| Microsoft Office Outlook offline data files (PST and OST files) are not marked as Work files, and are therefore not protected.
From 9c21a3819afe78fb72cf7dbf42cbd8c3d5a42bcf Mon Sep 17 00:00:00 2001
From: VLG17 <41186174+VLG17@users.noreply.github.com>
Date: Wed, 27 May 2020 11:21:11 +0300
Subject: [PATCH 006/129] update config
https://github.com/MicrosoftDocs/windows-itpro-docs/issues/5890
---
.../hello-for-business/feature-multifactor-unlock.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md
index a3a94da88d..916d1cf629 100644
--- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md
+++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md
@@ -299,7 +299,7 @@ This example configures the same as example 2 using compounding And elements. T
#### Example 4
This example configures Wi-Fi as a trusted signal (Windows 10, version 1803)
```
-
+
contoso
12-ab-34-ff-e5-46
From 21d010d8a96f9698c4bbf5b6b7785d34b8a14d9a Mon Sep 17 00:00:00 2001
From: v-jodben <65978782+v-jodben@users.noreply.github.com>
Date: Wed, 27 May 2020 11:56:44 -0700
Subject: [PATCH 007/129] Update hololens-multiple-users.md
Line 40 edit - " - HoloLens 2 users may select the user tile on the top of the Pins panel to sign out the current user." Removed 'Pins panel' with "Start menu"
---
devices/hololens/hololens-multiple-users.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/devices/hololens/hololens-multiple-users.md b/devices/hololens/hololens-multiple-users.md
index d65929d676..806af9d3d1 100644
--- a/devices/hololens/hololens-multiple-users.md
+++ b/devices/hololens/hololens-multiple-users.md
@@ -37,7 +37,7 @@ To use HoloLens, each user follows these steps:
1. If another user has been using the device, do one of the following:
- Press the power button once to go to standby, and then press the power button again to return to the lock screen
- - HoloLens 2 users may select the user tile on the top of the Pins panel to sign out the current user.
+ - HoloLens 2 users may select the user tile on the top of the Start menu to sign out the current user.
1. Use your Azure AD account credentials to sign in to the device.
If this is the first time that you have used the device, you have to [calibrate](hololens-calibration.md) HoloLens to your own eyes.
From 27f6b62e67d699398b93a0cbc7f11f5ffce6d5bd Mon Sep 17 00:00:00 2001
From: v-jodben <65978782+v-jodben@users.noreply.github.com>
Date: Wed, 27 May 2020 12:24:26 -0700
Subject: [PATCH 008/129] Update hololens1-upgrade-enterprise.md
Added Important note to Line 19, 20; '> [!IMPORTANT] This page only applies to HoloLens 1st Gen.'
---
devices/hololens/hololens1-upgrade-enterprise.md | 3 +++
1 file changed, 3 insertions(+)
diff --git a/devices/hololens/hololens1-upgrade-enterprise.md b/devices/hololens/hololens1-upgrade-enterprise.md
index 5e535af10d..6a2e45d571 100644
--- a/devices/hololens/hololens1-upgrade-enterprise.md
+++ b/devices/hololens/hololens1-upgrade-enterprise.md
@@ -16,6 +16,9 @@ appliesto:
# Unlock Windows Holographic for Business features
+> [!IMPORTANT]
+> This page only applies to HoloLens 1st Gen.
+
Microsoft HoloLens is available in the *Development Edition*, which runs Windows Holographic (an edition of Windows 10 that is designed for HoloLens), and in the [Commercial Suite](hololens-commercial-features.md), which provides extra features designed for business.
When you purchase the Commercial Suite, you receive a license that upgrades Windows Holographic to Windows Holographic for Business. You can apply this license to the device either by using the organization's [mobile device management (MDM) provider](#edition-upgrade-by-using-mdm) or a [provisioning package](#edition-upgrade-by-using-a-provisioning-package).
From 4e93eed6e0524d7eadcbd1ea621c56393662364f Mon Sep 17 00:00:00 2001
From: v-jodben <65978782+v-jodben@users.noreply.github.com>
Date: Wed, 27 May 2020 12:31:19 -0700
Subject: [PATCH 009/129] Update hololens-multiple-users.md
edited line 40 ti remove reference of Pins menu and replaced with Start menu
---
devices/hololens/hololens-multiple-users.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/devices/hololens/hololens-multiple-users.md b/devices/hololens/hololens-multiple-users.md
index d65929d676..67860a5dd0 100644
--- a/devices/hololens/hololens-multiple-users.md
+++ b/devices/hololens/hololens-multiple-users.md
@@ -37,7 +37,7 @@ To use HoloLens, each user follows these steps:
1. If another user has been using the device, do one of the following:
- Press the power button once to go to standby, and then press the power button again to return to the lock screen
- - HoloLens 2 users may select the user tile on the top of the Pins panel to sign out the current user.
+ - HoloLens 2 users may select the user tile from the Start menu to sign out the current user.
1. Use your Azure AD account credentials to sign in to the device.
If this is the first time that you have used the device, you have to [calibrate](hololens-calibration.md) HoloLens to your own eyes.
From d8542d4d592a043c44648c13c36fee344041de6d Mon Sep 17 00:00:00 2001
From: Mizanur Rahman <41208456+Mizanurra@users.noreply.github.com>
Date: Thu, 28 May 2020 12:42:22 -0700
Subject: [PATCH 010/129] Update hololens2-autopilot.md
Corrected ARC and HoloLens OS version minimum requirements.
---
devices/hololens/hololens2-autopilot.md | 7 +++----
1 file changed, 3 insertions(+), 4 deletions(-)
diff --git a/devices/hololens/hololens2-autopilot.md b/devices/hololens/hololens2-autopilot.md
index 39e0029ff0..17f06ef401 100644
--- a/devices/hololens/hololens2-autopilot.md
+++ b/devices/hololens/hololens2-autopilot.md
@@ -71,10 +71,9 @@ Review the "[Requirements](https://docs.microsoft.com/windows/deployment/windows
Before you start the OOBE and provisioning process, make sure that the HoloLens devices meet the following requirements:
- The devices are not already members of Azure AD, and are not enrolled in Intune (or another MDM system). The Autopilot self-deploying process completes these steps. To make sure that all the device-related information is cleaned up, check the **Devices** pages in both Azure AD and Intune.
-- Every device can connect to the internet. You can "USB C to Ethernet" adapters for wired internet connectivity or "USB C to Wifi" adapters for wireless internet connectivity.
-- Every device can connect to a computer by using a USB-C cable, and that computer has the following available:
- - Advanced Recovery Companion (ARC)
- - The latest Windows update: Windows 10, version 19041.1002.200107-0909 or a later version)
+- Every device can connect to the internet. You can use "USB C to Ethernet" adapters for wired internet connectivity or "USB C to Wifi" adapters for wireless internet connectivity.
+- Every device can connect to a computer by using a USB-C cable, and that computer has [Advanced Recovery Companion (ARC)](https://www.microsoft.com/en-us/p/advanced-recovery-companion/9p74z35sfrs8?rtc=1&activetab=pivot:overviewtab) installed
+- Every device has the latest Windows update: Windows 10, version 19041.1002.200107-0909 or a later version.
To configure and manage the Autopilot self-deploying mode profiles, make sure that you have access to [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com).
From 46e217bff1cd04bc2644373c8faf4c535e5b6367 Mon Sep 17 00:00:00 2001
From: jaimeo
Date: Mon, 1 Jun 2020 11:03:34 -0700
Subject: [PATCH 011/129] safety checkin
---
.../get-started-updates-channels-tools.md | 79 +++++++++++++++++++
1 file changed, 79 insertions(+)
create mode 100644 windows/deployment/update/get-started-updates-channels-tools.md
diff --git a/windows/deployment/update/get-started-updates-channels-tools.md b/windows/deployment/update/get-started-updates-channels-tools.md
new file mode 100644
index 0000000000..464a910a20
--- /dev/null
+++ b/windows/deployment/update/get-started-updates-channels-tools.md
@@ -0,0 +1,79 @@
+---
+title: Windows 10 updates, channels, and tools
+description:
+keywords: updates, servicing, current, deployment, semi-annual channel, feature, quality, rings, insider, tools
+ms.prod: w10
+ms.mktglfcycl: manage
+author: jaimeo
+ms.localizationpriority: medium
+ms.author: jaimeo
+ms.reviewer:
+manager: laurawi
+ms.topic: article
+---
+
+# Windows 10 updates, channels, and tools
+
+## How Windows updates work
+
+There are four phases to the Windows Update process:
+• Scan. A devices checks the Microsoft Update server or your WSUS endpoint at random intervals to see if
+any updates have been added since the last time updates were searched, and then evaluates whether the
+update is appropriate by checking the guidelines (e.g. Group Policies) that have been set up by the
+administrator. This process is invisible to the user.
+• Download. Once the device determines that an update is available, it begins downloading the update.
+The download process is also invisible to the user. With feature updates, download happens in multiple
+sequential phases.
+• Install. After the update is downloaded, depending on the device’s Windows Update settings, the update
+is installed on the system.
+• Commit and restart. Once installed, the device usually (but not always) must be restarted in order to
+complete the installation and begin using the update. Before that phase a device runs the previous
+version of the software.
+
+## Types of updates
+
+We include information here about a number of different update types you'll hear about, but the two overarching types which you have the most direct control over are *feature updates* and *quality updates*.
+
+- **Feature updates**: Released twice per year, around March and September. Feature updates add new features and functionality to Windows 10. Because they are delivered frequently (rather than every 3-5 years), they are easier to manage.
+- **Security updates**: Updates that fix security issues that have been discovered are typically included in monthly *quality updates*, but of course can be released out of band whenever necessary for severe issues (referred to as *critical updates*).
+- **Quality updates**: Quality updates deliver both security and non-security fixes to Windows 10. They are typically released on the second Tuesday of each month, though they can be released at any time. Quality updates include security updates, critical updates, servicing stack updates, and driver updates. Quality updates are *cumulative*, so installing the latest quality update is sufficient to get all the available fixes for a specific Windows 10 feature update, including any out-of-band security fixes and any *servicing stack updates* that might have been released previously.
+- **Servicing stack updates**: The "servicing stack" is the code component that actually installs Windows updates. From time to time, the servicing stack itself needs to be updated in order to function smoothly. If you don't install the latest servicing stack update, there's a risk that your device can't be updated with the latest Microsoft security fixes. Servicing stack updates are not necessarily included in *every* monthly quality update, and occasionally are released out of band to address a late-breaking issue. Always install the latest available quality update to catch any servicing stack updates that might have been released. The servicing stack also contains the "component-based servicing stack" (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components. The CBS is a small component that typically does not have updates released every month. You can find a list of servicing stack updates at [Latest servicing stack updates](https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001). For more detail about servicing stack updates, see s[Servicing stack updates](servicing-stack-updates.md).
+ **Driver updates:** these are non-Microsoft drivers that are applicable to your devices. You can turn off driver updates by using Windows Update for Business policies, if desired.
+- **Microsoft product updates**: these are updates for other Microsoft products, such as Office. You can enable or disable Microsoft updates by using Windows Update for Business policies.
+
+
+## Servicing channels
+
+Windows 10 offers three servicing channels, each of which offers you a different level of flexibility with how and when updates are delivered to devices. Using the different servicing channels allows you to deploy Windows 10 "as a service" which conceives of deployment as a continual process of updates which roll out across the organization in waves. In this approach, an update is plugged into this process and while it runs, you monitor for anomalies, errors, or user impact and respond as issues arise--without interrupting the entire process.
+
+The first step of controlling when and how devices install updates is assigning them to the appropriate servicing channel. You can assign devices to a particular channel with any of several tools, including Microsoft Endpoint Configuration Manager, Windows Server Update Services (WSUS), and Group Policy settings applied by any of several means. By dividing devices into different populations ("deployment groups" or "rings") you can use servicing channel assignment, followed by other management features such as update deferral policies, to create a phased deployment of any update that allows you to start with a limited pilot deployment for testing before moving to a broad deployment throughout your organization.
+
+### Semi-Annual Channel
+
+In the Semi-Annual Channel, feature updates are available as soon as Microsoft releases them, twice per year. As long as a device isn't set to defer feature updates, any device using the Semi-Annual Channel will install a feature update as soon as it's released. If you use Windows Update for Business, the Semi-Annual Channel provides three months of additional total deployment time before being required to update to the next release.{IS THIS STILL TRUE?}
+
+> [!NOTE]
+> All releases of Windows 10 have **18 months of servicing for all editions**--these updates provide security and feature updates for the release. However, fall releases of the **Enterprise and Education editions** will have an **additional 12 months of servicing for specific Windows 10 releases, for a total of 30 months from initial release**. This extended servicing window applies to Enterprise and Education editions starting with Windows 10, version 1607.
+
+### Windows Insider program
+
+Insider preview releases are made available during the development of the features that will be shipped in the next feature update, enabling organizations to validate new features as well as compatibility with existing apps and infrastructure, providing feedback to Microsoft on any issues encountered.
+
+### Long-term Servicing Channel
+
+The **Long Term Servicing Channel** is designed to be used only for specialized devices (which typically don't run Office) such as those that control medical equipment or ATMs. Devices on this channel receive new feature releases every two to three years. LTSB releases service a special LTSB edition of Windows 10 and are only available through the [Microsoft Volume Licensing Center](https://www.microsoft.com/Licensing/servicecenter/default.aspx).
+
+The Semi-Annual Channel is the default servicing channel for all Windows 10 devices except those with the LTSB edition installed. The following table shows the servicing channels available to each Windows 10 edition.
+
+| Windows 10 edition | Semi-Annual Channel | Long-Term Servicing Channel | Insider Program |
+| --- | --- | --- | --- |
+| Home |  |  |  |
+| Pro |  |  |  |
+| Enterprise |  |  |  |
+| Enterprise LTSB |  |  |  |
+| Pro Education |  |  |  |
+| Education |  |  |  |
+
+
+
+## Servicing tools
\ No newline at end of file
From 7a042785bbaf48c4281ee12ea3cfa77a92a0febb Mon Sep 17 00:00:00 2001
From: jaimeo
Date: Mon, 1 Jun 2020 14:10:19 -0700
Subject: [PATCH 012/129] safety checkin
---
.../get-started-updates-channels-tools.md | 29 +++++++++----------
1 file changed, 13 insertions(+), 16 deletions(-)
diff --git a/windows/deployment/update/get-started-updates-channels-tools.md b/windows/deployment/update/get-started-updates-channels-tools.md
index 464a910a20..c5a10bfb3f 100644
--- a/windows/deployment/update/get-started-updates-channels-tools.md
+++ b/windows/deployment/update/get-started-updates-channels-tools.md
@@ -16,30 +16,27 @@ ms.topic: article
## How Windows updates work
-There are four phases to the Windows Update process:
-• Scan. A devices checks the Microsoft Update server or your WSUS endpoint at random intervals to see if
-any updates have been added since the last time updates were searched, and then evaluates whether the
-update is appropriate by checking the guidelines (e.g. Group Policies) that have been set up by the
+There are four phases to the Windows update process:
+
+- **Scan:** A device checks the Microsoft Update server or your Windows Server Update Services (WSUS) endpoint at random intervals to see if
+any updates have been added since the last time updates were searched, and then evaluates whether the update is appropriate by checking the policies that have been set up by the
administrator. This process is invisible to the user.
-• Download. Once the device determines that an update is available, it begins downloading the update.
-The download process is also invisible to the user. With feature updates, download happens in multiple
+- **Download:** Once the device determines that an update is available, it begins downloading the update. The download process is also invisible to the user. With feature updates, download happens in multiple
sequential phases.
-• Install. After the update is downloaded, depending on the device’s Windows Update settings, the update
-is installed on the system.
-• Commit and restart. Once installed, the device usually (but not always) must be restarted in order to
-complete the installation and begin using the update. Before that phase a device runs the previous
+- **Install:** After the update is downloaded, depending on the device’s Windows Update settings, the update is installed on the system.
+- **Commit and restart:** Once installed, the device usually (but not always) must be restarted in order to complete the installation and begin using the update. Before that happens, a device is still running the previous
version of the software.
## Types of updates
We include information here about a number of different update types you'll hear about, but the two overarching types which you have the most direct control over are *feature updates* and *quality updates*.
-- **Feature updates**: Released twice per year, around March and September. Feature updates add new features and functionality to Windows 10. Because they are delivered frequently (rather than every 3-5 years), they are easier to manage.
-- **Security updates**: Updates that fix security issues that have been discovered are typically included in monthly *quality updates*, but of course can be released out of band whenever necessary for severe issues (referred to as *critical updates*).
-- **Quality updates**: Quality updates deliver both security and non-security fixes to Windows 10. They are typically released on the second Tuesday of each month, though they can be released at any time. Quality updates include security updates, critical updates, servicing stack updates, and driver updates. Quality updates are *cumulative*, so installing the latest quality update is sufficient to get all the available fixes for a specific Windows 10 feature update, including any out-of-band security fixes and any *servicing stack updates* that might have been released previously.
-- **Servicing stack updates**: The "servicing stack" is the code component that actually installs Windows updates. From time to time, the servicing stack itself needs to be updated in order to function smoothly. If you don't install the latest servicing stack update, there's a risk that your device can't be updated with the latest Microsoft security fixes. Servicing stack updates are not necessarily included in *every* monthly quality update, and occasionally are released out of band to address a late-breaking issue. Always install the latest available quality update to catch any servicing stack updates that might have been released. The servicing stack also contains the "component-based servicing stack" (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components. The CBS is a small component that typically does not have updates released every month. You can find a list of servicing stack updates at [Latest servicing stack updates](https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001). For more detail about servicing stack updates, see s[Servicing stack updates](servicing-stack-updates.md).
- **Driver updates:** these are non-Microsoft drivers that are applicable to your devices. You can turn off driver updates by using Windows Update for Business policies, if desired.
-- **Microsoft product updates**: these are updates for other Microsoft products, such as Office. You can enable or disable Microsoft updates by using Windows Update for Business policies.
+- **Feature updates:** Released twice per year, around March and September. Feature updates add new features and functionality to Windows 10. Because they are delivered frequently (rather than every 3-5 years), they are easier to manage.
+- **Security updates:** Updates that fix security issues that have been discovered are typically included in monthly *quality updates*, but of course can be released out of band whenever necessary for severe issues (referred to as *critical updates*).
+- **Quality updates:** Quality updates deliver both security and non-security fixes to Windows 10. They are typically released on the second Tuesday of each month, though they can be released at any time. Quality updates include security updates, critical updates, servicing stack updates, and driver updates. Quality updates are *cumulative*, so installing the latest quality update is sufficient to get all the available fixes for a specific Windows 10 feature update, including any out-of-band security fixes and any *servicing stack updates* that might have been released previously.
+- **Servicing stack updates:** The "servicing stack" is the code component that actually installs Windows updates. From time to time, the servicing stack itself needs to be updated in order to function smoothly. If you don't install the latest servicing stack update, there's a risk that your device can't be updated with the latest Microsoft security fixes. Servicing stack updates are not necessarily included in *every* monthly quality update, and occasionally are released out of band to address a late-breaking issue. Always install the latest available quality update to catch any servicing stack updates that might have been released. The servicing stack also contains the "component-based servicing stack" (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components. The CBS is a small component that typically does not have updates released every month. You can find a list of servicing stack updates at [Latest servicing stack updates](https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001). For more detail about servicing stack updates, see [Servicing stack updates](servicing-stack-updates.md).
+- **Driver updates**: These are updates to non-Microsoft drivers applicable to your devices. You can turn off driver updates by using Windows Update for Business policies, if desired. {WHAT ABOUT MS DRIVERS?}
+- **Microsoft product updates:** These are updates for other Microsoft products, such as Office. You can enable or disable Microsoft updates by using Windows Update for Business policies.
## Servicing channels
From 3c857f50d6c07bf3fc2e38b0b988b087e67a0682 Mon Sep 17 00:00:00 2001
From: jaimeo
Date: Mon, 1 Jun 2020 15:10:22 -0700
Subject: [PATCH 013/129] initial draft
---
.../update/plan-determine-app-readiness.md | 30 -----
.../update/prepare-deploy-windows.md | 107 ++++++++++++++++++
2 files changed, 107 insertions(+), 30 deletions(-)
create mode 100644 windows/deployment/update/prepare-deploy-windows.md
diff --git a/windows/deployment/update/plan-determine-app-readiness.md b/windows/deployment/update/plan-determine-app-readiness.md
index 29c3c93099..a952d5b02a 100644
--- a/windows/deployment/update/plan-determine-app-readiness.md
+++ b/windows/deployment/update/plan-determine-app-readiness.md
@@ -43,34 +43,4 @@ Combining the various validation methods with the app classifications you've pre
|Test in pilot | x | x | x |
-## Identify users
-Since your organization no doubt has a wide variety of users, each with different background and regular tasks, you'll have to choose which users are best suited for validation testing. Some factors to consider include:
-
-- **Location**: If users are in different physical locations, can you support them and get validation feedback from the region they're in?
-- **Application knowledge**: Do the users have appropriate knowledge of how the app is supposed to work?
-- **Technical ability**: Do the users have enough technical competence to provide useful feedback from various test scenarios?
-
-You could seek volunteers who enjoy working with new features and include them in the pilot deployment. You might want to avoid using core users like department heads or project managers. Current application owners, operations personnel, and developers can help you identify the most appropriate pilot users.
-
-## Identify and set up devices for validation
-
-In addition to users, it's important to carefully choose devices to participate in app validation as well. For example, ideally, your selection will include devices representing all of the hardware models in your environment.
-
-There is more than one way to choose devices for app validation:
-
-- **Existing pilot devices**: You might already have a list of devices that you regularly use for testing updates as part of release cycles.
-- **Manual selection**: Some internal groups like operations will have expertise to help choose devices manually based on specifications, usage, or records of past support problems.
-- **Data-driven analysis**: With appropriate tools, you can use diagnostic data from devices to inform your choices.
-
-
-## Desktop Analytics
-
-Desktop Analytics can make all of the tasks discussed in this article significantly easier:
-
-- Creating and maintaining an application and device inventory
-- Assign owners to applications for testing
-- Automatically apply your app classifications (critical, important, not important)
-- Automatically identify application compatibility risks and provide recommendations for reducing those risks
-
-For more information, see [What is Desktop Analytics?](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview)
diff --git a/windows/deployment/update/prepare-deploy-windows.md b/windows/deployment/update/prepare-deploy-windows.md
new file mode 100644
index 0000000000..3493cf01b3
--- /dev/null
+++ b/windows/deployment/update/prepare-deploy-windows.md
@@ -0,0 +1,107 @@
+---
+title: Prepare to deploy Windows
+description:
+keywords: updates, servicing, current, deployment, semi-annual channel, feature, quality, rings, insider, tools
+ms.prod: w10
+ms.mktglfcycl: manage
+author: jaimeo
+ms.localizationpriority: medium
+ms.author: jaimeo
+ms.reviewer:
+manager: laurawi
+ms.topic: article
+---
+
+# Prepare to deploy Windows
+
+Having worked through the activities in the planning phase, you should be in a good position to prepare your environment and process to deploy Windows 10. The planning phase will have left you with these useful items:
+
+- A clear understanding of necessary personnel and their roles and criteria for [rating app readiness](plan-define-readiness.md)
+- A plan for [testing and validating](plan-determine-app-readiness.md) apps
+- An assessment of your [deployment infrastructure](eval-infra-tools.md) and definitions for operational readiness
+- A [deployment plan](create-deployment-plan.md) that defines the rings you want to use
+
+Now you're ready to actually start making changes in your environment to get ready to deploy.
+
+## Prepare infrastructure and environment
+
+- Deploy site server updates for Configuration Manager.
+- Update non-Microsoft security tools like security agents or servers.
+- Update non-Microsoft management tools like data loss prevention agents.
+
+Your infrastructure probably includes many different components and tools. You’ll need to ensure your environment isn’t affected by issues due to the changes you make to the various parts of the infrastructure. Follow these steps:
+
+1. Review all of the infrastructure changes that you’ve identified in your plan. It’s important to understand the changes that need to be made and to detail how to implement them. This prevents problems later on.
+2. Validate your changes. You’ll validate the changes for your infrastructure’s components and tools, to help you understand how your changes could affect your production environment.
+3. Implement the changes. Once the changes have been validated, you can implement the changes across the wider infrastructure.
+
+
+You should also look at your organization’s environment’s configuration and outline how you’ll implement any necessary changes previously identified in the plan phase to support the update. Consider what you’ll need to do for the various settings and policies that currently underpin the environment. For example:
+
+- Implement new draft security guidance. New versions of Windows can include new features that improve your environment’s security. Your security teams will want to make appropriate changes to security related configurations.
+- Update security baselines. Security teams understand the relevant security baselines and will have to work to make sure all baselines fit into whatever guidance they have to adhere to.
+However, your configuration will consist of many different settings and policies. It’s important to only apply changes where they are necessary, and where you gain a clear improvement. Otherwise, your environment might face issues that will slow down the update process. You want to ensure your environment isn’t affected adversely because of changes you make. For example:
+
+1. Review new security settings. Your security team will review the new security settings, to understand how they can best be set to facilitate the update, and to also investigate the potential effects they might have on your environment.
+2. Review security baselines for changes. Security teams will also review all the necessary security baselines, to ensure the changes can be implemented, and ensure your environment remains compliant.
+3. Implement and validate security settings and baseline changes. Your security teams will then implement all of the security settings and baselines, having addressed any potential outstanding issues.
+
+
+## Prepare applications and devices
+
+You've previously decided on which validation methods you want to use to validate apps. Now is the time to identify users and devices you want to participate in app validation and get them ready.
+
+### Identify users
+
+Since your organization no doubt has a wide variety of users, each with different background and regular tasks, you'll have to choose which users are best suited for validation testing. Some factors to consider include:
+
+- **Location**: If users are in different physical locations, can you support them and get validation feedback from the region they're in?
+- **Application knowledge**: Do the users have appropriate knowledge of how the app is supposed to work?
+- **Technical ability**: Do the users have enough technical competence to provide useful feedback from various test scenarios?
+
+You could seek volunteers who enjoy working with new features and include them in the pilot deployment. You might want to avoid using core users like department heads or project managers. Current application owners, operations personnel, and developers can help you identify the most appropriate pilot users.
+
+### Identify and set up devices for validation
+
+In addition to users, it's important to carefully choose devices to participate in app validation as well. For example, ideally, your selection will include devices representing all of the hardware models in your environment.
+
+There is more than one way to choose devices for app validation:
+
+- **Existing pilot devices**: You might already have a list of devices that you regularly use for testing updates as part of release cycles.
+- **Manual selection**: Some internal groups like operations will have expertise to help choose devices manually based on specifications, usage, or records of past support problems.
+- **Data-driven analysis**: With appropriate tools, you can use diagnostic data from devices to inform your choices.
+
+
+### Desktop Analytics
+
+Desktop Analytics can make all of the tasks discussed in this article significantly easier:
+
+- Creating and maintaining an application and device inventory
+- Assign owners to applications for testing
+- Automatically apply your app classifications (critical, important, not important)
+- Automatically identify application compatibility risks and provide recommendations for reducing those risks
+
+For more information, see [What is Desktop Analytics?](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview)
+
+
+## Prepare capability
+
+In the plan phase, you determined the specific infrastructure and configuration changes that needed to be implemented to add new capabilities to the environment. Now you can move on to implementing those changes defined in the plan phase. You'll need to complete these higher-level tasks to gain those new capabilities:
+
+- Enable capabilities across the environment by implementing the changes. For example, implement updates to relevant ADMX templates in Active Directory. New Windows versions will come with new policies that you use to update ADMX templates.
