feedback Hub in version 1607. It's listed in the installed apps table below. +> - As of Windows 10 version 1607, you can use the Optional Features app to uninstall the Contact Support app. + +## Installed Windows apps +Here are the typical installed Windows apps in Windows 10 versions 1511, 1607, and 1703. + +| Name | Full name | 1511 | 1607 | 1703 | Uninstall through UI? | +|--------------------|-----------------------------------------|------|------|------|---------------------------| +| Remote Desktop | Microsoft.RemoteDesktop | | x | x | Yes | +| PowerBI | Microsoft.Microsoft PowerBIforWindows | | x | x | Yes | +| Candy Crush | king.com.CandyCrushSodaSaga | x | | | Yes | +| Code Writer | ActiproSoftwareLLC.562882FEEB491 | | x | x | Yes | +| Eclipse Manager | 46928bounde.EclipseManager | | x | x | Yes | +| Pandora | PandoraMediaInc.29680B314EFC2 | | x | x | Yes | +| Photoshop Express | AdobeSystemIncorporated. AdobePhotoshop | | x | x | Yes | +| Duolingo | D5EA27B7.Duolingo- LearnLanguagesforFree | | | x | Yes | +| Network Speed Test | Microsoft.NetworkSpeedTest | | x | x | Yes | +| Paid Wi-FI | | x | | | Yes | +| Skype Video | | x | | | Yes | +| Twitter | | x | | | Yes | +| PicArts | | x | | | Yes | +| Minecraft | | x | | | Yes | +| Flipboard | | x | | | Yes | + +## Provisioned Windows apps +Here are the typical provisioned Windows apps in Windows 10 versions 1511, 1607, and 1703. + +| Name | Full name | 1511 | 1607 | 1703 | Uninstall through UI? | +|---------------------------------|----------------------------------------|------|------|------|---------------------------| +| 3D Builder | Microsoft.3DBuilder | x | | x | Yes | +| App Connector | Microsoft.Appconnector | x | | | Yes, through Settings app | +| Money | Microsoft.BingFinance | x | | | Yes | +| News | Microsoft.BingNews | x | * | * | Yes | +| Sports | Microsoft.BingSports | x | | | Yes | +| Weather | Microsoft.BingWeather | x | x | x | No | +| Phone Companion | Microsoft.CommsPhone | x | | | Yes | +| | Microsoft.ConnectivityStore | x | | | No | +| | Microsoft.DesktopAppInstaller | | x | x | Yes, through Settings app | +| Get Started/Tips | Microsoft.Getstarted | x | x | x | Yes | +| Messaging | Microsoft.Messaging | x | x | x | No | +| Microsoft 3D Viewer | Microsoft.Microsoft3DViewer | | | x | No | +| Get Office | Microsoft.MicrosoftOfficeHub | x | x | x | Yes | +| Solitaire | Microsoft.Microsoft SolitaireCollection | x | x | x | Yes | +| Sticky Notes | Microsoft.MicrosoftStickyNotes | | x | x | No | +| OneNote | Microsoft.Office.OneNote | x | x | x | No | +| Sway | Microsoft.Office.Sway | x | * | * | Yes | +| | Microsoft.OneConnect | | x | x | No | +| Paint 3D | Microsoft.MSPaint | | | x | No | +| People | Microsoft.People | x | x | x | No | +| Get Skype/Skype (preview)/Skype | Microsoft.SkypeApp | x | x | x | Yes | +| | Microsoft.StorePurchaseApp | | x | x | No | +| | Microsoft.Wallet | | | x | No | +| Photos | Microsoft.Windows.Photos | x | x | x | No | +| Alarms & Clock | Microsoft.WindowsAlarms | x | x | x | No | +| Calculator | Microsoft.WindowsCalculator | x | x | x | No | +| Camera | Microsoft.WindowsCamera | x | x | x | No | +| Mail and Calendar | Microsoft.windows communicationsapps | x | x | x | No | +| Feedback Hub | Microsoft.WindowsFeedbackHub | * | x | x | Yes | +| Maps | Microsoft.WindowsMaps | x | x | x | No | +| Phone | Microsoft.WindowsPhone | x | | | No | +| Voice Recorder | Microsoft.SoundRecorder | x | x | x | No | +| Store | Microsoft.WindowsStore | x | x | x | No | +| Xbox | Microsoft.XboxApp | x | x | x | No | +| | Microsoft.XboxGameOverlay | | | x | No | +| | Microsoft.XboxIdentityProvider | * | x | x | No | +| Groove | Microsoft.ZuneMusic | x | x | x | No | +| Movies & TV | Microsoft.ZuneVideo | x | x | x | No | +| | Microsoft.XboxSpeech ToTextOverlay | | | x | No | + +> [!NOTE] +> - As of Windows 10, version 1607, News and Sway are installed apps. +> - Both Feedback Hub and Microsoft.XboxIdentityProvider were installed apps in version 1511 and provisioned apps in versions 1607 and later. \ No newline at end of file diff --git a/windows/application-management/change-history-for-application-management.md b/windows/application-management/change-history-for-application-management.md index 7641745172..5178cf9050 100644 --- a/windows/application-management/change-history-for-application-management.md +++ b/windows/application-management/change-history-for-application-management.md @@ -8,6 +8,7 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: high author: jdeckerms +ms.date: 09/15/2017 --- # Change history for Configure Windows 10 @@ -17,7 +18,8 @@ This topic lists new and updated topics in the [Configure Windows 10](index.md) ## September 2017 | New or changed topic | Description | | --- | --- | -| [Per-user services in Windows](per-user-services-in-windows.md) | New | +| [Per-user services in Windows 10](per-user-services-in-windows.md) | New | +| [Understand the different apps included in Windows 10](apps-in-windows-10.md) | New | ## July 2017 | New or changed topic | Description | diff --git a/windows/application-management/index.md b/windows/application-management/index.md index d6c32fbe93..17767877fd 100644 --- a/windows/application-management/index.md +++ b/windows/application-management/index.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: jdeckerms ms.localizationpriority: medium +ms.date: 09/15/2017 --- # Windows 10 application management @@ -20,5 +21,7 @@ Learn about managing applications in Windows 10 and Windows 10 Mobile clients. |---|---| |[App-V](app-v/appv-getting-started.md)| Microsoft Application Virtualization (App-V) for Windows 10 enables organizations to deliver Win32 applications to users as virtual applications| |[Sideload apps in Windows 10](sideload-apps-in-windows-10.md)| Requirements and instructions for side-loading LOB applications on Windows 10 and Windows 10 Mobile clients| +|[Per User services in Windows 10](sideload-apps-in-windows-10.md)| Overview of per user services and instructions for viewing and disabling them in Windows 10 and Windows 2016| +|[Understand apps in Windows 10](apps-in-windows-10.md)| Overview of the different apps included by default in Windows 10 Enterprise| | [Service Host process refactoring](svchost-service-refactoring.md) | Changes to Service Host grouping in Windows 10 | | [Deploy app updgrades on Windows 10 Mobile](deploy-app-upgrades-windows-10-mobile.md) | How to upgrade apps on Windows 10 Mobile | From 84c952fb070b4ac5251f9b38ee7c0741ab406ddc Mon Sep 17 00:00:00 2001 From: Celeste de Guzman Date: Fri, 15 Sep 2017 18:23:48 -0700 Subject: [PATCH 114/146] updated to address PM feedback --- education/windows/change-history-edu.md | 6 ++++++ education/windows/use-set-up-school-pcs-app.md | 7 +++++-- 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/education/windows/change-history-edu.md b/education/windows/change-history-edu.md index 699111447d..f5cf7d1f00 100644 --- a/education/windows/change-history-edu.md +++ b/education/windows/change-history-edu.md @@ -15,6 +15,12 @@ ms.date: 08/01/2017 This topic lists new and updated topics in the [Windows 10 for Education](index.md) documentation. +## September 2017 + +| New or changed topic | Description | +| --- | ---- | +| [Use the Set up School PCs app ](use-set-up-school-pcs-app.md) | Updated the prerequisites to provide more clarification. | + ## August 2017 | New or changed topic | Description | diff --git a/education/windows/use-set-up-school-pcs-app.md b/education/windows/use-set-up-school-pcs-app.md index ca1953e1e0..860f0fa609 100644 --- a/education/windows/use-set-up-school-pcs-app.md +++ b/education/windows/use-set-up-school-pcs-app.md @@ -9,7 +9,7 @@ ms.pagetype: edu ms.localizationpriority: high author: CelesteDG ms.author: celested -ms.date: 08/01/2017 +ms.date: 09/18/2017 --- # Use the Set up School PCs app @@ -103,7 +103,10 @@ You can watch the descriptive audio version here: [Microsoft Education: Use the - [Download the latest Set up School PCs app from the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4ls40). - Install the app on your work PC and make sure you're connected to your school's network. -- You must be an administrator on Office 365 and Azure Active Directory, and have Microsoft Store for Education configured. It's best if you sign up for and configure Intune for Education before using the Set up School PCs app. +- You must have Office 365 and Azure Active Directory. +- You must have the Microsoft Store for Education configured. +- You must be a global admin, store admin, or purchaser in the Microsoft Store for Education. +- It's best if you sign up for and [configure Intune for Education](get-started/use-intune-for-education.md) before using the Set up School PCs app. - Have a USB drive, 1 GB or larger, to save the provisioning package. We recommend an 8 GB or larger USB drive if you're installing Office. ## Set up School PCs step-by-step From 67cd6ba7d6051ff5feb201b5b5ed7d37b860ef3d Mon Sep 17 00:00:00 2001 From: Celeste de Guzman Date: Fri, 15 Sep 2017 18:49:47 -0700 Subject: [PATCH 115/146] fixed link --- education/windows/use-set-up-school-pcs-app.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/education/windows/use-set-up-school-pcs-app.md b/education/windows/use-set-up-school-pcs-app.md index 860f0fa609..72ee15e1ab 100644 --- a/education/windows/use-set-up-school-pcs-app.md +++ b/education/windows/use-set-up-school-pcs-app.md @@ -106,7 +106,7 @@ You can watch the descriptive audio version here: [Microsoft Education: Use the - You must have Office 365 and Azure Active Directory. - You must have the Microsoft Store for Education configured. - You must be a global admin, store admin, or purchaser in the Microsoft Store for Education. -- It's best if you sign up for and [configure Intune for Education](get-started/use-intune-for-education.md) before using the Set up School PCs app. +- It's best if you sign up for and [configure Intune for Education](../get-started/use-intune-for-education.md) before using the Set up School PCs app. - Have a USB drive, 1 GB or larger, to save the provisioning package. We recommend an 8 GB or larger USB drive if you're installing Office. ## Set up School PCs step-by-step From 290f190a50bdb6b67928b3522f7f8fc6eb3de673 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 18 Sep 2017 18:04:31 +0000 Subject: [PATCH 116/146] Merged PR 3242: Fix Store terms and links --- ...ace-app-with-windows-store-for-business.md | 19 +++++++++++-------- 1 file changed, 11 insertions(+), 8 deletions(-) diff --git a/devices/surface/deploy-surface-app-with-windows-store-for-business.md b/devices/surface/deploy-surface-app-with-windows-store-for-business.md index 1e6ca989c9..aceac9a792 100644 --- a/devices/surface/deploy-surface-app-with-windows-store-for-business.md +++ b/devices/surface/deploy-surface-app-with-windows-store-for-business.md @@ -1,6 +1,6 @@ --- title: Deploy Surface app with Microsoft Store for Business or Microsoft Store for Education (Surface) -description: Find out how to add and download Surface app with Windows Store for Business or Microsoft Store for Education, as well as install Surface app with PowerShell and MDT. +description: Find out how to add and download Surface app with Microsoft Store for Business or Microsoft Store for Education, as well as install Surface app with PowerShell and MDT. keywords: surface app, app, deployment, customize ms.prod: w10 ms.mktglfcycl: deploy @@ -31,11 +31,11 @@ The Surface app is a lightweight Windows Store app that provides control of many * Quick access to support documentation and information for your device -If your organization is preparing images that will be deployed to your Surface devices, you may want to include the Surface app (formerly called the Surface Hub) in your imaging and deployment process instead of requiring users of each individual device to download and install the app from the Windows Store or your Windows Store for Business. +If your organization is preparing images that will be deployed to your Surface devices, you may want to include the Surface app (formerly called the Surface Hub) in your imaging and deployment process instead of requiring users of each individual device to download and install the app from the Microsoft Store or your Microsoft Store for Business. ##Surface app overview -The Surface app is available as a free download from the [Windows Store](https://www.microsoft.com/store/apps/Surface/9WZDNCRFJB8P). Users can download and install it from the Windows Store, but if your organization uses Microsoft Store for Business instead, you will need to add it to your store’s inventory and possibly include the app as part of your Windows deployment process. These processes are discussed throughout this article. For more information about Microsoft Store for Business, see [Microsoft Store for Business](https://technet.microsoft.com/windows/store-for-business) in the Windows TechCenter. +The Surface app is available as a free download from the [Microsoft Store](https://www.microsoft.com/store/apps/Surface/9WZDNCRFJB8P). Users can download and install it from the Microsoft Store, but if your organization uses Microsoft Store for Business instead, you will need to add it to your store’s inventory and possibly include the app as part of your Windows deployment process. These processes are discussed throughout this article. For more information about Microsoft Store for Business, see [Microsoft Store for Business](https://technet.microsoft.com/windows/store-for-business) in the Windows TechCenter. ##Add Surface app to a Microsoft Store for Business account @@ -45,7 +45,7 @@ Before users can install or deploy an app from a company’s Microsoft Store for 2. Log on to the portal. -3. Enable offline licensing: click **Manage->Store settings**, and then select the **Show offline licensed apps to people shopping in the store** checkbox, as shown in Figure 1. For more information about Microsoft Store for Business app licensing models, see [Apps in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing_model).

        +3. Enable offline licensing: click **Manage->Store settings**, and then select the **Show offline licensed apps to people shopping in the store** checkbox, as shown in Figure 1. For more information about Microsoft Store for Business app licensing models, see [Apps in Microsoft Store for Business](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing_model).

        ![Show offline licenses apps checkbox](images/deploysurfapp-figure1-enablingapps.png "Show offline licenses apps checkbox")
        *Figure 1. Enable apps for offline use* @@ -70,7 +70,7 @@ Before users can install or deploy an app from a company’s Microsoft Store for ##Download Surface app from a Microsoft Store for Business account After you add an app to the Windows Store for Business account in Offline mode, you can download and add the app as an AppxBundle to a deployment share. 1. Log on to the Microsoft Store for Business account at https://businessstore.microsoft.com. -2. Click **Manage->Apps & software**. A list of all of your company’s apps is displayed, including the Surface app you added in the [Add Surface app to a Windows Store for Business account](#add-surface-app-to-a-windows-store-for-business-account) section of this article. +2. Click **Manage->Apps & software**. A list of all of your company’s apps is displayed, including the Surface app you added in the [Add Surface app to a Microsoft Store for Business account](#add-surface-app-to-a-microsoft-store-for-business-account) section of this article. 3. Under **Actions**, click the ellipsis (**…**), and then click **Download for offline use** for the Surface app. 4. Select the desired **Platform** and **Architecture** options from the available selections for the selected app, as shown in Figure 4. @@ -78,7 +78,7 @@ After you add an app to the Windows Store for Business account in Offline mode, *Figure 4. Download the AppxBundle package for an app* 5. Click **Download**. The AppxBundle package will be downloaded. Make sure you note the path of the downloaded file because you’ll need that later in this article. -6. Click either the **Encoded license** or **Unencoded license** option. Use the Encoded license option with management tools like System Center Configuration Manager or when you use Windows Imaging and Configuration Designer (Windows ICD). Select the Unencoded license option when you use Deployment Image Servicing and Management (DISM) or deployment solutions based on imaging, including the Microsoft Deployment Toolkit (MDT). +6. Click either the **Encoded license** or **Unencoded license** option. Use the Encoded license option with management tools like System Center Configuration Manager or when you use Windows Configuration Designer to create a provisioning package. Select the Unencoded license option when you use Deployment Image Servicing and Management (DISM) or deployment solutions based on imaging, including the Microsoft Deployment Toolkit (MDT). 7. Click **Generate** to generate and download the license for the app. Make sure you note the path of the license file because you’ll need that later in this article. >[!NOTE] @@ -104,7 +104,10 @@ To download the required frameworks for the Surface app, follow these steps: The following procedure provisions the Surface app onto your computer and makes it available for any user accounts created on the computer afterwards. 1. Using the procedure described in the [How to download Surface app from a Windows Store for Business account](#download-surface-app-from-a-windows-store-for-business-account) section of this article, download the Surface app AppxBundle and license file. 2. Begin an elevated PowerShell session. ->**Note:**  If you don’t run PowerShell as an Administrator, the session won’t have the required permissions to install the app. + + >[!NOTE] + >If you don’t run PowerShell as an Administrator, the session won’t have the required permissions to install the app. + 3. In the elevated PowerShell session, copy and paste the following command: ``` Add-AppxProvisionedPackage –Online –PackagePath \ Microsoft.SurfaceHub_10.0.342.0_neutral_~_8wekyb3d8bbwe.AppxBundle –LicensePath \ Microsoft.SurfaceHub_8wekyb3d8bbwe_a53ef8ab-9dbd-dec1-46c5-7b664d4dd003.xml @@ -130,7 +133,7 @@ Before the Surface app is functional on the computer where it has been provision ##Install Surface app with MDT The following procedure uses MDT to automate installation of the Surface app at the time of deployment. The application is provisioned automatically by MDT during deployment and thus you can use this process with existing images. This is the recommended process to deploy the Surface app as part of a Windows deployment to Surface devices because it does not reduce the cross platform compatibility of the Windows image. -1. Using the procedure described [earlier in this article](#download-surface-app-from-a-windows-store-for-business-account), download the Surface app AppxBundle and license file. +1. Using the procedure described [earlier in this article](#download-surface-app-from-a-microsoft-store-for-business-account), download the Surface app AppxBundle and license file. 2. Using the New Application Wizard in the MDT Deployment Workbench, import the downloaded files as a new **Application with source files**. 3. On the **Command Details** page of the New Application Wizard, specify the default **Working Directory** and for the **Command** specify the file name of the AppxBundle, as follows: From d5d7bad675db3d28adf1e5a171890b6688ebd0c5 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 18 Sep 2017 18:42:47 +0000 Subject: [PATCH 117/146] Merged PR 3247: Renamed Windows Store for Business --- windows/client-management/mdm/TOC.md | 6 +++--- windows/client-management/mdm/applocker-csp.md | 4 ++-- windows/client-management/mdm/assign-seats.md | 4 ++-- .../mdm/bulk-assign-and-reclaim-seats-from-user.md | 4 ++-- .../mdm/data-structures-windows-store-for-business.md | 6 +++--- .../client-management/mdm/enterprise-app-management.md | 2 +- .../mdm/enterprisemodernappmanagement-csp.md | 2 +- windows/client-management/mdm/get-inventory.md | 4 ++-- .../mdm/get-localized-product-details.md | 4 ++-- windows/client-management/mdm/get-offline-license.md | 4 ++-- windows/client-management/mdm/get-product-details.md | 4 ++-- windows/client-management/mdm/get-product-package.md | 4 ++-- windows/client-management/mdm/get-product-packages.md | 4 ++-- windows/client-management/mdm/get-seat.md | 4 ++-- .../mdm/get-seats-assigned-to-a-user.md | 4 ++-- windows/client-management/mdm/get-seats.md | 4 ++-- .../management-tool-for-windows-store-for-business.md | 10 +++++----- .../mdm/new-in-windows-mdm-enrollment-management.md | 10 +++++++++- .../client-management/mdm/reclaim-seat-from-user.md | 4 ++-- .../rest-api-reference-windows-store-for-business.md | 6 +++--- 20 files changed, 51 insertions(+), 43 deletions(-) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 2d6046fef1..8b53725783 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -17,9 +17,9 @@ ## [Enterprise app management](enterprise-app-management.md) ## [Device update management](device-update-management.md) ## [Bulk enrollment](bulk-enrollment-using-windows-provisioning-tool.md) -## [Management tool for the Windows Store for Business](management-tool-for-windows-store-for-business.md) -### [REST API reference for Windows Store for Business](rest-api-reference-windows-store-for-business.md) -#### [Data structures for Windows Store for Business](data-structures-windows-store-for-business.md) +## [Management tool for the Micosoft Store for Business](management-tool-for-windows-store-for-business.md) +### [REST API reference for Micosoft Store for Business](rest-api-reference-windows-store-for-business.md) +#### [Data structures for Micosoft Store for Business](data-structures-windows-store-for-business.md) #### [Get Inventory](get-inventory.md) #### [Get product details](get-product-details.md) #### [Get localized product details](get-localized-product-details.md) diff --git a/windows/client-management/mdm/applocker-csp.md b/windows/client-management/mdm/applocker-csp.md index 7564c89e41..2737a54616 100644 --- a/windows/client-management/mdm/applocker-csp.md +++ b/windows/client-management/mdm/applocker-csp.md @@ -266,9 +266,9 @@ FilePublisherCondition PublisherName="CN=Microsoft Corporation, O=Microsoft Corp You can get the publisher name and product name of apps using a web API. -**To find publisher and product name for Microsoft apps in Windows Store for Business** +**To find publisher and product name for Microsoft apps in Microsoft Store for Business** -1. Go to the Windows Store for Business website, and find your app. For example, Microsoft OneNote. +1. Go to the Microsoft Store for Business website, and find your app. For example, Microsoft OneNote. 2. Copy the ID value from the app URL. For example, Microsoft OneNote's ID URL is https:<\span>//www.microsoft.com/store/apps/onenote/9wzdncrfhvjl, and you'd copy the ID value, **9wzdncrfhvjl**. 3. In your browser, run the Store for Business portal web API, to return a JavaScript Object Notation (JSON) file that includes the publisher and product name values. diff --git a/windows/client-management/mdm/assign-seats.md b/windows/client-management/mdm/assign-seats.md index 510be6e748..f8ba2b865f 100644 --- a/windows/client-management/mdm/assign-seats.md +++ b/windows/client-management/mdm/assign-seats.md @@ -1,6 +1,6 @@ --- title: Assign seat -description: The Assign seat operation assigns seat for a specified user in the Windows Store for Business. +description: The Assign seat operation assigns seat for a specified user in the Microsoft Store for Business. ms.assetid: B42BF490-35C9-405C-B5D6-0D9F0E377552 ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Assign seat -The **Assign seat** operation assigns seat for a specified user in the Windows Store for Business. +The **Assign seat** operation assigns seat for a specified user in the Microsoft Store for Business. ## Request diff --git a/windows/client-management/mdm/bulk-assign-and-reclaim-seats-from-user.md b/windows/client-management/mdm/bulk-assign-and-reclaim-seats-from-user.md index 33f5904925..7b7845d806 100644 --- a/windows/client-management/mdm/bulk-assign-and-reclaim-seats-from-user.md +++ b/windows/client-management/mdm/bulk-assign-and-reclaim-seats-from-user.md @@ -1,6 +1,6 @@ --- title: Bulk assign and reclaim seats from users -description: The Bulk assign and reclaim seats from users operation returns reclaimed or assigned seats in the Windows Store for Business. +description: The Bulk assign and reclaim seats from users operation returns reclaimed or assigned seats in the Microsoft Store for Business. ms.assetid: 99E2F37D-1FF3-4511-8969-19571656780A ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Bulk assign and reclaim seats from users -The **Bulk assign and reclaim seats from users** operation returns reclaimed or assigned seats in the Windows Store for Business. +The **Bulk assign and reclaim seats from users** operation returns reclaimed or assigned seats in the Microsoft Store for Business. ## Request diff --git a/windows/client-management/mdm/data-structures-windows-store-for-business.md b/windows/client-management/mdm/data-structures-windows-store-for-business.md index 7a1bbaa552..d272b736e4 100644 --- a/windows/client-management/mdm/data-structures-windows-store-for-business.md +++ b/windows/client-management/mdm/data-structures-windows-store-for-business.md @@ -1,5 +1,5 @@ --- -title: Data structures for Windows Store for Business +title: Data structures for Microsoft Store for Business MS-HAID: - 'p\_phdevicemgmt.business\_store\_data\_structures' - 'p\_phDeviceMgmt.data\_structures\_windows\_store\_for\_business' @@ -13,10 +13,10 @@ author: nickbrower ms.date: 06/19/2017 --- -# Data structures for Windows Store for Business +# Data structures for Microsoft Store for Business -Here's the list of data structures used in the Windows Store for Business REST APIs: +Here's the list of data structures used in the Microsoft Store for Business REST APIs: - [AlternateIdentifier](#alternateidentifier) - [BulkSeatOperationResultSet](#bulkseatoperationresultset) diff --git a/windows/client-management/mdm/enterprise-app-management.md b/windows/client-management/mdm/enterprise-app-management.md index c203cabb0a..fd6c08650e 100644 --- a/windows/client-management/mdm/enterprise-app-management.md +++ b/windows/client-management/mdm/enterprise-app-management.md @@ -18,7 +18,7 @@ This topic covers one of the key mobile device management (MDM) features in Wind Windows 10 offers the ability for management servers to: -- Install apps directly from the Windows Store for Business +- Install apps directly from the Microsoft Store for Business - Deploy offline Store apps and licenses - Deploy line-of-business (LOB) apps (non-Store apps) - Inventory all apps for a user (Store and non-Store apps) diff --git a/windows/client-management/mdm/enterprisemodernappmanagement-csp.md b/windows/client-management/mdm/enterprisemodernappmanagement-csp.md index ebe9611293..f8a14b5289 100644 --- a/windows/client-management/mdm/enterprisemodernappmanagement-csp.md +++ b/windows/client-management/mdm/enterprisemodernappmanagement-csp.md @@ -68,7 +68,7 @@ The following image shows the EnterpriseModernAppManagement configuration servic - PackageDetails - returns all inventory attributes of the package. This includes all information from PackageNames parameter, but does not validate RequiresReinstall. - RequiredReinstall - Validates the app status of the apps in the inventory query to determine if they require a reinstallation. This attribute may impact system performance depending on the number of apps installed. Requiring reinstall occurs when resource package updates or when the app is in a tampered state. - Source - specifies the app classification that aligns to the existing inventory nodes. You can use a specific filter or if no filter is specified then all sources will be returned. If no value is specified, all classifications are returned. Valid values are: - - AppStore - This classification is for apps that were acquired from Windows Store. These were apps directly installed from Windows Store or enterprise apps from Windows Store for Business. + - AppStore - This classification is for apps that were acquired from Windows Store. These were apps directly installed from Windows Store or enterprise apps from Microsoft Store for Business. - nonStore - This classification is for apps that were not acquired from the Windows Store. - System - Apps that are part of the OS. You cannot uninstall these apps. This classification is read-only and can only be inventoried. - PackageTypeFilter - Specifies one or multiple types of packages you can use to query the user or device. Multiple values must be separated by |. Valid values are: diff --git a/windows/client-management/mdm/get-inventory.md b/windows/client-management/mdm/get-inventory.md index 3c83d22f62..c5268976eb 100644 --- a/windows/client-management/mdm/get-inventory.md +++ b/windows/client-management/mdm/get-inventory.md @@ -1,6 +1,6 @@ --- title: Get Inventory -description: The Get Inventory operation retrieves information from the Windows Store for Business to determine if new or updated applications are available. +description: The Get Inventory operation retrieves information from the Microsoft Store for Business to determine if new or updated applications are available. MS-HAID: - 'p\_phdevicemgmt.get\_seatblock' - 'p\_phDeviceMgmt.get\_inventory' @@ -15,7 +15,7 @@ ms.date: 06/19/2017 # Get Inventory -The **Get Inventory** operation retrieves information from the Windows Store for Business to determine if new or updated applications are available. +The **Get Inventory** operation retrieves information from the Microsoft Store for Business to determine if new or updated applications are available. ## Request diff --git a/windows/client-management/mdm/get-localized-product-details.md b/windows/client-management/mdm/get-localized-product-details.md index eaa61805b9..d735043656 100644 --- a/windows/client-management/mdm/get-localized-product-details.md +++ b/windows/client-management/mdm/get-localized-product-details.md @@ -1,6 +1,6 @@ --- title: Get localized product details -description: The Get localized product details operation retrieves the localization information of a product from the Windows Store for Business. +description: The Get localized product details operation retrieves the localization information of a product from the Micosoft Store for Business. ms.assetid: EF6AFCA9-8699-46C9-A3BB-CD2750C07901 ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Get localized product details -The **Get localized product details** operation retrieves the localization information of a product from the Windows Store for Business. +The **Get localized product details** operation retrieves the localization information of a product from the Micosoft Store for Business. ## Request diff --git a/windows/client-management/mdm/get-offline-license.md b/windows/client-management/mdm/get-offline-license.md index 3bf57d69fb..292398084a 100644 --- a/windows/client-management/mdm/get-offline-license.md +++ b/windows/client-management/mdm/get-offline-license.md @@ -1,6 +1,6 @@ --- title: Get offline license -description: The Get offline license operation retrieves the offline license information of a product from the Windows Store for Business. +description: The Get offline license operation retrieves the offline license information of a product from the Micosoft Store for Business. ms.assetid: 08DAD813-CF4D-42D6-A783-994A03AEE051 ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Get offline license -The **Get offline license** operation retrieves the offline license information of a product from the Windows Store for Business. +The **Get offline license** operation retrieves the offline license information of a product from the Micosoft Store for Business. ## Request diff --git a/windows/client-management/mdm/get-product-details.md b/windows/client-management/mdm/get-product-details.md index f11532b8c5..c35071dc7b 100644 --- a/windows/client-management/mdm/get-product-details.md +++ b/windows/client-management/mdm/get-product-details.md @@ -1,6 +1,6 @@ --- title: Get product details -description: The Get product details operation retrieves the product information from the Windows Store for Business for a specific application. +description: The Get product details operation retrieves the product information from the Micosoft Store for Business for a specific application. ms.assetid: BC432EBA-CE5E-43BD-BD54-942774767286 ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Get product details -The **Get product details** operation retrieves the product information from the Windows Store for Business for a specific application. +The **Get product details** operation retrieves the product information from the Micosoft Store for Business for a specific application. ## Request diff --git a/windows/client-management/mdm/get-product-package.md b/windows/client-management/mdm/get-product-package.md index 30f41c7a77..69792850cb 100644 --- a/windows/client-management/mdm/get-product-package.md +++ b/windows/client-management/mdm/get-product-package.md @@ -1,6 +1,6 @@ --- title: Get product package -description: The Get product package operation retrieves the information about a specific application in the Windows Store for Business. +description: The Get product package operation retrieves the information about a specific application in the Micosoft Store for Business. ms.assetid: 4314C65E-6DDC-405C-A591-D66F799A341F ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Get product package -The **Get product package** operation retrieves the information about a specific application in the Windows Store for Business. +The **Get product package** operation retrieves the information about a specific application in the Micosoft Store for Business. ## Request diff --git a/windows/client-management/mdm/get-product-packages.md b/windows/client-management/mdm/get-product-packages.md index f65a5ec30c..932a85e68d 100644 --- a/windows/client-management/mdm/get-product-packages.md +++ b/windows/client-management/mdm/get-product-packages.md @@ -1,6 +1,6 @@ --- title: Get product packages -description: The Get product packages operation retrieves the information about applications in the Windows Store for Business. +description: The Get product packages operation retrieves the information about applications in the Micosoft Store for Business. ms.assetid: 039468BF-B9EE-4E1C-810C-9ACDD55C0835 ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Get product packages -The **Get product packages** operation retrieves the information about applications in the Windows Store for Business. +The **Get product packages** operation retrieves the information about applications in the Micosoft Store for Business. ## Request diff --git a/windows/client-management/mdm/get-seat.md b/windows/client-management/mdm/get-seat.md index 5c1e6fbba9..c6b07c1a2a 100644 --- a/windows/client-management/mdm/get-seat.md +++ b/windows/client-management/mdm/get-seat.md @@ -1,6 +1,6 @@ --- title: Get seat -description: The Get seat operation retrieves the information about an active seat for a specified user in the Windows Store for Business. +description: The Get seat operation retrieves the information about an active seat for a specified user in the Micosoft Store for Business. ms.assetid: 715BAEB2-79FD-4945-A57F-482F9E7D07C6 ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Get seat -The **Get seat** operation retrieves the information about an active seat for a specified user in the Windows Store for Business. +The **Get seat** operation retrieves the information about an active seat for a specified user in the Micosoft Store for Business. ## Request diff --git a/windows/client-management/mdm/get-seats-assigned-to-a-user.md b/windows/client-management/mdm/get-seats-assigned-to-a-user.md index d7c55310d3..d0227888e5 100644 --- a/windows/client-management/mdm/get-seats-assigned-to-a-user.md +++ b/windows/client-management/mdm/get-seats-assigned-to-a-user.md @@ -1,6 +1,6 @@ --- title: Get seats assigned to a user -description: The Get seats assigned to a user operation retrieves information about assigned seats in the Windows Store for Business. +description: The Get seats assigned to a user operation retrieves information about assigned seats in the Micosoft Store for Business. ms.assetid: CB963E44-8C7C-46F9-A979-89BBB376172B ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Get seats assigned to a user -The **Get seats assigned to a user** operation retrieves information about assigned seats in the Windows Store for Business. +The **Get seats assigned to a user** operation retrieves information about assigned seats in the Micosoft Store for Business. ## Request diff --git a/windows/client-management/mdm/get-seats.md b/windows/client-management/mdm/get-seats.md index 88d7e51517..4b995cc98c 100644 --- a/windows/client-management/mdm/get-seats.md +++ b/windows/client-management/mdm/get-seats.md @@ -1,6 +1,6 @@ --- title: Get seats -description: The Get seats operation retrieves the information about active seats in the Windows Store for Business. +description: The Get seats operation retrieves the information about active seats in the Micosoft Store for Business. ms.assetid: 32945788-47AC-4259-B616-F359D48F4F2F ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Get seats -The **Get seats** operation retrieves the information about active seats in the Windows Store for Business. +The **Get seats** operation retrieves the information about active seats in the Micosoft Store for Business. ## Request diff --git a/windows/client-management/mdm/management-tool-for-windows-store-for-business.md b/windows/client-management/mdm/management-tool-for-windows-store-for-business.md index 0cef4c42b9..02d281e49f 100644 --- a/windows/client-management/mdm/management-tool-for-windows-store-for-business.md +++ b/windows/client-management/mdm/management-tool-for-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Management tool for the Windows Store for Business -description: The Windows Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. +title: Management tool for the Micosoft Store for Business +description: The Micosoft Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. MS-HAID: - 'p\_phdevicemgmt.business\_store\_portal\_management\_tool' - 'p\_phDeviceMgmt.management\_tool\_for\_windows\_store\_for\_business' @@ -13,9 +13,9 @@ author: nickbrower ms.date: 06/19/2017 --- -# Management tool for the Windows Store for Business +# Management tool for the Micosoft Store for Business -The Windows Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. The Store for Business enables several capabilities that are required for the enterprise to manage the lifecycle of applications from acquisition to updates. +The Micosoft Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. The Store for Business enables several capabilities that are required for the enterprise to manage the lifecycle of applications from acquisition to updates. Here's the list of the available capabilities: @@ -26,7 +26,7 @@ Here's the list of the available capabilities: - Custom Line of Business app support –Enables management and distribution of enterprise applications through the Store for Business. - Support for Windows desktop and mobile devices - The Store for Business supports both desktop and mobile devices. -For additional information about Store for Business, see the TechNet topics in [Windows Store for Business](https://technet.microsoft.com/library/mt606951.aspx). +For additional information about Store for Business, see the TechNet topics in [Micosoft Store for Business](https://technet.microsoft.com/library/mt606951.aspx). ## Management services diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index ecdd2bbd8a..8df80081ce 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -102,7 +102,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s
      -

      Management tool for the Windows Store for Business

      +

      Management tool for the Micosoft Store for Business

      New topics. The Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. It enables several capabilities that are required for the enterprise to manage the lifecycle of applications from acquisition to updates.

      @@ -999,6 +999,10 @@ For details about Microsoft mobile device management protocols for Windows 10 s

      Added new policies.

      +Microsoft Store for Business +

      Windows Store for Business name changed to Microsoft Store for Business.

      + + [Policy CSP](policy-configuration-service-provider.md)

      Added the following new policies for Windows 10, version 1709:

        @@ -1371,6 +1375,10 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
      • System/LimitEnhancedDiagnosticDataWindowsAnalytics
      + +Microsoft Store for Business +

      Windows Store for Business name changed to Microsoft Store for Business.

      + The [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://msdn.microsoft.com/en-us/library/mt221945.aspx)

      The Windows 10 enrollment protocol was updated. The following elements were added to the RequestSecurityToken message:

      diff --git a/windows/client-management/mdm/reclaim-seat-from-user.md b/windows/client-management/mdm/reclaim-seat-from-user.md index ee30992445..1319338ddc 100644 --- a/windows/client-management/mdm/reclaim-seat-from-user.md +++ b/windows/client-management/mdm/reclaim-seat-from-user.md @@ -1,6 +1,6 @@ --- title: Reclaim seat from user -description: The Reclaim seat from user operation returns reclaimed seats for a user in the Windows Store for Business. +description: The Reclaim seat from user operation returns reclaimed seats for a user in the Micosoft Store for Business. ms.assetid: E2C3C899-D0AD-469A-A319-31A420472A4C ms.author: maricia ms.topic: article @@ -12,7 +12,7 @@ ms.date: 06/19/2017 # Reclaim seat from user -The **Reclaim seat from user** operation returns reclaimed seats for a user in the Windows Store for Business. +The **Reclaim seat from user** operation returns reclaimed seats for a user in the Micosoft Store for Business. ## Request diff --git a/windows/client-management/mdm/rest-api-reference-windows-store-for-business.md b/windows/client-management/mdm/rest-api-reference-windows-store-for-business.md index 5016c86ac9..d64e4e1b4d 100644 --- a/windows/client-management/mdm/rest-api-reference-windows-store-for-business.md +++ b/windows/client-management/mdm/rest-api-reference-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: REST API reference for Windows Store for Business -description: REST API reference for Windows Store for Business +title: REST API reference for Micosoft Store for Business +description: REST API reference for Micosoft Store for Business MS-HAID: - 'p\_phdevicemgmt.business\_store\_portal\_management\_rest\_api\_reference' - 'p\_phDeviceMgmt.rest\_api\_reference\_windows\_store\_for\_Business' @@ -13,7 +13,7 @@ author: nickbrower ms.date: 06/19/2017 --- -# REST API reference for Windows Store for Business +# REST API reference for Micosoft Store for Business Here's the list of available operations: From 424fb0d6d82a70ec5f8605ff67a0bdee57d0e5fb Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 18 Sep 2017 13:41:16 -0700 Subject: [PATCH 118/146] remove suppression rules --- .../settings-windows-defender-advanced-threat-protection.md | 4 ++-- .../windows-defender-advanced-threat-protection.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 81b976e914..aee67ec43e 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -1,7 +1,7 @@ --- title: Windows Defender Advanced Threat Protection settings -description: Use the menu to configure the time zone, suppression rules, and view license information. -keywords: Windows Defender ATP settings, Windows Defender, cybersecurity threat intelligence, advanced threat protection, time zone, utc, local time, license, suppression rules +description: Use the menu to configure the time zone and view license information. +keywords: Windows Defender ATP settings, Windows Defender, cybersecurity threat intelligence, advanced threat protection, time zone, utc, local time, license search.product: eADQiWindows 10XVcnh ms.prod: w10 ms.mktglfcycl: deploy diff --git a/windows/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md index 4f308f2bea..e208f89717 100644 --- a/windows/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md @@ -101,7 +101,7 @@ Topic | Description [Create and build Power BI reports using Windows Defender ATP data](powerbi-reports-windows-defender-advanced-threat-protection.md) | Understand the security status of your organization, including the status of machines, alerts, and investigations using the Windows Defender ATP reporting feature that integrates with Power BI. [Check sensor state](check-sensor-status-windows-defender-advanced-threat-protection.md) | Check the sensor health state on endpoints to verify that they are providing sensor data and communicating with the Windows Defender ATP service. [Configure Windows Defender ATP preferences settings](preferences-setup-windows-defender-advanced-threat-protection.md) | Use the Preferences setup menu to modify general settings, advanced features, enable the preview experience, email notifications, and the custom threat intelligence feature. -[Windows Defender ATP settings](settings-windows-defender-advanced-threat-protection.md) | Configure time zone settings, suppression rules, and view license information. +[Windows Defender ATP settings](settings-windows-defender-advanced-threat-protection.md) | Configure time zone settings and view license information. [Windows Defender ATP service health](service-status-windows-defender-advanced-threat-protection.md) | Verify that the service health is running properly or if there are current issues. [Troubleshoot Windows Defender Advanced Threat Protection](troubleshoot-windows-defender-advanced-threat-protection.md) | This topic contains information to help IT Pros find workarounds for the known issues and troubleshoot issues in Windows Defender ATP. [Review events and errors on endpoints with Event Viewer](event-error-codes-windows-defender-advanced-threat-protection.md)| Review events and errors associated with event IDs to determine if further troubleshooting steps are required. From 5341e95d5022585935a358d7be6d72be9bb835fd Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 18 Sep 2017 13:53:57 -0700 Subject: [PATCH 119/146] add description for ipv4 and ipv6 --- ...mapping-windows-defender-advanced-threat-protection.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md index 1732c065bd..f775017c4c 100644 --- a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md @@ -53,7 +53,7 @@ Field numbers match the numbers in the images below. | 12 | Sha256 | deviceCustomString6 | 9987474deb9f457ece2a9533a08ec173a0986fa3aa6ac355eeba5b622e4a43f5 | Available for Windows Defender AV alerts. | | 13 | ThreatName | eviceCustomString1 | Trojan:Win32/Skeeyah.A!bit | Available for Windows Defender AV alerts. | | 14 | IpAddress | sourceAddress | 218.90.204.141 | Available for alerts associated to network events. For example, 'Communication to a malicious network destination'. | -| 15 | Url | requestUrl | down.esales360.cn | Availabe for alerts associated to network events. For example, 'Communication to a malicious network destination'. | +| 15 | Url | requestUrl | down.esales360.cn | Available for alerts associated to network events. For example, 'Communication to a malicious network destination'. | | 16 | RemediationIsSuccess | deviceCustomNumber2 | TRUE | Available for Windows Defender AV alerts. ArcSight value is 1 when TRUE and 0 when FALSE. | | 17 | WasExecutingWhileDetected | deviceCustomNumber1 | FALSE | Available for Windows Defender AV alerts. ArcSight value is 1 when TRUE and 0 when FALSE. | | 18 | AlertId | externalId | 636210704265059241_673569822 | Value available for every alert. | @@ -63,12 +63,12 @@ Field numbers match the numbers in the images below. | 22 | Actor | deviceCustomString4 | | Available for alerts related to a known actor group. | | 21+5 | ComputerDnsName | No mapping | liz-bean.contoso.com | The machine fully qualified domain name. Value available for every alert. | | | LogOnUsers | sourceUserId | contoso\liz-bean; contoso\jay-hardee | The domain and user of the interactive logon user/s at the time of the event. Note: For machines on Windows 10 version 1607, the domain information will not be available. | -| | InternalIPv4List | No mapping | 192.168.1.7, 10.1.14.1 | | -| | InternalIPv4List | No mapping | fd30:0000:0000:0001:ff4e:003e:0009:000e, FE80:CD00:0000:0CDE:1257:0000:211E:729C | | +| | InternalIPv4List | No mapping | 192.168.1.7, 10.1.14.1 | List of IPV4 internal IPs for active network interfaces. | +| | InternalIPv6List | No mapping | fd30:0000:0000:0001:ff4e:003e:0009:000e, FE80:CD00:0000:0CDE:1257:0000:211E:729C | List of IPV6 internal IPs for active network interfaces. | | Internal field | LastProcessedTimeUtc | No mapping | 2017-05-07T01:56:58.9936648Z | Time when event arrived at the backend. This field can be used when setting the request parameter for the range of time that alerts are retrieved. | | | Not part of the schema | deviceVendor | | Static value in the ArcSight mapping - 'Microsoft'. | | | Not part of the schema | deviceProduct | | Static value in the ArcSight mapping - 'Windows Defender ATP'. | -| | Not part of the schema | deviceVersion | | Static value in the ArcSight mapping - '2.0', used to identify the mapping versions. |1234567891011121314151617181920212223242526272829303132 +| | Not part of the schema | deviceVersion | | Static value in the ArcSight mapping - '2.0', used to identify the mapping versions. ![Image of alert with numbers](images/atp-alert-page.png) From 4c3c8d03d60314172f3c73b11a9ced0e1489fdeb Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 18 Sep 2017 20:57:38 +0000 Subject: [PATCH 120/146] Merged PR 3250: Update/BranchReadinessLevel in Policy CSP --- .../new-in-windows-mdm-enrollment-management.md | 1 + windows/client-management/mdm/policy-csp-update.md | 14 +++++++++----- 2 files changed, 10 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 8df80081ce..38b240b6b4 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1374,6 +1374,7 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
    • Search/AllowCloudSearch
    • System/LimitEnhancedDiagnosticDataWindowsAnalytics
    +

    Added new settings to Update/BranchReadinessLevel policy in Windows 10 version 1709.

    Microsoft Store for Business diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index e3a796b41d..1bf1c34365 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -471,8 +471,12 @@ This policy is accessible through the Update setting in the user interface or Gr

    The following list shows the supported values: -- 16 (default) – User gets all applicable upgrades from Current Branch (CB). -- 32 – User gets upgrades from Current Branch for Business (CBB). +- 2 {0x2} - Windows Insider build - Fast (added in Windows 10, version 1709) +- 4 {0x4} - Windows Insider build - Slow (added in Windows 10, version 1709) +- 8 {0x8} - Release Windows Insider build (added in Windows 10, version 1709) +- 16 {0x10} - (default) Semi-annual Channel (Targeted). Device gets all applicable feature updates from Semi-annual Channel (Targeted). +- 32 {0x20} - Semi-annual Channel. Device gets feature updates from Semi-annual Channel. + @@ -1253,12 +1257,12 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego > Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in [Changes in Windows 10, version 1607 for update management](device-update-management.md#windows10version1607forupdatemanagement). You can continue to use RequireDeferUpgrade for Windows 10, version 1511 devices. -

    Allows the IT admin to set a device to CBB train. +

    Allows the IT admin to set a device to Semi-Annual Channel train.

