From a12073b095e9d86540cf5c149a51d2ec90d139d8 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Tue, 7 Mar 2017 17:25:02 -0800 Subject: [PATCH 01/32] waas-DO added RS2 policies without stories --- windows/update/waas-delivery-optimization.md | 43 +++++++++++++++++++- 1 file changed, 41 insertions(+), 2 deletions(-) diff --git a/windows/update/waas-delivery-optimization.md b/windows/update/waas-delivery-optimization.md index 1522b12876..8b9c817f46 100644 --- a/windows/update/waas-delivery-optimization.md +++ b/windows/update/waas-delivery-optimization.md @@ -41,20 +41,30 @@ Several Delivery Optimization features are configurable: | --- | --- | | [Download mode](#download-mode) | DODownloadMode | | [Group ID](#group-id) | DOGroupID | +| [Minimum RAM (inclusive) allowed to use Peer Caching](#minimum-ram-allowed-to-use-peer-caching) | DOMinRAMAllowedToPeer | +| [Minimum disk size allowed to use Peer Caching](#minimum-disk-size-allowed-to-use-peer-caching) | DOMinDiskSizeAllowedToPeer | | [Max Cache Age](#max-cache-age) | DOMaxCacheAge | | [Max Cache Size](#max-cache-size) | DOMaxCacheSize | | [Absolute Max Cache Size](#absolute-max-cache-size) | DOAbsoluteMaxCacheSize | | [Modify Cache Drive](#modify-cache-drive) | DOModifyCacheDrive | +| [Minimum Peer Caching Content File Size](#minimum-peer-caching-content-file-size) | DOMinFileSizeToCache | | [Maximum Download Bandwidth](#maximum-download-bandwidth) | DOMaxDownloadBandwidth | | [Percentage of Maximum Download Bandwidth](#percentage-of-maximum-download-bandwidth) | DOPercentageMaxDownloadBandwidth | | [Max Upload Bandwidth](#max-upload-bandwidth) | DOMaxUploadBandwidth | | [Monthly Upload Data Cap](#monthly-upload-data-cap) | DOMonthlyUploadDataCap | | [Minimum Background QoS](#minimum-background-qos) | DOMinBackgroundQoS | +| [Enable Peer Caching while the device connects via VPN](#enable-peer-caching-while-the-device-connects-via-vpn) | DOAllowVPNPeerCaching | +| [Allow uploads while the device is on battery while under set Battery level](#allow-uploads-while-the-device-is-on-battery-while-under-set-battery-level) | DOMinBatteryPercentageAllowedToUpload | When configuring Delivery Optimization on Windows 10 devices, the first and most important thing to configure, would be [Download mode](#download-mode). Download mode dictates how Delivery Optimization downloads Windows updates. While every other feature setting is optional, they offer enhanced control of the Delivery Optimization behavior. +>[!TIP] +>TODO: DOMinBatteryPercentageAllowedToUpload, DOAllowVPNPeerCaching, DOMinFileSizeToCache, DOMinRAMAllowedToPeer, DOMinDiskSizeAllowedToPeer +> +>Add stories. + [Group ID](#group-id), combined with Group [Download mode](#download-mode), enables administrators to create custom device groups that will share content between devices in the group. Delivery Optimization uses locally cached updates. In cases where devices have ample local storage and you would like to cache more content, or if you have limited storage and would like to cache less, use the settings below to adjust the Delivery Optimization cache to suit your scenario: @@ -99,8 +109,23 @@ Download mode dictates which download sources clients are allowed to use when do By default, peer sharing on clients using the group download mode is limited to the same domain in Windows 10, version 1511, and the same domain and AD DS site in Windows 10, version 1607. By using the Group ID setting, you can optionally create a custom group that contains devices that should participate in Delivery Optimization but do not fall within those domain or AD DS site boundaries, including devices in another domain. Using Group ID, you can further restrict the default group (for example create a sub-group representing an office building), or extend the group beyond the domain, allowing devices in multiple domains in your organization to peer. This setting requires the custom group to be specified as a GUID on each device that participates in the custom group. >[!NOTE] +>To generate a GUID using Powershell, use [```[guid]::NewGuid()```](https://blogs.technet.microsoft.com/heyscriptingguy/2013/07/25/powertip-create-a-new-guid-by-using-powershell/) +> >This configuration is optional and not required for most implementations of Delivery Optimization. - + + +### Minimum RAM (inclusive) allowed to use Peer Caching + +This setting specifies the minimum RAM size in GB required to use Peer Caching. The value 0 means not limited, which means the cloud service set default value will be used. For example if the minimum set is 1 GB, then devices with 1 GB or higher available RAM will be allowed to use Peer caching. The recommended values are 1 to 4 GB. + +### Minimum disk size allowed to use Peer Caching + +This setting specifies the required minimum disk size (capacity in GB) for the device to use Peer Caching. The value 0 means not limited, which means the cloud service set default value will be used. The recommended values are 64 to 256 GB. + +>[!NOTE] +>If the [Modify Cache Drive](#modify-cache-drive) policy is set, the disk size check will apply to the new working directory specified by this policy. + + ### Max Cache Age In environments configured for Delivery Optimization, you may want to set an expiration on cached updates and Windows application installation files. If so, this setting defines the maximum number of seconds each file can be held in the Delivery Optimization cache on each Windows 10 client computer. The default Max Cache Age value is 259,200 seconds (3 days). Alternatively, organizations may choose to set this value to “0” which means “unlimited” to avoid peers re-downloading content. When “Unlimited” value is set, Delivery Optimization will hold the files in the cache longer and will clean up the cache as needed (for example when the cache size exceeded the maximum space allowed). @@ -113,6 +138,10 @@ This setting limits the maximum amount of space the Delivery Optimization cache This setting specifies the maximum number of gigabytes the Delivery Optimization cache can use. This is different from the **DOMaxCacheSize** setting, which is a percentage of available disk space. Also, if you configure this policy, it will override the **DOMaxCacheSize** setting. The default value for this setting is 10 GB. +### Minimum Peer Caching Content File Size + +This setting specifies the minimum content file size in MB enabled to use Peer Caching. The value 0 means "unlimited" which means the cloud service set default value will be used. The recommended values are from 1 to 100000 MB. + ### Maximum Download Bandwidth This setting specifies the maximum download bandwidth that can be used across all concurrent Delivery Optimization downloads in kilobytes per second (KB/s). A default value of 0 means that Delivery Optimization will dynamically adjust and optimize the maximum bandwidth used. @@ -136,7 +165,17 @@ This setting allows for an alternate Delivery Optimization cache location on the ### Monthly Upload Data Cap This setting specifies the total amount of data in gigabytes that a Delivery Optimization client can upload to Internet peers per month. A value of 0 means that an unlimited amount of data can be uploaded. The default value for this setting is 20 GB. - + +### Enable Peer Caching while the device connects via VPN + +This setting determines whether a device will be allowed to participate in Peer Caching while connected to VPN. Specify "true" to allow the device to participate in Peer Caching while connected via VPN to the domain network. This means the device can download from or upload to other domain network devices, either on VPN or on the corporate domain network. + +### Allow uploads while the device is on battery while under set Battery level + +This setting specifies battery levels at which a device will be allowed to upload data. Specify any value between 1 and 100 (in percentage) to allow the device to upload data to LAN and Group peers while on DC power (Battery). Uploads will automatically pause when the battery level drops below the set minimum battery level. The recommended value to set if you allow uploads on battery is 40 (for 40%). +The device can download from peers while on battery regardless of this policy. +The value 0 means not limited, which means the cloud service set default value will be used. + ## Set “preferred” cache devices for Delivery Optimization From 9b522094fa5f3b039614250d35ca4d1d0e9de9a9 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 8 Mar 2017 17:50:49 -0800 Subject: [PATCH 02/32] waas-DO added stories --- windows/update/waas-delivery-optimization.md | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/windows/update/waas-delivery-optimization.md b/windows/update/waas-delivery-optimization.md index 8b9c817f46..7a3e27122c 100644 --- a/windows/update/waas-delivery-optimization.md +++ b/windows/update/waas-delivery-optimization.md @@ -60,11 +60,6 @@ When configuring Delivery Optimization on Windows 10 devices, the first and most While every other feature setting is optional, they offer enhanced control of the Delivery Optimization behavior. ->[!TIP] ->TODO: DOMinBatteryPercentageAllowedToUpload, DOAllowVPNPeerCaching, DOMinFileSizeToCache, DOMinRAMAllowedToPeer, DOMinDiskSizeAllowedToPeer -> ->Add stories. - [Group ID](#group-id), combined with Group [Download mode](#download-mode), enables administrators to create custom device groups that will share content between devices in the group. Delivery Optimization uses locally cached updates. In cases where devices have ample local storage and you would like to cache more content, or if you have limited storage and would like to cache less, use the settings below to adjust the Delivery Optimization cache to suit your scenario: @@ -75,12 +70,20 @@ Delivery Optimization uses locally cached updates. In cases where devices have a >[!NOTE] >It is possible to configure preferred cache devices. For more information, see [Set “preferred” cache devices for Delivery Optimization](#set-preferred-cache-devices). +All cached files have to be above a set minimum size. This size is automatically set by the Delivery Optimization cloud services. Administrators may choose to change it, which will result in increased performance, when local storage is sufficient and the network isn't strained or congested. [Minimum Peer Caching Content File Size](#minimum-peer-caching-content-file-size) determines the minimum size of files to be cached. + There are additional options available to robustly control the impact Delivery Optimization has on your network: - [Maximum Download Bandwidth](#maximum-download-bandwidth) and [Percentage of Maximum Download Bandwidth](#percentage-of-maximum-download-bandwidth) controls the download bandwidth used by Delivery Optimization. - [Max Upload Bandwidth](#max-upload-bandwidth) controls the Delivery Optimization upload bandwidth usage. - [Monthly Upload Data Cap](#monthly-upload-data-cap) controls the amount of data a client can upload to peers per month. - [Minimum Background QoS](#minimum-background-qos) lets administrators guarantee a minimum download speed for Windows updates. This is achieved by adjusting the amount of data downloaded directly from Windows Update or WSUS servers, rather than other peers in the network. +Various controls allow administrators to further customize scenarios where Delivery Optimization will be used: +- [Minimum RAM (inclusive) allowed to use Peer Caching](#minimum-ram-allowed-to-use-peer-caching) sets the minimum RAM required for peer caching to be enabled. +- [Minimum disk size allowed to use Peer Caching](#minimum-disk-size-allowed-to-use-peer-caching) sets the minimum disk size required for peer caching to be enabled. +- [Enable Peer Caching while the device connects via VPN](#enable-peer-caching-while-the-device-connects-via-vpn) allows clients connected through VPN to use peer caching. +- [Allow uploads while the device is on battery while under set Battery level](#allow-uploads-while-the-device-is-on-battery-while-under-set-battery-level) controls the minimum battery level required for uploads to occur. + ### How Microsoft uses Delivery Optimization In Microsoft, to help ensure that ongoing deployments weren’t affecting our network and taking away bandwidth for other services, Microsoft IT used a couple of different bandwidth management strategies. Delivery Optimization, peer-to-peer caching enabled through Group Policy, was piloted and then deployed to all managed devices using Group Policy. Based on recommendations from the Delivery Optimization team, we used the "group" configuration to limit sharing of content to only the devices that are members of the same Active Directory domain. The content is cached for 24 hours. More than 76 percent of content came from peer devices versus the Internet. @@ -136,7 +139,7 @@ This setting limits the maximum amount of space the Delivery Optimization cache ### Absolute Max Cache Size -This setting specifies the maximum number of gigabytes the Delivery Optimization cache can use. This is different from the **DOMaxCacheSize** setting, which is a percentage of available disk space. Also, if you configure this policy, it will override the **DOMaxCacheSize** setting. The default value for this setting is 10 GB. +This setting specifies the maximum number of gigabytes the Delivery Optimization cache can use. This is different from the [**Max Cache Size**](#max-cache-size) setting, which is a percentage of available disk space. Also, if you configure this policy, it will override the [**Max Cache Size**](#max-cache-size) setting. The default value for this setting is 10 GB. ### Minimum Peer Caching Content File Size From f30770d79c8003018f785a9302a79cbfd15c7ed7 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Fri, 10 Mar 2017 13:35:26 -0800 Subject: [PATCH 03/32] fixed a typo in waas-optimize-delivery --- windows/update/waas-optimize-windows-10-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/update/waas-optimize-windows-10-updates.md b/windows/update/waas-optimize-windows-10-updates.md index d6ee795755..9be6b8435d 100644 --- a/windows/update/waas-optimize-windows-10-updates.md +++ b/windows/update/waas-optimize-windows-10-updates.md @@ -61,7 +61,7 @@ For OS updates that support Express, there are two versions of the file payload 1. **Full-file version** - essentially replacing the local versions of the update binaries. 2. **Express version** - containing the deltas needed to patch the existing binaries on the device. -Both the full-file version and the Express version are referenced in the udpate's metadata, which has been downloaded to the client as part of the scan phase. +Both the full-file version and the Express version are referenced in the update's metadata, which has been downloaded to the client as part of the scan phase. **Express download works as follows:** From 753af01b31e73ab14b71a3be11d40b7f7a41511b Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Thu, 16 Mar 2017 18:05:09 -0700 Subject: [PATCH 04/32] waas-configure-wufb - added RS2 without pause --- .../images/waas-wufb-settings-branch.jpg | Bin 0 -> 12093 bytes .../images/waas-wufb-settings-defer.jpg | Bin 0 -> 11470 bytes windows/update/waas-configure-wufb.md | 48 ++++++++++-------- 3 files changed, 28 insertions(+), 20 deletions(-) create mode 100644 windows/update/images/waas-wufb-settings-branch.jpg create mode 100644 windows/update/images/waas-wufb-settings-defer.jpg diff --git a/windows/update/images/waas-wufb-settings-branch.jpg b/windows/update/images/waas-wufb-settings-branch.jpg new file mode 100644 index 0000000000000000000000000000000000000000..7dfb770d4ac359cc48117d7365054e7765f96900 GIT binary patch literal 12093 zcmdsdcT`l*mTr@C&KU`UAW@Ql1d${n0+MZ7a?Yudh9*eP89{;qA~`lWXF(+A*o`Qe zZUk(kX@=i>v*ymdcjnD|Z_WGX)j4~uv(~AqwZGa`yK3*RZkBGg0Mt)4v^4-YI5>dU zw-4ZE6`%&d!^QpUy)F2+F99(D0X{wfDG?DNF*zwYIT9u5xxmj(xq z2IpoFzy$!{5Zr3}m%{&AaBy#RBqSmxAtk%50HX%r;^5)o;^Y0L^=<9o+y4N38Uoro z5~_rB`c_0dUi6Y-sUL`WAJ_LW7)&Gi9$0&alaMkpF|)Ap-xUzNCnO~;BP;h%UhRpx zhNhPGQ^S`=#wMm_<~Fu=_709t&OW|={sG{?HxX|mqoQMCVIGPAOC-sOHQE-C#~ z_PM;Gp|J_p+|t_C-ajxnG(0l;Wo%}4Zhm2LX?X>X*#5rr+4;q9^yQzw zaNz*({wJ(|L-r52Xl`-g;^X7t6a9q?2RGnW@M!P}?nn^Qs_GM2dC~Dmh7r?0PW@2d zN5cES0LftOJx$8UCk5w6{RQoRAp73~7XE*Q?B9U>4c7{Q91rK#cz84bWx$m(mgMpV zaMuA@jP1j_0cdmulYk!G0Q!`bzkkKjLzlRryNk6Sgq=5svMVKuF@k@%KgJ2uz5ZCf z$2t@pBef*WA^K<4VD^{^B5UkjRj<`HY&4gm$&vV~2scjfUqz^NxYow$v$?5WkO#&2 zl8=WAUq!=LYTOS%LmGlTo=S#f20p~pI)B)vyCi_vG=>o61m`- z)10bTdgx-4DF{*VUhdtpyOF^ND7DiDhkU0T?XsqixEWtU0e&8y5Z!dXo-=H#XW0iH zJ#hVI#Bv%UjIVU3am~amH_*N_^_`Y|nu+%eBmPgXM=mw!Oyo~>bnVuJ+5juY;7ge$ zfs$S4r+Zte%!)qh+&g@lMs`+HpKEmbxX3U;@O=MoZXm>uGDI-rBDd4xn@8^ro{2xc zZ2U-QE%y*dn>TlG>9X>|1YN(K90h9B>tnl`pn9T&Gv{92#Dt3g9m!1$4UBM10Rn>* z`*D(MX7ksh>ozd%=sX06@-U|m(jyY1?6Y-30kT{sb2B)$o%4g%ckqw*>O)#J(BEHD zb$GqXFIxDPeI>fL0_r`%#Yh7~PIdH1of+ld%7;bbw@|ow{j6v>!$~IMs1UKZuxSs( z=#}k)sHF=j!Lmb4h8xb^T(IVFy$!v>rt4gPAd*Dey4Qgqr)F&mpBm$fav0L1RWHE^ z&zyNQ_I+472>806=?9g1)QN_MNOc6W z?z6dQ)rz=Rza|&?tuBbr8W1r3+dtC4K=O`+mA!;q)f<7fgW(8F0YL{=uE_9%qCkm&A|#~YU!iF_UyQ(YlfOn zexb|#_5GrshE2Z@AHgJ2Uf6oO%)9s4J|YbQ#e0ragH#}Iu&(Z(+ons_?AAR_F0!01 zvG?DY=oW`eu2@D^LBzY8<{Z?KB9Ze6)Wq3tn}xI*$3M}}U$k&6O%de+Ll(`;B9%DN zNgi}gtj{bWWQi9?9zKv|&ClONLI5MViuNaY?dorCR2dhm5ydmQp3G`(0~{ z8!STfnc`hxY)0zYPrKrXtrA93j25X+*{ve#q&)@;anC2YAP*KG0*D&`7tqDyv!09O zrurv~mFxFvl1~|Io_EBNX9?6Y7ZF34P!_{kHvraj_zfV*w~KNEsHc`~IdklLZ^tv1 zetJlXE-=(CV}gaUi16nQbFJ8Qt#22vIU0q0GYLfU{~k<~t~$?h!|j)|OKT>vKRx&gdETev|{dFtq>#b5jz*&l(svDVaq?&%ZwpB}HP5&|T!(`DdzcyLdQ zk`P#J_yj5?tHciLZcdtbL7(%g$||0-s5VO?*&Kkp0nlN5XRt(j-6Tk{w~&XW5V^eD z?L`_?kFJyQ|MQYe&>)ecQoGwE^&4*Y6dvt5&SK;BCs-{Fgku_`Z?AX{-f@-q{HIPw zCyF0azjsw+50aUGT-8D*IyI_fz!3ZB;Tb3vL{y__g{Wp5>gGa8FGgU@K3R-gx4&ha zURU>W;uY?sQxl-BHkCaU#R0vvBg4!;L zVDOwin1M%LMw`xJECdoF^Yzt z_n_2%9+U%!BY9yi>Xnrhl^cKy7%pCgdO+U0Lpj^R9V!tq0eHO&ZDLC5bVGPV$x}v_ z?8>Br8~b{Y8J3%%cO^+*1|E|;u{ONJ`K873T0>IL<_jofExjei!~JYmiY%FO=^(LK zCjQ5(?l#|8uZuuY8`6Ro19oq1)AY6Pm&ILx@UW8$N+c-daM)+R_`GsO2{;I?{xM1` z(-{2w$%YTjbdRqbySH;o6c+D*lK@39jqFK2r{LSD@l)YK?901>zmY4G=0O+8BK=U zG3X>I!8}JkhrxCI@A1$0x!A*6soS)13lb8P4)DUMtO)|kqM;7KHdtCJicRn$LZg0r zoQmQV*@VFJ&W7e@_12e;+XeoyYI;1v%`={|97}gYA6ked^)M=$Z_yM9p^Ij$qe@wRxQl-(3=Jm1D77`cNb=m9TQZz!j0B3zqqFA3NaRYG&2Icc_ z0I~cTeA-}+>LVMisAq4V?7YvfkO&>z3S8{(iRk7*UH={lvVgL?giufWfw=bl7cXR* zQ|Wx%UpEsJWvQ=|$v56h^+_QV*Kk=p=USe;5*}O$fo*XyY@i7po8sL_Pd648*glIM z9{mn}@0!7pHq6nR;tpd(v5eWr+(gnHc_3cg}BwK2g=66?k3GlBz^Gx zM$Jv-xjH;m*}|R0hZ9%1O|`-_vPrK*k0yJCgdN9!+$TXXQc>)CuWEbommZY%zI1$N z#=ffc(AFa-oXDn7d-?`olhY}7>u^Xc97AO1s?Q6__uD^}I#q(qRKa#krw_iS4R5=M zkK(FEjS93el=L(NS1D7RQ;`oLu3zl?fXlG7SHL%5tF)jXxX>7h?gtL<5{6!8YeE1$ z&KHc{b+vRd5qR7bS(-TV)(r-wFkRKHP-@|ybNUR_VajzoVwARya90kz3~zN=apsoDDUv*3K%K!21|^09-@5P(VQ}Xcc5QMk@v`61JAB_0e!hP} zD4W>hR7eL=z8$r&?M1`>KcEiJSudB*#yYeP+C#F%swUJmg%~#@9nx83`fmW=!WXaa z2GZ00z@FXnW+RP=NH9?kzIp=Q?45x;pYGI!1C@a&<;W%lDD~bH*y@MGKI1Q``a?TU zAg651@$k|3C<~%R^afy;FMkZw{?-HjbcG=3NnWKc8<)CAN@j)aJH=UF{2@Jkut_M; zgN{UiSe=vvJE#06K&s7Ch%7S4QpSR3r_UM%J=JLKgp8uZA35UnD~Us_(a{L1<$ysY zfhk3!t+q1Vr~Pt%AksCU%qS;#K`V!mg1&G0<@eLbZX-UM=@3zjHL9n7T|g`9ry)AP zrb0TQ#l+`;sfD`qYut#d@xnp7Zi$WL1L~6N+1$F#hRm$;t<4yD`woOfm!<`((&7uW z%6wVX@lM(%mjk#+wN5eCZ#~|DK z9lnk$MxkAvC+J>0=US|gY9EGPt8L572$yaB&i;Z>H0(+TU54<_+j0}@E8v)Qg8&g^ zItN#a3#Bh+_1)m1t?rJ%-y;! zvoykU_I|IeJpi5|{5m0V>EWu2$1VErfYI%0baCt8#a>ETT9+AY4x9_v0&p>&{wn2ZG^pF>C-fXh4d% zOgOzK0pN|>U%~2sAzc4K;Qq4*E$|cbuCPD(3ZLql_56(A%>vzUZZ8Fm;_P5+5NV*;0CZ&Sa@m=B~?D8Rz7oCoXUiG zAjao&rm^(FG?U<~;R`NGh(K`dzP93&h3k_Rn98qLy1Z3hYOHBEfqcH|_+eQr+&-_k zVwEJo#qg7;okfh@*7XC88O)Vjnhp@M)@13||D@m3ErpjmMTVxt5EcdRb8kV6ggKz& zw}QHOzG0l+q)oa7+kjD*u?+K_dy4$CyxxJSf_C_{C83(;h)y6J8Uvz-h)U%LsUtVy zFM`#ccN)Xy?K>?B@9sae<&*9VF(qSJ=~2=l&s-H0vGFY9%%ZP+v`R%09f5FY%0aQLnek7Lh(qObZ3!eQN>qYXo6LOICHLp8u#1aT=l5*r z9xr;Yy)t9NBh!>pdHRJua(Y|T)GO2Fc3LPqT-^YoLwIIEW-~`M!%^8@dw+gn`2HlW z%8v~~+98{5&GwIF5A9hj0Ysq`wd^7DoJ`2X$z&MzkdO#sv;h`*6=aS#q-n@O%O+8X>)Ugq~cb^|E6D5|g$0^g_037n6!<=#p z5N#XjsyIJgftOA7K;r}5pmaAEKR2OAL#?!r{nw&2b=QXR$h}lJVV@z-W}tA>{Q{Zk zPw}s2?;pC0*__%g@t9&5rZo(Kye}JaD_+mi%;fZm2N6u$edf`Gamog{(8Cb z!|TWB^PT&He(PbD0o52>)MOGynW4MI4L%`yqKiDQjXs1obY_9wLpxx(fwm%~%!_Un z6&iS_BO)rCLsTPFc)Fh*7t{u+`M=dwEZpNW5XkF#_kwl|H%qWj?e%-F_i^b@(DPeR zT5x%%>?d&6*l%+)f#}2fdcH4Y47uVJ|=5OU;xJndTCoO@5y+C|QAye*Ja!tAa+Sqg3ft((r(qXSt>j%lfuj)o=|DC2?o z{KQ040*70z%^a^9%hCfurqu83RGHm2VJVamgFP^!aNi(>plVse<^{LmT9?udUHXL7 z)v6h(5bw6f{4YjTmb7eorFSivP~Rf9^{Alkj=AsUqcT{ZxWt^wNVyuTzg7_%dl_DW zD`BZiG@#7xV#$CsiH0RU81QG@pr1dh%&ECAW|!)52j=l^P#5>|{^N4f-*Wh=JqZPq zeOy%MTog+f)o_H4wcoY#Fa5?