+- Validate new changes to understand how they affect the wider environment.
+- Remediate any potential problems that have been identified through validation.
+
+## Prepare users
+
+Users often feel like they are forced into updating their devices randomly. They often don't fully understand why an update is needed, and they don't know when updates would be applied to their devices ahead of time. It's best to ensure that upcoming updates are communicated clearly and with adequate warning.
+
+You can employ a variety of measures to achieve this, for example:
+
+- Send overview email about the update and how it will be deployed to the entire organization.
+- Send personalized emails to users about the update with specific details.
+- Set an opt-out deadline for employees that need to remain on the current version for a bit longer, due to a business need.
+- Provide the ability to voluntarily update at users’ convenience.
+- Inform users of a mandatory installation date when the update will be installed on all devices.
+
+{I can include the calendar if desired, but the version in the source material isn't rendering well.}
From 89a098d234cb534309e6e6a4821b3e861af4c9f4 Mon Sep 17 00:00:00 2001
From: jaimeo
Date: Mon, 1 Jun 2020 15:44:01 -0700
Subject: [PATCH 014/129] added in detail on devices
---
.../update/plan-determine-app-readiness.md | 30 ++++++
.../update/prepare-deploy-windows.md | 95 ++++++++++++++-----
2 files changed, 103 insertions(+), 22 deletions(-)
diff --git a/windows/deployment/update/plan-determine-app-readiness.md b/windows/deployment/update/plan-determine-app-readiness.md
index a952d5b02a..b7e1707a7d 100644
--- a/windows/deployment/update/plan-determine-app-readiness.md
+++ b/windows/deployment/update/plan-determine-app-readiness.md
@@ -43,4 +43,34 @@ Combining the various validation methods with the app classifications you've pre
|Test in pilot | x | x | x |
+### Identify users
+Since your organization no doubt has a wide variety of users, each with different background and regular tasks, you'll have to choose which users are best suited for validation testing. Some factors to consider include:
+
+- **Location**: If users are in different physical locations, can you support them and get validation feedback from the region they're in?
+- **Application knowledge**: Do the users have appropriate knowledge of how the app is supposed to work?
+- **Technical ability**: Do the users have enough technical competence to provide useful feedback from various test scenarios?
+
+You could seek volunteers who enjoy working with new features and include them in the pilot deployment. You might want to avoid using core users like department heads or project managers. Current application owners, operations personnel, and developers can help you identify the most appropriate pilot users.
+
+### Identify and set up devices for validation
+
+In addition to users, it's important to carefully choose devices to participate in app validation as well. For example, ideally, your selection will include devices representing all of the hardware models in your environment.
+
+There is more than one way to choose devices for app validation:
+
+- **Existing pilot devices**: You might already have a list of devices that you regularly use for testing updates as part of release cycles.
+- **Manual selection**: Some internal groups like operations will have expertise to help choose devices manually based on specifications, usage, or records of past support problems.
+- **Data-driven analysis**: With appropriate tools, you can use diagnostic data from devices to inform your choices.
+
+
+### Desktop Analytics
+
+Desktop Analytics can make all of the tasks discussed in this article significantly easier:
+
+- Creating and maintaining an application and device inventory
+- Assign owners to applications for testing
+- Automatically apply your app classifications (critical, important, not important)
+- Automatically identify application compatibility risks and provide recommendations for reducing those risks
+
+For more information, see [What is Desktop Analytics?](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview)
diff --git a/windows/deployment/update/prepare-deploy-windows.md b/windows/deployment/update/prepare-deploy-windows.md
index 3493cf01b3..c5a28a2a9c 100644
--- a/windows/deployment/update/prepare-deploy-windows.md
+++ b/windows/deployment/update/prepare-deploy-windows.md
@@ -49,39 +49,90 @@ However, your configuration will consist of many different settings and policies
## Prepare applications and devices
-You've previously decided on which validation methods you want to use to validate apps. Now is the time to identify users and devices you want to participate in app validation and get them ready.
+You've previously decided on which validation methods you want to use to validate apps in the upcoming pilot deployment phase. Now is a good time to make sure that individual devices are ready and able to install the next update without difficulty.
-### Identify users
+### Ensure updates are available
-Since your organization no doubt has a wide variety of users, each with different background and regular tasks, you'll have to choose which users are best suited for validation testing. Some factors to consider include:
+Enable update services on devices. Ensure that every device is running all the services Windows Update relies on. Sometimes users or even malware can disable the services Windows Update requires to work correctly. Make sure the following services are running:
-- **Location**: If users are in different physical locations, can you support them and get validation feedback from the region they're in?
-- **Application knowledge**: Do the users have appropriate knowledge of how the app is supposed to work?
-- **Technical ability**: Do the users have enough technical competence to provide useful feedback from various test scenarios?
+- Background Intelligent Transfer Service
+- Background Tasks Infrastructure Service
+- BranchCache (if you use this feature for update deployment)
+- ConfigMgr Task Sequence Agent (if you use Configuration Manager to deploy updates)
+- Cryptographic Services
+- DCOM Server Process Launcher
+- Device Install
+- Delivery Optimization
+- Device Setup Manager
+- License Manager
+- Microsoft Account Sign-in Assistant
+- Microsoft Software Shadow Copy Provider
+- Remote Procedure Call (RPC)
+- Remote Procedure Call (RPC) Locator
+- RPC Endpoint Mapper
+- Service Control Manager
+- Task Scheduler
+- Token Broker
+- Update Orchestrator Service
+- Volume Shadow Copy Service
+- Windows Automatic Update Service
+- Windows Backup
+- Windows Defender Firewall
+- Windows Management Instrumentation
+- Windows Management Service
+- Windows Module Installer
+- Windows Push Notification
+- Windows Security Center Service
+- Windows Time Service
+- Windows Update
+- Windows Update Medic Service
-You could seek volunteers who enjoy working with new features and include them in the pilot deployment. You might want to avoid using core users like department heads or project managers. Current application owners, operations personnel, and developers can help you identify the most appropriate pilot users.
+You can check these services manually by using Services.msc, or by using PowerShell scripts, Desktop Analytics, or other methods.
-### Identify and set up devices for validation
+### Network configuration
-In addition to users, it's important to carefully choose devices to participate in app validation as well. For example, ideally, your selection will include devices representing all of the hardware models in your environment.
+Ensure that devices can reach necessary Windows Update endpoints through the firewall.
-There is more than one way to choose devices for app validation:
+### Optimize download bandwidth
+Set up [Delivery Optimization](waas-delivery-optimization.md) for peer network sharing or Microsoft Connected Cache.
-- **Existing pilot devices**: You might already have a list of devices that you regularly use for testing updates as part of release cycles.
-- **Manual selection**: Some internal groups like operations will have expertise to help choose devices manually based on specifications, usage, or records of past support problems.
-- **Data-driven analysis**: With appropriate tools, you can use diagnostic data from devices to inform your choices.
+### Address unhealthy devices
+
+In the course of surveying your device population, either with Desktop Analytics or by some other means, you might find devices that have systemic problems that could interfere with update installation. Now is the time to fix those problems.
+
+- **Low disk space:** Quality updates require a minimum of two GB to successfully install. Feature updates require between 8 and 15 GB depending upon the configuration. On Windows 10, version 1903 and later you can proactively use the "reserved storage" feature (for wipe and loads, rebuilds, and new builds) to avoid running out of disk space. If you find a group of devices that don't have enough disk space, you can often resolve this by cleaning up log files and asking users to clean up data if necessary. A good place to start is to delete the following files:
+- C:\Windows\temp
+- C:\Windows\cbstemp (though this file might be necessary to investigate update failures)
+- C:\Windows\WindowsUpdate.log (though this file might be necessary to investigate update failures)
+- C:\Windows.Old (these files should automatically clean up after 10 days or might ask the device user for permission to clean up sooner when constrained for disk space)
+
+You can also create and run scripts to perform additional cleanup actions on devices, with administrative rights, or use Group Policy settings.
+
+- Clean up the Windows Store Cache by running C:\Windows\sytem32\wsreset.exe
+- Optimize the WinSxS folder on the client machine by using **Dism.exe /online /Cleanup-Image /StartComponentCleanup**
+- Compact the operating system by running **Compact.exe /CompactOS:always**
+- Remove Windows Features on Demand that the user doesn't need. See [Features on Demand](https://docs.microsoft.com/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities) for more guidance.
+- Move Windows Known Folders to OneDrive. See [Use Group Policy to control OneDrive sync settings](https://docs.microsoft.com/onedrive/use-group-policy) for more information.
+- Clean up the Software Distribution folder. Try deploying these commands as a batch file to run on devices to reset the download state of Windows Updates:
+
+```
+net stop wuauserv
+net stop cryptSvc
+net stop bits
+net stop msiserver
+ren C:\Windows\SoftwareDistribution C:\Windows\SoftwareDistribution.old
+net start wuauserv
+net start cryptSvc
+net start bits
+net start msiserver
+```
+
+- **Application and driver updates:** Out-of-date app or driver software can prevent devices from updating successfully. Desktop Analytics will help you identify drivers and applications that need attention. You can also
+check for known issues in order to take any appropriate action. Deploy any updates from the vendor(s) for any problematic application or driver versions to resolve issues.
+- **Corruption:** In rare circumstances, a device that has repeated installation errors might be corrupted in a way that prevents the system from applying a new update. You might have to repair the Component Based Store from another source. You can do this with the [System File Checker](https://support.microsoft.com/help/929833/use-the-system-file-checker-tool-to-repair-missing-or-corrupted-system).
-### Desktop Analytics
-Desktop Analytics can make all of the tasks discussed in this article significantly easier:
-
-- Creating and maintaining an application and device inventory
-- Assign owners to applications for testing
-- Automatically apply your app classifications (critical, important, not important)
-- Automatically identify application compatibility risks and provide recommendations for reducing those risks
-
-For more information, see [What is Desktop Analytics?](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview)
## Prepare capability
From 290993239d57ff82996af881d3255455faf936e7 Mon Sep 17 00:00:00 2001
From: Daniel Simpson
Date: Tue, 2 Jun 2020 08:12:17 -0700
Subject: [PATCH 015/129] Update hololens2-autopilot.md
removing en-us from link
---
devices/hololens/hololens2-autopilot.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/devices/hololens/hololens2-autopilot.md b/devices/hololens/hololens2-autopilot.md
index 17f06ef401..d92aee8369 100644
--- a/devices/hololens/hololens2-autopilot.md
+++ b/devices/hololens/hololens2-autopilot.md
@@ -72,7 +72,7 @@ Before you start the OOBE and provisioning process, make sure that the HoloLens
- The devices are not already members of Azure AD, and are not enrolled in Intune (or another MDM system). The Autopilot self-deploying process completes these steps. To make sure that all the device-related information is cleaned up, check the **Devices** pages in both Azure AD and Intune.
- Every device can connect to the internet. You can use "USB C to Ethernet" adapters for wired internet connectivity or "USB C to Wifi" adapters for wireless internet connectivity.
-- Every device can connect to a computer by using a USB-C cable, and that computer has [Advanced Recovery Companion (ARC)](https://www.microsoft.com/en-us/p/advanced-recovery-companion/9p74z35sfrs8?rtc=1&activetab=pivot:overviewtab) installed
+- Every device can connect to a computer by using a USB-C cable, and that computer has [Advanced Recovery Companion (ARC)](https://www.microsoft.com/p/advanced-recovery-companion/9p74z35sfrs8?rtc=1&activetab=pivot:overviewtab) installed
- Every device has the latest Windows update: Windows 10, version 19041.1002.200107-0909 or a later version.
To configure and manage the Autopilot self-deploying mode profiles, make sure that you have access to [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com).
From 4418a6e7b063bbcd5c80f8d6db22950064f799cf Mon Sep 17 00:00:00 2001
From: jaimeo
Date: Tue, 2 Jun 2020 15:18:46 -0700
Subject: [PATCH 016/129] initial draft
---
.../get-started-updates-channels-tools.md | 70 ++++++++++++++-----
1 file changed, 51 insertions(+), 19 deletions(-)
diff --git a/windows/deployment/update/get-started-updates-channels-tools.md b/windows/deployment/update/get-started-updates-channels-tools.md
index c5a10bfb3f..4fc8607bbd 100644
--- a/windows/deployment/update/get-started-updates-channels-tools.md
+++ b/windows/deployment/update/get-started-updates-channels-tools.md
@@ -1,6 +1,6 @@
---
title: Windows 10 updates, channels, and tools
-description:
+description: Brief summary of the kinds of Windows updates, the channels they are served through, and the tools for managing them
keywords: updates, servicing, current, deployment, semi-annual channel, feature, quality, rings, insider, tools
ms.prod: w10
ms.mktglfcycl: manage
@@ -18,8 +18,7 @@ ms.topic: article
There are four phases to the Windows update process:
-- **Scan:** A device checks the Microsoft Update server or your Windows Server Update Services (WSUS) endpoint at random intervals to see if
-any updates have been added since the last time updates were searched, and then evaluates whether the update is appropriate by checking the policies that have been set up by the
+- **Scan:** A device checks the Microsoft Update server or your Windows Server Update Services (WSUS) endpoint at random intervals to see if any updates have been added since the last time updates were searched, and then evaluates whether the update is appropriate by checking the policies that have been set up by the
administrator. This process is invisible to the user.
- **Download:** Once the device determines that an update is available, it begins downloading the update. The download process is also invisible to the user. With feature updates, download happens in multiple
sequential phases.
@@ -32,11 +31,11 @@ version of the software.
We include information here about a number of different update types you'll hear about, but the two overarching types which you have the most direct control over are *feature updates* and *quality updates*.
- **Feature updates:** Released twice per year, around March and September. Feature updates add new features and functionality to Windows 10. Because they are delivered frequently (rather than every 3-5 years), they are easier to manage.
-- **Security updates:** Updates that fix security issues that have been discovered are typically included in monthly *quality updates*, but of course can be released out of band whenever necessary for severe issues (referred to as *critical updates*).
-- **Quality updates:** Quality updates deliver both security and non-security fixes to Windows 10. They are typically released on the second Tuesday of each month, though they can be released at any time. Quality updates include security updates, critical updates, servicing stack updates, and driver updates. Quality updates are *cumulative*, so installing the latest quality update is sufficient to get all the available fixes for a specific Windows 10 feature update, including any out-of-band security fixes and any *servicing stack updates* that might have been released previously.
+- **Quality updates:** Quality updates deliver both security and non-security fixes to Windows 10. Quality updates include security updates, critical updates, servicing stack updates, and driver updates. They are typically released on the second Tuesday of each month, though they can be released at any time. The second-Tuesday releases are the ones that focus on security updates. Quality updates are *cumulative*, so installing the latest quality update is sufficient to get all the available fixes for a specific Windows 10 feature update, including any out-of-band security fixes and any *servicing stack updates* that might have been released previously.
- **Servicing stack updates:** The "servicing stack" is the code component that actually installs Windows updates. From time to time, the servicing stack itself needs to be updated in order to function smoothly. If you don't install the latest servicing stack update, there's a risk that your device can't be updated with the latest Microsoft security fixes. Servicing stack updates are not necessarily included in *every* monthly quality update, and occasionally are released out of band to address a late-breaking issue. Always install the latest available quality update to catch any servicing stack updates that might have been released. The servicing stack also contains the "component-based servicing stack" (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components. The CBS is a small component that typically does not have updates released every month. You can find a list of servicing stack updates at [Latest servicing stack updates](https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001). For more detail about servicing stack updates, see [Servicing stack updates](servicing-stack-updates.md).
-- **Driver updates**: These are updates to non-Microsoft drivers applicable to your devices. You can turn off driver updates by using Windows Update for Business policies, if desired. {WHAT ABOUT MS DRIVERS?}
-- **Microsoft product updates:** These are updates for other Microsoft products, such as Office. You can enable or disable Microsoft updates by using Windows Update for Business policies.
+- **Driver updates**: These are updates to drivers applicable to your devices. Driver updates are turned off by default in Windows Server Update Services (WSUS), but for cloud-based update methods, you can control whether they are installed or not.
+- **Microsoft product updates:** These are updates for other Microsoft products, such as Office. You can enable or disable Microsoft updates by using policies controlled by various servicing tools.
+
## Servicing channels
@@ -45,16 +44,24 @@ Windows 10 offers three servicing channels, each of which offers you a different
The first step of controlling when and how devices install updates is assigning them to the appropriate servicing channel. You can assign devices to a particular channel with any of several tools, including Microsoft Endpoint Configuration Manager, Windows Server Update Services (WSUS), and Group Policy settings applied by any of several means. By dividing devices into different populations ("deployment groups" or "rings") you can use servicing channel assignment, followed by other management features such as update deferral policies, to create a phased deployment of any update that allows you to start with a limited pilot deployment for testing before moving to a broad deployment throughout your organization.
-### Semi-Annual Channel
-In the Semi-Annual Channel, feature updates are available as soon as Microsoft releases them, twice per year. As long as a device isn't set to defer feature updates, any device using the Semi-Annual Channel will install a feature update as soon as it's released. If you use Windows Update for Business, the Semi-Annual Channel provides three months of additional total deployment time before being required to update to the next release.{IS THIS STILL TRUE?}
+### Semi-annual Channel
+
+In the Semi-annual Channel, feature updates are available as soon as Microsoft releases them, twice per year. As long as a device isn't set to defer feature updates, any device using the Semi-annual Channel will install a feature update as soon as it's released. If you use Windows Update for Business, the Semi-annual Channel provides three months of additional total deployment time before being required to update to the next release.{IS THIS STILL TRUE?}
> [!NOTE]
> All releases of Windows 10 have **18 months of servicing for all editions**--these updates provide security and feature updates for the release. However, fall releases of the **Enterprise and Education editions** will have an **additional 12 months of servicing for specific Windows 10 releases, for a total of 30 months from initial release**. This extended servicing window applies to Enterprise and Education editions starting with Windows 10, version 1607.
-### Windows Insider program
+### Windows Insider Program for Business
+
+Insider preview releases are made available during the development of the features that will be shipped in the next feature update, enabling organizations to validate new features as well as compatibility with existing apps and infrastructure, providing feedback to Microsoft on any issues encountered. There are actually three options within the Windows Insider Program for Business channel:
+
+- Windows Insider Fast
+- Windows Insider Slow
+- Windows Insider Release Preview
+
+We recommend that you use the Windows Insider Release Preview channel for validation activities.
-Insider preview releases are made available during the development of the features that will be shipped in the next feature update, enabling organizations to validate new features as well as compatibility with existing apps and infrastructure, providing feedback to Microsoft on any issues encountered.
### Long-term Servicing Channel
@@ -62,15 +69,40 @@ The **Long Term Servicing Channel** is designed to be used only for specialized
The Semi-Annual Channel is the default servicing channel for all Windows 10 devices except those with the LTSB edition installed. The following table shows the servicing channels available to each Windows 10 edition.
-| Windows 10 edition | Semi-Annual Channel | Long-Term Servicing Channel | Insider Program |
+
+| Windows 10 edition | Semi-Annual Channel | Insider Program | Long-Term Servicing Channel |
| --- | --- | --- | --- |
-| Home |  |  |  |
-| Pro |  |  |  |
-| Enterprise |  |  |  |
-| Enterprise LTSB |  |  |  |
-| Pro Education |  |  |  |
-| Education |  |  |  |
+| Home | | | |
+| Pro |  |  | |
+| Enterprise |  | | |
+| Enterprise LTSB |  | | |
+| Pro Education |  |  | |
+| Education |  |  | |
+## Servicing tools
+### Tools for on-premises update delivery
+
+Windows Server Update Services (WSUS): you set up a WSUS server, which downloads updates in bulk from Microsoft. Your individual devices then connect to your server to install their updates from there.
+
+You can set up, control, and manage the server and update process with a number of tools:
+
+- A standalone Windows Server Update Services server operated directly
+- Configuration Manager
+- Non-Microsoft tools
+
+For more information, see [Windows Server Update Services (WSUS)](https://docs.microsoft.com/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus).
+
+### Tools for cloud-based update delivery
+
+Your individual devices connect to Microsoft endpoints directly to get the updates. The details of this process (how often devices download updates of various kinds, from which channels, deferrals, and details of the users' experience of installation) are set on devices either with Group Policy or MDM policies, which you can control with any of a number of tools:
+
+- [Group Policy Management Console](waas-wufb-group-policy.md) (Gpmc.msc)
+- [Microsoft Intune](waas-wufb-intune.md)
+- [Configuration Manager](deploy-updates-configmgr.md)
+- Non-Microsoft MDM tools
+
+### Hybrid scenarios
+
+It is also possible to combine WSUS-based on-premises update distribution with cloud-based update delivery.
-## Servicing tools
\ No newline at end of file
From a7f517d4bec03fe990f804d04aede259960f922a Mon Sep 17 00:00:00 2001
From: Dani Halfin
Date: Tue, 2 Jun 2020 18:49:00 -0700
Subject: [PATCH 017/129] testing 1 2 3
---
windows/privacy/index.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/privacy/index.yml b/windows/privacy/index.yml
index 8d5740bc52..fe5b89eda0 100644
--- a/windows/privacy/index.yml
+++ b/windows/privacy/index.yml
@@ -1,4 +1,4 @@
-### YamlMime:YamlDocument
+### YamlMime:Hub
documentType: LandingData
From 459d69216fc2c3c37beaadd121cbd2636f283d08 Mon Sep 17 00:00:00 2001
From: Dani Halfin
Date: Tue, 2 Jun 2020 20:10:04 -0700
Subject: [PATCH 018/129] updating hub page
---
windows/privacy/index.yml | 306 ++++++++++++++++++++------------------
1 file changed, 165 insertions(+), 141 deletions(-)
diff --git a/windows/privacy/index.yml b/windows/privacy/index.yml
index fe5b89eda0..c8309a41a9 100644
--- a/windows/privacy/index.yml
+++ b/windows/privacy/index.yml
@@ -1,156 +1,180 @@
### YamlMime:Hub
-documentType: LandingData
-
title: Windows Privacy
+summary: Get ready for General Data Protection Regulation (GDPR) by viewing and configuring Windows diagnostic data in your organization.
+brand: m365
metadata:
-
- document_id:
-
title: Windows Privacy
-
description: Learn about how privacy is managed in Windows.
-
- keywords: Windows 10, Windows Server, Windows Server 2016, privacy, GDPR, compliance, endpoints
-
+ services: windows
+ product: windows
+ ms.topic: hub-page # Required
+ ms.collection: M365-security-compliance
+ author: danihalfin
+ ms.author: daniha
+ manager: dansimp
+ ms.date: 02/21/2019 #Required; mm/dd/yyyy format.
ms.localizationpriority: high
- author: danihalfin
-
- ms.author: daniha
-
- ms.date: 04/25/2018
-
- ms.topic: conceptual
-
- audience: ITPro
-
- manager: dansimp
-
- ms.collection: M365-security-compliance
-
- ms.devlang: na
-
-sections:
-
-- items:
-
- - type: markdown
-
- text: Get ready for General Data Protection Regulation (GDPR) by viewing and configuring Windows diagnostic data in your organization.
-
-- items:
-
- - type: list
-
- style: cards
-
- className: cardsM
-
- columns: 3
-
- items:
-
- - href: \windows\privacy\gdpr-it-guidance
-
- html: Learn about GDPR and how Microsoft helps you get started towards compliance
-
- image:
-
- src: https://docs.microsoft.com/media/common/i_advanced.svg
-
- title: Start with GDPR basics
-
- - href: \windows\privacy\configure-windows-diagnostic-data-in-your-organization
-
- html: Make informed decisions about how you can configure diagnostic data in your organization
-
- image:
-
- src: https://docs.microsoft.com/media/common/i_filter.svg
-
- title: Configure Windows diagnostic data
-
- - href: \windows\privacy\diagnostic-data-viewer-overview
-
- html: Review the Windows diagnostic data sent to Microsoft by device in your organization
-
- image:
-
- src: https://docs.microsoft.com/media/common/i_investigate.svg
-
- title: View Windows diagnostic data
-
-- title: Understand Windows diagnostic data in Windows 10
-
+# highlightedContent section (optional)
+# Maximum of 8 items
+highlightedContent:
+# itemType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | sample | tutorial | video | whats-new
items:
+ # Card
+ - title: Start with GDPR basics
+ itemType: get-started
+ url: gdpr-it-guidance.md
+ # Card
+ - title: Configure Windows diagnostic data
+ itemType: how-to-guide
+ url: configure-windows-diagnostic-data-in-your-organization.md
+ # Card
+ - title: View Windows diagnostic data
+ itemType: how-to-guide
+ url: diagnostic-data-viewer-overview.md
- - type: paragraph
+# productDirectory section (optional)
+productDirectory:
+ title: Understand Windows diagnostic data in Windows 10
+ summary: For the latest Windows 10 version, learn more about what Windows diagnostic data is collected at various diagnostics levels.
+ items:
+ # Card
+ - title: Basic level events and fields
+ # imageSrc should be square in ratio with no whitespace
+ imageSrc: https://docs.microsoft.com/media/common/i_extend.svg
+ summary: Learn more about basic Windows diagnostic data events and fields collected.
+ url: basic-level-windows-diagnostic-events-and-fields.md
+ # Card
+ - title: Enhanced level events and fields
+ imageSrc: https://docs.microsoft.com/media/common/i_delivery.svg
+ summary: Learn more about Windows diagnostic data events and fields used by Windows Analytics.
+ url: enhanced-diagnostic-data-windows-analytics-events-and-fields.md
+ # Card
+ - title: Full level data categories
+ imageSrc: https://docs.microsoft.com/media/common/i_get-started.svg
+ summary: Learn more about all Windows diagnostic data collected.
+ url: windows-diagnostic-data.md
- text: 'For the latest Windows 10 version, learn more about what Windows diagnostic data is collected at various diagnostics levels.'
