From fb68fdc9fa4094e2d79b96b46a3d2c9c45db0cf5 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Wed, 31 Jan 2018 07:34:22 -0800 Subject: [PATCH 001/138] removed warning when using set-adfscertificateauthority cmdlet --- .../hello-for-business/hello-cert-trust-adfs.md | 7 ------- 1 file changed, 7 deletions(-) diff --git a/windows/access-protection/hello-for-business/hello-cert-trust-adfs.md b/windows/access-protection/hello-for-business/hello-cert-trust-adfs.md index 227053e01a..d5f526f94f 100644 --- a/windows/access-protection/hello-for-business/hello-cert-trust-adfs.md +++ b/windows/access-protection/hello-for-business/hello-cert-trust-adfs.md @@ -346,13 +346,6 @@ Sign-in the AD FS server with Domain Admin equivalent credentials. ```PowerShell Set-AdfsCertificateAuthority -EnrollmentAgent -EnrollmentAgentCertificateTemplate WHFBEnrollmentAgent -WindowsHelloCertificateTemplate WHFBAuthentication ``` - - -The `Set-AdfsCertificateAuthority` cmdlet may show the following warning: ->WARNING: PS0343: Issuing Windows Hello certificates requires enabling a permitted strong authentication provider, but no usable providers are currently configured. These authentication providers are not supported for Windows Hello certificates: CertificateAuthentication,MicrosoftPassportAuthentication. Windows Hello certificates will not be issued until a permitted strong authentication provider is configured. - -This warning indicates that you have not configured multi-factor authentication in AD FS and until it is configured, the AD FS server will not issue Windows Hello certificates. Windows 10, version 1703 clients check this configuration during prerequisite checks. If detected, the prerequisite check will not succeed and the user will not provision Windows Hello for Business on sign-in. - >[!NOTE] > If you gave your Windows Hello for Business Enrollment Agent and Windows Hello for Business Authentication certificate templates different names, then replace **WHFBEnrollmentAgent** and WHFBAuthentication in the above command with the name of your certificate templates. It’s important that you use the template name rather than the template display name. You can view the template name on the **General** tab of the certificate template using the **Certificate Template** management console (certtmpl.msc). Or, you can view the template name using the **Get-CATemplate** ADCS Administration Windows PowerShell cmdlet on a Windows Server 2012 or later certificate authority. From f0fb2acd7f9540974cd1775a341e6b54fe2077fa Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Wed, 14 Feb 2018 06:40:17 -0800 Subject: [PATCH 002/138] Added SCCM deprecation to FAQ --- .../hello-for-business/hello-identity-verification.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md index b0e4a403a4..96d449f9d3 100644 --- a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md +++ b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md @@ -71,6 +71,9 @@ The table shows the minimum requirements for each deployment. ## Frequently Asked Questions +### Can I deploy Windows Hello for Business using System Center Configuration Manager? +Windows Hello for Business deployments using System Center Configuration Manager need to move to the hybrid deploymnet model that uses Active Directory Federation Services. Deployments using System Center Configuration Manager wil no long be supported after November 2018. + ### What is the password-less strategy? Watch Senior Program Manager Karanbir Singh's Ignite 2017 presentation **Microsoft's guide for going password-less** From 162986b0430e439bf12b2efdab55f72f1aab8205 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 22 Feb 2018 20:21:26 -0800 Subject: [PATCH 003/138] update power bi content --- .../images/atp-appsource.png | Bin 0 -> 33608 bytes .../images/atp-data-ready.png | Bin 0 -> 5926 bytes .../images/atp-get-data.png | Bin 0 -> 66370 bytes .../images/atp-loading.png | Bin 0 -> 3868 bytes .../images/atp-powerbi-extension.png | Bin 0 -> 24651 bytes .../images/atp-powerbi-importing.png | Bin 0 -> 3198 bytes ...ows-defender-advanced-threat-protection.md | 83 +++++++++++++++--- 7 files changed, 72 insertions(+), 11 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-appsource.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-data-ready.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-get-data.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-loading.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-powerbi-extension.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-powerbi-importing.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/atp-appsource.png b/windows/security/threat-protection/windows-defender-atp/images/atp-appsource.png new file mode 100644 index 0000000000000000000000000000000000000000..8fc27a91ef90db162bb9c519bf2877c3b2b4dd73 GIT binary patch literal 33608 zcmb@u2T)Vr*C>h&q^pR66bns3dM7kRr3okyLNC&LCqM|GG(`bLdhadt4xuP0Aiagq ziZZ2i_}R$$CZeP>c`oi3(;Iu3;>YCO;P1J$?uD|FVYG5!=u*E zLC>|_p18YNIl2(#7k4WFAPP4C^vvAV)WzD#&Dzm{h=%k&3jilOgUdNOdAV3yTDcJw zQg=%LP^xpNi@C|!(0gvy_U1&wd(@=B8`85k8jcojP!kt(A_J$>v*G0DlUuu*+L-`D zU5IMFRYm~dt7l+{iHn1^gC)^7hNTbyM)LQ2cNbH0BK&Cp_TOQ0j`sHE4sJxd-7(Do zjQDJrrnQ@$IZ@umAO{iAJtD9^LxkJtv@& zBTH@)6{E`K895p+Vx8aok#kP<;cZGv+@D6WG1HpJl%e4E><(1zGZ z)>gg+m%4=m(ClWIqYulp3V<*06XA(f4mOGN3ugi?bsC-OHcVVThx_{~e1Kj$eF%))%#ZKluFPDj)=Bzeu_{s&|B*P_;JX*){+S zx%$5ueLhO|2Fv7y^CyKj|J~AMCYugKpC{Q@$2u8=Ih57WkBamw^muij{a~KTqxbH>u<#*?m(fra+@QD^ z?<>A?iA_(;0)wgDXz+VGqE?qj0CVdyb+KOrrj@OA$+6yslxxkPsie-wxH-W#NNF;c?SpJYZYsmeGo?4Gi1by8SdlElsC?sNrMe74** zLz$zb10~~Q8MCvWGJ8SIyZ8hT5?$7i;=s>v5LZu(M%1~Y=?o@N+3nL}9Oe-Nru^gU z$$M)3RT8-bcSF(NeO0fjzAF57gR|yl*2B6UB@a9GG;&Sbf5{K5p^sG5s zjp#u?{MlZiOd3Q;>GV&s4yP)0X%c9(P9+z=OyEQKynF9lEBLx^T1=lKf@y%fFL@Zo z-|#3|P(WpMb)AU&F0n5Ibv<|wRr~aAh$i{ zzUCf>M;Z~0>Ei9V%d?Yn@Chfk?ax}xFxBU-^4LVEB5xpL`%kD34bIu?V)&^uOcx)(b+f4sl)?uMt)v}vSgYQTNgaCFGR!OJ0n;Z=c@F!)*yzbm=BQ!$$E z36xfB4})<3El(&6(Q${bn{zeZ*PBa(?@{Xa~13JD&@>h6TvX);f-eSJ*2GF}%Xp)IZlCAL{GxFS)@1IeUnoEuHanOvSU z416(FE9*Mr?%3xlCj}s@Gf#wH$5vL2xY-+FnnmhQpRvMEPrNghC$xK%w^h)3R@1!1Cals%Ou+aUUHJ5p>mAbFqYSsx7XrtIj zp=94yuL`916vH?wI!F9t()}(vckArNiza;zJ!61ir_9z47&ST|b2cP7%)>?q?k7)~ zp*8n#oB>1=AAiJcw>Mb$CgfShhL6zU$ReeX;N|I>X6JW?o~!;duAh&7!{FWY@$AWB z*5owds~hgebluPqJMP}yqHkVv`AinIo|$OjST?4~!I>ukxwfz}FG@U^LS-PS&{dk& zd>XS9lx$#VijTvbHqv0Sx*sFLdcXA?9ejrSr8xVQcNf%3TMw39nhODs)k)MA_aDu} zU!G~p=fbrMeKVA*r7S-MChKfNmqxjWSQQVewgZJMo))JnCAf~SxVl0$LwdWMw;%nY zzv{`jI-;0ueRQ(~oodU^MOFAYH?73`J5uR;nPF+#{mQSFYT`zJx+`}a(&A$#P1@7t z3{m7KeNP5IZsW_aYtJ8nAjploqocypD0z<)t}hR;-a;0gVetF!b6dJ^=}UP`IhB0w zY(?m{!wOS$>Jk#%RY45(?t>$3;w(d1+XhPquBSe0Hh=0Z_S{w~ecF##5bR_Djo$Vs z4-^-K1WnmPCVWQN`|7x`y6sW-rF|CHP;&Ru(ZeaH_LdJB7+oQ}xNAdV26(8-d&<{Z z$$LiZ!Rsa0Oc0xasoQH3>MOdYm2H+@4oi+Za3t3__oot1qr1G4RdT$O;IshODGaE? z6Z9R}t6Sdpkyl9$sH8o5o~itbx|s#iNzE*f5mCW%EUcDI z;NSZ+GHD0M+ywqT@ZWil@N!%Kft^D=qNpZv(6Y84a#YT`c@##wzA*H~^ z(3-y}eX7ZXO5YZ>QH@hhL_5WVTBt;^18O4Ly{+eGmoO5+Xs@bV;##m5XtQCvYy6UU zCwxu&4Apyc`}C4^y)*Z^USCUe(1C^xRFU;hDIVe%?$3NTScKlOgI=9Q{rqKAlMKRG zSih__FqA~m!0O#3UZJ^~+dt<#GMsuLN&E2rm5EqZwc9MG29d#Wfk^3HMCnG9D&fFK z&TDS}r+r+*sa(H?din;;yQWZ1NBYp%$I$oNEzYhCec^k$(hI^2 zDjS@vXV@vccx&;KOjyNR=I6ahXX=(a3ppcDC&*BhtNr|(RYpotHwy4x_R}aPoy@9n zX{}BJz!d)!H|#M*9Cd3h7;ZF*N=`ZMBAhVdVeu}Ru4~ac6;-wyPRWvH4EILhrjnNV z_WqMdvci=zIr4^*^$oug2R@Pl1DvojI(hFlMS7XSjYYykr(Q-{MKP;A{f{#`$TQa; zTFz?&X(myliV&aOb)qeDW$rUYI0%vGdb~V!2)7opc^cEUPYTabRoK2m(@8Pj_OfmO zYiXU4VnAy~T<^;_fwlCxdrqKRdJgDrpugoGq7kNc?#Y9l;3m;_4(i5qdzNI=p@te)WS<=f-OD}vy>1u6V*{D;u)O{C zOiua%2SZiWc+6SYHCX({b*Ts+DgJOxb;UT&0C|MNW_Y0LT0cl3g)Jk-o-fbVPd4Gt zVv8rZTQn@Bu5b#-7r5S5vNNYX0&R~jKD=$!Xlj>m;>ar?@4lCi>1_v2-}bzil!(Hm zXbeowX~jMs@?Dqwg2=F&;ZG;DvAdi+Zme-V{Pq-KS7IwE3p)$k?xkmAR^y|Gp7w>J z;LrS)HZt(dkZI1M8BiLJZd;jYyZ!;z2zz>qxE1hBVi1!_3bo;iXi=M0bABEbpCgN( z9QZNH<_M@@QmynE`-na~v`i53V^el#XrZtjbj5dv>NjpXg7Dh%r%;B9vGVglM8TEe zmvna3-#+=IMWKWLZu;&w;#iUPO zQRGmZ{Y&=E|13cLZ)4-QIhQ(pT=S`K!^GcU*WZ^rM1V;S+gtGz?Chkjh=vu(jOdgqXBy89X*FC4f@R4n5qdWgjtc(o!}@dWwE~ z;60OilsipPFL{O#Yg7di-;tz0wX?{9Kg{pKFT|kn1Z)W+dzX~Ec?m3~>seIXd`#a+ zgY)qIAXlqVL>OUQTu>;&f4J=)m|ZVRTXaz1Qk6G};g);x9MQ+Q$jt*@tSNZ#mZk`P z7(jA$B2^+2&Trdeo>%=y{Nm?vcKhX*=ur3Vsuu473R2OeuEB^A+SRl}HSDnStNER zP@TuA&HX*wq6JdZJyjpzwHgK`BS}9C4B~mKMmUVwlppqR>dh1+4RSDkS9R4XrfB_~ zs^6}D@+{v)7mXSv&@>(&gD@p~fUNKyGMk#ImFbtg6cPL~#2R?DGGZa}!PsZ)_> z?JE-W0)p?wA^C=iRBf}~e6ATN+^>~}X}sX^@k0d=r2E(4ey^Z6->k4ld_K?TFM2u8 zj@HGFdyOx}IVDP$)HHy?~cUPeCUnBN$)#lMB zzjHrqtBADCg@fpHd?J>jZ$C0BQmX%*ykuEf#3KI@7mxAu>U&G|s96a}U%>|#Mv|cs zw=iy26N03kAW=!V3PD(;bev|~TiT$aB;3B@v+*4@+r0zLo+gvv^`BBUYf%=e z)YoOX8MDXYrN)m(5(6eX_W!tvR-Jf)SA=612@N8e@K<_;iAypWQ}<7dpdNcH34R)7 zHZt#3kVJtT=ng#m8cIJ$-_Kw*v8!;ghs3~lBut@-jJP4}p_NDk`p?Nw-^_eUh=0J? z^XB?*uQt+>Yi($sxgC*iiSNq0#=BgCtM*(dCZDjJ(2q$>qjsE3O-~i!Xi_MVNoyXj z@|DXhkMV=pmQXh>bOgz~T71VWe6$=N==Dmxu%<@T1Lk^}Wm_}KC_NN!Zo@OfDzB+- za4+*|fs0f+#1(_cY2AJiu9O&V^|i{WqSFOqJMo*HsczB45}J3!S*M$noRiSyBHZj~ zs;-)!5bn7STDWhgA>aGP%N)e%=zQQduqCXv_qg|UPqpQ6q1W|w=$~w?GQ_BVM9yIR zo)RR zCKFdf!5b0DG6M#o7bF}|>s78P!>%~{QA?v!5$k}xCI-Fe(=HyS8hdC11X*<4z2fm0 z+n6-AqzPr19uA0R8uy-_85kSanOJaurN-CLuF5F+M3}S|tdASR02$oaP&EYeGo*|b zQzlp67HEv+pQt`uWvmJppBwd?X=153E+UsmiBIPplNlQ4S=Xr73Y?s#fUm4lSK$Ky z2%7?%x=>tmhz&dB*W&6S_bUVAjt;o+?-_o%?gG>eLWsOQ=l7 zfzf2~V65&=Y+#%0(=z5~Jr&2h@61zb_4f(dx`0btwy09D6RoHo7jw_ z%$#;aANd!M3pHDm7wF5k7;y|}q7lLz^5RAK0xhpC=62bhi7b|sj}3J%>$a(_ve8x7 zQeU+t8S{^15`aw zADX1)XDW!tVIF;}zCn+FKH^fGqrO6}M>PUr}7g(znAso{kzgX4wn46J<2|81_w;A{ZLQLw>&9B@2 zIm_`=4DEbF=c!OG_@cE;GD9v@)PuHZ1ox3C6 zD+hX=b#C0=xrZAS>Df1x`LMRF7^kH~+qNTUc$?EHHV~fLI%#Q?B1n=lY zJ2JfVDoEXQCu`4A!tmNWL~RJgM#p^*N7v+U#jr;gyr708KIuD3pvtdm!Q}5UW37w# zXds6)A`=olOEfPz`Z^i za!wWV67pxuNI;ACQ$mT}OKl@Ux1pZyaDUPF?O^#g+otWg$n6BBg_u7ZM!|R_Tksn6~QsbUq7fbkg#p8x{%T zT})8?`lb?LAyv`CMfZqTz3HO6#%ljU^e!jUUXQwJhz)b`uC7a2!kVbow#bSCxXFxR zrfp3GY^I!zvDQ$|T5+i`lwuqpYqC($2&clLejrd$Ldr7xGJ8map)zZe)4>J?64DNzDs1x1 zntX+RLiN*VsbS!2(Pp-aIXiQTxVZZUTx%%ajm2FiD$($XOy1_fqD>7KySeVOJ>M4V zxmP5=-rh1<*t474Yn7@N-3!2b=uYSKEn?pn|iuIlK4pW4@MrN$A0O>|A|ux7&iM!of6^Y;BKGIF$P9C3rA;DCYKFrNRR94Sy)U{GJsJ=3&me(b%Y%Pro5+fEBsCml(8Aj?^T0-_^K+isAGTQioL&fbVNvTj|%GgRjkrAK6q8q`%tixz8UP|2nNQ zQ(>QX4TJd=H?42&)g8{HYJ3gDVU#G4G5e%htJ80+{9!Dm z;I39!pSJL#z(;7x=C;fSpMz=Mo+0k9i`&B;j%+=J)}60IB&ky@RJy+Ca%BwO_S)jU z_}#3X&k@IHa_QbX-`P z5*Wik9mUozs40_wr}}(ztvP}<{{YN1Vm77j5YA*pi?2makPw(2D%upi`oQtS1ERGz zbqGd$%j=&TWakp&DJc1D>JYjluz07sbb>|_<}ld#v2aEsM@pjqemf4a1ffPEJ{Exa znqPb^vIko``}OuU=n0K^_!f{;$nV=zw_)rh9zeiN;y3-f7K^upB9OSa1WoVJLy!%E zQz=Wg?@+wgCVlmy9Bs(dgj?MLXTe^=aHiw(MZ`s4m#`(!yD%zLArv>SFiVosV~$0w z`pQb+m~sAUWC!8|2G{ZfdVB1jqvk@LK1S_H=wtAKP0^ovQe57E4??L~>42%1> zvvd1buo$|>ywhEurfQII$KA^RX(gmw<|Y4WGsBuhWY(%T9xrRf8EvD~&1X8z&g3lo z%O`ljMfw@puOqLrnF+VJ+s|h_fCQs^Cg-OL52k9tLC@=BSD*04hHzQWNu8=zkB{Y_ zm1XdNW`XsSYK&&l#a1tP;=~@+=Xa-!7n*KiBXUv(!~J0Vh1q^5+sXC&zhp)*#C71g zP#qv7pW)1x6W&g~Vs^SNM0V@w>D|oU`C5_*XJs+I=z}_YP(E+ zSMmtre_2>^s;;rk0iGxOBmj59TqtyjcFF?Vwvb3p*|D1|Jv_2)ct3=dOOue@Xgf;R zvxYY8MKt=wch7EVjF}S$9V1kgc&Ztgcza5iwN(3&%t)OCi#`)cwL%KHV16TErnh_Z z6-E&_&UaOz!J|6VI&q5VcC$7{S&U~$Q+q{2a1|4<^^EO@GB0&A`A^^xUC>P+8YL+hm#4b)Kq@py%8X;EAfPjYiw zs_4c5HFXe~4WVt-x)AI?7S&LPFnRNX!l1j%jv)BnN&Ai-elNsZ$hQ+LJx^ip*;2T4 zFi<}mpd8X(SpR_oXOl?}A!d;00Dom4Jz1ez45lh!U?SNjcW&l7-a`2J8WG=R9cV-Wf%4(=}S?n8#9NZwUBM^L%F9N`{;k6m|7{8-~9bxgTV*fLsKe*KQ=p7^L^Te9fh zE@#s!VWfZl8sVUKsqWE?X$-|>otd@WMTW@4=*gu$eyHBmL?IBd_`d!ax+Nvr1anJk z)u1#i&hXg_XuBZO2=!~91fpgea8Txic93qsee9qePGS+<$aZkIq65y9 zVCqe{JM?hBj>--G{0W`uWAT$2h7or&T(DWH6Z?%`l6BgGt^9G96zZ8y=CAYx#1yd! zMktfi5Q0S_b@RAgaOwTxIpd24t`#|po?*9dEnu!*HC8|9+iA9J$Z0;DbUB9k`(xHl zIE4JZQ@gosWRC9(pAKcW%h|OguXpLtTq zhCt}P=PN!v3UO&NICwcRQ=c}kgyQfizT#KHR^pYY#W`b31U;nCox3a`-T5&Jw_Ja% zNs2_mu9>BWx1XxItV7cvEmX_$w)UYm8R`nH)}tna(|W70;f@~%es}$^bti6K8qbuH zFvfYCy9Wq3ej*tL8_Z250Ag0imRMTwDkjz}I*3T~*k-^5oXq%ZK{eHnRJ_6Ml3rop|| z0ryUwM%ozTIraChQvJ4K-tY9~dzNY?;8UNw9kjo6z0NO!MW6DhHDPynPq)Tn_u}A} z7|ncMJr$Q71fh&jP$Nb3eu{lPjPMLzzlI#2tXDhST_0*1=^;35zFeH%fqLVEQG}k7 z&S-@`ZqsWUaf?1=>eV1z%FoVCnkBKriG)j^stF9XEy%mJ?r)dSZepEG2=XMb#P`@Zd7grGBgcv; z4J$zQo*Au$1)a-O>LfN7) zw66W;cWDNXf?21vBqd)6_CZ&gI<@q^(Y$F$eHia-Uf@`|z-(kW!&TikSYX!ap)a%K z`Eq)mgAM6YHR^CvQZ2Wd+rh=hy8LNcDY1mmrR7%I3&brH)fURp?6CUOJ8TksW3cYz zpXwhlD?sT$u@YZ>_+ffZ-L}-bJuQURC8qfjo%hmI#xEN%{7IuO)6CrDR2sAIC?bQ! z#kW~QoHMB>#HI=L#qfKiB}LLI#C=p+q;F@aaxg2&xV5cCZ7Rs90PxFq~rMHcT(6@v5sVAaw%rewX%BO@5hRuK8PC#rd+?-IA8)*+)zYH^T> zJ6s_5nrN;xE>U_SX&UCM{Wel*NlznMZ^-d(Z+Xsx8eU7))Ag~wkimBk!|F69vJR>6 z3abMnM&mgbjDP~@)OYaQaq3X0^X?w9vVSHHl(HE(aV_nAa^!awft11~cZMwLts|jB3U?1(9t9QNX&7L2* z(aS~(a5P%k<5N~Ar?_*gP$Cver*Sj+Yx6uJh{7M@aYf>)FN4r)ifp}4Fj7-RoHk}t z_Pt2?kKoMEJ9u!oXl(wsm|{_R$twlo?`?a`CRD0n#)O0$CG<$Liy<$Tv^fo_*&D}i zMIp)Bq+xchIv*+$!(l!&nAtKE=ld+pe1Zw;^3^|Uf(1d_;z}tYj975FO1OqRfp*WCx2=lJsR-m9@jrnyvQE3kx!FhFiem)LF>3t8 zp0s)mo~c&vZsVTb@gJ_CXydx@6?L@;t~l!ESIhe}G~ffCM>Akrm+$Nl>u`PXY!!Yh z&6~Spnya0!!?^~*^IP=K)+o_6%wtQ0oi@?mQ`cg#V@$*gaE#vO)UN-jnhBar8^COvlN3CtB-nW_ytVvH!eP2c6B9D#?tvKBmJNlsa zOK^_hgRO()`RxRlUZlQyIHEGYGa7en@T=^Te&-|i1E1)EPG||PinqNSTzvFug0xZ% z0r$P_5xpc9>(1x_Zo)PBR68C{V{x$3KHFaSQj|zt!B(RTP04&!jm#%p)`_$X&R)+k zWLv!c2+rQr9%;0wUz0D?Zpk!*ZjiY&QAg%c-19ZEycd1b{pJL@vfta$aXxZ*+}_XOek{pWf0-yR=Q zAGp;zCbY-JJPMwY#-S!J#Xi@D-ihtIr~Yq2^Lp5m01^wJ(nyx}r1(vp9ZCeKVGf2m zaTQMfTh^5GsQVaBAb8W#(*86v`qgsBZVZRJx4pOWHhPY7lH%S;%R#Z(MXET`gdUrM0z&NkPHncT;{=B|UW_oYYYW!rl1YXZ$57be|`{_N8 z7@j@(YAeyb+!kRXy}^@c&=tH;@(?Jpe^YJu10^t|Qko?;?iG=ieYSYB!P-wv_W zn3W*GuHRGd^Gv({hv#emo^So{j+x}tU%!5Re(FU;#LxeDn(~a=Z%lgiV&`pb&QBNr z*P|=`l^9`n)UNg#`wF8zgbv4kMjz0M)E;-%+oovM5@UaU@}+Rit?T>%j7Z^4fMK00 zVaIy?04W~On3&~8*jb4y{(H7Y+?V${^LP1-iMpA|h3|hq@Gp65!H(%o#-hFdYmWcW z^7uDDRQjX>Nu2qY8$`<_z>(Ye@2pMk{6Y5JL?aCPZSUXyxf|N{_C*PaiC{fF>>fNb zH@Dq=cWsPLl>F~^9w#|Z_byAYv9X0WPrR=Cr~A&op_Q@EuaV31KeKd~_~N+~o4^t& zez57-<(Tu{E~3xZj@-M*NTUCL_Vxw;ME>0;qR)nY$9Uf&`Tq}YJL6&&UFv>MUA~u2 zAAJ2EX5Y}(Z)L(6hoq74ja_1j?Rx(09OJ7GH=;qzDaIlGB(b1YzN>EM#F>1A)y^}m zUfUp24Lm=p^Edu|YhzT75%{hnpev>MTKo2$=)Z4df8W>`y#&0;uCVND%cPf8uifh8 zS}8cE^L+Z0({MV!9{(EiP<&5GMa#omqBBd<5Ay7kb|2*VrmADoetck0>f2l^+hhBO zk5?b3TXe1BM3N?)A9-9*`?JgOqsQ~N`JFG=J^4Fbw)X|T=rdeCXPv+C4GY=Dw~uiv z5T+RlH?@vx9=&=+^SHz0ar9NnFJ;jE?(4Aq{VZ=SyKHf8k;mr zSjW(5XV{Or3F?ul$NX$s{~$3C`58bWH0f1(?`$yn7yAj&=;jGhit&TZUg5*kcM9W+ z2H8RnBPBD_mCp~c?~UIOm@M0-aySZN*+pL@ArElXSjSlaL3|4T+ao5qW%!RK&Yb2a z&w%E{Eem$J4-TEj(}ZYS6Rf z*|G9WNWa%$4HTaS(_?sdS3%7Z>3%T$ zr@nIQ{9plf%BiHU>0@>DN@~J8BOe@&m!@0^wYiYnJiGRoogn6^&95Fkai5D%2?W-# zmv=oyV%|@c-6)d!6~1xa0_6W)=7h=y1rtZA$Ua+i057zx}sAqD!Me(=DXZ)9Y&^yfY^Xrw10X61|4%?eWUK zv4@@9EO_dmu{&SC+;M}gv{LlcavC(B?%q6ZPrSSGHr3Cn5si&hb;BmNm``Qr>)lI#&(jQhJ`)F84EAy)i7vR%^MN zS6s{!mc*yn*w`3uzSdQ*&y$^%^-x$CoQ(0-+@JR_SaV-_6QO*Yr_SvpL%H#O0bh)- zOQ2ToT?9Q1fzy8XE=~))eRpR%|0ALGfSFQ|f>N2^ttZcfv*|zy?nSujwb2&=#V@xb zRk4S>$M+Zbb8_!=GFm(olzJYVmD}V~wZ)N*sHuSjn`ry7TBiLz+~bpbdzl(aoc+{7 zRz(=X+}+89sau=Dc<$~W-r;`}sIIQgh(2#LF<$mMSd2ZaGJFczxLm)v(KL+M9lG5* z{^EshXcIpy>IB{WCBX}9l;^s$##S`xt=}xszX)xtQFTMiCA$)2##RU$O!LBiolYur z{4WtQqN;xUmQgl-&=)cjFs+c2{`KZCDIWK|TDS43WNZuDjHzO!gZ78vnD4i{igh&4 z+VX+6cD0K^pyIqqtB76&6bDDvN)AG>(#j_0mSL=QSnj+_yh+y(Z|Y!uPCrUCl78#) zVJu6%?UKSV-m=Yxuh~l5alfOC>Z6mw>HSi@62CuX|)1{4F{Ql`u9Iy7_F!YU1BcqIOkhgl<{1+Bf3z* zp%z&Wt2#E0UG;@(ogP=8mbqmtW^NcBFD_9R`pvlEX$cj2#lyFy#h=p12TK>lTE+?N z;131aNX`R`9gTNEpi8dH)VJOHw(kZSI$dix`QA?G<&D4wR5TK1$lKepDL*{EUoRDO zZE8d3gI~kh^8V@f*`_J~M6c0uPY!cbyw!)fwg2txk-HcSqO*xiw`u1Y^l#_;^!7^R zFL&>Alu6m2AkD8dPxREc__0TWY-U3=V9@XvhF`|fH)55QZCg_Ds|iH*9ZJeajO$yB zBzdRX`G+zP*7Jr=|52rWCyxDnj`-H3CyIM)u63V?hSEZ?fWm^sgu4heU2L?{L$?M* zik(tlG%~)yHiNoo3dZngZrkz2B z^iiICWR&#d=b3`)$Hg?A$%67WOW>92MrA0P8LZ}LCb}kCU*nwLUN;S9A)t9KUq?|q zcKSA7M-@N+l&9j!K)*B;;rm8tPkqPP3 z^K0hb3w^)m(q8!(u-+S<>%5|V*ET%>A%+CQW*3Z@_dC4d&%8qiiN%;-J$}v-rPyoC z5h=nkzj^Myf-?e{UWrHb8H(!LGITfZ)n}RBH5d%M-s(0L*U_3Rf7|k~VHf9@f>7@L z%`mm?6XH8@t2P1Sir%AaJ34A=a>Dd7$UmFRc~2MWJu*vb`GDz^LtKst>15Ft+QQF% zXnig-te<|6LN89Q)gSfh3rTm4^;n;7I-Du?c1hPKtD5a%rs7|wgK)#Uu`81&5F3Db zk#1ej1hrQs(U|}~<%YZ`!_n8P9(~DSjmYBWr}QAk?_4JLR4_kh@CUZM|s$Mk&VLfrH*MBi>=r_^v(Vt=XdH)92Bx#EgZEHe{ z9b$C}&|Tq1sA{ATRNYh1qKZ+vgdQ9sbbN@jA?(ed0B6uskKbgARXRPsWKYgA`X#Gm zQa~wk81G!NY9wRYXn2&*WhxlAwWzspecLqbO^2M;`K_Dx-nU^Ej;|;$1 zo*Xv0Q^*mJePNW9cdlJC_}d&gr_|uYaTUify<-x5B34qOlzV~~lsGIK6UELQdw%lbU>Vwxi_f+v+A-!%`MSnf>3WEwh)2yGhlCeM-s$mw}iCB4Ek^?9s) zvRBAkZYck~IsVyVonMTf6n@Q|Tzyq_Znu|9eo#Xn>~wE^&UOr)-yYKv8r)ID`K`W4NJ->G+7r@<|^{4~TKHycG2F_hG2oQ6?b z5s9AsN}y-8MM`C;SIMpXO}Hupsi73D@AJGZcZKN*C+e2?mnRzb65D0;El2B??W>1I zba$OW4yhtfoA<|Au`^w#i|_jm_r~gjf}Uo-xE4E>Kc{;}Hxb3NmO#)YLL8ZjyrEZA#hQ-e%Lu;=AY46C3R_ZrcTviKmB&%5 zsSON43E?X=l&|B3yIyTwX8$#)dOrD$v&q%p`*Xbe#3KB&e;)b?T{zjaG7yo}lqci0 z1ZR@=dL4Y9yTP~i1al&3o^?g~N~=1BJ;8_uUz5sY+2ae|vJ3G&$#L~4nwm)}EZq4n z9sOEC>V~+OVh#~!R9^Sz=dq8^R+9C+!8u7!2Z#l2D~0`|#x{Q9-gFr^YB)`zuM`7CD1!6;F&@{XTY;*BYN|BTP%;qZ*Xi@%cXvA%UGfnK zWr%8=892{#y5@9h(d7{v+w=VV{QFOV?wRZ^BZm`N-UjE9&2f(QT&(4D8ewz0`WbG6 z+EK*m_TVFMiKpWj<&jvb$RDFp;^mR#cP{>u?9u7S4_?CzQOFZ zBZV=)TE{CfmG$+9IYQ0DSoN;C?fRunsL#9P1GL3zG)YOA*r=jaFmX+!MQKgy!+#9Y zk0(#T8=li&v!G%lVjdhHx7fjl`t~K~R)NYW<45SCs+j0efL7zYnjh3zeCgKp6ogZO2kYNL z)vU|lOlNW+C6rYM2QyStRD7)zTC|gsdO>ZEEmrI3cN`Fovls4$E2s@P-i<3n$Wz(P zE&zxj^kP_36Y)-tlcsn6+^fvH3_1~g_V=!6Y{dP3?ykKy4`a~^IIY0+UxD`n5Ogr2omQ^CH}G>i6VUQ0P(ceV(8W(Tlvs z9gMFI_GVHtf}!<0>)h>b3*BsrgMW5z7U@J4MJCE~3Ub#UK!lzGr6=j)&-dTG6${n< zn==v}e+5GIZPhVfmNiHAqNXcy_UKazUFOup$oxiX)sd1J@mx~_DZqFSNJmn{9;OaVBdM-+3!bsYeOOU{y~=sMXS@xj~hULzfTL(=@ZpI{_>GaD!VT~ zOlK;`KCrKGd_|*}Hk6tc;?L3h&qlKP2a-dxn(no4L-Tn%N=fd7JF$E^v}jczrT;^b z)st>Wjlq3!N#VGdve1e-uWQl81yVqd-22FG?uwzwB;S|Aln3l{nxz8sW=Si%W%0?> z7K5Rr|D+3o^DdsU-gQlMV(h>{GC|cYFWhF(PiWw^H?&L zjz3i4#GH`~o7$6=)Ki~1CS7Cc+7fsX3xJLt*3U9a|1DO7>Dxnj;-H)hx_HtrAiVpK| zoLIf;>qGSUH}^K#p48H4cQDMBZbZy$e5c{P(9XF9E6?y!4VKluo~ayYd`{N253Hn6 zA7$qjGP4_b?>MdpF}FY5y)T!Q`Xqz+{-?jb=zVk`DYVTj2e`8=+ak_{JFm(S-7r*Y zU^qh$@Pa4*7jA$2r{w!TyzBg5S4lj^f&@7%c) z6&uUZ$|q#moAhL6X3@p)+!((P&LV>XFM-^+yrKd=ohWD-PSN^GM<;$BAI2cs$w$Gh zTiM~w&BdiW-xkKOw$%3X6TM)e(~oTqUS74XSY8|?4K*^7ldT-Py1zNk$;}NmG@QOy zd45BIXa}Mm1p0W3d$87det2wbg+_C2x=}B((iNlHj-{lejLcf>id7b94W;2wr8xNf zX09a&m;u!iM9!v|DC#(3Uo(|cWs81MnLIM0Wl-z%B=z(NQ)NBGE_Hge9WbDO&hvgX zMcNI8!5-0>$BKlXyuK!l)z0%Tu(-oL9Q1LsEt*Gha4=ihw7>p`Gp=#ZW++F+#>(oI zo?fDjt!?y|FX=enJ>+r0EWNnP!oAA#TgXHdnu9^06tW~HkcW1OSAlB`w;sD<0RmAm zZR_ZW&QknZsKlgJ!xm9qE#!%a7i)CzXRaBDa_mx|gP>y;0g|%^KP&u-j$L7kFD-v$YpGOLHGKFnNmiyD?bnD&nfsvZ(>Ti;f zD?_=6%1TY(6VkdA0|1ew-ed%@bbdvJ#u>&{FKaPXg@rFsC{+Ey(%F#+0=NWIkdxEK z;Xl#fRRJ&zXkgdW*PkqLJ%s}MeL^=bO4nZQs!+m1Cs%$px(Rstf)ZPcV678W*MZVqUNZdPzG zG1gPEWPP+uj-H;LlZU7J;wN6;&5v51s2QjBOdv*y)S+~pYq?TYS-Cu-=U6peQdl^g zqmsDO!4d(~FjaxM5rK{DO5soUCKR8?04gz>Iz>uP9Z29e*^ zor3^81k}CCyz5rGb5DxYM498cknoTwLh4u)Yi4|rtQ9RkH5Py8FF$(t@D&V(1UBPL zZOzTh#4I|=erTW`D2h%x1fjZoU$5kfb>|| zop40&tPB;Q4PooTv^Q@m2n6JR`a}WN(gKj`Tiq4Dmf`^m$5u}`RMbPfI3uRvdsF^c z`SO&;cNT+LioP{8y$XNizrJ#S zA&^`^BMSgoBER+cvzZpM0Y9SWz3@f85?~L2=4!jliF0!SG{u)-ZJX#(RaGV3rJ5+h zy|7C_8a_Pf#R3B04po<2 z?Cgv*3y+vzxr6HOPXkb~rB}A;(82;(qX5h4hApbG`4!1l zke@%086nN7s0A$q1Z;6}QO6)-YinzGdb&6`IJlHEQW8+P;nC4N#jor-?R?I^pRLa{ z8zml_C5ahQl z>X#WAc|&TaUk)&s{T*Le;7^nE92>!aH5gjzNsNw-%>|@sb#1J|d-Lb*b5jb(!A8oB z4#&}joh)h-QuElg(Xv*4B$_2cG6NtK5c^583IPFuoeye053CYX0hZcN)q?@m^Ioq) z11=)}40VHMR%`q!$_ChV##l3tw`5xM!!vjS%+RtgrDzHXwFOM!nYgpMCS|L^S2YR> z3dmr7f0_SWkzvD=m_5elQj)mqQeI=@R6!_x-tXUU8i8FMFEt4eahxs$7Rd*+CMYN< zd@;rE#0$`9Yk(?%!C%a%whs5_BmSTEzB4SUtXmVi+l->9h)S^SQUpXYNH(-$Ns^p{ zl0%VmR$FP2poJj0M2bv-q#`E~P@=>Fil87Mp+G{B!>m*2{qCLl=FT_s+~@w9erO*# zo;qRgwchovcdflkqR#;t_5LD<$?0ilwV|e1G1XGHSyy^GDYqFtOmA+jxJK*J_2AMG zZ3BV&9_^g_k6Vpuz?oH`EUS^Fm)0C3Du;!LX&!v=_-#MZ0@FtiLTc)#XS@{_k6ob_ z8RGu)fuA&vI>t%+h$l<96zjpd&q)d;ym3@TQ}dPa6BJ!?O#p-S`@fIgL8Ei_gwY5G zy#jCLhGS*7T*J@Rtw!hmwM|hPFZV;j6Lya|n&0?VSq$R|L9?dk_n0BFO)ZN^j^i^k zFL@rKW!-fAFFL=p0D2Q95|(EM&diRXP_3)`7tPNmAbT#r68%d2VK<1N!nXZa(CsqY z3o`Y^!cWuk^E=l@#59*k08UKfOwl5?{i$VTlJ9mj^>ac{k^hzr?q;>UwW&k2iE^Fp zN#M~X!oDo~EdgM=hs>KI6A&l2#yWqlde9@%5E>`pmR?>Cs~2haJv)KIjE1DBm_x+X z0XG+ykSKs~j~ngI($AQlwt;vIe{L=nR=SkUp2|y3NT~KC5D3jW23UxazpcGz z4Og`Wzo$))C%nxGdVRM6mvo4&-2`2PgO!ws3yX+YL1#sXk4L6nu?j@=ykEkQX#&hb z#tL|LS6^Q`0&aRmpN?_?D&HhXbO0A75QT+=Qs2J4E8#Y?s6E3Wv-;FU8u15YB%7m! zHIBT*;j+oLr3y+ioB1$E;W(Tf>nqfNea#`ROP4xqGbmiOM{E z=FIsh<6-yf5%3(OoOq7UfqT}8(+T0C>t6A$V53`=OEWSe>FX`qo7QD$ruvX)&#HHc z1jRigJhYbEUss4G^@tv!xEfoAzppvsQxJGwqpQv=>8xPfaZY3MNgkt{TP#lf$an&C%dQY0LDNhjg7^qWClfJPyoFGSg)uGR`+RM*s3Fd2 zyd^3@R#i2Oa6mS&kUq)ke6B6-+vqF9?x)8%7H7A&X4i(F@uCI}-)o7JFyA9o*?>^S(eqWtSNpkKlgtp*ETO}8QP8~j9;!5dzSeMfST`(>X5{L451jjC| zHCArOIn7TIbPKI&15cPqu+V0*NHFA}TTnynp)(?>>FEti24|0aT3r~Y_L}3O2s$ZB zIAVbntE4-hB@RfQCj_NMpasAs-^Vt}2DYADppp!yx-<=iLw&w}c;OMc4mA5Es(g9S zi<2Cpk*SriFy1;9WgeeX;D2ghckrZ_M#u)x-MUjTMHDt6+`CZHe!>6{U< z;T!++j_@3n^t-TV6klqD%kAI+lye|EGb$~LEHc$6EsI6HrvNWp19o&niJ zGWaoS)Ysa|%6ajdGCb)-_SR%})95YgM;OP>PoIp~j4Kdm@cCZ7cXD=?1fj9ns9|5? z)|lPaE!gUyLQG@CJ4>(lO{?^}JOVqFo8-!gZ*7SP)sA-`-XC|x;oJy80kXz5lHaB# zxd>%xVR0LQ#IID(0-IieI4Q4gZ_gfirFWhq!J^JzKODsjRm2tVG*U(WD%)JV0Ao6_ zvAUp>bN{9alrXkeLborX&HOunK)o{XM7LR}v9hv?yUoOIjT&y9AFT++RBo+VFW7NP zS2lq=;&XENk=Jer=k}aPdc`EP)he^C*DAFf+Y&F85fXA38Y`pjeW-r47uhI4E>Ola zBQf!YkB`q-*>&(LL6VHa@Lwe*C5wfA>xJOV2A{N;8cSTJ7GWII0jW3?WBG7LBEWCW z<2`O+7sq1kxHvdu;hBIFbPa6|44tQp$GHu*Jvns7d27SNXZ|CHS?Z1mVKx?6dp{>b zGkdV(QQdw1+WY(iB`$I~TJrExwuS5QA-n7!-bTIY@7IIq7IjR67UgG@QWWEKKDmaZ z|KJb)tUub#{2%??#qG*ZIpRMYYGHh9J0NaqZazh-+;T|{pp^pYSn3?UD4spS$G#u4 z!3}xCjT<+T16*Zc)oT9z+CX`R9cpnUXyhGhP2dUc#mS89NwD2;6f&yda|ZdFc91qf z>JNWIw*v@SWBQBuIsZoHq^`ccz;>YIrW9?19lD}zF_C`l0;}*oGPw&T&~S576DIaC z5?H{gc^bCX*Vj)3-#Te(_~gr%dtl$5%F8=j&9T{p9CFJ9h)+?^&_H7=R)!Cvv5lkc zV3XAOMqc1!QC$Mit*3h9#v_1M$Q>b1CxG8ZFAN9?34IuKL}Nip#>~{e^;)(i6VuY| ziM9jjz&o5^c06Ryh}w3-u6d~1jG#>8z9NT25BVC2*|J2JsqQF(IlP_5*&}ZW#zD=q z%Q3WnmtLRFlc-Fk;X&0=wuVJIrbg-%={y<&@>njUsMbJ-VSdMQ5u!x`cu?2Y2J9A( zlkqbEtNFChDwB;2z*;qf?^#Z^s!Xk%>tKwYU?AsfAK}0>rI!1h*1jb{zoWuDW`-N9LcvICGJaMb68vSWExm z@_$OWPT#$D?E$>LRhHM%wD#tL%yu47CKx9C)|T()=FoQe77}$Gc=>3rr-hw)W^WGB zNZfC$3e-PQnIpIM5=R1 zQ{i~Lhd;!2%+x80CG9?+t3UTNuqK+`!Nz;fqmis+`D@WFxo&y)$rH2_iZofy%xLK* zk2OR}jGN1>M``Z|s9MEsTYAZyFusg?@!}|%r~#hd4Z28y*YeCujJDG~mU;`S0CN~; zwn4e)wRM^dOt;KY|3u>89FU@kM-0-)z~p-@m;o({I>se4_x>2VO9tXgcO!2lC}$vL zsDV+zq=CyRtE;PH@en!?P6i{}2~j`A9Ot8f49%WBdz$u#lL)%z2fcz`UyzZJ;rz{W zGA#wf99{&mbqa0c;=N|XoUV_8NHYPks5Iskt%rl|N|5n*zjo?R*z{e98A=6+tX!$( zUF>&iod7#7BrJnuVBMQ*D(<(jeZG>ryiO=oZ>?GCkuw9o#^19qQnxQ#|tY&zCVV8IUJA zG14THs?7=D(Fglx9%TH0&>|c(rqcfV=g3KuE$IFOnEpH@^>SiY)2r5T)hjF!D8SZ? z@^YVU%!Y4eNonbceZOHN7!DmugXBUQrvxf*U!mQQKC{c@-0>49(vp%!v)E~sO}hR{ z7VTnHL&NN=XJ149zPh<3h6w}w8XGes=O!flzAzgR5#hx+eOm>^*am*w+1`E**P3F) z=dKj8Q+u9~3CZZsiH?o!gtX-A!s=Jo(ypGKi|BdJaKhTpiGZ7})Y;XZA9%Mquqk5PAKtH&8 zwYjHfzx_YN^I4CUGHKy|+i%c&V>S64)y0hKU4D=PxUD($VM zBAK6-ntHo9PI;oEr^kY540>o%f2A{Wp#;ASnV{sJX-Comp^yeWipagGkhn#;w% zdwkL$(t!*w2oa!}neNcx!_f=l%uX|Suc1i8diP%X2D<>LP%|{d zO(g7iM8E3t&7vC;$7sK~-yIM=#(=|kgANXw&(xI_iyvsNcJn z0P}EJzXVS+O=aa5IyyR?ot=1)&{j8nZ=O2}qUr~*0}zCyq@+$WGe1Ah5cshA^%~HJ z!vS!`%SiGmxwF?+mCDG62G*Ky-%>#|ahdMn&x@AD!pX&o;7ky*F=PcrMXn?JQY$J9 zz_!OKetB?Jf^>blr6wH#-zcBP-t*F&QMde`4w+zT??9uP51Wr6@h+!E@%40#Kf_o7q|Zee*{rg z6F{-ww(yReT-VT0Hi!Y}kH`3r_3cbSileh`#1}A;=MbDAlo}YsOR|N+%Lt2$r_awj zf(?NS!k_R1uM$1AzPWX38Ix~{9^S7_yM)n42Vj~#T^X9Q6W5G$BJbx!0xe4dxU>*z zh!wed03M{cxEN768%N=%VevWbb8a6&aA3+G@cFqM;rr{KvXwpGkG+5C_WrD&{ns9X zI0&F=kWJbcUs#>7@B;%oI2ZsUFf@yEDF^xe@%4n=tbeq{1-WtV-}4Cc&bK@Z>zn9C zZ)qGXvKR%_pn8t`uv8BD8S3%UUWZXkpdT`jyD)&iJn&z&yBr-IeVl%eY6S_(VSuo^ zgE_zqa&jE5kx!4E*=TYplg8O8R;wnvOR}MJgvS&25DE8 z+{bcqMhJ`@umzT%=J6O>@I7kc21(%a=hv&A&dzE#Z{8de_~R>>Y|Dog+Gn&H5Y{+m zZDR5#$PKX$ae(%R=;?1`fxmXb10^S42o4R+02Bq0Tov?u%o$uO2Y5f!2LL+Lpn3u+ zAr}AU%{f6ya5%6#EIu&s0EJwr1SwZvu~Q1z$O-yAUA?`QY`R!b{+bVjS65$y;=%=t z41h0G=m3~|L=4a%qoUL4qZ{3WbDq@Pb8&OyKC33h=0)T*5 zW*Ju6URI*Ni9+g5aK?e(en}?~gn#|5=F_L=U;~i!o9_7ybfJcp7LXT9n?9Wr6(vcw z=;>6b1Q#YH!K~ecvEjcF3S;Hu4bkt9KmI^tbnE7V0;3>wzI%6F5YNAK5}~e| zRa_c9Hh%w*D=Mw5Ob?tKi-$~xpq*Doyu|qQ1I0C^-~0-T1}M&OcO=r}0636^Ss*$W zqP?@he8A2jWFn*JF$gy+@!c%(;DL0kX|#^`V~L8qlSz?r+_Tz!cj&=!zu5QC`yd4G z!1GmifQhEcg9i>E@eSYr3@9ZoQk0oK{q^fAdR~AH?Q-Lu9OD4I`_*uei5%nO06-qs zd=U${Fi|H#UO}a$r*n-`p|e04A{{ENveFO`YD|l8PZgf|vO(FE6#j0|EA?#ua!I&* z`y{V{nx$nL%_TtBQ?=DqQ!|MVB~!X#hVbszuc+=oOUH(u&Vp68(tkn9g%BYhU;q6C z6BC!HsAjd%T|jW)gM#&4ot;7{PBg6jZ0n>~q^hN5@#OG?7PlNzY00@G`(W@Ir>M#F zh7fgUSD2wZXO`5ghkNhB0oaR;KyHxfdWw}*A)T0`6XYcF4um5sw#GGWUXzNrRU6<_ zJZPkP2QQHd&rm#I3qL?yriN>unN=Yb87P?D^tiLr7vR3^+zIYbnXRH;Mo4u`8OgcrAA#ql6MLa%1)?pJnup1U#zrJVLq&zl zc5^&|4yN?{e4$Yy)G@$ip$PlJS>jTT!Fm{nQZ$dMn3&iY>I004s;a6Jn>mc^ty{O6 zie2z4=3;z&M!F)Ja0c;vv!~K=CMIz1M(=_CejBz#kOV<9KqdnULkM-58@_onQCU~( z>zq4MyUcT;tv~RWcj*7C0S0aiUs3nlJC!mW*}%QLFK)jVnaJjUkWHp&xVgEtn^ZfQ z#$D3J5?Gse=FCyjM;LIi|c_pQ2` zwRd-$5ywuA2V$z`VB49dXCF^ItG%xYDOAed z;M)7Zg+QE%fcW;N?b}1&Dv4{u$MCTzu>ZL9x$2khh-W}l0QnMqktnh+s1#pSD+2DbT{`7rLJ ze_GKNjlW=>lKOx40z~lj(fV{hS6}Ub(V+BG(3FC_{6${g zS+-y+Utn2Cz1~7de98lVpRlwuLJWsxHD>TCckjNIdvzI|TWGtJ4e0}=LI|33sla>p zuZ7jAOqNzwD$uM_%wV1L+$9F07nzxnoEjv;2^kI4ogf4P^S=&JRPMANK&71AvnK%o zT^${HpC_NIk&{Z;RLU5WKz8+R6(>fubXa6ZQ`T-TMTl9C$_+~gQG+xDvq>>(3Fpy3 zAHLXMu`KIm61F}Q?y?ED0^6qr8sUA9ua8-e%mRJ`b=v*Qt_1`BzEvGvT^C^N;5h(V zQLu&Y`nZ}D4Unqtm)gAp0*`b6a5B>a+4#_%)!E;l>9f9+R$Q!&&9@tp22_LYlO{c0 zX8MNlg(#U8FE6j=WpEAcqa6@}pNRNY4$&V*r4-^ zfYi+yIw?GGe!#;4^05)E&QhqTS?xz@cP|Q!c-)zjb=J*R;$!Ya(hYKpyWMC*IOljK z|I$(VJqWXf!bjgP;cDZKkhv))n-QE~NE{y&i+d>IWJX9VE zAFJMqG-f`1x*Zf2vwl%puyw2PIX0tL>8sDJnbrCI`&-cPFySoVvFIs=!-oOY8i)o^ zj9Xnk$XjMa-U7l4fTIdlcewvqeqV{TRV&n$v{b5NK!J^*(Y;0>Hc)h z$XrjlPdk5i-V^(TyB{)Bb2JoSsDnd7tU&O~n;~&YNO&n8lh(}$3aa|M*q!zkQTB#^ zNx(HnMn>k{C9Q0270GKaFRGJUZOo$c>fHmoyqS$>r>FCGvuti|IvsEu6PWw1mmSdM zJ$|8~wbk&G*8*hkUuhgtU0E5acj6BbnN)TOv%_j|NLZsIBcbD}S6^x;$C$X{d)+iK zZl_MDqhr-V5DbH;B&P7rroeIZ4!HvS4G0~`i+5l=n-9bnLyIOXdwxOVp@>wExqDEU zG<8q7!$ap4dTvUFj}J*HUXnW9?WCda!+b*zhFKjXf@ddrqq_v^+%th+fjOJ%f^!qn z(m0*AA&@$;X##N&%MLqkmjD#4{lka9joD^tX>!r_70B>d4wL(WG8YH{y%74ygN2Hd z*3ga84SbCdXHGou>b=j&6DN9giYKS0Fek1!rO|_MfD|H(CA?SOZuoAq2JCSvXA{JP zxyP$`SFnt1Mn|7sSTihf{^+VOH8nLpkfo-jl?rSLGTGiN!(o$VDCS{Nl>TB>sOgS< zZMwBv9b6iix6OE4d;1$8tWH5s!)~^kKz$7g_npw+0o`e4zDTKmL7cXdl8z~io9S6? z7U*P345y#f9)DKrJk`wuf;qTq@xY9i_?}C8CHq6!5%Sar8&d1X*m3+%Nbfd!1u+c& zCW#%S_ts^4&Uxz~+c8dBIxFz;1xEX7GVp3kZ|{Daor?NdRlxQC9Lr}K?dzwgK#^0t zvl9}oCEWeS7J5;ta)=k#DmqI65(@4wmNq*;?93v216hS+|2B5j-Fal_ew-#BbH0=# z4Q~CtzEse=fib`&Bf!Or`7~kzvkQC`%r}ayL8|b1Yd-iEWC}utBoYbuIg+mi9A=Gn zS%<^{p`Jw{^&`qRZ`Ni`(GdASw;+Br04Z7hFkjE^=dB!ybPxpx1znnyrkxe} zG?DEw8^8wybzsuyKu!CvqoYWN7uAV)MKFz|S2GjtR z1~N_mAd)~pxI{#wA2Qg0w;jwVK>uB+W5a7T%Nn=lD@|1prgT=lr2%!(Na%tXkE$iV z+3^iU;HMrHDrLDQMn+Zr<5gAutMQQU!sk6M*F_#Hg!%+uHinN`4H$=5h;vY@5u7JE zt42DvlRqFmZNVKyih#2$I4Vmp1zZH4SY1u++wg@H>m(@z4A z2kq+RPCA5iLuS1c@{Z!PSO!{UZCP@ixzVN#02!DrL2gioM z*2F#L@sxsl&d!~gD1Lf~E%x?&Y4hgryU4N})G%oIq>+%cv~A2wQRw@F$_fAkyl>%S zHKabIyZcjx&pP(PlJLW$q4ma3PVXc`#H^#w0i>fyQ2SGcu}9Yz#Mju6-atOq+uKXD z$3t%(gc?Bbx4}be@j3eG3&i-)qwnx}2vS=o3fwNy4;H*~B^3sVO#J{7RB5XkNdXHp z)L}~li>mubda|RugBT^)bc%(g^V_#?`ZzuJWOmA}aJe^X3Gd}8;@zLB8%E|psrm?s ziynuJj9+p>iYcZ|U}e)6R6-sLKb1-A7c)=QkXZZv{hxiyV@RSiyNo0{n5SpXoRKT_ zfy#-tr7`Al%+sU$PK7Jny2|k}^8)QTJ{#BrpJxlLx2Xq|Kyn*UK3{^Q>9|=|R+j&z z+6Jgvb7d&2L_}wwF;HmexFf|bMTLbKTgT*Tyw8NRRD<^>7^OO3Cp_wTQ4>1y3JOu7whVh7f!F}I1omIR$_qNdY!Y@-5L*7! ze0<7jNg|a1agGXISs5_wz`{(AK&wPH;1F5hk18N0xjdn_5}!