-V2svI6d%rMF-05mdxsit9~GM96)|`R*k2@2(acUJ zRjQg?*0Zwx>sZ**2u$0LR8_Q1zd+Yj7ZuRgjOCg2l|@m!n}hKuR?{#y=>8Dh?Mq6079tek0Y8Qc=nm71*rnaHt7U}m*WGY)j7tn%x zQB(z_^KOP0eyFPUpV5bhYR9sWn|zDV^GOTUKYx62Ayn!-}YN8!a} z2~$L$z|j|R$nL!DV5ptZWs04g`ML&rk~(^w9Ipt>S4H=FNxU0W;%cAq6M}`#S{sO zb*Q3d2MVYcPGIl)VEgxfr!5SmO`e=h~P*eOMrIC7`#HhW& zeq?>q!xyG^6k_^@iK|AjkHCa(vM=W72Ad}xY$Povgi4}CcfyH>*T!3mw?1w87d}0` z7P#=4I}Eu41Uj1oYh$Ebs;wXSc?h7Mml8L(nl6(1?o4zJ*(SK9WL}!uX@l~Vb%vrm+bl=^rNP1A;44`sCl?}0p zk)v^Ehq9;>?fZ{iq#|sixc9uIyehw!E0W;7PFg|~&nZ0wlW8wV>x%vwVwCya{>ob? zfUVJ5g4vLJJ+U-Je61+0^E)}~AWCeYkO5q{RTB&E(lc(HhZwp4ac%jN5oZv12WSz>V@PrJ`reN< zItL=4;b!yiOtbvm)q!Q|eoh|F7vfJ^JaME%d2D1J*aH}VVlM@|j;}rluG7xzx90-Z+ujC!L zi|6M1nnfF*CPk8%r?Ys3ix6W}1s)jAUU8hUZJ4*8fdvV4wWUBymojiy9N*do8sJan zFlP!J%Lq53UEs>p=IF*DOJS5qOIrLd=qWd&4-*=D70~@k&U!R z{>ZP^ru4oKP*_-~}F52?OIZng4BOi4gr#i^SR2Q|)8{8AI&IB@7 zB^dKug4R!78wDJ#sp9b&StPFz!PhH6u@E!s9;*)QWb13w3ZT2+sU#u!yTswXtkJ#E zTJZ%Xz`@2{bbN)&pM^-9&wE(@^yjT}RVG7!GONrXS-YtX#8&EY=U%Ms?-(VS>mK6U z6wP9ZTo~JBqun^pX8u5v+!gg?IO?Vp7b#mWA7+pkMhvT7e#WbtzFqZHLrlUBAJE0R zb1)Luoz8HE%uJvSizmowK#VP&V9wjP@&+)V3TD&O<)LsGT+vM`hdQ|gTm%J07x3#O z#JtzC0j)nEB;&2XOA1B3lI}UYu35POSO*&Hd9f)of|G%T zcrLG-34N5|c@T|FDva01rawBM152D)h?vWr%!|_bPLrpHBjcmVzPqY`0+JPRNt`1C z$jjUO+XE0ubBD8{%EV5*;`_@y*~_5%Chf)_%lWHXa((4~C$R;L$hHNI+L~pjo}~*U z(3#6A-C_CTyX89plj`=GFM?k#CWE0DZ|0;5<4kgsia)I$nBT|pqz`)T(}IijV^+Ry zdx8$9u?fe?DSV@2G?}A6gSG{F%|e90ztuYfMKq(_n=a3KXji^|1oT9V*>J2iyzT zxHEg~r*QNJv7pUj-`X0+o%mrbblcXE(trECed{RH&VzdI;*W0tql^-7bDmbZW=~!6 zka<=jz0*Z`>0^op1VSdsyP7>t{DoDWE+A+Hx$yarS*f}qe3HbIwma!QzarI|=zixD zNq-UR1)4AFEr?XJ>Aro1{`Cwc(!I>J)7WgmU@Kq`nP_ehWDh6ZX_Gtb=EX>Nqk0k* zMLw(han$5nIaHXhH($_EHTBjPYecB4S5KrGHF?GzmL(i^P)`V$^-A3 zMkafy9E_aMH)N9Mg(>1qSnqE(O@{h*BolpfP6MeU5;fc;zq#lHa#-ieeGi~baDT?! z{5o;jkI!wKN(k9=_;XvC9Ie%7<6u{YE`C1CJzaesgRv=JXFHHk)b*m*k(Zl&8;hG_ zO)DwErnQ=0ytNq`B7@A3*Z5doy5`JisnCX!y@34LSs%S(|KpowFVm4Lo2C6?%;LWI zmEOHp0>E#%5I(RqV)9u>vPDyno8F|1cjb=5sZlPlyW{ag<>TC+Y!?Y=cSQw{S}I1f z?o=;cO@cKS-l`6L;5+d)Thje!5ke0ZIwv*JEZeJUa5q}3qEBJ)tc9$NYcYG5yupqr z-_RyYEz`KbF|MDGt<MR)_+>k$mrT&olYH$tvs^N3{>&Z7#9Kk{xWyh|9EH`pvv<~-e*MLYZz`=)I3&Pzrd zJ#sA^DvF39dobvBFDs~pg9x45yRN$<0ub>EK^+zk`6MeYhm7dQ=miOKgc{w*^%(kh zK?E4Tt!e{h>b)#1$Gl&n`J`clQGI(y7Fp0e53zz@zLY#ZLU&SAGb&hQD(#-Dd$n&K zPN3wk;G5AHZfRYaAO#9MojN@Mi_UsjQ%6g7@Ykpf<{Q9FmI}4N`=w-$wTBM@7hO~r z8A#3+uDBBUk}MjqhrYbs_J&0}QT7hm4k~+XqDk;FmMGzMexQ;ZnpQ!V@h6s6$0Xj& zJ4?wlz=_z4Wh|0k{E+?_kKEJKWvtTy$u+bxztJgDJbNs{G*pgARCezOEYtC=b*~$D zKeZ@ITTcIBo66GHOQ3T1W8Ri>+*v*R5_6|yZ-Z(9k*j^|m(!^q6m(z7Z#3=4y)3ZB zl`5Z+;nggQ3Ev092|!SCk`fO%0N!0l@jF&p>ulVtM54G|A?qIoFOz0e=@H_i)AcXL zGhY)EXmM{7)k}}-Ua5hFRcG94I<*mxxSr+0ML%gB9+$KmN0D@v+Y*f#-(hovW|L~O zaJ!3R=+GX1TdRpSM)OUAzKQl&;UFh_5Z&fMgC4t*)eE~0oK*U;D}7D2oHU;i{w=Xk z`QK6J9l{-#zF$5@t1kLB@TM+ZX1B+^8q|0J={8SU|J94{qrzEO0kJ~5Cs&K6`_x+8 z9=xPm+o}6&Wsk?044&QtWDQvVY6N@-u7KWrt3K9Q?7-4&{=uIxj&+3MGzW+^HkfL7BF>zI07DsEqjad{f@? zySv_4U~{r`Mn}jq#$SBoMOzH`X;ci8yFCqAZA4)|rjGARp<#()&*NsFE{Z~Q%lGwx zQYPZhKVSIlh*)PI?(&(A2P25^QmBlPlSd+3C-mSBlbP3ZB8d71>_imDV<#4hq4|Tg z`~Fx%Zd;EtNW%5jHuH#5qon{GN{G>f-IC)T%$rV@3@|rO$AxIUB&^d!S63r2_@kOw zO5V=kzTpnuXFeN&RYAOeP7nUa>AC7kD5GW7a5A!ZH_p5nW>vJDSN-&2Q?Hqve!@p+ z_}wEy?O_)>EMsy+&#v=y4^l}CE7X7$*GP9_#rNj+j` z$ta`A3*n}DEFfePgyROFW}J9ybQBcz652nF47jE+m&Fnd-2jG+?kTDw_mvq1A~y|? z?cjIAChAT{k=u~c)@X&vF_OJ0`*tz3hA;FF{?cs@Q4$&nu=|G|Zu5*}nthvR(vF*G zE~Xm*gLw}!VfO}bMpAzR=(W88kSfDjZpo@$I-46n=oc(KPUb(h(8P#v5kaTsi=kT( z5XQ)vi^8!o)VC6#hj-2K@LISK71e`0fgc*rfGhQpBT>ce_v@7EAHj-pJ`;qq5U;85 z%I&49Fe$?w(F)k8YPK5y-YsK~_pvVVQuojP{rQ>;;MzARJ$fGG^OO-3#B9l zebeN4?d*8D!-=@#pcr0xIl0oA3?Tv^b5&0ON}>4j<{uikCE#i>|%6#E++n#d;?I)w= z7lR|7p%^+QOPv|pGXz&zb=pil1$LB}`xt6q+n+xq-iej2y6^Sb zh-(*lh8wD|FZeN(^uJk@f^GoeA zkw`w!&RNB`-EleaI65Nw_N%AK_e7!W-OrJZUlTkBE2QqLpZ6*|vIbGV3fg{zD!oCe zfk*ng@1Y>90&&vU-rN0HLhQ<{Z%6Fg@Ed?ZK$npHO5S@rnkP1)xLcmWaZ?bxZ4sRT z)O9q%E$KtqzIk_~^KaI>J=e8?uD`w=c(rZJ&;YW;iPB!?ENip*#QnL#(gKH6mGdWT7lU+bH{#n za87M!ZPWM*o&k=2XzvJfYNgcjSGHW2Nw-Xe2tg$B6;0rqge>=^N0niU`qWudgh@-T zD-Lg&9yJVlh8S8RvD{PN4cH83m*~=1!IMf|PIniZ*fMe5G@oZshW$*~{w0NTIyq2C z4>C1FhZqJSM40-qENCyvssgUMR7;&$-YnC>x9!5(?Q(racU0Hf@EE?Lbr3yqovL?X zADpnV?+&?4kv*y9PJd=xXools7fF1m+htInp7s`15ScDDFA8u67v7rvZv6WjfU~Is z^W+L$S(&-*n~Mn2NL|h6>KwR}%$(ibx0bNa9?nflFISFK)ZRYQd5jEBjuUIT#OV9@ zr>wc^n3grevW`M&qMU3mzmXAVKFIosXL(DO47}+X@?Zf644XHVJ-GqAwb#+6^>u{t zxdiz+iH3kSF6-;g@c2SWYHRpVgprbxN~LA;5?_o9B&iN`ZuMe}Zc09Sq)f!Z2?=fw zD57xw?x&Lv9gu%}YHmJ(5GGqtdWkb{+mv%gkc_EU>dg3!kJIw^v$z;b8_b0bUrk!!^y-yYOop+493;oKtfd6F_-q=;Upu6KQOx}ja_jO&`?fc)C~g2pozk}} zs9&%61~6qlas$9M#JFUjZ4^z+7n4e(p5zKFG&E@RW!w@&15a92|;Tq1Yy)`@D@3M=hoTZdXays2l)T8nv0DF68jFm8W8bx_Q-b$*wW-*SLJL0u#Lof Tk8^1pNe|Fh|8EzZo8^B20hAEz literal 0 HcmV?d00001 diff --git a/windows/update/images/waas-wufb-settings-defer.jpg b/windows/update/images/waas-wufb-settings-defer.jpg new file mode 100644 index 0000000000000000000000000000000000000000..5e6c58a1012521aa928c2140ec1d473ddf8c10cf GIT binary patch literal 11470 zcmd6NcT`i|*XE^z^xli~j&wl;q!*E*fHdj71d!fAdN0xyqzEESdhZ| z16Y`te=qdFMqfDiI5^nYIQQ`IaPf)m5fKsIBP1jyp&%nBAtxauB%>iCr=+5$rY0h# zrK6#uqoAUu`uh+JEc89tI0QI21XRR?#8m&s5`CnAliVx6u0q?BDhCGOGnSZ#m&RZ$1fo%CH+uFR#`<=O-h^q zBjcAQrnYwW4vtRFF0Xxj{rm$0gWg2P#Ky%ZBxYv4&Cbcq%P%M`EB{zg`Kju2V^ecW zYg>Cq=it!r$mrPk#N^!k!XkL-$1()AxwZXs=hyDuKH~T3+4;pK^3T;@To?e>e}VOH z$o_$g9E}ST8ygE7?=LP4Ont_7X%=}!axTPiyTk@t`%+x{@elFj_|VE0jxVf zttXVg^6?!oprEk*^_D992V3~=QhkYl%f?7)38N|4T>DWI?ViBrC2kR{W;wnXWj&7sbamu;dq?QG}V`h$@h`tG6LVi z5oLq2W5c9zrp2)muAdHBUyA-%Uu&+Aj-6CD>~xAZy4i~!r+mnmM-foZgHSk}-*mD= zxcA0vCiuQr7={Q+`G>>PwHY*t7n^t83q-N+brA`PNvWxgH)LFTNj)OPx}7hgM5tc$ zRJhQJIx`f<9kMM*%7_b?aC)3bgq_UIkSffO>*kEx&9!zf|!x+Dqov@ z6%uyEDW-_m{2KJZd{rT=Z~^^!lnKm|T)WI{Og@m(M7|<_D;p0 z10n8z6!iyq5`l9NLx?7PX=qw@{SFv5tqHQP9blKvU{133r;Ndlz~jt_TyKyU4Y8XG zBM%YnM7$gDeWbg}RjPFKb5&FPv+DJ*F(kU3Yp|7;6Zat=>DE$2i2c^++!5;WYf5K% z)dlGsomvZL&dL31qERz@F^z=N9kN|k&k3ku=yT|8SKzfofIsZYd^y}>?;_}Ncauc@ zg*Q0Mth>w1;gFor{g0ZrcxpehS`0dBSE(P%opK9Ci`_R}kv8Fn*Ma3Zq8wv8_+aA{ zv5_#VnorxWn~l^H?f~cdxOIAXaf0N@QSlM41b&WdS1@mW1^-uldaB4ClSqt#<+1fT z{`rf*g(G<$SB99;V%N`m(w)}JhVbBB0}JiCb<3o}tq18d6dK@1FU|1Cl_I!URi~hw zFOmmNXE#z1#;N6sHP+?QY=5;m0l?T3J2^4xV9PPG=A>msvs>FPmw_d`Iae@ja#_D& zoNitF6TxMnXTJ>fRv*PJ5lS23QM^?hDm*{r$;#wRL$fp;`1x6QlZVidz-RZin=4sr zjIsn!eJivo6lz%fA+|h3KiE+kW zl$*n<*wZdmZEFDtWwu3h^>@Zb*0|~+3%*@TYw(Lyq&LzL+Bz6U*mkGW0w+9#S>`8k z=-7ks(LRm0uH%PiI;2K%T1k4AV$c0f9C0RwpGcQj%A{9erwL}IzR6w+BM&$j={#CW zJ`wDGTp5r$x1}AbpqhGRawN>rl%t7X@cLf1qqzJWJ4mpUweX{ZCOmjEx-%~R+*nq% zeF>#`QyW_9bak`-jn15>); z8e`?x)ul2N5z;sm+I6FB2tE_AkT%JgT+zLL!NR-XTPER^Yg2tOW1TFX*-+=z(Ks3* zU5;FVrLaiJ9ye6HoV-ezDaQ8mr?8;;ZHGV7pP==COF5ZZ%}ToU$)jE|WD2Z4uF7it z{^HSDQ#fDLEZ0PE0x+Rsh}~rS4&yrm{KgTgn<`Xi*9k|=*GTSweIKn@l0T`@0SP73 z8Vm5`a`mMn);%WoN`j^((5tl=2-qI~n>nt5zMZcywWlr5+QHv&% zziX4>NIu_FBy+g~nB_R^*6%kpEFSqj2B|l8bcIUE+{=GTo|`G@-K8yp5w%?x$i!eF zvXvX{!8+vUf7Mf$Uwhz}v!w4l^Yg2N&l-~(%&$r=X05sPA@$ZR^G%+wJNskfr=9ah zB6D;t&&v;%Sojt`4(Dp~8uyj!A)hQ2{KNt$DMm; zM|m?vYeLAexh;wtcT!~40sv32iyz9kJ-Dw51iw(A@1~UhShIJq`AD*Bb~7`0A^k16 zI-`5WfE5;w4RvBxl%iaQp|Jep0Nkaa)~myHjwm6iP5;(}bw1_h_^x;O7bky=vER1? zQM!_wZ!Ut6Z$2X%Eo_GyoL_MhRJbzuTwJbm_KLcMI~T1%SICm48uZek@h`qu)tHP= z>qz&L#`|l-*31k$Ey*{WE3PIas^ly_IiH&SnBLBNyYDw!o=cK~LA*0^T2sc^9Q+Pz z{#Gb#j)eqi4128nBG<5K!56kvmOgc5b0h+ch)Ntwci{#dSljO-v*fK)O!M1;;yCl zgDjIJ9lGahTXY_uzc)6YKM(BIt-``y3Jd0yb)No`!SHkI^u_NtkNhcLH9;*gR*|ov zqbbmXe74lzOR73znnK<-B=>)4ZDXnh?($;A%-;cSq*xXcu$8XD*g2F!Ei&*N*&+ZP zN8sd0I2Ey#qe_)b1|U*J8Zz}Ni($e@X%z%+ap^iTc7|CCr3OZL2-0bIkqcuOu7@3O zO8ZR*I!4~&2ULu13?0=Dl_`5w1Ym;jWLGREJR7xp$ugt9SCE4Rzl^>}mv?jMNWr@> z1D{PRO%mJcHX?-c{q0LXo`w%Tulh0O{`h_KgI;%b7DLE!q@6PNQ05cpJ>ZIPghjRi zp4w2kvM(Lv`~KZUZf=&gug~n)jFr-^Zm;-pU%h1;3%_J5setkMFgcXMV)J`rgJy(I z@`bF8D%Zl~OB~H-?Dp99Lq${-$}G4#Rw3R<-5QkUf}rDEWm62>cgbm?-bD_+Q;^VB zDuqViPs~P5^9f2 zwtVSVKUiTE0Ef-!w0$(dP(RGfGf0zrIvxJmIdebflGP!@>i3psa?Mv<@Xs_hj4#`7 zA`DJ1qTwSmX`oL5e)}Ti0)BlZ(rQr?^*mfQ~cVOYpS_vw0)ghDS?5VM2(i7jiu)!%42>9sZfJbS~&bTe|E%o ze*bZ|o1=HDzqq2tU~=wne~eUVTRDeDl)$wX(&%y^j2Vp5soE=I?gZD~E>XXe7B{ca z%jIWLcVg!i!x!AGPXFP6C29s0^zSmuQ(YNTa$1jKaXsJh<@zKMt5efHZT&fMQJ>ZFQvU!vC}e};ug=A zL#+ZqM`^=-L@uwyI^iFSnn1prj4Bl7FO{^r?~P~jdE?T0%YK=l$4iDTy*s!ATH>O8 z3Qs7P6`OQk!+IRXG!}H`TDmoa82|@ker5j9515tMZy!QqAKd|Xx6~FP;$S%o&Ly%n zGZzErDQB@vhk&EzgJ1)DsCCldHlQ&SoME1pa7!3aW`Y1E6SRJo5EXn$^z7%h7(ZTfAy@| zag#7Q>8W_-g?y@{jHKGU`ygO*ZQh{Hnbh^jaDev%@vs$uV+nDExn;~CkV`uG)@jr7 z&&6{US6+U&_cYS%eygJc$)QbK{q2JQ@uv&TW{kyT%VS%PbP*LX)h-O7DLGXjU;psRJHQ1p zMtCd+vB!HSiozbxdwe<;^qcpVXum)>zf#B7t3nyKcq{3IdTpWyaUnxIFt)m*(^&Up z>&?XRw`JWyk;=UwaO>B3=U&hSPaJn9xAIMrD`&AozlUEI2lUeL`Klh?^Q|-p>)<*$ zLMj(F6+9JcY}pNVI}3EPeOnS)neig?S}Rx8b4T!aOpe6W?3T7ZB4(%3<(8)@(Oq&; zIJzsHdoKrg!iH-pnN7&YMnliuJ$MOiOHDbCO#+d|Sq}Myp-biHp=%@8s<0J7k$_8G zyi9gTqkz^V=P5pKV!Qdacdi0wM|F1bsuD&i z3_~tuPM8m4pRAmU?nKDHK}e74;vi*@kLQgMIJLEFWn)Yi{SujF8nG&jWHg+mIZ#iT zhuB6NaVX1DWSx$xM2gmiUZ}j6yC0j|AF({JV#=-$dcvrUYG4wAP|bf|?i<2GdIUTp)|FZyY>Y1Xe=je>`|D`L&wC?u?#? zzD5^mDo=6;lvJzT0sY86cq4bfi2fZws6Mc9Ch4?+WTi#NKySAoHv*;e*(Jy!!xy$@ zY%sT~9`0z%NvY#BoKEw?K#QrG=m9h7NB28mP`vC8_|83c2Vi8Oc(DX-Y0}>G?YhkN z!R1A6`P2S6#YJ=~II7eFH@dbuoaR-{Xd1k1Hi~jz742*w1u5OlJP;4qsFVQ$Li}>Pk@prGx*+q zIE-iZ4%ij4y#pfoZY2{MPIV7Yeal>~+6D?ku_i-}hk6M+8xVqCwlfXyQ}SGcdk@6T z)gQTo^4?~5WrkJN7{~wLaZEIAO|q^xDYVd<+|X+kq#JroF`my%f2|_$NPWZ?*z{R9%ZKY#eEvm?X0ElMg!lMc%NX@chm#w%v$ zYh&jmxcYE7nXe8-DA!rSQ(KKpTh7b`%$~v~cIG4rgCQP%KRmYW`iF%qC#nJHZGaY1 zz7ZfxuV2ke66Q6h=nh?wxiGxT&#uXoA(OW)(kOKRs97bPG(D(J&5jV)u;0!!omt4z zX(5j~$SB$Vfxs$1=)oUV|C8m|l{PMo$0SZz-<|3lM~f*!B;lve+WHVQ)hzk0o*F6J z>NYIWl$TXuFreDw)QZR*mC9bTwdz`eNw}Y!!I)AgTvg=$oWXi{p=k zYQg)#+*v!GnS+XXQs4ceIX!G6#Kh1?3MBEAu{fpmd%%*>_hcHfCzb2YXsO1dtIv*B zz!$qQjmwBm2Foyw=+xxoZUV6Z; z?sM8PE9oi5+ZIM zVg?2^9RiUV{lqhjZ_En9(TllXP*hzBL1s>x)e7@fc3BK#r*b5`6lFBO4{Ob8hI=V8 zf21DZ84JhIgtaXh5BvSn(QdGr{yDL8^Pvt#o89(xt!-y?qm$5wzS`K5UXI$aW-sW) zI(t*<9bk}3?{32h%K@D~DrD5_fGLx`go`UOqgN6#c0>#dwu~=gf;;2~f@)kDDr&j2 zy_m$ZuQ}9R<&KvjMoJYx^5Im@`V_Q$`loI^>yd`S?*`dxtmf0AuK285VbfU?Dkh$aH zGi2#V1hyOE4h50ydM_Wa!n20Ff-m+wxMB%|oh&GnJFG*dIuJiw`=#VBl_UCDMpOe2 z6`Dzhs#8dxgYlAlkZ049Q0?lf{4x#H9=2!OS6sujsA{4ro;R9XC#maH$k#At(&5hc zBlCN*BR^}iYjQ3c#VO?y6A#;os61A^#Unfk`q^0GR0ADj`kdkxl9b#G+lfzGDc^GeGpL8;&DUE*?2jr8<{fBxu?UB#VWqQY38ePvO0 zJNF8AvA)~h&6nWtTMTGPw>NVWtXOx%B+MYlCoKNJ+}6)9RSK4BncC-^!Z9T4CYzJu z%$ndc(JfgWkSOp;xcejMOHZT3LtYI*4-L-W6=L_^!7&b-jR_Ibn8=v z^fAxuGcivRP;8$wDgHr`*kXvJe>mu)%LA8;y;jj_4$9zOFk^I>9{yC|h#}qf+lOZW zORZ|)QQs(i#7kyHYQemv!wq$n+NaBn-N3Hv|`eri7lT( z)ZpMO=mCh@;(!Jo5Vpfx5p~|wYM;yUY9QsSnde|+R?%CGIsI3vuwsboz!f;M{-CX` z!MQ-Vuui*lz(2R}NQa4h@>|1mZ}Ofue5`!RnX)9qC?j~>g-7)#QnDXCIXUT?fnwSn z)+V#BD7+SAJF`b$ze68yHKiTJL?|uzx8xRg<)^d00lth=m{Xn^0`7D+DJ}63=mWOD zkS!zuDt*=e&i;LhTmSFWH7%gcsl~k6TdGjBJ{FVVOAI^qDD}4N){#g+SjbQ$YyG9K3ek#9CAK!rA$gHCo!iT-FS<`gzmz=K-0W3 zG|gjZ2BApNG%vC2U(2D0hxKW%Fc7(EjM{DR^RGJPe`xjAO{7|U%d-SN*ND@*znx&` z`Ie{rA#{i*(y%U!92q4NDG$Kcnmc{R5<<8Oo^A@{o13gnJAGmhgAww#f+5!=B=gN% z)Eob+l1`CTepj9l@h!gFYwNwU&wG~nVTf*u&yBsrQdhoU9S4Joo}A6W#OidbQpf;} zw6N4d82e4}E$_iA>c!^D&bg3*&A=;AVvitryHfHjqL4 zPoG{V{#e$=M*fk_O{YGmpIOhI2$+JM#GjFpAk_yDI_~b9zm|Lng~U#t6_{*iY4kYb z{2WRXQW2u^u7>7XAb6%vi9)?pfx!9^k=VANu}IY83gk0FI*)GYD(9=%Vq1R>Wp{Q+ z=O*TUjUE*??mcuVxs-Uof{%=Z702HaE&iO7(7t(Xh?ps>Rkx;I9i78BQ^{e=G!K+9 z#=$53nXbu11Pygo1wu|gpjZ(bQRju>RL^ckFb5UX{Nk>6(UXXHPNkq`yT}0@oh}Zonx;tPl zN0mJKw9qYB9yal9=}ZrA=9L7JbaTxcL^k4)LkS_JRo$$8Sl8xnE%aULfT;C^6Q8ry z{!c!aT1YyEp14It8oVf&H1bve-cph8TCxv0uPf=LtX^}`yeN!cmYWc+WO0kmBowv$ zuvLt%5af6UiV0ATu(SkIwG!tGVoH@nd|R+x%c6a|h2vBcS;c{Lw4hi`p>8o#M579I zcB9lQWCmPZ4;fh%@@(X&C8aH~TZkma-SgwuFXI)^22bFTLP(!)W0=P~hKodAtY5^e z7h&LEx8Hg@W)FRIY=msJ+q>Gssa<4OR!t%Kc`=zsujz0dmg%-~re2${(BBlwnZYdX z?SIovoLL%{HH`V$8nYP~qW@_v<#+p@t!%ec%oZ$PuAecz+{^O0z9K8n%I!?AOhYR| z=+M+RYriwK0aUe@$;z-#8dxsphx_Ae+x!!b$?Z%cw<0sOpBnuGE0)XOhA9HTW@}-L zmUNK)Zxt3U#&N?zsW};|D5^P*{Nfm9lKr|v`RJil?VDud3N#Rr1Iwn9RJrF>2fbVi(AlGN zvwBL1EBH!2w{Cs8OqJ!G;5tuFBu6$Ut9YCt8x*s>HVx@Wc)emF1z8tRAcAPaHprcG z;Uk|dT)fqNKTWwz@fLWpfX+!Q@~SwKNxbFbOC#j1=KCCaJWd982-j$J=391uecy6j z?l!D)74UL*{Is&Bl_>o755CGX14+CcD?*IvVA|1oyaN_7c+5Kn{FW@k`STQMqgcW{ z2)^UBTfTUW_&4j}#jJ) z{*qgf-Sgo9-L_*QD^9rM%1PWh-~5L0+|h~6_i5O??*>v!lCc6L6ThXKdr5ORzWs>f z0apN)|I`^X6$Y$`7s*=ZT1?r(N;W3^&P`bE$%p+arbdN4j>c5gx8z?^mVE`jJ={+G zh0=#}jP|*K>*XHZ6x-KXxOT>VtO$rAwsF;LZf<{x%Rr7b=AAq%E=L;k5c`2`M_3km zUBVD}gWnQpuHsTCmD}f6beH6mo$IdTK7h>^vWt+1Cyw*xC#;_uYR~ zotk#>5>bd`ap%{b<^plf$~~`)xQdw`EHB7jtN}x(_$5-Qtvrv1TRjzJwhs7tvA*_- z1+Wgw^UsGcio{vZ9k-B@9<)N5R`#3ZM4x7;vo{KSmNDWQWpu`>cQZ~3QAPUK?j6`o zJ^olcyg?gKvaaUBU_&bJe;of`5ID z{)h*n&5nEfyja`etRd+BujBzM$v_}sK+KZM56fUx(C1rc2M>_?vkCK9Y+NM_@B;*axYFN-tQRHB!i)H6RH)5na zEz{%~1B8yDJ-KS%ebDNg4o;~CT&^>aV($*<_7pR9){fW^ec4f8>-2$?87Txm7zx8e z$ah{QIF<&e*>O(|frH8mlJ(6clD|m^35vFKJ{YyanSV{u<@K%M-yv*&N!)*kv<;xF zQn=?N@V8YnrIu=_vtys&TBoafS?HoTWEE~O-NNDY3WFVKNyWd3;FmXXXLrC2lR#UJ zO00CI8UX|5*Rc;+RW&-P+Cv3x5h2#TpUj-3ix|PjK7Zt@$960f z7*pOe>w_on-T`L>4QM&r4lNX++a*!G58-X2qzOZ#1!^6zAFwzjcX5^P%?C)XURRnN z8HUXrPPbtKjVRURQTjIPccnLYiuA?*c#Hy!{;y<8iIz+wCT^+Ar#dty=;_7}%(Znl zd+w(uU@Jg$MDGBVC7uBd+mnl!aUu3!$(|@j4~7U?-T#Tke9$m=Somxn+8Uf+&muWw zZcb*Ge#rxnj@z`Kphc9|9?x-r2j*anR~YH-!x{a+R`7cV234x#P!~YaDYjl#}2d`M#(z}hX>^uSlv(!jWtNQ*`vCc*ZwhP^B;NRUqVxW5s zl **Looking for consumer information?** See [Windows Update: FAQ](https://support.microsoft.com/help/12373/windows-update-faq) -You can use Group Policy or your mobile device management (MDM) service to configure Windows Update for Business settings for your devices. The sections in this topic provide the Group Policy and MDM policies for both Windows 10, version 1511, and Windows 10, version 1607. The MDM policies use the OMA-URI setting from the [Policy CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/dn904962.aspx). +You can use Group Policy or your mobile device management (MDM) service to configure Windows Update for Business settings for your devices. The sections in this topic provide the Group Policy and MDM policies for Windows 10, version 1511 and above. The MDM policies use the OMA-URI setting from the [Policy CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/dn904962.aspx). >[!IMPORTANT] >For Windows Update for Business policies to be honored, the Telemetry level of the device must be set to **1 (Basic)** or higher. If it is set to **0 (Security)**, Windows Update for Business policies will have no effect. For instructions, see [Configure the operating system telemetry level](https://technet.microsoft.com/en-us/itpro/windows/manage/configure-windows-telemetry-in-your-organization#configure-the-operating-system-telemetry-level). @@ -35,24 +35,32 @@ By grouping devices with similar deferral periods, administrators are able to cl ## Configure devices for Current Branch (CB) or Current Branch for Business (CBB) -With Windows Update for Business, you can set a device to be on either the Current Branch (CB) or the Current Branch for Business (CBB) servicing branch. For more information on this servicing model, see [Windows 10 servicing options](https://technet.microsoft.com/en-us/itpro/windows/manage/introduction-to-windows-10-servicing). +With Windows Update for Business, you can set a device to be on either the Current Branch (CB) or the Current Branch for Business (CBB) servicing branch. For more information on this servicing model, see [Windows 10 servicing options](waas-overview.md#servicing-branches). **Release branch policies** | Policy | Sets registry key under **HKLM\Software** | | --- | --- | -| GPO for version 1607:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Feature Updates are received** | \Policies\Microsoft\Windows\WindowsUpdate\BranchReadinessLevel | +| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Feature Updates are received** | \Policies\Microsoft\Windows\WindowsUpdate\BranchReadinessLevel | | GPO for version 1511:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Defer Upgrades and Updates** | \Policies\Microsoft\Windows\WindowsUpdate\DeferUpgrade | -| MDM for version 1607:
../Vendor/MSFT/Policy/Config/Update/
**BranchReadinessLevel** | \Microsoft\PolicyManager\default\Update\BranchReadinessLevel | +| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**BranchReadinessLevel** | \Microsoft\PolicyManager\default\Update\BranchReadinessLevel | | MDM for version 1511:
../Vendor/MSFT/Policy/Config/Update/
**RequireDeferredUpgrade** | \Microsoft\PolicyManager\default\Update\RequireDeferUpgrade | +Starting with version 1703, users are able to configure their device's branch readiness level, by going to **Settings > Update & security > Windows Update > Advanced options**. + +![Branch readiness level setting](images/waas-wufb-settings-branch.jpg) + +>[!NOTE] +>Users will not be able to change this setting if it was configured by policy. ## Configure when devices receive Feature Updates -After you configure the servicing branch (CB or CBB), you can then define if, and for how long, you would like to defer receiving Feature Updates following their availability from Microsoft on Windows Update. You can defer receiving these Feature Updates for a period of 180 days from their release by setting the `DeferFeatureUpdatesPeriodinDays` value. +After you configure the servicing branch (CB or CBB), you can then define if, and for how long, you would like to defer receiving Feature Updates following their availability from Microsoft on Windows Update. You can defer receiving these Feature Updates for a period of up to 365 days from their release by setting the `DeferFeatureUpdatesPeriodinDays` value. >[!IMPORTANT] >This policy does not apply to Windows 10 Mobile Enterprise. +> +>You can only defer up to 180 days prior to version 1703. **Examples** @@ -66,9 +74,9 @@ After you configure the servicing branch (CB or CBB), you can then define if, an | Policy | Sets registry key under **HKLM\Software** | | --- | --- | -| GPO for version 1607:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Feature Updates are received** | \Policies\Microsoft\Windows\WindowsUpdate\DeferFeatureUpdates
\Policies\Microsoft\Windows\WindowsUpdate\DeferFeatureUpdatesPeriodInDays | +| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Feature Updates are received** | \Policies\Microsoft\Windows\WindowsUpdate\DeferFeatureUpdates
\Policies\Microsoft\Windows\WindowsUpdate\DeferFeatureUpdatesPeriodInDays | | GPO for version 1511:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Defer Upgrades and Updates** | \Policies\Microsoft\Windows\WindowsUpdate\DeferUpgradePeriod | -| MDM for version 1607:
../Vendor/MSFT/Policy/Config/Update/
**DeferFeatureUpdatesPeriodInDays** | \Microsoft\PolicyManager\default\Update\DeferFeatureUpdatesPeriodInDays | +| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**DeferFeatureUpdatesPeriodInDays** | \Microsoft\PolicyManager\default\Update\DeferFeatureUpdatesPeriodInDays | | MDM for version 1511:
../Vendor/MSFT/Policy/Config/Update/
**DeferUpgrade** | \Microsoft\PolicyManager\default\Update\RequireDeferUpgrade | @@ -83,9 +91,9 @@ You can also pause a device from receiving Feature Updates by a period of up to | Policy | Sets registry key under **HKLM\Software** | | --- | --- | -| GPO for version 1607:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Feature Updates are received** | \Policies\Microsoft\Windows\WindowsUpdate\PauseFeatureUpdates | +| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Feature Updates are received** | \Policies\Microsoft\Windows\WindowsUpdate\PauseFeatureUpdates | | GPO for version 1511:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Defer Upgrades and Updates** | \Policies\Microsoft\Windows\WindowsUpdate\Pause | -| MDM for version 1607:
../Vendor/MSFT/Policy/Config/Update/
**PauseFeatureUpdates** | \Microsoft\PolicyManager\default\Update\PauseFeatureUpdates | +| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**PauseFeatureUpdates** | \Microsoft\PolicyManager\default\Update\PauseFeatureUpdates | | MDM for version 1511:
../Vendor/MSFT/Policy/Config/Update/
**DeferUpgrade** | \Microsoft\PolicyManager\default\Update\Pause | @@ -113,9 +121,9 @@ You can set your system to receive updates for other Microsoft products—known | Policy | Sets registry key under **HKLM\Software** | | --- | --- | -| GPO for version 1607:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Quality Updates are received** | \Policies\Microsoft\Windows\WindowsUpdate\DeferQualityUpdates
\Policies\Microsoft\Windows\WindowsUpdate\DeferQualityUpdatesPeriodInDays | +| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Quality Updates are received** | \Policies\Microsoft\Windows\WindowsUpdate\DeferQualityUpdates