+# conceptualContent section (optional)
+# conceptualContent:
+# # itemType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | sample | tutorial | video | whats-new
+# title: sectiontitle # < 60 chars (optional)
+# summary: sectionsummary # < 160 chars (optional)
+# items:
+# # Card
+# - title: cardtitle1
+# links:
+# - url: file1.md OR https://docs.microsoft.com/file1
+# itemType: itemType
+# text: linktext1
+# - url: file2.md OR https://docs.microsoft.com/file2
+# itemType: itemType
+# text: linktext2
+# - url: file3.md OR https://docs.microsoft.com/file3
+# itemType: itemType
+# text: linktext3
+# # footerLink (optional)
+# footerLink:
+# url: filefooter.md OR https://docs.microsoft.com/filefooter
+# text: See more
+# # Card
+# - title: cardtitle2
+# links:
+# - url: file1.md OR https://docs.microsoft.com/file1
+# itemType: itemType
+# text: linktext1
+# - url: file2.md OR https://docs.microsoft.com/file2
+# itemType: itemType
+# text: linktext2
+# - url: file3.md OR https://docs.microsoft.com/file3
+# itemType: itemType
+# text: linktext3
+# # footerLink (optional)
+# footerLink:
+# url: filefooter.md OR https://docs.microsoft.com/filefooter
+# text: See more
+# # Card
+# - title: cardtitle3
+# links:
+# - url: file1.md OR https://docs.microsoft.com/file1
+# itemType: itemType
+# text: linktext1
+# - url: file2.md OR https://docs.microsoft.com/file2
+# itemType: itemType
+# text: linktext2
+# - url: file3.md OR https://docs.microsoft.com/file3
+# itemType: itemType
+# text: linktext3
+# # footerLink (optional)
+# footerLink:
+# url: filefooter.md OR https://docs.microsoft.com/filefooter
+# text: See more
- - type: list
+# # tools section (optional)
+# tools:
+# title: sectiontitle # < 60 chars (optional)
+# summary: sectionsummary # < 160 chars (optional)
+# items:
+# # Card
+# - title: cardtitle1
+# # imageSrc should be square in ratio with no whitespace
+# imageSrc: ./media/index/image1.svg OR https://docs.microsoft.com/media/logos/image1.svg
+# url: file1.md
+# # Card
+# - title: cardtitle2
+# imageSrc: ./media/index/image2.svg OR https://docs.microsoft.com/media/logos/image2.svg
+# url: file2.md
+# # Card
+# - title: cardtitle3
+# imageSrc: ./media/index/image3.svg OR https://docs.microsoft.com/media/logos/image3.svg
+# url: file3.md
- style: cards
+# additionalContent section (optional)
+# Card with summary style
+# additionalContent:
+# # Supports up to 3 sections
+# sections:
+# - title: sectiontitle # < 60 chars (optional)
+# summary: sectionsummary # < 160 chars (optional)
+# items:
+# # Card
+# - title: cardtitle1
+# summary: cardsummary1
+# url: file1.md OR https://docs.microsoft.com/file1
+# # Card
+# - title: cardtitle2
+# summary: cardsummary2
+# url: file1.md OR https://docs.microsoft.com/file2
+# # Card
+# - title: cardtitle3
+# summary: cardsummary3
+# url: file1.md OR https://docs.microsoft.com/file3
+# # footer (optional)
+# footer: "footertext [linktext](https://docs.microsoft.com/footerfile)"
- className: cardsM
-
- columns: 3
-
- items:
-
- - href: \windows\privacy\basic-level-windows-diagnostic-events-and-fields
-
- html: Learn more about basic Windows diagnostic data events and fields collected
-
- image:
-
- src: https://docs.microsoft.com/media/common/i_extend.svg
-
- title: Basic level events and fields
-
- - href: \windows\privacy\enhanced-diagnostic-data-windows-analytics-events-and-fields
-
- html: Learn more about Windows diagnostic data events and fields used by Windows Analytics
-
- image:
-
- src: https://docs.microsoft.com/media/common/i_delivery.svg
-
- title: Enhanced level events and fields
-
- - href: \windows\privacy\windows-diagnostic-data
-
- html: Learn more about all Windows diagnostic data collected
-
- image:
-
- src: https://docs.microsoft.com/media/common/i_get-started.svg
-
- title: Full level data categories
-
-- items:
-
- - type: list
-
- style: cards
-
- className: cardsL
-
- items:
-
- - title: View and manage Windows 10 connection endpoints
-
- html: Manage Windows 10 connection endpoints
-
- Manage connections from Windows to Microsoft services
-
- - title: Additional resources
-
- html: Windows 10 on Trust Center
-
- GDPR on Microsoft 365 Compliance solutions
-
- Support for GDPR Accountability on Service Trust Portal
-
\ No newline at end of file
+# additionalContent section (optional)
+# Card with links style
+additionalContent:
+ # Supports up to 3 sections
+ sections:
+ - items:
+ # Card
+ - title: View and manage Windows 10 connection endpoints
+ links:
+ - text: Manage Windows 10 connection endpoints
+ url: manage-windows-endpoints.md
+ - text: Manage connections from Windows to Microsoft services
+ url: manage-connections-from-windows-operating-system-components-to-microsoft-services
+ # Card
+ - title: Additional resources
+ links:
+ - text: Windows 10 on Trust Center
+ url: https://www.microsoft.com/en-us/trustcenter/cloudservices/windows10
+ - text: GDPR on Microsoft 365 Compliance solutions
+ url: https://docs.microsoft.com/microsoft-365/compliance/gdpr
+ - text: Support for GDPR Accountability on Service Trust Portal
+ url: https://servicetrust.microsoft.com/ViewPage/GDPRGetStarted
+ # footer (optional)
+ # footer: "footertext [linktext](https://docs.microsoft.com/footerfile)"
\ No newline at end of file
From 1007e02a81407f6294d035e99e1c0693a8430de8 Mon Sep 17 00:00:00 2001
From: Dani Halfin
Date: Tue, 2 Jun 2020 21:27:49 -0700
Subject: [PATCH 019/129] fixing security index yml while im here
---
windows/security/index.yml | 110 ++++++++++++-------------------------
1 file changed, 35 insertions(+), 75 deletions(-)
diff --git a/windows/security/index.yml b/windows/security/index.yml
index ca0486b130..8dee80970e 100644
--- a/windows/security/index.yml
+++ b/windows/security/index.yml
@@ -1,80 +1,40 @@
-### YamlMime:YamlDocument
+### YamlMime:Hub
-documentType: LandingData
-
-title: Windows 10 Enterprise Security
+title: Windows 10 Enterprise Security # < 60 chars
+summary: Secure corporate data and manage risk. # < 160 chars
+# brand: aspnet | azure | dotnet | dynamics | m365 | ms-graph | office | power-bi | power-platform | sql | sql-server | vs | visual-studio | windows | xamarin
+brand: windows
metadata:
-
- document_id:
-
- title: Windows 10 Enterprise Security
-
- description: Learn about enterprise-grade security features for Windows 10.
-
- keywords: protect, company, data, Windows, device, app, management, Microsoft365, e5, e3
-
+ title: Windows 10 Enterprise Security # Required; page title displayed in search results. Include the brand. < 60 chars.
+ description: Learn about enterprise-grade security features for Windows 10. # Required; article description that is displayed in search results. < 160 chars.
+ services: windows
+ product: windows
+ ms.topic: hub-page # Required
+ ms.collection: M365-security-compliance # Optional; Remove if no collection is used.
+ author: danihalfin #Required; your GitHub user alias, with correct capitalization.
+ ms.author: daniha #Required; microsoft alias of author; optional team alias.
+ ms.date: 01/08/2018 #Required; mm/dd/yyyy format.
ms.localizationpriority: high
- author: brianlic-msft
-
- ms.author: brianlic
-
- manager: brianlic
-
- ms.date: 08/01/2018
-
- ms.topic: article
-
- ms.devlang: na
-
-sections:
-
-- items:
-
- - type: markdown
-
- text: Secure corporate data and manage risk.
-
-- items:
-
- - type: list
-
- style: cards
-
- className: cardsM
-
- columns: 3
-
- items:
-
- - href: \windows\security\identity-protection\
-
- html: Deploy secure enterprise-grade authentication and access control to protect accounts and data
-
- image:
-
- src: https://docs.microsoft.com/media/common/i_identity-protection.svg
-
- title: Identity and access management
-
- - href: \windows\security\threat-protection\
-
- html: Stop cyberthreats and quickly identify and respond to breaches
-
- image:
-
- src: https://docs.microsoft.com/media/common/i_threat-protection.svg
-
- title: Threat protection
-
- - href: \windows\security\information-protection\
-
- html: Identify and secure critical data to prevent data loss
-
- image:
-
- src: https://docs.microsoft.com/media/common/i_information-protection.svg
-
- title: Information protection
-
+# productDirectory section (optional)
+productDirectory:
+ title: sectiontitle # < 60 chars (optional)
+ summary: sectionsummary # < 160 chars (optional)
+ items:
+ # Card
+ - title: Identity and access management
+ # imageSrc should be square in ratio with no whitespace
+ imageSrc: https://docs.microsoft.com/media/common/i_identity-protection.svg
+ summary: Deploy secure enterprise-grade authentication and access control to protect accounts and data
+ url: ./identity-protection/index.md
+ # Card
+ - title: Threat protection
+ imageSrc: https://docs.microsoft.com/media/common/i_threat-protection.svg
+ summary: Stop cyberthreats and quickly identify and respond to breaches
+ url: ./threat-protection/index.md
+ # Card
+ - title: Information protection
+ imageSrc: https://docs.microsoft.com/media/common/i_information-protection.svg
+ summary: Identify and secure critical data to prevent data loss
+ url: ./information-protection/index.md
\ No newline at end of file
From 95a680b27ebcbc767ea76397b0b543088ed89baf Mon Sep 17 00:00:00 2001
From: Dani Halfin
Date: Tue, 2 Jun 2020 21:28:53 -0700
Subject: [PATCH 020/129] small fix
---
windows/security/index.yml | 2 --
1 file changed, 2 deletions(-)
diff --git a/windows/security/index.yml b/windows/security/index.yml
index 8dee80970e..bae44d7224 100644
--- a/windows/security/index.yml
+++ b/windows/security/index.yml
@@ -19,8 +19,6 @@ metadata:
# productDirectory section (optional)
productDirectory:
- title: sectiontitle # < 60 chars (optional)
- summary: sectionsummary # < 160 chars (optional)
items:
# Card
- title: Identity and access management
From be95597575f89114ebaa7871f36b667b7e52730b Mon Sep 17 00:00:00 2001
From: jdmartinez36
Date: Wed, 3 Jun 2020 11:36:04 -0600
Subject: [PATCH 021/129] Edit pass for security articles DO NOT MERGE
Copy editing and requested edits for api-microsoft-flow and planning-to-deploy-windows-firewall-with-advanced-security.
---
.../api-microsoft-flow.md | 52 +++++++++----------
...windows-firewall-with-advanced-security.md | 38 +++++++++-----
2 files changed, 51 insertions(+), 39 deletions(-)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md b/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md
index c093fcacb7..1cd0814c99 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md
@@ -21,61 +21,61 @@ ms.topic: article
**Applies to:** [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559)
-- Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink)
+- Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink)
-Automating security procedures is a standard requirement for every modern Security Operations Center. The lack of professional Cyber defenders, forces SOC to work in the most efficient way and automation is a must. MS flow supports different connectors that were built exactly for that. You can build an end-to-end procedure automation within few minutes.
+Automating security procedures is a standard requirement for every modern Security Operations Center. The lack of professional cyber defenders forces SOC to work in the most efficient way and automation is a must. Microsoft Power Automate supports different connectors that were built exactly for that. You can build an end-to-end procedure automation within a few minutes.
-Microsoft Defender API has an official Flow Connector with a lot of capabilities:
+Microsoft Defender API has an official Flow Connector with many capabilities.
## Usage example
-The following example demonstrates how you can create a Flow that will be triggered any time a new Alert occurs on your tenant.
+The following example demonstrates how to create a Flow that is triggered any time a new Alert occurs on your tenant.
-- Login to [Microsoft Flow](https://flow.microsoft.com)
+1. Log in to [Microsoft Power Automate](https://flow.microsoft.com).
-- Go to: My flows > New > Automated
+2. Go to **My flows** > **New** > **Automated-from blank**.
-
+ 
-- Choose a name for your Flow, Search for **Microsoft Defender ATP Triggers** as the trigger and choose the new Alerts trigger.
+3. Choose a name for your Flow, search for "Microsoft Defender ATP Triggers" as the trigger, and then select the new Alerts trigger.
-
+ 
-- Now you have a Flow that is triggered every time a new Alert occurs.
+Now you have a Flow that is triggered every time a new Alert occurs.
-All you need to do now, is to choose your next steps.
-Lets, for example, Isolate the machine if the Severity of the Alert is **High** and mail about it.
-The Alert trigger gives us only the Alert ID and the Machine ID. We can use the Connector to expand these entities.
+All you need to do now is choose your next steps.
+For example, you can isolate the machine if the Severity of the Alert is High and send an email about it.
+The Alert trigger provides only the Alert ID and the Machine ID. You can use the connector to expand these entities.
-### Get the Alert entity using the connector
+### Get the Alert entity using the connector
-- Choose Microsoft Defender ATP for new step.
+1. Choose **Microsoft Defender ATP** for the new step.
-- Choose Alerts - Get single alert API.
+2. Choose **Alerts - Get single alert API**.
-- Set the Alert Id from the last step as Input.
+3. Set the **Alert ID** from the last step as **Input**.
-
+ 
### Isolate the machine if the Alert's severity is High
-- Add **Condition** as a new step .
+1. Add **Condition** as a new step.
-- Check if Alert severity equals to **High**.
+2. Check if the Alert severity **is equal to** High.
-- If yes, add Microsoft Defender ATP - Isolate machine action with the Machine Id and a comment.
+ If yes, add the **Microsoft Defender ATP - Isolate machine** action with the Machine ID and a comment.
-
+ 
-Now you can add a new step for mailing about the Alert and the Isolation.
-There are multiple Email connectors that are very easy to use, e.g. Outlook, GMail, etc..
-Save your flow and that's all.
+3. Add a new step for emailing about the Alert and the Isolation. There are multiple email connectors that are very easy to use, such as Outlook or Gmail.
-- You can also create **scheduled** flow that will run Advanced Hunting queries and much more!
+4. Save your flow.
+
+You can also create a **scheduled** flow that runs Advanced Hunting queries and much more!
## Related topic
- [Microsoft Defender ATP APIs](apis-intro.md)
diff --git a/windows/security/threat-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md b/windows/security/threat-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md
index ba9cedf313..74dacfe608 100644
--- a/windows/security/threat-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md
+++ b/windows/security/threat-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md
@@ -27,30 +27,42 @@ After you collect information about your environment and decide on a design by f
## Reviewing your Windows Defender Firewall with Advanced Security Design
-If the design team that created the Windows Defender Firewall design for your organization is different from the deployment team that will implement it, make sure that the deployment team reviews the final design with the design team. Review the following points:
+If the design team that created the Windows Defender Firewall design for your organization is different from the deployment team that will implement it, make sure the deployment team reviews the final design with the design team. Review the following information before starting your deployment.
-- The design team's strategy for determining how WMI and security group filters attached to the GPOs will determine which devices apply to which GPO. The deployment team can refer to the following topics in the Windows Defender Firewall with Advanced Security Design Guide:
+### Decide which devices apply to which GPO
- - [Planning Isolation Groups for the Zones](planning-isolation-groups-for-the-zones.md)
+The design team's strategy for determining how WMI and security group filters attached to the GPOs will determine which devices apply to which GPO. The deployment team can refer to the following topics in the Windows Defender Firewall with Advanced Security Design Guide:
- - [Planning the GPOs](planning-the-gpos.md)
+- [Planning Isolation Groups for the Zones](planning-isolation-groups-for-the-zones.md)
- - [Planning GPO Deployment](planning-gpo-deployment.md)
+- [Planning the GPOs](planning-the-gpos.md)
-- The communication to be allowed between members of each of the zones in the isolated domain and devices that are not part of the isolated domain or members of the isolated domain's exemption list.
+- [Planning GPO Deployment](planning-gpo-deployment.md)
-- The recommendation that domain controllers are exempted from IPsec authentication requirements. If they are not exempt and authentication fails, then domain clients might not be able to receive Group Policy updates to the IPsec connection security rules from the domain controllers.
+### Configure communication between members and devices
-- The rationale for configuring all IPsec authentication rules to request, not require, authentication until the successful negotiation of IPsec has been confirmed. If the rules are set to require authentication before confirming that authentication is working correctly, then communications between devices might fail. If the rules are set to request authentication only, then an IPsec authentication failure results in fall-back-to-clear behavior, so communications can continue while the authentication failures are investigated.
+Decide what communication is to be allowed between members of each of the zones in the isolated domain and devices that are not part of the isolated domain or members of the isolated domain's exemption list.
-- The requirement that all devices that must communicate with each other share a common set of:
+### Exempt domain controllers from IPsec authentication requirements
- - Authentication methods
+It is recommended that domain controllers are exempt from IPsec authentication requirements. If they are not exempt and authentication fails, then domain clients might not be able to receive Group Policy updates to the IPsec connection security rules from the domain controllers.
- - Main mode key exchange algorithms
+### Configure IPsec authentication rules
- - Quick mode data integrity algorithms
+The rationale for configuring all IPsec authentication rules to request, not require, authentication until the successful negotiation of IPsec has been confirmed. If the rules are set to require authentication before confirming that authentication is working correctly, then communications between devices might fail. If the rules are set to request authentication only, then an IPsec authentication failure results in fall-back-to-clear behavior. Communications can continue while the authentication failures are investigated.
- If at least one set of each does not match between two devices, then the devices cannot successfully communicate.
+### Make sure all devices can communicate with each other
+
+For all devices to communicate with each other, they must share a common set of:
+
+- Authentication methods
+
+- Main mode key exchange algorithms
+
+- Quick mode data integrity algorithms
+
+If at least one set of each does not match between two devices, then the devices cannot successfully communicate.
+
+## Deploy your Windows Firewall Design Plan
After the design and deployment teams agree on these issues, they can proceed with the deployment of the Windows Defender Firewall design. For more information, see [Implementing Your Windows Defender Firewall with Advanced Security Design Plan](implementing-your-windows-firewall-with-advanced-security-design-plan.md).
From e926d3162fa46749dca161acd6cc76af248d34a7 Mon Sep 17 00:00:00 2001
From: jdmartinez36
Date: Wed, 3 Jun 2020 16:11:29 -0600
Subject: [PATCH 022/129] Edit pass for Surface Book 3 Overview DO NOT MERGE
Light copy edits for surface-book-quadro.md.
Notes: Changed sentences in Table 3.
For Adobe Substance Designer, edited confusing sentence by removing "powered" and replacing it with "that is". The author should verify that the new sentence is acceptable.
For Autodesk 3ds Max, removed asterisks from second bullet. Not sure if this was a typo or meant to imply that the following text was a note.
---
devices/surface/surface-book-quadro.md | 48 +++++++++++++-------------
1 file changed, 24 insertions(+), 24 deletions(-)
diff --git a/devices/surface/surface-book-quadro.md b/devices/surface/surface-book-quadro.md
index 8b1599f5b4..c1e6f3bcc2 100644
--- a/devices/surface/surface-book-quadro.md
+++ b/devices/surface/surface-book-quadro.md
@@ -15,29 +15,29 @@ audience: itpro
---
# Surface Book 3 Quadro RTX 3000 technical overview
-
+
Surface Book 3 for Business powered by the NVIDIA® Quadro RTX™ 3000 GPU is built for professionals who need real-time rendering, AI acceleration, advanced graphics, and compute performance in a portable form factor. Quadro RTX 3000 fundamentally changes what you can do with the new Surface Book 3:
-- **Ray Tracing** - Produce stunning renders, designs and animations faster than ever before with 30 RT Cores for hardware-accelerated ray tracing.
+- **Ray Tracing** - Produce stunning renders, designs and animations faster than ever before with 30 RT Cores for hardware-accelerated ray tracing.
- **Artificial Intelligence** - Remove redundant, tedious tasks and compute intensive work with 240 Tensor Cores for GPU-accelerated AI.
- **Advanced Graphics and Compute Technology** - Experience remarkable speed and interactivity during your most taxing graphics and compute workloads with 1,920 CUDA Cores and 6GB of GDDR6 memory.
## Enterprise grade solution
-Of paramount importance to commercial customers, Quadro RTX 3000 brings a fully professional grade solution that combines accelerated ray tracing and deep learning capabilities with an integrated enterprise level management and support solution. Quadro drivers are tested and certified for more than 100 professional applications by leading ISVs providing an additional layer of quality assurance to validate stability, reliability, and performance.
+Of paramount importance to commercial customers, Quadro RTX 3000 brings a fully professional-grade solution that combines accelerated ray tracing and deep learning capabilities with an integrated enterprise level management and support solution. Quadro drivers are tested and certified for more than 100 professional applications by leading ISVs, providing an additional layer of quality assurance to validate stability, reliability, and performance.
-Quadro includes dedicated enterprise tools for remote management of Surface Book 3 devices with Quadro RTX 3000. IT admins can remotely configure graphics systems, save/restore configurations, continuously monitor graphics systems and perform remote troubleshooting if necessary. These capabilities along with deployment tools help maximize uptime and minimize IT support requirements.
+Quadro includes dedicated enterprise tools for remote management of Surface Book 3 devices with Quadro RTX 3000. IT admins can remotely configure graphics systems, save/restore configurations, continuously monitor graphics systems, and perform remote troubleshooting if necessary. These capabilities along with deployment tools help maximize uptime and minimize IT support requirements.
-NVIDIA develops and maintains Quadro Optimal Drivers for Enterprise (ODE) that are tuned, tested, and validated to provide enterprise level stability, reliability, availability, and support with extended product availability. Each driver release involves more than 2,000 man days of testing with professional applications test suites and test cases, as well as WHQL certification. Security threats are continually monitored, and regular security updates are released to protect against newly discovered vulnerabilities. In addition, Quadro drivers undergo an additional layer of testing by Surface engineering prior to release via Windows Update.
+NVIDIA develops and maintains Quadro Optimal Drivers for Enterprise (ODE) that are tuned, tested, and validated to provide enterprise level stability, reliability, availability, and support with extended product availability. Each driver release involves more than 2,000 man-days of testing with professional applications test suites and test cases, as well as WHQL certification. Security threats are continually monitored, and regular security updates are released to protect against newly discovered vulnerabilities. In addition, Quadro drivers undergo an additional layer of testing by Surface engineering prior to release via Windows Update.
## Built for compute-intensive workloads
-Surface Book 3 with Quadro RTX 3000 delivers the best graphics performance of any Surface laptop, enabling advanced professionals to work from anywhere.
+The Surface Book 3 with Quadro RTX 3000 delivers the best graphics performance of any Surface laptop, enabling advanced professionals to work from anywhere.
- **Creative professionals such as designers and animators.** Quadro RTX enables real-time cinematic-quality rendering through Turing-optimized ray tracing APIs such as NVIDIA OptiX, Microsoft DXR, and Vulkan.
- **Architects and engineers using large, complex computer aided design (CAD) models and assemblies.** The RTX platform features the new NGX SDK to infuse powerful AI-enhanced capabilities into visual applications. This frees up time and resources through intelligent manipulation of images, automation of repetitive tasks, and optimization of compute-intensive processes.
-- **Software developers across manufacturing, media & entertainment, medical, and other industries.** Quadro RTX speeds application development with ray tracing, deep learning, and rasterization capabilities through industry-leading software SDKs and APIs.
+- **Software developers across manufacturing, media and entertainment, medical, and other industries.** Quadro RTX speeds application development with ray tracing, deep learning, and rasterization capabilities through industry-leading software SDKs and APIs.
- **Data scientists using Tensor Cores and CUDA cores to accelerate computationally intensive tasks and other deep learning operations.** By using sensors, increased connectivity, and deep learning, researchers and developers can enable AI applications for everything from autonomous vehicles to scientific research.
@@ -45,14 +45,14 @@ Surface Book 3 with Quadro RTX 3000 delivers the best graphics performance of an
| **Component** | **Description** |
| --------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| RT cores | Dedicated hardware-based ray-tracing technology allows the GPU to render film quality, photorealistic objects and environments with physically accurate shadows, reflections, and refractions. The real-time ray-tracing engine works with NVIDIA OptiX, Microsoft DXR, and Vulkan APIs to deliver a level of realism far beyond what is possible using traditional rendering techniques. RT cores accelerate the Bounding Volume Hierarchy (BVH) traversal and ray casting functions using low number of rays casted through a pixel. |
-| Enhanced tensor cores | Mixed-precision cores purpose-built for deep learning matrix arithmetic, deliver 8x TFLOPS for training compared with previous generation. Quadro RTX 3000 utilizes 240 Tensor Cores; each Tensor Core performs 64 floating point fused multiply-add (FMA) operations per clock, and each streaming multiprocessor (SM) performs a total of 1,024 individual floating-point operations per clock. In addition to supporting FP16/FP32 matrix operations, new Tensor Cores added INT8 (2,048 integer operations per clock) and experimental INT4 and INT1 (binary) precision modes for matrix operations. |
+| RT cores | Dedicated hardware-based ray-tracing technology allows the GPU to render film quality, photorealistic objects and environments with physically accurate shadows, reflections, and refractions. The real-time ray-tracing engine works with NVIDIA OptiX, Microsoft DXR, and Vulkan APIs to deliver a level of realism far beyond what is possible using traditional rendering techniques. RT cores accelerate the Bounding Volume Hierarchy (BVH) traversal and ray casting functions using low number of rays casted through a pixel. |
+| Enhanced tensor cores | Mixed-precision cores purpose-built for deep learning matrix arithmetic, deliver 8x TFLOPS for training compared with previous generation. Quadro RTX 3000 utilizes 240 Tensor Cores; each Tensor Core performs 64 floating point fused multiply-add (FMA) operations per clock, and each streaming multiprocessor (SM) performs a total of 1,024 individual floating-point operations per clock. In addition to supporting FP16/FP32 matrix operations, new Tensor Cores added INT8 (2,048 integer operations per clock) and experimental INT4 and INT1 (binary) precision modes for matrix operations. |
| Turing optimized software | Deep learning frameworks such as the Microsoft Cognitive Toolkit (CNTK), Caffe2, MXNet, TensorFlow, and others deliver significantly faster training times and higher multi-node training performance. GPU accelerated libraries such as cuDNN, cuBLAS, and TensorRT deliver higher performance for both deep learning inference and High-Performance Computing (HPC) applications. |
| NVIDIA CUDA parallel computing platform | Natively execute standard programming languages like C/C++ and Fortran, and APIs such as OpenCL, OpenACC and Direct Compute to accelerate techniques such as ray tracing, video and image processing, and computation fluid dynamics. |
-| Advanced streaming multiprocessor (SM) architecture | Combined shared memory and L1 cache improve performance significantly, while simplifying programming and reducing the tuning required to attain best application performance. |
-| High performance GDDR6 Memory | Quadro RTX 3000 features 6GB of frame buffer making it the ideal platform for handling large datasets and latency-sensitive applications. |
+| Advanced streaming multiprocessor (SM) architecture | Combined shared memory and L1 cache improve performance significantly, while simplifying programming and reducing the tuning required to attain the best application performance. |
+| High performance GDDR6 Memory | Quadro RTX 3000 features 6GB of frame buffer, making it the ideal platform for handling large datasets and latency-sensitive applications. |
| Single instruction, multiple thread (SIMT) | New independent thread scheduling capability enables finer-grain synchronization and cooperation between parallel threads by sharing resources among small jobs. |
-| Mixed-precision computing | 16-bit floating-point precision computing enables the training and deployment of larger neural networks. With independent parallel integer and floating-point data paths, the Turing SM handles workloads more efficiently using a mix of computation and addressing calculations. |
+| Mixed-precision computing | 16-bit floating-point precision computing enables the training and deployment of larger neural networks. With independent parallel integer and floating-point data paths, the Turing SM handles workloads more efficiently using a mix of computation and addressing calculations. |
| Dynamic load balancing | Provides dynamic allocation capabilities of GPU resources for graphics and compute tasks as needed to maximize resource utilization. |
| Compute preemption | Preemption at the instruction-level provides finer grain control over compute tasks to prevent long-running applications from either monopolizing system resources or timing out. |
| H.264, H.265 and HEVC encode/decode engines | Enables faster than real-time performance for transcoding, video editing, and other encoding applications with two dedicated H.264 and HEVC encode engines and a dedicated decode engine that are independent of 3D/compute pipeline. |
@@ -86,7 +86,7 @@ Surface Book 3 with Quadro RTX 3000 delivers the best graphics performance of an
## App acceleration
-The following table shows how Quadro RTX 3000 provides significantly faster acceleration across leading professional applications. It includes SPECview perf 13 benchmark test results comparing Surface Book 3 15-inch with NVIDIA Quadro RTX 3000 versus Surface Book 2 15-inch with NVIDIA GeForce GTX 1060 devices in market March 2020.