#c3(}(X#FZ>ZNJUV$ zPQX^jrkF#y0y@!|VGOMSZJw&&yhLH-5y7X3B5}_3pksuQri4k*o5gqIS7U+uQ@)HG zvjvLNHWu&zD8?L$(`ClOFk8*TNQ7(gNnS!_L}lFs&Y~DEX-Rwxf`we*URRLr(Bp9- zR6#;^cA)U#Ye zWH74QohCcecEhfR#7j*xz!Are6&=x3S5LYTaCo50m|2NOH*=@`-M`r0M3-rrk$uA8 z?p?kV^aFMj&{IqDB-69{5eJhbn&4X1`+tmKxgdN*OzdhdS z{E@-@)AGlEUUB|eB>Dem{nw3zmIjLP<03Q7ZRp-!)dn1nV%t&V>6k7;9o*EDmh02e zX`TI-6xz3$@;gN+_zpeUAK&@*+34p+H;0$*Chs*Wa;4}b2khMQ^A))Z{T|af_0GjJ ztI!{yrILF-ZN&aZqOA1}%#C*9KU0I>o);Wf+!%np-nxV=^A^47NN;nL{#=wH!W#)~08Qd)s$4Xgn@11{QGqJ9~~%FAlg z97D?Re;X`6Ci?nO$1=$m_FR8bH#^F`6gC@K-GbZv8szGxZ_w#Ln-Tv~Jpr-F^DtkeHf=Uzh$WfH{vG6RECe&9K_mcQi=vQ2o>vF zy?9K}^7b@`x%0jGP|t0@O}o*}4*Pb`A)oC`Np=IiLmicqjFRJSQS1 zvwnWt@jCYF>i6qEI?()AfA4qrd$iZ@{ubttcF@_;R$s?k65Ow1cyza&P+aK1&94$; z+goGQ;r#XO&6ueIk=ftNw>Isp=W%ybvpQB|tjD%Ewp)4f9ydl7*1OM=PF6<1lY094 zgeZpk7>BIp$TYWauWt`LN5!$N-)hZnEw0Jfv4(waEW-_*eldP~x9fFkedk#*oW7lU zW@-b>39Z6%E4f;emFtnK%O#@>Q_GrmR&FFyLbKP0?sH2g&(GZ*HyYqN6uiZbp5rq& zA9eI`u)TwIo@r3%+xa#at=|}q&Rp`@JEbwPxlOHvS$rQv(7qMkqVjgQ%{@t3`wI@a zpkR|2%tUGFW$S_Y071#?G~1hD&@QwcXjo+C+p8PMuHNAnllOI;6`Le-8pO^A8bfQrF653ijuA#=+- zuF4%Q*a-v8$)OgHhAl(;blz>fLDkz7ula3d%euh)oAoR#Mw^!Kt;+7+uJ7|;-MJNh zY;7$DHXp5U*ojicv2(cH3$EAb2brgDi%Zf%$KrM+yZw2HlH5wsyT3WvL#p2i<=_us3KK1;WY zhMGnqa=DIs-H#-#vwh#B-K5C`-BcX*chz17t{E@nNR_v#WIy^bdlBuQ>72q|$R_Me znvui*bKk*#S4gD+<<5iSL66vt`ME#Xe;-!=ugz?i_+dp{)WZ5tlagzKMGYX!FMVB{RtI#{_R<7m8%C`J0Z}Cwq_7YTboEn$0Taoul30_-*gAb|HYP(o*UTwv|`?l zk)6S;`o#n^B?tjOe{K7*kJ~@>uAeXZf9+2H+6Ng-VZRuAzmFtxX+`2JPmJ$`=k3t! zrgp#GCDevjr&tlT;lHkC#_cAeo<4gu*tf#+_cL~%=6-Fp+P)vU-!+D-YkA~OdE|sc zlhJlOX3`7eGATOyjji$dnz_ppFLL#T#gT5_#gnr>36(1(r!}8$zo})v731W+NYm42 zX;(Wgw@F-ARJttY*}L-k0z#f)%qnlMmONZ|+~-f+%YFPBIA5aZ-j#^fc@3QonsXgk_p2El*SN8Dxpu&myWDxm3xN z%@V_Jp<{Kax}`;Rn{X1>vgi+=r|WMOkQfgkG~9m_!mgE+Gnm?~sj#iN{?}Ct7=S*5 zBij=FUcXap4ZR7sW~G_b4VN4-EiaCjzY!g*cukSHoL5FvJC9O3ARo)xK8Eu(Wm{Oa z)^sj#FAi*?h5aARYx}6(hK^XPs={nkd zC-uFPc2y2xoSV?y8a#!MnVbqvE^k2_w;f`Q%8K-uD>z-QyYYR|aY{Iv;-u(;5ru1e zQ%`qY3G} z;-lhvZZ%jVYbg&P7-^i1FNl{ZRq5{ujI~`L@x73 z=?836-CF;0K5Mw1L?&63%#VK$v^KipbSmV!*Q>TRBOm=(`a45Bzm%UDP*5!2S2!1$ps94q@huwCMLfTo`N%1VI*OShaQP1V8X%wn~Q%J-i zap?ga#-ZisEty<`q1@=z+E9342ZA41m34vd)<^+1$M^W*&N!`>){5GN@=u&jT8}-JMTz%Nyh>g@ zNMO)w`^)y*hxido-{-t7Qf8Hkg})wIpFgM)?oxr1EikB=qi$0kw*1Ks?VdP7_mX;h z)Zlym`bTl(W%7yOQ;jLydc(M!d>>C+yt8p$Z@vaM&xlY~O}z}I8+I9-d;P}%5vzvF zelxe9(q%~vkx3svHZIwqoi(1)>arPsutXFkS}t19TO?Ca_F7OU%Wc`_ zw!^31$_&9gJ-S~rTXzkO`ld!xgUFAC|L@-H15d@Qls+GVVY zIN>*Op{P8q;_@GvR|ta+6S}Zrdf)5h`)RXzml>mo9Nv=;VZTz6^H&wyo zt9P=U_1pf8HlFsISAOherx_2g;7jSU+AM3Tkd*ede*R*{Y3q)8N>Jr&L~U{XTGl{C zfIONso9|hl0-g9DeKDbW6&~w)qJ%EbUTzJPLcql(uP@<>BNgQ~+d)ojZDY>Ha*L*w z#NIlwg-O>A+}!Li$!d0%aYi2ajkm#^$Q!ugc11`xK;bV|#O{PJ>=X zw`*lCcSQYax?mTe?f-btn0-56H)h!e4p|?Yp~x0&R*8_m79S&N$Z=+M)R!w$2)Y?3 zso^4a`dJw_>ci6C8tARs&u>~@)H)+mVY*=)gDLv`@`#|mSREPjxMgc&>RJ^weE8iF@sT~)h`+w zf6u2}Sj@pUr-?*%eErn1Q2JYlb&MEEzHbi)nO}AD?!ZP*P03p61pjFze=s5G*}T4O z)8SaY1xaF;Gd19pz;T&3-acVwqZ8>b@$4TyHrj>yMFcYXBxw$A-KmS^tDmaW>F3~Y zw(wn!6!!n-MF|vHwt6D=y!*oJ=f;ELs+#GP7!eE8>O)kv+di@Qb*Dc0FPiN=jNQ*# zy#(>py|%57RE2Abb;`BE6TPKkkKebP+B4DEIrQw*jr3Cw-?{gkWC#hd7@M8k_%;5o zRV_u}K8;jx1F5vuSSV z;F;_+b6Q3Lf5ZE5_lw)IUJ7lU($>w-vS<>QQP|8Q28Pw&2rO&PXQOG^e_ z0*=(YxT@ec=n`&r5qcCgy$>f)IL9~8rcqm80)CS~OhTZMKU|`a>@s}f$d|!`2ToqP zUbbLbDUu;DI3}cD@_cRL`W`vmm&%jR({)A~eJR=LZKbzdYF2{r9(FCMYUYREd*xhc zIc%9njU3@AehmzN*9iL0Yii1AEf$BK78+8*Rit-wr}0>K8>cLQdwUg!uwRT}BPmd+ z259o-r8%Y2B+{k&rv`0j(jr=m8PC-oi%sTMG&sf89hE*|E$w?vwvJsv-*VoxQhK1I zc|Jc=EUpN@I$%tUNd9)Be9l$U=&hlQCDCac=Cgcow4`tSStmDY04LgYGSa|cBeO+| z9FWZ2&>l=7W-s0$=`>2)U9^dFN?FKUgKvqK;mMFTyxEr8hn*=#j4*lJP?u0{JU0>| zRjgp1obiHjw&Q8uQ0iorNF0B5+u|~OuFltH)wVYtFWl(XB{1V=UhJ0S?h>|SQ#x>8 z%=entd7oH&_NJ9TC4C5fwh9Zq2w$#}8b+4HnRabo>KJi<+rzdC*W`YDZJJj)O0Vumbv`{J$j5*@kP6O zAwd;2!&(4DjRqifXOtt-%^U6JwneMygWRdJ<*`k;ml3|yYWZO)D7+K3@YE9 z5CDM~546=)OapRv=EL1h%!uUs%gjgQ<>!lkLGE;BCtDS!VpVT1W}Dly)PJWBi}}mI zW$i<3^BU#Cy<;%vpqzbb&r4AaNGjL!r}K4AjEpZ+nb-`eZfjB4s;HGKKj!R2&0{3a zLA;Vpdt6+n2LZve8AcyZ55po;PLJnMV~W5M7|Pp76bj4%Nf*Hgii+mS`z!^V(Sf*oYwSA3F<)+}a`%xu z<2UjiV%hTqf#%>8D9~%4|4XEdi`z86bL>xwAP4t#93S*^2~3i9v4foIg-lA*)6>}% zkayW>hgP-wuzA43wI3F^G6F*omsha8VWp5g(+l@puD{HKpFyni-@Ex(50D!zR;#> z-DRLMGc{dVUA-6XV8A_0^3Xg+oj0sAoX{27+uK{)@pJQgor@18DX5;0K6V@5e%X7+ zE>|h^Bb~!wy3o=3*xts*_%^wYu&}Tmze#AQV%94?{b04^;z1v)u8~M87wI6vQKTx(x=JLGb_a}UXlNKyCbkvY z)Z%I%zvumDfb5Z{MdN~)*EuKWzruLbeSJ^l{dFmLde#fV^Ji|5J%8AimBaz{+n#=} zN3jcH5x?xpr7L{!U z$jL}beu|vqe&aqw@NS;>{Ks0$9E8k$sT00$G`o~<)Ef#5c^RlEdFDLj?g&FP(#)|p z7-ig?ewYnH7*AF;RyN+*WY4Y)R`OA&7=4f$HZwQhL_>HmlN$`i!t2PEa?HJpzN3o} z21ACG5h2X2Ueoa%zp8vblj^mTpw-ftZo>XW$W?u1rOvHy^oAaiOv!q8=_@KLmyiWx znyEFNopv<~)6>k>+5S#--+yR6TwgTEmFK~fS5(|mHB|ToPN4)QrR2c}EYk#Wmm#H} zS65WLq2y?vG=;hM7V59iE5#Z}j0e9mH8Je=G3*d zHGs-8GBS^NZ^ilS?CjXowYIj_)uolLqt%1jl@55kBPwgHs?CEk_%Dy^+uLm^RCqcn zDq@3m)$UN=aAU2R+*m2%W{Q85pjYL#a!2&BtU$CGMkXcjr^PCr z(_4?MB87NU;k9zCiEj*JTFWLk00Vlpv1xKp-wQ^WI=TR$$<}5QeIrPST>jT&^@^pETS7TIg z+)=#As=CtT+vA}2j+U0}oR`*X{XkqFytzHmklKTF`qo`--BfAL+)eJx;KJ+(EH@?b zmXzp6VOV$BBO~TSjf-m~bgH$uN%O;$)030foNP4NoTq=_gM6G_xS}Gowfa8oL~?C+ z-;gv(pDmE!pZwJ^K34S9H#Xv;>ADaNynQPCx|79>_YJBNG#uNK-+`QB&`zirpBYEl z98E<^iWHu{S0i~)fAMT^5@nA(h}p|=cnu!B)6gD#c6xk#H_0Z(2PC-*D7ByAgTac& zUrY6K@PX@j0lsw0Anw}<_lH@iqa-@cc~y$l63CuW-#-z@x}5yiS{ z301YVFywq{z*6WRdpj&9l(!w-L|UG;oaWB6xfA9V712`?T0dv%tQF zUx4%{qz>wN=4TVAZYM+(7Qkz>phYwCM7@iYz&ls1w`O6UWv#8&zJji~w&E6!j(pYU zs%m1y4uYR+Q+)q2i$Ut{?k={T*etK(J zR~|C*FPXT1sn@8@`k~R(V6Z1?CA6b80o8$i?>}le66Cnp6FYulKOE%?mmIaCnHs zSJ))ZX3ZKUDBx0~ZyJADJ}5qfR^Nyq%=<6s+eZu>1w1gX%E&|(TZi9E>liQiT3K1S zw)S+e%*xuD@uv7V?;=xtr1=*0HB!IUyv*$F-QBg|gx*=G#2RP(opCfIuLy3xcv?}A zs)flkw`)K!nw8honCJN)RqAA9WM~u_jmnfasZwlK3oku*MsPMLby(HI%ppiw0kOej>=QBr$AER9GOKkiKLgufpn7wWD@(n-2mQwhV90 z#DOuvyqLw)lc08kG85aejIFQl?uLWuwD8ShFY}RykW^KxVObKam-FDwz6~_QO0l}R zd3pmq<1QQIRo~dC!JC>U06T;)?I>nLJEwR25D!#10)3G@>e8$wnX8eiW@j=8a#1E- zZaT@Fk>?M&;Y}N2|5~wiH;o4N2i&)BK=lk9*7T5UWNS;vb9hLftY&G+lDH34>QUY0 zd#(>S1K)&Ls;H>6>94TVAYPfwnF_KdI<#b^Pa3?6_XlHg?h(a-!2F~Ew)4cqM1Y(5 zR-%~z;S2?PhTx@$J-MyY4&?w4u$aq|xF6rkE1|uJhA4b~Z&eMnGO;0z%K9NO&cA- zUnhOEbkVRmxP1`i&>cnN*Vfup>{CLyK0ie&J_rV^x7pf%o`uu1BjD~RhVyb|jJxl*Gse3p?^l0)2Fkz$wr?8$ z;ll^18aj#9HwqjJ8ydB^rluwfGqZ8%l&dr{)1_&ajg8H1m{nNn+E~sQBLpk_O`dv!IE%d8Vk9O)#~lq1JT(L<}7 zdwa0im$}lBJ*6ZNbJ=KD@I-7A&~b8d8NyRNj+-A+=LqD(a5*aW3;wnUBh zuP!-m0%zr~QhHV-4=?G~Ko6JyeepqlSVsQp(LM3sxR$-y`*IB>ig)E?5Wn^-o)^;N zGEWWLs2<&`*{^7pV|qPu+tg6TKeqKV0cPVuJwoaVZ>-_8F_}>&WzV`-&u^FhEdSSn#~wxhsK+nzj@r=P*RF(WVaJ6}_bP>8WKH$aYvMkW z%PqQdbLnlGy?U9*ZeK3;1l%kj-M!BPNk?TIXMxUg`$zPJf#-gIL735SN4$;=V0ew! z#*!m}s%Z2Di8S|R*W9?_-muFOUQZ$f@u|_T_V4+weDR#W=T&EC+Err!uhPfD3r`u< zU|IU9MJF^i6N(QM8uMOU4Je=3>69v4&!{yv1p9kcZEt+o!Jn4N1ORbs?I`*Cta0#~ ziY3K+7ovYuS*cNUlRrj?{=i6Z#+2O=mgNzun{~C>S|cu8aFLKy$gBvTH=LMs{_8;o ztVI%=eTvf_VCQ>iKGY#u_73ns;r{oDu(pujw;6_nbqaDX5_ZkS_3w6vFJ5A4?nRXy zM$!S|;tDrzC=sa~B=kIc?1yVr+=Rf*LjmIXq=af*9Wuwse^HvNh|a-RE%s_t*+VWL zNK~8G!+XYeR$#lt3n@hd_HdGV9v~uoll)x7pUKwnu#bV3fZzE6yWfc%u)(Bo4*lG8 z#uZpnzFEarIq!{BH(^Wop$x7GjqPw?mgzI%S}FTR0Alu4`Y%8DcjD3NHOuLuTaua(<3QK~WFGdfdE=!%Yu zY6+#$vL=RrQvTqoLHQ$=yj&bWxN0Ed6$`^IXzQ8e$z={M5wb$MF36sb5|l|vhP%IE zepVQ8AyI7NV0-{I%od!UbUy^aEvr|x2fL2SBU-wZ(nQiV)G~+I zh1C9_&ciQ_tcu(K61E`~L;Q3G==z!TH@EZYY4%5RpY5E>8A190epRvQT#=`@8<$s0 zPfzX6<8R^Ht3O=kgkkZdu8f{f$_qae7V3yl9(AcZbba$5!L+Bukd~4GDLe8>wh3>cgf~3@tQ;_yzSSHOBbRYf=ylaKO5?QEJ)#plHoXCq2Na6 z9qV%4x}6j}z`x(2V_rfF8-#uChHwG3S7cgg&d!0rY9*+&c=y*-B{l6as$Q*sQ4^`! z(+;ooyHO)%87Op5-`QR35ujY~vBW>T?Tl48gBMu{@u^8@PtF-FwNJ~OXv5Tx ztA;6`z=hPU2hL#&M{GDkkBNBkZ^Nwe;_(X+tY!1nQZ}APe1QG2`EBmdHC7~-$nbZT zW(}6PBwGt*E2y^7x_7|4DW8iT0WcHe+BUU~^>K1M0md1EI+(YMyx~?As##mW5-UTT zLG3gkouwXMO-Rh<@EbV?GF_Ot?kj6@7TSv1g!x!n!s~u@bh4p{4eK*5d$3XnahI(S z0z?rH_gA}xTG2?Yn zo*u&fVmAIw%MIsB!rZ~^$Ee_VDpb#xjkbLJo8F_NQ;v26>x|L-#}F6Z606H38#%>a zWlZ?9D{}yVVOAw|jI=3KpsQ_qeZG3Ibz@1f0QqPU36UWY;b8@K&N=@T2oBvAD#2mY zrz%UHVqO=I!Zq5sH!hqV;FX`gr2@=+>(SB$yBx*GL;+@N!l-}Gzq+)$t_Jj|cy!kF zik}GvZ{IpOE-CXbf2_0nbCkB%Q#UrhP20$R6hCq{8I^mNif5&&uLQ-Pgq&WcvZv*) z4#0oh`*AYOB9dA}DUzpn@FVs!M{CXQ@5Qjm$)!%YD`8B4{gj}Wy^@^fLHt_R(wIuz z4z*2{uTAMi1^exFR%FHgbA|PrM<@(kGUJ-l;)*mUP_rj?Mtc3_LeaqG0w*I}WDL+x z5(@_i1*DgF`U6wgl?!~h!mdIAe#Wnh6cLs#0%w)l2Q9$O75L|G`l(QYeFs9ahuz7Y zlM%#3S|51h-^4@+;P%{%W28bmnVhjM7Iu+mltYmW1=xzVexSUkxA!$C9_#XUXz*}K zW^Twr_Cj^jMr{{hn!$pO3yeXvXA}aYtWi$is`-l7qr?B`*WC63XWqle!wP8~whf)F z!Oh^X^8^3NqrDDgQl=(z$Yq~p=e_{A#-pXMnIDQvv4*%f+IG$F)XlNMZXlQp+AKph% zBxYTjQU5UQ-)lReq2c`e^>-(h0p|sZ_`q3OUgE*>U81{$j|viE0KZ8RTFxRa&gOQG zXoaPH?@^@3&M1<&iIcITg}t+doh{lk%vWzvbgW-=F*|z?M+-A^XS8D6K0Xu`=Qq{S z#PCD%A_>i+2W;1*8C)`qCAj%d|CAWq;EVX7M2ViY8t=Vq!O>RJ-$B-Gdp^ghpzxq`0xA~VG$v=|M2f% z>krBQQYT4Ue(lJwmi)&3-k+xrPWOJX@>jEtT>LvH|9(7yyMKsfyq~20JfU$({cjBF z@0Fl9DUq9#qt&SY_=pZ6)z!Bjeic6uo&L(E^Jv=sBx!j-!eZkB_gK&2q{RPjWYYZ6 zu>UebCV;20Le6WjeM<*ecq=_|tSJ}MO4#r^e;GlFC=k6DB@N$qZa~N`lv*~aU;bX{ zJBQFmdtf$`9(?z03UbX^{lT9$eWs~G6reES-Br5ow?4r-u+m}@W?Rq0EuuB; z+0=$!kNc$KT^Mhn4AK)uSrEgD zHMiwwuH|Fb7{8^ zD!v0iayF;kPNr9EdupWhG1p7LU5`@i^Aa!DZxWU^*AYOis0+ zWr1iZjfPSLwUCa3b)`0)u%p<1LhQlkD!W9m2ot<}w^CTG-3q7?_v7Ww02}=02|?0y zWBD{VT=lw1mZPzz{+?D__t$fA6chdR7%h(8HOUlHm{;c1)LVAQqp#nmGw*ofQ-(wr zbnt`EuNIj>j`9_cUF)ln-HJ1pxqCN6-$4NaJ2tiPmLWP`;T^&o^wg zn69Csd_Gt$%XQJCW<@3c;o~6IcP*X$PnWRn!|E$jdxJzqtNS%(l4_+Q*XhTsi>B(E zXtfvksnmG4SxO2F+|(c~H$Vp0F|X+pxQ<6Sg6{fI%)u>ReDcz?KtX@ESVIUXGva6F zF8~|n){O#rEqg=lgk-$J>iK`23hOo-5cT8TLQi;d({{%e41V<9twiBbQ&r!@b207` zzB0WzxVnrm*xCgb>GWMFys6D+pnGP)$|qafa)|n!WEhRR<$4nZaCUFDe3)#_-`+I81E!JBOnpYc}K zBM%2Wl6gp=uYvo!%sF^rPaD{BYQGw`TxqoFMA!PIQ|~%!R5Q22^`w37JFv}NwK}XG zH#gV_#_=^ef#U{-PcBmP^{AHz@eB$Z#9A=k6p@V7X` zlTZ2?$3Aw%^(b1OMyd#Rs;Ks$bdP_%j0Gc*Gv2u)@$2TbHLiO1N1yC za0j=a*DyN?Yw!KCwixR4vL*TQs`eitBNHrN!$w97D7$s7d~ruMo3aUxFO$Z2G5oYa zw4-`~eg^Y}B~(<`GEVH;-Jpyl8#AlhP+QX@Y>jUQlMX&xYn1$R8jeP+C*?06`(p9m zWP8@-G3`025>}bQ1yVbT;swSXuu@$+hxe%26cgp?+;UMWVubt2orHW^b1Qy(S{u(J6WU97 zUk0eCtLD!Qs6WmEVP+soc@7s#uUeCbH%q;to_@&(`4;c=l$gQf z^{$uAZ~Zvy%f-^e*)BC(oyu?6s|rgQElT*9?pxg4XpIJF?WPOAXM#h ztdYK$7q65L+rc`yw5JGdN$^EibveG!l=Z-)^tbwQydb&SUs9w)-wt?M(B=?n8o1*< z*7ZsuM5;t3#^WXNBGW0)5!#Geo{h$9Lm_%*C?h{3RD9M5v!?Jd&u*4~w&`gPk8p{= zOhZXu?sM&)ua%LjN0_4$VJ4(`he(L=IL=ljz4zlGcNRKtN8h_0eS`7ie(7alG6yd4 zq>Yf8A8T~7`0kSeKL-w(N1EO4I&+wmH;_`fEfilmd2FC|*WZyD$}F7=i}L`vnv4qb z)qz6tDT6@UE7!-}BZ^~t2c=lCl!N4s@{f|})uOjm(K%eL9gewaBrzZ!3hBF1niZe| zndx^e^y+F7-J#fiQnpm|HNE}rF0P7R{>{gioe?lo73p-F1%=qhu}*qZb)qJL^s#+> zr%%HcSs#gA$64}!3}}r^AC8ZrGWUogVvDdQY04=$nzTMJYr-COJAo=Yzg}XQr;GU-4N*A1>Xgnb)rb&)X9|9N8snGbz_zc`QGP zj3@UsbY16tY5CmwRZYB0n0d`*(zVn&C=%?UsW_EBKEC&fje0{u=-k4wX4OPUjp;)} zLk#Z|IqYY1CPF+Toz>-}*&1|S1Y&VddO9^DT(kmYukcA?@!nr>IDT7>%JIW}Kq~(o zEaonmXn$+ZduEFHeC~y8c29v^;)4pvi;Qf#CdY>;KM(s_rTN6Aixv~nEF;x7;CigX zxHr_7+q%VT=wFSW;K0~3Y)zStIx5Vz#ckK@krWDo8D(K%urqtV(VH7Aw|!_+%H;D5 zS6gxOB)C~u91`<})EcLTwiYgt6OZO8VHjeVx zkm``RXqEH0$W%=3apo;N_n~0u-VY}PZ)WrvPcd&!jsQ<&5r7EGc|cfJY2vP|#?D^! zv0h}@K#Vx28l4SUx@-vKgQWD%`F)9G?4dg6n}*Ug?+QvfUPN)$C^;3gq?~nJJ<2a8 zKyKqa(3f5SS$p`jmng42r@x&~9{H@<@{|~u6fn?(igH&{^V_!8p@yCU2WcMfa9ELm>Iw3D1Xb~G#eOq zk6a_AzS?3nF{-t$p21Q*&QYI9IayuVaW9SQX}?rc1Q`K=rN`&gb3q^P7rn#yZ-YB? zFo4=%MW%Wj3X^dJkV}VPt)OGQu%0<=u}e@S)NWE zl8lk-i_K0Zn_9sJ#l5rAn6s~J>a(w!%q6SRrrt?gA|w34(}1vN@~Bgly&79N+iHpA zc2GiN?$xM4;Hc!2`|iDh%zDx6g7s|8#=2S~lGy$85{pYbyz5+pADQ<^QCmz4%Mx>G zP4FNdqelo$JJZV;GMJgap8=3mbI2*@b9Hw%hN8lO3xti&{+bGte$~4pQKp3|_uW{7 zws9U>hN*k zyY=(PJ(hK*oL4v%j3J~ZAN{Pqp;pvA!-oASW+^)kj!&+2CIruGiPhtt z29UJTdyRl1fy((NkK)>iA$gAkw30<*JP1 z6RaUZpmbm<^;e8tNFbZ&H^>3s(K(8ZRh=MvYkIEFv3HBx`0NC9JJiqTCI}e*{^EFa z{!txWp(r-DMPJ;4AVMg$AwY zu)0hGx<_PGbQ(nD-T?Ib$0Noj#+hq*i#yWfZS7FZwz!DG`(*Jjk|S~v*2ub+bBk`z6Xj>2yTFmGV|6} zXrwl+ck?-5^1#_+*JwCjlY?U%zc}4naBO=8v%50o325R_tiozU{%TwOt#4u5JboOX zat7nZ*TUS92p^x-l^HEQ(u7{KBv;#nhPnQ`9T0!UK3&B6Qf1I0qdcGp&>8fAezs+z zH6_&7(wrVCIP30Ex|FT>CIsTAGTGkl2#7ssO#VK@q-@Dq9(4J+la`rT;K*_$Z}0L` z`D^Exk2h1RrrqDq7~cfT>t+(AcMEiW{4tF061A1?dwa9wP^*_b!~fuy4>Vxpfy`cD zDDSr>18ma-K89BrHOIL$7^WDUQcRo322`HntYqFAmdezHtD^^amN7bLbA<4h+pZ zLDzUYUJ`e79koEnQJ_)%24i7MQc58eOqzd3;Wbvp?j(=np zPogw1CI>##8;quG9-`&-^f1ABK6UoQ`Fnq*N`@I^7f)RT^)2oO@#kABS_ z5+!8FmqgBycRzTYw6VjCF~-=EhLht6SZSQXRxyC)ksQ$^>ywvgdZcilma&iK`Wh8& z<&2L9N9Hwg%B2>uO-R^Wi4v>j$zNHR542AfQm8`6MyC%vL!aGD!?k2-xEH!4m!(NQsHFfqX!8Ct4IA3!%5Ljmii}eEAgYFj z-$VJ_w28!ohg3OLqrW8+Rh8}A3gHP5cH!!{z*%Y`DJ6P-;(`mR$UWhr#>#%To2*>r z1JI~Z14m;e+~7)|_y|NkN)*CefQkgz`c5<&M>9zhx9Z)hPST4qF9g%8cUQE!7uOg= z7&INzH=Yva3`iFg43SFm=cN)Bv^mBY12&`!v(a)H?_|?8IQ5a!UT`vI|8TElTWpVT zsqq_^_~^KGiyjc_cq*??=h2PVT};}hnJ8Pn(rUb#Iv*Loj6OQe%2ZX!QzFo&%SPd| zF`;B~ccnk_vgf=Dczm)_8RNeyyy!G6)oeGy&xxx=z?Z}qUuPc{Xt&OWZ}6b9mi>CH z%&&&jyI)qRk8uAWx!8UU3W8=&9p%%Slviq)T*y{f`1T%infCC`d;iQnKgh=F+WxKB z;u2ari-L=CX`Ewn5=?X|4C56HYDzzg^&-~+bWm%L3g1~CiFqizaPF~hHj|@lumy}l zGqyNch6f_~#*Y?(v)1~{5o(024pAj8OQ{#=sUk^)=~%$)j!q75OH6%K<8hdjS&IDf z8y;X_VC3peEq!R$;9aAmli1R&joH%Jt@c&TyVR~c&-tt`C(TQu;ojLf`EI9ekpGD;| zp7doJD1dVs4)x+L^&iU~lrJ})=nyaBHuvb0doal3-s)OEI-?>MAIeLhR~#v(ti%fsu{Zp@ib<6IRWs z>XZ2_1xPy!ZHJ8(3rcTfaeSFiy@@z{l*NL%+DUDZ>E*tF=@87nXNfk8w><$i`}r^FKJ$M)>5d9Q|EHP! z9)c@i^>I7PoZ14MTG1SNWVg*w1V&lrUrlL58&AMDw>q7M>n~pLja{bXe}E?#NB##T z=p_BGfP#wEpK;K*%-X;F>yaxVx+=q@RilD8j9Hg7x;^7s3AL`0n;hMPe z7lx>jy)O5Tp=RdKyiD_!$X@VKU?KkMD&+*5Rvdc>#t-tX*29z-LjQ+@unC_tc|#? zWV6>Lx_!+3CC6v;Fdk`IUhKEmIc!(;#DOV8_?TdJhcA))v`ItCum3?t2zuho6}jte zZ8K>>j*BpIw+4zBoxj+X+t-~;3Wxn&N=2k3{nB-1Vujmw@oT7S6Ah0TV{#jdrGt?`gwF8bcm*i-2Ms)LPg?&Vw<9H zA2Ftosy3UGM=~-l#<0wk>MddRTCr#ORYn&j{mT#-`0g#=aLZBLvWwv}PPjebmT8tu8e{O#_!`c>-VO0A+&Oq6Px@AR z#ya*;k2kMO{(O61 zXAa@XL{P(N$TIe6)<#eMwO%Eef@eWqB?$hp+y(PoP^Unn-y8$H~_cl9SGN*0pT=n-!kyao0YF9{u#KmbpF415;#MBi3 zsdCr8ETuRXO@XS zBPq88_-vsIXOWgacAwJ?eVmXHfSzxDo%oTLa}OMKwM%e*PM%t)FKw%sPZdQDAMKI| zoyxbNh^fL-L-YMf)ij7}&Z=i02U3tC#J zNbWO+S{~+glxvS}<#b(<%+=n-tXa5*%t#UwpN0i=-Gh5n)+Z+-US-c?WoVGZl2tBZ zqPxqSN*V~nCnGKl1O_8*Gn2S+Erz$BL8+BTbP<+#@FHq}?})~>yqvN7LTHEj2WQt|>F?GqS%(We|9X%&d6?Tr}Of_X-jPfi2{?`Z9SuLoH=;r%m)g@<_VfH(VYR9hd|v5WzXE?S{(Z>T<@@#2*+~$W&9)yE!K2HF1jyjaDa% zcB*|1d*i&^;p1q-F6Tp1yV*gJ%*n0;d`;k{49rgM^SX?2QkQlJow2it;)4IoodF(X zG`-+aLhrA}45Os7oC%*mesVLzKIc=xjO<7Dd{)+8?-d_@>HNpBDdT*B5k&^eOAAz+ z(Pw5AHs9~{P4arF{Pn?l&)!ABahTbUw7mX zes#c5BJ3@JgG^I(ihsd}S3Zf)6=ZqdVm{~Uu7)1p_sw9U%G1R{a?+tzSD1Rr;(1W5V+Cl|}bKkdO zZT#FyJ>Ov$AAU^Asj{vQqx+P*rZ4x@^;o$J3+l^;rt!aD(Ii(^Np&R=GR`Dac#)G2 zGJtJ~0gYIStmkY=>g_WLBW+47S!X!?W>*;>A%9doB>SuXWfC(oGGe|yqalP-lN*~A z>TW(rf-s#w3WfIVOsILi2aCX|e7_)zDA{ zpKT+*EhGNez8`bFlBn)~K7DuppV#-lSM~D0;(-72j?n&}*5~}M%(Q3f*!Bb$q`H6y zAFr!QA*E1K*N3&&Xr*4-K-U@d^M#+;Oq2X!p#Rez$v5P?D7%Ap-C&z55{Z}wHF z_nRs1Z{8iR-G(9eizv+3>e30`?%++$9j}GZ}X+H+IkLOvx;AM{ zBjl?S0K0WG<z1bm2+Qk8DZ?bLtpeUxc%fgqCaXe9 zRrgbTjpV2trT%#pF<5vgHmC{`Nl@tIrDD|C=EsqR#>qA+R6X)6B~_gSsp~*3Q*Veg zMM{}MHlw?%9&$ZuF|KLSzAo}jf|a{p2IxHz`cuP&AB%#6N{}Bow=UYd?ivt#9Mq}p zia@KH4*F~XW5E`q95&M-BqMH(kwwLp^*3!AZq<>aVxTQObpmUMEl()c(w_+Soic5! zR&g3&vP|TKobKYcEGxQbIDrYxmgETRSRebMUwOYy$wrZ(oeMX9hhjL{=@XRMxxP@1 zUyH(H)g`s?C;!K^U)EA^c3|8AQeHAUad^F#B_1fAfUqX73QQWr3VeX9xP1P)v` zNy=)F#yEkQL9Tv)iNxs=M4^Ih^X3tz6|(Px0o3LuwBy_-_f8nK`QqAe65koC#b7+i zDU7+D913g8GS3N)N`mU`Ra4~Vj^;EOi^U|I2BD%A1-7(_@wL(8_K}il7x<^Ar3*dI zHQsBMj_zfJ)7Z~5-Mk>`jqvud!KWVv-C2-0k#zem1Y|F|O1|a;wz##(X2wSaudwc* zy?aIQ+C6+MkKMs?<`}!y+;M%A^+1s<{E9tfTklwMv@VqYS-~eFi;YDgZs-<*T3Uv$ zSv~#u;+=3((&_e`D5o9yNY(_6rF>RS^(^f5n5KNgRZc1{$R?YwsV6V%a5LG+hqXb`a4t1-ixt!`c^dFa19c`zTu_g<;Hgm?DfLR2@9zz<6q5SQo zpXjB3)egqscVwgNzb;Ajq5rbon)h_cHfE?`lYGlc72TQG1HlnvP*c(gkc0%Grzsnn zjEO1p{yptk5T+Ntmv>av^;N_UJzr7m?F82IbILoEC_t@DG*-v%$~OI`ct&N9ASb+L z#miFrRB`vx*4QvRVLBAnhVlbc zQgz-mbM12Q@SF~@ChH#XJrU5_oj$YZFU*3^&N1=QNiL1n6-*g7h@ny=_Ce1NXe~A< zeHt%?Nrasv>#n#&UwL5TR_spVs&#|Y(%Cq&_geu#(K^JzlbsO4b?b`$E5j$ z1y+}S79qnI!iV#G)jENIV#<(xk3)LI_ozpFy%wzq>-tnL@NkodB9U0g;l_9^jAZQQ z)6FbIGEgt9{7vrh^&K>OF#YN>+gB`NL5XHcu8FhsrtvZ9KjU;#fQ2!oe-3l$d1uT$!b?Fpx4N&vT2+59u5hFB-r7;n;>( zfKQxZJqlK2Q{UrvbJu4zwbSL?;iw8oMNICk0LCHBHk_9@{6WhhiV|#@Qq?4Gd&f-C zPLA&37WgSVtC&4H8x0u2e+-^~25GM0N2x8Dh}H=An4F(BNyis&uQ}ahbPI=W9hC|zwwdvoP`?fxFcQUuR*2lC>jA5yv)A6HT3?6o(ENdYHAWCqgnZ9|yGK4X{CJT3u)t*6fl9_ovsmS$ z9FS2WcEU|=;><-5TA=EH>%|Db!PY5sknioh;d4^TXQtfr#G%^lra|X)?m)94UeWn@ zjq*6$qS!=4MChK;C_uXVNvAKj+inKC8cU-|88p99&NYzdPqHgd*PXrTpZ;0wK}(15 z-h7USr~H!%RY1x;1wKu`3TfiCS^AbLlJ-W!a_zaINz{`FzKazlq%V#5FyV+)y_BTY zX`b7f(Iw8tAQ>aUJS(KOPDcxN@iodA>Z-&{L=pw>EJr_{_lxXW{-7FSdx3cG&o^0| zkMZtT$|bksm&f&Xd06f$Pn)FNB96%p6F&elR9?qympbtN*Oq2o_a6JjiAqfsc7Ktd z{<*cLUv9b~ZOf^ma{V(i0ZBxqofKQeRnJ_vJ;zrL zbRpKMW0|TB&N!&kP92o8f=3(i6uNaAxqUXi1z%A_xx4SA@f%%37}q0lZpY5NW6tYv z$VwD&2yrN-EH=hPT@mC?{{78*;)aTtZp-R9O)9Uoxbp?eI;kcOkyG@ z6ZbJc^nM@+W({)nx#FlXAmS`cyYx8;KULXVe7>bobr1;52`d7`Uh?seY7W53NK3n; z){4R;x-up_tH&;vbSolABLu57B|WrhUAWE0&P!e;UG~RMKOrpXonT*&gcO;7%hZwQ zG{5-_@bxOb5Kv{9@S3{0)*sLO_R@#AOfMN1p!8|DfKpZ4|L+ir(om7)aK_SYFJJ9HDl|(<~nz7BXb{Bj;b{+&^a+mDZM0jwhFxd=u7hf7j!u=_G(}R_z z{78$cJ4(g^+8kIcF5nO>I== zfNQW3JAFl^R^&Y!ez*5CzBi)5k}TV!;QX!J;M0>VaWpioz~5Qon5Vb}fEE6sa8|wS zX~^i}A}OI}H(aB*HQxpHOrK~|P5E?J!Aeb+6U(vb0EJH2Fz>ar@CHZ5&4yx6KuQM- zCMr}hb`5Xz=W{ZnI91~kMvmzdiexb9DV@W-J(~ zy?*9#^x7R{w*isMLcw}uVG z-Ablwo`xtET7m}sT&>QNBR-b(URsAOPi#el83zSXH!~Rjq|x62!+Vdxc8cq7b-)cN zNzNm}UhV~P0}PI9eo%x`aYa;m*hHOTlZtabN~WtOmWJajT~0nZFO^l1MGd;DOT@2x zHUOqcKXD=patUf>F#<_WZWSIhOqiQ57-9)|>Z^G0a_o0Yum-C#qeBOf(;nwEH_K%O?XZDQiH&x= zT^uDpQDei-Ek|?XR4Ywe-u7YMtBX#nTV?0C&-CX%a4+Cp^%phD9ZiyU%tIhcj>+TUcL)tbpI~r9kpl2tR zE98aIQ=qXbZ@>G4nL3r*yw^NtL1R|p>k`J~wng)89Sq(D@tzn`X1Ekl*0B51cB@5H zC>8NL)BG~~rhcoeeK-<%!O~62m!xJVY#MFv(H z*a51H&VA#+=T-ckpPHBio_nz3q*XZm5^P}yO3d8`vTWX?Kr!cB^7k!@P43+<75MyI z!@Ximl1f0ziE4w2=SrzxXH6^9<{BGTl_y4SD2XdIRTs2_X<%JbBLU*q>a#xRXc_pK zW50r|w~};xEv>%wD>_5t`T@KEcLuM*vYge*2N0j3-?1_S*{xBoI~3lf{BRE~W9WAv>W?nPG>Ds+g3=ecUn!2h zd8=|in#mv8Ib_E0h}!|xkOpitv@(L5+K4R`vulbiB|63{TJYQ@8%wdmN6HzTa^1fc$$oB~>O0$!kyejrQbKafP^0XN*mNf|AzhipLVt=DXWY>-JndJ_Y;T1 zXbnyuMnO_k#(h_}cKEl)G+gMsYF#9VIQ<&Z7)yLoijtywGBYM(#4m4^Ai38tt0IM} z)Mm@oeOO(LahcgK-AZ}@d``^SzxWnIh98|1Y}wrCw9YkWaCk${_Y>api+9^vv2zB z+HL)nNpF*Fs;Ygu>GYKrZiM@-4b+uuH|pzH^`qMof@H;wGXF1ueAvEBo#!O_7dNU= zeY`P^l-#^Jw_BrfhJb4h!_Do(w{|R>vL$o&;;ho$Dr*4C8k3Uywd;pk1U=mfJtuOQ z+Z~|6)oe?bbjmq!C*V+d+Zx(e<>0Wb*WYi5Xg&IFMNqe!p`b6*b2BfWQr}GTs5Tou zR>dQmhhwMBv@%q@cO65B3fGn}QpJXQPBp=%oOCnpeOkL%Q!E}PbhF&SRt1Ab+9YpL z=`XC{-&h|Na64hk)8#x2tAb|-5odII&q@!x=)C}5es*)A8KS3P@1dz`pr1z+n8ozj zwi^G%O+;|8U-S`j!p-XNhli(an^Nt%b7V+;3iQq8C#LStcP%qDyX@LCVeh*;%2M#l5*<`$LChHAhJ`p{1_U$ z2cBwUR(XH&Dm=g0LnJD7D|;fnluEkpDO7_&Ln7~fH`+f9qa-R=k|=yF8#1FXglHYW z&^pJANEfEP{6wp*du3h-jEA#59HpxR9Z5ruftd#A;(eUFWDi7|t|l!)(On?HoY z_QDibV@JOYD}W12#J*^lB@?n~$DiD{LI7SIxAdIGub6A-Pt+PT53d^73~{3hn6RCG zL2wzXj$}CmB7tLNj;|2PwVC%ZO1c{F@kO-A9{K8IFf+SqaK#lTU@y>fbgraw6hu2k zO3Bjm2j)u#eYP--EX<~K8QO`O0llSApD*_IW8QP8fTB^wE9*0_CAtUkmAS!pt1-AX)bNWmIUOBIRm^eY@%Xx50=Q}FVf zCW70zlzD_q5vzgQv`VHLMT`ZGd_#f(3+6CdMdHIF_gJf zI6@VUQTe>ee0@EC2W^oY;(P5$7?09a@95MU)5x2mMTS#t_ez!Ykuq>u_A%gP8#J_@ z=vOfbE%f(oJT$cb_A=x^kBXHaQ^Y3IX)A=ZT7RWJe5j*!_FsPZtJ)V{@)gKNufql0 zj}S-jA}$Z7$)Ns$!i0=${E554qx7;SlYc2q-AuxG>Ci~Ek2yi;3MdpP_6aeaYzQ*y zqpTNddcWE%)gLp6di0c;7FCpisUQ#ct`S4^N(Q+~!rE}$aX)~) z`c%y>$%4seuIYw9=}eU0q5frYSUCzCP!Lp`GHkIV>e93IVHRUMd7wiAJ*l?mY$JUn z5O=$se550mt3mMhv`{*gPJI7){_aY>`RClsAhHeGj}_TBU(t=H@@x9_}Dp%U{EKOLl5N zk~xo1))BmJ5V&6*V+D1r!}Aii%EulLxA~fv0m+3p1&nKYDzgYK=g9ccY>w@TkZ`|# z-$})b0)?AM#zbAn=nHptUxY4PM(|++^irZw4#=+-qvh7J%qDp3>0~y?Q!Xn@g|Wkv z_ab(749;}PxB*iRX@WsdXB3fBpgtb>WIaR4j_Q(BRTf{3Q{V9Y6HXFU&&|I+4 zq1*S>e7~suIIBZECK7ffW5R32i5^&uQ`FzuqZqbazn{iYIG{ayT{CV*jVwy0x!h+y z6vJ&L4|;Ekv|?@LR|g!l7g zi&9k{Zsn(_tB*wF6ajNqMBa>DPMN{3+mL()1M2gEdHB1Pe~)yoR;Ek|L!En9TU+a$ z_|TwQo2IE#yUdGN+wH!z?j$az=^g*(BwIL>+o0QOW_ez!3(WL{6g#C^rsKp8blDc` zd^tw$Lr#|~e{60(tti`}KhcM7OEPwg$;$v}4!QT9BoAYumezU6jn920<>^zZsk!e` zf3Q3>87hXr&KGsxl>pd)Yqj*Iq&7NCGv_wA?b=|0D{j%qF8g#dE#FbVPZsEgyJBrU z_pp_sG%GMCdfMxUGK-&p7>s^at+i0e=WzUEqJhWx{vMkUuZ)395#`($Sd)n{r)4gs z#I|HC5vRMPuKJL?eiUzUtg0lz!RWum$H%s;c%KXLFH{MZx311JA#eY4vAokw`*C7h zUrH^h7&Ub;%Ry|oop?y$=7w%UlOydyOq)jHS~5@-q^yE7rD+(7*Z-=oV)&c5zM-zE zQ{8iR-R;v(Xq$`81ayVd$$j3g+O}FReeiPM!%t{p<7jHzlfraz7TD?~*66`2f{G&V4>qe0FM@KODx$u6`Qla*2O0e=f;D zYWhl+8#7ZYLiA@KCU>u^XA7pk{A;r}V=K!4I*XGk1W2Jy=%41m^WTkw?~ecP4PJ=q z;;)Z#AiDt3A;`%OSw`1NN^_FY_0oPnFqMehBb`r4B|M+DHV_KUi=R#{_+9rR zKx%Y!a0mQ68(WH&>sbeuqd=xv-a1}5{p;6}&QiseOsF-u70k&##9{|78~reYJ304P z@_s2Bh1%FYD>pd>zHAMro4R#nJ$s9+ZO|N?FSj9n0{p;D0sbM*brCB=@N3<+B=BF{ zNL|jW`&SF_y1E(v%?xaApL!&ABX8hC$7c}}{qL`JdYfcR5?GCc&xI+_pSP9494e1K z1yWK|C*3|ezT5Dy@4_uBJ20|+w`HTVeq(b^wijvK4v#IJ zSLeuhBU3ei2FAZh`t{2fg5Qi=<=XhvvM3qqP#?@Ei-~RY$)pTo^~kb5M&ITa!);wj zey_K>nef@By#>keOnh0r)txp_Ww4pq^-PIaX_`m9_EUVx0drk$zP<#17`aB9gZ^9R z0{wRw{T^wha{<%&*_B7G+iwFg1IO9ibU4h)ulo3q)3u{tgp!Z;X50KG22v$C$Tr_` z44W}k>uyA(zSS1rxn=}&2(b|<96-5_DmRxsq26b!)-5&0B3@K@NUm{?Kju1a1B?a>)*kiRd7{lsr%84Waal$c|}o)d?scXer3gj2-naHt$O%z{Y|_3J@USuiJ;2i(FCsDhw9#p!o741 zR^Q_`8SZ;m^lrbSGS-?8(jAa=s>t-9=*@UTX8MsrHbh3U^-#BuihWb7`?Y+L?65{l z;&S)nLpAs}_V8L5RhE-kgDXY6PJfxX*V|z2st4bUD0e=#r5HQPw$#imC%Ce_GS}hI zd>pq?22>Y334Pg!e|vA{z3W0aC3v8d})7*wh?Y4fm(N zT%6fZva&v5=?lo5ZL7(?l4{B7do{o9bMWP`TKFe#4F$R=eC;u&!Je#OGQX>7ON;pU zrDpsT?5oNPoGK4J8)}H!{b2NV)bB+! z`7gfwONgIXUJ|8BbzMrn3K$g|Y3qIw*ty*oDX-200Lo`(IA(hdiy7yn%K>|yM@SAqr>NGYum(H`0!ZyyWZBDRx zFU;T6RS=HH_9KfNCF)$7LhC+=l=i@1GK?h<`sGU(nbDJHe5=B%p1VSCo|8j1$tGeq zbZT3sqSt?nPWwD(-OrFXtt}mdwnkK@aP0jMGRCqcWAy4m>4d0&*6=Qua@v^`aLHgr zPfxL8=nJyqPX_BNeWgwc>&}pe;X44w&y}_)B2^$CiM=#$Kg&5pQ3k>B%=>MObB)8e zgO*viA|m{O{149@CmX$*R*a$xosHKf;Rh8s8hE5KF(E8>+7pOI+T4^C2EhZ5p08jiXI8yo^TO>6ka{M-1g|)dba~PH zSOr4|K}B^%7@u5rq78z-QUeFwaSOrcy;3q)UEP0>!+`X1U{n6_bbQg ztB1CBOp9t`9LeG0KJ^XjzH)n;sZ8$fq3ui9W`{|B?B3x$mP%v|ffsIY4?TM7`zF|X z(z1SbW1uZwf|uy-qmD^)%_7i-%pUg>mZxX^0Ew&n%M$o;@fu~k|Ao1?jB2ZE!iJ#~ zC|;mI@fIlV?zCv}7I%slDeeSmaWC%BLUAj_-5nB&dvNyvArO+6-uKhzdH;NCeLvs% zb z9d&e(EPveY63}GTt_9~gLPOcsW?4_U*WTc{L`$0E4_Upc)*3IfG1(}5CQLbAXZyRE zXepX5b7^oq0W&S7wte%b)v-~LejFRf*ffo`X^D#kY{7g6H#pHP{obo1T|GA-+Vn?c zWGLIbvW=(({+jpY6K13Mo<|oz^<8v}Ggqih(1U`Qdib5L3!hOW3BBEZ7z1P|)hf;c z-n(kmmy2}JGs81xOJgFg!ZnRnxm?Inz1*h;O0I;D=NZZ*ce<3XcLlFrFeHC~pDp>N z3&+#2V+XxQGBoiAsu@>?P-3EeN29!i`tn&7W5DAZPRrLH zxo>CRE6oFxy9x&RU~?=xLPQZg;1z15QP$Y5E7y(;$S@2h=Kg$i^r6jX zBTMrmkjXmMTi$Gt28|Ck2F~!CUpD`Gu3CzS~LjZ?geh zx39czAKPTMy#n|={2f`1y-o*ss}A2~bT^RreRtdaAYIV*y!Ko^L>)e#zL!Ss{7b-e ztMVnA^DfDQ$GYY|K|NxQ9=XBm8wKZ0d^i(tL-S>S@P>QqJYCCT6RaiK4Tb0egm9_#$v8)o{^Jb}R13_t`&Egb$Ou z-s7aOOP(s#D>+|Vo-DxGuendZ+H^?SH-~LMVlZKyriz!dYLv8BcTH8=n$jnNvI>U9 zl1i^$D{g7z29HX>7iJ}Wc!6$Ik*SfM$e#UYWVn(IWWFrfaFEM7&}kNEtjx6cB;7CG zj7E*(!4`AY%LyrBZ_y;fMC7ezoHbkZIiRKIS!*#EVNN>gXV5VP_Pxn!Sag7y_g+i|n z-9S`IhJXO#Z12Xk0{7!*Jkm>GbN_hKojzV084FXZ#O?#^`NWG0^Ot$Ii_6LOt^X7I zC5VB(VeQB%#Mo3yIqqTD6x0}`SwV?*tW~i^N?tlJw{rstRcq}3rU+c#gE*Ww>@8Xt1+mlFY~?w*yFIu_dUFzVz-OENhiHLMYFu!LLs3T8@6|A z#I~#v6QXZ|*_!rqCH;$Gc|I58me53W$kRaSy*D~BHEvnHJ0K$VFJ-x^XD{Nit$AoW zuh#3oo18S0eyU$tt+`|y8Lmr&!XHCxX&M}}d`^Z+CIWU$T41sq_m2SQZ=aYY%TYtJ zi^uwXq~&AlvEN}p57VeE|8SN*J$s=Se3#*8Pimu~MM&r(j8{)eNSGj|G5htfc9xbm zxLGASR~|SW?&zMLKw|g2FNB=iEAwhO!to)3z@*2>@Ot69$e&+3dH1|&WA9}*iu-nR z=}!jcF*_6KMtr_>gLjQxRUn>}SC2#Wfwuc!x^2qt`2`mTD}xEb*vz)5jCFJU&d9#> zxGplE{?X~BDo5%w9;27V3m81#dljR9J;bKmYedF^Q z^i|mONF~XpnGa{cd;LTT1^P7+H$INuGDz&DKJpTqfu}PD{^-nDxJw+%k@NK+x7mo=50vy&M48;B&-ZU|U*r z$gy`BZD;d}1LlbL1iH*66_(~g!cTqicajLa3DdpL2Cj)7CZ`qA;IQzk^U8y_PhBhgQ_RPb9de#|RD;8788*O|}$!GEE(o}6#UL=7$- zj7FEa=~*19ql6w`3F=G+DL6}c!C5|()GkjyyCiyOKllg0$zqSTW6K%>v9Ovv9zfAX zH6KUwV`%S+)QGr{`FkdzKZvh+`0vA~u0)E;Y%KOKmfq%X#Qt%RSxxU=Xo z>VGWq?lyH<)DL(ImOM&RBZS{HyNx2B=@qD-xD1Y9ZcD5tR<4-ankz)cF?YRtZn6bR2VkKss0Z9 z`u_aduw~#~wdhPaSVmxOjDW^3yjsw~qBK9|?;N-iv!1`R2V)vIi`cQFu9J-YXo|`o!_pvR*Z;Q1jJgrVxuC`e2Y%u z-9GTm&O+a>8yKJ+e%`%ExNKVd$mlLOLSG$n5%%mGJr`F%tmOFNyUH)bMnW#;bK+s@ ztFN)SYQ-nhtUK>tdpG;}{4`@tn7ZXNQzi}@_m8$Yae7^k?R?zBa?So6xP`|O^k4$_ zUx)7v)=W^VUePdK)U}Vyy?SAZcVABX0Vq?TkM0dL>diN)7onMq{(f5cIv%PgHJYXT zvi+u_J8kSNEW-AFVImNXuWbe8;|`_bk5dP?c>c^+d$iRsDL38?3a!l`ca8YbdN^?fLm8`m?K{x!Z%8AX-EJDaR8_>Rc@JjPVK84bUsXU}0_Pg*TxtW2anXIoj&2y%^tr`Gsxc1i||lB z_Vptw5F|(CcBJSpd5-{OYMS{<1_*&cxr#&I8BVIEQg+eAA+~*t?)w3`T-ID4?jre@ z7bW{QKF}f>J_+*4#Jly^6B0;@CA0)7Bb&!yjY0ydV(B6W+LHG$Q9NJOt@{K{Sk9}z zBiD?U;$3n@FeSBqN0O9YcVZuw-6Y$*h*zR}!tj#b=G|>@p5{C^O!4~CH{(TT$MT%# z3%<^S*EdJs7bGrGfC`_#G^UKh7u$%|>Sk=zmb=DKO; z=IyGFn0@X@!i{HH{}p{6ulNTEmaaYPoOzynl0aH4PLs-#WS1}1gZEj`jn7w0!_MFy zW$03s|Jb6b;@(W~;;M&P8rL`_!`Wth;AEAFJiLskJ&q*@(#JQ+X(G z+o+d}1H5w(*-oiPkoAUwsZ0canUkc!6465*M_UJh!p7!lGpY>jtv2P}Xuk@I#1sSN z+gk}4ph9mw^JlN<0ixnTS3AMQQ*nfKw|8&##5Dx-j3(>YHA<0@at9=ZDVUYkic zF!OD6#9_1j+_5e^oC6-vfSHqdx4~N{a0NmFW3Ig3bA3Z?7Y~0|*+6{$zB~dIyOa4E z-4$ObqYeN?Z&Hz-)ym$ja-m*ZY#t--hE`K zfnxM=!+`v4L)uF}3#N5{Cwptpk6l;u>hr(WX~I-4@)2LJwJKawHP_Lp`(uBhZ#M6H z>)vFfaDgmZw~LgEM@rQG>yB$#yQ$(iV**;xypVN?X{q{9dleD5AU)D6nZg9b^CN_0 zY_91QfcoO4lX~vh)^L&!BzRkV`EeCh{4c4_AECY}#;9+VJ09cFGXAtrdZYo6n?7gL z>X-|UjIS@EcvpF4(ROn|%-{aC=YpPT$k}c{Dh+716@(g-U7M_c2itA3yK^!so5;qm zJl)Z{Wc?r_)i2FaeOKzY&LDQoahH?(2IJjvN1BiC$SB?(-NlYar89qZI5W z?!;x#r_za85&&aR2)ZHHym_(lc;BOi+x$WnLu&~X7JTh1W^F(+UTW{<<`tIUKZ>gH zM8q?SRlCf2zfWy;zFK@q-K5Bu&2&I=IZP>3cr`I9?{u(Ep!2IiC(|a_q%S`sK>Xc3 zFH`(-P|x2)|5oZnqt$5YJ;~Fj?`E%_HXqB$%cpvf{FT-*VmwPI?Z-a}%>S%|pZ-Z* z{pY5a<=+7Ep9#k=?)sDH{Fj8Y|3UQsYQl!||8svb5(zq(DNpl|_$#XHmS8^3pCrWp zyDT?vFao$3LR#ch-1gUuWG#qxk@1%Ht~*V?O^w-^zuYwAtxR-T zTtsp`hxUpzwPHvN#9Ayj4Sw{ZXM6GJHMXHC?Kqq^v9xsUufn`7WzN#BWSjZ^32GvK zG!+fB(m*9dr~Rv@N}3CgX}GA&yT8a7F`Ee%kU73!Khi8}_;oX3K^NWA^W+XJCT@3i zPS?|e7!-@&0Txaa)^M}O{0uFKHZ^;IA~%2QTp9)=jAwf<4r9)P#5`JdL!ymn1m2OY zUqp^jFU4-(y2BX$%8vQgP z?U-Dhtx>&i9sArUUjW{&N5nQE4oy1rZmD%8@-`xAOmOoMjFF%Y zVBFZUeVxO|aA@z@!pBGQwcO?N@&!InbS}H>Xmeno}QChj`S zbB6suKVue+W^E#jAVXbBK-M@(YVXS_nKNzq0)s%V=Woh7>nbd%r88*wF z5doAz5C3JjArbx3bfJmUS;@@P_!w`x&M(!hgAgrch@$3U1Pd(|m?Wueng6Zshu#K13zB;iM4H zmLl`*gb{Ail&DNr5zH+8Ei(TIQR1GacoC`TGU!tI#7o!ywahMrN?ipgrRYjGSe;83 ziSdd}RC7d>{u~W&`U>zxfo(SQ#(B2T(tkC}cO^`E{K7IDh7M`rtt>S`6Lxtts+M_2 zoP_Gd>ic@ub!m9G#s|m!^lkjewn)1hDs9ftt+NP3r|!eZX0AAOQ!*20Khf0!n+iCc zq(y0GGBTT6rzeHK3#-^QJzS%cH!4^4V8ftPJcTU<#8MuOdD0cRSq^#JExs})@w`2_ z=Sl6dGcd9>zHJbb(vGLfONjBY*Jfy~0*vt^1uZRyWx=Y;GxxuBa+f+H44U|#H}x(k zJI%OlpB^7xIDhwwr&u00eZ@xe;$=({R(t8`_0!{Wk%XUIZZv}-64`18vAVq{ zKW2h%(DX+~;C(Q+_&2fgm*Gci7Jkr?E)gKo=(SJe-3@0AFu=CHRTbrX#I9Oh29nmewmNJ=>gGG_=)h7R%^`Rj^@t6FS)6~y)R;irwy z)U0c0r)S>#uQR4ldhR{ua&Lg0W<)VjZ@=!xi|}B{ohC{Hgc!T*?#*^^dgO4rZ53Cb zYtaci@9+}Tm8$y_&6A{lz4zJU!t(ZLjsK1VFTEc3GWrA)j`wtBqBkS6_d=1lU^^wE zz2B8Nz~~H_OPa!pf%XO-^0h(CKGCICuBS~;8L7S09o5P2C&qc6cR{E?iMOe!?#12z z(?ew1#F@bP^JRJ3_tiK6`orFVf4>nB+;;oAAls7gJ3MhsuJJCc_NG%6Ycz9{=aR%a z6seXthvtn>Igo+mu+TMv?Ozh+-*+P*^uv0W%-}@22`Zp zF;6HILkf7=@~M9plW%GV`)O=O>Zd_qE$QB2jkby~Hs6ojN}wfl2_Vr5ghYN!n5q> z=5iL_!9F%gmjhpX^}T*#ik{Kf8gjD!IU(ocRh<+c7x{wA)-&j=L$bE!7e;o=NflGk z#)HwfAjuyl@Em7i=Pi#%%V-(AH-`~$H_;CJwsBXpK=LF>rB*8kOicJ_U4>a zCV1G{E7o%UE((rlSwc>pM)3*>h6>oNol@N>spkiH*rI=zmyc<%zV< zbK&TyD{g`rJvO}7KsA*r2_GvML(39qJI>R6{~6*gC4qmpY})ojO|B~Oec7u_J<%Oo z=@@dYYYNaoS4W{irc8$U6T_BFfxCc>u~7RTRw%;jM&BQ4FP{`Pf^ozAQaoPC$zCME zjw%nvx40f%I-rCKw=MU{wdse6p6g?g287AwpB z=d{u>4UHlqy5FSbbPwtelui-xXKyj%DGfykS$H1CW(z;<&Bp4LLq5G6&YO(+pN_PO zo(+hAHRj#P&p0mG>@L(!y5;(918>XR=xMU9UeX(^2GPZ`Ex7eiEviUfNKo!6BPriG zC_YHf=kiAQe2({9YV&`4aody$Im8&kvehS5ZQeEkVh@Y>sG{|H zYa%?