\Policies\Microsoft\Windows\WindowsUpdate\DeferQualityUpdatesPeriodInDays | | GPO for version 1511:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Defer Upgrades and Updates** | \Policies\Microsoft\Windows\WindowsUpdate\DeferUpdatePeriod | -| MDM for version 1607:
../Vendor/MSFT/Policy/Config/Update/
**DeferQualityUpdatesPeriodInDays** | \Microsoft\PolicyManager\default\Update\DeferQualityUpdatesPeriodInDays | +| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**DeferQualityUpdatesPeriodInDays** | \Microsoft\PolicyManager\default\Update\DeferQualityUpdatesPeriodInDays | | MDM for version 1511:
../Vendor/MSFT/Policy/Config/Update/
**DeferUpgrade** | \Microsoft\PolicyManager\default\Update\RequireDeferUpdate | @@ -130,9 +138,9 @@ You can also pause a system from receiving Quality Updates for a period of up to | Policy | Sets registry key under **HKLM\Software** | | --- | --- | -| GPO for version 1607:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Quality Updates are received** |\Policies\Microsoft\Windows\WindowsUpdate\PauseQualityUpdates | +| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Quality Updates are received** |\Policies\Microsoft\Windows\WindowsUpdate\PauseQualityUpdates | | GPO for version 1511:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Defer Upgrades and Updates** | \Policies\Microsoft\Windows\WindowsUpdate\Pause | -| MDM for version 1607:
../Vendor/MSFT/Policy/Config/Update/
**PauseQualityUpdates** | \Microsoft\PolicyManager\default\Update\PauseQualityUpdates | +| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**PauseQualityUpdates** | \Microsoft\PolicyManager\default\Update\PauseQualityUpdates | | MDM for version 1511:
../Vendor/MSFT/Policy/Config/Update/
**DeferUpgrade** | \Microsoft\PolicyManager\default\Update\Pause | @@ -148,20 +156,20 @@ The local group policy editor (GPEdit.msc) will not reflect if your Quality Upda ## Exclude drivers from Quality Updates -In Windows 10, version 1607, you can selectively option out of receiving driver update packages as part of your normal quality update cycle. This policy will not pertain to updates to inbox drivers (which will be packaged within a security or critical update) or to Feature Updates, where drivers may be dynamically installed to ensure the Feature Update process can complete. +In Windows 10, starting with version 1607, you can selectively option out of receiving driver update packages as part of your normal quality update cycle. This policy will not pertain to updates to inbox drivers (which will be packaged within a security or critical update) or to Feature Updates, where drivers may be dynamically installed to ensure the Feature Update process can complete. **Exclude driver policies** | Policy | Sets registry key under **HKLM\Software** | | --- | --- | -| GPO for version 1607:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Do not include drivers with Windows Updates** | \Policies\Microsoft\Windows\WindowsUpdate\ExcludeWUDriversInQualityUpdate | -| MDM for version 1607:
../Vendor/MSFT/Policy/Config/Update/
**ExcludeWUDriversInQualityUpdate** | \Microsoft\PolicyManager\default\Update\ExcludeWUDriversInQualityUpdate | +| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Do not include drivers with Windows Updates** | \Policies\Microsoft\Windows\WindowsUpdate\ExcludeWUDriversInQualityUpdate | +| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**ExcludeWUDriversInQualityUpdate** | \Microsoft\PolicyManager\default\Update\ExcludeWUDriversInQualityUpdate | -## Summary: MDM and Group Policy for version 1607 +## Summary: MDM and Group Policy for version 1607 and above -Below are quick-reference tables of the supported Windows Update for Business policy values for Windows 10, version 1607. +Below are quick-reference tables of the supported Windows Update for Business policy values for Windows 10, version 1607 and above. **GPO: HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate** @@ -172,7 +180,7 @@ Below are quick-reference tables of the supported Windows Update for Business po | DeferQualityUpdatesPeriodinDays | REG_DWORD | 0-30: defer quality updates by given days | | PauseQualityUpdates | REG_DWORD | 1: pause quality updates
Other value or absent: don’t pause quality updates | |DeferFeatureUpdates | REG_DWORD | 1: defer feature updates
Other value or absent: don’t defer feature updates | -| DeferFeatureUpdatesPeriodinDays | REG_DWORD | 0-180: defer feature updates by given days | +| DeferFeatureUpdatesPeriodinDays | REG_DWORD | 0-180: defer feature updates by given days
**Note:** Starting with version 1703, the range is 0-365. | | PauseFeatureUpdates | REG_DWORD |1: pause feature updates
Other value or absent: don’t pause feature updates | | ExcludeWUDriversInQualityUpdate | REG_DWORD | 1: exclude Windows Update drivers
Other value or absent: offer Windows Update drivers | @@ -184,7 +192,7 @@ Below are quick-reference tables of the supported Windows Update for Business po | BranchReadinessLevel | REG_DWORD | 16: systems take Feature Updates for the Current Branch (CB)
32: systems take Feature Updates for the Current Branch for Business (CBB)
Note: Other value or absent: receive all applicable updates (CB) | | DeferQualityUpdatesPeriodinDays | REG_DWORD | 0-30: defer quality updates by given days | | PauseQualityUpdates | REG_DWORD | 1: pause quality updates
Other value or absent: don’t pause quality updates | -| DeferFeatureUpdatesPeriodinDays | REG_DWORD | 0-180: defer feature updates by given days | +| DeferFeatureUpdatesPeriodinDays | REG_DWORD | 0-180: defer feature updates by given days
**Note:** Starting with version 1703, the range is 0-365. | | PauseFeatureUpdates | REG_DWORD | 1: pause feature updates
Other value or absent: don’t pause feature updates | | ExcludeWUDriversinQualityUpdate | REG_DWORD | 1: exclude Windows Update drivers
Other value or absent: offer Windows Update drivers | From 6b0e62463984d754633e53c1d2f127cc25a6d1ab Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Fri, 17 Mar 2017 15:42:43 -0700 Subject: [PATCH 05/32] updating threat landscape --- ...ions-pre-breach-post-breach-conceptual.png | Bin 22744 -> 31451 bytes ...iew-of-threat-mitigations-in-windows-10.md | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/images/threat-mitigations-pre-breach-post-breach-conceptual.png b/windows/keep-secure/images/threat-mitigations-pre-breach-post-breach-conceptual.png index 6b9c37489c93519e0dfac8db38ad90ba61eb7011..f23868fdde0f05459902271f9d9301506417fe43 100644 GIT binary patch literal 31451 zcmeGDWmJ`G)IN$Y1Q8UFl5P+%K#*>fRvHDQLqfW{6eI&8RL97pUz>7J@($udY)(9G3Pa}>zelpQC5_}y-sl*fk5EO$x5ms5a@CU z1ezZfCR}ktyK@Wvg>5JM!V!VMYeD^k7IzPi5-whIl2eenHjhp~LQEV@@>k~HB`Hm( zN6t>>whoA#f^J#3gyRI4BuyNR9bVZvy|T4I5Mk3Z!u9K@>k_th?hdca%$*QjgS(zZRw+C1d2s(tED-y+G~PbO6i78{YrBuZbK2w5M~+01vxtsofq zTllX$EIv8+7s=w{Xz+VYK6hSSP{(W5``NMYW1{1BUlsDy@n*ICVjC_#!M{I*K~c>O zaY@wQk{lV+e;4IAWEuYbMH{^T_mL!1BV9-^>QDB~Bf@_-MPc|e{dW^Krrduw5#mJu zyC<0G|D7-5Y?;1FcgmY$B|b6piQQM!TLnKkVZm&_F8i=AE&YVTCNFVp?VP=@I`|z! z+VpwF>`f1UDKcco%{`=?W}+@|e^F+GRYao!3p)Oun@MaNY~_Sct0-Jb@H5{aIn zxvwVX`>aHk#A*t$d}-cjvNh=WPNr|AKx17(HGO>FputAq6J$*d=%2ufg z`(sw2xaTp8`GZ9JVJ}@T+XO3)$1*=Tp7CO-H0sHcA*XZpem(d6si1j&x&DPKp>?$S z58uVXuE&zsY;g2C$xwn8+X0V&W<*e$7pHM;MQ-TyYp&7x&PF|~KULVj==I!~ev(>b z==ACyL zOC;^GB|S~F8K;IXJmviSA+w}mMXI*mpwa$*+AQDrbYbsK%51*CKisHU<&8bt_ zI|fFh_PbQPsvb|nb8hius_$Z!(-+blPH+2%-;j28PqF;IQM8=?>uc1Yp4>i9>@)r5 z?T18fyaMOS1Q?S9S-f+$H}CMx_fYxw_>m(DJ{5)`SCeepJded(*5-ptoG`hPMeMLY zg|^vjwQIe2PfM<&#S7fAdrgx{K%lW-0~~;aG%W@X3eP&{NgKCO1?FCpv(SA zE4A*7$R++Ghdl4t+H8IW(sC=mv!J=gU2Ngou^{s`&ljbnPrhmIC^+Bv)5|w$-7;xm ztixUQSnZd2$qc&qrsmt`hcrT?OrjV+g}qx%9u2I-;JV#DeP|({zu-@|=2~S@&wi0v z(9Tlj3NVUU<=u+rKPGToNtm2I@?5ZQ##eQwe!7kLsUozrp za6jG~OHhncndo2Junq^GQ=CQO2xXVc?v!IIZeS-N^Tcs zsmRdU+Kj?{r*C-9u#LF)rVi0M#pUu}pK15YTOI{0*F5KwYS69q?#+nm*}96A`}9Gq zUr;j%6dWFGve|mhaSM#y2x{1v@h5uSKS{g9)nfSND_6p1;P9zYH;C#8_zEWIwyEKFBCYW(~9 zMg#=_!|u<`C>PIs)4v1CL)-A>ZhT0Y?6`--VqCr3&BPjbw%ei8Sqj0lSwGG~Bmipa zCVg+h1dD6B10Z%QkG@a9?A3o3xhVQQ^%-@a-0y$J&2Y!cJW}*MecundkP{xyaCx<- z?U6&!06jSdJO3^P+Ah z2eLX4A1B7i1VbKQp-3>^v0{bQz$--8eQs>=HnR4T+x=T%sYvXOn%jZvPgaW`@Iuay za%cQkA@N<;wCayvqPxVG?LXOfdHv_@3Jo}KTlFtGxNVR%d74+C{L6{Gw-5`ui};zKA<(b zW6hg>^?;%vS;w_kul!OwQ(?a(frZo9OWP%Pip93^S7|X6vHBSWnS%*zyAQ2Lp?loc z3cS}43a!J*tXlE49MiP0MgW?6r<9vvGuj;2;eU}U=N)<#K1_!?T!d}+S`6b3&%RoB zOv<$OnqbBfdW7hwOxEoA1yt!njT&?`&#^UrFL^!zxa30lbD%9Ve}+VxRB~<5!qV{> z;;=`?qEB}(#>eJ!q*S#3JI&j}qgK2OvwamQpXp#N9a3srjk=E~1ke`jShP2JbWRb`h*OD)!tq`bIBc1C60ryTrK^RA~GbQMyh!k$aQo z5c1k)CX$SqvK#RVVFZ(zVG;^gcy-rIn~zdkg8RvXi>ZVXUYV2+u>cdy_94tJ#@P2X`PS(_@g?eTpLFm9QGhL z>B$YNusWRA19bem>XWz`VeFr2m#;rAT*~=Yz(PfiMG|y6H(p85Pu^X5S#mdi+fz?d zd%!RG^Wjh;O~{{C2(C?bF8A)8frAL2*#N`ujnpfzZ@<$JH{)>q)~@{9P|r;pd3zZD zq1BZi<*~nT-eb~X$_*i<#>usqwvvht{*KR_;16I%=4ZuhCr1t?3$3!`#66sHtvRRs zoNv%PbCxLA=upE~7&{p>DUz8#Z{xQ*LTxtk4}2Uon4|2j&Ud8l1)Kk ze~)Qym#GHgx?V%oN}8_P-}dChZ_A?cMAEfL26>6y)EXldkxIV}xAUDg+Ix9kV90vY zFVa`h_%p2^5^g&6Jf*A{p;(CVU*;vfGNfmdXlJ|eDnV$KaXis+AaO5dqU2C}Y~lBv zoHW12Up+lD{r8pfg}B;0g^~hLz%v?2<{_-6chpxyf_ZVYklZ^r>QeRmR$bsqOcmIXZvYxc%p z;=*X}6A*h=^vf%4)WacwJ_RDK_^uBIdOF&>uuekE{EGsOh?w#U%vYXUkvt8>Heb6U zYxt+GLFnX*rjk&wl_xi~Mm#rYk|oy@8?b-V(A&>jKRv?a;o2+XvAQijRaZB#?n<)4 zaxPeYsMhYXY`SM$a++N4=`ii?ZR6K7J4QjTDR|;dRL*wLoyr(NsQTAL^iQK=ArkPc zXWrTU#k<16jnYa7-vahT9!T-R9`X>_&r0N=MSO3n&{_6%TiU|*z*-L!FOrz$Sr{$$ z(cMn98}(Kwf^o)3ckOOA464o6)e#;_9U1J)XJ}uxxu)1?{~jLU@zonswtwl*wOXHk zqE#ruN)U}@z^a z^YG?7kLx>)Y(isU7kkK%;m>y&^LYDTms9rQDKfZ*W{o6~FV+>anK)&U>h=iDzJuc2 zFY22+m_k2l$J~`xG%b8BL{X3n*%f!{=sa%aZWKy;ot>L8ts@v!7pm=6Zw#In@01&A zx(@kGn=q$u--8HU3s@zHvdYs zX+rj3g5;*mF$28N+f3f(PMXN>BJojX_44eE5jJNVU`6i)82G!AAp4lU`FU zoS&)gSG<@pUj3x3W8$qC@^|l3Xaw%`n;Sj6l-ZDbr7nsHNa2@UJY^+!a&OmsGdW+6O1lbl>OGZQZy~EY@@8cyr?%cpH->bZo z1TOg$i9&Jh7@5U+R{gUB12$l$c4sho&eSNhF z2XdD?SS@OL#i&e#WIu7vP{J#!RwqW}|D-2x0q3t=B^7m3Q42G>@WGCeo=iD>a!$I+ z^vllx*|~yUw?8yEK(ADuyqQvGMY0+%>;CgZwrR{qY1dcq6!$m;jXLP#c$X0-Kh4+S zX#s^~J=cJ&4pjZE$D$3gl)%PwWyoGD&hzBRyT)gNo9a$r|A(5OOzS!|= zgtEH)`*YOzQKfHokv!Lb1ILuAyu{!>;(o2QX3!`g#I!gvah;@wk3;50nAVN%^phvk zA7RO08LtecF!Ptaw*fwD%LWvB|#+Kgx(fd9HnAc41 zXkMA)m7@D?q=NqAY#TVyr<}51(VEqp_A#`A1A2}c z9+S=9BKhs6vmeVnz6U!}RxiC>yQqB7bPXkozF!*^(1KzI3=~As$f{=yMq!`zQ{jGX zN9D*1&-@w_&U(djrF^Tzy*1V&f`YIJX~xQlk)>ZoNx!#f1RTUL<+u$3B5KFiH%2J7 zM<`m$Nl40g@61l`MNLdr8pLWR7r^@Gbrwi81(8zWX~>3`PW$N)Sc-KJjffIZ@HW{~ z-{yhAR7vNuj3j}oe0+IU*Td4%+nsA?T9+|nx}k&q0hdV|n+wtBA)CsT5an4w4(Uq6 ziBVB_G8z58TqrQI$LPF``g+RC=HAqW>^$Gd>&_-g8t<0tCQ;|FkYBMN?7f_Aq8hIIzLPis_xK{hEtFnOp#U7ah7xBk@P@&+PUwK;M z@B2)CdeAhenbf$s6LJdmJ~A&Wq+;SCsp2#DV~7mY-u3rD;dg844cMJI*nIsIf+HgC za{TME4NBUge&uHwcAJiT0O_BuFt&;X0CKMzM9wcsyT8qi5 z-ZMdMDo^GJ&6Yx`lqT;ZwO?baqoWL~{{m~mi&Q&LVdUmb2b+T6tZo?#CC$`nqWqe! zT`giH8`<&z6EOt#no}EtQlSvgI?zVwrkVQq{w;@pwhB#=Ru8mnJq@cHdSabhts zQ9(AAxHpho)_KyK>As(yD!L`Y*;@E?!)QNUtXEZV*pE0`x$-ODCMbfW>ZrqtY9b(; zYkJ(SZtV4zb?mS?yE9h~S?>P&kBa?|VIW_&{n&C914Ugy2C(LoC-Z0Ig7*LtdO{bY ztdPJ%*Ho~Ba6%WPCXhJUA}-&d4{s~Vk}T<+E7=AlB_mDrN~_+xDyiHvF|u8O5TU6` zzgk7&&qSg8^)Z!LP9&|_DFd>*mPRQta%cv^kY+dC8#wFClk1y9p({W)ir6wXmT8$O z-@!CoUftTiP<2IVuyapocS-7^Wk^-LAdPZ9dEQEG=jK}hh7s7bdOyHQ*$&%joR@iS zb5F_l_TRfgHR`ia?t(ooYp12Rk{yTuBEO>O(aJlg=PI7^K-3J}N2F?+@#4*NTfk*8 zawyV>FK|zaazD9_FnA%qI{MB7>MR&Ebcdf8%T5D45s2FCoU(*4i!Lx7G?SM<4Q)5= z2Eov({L9Xn8?U`s6}XYD+)#mhCr90`+H!Aj(qwkGk;6y%V#9A4A( zdVf*vp zjLVVAEx1WiI%+Xw0*HlR9hSL9?6V5Zp1W=b-^qD0eM4|Zpfy*KJs;lm9j&9OTwA;~rfb?X*}g%2 z@TWpwQV8jF3sz3^tU!Fyz0%y`)@lp$TLCeviC??ERu`lL2P1RE-CZRE`?EV}p7Ky*Q4vw0=HKsP6@8J}@2pWa6i!Uq->p3835mekV$ z|1>tMemwU;1#@KE`o||;&#YQm@N7#U}R}uln zu&D1em)JAz$WH|;>L*S)>vwtoA+Zu2_q!bAc?>3N*fJK>NYJ50JG?3E*VdDE!AJ$k zha3@Zzg5hLq5%!QmJSxIrA5I95O)jv^H8aGU9V28&n+1Ue3kIhb(tj)=4`!5O5xK4 z`Q|2^EB(1p^1SN{C7;b-FTMYa{I8;K9RJ_#&HrEYFGA?I*%1T;Dz-1&=LjA8_|OsH zfbL$1q=7bQ@5z8Bhf*_iKZM`(`6fyImL*607;>Nn3B>upidDVu+2j1!kV!T$^%qw^ z%`@6=U^SRqpp(}0Lr!;6+wl9Uj@r`FYg zEsRt~+qT&c0h-h5{XQw>Kj~tHtiREsEH<8TXa2vsX_a+5^*bVHbIXz$YPcSjv#65( z_3;u|<5y7H?@ay_Ir#BU*=0D!z#dCk)>Oc|ub2Q02Bm%YVY9vv;s0YU!+S2wQ&MaV z%X@2vK5Yt`e-_DZ*lijg{^=~E4l2DbWRs7w013Xw_ ziGFJ$%i?|Z29@4L`CEV_0 zijcsa5V}N51QUGMo&U44552XlcLfo({LQmp4c)*grRn?jXg_WQ54RSGZ#L(7u7saG zT)sFmq5e7}7CC(rLn1%cnO_ln2ccSK6Qs!6p_`SGcJrV8Dl`(b&|U-S;W%}~5Aa$@ za7RHH5eTUpmY{9Qo_=4$F$HLlTsIqb^9n5-mi}Ic92`e2mK6cT<%8axcBmU9$gMkk zXb3PUG|ycAgNc&qwpyN`ddn6e*K47ddQijp9C131>vPm_-Ra$k#&UCehoV5MC6MwG zPpsPB(id_m$Z2-j>RUtE-P;Ci2q*s0q?|)lFuD`S=-NT0QGd|xzp&Nd?~O2GBowXv zF(b&Z9>dQ9!4<7_rx}L9QKmym*;U>Re2T5}5y&+2-IMc_=V<1Z+2ywBDDj9gz993V z8_-$yHr~yuPfGHtC;efkw&346Ai}wIf+COdV+|qlmP7?eYMv;#ow|7!QjI2qI-1`! z;VSK$wcz>U;M_a`QB2<~BuYt@TA8DLdTV`MN-cMIt_`*S_=0~-t#mkkE;yU5w}LmY z16J;sidCswozT9|^D``~j$Gv5Lv!0UH(O{wg&!ix--3|JnLK4=Sht2QU`Lt)ZJ~Gp z5pEtRTQFa5U8213h!o2<&n=3SEo*oNib>FGO$}5_Dtv{Kn&QWHy86$Z1sq?i4oBPf zPH?+R3a{bhLhnANv&^$#Dq6WKp)fK7i>mGK238Q)pX;n#I_p30H#zxwsZBFn)YRH@72=4GlH8mq$K#duD*}7Ctqv!!`7XD>j+E}o= zp+pjeG!NX(eM_U}xuPX1U!O7r)p#{b@3#<(;l$v&Yz&@5iIAr){5^bp*R~t?$A=hc z$SOmi5w*^FG@shrDqqe5%_UXHPokj_Fig+WepC%k$E^HZsK+IYQu1v_D^1R}mWWyi zp&Xrz^qC(%T!H&bv;E5%pRS8)4q{o!7he3UZ2iEdN*pwk_%6UD>9|0QM%pVT}%rtKDC3L5UMe z>~uMdYKQt7iH?_tN5uNwDg4B!KxFQnqNkiLG(M*~z@#oPC+>^OSr&ZbW%K=`N$*F; z6Ideo=kA8*oaiXcGbs09@soeX&9;vR z`q%<{bz4Ek3%-2ubVB`Alu9pTLr8^Sfy}_B3#wI@JM?nTu{U`T;uo5je5h`scKdq1 zDbn)N&cLB)$|A73w@3qN_U^FF(ouS0H;=-chO+tDj3oD$f4geH7GA^%;utja8)*L; z?{#8^NgqSv{&jN__BY@*W8|qKT-*$)~#j6-1x1sl`cquwv zhU|V0VOMlSJ<^N)BhGS^6PhzYw9iBKN(3pf@{)-B*6-zm_tU=?yEKBL0wEP1(B(7< z65NuXTU+gb)H)MZp=NYdG#v3ICcM#br5)$mYLzuggO~euN;?yV!@sVHH zNimY_i_>vIGCT~Wpt2q7f_*S_DB8P`eGmZ7snGeU)2OR68yWM4TMf~7yxz%zc7QWg z#v1i&P!5e;KVl2|Tduf)^9rLDZ+yF==v&URehy?Gh3ZcoGZ6;ooD%VUYy?p?uvTA1 zkwEIHN3vf~ZKId{F}>ecZGKn+jUZ0%+OIMzI>JPJS8flp>DuTV1c)p%TM4{sdCC=Q z!xpr2+C5o-+%*Pkajd(5Ij^;>ru(JyYh5#dL8f;an(3sj@yXu~YiP0BKExzl`oOk+ zsXJ5qKVR%Kzk8>idcW%d0YL7*rLpP3leNg)pWfQ+EJpGJr;>g7F-S~0povov{cK?kHV znn0HT#b6K5nzFR-ROg$p-=KCcky>;FmBAeT0m?Z#6x+t zM|yEUlFc*HzB?ug3hks^u^tU`j1{zm+K?T`XRP3oBvlxa<|sIGX=-&QBa$qn8P*^5 z5Y;ZuuO+YffZ;0eek;f0LAR2H(kCaWqr-Fq0qE)X(7;4XFsCc+(_Ht82nkfO>i#>t zATqKc1;HOb2$@3o*R?%2m zSutu3#9e4$WMte;oIS%tLqi+;ZgK;UT9B#UwVm2^u9Z|D!w(PHlOjeNDRxmgY+Uc7!F_~ysxsZ}+gERpvX`FBoE`5KJFN}iA<=#~_K5@q1YqpW-W1+J)YjD%n{<7^ zYoCI*UcY|bfP?JIv%AGct=A=`q~XG^^xW!EvUIFpn_|5$g5f$-XGCFOV9 zp}TwUUaB%HJ}KyCWW((GDWb@2*XSL!(1=mWn}bpJN2i{>o8u+Be+QMcy$iVxziH@u z-^$3yaNEeQz^9iJ^uZwRzAtbXd!8Z_gY3g;>QAy1&ZgN?A?prz8ZJ*8-1dhx(9XOh2yCK-T(^n+$>tq<@ol`c%dHwCsD)bSa?U+H4>lVg z`0U<*8N8rssC!U zA3jvY$*y)N{Fa+5@#@tbX88m^A{IqW47t;Tt!5a~{d!VoTsWb%zV}!{f`FVHJ70Zr zz7943-j3hX(=#pDR%SWMVcJcWixjyyTI6^7jZZ;INxhv_T1p%h6_uTrC+Xu;PsVhM zlyq^Uu%Yb}kLCRqxJGzSTM?dc9)xvkCBO~g+Y8h z0%pNVd>!NJRcANU4%F5P%O`N4K|HduvKAfTef;=Qv)0W%2q~4+E+8j4wEC({EB3>O z$2rej+#c}pk(%`-OKEB*98HXum=)X2Kej)5Ekem_^`q(Sjolu;*}3f+WO;SZ2R7|5 z%B&pr3zEBK5UX%#p zM4}727798nVFAW)IIll@rmh}p($&)=<><(@(wk&ia(}>^U8l0&$ejO$5#Z1Mi>6i@ zb4tsLG2_S(B(xrOx;^s;hF zO6>vIM0QIZ1VN`BkUxTd&t$RrN+A?>%T|*;@oek%Nf4;l;zg=xXDfB6{rZmeWr8TsLwJ8kZNZ+#=g82$WBP&b@zZzYT$lh3H1+VMHn>}K3=F5L zs;a1|8L##xK_o&-d%cbnJ;8FFvX=?cBhOdA;opdO``FMm1%;Sy-W4AzvnngeJnCp5 zFGvbqSM=gyV*DZE!`j^es#+w)oA4XEyX9fs`?f_ws89uOee}weEAOMD-@tYGB*9yL z%R4t@B#`M6>!_jSItBtt{2Rk$x%I+n6aMutTXLz7Q~hAy+iTIqy}X27HpgD0psC?( z`N8hbdxZvY=Mi8JqBMiV_u_cOoX+> z{&v-BGCTEC!E|B;=8sTV+ky(*2@ zGH@3+;<<)~G2A&;WQhK=t7}@9iegSnOKWE>E5)es%~iPUKNhyi{@=+{Ob*PaOLE<& zB{CRKMMS5zyB;*O#OwQv#{|LtFffo}iFz zOth)S-dpKu{%+FsMK#A`tFrrl#$I>4l9*jsNP5{b7d*B0<2CxxV9Ev4#iVXyl%L4I zL$l~){)~T^w(%k`{$~bskn94ED;)d`k#>U$e1)Q;?3QC^&1({{o-8q z3oUwL%%1;utj4dC<6DA>QmdJXm6`YdeVsddCL&98UjOn$Bdgq%S%LlE2zma`68!H` z!7%hzxHyFIrET$TTa4lK9eyOR3-d$--(545G#Rqa|5 z8k&gXz18NvzCMMFE4y;7AvuZ+8n2MX_43TPuTpm`JLG8= zH%&{~3;lO|dda@2xtY`J$S$GBl=#-IMssewv9{CK=-2F4y2;Nj4jWv@MJsHkuOl>p zIJ9oCv9YlWN$W#r9yJhQMK?EosAg!0cy`@4dWEizAyYDiqs`{r)lMmbNqBeTelC>F zUK~`gi~OHwl6BZgFSW@|KE%cbFv>*Gad0Sanh4s>ArzAY-+uT&f`N%?G?MqisOY(h z%4Q?P(w-urlioS z7wWOuRCw%LK)Ktk(V9Gjd}TYByg2Rs#B-y@W$Q{miC4Z}ofg%}sLy57v9RL`&O2$w zB?p18X=!YM*w-6cp@BP%RKEVVH0nT)U^oQS)YJ2IYFUbg!{448rHS6VcOy$N z302wOfBJMCF;-!lGIqoHVDp8WyE{D(&n-DQISz_&)aA+s82{#M11+q%th~IWk&#i5 z@itV$U%!3@hlTn7GH;o04%+(QeR*+?@Jml;0tV=uV4E?zu{&;-@`yd25ng9+Z_j%7 zZWC(G2w4RMDFcHqN3$^Ja@Gy&is`_ip=U5*SfnpSMg2w%P!u>hIc1+bY1)}@w(nxA z2wr98;K0wx$w}aT6+Qe1IaNh;e0;2&^9=5J1BKAXNA&ym?^Ma8sb}7|{>#6P#m$Mb zr<=Q|n`C8w7b)oId`{?oR5+TJos9*(jw>%g0W4W=R7kiRDAi83HCM|-hg@`JSFq==?zsiwbnlD z)z-ego3OWUbl5A#vSRfLW!&8bAR9nBsP671@>)MuQHdHGG})^Cy?-JqCLI0WPY~Rx z=UaiTV(9xE-*ytDF3_oB=-s=+#wG>h zfPjIwZ<+pzp-~gW=%+~g75w9ecvzKKeSJN3`Kwp28UgyZw!0?k!==+&?S$u6k#}(# zOKxEZFnm@j1KYa#Nd_cY`%SSkgT0F1H~;&!LsWYdvkevwPRqslDc~S>m;m2MOKYnk zkT#OSz?|L z$w^9a?X-rXBK)$lGU}Bcm^D2M%QavYL_|_U!^1CLR&2cc{oDNazK6Z9bQ%HV-S;tO zKny@8P*ajRI#gcX-l>CYbBl|Nn2xX%{TuuI07P(=)BD6pQbvYROpF!+fw1e_;93h! z<daEMTj16x^z!tsS=59x1^d?@Go_NEpXnRdZTW-x?Yk0vxqQ zG0MD;iD68Zc?6pgK_ze{T-ul?jJE%S`~vX(rnSMW*1bFFH;_m&CT9sNtNYUL$j}h1 z_wM;ir#*V{g8X79NUV}u*}}rYVZ1)uHj%^d&Cx9Eu2%lYR~pQ#S5q@H+jLve5qY{b zB#0u@9*T+&{wL*|n^shyio!@Alw902|&F1^;K$N&{t{EiaMiLyU5^m zvvj2sHSHZSF)>b}M4rJcrHT$O7Ahr+?WrpDRgo7$nfVT-v%aUsrO2|6yw;zlTdu*h zj?R(3$f5cSD2vv3?IkYkBl+59ySDHWK�uxs7%AT_*?$!->*YB&2P9VwY4YUVpGr z1bOy++m&6Q4Ml6B&y_FnX=xvfRK0tLV_r6ax8FbgNEN0Gn>nq8xqb@S^zGZX`(W9b zDF$Wj<=LLc^!t~->?Cw0ZDlswU?tdBz=_uRJ>!X#GBl(Iuj9U6UvICpx;hCk=GZ5< zO}i6b-+ubRU@%jmqqFmomewaXmEkof%{mVrBV*&;n%Q%_J9q9-2U5Iz`Esr$gouL- zN12saR#CC7?r_HPP?MX(dZHBj>eZ{}Ha5~mMqiI!%8)U{B_ss@{Q1PZOv_$2u1@fo zhDH!D+AkpOLHdKnLRA)c{N6T^x#e7Xdb(YQzSzrrpHh|~qIoSc0s_>Cf}4c{HehWA zzx*->e+I0RP!xl}!otE2GDowPkm0kL3I-h#Ht*Zy>1X0ic*Diw!H+M{Jq{6gEiJ3C*i=e~tdj8PH|>56|4w*Nxw z+Upe0&;W5(NKhq_{n$b0XKrrKRaM`B0Q{Plhl4;3B{r5=K3RA?$MLb`Hs{#%)!(-1 zd?sJE7!s3{BXZQTjFx}KVd3Jo&eVBEB_)LmZC9crT5hl)J`1}OichwVeS#!?|$lZ#vW7&vzh3T<=r3MbL<##A*c@+eQib zDEsuOgq9Ws+9=Q7X^UyZj0f3%34~XV`G}a zAn$hm{CVu*QQf@pi4J&A#jKAIUJV?-U>n{=0z6{tT3AYTaZnAo^D z!}bVj#OK^Jac#f9y+X(@-@aXk&29QB6{h^+MTqN+`!%Q_|2Cm9Ii2Q1T-@9Ke&yX) z9-uTq4l64w`|((g&@nMddQn_OWGSTts^*kV=oSvH0ooWl66V$!7oYmh?H(RhBxFS; zC(qD_DapzPx5hk?ab~@LKd%|%;_qLlp`ju1e04@TIs}|)2&ky2=n1(Pa=k@Das`p> zd*QzO`h7(OpXl)tk$oa6i=RJ#PNFoh?;!%{_~glxmaJ6>`h~L|kX7JJN?CC$CJU3_ zzI_`p!Tdlw_bGTU>KloLg%5y0DXXh9k8FMa{tyIKrBeZ`vyzono?8+p84hrr?Cfk% z(6z&}&$BfkXucfPw6(U*yEdFsgD?8hKGM=xmk3Mblel(L_P1|@G7eLo$U0d$xkn}@ z8I^VYmKdeFH@bfQgjGlIYsjF@bwn{j%C_ArtYx_90rF=xRY?GBC8L$eLwhw~|3ile z8PopzREeM~<~9A~IGB*8nzaw)H$U@QQygqhhebydqD%;YSkpiP!-A0f5buZxDfF;X zKGjrZ{wYj5oggp^c8*t5!osf_lKli{ft(l@0fr>RH3_azhU&N><=iU0tZI08_=0ax zVBmr5;saP@Fpw6M8{qY1IDzbJ1F|CRBj(uJ0UqE4vec8{17b*3i|sJj*n z^&IRxlwD|IViLcdF>+xFb*Zcw4hF#3$btde1RpsHkPi z6ZkV3vLOt~lGzR(o{tHUL~(5n(;L$08W}MV5)nbwE_Oxgxe~_+>ww}9nybARM()xI zfP@Mws2zZAU^4b@eNp_i=H#|jHadqyMgn2&PUO1@X6)Mg?AO634>0A}|He0*U4?l= z6AngnvEidj3`nxnk|#g+h$u zwz0mB%9Qu-@#ATcOPw*W<>j(Sw(j-~oVSnBz!XYS95w9ylfY@LqcMku%0)1xpT@I0 zSL#LA{8cB1FfO;54*mW6x894A?9@~=@T3Sw3$EY1*$(FV>HeGVP{LA+ij=MBu*O%Q zVz7N@>G>=`L=lb&j>`8Vr~16SZU*ZTj-`V7`kC$b?>l2y7y(#e+L|>kZ18~n@gEb! zkLcS^KMRsXiA1cUk_jxdT?ia>1UShfhO|#IRHxb|ClmMPPoiLfVc}~5%0LSRG#dQ) zl_tYhUbWXNlnO%VogopkydN-lz@V%T()fY9%S%h*g`<<*Pt0=b6_Ny>*RqTK>0s17 zZCc{ouH93FGhXs}8o(?C1O$xe7A=~BaShQF=Pxrp=cKvLdh`AK`EzGg?D9ozgC#cw zD{&}Z^QTUM(E?pZR|3gvcvL?=a+wL{=`XE6T;KPg;$ zVY&L}*C9&b3&=#h+#2+reHh=WPW|!)0c#`^Npq`Yr_>hXzIHhdpdh$4G9Dg+q8CTT z+&nz=tgNzAraxovASPD4u`aE+ssr}|TG9Hp+Pe7pY^G8Qd*+>rVId`N8E~diNLQ?vk(HH}lYhq4E17f(d2cjy;vu`$#?Bj$b>2L>wJbJ{xHL7t!E3IPd8AgYeQ6*sVvTMP|B8wLTbR8@_xly5~DAfQ4@OH09@ zz%McFAq-k0At7M^JpfOCxB6wVf|S(N zKY#wT;H12M{W^iqmZqtx>3=;Ns(T>I5k;1x?4Vad>I9mKp&|p&%z(3Zw%l|zK@RF$e=g%e} zF&vg7_c@PHPyQ#_ihM79K#rwnW} zgahRN`RQR;7atb*CMXTa#LWCSUtOYbl#!2bbX(w}@A6Cub_AG>s2}W zCLq|SjEjo{3Ip6r>dBK(sdW>E^_29w+a7g#IFB?YV8Qc_aX z6lWm*n}C&ssiaAxnLqu0`|o}1#^<2aFLon+gD>jDP6TXnxsX#qYU-oS<%bmE%DKZvNO+PYG&HnDulOPW%u)$wzYpMQ6Yky$Z z4TXXbB4TllYUsh=dOV;6$YmgS*OL^lRq4#oXNQJ`HAAz7O>gh;FbL(Nf8dS;NgJ`c7NALXhJa=wutH;n~Xu~aki!y-T6^NxY zxJlqjv>rl+g9+aWcaThXTfkvcq0JByWqLhBANcpVx^8*$;Ke=VQxj5jm0j zU>@YE=M!p-ZFhR}^6}Mdk_}Y|Xp@3trRQ^O0+R2qU5NRY&W;XL({Opfy8r|LE~1?>L_g$eRlU2 z7*opH+Ln$A?2tUDJ%hRp4~;eWib4GEK%xD)=B`kV`Xn_q71FI8#`|U10=(Do<*s-} zKyU~~FvOKabzj}5nOXMv6z!-*089emRc)05 zG8kZmy1!03&og4Te$sKOPEpmjzrWuPhyp1L1>~cvtNjU%YhDcZoIlfiW+KSoyuAC+ zxZ-rqD|%96SK_GQVDM&zUD{FB>5ui;aK_2Req`!5(wJEJb@ z2dYQw*-HzbLfLjZS<7m@x}P4T;9_YP;(yz6t#u`@kqjScY{OH(rdpTae zO@`Jx;M=#mVJB;yCmz%2Cx_k@-sjerbtenn8ljI=SGT~PZVtNH4uE98HgKDmloUD< z3_Lt#lOn?CAwqA`6ZO1-iqw?&!|@BDvZO3bInWT$dcucpY!K))@tkK1(40O3<`)7k z3?