+The following table shows how Quadro RTX 3000 provides significantly faster acceleration across leading professional applications. It includes SPECview perf 13 benchmark test results comparing the Surface Book 3 15-inch with NVIDIA Quadro RTX 3000 versus the Surface Book 2 15-inch with NVIDIA GeForce GTX 1060 devices in the market as of March 2020.
**Table 3. App acceleration on Surface Book 3 with Quadro RTX 3000**
@@ -95,23 +95,23 @@ The following table shows how Quadro RTX 3000 provides significantly faster acce
| Adobe Dimension | - RTX-accelerated ray tracing delivers photorealistic 3D rendering to 2D artists and designers. |
| Adobe Substance Alchemist | - Create and blend materials with ease, featuring RTX-accelerated AI. |
| Adobe Substance Painter | - Paint materials onto 3d models, featuring RTX accelerated bakers, and Iray RTX rendering which generates photorealistic imagery for interactive and batch rendering workflows.
|
-| Adobe Substance Designer | - Author procedural materials featuring RTX accelerated bakers
- Uses NVIDIA Iray rendering including textures/substances and bitmap texture export to render in any Iray powered compatible with MDL.
- DXR-accelerated light and ambient occlusion baking. |
-| Adobe Photoshop | - CUDA core acceleration enables faster editing with 30+ GPU-accelerated features such as blur gallery, liquify, smart sharpen, & perspective warp enable photographers and designers to modify images smoothly and quickly. |
+| Adobe Substance Designer | - Author procedural materials featuring RTX accelerated bakers
- Uses NVIDIA Iray rendering including textures/substances and bitmap texture export to render in any Iray that is compatible with MDL.
- DXR-accelerated light and ambient occlusion baking. |
+| Adobe Photoshop | - CUDA core acceleration enables faster editing with 30+ GPU-accelerated features such as blur gallery, liquify, smart sharpen, and perspective warp enable photographers and designers to modify images smoothly and quickly. |
| Adobe Lightroom | - Faster editing high res images with GPU-accelerated viewport, which enables the modeling of larger 3D scenes, and the rigging of more complex animations.
- GPU-accelerated image processing enables dramatically more responsive adjustments, especially on 4K or higher resolution displays.
- GPU-accelerated AI-powered “Enhance Details” for refining fine color detail of RAW images. |
| Adobe Illustrator | - Pan and zoom with GPU-accelerated canvas faster, which enables graphic designers and illustrators to pan across and zoom in and out of complex vector graphics smoothly and interactively. |
-| Adobe
Premiere Pro | - Significantly faster editing and rendering video with GPU-accelerated effects vs CPU:
- GPU-accelerated effects with NVIDIA CUDA technology for real-time video editing and faster final frame rendering.
- GPU-accelerated AI Auto Reframe feature for intelligently converting landscape video to dynamically tracked portrait or square video. |
+| Adobe
Premiere Pro | - Significantly faster editing and rendering video with GPU-accelerated effects vs CPU.
- GPU-accelerated effects with NVIDIA CUDA technology for real-time video editing and faster final frame rendering.
- GPU-accelerated AI Auto Reframe feature for intelligently converting landscape video to dynamically tracked portrait or square video. |
| Autodesk
Revit | - GPU-accelerated viewport for a smoother, more interactive design experience.
- Supports 3rd party GPU-accelerated 3D renderers such as V-Ray and Enscape. |
-| Autodesk
3ds Max | - GPU-accelerated viewport graphics for fast, interactive 3D modelling and design.
- RTX-accelerated ray tracing and AI denoising ****with the default Arnold renderer.
- More than 70 percent faster compared with Surface Book 2 15”. |
+| Autodesk
3ds Max | - GPU-accelerated viewport graphics for fast, interactive 3D modelling and design.
- RTX-accelerated ray tracing and AI denoising with the default Arnold renderer.
- More than 70 percent faster compared with Surface Book 2 15”. |
| Autodesk
Maya | - RTX-accelerated ray tracing and AI denoising with the default Arnold renderer.
- OpenGL Viewport Acceleration. |
-| Dassault Systemes
Solidworks | - Solidworks Interactive Ray Tracer (Visualize) accelerated by both RT Cores and Tensor Cores; AI-accelerated denoiser.
- Runs more than 50% faster compared with Surface Book 2 15” |
-| Dassault Systemes
3D Experience Platform | - CATIA Interactive Ray Tracer (Live Rendering) accelerated by RT Cores.
- Catia runs more than 100% faster compared with Surface Book 2 15. |
-| ImageVis3D | - Runs more than 2x faster compared with Surface Book 2 15”.. |
+| Dassault Systemes
Solidworks | - Solidworks Interactive Ray Tracer (Visualize) accelerated by both RT Cores and Tensor Cores; AI-accelerated denoiser.
- Runs more than 50% faster compared with Surface Book 2 15”. |
+| Dassault Systemes
3D Experience Platform | - CATIA Interactive Ray Tracer (Live Rendering) accelerated by RT Cores.
- Catia runs more than 100% faster compared with Surface Book 2 15". |
+| ImageVis3D | - Runs more than 2x faster compared with Surface Book 2 15”. |
| McNeel & Associates
Rhino 3D | - GPU-accelerated viewport for a smooth and interactive modelling and design experience.
- Supports Cycles for GPU-accelerated 3D rendering. |
-| Siemens NX | - Siemens NX Interactive Ray Tracer (Ray Traced Studio) accelerated by RT Cores.
- Runs more than 10 x faster compared with Surface Book 2 15”.. |
-| Esri ArcGIS | - Real-time results from what took days & weeks, due to DL inferencing leveraging tensor cores. |
+| Siemens NX | - Siemens NX Interactive Ray Tracer (Ray Traced Studio) accelerated by RT Cores.
- Runs more than 10x faster compared with Surface Book 2 15”. |
+| Esri ArcGIS | - Real-time results from what took days and weeks, due to DL inferencing leveraging tensor cores. |
| PTC Creo | - Creo's real-time engineering simulation tool (Creo Simulation Live) built on CUDA.
- Runs more than 15% faster compared with Surface Book 2 15”. |
| Luxion KeyShot | - 3rd party Interactive Ray Tracer used by Solidworks, Creo, and Rhino. Accelerated by RT Cores, OptiX™ AI-accelerated denoising. |
-| ANSYS
Discovery Live | - ANSYS real-time engineering simulation tool (ANSYS Discovery Live) built on CUDA |
+| ANSYS
Discovery Live | - ANSYS real-time engineering simulation tool (ANSYS Discovery Live) built on CUDA. |
## SKUs
**Table 4. Surface Book 3 with Quadro RTX 3000 SKUs**
@@ -123,7 +123,7 @@ The following table shows how Quadro RTX 3000 provides significantly faster acce
## Summary
-Surface Book 3 with Quadro RTX 3000 delivers the best graphics performance on any Surface laptop, providing architects, engineers, developers, and data scientists with the tools they need to work efficiently from anywhere:
+The Surface Book 3 with Quadro RTX 3000 delivers the best graphics performance of any Surface laptop, providing architects, engineers, developers, and data scientists with the tools they need to work efficiently from anywhere:
- RTX-acceleration across multiple workflows like design, animation, video production, and more.
- Desktop-grade performance in a mobile form factor.
From ab0d61e1628577b683cee346f372ed7dd4550fb5 Mon Sep 17 00:00:00 2001
From: Thomas
Date: Wed, 3 Jun 2020 17:45:21 -0700
Subject: [PATCH 023/129] Update .openpublishing.redirection.json
---
.openpublishing.redirection.json | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json
index edd89b7792..9f1b77566b 100644
--- a/.openpublishing.redirection.json
+++ b/.openpublishing.redirection.json
@@ -15988,7 +15988,7 @@
},
{
"source_path": "windows/security/threat-protection/windows-defender-antivirus/why-use-microsoft-antivirus.md",
-"redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/why-use-microsoft-antivirus",
+"redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/why-use-microsoft-defender-antivirus",
"redirect_document_id": true
}
]
From c895962f32be608ec61f1efc9e744682c3103ceb Mon Sep 17 00:00:00 2001
From: Justin Nafziger
Date: Wed, 3 Jun 2020 18:04:42 -0700
Subject: [PATCH 024/129] MRC updates for Windows 10, version 2004
---
devices/hololens/change-history-hololens.md | 8 ++++++++
devices/hololens/holographic-photos-and-videos.md | 8 ++++++--
2 files changed, 14 insertions(+), 2 deletions(-)
diff --git a/devices/hololens/change-history-hololens.md b/devices/hololens/change-history-hololens.md
index 9a1b48b3eb..f4655eaebf 100644
--- a/devices/hololens/change-history-hololens.md
+++ b/devices/hololens/change-history-hololens.md
@@ -17,6 +17,14 @@ ms.localizationpriority: medium
This topic lists new and updated topics in the [Microsoft HoloLens documentation](index.md).
+## Windows 10 Holographic, version 2004
+
+The topics in this library have been updated for Windows 10 Holographic, version 2004.
+
+## HoloLens 2
+
+The topics in this library have been updated for HoloLens 2 and Windows 10 Holographic, version 1903.
+
## April 2019
New or changed topic | Description
diff --git a/devices/hololens/holographic-photos-and-videos.md b/devices/hololens/holographic-photos-and-videos.md
index 10e6bb4756..11255c8961 100644
--- a/devices/hololens/holographic-photos-and-videos.md
+++ b/devices/hololens/holographic-photos-and-videos.md
@@ -44,7 +44,9 @@ To take a quick photo of your current view, press the volume up and volume down
### Voice commands to take photos
-Cortana can also take a picture. Say: "Hey Cortana, take a picture."
+On HoloLens 2, version 2004 (and later), say: "Take a picture."
+
+On HoloLens (1st gen) or HoloLens 2, version 1903, say: "Hey Cortana, take a picture."
### Start menu to take photos
@@ -67,7 +69,9 @@ The quickest way to record a video is to press and hold the **volume up** and **
### Voice to record videos
-Cortana can also record a video. Say: "Hey Cortana, start recording." To stop a video, say "Hey Cortana, stop recording."
+On HoloLens 2, version 2004 (and later), say: "Start recording." To stop recording, say "Stop recording."
+
+On HoloLens (1st gen) or HoloLens 2, version 1903, say: "Hey Cortana, start recording." To stop recording, say "Hey Cortana, stop recording."
### Start menu to record videos
From 22cd538c72a6840ca63c8189e1c3099103fa12df Mon Sep 17 00:00:00 2001
From: Dani Halfin
Date: Wed, 3 Jun 2020 23:19:26 -0700
Subject: [PATCH 025/129] adding some links to hub
---
.openpublishing.redirection.json | 2 +-
windows/privacy/index.yml | 13 ++++++++++++-
2 files changed, 13 insertions(+), 2 deletions(-)
diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json
index a4e6e02c6d..c975833477 100644
--- a/.openpublishing.redirection.json
+++ b/.openpublishing.redirection.json
@@ -14728,7 +14728,7 @@
},
{
"source_path": "windows/privacy/manage-windows-endpoints.md",
-"redirect_url": "https://docs.microsoft.com/windows/privacy/manage-windows-1809-endpoints",
+"redirect_url": "https://docs.microsoft.com/windows/privacy/manage-windows-2004-endpoints",
"redirect_document_id": true
},
{
diff --git a/windows/privacy/index.yml b/windows/privacy/index.yml
index c8309a41a9..934a834754 100644
--- a/windows/privacy/index.yml
+++ b/windows/privacy/index.yml
@@ -161,12 +161,23 @@ additionalContent:
sections:
- items:
# Card
+ - title: More Windows privacy
+ links:
+ - text: "Windows 10 & Privacy Compliance: A Guide for IT and Compliance Professionals"
+ url: Windows-10-and-privacy-compliance.md
+ - text: Windows 10 personal data services configuration
+ url: windows-personal-data-services-configuration.md
+ - text: Beginning your GDPR journey for Windows 10
+ url: gdpr-win10-whitepaper.md
+ # Card
- title: View and manage Windows 10 connection endpoints
links:
- text: Manage Windows 10 connection endpoints
url: manage-windows-endpoints.md
+ - text: Manage connection endpoints for non-Enterprise editions of Windows 10
+ url: windows-endpoints-2004-non-enterprise-editions.md
- text: Manage connections from Windows to Microsoft services
- url: manage-connections-from-windows-operating-system-components-to-microsoft-services
+ url: manage-connections-from-windows-operating-system-components-to-microsoft-services.md
# Card
- title: Additional resources
links:
From cdcaa4efc02c8eb66ff3b9b2e3287577175ea26c Mon Sep 17 00:00:00 2001
From: Denise Vangel-MSFT
Date: Thu, 4 Jun 2020 10:56:30 -0700
Subject: [PATCH 026/129] Update enable-attack-surface-reduction.md
---
.../enable-attack-surface-reduction.md | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/enable-attack-surface-reduction.md
index a2ebc76a15..2506f2934b 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/enable-attack-surface-reduction.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/enable-attack-surface-reduction.md
@@ -12,7 +12,7 @@ ms.localizationpriority: medium
audience: ITPro
author: levinec
ms.author: ellevin
-ms.date: 05/29/2020
+ms.date: 06/04/2020
ms.reviewer:
manager: dansimp
---
@@ -201,7 +201,3 @@ Example:
- [Attack surface reduction FAQ](attack-surface-reduction.md)
-* [Reduce attack surfaces with attack surface reduction rules](attack-surface-reduction.md)
-* [Evaluate attack surface reduction](evaluate-attack-surface-reduction.md)
-* [Attack surface reduction FAQ](attack-surface-reduction.md)
-* [Enable cloud-delivered protection](../microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md)
From eac2a8ed95c1ab3e22317685729e417208a1cfee Mon Sep 17 00:00:00 2001
From: jaimeo
Date: Thu, 4 Jun 2020 11:01:27 -0700
Subject: [PATCH 027/129] fixing the OTHER link
---
windows/deployment/TOC.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml
index 7c8dff22d6..a4413bf73e 100644
--- a/windows/deployment/TOC.yml
+++ b/windows/deployment/TOC.yml
@@ -126,7 +126,7 @@
- name: Deploy updates with Configuration Manager
href: update/deploy-updates-configmgr.md
- name: Deploy updates with Intune
- href: update/waas-wufb-csp-mdm.md
+ href: update/deploy-updates-intune.md
- name: Deploy updates with WSUS
href: update/waas-manage-updates-wsus.md
- name: Deploy updates with Group Policy
From 373c159089aa11f70f266556975a6d889eba78b8 Mon Sep 17 00:00:00 2001
From: 1justingilmore
Date: Thu, 4 Jun 2020 13:21:15 -0600
Subject: [PATCH 028/129] Edit pass for create an authentication request rule
DO NOT MERGE
Light copy edits for create-an-authentication-request-rule.md
---
.../create-an-authentication-request-rule.md | 26 +++++++++++--------
1 file changed, 15 insertions(+), 11 deletions(-)
diff --git a/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md b/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md
index 873ee01d4f..c274213bfb 100644
--- a/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md
+++ b/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md
@@ -19,7 +19,7 @@ ms.date: 08/17/2017
# Create an Authentication Request Rule
-**Applies to**
+**Applies to:**
- Windows 10
- Windows Server 2016
@@ -27,9 +27,9 @@ After you have configured IPsec algorithms and authentication methods, you can c
**Administrative credentials**
-To complete this procedure, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the GPOs.
+To complete this procedure, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the GPOs (Group Policy Objects).
-To create the authentication request rule
+To create the authentication request rule:
1. Open the Group Policy Management Console to [Windows Defender Firewall with Advanced Security](open-the-group-policy-management-console-to-windows-firewall-with-advanced-security.md).
@@ -39,9 +39,10 @@ To create the authentication request rule
4. On the **Requirements** page, select **Request authentication for inbound and outbound connections**.
- >**Caution:** Do not configure the rule to require inbound authentication until you have confirmed that all of your devices are receiving the correct GPOs, and are successfully negotiating IPsec and authenticating with each other. Allowing the devices to communicate even when authentication fails prevents any errors in the GPOs or their distribution from breaking communications on your network.
+ > [!CAUTION]
+ > Do not configure the rule to require inbound authentication until you have confirmed that all of your devices are receiving the correct GPOs, and are successfully negotiating IPsec and authenticating with each other. Allowing the devices to communicate even when authentication fails prevents any errors in the GPOs or their distribution from breaking communications on your network.
-5. On the **Authentication Method** page, select the authentication option you want to use on your network. To select multiple methods that are tried in order until one succeeds, click **Advanced**, click **Customize**, and then click **Add** to add methods to the list. Second authentication methods require Authenticated IP (AuthIP).
+5. On the **Authentication Method** page, select the authentication option you want to use on your network. To select multiple methods that are attempted in order until one succeeds, click **Advanced**, click **Customize**, and then click **Add** to add methods to the list. Second authentication methods require Authenticated IP (AuthIP).
1. **Default**. Selecting this option tells the device to request authentication by using the method currently defined as the default on the device. This default might have been configured when the operating system was installed or it might have been configured by Group Policy. Selecting this option is appropriate when you have configured system-wide settings by using the [Configure Authentication Methods](configure-authentication-methods.md) procedure.
@@ -49,7 +50,9 @@ To create the authentication request rule
3. **Computer (Kerberos V5)**. Selecting this option tells the device to request authentication of the device by using its domain credentials. This option works with other devices than can use IKE v1, including earlier versions of Windows.
- 4. **Advanced**. Click **Customize** to specify a custom combination of authentication methods required for your scenario. You can specify both a **First authentication method** and a **Second authentication method**.
+ 4. **Advanced**. Selecting this option enables you to specify a custom combination of authentication methods required for your scenario.
+
+6. Optional: If you selected **Advanced** in the previous step, then Click **Customize** to specify a custom combination of authentication methods required for your scenario. You can specify both a **First authentication method** and a **Second authentication method**.
The **First authentication method** can be one of the following:
@@ -75,18 +78,19 @@ To create the authentication request rule
If you check **Second authentication is optional**, the connection can succeed even if the authentication attempt specified in this column fails.
- >**Important:** Make sure that you do not select the boxes to make both first and second authentication optional. Doing so allows plaintext connections whenever authentication fails.
+ > [!IMPORTANT]
+ > Make sure that you do not select the boxes to make both first and second authentication optional. Doing so allows plaintext connections whenever authentication fails.
-6. After you have configured the authentication methods, click **OK** on each dialog box to save your changes and close it, until you return to the **Authentication Method** page in the wizard. Click **Next**.
+7. After you have configured the authentication methods, click **OK** on each dialog box to save your changes and close it, until you return to the **Authentication Method** page in the wizard. Click **Next**.
-7. On the **Profile** page, select the check boxes for the network location type profiles to which this rule applies.
+8. On the **Profile** page, select the check boxes for the network location type profiles to which this rule applies.
- On portable devices, consider clearing the **Private** and **Public** boxes to enable the device to communicate without authentication when it is away from the domain network.
- - On devices that do not move from network to network, consider selecting all of the profiles. Doing so prevents an unexpected switch in the network location type from disabling the rule.
+ - On devices that do not move from network to network, consider selecting all the profiles. Doing so prevents an unexpected switch in the network location type from disabling the rule.
Click **Next**.
-8. On the **Name** page, type a name for the connection security rule and a description, and then click **Finish**.
+9. On the **Name** page, type a name for the connection security rule and a description, and then click **Finish**.
The new rule appears in the list of connection security rules.
From 29e78996e0fdc1c233d08d6e27d7cfc34f2d1f3c Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Thu, 4 Jun 2020 12:57:40 -0700
Subject: [PATCH 029/129] new lp
---
windows/deployment/index.yml | 27 ++++++----
windows/deployment/index3.yml | 94 +++++++++++++++++++++++++++++++++++
2 files changed, 111 insertions(+), 10 deletions(-)
create mode 100644 windows/deployment/index3.yml
diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml
index 753f83e575..73bde8397e 100644
--- a/windows/deployment/index.yml
+++ b/windows/deployment/index.yml
@@ -22,29 +22,36 @@ landingContent:
# Cards and links should be based on top customer tasks or top subjects
# Start card title with a verb
# Card (optional)
- - title: Overview
+ - title: Deploy Windows 10
linkLists:
- linkListType: overview
links:
- text: Windows 10 deployment scenarios
url: windows-10-deployment-scenarios.md
- - text: What is Windows as a service?
- url: update/waas-overview.md
- - text: Types of Windows updates
- url: update/waas-quick-start.md#definitions
- # Card (optional)
- - title: Get started
- linkLists:
- linkListType: get-started
links:
- text: Demonstrate Autopilot deployment
url: windows-autopilot/demonstrate-deployment-on-vm.md
- - text: Servicing the Windows 10 operating system
- url: update/waas-servicing-strategy-windows-10-updates.md
- text: Deploy Windows 10 in a test lab
url: windows-10-poc.md
+ # Card (optional)
+ - title: Update Windows 10
+ linkLists:
+ - linkListType: overview
+ links:
+ - text: What is Windows as a service?
+ url: update/waas-overview.md
+ - text: Types of Windows updates
+ url: update/waas-quick-start.md#definitions
+ n
+ - linkListType: get-started
+ links:
+ - text: Servicing the Windows 10 operating system
+ url: update/waas-servicing-strategy-windows-10-updates.md
+
+
# Card (optional)
- title: Deployment planning
linkLists:
diff --git a/windows/deployment/index3.yml b/windows/deployment/index3.yml
new file mode 100644
index 0000000000..753f83e575
--- /dev/null
+++ b/windows/deployment/index3.yml
@@ -0,0 +1,94 @@
+### YamlMime:Landing
+
+title: Windows 10 deployment resources and documentation # < 60 chars
+summary: Learn about deploying and and keeping Windows 10 up to date. # < 160 chars
+
+metadata:
+ title: Windows 10 deployment resources and documentation # Required; page title displayed in search results. Include the brand. < 60 chars.
+ description: Learn about deploying Windows 10 and keeping it up to date in your organization. # Required; article description that is displayed in search results. < 160 chars.
+ services: windows-10
+ ms.service: windows-10 #Required; service per approved list. service slug assigned to your service by ACOM.
+ ms.subservice: subservice
+ ms.topic: landing-page # Required
+ ms.collection: windows-10
+ author: greg-lindsay #Required; your GitHub user alias, with correct capitalization.
+ ms.author: greglin #Required; microsoft alias of author; optional team alias.
+ ms.date: 05/27/2020 #Required; mm/dd/yyyy format.
+ localization_priority: medium
+
+# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
+
+landingContent:
+# Cards and links should be based on top customer tasks or top subjects
+# Start card title with a verb
+ # Card (optional)
+ - title: Overview
+ linkLists:
+ - linkListType: overview
+ links:
+ - text: Windows 10 deployment scenarios
+ url: windows-10-deployment-scenarios.md
+ - text: What is Windows as a service?
+ url: update/waas-overview.md
+ - text: Types of Windows updates
+ url: update/waas-quick-start.md#definitions
+
+ # Card (optional)
+ - title: Get started
+ linkLists:
+ - linkListType: get-started
+ links:
+ - text: Demonstrate Autopilot deployment
+ url: windows-autopilot/demonstrate-deployment-on-vm.md
+ - text: Servicing the Windows 10 operating system
+ url: update/waas-servicing-strategy-windows-10-updates.md
+ - text: Deploy Windows 10 in a test lab
+ url: windows-10-poc.md
+
+ # Card (optional)
+ - title: Deployment planning
+ linkLists:
+ - linkListType: architecture
+ links:
+ - text: Create a deployment plan
+ url: update/create-deployment-plan.md
+ - text: Evaluate infrastructure and tools
+ url: update/eval-infra-tools.md
+ - text: Define your servicing strategy
+ url: update/waas-servicing-strategy-windows-10-updates.md
+
+ # Card
+ - title: Prepare to deploy Windows 10
+ linkLists:
+ - linkListType: how-to-guide
+ links:
+ - text: Prepare to deploy Windows 10
+ url: deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md
+ - text: Evaluate and update infrastructure
+ url: update/update-policies.md
+ - text: Build a successful servicing strategy
+ url: update/waas-deployment-rings-windows-10-updates.md
+
+ # Card
+ - title: Deploy Windows 10
+ linkLists:
+ - linkListType: deploy
+ links:
+ - text: Deploy Windows 10 with Autopilot
+ url: windows-autopilot/windows-autopilot-scenarios.md
+ - text: Assign devices to servicing channels
+ url: update/waas-servicing-channels-windows-10-updates.md
+ - text: Deploy Windows 10 updates
+ url: update/index.md
+
+ # Card (optional)
+ - title: Also see
+ linkLists:
+ - linkListType: reference
+ links:
+ - text: Windows 10 release information
+ url: https://docs.microsoft.com/en-us/windows/release-information/
+ - text: What's new in Windows 10
+ url: https://docs.microsoft.com/en-us/windows/whats-new/
+ - text: Windows 10 Enterprise Security
+ url: https://docs.microsoft.com/en-us/windows/security/
From b8e29f76ac660bdf066251990fea2e9f483307b9 Mon Sep 17 00:00:00 2001
From: Tina Burden
Date: Thu, 4 Jun 2020 13:04:07 -0700
Subject: [PATCH 030/129] pencil edit
---
.../windows-firewall/create-an-authentication-request-rule.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md b/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md
index c274213bfb..38155aa557 100644
--- a/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md
+++ b/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule.md
@@ -27,7 +27,7 @@ After you have configured IPsec algorithms and authentication methods, you can c
**Administrative credentials**
-To complete this procedure, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the GPOs (Group Policy Objects).
+To complete this procedure, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the (Group Policy Objects) GPOs.
To create the authentication request rule:
From 0234bd6361886e44f414f0ff05601549537e107e Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Thu, 4 Jun 2020 13:19:15 -0700
Subject: [PATCH 031/129] new lp
---
windows/deployment/index.yml | 1 -
1 file changed, 1 deletion(-)
diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml
index 73bde8397e..7f93ece2f8 100644
--- a/windows/deployment/index.yml
+++ b/windows/deployment/index.yml
@@ -45,7 +45,6 @@ landingContent:
url: update/waas-overview.md
- text: Types of Windows updates
url: update/waas-quick-start.md#definitions
- n
- linkListType: get-started
links:
- text: Servicing the Windows 10 operating system
From 538162c012dd44c2c01c0fc043c724a1e23deaa3 Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Thu, 4 Jun 2020 13:46:46 -0700
Subject: [PATCH 032/129] new lp
---
windows/deployment/index.yml | 17 ++++++++++++-----
1 file changed, 12 insertions(+), 5 deletions(-)
diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml
index 7f93ece2f8..2198000c12 100644
--- a/windows/deployment/index.yml
+++ b/windows/deployment/index.yml
@@ -58,8 +58,12 @@ landingContent:
links:
- text: Create a deployment plan
url: update/create-deployment-plan.md
+ - text: Define readiness criteria
+ url: update/plan-define-readiness.md
- text: Evaluate infrastructure and tools
url: update/eval-infra-tools.md
+ - text: Determine application readiness
+ url: update/plan-determine-app-readiness.md
- text: Define your servicing strategy
url: update/waas-servicing-strategy-windows-10-updates.md
@@ -88,13 +92,16 @@ landingContent:
url: update/index.md
# Card (optional)
- - title: Also see
+ - title: Windows 10 resources
linkLists:
- - linkListType: reference
+ - linkListType: learn
links:
- text: Windows 10 release information
- url: https://docs.microsoft.com/en-us/windows/release-information/
+ url: https://docs.microsoft.com/windows/release-information/
- text: What's new in Windows 10
- url: https://docs.microsoft.com/en-us/windows/whats-new/
+ url: https://docs.microsoft.com/windows/whats-new/
- text: Windows 10 Enterprise Security
- url: https://docs.microsoft.com/en-us/windows/security/
+ url: https://docs.microsoft.com/windows/security/
+ - text: Desktop Deployment Center
+ url: https://docs.microsoft.com/microsoft-365/enterprise/desktop-deployment-center-home
+
From 31a8ec974b24cef3f606e18c376de87c987a5ca9 Mon Sep 17 00:00:00 2001
From: jaimeo
Date: Thu, 4 Jun 2020 14:14:19 -0700
Subject: [PATCH 033/129] removed some comments
---
windows/deployment/update/prepare-deploy-windows.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/update/prepare-deploy-windows.md b/windows/deployment/update/prepare-deploy-windows.md
index c5a28a2a9c..76cbb5eea0 100644
--- a/windows/deployment/update/prepare-deploy-windows.md
+++ b/windows/deployment/update/prepare-deploy-windows.md
@@ -155,4 +155,4 @@ You can employ a variety of measures to achieve this, for example:
- Provide the ability to voluntarily update at users’ convenience.