@OP3%0OKOb}vgeyh(t#=st<5VDY2>>I zG#mT-95eiqolmyAAb0`>u+nz{U-Sh2^<25ZrKUd`Ah^I282P;SnmFryg74J{Bj?Fe zL*0x$(`1MVX&k532)wedSo_<1aAccg2jy(%Ro0EaA#;LP%KLj+**-JR0O8zMOPrG% z{UGOwg6gsK9vjFcyfRzOBVXFsDc9HRnfl^EW$M%MxtB}LdfNkY=bj&osQbny{IyQn z<3xI+lX}%8sX9YGkr|$C*d&eqWO99FAT9y2d;DH->eKZh9#)g;~H{cQ>$)$dvH0EWUoAL1t@lJ zz$=1xt$JX5$dIO58|CvV%blss-!x z5l<)qk?k@>KWqzw%U8e%VvUfz^^|3S;(I`O8SI_{2@MMrDrh1dtn_ z;f)n2+&lkNW?7eHGA^`s5|}M56iy4<*W!JbQj`+Gb}iu7Q;A@N`@O zG5l{Di6&l-Bv}nq8+0kQ3-w$R)OmOI((>Y%g5a@)!Ez&Y%$w+#%P-dt*>D!WqM7Ig zqO{MN?cwBsGK|itV#>;4@%|CMYK=VvLv)WaAG+y6TxBrUNko$(EY>Ud@z>F10{l)l zMI>;SB50v!ZUlr)7wdV<|(I~lBSpF;DNr~3M&07aT4RhjfGtn zc?o;_CP$sg539%{zW`CU&-S+DuSG^$XTQO~$oStDzKM;tMDtfLx{e#cFz+dCjq%X; z9rf$t6j9$Uv$&iK2?5CUokNT| zQd8TXys0;+{8T-kxfvE5V8&+FXNEG=;0M_`={{=mQ6HpF4Q{~RD4qji-#MuwW( zSCKK;qy4_mRE@rOIHN4Kg~#%U0mHh#M#WDbc0x4U-{&U6K@Txm4DBv}JFtt^B<-t@ zGi;dew2wTKnV%#HIg(VGw1V6h8Nn#{KRVqtTMa)W9+)I~>2snD)p81JJmtfM)~vL0 zA^kQijF93X*$QAeI_ul7kUh2m*0p{B8S_E=k~~h0=iPe^m!fT{FpZ0!7PD@AUp9BS zY&xA!Dnu$nAEkzD?9@jMNK&E$UIKd9Wz>E1>MPHfb5|p> zh#-)BD94W688x_kz0vFZ$}=?>o;?a2fOI}SO~;>cWj3b##L)MAwA-2ZdBxJ?EbD>i zQb)w`yB}?GkN*Ii$9uqulhH^cTIHMKEbo^Sh}+pByuC#UgRXQNIA5-vilI#+Ds{|b1-5RPX=o~e z&POV|z!}O(VLz;1`Dt6NIH_aDYNbtc6-g(9`V<-6@77Ft*;31kc=>Mk&a;C9XUCEs zb=ThR6ojbZS^h>uFKgH1$7ao9tl4dx!p&mVqBAffe9ajl;Y)XX<=*>w&-cb#3dBS@ z19`Z{U3V%K{iDt_0+Y3qRzLK=B;Hp8YE@di*i95xJ&JtN@njKny}FssSEIX+8>(zN z{$p4fwhv;Rwq4AQ(j|8Jbu=MxWFyr8Zn#hFRofu zGcVkb?ka)VJx!l@rtlFx$~a7$6C%5ETNsK=fSu<%M~a2=!2|r2c>82(EkKsJ0UyEVFN)3)d`k1<%UHc=oF z&7zNNO#Ep-G2iaeTPHfewJd4Kpc_Z;#VVSS#Ncp;|w^t0`aI+4yaxpz${5A^7`R<(rj^=G6Rn$02vAp+f@)@H8w#{`PddQ$DeSwjc zoxn#WwWK_T^$Eru^@Z_Sv#AV;zJLfm34kavm%6(!s{Z3d6U+8cn~C{&bTa&Q#FcR& z`k*MQx;{dgq;%#RkLq|N>^@$Pj#PbfzPkG7vW~f?aII-3Xm+YJx!fokBjeO(zeq~h zYI$J87W0@hPNT`I&y(MAHQSBs<<-$?ws@ZWw!wI5QjT%K7chx<=HxP5dVqEi`1Qyr zCoFblsQIX(S~T297k^VpESU1;fGlU999p}pAP40jge^YleU*5Xz=3&58cZ$0hj!R4 zo>@uknSc`^>YpYX)UGpkuFP=%f#2!l6}(sd*V2RXI$;lPS72YHE5P~Ji=wlAm29$Z zpWQ|8cq*sOxr@j71zbC--u?v9oyvv1%F#Xr>Z@~#nm6u`(x`j3jIweqz~&k!{wh2b z83NJj*G^W5WQu8hVewsp0$M36pBvlBGC#ia;2v48#|6h5Pkm7d*YCvT@aN5pqGTuNlwIYq^;tZQ|1>-kMIODQq9Y|lL6b~xrZP_jreAmP>s>|Cfx8ZHQvQeoc>|^)5 zJxMz6{Hn5+f1kZ77@ly~d$Su|y^&^`mOZwKpGPzFONKGq9%^}Hm^9?4SYb9>p+4W~ zA*pFMZDz*O#xhuWOB?BdaXxEE?{F#2Pble62cZLQ8ZBidY<{{FSBw}qIQ&}w0rhHM z%tLgua`EM7Cvf^u+fWWbxSWIfOVpfx#j?8K<`Gb72VDzOB*63!9!U` zb00)glijA>K#Dt&lfC$Fy!otHj|MV7An_ z^Op=Fc{Bbv@AADq_e|Hm5DVOi=kHp1-Ac3)6#vV81kf;0?4n-&T?NmZQC)(_bDVx{ zMU_gQbjTe_@Z=}SaSH+`Z>&?gP*OAFQ~hhh*(=vL>QSkO&8l4U&u3h6OeHfwDN6q7 zqJC}K>Ux^i+>qtCZNQB;)TqFU_b`Cs0Gcy$X@t}J3UG%(yesz$(yL#0{8Tnj_Yi;s zjhjz2a{^jC7olfcrp+E~TSwfGMzb}v*6{%xp_6DCO%#&dP{ufoJMHyTA7!|{b&7!g%SJQL)b;` z9^(I)D|QIzl~@TdmLR9v0>Q`_&r@8`*aY#ITHSWz2SsvFwGG8TZtB_*wBVgM85^8w z&;eyUPF=<_EDz(^bj2|-*8>sgjQ&=Zy-}*TpkgN5Qr;>CxE_Vtl^7rMocF;|5ac_D zL%tYn=FHuQH^&4vWWCft^*khS`7L7r@!;xJ);EjQY^B7G?XDM+AM3)rz_8>JHwAq% z{=~{Fv5VxKm*yx(IM$^w1|CNsLsmP1kpw33R$wj}qkpJNFSZ~a!B`_+)CpY;76+`; z$`j$d0_Dk*v!3Dc>Jm#*z!cScOsj)l-JNcban04yd*j$l>^-p?iv_=NKv@dFwJNL$ zMAc-97#iQnKj)Pw<{Be;=HBnt=iG9H`(f#~6?=hX@U8&{_4wT-1@eih!h?GOU!QZx zc+;t$6h|tb^s&({v@m6oRYp*XBsgtcn|rVcR?>OLCQM&o0E$67)N7`MEYKMyMr5y(iBYL(L3G#waXUxA8hu^6q2CU!*ED zp0~N(KPmu6GPuqt#k4y-CaBKc^}Qp5eE>8Xow8P4VtZ$v()i`w*W6+8^`y5&iUhVx za0PJZF2_^OnV^c_uUNEoN~PX66WPqPyWWxcFsV1M{oci6gx|2EE(I{S7bYMU$ds^F z36)a{s@O33rt?|lFW_28EfhBgM(6&i)4XNq@!e6QUp(_`+Z_&9%BhWqT1bYdQBHJQ3vOOPohb8+4tk|yn|3+jH%X*w1Y z=%d*vjWJw9$ezoaO*kbZVrPL=J%lEN@Qu@w=OMoqr_w+FD5>bc5}KrS-m&WG`?R;{ z%1?2OS(dui5;MW?91!S-C3@jq?E94v1bV0-*%PwxU5PHhT&n3!Fm&H4_rf{?a2u~) zcwT+?Fn)1N6e&oS?c8&ArVLwlGT^TD_qKCGJ9R)BJ! zM|gQKO~zGy7%R`KWqSz@?n=j1i(Mq!h)?X`7a|*|_QPImEGCpyMCPqP5;)Vt8dhG+;Y(v06OEhOqI>{`3C9GNz@1~N*bEgN|6Qo@Cr zbh|Tff&D4Na!hou)(oH~t>9BvwLr9s*6Jn=Al4CP;=x3j9|B4_hnZ>KL9)9X>4l_H z$CznuH0cr7w_LQ*K5dcB66HFp#d5;&yLFeS}?oF^A zUD0x5%OBa)ENoT9HcRDIrPUj;p^}MM@Vz@$+JqBpVl{nC5w1OP;hhm;nU*t;F2T6a>ONrxn;~Ea7k$LI^T5QROO(V2g)pfXjdQVDtvN&0YS&3r z>iz?mC0V8*Wh@A5(*C?jZcBkEc&P#s%QQw$%xHVz9wjp0 zJMjY%iWpy;Ja{DyaaLE(2kGewkDb&CVY|aC&j4&yvL}Y;d4bj_+NCRnPvzW8RkhdP zd4Y@b>0pVPEhPl!*TTnF6^1z@>10j|=+C$SFs2>GYSs13HdbevELDV1F%i7`PADos z#Clf3g)IpO`fbD!`Hx`?8tcZ91Z+^D%(x2a^>BUxn+%0nkd2>8|C4D1rj%(`n+a$T z5fIv2uwF^CjJL@-TKuWw>mA$(uU>imlob5J1#R#85f@~Ob~vW24~ZDBF_!ZXB8jTu zbt|kFN}VIwBj*ib9?aODg8rka_9Zw={)wfPLd4wU^F z@jiLKiow`rRW69z?^aG;4Ib9yZ(1`u9lb83DHPe$)GD2zV~_4yxom5CLLwq3i*2b? zEZcY?X55-OUEY+^S1zCLC5=q1!1H2zh{tzA{oZZ+Vyyl+jS$MoIlAqCJpIGNE83*A z$hk;8TeYvhwR8!=0?31l5iHNmmlf|!@<@g}V-nWO^od^H`4d#vn6K@BK7JAyDCMV9 zIWT>W1+2u~9<(f3aC;p|wpyaqP2Qw3iN%bNP4G!^^L)hVdTnWTEjhfP{94ONnwo0$Q#1@e%Hv1xN`^c6jYA3mubjnu~#K4iP_D!}x<{rANtPhw3vB!A{ybO?#O!>Nb^ZoSV5o7>wfu95dRFXt4lLDd>_|tOJxAYENH{gF2w(S>L`)xinUfz*rS z&X_>>tqj%GW?jv+?RBXC)KEhwbYvYch1$7tZquVXSwuwr=`&pEuCAFfg{~g8Y zqyFE}49wEq$HRANd`xY^UWa$wLNL&?=3vIg@6;HO;3(QC@4dpSI6V!a zQIC}4J&mFYQ6-8LTjTkOlk@<8i$VmY`#qp7rkim z+9^w>t=@Jf(z*upU1Mj;S)T1jb(1H0a;#ezDie~;5fiNIlTXI^kGBC#FXAuGg~FSZ zw8d#T$HtU7Y)x8;oMT6KYjHMTx|snaxWvI}69u$^z2D2<%|O=8fe!9BsI=9P(r=A`DOPiHR2za! zza0R)PbOE3G1kHqM2}S7u;}2)W2oSaJb`Kql1CsTxyAP5IgxP|{U#mLLF&3_K!zIo z;Xy&&9bkd6m%&^}orM_y;C64!NY@xrPIb$ecNgnIK6=gY+06|h$-Jw!?D)>+KBi z$wHVUt;%|yh2uq4vRu;cOx(#1CW)CG;9bh1n7QH#`y9!KDE;ofpqb~IIVC6ekCGfX zMG$1v|qivkcCuQTO@|-uRLJaXr5tB zh_4pr!%?NIM(;+-Zt4Mn?0BpVKi;`0e6s)vPCrh>52=|NxV}&;KF+Rv+>t}mg^VlS zSpJ9-;Hgv0VsiUjGW~`%4#T>=E~>y*O$$n6+0Ly74&?c!|FDlkfg73P zBdE(N)L&s{w`QOQ*QY*B*mUDCnGOezkH{>(mj+{xyWtac_y>2X>XsVJ?5vYUncX=1 zHi;#8nsa>CocnNh_%k-UT1Ej5Ske@sPdM{p{MDoL=#Mo0IMrNi0sRk6S=uzkQ=TV6 zSYTd>wLmKMhnzi%)Zty}I(nFAd7Nfh!i;C$N^3fF1VG1?I>_zqP!m|;U{WpW962x3 zA1R)4X595zR4sd~njom1pw0gcSO3;}Z3P%{H(pPj%AsI%`e5smqzPdBB9NLRFE( zU%de`JPK(1gMfv8^SfVccZVaFcY=~o+U_%!Q4v@26I%gXWRQtZz~1r1G#Zl%{6_mE z$YaNEe;`_`!l61DzVzMlVbxjS|I=uv>Q6r5^6LFk;sc27K`p4L^~k;v+^mL&qZ8ig z!x!Iml*|N)R%JA9mhTE@IOC_qCG9UXf2^JeGyB|@aR8#UkFRCf^XVuz2p>2h8K<05 zg}WT!4)3cqn9iyUMm|{>>j2rW{r-uuqou0|zbD`<644CoVy>7q;=!dq8`pw^^+wNC z--siPwGa3`K`Lo+`|+CDifV)VxjMKIf^WJmq~iONS=T46^AwEyF_0nY#GRlr3`YEQm!bKhZ%APQVen)inD%^x z*xvTtV2bO4?bOG$J5$jUztYFVrCydBOPkFXdFZl7repRpo!@kVMYjOdYKhLk(6}VO z#48WyW2wkUCX@9}FqPR!tf9`|UI3WAjJ^%*UhyIQEEqXzOP<{6q~*f)imtJ;1@30V z(J*c@mTXq;mTR~G8giXJ3rLt#*lJJmLIz%+NOhE6oFH$aCtnV6EY8EwGH}1DygLXP z%Fdz4$)(JQk~&c(V3!XdvL zm0zSJSMyd^)2f_1a7+{nMfav#Z2(*W+mzkL8vr^K3LTxm|8vRhZtP=pu#tzTfqdsTO8mgqynAzCo9aZIN#e(c)VZ!JNXMw{b{oEj=U*SEDZqVQ(LFK(-IUbEa$dvg;5TN5d(5coc{@RdSPUXO=%>&)PPqxkEpzX-Ovmd9o@yR5tkl?#o!VDJ6$(u zzE#D_(|&Q1)4|V}>T7LmPD6{}jLEx`PJj5z-yGJwKioUfL~cr^(nbA6rP7ldnfB(f zq&ADn4Vvv;LgIyFVSf7oR1Q)JJ+$u2v3lS3@VENd0(&iNI)R$XsTW)JP7o+a%4ReS zwD9O%3+)}jJ!?U{XfDgHX`e_EuVn756g)OwD#o0~wf0o}psrLU4}sR=H{{pznaMXD z+2tb6izEnHy@?>mHykT2OgkAwVA717YjUpL@d5Mw)n^`#mF_xqJLHnInQd2xtQIl< zPONtB(pBFm&tX2rl4^}CH#jwS*|K=}{+-%>0H%dHPSdq)`)%U<0CP>YaSDu8jKX6Q1?!(87@5u|e4Aedh?I>HHlU2$z1JPq2atX+t!f#mOQX{w+6q@0`H!nEwvh={TA=PjPg{QeM9)4mCye^fMSxE|pB zuH>tKUr9%I2iW*+-gj=4l%Y>060R9fGv80bX=NpYgDdhyG4(1paFKZgMV@w4dl)dS zpY3W%4uGSM3VOP@O%?zpy{I-pZ~-o|Yyj1WT(s%VoK4(1^X3r^XU<>o!Bav+@rIJ? zNygzW%Y|u$?SO;h;t$}OgxEayPxS;Z_nTwMtNT|PQ}J3qTnc-^ zH`81%-_Bnilsn|dyf5w#mqx5H%m0kUE2mMZg2agBnT_AZIylpfo4?BXI41+R>t7TLzMK|Uw?kF?6DxN z)86`UIqm?rj}QaBJsKMx^RdP|6dEYbcJfWrCeSBxl3{Y`wJ1+Kby{tTx?{|8ioF93 zCN3?vx%l7iUW-&(U!0f5i*P$#)c8-pD z4(s|@bbndiCVINN+^~md9v+Z1dg9C6QF+Sy-GNyB2Dq6`-f4XW4mXq9wWblJ{lHLb zhZy2glgbWkGa3KHXMHho$Rj+j0?+{iM8gMD*ClK)Ac$M8fo#owWUC8URYICgxk{MY z6u4E8824A@`!yDq(3vwsy=r$_q|5+L`1HH0F{1*J!9t-vH*!q_zvc(B^1h$IGpLT+ zQXh^~_;Sh+N7EEJv4T@u;ZDy5xWpohr3P*dcX`S4Z6yhL`;Jq1BZ+|`S9(W zTNe!>NYDTwI0PrSy95dD4vo7tZjBS%gEbBzcyMc6f;+*T#tH6jyEFea*V_ByoabDe zo84D*Kh#%WjT%+;zQd~ffSb)RIw)<^2Ol>myxo<7#e#X3KV^ST#C%{vv4VvEJyb@D z!*PnA)V|@n_1+MoF8<&|iovLL-jJ2G_TXgC0lXB)*`jqcDIA%971~7;J9OiBcYxAr zU;2=b)70)~g6>%Pw(GmylX~bH7Sw#Pk=*C>Yf1)GvDK57XZh~+#8W#AaC>KYK=pfl zU)bi)bH^9VKKV~U{NdmUc=286ue!{qD|}Nt4tQ$r`up=gWb!9qecpr~k4o2MjZcK3 z1(Wx4)RI3>pB56OalS#sc$B?{uU8r*zVjqV`Ly@nVY%wQbZ5vctM}L{hnWUK$$6kK zJcqI8@VyX^O5>?-d3?P*unm&N`z!nUFAckSM9SEXB(^Y}1_VZ0PVD|k372LmbmY*cr%Uot?ZO<*-BLuxoIEkSB2J_{+QxX) z9A62nzP(s#T`1Jt>1cvO#4uay^UzKjQL#6h5ZEDW;V#=29;P*DH9^r5YK}e18(-^# zGOnfIk&GU@#W~L;F*wJS$uDhTGrJ3o01SzL?P(}+SS};k39P-hH#mK-#B|Hjck;-9 z`f{K;tbR=Q@^GK4C+rW`(Ryly*xr$8DBqGD)0x!)kgV(N+sa{DI|DF){Pm}GRVz}@ zQAz!8a)`O_RQ;Md#|xw|x1*GdH_NQ`+8jxiq;k4h@C19+FrU7vbu=g6%zmhWe@M^- z>$$VjGW>7q4F7>ix9(w5j^*gc`OsItP6vm#KTEfHP^S_UmhWN zZR6jR2MLKt#fbl@tM{qd&m#`@wREM$;|7M)uIb?s(ddS}rXdoOxTU}=1b&h5d^IS; zB**m4F$pK^G4~|4%7tUnRK1I&&F7n6fO1qV$B^>&&$~$RhtoHamuOdQ-mv<}@8kVG z)m{*=8U^rE?KNOub>IU(!~VA*6es2(;{iEFj`W*%qFHs{D zKXKsKKG!l^K4n&XkTWz!AHja9N3@(R?M@RhaemTPS;F2+gUsOldHndJT`Rw+_+-U{ z4hA}XH6h;_&-hcdB3<0nXUBhA1BDl?fO0afWYF1115OgB${3ju= z%Ri(GvB|LEXXX8U$fYKfVUM#(U*ewX0JqYvGD_OL#r?=+u0r3Mk`}v+k_k3@{6%>X zga)G>B=u7hL~QX?| z#T)$x!mBn4{r_|o*6v}bjKXR?nZL>$7A`%Z6E;ChCyg`6G9d}O;(9XsvBCT1*j))u z9oAgWa&fj@9yYPNB`3Ih1WyGgD@%LQQLqk=O8mSMa-{pQ;dD159W4ZgTAj-v)T*hm zut~9!@^$Nw@JjzXF%x9>tGT!UbAw-~nwmNw>Jg4};?Z}+F@{W}eo zm;LP?4*7qlP-j+=#!1{>e*$}u<$~VPqGb?m4K{uhHR+{&R9C-ud$8NDDTMMmF5A2X z{_4zltvhdX7j=T63BT5c%qc?T-k68T z%fVFP?+`T&e{0>y<U67m#TVISdI#-J560~7wNp_J}r!xQcv%6~e) zZu7>0buJ-66?05P4O>hQn8zZEOu{R4QS;>gd2#ap)8@aj1O6oaPtnWxAOANss(@`{ zA1NkzgnBfJgu7bMHc}a$2Yjc77g^3NS=9V52+N71U1o6}&+CK?huZpvmKu#TQpBT&24KVI<+n!B`9Mo2PvOPJBg2T2B}hTyqt+6ku5bby&UoMU zGaQt(JuGUPp*k%$)Yf>mZW&gP(sxE4Sc6D=A{+@1zpO2em@h(d8 zj$r|8_Lo}5_U1U`jNzQXN$Gb|He{#F)0My271ZNiAKVziaxTml6!e@QP}1FX4eWsC zz$wYu(3c(@EykS*Tgjs{XWxZ;CEZb!5St`v2kFbUChD=9rOjRc=O&@6J;urijla8Repo$MFev|8(n3quAo@9b+u`U> zJ^PUx2I27SnLHHr8P>JKIo|__S0hP&B9~bb{sVz*X%K zQqHkkokZas)4-D!V>#l_Xz_dn&hvFajfpXPslay2ulsf~@ObQz6k~28mAq(jK65bu zh#`WSjTW*Py`F zPuwh2-}!^QsMU3g1U)_p%US!lpl7rPOp4uadOj@s_n6i2j7uz0jkCWeW}zAad+29H zQ-8Uq|0|N~fbw`kQhUC*;o(=$BMDlNI>X}Y5A7Z+wRX90S|0d*3Rx6SVLP6k{GtOA z4<)ta$dK__S0A&nG$0skbOX<#Ee7Aka@udLF6`34XMLON#ETVOz>gL99`8nGpNCFI zp!!QAPH-eSPgmQ0ih8;IM?_YH8yZFQEi$Irm>!M%zCwA!5U zvd(e70!A0_&AVAGo-;4k(x%l(ao)Xqf!m{A9BfpR+peCf^)i%oo`3*UDb{p1L*N*_ zm>;~ZfypX*?cFAT&7BIni8_e)vB$RL{-{^})oW&?!5N7lUgG+*C**Z5pI}q)Rhm?0 z%Faq>B`H8k&IBquoa%X}cicD>kM=q7fP^g~(Y<`rpXVf;Y?w`tcNfmjFVYWq9Sx7q zjywx$wb!jUm6;oHDhf^x@}@Wm7D1PEsk z*}xMpS@Tx!(f@ekUP8zk6anISjO?GS|Mt@zr^)A-L@&A3(i}DZPNctKt+FQpw>{}s zSoG%CoYD2rlYQD4>D+`}$CeCfw`?@(V&BLuHsgH>4F5}C?#Yq9t4?cI4q*<{#iiZK zALO`Zs{A8kceSr|HcI^`PX8ceJ}S26un=^mqVAq{jw?m<+ga%GJj6NZELyw`!VrnK zE%lS5cwa!>^_cUZeX1pwCWquQ(1?1wkVz!XxeiX*aq6xlHPxq=&bQmx9%oiB(&OsayoPp zKN@EAe98+Dfrg62yULfDs+B$M8a^b8_qYv&+T2{Sak63Fn} zhE>rTs}=}ZyuBYT^E;_k4?zA62^y_j?mb$#Zh6HN2kk18VuI~OSxjYFFHo~3F7CE5 zhO>Oi&r6US&|`(S&Qw9UT>semv{Mk=ysihCR_3Enq4#dpX$g<@NR8_eBbi5t8mv78 zNOpdBSemA>12wP6LcM)@BTQZwn=w`YG+<&IG zOKWHC@Jc`gIue!xlw<6nG$4!9O(1+F0GMTe@nVUiQbf$GL$yCMh4 zy4SRUIAUH16H4DuJWcL8JcmLbX`Y}bDINue$`9`cho2n|Q_fUxHfrZ?59AK+=!6E$ zc4z7Q)7^-U#H%&AD;h2@fJ>e)X97(E6a5Z8St(i_{g!(n#{D~5jR)5PGD$R?{r!*i zZ0>c*tX2ccp%?@bgJVaW4)#u&}bVnZhC|hr@F}??@&}J)vmo(ts>D~$wEd_|0Ito>N9f(A7j3IbaH*u=!_CTdA z!v{^jd&NM3r76goVYssO3!}`3Ye+L7AwKh^6NMuFqy59$HId-D>M`K@jmI)~hDcfX zJDsyvyK$T?N#!SH6iMdZMa%b8@dGHNjxomXIRZH8 z6M_0h8A0d57EpIgB}od2>`QiQ{2jlJYKr!B{f}?qQ6;H78&gQrMG14x$yFVQ%kL2%ej1kq15BbjR(_E<=1tcwUGipF)t zW7+7&=&_<5howO5A*H5dT1u?!)=gqbjMtFL&63+MQOOKYDnw=eY%-Axc9!;A_R7aQ zQu_>V+UJsca!Ql>?fPCugUsiXxN-mAceo|Kk*>NhO~YxtY&REl>IaTIi?@mhL!;vs z?lDShdSWAlp9cX-?4}2>mv1*w_`$l|x+Qa*;Y)NQNI;Ga!miZ8UnE@ZWE_>%Y_~SB zVj+1k%?90lG4Q#=efAj#j40Ju>x6tw#x|%;!qT{S~pv zslQg+Kom=b$sL&mM+^P$J*3m{ON4aTwlmp%T`Cy%Hp71y3Tf?1fF<<*Mx@Sj%=Tqv zm@Qzj?U)=?@wfTdyeVYhOI(;JZ69rRUbj3LbKiGc+*6s;g&xb^`3t?sCu{#EuZnNT zw$tnY34L*7ayxA3N6A}H2eR&a2G_uBT6=p@mc*c^k2@nUtL>yJC#r~bWRpEtS+8v%{m(BF7f`Ew;ueY9Q!E(Y;5rUR!tmUVAVUhKMjMWRfa*C-I*Pf zPQx$<isflTv=U7xPQ3XDwno4i_!6 zTKzTV@m0@teb~oz`HZ*Sjb@gn^_=O#4yHVQfgt`{>U@;+&$hap#H59ak|%Z5|gQ=M0#S&nR4q*eTW$umDjdI|a& zX__mNc?>->e}D7R4HWIq>`ewG5P9njv)iW&XY4YmMSBl52Za4}tNLD@~bk8kniodbnA4x$$U~2@Q2F;EWZN7cC%yKU{Z2dL}nACnlhiVAiyY0^UT{AKqgPLbo z6zp6S_gOc8R?O&FY!(O%`bEjRSEfdw;rE7V{KXIqq_bh0Ux2hUG9=mS;6<=@txMbD zba!}jq|6GAA642FFhL?ZUKf!hHJ(hrqxXBX^>g;=iwc4!OV>^7MbfI(td$+`iCa-5xE{uHF#Z=PBEm znd6?Usg1zBfsWp(Sr)|EeTY9+gB{){XIDOGp9#WZzS{R&=JJgIs?$i4SnXPW@%58M zmtP8z>fh4qN3a84yXZ99GXT*ndSon}_KTfktw7l?89J$NQ#ky4->>@EATX?!T6X`` z0s&1?1u`@pUsiTG+-A4bbA*?_?}IM}K>TzWLuIt>qtqni|g)+bXBQ_ce1U3+p@qp3Z~z;f-YTT5CAh@z4xt0 zlhd`l#aQM5UXG8!nkGseb3hTjybDnhDd@x8^Y_eqE?ezd3v}B9K$T(?sq;whQ=wqK2i?ITlRbtIYzb zS5rC8#|U%IFKRG`2dBFa+KX$bvMT2T+Wf}aV?&;A_2SA16ovApT?lCZijX2RMg#y1*8J_gGVj43_H){z z06T3-_i%0-6T~X7e-FrY07T2|7!#!q$H8-C=6gg)YvSV4M?@U%o1Ss}@wBFw!--k1N;(t}i#hH-@4kPaF?PyC& zpVa|i<3!VbJ?*wZn8uyp|OLkndPkBVs`+r^6U=HBo8}6=E(Gih>#R$ zK>SvqOr1GI(90=Dlh@AZ?a4E>We-#?HsQmb)L)COSsdNwIo}1J`xIUhIA&CU3#X9d z>Nf0lsdOjHE|gRxIkqB7(LHPQw&OAOYKaHu{;mle)`Dj7xKQy`N+;7D5+trAI1Glw zFg^{YF^*O*zulCqVr`CqC~)cdI)_&tKI4@yMG5ZR7wG<28hu&0TjyB5pR!DFSjf}} zeniCS@Do^{cZakI$DL$)iNLon!>-&o(n@X>YqKVJd78R$+y!-xTt+Dtc&(tMH_V=` zDUEIY>LH@u&h(0}P`-hP2%q8!+t}tEb!&P4NvS+l-gzB#r049r;msdMW_T+#ity?U1txx-< z3W(oPiOV>}+Y<^bBTi_08RlMpO0ejj%sHPLc~xzOjKh4dGzR}Y<80yWCVn;RP$5KN zTF;j~xAJhuuzcxad9f&_+}}I(h5yD_4y20d$3f$lwbac9aq!LpLHUv&kbDLqBVBcj z-QJsGU8BI@?mec|1ZNro3sl9cy(MdHFH{k|bU`B4M$j8t4e!)W{@2;iQ&(33r4H3B ze#2Bbw&!UMm*WU&!vZXr8OwX<)HF>H#E#SNp82Qo^b%H&w+3Ugk%Q&XbLG0UsbybE zz6xD7dtMH4A@wwm{^6@HY?$AAxnS^PuZ~t-oUblV1_HZz z&rfqh9Ezm%JZ^a(2FR1D5|7HuefT`7DD93?GW?#XbXssJyzGulFaWWjq@B= z9cf*zhO6hEKAuV)XYe6Bkc;D+#hAz9>c=tFi|vK?G?!sWlGH;4_6#Od>OxZ%OR8-`+Ov2xmsV3>9wpdoowNofU2i7VVaF z+PG;CStyNL13+C&M9iwplTwdbcTjd;STV$>wn|a7Yo)9|yGifE@604Hsbk zj24d*i_QSJ!_~G72!wlaadE!h7Eg*4WafZZDLx_4F&+oz{LOtxWe-|!IAa*_mPKV^ zGEeGtVXtrSi95(%c}=}}ca|>I=oJV4a$VN|^~(r^M^e?*m9@711doJ~pPwI`kbn*I zx_ky?@a=rh&o|4l15mUT+lJCP@a=k}!e;05z30RB2+qF495 zskfVUv!~Q;vEthX(~&B7R~Kp0c{qO~&eLSK^(V#-w~CluLqnaX*Tr+)I3{9tvi`_Q zDzctr(EcZ2K=su>Mlgz;nM%v2`&<2LImz>t;p@}OGRv1R5DQmrUU}LTSPBV@216tb ztMk9wKK+;bOZBfkd?AXM(_L^g!^Clohxeo=$N5)qtcaSr+Og4KswL>~7p?Y69SQF@ z%8myiW&sZrgynSA|CrOMWME#f__l$q(%my@7N|tE-QoL+Go|(PRi@DYxX}(bFJYtl z_w(uhK3lvsZSb7q8p@?RUw*Ba0eo0{W1HbX)VgD?gRGa@fbAMg#Okt+BKil<^V3gyX= zR!Lo=gG!O}a*=@MFA<;jQ27^b2%q1@eTN)whMd@7!knQ&e=~JJ~*Q zF=&-&i`!=W4xV&PYlu*=6c!1!2;E{e!62j=lC8s|ygR#jls_Ws>zS@3i?M7RF zba|hqiL{xA{~GL^=8$o~o{`E@u3va0?yMi7(hUYu4-q=9pN2$WQKy=|k$bpKbJClV zOgGQAoV=;@&4?gNkpNA$Q^s^9RU8zbD70{ik3qmj<^5;RG`2|JgvFr5$;4H4PsDEg z!{O8i;XBK_h3^a~+eURZ5nagI&W+#y{-JgN)A2@BRK2R=e%TQtG z#Ns-xqo!;s>V2vB`F+e1ktS3H&MnuopX>)55%(}=$zpMqtP*l1)*FuvdRJr@uvXsz z_{stW6jR5ra2z>(@XNw-AEkllt977sv?IDFB^Cu1&$ZP%t&hSXqd=sLy9FCei#1%T zrW_4iH(0H5eNJhhxk)}s@RNaB3jup)Z=9})ESj(AP=CybbqBbpWQJ9yq?+fZmI+RZyjoy%j@6VFK}C+-;S z_vbG3urJv^rV4zuKC1M^xzO?Zjp%r{UtBEfBenO|Jbvs?)yZg5eYt2$JEy7)kQG+G z-o%2|8Y1J(`9LSHM18GILO%SZ8zx?Bk{)D)h}qtToIIi4E>6utldwy_F?3N|ih;#l zDaVvBwcXa&L)IUt#kNXlk-sd@SFe{vDrt?nWhWcV8AAaB9y#SNGHq$p&+zOIZ*0*B z&rR~%wBT@`udjxN2Cn_!o*bpnf=~cSi(43B$TOlL##_)Z_pph@>sDnP8n9Q2u5BwU zEmLRnhCK780z7bMitWBcS$za@iztq<@ELQs`$5=>|H~p%qvXWm(2=ORuS<@)*TVF69^=EHN}Sj# z;ScZ)_7#;b(f9A}(hra+<19twkmBwLp0vZ$wHu;A?)`cyQ9+JOa1?sL=y`h)wl~vdbq-xnr_$+i?6BiTeOGMu@(+S3R7 z5`rA~tZNSe19A!!>uKeB*1qka_L?uYZ{KT=T}n8H67T9P5N#cJqdp#AT#0}lfO1b) z>LyC9mWUPLo5#BY5Oc_7HwpXACxVy0O}FlW4ovICdLj6ZxwL(yGi6|eR*X7p#urPl z!dyA8C>7Fw_VsOHH7u6f3&nCPvfnWz*~mt!qW*O1QlJ8|ysul(2u!b^qZ5Fm!nnR7 zgH(|on3rh5Z+dPDpTSanHh}5EEl6d%2?yRZY!}mh#5(uv9Oi~{rpAj=N!ry{L+Zn5 zcw;+T!mv{Zyx2xe2X+tQ%1L#vUw;4KLRFMuR8+Vj&F04bDOn}X?uaOzS|zoEL{m#c zdDm71z3e-`K2*BQNBx>?Ijxc?k8V88l}rvvVWgE>^oQUtt5_;2A3__R{Cc+oPIg0^ zV9Da#rYAO~ld-mU7lAU2;Ec{#;umxR?GX9(-^v2)i^ zVRX9Ef}KdOT7Dw`p|=2eUREe!dQ{aUS~dZ1hV5G_hr9&OydW2~>V-^e%y)x)TqNvc zT3_faV=u}sD`Fp3vrF^1hu{CXTzb1L6YinOc5mDrJ}y0E*Kv14u3#ar3r%hQw##+O zrC2K{$Z(@EFviGGL;H{UiZ)nmdYf3qO3_?;MJ{s7HEL-3(ZFt$Ynrn^=p$?^+#$3{ zAGIbQjW2@*rW($fQ!1K1wPJ)UnoF|D#gwJKCDsBY3MbN!D=k4pPJ7=8Q*rQSG ztdGcrg~}$yMUPmUeoVV|em$szt^E{3*7qx4t-6dL zk7}BykC6jeEO_6!;o={WCtbV4Nl4t6S-lIR#DD1yt))+LG0R!U44muSbu{wpie2Kj z8DcFy4J(mD6eXn}4tgUKJIwBg`<4mdPdTgMoy)jP+A!Mx9IhW~vn>(}n8GKJt1Fm&8G z{`J#>*#ovXjrx`kVdH__Nb`sDK=4&)r|oS5GYO+0?!*9wm&dmcY-#e5;pTqWZmNS?Ye?3rn`sD8^=|5{BslS!got6ST1#6RjjhE zjku`|Yho8yusW@7ykPZU+h++BZG41@V-YNLp2+vhkGM?9E=V%0QHkG>VAwbVp$2fz zo&q)5Q-U*%wrWdt3r8hbaYwODG1m$sj4r>8e=BpvNE&`q$C0ZujeqU-bBX;!9n~x1fCpqonlZP+gZ1d_q(pipQZ?a^TN|Q&SN>(NusA~wqs~{b&^`qKfCvZ# z9xm2LQN{_@G(^$%f;0C^XxH55mK-`pI|JcAF)W6T9Y*aY9z3&ngWq#@(TH9a3?m`qNi{tD^RX{sd!kmQb=*?`@nc z_(ozbw8|kig}NfhKD$+FwPiz7(La%DZ8JBrf3M~!`Zrqy0Tsk%iH|3OGkcu-{>dO< zv8*8(cDSyPR(uRR zxa7RX=0*{?6!@^xapDj^+AS_eUSeJ}mfTfl`9LuPN{!vu%)}4M0%)KZ1KwFUJq-Ah z_HzU|GH?rXVf}%L!_0Q)JOj~Z>MrPNX3`<}ln~?kh@Pyo9Hat~W>?;TZ` zK-C;j2><9A!dLE zTPGSYQgD&u?J53K9u6-y`i4>iclxf`oejEECRO}B<}-%N zS{a;?GmbnkIh6Kna6e;qfV=m4Hlwdu?>PR$ES5?H!^EJqev>esWBmihq@<=!TnVL6 z6?!B4>y-co-^KFv-h&}S3pRq-k1BFm+#Mngt*bQql3qfJ537^09{U_{TI5%yiEdn4 z8TGRTJ<=j_PcjaMO^aqN$vedldI4 z#m@%2;pVZjUHJ=bguHjC50`mWWbEuq&Gi`C<1J113Ik4xGHm0xdzD3FWNARo@uuP+ zXEQra;L7X~F6Vh!(DUG_*C==TW~RB&3Bl^U;6ZG|$u}OqidYy^WVh!~`D}QAiW3!b z);pYDAC2H27BL>o{tO;N#rhc(Nx)J3Jyuy)JB^KkRb_lJhQ3a5ChjI<_0}V;JbUY* z!VVW79QBRV-^9%Cl~xsjr3P}x6-B{1?G^;5eDC?@q$G9?B2^;e76A5R)*yptMiS=u z)-Zi{I9#|D3z~{`855qkPwU#)IP|4Q=%KqC^QZXq4}%DhPR1eH;mlQL-;cm9D~~pG zb2EvWrGgJoE@pGnm<7@jx?**TyXB)4p&uUWP07MH`WO$bM3h!(s88RG#6s0p_MG47 z3GdTmYq_nwt3&+6))lj}EB1WYJ^JI9F8!ufP-*7qn?zBSS1DIRwHediaCq&GO?(CP zpfCJFzlYikN@1KE`FQzY@DpJ^guU7i`JuK9sum$+fnEncEqNq=L1ba{!H&D=#X`uP zBs|2rEc#u9*_**hMY@f?Y@MP!x3w6mA{Hb);jZoDt%2a5k^DZhR=l9rQ8EnCFv`29 zmLrv~O%%I|Gc)v=!Do2tZzq?ijQs>%~Y1HT$lw`rOm)9chQTgsE;^}T)?-!Pj? zQbY^ImDjheY8jFXJ@eWDP(>tG1)PHq^r)H@6&nP*Y*HTHpYH2YHhxykiM(aXMiq^? z7`jm{*VH#Fxq6kuWYY8NjJE{4Nx|RdKF%NJ58XExyo9UsSwre39(RAd9x}G)T2p@)xg7NY(8jJY32&;zB z^gg+QTkkY_4`jyLse+7^MR^~*19g88$PB8Bay&FwT&OQbP)quyC%5Q}9G57P#F@RM zm@aIc4dBSl(JZyslUnx74_>IPJ2_nobLsrZWRu;wE3V;|u6qd6y#M%*)dFAOSmHel zH_e-H_90>5KkrY+Il+MA>pA@M*>?)4$7qjJhZ43I1xwCJlzvJD)+Jw+t(B6o?07A= z;wX-er{mbVMVJVd)3!6g?QzwT`)}9FBMN;ny2m-a-ybk<={lr$zV70c`7ps+T=n?p z@cUXmh71BkoAT=D!w@eiY%tfd924~)(G)AGb2p4barRMS?0{frxm}$D&5czfu%Te6 zKjF0%kUktj?4VT8_5>Y8U%*+)`dNx784{yy`jDPvj?_F)lZarf&c|t~d5y6ok?jW9 z_gGXxo++4fizDlZw}R(TJ(@1=oL&A*r?r4$(!HlZB_^0^7}Jzpkuj#e)a}HZ|snY{&Nir5OS%+ zEw?l}Z++3q!&E;W3XPfq>vpN>XRRJzBo%NBThxH7UH(q=*kenTORYA-hv3|<&X3Pe zIuA3!Fv!{{Sib7fqub$pL!GvPmyYayo*iXMu$mT`;-S&4<~FYen}fTFpK#>?{#q=kmTx>JK4M5Mrn6}Q^PZUJ ziwDz+2XHw1iY)FJSr!gHZGFzi&!fBHvhW>Nv!>N1dKE`2>{ZBrX8`I`K#Eb>zO@l( zarzYLeuGFf>`OuIAH*aMc(;c{-{o-xd6RJQHS_m_N#goB3uq^0!NXl54_=F z5>Di;&;0a1#a0M`*`+Ll`~lVc*g1P^oyMH+f0OQ8NB=stPhzS6DQU8ue0CIaN+>*R zWkfWVNp?6=v&ZHzV4JGefRp3;H7&TDr$`-XR7Z92(d?I#Q?9R#Mf4AEdpYC3j?DZy z*fDH_Z=Z%ZlU5pXRIxb6gUvuTQ}3$fW0QD=xTvpyo%&0k{^MXPn}^Mi`9o>lRZO+J zNRo3oPs~bIb&T{cHD8pCw7}XX@Mo}faT;Z_82aduKmK6$gnf@qHvd!;u18J92hm@^ zN#dso`ype?#o(ez;+W)2#T4Iay*#|5W9dGKYMw|fxO}+TV=PISQ6=nv=u_ooDqg~d zKdq#VsMfs#k)p>v=f2+L*jv~_;HM88-RoN*w)0Tp>Lwc!LFW>ONp<8RJFSsTYpeH^ zi=7Gd@YeEJB|1w7@=X<&<2pVT!A9-oFd90}f=_+q7eQW`(~RQK;6RYr!ZJ9jrXRxL zR2t$lRdS)weVlY_wI+)hAz`vvH$Cldc^vvX!u*%l7%~XmCuVB0sE!s?Jm$_2^3^2Z z__Bn6l1?0*6Yo)HPw5|+1I$HCFV{kYuSbBA^=9s4*FAn~KorY*-(jfeaqMk|{u#c) z$oXfXv3gxgn1W9pJ}%_ad$6adNXLVG&TGn(zPgAcD%;3Nom1`LXTbtH?f^{X!4UtQ z%fv`eGXeL;QFa8z0ES|LwM+c&?_FTO97z{l1MpuVktbYoAk}ROF{L;(GHy5P3D^n)2HC& z?Ojk(_7S*l;#%;63|MbKdi(j$055Q_L&+QlGP!Zz zR4p-S5u!g%eON>0cbqm$Q#FSX&)(CtDTa@xkzXu_;xm65XKk4DuS6hm&NFo8q)r;U zsN%{l%tMtB$L*a5;U z^~2#}-El^ZtF@1PW-?Y_qyJ;@+-VR`e|N_Dr4k9-Bl*65?3SxS##GFdW};q0%j|jf ziakN^ALGzk#GLU!(?D44b-TGhi2yX$RYregtd7yGc9N8;u`{ZHPo7b7vCiN^pn4kK zQ1WT8FA=t96<1{wpz$#J0${O5!B_*~0;9?C?s)MdB?EjLAtQTGcaI)t)Hj$j$BWYt zJNHBIP*x^QFr#E(LJYiMlH$(B|={>$z{o1zI_39T;#I- zA&Mh)6kOB?rbQu#)mB(Gm2^&n&)xYdvsg!s_l-S_5swDI!Oz1SzA#o?S6^RkJI5R= zcs{VoY(SQj&ab-M*-%NZWZ~_$$$BA_r1O4UZqTQMhh>pTp{gy-$VxtXHu-<;1!ym zOapu?^ZyoNAcWC7ib;Y%1mmHiFYn7D!(o0xWjU8#v@1CZ5^2F`Nr`L5zW_-B1%~X9 zB}c7!BXz$>m^rMM%uZ#({-`W~1?z>s4-6D}L8rQ@xpEII(tZ1%{KI&~-)iOm<;;a$ zMD_nuep5asY9lePUSONM?^*qZGrp(z7lU#b)2ZV{LXJCY%<3}hj$1;6pg_d59_ zzC=Q6yCCL?F5)SE8#98L?j*WsKT+GyyXLIS(Hg1z&;`2^LRgIQuVi3jbEs;Gkf0d! zZ-a%zSMil5Y!^Fo<8Zbfas@pw^_L7S$XBglg>h$UU=6dmi&xQFh{ImkFt;af;Kku& zwL9vY|HCvh3w9Zrs<6TBC$DV5 zZzJtx3*P>7ix*k-vxr?i+f~CBwIDyAFzlACs->i3#{v6`CY^C52W?>?!@E818EAit z;INn9<4bmhPmbG>uqpUrs;y&}Va3vSv!6qq@ekx8*`C9TD+zDj?7~OeX5JwDgbixh z!Q{KPc%+5_HP7%o2{dOLIwX0vIP91>6Klca?U`^0H|VU##z*y=6ZP{-BumOLgp}Au z*S44Pwrq$1!~GArr-|B+cAAusOgst)Ro$dp+Wb#ph5Qbp1DZco9WsZtq*`AYNAc* z8kt8o!sk;#%ftAU_-YMXJWe8kwLAU_ptw?oH4iccedzgW2VeB~XBaf^-bw#v^*5VoC35@wdVKX(5( ze+>mDmm1mDSc;UWR&xv><;&yF-Y5>J+59jYWDV6ofVvl=9HcO4lnj?h24#wY;t&AI zhbu*q+ji%PfaJ(1!Tvl>aqv%*^7Ea9bkCEt!4DeAO@#KY7Y#p`6UyXe?)DbwYj^H0 z`;0IKW4qF|E6Rljg|*U>_!-nx+b3(IW(4xq`5VCI8QHHcJ0OH!YEGkYz?79e<)4B_ zk;Az^oTJ!LIJQan4~bed2QO}3f6CjtKFVw)uEA5kza+ja;b2cR{{+?Ts9XulmjK~_ zC9^E+mxxw)wseM*jsWWfJOuRU#-1L}v(7q`U+XT&ht+EeWX+lLCT(E}&M;x6X@FKA zLM2yJi1wXQrpSv*)d@a0jH`?bMRiwv9hwdWn$dlyEjf9TC}H=)dmzKhY`eD|YAhOt z@ICoecJ$jG-(MHg3!5#IHD}f^815~Y3*UGJ?!N!*EwzF5s;g5)-5_T^k!m4Jw)U1r ze#;{D{?G&BGPxAXJxG&e`HAY^W|Y zImyoYIraNf6#(a;61_=}K2f93@{}SO!0r>OvA8W?TkKQXM8+F-jp|I|0u#3sNc7vP zqdOl-$xlY-f$E>yZEe8B;R5!8p>>=V#UlM7!vd268*qbg^^&t$r4Q%H zU_3MVr$mkf^O)!pm-+G(!t*hZD5IktJwkY{V#2TJ4tl@^%6erL=h=w%D)`Hfd-SW9 z;op7{^fo(cawnprzG4Gf&E=obvpzD(Vl-#!2YFc@D63^S@oh2I(vNR@Ymx0k;Omct z7Ll$r-4hXPTeHB!DJ5odfsh@!G;tF8pYqAwe>y2j^boi+P<-T;#;LQ!{W0p$-CHyi zi{zLW%w3&sQH2bxY%Bt`xcNuMO{eGGJon==kH!LskyN2+ytu;zHh}l ztP#U9aG(D*O^CKt$%AL7gpfW(U(e+;VAr|0c#f+^8>eG_XV0~rH^Dxc{Oxe!SO2KmU&YujECC8udDG>cV6-xm|E&7^8Y7b-F6Prid z+J6>6E?34Dx$(E7N-3kqzm-#_Zd<6u3FwvGz1j~)g|Uj+|5tn88P#O-#TiAxhWLtr zf`~{HklvJD1f>T#u9;m8N#fg=?%_wz>oryfOZQ16`NG zb`$c^plg(VE(K)ixSY(bU!3d3B8hx(9!tQDPk88z128kC>T@3Z+YO|hlgrutKMm6- ze#-6OD;nH9h(Xf4e91#13~0F0ERBP(th|_1F8g%Lw_me7=16t>Hm1mDQv@T96o!4d zwc@hY6D1O0xU!v9+sT&0JIQzOwZzV<%$B8AnlNW#%Q@>iskaAhiQ2q|HW|u`$~gxM z0REM4#m@vkx(%GZt$z&__4t-s`$q7$?rZarey;BVjg!mEG*u2A8v5bFbjidj4?B@W zisc|#D*n_y_}QTAk~yRNxESMyPy6e1xG^h?~x+PrkGr%auw*lgKt@?y1qjl+IZ zzIxZJT7k?m#7N5OQno6e<=mMyKNs5VL@H_dtMV<%396tA6fI*MkJkFCSe$PN7Two< zmcO-o@W7*2H?r8mJU+hn=N5F}`n+_Uti{zwu?RzsIU7@z^o&^)WUwAwOE>wHS2$20 zYb;2biLc$?uF+S)9{y}%ZfJVZhhWrPxfvvebbXWc?J1G}{yX7IOefF$`#7T3ro;nO zT@H3BYo*5O`<9sd?DbS4l^3;q*4^Bvj(p5JU*}#oSS{uIkwG#2CX6*Rx;#K#DyedQ zc9s<#(KqRg*f2FV;pvz}K21`uMF@K2T0yVZGvxNOwitNTqZ+)Q<*O(2o1?V4-D#6E zmbWr#1*Y`#&K4hhOI$PbOxGC#t_G$=)?(7;JcV~z%%I@nd6Jig3d9&+=Pu&*Jfzu` zn$Gc977~x`)B9FJ&%{<*{SxzUXq3a&D!Sod-FGj@*0JtII8e8?2_U z-T?UxT??LDg_qyy0ZkW|O(2Xhe5SSRql+NP)_5ifmF5fC>JUga9*@64M_1h3EIENj z!%-+B;Ec28oly-oNb9x6UxKm&qH>RV8C1EPm{ut-?%TEBJ8hYF9Bqh=rSxbc(koS-$>Z~Slyyca3iP7swlaJNdPy4eSpEdv z#~GDy76hXB^Nrt3A?&w0VJ~#gU;FA_SI#2@4&X1Kkbi1VFPtg}0`akKUI4kh+~ZCF zWi0aW#rymN0=emzTxv=`8zvqFIOAW@JPombBnn80KMI1{IV!PC?sQMwTLcV6q+cE2BW`|=EJ|)@`n4!MbG-x#(;irS zH}foU;8|)X?p<4ZrFhK@B`A;jO}r0Kn}a~z2gCID{O3R*=17gJL8ur+YX=vP*bqml z%%lsweG&LefOOy~>i&~PTwv-W_Lkrl9JJ|NX==@u`=S_V@ytX9p=_b3iU|@*ANEruw_v7RG&WS{v4)vQbo-YO#_4an1npFHk)pGiTBxu)F@6pi z4`e$lw;NJ;N1Q#x%O?v|+&oKQd|=6X^U>iD^$JOLN;W_PlGhVJ&vUL2{CAyNbkPG3 zL<1j)-w~eqj)EIz%?O6`wg9JKM@h5TneBrpLGoBwS;!e`3=m|rg1H$U-;ZwnrZ{x; zR{!Ok?z$$2c^~+xkLtKlNBGaC`+Mw?@wu)1e@=oPigx2x#(&$#ZfMw(H8rUi981i`3Q2r4oTps6n9jPa8Pl ztshJGavjRN90{e6LDAU0%V$|uQmS`$f^$PxCHRd^<+0i64>Z8(S;~vG;j@ks2J9^r zJSla>7Ym?~kV842tAJm{o;rG7XRQfGsTRsrP2JEr2hqN#v{Ye8XYbJetUu+tLGt^I zvVvOqbu8FS(RaP6UbwqJRKf?aw}KV z51icr<9+;g1_!(CXODFiHWP~#R==#Y5s+qDHkuEBg&W+1UIzQF$n6yBJ&qq{azI6Hlu9oga$2HeR9qX@RpuEaxv$jCr85oDgJ;>F(PHdy6 zT~X|C`S`>{c~zCRo}L~YfiQ4$t8{j80UH<;Y6!H6t{wUVAzL=7+kkUqJ$S2^D<(Qx z?=(!<+0oI`7M_L)RaIUd9(5!V2`gGzS$Xq?e%KOu!+cg8__S~Qczvb?v$6N-HC1La z)at!^(97Kz6vKstC&)I(-)M6Wp>f8)$QyR>A0X{5eOCVFWHx{H%r@c=GOyfR`5&S6 z-{NEMUjRsZD%Ph4|5yIcL%`qi|G(1zt2%9-e8K<%Ny1{vB~+U)2&#>)hQ2)w<{(fW zq_79Tu0JyNC;Zhjk@p(DJYhKF@H3OFM~AzYN1GSom|Mm&Eo+N_-a`!=4gZajAW#_Y z)K+Z9`Ia}{^Pg4p@%khN{5`G9=l;(B4J+wVX$GE}GLHLkV#X}ThGQCOZVfdox_r*( z+86q;5?wjaPX*UA+0;OoaP0h^n>Ajadt|=B;<1mFp!6AuS#DlMo#eabYv&TmC!#0s zLjq0fuYU&X8cdX}_)kpJeulMGtrWz$th6Se*-#m(uK6N`A&z&56od3N6VkSqndwd| zu7eZph6YR($q$Q5m0d6y2GhYm>X)Q%AzZ9h;Ai;U7wSV^U@o@JwZzT_x3zTVMCs?Y zh?upJ=1Aru8iu(QW6>g`T?V#I3Z15RQ5lM^XU1u?@<2?MV~5-=rb<(dK*w@Ebr;}>FWID` z!ifwh24hxF$fTC=CFmXxOd&S|+xI$%jzyQlccUkr!za&5m$5MBhlFvzsZ@Ex=R?1< za6U|&fBKMaWF5G_%AdS@lr<`)%3f}!vuKQ{6<0@>&+PmfzuA>rJ^_#5BIXw*?L4GT zD)Q*Y=NvZka42qky3#J;5E@X0AU$rDciel!M^STLROQ$@FC=X0^i9NI_?-mMu;tNl zQqB?a){wx6dV}8tHCeK9@2v)&2~nP^uFnv^8l+$KdV+Lp=`^C{sjiQdU1hA?fOf=I z#aZBn)P4+1-BlyU_~Z|JUNZ+U_6D8`PZds8qwJbLcK38}zDHND#*sDGs@yO+dX{KR zAfe1hfkus729987t}>dfMjWFLw-DQq(cc&RygAiaSSpeg1JB;Ob{nYU3^3MtA@VOy ztCnN|0Cd=hIsx4UJ3%hgi|4)>i)VPex>fB`zn50TFT^NjGTM6+QXwKa+!A|Ik7{v` zOZ6$xUf;jZ@ffvJ;)q`YXqwACqX+f=U+4i%M38_X1zg}C^OgEEz)Pp$i1vIed-rNf={zTg`-pDcAl6s%RXR|e= z&Kz-X$7oQ+Tf*VvBUaQKzC7-6nsJ&7G`6vmilxe@7E^JPkL31h9r>7heGbWUtQvpf z%c;(g5RY-8=@NgiZQ);RUQo0k#&g`L(sQHoOQIOb5O$-Kic6VSdo-Gi7>j<>mWuwl zbmgZq&}MmqGL|xyYj=RIL=46N>BVpgs9q>|l>}Er?JiIDC^s|hw@L}@PPp3 zgFe5WJj;F>#OgW7|5PutB#gb|hL|0x?0-HHYX04Nf+99o{|rb0mFw78Ub_E$r$5wrsc&l)pKfbP$qukzN&W zaLN2`Bh_KOIfiTe^=H{;ouocSGOG z%2|)@vt+k*tTj-_bki3jRrzC(X#6Rc9Gu-nfdNbRdD6b^cdkX@@)70ap1Hu%p}fP- zpoPU_>+Ac3=iW+O(R_Cs>!SHK0tvtahlQst?@CL$V6k^jhs-8`>4rz){4p96WJga+ zYtWI^;1crV+^oFnjs5(tJ<12qpTz7@==>PC1pwMJ6<4G`por(E${5~7K~Eq4qMcgj zhn5+@jRE@Hq@YxKeT}lRs;cTlDfSmxtH!_SW7=I5DD+v^pO)_z0-Aq~Y9O2rsnWLi z<8~$R*{F(raryTCv&^PHeDAonGtH&_K9>0H0T{y%3p)f`UI^&bzs1~6i;evr45fWo z9ksDK8wxy7bvY=T>Z-&h^XQ@!H`E&oMAO&lf9-W zkB`G62eV0HzHJShSKsh`wD$XBn_({jrP2VF84p;dcGn(L^^zr(WOGUt5#4>Z=KRfX zZ!6!1k62FQCnH4?XQZYe<$)4Q1&s$5^S+^NKS5O%_9oJpRQRi&+fy zYVK~mY9l{l6MZ&++*s6odHO)&sa|*dWEO_u?lkzen7tkA2C$cO9q*{}D|TF7R>N!& zl_ek8=@UgW&ZzXNO7j!>Jjf8RmXdiVxLR>TW>O1rd*}`0DccqlJuq|ut(2i=JSHk# zt{wshcgDGh=~4h!N?4kGxTmbf8*CM%W#8XjA1Jr3)Z+UC!KfyL7qTuRab($j8d8`z z(E)o3Z!J1zV~D$N^+;-6fdeC#w6u9fSG^nur`!jjPg-b#i-AHil#Y(PSHrn`hFZw( zYK$SK^QP`az45EV>l7q-Npz}RpyS8kkeDy!9=RCH@O_Iy;=LE^p9|6-?x53wrHKBW zYXFGLKR)#yZesRkMo3|hZ*|B*s^RUr3QfBHxL?28NbwHoMqVCzgGDSW4K3fPFNUX` zgFG7=(GYm%n5MRoFJ_tU|JqCa(7D^iUNZJJKA>JPG11G=jNGE-L?jD(U?80XsX=Z#r-Sa9I$c99*kDPiUL@rK<=Wa;C@Pe{4pP}xR3x{1+OtFU@`*v`xD zgd>ZN;8kU z98mJn{sfEhuFwB`$WXXv_f=e`jHPOl!`}j?G8YoX=|5LWojEt5YUPh<`0S@>Inv7H zWr)xGz3PjsVmZ`dZgPHda~GpwY$azzmcFN^x}(;6huJ`Y`j(U;l)Zdt0#6s&7O8Zo z2Ggjno-PYXSf6-%2&H}H&R0i+hGU9x4w=%cVvp@qcZ5zteNs9RWVG3~J=1Vr5tDpehpwg>c(R+*g>rB%q0Iyg_J!0eGZfK^oz}rFdx!oX!GH_5n74g!5&^NlLUjL+a{i(-fPeya=Tmy z9CDHNRStQ0K^OL2vYtrY*37FwTcV}+gM&r%Sw>7R$+Bk_cOmYknD~^U%=a%s;+Eq0 zL7AD#j3iqZQD3D*Phj?JxEFAEP=d9$9Alj2`}_goLwz=?FOCC0Wda|qrZzhrBuKN& z(=y6h7$52F#gS`H4D|>HN>#Sk^^+RxvxP~Bd~@Q;Z@?Omggf^DragnxfK!<0N710OXuzL{cI4~L)*R5+h8@8 z^%C~od}o;2-;wwdPZG0jHuKq7-N2XYvEKfM-eSsGmuhWJ?ms8w^$XNh@u)&ZzyX&k z!G}qJ#h+7r<$+@ReZ17|^zj>cL@L(c)lem-Y%i@es<5=7WQh-)&JJ$PZ<4qz6!=`+ ztf!KXW+qR{h~-@k#-fWlt(+X-P~$oH%95(%otr|9__td(=UZrg%ob!tiy#Y*!k3}4 zRpCN9cmih0F^|1XSV!Vl65K`cmGg{yp+&+TCap$~bV#rB$eYEOoE|zZN6%Day`vka zXOU$Haf{18j&OS!Bk=-tD{nqw&+#aMTolDVg0w7C1_7?Zch@IOQE z%=c1mYh^VlQg>+&r*X}pUAns%pWo)_@=0Et#Sq<1_|e-0@-JBqHOP%Q$mp(gdp2@-~^YW5nwo&E_oWjtSJZ$!k3 z+7amawheC&umo)!Y{2*TMI=27R7Mr)j($PhdUrRbnDlQ4t_63)UA}i4(lvE_a8lT$ zEVOhMe>OX@AVD_ilJUSaGj|yERarTcsCnxJx=YTtNH}VL=FJG|WSjPTU&`QBD9LZ^ zskA=Uy_b`OjIcYJiZK^E>2)J2b$ip5UM9qXk4BmCg+n`AJ8E7xScsa)f39Hw@XfxW z10)tKP>0r%n3xz9x$1!xrg{47J{UV3<2B>LLM%NVg^0w%{=x9dV2ZsO9NrgUlM?rs zzQT!?B&aj$JQrM zMh4gX1TW&)1eGDPoWB2HZnczZH-hxh`B?OM=^2ayZp(f;#II}g)1uBw!y?y>vC!7q zC5PUJgr>k1`-V9$hjFXKx+ND>WvZdKE>>L|pE0#9Mjm`0V;q0A3TotXj4spro>$)2 zr=G}RDXB-Q$eF#-dPS{a@&1OCotVvT@DS31ZI6BkDZMVMC3-bWg>2ov&cvlgg*=L$ zgC9MPBPHxvkiA^Y*OdaN8cmYxNMZ1xw-bp>vm=qO9%!WZl{ih; zJE z_f#{wh9r-ir<{!UDvd)klNaBC`Ir|Zh)Ld=-^EgKRmhE%Y-E6Xrl7%r#)e>t*yK)q zh+eRv7+;qdz?