    The following list shows the supported values: -- 0 (default) – User gets upgrades from Current Branch. -- 1 – User gets upgrades from Current Branch for Business. +- 0 (default) – User gets upgrades from Semi-Annual Channel (Targeted). +- 1 – User gets upgrades from Semi-Annual Channel. From dd7bacf4d7169aa9c0dfab20847df41b9b110d09 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 18 Sep 2017 21:11:56 +0000 Subject: [PATCH 121/146] Merged PR 3254: Fixed Store reference --- ...oy-surface-app-with-windows-store-for-business.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/devices/surface/deploy-surface-app-with-windows-store-for-business.md b/devices/surface/deploy-surface-app-with-windows-store-for-business.md index aceac9a792..52626b026e 100644 --- a/devices/surface/deploy-surface-app-with-windows-store-for-business.md +++ b/devices/surface/deploy-surface-app-with-windows-store-for-business.md @@ -31,11 +31,11 @@ The Surface app is a lightweight Windows Store app that provides control of many * Quick access to support documentation and information for your device -If your organization is preparing images that will be deployed to your Surface devices, you may want to include the Surface app (formerly called the Surface Hub) in your imaging and deployment process instead of requiring users of each individual device to download and install the app from the Microsoft Store or your Microsoft Store for Business. +If your organization is preparing images that will be deployed to your Surface devices, you may want to include the Surface app (formerly called the Surface Hub) in your imaging and deployment process instead of requiring users of each individual device to download and install the app from the Windows Store or your Microsoft Store for Business. ##Surface app overview -The Surface app is available as a free download from the [Microsoft Store](https://www.microsoft.com/store/apps/Surface/9WZDNCRFJB8P). Users can download and install it from the Microsoft Store, but if your organization uses Microsoft Store for Business instead, you will need to add it to your store’s inventory and possibly include the app as part of your Windows deployment process. These processes are discussed throughout this article. For more information about Microsoft Store for Business, see [Microsoft Store for Business](https://technet.microsoft.com/windows/store-for-business) in the Windows TechCenter. +The Surface app is available as a free download from the [Windows Store](https://www.microsoft.com/store/apps/Surface/9WZDNCRFJB8P). Users can download and install it from the Windows Store, but if your organization uses Microsoft Store for Business instead, you will need to add it to your store’s inventory and possibly include the app as part of your Windows deployment process. These processes are discussed throughout this article. For more information about Microsoft Store for Business, see [Microsoft Store for Business](https://technet.microsoft.com/windows/store-for-business) in the Windows TechCenter. ##Add Surface app to a Microsoft Store for Business account @@ -49,7 +49,7 @@ Before users can install or deploy an app from a company’s Microsoft Store for ![Show offline licenses apps checkbox](images/deploysurfapp-figure1-enablingapps.png "Show offline licenses apps checkbox")
    *Figure 1. Enable apps for offline use* -4. Add Surface app to your Micrososft Store for Business account by following this procedure: +4. Add Surface app to your Microsoft Store for Business account by following this procedure: * Click the **Shop** menu. * In the search box, type **Surface app**, and then click the search icon. * After the Surface app is presented in the search results, click the app’s icon. @@ -68,7 +68,7 @@ Before users can install or deploy an app from a company’s Microsoft Store for * Click **OK**. ##Download Surface app from a Microsoft Store for Business account -After you add an app to the Windows Store for Business account in Offline mode, you can download and add the app as an AppxBundle to a deployment share. +After you add an app to the Microsoft Store for Business account in Offline mode, you can download and add the app as an AppxBundle to a deployment share. 1. Log on to the Microsoft Store for Business account at https://businessstore.microsoft.com. 2. Click **Manage->Apps & software**. A list of all of your company’s apps is displayed, including the Surface app you added in the [Add Surface app to a Microsoft Store for Business account](#add-surface-app-to-a-microsoft-store-for-business-account) section of this article. 3. Under **Actions**, click the ellipsis (**…**), and then click **Download for offline use** for the Surface app. @@ -102,7 +102,7 @@ To download the required frameworks for the Surface app, follow these steps: ##Install Surface app on your computer with PowerShell The following procedure provisions the Surface app onto your computer and makes it available for any user accounts created on the computer afterwards. -1. Using the procedure described in the [How to download Surface app from a Windows Store for Business account](#download-surface-app-from-a-windows-store-for-business-account) section of this article, download the Surface app AppxBundle and license file. +1. Using the procedure described in the [How to download Surface app from a Microsoft Store for Business account](#download-surface-app-from-a-microsoft-store-for-business-account) section of this article, download the Surface app AppxBundle and license file. 2. Begin an elevated PowerShell session. >[!NOTE] @@ -121,7 +121,9 @@ The following procedure provisions the Surface app onto your computer and makes ``` 4. The Surface app will now be available on your current Windows computer. + Before the Surface app is functional on the computer where it has been provisioned, you must also provision the frameworks described earlier in this article. To provision these frameworks, use the following procedure in the elevated PowerShell session you used to provision the Surface app. + 5. In the elevated PowerShell session, copy and paste the following command: ``` Add-AppxProvisionedPackage –Online –SkipLicense –PackagePath \Microsoft.VCLibs.140.00_14.0.23816.0_x64__8wekyb3d8bbwe.Appx From 9a376f62edb2ffc90e75f8b3bc1aa51e4a2f0bf2 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 18 Sep 2017 14:31:56 -0700 Subject: [PATCH 122/146] add warning --- ...ndpoints-vdi-windows-defender-advanced-threat-protection.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/threat-protection/windows-defender-atp/configure-endpoints-vdi-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/configure-endpoints-vdi-windows-defender-advanced-threat-protection.md index 8d28359a61..8a90f8cb96 100644 --- a/windows/threat-protection/windows-defender-atp/configure-endpoints-vdi-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/configure-endpoints-vdi-windows-defender-advanced-threat-protection.md @@ -33,6 +33,9 @@ Windows Defender ATP supports non-persistent VDI session onboarding. There might You can onboard VDI machines using a single entry or multiple entries for each machine. The following steps will guide you through onboarding VDI machines and will highlight steps for single and multiple entries. +>[!WARNING] +> For environments where there are low resource configurations, the VDI boot proceedure might slow the Windows Defender ATP sensor onboarding. + 1. Open the VDI configuration package .zip file (*WindowsDefenderATPOnboardingPackage.zip*) that you downloaded from the service onboarding wizard. You can also get the package from the [Windows Defender ATP portal](https://securitycenter.windows.com/): a. Click **Endpoint management** > **Clients** on the **Navigation pane**. From 3619cc57ba0e570f72ba67827d9f56eb7a39e2f7 Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Mon, 18 Sep 2017 21:43:01 +0000 Subject: [PATCH 123/146] Merged PR 3259: Merge msfb-12118094 to master add autopilot video, update device file information and sample graphics --- store-for-business/add-profile-to-devices.md | 20 +++++++++++------- .../images/autopilot-process.png | Bin 9361 -> 8131 bytes .../images/msfb-autopilot-csv.png | Bin 0 -> 8466 bytes 3 files changed, 12 insertions(+), 8 deletions(-) create mode 100644 store-for-business/images/msfb-autopilot-csv.png diff --git a/store-for-business/add-profile-to-devices.md b/store-for-business/add-profile-to-devices.md index 0f6cc91a16..2be986c161 100644 --- a/store-for-business/add-profile-to-devices.md +++ b/store-for-business/add-profile-to-devices.md @@ -7,20 +7,20 @@ ms.sitesec: library ms.pagetype: store author: TrudyHa ms.author: TrudyHa -ms.date: 07/05/2107 +ms.date: 09/12/2017 ms.localizationpriority: high --- # Manage Windows device deployment with Windows AutoPilot Deployment **Applies to** - - Windows 10 -> [!IMPORTANT] -> This topic has been updated to reflect the latest functionality, which we are releasing to customers in stages. You may not see all of the options described here until you receive the update. +Windows AutoPilot Deployment Program simplifies device set up for IT Admins. For an overview of benefits, scenarios, and prerequisites, see [Overview of Windows AutoPilot](https://docs.microsoft.com/windows/deployment/windows-10-auto-pilot). -Windows AutoPilot Deployment Program simplifies device set up for IT Admins. For an overview of benefits, scenarios, and prerequisites, see [Overview of Windows AutoPilot](https://docs.microsoft.com/windows/deployment/windows-10-auto-pilot). +Watch this video to learn more about Windows AutoPilot in Micrsoft Store for Business. + + ## What is Windows AutoPilot Deployment Program? In Microsoft Store for Business, you can manage devices for your organization and apply an *AutoPilot deployment profile* to your devices. When people in your organization run the out-of-box experience on the device, the profile configures Windows based on the AutoPilot deployment profile you applied to the device. @@ -54,9 +54,13 @@ To manage devices through Microsoft Store for Business and Education, you'll nee ### Device information file format Columns in the device information file need to use this naming and be in this order: -- Column 1: Device Serial Number -- Column 2: Windows Product ID -- Column 3: Hardware Hash +- Column A: Device Serial Number +- Column B: Windows Product ID +- Column C: Hardware Hash + +Here's a sample device information file: + +![Notepad file showing example entries for Column A (Device Serial Number), Column B (Windows Product ID), and Column C (Hardware Hash).](images/msfb-autopilot-csv.png) When you add devices, you need to add them to an *AutoPilot deployment group*. Use these groups to apply AutoPilot deployment profiles to a group of devices. The first time you add devices to a group, you'll need to create an AutoPilot deployment group. diff --git a/store-for-business/images/autopilot-process.png b/store-for-business/images/autopilot-process.png index 491b8c0ef0e40126a8cd01c10805e4f8aa998f67..56c379fd5f176f51e56382b36d70142135b7b9b5 100644 GIT binary patch literal 8131 zcmcI}XH=8hm$#xQMFj!rhysEXsnVMwMY@7?L+@1~A#?;qq;~>HkrKE-=sf}HAf3=# zKtLgsgbs?7dBFL5@16JkG9M;urJStu?6c2r_q{`&X((MMp(nX;;lg$0r}A1CE)d87 zze9-#fX{pJ<7L3tMK>)axeLYpj4Qz6vdv@l#}_V?MUftv5dv%CS5FPxE?l4hpS>^6 zS~GiGxWKHhEdTh0hcPbgryF%=TF0FK7pigD=qZzG`-=P|Q@0Igk&gwI4ry(slom}y zV@jzY$|t3ckL2X8ib_O3x^r2M=1ve8-lg%=@9AxC z87iWsDQcXgp7cMJsuCa+NUYUd%yrXT*ovt8P}b&4FPdgSG2pEBPQ)&p7x@d1VpV|9 zG)~NI|7sjNa(5fmoPCg#e=?ducIvzqQ=b(Vq{LV0KI{2&`}@eqNTFVdaibp-eb1Y2 zCgVvWZYWm&O70IyIYq;)wb{kjEH$RSlO-~;@g`_3zlE0M$d68XDCUUp-WSl98*m$h zgj-NLbhJ7pqj>W8`Fu!N&6NyUe+{uTo(S>KIM)b0_vY^AQMPMpThMpmR7&GN+P;}^ z_w!EG!oKX?@ZpxW!Fz1t`R9-NXc7t=i*dJUPfmVqnACeb-eA2fsJlXF{B5FzfGID4 z^W;WcOg9!eBUJA({COdJ8NS?Q#q5N8xz!aAYq5M=)=x@CM&r(kIvaaQ=+}GVx}}de z($1a=h$+Vw*yFrxRQH+&p{!)gEgEEVsMEai;g2M1?}LLoJ383e*|FLZ+q(oM@sY$l zgUPc^RQ_w$IqXQRcQRfJ37J^grlgsj^r_7&@wc>m_c=Sn{GBZL&G>F4H8s}bA%FYa zAuZ>J;!6=}ChL-{7=cvBtXe;Bbr+Y7w^zy1Wqc*X#p#s20$?;sgrs0WL12FhEn!6Q zj_5}5lrAfVJGFmz;F!+}g27-8Hs&}&?HfNe5Y^X9`sjaJY(3+}lW)j8H&(D%?AjUw9bIx#lE>bvju^A?*M$7mcZ3q3ud8j^OT7`= zV{Q~rF)?-nbfmetxvZ>=hR^uj<|S#5pKf9Rw4VTIb$h<}gMD@VtWUebhWeU~XFM|3 zU>WhEqM}d;1cQP`$zP0*AvLA0KCDXCr0no47wfS_zo$0g7mJmo)l0<9G`!cY zU6bzv|mq%fWfB&8&G@OMOL2obaZqcJa|y!GIyJf&hzA`E_d!) zGxw(|Kpl1d!`I$)pAMMvj4cdCc6Wf8ib=|&G&3`^qC$Jk<^9)NgN9}SkzALwkBXvW zGO$@2Cr>(86l9Bz>?&r?(#!OxI#sKK+t(im9fJnJZ+A13c=}&q1VD#DL zT#6rxzo@zC8yXsdK$x+yvGH+H5s~-U(4xI&lH?nO=85Lo{VzN_Ov^$20fel#YOq=@ zMCe<|ge?UH1;F<7^mH^D-PNUhuSbo-gRn+M|Lzc{$vki13-pqUlmqV2-G^&2yy=@@ zA1?H}qu&7=(>9(~QSX%^ozgg&>=F5`b~@{n*4WtC?(Xiy#6&zE-xP9j6%^bYi)0B{N}UN*JG8v zYymI|hrnAbO#594xku>CpC7yPRbrQ1BvcbEZ*bH|8X*po@L*iOpBit5O;>yF z$kf-|m3wMO3@OTYKIUQ~c~|y=t`{ylS<@Gqzr%+1QnxHESS&w6N2#;hZpbtvh9 z&&pKV8^%So15LSX9RWG8g0=b?*qmkT0NAgW<9hH<5LsPb0793HUtmx>a z7r#?;mEFM??x0Dp-hSFUS@SnpZ2ilP#a=|Q!j50wV2Y`ka6ZJ@l;Y++;n?9Sj>#<} z^B;hr_=7QxP_i550F+u^>VNqAptc;fysM2Uc@XSX{nyo;)~!m_?Ah`hV104i-&+3k04FX+NzuzYfQob1n?{ zsRG)&NS2CRD|XHo#yr*tY`IJnB7@wM1pbB1Yz+$-yhlDbDtGe#yT1b(Ux?mnmB>=1 z){Qef^Dh6mNP9)kF^wq*-M-)Q%MHe^udi-@=H9sg_r5l}$RI)@O!jGC zkAslW)b>&`3eFRx(wFW7+i&Mpy}!eguA7y1klAED?ZmKLmML0YCgZ4|Eq%=)FlaPq z42Vd-P3Vl$eUFgvGOLaRDv)B>U8O1UDHyDbr!w2YGavHhOX({F@mQ~sdgOQ{(KWT( zOn2FJ!pT7~2E&4J58rx(U}Nc@l(Xy8uh7mFa`jLaLaPyaS5I;mj=U7Xo>07*R{NP( z5`G}0{DBv+D^+Hu0`;DsrxqT3jrm?Ymi^90SB;)i3l)bPuCnvTSVSuSk;7eNygnrl z2pn!=(9oY0m6Ei&Y_de;z(SYwMW8e14_fECKO`UA;INZr;q(fn%2r~RC@KDC|-Zj9B}i?}~kP*>CGNyY8E zFD+gcrw6Cr42Z{!ujI`ZG+fgV%>FCOk6poaAAe7vtpqmgFkfY?i<4yN&BAB8nq$uO+aH5dh5MzxiD9g4P(C5x#R-_UovC1TpL<>!Zu{O)ME1ov zE=7SbUV&^aR&fx@G77U`c4mYk@-#-3V+$d9!p&M5O61Y>KV7r~!|n&w>y{aan!P5- zO3pBcxZNs=e;b#E!^`A%DkD<`FHwpwCA|Hp|WD1Q2{E44O^I_IN~$kk?(jKGI*)aJxZ8O}cxs35`u$YDhXHT6LsD31g!h#x z3&%dL1)t0}u&iX2$`%@GQ)J7oui4cL7dYJfo}?qN%?yGDzpqDmKGE7ruE|Wkaf?r# zEfHVsWr$jtx|g>$7Vp#0R&G8Pj3I8Uta==Qn)Gbvyh5cRJB7(KM}bAeHMUFv^i$DR z$F~)>J9`Qzd&O?g2%p-qw~39&zqahpv^ddD7wfZ4oP_%$G%s)m-1CKmFhe>s8b=g3 z4iEtH;rA<3kQrEzytuVacuNSc?p%>XyW=g^d@gvQFDGTt`W84Z;t3jdCS`fB_!HHq zI|UY&%TBiD(~gNx2`E1rTd2gTRY<$640+!8w10%s%yI9xMWU~Hn^85Xm>QrHj$lt$ zT+eT>Ya0SG)w0zI2f!cv`bm#wtNWY1;}pNBz(#g%=41D8muokKedP(e*OQAuu1IIc zqqZRys7-6UU>4Z$()Jh1G!Tc@uOXH?fvU;TWoKIzdrcRBEya$!oI#51R&G{?;eMNR zC!>mPj=sc8%x{-cG&_&t+Rb=T0;9H(k!%_&u!N>8tjfWhzY45p!jX$nC^ZBVmw^F{ z2{A~a^_Doi_FO1$FI~C~s$`4N*J2YE@s)?$D&KU3Exq-rb(kE%R5DlJFd^74#mYU zm)~$37o}%9WXQidZS~{{^GqG|z^2-YT>(-3NX`+jr0f`7;K%RbqY5$Fz48mr5kGbD$qdSa5-&c?$9x^A)5`B735Liz4I+ud1*1=~NXQQR zZw(Eq_uzMgRx;)#n6KiP+!s@YJ8QH}c&8G*=-<{VsftoTV&13ZHu?ltsxIrJ9wUf# zKNKpf<&I!6>tLO@{DD6dCr1gdmH`>CGE)gsxPsD6<}Wuq`|P3Oy0d>6%eNw&uDAJq zio}@T(WSAFnjINy|AXSZO#NT$WRV|nF8;0b5$?-%`FuA={*faCf-hze{d(uDBFbOf z6YhzWy)EQEIcqdm8})fl*oiT_a)CkXSA@%t#7X?bo>=@$-zyBW&9KwxmeUGF|C5VF z#Q#r9ZEX!^%6{fbgeG)5PqhJKLcTth_zec6K63kxnEm?FPJC(9_OVYk!`xR94fAO! zukF5*NKn)h1B`wJre7uV=3dGo3T+ z&||imuHwFPghw3a^~N%Re|k^WiN;$>Y+;?(roX0J-!Jnm zih~#=4b*sg5ce53cx6IVwv+Z(ngMtCKg*04+Y8TGT38z}o|Ku=m?AxgzywHPNCV>s z(JN~aZT2-L^ejNe?Dp;qEB8IF-&n!x?R5uKcxKpzRrZHCu8r3Z-~pX=0#waWc(h(t zQosQcF=6$oh;GTGw%dBTCV&%43kbAOulTov(CT%V=A)>XEs3EA$+WOOvA;Gq{X-&w z{@92T!DFN@FS`}y)WLg6-FqQg%p4rn-xM!-76%i0VDsk+ah|j%Sb?jD!g{=waul77 zscTds<{6S)gU|T%S)urc3vPjH@693%HgujlQD!-z`wKB+I=g|+B3hcWL3Yi$eura( z9Wuj#MT(?z(bd}Nw<9Z!M*gKiH(HvK@c4O!d}ie;&BhV}I(By|xvF3a zn^??))UeTeotia08ATjk54b`Q(&Og2P5Y2K=*I(D{w4RLW z&#wI0(XFx*Eq2F6uh=rvK24}|lY99!sCI4z=%q!`&APf>5mEvWg2H#M{UN#AG zd{)n2wmXtd{$bbFCHPJ5Fl)Qs|>NJ}{p6FxAdU*8ldt(|PqZN^4;i!9T`!(iiMW7Rb^WWQUUCTBPM*Lh*Q`xzg(Rk$@Ot1Fw5kxTN6 z12PjjFJ4r-%za+$j50xjSMV5=W`;~!O3LAUFmt$pF2^Q`IR8Yvp6Qhj_iw%A1>ZQ<R#gD;VS z3FraDz5|HS1bqX>9zTBkI87Awsa|_JoGesIvmv2hW8PZaBDcT#{P}bA#DvFU$Mr+| zvuT9Rae0i^*YB;F%>-$8&N{zWSx?alCY}QsvUz-;WgYV;$~Ka~C9lfK#>e=KP2w9H zKGoKGoSq!-uA*mWXXoZ*B_vc#`gT_{U!95X??%0_0MH9(L$djH8{=KmnTr+b=i29Nd{>8n*ng_ zos~KZOz+I&T6Q{$(&vsmPnS^z44N75<3Ju?X&a#AjUbeJLP7$XV<%rbulQx1pqQAL zh=_=|xUx|G<{m%1sVAE?fKVd&45lK$anghk#F_5^k|Sf5S;ymz4Dk>@hLzT*tgdWb#lvy;;GLHg) zlf0}LkQK(OcBh@@q3?xRB&2Zj*>MX5H8<@_#6vuri@PQJ%XGXz7RLj;czJpG`0@^J zER4_2YMf%3r92*G^gi@{7~JvBp4tQM#%LPQ9|iEbF-S`o%1aTD6D4!F%NpI<+Io5W z=;w|JmCmub)7C=$HdzhRR8^z9KLnHi{{72WduYnt`j6Gj##?jVCw7qe4O#Aq=g*$< zF~Q;RU;DVi;^N#5E3b_^e!wUukB;)l_D00y2;XKo;}iW)agG4etY%aXkxwRsg<3xpxrhx&Sw3f1R7e1NWOTtU>P?6pBD%ovBK>>@$u1ktcqRULJ z06#y!pdiajGcYk7<53%4US7o@lw!tE zJd#5*J%>Zw^&62i#baryCkj!z1_sIl0N>hrdgFtGgEKQe^DRMZ<0S`sd)LXxq9P*H z)zk)gf{rB3%A2_ROCNPo@VA@9@M}>6+RcHi$j{FQrbmOp^Vv#KAFTZSPy0TKmKZlo zq0x^^*oumZc3-qXatq+_p!AsZ_;lFG%{e3_%(#@c=Rp`tO%0~y2W!#za4>XiM>&5v1BTMftyV9pz>A;ibny9DS z)ct*w?XubyK&Db27H!J;YDj1>E}DodB+DaLMe2?;=P{{!?C?d+BG+h`2NLln;Vqaa zr1SFG(H2SJ4;5kewk`zPYA8$93Xo2+zMk$7`WD`%&7e(g5%TMyv%~@0?YX2dTGg4n z*TdrMTk9S2w!oB_@G<%2$0R{mU@RS2uJ(Z!7+2r#dH26q7VaK2p33f#UoJ*dy=DLg P?-!I6G~|orOauQ5#L_S$ literal 9361 zcmcI~Wl&sO(=M*TU4mYzxX77D znhIr5((fWd6X)b2kF*6HFHA=XgHlT>O@S=k+0?pmm?~%9dzqRw^5AuktUs@Q<+|Zl zwo!JJMVZstX+VJ#NP(m}gYrWAdT}A590B>~Jpi}x?^5*t+cIzQ1u&3q6Y%1pE-dVS zIU8n~>UkHT#nQ;-P@;H;pLSg6kPx_lGB)w&q4IKVV60FmyQ;EOz!Au7aKY#4cDg3W zeb!p-y4`iOB-DOv^W+uyenOb&dA7cuw8LBZC;ogo_gt|zs_EqnvrOhaXlC#&;*GEF z3=ao4>)w6z?;uYD0%F3YR>PPHt=`k>C+A$C%=leI*^m9vm`whczL@(M= z=Q5Y$g$kVpAg@Dpw3Vfm=UtK(OZET496Tr#NoZBmZm?Z_7T8RXYtNtj{nYCAg*=!* zhcIU$U`NPqyvYR#IYU6OQF0O8W~F{x#i5~E&q>S^x(F|F&LQ+Z!7lfQ!IykBk?j!z zuHR(j1TLF49c<+T7uos6T)+9*={`PgteUPg+K>i_J(7MszFIY%t&b+Ei(4rC@RQ#~ew*5*Vqk z22iL(Fo!PkY040|UVj67P`InwVfa??eBOrPJ}uQ6^m0H7-n~XbYXT{b^!*y7;t;bHYOKoQEn$dwHw?by$ed zF+kGo%k36;Z1NnvJ<-hyBipw}dl6D&9f5kulEL6y5I$fxFONVsl zd`#$gF2jNZ3-(udAG3wBZB{|qF_+T>@eAE+dcm5|6+kC_Z2i0xj?$|fA`)8%43UO^B|3iG3Zhy#upMIVo{$m zE61!8-@YF_Des{jui~)^k>s~fq`^k4#xjp$%pav(n#j$GE9!f*AJis(JQt_wbuh?q z!cx5H#)EmE{GL{iIvWp_O6^9R^7yh;^>K-UW<6Uuia_0{@sLMz=;dB*qU+}fex%V; za<)8cvz);ZNIjv|oGJLmUY+K>rmFLoM)+RN_-;KH%lT-oUH;SrqU>joEOH8daB#AM zPdxT_WWRuN>VTHCJk`3z9PXVejWGehxGveLrg6j=O+ZUl-1#+J7FH+Jp_zG<3L+g) z6#R(mwz&`cH5ZwPhv=rxrW+XuEaNr}tY4;qsXe95r5(QRU_j})|xZG&5 zul+|FGjB-Y+oW?aqdlk8pvFjEQ;WC!E}s$87BbOCIpoGDsSP3lhUd@4b zth~(qL+*OqAQsto-WfKq=EdTDP+Xsvq1Ff=*`K7S&<&Wo>^ps$rcC5NLo@Kwl1#w& zP$gNQaw^WF4V>Pqom(t>j9?bPQGWRq?0&qNk*BaxOX(N6Jk-I$OhP4($`7JOzR?P9 zKbbsHMq7!=eqYqmnK0!A@jjL~DlN}gC!SWjkF3EX*drxECN(?Cln7O7#@F~X#eG{U zF8yq$hBp^xPrWhTL_8*yFuTdDt*>}Q`+buU{jXJpn2J~J7fG_ezm>_8?!c~gK^|1S zis66wl!louKk9UIWSrvm#3eAQGw-zpo-|W)D*kee3_A)|S#r%bk{3@#*G@t#&-q=Z zSz>(=+tl|8Z-F37StWrA$uGp_j9XyRGVK-wRETpv%WQuLD?tC%n*o^JsrgB=rcR&m z<3i_)LGAj*$x<@<_P{vG{A_1sn72b=`n^tcbLPQwYT;oHg9N6pY;XIe``7pjrk#@j zkDX+aezZa}KRe#68V4Ljo|!+{n)Ap!yN^t&)pj=y#J2ZlblYQC!1%AihF%=tgwtSd zH|f9u?Y?XIHxi7ZBumF)&3w>d={J$z%qe(5KU5!*$gvCuaboyT_9IXEnlUru*K-Iv ziwQEpeuw9&(){~&Y=`&;#75@;z!mzi1-yV7eM0ZXgfkiy&|LrB1blqm9zlfePqzY; zu^S%TtAx`xsH*;xaEuWu!3fpKhBz?=euqn$Dbw){@PFSges1d=Abnj-W^2x*ja0UI1B^(*b} zt!SsVr_Hw;{Ra$k#Bc7E(d(0_)TnF~_&+X=BXCpikC5SfaNNk4%9nKGHeU4~Ai~+s zAV)npW=T5K@&++i8wPrpz<)mjx5Ecg;Hv%#N(e*$`U#SPM+}0l1*I|3Fdn5zy?6AA zS-dSFKAz6NsX6EcRb~(NF%x-5xOa-Xh3NWtb;*gF$*cwF9p)Z^XLfn2jTz2O`A3YK z@EXjkvp;7NloF`sl=TiSfywm;htod5^qJZr6CbPxg^A-*k0fTVciR%>T$}k;HKOjO z^wUn{7k#JeG)Q^UuP}@hO$uY|>Dp;n63{oxN*!QVLM`Y9omFI z-vro-LZo@|@pbUdhBKv&I0CU*vwQY|HGC=BXb?{W) zX@jl)v!Did0vA)ksZWoEAZXfTSbM2%NYqp3K=wB2Go(1>jpB}WW1{=cLxXoR`W&lM z1jNIo?f^8^gBkg8&Q@c3*|!@tdsG&bs26F`g4W!1ih`b(8Mk!4^zpyP!*NsV{b?>> zB2?hE>36N`be3KOJIB*=r3S56;zum-yk>*va%W2DF?8%<D}!UgZduHuTIIqWreE zFS(C3d2Q8I=2_bkkP4o-^) z{%8!*x+mHcvO2lzP!vDRZx?0`l1NSAl>#Bx{L{8;(Yj7>(t9kgyADRRPgdsSC;k+{ zx)&dB^&jc{%-6che#n47s5N(-Q8Hqxh`^6=^Ck_=Bv+33bh_|kw?%YlwyRdw(NI$C zc5wuSXZoU|jDKq)m})A#HNc!B*Zm>svB2T+!G~IMlRUZ0tnC&oxMeNlkDFDCI0YNjw2|H%XPf7&9}V$T7t@#YlTt9z>A0rK%XD z%YIivL*_LD1lKiv{kVsfCKf-^4X6Ch&3Mw_580&0s9VpNNw7lfOM2#7g$AY7nv@*d z(uKPq=f2@l9Mj$&tK0;(;t45FXg+ZG96x0dushHnMs&g_;x2o-2UoJLF2!cP%H3~Oqza{S)Q2%<8P*_O%XEh3I9GX)L* zn;$pzxl3GR+Hmd{+^C~-^Yh<594oHE&r?90 zJg8naIPpKVMT?5xsvwz;{HgT(YeQu>0}r!}@LmjnA;p(r2%KDjG0=#Hih4X#ICiyY zh#@2+=K?0j0)lO8h$Yl*h;GI1)@Y<0eYX!HMv-C+l>rc3apxkilhKt59Iq4=}vs0$%n@A{A5*u;4=rU?mwp zKxw_(OjGQ}Z&PkK5+VB_)@M_MfcGJU2>9{m!@?4jz>d_4ZPG||j5*iCVm2{Z`S8mI z3?&K--oQJ<+@eO`#p#QSO-8+|yYRehfGO+r+OQXE;@vIxFE9e3QYe9-E6~G1$|OkP zI(VJDucQ~eeM#*tg{ZniBua;SkpL(nb=TG()+cU)>Ky->J+cC9TT?cFGt;Bm zQaTbwNx}$G%6?A(vU05hmp%bG9>RV>ng+v^tU-c~kRP+TN5Jpjh@r(G(?Fc$#)m#_ z~SL2$82V-x*%`x<(h3MR8YiZ$dYck&7B6Z-ePAVEAfF)cTk zG>5OlPG6N=l>6lz;IWb$kHxg}K~Y^kMd~rY3un1+9At=Qhai^Dlb5gHyPBiPtBlg_ zSS~mBo2`$~o~5&3%e7+G`NoQNVkjeI`U$-<9^F5_Vi@3DMb3>s$J2}lBMw;lVyg#B z#X8t1gTfv`)NlL@eq6-VKNd957SdjuT71#-y^aRn-tJX_ zrUJgKj7CJvKDFcqAdS^LX5{%%sX%KRRIy@yakC?S|L5=QkHCN?Vs&en%lrl5 z&pM8VG^F-{+EkY6y57q#i=Wj_yAw^t?i|1mele({*)vxMrw=c+*5c`!WX;bNyMo6S zXw?%f)9HN@s9JjpWNT;|tutR!E#s9$476QhNKV%@@NS-$eeE8n%jZ-5EZV`SUnjL#B+WUWLk^g{H_a>_Qbs;8 z{mS!^@|~wYMHbZiabNo&cOn$`VYePrmj&MylIY?S^gMHc_>}CYL6YS=G`sNGYLh>z zaf&@wI2F?3LsH~smaO~(^lvF&#)5~6)n^}i6`Qh2DR6NXKUAN82BwB@N1lG)dg=xF zYr~XmT@!LvJ1r_navVLByDB}`OmD~O2eL(4(p~Dvg1j3=q)2DaBzA`5ZqOza{iutd z|LnW6;>?^ze2a=|E=s?2efOsXzt(^{tqccxPe%-|^ zPEeM2cpGev+o!jER?X~~6%nPRHSe6m)!;A5sKp~OhhQQiTnB zampzY48UAXH_I!%GGr-$yb_~E*6*3`0-|dO^fq&MCJu9Ay=lOG;wptI=|4crk}qC= zY~>!{b^WAwUvkI0u#D}zb!hntim0;bem`?#3$Pzg?iP+?L3zyGiY0A-H zjfBNHXu`mJ{CyKqLEvc~T99W*E1L2|jyf$vRaJWtI$>3ElBzqTa|)co*O4Xq+aSHm zMRLxw%^}iWT6ipSJGFF`^JrUY!CGBabr&R+J;Bi*&Hy*ExYei)gc9^`qA9K~jO)+v zd5#j7HrtHjvW=waWH50eg%q|beD`W6+HY;=AM>`%r?Ac#U@xq7H0p{7$WaGSb`baY z;-xAju;X6lE9a<-VjYOD3x8m*uDIL8dnoR5`B`$HHBBC=(QRownVnXhM?MJ{^|%ky zR(0sc4t`?7HaKnz+DB!=E^vS^1COE|b#nUb{1p88OFzFD_2DHo2sV{vKl=f3)5|UR zApUz@Q;d1Y=Kb3!bsy}lPyG=OnvVdkmHu&I{dOX+yKjh_Axv$z4vk|+!1^rQ$8!RSjm>1>3n5Ft2J!Bqxl8D&$54F6QOdhPKV2%8B#u1CL-oLL6 z)>0>>ja-skY;Ply^w>{V4%S-do+{&tHTZ*BJ{FWEixnJW#MfweK>jwoG!&Qr18ziOb3wswiA&h0zB zT}Lp~dC_A2JCbz{i-S67d#s5CKZ|6w%J0S3G-iCYksF^RJf+5A6`1d&ElB1HK<%xM z3X2@9{lzwk9NAR3a|Wsw^1h3UvN|aohtKoBT?aLu+nGAA9# zJT+PXE(Pun3QJ4)k^H2D6)86m@oWj;q`~pn6gc-BRr*DRdu~5yK;7jf3fm#G_+qsHQUvVl%t8?4t#st_*_jRl)_7% zZ`m;;7W@2^j`LX+Uh^s^i)}C#Ld>pvZ|y_pcdKl_DRoZcZ3*V8?tL9VJDc0rY}3#CW!=rbo$YEpfrL#5 z=?b1{sB2^2klF7z?>=#dQiy*U#SG54OiR#(5MbF=OqYhe@g(r^YH%(vF>)c2Ei6&! z+AAp>l(~bOWxo_z?_P%fcV~NR4B0k@m;%%%YlBTkf97yO%shfQ1d&Ckga-OTrspzJ z-D&9JPp%yu;O;p;qxMqrr2Bid?T$&dMkH0kCNMg-?OlhHZ%|uo{01i{vvHaIRtlk0 zFUx}6?}1}#&&_wZE1Gg>@*K?t=nK_ZIYf}T{nglDm8lrVoPCwx7^Sq-%VWb$8nT;q zd#DeP5!KC-#f;(aATw&rgi~y;x9VJw2}oE%3DI>(pDO$mgkr!!YnJ?(Zv8>@*Jjt< zHHoWt>(pW6i3E4!4q|YMl)S5eR-b2}Ig-m?bFgJZghm7Ybu2x9Z50Hg&x`faaA~g> zM)B!hss7=`Mw?4d5RjF0$Ni=ud>ILnObbC2ny5m~&Ed53% z*saR=E2A&^((31Gq|&{h^NDZxF8?+E{#$6!x^j5Z#^whzK~?e|ejDRK2t907mOb>x z@dZX4poW&AKNfd49SqFF2BYMZXz49m3$TCvHw-i`}7uy*>8YM4zsA|3zE-a=O1YkwFiaJAvy* zO54^*mg3m-k%>`9)%(O`*+jb?SAKh`C?-0kF0OxR&y&m zcYa|m-j22-TwXLlewD}YpZxpJAbnZLaomGgCv(I9!QGyjZ!2S8Y$8b8tJa*CJ(mUm zJM_W(hvm(OAXD-?VeU(?_^`J*#@;u2;kWL?Y+P=t>x5J3kbdMU@X`^sLqG)cc|13n zz9RaW!Oze4c}Ninpy;{q4D~cM7K1xE686X$zD@s;pW_hJStUxuZIIc17sst(y%hiW zRHcBAAaKsM3$OyVb(5&Q+=k~#lC9Xo0I(b>JM?n@2?KV7@axO3X%dl?$I(^qp~l5i zb4C1*em(mO%zkWw{i}7)Ah92Y`cb-KVgy}42D;XOZ0HHDKiq)zr{!D`MH*8VbI{ba z{-S$)DG|_y5K(6yW2PMIp9fl^5*)8G*Hl!eKaquMyxF06fd~xdEPwuX2m)=Plljh+ zA=$T>$o--G^boND+`2hS1Y!{scJEwCVcr8{<*k{V_;_+sf7+){Xi8 z%RDT(Ad1ej`}(jPC+s% z^oCjxyNip9stVVmmE39d*2fgtVT)h^9r{3<9`0C^Tngml%32k#&(5#B4sXXfdl9)Q?EQi;l^X%NB|7dzPk zKALL$l{#UM@fFoB=~5-g*W}zaN~L(wZgZ(=3tjG(+;_1U(gO}7eTAiJ&1@IulNx2b z1IaA9T1#N`)?=Tm(3r(SC>LF36-k^|+G_L?LZF1M;rd?A6{fB1y>yC_gU&|42F6zu za$ort6C~08iz|ZgR@JdNWcs4AlNxyQ9Lw>x^;T4_Sm%rq35TIq;)@R1!2f|L;wru-DX=m0 znK!Stweyl7O=fs!Cb1mRdjH-HK0qhnqs?j~8VX7v&XXsuuqR_5A%r7L{L2v@%=5Ca zped#YbHNQ#wT9@p;h{w%?c4=(ojh)Ly@h$#8rFbdywYU1nJX4nU0od;iy4a|4zpaH z;TmfY!6poGiNLGZIXyi{3b}KXhOR|~p1n6*i}>4}F!!+K9Z!CNV238x7O0`<(0{Kq zz}oP-o*)TrlR64#eN~{v74sY!kb;02cm<<&L~Az)J>Fn7YreOn>)Yyl6*ilgBI~|q z?Qvxhrm(r3kG_Zc{wtKa(LI!qu_$yFoSzAg4@Jjk<7x=E)X!r;cZr0%#L5LvrZN zD_uwDIkI{VD@+fiVHrfl>vO3tE#YD_sbF(Xyxo6ZrzyzDjRtl`vK_F%)FZoH?(})s z+A``SVR~9WhC2kIjnm?nQlq}=(eU)R$~>5Wyjz1%v>KY4nrdnpLVkiD_8%@1IjQeM zUC?MVW5H!BRo0+Fq0Fv)FB>T(k`#bH|9iIs=3YFQapByrqxobrfM=fPi{cq#IF9i9zkWo7N{kHCRQ0#>~x zuiMMcybGf?x5b>!^}tocravo!m`t~vIimm&r`divieDwK+o9v;#1)qdDw6d$Sxq39 z5ds!5F-ot!FqzhVFYRH~8k7_O87D&Gh~qDV-((<@hr7j$&FlqOX5{la5Brg9{nDYM zt^cw))}Xagg^c{>fRJ>GwplPw%qJN$g|u2xBM3o6M1%r?+1ePp2fBd*hgF2AuN5ck z5}2Y2aSZ&cvo|~$qg4E9R3MZ#Xe?O-LdJJbj*gBpX;%6>+9Uh3E5!$KKB3!lb@yX! zs)QWEGCPW3q;UF+l1hov8SZ)lVnY32qygO-CIL;-Z!LZ?{y@!vDIJ_v2Y{4O{97r6 zZES4h<Icmw#)aQtZ)5byM8DseO}0L}bR*@E^SMhMXHQfG&--LfX~eUu%|FVL?h zOW9AtLJ96kqzccmrtk2&KvV3ARE!SYG_SNPPpLpctV2Y4q@*KJO&s zTIS>Eq58|tI$na2Ynu0=S;fbcC41>VI|eYp*azq&d_j0Ue*yf4{oZI4%KzPrV*6H% zKm_bYvN((|9_yRQeIw;r|M+_Tj%HFlMu;17p;&6U9GWrpsJk=RTl{;c2um6a(j*w8 z3*dyHJ#JerX93$V_Ouystf~0Qg-M0U1(B#Tv=W2e2*~8eg(#>(XqAzzLq`5qHGm}2!s>CJYqXQm3Tc%BMSZhaHfVS c@a)AOTa|KIfTa?0j0j3vLP5Mz)F|+O08haIxc~qF diff --git a/store-for-business/images/msfb-autopilot-csv.png b/store-for-business/images/msfb-autopilot-csv.png new file mode 100644 index 0000000000000000000000000000000000000000..d150ae4f42a82258b9254d15076781837665a2f6 GIT binary patch literal 8466 zcma)idpy(c`~S!>l}bgCIYq_WAvuLj5%YEmrW+MjqE&QOE0Lg5erKGQH$~4mr757^=smvZU5K{Rq{mJi2u<7$x8uRQF zH|>6jC*IsGxc9f{1_a1owZVAQ{bINNEh*+D@_K)L@PGA2vzD(iWD1MjazdVc4Tdxy zwtltue{_By{f#r48JA{SN&xpID_LLYJ+1)e-b3!&l=wZsF6nYfEsu94wNNYxge(3U z5yaO3mUmZIz_y^uV6-ThLk%eUC5+JocRf4;^Wko0_J~fCL%mu8xtk+{fpfZQTCZ%> z$RQU6xAY~p17_PB8uV^04C^tJDdnZyGcdGTBUZv(J| zzh;&FL66xs*z1Zrr zXu_RcgFVNzM*gFy;5zWQ=xE*Szs`@7hX1LW>iMOYoZ-NPOP<)IYcWNgdZ+6y?v2oq zS9b=J949oDB8w$udyJOsR_+>N&UP6A0P9~dxnzLuU!YJ_MR?qX1yL0PiB`kGbY{9iO&M0(i=)C$#!Pf zAD&%-Id2WCgAmP7#qCch&UonrF2u1C!gbXju~Ftfugg*T3~^=q4m@+6d3o=Q{;=Ot6)_Cz-{-n z^lnEde{fh^nAgN389TF(R<>CJ6_=na509s0u(=H*b1iuW15KKv=b*+`h=ljAKvB!t zY#IXL3P*+io3OHhA50}8)j`|34Aw83Gf6hc_MOEUjGprwQH7?#9CkuWX~Ei~W0yBD+Cc~=pWdTBI>RBZtRfd9-Qg&)7lz@`S%zo+rJIpS?3w28)OpUuv)GjQ_>7KTAS8H^XgZnr5` z!Lw!GG+(%aT_``F-)#4)+q=<<8b^I7)$etk zL4Kq;T&g%e?`BHwd)M6P>HM)`4N`9*$Hc4Sk9X{g3x#&0smubD^I_%bQ}EVj()fWv z)CC__*0PuRP}2*w@6Q?4A!*^76c&Yo%ew{uq&~bv4Uha<^3+N2(Pvy*+&%#`my^!^ zG(BL0}8^K1>J-h;KarUL__9{eHM$X7&fik1PCXW48Yf zL;^~-|IInh3I9!7Dh2=M8RrH54{DUfI```p*$yQA=v#j2RM>qzpssx8MGeI((+H$JCt_xw%yZ=fbJk*h4;ysw>6016va|d-zCb5*9N20^`fXJq#}P zt@bWAeCBo~tMYLN%S(6CL;f*i%M3X$1qG|rzw$4hxT@7@1uSP1cH)1um_Dk&qL*as zQCoCeI_H?ZTc{er55J1??54O$Ia1i`GL2nzwX!3Ar#$=c$0XA;b89gPKDJYD?hn<#Lq4ugtKf4)J#pu}Vwaiibb|Q@FLk#x7v_|lQ6d+M14ldf) zqCVhOVe6;R2WC=|ZY%C}s7}yJF%M1`)hsf1`oz7acw48WQej>_ZBBcSTx(9C}R8GxH zt%Jzvep?UjKqwy&#dnm`8rvL+w4yxs2k9skO_KhKxz3s2&SbReWmZ7+g?-l;gsX|H zPVb2X?Sc*^1s^B%k6EdGN^@}43ew%N#;EWu9&AO}C&RAX-cna< zQB*ne+e7_GDYx;Q>Q8Ec|`G%f%i>O z-D!juRRwkUHcDE>N2!Voh1wz3j**8LKgBPpWh$CpcuXVIr|uRGa*%KAo0&Ae(;HTQ zN;=Aa12~zP-BI50+t;-vc4z$*+xFYbzX<-v{hve3_!ke6-xn1AE}rZJTJ!=K98`c?aR%;I#To!e;vQz}$r~76slE`WCDU846n@h}B;T#cy1_Kx_;EPDfy{$70_s7kV$Uevp~MiDyr5jb~=I zEPUsHXzT7w*xAgckHl{)#%uepC(-k9tY{1MN&&iAfYLH^nlH)fh578Bn)S`Aa{p&4Sf_NW!k~oX^^89DW?q7Rf$( zGm^6&MmKDt3zfSoaI8+R)>`=n(REY3U$)jzhLdl}+RB9kEvk7Y`cFIxAH$`9(;KQ{o%tGeEn%|B1PTRq6zl3>s#@0x9#`o{P1n&!6%4mr_|6NA~e#~|R z2W*X8sKnN>rY1tCZ=<-=R0J@XB*Q^PB@9ve+@eP+g-c50zGIaf_ohyLYlvA?)a% zcONZc0T{G+(Ils-u*BGpBcAGUC4QhdN;Vz*1hG%!Np65tjx^K~a1vb+v4ERB5D~|1 zxi`jo!)!LR>PA?|21;2`?y_fs-}`VqIG%9tcyEp>squXP@QJ}@Qt;uI_7S6NuBi)% zD91eVO^!v^daL3x%lu?S=W8i#4bcNSM8E1~qop26@qVw31$P7J(MVFTC%2!qA78F> ztAOIW25fXV;R1WUsmE~MxCweSu?--j;@H{YYj4qOZMMn_)%7S@_pwTna7lglQEg6k zc~iPS=w>|XI6YMQntYQ&K}zR(Y?ADovbUzm_&ubQcHOB`f+h^K#xi+HwEr+f7d1ML!;ynWhdqLJc5(bB znx<0d2Ac-$b-y_IO=ItT*FpZ~^Hy>|1oq%_mi05_We$sjX9Ri~_&)4G$m?y|`0nv} zc;X_=hsj__0J7BfC6!*=K~Cmx&RdBr_Ybx)^AUra)>wi9pNgCgx#MUQ1*E& z)EB`X_PoA6%sy%LJwb<|=FM>!JdvL2aqfNp6wEg1DfY|yz4aE8YZi#rXNM4W@hZa= z!zue42mCeE^oy6{#pt3cj7$6AJ{%{W3EVEmzM2K{FLN_1(5awaNgW_f;u{E1Y!`>R zOk)#ypBerf?rRxEFld}Z=+Oe0iI*y*iFdHJLm0(cV&lTV+nTYSR_}EuOHQ?RJZK(} zxP0@G`aD*!eouqMc@jMQ_VfdagtXg+mxqEf%X)9f?iH_4&=~4+d=D#l!#^QXwlLV& zw-L$uwV57Y&C!by$1hC;XST$)#qVJdGsy#i4B#^$#e75Za}0;eDGlHIZg>XJfUxh; z0cY$2!;O;GxAn39NdfC|e{$|K@N)lpVt3*~U)qc4gsRFvp{ZgPV)ag+V0eP+K}E1)AA9_sl@a8vC}8Cg9~5@(&SKy3`wk5(IQxJ| z^ZeP<_U%$oQX`Jj^C{#^^(X_{2N&{=-)s!vos~El8dxoh0P81sgdQm3)p0CzC=6PG zZ~>4JUP6$Bmh{~BBjl&_%Qflzusi(#nU|`_ins~lyc)khIftf;C&)6oO%dZF9Sn1P zob1!Wk!pMAzE!e3Ewp4cUYjvY-8~`MNj2DyRW;xaZ~}f&qbU`~BGzM$J|p+6o06~e zVxQBu|J?;#Jad#||ncvu7al>kSD`#0+UqZcM0)Rfq z^EWs@sVsop?s?0BU|T?%__Q?Ovg4NNr_Jt|+eWL2B`FZNTVVJ{u!YEp%J=yQv*SHqXUO@JZ0M~UV6!Uan4gm;$tP4`KBOt5=^t<|=kd>8$N4A`o9>!h@E`5j1ZZV*O6dnESvr8(J1r6jZG%b6$NtMEc*?vS&8$SGt+mjIb?f~ zpqD=fXzkjtbSOE(psqD*&g*QDR`Jv{&!F}4dckT#RRUbT9~$@Z9;+*FW5}&#;zsBoNK_|!e8;T+x(QN71ttS&^|JftE~zX~WbKn((t>rPmV2{43gy_pao^pR;|0-X zjjVO|YlxQD0x-$T?%9>L4hs4nv zmu7v$9Nt8K%R8MzHfGgmjUfvMis9pedQ)7%3-O!L!4fm+|&A{6lIU z*Yx<-DHRd#)TST4T@pmYOW!-%cg0)E=jvy*Tt?^yg_xZGYe6Vfb!2-(nC}BTPHRYM z=J^e#oyR_j)MKus4_Z!P-q*w#rrLkE#&izL;fTp#L%c4Li!-mp_;LLx$U@#R+g)ur zPFdLOoz-P2dHB3ehxynkRKcl*Az2E&e3_h9MJ&cYz3wm{h)y8j0~zCUf!PZZ(+QmH%2)zL#SVq9|*t#~d@TrNqMyR&$wa;zu%a?7KnOpG#wP(>xBxhv2=t_c5 zj}Ha$)8rUAU90)&HKkv^cE$!VY4oloA76Z%IO()>vX)%kN$K^6^jZ8B&gAE~laxIY zV{Uhck|*KUI1Eh!in=*+g2m~4%EHYhOWdq8F@Q(VU3+*Z$1Q!2b|Mxsr&a5}W}fbi zI}TP=)z=rz)C&S;FC)n_oO|eHgKt;j)?nDrWpq)h+7A)|b<7{+ywG7(7LeJ`vHsE# zv~gJ@Nhb4W`=f_YEUm}7Kk8C34SsoJnmt?|%TJ3UNslB+xW2WsD)`XeP=h>iI7e=r ztx*K^I_y&1!rySyptP~*4Wn^ZNyAK~LQ2~q+0$m%hsBFZnvM?TbQj?a_7*JtCSG0{(I8rWx&@90_ zsp+beoB6=*4rSI8)sh-wdi`!G=ud4{ zo8{0%#)pU9^^Z^@788T3WZ<>D>039)dKxQ^pC-fJocbg{g$_e)3qyKeYygKy14XZ{ z4zJB~c76iA6uP>~VjV12Ci{Qn_ynh;WJHU2 zZ$j%{ag!TEdp!w2vQ+TlFu4K`*iGSjL=!$>zIxPnt%kV~+WjsxeHI+KNfq*`ecxl{ z@9kPe@2CBNaZ3Slxk#mD3DLxk@i&B}NlW1aQsW}#_UF<+f90+jbI+>fK*c)4ZMJv5 zc14~sQw`ucsI6nw0SE31KP6AsJ{r-uW-?wR@#aP}_5H^O_nXy(b#>qJHZ$Pgx+b@9 z^^5=-h4L1jthv;rpy2$}y3)YatV)(VYH_LxILw3Lu`~Qgh|Jtx zs$c@+L@&9`8P2x%S2(<8PzkcFV!tVmMCC3=>8w(>#~DU<|L}x{K1p}JrkquiXNDTOuYNpyRh~dT-R1bd3Ck%f3-4>viC%XpB;N2<2;6ru(FdkjV)g! zwFY7w|ByR?|LE&;SbxVan5N^q_(kg6jej72$j`)%Gkns-lAQ(OK^$JsGBVc|$DDJ< z#ypw7#?8xAs|5d)t7UfJdN#Sr{9>(aW=@3z;&^PDUFeMYqm`h-5XZiV5O%ZvSY0`l zv@&kZ7TJ}MUI;qIK>p5m%*Xy7tmIXEJTk zKKoHbtm>}6q?YkB%h=ukI?jzEC2x3XYDO&&s@Iq{{V87@ofMA literal 0 HcmV?d00001 From 91dd1e1413ea095a9730001f2ebd9e8dcae66635 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Mon, 18 Sep 2017 23:58:04 +0000 Subject: [PATCH 124/146] Updated windows-firewall-with-advanced-security-design-guide.md --- .../windows-firewall-with-advanced-security-design-guide.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-design-guide.md b/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-design-guide.md index 47ca379543..2d55ec35a7 100644 --- a/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-design-guide.md +++ b/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-design-guide.md @@ -1,7 +1,6 @@ --- title: Windows Defender Firewall with Advanced Security Design Guide (Windows 10) -description: Windows Defender Firewall with Advanced Security -Design Guide +description: Windows Defender Firewall with Advanced Security Design Guide ms.assetid: 5c631389-f232-4b95-9e48-ec02b8677d51 ms.prod: w10 ms.mktglfcycl: deploy From b73a5d1e1ecfef69d702e82827d640ef0fc26ad2 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 19 Sep 2017 15:05:53 +0000 Subject: [PATCH 125/146] Merged PR 3268: Removed duplicate note --- windows/configuration/start-layout-xml-desktop.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/configuration/start-layout-xml-desktop.md b/windows/configuration/start-layout-xml-desktop.md index e203016bfa..6454a3fe7c 100644 --- a/windows/configuration/start-layout-xml-desktop.md +++ b/windows/configuration/start-layout-xml-desktop.md @@ -32,8 +32,7 @@ On Windows 10 for desktop editions, the customized Start works by: >[!NOTE] >Using the layout modification XML to configure Start is not supported with roaming user profiles. For more information, see [Deploy Roaming User Profiles](https://technet.microsoft.com/en-US/library/jj649079.aspx). ->[!NOTE] ->Using the layout modification XML to configure Start is not supported with roaming user profiles. For more information, see [Deploy Roaming User Profiles](https://technet.microsoft.com/library/jj649079.aspx). + ## LayoutModification XML From 5d18848f5893d79530ce855e07424a74ac2b2271 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Tue, 19 Sep 2017 18:58:23 +0000 Subject: [PATCH 126/146] Merged PR 3274: Fixed a typo in AutoPilot intro --- windows/deployment/windows-10-auto-pilot.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-10-auto-pilot.md b/windows/deployment/windows-10-auto-pilot.md index 4bcaef04a8..7f6cdc5a1c 100644 --- a/windows/deployment/windows-10-auto-pilot.md +++ b/windows/deployment/windows-10-auto-pilot.md @@ -18,7 +18,7 @@ ms.date: 06/30/2017 - Windows 10 -Windows AutoPilot is a collection of technologies used to setup and pre-configure new devices, getting them ready for productive use. In addition, you can use Windows AutoPilot to reset, repurpose and recover devices.
    +Windows AutoPilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. In addition, you can use Windows AutoPilot to reset, repurpose and recover devices.
    This solution enables an IT department to achieve the above with little to no infrastructure to manage, with a process that's easy and simple. ## Benefits of Windows AutoPilot From c6d4a988bd7e1c6020925e3e3e8d320df243575b Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 19 Sep 2017 20:19:24 +0000 Subject: [PATCH 127/146] Merged PR 3275: Added "and later" after version 1607 Added "and later" after version 1607 --- windows/deployment/usmt/usmt-common-issues.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/usmt/usmt-common-issues.md b/windows/deployment/usmt/usmt-common-issues.md index 12589a4f94..4e747b351a 100644 --- a/windows/deployment/usmt/usmt-common-issues.md +++ b/windows/deployment/usmt/usmt-common-issues.md @@ -229,7 +229,7 @@ There are three typical causes for this issue. **Description:** You are using USMT to migrate profiles from one installation of Windows 10 to another installation of Windows 10 on different hardware. After migration, the user signs in on the new device and does not have the Start menu layout they had previously configured. -**Cause:** A code change in the Start Menu with Windows 10 version 1607 is incompatible with this USMT function. +**Cause:** A code change in the Start Menu with Windows 10 version 1607 and later is incompatible with this USMT function. **Resolution:** The following workaround is available: From 5fec7665299d33018c882c283d7eee7d2bb75c56 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 19 Sep 2017 20:36:59 +0000 Subject: [PATCH 128/146] Merged PR 3279: Fixed MDT version number Fixed MDT version number --- windows/deployment/deploy-whats-new.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-whats-new.md b/windows/deployment/deploy-whats-new.md index e11c92867c..95255b68f9 100644 --- a/windows/deployment/deploy-whats-new.md +++ b/windows/deployment/deploy-whats-new.md @@ -79,7 +79,7 @@ For more information, see [MBR2GPT.EXE](mbr-to-gpt.md). ### Microsoft Deployment Toolkit (MDT) -MDT build 884 is available, including support for: +MDT build 8443 is available, including support for: - Deployment and upgrade of Windows 10, version 1607 (including Enterprise LTSB and Education editions) and Windows Server 2016. - The Windows ADK for Windows 10, version 1607. - Integration with Configuration Manager version 1606. From b95d2c3925866751a0aacc3cb8e5a7c37cf743ed Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 19 Sep 2017 20:49:18 +0000 Subject: [PATCH 129/146] Merged PR 3280: Added limitations to workaround Added limitations to workaround --- windows/deployment/usmt/usmt-common-issues.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/usmt/usmt-common-issues.md b/windows/deployment/usmt/usmt-common-issues.md index 4e747b351a..9613e7592c 100644 --- a/windows/deployment/usmt/usmt-common-issues.md +++ b/windows/deployment/usmt/usmt-common-issues.md @@ -245,6 +245,8 @@ There are three typical causes for this issue. Import-StartLayout –LayoutPath "C:\Layout\user1.xml" –MountPath %systemdrive% ``` +This workaround changed the Default user's Start layout. The workaround does not scale to a mass migrations or multiuser devices, but it can potentially unblock some scenarios. If other users will logon to the device you should delete layoutmodification.xml from the Default user profile. Otherwise all users who logon to that device will get the imported Start layout. + ## Offline Migration Problems From 92dcee3fcbbafc2b4809849ba768dcb302f478e7 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 19 Sep 2017 20:56:13 +0000 Subject: [PATCH 130/146] Merged PR 3281: Handwriting/PanelDefaultModeDocked in Policy CSP --- windows/client-management/mdm/TOC.md | 1 + ...ew-in-windows-mdm-enrollment-management.md | 2 + .../policy-configuration-service-provider.md | 8 +++ .../mdm/policy-csp-handwriting.md | 72 +++++++++++++++++++ 4 files changed, 83 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-handwriting.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 8b53725783..947ffa3bac 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -202,6 +202,7 @@ #### [Experience](policy-csp-experience.md) #### [ExploitGuard](policy-csp-exploitguard.md) #### [Games](policy-csp-games.md) +#### [Handwriting](policy-csp-handwriting.md) #### [InternetExplorer](policy-csp-internetexplorer.md) #### [Kerberos](policy-csp-kerberos.md) #### [Licensing](policy-csp-licensing.md) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 38b240b6b4..174d3c9fe7 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1015,6 +1015,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s

  • DeviceGuard/LsaCfgFlags
  • ExploitGuard/ExploitProtectionSettings
  • Games/AllowAdvancedGamingServices
    • +
  • Handwriting/PanelDefaultModeDocked
  • LocalPoliciesSecurityOptions/Accounts_BlockMicrosoftAccounts
  • LocalPoliciesSecurityOptions/Accounts_EnableAdministratorAccountStatus
  • LocalPoliciesSecurityOptions/Accounts_EnableGuestAccountStatus
    • @@ -1371,6 +1372,7 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware

    Added the following new policies for Windows 10, version 1709:

    • Authentication/AllowAadPasswordReset
      • +
    • Handwriting/PanelDefaultModeDocked
    • Search/AllowCloudSearch
    • System/LimitEnhancedDiagnosticDataWindowsAnalytics
    diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index eaafad9a16..121d77fdb7 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1027,6 +1027,14 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### Handwriting policies + +
    +
    + Handwriting/PanelDefaultModeDocked +
    +
    + ### InternetExplorer policies
    diff --git a/windows/client-management/mdm/policy-csp-handwriting.md b/windows/client-management/mdm/policy-csp-handwriting.md new file mode 100644 index 0000000000..b2cdcd1ae0 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-handwriting.md @@ -0,0 +1,72 @@ +--- +title: Policy CSP - Handwriting +description: Policy CSP - Handwriting +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 09/07/2017 +--- + +# Policy CSP - Handwriting + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + +## Handwriting policies + + +**Handwriting/PanelDefaultModeDocked** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobile Enterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10. version 1709. This policy allows an enterprise to configure the default mode for the handwriting panel. + +

    The handwriting panel has 2 modes - floats near the text box, or docked to the bottom of the screen. The default configuration to is floating near text box. If you want the panel to be fixed or docked, use this policy to fix it to the bottom of the screen. + +

    In floating mode, the content is hidden behind a flying-in panel and results in end-user dissatisfaction. The end-user will need to drag the flying-in panel to see the rest of the content. In the fixed mode, the flying-in panel is fixed to the bottom of the screen and does not require any user interaction. + +

    The docked mode is especially useful in Kiosk mode where you do not expect the end-user to drag the flying-in panel out of the way. + +