*U*=t*jQJq>JCVZ((W^dM;vKlCsDkWz_wppGjf2skopX=_8dI75$rpx+jIM-8P0 zQhZLZp&)6NniBx_+>2P&fnKt7IK^#t>C9i|{X;_mchoWw2$X#_2Tcem;0<5}V8ii@ zqtjDkIDMgh_(E0nN|Is_2x&NCLXzTpApkaR;Fm9SD479k=kD%)w329RH>&H3=6Ceb z_hK&v;8GksGL*IMb-Gm%92wc(pDHoEm*(^)--E|(#~^DXvu6C8zVA^pt=;m^TlZgl z$ADe}cnytUwAsU(Qq$8hkoBkRZ{EDw>6f@^I8|xizvcuYK{}|q2#yJS7IeN2%>ZEF zEg4Va@$vEfCT(hP0XvTlCT$5IV3(F&2E2W1_`5qG~GIy^vWpzvG;AOq5rz;Dk0 zM-}{luyXPziusCya|hZtaBj|kQ{sKTAhd}!Yi9EwkO`0N%9ns)v^alwgXds(apvCA*2W+zN(1Z8@9~!voWj?aN0FD}c6J;f zD-0ig1dHT}{3mYgG?_?g7Z+Y&)0~bg^4)Nh2y}V}#H1LD4&}zi2Am7<1EV)Vo_Wf7 zR2PaaI0BLomv90g5H;P4i;Ir#?f}&sVp0buCtXaRi^Nk@z@T(K2)oOMI?u?k>fXa^ z7gsRJY#ct4lP!N`zJB`&&0S*7Rv`?!*0K zulf`v01n_xo>TbW8}L21(2`H=4 zVSQucw6Fq6VOSyiKTC3;ig2J5O8^A|(llZHgnD0*J-!Bhkza}C2VO4Zgyp8f6+h_8 z0h=Cssp$>Xw{7&Zs5b>{FqxQ-@P`NbcnHlR12jF4wcAU}%jBLB5wv1>;$kU7c6s0h zA`mp5o1BZgJ|}A|#3UpOAuP#1KB9$1IQl@Ps|xBHcq;-3VB*jKRPuMD(Xh=d$!=FH$|ja7!2tV*a&(}Q02|sN z*g)FMSmJ7*Se@6g%*M!Os4n)|L04R}-0GvflahI7^zAl%QexsSnVFby4xyoVRS29p zCxAiSm5Q%XwoaI6h0H zDx=PRK_6$cc)BE0m!#aX>DPnipBhUP$wzgb0FI?)W%FVei(>E67EqWBfKq?5elI4< z!3T*)7QkTj6#cTn?N+(CfADCiSxIX4*?R#p+)OkDj@`Ravjc#>AWw6=C) z=TJK3C6%AxJ7RJb;#%z@|;3|{W!?BcN=v6_er7iL~Kd~8n2k?f<2spZ8HCc`e zycw9(Z~Jf3V6{0oIu?5!JAk!n3@byDRTdW?zc{EQ_EsyOcZUCZJjYd!!o(Siu>mv2 z(W+fDe#q{{zdHVulQPYHN@PE8UB8NIIR)aBY2lV>OAuxD z)vngynwFNPFfj^tT%LXd&G7IrbK&wKyUJzz`c&N75~5XzWOW5_uU#rLQ+EM6hTErQW}(2N+bnAKm-|D zdPpgeMiG=!5$TqaZV(X_nW0-c1!iDi;9T?heBbl_0q-yGI_tP}E!5$8=DzPM_O-nzP% zLgf~DQ;5bg2Lu4~-TAW@;4$#;=cT1bW{?PbdtdfT6y)TJDk@=p1J~A`B==Ox?jox{ zd^iapRwARV^pUrwX0%opA1~HY9hVFi0>U5(syYg$JsCI~Qzl`Wu+TFu;?6VO^YtRW#G7>GOqTSF+7n*0Q012CDeHfS{jRSi@+rF-`n z0HglHD8hANYJD8%lLgd1A<%>xcIZV!L;zE}0KNgvBk{&3-s_;sfk~9rD1a5t5AO9n zQy~rzo;84LJA3>LF0dAe)OiIbgTC zxXw#RpjH`~5yee8tW`V1-5y|QEc0BuZ*BU?upmZoVz+&>Lj3TMO8gfJ72XlW#AYGz zvPTyT31FgP7I{Mj3SKibd&n7tLo$*7TK1<;yg<8y9fz<~m}4Sf9WXRQjbkOQgAMTT z5GSO2b91wkZ1W{TMDpDBf_!qe_{;!+>ah3+@DyR6J}dqzBXo%l-^Gf?5Wr(i^nRG9=asc9|C(kpK@s zrXzXBMSXa5uu*sQy`wgO^0MzRT@bL)EIGm31;-ShoE$;TCNTvT+Ezex(X{kzubbCa z8pRq0OSAh`i$wztz2ObAjFKZTz4S*8)OWho)YN7Z)HsD%c-~5Tz%niqW~DOgE`q(P z(>m}NkL`R4ir_D1R96gJgl&coDZ%v$Ac!bMzAoX-o5&*5YJyw12G;n^JX3s4q&8C^ zV1r@>?Gj74%tXBp)uJ+QyMJPh)caiT8F>vpd8^5S@Ko}sNhTSFb>~S z5E5P%C+QOIuo%klxse5I=mippV;Eem_lCZB2of4B!Kw!X5y6%TenCnQ7q~&&fp~ZZ zoH%e`F&j+MK7aWbDZ;k)HI;O00s0XUv<_vku7FSz4?_f`HzPE;tSn++u|=d%1b5-* z&tf16!#__E9IsGlK|e0@Kky^~Fc@K3V>%x-eIZbQMA7IJIMl1ARa4+d@o1fVx4^Q= z^UqvQS_PvJGjZbW>{cLh6JEc5T;AfMtxXefv~LU7`Owh70bQl#fw3-tT9Y^A+RQdi#5Ji|V)u811>e8;$(1nK1qV;N<7Y%Neu)ikt!t7*NkN zFzz712!~6NWYTY&`u3eW zgm(r~GgdmLC@ZUN8V!zuaOelqU^?%D;`4lL%uGy7EJYJ-3ZB!CdU-tu;WQk}n}{uC zs(+t{d2B^~7VKCe+6D~vpv@W^GZP5!F`tEWLR^5(_yU4-7D07yh6=KdU`=;Bgd3(t z)3Z!iJ3bdS>jFOk0U8tFBTRH1pt`|OL#wFpx5J;@vF+bSbM6R%MfQ12j0(hx1Sqng z+d)u(o0?kfbG=DhfoGPla_$2in(J8Zq9cQOrzD#WJJI;5dxGDSn*Uom7K~Aywgo`i2>b5X zMI7R(PMJS|Ul{gxIq40~vV~xrmdoKe`OyD?247-8(~4|la`uCT;EYjKUSuhzJN?R_ z1-OT!ia#FHufP1A+^p1aM^n>%U#j6jfa+epikw8s zWGlyB>SwNBP(41FGyl(VDdr5k!Q3^bJR8z%){963b)`T*4@bjp9^eel- zZ#q<+W9^E3f_M(Uuo+87!ijPsp1!-}T>qjd`|94ZyI`!oy`!{h`7f@g48+0;!pxU` z5?3El@zM9*&?!`?^8emEQbB|0m-_ER4-`b4{F@&XGN||@%dty6k@%iG72baB9g9(Yjb% zxkmaPR5ib?U$4lourSU1n0;~DSs&R|)$e1BY_MLFVp7uEz!;nil%qNP;JWJSOhIyV zohC*6cUjk2hHySw*N=KpOc?PG>Nch&4V8Ky@LRYmQv9^EF3UbR`2XG)`uFSWEn*HU z9JS?iV3CLgszRLTR7}2)!$DeHr7b6-Uz|Ddn~Wh@p%f|O4N0u5hTGIW;}lKy)BXW2 zVZKPSO4SG(Bx~91!nx!OFI2Z;VP;PAbMpQ`r%;|e+d>8ObWHvwRK`jvMzaiK7RA$} z?c-#)OgXYKZSJOg_kQKCS!6Zb+!|kd z&RM_2dad>xVnZ6PCCvB0XpBfU$;l=Yk;KrF+BWaa7EUYPXj$1mP96G<>PeT9fcQ{G_YkVt*$@oaaH;oD+{?Z?V(K5 zT^)}zIx4AxG$S z6bW||t1e>q-e$dA&EcF|ZEt^10-sFb*ShD&Ub#Kv$v^uJ6wF%xHe`(J(yhdeDxs2<;QtF@5$O}cUJ$>x@@ z_K8jXLIt8IYU}{P%Ky>+t&2u*}}B0UkDL)RDM?{)G=+0#5ZAN zE60gR*ITJOsByOOBPF#5w|y68NgTeNN<6#XNZ&QvO3kZ_G>K4Q6Ox=G_3-sO6L2)E zr5;1A2v^QdMbI_=Wqj>ata3CgsLr_>m-(8yt6q6jqGZ6s({k(6eSL)N2IbRtZjbO% zY%Bd0`UrR9`n;;i$&V*-BfVeq+TKLPj_bY}Q*x;6^6anpUA1gfwz6^J^bZArUHy!s zw><&u8p~M`RfE$5v&n1n-}6~0#uS{+ymqP$Qfe|=+VYs4J-OL4(<14&PQf{0h#06n zH^v@)wP`C_oR^_&(%$WZ`97^El8Fp^G!Kr$E1J*5$+0IFN?0b- z=%lVr?WHr=IJQt>=Zs28UR~qC@X<;62(Ap)@D2^0A-xeS+Z=~N^^|({Ife+|`ORa+ z>0I1Xaa86WN8axj>-=Yl{`OZ{>i7uG^Pj3c(Cb#M`aMxhX629(Y#C{Y4y$fLv~D9; zkp3K_a{Vra-^&%#9{dotCtWR5ej0Xe&3Rt z^sG_c&E`m_yyIoW8vY1#{nUX^+ltCUw4M3|^O}0MR~_-EO2@ZPA!4Q0jjKD<>4dgb zw9EFtuP^Yca1Zsf1xn|7cJHIuiQVQU=X8nBDJ3Qmw$VbRe_*C?_u=h}6a^!`=~lMd zmIiF_fEcS`uA(v}@elJ~g5y<_|v5@$Ys<9i&xL)f=L1Jfvt zqaGYXjuFk!M1jw7%}wu}SeG&BcCLlD#WT%IhJ}0iWuq5y`ET4lfA-?FzL(TP-MU_W z&d(?RtaD#n>#_;Om2tP0Pb=O&O{`5CH1l?e-8+?-a{^)RY&U%o0gRk?s4EU^kE=gC zmThd<=qITdXDDgn^cpLJ*t^2c5j}lufL`l=hOaNXgdpdfnBOB&IPy*7>EWc(FqA~Q zpY5_A;czP)wfgA2AT#+%c4XhPvL?DdC@qb4+@W!vH#_T92{ z-RA1Lw7%?(lhrh@XWGLWPC(m6t67M(i({i_Yr6YV<0Fh~B=+28*QuSe4#zpOOg1=` ztm7+@(=-Y@LCx`x!qRPGP45U_`pT8x(Df<-=9!GGZOK$t76)M~V~WsUc9+>QO!dOmH|IiKG}-8WU*#Kqu`6&5`PG4KH-nQa zbZIM?8H;|}iIaA{8I^5%?O|VYn<^ zpmc?55x&UhMU`IXBde3g2a?^>Q95O!5o;NHa|V#ndXY>J1#QuBUrLBvA;M}ro+~&7 z9;AW4B&7awIG-tS1%j(ry)><5BgtHVr)XdO>B4%IpZmUfx<= z_x0OT5~abrkwA35eIPq$Hem2d++C4#F$4-v_xHTAmBU+w3a(|l3%hpq%;vrKQj1EG z$XFASWXW3sa3z_i!nnS&_35lIUM|>xvbUD5jQm>b`aESw57{?@c%D3rPFSRJz_u?u ztelPYIIhu6t9iGEYGDxCZu?Suw|l~UA`clP^|yjbj7sC27@~ydxDekfjA4Q(t?fyF zE}4IX!!;vur9^~k;pLnwfx4radume7X>#r{D$^UPsDzHFw*KCjk0GX`me)$EfIw zEr>F-)yX|3G0>F)(YflTpp;7KgV)-6aI0Mw{Tk98DwdLD@J1t=f8&n4CPhUZhd=LdEz1kh*08FS^n5f^M1FALsX7{AZeczX-HC_CAz64Wn~DX0ew{zdI0n*>Z3{c+ zjUg=@zH&aZ?=v96MDU?9C4ZZhH!ReZ=2OqkeiJG`v$_!D{f0|B4UNrsJ?O=4K9AT+ ziKI}dLz?v>jf)a+Oi26w`?Q}zXCRf-^>A5*?>RR7&<^MTv)85L3~|z3a+a2!jHiE; zytaGdVeAu6>v=V@g_BH{DKO)_hJ>Yh`Mctd?eK2LVMORyThcDtRFML+-TC17K}_MJ z1LQ3e*ropdJoW63&ve0irgyQaA+VnS&c-Eg-Jci=?r9^w$|-ttIzrU`z)5W7{wiA} zFWSYEZENf!xvV>qnRCMPgjzu*WB}vJyy}dCZMU#wyHvFbgk09on>xnry@&DgSBQpF zzk3~2KzLO2JFr5toUO2+ZjlMo^4?aT#CFyvWXTUGw#7dR&T7&>_!3!|HAzd9)aOvx z(Q0tRqk)9aru5XC%v^SfwYXgY8q8r@)uB5}iRR1H2j$2?DiRcD<570tjGv788~*B= z+`d<-CkdIAT5_7mUaoYYmqDs7#@p?d|s(_%Yv|AFye4rSkcL&^&1_GV>B1YT6W z)cJu1a+0=G?T#k}{DhYP9d!0#=H_~#~frN7cg^iJQZf7%ab-|G1)YMY{ZE}WD z3{0PEJW3g%gFY*X!=G1`v#b-~j3sA;<*` zZC;R-LD=|>w3dJgJ7eKr#qr9gh*suRtT4F`HN8uI4aEy8@eNh-k!E|Wd3&1{brr3u z7e8G&69@?9U4w5!ICQ`S#y`$~HR<1RY2p6r3!=V7wgX_%jNSe!CZ%m==hdxm%}ca5 za8vyLNL}fEBhT~X{prtNh`Bfhr($TYVTR_V1Z5L!eYtJUe57}tlVi8V^dp2;;?tkv zO)j*pQWJUmA=8Jk@h~ZxyrW8xd~~f$f96j-=RU-8om$ohG81#BWE`34iVk|1B(I(F z{sX4lDarywvNfm1rYp&f3LzvYDa| zPaWC06N&~Kl>H{J8kYRx*7}H#&%H?bu@cBnr4Cstll@eWWo}c6hWxOzl>2e~DV1x| z=vS#bg0fO|U9WCX%vd7uNvO*68cT6mgZH7>&!Twrpkoo}7NK=?9OG%WSyQq*Wh=qV zh4`ukHnO%YB4(t8BVma^$9y;Y?3DjpMERMPiP9N{%Pj~Wd)bDH@2kJ7MtY?m`RRti zYt9K!w?Zj47AH>GG{5i+-@vma>@U$?iqcymf;VB zAwMOV+2OC>{#z-ES&H)SZyR{31F^9uB9HB_KBw^POI|kJ&WdOJLrdg6HCb%6^qNvz z2L0pu(NIS#3MX^Fr~}X~dl718_b_U2rW$7(je4XyvoU$&O<{^C^nuj!@Tsk}%7*pP z%^!~M_i)kj&6DTOcSKTFt(g$=91*Au*b1U2!iyqxv-5_WjuCx6YH@QuA!MQ z2!uiSLzv76XuI6fp#sC2F*zEv!O8UkhQJoIZShp|5=y>rn@Nwf0@L2iFiNg-sF`tD zddR2CTwEzQE%8n#9mZpu*VWWLNXaN(yz5P7&&w@~B9gn;_VlP<;vTx{k%u3nSr(;( zUo1G?(#&mtB6tXeN!FpL$v@}*)?a;=iKF7v0@v)ee*S!1_?D;3`50T@qy8u4(tBgL zLEQ~~Hlr$0TR$_RPhDiwOHGS8a&o?E%<|Iqqn%NJKuR$SpM9%NuEd$OvrXPt@OUzP zmB(93DcrkOsPT$3VRj~TY=^!5&4|Z^$nW7_c$EwQnnQsq{54KtFw1RUhBM2H2ljw$7s=-Nt3Uo8pk(b?rrmy zJ*q2|dp0EBJm-5y?_ufwji27$qa*{#!}$kTALd$+cr_L%n@rH)e#8$u&I|Ml+#O2P+b2g6loWjOlRTG5KQABqs~ ze|CaS5h?9yCTi8_B$5oMo?>3;kQw;cWMnzqPENq;FOSTZe#^1VN4x1!D$>~M;2Ua6 zP88T)I>Rr%CKq=)=^>g}n3+qUBh*U}Nv;0%3?5<8i)c^IxladmUi>NV*5QP2Y7S}X zQM+Zp2an18l0V|S8`F}7Z{Ihs-o2@=zxSqSm@w$Sk~>wxp>I8A(Qm>L|7{qG3;{KJ z2RIW?nC7-`IMY@v`&X!zLuihS)ctHVy;aIDT0TnJ>A&@@-Gz|C%<~*!YZ=~}Q67iF z6^UdwFK@Lf#6Br?usX%5McwuQKHY_n`$Y3A=H#@_S?F8Oprrweaa}%Y`pVabr?m@Y zT#A=2!w8kSFlL%azvf(?PqFKa`91mGqL@2pk6vQ(20#F_K<=FoBxzQ5*1*hVX@E(q zffs2IO$~Odck!#}kh{i%k3IVFF#!GO7%tzu{aGP)aOY@sID9tQWzUR_v*A3IjyAa( zj67Q+7S_7H+ubUwd$yFQz9^C5xL&%d<86_ztRo3n7j{qq$-uUVgp zjWW^|9kY1>Qd5sCU)WCbG4%F?VpOF$Ut^~xE~4F&W^>tUTdZN(~{~Zr8^$6bYzEmyr9Cr1}}59(Ya z2bJHO-tcH>vJV>$$=FOxU}5skq}oO{V}?szEM#A^hVvS*!CBs#7r2~E%Gd0gX~R9E zo_IDq>|jJ}XVU2VTPxdmZmdfAugSax?yidJBLaHZkEE!*V_kL$NnU;*Wp6q1pKKq;ag+$G0gJArD8mOBD`HRNX@*7|XR=8Zxh zup>zWHr-$IDp!~RV00}HQyd<4Og6ryCqh=Y zE)eJk;E#YgZFc;rcQ~sSBfOZ3ryAfjD<`6rGPFQ!0KY=ODd=q>)*Mgy#s-w+;1I{q zdL){w^F%Mr@X^uI)=gswU&t@ZUz36lIOB=%w%nrtuAV@%(B$L{I;@b}xG=z0R7|NC znLJ*A8ulfqD_2oC}(o!GP#|5l9!yK5_rWWh?+QMx|zK{CQc|t z16v70nsrUSL*omtMnvoMQ%5@#rrze(voWSSonb?MYjg7cMGfC{^0$76y3~t22(MEp zaQ!O2d%*z$vD!q*(W3e0%vxCWyxRNhEC!gBJ?|*qPFztS9**V7qeXpBn62{CmuSH5 z`iZ|aXR+B*ZKi)<%QPYT>o<10KXKH<+)V+w+^+~K0gTA+;ULDcg}vpDc_(D8zMNi! z65N*0;#PS0<)^@^kRwOtc8&Euh?)bG$A3G9_chP_9#fyqMU8@49S~q_mo^An@czJ1^Mv} zUoB5W?k-57`tK=n&ROq=;gw;`n|Q;uwBE~2cE)tAY<&C5aRx;w)^$9&?x=3W@x-Ne zqrkpL3cyPP&s2KB^wNtZHW=&Y9;sL=hnCa{g|WA@>|&>B`^YU!f;W@SdLPvB*S+35 zXNC89O-I)V@{{*SBX!e@nfWr#TmPyA?O{aD+N6HC!2OmkO5@D;O^?gDloF}+th4tH zT8}1`_D3{XKE+HOQDubhs;!Iocn4kd?KXO(?6Pf4d;ax^b=|_7b=?=%?(=b%nnPRG z8!7r*;vZ#Qn7y^BY@b^vl%)m{I~B*!Hs;SV$48KD)SS3N;m_Q9@8VDY>hP)TOJmIK z47*surH0GtcaC?Byt;^+*w)qyHm^`=cpA&7O$f2A9yn3cb*K{$N5H!%56Jj1iJFM; zs=&ya{6{&Oymw%$`&Qwkand||qpUpq%+PWH$lDba1Nms5ugjjdCd|!KQqP>Sd49^m zz$`d~^H1p;m<3BTlPuTRrRwE2H%8MkmcNdUjxLWd3ZgO(ypg8s7Juh(pwZDH;wl%k zUoV%G{S4O%Q-*I#p(pN!$yGckwU<`jym_Gdq|n6sCJ7z>x)T&N1dNE}p&b=L0K??#aYDfHC-7*+^-4?3>7q?Ldgy7`r?zz1KgG z2`?!3KWnu4*T|j`T_v+Cd!Bb^x7u!}IZuHYGoK2w?7lH_9)!-2^BVIU`J_i~RJnGZ z>po5tgC!4dTt(F`EX9opC$`7W@qwD*XFm2U8C!4{Ib3F849M0{JE|FY`42-kS`(NP z3$aUEy?gy3_WBYsjYsBb?6D9EVpGfgK{xW{tVb8j3L7%YFllihv!cHQrP~HI9g>Sl zdvlri5N&>w#8Y@$4VCn;Fel2!1HGVjxpHX#sUTr--&98VOJbjIc8rB`e`}H=XNb5> z=5W3*{wOla?+zA^h{pB%?zxECaQnVpTolFM zo0_?eM+9Vt$|b1v<9>hel+OAGv5uM6r5Idn<$@%YhQHBIDnC==w82HS6xK>b$Ccfm z{60kQs7}u5;Y%VSPQLsQoG|9rdrFBufrLuqH`k_W(mzsgd%W^`>)=18u;a%}rXTpCz tiTA|67Ajue|NR0iJpYfI5PVD$>hcu?Bh?G*_9ffbjzPwNmD)0S>&V}9Jo&> zf4uY{DekU3rXCh|^Ec*oDok7{I>ET1h_tN z7$-{%f!Gv4mX&}DvMXfyxj6#)1WZm-17`EDF^CO3I5@Znq4@XP;+*N(1BUDBK>zE}9H7gj3;(|S z73^{Q z0(eVL15$egHfrB2*x8Ie%WhoCxj1g{Fs|ncYrPl8+A{6qtZ^B3` z*G!-FPTtZyPLM0A3VnZv8|w}1lVkzz)dOKv#-!VkQ`PCKoQ}P}PecBJUSP}Qk<};^ zRXd0(*I%JU2d=OVScaeeT2ER;>ZkXeG}_|_Y%OFp`VQ>%Qz%2D%VtC@Ub&T4h#cm0 z1fH3SkDJIXj17jHYOD1=*Q`9WYr!YC*@*r;Lb;pv#lPLYg`_Ir;nU~8-M((eJ)x(M zSQZ5z^@};58C|7a<@prY{tP@GnHC1yx_$6_O}T%j@w-$c@!(07wYF?gm0YjXHF4FN z)03mKZx&P_4z(GF{ndFic=UeA^3qj{W{(_r-AqGV(+rqyt#R(AxPXlIY}mHq)T)AN z0JDc*H3y$s?R={qM3ov#Jxi1Yv-ckE2ZYSSqEYU3sWetr+A&*-js(t_{^VMjrLNBj z+cTM_cKwO0ZCXPV)V)1iq||B#+bmP70=|2vb6Mo(zjZ;5U2-e)VhxM&enVL&Po}kN zXgOUaRzgDfqLcEZ{<6RwzmJPMJr`a3yP$p$HuWTA6MRyOSveNd4qR((-+)h(8uqK; zMoS9aVVxLL@rg!M5izGZjDNItjuALl#?RBEd?_?VBB?FQYs87Z7I_EFX_1-o&BI7bLS0gA%I0*KU{MIZ2OpTa z1qn>1xj9|m(j|UYN5@^TjwA&1V78D#4|{5YazX%cJ*C4qZUOqN1v(7ueo zqJd=Xx{2CwGdYCrXi70p`zAl!b?2agpr^g)W&d%>4&|2NV%0{kn=XH~uFrG89n;9* zK|1gq3NPixr)jz7jT&P#!l4lj?`;Ls>J^^LdD?PH5a42-NeQ*hU^Qv*Rr0f9XCV1K ze$Bm}k|SmEkWaAHiY9iWRAjH#>&wDZ*#wF-9%O!Idj~%_~po(f&5m9bV zYC5QXvenW0bU8%+latlnre-wSZy^j${+PEop3UGQ2%h#tSARxQZRj$c$#HA@iolIM z<*V~*A$x9&LFB8>2(2+9EYH-dQ}wD}XTqkV_0T3t>5L8TWs(_YG-c)+TAy?Re)W99 zZbC0rkZy}V&wL;q;u1{T5Ru(u#aT!qYFtW7>L@;Hb7cCK)pVP_x)~hpfV?1pzdlhH_NP zG-_ZC$KP@qcJl6YPHc=WE%(!ACNkG*kq^xISaQu5uIvJ-zxYyB4j+&4igrK^oA{!R z*QU6Y9`X+Z8aZfgdWZ&9ANO0Qo_G0($+Ie5ISqI zD>mo3yz40;WfXE2X5lCtu;%jtA;4p56o{|EoT;J-t5kId{W+?k&uU=(OW$$?m-4db zc+E&_GX0L!LFqK~L4612-Pd-jne>YpRMY_=GkjUVApo|gZ|1({0)5t7OYdHL){-?t zJx$J=1tM*ag-)+!NM+yQ?@d+ow1sgbrNi!P5sbEI#tOqwDqIlx)vcrrb|NgahOxVChrduypmC{bu z73`gPE#--B9OZ1~=@!XrKd?MXoHRXqUvtp^dgPV)Nl{i;~<*QOZ zA}g2_tOXq#sr?+G-HJYJW`kUBM7Q<*+oz##HjYMbg@k=Sxe1R->reZH!1iFI zGIrV;D>^s&NK6*T>1O*vey3c5b#iv?voRKgW&6cbG*^wfz+ARozY?&hTYYjN%4?qE zOcPn-XvrV6I&jjoHHxBEF89otXEj^CVbBcA)M9CskZYnnSb^Ea;`{OP4 zZuSXh?(Fy;NpDgdjJE!8BtvJ@tB`P&ipp_?SuUuXbsWNj$~R~AZjo;{wlU`S=7Jkmn36*x|qSvhnWPxOsD zri>Ut?&8=TMkKsG9tmC9OFp5#o?OownJ&7lm*URb$s|GX^gnp*=jYuVQyF^FMx%{V zgpIB3;&OtEu#NAbwjN=ooR~PLIgab~H8trP^3cvoTH4EE(A>AMIqd(30#T-oA8c?q zOz{1&kYSjiwsO=Ufa^ZZ*d6!><Z_4?8E_wPZ zvrI`{)Orr)*7S7`E5!Jy;<<=|PqDxIs8+LBz&_Y9wy*kfd?X*6~ zm`#}oj?sFgQgx$7K0f-C((y4=1RYAel@qZ*vlHxSl07-KwSS(0rM2}64S1cmY=oh< zihB2JPTMxY4pVb+i`Wlr9jG8%n~B5LlLK_k;lx?X;{`6jB0p1}{a&K8>P!_iKQ%Ap zN7y-On1>1ls_`^qi6>cci?LRoseECDrNq4aZ*2+S^FC7D3yG{>17jUqV3IqVAkrjh#2n9&p>`B4SA>rE~uQ8OK)|8YUuY z?Oml4yI)ESZ8z(Sm-wZfv*O-}1Xi<~Ex5#a29@~qa}H*%!T9Kp!IV4AIkS8nzhotI zs?r>`S6+KexNQ`A<`G-_wn(H!U)i*Q0Vi@6G^*fiBanZ%mgLo!u%erM35C53cpKU= zOY7S=MA;8otHnlhLWbb2z0bOwlgxy}`)#TpP9B}n-n5|X?q!`|<$`zwn?@*ac}nQN z7Y3HmSeqLTwU${M%+?cl-#BxVA}~o;yD%jZ6}L{4AKr=co8w>GKDg%lt=#xN^jiMJ zG|cyX{>$*2u(>Q^fmg8QFY5z?V}h6n@S;^A@=4+I+v; zqyZb4VJ~`Ikgr%Nxuo$$fQbdNcZ-?};*e`Ds4v`pq3uisNP^<={snkfdQ zSVtgNplY|vJHDh1AWzP?>ki>udxSR6BOpA0nm^sSP?18_52M3zPn%}MLM5128mw%yOLmgCXeYP!>`STkzd;M~))ELsHJ7h;Lmy|ZCD zBa$POmWZ_w(E6pdS+26X_axIFOE5Xu8$b9@qVF;iAL9F&OA4wtJ%cQE8Y(Ul8AQHx zCS~U$R1R zaI|f|8X<5S%AY}&Zcg=79U>O_ zKT?yji`cLt*v((rtteUFG&K_DT*D1n%-5)QhMgHc=-je62zKXV6enr9W>-hD%lbW| zt8s#wo>htMo$l=9b=4n|lR2H$$Byf&kpbV(5&ECj=|s=XhZlfto)F7Sk12~omY}Nm zfozM=Mh9wPp2%adXih`Zo#7L&9;P*J>Ov{KHd%MP=j(X3VKoOllg0jk#Ewq>^mi$_ zrLRhukX*~{5}~gcXLbYb14iiuF<_12bG7D~{lClI&iro~LDKOP_i!p0Jcx13gdT;R=?Iq*Relex!QTJIatlJT@C`y3^i0;-A zr(2={7*p3Rr*AB1YyGNjD3kKzPF)SdKmWpCyKbjEX|{E#b(^FNyE5x44+jfA%`?SX zU90vn<(216U1>|bbkbTio-zI9dkGE81^1&G>d3YSsW>A`fpQ{2^KwL><>*Ol2W;$YgPV z7VZp)I0}sGIPEn{*$C%pSogAv0w7&{`W-`JOadT^ad4UFhCE$1Z%Gx2$rt9632F3~ zVceUxFAp+<3Gtt0HHzdgTgw;PcC2vC3YhO=Q-l zynov15kd5*8`sv;La0v;KrI+c{EOeao}G};pRCUQy3;6<{AJ1CN0+{^$@k=%SN728 z*QeH@B+{oc0p3lnf`3ix1xM(c1r4QfQSGMW*P1VNk)`D$y*r_-k;&3i2!-iQ_#Rle zM)^5UUZY-SoQT3>xw=TJEd)8?XWAPq12V-T`;kKo7@X$Z` zI`gq#ue?uFJd@Ao>+2J`p#*!x#IXGmLuGu*Xm_D-CF_{xEIBOmU6JUM8Pd7d>Y+OG zzJGOo#-TrEw6?9PQG}j(F3rLVoSIKbmx`P3?prnFS{zn6DYGJk*S6s=%dXWnI&Mta zJ3NO<@67NuE@ldz2@y+QWrSZ9$5%3`HAq-Uu??Lfo<)|hs?^Y*Nxw5t zw3RF)EvNs%YywPvX&1A>uiVs|X*)01x+nXqkdLA8p#j#*;{I93n%;re&*sUAYXI?9 zx6W&oMz&bCt*~-Z9xgt^)L`~>Ti3n3$cf5LDI2z15VhIEW?NzQTC9)-pB*;?+ps1E z84krAssHgDv10Jb2v1Ue78(c^ozpE6hM59dQ_ynEEjgF$>!%@w`Hw==;~)7a@8U65 zq_4B?t6!1H#=r7CPi!lDRSM2`>L;*Ml&5!H!gc|r*dabQGNaeZy;;kp$KqDnY4xD3 z?`kYxUu&c)|$XdN!e^=0u_GBYw=ufYN<3XlSFXLKT zF0NMKa9fle8T})p6lq?nJ&_{2-^!>`HV}xl!(^R-J z<8sG@p)x_(X4*5ul%SJUWn6X8a`Au3roe)Lk^A6WYWdgrAFcjBoW;{%X=w>{9&ACy zZ~=aP@66Zl)o>ut@p$D1c{im)1`v0<0@}I+% z`3$hi2f)O)$}2kd9i6Yd7T{-`7oq^Ye*dK4wy;IpUVoeQ1Vz<e0*G#zr<^9d)&~-ZDb(+-Qw-UXT#Dm_lbHG;@95q zC^|Xq$;?NzAdri7I?Tm&a)pA!h%k#-8djytprEA6zNg(DxH)i`z%0|}Tole5#~_+H zVHas*R&VW!p&Y#OZPsbIBF{55oIEoDpJ=^$^=dwkhc*i}Aoh#&VSiOJjKr`8KHtCJ zrkf|-5P&y3IK)HC8ybveAq2&cr3~|da7iUn2w+7r!Sn{Bl6j(|L~Jv|{r_BXkXF18ao z{V*kBUxp}M)|y7PcSrSQO3PcOJ>{M2Z0?5dj%YNz{6Xc13_l{FYs{hE)=$@9Sid1f zz9dCbb{KI`24%_NcXI>mgnL1tW)I^4wg&;sF+ULND(*CJuaSjyW89W8ii$>D_$8~H ze{w<4?9_Fi;ooEEa&5=?@6o#`7Z3~ex6+K*6VkLk?W5lyMup%nS9U#-;m7G~mO0O1 zZW$eCr$E+6)a>0!X-TFlL$$(PiA)~;RxL9MlxjZO);$g>mi$kQ-q8YZSAh1Z!{_6!>A z;Z6D8->=+sOiFwha=2Eh%d!x|9^s9_Hg%vUyEXX=xRsBlhVo&7AF07*VcT5{OEu6= zU(AJ^7~q6P?|icjR|ZpPV^mf3lY!Z!0nanR)Z5@|)!H7>zEzDdO)V(c ztks=6+`}&&tQ5(}Sf-BL$`Ae%i!ySP{CkKzI~kHx2xV4pGAy@4Ml^J@L9%UktK6oW z>p~KjeTbxE@A0v*o`D<*U9YEaI|pw&f`6<{el3l^C-x*!`83#1WiwY1(wv@^mG{C+ zQc)U4u^TUeN-k7{$hmhdYK+CLo}H4B6_xZ%wC4+d!pu&_`RS*rudXPc!Pop3>V{mC zNpGmx9v%c6f7<&-M9GVm#E+t6v0^L0(TO=uR2D___2@XCEc434we7MHS{OBg&CZs|L_knbLWP&3NAj@=1C~gdaxRjh;ld7= zeB)EBUsn|*GCjjgV6-B#L~QbrAHq%#R(86TPe*kAyjhNJkXDr2HFedmG~jnohb%2F z_WbjP(vg55Cw``Oo01OMaq!#Dizk7a>(z8-M&+%|`sFuW%a@kA*&~JUn7V6p&~enI zvao0Dzz!9+;p^K6kl5tU0Wh1OnQ>fF#kc3WU4IwT^ebkbLkp-Pw&U!w@7!S0A(e7H zmrULWR2X(wDXzK!xJ0w#7xO3s&o7#S7_92TQkI>x>UM{Uwc^y;Fx4ia6|ib~_szH$ zh!_HbpGfhLoD;%xw54?F-@$^eej%)l2Xi#<(l?MWmnNF*pE$;Y{@UX*0_5F3R zG~eKuTKuKP|)rE+deE8V{E^yZ?}aV?EJk{mqqm%2r7JywTgeF)S~QO zXj@fkB(Z_tYUd)!fUWtRUbvWM<$5+lh;Z&Jc92}HR{R5Ni4KzdXtpj@T$YfIRh7A^ zXnVGkh0HEC4hVo9&(lRdRQ$Uz!nw+{IQ~BS(zUxi2{N;*$Cm~v9KoS~Y@WGeMe62U znM4(7aSJ+r_X`6s7QSPK8aYQ1P1IvQ=#)K}p3JPc+Q&)zviT3IGz=*n?UM@cPg==r z5J7MIgiCirwKeQrDUa93Yk;Va{;A94Zp(>KA9Yt`T`M8VyI6ARQZ5Iwa7@Pidw)K> zfZ8hHW1m4()~*Q5KBO+-ST8y|uIzP8+qgfa9c7MI z@OS|6v#dKuUM0`$a#K)o%gQHhh`Q?wEz#V)KRGN2msm6nDb&^S602oB4Hpn!2nDcS z*TUal?Ynb-_5AtsYV=v!Ku-$S(w{g{>HdHzGfCDy>~3p!8S~f)a7oAhgLHhbtG5|5 zFD$Fxj&(RGF*xLSyL(U!U+!3DE7{I4j9slNxN@0$+db zXkRO7eUD@|#@Qm5uHT~KwU^U+wa33L(*5BxK8n_jhJJ_rzw_uiE19{+P;}v*Y7DK^ z&tpX^g7^!TNxP>t_!Bn5te)bY3GorQ%tY>@Vg~TB?g${e zIa&B!q*SR4kkbX1AVOvyLrJw03mf@%9g^R*sva9PeHpAyEG6>n_HX+*Kx zzX3CO2yd18=Ukguyi96-5z1K`@)X9i0VH;*D?bBzX38|v77^rG?R$&kv$1kN^&tGe zN-1nN!#^QXh7^c82b*4z?jjeOzSk?N`cKN;aF7c#P2$@;St$rsCnm2)H?Xl|FVwX# z*oBQOKJ=$F(Sppehb*S}&V`e66cAX03r$b4533T`Vm-Ha!q!8P-R&|oTCM~YndlTM zZ{zZ%#cQG+FEU})@e>~?FD6hq1YDeeMxMBj#<_iecf}X2$rsJ%TXU_>*iGPJo#1T5 z(WdXWOAI|AmsOPB`Lh(wH=*GG~Vp0LC{7L^XA^g@N<{G zv16^Md}G^ki%{^F>M|4S_t0LRtap?Kxf2FSusD&np50J%STUApBbvHbK`~?Hg)l`a zpN09ou`)ArDlCCV<@Wzw23wBQB+G?Uo?d2RTg zCcadXlR5UaI2bE=dvV-$wWEWtU-&+uXdr<1*F#-YF3W zB(8X!!zSYDz7r~+k*F~EX6}C5Chl3bqUm?9~Z#^%aJl(pDQ4(B&@rxK5r0} z`Q}pD12+HcT4rv{tVyn~8bpagIGUD#8B+lcm6usJI?qWBLaJ~-M>eSi;uju=Hhoj; z@AE>Qm;na{Hs)Q=zX^QzXXf+ez6Q_)1IpsFVyK{iz(B(?CF1lDzf|A8m1?Xf+qH`x zSNP;PYf#X%3HYV-0~X2gSkm=CN&`8S1f`(CT&d+#3Tl=Yyk99Suj(?ERYl#J!I@kK z<gH-r!|<)6+G{3!r9B|L9vQfkpD?iv($?&T;@K7N&Z&59U@DpZ^~bRKC96)FxkpwLiRD!i{BiF+`A*a8$+1RV=I~ z=lLMmVZ>HPX2w4)o>4*_B~MU*@1nJJEvX8cbVrpHwtwE9XF-H^%mGNXVcN4j=ZHOg zH$~xKG0n+>NJ6(W2uJHVJvT5&{!0SXDfuL-;pdhup5W8*^lN*cs$wI^?Q^}q5||65 zdf@~b(CZ?d4}Le?RVp|pr*$>}_x7C$n209&yPXcT&7up!s2>g-s#sZoV8Ds{k7X+4n#1-n=B!VS6l8P=utiSK_UF5X6a)W%gdXWt~Xtbj*hO- z2rIFI+9L8bC|z7Uxk{xUR|nuRIgz8~0S0xWyftxddXS}Xb}~Z7WAer6CD3D2bMw4N z`JgS2Q?S;SbnEm*N&2@4Mm^^(GF2!*K_YTw{VFW#1%qzISDP*+k3B%a@m>MG7Mh*Ou@3dr?x;O45ku z%8#`xjpr$udxZ)?CX!fW(H-o=IQZ>%Z7P#{_=%YQN)uOo+rg2VZioAp5u~k|X`#rS zUcO~J@bv(Qw(Hf)Ads~uy!f`Qj8qUaf6egNWs=jwx-mC`lFTp=>3D|}$@v!bbS**Z z-HEJ&NL>|W0HjooUsLh#dr7c+2R@H+j7N4;37m~5=af-6%QnnD&-p^!{LeoO+oLiUd~}U z>O4KYZgTLyzs`8SvM{vT0;B1{7P5GA)XJPlZj+^U9?a!ou<=j1Lr)JNk@LV2{5{XG zR6SZyUV-S(-kD{iNK3o6H0K`L(XiL1&5dk36 zO`9Qe)9t#CjX5UszTu9e_Wb$OTkiIcAC2pGP-3>o?Yylsw_pFZ8&eD|g*2%0yrJq)BtHSn^@*K|}@{bgQdg zN%=M}8>kt!vEgCN%i9K5q$phrB`kE@W?pw;Ea0#HwrZ409SnVv401S6UcUxef0Tg-K77{Len@(<(qtWx*+e`Dke}D`FkQdwFUCcLX zcEFpiZb9(PtI`y@u`j%+{D>W^!=9TrKZT%}{z!-Jx)9r{t1LTlQ}5SqJ>t-aZBBg_R#=d+sY8jT(MkvE?9@8k(%g zQ)1EJvrLndD7s426ma5k2|#TFr0A?Cdcp!JibpSvDg;)%n2{2Ea zuywVy9kho^o@7gB1Kp3ooC-RC@CQ90uEc1lv-=H*o$Eu59m1=SHHg3r)y&=Es+${w z-pa>+qjI8;>sn^rhNsW-(O+*LFUy!;6)J+8C!cqpJ`-WS7)@(>0)SP)m7>Vbj>GjD zlw}H_s{M^Ww*1@PdzhrK^Na}fg($gt*|x0ITUi+9-v15*1S97wF0z37Aqb>f!|zrd z^S*7fM~{TfDa!Pd3eE%DQoT+4dx)MZ*D}Bv2O7{O*BYIN0=IZ71AhGZ^XG3g9Ak*w z|8p&^22dx4r0~0sBG#)a2gE_35lPe8+xiMGGlOtG8nXD>#(|yYVnR8g%AeWa>UD+s zmzHSsquX-nkU>2fEDt?)bnVs>dfPeWRefId!Clm0RZpGi`@He;mi`Ww>dp=T*ENAtMyd7gx&=# zsp&szyTf$naL_Bl9$mTdwVQ1jeh8hN*gFgg&p%=bx}^qM8`*JPAFFZ#f%uc6GVtkNFYaHt|dY6yza4S1zS!&?JH_j6@!5ID!};C}vc znv-1K&tF&F@sQSCL;&+^oyT8VE{$sK#ff&hWJ>Yn<~alFYd46QEFbNEg=_VhXDMgm z=5>kY=tH5T;a8L7*7^PHL@fiJt=C#K4ulVm*C^6tutj-Zr7l27@$q#F;V(*h(*E9> zX^)9%ZhOG-x_Fe0u!fTyE^9*1K<$)`M=+5yS36H754EZD#qo#h6MA&ceGWX&21u%ZbpySn zOTMWwap9O^EvXODmMUVt@ie!h48T@S7R+j%ZEL(~4NuoDZ23OS5K#OcVYa*d#~{U6LIsa6pPB+` z(*6fg%;iKcsuBCUr2A8%_sGs5~b0)7H zHK0I}o{YC_ zlw@Mt8{19c+TDPTszeazS#+jh%WSB7tIruAu%`jQd|XK8Vz_X)ZaLu-q3iM;2d1}( zhu?UDmit6(+Oj`3o3%2(rB#`j7@cLsMr|j`Z(X*#2U012W34-FU~Fu^h37Vu;|}=! z&l|wkU!ko_w3y9z?^~>i{Q=V}{rSM<&@vM!(GTs|(c0ew?T_wWw?w%_1fOL2(>z`n zIbb;5tyGR4rCqb8-Rgp3gkiYR9X;2B%7SZ6dXx1w@{M}^n&9LSHbm~3`Pp)2+POBK zG~s&_^xEI`swk`4A6sSD83Sf^ytdtsf|zG^R&zge`KZp1>meItLrj9Q0nJ9=d!e&R zXShN_(p^8X89bePBKC{G`A}X%hDZXl}UE zg_i$#xi)jL47F)^x!A{bD1^|pdx^pN1+UrYjxHbl_-m*Y5_evZKpsA4Jt>jdyfO|@ z>D!Wll!*Q;Q5mSFJq@T>$^Yll&)C~P(kfgnIX4{^^wJAx!xNPzbP<)%DyVLut%CqC z-KLeFfbdGMWZ@cp1UP4S@DrFzFRu%Jye5nB`-+~BRQTcU2Zgf7!>*m*YU!BUnk8>E2wyY6Oj z8re;8v>;xW=yA546nULGfdb@mnJImI|DCj4^(WOBElthX4S;MdN8CTW7hbERvF5(& zesfi=f@?DFvgJ2STGq0qaju_v4BvGo$sU~k(->(NeYHX4GVM43Wtb$4OVrRWKfCR% zk2^W}ZjQ7^oP_%2yFhJp=Zc%m5v0?AsDH4`wlRqHcb;0#_vgO6j5_ZfHFlK^+#5H~ z)0{}B3I#NcKt?II^an@&C@LVnR>jpLNS2H;p81*7jKvO}H?}C^)OAs7OqLJ)Hr$AryNjJ>ENW_>TV*sli@( z-^FKsc9cfI&Xy^h?k~)9-mtawK>{S$u_u{xxl?KRoN?YZR`t z4kWGHSb4CtmpdSwB{_W5!(rXab z8*(>P3hXKBd_`9?svSH1Wb{!Jc-l-ZaKk0^$PG$UP^KHz!PMb3qNL4u@AF(iZ09*_X4ob<` zm{}&SebxqdkQ2u)=2C`|?(@`HwPgCCWcl(joVirxk}?G1kn&LMm%{&+il;Lxq((Tu zVzUo`O0n4W<}1JnJ{F?cCUV#A64Y6F&4}9pnq4nS6|Bt`+{BLsveCJPA0Z+=? z)SIYV!wudnKx0oUzxxRK%MhP*z`BWZRRmyk{B@Qv@qVio&kR7_$y+*X`~CJ>J`V_# zT6+FdAfPd%3&571$$8AHrfnPK>^7i1BW*B#4d;5TDAT z@)3{U&p!g5;bVv?DSufsCoM^a<^`%mH7#N<0lWNv*^$E$wW#Ie3QyM;^4+3zVa&Hj z;@UFqT9IF8R=M1Fm1D>*oQ`+H{~5(zxy)7pHMC?@T-|#cDt1X%AVXRngi{!zNI+}`zU+PZ zfhq-3wo7B7w*6MzSxw@Vz|qA|$xo+%pIADT!|L0fXer=-Ise(3^B@zJts^L1d~dF- z+^YJFN_ldjQ`37h#V5D+`q0lgt(Gc-C-gk9ZrGG_6zgA}NoI{Hp#AoX+X5$^!!@0C z+~l}hOVf|gnJ(7n&=K%Eap{^`!Sjr^uNbkS6!Yo9%PUgISd3_(R5th%p8M*Kjq$0OT2viZtI_hiIh?B`;xcU(rLi`BP?OGtUY2D%cp@ro`mn(*xomG$lrt4 zQLA@!62qg5yhiTa+oDdGmF8MkEKx2ZAH4LLb^iAIGeI3b7Y?2{?wLi5ATuJ$K6htt zZVC3+ZCWe-I!yRZM>?*b9&T2qWwQI(NvJg@ZJQpcnwt+KFNI$VPwc(eo&WM|#`3{v z8^mt3{j6*2S~Z%bCS~RA>ZW+D{mWlFoksWklni=@c$VdF;0dE`e6sJ|mHXd*L!D+X zK5A5sLa=yEBM2{>yNGJRMeKK1!oN>1E_vG747uNJoC(jenuc5c3XbHP^Sdan>tT`8 zC&t(=TK)6LZzDvugP?Ph(V1kiqId{*oV&odF;$5Z=h#7nqsU6#kHH7?#(EYwWOoF6 zvx$;^ho73xRCK6oUjyd&my%83e#NUtzk}Nfk5_P3FN;{aA^brx^!_F}KUT&fwyxH%U@0!)