--L#sJbxc~@(Kl?znre>PXpPvrw9jL1ya@3>EuRu4Pm*i+6n>vn`V zr>yN_#Uy;g*m1v7dyXVT@gbGwNyP`}>wJsZab5$#Htn@b{rFgLd3P85-hwT-)w2e_H&m_P`yN63`s#}5 z;8<7Sl8^QLx5_bxLC?aT-Lj&h$G~3I>45z>+e7Vl-UDZKWZvZ=*2&2^K`VY!1QFju zunb2wOe&ARk;GN)q-T_})bT;nn{pS^cu{FW3&yW*gx>2p7?5Ck(e5IPt#X5zN$(O# zc>3kb8M(>D$^s9DzgYLQcRh3!#Gm+@C5c&`uZ#B&{!P0O<01R(x+t;R2DZDhVLlTG z-R3Vh4kc~`s*@-8ORlD@8AdeY@oKaaf*jrU83*$kDovQS@-8CedZtu2!~OhBc4+>9 z#um|eO2QZOIoGMx;Q`YB$w636qS)incfEFE@}nmmRp5_%k557LEU@-|_xAPbi8y79 zbN9VoNV~STM=qB!&WjH#s~US)0Vai0)#Dts`ms(N8^PWe`80(a+K#MX?EX{zeSF){ zt|#|7z9*NuVrIRk%G8cyj zqsZ=yBh5_>E;;=xYGMwXPRSBP(G|gI&sqOwNVk(eVr|jlAa~d9lkr87cGcq#>^bJ)iy8iZvls{xMFijmRp52?SJloE#GM!32oeXYkrxiJlxja~uY zDm_YoR^2&W=FnV3r`R`{EsF#Te)5Ws+Ts3i6$<>t5%YeW2*2I7!K~lzU%eZc7;te;zdKgS=lKTJG-=Rm0JsRp8Q@8M zt0i<3R*Et7u2YCm@Pl^*i+w9Z5Fv*CMICc}Ccuz$`Z&H1c5F-xfyL>Wg@=If{ zcUU}RslEoX=Y&KhV$1_} zWUkEiZ)!$2A~{?cTwb4yS&bhnsQ4r_la;k-3~f1-_2*+{NaeI93RBU<*g4Iyc%ycI^D;|sM=R-N15>Rb8 z?)O-T6)NTJ=Eu#;NY9Oq9UQs6kXnO)M>sQ2?$@H!80}q6pdMDGZS6vS{5tGZAdq7Z zkl=@Eaf+uF`06;JYo}YmbL&3yt6?@DaNdD!N1oY&&-BNx zv3{d#HA(iX#(Oc}41HCa@el9okf=@3pi0Ahxf1ha$xXAFy(Lez)Lu#Si!SmcN14Ok zO*Jl`9|U9M)`-t}%agV^ic-1nLWVd52QH`?3vhr`TQI)fF#gU%O*V&WB0Ci0y!+LL z(eIehyzx^N>Daj}$;K_4#o#ib-M0DtSY3y?GJ-`s`NJGG=?RU^d5K*GpU$Nwg$RgW8-NHZt%J;21l zmWrE?jLBHQA<--Q#9Tya$V1JGLKE=GgZFR}4UD`H#kqQdqqtG(oc-{m_|>i)VPm+D z&WZ6xkV=&Q`uIT*^?pp_Si**9p?PmEo~=#Dl?WiN;#^ zat$i9^WN^U7Xm>!5Nxz9qhxZN00|v{;-eT-o~uY%^-g?Fl{5IUD0grIuzfCY?nC~< z1@~7a)fUxRN$uSS+*9Qg6BnBw?s^j{-tqW_R87VPt$cC7g7x(a2vl%iJ@vQfD4eaY zN5GT9>Q>VP*ChVjy^4^B1)IWbA^R0e5PrAdU(X}MDE zK~I>Wz$6_oi`JrA*Ta6lWGU%;PXcefY~%pT;qa-sU1EL4soiV_DUO_t&#`=`Zv~OC zH#zn)<~J#%6H$SuzI7Vf&6c!a;$q&nNOt~tb7Q)gwvBXuX+_)a&R}*=lAu?lQR_~4 zOSp=S6^KgfCS#%nEP* z6viBzJW81Mu_^0k;hQLE@vfh$KMRsyxmw)>R&!w_w{66EW8L-jpZ45KU1I0v=4w4G zD|?8U^~}$JZ?c8vTj^w!bU3EU-U&#!WY!e%BsXDj;RE`6M$uhXI=!EbMjL^yB}U(c zwAjc(dIrk_;}ubJ!_|=*(IUKYMf-cR!$`U=v+WgU88Rtzdd9xwWVvb>H9(x+%cj{ASk8dX+$CzSl{{2KmbRl)sb)vU z_++r>+$cMp`1+D2gKxv0?b%l#)sI=JSG^}tWCvo1_KnceSeDJ#Vr6G3Jqj)!t@d*1_pcp4$^m70XmPM(U+-G% zKI1TX8fx9X_MV?AL)1Y@d70@X=S5SA^ao9YJ8ygx01F615n9>rKoj43NUsm8`nTnc zaJmKUEa`3N*GV`> zx4`B_hsTzq%eEYmwf}Av$z#48G%qBG+ehf=;8n&@vdUxCYlxMYz51f!BD)3`;(|j+ z#U@4KIA4_+7q1^;B|2(n-v06q%-_B56L58rkXBGEC$~t^`Wr4JcTX|*>c;5res_H< zH_T7OlCvi|o^f>ftZ#e@yn|GFviq4LFmTM*?DuG4?JX(&>F#)Sta*`II#$%*GsXS( zs4Bxv-j&?YAO#v}C`!!`=r|yEw+cF&Hm%iE4T#KDUvl&(US1cQ!#vMhl4O}kV%3}8 z?mPP^r4`W^-Y<3>-6KXiwsLy8P(3Z6c1Y%l>dbctnafZ-GH`Dw+P^HS33F8%FDx(_ zB7e(2A0f44|CxhPg4bLE4?T8%sT3;aSJWYS+e>;oNKKp?rl1a>caACFBpj`&lk(#75blwH zjMzc6C*y6Xh1AJWfwprDz03hLUech7$eTOXk_*O{RDd&t8*zM^0rP6m(D7Tz)mG)p zv&Wjr6827DZ{EL+01?8rM8wGx^R!0MNIwm_2QVlRQ&R)j(W4nOb0h^@>ce~oRd7Bt=T<~Omc{0cKVXF zvGTI)A=IrRPo(=&Ap7(4e_NTyEKK+*yex-X@$^dcT9Pg|mXm%!WG>F+)EX_SVe_#e z{6pYBMpy<}!NgaibF1~+qs#~((3#59y#Tn87t|d@E-%UKzM~-xuz3x(?tLoQ&`W;Z zl3uH2nUgxfBhVkJqCHxqmMH4762{0tDgteqT7+W9F>Rcdt=|!I$fN3B(IfW5*m6A6b|K069d{w#9vaQ*@7sfF? z+>knVIgy6tasXSUmgHNgb<4vM zWy?F03|ovneubmQYJN3E8QONg1t9iR>eWiv@5q^lbhMLgC9Z&LBJE1%{%@?1o^Az&0DDLN)|+Q{ ZK>ppH$)~5o^JfuNO`TM<@&2ygzwo`j=enNfobx&NIoJK%&wW0h`+=R!rDMEeydV(h7{c7d z9t7fG0%JIs19+p4M9Tu*kzjM@TObhshlA%3Nrhh=0C{i-Yg3+S4q*-{(ey2h)W49a z6V50U=ZC?9Dyw?T0f-L=KqkmrH?gQ-910Tz`um8?DFEj^z>P7%VOW%}9}e_VphpKl z`Ts?+NY4XPX&fpL3DVdUI0CF3IaqPP_~34PVv!)%;Qa&hqyHX`x^)xn37BF*4ews3 z0xnK33X5E+C6ZS-VP0F3*<%n^k{ zBSFuW1{Hvq%ppvS90~c%ag4e694F7R!WFAreBpI^2ix;ny{ge85y2X0kKtLz8#I|7 zG!h(hY^?xewponCz`o^8ALV)b?P>gg-J(}f?hjb&`y0}An?9#8^>J4CQNdf~YML6> z#iuF40=jT$Zhg>f6g$c-V-@JR!IcLX-%*H@IKcel|BIc!y&}Y>3CI~cQ-9kg4$z6Nxz+86w|0tOhKK#3x#?B> zAdutXHR>H+2=8He>f+MUpj!^S=%3o!^lrugf)ljd15Y^=`fZY@b~6R}{p(HB5?a1aXyTqFSP8ViSX9>w0v=Vx^YyWcN1&vMRW zE-nHtT^){IAG&6HeVzAVN(xruHsceCw_!89wasIIiPtUYn_e%n`$%WKZfFn?5ZFID zr03LlZ#v9PFm7{#*zc{*&Pql|QS?*US}ek!Jj~m_Oj%CPFBgwB*dDDLWv+2>6MPQ* zDCR_1L?~rBW~}1`69w%DeQ!x;A}6DEnaRn?JOWZ%5eBVp?%0Go3Xd$xhKGmi>+5Zr zWEDJoe9R!GS>2&~f3|OG|Jd5nl9{2W8X9=#k;!K+L&#Tuy~+STb^CbUE*UCj&1hBK zjxfmTW-^(y$_tlL&KDR&=5h-sw1=$!93qiU%w$(+LJt~luue-9SH69IBk6y8xfBR58fch|Qb8P-`GAHsj|auJ{nOGC@q41xN!1MeYLt00a_w^C_-1nyJ6ubm zTz4=qt!suk+E7CCgXJMb%1cU0D3s{v@!8o~lgr*BvyXg33g?7{g)RLpsYQ!;qB1G5 z!;7yyV!4e6mPaN~U%dkS^|O7qwM9@BYL3{h>GI~~;)tT`uQ0lCwHKwAf$)5)LBsME zIvMv2`7y~XR>)-t<~- z&CSg!+ScKMJCc9FO)g7FN`^L%aBhvRe3O`B_`&OOBGgW z@VBX892yo-=Yn*;+PT}}hLJm7L>h}01w8}%T!IgcjEzCKV&=laSGDX}COHj>nbGOYyT2MOfWmVPN?b*DbhUSV21)-$zw~={* z>YAEa=5k{}4Oog&1M!H?rMbZ}OTKol*fxTm4LBz|`@UI8Yildup&xXI9aT7IiEj!0 zHT?bicOXm{3`!}j%jS8dQK1ddV|FVL(3+| zP%g3f>I*g_%Y9zGyXJKIgDA)Y6K)Cyz74)$bddF+x`^t=N2Db4=+#_+#pn-Z4G6(ju!|N}u7^%2>*&7=hmRV{_zOL{zxf0quzS&hR zOSOCVdJhv{t7<7M!Ozpb8bz7(uWK3)N})#>xa&z7u0Tm8v;hRTD69hw`@DWv8i&Vk ztgV@+t+6*JPdW|xK`kf{1{Y_{#d9JvT769X1-_E}n~D%#?%3C9_-6eAo2&r)J3kZl zM4ssw?*CbBC2sl$1nh6oQ+IZD((+%q2L_UDDoPC3uXnK)($!oi46U&tA?NdY2l@Hn z_ocy)%}Xg13Sq$8)6*yu*_7YqJ-C3oeOr^6px8h}NIGSf+4hKwi$_u1(@FsXuuhX> z(8kcP=#3HIso*zn!u9&QYhI#DzW!RMB|hlrFumuQF><2PQCWmals(TcIR*p`)urEhLgzv(I3#8Y+h!7}-w&CpN2FtOs*yoao8`jRTGL!x5#gK(A zA>XC~dj)b!r@%rWT^hVgPx-v?XDZ?3JcrB&I_n=*%T&auFACK)6)X{z`-#TK9oy!y zOwju@uVA_x>L-~IP|X!sHhq@S7R&RA^aH08z0cm9-s!ICsZr&=V#EYkyvbWV2Mv4i zd7)+m?fP$%Ctk_+P}J$qQd5-VOEi%+0yl=QKd&h-DvA+2&Kn=Kv!L+(LUja=HQmwJ zsQsj0)6mfNHsy8Qkq&J*}UTeh)n17E&4uKXP>Kbmn0Vb5Aj{OU$LBf_WL zKjuQtR6EC48||LZKDD_^XT4GFmY|9zn;8ktKRI*e%qO3<;bzLZg~W&$kjF^p%aE`_ zUy*V$Iax>{v3NYFdIr3kF7(@o=%sESimDh8v2kpN z*Q*h<3mK0>Au^HShEXp!O2w)4kfyWDyFiNLu(m|vZv0W!;|z?A}n|R_&rZ4{qWL1m8uHqT~i0mQ^z^M zGkbq!DDnRUu2+$B*Q?d}?VfrX`n? zI_#&GI+Rh#fOMf@;>l(xzgj0%nqP*eh|3h!zrVg72ER|G7cp0nH5q2Cg&)0TvcYo65EoBhlq*gMsx;;KVekoN7Svzt=tpP}vHB()H z{<=x#a(Ys!R60WLIF3JNJSerp%fZ2+Lvr`nv10~L`su8J#xe%Jy7WeD+c|ah_aXU{ zzpwE-4Pv~{iA;peNfy`uWgwT4;$~v+z<`~ttpK_G&!3hKFHup^%9g_}E-v#)=D3$J zbS*?$p(@pJP|T*n;l+@Tx~R^6N$DG^zinQxnL^i2gn`cI?REh}s0d$VWTXW3aBN%i z?cYMTLtI-3kLhm!MgyjJJYI^>6B83-b=o+|0Q+1>#+yKR)7t7P$dyXHprKLrc|lpb z7aK3-JT?U+&daL-a>sLWbG<~&v^UGk%gyDcSp*+nUqGeY-6tJ{xPtFOH8B$=sj`k0 zy}iA=o4;H1IW#6+LBI*~}Me!HX04x4n3W`{;b9;jsy8vSJf z2keRn3=9OSuG>pvh-;!xo2+bYyKBbA#sC6tpE?&g!Yoxe9NYsCrUeR`+u7L(h@FGO z=YfGo{c{>(y}+mK?1Z0A2ddA;xx$iy4d4F4$d~(GM}CO11})FVw|g21f@M^@h4z0) zz1u%FBl676w=X~J7r6nZsTryxS#Tm`V{xRlRUdxet$K2Fv_u~YJ`dti-eZa1*}n#) z&(K3NdgHCRjE3q^9oOsE#S2aX3ia3n1S$*xR+)*>aG*M$$LTO61wkM}=M)1d{Xupr rGa~=n-3u4^{jb0D7yJP?L3;K3htzBlY=!LRvV%Fo)W)O=?s4}&7gZlu literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-atp/images/atp-powerbi-extension.png b/windows/security/threat-protection/windows-defender-atp/images/atp-powerbi-extension.png new file mode 100644 index 0000000000000000000000000000000000000000..eb02b6627a320ce39870aeca23a12dbbb985afad GIT binary patch literal 24651 zcmeFZWmH^2v@X~rAtVr_g9RszJ3)ho&^R>i7TmRQ4Z$I}ySoLq00Dx#I|O%kpOf5s z=e{-T&3ZFG-u#+gs}D_eb)P!5ch&y(_wCa`vM^CpWPD^02!tvw29*bao~Z&)f>+Og zmiitiap2Eu8!lfoNhrnCh>g%bz}=R3C@zo#Q@VNS>!6qnPIDx%$YUh zF6}C~d4#)Z)L1r}EH}Fh7uC(>tI|2-mZ|nn0#pBmjt+wS`t{DC889k)pPU@>{=>58AkZhL&!jIv zAZ4Nd4ach8L*(j1K})!h6#T$es9NOc6rDy;(35i z0vZUkxi{)9D?eJlBY#ke6zZoWeG#5~LE-YdBID69%(hJa6Dou1t zkwwp$dX^UMFV@1EW%pKU+1}J*(1{tT%H6J*_HM7x^4D`Jk(wi<)@%vyK%g|jtKrA9 zwKXRa0@u5f#cYx%)*H{JkR4m^A0kWlk2eBaM5Vl!#S04_M=|V-JX#O&tX_RZ_&nKG zAkc{4%N8~#`#I60y->gKBVwp6smsM6wdHR zyW1Ic=d;p<1Fkrn!HtW-26U3;a;p}dNma%1i5!a;eFVwTrz8{`0&^G!JZ|+h0Se(E z=YXLg#kyzwPYFv;+a9;qXD%HR2zw`sYe!x&I0elWgRan&f)eYukBU57CJw)^CK;~@qY%OvZ9ejL>k362oPLU4Ih`B zSEof$!c|b`)mm7y52rf1!;>d^_nmR7nw{$&cPlwErcGL6n``|1{H&A-CEtEj^+(&F zV02snCZtDj&&FUf)cCMZhg+7*O6DeBWq0h5bAiT^zTDhwdq(iL=-9wolL}Kx#`Q2T zXrV5tgckSlLXAlxwKpR^3jGO~yq{xcPZu?KsNQ+1+)$pSkvpW<`v)2{MOitzmbwv6 zDv6Ire88ln*L>*omb@~Ns8_mT))WMegqGSR|T1BY4XoKAmX z464qo$VD_}n6tJ1{J^NfXl+quozr)_S=pG^CpyS}`u9bE!=S%W+jWyIf69d0J*aFm z>y?_)T8#j{p;BlV2hK$}gZp*Ls5@G?z95u0taI+GHaxxNk-ON_SR@r@1vq_r&V(I( z&urJX<>c{XNe*Qk##)@ADICUTdak(jodMJF@8hCl*XWzA%`#c6Noooy@oGOUhx;Yl zMdp&zO@}9C;YT84;mf}dw_7)F{WGTI1#TZUhXvAtZzws}_pEi!wgXS^ZegeyzV=yT zA$8<(o^vh|ENf>8t>-`Q{tPhbM@yi z({Im~A*+Qs>&yEGVJ9n%)7}Nl21yYp?~&5-<1$Y+kxSS;TA8T~obD!hK3G7~iST|$ z;69&M>FJy=pfdbCbZwo#Tqv8=L6DU9q*&9wVe0qq<`R05iyBS7CC4t=G&6l*yQs|3 zH5T#kY&Z<>*H*>>JlZ#WJ#~NTNIb^@`_iayzLp8k|<{I)(EZcfX@k)mc5XxWT2W z`k!~{c)oQwf#rVn6DcF0w~l1Sq>09OGVZm>hqvHc^Yw7Ym)$pYHcd_sQDA^azZdEs z1O@UMdB%D^6{8hTW18&-EDMJz-)p&2t=!Fw3oKE`Dhy6qqNFu7Zs_gH%T(!Su1|H! zLm*4ZB;{VFs>z>sqI2Jq9WJ{RshnmTj|n7x6T4pDp@}whRa2uUw&ZjBXwA0V7nZ;M z+|nY;WA>tnb&nid+EpXWAw1d1aLU7}nE!Y5)lNul7)Klw@QK;GA`ed&{iKqW;$qkK z{IszK23IW&1@~PoVXSo*`el#(aanKf2v{0#`1W%++;=MUP0E@?mVDNFaRaKZ$0V-0 zaKYM%vt2{VTgGLxS8j3-hl_h#L4nj?imY`O>D4R(kJfvO{2$hP&z2tdb(Qz;tjj{8 zBY7Pb?@P(Xv+w8L^}9E}tRzK#%dRPKWk~~;Q&pWQRLB?eJpR2QlP4uazW<_+c+}ch zL9@Ss^+R!;}-KhIyMWdM|2KOQOq5SBh*Q5N=FKv1 z+7o!Y4uu}lg^@oy%sBmY}HUIp$Qo5Vf<{jiv6FFI%hA9tosmI1x zcgeS(-fjjS6>kxiE;-b|YVy+b#r1F1UhDke<5+&2_}m?hvLDW56X@CbsH3pIDbUZF zmI>|@cSGw73ei)d!&$)h#1{ABE~>5+fejVta)6b+6U!Y>=|wEZc{68?MW{@x zprftAOrW>>|Z&KSvSjfXx(s;AH!466N~ zxmD$6mGO4mVXHj3_cMw5jnv}r}H`w}rge$@Y36cwb6z#NIqn?E+`w^Gji_gh2aJpG-tx+~! z9G@WJnm0Se9yO}RE1cGs2}ZsS*B>pf>ojSZ%n@9e)&9AmU$TrpUtHRK@+bZ%Iw;U& zdw2FR?;I3s9GG_pQ*Zfj`7I|V=-^bo*KZ~?f}~ZHc^qly zgC9ATH2tj5agY4cg=~5)ZQ6z(#v9dNbLR}>^F4V-oyJZFPZE=A7T^^Rb(SN#k2|te zBs>l;!Qfn-mh4-S=2*wdn80Uwx2`uZR8mOa-A33c{!)Y+dtzW9=aY-Ig4y)-y!SLE z{T!iJwjvCAIz}KmC7s-OQ@M$l$$POTj)`L#Hf#WEgbY%NdsPpVzJF3Q$aqR|n2!kx zG7Dy1t1C^}Jh*$TGYvD@trg7r%p~Y}xF<oqe%ASOQR4~5xlW>upK%ha zoO5&QpVptHW*FbudbjY+QXsxBXx(dyfJDh9;{HI83*6B1!QoB(zK&{TUu+=t&9bqb zMh^Q1U3TC5qhE*zV$OT*-n@`3@ZRPvJgDIK*nGfA;--SNyZTSV@$=h9FR6MFwsjIT zk`-W#X(%p9%j1}J5=yV7xI#AF87W!VM631nb+5|FVwBiDU2;8FPWpZv(dzKX#mdhh zU`F)sB@5K60?2MMC0ps~VlCbDiU2>^etZJ2#Zto@`G{6sBw7U3oXJI%Y`~0%&7)d#??9c4=%os#EiUKzqtFYl4#atl{B3$v`&l@ z9UTpaZFiG<@=;R#dr%H&ErY|KhEsq?!gQjFXFFVK_lapm!-}iQ+~vSB z$W^I9Wx`*%(aA>RWm@_6taLID29NW$ERafqI%QjVrql(tVINWQ_8 zD%`q#L!-z?rP?k?%yYl8DE~_2))X*RRks_45|#CxdCK>|h4}p@`}`j{IZ(%=BUXjpF063E!>T%R1KhZnp2OS&ja3+MlE8&1b?H8ItsCso#}Vln zErsIc9shySv*}>-z`(8MV6IY?&O2q7+@ssP&OW@ezMTLkD{w;Ws|2P^(&UQlALBtw+BOHV4CeDgvNSIRTnuiMpvvc$vbT!v( ztmn@EHPT-zX&5zOM)F=Xd$d-s;LCYlF5<>g+0WwSedCIM+bZu7EyeTK!SWit9-(2G zv2T?-Ha#9~KMe(;U6(HLc^`)hBs*%AhTLb)nH$f}@L{Lt+$YLk*Z(Lg)W^M6;x`+* ze>ka|y{Kv_#y>TjEt#Pm-I$AMzkG5pD3!mLTD4VgtyX?I-*79m(-XmL4Nm#^9l+d3 zp~#Cix8H4EfFq@<50Dnq=o^mm^m!7ieY%7nm*aJzP{mu1TP+q=Lx=br<#~a{k;dW9)f{!LPG_MpTfA ze@OQa9MUl!`m}OEauzs&DWXAEr(<_KBRcT<9ZuuUUMo5UB+K9gwbRS(Fp&ws3cr&p zc=*+AK^>GLBIyD@KGjw6UCq2SVh|jOgXeQn!*+iJMe0x-X#FCCxU}CPu>`TXx=;Ef zOVM%C(|=Dud_SPvX|pwQ9Hb3ZRCkXLie=sMLxWdRLdsI_3PwE%+nO4y!tdqOL@iw+A|?$f#=QzvDs+MWmocyY;2eXrg6 zR7HeHa;;2EQA5erW(mq^6k>i{R{T0S9!A)8kEDJ@Qg`0$^bn~2CXE$ovhT*C=eo5< zbOZVuWzOz{Ty;z#saL`>?*?aYb(P7`mR_az_~S`rr1%Hr4jlLMaGHbGPW7u7?LRBK z&>5$?Hv0Panzmog0w8tV05z-Mfu}s7F)rI@J%>0J6D&RZL*9)olE-ey%*b7_xqoEsx|YM@EqDGhN^s5Wcjk78Ax!(8NAkXO-ZYC&+1oo_ytE<^uGlgz8z%`^8Lp9Juh}$N7u6&{op9?E=}Vp z6WR;4uaXtXNes^jFC4$u5HF;COh!Ch-j*b_wjj@1w)z0ackgy_JRCTxO+_PG8Xn#n zW#r1uTPpJ`ZPlZeo?KlEOJqxSB+C6sQjS|jc=J__YlXXWe!LprwXxxyhmK1TFVe+m zgOLpvuR`?Ox?xfoAi)^;sRxnCYQfwZ$nbpufQBKTSh72o(gi$)Zr3-%1QM@Z2JFCk z{ya+AshUr%BIVo-CIL`Jt`^;)6I9;m*GKn90xD7$W^!q2#A5J-j3dqo>9db4*=bv% zJL1cIi~0jgixWro{YMd23RC-)&wr+WIG8Am8>K2I?9iEAJs7hd)_P*{>U{AGm}{su z6Fre2ftA8-q++i;I(pWEWQ7a#w;Oy3rRZt!^m}Otu2qYA_FTx;?q(mIGTOUc<_q^0 z=5|RhkmhHRx$IVs``#urTEgWss~eBln7Ci_o>~ zu9gxfsDeM{XLk;Bxr)Yi%H$J<3S z*yohpgoI1$olcD?MEi>BjW(M*XTO#vCVQn&`n#CpQU_a>8`RM~x4eZgGYxCSo7v$d z!^U3Yd+87CLN0^|8eEJv23*sWRgyHxxGdn{Lf(!``l0cpkQm&aF>XtY%87~l<^@8YqTqaznjk0xn$ zf*9-^wGO8~bWeCbPtn2niS{^yH^2&nS%Y1<_h>#JiHsAat=Z5nM7of7_9CJMY;h+j zknlP2k2j6JDtkH|HfBa?QkWjpnYBYz>*y$Xt}!eY7|0W)HY?Jbd}(M>nr~X~a31mk zAPT-^j82HxcXYGrYc3P=o9Dzb)BjO2>M`ryoKc=)s;=TEf^**%DT}8(QiNB>y?R?H z0^XQzG4$t`PNmil*7Y2BfkIuL!Ws%(L*o zXTw#Sma-M5!Q{_Sa)E107S_G~@8xfR$maL6;VXa-*K_-&2qzLEgcMV{zrW-@SC-i^ z?UCV|n+i(2TxuI&hq#Qx9?W(B1L^R=@{vAIK8ytxWL6Y5Bo=rKR&u&qxZi2KCZtcd zt#L@iRTlF zsaE5cRbDF>HNdcPm+2FqZ0`p@8$RS)^^6f6pJ)_)EPhR=qg5Fzu3>j2f6ntB48-vD zmfcod(>MLpt4>Sa)=}&0w<14Q6R@KY<&zJDnorXlF93vrGn7(8^Jt_i z-brRwK*P|G?Bc$6%HB=h6=J$|$lx+~PjJS{#%K1}XR=9W|8H25Xv%x;FNm}`3gbr= zenFZsUo70~=o)2{|JJ6bWI3V}fD|JUkT}TT-M}Id~*a1RBf_B~fCR$D^9!(Moi@q&`!o3$yaa6X#1di9A_kbZr_H z$Av4fBvyrX+L4qN4n_rct$(Y%pXzrRX>q_B5=>8%!MS(1d})gs`SV=lo|AL+0w%h0 z+w8Xa%ZCemM}A81VQ=%dNlW)x825!kH*ZoK#$ATPUA8A0=Ax`r!H6qdxZsotaIE~p zC3MWih`lMh&et0{9_h)fKJgKx`D5AE(!3H-U|ZTEpr3J*@NE(!CzE)x=&BzMH0cZy z)+KV}R&*kwfFzyViyefCZusIsc8__AZ6B6yuZprm9L3g833%d=j$|zyb!_!G2en!x z=}I+brhJhusyGA94RAS_T7RgW@mO zOmlF%EEzA%ybIp0liI=MyXtL+GjPm>YBU*7do|~H0KR){*~B#D#RF4@JItT{u~g@I zVF9jHmIW4e+d(Y4a2t(zCp&q_JTn#SBy|(flB<5V=UHmt$f#j)+$h1Lw#y3!&Z+Jeg}8 zo_qJE!SjfC-oyBBnm2Zn_R_*7nPxoaFX$ZWuy+j^>60hAN=iyf#K|NYjvCK1dAB`8 zG%8Bx+`Yw)HJxzM!#a6blstqX*SciMjXty#Sy5NjdB=~E&O0#(s~8=!EYR7WW1t!j z^L3-x9KSZi>-_A6VCkBWV_v0PY;9T=GMko~r5=unejH@}2@cv63R z{do8?x5NWRrPkMSv1{OH<(X;j#Hc7x*u!99-X15sRK`n*Y2E7GjEdWT;dV7JS`&?( zINKmioLB$NX<$co$sy*v_F9oM!*tYg4k5*dU*hJb=T^2e=m$Lcerl*{i~r5ow9wH$ zkqarG;qtAl06Hc6Yy)cQ{Zw2up6RG=qkjLwhv-<8{_2;{_(WO?OhU|c+_fH-)Qg8y zQ_u2^n7rlO&Gi+mHYhEe3pYyP4QaZgrg);j#h0ih{kv=@#^Vv`#m_uW)6vW3NMpl? z?vf`5s|~IJWdf&XE4jnlc&pogDwPz1{25a%w%s^+Ze;t1i=NKvKPCC-r1Nw8fLYd-75JOAtt=C?_We2)f*=8XxDV)x9Wc2EC{? zti3k{uFgrPIUDuh8qjByFem7bWwrQ-GckX^1%3wlHJ&+6 z)n9*Exvg)WsInvml^(P&|G9JH4TU}@Dshe@=XAJ9PaAFHuZ<&-+GUuo7chmhdN|ZP zYWual@1XI)UYs|)7&Po_YT}wzJ+J5tMFfFVi^iY7?~ZyoS3Iv_eAFB7tbqx*G0wvQ zy|m7&CqV1q<`jk3R;aQ`6o+2l*IxyWPDr_c(f=hQOVi2?%tUuVE7CI#q9>i z$<9>m+BmG#z05=1GBUpTo?V!`_Z_YFydaVzf6DVjQmc6-fDZM?R)GYT^~A*NDo4xA);z$QmU|zwh@Qh8I*Yp_3X`M zlPg^=!>0)vDU`Tu1)KXAqx&m-4`oPzzUtDrJ;VZTX=Vw==G1R}_;GTT)P-=FqOBRC z)=}T>Ir+4Y5qp2yr4$tGL6E#d)T-@?uR9r2OA5ZItb9dMXrg@BuRP2SC;;_5Uk(68 z+s#3al<-i`bhxS@juSJoy7J_*BM;${5TedDM|l|bv&}^R@Uo+89vvG~Fx5@%k>OLt zgB;nz(Z*cqPN}FM#I>W_U+v@jVzYtCdg05xB}#|kzt%4bp$u~7hVyD+p_X?U&B3L? z&48M>QfBmGZR=&hc=8MmIfN&zlaNXH$=Fd`Khv(Lh-f$qb?+7d^v85e*!u_Pu-@*M zvUUHV|EdLW=n;=&6Qjis>gnxbu`ejh4D7DB-u7Ekjx+j>!qRnKg+D3^_J8uoh1Hze z)T1C>#UOybG?Zy@91qoNHy;GLVhM`A_*{Zh!?dj{;FtEsjeMe(gY#9Q&4Eb~uXxtw)1!5^B7LZXAfHcZ5g#hsC%@JUzl961L-Yr0c&yUYSymXTuAJqt+O&<3@7CFE_T1QTByMA~gCw|rH}p1o^H#>E`%Vs?R4n5vCa9kQ-^jlrKT zaQXaUc>Cqod{uxwUnxro!Y`h#yO(#$uZ|3~Xu#nyp5am_*w0n(@tHpDb3Sglr2Aceb9!XJ&U0>Vq6-L2RV|3eS4^gk^I#0d#-D*ia zy4)7@eDujG;d{DIuX@YXySkJnpcz5DF&()lQ?~yKZCMzKz~uBLPyG#1Yxh9;*pb(y zTJEz?GEikjQs@~ax?FSAf|Ks!yHy?+J6X5WgSHYvLZH;( zW)kpYhmD<6i$;=`Lk9pt!fDmeQ1( zQ)YQKGqj|c9xX@~D~AqFm~<&@2N{c#w0_|+jlc%8vvE9;HEiCJ>{4K|`k%5{KSSGG za~;yE`WhIx9+c?R)W8A)9Zd3tlO!ECz8h*kQR@b_x@E%Fk`}S$^;yR;I3Jl_hY97NK;byKzT)g zMPpW#8=%txyrqB*^jG^ucO|h|_$XhLHaFlQ_QLr5UOfpr{dL+g>?YXYAB?Fk4dzz! z`4=U^hcFKc5RmRKNPHA1Tm!~(+JHoMx%+m>4-D)at@4d;M;gl_TXv5o4 zqdOL~28z!e5E%03lWdS<3@w$?{r|oHBsVs9VooR+vhaO6rCNY5b=W1^N*%Oq+jzj` zPS&llZ6{hnhL`X-3>PC8@F7Ko zDw;z7B|^akoRS1 zmBsSa(Xl2H{LH<(bvi#9dmKuEEiEadWZKMAHhqn-I6-qeI3I$Bwrq1M4}%TmMth;J z0uqM8^4)2^*?{q#{nt1ccs-g$f_r3t9e&!j!#WoT-Wg%bD*dq znRXM0a@I^mg`5@VVJQO@(_#x19Ssf50BnY3K9$C3nF$s8-vUgI*MAEziwoH_F#dO< z0Iga6^3Av_)t*lB+B4tRvwnbPKw%u`iow24^2JQ%|5hdX1Z8^^fZN&G>1i9Eo?xcw zn_Z=^^`0w?*q9s7ED*f~)G!(CRvGtL8hXd^pO1uR;mZ?A=C_*%!p8TB)hd`Ai1U9h zS%52Lbmhz(A!E&cD|%M+tn{+Qti16^-BRc*d09p0x-_#Qh@OG^%h$;UiZJ3lzRniT zX+5~jQK(>TttJYDw!|#>xxbhiGq7eXR=o~p zxcz2tC9N{kVvwG&xqrj3D~hA*gme3XoKY@`@3wQ_J8DAq9@msCO4u^919=yG<@(@6$?oKi0*^c4l&2_IFdC z>dt-R!sm>{8x5$kRNq<_?F#(bGZMMGSDO4pH&B&x8r*NMa4YQleWHmMD@p!ROR zq+-@`-(CQc1u(j-Z4*n2i#KweivuX#PF}Y=yMCCIFTOi}pdFX}uqlT++klS8qpt<1 zXgwa6hn6eEjWiBsg+&iBsB}KnOMk*rs*-NFB5ZDy=?*ByVS+1uLcLJvPl~5Ar-RD5 z9BKA+fbGw}9fuR&d}|xV1G$D-sq$wAbyqlBXIY9{o<$}DwSIwtX6u9fFqIJPS`D_o zxg;TCSX`6P0e`)!8&FC%Fy=;tiDX+BFoSCMgFI`~sPW;4ZEvBOS`9a{D>od*XuqGA zDVSS9OiYXc)=!(WN&HCyUKLIiZCg{ia6YT& zX?wn${10qqEl&L=n13F=D`TlldYX7~E>>GT1iYod93A|O7a6c}D#eS~x~NAvbscuL z{}qwQvbZ5bX895q6{J;?{QUjeIIiU$ep0wOed4lB%Vz%ax=yQ^40PbOolE;C5TxWT z9N$I)$P4IZjJC!#M?F_#>qPvp=5Fbd${m`|x^+w#U={XFOYlD^-9BKaFiSQ$$uV9? z(K@J)dd{j8O+N3ZCOdpTSmD4?%!v)k2-pMv1(d7BvOFj#!Tlb;c}umIpv%j#GJL8H ze80n7V*dOVTsUw2=oP2#wtATzEIO!vr)G)1b8wiU%AzB;T+Ptz8F0xr8(q zV-LTwzN<&a7mk5J>0s2GL)+0_A1IYzP@(CkyKEP-SPcRK5`wul-eAOwO@&GRqbohg zLEfZK08rYr8hUlk%z&Al|5bCr|Lq2N1DD?-qjpKGR^J>AB;!krMgF+8v239=x_Q#(c zT=PmN$<5cOu1j5|Ea*l{ZvmJ_=bf4GC|HTdvdWZ5117k)oD z86jI^f|$eY_T&?d z_``aO%adfF>e|`vBCt$OIz(g^NMn}7uNC0!lA2|_8+HB-!|Gnly>Tv6yx`OZI$W)? z=7%40Q~{`h&GF$CdHMbxBaIJo0s%k}qv+-w;A#=v8^q3p{$Cj#7VC!cnSY#){Wsm^ zt<8Zy6y!aH=i3^X;cw-B#hu@zs=AdeHyNYxCSX>`Kw807RL9he7I)c zZt|7EnE@5Cv5y?J3;AY_->bY7^`>T1&4nHousG8J zD(For;p1#eOwBM&l+^rf|L8>~K<+>Qri5wE?s6eOkkOR|jxwM0!w?)D;as-l`5cx1 zp-A86|KyXBcopS5(uxCgwr@RX)Pm$5=U8O`Vk?cS(XkSenmWI(8?2T71bfdusX!k3xbb6b2WodCX+#I_QCwq-;V`M}Pa)@q#lL&`INrfn2 z&jzg0OvL=4!4A=*;iZ*G%vYqfgnRIWD3*ZlxOdl|f$aJ0Ludo38I^uiFanHrgA?6@n&+j3adtXP;-lmKzF+o{|-83bk`sIjN9EFW)by0 zkOhjDgv!K+hY_hrFX0gSCf9kxO}&&QG)#Dde*jJ0koIz7NoDl;c4GNJ=H!qJRr*Lo z%C@;Y2_#yDCyttTGsndi;+zw`jrSi%D+U3$UrC_~PWpWRA)Jp?F;Uq-(*c&-wPGTN3Q`@Q~1tzn~3T!4>IK|(Jwj(w-8b4lOAPNg3 zV#2kiX%$JRs5tuy3rM{&BhS@MBZ?FhXmN=8!Zi2S$X|s8;}?&!7YR^AMt`YxlP^)V zMz=L*=M-5h2%N~ylbg$Z$G4WV`<7ijtL-dbixSgjQAnzQ2lOd_XQFI0cz@!}lg*@( zA_n1MdSu`Ed*m*E*)et+uy{E|gCD^wRuL9b2wo_fl6E*^+sb1lp(!F*PN{HUSs^wv zI{J_zxmStI`PDZvKoeWv$H}3e=%r%&%}3T6`+*xt#mT`4ABpT(ak7ZQhbGk>N7Nsy zI~WS7aBL`@UU(OpE&p&o!gta&{L%1tuwLN>f}GHnj4MMB8@FPr`)8qri!FfqGvuxk zR((I186i7pp665CR5?BjoMK(p-LY2Vt)D1feHs4X*B+1RU*dZV7dm(^@fC03hWNUD zltf_D-*R~kDrS8rW+VG{Y)h*jBBB!K$*@D95Qp^K*T4+z6;yjMP}kUX^)4?9kdd*w zSifcAR{lsm2_K3&LxhBa^*dj7)qgkof;<>0RI2F^FiD%k#Zrgk6GRymtREtz zm>mlgg0Kk)J@Fgm8C1)|4Vm(GOM~?~)Lx715!|pHd`J0~-M$!=HK@(9`lm?4$d66b zh?*VrX?lC2m*rc<`xvZJ@Fs0#=RjxlYoE4f5UO<2(w%qE&Rx?qe^%x!2#-dMkg)KF znpZa8{@6Ud8I1KBfcDg$Unm)nybaP5=kw}po7D1Pldl-EG!Y|{#e>mcoBO>h{Kz5n zVcY2EChXg&x|+yV#7ZGGj9+k0?L(EhG~e0)eX5C&fUXo>RV*#Ap9BpZ;5(eE5sC+7 z2}3%~uOfOnVFMe6<)>`E`~})A(rd&vxyac7MSb1F zJO?9|>h6(+NlCmIQ9^B6`J7|)aAc~Bp7dxLlUH#1#}#0W`_Le!SykX0noJIv3_75o zJMdvyUw=|Js+sBiBRUn86{4s}__kqYy{YdNFkzj2__f-?ps$Qy{)KUj5@6c{aY#r= zv@=YBKwl>@ULpLyI&z=jm;+*7YCIPR^dq>c3Qo209p^ppTAfNDJi_G9FYi<>Ah`2( z9xk^o7v5wGzXBLq|4;wxb6JdAMHtyHH167P`;9TVTOx9@jvc7Vl zc^)$rn+uy9SwGmQ6pY-&dAXwu+^xl}cI6O?c8M(2&mh}EOUH!#<_$e9lR`_JL1cMA zS_YeQqs?GRR>JRRp_YgZ!Yv30Ey4|m4C4eVtGFd4p9S^aFkogOz5@N?Uz~!F;KLHqWKwtu0inOv1xQG_&;Sq?9JOb49+~&%OOOD*>F5GG^n8jT2>7xg8tl{Be+D7p#!5-E5$TmK^eC>JlOx=8w zEdnSFd6CO}qO&8ulH5>AfO}JihP_j#$-><%W)y&^a;x%P6n25V+y$xe@jT4l}!sQ4XJRi3Rc- z5g`mvhLF8+NQ5S@J56&`V9Y}XBXNuH4&u6M8v8H0_MWgXE^wsy;xvB5QOJYz{g53aO|U;}ft4+*vNp`*k)HYMAKe_aSFrj=o2F{P45G z2@3Iu>yb&n*|pz|ktHr=ZGr>$$4}<|W`cTBK&3|2G)KMj_3i+CGP*9_jls!2ynCaWm%^77=)kqr#ohu0w>4An2Jo`Ue5({EI?*N^~U&L9!tk@Cs_9cfSW{JDXaf& zR@@cBGvZDNK+En46~D*$|K|8PJ}Ou^ppve!2?qo+Q(n~aE|dQY3ws%OX;nwk zG;{RiEc~Z%{%-sHu!Ewc*AzE(b*n@fkULrXD5;0WsxU%OhWSPHCu;1FQ$C)xtfTd+ zkA3-MEMqN?Dh4D#s87Vn2k>jBLIF*i5G_upyt85qi%g;7+~%z#b?Ea_00A@5T0Z>Z zIlx2&ZNJ;bw0 zpC~pO$Q?T0N6LjL2`br(odxTpxCVa9%K8@6U|^126mBFIp-qP>?_eg;nI$v}WDqHT z0gk>yqsT=*x!v3Ejxxd6dj~QWrJG$QgxHa;6KoPqSlPy!k^o?6aG~`qS#J_yNq-St zaSFG(35uH9QU=Vf?y>*^EoLb+iO^Llu-NAOvEItNPL9Jh{R zMLO`V_iLa505M$U0}>nqG20R`^0(&k^R9!TqaSG}htU@?t?$2^M+Ik3lB7h- z{AiR1V2a3a!sgcII;O$;8w8NO_mBlxSqx51u6QP~_h+|k{~Uh$8kGwxJ@p_Cx+3>d zT|B`wsRh}{(HLH@aLdyoc{)|@>=gx-M=kBEBrgY6yv>H z{p<7M^lyU(2)?p#Fis~G$tM;?9|J37KtOX85y;l$QTO#fO9puTCu9eUB@EZin0217 zRG}KD?8tPc;DVf495&wpIY;u!3W?Eovy;`4h*i}J?-TNDyoAs2by+%4LX#4vRfGwhNe0qF<4U+sV zWckAW;(vXtf$4~vhyjRaTJodEk2X{wV9Us<`sx^FF;hzGcmFa>aw~KSdmqY)Z0{(4 zxSi18bZ1&<7xHB)>6HNPf#%qoX5g0~WOA)ge0`dq>D!^?p)329EwD+DUHG$z;{Y%a zL&>bWkV}?EklfPA$&+(J$qnY+dkB9p3|(X$n;SifN9H z<_vE8KCAETDJnBYoaX(v=YG3W25NcrJ)8rbe(oV-la`+`Utfnwp;fi#5s1m>jiwfv z1;-g4N;{#ggPw(hGGw>Z~jHB63})wLrAlsg5c_s9n*42!npkT z@-tAi3g^qucI(jzuid2x$-C_~{J$+!BWU|WFeAxyGH#osqS#44w)+M0x`)6F<4`%c zn6b#aux`q1-_ue@q8*R5s;F%)9Zn08qwI(CFU^ z-h>VKM@i^$OEgQF&&2{@nmVfJlvTpjwJGBLW^t0jvzF|o--tW;Nc0NfGpK1TQj6(y z3D|ivZZ^N@^Ojz6urk05zY-HN7gN`LExchNJK)kcRQSS-{|y8p%Hq-RU0+?1+=+$e z>?1jx95YBTk#?V!AZUX{982imw;+MRz$tS~ z{*)xPh|TsF8?$~`xvF-B|6v*QVOCZ0F(g0+BHEWSD^%a$Un-x3`%XULZXuX9B;G?- z1Mrq4Cvyu;*k6-XPia=;yuMKOd2>L?P)IIsT}~enWAtp4}wsm%>7^fAd{ZxukFy_g#0D+jx+%$ZlKFu$GW1VzpzOg3F zs($CNZ2X61V;?L`IFTsNI%EDx%GEo)f$ju=sJ=r%pEG4^{B{7u9HJWCphEq9bjC<~ zD0qS0PR?j;6}Li4D<_K=U1zRE%UPY-{Qqd@%7fYb{&iZ_9o1H~C@odBRaNbTq6@Xu zzQ@6Mh1-FxTzo9~_b*PXdD z@4SD!@0s^=-p@Jbnddy`Imh6Y!`nYp`R>2N&6SUGmDgot#MH6{0RZA#s1_dkEI*Qi zwV*u-%K5vJX-4DwOlu~Kvi_9I{>O}XFig7Hu>J&#!)hMUVtL*E9vA*QeEIK`DV03v zMD3Op@*1o4g~xv6P<2rLydvK;V@vnr~c9@3x{s}DEyb^+t~DU)x3{Q8!nrJoh1Lwf!gWCiVWr$(xSPcNJ>Ur zMg{}zk5XHdXcw|DAM79We=Ogbi)1+-9TkcVWwMnRcN@`j&4jV9Y&Ag)|JgNn+tKXG z>6*7yBC7R#Ra_C_MFi9Jb{8TFp;n574o9Crq3qfQFz8QQtmOR|TzFZ&J$NytGc*j? z-D{t=xs*17&7@uyj=kbViqndlusQQPo8B%7+0BeUEnLr2WK_L;p_AOV=uO$fEPydp3e{&JQobo$(BJty2YJ10~9Ic!R)pQ zD_OED=eUjAGtuG*SLOEKLK?L(do9tH$Mwkk$_m;JL2&v3R#UpA*{G&K2()&u zL3U;EPh>$Oof*ZrDVhD)KdORuQ1r(YdW+u`^|A3W;q~dmlqcVY!3AzQhJRf>s-pFhWAX z_dKd7%VQl)K5P?#$m%Rlf6z_S-E(?Ctztsb z%6Sz#hWX9sm6aZc)ifaV(Fb`abAsbnIWrSZ8M91{5OMZ&_k3w6oDhLrab91AT1kUP{$Vc}vBV~1+$6~J*aLvJYU!+PHI!CpH&@k%?Ax*Y5E(+a z==4-i_XIIEv}AdgO4iolGPh28WQSkR4`F(CxJ9voe0eA=41h^UrYEaPd*_aH zT~u}&+|ITL7g^HqUWw63qK(~R($;K!NH3v^ZD=HOA1k6%9J z?#fi@G=Z5C=LNR)wokN#-T%4T6N0)rn?|W)EsChCD4ud7eV54pMp2slrZkf`X1g#j zB{rOvWF*APB`jQ7Q*H5-J~g?jb7i8!xJ2(O*xPyE$H&K+Gs0yA7E)8Lb9Z{CY+T%m zIXWX`>PHE0_aqm2@NcqTH|Xs>f}SR#UQphbqzedy7BQvF8v>sDxK#5OMpbtG;I^@q zgVw3k-30Ti+SyAR4TeyT=zth+Bu#6Tl}-~piu_3rS6M2AV8(@`LhdsYWpiq0ZnW55 zxUc7ZXQvj#f_|t{ba0hEAAc1XUD6|HiJ2=!RP)~&$%R`6HaI2RU6bW~oN_wfo z^`kWEz+uiIo%%K_J9FKykmU!4Tp3}4iMpX`W}^oHR(WUGCa2PIb=36BIl*jf30}Ev z>2OOF&R;U;%C*|2G!A!g_Oi5RHbF|^!vFoA^%5_Pgz=?dY z0j(33RpCE?)_K%g6=W7b^>Yg=@*qMBHU#CG=a$f(yiKYuvS0Esd$inFWGcQbN^tb$ z+~DU)zOq=_#1Gm1Q=`S+V>c#3BB!$+34A###N`*q<=+@j+ekUXX^Kdfs6-jc$iHJ_ zS(A&;h;@8)=q{W)d11D+hr>fYAer~=$EJyESF@7bqR6Cc2Ff&QjHg;w1z$$A%bpll zg$!O0a>ZIgF&)?TN%VwRow;kq$kr-~x%;aQ@xXnGHXYlWc;@vKt_UcWuH6F1$4RBbXSXYChP z9iB~$bK$!R8$gX)indA;I(@o#eBh4^b(rOZs2#e-Qo;ES{?Wq!>wOOe-x4}Q&6xAu z3%PXkoLRM@ZGIrzpx;c9{dv`l>AN_0gSySon$~d@yx(PIjk))rPsKvRxRED$V;bixWsq+DBu*Db-r5YU6ydBBf?VEKD4f5 zj1X&Ij<5`wfJ^O}>hRzFehB7`)ee~^fg#!f!0B}5XIF#JZHh+|Oj`2~Pa%&1G>gs` zOr$PdA4AJ)0si{)5xe9wHe|u^VUPB4n&wXGEq^#{wnGE7yKpauAxD&ef~|!rA9d0k z_I|e-x$}q#%ahwE8+9IO^o`5 zI1Fcl;$Gi_K5Oz2eqZ0mER_}=?K+1h?YwrEKq3u0iRW$XYw9n-2Nqv@_#+Vubq)@6 zy1NK7XoZ4dIU>Agv0MH!fES`Sl#~LezsD53jS^74sg(Sl)D~NC32_sAFR^|zcPnWq zr!5WGF5?(qw#QbQUoJK) zp6GvuJ8`7iRXkU(+UsJ$#9o{x&L~+CMcJ}FQY5rH4HlF#(-W6Rc=ZXi1)a@|&5 z!43fK$A%o?;zNJ?E~Vx-9oq9)EpW}zxjyForLj%T9X|Pu*4(i2-V}nTsh+Ew+GH_S z1Y*0h`C3E2Km$!f7YDx`?ACZmub67*I-DPG5)zUW`9esR^vk>j(fPQPcTTf?k#`;mMVC+6Mp_sX*k<+r} zE5d5Wxd)B*xPXCy0Z}D(^WUJX?Y+B9(-Bu&1;+G-3|q&mCn&~Jz1ISkxka6SWum$- zjMMDgS zWIy0|f!Ks%4wl+>w4Z}<^GZ$xoi!KW)uFPcl}#t7A*Y^*rVS;kmwQl%-?K>u zk_ik*{YiP~MnAoHmAxzQy5g?RZCZp;5d@gF_CxJqwQozBkzrQnn2%0YnVF*%)IH#C zA({)-=AqZ|d?Iy<2-WDt7&iG98_f)8EU%)AnKrBF?Fm_cqj79(utdx%Hz#UmW(z35 zSfUlR33V1gVUj*VZ(X;dv}ONCt?@7)yS}3n^H|pGStc^1+Moi zZuNKqKI?s3_RK10wF%# znd*Nq@rCFYzJG!MK_W2=O66v+{jmLx$v9zvqu{!O2;x)G<;Bp}anNMe$cd=)A`!u& z&$>44X+uZNLwkMJH1FWleQptz?zVzv&>hl`Q(s<)l+`ccU!9@S`@4;mTeXNL8FLI?i>I@OlarL#2oH8$O~;oHpb*~aH( zP}}-_S^xIbf(jnVQ4}a`92yajbtQXa3d|ad=~u;<73|ADKUu!PzIe~>)?n1IR~~0E zSfvl%?_99xtB|JOX^7b>6NnhJa&^G2{-C^sxtHgSyYW4?3cM?C<9^ayec!h4 zzb|wA9^L?5-9F*R4C%iZKJPt$7iZ>rM`t4-t*l0E`%%g;`#b%x5qS?~qB$SU6$bsR zc(!-pd40RWz+AvRaX;Ly2X60zQ-MbTy0^TL9++@j+_l`w0O<|sf0Hv{`KIU%u^O~I zgd3g6PUU)hS{F_)-{Iy(SBTIis)=u`5)b6apHu7edq47V*_j?3@}({_9HsA81W`G1 zeOJO`mv>n~ey{tR<288SF63;6>qCnnlv2x+1e(ED=DH*WQ7JaU4IFG@_jjT zN?+T&y9Z8=tQ>vb7M=mZ+!n_f48di_>t*uX=6=%-AJ9y{vZSu1J+MC8=+d@>$P$!R zs2Z<&eYNtt35Z|Hw?-&JL7wljUW-lF=i#s8K_$|N8?NFQuM=s~^5^xm*<+}@6w_!5{*gDM3B}#ViHCFVPa$%B6Mr+Z*G}l@1Qee3lzBRkB2dY#x6txtYU6ehj zp*<46BSd6;P))z@xm`2PD1*3juzMFK;gNu@*H6D|fZFt0O<|y-Ek?5I&e(0GzT1 zgTWsLk5=f6Ew>Rp_-7q1^e;R=w%FOb4#N{x4g#`|Hpe^GEJ!dUp?PlZ-3N1SYq0~I z#l(+tn5(N3R$A061*kBWaiQY?tCRaXhyDdy`zsjvFQo4Oi~S!;i0c&`8$icO&MbZD zx|GP7J8ZIp0(^Yoo<=73jg5`dZQOMJJ8SmG0(ELs3LZ9z1);jaKD&Cf%ic2(Zz<#sf( zp3$4Z=2Qa5zyr9rOINbX6I=c3Mv%_Ns{_LeKJ(hHf~>7Xmkzx<_yz|?5^GnGE(MR0 zVlbHGS{oYG?70eUu|m>bDgHI{LG$QS^vDbur1!5VJiPp z*RXqfV>WH>)Nnn#f1>24_QD1Dzx}y92gpMx z#BDfYmRH_XW;-fiwjhsOkxMjNCKq)=EIbFp>dkC`&ofqsK~CxJYjZG2!65g~qQ&Ol zWlg2CdxoU!uDb)DWa6Keo!e;44Db3JCWh1{FOgE>t*xNUI|oW0e@mCW*HxDo(~$Vs+A0>59BC+R zdE#zNKF-adkKMDl#n(za*G_u2`n4^?V_u8URUjSEpQ76Q;8R`wQ&uN8=`L%j!=&bS zUF;gJ^0DuUR4wHt+GXOO=||U3c$uKNRrOqc3aQ(dmU4FLd$v2GPkq)~_o=UQk$B49 z^K5td#Iu3KFSUIzr-|1p%cnn(5p82UEu;O{MR(Ng&f4kd%d$qpS)Ve|re>uPifC{mZYh@WkMhqjryv(6e)ip@ z#MARk^a@J^+lXQw-d9TEI^u&?b=yFe5hEodw{iH2jgQ9SjET5X?OEjP)!g{XY84xE zDbH7pSE;GzN=u_!V7ZZRFP2KboZV}E02N!04cOUSpin4}AZ(wH*SHlZT}aCCzCnV0 zkgI{EEZe4E;|r~r{rOOe-}cTm35oD~SUesddGtVuU5tzwfZIysP`UG%vUv`4d_s$%sG=xUqiZas%}N^2*JQcb@45kE@0^qW6~+E1 zLd?5(;EL8#lN+Cn?~Xy=Pv`$Vto^n2@DFL@Z-S)jwOkk+9yiWf`iY%l9snK`in9!| S_;ZdvK=+QJPMMZt@V@~(wiL4f literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-atp/images/atp-powerbi-importing.png b/windows/security/threat-protection/windows-defender-atp/images/atp-powerbi-importing.png new file mode 100644 index 0000000000000000000000000000000000000000..3b20c9a97d47c7ebce134eed595b8039e3857368 GIT binary patch literal 3198 zcmZuzc{r3^8-I{QB1_qlVnX&rvWuE zUlBNm?c)bEd9*PA9E8KHU9kWl*1r4kWowElfS?c#e)+r*n_mVvxi=MinDQGs?}D?$ z<4~a(pp^W<8iYh~AO!Qp-oT*4aOltwKuY+y3W$sB;(vsO-NK;#Q8?h0_y-dZ75j~1 ze384ooMFJQPLE)1>+@2)t6`r#sw7+=66Y-g9g|M$<)*c(Aekct7STi&FD@V;I6 zDiRZd4)F(C6efruCiKsKJm!Wkz}rdS{7d^IG&tBd1P3gC$Y}<#y}L9=G%m;&crn|r z2AY7wVU~`ByqOVO)Yl0Gp?P{*R!$KP&g>TBbZp0CF=uXztEhOMj@}z zM8CH*@|t+OAG)UZ>8a|;+vtQ-oj(t@$q?fJfNkebr6Ub|0_xTp$#;8H4KMaYEPDGYisi)?g744 z62+Bbx7Q|*L**3}6_u1$Odvpf)3*%w2T9=(5u{raaus8Iz*NOCiJ6%hMbq#P9MB)@ z98&ZoUKRjih|xkotOTTRYb&Or4FIOwGT}R{bgOMy`rOFReK=xQ4YN<7G|7grgK2jF; zF@Of$T5?d1+}T>mA3myVRsqDnl}Nqtb!K^Saj~bTN8Dm_ei++pY!lwTCI(!Ow?QC6 zLPBD>-A2!zJ$q==v6lLGFMmt?DbYWec-NeZ7cS)KvLqH20nx*4dO5kdy(9|@Lqq%m z`(1f?dCAnRceAr0&Gi64(i0uyR5U}QmVf>D0g*^eP0crr2ni0JDP4uW2hH+0%nGk& zR>`ujYZ`s5+mC8HW9nG$JhnifxZoOnV-sG!tYhi7w4iC%M&ow2+(H`-4Gm8qK=G^z zLk0#i;QM1fM9hS5lvOm|P^**>-q4ehlE2?{!xfqwL4Puu6i z#u8}_6bc1AZJ3{5M>teIHFl}*BH~&YckNfXTXigWJqrs9SG{6*pZ!T&Jf_#&aP2?< zEeRDE$Vs=@K8u~WpE7a_0)3`d%3aJb-XMx~;`PCJ_N5_ZsZ{E4O`-ZY##l00OI!Oh%bIp=Tw!4P4KEr>nv8!~jD|_4)7R*j zT6djX!^@mVIp9IcT8}|DC}4{ z+FIkA?iI|euIHVBTrPKraacy?S>KCJ#rs)eB^n{$!;oO4t+1kWR5s8PzuBDFc0KKkB6`om)W)~?Kg(UHGp}pEkA8*8fjsOqb*J$8TCoi(xnR>a%mC2Qok}5_oaz&n? zlyIi;z2?*FBc!sT{DRP%+wwo7(V-oSt7BeP0~u6u>W zTHH1p*j4l^0I=lsASowTG25OGkVRQ4Un+w9uC%5fu|h!exh4UiS@v6WZtvunqG;O- z=Q58!%NUiz>6sjluF7HB`)G>GE9WvIYQDgT_ZN)%^5tR)b7S3)dXiD8>7lfACCMu* zC5G=c-!}A~I!BdJS*TuEm0!O4dfp&T5ppygdjML&-|3^z7DqTb1slk-$FvWpd=FbK zuqell3~UD8u{3HKGX>)57$2?&#pQ<_`ELVPHM@qnTzs!$8E8hevk*~I^X}TWc9YQY zdK0&?EnMWvc^H`RW-(*k@t-WEuzeYX$3mC4U=AKpGBpk%uibU9)42gO4Te55aJo)B zZ`Hcv${ij0n zLWe?Cl#|oA$lMVByGpGR`;$#4av8>6SM8l>&SeX!pM$EX9sbH0-|E^^Qc}#a-CSM2 zvkWhnF*#LQS-q3S1m%~`Wp!k3b|wU`%J1Y<+e$4)b2uEtvYux4rF(^8GKp45H2P#d z0&8hb@xGn{8!+%-2B)fJ!QChpu_~IHnuVBva%YAg)&1pM0sjhOoj+^}HDLGi4oh_Hj|Z(&-(176Lb3u`%tP`-{U;km!M%a(=(f!4KK{Its!~Ra2;t8@8hdfOha*8!{^_zg3pu=qLPDvl$ zJeP4(VqkF4>598aK7#AJ$uOBhcd2afhoRz0SC_79BK#QkPxl-WkC8!>siSs12-2U zD2;c)#{mMDEF(_i*87Y8G-s8fA9-^~^e?vkIip5r&IHNKf1TU%Xthy&#;GH7^6F2( zHF6nUKK-|38#mrha)}%IDyun4^auq71#iqp*QLDN$#%ibPOE`81hbyURxWh;B73+Q zrF$HcKmE#1{S}#fFQ7xHTOC_FJUo1)I*&0L? zYhXp=8FTX)JOu2>aO3X}S@ihxwU8dn0WG@!Pu+n@@7vQLCIA%7>FpMc-<9LHYFSqV zRt3SP=pS|dLDJp3cmH96n?%{Ag20iOo%?g);o%Kwdw_!GJ22eOkEI(cb5V-Iz`3}@ zBou+L%4&>)8JL)un3?