      +
    • 0 - Disabled (default)
      • +
    • 1 - Enabled
      • +
    + + + +
    + +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. + + \ No newline at end of file From 0e3ff978a5a42176d349f7bcee93d1dd7769376c Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 19 Sep 2017 21:01:22 +0000 Subject: [PATCH 131/146] Merged PR 3282: RegisterDNS added to VPNv2 CSP --- .../mdm/images/provisioning-csp-vpnv2-rs1.png | Bin 108781 -> 0 bytes .../mdm/images/provisioning-csp-vpnv2.png | Bin 0 -> 109953 bytes ...ew-in-windows-mdm-enrollment-management.md | 8 +++-- windows/client-management/mdm/vpnv2-csp.md | 12 ++++++-- .../client-management/mdm/vpnv2-ddf-file.md | 29 +++++++++++++++++- 5 files changed, 44 insertions(+), 5 deletions(-) delete mode 100644 windows/client-management/mdm/images/provisioning-csp-vpnv2-rs1.png create mode 100644 windows/client-management/mdm/images/provisioning-csp-vpnv2.png diff --git a/windows/client-management/mdm/images/provisioning-csp-vpnv2-rs1.png b/windows/client-management/mdm/images/provisioning-csp-vpnv2-rs1.png deleted file mode 100644 index a5b77e0b42163045ac456722a89a5e732b5adead..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 108781 zcmc$`cT|(x*EJd}a1;?0X`+A?73tEON>dR~5fBhi5QsoPY9KTf=~WSs8U^W1AcPL0 z(rctAkcjkNLg)#1C+Ioncfb4o@qX;bYD+hrbO8jdN_=|MH3oh_KI>-BJHz0ZKC#S$K`z)_(T!%mk!Wp-p><7Oecz#pg z5dt~|C zWkJEm^Vk%r-nSuFWenbK$!YcEXC)!ZvwDoc&k&iMLohAR%Fez$6tt3PrN4Qb35>5y z4MhimtU!{%FCQ3=z`&p6KNMlmWo2bS?YMz~Hm3qI-ex$y)H@Z>+w6<2v1-4<%tvPQG7kFx1~4p~nb1&UuYN zS5=XldRkJaez`7vS5N2GD|@_uU!=d=^g1~|abx4@hSP?Jy_=i9G1!<+AA>M-Vq&5- z(n#PAlH9Z26@GHSOlMDIhug1yPk%n<_DT~2ef>A=$3WZfdXwjZh1i0-v>6EG17*Fz z#O|dng5b&6M5M8aNsQic@JxV33e4Tz-6C(hchrts77-q`=Z;-lQ3|u>yZU_NEoEZ^ z&?#eF5Sm0H{n~KULav9A=8#iEZlo10ArGmBg@bgE4|=oQFz@QJZR2Ml-d3I7#3Drn z1FxFTWo4K0uR{FMq-qJ>*(@ohq)aX4@^twRMxeV`WUvYXuL+fWzUIv3nsewgbb^p`oEo z%d*?X;kB`rYCH*v$mkdz(5jX)3T9`=-hmu3;XZ^t>1w&tpvOKM3HE;UjxwsPT}x4R z^8@KrBIj#q#A*+hWOYQxUI-+D&jmG9?mRQv9pAgQY?St>RGa^hA;0WZ&Xd_~N>4Xz zKFNols!ErVuM@J{3*q&@fk~@2j3Eet33<)9yNz%f=M3qe%&Iw6l9sr%mS&d|dZ=y? z*Nf6K8ke5L6$faaFvyrBjcYDp@1GgO%c3vfBweTPd+I6?7l$j-n5S_}hw62{St8Yp0ZIERw@malvmYdiW<= z%2yLes(kwwGbgPy^>2lCdBte^>r|;TPg<7aM+6wV~9A73)YY_$u4YyoBcp#pT9}E+6qU9Y+k{ zWt^aTo2MQ0v@I|4RJbMKVcDbG39v_BC|66fiygya^|WdpW_k!BIUx{UhI3d6Ny&~V zzMO@@3QbR$tB+DrYD3;WcP`^94MwQXq<1BYs`LfUc6w-uxs)Kb9+yy*a^~8MVoONt ze7)VA2d$a6K=H1l5p)Q zYRX;{PkwmfoxV?nf%Jr`n2t<~>?dH&{>p}LO){(-UUHve`N$?B=og#9Gehx+a=X=v zEUyfZiRLc5nTD2JH8YZCOpDaRCbxIqzTefC_BI5Ftz zCAZl*Sf{^Mv=0JtN(@8COWJWOZpD%0WvxP>!Buf%@Nn7s^E`=XDTo^G1W)=IpP+-w z$+ZQa7-xJgIh5FAERr0bJS0eH;$Xb+S66MO4=Ft}?|y$`=63wK#H7dZpD<}@fsS|> zw}J;e^O2LHIs|g9Zwi{Nn+;rQ8A-lk>0uiN)3p4s>B5fXdz+xKudA!*tw0d;%GK3y zq>j8Q(bW(VQ^oLWA$@0;LOI>SrX9`;2~EpWp`lD`EFkbX#e|`Q8HpXp?P?NJ{1d$3 zNqv2Nd&PU8Blr|leOXH_mX3o$cL@U7_?VJ=RoiuYvZ`0o#!p%pU2{LP6nPN@kct3_ z3oZd5lq@T$;aay+)58dMp5H9q_qA_V8swJmKI4RHGfE&YO)Ame_F63lYxVa>M%Bw0 z5Hd=tpOnarFJ!fKIBn)&3Em1wNlQ(3t)Xg999bEh)}hpt-20g)IdGtPTjy2+#%|lo z8-7eJkm%2Jf;_!rR4>m@CX}0aRp5A7p|)5}!JVt4x3Xo=uW2c~ZYQkAvrrcNBmK9E zq>_;`j-j%-+sA%7js>>0Y5ctwV`F3AA{lb+`UTn}Hu!M4+zyB{s|$C<6C_gFWcd?y zdk>&iB@<24hoFo}lKJI1Ra3-6JN7!3q1yw3r0vGlUPoI^pNbP&nGYQP?3SUC(J7&% z&tPs>k9yw{dvpMy!Qbb4pK~OqwbTAWuH<S}X34v)WjZAi_1jMP9*jDD*a`=GokGu}3GfI!ubMyQVtccK+?Y^5`8Od+en5 z<(DG4!T!#i!wPzC*9NC^7gxh1Wo1ln)E?J4AS0eoayBt%X`abJSYs+> zFa9=kV<4U$F8+S$S71+%&RQ3UV@`?6xaQ_&obTD*lDP}%)d!L<*Uo&pD_1r%q+%p@ z|8%`XZQd+{M1NFLxufu^U3L1vqQ@&91d+!SW;fqlncJ`x;luT@puN-ZP`h?XT+z!@ zu=dF)RmN$5+4B=&Zl&evrfY7qlk%z0@Lc;LylUsLE-o(M2z~QkKv%m-iX2rrcJF}K z%p}*x%0W1pQu^d~_of9inWvz&O4=vI>>xLTOpHcYnbKjX1jc~{1 z`Gy}KT2BnJN(v<*R(>?_lp;YK;AK9CeaFbtE)RD=lG@zY3e;7!JkL*x+q$fiEC%_{ z!hNkS_3M!La?M_z&Z(T!5#S6D8oK45kLpSMxb#UHCq&QnT{YfbKks_1cqzZ_?m>Oi zaR|iwz1LB>`T1J!>T~Vz_fnKN#I*houUYQ}tcE;<6I^nSV-P{td zw6>E~$nv7M-w%*C59xCjvs5XZ!6qcXO`Lh5%@gO1-V`Jrs@kifY)Ixj!ISBT>yP4u zZKA>7b4CNjd2BU&D$Yz~j;wW5b_i{Od6~R|YR6Udk3R^*9TADi{3N}7K;`WTOXgbo z`u%)Hr$2uEi@{%8WxlaF!>GN_GgZXUrrE0Pn|> zdC$x$haXno#bwh)TSRHTbbO`rOtgn4I0GJksTg*#4E$o-5uGTIFs*Nrw*;%QbUC`S3zUkGmvLfg3w8M32pJD?*o%#Lp*hew> zf(cTR%l#PloCWe7p>_a>lj6O?z4;G9t}#E8z`pY~slNAK+I?{d3EmB7rMr{g%F-|| zD@_`o-M(5A4ptWb;|A&yz^Z);6*A)T8`(?gxhEbwC{ULuw~6qsgMGtn5diSy-sHC8 z;$jj2Ruj!EHJ+9MgadDP+~!BCB`liGrt*xy?p~hIjfKD}aO7Ldnemiqw`U30h+Jw3gcm>B-3W)Lqk-_GQ^ZHF?hkvG4YO|%=%I4Xc) zXls=g78WKa?SQE1CJ#bm%}r@6Vn{5dPX}eR`Ac1&9;62h$pWvTz-?_PqkO6P880#b zeT15>jj~|aZh-9Vg~u7}4QiN-&{8)13j^L+4umqE#)9?~j>1kW11HhQ_kX4lmvA($ z#4bNCPf$omkNyjbzk)7CLd07mdJEg!9E32Jl$0Ec0t1p}%P3U08ORXXgKUyECsd}2b(Bf9{T)CyL0H4V{lF2_Q>dyeDmse*P5?j9m!3)^lfA#KZuGL483B1J-y{;|OeKW@aI( z9w4L=l2HOD>fVrq`^VNTDyj@pj^8|NB%?@L$GGP%5LzF%+Yva+m#56v9Kk+~zNCJf zTdieCD2siW2s)M5_kx?5eIu`c1j{I$now5URp^tn3pp&*I}fs;p8QAMI$3tz+nFJu zTwL8&J-$`*$vO7iKcMw$Sroj>P-*)3MkJx8RCwV}#C9Q$w*hM|sh4m>ifNwktbA4=RJ($NhEKQIR2w7J!e%c;r>{2wLvgsFhO6`4n9%Yf zY$gr0q_7BdYsrj!%KLiBqHYi*T#H{WBnw>4wMFi53MD->GIIWd+u~#S6+M5+_Daqs zaSv(L%YL%Z^zF);KltblUSIaAB$2Oj!s|Uan4Tl`|G>Z>cRms*Lm6I0KfL{~UKA5| z2^t7Q!)-Jq{!)23DWF#sO4iIEu4Z_@qrBg1w#6S6vtd$^IllA3oVhV8WBNnkdc-ARYjtmb3e%2Y zmAR{i_aVFRJ&*_<8LXg(RG+`M&4WCDrZ)flAn~Ixhk{%yBe}>^)1Sl$^gYZuTN`M~ z`$%m&e7SSWA7}`3bK6)Py*|U`vJg)68#n0IDKJWDtLoQX%kJxz=&8HW<5g6w7(6%p z4bI-O-)jt5pY+ERn6jI5;Cdn$|2Y);)w zm1K>wjTpsn)^L47Wh`9+I1hRW@+DPO0=o$uh@%SR*=9^p{wjgFM5L`_L~Vh3F6!(3 z{sh1H`}&)+LqD2mF-6Fd{z;N-S-vafWF1)J!vmPK!D`P6k7}u9e2dnp8d|s-qlT*} z>-6Asu&50c$-wTll~HBU(QKA@p+tVIgaicfOFxA!Hl2B=Wyk*WcCdDb;mnq^*Umg~ zq>iP|;rduykh9wy@Z1!DKdc=ciM_doQ7@Oie+*yPBKflr`<|8&1Oxe@t#oFKl9H0Kru~q|kB`7kCkCL`gjy>_SI=fEzW+}A%CnQXLODJ}58=3~Yq|oP?BNaeIeO*4j7b46NfR1oVnFC7#+DVz4FQZGn=Ejy4$2=D3|K|nbcpVS1l_<_m&Re8i(@5|7&W9&wt$bi zwTS!7_?@Ws<-?aCkFSB1e5MkA`9Keg?h};MN7TVr&pbYrONizORrb7kz3lZ|Bm7Z9 z7xS9lGssknu0iJ zR26-FnxL1e3QpGHygy4;U2uJH*LhyrePP(IIVaQS!f(%~PNh;ePhfhF&eh1DD8I^j z=XsfWJ@kTQh#%w7So&KX=j-g)XOpLlY`5IIB)+7R(rxC#@T|kep@O#TV&y4eNrf+`>Ig^ zgNA6G!^;}W{Sb~L%7*EvHGah#bjL%wv_AgAFpb(}@{HB#D!WcGOmi8p#+E3hteWM) zn_CG*J-(F9#j?zbGhu=yXPL3fi~Nd!srQA>y!*|Z^l-L?9aSCYSWxlPL)eMaCqD2V zYN^q*n634&dH%gT_{qEl9{*`LLHs)2w?kljl444}ZisxdW^8O=@GhMT^1@3E<=pw3 zgGg0XWvQO;@g@TN8`Px@4({?Ju;mK@=)-_q1_0)JR;Z0?jlDixBM&(a(5%PO{+IzU zpx4luoa{aYDmk3{b8^zvPGOa3jz*G~Fd%_z(mn+F@)#_g=2+cJ_^RPR?Ky58nb;;GJ^jz3E=aA>L$xvn94emlKf)vtNBi zTj>X?d%~JZ>kIdW-6?Ek6OYyZk*a zF0SS8bP(Y$0TO>nVxNLwH41|Bb%0DGES0(TQR8&dQP>eG4s}ySU8iE$QO^Iy1IqMN z4WO#Ba+VU9HL&q4t;^B=3EmTJN2nIa2lTonX#7+tx~He7EV!u7VHm{fweVVi{dv2l z+$f`KLzY`kOAnrvuY(+78{-L?G*aeL_D|N(`RdC&Q6J1lCEKc%;37kD03vMw&A@l6 z2xM)e#dMIBgsAiAr1)dT7X2r@f3~J7YFz7AAMih*2PyXCZ-qNcL);U4mu6O zxY$3T0AN^h?BmcS_W5orIGg`0NuU*9P#lL36t_OB^u`eFoHJwz{di2liH)In+-d1} z%~vJ}Vn66s7d1CKd%Q)Ps*sSb$BR`yj5m2Oq|1?4!C#wECEl7Mr;4+kNO*cUWMOAT zMsa{1QuPw*bCVxyOQ`lNcWn;xak2FHl;x;l+2&C;kMB)qq3fRRR>28&1v+{GaYk$* zW;ALqWRwd-Kded(**1;`W7wFrxKY18v|&6)R)W00arQiqDp>mH=9Z#8w9512r=Ywu z-6wQTNR-Zr=K7CJPNL;o2NnbnRgSfHde{5*&ylmENEkMmj4hYXvev#EkCD&PaAs-? zmo(T%#X$aJr_A-53zpdmH%Tn~^`S~c@bi@BGGlAo*_4;BZdyH$Ny>m~;}~!pT$2@9 zjP9hlPR!Xp*#^?8&C}Sboy98A+UrUTSrw8!m!e94>`wQ&`%Elm2G*{~Q@!0`m%6!{ zA^84o=&j4KBI#=WZ%X>Xh~Hq?s;(PdXtsDWGuMB=!kHb6@|kO@hTVead(v8(G_d=X zgUL)^LnZW~-+=25M|!qh_Hn5%(;Tl9m<&g0UcgwaYG*Vh_s(z)Yex-XxAeM%vE7sY zQtlCFUC!)sb$%skbRQ&-z>Yjq!PVE-KixpFGQjQ_&F>pKE?9K;o_MLcRyKxBP#B)v z+jpulzC7G?4N6qqc^;3qy`0g!7(Z)Z0Mgg_DwJaqG~dnD_8`>W|PLuezJQz zJ%zH@xvD9eqKS>ArbjwSg8(+gFwr&;n01=WwVoGNd$N!H;4W#+iJGUX5=(n9h9gEB z!G=P?Rl+qVyf-7WW5&dRd2s_%Hbq@B@hDga5?#*io9=}{5+fS7YI=V4Rs?TQ)1KJ4 zaZ#`d$C8=O3_-OifZ1U5-sa0@y`Oj`xos$F$s*On!hXj6G064S9xn9*O-N zIJo!2si=tPeYu8;xH#U=x1Uv8%`i30(H(W(16lbCG)aPLKPWLO_gGpV=%Xowhwtc( zH>5CYL=%QjfNsywT*!F28_~iZFR zB(D?(ti%n}b$}kz%pFxqxy2gy}+zL z%m9y{oJ$ADh)!p!r|*RTXFn;E%=8Ls{Q__nPN)9g%{E@Z_V)GhhXGFwWaK;PYVsZP zEO|+8ZcGr~23l(`!&GtY?d`=KdC_T%EU8N%CG6RDUHJ&~%cnB(({3)v=cLx`36rXW z)5Q^b`ytEzwDC?pLJe)VAa}*wCg2kW;FE%BhABzjq{|t7H>%DoV}W7{4iFgnsUS3< z)6DA3Mh(1FtJtPlH$2|(81IWvqs`$OU$O=(uE5dzbMnikZ}kU`-W`hGYW9^aZtiy-+FY>!ep@EA?zFYfzLYi2 zjp2~+2ZkHZyRAPNUvg^$%G~aHIRW`(7i%3AMOK+v7f*l1my>G0_i7c-NLNeSB4^43AKA6#arUp2JvY~8nTE-y4h0AVDma9`(ia{g&w!dQsm zLO99zV-fkY`(N;pMf!0J$pW96Q%bTuz6p=DG(TB)uwgOTd)ew~$w#IYR&no+S{+oU z1V+oCi})k6LC9p|=0ClC2}SRCt!I^E#uMTwKkKx^4eUS9NG+W{Fy+@^j$ zQNJRG`NFpG$L|^ukJ{;tkHxCN4Vx8jk8Um=^-(ujy?4VXLo!&w^t0s1<+!3B1O-?1 z?*8;LmbK2+$j>-AxB~$|0jdCA9!j&O($b6+fn2vq69ck2&*t>K=TVK5xt%>1%!*1$ zl-H7<*?T6N-;@_}=dleP3o_*K^7-+X)Xc>n&+)I}=JdLsm8uvfa=JsOO+OmIoi!G; z4X}y(NN}3lJHmj7!sVyNmepJG`RtoasuT`mf$C zGxJBT?$$nw-<(;?e7gq`W;rPwMj5J#%@uuEANv@toNtV*6EEivx3OJa<%A=0TY+Lz zwX(#p+)Q_^gysz-YzIr1>c8hxn+~zUEDhJpOg!pZE?2Yc6`Ub2<=@*MJlrbU*L|vr za$gr(RqW_J3%a-%j89ofB3FE!SQs2T)z?&9_fymminP}<;3onpm_Momgsc~~G}mKe z1A}QqwS&FKN$K^C=GODt4z_5T*$Q*sJ658=aq8-IMb3p1)w}~?#zq{4g4QazaPIjW z_ys3)?Y)o;hx*c+Y*_7g)a!Y;?~>7SksO^GW;j&)H1?B7$duo!QqmT~kj z98gsY997qz>EakcJk*|XcTJM<+G*W7|M%Gw5W7V78tP2VywJ;+aC(DIv~12qAlQ%~ z`OU6(e}p8}n?$DqWKW(A7uZ3g7oWOd_+7cKJ_5mJ>q&R^H#_LwKTlCp?=4@dz*)Qp z)V2V!pl*Ox$zerzO@ZdM>VXO$JkcQ!C~ciXcinyq7V5it zAo!fRM)jRHL!f(K9HLH@>)2T=gck&ueHg#*AmTLAT;^#J5N1UGR~~KQr7AVRQtdaI z)u_?OLJV$?zK`)vykkrcF;bz8A}0lduCC6Tev;+18X9O)<21cQjXa|9JmCsXk8O5b zmz1BCyON34)T}QHGD%OJs*-79Fq$7}oOCfX8_`bav*vQ@LS4K-e1K;VE`_+0;Z;Xxzt2+>pl`0U)9-@IP$Njh9V5 z)S{x;HTC6Jbd3l9e6FzzvJj7{5eJ)CcYWiu9Bc38d;qH=4(v_~V7y(WRF`Mv`yrv; zadw>&R==6~>6Q(kxI402j+y`a*)e{eDyM1tY-Yq`z+B7p0otZ#yv2EKb%e?tnU;OA zv)x;$Ok3wGfUrRdDcH{{WHT=-DlxLIh2Goo6U!RDY&N1qEROSI;p`BOFW!ejcHKqa>krV?XQlF^~Pp{Mc2`OYLsB?#k%ipLuu=%Edhq^0aAl+kkSfw2sxEioBsG|6poK zi_xl>m}s_t_E0n9_}%M|&)=}qB&gEzDow4Wc;}ZPG^2F5k$P=|d_#+}anF5I0;`$8 zwXtSS8M+uDPV2(U#?}^SfcYl)b8{sdT+Ho))$9%UmgPno>QJHlvhIPsT5ht z4rcUz%YNV*nr6*zMP+6BUNz5wT==|6fSEWu=>v#m1(QlaA?6pYyA41sEhn&+dg*C= zg!k*Da5bJn(PX`Gce}X_e{XVrZ?kc1LpXj5pofNFK8uNTDmfr@=!Gr7@BtE|z2GO5 zOLAPWJsQ!aZP%W?W1krJK6(rdK&1J}Ja-n*8h~tZ`U@lRUI}%Y2FU+=zx957#|XFbePV5HcNpW>OT9L58Zq0_wWMHn+H^I>o<#aD^k)$ z(IBfRpl$PH1Yfw3_Ra{x+;pjP)I` z5_2HAE$eDBQvmJ!UGrZQgOR>PN$`SPy^dpwom5u@(_SI?Jve2;r3EmTbwzntz zC~UljTj0)rhqX;EcaHLF~J>owt-z#(_$*}&7-2wJMTS7tOY z1(~&DUnN@L1a&D(bR*4@CbU8f%p-^e`KTyH)yOGcYKUmQ(>wDvQo#`v9<3eh@U&q* z^v@~TnW*vlMOomF+Q1vS=SVdYyQ}1<{jo+{AP^q2LX3F~5L8VZx`J!zDF{cAh24R^ z-XdRPgM6AunXb>rR=1{&_Z0P+Y?hema*ldTd#AP4JhpfwZG8kraZeGgw{QaoZg&-U zCpO1;&Xj6c_!&rHw;63#qtM)3|N3y;Bz!t*voLmtnb8R~wR0{IqlBkmrr(J{9uMTVc?d-2dt~O%+^CqB{|AQ?W_!#ZpTGB|Zhy zj3}YPb8B^rH~}at@JShC(Z8J^C~gR$J_RZQ#Atm&cspnVg1nHUS;&9$fiojeLzM}b zjZI@06J*j8(5mSvb3nw=%Qw2zcKmkO(ys$)U1ItQa|$>Bcd~n?snzWqkQdwl#sG>2 zkQrc@prV1iJjbH|3b3iiLNp10#T8J00yMsSPZwuuVF(B0n$~GR&K!pUY8lTTO2zR} zNAIjsfgN-8R^+c)X}rY#7sk|P&tL_Os$JJ-ulF4M0}&PhRMu{nk`e z2g1Py*XVO<{piQmItj=mCykJnAbL$v>y82=23~IhMGdQ3!XzZYWt^*ONOYf{1T`O} zm6cb7xFEa)Ktlmv0%YGuZeN3Zt~5-iyDVpfLUHB}$6y_agYe;R(r#m*>IEnUzzqRq zLq?jE#>$|t`3>qQ_@YTR-S>$ZI8{}iebo-NWi5jaee%l6hLfcTBtE70AQ9s}|CL%0 z|KrYeKqb%!OB!mdYTKCj7K4=aY6YG0b!)ZbQj8;f@rB*@&iAl#!tfFwGY-zx%H2(Y zc1_&nJXI%`1UU`Cipw#xkIvibG%{N;sL2|HfU2ouecruz2Pc7$i=<5avtfQ09sS|f*BLZ%%??@Jif zz<5W^cVz%zd(Pw%FX6UU?S=)U8`9esTsH9mnu5sR6^uFu?&PWZ7B^eF)za>!TnCKW z=E9jfHESTB(!D4w9ShX5dlWXnz3!U2wyvHY;Sz;wDEb>UB@uJ1OH4fFmI;AW0cdhl z9{Wy_@F?j@4e@)yRu1%Wxm11#8M<2m^ye%A>AktWUKLy-0dTl%w3p=OvQpbsrwzpT z(LemH5@y`Mz~G7oyN(E`65biX_&<4Hjm+^YC7n|}_|u@F4C5OQ~D({to(54em{Y3rFq zy-)LEWn=*uy18~CzEh!%D&!pmH0|Nm zryDC&J-`9d3EN#RAoz{chXN~u)m=~GLnquQg4?v^T(uS%_&)!sDa^(j1O(I6<+A^L zg@lbVsU|D&AC?gZBP)LMWGz&^#9>7|D+4Y}DlYhmjmkUYobOoMO2E(Xk%>AHK%stvpk39kri* zHN-P+%U&_#XRE9<*lHOUZfUobo|HfnTCte#MY@j&P;N2sc; z@FeT9`H_RI>i5??Mj{kdQwJ*MegYDirzV%_niq|&lZcLvrj|PCo^-PKs`n|U_dwKL zsJfB5s`P#lc0={yapKzGWWZaWU1s&b`>1ELVwF6^6&d*&k1c-yKHlgZ{!K;~z8SLX z6&HLzg_#=Rds98hT8+9Oof?_JR&K*qrti9f-&TiS-yV@%7rX1bjq$1@94ADNtoo@lX&H5;V5ZLxyOIeyqNM!AZ9T zbDB&IL=DR5wE4eiQko``*${@OUd2P+%h!A|J_|0C0LT$Rqxqs!8CKgd=8YZf$ZN} zWiJrt^Xoua!$k0xmE<=^#hx8WxSd$xc$ z!AV2y=XxhFY2UJ`rDDblfQR8_*=>1K7VF1uO$=tj1p~7DH!Dd#2^%@9V`K#KIxFH> zx%&{Pb$#jMSVwRUikjT}kXZvc-=GoU-X>g?iu2Ww>6za?< zW0}b+KLeiq`Jjiq{mh#(+{3uDSnmxA3Ea&dJ?^^17AEjaO2`=@gC7E?8kfQI%lb<4_x(GEs(qZ5>h%`+mspzu5BsNlO6+dvNR$xNWP| zx)gX67}qfxM_PbN*2vV&&f43_4|oUuf7>bKh173r{NE=T{C^4&1+=0y_80nNe_AqnAG4>902J0+hSN@#sW+N z58gT%mOW3`<%q7U-w?lQk_}*pOi53)hQejFe>EM08CQ+6r^_k3he1n-KFtkD=oBwY z`j^#sg-bZ6i0Zl!ngN}C$(jksr?=$Sx@^1eJR!>%#!_k(Ut2@~DlB=@u?Wt05 zkqg+t#0PzsNihuxJV|2AmMZbYYbDbsPL^=}p6H-mEcNJV5x7ZwqS)5TuCvs8QQu>o z?`hNzeDsdlxaf%^Jnh&$;s4?_V7si%+L!mgPkKMXau&RDe%IZA!rA+|x;hLW^fKC` z^$uT~*bNEb#6lqUyTdsOgGA7%RwYwVC-RgAo57&yA)GXd_#B{kuhIXvA5CSY7GRG} z#U4X6EIXvIlYQBZ*PHdKmr42FWE_FAnk4U@ zK;nd(Xqdzp7%*7H5_38Z5M6%H`;acGN7tL%z$7-aCt6n`K2V~{zyHcvtcx1z$rrHm z^LkG}&=a|aae?Wl_WT&+tKEd_>Ew|;^2pGcsy~sD_7F8PQY4pMEEX1o!jOq*-Eqso z(I0kxCp^=1v;2y5o6W^M_1kMiE%WTVaz(Xqa;x*pZ;gxGW(D}CLgt8Aw_UUSy&7Kf z8@@ZCm5Eb<(250tDE;z+mD>w0QrH`IPH}MGqB}MDR@DPmgIri214Uw_<0@AEYuhFThtOo>8 zfSd89@#0*t!kwRa9={LK^O}P#dpd(&21}Hb6Ps})NPl$wwa6cI-?#3Pv~9EDc(GKJ~iBor%~GQO`Y^8P?G+!=5~l`e3m~0 zH}v6UCYiLJ?}7O0I@FK&_|Wkct)UZ^-WwqjYpFroI0?hgYTB?HtmPM2MrGQ`V*M#;juGq ziQ@e_UoIZEbYG}NkOk{TPBr)YmQN`*8V)@!vA2Zg!50?UD$T6;c-DLOT7|TA!yJ92 z@Udk#7`oyHRFJ^I{c|8WbD&*Me)_+F-_M20 zR_;~F!BiG6RfNhaIdTbXicCj4(sfidC#=k`4?$sBmX{ZfJaLdXqQ{Y z?oZEd^s z=@oEW62(+Ovs?BIoz#4?F8OHO&mOKn~E zF%W{UX<3git|kw5pz-#9 zA@Ra1H;>9N)Jdb=q(<7yQ`Tq|Pt@R3h{=T(#n&Ev?c>;T55E7>YTnPo{w3A5d2;nl zuS){t)Q9K$Y&hZI`h^_>6MRNNv#9;99p7}^C6CXGZnier@-7})?aEUn6&y97kO;>CgVlt8 zNoCjp9#BP{=E^Fl-t5Wul7)fV28Ug87$jUrVU2!45t1wL4!aE$-uU|kb$)8mOVC)Xwk5$5VT$K(eUPmK z_7c<}Hf%)h?Io~5eTWSV(=HPfqrG~I6`0oI;hGmmdI>cexgf)%m71`^fC3X)N1RVT z6S?EI)V~#VTgABY&JkGKEfMT?4I3-osP$;8;%U~ciBBtL&(N>`+xGv9AAU(+rA{{c6CSOL#|O+0J{5T4(I9f)(N=NOvKxS zOdeL7<6QUa3*Py;hYkkXJK%?UrExs3NEgom!MN1K*PITjqL~6S-(YZ_iBHH=iT7@| z6A&uygK<8(at?d{Q&9beh)7MS)3UPjyHj^h8}o5;O~q68hS*y1VOz=X`A*1KZe1TY zi#YywWUxg6#ng2wSO^!(tWYC<@4dYuD=tA$#n8|!(J_AF8j8d*bXE6+G}H0t3&Dpn zu63){vt1V#XN3)W@>53I9L0Dz+^(GOb_68BpXEb_dCz;FwXJ1)2D}41zgRK0wPGGNaWHnP`V)(c>e6IIW!s><>jG*Thfk?A(`R0h5GEuz!!yF? z2gi_FBhcVM!@;sxt_6fb)9)OAcPZ)yC#>Cf#zy$Uyf#}WNiO4Mk$MFA7-Q5%&#~{Z z+BY;g2As#n-WcRdpyxyXI!j(P?=+;iGNaa>MMV>=HU)*cZ(znN<)=?c+S-XsjN6UN zf5$30VbBWy#tf2Am&IV4$NGK*-ImF>OI~idm{cn4u&TW#X1V<3xnhq=PwKll6BwR3e1IxoRS0W ziY|5nD)C4k(b~O{|A9f6^p)ec&?DkKlE%-@SN^aFF}~z}^Afg_=p-3DWT=jb{+cRo zy_?GHoE9 zZv2S^L-KX9{3js)Qj>|@h%fo+B&d<~FVDd8l`A4 zL*~UItO0N>=?9pXujR{6ps><{uhU*kuVJJH%BaF+E~aLCOtN~3NyjD&_f$YQ;*WD0 z0`}PpBwTR!AK-4#K)S&k0N$H~9Wp`a%9Tb>>ZQ+rH)o0h7eW)H9mkvakb^~*;aRAB z&pGSqdPbqjYuR)c{$2v0;D`sN09H-&JeESB;lkxt`$2afBp!k< zF=K#01E{=1r!(MJ*%h`Yw~>OPRifZ4*Oq^&Y>WwcPZ=v}hnWU;~80zZzvgX6{H+oR9=YP1FA%K?=)3+^Y$C7J6oCs>$fpqM-UHEj?#Ed0ajwWsYRzQX)Y|${Nr(^dKsV20tJh7Jz;(Tc z1Y6DvQPd*bv4OAc?O`5hI_f1|UTiozH#avkwu#DQd*+)T>i~r)ni?ABHiOmH!j`|Q z=~xa!=)wIrj2FriL2iDzMDB&_dsk8x(}f?EXkdY4L#1XiY(1faETE`_DR*G*-rSv{ zEgqgs7wNt@#2&8J&KqOxKuY?YHgqa$C*}kALN%bU`vgLLpo-YrV!re{kGe0j@X9tXD&OJv7+8yKgj(v$*`DbzYi}FNv4&d&XgK zcgy$>^nAAJ*xFa zwk^r zDZ>JGp3jxEpv?xs8pXL8Bzn+XX}XE5u~NO*th{PbznfyUKP%{xMyb!J1X z#N)mTKUh3%hXW5ZFPhFCxVm}dgi3r71CikUdLi^wGSinY;2zK5V);s4OjFwP|A)Hw z4y5{j|Hd`Fn<_=9G^vD;Jx;?Yg^J8jwsgqOt|VEhWF8}AuW;=34vEZTJ2+@(TiFSC$l$j0?hf6;6i=*Atx!lqOlwCJGTl1yqM~`kAC} zp&D~*Y21_Te8bSQy0^x5(rC(j1mJ==N)n}jn|;-v<+T7PR^|{3ii_7_vhjqYb#8)e(rsjJlH5!)a(?d(4Uw-9Ir|o*{Uyq4`d~#FNIA4D~`2#Zg5oCga8mwz;pK0!CV7OJ5C3C4$#mxV?83s zS>_j#=M%?0m-1TlH!mbI%@@%frJVfvz4>a50O4AIC(jOg2dRo+j1UL=CT*>}WVmQ8$<8?AV~6ZbPRcyU(3@fmE3q9`GNNlcWAg{2ut}9S^RHc>D7I6R zCit21BXU_pgj%7qkcDtc>*Hx`@<^eRc7DVp4ko0@zO!qAN9V$8< zOx-WOZ08@Mv*ltYJTSR1DdXkf20=3hud&=^0y~?-{5#wCoBq5E1ESWIN88RW@9A z z6L?sFUOUxe z2!33Eb`{Xj-?Iv6m?d>cp-2Fl9LSO+?+H|~9!jLX-v9-7ia8R%k%(~3$j#J$@2Bjk zdMfJb>Z+=FR#TCShnUUYTL(9!R)&;qt|4t~64XG7MN_kT(%VzA&IzP8$ZTjO2i~B; z;^=-Q;nsPoS{d5c1epo?c2%7wgj~yqtulQp*CEkh@Ifg?{65~>SB6oCExa%8W%+=HL~A~ z^EJd)=Bir*fmi;d85+=wBr=+{DUbvRJlA%43#KVwbh{SHO6{?VcZjS?(3}D#oSR(R zke06uvT00E0~V)4K!VUi;uT&AN~MR*%5=xLVqejE+^)NG50*Xeub&V`npB{QM8DZY zJya|as!tmUreS?fTqRA}4ge(3KIvatVTANOUl3N**1v6`~%KQ|_{fI0Gr2(%0 z84yhYBa(M8d=y?JK$tQQQPRo$qya2Oa~SO{=o8+%KHufjb|&qhwP)@8iPWEAD~jAE zy%(_0^TYbac}UoX`L^s!YYQHrpR&jUknIA&BE)B=-(jVa67_V7R{n?HM~AYP4J{syb?EO z9BC*=yQ?8P&cHfE{G52ON(S^!K``=Q4(3YGEq~#( zBeH1ZO|Wmj>f7SJlu3Qbe|BG5Py_X02HEreL1z7<|B)Xfo&fJw8sIF#n|4-$Q$wkFjq~T&I)k)aBVOe}YW0h-P(y z!BlyM!&4&u5PUDyyDV>=O;Vf>}E@_vdmH_xH^38VgDgNQ3kdOw<;7~ z9rlQx4-`B!4=#U9Vd9Ep)|{X7^Ou2~1Ij)s02q2$ zKOClZlt^C|w~d0IMEGp^HC5RQ*9;`%WY_0|W6>HmIZt{(QmS-#E5#h?C;o^wkBm%> zJW#QSHN%__vV)_8s!lMbUnY0)$M`PP(Iuy}d}eXs{vm&b>H_OSJw#B&L269thAntJ zs8PgBf9wd#3KP*q7+6u!{r82ZCh5uC=GQ#fp_-AD`M^6X-r5wGnPKq|Wl$D_){GBw zReKUn0uAdXasjX8k%kVr{S${UvPjL?(0fR42hvj5f2-h=J@)K@w!=-}`4*mVdrirdCR^SSR*jOIly4C88f z5vSj%h>=s_ALoNwwZ=wkp69k23f+))Vq_qcSba=(&J^Y~)d;0}q!(K2Qtm3sP{WGU zwp&$a_xYad$gUbPrTZFhh;?^}nY{J1%u zyVQ~_x(Y6c6jxu!EmH27Wym}%2z_qkUXWo+6o>xl{_js!dp*2FXH+Z2FgAN`9aE!I zIg8zoKJaKcz)zUhN<(e)_pOvtPz?E~LVkbW9k3ih&{O_T2i0GPCKPC|T1iGw)KSCO z21&ncQg5;b8TLwQYVt>)sU?%4IlIZ@#9IUC_!gu*;vY|{|9GyRPtXIo_qm_pyAWz* zQUwT)ZJ2!I{^`8{M7$lE4#YZkgsUxlHqkX)%aS3TkQ<0|hYX%l%O0yVG7qt^je6v{WT0I!f1^?76 zYUQK4G_xj`PV3VxF| zHv9IrjS_5ehqYzvV}>|p+KOGA5>Lh6q2iz&_Uv*Fm}~y&kNMV)UU|1+>K?O?WG#I& z6D~C_sXq4p1`V2!7FY8;Y!?1miOP(L&pDd8*z;=mUIq!3@FfW-WUdXFxq0V5kl?_+ zAvkD~f`hnk{#DQS#+C-b=wB6;c4O%)rRxzgb{H2)>)2P5+|>~`{wUw0{$=g=mU~@# zrtIl+%+xvXpekDKeb%)p{KhRmWT3M=nALwu=0l?RaN@7OoW31ME~f|^;zzyv0KD=Uo`zf=GcHUX1JYeHsr`~t@2-QqeX(DuD;pG`ju(w==xQ< z>XrBVq2BgGxoDbEk|1=eE6?Bigv?<){=ByvDC_}n zN^4@ew)XvBW^p74+9icqBH&FH%H!9_Q4&CY6l;sq|G@Ikf^eImTv-TGuyrg*ZI1oe zDos?`n*>Lc_GSt>YWH@~#cFA~9BDQQQP7byit}If1Qmiw6l>fEACEU9p&}`af82&%NuKSgQB<~5|6|Qj3Gwmb z*5-oEQRzwU-tCrhEceo$`@2~8kNM=F-Jfz9PX4 zddr(l?b#~POgqAV?7ZJ&&drX=<-O5vJo97JK`*rHkT=5%HRr)^^I!^KY*E{$*wu8viei8z|YxEDV*`w@;G(d86Ks0d3jl@zW~ou=x1!}zG= zT7X@Ayo*qX^y-y$+IIs0YX@ai{;!U`w!iY4P*ytA)`C;v-66}KynV|P2?Y?>OzVnU z!wK`pLF7oS!K?sDBSRaL!~nypSAFrl0h{CZjB@u)G}| zT^nHYxPDG+V}@afX)AM!9+Y{uJ zms}UJJCvu1Y$+H?HH2-I3wKYGUEH}_7 z85y%4Vq;Zspop6VP9+Qm$UKM18PDx@ZCRuJk}JttUz9v^y!CI)CwV*@@3!j_Y=V{} zF7V>pZkj<6JyTDX_q?X|Z2K+Cg;L>;w50nNEzVN$$|!nRzN*?Gn(M)krMs{--cI0~ zIj`YRXVnZrr_bI37@%uc(xztv9BZHvrE^V%BpeZt{rvrb?+!}Wd@vRPQJLKS!}dwC zL&cT!H(2sSUSn=!2U|^isTIHIgbFiYtlX-ezfg6OtP<2!N=iMKdF!xERpXB0(bO#G z4C8lDtXq3R{oh131dCVU)Tc8kBD=%wrFvuvvfQ#CyYmV!eH${~S;2^Uf3?-m*$+%&af0$A{3_13sne=;7{>x1-gaeOok*);q{xY3$g~fthR!;^t^T}` zaVTMtDUy&TrH2HYM$FSm0$$d@%*l^GVpqw9i^9^GBam3Yo~#g;dJ}uY+5cXT`ZQ;v zJzaNTEJ0)@aP(TVOSA4SswRWLJr$*`cIy%2Ze9dwhs+E)Ns;~lo`|D38F7W9+%}b50zWpY`bC~h$*{Dp@ zH;HU%)u0+gALw8})kNKDh1(FGe8X9fsFl!9ZT2guWt>$@t6hou@aSq;?R{(+eM`a} zozAWGty_)W4{`1qZ7b&+K60{}KQeo0rlr29UBZg`s42&WV`YRVP)2<r4?cQzkK^|ruF1VmUaIs6@a)w(4cf5c^3#2cZ!d6|NBb~ z|EpLw@<>~|*Io1B!z=Qeu9HI~Y{L*??n_)O4h;wLet=T$WY?&Uq2XBT8^CTds2fK! zJTk5h7M2lc`y`8IrlQzK0(~RfH(;@vraUDq?bez^u^+Pm|B_O-rfestZTIvg-W)Lw zuawG8vM0vH_LG~q2-bACVf*=CJscEAkUe)V;7gehd?{L7WlLU_Gb1hG z^i{0OAYEv?Hx<)!$}3pj4Kn2 zCcL0r3mCcbv12r@OB0nOC#D7INH!;ToIp0~2RFh?0X0P>R?E_=>}CnPolLBgsp z;G3!f`A@|?vxllpraE%!t5jqJN19;M`I-411aBHZh~j1`M}5wa>wX;AhvN!5B90ke zUKm#xWZHEZ1({wO`?nN|OQDwGqy0^fxSHfL5|(qv5=-y2@^&anJ-&rChs`};vDVIz zB;Kl0ep8^yjK4Bh#nPz$(@}Ju@LENJ^mM27uuBgN>paeb#!Tm{y77?grq04~o9{Dy zk_#rPs@Quv2*TuEL^KaUXh!}igX-Jm#20%s8YPbLYOEYxjq$5bUOdt$y4qh?JSoo5 zK$qZ`nE&K4y!(;G!^V+CrAdLAdUe!e7o!4m#q1O^Tf@Rw4H@j302gbmJ)m{6$@xv3 zo2>lL1@{(B{1xzSsVmr$13A2|LKp$>rOA01frA z4g_^Tdbn4JKBUTD?$74VBL%?=W);p|Dl5x}&*B)IY9WYiDH znW4Q)G*g--q`P#OIB~;>!b?!$`sjwR6IW4@Y76akk>fHKxQ zgFpY=vgc;Rm2cPpK3r>tpS-ncDlYI>j7s+idj_sAIQ4*lkJ_-^k-pJm2se>5amd$~ zc3Ht=X!{%rM{jm3&ZTZ>23Oe7cfl^sP^yq{qkp&Mi7Prs%LPU)L|n%Z^b6_To`8KI zfxsqH{h>zC$G6oECwRgc=v9A~ZC`m+Q=SO$x+o%gzm>uh3DZ_ecWYxA(WJM|qW9cH zJxyEfo-L^BI;EE6G_{%*wGRpA5v6QJ`<9FPHEd5Whkp2p+q_)DW{_-{#k^Yk0SISI zsX8|6TzAKGccIIntfB-e)UmEH&L)hY!RNSV@0cM!aU{-{cI`O!`&kt-m|vOlzQiiVPtnaG(4r4 zr@>azekhr}|IPLs&cks_W5$4IEfpSGd8&Gfw}@)Or^}LoAfkwEboR|_k6DRZ@ywR- zc_B4D^XAuB%3j>h*Lmb(9@N3J-lyut8T^MZS@Gn(4})CNnop4nk|*(RSx5`QlopfP z)6Q-DkB$gR9z;>Q*VGIjbSTfv33Qs*(#OUM&UtarM&XHbkxIt{g=5`Xg({-K5l?0f(%o~Iuz4AduX4;8qm*=` zGpNlg4~i&0EqfZMapcC!afQV^3C24~XYe&pTZK{vyvi}glOK7bb%x(*ox=Y(Md}>@ zA@{^{8TvH>88w&knr@e4M7SE!@zC!B(+E{Z? z)!2B5#;CjQJS$0JPL{N$Tc?t)e_a+kx1<;VGD6>euiTJ!dE9t9xI%p%n|)|+T!}{4 zh52MhptG*V+U3_I6lu&HLVmDuZ0z^aWI@(X^Wg=p*Xcr^ldf;O(|y0{fPG(dP64sb zYfP9>G<{8|D*MS{u`!7x+aI4+N?&L1d}*mra3P?jg5US`x4i%-UR}WEnen-Q&VOms zp>I#WiS?Jb#WOk{8gv40awWr~r zCJR>bcWt5CdS*c6lG$n2u8NcLdq@lwQc^O{jvrev*N&9OSn+0NP+!BEmp;oAe)PfJ zp)Qf3L24}Q&}~Uk<82Hrn1%9riZ4frHrz_HL(cRP^|M1~bknk^7c`qkFFO7X>@R^? z*8jpk7o9yn^}w-GbDWLce>@^Thd%d9cFN)wgOE@g1>F~R^R1%Ct|tXrDTH{Y5(<`e z4cmguPT@@olQ73k12?DeWl^^XTSr`@Ki6DJXj5;b{A28OTU>Q^6F;wJOOD`-VxfK8 zgWmza6PhbaMm^{%hdGZtrc{nCH#>YD@67ue)4^l@s3Jk&RDwwEIP0M&GlH>SL>M~a zn8z*~29{|OuW99F93D9_d;&jtRipBcb4uN9d-eSk=B1aSAA~o*<$M!ysm-8A+TCkv zEWN5_d0)K59*`eeeI-@4*hw(KnJn#9&)R*y2Iym}G%9iuR!>2V*+0{8b z!%2;bVzL;gM6dNfMwQy`e$DfXv`A>3l`-qN;BeJ-Q`WQ`K8ZxiUR$AznrWrj)suYg(3*?PCbA3?e0}!%C)!kHZ)fp zW3{Owq!a)_QQr1)(;}zFJ%sn+8dI*g^X!Ix3i)PVO&&&fGIDc8KEzsWYvcoU=`U2# zUytf#=yBN>vvzM>yS2{x;v!4RVt%OJ%~Ev+xjNbgdhETK?Oc8~)ZXw>e3}6Qx`fm^O(Xg2hP)QGE&wqN z(UWyacUW0AvY)~LcC@L%!`u5%)|LU;)dX2U2ZVL?^>5gHmCykKHZKoP&$iMtVF?+L zZnzmF;nuARykj@R>oCRZKvZxbHaRRcA?Isr3vAm1#uns9rVl`tf}frDNhP3POF7ky zhg++)c)-tA+DFD$XD4`QWkc(T{YG$f>iNnFpBh2K_Utq4YR)mo1GrO?%im)-;le&W)Y^iv*ZHFE(z=OcA=|X|} zudl5#%A3BJA$|F3fSdRxO;%F1ho;=Rv#sx&|0LYBf?-HZ>!T&W$~N$vroRpQDiCgw zOO~pugjI?*+I1<;@YQOT2E z^>RQ97vLlHk}qj=$D0Ef6g!m|=u$G=LnhwEw&;e6>8?yP^!5hvT9?;c1Nc{{ljN^c z_}=)tjBM$fE>l601D(NIvk64ARph!**;F*iSyzIcXFqx-FB#|aYqyF=x|}2~up^&q zx~0Df1RF`R`T%zYl|V2z_;84F^p*-vhv{8f^AihUJzcD8{vC}rX-5UhS+ zVZ>L&ijq%HcSurOFJGRH#Z!*R;5*hDRJHBA6^m?Q#GphO{n8Tyj$D=QPQvq(Q>FI@ z+j*#trWO6bt1anEATmqywI4G=(h6;hpW}l7k0cwwR=Or}#EXaealU}|*DHduO)|0e za+xm)1A*-2c^1>f>iWCx`2rNBw*6lFl~HfwjD(}~N;*O5=1I3cvkX&C#@p0k?z*s` zDQXxX^U25vrpqJrElzcouPn+-04tu@tq{N+y896mJ`8_-jL2?a<;+!mdd#AIZ_uvC z)*M|}M0crG0n}71oyMimfK@=CTL2wRsd=?(1#)lu=q=Tl`UcOj)8Wa=t~_a+wnP>) zqs8x;tutkO-GS&hT%<6QFuo;Bdl-%{M4sP~q11Pv>xw1a5Ljom{9`$H*dDBa6?%=m+s0Q&ZUu>iwXJDQ7i_ zU|U@N?0K}@-|Fe`3x{C15L56gpj7jH)nM5hkr4yCwMW)>d((0skafapJ$QO$7%TFB zesf3x$XS{DAx}hry*C1;#b%fmMA8-nrhf}#>tgxDt?!7^nM@#q(qE(B`)=_dhYJzR8V7YA zXjmiDw~&Iu8pLgJStJ8PP>%-b9cW7f41K!o2+C%%V6m^u%g8&Pn8z7mGEwMkN>cR! z;}%B%UIMSy2+BBVltBe4@xg(N$MQ~==ZOc~0aOMugA|waW9BeqxGA!U z_{Vzp|DF`n1{wY17zD+b#0N@TARf*Ybc`sJBg5w)%6M6Z1eV(la{mDTZvu9202|m) zQMr#QOabgO80nu)uZoX=EHg<3U+oY@DToLn!cL|*3#dcY&cz^V(aGVnB#DBAI|zoT z-r!3|6XjbK(j9_EQ$osgOHPCrVmq_*50KPXa|6T^_%n8jQCN}Hm*5S_B_9=>bp|&F zwE31gBIxeEHQe%+)L(484EV+DYymZ)E6KeUAbSlSdXqr(1d{;>!H6|#ovhX3iFA`r z>4eBgXy@E?w| zFLV?50dSno_~jp*Hx#b+8X zXXD`6iGWX~_aFLFlLpG!$vcZU+&nB9TC_^8K~rIy@9_JehmU8JqJjvkLdF2dC&N?` zMW->DR3*E&U8nOSwbSHS^bb8siQb`#y=nF;+4;K9GpVZI`o*hi>03Znxwf`;yu*&* z>S!ijaOZHYL=3e=0^G5@Qg?y&p!}O0Fau}~Q@JV-s}+&RV!*LT^C>^2m(Z);kwQ=~ zFR^{?kh8p-SW?otxR_EcWcE6m>dKg;C8F-0qy}aMM@SO$!14Pb-s*s|y$4dsCAuO{ zC+frHk9^`iZ}@`o=le{6=kptAZJAX|dKv$7CwuH|Q&UM=%pIe#;7XCHZw{}`1#Mp$ zmRM2lWQ%IiH9T^1`Py{{@P!+PnFGqmtI9un?%%J+`83*&r!^(;T}PYAZA1Nt=y<*R z(G3sjKsLXENYLU~JfXP5 zZ$?OP{>R87*7g7e=}8&Nlx`lfUGb1vPU1}hrwY*S`%+;46Sa4#-qjIX@|uBLz~!n! zsM$p)*@_On`!+azZKojKJE(A-M#bogtCZ&FD|d@by~kMfeK}Fc_`(jak0{G1AX{oy z2GCfV>up70yN)N^F|HdpFQ@7%roKCsmiU!5=r+#j;3H0>T<7MDBHhE7`;Gn#&VQgp zL!ykYuo11`DT3w3<#k1+5`dxuB0cR8b5f|Vch6ua zqGPgedzJY)H)bqtj_WYxV{s(*!C_x7?GxZk3bs$aJ9mG>5s}zD7=MUT-@|_DPC<2a zD$}BTj9|8ZF7L_8I3@X~PBfKEnL$17wD-it<}?c?9tFO#dQ}o8SRy%9QRMuyIyC#@ zCy^sLw6Z~DPi{cjeQYJ&I2Qm7qhxHqfz`tsbM5l{8t#w(O{UC0%Y3-8EQU8hbf8NS zMW@5McjPx{axV!q=|d>E2;PO`O5Sgmo{md@H|I7me(UVOyYsj+=`1%vr~y#Vh#%6U zZJ@>m_+SvPkJ+f})C{V3=N*CLfklv$LSQQ?%SAoZ@UCeG2`qaYp8^(!!Zx9c&Rp!m z$mHC6YbIQ68&SEU;!s9x?OH0=BTw2Uv890Lrsjqx8d;2fQ*vt06 zVYC_dn@>s;SqTqD69Y-=PWK;dc}t4%KGZ;djmy)SUexu>wYajR;A2CH%Gv%A^mh@Z zcEL+I@g#YBI*OW2q{31$0+9UQBw7Er^=Eb?or;CNN{qK;FHA-Ruf<~uGH($P5k#W7 z6&-~cbLD^I$I30dn?zh@x1%sv%7~i zY0s)e_km$iED!=#1|3@7Av{JUjsGnVDn-PQXsl0kEL9ek_Z1Y=IWNWjN z4OA`27CYcuK)d`)M*h<7N!#(7mB~LDU&Y_l9<5@0l|S2fZ1}PV;^9j`gdSJ1WhavB z!x1JI2s)O2-^Rooo{boA!Mg(3`?|*cn&aXBJsS9*!Ju}7{FVmRyP7rx_9_jOb0Gi> zTPTVCZHqOhELC8tESs_93=T-TeWQi%U~>sG*^Dgl&%ujV^HwUyElC zE&Xzswt4ytZ^56_)~Hgm>TO2BJjg%)?D^8$Yi9p;|79-nOBP1WWG&2jeYdsju>lcz zyPmu|mUo&Ep(=;grx|kU3R5%;Z4F!i=W~d-`)*arKC^=zIyzsUbe7l^S=3+aJ0qV7|UF4`gM z{e5cEb-rDJ8B&!7`rroOL1OexiCMM$Rts}Q1tatNh97zD#YM1hc3ws(BnR zymPVGv+NAdfai`(bhw-kYu(69N$c>{uzebh zJu18~vu;-qFkt+O4#e!19-eH~@%(P2yZd(Oo6@wHEqLnYC zWFJKq%STv1h?U%FiWU+E3h|JT<>BE0b<4dV9Be;lxg$>)980QzzY-Oq`p%bYda5N1!pT;LGR92icGIK){nE4h1l~ z4ZzpqEg7nUuvvOv#aTqDQ>9f!Rd@|0eugRBun3<>@QS_#}B z7ep4{{|BeKke~zjlA0$lXE*gpBX(`h0}+jkWf8=x7H z_2S9Dlt&>5bGK`alF*wZcaPWp02J!A6$2h+0)WQIO7-MxP+58zhPM5r9M_JMrBeZ! zb;aM0DOkutN*D$B)YzzKl5V;0@~Gdv?ZN`$*wLdZQ$|#k!%zu*rbqq^uK;GK?6 zm5WW`P7m!cdRxLsVCR4G*&;}PvIIJLSRlGqWQ|Ai$Uu|_R~6wwNdv|qB6UT^@sfw) ze|f!#2kf&0*4MMJ$;l_!kG)-WbAcDXF1r6eJcj?ybO9}oU#;Q7uL^`+0ltm|B^Z(L zB@`CHRW6gDTBU@PkiR_jJ(J!b zA_xfW69&D{eoN$&-*CM57N81jd?UM9>5bll%W&XVAbF9^AWz+E_t{f8j-`2(M>$ix z@eL!M$X&YoCo?jM@dH-&+ZG5%7KY0`Kc zzc?$d?Or(v0uZaWcZ&$ro#*y*&VLws`G?ZH;aS;?v5QFf_S>`ohG@$G#z8n%VW?bZ z8Firsmp)vLCAMw2V^)TxDHhZ;O5$Qujso6dsVV%C^&sQh1M8!nl>sOeIL(4_I(r+e z`hPjLUfe?OQ2;`KjVVb=Mulho4BjlP%xLK%px;;NDx}K@$&jD~WxL<;%4ZK0ssC~` zL~G&i{veYSdM|`ZeE6$h$-k-ghER_FbqzV#T0_cve%>t?OMxd#kV4Q$P|;Gf;0)uJ z?_bt6_$ci>`^9H7s|z~|9+rt}Z{``qOa;S#F&zQ$?ArYiqBLnS;$bp`cr5lWe@dT6 zeEpP;q{#360T5wV@`T*;6gwyqXVvY5H^ik|K1LspeWSPKE~$=k{qeJKv>xFPZf*ek z?6PTR5XI1g$I5g5^?R{PSvd>idfBf*n;5=SpcQ_V3lGA zaY_(alW}qG69Knq{TMC!dU?6Um>FQ9zUiC)D|$CQfK z*V*{-dH&$rMoQE@zJ`M1XesU;pgDTqIkkhQ5(vY;pWZY|^d|$0kcqGCV|%YOn=d0pSh8M-}*f3ptByrVzt4i33S_YkOm8_DTG+P2?=}F-17KBa}qaInvfz z0nR!2)jxa=muio8_m+qaoxL^tCSlI#6V0np?mqjWjChrT))G;Mi@^3nQsbk6v9U72 zcBev+I#kdcZbD||8-pon*VFOKlv9Ucu=TxEHsPc-i$?i;wrgvx+IaoLshmpO`q&ko zo#`LzmpMPx{%%|e`6p@Sxo!pJ_JvQqS2H_b>=}W7Gl4X3Ws7O$IFHQg?UE&d3+-&C zyK&GuFDVc^>>Arvwb8A^KBMTW}@bJQR1n~gHvAPc40&odTrG>h9;chWlmQfOP_bM2(3HD7&Bu6cAjgYc0ZahPo6T5 z8!JW*paI}kvp$%K%A^fOhwX*k5{XnN&sldfg|UvEeT4b0sHBdX8Y7mp%GhGX#$=NM z*@v$Q4tw0RtGXv(WHXiMXUanR!b8?ob$teLLW2Dwv`=PviB=W*&7i8ExGANuq@i_-FH)aXlvA}`}Nz1#fN z*gYF4-_PD7N*8|ZJIcW)uZO8$U4S6DT2&mD>kD;QN+f!qCPYOs`F>jWRVI@>xZhpq zBP{Beyr^I_sy3ELHX3$$lRj_v>KmW`?TT&AiMzO4N|vuT%w@WX_e6lJ67n<)m+XN} z$6`G=ipva4X|f5Y{x%-ALFq?M&S+_bNwxnm-iWD@pck%uscO1mtPJa! zCUTWskKy~;Eq&I&ov2oK*e2SYbt@fK1skJpc909-MxRRcNTfJt?2sv^u>yXCs)H}O z4*f+{t!JA-p>A`@`bg;I!Ed(;)Zik7aci)ZZyeDke2u*VIh`r%Neo9At1mV2m|oxd zwTNRmjQ_b$WIf`cR-rmxGJ*Cl3nw@b-0kSb$sp1r+qTz0ih`s@Bw+c!o<)lOJEFyk zP)!1NBZtL5mNXE{Cshid`oZ#nXzWi=b}twqjM>#JaD%RXB}rGGBx8YW=>FL-@b`W> zY={MM@3Hzv%W||c$_!?}d~r<8mW_jOz;N2H&HnR-C*HWEr@}yILiBw&!}u7p{(5}E^$fD3@%~$J>Eksuwh27yd&kf^7B1o((4C9DT_(9fR8ey)Y7(In0{)4K^u>TzjO?U{KT>}P58gV>}_sfv)=L z2h$7erPJ2kbZ^N)LVhLrWx77#1(3Dv~^P4axv*WrNC`C>8&%3_fe=-0)A2hv) zW|{rd)hs`=gA?*!F+;*JbGCy{?4ooo;ooAsZZkkt<(-7fbvEHq2^B6z(17DQRk1tm zm*-cz*Qq7(+3g!1t^}&CPs`ctmH(+w7xvFDaWw55N8j*tJ949jbP}=Kw(007g?pYk zoaaTeAuqllfuq@Zv|m}yj)$8XZP@s9n8?$3;>Fj@aM9DgTzh7Y972~EH;6iXhE!pO zy|q{rlf9piz?;l?^J3-8AddBABg-}YXT5EBpi}&XY9x;^zn`|YdeC#H zD@;nNEqGKfPVn{!Wn5Fa2#e+}d#|sem>k9yHBaN3XiqWJMMXM+BE&CXb+p9i;7YIp z(#dn^M-h*{uMakH(C1V19Uggg(|kkDk*cPKX_!7+{Y5+S{;gEqa_22d6SXl0h#83Y`C$`|#gvwwMh_-yN20TN7TFd)5q}DhSLFg z)4VrNU$60fGEmb7JSr(_C5#Ohc(nq-e{2hkr%q0{d;>i-R-g79==YD6aOlR#R;!HL zyPF%(i>oXd5(DN^1Sl;d95z>NWqwR(oz5ENS-*k;zSIFy44M0ra^+{zO2d4KI_eIt z&+JtbTehaV7Dtm{Q$^bwoPn0+)N_;8W^rFBzH}{yjF*e?E;;4+3ViLaCs!#=BJDkh zoq`R$b{F0;`kG!a0(!^K`ax>140*>b+;)aiz+^+-*^>h8@1O^c1TF;y%v6WHCC5W- z%edIk5!_s@=p#RyU13tFi*lOg#@+5#ZOu8kUdByv$<>nRA8ho84z+2olm>`AoHg-n ze-Sz%l6br9YslverCp$Sy}JI+szgFjs`P7XxG_#AX;wVSr9=43S7sEx@Szrvifh0) zq+F10g>87C>M6s3M-aC?e~W=TRY%r&9g#!(85L}?{zv;VlnwgR%Qvj(0{BIm9b@m= zCIm~`Frai^bd72PQ_>uYTw&L2Us4R?($Akfgn$}nBl`<|qd&UwXYeDOH!Tbij@jxS z&Bsm8bfIYB#)WR?j6j1sCDuVqp_#_V^u$!6AGhHajM*dyM?KH1$s{P@bs>!JgY#tkv z9BYd(!gi^R5$f;kbzcAFZ)8CbJB;qU&KntbxI^XNoBi*TlPUAZJnccsjWvnwcd6?C zcZ-D$1q0yf0p!S;QPnRfL}yD`_2k@Y!n3Xi!b{cz z`9vbs!ZR!>UN6M_E1zhDdkcee>{y_wD%tg0({`m=@e{V5VJnz6#KyhH|tO8{AXI9T#iKvnF)x}Di-Rw3Ar8; zugdJ#8Er$1k<2z*cXJ!tm#I-Ne2Ph)i63|MBi z_-jumdQj@@v)cUHKAC|N)>ox8g^H2uny{H_s`s>i`jo*)s)(7D?`=j48&1bpX}BL+ zkZXZW4D00jJ?m9Z)4hvQqL|i`1nWEx^VbhJ`p$-?7)uxp-v3Z5$eSn~)3$^AcD-t- zsRh$mI9H@da4vVUOn~X_@yk_SHGKGbv?hvxwKZISpDm&)zYe^SrK%D;u6uIxSth&| zm(|CHGw)@Wx14%&0H44+FW0`bU~}7TKHZ@v6Y*q{s+WjDy?hX1e|;(76&(BhSVqTAYKr%8vRwc1YBAo-hB5m^W&3OIE@{`LGHO11t$r4>LVvJqu~OwyXyQ9~`6 z0RCY^C3f8rtrEOIWw4v{$wBX*-^hw%BluQZ!QTlRwl_ke;9b@$ozN#k%BmPZE131+ z^})@%s$#+J$>=sp9Ghl+Uw7fh69QyoEh;)2(q1bUo&sqQFF~8Bw5KJ`gjL#n^zzQJ zRAIo;+-i5ONm~zD<*L{;1=e#kGEWt*O{L*&`7?PGtrMn;&GOAj7Hr$9xaNa zvO!uE&eW#X2nAy`ZT0)Bgi`pplu`!~6L>p~Z>gvE9W|rQ_8Tt-h~~IHwB|w2V@x zO4?BQ#EeGXWu1~t`cEpSGdVvd1iUle6J~~ zGR)(vllf?_(0=T|hI4~ttgPH}+R2Qvz#S3Z1^E}_lUS|Fy6#8U4TpD~6TqLg&J7n; z<%z=#q;fK9v;p?SGP?Ri*FN00G+qnT5r^u=2yWiN#pImNWxt16c4Cm;@YqXs*%slZ zFZzRaw`{tfI9llZjz@{Zqk3G4J}rBil9Q9zc>=RNTzEcyBX#7m6D`A86L_grj@W_3 zQYv@g{KmiehI_dD4ppJUuhW-*Z+!m#C$Pbgtow@ic^m1ZJk3^4`2M@cC)C{BtSIL2 z&X?vg2_(7a-!v0{0YbKa(~kT)3mzCb+=8gei$v4GZmOPC@HGYY7kDhk$(@Hb&>ZAZ zbR_|IV@`*hp?HQEK|mw(dGZqCyoj`FDQfm21uabhXi8FGK}+;F-VYJop%^8BWFqTe zh+Y;%(nr=ytBF#}pnm^HRsK#Ih~m#I;K@2tuVzXdcM|IEZ`s2xV54{>rLp`3XrdGj zTlzEYjrCNtk)kE6RwSa2N&FXRz+CO^dG!6pw|Z3PySOTOAksaW9sktP~{kUw%og;#deti zPn5+NFU_0?)pN6ZEWLKAhS;M4s)nZamVMuEGOJ_rRr(*9N#7VA@Mq5%4!ZvSm_jHUYiN`c%z%IwwvvPd((G>!LrmtYhuw>pa zC~k-PmZ_56?A%{+JhDA^x~CymUfj!?bNMPIa~@ejKX?$8C4CU5|~5631XN6yU)fzkh8pfREvAc zI}6+Bz<%qwt949}&ubzn2) z_q}gYcEqj^5rNzxO&ZgSO zrN&w0-B1}_Qccr#XF^6k4+TX4$z+d$LXQ)flUpc0mXY>t6wibh?|QClfKTZl4v>f-4i7ZBX7_vlow722r zuVDWdUq@6%Cihm|Dpyh(#xfaNGNlW$uwX`~f?B6eRed*KJ5riNYw6K!VxB2 zM}bJJULBFz&RmQ$x{aX_dolDkrTuX}C>VX0K(-q)~Flfo|Pu^qD5o!-F{CZ*N#o*X(VVv%3 zv6%+1>;6xZ2z%qcF`x;oMVbP`Qw7)_Zf2CUlx>8n8%}hG9{MAD<_{yf1LW8D(7HSe zo&M%rx3tQWq_f$mPs68O`TdVe9%%PEiXLuP@MOkMQem3UsA)zT*fnx^H8d3YrW5o` z_YR0-=z1~g1$W)P)n<@%eF?Hq7BBRn6?s>nMs49@cB;94eA+*c=KMZqw&1Fuqcilag zk`(Y@_Tug7Ly5hgIj>N)FbsEB$e5uA1tV?Q^!Iw3?yOZ z!RC|VAau?zvEtunnBEc+(>$*w)tNSC7hcdEQ^MxGSfuRLrWnFvUS6*$o&Zu)o=fTh zYIKbJbm)oD7fDUag^s7WzwKCl6HASr=j&4v)>qeDULEjvY_J^HkRgSfU?2Kc0}^lc zBY~hq4q1}^^{+o1Lc6)S4du}dSd56?w3noyFaU5Pd`m&`ap!7;@gj9!DJY~?L(rww z5LBb}@B9Fc4PKCw>{6R=ECOQ?na6kJv1zTNwBOPV2}Ft_zVK|RwF~)I?=dFTF5lF~ zzF4U&-e`4X9LMuyKn!RT9d^JDa>bUv)%WzsVc0$PJBGw42ly+r^CSyrrFi0aIKARa z-nFDlX86lvzdTqA6%4}o5(!$fL^QpMwCG(_xKxONmDwj}?=4_|NP6mzf9loEVqfsN z9rJSulS=aJzR__&#jpJ|X0ZBRWk^Hu1*TJOrzRcF`_ zB8;`g3W{&MaS!8BMI5uYP9a879=i=wc9dK7=FqvI+ZI2!bvD?&J^Lg6y==E_&EVYA zO9^{jcqp0y4gqm0<@TQx%hDK1z2^ZI}3*!`ggv@*RZ7J+O#2f5!P(JKXGG-u1rJibs*r+bi*GPGCjqq)Y$E z%cJNkno7=`Zk@&FbRMzOFZ_X=@iB77yt>8^7sDw2Vcy!`DmY#Z2Aihp z_O7pm+bJkwNuX>BivMiJ!Kp|`xC8kAP5Pj2)g$qH!A<}C`N`ACgo(1I!zKQW9Lryx zQYfNe#f#T7$Y^DMgKp0q-t@{?=Mkb(P9!bukwZwz18^V6v}0kDK?BOql zmDoS9v3Rtq*h06r1ok4Nf8u$J^{7ZUV)uMwmN0JhI$iDeGpkhUm;#3=*c_9Wd`xP7 z{|US`lmWCQS_jMv|35&Ewdxs zwYGht^XK?SGDif@uD(2&Vo@^=_n!o}5x;m^tfaym>$%~U{xR-T*|BC3#s=>k5xumF z_z{hpkM%iOmi{o#7;G=vYan%@A}*Py&eQS#WA8n~n(DT8;n={2C@6?Xu>eXh5;~|L zC>?3iK?H&jdWQglihzL9I~bHAO?nN8NNlU|Q}toOKD{BZiJZqe72w@pJ^&j)E!bzL^6JKeOPyg+66zXQBbl;KUY~jT zWzy54df1D8lm`B+MQY2Az?K3JMfY_8G}-bGiTQsvQkUUELz}%FTXY7OK@}H4#%_U< z?(lH=)~kk*^8$NS0voqAvR}P=#etZXaU8I&8+05-c<3)rv~$~ z4^ex*Ac%fX)rid%YxpJdj#X(6G_C_cTU)?j)s)(-K(2z%4wKV#2)Y7 z=@+2d4b;6ulanQ4S}$6rs?fqI<589*KGQ>*bhru=j{0DVcoVo32D5qTQli3mJWH`Y zI;9EXa&XxzWN>C0TK66;=J-GjvyqRMm9=1wZGQm8cZKfgpH2Y*P}>&i5p5Uvx_wX3 zi#~8Lj2`sQ%*>Fzn*dFozm?l>2D|~&Y(GxrBGv2JO}nn6$%Uapk$cn`CowPEUQ4ags)Sm=9WJ%=*GV1Pr!^SdAfra*4+P@_2S)pE=I0+|YD6eKQbnA(L)Q&mYp$+)7TB*{VGzE%YLJ)pL&V-jBhc}u zL0-BG_lB!I7fP?sQPNuem$q--$xc8W$!VFMs|Z2YJ|h7m6$8i^8jrKwSrKIDK)V5?XwGmycTW9uGRIFFoe)3iA%h_gqCo@3OO2c21$Y{UYteTq<#)uZo)Gp{sPq4 zoA%i(SCDcb1xPS{gm(f1gYw{$BcIldV|Gp@yV=aB4aUe!q>X*ZpfNIP{D7P;J&Rge z;;XJ%y!dN#)mk7Bq0Bj%Hm^($M**dO7POX)nC&^qqcTMc_C~#y$FfLi5gTuJ)N~d; zzVe@sr;qf)oJv5rxjfL6V^TrRu*>Nw24#vfIH+KQDx<7ZtuPni=w6)el67u;qp*GV zBeVEg$$p+T;iS?`3H5Bfoa*m7I`({QnLzKUJ*ig;8Se_y+TTt4nTFXoyk?Fr74 zU>(ba%x6xVZP$~qT2Rusp}-(`TU2E&FkbwGvUUEaglHHROkU7e1ZtA7xtCM-#(Y{6 zGcuI4bfdLOFY<*TQojd2M=cA%2S>FfZ31?S9d^*+JF0dG`9lZJ4_IU4{UdU3p<7AS zi+Qb9UL(GIZ^+qFkrFF6sp~`4ICHtT6sLDC(iluTBZ|xi(TocA|I3YGn)zHUR7m*Z zi9LChHL;Tgx>aJ7Ml`M4JSvZVd9-8PTPwU)JZw&1mj1iQSE)bEe~=S~;734DacvFn zAi;8jP*z9L-{at@1W}){ga0ey)WgPvfmzt51c&x zAS@}qVxjlgM3faDO6C?r$m5_Sbx}9^zK#kn_J(SP<8|Sa11;Z-Ob{1szrH&Zh<(k5 zi?N8l^%RNBF{_`yin6yjrV$m&FaIS^<0Ph^*gnW0=iKBMg?RoD3Q;QI3v{BB&%S;= z6pe!m#Hos+#m#i?h6QTOo=Xiq>Bnco7Zi>=HNsRH^t{Opx+L+#c-0uwoyd1~&{6NV z%(2%%I1Gl=j6Ogv!TZm}yRD4#oE-(?=W#oY;^Mm-Cy||=e$n;MZ|1!(bI#9DI4}0z zrSoBJUKOtA zyM|J)-WKu$1U=v?zie?cUE)6HM3$R*hBq-qD#$_WI-0cs+aQ;6!@58~*4uj$LPP-G z46G1KHI&S)p$jKy-4^eGRkJ73nh%w4yrR@qY-_|oI3o!=jPEUn)3=1NsE?&QL#f2V z2TQxy^IR8DYk@-Z>+KO0A8A=8(!7aDKTDLk;6Be1LBs*=6maf3U6<1r-d6Azh8e`( z-X*PVYiWsMRhEsClb3I_g>cS-tCJ0T4%Trv-_v24D2P5Z26 z%89k*Z&7sC6kXvCKY zpUfZ%I7h#cK5F?W6(ihQ(P6BoYB!WGL-Y1frJc&Yo@css0mLvHA=GfwhEIGCYonU$ z&4nHoeYZ@x^cE^Gm@8;w*K_1BfRnYv2OV2Wu;L;4Ec%aLqS(^$WXGbt$M=_DAr!JL z-(MWUhi{-veJfX{nH2JSS>h}@T*Ii~_fE7nJ0`&N4_A(C352397b%f~kUl&n%Ce65 zk#VfOo2{)yCOSF0N*Kd3r$cn;{nPg~>(Re^q@pC5KTW*EZhQ>O-@5Z<%DdBdu5=MY z0k0xXQo3!t%dS&>5L4n`sVvcMzVogrTzPSgHhAzoV+2s<`;GkZQP44G&L94d}I66wRm&_Be7kQ zBB0+LJqwi`vUI}!dQ%Uo5bjBhBCLHf{r)U zynNfGQdC#aDHd0jbJ7O6Hgj$U4$+s6Q&=XkaBggvu0=OPPv2)A*Dk#ncMj`Un1N7^ zk2W>ZcAI#GI|LG~zNOc9UWKd8KS3lZOS)IKFlXv}!^p-j2G}>x>jh(VN3ZhCGU)`Y zE+v(@puL?2U`+#js4H_hq+njm*SkPD5#%LcGY+~%-aeHUFUZ)#Ws$ueDH!P$ro>!g z)*hsxlwYE7BE)*>a3`md*v#Xa6-Y-P&34(#@|1=L7ZrcwMFc<*X$?*F6;5D7iLRiD zxI)p%JT)4fd|!e%5DBOqTqR0;;+vf1kK>Qr_>W1N?$C^3}>5)WRK zoJrJHL*m;Cqp*_^8G$*09kelV??xjBtI-CXsM>DHd-tP!IaqJ>A=$d7l0MCw)w(eA zTW;2n!y%kMfuj8NrZ9H8LZo)Z`rrljoJ3=AIX61G4{vcyA_g$1>(3l&0_e9mX!4;K z^)DbKaE4uRaY|iqyiwoxfGlBsa7bM9_^u~Kw&O!(+d_pjD+SZXMTc2te z)I$@%u}!O#%z>MlZRmDni%y7RvrVPn*fXgZ``Vwm{f47UL}|)nf+1TV1@i;Io!^N9 z3OAHgZ=zcYbpti#)!)a)Bjqq-gP&P#;w~Wq4op)dOlYq+;dHAIkF5yEnaQSzV6N!= zC@SkS9Bp`J?Y<|=5lwCQS)I{%Hb{FsvWn!IhUpx?MPPQa2(+IDeq+@)SiJ{v*EL|s z=2;=UCS=nlgH(&WJHZ9s8o?3M;7DI=Zkr$avb{}`um5*8k6~WcATIp&)&xT9*|@BX z2eB7!n(rvUkq_Z)^FH_Q&P7mwb`M%^|H^Y%xq0OQE~p_^-4Oe`Yw16_&Dmwc6s^*42VUOL3}z~*n3=kFr%E@kv}YElGt9^Pt3pKA zBxpFnDwe0#KT6MkvcUfk10~?)n(iqrX%u_Zl|wzdQ<*H%&3Q{x;sV5v*fphoq^Jdr z@@f#zZZfavu%J={6N571yJ7%NNpAEyaCtoa6uWo=%Z10SR5*#8u2K8d^_^370*2+0 z8wGgiSpZmyB~T6BjcUKdaNF_i0ItE1G4T9VhijX&99Yjmy;nnzX>6a>y3wZw8oGD0 zS&w!8coYOJkX*2cLt(clGPqK(OMC;+1^OB?W;5}7_1(ohqxm6_9i6BSP{!#8_TfJl9zD@hUo3d( zlk4DE=_Z6&G5+<5F}p+fQkYs$cT|DKQ&b;=Xc>-Ilky#|;JbPjew$7M^D6fSYI-z8 ztu*HwpF7PFV-#)ggX^q<#y{wmjDJ<2ja#|Ovg^#LvKxf-i;b)dSvT)D>&oX!=tak5gl@Zygk_R`qcY(PIU9pn2JBn|&c$jFn1hdj5!UaQ;<*q)&LXvR2<3EVV}VPqY%1h1tB5W%YNF_{`aF4Y`AMdVLK<9UvcZDjgyT`k+LZy| zhpXnNxs+kE%48eh`;K~Ke0=yEME~x7Tyiwbx=nbwxu^n{=?dUU8NJPRZ&J}zijq^r z`tiRP$SANg734Ol`ez=h@k3Q8m7P)`o|@o+y3F}JaK{3&L$GWRT`h0p-n^AiA= zyW-m|$`BHQ6WjyL2809v9_QgbKmQeiDS91WL||?u2PVti9#Tvb?qe5r9lmm|163e8 zgJ{!z$G|4s))$zOiDO~Do6sntZdHX;h&bZ3zslm*5;4*~K6I<$ekq2SX#VN`Y_80e z35TQ;OC1G_{JMroE!ug({1Lj;?lh~0iR=Va5U?*Y@3r52m!F$^U5p{1^9`&+HL3L8 zE>j%g8fJr{I=OvbpSDUd8F`M4CEu=+J!>tAZDRke3Sj^*15`A~M6jbothaxbrGQjQ znql2|%E$NrJchYP2&*y&EyRizLIti=_wexYGT;~N3FEmaQ zV&}Y_&t1y;qn>gYi-g%^{5;k6ffX~8 z>Uxx_pXK-4&4e#zV+J-6R=2mlG|Y`YFhSS|2*+;f?TF0?X!!A=`-yYQngm|0y}ir! zcK}3JM=mku#;vzgFAOXraiMvlBLbl{nwgGoit2lGxrjye;e#m2Q>5<@0L`^ih|>-q zrE%(+{Twg5tE(fs5V0Dk6sydyKEis`{_j}sMzIo7B1-?&YuywHEn|^OtaeQP3yNG= z%@xTdirbV_!ATklj@iDXKLyM&mu7HiHH@UB)mNX)wgUp#AS?4!n5%o1ZCR4B(Qs=P&KB-UlJpw3Y~_9Jyt??}tsnNpx0ln_eeV_z z*`~g;=W1Ykoc%a*w2#dYbF+|?^ruKhuYzrsq9s#l^lj(dvEYJ)r*V&NCa5EmQWEgv z1r&)1;2Hp~yvg7OmY>ws6~HvI$K|815bC3fO}>SE5y2+2ed;=oyXS)xvZrwBlypH9 z)pd9tjn`gyP!o5!5u6Xv6t9(jh?^}y2X$rInnpB{E#_Al)JOQ0}&=dH>>hQP_3HNn+haoIykh$}y6MVHR(d$G{oWxiofAX&$$*jA* z6@AKLfo%@^oFgy0;~8j`<9B61tAQfIyVV4E8<)02M;XiHi1=buC%Ym#*kesC<0sv% zm77)S@r%_B>YUOdlIR}WQ^bsKVbVcRArf+5<3jXY z7=MNRRe^#mzC22_+U>3SnK(1jv zc@m)lGt*n~BKq;C96QQhdf7K{N{a;QZY;ilwS|`YF_3nnSY3Kqi^D?^FRBg^cu$yN z?rT_jfJIDd6tZ90x6~ICok`wnC_rpE{8)QQa()7xD|&BRVoeF&n&+a9eY>fF zx|mT&I^s^^oN|PS`hSaSswJgbj5MD*U4LOr{`uNe*b&o@PB$EvVHyea?$>dt7bbgu z_GOGOPB+`0aum}q238P+OMpDrx5I=g*>%WuxZ*}TzxXcYg`1d+cfq_>qsJ|Erfa@C&Oh;hd^`F{r=*~ByI>