- Inform users of a mandatory installation date when the update will be installed on all devices.
-{I can include the calendar if desired, but the version in the source material isn't rendering well.}
+
From f8cb13887d63708a5872ab642b26bc08428d6317 Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Thu, 4 Jun 2020 14:17:57 -0700
Subject: [PATCH 034/129] new lp
---
windows/deployment/TOC.yml | 2 +
windows/deployment/index.yml | 14 ++++--
windows/deployment/index3.yml | 94 -----------------------------------
3 files changed, 13 insertions(+), 97 deletions(-)
delete mode 100644 windows/deployment/index3.yml
diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml
index 7c8dff22d6..ef87ea0981 100644
--- a/windows/deployment/TOC.yml
+++ b/windows/deployment/TOC.yml
@@ -245,6 +245,8 @@
- name: Delivery Optimization reference
href: update/waas-delivery-optimization-reference.md
- name: Windows 10 in S mode
+ href: s-mode.md
+ - name: Switch to Windows 10 Pro or Enterprise from S mode
href: windows-10-pro-in-s-mode.md
- name: Windows 10 deployment tools
items:
diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml
index 2198000c12..af86c3120f 100644
--- a/windows/deployment/index.yml
+++ b/windows/deployment/index.yml
@@ -72,7 +72,9 @@ landingContent:
linkLists:
- linkListType: how-to-guide
links:
- - text: Prepare to deploy Windows 10
+ - text: Prepare for Zero Touch Installation with Configuration Manager
+ url: deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md
+ - text: Prepare to deploy Windows 10 with MDT
url: deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md
- text: Evaluate and update infrastructure
url: update/update-policies.md
@@ -84,12 +86,18 @@ landingContent:
linkLists:
- linkListType: deploy
links:
- - text: Deploy Windows 10 with Autopilot
+ - text: Windows Autopilot scenarios and capabilities
url: windows-autopilot/windows-autopilot-scenarios.md
+ - text: Deploy Windows 10 to a new device with Configuration Manager
+ url: deploy-windows-cm/deploy-windows-10-using-pxe-and-configuration-manager.md
+ - text: Deploy a Windows 10 image using MDT
+ url: deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md
- text: Assign devices to servicing channels
url: update/waas-servicing-channels-windows-10-updates.md
- text: Deploy Windows 10 updates
- url: update/index.md
+ url: update/waas-servicing-channels-windows-10-updates.md
+ - text: Resolve Windows 10 upgrade errors
+ url: upgrade/resolve-windows-10-upgrade-errors
# Card (optional)
- title: Windows 10 resources
diff --git a/windows/deployment/index3.yml b/windows/deployment/index3.yml
deleted file mode 100644
index 753f83e575..0000000000
--- a/windows/deployment/index3.yml
+++ /dev/null
@@ -1,94 +0,0 @@
-### YamlMime:Landing
-
-title: Windows 10 deployment resources and documentation # < 60 chars
-summary: Learn about deploying and and keeping Windows 10 up to date. # < 160 chars
-
-metadata:
- title: Windows 10 deployment resources and documentation # Required; page title displayed in search results. Include the brand. < 60 chars.
- description: Learn about deploying Windows 10 and keeping it up to date in your organization. # Required; article description that is displayed in search results. < 160 chars.
- services: windows-10
- ms.service: windows-10 #Required; service per approved list. service slug assigned to your service by ACOM.
- ms.subservice: subservice
- ms.topic: landing-page # Required
- ms.collection: windows-10
- author: greg-lindsay #Required; your GitHub user alias, with correct capitalization.
- ms.author: greglin #Required; microsoft alias of author; optional team alias.
- ms.date: 05/27/2020 #Required; mm/dd/yyyy format.
- localization_priority: medium
-
-# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
-
-landingContent:
-# Cards and links should be based on top customer tasks or top subjects
-# Start card title with a verb
- # Card (optional)
- - title: Overview
- linkLists:
- - linkListType: overview
- links:
- - text: Windows 10 deployment scenarios
- url: windows-10-deployment-scenarios.md
- - text: What is Windows as a service?
- url: update/waas-overview.md
- - text: Types of Windows updates
- url: update/waas-quick-start.md#definitions
-
- # Card (optional)
- - title: Get started
- linkLists:
- - linkListType: get-started
- links:
- - text: Demonstrate Autopilot deployment
- url: windows-autopilot/demonstrate-deployment-on-vm.md
- - text: Servicing the Windows 10 operating system
- url: update/waas-servicing-strategy-windows-10-updates.md
- - text: Deploy Windows 10 in a test lab
- url: windows-10-poc.md
-
- # Card (optional)
- - title: Deployment planning
- linkLists:
- - linkListType: architecture
- links:
- - text: Create a deployment plan
- url: update/create-deployment-plan.md
- - text: Evaluate infrastructure and tools
- url: update/eval-infra-tools.md
- - text: Define your servicing strategy
- url: update/waas-servicing-strategy-windows-10-updates.md
-
- # Card
- - title: Prepare to deploy Windows 10
- linkLists:
- - linkListType: how-to-guide
- links:
- - text: Prepare to deploy Windows 10
- url: deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md
- - text: Evaluate and update infrastructure
- url: update/update-policies.md
- - text: Build a successful servicing strategy
- url: update/waas-deployment-rings-windows-10-updates.md
-
- # Card
- - title: Deploy Windows 10
- linkLists:
- - linkListType: deploy
- links:
- - text: Deploy Windows 10 with Autopilot
- url: windows-autopilot/windows-autopilot-scenarios.md
- - text: Assign devices to servicing channels
- url: update/waas-servicing-channels-windows-10-updates.md
- - text: Deploy Windows 10 updates
- url: update/index.md
-
- # Card (optional)
- - title: Also see
- linkLists:
- - linkListType: reference
- links:
- - text: Windows 10 release information
- url: https://docs.microsoft.com/en-us/windows/release-information/
- - text: What's new in Windows 10
- url: https://docs.microsoft.com/en-us/windows/whats-new/
- - text: Windows 10 Enterprise Security
- url: https://docs.microsoft.com/en-us/windows/security/
From 76b9354f4588642d6300e5d406456069009225d9 Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Thu, 4 Jun 2020 14:37:16 -0700
Subject: [PATCH 035/129] new lp
---
windows/deployment/index.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml
index af86c3120f..5ccbf1c1c7 100644
--- a/windows/deployment/index.yml
+++ b/windows/deployment/index.yml
@@ -97,7 +97,7 @@ landingContent:
- text: Deploy Windows 10 updates
url: update/waas-servicing-channels-windows-10-updates.md
- text: Resolve Windows 10 upgrade errors
- url: upgrade/resolve-windows-10-upgrade-errors
+ url: upgrade/resolve-windows-10-upgrade-errors.md
# Card (optional)
- title: Windows 10 resources
From 596578fa97fe9b562ee7c0e979a4e3283fdc064a Mon Sep 17 00:00:00 2001
From: Bill Mcilhargey <19168174+computeronix@users.noreply.github.com>
Date: Thu, 4 Jun 2020 22:19:31 -0400
Subject: [PATCH 036/129] Updated licensing changes for Windows Servers
Removed outdated licensing information for Windows servers and added proper licensing server information for MDATP based upon PM information and Product Terms as of April 2020. Confirm with proper channels and review Product Terms to see matching information.
---
.../microsoft-defender-atp/minimum-requirements.md | 11 ++++++++---
1 file changed, 8 insertions(+), 3 deletions(-)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md
index 736722c00e..ba0601d10d 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md
@@ -40,15 +40,20 @@ Microsoft Defender Advanced Threat Protection requires one of the following Micr
- Microsoft 365 E5 Security
- Microsoft 365 A5 (M365 A5)
+Microsoft Defender Advanced Threat Protection, on Windows Server, requires one of the following licensing options:
+
+- [Azure Security Center Standard plan](https://docs.microsoft.com/azure/security-center/security-center-pricing) (per node)
+- Microsoft Defender ATP for Servers (one per covered Server)
+
+> [!NOTE]
+> Customers with a combined minimum of 50 licenses for one or more of the following may acquire Server SLs for Microsoft Defender Advanced Threat Protection for Servers (one per covered Server OSE): Microsoft Defender Advanced Threat Protection, Windows E5/A5, Microsoft 365 E5/A5 and Microsoft 365 E5 Security User SLs. This license applies to Microsoft Defender ATP for Linux.
+
For detailed licensing information, see the [Product terms page](https://www.microsoft.com/licensing/product-licensing/products) and work with your account team to learn the detailed terms and conditions for the product.
For more information on the array of features in Windows 10 editions, see [Compare Windows 10 editions](https://www.microsoft.com/windowsforbusiness/compare).
For a detailed comparison table of Windows 10 commercial edition comparison, see the [comparison PDF](https://go.microsoft.com/fwlink/p/?linkid=2069559).
-For more information about licensing requirements for Microsoft Defender ATP platform on Windows Server, see [Protecting Windows Servers with Microsoft Defender ATP](https://techcommunity.microsoft.com/t5/Windows-Defender-ATP/Protecting-Windows-Server-with-Windows-Defender-ATP/ba-p/267114).
-
-
## Browser requirements
Access to Microsoft Defender ATP is done through a browser, supporting the following browsers:
- Microsoft Edge
From 6d8ab3c731c458cb7e5d020229632c513547f852 Mon Sep 17 00:00:00 2001
From: Bill Mcilhargey <19168174+computeronix@users.noreply.github.com>
Date: Thu, 4 Jun 2020 22:40:09 -0400
Subject: [PATCH 037/129] Update minimum-requirements.md
added a note from Product Terms discussing the number of concurrent devices MDATP can be used on per user
---
.../microsoft-defender-atp/minimum-requirements.md | 3 +++
1 file changed, 3 insertions(+)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md
index ba0601d10d..3bbf64e500 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md
@@ -40,6 +40,9 @@ Microsoft Defender Advanced Threat Protection requires one of the following Micr
- Microsoft 365 E5 Security
- Microsoft 365 A5 (M365 A5)
+> [!NOTE]
+> Eligible Licensed Users may use Microsoft Defender Advanced Threat Protection on up to five concurrent devices.
+
Microsoft Defender Advanced Threat Protection, on Windows Server, requires one of the following licensing options:
- [Azure Security Center Standard plan](https://docs.microsoft.com/azure/security-center/security-center-pricing) (per node)
From a455dd96ce7cdef1abca268a72d411056bb472ad Mon Sep 17 00:00:00 2001
From: Macky Cruz
Date: Fri, 5 Jun 2020 10:41:04 +0800
Subject: [PATCH 038/129] Added configuration for passiveMode
---
.../threat-protection/microsoft-defender-atp/mac-resources.md | 1 +
1 file changed, 1 insertion(+)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md
index bda42ad846..f7626685ae 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md
@@ -87,6 +87,7 @@ Important tasks, such as controlling product settings and triggering on-demand s
|Configuration|Turn on PUA protection |`mdatp --threat --type-handling potentially_unwanted_application block`|
|Configuration|Turn off PUA protection |`mdatp --threat --type-handling potentially_unwanted_application off` |
|Configuration|Turn on audit mode for PUA protection |`mdatp --threat --type-handling potentially_unwanted_application audit`|
+|Configuration|Turn on/off passiveMode |`mdatp --config passiveMode [on/off]` |
|Diagnostics |Change the log level |`mdatp --log-level [error/warning/info/verbose]` |
|Diagnostics |Generate diagnostic logs |`mdatp --diagnostic --create` |
|Health |Check the product's health |`mdatp --health` |
From 781c275e35f700db283a6c813df7b53d00c8fd1f Mon Sep 17 00:00:00 2001
From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com>
Date: Fri, 5 Jun 2020 09:51:17 +0500
Subject: [PATCH 039/129] Update
network-access-restrict-clients-allowed-to-make-remote-sam-calls.md
---
...k-access-restrict-clients-allowed-to-make-remote-sam-calls.md | 1 +
1 file changed, 1 insertion(+)
diff --git a/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls.md b/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls.md
index 5f46ca3685..f5a0e5c08f 100644
--- a/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls.md
+++ b/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls.md
@@ -22,6 +22,7 @@ ms.author: dansimp
- Windows 10, version 1507 with [KB 4012606](https://support.microsoft.com/help/4012606) installed
- Windows 8.1 with [KB 4102219](https://support.microsoft.com/help/4012219/march-2017-preview-of-monthly-quality-rollup-for-windows-8-1-and-windows-server-2012-r2) installed
- Windows 7 with [KB 4012218](https://support.microsoft.com/help/4012218/march-2017-preview-of-monthly-quality-rollup-for-windows-7-sp1-and-windows-server-2008-r2-sp1) installed
+- Windows Server 2019
- Windows Server 2016
- Windows Server 2012 R2 with[KB 4012219](https://support.microsoft.com/help/4012219/march-2017-preview-of-monthly-quality-rollup-for-windows-8-1-and-windows-server-2012-r2) installed
- Windows Server 2012 with [KB 4012220](https://support.microsoft.com/help/4012220/march-2017-preview-of-monthly-quality-rollup-for-windows-server-2012) installed
From 1f9fedacec779a309e84507ddcc5c028657fdf8e Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Fri, 5 Jun 2020 01:06:41 -0700
Subject: [PATCH 040/129] update
---
windows/deployment/index.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml
index 5ccbf1c1c7..3827964e67 100644
--- a/windows/deployment/index.yml
+++ b/windows/deployment/index.yml
@@ -82,7 +82,7 @@ landingContent:
url: update/waas-deployment-rings-windows-10-updates.md
# Card
- - title: Deploy Windows 10
+ - title: Deploy and update Windows 10
linkLists:
- linkListType: deploy
links:
From a44c6fb113f2efda2a9d163ff846ca874dc51725 Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Fri, 5 Jun 2020 10:14:43 -0700
Subject: [PATCH 041/129] new cards
---
windows/deployment/TOC.yml | 6 +-
windows/deployment/index2.yml | 128 ++++++++++++++++++++++++++++++++++
2 files changed, 133 insertions(+), 1 deletion(-)
create mode 100644 windows/deployment/index2.yml
diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml
index ef87ea0981..db3b462fda 100644
--- a/windows/deployment/TOC.yml
+++ b/windows/deployment/TOC.yml
@@ -44,7 +44,11 @@
- name: Define your servicing strategy
href: update/waas-servicing-strategy-windows-10-updates.md
- name: Best practices for feature updates on mission-critical devices
- href: update/feature-update-mission-critical.md
+ href: update/feature-update-mission-critical.md
+ - name: Windows 10 deployment considerations
+ href: planning/windows-10-deployment-considerations.md
+ - name: Windows 10 infrastructure requirements
+ href: planning/windows-10-infrastructure-requirements
- name: Plan for volume activation
href: volume-activation/plan-for-volume-activation-client.md
- name: Features removed or planned for replacement
diff --git a/windows/deployment/index2.yml b/windows/deployment/index2.yml
new file mode 100644
index 0000000000..ddb29941f1
--- /dev/null
+++ b/windows/deployment/index2.yml
@@ -0,0 +1,128 @@
+### YamlMime:Landing
+
+title: Windows 10 deployment resources and documentation # < 60 chars
+summary: Learn about deploying and and keeping Windows 10 up to date. # < 160 chars
+
+metadata:
+ title: Windows 10 deployment resources and documentation # Required; page title displayed in search results. Include the brand. < 60 chars.
+ description: Learn about deploying Windows 10 and keeping it up to date in your organization. # Required; article description that is displayed in search results. < 160 chars.
+ services: windows-10
+ ms.service: windows-10 #Required; service per approved list. service slug assigned to your service by ACOM.
+ ms.subservice: subservice
+ ms.topic: landing-page # Required
+ ms.collection: windows-10
+ author: greg-lindsay #Required; your GitHub user alias, with correct capitalization.
+ ms.author: greglin #Required; microsoft alias of author; optional team alias.
+ ms.date: 05/27/2020 #Required; mm/dd/yyyy format.
+ localization_priority: medium
+
+# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
+
+landingContent:
+# Cards and links should be based on top customer tasks or top subjects
+# Start card title with a verb
+ # Card (optional)
+ - title: Deploy Windows 10
+ linkLists:
+ - linkListType: overview
+ links:
+ - text: Windows 10 deployment scenarios
+ url: windows-10-deployment-scenarios.md
+
+ - linkListType: quickstart
+ links:
+ - text: Demonstrate Autopilot deployment
+ url: windows-autopilot/demonstrate-deployment-on-vm.md
+ - text: Deploy Windows 10 in a test lab
+ url: windows-10-poc.md
+ - linkListType: architecture
+ links:
+ - text: Windows 10 deployment considerations
+ url: planning/windows-10-deployment-considerations.md
+ - text: Windows 10 infrastructure requirements
+ url: planning/windows-10-infrastructure-requirements
+ - text: Windows 10 features lifecycle
+ url: planning/features-lifecycle.md
+ - text: Plan for volume activation
+ url: volume-activation/plan-for-volume-activation-client.md
+ - linkListType: how-to-guide
+ links:
+ - text: Prepare for Zero Touch Installation with Configuration Manager
+ url: deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md
+ - text: Prepare to deploy Windows 10 with MDT
+ url: deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md
+ - linkListType: deploy
+ links:
+ - text: Windows Autopilot scenarios and capabilities
+ url: windows-autopilot/windows-autopilot-scenarios.md
+ - text: Deploy Windows 10 to a new device with Configuration Manager
+ url: deploy-windows-cm/deploy-windows-10-using-pxe-and-configuration-manager.md
+ - text: Deploy a Windows 10 image using MDT
+ url: deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md
+ - text: Resolve Windows 10 upgrade errors
+ url: upgrade/resolve-windows-10-upgrade-errors.md
+
+ # Card (optional)
+ - title: Update Windows 10
+ linkLists:
+ - linkListType: overview
+ links:
+ - text: What is Windows as a service?
+ url: update/waas-overview.md
+ - text: Types of Windows updates
+ url: update/waas-quick-start.md#definitions
+ - linkListType: get-started
+ links:
+ - text: Servicing the Windows 10 operating system
+ url: update/waas-servicing-strategy-windows-10-updates.md
+ - linkListType: architecture
+ links:
+ - text: Create a deployment plan
+ url: update/create-deployment-plan.md
+ - text: Define readiness criteria
+ url: update/plan-define-readiness.md
+ - text: Evaluate infrastructure and tools
+ url: update/eval-infra-tools.md
+ - text: Determine application readiness
+ url: update/plan-determine-app-readiness.md
+ - text: Define your servicing strategy
+ url: update/waas-servicing-strategy-windows-10-updates.md
+ - linkListType: how-to-guide
+ links:
+ - text: Evaluate and update infrastructure
+ url: update/update-policies.md
+ - text: Build a successful servicing strategy
+ url: update/waas-deployment-rings-windows-10-updates.md
+ - linkListType: deploy
+ links:
+ - text: Assign devices to servicing channels
+ url: update/waas-servicing-channels-windows-10-updates.md
+ - text: Deploy Windows 10 updates
+ url: update/waas-servicing-channels-windows-10-updates.md
+
+ # Card (optional)
+ - title: Windows 10 resources
+ linkLists:
+ - linkListType: learn
+ links:
+ - text: Windows 10 release information
+ url: https://docs.microsoft.com/windows/release-information/
+ - text: What's new in Windows 10
+ url: https://docs.microsoft.com/windows/whats-new/
+ - text: Microsoft 365 for enterprise documention
+ url: https://docs.microsoft.com/microsoft-365/enterprise/
+ - text: Microsoft Surface documentation
+ url: https://docs.microsoft.com/surface/
+ - text: Evaluate Windows 10 Enterprise
+ url: https://www.microsoft.com/evalcenter/evaluate-windows-10-enterprise
+ - text: Microsoft FastTrack cloud solutions
+ url: https://www.microsoft.com/fasttrack/
+ - text: Microsoft Intune documentation
+ url: https://docs.microsoft.com/mem/intune/
+ - text: Microsoft Endpoint Configuration Manager documentation
+ url: https://docs.microsoft.com/mem/configmgr/
+ - text: Windows 10 Enterprise Security
+ url: https://docs.microsoft.com/windows/security/
+ - text: Desktop Deployment Center
+ url: https://docs.microsoft.com/microsoft-365/enterprise/desktop-deployment-center-home
+
From 9b73f89bad4f2eab7dff883a55c15aff9bd716f5 Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Fri, 5 Jun 2020 10:36:26 -0700
Subject: [PATCH 042/129] fix yaml error
---
windows/deployment/TOC.yml | 2 +-
windows/deployment/index2.yml | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml
index db3b462fda..c0f9bfdc9b 100644
--- a/windows/deployment/TOC.yml
+++ b/windows/deployment/TOC.yml
@@ -48,7 +48,7 @@
- name: Windows 10 deployment considerations
href: planning/windows-10-deployment-considerations.md
- name: Windows 10 infrastructure requirements
- href: planning/windows-10-infrastructure-requirements
+ href: planning/windows-10-infrastructure-requirements.md
- name: Plan for volume activation
href: volume-activation/plan-for-volume-activation-client.md
- name: Features removed or planned for replacement
diff --git a/windows/deployment/index2.yml b/windows/deployment/index2.yml
index ddb29941f1..d7fb460e38 100644
--- a/windows/deployment/index2.yml
+++ b/windows/deployment/index2.yml
@@ -87,13 +87,13 @@ landingContent:
url: update/plan-determine-app-readiness.md
- text: Define your servicing strategy
url: update/waas-servicing-strategy-windows-10-updates.md
- - linkListType: how-to-guide
+ - linkListType: how-to-guide
links:
- text: Evaluate and update infrastructure
url: update/update-policies.md
- text: Build a successful servicing strategy
url: update/waas-deployment-rings-windows-10-updates.md
- - linkListType: deploy
+ - linkListType: deploy
links:
- text: Assign devices to servicing channels
url: update/waas-servicing-channels-windows-10-updates.md
From fda3cb3d78daa239f6ac6f2aa56161bce0e30bda Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Fri, 5 Jun 2020 11:10:51 -0700
Subject: [PATCH 043/129] fix link
---
windows/deployment/index2.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/deployment/index2.yml b/windows/deployment/index2.yml
index d7fb460e38..63c3cf0884 100644
--- a/windows/deployment/index2.yml
+++ b/windows/deployment/index2.yml
@@ -40,7 +40,7 @@ landingContent:
- text: Windows 10 deployment considerations
url: planning/windows-10-deployment-considerations.md
- text: Windows 10 infrastructure requirements
- url: planning/windows-10-infrastructure-requirements
+ url: planning/windows-10-infrastructure-requirements.md
- text: Windows 10 features lifecycle
url: planning/features-lifecycle.md
- text: Plan for volume activation
From 0cf94331be3a1c2d43c392717bd00f85a5d2baf8 Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Fri, 5 Jun 2020 11:22:35 -0700
Subject: [PATCH 044/129] add card
---
windows/deployment/TOC.yml | 2 --
windows/deployment/index2.yml | 22 ++++++++++++++++++++++
2 files changed, 22 insertions(+), 2 deletions(-)
diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml
index c0f9bfdc9b..0b76ac574b 100644
--- a/windows/deployment/TOC.yml
+++ b/windows/deployment/TOC.yml
@@ -242,8 +242,6 @@
href: update/windows-update-overview.md
- name: Servicing stack updates
href: update/servicing-stack-updates.md
- - name: How Windows Update works
- href: update/how-windows-update-works.md
- name: Additional Windows Update settings
href: update/waas-wu-settings.md
- name: Delivery Optimization reference
diff --git a/windows/deployment/index2.yml b/windows/deployment/index2.yml
index 63c3cf0884..aa422d777e 100644
--- a/windows/deployment/index2.yml
+++ b/windows/deployment/index2.yml
@@ -100,6 +100,28 @@ landingContent:
- text: Deploy Windows 10 updates
url: update/waas-servicing-channels-windows-10-updates.md
+ # Card (optional)
+ - title: Technical references
+ linkLists:
+ - linkListType: reference
+ links:
+ - text: How does Windows Update work?
+ url: update/how-windows-update-works.md
+ - text: Unified Update Platform (UUP) architecture
+ url: update/windows-update-overview.md#unified-update-platform-uup-architecture
+ - text: Servicing stack updates
+ url: update/servicing-stack-updates.md
+ - text: Manage additional Windows Update setings
+ url: update/waas-wu-settings.md
+ - text: Delivery Optimization reference
+ url: update/waas-delivery-optimization-reference.md
+ - text: Convert an MBR partition to GPT
+ url: mbr-to-gpt.md
+ - text: VAMT technical reference
+ url: volume-activation/volume-activation-management-tool.md
+ - text: User State Migration Tool (USMT) overview
+ url: usmt/usmt-overview.md
+
# Card (optional)
- title: Windows 10 resources
linkLists:
From a46ed80759ac45854d4665bd248919fdd3cee0c5 Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Fri, 5 Jun 2020 11:53:34 -0700
Subject: [PATCH 045/129] combine cards
---
windows/deployment/index2.yml | 7 +------
1 file changed, 1 insertion(+), 6 deletions(-)
diff --git a/windows/deployment/index2.yml b/windows/deployment/index2.yml
index aa422d777e..5ef8d541e2 100644
--- a/windows/deployment/index2.yml
+++ b/windows/deployment/index2.yml
@@ -101,7 +101,7 @@ landingContent:
url: update/waas-servicing-channels-windows-10-updates.md
# Card (optional)
- - title: Technical references
+ - title: Technical references and additional resources
linkLists:
- linkListType: reference
links:
@@ -121,10 +121,6 @@ landingContent:
url: volume-activation/volume-activation-management-tool.md
- text: User State Migration Tool (USMT) overview
url: usmt/usmt-overview.md
-
- # Card (optional)
- - title: Windows 10 resources
- linkLists:
- linkListType: learn
links:
- text: Windows 10 release information
@@ -147,4 +143,3 @@ landingContent:
url: https://docs.microsoft.com/windows/security/
- text: Desktop Deployment Center
url: https://docs.microsoft.com/microsoft-365/enterprise/desktop-deployment-center-home
-
From bc2af3dd96751555ada50646c5ad9e9857a65200 Mon Sep 17 00:00:00 2001
From: Greg Lindsay
Date: Fri, 5 Jun 2020 12:13:42 -0700
Subject: [PATCH 046/129] tweak
---
windows/deployment/index2.yml | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/windows/deployment/index2.yml b/windows/deployment/index2.yml
index 5ef8d541e2..05759feb1e 100644
--- a/windows/deployment/index2.yml
+++ b/windows/deployment/index2.yml
@@ -99,9 +99,11 @@ landingContent:
url: update/waas-servicing-channels-windows-10-updates.md
- text: Deploy Windows 10 updates
url: update/waas-servicing-channels-windows-10-updates.md
+ - text: Troubleshoot Windows Update
+ url: update/windows-update-troubleshooting.md
# Card (optional)
- - title: Technical references and additional resources
+ - title: Technical references and resources
linkLists:
- linkListType: reference
links:
From 48d31d2a94e5a1f8b3d3d75529d36b9d6c4a6491 Mon Sep 17 00:00:00 2001
From: "Jeff Reeds (Aquent LLC)"
Date: Fri, 5 Jun 2020 12:16:32 -0700
Subject: [PATCH 047/129] Updated tables with MS Server 2019 info
The tables I changed were in HTML, I converted them to Markdown.