>?fwt5v+q_+ zwTGdK`QW_>{i=?_6Pp7YZ7kC7sSwwp#J-35F4;}l$@RN9E{MJ5=c&5H)2pQmf?tnH zgW6v;YrrGDs^|K=NdaWbnUJ9m_Ndy?KSlOn^ko7}%@2R&XXOO2>cNnXrIyq#lo zgq09bMP2C*`A|c6#K>p7(GBOLAi@hMe}+V;e7jyX@SqkD6qZ|94poMqPb! zunS5Gjd)skUGdE-9zGPrRv9U7b5>v-6#60$$@A#m-qFXyx~u;7wL`b^h~~&RU&fAq z!u9cf?hzH~omOMfcc}tjnjaP9J@zvB=0Jd4Nt8{>|Gt9_pHR??G$;E6R@3PYz1n;{ zPu>$`Z+iWeOws;A66(x)&9O1dsw-*eVSR}hCeZ5AXcM=ZD!=~5kKqWfMz5ITq!9#^ZIPCkUKj8N8d+QL{OJQR~E;`jC>(cHfa(Fu9;Q~wAyr1dY zCuWf=Jqxx&HxDhsd}Y^y43(bWZ6&xWe!i@AvPZjM3HD}J8^v)J+giGzP z%(ERSEoJUz_{`h)Td9n7Piz@mDn9a69Np)rl_c?iSSejXCU4YXx z%*ai-qFJ0pcyOrHv6O6mb9?r3M|xx=@MHW(e*YDBzdzc4_kTLRNQobbQ(KWG5$_La);p|-aH&|hmKjD;Bv;k?Wna0fyFDgs z9kKHJ4k{$`=gNy1Kib|ac4SK#d{-0dj@e3^-$vlw^vO4~tJ-2@YX(uOZ?G7R)QOr8 z5aB9Us%pmrj}ZG%=>dL`s7qX(Kx z5r*{NR~0x7Yts%|amlj$9o?#Gy}^~gzXWb6;Jq95NU+G3K+8c+hs}Na61w;III9Y8 zPdzb`w$<-5TasGu<+NbiK1e^ni3#&Liq8V-1;NYoOWhEIg@NVJL|U+(ZR=mbT$ciq z63YvN3%ByQkEiC$pSmZYj|>TG=x+6}7TzRnJ6Z7zA~o86lMo_nxgQ+0ci7$@ZBn<` zogV{B3XLQ*xLWo|y+{;xXCIll&nGIt@6fXN!C0xAp*mA`Qo3Y$XFT z<{!EDB^Z68fH6b;EfjnvIR3qC|LACw{GebZz?5=pPDFU2hu2;YynL&*gsMFu!CZG? zU+4X3^_KE0Q;VYN!1q@CPU__X z8Pc?#$l)2<Gdp_oegG4{i$d)d$O-*2z z1bDU_7M+@X-KmqdWS@Vxl zPbEj_KVZL*K5@As zJ@RbwM5&w@_WZ}j+)FXVSH4R?RY#ldPD*L-!a!j8CJAJqaqCuB{!=E2qB-eM^SERTU83cpg#bxmy(Z88*p{1I>rK z?aR^=NVdIrm8Mqrq%!D=|HBWf!FTE1H6M7sA{f(%t@j_RM<`kr%st99JcZM zKhf@uf=N~uj-3^ZVu}e;Ms*2SL#@r)Yb7}-QCzAwssy)m6q*@0$oRw_9l(aAP@54;m0fDvPJDm17sJl>&u_bRx-xD zfsY8rn~`0GY{YO*nkNa3#&_3GvTTl$)i8hZJqAdH)*P7cG()p6?m6WZX9#PWu z+BRO@D+&I{KO=#TuDj{1kb6+2Eh)%i+ORrFhJE?~cPNJ{8ck`c9ry`2gk0?O=)+}} z{6Dgy8Gc{jnRS_~{X6epdO2&Y(?|Wr{xBbdl}$6_5Sco_4vwT>k!zE%MvXmK#~-Ud z2z>j{m7&&GXC=6SJk9Nzb!*ZLnZY_xpPWs)>SsOeiu;&fxYa8zF8#l?bDcp=rE3@j zK?Tt@C{lD0X+b(H9TpV?f`l4`5XvqhAV#E@7;vQ%s?s4e>AjiIQBb5NLPC|YGy@4m zh>)ekloyL$QV*;;Eeqi0%1 zgf{t;oH_;hjC?6u(ROH`f8=Tsdswb1@!(AK`-yMtb~I=gn>oXU11@VsLQ;|emf~sR#e8YirdX(vME&` zn&-#w^H(HShyHJ0zI(Y{@AtQ!kW zIg?>A*bj(~>d0BhMkedGAceBuGd=k33W46Jw>`~5;k@ITxC;?4L`!PY5hIo##bko2 zZUh4y^JzTxa7ZQ<#!0)HG0!;?rJ*sUp_53F=s^0>qiD~Pd%B+ezUC(CpEJ1+w)@bn zS)Dv7)#V{dKDF9=zX5Nz=&`QU87QXZ%2_0UQ8E4tnpEl(s(I&W|&jBmY1bvl~9BUHH{8@N4u-tO&^_Y#h zDy7huD=t{7d~9}msRi3k`C#FA5rHcB*pxCLMYe*FeHPq$7Kc*=ZGL{@c{x^$!t7ryC$8xUeCh= zR0BG{KU_vbXPTFFRs%U{1qLbHsMYa+2j2_b?D35o&CdjTy-9fJ-dwBXS4&AOPl2bP z70+uCnlO>xilAAGlyW)MbG@uRtxzC8-y)He@K)=QI9w&6IKEWV|4_?5ARxPfz7rio z*P4;W%z<9*+PpkhKkM#F}p-eWGJC!mdWd$%T~|Iv~@RB{ z+v^DDxyTVui?fegzwlDBmQhvoD4_8qauw@UesmA@27+30NG5~ZRuavmySA01Hi2584FTmqjrsH@=)+zB^b;|bt zK4hweKDn7CLe9j&)3E6reP3TJ8;3)8!sJ6V&`b%;e-EDA`OS-=$p9*(zSVaP z-UQ5=fIDnO8D06I_Hm=iJQm)F>^7zZ90E)rZ6X#YSOGk#QAo?W4umz3S<$AHa4RH6 z7f?7EhAH0jyz6>@;6$d5Nn5m6DrI=tf}=SuATC1_nB65v7)?8P9tih~0dOQ>0UIf5 zD&OpC zcLoyn__9gxiS~&${ej|8vv!)eE@3)6#Reg@upC=egBgP zM%an?M08K%JYusQz2;mqt8QU>X{1HjH?wR(qkAt`zOv^@4)!cB%%^k?%;e06zOrXDoEpQ-5jINq{2djvd|1NZtk=q6)H;zW zh@z@@%G3akoBt$}z1{Wpi9f8|(F10R-DSlv!;jp?Z52;i$6>dMH#_W|%SWxj92&+I z;=DhbvX2CoO3FknOO>~|-Lxx~qk8t@q>_P1M4cp^i*Vv)o6Of3DY9nW7Q79bqK3f< z0rT9pJF6U4GIBO4Hr0vVTXFgCEn(`-evwWqYUP)%zakudhgJzpjFlZckdADvDZxzL zEUboE+iR&)4=pB6xf$LWX7uz(pav-AR!C%Kkfy~NP&Myd-?Xm`K8`Qx1IJvOwsXm;A569MLU!+PFsX0@9Rn4wm-(C9D5qD)%E!H&Eunq}EYY7_ts5w%(-L(mf624`p zqa<}|eeay*(j>|8!&G#eDrwKanFif%?lJMgre*U3m85SRmK1}%kqmdo^w=ic^7WCf zW3QQc?6nAQpi~x7&n-b}cUz46YAh7**-Fph3jf-Dq3E>AieyUDX3g6AktDmwKQUOUt~NSzT>uQ#5(V^#mTUJY8&Zqu0H_BI=U3Q>*s9+Z|_QH9)qZ$BR7U+o-Gy^dmL! zJsm-1GsycHon%x!TFo>IwP}LqU{&O#X1Vm1*q?F<+@uB&0!gH?Dz6FVKdHj8jG=r! zI#w-j#fjgvBYGwdX_|_e!ZiaPmKz2x0bbk#rK5~);lqvsydABQ55SkrD!V3y!s*tR zUCQgKKzLn?3hZ;2pIo0;LUshOQ~96QMa=pG&lBBJV*SEL(=i;WKK9O`zUwfT{5cc* zCAh2}lTdz?M z>O*xcTkkY22vI|I;bWxUp`xbbzI!G8A``eIz&%AV)CoWn^i=2fpo{6IbZR>Mqeb7jNt*or^*%)I=%rgRu@wltN7T!m}h$yS4 z#)G0I&oI8Z^fV*tkP5G!|0_Mayh7SI4FG6*srPsJ{yA-D`cLYlJtsf& z!tThis topic focuses on pre-breach mitigations aimed at device protection and threat resistance. These protections work with other security defenses in Windows 10, as shown in the following illustration: -Types of defenses in Windows 10 +Types of defenses in Windows 10 **Figure 1.  Device protection and threat resistance as part of the Windows 10 security defenses** From 4cfdd1486507e37fd9db07e48e3115f8cf68c3de Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Fri, 17 Mar 2017 18:49:27 -0700 Subject: [PATCH 06/32] waas-configure-wufb added pause and final polish --- windows/update/waas-configure-wufb.md | 74 ++++++++++++++++++--------- 1 file changed, 51 insertions(+), 23 deletions(-) diff --git a/windows/update/waas-configure-wufb.md b/windows/update/waas-configure-wufb.md index 3438cf7a39..4ae2377a8f 100644 --- a/windows/update/waas-configure-wufb.md +++ b/windows/update/waas-configure-wufb.md @@ -32,7 +32,6 @@ By grouping devices with similar deferral periods, administrators are able to cl >[!TIP] >In addition to setting up multiple rings for your update deployments, also incorporate devices enrolled in the Windows Insider Program as part of your deployment strategy. This will provide you the chance to not only evaluate new features before they are broadly available to the public, but it also increases the lead time to provide feedback and influence Microsoft’s design on functional aspects of the product. For more information on Windows Insider program, see [https://insider.windows.com/](https://insider.windows.com/). - ## Configure devices for Current Branch (CB) or Current Branch for Business (CBB) With Windows Update for Business, you can set a device to be on either the Current Branch (CB) or the Current Branch for Business (CBB) servicing branch. For more information on this servicing model, see [Windows 10 servicing options](waas-overview.md#servicing-branches). @@ -79,11 +78,23 @@ After you configure the servicing branch (CB or CBB), you can then define if, an | MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**DeferFeatureUpdatesPeriodInDays** | \Microsoft\PolicyManager\default\Update\DeferFeatureUpdatesPeriodInDays | | MDM for version 1511:
../Vendor/MSFT/Policy/Config/Update/
**DeferUpgrade** | \Microsoft\PolicyManager\default\Update\RequireDeferUpgrade | +>[!NOTE] +>If not configured by policy, users can defer feature updates, by going to **Settings > Update & security > Windows Update > Advanced options**. ## Pause Feature Updates You can also pause a device from receiving Feature Updates by a period of up to 60 days from when the value is set. After 60 days has passed, pause functionality will automatically expire and the device will scan Windows Update for applicable Feature Updates. Following this scan, Feature Updates for the device can then be paused again. +Starting with version 1703, when configuring pause through policy, a start date has to be set from which the pause begins. The pause period will be calculated by adding 60 days to the start date. + +In cases where the pause policy is first applied after the configured start date has passed, administrators will be able to extend the pause period up to a total of 60 days by configuring a later start date. + +With version 1703, pause will provide a more consistent experience: +- Any active restart notification are cleared or closed +- Any pending restarts are canceled +- Any pending update installations are canceled +- Any update installation running when pause is activated will attempt to rollback + >[!IMPORTANT] >This policy does not apply to Windows 10 Mobile Enterprise. @@ -91,12 +102,11 @@ You can also pause a device from receiving Feature Updates by a period of up to | Policy | Sets registry key under **HKLM\Software** | | --- | --- | -| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Feature Updates are received** | \Policies\Microsoft\Windows\WindowsUpdate\PauseFeatureUpdates | +| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Feature Updates are received** | **1607:** \Policies\Microsoft\Windows\WindowsUpdate\PauseFeatureUpdates
**1703:** \Policies\Microsoft\Windows\WindowsUpdate\PauseFeatureUpdatesStartDate | | GPO for version 1511:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Defer Upgrades and Updates** | \Policies\Microsoft\Windows\WindowsUpdate\Pause | -| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**PauseFeatureUpdates** | \Microsoft\PolicyManager\default\Update\PauseFeatureUpdates | +| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**PauseFeatureUpdates** | **1607:** \Microsoft\PolicyManager\default\Update\PauseFeatureUpdates
**1703:** \Microsoft\PolicyManager\default\Update\PauseFeatureUpdatesStartDate | | MDM for version 1511:
../Vendor/MSFT/Policy/Config/Update/
**DeferUpgrade** | \Microsoft\PolicyManager\default\Update\Pause | - You can check the date Feature Updates were paused at by checking the registry key **PausedFeatureDate** under **HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings**. The local group policy editor (GPEdit.msc) will not reflect if your Feature Update Pause period has expired. Although the device will resume Feature Updates after 60 days automatically, the pause checkbox will remain checked in the policy editor. To see if a device has auto-resumed taking Feature Updates, you can check the status registry key **PausedFeatureStatus** under **HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings**. @@ -107,6 +117,8 @@ The local group policy editor (GPEdit.msc) will not reflect if your Feature Upda | 1 | Feature Updates paused | | 2 | Feature Updates have auto-resumed after being paused | +>[!NOTE] +>If not configured by policy, users can pause feature updates, by going to **Settings > Update & security > Windows Update > Advanced options**. ## Configure when devices receive Quality Updates @@ -126,11 +138,23 @@ You can set your system to receive updates for other Microsoft products—known | MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**DeferQualityUpdatesPeriodInDays** | \Microsoft\PolicyManager\default\Update\DeferQualityUpdatesPeriodInDays | | MDM for version 1511:
../Vendor/MSFT/Policy/Config/Update/
**DeferUpgrade** | \Microsoft\PolicyManager\default\Update\RequireDeferUpdate | +>[!NOTE] +>If not configured by policy, users can defer quality updates, by going to **Settings > Update & security > Windows Update > Advanced options**. ## Pause Quality Updates You can also pause a system from receiving Quality Updates for a period of up to 35 days from when the value is set. After 35 days has passed, pause functionality will automatically expire and the system will scan Windows Updates for applicable Quality Updates. Following this scan, Quality Updates for the device can then be paused again. +Starting with version 1703, when configuring pause through policy, a start date has to be set from which the pause begins. The pause period will be calculated by adding 35 days to the start date. + +In cases where the pause policy is first applied after the configured start date has passed, administrators will be able to extend the pause period up to a total of 35 days by configuring a later start date. + +With version 1703, pause will provide a more consistent experience: +- Any active restart notification are cleared or closed +- Any pending restarts are canceled +- Any pending update installations are canceled +- Any update installation running when pause is activated will attempt to rollback + >[!IMPORTANT] >This policy pauses both Feature and Quality Updates on Windows 10 Mobile Enterprise. @@ -138,12 +162,11 @@ You can also pause a system from receiving Quality Updates for a period of up to | Policy | Sets registry key under **HKLM\Software** | | --- | --- | -| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Quality Updates are received** |\Policies\Microsoft\Windows\WindowsUpdate\PauseQualityUpdates | +| GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > **Select when Quality Updates are received** |**1607:** \Policies\Microsoft\Windows\WindowsUpdate\PauseQualityUpdates
**1703:** \Policies\Microsoft\Windows\WindowsUpdate\PauseQualityUpdatesStartTime | | GPO for version 1511:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Defer Upgrades and Updates** | \Policies\Microsoft\Windows\WindowsUpdate\Pause | -| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**PauseQualityUpdates** | \Microsoft\PolicyManager\default\Update\PauseQualityUpdates | +| MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**PauseQualityUpdates** | **1607:** \Microsoft\PolicyManager\default\Update\PauseQualityUpdates
**1703:** \Microsoft\PolicyManager\default\Update\PauseQualityUpdatesStartTime | | MDM for version 1511:
../Vendor/MSFT/Policy/Config/Update/
**DeferUpgrade** | \Microsoft\PolicyManager\default\Update\Pause | - You can check the date that Quality Updates were paused at by checking the registry key **PausedQualityDate** under **HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings**. The local group policy editor (GPEdit.msc) will not reflect if your Quality Update Pause period has expired. Although the device will resume Quality Updates after 35 days automatically, the pause checkbox will remain checked in the policy editor. To see if a device has auto-resumed taking Quality Updates, you can check the status registry key **PausedQualityStatus** under **HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings**. @@ -154,6 +177,9 @@ The local group policy editor (GPEdit.msc) will not reflect if your Quality Upda | 1 | Quality Updates paused | | 2 | Quality Updates have auto-resumed after being paused | +>[!NOTE] +>If not configured by policy, users can pause quality updates, by going to **Settings > Update & security > Windows Update > Advanced options**. + ## Exclude drivers from Quality Updates In Windows 10, starting with version 1607, you can selectively option out of receiving driver update packages as part of your normal quality update cycle. This policy will not pertain to updates to inbox drivers (which will be packaged within a security or critical update) or to Feature Updates, where drivers may be dynamically installed to ensure the Feature Update process can complete. @@ -165,9 +191,7 @@ In Windows 10, starting with version 1607, you can selectively option out of rec | GPO for version 1607 and above:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > **Do not include drivers with Windows Updates** | \Policies\Microsoft\Windows\WindowsUpdate\ExcludeWUDriversInQualityUpdate | | MDM for version 1607 and above:
../Vendor/MSFT/Policy/Config/Update/
**ExcludeWUDriversInQualityUpdate** | \Microsoft\PolicyManager\default\Update\ExcludeWUDriversInQualityUpdate | - - -## Summary: MDM and Group Policy for version 1607 and above +## Summary: MDM and Group Policy for version 1703 Below are quick-reference tables of the supported Windows Update for Business policy values for Windows 10, version 1607 and above. @@ -177,11 +201,11 @@ Below are quick-reference tables of the supported Windows Update for Business po | --- | --- | --- | | BranchReadinessLevel | REG_DWORD | 16: systems take Feature Updates for the Current Branch (CB)
32: systems take Feature Updates for the Current Branch for Business (CBB)
Note: Other value or absent: receive all applicable updates (CB) | | DeferQualityUpdates | REG_DWORD | 1: defer quality updates
Other value or absent: don’t defer quality updates | -| DeferQualityUpdatesPeriodinDays | REG_DWORD | 0-30: defer quality updates by given days | -| PauseQualityUpdates | REG_DWORD | 1: pause quality updates
Other value or absent: don’t pause quality updates | +| DeferQualityUpdatesPeriodinDays | REG_DWORD | 0-35: defer quality updates by given days | +| PauseQualityUpdatesStartDate | REG_DWORD | 1: pause quality updates
Other value or absent: don’t pause quality updates | |DeferFeatureUpdates | REG_DWORD | 1: defer feature updates
Other value or absent: don’t defer feature updates | -| DeferFeatureUpdatesPeriodinDays | REG_DWORD | 0-180: defer feature updates by given days
**Note:** Starting with version 1703, the range is 0-365. | -| PauseFeatureUpdates | REG_DWORD |1: pause feature updates
Other value or absent: don’t pause feature updates | +| DeferFeatureUpdatesPeriodinDays | REG_DWORD | 0-365: defer feature updates by given days | +| PauseFeatureUpdatesStartDate | REG_DWORD |1: pause feature updates
Other value or absent: don’t pause feature updates | | ExcludeWUDriversInQualityUpdate | REG_DWORD | 1: exclude Windows Update drivers
Other value or absent: offer Windows Update drivers | @@ -190,19 +214,19 @@ Below are quick-reference tables of the supported Windows Update for Business po | MDM Key | Key type | Value | | --- | --- | --- | | BranchReadinessLevel | REG_DWORD | 16: systems take Feature Updates for the Current Branch (CB)
32: systems take Feature Updates for the Current Branch for Business (CBB)
Note: Other value or absent: receive all applicable updates (CB) | -| DeferQualityUpdatesPeriodinDays | REG_DWORD | 0-30: defer quality updates by given days | -| PauseQualityUpdates | REG_DWORD | 1: pause quality updates
Other value or absent: don’t pause quality updates | -| DeferFeatureUpdatesPeriodinDays | REG_DWORD | 0-180: defer feature updates by given days
**Note:** Starting with version 1703, the range is 0-365. | -| PauseFeatureUpdates | REG_DWORD | 1: pause feature updates
Other value or absent: don’t pause feature updates | +| DeferQualityUpdatesPeriodinDays | REG_DWORD | 0-35: defer quality updates by given days | +| PauseQualityUpdatesStartDate | REG_DWORD | 1: pause quality updates
Other value or absent: don’t pause quality updates | +| DeferFeatureUpdatesPeriodinDays | REG_DWORD | 0-365: defer feature updates by given days | +| PauseFeatureUpdatesStartDate | REG_DWORD | 1: pause feature updates
Other value or absent: don’t pause feature updates | | ExcludeWUDriversinQualityUpdate | REG_DWORD | 1: exclude Windows Update drivers
Other value or absent: offer Windows Update drivers | -## Update devices from Windows 10, version 1511 to version 1607 +## Update devices to newer versions -Due to the changes in the Windows Update for Business feature set, Windows 10, version 1607, uses different GPO and MDM keys than those available in version 1511. However,Windows Update for Business clients running version 1511 will still see their policies honored after they update to version 1607; the old policy keys will continue to exist with their values ported forward during the update. Following the update to version 1607, it should be noted that only the version 1511 keys will be populated and not the new version 1607 keys, until the newer keys are explicitly defined on the device by the administrator. +Due to the changes in the Windows Update for Business feature set, Windows 10, version 1607, uses different GPO and MDM keys than those available in version 1511. Windows 10, version 1703, is also using a few new GPO and MDM keys than those available in version 1607. However,Windows Update for Business clients running version older versions will still see their policies honored after they update to a newer version; the old policy keys will continue to exist with their values ported forward during the update. Following the update to a newer version, it should be noted that only the old keys will be populated and not the new version keys, until the newer keys are explicitly defined on the device by the administrator. -### How version 1511 policies are respected on version 1607 +### How older version policies are respected on newer versions -When a client running version 1607 sees an update available on Windows Update, the client will first evaluate and execute against the Windows Updates for Business policy keys for version 1607. If these are not present, it will then check to see if any of the version 1511 keys are set and defer accordingly. Update keys for version 1607 will always supersede the version 1511 equivalent. +When a client running a newer version sees an update available on Windows Update, the client will first evaluate and execute against the Windows Updates for Business policy keys for it's version. If these are not present, it will then check to see if any of the older version keys are set and defer accordingly. Update keys for newer versions will always supersede the older equivalent. ### Comparing the version 1511 keys to the version 1607 keys @@ -217,8 +241,12 @@ Enabling allows user to set deferral periods for upgrades and updates. It also **RequireDeferUpgade**: *bool*
   Puts the device on CBB (no ability to defer updates while on the CB branch).