    dP-7 z838NRFyizWKhTVSb?ZKP_w4+$g=1$ya1Ss^BEA(g#hri<$$Q6Ynr+jLT$1Up@4KFr z9FJskHfQJ?u7JAMb=uzcjX(C9FdyB(n|c>Om%u3iehM{kAQON6yMJQ9P}XoZt@%=H z7RcsmoH+C{6jc)DdU8g!hBw2X7vS@%SWG59FEI&8d{4MuHQd2r^~VQsycY!k%POIT za^-?PfP{8Y>N>qBGlLNA!>jym1Xxox0p6QC4yJ8YZq1i16px<6d2|^T{06QMs9nnC zg`CA#1zMsVz~}>p6*P!U-LO9X&pA}}m7;Dt4%$cf<>3?2#!4au_EL-L5vzpU-4Ac;g*HM9hs$$K*h{*u9^zr}>>lh!QrfU8X+x05$|} z<@H4JuU0_aeD*JFir`S7725p$VbY^~uOE-{taud8?f{lU(d47@_RD}|ckI;>$XUQ; zh4jPUNo4O=ulg`TpVx0LIqT|a)by%eFP-aE%Fho zz1ywTm3EphOk0IZCqE?Bof|H9R@UW&+#LmaiUCjgm{do)>}pPup!arf>RS!zIPWpY z9l+5Eic)rdjRxsn9iF*)zk`6rGDWX~KCr4EZH^8e8!-PEfHiOu;9mI5`gd~I$`SBI zNvZzrH_pP`{X>z1t6)1eijF`C869x)!6uw58nPKld|@cnKcRDjC$3eN#ofWX859r* z2-wO33gNqXU|Ha+<4qBIh&3aob65DO(8;v@Y%|)VZsKritpJ9OB*Hs-FSqMw_ooQi&sXkcJ2n9X&s*3T_i5st?~6H3Z#K= z=5$83W*0ZF9Ipw_HHw8TeIR2OdcpCuP00-1z^vX*IeUfw zp8ErGRn6|nkEPYKuR$mkL>b}^xYk{k-3`ke%V{S(t7)%Bf!%+_Z109?LWg#CAretY$lp^nB|`^BdhFS zTx%N{w$D?0-CtaJx%-E+wHuaBbob$(TN`8J;4qOwyc^R&EEf}>B&XJBS^3JE!j1Ea zQPdFq?mLy?SQ!zg(Fq^`-B~&z5dawkNeBsFJerDgOsFk*V!$7KA{(S70fgDHb<1$(d}P&?%ggi-!3=g!qIv&zeR z={Sl(?yNMv2is0b-AzPkkYDNQr&*jb8T9g50RW!vLHP{<59?P|B4!al)v0KZS zv8pt~5K4CU)GM00WRS0kKnF7iK*cXrkBmHZg`jwNQYr)#<~Q$#6O-(5K_Qoqg59D+ z!mZ*!s&od>%kBmlQ9(Q_2ssc^fCVXn_5?53GM-$&;2-{QN(+yXAwcr%_juFq1%(gN z>RH-K!*HBP#DXZ~4lrW(@|{&^;Ge0%1nZqNL-GaL0H88fXUaH)_5g)-%~k$QzfFtu zg_6zI^aU~8fzoeDDutB+Qtb`W)-;RtGH(U^>D||HosPPQy{_~`-7`49db48?5<+lE zdx;?Ij0#ts=YJZ?i*wosxUhAyd}HH-v=GSRXjLU*n7ykr`GCw`N}-N)kwRU!EYeNs zhuk3y)pQP}g#%1oO8zRcCt5&jb+`BZs86TaO>kK50C@pV0lrX|q9x`s#}TWhAI&q< zrIh`?Todx+EI!_y0ICmPz4sNZ9xJWid5D^0cwL8gQrg7!WOaEUFbLr_+~VugWMWJh zSmR~7@ce3=bX=(Bl_)qC2l7D;xGuRQB)n-zEJhG|Et?8*hd^`c9C{fJNM`v5T$-l6 zU8IniJUJpc?$44tG@e*k_P~_!C&sKhtAT|WVo!L#L1amA1A|}V;%!3KiVMfn?g$nR zXhaTP%(j$E)$SK9`;auJZu!>jx2b7m{Yl6Ppa3OeqFws7HWUV6@kY0I3-_V|9twb<%B(*ltKq`4hVUF zuLdsc$lV)2z9eGmqBhJXwv^p=M>*O=b{oa`!D=2d1N|k@a7k2NQtSG+Z(q4L7=&iR zsQR@)b>`JIYx0TdouJrQ0Yilkx49GE&8VFjNyEx( z3I9^oFiNgnRuNvk4Zws&5R=FP7W`o8ZKsuO;>qaM1+|*An>v^3!l~h#=d@RHl1tJG zvtTj;fx5%_u+dQ^NC1INj+Q~P|C3CF`_6mzwmw~_oh`~q(O~s+kQoAsf&VEE+dUk0#c?EYC`b8`*!*|@UN8r|#XA;eYs<;j zhaBba=X+Yqq^G5+`M2N2aND~fmG)*}*Td}WYdns1ZaArM%&a~J$a~kG+|keauL|apr0xqB&~y>(EkPAKJWLlNlLK4=I$0S0a&oBQ>FMdp zOo7lDW9rejF7};f-{H{1rv@63Y}-)H5*X@hDVHJ{oAG9LE-eS!o!yiUJSsxr8SN*j z7@LjZU4GGxD}$JPrR+B@I-Th^fKPCTXkWZ9;76ad|H4o!EO>mM23k@n`<2Usb?PKY zv@gDzO_RQuAOm?m5p-%sHf!w{Ze~7!# z#u-^z>|oLbJ9{B<3n-jUTL=OmlrVp%qZXoVLkkHZI!aje3R53ZcUFl1%vREFHtR76 z^Zvt1#DMwk5X67?fAoCOp#GMA@7u-KHNb}itZ9Bg>%W1LB3rUEV9E>gEAn@;5FJsz2`f686>`whUO1 zKtY!$8DX=C(GyaHg0v$H1dt8fD~J&D9FyKxnfSfH7itlO5||)`-#{w^sNthYXX0At z^o=!j+5i}!2&UN)Y|A$EIjG@1$a%-qhBFm1#T$Xnr$2Arp9omi@(Su|%P>5kCgm@G zsCVqMXbZB-9KKV?nh-TKFHtnySv!{#zQM1WGPJtUIya7f56i|#6k98lHR%R`nJl*m zET7Kj;qH4@u%YekiwW74PV*cdTa&HS9=1{u;aTa6;*WXn*}P)lQ7K3Z$f;#&kJpO=~CEMl&O`E zEXT}@^sdpXTb&sw%$F_wzyCN>jA&hK}OT*RaKZvOiq1a)2xlY+h zRvBt6=VA{}SYT~dVEta1QCK(_1NuJxa>bwX`O}q0nCYJO71eny`iTwSxfiaaGm*`G zlNrud#s}E3|8i}558=j-pqJtBl@{*O_q_&r%|E|FjE1^_l*i$j$P{~1_zR@@|Jd=J zd-){8e|ddaQY3sGq|*-%jh06$ECxoSYPsC}qZt%#kiqY29GpLF3`mUQXoC!FuoyOH z`#+8_m}U){zJL|Qx3l3(;LgKo0pR}sfB65I4FN_nWtlD^R-pE5M>9u0AdT{5K6E>h zheq{)RRzZ5B~_qOcCw4yU;bQzP9B=(TX6Bj|A`TR0%8Ye2@lR3`vF?|3C9LsS9@d% z98-cW!Yet*3Q%0YZ95O|YQd|JKzt~HX#Jmjr@I07- zHB;X&_9>|HX)Ta5Y!Z;d26B3YgE;H;DZ-`BKFv?ljUsdip|EM4((QUQHwq^>{1KJl??M?hq0A!`~L9A?vA zoMUIF+4kDiIY}-KDT3h^GPcm$1i8FT!kj2!*?ffK+5=qT&siZGJHg5Wkj&10v$tYrJtSAUC@1W52W*6S5=XI_fdmv~gOIfR@^t<=-pBrrL zpev=Nv7E5yoV{GD_q*OC$ykX`d0ogvL`v&-+B#7TQ(vybQv4l}zFcu0zP=Iik~TF^ z%|zH?yhBzhT)Lc8=b-EMe6Q}rWDYuSco3Hlt~5UtBr!@#;r*VI`6}Gh;HL7^{1aPQ z3-U3xfCS6afZ&_$DD5od+ZV_Th}0yp33)dL7N+vgWk0aghg+Vb9g?~Uir_#B(+h?T zYD{VgVB!Vr%@+*6-J*h9lb&dMT@vCX&7_Zf`K=QBuAr$eiLHd2tE#tJnrH1|(iQ-d zJ+Bee&5n|N{wHJU^L&h9vgs#El8@ETFew{aJ3Y`6Qv2VR?jn!ke=wCN4Q8U)i- zLW_Gk|N0?y?jOe%2ek0Bzg`Dk|Hs?F&`I>a1BW{isO^);OfmTc5qsDS4g{Z(zb@mR z$2(hU0y4!^0;qAP3OdyE(cu?C!F6Lw0zg#5-tb zKF&k9-9_p|?2NH9n3m-YPIBt4K8t~3v>=zj=4u=5;PMZ=hr=6qn!l@MQcSoEWa&6a zA^KJz(omJ?r{mzDwLmS6Rb&g`zIO79(QW-|;K>9%84do&A(ufDgv2!3;lPXK>$$=& zHncZ4+7U8fdCap495diWMN4aEN8$aT>D`p|Z-^m3yi@qNR!b z57p7KEV>D@T!Xq3z4|+;ef*`p69Le*US8QzF7ZP2 zIA0O@t15h@IbNxLw2@1a{cm(sDqtNCA_tVR`Cg<3Q4Qq#i@EalH#PQ3CF+CP1K2>&qlImBtR^6#z8*X^xLoMSr2OpPUqVUHhM$a-}R<)8y?e4%luv3K%J(iydn^KMq`$c}uP^lau#}9DYw`+PyJ5>)EGF zfxemIj@7t9z4+(WDF;ij2nL0Zi0uW$RO6$8z+BA~9~e(nr|uiEj?TPYn60##4w|CN zWCZ)!{C@%qL1F7k<*Oeqb-v!xj2aKBrf9kO(m~y?zAMe6UUYI1DTQkWJ60`9@V6#X zPUMSW4##rHv6!}UJ~l9}4v!UrqGdS&_vbUj+3wZT-tA1hO1_$uN@OJ}{0+`J^^Bv8!>Ryv}yq2f6F4v-3m9tV{#gWcKkO{<` ziA#j<$(8gC?|q+FlwCjLz}-a=v)eWkAFJrh#&LQ78#YODCH#)R_f=Ls(8}xZHVrW|rz;y$~*5bOfkgq=h9)OQMH*r`Xz$jkl#aG>xV#OXpzwnX5 zp8e$BuZ*jq8%w*Em2OiTNtxBQ3EE@X{zt!hf`I6=KXep~GX}waw4f*#ujjc6TUmrH z?J(DkCU4`-*#^*J28tgV{f|H{-v#QW3l06z>aog%YjFlf4pcqd9X^P%h#;v1;sW4` zKs@nHQW7zM2H+q65CAw1yWY0HNxhCf0?!eeKn8iZA0h(ht0Bq|_*c)CvxqO(#^X~2 zUb>*hg#OS)BD9a!KR9r_39Je>2MZ;1>UnA(`dN7L1$xQ@&k7NJ*vVO%GLWPS*me%S zm}8Ix$5&Gy;P<7*9X&RatJ@E|H|>qXE9!p-s&#|S*uO>H>%hVAUsjJH;N1bRVUerw1dXq@Jx6BguSd z`07rb<25r;YdoT?FxZcd7X8a58w^e9bu1fbrQJrTEYn!nlX-tBFdAf8zSRLX@Ba%qI{rR{nDNO(qYjoS<6N=-Ttqrs% zZ;BsEVyk#$Jjj-J4m%5~<;y5>$B9=YwJ-pv2S&F9*!d1}5T`CL!EQVD?e2b^UYHvk zDL3GA@RQPVT9X;J@povb-v5%o4b}>|2mTy0!9m~n;9$i(N zVLr*a!{3;Z*gux`Qv=mb2aiwUMI5XS*TjzN60n^G5T-f48KGx+psKFb!%F@ikhQ;xD41Z9=?msh z&uv_AMBo6?L6QPn2Q9TD-&8b+Tg)m{Y{T*H2Cuyvss@zD9qcsGoj#SS=H_&Zn4Te= zN|#|>N4K=cU2-|X%QMst)Cq!AR+st!gXS>hZM?u8S1;6{nlbZ11pymwJcp4)e=0}xc-|3go_79GIH0h*UdvZ%5u** zW%;$vE+N2K^KtWxqyb`cI)n4eVtc!_<7UV}>+X+rA+E^ZNVamW@Sd+5WSFaPOhwgq zb=9grbxGomycSYsMPe;rfcjyBiLJU|5(`s_Tybq03%1t}DJPFQk4UCcQMZfz=Gey! zwCKU}Uj72J?SCk@aw=`$JvUZ0_xMI|B{!n9iBWsBQFeUtUS!B&m zucT2XBpd%iG%_=Sqq6f4DG#dhD}2^if1EBd`ueHUwX)?JGmV_y&%6fhd%v^T@7QHG z6u;KbAlKOV#5hnx31_TXsi>+N%!@Rs=EazNpUdg>enG&pr{$_%en9$38JSO3Tkm@vp4c$vku6=MWg4mxjL;S6 zuqjjtnj3uxbifMKhMiX<0=@FbSqqw0h-g_$3Efz=bP&W}i6yeMd&)d_kMW**Z5l~4 za){fHlV{0#r3H%8SSxAfUy7ixouD_kXsj#QaiC{8MXsHB$W0gI{s#gx;!&{*pCl=Z z8V!K*mLf+KnC#i2YMi`ke@kjP8M0bGn^ZIlgqjWO$L8_jn{4(?rg%;G=7ey;5swtM zrC#K@jPHZIJQEgCyO{-@u9~~BkU>gh+a2#2zd{bT6ga+f>Ojdujq{`2{g~y}l%JD6 zVq$QQYK|_4@$mHvrlFJ9bhPprJW}AEfB8BrKkXD5^L8xP=^Gu7(3`2BzHJ9{^-qGO zgAh(aVqV z?Hi{w?gp21tPT!Rc6oc{?M*ct*>mcQUKelB4^D6*Vo3_O>7J_Zs8b0`J|+`)-!W2D zzefut6_dvRI>a9mf)5`*HW1$V4V&gM-735lpCJUt;2(hVO6Ge}>L_3LX}J4M))H9L z5Hdgr4uJxQfdEGX8(#b#Lj#wWXTTg!c-e|o3&8<86%0p116TF(jM*1acR2~IFOs6} zBw2u6hcooRah36fZdew+qH}4Lf2cA|tz-O&R!4o%EMu^`<|hYvan2>Xn5g2DWl3z$ z3x1y5dn%M-5q}LqsUZ;T zLB{gGG_wONH>gNKk$lw9(0KpX1>j>~Ja>%0p%ztbypCn%cQ7d8zz=8)Cb%3!XGi{$?!?R!bW!hPvm23sY|xx8>}4-Qu^1CJsRguc ztyVne>SJ}0&NK}wkfbDIQC8?g6x=ooRtN8s9&()xOW?QcDIs_C4)m7D{g~m)bn7iA|H{3ajIz-^ zK@3|fP-{rk-S^(am4X;lS%HxgvKZ-7rkU=S%g%4j(BOZEGP&|Nk3psJ9I{&~02?nj z?%z@_%tA4T8yt>}KhOo7kAQ&{6fL@_s=l<5PE+YH^u@MrhG_7(@38u^M9h{z+z{VX z*whPJ?9Wzq--?Dlogi0|=g0C=i)42lbk?q5k8*SHJ2N!2WH{y470KL@chb;P+2*Z{ zh`<>MVtHD}54>c8*Pdoj*^%sey*T}%&wEvB%rmIs(}-YXi}qvTUqmjW`f{PX^U>~7 zF}4L}{!p_z{S|1dQJLNY{4BZyM~7s`|D@nKyS0yE>9v_Yw;88Xd-%1CPUMNDTnR{9-2F3`kRuE3R8j=wUnOw^L#n3?j$V7(tE zf(#e3y}d3pr4&@#_aa`c+EFSL*Oq!_oXNV?=hdN+@^I_vTvO8~H_m#DM{im4NksSP zpQp|nDOcy?#>te>(f~~s_~u)EeTt07y7%ViCOWvO#|Q2lSN?`GoW#==efd}g?Yo;N zVpzC>;{5NtxJ1X}#%xPzw)NA}r4~)G6V~%H?F&apM8vAm=l5!7FjI9)<2ca$dw}5p zmcp((4f6({!64%Q9Q_9cT!G8({i*Z+jROlj`u-(Mo9@;AM$Xk)mo0|BdJCWg&GeWl z;Do}{i2~NP{puzn$XDRN{1<_5e*yG>$(NClAv9-qXY2i42kz+$hX`(aFCDm1c$epI z4m?PDiyasZ0&m>^Ek<&A6>qZ#qD%!?qAGxDI6&&o-pwxn#D{{wjUT{?$l0TlgUW}} z{gUhNc_F$SYomY@?${LlCsGhihxa0QmOuA17CMTA2|jma@os!uIDaEMsYqJj4Nrq1 z!Bg1xRFkIBP>^D4RW3XM@BiL@7M~=j5Kt&Kyq~(q*>JHVAt8FpswyCT z%KJVF)ob%iQmwGAwi-o7EmgFXTeu)P@0j0V^^g-8djI82Qw`nm>!64Wc<4m zH+A+r)b~cSjgw}W`5B~Q+@Q}XlGfkVp`^4L!+npd@NnPoN740a+67Gn>fDbaegr7A zZrUEg$%b=pFGXfS|}LevoD1hItD2%>A0y`&V)^kC?xi~T>6)Hx&Bhw3#Vx` z5>y{H-01Iq#~-aJ#$zU>W%bG-{}bKKo@T*^#Ze2v%}|GhAK`rv% zKVU}hjeJ?weax9QoUSk9iV~2wJH0ipIa7qpKXhXYcT-2iHmWi_2HHeImb&Zy{2Yvv z=3V7zKLK_GMgV6)hBfn15;@y8$H(t@=79ZTPf()5mG`XqywNS%Ev0bM35-H8dD9 z?JX{)fP&}Xh~swwy`4Cz==x6`$3f6?fB}7>8fWeR)Luy`KQk*Ues6I^i##QMd#<@# zPuQgO+lmKtXLD9;Rt&Myljfnbom38mu-e+%;(6-;{hjJp>roQ?u0|F)XxwUOY-}9! zje0MVl4J)u1S~Ctim*Rcw&)P7+2=jkKli8<4IRle7Y$xP&C>j&}=IV2% zTlU_{`yOa1y^lG%PqJ0QdJ*(t3ObLh z=vk!nToLToO(ew54l9u1ri!Mwj;c-rhIe=fbCIC9JNuMmCxCJHb|X3VpoV>fBqt zDQ67L-MLZV)^%H%Zr;y-vI&@icXtb>6-3AR`aKJx;^KIV2A)w(QR4fW{G09{0rm0J zLN?ruN89)TJy;gIs6}R)-KLu$@1ULyDsLm9tx&$To`qPS4YUVu{`4l*1$p7{7c;<> zozU3^2qZH<`Q)TyITwx53zNsEjR`bjT2>s=qQ#*K@`KGTwhh8z!l4C88L|SQB`pry za?8c8!ez(TCZ8elqYy!gnJWHh<0a))dt=?aSo!Rn*6{)F{K7RvfWUGKe3DUX<}3s= z3R+{pb}!7bR#N+kf_D>Jw0wOzQ*UiWZ}XvVA^%6OYB)z=9DPR2Qs10xVqtH zewFLze4Y0U#!Ax@EcB74%di$4n2iP?FR3jx`iFHx6pb(L3V3urYjvVB#8~a7R9$b zY8A6ywA%PRu0F)Py_D*nxM0|8c$%>^;MuT(AL;mN_@tumQ5o62q?VG09{HKS%$lR* zDn*5yXFrzPKrsFm;vRUh(9xziJ+&j&4uV3LfN4&hYgB7~V`&l{-+g9=xV97rDe09h z@--;+7lO+toVK{<^KpVf6>bxNpbGSw+|mcN-C%>`Vq!v!5<&6*OJ~Z6S5Fy(;s!da zvkL@TK2nbU{?QPut5OvnF%izLp<_hDoRg%vuw9}4)Jrorp}p!OrG0EK@hQvc%xirZ zKo#l>J0m|AR0!xqhBj(mbR-l`jvF0QY#tjM+gTeHd$>0}2)cr;>#B*LU29lY`CMQz z?9o#BjrQPC{5BRx1{BsZcf_(-3@!#dN`Q?>oH@;izUAxAJ!mMYW=z-U%#5R7dIj$G zcyA;H<-fy!vdn69`cpYfIWIYz%l4c?{1XtaMUdPzz&D;xw8R*Fa1c~3|M1v3U&m>+ zg7<2&s~MtmD;`BJqv;f1K%=3BRafy84Rg)<=~c7I0os>17e;awn?be9aGc;0jEUm~un_4noME+6kbFLK_c zw|Jq~q^$os4s`ww6$WYGp0Z11ztd^|`~b=1WbVMZ$M@ty#;F97pjnX&cW&+BYV~Jy zV$N(Bb+S0=NAYYFaC3ftohB5>+u-$O=r6zo5W-{}-zPx+>L_UE+Vr1vpos>Ad$ynf zCUg$SF|Z?vtew>#Wmh=;{OQ%kPAStV2|p7t$}S?E5Kw7u4AI}RGC_$JIE~PJ1I!wV zq)Bn#y5g&ibv~emgfFnaoa_X&q{G$EGg>+gU5^DVj=cT8kxv^G40>xg7p8I*gS)!A zIwptqTBuW8H`Yd@M4OX15}a*EIxE?Cm2|H`F7ew<{QyUh<4nOn)Nr25ix=XUQr6I! zc9SzwT1@WNKUXF^=BM?f^`!|##0|r(vj~$-AZvK{os#G-?{mP?_K$R>o8fJVqoc+x zJmN13Zz}?%weiB%i-XF?_yEGcTgx%L6*C-Xk0EW8EznG9Ytb$F#*uSmN6|6g{-5FC zET#aZ3ZKvv036Y{a+gU|6Et5fEbKfCCk}91JF@bi1wA3@OJ?MC>55An89WN7^5sVy zYlV1Ch8dc=M(d;YvxkAkB7-PKQBOQ)Kx#Lr3Z$m0Izm?{O4(J}XB>AO$tOEYC8PbC zEOtoLaH7{1sE8fk!Xx&(d17gnt;$y0+6w|I z^`((x6lvZwKKIxV5X8a54m3OTJegWFip=#IA3ZZh~2 zVtjh}*pIRUy3N9Zo7CvnCkds*QwI&_6$K1``^*n4ico`*=qN$WOeiu0<;I>v7vQNU z4=NiVE>ig)t{h1$=#tq7fM!%UFzDgyq~GQ$RTMDXdhiwB)5n23%VKi#y@{7*j2Y; z*y6g-wMNKS=%T+Dm)fMMQk)5Q4x_MNa$dps5BK65djf} zCAD_+`S2QGqsT6Kcj-~>eNnlE+gI)zH+~9Cf61?+bAcamb!e@|ukZPo zA0OIjA;mwn%;rk&sf;3pM)ijJx}p?F!n>w@loOx3b7k8^W|tn8S{3zXn|AIp(IWw? z6+Ds9RxcIla#3h){IKhLgOhDHZ$Uj@fZZmYV_ONv)t$BcnbMr54Lej7bgw0z!skv(49EV|6O1O{0@X}sYQ>yTl;5}d&y7wRDReWa1$=Vwp% zp>wil?P(b~znu}7fQ?iGg{PO&PMm32+GsvQr}-Ee zpgV$ELx-@tX?q_B4aE@Vi5A_`ASW0em^4HRw2vE1tE(7(0jeRRP6nhbdp@FN5c*`A z*#q>3pyJb!ukKyz$pU)JD9m-t7Hv%pf}ae2>#&7EaGudX)=PzIF-U5xw5w_~{h?jC zs@`d*{vXfZiCP-tQ(OgU)W8#ZS zZ-|(yn5j2@HnQR>F#0uk7xrO7&cMrr>C2Zko;7pd)Jftv$|BepK?xtP{22p$xLEt} zs?ZEY-Oc(0as_1TjhpR=A1xbLF=!|>U_;^t=|_k6lmbbNppM|xChFc3?*q6ng`?p* z1bj54`IWePYbMuHBqZbrZc2X<&u&?nohYaKAD+l3Z*=A3A#Nox;c7*_@xVqA)U`fr z{b+~|!5AgV9tI$s4h^MRtr|ekaLnyAfziP$$K{~xP*THJtDJy_%%<&c8<)QTgoNGWm4#P%S z`ez|PCFWzJE7lI8Xz((S?xG!lFid*Wzl(0GrT>FBky$Z-?#E=3M)PprVb8AkQOUGJ zFs^Y1O83ScjqF!!y4G$45ljY8_4?rKVi6KSPt{e`f?MsjE5A8gr6Au(Sv{_i%)*T; zD>y3kY2{l0YY$;@C!xVTd_%Tr9!m?3HKQ3EV-nVajCH zId)!=U^~`1opiFci&)Gtl}#g)Zz!#=zc4rV;TwG{KIYz6offvT zm2~zoni{nt95n~0x>W^74&MMV_@w%R$HQaJt z1sgBCZ)v_+aKZA0dQm_H0|ioroztvxyRmL_W}2yNtr+z3czY}7?xhzXrWjr@J;ocp zXg!)fXKrzqfS|!LTBj@o16fq3uIM>mX)tKA6T8yfe0!!#zeyh3U$g(`Or-A?D~5){ z4ErN8l)Zn{%MH8T2~WhY`;Q_uR{!i6reWjr=>}okRp}^S(uY< z<18k}`q>5-11TQn-}~@s{Aw0yuNON$YD#Mq%q*^*yH~U{|7mZ{mPwgs(Y4j1qZ)9z zcNWJu*~bfF*%!oW-qqjtQJZ>@+42|_fqDGPO83p0edI&6tuCGmMLA6}y}Bvhbl;rx zgD~BauQ_b1`_pNlS;4Zyf`TLVMv)4^i&{s?x__Pv*I~a@(7wIJDGe$E7B{SCzc!sO zitS!cby;}2=cj=>WChcK=S4|m=D_RlZ^_%Naa(sMrdz})h6kFzzcx?yAQ#jY%Rdo5 z`pb|V3YD5@W29uD4j3Wnp?<5h@d<En=p03sEheBElHM0O}zTgXS1Ke24_t+N* z5$P|NQQr)WR^x3?`oj)r5m?JNP#vD4BQ&5Yo<;IixQ;8 z(~k6(wuea`DWbMBLynhbnROo@e&r}`(H0_MNoGp^iea~dKt~jY|(4sxd~1OXpeMqKm5u^5R1PJsjgw8 znD7MwT$J^f-a(`3hEaFgl&Qz42Ty8E1bAt!0xzW-Y?r7u@XQ=_@V9=;5v<_cxL8n z!%N4{Y9`0#W;Zb`o0zXA^0?mTc$c}Bt{I_FOJnIA%D z7?L_;j6run=;zyj#V@DT#k`$w;zfn<^jmXa$j)DyZVRBdb!-ZpOi=eQlt5AfJ}4cA zIDnR7VJM4$!&w-YUi!yb*$A(G(q_!gO|bpUMXGJT3u!6Ub~kj<6Oz%8Oz#A_aF4|4{+c4DmV(QF5zx;?))}`BcPI6yKPIRTl z_&0ChjQ`#$qN!b@FO|D*NHru7Gqgv=jGIIAV|nX=jS|SQ=7IUg_>85!oZjjPv=bz+ zdP*lS;yN+{;}R#E44bk)3&7nl}|lP>7C1J4+q1psqWR zAn@}bvOK?byLVa`T6bx$ULGHn&_4j$z8J`cF(rqhOeZZtAKBB;ciL*T6cNXFU4h$k+8$MQJ-NBS3k9Fe}T^)Bd7 z;PCv5_{->!-Vvsk^XmQ9;g))h$I_>kx@39$kP-fU02`ow{C|v~tc76fi1l^IbcdxL z2s}e>j_R#6k|j6ao=0Qn?M-g92YdKWmVuszRiwbw9v$t7P39K|cpfPuwQ9du8bxq0 zx`hxVk{oFhcCtuYJvh7z$U;=5FKF+tjdAi4BHnLWPa1^Hzf_JBvZ~{(r(BU`a#~gS7MBk7MA>G z>^FN?GMc_$N&G36bog@Zd?+5>uoZJWMUh?Cj+jvTH%}(`1&sW$q45$aSl8g(q5dal zBNS=p)C z8Z?XN?IZZz*{`6RyyP>`Ee? zylPweYI~vl&tU@eTX;6mbX%5J=lbQX)i11Z&>jD>-y~h&@ZlDaq%v?Gdw6(tHxfKA z8EbwCDI%=UktAN?`RH&$F$Sge=;yAV_zmWpMtg);yYb1WU+njKb(i$vE4g+3SAz1t z`LzVAd^d?@zX9y5m~f#UQLZem%n6h8%&uKKbbSuD8IUv$V@amMmVNd{J|rEVy71h^$<0 zeVN{bT^(bsH-j5KZ`a;UxQI>1!ii)P9)oN$D~`!%Pa+9ewq7{?D6m+-4ICds=ow+7 zkDTd$&8?BXcBTyu^i&h}5#vs#yhae}v~FDe7&0D8U5R^Ktr#HUx+KFi}Q20~2 zB0n~o`;no^Wq~GDD(BjW#J8oTrNGpyOfk@51ka1^((F9OE~7jM>l2edZE z4Q7tPZbf&}7&imIhnhRV*!&%+allC-!nR9)*PaNk(xCGZ!*KZ3!$=w$N=W#F4Co-* zUdBk5pP2Hr)Z|;0|VqV5_AmGF(kZN zH}NEk?5Ez>XxOrr{(7E(AO2RVY#>)8T$R8_Ow!NGh7)Wc=$l|~pJmKKQZV2aZ_MV` zP70C0`a#9v(A-RS%%?#(sxY7oXkSPIuD*vXCkX(^g95m#M(443ct8%21Qs%Jx1<=A z>@aZtOJj*MiUD=tf*Blh2hz^bVrhFPU6dHo7ylj-8b0OsC-j-5x4ySDT8Fhn(kIcY z85n`s5U}P5x)unEfaed`-#E?l#DH9<_EDf&zs2mBre?S^c?@BJ*$GfbIC|IGfm9R$ z`Bbt7t;`=`r$VsM*f8!~vX?>Lkvl;D^3a3(&M1IVx6w}e^+Ixl<>rV!`tuujc>*r? z?C6vSGPEv;-^Rxo7#Jb5cTO=q)WL!r-sacynQ$5%mc|gJjLpePPYj_2mwLs2EeI+IUX;?8dz<8{V8SM7)mIoH02`%hI35= z=tY-036jLRA-RQ`j*f_2Glsjya0muR_P)NpK(`noanSBLmX0>eZuFPe>D4QGi`M1h zw7kfusgh3V`p_dfs#XsCTIeN_I>3G3i%bSSs}Z2MAs@JSMQfTOKv{L8EGFc8zOgd4 zVx;<*XjMEyBiQq<)JLv+&z)O&ISJ1?o0zNx+nO^Ykp7PL)_}u$+A}{YkZ5^JT-tmQ zHLLe7D^s^ONy?T@rxm#Ev(vX5i}(Aw8whz!ixpn?4Y4sg+?gBwV<>z5rsuW~t3pvT zcL{4B@J~H@w+kfTgJNU(=GH-l2|^(n0Z?gqoJ|>@>mA-Nuh1QrQ+FTaA!aXf9ZUCW zRqfC06RBozy|aNgOZ%E@3tA=mO-r%I4jSGPp}{nC99*s%z|GrcP#>alY=%-AOfs}J z?1;|b4z$%oR;r(rb$9ib@)>bJ4>Y}5SOaSZG24g?^I-u2FOB@3Psg)fY|)r@G)Rvs zKKtH+H6oFyYdS5HHENp33MFp{78{iRYNgH=$9_9RSi}5HkN8)8G;<;N)?4cwv=e?XBZU{Uiv%3ULN% zBk9fJq#J14S)KTWc@e=TkI!RG7i z7?&Rd;@;sM7Jo5(_yD`Y8BbKyKrm*Iy|>`icT@{w@M>iPV1Ij(dzFshha4N2J}z08 z_f)E}bKB(TixRi$>Jk_G#iF$FTdNot>13IFP|x9HIxquW_oZ}g^t40I43*N=Y=j_z z&M#f%n9c`_AD9U!kst^S9E8Pl_3S(`)uC^i7_P$B3gidDsi~=VoU^BZR8Kx-hF@J4 zECY}uI=`Q4P{z%k)n{k;a11ObAfY>frBAbjSL?_ExiUQe2YDvEjr!$7C2p>=&o2}N z(R-?WW^nVLQxbu8>u7V31R#(Q9?|{4BMM+PU@R5YI&uZ-l>qbzumKBMF6YJL&lClr1CaQBkV58_&q0yvz$?y+}p^6P9u6vZ2RqB{L3u z^l~EVB?9i4*q=+-Zt*I4UoJylAXYZkz#?>|nvSc8DvdF0f581b?zD3iy8GN&d&>ub z*hqF8$K-E&WJkleG48`oUU*N^qt@PAUsh_4AGzZ#7RlIp42}Oq*A{hTcU>Rjll7%u zVc)#{_3PMt7s}V4d#mG=XgITgPRksHvS`jkMw>9T1hcdm>*hv{^9&DQ)5sHX%N6uv-WS7+NuBpfskv6?;zhpv1gSm{~_j z1SsyT5HZ-yRaa@E*7AJ-pjH4CH|7s}Pgb7paPswfy0`1#|KEfJu(+&0pGnTRC`l zsEA(pzBBfvj$#MC)I_Q+9y%G}*O2P;6;mou*`=tP>!0Ay{ITG&;Q_f5)_Zw}2A~3I z8M8@78{PT|;rs`nJ(eW_>i->l4R(stf-(dP9&isynFgRJN5?%NWCGn~zNn|hH*cQ) zZT&DXB+v)EY#!e#1SEu@sBO76E!=sk|BZS$MouKi){MxBCH$QH%$|5*)BB*h7M5sQmK8Tfcqq{bdOb698-}R6rdB4q za!~~4`hh@&L%y(76+QAilj5J}ym=7+{3cE1$N#g-KCST_U^_z}q#co=wbJ`PUgF~H zzg!T_Crdn&b!ZnG<_2e6CLbjy#e2E_73FgPnBiWF)!w-nM96&H5i>M@fowS&+dclN z;?B&YfWqPZI=foC&l{=lXiM}tc zgAA!VP6;<`PrEc7$_cI<64NtLZCAW#YvBCs=Np&s9nKX0UM@;&S{3{B?gL}<`c>Dv zREUCndRqkLmjNK2BR?`TA5xWG0&IK7^B3>4jytc>fXe?*?#fB*1syt;nYu0a57>I@z(9aZWmS1tJExef&U_XB+b{GMff zZ0r`rSD+PK;ocAfP+Z<7?UdM+sqoJ)rhjBrU{TjGE^FK@@sB{| z%zw|S6w4buJdCL3EztY>6S|Yz)8zakoG{mtp#_58FmQ`#a$d64oX(zrXQrbW=tVM1 z;0-3iKcYtY6&gnI!4FS_k|w~xI#3BadX;Lqj^xhTictWfFAW2Pcv5?$5Y%Sk)ZoSq zp_*9`@nrVKqKMD^wa*xRZue^$O_ZFcfv>kF6$0(uGQtLv{!mOxCYHr?=D-Z^eku9qNJ}k1_yfZ&UbR*>?RE-sFJkG~?7Ne!Dl<{bw&~Uc);7_!j$3 zB!Pvs*88bttWHe%<2Q9)m7kRjqAzn}{1*4~a)Bt|1NJ^?@4^VPtJwG#jhcNTsrlDe zUbBqlDBz-8nA~pOc-JN5{5rC%oB+|9`_!TSeNW2wv^0LYm(a+cc&t>yqT@=HSQDu_ z{i8tblf=P4b^L=Q%<5Ddyp2UgbsCMO_!h(7?i2~`$JFF^*&9$QRj+tveYx#AJDyO> zmg`v|6iCNP(}3ECju7(~%dLDCM|38_5|s)fnJj)(Vf_=%JdR9^cY)PxRDupppCGdG zDvGRkUAIXt-a|l6vGL26RKa@Lgj<|Cs`~n6dc z@q(6@OdFhcH5-V~$Jy}tiS1A8l6{mrEkEu}@_WxvvL8hJ=)i8}M1rwAYKnE+-7~97*V=s?-k_v=TTt?$+)J#iZFk?v{Sj{l{|tm4 zPmtyF_jkbL)jywlX$2M9i9&^~d)}YQxTm8zDI!wvb8z2^6ZdUWz0`+(`p2ImcLJvz zv!DDma!58$LAN6SOqDb~!n9A$e)Hb%ezD45vg;(=uXnB26cXwrK2g$rr*q9K=lJGZ zgdk|;)Gw{HA>c>W)fAptmAP^EQMCfC*6aP;Iy8yOB}~$5!uEE?!S#^`)QW`avvRY4 zg35O9#OQ>liroovjwKVjEbt9dD{G1H1#RSZYsHcNN3Q<=r%fEH;H#XZl_#Xf#tSHj zZsAWmJCHXA6j)RModFLNrW05GD+U%dwJGmE34wi$XgEwSJWfl60;OeskJljN#S?m) z+_s+&$>-=-BYL{eqoqGC=z!mb2BttL8QS>-;+)fNL1$h7j}76Pkfv>ApUV1V!`i0t zPt#Yi{grjtV^qE~1$Xs-4y@ZAqV;2%{HQ_g%PXQ}l&+Imi=Kg_s15g5+>;uiSNb79WVHb;geSniMG3GLBru3Z>etQlVzigQ!X&iDFdDJ3jn6=%U`j5nH z7#S|rB>34zWr z`W{4cH-)}LtC05Vh#vpzp$9qk{R`EkK*iJIR_h_gDiRtxG4D#W3H{s(%7~ny2OW-? zcv)@kZC+g3stp~%c34xWdX#d1`PnK9fTAGs?M;2nCHiyjfPkAz;33`*vUKSeI43$S zD=ABJnvAIWj@DOoy3_O1tg&7L%@xun4MAPUTTJFxc8~^cF(8pS6ZGH(8|K!e{&DrF zdJPBgL3sU-c95&Cd0!nNDH??hdkdSYjqe#rqrgEeeRml2k%D?T$H(>&mHM$c7_4M> zEB|inu7{BV6!QqVs~tjypL!96YN&ie$T^9NFSvV@Ue@m=1K^%;Ynz@h-#NDFv#Bok zy^2=b%KNfoAcZxUIPYL8?{PY1_U`nh%(1#P;l)Z0y&MV}9rx!EE(2N^+rT{qeC%~= zbXc9u-|~(;-{T39a3hvg!8hrxy;13IO^Bb{(aOCSFGf57j=ZqvJeR~v8*KcpJ~w!! z7fv`5I>pBXQ{gCNN{^>cfyFC6x)MDD+cD|@0-&bZk$?YJbajZ#(J3+zm_uMideJ$G zli**WjUXG{xN!q2>Lz;BR^l2)hGQ=f#QA>=V+OP)z@BN@UlZkF#SKg`#git{)nR6t zBq0BzA;nhFg}Ki}4%3rDz^_N13YN!0R!ttLE~Diq5Qa`mv%!%fAvOGgs$B8JY@HQ7 z3R>#4vo;YFW#-)T44QKXS3zc~^j>9Luspfw(Ku*LFs`R%nSqO)Q*wG5NkzwS1?=tx z<$(}6yE_Pp{XT{dcadzG4<6(T^2Da*L2{-`VYTMG%)~s^WqjyJHYBt+z*EeTBE*Tl zu_8!)2fo;#da|e2NM45eUB@8E09df$lIGp3M8C6rBO@j zZ<#tFrv_>}lI~|40y;n%;pL??d_(h5d~TJ@dMEz8Y{wu7?d(fF`A$j_>AAn4=ZzZ~ zzS=|P+nsQ+AA=VTK7c2gj$a14r4;lAJB~n1at!G*Ys2TpU6@;1y73?VmW529mK4h8 znuBIRE=L-BwqeZ;(YVXJ+0FQAv@Ug@&oarK({45lXh2kzT_tm4gmM=tFm8yX!&1sQ zelqQx*m+a~CGPs*nwg}oPL;HKc}jRsTLR0_gC{H`EQf5VmEy8;jbmq*a(F3EU+WDo zr~RcR{U$=#u$GyO2KUnr-3$zsG+|`AlIy3rx%PaDhC0Vf3B%?!I-RyY`ny`mWqq%^ zB9hV-jMs|)=x~iEaJ#x0_Ht>`1=6-Ezr#bVUKUfGk7%_%8Ik#kHCoE!c2H*`yz%FI zs0;OcyqnI1yub6YEj6bkETQR)pweq&3fsL;?QCaRTTX4*KIMI9bwyHoQuXOX_Io3Y zSp+}q^daM0PYOI>OrdOOc0RL*daL9iO?7qAc;*q+s(Mw-#xoo-nRP}vPWL-fvJc4< zJMbPn)sm-#4`hXOKG1Ybj|$HN>U^34(7|R<2;Rhj{mcjXSWABtb!3o|)TO75>EhRv5lAX@N9*Fw_rY{$MdzW2=y>l*h( zsM($0OB6X@dRP!4WDoS6O%!no;VkNZg0h;vUH+*VDiP*~qL4(Y6M1O4yI(sevcAw5 znGdREy5SY9cKofP>11ohw+RKxpn2LwuE5HV0_+Om4wQc61 z#7AgNpIYeV1)#`X08U*%W+AD4xAA4Mq{&sa>4+2)H-VagsrSpb#5PH0SMC5P-r_8mM=k+>5mXy(!TPX8zP+pYgqru7={6TUdL` zX`qdjx1VBHmlDpX05T0}#|7aTNLFu#Dwvk~cx|8Xp!5CFPYiEUZ9f_;j>s?6S3L^x zbrm@jgqte<@~lA`Xsk*`Q&u4?oL_klwQ3zvsAeUcfBU&_(5>dxu2893+Bc_;bj-G#p%!gV3j zUn^ZUgKDJ1$nXkkm-isb4+vFf7tntoN;!9-3YJDf|I`Oa27y^{^*E4$BT27ga!ay0 zUzF*L^{eJ!&p;Rle?El&2(d>l%l=N!PQZhhgjbf+Ie+dt?*|Nrh0BtebxScJ&9;Yu z*w?~KhGP(VebF{gkG1Ptp$pncBP&DRyc|*@??Otx5swOK;xhFTG-`!Q2%6z1_p4Ha zDTqlU`!+N~n9LIb3t<&@sl)(IvYFYu(rBrvS-5KR;N~|BXYI}^qUcRms!6T%MNpmY&E~heM^|mCxEoP zpVe4%_OIBWJy{>0gLwQSNw#hJ9EQg2eM+Hi{1T_Cb68rj(4(~WnM7bF`X1`>?$}Tz zpYJjd+qf7%;U@bvvi8uSLzz+crLQ}l)7Bmr;#YWWJe=XyI<=dBI}=D8ARG3c_D{-G zT}2=&A8sGAZhOb%0@>kpY%))M4i~Mv7N3*d!G3d$Gb3Zj{30W%DOCLJ@>k!N#`K=a zs-2!;Qm0miQNQOJvMerVhA;S=CCvE7G^9Hnb=SDewB#G?;V!6ckR?xFn#|nXVRmNW ze2`dweFio^O;|oA?AT@fqu`&#P!sRoE!@6EWG9@(d z;)2=0%R9EfiV4_^yUs;hG1I+ntfWL=%M%#~?#Db27j{$r)5qABFwAE5G#9hIrOji8 zIc!Qvci_T)+Y~Ncb|%wF&4$K7iv~}x`Xlv<#?F$v{I!<|*N(}tVW^8cMloD@?*_ZB z70xw}#^7cL45TfZ_Nzx+zVEVr;^1QzY1e(nC&@|Z4VfuVN-i5oDRmssIU$AZTCIb% zH4T2L8DE+mm!ualahZSW#^45T5fzK8I1V#z1r2hsyO1(&wWwe<-^V-4i&hPny#R(Y zIbn$mZ@>Cijzh;Q6vm#tO}QFD(#uwX3~g*q(`#dkXuB(<3;U}CeOQ@%l)|H=Su3HZ zV%d2MIOdgJIUSqQnpyjDd2$QQ+D~3t=CB>56oiNmZ7s=Wf1|rEU$ib9y8h$RTWKhgsKQ|~k zS=Zm$)czei@b`Acs>(25#4uz_%sl%?hT$ip<-ct7xCyA+%hX%VUCZlR%^Ri1yToFd zF;xcHSepahl1>u9IBDmaePH3h8iUKu55FUMgyHj}%k!s4nKWGW$<|3t|K9#gzU`Rr z-aKi;HrBdA+Bx3+a%PIWhY<1+WD7E=jRcC^3)RKRvgrwV!f-@J{!-8oPG!x)u5n1j+X(1ViVhkSnq3&$b^P;Oy?vCEj#;(%|$@)xu5_Xu@Yj{~6a?=W@#U-L8?d(k-# z6Fpnw?2zI*@70KQz+LAH%1GH6pm?gQsvvL(fxtm(Y6LPds`aAHL1z(dO6_)sDT;RT z{ah}FucyG}N(L$3D_25fY$xmO3>N$EQKvzZ0HM`IMCxeDlr*KfzmnH8AWS-4@dt?) zK`}jCIt#=Ukd%bxR#mEU-ui)zv&nyQ2mgU&F~4XlrpJn)Lxb$0sHgQbQ*_(8Y8IfKFEnR3PXp{i)Ut3*-qN2&!m}^drnz51i zOp&)0=s~%0DaZJit}n%uFOMc9Bp_vMAU%o1Hl&V@4#*fuTE1J{#jW=>3-2~Ppq-v* zbw=`(&IHKw?%2M)%XjtNY{dR;jT{Dt6mlI{-c1d%JZYF05(L+)&-tR|<;7;c-)Gkj zy*)W?T>fmAPBRxf%gh-wj@IIGV*dP>n==&&CbixLey&{x=hrQ>tb^tVB8u3xA!2v| zkihu^`1=!GRaWxEd7QN6yS5{FTV)zDTehzA-Hvgr5jkaBrvW-D3WG(J)?0{!ns}BS zojfED_sG~O(Zo+|MCoalr`HFf49*uifJ_aPJC(AmVyFXhSbW&(6+3 zi)DRPp;2#`kDVnquSVYwIL@B=*K<@ue{pnp9(L_ zeGmA|n?PF&FBRppiJ188eBxG=k2kw`Vn;i<>=0L8n|I7@pe~h5#WK@6CCxT{tu|U& zmwfzwWrFL2;5otAZ@J_V5TZ8lqsw8gnuD1GlpduG1SFF;S$Mf5F3=uiNz_sUE^fG^ z*4~gRb>Mw@RCrB}(-Yo<0+Oe0hupql{MUZ(p(}>gvZ*y>vrJi(^p;1LeVE*flAvH3 z(i$4+-amv&R--{@`-}FqbUqNqorQdcr2B`Xm^#xp`g{(R46jxpTQ4013o;&%x403r zHK2#4clrAj(F=ney~&)rY)*hc^;>P_JSC{dL%6Dr<%9nQL^eZ6^=a*TRo0#;acU#v zLb`4KxLZs!EDFI9*~1w;k)NsO|IloB+jt^x@3tkI$)*@Qp6n6MEo(c=txpZpWLdHY z-!wsD6mcEnJW$<0YcpyfAzvTlJk{!tlbfys73y8@=N8+jg9Z5u!QA=e#wzl?oj>i9 zqd?b%Rd;)kh{9JXI3+vV5r~Iiv_WIQ>|2jXLHNaX?kQa8)aoMxPD%L_1M@=3YZ#8Q z!4d$fRpxXEqU&d9HQ@|ecWGWDP@6GKLhT_0lW_da(6^eF5CEA-hObPt&=V9Q8D6o_ zHUUu=>z>)+81ds z@;EU`D0D88u)03*1HoA`t!;X{azSE30>{m~G~@)TvjR+rfZ+I?G)ii@iL~?wq?GAx zrzJohE`Jn~0=avF=KjjllORy=NN;UJ00e(DM#M%DL^Q#DxT=g1w!ee)?`0>WNpkI3 zvhp1UY59bb{x=*@e3#fLk;va2$rKZG7tG98FvTv zLv3*62FDvtW-@Z#i^6pSq8aDKLefNr1EzOd$sQn1dSzdY3fXTobGx{5|5{Qt=qOsz zGEbEjCzXQ*xpKVf);Mf4x5)6n8LP0h)N;u6fe&y!*r@grRReVt4+ihIZ5-?@e;0lx z>!aJx4|eMBGZ~nl(3Tc_YjN(`-1m4~lZX_>z;2Nn=$VIKY~(Rf`!R1a{V3SHc&&KT zWJFud+>nTjw;-?8X3pz{&sYh54)BIa%MMM2aGPvy$IIFs9DzQ{_ZVsUvf%c#&hWTV z4bX~Hrj|JrC1G<3(MsZH7cAdY?Md6IarRUg+T#{qQWA*p${K%1TZO@1xO8jyoc(0) zXhpn**0aF5t^w0g4$HR0U|}iG4vj^oEBZ!T9TI!J@2<6^&R=X^^2GZkq4r0%V2*o5an`OY^8~`H zP>FN79xi9{k7k9#RA)w3DJYzN_d$tmJ!+hgKrq~v=yRVBonVi>q8Xjvc-4F?~s z2kahasMG@O*ftO+IS#Xmei?|v>gwrX!B2n<>WHUkjIlZ*e&llYt`{&#LjdV=LlMe< zfguO^_kU^i1CJrr`n!cNg}OXDAS5xL4>|=TaMcXvXw-GS#D*%c3qPd~f%p$X&vXfr zIeph+ekGmly*l>6?9eZNZz7=NR={-qzy3>>_5=# z1a6Vbt&tbwP5nVN z2DaP>SL!i7d_VE-ZhE(jMn#6lj%x5t_*1QWgm5$5kVqL&I&r4=)K0Pjj1be?+!cyHRbPx>fN8O1(*Z`^{et*==pe{`d{ zTGS(zLUfw?7SHB{#=)WPKOGymFjbCrX=RXxS{hc+cMp^b^wE7I?G{n?EG8saLu74a z;{095hC88I%4gH2(N^BD`fTXCQ~Oy3-5>8+g^ZPhM*_a_h00Bj6f&-j5O6r=e|!WIno;&)2x zX#SfMg-Db(2VvL|n}LI^jCJ?vRudvML|rnZsk`fs+NbAQZ6QdjK7DU#)_~WE2l&OC zDb!3;kW9fWHPbG$+LFWWe(y~650$(wm3*yPwsxH@`8zxVJTB?Aw5=JH;Ze!7Gxh3K z=cy{lR10neb*4+BFtVoY2-bxnL*yNBdhwcg^Z5+<1yZ5yKmBh(sa; z4nwGjEtmqJS55pH4J2hzz?3+qWMf%FS0M<0hw9C9}BUtkba$lgApTIb}2o zrkO;0V=73Dd)7rTKiz^c+!BdN5}O}lZ~sBQI%~2qQms-bhS#D!AJZnu;0hy!wC!4Y zWk|RqIYa(O$JN;wNn)79T+~cpEHTx7yzU;qaU_}8hI`pFWtH5LZBw3W#lQ%j=ye6% zCYGuetz?atfq{WzWmoqV&j;f9)8=gT%sw|7NIP3~7FMoSEDpR_&Lt5i&oEOK=vrQ0 z-ovu$ZXvk0@DWPsQ{!Xk6d%ny8u@WTSvum%ASSj4Vlt(j2SzoY}6uyH%5Qzgkem@7iChKg|ktTSYCd^7yE^la_JdI(p&FC_&}A>#KgqFnRUlbD6sG0A%0}sf+_2$F^P$8pRF34&o#e_ zzoB)Eii-&gHC59z`(O)p3_1+;3atqlk6yt_4*B_UobyDx6LaCd-~#*M_C^2F0(-k@ z?TK*bikOHGC@A?sZg`I_2M&UU43FA0P2}O9>)id-<-{*f_{&Q#7A*GFupB7p#c+?$ z^-JTD^?%qIt5;U2VHc{oZKXITTo{^w^@`R!PE1xtMh3)`fYkeZZbCcR<&A#0UDDwI z5>LlOwY;{F1T~3CSmrV6m{R(~D0e&|YOxDw2`PLcnX9g<(El5H5pr9A6GX20FaAi0 zz+fQw>NPL`VX3q6vWY|WXQ!nYxu=@*x>6E&Q2Pj+EffvV`J~of>@6J8Ouhwok ztGO!Exzl~T=YX;8Kw)v6p_QoOiT;L!O~=y>d6!q*LuOoh|H#~U-@T+^T|hUa_zhrM z(CiVvzWJ~ZzSK0cj{A*^@qlY^Nt@)5?{QCpe{)iWBYSyil3t*XTBr(I+c<5|%CVyN zbu0HfDa9yx$qd`CK4p!ijgv_=v7dKnRQ0fwHjc`%I;pg75w{vAEVWp(UC15J5Fs!m z&oOr?Pwt#?J1&QuXylY9(PtMDeq!Q)M_9zY)B|azrMEK12ZEfUD$g9`Jl(_7IPlm( zJ}@*VA~7d@JULXvioY^HYwm>))Qv{0d>o}+e%@q?yf8PWQOEt-r6-VeLW2`Kqno_Q zqR%lYeGhGQ=#1B<*o2TEqj)}mU*5m}PW=bD{T{nV_qpAXm<_z#aImaEH;S;nHF0<9 z1|t`@1(I~d-i6;Zt%?+|_908P`J#FgCL>W#s-@z~q2i_(aJ=*hVAdB|IU05g|5bKi zum{cmBHrGtn&8K#>+pgfvr}Vbydb!-+ERXoTThW}eDU&U+t!l@d{Nw(k?A{dHt3Ho zpH7cVoPMk;F$YKEe?jDp7$C5=e<}oXg^G0hzDu=v;#U@ZE3#5qm+OA_dHs9+fl>+O zki-soBovlw$QiZJbX58&_LEw;bKS24Yo-u^dG}(!f4$Obm8kDfia?<6Jz#(yqr|2) zUIzv%u)hNmN@UH`W;pvyXJe?o*{xrDg@;%S0$D$M>3{nTJKJbg$OXO+o}W~!)wf_C zd(bwIov@4X6B`;EFRZ!x0BH3dL)|9qDfItl@B}e&`e#Gs#h&&5?H`vC(1X@eiKaV* z^d+l3KV88VWZ?0}Z8Ccx>q~DITw$6?0zu{K{P`a7z-IxXq6Oa?efC0e$I=C$PU$k; z&1*o}ExOg}7MVGM+45(1xFFI9N$z$Tu;am9B2N#90ExRScdA(db>|j}i zS>t{a@?ny`Ozy$lg%lp3h(uZ!NOn1$zIHRlkXoW4cOE>4IRpLdY1-=F+0#$9Pv4l4 zEbB1Pm%2_YZ>-EL%O}4p+Tx=0OVV&~5xDk0Kaew!(#k5o*w-xXlDPQilxTHG0M#Qr zzY|)bF;kuHyQ3n3-{c;eU!GmeXc#s0>oVFc-7U1YOU?KZAeg(?qNry`kAcCcZ+Tm~ zITTPJ8z(+cZrp8f_$%SSqAKaj?|%=$ji032tZ{O3iBel2Mcz{C7kaw&XNUR~A5_w% z%!WHRlq4FQv8(!e1$ywUbCNbOP z=C6Ynl*`Y62mUn}op-AgNn|paiQ7P0j8Y7KYti7k17ptfvyBFF6smen4Z6-AITlZY9m6w@o)Rz?|Ng$C%j7eK|RxY}2AH&V1D259IjZE7S^ZoV_cIe<5)49T_X^>)boC04=$cZ@~ejHu8y zCG4j57W;RvjmNt9s7dESMsxEmMru5NiL9=rcXN9#)_BiY>b~AsTu~A|w^lTR z+ELmZS?*ZgQK~t;=|EyxagD*zmTn<)lr49XF(te8e6>)tI-K#rPWj;*y|c?B)$-&9 zJmh+R2=#a$I^r{NtTP#>+b5)Kg{X-u;LW?Q&5S)>BTYh9^yhys;ODbt)z;q zbKPxbPw;0C52Tn@=)7A@C<}J)iF#2DCj>0RfArJu&as&{sQ0j%To}zQH`WcHE|8<- z9mFWf+Y{Y|MWuYoH2$i*66m!JQ)O`WV6pTyqja75>$MAGBd>a5Mi*dK;LH~{GwhV1 zS(ws_3N^}SQ)+{U>zdB}+G0~XiWqI91maWfbcZFUW2%27yDUY0Dm_Fm{&uH9jXa4{ zN9Hp45e`1*Y|6=e7m&&S&km=mClUituXB8)lMELF`Ymimbw%){xCRMvS0NIMiR!? zvR2Y#KGT(%p<;~1V#y0m8U=ofCB%TrN`e8UF)Av!2ebMq(BZ(^d#Sbl?VcZ7@9l~^ zcOj8@nGNqy&9Dz($Y4qLQwEiV)Udr%Sp9>-MWPnDPLp<+#kPY_chm0tBo$hfV`YNx zPJSlR!7*3QB1ahtuhd<;=Pz1^^|xkO_2y-zRp*Z}C+`fvgjjG>$zxVRxP|^lJ!*eE z-A;Q5#*(^7$!Zuv+J%|@d{MP=p+uZYX>P9dPzevrWIA?-X8-YonwrYkiC%sAnX;KS za_#V}-uM=%DDS6E7I0JiGA;M@kV*;`Tg40JA~RWXMXlm&hC5nw>?(8qxGGJX3?zM1 zQ&T`WWZQO@4L$4++%g#&u6GXSa-dz(!rbR+bH9f+ut^0Qv}akB=sRtg&xBt1LS0H!b@puelXS z|L0$w?3gr778I(&84^O3e!S`~S(Z2O_V4rU25v8AaA7S{a9NZOzFwbSq$&GP6@#-^ z7WxSEM(KV8Gi4U1uX`5f;xb!R6TgE*sgMtupW0xNKjK^XPK^x{qotj7u0C)7HjGXR z8^!KhaRkECXIsP!C0cZklASy@EARYvap6;t1t)3nbKzMpn<%x$`f)Gb1gD(LqsqYs z_RVWiSWThxvezH4M6q9ej^x!u^A;R3#(DQ+)+y`en}{`sL1;ybwNaBs&ba7A4n3n0 zrbuIzQEg%wkO1b>3^{a%?zdi2u8(H0OLQf8NS(Csf}MOMnh-4%oE2_nYe8V)lNSz^ zN>Hg|G;SdqcMjGL&~(Mu28SOs!;K_vkApuM03agD|7po zl?2lqJcvq*j8CTmLbIG^k{l-P?p*5Cl!(Mub8bj8(VPi)NimAsfZ2)zc~buIFA>YX z_RGzoqsyNi+5V(WeonkS#Fd< z82(@m$P)@$m>q7n|0tBz9NUprM*w&n-BUg(zc~IWhB^{8LtU8V9q>6TKT+X6*Q-DO zP@9qGNLzI}o7%-moeO3S#S1A4>{n@dHaC}rQu(TQdHIwcd5(GRJc*r)>-28sy!J?p zI~u`^27IJQ1T*D5Y;@Jmvk%Fdb-k+C+Y`#XxB=h7Q>uH2siqblyc&}1?xJZhsW z0ayWq_HN@eHqfdy*kS0Oc^MzPC=I0JS7{cuNO))KFG(oW#?=v+^p&tdc;l}@Ly_>W zAp>*K-CqKRzqwH>ol=`4KR*)OeqHHWRmB33I6_rCLER0-!yH2^`Mt-iAQ?WvCM*Th5!Hv*)zw9gGK35Yj=YeZ8~I#n!nWBfcN zWgy`MZar`|Dq6846t#Oi=#H{~5~W|`Al@*97w3#2e`K5D3bfl`^sOz=$wz*1Hqu9~ zOe4!M0Q&2&V>+~G%&J6)^!mfb`nPtheoRMvo8R3+=;heEi^U-Og!SjAoS=Ui>d#ea(0vRk8QmfLaEjOux zLgzhrpAYwBYUiJ@oS2Nm5_RG;2E(F*+)RivIIE%YdG4xUyG=$n@7%dl9VTnd?uNK_ zsp$D{KGgX~aU^m`!9p|BI7|A&B;oEX&7+Uh{qAUR?r(nN?hqRA|Md3d@ldbr|4y58 zPDv$H!bzt^LXxo*DqCesGDt%areR2SV@Zq3TG@?V4Q7V1jFDw%Ll`tM!^~JtWZ$yP zIQHK?5uNAtd!Fz2_s8$~%iuGg&wbyY>%Ol0e!t(>b&smtTfn=V#=OoRKZzR3h-*5O z6zLK%#)&Mt``4z#GAtAqATjGvRJlmabNvJ)g8hG~=_@c?LZr2J$IQ^1j0xAtcV-i2 zHSW345Jdx!ZCs|O$bah9%xHPa^MK{R-AKBY63!W`Q)1qu_91(3u@_b~Ng&U3Dts)| zgH>El($Z09cl0zLLjAz@*wxM$1HA(hJ5!MekRRR((% z9oj?mz`>rd_SZU1m$J$kW?_xLZF+&5f7+H&JR^*pe5K%=j4EPN7moBLy>C11(*1A< z;<~X75ZqiF01L6mexJW%-KV59pdJH%epc*otkdQV&czkL+~^PeF*&8-(N*RyQA08& z=Q~gYUexoBnXTJEd_Lb&Ea*JW13f?5{(j9+m6$*K_2arlTt?fawr`xM3mF=u!?Ha8r= z*VSIawT;EZ`?)z3H)`Va$Zvjon4UBIG-_|Z^p)IlpUdh=3GiW`1Vnplvzk-K!WZ3E z+UY9iKOWfw>#}c5lvBJ%T$!tCOSitD1dIYEvbIO{onS6_3HL7$U)bZ0{H6YUbU#}x z+q16R{_IU}Z||A0j)jf>Z9?3E5#f3#bw$@N{8lfPw%=~b5Wx*+yz$Rys2qxsV3sC- zB!&5SwxC{iN=_yJ5+iTlIKn8bY3JD`!Q?S-ha39`3|m>Miws+%W&WH}RLzlI)U>EL zKc4cZM+4m;b^fU%tK0{}F5`?hlx=qNo*T?eL5(T9ZoI&q)>I(q``Q|!?tOab@k_mz z%F`iI;(n9y-YNG~Knq!*F#o#^;;9EEff4gbFr%8BWEPuCViuf7PiAYAg$XHSybrTn z<7^?YOC2%q5AEMMP{zG<{n^Dz--*sy-R0h}dh(**6}!tBmH}*;teNha;-#u`#d}|= zI^wE#zdkAXWt$k+MGGVAm`vtEW@U165^BnE_|a2c?oN28S%KpuUs zK172ON_={0!-USwY|A*$%>!>ICnvd;QVAE&o&*Cb0w+cT84a-CuH`#R?|L0F6ar>q zmL8fewzAX~GAxnogsHMO`L82CU1I<-%?Y$B@Iobd3FOM7eZU7z33V*i8wajC*)TJi~ z^bY9CRsc7fvG~w`{tj|y!F4AU?**=Kh@cg|=Y!Y5y2|rn>&Tuzo^Sn^^dFzO)bv=p z`R1WGbqQ`o^;LM#T8p(fKVxraf20X!y~nvxKc&)rIA-?2$*3ogRb22ml<2OKRM;%s za%Edj!}DT`QO@OnB?IDtRRl3Z068TfCE}V%4x>Q({(4vafKLIq`X$%{a4--MU2%JQ zD2&vMD-{$HS{zkv_$ytXP);j6mYJeeP%{*K*Zvi`t4qFmzk}?nx*}ijg_TamoMdj7 zaimCRIa#Q-xtop-Y&~zXr3xIK99{g$!boVM8s>T;qq(HD_>VdeGFJ(D7;$jx8LS|L zYMGsm43U5G=F)ED#?qixfL#Mk377BH6+(hIaz>|4w!p<0U;1kl?DaAAqb>9OD4E9i zFb=OTr?FSzC1$bAG&fsgzO$6ASop;E63tBu%`B03xyE)XSw3vqsQ#kS{*`JPUDg?* zR_0r-FMCOFy#{wcdkc%t`FW3J-rw9W%Fj@oTQk1Ik7=tnaQ7iQJ|yoJJStoBPZRx` zUt0JdE;9T8G8=ykZ!lzv0rxk4{O*cF#X{)}9LH!L-$fIcZRj*5Inklv3eepU*={i@ z!^9E2^O;c*#Ta&5!o=@IPPU8Rx?hpTq(yKOSILA$bfY(2_2(WOX1ZD4YPG}eL})}< zoB-UL=~&t`pRpXrat%jkA}vMlhAsI#$#rMOkY##<)|yRROwS>mfuK~61K_5$nzS3) zfwO&nHMg+Al)2AP+ftbor>el-Ozo3kuHwvjyQ$DAeVC5+QhpM9)XF}PoLPaRgjCB= zSskBhkF>~*)p3-SaM`1-(q)ka@_<|Of9|O0@Z7rilVq=r^os}!0|O%C$U(w&c2;Sz z$|%NI!PCT{R557^ubK$bF@C)K9Z1-L^ds|cPAwaxxIajyJy1E0cV0Hn7$}>5zY+E# zI>!7@i_EsRHo3;S&b=}HHjry6qaKH^K_{kPUx+^Er(@AmdkT-QJZg|}T?dIbxTrsx zoiIvIOX6~F=D?)@&h5(e+cwqfMxafUd$9hdb|NXMD}t==1e1vT05Ep0g9X%J{rDo3 ztk$J+l3uffzw_l1=9H3CP{oMQ)TNJy(uH*fp##erEu2)+f zgTJ*|`J5LpSmUjRtJix!o0jX@^h(=`nZU9f%<9NjV`|K2V0;cf{QOCyc|Z3iplqL? zKCXNh22*~x|6yzqx-)J5@t1bEt6c!j_=9wiDkab?cVLm$_c+jH@EJOXbB%i;B*#^iMA5~KNxYg9g5SdkBN-$Atsb9%rI zt5$&Dkh^gFvrJ~to6lBPL$03wYLs=@0xF!w$dspEi`Mw$@6~)j8yx8NEt-BXQDNht$F&x#oVw-0!O&!0a_T-H$_|Es(IB_m`lKs%bL z&;}>tKq`s9-r)*s)DLMqU3;{(mPqA^p(0STP_}2?cYxJ`ph9HBJ8O~=ula;~ z^RxhxG1q&p-u(9X%uML18m8`prlL~QySG5nAP`(~=l8}CQkAlz>{XBBMSZ;DNZP=s zi=PxTO~oDYV$+c7M2u-c`_19zW!;u~00#W9x68!A@m`C{*9r(KRs znO-QpmcM)nbzU^R{B}64XYUX@CxaWUm^u_sDQBiJ>W@P5(n3&AJND&t;b*k9D6c;Oq9I_~5AOmncCg;6lJG*@6n@GZ<7;$S- zzv|7$A<3oiDUW*B5AAqWx#0o6ruvf4eTixQc;)LeX`|AZ$CL8UBeF6F&sM=Y`mKti zDvEucBCPm8J2p>1;Yt?k5B`gyKR@rFKJ{1@slvoNTu`|lj2?r{b?Za_TmsdwX7%Uu zX|J`?G5*DOgMW8aDitH&U!J<5i%vx)`$q6mybbG-~N)i-Of>Q9m9t zaTc+mpWs<&*ctE?VaW$5Be-#o_<4}yuT!}|ca7hayxjeSR9bJqXKTz7 zXmm2qh_di`{n;+8GdU@A&iWpe{_PS(?1DajKS6OQ(o={KpwQBa4klR#Yh)3guFd&W zxO}T4-nn08Ljk&~*gI)M?~J>jbMyxN=x3@g5AQ6EykKZ*=r-DSE4ac_fQk`k2_k1D zs?M>0iz_Q_`o!o?#Cm?1Gre2%`i(c$$ZT75Pu^g@e?YG5uXUfms%tX|cnD+peyh0G zA5L^GEVOUt3VpePI-ppI>h0~-N^N8^6K0KnUg`p^@4@xO@qgF%iBwkquK%|JbcJ}& zGox0^hT10tS?%FpH7W^h7GrQLLNaKg?;}h4M{oYuK5h?)8b7);&NYpF@?|cuiR_s z4t4Su_4oP`KeVJuu%wpOTeu>S{!`S48^tC1FA#uqCvN$^naVQ?CzW5Fre%*{P3*hlTun*& zp&~^VT=yu+a=qB$APvtUh-J|y=tQV-r1XGYBv~U~EwEXhexYj46HBs-I zSy6vXL;eEoBgc6sk|mBjCMt$HZgwm%oZ;BrGG19r{9MKgi>Wefjd3KWg^?B#1^dl> z945|;5aw4X!4Y12CuWz`e7w5vU}^Co`armxcUtD_mr?yse%qaN&cw?^>lMjq0D!a8eDiQ@*_ z%gfq@k8pM%RjDQ!rEeDqmZ>%nv=X|bGT8#j$RT(j8P?+;lr;i>J2`IFd3$E+I5>5J zy8>BS8gU*SCoBS|zV8;%yvjJVF?>k=?c_$avWHkI%-Zi>mbkn+`L7|)YoHHb6CxzUTNHruK6t)g4ZAyHO)<~+u5 zUCaKS7A>779aPqmAkK19fGR@K7{XR*8gks1?k!X@f*f^Sob&JAG5532CqK5oMHo*G zVe8dtNRCmD^)@Px+qI4YRm^uS?3{RnkfMn0A#qtIR-vOxK*yql%q)>&LPl_*vyZC5 zVbvYI<9l77ki@=98vC19YY9p9g_o<sr+`TrGsP%U0;ksjQqZRMBN^u%6We9rR*ssTJ^C7Vvk+<8dIeoyD|{kU~^~^71^(q8eCvj zTl1%`KGBwc;>A&`Lf_Z!(sfZ`jILan{yR?2>|IC(j22k>yTUN(?xOF`nOi=7l8LrC zS}l!p!$Z^Epk;%I4ITTt9T7#3O_E|a=$hjj=6<1x@y$!kzH>H5c{&>fZ%&8> zZ)y3{7_zX_BBGby#Isc0)RY>5L)q>g-_aTGrC1D7wYYn!3!1D{?bzU%FBulu|ChL3JDwakbB3`Xh5hfcK=`>svq9EuU9TwQl8|ooRX`Pm1wxdz? zLcWx_>sOcIX!j>CI;q~bs+9Q-oi6wLP@Ulnj+y4lZ(PDjrG~Jlq`x(Yk7nOK%f=p< zKi2HNIeQ{^C|oaJHSg+MmA#%3%)(QX?xQia#Y*$STQ|ivh-Z4+XU)i$Ce*6Nq3V4S ztwn3^jGNZch9k0ycOl>W1*CO0`;nzh!2!t)j0?mn5EoBBLXdI}gM{qq`yfR3OCj|V z4lwiNDFMqk3qx>@%D`r>693LP z{oBv1!?u;~sq?K{9Zfj(yrnVq0Y&F>=lZE5Ib*Wt?y#r$v3%fg#1&}k4<&7qTYy4Q;Zy6bZ zPZ2Jd7)8PwPu5Y4JOkMC&b>3c`J4GAZ?W1>U|~AWz9Tu4&lTKFTw;eSkkbVg9x@6M zqHAin8}^`pImA{zIyN)0RI<1ab(&$*VOnsv*8B+Sj{iZHlk5=TW`0a_!9g{SnaTZG zjiiIO73`sfx8W=6BS2b;iXlB}qpaq@N$HZ6gPWtS7+U1JE`|h0^q+mCb+gE@;mNr=rW*?8|1>c9F|-_%C-Dl_6@& z6i+J-d$@S^Cw}(HI^V3su-JF(KYBs5sykE_GIKdQIL8` zi5YRwIYF3CnlqvqgdMOI)%`8^TGX%JYVAQ7xZVJSbTFw0QQqHoF>L2|nmscV+ z$iQecu)3@Z+M?6x1VW;rVpy!U`9_n;dBjHSmEy=E9TR=9crGJdQR`GwoDVFjxssSH zVzA;ko2drsUD~6~gi4>P1N@kJ zHm^*Pkg+CM;mqm9Kvk@X?y3suIXl-ELbgPc=AJsA;)DxBryo#G>9EdQbQHBD5J(`Q z`L?*@PNdvU@&uR%%j57rgY)Rx&*2Y6=$OB-R$+Q!G6He zl)v_xzH^I}SyfCIZiX0P>Dxg}6?I)Qb~t0P9EESKtHAZyj<~F?GC7l|N)tj;aX1AR zo0T#<+^X(3_pxYl-fi5bNQ){n3!^`F@elZ0@Rg55*`TAWX>*a0G+MtTwel|KsQUcE z`)Kf7a?(v@hKjU%tZQ;riAm;5^zqZIV~q*hTfVg*8tKcQnte*js}@yJ>-!77<|d*7 z-!jZ|Znmkk+OuA_TljzncYY& zu9F$(PH_J;5+#IXqY1!3+#Asm5N8+QzE|a(&%ptaR4H+?y}nlVW2Lg*gIX4?8q?ZI ze$dnbUzhN#LdkjDwxT2LUO{6X?x`bRXaY^!k*W?3hJKf-^oNh#XbvoR>_&#W+vBXn z`_IxcreXAG-5G^J@3rxU?4m+A!0L6<~sWX z#yTrYr9xi%QVxu`7wFhBZjn#UcGI+ErI^8wqZ}X=@W8?%gWAC}4m*nqmze(d$?Nze zNtG#K0Cj|#{4GeE8c@kzraWf=_+k~Fcg)m6yQh70ew|!n@pupLyfy(}W-WUQOSr)LoL>U?RTA~Yxiju)8O_3F4Ghi?zSI7@M zfq?!8t|Xx?aw2_=>Hrex|JrBJs2l>p%5VAoicc2?x(J}&`By9sP%r=Dtk0}=3e^5f zsz{9itW9`%2XM%5}%B zfY+x$JWEUKMctk4yNTDZ=Kkk(-*U_O|-3o?muclF9C^IElzzq z<}E}O+1hq1wiZA18yoom?l4)bz8to==)O%S95U012+75rWY!Je?B&JKB&r%c?lNYA zz`<%`(n>08NJCz1*ZgQDYH-n6G~QI!NPVi65HJ_J>_uCGsva{IK&twm!Fo~% zb}GDxWwfkKIgsAg?V>Iw%2;m_74kuYcss*o59rH(GANLTH$O9O z*wm<>Tm}%AM6_A}s3kSUYkPD()PYhDW1Zx(-&^DYG`VN4ui^$;p^zJzYgYj!&W<0! z@&EVd)s@xU(qmy6E1NyeGL{wo+$4*CX*I|r>c{ja`}7`r?={7Y*98=)Ro$UA^6ClI z!(;CLwcwlO%99>Ix(MDbAU*#d#&Pq{ys6&!n$ev|&pBF{t9F`hIdq_PpLpZ$pZ=q7 z+WO9ViM<5P{GHH@L2R;I?zm@|(Jb%ezrm6Th^@*6+ zm_?)8P)7yc-*qf#2!>8E=l(%Z&~g>~2CDT*3FD}e&LZ2knvyI#)8|tYS>buF=;b9+ zmBqoNNo%v&!0gWM>yKR#dio^~b|C2zFo$q1bh*O+j?hN~Ok^9WQiAWEBAOG3e zr+{=CGTJ+T2`z6x%$BS_?x5iJs=@H6pIj(>7-(fy9L%eHW3Kd6orxbUWfe5Zbck*d zL6R2*{?t(V(L7z7(DaK!>kD^tv{Wb3No2RrDnL%Fd5jr{^KRiRs z7AoZ40p_j)KdcNS5B;+3r+ND798pex{SKfw%9_Ik->p8ihDL)dqd3gk^xp^M+=c!9 zcK1|(lI_vY;fC+*o*y&vmtPOAJ{H0Q^b9Mzz%74-{@`PH9{!lEBKLsmVWr<2cWD3c zDLfz-aYa7xpKogZ0ghUJ?>&Xy9cU!~wX(nuwR&HmNCSEdutzb;sXmdRAgg!%+V$(F z0>Y_}el%fE5Pa)eBZCfbvmaNU7xKX~tkjUxM4#cNHLf}=J|9p?!Ntjj zePhWT>a3eHyC9QfO;$)GXR2x16z@b%{^Rc1l>qHeva$#v;WwZ`xtz$y>n$gpGi;(_ zhOu)WnjHuA_BWrSFYblg5R)u(gs3$|=?!FTO%wnZR!7C02n(1TSOB7Kzs4@I`yxxd zqR;R2t%vaX^VsrTeHgQ37YwbS>1+tUNrx)Cbr$BMFz)(Uf_an#3SX@bPyyY!V!9%b zEg#@EP+I)xH*Jd;Ta#BbO*Fd}Gqo2kgy@Zu%bankKW_1|_vL{eJ}$8EUFzZT3i(Ok z2}IO#42BMY;5hgRHG_uIywcj1ZEM#|$Ri&lW8n2N(I(=aP!V)`!{R`pGBcQ}-j3lY zhTKZY{fuO<_XmJ9nGhx-q`{Hk(J1>O{&O7`w`9*8s?oGG@z>|I{pm%DOyA0Xg~;Ax za*fgT+Z{+u>zleVw`aZNUcdI+7&Ycdr3yk#w@9|tR9?ahYjNGG0)-w_os)D5J(ygYDh1-Lq% zb#~YHMuI^vR0aKwjEwBt@(dJd`si_)*swZ%6O>=)P29LiWwrH8PqiWAR>Gf;h@$eG zq;nRSM^odw>_1rMIzAzN29*t#zeXA+h8z^aBz)urw~t>6}joJ0jYgu5DKx2Z!P zjX1kwt8&-}BfyEc!X-C>WR?`=FuTc8W?aw=(SSPb*t!E*GB`M>isF2Gdz1vu^ZiIt zX5z=k%q^pGo~bc~`mbJm-5+VH#UC+x+pPdkoI#`K?rhAC8G}3cJ{Q4MI=FLok~2;d z?iswVunaUC580QlZ*FPH6@-B@juhk{fY5oyXGn~fHlaIu%mFQ9noU(8ILRf3ePj>P zPWNvusFdR(>`wTAsOp&1r~db&2bfWyHHpfu)j&-L?16Dv3%&UEx;r8FS+{)AkcGd8 zWTRt~$e{?*$o+V+exDca_%U8AHDXBm?;){HzaaPicE6--CF@a1n#|`sd(t&hzC3kT zdV|k%2Way=TKbEro-^K3&JRofeJ+rbLAml4&T2722sxXjWgcL1Mp>Q%pAM{QHtRD+ zYcr+@mX0&Z0W);A`m9R;)vhYCq_s}TA#uFd=}=sfySQ0bNs?di11O(Sz;1cEH(j)N zKA#U~n|T%bsQD(W>6ORxph!COc=pE$V)lKsiPEqVGNc5*JxhtKfgQ)Yn-kSrZIQITQaEQn;p zd^1!N>`Lo!{zkuopdkEz%l0ck^TkISc6bj-hO_*F*!?5X4=w4Jp84YaN`(d|zG~P; zMp%01(()4Km`@@0_+}P@Xu?3Kdd?&^>>a8?g_AJCHSN3Y5;MZA-#-J8RPuh1&#bN& zFb0FL-jyqPFD}p3@~DY5R6Mfp>dSF{@6$BN3h<|4Yv6@q(fXu_!a_xu%MI1`-|>#R z-a!ieBU%;}QEKo-ARpCAFzA#@KFj!;(K@J?=wzlpnhG6IX+kKvwn8%+e7xLuk4s*4 zt^u=6rPdM4dr6)|^%(e+1^}{nkvAj>=DnBQOIi=dP=(_RlZvRW7a_avRK6{nkE2a% z;}-DQ%Gc#+Fm_E22j7_Ir0YiHdpK*65&9>2J`4%42#ow{&kK(Njg?px=l zjV>!dHClv`f-;-mhuRZWrzrBfMS?&M^q+$4l!b5OG-H1ok4q9|`(GLVQRZcgPn}Qg z6Y(WQ6g#Rh5;!oQM^TMZJ58gmd+}D%EIR!gl_TE`9-~YJRaKh8E(E;t&m>W#qEovU@EEfPAlrZ<Ul~>(+={ASt5Z z@QndbyX;EJ(wrjq|GWEv^7TYOxDJRQ^M{Wd0qRvvP;;Ay=ODo3d3g2!K@ktnn_mI5 z&cmY(sB0dc6B|I~E1r8h0ZhTe6AEAn9-bSUzJEo-*`{ZicWX{Y`)Kv7BlrT(MJ)r( J-19f?{~xu<%P}L+wZQL@{vPqhaeEh zky|$v??WK_WFU~k)d%*1|M{jUB?A4i-B$w*i%F0T!yF5|wa%boEmBgF4sdq`j-FqOA zyU!HaA&{#Kr!Zisu82P=O7$Qe6BE!wpwn-cQ z8Ay`6ViIxcTUns%9hl4*5$<>$kpLl4#f2IG~PL-_-l{X z^5zM7c`!S(vj~?YaP`IPQG{1Tg?;))Qweg#gHd}(`$kk~DHmf{3#?0fG8O!jsi zvaU&)ThcLv7#la4;xbZC?#w?C9UZ-tz7O*Jx_?k1w#Y_Z8<*Ti^Jq1AE=pPl?*S~; z|AG{zu&}UkUTraZ;%9SCou~cqh>Hsebi1gih+SP>9VijlUV7M001Mz=_)JUgAei?m zaLGGhoHWa|PXbK1Te-WVlarPl1Gx0AucNS{LhjzlqKa72eV5faO1xI@+>m41y##eD z+yD#w&_fvaC_PD<_~T2#7lqK8T#SrjT$>Utf!N?x_7rhXj%sj^UMI}f2C>&A8|PO9 z%uCb+5TyeY2tl>Jd2G(U8&7E}D(;0yB*lA28Cl0|uh-}4jWoM! zF*gz@6XY2#eL7*sl;Jcuj7!?x#>Fhk>((L2)sEK*h}Ao1Nyaa^qjGv{Yl*Y9R*e@v zKPfkv%zpohjbZ=y&K?vKVi=~N99AIc5!YlXmWYZuOIH?)6=-@wCa4?ss9V96)W{a* zegOywgi+-vVrmn$VU6(E96%)L zR#T|pRifi1442%qHAkoS#zl0HtMPwzgcDNwW5j2+&iC_R91n|CB*H52<0vUcNdIbU~s;_Kx2xqstPRZQCHV4j5{JaI^b>Ly>NZ}1KXhs zTgUo4S2`5OIb?IxwpN$h>RA4xxD;osfTTRE z#nL`VJy~)wIj;H1P|j5xu?g zx>_YjuMVA|Q|Ng$>(O|r+7n*_dsOab*EH>>Ri5AW+mc|e?Mzt09})Py5wv_rB{$u9I|GGx2M= z413J2`n0u$P(P`YZCp9$=?WZPc4tQ+8f};z4!SHNBHVm)H^1`x-3?