---
.../app-v-51-supported-configurations.md | 244 +++---------------
.../app-v/appv-supported-configurations.md | 12 +-
2 files changed, 39 insertions(+), 217 deletions(-)
diff --git a/mdop/appv-v5/app-v-51-supported-configurations.md b/mdop/appv-v5/app-v-51-supported-configurations.md
index 7785be89ee..fbb61d173c 100644
--- a/mdop/appv-v5/app-v-51-supported-configurations.md
+++ b/mdop/appv-v5/app-v-51-supported-configurations.md
@@ -43,45 +43,13 @@ The following table lists the operating systems that are supported for the App-V
**Note**
Microsoft provides support for the current service pack and, in some cases, the immediately preceding service pack. To find the support timelines for your product, see the [Lifecycle Supported Service Packs](https://go.microsoft.com/fwlink/p/?LinkId=31975). See [Microsoft Support Lifecycle Support Policy FAQ](https://go.microsoft.com/fwlink/p/?LinkId=31976) for more information.
-
-
-
-
-
-
-
-
-
-
-
-
-
-Microsoft Windows Server 2016 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 R2 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2008 R2 |
-SP1 |
-64-bit |
-
-
-
-
+ | Operating System | Service Pack | System Architecture |
+|----------------------------------|--------------|---------------------|
+| Microsoft Windows Server 2019 | | 64-bit |
+| Microsoft Windows Server 2016 | | 64-bit |
+| Microsoft Windows Server 2012 R2 | | 64-bit |
+| Microsoft Windows Server 2012 | | 64-bit |
+| Microsoft Windows Server 2008 R2 [Extended Security Update](https://www.microsoft.com/windows-server/extended-security-updates)| SP1 | 64-bit |
**Important**
@@ -155,44 +123,13 @@ For more information on user configuration files with SQL server 2016 or later,
The following table lists the operating systems that are supported for the App-V 5.1 Publishing server installation.
-
-
-
-
-
-
-
-
-
-
-
-Microsoft Windows Server 2016 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 R2 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2008 R2 |
-SP1 |
-64-bit |
-
-
-
-
-
+| Operating System | Service Pack | System Architecture |
+|----------------------------------|--------------|---------------------|
+| Microsoft Windows Server 2019 | | 64-bit |
+| Microsoft Windows Server 2016 | | 64-bit |
+| Microsoft Windows Server 2012 R2 | | 64-bit |
+| Microsoft Windows Server 2012 | | 64-bit |
+| Microsoft Windows Server 2008 R2 [Extended Security Update](https://www.microsoft.com/windows-server/extended-security-updates) | SP1 | 64-bit |
### Publishing server hardware requirements
@@ -208,44 +145,13 @@ App-V adds no additional requirements beyond those of Windows Server.
The following table lists the operating systems that are supported for the App-V 5.1 Reporting server installation.
-
-
-
-
-
-
-
-
-
-
-
-Microsoft Windows Server 2016 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 R2 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2008 R2 |
-SP1 |
-64-bit |
-
-
-
-
-
+| Operating System | Service Pack | System Architecture |
+|----------------------------------|--------------|---------------------|
+| Microsoft Windows Server 2019 | | 64-bit |
+| Microsoft Windows Server 2016 | | 64-bit |
+| Microsoft Windows Server 2012 R2 | | 64-bit |
+| Microsoft Windows Server 2012 | | 64-bit |
+| Microsoft Windows Server 2008 R2 [Extended Security Update](https://www.microsoft.com/windows-server/extended-security-updates) | SP1 | 64-bit |
### Reporting server hardware requirements
@@ -368,44 +274,13 @@ The following list displays the supported hardware configuration for the App-V 5
The following table lists the operating systems that are supported for App-V 5.1 Remote Desktop Services (RDS) client installation.
-
-
-
-
-
-
-
-
-
-
-
-Microsoft Windows Server 2016 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 R2 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2008 R2 |
-SP1 |
-64-bit |
-
-
-
-
-
+| Operating System | Service Pack | System Architecture |
+|----------------------------------|--------------|---------------------|
+| Microsoft Windows Server 2019 | | 64-bit |
+| Microsoft Windows Server 2016 | | 64-bit |
+| Microsoft Windows Server 2012 R2 | | 64-bit |
+| Microsoft Windows Server 2012 | | 64-bit |
+| Microsoft Windows Server 2008 R2 [Extended Security Update](https://www.microsoft.com/windows-server/extended-security-updates) | SP1 | 64-bit |
### Remote Desktop Services client hardware requirements
@@ -421,59 +296,16 @@ App-V adds no additional requirements beyond those of Windows Server.
The following table lists the operating systems that are supported for the App-V 5.1 Sequencer installation.
-
-
-
-
-
-
-
-
-
-
-
-Microsoft Windows Server 2016 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 R2 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2012 |
- |
-64-bit |
-
-
-Microsoft Windows Server 2008 R2 |
-SP1 |
-64-bit |
-
-
-Microsoft Windows 10 |
- |
-32-bit and 64-bit |
-
-
-Microsoft Windows 8.1 |
- |
-32-bit and 64-bit |
-
-
-Microsoft Windows 7 |
-SP1 |
-32-bit and 64-bit |
-
-
-
-
-
+| Operating System | Service Pack | System Architecture |
+|----------------------------------|--------------|---------------------|
+| Microsoft Windows Server 2019 | | 64-bit |
+| Microsoft Windows Server 2016 | | 64-bit |
+| Microsoft Windows Server 2012 R2 | | 64-bit |
+| Microsoft Windows Server 2012 | | 64-bit |
+| Microsoft Windows Server 2008 R2 [Extended Security Update](https://www.microsoft.com/windows-server/extended-security-updates) | SP1 | 64-bit |
+| Microsoft Windows 10 | | 32-bit and 64-bit |
+| Microsoft Windows 8.1 | | 32-bit and 64-bit |
+| Microsoft Windows 7 | SP1 | 32-bit and 64-bit |
### Sequencer hardware requirements
diff --git a/windows/application-management/app-v/appv-supported-configurations.md b/windows/application-management/app-v/appv-supported-configurations.md
index ebab019584..dcf1e72905 100644
--- a/windows/application-management/app-v/appv-supported-configurations.md
+++ b/windows/application-management/app-v/appv-supported-configurations.md
@@ -104,17 +104,7 @@ Similarly, the App-V Remote Desktop Services (RDS) client is included with Windo
## Sequencer system requirements
-The following table lists the operating systems that the App-V Sequencer installation supports.
-
-|Operating system|Service pack|System architecture|
-|---|---|---|
-|Microsoft Windows Server 2012 R2||64-bit|
-|Microsoft Windows Server 2012||64-bit|
-|Microsoft Windows Server 2008 R2|SP1|64-bit|
-|Microsoft Windows 10||32-bit and 64-bit|
-|Microsoft Windows 8.1||32-bit and 64-bit|
-|Microsoft Windows 8||32-bit and 64-bit|
-|Microsoft Windows 7|SP1|32-bit and 64-bit|
+Sequencer is now part of the Windows Assessment and Deployment Kit (Windows ADK). [Download the latest Windows ADK](https://docs.microsoft.com/windows-hardware/get-started/adk-install) that is recommended for your version of the Windows OS.
### Sequencer hardware requirements
From 358441ef2db1f4a28fa99e9724dd4c21c84274f1 Mon Sep 17 00:00:00 2001
From: Joey Caparas
Date: Fri, 5 Jun 2020 13:05:26 -0700
Subject: [PATCH 048/129] add video link
---
.../overview-endpoint-detection-response.md | 2 ++
1 file changed, 2 insertions(+)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response.md b/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response.md
index 261734d68b..0d13fe8b36 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response.md
@@ -28,6 +28,8 @@ Microsoft Defender ATP endpoint detection and response capabilities provide adva
When a threat is detected, alerts are created in the system for an analyst to investigate. Alerts with the same attack techniques or attributed to the same attacker are aggregated into an entity called an _incident_. Aggregating alerts in this manner makes it easy for analysts to collectively investigate and respond to threats.
+>[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4o1j5]
+
Inspired by the "assume breach" mindset, Microsoft Defender ATP continuously collects behavioral cyber telemetry. This includes process information, network activities, deep optics into the kernel and memory manager, user login activities, registry and file system changes, and others. The information is stored for six months, enabling an analyst to travel back in time to the start of an attack. The analyst can then pivot in various views and approach an investigation through multiple vectors.
The response capabilities give you the power to promptly remediate threats by acting on the affected entities.
From e174ca4f1d88c41269d5a14af3ec85edbb9da81e Mon Sep 17 00:00:00 2001
From: Joey Caparas
Date: Fri, 5 Jun 2020 14:53:30 -0700
Subject: [PATCH 049/129] update image and step 7 text
---
.../images/configmgr-simple-value.png | Bin 53294 -> 67011 bytes
.../microsoft-defender-atp/onboarding.md | 2 +-
2 files changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/configmgr-simple-value.png b/windows/security/threat-protection/microsoft-defender-atp/images/configmgr-simple-value.png
index 78d20dc4eebb0f9694abbf4913ebc9fbbc922051..6712c068457972c7eac06c6af39cb7b1e4c2280a 100644
GIT binary patch
literal 67011
zcmXtARa6{Zv&D6=!QC~;;1Jy126uN!a0n2b;O-jS-8BSv5ALqP-7fk5bsu`ontte0
zcIxb1Ro!9Aic%;@1V|7N5GXRz;$R2}$hMCw3jyxqj+sFd^2ZP2S7~i$2nZbNe;1?-
znCjx=CcKM`f&~0794s~mFTDO~4+I1mgp9a|nn&hor+cFQpwGc$X@x(>5n7tNwSp?eikL;trWMmb7f0giNxP
zEEaYuy9he38}}4%Cy_(hve5bo3`Z)&{!`}l)cIOlbD4p#&w2In{d3Y{r&qIR{mDUr->4Ee%NwrPmC(&psK_1)5*^G0@8RFqL}YT=r#ovqUM|VBHb4gh
z)t5FX63X4KNf0G@y{vpIBA02}4VJCccDrA5UkGxbb}$Yf@&84u;gfA-%x-gt%zqIy
zJV|n^%{|pqWh-B{hfhG1V_Ve~Ul^x)J)ev7o@t#KQRoybiq~k`NE%u44${ah{*dh)
zY645bRGoZNQ9!BUi3r0hIp}j}s#mDbv*P8SFXLBPq#8ph88QV6s;oe0lA!gI
zKH++KJQJUb04Qw%95&uZHjkaE{q8qW
z6r%aZ^Ow#53hc1>DUqeLWDK!M)gfjr3V?68+enCY#e3-+tzS;B0LhhUDE@T8BRN~Lla$fMx_3U;_-+3=njznu?Y2&TP*m>pSU;+h*tIJ5G
zWAdel28)Fq+!*5Tn1b>rl55o=pswt_zuQQ8g=8nJ!$
z24dSEY@=k+(KnKRn0`GDFT~$EJ(I^VAc~M17$x~(H~<>j?D~4Nbrnfw6#J(df^X=7
zIr+;E#@X4vLiYmmzsE8qe812J5;lSOQnse0vMr3s>s=lfFDd2CeBihNtPPH_F8rdK
z?N|}iqOks&~0-?nL*1c`Ch^#w)K(DV90Ng
z$SXz`Vjj4P5>0xj4a4-7YyA|hvak>{1^&@~qBK1cSeU=zU2~`fE{Us_H6GSO@H9w=ZMe`_buXy$2V|sV`zLbtJg+)
z1XgL*i?gQz)F-77g3rHUA;D6iKd9F&F&ei*MBw~Hw8c
zR=sFUTE(e9eIb2;Yh2E2m3DQvH@Y{e24a7j;9YY^0XpjA>dlS
zw9z;O=rRo=c1A}NGk_{y5T+wD!Lj)}@?;*6iLP1xpj+amu@E9~VnRdF!pV#c{mYSX
zI!T%yjyd;KW;h$CfQ*+eU+@xsG+GR6%MMtFX?XDgrmALw
zMoTHrJXTv}YW3&drz%)K>SJ@a*YP;Gy11Z+kU!s_TUuF#&d<+tP700YVTw9lNQYFv
zzCsy3Ci~Ys9TG0eG8>v~tXr09gzI&KY7?g>@kz_aE;T`6KJTo8T
z3wVi*uWk@vxx1Sfdz_NPmWV3t&nk4Av*F@)9xkX9n3xiA2hzr{G;d_dPh=hNXr@Dl
z9}W@sBjWc55LDUOwVL{0PKjm{>d}=2
zU>cVL$;g0F)mAJ<4~vf5Oec$O!>9!IIjTGCsmZVijH5;-yFAy_63z@GHxG1DF=&{!
zI)ir+%{9g)Ir~j+^S8GqA?ir|fL>aq+11W8;uM4MGi+W?P9;C1wJD9KWuUxb6iZ{a
zjh#O@WEOMQ<))&T6Rub>Ye1$*W|15@jUQ#4iKCEsdpzog^9rM<$h|k}>Tu^7aPOV}oU1giUxc
z7-xm)V{^rqWSSiCO|BlkBT-1YOA(5O1Q|=C2g%9FWGCLB+7}j6H_nmLQ%eWO$E%u}
zrVd*WMYuD(esmuA3(*+rQ6M8)r2Xrn6N|VXL^+41pYxt?}GJFS
zR{A_ZLCP9SzRnn}2g3<@i}Oby1iAJ>Y5V0?v0ozxI_@XDliC=8R<
z%E7_n>(|(#BARGoKFLzG&$dM)9Xru{Z`U9HlToFQ>dy;z%=Rsgju`XBvukTHbY`9P
z+{gRvmg-Pub!w+*0R*auMYM{n?9JUhdT_?PF#bwna(oKIc>N~X%Cg(TG!#WtDNJBS
zY)7DiOEWh}kX59iG{a0>g;BjG6E6zInz0_|J}E29#Eo2vnO#a-aAcdK~WMil$H?j6Taji
z?eN67%GccX^5D{16$?wt%Q2onXrIJ7-tA$k?DN@$g$T`&9hp$tj6*9KHeRlgQ*YE!
z8KAnlMZGyiQ+H_Lp|$Pi%^}FS-Z|6*I&h82tj;ri`LoI&es%Nd>6wn3w5KFS-UXv;
zWg(42Hr5PFs}l_(b!tOL`hx>4Iv8;#Xz0K?&7a^ZWhUN+22LQHIyfq;V4DlGSP9Ii
zHf&zk;Nmiq8P4Kaaabz%5!H&utQv~+{fCEiOiWA-&CSrU@-&w|Il;lO=@}U*15G~9
zcjRv8>y;XCk?MF|ss_QQxQb&|k1tQF$cCZol!Va1&=1C^W}Jya
zk+Uc{*Pu&e=u1EmCq~AHlZHvQ2Esv(fNB9E^f|qQKWoVw=TbZv6m9^M<4)vK{m5bc
z34Nxh{<<`pPS#d-eOxg9q-65Y^wdq}7%k>k)G6W&5`9ewt4NRFBsDS0CVViRMwobh
z>IWk
z$>|Pu3>%fsiKcOzDpnhbXt~DI&^(Ro#;5c~Wfs+<5BOUBV?n4W^r>R*xNW{{Qipl|
z{^Xo0dE8mOelxjy0NHh&OEs>T-!`5x1GG+|}KMre3Pj;G9
z8_{MP9xvib1`VyCI)`ZbzW57#&Pibb8ygOSsC|X~fM8q%m7FiwNQGvvwW*d)tW_eP
zvLrtU&br>j%1K>vG_^RrKL`LrBbs_!_op>*QipWrBcn#`qwIGCS0%GJ)}|-5KG|Ap
zQwfUtqbIvrP5sNa856KIhgAM77$M#F)Jwro!J=t;Rl=I?p9DI`$tLc~^i;%N&quzB
zFok|Fq5M{m)>p{@`9?g)u1p$P3XI!QnGIz6lut0mOp{uzdgjJW-QMekS~n%TS3?pf2PCPM)b0%?&1T+e2W(fZAtn_Q6;XK`jf|qW?<@nXgCy#77
zbOxt1qI&1+U1akzY?(hO^j?r5#y|zmSiJ>V)jSLx9fWw4G1Bax){K(M3bhBph@yMj
zJmFSj6j_R!JaA3+v5NgNoPA-7I6WM!=s{bf3aQ9FIay8o;aClRh~!Gw+Ab
zikK7#25z9?kxm9)gh^8NWdb$CH@`t*3>uy68vw%|bRX0HbFO}0S*aX3OtQJj3K#M<
za-`yf3J$B97=f)m`|zCxL3#oQm1#k|ib<^wo%0Hd}`#01^6R-zV1
z03sd}A-$VJzqR6a9}@*DD1S3U8E3QI4-5lVLHT*SK$0Ca<@6Og!MjRcEFqAbFVDENGNS*&MIt48*M>dJ|=0&R>|?1)mCuRO2b=4V!LZVb
z@;j)yF$S4qz=hkWo4}y!!1+TKsmMK3Cv~TA#+Ab;Cv75Tl(D6zGvtdW3P16vNHCjz
zy%6?KYxNVQ@4MAw#A(u12Z0{CDz=`Tp>8zgJ1FY2(Z*lxu3{^EsRnW
zKpu;?h(IJ}j1U};&VYc?;-3ffD<|WyOHAu?{q5>g<}cNR4su&Qc(~-xMXIqEnWNv)
zA{W(44T&&DAl9n-7iGwj3WvKRb9&)g93jogU^G&MoWY*vJR+;J!pQ;{_nBnT32m)Vb*B{v-Ifo;vGnT%8)G*
zg%OBKYZUycyV1!oq+xS`Fu(xiEm;xufI3Db^Dux9h$_T*lLxiQ+}J2KYf_n6<7*~@
zY#Lr;)TM!HtjD2d>L`{BXA{u<7#EKDdI{<>#KL5veC4M|h+w~6nzUGW=qmx2t8%mA?fg_3~mhW$zzN{JIGVKu%PSX=l`lX
z>UcG&sh+ofL~>Lhl)#enEe!!A!NlX3Ja||oSXa0IErY+5O1t;aKyW+k-UFTO<3jIr<+Wovf4=BB4#1R<9L56o16zJ)j
zaw<7Z6<(6_Gp0Z~1ZofeJOWX51V)TOG3UJrdyxU)899yk58_{1nRqR?jkuPh{#Gab>tyEytE0qobaL2(w}
zX5gfLD9v)YAll2Sq-JgPy$NU);&9omO3wte*6u{gx7sbX#lc_?C@E0Rj8hG>v1RAl
z{!DOUmb&XRHn6Ln;j0Nt{)?iwzPSy9&4#R9R9uV*JhNMyib5p&goTVD__nukPX$K2PMqRxkuA##Vf3&mw`&fK`$ac~n{UJ))0CsSJrre4;o$Q2
z9~x-SaYoYTAjoCSqM*1Al??_%6(BYtCaYjpru&-Nt1wmk!1M6;|3vLiuFNJXDSqKs
zU~UuyS%d((bUfu5KZ_FIVMTzQMP?sb*a`s3O1zu552YwMn^8gUvm&{XHtXf|FeqGH
z{5`*p`f(S(+L92n+LToMc9)a-#jcyhQs&lPLb0Py^jhI%{mUsuh5Y3Z^u`{d_Wq3F
z3mfT@)|RdBtt;xJOjXNuf?euLua6MH!LgEF?~wl>{V22Gb-$8PI`$p^9oe7(T|(P-
zz4xWfj~s!okrC?){rB%zf@Ye~!Qtbyzi#+eJMyss@M06r@A|&|({kKSvsuk1S>6Hd
zBzQXszwWhBeNDNYJ9TRbW~ofb;eFqTyT08+Cz|SeU#OBAZI{CH@S9#lRpgmP~_k}r9~Q47eIXFFeW0@m07HH6<?_B2{A~e{>`m7_jhK90fJ?8Jm(5g_!B@!s*hPCHpD#2w(^a
zIKY~ZMSv4p`}2nV{#(vj
zZ%V9{L-G5*(pALyh9u7$6y`8a+w*doV#5?AVJLT@6$tx#tL$dGnk?_Y!4*P#nwhtM
zlfV7yTkvF^tA2oG*JsiBu&LGBD8py@;A)?}^T(4B`-W8OCoeB)?(qZ!y%!t5MDiX`
zXg_24k~WP6b?t5Ga#rxoMGqeL+GDw0%-NRLMpq7Dvs9=!4j!*tX8ukBjKE4*8*>*+
z7!~2-*GF^jyXcc68~fkP(U(!b-ksl0yn}@v#to@*|NOJogp9)BysSi?jcAIzL|A5-
zva1hNFNMkcX{9m(0C@(^1zF~ca(8-mf4bgJ5owdA0#5s>=|4gC+7G$n2w~QUK>8mh
zxk2Y%LsR)$WqIC#-N>w=jPAKz<)Zdq+8Q0>6>h#97Pi*slsi1}pzKR7>*`papP0W&
zv>#f8w39vvx{qgV56I24H#Cw;g;2G79VVlYF|~1_&aBV(KfU2(cbr#ye4gn(Gkm$%
zTVfqpe9-qksH%3n+SkQ9B{ut63tP?e`<~Q0R5eM_fmkO-oyoM2F^Jf5ZQ!<{!DZ^#
z5*cloC*MojhQ=>D$lQ7=+_}VU@Xuj1c>q0c6sF1VF?u%)O#sBMJ8oa8IVDHA
zFSw5R2m-qJ%OqRpT~F1kKIa_VdS2Ln`yzFUOx#k{R1);!T)*?Ppb!l?jfAT
z$!-LT*Q<`-pS(lX!YU)BbVHGYF%gf#gntp&w1V>-1?3#g!c}`EEW%;GZ|!8+Ew6Up
zc)&K>7$afw*#N@`9*mQQhv~1<`1kUZK8h=O0TWd`w5SSG$u*CG?3GMy}G8g
zGtO*G``B<39-+5~1GY<31Ro=^W<;+^nm>*LKL$Mn*jocqpff)hN`{UfrW#>UO+vM2
zib|~}2mb5ItlO^o+^>y3PiL9WAc|0JPpvP>FAoDNv1(13POWh4SfM{(vr{Qeva{;#
zcFPM_G16-))WG4V#dPd|WLFHK4QBSu#
zFnHcQf50<>@$`ztPNO}7tPN5acO{wa~-xTg)ZqtASy3>4ZBC4TGTsG>gh=$B7n
zt1DU2m73Rb8PxOIzc>Fu3D0^h;O9a$CS~2ZD+3J%lG%D^EN7B&`X9Hm>^EZ?hxTBO
zFHy=UvzbKdJhib)_}VMjda2U%Ll$*J0$gIM46=;d=rP<=SaLg`Ns81dfVSNnRLR!p
z9)g&?p3#4a^V7#2r*HYt2inE(0b)iSa_bQvA>E-`3sDgN)5g&;g!}?JW-E@~dosVc
zJ?&=P(diLb8Uj;V5C|wA8#9wW7(wX$tsHJbEl!7tjTagk+_&5PJ3+cx*4G#9XaEiz
zRVhx%S`ZHWM#8Sj8%>gGWXv_%{lwLEVN1GQr_bkSZu@sElIfqK(;YZAt<0r`yrp3g
zzfaYogC7|?JDK{nQ7i4oAz-@Xa<%e~VR@p(sK7LFLGz0KaTs_re#+bQ5*#+OtIP8A
zLO(EF(RkX
ze1+COU1S}KV9DCt^fy){!k2_o7rZ^XcYamSoSIojV*G*GT}NG>L)RD+U}uRzdw4H2{6%IxbgyBsSE3Gi@rdPPt1IF}NBl&D$>?3IAzKK_OxE
zW@>e2Wc>V#`CyYmWL7%O8kVKe*R`?JgmL#*y4_#_Hxh7)@SQH94!))fXq0e^X_fpD&=mhOduA3G(w;
zHDgvKPjGcahTBPC&*cA}Xk#6nA=D74wB|_|))0sUNsb-@Nf!i~X#IVh*J3^T?@Z%3
z7}Z|6VGN5wKV5E2nuvzW{{933e;;*a(%~tQQ7e&rclDF2%7y0+JbnZaszf!b?Fh=^mEIzOL@{tOx-cI4Fw8g18
zli;Df(l!z{fHV(|fSAnZ_UEOJ(wyJ9w|%O^*tc`VWWjfN|EZfX8m^a89#{{HRElL>
z0#ZoGUMKnX%}bd(h%;u4Ok5@migC8PPJz*OZvuL*sjO7@tIq0w^#%>)=0hB3*(!8O
zW5zQQ=0d#@A$pJ_5vHZY)i%3!VHO)~D?`4oSV
zyK@_WqQjB9O<`e?wM5zgAA?ld-IyHb7%^*^yqm+-;+1{H3C6wRmH)huBw~4VN!4og
zag0+dxsL}IJ4`c0w|%?up^O6`lh%K5Hc{C|4jL=yt*9OBg+mTpRAR>JX)6s15A#8x
z@yGmEUCxgRmMfSMXCbq&RE^wsr1Gv(R;VvPZvGxN>_)bN+8x0!_RtJsU~K2
zPwMKde5?a~^81{eCn@zE5395MPkroTDK85yXXVr-`}iazzfm?~k2%x1vpT)*ohAkD
zfiS;kYKMnqy4)7@&Dg5X-hb{#i6O78gdX?M`CbqD4x6$N?JxSL@Nn@rsc{K8`4t=R
z_l+H;cs$e|7&c|^un3H12liH%o&}=$=KN|oSs~)RV)VVU^d0xu>M5Om$SwA~IocVT
zA&TL@f_dCb`cQBk@pQEnbF``DAlnNfH7#o^+v|LtbfAvH_HO!Z1b&&e7F66
zU7_n1__p)KyTA<|nCy9!mcyPN`1aRzh!9+ghKw0BQ{XEq`{B*}GEL2qk6Z%fZIGYgLOA{1F0?*QHFh
z0RON$w~rsn8IID+3%TL}kweSTs|%-u!Qa3ct935%e3kD<6MT-qG$jvC6w?v?xA9uN(S?#(%`-cM0-+}%tIfus`|
z-!IS%r3SY7ue!M(7vM>^%YC2k)haj!vmaT7Jh!z;Ugj4(-TDfvDMy6P-jG<%Rz^2o
z7v5urLBB5#e22J6y)8;TX-!yNk3mWTmk?#P@cQ!CxbLsb6h|7_9lqS}PdC<23ys&C
z&A&#R;Zd(U+utHdyLc3p8jLpT4~g^lJC1*qrW5K8L!NF;^1Dtimz8s&ctnhVzE*0we*~BzxUCH017s
zP9c--wV|#3eo7th6?(&fSBk`F!Die`VESg)`C{X+$Tif~CD>%QG@-0Sh%vamIUD2b
z?UL-&Pwi5Eqwmd`b;7
z;pTjO+m0p}@H?X4ek1vtui!RKxHCvnp8IZ?^LuRQ^S8gF|3D)#@%F}1f>qNeopdhM
z&W(dB}SFJ5ihzbT03ODKq$LAF@4fLYD1--&&Z>!Cli@CG!