^;gWaM|)ciNTn@#%@tzfu0R-+73$Wi+Jv>r7S6 z+epzTV>^Xn7 **Power BI reports**. - -2. Click **Create dashboard**. This opens up a new tab in your browser and loads the Power BI service with data from your organization. - + ![Preferences setup with create dashboard button](images/atp-create-dashboard.png) - >[!NOTE] - >Loading your data in the Power BI service can take a few minutes. +2. Click **Create dashboard**. You'll see a notification that things are being loaded. -3. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. + ![Image of loading](images/atp-loading.png) + + +3. Specify the following details: + - **extensionDataSourceKind**: WDATPConnector + - **extensionDataSourcePath**: WDATPConnector + - **Authentication method**: OAuth2 + + ![Image of Power BI authentication method](images/atp-powerbi-extension.png) + +4. Click **Sign in**. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. ![Consent image](images/atp-powerbi-consent.png) -4. Click **Accept**. Power BI service will start downloading your Windows Defender ATP data from Microsoft Graph. +5. Click **Accept**. Power BI service will start downloading your Windows Defender ATP data from Microsoft Graph. After a successful login, you'll see a notification that data is being imported: + + ![Image of importing data](images/atp-powerbi-importing.png) + + >[!NOTE] + >Loading your data in the Power BI service can take a few minutes. + + When importing data is completed and the dataset is ready, you’ll the following notification: + + ![Image of dataset is ready](images/atp-data-ready.png) + +6. Click **View dataset** to explore your data. -When the dashboard is ready, you’ll get a notification within the Power BI website. Use the link in the portal to the Power BI console after creating the dashboard. For more information, see [Create a Power BI dashboard from a report](https://powerbi.microsoft.com/en-us/documentation/powerbi-service-create-a-dashboard/). + +## Create a Power BI dashboard from the Power BI portal + +1. Login to [Power BI](app.powerbi.com). + +2. Click **Get Data**. + +3. Select **Microsoft AppSource** > **My Organization** > **Get**. + + ![Image of Microsoft AppSource to get data](images/atp-get-data.png) + +4. In the AppSource window, select **Apps** and search for Windows Defender Advanced Threat Protection. + + ![Image of AppSource to get Windows Defender ATP](images/atp-appsource.png) + +5. Click **Get it now**. + +6. Specify the following details: + - **extensionDataSourceKind**: WDATPConnector + - **extensionDataSourcePath**: WDATPConnector + - **Authentication method**: OAuth2 + + ![Image of Power BI authentication method](images/atp-powerbi-extension.png) + +7. Click **Sign in**. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. + + ![Consent image](images/atp-powerbi-consent.png) + +8. Click **Accept**. Power BI service will start downloading your Windows Defender ATP data from Microsoft Graph. After a successful login, you'll see a notification that data is being imported: + + ![Image of importing data](images/atp-powerbi-importing.png) + + >[!NOTE] + >Loading your data in the Power BI service can take a few minutes. + + When importing data is completed and the dataset is ready, you’ll the following notification: + + ![Image of dataset is ready](images/atp-data-ready.png) + +9. Click **View dataset** to explore your data. + + ## Build a custom Windows Defender ATP dashboard in Power BI Desktop You can create a custom dashboard in Power BI Desktop to create visualizations that cater to the specific views that your organization requires. From f0945dfe96245835caf021cdc10ac248b35c2af6 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 22 Feb 2018 20:59:38 -0800 Subject: [PATCH 004/138] fix link --- ...werbi-reports-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md index 8831bb2a2a..9267ed14fd 100644 --- a/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md @@ -81,7 +81,7 @@ For more information, see [Create a Power BI dashboard from a report](https://po ## Create a Power BI dashboard from the Power BI portal -1. Login to [Power BI](app.powerbi.com). +1. Login to [Power BI](https://powerbi.microsoft.com/). 2. Click **Get Data**. From 6932c98890e743ec6480254944f5bbc7d3a845e6 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Fri, 23 Feb 2018 13:00:45 -0800 Subject: [PATCH 005/138] adding multifactor unlock --- .../feature-multifactor-unlock.md | 100 ++++++++++++++++++ .../hello-hybrid-cert-trust-devreg.md | 5 +- .../images/multifactorUnlock/gp-setting.png | Bin 0 -> 39725 bytes .../images/multifactorUnlock/gpme.png | Bin 0 -> 114371 bytes 4 files changed, 102 insertions(+), 3 deletions(-) create mode 100644 windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md create mode 100644 windows/security/identity-protection/hello-for-business/images/multifactorUnlock/gp-setting.png create mode 100644 windows/security/identity-protection/hello-for-business/images/multifactorUnlock/gpme.png diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md new file mode 100644 index 0000000000..31859ed9fc --- /dev/null +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -0,0 +1,100 @@ +--- +title: Multifactor Unlock +description: Multifactor Unlock +keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, cert-trust, device, registration, unlock, multi, factor, multifactor, multi-factor +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security, mobile +author: mikestephens-MS +ms.author: mstephen +localizationpriority: high +ms.date: 02/23/2018 +--- +# Multifactor Unlock + +**Requirements:** +* Windows Hello for Business deployment (Hybrid or On-premises) +* Hybird Azure AD joined (Hybrid deployments) +* Domain Joined (on-premises deployments) +* Windows 10, version 1709 +* Bluetooth, Bluetooth capable smartphone - optional + +Windows, today, natively only supports the use of a single credential (password, PIN, fingerprint, face, etc.) for unlocking a device. Therefore, if any of those credentials are compromised (shoulder surfed), an attacker could gain access to the system. + +Windows 10 offers Multifactor device unlock by extending Windows Hello with trusted signals, administrators can configure Windows 10 to request a combination of factors and trusted signals to unlock their devices. + +Which organizations can take advanage of Multifactor unlock? Those who: +* Have expressed that PINs alone do not meet their security needs. +* Want to prevent Information Workers from sharing credentials. +* Want their orgs to comply with regulatory two-factor authentication policy. +* Want to retain the familiar Windows logon UX and not settle for a custom solution. + +You enable multifactor unlock using Group Policy. The **Configure device unlock factors** policy setting is located under **Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business**. + +The policy setting has three components: +* First unlock factor credential provider +* Second unlock factor credential provider +* Signal rules for device unlock + +## The Basics: How it works + +First unlock factor credential provider and Second unlock credential provider are repsonsible for the bulk of the configuration. Each of these components contains a globally unqiue identifier (GUID) that represents a different Windows credential provider. With the policy setting enabled, users unlock the device using at least one credenital provider from each category before Windows allows the user to proceed to their desktop. + +The credenital providers included in the default policy settings are: + +|Credential Provider| GUID| +|:------------------|:----:| +|PIN | \{D6886603-9D2F-4EB2-B667-1971041FA96B}| +|Fingerprint | \{BEC09223-B018-416D-A0AC-523971B639F5}| +|Facial Recognition | \{8AF662BF-65A0-4D0A-A540-A338A999D36F}| +|Trusted Signal | \{27FBDB57-B613-4AF2-9D7E-4FA7A66C21AD}| + +The default credential providers for the **First unlock factor credential provider** include: +* PIN +* Fingerprint +* Facial Recongition + +The default credential providers for the **Second unlock factor credential provider** include: +* Trusted Signal +* PIN + +The **Signal rules for device unlock** setting contains the rules the Trusted Signal credential provider uses to satisfy unlocking the device. + +The default signal rules for the policy setting include the proximity of any paired bluetooth smartphone. + +To successfully reach their desktop, the user must satisfy one credential provider from each category. The order in which the user satisfies each credential provider does not matter. Therefore, using the default policy setting a user can provide: +* PIN and Fingerprint +* PIN and Facial Recognition +* Fingerprint and PIN +* Facial Recognition and Trusted Signal (bluetooth paired smartphone) + +>[!IMPORTANT] +> * PIN **must** be in at least one of the groups +> * Trusted signals **must** be combined with another credential provider +> * You cannot use the same unlock factor to satisfy both categories. Therefore, if you include any credential provider in both categories, it means it can be used to satisfy either category, but not both. + +## Configuring Multifactor Unlock + +>[!IMPORTANT] +>Once the you deploy multifactor unlock policies, users are not be able to unlock their devices if they do not have the required factors. The fall back options are to use passwords or smart cards (both of which could be disabled as needed). + +### How to configure Multifactor Unlock policy settings + +You need a Windows 10, version 1709 workstation to run the Group Policy Management Console, which provides the latest Windows Hello for Business Group Policy settings, which includes muiltifactor unlock. To run the Group Policy Management Console, you need to install the Remote Server Administration Tools for Windows 10. You can download these tools from the [Microsoft Download Center](https://www.microsoft.com/en-us/download/details.aspx?id=45520). Install the Remote Server Administration Tools for Windows 10 on a computer running Windows 10, version 1709. + +Alternatively, you can create copy the .ADMX and .ADML files from a Windows 10, version 1703 to their respective language folder on a Windows Server or you can create a Group Policy Central Store and copy them their respective language folder. See [How to create and manage the Central Store for Group Policy Administrative Templates in Windows](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administrative-templates-in-windows) for more information. + +#### Create the Multifactor Unlock Group Policy object + +The Group Policy object contains the policy settings needed to trigger Windows Hello for Business provisioning and to ensure Windows Hello for Business authentication certificates are automatically renewed. +1. Start the **Group Policy Management Console** (gpmc.msc) +2. Expand the domain and select the **Group Policy Object** node in the navigation pane. +3. Right-click **Group Policy object** and select **New**. +4. Type *Multifactor Unlock* in the name box and click **OK**. +5. In the content pane, right-click the **Multifactor Unlock** Group Policy object and click **Edit**. +6. In the navigation pane, expand **Policies** under **Computer Configuration**. +7. Expand **Administrative Templates > Windows Component**, and select **Windows Hello for Business**.
+![Group Policy Editor](images/multifactorUnlock/gpme.png) +8. In the content pane, double-click **Configure device unlock factors**. Click **Enable**. The **Options** section populates the policy setting with default values. + diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-devreg.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-devreg.md index 57a3df8925..866c851a11 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-devreg.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-devreg.md @@ -9,7 +9,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 10/23/2017 +ms.date: 02/23/2018 --- # Configure Device Registration for Hybrid Windows Hello for Business @@ -495,8 +495,7 @@ For your reference, below is a comprehensive list of the AD DS devices, containe ![Device Registration](images/hybridct/device8.png) -- object of type serviceConnectionpoint at CN=<guid>, CN=Device Registration -- Configuration,CN=Services,CN=Configuration,DC=<domain> +- object of type serviceConnectionpoint at CN=<guid>, CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=<domain> - read/write access to the specified AD connector account name on the new object - object of type msDS-DeviceRegistrationServiceContainer at CN=Device Registration Services,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=<domain> - object of type msDS-DeviceRegistrationService in the above container diff --git a/windows/security/identity-protection/hello-for-business/images/multifactorUnlock/gp-setting.png b/windows/security/identity-protection/hello-for-business/images/multifactorUnlock/gp-setting.png new file mode 100644 index 0000000000000000000000000000000000000000..47823d76a8add15a4d82c01735578dfa61dab54f GIT binary patch literal 39725 zcmcG$1yo#3w=LSiU4naXg1bv_0wF+ff&`b~?(Ul4!5xA_aCdiicXyY!JKz7mbMC$4 zjPvdpUJOyN*DO`CXNn;0BD4@|0pXCy8(go78Vb4#nAC@len6_u!Fscl`ZIZ>5vrA zgk%pii5c4I+nQS2n_5|dFyKkafp!FNyQr15i>;}#i9M(ob%+;eMfuxmYp4tE`p(|e z!Vtu9iwX}Mfd?N^v@)`H(zP`NX<5I5yCeP`+|*9rTo>qS3#x6aiUOM9z|E?vyQxACwQV1haz4gd#+XB*vitWYVS>H+dZ3ccGsi z6>kq0N;e|HY$CgMPhXF{Ute1v@(pzpdS#U0PZdp7%g^FvqA9hVo4sfGP?$i@&1W5m zWmcpxjH|wrPD9KT-@xM}5qe(B4L;03tS74&c9(A3Qn+aXzQC}r^4 zOK$tOb-gVl!>_BKpLV$X)T$2{iwg%j29lUM1Rvz;s2efUmuis`hF*zUUx(f{J+J>c zbM-ktCpb5UL^rK_n(Q|5I`HhDb*6mf*V{)SOlv{4D+o^~8<=YtOg&c2>y*+>PApf~_qe$9LE90c zQaCuM#l7Qi-U+N`m@!tZ_qBrVADPIU8p?}L$Y>9cXuaNkZ2h=M6hFc9Hq7VRWc6o6 z*>lcYCjxmw^jyJZ_*1PsxwF-iSCHaqdSoq(kl5rep>_Sqca|K68Ed~G}gad*hXI(s-D>U>`R$+0fkCX&bB$9Ni+ zQ0npeP@^86i5TsXFuUoYrW+)CMN6ERHLyNlNiIcULxX+MdB#kRC3WA@_s-isZ?jXBd zMf2$jQpsEHwtF`!BO8{#o=CbyVBr?`j{54&I5EPeib5We^LhnSA>J$1w5hW0xqK0A z+9zIrb|%CncGMlf#1L$<$J_Uc30!S?gkG|nMb>=TqZO>Tg+JvMU|zR$zv@?7vU%iQ z!VwZ{C+9lbr%vzrgDi$=-WKR2k0O(3iU>9{p~nQm{#e*m_TU=^A#ri7pI(hlW-S3v z&o~M!%L&$VFOmer4<9K{JkQZ+Us{l16Zp=%2o@nHseJ2dmr#=xSr_=riH|w*z01UA zicuZse!TBmk9s}(;(i<<>SLQw)+<0;u@@rxXNV~dl25ZPoNOI6#OZuxUD4Sf!fJ7C zizmm6sY-XRc~5Uv^qTvlGl&e=NX?fxj9-sTdiz%&mW39hv1(4P z8o~b3js&At(0&$% zscG#7{z=!~DM?RkmCYv>t=?)mrp=VY(Yj+!48i*Nz(vbPq(HA%YUgI{rMmS9vMQ4s zQnKfVvl;LP$c3NzwDmFygTz$ZuBE!A^U~(@GA(q=>R|{;taj2x`C<2|U$E&h%%yLY z>0{tUZRZ6Ro%zqer=wa5yAR!Wx!azI_b!*`CvA=aJOi#9aH@IGQBzN7r&$tCSYON!xpJ1k) z{~q$gZ|wWH=)~agpL@R%LR?!)waxmE{F_aW%@&BbFZ)z&9?z{dSNOc;daZh2 z7teT#pM)g5<;oxveOI51Xc@Ji&^A|oC+amodo`b7RR7pWPB047Ddu3 zNa%4O-V`(YE`6ecToAo5IbqV%WIN+H4*3jWJTx6UygZ+!Y?DH?0DPft@U&q`hu;&&{aaf4Am? zUEdI2fR6zFXo3d~0V-U7XgKp*vpJ$`+G|Z-FKHJyg*qr@h8MMsF-4;m=qM!OE;q=Q zeI&MN3Fzv9P489LMhoQQTFZL#&Y5L2+kW7XJxKE|YP{M2c}b-isoBh>y> z)`g+N6X3Hw!FRaYJ@#4v+j7aUDN*0G_2?zFfvbkP$dp51xMo)g)r>0ny;yfZImAn5 zZ~3M2xO!tu*$Capa~m_ziE!$KI=7OsN>{4rbXqSe&#P*W=SJgPX6ZRA@k-)B1pcG1 zYbLT}jv~R;l)xU+5(VyYJ^c&4l>cW$(k!J6H)+uY9V_95U zvo`k!y>-tcjb|gTj+@=vqw5pfgLg-bkk*3SusFm0E%DO!Y;+xLRw-?}ErKLMZiRy7 z++}Zc9z#xB_Z@J~tAlVhjiV)}`Oi`@)E=^awq6;N-BMG7ObK=F-?!Wl!FoDsHw??2 zC**63Ju-nZ2;-lT@4nS5{@DUNSoxagTp9v}7pnWN|3QT0z614-GQ6M`*2z{Sltm`O zzSs1HXH1Rw)4cjV{isr}j&AG|uwQhz4Ga3lcd3+s@}u4 zob~H55GY~UemXv;;=W#CXx6)8wesC^o;+O=^o_XVf_}uu!+b-C+@_DTx)NhIt*>2* z;v(VXt*0WBPSNq2j6Oo!*f_PE^a`65vy;5^@~7vkn91_;zfDv33X)MR+hFqYBvD;; zC(8RiYeV2|!*td^gtYYMZ1HYzs((>fEcOHBq3)wN54{!hJY`n@VLyrFleM^XbTI4G zd#5Fz_fA7y0{a&_Uz~99-=gQ@-^M@s?HpZLIs+h)5T*aE!cy+6mYBF!W%fI=tYj>m z(+^;5`aS}l2@EiE*{PbqpJONfL2wGv`W-TVJIG$XM|RSF06A&Dyi=(73vb1bvKvpk zC2yCC8noHgpZC(-&b@}++Rie-$TT?oLTfia>5wPa2mI+jfa)jb5a2US?th77|HmCP zG^+TLl9QfZYhOFfmLIX6c0Yr>^J_R43c+U#wh!Z7hxQI#^&kdWA58rYz8xR75I5E4 zc<{F>Y7j7?2`+})z9<|!elJm04;5TJlvuCJPy(IQAfHCO-{Lq$U5)HGmF%W)WctB= z`fy3daVe`LELbd=(?Z%24wGVuWt}D2+4&PyRN`ChpPlD!vX@a+Q?0R71Qv)-Y^+?-#hQEF;jr zen70g&8jX`d!DFX4E^#4&uG19y=ngZtoqQCGmNQarh)fRQcS^8NlNO(W|JPVAcq% zoJmJ0@4D8@&7vCcy4xgqw0`bN$83G6aDWHDET1p((GyOIZ8B)w0tck&q%TqQ_A_9K zqhN{Uxa7$wl0n`ou~*oSGY+bm)#C|UnC#ADTHDF6NAN8*$2D11T|U?qLweMOj~R+| zC|U5taySFJ;-(B^Tj&G(Fw(w%C`uZZq#vWQ+_kVY+`4U-xNXtY8fcumCL>+dTj8=d zLk%U8>fhg*N;N7)g-M(Hr0OzU4~wG+a%T225N&Je@%Wk8u$#@0F18jC?(>e2yq*(U zNIHD3Ehows1GbT@1dFWc-9pKMzH`cQ${?PGmi# zwRCQlVw3F-Z+#{hs&iz@Td4-g4J8xI&GDg}-s#xfq!6S&y2-1l6=>ao$3lSDrWZcg zBDMk1aORa4o{XVyNgaHdZ>=kYYQBNVsKw{$&g3dIjVGYWbDo@REopXS$J`4Z*G9F| z=Y$a;&JnF6l{F?pmtm4j$S1S}EOn=4F8!?t;M?GFCJ9%V1gl2X*b9Zt-(W@JG}uDD+D zYRG5)u)iNro>P_lgkG%>(PN_!feiZL=b%MwpDmV{P&_QK0kUQFA2;N44e-%E=Dq6v zP1W2q$Q75J5Ce9lRLO~NSKRXCdWpQ6F+kQ9dz?p$wW!7;uP7_9wl*H_gxaSLM^F8v zM++{vjU~Nn%{MsVkDFxy1Mc-G}y_fQZq8WX~=d7 zED>|%Nzx#sK|eegmXP@=^j4{=O-HAM4OSd~yHB4jh{{I8!Sp!21x|*j#F}0!haZd7 zKxe&&S%5`+LSoq>fe@#9E(e_*NpHWssV%~=aJpDj`Fn``XD0b=olFf$VH@SOylSZt zlKtTTO1Mvl@1$My_cT*OhCZEt=iu!Pr+wtEF*4FSw8cVJz${GEbu4;jVE=HAgKN%eX5X{|`BVKJ|DW^MJ1 zClCJWnwkUGbAOi6bt2K-17mq7OtnVUg_g~^r1_{0ny3mhFWE}{%!D+3iI7XJ{0GRl zpNp%zI6EGDTb-G=|D?B1wcgXS8t<$fuB!P-8X0a1tw0Js?U66l-QXNO=;Z4@J5d*> z;(Tj(*;Ol)p{cD#FA<-Ycliv3K0a)?AflGW6LyP4upPm63l~|+5KCc+$c|B*Jjym# z>4Z2^<3M&26x-`d8^Hk?#!UBq zSQ@5!sL4A+QQt_^b-eNpRc!~9hQ=(fYyxzJgA1*PlOs){I(~tfkm(nhnXfjQb>@uC zNBlGO_(goZXtw*BHDw0r6`zZ>89w$ItPbXD`fILe%Li8z(fL34`ga`=2y2eNu`liu z+d24b591+36{ddIy2aXD?76@FSdzM@X|ZLG2AP|XY3oSDSqPm!Ca0fTM5#y`sb6IM zPvV1+F26@Xkd4isHsP7hGiTy3s^xZG|J?^$P zqt5$#Nywk=P9f`-gX=ciZbMfB4T6Nl*wKkr{dm=^r-Ybi-w;IVIXfpYna;zR6BGBa zwuJLuQhGO#{IZN@<(g2LAmk;~1~V5E%qqa5_E**MiAQS|ezjCI~R*i#R5bhEiJ z1v(XKZEAa~21aGsU9frTgOED!Utdq{)w&OX#s$89RpPkXQurBac z*b3w2MF8W4{+YA2pX0*Xx>GT51bw}_wHIMKc1t3YK(sSynV!XIWw&^2=j953s`$XF9>5gLGuBfJpr60 zNPIzq?g?{jQ83HySmtlE=jp;ZaSD6!UowN&BbuGCKV-h4q#W~&o13^nsv%yb(npVLWr!^A7!fj|g=R6dTju@PD9Y1Y4^;L$F(MO?TshaRzP zA5gtIawBv*01b|twsaks5JX1AWt!tNI}QbAm-jiQtJGk0qFTg#N<|}F4J~o*PKSDo zA&F3nV7ADF9-X@0yrV;O=Q0JXvmqPfne~A^)?&qXnqUz$bdwug_{zNg^zPug}U`s9CT6zBaJ3q<38=3TeC-n%btk|@@gmg?PZL+sTpAl;_~?47+QtJRSit_mH8UR=Y0P>TJP7aIyRm~kDf=A=%@huV zU)fYMI$xhPj))i)(?*1Cdh~_g{ACD8e?VnOsG|EX{L<{ihzM(c?-mfk|4aH{r9n>C z@DcFLRD4jOXi<0y_F#^)?0?tx)F0FvPUD&~@&Azv{kLT4|GvWnpzx0mTLKZM9|a&x zCLOFBw-gxKp(%@@6HR7U@T)2gZe#L4rh=)OdwO~RULYpMzFz#bcI1a`;@KCmrI{~V z%DWkho5Bg@LzdMYTJn)sITF}u%`4$6dQ`i>RG!bQu9Dc{1q1}JB#`QL$e@>JHv`lJ zaA0;lz84oc;$W7Cp-2y3gbx2FHj}F)A}VULD+FV%-i{g{AAf9Y%sZ9OX#;4%B_ZLe zq?LwoW6~%J&E)-XP?I%f9;kj-So`QC)?82Q=+<0bO6*vt%YaqGP~AZ^?%3`y-C0`a z^$y0Z8IQ8$1AqV`0hVFv0-Q0n5=q9nOtaoMG7`m^pID6^+kCkJ>uarLK)0Sx@20S% zBy6c>y`GXoEYt})Y-pu%L2*?U`{}!Q6xX$L=e2WtNXp#u2ett)#P8fZ|5o1Z^VSXk z?>@b3!PrXK%f#)DmUPnJeW;@3Rk`FhMoS?d-5QF<7WQP!5b^oN4M_6-gBck3xE_vlr;V`Ia}|C~C(SX@nUkTb4bmS){hlFPiyQ}LM) z>&jW4|Lr2Bg_|447%N;<{u^kT4}R3$R>4U>BeG_+^xn21QtHEg{hd_!Z z}%V`O|F)tuaiskWTS0aEwk9^nh6gJH5AB_9}fbn zR}gN&7@bpE;ukMPL1=u%Ji4*{TLp+~~8&hzL@0a`GcbJUl#H0)ojE6A7M~ zZKZ4#hGd0b@o2V+(e@;rmNj2~m#swp_>B|oF?2oC7VEbrCUetVhE!CIY4pe7@kjC> z-$9|Q<$M@gle2Hu`|WM^5Oxgm3XxY=w)PIY8N70u+7R|mAM?0zX>u6Zq#X=ep}Um_ zc45J}C?z{PJCQ?~J^lVtoz}?Tiur-dr5Tw7%{v-uIM9@zq6xAaCf?}ysv#VH!xM7ym8FZQX0$85Tm5`fB6+7T zcIs&6kUMy*N-I|>r-}nsM%ud!YU}IqI5;@qe^35EUx6iYN824uM{QgVK*Tv~gGAk< zsQ@7_^AuR3CNbdO^w1beESu-LV8p8YWp@a*F$D;RT}0ECBcZ?DfmO}gLW|L28JC@s zDkFurvb1FUoGwV@*f^OlN6y8is*?#&LK`tJ$mCDHRyDR!+~IVe)_3S})dhh`Q-FY? zZVdV4iu}=ecQ_d~VGufbIIkgM*vM~iyQ9hF(mp;Z@*)qL8=qiZ?lh~Jg|?mRYc7)p ztz7x>alr|Os?odr(|28O3~qn=?J3egdLIm{Cv9T@1Ix;{E8vkKLp-6Gr%rD64c{npJW7Bv!U{AB37f{xQNV&>J4SP)RwTgNe+yEru zfYIFDoeNW)s-kmRTZQIH z@BWd<$U3`ugJz`y`TtSUOtJv)4Ib^k*X;fWVJMvbKg|qaZy*q0Cz78(qwEYP2LX$P zuTBKMUYn0e;)S$Or-y7!-7VvuKr_oefE+QrxEHv}~vp2fkP_ zT|CxYU0~APZjRakw<52i5;*_In4EzD+0@iDQNWFJU|@jRc!Ut_d^a~YX>)=2!O>}s z;y%5Y9nlBOm_V%4tVVth@^{ns#V014q+rW7V4+wSa5%tZWn+W}8Lb)|}CZ$zQoZL|LuhzU{L61zDkbX z^9ejV7~&!%GLFv=*UWNed!i0$iSE+7Lp51BwR2q4nT-e~5h`~ox!FxJDG)5d*pk^7 zf@zjY)$#r#@Qz;0dFKYVOnu5Ic> z3G()O>h(fWf1NJ#!~$8bcR=$4{sf=$b#^&EtX3$es!K`<s#LoK%fes5X7 zjXh`1S*OW3l*~06O#21|;DsMCZ&p7P6E&AiRF{}sjamVi2Okjcw6xp)hO0n+OL~v- zFPPOg(mR(mcG8f*xyC6Br8@W=4wQ;D>)%>6Ut`}KF9!WF9_={12A&&0Xq>CHB3W@g zWB@v_`tmdx#Rj^ZS-9Tw0t*7ScneX9zCuecUQ%8PwHN>S=NXQ7=}F2M@8sb4)W(Mp z?&(afWJP@NCZ~Eosc)BlHF8@1+w#os=&J(`l}Gg%;EY(0|K*Hg%dn}wRG3auy=FfG zU-%;I3{JVvd#Ja>(KiPJB<-%Jxfl)_P zl>TU%Kq8wl3fR54-IxPNjuh}Yz=BEu@NQ@5m!E*!%{O;<&0I{b;#{M|;fXTWx#z>< z0j@hfQGHJ3%~kk<4&Z__XLlVx29(&u?yX7?GBGMXLU?c@c=kc-o)+jNjxt_&7NO!^6YN7Yz*zzL}fTXH`z(Fo^%uhq9c% zg1o;1N)m!H-lMnMksMtg9Et(3H!e@H??&LQ!qeYH(gX*e>%-XymoI+JMAJOWFTYV+ zOi}h}PT%H>B4u@t)BG}C42@pV)79cC)Q}O`g=j3H0TLkotOEbxTg+Z)DZ<6ajb^t7%u<; ze}U?i8fyWx>T6|kIl_JhQ)ohR>nPrF)oPUO{f!eqpbl+@|9i!_03NNcujlr7u%9~y zP)o$p(o*n14Uj&O!6DUZU~VSVB1TP;CrF(5Ru)vxLg3c{XW^tQHhrfAEfFC=jLNUI z-4;w9>I{7vludd# z381z9f}r}@$WU|GAByx8J&sp35H#4e=Hl7a5YXHEpd&EKMS+RqAtw+oi6~dWgp#l$ z9U?6~324p)L3>;Aij$0GHDZD9f-C*y<;5Uq&G&e!##CmR112*(F;y2px0U{B%!w#oosk=y-2%Q6Gr)Po5c!7x zE2lZ9#C0cpQ__GK)1u*QKgH$xFeZw+J}ybJT@(jJMBM6e8nnU z(P<1FxA+GudZ_rA+CyN+5#sQ0wVycX{B+)n9NZNI&$JKbRmv<4PlyQe+G$Qv~r~Lkcpt?_rUraYYMlF znI}SRq7YH$c8=*JQdHT@lg{dvJ4x+sJB9AJx|_SgB4kZ?=2^1nv~;*H7m1(_8+cyg zX#HzV5kJzbet&o-@!tT4Q8qcA78puaQ(o@aD?Xc6MhWMRCQ`PS(C+5!m2vK`V4$g& zGU&+Ep8X@E-BC*X5rK8X7m~W7)k&KT{Tf{?<{WMDsRG{9we1fqY59IcV1Zc#hsTr_1rR_he#p9PRIZscNQ^LdedoabFn|)huJ#n zjK?IDJmj7A!>kty&-vZ~m0wn7D-8Aa+pLVt8Xx~?mg^wYGahMH4iLK^u$104vRIR= zuC(Xkn$vhY_qXzn);0lb=l+uqEq#FVdm}k>@47D_15AJX`r_M;jHTqsNOGuMo zFZ%;the=X-(~Wgv18Zmn;p6%soBR0)J!zhWd7OPd_EyVoMxgd9p1 zq1!^4YyqFa+Y6a{;p_?WvW@zMPK0B`gCgUEwcHqoySxecOg*88gWn|{C`Old&L{O5 ztf;dcPfJBDo7j$C0s9!V7Sl^i(~%(vuQb(jN5zCGSJc;H>_0iUxTvcHfj#xc=Ed?` zl6N9xUV_tof)fY3|B&JEk786$mC}O-UzqtS|F#BT+u^^XlUPzI<}z7jB>fuKvu{cx z>5?E#R@7+Oe|w(T$u|-9tQNU}1Vza*n$`aYm1*77++`9{E@lR8OLt1Jf@E+NbKwu_ z9F+m#C})VpQc!{;ydo7!Z3d%pdh4<5XkZZ?q&g3EKzpZdO1CYhF@G2(6VDpH@EDC| zc}xLcqge1EWlHgPcnTl6DN^Hfra%&XA;LFBgvkVZph1=*Pdl_)>?VRM?53;w4Rgq= za}?2Mi_(rWZRJ`-j05I{j1{&QtJ>d$gTWvpTSu%>7C0; zSA4!xCUtZ;7dax&9A&*bWE#lbmq#3^7w=d_e} z>V7v=0{60?H`s5Uyv!0Y`~%|g`E7e&(OiuTq1IJ|@9Aq^qKQ$4b3LR0gE1xfw(f${ zopOJy5Bk-K(0l&j54j{*jru(0t7BtnO)gM5sO zDxe*lJIn*`lZ}6pN1jQieSZ*3O)L*68pOd#!v^qE4XFg^jpN13< zXRSTRZcn9Xh4AgU04<)08p-n3ks33ZO#Q5du7vXk!8K@I4U`+%tKK32Ur$9ZicvKG zubJH*0l2K>c|dY0H=WD_=j+4_5&>}{yS$wF;Q8_K@%(Nx>hOi={@-$p^}kBw0qX)& zAZb(6eiUyo6#OFR<>gf=diF0$6d2}!QudSke_W?@&hxiq%7DAY`7hG^g0I8>mwLy( z`)`0yXd^(AgX0N8{wcnq6a(thgAH)L{iE-|%PT5EzWcEi`Wia8`5#>-{&N=!s`?OV z$2b2f+WHpq>HmGd@xK>v{hN|iRT;qk&2#+D|6f!lQGu7c&3+W&K(G(_XNrMtv6a9$ zlz1^(0NlUZ_?wjZ@9Exu%Lo4l9T@WbXDt{4=KoQI==&pG|KKT{eip-I0eD+(d4pfP zhKvG!6SF@Ux}A}S1)JCg^R7F5mHFvp{T?U)arQ5>jNSX}dVD=)wV^y;B^yR%Km=E*e8*&kuAAu-Rl8gfOlX0U)UmHxsgQzprn zP&AK!?r@mK6k0=Oh&e%H9i@eTuO>^0Rhf+WEun_dw^V|ei42b=mDqTV_NV0FEUHKT zFG)QaFY3LcKDUrw#qPy)oMWRQA@lSizu9VJGJQJ3xnEFEREo>|5MuGa_ zq3|a)RTpK6x4xKem&*2^$aG*IV2Ic&;u{%c7gVdRPoxn@qCn94wVuamM>0mi$`&9e z9efbO^eePf7a_D&4h1lC)85;aE8F5CGw~2}%Oqe5`IUC1B#pn0?~&M4|D)dwm4$*U zZsJz%^6Z4XOte~lqcl5?q?2dO`MVSUR=6+TG)6-o_eZ$!JOdxxEdofLTbOo|vtwxnu z$0tH^GHL#Ewg#|+W(9Qf?1iX*q_6*?_)`cc2`A|rE4&V3@_J~s)K|j{dQ~>;BW{7D`JbRb1 zK{w3G?V%96HQ zio8$B0pA-L%3CI2>XLA1HEAOZz6zWlgebeht7<#lHHbX&*z?`9+?*CU@*DI%rVOzB zAmZq^LA5NCUan;P!fPqLo14}WvDP$cmOpb2f60cqciA=?*mB8RAcQsQXMK$E*gnfu zS!f>DF$GbQZuR{9F08$^IdZf>&458z-IEVRY617*lGsbHk{}9lHr^Q!ZGYvN4Vu{D|7* zM}WdXi}JQW>3zcy(Ke$1ik=DVI(PN)7WH-3I>cebKjZ25srr@k4E2W$8K)A zsfs&JGFpP&7t7BVYBD)*e~1*Dd652IoQIk!y-4`2olun?R}({`Zm90mHu2Q9q&! z7d;+VjBj3y>)qKZDwxCxN5?QI??ak`cq`NAfFgP?i{>;~I3J9#+`f}-{xP0{Qx|H; zz}M7<4~7td0p02gD}&1CDu48xh<5lNX*H+Vp7UShGez*fO6iD|ThuxKvHP*wq9!Qv zdmbmc!EZ4`BY{FtfW@>MZSq{jv@E{7SJpx(4#*{xUVbi0U5}K@5fb%o(SJJyGky6k z$Ak9SSUnKob=!*o1qpiL5Jyy~Z-nQ4zp;|aFpExfS<$d7{G=wCz$_A4%25ybK8Lmc zt;-QNNupG92^t8YV))g|&jl9RQpIjnl*=c8#XpTf#XDvd~0FQdH8 zx1efQfhq0lrWa_hcOBz-XP%s6C;Q2Ex+MxLpB24G{4nTOzK(Nwg2{^iSXb+ zc-Q+2PfLzaPKtAt0HMHn==wCF-=Fs+qPv>94|BY@S z1QISwQzMXZ7vyI7X?7fM(Nn13(C!MCGe0L(=OFDZ1zM!m4`iQTEO-%E5X76JO@H!Q+p|IB+Wm0PVF zPG~H~FgH;lkvwOqTGay4iseEZnA>cX$EgSH?2>3fc8fc?Wkb4a50l26T|Wtu_Xs7_ z<#Kg5AuRU?u_P#n^korb2DIX_&lwJ$lTgN{7(4qPM+TMK-XgwR=|0j)SPo$|E_Raq zIz~05&++S%S^#VRcK-(mOV(fCctH^|2`zK-$t9kbk%o{-@?qvN@OjE8TeOk>hM7Bw zXU=5v!?fonZn&-+)zFsK1Ep9oC?zd@lBN1_V=()v3^fv^iYLzq>OWnjGX! z%bG0J+Z2eossZ~J%`(Z4v{TL`p5{CdaAc+3^^ty5dSvzn%%6eqFyNRzK~2ASb0H zQb#T8&?~!rLOH!0Jv~cPeOghiX>B4uZ2nP#p~v0Y`Pd}HX_LyXvd_EEdDtxJ&q>>p zhgEwE412kL0Jk7yo)Ybe6rx;$9PQ!z_=O+49T=K~JKpTkaM{F|tGS7DO{VB35?n=(6lzfq~_I+P{+^u5R z=56F{&-sIAG7+5VknXI(-EaGTlC#9wZ1tgck2;oU-hl5N5YT1=t!T8Db)rr~=!^t? zcWas6O3a3r6H9i%CkDurza*TlEw9P0c)+%5z6yLa54gKQS=)W(LAbj8)@YtOh4wOk z!Mt*>4Q0pwOzw}WKg{G6;02JX?}Ov>1K1(fW${)z_CYEphZu8XkuR-xtXw4B-m3TTBXW3)kx&1XOtDb(5<#FuP!NcI ze96d7PN)V8JCLc^3-Z(J6WoYfbK;xT+-Krchc2?L3*g5OTm_wyI)6+~%gRx+Jkorn zNxF4N3&UO^sPt8ox>zmiLu4_as%!vVlDy&^-cY+MAE78KUyZfMnn%AQ*S-)C!XCX zF4esJIa;Sys5Q(yaxC~>=1III(*5^aJFHIIT-^J4@4Ny0z>7eHc4Fm87~(A@Zf@`A0!hvXEugY3NSivMk0Y*~#Qu34{Q zbrgF^uj={mnaA7GSEDD$7Tzi%QJrU48pq%0&l$F!K*fr}#xLUJ#~dfmpoe82p}v;s z*H-`&19cAM=r-uk`@JxVsPSU=Df$gO0QkjTto^RTxVDRnu3!uP2$Vtuo95KCwvt2% zy*T$>obn1OFYk6~$XtLkAh{?6w43LJa_U$e zGUl>p)+5rtNd&o@^5uTQkW(p%_SuT8C^lY~mGTN%JF`NT;ym(uRt+By7=p^;b1E@f zN_LYnHT6<$B3lZd8&9vziKQt1<}0P3!aP6W1Aw)WQ`Qh(qOm89>gM%g(#7}|lcaNx zl~UQM9z=e`b2g=moawtzDbgAjAZY|O4)w0-)N>-~=zJAP(?nZ2Y)MpGUBtrlJ6neN zdH~8i?6>cK&Lm`|aU=ghzyUror7i9GYva*tr*Svv+>i;r(~PSN04jBP=KCHCPe3ah zHqO{Y`jK9>o-m@)AmMkMj$)x^-q_0y0N^JXO_N98#}%S^of%p;Z*vVs1?VNaZ!4=X zV#dR7FUCej4Admq^efwF#XtzL%N;t(G2)$`NAIMvPC4DX{^2%BK-efxq*Krtz zDz#AXtir{j9q^)Z#D!%hl%VTHRV9c>_QZquXh$}Mwz=zfur#~$S%_wOc=}qV+e;Aryr3lwR z9v95v@~3tey!`yp1l2v=Brg@ZVO_6zJDT>ztLQp;;>E02WOY=`;JhgA_wKHkiA8ui zs?Vju@g+@lB)cR@Lq@6JK*Ldx^oyvWE%tgyDE{ea65QPl50POLAG9zMTnLV zR^MsvGE+o?etlwQuXt zp+7o-i8%Q$KK+n!-@bSdEFwzkWWY;9lQn+_+$VZ=@y#>s{&` z+&kBLTq*&r^kz_iIWxkbxHO-+rkV^yv7%JlvMa+aBI>k@nkmHnGS^+m=?kzEwLu;7 zexRQlWA`5(W~@u%(l0Roh{;7KF((ATw4z^A#^ls@P1dQMXtpdea@M89_9$?RR1e0Z zI3LC;f_I+K3wlUIe@S=<`eTWP$Do0knlONBxsxwg>_?zinH>5}ejb1LmLs0%hkH%= zAs-TQgHj*N<+h5pZNwBJHQa&IgfZI$g~%$*&~Kqk=_PwR4a_r>c}NO!Hmt5 zo8z3i6#kr|u3Gmtc-h^#X{%9}8Soyln49@kMQ}+;3spnQlx`9GdK;?% zSJZ?-%n}kP^Ty{~Uk1U|yalb3;MTKD;76-_C2_CaR{e?oZ|f zg$vdH!`XXBHPviIC|_ks4jqZ#M%&)a67hC z$4R|Yr_Au#$`>EMTaV8sv#-ui7U^sVP+w!rk&0}bXV z+f37biMlt9>L7W6*w3;==LtQAlUr*ZMRalZl06>FTt^&Mlg@jIEwQ#b zg!b%-e3pM{O>r8&CiqssxR7yd?|DV;SkFyd$fTf`sMX%vYusUCy}c-jROe)Nyux$$ zuW^iW*fn+$x;UbBbUJ4PS>6>=sVwL&It;bb*i9BhT5NxZA~r$&ajHU2FG8Gp#qyv4xW1CjwgoMZB4&f z|2oc+iHJU$e_XKjI_?ScWYajS%=PDJ=aIntq^(V7SG3TiRuJ-;5!^#^4IBDa;4PF%>8JJ-N;Er80Os$|vatFyCqNO??@XT$4r*Rd+49;P3jANjj+h9~`aU0+yFQY;Uoe4jXV=UaxPgmaBGtd@HM0ds3_)IVsZ(O;QCzzYPIbkfzp;;`debL=P?=a0YLkLcxmj#NCZ=V9R~ zluC*XI6~;i$L;SYk2jQhGXv;d_=oY%5mz?HT<>1pa~>U2c@9Ux4v({5u^Za4goffX z;WEWPg9Gf(ykT#r>>ROQwh5NX)$gQ-Vk2X2jp*s13&3x{jCCag-QDf=pHKj~5x+Si z_la@tCu2`VXQ}Oj_q?MU{0esPo9rW&KhF_P|ExYD|Mv-Li>5`KS*hCc3Ij7Of-b$$_7 z<`@8v10bm9^&_pUSAJ<)_u`kW|?FRW&he#$98nP`THaniAiW+Pzz05qp^zFqBf` zaKb1=N$2ZU(ev#WqQRg*QrqH>9&ThZ==WlDM)+-t{esPBPary_y1E35N&Z&zAIiMC z6$B_uWfxVZHx?1RBlCTDg1lAE7nBO0t zin=^ccxZ4Corj)e3%rAWC)FNysPC`HU;_!ZN22np<;}P2P17@=Ci=xwD&CW>mO0+$ zG1rQOp2QW-GYt|`;ombl8WVPJQc2FZm|yGnXP${PmeII}a{WN-Qbztjj)HNfPt;6v z)GWU^w1~CX@7wIkVHfYFMZheTs;X}s(Mjrys#caK%!)r#gPk;#4Fa}hFwfO>yQQ$5 zaPV#03LF;V?