**DeferUpgradePeriod**: *0 - 8 months*

**DeferUpdatePeriod**: *1 – 4 weeks*

**PauseDeferrals**: *bool*
   Enabling will pause both upgrades and updates for a max of 35 days**BranchReadinessLevel**
   Set system on CB or CBB

**DeferFeatureUpdatesPeriodinDays**: *1 - 180 days*

**PauseFeatureUpdates**: *enable/disable*
   Enabling will pause Feature updates for a max of 60 days

**DeferQualityUpdatesPeriodinDays**: *0 - 30 days*

**PauseQualityUpdates**: *enable/disable*
    Enabling will pause Quality updates for a max of 35 days

**ExcludeWUDriversInQualityUpdate**: *enable/disable<*/td> +### Comparing the version 1607 keys to the version 1703 keys - +| Version 1607 key | Version 1703 key | +| --- | --- | +| PauseFeatureUpdates | PauseFeatureUpdatesStartTime | +| PauseQualityUpdates | PauseQualityUpdatesStartTime | ## Related topics From 40e951f6db4cf2f7e84a71765f3faa4480b41697 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 20 Mar 2017 09:51:19 -0700 Subject: [PATCH 07/32] Added Cortana at work text --- windows/whats-new/whats-new-windows-10-version-1703.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index f77e448f5d..350050e052 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -58,6 +58,12 @@ Additional MDM policy settings are available for Start and taskbar layout. For d Previously, the customized taskbar could only be deployed using Group Policy or provisioning packages. Windows 10, version 1703, adds support for customized taskbars to [MDM](../configure/customize-windows-10-start-screens-by-using-mobile-device-management.md). +### Cortana at work + +Cortana is Microsoft’s personal digital assistant, who helps busy people get things done, even while at work. Cortana has powerful configuration options, specifically optimized for your business. By signing in with an Azure Active Directory (Azure AD) account, your employees can give Cortana access to their enterprise/work identity, while getting all the functionality Cortana provides to them outside of work. + +Using Azure AD also means that you can remove an employee’s profile (for example, when an employee leaves your organization) while respecting Windows Information Protection (WIP) policies and ignoring enterprise content, such as emails, calendar items, and people lists that are marked as enterprise data. + ## Learn more - [Windows 10 release information](https://technet.microsoft.com/en-us/windows/release-info) From b399441936e57b1077d7346fd7cbb6536db7d8e4 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 20 Mar 2017 09:55:43 -0700 Subject: [PATCH 08/32] Updated --- .openpublishing.redirection.json | 2139 +++++++++++++++--------------- 1 file changed, 1072 insertions(+), 1067 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index edcb70b708..1f8831fdb9 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -1,1069 +1,1074 @@ { - "redirections": [ - { - "source_path": "devices/surface-hub/surface-hub-administrators-guide.md", - "redirect_url": "/itpro/surface-hub/index", - "redirect_document_id": true - }, - { - "source_path": "devices/surface-hub/intro-to-surface-hub.md", - "redirect_url": "/itpro/surface-hub/index", - "redirect_document_id": false - }, - { - "source_path": "windows/manage/waas-quick-start.md", - "redirect_url": "/itpro/windows/update/waas-quick-start", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-overview.md", - "redirect_url": "/itpro/windows/update/waas-overview", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-servicing-strategy-windows-10-updates.md", - "redirect_url": "/itpro/windows/update/waas-servicing-strategy-windows-10-updates", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-deployment-rings-windows-10-updates.md", - "redirect_url": "/itpro/windows/update/waas-deployment-rings-windows-10-updates", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-servicing-branches-windows-10-updates.md", - "redirect_url": "/itpro/windows/update/waas-servicing-branches-windows-10-updates", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/update-compliance-monitor.md", - "redirect_url": "/itpro/windows/update/update-compliance-monitor", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/update-compliance-get-started.md", - "redirect_url": "/itpro/windows/update/update-compliance-get-started", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/update-compliance-using.md", - "redirect_url": "/itpro/windows/update/update-compliance-using", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-optimize-windows-10-updates.md", - "redirect_url": "/itpro/windows/update/waas-optimize-windows-10-updates", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-delivery-optimization.md", - "redirect_url": "/itpro/windows/update/waas-delivery-optimization", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-branchcache.md", - "redirect_url": "/itpro/windows/update/waas-branchcache", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-mobile-updates.md", - "redirect_url": "/itpro/windows/update/waas-mobile-updates", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-manage-updates-wufb.md", - "redirect_url": "/itpro/windows/update/waas-manage-updates-wufb", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-configure-wufb.md", - "redirect_url": "/itpro/windows/update/waas-configure-wufb", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-integrate-wufb.md", - "redirect_url": "/itpro/windows/update/waas-integrate-wufb", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-wufb-group-policy.md", - "redirect_url": "/itpro/windows/update/waas-wufb-group-policy", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-wufb-intune.md", - "redirect_url": "/itpro/windows/update/waas-wufb-intune.md", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-manage-updates-wsus.md", - "redirect_url": "/itpro/windows/update/waas-manage-updates-wsus", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-manage-updates-configuration-manager.md", - "redirect_url": "/itpro/windows/update/waas-manage-updates-configuration-manager", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-restart.md", - "redirect_url": "/itpro/windows/update/waas-restart", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/waas-update-windows-10.md", - "redirect_url": "/itpro/windows/update/index", - "redirect_document_id": false - }, - { - "source_path": "windows/manage/configure-windows-telemetry-in-your-organization.md", - "redirect_url": "/itpro/windows/configure/configure-windows-telemetry-in-your-organization", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/manage-connections-from-windows-operating-system-components-to-microsoft-services.md", - "redirect_url": "/itpro/windows/configure/manage-connections-from-windows-operating-system-components-to-microsoft-services", - "redirect_document_id": false - }, - { - "source_path": "windows/manage/set-up-a-device-for-anyone-to-use.md", - "redirect_url": "/itpro/windows/configure/set-up-a-device-for-anyone-to-use", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md", - "redirect_url": "/itpro/windows/configure/set-up-a-kiosk-for-windows-10-for-desktop-editions", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/guidelines-for-assigned-access-app.md", - "redirect_url": "/itpro/windows/configure/guidelines-for-assigned-access-app", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/lock-down-windows-10-to-specific-apps.md", - "redirect_url": "/itpro/windows/configure/lock-down-windows-10-to-specific-apps", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/set-up-a-kiosk-for-windows-10-for-mobile-edition.md", - "redirect_url": "/itpro/windows/configure/set-up-a-kiosk-for-windows-10-for-mobile-edition", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/lockdown-xml.md", - "redirect_url": "/itpro/windows/configure/lockdown-xml", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/settings-that-can-be-locked-down.md", - "redirect_url": "/itpro/windows/configure/settings-that-can-be-locked-down", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/product-ids-in-windows-10-mobile.md", - "redirect_url": "/itpro/windows/configure/product-ids-in-windows-10-mobile", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/manage-tips-and-suggestions.md", - "redirect_url": "/itpro/windows/configure/manage-tips-and-suggestions", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/windows-10-start-layout-options-and-policies.md", - "redirect_url": "/itpro/windows/configure/windows-10-start-layout-options-and-policies", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/configure-windows-10-taskbar.md", - "redirect_url": "/itpro/windows/configure/configure-windows-10-taskbar", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/customize-and-export-start-layout.md", - "redirect_url": "/itpro/windows/configure/customize-and-export-start-layout", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/start-layout-xml-desktop.md", - "redirect_url": "/itpro/windows/configure/start-layout-xml-desktop", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/start-layout-xml-mobile.md", - "redirect_url": "/itpro/windows/configure/start-layout-xml-mobile", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/customize-windows-10-start-screens-by-using-group-policy.md", - "redirect_url": "/itpro/windows/configure/customize-windows-10-start-screens-by-using-group-policy", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md", - "redirect_url": "/itpro/windows/configure/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/customize-windows-10-start-screens-by-using-mobile-device-management.md", - "redirect_url": "/itpro/windows/configure/customize-windows-10-start-screens-by-using-mobile-device-management", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-testing-scenarios.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-testing-scenarios", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-scenario-1.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-1", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-scenario-2.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-2", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-scenario-3.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-3", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-scenario-4.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-4", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-scenario-5.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-5", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-scenario-6.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-6", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-o365.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-o365", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-crm.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-crm", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-powerbi.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-powerbi", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-voice-commands.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-voice-commands", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-policy-settings.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-policy-settings", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/cortana-at-work-feedback.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-feedback", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/stop-employees-from-using-the-windows-store.md", - "redirect_url": "/itpro/windows/configure/stop-employees-from-using-the-windows-store", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/configure-devices-without-mdm.md", - "redirect_url": "/itpro/windows/configure/configure-devices-without-mdm", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/changes-to-start-policies-in-windows-10.md", - "redirect_url": "/itpro/windows/configure/changes-to-start-policies-in-windows-10", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/how-it-pros-can-use-configuration-service-providers.md", - "redirect_url": "/itpro/windows/configure/how-it-pros-can-use-configuration-service-providers", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/lock-down-windows-10.md", - "redirect_url": "/itpro/windows/configure/index", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/manage-wifi-sense-in-enterprise.md", - "redirect_url": "/itpro/windows/configure/manage-wifi-sense-in-enterprise", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-packages.md", - "redirect_url": "/itpro/windows/configure/provisioning-packages", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-how-it-works.md", - "redirect_url": "/itpro/windows/configure/provisioning-how-it-works", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-install-icd.md", - "redirect_url": "/itpro/windows/configure/provisioning-install-icd", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-create-package.md", - "redirect_url": "/itpro/windows/configure/provisioning-create-package", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-apply-package.md", - "redirect_url": "/itpro/windows/configure/provisioning-apply-package", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-uninstall-package.md", - "redirect_url": "/itpro/windows/configure/provisioning-uninstall-package", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provision-pcs-for-initial-deployment.md", - "redirect_url": "/itpro/windows/configure/provision-pcs-for-initial-deployment", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provision-pcs-with-apps-and-certificates.md", - "redirect_url": "/itpro/windows/configure/provision-pcs-with-apps", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-script-to-install-app.md", - "redirect_url": "/itpro/windows/configure/provisioning-script-to-install-app", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-nfc.md", - "redirect_url": "/itpro/windows/configure/provisioning-nfc", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-command-line.md", - "redirect_url": "/itpro/windows/configure/provisioning-command-line", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/provisioning-multivariant.md", - "redirect_url": "/itpro/windows/configure/provisioning-multivariant", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/create-edp-policy-using-intune.md", - "redirect_url": "/itpro/windows/keep-secure/create-wip-policy-using-intune", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/create-edp-policy-using-sccm.md", - "redirect_url": "/itpro/windows/keep-secure/create-wip-policy-using-sccm", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/create-vpn-and-edp-policy-using-intune.md", - "redirect_url": "/itpro/windows/keep-secure/create-vpn-and-wip-policy-using-intune", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/deploy-edp-policy-using-intune.md", - "redirect_url": "/itpro/windows/keep-secure/deploy-wip-policy-using-intune", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/guidance-and-best-practices-edp.md", - "redirect_url": "/itpro/windows/keep-secure/guidance-and-best-practices-wip", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/overview-create-edp-policy.md", - "redirect_url": "/itpro/windows/keep-secure/overview-create-wip-policy", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/protect-enterprise-data-using-edp.md", - "redirect_url": "/itpro/windows/keep-secure/protect-enterprise-data-using-wip", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/testing-scenarios-for-edp.md", - "redirect_url": "/itpro/windows/keep-secure/testing-scenarios-for-wip", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/wip-enterprise-overview.md", - "redirect_url": "/itpro/windows/keep-secure/protect-enterprise-data-using-wip", - "redirect_document_id": false - }, - { - "source_path": "windows/keep-secure/enlightened-microsoft-apps-and-edp.md", - "redirect_url": "/itpro/windows/keep-secure/enlightened-microsoft-apps-and-wip", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/update-windows-10-images-with-provisioning-packages.md", - "redirect_url": "/itpro/windows/configure/provisioning-packages", - "redirect_document_id": false - }, - { - "source_path": "windows/deploy/upgrade-analytics-prepare-your-environment.md", - "redirect_url": "/itpro/windows/deploy/upgrade-analytics-identify-apps", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/upgrade-analytics-release-notes.md", - "redirect_url": "/itpro/windows/deploy/upgrade-analytics-requirements", - "redirect_document_id": true - }, - { - "source_path": "windows/deploy/upgrade-analytics-review-site-discovery.md", - "redirect_url": "/itpro/windows/deploy/upgrade-analytics-additional-insights", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/additional-configuration-windows-advanced-threat-protection.md", - "redirect_url": "/itpro/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/ad-ds-schema-extensions-to-support-tpm-backup.md", - "redirect_url": "https://technet.microsoft.com/library/jj635854.aspx", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/creating-a-device-guard-policy-for-signed-apps.md", - "redirect_url": "/itpro/windows/keep-secure/device-guard-deployment-guide", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/device-guard-certification-and-compliance.md", - "redirect_url": "/itpro/windows/keep-secure/device-guard-deployment-guide", - "redirect_document_id": false - }, - { - "source_path": "windows/keep-secure/enable-phone-signin-to-pc-and-vpn.md", - "redirect_url": "/itpro/windows/keep-secure/hello-enable-phone-signin", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/getting-apps-to-run-on-device-guard-protected-devices.md", - "redirect_url": "/itpro/windows/keep-secure/device-guard-deployment-guide", - "redirect_document_id": false - }, - { - "source_path": "windows/keep-secure/implement-microsoft-passport-in-your-organization.md", - "redirect_url": "/itpro/windows/keep-secure/hello-manage-in-organization", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/manage-identity-verification-using-microsoft-passport.md", - "redirect_url": "/itpro/windows/keep-secure/hello-identity-verification", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/microsoft-passport-and-password-changes.md", - "redirect_url": "/itpro/windows/keep-secure/hello-and-password-changes", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/microsoft-passport-errors-during-pin-creation.md", - "redirect_url": "/itpro/windows/keep-secure/hello-errors-during-pin-creation", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/microsoft-passport-guide.md", - "redirect_url": "/itpro/windows/keep-secure/hello-identity-verification", - "redirect_document_id": false - }, - { - "source_path": "windows/keep-secure/monitor-onboarding-windows-advanced-threat-protection.md", - "redirect_url": "/itpro/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection", - "redirect_document_id": false - }, - { - "source_path": "windows/keep-secure/passport-event-300.md", - "redirect_url": "/itpro/windows/keep-secure/hello-event-300", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/prepare-people-to-use-microsoft-passport.md", - "redirect_url": "/itpro/windows/keep-secure/hello-prepare-people-to-use", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/why-a-pin-is-better-than-a-password.md", - "redirect_url": "/itpro/windows/keep-secure/hello-why-pin-is-better-than-password", - "redirect_document_id": true - }, - { - "source_path": "windows/keep-secure/windows-hello-in-enterprise.md", - "redirect_url": "/itpro/windows/keep-secure/hello-biometrics-in-enterprise", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/app-inventory-managemement-windows-store-for-business.md", - "redirect_url": "/itpro/windows/manage/app-inventory-management-windows-store-for-business", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/application-development-for-windows-as-a-service.md", - "redirect_url": "https://msdn.microsoft.com/windows/uwp/get-started/application-development-for-windows-as-a-service", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/appv-accessibility.md", - "redirect_url": "/itpro/windows/manage/appv-getting-started", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/appv-accessing-the-client-management-console.md", - "redirect_url": "/itpro/windows/manage/appv-using-the-client-management-console", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/appv-install-the-appv-client-for-shared-content-store-mode.md", - "redirect_url": "/itpro/windows/manage/appv-deploying-the-appv-sequencer-and-client", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/appv-modify-client-configuration-with-the-admx-template-and-group-policy.md", - "redirect_url": "/itpro/windows/manage/appv-deploying-the-appv-sequencer-and-client", - "redirect_document_id": false - }, - { - "source_path": "windows/manage/appv-planning-for-migrating-from-a-previous-version-of-appv.md", - "redirect_url": "/itpro/windows/manage/appv-migrating-to-appv-from-a-previous-version", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/configure-windows-10-devices-to-stop-data-flow-to-microsoft.md", - "redirect_url": "/itpro/windows/configure/manage-connections-from-windows-operating-system-components-to-microsoft-services", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/disconnect-your-organization-from-microsoft.md", - "redirect_url": "/itpro/windows/configure/manage-connections-from-windows-operating-system-components-to-microsoft-services", - "redirect_document_id": false - }, - { - "source_path": "windows/manage/introduction-to-windows-10-servicing.md", - "redirect_url": "/itpro/windows/update/index", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/manage-cortana-in-enterprise.md", - "redirect_url": "/itpro/windows/configure/cortana-at-work-overview", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/manage-inventory-windows-store-for-business.md", - "redirect_url": "/itpro/windows/manage/app-inventory-managemement-windows-store-for-business", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/uev-accessibility.md", - "redirect_url": "/itpro/windows/manage/uev-for-windows", - "redirect_document_id": true - }, - { - "source_path": "windows/manage/uev-privacy-statement.md", - "redirect_url": "/itpro/windows/manage/uev-security-considerations", - "redirect_document_id": true - }, - { - "source_path": "windows/plan/act-community-ratings-and-process.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": true - }, - { - "source_path": "windows/plan/act-database-configuration.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-database-migration.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-deployment-options.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-glossary.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/activating-and-closing-windows-in-acm.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-lps-share-permissions.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-operatingsystem-application-report.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-operatingsystem-computer-report.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-operatingsystem-device-report.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-product-and-documentation-resources.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-settings-dialog-box-preferences-tab.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-settings-dialog-box-settings-tab.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-toolbar-icons-in-acm.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-tools-packages-and-services.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/act-user-interface-reference.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/adding-or-editing-an-issue.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/adding-or-editing-a-solution.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/analyzing-your-compatibility-data.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/application-dialog-box.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/categorizing-your-compatibility-data.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/chromebook-migration-guide.md", - "redirect_url": "edu/windows/chromebook-migration-guide", - "redirect_document_id": true - }, - { - "source_path": "windows/plan/common-compatibility-issues.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/compatibility-monitor-users-guide.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/computer-dialog-box.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/configuring-act.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/creating-and-editing-issues-and-solutions.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/creating-an-enterprise-environment-for-compatibility-testing.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/creating-an-inventory-collector-package.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/creating-a-runtime-analysis-package.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/customizing-your-report-views.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/data-sent-through-the-microsoft-compatibility-exchange.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/deciding-whether-to-fix-an-application-or-deploy-a-workaround.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/deciding-which-applications-to-test.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/deleting-a-data-collection-package.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/deploying-an-inventory-collector-package.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/deploying-a-runtime-analysis-package.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/deploy-windows-10-in-a-school.md", - "redirect_url": "/edu/windows/deploy-windows-10-in-a-school", - "redirect_document_id": true - }, - { - "source_path": "windows/plan/example-filter-queries.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/exporting-a-data-collection-package.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/filtering-your-compatibility-data.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/fixing-compatibility-issues.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/identifying-computers-for-inventory-collection.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/integration-with-management-solutions-.md", - "redirect_url": "/itpro/windows/update/waas-manage-updates-wufb", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/internet-explorer-web-site-report.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/labeling-data-in-acm.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/log-file-locations-for-data-collection-packages.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/managing-your-data-collection-packages.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/organizational-tasks-for-each-report-type.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/organizing-your-compatibility-data.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/prioritizing-your-compatibility-data.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/ratings-icons-in-acm.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/resolving-an-issue.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/saving-opening-and-exporting-reports.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/selecting-the-send-and-receive-status-for-an-application.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/selecting-your-compatibility-rating.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/selecting-your-deployment-status.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/sending-and-receiving-compatibility-data.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/settings-for-acm.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/setup-and-deployment.md", - "redirect_url": "/itpro/windows/update/waas-manage-updates-wufb", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/software-requirements-for-act.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/software-requirements-for-rap.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/taking-inventory-of-your-organization.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/testing-compatibility-on-the-target-platform.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/troubleshooting-act.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/troubleshooting-act-database-issues.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/troubleshooting-the-act-configuration-wizard.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/troubleshooting-the-act-log-processing-service.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/using-act.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/using-compatibility-monitor-to-send-feedback.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/viewing-your-compatibility-reports.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/websiteurl-dialog-box.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/welcome-to-act.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/whats-new-in-act-60.md", - "redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/windows-10-guidance-for-education-environments.md", - "redirect_url": "/edu/windows/index", - "redirect_document_id": true - }, - { - "source_path": "windows/plan/windows-10-servicing-options.md", - "redirect_url": "/itpro/windows/update/waas-overview", - "redirect_document_id": false - }, - { - "source_path": "windows/plan/windows-update-for-business.md", - "redirect_url": "/itpro/windows/update/waas-manage-updates-wufb", - "redirect_document_id": false - }, - { - "source_path": "windows/whats-new/applocker.md", - "redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", - "redirect_document_id": true - }, - { - "source_path": "windows/whats-new/bitlocker.md", - "redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", - "redirect_document_id": false - }, - { - "source_path": "windows/whats-new/change-history-for-what-s-new-in-windows-10.md", - "redirect_url": "/itpro/windows/whats-new/index", - "redirect_document_id": true - }, - { - "source_path": "windows/whats-new/credential-guard.md", - "redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", - "redirect_document_id": false - }, - { - "source_path": "windows/whats-new/device-guard-overview.md", - "redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", - "redirect_document_id": false - }, - { - "source_path": "windows/whats-new/device-management.md", - "redirect_url": "/itpro/windows/manage/manage-corporate-devices", - "redirect_document_id": true - }, - { - "source_path": "windows/whats-new/edge-ie11-whats-new-overview.md", - "redirect_url": "/itpro/microsoft-edge/enterprise-guidance-using-microsoft-edge-and-ie11", - "redirect_document_id": true - }, - { - "source_path": "windows/whats-new/edp-whats-new-overview.md", - "redirect_url": "/itpro/windows/keep-secure/protect-enterprise-data-using-wip", - "redirect_document_id": false - }, - { - "source_path": "windows/whats-new/lockdown-features-windows-10.md", - "redirect_url": "/itpro/windows/configure/lockdown-features-windows-10", - "redirect_document_id": true - }, - { - "source_path": "windows/whats-new/microsoft-passport.md", - "redirect_url": "/itpro/windows/keep-secure/hello-identity-verification", - "redirect_document_id": false - }, - { - "source_path": "windows/whats-new/new-provisioning-packages.md", - "redirect_url": "/itpro/windows/configure/provisioning-packages", - "redirect_document_id": false - }, - { - "source_path": "windows/whats-new/security-auditing.md", - "redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", - "redirect_document_id": false - }, - { - "source_path": "windows/whats-new/trusted-platform-module.md", - "redirect_url": "/itpro/windows/keep-secure/trusted-platform-module-overview", - "redirect_document_id": true - }, - { - "source_path": "windows/whats-new/user-account-control.md", - "redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", - "redirect_document_id": false - }, - { - "source_path": "windows/whats-new/windows-spotlight.md", - "redirect_url": "/itpro/windows/configure/windows-spotlight", - "redirect_document_id": true - }, - { - "source_path": "windows/whats-new/windows-store-for-business-overview.md", - "redirect_url": "/itpro/windows/manage/windows-store-for-business-overview", - "redirect_document_id": true - }, - { - "source_path": "windows/whats-new/windows-update-for-business.md", - "redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", - "redirect_document_id": false - }, - { - "source_path": "windows/keep-secure/windows-10-security-guide.md", - "redirect_url": "/itpro/windows/keep-secure/overview-of-threat-mitigations-in-windows-10", - "redirect_document_id": true - }, - { - "source_path": "windows/whats-new/security.md", - "redirect_url": "/itpro/windows/keep-secure/overview-of-threat-mitigations-in-windows-10", - "redirect_document_id": false - }, - ] +"redirections": [ +{ +"source_path": "windows/manage/cortana-at-work-scenario-7.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-7", +"redirect_document_id": true +}, +{ +"source_path": "devices/surface-hub/surface-hub-administrators-guide.md", +"redirect_url": "/itpro/surface-hub/index", +"redirect_document_id": true +}, +{ +"source_path": "devices/surface-hub/intro-to-surface-hub.md", +"redirect_url": "/itpro/surface-hub/index", +"redirect_document_id": false +}, +{ +"source_path": "windows/manage/waas-quick-start.md", +"redirect_url": "/itpro/windows/update/waas-quick-start", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-overview.md", +"redirect_url": "/itpro/windows/update/waas-overview", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-servicing-strategy-windows-10-updates.md", +"redirect_url": "/itpro/windows/update/waas-servicing-strategy-windows-10-updates", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-deployment-rings-windows-10-updates.md", +"redirect_url": "/itpro/windows/update/waas-deployment-rings-windows-10-updates", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-servicing-branches-windows-10-updates.md", +"redirect_url": "/itpro/windows/update/waas-servicing-branches-windows-10-updates", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/update-compliance-monitor.md", +"redirect_url": "/itpro/windows/update/update-compliance-monitor", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/update-compliance-get-started.md", +"redirect_url": "/itpro/windows/update/update-compliance-get-started", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/update-compliance-using.md", +"redirect_url": "/itpro/windows/update/update-compliance-using", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-optimize-windows-10-updates.md", +"redirect_url": "/itpro/windows/update/waas-optimize-windows-10-updates", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-delivery-optimization.md", +"redirect_url": "/itpro/windows/update/waas-delivery-optimization", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-branchcache.md", +"redirect_url": "/itpro/windows/update/waas-branchcache", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-mobile-updates.md", +"redirect_url": "/itpro/windows/update/waas-mobile-updates", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-manage-updates-wufb.md", +"redirect_url": "/itpro/windows/update/waas-manage-updates-wufb", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-configure-wufb.md", +"redirect_url": "/itpro/windows/update/waas-configure-wufb", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-integrate-wufb.md", +"redirect_url": "/itpro/windows/update/waas-integrate-wufb", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-wufb-group-policy.md", +"redirect_url": "/itpro/windows/update/waas-wufb-group-policy", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-wufb-intune.md", +"redirect_url": "/itpro/windows/update/waas-wufb-intune.md", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-manage-updates-wsus.md", +"redirect_url": "/itpro/windows/update/waas-manage-updates-wsus", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-manage-updates-configuration-manager.md", +"redirect_url": "/itpro/windows/update/waas-manage-updates-configuration-manager", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-restart.md", +"redirect_url": "/itpro/windows/update/waas-restart", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/waas-update-windows-10.md", +"redirect_url": "/itpro/windows/update/index", +"redirect_document_id": false +}, +{ +"source_path": "windows/manage/configure-windows-telemetry-in-your-organization.md", +"redirect_url": "/itpro/windows/configure/configure-windows-telemetry-in-your-organization", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/manage-connections-from-windows-operating-system-components-to-microsoft-services.md", +"redirect_url": "/itpro/windows/configure/manage-connections-from-windows-operating-system-components-to-microsoft-services", +"redirect_document_id": false +}, +{ +"source_path": "windows/manage/set-up-a-device-for-anyone-to-use.md", +"redirect_url": "/itpro/windows/configure/set-up-a-device-for-anyone-to-use", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md", +"redirect_url": "/itpro/windows/configure/set-up-a-kiosk-for-windows-10-for-desktop-editions", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/guidelines-for-assigned-access-app.md", +"redirect_url": "/itpro/windows/configure/guidelines-for-assigned-access-app", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/lock-down-windows-10-to-specific-apps.md", +"redirect_url": "/itpro/windows/configure/lock-down-windows-10-to-specific-apps", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/set-up-a-kiosk-for-windows-10-for-mobile-edition.md", +"redirect_url": "/itpro/windows/configure/set-up-a-kiosk-for-windows-10-for-mobile-edition", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/lockdown-xml.md", +"redirect_url": "/itpro/windows/configure/lockdown-xml", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/settings-that-can-be-locked-down.md", +"redirect_url": "/itpro/windows/configure/settings-that-can-be-locked-down", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/product-ids-in-windows-10-mobile.md", +"redirect_url": "/itpro/windows/configure/product-ids-in-windows-10-mobile", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/manage-tips-and-suggestions.md", +"redirect_url": "/itpro/windows/configure/manage-tips-and-suggestions", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/windows-10-start-layout-options-and-policies.md", +"redirect_url": "/itpro/windows/configure/windows-10-start-layout-options-and-policies", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/configure-windows-10-taskbar.md", +"redirect_url": "/itpro/windows/configure/configure-windows-10-taskbar", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/customize-and-export-start-layout.md", +"redirect_url": "/itpro/windows/configure/customize-and-export-start-layout", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/start-layout-xml-desktop.md", +"redirect_url": "/itpro/windows/configure/start-layout-xml-desktop", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/start-layout-xml-mobile.md", +"redirect_url": "/itpro/windows/configure/start-layout-xml-mobile", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/customize-windows-10-start-screens-by-using-group-policy.md", +"redirect_url": "/itpro/windows/configure/customize-windows-10-start-screens-by-using-group-policy", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md", +"redirect_url": "/itpro/windows/configure/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/customize-windows-10-start-screens-by-using-mobile-device-management.md", +"redirect_url": "/itpro/windows/configure/customize-windows-10-start-screens-by-using-mobile-device-management", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-testing-scenarios.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-testing-scenarios", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-scenario-1.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-1", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-scenario-2.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-2", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-scenario-3.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-3", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-scenario-4.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-4", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-scenario-5.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-5", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-scenario-6.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-scenario-6", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-o365.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-o365", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-crm.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-crm", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-powerbi.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-powerbi", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-voice-commands.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-voice-commands", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-policy-settings.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-policy-settings", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/cortana-at-work-feedback.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-feedback", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/stop-employees-from-using-the-windows-store.md", +"redirect_url": "/itpro/windows/configure/stop-employees-from-using-the-windows-store", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/configure-devices-without-mdm.md", +"redirect_url": "/itpro/windows/configure/configure-devices-without-mdm", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/changes-to-start-policies-in-windows-10.md", +"redirect_url": "/itpro/windows/configure/changes-to-start-policies-in-windows-10", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/how-it-pros-can-use-configuration-service-providers.md", +"redirect_url": "/itpro/windows/configure/how-it-pros-can-use-configuration-service-providers", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/lock-down-windows-10.md", +"redirect_url": "/itpro/windows/configure/index", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/manage-wifi-sense-in-enterprise.md", +"redirect_url": "/itpro/windows/configure/manage-wifi-sense-in-enterprise", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-packages.md", +"redirect_url": "/itpro/windows/configure/provisioning-packages", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-how-it-works.md", +"redirect_url": "/itpro/windows/configure/provisioning-how-it-works", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-install-icd.md", +"redirect_url": "/itpro/windows/configure/provisioning-install-icd", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-create-package.md", +"redirect_url": "/itpro/windows/configure/provisioning-create-package", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-apply-package.md", +"redirect_url": "/itpro/windows/configure/provisioning-apply-package", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-uninstall-package.md", +"redirect_url": "/itpro/windows/configure/provisioning-uninstall-package", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provision-pcs-for-initial-deployment.md", +"redirect_url": "/itpro/windows/configure/provision-pcs-for-initial-deployment", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provision-pcs-with-apps-and-certificates.md", +"redirect_url": "/itpro/windows/configure/provision-pcs-with-apps", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-script-to-install-app.md", +"redirect_url": "/itpro/windows/configure/provisioning-script-to-install-app", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-nfc.md", +"redirect_url": "/itpro/windows/configure/provisioning-nfc", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-command-line.md", +"redirect_url": "/itpro/windows/configure/provisioning-command-line", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/provisioning-multivariant.md", +"redirect_url": "/itpro/windows/configure/provisioning-multivariant", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/create-edp-policy-using-intune.md", +"redirect_url": "/itpro/windows/keep-secure/create-wip-policy-using-intune", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/create-edp-policy-using-sccm.md", +"redirect_url": "/itpro/windows/keep-secure/create-wip-policy-using-sccm", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/create-vpn-and-edp-policy-using-intune.md", +"redirect_url": "/itpro/windows/keep-secure/create-vpn-and-wip-policy-using-intune", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/deploy-edp-policy-using-intune.md", +"redirect_url": "/itpro/windows/keep-secure/deploy-wip-policy-using-intune", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/guidance-and-best-practices-edp.md", +"redirect_url": "/itpro/windows/keep-secure/guidance-and-best-practices-wip", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/overview-create-edp-policy.md", +"redirect_url": "/itpro/windows/keep-secure/overview-create-wip-policy", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/protect-enterprise-data-using-edp.md", +"redirect_url": "/itpro/windows/keep-secure/protect-enterprise-data-using-wip", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/testing-scenarios-for-edp.md", +"redirect_url": "/itpro/windows/keep-secure/testing-scenarios-for-wip", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/wip-enterprise-overview.md", +"redirect_url": "/itpro/windows/keep-secure/protect-enterprise-data-using-wip", +"redirect_document_id": false +}, +{ +"source_path": "windows/keep-secure/enlightened-microsoft-apps-and-edp.md", +"redirect_url": "/itpro/windows/keep-secure/enlightened-microsoft-apps-and-wip", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/update-windows-10-images-with-provisioning-packages.md", +"redirect_url": "/itpro/windows/configure/provisioning-packages", +"redirect_document_id": false +}, +{ +"source_path": "windows/deploy/upgrade-analytics-prepare-your-environment.md", +"redirect_url": "/itpro/windows/deploy/upgrade-analytics-identify-apps", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/upgrade-analytics-release-notes.md", +"redirect_url": "/itpro/windows/deploy/upgrade-analytics-requirements", +"redirect_document_id": true +}, +{ +"source_path": "windows/deploy/upgrade-analytics-review-site-discovery.md", +"redirect_url": "/itpro/windows/deploy/upgrade-analytics-additional-insights", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/additional-configuration-windows-advanced-threat-protection.md", +"redirect_url": "/itpro/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/ad-ds-schema-extensions-to-support-tpm-backup.md", +"redirect_url": "https://technet.microsoft.com/library/jj635854.aspx", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/creating-a-device-guard-policy-for-signed-apps.md", +"redirect_url": "/itpro/windows/keep-secure/device-guard-deployment-guide", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/device-guard-certification-and-compliance.md", +"redirect_url": "/itpro/windows/keep-secure/device-guard-deployment-guide", +"redirect_document_id": false +}, +{ +"source_path": "windows/keep-secure/enable-phone-signin-to-pc-and-vpn.md", +"redirect_url": "/itpro/windows/keep-secure/hello-enable-phone-signin", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/getting-apps-to-run-on-device-guard-protected-devices.md", +"redirect_url": "/itpro/windows/keep-secure/device-guard-deployment-guide", +"redirect_document_id": false +}, +{ +"source_path": "windows/keep-secure/implement-microsoft-passport-in-your-organization.md", +"redirect_url": "/itpro/windows/keep-secure/hello-manage-in-organization", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/manage-identity-verification-using-microsoft-passport.md", +"redirect_url": "/itpro/windows/keep-secure/hello-identity-verification", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/microsoft-passport-and-password-changes.md", +"redirect_url": "/itpro/windows/keep-secure/hello-and-password-changes", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/microsoft-passport-errors-during-pin-creation.md", +"redirect_url": "/itpro/windows/keep-secure/hello-errors-during-pin-creation", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/microsoft-passport-guide.md", +"redirect_url": "/itpro/windows/keep-secure/hello-identity-verification", +"redirect_document_id": false +}, +{ +"source_path": "windows/keep-secure/monitor-onboarding-windows-advanced-threat-protection.md", +"redirect_url": "/itpro/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection", +"redirect_document_id": false +}, +{ +"source_path": "windows/keep-secure/passport-event-300.md", +"redirect_url": "/itpro/windows/keep-secure/hello-event-300", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/prepare-people-to-use-microsoft-passport.md", +"redirect_url": "/itpro/windows/keep-secure/hello-prepare-people-to-use", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/why-a-pin-is-better-than-a-password.md", +"redirect_url": "/itpro/windows/keep-secure/hello-why-pin-is-better-than-password", +"redirect_document_id": true +}, +{ +"source_path": "windows/keep-secure/windows-hello-in-enterprise.md", +"redirect_url": "/itpro/windows/keep-secure/hello-biometrics-in-enterprise", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/app-inventory-managemement-windows-store-for-business.md", +"redirect_url": "/itpro/windows/manage/app-inventory-management-windows-store-for-business", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/application-development-for-windows-as-a-service.md", +"redirect_url": "https://msdn.microsoft.com/windows/uwp/get-started/application-development-for-windows-as-a-service", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/appv-accessibility.md", +"redirect_url": "/itpro/windows/manage/appv-getting-started", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/appv-accessing-the-client-management-console.md", +"redirect_url": "/itpro/windows/manage/appv-using-the-client-management-console", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/appv-install-the-appv-client-for-shared-content-store-mode.md", +"redirect_url": "/itpro/windows/manage/appv-deploying-the-appv-sequencer-and-client", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/appv-modify-client-configuration-with-the-admx-template-and-group-policy.md", +"redirect_url": "/itpro/windows/manage/appv-deploying-the-appv-sequencer-and-client", +"redirect_document_id": false +}, +{ +"source_path": "windows/manage/appv-planning-for-migrating-from-a-previous-version-of-appv.md", +"redirect_url": "/itpro/windows/manage/appv-migrating-to-appv-from-a-previous-version", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/configure-windows-10-devices-to-stop-data-flow-to-microsoft.md", +"redirect_url": "/itpro/windows/configure/manage-connections-from-windows-operating-system-components-to-microsoft-services", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/disconnect-your-organization-from-microsoft.md", +"redirect_url": "/itpro/windows/configure/manage-connections-from-windows-operating-system-components-to-microsoft-services", +"redirect_document_id": false +}, +{ +"source_path": "windows/manage/introduction-to-windows-10-servicing.md", +"redirect_url": "/itpro/windows/update/index", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/manage-cortana-in-enterprise.md", +"redirect_url": "/itpro/windows/configure/cortana-at-work-overview", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/manage-inventory-windows-store-for-business.md", +"redirect_url": "/itpro/windows/manage/app-inventory-managemement-windows-store-for-business", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/uev-accessibility.md", +"redirect_url": "/itpro/windows/manage/uev-for-windows", +"redirect_document_id": true +}, +{ +"source_path": "windows/manage/uev-privacy-statement.md", +"redirect_url": "/itpro/windows/manage/uev-security-considerations", +"redirect_document_id": true +}, +{ +"source_path": "windows/plan/act-community-ratings-and-process.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": true +}, +{ +"source_path": "windows/plan/act-database-configuration.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-database-migration.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-deployment-options.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-glossary.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/activating-and-closing-windows-in-acm.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-lps-share-permissions.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-operatingsystem-application-report.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-operatingsystem-computer-report.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-operatingsystem-device-report.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-product-and-documentation-resources.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-settings-dialog-box-preferences-tab.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-settings-dialog-box-settings-tab.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-toolbar-icons-in-acm.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-tools-packages-and-services.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/act-user-interface-reference.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/adding-or-editing-an-issue.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/adding-or-editing-a-solution.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/analyzing-your-compatibility-data.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/application-dialog-box.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/categorizing-your-compatibility-data.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/chromebook-migration-guide.md", +"redirect_url": "edu/windows/chromebook-migration-guide", +"redirect_document_id": true +}, +{ +"source_path": "windows/plan/common-compatibility-issues.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/compatibility-monitor-users-guide.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/computer-dialog-box.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/configuring-act.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/creating-and-editing-issues-and-solutions.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/creating-an-enterprise-environment-for-compatibility-testing.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/creating-an-inventory-collector-package.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/creating-a-runtime-analysis-package.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/customizing-your-report-views.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/data-sent-through-the-microsoft-compatibility-exchange.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/deciding-whether-to-fix-an-application-or-deploy-a-workaround.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/deciding-which-applications-to-test.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/deleting-a-data-collection-package.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/deploying-an-inventory-collector-package.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/deploying-a-runtime-analysis-package.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/deploy-windows-10-in-a-school.md", +"redirect_url": "/edu/windows/deploy-windows-10-in-a-school", +"redirect_document_id": true +}, +{ +"source_path": "windows/plan/example-filter-queries.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/exporting-a-data-collection-package.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/filtering-your-compatibility-data.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/fixing-compatibility-issues.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/identifying-computers-for-inventory-collection.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/integration-with-management-solutions-.md", +"redirect_url": "/itpro/windows/update/waas-manage-updates-wufb", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/internet-explorer-web-site-report.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/labeling-data-in-acm.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/log-file-locations-for-data-collection-packages.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/managing-your-data-collection-packages.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/organizational-tasks-for-each-report-type.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/organizing-your-compatibility-data.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/prioritizing-your-compatibility-data.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/ratings-icons-in-acm.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/resolving-an-issue.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/saving-opening-and-exporting-reports.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/selecting-the-send-and-receive-status-for-an-application.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/selecting-your-compatibility-rating.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/selecting-your-deployment-status.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/sending-and-receiving-compatibility-data.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/settings-for-acm.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/setup-and-deployment.md", +"redirect_url": "/itpro/windows/update/waas-manage-updates-wufb", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/software-requirements-for-act.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/software-requirements-for-rap.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/taking-inventory-of-your-organization.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/testing-compatibility-on-the-target-platform.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/troubleshooting-act.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/troubleshooting-act-database-issues.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/troubleshooting-the-act-configuration-wizard.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/troubleshooting-the-act-log-processing-service.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/using-act.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/using-compatibility-monitor-to-send-feedback.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/viewing-your-compatibility-reports.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/websiteurl-dialog-box.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/welcome-to-act.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/whats-new-in-act-60.md", +"redirect_url": "/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/windows-10-guidance-for-education-environments.md", +"redirect_url": "/edu/windows/index", +"redirect_document_id": true +}, +{ +"source_path": "windows/plan/windows-10-servicing-options.md", +"redirect_url": "/itpro/windows/update/waas-overview", +"redirect_document_id": false +}, +{ +"source_path": "windows/plan/windows-update-for-business.md", +"redirect_url": "/itpro/windows/update/waas-manage-updates-wufb", +"redirect_document_id": false +}, +{ +"source_path": "windows/whats-new/applocker.md", +"redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", +"redirect_document_id": true +}, +{ +"source_path": "windows/whats-new/bitlocker.md", +"redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", +"redirect_document_id": false +}, +{ +"source_path": "windows/whats-new/change-history-for-what-s-new-in-windows-10.md", +"redirect_url": "/itpro/windows/whats-new/index", +"redirect_document_id": true +}, +{ +"source_path": "windows/whats-new/credential-guard.md", +"redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", +"redirect_document_id": false +}, +{ +"source_path": "windows/whats-new/device-guard-overview.md", +"redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", +"redirect_document_id": false +}, +{ +"source_path": "windows/whats-new/device-management.md", +"redirect_url": "/itpro/windows/manage/manage-corporate-devices", +"redirect_document_id": true +}, +{ +"source_path": "windows/whats-new/edge-ie11-whats-new-overview.md", +"redirect_url": "/itpro/microsoft-edge/enterprise-guidance-using-microsoft-edge-and-ie11", +"redirect_document_id": true +}, +{ +"source_path": "windows/whats-new/edp-whats-new-overview.md", +"redirect_url": "/itpro/windows/keep-secure/protect-enterprise-data-using-wip", +"redirect_document_id": false +}, +{ +"source_path": "windows/whats-new/lockdown-features-windows-10.md", +"redirect_url": "/itpro/windows/configure/lockdown-features-windows-10", +"redirect_document_id": true +}, +{ +"source_path": "windows/whats-new/microsoft-passport.md", +"redirect_url": "/itpro/windows/keep-secure/hello-identity-verification", +"redirect_document_id": false +}, +{ +"source_path": "windows/whats-new/new-provisioning-packages.md", +"redirect_url": "/itpro/windows/configure/provisioning-packages", +"redirect_document_id": false +}, +{ +"source_path": "windows/whats-new/security-auditing.md", +"redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", +"redirect_document_id": false +}, +{ +"source_path": "windows/whats-new/trusted-platform-module.md", +"redirect_url": "/itpro/windows/keep-secure/trusted-platform-module-overview", +"redirect_document_id": true +}, +{ +"source_path": "windows/whats-new/user-account-control.md", +"redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", +"redirect_document_id": false +}, +{ +"source_path": "windows/whats-new/windows-spotlight.md", +"redirect_url": "/itpro/windows/configure/windows-spotlight", +"redirect_document_id": true +}, +{ +"source_path": "windows/whats-new/windows-store-for-business-overview.md", +"redirect_url": "/itpro/windows/manage/windows-store-for-business-overview", +"redirect_document_id": true +}, +{ +"source_path": "windows/whats-new/windows-update-for-business.md", +"redirect_url": "/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511", +"redirect_document_id": false +}, +{ +"source_path": "windows/keep-secure/windows-10-security-guide.md", +"redirect_url": "/itpro/windows/keep-secure/overview-of-threat-mitigations-in-windows-10", +"redirect_document_id": true +}, +{ +"source_path": "windows/whats-new/security.md", +"redirect_url": "/itpro/windows/keep-secure/overview-of-threat-mitigations-in-windows-10", +"redirect_document_id": false +}, +] } \ No newline at end of file From eb4d730b57dbbc5a26676a6616f0d96027ef4925 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 20 Mar 2017 10:00:52 -0700 Subject: [PATCH 09/32] Redirected to configure --- windows/manage/cortana-at-work-scenario-7.md | 38 -------------------- 1 file changed, 38 deletions(-) delete mode 100644 windows/manage/cortana-at-work-scenario-7.md diff --git a/windows/manage/cortana-at-work-scenario-7.md b/windows/manage/cortana-at-work-scenario-7.md deleted file mode 100644 index e8d6cfd3ff..0000000000 --- a/windows/manage/cortana-at-work-scenario-7.md +++ /dev/null @@ -1,38 +0,0 @@ ---- -title: Test scenario 7 - Use Cortana and Windows Information Protection (WIP) to help protect your organization’s data on a device (Windows 10) -description: An optional test scenario about how to use Cortana at work with Windows Information Protection (WIP). -ms.prod: w10 -ms.mktglfcycl: manage -ms.sitesec: library -author: eross-msft -localizationpriority: high ---- - -# Test scenario 7 - Use Cortana and Windows Information Protection (WIP) to help protect your organization’s data on a device - -- Windows 10, Windows Insider Program -- Windows 10 Mobile, Windows Insider Program - ->[!IMPORTANT] ->Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - ->[!IMPORTANT] ->The data created as part of these scenarios will be uploaded to Microsoft’s Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering. - -This optional scenario helps you to protect your organization’s data on a device, based on an inspection by Cortana. - -## Use Cortana and WIP to protect your organization’s data - -1. Create and deploy an WIP policy to your organization. For info about how to do this, see [Protect your enterprise data using Windows Information Protection (WIP)](../keep-secure/protect-enterprise-data-using-wip.md). - -2. Create a new email from a non-protected or personal mailbox, including the text _I’ll send you that presentation tomorrow_. - -3. Wait up to 2 hours to make sure everything has updated, click the **Cortana** icon in the taskbar, and then click in the **Search** bar. - - Cortana automatically pulls your commitment to sending the presentation out of your email, showing it to you. - -4. Create a new email from a protected mailbox, including the same text as above, _I’ll send you that presentation tomorrow_. - -5. Wait until everything has updated again, click the **Cortana** icon in the taskbar, and then click in the **Search** bar. - - Because it was in an WIP-protected email, the presentation info isn’t pulled out and it isn’t shown to you. From 8e836f07cf0e6b3e66c21a12517443ff5280fe0d Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Mon, 20 Mar 2017 10:52:11 -0700 Subject: [PATCH 10/32] get rid of that last %!@#$ space --- windows/configure/lockdown-xml.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configure/lockdown-xml.md b/windows/configure/lockdown-xml.md index 936ed8c310..869ce086e1 100644 --- a/windows/configure/lockdown-xml.md +++ b/windows/configure/lockdown-xml.md @@ -381,7 +381,7 @@ For a list of the settings and quick actions that you can allow or block, see [S [Learn about effective pixel width (epx) for different device size classes.](https://go.microsoft.com/fwlink/p/?LinkId=733340) - ## Configure additional roles +## Configure additional roles You can add custom configurations by role. In addition to the role configuration, you must also install a login application on the device. The app displays a list of available roles on the device; the user taps a role, such as "Manager"; the configuration defined for the "Manager" role is applied. From 1f891ca74c4dca1086688f86ba6d1f0dd4b1646c Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 20 Mar 2017 11:45:32 -0700 Subject: [PATCH 11/32] Update whats-new-windows-10-version-1703.md --- .../whats-new/whats-new-windows-10-version-1703.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 350050e052..e3a7a0c90b 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -64,6 +64,18 @@ Cortana is Microsoft’s personal digital assistant, who helps busy people get t Using Azure AD also means that you can remove an employee’s profile (for example, when an employee leaves your organization) while respecting Windows Information Protection (WIP) policies and ignoring enterprise content, such as emails, calendar items, and people lists that are marked as enterprise data. +## Security + +### Windows Defender Advanced Threat Protection (Windows Defender ATP) +The following features have been added to Windows Defender ATP in Windows 10, version 1703. + +- Detection + +- Investigation + +- Response + + ## Learn more - [Windows 10 release information](https://technet.microsoft.com/en-us/windows/release-info) From be5d4f0eded8f23ef3bee7579990912316a1df7a Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 20 Mar 2017 12:09:25 -0700 Subject: [PATCH 12/32] Update whats-new-windows-10-version-1703.md --- windows/whats-new/whats-new-windows-10-version-1703.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index e3a7a0c90b..cedea22eaa 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -75,6 +75,14 @@ The following features have been added to Windows Defender ATP in Windows 10, ve - Response +### Device Guard and Credential Guard + +Additional security qualifications for Device Guard and Credential Guard help protect vulnerabilities in UEFI runtime. +For more information, see [Device Guard Requirements](../keep-secure/requirements-and-deployment-planning-guidelines-for-device-guard.md#device-guard-requirements-for-improved-security) and [Credential Guard Security Considerations](../keep-secure/credential-guard.md#security-considerations). + +### Group Policy Security Options + +The security setting [**Interactive logon: Display user information when the session is locked**](../keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md) has been updated to work in conjunction with the **Privacy** setting in **Settings** > **Accounts** > **Sign-in options**. ## Learn more From 6e31a1a1c59387d10768b7e6e5ae0f00ec4dea57 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 Mar 2017 13:07:54 -0700 Subject: [PATCH 13/32] insert windows defender atp content --- .../whats-new-windows-10-version-1703.md | 31 ++++++++++++++++--- 1 file changed, 26 insertions(+), 5 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index cedea22eaa..0eda54a6ee 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -48,11 +48,11 @@ The following new Group Policy and mobile device management (MDM) settings are a ### Kiosk mode for Windows 10 Mobile -In Windows 10 Mobile, version 1703, [Apps Corner](https://support.microsoft.com/instantanswers/7959c547-aa80-5ff1-9097-1784b6894845/set-up-apps-corner) is removed. Enterprises can use [Enterprise Assigned Access to configure kiosk experiences](../configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) on devices running Windows 10 Mobile. +In Windows 10 Mobile, version 1703, [Apps Corner](https://support.microsoft.com/instantanswers/7959c547-aa80-5ff1-9097-1784b6894845/set-up-apps-corner) is removed. Enterprises can use [Enterprise Assigned Access to configure kiosk experiences](../configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) on devices running Windows 10 Mobile. ### Start and taskbar layout -Enterprises can apply a customized Start and tasbkar layout to devices running Windows 10 Pro, version 1703. +Enterprises can apply a customized Start and tasbkar layout to devices running Windows 10 Pro, version 1703. Additional MDM policy settings are available for Start and taskbar layout. For details, see [Manage Windows 10 Start and taskbar layout](../configure/windows-10-start-layout-options-and-policies.md). @@ -69,11 +69,32 @@ Using Azure AD also means that you can remove an employee’s profile (for examp ### Windows Defender Advanced Threat Protection (Windows Defender ATP) The following features have been added to Windows Defender ATP in Windows 10, version 1703. -- Detection +- **Response**
+ When detecting an attack, security response teams can now take immediate action to contain a breach: + - [Take response actions on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. + - [Isolate machines from the network](respond-machine-alerts-windows-defender-advanced-threat-protection.md#isolate-machines-from-the-network) + - [Undo machine isolation](respond-machine-alerts-windows-defender-advanced-threat-protection.md#undo-machine-isolation) + - [Collect investigation package](respond-machine-alerts-windows-defender-advanced-threat-protection.md#collect-investigation-package-from-machines) -- Investigation + - [Take response actions on a file](respond-file-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by stopping and quarantining files or blocking a file. + - [Stop and quarantine files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#stop-and-quarantine-files-in-your-network) + - [Remove file from quarantine](respond-file-alerts-windows-defender-advanced-threat-protection.md#remove-file-from-quarantine) + - [Block files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#block-files-in-your-network) -- Response +- **Investigation**
+ Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. + + Other investigation capabilities include: + + - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. + - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. + +- **Detection**
+ Windows Creators Update improves OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks. + + Other detection capabilities include: + - [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. + ### Device Guard and Credential Guard From b8187ef947d0eccf5b92e71f13282f5a1a37c066 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Mon, 20 Mar 2017 13:18:19 -0700 Subject: [PATCH 14/32] Update with WDAV stuff NB: links may not work as WDAV files aren't merged into RS2 yet --- .../whats-new-windows-10-version-1703.md | 44 +++++++++---------- 1 file changed, 22 insertions(+), 22 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 0eda54a6ee..fdc78d9f55 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -48,11 +48,11 @@ The following new Group Policy and mobile device management (MDM) settings are a ### Kiosk mode for Windows 10 Mobile -In Windows 10 Mobile, version 1703, [Apps Corner](https://support.microsoft.com/instantanswers/7959c547-aa80-5ff1-9097-1784b6894845/set-up-apps-corner) is removed. Enterprises can use [Enterprise Assigned Access to configure kiosk experiences](../configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) on devices running Windows 10 Mobile. +In Windows 10 Mobile, version 1703, [Apps Corner](https://support.microsoft.com/instantanswers/7959c547-aa80-5ff1-9097-1784b6894845/set-up-apps-corner) is removed. Enterprises can use [Enterprise Assigned Access to configure kiosk experiences](../configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) on devices running Windows 10 Mobile. ### Start and taskbar layout -Enterprises can apply a customized Start and tasbkar layout to devices running Windows 10 Pro, version 1703. +Enterprises can apply a customized Start and tasbkar layout to devices running Windows 10 Pro, version 1703. Additional MDM policy settings are available for Start and taskbar layout. For details, see [Manage Windows 10 Start and taskbar layout](../configure/windows-10-start-layout-options-and-policies.md). @@ -69,32 +69,32 @@ Using Azure AD also means that you can remove an employee’s profile (for examp ### Windows Defender Advanced Threat Protection (Windows Defender ATP) The following features have been added to Windows Defender ATP in Windows 10, version 1703. -- **Response**
- When detecting an attack, security response teams can now take immediate action to contain a breach: - - [Take response actions on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. - - [Isolate machines from the network](respond-machine-alerts-windows-defender-advanced-threat-protection.md#isolate-machines-from-the-network) - - [Undo machine isolation](respond-machine-alerts-windows-defender-advanced-threat-protection.md#undo-machine-isolation) - - [Collect investigation package](respond-machine-alerts-windows-defender-advanced-threat-protection.md#collect-investigation-package-from-machines) +- Detection - - [Take response actions on a file](respond-file-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by stopping and quarantining files or blocking a file. - - [Stop and quarantine files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#stop-and-quarantine-files-in-your-network) - - [Remove file from quarantine](respond-file-alerts-windows-defender-advanced-threat-protection.md#remove-file-from-quarantine) - - [Block files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#block-files-in-your-network) +- Investigation -- **Investigation**
- Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. +- Response - Other investigation capabilities include: +### Windows Defender Antivirus (Windows Defender AV) +New features for Windows Defender AV in Windows 10, version 1703 include: - - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. - - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. +- [Updates to how the Block at First Sight feature can be configured](../keep-secure/configure-block-at-first-sight-windows-defender-antivirus.md) +- [The ability to specify the level of cloud-protection](../keep-secure/specify-cloud-protection-level-windows-defender-antivirus.md) +- [Windows Defender Antivirus protection in the Windows Defender Security Center app](../keep-secure/windows-defender-security-center-antivirus.md) -- **Detection**
- Windows Creators Update improves OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks. +Windows Defender is now called Windows Defender Antivirus, and we've [increased the breadth of the documentation library for enterprise security admins](../keep-secure/windows-defender-antivirus-in-windows-10.md). + +The new library includes information on: +- [Deploying and enabling AV protection](../keep-secure/deploy-windows-defender-antivirus.md) +- [Managing updates](../keep-secure/manage-updates-baselines-windows-defender-antivirus.md) +- [Reporting](../keep-secure/report-monitor-windows-defender-antivirus.md) +- [Configuring features](../keep-secure/configure-windows-defender-antivirus-features.md) +- [Troubleshooting](../keep-secure/troubleshoot-windows-defender-antivirus.md) + +Some of the highlights of the new library include: +- [Evaluation guide for Windows Defender AV](../keep-secure/evaluate-windows-defender-antivirus.md) +- [Deployment guide for Windows Defender AV in a virtual desktop infrastructure environment](../keep-secure/deployment-vdi-windows-defender-antivirus.md) - Other detection capabilities include: - - [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. - ### Device Guard and Credential Guard From c3a140cde5aa44300496bfa4ef5b0dfe02037c43 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Mon, 20 Mar 2017 13:23:40 -0700 Subject: [PATCH 15/32] reinsert wdatp stuff Apparently it cut ATP out after I put in AV --- .../whats-new-windows-10-version-1703.md | 26 ++++++++++++++++--- 1 file changed, 23 insertions(+), 3 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index fdc78d9f55..42200bb434 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -69,11 +69,31 @@ Using Azure AD also means that you can remove an employee’s profile (for examp ### Windows Defender Advanced Threat Protection (Windows Defender ATP) The following features have been added to Windows Defender ATP in Windows 10, version 1703. -- Detection +- **Response**
+When detecting an attack, security response teams can now take immediate action to contain a breach: +- [Take response actions on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. +- [Isolate machines from the network](respond-machine-alerts-windows-defender-advanced-threat-protection.md#isolate-machines-from-the-network) +- [Undo machine isolation](respond-machine-alerts-windows-defender-advanced-threat-protection.md#undo-machine-isolation) +- [Collect investigation package](respond-machine-alerts-windows-defender-advanced-threat-protection.md#collect-investigation-package-from-machines) +- [Take response actions on a file](respond-file-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by stopping and quarantining files or blocking a file. +- [Stop and quarantine files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#stop-and-quarantine-files-in-your-network) +- [Remove file from quarantine](respond-file-alerts-windows-defender-advanced-threat-protection.md#remove-file-from-quarantine) +- [Block files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#block-files-in-your-network) + +- **Investigation**
+Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. -- Investigation +Other investigation capabilities include: -- Response +- [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. +- [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. + +- **Detection**
+Windows Creators Update improves OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks. + +Other detection capabilities include: +- [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. + ### Windows Defender Antivirus (Windows Defender AV) New features for Windows Defender AV in Windows 10, version 1703 include: From 74735e27303856eaca75ba590e5bed42be2614a0 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 Mar 2017 13:50:31 -0700 Subject: [PATCH 16/32] udate atp section --- .../whats-new-windows-10-version-1703.md | 36 +++++++++++-------- 1 file changed, 21 insertions(+), 15 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 0eda54a6ee..1e07b37c1f 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -69,6 +69,22 @@ Using Azure AD also means that you can remove an employee’s profile (for examp ### Windows Defender Advanced Threat Protection (Windows Defender ATP) The following features have been added to Windows Defender ATP in Windows 10, version 1703. +- **Detection**
+ Enhancements to the detection capabilities include: + - [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. + - Improvements on OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks + - Upgraded detections of ransomware and other advanced attacks + - Historical detection capability ensures new detection rules apply to up to six months of stored data to detect attacks that previously went unnoticed + + - **Investigation**
+ Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. Other capabilities have been added to help you gain a holistic view on investigations. + + Other investigation enhancements include: + + - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. + - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. + - [Pull alerts using REST API](pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) - Use REST API to pull alerts from Windows Defender ATP. + - **Response**
When detecting an attack, security response teams can now take immediate action to contain a breach: - [Take response actions on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. @@ -81,29 +97,19 @@ The following features have been added to Windows Defender ATP in Windows 10, ve - [Remove file from quarantine](respond-file-alerts-windows-defender-advanced-threat-protection.md#remove-file-from-quarantine) - [Block files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#block-files-in-your-network) -- **Investigation**
- Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. - - Other investigation capabilities include: - - - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. - - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. - -- **Detection**
- Windows Creators Update improves OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks. - - Other detection capabilities include: - - [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. +- **Other features** + - [Check sensor health state](check-sensor-status-windows-defender-advanced-threat-protection.md) - Check an endpoint's ability to provide sensor data and communicate with the Windows Defender ATP service and fix known issues. + - [Fix unhealthy sensors](fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md) ### Device Guard and Credential Guard -Additional security qualifications for Device Guard and Credential Guard help protect vulnerabilities in UEFI runtime. +Additional security qualifications for Device Guard and Credential Guard help protect vulnerabilities in UEFI runtime. For more information, see [Device Guard Requirements](../keep-secure/requirements-and-deployment-planning-guidelines-for-device-guard.md#device-guard-requirements-for-improved-security) and [Credential Guard Security Considerations](../keep-secure/credential-guard.md#security-considerations). ### Group Policy Security Options -The security setting [**Interactive logon: Display user information when the session is locked**](../keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md) has been updated to work in conjunction with the **Privacy** setting in **Settings** > **Accounts** > **Sign-in options**. +The security setting [**Interactive logon: Display user information when the session is locked**](../keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md) has been updated to work in conjunction with the **Privacy** setting in **Settings** > **Accounts** > **Sign-in options**. ## Learn more From 065716317be8b015a949a99d31ae06c6388aca08 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 20 Mar 2017 13:52:38 -0700 Subject: [PATCH 17/32] update wdatp section --- .../whats-new-windows-10-version-1703.md | 49 ++++++++++--------- 1 file changed, 27 insertions(+), 22 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 42200bb434..5cb14c58b5 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -67,32 +67,37 @@ Using Azure AD also means that you can remove an employee’s profile (for examp ## Security ### Windows Defender Advanced Threat Protection (Windows Defender ATP) -The following features have been added to Windows Defender ATP in Windows 10, version 1703. +- **Detection**
+ Enhancements to the detection capabilities include: + - [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. + - Improvements on OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks + - Upgraded detections of ransomware and other advanced attacks + - Historical detection capability ensures new detection rules apply to up to six months of stored data to detect attacks that previously went unnoticed + + - **Investigation**
+ Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. Other capabilities have been added to help you gain a holistic view on investigations. + + Other investigation enhancements include: + + - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. + - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. + - [Pull alerts using REST API](pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) - Use REST API to pull alerts from Windows Defender ATP. - **Response**
-When detecting an attack, security response teams can now take immediate action to contain a breach: -- [Take response actions on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. -- [Isolate machines from the network](respond-machine-alerts-windows-defender-advanced-threat-protection.md#isolate-machines-from-the-network) -- [Undo machine isolation](respond-machine-alerts-windows-defender-advanced-threat-protection.md#undo-machine-isolation) -- [Collect investigation package](respond-machine-alerts-windows-defender-advanced-threat-protection.md#collect-investigation-package-from-machines) -- [Take response actions on a file](respond-file-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by stopping and quarantining files or blocking a file. -- [Stop and quarantine files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#stop-and-quarantine-files-in-your-network) -- [Remove file from quarantine](respond-file-alerts-windows-defender-advanced-threat-protection.md#remove-file-from-quarantine) -- [Block files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#block-files-in-your-network) - -- **Investigation**
-Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. + When detecting an attack, security response teams can now take immediate action to contain a breach: + - [Take response actions on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. + - [Isolate machines from the network](respond-machine-alerts-windows-defender-advanced-threat-protection.md#isolate-machines-from-the-network) + - [Undo machine isolation](respond-machine-alerts-windows-defender-advanced-threat-protection.md#undo-machine-isolation) + - [Collect investigation package](respond-machine-alerts-windows-defender-advanced-threat-protection.md#collect-investigation-package-from-machines) -Other investigation capabilities include: + - [Take response actions on a file](respond-file-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by stopping and quarantining files or blocking a file. + - [Stop and quarantine files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#stop-and-quarantine-files-in-your-network) + - [Remove file from quarantine](respond-file-alerts-windows-defender-advanced-threat-protection.md#remove-file-from-quarantine) + - [Block files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#block-files-in-your-network) -- [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. -- [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. - -- **Detection**
-Windows Creators Update improves OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks. - -Other detection capabilities include: -- [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. +- **Other features** + - [Check sensor health state](check-sensor-status-windows-defender-advanced-threat-protection.md) - Check an endpoint's ability to provide sensor data and communicate with the Windows Defender ATP service and fix known issues. + - [Fix unhealthy sensors](fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md) ### Windows Defender Antivirus (Windows Defender AV) From b9249f430e9331dcc2bc15f75a37730d5f15938f Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 20 Mar 2017 13:54:51 -0700 Subject: [PATCH 18/32] Update whats-new-windows-10-version-1703.md --- .../whats-new-windows-10-version-1703.md | 23 +++++++------------ 1 file changed, 8 insertions(+), 15 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 5cb14c58b5..14f29ba81e 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -74,30 +74,23 @@ Using Azure AD also means that you can remove an employee’s profile (for examp - Upgraded detections of ransomware and other advanced attacks - Historical detection capability ensures new detection rules apply to up to six months of stored data to detect attacks that previously went unnoticed - - **Investigation**
- Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. Other capabilities have been added to help you gain a holistic view on investigations. +- **Investigation**
+ Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. Other capabilities have been added to help you gain a holistic view on investigations. - Other investigation enhancements include: - - - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. - - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. - - [Pull alerts using REST API](pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) - Use REST API to pull alerts from Windows Defender ATP. + Other investigation enhancements include: + - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. + - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. + - [Pull alerts using REST API](pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) - Use REST API to pull alerts from Windows Defender ATP. - **Response**
When detecting an attack, security response teams can now take immediate action to contain a breach: - [Take response actions on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. - - [Isolate machines from the network](respond-machine-alerts-windows-defender-advanced-threat-protection.md#isolate-machines-from-the-network) - - [Undo machine isolation](respond-machine-alerts-windows-defender-advanced-threat-protection.md#undo-machine-isolation) - - [Collect investigation package](respond-machine-alerts-windows-defender-advanced-threat-protection.md#collect-investigation-package-from-machines) - - [Take response actions on a file](respond-file-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by stopping and quarantining files or blocking a file. - - [Stop and quarantine files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#stop-and-quarantine-files-in-your-network) - - [Remove file from quarantine](respond-file-alerts-windows-defender-advanced-threat-protection.md#remove-file-from-quarantine) - - [Block files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#block-files-in-your-network) + - **Other features** - [Check sensor health state](check-sensor-status-windows-defender-advanced-threat-protection.md) - Check an endpoint's ability to provide sensor data and communicate with the Windows Defender ATP service and fix known issues. - - [Fix unhealthy sensors](fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md) + ### Windows Defender Antivirus (Windows Defender AV) From dc49ec21f0c4dd43816a6c8319cb035a5eaf3684 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Mon, 20 Mar 2017 15:43:02 -0700 Subject: [PATCH 19/32] added span-id to wufb and updated whats new updates to what's new include wufb and DO --- windows/update/waas-configure-wufb.md | 2 +- .../whats-new-windows-10-version-1703.md | 21 +++++++++++++++++++ 2 files changed, 22 insertions(+), 1 deletion(-) diff --git a/windows/update/waas-configure-wufb.md b/windows/update/waas-configure-wufb.md index 4ae2377a8f..f6029dff92 100644 --- a/windows/update/waas-configure-wufb.md +++ b/windows/update/waas-configure-wufb.md @@ -32,6 +32,7 @@ By grouping devices with similar deferral periods, administrators are able to cl >[!TIP] >In addition to setting up multiple rings for your update deployments, also incorporate devices enrolled in the Windows Insider Program as part of your deployment strategy. This will provide you the chance to not only evaluate new features before they are broadly available to the public, but it also increases the lead time to provide feedback and influence Microsoft’s design on functional aspects of the product. For more information on Windows Insider program, see [https://insider.windows.com/](https://insider.windows.com/). + ## Configure devices for Current Branch (CB) or Current Branch for Business (CBB) With Windows Update for Business, you can set a device to be on either the Current Branch (CB) or the Current Branch for Business (CBB) servicing branch. For more information on this servicing model, see [Windows 10 servicing options](waas-overview.md#servicing-branches). @@ -248,7 +249,6 @@ Enabling allows user to set deferral periods for upgrades and updates. It also | PauseFeatureUpdates | PauseFeatureUpdatesStartTime | | PauseQualityUpdates | PauseQualityUpdatesStartTime | - ## Related topics - [Update Windows 10 in the enterprise](index.md) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 13201cdd84..772d0ab3c0 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -115,6 +115,27 @@ For more information, see [Device Guard Requirements](../keep-secure/requirement The security setting [**Interactive logon: Display user information when the session is locked**](../keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md) has been updated to work in conjunction with the **Privacy** setting in **Settings** > **Accounts** > **Sign-in options**. +## Update + +### Windows Update for Business + +The pause feature has been changed, and now requires a start date to set up. Users are now able to pause through **Settings > Update & security > Windows Update > Advanced options** in case a policy has not been configured. We have also increased the pause limit on quality updates to 35 days. You can find more information on pause in [Pause Feature Updates](../update/waas-configure-wufb.md#pause-feature-updates) and [Pause Quality Updates](../update/waas-configure-wufb.md#pause-feature-updates#pause-quality-updates). + +You are now able to defer feature update installation by up to 365 days. In settings, users are able to select their branch readiness level and update deferal periods. See [Configure devices for Current Branch (CB) or Current Branch for Business (CBB)](../update/waas-configure-wufb.md#configure-devices-for-current-branch-or-current-branch-for-business), [Configure when devices receive Feature Updates](../update/waas-configure-wufb.md#configure-when-devices-receive-feature-updates) and [Configure when devices receive Quality Updates](../update/waas-configure-wufb.md#configure-when-devices-receive-quality-updates) for details. + +### Delivery Optimization + +Delivery Optimization policies now enable you to configure additional restrictions to have more control in various scenarios. + +Added policies include: +- [Allow uploads while the device is on battery while under set Battery level](../update/waas-delivery-optimization.md#allow-uploads-while-the-device-is-on-battery-while-under-set-battery-level) +- [Enable Peer Caching while the device connects via VPN](../update/waas-delivery-optimization.md#enable-peer-caching-while-the-device-connects-via-vpn) +- [Minimum RAM (inclusive) allowed to use Peer Caching](../update/waas-delivery-optimization.md#minimum-ram-allowed-to-use-peer-caching) +- [Minimum disk size allowed to use Peer Caching](../update/waas-delivery-optimization.md#minimum-disk-size-allowed-to-use-peer-caching) +- [Minimum Peer Caching Content File Size](../update/waas-delivery-optimization.md#minimum-peer-caching-content-file-size) + +To check out all the details, see [Configure Delivery Optimization for Windows 10 updates](../update/waas-delivery-optimization.md) + ## Learn more - [Windows 10 release information](https://technet.microsoft.com/en-us/windows/release-info) From 49721a815017394e271850b3c7f12ee6d7de10b1 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 20 Mar 2017 15:59:08 -0700 Subject: [PATCH 20/32] fix broken links --- .../whats-new/whats-new-windows-10-version-1703.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 14f29ba81e..2c9b6d07be 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -69,7 +69,7 @@ Using Azure AD also means that you can remove an employee’s profile (for examp ### Windows Defender Advanced Threat Protection (Windows Defender ATP) - **Detection**
Enhancements to the detection capabilities include: - - [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. + - [Use the threat intelligence API to create custom alerts](../keep-secure/use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. - Improvements on OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks - Upgraded detections of ransomware and other advanced attacks - Historical detection capability ensures new detection rules apply to up to six months of stored data to detect attacks that previously went unnoticed @@ -78,18 +78,18 @@ Using Azure AD also means that you can remove an employee’s profile (for examp Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. Other capabilities have been added to help you gain a holistic view on investigations. Other investigation enhancements include: - - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. - - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. - - [Pull alerts using REST API](pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) - Use REST API to pull alerts from Windows Defender ATP. + - [Investigate a user account](../keep-secure/investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. + - [Alert process tree](../keep-secure/investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. + - [Pull alerts using REST API](../keep-secure/pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) - Use REST API to pull alerts from Windows Defender ATP. - **Response**
When detecting an attack, security response teams can now take immediate action to contain a breach: - - [Take response actions on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. - - [Take response actions on a file](respond-file-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by stopping and quarantining files or blocking a file. + - [Take response actions on a machine](../keep-secure/respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. + - [Take response actions on a file](../keep-secure/respond-file-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by stopping and quarantining files or blocking a file. - **Other features** - - [Check sensor health state](check-sensor-status-windows-defender-advanced-threat-protection.md) - Check an endpoint's ability to provide sensor data and communicate with the Windows Defender ATP service and fix known issues. + - [Check sensor health state](../keep-secure/check-sensor-status-windows-defender-advanced-threat-protection.md) - Check an endpoint's ability to provide sensor data and communicate with the Windows Defender ATP service and fix known issues. From 777d0b36b36706dd5bb7585416f06881bfd875d2 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 Mar 2017 16:09:01 -0700 Subject: [PATCH 21/32] Revert "udate atp section" This reverts commit 74735e27303856eaca75ba590e5bed42be2614a0. --- .../whats-new-windows-10-version-1703.md | 36 ++++++++----------- 1 file changed, 15 insertions(+), 21 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 1e07b37c1f..0eda54a6ee 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -69,22 +69,6 @@ Using Azure AD also means that you can remove an employee’s profile (for examp ### Windows Defender Advanced Threat Protection (Windows Defender ATP) The following features have been added to Windows Defender ATP in Windows 10, version 1703. -- **Detection**
- Enhancements to the detection capabilities include: - - [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. - - Improvements on OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks - - Upgraded detections of ransomware and other advanced attacks - - Historical detection capability ensures new detection rules apply to up to six months of stored data to detect attacks that previously went unnoticed - - - **Investigation**
- Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. Other capabilities have been added to help you gain a holistic view on investigations. - - Other investigation enhancements include: - - - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. - - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. - - [Pull alerts using REST API](pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) - Use REST API to pull alerts from Windows Defender ATP. - - **Response**
When detecting an attack, security response teams can now take immediate action to contain a breach: - [Take response actions on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md) - Quickly respond to detected attacks by isolating machines or collecting an investigation package. @@ -97,19 +81,29 @@ The following features have been added to Windows Defender ATP in Windows 10, ve - [Remove file from quarantine](respond-file-alerts-windows-defender-advanced-threat-protection.md#remove-file-from-quarantine) - [Block files in your network](respond-file-alerts-windows-defender-advanced-threat-protection.md#block-files-in-your-network) -- **Other features** - - [Check sensor health state](check-sensor-status-windows-defender-advanced-threat-protection.md) - Check an endpoint's ability to provide sensor data and communicate with the Windows Defender ATP service and fix known issues. - - [Fix unhealthy sensors](fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md) +- **Investigation**
+ Enterprise customers can now take advantage of the entire Windows security stack with Windows Defender Antivirus detections and Device Guard blocks being surfaced in the Windows Defender ATP portal. + + Other investigation capabilities include: + + - [Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md) - Identify user accounts with the most active alerts and investigate cases of potential compromised credentials. + - [Alert process tree](investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) - Aggregates multiple detections and related events into a single view to reduce case resolution time. + +- **Detection**
+ Windows Creators Update improves OS memory and kernel sensors to enable detection of attackers who are using in-memory and kernel-level attacks. + + Other detection capabilities include: + - [Use the threat intelligence API to create custom alerts](use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. ### Device Guard and Credential Guard -Additional security qualifications for Device Guard and Credential Guard help protect vulnerabilities in UEFI runtime. +Additional security qualifications for Device Guard and Credential Guard help protect vulnerabilities in UEFI runtime. For more information, see [Device Guard Requirements](../keep-secure/requirements-and-deployment-planning-guidelines-for-device-guard.md#device-guard-requirements-for-improved-security) and [Credential Guard Security Considerations](../keep-secure/credential-guard.md#security-considerations). ### Group Policy Security Options -The security setting [**Interactive logon: Display user information when the session is locked**](../keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md) has been updated to work in conjunction with the **Privacy** setting in **Settings** > **Accounts** > **Sign-in options**. +The security setting [**Interactive logon: Display user information when the session is locked**](../keep-secure/interactive-logon-display-user-information-when-the-session-is-locked.md) has been updated to work in conjunction with the **Privacy** setting in **Settings** > **Accounts** > **Sign-in options**. ## Learn more From b96e1555a438f085cb313eea3c1dde0e4a08ef4e Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 21 Mar 2017 08:42:53 -0700 Subject: [PATCH 22/32] fix bad link --- windows/whats-new/whats-new-windows-10-version-1703.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index f7039289a9..d5b2af7060 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -137,7 +137,7 @@ The security setting [**Interactive logon: Display user information when the ses ### Windows Update for Business -The pause feature has been changed, and now requires a start date to set up. Users are now able to pause through **Settings > Update & security > Windows Update > Advanced options** in case a policy has not been configured. We have also increased the pause limit on quality updates to 35 days. You can find more information on pause in [Pause Feature Updates](../update/waas-configure-wufb.md#pause-feature-updates) and [Pause Quality Updates](../update/waas-configure-wufb.md#pause-feature-updates#pause-quality-updates). +The pause feature has been changed, and now requires a start date to set up. Users are now able to pause through **Settings > Update & security > Windows Update > Advanced options** in case a policy has not been configured. We have also increased the pause limit on quality updates to 35 days. You can find more information on pause in [Pause Feature Updates](../update/waas-configure-wufb.md#pause-feature-updates) and [Pause Quality Updates](../update/waas-configure-wufb.md#pause-quality-updates). You are now able to defer feature update installation by up to 365 days. In settings, users are able to select their branch readiness level and update deferal periods. See [Configure devices for Current Branch (CB) or Current Branch for Business (CBB)](../update/waas-configure-wufb.md#configure-devices-for-current-branch-or-current-branch-for-business), [Configure when devices receive Feature Updates](../update/waas-configure-wufb.md#configure-when-devices-receive-feature-updates) and [Configure when devices receive Quality Updates](../update/waas-configure-wufb.md#configure-when-devices-receive-quality-updates) for details. From 4ef903abbeae7c82010d69aa8f1d1eaf2875a30b Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 21 Mar 2017 14:15:37 -0700 Subject: [PATCH 23/32] change para order --- .../whats-new-windows-10-version-1703.md | 27 +++++++++++-------- 1 file changed, 16 insertions(+), 11 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index d5b2af7060..a4cc0f6f9b 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -28,14 +28,6 @@ Windows Configuration Designer in Windows 10, version 1703, includes several new [Learn more about Windows Configuration Designer.](../configure/provisioning-packages.md) -### Lockdown Designer app - -The Lockdown Designer app helps you configure and create a lockdown XML file to apply to devices running Windows 10 Mobile, and includes a remote simulation to help you determine the layout for tiles on the Start screen. Using Lockdown Designer is easier than [manually creating a lockdown XML file](../configure/lockdown-xml.md). - -![Lockdown Designer app in Store](images/ldstore.png) - -[Learn more about the Lockdown Designer app.](../configure/mobile-lockdown-designer.md) - ### Windows Spotlight The following new Group Policy and mobile device management (MDM) settings are added to help you configure Windows Spotlight user experiences: @@ -46,9 +38,6 @@ The following new Group Policy and mobile device management (MDM) settings are a [Learn more about Windows Spotlight.](../configure/windows-spotlight.md) -### Kiosk mode for Windows 10 Mobile - -In Windows 10 Mobile, version 1703, [Apps Corner](https://support.microsoft.com/instantanswers/7959c547-aa80-5ff1-9097-1784b6894845/set-up-apps-corner) is removed. Enterprises can use [Enterprise Assigned Access to configure kiosk experiences](../configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) on devices running Windows 10 Mobile. ### Start and taskbar layout @@ -58,6 +47,22 @@ Additional MDM policy settings are available for Start and taskbar layout. For d Previously, the customized taskbar could only be deployed using Group Policy or provisioning packages. Windows 10, version 1703, adds support for customized taskbars to [MDM](../configure/customize-windows-10-start-screens-by-using-mobile-device-management.md). +### Lockdown Designer app + +The Lockdown Designer app helps you configure and create a lockdown XML file to apply to devices running Windows 10 Mobile, and includes a remote simulation to help you determine the layout for tiles on the Start screen. Using Lockdown Designer is easier than [manually creating a lockdown XML file](../configure/lockdown-xml.md). + +![Lockdown Designer app in Store](images/ldstore.png) + +[Learn more about the Lockdown Designer app.](../configure/mobile-lockdown-designer.md) + + + +### Kiosk mode for Windows 10 Mobile + +In Windows 10 Mobile, version 1703, [Apps Corner](https://support.microsoft.com/instantanswers/7959c547-aa80-5ff1-9097-1784b6894845/set-up-apps-corner) is removed. Enterprises can use [Enterprise Assigned Access to configure kiosk experiences](../configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) on devices running Windows 10 Mobile. + + + ## Deployment ### MBR2GPT.EXE From d4a5e66012fa298cddde5c4c40cdff01434d7b8f Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 21 Mar 2017 14:37:51 -0700 Subject: [PATCH 24/32] add link --- windows/whats-new/whats-new-windows-10-version-1703.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index a4cc0f6f9b..a1029fdd6a 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -20,7 +20,7 @@ Below is a list of some of the new and updated features in Windows 10, version 1 ### Windows Configuration Designer -Previously known as *Windows Imaging and Configuration Designer (ICD)*, the tool for creating provisioning packages is renamed **Windows Configuration Designer**. The new Windows Configuration Designer is available in Windows Store as an app. To run Windows Configuration Designer on earlier versions of Windows, you can still install Windows Configuration Designer from the Windows Assessment and Deployment Kit (ADK). +Previously known as *Windows Imaging and Configuration Designer (ICD)*, the tool for creating provisioning packages is renamed **Windows Configuration Designer**. The new Windows Configuration Designer is available in [Windows Store as an app](https://www.microsoft.com/store/apps/9nblggh4tx22). To run Windows Configuration Designer on earlier versions of Windows, you can still install Windows Configuration Designer from the Windows Assessment and Deployment Kit (ADK). Windows Configuration Designer in Windows 10, version 1703, includes several new wizards to make it easier to create provisioning packages. From 422f112122429d3c0bd80d83d2d82425720fdfbf Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 21 Mar 2017 14:39:31 -0700 Subject: [PATCH 25/32] +ADK link --- windows/whats-new/whats-new-windows-10-version-1703.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index a1029fdd6a..3626ba0e70 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -20,7 +20,7 @@ Below is a list of some of the new and updated features in Windows 10, version 1 ### Windows Configuration Designer -Previously known as *Windows Imaging and Configuration Designer (ICD)*, the tool for creating provisioning packages is renamed **Windows Configuration Designer**. The new Windows Configuration Designer is available in [Windows Store as an app](https://www.microsoft.com/store/apps/9nblggh4tx22). To run Windows Configuration Designer on earlier versions of Windows, you can still install Windows Configuration Designer from the Windows Assessment and Deployment Kit (ADK). +Previously known as *Windows Imaging and Configuration Designer (ICD)*, the tool for creating provisioning packages is renamed **Windows Configuration Designer**. The new Windows Configuration Designer is available in [Windows Store as an app](https://www.microsoft.com/store/apps/9nblggh4tx22). To run Windows Configuration Designer on earlier versions of Windows, you can still install Windows Configuration Designer from the [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit). Windows Configuration Designer in Windows 10, version 1703, includes several new wizards to make it easier to create provisioning packages. From 99314695a015e549ffad87ea904631dee901b5fe Mon Sep 17 00:00:00 2001 From: Jason Gerend Date: Tue, 21 Mar 2017 16:02:32 -0700 Subject: [PATCH 26/32] Edits - Added GUID, fixed typo, added MDM link, added Windows 10 Mobile to Lockdown Designer section to make it easier to identify as Mobile-related. --- windows/whats-new/whats-new-windows-10-version-1703.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 3626ba0e70..730f7b6cf9 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -1,5 +1,5 @@ --- -title: What's new in Windows 10, version 1607 (Windows 10) +title: What's new in Windows 10, version 1703 (Windows 10) description: This topic lists new and updated topics in the What's new in Windows 10 documentation for Windows 10 and Windows 10 Mobile. keywords: ["What's new in Windows 10", "Windows 10", "creators update"] ms.prod: w10 @@ -7,6 +7,7 @@ ms.mktglfcycl: deploy ms.sitesec: library author: TrudyHa localizationpriority: high +ms.assetid: dca7c655-c4f6-45f8-aa02-64187b202617 --- # What's new in Windows 10, version 1703 @@ -41,13 +42,13 @@ The following new Group Policy and mobile device management (MDM) settings are a ### Start and taskbar layout -Enterprises can apply a customized Start and tasbkar layout to devices running Windows 10 Pro, version 1703. +Enterprises can apply a customized Start and taskbar layout to devices running Windows 10 Pro, version 1703. Additional MDM policy settings are available for Start and taskbar layout. For details, see [Manage Windows 10 Start and taskbar layout](../configure/windows-10-start-layout-options-and-policies.md). Previously, the customized taskbar could only be deployed using Group Policy or provisioning packages. Windows 10, version 1703, adds support for customized taskbars to [MDM](../configure/customize-windows-10-start-screens-by-using-mobile-device-management.md). -### Lockdown Designer app +### Lockdown Designer app for Windows 10 Mobile lockdown files The Lockdown Designer app helps you configure and create a lockdown XML file to apply to devices running Windows 10 Mobile, and includes a remote simulation to help you determine the layout for tiles on the Start screen. Using Lockdown Designer is easier than [manually creating a lockdown XML file](../configure/lockdown-xml.md). @@ -161,4 +162,5 @@ To check out all the details, see [Configure Delivery Optimization for Windows 1 ## Learn more -- [Windows 10 release information](https://technet.microsoft.com/en-us/windows/release-info) +- [Windows 10 release information](https://technet.microsoft.com/windows/release-info) +- [What's new in MDM in Windows 10, version 1703](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/new-in-windows-mdm-enrollment-management#whatsnew10) From dcb3491294a5752cca19b71054db912c8ab49993 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Tue, 21 Mar 2017 16:57:24 -0700 Subject: [PATCH 27/32] Express support updated to include sccm --- windows/update/waas-optimize-windows-10-updates.md | 1 + windows/whats-new/whats-new-windows-10-version-1703.md | 4 +++- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/update/waas-optimize-windows-10-updates.md b/windows/update/waas-optimize-windows-10-updates.md index 7624ba1e41..dba3ee72bb 100644 --- a/windows/update/waas-optimize-windows-10-updates.md +++ b/windows/update/waas-optimize-windows-10-updates.md @@ -49,6 +49,7 @@ Two methods of peer-to-peer content distribution are available in Windows 10. Windows 10 update downloads can be large because every package contains all previously released fixes to ensure consistency and simplicity. Windows has been able to reduce the size of Windows Update downloads with a feature called Express. ### How Microsoft supports Express +- **Express on System Center Configuration Manager** starting with version 1702 of Configuration Manager. - **Express on WSUS Standalone** Express update delivery is available on [all support versions of WSUS](https://technet.microsoft.com/library/cc708456(v=ws.10).aspx). diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 730f7b6cf9..740feb0527 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -147,7 +147,9 @@ The pause feature has been changed, and now requires a start date to set up. Use You are now able to defer feature update installation by up to 365 days. In settings, users are able to select their branch readiness level and update deferal periods. See [Configure devices for Current Branch (CB) or Current Branch for Business (CBB)](../update/waas-configure-wufb.md#configure-devices-for-current-branch-or-current-branch-for-business), [Configure when devices receive Feature Updates](../update/waas-configure-wufb.md#configure-when-devices-receive-feature-updates) and [Configure when devices receive Quality Updates](../update/waas-configure-wufb.md#configure-when-devices-receive-quality-updates) for details. -### Delivery Optimization +### Optimize update delivery + +[Express updates](../update/waas-optimize-windows-10-updates.md#express-update-delivery) are now supported on System Center Configuration Manager, starting with version 1702 of Configuration Manager, in addition to current Express support on Windows Update, Windows Update for Business and WSUS. Delivery Optimization policies now enable you to configure additional restrictions to have more control in various scenarios. From 74d0cc3246b6987e0afdd7c923908ee169521bf1 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 21 Mar 2017 17:16:35 -0700 Subject: [PATCH 28/32] added to whatsnew --- windows/whats-new/whats-new-windows-10-version-1703.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 740feb0527..1ad7b4ad57 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -70,7 +70,9 @@ In Windows 10 Mobile, version 1703, [Apps Corner](https://support.microsoft.com/ MBR2GPT.EXE is a new command-line tool available in Windows 10 version 1703 and later versions. MBR2GPT converts a disk from Master Boot Record (MBR) to GUID Partition Table (GPT) partition style without modifying or deleting data on the disk. The tool is designed to be run from a Windows Preinstallation Environment (Windows PE) command prompt, but can also be run from the full Windows 10 operating system (OS). -The GPT partition format is newer and enables the use of larger and more disk partitions. It also provides added data reliability and supports additional partition types. If you convert the system disk on a computer from MBR to GPT, you must also configure the computer to boot in UEFI mode, so make sure that your device supports UEFI before attempting to convert the system disk. +The GPT partition format is newer and enables the use of larger and more disk partitions. It also provides added data reliability, supports additional partition types, and enables faster boot and shutdown speeds. If you convert the system disk on a computer from MBR to GPT, you must also configure the computer to boot in UEFI mode, so make sure that your device supports UEFI before attempting to convert the system disk. + +Additional security features of Windows 10 that are enabled when you boot in UEFI mode include: Secure Boot, Early Launch Anti-malware (ELAM) driver, Windows Trusted Boot, Measured Boot, Device Guard, Credential Guard, and BitLocker Network Unlock. For details, see [MBR2GPT.EXE](../deploy/mbr-to-gpt.md). @@ -166,3 +168,4 @@ To check out all the details, see [Configure Delivery Optimization for Windows 1 - [Windows 10 release information](https://technet.microsoft.com/windows/release-info) - [What's new in MDM in Windows 10, version 1703](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/new-in-windows-mdm-enrollment-management#whatsnew10) +- [Manage Windows upgrades with Upgrade Readiness](../deploy/manage-windows-upgrades-with-upgrade-readiness.md) From f1b19f9462824a86d923f38aea2ef6782b9d9afe Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 21 Mar 2017 18:08:13 -0700 Subject: [PATCH 29/32] remove phone signin --- .openpublishing.redirection.json | 5 ++ windows/keep-secure/TOC.md | 1 - .../keep-secure/hello-and-password-changes.md | 1 - .../hello-biometrics-in-enterprise.md | 1 - .../keep-secure/hello-enable-phone-signin.md | 84 ------------------- .../hello-errors-during-pin-creation.md | 1 - windows/keep-secure/hello-event-300.md | 1 - windows/keep-secure/hello-how-it-works.md | 1 - .../hello-identity-verification.md | 5 -- .../hello-manage-in-organization.md | 12 +-- .../hello-prepare-people-to-use.md | 43 ---------- .../hello-why-pin-is-better-than-password.md | 1 - 12 files changed, 7 insertions(+), 149 deletions(-) delete mode 100644 windows/keep-secure/hello-enable-phone-signin.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 1f8831fdb9..d0fc77cedb 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -386,6 +386,11 @@ "redirect_document_id": true }, { +"source_path": "windows/keep-secure/hello-enable-phone-signin.md", +"redirect_url": "/itpro/windows/keep-secure/hello-identity-verification", +"redirect_document_id": true +}, +{ "source_path": "windows/keep-secure/deploy-edp-policy-using-intune.md", "redirect_url": "/itpro/windows/keep-secure/deploy-wip-policy-using-intune", "redirect_document_id": true diff --git a/windows/keep-secure/TOC.md b/windows/keep-secure/TOC.md index d8d43c7528..d30d881ccb 100644 --- a/windows/keep-secure/TOC.md +++ b/windows/keep-secure/TOC.md @@ -3,7 +3,6 @@ ## [Windows Hello for Business](hello-identity-verification.md) ### [How Windows Hello for Business works](hello-how-it-works.md) ### [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -### [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) ### [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) ### [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) ### [Windows Hello and password changes](hello-and-password-changes.md) diff --git a/windows/keep-secure/hello-and-password-changes.md b/windows/keep-secure/hello-and-password-changes.md index dc6bb1e021..336c82005d 100644 --- a/windows/keep-secure/hello-and-password-changes.md +++ b/windows/keep-secure/hello-and-password-changes.md @@ -41,7 +41,6 @@ Suppose instead that you sign in on **Device B** and change your password for yo - [Windows Hello for Business](hello-identity-verification.md) - [How Windows Hello for Business works](hello-how-it-works.md) - [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -- [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) - [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) - [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) - [Windows Hello errors during PIN creation](hello-errors-during-pin-creation.md) diff --git a/windows/keep-secure/hello-biometrics-in-enterprise.md b/windows/keep-secure/hello-biometrics-in-enterprise.md index caf9da8a9b..c57043af82 100644 --- a/windows/keep-secure/hello-biometrics-in-enterprise.md +++ b/windows/keep-secure/hello-biometrics-in-enterprise.md @@ -79,7 +79,6 @@ To allow facial recognition, you must have devices with integrated special infra - [Windows Hello for Business](hello-identity-verification.md) - [How Windows Hello for Business works](hello-how-it-works.md) - [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -- [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) - [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) - [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) - [Windows Hello and password changes](hello-and-password-changes.md) diff --git a/windows/keep-secure/hello-enable-phone-signin.md b/windows/keep-secure/hello-enable-phone-signin.md deleted file mode 100644 index b325dd3b58..0000000000 --- a/windows/keep-secure/hello-enable-phone-signin.md +++ /dev/null @@ -1,84 +0,0 @@ ---- -title: Enable phone sign-in to PC or VPN (Windows 10) -description: You can set policies to allow your users to sign in to a PC or VPN using their Windows 10 phone. -keywords: ["identity", "PIN", "biometric", "Hello"] -ms.prod: W10 -ms.mktglfcycl: deploy -ms.sitesec: library -author: DaniHalfin -localizationpriority: high ---- - -# Enable phone sign-in to PC or VPN - - -**Applies to** - -- Windows 10 -- Windows 10 Mobile - -In Windows 10, version 1607, your network users can use Windows Phone with Windows Hello to sign in to a PC, connect to VPN, and sign in to Office 365 in a browser. Phone sign-in uses Bluetooth, which means no need to wait for a phone call -- just unlock the phone and tap the app. - -![Sign in to a device](images/phone-signin-menu.png) - -> [!NOTE] -> Phone sign-in is currently limited to select Technology Adoption Program (TAP) participants. - -You can create a Group Policy or mobile device management (MDM) policy that will allow users to sign in to a work PC or their company's VPN using the credentials stored on their Windows 10 phone. - - ## Prerequisites - - - Both phone and PC must be running Windows 10, version 1607. - - The PC must be running Windows 10 Pro, Enterprise, or Education - - Both phone and PC must have Bluetooth. - - The **Microsoft Authenticator** app must be installed on the phone. - - The PC must be joined to an Active Directory domain that is connected to an Azure Active Directory (Azure AD) domain, or the PC must be joined to Azure AD. - - The phone must be joined to Azure AD or have a work account added. - - The VPN configuration profile must use certificate-based authentication. - -## Set policies - -To enable phone sign-in, you must enable the following policies using Group Policy or MDM. - -- Group Policy: **Computer Configuration** or **User Configuration** > **Policies** > **Administrative Templates** > **Windows Components** > **Windows Hello for Business** - - Enable **Use Windows Hello for Business** - - Enable **Phone Sign-in** -- MDM: - - Set **UsePassportForWork** to **True** - - Set **Remote\UseRemotePassport** to **True** - -## Configure VPN - -To enable phone sign-in to VPN, you must enable the [policy](#set-policies) for phone sign-in and ensure that VPN is configured as follows: - -- For inbox VPN, set up the VPN profile with Extensible Authentication Protocol (EAP) with the **Smart card or other certificate (TLS)** EAP type, also known as EAP-Transport Level Security (EAP-TLS). To exclusively access the VPN certificates on the phone, in the EAP filtering XML, add either **EKU** or **Issuer** (or both) filtering to make sure it picks only the Remote NGC certificate. -- For a Universal Windows Platform (UWP) VPN plug-in, add filtering criteria based on the 3rd party mechanism for the Remote NGC Certificate. - -## Get the app - -If you want to distribute the **Microsoft Authenticator** app, your organization must have set up Windows Store for Business, with Microsoft added as a [Line of Business (LOB) publisher](../manage/working-with-line-of-business-apps.md). - -[Tell people how to sign in using their phone.](hello-prepare-people-to-use.md#bmk-remote) - - -## Related topics - -- [Windows Hello for Business](hello-identity-verification.md) -- [How Windows Hello for Business works](hello-how-it-works.md) -- [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -- [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) -- [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) -- [Windows Hello and password changes](hello-and-password-changes.md) -- [Windows Hello errors during PIN creation](hello-errors-during-pin-creation.md) -- [Event ID 300 - Windows Hello successfully created](hello-event-300.md) -- [Windows Hello biometrics in the enterprise](hello-biometrics-in-enterprise.md) - - -  - -  - - - - - diff --git a/windows/keep-secure/hello-errors-during-pin-creation.md b/windows/keep-secure/hello-errors-during-pin-creation.md index 98dce6bbda..b9f0619b20 100644 --- a/windows/keep-secure/hello-errors-during-pin-creation.md +++ b/windows/keep-secure/hello-errors-during-pin-creation.md @@ -225,7 +225,6 @@ For errors listed in this table, contact Microsoft Support for assistance. - [Windows Hello for Business](hello-identity-verification.md) - [How Windows Hello for Business works](hello-how-it-works.md) - [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -- [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) - [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) - [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) - [Windows Hello and password changes](hello-and-password-changes.md) diff --git a/windows/keep-secure/hello-event-300.md b/windows/keep-secure/hello-event-300.md index a59c57e6be..1eecd8dd53 100644 --- a/windows/keep-secure/hello-event-300.md +++ b/windows/keep-secure/hello-event-300.md @@ -37,7 +37,6 @@ This is a normal condition. No further action is required. - [Windows Hello for Business](hello-identity-verification.md) - [How Windows Hello for Business works](hello-how-it-works.md) - [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -- [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) - [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) - [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) - [Windows Hello and password changes](hello-and-password-changes.md) diff --git a/windows/keep-secure/hello-how-it-works.md b/windows/keep-secure/hello-how-it-works.md index af480096c6..379783c65a 100644 --- a/windows/keep-secure/hello-how-it-works.md +++ b/windows/keep-secure/hello-how-it-works.md @@ -112,7 +112,6 @@ Windows Hello depends on having compatible IDPs available to it. As of this writ - [Windows Hello for Business](hello-identity-verification.md) - [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -- [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) - [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) - [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) - [Windows Hello and password changes](hello-and-password-changes.md) diff --git a/windows/keep-secure/hello-identity-verification.md b/windows/keep-secure/hello-identity-verification.md index c13f490b56..063ed2cfe2 100644 --- a/windows/keep-secure/hello-identity-verification.md +++ b/windows/keep-secure/hello-identity-verification.md @@ -72,10 +72,6 @@ Imagine that someone is looking over your shoulder as you get money from an ATM Windows Hello helps protect user identities and user credentials. Because the user doesn't enter a password (except during provisioning), it helps circumvent phishing and brute force attacks. It also helps prevent server breaches because Windows Hello credentials are an asymmetric key pair, which helps prevent replay attacks when these keys are protected by TPMs. -For customers using a hybrid Active Directory and Azure Active Directory environment, Windows Hello also enables Windows 10 Mobile devices to be used as [a remote credential](hello-prepare-people-to-use.md#bmk-remote) when signing into Windows 10 PCs. During the sign-in process, the Windows 10 PC can connect using Bluetooth to access Windows Hello on the user’s Windows 10 Mobile device. Because users carry their phone with them, Windows Hello makes implementing two-factor authentication across the enterprise less costly and complex than other solutions. - -> [!NOTE] ->  Phone sign-in is currently limited to select Technology Adoption Program (TAP) participants.   ## How Windows Hello for Business works: key points @@ -119,7 +115,6 @@ Windows Hello for Business can use either keys (hardware or software) or certifi - [How Windows Hello for Business works](hello-how-it-works.md) - [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -- [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) - [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) - [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) - [Windows Hello and password changes](hello-and-password-changes.md) diff --git a/windows/keep-secure/hello-manage-in-organization.md b/windows/keep-secure/hello-manage-in-organization.md index beca5f89e3..accce6ab1d 100644 --- a/windows/keep-secure/hello-manage-in-organization.md +++ b/windows/keep-secure/hello-manage-in-organization.md @@ -134,13 +134,9 @@ The following table lists the Group Policy settings that you can configure for W Phone Sign-in