zIpGWW*)#@_GV*05B4NY1>5aaBeLk~0lvgdqqEA6?L3mnlzdG#|+V0MM?cm_=osW8b
zD74Q0zU6s$?iobCuz9SnIkQYe8EhI)S$f~x#Glip5+Yee~`aSmy)
zk?H-|s8btv65gW&hYd~bgVahf(oi$z{+`ugPOuwcjw;`-*I5cZsHeX!(2(WAGpIV*
zIW#l`!{kGFbYfHd%QrTW@++8F&+TY$EQ%<2KEmU@@Px|W8mPD%by=Dx9OGqk2^n7D?Q9;>h+#;W1L>AKFLTyeFUxu)t|8<
zl#|fHbnRbVIrH;e14?LOWl{d?Bvqap;{^e*sM$ott&p<*qgF*ZA_Dm0P
z+SWfE>^yF#c!AK+{}OLWf1iElA;m|JSf+Tk09;yMg-A`5etW2h6qG@mEq}z*#vPk4
z6+`i_{VMo09aE*kSVR2d<q2O_)sPH6GpL55>_ym&5;OMOxVqvrTzVwocV3+pw+>dGW-6o+hD{Zj;U(B
z_jMuvuiH3cs!7)D(e7#=i@R2z-~eTlG&nW{<&ZE>#d@tRc;E`#q{`dzssRWx7FV7t(`d^^Lcm&%Vx_cSog$q
zUnPEY4@FJSOcy%qclp0;!VB>X0)JH0|HL~Hj!fYstgs7FL6!6L$B<@itv@ZK#X76~z%sj?
z&Z+T0XP4ugxgqK9ZYwjtz#7p>l@{N?>L8lMVBmBe-qXr3#P&;T*yW&a_rl+2-aRu?
z(zjElvG3=69kIAAg^VjgZyDZ~Wpo=45!E#ZYS|HjZhR>`3Et0tEtekq4G%{4G5#*S
z3e*jkKUNyH#(PkNTl;mTdBPj>036m|H17ZLW&`YMBUFR}%b!6KV#`}oVnXB%+h#d0
z_{GTN_6ib`Axb-YTTgty`kJoTUq+o-E=n}_4wQ(CceY82XlSk2>s%b#qm|a%5|#!P
za{(ErVbGalc4BzA1Iz!qfl(Gr6GxB~&@y?Z#QO7CLNC(^F!qFtTvJjo!I*L&m;UjW
zfs}WqX2VYZ(9r4iX<0U6S{+x!0tMR*3&EGPjm>63cfvKqA0BnEY(E|kNIUyNvbetv
z8)1rUepKm2OQ$rt{&gMJ5hmzej5ke-<}WV|JBeAZFyHRq&)&DJ3X=4>J7QvdwrL_u
zaUb@ZyGGZi**Y^866&xmD&m@Mee}Nfj_diTB<6TOXL!F)`-B!b%-<2a~L}&(5DK0H%`aK{7!m!63O}({lv~MVD-XP@*h~>l;(eI1wa(*r&%bQJfqxP#c%2Ozu9n!0K@{(p9sC^?D2V&>wf=O
zRIME{c1VXN;4`@}eb{+x3k=M8+aa(n;;w8)fh7(y`?Us{;!%^XF7X*X*aA^
zy^d@z*jBvq6ux3;td31$Gz}%kb@SHEV*Hz(E_!1huWEMZA649^3GfGnC#;1Cspl*&
z;~JX}GL~5lf>2LDJ>DDbZPEFhXY}W?|HRfj@B2E%sEOH}Zh~c2Z}{hlrqBIp2MGS)
zh`WM5bjdYPQh8P79~w=WX(ztMI%nkd)}X^N=abt^a=j*|)FGLUntfQc_7wD%s)z$m
zyaC+|I0bqMMx0)b@n$`je-K^N7;^Qlk=Le&60(&cu&}3sP!vhtU-@T2S=5{;`EDH}
zGoin0uBxjshDpD?m5&YtCr_QvxprpM>ckn0_O
z%h*77fXFUvKb3?aiUt6Fqy1+6U1N&~Na8m&!mR;EV!8UOHnxo|3%57?q&50ub_@2=
zIO8=|2omo!z@O7}jcVgzy8B&`^68@d_WR0cYcZD5h)%0oBNvKo>p4S(p<#}pK9)oy
zU6JhzD9L0ANzcR5KfOqcMDNJO3-}G-8?XLKQ5Z{QTt8#O`R*2f5)mhdXBfLC!e|L}V-JMD?zi+H-d}+HdCKG*(AJ
zplE0ue9T94zuu~XuvW7*NXQMUad@rtC@Dh|2{o2=*jVaAS%WJBSLo+|3^IJxkA(|@
z3iyd*2J|b_P~HP-+S~12XQYP)!TGb)*ypS?HPo{fb&rxm<9at2iF65L>#sNS{?1vO
z?j`-+67_yW5fOA{V^5DrzWIE*oVq=`GDBsKzsjIi=K5*U-v+kBY5Z1GCJ2DRR)P4c
zgNDtlTM-d+EzTTyb=Kb1JM9#S0)6&@dNv;ut`GEC^12g*UU|Kgm@|F#|BWM{{v?so
zbl=xvB#E&r&6a
z$BjO7WSHyq=FyqxE!);_;`66)(kF{~;{v2&qw%o{yU|d<8liQ>BiRb7{DGP%M<)@E
z5`|-vc{2NIei`Lgb1em%h-OqGY;cavBbhg`J&=%{Oe$9i=3T57mwXFFJl@ND#n;$D
zp(abH;G`o5lvWCo3w$rw-yqfrre3LD6%ya8
z3w~9|j`MAtCKL&ew<#<`f$hsU{mRv;N*qzuO$}9_
z9&RsL(jb1@TDJP6Zk|AoE7M%~(9BCu}fsL%!mZNIE~7_w|?7^G9IwstclN%=%FJR|9Fvxw`z%ce+TShs
z)}7PG#~6HPg*##)8O!Cq7{F!NO7qv7OZdg>U1QWJ`TDN<3_)GK%#S+QJ=}r8g^Cd#
zMgTZXDhAf&hU>x~#o8o$b2<%aICS?~ldHa*y~jv1-4<^4^f0s@q`P&r1Ux^t-yDP=
z^(fjDBc@3PMglY+N024HdCht|*``nGrRPx-@3gtnGoLF=q4INqEq;!Y3z1%Jmh^#X
zx(=MrbD^dcGxW1?bol^qc`8*WVYTPV{?7yY4og#_3Fw<`(xS`ryf4eV
zuFVSVl-4o>tp)7iM`FB*t8MuSN~kamypW`e^Ajk6)^+Uh&mrYl_J|f=HM}>E2MNV8
zvU1rxBl%HQza3b%7}Ndk`aycoUFs+2@C3oF$0gnu#{RYc$77+AcX(wM#+|?$)s6%E
z!rGlk6`qZhxK8W-ddNVh=QRpqnAM;)?5ibwab&qTbryFm<0vDtSB
zRp=49(bbW3Fo-0-9T$$6owlKM&N%(YjV{$NWTr&VvFoiaV<`Ob|js;Ga
zqQSN8JY$*A!2DqL?QdtrKx)JZRd3&<%ZU9otBmAE$9Wqu#iPiB*k;ftHU*BCAU5Ade7*4*_VbmuU
z1;>&09LfX|?(Y}9cBf}Q>x(Ztp8hog&awLbuC@PR`PERq?_xcqQ$gg%)}7eEP1gbY
zBM(8Q(A&u~;!Z0dUgzhguHCtdRg89Kb`qm>PMPgT`(Za|44Z!@3?`QmJvVS2?nkJ=
zV6Am(`DYI9o;w-`LG5$Iyy-^R8j^xA=o=^e*mw{W{1!mT#EI6
zR3sTqthaf21pHCQ%J3b6p@80cD-Xp2YW)$Dh{T~+K(PE`PUkH&#aP;N~(i#_|pGK*o*0X!Ydo>Q7Q
zg$P5^=Z*7g*Zf2i2M1JgnCP9uuh1VukliJdP;2frBUOr^(Rvq`duDvXbmYm8{!5*X
z5~&Hyt;kBrpck?Q5_u{KL>dDbjH)@>DIR*wxm97dvG`oyw8l@UA~DG1anbe4)>BzMi1XEyQln@$Y4FtpLhFY^fJ?JHqgAZ9Nd9MKN?Yyiy!4xfIP6zxU6+
zx6B}`U>(0!5sL|U3}|xg)RB7S$@#0f0$nsM_#QR{WX9iz)BO1mO^}jF7#r37C^~s0
zH3qo8x${lC2ION7kNlA8G9@l-mj8ACY9Is~drLckI3rr}(RM$TrL7^MjPY($Prjwq
zL6S-oB>$D02U{Vk&IL3TmQiD=AoYS`i^OFK1N%=2jn7(3!pdSBBdL+XfVX!+kYI8|
z^i(;SABAeEZlSn5cI`aC4RVg9f^6$+e4VdT(>W#%3jG<4LqwyGlo!g*?EovD&A
z)MRRnejel$7w`4=>(h>U?%C%D>t)A5l9ZNy=&6*cfplOBiEy=Kd+oZxI}d)|)3H;#
zROh=a_X)4_(=Gu_H;avs`}y_+{+(KZyTy1$?K%n>>Ts-ns(m7n05Sv$clThg^XL3B
zLI|0q_)4SjS9ORf{VfgG+t)S2r|(hfr(vJ2yph-^gt1HddT1VP?K3fe&QZJx$>U#r
zv&+Q&svm>Jj3pk8XQGmndnzM=Do-qMc7DDuqA2LBYSEu6rs8555E#iLbYvxQOVT-)
z4_RTMsYJtBqh(A*p{aVIQexd_$O?p0rvP}AVwONmg&J~{lp3=kG84e(JQz%j{uEXy
zYV0Nzm=RIvrl^QL)d_wF+`zy9~1pR2Rr7KLHN*5
z1rNLYJYrL%qNzx)6CHN=%T$F0>V9r_1L_09?HtA**Dwg=HH;D7f-&Ic8W%7kwRfnp
zY@9UJSEAwuj~5tYXqcj(q7ZocyZT&y92n;HQ&uWd1fijsgXdC1k9b@fKdKQ-DSC{s
z&#=D*=Z=&iHb*_py0G#~i_hdms7Hy0#wN*^PZ=TkPf^SXq7$t6&B0NM^+qsE$=eE(
zMfQ{^|JIbOgdzxx9LjU$sEr7fUPf@#U&#y`aDS~Qa1hFc_7}Z8?u%+9DW-cPLGC0&
z=&^l=QP$9qq=Mx6e(ZcC>J@AT3)vRNR2PKw4HtB3;u1IQmiSFPdlD_rP{
z_!4RGMG&4lstWp5*w|iFdUZa!&8~_f&y~mhaHP;l>fPFdLN#k=KW^0-G+J}#Z}E54
z{kN0IRfWipm&<~H-@jvBtrniovcS<0w22OPz@jtY_hC9VobTBBJ5u$C!%Wfj9FGl2
z<721eWA0ssSLM9ndfc5B2dQmMdqaNwE#l0b7J*na
zPW=RA!48&HAkXiKAHqVy(9jI=m$IY!Nn!mNSx)>Dsc~>WEk)#6aPX(R8rMVf@Brrf
zAAvJE-b*y%!aPQC#)l8VNW>a7Aie5hDcdO?
zPqKoiHXI*@SRaR@uF*E@sTq(jPINIo2)meHC4@ME&i-pCMuc_=3`}(JSs!{+l&MU?
z9KvW30Ga%EGr)h^w4dldji?hZ1VPjJm@3gD2tc;zI>{l_TUFN;&DQgYrQNpZi+$DN
z)CLRQtL~G`qVTds2q|~cy|E<7A{M=XW4<9<+WME7l&%3g=F3&x_QS5PX*auRbB=Lq
zv`!TsyD2U8YbK+Z?^$PS*cIzvg`6`#y&NVHXOa--**`J}Hd}B8J{y`lyJsfZ;+on<
z(I4(7ec1Rzte)pSm>5N5?NcA*Reo%CjjP7$)!yG<-ss==2!-+vMzGf(rgd+2u~HOI
zjqmxqcx&vDg}l!I3bz-5UtTDS*N~R$1o-P8neK>|dS*A)B-O=21Xu)nC%Sml-OyNG
zj4-p!^X0RNCtqVV4ZcMr{BXa1BBV{_C{4#aKRtM8HMk@8NQ&rE0uR)%YKcm2jefW$
z_rpIPzNto>L8zZN8W6s&G3HZ3)^mAhzn}O%6W4iV@3*hqZ5HgPEt}KfOX-*wn3yx_
z)Fuype^kMl=a}+52=sQ`L1OcH)f<<=Vbtx-|8+-=^GA)%^hnJ6=q;%s@}|~((iruA
z9#roP?3tLcMEq>QyzgxIs_?h$-s82@cYk-t&cU!2CIbTo$ry{mj-h4m^)oruj8m)z
zz_=fs?P)TcJpVn2(R$)PBgzBxangI46c|Z*&jfo^Cy5J%xch|b!qpRsrWS4)H(n<;
z;(Xi*?_S`o>WR0z$oa}@uz4JkMK*dpn0uNXO>jK9g{?!q#LTjIBt0_uTw|*ud^qOj
zFgJw_#9~d=`cu80)v_PZ-i4n#e+}-AV2zLt;Q50f;ZDR-`dXLB3WDcj+nwMxh+*h4
zf(-YOkU~;a)DHBRw%Uca4&sOxuT0)v^K9>P&(?U^*uamEY6VrMotS
z7{=$6v{gPB`)0oF7;HaSOM&gON7&JA>A^FoeD27G;#^{ru45v_^5K66Z9UD%01O1m
z8mPcp_SMUWl-AL@sjirl$A$^R(O)_Z(cQq0!4d?~v(GHbE>*2r-M6u6r5p`9WU!C~
zEa$AYe~9TO2U9uZGVGw3mL7tSq@lAz@F@tTRceBdycb8kRSs8(`aQo}ww8M+PX~|oD3Hz5>
z-@jbm=3g_X5W-6k4P%PMpZ#K+#KxlMs2T=t^%5cFbf%s2r_XbZn9UcF9}UixS~RFG
z#i8f{R)I+T9b{CmZ`x!9k#t*q&;JLxKt{hFLkT66aP#Aa4dW&^wRE^^w66%M!=e*tqr;BysQ=p%0;C|9H&nGR_8)HJ2Al!>imlYJ-g6XFObbC`bS{IYsby!$-9cY>w{5P
zw#0E9gfp~HobbP!%2FF)}-yAGcxT|bGn_dU$4rgDtdC>?HR
zi%{RsvaFCaTdR;o#}ruVLUoCd&p<%n6Lx)k5JVS=XCENCwfN6
z<#Kp#o_sdX{LWd-o7sw&&0>T>tB@yD2ob3|n2DaV01-=KhA;5q_rJ%1d>wPA*VDD_
zE%vu}vSwx(XZP*n;OSmuRST=v&Ld?c(vG1#52*z4RE&N5jzO%Ec{5uGbbv7mqb1U|
zL4g)|JU2jC7T)k#w!U?k#<>fyM^E$mrv1$Qt@T*GN1zRkH28r;8jWo`fI{J;T!UlB
zkdDOjeS{ID5}F;azDbX)roG0HSJiaRnS?YNr450BnC&2i!SnL?o4>mD|)T|tEiBL?L)
z9V}h725~CJrXBnE{y%k-yXsNhoZ!TPGgRKTkh_+(ap>)B96f!B`Z;&=xd-QPcG}%J?Rb@A{YgZHOV)FkI=780@4m|Szx5;+vJU%CT&AkQ0ws}gn{At4
z#Lo55*wo0OU7I-hwnx`x&GMC%oY=94SyMY%G$%tW7H9PAUjEyEJVeLT*>o-}XXlT%
zGpln3`?eh+-ZGQkGjH?c`JG(4kY(PYDV%-#RsMPOD5ti+$hls@-b1ITZBC`GpA7AT1Dp_w==ylgDv{;RDcw6T$sJ|ES6Bh&5F*blHp)#H2^>
z+0&fp9wJlIM8}L)WFSEY2x$Wv%Ls(9P-tXSXd;9`2!q5zm;j{=N`?l`76K!QR1QEG
zP?4&+kfGWEhHI3#Z^bEQoXTGGtB4fbbDe(9lw!32ux=IL}~HuJl5&($?O}U9jV-l|^uEZS
z{-<}5vW=GZEFzyp=Mw~;#M2%MgH)QpHdI&EQk8MIA}sn%oK%@bi++dy`6p)?6)~DS
zGYss0gTMW+d+8d?arZ;(89sg-*NS5*o2Yh%@DmC-beRKhpI~HWEp1ch(K_h@S{j^+
za?);&?tvVaub#!6pMt@{vUEsuZVLCIA&3(m%sVv7|(6^`1J@?-!OG
z7N98=M(=FPLM!!&5cAtm2sMsDpb?fp4_;>5vs)OdY(XA9K##YIHJww5Nr^AY(EbQ9
zWzcq#93GC57-=JI11gX9!7>(ct;xl0Y$Hk8f>Gs?_bkd&Hp)}vy#PBIBW_8I=acn4
z0u_XLC@DkZcPqk}vFSDHSJOsev>keMgcX<&p#2Q_{w2h-Yf1Wp%*YKe^6K+cj}DRT
z@1;7QXY|r#UiBqc=jq00zE`9jjr(V_$^Ln>l$Q$J}KP
zaYtPp6`2%4Q#s8YSGaU?fR>IGG!bL-uCq*Dx}0ST6Obw+sT!HSw2bWew|HacAPZNn
zr>zqD-8im@bNjj_RJO&@BOW5r%w21fv{nd$oTe;2jSVXsX`9?k{YH-`HXUO2k`=V4
zj_~(yyo2Rduwdi;Jh*5M7q`90kKQ~=!@Om5)|Ek~f+|wDgQtnjXlHWkB+S4u-rRJM
z@@WfL-r3F}YYV!08mn)=lbH7K3oDG0kt^X7fK~yXr?72%LYgNkav0n2n!hc}#vL*Dz(q
zLZ;MtTsV1*L%jjjnGAI`aqLk;*X4eyT3e`%W!ZW7JQb5>(cUaM_|8!-d2yyqo`!#B
zFK4cd(%i9thMEduF$cSzB^
zcq4y!=l%GBOK#W@lM)?k;lUY8(4N8z6n4uh<}6u{>v?!tk9A-8RqjQS%MRnKU;>*=
zsTie%j{*hm3(K;R7?josDX=Yv{`0$e=JiY5_t|@C$w;!+63vzFF8YV_#M2eDG**XgJJJffYm~yWLL(+E3rk7@-^C9!iL!E3|1q9^dJmmz
z)-!){H9?@!-U#Q;bd##6rm7-^v~4U5p66kNMLg!910UB9!fO%|$MQI|`APPVOyjG+
zeINNfFY!26{R+$L%E@JO1j-FRbao!rBw=T5ThzB|}^>?~)yhaq#GzMKQC3Ep{g7gjRHzV3czuG@fhbUO$8
zD_HG}uxsxg&RrJNb@$QJV6kU!H?vo)Kn|W@)9X7(G*73_aS$R>Ar}H^xFzYUin+>2
z!CeTVT&E%Lj$rV^+!_)~r0~oT=Xy@kcjN@QOFazq#~@XXHE@N6BYlYM5IaSJhJX9-
zn0?Pi&X2lyegHyZqA!@mjr-{eb9}+G)~+JwX@t~Km|1`{@mKtqA_X$a*XCRLVzbUDl4&!qN#l@bu*Lb
zY>rVCfNi4`c*9Xuurzomj0e6a0gW*lV*-YPQM54#6z<3%xkC1MoM9^&xe`7KM9o%6
zAU`}nR@tPJF$gpyefqjDaQe(8jvm=ZuD+he#zsu;D#uP-Az4*NZB-e=z1>{7dX+>)
zBaOAyNa5m+^s)D~&Fs5e&aeN@SC~>8Czs9PX-LK$a-*XJ#*iNwU~t%{wz-A6OoD;#
zbDTQ7hXcpExNSinXO3NBM8~O1jPS#6KS|Bv&+z5@XVHE3IKy6y)=90{-T=o>Um;#u
zM}0*)Y)dl=EmF)|x}3Ma^&(F_onz#{PU>ge&*ZW^`}Uk6UE54`xy`6+NX9KjhI3eU
zs89M)%=OoJbYle~+E~O8#QM*%Z%e?G_BpJ+y%qQ1Iof6|V9DHRyzs4qta$iwrk8i|
z?2B7DaH<|>%6uNbZ!RzW&3DL-WC?6oym&FQ8ZPqcnE^6Wrw~tB*djy6ZHlT)g1mi|
zww4BDZ8Iqhi6D!zB6nSwV)O5wm(`2i+|Gl~S$M1@Y{DtX7AVZ(&F(XrB8KwyL!OHPK_-!M#T!m$?XbFfen
zOyHqR5Y^L!J)r35*%79gd^UytmT25#;};=`LDWtorMy8%ri2ncEC`edE0^11HfOiJ
z$+JgX7IsJu9?P>}aU(l_yqzmoM|tKScj6~n_{?Kpz#M&^Ctf*7<j}ftveX;
z2cTvVU;DM+V9_Ltt37Ag`Oe$yyIRQ|7anA8TMI{aY-Rh|6kmLJ4%=RSiDO;eTsU{0
zkx`$<6%X>&H4QxXt?#h?;CTir=CgjJi)WvEnmy-ow6?TxV$V)$E9SFk=Ov!}&JQ`C
zFJtXzAEUN=JKuX{8&xy!3(GL&oPbN96H@{eAncJ7_rwWt|C?|t;>!&9YiM54iBTR>gj3-y=FAl#ibg0b
z&M{gerOoVxU*bq0*>(EIR9-zzs!9--3NtuFegt~^1tU%q4O7}VZaj_)L+8KwBUb#@
zACgrT{ewPkKJ>1_$viyAjm=!)Ju%T96?2D?$5Sw71!E$j7LoCW?b_Tzv|Z75Vxsny
z;z`E#D;!9StJc+^0ENZ`8cUe4x;HXr#)#ta#~a`1FwqbSZ8Ttv9M|i4i#~KEd@Kmr
z^E89G94;~H+nPwd`wDyak)z{!1k@N4SuPQJ?<
zeQ6SPOZcO&F5`tKUgYGNZWd2&Vz_^hWW#LkS-OyA(;6^3AUE1i-;jmvNV3CMx!84u
zhItS0$M?4I?XUlUub+Ww3m@h$e`a0w%N}6u9WA{5%s1G5
zdXTzWmmP1t$rNjlvdTu<>#LCjAQNHH90t$Tv`y<|?))z1-7%k`GrQO~(9ZwyXJ6&*
z7k6%k
z`F2hpeuK;1A&;o`?!%~cm>Q5nb!3NzXj^wbRh=tX^vho(pNlb?%YlgFtI&IqCTbn{
ziDvHF@kE%=@K0n^%=O#BSTbFV*}gGTQYfk!zrPs&E))7Gi#f&cq(X*acOn*_ai_e&
z*iAI-YeyK4p~Qqz!p90@2>gJ$_71A7ehv(^v$EZ1&$|a%`tUmPDo;~mB_l^IJTIWU
zX);S6e2AKnZVsM4OHkiNLtPq6NCK_L7IspE6^>eCghSj(VvP(lFfc&>@F;FG@kEaX`7bY=FunuMn-Z}v~}{>7dpvFjntZau8fvx)3MJV
zrKj5>RaeWLjuv#zBj;sVv~n$rZ;xYifHEGFrgRXG#nHy2desIJ@i@k4+jGnijD9V2wq%3&d`Fkd$E%*%`p4zcLb#~B(j42}lmBWf$H
zVR*zNa08@mhm9fc&(1}IdXEi%niC`nX8Xoh`V)73k7F2NqOp$!Gsn4zAMi}K_On*P
z$A~Br605_9nHPafZ$zB@3_zF9oX4cBJ)cD7Fee+9{)wj{w
z-i{xO;k$;)nrh0+VkiY=6?JrUxO5#k#E$**s9!gS+osGS^X9ks)4$vXb``BP7JFX&
zHb?hV(y@F4zpCgTf
zZOhm4g-6@i`qU5jlfTT8rIDqX)JGOc5#RdOx6FeNJ{aBmuw-2#v7*v;SA_W)2Za(c
zBx@E1w7}L5NJC%+NEB{gKl^v=;!w{3t@CeZ`I0$Q_(Nz73WH@yBo0P_k_sydfN7&a
zhE3y2DI@}02m%UBE0VFb{>_WHV{@UWm+$Q9=XcjlBQ6vMK{lJEtgMXk@^VH;NAZ1s
zVlhM^P-wuQqSqus*a##>_=I(r7Q(VH2%dOu6Gu+bP@Rh(e0e)a`Vm8Y6!H(mQ=VI3-oQhg%Dv|`A#&N80&afODTM+mGV8{=TpyFjz
zlqaz;3=j0uGvHEJljhKyFYxxc1P?yEik6yM%99pXuUw*U*d$r-Bas~G9IzZt94y-=7K`EK
z2D#MRPo}no+H#xz-b?fjx}+zFzAp?-Ut#EwJhIoKTCur?l>XIu+|u1ArTlY2uwJ+3vEz@AyXm3#J?_djZ@Gn
z7}wwNplbUNmLEMhv=>TCgGP>86v`8nH
z(A-dopUWZSt$mM6DBR)bky#UsjUbVQKGq9S{5lM
zhE|Fo2yjxBOqo)H3Orm-Q&HPWO@lydh41?xSu^={RhOpdGlW6IFo{3w
zr4a_Ck)2N79XrsvI
zeGJhxXoJ?_+$6MOG_Q%pV%V0%vOotu`M?i}K%~I;T|DojuWp`Dj1m^XO{|J5Qda6h
zCEd6ZJtl05)&@l=rdp_6GtmbD$;b-~d><_=Y+>-dAmkF(3M-ao^316m-}@@vG;{l!6z}fb&%zZ;
zXsxY4m^@m9Mlu$Qp#ncF8j%)uBvlo5+l1qjmQBJobRU10m)|%>vbmEf^Jmi#xAB!m
zs{oCKWr5?w=s))^FKz2){-Q}-?e&>HZzg4ND>T%BMpzbw`K#awe$==@d%-nTb5erV
z2%|AVVx)-NiGr`jSlM|o^eDoRCZS;~sydH%8j5A@Q7xPh7!!JkSm8m189Vk^Pt&c@
zQTJXwToX#|feHO=#cjgc3@O5XG>MG%3o8@D-J%kF5mrD&M=BY+5=!`(V1z}?@;SEk
zS)PA&FS+t27R;MYeN7wlW>m6w$4N4cbqpMThpq2kX2!}@w577_+WH0;sOQ1YK1S2%
zF7{ovShRQ%X`xWc$H_Fadj03Ix;4ktG#-1jhJnN1=9zE)1)Hi`S@+;$G~^ER?2osh
z>!!2*-n(h5aFEjH)H|Da_WA9I_W3+=-<@3D{}Ru>c9Hq(@1!!GBo$APC`*#NbeQjL
zew~X!6?Z@K0Im8YPkiSEhSIgvm@7QJo_XdKdYHt0pIgq*(Zd`%
zvY#PQ#o7lSr?agb75rqXvY!{%%k&U6{f=uku&mHp3uzH(Pz91v6Kx$9`W3^J;ma~&
z^MC?pqcCBgleBDbeFAB)3X^YSKONgfi7?+JqRClC@;;%&Ph>u?H3A=`YVcEqV*O#U
z6`>%At5vjEDEi^iO%?^+iD+M4%)SlL&2sw4eujv1=;R5i%HpJ|8%YLd*|pT$S^}!d#G5rni}2BmS=wi=ilZ)Zyq>!ls=xF20@Q
z&=uZ%`ulVbjxv2tD+hLLrYv1WGL^(u18n);x7c~I53S%_Z!gm-bJ)#um|d3R;LejY
zcFds88DZ~^Z5$N6n6h^2buZ68{X+(ipQCN@YUbLK)X!@eJid?K)-+>j|wo@25x7|^mH#xv&CdDktKZ|5J$fb6v&j7t!{`l||t*i0+etNF#}&
zr#ucfs%QOl-qjLH_{D%hU|WX1o^JZB$$a+nkFjpaEYd<^$pmF(X_9fng%c;}S9RRJ
zaXoi*c2Jh7V$P~Z`0cOW$(dc7*?rYw$;yRfEW+H{_;VP8F`7UdQqA*NfA4*)Triz%
z*HI3h9HnE)YVNt~cG{~G7!z>iVmAZMR37^LBRu|<&(Kh&pn5UC{Iy4zR&H~pX8>(m
zsL{(DJ=84Ze2(voNu5GWmn`94Kc^Noz$&t=fX
zM88j5^Ii!bE=sH_CHyo91A!LQH`Eh*=Np~59=_#Jm#F{)4U?zR^w!h-uRr_GB!r}{u8LUi
z>->j*zZaE?)7}=Nx2q3oT3B}X0xk_0vV)46jz!ee?&q1W{{>spHuwP-&y29$ZbVhI
zF|YnIKmMElf=F1@%xK5&vkBZ$^0_>Q1ml+G9~mYXI$cOUN&!Nmy&<-5+e&YI1`mFI
z87X=g8c1M!gY@@i8E_3XEtQmMO>QvH;K&dJd7
z;SUWnf%B9GZ=XmwGr!gIOao^qZnI0b^oiJnvFVS^r5FKxzsV;-g4>6D%
zW;my)sH!KE{Pfku8)J$L<67&V-*dgu{ke$@+|6bN6`0zUxyx
zX%_c=Cc(=)b}~AwXq&cxj>KtRefJ{ESFh#Xbqg6hxRsaQI7!RuJ6T+lz)n-@I8yk%a>E5GsNsTYt}EPJ{`xj&t+p{nx^srUjD($j8si$
z_M8?(E>F5?F84h!%5%@Xi8Xlb{qGcKbz^tlhx$3dOmutJs-(Cbw8@d+Iq(
z=3}h5{dU@8lX>=^p5=19iZ%DHWY)fS>5pYtFnJ0cl`dPJdxhTgbRJqihyDu#)THC6
zDT`Ux;1K&5H0mZcjO&OiFrxe$K7WkYx141D;~SZpmZ%_sv~!%<`zBkqo@X%OGkwl_
z<~I%S;*a0LNP)2uR94s0d*LMMnQPfFH_hu$ze;yZBK?4+>+i-oafCjrgK3k8*tTUi
zS3HNdX^otHZ9Ajwt9f8qD}(2{X%3Pfrh{qoc*i^Jbg$KMdS#Mx$itZcP|t&|1^j*hnUm
z!LqEM*f74V(O~8JXq!BPq&32uFTH_VGm|@)O~q0Qtpi-wN7ymqj*O}-Z4$u%FFgG%
zb`Ey%8^5%Xj2&R2qCpi=``NaIv?N9=f{qdEyse=J=^oq?JG+8
z2xq#pRJ4^5I8{uYHJ|FvrF2xD<>j~gu}+*|&~4?>f3co{H=gFynG>k~EX|Wwv1+>F
z#TO6LGrW-YN(n+2A2zu8Cdcs@KlXGwO(Kz)@cON0>~6Nt@>ctNN(l2~*=&}+zCLW*
zexJ`kSRCf%MhK*2{;In$#*iHv3Tw*?$51%}udvAV@Nrmi-`BXqw!wtu`9h2<(bpaW
z{Vq--MIvsYmCL2>LE_02amV0=Eq7!`e1tF)3ax|u5EuG<;;AGtTcF$=ffuIxZ99h0
z0Rsbr_{2!3<55iqfF?KUk1fW1f5Me!1AnYuUKLK}<9+a3{WIYjW|VLw+8A6dNY+(T
zpX%Y2%{xe}TSA6Q^bh6HM&r3IYS@slDv3E3wY6n5G}P0RtRYC-q{~v^DF%HPE0H8+
zgF6&Q+ZphC$@y6_F+q9TWHxMAM@`aY$Ju@4wNGGMjYxZEO<
zOkknN=V3mnSe5$z%edJaTS;6$`yW-^=5A
z@BhAhn3!njv_S}ilp14fbfSfY%a?Fv%PxNWl5sq(sj07~(t=aj%e?U8?^2s=VZ~iD$)3@uL@l#A%DKE{KX2{W
z%JiADXm6=z>#@C5$_`qZ+G)A15&C!Y!grn|Uem;~<+B+c9mN#^fsWJE-a^_@QRU~S
ztG`a`G1DCc!G~X4JKM164Bh(Okw!B84C}Z}#d6?cq96R4fvZ{%W
z_BOo!Gjv@zjZU{Rd**afwjsz5bMoLJy8C@<+omw1qnVx)dpWpo8@rBPp>?IA>*yYK
zZhw`1Ctc>;1D0)Jf)NhA{Wh0IQ_Nd54YI>@pFhr!PSaLn81C!g(21i=s-2HD+ReqB
zOu(70K<=u5y
zjzyp+CVxK-^Z)x%xc)^p03T)u`TYu@mV{DE_@wbczLQ~#tA#Cd?A`PPPd>YkQ71-M
zk6~*0QGWE~OZ3S`RxF**#eKWU#{;rKH4l90cer^H
zrl;9=vX?H=%H?xAcz64o96HramoozsixIO0r*=QjcfS1^J#Ga@`G#B`(ksK6Hcy9d7SQ-rP0B
z1ON8_=8iU-^Jls^cO*eYc^%!C1~`29D3wj~`TgJg42ORF1Q*V9p_aFT39zZAx}u8n
z7moA7i=#}M`3V2dA5Y?2VX4^;k`+s@^QPsxUMH$ZReVL>A1hZGpr6QGN@}j#*h-T`7ql~P4
zoL_&WmGA!TQ#}2Ajs*|=KEF3}gs*>h7pD^*HO-T0p4Pz0?Ju)=_eGkgH!^VUIA<>p
zGr6V~f%mb--zMtOnF0y3g%%o6U|b9W*DEk@7^IMRu8Ut-K?_abhh>j}F=*w1koZ|m
ztgM|i>)VJsIeeuFgpE>OC>LW4zIG8xgsdqTJU`;=P&!H(TKItirNWj66<`YE)lnO|
zxcS1C5{(1`1L^~YItnPTdVRF>@6E%JGCpin$ZHm;>3&v2_w!)F;=W`jZ+d*tkYs@>
zkqP^S)sYcb6oE3xvJ~l9o=fM>a@sc>-?yKgubyV+eGkxd^lf%^NI11rmB$g;fWY$zT*<5rOL+2s{xu`5ck|2hTM@x9+RxM9-%C8>P+n0<%<}P!