%6scG(Dml`xP zW?D{(7hwxdQikdXvP=67!hCa3VlnX@TCE!aRflpr%w$XqLkh=(>d*RmCHQO7$)(QY)8I^7rc8@7Z0~&|0oJFjO<9Z*@R`Z-HyBDuw3isb)`yD9H~q{ zs1eCuhCB<_WZDr`u(c1Ng!*pS{(i!)u6Qib;hV8_&#U~lpYfl^INh39!ft4NoYQczlMHtN=o$%8$&*bx?b(&Nm@_l1^Cs2kyR zaA5}0h(zoQ?Gc|Ln3yUn^R<~IMUNmKl}2X96?<$JZu$YQRjQ(l^$r>Gnp;l<_a&dG zu;}h@Sbi{>ybk+lU)!XtqoXsZ&IsnmPznP)Jn&h06^}%ls~RG-wY3L+UrC=2_gbkf z%ChM@ybR*V1tFmlM`5f2(EQR?8y8VKJj;x&kq1!PcxG;R1_j>-KmvZIeCVB7{=h;?n=$q{fh_u?o2R2U#wNRX^w?y8`4)So@~@ATZ-Cdcn}A!AY(k)s zJli>i`j^JODXwtGW6Uvug+D*Upz>OIT98iu9}5#&Bx*jDW}+vTuTUz|9dsyG5w4yu z!?IEaW6m*%ousUSN$^fcM7X(?83@U`FIZ1wpH7=lI8$mB+g08h{A_qq?WNaf#RnnKk(XWbQxN~U)q%ERq`Q=jcy;dBy_9}EGi4TuT*U6QrAmOIof{iRlYhm*2DvA z?Xq(AlDru2ah?xstwd3mA~pNEY^j{r)n%8Vfd;JpDee4ex%9`%#vk&z4!djh#^n#( zO!|4G5!3hbB*Knw)Zku5slIm{?dD+?Up5uBERze4t$gWUtGVyNqhz|C1glm)1wnqT zb03)FSVe4OV0!(AinXuY6|zAZ+WVz? z(4s+q=U9BP%lgkjyoDb(oN5whsFATt+pj&LwU-EFqe2a@D>F zx+%aOuQ9vO*YY&4U5Spnzo1}4IoGp6v3EeamNWEM2z5U58G8Ry#wkN``gKCfN%R?x zm#z+cgn>&8EJUjr5ipkyU`pr4K~8mkuOIa6Y))T6z!~0STkRd<*Ac_x-ng@7pZ+S# z3$2grL*Gz*&*s%;QB-A`-WU5#G1}=Ie`1z-ZA13U6YxN&Y-{8u_s!7DmP>aB7A&3i zK+Z>i*>)6r|KCUv(Jc_+?VJFFAUWCTt#c;Dym(;D-!bF-8%{(to+o?pl@MsvE<9l#nz33IW2jhjgMeU|Hw>63U`$=$XYt>L+Uf5Vy zPIx#o-T~Mlqr!QN-ljJ~4PSiYxKrfqmo><{JZW}N25pgx5|f7x;%^i~V+8E^9`t=F z>Jx;yI<8#VI^fmJ|NTZZ&Z0GHqi~yt6~?-eTGPSo;1kaP<#<8}gN{xfnf-h#Qp_dQ zuDBWGiI=<+RBx@6$v++{oF*_Xe8}WqKe-ew2Uh8vG^VGwmrr1{M||nyLE`{{Z#$P) zPRiMhQTj!hNSYu^zVTQ&dZ`2N?O{_yUK@=xil%0TYWTh^{i3mDaGmj%B8nf@+9KyM z!!sQ%)roU(v=~ztL^i>|#q%F0;GLD0&el`PHtyJsiq@6s8Mn=}kc-0gO(4Va=aa&G z2nq^Hi_{3=D6QL=YhA&~c+A9$j+^1VX~E(!vLhO&rlzoXuN3Tto2Tmvw*V};sIYKM zi+Z)|0*0|0p&^>`42d!x?=_K+l+{n}1HD#oCaCuJ^__21mE9yTWX`YM$!V+V6gDh= z7Kcj&$%%TOB<4d_R@T}Oa&r)yMbY+1{z*-;LDp%hf^4J%dBvfeB)EgeR>Sv(DZid= zqrDnmUB=pFh0)7x_{hobZY>u>kX8!cJc?+X#TK=B*gge$8k_7~5z=!;jgT2(qbM=#f|bjUI|~b9r(&KqR;}nb=Z* zMthJqhyb}5NAe@jbIU`?n2Ow#t}UyTDs*C*t2L!Jew(yVZ?nDD5hvpk);bp|ZzLzB zD|^qQ$eq+!2eS61`+FeIje4w6kpM6_jn)Q5jn0rtz`*08>x^aBW^tYiwOwUBOL45! zrz=ZKT{l+|E?U6X8`odPYLfoj>=VX+$rmu)AtO z-B(__V|A`h(7rM!D<`KZgAS~`Fcbq77mtXD7$?94f)|%Mu6^A0_>!40OVqH@YudCw zCosB^6w7bCK0%)D&1s?ohJ1*h7gJbNl;io-)YWV$EVON&bFcs)zgMCRoa^ei%~7uc z=G8SB`-wPex-_;Tm=6;G*zJQlZ~}Klo}v&|R+?=eD7H&1Q*I^1!Pv=pD(JBZqxW!h zxwZ>9K#uR>;bB4eut7k0NW*Agt7vjpq(eS{Y)g^=jr#MvDQszJne6wgW5B^YSYR{= zPubN_I+nJk6cF9d`<$Yt9yGIjeIJV@-8a^dUY@FQqF|=?+(f0#w}X727#n@E&t+x- zoz&k6Fy34WSi=dB_=6tsk>*4X%tq^AqGGZ4vSks< ze0r%!$J$$l-WtvRCGTd>&6b!$DOxp5 z#UIP_pTe^V>d)H9BD8$Qdb+xH^7laV&Xe$r=J1VKagPacL9+ABSC=(RQa;AQ%j$Zb zc;9{PJ!IcK-8cVQ$|ht(c`~G5d{r|`+hO-fqB$zkkf}m|@H$F<7;l~6;=$|>b?}Yn zJV^LaZYJ`^mM&2Wc}M zA_+VNFvzmsNu!XkaHai{%QXAb`H*EFf?k(aE@xs3y02#;qqj>61U1vmmLAFls2Io+ za5=y&UYmep`}#hnt3AMd*?bsdTw}H!@S-O{mGbBXI=Nym?1E$O!60J3wXBSrvU5vI zTk-D)mg3d}w(_#nWxIs}`$}E2Hp>Rv{IwO34@g-JJ9%+% z>DWyaKhk|;k)lzFs&EnACjmkLEN^2K_*1+n@EVL)fpaZkXr;K$@bwhgntf7Y!ag7c zO>Zy4NHHL`d_U@6I6FHF44hkr{C=Yq;UNs8dE^N)Xmu@I0yPYLx{E5YP(iA--JvXH zam!OPM-ZTLme+?jjgVVKQ)Q-<>ww+*&Ug&bNFWe=BQAc(NCGZ;7BD!GCODjQspV0E zGOgFv;P%?Ww%o?2f^y?=?;^@1-Z?HZHBiS)r8irs@pm9I0Q&^IcWSo7p^|nYp=Nh9!76<9s;#RrO#at&XR|7#4eO;2c^1r=8<_7%D4a zKh;0D?}3Q)y(xSP(%$s9fOL8g$*(04wzzc9tS(KnDJ*h{p!h2QZQ z=`a&u8oH9zXQH^#i?c6Ye%#QGJS6m|cf+PZQ_CTohDslr) z@?INj0L?rE%|t3=k=kfctXG5pT>=m1su>J_+M z1Y7#+LGJ<#V0V|lehLonHcAxaCy(7pMf4gRw=_!|?d6o9i{=z{M%VD+v zHm4PQ!NUHMg`rZp-Mv%ac?5E`@-*i9<-o$mJ85WK9kW`7W)rCr}1H zB6&~FbGk>!<;Nb#gr%Z>{kFt2-5b#xIq5}D34Y=ix7Q0weCfCN1TP;CjMUyJR1E2Q zzj(sD_5B;MteMV7Rz+2Rty+(3W+_T7n; zi4poJ_g|36Wf4RMYF8ojUI__8p`=ZZ`R&nZFUuQB(K9u z>y&oPYnVu}6*(!Cq!XU_Y?EO%IpQz<{aWL3`D* z*|`&m;?i*clfvAFhK6A}^pNKjN+_q>NqW|!y;DB>&a-wuxh681o6vGT-FB69iABeW z@H!-0G~)`PPFEqwMfuXIl|f%Vx4$erDl$7}Xkg$2jN?}uZk4*?j9059$czG9gI6h0 zu7bjaywxf;sW#90VMFvmn2?eIeo?PBZI+Fun(<^Ve~Hq8V6ZwaTMHgx{qJQ4A&?d6 zge;BlhzMgzQhE2utl(ox1lIW*J}j;_Vl=T`&jy<+)y!t92A~p;Yrcy(i`m%xux)*R zYQB1$*}-w!dh}XoTg76ET**f6pT~@L;4=yuBL(pp+YXO+o|;C;JZ$vF?W)W=qH#1;`ZaU69UvVB)^xPl^!d z&Wec~>g#*U#{zl&;u;D+me@oGhzgK8VQPhK*e6^z`r=ODM?uhOGJZn~ISf)nc|dlv z$hlVD7vhfgMBw@~ZbWleY}7KWR+%DGn@HrDv!+(3@#MnCX~>Ta9n^<4?A{8$83HgTO%x2KFj@L&QZuGXK)|z zyFESH#5A2cq>_pPu3Tx2S@5@%3U@sh(C*)LlAm zsgPHCqFS+iz(^vFK<-*8vMc&@Xh#akdalc5FkoVazi(_MOcnmHtx@1tn$0rjV!DKR zDm8uulq1@@EszaOpi?LqQwCh$*ch1_sBhOk2Qt@bgHByhW5ly7BuC!o@6{Agvm&t) z;{ZDW`y30~2VrFIpm_%XPNgRqP^p;`a0f@61bPH#t0ZQCuyThR4NYhkkyWE)KBw?J z?}{qOO~0+6D~WokrsOO?jJ_f4eDPz$@$J%2Xs?1VmoV39opAI|VOdwWXGEJE-F7#4 zxjjHd!0ZO#O;0Fw8U04)q8GnRsx8qqx13IV@$#m{(%ZOHxW+W?G^^l*Z#c`-X>5F= z@Dm7J%Wm7l%BC-0`OtSQz>_u7G{-=KPo16DOh&WKYo79^Vb}B%>CS1IyuWSM zJlXMRY!Ct3tA_^|#q*pnEvUyowMrW-b)F?>n7bya=FEG13<@!m1UPKvP{NVwS)r0n zpRlm7SE0hXrtPf~y$vx%`^oQm8qQ*xJr9ZLcG-KJc2CdKciXmzQi^6n`{mP0J_a#A zw`NV-?3o)Q#C6}!`~he=tw<_nqD9ObIgEFY!sHL=r=sn#gx zI-pzW- z?9Ph)c=0jwZY7ipPbzniOemB9EYoA7U(2N*Bz#K1URe>qUu>6*_HV_m*9R~1Hlt$* z#*3GQ?WiMp2@kC)+3Xn2Va^|zz2Ph9) zw+G@M1bH4}17X;5gWrBk%=bH)o>mki8$54SzobJd0ibLw&+ zH0iWgLt|WdLd!FaA2tQW__@J2){FVOm-B+CyLKw_2envtou{+mG-kl?q>c85DRWV| z_-^^CULD*l4BE;If|{C`n7BU8s~N2Q9En4&lR!NS|M#xd&@9qw``}6H3CV&#EENmk ztXP}qs{h_Zw{&O^#FZ8}6+gHJ2m$itj*k*9Q$QXcyPb0I&Ww!bdPT$#Y5d2`a7 z5g!-Br%W0T2NetOvTq8{0f&6G_ZZ@+qW%eBn4hMpt~l!;aM$flitK-N^!x>Qgb69C zqqd~_YDdlvnrkSrYk+Pj4W_zrKqW#ThRUdGM-i%km3W>_b@Kmemb6nW1Y>M$^xq=$ zJI1*db~|LpxwwEC_`1`bpPDijWWQwjR4?15v(v&AqOt5mtBi32+2tvcPR`46F38=R zJEKt?Pe7QMP+1g^49Ce8!rESxeY6g8rF3U}GNL2;*IVv`>{r+sjN|#8GOd`~5*6_6 zsdBXJvb-ebU;)aJMm&)7$9G;S;Y3Gr<4;9=OC3GV(rI7kAeEK^xVm?Hv~5Xh&(%j@ zhQZ7Le_mT#+ttk9O{;xLzO*4iW&Z(7uhb?(s4wOt&kZS z3qTCzEdTQn5WK-6f@C@=DG69)t^X_QJ9%q|q(!wQ<_6vg-I-Cle`VrV-UEDWJ7RYZ zK=!^k$^eS%c7pVJkw0U<6}-#6k)u+p9Io|d!t&;@v*c*_rU_bSB2#{btJ+Yq{H2Q{ zI?9<}(7J@(o1#F_J*k{qeaXF7-bE}A+kR-nKdN&4r+^+jc7iVp??UKXYZFc-@43pe zyDH<%HYIK9=azBX>j_M>(!nRV-`}-PQA{Ma_HIFE2)JdZz(`W2=^L3sl> zBU`uYbEmAx+gOTlrT#)jM$0WO#KzP;+pzkHtoH76CcxuRUh90BPwxmj?PQ9`o+~}e zSR}JWlXT3s=icYx@`Lk@hch4gx-zutrm+LA0PmAw>58;}Q{1T{qR9UII@pT?ac`w3 zK3=g2nYvB)vS#AAp{UZp`t0$d0i>-?|8&!FT^@HwzUmlFfBiY5eWJD4d=JLTuLHg> z<3!WDB7bh7RlDB*_~La>HESNhKGP{B>xL9MViU6WJR{Ytn(CI8mH-!0H1g2*;C|mu z@hY(|^%wp0=R(5lhKX5B)zQ-e_H=0l_}T}`mrCyj4K=!TVO}l1WzVdk6N4!@` zyPcclT}QFn+*dfqr=rTcS-%Cj^_w>zId}T@NH}fct8){4qvW3YvsE1tEIye{diR=Q zTVnC8uUnxK{>QXhSy>vY-44W7UXR;_yT!v`w~G_$X9Hr*%qZXbYTkbsh- z!Vd5&Df^A7s5IrXj=DZjX>xnEE~*Xj_n|tur4Qe^0~rjXEFQTuo_x=JDillU&MU@~ zFHLpd%X#<5352Ko&AwZBp9#g@$oYwAw~hQRG*7yh6X5F9WqBrt8NvwSHps(gdb0FW z(nk%qnilVjQMqepfjX*K1H_u=)jJz-3y?h#xL8+U_*vE<)=U+AjEfyJ4%`c9T(GFq z{(y8}rd#G~tkb%PTC?U4_3RSOiSr@~r1m~`aL_Pfhn#2KxiLY%$U4m+wfO^}nM)WREbWZSPBWRr;hh~RCiOKzxZX(c?s%sf-kk|sDUM={MnKTu_2Kn zxaRiSHExj4AkJea<9i8Lu%IPqckzX6>`}zcAo#xL9Ms*) ze*ZKEa*CGfCVaX;%&Fh=|8T1i5?t%eB^Tq^mm|GO=&}wVjT$ z5<3bD3W$q*EI=3p(9ImTs~4EYwcxqOQnGXT9=1zKla1!xwp;JCcVpg>G^dNyqL_<0 zVP$@Z%M}o}R50LZsaX>g5fUdWpTedGCbVP+!+h@XgJXw=C=*N79ck|XjbpO^ug)y0 zx&a7vKoJOkWA9sG>I^Da0LTF9BG|Q64ecu;hDg9Bi|cx90=EppOZ~B(NhoMeoX!89 z0ho~5#{J2s5=*nT<{0Ng_mXz|3P=1V{q8BlpR*AD99wLL};97e% zQ1>3SFcj^P{PpM~)UWKYn-+bE%H@z-N8X~#)yDxLCtoQdEX@AgV0U?%L@)rvE>p*AY;2h*rP*B`jVcbAY7wFzKos4zwu7^sTqMqqA|6Ss7T$ zIaRKyNJ$COkH*_j`T7H&n0773)5X4nyw&i8YirawOXB<%D@)(XS@FuREB5mBj&1vG z;-D_6FajVFb@lY#gEBxYNJxrt!g%_(-}>8nC~Xn)TOGsdaU5t2L1wA3WFEcYtj)pb zF^0akmYto8_a3AmMhEYE7`BvQ$KvB6b=2f4%gZky|AI(`Q1}1czry-|P!(1qpMH)S z@Hyb{D`to%H|4v=JD!5_LvN08gbw}HacUaH?*Gu*6F|a?g7p5fN6<{=3TzkieVo-y zz_rC}` zfR?n5)TJ9VU%JcC3<_m&*=p9-)&M4+V%eG5mv{L^WJO6pP?vdkqG}Qg2NgU8Zm()n z=qa0>8%7=&8gdGAdw}w{w%`h81%{#)0f*eY)QkimlDt$z&)7I(kI39oGB&W8&Y%(w zvC{H2NRIubFL&nd3N@Ju?Jn|yZhY!Kaz{sL|4MzDaqQ;L3*TuRcWgNRxi!e9R<{P8 zktT$L<%a^iLc5T@M)SieK7igs+b@xRG*2ca-EesXaoq8p@n5ucbc8*(9+@UzF_g^O zn>|k8qiyu6oF|`73DIo|kOwYNFsyN4s~Lnnsv?gIQu=ylFz!IzB=FOM1}}C^qhLjb9xv1mGlkyUT;g|dJo7=@7@0dg@-3Q@AI7gKlM*44GD#| z#v!Alk&j#-w|dxy%lG+P?O0VikM0es)}c}z4b+J&ohKafmU^b9(#xM+W!|xoiMJrz z`#GjUby_Rm0QGSkQO``>eS0{sqmB@cBI-H*JHO6;w3t*wU$GLJY2m@Vm8ANxeNwOC zmQ)TP_B)SdJXgYzH#^z>Ro|nCAO+MO{vH3(&ZDS5dK7W>5Y=dC91nE#NW{b0xplL9 z=O@yFguoR5La1$h3o0BP&&ja1gxzLg_S$as%sA}o7zoG877}n=QN5E&s68FOUTAQ8 zUU_c25`(P7I#c3%=W|CsvGBctdPHVHp>wj|u!&az5mHSKKjjR0GM>9HqIHr9sr~AZ@5F=^xuxlY|M-kdd#}L$;sRK|XhJ(f3@0r}fn*FcQv&wfSdj%t09u-vx zZS%f>?@RbK^We=`JIpB49Y4NQsQww=(FBBuFI<7JJJ|okueYE`x)M!?1H*z1tA zml-wdkU2%SYXmp7I|}pimgY5bW;q9eQO0DJ7nGI?2y?yNzq=G*z|z3g$L({zBzp;< zE=Bgd8`S7cHLX{GC%OE`(Ehu>4jZAUaR`?t-V90=Xft_+4xi><%lOJY3Gpn~6J}Sh zCvi#v#pCeXRLz7q-u~0r=?2Ay&T#6bN;*3O%v4+JOTY(dI_Ya4sO;2ZTZPW}{eAOT zin0@mQ{KzaNncu{^vn7Z_O$j%M)w&(MECoSCsOr*QF1dq*W}c23n|%zZb4T&6wSW) z$K%_s_=L^voYnF9)mX0yqFbiK`K2r6vQxeoLpKmr&vva;lhP}LE5?%NX$04sTFP#4 zCme|cF?hh{pgrx?r@_cdN>^?M$iXl%IAp~}*Kkqh<@4)TD0ia0s+x=Kd(L3C)|5;G zyZz<_jSvfv>2onFh}+XCfJ^Ky68W&KjSQJ-=FK>h;q0x%aK zys3z$c&)9rQ^hT=FB@C{BY?}D?4<@?Q&hPO`Kq*fR;I0o#CE6-T zua*Wt_06aJCXnHSd!BG1y!1$06J2k#4&OOO0Lq~(NhN(}94pu*fLbQ&8ucNv z+Wk6c4cSi~3J1FC44f{`R9Lgryt2AlSZ=k;!~#wMOdCMgnTqv@>*OnPc>_vC zM}!O6jBX`n5oMhn0qb5Xyl2mIBkI_hsPcHcMT7q7@N?-j&?x%zEs45+!e4&{~+BF*4An|YWj9>#~+ZNjJ+cPsV~loUOH+l9tTQZ5a+SPHH+7l@vI00N!18ODwP||+^;o7{Jz~al>7uoyGr5RA z%WNqk!pBL+g=K7OP2ts+eW|MU(;nyW=~py##EomH$rA^--mADCbDOK?h;cVJHN9a3 zxX0WbTf+YMF#?i8U5~Gfi1mO2kam4we}@xQovsq^_*Kg4Eer!H<2To9>g429?!E%5 zYE;8~qIo~#3*j;#)j`Yy?3o78C~(P<-7=Uy@-~C_j*g4%10}kI+K z7+ZAK-DSXpYvlsHP<_B(kcnfU@WGd$O6qJJ*XY&&Hr92U_S`mA!*e>tQ%hE3gbnn< zn{XsSp(EMK%E|ypmeQuaWt^xa1LP;W!N6Ft+?a@SBhF`fe@6m~K!bB6{sbU_2!ka@ zgfo*Qp^%AtppWr{mZTrEKyxqe=4ripCuy7m`4JGe3~OyoWUl){0MVwxE9^#TN@yUm zfP9*8L=jPRy%l%WTY(}B5446mDD+<>>wk#5{kvH|4ys~`Je8sYsy71pXG!_-^;K54 zWXGo>b=oS+k3;TiQr&ouqH-bvtk3ElQ$T)C=kfu>?Fwo!JB2mTsebLY5?4a^a*ok{ zqF#N*UdZ=fWbH-FMFSb2pWC1+M?XGX;--=q*U`L77;vV98Z`7z>=xgEn9)mi^@Jej z$GKqF8(q^0Mw~9OkWV7iTqny#`Pme?((+S(I2kcO)BY0J+bN7 zC1f`DcziDm9{)7Oh`|hG6+GW3JhFohi(SA0af3llP>}eAHpec@&qnU{x6CZs1i@77=vuM z{)E0-e7|g=nRb+u_~5s>&)g)z%oFPX62N% zh(I6v*X!oi4WD@?vG5m&wpNI`FMl?-)KtRb^VhW;E;laYe`wr`e{8ZO$W0I6)hj@4#Izb?;I=Kr#P>nW+Z$#IAflTv%jGq2$8HkmB4YO9h$L- zZ;YO8CWm5Pyi!7Sy+Bb*PT7`47AZTO+26w0C@f}nPps!-rum0Z=UdIJUgJv3lZFlF zT7oBR5}3n%$N?6$`zs$JUFDUM`pag2f~wlp_#K0l%l34|gClBscI}Y|jo;KYg2?Ubrjf$lwVP!OlL|GkL71n7yg3dR03PDBX50sY@5WFo< z=6H&&%oM{!uT6Z zP~$GJ9D^_(p&B3_zygO-seT17#zzokwA7T?{hSZwX5g?9byJ3?v@z#YNG-ApGJYHh z{9ifJ>hH^yTuqZjGnf4c#yHm)aiu+spl}ZwwQ_UQ58Km=^@mo@1U zV@sDRW!bj56QEK>+{)0ohGt$$2S?v_mex7V;DM1*98h#=q=gI0;z^0HT@G}fsXK4; zbp|ZXVBcML>f8Br(KlzMs&f&IOBf&%J0%_k3*c49cDRPOY@oU(xs$Md2Eg|!{SIPF zJBEO~-A9E;|ChJwfjSJJ7`0aDL49^?hqZXC2f$cKiEbo+NJPkG*-N4L6HQG`AYGo= zfyD|IfL;J4E={M$)bup&qlbxlw}lvx6#b^~cF^uVdr<4$p>^4tc`(moc90cdc4-{m zKu^JT-}g;n6-UC6dLYLDRB*wykiuVt0=0gNmRDqdE4uq;9$W~i@+oI#-x)jw6b|iw z@wSzT0Hn!P_My-q1uxm1nx3`}s9auVh9yuhcvN5(Ql&x7CKRw?JOqRLH5zT(Q3K2R<~->*hJq8uJTxlS*r3K(hBkp9#I{u z-g~%%W^6~#@)jd%f-FG-@8qn^l{fOqGSQM>(*#I)(RigBk@GKVi->?pt#=W9L0$J>qwX$7D5yMFHfRFX**h@tFf2>_aVBzrhHwpGbB2K(_UN)Ow z_Q2McP581Uss?o;^78U4E`ERLm&sl71p;WGUyO4PQU~)f)(8H7Y$;;@g@FNXI$1Cj zP=SCZ*i_&0hwocb+_6KU3@QyT=k>_b+S6w;Oc%(@SQvisu=kq;KxG=#r2mJD5C8uq z4FGG1M55M8F!g9I{`ama$V@;uION|K`m^a&R8;=sn@%jDWrwaSjl%R5lkXyd6aHnQ zdN{@CUVVgS?|Qxcm*KhG0>J6Tw;v)*gyC(MwY*4b`b=j3uq6RZxgMKdYSQHH9=_ll zJ>Cm)qKfh_*pjRsE4z%n|7hA+DVklYcK??ir5jkly%dPpU+*1rwf{$RvY4(Q%!6(Z zLD8+Al=2dOmWJ!|*;1SDIH#IyC_V)1#GKRy?b_%Ri$F_z%JuCL1Lwc(Xf|oma@z$* z%P?EHGB(lul)$GfM?&Vrk?VT5d;DJw)CNLRz77c3PYGz=j0Y(Vdm5#?U?B|Z<-6gN zKOpn^go9LN`KkP(_XnedDaC`JEcV+&ZI8FK4YVQe5Xw$7=-R!-O2iXFjLj(pmuzO7 zp|L7BD}&RRiu`KktEgZ_3!)1653 zWxmUp#~1Cup`=dz5CKwV@}*kWz!oh`evOMmbCS1bsN7|%mP$t#|`LIM~NM-}9G#*;sKYC;(d^{3vX1q3HRY66&@|H(l4kMJ9=Mg3p_a`R`6Gfui~r7<%*yD@+T z|DDBnt5&?iZkxQey8QLz%1<9=h1(oHg@^H7KN=aW`5XPDJEw zWpAd{GkV3jjovAhXPvJdppZAUP#(+CxUG!J4M8pY^zn-2*!l8>YC40UeIvlX&FMTU z*>~m|VEI1>7v4;{uh^Rc& z1WX<{Z9XJ?Iabzf6^xG%C+jvQC-MwrF>4uL2KKyXeG7M^+y)XB&+*$WdX$=cc2`nM z7`IOZUyO>)KwzKCJHBzahFY8qDagiMVGi=j_jk*FRsMw=Q_J!Af__(zNrIAKNAlXy zXj4UO>l^4{P@JwN3tVu1eum~eCOb0~r6=Xa|A5k(-dHf+R>+M&i|-o#ubYgbDhOVu zZD3C;-6^x3qCM3kfzbvVEq4>!x~_NI_FONqN)~P+=@6RFT9?3GclDiB@@)vG*LmS%(9pYa%tm*!3VDK&e9x+cyXx~-)h}toQ@dI zN{s8s>@^{zhjI@;2(eeez<m6B3Vl8I+({t5v;aAwYaJEU=DH%P~?(D(^Z3aQQls>EgWdAFM95%MN!11e^0Ck zCdOIhRluWRxW=fa&cbTyno-JjYub={C|o0vJFMlE_jk4gq3T@Pij^eV;D*>Q;3Vkn zQcsG%mygHatGLGxS{rpO5E{#`s*p6=@pN+BSp7?MZ2{4!lCrE~uf7}{YSpIqBP8|6 z#@*H2m=nyBu}V}m+TXT%_#rCI@!8K8$w@yxo4h}#wz6@s^LCCkH0p%>5tSG+6BIMx zpnbjWhYC8RrhE|hXOd5Wq?G0&#<4rq`t7z~&(56}AEhTG2pR@dKe9@uU}Sh1GE_q2scx z2+46aT3>u;LLzHQ&vZ*D2@4=3*53N!2(^w}i)|2A#vrh$D; zXi+`6oy^UmmRY~g+GBn3=-S(ofdSo6!~KCWc0Fs*o~F|Qe0^V~KjhLmb>iyv2c8t! z!QdC2xfkZ1)pZ5SE)Z$ESToYFghQ&&_{I-$s$1F#%YtI{-y0M5B|%l^h4Dcp-UkH_ z3vUc4Jbjo-8&jtG)Kr9d`p8SM$35a)3-pY+ip$}(^U%4&El#KjM3>O`-nh*-UX19x z+)mbEg^3^qWmIdX&A-<~6D1jTlmLC%El3zF_T^p0%d|hyp)twD$p(KUGPx*{Lwd#R zMa%u1g*}UgiLbyB#{~}?=P57Zc52<2(HDOs+%cSC4^I?VZpfd8ff5*ylG^E_Oe?{7 zys68geFqwD3Ew-&q4sE9+<@S3$DrHf@sH8#3~+Lb_E;MvJd=KdLkyh6_|oGd$eeCp z2Q_6`DJ7-Phb~S<-pf>Y0DC+*YrG3i^8BHnO0sW6bDs4_9#n!)nEF?m4Jfq6);=*W z%y@2h(KYE|(3{Ye`k_Ey_K3fv;d$6%(XJ+PL136cD?PW!5KFf_#*CvnMdvW$}oQgU#MZ2c`e9R7UUvO{hQ@a#=raDBBGL#sS8gU#k;kF~2c^hI)QTS_x zrrU}f4aCO)RszKJmLcIti{S>TcT=+e4Rn1cEb?$GveWETd3T0#x8t0A&4*YJ1)3zc z*&mz&!`nraOI2YzKJ?eGYp6$G!7BV|cHd5|2S8IF_g%-aE7=))1+RJjOZ@?s3W3lv z8z0NjOJEr&wo@=F2XHLQjxu(26vuqCiPW_3NSVWS_6x!FK{(;Zg7MV@)AP9G9#GSx zHkRj4mGCz#mCdE_YHYd81&J2usqQubjuLIjGcgSrHXm!2=V96$|GZLoMgR66@3m7H z)W?M`{MbGrfb!W-pHcgGVe#+CRj}M*^)a z_%O}nk9=%WFt^hV?4Lo&cegdb1vNYvA0S8`MaU|N2ZbrA?b|<4$GcD9Xu7q4o&qkfr ztPzDqNRK-7tO1V$F2eD8-FYtZ+oGs4+WA;*4=lD(I=mph=p~7eS*GCOIL@=}9;K{5 zHZ;=OV&GD@eCro!@oPcok%pwU&5P@}CJpu44uX!#QJC66$wyCm!y=R|O7!|&ukZ%0 zU?Z;CkVX;k`Az|$%I*~fqg3yN78kcJY3qTZ$E_{KE!b}u1;>taf8akgwGba$T1~C^ zR^X^{Hnvy%9?6tZ-GEhc(|kQrv|nUEJxGVht0Kq|RZGZqvy{Zlgxs6uNstKrXY~KX zzC?UT1!Cut3Vh(A@9XvZbvp+XY%gcs&>yu+TM&o+b{CB;29@1(tR;!30f0R?)d}xW1851&(L! zMHMJL>=<7A5k-9)RqKwYOJldXEsQrYy>T9^{nP|GkC9d8w@VnjiX!$nUcqD=lq`(| z2&ZdrHtJL?QS;WpbG?Ar`!$iLFs_#1z(KUQ4frU)Qk^_yQFd)$xjV;`Xlc9|B>?TV zuqesga~R~5|9Al72NmxydN%A`$K^Id&DqnhtocXz7b^JDgJZ`{t`MLx-%a0kMuB2Q z2(*5HAw9JB_ZL+Vg|y6!DN7N9ikq#@70X>3>S@YpSE$OlUypn#DA0V$pF5`YyMR7%ms(K~77_v{oHf%;Nj2hM z)yFS@T#K)n(mKD_8b2o2B)zH_0T+Xr81m{By{0!ltW(@%pE-@K$POAU(pwJ>nH zB!ny4GfPGke3!wA^kMJwD(cA-c4~RsJ>7K*oY=~=sXZJD2OsmAf7h8)zD5}U^t8M6 zp0A&HsfR=g!G|(9V%dg&u!VNZ01;cGg9i1ZZYOCVR76uRfB~m#N69Ik<{q7SmHHjC zBTWjUaeYhGbM5bA3oT%JgW#)W_7M(QNqk=#4hwb7Wd-Y5bFe(_`;+N&m2r>39L_0)Gzp;g7G=$ZtbG1FWA-$RCYi)=H9yJ>nZAJ z0(U-i&}crrnIRd33n9L5cV3wbba;GP;M`UKBI~n)bmtUB3x%g_J=x3^SH#kHHg>E9 z$rBs8L-3vS5SoMF$cq_ju-I-C998dG({bRf;PxG&IAmA#&BxHU^iD5pk&SIiDx;jj zF4{Y6f7-ZbA|H=1XuO|yV{XwAyViO=!@vR1cb8(EcO%4fVHiSFa6lyQ%eO`-g3klu@+{?ny!@akSYtjWM;1@t&2FmhR{0{)+NA(2^iD#kZQ7sN5PdwEmPhnCITJ zcV`9%;Fd57HXxt+?gT1=MB!o&) zBq3u9l`XQCC3|HX%h>m|4VA4DvWM&>46^0YLUv;}2HAJA@BEJUAg=p+f9~(SeZG&! z@6Rz~=KVh3=XspRc^t3fc`$V?rA2V1P)MN38W|mw7hk=S%0*kUQL`R$J9M<5|Cme# zzJ|({eE6w3Q|!3SMZAq&F*V9p;9))N660Ta9~Ost)2{9~|KK6AALAHpUu`HVkh`KT zq#r&zW;@;Z{0!E^ef6jEP1hJ{x4eBfAmkhExp=~7CHEvboBl|T@{4t9cU8vo_(6Z!ha2968h54 zqa_+g^7@rzDq0jj^xyTGQS-@a3_tB!Nn4e&zkmOZ|P4_Y-TC&P(ZZ3IGvF+ zX|RVlKxj_<>kXlaY1-<*c*#)SC!yIny|}$29;yRm`c@~t_hqKJy|vDlR`o^grFNC5 z2v@tp&bC8WCnwEi7#FM89~W;fLCEy))_ z1~{H=fEQh$=BRN_)!o2VQ*ff1l8xQAu`Ho)|b(q>YR8i zly;0GjIO~jHPp!k06VkGC)OrONYvrm`*3}?27$@ty$<=Tv*hFxhzs`<7q3z)50ddU z%hMzK4iv+tdN6@^XfuBR6nbkhn}OSXQS7( zI6k*mxjG*yDm$6FhbYTIK8r>wxb6fCtPFiMjo2tXTNYn0QTtq58wK($xx2^#r!iib zSbWgFWSJ_v+6s8AOpZsTuJuWmEQXXVr#RIucF93J2KgZQdQvXLWww(3&fuR`wjjY` zF67TdKt$vuN6Cm+S#|~4UG%F1h?*OsuHi&Zp+oFDO$PhS&2*+bK-r2s`d4RCN>bJf z&^9VlU~_<9I@h{co9kawKm}aO{-nmwkEFP(M@1Iq5%?6>t_P=y6@g+P32T|M6rypi zk$m#L5;mU#6sr9LA=GftC%XzD5HbaH6gT96;B6$d9ocZiZ3-gmHxk9T00A zl_Kws+#0V2FJ|T%xA-0vgJ#v^bexIql-_c6@`_rT&8)U{GU$jtteFXISi;b6Yo~Wy z-GLlK)uJH^s;k=zqB*4#R_6CpEkvuw(zr5elk)}{ZJ72}vo6{9_Dq$RC*Iug_Ri*S z*#L2gEq_K9^j}ws)IyCIv^_O1dHY^Sx?W3}-E%4-rpEDgBUzB!_+o3~OBVe|ifIZi z*X$xiYz-f-zcI!hSc6c&s-?+Ga_#_e684C-t}RS@B(~y1=?hj@Wy#h$5N(+Zg`3M& z=|`o~7oRaRysMuacmPqkWsi!sT+7!BSBp90y^DSMmwWoC0E#=s!ej51gOwt*=F6Oc*^_tK7qcf<}W&q^Ts57cjf2!i0u>T(OlWbO6C@(e76cy zpa!HK)sLg~4+&gh>S~u=Zd4KU2|3oLKA|qXAb#HVWe}bZOsYf3WMfbS|hRLvI=g+%CIMMRQ5n#LBx59GO*H1K`-b=Of-kt z03r;SO7)Vz#iFA%8D=C)p>$sKI+9ilBTn2fCq$uh_R=@1nW6Zm8wIx}gLhngNqmZj z5Tk52_y8Ee=6z873nn-aM3ej0YsDr?%kWTP<7AibMvX0^TzKeePx6+Dc;VTEeESTg zBn=R*!QR*&3`(l-#ZdXR%m7N)`izut%bALD;OP{sixcV}=1|P=B2`~INW#_=u8?}& z$k)6&4fR~I#CXm-@b$lw6Ehg+;Q+CboBj7bT6PJ6=qcm)k&}V{t``i*O$*-wbwXdC zUW_Uom}iIkjO9!L0RcVVw!i&%#S1-8kzM4)Q5@=A$8BtRW>v#E_9)pmEtt}B5} zh$7GOV-!J0{$S&a8)$HPuV45{f<*ML+aak(XikP#=v^N+Zb*O7#8b04g?J}RwHfr+CT0pVyWXxm%XR9F z_08@4>OB{)dHYC7%IT@ByiXZ2X8u(ejyaowtL+%>@H26rTiu(?QI}^AXM+!RVfxxZ z)_Oj3m6uyTVrkk$kPX?$oYt%!|JLnGi78fmUo-i`J-mi)MEVi?)c4ji^_uIxFRhJy zTw+PH<$k7Pxjyk?m?OEL14|(@f{gtbw@l71?4Qn#(@o?zp-vrFRpII|HSqPd;_e_R zk-ZBlbuQRJjlpsaj=`wPJk&8hx#@5J)d)H z-XwBE2**>dc$nEV^h`RvAuFC>bT{1|V;os8hLwn4xOsn;(DlrI?>X`lmys~X#yn75 zMr-pyCU*0O*Yz<2$JQq{q}d>Vvt9;u>ioI}V&fV9qgm^J4=b(Ah*UE=+@Fn@r+}{@ zB`&}OP#icqE6kKH8pu%QrF!;Y)r zo0Fg91=D}q+DKK#8jv1N;mLlkk7|0nCTeq!bDzVm0 z4bt%js4B04Fb0H--~D$+%@uo)t#Q1*^87*WWWSjWox0&2I_kNvP^sY&FoIRYo6DS^ zzQO}gKAqH-ms^jqAq>qa`CTFg-)#5c`X0t>*q}dJO40inBcktYnUF(#;)TK=QJ8A*rp(eRojPg?2e>Y4rB*A?xE6o{vQaVjd*#aGA#v}O zCt3d1iDzBE{7lHQypPlG^_h7xkSF%}5NmyCo*|i`2Ts4;Y3=3KPYz}KA&YRfzp%h= z)zNi1Rq4cKpN4Z)9|xmNcqTdp5}RKCX0H7$fAqcSS)X=-#znHAyxQ!xk1xCSn$l>N zwA3^U6T;Pa(`xqgioW?Y>XXK;Z^gAJ9h+_ae%Y-`ef-SR4BA8ba^c5X7TceJSe%yCYweCg|>x=@4OSRNaHyFnW{?C#ePSBOTj zkE7_mk#SkJ{tOB!X*2kB7au$Ldk@t-x?doG-@eFgD2R)khusKS z)#}=_VKu;FGhfFJo;3-^Qek91%_qea)-sYc1gvD!YR?hwW4ZFCDe#iTZ7KFyot)fr zId!WHTQ*XmDO$SYV6bq>^R;-F_!-nKa!D3_J*Qzxy=DVre-cVhEE)l#bq>1&){t7iAtcdodOM7f;ZYvZYuEWNX|F% zsUvcXJn_^^AIAnND|^R+mSlab4N_YEayhHGV(jJFknm1|vE!CO`vdds#MGY2P?(8= z>k_%=XqKJ<5ze)J%(>2meJg!u$ozq8O*R?~(w!IHMT+49l-&SvEPDJ_Kl*h8A$T zHZ8`1=z}DiyVCyyi%}erHpIG2#j@?PmW$@wsaNk_*|eV!#{*IHdd*m3>((9ob+i6A z?M0$3B0qGAGm$a)crPqK&q=4HwbUuI6DJ74B53>?7 zE^R-hZ2z+_`|Acb>?C14%wiAvnpUB}5Gz@fwD;JVxax}c7GkC*$KK?rUaC4Y`g4-) z9jS7?YI|eQ{M6vKbvzV@-rv3(a}3jWJ;^WXVhE{kZrx$c^jPz+joA>}a^mCp%eYRr zopexriegIXqckd#x!&?_uIA@#Qt;ECw>&iAxU|RP#s|!$w1lSZ7Q7Xwm%lckp>4^; zh@bYpOKwZ5Eu_TBJ4%r}j#5#u%gH;asA|+I7A7mWWnN)IcpK<%UyevA;^tiZH)q*D zT7&?}fkg;p2Ud^~ZuqaTmF^~KUWWzz#~$|o&2NW`gA7T4(2FOUP<9SH9rN#nt(PjJq)pZ4;!r4))EB*g9CIug@_%~fm+#e($%5gt zstBMC&K{OzGr(Wv7Y(6wk~wMfzIEFEBC=?cZtwF)-`l<^L{&;$OtpU389)l|(NZUrR`t&wGjmR^w1D?TX#c~{XNt~>jZjDpLobb%I58qDB6^=zO+Wa(07~>o- zkXgGGK!X`O%Qwudp^iNo<}=Pxv_gHY*kX>&i-UrS7mu%bkCic8iU*2<|Y7 zs4{Q!SHlxjI@Br&)qqXgJh%)6GEuf6{&ta&OVjhmdgOF}ui| z{n~j(P+o4@(YB=^lz_z_H^2GKHHNE3v3#vKuW?E5;h_0v-8l5rdj%?TpKw5r^Hn6D zUW*DepD91yuQ0Qi)^ALIUHYpax$*lz9+o#Rv!}M~;E)M6Cx|0?mBxjoM!nXor8L3} z%NyCw&lWXC{0rN8i}_vBfPVcCSr0#U~5_D(qK%E+Xue9 zAHZ|=sN&r!i&O=xQ7Y2LTUaP`YnWy%`j+wIZD((lhO@iH1!wiOtJiqHg;`ozCpceZ z3kY~TC7YEK-dyDg5!}sN)$qwOv!l9MvH$MsbytFT!}Ya@TZwzm-ZTP#Q72n0$c zRBGwWz}9G-#vk!EyGRn6pq3uxXT(h*9O# zC|hGwQz*ndNi5@ae+Mu&l0P?`eWZ}#KRH8yEb{N3Oqy{>!qd%-G-uaacy5Rn2AUFp zyiM(=>~J2xvLPRBm+_$&T2*$PQP#4Er|B?TZccMuTlHg-)y%OFRU-XBzV1A&mp%+m zjxeN#YCGK5ydtQa)X?+o=6%p+Dh79nwIVrI3Ns`ztWfRT%c3QpJ)YA~m$}@cAE7vG z=6ndf9vlJ78FHa;*kw1zw}}3B9>0rFuw*|KyDt;cxEnH1p1DOr$8u#yeAey#zVt$$ z05W2<>oHLpcA}j2Eh(b9WQt;y$x&}FbS-?IW$H2&qO~%l+_vAsuI$!!D3{S{g z`+&>56Omt5qcc8I_7L2cCIbtXxm~BYhft>P?wcWJ>OgHcQ$K)k$KZXeN?9)qQK1D< zH|i+dfk;ExN?^C%0l|^mq39{r3m2UF`8yVdlncugxu?021hoZdERRi_VGA-G;xrKr z3Y)A@VEadvrX_42=srfd8hBXr?Wfh_9^m?N*H)LboF+tbc1=T!WAlGaumY|zf{vor ztwU1>$wYlr3ulTA@99RRFg!&~3v7MP5L@sm{hg(BVBHA+L0>WHMqFd-#++Zj*GF{T zS@hv;X3=GZol+k=r-Py2@J`NB&2fI1(*7EBh@sG;D@t1S3-z!Xu;c3&L{?8{5A-f7d~vk#Km#3c5wi51F1(;r*$>eZY70r= zpeMBIn3N_ zo>!~%f!zT|HGcgr!6K&>DaS$LC7V;Sv2TEf^J4u%%CT%hLF>%lzB?=OsjWrF{uI;) zAis(Kw8Sv!Hwo1RK# zYL@QCJEUr@Eu77XvoDdz(q|nMuix!_Zs|_dUe8b&2DM*OMUW{D{9UHN&n?v_C< zy97Ct!^#tb7-epn%4ZSoXRB8C!FJEf5~)2H(_V6~eGJ+zY&@9t|NZTsRix$;RkXyJ zu^Igoa9KP6@aUBq{Nj#iO#(S? zzm8wL;mZMYlRTP_Yu3kjZsv;@2ynNhxYVe%e-_sn6LPv(EZ#*gxtE^xN9suW7>Y2y zchj1pbfG^2MS(U{*=gpSKCg+*Ip5te-TnC)h5er?WI}XZbR2;p{6^_X4_-1=Ew&ds z*y~LEMq}r}VH0VxNMr9AGJ;4-d&hRQ(~iHvgG_k!0kt-lb*p;h-tivw$ZiAHu^3|Z z=AZ<4kyn@YQDSoUElXZHQj|!V!P-TazDro(2LY4L@;L2|>EYx*GCoZ_uzmaVY;g8v z7eopBK3dc?+Ju+#CqaBUdcfa1toV2O>!v68qOA1_9&UuS+^?Tk{jVuif4R1D=SV%X z+!<>sJCC}%e$jn@eC|aip^2z}Z9jR3LC^VH+XTDzXz|(S*^lSjio+tE2Yx!YbfoPe zNH;w0j7Zu)Fd7w3^^Na|HDhBNLTG@3y60%&$au8lNLq$FTQgCi%MiTaU|x1}cCRdQ@|O&m%Vy!=jo+G#1Q zp+n4nkI-bt>YlWser{G1O5l7SdZe|fqhsrw;6IoXob#1 z-e#6Y* zd^^bKM2>HqUoPPp%g1vg9!gF0=WthnpM*TptxfW8jLff;!PZ{ufgZkH74h6~IYiEY z*Ofi-p6ysiv;}ElU86enYPsS)foU}}engzH&C)c+fkU(=>*Q`rY5CiftZVTqm0SU9 zr5LuTd)<^SG7trxx99Y`y_-fUURB3%n>3EACvaUDhi(@&p-%!=Bjh5vE|}fnI!3OK zYdr*R<>u}xi?x3^1G-KXtJXs}Jv#O_Y@vsZJDO$Z(sPBwTvfdnI`w@V=7)uZ`UJZ$ zvD_0p<)7~z&7m*&`A~Z`;16qx-^brid_wDT^{b!Gq9rQb*0+#C^wO-UQO3;T2!By@ z*zu?o;oZZMAtp41LCfX0BXcJLbB#RGOYAE2dv2kHs*1;G^>cD=JJRpgwhgxYx`*y} z$(pvyR%ckdDo!6e2x+U$%XP%^Qdaa}>KghVQ=r=I^mR*}*k-~SejIEJVG+X4QaM;z zqnhIiWqKY?e{QjzUf?NT8FuX}Ym?xPN;&TJYQhw69i3ZRU_|=*h`f4{tHEtQ-penf)JjP|gR9tFLrq*xl`g^0& zV^D0b&pEC@w=G@Bd#>Piyi+Ul;uVm&&LtLd!K#t{q8I6s@gjQU z;nS?IP$Cf;W$q$XVagD8MV?l7kHXU?iDJpc*usZ6=~0o89Qr8{;eKON9TO->79_e3 z77Fj6N{w*{Bdvcrx{@YL$suXLSxk`H@njTh+7770Gf2K{L4EFr;4vz>hw=ViT#pP5 z&*MKYDJ_pyT5@uGT?sfc#CvXYTjXWF4}~c86>nm3eH3@54%hqc7J7Tk_AS6m=KshJ z-R>ft6nFDNammP#j;rQYLP-r@+@l5npgM~QQ0JdzF7du1mw`5F7Jk3oZ+sCwCPw4; z7uUx^1caO$rzGO)hXc)U%J$U{!A}G|L_BvBrx2teQ?g^<;IiQOkm@{Y1cg(tm#zvS zNqEGECVu`laK!y*!^WNZlfYw#BSVTs&V`!~1&Q)zpI(`gc+={nLo=fEVY3VU5qZ^F zSC&LY5lN{4ULjs!rv5f!jSs1CG41ke?BSpK*O+!M%uBeY55#Y{*R&&*ic z-+S;V2M#nt8E~Lkfoix_(3?hgjg-S-Ou2ATF}rqlyu)>NL`8*yC_7>zrlR1ww4gl< z0?E|qNAT7;UezSVa%-QQksVQe}0|jL3m^pm2 z;PwIGU6{WR4-i4ye#o8Ehf%AjU+hXXzPiTiIGgNPDTN$fhL$DFR#s!90+M(fC%#cC zhMMm^h=$}C=t~Pg5ef>bKbd#Op5#<=>0WeQR?%dBs|}LgE=|tc^Zh%ohOBds3=GVn zv0Snokerb|Iu3dk2-)lx`Y1&5A>`!|G}HA{YgC%a9SKR$x=EaX(Vu>Q%p=*YfNKpp z^3prm$pF}S1DDhaS$kK`)!Qt89H|053-^c5#2gcqP&Y%lUWD5iA5@%QWE;=N8M&iM z&maM>PG7V~MwwG=A~_;c-NK?XXT%^)sb;PXNkoVvP)`G%MU(wFJt1luOhWY~1FY_? z=Y7koUoA87`oI2-d80X<(g`dlMl>Wyq_HhFqx%{^Ifh@V4+l&^M5wZf%ZHO9G_Zlb zG|wsaj7kY79H?wE(r$REyHXspWD{rkP_n)3wUL1Xi%JxC_L#e^k?|PqIS$_nw|2}_ zjXeK>_oH0lHqfQaCyDK#!;%V1rTB^XwvCn>n?FG$@;42ar0}5isTU<0eD?*`(1cAX z+SmJp&$D16hbB?-``a|QPSk52w{68ozSM0rQ1dN=j)yKMs~s-qB`7dYQb7+1=sWOv zU#d-CUSUL5+1oIKa}*jvE-@(+l&O`BV7m9$$}Pnjx_BC!Y$haEqh}HM@+m&8_T+%U_`;#}pYlOx?|198&%H!Wc~--?m9^ z-J<#jttFyj$)}(*^CibD=2R+@w?Eg(Obb72-LyW-HUm zsMV4zW1wXb2ACd?Dxf9Ra?fp-U>Il63Ik&2Jk0013_mNi9sSTp0Qv}OYBG^r^@Z|Y z4que0wVJ)j5Yjl~`R-UXq}BJKaF;>oS@IXYepVLXF>TiQ`bcAM!`~URkr{@x6a+(- z86(@9xr1aH+)02n^{HxUDGw?UBUxH5{Xt+kXBwCLQX)0j0#}=iQdPL*-LtW~2;|!|0`LqC%vRin3;2IR&~v6#yha3*JCTBPA|{{ML0$Ha^NY@Rg|RU-NtaJpW-pj9gj6)^ z0JFp_=VBXGv0j8VKB&rW;ap+y-qC|}x7SJfMghtAtW0= zlu@s-0@{gS-6&RktnEmx{Mr518Y;G5Os@^GsErA)&ae(UE9zHBFSmN@$19@__4fxl z_eBbeIR8E=mxZ(=i_nr2-~HhF`n^@Lwp&C19HDS+LX_oDIt>MP5t*F?;do$X=-Ko~ zOYzFrmF(Qc6Xh%|B`HJXO~=A31*b|nzUI;j3Uhbo?;?eG9w+yqKh{p^2yJxgV%kCE zQgzNgAzW)-T+3e3a>@RotQ=BTgszjPSbh-b!oU%KmW%J(qv2b9WyrS=p=wu-uF%E& z79b>JU>`C-aedswz3NiFFvE{z&L&5{yiT$r$v>09Rg^>A%2slVJ+yU2+2X?H(PB*U z1I(`v#hN`|VDT_w<4Z~Y0G_LUeFgP?f0co^GBH6#`kEG;)mL~#=7m4V@(*{8%9FSe zbz%zx141Hl=5-^?3c}AtwGL#A4|%HbMMmvEU$4_{7t);lMgMq+dSeic$M2?5)pZ|F z1}^+01LP4=S=<}#S2)Q)kX__c;(2B@apS-sVQ;%W_A`r~P;qPEVwQqNe5p=_@Nlck zL#{F2Q2!!}sS0o5uP(pSQn~c*A@&1!nnkc03mhKerk`2z;xqbe>Yp1OQtHT1n;)#} zrabUIhd$dcbRw!O{+#Owx2AX9rRtiG!#-&>SEhcRTDH8SdHfc=Pn&1U!9sP)t2p9p zGubz%pPbC1HtY6&2kojC#l}jzLNP>EtR_UI*G5~>Nmjh;+)2c8mDdqFUL+uXTjuqu z?gIYvO%2I;yZDE!gOZ{31vDxJ?J;N2esi4igX3}xsvN2~tBNL>v;4d;8 zt1Hq0FIZq91Gi@rWgpD@t?)Q0^eRR4$rNA+pgntmBHuK~QI)PMW>g>t~fLdQuw_v}%>>Ue#%4Gx_HMb8Y$gX`ciKFxX$5_nDMIHsbKFcX{>c0xB|NFcc=wbynL#xn5V|DeY zMH&|SHDY1sy6F9ds(7?C#TS2BHsuahStVI$xAlC6vLnc+3hV@@rl9Kk0NDFx!N-_< zMKVC_V*;3YPo(55KtEQ?0pM@YwQ=smN25RcA#d0A*mc>&J=z9Md)fl&BUM*23p)3; zA73m1tqFL&@5GKSr!o(Tw)V0FwlmWr=zAsM1AR`mJ*Vc@-nCSXtq6TMRIh_b%gfhG zruOalPKm^VNdtit0bD-l8oAcl!n?7kicDq2gf=hzaERz7-SvW! z7{oGc5erG&(eN9Hb46(=8ktjjxpuwSzy20rNy)VIk^;u+hlyw@XTD8TX!$1cydD%J zvO;-_dD)KXj!>sH<(b$Dl1{RjUZkUJnUo4(DL24V0r#-~5OZH;N+8`t5q*KaEw3FW zC^JANN#GV+p{a^@PxAIAg950j1MTV8H4$l8{&y=`yKSaXe=_<1CgU|;g>A%Qd zp9J{Ux4{!fokE9o#_~ejp~!5|WAO@pONG7pY1pvs}OMN@`F3KT?Kl(If>H@n$v!yGI3}67f7b@pv*)%?#`%Bk?qy9UYe@_+} zs5CFHP#utgd%TNGb1Q4&k&W}$qr_knj=l*Ga)M$TrE}9irZL!+vC&9hp-v8(7m(~i zis4~irRU}XPS?=wI+={CSZiGg9iOF%(l65ey8!$3E~^u@4?lfuZ&aQd2@#5i_Ie<3 zY}&gaaZIp2jejkqr3GfP&8Tq4J5zDeX+#EIFxP)>Q(Bw=WiYS7008PUA50$Xx=24& z7KS%Y2%vWfykdVn8LgF(=lPdNa@WJzsz7702J;6EKl}~t0UAu%-#o}*DwWT!lpZ+u zRZ5X5aXdh1WrUfsdA$h}>Rsa?dMaf$w!b5H{yR&5mGdMMIIh5|>1o-s-m%BM-oi7B zZl-5Iab{Va*k}5I0x=W|2)as0-g2x@QE#-74|>-N=n6$d2B-l!`+?M^p$tYOj_Zs$ zYFs1W2Tnq&2&wXangwihlAv`PD~9C~$L{zJY z4N!}`+w6e?UugvYcw_xR5=ZIp%ri&^U62D1$jkDwr!Rq{{^5=9DFLV^?F|- zz2-0go@-%iY zNVaaQ4YRB6n}qoF_15@#2i0HKk=q!x=_{hf8NL##riG^_#S(K_S)OzlupV@znf`E+)+pe9Jer1yE z4+0~nFzX5U9BN5Y&G+E8Sw4y5UUN`js}HPPcD?g98dDNsFr2g5F94aKf{XpiE(5MU zcQ4weVn^pw#T%w;g-)K`Xw^adgabQ1s>G#(b9okBc;K(!4O#heevkp2-CX5P(>Jk$ zB7Pl<_bxyHoEB^a(fOUk37PsHD*nrb10&%tS9*;YMPKhK0#AjN{%=2E4ke)pW$z?+ z#4^RIvjPO5+;fl4rU?uPftFM$QQ~sOzrNvrxoOlkKO8~LWo0FfE7j;j=h{yCdC3aD%9HDVcR7xt{e_%soRR0vkXaYb(;f>+@=U-(NuSXKnj~)5}sR#FU zb9&GYJ1Cgs*zJaw!DTrbV@@W572sGG6JZ`iW6D5CV|%KJOQ`3#(!*v7C&F_CV<`?(6gRG>YR z`TA>vU3Fzr`&O~)Fqd}gKy{W`p%I`HpB+fWhB41n`DdA#s*v{tn(&Wfq`A&RkX79y zqXWeXk7skt654M?Tp22~5K0MO_W0dJ+fAI#;(4WMI_f=^DmrjZ3Q?hM4zDq`RPl0j zt5pE6ZFE#+jzXggmdjZ!3k|6qs&zw%`iP4ySuTmZX0fmk!zn|T;?4T{mRQIq+7sWj z3g@?dt{GQ+86w5siR@vR?%vP-+piE-D3HPVZeNQ~Q8Ab!-}S(gC}RL{?`{(Gri1mr zfeYS7LEHu*hW%xE6!+> zTUKfwLr`Y8d)=$d+~Jiau!k7$GyI8Wfrp2NZmbA|xX1@(9gR|=RXJ3kpX+E`>B^9K z*_e%euI{7Wm&q_CM*M>v>y9o)r%!gsuOFnZQ1=_8tRLXIFy4T)X&y;f|@;H;J| z(WE9~Dw^DKN7>v6UmnJ1?3_(X{cB=mt}V^SjrGeiW;m{qC7UjjQpNc#Pq3tPI@cPW zCzuuOv(fmL!V5hw=66}9jAz~0m|=wRK!7yeCrQOp)jdRK1oFe*cdg4Hf`?ewJMYyE zB|zFWZWpfDA4MX+>5oOCEd%C_hEfn?V8X4zIjN5i9z%6~-G{J0H>`z-8V_D4a(OyL z#bEJBaK@!(*^1!4zux!NC~t}F|3O2JAQU(M|G)AITpFY&cH6$i3IMq$QYj; z%PRJ?iL9feR~hRC0RPsy%kLGQnpt$>x|8DHata@%G!VJ9Du*+Pt+omm?oj)v(}~=g zE@Kr@BgohDfiV4(OP|1ycXq@)+LI6m4p4)KO#n^cVrY_8`(mFkd%qGZDU1Hmyse4B z!08Ic*ir1F0Ix%4*h1+`*;%?!N2HCB>2d-SP-ZnJCU4BWQ1C1u7_en~OdnBcA=Knx z*t}XoaAGDJqzO7>MPW4t{GAQcI-%P3*J1<9vlg#TeoAbY_}HA!u)AbmieJl?=@;Of z4O&|8D|PDk7f(Tc;WU2w+nH|sD_2ain-2S2AGaU5&Z?cG5C3y#HCZbx*BIxO;?gJg zFY;Ik$CvWWiYHc;6c~wU+WckJeg2!8(+2Xhu=DZzoy3pywhw%rSUPW4cj+jmv!@nH zP^qpRbNU^}L{5&;dlD3>H~N)oiV%91f7)nx>xnkr6skKGczbq+Nk8<{gyVODnkG&! zRCuKHGRVd*crM&X!SR>ILgmut6LlD(Kh1N#TlCc-Mh54K-h*L1#?AM!-{?f?_8lp6 zQSi0KTRd&{d-e=v&5*BVdY#^28hgYhWn%*cL#Y}GD6XnA3^83tefcAk*#jJ0|9yYJlj;u$f_TGhvlwF! zPV#)y%NI5Jsvf>|S7KNSv*dDXn=ifF{16efQ%pkwHH0lMz#FaI1**&qpWq+8f(TK_ zd#N#`Gg#$_&;$$EP-5u(6tWRQ3F|V_Ux_LK{|}C&C@J(!DiIfQ%?C4@mDKdInyp**x%+- zyEYTBloUky<#aX|<>H>_>KPJP(bVze+cZf-!}{&f?RHDg*6wOoH_qSi_N~g1>`yTj zJZfpuaO*?5`A&X_lx*(!NY%QZ{`RW%HK&;op--#Xjohn!b@M*=;=NB>lz1P{zHtUk zkha=Y$`^^5nQW%^c|J-h~STS!SsuZk}_e^WObaF_G54i?lNbg|oT;@A6+K3SR_ zNM#DR2%@YoM3mKeyROl8g|@`-= zYj+6Jp=b3PMnRdkxfhcz2BDbv-*Hx)*emVyFb3MK`3#z2spyjzRnMW`tjdtZTe2u3b<(Z2=yKzxJc!ZZ3@7107Z1pZ= z%15*sHx12wp@6%pd-=7u4AnjgOy|vOGH!N(uPaWrp2zEOwbV$SV0txe(Q;|>oH;I* z(WKf2%XQ-1?Bj-V-H6OI(!$dFQI&1J$*Cng==zczAHpwNnpUgteIkZOsmd`52L}xR@~gbN1!0w&(vJ)&{EelLpv8=sG#H6HSEw z5Ut^_76Q(k(6<9=A+U4Twzr9K^R)gyHKaN!psF6xz5YppCpK1sc;-KAkN^6~l!&O! zW{J(li81^$wI4ET!WhX8R&4FZz4SyYWW)f>x>kCAyp4HXUwx#5fLEFYQf9)!z zxbSSk%5f;=^Uf-68#+6sXnknx`r2=ydu5uPu)UV8P-VEe4QmE#D*e@)p`+m?wgCaN zU>+4!Id~vd!>Z(X>HUkg?}Kt^qXWN}^|@QL-VqO!=E>5b&3>|+{LJyYYNcx3yxH|V z7P02fW;*#BdYv!4qz|;bV9Mlh?`QoWxnH)@<6W6fCal{|ItWN(vjsuNJPkNDBXg&% zeFmHiPH|Nfkm6#w4>a5nCh%y}anGItWkRpvNX9LekG9^=_tB-h>PSa?aLg$;DXOuf zSB~%Ll5JLFEy~%n8lP8O&I2i(kS*@I-h-J~v*;@$rP49Oz;q4UQeJ>F=(3eHn<(|o zGCNK+e24$?c(GtlnAh41Yb*VHis`bdBZZ+OXNx_?)hRe5oHskmfCg*v)yxbWQOC9H}qpRiElbA$h>Kd2;;ES`2MFNNsbNka|DR2_vUE$P+>-^YR44v?o%_ zY`p^u^(=_9s)Q@1_Zlxmlm;6|Ajq;xD>BWV_~Fw~VHnWkvgK&F(1 zErV&zfVX0`H{H271JD5Fy)i_f59EmRhQDHrE>4pj&55ORHmTxUJxJBx6_DYAF+QcP zha*eKNby!|^H}!t;(ae8V4Aa3aruJ8{JX)k#hiMAH~aR6_+~koAoUCzajzAd$>61h zy1o&Yg=PNROlNl{ubS=roEO_`^|)pitFZ9PYf*3KUh^s{V!f-Wbt2EX|Z!9^N&P(6- z?Go%67qOKhnlzT#$eO(($yBQYpM~Bwemt`(vER2zE%KG8&^^=4-}*Nf7hyaY0a;I( z`tniQeWrZjbs5+F+C#=;VCPLL%uDgK&)=!$2+3g~w%YXj!XAXrcjvP3-(0px5Bw@< zV3;g0?9mln*^)sUU0Nj#JL`tWsY)kQ*VprC`eDc6_Tcs>JI@WXU{;@?aO8&6+T>Gr z(#XDzS8CPrI86QIYkw6ht7>-AG?O-}@?u6$Kg`q3`74ffdtR2~-qWObiB%+|^>n*M zfsggmA0`#@*LAynH0yHC#n_sthuz8{H+&oKalL;;iXg5prG3Tz=KYAv{cqbJhB8Ik zV-s47UGgQIOt$7AhzjSA_}nI|5zAj|Pi%(01r=@AR_W?B zoLhy^1YvJ*z=oph=&!GvszJZL(06(1Q`O2L;%exXyK5=oA=yy!y6F@i5~Zp8wwI$m z%&a;Sx&v>TaS^pOZ|iSWCLaT~X1F(cxa67BF20GaN%jXuitx|9g7U7IA?zZmdb;vN z&~dPd$-jc_uL1NwBS5zzlKC+|chhA7S8W%`*G&`fUu%l?_bnD&+%i?t>X(SLom)}P zZnEOJj-PwFA8wq9k^WPgIe~a2)Ut60|9-%eW3!+7z40vvR}~0B#BP#v`p|?t^Eyq2 zqcN-QjlrG!s}d2yK@E=>_N>7B3>PyVQ;7GCa7}GH#zcvPXfc759Al;SCG-7kRAp;T zX<1laiZ^SZ_tS_^sdDt>*3PR;voy4?in=S zIetbVv**fD7Y|(P<7{qQ@;1$?eVyfcRlNmw)%tONNa9wrjSn62ncFp`WkpcKf>L4q!zRd--n`UhDA=ON)uGLjJpsFkE~k6hX@r1(y7tAmP`&&%7>hJ z7WYDJOVaP;zY+?%NJ7DnzI{2*nR5B3A%f=ZuM-bZKgQ8|PC>hBJ}}QJ5O`AGr7Pq( zmFs92`IBmJy*B9n)q&{CdQtob>96;cb&{3jA4ZSM3Dn!|WZnMFZ)rFj92K%}nCYI2 zKwH|hE=#JRkBEj8q zmBdlZtTme}AtiaXmfV_9?Ei%(Sp1p5{jOggL+*RdwZlcF=Q$teH;hdI8yd|=C{zLt77G)JgU=K6kN7XG}ME-9ghjlu^VZ)~|4O)$k}U;F?xD}jV2sCO<&bvs$vUlY7ZLTm@6BC3|6)au%$j5MqB z;_{ai-Fyf9Avl{MPR>05>65&rMSi~6$^j%Y>uC!1Fo=hf;E6$KsW`B`4{V6zg}`+- zK7K5CqnF~yG}f}_eW=;zjkmu35Lx$YOr#Wsv5i;1cvjItoTt~~Y39qwpOdt)ZjXl; zP$y(yWJy+_SnPN*x|KZ+nYVq!er}DQ<&ldbnLwTb>*W;j)~@f+YSI3l?FV&C9*Tod zw)H+Ybm~P4%-$5%CLwJZFPOe*EIzip8#%er&@@q2_e4(ICFhPzrcHE9?EJjHL55J- z@T87;@oiejlPFf3)<xgp`2Tkjbiar0nP7i+g81U7_68D|1GIEazFDc*t#0 znIzs;)S1^lOl*Dmtzy_9M;laH*@dyU?TmVBRJdc=81v0hGBHIW(3K0ghrTZJLo|)H z!`G$fso!wx*(L04$JAqb+`_2C#8)-gBB%Mr_}@A7%iJIpPwV&yY(rZ)qnvh;G3Y(( z`1u=90*Frl;a}rxl0f_-Dw~d;Y9doIIgjr;l=wK=MDx&e>hGu%Y4=)pBBP1i2Snsm z^J|Z3R@!CMN~C>z8_H2odkj=FBzNz^+l$u=@fo`>{)KDqm*|lhuw2FI2y( z@=r9+!IerHmu{2kYYiXM27E7&(XwwF*4<3_BQo=&^05%r-JCd_B5HaY-wqF0?`c*A z*rxw;g8lvZ2%Qul>;Qt>1KQFtl5mXf{K9L;fr7Wia5)!1>2z1vWApu|R zKUi4TAiVpRr3q=Hp`jsY3HRl4m78ySU^TFGEr`Fbl+*y|!v;{lAlLPo-fPc;X<}^( zrla{blEA+NRemHjM5eShA7DaAutccz8{#rR9^BKcwTOZ>PoL;3WbhAo!PyIQNrn89%lHDkm$R=kvM)Jd~f4##+PQZ z?w>C{{^4EL2hqoA#$F7FtVIP&qzSpTs7Az??Nq+L%nHYr+_d1Wml^F|Pc(m`C! zO!kJLrq?Ucjv_g=QHXUev(plUm(x>9cm#yIEAeA$I zj`EVexZ2RHN|Ukag^pH&sm1+WZJwRGL(1e}c|C_qlfs5AbjgzT-?3a>=vX1xXOHRe z3DF%?V|x1R5^Zv&RN$NZ7h>#r1NAR3&qtDqt-P#!+cj(k`#uy6uzi&&K=Wl)T!}4c zZ!gbtwyW(4>{bXah@X4j#i2@X`eMP&_%7JgbC58;_;CV^@W6{r!)Znjb znH6<#oPjZc9qRLRBl#Y-W1%Ip;Y%LMTGs6;c~oZ@lnk0@|a$I|TCYOmHkIGA> zlg0MZqtb5X7fY2aCTlY$C3&)8GH`t-YP?Zgi@}feNAD2+g!w54o6x-|>0|rOO_=&h z+7FZ@_`etkA3?W{d~$fT5ri>D-MaDsM)bYi*?#)N4;L z_ft{-+PH+Ij96~4QFHmX|^b1k{;t--wD zk;#~oCa63VkWk{K%6cc7eyQ+s0f(Rk2fj;~R4aAGZI6VZ5BV~!A`^bvyduM)_ERx& zI>FFIjpK?BtZdx!H7vU#Vn0QRd))1rf9uckN?6v57e8^%G=8n$;cgyl{s`uNB^aWz z=UFt|CdniQz!L6_`;Fv-Iamx8_&Jh9q9&7sq<+&4Aa*SVHy~`o4Y1zu6aJ|Wzy)aJ zS`F$<{r1JGD#$W!+ix`*X3pl%Ec@-Dzk6IiHf~{0_l~<$u%?bgkGf67*^Cr~+ykZ~ zaZWu#YbPRmKe9BQqGE^s-k-DTTMBAEM5Q z6AdC~W;pQEIZEQ=-^Zk}e%{^-%gkC|O8?x}r5ZIEXc@>L_(uH<8G{Q$;l^lWvMc&dbFmfg+U zPtpVH9_<3xmU#Pb&@8&E7ENALCK_|Ndq-E8)tVKH?h`Z{7hmQmnU%17%4?)jYYgKZ zeqjFa?07@z?FHO1)59I@G!SVdj(eBTisW2?WvelH#_&L#Y{A4U_^K(~Lkj0x28{X7 zbVb!Z1QF!xGT(*Q?$zC+byzcO&$FFX%)DGxd&0tf#p{M%z;t7UBEd`Cr8eCAbUFw|!{z#i;lB~;72k#Gy zsY$L3T;Yh&U=(Kl9!uJ0=pe6%AJXC6mmq>AwZ(Oz_xnVfCdTM0)juuzW5i_t>?=oI{;g^Cyg=#x}%c9Jxtb+AnlhK(hC8Is5 z=V+0gVKEE`6QcQ2LlL)RWpQ!7Mq2?9wd`M8dSCLm!_zDi#7jMmc-EB=azBh|L;PQ& z-BYtDkVy-{aN3xv3{(Dp?7ev))bG1DK7A@Jk|Ik9ZOAUNWKFiRi^xvGScYUD>xVXk zWZ%oa3uEjgTV!eMW-M8G;_%YEP1_PSozbx9}i zlEKIm(dQ5ft1Zo zhU1Q%Bdv0sANw33V$T^44dgG067yKrXf3mkH9d+78+s zL<{pZR(Qa}1eEm=SLwQS_u&` z#8Z%PTp$qn&AnAhdb-FAMUgv3>6RYEDl~+>wrqpQSwzJx!1bS6?lZra^=sFI-r?ZDP>iMmz zcGg_xD>Op;r*o@B`T3bJM?Q01Ltl}7%eT5_8Bou)b|Da{SWr;F(xV2Zxt7f$F>3Yc zahN=#hSpf2F4g?=kTc-5zm#V;-8&*l6U_TaQad$KCQx)|rGr#-YI=PHwAwGT%Cf~gxina{r)K{-dDV+_|wsKymKC!uQ;qzyJIsU%n5Y#UXjw!L7 z0C#t96Iox#WA;1(h>#IQk2G(3LNnWh`G+d+3_Vw0voR-w1?A=C34uEgzori}hNOXl zqW!nA_v54GfVrs0P4}jh-KpAJlBT)Y%V4u+z`-dtVx^Di@diyysa9RInzxh~NR4N2vZ|h?P-rlo^fwK7;Wy0u zWi|Waod7pgu8H(kRdU$C6*S}w=n+3sRwX)GUS|cTbDcsIqyz?2a+JDw8JyN)a$O7R zvp3_7RrblyjuFYF(|#>Glh)mKxluq(fW{X&IRnq#5YSXIjw>BaayxWvV%B@EEj#Y5 zecZp4A%elGBy!b6#q`}NUYF<%<+*@3iAFn}SDfhfZd0*PH}iyS8c=2=4q_g{iW|HW zrRyS1P@*uFr;u9DY`4~7&|(oZ!F_C2y9}F3Wki<(D?xqXa9xO|IIk72r)34DlEq%2 z&#;wg`{T~NP>SO$XyZq!e8g|z_{!m z6TnBeI1G01&jdl$KRr}bthVc$IBvkpT)0iIf7H0EAb+x6e&IP0UQGS)1c z@~jml15oj8yR1_I8W<=~Pu7jrwOFCj2vf#I<5;VSYm~~x4kqh$)MeNaJ zo$P+m_DW`rPF?I`&in{#eqek#66i(aG#)w01~;1iaPfWWcOjh$oZ&{K z^fP#!UNfBK=i_SfI0?qRWJzs0aIEEjt83tn-{918i&z%HTt8gBj zw)q#V6N*TmI)>Yxp1=6_?w=}O0+Bq09}X>UC`o$8r6wyiX7zmAN49SB3W;*5`ZeD> z3s)_sTX|)jJZEZ5bU(Ua$MP@Ff8R0DSbe&*j(q~JLd?G%iTP4OW_o@Sa1Vdm9!c%f z{IVf8$+NzHpALb3%S!cn+4^*mmc>NZZ}8^ewV&4{p5LCHYUN!#BK*3g^j?K1x(WUD zW%@=i6-ba(2L~)I`bV2HH#0IcHRJ zD{3`rl3Pz(?~G&2ooh6mFfj3*yUX$h4Gy>#`#NnPadv6xy2-7y7zKN6MFfME`SsBm zYBe-&w`WF**QQYuQ)DudE2XQKu!aS=15wYW>D-OJ?~aEXPQ-{l-5Kh^=hoXwyBf9N z%{?EM%sEd-mZTm^}*1GR{aT9F_6G~ zuGIKenWB(|Id^HKSN?;+6|80M555R3`K+G8kQt_eWXuDfuqMI$M@A?+Dp*R}inw4A zY1L;*;_gG(WMeMZ-b}=1;Yqc#<$MW!<7|WUs!%c)Q`8T#Mm>;0*a!Z@tc~kSzVT3DyOrUeHJdn<#VTSL-sjJXWUASTx${8kEO{XWHUB&8xX`p3USVHF#v+5_yIj zVAYJJXt*A~5(921p{YYnHy8+s_w4?STk^fXzaLgKkg}W0cJ!`4_?;vTGGude^8~%? z!WzapJ}T<{BZ#u~{_lQ($Yij<6!`J|w$s@~bNwZ%>`mklWf#JquObl$ghfxz)?C>< z2nba694#&7;~<{Zglrr&_ww?x%i7GX_`fsMF-TanR=MkDzAy>In=tT=YZ5eN0L@b9 zJhm5I=1OE9p|gty;X`igv;8Hu4i4%_2w{RS03$3cEZDEKfXHt824bms@E`DRd@ccm zLch}w;5)xQ-iaC@o{fg_W-t1L)EOSSphzdg%k&E^V{-wp(kLHP^1_uC>4t*X#G)b` zTVAo7YoVL1p=8{pL%7!qTCjW*TCC7NeaQ@ok+a2kH?WkH-mI#BdhHy!AGp^Q0@A8T zH^mF`6x~tVHdfL0JQ?jX1p*m0)9}cgq^iM~RqvEPqm+)3Dl~R|1P`Aq$Fb?Ut!Wh;z*t`-wV4at z)?EN7vBSiG9^pGJnsO%kfwh^{tK>lqVjhm|cb)QZMC0fTKqDVXO(>LgR)cv31WO}t z{Y$UQxR(t9>~e2RT3hS+6v=xVMjq~-)9vhw7_;Mv3W`M;0hehVJ|DXFHd zwHq1|hv7mcUhhuhvPQ$A2M2cLPSqtUXmRn9pLp^MvyFjvSR};@qfBz`N)_fGnIMi+ z^y*9sqdo(==ss!`O$&qHvP$GgU@vCx(Sg>TcwiD^?`msnm555otrqTPoz*2eG)Py_ z&H7i~Jy27TMogVpZ@_th_4s@j1RJlI&?Eg9_hn<2BqmRY@nj`gX|@v$ zU{QK1O48JFNo%{O+~EHn)MHuOW@YsT3CsuqxPEdH585-o zTI6GHu0~*!vKL=fc20`wYaxtv0+&N#_}z@aS`*=&(uCP&Di0Qc zhN$JXy}1b>6>ZWJ0kyJRD!566uPCll!AO*^P)J%VtQJKhS=2uQvpdcxCN`@R+$Sx5 zKRHG&JfXvo78O=#-K5$gU0-La_jvyBe-|I|VnustIn=(fP(hqd`(bbMhYmZk>bwLB&ZXP}&eA>sGin!ItrERAs zGgolFTZD$+F-z%wVrnTi!l0qJV#Ek*a9UkDeJtmJn28i>T$Dn-zK$FQ;rb2^6<+r4 zX766}qJudruI7C*Ir zYai3S(Vuj=VTLZ?Y+@^KB_Al{l6N%(qy<>IG(Ee$K2Nu5wQ~n&91yxA0H{7AgZL>w zF?%cJ^?|U|s=q-71ky&v9eT{#pg+eR_C!bE;Spf%H#5Qs{ZiTgADaBv$3Xg!#l;(~ zo!aE8Cx9`TA_D3pdLJX_x9Wd1{^$?j9P~9jjW-wnYHI9%!|Va(nJgEs$fv|5 zKM`}sQR|O;Wvg4XX}5_vFMuST2|UV!iw?pEs$YQ;(WCY-Zx}4Q_zS)GkAeFqa+2By z7=6BU0WeDgmIAD=4;5k>8`|zozola{ki~L^T*iyAGOCqOwiZ|*-**d2>4dsCB{(8- z8j;d4aIxIW*j4*L{Y_TKBA*9Cd1U1L_#71mZ++Wgc^^y*>%Qpy&B|Y?mL^FtXj*dU7Y?3kJV)n0uC!2ARyg9?Pwm?5=C{ZR~V zWtqI9LGqLn>uoCuCAU)G#`$I*V=N74tWGw{S~Q%pbp^J#q!mh&rxa5DrS&MKo$G%6T+Au{CsNviCy{2rlHzkqYrMzlQB zo{h_Bs_qCKE#>P<#Zn zHuBRa;T3~ydcpR0*E7HOSaQgRDnH9)4xrxDde2l?iJcU`U9D$Z+B>sKJH*dBT&b&P z8a@>NEQY7vFH+xcqR{WqTy6m%6pv;#|bnah_hWaARm=wSG;;npWjW zoWBfx)1CXzQG#Bgh49O{je-UZ8XxDirljnTxjkLY8kC=>i@V8V7sIKq@a!T^$LHPi z)-)#HY>wQ5Z}Un5trth@nsZ+QVQvC$D4^+n^d#9;jMin>tynxUZJ%o=`JjpRx})1t zgwOS3uXTMzx4sD)OlW*8Qfs(u7Dalj%cgn0lp!GIlHe37rF(K9yTH+P$cuN}?jNs2 z3}i7B*bVb@ur(rF`U;d-NW%K^-iX?>Ko*;4JUD@+l8nJyHqB$J$7GagzD8vo6`XiP zzS87n#aofqO13R>YI^!~W!Qpp_uO2#b!y-sTY2Z0eN<{fJ9bI1fKM(6hpG7e$7_`gst8dijUjLlcbG_{T3#o=Pxa)&#{ru?WJ0=sW5$vP9 z&L_?kow0f=rT?by+k>#l>3pNFRIukU21ahNs5zhOkG1P*p6Z&`o2(T|>AO518sleK zwaCkj0gEOJBu3;7pNZe$3Hh(ev9!0pC*)Wn%)b710!SwP`}#DUk3qEe5lK%rcJ=|A z2HK&MuFKIw<*c7z7-R#z$98&ZoZzK*3P%hc6QEC`&K`Xa7z?Z?N0$Xn=e}Xs@l2&{ zz;VdUe5bd!x4%DT<|yPSp>YA1t9;vRUxADi1|Mu-U`6TgRWBA9HJp9qbo(+MV+D?P z?=`i05diUlXhN05@f&+l+KCLT+F)Y`L|KCnk+4I}%*?>O)(0HpGm60T=yd;emwi9T z$p=ZBA@{9Wnaycph&drG^r>#ZzDE}zvisR0OTc&V1Raw=p3~CiC^_u)++IEZoY)QG z2XUznVRl=CnR^s}i4Yo%^p0T3V1laUA0Ij+Vm-!NNiL_@TDWxz#oytS({hUQr`5zv zYN&aNhPveZ@RADTIJ&S8|Jv~S@P(dTADU;UP-?KeZPQ*fWS}+GGAm6yl4_*ztQ;*J zU1Gvu!%@MvEjZI~w+bvGumG#mJ=%Ap*;PF=+Pt!Y0I}smFd^)<_&XBR(U0N& zLh;Ti1?&&wed8yswjv&Jj^A53-N%rvbp!6zU~*#F!<(WyYN2o8>tGF*sb*EzRcdW9 zxaWx*11ddatnUe`{#8M5-kB9J=0@cSBE87e_V%m1*U)c94;kUqbyDY8mtLd?-lWTq z%kROQSia0+^7Fwbx8ef5crD?@v%~3G5^1kdio@n@h6Op_^{nGgQhl*Ce?3>V?9SV5 zg3YV=TgJ&odc;*LT;>SNAq?UPHOhYl{q`~QO2#qP^D$bVFxRG;`MEmDs}m-aDJ=>I zuMS=_a+&s7kYu(%JcF&_FFhzNHzXr++UiH7X+puIf3~;D{kVJcF#?IU#&_w#GXDWO zYLS9cCB0Ko3pJa3(4TEgRDRt@)b*+ep(Ba6oV)ASj>1e32957=Da-_j*-#o_nQnt|3U5(OGdF8!XaEbN7b$kA1Qy$yJgl&ft{6<;bBk;)5%{` z&EoMHTb8w3S>eGJg2_lAW4eE%50cuw+EZO!UFFDf>Uk&ky`KV|&l6_9$}YX7-O7-| z_U?e(S;Z~@Sy4|moRnWdYm}8+r1L+D9YQu|9wJ^EURe2FU#3vh(`1`p90cW|k!cJS zP*e+Ej55&TnOz$J*L;I)KM$L%--lm0f5C;f(DGz0mwn=A&DAW8pQ`F1BFpT?