Use Phone Sign-in

-
Note  Applies to desktop only. Phone sign-in is currently limited to select Technology Adoption Program (TAP) participants.
-
 
-

Not configured: Phone sign-in is disabled.

-

Enabled: Users can use a portable, registered device as a companion device for desktop authentication.

-

Disabled: Phone sign-in is disabled.

+

Not currently supported.

@@ -283,14 +279,11 @@ The following table lists the MDM policy settings that you can configure for Win Remote

UseRemotePassport

-
Note  Applies to desktop only. Phone sign-in is currently limited to select Technology Adoption Program (TAP) participants.
-
 
Device or user False -

True: Phone sign-in is enabled.

-

False: Phone sign-in is disabled.

+

Not currently supported.

@@ -381,7 +374,6 @@ If you want to use Windows Hello for Business with certificates, you’ll need a - [Windows Hello for Business](hello-identity-verification.md) - [How Windows Hello for Business works](hello-how-it-works.md) -- [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) - [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) - [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) - [Windows Hello and password changes](hello-and-password-changes.md) diff --git a/windows/keep-secure/hello-prepare-people-to-use.md b/windows/keep-secure/hello-prepare-people-to-use.md index 41c323ada1..8426ced11d 100644 --- a/windows/keep-secure/hello-prepare-people-to-use.md +++ b/windows/keep-secure/hello-prepare-people-to-use.md @@ -51,56 +51,13 @@ If your policy allows it, people can use biometrics (fingerprint, iris, and faci ![sign in to windows, apps, and services using fingerprint or face](images/hellosettings.png) -## Use a phone to sign in to a PC or VPN -If your enterprise enables phone sign-in, users can pair a phone running Windows 10 Mobile to a PC running Windows 10 and then use an app on the phone to sign in to the PC using their Windows Hello credentials. - -> [!NOTE] -> Phone sign-in is currently limited to select Technology Adoption Program (TAP) participants. - -  -**Prerequisites:** - -- Both phone and PC must be running Windows 10, version 1607. -- The PC must be running Windows 10 Pro, Enterprise, or Education -- Both phone and PC must have Bluetooth. -- The **Microsoft Authenticator** app must be installed on the phone. -- The PC must be joined to an Active Directory domain that is connected to an Azure Active Directory (Azure AD) domain, or the PC must be joined to Azure AD. -- The phone must be joined to Azure AD or have a work account added. -- The VPN configuration profile must use certificate-based authentication. - -**Pair the PC and phone** - -1. On the PC, go to **Settings** > **Devices** > **Bluetooth**. Tap the name of the phone and then tap **Pair** to begin pairing. - - ![bluetooth pairing](images/btpair.png) - -2. On the phone, go to **Settings** > **Devices** > **Bluetooth**, and verify that the passcode for **Pairing accessory** on the phone matches the passcode displayed on the PC, and then tap **ok**. - - ![bluetooth pairing passcode](images/bt-passcode.png) - -3. On the PC, tap **Yes**. - -**Sign in to PC using the phone** - - -1. Open the **Microsoft Authenticator** app, choose your account, and tap the name of the PC to sign in to. - > **Note: **  The first time that you run the **Microsoft Authenticator** app, you must add an account. - - ![select a device](images/phone-signin-device-select.png) -   -2. Enter the work PIN that you set up when you joined the phone to the cloud domain or added a work account. - -**Connect to VPN** - -You simply connect to VPN as you normally would. If the phone's certificates are being used, a notification will be pushed to the phone asking if you approve. If you click **allow** in the notification, you will be prompted for your PIN. After you enter your PIN, the VPN session will connect. ## Related topics - [Windows Hello for Business](hello-identity-verification.md) - [How Windows Hello for Business works](hello-how-it-works.md) - [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -- [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) - [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md) - [Windows Hello and password changes](hello-and-password-changes.md) - [Windows Hello errors during PIN creation](hello-errors-during-pin-creation.md) diff --git a/windows/keep-secure/hello-why-pin-is-better-than-password.md b/windows/keep-secure/hello-why-pin-is-better-than-password.md index e79b6e5348..9c24738397 100644 --- a/windows/keep-secure/hello-why-pin-is-better-than-password.md +++ b/windows/keep-secure/hello-why-pin-is-better-than-password.md @@ -75,7 +75,6 @@ If you only had a biometric sign-in configured and, for any reason, were unable - [Windows Hello for Business](hello-identity-verification.md) - [How Windows Hello for Business works](hello-how-it-works.md) - [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md) -- [Enable phone sign-in to PC or VPN](hello-enable-phone-signin.md) - [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) - [Windows Hello and password changes](hello-and-password-changes.md) - [Windows Hello errors during PIN creation](hello-errors-during-pin-creation.md) From b57cd1077e94a380a0d8356bbdc9a1a4e8f80734 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 21 Mar 2017 18:17:28 -0700 Subject: [PATCH 30/32] fix build errors --- .openpublishing.redirection.json | 2 +- windows/keep-secure/hello-manage-in-organization.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index d0fc77cedb..a815d35fe0 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -388,7 +388,7 @@ { "source_path": "windows/keep-secure/hello-enable-phone-signin.md", "redirect_url": "/itpro/windows/keep-secure/hello-identity-verification", -"redirect_document_id": true +"redirect_document_id": false }, { "source_path": "windows/keep-secure/deploy-edp-policy-using-intune.md", diff --git a/windows/keep-secure/hello-manage-in-organization.md b/windows/keep-secure/hello-manage-in-organization.md index accce6ab1d..44cef02636 100644 --- a/windows/keep-secure/hello-manage-in-organization.md +++ b/windows/keep-secure/hello-manage-in-organization.md @@ -131,7 +131,7 @@ The following table lists the Group Policy settings that you can configure for W -Phone Sign-in +>Phone Sign-in

Use Phone Sign-in

From 0fd169515d95bc8d1e4439952dcf596badbb8ae3 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Wed, 22 Mar 2017 08:18:23 -0700 Subject: [PATCH 31/32] remove kiosk mobile --- windows/whats-new/whats-new-windows-10-version-1703.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 1ad7b4ad57..2a3aa46f1b 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -58,11 +58,6 @@ The Lockdown Designer app helps you configure and create a lockdown XML file to -### Kiosk mode for Windows 10 Mobile - -In Windows 10 Mobile, version 1703, [Apps Corner](https://support.microsoft.com/instantanswers/7959c547-aa80-5ff1-9097-1784b6894845/set-up-apps-corner) is removed. Enterprises can use [Enterprise Assigned Access to configure kiosk experiences](../configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) on devices running Windows 10 Mobile. - - ## Deployment From 56d865a38a6223d8283d73e1fd8e46cf797478c2 Mon Sep 17 00:00:00 2001 From: Jason Gerend Date: Wed, 22 Mar 2017 13:23:29 -0700 Subject: [PATCH 32/32] Added link; shortened headings -Shortened Windows Defender headings by removing the acronyms and adding them to the body -Added a link to the deprecated features topic - Changed the More information heading to Related topics --- .../whats-new/whats-new-windows-10-version-1703.md | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 2a3aa46f1b..6f4913087b 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -48,7 +48,7 @@ Additional MDM policy settings are available for Start and taskbar layout. For d Previously, the customized taskbar could only be deployed using Group Policy or provisioning packages. Windows 10, version 1703, adds support for customized taskbars to [MDM](../configure/customize-windows-10-start-screens-by-using-mobile-device-management.md). -### Lockdown Designer app for Windows 10 Mobile lockdown files +### Lockdown Designer for Windows 10 Mobile lockdown files The Lockdown Designer app helps you configure and create a lockdown XML file to apply to devices running Windows 10 Mobile, and includes a remote simulation to help you determine the layout for tiles on the Start screen. Using Lockdown Designer is easier than [manually creating a lockdown XML file](../configure/lockdown-xml.md). @@ -79,7 +79,9 @@ Using Azure AD also means that you can remove an employee’s profile (for examp ## Security -### Windows Defender Advanced Threat Protection (Windows Defender ATP) +### Windows Defender Advanced Threat Protection + +New features in Windows Defender Advanced Threat Protection (ATP) for Windows 10, version 1703 include: - **Detection**
Enhancements to the detection capabilities include: - [Use the threat intelligence API to create custom alerts](../keep-secure/use-custom-ti-windows-defender-advanced-threat-protection.md) - Understand threat intelligence concepts, enable the threat intel application, and create custom threat intelligence alerts for your organization. @@ -106,8 +108,8 @@ Using Azure AD also means that you can remove an employee’s profile (for examp -### Windows Defender Antivirus (Windows Defender AV) -New features for Windows Defender AV in Windows 10, version 1703 include: +### Windows Defender Antivirus +New features for Windows Defender Antivirus (AV) in Windows 10, version 1703 include: - [Updates to how the Block at First Sight feature can be configured](../keep-secure/configure-block-at-first-sight-windows-defender-antivirus.md) - [The ability to specify the level of cloud-protection](../keep-secure/specify-cloud-protection-level-windows-defender-antivirus.md) @@ -159,8 +161,9 @@ Added policies include: To check out all the details, see [Configure Delivery Optimization for Windows 10 updates](../update/waas-delivery-optimization.md) -## Learn more +## Related topics +- [Features that are removed or deprecated in Windows 10 Creators Update](https://support.microsoft.com/help/4014193/features-that-are-removed-or-deprecated-in-windows-10-creators-update) - [Windows 10 release information](https://technet.microsoft.com/windows/release-info) - [What's new in MDM in Windows 10, version 1703](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/new-in-windows-mdm-enrollment-management#whatsnew10) - [Manage Windows upgrades with Upgrade Readiness](../deploy/manage-windows-upgrades-with-upgrade-readiness.md)