zO<58KFP-IN+{X)i5)}>1o|od{iQQcGeP%CR&E4x3a^=`%YRc>nejh&sT*q}8stb%U
zY!r;!*gPS|{w@$*GQJ`Zgp|?8s1Y(wG8U3Gs{)-D5n+`OW9s2T+_33eM8v0sGf&*)
znwjLLz_{xaj4{jH05=N76^wd;&+?;aIWXh?CnI8SQzQ&~?{j@pUTER^O~mRGQr1~v
zZc`SNGsZYV$LP=|vcin1i>oN-D9sf)emQFfikP06mjYJ}}k6n2i>+hM*_rCK@w%bW=zw-f>tjx3Z?M?KLT1=Ta
zgWDQwA%L3ZHmp0I$8Yg(2C-=kHt1;I3Ern{T{HtZ6=9x_>T*Uwx6k
z`t}vdTNYDaX5q^WtJf~$@BiUBzD+atKD3VD;s6N?>|_2VbLT2nR+UAD{^P}jKDrVx5Tt
zG>IA$G946_2m;XJ=jVkP&zxce*U^L_h`2|iVBRmFqgN2SynOjG+qZ8=1p(5si(Z`(
z8cb-iua_k<(KUt(FcWcv7Urf%`hmi)V|$tFsF$wACuQhL`1v7(DE7gvTD6LFI{m&Y
zDjnO#bzMBqBb7>_vh9?f?Sl$Fy_6iLx?Krk1J2Z%EY%&$)2$g4OXcS?`NhRW3
z|MY~!9xBK)GU^daBuORXC@;@w-Xoq!k%-y&`7BvakxV49WcdBIYzr?tjH_+R(@D(u
zhHYVyAkWs9zQc=q9De0@e~FH28_!o^#Le}=c5rN23@KTbg`XcK7YH)tWmp6ZkBnmM
zB$=`VL2iVhQIA9>OL_=ILc2oc10%BpS0133MnK*gF{^HyULO!i$O?&hzQ&Y#S_DPn-KWju$>e&HR+JkGEhh-L1iKt
zieW2-9Zyk}5@@9&17lEuBA&{S6b3&CWznJzYNQlsZP7Ms6~8pUmexuKzfdJ9Es|*m
zqjjh|SKMCVB-12>AqadtBFbdCgkxr7TniM(+K6WElK*`Ykg5$c-rIeunk^$Rs
zkitSKFQjj~cHijdPY5S6Ao#vIq@|ceMELa
z2!YZHFx1!AF}Y(hf!1INuq_;4;~Fm{)YaCw9m6q((~k^k*APfcfC-|ott=Y*35Jd+
zWIFyXizq}Ng;Gnnc~LNQr%s*vXg^D12*x*A8-=g0H>hSp*w3I;z<9fBRKWP%u6@6-
zUl5F)YwWrVS_QaRv`n6ZB^0jf7td$34!=+1P?&dA;4^j_jqi`Og6nI>^huy(=x!1e
z6()?pQ<9V;P$R>PYK>i9O-#BdO;N-#l&&`zNth3al-!K~5tm41P=Sd;q>P)yO))6y
zV}bADjSL~37%C7r!jOzZV8xI{?Ibf6&of}exawCOCFBc*As=N?M&$h(!rsGdJ`Yv`
zI~XO~JB&ayjctI9R#3`t72m#Wv&_TG`
zE?#RC=QKuyvW!Iy!0U$jsi_YBw4-3?KD^cyam~+PJO~WFm&gCM$LqC+9rK8AK$J7yybniV`V_O3s$Jw(nir>$QBJyL;1m
zy}oN-UE6Y4UrUxLN+Kx+Fo1*@5C{?=0T7wUzyJeGPTkYp70$VTRQF&INP#3k%na+r
z17N1Qx~jUT=ltqB=lgzNQ9Opw29A}*MPUR(1SH^Qu^fdN2+(nGD^EZ96#GwR(4jc3
zi*Mqa53Qj*Xo51qbkLZfT^z>(41xg@VJNbegFs@Uah2mWcon18y{_bYg(udAG(bp@
zo^M~!O|kXW=XrJGR?_iuZeIN`vl~k&tcqd^iJi3xBC$~3waWlT#2_38A*c4bRA~>rbEnJdIOE+5iG|YiSP{5L<(?h=c*go
z`dmJSVT^cHg7>>8rM$vX+_@Q)u`6>ElaF3S_ZbtM%k~lwHb{0K;>GpbXj%OzzxUf;
zqmo{_dQ)WjdpNrH053fKQ=WQt7a}Ym*-39t3fl-^Ym4E*A&%}lP49p}x>-6pyU8jG
z!xUJVetP>lNjd_MIF3W2aTbq!``4IRRLi2JU*P_`t|MrgsI10K50iCM4ECI1pvT1s
z1PF*>27CKR4%i6OKxNWoEsZj~^cis#L=N(q-1(&KeC?Y{+sSv?^v-EkKl)uBSh19B
z`vDG|JxMC%knZZo(vqP}l70#ZsVsK?aXR`_;3heKU_V`h4vH-4-a$|X+LUPRGSD}K
zt-%Z#xRynBIK@D34+F_Gjy1^9!zbuXT3%$Qya7~7K{`1^|3DIiXO8Q0?GZvSFfc$S
zlfg925z*`G>$~Eq@aK}({h$43i67C81GLVU69@tbI*uK|jZWp}>*rHb08=MT=h=UI
zoFBcn4?9{w|FM0z6#>3*Ln&`P|13KX53zXFa>AKj-rl@{zIY=K-*+p!UVedB-x_4m
zeP5uZWPrC{-pYUtm9uW<8xO9gIIK|7YAO=}nrmt)Xr2zI-sfirBRsTb60iO2AJ}#x
zLPYhFiB|K#H-C+i_D%fo7q26WTY2E&M@S4GqrEr4+#BX#Dhsd3kfXlaTA@LCm>c1RzD@vW>RNc95{HGK|9Kd
zI~EYCZbS{8X8ljzV)y%Js9bzIx8JjZ7TL#^SDvJ|ZYj&FUDm#NkSUW2+57GmIX|hEdTRQ6*zoE)qUH5`=eyHb|N0hQ
z?mJFl`7*wBa}7U#em5t(hA3}}F>E^w*%@rtBB)$Sii#OJzJX2e4sxV3#ZWrP7asi<
z_Mu<0?ngf&)3KkEDGS=(=B0{h{Khw~XLiOyW*uB3zY=(L(MqF*M2Ikn`bDgM#Nnl<
zU*gICZx7W|8c-+N=}sEVSh|>_I}R~<&RjZ<9As;UX2z;7F)6;C=htnZxNa87%`b3Z
z&oQz^lD+F+W6r!*TBcP~-IU-F0ID1bI5edNhS2r+cb~AMmiFJ)K(R>)0uADk`DxIC3{PLH-BpQv<)z!ta
zWy=T#gJiSWYkiqMpA!F8WejtkrB?oX0hJZi=)oiGKGlmslD+S}MGtXi&X`73C`3?3
z2t`Ar29m^@=J3En4{_V|bBPznnbJCgrpg4FA&C*4#-!<$6zG1mnojH7B}|%9L@*@D
zx?V>J1t0{r>youJwNvIYtIFjU&%DdDrE6H+P(w{)6AiU>Wc!bjv0QFg^B@o3^95#2
zDj`CgNGOJq8PHcV^-7#e?9_sw2oMl9?I*X<=hX7skNqKEoRZ+!`-d1Th!ZZWpsB8y
z%K93bn`$t!5dy&k)ssqSt*^%vE~JJS>Pu75IGua%dx$SCo!4l8+FAMsZ5n6Yz`gg~&5Bt~m?(dpZVaH5
zqOh=#TW+}ptu<|JZLC_giu(Hc%WIbFU>zsoIZ&eZ^T6q6s2fa5-SVP)pnY-fB)BPDQlv2$s&ShY@+j5
za^~Rs?A`D-(fYYejg^v8LzI=2Q&S9PSCG2;CQgLm%#r<^$PD6!%PAyS1g+;GR2sGf3+Gea4gTjvlD3zT7Dv^KCLonf$Zh?>bwOe!p8&l#JB
z$x|o`2f=W#r!*0Y6q1=anWo+h)27a##O^0a0R>^neGlG6K}jLDuO!qN6#f|Zk*RuLjSl)?$eFbu(zYC$*_qNO3o
zPk;I{WyTa1-@JsD+A54xFHSs!UEj!|Gu>27n@oMg#mHvpx1%h$>o=KZLvg?$ao61h
z4;~?D2dS>9CLWCv4Y^F2-bzgAQ%jO
zilXqb!G}em7xuOs?F~D6+oy?Q$D)CPFLdLCk&HsEF|~~jmoQ^dHM6m?ZG{j9j_uun
zmJ|nQsE15CO=9vqZl4(q}kjS5?GlGN|jM0AnQshYKzdWg?2s5
zEG>hS)fJ+(V&Fs{#ZzW--Svwo4E1x%op;kbYc6Hc0O_G5I#kJm6-{X6GMq|d7FQ8R
zVc8arI5)j`wSE=yHEIDN2^t_}kebO0X_)5XIxdb4@#0F9uu+c2GzBOVUC_+UH{MTS
zO*0MEVTMx*Gg=Ccg>0Qh&GayCHi@0hU=YStidc0$MN(sDY|O$c7TwU`b=Gif9Hmei
zW-hG3lwN^u)>5?2Tgp@kRyKp}C_iEtgN)oX;R(P*YJ5C8i&Se(G#d4~nhy_8nAdnI
ze4!gBj5u!yJOgZHlSx^i6$ptC60MbI7vwl2&(T>MJ7bZzG!`OX77hv*JF7>TmI!aF
zl||+)PjXJ$wq@aJNvw7@k4#>GWjWYRF|+1ZqP0V6*z#Oel*7>Apm&Xc?bfV%sL09=_9_G*f?9WK0QvBs#{w2|9l>YvH{^*bXh(G@0KW1QH;96hu6~h<0
zG0sIrM;+A%=s~joU~o+!lf@bzRa5&dnbqdGquLR1qI2Jg~;c`
zyJ@sgBWBR#{6lh2%AMofw^v&1E*yLW5DJAD=-IN8U5v_rFg;K>^?U-uFnS(_}Ik7A{;!CNr^a$b6w2w+Jr0zr0j^n!b#Q
z!b?4R$$QtljhFHw8>RDF@nJrec|jJJc`XJUc~B
zm?aWKt|#CqZ_a%5H*(S1yP3!fomY^ae*?y*$c^_1WGoR1g(xg6#J0z;F;*s%VfE_O
z+;PVpBiq)kTSrMr36DMY*vPhQHap>_GJT;N!+g9C+W7{}=c6y!>k~2(0p&f|^PZOC
zBRniWyI&Ts@v4iEl8TB7gprGA5eO+jYm|0#qLuffJons@^)d}gyXQ4d6$sBcUf>C6
zE=0|5*Xo?Hv)3muw=K8cqq&s9^Z7R+LWqw&xQsTA9{v2$c2*a@M?N2qe6rJc7CG=<
z$MEnl!^7Sbd%hDx{&n^D_n)`#M8X%kG0c@SlD$&o-Jf$!J*=j&3-6-t}?*?Zt)HJhnbl
zK0a3;U+Bge`Rq%XUq90zg+>U8n;XpXd3-82b9Z&dwXru?o{Ma}?gja5IZwE9!@vCS
zCbc8Nk*iz0)Z<#8pNf4c0U3QAjGQ|caa}acdrp?Tr;VCI6{C05qXaOYlQgQVV$}7>
zQ76AJ;`8zOJmL%8IAioZe!g!jxwQRJ0oNxCv#z8I++&epG)I7j{p9RQ+%Nt%$Ej847`C-
zp}hu(xnv2gy+)y4{j@rNu=~(6T{xJI-(ToVCQElu56NT-p%p@m$O_skyU$lmS=APY=ff`trks6$bek!;WLQ_)+1j32a%)p3+98V^07dVA-du3VXJgOGUhDb@V2EmlhhC}G?fBP)Bo!oaxX0=}w
zCME|hcR)s=#MWeM>{XA07fTOan~oq(qUB0c5`>BbQP9YhR^?PWG$QFWrUA#u5~Hsk
zF(T=a_ZUPSW4MXXqhY8MYEzUlq=6SD0tn1g`r||J|#K2x`qY-@f({?7#9ZwBS4NE37wPzi}uuw=`RMKRtA%c
zu
zQ{TiGfmiNLPJZW>E-l)=1_mry)7iSBiLTnF_EgU-dYd&K)+7aoTf*VT-9@B^yvd&*
z`z0%$zr0UO#>$z@rTim5ceLy(%c)FkEk(_9Od3o~ETYAo3P?0nB>t5^(&D9I6_ToU
z9sTiyBoR~$4UxKEqm{QeT-W_Y6SdK?E&qi`U*2Yf0*67Q4f%MRBd9=@1*dORw@ud=
z3Mte@1RpAfWDa+$CyHsJt*CXELh5ID)-z2KNo|eue3l4_#4nM88jcE+Ff@}H|I>gc
zi-7wf{@W80`mS3&zo$jqksu5*Ycx0LUJQ
zZU63A4xkyge^~EbXoos`;ku5FC0uj=s98u2=WV*vd4JjU^}bbl&*1Ite?5I7uLfQq
z>&j8;=$YXds-M(o0F6W8bgUkq*z1&M+LJo8IFj+?cC1BdFvJjIQ=459iw5c$bDR&%
z&+0~F1HtcSK1MF?6Z4#t-KjQaa&{GuzY}|I^WX%~nX~`JbMB%flfN{_bJ20fPLw>;
z>`j|Cd*f}o;Y@~js_gfK16|3k9W&!3CIP?G_oA}JFu^R;rYQ13X8jX6n5Nt^4wYDYD}0S?|=g-7L`_{OdNBy5EB)&
zmxk}49q}$m^Q8`@a@7(RRri7Y1OcVW9UslfDAO?-h~oH`c`NwT1=gzCoFH^*o;lBO
z5u4A+l_&6pxJN<*u6ii0^Q|8llKV_A@g7b`3-DCw7_-7l!y-dPfh4hTB}=yph!o?F
zhpkFm_^GqdQ$6{SSntKt{4h7t_n4XPtvoXyav7))#!18{geaba+wxPMQ`2=XSo
zKcc0NeEvFn*eyx=_tRA>gs~@-G?qu4pA)tFa@021@Ha)+U)b#~9n;9kP~hP!tR{MT
z?VfpB>n0f&bY$1&1$^5bY>S(mNeFXcgz@oZDGE!NM2n?K`s|;x@gl^JhUI>DhXF&V
zNU%1ZKv+-+B(f?6W`Oa-~KHC4r{`%$QJ6TYmrBc*^IOwmrfT@BwbZI#I<<8^_7&
zs+ps}{Dx#TN+&njFYquRO4Q{`n+;|GCV$3N^dzE2voCqMM2?YEAXr`OXIH8zubHrSG$RmpO4~M$A#+WTpOx==!QU+Fnjpz;z}4hhVTla;0%`d@Z;G+{E$A!D89+W~
z=MOgb^@zdEa>KcW(9tBCd4^MU=zNFaUJa=As<&RPZL*5>#@4P^46Cj^N*QE$pOYg?
zmU9q`Z78wnfvr|#FL2Yx)!xB>d?pl4NJECz1h1t?m3D4CU1&hC(G`U28IY)9A^3WG
z)tu8p#-QDmu>dY=eEP*1RBTk*Py}b81G;6u@g8J}x#44v@qj{rg8UAuJyNaZ+r>3H
zs>Sq%Mcnp(6f#dI@L2#s#uin##MGiw&)i8)e4{-qH?Vh;|DloxkV%xR#CWSP3D#(y
zppTvv@Fj%~Atc~iR$RoC82=F1vR*
zQPJJ~hD}PLW3ip}NtD3C_`%I=sx2z;p`5#6KO+8S?*UBcBQK}TT9X6S8z41N|1@wy
z+%&@JFRjGm<`-5Q=MY2h`|{nQiJ$L@No5-zfbSJ6q#_s_WJn
z75>=uX@7Z9`LciHL}>JS-CE&)Cb{V76K5?+kI6Us9IJ|Kk#1TXd+b!JU-{=`TYXWnAe)Q?`7rlfz43YQW!orx-Q1%X0_N)
z_dXheDnl{}?Td8EP(7Pj_s=R(k!3M9T^4uCC#1kg%ji|)>P$7?_TSvbpGAM2|5{$p
z2+N41KTf78m|HrJapABo8#qR0BQAvxRia>IMg683lj^xKef1z*;N7df;(2i(BfR#Q
zx_Q_#MD%`dWVi<_XrH41PdBFEVZR&+r|$Zo)jbq@Q#ESom)L;?M+)|!$YnWoZDC+w
zq^f(bv5did4r3Oc!ZN!zOYL3cpkho#(a%QSmqd#UHN6Px&bwK4m(3Omq2qWN>~&EE
z!IeW5)$K1#4&63HFNS*4QFai~4sCgvu@>@%ZuHz!b>=tiS|eC#%6e$~6J5Kv)QlI3
z7rNaO@shQ9@}E>q;i5b~H>p!4T5Xz~yp$jDTnq6lxvK@fF^oY{jjD5pg!jb^ReZ|>
zpFDyCpId7Sin>B2yh)|G-jm3!iq~#tLKcP*N6ZOSYh&H?0jOj2wlWf5SQN}Zsnd;$
z48hm{uwYg=aCm+v-(9q@TKx&B&iNBu6aCZHS-bU|Q5TER`0pw2MDDuS!*(mLOH2Gj
zLNt;@hVPqP*JEh}(7P90y_^zbh&&V_nwE~CCjm{`#%`QSS2*>B_>nBST-~(ehx`zg
zAxD&N*DH(b-{7YFQwsKkvc}ekydY8LXIFbWJu?{v4<1=9PwI+W7MX1eM?S26+|igP
zZopqKeBS>|LP55@JUQ-M$fue?swlFkk0wYWxTudsjJHkm`==i%xl$737=vgN9ow2+
zw=?3^IsBPkDyUap7-oL{zo;;xB!asiqq_@$z|51{jyN#!9qjw3S*U1f4ZDL3q+MOv
zg&%uSWGK);&n|T|0TSHEvtzxOtPTN}_yu-zI+J$~0+BPwEuUN0XnqlZRnR#;S&
z+0)Vt_HvmTpgAWhVjBW)kpJpdT3aKlCc^D%1DNf%%52zqI~)-|&V=7$LNdV-9^wI#
z?>d0Pi7Dc1E8!C<48`rjO)$6Cj9FDJ7c~)4D5n{w3x`56NAGq`ZH0{>a`z6d@Zk)G_-6R39dV-8jAS!CtX?w
zG^T#{4i&PrD!4Y!&|>pPkFJHP;U5ukcV6gi$T7L-s8F(haBVsNo_697&g@G3w*4UH
z`nHnf^1xTNX+hrvV6-I*?I#oQ?KX63IUGkM6cksmBgSqsM-kjhl4juy?%9?wY3cp6
zpAH`;1}=u0!|N&)lTVGXGc5dG-v!oy+B8#4E&hzc0l?VRbDhbiEV>_6KSpmoTzAa*XDj8#
z`dHb-
z7Cb4NI(&ao8WBg3PEt!j)6b0H;I-!%vt1g;XSt%06()#^qw~LH#gHjj)L;k3L`GlB
z`-48rrQ!DBej88an=Kt&*36%PtU?Cx2|z}$db0RNI)7`1N&6dV9^8*=c5Y5gL1EGY
zG!HGGY{wOCp(8>ptJp3*Cx1H8dus(g%$;llS#EuCd-Bb
zB#LJf?K9=W!H|@waoQnW+@Y0b+qXyu0ruy9zlu6(Fl_v!J>Bp9=xoeTl$G;C7+Qd)cK5`7sC
z |