--`RU z#0AEkUei^7WSV<>0^WKWbkVXqP!WX864wt@3SHK`Sb|?u={jXUb%(_WjluBFCj+n1 z-V+GA)ENuL;)F)sO2y#x(2U`kP)Y46;2eQQV&VkobbfbM!c>8z0mjD6qHEn) zirs!$u+TRa%eU@{vw1QU(9AvYe14&^a*eb3WuOmI7ED9~=*MVsRBUW$;?cW?AmDNI zaI1Ir8(0zEXg33wV)~j3O_24oDtQ?Uu2oA^f(qM+K5g!Waq_8~ff9SQx!%jzViVv- zsi(6f%&zw6hwoqK06JYBML}f)`GiQweN2$3*-(K>`^$F{@B&_|P4Z-XIaLP)2Oo{yLw+_nzPEI@0f43!2DN*z+b*yr{k!)^s#0DJgIeBwY)(1Be+p3OB$8^O ze!J;uW5e9727BZWBlluL2E$Ei&RzQ>gDrvh7>pktBl*!j>!bj0*m={bt-rj1U;QVj z$T>%wE&!HP^IFqC;L+;Rr_{-GGP&h@$_P_g-MaU$r*$X?EGc#5nkqko$vwXldpkC#qIAhk+aKnz z8B^dfu0Io>J4T`ME8nwex)e-Mr*1MN7mxV&wo|L z9jO6x!w3uE>5Ht8F;Oc5Xs4vM*n=$1s|*%i4W|an+m)~tBmUeHO@iSgBIa1}EI;CS zhn&70vX}}_L$D(N&;#|_85mE+Z{NNxsXmmGpo58{j#V*I76vKCAp)KsWw|cjYd@}C_5I|O8l`Qp*D6fi)3 z2rGmrixFInY$G$XDIh&VfR2IZIskYSa4x)6RaKWRLps4|d62e!oGvK@_#xl|z%yDb zn=74e+ns5%D)|`(cpvLisqt|@iv1xU)(B7IJqOTMb(@ql0UkGp23ki~JiO_XLMH|; zYn}`bYrA{o42bX(_)!i&n?mv4K$ZCmETD4cWMyT6K5@icY-&#Ff2q=@n9G;o$s#ds zz%{$=CtffmIx3+AslgMMZ==<2gE$h7s~yu;HF_OTg####y!H6c>s1jEf(v@1z0K)U zb#*TR5%jAZ_YZjlfMa=z3mojMtP}yXJ1m6|SGxeqAQRoGVVdV1ba$Bf_$J4m zM#a&@dJIB+86aK2i}!_Lch=qEKR9Eo3~-`VB5RpSyU*0Yn1j!rz<+A;$MaL0n-x_o z3uE2pD?7Ee<@MMhpReryZJA1Rv#VAqR@uOuw;_cIpQt~66wytH^B9nj!F+k+EX>`5jv81SnU@jWim7^V8sfdr00MJSmbyD5$WQQI7D7AB z&;qQgMS6RNGBTcS!!NS$6@Hcn9OwdoxaC&juq}@IHX|Qi1)qmu#VyKjm4<9I+ih)_ zuZUyEtP13e+R=9%dKz?SX>ZX)&^UEJA(&rv(h={O@0ZJkM31SvlxW#a@ zFI0(mW3E&s_^@P;+CCgGbg1d0nQV~DWVblV+Q}##PBgqe25c6ACNjmYdDDPPjLzRg z0%fvGBr)QkwGsr~5u9j`V&HM(66}L@2}6MD zH|M1vN139T#zGHPRUN^6bUl9iQ_6L`oft9;-ZEXBFV$qNf%WUZ&79hv)^0;;#ee%o zMBoSEcgtnBnUhp(Zbf_`Wf~eBx`eSdj5$vKR$4QK|Bcv<+;Ir?F~X_Eig zyDJ^_abu*WKkfg5;CrtntbnvaQLJU0)700!jp6Ba!Ku$H#_mhw$m<P0wVfq;zOKGsoyU#_h|XS4Cnl~7iVv6n|6XYk`WN};OYt=3-q#VfYS zS9Ul7(D<`;;0_KXJ&2(0_D*A*jxEAVn4MM}uI=M!Zie-Sn$gnJo^>a;@=oBa2-7$3(e`9HERFjP&ffV51acJg)SFa5kfibG zZ$EIejT3NE2|EIr1l@?epv!>x1aSlI3~&qquJ&Obugh8hSqQR1Xp!y=z+ulyLQq8t z;7NSa`xt5*k8|Mwl6?g&3{KYFA$*7y4f@VO_BkkjUbMmo37(RJoxM;iTS-*JCEwXA z9nR70kx_}ky5v+YFI|G{=dq$?x=?F%RK))4se@+at4*j0fP-P_8|d7?63TZKEH4Ch zIcmGLbvf#}?R8~d$vpw-B$x+hH7b0PiG@nfWkR10vo}ENGH-(8#ct*59beVjpW=}Q zh(O?F({7@7i?@GbI!4E|+@vcgu@ow~e&zQd%1ngUQjtQWa|_sQcMF_%+8yiEQYGY*$I%o8tLpszp>T4G6wk!0U?xLJv;7ljT z>53zq!2#}IVzjW2R!Ds)lpF?%VBk9d!+Y*#ubK(n0*6tNx44h!gEV2&5^JGl&wn-n zyP!zF;&=m%4lW~~mWcw?T62qU($P^h!MXaCu9`scOai7JSPdXrlvGsuqD#a~XK_N} zEdBwx$nbGw!!%7WOOHbvYzm5T-e{m27Yo%m3&DY5qF}q_5j)VKe z5ty8hP-~}urRA2Qp7F|7eXh4mw@~+)Hb*H>YR_#N98%{~K7jdpi~CMeJvv^`zbqJ- zm}-Su^ONw{L&e~lARj0RPj6)6Ugzo|8%gW3+vVfE8<5mqJNYm~XL$4}g5et58Ma{k z{6xLTyb20fdV>vpk71nf#^=WIQ=3;Ip6=jy$}4^S>%FK>aROi`dTh=R%2i}`cUBT} zcZL)%uQ<+ZbH~5KsuPc-k1A>l536b#r_?X239m7O^SdA12lD*fQN%FC$L%!a$;5)! zs!hM4OVI!Znd8pttmLJXq=O<9xjO-R`bAI|U^jUt6u|&!$POW)N5>$I3Da(+h+vpSn1rEPcFbW5u_Z_1~zkQYA>W$19fRZUE2#6%XT zz=qq9r6*;w?$Uf{ZAgTx6op51Z^Z0cdu=4LTNYmFvCC{!HETdkTTsBnoNY19>1Ozm zFhu*;>4%otO|=6xBk1$F6V_>wq{sY^zp7##3jA%PD+IB;?=^@aSVB8nVc9@DrB110 zZ!po?wZZIo%GpG{@KK%ypw}34DIuK%pvgIe4%XC_sWBAoyv1Z~W$XL*)O?!8SOvND z@;WJ`lh9byS?xTm35SD^c8>W~(Qj5)THgUG*1dCo4n|s!l-^ZH8ewWRUVcM>58;Y? ztu$y+zSB0U1ZEnRDN3LDzCCNPE@(jn?cCQ6zeZ^A5;_9WbxB3%RaUw$7HrmUsdo6M z`=lQ|%D*SP7KYm`f40GHx^wp}E-rJv9Jg!hO>!4>fd~2w=p)J!(9gFC0+8wCN-^wS z)6(7H?n?xECQz3me#j$*>tp%2-LyT{ZxGMZc*qQB!Ew;@{VwVM^nWze5d+0Gqlr8% zAPLya)dC8FK|>^8U?$)2ktVd{g7O4?eKFCUR(x^JD-%$r!@E9&1LO@|22BA#p3al(zz~2X zxTOiQIt(B*Bi!D4S{ei7xy+3x!X$B26C})Jfh&r)InhJv{>UJcvWnY9B2MLQuJ+Fz zM>M4YC>lb*6@h)JV!s5#@o8JQCK!nrf$Y=oKV-Y6&W?Wp>BZU6%%#Yw76-d61z7(j z>xe*Ad+aP;uhP=`teMNdqH!!Nn|ZYL=M$PH%*F?@XIQHRnYlY``WFQX&EpE`bhS!z zzK}lXI@U-L*8f$9m95~z!pKRUE$PkV_0wnDSLcp$gJro!SQcdwprN<77beChQbRU} zWcIq9M{_qp64AG5r}=iVL<*I?J;Pr9y$j~udNjRmT==i&4xBIq9j_0!Yqj1$D!NjHa)f-Y+CTJRMcx-A~2qC1|; zeS-ydy{yOmAJ@L(A>5So$A%#Xub^Ln9x1*oBo_)h=-MgQ;pQQ5ahV40PSiet*Sm~uHFYCZ(N1$+$jq7t2} z0m!UI4pXn1XY{D)=|a->T}XU^1n_j>1a1@1IRu8e$iD3$ptLleaR;iDKu^EhcA($Y z2k`!zWu}?GQn3;Rz1sqw8c_lc`{cgIN&OXSA&;fbVATB5emdnVGl<7VbTFcoQMQQI zlgp-{Ak!d%aH)nX($Uz^aW5>gae!7SS+U2Br(OP46dJ^RE{Nhhl<`H~tH8kqJ!^or zzU72UnKwwMZok-RX(t@br@Q7qXlZYkWVFKwGBDBsfKJ)lM34oe9|^FhImS;I;OFG? zheyhEs@XZ#M-^R+?ReyeOuprO?$m95;JsxF9~si^kYZr{nPg)$HHnBLSznTl7L>9m zH*{$3uUr8M_!Yp#0SYe-x}{Wwb848}tY8W!Ze6a5-m$jcja{zSUwdrRy(nj7hDu@T z;}>^->4#%3Fdl)nKAm~ejiE3e(vllABhD44igO){5;j`87R#GLJeqrR)AG^pH5Sw+-I8FHvf$WS8h{*AT_oXCLKx4Eh?v0<#;;AR5Oqw?*_P^>tv3KWzDkIc zDpZ^iC5uUn95k#?Jp|qjc5TR%QdtAbC#+Oz6~P=6E4MxF3W>AC#cY$0Reo|Ytfizyg;|^A5d-Ub1+@` zrO}>CRMCLZ_WMH#KJYSx6HU<8|F{lG-!DmkdqZjRf9?HhJ*f6gy`|G>!SYM6{$ES8 z@ZsmbTilfqfN!->S62tbw!@!!lZggJ!xK#3!W$kQo~vKQ!AS%$fB<)+OA3R-;a=0X z(M88OZGPp%#|5NoZWeekk81(0=>*kl(1AyYQz6c2ePm)8@IKyA5fN&m-uNcW0xY1i z$7yTgwSxdd^@_Xu2Cky&4ldANHJByw=T8u=gH8$wzEB}Y!@18ciTzrcUE5oRHqL0qAlg6iJ>i-_t#&F!1g=?W zu)kY?w{gDc$Y;ntgn^&rq(&+5@l#>SE$0G}5{#y1>P5G$&APhdzzc^I;^`{XFqY$L z=LCF|hbM*2LA02sF{cNe4&?@1#abMwOZH*Uc9R*`>JC7uf_@4Es$=rk(0r9HtIG>C zU@C!4Of;Ydf#M%fhYd49E_NLC7`}1OJ~1P+QqvEPnxB012dxckl7>K5Yu>r;CDe5=^e^#mnCs&>QbF*hxbRl=hAL z^R4%h$j^$=Jz749@dhCfA`s7ldR2Vg`1eJPSb;PvJEP+&6e3)s{>bxXX|AXgKdzEQ zJ?pR1XK2Xe$Ia;MhJb{&qu~U%`K}lcgx!cANmLImBoDVw9Q~$bk4LSr|)>0z=Uph=qdZUQ#ID}aA4bD zs3?U-b%`9DKYZaDU`Z~Amzl%}q?z0GOByB_-CX==+OKD}m}HHd;>v$6tJKtxSUuNm zf|Fd7$wMg!r6S(b2Uo12qCT7dk&zL=1T7~6G;2JDM+-ZOrz1WbieWmd7h(*7!2ffo+W(_xDC2WL zOC{NRCk7EaM1w@Poz^B-hCy(A#;6UWN06g^cy{ZF!K*TmA~*CvcFyI!APGZ%Q7_pD%zi} z7blRtj^%1Nb(YuERK4kls?xv!3JY8>Po0ARxY5Y$3dr};$-0hQv`%MbSFs0NZ{wqV zy@M!G%Mnjpu%=H{tE!_d;P3;pyZ@di0rPZSUo^8c`-df<5#wf^&+ARl;|G$EM z|L5ftJOoH{z>eRy1*kn}AK?i~w1B4%K6YC`r6+d0W&*M9TM=s|1=po1&3}9WpPT@y zi9qIF6Bb(ge$bSq{UAmmR5|=Qx&)H<6)?#ZIP(X^5C;Nuz(6|`n?HYcD-G2R`ZHPK zk?I}|u`((&t`m44KqdqFL@P^&<#-{*0cz2*F8FOK0EJ>K?)xBLs;nND<_BG~ zArb`ImoU*S^vX{575#)0!^hSU%_qVaapj?Fvx3X%nUP(nAOvq8D$J(YiApsR9&Qjl zNf}#_cv;5*Wg0HQ&=w8nu)T#^Ot$cDXr2AsESHThLfAiJHIkS^@w|;g)#OS&QW=O? zIYl?EZPmDPsz91S@sq-?tgd@X8<`Aoimd{7+=`J8-MXa1nU`h9FfUGYvbH#rW0Gdc zvWob=vnFC(y5YeV$=<51cqHS=DemE=J9M%hQbZ z$vI(T=SR9x1LRpgg7vz=bV_qRO@7FQ`o~X>PRR9w+NLcca{Wige=AoOWGDZG&)=J| zNXhU?pE;Tm{&(-&#&hhXH58vmKl2AJLIH(TbPSvsC(o0XGb!+L9`We6!n|dG8b=02 zO_Dz>xo+H@`SjEhgNHHBE=-}gK0Wi99akSyJ}BGkXW&FXbhzbLeO#tNNmBdSAc>SV zzrK6=@2BvlfHj5$of75Zl_IDG7LsI>iDSt^$q1cZT zE$=(!=Ivc(daLb~MONDz?NQrcnzwwsX8P{Ne_V2H@g|Sc@BjZFgy5i=#eXb2GQgJs z>8eM7ULjJ(=nkUsg+rttA1GvCs8eh~9xC~_=>(}52&5PE$N3+~$bnP^8m&cqzo4>` zL+}ml~EhWwS#I6fC&?@HbNVxU#9$D zQp~+kV6w(XP)Su=Wn!Bc*kQ%l0#nLj9{uVKxcL=dUPS}3)jKf8 z_&*$LxJaw-Z;d<;`{NhMS!VJ?j^DgAX=zccMVV)bHKZL;(owVBPDXYQaxMLp9yg$5 z-nG1+XcAN`>-)aPuR{-Ge7!oSxBkm`1(H(bM9eEKZVvj+YWV)rlFvVhmCLo{i(&6F+7bX#&r{(aBd5@9-060pVuCN^dnQG0hNhMJ zwhhfW_c_<(OgygcERi-1-r+wb$gK!7pj-`8c@gOomvp1kZ_6iCoLv zhYrY#sZ#(zrVmWXMp00B2&P*!velE{4&z6Ep)vBgF7z5r5Z}?53j83OL*IxWO%~6N z{VdzB%VRVbHU+?#iqxNhe0^^F0t?;x;)o^!txOLcFAM4DsnoP~JF(=ocXkg)!W*+1 z{rGGPvSTm7;6whPf)RWj`uppCAisF!aJc8NVf3(N#e(#J>Bvf8@>I3>nK=VBffs z4z$9zH%O3_K{cePGfi2Z?#T@Zu*>Qb>3P2jUpWGD%-UPhuVqCl(UrV|)Vl4gH7@St zCbu5*fXo>+C;|h1&*JbGisc<&*n7KwO36u^0&QrY;EtEZ05G;3}|_U z{&4-+fYO~+aj#V1N(iWY1r!)U4K(~7<-6L3L=$Ht8r7X9fG)7YtOe zK3#-OD#_<=LO(u`ywO7(=WiEGY-vodjrtM%9rQuVcel?s+j$>znMXLcl4yFg2lPX; z7#r>R0fJVD#6Fh&1{nek-ZRnO_&Cv@BpF(XGFHc;?7K?p(IPr$cDeti(H1X?^zr+| z1IC~c2YjFhg<-GuGp&}3K*m7htN$q(gBcqqA5YQ*P+2?~1kC-zXZ#qXX&?|Ved)iA zaq`>e#xo)SIzf=Je=Fzz{W6C6>#z`O^^oI%JB0WmK{o4P6Hx2W=@gn3zS(Dd7cRQd z>B>oQI6cjw@EC^kU6!u~zBG0p5-_KSU2l1smOcx_N5*e8jvEiw0mPpORQxFK({fan zp&e~u%Iw~P;Ogvz`qkfrjkgLF`nS<`-#Id%H_nX_)^d`<;3t{F9oRw!J) z%cwl|qdGUhe$EPZG45tg+FVX|MnV>`qRxY*Yb`IQIIHD*b2ZB*S5-z!Qx!L#@Nl;I zO1ZdA@TX?}8P5XF$I_n5@aTM%>l&eIQX-LFWZzKt=aq`{i;t{#38Ti{6;szq;0*8& z4T8l5atYS?4n3oK-ssP4SoYv5-JX*AQqN{$MZE{ld069S7H7%)$@RLaC_MZZe;T_* zw&LE}Zh~b#P{*yE(~f96rDKkvBV76BHBrq(vNI1KA|mB{nfmWqU(WK$uh;FEhT7&h z7@@3flbYsP}p1Gx!@ul|NFFiKjx^R&2OFU=$+%1;oUu!_4vc9RAm zbcmH(Khp!CJlYO=A4Ov8$aC^Iu1tHe`XYbWbu+hDKHgf&uatMYyxH7SPTBp_{?4zH zsFDcnSiDN#+-Pc>?{60HY~<6)(pq^PJ|FCoj5b<7O@4+>ap|vSalu@^SsXdlJNN2w z*=D1OYYGN+4QJw;`s>i58_{t#2q_N+J|~u$Z(~1`-6GACy1aOCHm=UPpsMr0)PsJ$ zxZ90$h8e)&{f|Az!0byfd3=rS!SeqffF&UC(K`!csHqx4!Dn1iDr2iVH`717+|^Zl zId-8%&lu>Dx*s9~IE)DLdHf(;{`XjHzjez0D>V+7cTxRfCqRP(-Inl7#6Qsn(E4Cr zczcvktGzZ8wbA#FNFIb0DT5y!@m*ABoE>IBgAh;p|I09b28BE*4kc9C9_+`Ny9i!J zYb1uBO1ghlSHT{Y5?J1s>6`LZ+{>-Yu^t4~=N-R^{&v+m#n7Nfb2M=VhSAYcI8@Nw zg%vbnMz&rDjf-UOyy0my>bClQ*yjk5y)8gGyTB~nF}3rL!HE;!ryTMIg4*%0#-K@Y zuEq-;@$pex&#L`1C%x}gRP;ShVrJDIB_G!F@lV7!X<{7d?j)a`HSGwf3i2M)e<-Yo zn39^7c({|@;fED4ADXM8NCqCu!7D{T{|JBkP$qB&rz}8VC1YVnuOu12n}K%8e-iCy zYrfRBHk{BQogX0(r8Q)E0~8wNZF%2N<=lBc;-76qH1w`^-5fA)Z7=UIU>Zmriz@%T zi7VnmVs_SMw1)d=xgpi1P0LO;>BXyoWr4^LcJfncCP~bG1N41bc7fvoy7wYaJcwg0 zzG2HyDaSo}nP;)WH<#TxW^yBP$hZCAaC3=VC7xVZuM*j-(GYVR`BCS!{C!e}w8|t^ z0(EMRsF2)ffOMK8n;Y4g{9gDu)yqzM>*J#_38^Sb(}XU+IA}o*54A-B*)LInC(aC+ z`DHM~WJOC?B9V{X1sRH$e&I{&?X1;qbgUr2ZbGxwe4rqD(?4<)Dnf^v^v*7*W z$ocopk54?vk#{xq@;kG|24)-WsfXZGjRf4Zo93sqw)vaK>4sYDZ^+zozhWbPaD=5hq9uL;M4+0nsYTdxBGaOx6X8vso^&h)`ijRC+)_cg6K9p%7=TdP;(eCut zoEEky0dW=m{lvdl<>x?PsKFE8?0)=p}aPx9+O|rMWRe{G#|vs<&spL-CC5!d(HUdtNo=|=&;9C20aOc zA@yX2%D|Pq;8wx~{H@|SG-1{4v9uO^eL_EV49}k8p3rGErrKcH&+`Hjg8du55V`-- zI=_AqJj4L_HU1Ak+y7+l|LQJlNq9E^pHhzKyoy$4)IF}k@Yv@^r`G_brc%k@ALC9^ zir|a!R?jX{Uc_iCyU5(gpZL?ZsGD z4CK$JW;o4qwehxB2kY9CZdK-n({T%zo1SC`lrp``tGL#dws)#bnvT)&RCqpVbib&c zT{lyBO-=e<*Ir^=aIzD5h1->~vKUpTw&JV!K%<+6-qjBKXVN3y6|U|s>v>Nw>Mp;G zGBxUG%^=q_v#DFH?M=Tzt@(4-L3tHV&bod@m)iQ1(OuaBo#!Uw1WVW&gzT#N9*IP5 zSCmE!a?T1R3Zy>EsnzTU9CEPY{vdUl4Kd3BnQJkIyXUP!ZmKXo{`j$n85O3fbeuT0 zaYRV1xs>eU#uyCc?Ogo)orKA(H$ef6A%#KO(*HYb>u(>HwX77yB{y|cg7$o??*VZ4EKY?im5Qs=p6zqDVG~y~~ zkO=wCGZ9~6YjpTu<^NM-;{UA+0{&|F-p4Cf&^dY)rNzZg!=zM0dq1wH@Y`Z*0=2Wd zmzKEqB+1?xPqfD3Tdjf`X12s0FAw_<%kfmbSwHCMCk0|QQ%T-#hy|MDD(qfA`G97J zG~>}>NsN4~z~)+KW9$i2k2Ty3ss84>sTSe<)J;$`>*6jZbVp>lda49Zo_zp$p_U`E zy--us|NNWV`T##4p!%SM7^JmVa-|qZ!)=JR^n;qV!Kl4TUNcZ>^$}16uw9uQ^KBW> z-rXgc@eA@*<9Qy|mAuZ_l|H4Pg-6~YOxr+<){=>CZEH7ddMby0C7Z=9fg9y3dpAyJ z8%cdm&wDE%H&mnqq?^aJ)W8tNiJ*UJ?_vKN1xsKnlD`xKQyP%h< z`V~e3F$ASeua1g%)BVp*H<92p)I#h0Q6-EX1h*`#MN`k_kK8IPfJ*Wi7FSo0~ zrF>aN_++;~ma$;+SjhW_I*ZbCp&08stXsU+m!k=ZX9Gz7L4V#5S$>LV`Q{dWSjN_v z51yCB=aL)(^)9}X-tYXidTNB}Vc;d3IFg(et+Vm1!r{->GeM>Qm-3)*_io|o6_PgZ zcuNh?YgxiQc?yoUpo+DnL3xCmg@c6^eOlL+xnOii)I7$r$%5!gTYGyuSUj-nbi1Qh z4F6N*bLNC{*|B`(=5$gq_oqs`Fun<->N%z9Eqy=!NjM+v-RwvZ-dQ}35us-f6D{=R z<2^AH`IDU9KmzpHD*l<0mT<~lfzAAStgspFPa?H@y$`yjafS%*E(NKC7SRB=k3JR- zj`{29B>0!|`*!aLpt?kuH*aqeZ&tO8OGamvlyAQ&OlhB5ocdqvy?G#%ecLy#RNADH zRARa+ghXV>-j%4VrAUOVQ;elT_O6tYt;jl-BBU(E7+Xk%>`nHuW#7p*7~6ZCGo$6c z@Avs#&;2~V=lSRT@9Hw=d4AX9dmP92_BNNC~QBv+F01(i6ZrOnIW;s@Q zdD-z+jl{Jb$22OWL-uIA#rq}+c3vOkCk2#f#Vn3kq&uj{gaq_wBU&33xmkyIJX_i! zHLJE{9((=##@>vcqFFOt8=ejH1qRm66VA#qTX^F~c1<;&Sja5Batf zk>rm~AKUgS2njab%JQo!EP`tW#OkvnoFCVd^HYzSFFDO9!LBP4U@|-a-ABlln{<{8 zwmN~JqVQO!dH$?sVVHFK_pco+F^9jaoW&RY!FKTU?C^o~p|96-zHYy0E?bG;f{@xq z9}lp7sjyG7i|b&;zCaCH^r;tEINDJ-z5C;%v;vd9@K~444ZK?dZnz9dgc%sOxr`P0 zC+rygxY+--1I)1Ebg77*49Bv(`J+V5}390>4?|*^qDk=GxHPE_ez7LAG$7#78GMVhQp$w zf}?@8eFgy{0;|HpBMzvz0)%Dt|^_2&!iM+dmd z@yR}I){Q#Jz47qTJb!fG{zW3;uhgUNPss3hM3L*gsJ)^E_UZG_|MZ zYR;b`qim&`Uh!Tmb=k(`=aNG5@hzD2Bk$X|9V^GlrY+Zo>t5_g9?e=tSlx_GKq2iwBf!uj7?^1b$lT*^DL+;?#E^zdO zV3YcQ;a6|Ts$q|NnN#SkSPmc&f^=2_S*h7GUvW&DJXXn~R$VH<^o*en>i}F1wY5(V zGqSBLEzw0c?d8+&Qi8vyOUrCmB!*6T@u=aS8E*Ft=;y7GF*7kGKaWT_&$8X1ab1ky zw2&Jqx6$9@%_i}vE0C)e+3p zvlr)3HoZ70S=#n$2=+=sd!*YkR2NUAtvWOe^HMO==4`s^5C90TwtY5z9tx&f1+8Y) z;V$SV95cc`FE`u$;oUnkhO-|G&dP(swti9(jN+p0oE({JWH9x><}Qe?uF9=>Wc~ET9{&q(larH6z1KXmRPyJ_8%oJFS#=2F zwX1DJ)92FBf`|R`oChDI-kOeXHsz0$bMKfEBD>qTcsg6kXFNn-fMZm6Y$#3R6;Ox) z4=`pSFHp|e)qcKwZkcau{FI}K`lNx|Okr-#nEQ>ZQSHWzuN3jm_ao z!aF~j1VMY-^0!!o+jP!KROOiZJ91%(d3Cw^hIM<1o{x|jj6AvXu>w`!1+B6&q_O;(*z&|QlhLgb2V z=5bL7kwc$u)!FvFI@wM7j#WCxG5_?6^u8xe)3_0W7;Y0!jNnm)W?}HbVN5@~y9wZ^ zhiKzG8-D9h698LzK3oemZdbQ+2@cP86(OCU zS)9#H6%*%p!T^GUT zO?C=&Rp7XOk2cMdRex+ceV#~;cAFmeBThQ2A7PJ(G)`D9xAvS>)6EJUe-a1jxRThM zyb7beSc-kPYl#|`^|0j7-0d9z@S!b5WMnJd^7rIr?~EQBlN?Ffoz!H5FG88FOMi<= zx8JO2-F0CP(KGzlF@a*3IJhWJIGM0K+D`Zy`7`B~Hip07mBdTZ0K#8>gaF@R3tYMt z)R?LNh1uk`T=9s&ya-8tiiCH1-*nfvS?J9DUpfQzHyc(9EWH!i9PfiswnQzcR!flT zXHZ8=*`(RpjzbRB(hM!kS{#PI{6iYtRs;mf zE;qlh$RZmqX?uQ&@9gHV8S}cKT!=TO2QNC-9fiv&#MXhq;rAs7Xs1L-)VWwp)C#qQ zE_Mi@tlZ}gOkNf~iFVJMKQK)hm6n)?m_iffmLzh;ZM85cd(sT00NmmZ#*7Rnu$Qz; z&CL|deQ{Y16BO|uCWg6n7%97L5!PGzDL4ESSULa@nvSYmoNz~1Iz%;rbcs#6V=wF6 zU+=fBEJknGpn$YzQHyrH-pv{p;!p`V!ytWbMHqE-d>If<0$1 z7e{PgyT8kusUB1hFXPF-=o7aDTZvzs1R7B7VX||5LJ{cpn`YkCGx`g&t;LBDg_c$` ztwYiG_#zms3s!hn8>i8??(HI(O~8|FnQ6UF^yZ5$9iC8w;pK0En_NyyLNOn;@77$< zArNyy5U##qf;Vx=VsKes6~)38-R|z#ll>{(rvkooJMCz!8yfPfjDGZ1^&+i0N&>t* zU;)F$+DAH2t~jjgvIXZ*nBQ*anOf@gjN$ujzt}&hQz)vIT`uC#`j2|+!X?wc{#qD{zbk;yiniN2mOTTNiz@QWGZdq}8}Qmh`6$=0)pLdngu==QOb zYVW!3bUPhxH!paIAUqa@YroM-u5D|&*(dawW$$mM{MJ=RL8qI7vhLXy<%@YlC9{U) zd2_N*&i&Zts+41SmBAG6O)ICs?~i`z=;<N zx>mZfq^z3XHf@>ZTd0~-a%Tv)_YmwS2%@l3ELBI2yhqx^v9s61>?|6^Id0a@)*9z{lrz}&F;>(emy~gnv9ks(UaO6CFM5wYLPN)Vyaa# z_1?OIcUz}^f8n9w_m$z6Hd%F1aYKU?s`isbEWS!RyyJSdG)IXa9TbO zp%lkjD(WNLrN0+8O}Yq6LY*INdHs=gXAnU#deoRZsM{1^y{n=NY@Di}^bVv)m$9tz zTu*P5ufonR0^ru<%h*jkk$KTvA0GXVQYcl!D`znK=Ra&ft{kW7K?u3D2FOAM^WPq% zy1eu(h!u8;)z_RZdnMT}vs5UhIp#h)o;^KnH@D&amz6!4@p-kAT3j=Pdh;lk7iKxc z(6-eT1)JZ_JB*c2*jOB^6?i?kP%cz(u)&jy)-DAOr(pzCh{`tZJ5nx!aJ|s%%@@!( z@nrk)BOlDiH~Z=C&Po4m*j-vQ>%SG-e-sjpk7%1FhFL}tAtAxcD>fmdBZ#}Gb|;y7 z)l7S#!{2#_mJ?MbN=}a9VC3!PrwdP~fKnQ9S)jE^Qy7bk%ZMa`TfpvOt~%_5=2uqw zNhC)yS@n{OR)x74p{!aU@@$fyhT9i&NM=ePK94_Ihv5}KJ!JrJ@(~Gd-SMTXHDrLU z2OuQ7wt#~;7puDS&fqre#j3f*kY-V(h#;qx7~b`!NspOx&vEmfXUs&;4upxD{>flT z|B94$%gp2^J>hLwuRln_dyyka33r&G?f~h$l2UU|56Dhg+dL$E`iJj8t=L5Xw0Z*g z`05fSaP2cENP3$n;Jn_{`?#3pfU?XdP0r{zGplGHLanRZ(x^qbH_{9iT;<9c=Yj75Z$xd)2yZYM(gzAhr@bx~b6+Mvf^=G{}5+>xkv{CIuDasjz2Ji5Cul37W2;hdQ; zhd0`y#Bd6&2Et7s0Y>$QXd^!^g-rzaXVV9P%h8Srm88S-YPu3tPBB>E2BvN~`iu$M zZB&2)3v(?zwjXXBi6uIqaf4zi;U%HztMSM1^R7>toh%a$6^Rji>-t?>rVFFn?*8eZ z_V)|7`zjux)5DtHtL!rWdcAPZBH%P2aZdFNQP?zw3;s}j0Jj0Z&JITn@KpaczliG8 zZ_9yN2mGH}fqDEf*oMYZaM%Apn3$=HmA2Y-b#xq;J^Z2mPFB`g-|ei^-5+}m_Q@(S z+DQu=gzErFIO)G*`_k4Gytf2|CqQ$97RgNQB6?muMV+aC{@6u@=8ccdTwSlYDg53( zK|#Shnd745Q9huIrF`=F5B74@z`(URzJZk!@xOEU2`6xq^Fo>Cei8yqpkV#W%z!kX z3|${eOES{DrB)1-o@j<{#d;86cEPIsYCfjH{Qqu0RI8r^K^#*7+x&d}LCrIAxf2nN zNlJ1YR;Xm_N_@i%N=Ls|pkbx}$QcruN^`c`*`%LG9hd&I^#SIi4U#{g_E!i}Xhp!;afo$aFr5@0S@-%Mk`D<0Yzqno2vHs>?>?7hBe-ledNB- z`rV=pp|)kI%>s!)UiOPMJVmr0p;Q7FOXBQai>l>?X`RVHy}mQ+0 z4-@R#K!6&#<0W2W(RQxf8BiJji-mPd5Imam*Ko5LF?@6ke=7Y6Qg%dY%&9R`9Sy35 zimqQK1&rjaotLtTNo_5ZN9WIIUnqNyMqvxbrD9c6?qP;@(vMWSEnnNp>UQW_S>jFK zHf~Djjh^GJ>h}C=TX&8bMUhSev7SZRJY}hg&5Q6<;15y`Z3WYJ4v3=pM_`Ej!MFGJ_O@29^2u|4bTuN(>KJHM@&2?zaZ0+c z>zwSD`6dG^gvnHSx-;tZlmY#;`#0@rO&5lPgCn;u%9)-xS~)z$R#Ff>TG3oe&3Q9z z^OT{~^3@t3arR?R-<|wCOsTYQ4iD;^a*7c&b=r*u-8)1<>M%px{*~?Mj}efNBq0)T zDZHff@gYQe5T@|)^#zxK|JRqD#M{XMw+5uUoJ#yS(-@v2s5<&NmHe$+sTs~};Da1? z%=Ho{G%)vi{<7g~yM5-pLF__^vx! zoORomFB@?awYEKCrlOV+uVqDIr`YbY zkFUF1In{n{AL$VZ#QmVP2w_4w;?2?gDn`ufQyevmP%q103%43kASd#8Ifuy!(MUpu zUic1zi9hQ@0E|kjeKU3e$J7rxCG@ZD2lfwOjW;tlAIlj^0V?4u`FbSxZF?HG{{E9) zSY>5py0)R)RR1}hwTM6(b*K?6uS&fotPg|yh1o9ucK8VBGd{g2zr5mUuGAU>XOE(pGqiEtr<*vXR&`ADi~d?)#uy*)V}p6?0PwI6Og3i^%~e^IDeNCw>+ zVEU^{7TdfAdEbA#YNZn^7A(UR9i6#}a-p7RTg9RyS8`tDcTls(3=G0=AeVYJb_8C&-pvsbK zoJn@rqXd`4{6f2^#EOV?H1xEDW9;Q&n?IiqQU#$kX3p2LH)+-EiSEDD-t4_R_nZ^u zCM^KGSqK*+^2qRnn{Zx-pmD0(z!$5^PuwXs;$N*Fod z&!R~I9wo)AtH>gxU9yL4hx2!bS)5v|^~NYmjjf|qZR+lvM`4#K_36p=eQ-NKMf(Ds zB@h+*sj5rZYK$J7H+#`!CC(8!R34o)X=Qi;pX>)tlE;8DUdHkJUjUwjOO=(!kW`3x zyK9k`#|;4a)`-9Dj7b}_9$-17DciGoMoenZ*xqejxUK&5GqE<|2dZvUd`wR?hgwa2 z_m;>$yE$H!&sO=-+Qpgj>BR~mp$a|-=m4=}qxiMlCKsR7$p90BvIP_`>4(iur(q0O zRkTWV#EV6$EH+lBy#BWDns$H7wVN!vuE=MdcVCaQHBU*RUr7BRCQQgf%eXJ5jvY7E z7+te_hpL{k7Ne`iL&94e-{Q_Iy^gWERviat&RRa^0Bp|F=G)^&b5MRw6--pI zF8y;A@Pq;ZUMZi)jS?$P=cH+!k-EA_v;jUYB6A9pUZbJj`7Le>%6~N#4-ce@ke7QW zCf57uM0Vgdb+QxuuvjC@nlmPuq-#M&!1tmFSv4?c5O2chKOJDz3|iVWzI*&>y*%aZ zhKy%10hK1|S+2W@W>px2Gq=9BU^X4uH*z?r0wI?gp7j1Pbw^265mJi)g9gB}#P0F# zB=O{(-QoGJ+#_rYGj-i+IM?(_tN0H@9)X_2_B_2xIH$e0bn&@%tKzEZR9sCoI6A=d zUoo~tag8m?83#$7c&o$w)G{p@y&$T^Abg3s9#xOKcLW-!F4QL8%lDr&_+rCh<;|Sg z^n)M(`~fqw1S)f;M*qyzXkbZrHSiE#7j#3Yv{qoxH()0u&a}^$;+iA$fMCl zDAobLBOJsgjy8v>%%?9g!R&OK)~3*WM-qgO5TKdILKl!+=C9oP{2RQ3f4^cAAePBV zNuLXZ*B(SJ(SEJR90AJ3sLUvbB^?LPrg^e50+|0<$qvj8K&I9BcE-x{Z69#qLH!&J zQ2ILvKi)0Ij28LM`u0VXyJAwqykOtHw54U+=2F{m~`jm8QD+<11>ur8ZqD_Syn@ z#9(_#YkUz$zrY3|d22HR^}&Yb>Yu2o4j@u_V~sFr9h5c4PaHb*PU1sFKG9b)Puu2k zibJ(O;S;%4QMY*HW7W+%lOJ8}`gmV}3T$re_lEj$RYh@)3#YB7);PSIib;9dZJ_n= z&q|U7V{V@kF3&ZSxN{gI_HxqF$dvP!0!k#$ytH7Tw){P_TEe(t-GQHM z?%qC|m~tqp^AYLuXq^JiDQSjTjkE6nz+4dIJ`W#Ux_w+8$4GZzMQ5~hj`7v8StZQ` zC7{!Cwtv2@Jf$m9&y)oPjfFJK`A1Hyq-%_y*F4X-^0oRGr*yZTRNfS*JT4TC zHJSNF(3?6JpC2VLTlNtBdf#+9XKpRfa;>0k`p57CPX}fXp8KF&|N7{OU@q*0_U`Q& z_$RF%R?1e_c!Wruc_w+5TbJrKijHrKVLg7eVeID!Cr^zZs)_#bZx*_0)qe>t9ovFw zo~)k~@&Wa0^04bX_m2u=FmVC`0sxo#N2t>OBx>=)`62Kk0Hm$GTui-sxi2L&TQj#i(P*8#aN?!6A6A+myt z^bcN`$b}lZmweRg@Rt|y10ODNat>T7c+Mw7I-AYEn+3&AguK`mR}CSK52M??Gtc2)EAe)}HgmYV0ki0uy2c zM+_v&vtNOB{A*vo!%8)a2Q9iuoiSfgxXaaLM|2D_ByS)*P-om4`EzlV!(yD~D($DV z?Dbuq{P?FrB1wl|IrQPPFn(tkyBMQ#|y zyDs;n)5LA|EcSOabjmh?6NRRpuDl{ft z>&7X5h*xKR#^nmxsCU}jV8QGss6z#x*d5TbdgHPhF5#3k_w$)Fxz7T}Nogr%4&BU( zx^Ko5$MD%9FC31wQ%y4?FsZ{m;@}Rf)zwQir_S^TNjjuWD*HxCc}DYvf&T1GumE)bq^$@+n-)k+l6MXO!MxiXNPa@C#T!c5XnhOL!xC3rpkN zg$ul1S+-}n7hmzD`@bv1D5u~{a`@+8tLbG&LHUfXCzFc)rIJ;eDba8n%0xxWolC{k z#K!)SGqU62sY`+|^LsayddV8HGxu#$s1fnZj&)FSM7L-jnAe2|<(xTFj5L4liocDg1{0HxijtOey^RRyHBORiKQ*cM z{sz(@?E(E2qs4J{; zz)JoLHwti1{1?rT6ADzjNC44@2(k-@XlBIhqt5YNn$=^1KR^#age?(d3diz2epu&$5N=`RRs}gW{VG=T{rD^2q^8H)l zH<2V3)*8RZwuw3kkVS|^rdAXAO{O)n|OZgSXSQ@&%4s6iu7fH)E z`Qg$C6Uniz?6n?u)0gvR(qmNR)DqV$az*dN=CB+Ly0yK?bnB=^r+ocTkk&Jk2yxpZ zeS3ySaK1L>c%vbSKkMUows43AX2dpCsMKeKsXZ#-<@c;GbHd?;j<;#Mi?XsC9}#KU zmoGhZYpu|MNoAfDv-`vFwJ(n_Pevsx7Q`}Hf3I>4Njm#5HaXT!^6Y-&5)2MMNn+(a zC9=_D!xq^DZ$a5pC7-vY9jTK^y3VPiqOV`Zm()VMUpt<`q&(=p1=JFNGbKXnkC-pR+we+)cD2pTnQ9k1ys*ryp@B zQX~~2P0z0uCqh4bdOHN!?CYp!Cu+9H6Z25|~#l~874F>+T z2iaRTWD4!V7G`(vplFb%8-rq5f*uC=9Wc?q-uZ_7LQlUp!%kbdUbCvuV<xN7f8JO z#3s(i4e}^2e@+Yexe>&C3A5-+O1tW=U3W{Y>Y29qVGLtEiNVu+x`GK+A+Mlf-OR$^ z=UH=oH?~6K=LY%P0m9!QgZaOZ$gE;`13*72(eK};ZvXos)GvJSkRzO{J_1x?hM`q+ zo!)EzM{VRof}q%nk%Zc)6)@OlRs6u-YY%EBkDLiZG<==Hef`Xp!|4Q^&!VVjo$;X< z?2E9?VnIAW)afy?6mNcKbt!f1#%oX6=3H-oTV3(l! zX4z&_SVH~mz1;jMvq9-+%RAx>sxU7aUjCO0(cC%ZzxP8 z7*8#<1(vVvYj~h8WBbiILVUQ4w<}6ZSn}5S7(r}^N#&aRJB|z{bgGGDo9*Oot>Bw7 zBQqDg*)+m(UEFS`L-~_zty?kOt0Kj!PDGeH(~pEt-ea!g?Ip5-P*PWs8vatybZJmL z^|*CoP&HH*zTDjx(zad9xIM5YHj~BQSdKgvr^FO|Q4J@hT+;9|s`A}Uv*a^epIiwJ zwC=CE;^?%H?k-E{r&8n9JZD+zm|h-ycU4=C@7i`XEqo%;dF}BaExDdkIIc*&uMcrj z-pB7|TeJH*5=1{FiIsX}Rg>w6!eyaRl~>eC}~b62etbOdAMo^IZmtVmoNxc%Z)7VaV5MhR)dKFw_6PRM?> z6@X(HzR%)rHS_eRE8FiqfxtS) z`tHlGY;4wtb&Si@eTO+l`diA*KGo2|mulWvGsM#rU$tFjViSHyR5CtYwr3wijp6%A zccKO@@JFZVp?E(Z4T*(><^QGsPOQ0!Qf0gb!V3H}v@0V6!!8B{c=MhC;n<`yFhZh* z0SpxAN5})Dhha0osu+Mp6Jmc5iMRuq?001i9kZ z*0cBL)U~y=x`W_NJTc5cn%U$5lx&#gyG+O?yV>@SMFSNllA}bZIJpq!%lP~bDVAmM z@7_b!8gx;+F9N|Puol%_*3k)*9v@wyf0rqoy3OUFE4a`xh$T zEmf061=Tmuz8I1iI0hJ$a&OR~ftr?A6D2)Dkn|ed!KnGb(Q?@#q0QZY9{4XI6L+B# zX#bSrS;n7WuzirPj#zkuaP>JBQfW4yZx>C7cc17*^X}Lsidd26>(m4ZyW+4|P*s0( zwa}3xpErSy3DhI^yq@wnrzs7Vg4F_DF9};(JWT1Tb)2@gHZ8xL6#%zoNaqJX*;)~( z=}?V)8hzgTGxySXD&k99$>Hzn&sb?5CVk)p@=n|Uq44MTyDb zxN3x~H3trm_l9tB?}i`y;NZS!%QsoDSk9!j_o;+!&%HcT2Y(rzw?TS7e^yciR(ll) zJmblFvh(mDz+ghJT;q%myez)DmH9@j;Qa7KszM^2i*pxV3Oo3=!#HI}8+nY7(l?w=XouPNP=XHu-IV0TTplkjomiL&9QoaU(vfblO-1)pwd( zznf206A-owMXrj*!;GPuf%JQu3;it7u9E2NnFp!uLkf&FC36FR6@)r1=Rpab;}b9@ zaGRa6)b+XtE}Q0hI!YpM89K?a6pW8Fw9SQtH5G#*<_fuPP%gm4XxZrbk+%lR229J> z<(Kb%@JN-OYA9GVhzy#JMr3&)(|Q|JH-K<7Qqp$8TWA)?#320gA$saF(Eoz;#_@S# zDe!PInh!U6jV)2Sl*q?S9q$~A2km7L%%T9<&q4+x!!C>h$Kx@Cag#`C!fj{prFt-3P#Cf-KIeIk1^7wQARc%lwBP-@3Y_N%w^wrvlWVNqQVY zMf(*nKUGeImU_P9@-t?J&;B6J+=rspg;T-Q(9j>eTc4o379YJnV-sSdJg?zF=aYaIDn|?Beic)w zNTiD?h!0Nb7oNyzbL}6U1ST;c9F&)3#jaHABCOs11>lFK_TD|9^n#g+a~`z0T4VJXu?0`lPqxOHV^LrphA)g37-ebnv_ zuvj=>?_9XAPEYd4BhSE%%Wsz|a7QOd_h=@dL;!#@2&Wm++7)`)|6t(i=c)I_!ktNb zJ6A@TaR>Im&1Bq&{V_PbBbhf=fP=5<`Si$}*;jDfkFJX}1_u3V4og(@kq9dB#U6U3 z*3Iz-<2`5syGuUPu4RZH;#gfGFU?!3|XK^C#EmYF!; z*``{)o?&qR00p#a&Xb!oT+PhupexXI@4Cu5b#A$*NMeSLP=NQQvkQs1ADl-kgqw439#@hk6&*&8B9QV~jiAa%Xtasp~qm&(mAX0k;n zxzBeP&vQAny-|)($XK(uqxalal>NFhcl)O~i94-~+59t#Z~1&uO}lrC@|h`(GF*@5 zOVA3myU3ZV(3hb#SYFS**EG28{gOnZ?8B%jUseOZrFCX{QJVL9=;STkxJ8%g+=8X7 zq`BAa?|R=|4Usr;^W~bOtVK#O#dp1|90rawDd6KqjUI&Og|*olYX?c>N~`Ua-s2iv zrE;uhoco1U#KMhXj=x4%)oDhuYasVd)a^ex-tSMoqQSDUYH6lzS&n5P2zW6&FFAPJ z^8V!D2_+GQR~H>f+tZ(8Zi)wc<#$&}U5)HhZEi$i?X3pi5)R*_Z|dkrf^1mz&Ashh zL7)4t;_b+)ea}tMJFug!shA3VHRpjdQr3ONrJN(_CQ)w}R>sg{57z7Yh8ty7&ul~; zIHX8PCv|kq;KDberO3x_qj^sDt51$2K}0c-0ub;omOX7`YSi`Z&DDqj>t~Y}O18bC zll*=b&m!*Jaq(8_=VLm;Uie4#>ZA2D!5>UESk(?pUmFK4r0p^tI$y1Db}E#MO}Ur+ zlYK`R2Q5w?KSgnD^{otH zjnu3RTTF7f?dW7SvvyO~40~S9+oKTq2t(u}8e5hdfvCXka*pD3?ytzMnb2I#aP4pQ9<+>J(Q-A6U~w45R}u<# zQ1V7SEw%eFHFjTVB$Z8Z_Z_3`O!eBj~_+6pUDJ&nS zF40q|f!cNwVk?y~>55T$?TYsu#;5>6Zh)PUyDSEM+RbQ}ti(Y~`ul0<=6T?6}!7dw1(YJ-A5Cw*I| z?_wi%wf&&OG5r+#v8GUAw}hNbAPYvXEQ{6`vzvE?!)p$%Vdn!*gSY#G^Y6&(1~E=4|V? z{HBks4;~d;Q?qzgv;Ku^T;bWFvh=EydIvp~w=3JbSFM?DTnf8*1?FyFkPFT|;U!7T zxN3LN4PS(1SBkp%*f5QBC{!ZKf4Ij-O1-9E7xLjS0m?k(-oGIk_JsL}be@WNJXVuJ=mbt5Ah%8I(Tz7CJcBVt(8 zV{07`siKl#pQV_f_;jD7#&+UP+2B(Gm|AL>&~mcyYHKGkQ0vd@oww5(z-2RcNIB?S z{z>fRbm4g316BP?eS35g{l2-xU5y^72uctsVEnNVI3h5C5IwAEx|;JsOjdk1fI$zp ze3f~a@6mJYY^aCG`QwS)Pj_O|&f8}S2s(1-3yw@XayaN;qQvDGBrb{IeEUPmtr=6l zv~_SVR^>Uc=Nu#M6kJKafc-!x881f}AS{9u7i|hz!)A7wpl$aZcyo zh{g7Gpk7-U?{c5%*IS5=21m)j6;fi&f# zM5isB?iXD%>t^&^`|4&4@-|L5F~|#oGn)_aK=6Ics{wN{UN7e-LjfI*HmDPcpNY+% z{3l_`&)VnkAaH9p*zJrIt%1O90acr_Bbeik6EegA2q2M2QoikSh}xaF@FM5*qn8c$ z4Q?@NoP>BLbqa$7Q4pd*WXegEAc4%o{A`8P55YdLn_O7YbYIZ0-Gu0n_&C|sS{$Uy z^mT*1hZ4hE{j;ytxTmfW{8I@yW^?XXr98#Kpn!(W4A&tygt(O}`H^jCIfSqunE1Cj zxN2)&!4Dj;Cclc|>)D5kK!U}oiWh*0*I-22_6gCQb5FIc81UE+7w4^d8m;K;+^)ph zbIrQDFPP!&xExvYE|#4r3(t%%2JPMbse2iw0Bw(0a=^*!AE!jHGU1}Vh}@AD9GF!7 zQ_VaHPd%QB2`#yGr&lY_pHgHv^pJKg0CNu+^g``A4QoV28brKUW!CeA8Br!RZ=#N5 z+171QvbHAdy;fFMKdX?XZPe9|)~_c=Dyij~o5|qp7ku{~Tn;!JN>??2Ove|H#dtgh z6)F6rvq1SUJ5JM*w6s@AUE@D3n5pn*+$mfXescilv?k)1PGh>0C0(5}=YdrOYn@@>AbTChsk5WsomGmI<&WCgeS;@RL~{{8Y%JB+DV@ zopS}L3iy{4Vr=)Deo~0>OThlS41#tp+-}lNy)6UK?i-zkH)C~`WLY(l*$)c|P`F5IGAPJU)q(H9q=W%S*qo8<9~objN_=rzV^Fz3B$`aV}EjlK@7;{*3}Hs ztL<5~C-u=(nbXhOR(R0Z_Q_v-7r0)fRq-E}G{TVr`2-MU9=WhuGr9xKac2**<$4rx zX+Pyi=<1e`FqvgaVyLA$8ZxA(%d^)VA(_cyP|(1)F1{dE{|TtKEW^dHVE(qI*t^S9?+uUwS&LeW=la{~Y9={3{HrZ*oK7?IEE>xpa*XdD8d=~ zfnx{q3v&?Xe?bhw?=Oa^6hKX-azbklLZ0&q@NNOVk@^->s;-ksSJos;j;K$#SJ(1Q z$1vUO#z9((;K95G2?9b$-c^zBpue94$!ywps4*hcF47u6jS}y#v`lk)EA|c&g&|F* zW>(~pJ%sc{3kOODBr9}85Jy;XcO|*o%G{J0JWh~nM&8Tpil-_{?ix>RYU%I7Yiav=djlkhW7kaDAbk)Z0YfNMT;pwiy?T1K5Jo;&s4Z+}&{i8y!hGQ^%;)2|}5 zlpG-cH2$Me1<71k$y*i7>HUnVoa!BAFaP?LuKZI85%oi8H=eUb-#Dd20hfP{J?Uw> z$uL*dz3dl;^T%VDUxJ_z(q>Tbttm3jd=kFT|HDW!Swt}C^#0?1u8+UlijdO$2J~=z zqOaGRrhgiBa&_5F*5uQ^6bLR8eXt6obDkkmZ0>I3QwGcPGjOw%uP)*fAyzmR-Gs8r z+0BkXot%{W(#yX~{KUWy3{z3s#fqydc~)RW>&XO1;yXw7khs2&aLA* zf3W$=k?taDy4$cPeB(H4HkA2bHUUq`xp&@fXY-F`M}x~DMoT6XboisiwjVP~N+Mnb z&hoo_n55gTdTLRaO$e|m$1zZMtAJ*VV-=LLeE=37MoC=asqpn(e><0|#vS&A9yV*tOM z*;7Kzct$kMR4FTPtk{mdOte7EcqVv#-8A)2%v39r*>`kCg64f%2lyu`E zn!c&qztQD`=6gRpOm{O$i9?9U4>mX))scD8;1Kn)oNr#z3vIZMn%}Lo{uWy~;*V(2 z;z_Tr;Mua&T<^_7-bVN_eT6j=3Bs>7nt>wYJAJm&!T!7M7cH3;HBdMBmQO zv69b+Ew4tUg_buIA;_jfeV?=PwlC*B7ACO)6pxjB`a0j%YECeiYdu0J0IMz zUpwZ|iLU`W`5x`(>ts4{WBvK<*qZGJ{}RRvpWJcpPDIG5tz*Yq6LQs~2i&4o#rGMm zn_R5b6p2shyJfu2)a5nPJ|{W#80JP0bCy@amwv^}mxkeby#`IqWOXDRm-N23=A;J3 z`?v-Yhq%&-_;YWFSNPLIau)>j+Z00-uCX*(7?zT=S%Fb$(ehPmLhm7&sDuJ;8PHbY z*FN3b-ErS#c}Rid&02W9Ilxg_7y74ECl`*1xi9#;?{N7z+Me||?Rda_WwPyY&#z^C za{Rs=4Oi`r(@tKNwi3%VC!8i9x*GlU?$U;=5_^ZJuN#-FF7ob9G8~&Iug0odz;R*( z2Ms5Y$9Z(Yx^i;z({qkqzCqKag$)0t#ZB5vBi`;?k*}EW8G9de?IU`s1@QFj;`hxh zSAS_Ve7;D^zpeS9KDut0^$3RadFYi@l_ngb`pyBIW6mVmbmw&fljK8h*l2^}xnNET zcxuabzE))ymTd2c{54W>j?AKjXKxjhSu{M7SF$cR2f@E z71?kHP>QUR7k-m z%Q_c_VGEvc_^L4Th&~4caT|54rVk*vpp^V}r}2t**}1XNruY z-^_X8!=37-p_?rA4SBoW^NpjiXr3g;z#R|aaE7@_D#YmO>&qS=clyHQA%`Z(%DpQv zo<~Qa_RiPCfR36nZe2@zqX&^pEGcj#cjrH2S?8`OOv-nh5@6Nr0tTMZAjU85w01Eo zHrEz;jrq9>_IngYQ!vg8pZW@&K1?Oj#tK0S5ZEm^;+ose7Fl`xPdCw^`-_mI$D))K)GYG;SgVq_%UdwRn`36`|8?R zIt{-kNRk4K$~}@OXK}6Om)w&^8s|c01t#QGR>nYgh!nRxQH)};6`rj*h377Ce0-{z zJR3$x*R*cWzFCrYgMk88kT(AF!|B!f(vuD+_HJG}IMS2H9Bvny={ovp+IH-0^Ot3E zze7nr+RpYvo+U#JZTrGD8*R;Xa2p&J_jltyeGhxAuo}-iB<*~oT?w^Z{M!$GI8aLz zYxSj5kJmS22q*Djuh3ZR#^yY;A1_0bhKmRT>FRlux_vtc<(3aHQd3p_vXpz}mhzS> zs}0%iH?B`K65IlBJ?yh~8y|T+mf51bb|2`XBgV2gwsN+w2)Jgj?L*j)lGXVcV-t1P zmbwqEtZ2$MY%yq}&JCo?IZZmB5Es@JX?L8S@rNC$jna1zVz~oW3b7lM9oXVL=NUK0 zE)N*3<=M*RV?OSuWuxUB#|_r$dYU534q5NS^lDXo>1w&SO_qYRHY}ae9juC!LRBrn zPX5&0-3{9VOcyF;Zd94QV)ABpq`{hICU>6rV%`KE*r%8E^tuJl8J5$xuN2AU_3PK= zAA9BUC>)audJB~?xiZqD?FC~|4%AW^n6ATSc;*9>LB>(2$&1}qjPK)VW^x-=1oFfO zXdOU|?Yd{%Xd{OhRK_pB2MmKG5~B*TP?$B;{j{6N1IGUtU`eSK5-8Ug_CQ4hEH*`| z?etx-)L@?PDE`aO=x7q{fjqZdlpQgEo<=Epxh`XEGBcg4RDV3IdI|~oQ@w240V!f4u5NI7|r0&X&u{Y(DOI`}yaL z5_OlhkLPh=vr0)&9rg3IAGc!X&C8yft+wi*bj?*VSJcjWOpo`qR_@whs+%qW{23!O z`{jcPWOlb~;JdJ<^u z@(_It09UlxS}Ynull%;FP4gc+g^jaVElnkVJhA(ja9s4Cn|QpUlKu+dnY1Xi$XFP> zJa-lsqJa)*(M>7ZR^xU<%0WTb{8}6;q%2AA+ES%&v`Z|o+1VmitX;?py^6>)-xa-F zCN1Y%fs%F}@jBqY#`eq5dZN~=L!#&x0XJUxC+A>>X4kGYU6toqLLB{N8asJ;ACOt%U36nzX&CO*(6Cipq$}YtYd{ zcuyo(hAM2X>}a+B9RH0>@z(_f55L)|AEiFwiti~6k|7LXlphHelm?-Fp!|!rrqQ#+ z-Xlhi1IDjEx2c>JXtr|x9QU<2Hu;@QwBM^C9#VkJBIdPpCy!b_5y;ymemu5@XjT%h z;>La0Ix;CPfRBXfA_jXJ=3me-v@ed%G}U6o#yzNx%o^q7c5gm*{IUBd=AUDQtUR3M z>6qk#z=I(Timu9Wh2Z%7Tt5o9-OCAIT2#SD-na5WMLf5r+q_*aJMQVx3`amb(DsJ}pUM7EzawX>_syDiVUGLW!4*BO3V*%<#D_Te`( zl$3}8BAl>@a2xl!?TprgA53yv?S;6$0G^#TjnENDnsLF&ia0r&iy|U!yE-~H{o1Af zudz_X`+}gx&sBJUqzHGkKX=VG?C-`zQHaDPH$F%4nD#^VuTAxc^slx?aqevMq<90W zr3GcV7m8Yb4!RW=^ zzaJuNzy7CPQ2`!~yK;^l4ZU;Mu185soZiahAM2u`1#Xj?lM7Q4a#AznEc)&T4tcDKu8O`^E)?phU3Cvr-p*my zHG=N{xdP*P9}?CR%7ym7Q0;wi`8a7}lVwK`;SZ?l`LX&t8_@+a*TqTYW^+P28!?*h z@!0;Kt$s+5AXGz%tUG66dzAh)O?T(o3gN}oe7_iK+s(%Ki|Vua=5r&&5s_b}r06X+ zCbnggPTgR~N|NT$!9R3#vWLk;@ zE|U9DeX>P^dHfMImHqLFUdp2EvU5{ib#)hKj2Ie0nTj4wWn^Ud%SCb)*o@!xC zg`?AEU$It8tTPh~4{6785{gL3$)Su+4ahlT9UgC~sIMa4tX`zV8vGJ@`6}t=wxWy3 zk=pKZht`>G?foJpN9hl2&kETnudw3mA~$cfJ+>)tnJ3;Yjdr-}FI40iG8jROjKsKT zQg5F%ms_9vx**}<$%V>krXjOlwTR7Qdx{+g>r&P9B&;V$zxdbSthX1)xplN?E%u%W z)+z;a){^_g5dx#OjbJ5qWNYPHU`p;~lv>QBt$Ijv2$8T%Pfyy3oc)X?reZ1V#>=of zx>-xN-84BlT#7!Ho1(>*3|$xI%5rm}CMddc?qt&FKzZPA;hO#QV!Z*XnRV*Ky|-tk z<~kNRn{!couT=2UgsiX=-e}P=wa9A_EB_X}bx+M|Eqs0X!&yT2wxLypLcazrOB)kc(MVH1C#HVfAysfZ#`1 zYArWl?tC_;NeN3g3_zFdu~?qY?he=&r!kI9!haw(Uw>Q6)KyFPFPo$^FR$ zCCEIejm;VfkfL3S#~!an66cVaSe&J&q-H;4dPwxouLu71AU$I#9b40sy%&3Mc0`_{ z7|w#?vzxS{FS?0-m3B62Z)u5`-_Jk~RWFpJwu)4rADf(LW+!xND+%nc@U4tpxN=%t zRFnCX?g0Cav<-fjIIwN9rL_fl&8f#>GKz}KmLl01TEV@J^x6<3=$Gitsym_G;nB?> zPcgdGo`UBV3r=mB4k9FniI*7YT)uoGb?==es<*telBvLH>_JH^*k+zQ`<{y-%skHN zQ#Hm-wFv}SMaHRIwd>WHIJJu{fWReSGOvHvs*|s_xIxfCSKg;fO3`stOqVV2)PUFb1y-EU8Qoeh3>vdj`QJ0p8%mTJ3;OwPYwbK>#(3VCMtEvp*0Q-8ZZ zm*O^L?e>;UuBrIeQKVrGJnBi1)6m`|f0*_Q<@SS%-VMvq``AMTQJR(|B?e2af=h8M zhMTAp=AGJVrJl(Hsh4UGj3L1$%4zy_0*`;I-Zxb3S^_mmMG$-o*KdWXsgV)4Bb9+Q z75Pq|+G6JTz)e7+kM^wE%83|$f*}6gJL%SNNvUbFy87a`d21KrU43%-6R7-Yf4ME_ zE#(W}XEP0?WKEyJ}zw2M~QaF@mF&c$F7Aq!+DJg zWOnM4b*bqLhBve%)^qk=ffAR+(A51791Lj4vEKqpL5R}mG29evR(fpL4_Oj=%=ZOI zlIXGEbM_y>+eslvh|z*NPkktwpapx(d9ajdLEvvMj)DCTq9MhPFI~A}C&cjuNR_}# z>puk%-#mH5fwwvehG_Sru+TjT&0h}x_#**mkEe!jI_ocO7u{i;gZC zp&=_IzhqS2#VczN9ahF=HOA>KyV&TLC*CaAp6_l3S&!O|wYj#VpGsZ&{`%q5cZu>R7V@43vlc>(Mk5CdMJZW&l8s|8TO_#g0S+nGNzeXVyjWD|Nw zJkDkc$X4m+uaIvH}JW?zrc(UV8xn}b6_TD_T${k5{ae_ieW(Linb zHB^M&>Q+j-bxux)B^q{-e}tIGtUy#EbID-FY{4-%62k~Iv2;7qgqcUe9x38FOTZUG z{tGq{)JD*YhNA+W!v_xyT#qA zO_Y#QvXdHR?Y;|HBFWZRl6@I-+r~1ON@Yum?4hi;J&dsoNs=r>LzbB_BQhf~)L14A z^PPj#^L+2~e$VrM@1M-fb)DyRoyYb&e#dd(`a08vmfrse^L?#U_C0C1qW4t+W*%!F zWU@b{Qa(ruzr}CujTi{cNByG|GzgFBkbIzS8laEtc~IrVQ8W086n1kU@9f!6!UHPa z3!{G=+|l$qKHdVEqU=$Ie(bbS0vv~qzQ3o2&36MY<>Mk51gt77FYHoM(ESzq*9 zrUeK&&V5Q*j1`>g+|T}-^mX00Z#=?3=`jR5Ja_NU>d;Z~cO z0XH^H5Xv0^=C^O(zDbDO4$c+oovKNuOPGTt4dZ3J87q_%*ko+E>sm=7(c@T{V8SZhGeiL>z==n4|Od>`M^*}s#j z$2e|y3Y`27?jGRwySqIbc9J*|`zWZFcDs#Rhl$YN1B(hw7NgXm%gTnW&OJz+5#E%P zn(70#0n*+zTQXrbHbbbTKiP_EZeCK-lk|Sd;tnIA>)q(3$AEX9sHuiye+w9oH5eU` z48_MThY6sRH-vB!b70BfkW@|C&vFwdcyp4=P%W3J( z^@v#(FCuPsAPwjPY%$slkHPQX=2t@0pD8BFg0!&f_9Z?FcXa; z)&xYF%Q6J-K#Tr>O1m5hnL7HkPq8Vp)!ZofQl3L=lhK5^(gsw;$Isc{bS|B}&9H3R zdM)^2Y$3Dbbi#gEuK7=Uc>KO2pb}y_}iwYq<0}Z|axDdf?t` zrifz%l@VVTv-+=d4xJnb4@Xg~`^(YjdpJWqEl9O=aO;!uoWRF$)6jR%g61`j8*KR26-_C{@{)F;!`^ePyK_@e4w-%B;8a z#9AF>lr^4sTxZ^qW9Rm)zowPc-0z#T_e*WBy;c~;PF$9FH{Cfl zrfunCbn9yaQDAQ$kB~|glIiZdaV4VO zshJ}0F?7`z<#YOSx?8Oth5 zNm{_`t(Wk<-@-=@@=3*%)CRr^R^kPJJ12{)r!RXH(8jq31=4HK7!1t{a-H#U*P1d4f@+wnT~tT*_{psM_3mzp6#x7R^rU$4M|wv zsYzl*WW8jxG;qj)iU1r%Sm1)EFCVGq5XnpszIpBtY{LZWGNt)_*;h2z2E z8=xFV9;ca7T2m9?!eW4&rmFgWh%)BU06ZW78W4{0zBf6jJ&}k@JwGZ|cE;9X z*;|m00?F3LoR=t!cVJDT2GxKT?d_~kfAs3jq3P?1rf+7@$a}W}Slf?;aZ-Xo5s**d zM?f>y&OpX6O}1&MX^F(X*R@9{D>j_w3`%?%v^cPHC5H)gzb?7Pr)}glc3(IADQxMl z3C4RIO3jlB9x{o^xRO@u-+@zrb1qTUxAAiaNE!+Ud=?2lwgJys{UAQR#&;@h9>uN} z@%}mkZ=beZ9(U*Aoqn3)NU7WMYRk7yj0gwkZwki@%`&nzrdf&X8q%wGW@cvJU-P|u zWq=XcwPOANyq)AHf{+>$s z;LF^!fL1cs!urp`pk`)%pPz?<4Z?x?U7-=&0LCEKARVE2Yxzf7>(147F70g8jD5XoG)c5XTP ztV3@nyf+vzwkZ@7i42uP(s&BLU*uF%t@1{sOwifJj{_|hk|f~RB!;rD@xc)xrzy{b z$QU}o9rODVop;euu@1s;k2g^u6wyhq(&M%tx6@z!bTpd@Rbqw**k`JOr>X}bLV z`j`%soR_?H7k$usEIv(}DmMI+uJSkoSEravK|hxpta*$Y2tpfA97KeVh0i!JC6S7f zlFb6L+s66Cg(WXP9ns4&(h)Q3M!Gd^x_7;zEXZ%}8j?wiGDhY%G!Nmr{7r(6F8_R> zVnjD9(LRR=LzhPV>Kk{RBufS~M1085mQA7kM5h9^gEscqKg+xhWYVlMiXN;VI>U^j zG8IUGs$LkT)zvm70@KkGbE&nDFf0kH5X&ri>ZYf5W_knO1dLT(JDU7>lW&*Fnwkrk zR3?4U;dXs)on&VuQKppC_B{6C2YG7TlGn*12aG`_OJAqseKh8aMhv-Dql^r;(+m|& z^*k4sfm1&iM9t8`)ipWyrRHM`%*q4Hz0=}CImFa82Gj5O-aSVVF^YQKQ#0C%{pM;n z8ecEYrJs(dYg4oM9Fv6}ING8_cuRaJUUc}WO|Y7KCX?chETr-pBt-5%_`wU^lctAj zoeP;b&G2b|JN%^mT3SA7Qn1E57DO?Cv&%_{zm0=9pw~%Lr@$N#=K2HGM9VLM0;>Ot zk3@*pADpSLpF72-5tw(Rci8@1b-nT;l)dOGJIxjnB_@LLWIvcmm0C&v9&2e2Y)+Wj z$re37RVy>8@|9Y|lf?S9obcGyB-gy!8bGwhVHaua{)2RkpOGj&r~89_2@|BA1xYe*L<8 ztdY|!ZjERqKz33tJ3D1+>Kxq14YDu)<>dkK0%Q>? z#_M1DQ4ck4@|yp$NJo%@p6?J{|LGZC7!Av)4j%(fZ>wBGZNS1QlpNsMuQBO5^es;7 z%InF6Qd~GU`Hxt9Zb!htuKuot8GuE6?6^(f}0w*J(TKTs`urmwLJf6PZkcqyt=8ias>Io8a&%c^6h>7yD!gG zuxl7~DoEeKJsQ`aCDf~U61JTyFhRONsS&&rO?_cC+) zddij(4m7umFj6MXEYqG_4k||w6j0AlZ@ep6IqGrTo}_}#dT&NscT*!Zwgmcq@Er6x zief;01!${tQka4+bq7U>pS< zgoiP?szafXsrgRZ5xQP)$b~BMQ=iYIn*vKUwu5d<9#Z0=!#z}=q=g4xRQBO+o&2K0 z&d;8xYcjev?^Z?cF}U>NPaI+Is(f|tqmjUv`O&1<^o2p|l%(QJ9QM9l<8iF{%QmZ8 z?FdneUKP>0F?CF$=i|gYigbG6Z>|sBn~QfZt0W1-vQu#*S`#YX&bnjQmNdSkwGcNZ zQ9wMl8!gOk-v#K8tzHl#p0<=#c-2x$qv^TG7;aPFwz!`xlQgzg=5eINCa?URYktxuu z^Ona&dGapZ?GP>N#_tov#+_=SU~fB>N7KVF-j64q&21X6Om#FPURCP(7}nD{;)%Q6 z?(MNmXh{$I(GsEnn)a3^`Ux8oXTTQ$InyJA6oOzeLB54=Io14FB?XA z3iIwVlHHMxdkNxkk5VJZF=l!RF3}ZTtbFyFrL*eZm}r7oemqNo;hHo3K3h85NZQo! zR9vSW_4Ysq@2Isu!+B4#c5h(-V0J(8#T`>QDwBIj&_`joE0rv#7;kFE7C-9Y6*e2ePvGkt;LD1xO`+xS? zM^EIW2M$RzZkqlw*2Ze^TQdL+PRhz2c&R42hQk2`pf2J^H1IEp&HwZuVbJ!d((KtW zqlULp?Rix0@iy)|Q9D7+*P7>WVGj%mrGo?pWkyoAMo2)L$6-_n!vKozb|$jM769m>03MoW8!%gc$=&;3wny3+45G!y&VMNKw-9|P1CI4f53yL&zI}J$f-i58=W)C}`}6dkMzYIKHg9ZLh?{ z6a;@u5}1sS6LhqdgbFM@2)Mz+DhU3``-i>l!L;esgt?l0#;=Q5}0r zckAS&;`P1ig3y@REf8Xt7euGI3|ijV$gTo8xMvEgHZNhjVLr=W_&6Gu+e=ACE!(y{ z)6YN-71AmD{H9xiAN&Zhx#o%_-P)=fdF{P+6YgtN6HDYwZi3$2*WuF>qlr>x3wDj2 zO;YagEn-Hdk-HPOn+?FjJ>_O)ut;fx{y$c`Adcj|vl&_D2{`{$HPOH4^jes*Wy zF_j$)@83BoV%#&FAvS+D=={Q<-G#E_SVgG0MK2`@HZ`ok=#x#4WG0P-o@&*S98u1_ zlOkBD2($`t=iR=ea-^|Ij#{RsM27Sq*>Ugy-C0Ru*OFr-QaPh&+ROPUv8s!9@RpOV z(FwL(bfl=sfS_~G$hRxL3H4-aJ+u6eRP8d<+zo79nO_9AT__`7PMF5i3fbP)oBF(7 zweA@9v0%5-TtA<%!Y8_e+MMrhJFx@_!Okz9ysJEO0^|Y44oNwk1CI$(%9Pd?M$%iO z<3>u&as8hhn8egNuix|A)GaX31blp|CZe3x60epJcqcYb-Gp3SjjdG-3mJV5-ibG6 z8$;*oUXi~y*Gqqy+_tfC;PJrzc!pmJePe{G%N%p^-L7k;O|6(-S*Y**Wi^vo+jgy% z&9yUWtdj^wIQ|gzLO*xHL;k0P69Bsbe%{W@XhQxwG2Hg&5iw@k&Bt{Ct(#|S%t=cH zRF$uEYg`m*u%x(asI`t${^!ff{pI9`ED~e3TccI1n{H%yy%+js!cAR9zl0z{yrzBp zNp{rknFv(*WN}1AjPl)V6$-5ux%bSXz@*T$x_Ms}Pa98*dyg!XQeSn@O?I#&UV-h( zZXOtQ=f(Cf?VBa@9{y8hIA?8X8t7S9x4cbowfON+=bK@W%Ub*TX_vMgV;`YTnfaQ& zP!*G+euI#>_ai?{z_YdsPtQ#b+_c;NfwT3Y=WUhbfMy|GVV6lMwuNPbTJe`8`8yXj zIqn@8Sj{Y#89v11`&x!$XrWF?OwyeAYYQoOj1p29bL+IwH2c zs;3sKT)BVy@0|BdPMf0ApXeM2Y)4vuSawSB4SPy1oq6}?*y#r&Uzhi|M!#HB)W;6P zFr8(nv?7pPaz%te%=veOXB>)&-YaPO$ORniOLnAt*{3KiPndtJ=!#kP!IQjoo!M?1 zJP0!$CV$;WsOM%TwQ@@iGK3ucv^-mx0`p&bw9wFS$TQHXnsCzE*>)HVb)&yNO>&3@ z75+7Ua46QC>KGej)wgy&#dMGndB2lGz5bU0D~D`7MX3wV8v`jC1wFaZ6EXt;di!UG z{w;uQK^!uvYjOhsAUD34KBdtYj?kh}A0lX^4_F3sL^w+sv_ zuTWcMA%VP91}p?5KUpOjaR~+I?yya>T-X^;f+n~ippxGE_G)B;F}Cm{u*G?=H{ZW_ z#rBMc$x=Tj6|ox6kd%q9C9i6H5KSn5s^Zm7whpA31sKf9Ek4pKD>|$hH{Kr=E!ZY( zZfJUs;h9>Q>WWG#YrWBjdKXQ^(d6*LYL@!XBQWH z`zG)XvtYt7^Fn_SDn?W|AU9ELH0%6 z(Zg!*Q0?b`;G&#TEXZ!R?oG~5PG1qJD>?OSo3XM#a(~YUV{}{}gweb>N>hKqFw@K% z-LmgL3j-fGjobVHEZuJ=U)M@Yi}rMxZ&+a5zG2I!updtg*2_P~qt5yYkYVx$5Y>L( z0!rB!PRg8g8A7JNf3$SIEIfp0WZC&vt+pOd+tufhhJ?bfLCzjT=SwlGVbSSY+(9fuwYh zLz&lKJc;eK0mp@LSA^ok)Ux+xGTAI9A5q^_Zmu?#Wfy$oBh^q)2UlTz_VNPek^eJk_BE z1u2*!kM?z(J6hPUDW2lWoQX~gvZ#C}>@}2Yg2W7o`*+5nOq;s7~0I;3vJ7tyNgwB42`#pnL_FYvO?!N=c)1^GXR#5|qUS81>yG$QqhIfx;EqVvKfP%`8#b09keugXEP};ma+XoaDR0D?dBxA40 zMD)jPSL7jQ?;r?HX#2$k{TvrXg$gkXwPdk$W0iXpPD)N_^-=0X3JA z`(WpJ*5LRP!~u;G?};>CUVEXdL}@{3qLR=}MdHNtZ%s7au`ozVjJ5sWDnmpCDYzoH zj*wO0aLe<$P9mv0?JA-hyUon^*@%ds!Sx;jaWvQa*|6c9%v7uW{JF7!p8#HjQ(Hts zNvxo{RVRbgzn zNkdkaSQa|s+NwfVnG=8u>9TwO{# zRvx|%dAeaWQhcAEbgL>BGYcK_SYH)MA8*2bICB53ObpxBS??!!Mwp9$IPCuU$p2k9 zmSf%6%S(CNyJOGCkt*R>*(bLzt_yZf#!h~#{|Np1592?;9r=G=9z?W&oME7E?TK>U zdlD2aBCJnt3||M~K?f5oS?y;KSW$KMeS&BBPx$U%TK4~-GA;AvAWoW3G! zF(#-Bia&1JHqZo-Cr;R7#*CUQsq#!rvwl)GL)TaFZ9K!*aH+rpfh_IFqfS_rlU3xZ z6HTQ~1+HJ1Ftj~Ah(1M8=!_o2SkaocZ|9~s%@5{>+Dl~M3gnR`t|#DKOLdrntgUfR@aECidM zeZktes{GY&-e~n6oL2P!l zbE*Tog_QSFn!Lf};B{BfJjrK<0P>%-lYdh5Y{gjhc^l6 zR;cT<@@vENn@lr`Z?@O1;3Wt)OSN0TR+q4?Y4bU3sadYKf9HU`P>MyTWRZg1`W-k@ zmc1@vsA*yxYjI|G6!82C>~SO3&f~0k2vv;I)x{W;xExV5eBKkyTNGdGGcJ4f7wL*N zSjm5#Wq*M;N{6UtN4f;_#!-YS_CN+}h9-5Uq%)-J`Qz(tTq>UwH^#ZN>%9!w3!@wr zblugmE@%i>DqA_2-rJKR`J?#*tJj_loqh2D*vr$|P71LJ=3OpxI?%)`b2kAK0+i!$ z9z(~>-FeI(=vfkCJ_!PU?KF)cx$9D}Qd92-oyI5Aj~smU!vaAMAKMS}S2@l{Vg+S6 z>0+J)=SU-;`To|TM*RmV1m!;dXu|dzW5`TI?IB%k{&aDNla~NFE&FhLr7Vy_ehVOl zg1<`Pf#$E8BrXF`V)T679D)*|S(`A-r5{ouy(^=L=K@;e&mX491I*1J|JXnHG%62} zgjY=|_^rIpkC%iw3y6LxiNTC}1v~b&7v#$BTg{+g&T?uoyyzj3ro|w&l2BY*38-4X zp8O4uemI>1T!5vpisk+9{}T|)fXfX($gj^yS&j1xu5KA{#EN|AA(b80O2Lz-8h7;7 zDyXTdt53arh`+sR>Hxn;#;SU5WVrbYp3omzUSiD=1||fq8T5E0^EFDbrn3 zmG?zB42jhw)>}DFY4RFx0<$>454{eEVQzLh7dWx;YSOD{u)MM-_yxL3u|L?(BRFX3 z52bRiY-~-+#&SXr(Myp0e~uZX{t=T*RpXQNxbj@A%M@} z`MDfSu)!=yJF-|r3-obbGgF6)DQds0X+hOe3(&KN1q~{*RS|Etn2#c#Rp1dW)n;#m z`XVt5V^u(X1`+#8PW?E3uAvXLpxX^o?eMho9!0ow=biFP>IcZXUpM zdTT`>Be8t(Nt={;ma)!-6a4Ep&xS`YkKuW6+^QV~qs2=|iV&S&gy`lMH$^l<`&W!! z{)%wvy4Q3$2S77xFUIj^TVVHsZg5T!+=vg>l3g}T@3?7eiH;jwD2&FqP4HAEEs>A5 zU<W#noyyDFsA07)yhIH9}Wjr z6**TWa9(`{WZQUU476OZ2CSz82M!Fto~45b|s0S`B`1o%8tiWNw^20#B0|}Ir!x`{c=7;*J)z#;~_ue#waQjYC z=~nR;F6bvLid#_1w~hF#Dz7oib@{7nY{@bjmE1=d`VGkL6cm)!OMD1s&DXN=Aq`tw#A4Sq`0c6?V4B!t9GFOi|N92c|D{ z#IfC7Doq}lPuVtidpUF9>Pe%C< zEDSBb?y2K%{6wknlUJTa7HveA)a^iLy&>c5y2Ps8E3%>@(D~=;7;_+dtqw6#idfn- z&8s73D@<)Nry35pHx19G>+>nJ;vFLBkF|u(1+%KKJKgqxBPuOb83Mmi*RGg`lQ2@t zdUxri1TopT%Ss69m_US4*?yYhiP80gLh%#!W=IDDL@vS(sXtKpaG43GMX_1jo zuUE>U{GT^fs|#X=3@)crMrVBo$J#!dW^EXLCOu9|eIc|Ksj6Kiwx|}4&Q6Dkk{n1w-WBoov+gukD1?5CurH=A`9Jzwv zG%aLx`1tqz5ec>z@U&FBQ%xHy4&t1!NTv+?6*q_Ye6eRj_NX@{C9qS5ahx6hH2eI# zK%l>HWit75T)HA}Xj@KI!9rD2TGK%jSl&YjvPsvXTdyVzSC}8mqbB~`jUi3jJ!^2! zQbawJXi(h@NM#mkqhRy6-0r3aH_+Kr5m(*#4__46ZJfy-(ef)vWeIrYiN>@ULN>=l zDiXF~cqCpnh%Ihv%ZV)<8?-mQ~?ptQEk)i_P7rA9cuvVQ)>&_`=4B33O`#^FN-%-Pu)oWfek zh})pijUgZfO;irK)xt+7t)^A`tt`anT4ZZPFUPy<1zUHi^#+pW24^LkVwrX7^OKWv z@su7>Rw|s(mea597vpL&4PNieL>6zH z%6sL%+1|Wj;8Wdsu^Z~mEc;f|?fPX4ClRfYktKzvj`6|(=NwQ+Kl*COJAp)few3y_ z0s{5js^Zh&Vz7)Lgxq z>dUWQfhwNA)vC|IYocuKdvNND`o4WdE{x@tSl3Uwb6o%xPGIg5=(!0-HSGr3Q!cLi zfZzj0HEjY#f?T&m07MT4EP*bXU{urZpjeQL>jD7X!B70g$Jy#_FVc-6t<<~V-(1=n M`WK7;ym9CM05wk3iU0rr literal 0 HcmV?d00001 diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 174d3c9fe7..50d3253a38 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -10,7 +10,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 08/31/2017 +ms.date: 09/12/2017 --- # What's new in MDM enrollment and management @@ -956,7 +956,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s [VPNv2 CSP](vpnv2-csp.md) -