#J=$X#^vN5nQMSP8Qa6%o~W!2rZZWrRHFPWS)LDR$)h~YypS5)Im3R z<3_rjOR`wbmK?qy-`aUf?zs=3dq4yg4G)u$8Wccp}jfV9dG8F`{_1Z##<`+ zt@Cygscx0lj{0ljyK8FXO4s)*$NDR|c>FM=%C|!DOzNO>m{;n14?U6`9;ftCEsfqX z$r-ozAKPCK#VMH=t80_;VQ!4J3EIMz&!ImCZF32Csq-Ob2?fnP#rkWUb0x`;%Exi> zPt`~Gsj$PhatZIGG;Hr->f&>$78)9V9=AS|WZet29b>}e&Y4o)z#XP}T0h0%-iCwP zTlh4=Mk=`j+cO70d0kZ$`eMu${5Z@WYfooov4DrPY-%K4KMV9^#MPwiIvFmk7kNZi z+M(E8vZTu?mi2nz9L$2?aTVVO<)*q^8`TO1**Jx<2ee?uKFIFr(zq*Uu4{>W?}8U_ z2b#=gXd;m21LZ+aIiF!cd|34bh+NwDjiJ5oa9`;-OKEK$%v+3k4qBhp*{rUW*$h3$ zyeq57FWt!H;l>JDQFH2)71hxnueJu6@*I2|ddI=!!|j-S9XY8bd6EEql(G=4uzMOW z`h_chD*13REy6)O6c;dCRqkxO6r4~7zG;;tF79p+yh5dZkFl2)xPFM1I3jml&CXzj z=s|J=j-4131}DQcy?T`u{sEWWb)QVEaHjsIzmv%8 zg!MEz1wrg|70;!Q4MV#R4h}ke^d?&W9@4&7%EP$r37^g?I}Tvx z;s8Aa9^md?^_K3zg9qO+IL(F)23N$Ak!$mD3Nevt&zz)n;LL6Rys4>4N>Y;U^aOB( zuGS37?FCos!tT_LhcHq+y{-r7an}>GvzdUOS1wd1%vZK0CUjK`XS4Lz^HkZ-mF?~9 zlmO@T2!TMDwlOg?TU#9|)~-BnJ{Mn*3z_EP->b3?wfiz&Be>^#iG;*uX3^6|wIWhV zRl|Gd?a90J&o++w9!|Zylq4kYm_t8*bdl%dTAK(e*LdM4q1Uv171#yxhb0@Z2PVmD z(R*ej^&oZaYv+5q;c@3&B1=~>s@9(eomxO=@GrC5v1`pM?o^w(^-Ro(=#{+^Av@Vw z*)vA|6Q)Et)$I1$BsbzAtBziwp%sphLKVAaddygU%dtfxANy>8hz~*urqFiEqGtSv z86#*xqwXtDSjo5PxI_~7y6rQF`P!7_d+(n@?s95|)^j&W>NS?lee<@&c7J`gYYy-B z>53{|s-3PO8_@2;?!AqQL0JE}Aq%+9=% zPTPYLLAZj+qy=bB-u4Ic-ht9L=F=a!`D?Ue^1tBGYXRmhMKp8iF5%n3WYUTT#+`?D zg$ajKT)!ITq&KZssP)@l`OOdH4tZ-#ct;RqRt5V{C5hM`^OWyQR058o>t{ut-teuo zZYg9P`l$J4SBmrVxF!={pp${*9ZPA>dUQ$%v$@`8Y4F2rf7Lf-h^79}8r^=l?q)#m zE1$&*^Q{uY-=(I&4gycenaxKvU-^j=pwJ?yd}a^Op)2Qmssn2fhsr2g29PCXDC z9}JmxKXz&TZq_Z2tt=zpiymmdnjy^DOKxuaCMGeB(Ijp)jHzbioFLWa+Uy6uH`$KK)bYn3 zktX||)C?hiXw|R-GP%8M7{Tr}nSP&H-X-BWBVf9GHPuGwYFVt^magoA9DXCbQ6nZp zp~QqN2K=b5?7HkIVpQv}Q9u&w=)<#D`P`NFP_ZRYA;9e3R|u}mlH1C+CQ_IF{IT%G zNkxiUIAWD}F#hnnvW${=IZI-W z`AtGi^IS5ekINCYxUNHX%)Nn{93OT5{J6xx>&1k?Usn8thR7&+hv=f<>_g9naw(0S zY;o1&z6u&ZUbl8^^f1kKR86sg&^MYCzr@m`n6$4Q5Mi>ilE*Ih8}E zu}7}`L1%qxtaH~$G>W_ngIOzQ?b8a%4jK;6XF2<9HMN!_JRH@`+j@cINZ}{zPEzEN z%ZaL3A0j?k6QO8RN++P!mQhJeoecV|-3zf$J!v(j+CWy-ny#kkYP)#0J2tSC!3!bxQYShQ$BTHLVRSjN}Leif= zxz_42U)LswgZ0M7-*Jt^dLU4C46B04#-r}Vd3p}pQz<=jsgI%p97~|(Hr-Q=dM*<8 zY|1fLJoQ8YS9iwcHXE@(_qEC*+A z)lfYt9jFOZObA@we6SuPj`0Zbu)MR2nq-MR3-R&M=iuNd`*NGa7G6^W(9HS2K?xyo zJI>lN>fU32CX0@*!|M-s-b<)aSEHtU9;g*0PEJk^18ps}2!xyuU21BoKj4HPU6*@XehAR&9D927h(@Hx$E` zo;0ThEGTIkypj!Rs7=6bYYj&AM$c&ljOXyX2Aro3>elia-ey`yG{hi&)cVlX^_$jO z=s5SfkUqpY>sI`*F$k)ZR-=AVXV^8@f_&2{`{GR_a&i-s?&;N#fG#XX){Of6i{MECfj(a_*=oC zjUy}a1Bl-3e2=2K8eN!*Bi9d0BYU#M$_E+Z%KrW0A8E@g=O(Ds?vJ}B64eB*F^)q& z#P>z`iv(@?p+(C)4_3WqkT@1bwHR7ca!^S7@x7_>VLYv?tNnTKk)N%Mz>6LR+=IQz zOvl_$xdNU6Pb4+2gCzYywH`B<1$hg}^VURzF@emAS*%5JEgG}Fdwg}fTjw?>hp5&w z@V;w609uqdaC#!!kT5+HHK&@}wAFIhK%8+)j55`4dH`KFt8eljJUwZ8M+v;7*1UUZF(jh zZJ8!~bR%?atHF6cfCSN1%WA_G`2ZyYnO%uab#7)gKR^g&rok z)`zn2Ko@!PwcQIN(e8FLV$YkiBg<6W)_=mYBlUy-PEdiL;^Zgn8fDwyd#Th+?N1kj zS+}?~$!5;q1!w#=PTW0~ zIC%bJ?=hmeWN_A+*hf6hSdej-c6mizCrsEX7kr5)HiPbJsyhcLg`9srT&>07K!@}5 zZQCwF|D$r`-{B&!TvI?NubaKz^3T@{Iny%_f>ofxLb#d(*zjg6OG^#0-tyz&zse3T zUQ=sEKy!omgCsL3n#-c*u6E`S7UULtF8C|EE?&wI2FcR**V~a|1O}@-(FTO^u zG|j832Pxd-e2b|H1wUo(ePEuDmS^eaGTIxbzuhx>pevXhUyIPRB!UJOI>uQmySDoc ziC!w-P7|NP&dYHRbmQtz*$3QRTYq~Bm+}wiwsaq)FV&>&)3U!}@+nBrO^`aX3BZ1_ zfPnsD28U)Xu-{jS0=4SG;})-6=BljMrJ5(khL4y2B4=)IDT;07o_^oYs~crSn0WZ@ zsoX=Bn9iGQb`!?p@YyJr2Tk2^RbSG3a*JIR4$=e0tG~y%U>e1|xZA#Rms6# zIZLxUgzL*E;Tj3qXX#wzb^Q*dZxf`TJSbdQeCzsqOSTAc?UCg5H67y*y>Zm8@>>}9 zqf#UBc5MjYn0AQ%_bt#c8nC-g}^o0-zb#-I>t_*`5Pajkdw3Y*#4 zoa$!~4cB8us}?q8$sp&Z#<$g!O{oI@TANB{_q-r`td+Ook*{g&l8$>1w_I0lx6ADb z!8B`GPaW?+dzsl$3(PY){jER^Y|9|N2ERI!I(eru*uEEkP8qSZZXSn9^cfi240BEd zhZf&^+qeJ4`7;vv2E}U+mDfsxe|iS&G-l)ZqStc?^e8>%kI{u;~`` z^aVJ6$Rv1rc`tzA7ikYO#k8PNlv38H|-tY-7UQCOa{EY>uVv4h*3sY|?Y zF}Z1WckQjdi!Ys+Ci*2vf7G@!WFdhoEH74?8rJMRt>p*jA`c^|GY35WdraWlm-yg; zg(&^;7V9a2%gaH*?CtL4I2Pkdzn8F(w)%S;o=tp@J%JkKUoSvzi(l*=`j_wJ*m#)eB3_Qu;{q@wEn$o!Czj~wY zhLpGKo!FXvUyg%UpcwGopRzimRlU~^mwuOcFO_WNa^1uMHl^wPdrMKrAAL+A|~mj5ZgyTGU82{Ob{&0BL~RECSaTR zvFeY#8Q0^i!Z)aDBDF$t7NjWgf;j0CJDAb78N)%hHPdy$G@{evl!)Nwh!VElOM@4<7KwXJN<~V} zTr8n0Ux#^HX`O+V+Hx1B#79ikmCa5;rX!Mj*w@`eMFrY*%uM7jzb^Z{ydAthtkfHM z5mM)_FzR=w4u{ z7^>N)<kgnmuIz3({!&h3yOywn*dU|~J^^!qN*f0V310a*jgB^aW8s;4VudAz z6aY%q89sZOzn>}&LtjRUjv;}oCt>Di)fLfIv};MEd}hQ4=#H(QKA@2-sdar#bUh9< z)`l|?4Bu(yMRWm3jndVO&G=kFcbn4@C^IXH^2_gx^5oM0(NhwaRc>e0qz1DqzI5#^ zN5+(DOdvG(xaU75VV{1!6njFw>+<^Z9+VkzY~1?|u<_*be}^pUfDylnUa#s`!5vze*?wuA}!vx#7QY zgsE{e&oh&M_FJcC9C-4re0;zj z9zulU{5UyFl`B6k2aYFPfUV(S%|)?aTU8DJf-v*$+7G`HnFqv9M|hc6JiRW-I7&-P z`yXtikE2jn{)OFLEsb2cZ2wd2X)E2~@q&6hr5Q_#E=8{ZJqFo)((GNWzo)=46s4lilI zpTBcSGbK-AIA9$51d%_-PS#K%fgw4qs*&BN>R zw_3g;L=XJF#hsptX%iRjyg4w1=xSn1Y4FpbOH9IOz2kj&+%=L_c*iHyxP_@B88%2# zZN@n^S3Z3&XDkh38j}NFZG;kHns;Mlx2nG#n!Mg>*;)7ySa}iXPn07wK--#eS6mempq4>}7 z-%4HuV&c&(3*8trFsLp8Le_2-re@5!Cb17Dd6xD>!{PU8_x5cGZEes#!=p0TP^PFe zQ`qdodyjx5kH6m>;s4Gp{{;d}lf$cyW2oa@ir!I6lK1UeTpdNs3RErh|6G4Xtu**E zFwf*;yJY_r$ne`A4%vHfo!JpH!-XaY>w@|peMGgAvV~><`G{a1!7?`Z5c#ge$GWcy zC&-lOC$EjkF!LFmrkB|Wew@w%Z>l=&wk07k2&3+w!>u>2tA>Sd2;(0sX(&wCIqH7& z;UQX!=?oB=E3Kwc!)k*~s*_%He&a_cOK3aCB`BEI<5dHnl=N)r^7LWW#xf7=hFPW zbQWHE)Rv~Uv~Bg(-AVk$?@w8U%@hS}y1v#ZriSql%7?56@T{?WGp^Zz#$3@K+I@)X1d#~?j_ z+Cl0dW;-}aX6=pOB7|tmY>S@PmQtV|3CYhFG-gJ=EA_2KA9a%zl`HF_mmy_53YID8 z=8V&4>Ey|KVAF8u4*%A!yE@Tgt8*iB&r~TVa?sdc#N9axP~EhvuCI?g2t~qlD}2Uu z_4I;H9N`b~l{qU<7iAsly;~x_SCWATMxi2slTagilMo7s*K2dO%|nQl5=uHNyF|9g zN(F9iIqT7??^J&xQJba-UAe9$P75FJt_Kb zewD034=s*H#`aBacWo{N^bw~??vVRcbr)z9N;S6^vr?qA!$ti#T9^`ee*P*ef6UQh zO~PArzUHrpZkl5a9qpRzX?ogHP3E@nQ`E7fEAe_q5Qr*gWn10Kihm=LuIJ3ie5r=H(>qQ?5rg&weJ!)cg*p<&1ebSW^y4qJqz{`@L= z4_!lL&aP8~*TeJ8^*XIw11{>spFVy6)PfJ<){N&oAH^WETqq9fB}}~^=C}`smtv*N zoS}+M>Q6f*GyJ^ z1dVI^werFSmwpfX8P5@UwOqMQgei|Fv#YXGcKmV=v!Z0ZJC5N=d&hH+fr-`;IpwtP zHRQD@LNUtY%6nV{|3|67-((TochBHXTEva$v${^d6>oXMBn)|@rVlOC2E8)bRij^c zd~ZKpaNO82GuiOrnGH<&LVE>oPDrgM!!)Pg8lu*uv5sZs4SS|k3wDp!Wa>kM5s99g z-*X3}E@n8LwOEf9@oo6oFyumH|C8>@Jp0^9;#T6A(X9AotK84#jR!qxt3p=iMl&ZF z)d}Klt06Vgjb1X0r_*F-!I{`J;hs_GsO#cbCjI5uFM`#wYNS(dC0Wc;hvcH7@NhKy z-pd9T)9`$*@1%m-^vj&`VrNI5o;zaQ_CV2F7p82h$gq?%aHq1c@cdWF@4=2Encp#$ zSNpV!JFr;3+AWz}a!ha>h(44BxYd2Y0uF{2>bYPJX$$jWiR5^d*`+o>%RY1C&leAI zJDN==ONEl!l;ntFK8eA4bLdNXoD8es(Bw?oxqcp>mZeT@eW$SymxP=lxGavvCT#|=geF|3O$ zR3+?#IvOOkGhg;PClziU#l`d~8n)=Uepn@=%#))6a@v>{Pu;3?>hdueo2dJ~R@yDiVWF0tV@t)}W z^pkg7h0TG`d4M`ucQj4#f?x;DRal_wL*P`8FT{=AI`khbru%doAp1M_B&L`QDt=j2 zuFW*lpYrIv3%I-KnM-cPaAu;3WRd~@op^%2mI9Kzxs}^Grr*SXz&?epw^O8Q?S{q^ zhl7;8FHOe+gb38phe^@#zW&#V8LV8>VAZA7nk+8z|56Mf>sudGN6s850tSOpH(GFk zTX6!&*3rE@*RiCD_5IN59C?8|MS3Q3`c+3J`M=Gs2Olt~scma$q{#$tZ>I*N%*rOj z&f+`8G-E?@pE+yyFS+K*cXWt->17%0#lEVfxQt^qs{Ddd1Bvc<>g2wHIlXJDr)^%P z+c~{MLUPwd+0z#VUI{KfYz^$sI{N3z$OfHdAD-03xWZ18Lqb_w0uX|}TbBAtt@P}A z0QVbkG+n>7@3*CYa~Z}AbOWhFoz~k!UK@M{?#PMVs!uz1#Ps#nrm0G5>zMbZ<^FVI zJN{Weg{kR=3P8_Kx8t8nRt7;1!|`4M1wNGe(Ulh*sWvniLuV75JSw+raoqEu)R((|4XF&oU^LdoYMu zE31U#r`&3HW>_JIF9a?)N&&BZsXWFIS=c}1^>O&zS=dD06!Jcr5at~>K$@Q?aQ;oe zlf|iYrPq@Q7uM{;Eo{iA1Qt9nOgMPj$*#P%s^5v)$00{TtV!xDkJ7#kA)m{(N!Z$! zIX*Eo8>`C(%GhDKxHt2jKQYV7=#aU;G%^FF^HIdqItqp=0*O@&THs;qX&)xzgEW5<86AXe$E&)8T`BoM@5r44yy_%*z5fjMC79EISnM)t)txsbS`jhADoy&H z+EBeMpg~+RRfH|x4_~~s-ZE!jAd<$tJvM5qZH8D;Zea0?m?#{`XQ`6Jjj?bYj-}Gy z`GGiTPrW6(A%9}9#gtyG+D!N^Tkp)0`d%&B6JU44)kJS3v5d)4R#lvDc;W{Ry=I9f z^2XxH4Ari0f=Hz~oSQf)aTd{P2}vVJc-ig#r;T@b*(zZGA^LD8SHjIlg7m$O@gFrO z`H{E~Q3Tg2OaO!O`L#Y&8C-%1njL9sS6#u%-+AM3<8UpU#p!Uxv~t7KVVQFF*OPr5 z>N@fi>*@)N4!Bx~-!bqSUZ=12$F6Jv`U|Q@%kQr&HS?HGg!LXI66w&$`53|t*yA;*P^M(HfI8@4^oInhay1+643wh#Ip@l}sKXD`CWVGO1(UzWyCY2M2j&pJLxj z!nX-(V)_$3Ak8KJb4>Yw@8(ss%)AU8)80zgW$?+jh#{@F(J^k&cpmcH?;T7!p_K`bs?=+-%zVzO-ltXI=EGDFm4XLb!`Gjrz zA=@4+?aBKqHxXu2JnxkH61hY0s2_Q0uI~C^cG(>#>>DD*UoiQ9_9@M_G0s|>$(<+1 z&JwE<gsAPndI=nuGdt`k*Ad}v# z=+yd;+tJK#A!p`fJUNNw+~OKQz*5cr@~F!fcn`6IUj8XN{4e*m7^CA?X$KGmbzXPH zAE)}|Wf@8B^{>j(y2d{uJS<##U|cK_+3m=;#Xt@p z>|&iNBG8+Q*V?^2&0A-rH2wtC0FEqcKls|mJ{<#&jn^+Tm2x=zk~Jzv<3qfpD>P<) z2D#e-27te_-2aX7A6~Ilgq2;;K7SRn^2B(~7)m0gHpNGI{PbZL+#Ay9WDN&OlIGM# zNEzw|#EKbwl|?+~HXig#Z41Ro(H)wAnEkV&9f{PiFk+5!^6;G^LdM|dA>g{W*z-Qu zta|l(v^LiXl8hFYIRFiKaJ+>1o%m_VY?e(A$o;faUwBk~ArJ!(mRoi$Gq($oAe_(4 zm}X~Xl|SYuNt+xPh>eZS%QgLdNXvY?$#Kw2L5ekU z)mzT?&M?u$6ZhiZHvobi0?<-VQT>k3q~ZYp_?3RP#{zr}w*;%(p=PZ#Krn)E$wZqUJ`X*j?mgw_I2{0qK$r7ljM{}M?W%m46F zT-e(FL+#^o*qh;{de7Cc-;!?x(t1X@G?QWsDsGZ2CLwtybSN^XmOF3zYG(bc!|A|KHM#%V1F1n^{+U7G zyLi@?C7!{8NOy*R6ez$)q|`tdpLz1x=Z`vD8wtrYXCh#fnFX~y_JeezWHs_qgHbaD$J|WyFP(}3k|=ULk`HcR?ntkXG{HF_{rW(6y>B%H^6xqz`Ff}{zH zL-Kd^@=B~w$xVJVAtxoCpe}DIUE_*~LvkD&z%H)+`PY>X3Q*SL$Y zdZ54oS{{?Y-;0?q;$BVL=-2}A=K>w72~-aMwd-?NLf$OH z>KGpvDO+CvS5X&!bIg&|z(uUfzdD@734QIZ5z{=%on9>QGRH}IiVHL3hI#{%e@Zbq zq@GaanmFd9ojhDi0|+DTWK>v`PAkAvzTyR_@#x@e72_fZ>0YU?xSZel$Mm$+AK8vh zH(3(}k&z1`y0kMTWBROHah?~z(IvO6qMF_F{3_DaQPvgXd#nAKTV#9foX#h{)zO&d zdw2byGkVgm@Sw*RYM_+8lt%{XTC({4Gi+{t=4{(Au!slw`sVO1wjSbO8ozLVJtsd5 zXG#!_oMp;IkR2JJZ4;|7g+fSQhG(wUEx*X(e@Yh83k9zh_LtUXqNB-DJ)2l;}fk|faoSIX6 z<^!jxLBJ)ABVEe?+|#}5b&Vd`hRY3CNZ!A`K#9i3hv!0P#C7v?DMDRK3yv_h4u0Uf zO&}Mqj6@p_&q+}?Bu9jTrz3Y=@?B@c2aSXPLp2q~(Bk|f#_9@F-Ml=h6t#XrSzvq2 zN{aEav;go)7SGs@6v2^zx>aaw)8(^0+f6xR|F_ErX3EjM5^=7>LD5{D@VdI0sHmvV zJ@xhVH%?vRdTcO2dPx1uvAuHPf7AJlUIya2dky_2i}9G2YH}>kVX1AJU5lj;{AZs+ zT~DX^Wo&;oev%Aq297?oy!7qoU?7~C{GOT2i^RcIJ{b4fw7=!TzhX%ao936l0g<=9 z(qhTo%;UG`Dd}f7#7^oWkE;O{B8IJ_-v_z&hM!jG*j}2$a_4TR06}QsvGnIPhK_s5=XSEtL1 z!MLy9F&o8Sq{4Hq>|n=qSkh>Irx&s)HC>CN+oQ{bV8U*j9HaB;|HzHtvKM7CHxv>} z5Nbx@JHf+IZ?E<5%2xeu)1e@}VAz0Rd5G@lzh<}G`C9+VJmHJ+U7LEtqc-m4SDFdD zjtTERG{(E( zv~}+^zGX#tI^^uhm!Ia#S-Dq*!PLZtn300mPx{EK*h%Lg+Q;rp%Z8tNnz!{94?kJ_ zDy#*h=Jy3}qQX1)2?@_OK5{aTv~hR6(!2+Z!TR4Z$az04H4}zqT0BqlL(kSq3^(6C zddbXVfeG7%IVA)OB~dm`B$!Wsl>Oy#f)mnUNt=@Q_>l9(0P7N_J}FH?LI*qz`MFN! zSE-DFng-(2jy`aj4Q1(<&vkhS4qMqu7Fre^kfmY?0g%mG_d*vHEYGv_ZV_ zT5ojyK0dok=a)v(dWx4l%FBdN;END!#%&KM(75f_ zyW&M!I92>=m)>b68u1A;AKyH?gP)hT--Os_ykRy(mRyf2K{ea(KY;>*!y~Yn;u{M= zdZO6e@mv&NbuNvFyBT#T@@clJXKgy<)aEFKe3n#w0$z*_P9>uW;{m$X13X;4**^@Q| z5IPLJIG#4%*F|z_;xp>{eoVCYa5~m#X>mD0B2mp17_& zND*S1PjsjrxT!!UTlw(~_Kyt6)-iR?~IS;`cG-R#0=-7%lGtHI~Ep2bbp&Ug*?&tVn}1GyZ+4SbWBEbc{Zdg zFsOvcye?Y}7;^0fa~y(#f;NTt1qATG4)zdK$n1Hhd#?QE{dAzEK-gmEF0XxI)Qrqa zioe2Qn+nEud>Hb8`Z}5%;MKVHznb#+&A%ReacYVl?Vff=p0Aivuh|#PUrb~y3g@P|pbx8>260}wRtoptH~^*Lv(k$)^xqQmFI*C^eHfb=bDv^gnGCUqyU3zCP)#W=9qKWN;fis-#dV$QThU8$>>q&+tTd(yT8Zhbt|Ap*`@D@s~f}pYue)`x$EO_V`m=<%&nk#Kt@G z4w&IbA%%4YeNq{AU~qqBt!hj+djYP0({1dc05feE_$zv0+*s5QX)HB&y)(P6Gg`sY zqxZjUARlbZ^ADn|$}&J@(}$L;fZZeF&4l~Hyau;&vnEmqw)HjN_B$K62whfhsJY%J zoe@-IX6Ben!TmR@u2A%Rm%IqRb<#c3GJ7Z4q zXSvSp+OV-(lhU&@c>TP=z8^q}f*=Zus8F_hfp@6?h>5J> zHIN!)XsN-?!`vv*7-l&UQ)NHT-JHp{hM;U|_<+9+=)SnlIE(;bZ*CqxY)doN&U zL-k-+YHf=_k!5s(#Mzex{sn`ggJiZPUAY!5rK0$HphVURSbx^C8z$6apFce^IS11L znizI#x(@I~LiJ3L`&r^Rbjv@@3ue`if<4J*8t*8LR8o+gy2TNB4zku`iwek;60GDk zZU^7tATGztbzcRh)Kdeo+I$mPhWcNH7u8csf={|MTCah{!!STaGc)-sLvcb!mAR&q zZ?o_*zXOG3yg=7#btqDeK4jEAF;Xf85)>4`a?uRXlG%2780cTv^d-Eo%`Z1Avr8Lz z>WU7BxoY>nP;TkUiR5;y9M91^d6pEIPnw^;fQ%V*R3lBL;K-Sv1Qu_#(#8%iSrTWxC+DEBIV(!T_7^Kr~yk%irwz-oQ292;Qjwt&;X>Y2*eqZ_c|A?B>y8${YNkTpYZm= zx%U6_W7cJkhSh=Rx74uE(2O`h#^mPIJn{y=#k|n=F+&^9BRt`yK1^k%$-1xwbK}p% zA)mul6XxARWZ%y5Kvf4W^KUa_=i>Q5+1j0fjO2?ED{BEVBM*w{q^ZaHfi_E5Z)t0 zV~8x13bSeHfH}&=Tt7Vx#he`A&98w+%6=JS z(Jm^=IP~!53rW?iAY%nOFFGAc|7NZ|MOezvzADwb{V4Tn3nhC%v+Gz&mhGd!o(^7Q z+JxAKRzZkYFY(+~)Xn67DZN2eY_V2w!lW+7D}H!sbY}-yd91i(X_*ck(Lq8CZ%krF zgDoo2V=Jmdr#o^MI7i*GW&f#PLF9tr9YFL;MrSd0XZ!c>q+;Goz=Lb{-Q8Y_mg5!% zY(f~72?OTPa}$@aTE8LQrNJqhUuS7&<&$Gyt51W3sXY@0y$sIP#^pDf<4twprsJ#a zt+n@}fIH3RaCBSfs8{4dvQ-1G0MyWNNR`h&keb#cfm zp3CWwD%@5wtilmqvFo<>O6ey5D{sL5M+S7VTh--9ipN+z4YC?p!bMkI@)m9svBBvLY=GlAS{G%to zyYUgxicq6BU0wnf%R&eIn>_9;X4O&4-)HnWlXj$0(L$P^f8FbHD0TZ$be8?b!AKS; zGQZx>Y7a0;TAVH^?m0?*`CoZpM{bFHq%yLZzIaw30f5_Qps38!l41tCE-MM~wPUJ1 zARFw2ElY&$Nu46eGa8^b*EwQbC#qBs9Xu~S8d$C;U9`E~iY{OP48#6A5|#rtKhDCu zW6&t`x*utwf)jRYq6h5fKW`zHr%O^@?I&JdWB@AA-7&Z(IC^D4^Z26wZHj_PkSwP+ zOd>icRb=x<(NRK{XT;#)SGnC@C>N$Fp0!(U9nx%`GKKY6TxqWOvUT5_ml7KSq@^K^ zMS_JO9_W9T^}F8RY5mYdPvXiigoD7AkHx?su#y% zPv_`?6bfS)TSN6;{c>>Qkq)cFRs28gooiH6R~E-pYo+Q?YDYyy9u8OpMDRsG9{YtXXS5%*UIRQ~ZT019zy>kWk9$9;6dG(BKxLKULHk(M_ z?&HU4z2=etYP>m7+kKt4FDw?5)!1~S4V}M>yZ3m-{lrNPIPC?t6x(voWaR-Q_59Aw zN%O9jZ9UnoV*ub!ar?%jZf4umskYa}8Q&Y<7G#_RWpRx;JsrO=k*F8{*c|M0&>v7UzjOgVg*MD(m)*numA*vl^rU-Q4t*OP z;&%4MsV#4PQX0=ceFF2s&;rW}8T{AHY7S|-hzp7ekjlG$W2lrT!uhH;aoSrgpOvT=Zip(8Weh2r^Z4pUTLmJn&%=jYr=q+LR*}CZ=@LXw;}Fq z2J`*SMJYQ4vA4`k64#fG<`&&hbS~x}IHN7Y2yUycI z2!|7DMe+nS+W;)N1YiVlPdy8k^{xlAScr?xN_)E(lFsJKNOtd_KbNeT{8D0F|LBQX!_U(1 z!~BG;eHjrYVe|*t+o>knBnq)`(#vmx(GnU)9#5{c+ZU}UHh!4sE7S>@9-kSE*teSm z#@VPIrhCQs*50#c$nhB0J8Ur!0OuU(B%1*1D_ne5 z`}LGU^2q_Cjd8d9B1rBfQy=PPvZEy)Roi{~v&&`v-KXD(nG4lgX+6uZU@VHjBh-2Tj}T@iBdZUf9#3l@`>R8A%v{xv0qGj$5B(HrQm6KZz&;cHSuCIm?$-xlPL%OS zh~pd8`(W(tuBmegx%JT$XM02AwkAJ3JQ!2^dM4zrYPtf6xzI-KZ~`Md+% z?$mG$*Lvlzfat#wA2qDP@t5|aEe+gS#a_$%jvHltx->}g&3!JpAo7nm0s0N991ctJ2O_!B3a4kxHqR5i{rEF z(2o=Ok5FBiJeiIsF7m+=sXCij?zoR1)RKZjSK#H*IyRVqPu0uXYgAFafWid?DVa3y zWGj}cg(GjG5Y}z}Ucpp-M;5GBF_k~`i1bw4k_zEfUCPgtK~@0yw1o+zB9?JDsBU>j z`i_9A4<$9PaKs2uc`KoxjPMJwq|pz56UC&~|9;IBky!SB$S#N z@wP5Rr)+fkAS5L5vgl~NKUS=R+E%^C9Fs3deJmE?duyLtEHjcl793v)Qdwtb83rj*;?kc5{Y z=8Nu@H)mG;1g6uz`iCGLXx@duiWXkN34(1SU#=DmIJ);uirZO&UJe6g#0%tfw1gQ| zLUis`tA{b-=cEP~hAF1vuD{f@n=fq5PI==FDKd9!W^aVZ!UqJw&G=1xyh@ZNn6;NT z>9V>gWSsTh_AO;E2VDx+G{;K>oS;+n0s?ab;UbGsUQhvl4x61fe&+dQ`wCen+{FpP z--}NzBz3yoL8-Q4=P$Er9lAT@*6-o$PxxM{7?xBo33Nr%?s%Eglcc9497Y0pS9yAj zl3}bmMsF}z4x?rYN^jVlv~{-G*&vG#Q!QQPNCoyM8RG`Qr}eb6hR5)mho_+?x8$>Y zc*1=W8PD7>ycT-dw3@Mq8+7Smbx)+nicdRej}N3T>)o_osvZ&FGlAs!k7}LSt4?=a z@JuM8&2*%baU*zf0~CROO>n|Fp4cOvb(cu3me#&-DsqjSZ>wg?+9-E8Fz@i)6)pa! z&tAFBv&&_!IdlDZT0Qww^%BVGV=X${oBnw0GXffwT!>eAm=jXJE#&DX6@Ar5*}*NW zZG`mSF7pLbD+#vSAm}K3L=xH@Xl6LAEB6pNT)Y$iIC7x~Z!VlY=V@=+SYPs6AJXR?WUMAtA^V3E}A8`G$cq{c)jLZ${Y^IPQLw-NwZ_8!8Z2v{LtjSTAf zO7I-@8!w^t%2TE4bBs`SmDlu?AhWbCRh`FqKB;a};wwOtl4g`c$Uo-D=sy=-fw?fm zlC;4PzRY|*`0wCwc$Nk0s6_A*Dno?+v>vt({|0gy>#DF3((D zKG-{f@{0Rj0A0i`K$n8Kvze2XgNv2D9f;!g16H7)@TOnh-oew!%JPE?sF18r0_Y|E z+v{Zh?q=wH7b{zHknkDVZQzsJH=k(PTe!Htb20}RIbd#v6aBrom9v@6J7B02sHV9x z66hwl>DGDYWM^e(32LTa3j+G^|9#)p$;=#df(h9E?=X3LTU&EG7tm>6d=t=zcQfpb zm5YrzD0gp!9R#`$QdW5O#v^rS7UJ_}JPmUICs_>oz^$*SLVoXVylHMc-k8F7Z7lX+ z+?tUQ+i@z@W5mnXLwnQXMFx7aMuBXTJZgU?n2U5P{Y~%2=|k?9J^eHCH8*KrULkjk zxohxy-B~)4+1)}Qrcaga{UOoZVCS+-*G%16>R_GVt%14>=i;~~$C76Xf7?Ucx!Ued z9ly7pGvn^H4s^Kdez3M}<*E@z?+tJ{oqr`ygyO%E3KF02K>s;a2hoA92F*n0!^O1!txGZU12a zJ>EKd0A}zsPSv9O@$=KJWcAT`k1W5rgZN-1x`vck^WW{VeDAvM8_+Yns5*!&A;dsW z5u*mP8Be(JKp~gDUDSf6MK+T|$7ZtUqbhHG9QQkY%I!6J0`8JWG39S*_Yg9N&$;&t z9NITQt(TM+8olvf*ReQhh=_A?cG1mL3y7pOq?Zgz@c!!C-nWHjIKO7H{&jA=GG12U z(U4-ioo<0CmrB=tGizhNgzQ9{drFm=`JG?7kGTU9oGzA}y8vJ9ZY~a>&pUM#8%Z1I z$@PgrUq-I6m@d^6Ln$mEy!c|RFuchcdr4Q=2~;S{6{0(NTtMC)Qy%Ce zAkmQdLrg%PSFo2@DGhb}3|vEO*HcR#oP?zUIV+s<)hpl5w5j?bdVFoKbhvk+gOZVdlDg zgzW$5r{pOq34eq0ciokQ|A!EA~)9e++Sc{9L5C{GIVfzBgYVD(XGq`4k5S zk9cFKSwSHy$0MqVE8pV1vLdIuNF&#$$aSuORz0YimX}Lt>~?NL2{8M~z*HtrOFtbB zjlq3EHV?nYl$Zk4kG#}j_nIp^>!n)#k1~($Ytyo-oI1^M;^aN7FTCzO^f2v*FLz2= z$%yxvdXHbH#!!?sZ6&;M6on~kXw|WrVv1j?)kJFel!N7WE%+EV@8@GsV)Fbyu&RJzInIod8AZgAwS-ioF!CVF$&T zMP*%p`}9yS2i9&_fg)|g%e<-E>xOQOT;Zv7i?i*_;_Sosd-%Sp_GEvw;-Fp=a{V*! zy{b8oT$w(2=;AVKeN7CmODIut2}=P-)(}CSs_$2LAm={4K`U{{e@;V93_x!Fx@0Yv z$+!DmSV~uHHGvieuN%;FCPySWa%O~Y3_(giygR=th3GM9+#_At9dg)1dE^Y9wsP$uMjvS zMS8x!-mx3d*QE6|wl3DAa$J{w(;@fK?UDPX_nDV9O=?0+eyv;*Ik`D8&wWn(t^@u< zdyNXgdx&D{NxEW5n3iR~y_+#dind{AB8?W6dYUWbkE={%p*Z|gQ~EV|XR0tVVbN^h zVsAF}L{v6|%@rML1CCM~7-W$c7C&1K-2&m4yc^?}y>EG(X%nf+2et64O$RP&`H;^^ zeIqsggiXuhm)j%T_QGJ~{?i^9c=~HKdnU31z$z6IfcO%AlW0m3jEw zZ2Faj_3q1;&`qrFN@-f#^N1>&$lzdxPz62wv^1+b1xL)=-Jm=w2qDPB9hH*gyXzmk z2?8eBN*~>=XS-AAP93FzwPACkq;V=>6HH-u%Q0ppn=d(tE{wV^K#$!W5(_5UKV#P4B*`p}q#;9+6;#(>PbF8T(qLq;ot^a;DazL*SsU*-C&$|C^Zaj*Pq`^FdFQZxGR3U1Go zI^tAmABf95r{Z~UNojM9a1B#-BEiMeusGk4obuy^_QNl<3(MWdk8Z;kLsRY1cHG~S z3>k~km~(71_JX^pHiAF>+~b>!RYf2))l*<*EG*Hn6uzYoUXRg%L>YD4lu7Il*0$e5 z(U)w-kn5s_>NMFR-%#1c%7_qQ-optV5)h!@G0t}2jxNdymNjK|D+esI;=JsS&sQX{ z5P27olJDloKD&DcIbLpj%xCiEKSzf`_0K=_mTUJdjXN0Ey7%cV3QRxFtBv>>X7qdP ziy1Was5sAJdnD&#feuW+biCHy)VKs#y^wf|oSX5qckWyQRaIF)@&>9UhE}FNIUf^z z4lS^=)u&`$0=Ic1&KbYO<_koctNE|-Km6z|aFV?w$p#4X`697@3f;v1s>)%r-H%Tj zb?9rcZ@yO_JwHsP_=s=&(9xZ`di?+frWp-<0h|EfJLb#=Si-obQc4A#2X?(LCh9z; z$oYABC4@0j<$jG}k(~p-Y;c=h&$Z|J+50D`#H{B8)WH(p%Uc&BtmC8RBaYD%%P)(G znQ`(M=;=zk*euPTjb6<+rl<*~N5phwJdKEqYW6%Zr8R8US(omo_*r+DiCi;y1V2zH z*8=HF|Gf(n45B%@?%OW_6E2BocN3xhyHie zQyjpe|2B5ejrRU+sURWH{|x@n25P1Y!6P<#`bWgGTV%5OOE(T%#e0K|#Gye(d$nN@ z-n}C6>X^)>Jv!@<&u~7k9C)_f9WdVyu?#DL4A*r(=6_H35GG;)3R|92yPB*SL>Sk4 z(hxT!QJ*$8_qR!~HP=>iFT$qjYk!`?9!e(mOJo{Rx_?pDvNvgyG{`(H;(#R5XRB{f z9en%yfL#Zfo$6SVr>K{S{0Vh}CaXu%$5coA5Yw5qRiRbB!k?%``b3F5BD1@HgVm_z z*MxYWyIG$02CXamv7cBX`1NG9Tcn!qTBy=?lycl$z{dI%9o?;_MHw;|!ldVc?8eV#SN@8O|jAIu$10G0TQsyWwpde0Z zCAM3-5H5|TMLn_0ke;Yw*h_2R4sicy$yeh+I8&2YgwW?KVEq%qtC{{sWXt+f9wS}s zzg4;AI>X}MCP35PmZx$>rl&Q~w!CMqH8#7UHbbAR!knrzpY0V;_H}&;&>Y{iY8o(K zz~VH5wVckh6JD-1SI22zA305{Mbp8T-Ix2@=RoqHcZ)z7GC`kAWkYQ7@k5LJKZyk6uhgLb!v}lCbELN3Mb6v)#5T4pofC^YV-nvFDA> zTKjbK1G(&yNV?E}w!Bg3dv%&rOe&{-3(z|UW=!QK?sU0Sz&`wS++bUKH43Uo>= zrYo(CUZ2&z^_DE$k@PM?mb{{3 zH}-!pr4#lmyr z*L~GOc)fUSLi~LqXiK!Z)bHAhr*%J z{*-+=>g{Q;hs%C6zJms#s`eg3@~l?^A{nr&11Uee(3@r4tQou(->O;`o2*v5f9D7P zogZaoQ5_x6BSe^fmkoO}5(wQTnB=+`WOmgY`zPhHN5Y`e>*eRL>rkD#L;9FJzq0&H zGt-_}4k--k=xHY@HiMLtzbv#q_3Sx(pSFNGE+c;A%3VWn4O&6akH=TMNJQ-u+ROpA ztAbiGVcs?@)mo2 zQ#YHWzT5|9V{_iiM9Pf9r{KN5OS_(RaHKS!Gb~M_YW8{+y*6yV8?x;U@BawDP@<y+`-RMzYGaS++gau-@d%x43nZid6dckF!anT@(|8|VBx%@J~a zMv%uDMahxuYBHxTCQ7A5o#5kOy0oG1$+*-}pWxGv_*ir@g}?nq?Xf)2F^o{jj>T9s zyW@G+y8+k|5p=7jw$z?H61|$?vAmGN)#O2eum+p#*G}MrK*fnmDqFQ+8I+K0?c(;L zEau#2mA|H&1_v*U()vy_mRapm0eES@g_S{KskF`l!4IblT@{)g)~Mh@AC$>&B5MvV zIXT5`7hYiRb*m=xrB-I9i0>GNnMbf0x#<`V-YL+rPxm|Zq@$w~bJ^g#BHLMS{)EFI z6f6_@3SazC#U^iZRICok~(?Eu6Fm-N1@_2tT z%+QCuycMSHAzz-IY>oysdY=jSUb<)(>EmYE-7&!wJHb$K51`)rLNlVLj+gV1P8*e( z!~?^LAdSe*J&+p`edlVWap) zOqwmDc`%s%q@;b{PDeAhX3TkO*?d_9*P#2j>ziV~*mX|PgHuF93TgR|jrao_*<+Cg zZ#Z^dZ+@vmt1LY=S8wZ2GPY~ybEiu|9|ws7xXrt>ISnzvOxebWJ>^&WmBqE`59ZIe z0#SQ))QLi#0?6I#SXL$a$-4D`#LfsnP)uMnesSGLLJC;)_+I@#qVF~L8tCc!b;vb4 zRpX^s8m3Z+w`E57D{HvO6`4pmW`UfP>BGVhpt53|buY;n#F~dQjp=In@j4yFe9j%l z_=~rf#7JFTT@77^6*=f{IT*I(G%$IY^*yV;A)espvZ3lgLWkX->LZ&Pvjicxpiw>$%bfAr|XI8#y( zs+ZT;{1Dzmr+TH4kYJ@e@upS^ zS84mILF0UBB39a#B1^VV&mi@&CJ(g@^K?C5KSQI*$zsvznCnf9^$GNmd6SivbQDx_ zp@aTbGl*xwB&-dV={@CE8~@xn(eKz|aFLN1wUaah*6D(VnGQ(TUAq@}>#1phBJh3; z;~{8x=tm>NAqbW3lK9cHG2+W~w+C3AE#<18M}8?959%%%EuR_=t`(mdwVJIC3i?jp zyF8QqCgXegJ$|jI%HcwXeSf<%-f^~S-emgAc@n^C+%zL@?uh|e)CU#=z@8)-K^m7?;kJwD5h$Rt*_S>%LNQS_t_w!yxGD-LRln)}fg`M^L_i&B| z^X2ho0HvYVyd$)8A}|{pu&gLbPVMgr@WVYH1M!GZek=zgrlJCi-tUo9`c>ft5v0ql zEdhMhp=FGQh!$7156X>Mv}U#D-4f^v^oiz`9HLW6W}$)C=x!D77QbKT4=WN7_58S~ zzoW-qU4JYWnu1KK?lV40cD-d+g=6j%R3LlKnnS`g5FDmbI}h%PkT;lqE9$?xLuOAB zKD1GLi_Z4)tYY$HPTea*>PyTZEI2b~T17icNPW%XaNbcWZr|HYliyJk#9==9H$NCopF? z@h60dC-`kPI$)E|;T(f-wCN>dinm{E{=!;KnK*edY;99qH2EwL9g# zxrK!*ze0IlDz7s)lZx$3*Cq5-j?$K2Rm?a{={STxXw=~iTVA5WHUDIAp5O_N(%$TWFR{5-eXPC<|OBor^;P)rlqxAfV5*$w}k_=X+_l`=2LmaYtnLc zG9E@Re7gbeH#gPz%|HoNK6_%2ZAIw6OT%#XIHGI=!Jbwo4qm=aIK9iqbE-*?urg?1 zEz#1~=Y=JDl9Rzsz+nx?1>6xtMrZTXzQ27*UfxmBPd*EGV6^}KQ=`cbw1xT`^1rA_ z*ys1RJVmxk!&3(}w4nnvyaOFp$FEToMThgrw<*~8-nD+IMb0}9O5ei9VpC0gYHt20 zhE46I9w33*uTk=YCSA&z8}J6vh+VIO33_{`#^t+)V*~!U9Urei&A-Iw=h<-K?>I0pbhf%O`t1*9;K+0uoFKK1(!+P@Y?e)i6J4gF z;CW=elXbf#eY6)y?qcwYD>9e^v>-jZFb42e%g#7r_LFs>Fo>93}fC3VvnT9{v zw0(Aca1?JB+yf#IZ$z%^3GI>fA@&D%t>lRCNg0}JNlmoSK^bPWDcw4$oh!YASj!-4 zIX+I4tDm-oGuKLX^krY(yIdA3K(0fvD za6EbdERzZ0r84%Gfy`YxDs{B&FSgN&*yskips`4OE+3RM9=;os>2xf$4f413)?g;M z^}&Yt4#6#gNs;Q^?#I*aP+_3lDTz>MplJfpr6i|X8;b#n zo`DkRze_Muk>%?8U$$)Ipz@2SUsWR>nMspCvfnfmWDKC6))q$0EBZV+FxPi-2Dua zP&ruxgs42hfA7EYXFnzb^>7V+tR5k+;1!$z_N$vUzlm1&ys6b2^JZ87`HI6ErqA)w zR&xy-CCoC zTu=6^T6-M$Ha=yCNm$Fdk|unM;OQe=PxBQWn!b8DfrzT3q}Ss2t{O$oLw{~unr#kM z*D&@E3_gCJrl<6-qb#0U#d~@R>f0}?^l#r;Hi%5ZUZ}+j!=d5xH@n|R4cze<=_9x% zZjIh2UT1$Y23C1H@K`{;M369Mr*w_4(fNw#zqJ5QDo!%%<(@Axu26ITfXYl&AFJkB zS)N@p{B{Lj_JPHh_v@*y!mTG=M<~z9A~*gc|N0W97_5a!9vXTEYD4&ypozR0=oIOX zBMFr~L;Cw7#Lk}?Z3kXv$AI7dIVrRAh9`Wdk8(18b$iZeMXD$F*W*!^nyiOgRc~J@ zn?Ku_96BI(Puo`MB7y1Y-H94tl4+5I{kUIaB_a2QL0Mgsz`6)Jxl7ndQM2du(uuV< z*wrtrx+Yh2i7rk^t-Z_EQbMuU8X*PyY>{E+`sMLs;qFI;*(LPC9yt`13$C>xqHMeOP-78f!W1dGR zGB4F|FIwIly9NeomZ;^C%^&;pXyX#)8!D=ia`B!?1e~n)-kx!@9qQXBaGcvpyh31~sYlmUOawzfKyzO<3F zX?N)s1A}BOE(4cYG?#cltLslvu*01nun4-tB&MxSi+fH=ew0<{hatTTit1{NCr?-N z=`7~>DdH0V53$<&&LX#y&e(@9vOE{tDLEpqB$LerK3!gV*pnMVt1!x+q^S2sq2J2h z*f@GOM91A%ytm-6E|c5ytY{)d{=l|H)OWNy=WBi9GQ+oN+6Q}8w%{*J>fNdH>_{qfW520alOdJDN_1=&|foy@8)mXSrdAC;5Ic>+GNAt7+py6!@4KEHs>o!F7 za=oBC4ONwEd**H1i=C_IgM}Lk@0i16c21@&oF}(azj7Ei8e@=0$ek8ny7gU38vGLb zNCj?|E^uQr(mq;7c=@%`lzhYpM}qA}<3l_i2+#kW*P9J-98g54BhF-Xs2M#2g2aB# zAJhU@-`A}gZhc@5p>02?a~(TB>vq}4Qw?1b)oaQI zJAPrmRTihqN$b~QAkQ`{QW}ePv~?xIl?o8xLKrLHH%E+)Q?WpBlho%7?30V`h79m_ zH)#KDn42L*->ny>pk~p})2~7r;*>SD6&+-1BS#iuLA~XrfT@f!BM0guH!p@m*UeSa zZogIAMAK?nzSh#Fh+^@hZ@(91rKbyrM^m2hR8iwACh=1dOHqBB9)~g>Yz_QyFv8U% zziRxhZydC;rB+r87t!=dV=yD5Dyf){3IG8{p(GgaRWMcp%``PUe@#e_S{D>@CTcL- zVHV2u-HkRA{#+rsJWY1VqoeWF^{r7x(gR>J(NCn;`2CIZo5Ht~gMIJxoQSrFW7uM^ z?76V3XJ6*YybS*-G+{s+SST3iIPh(c>hdKCTlx33_3FpH2JS!1H@SNwn3X;|N0dRe z5#(>}dbcM~sNDJ(So*>tl%^>J$PmtzS>ViH93&D1WV2FlbXp-js9fCWh zwl;{(Ump}7zLndC)K({qFP~g{moN#Xd_1T=S@h{Tu7H_jsr6!s zVr~S(&O@0F=Ey}t;Trexnz|!OW_Q^u4=u?<2~m<{THp3Q~9ao~e@t zYFcWPYV>PgYBDHafI&KA^vr=Rbl@9|^>&FZ)Jx(&a!~=~az5>DI+sHYWIF)mprYzX z+&`w^n@jfZ=*4cvHe(!p2*M*}!cqZeS?qa~>-J_-4_F#b-Jx+2uXE>KENN)!r3{!T z-^A@||s!>i^3%OO#@b)~F+OGpCeU0h5n8HdM% zQv>;Rp-BF6#`*Q>J}aAiSZLwSmjw1Yk!o!PgWkHGtD<=l`-#(;29X-aIln`=_^|uK z#VW>oMjB`hBr9_>#*=Bq)UNhGWd%!>WRLpB<&P8_HJI)p`GJh`$c3@r#cDC>gOAr_ z`vRbm5$G|5PgCm?s5IgoA?WGp>dK*fNlbfaVehfy*?s??#Dpa{r2$5L3tQR}wE_5| zP1ZX_yx-eN-S|KA_e=c32}&jViMw6^e$U8S``gpfb*PRwdxVo+%>3P%oym~CNF!eW z|6n?iN&pUJ1MBkHUrk?mu1X%vsZQtDzeME0cKqv7aiR?OkawZmqI0$Swa=lgs;xM; zYz&RQDr2qx=lt{0yT7(=5Uvqdj8n5cRg5mQ&J{>Y^jpp(BfDgYi=@%SIO&YM3Hd%A zQLcV#>G!~PAb#)x^i*LfSXKO-f-B_Ki%!y11OmP9^xwE*o6a5o7U#Q{uz z_4~`Y{^LhLqVB_)_MG&DbEZ(c%j^%vogRjPxG>AU73Oj)(Vf}1okP7a<_JtkhW%Q| zY^0+G8uwnMBdL#1-jkdLLi4*^i;?p*8Gj5f-x#l-udit|5@yo@NSoj7OJKWAPyg$~ zuJ>~tx>q-pZt`&=P$kgyt=j;z%$<*^=7e5f^fN-M9XWX$(WKTBc0W-Xkay$G<5G2( zu1w&ICkE~?h^i|IgOdyrc4(dMZLV_854n@dwBH&kRpU$~&)cvwi4QWBwguV4{H!}m z5xqYVI9Z>|2J8?r*Wsyo;o<@n`oDy~V1Buh|P$o|owzA%`-;T1mvWv5vw1+u&N z+||35eXETXkU#VI^Bqd-*I#g0{d$HAacjY7X0LFg7xOA1k$J_RmVJm%O5PhCb)w9{ z>O7o!XRQ}u^a(4!9Lk7q_KCUHm^0~)xgpqALvlL79ZyxX(byOFy_LwbSu$tXyo-(p zpjM~zgE%TyAyz{UU+qfX2SD)5%2Rsm(Og$qBa1OsN=G!*N|oEX1NL(r15eo5N>bg~ z!AxA8DTIeBT0c9ni&uyDL$0#+Bs#4|TjC&p$X@XWiBk^e81e}SqWx|HBLZnZLjS2N z76Vb~ai=EhuG({N-5l^3uI9HFk@r$NuX$u(_gvxd6sFR>z|;A+1IZ1^*1*mnSyDfb z;J=`rk_h2*CNdC%z$=#&SIAp3?jui#wZ z0f6l60e~cEe|d4v&-r2ZXHFs@$oHKmpbw@EC7F_5J# z)wK9C;ZRm>pMU6agyJMo7zE^TLf{wk$g^ts69*5@7>j|G-|&x<`yJXJw`78+_1}W! z?3mur1n}c6GbxN1>j-;|JxOJ&C%X!g*+ zI1y)^eQq;ILZ{hxNZq797Eua;m)3bbw2B@{Sz)bv?llO}G#{#0I%Kdts+7MRR`4;+ z4GeN?nOvwFd}7ATM}P@ZLX}ZI{J3MnGi-^04Og-PvPypxfY$@ z(b#zxyd@*F;_;Ki=yT_gYc+GF*d#5()EUC@xPr&MN#A7e8NV@%(xTb|&`eftz88np)JG>AH%vNVj`8d;d#){hjxibV1NUEe%DplTk^g zJytQL-~26n962+PcA=d9zUD_%?23gcrSLX`B>>Fc=~C}0tiO&P^ErPK@)6mbII?hw zeWs~Lv%{qns|Su&VY_qn&iw5?bNzc*D>^0)mi8Lbk5&*gN2?z1?_d0?*3u&(EJd5%5* zR9g=_#M-`ARXumBc=H@^orrS|z{1`-guUL==P%6Eo4H(l(}jTjiH~6VA)HS9Y0xC}I@vOHCejv4NfgSP}YhKfsa?TLy3~7&IhRGwD13XRaQCNZhf6(jQzd?9wrs;^gkb zoH~lq<-EmVO`f#hHESar9y>0FjK+WI6s0G8aSxp8q#p|?-K^5JX@^F@c=av` zdV<%&@zMDbdaHP4?b!Q#31OX-LcZ+UVK_1EEXmy2@RzzI*;9zB!fcBAb`L&n+-t3y7GOGa%=;D*TS|i!pG^L}#T(qVrW>4X99g z1#MJOW(#1UYODHh=KOA&uOk;;hkV>o z7WS_p;#90_I)V*S$7A1|EUGG0F~7=GeF@5`C*Fw+SkuuaFmXQ0uySbrWrV{!n;!Y- z6k&L^@&d@h*NLNKYhKzhT|9)tY|RiNrypxA9obZN#%H=7ad{y+jLWm8wsnv2j4kI3 zbnts?qu}e@#OU?X=oF;^R_iJqw7o|(zGOi+3k!RpZqt!3KP2HQ{uTs-0A}3ct!v1< zU8{@H{_wEoZ&jrWGg=XK{J_LbT;)hk@+eW1SJ>#3=s8|*w?PR1*Km#}H3ni#h}bXt zmR`h9w54KOU({C+uN7C7%^NH9S1v#Zwy(#&>>Xz1#K`PEGlp#I9zN!IH;h_n_D6oS z%ff^BmZDUs$h|nt_B3kw6^j6)Rxm{kL_UJ*E>xc5RB~L^$kkH-6`C(<7Qu~SA5Bh$ zJTK{V%cw#&)B zND!gvPGn3vlb+>cSg@#B?4sqcE>SO?iddVBfH}z zLfY+uUv^YsH$+pXogp-@1r4bUQ{eAJK{*pC>Pi}N?!NC^6%FNCY_XKX&_kof-8M*H zK_yYZ^0QW*r!hY;EqjXaOHoXC_~Zpfo5B8u5}y6qR87}q@uo1Pp3=EATjo|pFMr3Y z8ordR3)bY{_Jd0Y3*K)A*C9{tJI_5w3VVza#;;X9cK?I=$Qw69(_>j9yk$c*K^vy` zl8Lg9mOo?5BrMzR!PNK>?J(4grciJ!enVn8ZqafMGJuz_S1mEgPezi6vaGo0fnn*0 zNYrpWmD>vY)5~sjHkiDBqvUvmD9XtT>>>FbZ5h#HXHYv; zkw}$aX^KmRB_%Z8z$#@bGtRGWH5}h1K@k__PEzq{%e>%V+47|PqlrjA1)CfW&QwLV zA{p^RTJUTAx`}TxCA9~E+{=i$Tac~kkv!7b-x<@f)AL?N-R%ri2cF&;2Es>5E*ZFw z4ED_rwI90*`aV1=*RF80!&@-xMueKoby2lL$v8|`%w(4hDVr1ecMN~{1?jv6^n4B$Ps2?+{}B3;u+Z>jtS0No zLnQb>poev|m{Yg13rRvcljbXiPP_U%8#|IgqeA&@Mour3^Itfyx~cuzP9-YL>-%V zr7b`|kjgnjKpb8=kF*WiTHM!W>rd@gDH$(a3@;iR^Sx75l@I$eBb7_gPk$2mOI?qf z#prR2C;hf=BBNnqe|c$P9v4nY=35y=!zi7h7%zY~cGKL_#O+zqx1(`X_e?l_7WLR0K zD^vtvA~lln3K=@k^W>^UM_z(#{UQ?V_g~>kiL$Lrh$yv}uXNU+nD-*&p`hvmNh;&4 zA;MzZeGm7BtNFMsJt^2G?dT{I;Lxnsf87EKW21`AuXpB5o!6Tv-CP-prqS!bdl9H% z2NO=3X6zAfPy5qrxjyF!)FLgLFGlo$sEDgspN|kz-^z2Yq5KGU0{i&|Tr(F#t}J>C z6x<0qF8y)KfB=a*zOyy@)+?PN{r1a~?TaSNRnsZ{6qX!k-yo0ZE|cM%O)g0QrV@dJ zukC*Z2WL%OA)Cm4%s0$_k%^o<-I;0wQly?+c{#sM&j19&fWS2iSQgn8>Oe&7?c?22 zb!ggl+RvT!`uV?jLGh$DAnhn5iEEJa7hxC2sVJisfNQdAnE&FXySq8*(KD(cP|>au zzSytX%9kkv-}2=Z>Yw6b1e@r}sqeB@7-ty}UE{w1&`yva(vA00>euhz?dqqHqDDuARdok%v`Br_DQG;9i%)HqI$bo@+=6Tq%2?I6U%@Icg$R17e zs5iHi1sF892xOngVRij*NNYI{&FijsOi+ULUH*WzB@c@>a3%`8DxF*iq*?MG_Yeb?Nl+|0GfkrUEn=zzP{3rxJq@?N#)S zw)TYn{I{sV*u6A{%O?B^Nd-?>%RzEmc?DS6LB>kiXF;TSDy2YC zP}X)*BX7Cus22BG!`HCTrXbgPrZk{v)k$hwlNQuLVuIj_uywEzg-%5T*i!iH-imZJ z;H@lwxWw;s63bh{V) zLjMG;@9`Go`qzWoNTsZ617%gL{qP?X<;hOChn#$YwEoOp4+>7bxHxOGz=5~trp`3C zc-cfp4Mgwz7+ayP1Gk^#RwbV*l?Vg5@o4@3AbGFI!SGUx3nz8i>o+p9P>??}+1Y6d zYZ@b<@4+sCHwn*ryyeN-;sZYsw(|;lpIxu3ux;Do2PQSA4?)boqnsfrCp}8D)jTNU zu^WOv)YTYz-M@9lwinY>93mmD?yf4Qo5ZRJmthKLTpE6oJ=)x9MA zW$gY7@X3jUxwnwYQjFvpN^!tKjNp2y;x&KLkX@jxsF;F4Wp%UTz|E2&Ekt?ru&hT=#Rh+t^urGPrpNS^j0x$169sOuc z+-LPrdD61Z`96(9)z_Dn@l7#+2&gvz^Z>q6x4OZ*Kzt=uP1J$MZYrI+u2Xeu6{OW?KtOTaT&1w_Rcbg1d!dyNa__#A>mR8DaMe;Yf+u}K` z)13hlsXqSiOY9MX5q~lFqSC5_*iS_lMr!!qgrrC4W^^eAtf-moUL#rYI5Z^p0waD; z_O8!vin@&O*f`FK>)0J1AD*YrAGojRXl_S}A*&ZsxCgBB2YUeDu$e^wPzXdMTz_b8 ztu00L z{?q*`3aJUTSNf#wKP3;dVS`{li_sd2O!RviM^Mlq8t$mA6E z;@VlXW)ejy`cB4petZ$gqPs|R0tQRodE4!rk-F2hjM3ita|t8-mLS$$pyWCLfcl!x zYr)3g*3ad^VgA|!)=8(#Kg%DQK6wTtjtjbI<7j*fe=o|L-8&Uak() z!D7OG_RxRj{P78OOo|mQHO(>8qsdFglOfL}UBwoo3(8@=8}dM3d$cw1f-(ngkmP9b$a4E80Po#AelX5c*VqnljUkp@FJEP^mi&Ce9?JXG*s||8Ux2o@{7pJu$$-@Y*nYNp<7#GK-oo?kyCK&+djVR_ zZ(j5L`d&y#ZAM(&^o3i?nIn(vWCy%%pUKo-YrdkX+!D-wo;`nn9@QkpP>MJIr~C?V z*no6wZNd=2{8(Yu%k?6~v%%Z992n^lqzhtLHthbk_2lqfia1R>X-4h_V1-B5~f(IRjpb0^OyE_DTcL?t8 z?(Q(aU1aa?KmWP6j$CS{pqQeE>F(A2*xL&?ayWS95RSo!*=0dfqG%bFG_hl#FhGKM z-vkp#cSm27tJyY@ZNWMt@}XmKlg5VYXv z&b^0d>L_DeceE#E#oIG_2UF8m4~&N7M(|p%%L>Y0r())@7>a2LyL4(B^SK`QM9iPy zSk_Sh3q4^;Qu)sd@=95JfBbG(P1-LPMv3@U7}OH< zmlk>mj^YqopZTO9*PalQaIzDY&(=HJFHT=NqE?rh^OW9$y92zAnCp$?#%y#G68p1b zx7fX)*}-Ixx7aknX6=5by6zUtz>nJ-k&0WB8U~x0io!>GO2BHKg?#~N>nxMY-Oloz z!pNI}j@Ylcl&Y?JrK_F5 z^9ZCCYcIxR-43g!YfswI_<(|;2HwA<=z|aq+)8UM+1VU}t@1;S-s<77?a@kAh>qLt zrHf|8SF}yY9a>>Z;a2Zt32^L*#%%rh!