    Added DeviceTunnel profile in Windows 10, version 1709.

    +

    Added DeviceTunnel and RegisterDNS settings in Windows 10, version 1709.

    [DeviceStatus CSP](devicestatus-csp.md) @@ -1392,6 +1392,10 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware

    For examples, see section 4.3.1 RequestSecurityToken of the the MS-MDE2 protocol documentation.

    + +[VPNv2 CSP](vpnv2-csp.md) +

    Added RegisterDNS setting in Windows 10, version 1709.

    + diff --git a/windows/client-management/mdm/vpnv2-csp.md b/windows/client-management/mdm/vpnv2-csp.md index 05e8da9fa3..aa98ff54c0 100644 --- a/windows/client-management/mdm/vpnv2-csp.md +++ b/windows/client-management/mdm/vpnv2-csp.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 07/07/2017 +ms.date: 09/18/2017 --- # VPNv2 CSP @@ -35,7 +35,7 @@ The XSDs for all EAP methods are shipped in the box and can be found at the foll The following diagram shows the VPNv2 configuration service provider in tree format. -![vpnv2 csp diagram](images/provisioning-csp-vpnv2-rs1.png) +![vpnv2 csp diagram](images/provisioning-csp-vpnv2.png) **Device or User profile** For user profile, use **./User/Vendor/MSFT** path and for device profile, use **./Device/Vendor/MSFT** path. @@ -303,6 +303,14 @@ A device tunnel profile must be deleted before another device tunnel profile can Value type is bool. Supported operations include Get, Add, Replace, and Delete. +**VPNv2/***ProfileName***/RegisterDNS** +Allows registration of the connection's address in DNS. + +Valid values: + +- False = Do not register the connection's address in DNS (default). +- True = Register the connection's addresses in DNS. + **VPNv2/***ProfileName***/DnsSuffix** Optional. Specifies one or more comma separated DNS suffixes. The first in the list is also used as the primary connection specific DNS suffix for the VPN Interface. The entire list will also be added into the SuffixSearchList. diff --git a/windows/client-management/mdm/vpnv2-ddf-file.md b/windows/client-management/mdm/vpnv2-ddf-file.md index 1312ba1a63..3208f1111a 100644 --- a/windows/client-management/mdm/vpnv2-ddf-file.md +++ b/windows/client-management/mdm/vpnv2-ddf-file.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 07/07/2017 +ms.date: 09/18/2017 --- # VPNv2 DDF file @@ -992,6 +992,33 @@ The XML below is for Windows 10, version 1709. + + RegisterDNS + + + + + + + + + False = Do not register the connection's address in DNS (default). + True = Register the connection's addresses in DNS. + + + + + + + + + + + + text/plain + + + DnsSuffix From f794356249ccd53a19f0b42a0284d062fa18a3b6 Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Tue, 19 Sep 2017 14:39:19 -0700 Subject: [PATCH 132/146] updated publish date to actual --- browsers/edge/microsoft-edge-faq.md | 1 + 1 file changed, 1 insertion(+) diff --git a/browsers/edge/microsoft-edge-faq.md b/browsers/edge/microsoft-edge-faq.md index f24235f60d..bb633e1460 100644 --- a/browsers/edge/microsoft-edge-faq.md +++ b/browsers/edge/microsoft-edge-faq.md @@ -7,6 +7,7 @@ ms.prod: edge ms.mktglfcycl: general ms.sitesec: library ms.localizationpriority: high +ms.date: 09/07/2017 --- # Microsoft Edge - Frequently Asked Questions (FAQs) for IT Pros From ac254b778f579c4e17260ac3d81e413be1f69751 Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Tue, 19 Sep 2017 14:45:28 -0700 Subject: [PATCH 133/146] Adding FAQ document --- browsers/edge/change-history-for-microsoft-edge.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/browsers/edge/change-history-for-microsoft-edge.md b/browsers/edge/change-history-for-microsoft-edge.md index e3c6a0b2d7..83fb456c61 100644 --- a/browsers/edge/change-history-for-microsoft-edge.md +++ b/browsers/edge/change-history-for-microsoft-edge.md @@ -12,6 +12,11 @@ This topic lists new and updated topics in the Microsoft Edge documentation for For a detailed feature list of what's in the current Microsoft Edge releases, the Windows Insider Preview builds, and what was introduced in previous releases, see the [Microsoft Edge changelog](https://developer.microsoft.com/microsoft-edge/platform/changelog/). +## September 2017 +|New or changed topic | Description | +|---------------------|-------------| +|[Microsoft Edge - Frequently Asked Questions (FAQs) for IT Pros](microsoft-edge-faq.md) | New | + ## February 2017 |New or changed topic | Description | |----------------------|-------------| @@ -47,4 +52,4 @@ For a detailed feature list of what's in the current Microsoft Edge releases, th |New or changed topic | Description | |----------------------|-------------| -|[Available Policies for Microsoft Edge](available-policies.md) | Added new policies and the Supported versions column for Windows 10 Insider Preview. | \ No newline at end of file +|[Available Policies for Microsoft Edge](available-policies.md) | Added new policies and the Supported versions column for Windows 10 Insider Preview. | From 8db7b8587a92f214ee633b8fff87cc61dc13157f Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Tue, 19 Sep 2017 15:13:26 -0700 Subject: [PATCH 134/146] TEI link updates Updated the Total Economic Impact infographic link; added link and wording to full Forrester report --- browsers/edge/Index.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/browsers/edge/Index.md b/browsers/edge/Index.md index 77890240cb..5893fdf819 100644 --- a/browsers/edge/Index.md +++ b/browsers/edge/Index.md @@ -23,7 +23,7 @@ Microsoft Edge is the new, default web browser for Windows 10, helping you to e Microsoft Edge lets you stay up-to-date through the Windows Store and to manage your enterprise through Group Policy or your mobile device management (MDM) tools. >[!Note] ->For more info about the potential impact of using Microsoft Edge in a large organization, you can download an infographic from here: [Total Economic Impact of Microsoft Edge: Infographic](https://www.microsoft.com/en-us/download/details.aspx?id=53892). +>For more info about the potential impact of using Microsoft Edge in a large organization, you can download an infographic from here: [Total Economic Impact of Microsoft Edge: Infographic](https://www.microsoft.com/download/details.aspx?id=55956). For a detailed report that provides you with a framework to evaluate the potential financial impact of adopting Microsoft Edge within your organization, you can download the full study here: [Total Economic Impact of Microsoft Edge: Forrester Study](https://www.microsoft.com/download/details.aspx?id=55847). >Also, if you've arrived here looking for Internet Explorer 11 content, you'll need to go to the [Internet Explorer 11 (IE11)](https://docs.microsoft.com/en-us/internet-explorer/) area. @@ -59,7 +59,9 @@ You'll need to keep running them using IE11. If you don't have IE11 installed an ## Related topics -- [Total Economic Impact of Microsoft Edge: Infographic](https://www.microsoft.com/en-us/download/details.aspx?id=53892) +- [Total Economic Impact of Microsoft Edge: Infographic](https://www.microsoft.com/download/details.aspx?id=55956) + +- [Total Economic Impact of Microsoft Edge: Forrester Study](https://www.microsoft.com/download/details.aspx?id=55847) - [Download Internet Explorer 11](https://go.microsoft.com/fwlink/p/?linkid=290956) From 69eafe1073ddc64438b05681f301b9b999c7d6f7 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 19 Sep 2017 15:32:24 -0700 Subject: [PATCH 135/146] updates --- ...r-codes-windows-defender-advanced-threat-protection.md | 4 ++-- ...verview-windows-defender-advanced-threat-protection.md | 4 ++-- ...-status-windows-defender-advanced-threat-protection.md | 8 ++++---- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/event-error-codes-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/event-error-codes-windows-defender-advanced-threat-protection.md index 4200e50e85..f1ff28638b 100644 --- a/windows/threat-protection/windows-defender-atp/event-error-codes-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/event-error-codes-windows-defender-advanced-threat-protection.md @@ -29,14 +29,14 @@ ms.date: 09/05/2017 You can review event IDs in the [Event Viewer](https://msdn.microsoft.com/library/aa745633(v=bts.10).aspx) on individual endpoints. -For example, if endpoints are not appearing in the **Machines list** list, you might need to look for event IDs on the endpoints. You can then use this table to determine further troubleshooting steps. +For example, if endpoints are not appearing in the **Machines list**, you might need to look for event IDs on the endpoints. You can then use this table to determine further troubleshooting steps. > [!NOTE] > It can take several days for endpoints to begin reporting to the Windows Defender ATP service. **Open Event Viewer and find the Windows Defender ATP service event log:** -1. Click **Start**, type **Event Viewer**, and press **Enter**. +1. Click **Start** on the Windows menu, type **Event Viewer**, and press **Enter**. 2. In the log list, under **Log Summary**, scroll until you see **Microsoft-Windows-SENSE/Operational**. Double-click the item to open the log. diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index 9e98297388..5d510f2eb6 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -30,7 +30,7 @@ Enterprise security teams can use the Windows Defender ATP portal to monitor and You can use the [Windows Defender ATP portal](https://securitycenter.windows.com/) to: - View, sort, and triage alerts from your endpoints - Search for more information on observed indicators such as files and IP Addresses -- Change Windows Defender ATP settings, including time zone and licensing information. +- Change Windows Defender ATP settings, including time zone and review licensing information. ## Windows Defender ATP portal When you open the portal, you’ll see the main areas of the application: @@ -54,7 +54,7 @@ Area | Description **Alerts queue** | Enables you to view separate queues of new, in progress, resolved alerts, alerts assigned to you, and suppression rules. **Machines list** | Displays the list of machines that are onboarded to Windows Defender ATP, some information about them, and the corresponding number of alerts. **Service health** | Provides information on the current status of the Window Defender ATP service. You'll be able to verify that the service health is healthy or if there are current issues. -**Preferences setup** | Shows the settings you selected during onboarding and lets you update your industry preferences and retention policy period. You can also set email notifications, activate the preview experience, and enable or turn off advanced features. +**Preferences setup** | Shows the settings you selected during onboarding and lets you update your industry preferences and retention policy period. You can also set email notifications, activate the preview experience, enable or turn off advanced features, and build Power BI reports. **Endpoint management** | Allows you to download the onboarding configuration package. It provides access to endpoint offboarding. (3) Main portal| Main area where you will see the different views such as the Dashboards, Alerts queue, and Machines list. diff --git a/windows/threat-protection/windows-defender-atp/service-status-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/service-status-windows-defender-advanced-threat-protection.md index aed38dc020..67b2520eea 100644 --- a/windows/threat-protection/windows-defender-atp/service-status-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/service-status-windows-defender-advanced-threat-protection.md @@ -1,7 +1,7 @@ --- title: Check the Windows Defender ATP service health description: Check Windows Defender ATP service health, see if the service is experiencing issues and review previous issues that have been resolved. -keywords: dashboard, service, issues, service health, current issues, status history, summary of impact, preliminary root cause, resolution, resolution time, expected resolution time +keywords: dashboard, service, issues, service health, current status, status history, summary of impact, preliminary root cause, resolution, resolution time, expected resolution time search.product: eADQiWindows 10XVcnh ms.prod: w10 ms.mktglfcycl: deploy @@ -33,11 +33,11 @@ You can view details on the service health by clicking the tile from the **Secur The **Service health** details page has the following tabs: -- **Current issues** +- **Current status** - **Status history** -## Current issues -The **Current issues** tab shows the current state of the Windows Defender ATP service. When the service is running smoothly a healthy service health is shown. If there are issues seen, the following service details are shown to help you gain better insight about the issue: +## Current status +The **Current status** tab shows the current state of the Windows Defender ATP service. When the service is running smoothly a healthy service health is shown. If there are issues seen, the following service details are shown to help you gain better insight about the issue: - Date and time for when the issue was detected - A short description of the issue From 2802081f69c8be4f1a65676c63449fb9d5f8dc6c Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 19 Sep 2017 16:11:41 -0700 Subject: [PATCH 136/146] update organize alerts queue --- ...-windows-defender-advanced-threat-protection.md | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md index 4fa77ae8f4..70660d58f9 100644 --- a/windows/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md @@ -37,7 +37,7 @@ Use the Machines list in these main scenarios: ## Sort, filter, and download the list of machines from the Machines list You can sort the **Machines list** by clicking on any column header to sort the view in ascending or descending order. -Filter the **Machines list** by time period, **OS Platform**, **Health**, **Security state**, **Malware category alerts**, or **Groups** to focus on certain sets of machines, according to the desired criteria. +Filter the **Machines list** by **Time**, **OS Platform**, **Health**, **Security state**, **Malware category alerts**, **Groups**, or **Tags** to focus on certain sets of machines, according to the desired criteria. You can also download the entire list in CSV format using the **Export to CSV** feature. @@ -78,7 +78,15 @@ Filter the list to view specific machines grouped together by the following mach - **Inactive** – Machines that have completely stopped sending signals for more than 7 days. -**Malware category**
    +**Security state**
    +Filter the list to view specific machines that are well configured or require attention based on the Windows Defender security controls that are enabled in your organization. + + +- **Well configured** - Machines have the Windows Defender security controls well configured. +- **Requires attention** - Machines where improvements can be made to increase the overall security posture of your organization. + + +**Malware category alerts**
    Filter the list to view specific machines grouped together by the following malware categories: - **Ransomware** – Ransomware use common methods to encrypt files using keys that are known only to attackers. As a result, victims are unable to access the contents of the encrypted files. Most ransomware display or drop a ransom note—an image or an HTML file that contains information about how to obtain the attacker-supplied decryption tool for a fee. - **Credential theft** – Spying tools, whether commercially available or solely used for unauthorized purposes, include general purpose spyware, monitoring software, hacking programs, and password stealers. @@ -88,6 +96,8 @@ Filter the list to view specific machines grouped together by the following malw - **General malware** – Malware are malicious programs that perform unwanted actions, including actions that can disrupt, cause direct damage, and facilitate intrusion and data theft. Some malware can replicate and spread from one machine to another. Others are able to receive commands from remote attackers and perform activities associated with cyberattacks. - **PUA** – Unwanted software is a category of applications that install and perform undesirable activity without adequate user consent. These applications are not necessarily malicious, but their behaviors often negatively impact the computing experience, even appearing to invade user privacy. Many of these applications display advertising, modify browser settings, and install bundled software. +## Groups and tags +You can filter the list based on the grouping and tagging that you've added to individual machines. For more information, see [Manage machine group and tags](respond-machine-alerts-windows-defender-advanced-threat-protection.md#manage-machine-group-and-tags). ## Export machine list to CSV You can download a full list of all the machines in your organization, in CSV format. Click the **Export to CSV** button to download the entire list as a CSV file. From 31a37c871954b6699ce34e2f42c48b353accbb93 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 19 Sep 2017 23:29:39 +0000 Subject: [PATCH 137/146] Merged PR 3285: changed logon to sign on changed logon to sign on --- windows/deployment/usmt/usmt-common-issues.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/usmt/usmt-common-issues.md b/windows/deployment/usmt/usmt-common-issues.md index 9613e7592c..7213b01b6c 100644 --- a/windows/deployment/usmt/usmt-common-issues.md +++ b/windows/deployment/usmt/usmt-common-issues.md @@ -245,7 +245,7 @@ There are three typical causes for this issue. Import-StartLayout –LayoutPath "C:\Layout\user1.xml" –MountPath %systemdrive% ``` -This workaround changed the Default user's Start layout. The workaround does not scale to a mass migrations or multiuser devices, but it can potentially unblock some scenarios. If other users will logon to the device you should delete layoutmodification.xml from the Default user profile. Otherwise all users who logon to that device will get the imported Start layout. +This workaround changes the Default user's Start layout. The workaround does not scale to a mass migrations or multiuser devices, but it can potentially unblock some scenarios. If other users will sign on to the device you should delete layoutmodification.xml from the Default user profile. Otherwise, all users who sign on to that device will use the imported Start layout. ## Offline Migration Problems From 769370d540beaddc8d8b4501b5a85b7db94f61da Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 20 Sep 2017 14:05:03 +0000 Subject: [PATCH 138/146] Merged PR 3298: Add link to Spotlight policies --- windows/configuration/manage-tips-and-suggestions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/manage-tips-and-suggestions.md b/windows/configuration/manage-tips-and-suggestions.md index 4485b5e7e7..39f2e28ac0 100644 --- a/windows/configuration/manage-tips-and-suggestions.md +++ b/windows/configuration/manage-tips-and-suggestions.md @@ -44,7 +44,7 @@ Windows 10, version 1607 (also known as the Anniversary Update), provides organi | Windows 10 Pro Education | Yes (default) | Yes | No (setting cannot be changed) | | Windows 10 Education | Yes (default) | Yes | No (setting cannot be changed) | - +[Learn more about policy settings for Windows Spotlight.](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight) ## Related topics From 19a12d75b0f1d23dfe42ea4e764d9159b477f434 Mon Sep 17 00:00:00 2001 From: Jimmie Lightner Date: Wed, 20 Sep 2017 10:57:19 -0400 Subject: [PATCH 139/146] Update hello-planning-guide.md Corrected typographical errors within Trust Type section. --- .../hello-for-business/hello-planning-guide.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/access-protection/hello-for-business/hello-planning-guide.md b/windows/access-protection/hello-for-business/hello-planning-guide.md index 54739d877a..1e51ed414b 100644 --- a/windows/access-protection/hello-for-business/hello-planning-guide.md +++ b/windows/access-protection/hello-for-business/hello-planning-guide.md @@ -160,9 +160,9 @@ If your organization does not have cloud resources, write **On-Premises** in box Choose a trust type that is best suited for your organizations. Remember, the trust type determines two things. Whether you issue authentication certificates to your users and if your deployment needs Windows Server 2016 domain controllers. -One trust model is not more secure than the other. The major difference is based on the organization comfort with deploying Windows Server 2016 domain controllers and not enrolling users with end enetity certificates (key-trust) against using existing domain controllers (Windows Server 2008R2 or later) and needing to enroll certificates for all their users (certificate trust). +One trust model is not more secure than the other. The major difference is based on the organization comfort with deploying Windows Server 2016 domain controllers and not enrolling users with end entity certificates (key-trust) against using existing domain controllers (Windows Server 2008R2 or later) and needing to enroll certificates for all their users (certificate trust). -Because the certificate trust tyoes issues certificates, there is more configuration and infrastrucutre needed to accomodate user certificate enrollment, which could also be a factor to consider in your decision. Additional infrastructure needed for certificatat-trust deployements includes a certificate registration authority. Hybrid Azure AD joined devices managed by Group Policy need the Windows Server 2016 AD FS role to issue certificates. Hybrid Azure AD joined devices and Azure AD joined devices managed by Intune or a compatible MDM need the Windows Server NDES server role to issue certificates. +Because the certificate trust types issues certificates, there is more configuration and infrastructure needed to accomodate user certificate enrollment, which could also be a factor to consider in your decision. Additional infrastructure needed for certificate-trust deployements includes a certificate registration authority. Hybrid Azure AD joined devices managed by Group Policy need the Windows Server 2016 AD FS role to issue certificates. Hybrid Azure AD joined devices and Azure AD joined devices managed by Intune or a compatible MDM need the Windows Server NDES server role to issue certificates. If your organization wants to use the key trust type, write **key trust** in box **1b** on your planning worksheet. Write **Windows Server 2016** in box **4d**. Write **N/A** in box **5b**. @@ -320,4 +320,4 @@ If boxes **2a** or **2b** read **modern management** and you want devices to aut ## Congratulations, You’re Done -Your Windows Hello for Business planning worksheet should be complete. This guide provided understanding of the components used in the Windows Hello for Business infrastructure and rationalization of why they are used. The worksheet gives you an overview of the requirements needed to continue the next phase of the deployment. With this worksheet, you’ll be able to identify key elements of your Windows Hello for Business deployment. \ No newline at end of file +Your Windows Hello for Business planning worksheet should be complete. This guide provided understanding of the components used in the Windows Hello for Business infrastructure and rationalization of why they are used. The worksheet gives you an overview of the requirements needed to continue the next phase of the deployment. With this worksheet, you’ll be able to identify key elements of your Windows Hello for Business deployment. From ea35f3d24cc5d571bb295974dd57b6f9f4194251 Mon Sep 17 00:00:00 2001 From: nevedita Date: Wed, 20 Sep 2017 10:13:13 -0700 Subject: [PATCH 140/146] Update upgrade-readiness-get-started.md --- windows/deployment/upgrade/upgrade-readiness-get-started.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index 29a27310e4..ff117afd8d 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -84,9 +84,9 @@ To enable data sharing, whitelist the following endpoints. Note that you may nee | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -| `https://v10.vortex-win.data.microsoft.com/collect/v1`
    `https://Vortex-win.data.microsoft.com/health/keepalive` | Connected User Experience and Telemetry component endpoint. User computers send data to Microsoft through this endpoint. | -| `https://settings.data.microsoft.com/qos` | Enables the compatibility update KB to send data to Microsoft. | -| `https://go.microsoft.com/fwlink/?LinkID=544713`
    `https://compatexchange1.trafficmanager.net/CompatibilityExchangeService.svc` | This service provides driver information about whether there will be a driver available post-upgrade for the hardware on the system. | +| `https://v10.vortex-win.data.microsoft.com` | For Windows 10, Connected User Experience and Telemetry component endpoint. User computers send data to Microsoft through this endpoint. +| `https://Vortex-win.data.microsoft.com` | For OS versions lower than Windows 10, Connected User Experience and Telemetry component endpoint. +| `https://settings.data.microsoft.com` | Enables the compatibility update KB to send data to Microsoft. | Note: The compatibility update KB runs under the computer’s system account. From 5894c31bd977ba9eb970f7db761d2ba1c0111cc2 Mon Sep 17 00:00:00 2001 From: Andrew Childs Date: Wed, 20 Sep 2017 13:37:32 -0500 Subject: [PATCH 141/146] Update waas-delivery-optimization.md --- windows/deployment/update/waas-delivery-optimization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index 2b77126ecf..be0f75a719 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -21,7 +21,7 @@ ms.date: 07/27/2017 Delivery Optimization is a self-organizing distributed cache solution for businesses looking to reduce bandwidth consumption for operating system updates, operating system upgrades, and applications by allowing clients to download those elements from alternate sources (such as other peers on the network) in addition to the traditional Internet-based Windows Update servers. You can use Delivery Optimization in conjunction with stand-alone Windows Update, Windows Server Update Services (WSUS), and Windows Update for Business. This functionality is similar to BranchCache in other systems, such as System Center Configuration Manager. -Delivery Optimization is a cloud managed solution. Having access to the Delivery Optimization cloud services, is a requirement for it to be enabled. This mean that in order to utilize the peer-to-peer functionality of Delivery Optimization, machines need to have access to the internet. +Delivery Optimization is a cloud managed solution. Having access to the Delivery Optimization cloud services, is a requirement for it to be enabled. This means that in order to utilize the peer-to-peer functionality of Delivery Optimization, machines need to have access to the internet. For more details, see [Download mode](#download-mode). From ad70a71fd4819cc8bc501c8373bb652c2b47d1ac Mon Sep 17 00:00:00 2001 From: John Tobin Date: Wed, 20 Sep 2017 12:06:04 -0700 Subject: [PATCH 142/146] Add 'Windows Server' to Applies to: in Applocker topics. --- ...dd-rules-for-packaged-apps-to-existing-applocker-rule-set.md | 2 +- windows/device-security/applocker/administer-applocker.md | 2 +- .../applocker/applocker-architecture-and-components.md | 2 +- windows/device-security/applocker/applocker-functions.md | 2 +- windows/device-security/applocker/applocker-overview.md | 2 +- .../applocker/applocker-policies-deployment-guide.md | 2 +- .../applocker/applocker-policies-design-guide.md | 2 +- .../device-security/applocker/applocker-policy-use-scenarios.md | 2 +- .../applocker/applocker-processes-and-interactions.md | 2 +- windows/device-security/applocker/applocker-settings.md | 2 +- .../device-security/applocker/applocker-technical-reference.md | 2 +- .../applocker/configure-an-applocker-policy-for-audit-only.md | 2 +- .../configure-an-applocker-policy-for-enforce-rules.md | 2 +- .../applocker/configure-exceptions-for-an-applocker-rule.md | 2 +- .../applocker/configure-the-appLocker-reference-device.md | 2 +- .../applocker/configure-the-application-identity-service.md | 2 +- .../applocker/create-a-rule-for-packaged-apps.md | 2 +- .../applocker/create-a-rule-that-uses-a-file-hash-condition.md | 2 +- .../applocker/create-a-rule-that-uses-a-path-condition.md | 2 +- .../applocker/create-a-rule-that-uses-a-publisher-condition.md | 2 +- .../device-security/applocker/create-applocker-default-rules.md | 2 +- ...eate-list-of-applications-deployed-to-each-business-group.md | 2 +- .../applocker/create-your-applocker-planning-document.md | 2 +- .../device-security/applocker/create-your-applocker-policies.md | 2 +- .../device-security/applocker/create-your-applocker-rules.md | 2 +- windows/device-security/applocker/delete-an-applocker-rule.md | 2 +- ...loy-applocker-policies-by-using-the-enforce-rules-setting.md | 2 +- .../applocker/deploy-the-applocker-policy-into-production.md | 2 +- .../determine-group-policy-structure-and-rule-enforcement.md | 2 +- ...applications-are-digitally-signed-on-a-reference-computer.md | 2 +- .../applocker/determine-your-application-control-objectives.md | 2 +- ...m-url-message-when-users-try-to-run-a-blocked-application.md | 2 +- windows/device-security/applocker/dll-rules-in-applocker.md | 2 +- ...ent-group-policy-structure-and-applocker-rule-enforcement.md | 2 +- .../document-your-application-control-management-processes.md | 2 +- .../device-security/applocker/document-your-application-list.md | 2 +- .../device-security/applocker/document-your-applocker-rules.md | 2 +- windows/device-security/applocker/edit-an-applocker-policy.md | 2 +- windows/device-security/applocker/edit-applocker-rules.md | 2 +- .../device-security/applocker/enable-the-dll-rule-collection.md | 2 +- windows/device-security/applocker/enforce-applocker-rules.md | 2 +- .../device-security/applocker/executable-rules-in-applocker.md | 2 +- .../applocker/export-an-applocker-policy-from-a-gpo.md | 2 +- .../applocker/export-an-applocker-policy-to-an-xml-file.md | 2 +- .../device-security/applocker/how-applocker-works-techref.md | 2 +- .../import-an-applocker-policy-from-another-computer.md | 2 +- .../applocker/import-an-applocker-policy-into-a-gpo.md | 2 +- .../device-security/applocker/maintain-applocker-policies.md | 2 +- .../applocker/manage-packaged-apps-with-applocker.md | 2 +- .../merge-applocker-policies-by-using-set-applockerpolicy.md | 2 +- .../applocker/merge-applocker-policies-manually.md | 2 +- .../applocker/monitor-application-usage-with-applocker.md | 2 +- .../device-security/applocker/optimize-applocker-performance.md | 2 +- ...ckaged-apps-and-packaged-app-installer-rules-in-applocker.md | 2 +- .../applocker/plan-for-applocker-policy-management.md | 2 +- .../device-security/applocker/refresh-an-applocker-policy.md | 2 +- .../applocker/requirements-for-deploying-applocker-policies.md | 2 +- .../device-security/applocker/requirements-to-use-applocker.md | 2 +- .../applocker/run-the-automatically-generate-rules-wizard.md | 2 +- windows/device-security/applocker/script-rules-in-applocker.md | 2 +- .../applocker/security-considerations-for-applocker.md | 2 +- .../applocker/select-types-of-rules-to-create.md | 2 +- .../test-an-applocker-policy-by-using-test-applockerpolicy.md | 2 +- .../applocker/test-and-update-an-applocker-policy.md | 2 +- .../device-security/applocker/tools-to-use-with-applocker.md | 2 +- .../applocker/understand-applocker-enforcement-settings.md | 2 +- .../applocker/understand-applocker-policy-design-decisions.md | 2 +- ...rules-and-enforcement-setting-inheritance-in-group-policy.md | 2 +- .../understand-the-applocker-policy-deployment-process.md | 2 +- .../understanding-applocker-allow-and-deny-actions-on-rules.md | 2 +- .../applocker/understanding-applocker-default-rules.md | 2 +- .../applocker/understanding-applocker-rule-behavior.md | 2 +- .../applocker/understanding-applocker-rule-collections.md | 2 +- .../applocker/understanding-applocker-rule-condition-types.md | 2 +- .../applocker/understanding-applocker-rule-exceptions.md | 2 +- .../understanding-the-file-hash-rule-condition-in-applocker.md | 2 +- .../understanding-the-path-rule-condition-in-applocker.md | 2 +- .../understanding-the-publisher-rule-condition-in-applocker.md | 2 +- ...erence-computer-to-create-and-maintain-applocker-policies.md | 2 +- ...cker-and-software-restriction-policies-in-the-same-domain.md | 2 +- .../applocker/use-the-applocker-windows-powershell-cmdlets.md | 2 +- .../applocker/using-event-viewer-with-applocker.md | 2 +- ...sing-software-restriction-policies-and-applocker-policies.md | 2 +- windows/device-security/applocker/what-is-applocker.md | 2 +- .../applocker/windows-installer-rules-in-applocker.md | 2 +- .../applocker/working-with-applocker-policies.md | 2 +- .../device-security/applocker/working-with-applocker-rules.md | 2 +- 87 files changed, 87 insertions(+), 87 deletions(-) diff --git a/windows/device-security/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md b/windows/device-security/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md index d99dda899b..6c8f2abbdb 100644 --- a/windows/device-security/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md +++ b/windows/device-security/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md @@ -12,7 +12,7 @@ author: brianlic-msft # Add rules for packaged apps to existing AppLocker rule-set **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes how to update your existing AppLocker policies for packaged apps using the Remote Server Administration Toolkit (RSAT). diff --git a/windows/device-security/applocker/administer-applocker.md b/windows/device-security/applocker/administer-applocker.md index 0940acac92..272f72a63c 100644 --- a/windows/device-security/applocker/administer-applocker.md +++ b/windows/device-security/applocker/administer-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Administer AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals provides links to specific procedures to use when administering AppLocker policies. diff --git a/windows/device-security/applocker/applocker-architecture-and-components.md b/windows/device-security/applocker/applocker-architecture-and-components.md index 98760516ec..42be5ee97c 100644 --- a/windows/device-security/applocker/applocker-architecture-and-components.md +++ b/windows/device-security/applocker/applocker-architecture-and-components.md @@ -12,7 +12,7 @@ author: brianlic-msft # AppLocker architecture and components **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professional describes AppLocker’s basic architecture and its major components. diff --git a/windows/device-security/applocker/applocker-functions.md b/windows/device-security/applocker/applocker-functions.md index cd1534c55b..99415f1eaf 100644 --- a/windows/device-security/applocker/applocker-functions.md +++ b/windows/device-security/applocker/applocker-functions.md @@ -12,7 +12,7 @@ author: brianlic-msft # AppLocker functions **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional lists the functions and security levels for the Software Restriction Policies (SRP) and AppLocker features. diff --git a/windows/device-security/applocker/applocker-overview.md b/windows/device-security/applocker/applocker-overview.md index 1d4fe3bc2f..0a6b22a5f9 100644 --- a/windows/device-security/applocker/applocker-overview.md +++ b/windows/device-security/applocker/applocker-overview.md @@ -13,7 +13,7 @@ author: brianlic-msft # AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic provides a description of AppLocker and can help you decide if your organization can benefit from deploying AppLocker application control policies. AppLocker helps you control which apps and files users can run. These include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers. diff --git a/windows/device-security/applocker/applocker-policies-deployment-guide.md b/windows/device-security/applocker/applocker-policies-deployment-guide.md index 2adc3ff79b..30c4d82dde 100644 --- a/windows/device-security/applocker/applocker-policies-deployment-guide.md +++ b/windows/device-security/applocker/applocker-policies-deployment-guide.md @@ -13,7 +13,7 @@ author: brianlic-msft # AppLocker deployment guide **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals introduces the concepts and describes the steps required to deploy AppLocker policies. diff --git a/windows/device-security/applocker/applocker-policies-design-guide.md b/windows/device-security/applocker/applocker-policies-design-guide.md index 2e331c4fb8..1c1cd1ba6d 100644 --- a/windows/device-security/applocker/applocker-policies-design-guide.md +++ b/windows/device-security/applocker/applocker-policies-design-guide.md @@ -12,7 +12,7 @@ author: brianlic-msft # AppLocker design guide **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional introduces the design and planning steps required to deploy application control policies by using AppLocker. diff --git a/windows/device-security/applocker/applocker-policy-use-scenarios.md b/windows/device-security/applocker/applocker-policy-use-scenarios.md index 64a8fd4db0..eef1bf2c06 100644 --- a/windows/device-security/applocker/applocker-policy-use-scenarios.md +++ b/windows/device-security/applocker/applocker-policy-use-scenarios.md @@ -12,7 +12,7 @@ author: brianlic-msft # AppLocker policy use scenarios **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional lists the various application control scenarios in which AppLocker policies can be effectively implemented. diff --git a/windows/device-security/applocker/applocker-processes-and-interactions.md b/windows/device-security/applocker/applocker-processes-and-interactions.md index 5f07c7d07f..1033ab82a5 100644 --- a/windows/device-security/applocker/applocker-processes-and-interactions.md +++ b/windows/device-security/applocker/applocker-processes-and-interactions.md @@ -12,7 +12,7 @@ author: brianlic-msft # AppLocker processes and interactions **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes the process dependencies and interactions when AppLocker evaluates and enforces rules. diff --git a/windows/device-security/applocker/applocker-settings.md b/windows/device-security/applocker/applocker-settings.md index 7af2350b9d..ac98e03d69 100644 --- a/windows/device-security/applocker/applocker-settings.md +++ b/windows/device-security/applocker/applocker-settings.md @@ -12,7 +12,7 @@ author: brianlic-msft # AppLocker settings **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional lists the settings used by AppLocker. diff --git a/windows/device-security/applocker/applocker-technical-reference.md b/windows/device-security/applocker/applocker-technical-reference.md index 1c797a1679..e4c4bdc812 100644 --- a/windows/device-security/applocker/applocker-technical-reference.md +++ b/windows/device-security/applocker/applocker-technical-reference.md @@ -12,7 +12,7 @@ author: brianlic-msft # AppLocker technical reference **Applies to** -- Windows 10 + - Windows 10, Windows Server This overview topic for IT professionals provides links to the topics in the technical reference. AppLocker advances the application control features and functionality of Software Restriction Policies. AppLocker contains new capabilities and extensions that allow you to create rules to allow or deny apps from running based on unique identities of files and to specify which users or groups can run those apps. diff --git a/windows/device-security/applocker/configure-an-applocker-policy-for-audit-only.md b/windows/device-security/applocker/configure-an-applocker-policy-for-audit-only.md index 206c0415fe..9a62af7582 100644 --- a/windows/device-security/applocker/configure-an-applocker-policy-for-audit-only.md +++ b/windows/device-security/applocker/configure-an-applocker-policy-for-audit-only.md @@ -12,7 +12,7 @@ author: brianlic-msft # Configure an AppLocker policy for audit only **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes how to set AppLocker policies to **Audit only** within your IT environment by using AppLocker. diff --git a/windows/device-security/applocker/configure-an-applocker-policy-for-enforce-rules.md b/windows/device-security/applocker/configure-an-applocker-policy-for-enforce-rules.md index 55e87ba39a..5aa6a35a4e 100644 --- a/windows/device-security/applocker/configure-an-applocker-policy-for-enforce-rules.md +++ b/windows/device-security/applocker/configure-an-applocker-policy-for-enforce-rules.md @@ -12,7 +12,7 @@ author: brianlic-msft # Configure an AppLocker policy for enforce rules **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting. diff --git a/windows/device-security/applocker/configure-exceptions-for-an-applocker-rule.md b/windows/device-security/applocker/configure-exceptions-for-an-applocker-rule.md index be96e323ed..5e14d179d9 100644 --- a/windows/device-security/applocker/configure-exceptions-for-an-applocker-rule.md +++ b/windows/device-security/applocker/configure-exceptions-for-an-applocker-rule.md @@ -12,7 +12,7 @@ author: brianlic-msft # Add exceptions for an AppLocker rule **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule. diff --git a/windows/device-security/applocker/configure-the-appLocker-reference-device.md b/windows/device-security/applocker/configure-the-appLocker-reference-device.md index 97d6fd1361..194f592497 100644 --- a/windows/device-security/applocker/configure-the-appLocker-reference-device.md +++ b/windows/device-security/applocker/configure-the-appLocker-reference-device.md @@ -12,7 +12,7 @@ author: brianlic-msft # Configure the AppLocker reference device **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer. diff --git a/windows/device-security/applocker/configure-the-application-identity-service.md b/windows/device-security/applocker/configure-the-application-identity-service.md index 84a1d64b98..15d59c69cb 100644 --- a/windows/device-security/applocker/configure-the-application-identity-service.md +++ b/windows/device-security/applocker/configure-the-application-identity-service.md @@ -12,7 +12,7 @@ author: brianlic-msft # Configure the Application Identity service **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually. diff --git a/windows/device-security/applocker/create-a-rule-for-packaged-apps.md b/windows/device-security/applocker/create-a-rule-for-packaged-apps.md index f0ed699e79..11bb5d4239 100644 --- a/windows/device-security/applocker/create-a-rule-for-packaged-apps.md +++ b/windows/device-security/applocker/create-a-rule-for-packaged-apps.md @@ -12,7 +12,7 @@ author: brianlic-msft # Create a rule for packaged apps **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition. diff --git a/windows/device-security/applocker/create-a-rule-that-uses-a-file-hash-condition.md b/windows/device-security/applocker/create-a-rule-that-uses-a-file-hash-condition.md index 4a1038f165..609c4c830b 100644 --- a/windows/device-security/applocker/create-a-rule-that-uses-a-file-hash-condition.md +++ b/windows/device-security/applocker/create-a-rule-that-uses-a-file-hash-condition.md @@ -12,7 +12,7 @@ author: brianlic-msft # Create a rule that uses a file hash condition **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals shows how to create an AppLocker rule with a file hash condition. diff --git a/windows/device-security/applocker/create-a-rule-that-uses-a-path-condition.md b/windows/device-security/applocker/create-a-rule-that-uses-a-path-condition.md index 89a34500cd..717f391824 100644 --- a/windows/device-security/applocker/create-a-rule-that-uses-a-path-condition.md +++ b/windows/device-security/applocker/create-a-rule-that-uses-a-path-condition.md @@ -12,7 +12,7 @@ author: brianlic-msft # Create a rule that uses a path condition **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals shows how to create an AppLocker rule with a path condition. diff --git a/windows/device-security/applocker/create-a-rule-that-uses-a-publisher-condition.md b/windows/device-security/applocker/create-a-rule-that-uses-a-publisher-condition.md index 214dca0f70..05fe731282 100644 --- a/windows/device-security/applocker/create-a-rule-that-uses-a-publisher-condition.md +++ b/windows/device-security/applocker/create-a-rule-that-uses-a-publisher-condition.md @@ -12,7 +12,7 @@ author: brianlic-msft # Create a rule that uses a publisher condition **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals shows how to create an AppLocker rule with a publisher condition. diff --git a/windows/device-security/applocker/create-applocker-default-rules.md b/windows/device-security/applocker/create-applocker-default-rules.md index 6f5b802707..eaa3383a9a 100644 --- a/windows/device-security/applocker/create-applocker-default-rules.md +++ b/windows/device-security/applocker/create-applocker-default-rules.md @@ -12,7 +12,7 @@ author: brianlic-msft # Create AppLocker default rules **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run. diff --git a/windows/device-security/applocker/create-list-of-applications-deployed-to-each-business-group.md b/windows/device-security/applocker/create-list-of-applications-deployed-to-each-business-group.md index ef423697d1..385bbd2dbb 100644 --- a/windows/device-security/applocker/create-list-of-applications-deployed-to-each-business-group.md +++ b/windows/device-security/applocker/create-list-of-applications-deployed-to-each-business-group.md @@ -12,7 +12,7 @@ author: brianlic-msft # Create a list of apps deployed to each business group **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes the process of gathering app usage requirements from each business group in order to implement application control policies by using AppLocker. diff --git a/windows/device-security/applocker/create-your-applocker-planning-document.md b/windows/device-security/applocker/create-your-applocker-planning-document.md index f2b23f5937..8a6db372a5 100644 --- a/windows/device-security/applocker/create-your-applocker-planning-document.md +++ b/windows/device-security/applocker/create-your-applocker-planning-document.md @@ -13,7 +13,7 @@ author: brianlic-msft **Applies to** -- Windows 10 + - Windows 10, Windows Server This planning topic for the IT professional summarizes the information you need to research and include in your AppLocker planning document. diff --git a/windows/device-security/applocker/create-your-applocker-policies.md b/windows/device-security/applocker/create-your-applocker-policies.md index e4ecc44cee..78111b2bdd 100644 --- a/windows/device-security/applocker/create-your-applocker-policies.md +++ b/windows/device-security/applocker/create-your-applocker-policies.md @@ -12,7 +12,7 @@ author: brianlic-msft # Create Your AppLocker policies **Applies to** -- Windows 10 + - Windows 10, Windows Server This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment. diff --git a/windows/device-security/applocker/create-your-applocker-rules.md b/windows/device-security/applocker/create-your-applocker-rules.md index 8bcb7daf24..eb9fd9b18b 100644 --- a/windows/device-security/applocker/create-your-applocker-rules.md +++ b/windows/device-security/applocker/create-your-applocker-rules.md @@ -12,7 +12,7 @@ author: brianlic-msft # Create Your AppLocker rules **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules. diff --git a/windows/device-security/applocker/delete-an-applocker-rule.md b/windows/device-security/applocker/delete-an-applocker-rule.md index 4f50ad433f..831f60e90f 100644 --- a/windows/device-security/applocker/delete-an-applocker-rule.md +++ b/windows/device-security/applocker/delete-an-applocker-rule.md @@ -12,7 +12,7 @@ author: brianlic-msft # Delete an AppLocker rule **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to delete an AppLocker rule. diff --git a/windows/device-security/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md b/windows/device-security/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md index 0e2faeb18c..ee13928b04 100644 --- a/windows/device-security/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md +++ b/windows/device-security/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md @@ -13,7 +13,7 @@ author: brianlic-msft # Deploy AppLocker policies by using the enforce rules setting **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method. diff --git a/windows/device-security/applocker/deploy-the-applocker-policy-into-production.md b/windows/device-security/applocker/deploy-the-applocker-policy-into-production.md index e56061213f..02c1e5d17c 100644 --- a/windows/device-security/applocker/deploy-the-applocker-policy-into-production.md +++ b/windows/device-security/applocker/deploy-the-applocker-policy-into-production.md @@ -12,7 +12,7 @@ author: brianlic-msft # Deploy the AppLocker policy into production **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings. diff --git a/windows/device-security/applocker/determine-group-policy-structure-and-rule-enforcement.md b/windows/device-security/applocker/determine-group-policy-structure-and-rule-enforcement.md index 1544475c03..c17b01a384 100644 --- a/windows/device-security/applocker/determine-group-policy-structure-and-rule-enforcement.md +++ b/windows/device-security/applocker/determine-group-policy-structure-and-rule-enforcement.md @@ -12,7 +12,7 @@ author: brianlic-msft # Determine the Group Policy structure and rule enforcement **Applies to** -- Windows 10 + - Windows 10, Windows Server This overview topic describes the process to follow when you are planning to deploy AppLocker rules. diff --git a/windows/device-security/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md b/windows/device-security/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md index ccf2483c4d..25397d03ec 100644 --- a/windows/device-security/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md +++ b/windows/device-security/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md @@ -12,7 +12,7 @@ author: brianlic-msft # Determine which apps are digitally signed on a reference device **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed. diff --git a/windows/device-security/applocker/determine-your-application-control-objectives.md b/windows/device-security/applocker/determine-your-application-control-objectives.md index a74a000710..8ee842666d 100644 --- a/windows/device-security/applocker/determine-your-application-control-objectives.md +++ b/windows/device-security/applocker/determine-your-application-control-objectives.md @@ -12,7 +12,7 @@ author: brianlic-msft # Determine your application control objectives **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic helps you with the decisions you need to make to determine what applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker. diff --git a/windows/device-security/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md b/windows/device-security/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md index 85c56528b1..adeda204f6 100644 --- a/windows/device-security/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md +++ b/windows/device-security/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md @@ -12,7 +12,7 @@ author: brianlic-msft # Display a custom URL message when users try to run a blocked app **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app. diff --git a/windows/device-security/applocker/dll-rules-in-applocker.md b/windows/device-security/applocker/dll-rules-in-applocker.md index b6e4cd9e93..15d05e29b5 100644 --- a/windows/device-security/applocker/dll-rules-in-applocker.md +++ b/windows/device-security/applocker/dll-rules-in-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # DLL rules in AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes the file formats and available default rules for the DLL rule collection. diff --git a/windows/device-security/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md b/windows/device-security/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md index 72c1c10193..fb5486fa1f 100644 --- a/windows/device-security/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md +++ b/windows/device-security/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md @@ -12,7 +12,7 @@ ms.pagetype: security # Document the Group Policy structure and AppLocker rule enforcement **Applies to** -- Windows 10 + - Windows 10, Windows Server This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker. diff --git a/windows/device-security/applocker/document-your-application-control-management-processes.md b/windows/device-security/applocker/document-your-application-control-management-processes.md index 6e2a75390d..56bb7b5a9c 100644 --- a/windows/device-security/applocker/document-your-application-control-management-processes.md +++ b/windows/device-security/applocker/document-your-application-control-management-processes.md @@ -12,7 +12,7 @@ author: brianlic-msft # Document your application control management processes **Applies to** -- Windows 10 + - Windows 10, Windows Server This planning topic describes the AppLocker policy maintenance information to record for your design document. diff --git a/windows/device-security/applocker/document-your-application-list.md b/windows/device-security/applocker/document-your-application-list.md index 735dc55515..c0cfc92fe0 100644 --- a/windows/device-security/applocker/document-your-application-list.md +++ b/windows/device-security/applocker/document-your-application-list.md @@ -12,7 +12,7 @@ author: brianlic-msft # Document your app list **Applies to** -- Windows 10 + - Windows 10, Windows Server This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies. diff --git a/windows/device-security/applocker/document-your-applocker-rules.md b/windows/device-security/applocker/document-your-applocker-rules.md index 68d32d07d7..6b723ac2b6 100644 --- a/windows/device-security/applocker/document-your-applocker-rules.md +++ b/windows/device-security/applocker/document-your-applocker-rules.md @@ -12,7 +12,7 @@ author: brianlic-msft # Document your AppLocker rules **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes what rule conditions to associate with each file, how to associate the rule conditions with each file, the source of the rule, and whether the file should be included or excluded. diff --git a/windows/device-security/applocker/edit-an-applocker-policy.md b/windows/device-security/applocker/edit-an-applocker-policy.md index 8bd9ebfcea..e03bf026d8 100644 --- a/windows/device-security/applocker/edit-an-applocker-policy.md +++ b/windows/device-security/applocker/edit-an-applocker-policy.md @@ -12,7 +12,7 @@ author: brianlic-msft # Edit an AppLocker policy **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps required to modify an AppLocker policy. diff --git a/windows/device-security/applocker/edit-applocker-rules.md b/windows/device-security/applocker/edit-applocker-rules.md index 3fcada9c5e..cff2a29925 100644 --- a/windows/device-security/applocker/edit-applocker-rules.md +++ b/windows/device-security/applocker/edit-applocker-rules.md @@ -12,7 +12,7 @@ author: brianlic-msft # Edit AppLocker rules **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to edit a publisher rule, path rule, and file hash rule in AppLocker. diff --git a/windows/device-security/applocker/enable-the-dll-rule-collection.md b/windows/device-security/applocker/enable-the-dll-rule-collection.md index 3a23c140a8..b843125b53 100644 --- a/windows/device-security/applocker/enable-the-dll-rule-collection.md +++ b/windows/device-security/applocker/enable-the-dll-rule-collection.md @@ -12,7 +12,7 @@ author: brianlic-msft # Enable the DLL rule collection **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to enable the DLL rule collection feature for AppLocker. diff --git a/windows/device-security/applocker/enforce-applocker-rules.md b/windows/device-security/applocker/enforce-applocker-rules.md index 31ab2aa2b8..02c7adaca3 100644 --- a/windows/device-security/applocker/enforce-applocker-rules.md +++ b/windows/device-security/applocker/enforce-applocker-rules.md @@ -12,7 +12,7 @@ author: brianlic-msft # Enforce AppLocker rules **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes how to enforce application control rules by using AppLocker. diff --git a/windows/device-security/applocker/executable-rules-in-applocker.md b/windows/device-security/applocker/executable-rules-in-applocker.md index ebad0e1645..cf8136e7f5 100644 --- a/windows/device-security/applocker/executable-rules-in-applocker.md +++ b/windows/device-security/applocker/executable-rules-in-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Executable rules in AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes the file formats and available default rules for the executable rule collection. diff --git a/windows/device-security/applocker/export-an-applocker-policy-from-a-gpo.md b/windows/device-security/applocker/export-an-applocker-policy-from-a-gpo.md index 8f914cd9f0..01ad2c2a7b 100644 --- a/windows/device-security/applocker/export-an-applocker-policy-from-a-gpo.md +++ b/windows/device-security/applocker/export-an-applocker-policy-from-a-gpo.md @@ -12,7 +12,7 @@ author: brianlic-msft # Export an AppLocker policy from a GPO **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to export an AppLocker policy from a Group Policy Object (GPO) so that it can be modified. diff --git a/windows/device-security/applocker/export-an-applocker-policy-to-an-xml-file.md b/windows/device-security/applocker/export-an-applocker-policy-to-an-xml-file.md index f3f9d22190..a784de0756 100644 --- a/windows/device-security/applocker/export-an-applocker-policy-to-an-xml-file.md +++ b/windows/device-security/applocker/export-an-applocker-policy-to-an-xml-file.md @@ -12,7 +12,7 @@ author: brianlic-msft # Export an AppLocker policy to an XML file **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to export an AppLocker policy to an XML file for review or testing. Membership in the local **Administrators** group, or equivalent, is the minimum required to complete this procedure. diff --git a/windows/device-security/applocker/how-applocker-works-techref.md b/windows/device-security/applocker/how-applocker-works-techref.md index f9bf8450f5..62d2d421b2 100644 --- a/windows/device-security/applocker/how-applocker-works-techref.md +++ b/windows/device-security/applocker/how-applocker-works-techref.md @@ -12,7 +12,7 @@ author: brianlic-msft # How AppLocker works **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional provides links to topics about AppLocker architecture and components, processes and interactions, rules and policies. diff --git a/windows/device-security/applocker/import-an-applocker-policy-from-another-computer.md b/windows/device-security/applocker/import-an-applocker-policy-from-another-computer.md index 0f0e11976b..cf54553474 100644 --- a/windows/device-security/applocker/import-an-applocker-policy-from-another-computer.md +++ b/windows/device-security/applocker/import-an-applocker-policy-from-another-computer.md @@ -12,7 +12,7 @@ author: brianlic-msft # Import an AppLocker policy from another computer **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes how to import an AppLocker policy. diff --git a/windows/device-security/applocker/import-an-applocker-policy-into-a-gpo.md b/windows/device-security/applocker/import-an-applocker-policy-into-a-gpo.md index c03e2d5282..ffe9f4653c 100644 --- a/windows/device-security/applocker/import-an-applocker-policy-into-a-gpo.md +++ b/windows/device-security/applocker/import-an-applocker-policy-into-a-gpo.md @@ -12,7 +12,7 @@ author: brianlic-msft # Import an AppLocker policy into a GPO **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to import an AppLocker policy into a Group Policy Object (GPO). AppLocker policies can be created as local security policies and modified like any other local security policy, or they can be created as part of a GPO and managed by using Group Policy. You can create AppLocker policies on any supported computer. For info about which Windows editions are supported, see [Requirements to Use AppLocker](requirements-to-use-applocker.md). diff --git a/windows/device-security/applocker/maintain-applocker-policies.md b/windows/device-security/applocker/maintain-applocker-policies.md index 69cf6d1483..7f7e943e6b 100644 --- a/windows/device-security/applocker/maintain-applocker-policies.md +++ b/windows/device-security/applocker/maintain-applocker-policies.md @@ -12,7 +12,7 @@ author: brianlic-msft # Maintain AppLocker policies **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes how to maintain rules within AppLocker policies. diff --git a/windows/device-security/applocker/manage-packaged-apps-with-applocker.md b/windows/device-security/applocker/manage-packaged-apps-with-applocker.md index e1a7639af3..fbb161890c 100644 --- a/windows/device-security/applocker/manage-packaged-apps-with-applocker.md +++ b/windows/device-security/applocker/manage-packaged-apps-with-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Manage packaged apps with AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes concepts and lists procedures to help you manage Packaged apps with AppLocker as part of your overall application control strategy. diff --git a/windows/device-security/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md b/windows/device-security/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md index 2e095a1533..d858aeb748 100644 --- a/windows/device-security/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md +++ b/windows/device-security/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md @@ -12,7 +12,7 @@ author: brianlic-msft # Merge AppLocker policies by using Set-ApplockerPolicy **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to merge AppLocker policies by using Windows PowerShell. diff --git a/windows/device-security/applocker/merge-applocker-policies-manually.md b/windows/device-security/applocker/merge-applocker-policies-manually.md index 2747de84e0..a694b64637 100644 --- a/windows/device-security/applocker/merge-applocker-policies-manually.md +++ b/windows/device-security/applocker/merge-applocker-policies-manually.md @@ -12,7 +12,7 @@ author: brianlic-msft # Merge AppLocker policies manually **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to manually merge AppLocker policies to update the Group Policy Object (GPO). diff --git a/windows/device-security/applocker/monitor-application-usage-with-applocker.md b/windows/device-security/applocker/monitor-application-usage-with-applocker.md index 87ead686b6..bfb1fe9d5d 100644 --- a/windows/device-security/applocker/monitor-application-usage-with-applocker.md +++ b/windows/device-security/applocker/monitor-application-usage-with-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Monitor app usage with AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes how to monitor app usage when AppLocker policies are applied. diff --git a/windows/device-security/applocker/optimize-applocker-performance.md b/windows/device-security/applocker/optimize-applocker-performance.md index 5282b92618..750072c6b4 100644 --- a/windows/device-security/applocker/optimize-applocker-performance.md +++ b/windows/device-security/applocker/optimize-applocker-performance.md @@ -12,7 +12,7 @@ author: brianlic-msft # Optimize AppLocker performance **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes how to optimize AppLocker policy enforcement. diff --git a/windows/device-security/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md b/windows/device-security/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md index b17006c05a..9209b7ab41 100644 --- a/windows/device-security/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md +++ b/windows/device-security/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Packaged apps and packaged app installer rules in AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic explains the AppLocker rule collection for packaged app installers and packaged apps. diff --git a/windows/device-security/applocker/plan-for-applocker-policy-management.md b/windows/device-security/applocker/plan-for-applocker-policy-management.md index ba66c70d42..eefcb27381 100644 --- a/windows/device-security/applocker/plan-for-applocker-policy-management.md +++ b/windows/device-security/applocker/plan-for-applocker-policy-management.md @@ -12,7 +12,7 @@ author: brianlic-msft # Plan for AppLocker policy management **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for describes the decisions you need to make to establish the processes for managing and maintaining AppLocker policies. diff --git a/windows/device-security/applocker/refresh-an-applocker-policy.md b/windows/device-security/applocker/refresh-an-applocker-policy.md index 719bfb599b..06ead87cf6 100644 --- a/windows/device-security/applocker/refresh-an-applocker-policy.md +++ b/windows/device-security/applocker/refresh-an-applocker-policy.md @@ -12,7 +12,7 @@ author: brianlic-msft # Refresh an AppLocker policy **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to force an update for an AppLocker policy. diff --git a/windows/device-security/applocker/requirements-for-deploying-applocker-policies.md b/windows/device-security/applocker/requirements-for-deploying-applocker-policies.md index 874036e3b6..5397c0caf7 100644 --- a/windows/device-security/applocker/requirements-for-deploying-applocker-policies.md +++ b/windows/device-security/applocker/requirements-for-deploying-applocker-policies.md @@ -12,7 +12,7 @@ author: brianlic-msft # Requirements for deploying AppLocker policies **Applies to** -- Windows 10 + - Windows 10, Windows Server This deployment topic for the IT professional lists the requirements that you need to consider before you deploy AppLocker policies. diff --git a/windows/device-security/applocker/requirements-to-use-applocker.md b/windows/device-security/applocker/requirements-to-use-applocker.md index caa0c16d67..a22efdb6e6 100644 --- a/windows/device-security/applocker/requirements-to-use-applocker.md +++ b/windows/device-security/applocker/requirements-to-use-applocker.md @@ -13,7 +13,7 @@ author: brianlic-msft # Requirements to use AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems. diff --git a/windows/device-security/applocker/run-the-automatically-generate-rules-wizard.md b/windows/device-security/applocker/run-the-automatically-generate-rules-wizard.md index 565f6331da..474bd75f9a 100644 --- a/windows/device-security/applocker/run-the-automatically-generate-rules-wizard.md +++ b/windows/device-security/applocker/run-the-automatically-generate-rules-wizard.md @@ -12,7 +12,7 @@ author: brianlic-msft # Run the Automatically Generate Rules wizard **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes steps to run the wizard to create AppLocker rules on a reference device. diff --git a/windows/device-security/applocker/script-rules-in-applocker.md b/windows/device-security/applocker/script-rules-in-applocker.md index 6fd0ec9196..3860478f4e 100644 --- a/windows/device-security/applocker/script-rules-in-applocker.md +++ b/windows/device-security/applocker/script-rules-in-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Script rules in AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes the file formats and available default rules for the script rule collection. diff --git a/windows/device-security/applocker/security-considerations-for-applocker.md b/windows/device-security/applocker/security-considerations-for-applocker.md index c959f1bfd0..e8b54e6971 100644 --- a/windows/device-security/applocker/security-considerations-for-applocker.md +++ b/windows/device-security/applocker/security-considerations-for-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Security considerations for AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes the security considerations you need to address when implementing AppLocker. diff --git a/windows/device-security/applocker/select-types-of-rules-to-create.md b/windows/device-security/applocker/select-types-of-rules-to-create.md index 35f8ffd6b2..dc24ffd216 100644 --- a/windows/device-security/applocker/select-types-of-rules-to-create.md +++ b/windows/device-security/applocker/select-types-of-rules-to-create.md @@ -12,7 +12,7 @@ author: brianlic-msft # Select the types of rules to create **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic lists resources you can use when selecting your application control policy rules by using AppLocker. diff --git a/windows/device-security/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md b/windows/device-security/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md index fcc3bf2eac..4a05c878df 100644 --- a/windows/device-security/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md +++ b/windows/device-security/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md @@ -12,7 +12,7 @@ author: brianlic-msft # Test an AppLocker policy by using Test-AppLockerPolicy **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes the steps to test an AppLocker policy prior to importing it into a Group Policy Object (GPO) or another computer. diff --git a/windows/device-security/applocker/test-and-update-an-applocker-policy.md b/windows/device-security/applocker/test-and-update-an-applocker-policy.md index 99e46e3022..1de694d350 100644 --- a/windows/device-security/applocker/test-and-update-an-applocker-policy.md +++ b/windows/device-security/applocker/test-and-update-an-applocker-policy.md @@ -12,7 +12,7 @@ author: brianlic-msft # Test and update an AppLocker policy **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic discusses the steps required to test an AppLocker policy prior to deployment. diff --git a/windows/device-security/applocker/tools-to-use-with-applocker.md b/windows/device-security/applocker/tools-to-use-with-applocker.md index 7708198815..b2af01dd5b 100644 --- a/windows/device-security/applocker/tools-to-use-with-applocker.md +++ b/windows/device-security/applocker/tools-to-use-with-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Tools to use with AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes the tools available to create and administer AppLocker policies. diff --git a/windows/device-security/applocker/understand-applocker-enforcement-settings.md b/windows/device-security/applocker/understand-applocker-enforcement-settings.md index a27cfdc9cb..b6c044e463 100644 --- a/windows/device-security/applocker/understand-applocker-enforcement-settings.md +++ b/windows/device-security/applocker/understand-applocker-enforcement-settings.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understand AppLocker enforcement settings **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes the AppLocker enforcement settings for rule collections. diff --git a/windows/device-security/applocker/understand-applocker-policy-design-decisions.md b/windows/device-security/applocker/understand-applocker-policy-design-decisions.md index 4c7731bcfc..4a6a8fd33c 100644 --- a/windows/device-security/applocker/understand-applocker-policy-design-decisions.md +++ b/windows/device-security/applocker/understand-applocker-policy-design-decisions.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understand AppLocker policy design decisions **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional lists the design questions, possible answers, and ramifications of the decisions when you plan a deployment of application control policies by using AppLocker within a Windows operating system environment. diff --git a/windows/device-security/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md b/windows/device-security/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md index fd1d01d9fb..3b3f14d9b5 100644 --- a/windows/device-security/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md +++ b/windows/device-security/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understand AppLocker rules and enforcement setting inheritance in Group Policy **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes how application control policies configured in AppLocker are applied through Group Policy. diff --git a/windows/device-security/applocker/understand-the-applocker-policy-deployment-process.md b/windows/device-security/applocker/understand-the-applocker-policy-deployment-process.md index a2ec48ffe5..77fdf82bd7 100644 --- a/windows/device-security/applocker/understand-the-applocker-policy-deployment-process.md +++ b/windows/device-security/applocker/understand-the-applocker-policy-deployment-process.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understand the AppLocker policy deployment process **Applies to** -- Windows 10 + - Windows 10, Windows Server This planning and deployment topic for the IT professional describes the process for using AppLocker when deploying application control policies. diff --git a/windows/device-security/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md b/windows/device-security/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md index b383087281..e71a5fc40d 100644 --- a/windows/device-security/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md +++ b/windows/device-security/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understanding AppLocker allow and deny actions on rules **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic explains the differences between allow and deny actions on AppLocker rules. diff --git a/windows/device-security/applocker/understanding-applocker-default-rules.md b/windows/device-security/applocker/understanding-applocker-default-rules.md index f0b744d7ad..8dea138a74 100644 --- a/windows/device-security/applocker/understanding-applocker-default-rules.md +++ b/windows/device-security/applocker/understanding-applocker-default-rules.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understanding AppLocker default rules **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professional describes the set of rules that can be used to ensure that required Windows system files are allowed to run when the policy is applied. diff --git a/windows/device-security/applocker/understanding-applocker-rule-behavior.md b/windows/device-security/applocker/understanding-applocker-rule-behavior.md index ac18934b5f..e4b16b02a7 100644 --- a/windows/device-security/applocker/understanding-applocker-rule-behavior.md +++ b/windows/device-security/applocker/understanding-applocker-rule-behavior.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understanding AppLocker rule behavior **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes how AppLocker rules are enforced by using the allow and deny options in AppLocker. diff --git a/windows/device-security/applocker/understanding-applocker-rule-collections.md b/windows/device-security/applocker/understanding-applocker-rule-collections.md index bfe5fd07ce..078f0f86e5 100644 --- a/windows/device-security/applocker/understanding-applocker-rule-collections.md +++ b/windows/device-security/applocker/understanding-applocker-rule-collections.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understanding AppLocker rule collections **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic explains the five different types of AppLocker rules used to enforce AppLocker policies. diff --git a/windows/device-security/applocker/understanding-applocker-rule-condition-types.md b/windows/device-security/applocker/understanding-applocker-rule-condition-types.md index f00afa16e1..4c5846fbb2 100644 --- a/windows/device-security/applocker/understanding-applocker-rule-condition-types.md +++ b/windows/device-security/applocker/understanding-applocker-rule-condition-types.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understanding AppLocker rule condition types **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes the three types of AppLocker rule conditions. diff --git a/windows/device-security/applocker/understanding-applocker-rule-exceptions.md b/windows/device-security/applocker/understanding-applocker-rule-exceptions.md index 4cedcfd784..4fefe490b2 100644 --- a/windows/device-security/applocker/understanding-applocker-rule-exceptions.md +++ b/windows/device-security/applocker/understanding-applocker-rule-exceptions.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understanding AppLocker rule exceptions **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes the result of applying AppLocker rule exceptions to rule collections. diff --git a/windows/device-security/applocker/understanding-the-file-hash-rule-condition-in-applocker.md b/windows/device-security/applocker/understanding-the-file-hash-rule-condition-in-applocker.md index 89a2b1a770..c881bd6628 100644 --- a/windows/device-security/applocker/understanding-the-file-hash-rule-condition-in-applocker.md +++ b/windows/device-security/applocker/understanding-the-file-hash-rule-condition-in-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understanding the file hash rule condition in AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic explains the AppLocker file hash rule condition, the advantages and disadvantages, and how it is applied. diff --git a/windows/device-security/applocker/understanding-the-path-rule-condition-in-applocker.md b/windows/device-security/applocker/understanding-the-path-rule-condition-in-applocker.md index 4d4e950a6c..2ce7467d62 100644 --- a/windows/device-security/applocker/understanding-the-path-rule-condition-in-applocker.md +++ b/windows/device-security/applocker/understanding-the-path-rule-condition-in-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understanding the path rule condition in AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic explains the AppLocker path rule condition, the advantages and disadvantages, and how it is applied. diff --git a/windows/device-security/applocker/understanding-the-publisher-rule-condition-in-applocker.md b/windows/device-security/applocker/understanding-the-publisher-rule-condition-in-applocker.md index 5e0bca2ee0..63b7465d51 100644 --- a/windows/device-security/applocker/understanding-the-publisher-rule-condition-in-applocker.md +++ b/windows/device-security/applocker/understanding-the-publisher-rule-condition-in-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Understanding the publisher rule condition in AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic explains the AppLocker publisher rule condition, what controls are available, and how it is applied. diff --git a/windows/device-security/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md b/windows/device-security/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md index 90336b381a..410b912186 100644 --- a/windows/device-security/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md +++ b/windows/device-security/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md @@ -12,7 +12,7 @@ author: brianlic-msft # Use a reference device to create and maintain AppLocker policies **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes the steps to create and maintain AppLocker policies by using a reference computer. diff --git a/windows/device-security/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md b/windows/device-security/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md index 0fa2a8f258..50871068a7 100644 --- a/windows/device-security/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md +++ b/windows/device-security/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md @@ -12,7 +12,7 @@ author: brianlic-msft # Use AppLocker and Software Restriction Policies in the same domain **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes concepts and procedures to help you manage your application control strategy using Software Restriction Policies and AppLocker. diff --git a/windows/device-security/applocker/use-the-applocker-windows-powershell-cmdlets.md b/windows/device-security/applocker/use-the-applocker-windows-powershell-cmdlets.md index d7cd5120c4..876cba6077 100644 --- a/windows/device-security/applocker/use-the-applocker-windows-powershell-cmdlets.md +++ b/windows/device-security/applocker/use-the-applocker-windows-powershell-cmdlets.md @@ -12,7 +12,7 @@ author: brianlic-msft # Use the AppLocker Windows PowerShell cmdlets **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes how each AppLocker Windows PowerShell cmdlet can help you administer your AppLocker application control policies. diff --git a/windows/device-security/applocker/using-event-viewer-with-applocker.md b/windows/device-security/applocker/using-event-viewer-with-applocker.md index 7a3b0f4f8d..b2224605ab 100644 --- a/windows/device-security/applocker/using-event-viewer-with-applocker.md +++ b/windows/device-security/applocker/using-event-viewer-with-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Using Event Viewer with AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic lists AppLocker events and describes how to use Event Viewer with AppLocker. diff --git a/windows/device-security/applocker/using-software-restriction-policies-and-applocker-policies.md b/windows/device-security/applocker/using-software-restriction-policies-and-applocker-policies.md index 8a427064fb..bacb59c5e9 100644 --- a/windows/device-security/applocker/using-software-restriction-policies-and-applocker-policies.md +++ b/windows/device-security/applocker/using-software-restriction-policies-and-applocker-policies.md @@ -12,7 +12,7 @@ author: brianlic-msft # Use Software Restriction Policies and AppLocker policies **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes how to use Software Restriction Policies (SRP) and AppLocker policies in the same Windows deployment. diff --git a/windows/device-security/applocker/what-is-applocker.md b/windows/device-security/applocker/what-is-applocker.md index c3b47e88d5..36e45237fd 100644 --- a/windows/device-security/applocker/what-is-applocker.md +++ b/windows/device-security/applocker/what-is-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # What Is AppLocker? **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for the IT professional describes what AppLocker is and how its features differ from Software Restriction Policies. diff --git a/windows/device-security/applocker/windows-installer-rules-in-applocker.md b/windows/device-security/applocker/windows-installer-rules-in-applocker.md index 65a86eddfc..5487badaa9 100644 --- a/windows/device-security/applocker/windows-installer-rules-in-applocker.md +++ b/windows/device-security/applocker/windows-installer-rules-in-applocker.md @@ -12,7 +12,7 @@ author: brianlic-msft # Windows Installer rules in AppLocker **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic describes the file formats and available default rules for the Windows Installer rule collection. diff --git a/windows/device-security/applocker/working-with-applocker-policies.md b/windows/device-security/applocker/working-with-applocker-policies.md index 219638880c..f050f94cd2 100644 --- a/windows/device-security/applocker/working-with-applocker-policies.md +++ b/windows/device-security/applocker/working-with-applocker-policies.md @@ -12,7 +12,7 @@ author: brianlic-msft # Working with AppLocker policies **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals provides links to procedural topics about creating, maintaining, and testing AppLocker policies. diff --git a/windows/device-security/applocker/working-with-applocker-rules.md b/windows/device-security/applocker/working-with-applocker-rules.md index c6fd38667f..2c9e9b4f1f 100644 --- a/windows/device-security/applocker/working-with-applocker-rules.md +++ b/windows/device-security/applocker/working-with-applocker-rules.md @@ -12,7 +12,7 @@ author: brianlic-msft # Working with AppLocker rules **Applies to** -- Windows 10 + - Windows 10, Windows Server This topic for IT professionals describes AppLocker rule types and how to work with them for your application control policies. From 023d27eefe35190fdeee6a3a992e47641d750253 Mon Sep 17 00:00:00 2001 From: nevedita Date: Wed, 20 Sep 2017 12:12:09 -0700 Subject: [PATCH 143/146] Update upgrade-readiness-get-started.md --- windows/deployment/upgrade/upgrade-readiness-get-started.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index ff117afd8d..90fabf7307 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -84,9 +84,9 @@ To enable data sharing, whitelist the following endpoints. Note that you may nee | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -| `https://v10.vortex-win.data.microsoft.com` | For Windows 10, Connected User Experience and Telemetry component endpoint. User computers send data to Microsoft through this endpoint. -| `https://Vortex-win.data.microsoft.com` | For OS versions lower than Windows 10, Connected User Experience and Telemetry component endpoint. -| `https://settings.data.microsoft.com` | Enables the compatibility update KB to send data to Microsoft. | +| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. +| `https://Vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 +| `https://settings.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | Note: The compatibility update KB runs under the computer’s system account. From 93b2bc88b745112558a4e7e7182bb3f0729872bc Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 20 Sep 2017 14:39:40 -0700 Subject: [PATCH 144/146] general updates --- ...-windows-defender-advanced-threat-protection.md | 2 +- ...-windows-defender-advanced-threat-protection.md | 14 ++------------ ...-windows-defender-advanced-threat-protection.md | 12 +++--------- 3 files changed, 6 insertions(+), 22 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md index f775017c4c..e9c01a20cf 100644 --- a/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md @@ -77,7 +77,7 @@ Field numbers match the numbers in the images below. ![Image of artifact timeline with numbers](images/atp-siem-mapping3.png) -![Image of alert timeline with numbers](images/atp-siem-mapping4.png) +![Image of artifact timeline with numbers](images/atp-siem-mapping4.png) ![Image machine view](images/atp-mapping6.png) diff --git a/windows/threat-protection/windows-defender-atp/investigate-machines-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/investigate-machines-windows-defender-advanced-threat-protection.md index f437a524b9..4581751734 100644 --- a/windows/threat-protection/windows-defender-atp/investigate-machines-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/investigate-machines-windows-defender-advanced-threat-protection.md @@ -93,18 +93,8 @@ Use the search bar to look for specific timeline events. Harness the power of us - Behaviors mode: displays "detections" and selected events of interest - Verbose mode: displays all raw events without aggregation or filtering -- **Event type** - Click the drop-down button to filter by the following levels: - - Windows Defender ATP alerts - - Windows Defender AV alerts - - Response actions - - AppGuard related events - - Windows Defender Device Guard events - - Process events - - Network events - - File events - - Registry events - - Load DLL events - - Other events