_)B6JW`E)a^O;n8ov>(#XbL(^IC0677wDi ze|ll(n|XXYN9V{|9uOsF;l`Wjgcswo7+8wLa4)5tx0yH!i0i8}B48rAn>S>eFmj6~ zM~d~k>AkDtC(1vwtG(w_M=~@9oGHyJ;-1sV8j_bY=Z|F#t+1M&r)cn(P*YZ_p(D2; z$Dt$A1HNsylyU1S1Tif5^tU_pDXH+Hvow8bhHoC$x_%N1d*bU&yIswi752#nBr(oK z_;Iq7$?ZP*P{!jgMO$YY|0&Hm>(-p@FHgE|k9JB`%ik~8*KsS34W*)xvRYA_E55q7 z%)T%DETL|8|NEtOH|$Dgs8exap;Uo3$Kl+cj4;BFr(vgk zyBf8gx9pC)^j@6t_`dn%Vu(LXJU@I-beDcLhG?OvNMKW)f$JkJ{;2GO(zO>Xp*zOS z)L}W|QDvZ$j*poVm8#@GF>OVCTyu6W!@UD{NX ziecZSERq%2U=9}$baqRiYM-|UdqVSIA4fF%{eJT)%jy~p9rA~m_t?uHBRzz85VI39 zU^m%T#`b*~GJmgZ;FZYqKv-$!)iz@@4fD%&3mv>j^j2j%e*B{4o=4fBc_`)vt@>EF zV@i*R&zWqzgMzKXxyFa+yvXXohWs()82?FijOSJ!n$vKZ+cPIAb(4 zEUPDZC6>w9b}~Z|kQA0%!PznJJi7ARqmfQsEVCO;z4l94kZZQe5w^;3j)5dEBSYs4 z1C0@X9=_A^w@*1f%tuE=xHAFbg}?eYm2!5U4je@czaGKMygk~R?Zj)TjP`J`ri5mT z3^c%RIMks=uy@juj~up7l6e1c1=IAzqt`1Qk$WaA@?!0WTE@d%0{svFygUt4CcJ(LUs@AxZ~FY71A zhq_Dzwu+{5oU7!kxS4aBtMju|?dy5Cw-;U*e|JlsOMkS|D>mD$ni@&ED9)D>Dj&R? z`fcTJrL(S2PoKG0l^<(4yE`FhYS_=F!eYTBQckVvH3fh?&(ki5JtO%xS*ikGZ)F^ed z$XW7QDEI>{77Ez$hiv1%a#B|@7g_cviQQIE!4-Dd2gZ;Q#do;PZ*sBkBVPOsuISYCE#8U@d=t6k5KS^J;#ql2TT3hHYhiI_4f!*K+Irx8PmPKwj)|F~lTYl`ipQK9Cz zZC%Y*+Fr1tO?N`WWx?0c@W^nmHDF9Tu&_nvG%LMaelJ3dL%0 zU6DOJ&?2;I2esr*;#Oa*S}ZB0aH?4S-0B>BSpRLEGUxW;h{Jl(gru-@e&%#@*|-B+ zgzaobxll%EM<7x!eh;HJfw95CQ;Dl0I${AdY4@fj<{vI-#OU7 z*f3SA$3~Zu8Dy1Y&7Ej~a|ab_Q5??Y{su&qio;I)Jw!T$Rz+5Ru8OcS!3LlAOPBMo z4?1-wLueMmE%1}AU2%97mx9Q9jp;>eN)ka8S%)!*Ch*dl>S%oy)Yg3YnFn&{C1mG~ zoXW$f1vQ`4^W=#v6D4*wP&u++uU{|^IC=7wtXejS#K@KeO=pDeH_YtU&Yd1oC7hKs zxpTeexOarnHiunlXLuT#FfyRKPlBF`oDW?)uibT0)(W2@L%_Q)kKDNaH0bILklrg) zOya_)Q$T}fA+Mv>@^A)+MNDPq+v3V$A8u`)d?5n^0$YNfw$~7H+s_8CH zpY(b(9~&MZ`}dM&ZlcRJIC3|(4RxQkL_Q~)(~YICz^*LoA9^r7STEabl0IM&Z(C0F zzW`a`?z@S-6(oD)BsqQ(ExT=bFseh0ibyh^z^2x7@=C}vi|VyxDJ|yaFHMg8!NzM@ z^npMf9=pjm3wE*AZj|H$Tb;|4sf7}=RcSho7@)Y$2WdDs7#1d8#w4eh%#DAky*FNy zlbdFluL~g@FEJ!Qvm961vtD1rID3enQ}Nx1LO#bqNf`0c%haC1(97 zok$Y$z(q*=Xov^OzUlE@-p)>a9N?Aq^*DM!?-Oi^+Ss5=5v?~?I?51Opd6^-6@Akqon47^z|hva>gy! zIyF1KZW^COvdR6|S0qmBQ*TyKUR}ICyM}+bStJZE_ne&1V|yTsF8jsJls&{<++ah$ zyJ1A7OxJ@Q^2#`)F{%8T4^OE-pq^ByUx9JFAx}Q%)qtfxKfX@EBufLZ0&nX40V~z$ zD}1bb44rOQTNc`ma|u~R>YCFNoD+F`l7BAZ0^t0}Xo`B>2NlDl1zYCmwk2yykn{D^JI1BSKpH)&-+wu;%uC(=5~yR$XwiRCFbikH>G zFVx~O34SZPKpXfB7+$##JyMv zJd!zE&5e^+%tbV@bN9|u4K=1rdVN<*jEhE`AB~pR2yK+?!$!F3O9}x1OuyOgk0y9A zS#q|LA|!Y-Li)It9(eN;iEQIri|em8q(`3;!4r@H0rAFTiKqYKHN+nckC{`)1n43| zH5Dl7F&Rcg9BOQj^-FD^sWQ-?T{^C?oc-o@pg?m+;be-lrxt|+@7&z7kSb?cWikug3z-euoODN(^s} zRPfi`64(8{jUP_uli>K;S(~o*jF5`u?%k2MYItSX=TB@NrNw!||7i}nU1o$I z8^lMFJq)zBQ68kLJ`4#)ff+dFJJ)Th9x)!+(n+NdW(&z(L^fO9d(qmdf2FX}*sd>= z-Nf6k;P^|&xn-#9(4;X=NRuchR7i08sJZyR8ZS(o`T>*1@bRd86%|B>us>y?Ir=l? zwAp6Xps)kJb-Md^4$c|^JT_gw-!hJA+Pe-#pSx=EqDnloT?++=!o%sh)}~;hIo~SJ zu+hGIT#d{=(iDyMzi&|ZJvYU@V2e-Y?U$B^uf_Fy1vn!go(IIwbetU<6p#FfF#7+swPJEJV|G3JNCJ%q2s~3Ci^AD`@eN+ zLgV9&0E!(q&(GtqC{S#ZQ}EAlfdEQq_jq6>_%LB5VZq0N+v>^P4}}WGZg1Clx~1IS zx@}cxmCr7;qYZT8%SjLz?6K`T^y>NlAx#Gw7<~8EUp)Qo;7y?goe5O0X6OWzl$yF7 zDsZ&&Tp;dC1|^?1fPf>baDh(_Z^&m6kK!HX^)*{^p!=&=xJ3s#WEXuhR`$rUy&&^a z=!1CgKdp*RJ9qFablATFt^BJDc$=kyV+4*HD?UiFXRW#*3$Fjji7#kUJRCEsi*(D# z%5ATeX(?%xWcU!FG>Y3)Si1ng5f7i%pnZDe!VoHo!Qs5!&pJsM8rbS2MZ?Gpl|A0TY*zA7K^=IkJ+B^IaHwclVK#ew zxakq;wq0~**tf0gQVy`~+#AM*KgE(KT25rYp_Tq4BEy=lq-v;ZvYaRe@GFV0wM-UB z8gcnt56zUwAuDZ>XDoI|zoQR~WbQt?g-$av83BYG=t%Jg;|eV&J*ja{KmvgA9>ZCV z_l&?(OyO1-BOiOx0x1Yy>sEZU0bw2Bktjd8 zf&DyH_K$x`He-(tF2_c!`OQQ7Jrvw0C)U3ENY*6WtkNa+A?XkIe*+*sZ_hZ3F zujoewO-}ZII>`!)0nu9}h?WNPd~nBz?qj%>cg9J}7we)5KeDuQ0KyR*(t+DlPUx#J0 z9?u~0>}#Hryv=mh7MKFLD9n~hOe$;I@N-eKSIMKWDaEj^1(}Xzu97WeFY+VCPv4+rWe(HDCYLAwe1)?-Vold`C zXp!dJjm@?`xMgU{Z=qshIWd}rMpcRDS(ra6=bU3qiGugDGmdcb+~oIbS>O%jSB$7e z#f)uxUr&qQH_3np90VONucShwF02$DCNnnBLdMwHK+KJ2$HY%ww+bMh$Jm-@Ab+-R z0|r57VR*l;O38WN5SWI60|DG4z))21d)Lv{3fm+c!TK^MRIQf1v9Tu4t!LxJ+LtvL=4>}n9Wj|#d-8fWFYsfg zY~QX{j?iIko34q@ht)-R!Ax#PD56Qj+)iBRCnj9e&%Q&4R@GWsd>G2xRk|M<7*Dxy z{HD4kTm^xBxgt$#heIVlOe@r^*b*|)YAcrgSg-_KBd@egVOI)j9_cjWcB?Q>IM^B!5@%uNW#@T2yR;O5 z4T^5{V79{T{1M6wlCeMe(IE&8L216dv_01_c>3xkz5=|85wr3}@Y7ASRYCxF@2fcL zJA7#=X)X3e0HveNsBmi`+iiwA@g}Zns2R~Jzp3TIC~}E;p=bj3@QH?XszX+!-uYhp z6V9HC+=EKld|4kBXKvb@!+Mh!39V2vdAdB~XmZZ*M{z#+Zya62?#wHsmN|}cZ(&od zlsd}?Wy%(W=(|GqdjZ3@BS#R{f@Wy$Dh^9+MMY$Me0=>dWObQzqs41Qo%czQP87~- zlc~F{(5r)O*yU*zA)1&kSW#MH%(>AW+}!$XVDDl%L?4JoFAU5 z%RKnSWb4QEfe|kQ z4V^1ycxFrKsb1u5cv!7G=y#fS(D+kELqsm#4F*?C+|v? zT6VU^BmK{d*$j97Hq1Hy1z6J*tbFCHe<>?^SEBs^ou#2@5I!NlEIO!i`LB_CO zZAT!z+tWxa3IG;_ku&_5KjEGWVdN+#N33ruiRG6O(w3yXb^n2|aM=WK;B3)x(BMMz zpCph{8W-`vpKr#1Ir8b4@s2o_qtnmRExvdLZpC^i50@k6B^J_~@Bz!j+ z(&Ak$nV&EHxa8MB_xv^NW*Cp-9Zpr3Mi;o?&Pn{oh>M|g3hs;JT<{T{zyeCORl~qj zo2KFNrrp3zsxWZux-Z3a86$_HC&PV1h!NPn3rt&YzRxpsK%B6iXQHko-#vnOcYi&5 zmW6hN325zL`-!;3)nabB(EtJX`O&Xc94=0Qa>%G^ZY$rA5{iHY-=~zu?q!O~_sE&K zPipWml{7E~;r)9%v;D>u{Ij~D*4$DG8awskn@&zbQp~v{j$8WOKS`eEtLv5N|Z4eze#af*BXSM4}lwz`%GqgM8*8G@pGU2I$#pc~(Ys0mJ+jSbeSh9*fX9U5I4x)|^e^;huS?=v8Q$G+O12)l z*#LNjUVIGbXA&r{UOp@^bXMQdDg>DXB^Nm^x~49#F@e-LiVi7zrm9sbZ5+7FeUS_>{=5E`)~@Isltql&_zsT^n%bpjy9H z4*7411%a;>V)NZ6TbT!TC1!9B2ZYU-EkaH$9zsN>^|O&PZE<8{9St)`=mba>$4Q3V z7`1GlQ8&WW7;43}Fy6Mnvok6SgtANF%`0Sm6M6+Fn)ma6O;s-RKzp0e*=g6i{OO=E z2UAAxTk9Br6fh4DJKmlNo}Zr&m{k~8)Mcw{Vfo>74TIk`n9p+$Y-I}IClX~87GV@E z3oZa>klhmeyiRwvI_N-#o$2v9hvyOaiWfRMt&!{D-6F0Pvb$7^E~0Z+zgz7C`oiZu zWh244Ls`7QIGpmmU3>FI2_EMNr;#o3|B1`YJzz>s#y)*ik3tZm+xp)wn~Uc6V|Cft(aaXww^oh$kzTlf2o+j`O9BW_?-7%^DH`HhlxD8D!Y#x zf&R{?(uVon3fDOnPAOG>44zoaU#mdAFDPAp@o&;DdhhGzuB+j zVCV#F=LeX08v1GeaR_y4miq2=zF7DK_}kcyD}TS}w)2`kUy;5g!v8a0JuVMVaH$iC z0<=DuHYz+YB=f>A(hr&mkB!QO)4d63vpL8O>KWFC)Zr)~Kr6ua>W+$gLKEjs^hZ@0APqQ&g5ZfRW_4 z$za2)om^s3btV0NgW@yt9(N(Ih?jJ3^TA?}5*q~kBR-{wy_*hn;}?*tx>QyH7uf9A zE|=D8KMm&kngps}K8}%X6~Q>v`NIzlVx9BH&6|C8JvY6PErmUP!7=hOy=K&;bb~50 z1++MYsxHyAmme7YB}u0;Ar_s0rUIv*RsB?)f+ba==J6@{Ojd_~E1p?70N?7b@tB<7)2wvGce@VRN}$y9 zN#Z^QYn}^5%<(GnCiP-rN&9)5Z{yW93txP#&Jq}3=}ix|2{m4<6*k^?TMhPlzw@NL zyY^hSy1%`fCY5Mwrv)t>x=KE5S%ymk_6!*7h|I)&Dt{DpyOxrKD#sGT8yrl<|NWrI zMDbHIV{WFaB&|)MEY3w=XMEfXcBQ-a#CS@HU!?oV^EjsDyo1(+9aZEk0)R`=r(jT2 z?}4nzK^%RC=2IGwKN6_6Z>Cs~HW1sa)8RKP^wsA=Rh4ldHQ5XQoyqC~(; zZ08hDhT)H((BZ3+dlO6F=ODyRHI`G__W`qF-<1s9;}VTtt?mF)uVZ|Q5xycR4dEWA z;bk9J5aUI*lpHaz}z?0U|kYD5&!6-YMBtvIGKZ@YJy*f=mEN{?ta zD;*Fd+U_QhokJjCfge*ua{V}_f(i6x!g*39^{)+c-wI$8QQ_=V%j-|5N>)Ju2~Ue~ zw_}P?b`lc}?YS?C-Sncy{;=aiaJDQQVMk?mstd?y{4?g_fQAJz+?tDHw zU=)*^=iSJ8uWd|-V$975#0jC)-@ zifhtX$T_WzaFuVSzZ#c@3y9{b+$AHk6n0v45$*Qv?@$z<(r){m4$BL!XbGm@$J%jo zHcoO`7%APBqLsaY-6c#bNG*%@?+a=U{%mm+h`1z_YS8VSf zIwVIhyN30|a&y@8Hn<{g1Qr1esJrvnTzw9E_rhXNEo<}0=>G|gNzby@~hkEAPczSx&?AY_8^#LLK>KrY;4PyTF>Vq{?#l5fWfXsiR8^jARZg_7x4M`un z;g_LzHMfN&5CIVi;8iUtzUFXFfY<>?MCa34Sao%q&TfTj!WoiL?$W(q@Hex08{6>A z+_FtkqEE^=TDm?_H|hH2zH*uw!*C8cSM@sAy@vl*IjGV$DetW;DR2-;fibZN2&_g? zqoFXfrm|SYRDE})mf(=Eluy~@-e?C6xPD>b?|&()nzFzo{%9t^>!P=fpx?TWzWZZ& z=1;x-h?H4?^8o@;%CC4zRS_X!_EZ4N=f@5_8I)(ILS>yF>jEcQ4(@f6$FS+YOG%7V z=Zmc`qA0;*$I#I4z0D%(y@I0PF!C?!Blf9ke_)FLk#`oiE8#Zo?}S|7_pY9nkZH7E zzegq6ria*sXdB))W$nz5t3OgvxQ^=f7$BiTNqmt{p8Gn>DlW@lm(5_ucLf!W9|j2w zCX~!_2@@(_bgPkF9e+LOks11Voj+7ASM9h44r+GAaeI+{nI6n&KWVl{bnFa2r5F@+;*x7-3-HPd_k0zr0C&C5n0izf3no7Cf= zEJJZ$6PWW+2}pW8>QBxj<@_73cTl4zm1l|FxdV$CDyiuz{z!as8eyey3U;*)r!bwl z6}YLm!B@6`#Xfo^(kt^)5GDtZ++3BT6!M6BUEjVjpTcf)EvxwMqeRdFg;ZEDt(%^! z?<|k6oaOC4EiRi5F}oZab(hQcBQ*fb+qt*3_L#B5rymm=N4NQe7 ziM<|rmyQ+ddE$c@_Kowp;l)#-PPhZR4>~*jC6%6ynr;t27Ftz#{_e6W=VjKb zkGejtk^AqwnJJOk2M!2my@CQ(KQ2`rkBapyW993XF>8c9>ez9ymf*fkQ42a&T^LS` zk%67AJ~^bp(bzJv2nx;?F25@*fAP-sD<`er-aqtt;K$_DplmJx74!qdnJ*zq;%sZ& zl&%VVvrlf{Llc$5!9wr^#>{ZS!N>`jUqZe+Tb9z2i8(HiigB>dXeM*u7$@F+Pt7Q8 zq?#EQ=|HzJf4I7Uqw0ooZpAD~>4xBJmmxHqN1E1JC59g@wJBHmUfAI!aKAIqWm7L? zb^H};E~2m;!$xUwu0G@V%eTjHKa=62VrOYUz1kjFtY_DC>TIn!4(8tRW8BXMrAxwH zIzIEChf0zUtY67^tBvAEn^W%tzLweWh9v3{FW==IW~Ze_N1@h;q^Awo;rPFKu=oBM@~6kA zQm%iM8n2UAI#+IWphb=>EB?&+1LFkhJGi~&I2IgqkK(JJ`T9nFa2D~}w0ca^1w#97Dsx+ZH~_qOF)r0OT9)(w;a;|5vy2p=-iQ6g&(Sp*n%>0H-LY5ejC#8vJq|BC}%k6_(Maf&ZwqDg2li2Vh z!+?r@QG3l?g1m9D`Vd zBbU4mKG^5JnCYJKsjJgUUEg9WvJuhQMlIYs8q_h&!CGBva%1SZCSi%|6POy-zi>BY z;s6(gJYv{~CfKaZgeuhXR78Uh=0BBqz}@cuwsM{t;d=R3Y0yNhyeA7TV0qfzOC9FJ zC0nTxc7khxb`i9ef;4M}Sf7ym*_LYJAFNJnrBb(to-U`IKPdhapPYSjIwz+mDCU!8 zPL}#6sk#9{lVS4;YAOsEN(VV?0CBVF5Bt=POPh8RXQ-xBpxS#4*h&KJPWgg~^FFkM z*_7_))>5KebS6wO5riaS1+^I4{3My*}V+inA=IBUa%{B6&i8*l?pMu$T=b)G}I zV&-p;PTa*9GzYXG&U$8x_09tW#OuI$s|!cyjN*A88^?rO)oC zDmM?``Ek8-_wW<&-YyIFNW;J%Zi_s*jXVAG7bd@+2`3Oy^WCY}cm5wf-#-apk}N6| z3;iIT0DBpo7crSh(PLm709NXa)iY-t#^~aSnd1QIU<{^@^~qQChd(1Ii~B-#$M7fmO^Y=&It?w*}h!Or5$&Me#(}<|i)iZ{O?K zVEUIatG@(r8fPWk%#{w(htejZHJS8}Nf;0FzxY66c?$n`G> zC!gxTuPznNSTTt)sUW2iudo4;MZGI&TH!GFhYuCNC74dJaKKxjWTX=miH$TfU4tM3 z@;V~&c|bBj6vYBm!~cDjR0nRu0d1C#_T50?W|89=gD&9r4a#7yR-Qzo_m|T+MPfAN0eoRROsxlHLXZnOk9R_z1BF5bD@XA`g@_(3KAOZ9f6HiVM#?Xyw68Vxbq zD`SZQD?Hw$x^3U{+XHk}H`Ub-ID#1Yx{+{0ub3GymU3q;0nP`XrAVAR&P{!&-|{V9 z3z!ssmj82H^bc3-cOWj>LXPIWq5p>DhbJGUFpv{{#->`5u!to3?qJF-`)G1re$BQ{ z=Y&7x!3_Q~&)(u-3#0mw$X_-tc@j>w5em@uArdnmWd?}iuTg1LZHI^`B$~B=Uvi$X zRs_Ev9V{p6(yRNh&g2Wpvku_QU5M?q$ABxaXCH7!Y~?E-;Sqhi!~k$9m)mZiC`!M1TK z37xl-Cj&Cf(_Ece0y$KE&FBf+x)^FUVNl7g2vGT|&)I(+#AKR--=9L%KQYUYOs$Xo%q{MkQ}~R4@pNjud-XhNAyUl6#4d-1dD zn0ox*XeQy;=BnL~7zUVaqtcG-)V;<9Ba#yJYL*Q$?$gvY;){Dtw(#jDr$9s#2$vdD zi~JKVtylw$fTWzQLxW4L0-E7>6Yi|C_me>;YP*=0DpCe@bpOgBYPJt*#m$fEys_NE zcpP@SZb#_wu4lWiMFg(|^XpP^z?RCK_n5bdW7;sR5h|{8i$&P2G}s-5b@3!hx3i*L zFYL=Qu>s*b`K+k>0{A_z%D~}p2Rsi#%@_Q0|ga-ftAA=rizzC*tr7o%rQR)<8PkM$^*b-J;uZwZ zrdq4Q9V{nj`KwZ@9h|XGczYekkIITRsA=)6Y4-og`>4AQ=TCiA+tc|qziQp4l>Y^z zGM&7VnYn!(xL6>w=bRSj%Vfk=MJpPw)gH7gHT5UU3of%UE@W};8v*v1o#RXcD(BDp z&2}>FyngJ7%RJms7issHb$Y!Z&3jI!d!t3tMtN58^a%sFYs&o2pTv^v_+)MkK4Mty zD5MeAd;xO>Lxi;EPw#PH!5bz-Iii!KC-pwee2CkcuF3l^(x{N5?P|vBj=k%cKKTee zlsZ?)fsnlKRL%*#cRMIC@UI;G33l*JDvi>7oQcwi(64(U>;=z%VE2D|$r^aLULdX0AadiAbiP4=f5?(1XJms>=(c?Qk50rk*+9yQK6!ehAhG2m3I zR{(JGcKYacwhl6^IvbN^d7B;Oeo)pEBwS0cWnbQmDJnOFjfFdK34U0=9RS z2zmvCer7Pv#oDIHZ9#qvSRzK20}EHfGKBq!3}Lqno7nJeYh&56ZckqQoy&8$Bcu<@ zG7V0Jf6mV!7mC0Jd@c^?Nh@V%9YhibR_>%K6=|*xjd29yCxLl~58?cIX3D z65Og`D}%~|Sdo@`uU@yMylmw}Ss zzNKHhiXl52O9Hoi>A-YLqBm{3u>*YSIA%RlTzD8do2@N^i4WDs{QMEv!IM2^0HBF! z$}sEJw!SlXumq@$I!X7GVYmh6=*0xA&l8G|-KOCs(KAU@tMAGkp|2c*7gdnjJqHX@ zLPDAR#$#kUN}9AW7z9GPq9GIzFn#A^yeLX|~c`cM%zRREz3x%=5fbdEI! z__FWXJ*5~UgK5NYl%EhN_YO(?T3vxS>HO1_AeXw>rqMn zClyf$5#HWu6EW&QD%l>K9^M}3oTqPL2S4J(9Jh2&g!4h$TC}9O5DW+Hc19?;ZRRR> zpayPq-AyhK=2T%mzTR+3Dc76TK)jNyf9VRc$^V>GFwq4KrGi6pQ{9W`m}2|G2e;ye zP2++1-x&}eWEtiV5gGR6mgP>gim3j}4gT@U>dpVj0A|h7KmS6!|71c{aZ*s~ZP#JV z@{pQ_UKK3ivti{kVhu!EM1eVh<<||w84-$B*v%d$os*sSr`R|ggF6B-9d))Pi#>X( z20#9dy87XynfQR7$G}HPMCL6eb7*;2FWXbGju{j>4EU8jBrYcd18iQ8=czpM8h?9C z{a-5O$MwB<|5h55%@FnFAk;`67Npzg8V% zzA9P^))Tr;wqEn4Df+Tz0nmDW+WW_=sPY~q!=LVnJ;_JenAp z7Ufn7h32&-eX#6Z3zuwv&tFcko$A&osHagY4DB(WepJA&1Xdj^zpaQt(@|#<`Eg#z z5&S18x0l(Ow7%D-g#N=V#9?pZ=W`JBQpF}R`afBK{ps^!mnO9AkE6H^K*zPOp`gEy z#}5ua_19Wlw*bhU!`A>rra zr6$)Vec&d?&d;La8@z9GK!q7shw;a8)c+6?W&2eIJ>KC&gEe}sQ~C%Kh7NufEnZR? zahk2c)cq=!#OU3qXJgMK;rl%MD3@`7xc)rf)g({uow_+3FuG_iao<9bo1$aRNbdP^ zg$o#sNWi7t#Skgk#=)uBCr~TGo zBA~f*)GT`mKrW;pox9_?w~yB?1`vvWa*7UsxhO6Eyya5LQ-2yc?J@b6jYv_9?Vk`u z{X;=avNN-wSIhK?!GKi$T&iYTCkFU{gUb}O$qWA}P&1*!d=5)W<-hcls0TXzx!|np z(%Bm5GQZEyRD*DD+Y{%G?k6f(Md)G6T2Wd=>woqUuY{|{jywLtFEpAiHR|r}bXIle zZgdA)v$yLwuvU6=RiP&{=UH1`>KFO`CA5EbvTVL5#8Y;0VxI;xz4gysT;%uiekPuS z2i|=yh?c}_3~aB4J5TN?45Jgjm=&)&Q11Ywqg^F!zn%aNr0;&Jwgg_U8WsQozc)U!V* zKWh=srvkrQw&c-2RM89g)Sd6r=Ar3V|8SC*$>{NJ1QPZCdW&yXCJ=#vGr7T+cEXy~ zIdjmhNG%l27S2!ca?EubSyEJIvU;v4iyp)wCD){sh0#gX&S%k&@=R9-R<6G_69W&y z_7$B5-nG(0m*PD?ap_}w}KP^<>75X{w>4a z=^ip$ks&Rv5qBc<`$Lvl{8eS73yF5V1E9+Iu>)~PuQxa6*HB@h)VWUJE=xVYxlRmQ zTEN-1vT)!O~o0 zF{r|PT}Q|-gn81bxE|04<6BcKhm|E#)7*z0Pd3Ydo=;-Fv}JcTfmzeR@;k=DOhHV<|8q*eVp_hG0iyskLky~Trz>D5zWHL^{h^h zD_b_R-b_3H+54pm6cDIOnK_Qzel}VtwJ=2)IXoN1=9D*#hzyQt+<0ww zmilc^m@yjc5VY_zA~H*G!yuUb6vf+`Tcf7a!YUk8N)7Jn}TI~a5LtkXbhLvYcTYu^hCrei4}s0_f_943nJaq#@UTzPPwEjrvNv` zqV9z}`6@ea4a7sYb(Zg9faCBQ@JiCik=1@kX6`{}EB2su6?^S8YwG+g)LVxp6^}Uk_wDYu zhdv|0D1w_jg*H=S?+x9cGz+42fah9!nmjz6A0bQAsKV5P7vbZmlYelCc^?%t$8Zyn zCiW_Fu$l3ML_^2~GT$N^5dem@%C{rWk=#2dO_v5xc#^IR7+1#iAn*1a5fP{W*;ewj zfg&UBI+Dl@3=$^khQRXe3z3^P%uM_%CT9DQ`SCzz&F#AYCVF#I*!91ql4UL|STjHLFf?3)IQ8AP z*;g3&#a+q2Z%wz7BC}#s#=OA3Qe$YzdU2VgA;T^?K*H@J^XJ*Vz-FyS1pIvW>vBBg zU_2g6dvKC7LGWQGt!Xr{f;&6@8!aUX+pQl0hG*G+Yk&Y$T(?E&bvW%6;&I$G4b}TA zOrsg~xBaPnE=BPV=Q*Fs0;B;a|2{n$Gs!0n)TyFzkP)otbhS7%}IX0>NE_yK8WF*ARlcy9ald1{!yF?$^0_bC_QJ86d-R{9IwU)Ljlrs*735>>(a|Gbm7 zG)asnd_nP>fTl1ONTp02W|vaW3i}k+p%`bQ+JH;Y`D{h?g3+V!&L4kc~YdPRaVhQ9JgIIBKZY&XC{WseSKk?6u?R>{EQKgcx`*7#I^dn<+Gk z+DZ1bo;FX6N5ZxI?5hGf{gXDYeWJbZyC<#z>xXvKn}}FM)Z8;|W^{Jat8y5V)3xEN z!;(O24r-gv)H6lTEjz{^D8zBQZtaYBGMB=?>i7I?bHfNG*4G<8SjsrF~6K^n0goyI5zof!E!>$e# zp86I3#;Ei%g4;ibI}unLn48p~F@#65KVHfI$~VBlCadrEE2TZ)<@TS`oES>v;da!h zqL4OqVS5M7?dJ_a9=E+#3qtGIga!YpI;_7A5Vn5uOzPGd;Ogp-HU&&Z7&kc)8CvGY zu2W4I0jth!C8K~xq+z~X?2ZJrqKjNDq~hSfXUBFr`a=bAiCK~a`x`%3ruY3nCn!Me zn}dlir`@>n($PW6ncVklP`~7#x3`()JG(xq7L}#`aKblhHKEvz&H=cEy|nqjT^_9{ zpu;lG7|5O2?bet^NA_~sXdYUxit@F!;t#7NzPsRpF88jTpOSkACmsCvyS&0250BY| z>4Y(HMo=GJUPFNhf1CxFUtig~w3dTy5b5WKhy`0viCbp8kOn@!BT+bO5%vfJ{8o_! z6`@gGmI>=EpJ&wpgU6CR*aw7DelhV0ZXfuJh>*y(F~zV$8*FKl2f^$}+uOu4o6(l* zlq1l~F=xpAaxYNa3W&9bHQY999D4?$8@99u5_|t_=NgGQETc6rDwNt=5wB5m( zX&XbyC_PSS0`B)#FeeLUW!wX|YrSC|UgM$r`!eS&cb!nxW>nqH=>7M|;ins{ClD*( zo;!itDJ7rKHg2`<|2NeKH~}-iE{^3sSs&K4jQ|BgpojipiALA#+989F`jwK*YlC^1 ze|zw}a@_nZl6oL~maCG{!?8sRF)Ozr(uPj3S7QVq|gtu z)wVXcCx~g0Qm%iy+fdonboT1o<`eRr$EefCJV74@$?%Iv5a})3gOj?NXZ+y%bKuEX zQd%N9O|&X6Qgql4?UGM)54Y40`oWf70xzK|;?T?|WVt8kL5qhqd9TCHJt5_{5Qu}; z{D2+ScEQ6dm}-&9L^=2#^c~yX1$kN!1#Xqx%0bV!eLs4p#)?l##o;jnxie-8(eY>| z?ID{oILQWdSC)Wxif09)u$hmUd3XE`nL8Jbl@66-Sz}k?iB|QV#w9q}(`yKn1Y?8< zhe_eR^z=btL}%JWEISXk0f7 zjkc#*3RQeO@g{VaYlZ6R=*Leueyxg5=x!}b9=PrY!$#hXCzmEC%W4n4@#V5dq-Gwi z4Z$N=Qln>ZH=&6u9nmux%KNNNset<0dsheBn-bZF?7`8=t- zkbFHIiSgx)&C_6!RyXu=y{xv|W!TJfQNhT7Uf72BE7 z4pGdY^7nT-tW952#&u${iiN~XwX8i2d#QH zxLn+pCAAV32n%c`QtKuw#LBh*(`ekeGi5kCn7`?0TB0 zWLE#9LdhujEi|SH*n?%~*V;bU6f3QE;fEPuyRqVu3sd8}63yjccPX=ra2TOU1Y|UQ zF1RuHhn>jwX}d6w6SxSQ){8prjS?*pUtd2IacMDRP|nax(SkSr4A^0;21;)|o2gve z1gN70zS}=pkgxwJAlYq~p=gm?w+99P)@J4d!HdY(Td%$pd|EFPL8caP%Rm7d1{^zY zgTs`IQejqVdMpznEQ{*eQ_G!^n~}Xv8JtJW!l5t`g8Ev#NXE-3R;@XX!_n$1vVz`% zY=#0&FvgzCR;8;pgFFaUokZM48pY6*3+X|Ir-10lCT5=2V;3~~sYo$pKB_(5B2W7> z;YpUuLR<}d)?2G%gppKYB*7%&pqCJq$!qDZ#0(?P!pmE@8;BK0I1>ZGCyE#?-Mhi4 zHaL>nh>d$^bRv_9k&ACl&7!w4Gdro8pz2EWU#KbQjg}8fj9oPr_0A-W>6}kmd>9`d zc@x_d%o*7*$wyu$V=407`&PgN;3)UQ{H&}I_#*@g8$Xespd5tmO1%*mmVYA=j)IuO zmOXv$;Hpwe6VmxR8ndB)0eV$E#1+epI{Va9&pwZ@H1j&FA>v}Tzvi(tQPZYDn+jj? z3vF=2j&^)}k!I$QFb)4gb=Vuj33@Bho{f$C%{1JAk#7wRQgP#Klt`LtpTSw^8f*2- zNS2qI)J0P1x3tP-?!0j&`kDkhoQvvM!M~5k9F}e*kww~^dF!Bysi2N__2s?~t?MNZ zYrKKZy}SYW2QR;%S#63tKOmiCfUl(YN6st6^*3m$cMb%=au5DqKOp$b5(Uflt(V*_ zywfIiE?s8sh|LIcEp-W*>rLEFa~cMx7|cpEnaAsHUv1&+&?DL;mfKpE5w(slB7rIQ zO0Q|=cGiJC*v9kF^Mz3kFMWGoMVv!q^~Gw|iF8aE2EUvojq65=)Hcri5XWUl==Wt`mmM^5 z>$Pdc2y?(wS~J!3aOt=0vTAVMY!dLYbimiyE8oN^qrQ;&BUa?G3QF%6T&h@9a8KC4Tcx~^2KsbZSJOHwG{89 z@}ceP+nA9FWkk@08M3VCcOF+&NeCk$@l$0)ZAn)Au)eyejh$g}_QL5%NhKGX5C|Ea zAl*v;sZHI9=hNPo-|zh3bH{%w{>GG(Z+Mf$^XV5>j^b}`Lq7qg?o~e%?|eB)??uxe zH>+I52Grkj$^O7fBz1pZqP8R6S3f+YIg+eRd; zB*uB{B7MSSLWPOf1i|~PRY5y?CLtS{!*G+xUtU1kxsmye+{?FKZ=Gu0P@U`BF1QY- zf#=J|v_e05%`@?Aygqqr-D6v#7u81<)^KCI=$F)ZdXCdVe6@BZJ;?qPdct*bl(=|) zcaq)nPBp$B8!m)2U9CS`d3kBCTej|{7nIWZL3T@PMJqVXcfEak*ln%38?K!pyv!X1 z{mGR9(t4Z;HmwwZo-+pE2LC2?e)V*seUR6j;d^J?6QayJX?0kc=q_cvo5>Cu;Bmbr zaGkf7e*;@(2MWR55fKdas{%E-lVk*n@h8YG>XV6g ziAb6#3Ud;FfSM2X8lEX0$|U{~WIw!U1xfEumz0tnikO<_$%ip9$6l!@2Rsu9vGg01 z_BpwUqu;G^m5#o5?)Q|PSyS|*$37CRU$*h_lXSVrP1QFFfU+~)#>3rP)%SXXVaD(> zxv1L=_Y{vZ2`@I0eY??e!M46A6eJ+KyOeflp4yEx6*$wJ^x7n`qOQQ0CDr zWG6U~^RdmbjfLy@W8EzKh$_y{CIq=hKKD)WKr`8i^C>V51IVm*g8Zo~va?He!fGr} zGu=H`w`qogm};qbJMC=y%_u{fI>C%MTu2B)^_#RiIY9JtuVqIY4a2zgm}hjW z>5hq*P$mJ1Kyo!^#s^?aij^ZPbLAQJpJs;2(e3clk^cn6QlzjoAB5Y%p)$OeQrd>r z3F&xeT~hQGDr^~>DS%+%P%HWh4H<6^^bFr{2+^a{AsN&B(T7LI48>L9uSGabvOsBT zpCT}&{gkC5sAkn@CAq(4o!SHvis~pg6yvIsemvi1Y)XD&&>1i}x;sLeywo-z<1w-G zFZ+~LUJ^bgw_wp7{0f8j&+hl-bnAX6U(aO+{Ge_psWzkhAyOtDXf3+DwJTCO^d*@F zu`5MPX@%SM=G9g0aEZ2}CKT;6=-l9P@#^a8h`LhrsI_a&h%x#j@G5ff=2Na0DyUKD zI}qZn>MGm)-YBQaiaz{MvI{HwdMD*G90*45l*w;>s=19kj1n|^3)K=+VcIsK3+WVI ztDymjsQ_o?Av0-f|9UmT7wCW1%H^hIc`-v3ROqJ`Ywc>fw|x4uB(80}`+T@F!D|8@ zn0mR`Tr{tFq-T z@s;%0TA~`4t($7p-IY&Yt0wZ4Pp9N8@1O6-)RqLL?G5j?9?;L0YOWX5u(#e#Db%bN zX>SfGw+$q-YH#+l8i%d-Q@O15Q#Cjqs`Wa2PrUcc-XgiH;Oy!pvGB;^4;FhDZI3?B zs4YlM>cvF)bc5mQ)pi~}>GkIXtldlZL8~xBAuc7=%P=mRr|?JT!ld}G;I?HMc1nKX z2r0t^VTVIR@Kbr!t>;=WRsH!0uM-jUb>^q@Xg5Jc{ilS^Fvfm%6Cx z4cfjaugxnJIBLv1tiI7UuypzaAD zJT6lWTF)Gmpk$-jc~B~u_#qIA^PObzGpVP_+!D`F2! z*`~!-!udSNz~R`EZG{8lK8l3fSmGo0Zr;M@x?GU0tKa}@TvO$Z#WlVY9(Uc(5mqeU zFibJ|WK!<(#DSU!QjcMTvoIQX7k%NTw_J(hEpE*N^Rhabqty?4irvCU(~*O1NOHG_ zgKpEQ?!R2{{%xye@SKs(^*S8MTWl>88D&kv4jQ;m4iV0cjHn{28nMc2L;-bx@r{xd z5?r<<6H<%u$JqM8_#>kyUmO;0UJd5kMs-9v_}#_b2UQh-UzJ7cI)u7^AH#c8`fSH? zOtDRJ6-cykAhDdfDhUa3og{p-En=SWEj3O&BQ|gNe1@I$A$OBAEfqcE@{m;BlON78 zYZ(~V=iQ(Yg$N23n@|@^#O&tg&`gjKp|blV_pee7rxr z(NC3W?#g%i=k+oeD)sl9Hk9t9ii0Sz`j;o-#X)W`4jIuu7$RI7&SVyTJK?r8k+=YP zCYRYAYU&zsJ31hry`7tC`7YBdAW_RTSQ~k%<8$*>f@LAyzX|Qj2X)W<080%#audGF zN=^xF5S!>lCezw!PycTgAS~U+&oGbZ{8*L~zYKbKXt8`*>U3K3!0LYN2H8(3{kQ+F z0$MpiLC2oS6M~Ci>->3$c=L^Y-E{0n3jRnB?d!QSF8o;wWXhN)pn=V2a!`9boidl* z7HVVZ`DK~clBinnMZTfh$oG^9IqV_X8H4zVFxu?jPW1M@(#-P~{A!G$>3avPtu?I+ zveNGwR{NL>sHtPQ1J7H=wx-8f4{ak8Mjb>T2e8(+V2I9nQ8+Km!w~db`=&n=?bHhc zuZj!0^M=pvR$Ikodv?xs>)3f;^LWne8zq*M_A3KdQKlsec1z@6^e?z8^vWf`-xHy(-hYyXuY~OAW2tL=foStC6X!B-(-q*D4gCbpYwP=zx*?>W5`nK_hOyYS) z2=zrcQaj3MskP)zc$madEpd*O2gd0cipE^pX6F`tn-`c~8*k*TmSyTI&LN%EG1zH`cqb&#B~QwjF1K?szDQ!n}Vhce2*C5*dF=9n27cPq`5sI zu759@g`xz#0`3ka@Of`kK+^Qc?%`tJD}}T96m6&R=xvVJ-OuscI*)q9T*tB7GEAc{ zjSCmADqAUH9D_;a12PX7gtG6V78*J#-NVgu;}1%yst;mLOpjD&qAns0cPnePU_uB}F@_P7(DRBkl$xQX7}C_PZrw!F2M?jmU;sO|SqDC)&I{}6rgu7d_0gOYpa zih2Krubz+hDrjU>Qm}R~!lJ@}b0-Dn?HgP0dOyA_?prn>FZnZ>99wym`KklMdiEaD zyHnQO>-ey3C)*720mw*qA$w_@sxEc>ui9Ow;Gvg)^dA@K!peWzy*j5 z(=W-{l&em+GK0&rTgHIv?8ReZ!C!0zcyNcE!OJr5&uVale1w6h8Ocb#`W_%4Y zE#?qo-P+Z4FhdDQA@C5`x6|TSfpikKdG7dPIHnRef7Xgy=#5tE@r{`at)tc>SWM$S zMk1;P7fm-_IFelzMjBO0|CY>-!bS!oY~R_AM;DHwpZs5^L9c_lbt(02($9=L*ot%F&j8bY z{d>tprTIW~@P2Azgsyc8+IY75++nTd9v}JhmF3MeM)=SP&f#UU=+L)K1H24;q2xYC z6`<46zR@;G#(m`R*gwn8jmb=&A0R8Z_C`tm#E>@t<$}-UN>eGD zAAb?cW1s~H(w{;V$qaRWHF7WxppiR`GsrYp7gDu6`hU(#08$rHI2f#~1_ti=Q1t%T9pndJi_l7y;ecsac_UU zwID&(I_gAk3K}O7{M$IVJc{_8OYxC@#qRlv5BPir7=nnuLxAY*E^rJ+{%OJ^Vm`|Q zZA3RDW`k)IigOTC75!kg(kn7Z`30>};Da9-W3 z7&2IJ{L)W6EKDr3lifhOV5$o&w<>6zG4LEn_J)#s7(SS3nYI7#@PIFvlAUI4lBo3KkR=86R6Ge)v~`CHaY+V2oa)>DDoE zo1?qa8d~OVjS$pbP?b`v+i^iOUXhqwRzPZNpod#-HE4{AN=SbC`ZYNR;zyOk%fLOiLgtr`*pr7e_Jnt+&%-e)3e8!=9NE3vN%H+2+Xzp0i zp8_)sJgCn2J+YWLQHA3RECtIADd_69|i1Fib*1qxGiE6gYZc_8NV=V zoJXp`5smy-k8_NiCZUw+Is1s96Jz+Xzp!JoQciV}I+2}C^XGmi6Y>s0%KI_)$?$P) zXd6JRuu&+6sK^1{p=4yW4ONz`w=2e3`}2-@%{*&Cq61v+lgLu6n8)nxRivI*VplRS zXhYvH;>x1(n2-K`wqw>6QL7p_VfYgz?=aDxlf$JgY8Nll$xO=`XAF0|My?QxqkpaB zbb(4#V84K5gg1h>{nX z(tU_*l+_Mi4*3W5NXHP2OxoSU^ch)*oq3N$lCtk7Qexv<#gf2e{+gki@!dx5g~LQq z*+3qV8kd#5hoD=Hqt52r1JNN=W1>B;K;0ik*UB}Ph1Wvl5f00hByL@RRakiRIIRit zTe-j;J?ZPBbKjcOUKtg9^e+@%0jhgPeBPnt_NH{-*kJ0t$}eVDXu;7SE9E#%GnMv3 zu#0H^MNLFuX@gMmcTKI@-6cCUhBoN-+vXKRSv3>trD!NUI`LKANAnF#nizO&gv}Kk zQC<>!45k_*#vP!2N3ya9TOzjVm*6t^)MMn0l+Sf+?*M(TaIRKwWgDAt>`expBm+o1 zB~!OeDmZNR{0sD84!%La>T&kp5O1zyTv%|TM4|?dfLhi zDneL4rc=iVQLcRw)1Y|>u0Jco2%>}X(3QS1>fQui^<;7@D!?W$P8;T3{;?q5PBj_? z^CB91#x9;|2AW<is22KFdAu1uv(~Vcrk0Zi`tV+NQCeE5 zy1gZ``Wrj4CQmX+@wAIVjD2}y&*KkemDYvlO7_d5Ukl>u?N@#3?N5E`-A{kj+wR8H z+up|1yKYuG-wt4(o=q36#V2ax2)b_?+8hR!1t}KtLf~Wz+?0>l=lw4EX`j`oW!)f_ z7vJ@wod_}+iN}RJc-#TQ`wO+0K&BOe+$4fXQ$TJq2`D8ZcR!AOeQXGl!uaVkD6uz@t09(20AKh)EYYe)ndTrW)>JiWTRwUfZGYRb^E zv?k!0x^IpYPV}mFoDef<6C=&M5I_g^hf67g4f`W*$1UF<)tzG`l|C8TYpRS0ch71k z+2M+JUu#pF^D=zj5YjP4V>T4TRmF6uLViad6x0PpZzD%RuK04#Z}^HNNv}kJxz6me zZGV#kQ&$+dS)?Ag3vwjHns?MmwDFsKXN4U}l3LMBXd+`Y!jEs*ZgU_7GuS2$txFmG zWm+g=%5?B=%73^Z`u0B9mBE;_IbD~i6T!-ui*!BffK5jJ%XVZr>X1vf2`-@2yBW0j zhx_>stO#gE`zL89Cp-3<@3Q4QtQ2My<|%*43#D)OopDJf4h>!(1j1pQVs;TNS@+5G z4w4N#+DYQ!C9OE-?ZUt}cyN6_Xy>~&$D4dri7^~SI(nl*QO=>+LBPS)A{_k+J?$IW zUWu{CT*sGX4RwURjLMCr?Z-`tSRN}NA-r<7Ip}`&8CnfCt^QF_^R1G{OF&qOi(#e_ zmj|$I%-qsy0U&Te&@#p-!y~SY2J+;E{+IK#9;O+UB9v<~R<*PY*Bn}uYJ!d2+)@v1 zlWkS^s|T=x4U}K7v_$L50E;;0kuc-5Ek#1Q-bmD`PUdHlr8*Fn{pU@>kFiCf^)z#= zUYShl`yTy2h;NMcx+IQ`kNQAx1E_vI_}7~-n0n6pppcldt>Fe=jqz{HPHZojl^65< z(U!YBjgs(3R*F6I20L~ZL%`wwSU|BMU8TX5UABz)mc-B*6XVxK>-{G}6uJ?`^Y^Ar zCpEDUpl!S$ntB z)88^Y?@UNsHlow%=9LYSzeF&pR9odxnaDYctWLEqt7?3H=1l-cn{|1*-EO#?QFj6A zpUk(LS`oefqNpPS?waOMbxi4hP-aoc-r?oHzbuQXVpU#$`1^LTi5I_Ngn*B_f}f9$ zKVbMQaBDEhB!cX@o9G#wYSrq3!3IcQ0830*{Cgcm%zm6xc!ZCL!)ecew&rXD(8RuP zJ9Bj?ne{f2FNYuw>K4HFrd8E1;x;rOsR1|E z#~6y>>n=+P7d-)j!E&`xs%+1&TR}4N%!(VWJO2Zif13j0$~fr9B3$db{7zIJZ#UX! z+M&f1UI-5nCjSwk-gfh)@kkngU0R%S9J8Py6x!6NT-?-!{o z-gDZ^*`BYD`g%oM7}NWmEGG(9&DGUp%j7uBo2EY|OoXZJSLUx2 zz*x6L+I9bLaHMn;19Nat-2h)2(ZfE2_x5y57dW}2yuk9GAK~=mEu3sbbm2UT1VSS# zFKudOg!|EJz{0y!BB)ntfen;*novTR_**zuRO180fSm~}UhQ1wfv+|ZV`nst7O>Qb zg8{hSrFHUG8a)h=^APa8Vfyc%vLG<(^iz{vHn{!1|dn@lox zz*m~N!fIbwW^_Bn8Ajup^zAF0sW+?L-$-#Dmfcr? z4F!>|eIZKK-MY&YyL*nrEahXWs=S@x&v8tqe=Qwmcs7JOwU}S^8V3UzoL@Nb@bOUX zGG@5Mt+V3w7X2jAVMeC4<7RCiakAjP0@St6rtNI|ko-8pg=GWqQIfVl-KrK5P5(+2 zRr%a2>JoyYV6CSO6Omq-;Kx(btqimFQjc;Xo1-e zYXZ<=Ecdm0t%io|KsRf%LL>M4cXYoXRY!tQ*=@OMfZwxo$7O1+~2D=E2ekME^>tW}Ml(PsHbyEqCy-I4F zx_JOE5Y;)36+HrprYB}loCBs|_IlZV59E+V0~`>#y*lBte%yV2GSOyt%PU}+Mz{(` zfk{rHWiWl2Jv7=Yy19Cw*m`)jC@5x%nDp#0;)iZdO;H-lR&A`O#NQzfHn`ixCXB2Z zpl>72w?tpep3E5YcMZ7uFwZWxD(mn6u99)NR@5gnlrq5MTq@uk%9`K#I$Y!Gej7AT zrkG5Mzq0Y9H_fX@^D@e?b8ja72RZuF{s;@q*^v1m>v}|Nrc3@zG7;eK>i^;GkV^2_ zv&tjB)p8lA;&z55qa~kpF^Xt^K?X4UByOF-RDN?-V9;O5$h8=@?arT5{a*q{Iqk2& zx!Wa8rzJ(n>M$jERyWNDo%Vr$)y>|~WJ?xc0%E$`T%u-5@rMY_i z7niFjOgRo)TX8OYO6Amf<{3uTjD|`&Ogk~3ky?DNOq@foN+z>Z8|Gfle%mH^g(H^W zxBFPffqnAID!p^X#?P9CTKx>uzt~PK%j~w#o3&v=FdeMI05i@_T z=jou%ws=7~ku9vWRwzn%u!P7a@H{J;BCf7#@Mk!BONbYNgjUi28JGF_VhrI|G5G+2 ztE%WMLdb`L*>$8KTsaKQvCZ|4L-L#@_ohL+M@$++6*4(`q4bKLuSn0)78&#K!dZ5z zMFROC`l(z+3LIk(w!TBQW^_L@;<&G_Qx8cOoEXLO+iD9}67?7a;DKMR(#12otdiD| zGftJ$Rpv?(#n=ddKj%4^CAm%U+8fjEI+eeAN1z8-Jev-n4FfR`zyotuPc{*4HO>%u zHo_9UIuH1e^0;|2%DCCs{VuZ-GaqiGKJyR0Pk7~IHV3@7=;%yU&SGXDOS*TUSEQ9A z{XJKUE}rj$!93@dV${mptW6bV9KIvsmGhjnd_31@1Y>p{Z4@j zbF3BSE!Rh9W;J6}j@-#LUcSKTYc0$8?kpJC04^n#oP`Ts$TG#39_ejI$P4lQ8!o|G*UA67hT&p1L}m?b%nuki3*Dl|dxW z-PEuj;_$YG`g+vD)<8=`VYu^VUGbu`AwY5`=UwE)7#4;yw84v&vI zn@)>OqvP6(kgM|AXPv0{+)+BJW+phcd%^v9GXw$4$QKAL=+afyO&%8_ZUMlPtKwrA zmwG-2d9}KLdbec5#mgUfr{$4yeG!8_S)bAj9E;H@Vi>Ww#R?A*V9Ids@`;<}c7e{W zs*)eHvo&UD%m_9s19DO9HGwsjrsyPmqfvz3%|28cO8Pbjm2TPubp@KWf6+Bx*i6(L zvtLZ*`%QU3$Cg-QmX%tbzP|sgamEk0wo~UG(H7ictS;#R_ege-*!R@kuS_eK~RF@hZ z5}lsZ1{9PngZW9uqxBgX2@m(;&a`|mB>JoXbMuKi3Ex_a9M)%1AkBD7$bxR*K$LZ( z_xcvlPAr-o0*7w_@npmJCs%MbB;t#S)hnM9Ua$15Ot+#Xz<^QAMP$=)9-zdS!6_Rc zmZ{X*CdN%t6P5L+c_U+VUo-coh4{QBks{@HEut)tQR$|T0=o@T{eTIWiB&xKlXGD{ z3^Ls_NJr;vQemDVK-`M=t$MS@3=2#;lwuNaC0-Ws**vZ1V0Yq36J}Y)*MRuTfjc2# z#F8E$&E+fHTvBQB6*wN86p^r`W?wKl@QITVT+R!)1heGca_|YJo5JlGHrA90ECjkP z5ji-x=>}cL$s`y}T7Qnq{wDA*6;3p1*H~ zoMZq5Kp&uxUmK|yALqaiw;zFqX1CQ+%DsC$5mcyNtgLY=1H>mic9x?9I6Jf6Q21Jg zvbnI;dO92h_Heig+6^)Nq^3ry#Vd^%Kulg{s#C9GC^af>kJxnYT5~96;m6jcVI8p@ zigNLOBzDBTjyWd({0*>y@yUlnM5(HYTdu;J7+~k5T_s33h9792oq=kzF!U5jVJ#<7tB?f1cV3i7E!WG${jEndBf*&K?)M1r%GyLX%Gz0X=-NPz%-X=F%-UZ3;Myjg@}EKFvJho0Pt}K$ z_{8oS($;rh3!ZLB08Ni2l_;<9?qCi#`T}c||2hp*BuJ9fW6JTrS)W`-$V9m)haB`( zmz5W8yUp}}vjD_p&CUg`a`L7!k1r-2p zLA!N`3VQMRnu6hZgBqiFO@@?3lhUsZ{0|7GUKe^WHk2UtM<1AdY>roxGM@aQ*{ zNjwsX^G`7CGnm+DeA_;i^7GoGhthM05YAgnj|!NO>LY*lQ~qL*zu;go>0+1>^e)grBSi^UJcpgOTk&Z#BXaY3oxG)sByRO{tiY4(&(DKq?Yd?&`>8qDu|*U^UA=$q+$$grgN?Jx7`CmG{Z05N*q6BhH|xuNymT0M~q-d2&pw%w^d|2&=T z8Q-2by?#*C@hdTYDt!(~VL^aNphq8TY$PO{+((c%?IKa=7Eh-r$E){(SMRdFwm<2o zyjTli-DTatLy+j5C5r`5n#1U!m~8IX*L!IR%D2_&R!w~58SIcADByA#ExIo8U7QYO zC-*#vU8bat9Bt0(rQf`?VmOxDne%uCJIL$M0d8-A>S#g1U~n@K5?M35HNIKCZk=V< z{14DU`+tWW$*GD-L-Qj{&%|XOHtW;Y&p4y%r<4yw21f+k?-@v|LVhvrajq`@er3!i zYpl3r(n@%)S5}0+KW_T?j6p8?c+*~-+lH+q&g zi(Bg3$=tA1L)Jq?`3?q1a+Pi02m0EhmEM~hlj<1(x(ORw*@ZLN(F5>`4C@vdlWoKU zPB+N|N+V2M;y-J)vaW9!ld$l%4xd>h)~)VzWg6R^z>CnovKSkd&3x}tywhAWI#r}) zOu9MyH9dbQ64lz)Yn-fkwxvdt*bSsP%O4H`DVJ(I)3lw&k=eE<2P7J~!_OGCQkNF> zm+3QC_ijk`59tfW_Sr)oRfE@7ROic+o7AU)xBTFfS76^mYWudsVw#E6O}q3lPDJli z?MqY70|zVL&_WvxnvQ9^MeNA)8wG@?+hn^pA&?5<;h-=|6^$CcsGN5QGphY@^m#A+ zkbE(d^kj>fvFE}U9b%YhYR<;f4XN?%zuWKiGvjMgL}Ld5Arq?5nPy}hM>}Id^+yg9 zdubC1U%EdGjfR1>QD)wUuzRW;_{Q2fR`_XKJI)yly`AXHPI@Ui9$c67sqylr;=;iU zu}(NEpRA+CY>O@7=frbe6Nbl#t|jUANDLQcEe%ikDV6qxcygxS$h2nP;~B?RrT5j* zxIy_lt{m(J^u@QO$)@)Y@*dO*W1oYfcGb)6;}^>dSrPo+n6N_}v==DXCkbF5Gzo9* zr_Jj#ZO9derPrW(V}U8*RL$hy-C3J`?Ziu()p94dBOWylbwPKIfpK--fyW^$*vy2#3+rm#1F6 zkSfYgTdIB{p&~a$B+MH(RrZ-QNA7rmKGhI>ER@SL`Vp1YGrB?AZYM>l=|HI0Rc(5h zAu?Tub8my^w+17j7N~I~C$vWq;eQGxEgOdOO4UJ3mgKa76Fk;w7tPD6$CXzU;8MaL zrLLfAy=PZ8sB--DxkZ~JeyK%Q_qp|M^Xc`Pi}Nm|;UQhmF6#%LjS>^$L-@$kGn+9D zRQ=0l0_1hip%=faidwq)-PttrB-8huy9vH$Mtm_oq|3oiAA$k&GehH_=RkU>A~CV~ z?&lct-rrb;(GD@fG6Dph4lF?GBQ`cW!A=YBwk$U}m2HVmw#9blLNi4r@vJPqp@om2 znM(R!$<5W(K10nFkj@&c{!wTiXnR6CNEp0wh*~v7GnjTrKA0e{PUs?+!4dAXm4Dp& zT{fT&47f&7h8LV}g&ifl{}$$3s?(ZAfT?uO%BQH=x)N07R^KQt!1g_Cp$Gt3*B^^C z-8Y-iDm)#`VkC`M1qMf@aA$cM0w2i|8_ztfYRdFE$Jx+y8=tKB@2$+SN8kCac<4LX zLL{%xqj%vxd0f;LE(3R@s)-I6bnCAehDd3c@fQ4KtDYROs6S=Qw@OT(v@p-qTt>=p zIX{=PaKEl^MM`a{T3qf$b8ew(fe52PKsfk4sQvOt#Knfo()^szkyF=5j#fAR<=w(T zPEi?%pxha+OB=U4hU123)B*RuwA9?hwMneiSMpzx+k>MmYuSg@9;vy6_u>(dR!?xE z>n-O=-7(47H#i}I%xeqyF*ahdTC;TEeqEL5DIm?a13bTqvl7|uHGkg35a{T9UwYX2 zFOQM`sR9cu>fiThNH{(N8T{-|^YHuq`ZbASO#NSG@P6=&ybPV@x-t`yl@B7o2>KT? zN!nBN`)Y)M==+!WG{Gg_5XCCZUeXWc`qBr{znEO|w4hzVDm_!IOSN)x@$XniUS;#K ziQ@@ zUFDb5jA)g#nm-i@zRIdv$71uGmYRx;&mea=$%Pa(&A`j%#kPQ2&}s>sQ9XVDYrJ&; zsu7|osXAKM?BB?&hSc^O_PQf;3$pqj$-0yAi?T*>IiF-lV6J$Z0ww?VIBHpS^FVJC zed=}-g2q6{H_|#jj>-AYw>64X|6-~mgoU-XRyA4r7+*Bugpgb7T?0mclZd}HSAc`B zfr8IK*6tr%YHqQCK$dUupJ|*mr3I-fGzarMa`a<1!Cju3QMqGZBNsdAw)v*sL;g9w zjPv_Bw6bf1N8Y}5!k_QRQ+57^yq0;YZ6j}PMr^zyc~-CF>bAR{7$yg#ppJ#+?SrPySLGA?vXncjav;FV=g9{E3jr=yo=OxR5uU zG_;AZ3V~9JzkmnjVI)XEgo+6bGhr9GVH)2$0-Ld zDHCW-R7X){kj7}4au-%b)5HHT9saHRa+R1+BIxpinu-2&5jF0tb-5$qMI zlBDiFUtLOG|DsnN`5>O&>9#W!0bE@E=O~%?6>Hm{RbVU@~>j`ccvde2kJ=pMyej zSf%~gyyo2Erg64O{yd<=q8vES?)Q{Vlvx+ws!FvZO$JV4i2} zeXi%^1u|17Cze5ZYsoWfYE{;N$nct+U!QsCPJF#zM0ix|D1O~^+MHo@+>gFh5%2bU z-f1MGS@Qa)=jL^LxXcD-K`kzPv)0Zj#|7d~DpXL`mmv3LH=q36U1X0`TUALqleRHS8s*rwRA4$aQ^7me)EG~O1Lc)R zF@DOb&(`c`T2f_X;hXffk+IR1nmhF=()a=xG(3gP7$mb$<;@66)v{C)W48~tCg;PK z&jH>Gk8zR4lIqdJW>T=rwf#oAVRx_FM2uzL{!d`?T=MqTWbiGwFwo4eHXmPj+KrXi zUH>oE-a0JGuk9KJQABA`Iz&XeyH%8uPU$Ww>1I$;DM30#1f)9$7?6~d9BLRsI);X! z=DP;{-Ov5J-}64-{m1u*a2$wUd+%${xz}3fI?o;SP3(^yE9z{E&g;XzqpX-unO8ts z?e0Z`g!%rArwXujT2)r*A_3Qt2fh-Y*v0?h34xSGUe^!}sCi%jZlHhF5Oo5@v4Czt zMry8g^^b5dfdo<;n*wD)PuZ1CD^w4j_l%Qn;XDaTH|(`PSh1$iEOA|nJe0?#A^la* z7gYAPWEm{redMi1uCyu_Bg68IfSCSAw&pt<_n2jLtsM{<8Mf#9Q+_C%1HN zXxN3bzbN8NRJ&WSv{H(JnMVNaeWshMO%N;nP41rN{rDh#yav6C=3aHQ>lwK7Fr?5I zxx6hFVuN$+{DX9vC?VnZLI=UpM(l5|mxOb{@9 zV;cGJ3a(+aT`k7B-dHXEfj%lOG?B(;F*KtR0KhheYv=@U)DKPZb zFR+?cgK)v$fJm|qs#Ii_C19T-7XG`qX5I+o=&j`j4> zIvz1;u-ntPEx|vj@r_z?d&a9wPn>4AoodNu&Y^cej@-;ADcCdXui)T=jm!k}05N*t zAbP5N4=lNM_9zfg2S%iV-+)67@h`tu{Z$<-g#Hx4NCUhZumxrWq@jS)HJxahf?L%& zgM8|S^NOaA?7%%2;WIS~qIW-TKTo{F*v0D&V3Kt!rZ+BI3!9_m-DRQfnn6duRJbWfPq?c_V*XV1H%oSFV|iB8y*n3n!RnC<}@lv>+r- z&e7HmAj*8J`!gEZ-zihm)?50S6iiYFL{YF3b`o^vyZ>?