    +- **Event type** - Click the drop-down button to filter by events such as Windows - Windows Defender ATP alerts, Windows Defender Application Guard events, registry events, file events, and others. + Filtering by event type allows you to define precise queries so that you see events with a specific focus. For example, you can search for a file name, then filter the results to only see Process events matching the search criteria or to only view file events, or even better: to view only network events over a period of time to make sure no suspicious outbound communications go unnoticed. - **User account** – Click the drop-down button to filter the machine timeline by the following user associated events: diff --git a/windows/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md index 70660d58f9..ca3569887b 100644 --- a/windows/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md @@ -60,19 +60,14 @@ You can use the following filters to limit the list of machines displayed during - Mac OS - Other -**Health**
    -- All -- Well configure -- Requires attention - Depending on the Windows Defender security controls configured in your enterprise, you'll see various available filters. - **Sensor health state**
    Filter the list to view specific machines grouped together by the following machine health states: - **Active** – Machines that are actively reporting sensor data to the service. - **Misconfigured** – Machines that have impaired communications with service or are unable to send sensor data. Misconfigured machines can further be classified to: - - Impaired communications - No sensor data + - Impaired communications For more information on how to address issues on misconfigured machines see, [Fix unhealthy sensors](fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md). - **Inactive** – Machines that have completely stopped sending signals for more than 7 days. @@ -85,6 +80,7 @@ Filter the list to view specific machines that are well configured or require at - **Well configured** - Machines have the Windows Defender security controls well configured. - **Requires attention** - Machines where improvements can be made to increase the overall security posture of your organization. +For more information, see [View the Security Analytics dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md). **Malware category alerts**
    Filter the list to view specific machines grouped together by the following malware categories: @@ -109,13 +105,11 @@ Exporting the list in CSV format displays the data in an unfiltered manner. The You can sort the **Machines list** by the following columns: - **Machine name** - Name or GUID of the machine -- **Domain** - Domain where the machine is joined in -- **OS Platform** - Indicates the OS of the machine - **Health State** – Indicates if the machine is misconfigured or is not sending sensor data - **Last seen** - Date and time when the machine last reported sensor data - **Internal IP** - Local internal Internet Protocol (IP) address of the machine - **Active Alerts** - Number of alerts reported by the machine by severity -- **Active malware detections** - Number of active malware detections reported by the machine +- **Active malware alerts** - Number of active malware detections reported by the machine > [!NOTE] > The **Active malware detections** filter column will only appear if your endpoints are using [Windows Defender](../windows-defender-antivirus/windows-defender-antivirus-in-windows-10.md) as the active real-time protection antimalware product. From f7d59c07063d4c4655f766f5abc08077192baa7d Mon Sep 17 00:00:00 2001 From: eross-msft Date: Thu, 21 Sep 2017 07:00:50 -0700 Subject: [PATCH 145/146] Fixed spacing errors --- .../wd-app-guard-overview.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md b/windows/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md index df475ea509..465c993f93 100644 --- a/windows/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md +++ b/windows/threat-protection/windows-defender-application-guard/wd-app-guard-overview.md @@ -19,7 +19,6 @@ The threat landscape is continually evolving. While hackers are busy developing Windows Defender Application Guard (Application Guard) is designed to help prevent old, and newly emerging attacks, to help keep employees productive. Using our unique hardware isolation approach, our goal is to destroy the playbook that attackers use by rendering current attack methods obsolete. - ## What is Application Guard and how does it work? Designed for Windows 10 and Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted. @@ -39,8 +38,8 @@ Application Guard has been created to target 3 types of enterprise systems: ## In this section |Topic |Description | |------|------------| -|[System requirements for Windows Defender Application Guard](reqs-wd-app-guard.md) |Specifies the pre-requisites necessary to install and use Application Guard. | -|[Prepare and install Windows Defender Application Guard](install-wd-app-guard.md) |Provides instructions about determining which mode to use, either Standalone or Enterprise-managed, and how to install Application Guard in your organization. | +|[System requirements for Windows Defender Application Guard](reqs-wd-app-guard.md) |Specifies the pre-requisites necessary to install and use Application Guard.| +|[Prepare and install Windows Defender Application Guard](install-wd-app-guard.md) |Provides instructions about determining which mode to use, either Standalone or Enterprise-managed, and how to install Application Guard in your organization.| |[Configure the Group Policy settings for Windows Defender Application Guard](configure-wd-app-guard.md) |Provides info about the available Group Policy and MDM settings.| |[Testing scenarios using Windows Defender Application Guard in your business or organization](test-scenarios-wd-app-guard.md)|Provides a list of suggested testing scenarios that you can use to test Windows Defender Application Guard (Application Guard) in your organization.| |[Frequently Asked Questions - Windows Defender Application Guard](faq-wd-app-guard.md)|Common questions and answers around the features and functionality of Application Guard.| \ No newline at end of file From 1ece79b062d562d2f352e913544455f5ec072902 Mon Sep 17 00:00:00 2001 From: John Tobin Date: Thu, 21 Sep 2017 10:20:08 -0700 Subject: [PATCH 146/146] Reformat Applies to section of Applocker topics. --- ...-rules-for-packaged-apps-to-existing-applocker-rule-set.md | 3 ++- windows/device-security/applocker/administer-applocker.md | 3 ++- .../applocker/applocker-architecture-and-components.md | 3 ++- windows/device-security/applocker/applocker-functions.md | 3 ++- windows/device-security/applocker/applocker-overview.md | 3 ++- .../applocker/applocker-policies-deployment-guide.md | 3 ++- .../applocker/applocker-policies-design-guide.md | 3 ++- .../applocker/applocker-policy-use-scenarios.md | 3 ++- .../applocker/applocker-processes-and-interactions.md | 3 ++- windows/device-security/applocker/applocker-settings.md | 3 ++- .../applocker/applocker-technical-reference.md | 3 ++- .../applocker/configure-an-applocker-policy-for-audit-only.md | 3 ++- .../configure-an-applocker-policy-for-enforce-rules.md | 3 ++- .../applocker/configure-exceptions-for-an-applocker-rule.md | 3 ++- .../applocker/configure-the-appLocker-reference-device.md | 3 ++- .../applocker/configure-the-application-identity-service.md | 3 ++- .../applocker/create-a-rule-for-packaged-apps.md | 3 ++- .../create-a-rule-that-uses-a-file-hash-condition.md | 3 ++- .../applocker/create-a-rule-that-uses-a-path-condition.md | 3 ++- .../create-a-rule-that-uses-a-publisher-condition.md | 3 ++- .../applocker/create-applocker-default-rules.md | 3 ++- ...te-list-of-applications-deployed-to-each-business-group.md | 3 ++- .../applocker/create-your-applocker-planning-document.md | 4 ++-- .../applocker/create-your-applocker-policies.md | 3 ++- .../device-security/applocker/create-your-applocker-rules.md | 3 ++- windows/device-security/applocker/delete-an-applocker-rule.md | 3 ++- ...y-applocker-policies-by-using-the-enforce-rules-setting.md | 4 ++-- .../applocker/deploy-the-applocker-policy-into-production.md | 3 ++- .../determine-group-policy-structure-and-rule-enforcement.md | 3 ++- ...plications-are-digitally-signed-on-a-reference-computer.md | 3 ++- .../determine-your-application-control-objectives.md | 3 ++- ...url-message-when-users-try-to-run-a-blocked-application.md | 3 ++- windows/device-security/applocker/dll-rules-in-applocker.md | 3 ++- ...t-group-policy-structure-and-applocker-rule-enforcement.md | 3 ++- .../document-your-application-control-management-processes.md | 3 ++- .../applocker/document-your-application-list.md | 3 ++- .../applocker/document-your-applocker-rules.md | 3 ++- windows/device-security/applocker/edit-an-applocker-policy.md | 3 ++- windows/device-security/applocker/edit-applocker-rules.md | 3 ++- .../applocker/enable-the-dll-rule-collection.md | 3 ++- windows/device-security/applocker/enforce-applocker-rules.md | 3 ++- .../applocker/executable-rules-in-applocker.md | 3 ++- .../applocker/export-an-applocker-policy-from-a-gpo.md | 3 ++- .../applocker/export-an-applocker-policy-to-an-xml-file.md | 3 ++- .../device-security/applocker/how-applocker-works-techref.md | 3 ++- .../import-an-applocker-policy-from-another-computer.md | 3 ++- .../applocker/import-an-applocker-policy-into-a-gpo.md | 3 ++- .../device-security/applocker/maintain-applocker-policies.md | 3 ++- .../applocker/manage-packaged-apps-with-applocker.md | 3 ++- .../merge-applocker-policies-by-using-set-applockerpolicy.md | 3 ++- .../applocker/merge-applocker-policies-manually.md | 3 ++- .../applocker/monitor-application-usage-with-applocker.md | 3 ++- .../applocker/optimize-applocker-performance.md | 3 ++- ...aged-apps-and-packaged-app-installer-rules-in-applocker.md | 3 ++- .../applocker/plan-for-applocker-policy-management.md | 3 ++- .../device-security/applocker/refresh-an-applocker-policy.md | 3 ++- .../requirements-for-deploying-applocker-policies.md | 3 ++- .../applocker/requirements-to-use-applocker.md | 3 ++- .../applocker/run-the-automatically-generate-rules-wizard.md | 3 ++- .../device-security/applocker/script-rules-in-applocker.md | 3 ++- .../applocker/security-considerations-for-applocker.md | 3 ++- .../applocker/select-types-of-rules-to-create.md | 3 ++- .../test-an-applocker-policy-by-using-test-applockerpolicy.md | 3 ++- .../applocker/test-and-update-an-applocker-policy.md | 3 ++- .../device-security/applocker/tools-to-use-with-applocker.md | 3 ++- .../applocker/understand-applocker-enforcement-settings.md | 3 ++- .../applocker/understand-applocker-policy-design-decisions.md | 3 ++- ...les-and-enforcement-setting-inheritance-in-group-policy.md | 3 ++- .../understand-the-applocker-policy-deployment-process.md | 3 ++- ...understanding-applocker-allow-and-deny-actions-on-rules.md | 3 ++- .../applocker/understanding-applocker-default-rules.md | 3 ++- .../applocker/understanding-applocker-rule-behavior.md | 3 ++- .../applocker/understanding-applocker-rule-collections.md | 3 ++- .../applocker/understanding-applocker-rule-condition-types.md | 3 ++- .../applocker/understanding-applocker-rule-exceptions.md | 3 ++- ...understanding-the-file-hash-rule-condition-in-applocker.md | 3 ++- .../understanding-the-path-rule-condition-in-applocker.md | 3 ++- ...understanding-the-publisher-rule-condition-in-applocker.md | 3 ++- ...ence-computer-to-create-and-maintain-applocker-policies.md | 4 +++- ...er-and-software-restriction-policies-in-the-same-domain.md | 3 ++- .../applocker/use-the-applocker-windows-powershell-cmdlets.md | 3 ++- .../applocker/using-event-viewer-with-applocker.md | 3 ++- ...ng-software-restriction-policies-and-applocker-policies.md | 3 ++- windows/device-security/applocker/what-is-applocker.md | 3 ++- .../applocker/windows-installer-rules-in-applocker.md | 3 ++- .../applocker/working-with-applocker-policies.md | 3 ++- .../device-security/applocker/working-with-applocker-rules.md | 3 ++- 87 files changed, 175 insertions(+), 89 deletions(-) diff --git a/windows/device-security/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md b/windows/device-security/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md index 6c8f2abbdb..9898cd57e6 100644 --- a/windows/device-security/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md +++ b/windows/device-security/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md @@ -12,7 +12,8 @@ author: brianlic-msft # Add rules for packaged apps to existing AppLocker rule-set **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes how to update your existing AppLocker policies for packaged apps using the Remote Server Administration Toolkit (RSAT). diff --git a/windows/device-security/applocker/administer-applocker.md b/windows/device-security/applocker/administer-applocker.md index 272f72a63c..327c091fee 100644 --- a/windows/device-security/applocker/administer-applocker.md +++ b/windows/device-security/applocker/administer-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Administer AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals provides links to specific procedures to use when administering AppLocker policies. diff --git a/windows/device-security/applocker/applocker-architecture-and-components.md b/windows/device-security/applocker/applocker-architecture-and-components.md index 42be5ee97c..1d788081eb 100644 --- a/windows/device-security/applocker/applocker-architecture-and-components.md +++ b/windows/device-security/applocker/applocker-architecture-and-components.md @@ -12,7 +12,8 @@ author: brianlic-msft # AppLocker architecture and components **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professional describes AppLocker’s basic architecture and its major components. diff --git a/windows/device-security/applocker/applocker-functions.md b/windows/device-security/applocker/applocker-functions.md index 99415f1eaf..1f4bac9193 100644 --- a/windows/device-security/applocker/applocker-functions.md +++ b/windows/device-security/applocker/applocker-functions.md @@ -12,7 +12,8 @@ author: brianlic-msft # AppLocker functions **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional lists the functions and security levels for the Software Restriction Policies (SRP) and AppLocker features. diff --git a/windows/device-security/applocker/applocker-overview.md b/windows/device-security/applocker/applocker-overview.md index 0a6b22a5f9..fd329b6d3d 100644 --- a/windows/device-security/applocker/applocker-overview.md +++ b/windows/device-security/applocker/applocker-overview.md @@ -13,7 +13,8 @@ author: brianlic-msft # AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic provides a description of AppLocker and can help you decide if your organization can benefit from deploying AppLocker application control policies. AppLocker helps you control which apps and files users can run. These include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers. diff --git a/windows/device-security/applocker/applocker-policies-deployment-guide.md b/windows/device-security/applocker/applocker-policies-deployment-guide.md index 30c4d82dde..c229df7483 100644 --- a/windows/device-security/applocker/applocker-policies-deployment-guide.md +++ b/windows/device-security/applocker/applocker-policies-deployment-guide.md @@ -13,7 +13,8 @@ author: brianlic-msft # AppLocker deployment guide **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals introduces the concepts and describes the steps required to deploy AppLocker policies. diff --git a/windows/device-security/applocker/applocker-policies-design-guide.md b/windows/device-security/applocker/applocker-policies-design-guide.md index 1c1cd1ba6d..afac5cb15b 100644 --- a/windows/device-security/applocker/applocker-policies-design-guide.md +++ b/windows/device-security/applocker/applocker-policies-design-guide.md @@ -12,7 +12,8 @@ author: brianlic-msft # AppLocker design guide **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional introduces the design and planning steps required to deploy application control policies by using AppLocker. diff --git a/windows/device-security/applocker/applocker-policy-use-scenarios.md b/windows/device-security/applocker/applocker-policy-use-scenarios.md index eef1bf2c06..6c6e1335bb 100644 --- a/windows/device-security/applocker/applocker-policy-use-scenarios.md +++ b/windows/device-security/applocker/applocker-policy-use-scenarios.md @@ -12,7 +12,8 @@ author: brianlic-msft # AppLocker policy use scenarios **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional lists the various application control scenarios in which AppLocker policies can be effectively implemented. diff --git a/windows/device-security/applocker/applocker-processes-and-interactions.md b/windows/device-security/applocker/applocker-processes-and-interactions.md index 1033ab82a5..d19b4571b0 100644 --- a/windows/device-security/applocker/applocker-processes-and-interactions.md +++ b/windows/device-security/applocker/applocker-processes-and-interactions.md @@ -12,7 +12,8 @@ author: brianlic-msft # AppLocker processes and interactions **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes the process dependencies and interactions when AppLocker evaluates and enforces rules. diff --git a/windows/device-security/applocker/applocker-settings.md b/windows/device-security/applocker/applocker-settings.md index ac98e03d69..09db2282ac 100644 --- a/windows/device-security/applocker/applocker-settings.md +++ b/windows/device-security/applocker/applocker-settings.md @@ -12,7 +12,8 @@ author: brianlic-msft # AppLocker settings **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional lists the settings used by AppLocker. diff --git a/windows/device-security/applocker/applocker-technical-reference.md b/windows/device-security/applocker/applocker-technical-reference.md index e4c4bdc812..b5b962a6d7 100644 --- a/windows/device-security/applocker/applocker-technical-reference.md +++ b/windows/device-security/applocker/applocker-technical-reference.md @@ -12,7 +12,8 @@ author: brianlic-msft # AppLocker technical reference **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This overview topic for IT professionals provides links to the topics in the technical reference. AppLocker advances the application control features and functionality of Software Restriction Policies. AppLocker contains new capabilities and extensions that allow you to create rules to allow or deny apps from running based on unique identities of files and to specify which users or groups can run those apps. diff --git a/windows/device-security/applocker/configure-an-applocker-policy-for-audit-only.md b/windows/device-security/applocker/configure-an-applocker-policy-for-audit-only.md index 9a62af7582..03221fef8b 100644 --- a/windows/device-security/applocker/configure-an-applocker-policy-for-audit-only.md +++ b/windows/device-security/applocker/configure-an-applocker-policy-for-audit-only.md @@ -12,7 +12,8 @@ author: brianlic-msft # Configure an AppLocker policy for audit only **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes how to set AppLocker policies to **Audit only** within your IT environment by using AppLocker. diff --git a/windows/device-security/applocker/configure-an-applocker-policy-for-enforce-rules.md b/windows/device-security/applocker/configure-an-applocker-policy-for-enforce-rules.md index 5aa6a35a4e..b0c0d7c0ee 100644 --- a/windows/device-security/applocker/configure-an-applocker-policy-for-enforce-rules.md +++ b/windows/device-security/applocker/configure-an-applocker-policy-for-enforce-rules.md @@ -12,7 +12,8 @@ author: brianlic-msft # Configure an AppLocker policy for enforce rules **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting. diff --git a/windows/device-security/applocker/configure-exceptions-for-an-applocker-rule.md b/windows/device-security/applocker/configure-exceptions-for-an-applocker-rule.md index 5e14d179d9..f71b399f0b 100644 --- a/windows/device-security/applocker/configure-exceptions-for-an-applocker-rule.md +++ b/windows/device-security/applocker/configure-exceptions-for-an-applocker-rule.md @@ -12,7 +12,8 @@ author: brianlic-msft # Add exceptions for an AppLocker rule **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule. diff --git a/windows/device-security/applocker/configure-the-appLocker-reference-device.md b/windows/device-security/applocker/configure-the-appLocker-reference-device.md index 194f592497..61dbae6818 100644 --- a/windows/device-security/applocker/configure-the-appLocker-reference-device.md +++ b/windows/device-security/applocker/configure-the-appLocker-reference-device.md @@ -12,7 +12,8 @@ author: brianlic-msft # Configure the AppLocker reference device **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer. diff --git a/windows/device-security/applocker/configure-the-application-identity-service.md b/windows/device-security/applocker/configure-the-application-identity-service.md index 15d59c69cb..92fb37f9dd 100644 --- a/windows/device-security/applocker/configure-the-application-identity-service.md +++ b/windows/device-security/applocker/configure-the-application-identity-service.md @@ -12,7 +12,8 @@ author: brianlic-msft # Configure the Application Identity service **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually. diff --git a/windows/device-security/applocker/create-a-rule-for-packaged-apps.md b/windows/device-security/applocker/create-a-rule-for-packaged-apps.md index 11bb5d4239..e2dfbd96a7 100644 --- a/windows/device-security/applocker/create-a-rule-for-packaged-apps.md +++ b/windows/device-security/applocker/create-a-rule-for-packaged-apps.md @@ -12,7 +12,8 @@ author: brianlic-msft # Create a rule for packaged apps **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition. diff --git a/windows/device-security/applocker/create-a-rule-that-uses-a-file-hash-condition.md b/windows/device-security/applocker/create-a-rule-that-uses-a-file-hash-condition.md index 609c4c830b..a7249454f8 100644 --- a/windows/device-security/applocker/create-a-rule-that-uses-a-file-hash-condition.md +++ b/windows/device-security/applocker/create-a-rule-that-uses-a-file-hash-condition.md @@ -12,7 +12,8 @@ author: brianlic-msft # Create a rule that uses a file hash condition **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals shows how to create an AppLocker rule with a file hash condition. diff --git a/windows/device-security/applocker/create-a-rule-that-uses-a-path-condition.md b/windows/device-security/applocker/create-a-rule-that-uses-a-path-condition.md index 717f391824..1c60d5de26 100644 --- a/windows/device-security/applocker/create-a-rule-that-uses-a-path-condition.md +++ b/windows/device-security/applocker/create-a-rule-that-uses-a-path-condition.md @@ -12,7 +12,8 @@ author: brianlic-msft # Create a rule that uses a path condition **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals shows how to create an AppLocker rule with a path condition. diff --git a/windows/device-security/applocker/create-a-rule-that-uses-a-publisher-condition.md b/windows/device-security/applocker/create-a-rule-that-uses-a-publisher-condition.md index 05fe731282..a36f9277e4 100644 --- a/windows/device-security/applocker/create-a-rule-that-uses-a-publisher-condition.md +++ b/windows/device-security/applocker/create-a-rule-that-uses-a-publisher-condition.md @@ -12,7 +12,8 @@ author: brianlic-msft # Create a rule that uses a publisher condition **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals shows how to create an AppLocker rule with a publisher condition. diff --git a/windows/device-security/applocker/create-applocker-default-rules.md b/windows/device-security/applocker/create-applocker-default-rules.md index eaa3383a9a..c4a5905eee 100644 --- a/windows/device-security/applocker/create-applocker-default-rules.md +++ b/windows/device-security/applocker/create-applocker-default-rules.md @@ -12,7 +12,8 @@ author: brianlic-msft # Create AppLocker default rules **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run. diff --git a/windows/device-security/applocker/create-list-of-applications-deployed-to-each-business-group.md b/windows/device-security/applocker/create-list-of-applications-deployed-to-each-business-group.md index 385bbd2dbb..215c091908 100644 --- a/windows/device-security/applocker/create-list-of-applications-deployed-to-each-business-group.md +++ b/windows/device-security/applocker/create-list-of-applications-deployed-to-each-business-group.md @@ -12,7 +12,8 @@ author: brianlic-msft # Create a list of apps deployed to each business group **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes the process of gathering app usage requirements from each business group in order to implement application control policies by using AppLocker. diff --git a/windows/device-security/applocker/create-your-applocker-planning-document.md b/windows/device-security/applocker/create-your-applocker-planning-document.md index 8a6db372a5..43d92ab3a8 100644 --- a/windows/device-security/applocker/create-your-applocker-planning-document.md +++ b/windows/device-security/applocker/create-your-applocker-planning-document.md @@ -12,8 +12,8 @@ author: brianlic-msft # Create your AppLocker planning document **Applies to** - - - Windows 10, Windows Server + - Windows 10 + - Windows Server This planning topic for the IT professional summarizes the information you need to research and include in your AppLocker planning document. diff --git a/windows/device-security/applocker/create-your-applocker-policies.md b/windows/device-security/applocker/create-your-applocker-policies.md index 78111b2bdd..bea50a3693 100644 --- a/windows/device-security/applocker/create-your-applocker-policies.md +++ b/windows/device-security/applocker/create-your-applocker-policies.md @@ -12,7 +12,8 @@ author: brianlic-msft # Create Your AppLocker policies **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment. diff --git a/windows/device-security/applocker/create-your-applocker-rules.md b/windows/device-security/applocker/create-your-applocker-rules.md index eb9fd9b18b..d7a36fa59b 100644 --- a/windows/device-security/applocker/create-your-applocker-rules.md +++ b/windows/device-security/applocker/create-your-applocker-rules.md @@ -12,7 +12,8 @@ author: brianlic-msft # Create Your AppLocker rules **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules. diff --git a/windows/device-security/applocker/delete-an-applocker-rule.md b/windows/device-security/applocker/delete-an-applocker-rule.md index 831f60e90f..e818e08680 100644 --- a/windows/device-security/applocker/delete-an-applocker-rule.md +++ b/windows/device-security/applocker/delete-an-applocker-rule.md @@ -12,7 +12,8 @@ author: brianlic-msft # Delete an AppLocker rule **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to delete an AppLocker rule. diff --git a/windows/device-security/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md b/windows/device-security/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md index ee13928b04..365a343e7a 100644 --- a/windows/device-security/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md +++ b/windows/device-security/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md @@ -9,11 +9,11 @@ ms.pagetype: security author: brianlic-msft --- - # Deploy AppLocker policies by using the enforce rules setting **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method. diff --git a/windows/device-security/applocker/deploy-the-applocker-policy-into-production.md b/windows/device-security/applocker/deploy-the-applocker-policy-into-production.md index 02c1e5d17c..576d4c610d 100644 --- a/windows/device-security/applocker/deploy-the-applocker-policy-into-production.md +++ b/windows/device-security/applocker/deploy-the-applocker-policy-into-production.md @@ -12,7 +12,8 @@ author: brianlic-msft # Deploy the AppLocker policy into production **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings. diff --git a/windows/device-security/applocker/determine-group-policy-structure-and-rule-enforcement.md b/windows/device-security/applocker/determine-group-policy-structure-and-rule-enforcement.md index c17b01a384..9d33fcc296 100644 --- a/windows/device-security/applocker/determine-group-policy-structure-and-rule-enforcement.md +++ b/windows/device-security/applocker/determine-group-policy-structure-and-rule-enforcement.md @@ -12,7 +12,8 @@ author: brianlic-msft # Determine the Group Policy structure and rule enforcement **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This overview topic describes the process to follow when you are planning to deploy AppLocker rules. diff --git a/windows/device-security/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md b/windows/device-security/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md index 25397d03ec..a1b50fe0f8 100644 --- a/windows/device-security/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md +++ b/windows/device-security/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md @@ -12,7 +12,8 @@ author: brianlic-msft # Determine which apps are digitally signed on a reference device **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed. diff --git a/windows/device-security/applocker/determine-your-application-control-objectives.md b/windows/device-security/applocker/determine-your-application-control-objectives.md index 8ee842666d..90a1979777 100644 --- a/windows/device-security/applocker/determine-your-application-control-objectives.md +++ b/windows/device-security/applocker/determine-your-application-control-objectives.md @@ -12,7 +12,8 @@ author: brianlic-msft # Determine your application control objectives **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic helps you with the decisions you need to make to determine what applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker. diff --git a/windows/device-security/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md b/windows/device-security/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md index adeda204f6..3f2d01bceb 100644 --- a/windows/device-security/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md +++ b/windows/device-security/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md @@ -12,7 +12,8 @@ author: brianlic-msft # Display a custom URL message when users try to run a blocked app **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app. diff --git a/windows/device-security/applocker/dll-rules-in-applocker.md b/windows/device-security/applocker/dll-rules-in-applocker.md index 15d05e29b5..913e1d22ee 100644 --- a/windows/device-security/applocker/dll-rules-in-applocker.md +++ b/windows/device-security/applocker/dll-rules-in-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # DLL rules in AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes the file formats and available default rules for the DLL rule collection. diff --git a/windows/device-security/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md b/windows/device-security/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md index fb5486fa1f..3837b7f34e 100644 --- a/windows/device-security/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md +++ b/windows/device-security/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md @@ -12,7 +12,8 @@ ms.pagetype: security # Document the Group Policy structure and AppLocker rule enforcement **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker. diff --git a/windows/device-security/applocker/document-your-application-control-management-processes.md b/windows/device-security/applocker/document-your-application-control-management-processes.md index 56bb7b5a9c..30b683d9ff 100644 --- a/windows/device-security/applocker/document-your-application-control-management-processes.md +++ b/windows/device-security/applocker/document-your-application-control-management-processes.md @@ -12,7 +12,8 @@ author: brianlic-msft # Document your application control management processes **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This planning topic describes the AppLocker policy maintenance information to record for your design document. diff --git a/windows/device-security/applocker/document-your-application-list.md b/windows/device-security/applocker/document-your-application-list.md index c0cfc92fe0..aef9a1f741 100644 --- a/windows/device-security/applocker/document-your-application-list.md +++ b/windows/device-security/applocker/document-your-application-list.md @@ -12,7 +12,8 @@ author: brianlic-msft # Document your app list **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies. diff --git a/windows/device-security/applocker/document-your-applocker-rules.md b/windows/device-security/applocker/document-your-applocker-rules.md index 6b723ac2b6..2d3cc52b44 100644 --- a/windows/device-security/applocker/document-your-applocker-rules.md +++ b/windows/device-security/applocker/document-your-applocker-rules.md @@ -12,7 +12,8 @@ author: brianlic-msft # Document your AppLocker rules **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes what rule conditions to associate with each file, how to associate the rule conditions with each file, the source of the rule, and whether the file should be included or excluded. diff --git a/windows/device-security/applocker/edit-an-applocker-policy.md b/windows/device-security/applocker/edit-an-applocker-policy.md index e03bf026d8..2854dbeb1c 100644 --- a/windows/device-security/applocker/edit-an-applocker-policy.md +++ b/windows/device-security/applocker/edit-an-applocker-policy.md @@ -12,7 +12,8 @@ author: brianlic-msft # Edit an AppLocker policy **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps required to modify an AppLocker policy. diff --git a/windows/device-security/applocker/edit-applocker-rules.md b/windows/device-security/applocker/edit-applocker-rules.md index cff2a29925..a121fc5b1f 100644 --- a/windows/device-security/applocker/edit-applocker-rules.md +++ b/windows/device-security/applocker/edit-applocker-rules.md @@ -12,7 +12,8 @@ author: brianlic-msft # Edit AppLocker rules **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to edit a publisher rule, path rule, and file hash rule in AppLocker. diff --git a/windows/device-security/applocker/enable-the-dll-rule-collection.md b/windows/device-security/applocker/enable-the-dll-rule-collection.md index b843125b53..e322711136 100644 --- a/windows/device-security/applocker/enable-the-dll-rule-collection.md +++ b/windows/device-security/applocker/enable-the-dll-rule-collection.md @@ -12,7 +12,8 @@ author: brianlic-msft # Enable the DLL rule collection **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to enable the DLL rule collection feature for AppLocker. diff --git a/windows/device-security/applocker/enforce-applocker-rules.md b/windows/device-security/applocker/enforce-applocker-rules.md index 02c7adaca3..e79128491d 100644 --- a/windows/device-security/applocker/enforce-applocker-rules.md +++ b/windows/device-security/applocker/enforce-applocker-rules.md @@ -12,7 +12,8 @@ author: brianlic-msft # Enforce AppLocker rules **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes how to enforce application control rules by using AppLocker. diff --git a/windows/device-security/applocker/executable-rules-in-applocker.md b/windows/device-security/applocker/executable-rules-in-applocker.md index cf8136e7f5..566d3c7e76 100644 --- a/windows/device-security/applocker/executable-rules-in-applocker.md +++ b/windows/device-security/applocker/executable-rules-in-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Executable rules in AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes the file formats and available default rules for the executable rule collection. diff --git a/windows/device-security/applocker/export-an-applocker-policy-from-a-gpo.md b/windows/device-security/applocker/export-an-applocker-policy-from-a-gpo.md index 01ad2c2a7b..a3ed1a08c2 100644 --- a/windows/device-security/applocker/export-an-applocker-policy-from-a-gpo.md +++ b/windows/device-security/applocker/export-an-applocker-policy-from-a-gpo.md @@ -12,7 +12,8 @@ author: brianlic-msft # Export an AppLocker policy from a GPO **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to export an AppLocker policy from a Group Policy Object (GPO) so that it can be modified. diff --git a/windows/device-security/applocker/export-an-applocker-policy-to-an-xml-file.md b/windows/device-security/applocker/export-an-applocker-policy-to-an-xml-file.md index a784de0756..13b496fe45 100644 --- a/windows/device-security/applocker/export-an-applocker-policy-to-an-xml-file.md +++ b/windows/device-security/applocker/export-an-applocker-policy-to-an-xml-file.md @@ -12,7 +12,8 @@ author: brianlic-msft # Export an AppLocker policy to an XML file **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to export an AppLocker policy to an XML file for review or testing. Membership in the local **Administrators** group, or equivalent, is the minimum required to complete this procedure. diff --git a/windows/device-security/applocker/how-applocker-works-techref.md b/windows/device-security/applocker/how-applocker-works-techref.md index 62d2d421b2..3de55c8243 100644 --- a/windows/device-security/applocker/how-applocker-works-techref.md +++ b/windows/device-security/applocker/how-applocker-works-techref.md @@ -12,7 +12,8 @@ author: brianlic-msft # How AppLocker works **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional provides links to topics about AppLocker architecture and components, processes and interactions, rules and policies. diff --git a/windows/device-security/applocker/import-an-applocker-policy-from-another-computer.md b/windows/device-security/applocker/import-an-applocker-policy-from-another-computer.md index cf54553474..2d1b3617ef 100644 --- a/windows/device-security/applocker/import-an-applocker-policy-from-another-computer.md +++ b/windows/device-security/applocker/import-an-applocker-policy-from-another-computer.md @@ -12,7 +12,8 @@ author: brianlic-msft # Import an AppLocker policy from another computer **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes how to import an AppLocker policy. diff --git a/windows/device-security/applocker/import-an-applocker-policy-into-a-gpo.md b/windows/device-security/applocker/import-an-applocker-policy-into-a-gpo.md index ffe9f4653c..f3d0a7dc0c 100644 --- a/windows/device-security/applocker/import-an-applocker-policy-into-a-gpo.md +++ b/windows/device-security/applocker/import-an-applocker-policy-into-a-gpo.md @@ -12,7 +12,8 @@ author: brianlic-msft # Import an AppLocker policy into a GPO **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to import an AppLocker policy into a Group Policy Object (GPO). AppLocker policies can be created as local security policies and modified like any other local security policy, or they can be created as part of a GPO and managed by using Group Policy. You can create AppLocker policies on any supported computer. For info about which Windows editions are supported, see [Requirements to Use AppLocker](requirements-to-use-applocker.md). diff --git a/windows/device-security/applocker/maintain-applocker-policies.md b/windows/device-security/applocker/maintain-applocker-policies.md index 7f7e943e6b..f35b3a4551 100644 --- a/windows/device-security/applocker/maintain-applocker-policies.md +++ b/windows/device-security/applocker/maintain-applocker-policies.md @@ -12,7 +12,8 @@ author: brianlic-msft # Maintain AppLocker policies **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes how to maintain rules within AppLocker policies. diff --git a/windows/device-security/applocker/manage-packaged-apps-with-applocker.md b/windows/device-security/applocker/manage-packaged-apps-with-applocker.md index fbb161890c..b56ac2b7d7 100644 --- a/windows/device-security/applocker/manage-packaged-apps-with-applocker.md +++ b/windows/device-security/applocker/manage-packaged-apps-with-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Manage packaged apps with AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes concepts and lists procedures to help you manage Packaged apps with AppLocker as part of your overall application control strategy. diff --git a/windows/device-security/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md b/windows/device-security/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md index d858aeb748..9fb22206f3 100644 --- a/windows/device-security/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md +++ b/windows/device-security/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md @@ -12,7 +12,8 @@ author: brianlic-msft # Merge AppLocker policies by using Set-ApplockerPolicy **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to merge AppLocker policies by using Windows PowerShell. diff --git a/windows/device-security/applocker/merge-applocker-policies-manually.md b/windows/device-security/applocker/merge-applocker-policies-manually.md index a694b64637..da3bd37a55 100644 --- a/windows/device-security/applocker/merge-applocker-policies-manually.md +++ b/windows/device-security/applocker/merge-applocker-policies-manually.md @@ -12,7 +12,8 @@ author: brianlic-msft # Merge AppLocker policies manually **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to manually merge AppLocker policies to update the Group Policy Object (GPO). diff --git a/windows/device-security/applocker/monitor-application-usage-with-applocker.md b/windows/device-security/applocker/monitor-application-usage-with-applocker.md index bfb1fe9d5d..3460b00c1d 100644 --- a/windows/device-security/applocker/monitor-application-usage-with-applocker.md +++ b/windows/device-security/applocker/monitor-application-usage-with-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Monitor app usage with AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes how to monitor app usage when AppLocker policies are applied. diff --git a/windows/device-security/applocker/optimize-applocker-performance.md b/windows/device-security/applocker/optimize-applocker-performance.md index 750072c6b4..efb9e9f766 100644 --- a/windows/device-security/applocker/optimize-applocker-performance.md +++ b/windows/device-security/applocker/optimize-applocker-performance.md @@ -12,7 +12,8 @@ author: brianlic-msft # Optimize AppLocker performance **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes how to optimize AppLocker policy enforcement. diff --git a/windows/device-security/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md b/windows/device-security/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md index 9209b7ab41..52784431c3 100644 --- a/windows/device-security/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md +++ b/windows/device-security/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Packaged apps and packaged app installer rules in AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic explains the AppLocker rule collection for packaged app installers and packaged apps. diff --git a/windows/device-security/applocker/plan-for-applocker-policy-management.md b/windows/device-security/applocker/plan-for-applocker-policy-management.md index eefcb27381..c1a3752333 100644 --- a/windows/device-security/applocker/plan-for-applocker-policy-management.md +++ b/windows/device-security/applocker/plan-for-applocker-policy-management.md @@ -12,7 +12,8 @@ author: brianlic-msft # Plan for AppLocker policy management **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for describes the decisions you need to make to establish the processes for managing and maintaining AppLocker policies. diff --git a/windows/device-security/applocker/refresh-an-applocker-policy.md b/windows/device-security/applocker/refresh-an-applocker-policy.md index 06ead87cf6..e654e73a1b 100644 --- a/windows/device-security/applocker/refresh-an-applocker-policy.md +++ b/windows/device-security/applocker/refresh-an-applocker-policy.md @@ -12,7 +12,8 @@ author: brianlic-msft # Refresh an AppLocker policy **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to force an update for an AppLocker policy. diff --git a/windows/device-security/applocker/requirements-for-deploying-applocker-policies.md b/windows/device-security/applocker/requirements-for-deploying-applocker-policies.md index 5397c0caf7..e8e021aab1 100644 --- a/windows/device-security/applocker/requirements-for-deploying-applocker-policies.md +++ b/windows/device-security/applocker/requirements-for-deploying-applocker-policies.md @@ -12,7 +12,8 @@ author: brianlic-msft # Requirements for deploying AppLocker policies **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This deployment topic for the IT professional lists the requirements that you need to consider before you deploy AppLocker policies. diff --git a/windows/device-security/applocker/requirements-to-use-applocker.md b/windows/device-security/applocker/requirements-to-use-applocker.md index a22efdb6e6..a4114f89bb 100644 --- a/windows/device-security/applocker/requirements-to-use-applocker.md +++ b/windows/device-security/applocker/requirements-to-use-applocker.md @@ -13,7 +13,8 @@ author: brianlic-msft # Requirements to use AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems. diff --git a/windows/device-security/applocker/run-the-automatically-generate-rules-wizard.md b/windows/device-security/applocker/run-the-automatically-generate-rules-wizard.md index 474bd75f9a..e75cea6f95 100644 --- a/windows/device-security/applocker/run-the-automatically-generate-rules-wizard.md +++ b/windows/device-security/applocker/run-the-automatically-generate-rules-wizard.md @@ -12,7 +12,8 @@ author: brianlic-msft # Run the Automatically Generate Rules wizard **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes steps to run the wizard to create AppLocker rules on a reference device. diff --git a/windows/device-security/applocker/script-rules-in-applocker.md b/windows/device-security/applocker/script-rules-in-applocker.md index 3860478f4e..f3f8717563 100644 --- a/windows/device-security/applocker/script-rules-in-applocker.md +++ b/windows/device-security/applocker/script-rules-in-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Script rules in AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes the file formats and available default rules for the script rule collection. diff --git a/windows/device-security/applocker/security-considerations-for-applocker.md b/windows/device-security/applocker/security-considerations-for-applocker.md index e8b54e6971..e8648d0354 100644 --- a/windows/device-security/applocker/security-considerations-for-applocker.md +++ b/windows/device-security/applocker/security-considerations-for-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Security considerations for AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes the security considerations you need to address when implementing AppLocker. diff --git a/windows/device-security/applocker/select-types-of-rules-to-create.md b/windows/device-security/applocker/select-types-of-rules-to-create.md index dc24ffd216..01004b57ab 100644 --- a/windows/device-security/applocker/select-types-of-rules-to-create.md +++ b/windows/device-security/applocker/select-types-of-rules-to-create.md @@ -12,7 +12,8 @@ author: brianlic-msft # Select the types of rules to create **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic lists resources you can use when selecting your application control policy rules by using AppLocker. diff --git a/windows/device-security/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md b/windows/device-security/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md index 4a05c878df..207597f3b2 100644 --- a/windows/device-security/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md +++ b/windows/device-security/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md @@ -12,7 +12,8 @@ author: brianlic-msft # Test an AppLocker policy by using Test-AppLockerPolicy **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes the steps to test an AppLocker policy prior to importing it into a Group Policy Object (GPO) or another computer. diff --git a/windows/device-security/applocker/test-and-update-an-applocker-policy.md b/windows/device-security/applocker/test-and-update-an-applocker-policy.md index 1de694d350..4c0cfb3d2f 100644 --- a/windows/device-security/applocker/test-and-update-an-applocker-policy.md +++ b/windows/device-security/applocker/test-and-update-an-applocker-policy.md @@ -12,7 +12,8 @@ author: brianlic-msft # Test and update an AppLocker policy **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic discusses the steps required to test an AppLocker policy prior to deployment. diff --git a/windows/device-security/applocker/tools-to-use-with-applocker.md b/windows/device-security/applocker/tools-to-use-with-applocker.md index b2af01dd5b..41f6908931 100644 --- a/windows/device-security/applocker/tools-to-use-with-applocker.md +++ b/windows/device-security/applocker/tools-to-use-with-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Tools to use with AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes the tools available to create and administer AppLocker policies. diff --git a/windows/device-security/applocker/understand-applocker-enforcement-settings.md b/windows/device-security/applocker/understand-applocker-enforcement-settings.md index b6c044e463..c5552f0544 100644 --- a/windows/device-security/applocker/understand-applocker-enforcement-settings.md +++ b/windows/device-security/applocker/understand-applocker-enforcement-settings.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understand AppLocker enforcement settings **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes the AppLocker enforcement settings for rule collections. diff --git a/windows/device-security/applocker/understand-applocker-policy-design-decisions.md b/windows/device-security/applocker/understand-applocker-policy-design-decisions.md index 4a6a8fd33c..b7b3d4f4c2 100644 --- a/windows/device-security/applocker/understand-applocker-policy-design-decisions.md +++ b/windows/device-security/applocker/understand-applocker-policy-design-decisions.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understand AppLocker policy design decisions **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional lists the design questions, possible answers, and ramifications of the decisions when you plan a deployment of application control policies by using AppLocker within a Windows operating system environment. diff --git a/windows/device-security/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md b/windows/device-security/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md index 3b3f14d9b5..76be28c269 100644 --- a/windows/device-security/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md +++ b/windows/device-security/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understand AppLocker rules and enforcement setting inheritance in Group Policy **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes how application control policies configured in AppLocker are applied through Group Policy. diff --git a/windows/device-security/applocker/understand-the-applocker-policy-deployment-process.md b/windows/device-security/applocker/understand-the-applocker-policy-deployment-process.md index 77fdf82bd7..ba135fa083 100644 --- a/windows/device-security/applocker/understand-the-applocker-policy-deployment-process.md +++ b/windows/device-security/applocker/understand-the-applocker-policy-deployment-process.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understand the AppLocker policy deployment process **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This planning and deployment topic for the IT professional describes the process for using AppLocker when deploying application control policies. diff --git a/windows/device-security/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md b/windows/device-security/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md index e71a5fc40d..cab8554448 100644 --- a/windows/device-security/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md +++ b/windows/device-security/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understanding AppLocker allow and deny actions on rules **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic explains the differences between allow and deny actions on AppLocker rules. diff --git a/windows/device-security/applocker/understanding-applocker-default-rules.md b/windows/device-security/applocker/understanding-applocker-default-rules.md index 8dea138a74..506b5b73f2 100644 --- a/windows/device-security/applocker/understanding-applocker-default-rules.md +++ b/windows/device-security/applocker/understanding-applocker-default-rules.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understanding AppLocker default rules **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professional describes the set of rules that can be used to ensure that required Windows system files are allowed to run when the policy is applied. diff --git a/windows/device-security/applocker/understanding-applocker-rule-behavior.md b/windows/device-security/applocker/understanding-applocker-rule-behavior.md index e4b16b02a7..c2b0777b71 100644 --- a/windows/device-security/applocker/understanding-applocker-rule-behavior.md +++ b/windows/device-security/applocker/understanding-applocker-rule-behavior.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understanding AppLocker rule behavior **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes how AppLocker rules are enforced by using the allow and deny options in AppLocker. diff --git a/windows/device-security/applocker/understanding-applocker-rule-collections.md b/windows/device-security/applocker/understanding-applocker-rule-collections.md index 078f0f86e5..04b78ce9ba 100644 --- a/windows/device-security/applocker/understanding-applocker-rule-collections.md +++ b/windows/device-security/applocker/understanding-applocker-rule-collections.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understanding AppLocker rule collections **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic explains the five different types of AppLocker rules used to enforce AppLocker policies. diff --git a/windows/device-security/applocker/understanding-applocker-rule-condition-types.md b/windows/device-security/applocker/understanding-applocker-rule-condition-types.md index 4c5846fbb2..e96ad95beb 100644 --- a/windows/device-security/applocker/understanding-applocker-rule-condition-types.md +++ b/windows/device-security/applocker/understanding-applocker-rule-condition-types.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understanding AppLocker rule condition types **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes the three types of AppLocker rule conditions. diff --git a/windows/device-security/applocker/understanding-applocker-rule-exceptions.md b/windows/device-security/applocker/understanding-applocker-rule-exceptions.md index 4fefe490b2..0020f81022 100644 --- a/windows/device-security/applocker/understanding-applocker-rule-exceptions.md +++ b/windows/device-security/applocker/understanding-applocker-rule-exceptions.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understanding AppLocker rule exceptions **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes the result of applying AppLocker rule exceptions to rule collections. diff --git a/windows/device-security/applocker/understanding-the-file-hash-rule-condition-in-applocker.md b/windows/device-security/applocker/understanding-the-file-hash-rule-condition-in-applocker.md index c881bd6628..2eacfe3d74 100644 --- a/windows/device-security/applocker/understanding-the-file-hash-rule-condition-in-applocker.md +++ b/windows/device-security/applocker/understanding-the-file-hash-rule-condition-in-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understanding the file hash rule condition in AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic explains the AppLocker file hash rule condition, the advantages and disadvantages, and how it is applied. diff --git a/windows/device-security/applocker/understanding-the-path-rule-condition-in-applocker.md b/windows/device-security/applocker/understanding-the-path-rule-condition-in-applocker.md index 2ce7467d62..a8e2676908 100644 --- a/windows/device-security/applocker/understanding-the-path-rule-condition-in-applocker.md +++ b/windows/device-security/applocker/understanding-the-path-rule-condition-in-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understanding the path rule condition in AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic explains the AppLocker path rule condition, the advantages and disadvantages, and how it is applied. diff --git a/windows/device-security/applocker/understanding-the-publisher-rule-condition-in-applocker.md b/windows/device-security/applocker/understanding-the-publisher-rule-condition-in-applocker.md index 63b7465d51..8cbf42f94e 100644 --- a/windows/device-security/applocker/understanding-the-publisher-rule-condition-in-applocker.md +++ b/windows/device-security/applocker/understanding-the-publisher-rule-condition-in-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Understanding the publisher rule condition in AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic explains the AppLocker publisher rule condition, what controls are available, and how it is applied. diff --git a/windows/device-security/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md b/windows/device-security/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md index 410b912186..38f498aaaa 100644 --- a/windows/device-security/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md +++ b/windows/device-security/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md @@ -1,3 +1,4 @@ + --- title: Use a reference device to create and maintain AppLocker policies (Windows 10) description: This topic for the IT professional describes the steps to create and maintain AppLocker policies by using a reference computer. @@ -12,7 +13,8 @@ author: brianlic-msft # Use a reference device to create and maintain AppLocker policies **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes the steps to create and maintain AppLocker policies by using a reference computer. diff --git a/windows/device-security/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md b/windows/device-security/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md index 50871068a7..aae35f5e9c 100644 --- a/windows/device-security/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md +++ b/windows/device-security/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md @@ -12,7 +12,8 @@ author: brianlic-msft # Use AppLocker and Software Restriction Policies in the same domain **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes concepts and procedures to help you manage your application control strategy using Software Restriction Policies and AppLocker. diff --git a/windows/device-security/applocker/use-the-applocker-windows-powershell-cmdlets.md b/windows/device-security/applocker/use-the-applocker-windows-powershell-cmdlets.md index 876cba6077..4bdbfc5015 100644 --- a/windows/device-security/applocker/use-the-applocker-windows-powershell-cmdlets.md +++ b/windows/device-security/applocker/use-the-applocker-windows-powershell-cmdlets.md @@ -12,7 +12,8 @@ author: brianlic-msft # Use the AppLocker Windows PowerShell cmdlets **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes how each AppLocker Windows PowerShell cmdlet can help you administer your AppLocker application control policies. diff --git a/windows/device-security/applocker/using-event-viewer-with-applocker.md b/windows/device-security/applocker/using-event-viewer-with-applocker.md index b2224605ab..cfd2f5dd66 100644 --- a/windows/device-security/applocker/using-event-viewer-with-applocker.md +++ b/windows/device-security/applocker/using-event-viewer-with-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Using Event Viewer with AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic lists AppLocker events and describes how to use Event Viewer with AppLocker. diff --git a/windows/device-security/applocker/using-software-restriction-policies-and-applocker-policies.md b/windows/device-security/applocker/using-software-restriction-policies-and-applocker-policies.md index bacb59c5e9..c080b99c1f 100644 --- a/windows/device-security/applocker/using-software-restriction-policies-and-applocker-policies.md +++ b/windows/device-security/applocker/using-software-restriction-policies-and-applocker-policies.md @@ -12,7 +12,8 @@ author: brianlic-msft # Use Software Restriction Policies and AppLocker policies **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes how to use Software Restriction Policies (SRP) and AppLocker policies in the same Windows deployment. diff --git a/windows/device-security/applocker/what-is-applocker.md b/windows/device-security/applocker/what-is-applocker.md index 36e45237fd..6fe751c8cb 100644 --- a/windows/device-security/applocker/what-is-applocker.md +++ b/windows/device-security/applocker/what-is-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # What Is AppLocker? **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for the IT professional describes what AppLocker is and how its features differ from Software Restriction Policies. diff --git a/windows/device-security/applocker/windows-installer-rules-in-applocker.md b/windows/device-security/applocker/windows-installer-rules-in-applocker.md index 5487badaa9..550fac37bc 100644 --- a/windows/device-security/applocker/windows-installer-rules-in-applocker.md +++ b/windows/device-security/applocker/windows-installer-rules-in-applocker.md @@ -12,7 +12,8 @@ author: brianlic-msft # Windows Installer rules in AppLocker **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic describes the file formats and available default rules for the Windows Installer rule collection. diff --git a/windows/device-security/applocker/working-with-applocker-policies.md b/windows/device-security/applocker/working-with-applocker-policies.md index f050f94cd2..9932ebcb85 100644 --- a/windows/device-security/applocker/working-with-applocker-policies.md +++ b/windows/device-security/applocker/working-with-applocker-policies.md @@ -12,7 +12,8 @@ author: brianlic-msft # Working with AppLocker policies **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals provides links to procedural topics about creating, maintaining, and testing AppLocker policies. diff --git a/windows/device-security/applocker/working-with-applocker-rules.md b/windows/device-security/applocker/working-with-applocker-rules.md index 2c9e9b4f1f..38fb27d6e8 100644 --- a/windows/device-security/applocker/working-with-applocker-rules.md +++ b/windows/device-security/applocker/working-with-applocker-rules.md @@ -12,7 +12,8 @@ author: brianlic-msft # Working with AppLocker rules **Applies to** - - Windows 10, Windows Server + - Windows 10 + - Windows Server This topic for IT professionals describes AppLocker rule types and how to work with them for your application control policies.