^0-(ReGy|B*J6zf)Qgz_2 zqW+kUhYUouxN3U&4>K^jp*!QVz?EWATNEb zq8bzxGb~yb80se$9#(D9eS(c<(Hp7n7zBgfgPY#aHfcKaWa)d0tebFklcZZr=}_Wh zruH~PPSO!rXekJgMCNi3_!x^|RYF#t( zIR(@)zC-JhXweV7IiH<%VO-b9Y!Acjga<(fbV#5?hWK=R=pOKAKM8Q8ghA5g^KUTN zOB{H@w1K`9hxpzPe^;4DEO62S6<|1O7M#@)g}3sjh~AS>+nC;cnol8g@P>A~BzP?n zak2e04942t+(dZ&xL7$4Ilv}h%Q3=S$7w zEA)5>e~@wi*2|Q~Q1Pxo8*nt$%~;x+G3oB!Lz#y?COy1&GbP5)!ruUlNq0pvHzX%E#xlahuxr+U#wpBUs9~PAeuqfTBsWCqMET6`gDRWptbV+YM!@(7dnXOV3)!-r&WQ6-Q7&`Ss#8I=BD(8XpuH4a79>IJ{L8 zh-PD~_lX8CI@5v*TcxC2qo41I)#gydR@{szN_4a=kbCE@&CA$V0JIBvcoWEA*(n}f zgeIA)zp)Hv2Wn(&$hpP;rD4!cjaJ25@!y^5mCF*9bFSmSs1a-g=-%#y(8(|QzMJ0Dgl?#9cc zk6ThAfxNsi)}BKDEs=52m`jWmJ8*_uK!vUiTD_)oD zoFIKf&d_js;Z#}l3UE#6Vvjd-(+Ypn`g01rZuP%C5BudD#_Rf-xhm+pA)j1z4hX0& z8%7$hO?veCdZQ-2|M#NQN>@h4IN0+HYYUTzoB>kqzhdh8vrN#Hw`22>Hqe`vX9fxA z55do`!W90q4jx^BAfSi`uM0qM1_H1Ft=fq&avO4DL6nM$D0n()BvN|_x^CK#$6UjL zbG(k@p3`z|5!o>8OC#9Q*(W#pwy|dN3KU2EFQdr*Fj47eWNlwsI<#z6W-?;YR zHP_~x`@^-PU!%G9Ta@I#bL|YZ8MokB))4OT0vw?E3m!JTXXJ0y+6}$AGiKN5pYwP3 zdhfschjF`Zv`%ZbG8*I-%{aEemLFipFi?u$f5eWHaH>!~IJxkokKEt*1JJT3M&pcF zKP5bbC68bxKjODGnLM?}t}>3VJGmYQ)JNixLt^fWN4C*`qi7(IT%VSyiiZRLufSf) z)(ChIjTr*-*1s4_+W;x_;XctbkEylYB=>3u{1SWG8Oo1DEhA_iQp8SxPXv@`$*h7! zQSeyq0_oU~ME8OgQP8Z#-5E{3hLKJf= zk~=~Tg?p~+MuVqrxb%>MU&P6@2c^=Dju;pq z8H|$RoTM@}PQWxB<)SM+daIEWFDS4y+xCVb32;koG0FVxs-+AzQn_S_0{{x^r|5P2 zasjd%5#TG{;o5r|DJ=h0zP)cwSg7@vS=_ghrLE5ZgWHsk*2=dVnlMZBL$&2x zz=!_c#s;dO2==N2ShCEgwp|~G&5GGV%Qw&MZkjp27U|;AX;*DcW+f`&8;l?M=31>o zfG_X%H1uDong)6_6+r;kxpNXt3-AwY?b?Z^mTF8yO7ns28o4Df{U|a1WljeQoG|ML zQ74anJfB#*$%>{T0yW7kMB>Cz_oi-=)c?E-q)r`uZS-%JPq63! zJr5p47|kImUX5|IkR>nf{(2N49R}0+9mB4f&#rkShEpMzw*2dhtQhZOt?RBO>2*~@ zybC@K`IRThK8CFN^FaMzZSE>TUtUsqVu)w!CezTL{q^{XAq<;nxB0<**SeJ1>2}#t z0vVUq5Q~CCft2YWlI*{;fP0ZJO6_jZh5=)Q%aQ|DvL!m_=NuHuv3Q;ec>nNt-{;mc z)fjVGE@_b-c{dsDvtJ{@-!dHzRIPN|agu?kL8;bUT=;4M6U0d@KgAByKB*7L-nlve zcph3iH8*DkHUQdbh?Z3TmdT5^s{OQh`n>KztehTW@TO0m5OpQ{A7C6-i*6PCb8?scDaF=3?L=<;REq~%lGWbr8_n2q$FMPE3&L8ov+HtoN#wX zSfM~hm4}vn<-lRO+jpp8$+`)&@5$^!BhZ%R(Du zZb@%s(v~5ThIZr{5afpq0nqX<#aa#B*Q3RT8pU^uN+!boY(ja&$dLdBfI+)wqg9I= zhAxxbK8f?m&Ic2PFH-kYm-n|10)Dw4vtK#>q>fyLf)}aNDu`FcACAg)>q=^E##yRx z@C8%{sCfEbpaHJO_T%%2ye**8h}CqwE#%rAS12aHU!Mjx^6UerN&YQQa+7C6R~spZ zH+(h8X-k4BmFi4Qe&E#d_}0VS;@9!3PWQ@ib5NZ?|6DPn>*tWTCSPm)#4EljBTG}r zlft|D8#$H|f1#oep)CdgQzc}=8%V6ICD7p5&w=bVVEF3ZsxJV_C(`{BT2ck<-RPG3 z@(VL+G}2sWjp28+hAJrvGYFOGEN6X6cqxmSnJX;!wHVn&>xro!S5p^JSsuH>7!i(V z-_dT*RU7c`=;Rw?zL2dapjD&%)fe9jP!@&lD2NJ%6)npd}Gn7xYE9w z@3XK{2|uYu%95~RmxlKs_i)tswDS8Oi8NrHbl1$wrSudLK5=WKQ|0v&Ol6kLq*bKE zkSUf_8Iz1cK`(Rd8|&K=D4ae8=h&Pbjrlag+Y?FtBzyeTAKZ@aG%`#Mk&zQluj;eH zIXl3)#|qRyu}v^h$!7u#`VQL9mRFS$sc&N5o`7pgE>4C!sS{GJ&Ti(f7M^5?y^s6H z3vd>L*LtBlIOy3B^XVLs!zR`{<%ZlFjV88d+a6HfJdR=4ASbMJfk|W>K_z;39>kz< zu-cS5)>9mV8l6WDEP`mXS3d@%AR9{z#rxpDVKp=e?QgJXj4%oC>27yVx6;Vyzk}(v0C|>590Ar(-V(4ROq+Xq&ayU__ zQ-cZ9Nwo>*+~mjKw#h8r#|yMtb~@gfj`p-0*@CcBX9|esQC%U*V(VSH#@=*%)U?WJ#%i1#1Q@hJ+@fSIKOCej*E5|l9g+3}< zaeyMUnl|sFfKWERCu) z8XIL>T#eJeGU2W7W9$3e4soyxfx2sN+00#UM_}@NJ5wc*L2VDG>}!!xg6*1L@SeWA zfp_b~4`rXuqGad%KC<1;`*V9;LB$wg%0Q|V{zGR91GHv z4=3J{>0GfrC%PIPqt1!Pvw3uUnP@MCr#tiJvfsAdaxTee zGyXm&@AwiE#kk?zyDDm=}e%&cX^OrP9nsMlNs2ZHyVCDUVhcGpwZD6 zb07D2_^6H}|5>QWgF3N?tbN1}tCAUfSnvM4-?`5l96r=&{iNyLu&J*Pq`CXq52u)? zVb-sE!G7J13;t9bb)G)M;m`{ox^|sD8pgp;ukfF^$40lB{W~&jh0SktTLqZPhP|lr zli26XljH0ZS#G3ljm-p%8|r0WU)o~VI0|0r9+PHqf#ynmZy;~@O<8TW!1!kdoWvGM zuES-PM>7_N-sVkig(p_)g1K?>Ke?F`@bENDQ+qdvxbg9%O)2k=@|XDE&@&Zk;tQd6 z23zh#yr9o26m0T*ZYlCSw9_D7&MBDL`_Sy;W3@+;TTwU<$b=`(?gg5Cw6LVWdfL?3 zkii<`1-3nE(RO$w0p})rB3(lzSo_tAPb%Z5s&9-FtJBcFqkHqmjL%lwyt3@Ms(lRA z5X(^h7a{1V*|9TCLW5Cak7Gmrq}L!vlb1)~ZjOaEL6J1Zxo3L|)Skl?_z>Osai=hC z9(luU@Uh$&f4cr}++Pjx^XV`ncI7B7*-U>-(E`I5DM5`);(3O9A-^klT!wKZ{a$<( zAst$#r!1ICfeZOP@aKI|x=!Tmt=A&aJU0j`p2B;tjj*elb;wOhaZ!YF#VK$KBu6c@ zHKZ8xymYbs>^*bNVqbqHs7`1Wb7!YyfcJX9!8Yxso*30<0vPR@%u9lyrb4IqB<=hx z6ceVC5URXN>l@XRn1L~J{5R=+<7ono&K3h#&rmWxDYejCyVNe8uj2)~%ZA8pyHqK8 z&9YMelb2u1H8b4jBVPO*_+3~gef9W)lWJ)^Av^bc zn$1&x{Rq29r+0yAIHmT4$wnHnq!`y)W^2>E@8&azv6joVGkfzFn-j37wpG{!XTyh! zny3n(V5Ljuh6B%YI7v{#+2%2&GL&h}!@gD|xwN6@MIE%pMUql)AcQ|iFIc2961xzY zcbg_nabnguOLqGp!B=9bx>rg z+I}+|cM;O?bYj&W%+U=nI@-yot)jl!t(EPkGT=KUmpO;1;-=N~Y6*K{D-aHskU>u& z{Br#WYOJHcay08YG)@h^dJw4Hd_Gv_y?2h1JI)tk>y~PA2_j3<@m>fk+k??HDQqAD z`WNe}#66K=1{a$U>mxE$b<{8}y@%1KJrdK+tc3ux;hPyUT?}I!VBNB6FHM57Io0M_fT_`E=>Od_)({RD z2Ivbf+-}n3l&#-7iJc9VpOqzZWfz|C%*w2i^#TwX&Y<(O`(ufo)=o?HYT=R6)t}hg zN>7gZ`jgK2saA%~(v4ywui;{)B~K>Q6dF9}U%9yydG8m0b&hui0dUW z%Nj+06#Tb;?>cq^K-Rp}py3B_<%-bdg~pKLUP5<^rU<0IzNf|xDh#^1SP5#1$h|E< zde)pjF9iMrJ$4L)oaTPdw*?tAx)rQ6^&{ ztp>TEEs|=izG^Di^6+Ta*vy-%c)Li#x=yWh?jE&KDUJ5y z+2UEg8RY(U#I04_aL0ie3&27fWi=g)0}h`}d*UPK}SsQ-n3&`>{`#W2a(r`?ey`z5hSmR}P z0d+QTV@YU3VJYv{O!SCDF45=4=PaAaJFvEk5ofC((p!pjPYt_!TfC+IJP4;k%%cSB zA-UVR%x9rL5L4YGc_QRQXWjQOLi{iv^n9p2t3>1qdGw?ThH(n zgc@Y>jP#VT+Lo_;&ci?FJj~fO<6;4wmH6H;%=)6gY4!Ez>SibG;lP(o`1_>`kE>>3 z6lWd1_w^bIfkm;tWGG|gSiEP|#RrX62b3nvA5+dYVj||s1Lhhrolub{bFBO-V`TIS z_v~8XZ?-&N04F2+bk3wGGFSPA|S2qIS$Y-OWJ;moRvC^XUqwd0PBGLCrKpL>*P9K$PRAU+K~f1*Mr~=c^r> zr1L6TB*$@fDZx@vynuXlr8q_x>mANm@*rFfqsP%&R687<*{ZBcO-&cAHID@M13EHT zSl5EFV)Mm`fGl3Tw=U+@=qfiqM z%3a9NwaDWOB;56U9fjyU1L@E|p+j&msb`!Sv46rG;R0Fm>#1MAV{-{{*9yf1Il2%FTq! z`>YvQ3lxd0cS4h!Og!%kA53dfb2`_Y2XxS8^9>tj+~Q5<%*y>4;HR$=00M@LOpEz_O`-V>YtV@-%nTEv%?5|KGye{YHXQs7qa zla*sn7Ib{7;QNnIX?D#qdi7X-htF`R7(c#?92+b}m9fkAlqW~rTaO}Qj4@J-?a0(d zP^}cI8_ZAc?9?N=g!)5%rklspJyh1y5_;@LSHPv-v#t5b3{ll$E+wV<{Q}k>iaCOZ zEwipL1$q_Yto>*Z+b40@58}@8fI-YBk>Aux>m&KIF5HjH?g#aDqfI^Ht{mMdmbpuh z6b9}+889))eD|J4|E@Baf8$5hGRjzvI8AJu*TIj(QVO4JyK?9yf3!jYWk5+ghlP8v5wcs7 zm%Im4&4E*pq)*f;>?VbjsWILOiFwH80JiqgX7SB#7O52gcoZ)` z4Z@?|6EmxleJ6m=!7D3>i1YRy72;T&+nrUM;+o#S)a9|U_!~|ZY zD5q~p>u%{OR3nuCRAs- zrzqoGFFIQ(bNRt_e3A0FWWy-ozryq_1l_3;-!^7Bhv!{_Z8J3T+><}ns2Ai``?u@R zq(OCk@;CE~Pk0THgG~o;PRNO}&Q<%t#_ro~0bfdpd-D$X=m=g}hJwYGo`?E1D~h3V zbXZCW&QrT*xH*%24L3V-IqgP@ONOGm%Nm`mCS|CbM+e=6P6Hl&GRNYR=s4b`Gkqvr z7jU;3z*@=XZ54wThw0{S?$X{cSsjn~ssziWe43oz0MYk@#2dE|#MWYhb+)JnKAHCA z?Ua`jTzrUQDPJ+&V=KK6b<}e`ydirJ*`P;H++zVj(SI&;`xl)fLzy<>;A8f}xuc)hIfTp|FIx`-+a<-{|mzHd=u|B2HRUQ_g{5~Vh(Qj{>o)9h}_LzI< zX`3Edi?gZKw)<{so^w2Acl=u^2J1p-^({(8vO2SN;)6!~g&$1h*71RP*)#*A%c4Hb zpDmrfCU}jGE0JO47#@#=$hZ@KV*`zGwgaLg7>{FIDd+shVRt&!o_FW3HUGNSoTeIY z=*=deOX~G}?);lVxL6u%Do2$geUhqG4*RHhbSlrD0E+qSk)cHY|Ah=^70zzL-ices z^N-XTr9Ru{rwOsN7!pIHhwyFBgB2wLTJfITS4nRM;Z?8p!ok{Hqi=-LW+X$)SikkX z8he#R!$?J)H1+WMTwaW3q``O|4vs&XY98)Y_(skm@Cf(;dc6PotE^bd&K}1wXB`~A zA`8<$yxno;Xb9u4lmyU;^X+pAjEy9?`H^hWM3&HlmLY1{^KGf=kniY-e?7EjOL#xf zLwz9Y?NI~D0p`3kj@Si5=sHfiLGKVTsQ1=z6zu*d(ss9F2=^;7h109CSSPcQEF`>e0| zCkFzud#jM={=3+S;>f+hUUC&`%B3_zma*GT{7QU$-+1B+MA|=1v};zZJgLscyPv;S z0GYU##9ycH{4sO?q)Y(6#QI}K{~T)-1E{1W)039~yd!jRRr?tV?^1@sIWMAW+ogU~ zHnvOA)n)TKzFd82=o2eq#uB18hnq&fBO~rxLU29*+KHBRjMH6NsXbM5`zvftKv41lEU{SaxoWL-)a2w98Gw$dQZovm| z+lBmBG;o#kT=6u0%+_Hc5(-4LT_W(vZPi-iIpdI=t3!DgupwxXllYstN{x>vL*~EM z#u``~^1K_C7((qG^TT#ewd<&)U(l)wbDU9 za>e$>SV#Z&j^{on9l=Yf{_qZyWu#;Gu9wd*o}wQL^_XlWZEcSH4xbJihmWyy5YeZ_ z*3G>&k`V1)wPvXw)VeZQ?#l%Qbg&~o0nU>{)}e9nrO26_fRXX@+oNAp+=Q5e^bH0* zckadHaI&qA1Rc9wDs_}Ix<9-I7bn|U1c7mP3M~XKl>T#NHl}vtcarFx(=Q&W)qpaa z-3z*ZEWD~BmN$Q*INqryBmohx0egr%hsAF#-j}!*XjOu27dr3%%oX;>*E>(4mu2`K z7not3N10Z$k)3agL<&X{dWc zEF?Aya#kI3Z<{WW|k+af58P@|g}vfz@>?bD7LF z)y@qkwrKjInsBo!GBY${GxH$4kD+;)Sn9~V{iY1aUWPIk{Pi^ zHLEB5_K4REDsNx7@4xtP>a!j(lT(uN(rVG4HfQzK<9+`GmYr80Ts@=(0Uh|6_4FBG z7w+Sf0&xxBfz)XS0ZzL_1`E=kA>Y|wGUvtpS_tbGxtFo7z+g7bQLZX$342q6Y3$H? zteiyk%yyB_JUVpy-Ups~)s)II=SW=IWmk3{x%TAE#XZJ*0pNv($*@Mz$g+h4pg!y3 zagL86vT3t8UFDh+jLwwr)Gc0)zj>XMrU=fv`thmMduqRPBSSO^a{z63H)@6H7qBd=>WY@5dU?3WjE!VMTaK2fO#I1aA>@ z++eX@^2Oq@x23rbpIZ*+g;*E|z_o&^p&xX4d7ui~K@bbGVhVD`^VfX8;@_~q6xzkA zdK9fO=;jgSl<#Vub3yr_QzYlKtu{sMD`qrIJ`-6@s$Cs@} zOQ*2D1XZN!;<#HnYDzis2wqSfc@c_r0ufZ*;P>}#O(gyZ(^~XX1s0%-D(&o7H^a^? zzb$jYCjaGWdxJkmQfVbf6ytvtv;U1YlraC_X@lfn+K_yHFVM=aGeYAqn7-t`!n$Ip zAf^4Ra=WBK{-bzv%9S4$rH+YDsfG|*`r1hxyD!5-6ZOa+lvI7@apXb$K{H3~HCN|r zz0occj!!p9^7W|(pg;_fxhV`^=HiQ@V%&@7TcXpzu5~$bly+YHV3%i490ngv@$A zanh7B`seL38p2LFxu-i*+~J+Le0F8q6Z}y*cw-!xyF`-zl~%2_#yF)A(HPLtZ)JdU zR{>-Rf6P&Mvf6-(I8SP&@{Wm^bIoqQLPI|~ovYtG;m_c`rsyX7nnLPXGB;C~PPm(j zJ#Yt|$Jal{t;es=Dk_DS56@BlTCl5plx*|)=ln6Sl(zy*&s(ASWR&MuR=lGRe8J)P%m!=Poe{UdsQ26Bg6X|25szIkTM`HffNh zPp^|^l`UUl)81cl&K>d+QKt7bYTWXbEp$S9l-GA6Mh6}E_d$U0y@6%-3iU?#9RO(Kq9Sbjx)cC%2gX<5htM@*5g1!-WB=?oTDq){tY z)qlJI)5kkvkd;mZs&OUV6mhFuo3*00wrjgaz!7d_?%)trqy9nt=VY!;XT~EmShrE9 zO!5sKeBl{5+)H^y&cYZ4LgPjpdc6ujmXthSJ9G?txN~>HdiP#}z@_uZn`Faj664|} zYYSbT${Ew^D2Y=+xSa<06+A*?7K%PLLzrd${Fr{a%BkhXH9)w=qERykd>C&2VUQ$_ zjwi^=%18buxfEl{qiV17wz+oJN!)I)P)znz%}_u~r85l-a`E{Vy0UfR~u`gWc#lfM9T3Lo&+g`I{s#_hmW4ukI>ek`5GoCSjLZredDq+vI>^NDy13xJO+Y>0x;j|3 zwUYpY&3Id_2F4qE49Msmp)97%sm?#I5 zUdz|)E*M*;<4q|^Wic<8c5u-=Vs}RSXMYfYCoqZduxA?K+z*(sRKMIO&vRe6)H8qPV0}r^35n>CW6`2W(5W)DJM*}C?)Pr*_-eI14HRsdTi-LhG76umSodmACpTU= z433s`PEB~nP%jkXURov$@+<&53_G?&^;V7ZAT zY%dMi+O`Gi-LdAHO)r~(Z&wtEW-Xh{wQSinYs_n<9)2DkbDpI%#V}aZbUbo-O7L#; zKJuVF!FD6db&$_kVrZ3hHKN8_v{WR&4$3L}J?%ZjCvym2im=$_%2i)Lpe0=yH)oTU zM@ItKC@=*ClbmYA4aX^{s6I4= z>=(Z(TktKOkp}XBfR;e8vW78<%s^F5+4rGU^RHuiHG58}s=RHgCaju2UnJo5$Gx*H zBz@(I1Ha^&!n!JIl97s`_DSw>_U%BTrxmkXzF7rKxF%dc>2k!`NEEs1k+bI=irRgA zVqBS5u2R)nm0T%01fZlEt=+W~0s=Q)?|&|G6@yq$?Q z!^P79(KD{G&hn=q?~j*^r#|g3_ve6>?H?<7MO~M_gW66atl6D?)#QWVuX9vt7%R)c zGY)*UbE^cmsRi1a?S)9991I^y&M6+600qHwGmSCThHHBNrE zJT&yS>v~U0p3A0X#DGxq#6PIW)UD{tzqLZaEDW7>(rS5~A<)kQ9XAH&K@zO>R}$v1 z;W_BDvV+Fz(i+3_lr3;sIncg#k0`}7*z1PyUJ7>gb* zGYJRmZ%%NbBag63JXKU!OFv1sN}OJ21@(fdwniCnr-2l%F^ZtbIG{r>l-nPtKIwMW z<&7-x$pdigHZhd#Xmc*h`ZSO)G|B6jknnA#AJVG>{GPIF>+JBgnXgXN8%PT#?h~h}9}Jun##)A)L+9H2Sv$8HT^Fz+Nh(8M$LueEPWxt@ ztdY3Icnl+)62ssOMlr(WLiojmx569nx;@ihdo)9fb|_ayfA9^~TMH$ZS!Z~OZyMGq z&6Vh|A0d3c`Nf=w5u=Gl{pc7crcKE})3RR59g}#){t*WS#?Nu4s;m^`c|Z6c^m6kk zVYRC!hgOPW>2XBBb^}^YS-Tmumv(D(uxY)|)#mv6Ntoa4P?e^nc)3qznUpVe z5qyCt=CJ+8FQ|77ikQGTT=vYE@o2T|8Hzz5XgjRsqONJbKd7lOHe+v#oKof77zFX{ zpV>8N9!He#s(ZV(NzZO>;dx0ezn(U+2FEtqsxvv-I&RQ}`*)m$`g@CdTX4#}@wP}4 z!`KqXI>0lS-D&zW9oVdEkS)4dbSrqM-MP8XKNF0m<(K@O5l}wsGuKj5Mp<; zwNNGT&qtf?x&Z^D`)%P3_-n#GP={IX>7n2~?TUt?gYUSg=XK}XtTPvcamVe-#M@V| zb}?=T?rWa(vLj{B7Jk2%fWgl$$3Np9Ld@-`)~6m(-%3P>JB6#Kz+|y{whQCaemO zm(nu4MBK8m@mlYk6#hr+)#rG#sW}j{t)96LFWxKL6wSK$&D0REOwo8XPXgFOn)Dl1 z?8n%|0$$co1GxM&25Xgt;>n4hjf$cNk!QUS+>Zo;8YHi323j_U5z@^a9;it0b?VTb zt1n+HE(J$%G&k<7mZiYpB3=92gcU?D#~LdEZ`N|bn)lk&cZgVFt!G01A!^H)=B^U zDPWYXX(R}wnZ1I%^z03N^UrfS99{aOblj!>n5=+bcFunbzxkH#|7K(O^Y6Ae&~UO@ z2=t?uFb|r6YK9}p(SVrXrWuBxJEl=De1OziTW#zcOO_L1zgy6Lh z@V9ZqV|RwXqw~DqjfYXPvpQ!Muc*q%t;nskxvF=^v8=6xYIg^Ja~1e@JmiHad4BK$ zooB4Tt|`HGkbV4gwg0O`lo1nTOuqGYjRtfZq=FCJ#g&>jyp%rrUp@n+BIT;G3>RY| zr553rL#o)!yyI0@x}HjA#SJR@QVEcf#yw6Qk?8Df+G_Vcl5}ry!T_gqmu}WLuSIC# z3A78LrXs*oTdDca*4Uvwx4QFx_o(V^b?pKwK!^*zKhe7l{} zyGFmTp7zmZ$%A3p(RWoo(vUEfV;gJim@c3~xFjs~xEnkzu$48OSl-sHWxQwpwoN&y zqe7vvdDJ6-Rmsn)U((p3uv>+<5Sp7{+LQITaAxS6siNSce?A&7kF{=NtT@D*e!(ND zvM?)6D8>f;?0C(`t#Djn^@U|zy)hxw6L3BZVo0{aO$A!0%A5)RaiHQanY}ZxiQ8v{ z@3Jf|%YMA&(y`7a>W%m9VP6T){P>*rWrg^-~-HHQI~)gcU= zp>j=pRWytPUdfJEGy#UziK`RO|0=`jbA`fo2k*OdY?Bsq-3#$6oZg+glfZI9LF%gZ zsG0cd@8JlRI6xFG7kZ>=F#j6&6-KJ=jptERZ8O?JoZfYswU0s!kXah9NpP-3IlZ4k zj&LWsf&71l(LrNwJb^>qLqL{7wr{g*iP994Y+!-dS<&r^-HV-Fh~#k-{C>tM!AD*$&Xv!|s;f76T_|ipV6k#XrCo5H| z$A(DvUp_i8lC7azRA`6s6N4ZpH;2!*ndtlNSI@Ysv#>Kq=2W5es@-xl6K=N#4( zU*s!{z9fhOl+N!x=rYNZZI!=-GQSdfQPevNiYkKM4PF8@d^Y{ak#L>)g!Gagx`zuI z{%@L-cT)Zc-W%M*BHbU~D8?RrQtuBHqVD2+#rHiUFQ>e}r*ZoQrJ)^TiANUvjV}i( zBhtF8`TAT6*ZX&`+=T@AzRJvhasYzwmk^oR-Q1fE)A+OBhZFs)Zq8T5D3^)RiVD7R z+S0wUSmQ#DN}Yo!PNl9snlrU@&KKatTxP+SL3HO}7=b=c1^vVt3Z2HHgbBD7xj$(X zz#bi(xn0zE^YBh%U!OSts{hewb(&H(SH7B2oC#ct=e7I{g^o{oYQ8p!frAgs=%B;! zz^yDM_0VwCBXOV*@Ybm55ZcC&OKgrZM)jH>c?)`5dr7Qn2^}5rtf@;4CR0Md)1v7% zycrOf=K|^V_UqW06r#acbR6rej$220=5trEzKndhbgR>4py>^e>PAZzX=>{sB4*Yy zyMQ^HTS2GyYD5}HkjsJXsz&j!0kSb^`)%Hh@f~{(GT_`Va%*i$!JJcE|LVt!kCU^u zvYEOvD(x@DXk}s=J4Ts@j*hZf?H*CvLOV5-&e(Gd3wohkvq>6Wo%OM2V<~F{+)}D< ze^0Gt2tozZdrwJ-%N4goh*_9jV zh)@Ouk#foi&~Lm7{BJu*&RX^WbodJ&_)Gz0%l(=AKkPkFR#{sk$=9V2{xRYBfQTVi z)AI4O|BI<-SzpB7Un;)a`?4BkU_A9zTz{F)RF{R*rMm6@mA3h8B;i-ovh0Jw+|6^ofH)i>o$E^H>mc!{pD!i}z3%3tkem;~$<(ZidE@6R=z#G-2R zY&X3t+X#xD6&YJeZZ;(YR*H;73DG%-<8NOq@7kYIm5Qd~J-v-AH}K8uUuPLn&;TUg zh!pBM!9KBFN`>-wvy>IFOH#`chFRQc#U6pLc(S2``*5K@9P>*6QsN^#z#f*JkK)@f zF5UL<0(=FFbPI}5YF9&R>MSEP-?e5mQ>i29=TlAYd{Z{P`Ku2~x|_V=klSX{>Z<{9 zk4ZO4SG$oK>cOv~Gk_QP&=8s9Ar7Q4d-tl-tdp;j`?_2Q06Q)GmJE18Wx$EtJm>6i z5uIjC%3)7h0o=_y7l_Nj?o&_Hf)T;ZVwA=C#*LXaB!g zVCASDjb3yqt*CJhDJLq0ivlKJm|z@}DcOX&hI!bjYg$PGojakF+WCFY7lX<86i<%zm;eaD9{cJ6 zMJ+@^hy6E>yEs9MQEA}<2N!hik4YtIXy-%o;938yjbM+L>HovpTZcvUwQa*75=u)- ziXZ|a-Kn6UG@^7P-O`OgNeR*tB2vD za^T_2-fOSD)_I+AEw6B4B-yMPcXP!XyA`O}_qeJr$imo3^rExP37`Y}lA%l77J$Ed z-=~EA{|TpJTa)6Kc>snT&4^8RYLAE=A_3Qwk)JwGp1%$D0)SU%(-!IEak?3 z5?f2m!*#C%D3$K3#)Xz7HhD(LkoIu$k-@Vd2h;a%ok(qb8Cnwoc7wm5RVQj-J%6Eji4|A|P84v>ZguVm2z^9K?4+{a~)xCEY` z#5x|6@9r@J<;>E4yk2XQiAv`dQE1;DF&jRZ_+Pzo6mvg%>((j4oJvn2jNpGM8F zc|mr|-v{TBXK;2OE<{%ITxOFBusZ1qPv*{!5!7GK_HHyzRqo|t8c270P<5e)zU;> zsR3qT6JDx&qqIy444|aD&*MUgQFRwPms4TTJ&edb8>Tcs8Us*&&x2m+%`)kx`CJ#zCQh@7X%g$bb}<4V za`p01DUebe1Nge&JFlb5v4$0m=yvpx&}ZCZYa;w6wjAd`gy|l}{y)5v^;`@8r+0E6 z<(;e=fgjZ6j42w;mEAD@M@~rype5oXKQx0Pv4Zl{rA;@^4J^Mk)bp+w&on*F_}Wl@ z^6QRux6AwY^HDDDAKyn=ZXm|)|7K8X=oq;x&p96zGWI@-P!M-4zMNnZM>EZETbI>x z0PSOD%hf_E8O#WR9iCozCpHK&=wEN9HV??0$}4p6t_z&+^^gV$3Lu zzW>VRbOgY9p?(`dREATrunZvF0lGMxjbEmP9tV2^N0>>ZE96r@7BqA^k)+V*co7L# z?R+_0uhZFb>2bjv<@$n`f&k~i5k=SgC|LiR_eFyg5qYcgD>m3;r3v}jJc)ejzSD^U zrNQ<5^TroHc#7YpI|KJr%-!I#;0_X5Z_wqYWzU6Fy`v$n2f^Lf^IM@2@?sM{dU@|t znhCor(gPl#7bn`I(~Xh`*>T?6bugPK6qcR$@E;6^BIV1aK{}$BKjUc|Ya9FUrF|pe zmy54n1RR-BHm9xB^-KR+GD1ogG#}@pA?+(PXmVrjf#|SD@7U1jzK*gpNA%volGk6g zI}^t%)|bZ}#eYDMdOPr>|MzeG^zMt~gzLAPtxAZA(XQYXwLaP&Ytq%e8bC%GeE8CW zld~|wRpBnBXw z#SO^ZrkMJ?3Jed6Zl&Cx@gyEoWq{%BnB|CDl4W4H9%x7pfN$5>v+=U{NBqW{NLD+J zt)oLNAT|1x zhfv-t6y`>cj?3rH>dJ1xdN2kUC4rA3JwF!ZD{X6=mLQ;;KBZqckeL1o%FF?h?}f~< z%vd}D2^9!~iII)SxL$vY)-neq;JJNL@4Y+;aqRbMkcMcAg4Ra^KD;%?x3(9Uw5Wby zfLaYhA8O8GmU`R=(B$?_f4QNKr0}V+HmWxBzEL7AFg_GI`D7#Dq7Rz{3<+ z?&zg$!=?FJ`sVsrbCAOSv}717-yz`X*4Jt_BX5l73tEd76|SjB*I|d~p)ByTJ*V#D zjs;#N1xbg{G)se1l*e}ES-*l!*1>r3mVy?r2GZX6N$}ST02Ec$s28ir{S7q_=Ahw? zJCc|(b6fwN)%9wCWeQ#X>1u7@#C)WQ`Df<^!e&Y9tbs#vNU0PI6m-=LaJ9bh()f8c z;9Lp4%tCAE=so(wl-{pMQp2wwlAqxW=p+7EP^>oK^Sk8bvY z&qD$GY5N87bKJnIGF}F6S8vd9ns&kSVJ}vz>d4sHNlMl+!U%}ezefe^ft>w)qR8FB zVsapLpOTY&dz89wJk{jchRF|Y7qS^OoR1p&<3_e&iYc=e_YpQ47J2m}i8&(`BX@+) z8LqC4WNBM-3u9_|>{9xCBpMN;>PzFWHo5!dZew#F0O7bBla{j+wR$NQeu$>5ZH4n! z{Qix}_P=N9*E!mow%F$Bx%fX&0*Bl`h-{_u+5`)=jhvJFtMo^J zeWGT6z#!+`t7ZEJjaFpEkX{i|8Mmg_*PTNJJxxKG)mX;F;A=oEIWKl%NBF;^AJ2=r z{IBT8d7gbyQ_rL0l2z@8G5j*QUsnosAF|gdoKR; z4ZDhw*{lL=ggc1=5ptT!U8s&3;Be- z|JvzWD{RnDt)r>QbRrI)=eoVSy5Y|6OXf$V%Q!w#gE?B3EwHn)SY z5`XwW$620ZgKh#4XDVdh0uW#P$R>g8<@Gdc+xoNrKzzJ<6+j5+8P^kYb{XFI4@A6elX{zYu}N<##v6l=y)_EOWorSE+z#TfvpQ@B)*~gNhsL0Y@Aq z-CmGW*M=JBXyHmrfORRZtd0?rio0aS>Ii*Uv5L;!!FpwSQ}xjyy~%4%+SXh=H}h)%y! z{t(PCOk#G=nP0iCBZs(fzumZCo+akE@A0CE;qA+d26W`4w&GlKOIq-7ogAZ`NBzGd zR@LYu57DWk9lNhW3V%{ZS>>qI(F-{Ka99?veyS3zUpuyyaT_B? z=5`G)K|`x!5_Qh=-cq9W%Xyx7NwTkNH30VcfZtWAvlQ7T*s2vT^o-&Jf#Y3h`C z+w4h!#`>DMZU&2`(HP+1KXtuF49p|N2_4*~XK`~%#bWqO8uPtmGjO%G@HooYfk((PR=2-WKe3_5w_qZPs z<3FZL1*^p0`8Bn8I(?Ddi7qW1M}ikFLWC01Ze$=AJgz-=-y`C#7`vTRbI0zkwGTZu z_*U|bJ!z(4S(a=Z4J;ac@|UYsF$+BWF_Sr?Z$&&G@O~i=ihT0*U63-{Xq<3LicGT1 zs5pVwXCC`9iUxiWt0zyj;>Y=_#@4$pD^@=owt#(eVG`1VXLwxB zEgubAY(#I(KWPJjRitYUJsQDH2>PS6X7RpPKeS|pJ8}@jek)e5iR+8`7x3boUrX&v zI`&BZzG**3p;Z!elvBKUILA0s37#czGlKE#5`vTYVq>Z^*^P%RJ z&0gnTt5}jz(#1{*hk3=gBGjU8U%kG)iWZOZIxd)v8d-Y_+2x~fdW}!MUCGaII#B~Z zlsa;Gbb$l$dSr*?2?nf6*cz60 zA5x~&LF4ZB{(dT3K7!kU{m%)g|{0pgMB*<8$(2c1ij(4}V zw{qGLVa-p@E~G{O5rC>NHwEJLmz}C2$GL;WTLJsH&HcF2bc;v6lZshQuDFI?XBoZz zOWiLGPq-NU9{*cO4-HGcwzIBU;VZGjWFed3>}P{&@HDUGwQL+IOf-4iCO>&RIP+y0{4IU- zGXI8z*Z3Zh8~kkkXgf)_#`f0+9gN@a7FY>AE_h7!%1XE`K2Rj)!qHs!qVoLdc{L7P zVll`n4&JQ4DqkY;Ro`#$;5MrO74v5ofkvBGeQ`ajwo%IF?=%c|Sf*Zm-bp{b)4Hb% z4u&7RUbA}2xXy6>`P$8Fas`T=`=G6^?Yxz`DDkMS8s;3C2qh5}=TuJ|F(qHso#ZQz zGt&oqVB82a-tu8!E4($)6<_dbnagfo43b9jTOju}iowkn8=p8a;N-1u;w>5q62MEU z*(-eB6OKg8lUy9N*ewtaBTObWF%izD5lcdiyBd<%a5Hh@O^WDRA?<9Dh9XIVZEOT_x=kH&0zi7uRN=e zd>*XsUTl1wCXHAAgy(}>N36S4h2)4YuX`(poZ%YYAKy&bxYp$`le@&d-y;2~D}}FN z$YywdjeBZs|Ks4oTTI}i2IYj*`afq+_qcV%-kVVf3aPSSu68`9*P6D=J?!QKy_o9e z?Q@g0`*E$z;%2iSR#$Yp!&h4xT?eA7FJHyG&9o)%#o9WJ9i01gcoc%|)C|u27|+u9 zH+@p*-O2uNmt+>-#4vamvk0)vladI@Di%s<&I!q~9E=4vRp%dR*nEGZM+i5KihzdT z?x^TQ!Y9v>>F>T5e@F?c9P6=t)z?ZsXpr8aARg49nGKxMYr#DH+4!D?$0HHct(kv& zpx(2ZFPh8bnTu!9wr%&`|DZnhTVq0XUqgCF^XN!V6-3-h@I(7;1qwf>^R$nHq%bF_ z%DaVkuJe=5#Xi48HgQhBuHnfp--xZZhK@ZR!;3;Bw+7Z9o=6>vTmC+JImvKUVlG+p z15XLK{@o+zZg@#J!I?aSLDnfex@XN3J6xLm9h(Vt_iqI$T)u`O zYkYP_}@7udD7oR)vzpCbEO#ig(YY~#akqM73l(<^iI>s#C0Ph}|`J}ag zQbcf@RZ>y(1XCa&U^CiAX_f--0LxF7Ep_W?;sDm?dpv}%fFIa<-5N5r6ice)4J4(` zMaCM(3e8h)V=@5DtD#{QUF2e`EQ>Cy2k6>Js4dIX=c%Wv*zCmmbwjeIovM7Pn_|%0 zidxGaYUe86K`)$ca!*B`zV+ywR1$}7rfc%9yG7q4>NY2PaQr#3A(xO&D7^_H8f@vF zR1b{j2YCLU(OlyLMiT&Q(fowicw#WUkfd--KNynumT3hE zGg5r`F>G-&I=Jc2;@;%U4au-oQvsQWi$Ve)BZJ>J z^NkC^&YGMoAbR``!jH{acCns!X2w+FAhnQQQfrWJOeV}Fg>_wbmWI7Tx_F3r`s%r*JVR$WNul7pufyqDb! zFMn>Vh7%7-dT^cOj2J|F6DiMe2#m^e)_Q0a}@QpTh=8R zR}aAS9gx^?vqn_PlBm9n+%HUgZENTg@oxRVyU9{8eOai{AN8HU(UxLCQ-7D;whmW} z(A>0;j^d?FB{@;sUAmf)bt-}=P@arpK1<21D=ugWXtVJY z$#t8#bRE@`rXNX9Bw0)iWBR>MUIm9dG%NH|9kn(%x-QZz9O7@$&F~U==4WAw`n--Y zl^lR98_K&D9%E0r_pxZly4w`NRhFBeBL4BlOJj9C^B?uyqhvX#4NaW&H4p@ivq zMkQ@>2@Nb|6@4 z`E=a>^1*mR$zE40jU!#*ZcudLZrYjz08K&?bRuj!!iyhvROyTgLLOV~-W?wuaNnkV z9?h4Lbk|wAVreTgA^j<>IHml#85B!AeX`qY`}qPDuUDI0z6Abt?GlbdebI5lgkr8z zzub8~j=5=zpX;{_Z*ra{Bo6`9R^GZ8Zj3Vw*n(?2iDo5<8@l#f7wV&Ia=(PsY}yt` z;LjFB*}^LtZ`N$qYBxHC1#~fe9$3H3Lx&B$I)0cTe5E}L04%{X(1Kq|ze9z(yF92rx?{OAu;Pba2#>7C}q zEki-gT4>bSZGysgXP3k~O)x1O$Ms2Aji4tCllw`QFLH%X+It0aW!<(I%#&G1ot&Cg zreE+P=ZTP!iya49>fXEit;I9~vU(djCW8DpmR&J^ABo~ktza%>7jW*24T(QB z79W+2h3W^Ygu4oGVHHAk+r-(pE~Ib=)y1bpdedA$SUYZ5bAIH`ErCyX5y&CvLA*I?F;@SZdGcHCe&_{Zhf-m%%Bwa8^2Z zxoH1T2lmP5;h>$Zk33zJU&>_qyT$aV;TQ%ZMSfcDYl5Q{^Dy@mG{8$c+@@Kp;>&;F zf@K<36Ah+k(Y>XguzT;G!S>I z=mBq_=Ct1yS^ZSvAS@pPQo^QV?g9HEXIhUM%l6={sxbsme~wl$?Rw~&SBRdzx|6Ub zxYbgWV8~3i8IfhA!*J`tHaktHe(;pSHC5;orb1ka%V&BDE66~_umzlq(H zDjvNFH=?`luuqO5CpIozjUe|&E>QZ@?*SpxeKpYyJ-+ben_Jkwef!5WZ~7cRoz&^d zwYH*qpwz&JaZO2!YsUE@e;PbB3mTPSZiEcFjyvi6>G6S>U2;|z#cG>O^HU5E=hjNH z`}nljFA-B37(>MAg;lrErszQl0t3|aXN`Dr)(3g9-fyIo>P{#7>hkQ>Wg>C{3kgMH zDagJRq+O|6+6dGLGu9zXpd&KO$>oRn0|o13E}jwa=MY*Q?CslKf?p zRYE(f-&Sd@fkk2{!x_#zxM^Nn_oc-K=Dvy0)OHq733ra1OEn#vl~Roczeo#@HF*D} zfpl+@=J~tfL|G_-(~okRKRj*VYxP0?yM8xVlE#2DjhdVF$VR1>SXj zxcU20sJhjJUtIaejw(7Ao6jUqmnvQrZ?f);pLR4o?{*=T-yK!tCMCcj_Vdqwxdg;P zeGfLQrI2;t>T1{<(e3$$?nqkUC^|C}_2nUK9X4gU*rwKqlD3Ir>?YHO~nwEhyWyU`Afu>bTc0)EP z-gnjWeyO@&2H1+p#ORAEu#ht;V9$$s!=INHkPFvIINb~^Xf#c!dh_vtWJtRid8&){ zSuVM2L3T2sSw_j{^;s1=?rT#XFPj{7n2Nvm6=vIxkJ`p%kf9&&E zn5pYkZS`DwIT|+Y5+tRfIv*sv(E#N}CJ&9phS^mBqdO&wVl#~7-g6Oa^J%?V-(&vg zu|+3Hvz_Ce#8~|rT3FS-uFv(k<@RWPLFqwV*5C>FBGav)%@qq-$RA`}9L()`tKoP4 zot5>ksXoME6wvy z;3+o+e}1&Z1JzeI2#uM7(u;RWm4hDnt2W7^UTjZyU>O8j{C1fUv^(t3vIbj^@)Sm! zARUtWhOSeWVPO!*Sdr+vjL8mk1~ws(xHrmlLSt^|1sEH$u4{WqcjTmhvxAQ{>U{I| zc{xWGCX+uueDLI39RG@Yd(D)g>+qNT3O-J-q-)Sio=KR<1IpNisLmstPN=%j^G3i9 zR`(9Mlf3l4e~(3b*RtnWi_ZGu!juY(0}v}WvkyP5jhIRd!c`E=`AGD|Rx1tAVEA}6 zckDAtcQ+$XizbDXZMhF}f@gNBy9)4HQK02XaM5+^d)Sz+X(nMTDVPi>vo zA4Uj3hp)dR5e2Fm#8NI+WXpL^Dwe+nkv^h4pn6ZCJ+7JjW4o*ahaUwhEUi8U`s0{+ zYxY*4@NWmdo#`Y737CdB%pmB+o`N(lEBuzv{U)hLZ=c!+6N13-+*_YZQzt8apR1rr zmQ*QJGez`|0Lz4V1!*_c$J%iC4`~@JQf2eJeHwDCIVo}CM#O;DlQo_14jMM*+V0K_ z;B2?f3?aNbOP{^H7Owlj{!r)8+A2JpzL`qQv^-!z+b({-B#NJwmO0`sai0`*710)g zlFD+^-fxKhCj$lL>}=&^nC!abA;_a^ykv98l7FazI(A|N!5|jB)wuoj7>%@5f>8#= zp(MWqt)B@f<$RCWtU<6*;^E>6)dz>W3pdV^_di2dl-Xn8T{qgwjxA8Z*jckS6 z=-nCtSSMc>&kV`*B13^Sa}Yxbtgd~#sOo;>gzunXdeGLZZvJ&GxOyM`;ki#dy;NHT zwWk^Goa|Sa8!_SnEoz7ul3h6(ZID|o28^H`BlYGckC~r0n7Sy9FB0adkGP!OOfo(a z0jSCNE&iZTs*8~{Y6qpNoe}*h?)x@qOT0+#DDAzQ;ies}cP^ftyqFve?lMd_F(FXd zBXov^MXlDoirr47y%=~lD26jr=9ySr?i4yoY!rflfPpT+ZtEV7t$lgJ0s;?5N8XO) zE@Z`t@1I1gxvPeVz-)o*h=+{KKg^_f|Yg>QHQ(u*w$|A3*4pY*l(!=RGTjKDUtWR9>*Z+C}TB+IskGyiGSEJ0Nj@PTro>Wo6 z0V;i#erY-#laQOK6;MFj!>Y}QWIXzN0uR>sFf1iDw57VFR%m?dHRwuXm_G8Mnc?NaIo zkKPG(^_H07>n2I;uP~V)clwfQ@W}R}l;tn6h!;rGZTo*WLnVep`p2 zwuE`UeH-5KbBPMIoQO!xXf-9gFuF8ds$8aChan-5;|!@&Ue66owntbC2=U3Gqf1yi z?0gw|A<2E7=y{ zhAQ2QG<*V{!@a5P`Ih%L}uB)bvSK}H9vt35h?PUTu}vEyy8 z;n9!b037-9(?X)KZ5MH61D)24Min2A$bH@9@%TE-vW~4~AA>Bgn@_s*5a_uFq(aqe z_qfpP3rY7QsBsl!DZujC&zbTx6{E$d@8MVB1LhPoHpusG03y!AJm`pX`x8Nef#A2+ z9F;K&2aAZrP0{qfl&kpopYS;-(;@cWm{>PRb&b8xqyTd> zB}#2TooF=WqgubENgsaa2FpdzkG zFb$|=1X1rdBs~gRGcxpAXH~F2^rDoBX!q}K1OTy~;(RzVjYC|hfteEp7aVVJn^edB zy`ik+JR*#N?yHvh?Hz@}Kwhc6BafDv@JvH^IF2TNPP4rsiFx_xCuXCD=5m7|vN`uo z{)0>lCg6lCLO>F@qFHa2t+H2fn41m=>XoHmf4~d$ITe3es^7Wp!A52fCL^ReIHVLR zCo##JT;qNe>Uck0AjN&OT1oJY*tZX6yfb6g6!@1bhJeyQml+M==U|gzD{54XH-3W2 zn1(vIO@KVd8fcOq(dOVuRbX!F-j4z{_n;1*86PHHKisW*6ZecwChlgv%l^V=V=Z=v zH(rb67+PMP0=6seS+fu2T2E*S2G!uU`yhvCMD(xPesqgUU_&1fKvVC08v-<}aK|~?(ZiaH)dF;`=l$Ec-kN%{8|WvbWNvva0_a>H@=O5lF^ukn#D(`O{2cjM#*WhT zb(FKeD12VRaFp4#IUU>)ujcg*>M-bluvbTSH}hX zgBsm}Xm^JHoqS86+a(fADF9u^AA!(4T$Y69IP#3uq?*-t^+3dfmot+1_ZsD#Ew+=< zKx#yJz!u|Z+dphg+CM4)d7xKhpE7Bdin=e7rH z+K?><@kU+=vG1)C#!XJdYa{0=@!*OjPN|a5Y z%o6xK3jz>0Qj}{K0Xo#Mp_$Hn{_2|ze{h;a8mq<4mRv4-cR$10 z#-~<4_0Dz9XU|WJkQoC=$AIn?Dr9hJJ!`1ecG_|U*?>VMUi5@TX7VN@UUu@Sz`uoK zcOU*md2Vqlq4t%>RP0l{HBsE0-v;fz0u)}MRta@iZAP((@agxtjCq(~t-g4*46K6M z9W2LIVd)n#@%U;0P*ja4jpwsXF(YTze59%V8K)MPHZ+F3v3w}T>u_CBzq)ihh8 zYUUxi^60b^n+>1Z6>o6*P#3_r++10BeB5?z)?>4PV%v!%Fs(roOSQRSS^Ft@A>{U| z&Yc$T37tu){sJdkt8-v0+&V^-)?+IAc;x^m&V6k$y}sw8xV@R&CYX?mi1I!NH;Fr2 zYYM5EGHF1{-d@~Khb+F?no0qGt0(HGnjQ|BuORK)d<8AGbjkaIZX)db8ikUR?qE(D zRqCn!#OHKsxfptE4)9u>PMOm^dw*e_$Mm$(qD@Bcyf{@+mjxIn#p5FYDO|rg!2(YT z0I)$tpVlDG6W|}$%ZWMZI8Au;c6XL}7;u?PTQq;eGO6Ap8M*rj`t89JIQiSHXGrx! z|K0uij8i|NYa0R{UI5hNk;|9u_warJwpFVeL|w715o1=|bU{;yw-6fAcdMe5+-re; zcZ`LreRk3<)9JU@vA5|4T%>%{y*PdYXfw(3`ysN2vgd((^#Ge}*TTKSIN&Vmj2Hm~ z6WEqh?1(rjGs!=_&Jx8YhgP5)+gpYv<_7}M$;tA3+y#zMs!-63oa zB2*wLZ;CYloncmOj?v{t(Mn4kxCq$p(#rWcrbqEBRrPz4`U5Il70Spy!&yAnP$ zF<+|eiyL^la+G&b19tPOgie6F{~A%_-l6p8 zi;n0M2=WY*(eEcx1jr3}ay0IbDqerzDw|=%5nt=NcFX9(I|UrDT~V}Eryu2WwC%jy z6=@dwA{Ec?{cWS50-FzA+fUd^^NRRh&CAX#p{9i=jimQ}s0(b!`Rvdhav0W&;dzj& zBgJq`QjrO+m8wGJ(YFgw&>KMDzCW35eJ#bJy^kg`%_)~@cE8!;JKHC?4!V)(HsVzY zRHU8Bjb;tp&v~XlR_N)Imu)#B_tE^(K=Ik4$oBA2?#8uZEo_?#Yn5M+`GXf?`lrSkvw z8j`-8hayHE2LZ)bLcuuRPfVK=&dZk{-#o>&#Rr&U$Mh4;=5Q$Sv~T2xig?3;n6S=J z^S)fFsYimNiJy=0KMsB}tGLgLnZ_j}Vc!UV13=n|xX(I};4Q|=kKPp{%uM+(B7$%H zzzn_tbn*EwnBmuDIDi%P@?}Se^yhXO*U9|2^W%ECs;!K%-ATOZLYE{!=dZ2;F%xx5 zDch<(c2br9OG{0_cQ^=Kx3%%c=U#L_SENLSp4;Qiydu=|X zpuye2Rz)-Sbji?`MUTBxx%{;*toDdq@~NnuV2;5U=||DN$GRG%z@RI6WqPK4Zyr{N zhHlPk6Y)~@52wrn0{=aQ4#C(3=>*M-$;BK{^sg0CjWv|0&-?DXYtW3+Cv9idDz;U= z4$WJxgqygygS-GOY!SBZ-iWPji#@)fLJ&Xd4Ie zlniUGXq9A3u()uTfw^wcYFI^SKPdS2taz?Tnk!oYVhfquoyj@@_J|=h8|-nIPK1t} zz+D%@zd~jS+CP#M*$tpR!uGEtJUmK4)*J=0Edo3QLDp{Xbtb_n-#VgwGV6*uCU)AKoWW}_iL|(9iw>fqxIyeV6D7nmiPB;EE)ah@j8l- zyle=YJo9`OG97Q^E3<88E;aUw_MOszn;m3aR}LjSCRP;i1&&rK9J5NICJY+k(PO+i zT1je>uEO0PVgfaUF^w z=B2_q9YQj)bXc_7^w^|y0f3Ypyo#om2S>+%YSwPs~S-_i{>VI8aB$oYu2rj1`)p^Hj$63kM? zi}5wcA}mzD#UYq|Ov0cQ{<9gGF`cPlmp zZ}s~vcXMB;jeODTv1FnVMHF48ON3FFW^&cgi)uEx;c^?r$>k13rM0YdGt?M2X%x$jpKFj)pZa7@fa>dSfv_eh!B0Ov-LR z0k@l@f7fius}QR7Fp}))N7XcE8l;SuN<%7o5Y(P0G0aadIj`cD;kKIdfAT47+W;cj zy{pD7IqSFG18|T-i23{rfHSFjC?H=L_v=lwzTdo;qc^m|eR^q{+!$nI`H8J_A=cxV z-7*GXE~~nCcJMjns&#rEj4#}}Z!~)?dTYXnBx}ZlQF6h*RE+cD@dQ2ltuSlkRmey+!jam5%T;LzbJTQ z^;67&u6LvokHYuqx6X048falMmn!dCVHM5Jy*>?LbwCtj5{g$5*w`9*u70-;N7!ef z!rvT!mlIDL`Nzq)dtLb@(Dudbs_l!3=_D=C!`Z}ioG>EzBA?buA@Zd|!LHsw%QxD>tv<1x_HiWp!^dO zznz+f@%V-CmZun82U;Ff3d|T0K5a_;LHbF&!=)vHlVAHC{q_*KyA(`QN+x~6pEM$ zC`Tam0ATW~PyKEto;t_xDhZuUbzjwY2HCZ}E0`J>GvOGz%zNFg_86vHofmO3go=-M zSZb4R)>G+j+76U=Y796;)YC*@Q~IG447fZ{kc7IVpGx6s)Tr5nJC*EdqEwFaYqO-0 z;dAAEz1*eEzJm_FQ7(~a56Kq|ioH@X*U@v7U_lQdtN?_JsWFDaHKOH7xAD`*o&_gR zZIn78m@lGM|nvu4!zT^1FjIb z4@xMJtda74iw!G77utS)1Ga!(;^hAFN%b^iO4Tjni%zE_H}OaV2cm73KO`cfT&+qB^8T#oF&WY5@$*?FVoPkUy6ASN@o={gnC;9-P0a6i5o> zk4eICn10i(0VwnDuFoXLYIlL@lWgU46N5=;tI|_>Y#6OW#x0<9NZ<^`uqW)6eOsI# zOnpWkJC1_;wBalgOI2Hl=iamI9iSH^GEy9aFZ~A-%Nay6H@p+4G(PI-ZzjnM!!MPm{LoTT(jBpniZk z_(W@PE+AXoQ9zDk7O*njo12yS^23bsai}uI`mRefRQ3y7)%2z0Pqw+w#x)4ji$k}| z1s#XPq1xa$>7gpzRHz>}`Mf$&ouzC)!wcbESA-N;pns0tj+6-N6sKSoUw>XK+jgqE z*rD;+acyFMzzesD2b;K?TCVE=u@Q1Y7SY*IDIb5EYXQPE2fI9IC;^=O6YM`?vC*oI zGYi=m=FTK-31W}f$itq0vkC)HI{^z{_kmb6BP1WPF-}WJL%1CGjY5X51m%yg@J+c0 zj>g!S05KpgRM%++&HSwT4|9Ufc_THYGwXwmUi(disOkl`T*EIS2n0&=tE_-mT!C`{ zK^Zya$lbvkxcI-~sdf%Q0g^RFA}=G+;?@(~tp`Sm`P>0z;Ji|jrR0PEdmJRiYx{2y zvb6ILoZyM`>>rU$f=~bM_qKGKhu0DFw>)ri^nY#8=R+Ixr!Hoj*H0zR69X3CGZHNV z>f5gG=@;LPG{-$ibHr{)`fZL9-=oTQfIiP|`6kpJ?4QEK`RyTPu%q}5fTpwj>2E~? zNVB=OgToPC5%d|$;zD~D^gn&3Kjyc5%hBPr4o_{XK~oXmN>GU7|BuSQ@c@X7I71wt z`7%#9Kl0OuMeA)_eRLl5W{~Gza{{kWZ`|#gn8x$Dm4+=wTYy{GOwCZf^}!RE={}rZ zs+Xe)R~E>dRW%=uI9-Qp)8#FF&BUtDHbV2AGV*`Ous`)T`7$vE(m|sKE;4@XMGzc` z0r%N9+sV1;9*0|fwFZDvY=hTls2}p|gz<72S08qsi`-|#O}L#BPC7&}O%PN_2=M<3 zaR|X%H=;rLN>1xHJ!Lk3bd*6hj0je+-%t_&m z%1W>(qGRr&S<|&TM?|-)!(&8d0kKcX$Q&&GdY1oQ%ec-D9|%GOYgg24kE`spfwU0`#cpJec!yf(=MfrM)$ci=55J!6UK^KkueofIIVmM;*1{N1k*GShkHTZ(`KDJ!=J(szavz0 zOQ*8zU=?d0r@bOB5M8EF+ZwPlq#1G)+;+Dq&C4Op@H7|&;-4g$D$T$z zTFByp$}@nmw&R@7V6MR2S}Nqf-}oRK~Ys4FW29AnZFdB%tA!mJH zR9j4+d**uN7Vg~b`fezEZAfg=I~{7^5K~LZDjW7)OEx_BIoN$Xi(3AR^4NT%qeqt~ zU=3fT?7LEr4tK3fZUNj!!#V&eppF;V@yb4nFHcOS^en0Am9)CBg zZ)}LV+Si9{C+a>Abw!|}ovXk6AFk-yV%;>F|dS59(m;OSJArU3FAL zu#wvti912q)o=j_PHp>R4EJqas!{khkHjluz&jd*34Uy8#(K@m^1{d05zsR=bMqK1 zbl;(646-X7=zko+$n!!)Fd+B+nx2&NSzcsnhpHwz zU!8^Hqo_Bfl6?mKmPOL~;b`D0T`cT_VIo?h{%i;GfXYPBvc=M!F2b>UG% z^Yk+-hZI&N2gA#voBEYvBKm%eAk)zYo2t^>SBDCuijqxW2A)u(4{o$eN;(LhSOhYi zZdh3+0qZy^FPP(JZ9J)5UY|=z1bXz@_yXG8*~JYi7PoujoZr)Ij0#>5Ihi-xEKq^UTD$RcQ0oS}u60Tk{LFJ^dl^f9q z{Mx=-2tdQw#Tzq4T^bYuGP0z;l`b<1J;7 zHKlfMmiJ~@+W$Q#T^g_tIMvB(YNzfCLUlU^=O1lW*|!mbh%Kk_!0kTiUhcI8RJATV z;FBG%)%>p;9@8f2S(1HzcUqb@0ya-O$QRaQn9${@^C_STel;-_VgP6&0Rlku`rn)A zkjdF1YiJfaZIYAb`A{@VZ^q_1ax%~T-+nv6y|gQF)U&Vde(T`NI|TRc?6BolzADhFNnqzr-o((mB-?y!F-&7hc~;rKgksA)kSo zTF&VqB1~sRaq!j9N`Apv0O_FpAoC!cKv3xHi|9_I{%j-K3@h01v(T}yIu`>K)I^zP zL4awtB!Hj*<^$$uq&9hV^456@u-mlbbsxd?3q()78a+j& z16tB-DUzfEI!I425H*KA%ROIzQ+)=UijCLMeJ3r40o3~6uxZ`7|RzU6r znk7Z-{L+MrQ-td4#yS0+7S~Rid9-P(rf_@{FrWxS_guA7PM?J%r+MwB5#xf&%Xbkd zP7P&YF@}%%0LLEVE?FL`kFcP(^DMWjuC`Z1er&Pj}&Lqave7)LtYpTjG<%h znGYE3QtIcMO!u>h10gO|nM`<-xr+r=TQS$x~qfyO}7LOY*~bkoU#XEgzjLohrncKXPaGLX5;LQJG?JJ<7 z>fU}2At5a)NGl2|ASE4xq5@JPN|(~zIlzD*AtfRuB@NOcogyV2(#+7^9mC8$1HAw5 zy=#5z*1BhT);ep{v(Mi9iQn^kp1t>)^U96a<~lVR*FJE+&kx^aLj5s(oM%9l+ESqi zE>nB=ODDu2SI_Xa%eCAizF*gu-ll^#kL!oC0p3Uthbo=up{Jf$eDi)l^5U6OuvO@p zC<{WMZabvz6t!TDTAP*oW$dOi;t0@<}Z^FSy$F zRF*XS%(oQ#(=QOCp1AO|#By2ty&}iHaJy1iqa&SX?l0|#ZhgGpeXHWZbj~FNhrHAb z2*LTo)7oL)6?)y_pH=yjo2bwey7Lsq{X)TkMUffp_tt}GqKks^HY9cO!n*nw7cHS5!+-9o^vhKrrbh^soZVY8ADZr>7QxX)M|=ES|xtT7v;}xgBPk z=a_It&UJ5zVzE16_F#QHe;ou||7W3xes;P#TV};5C+)O);5%%(p8M##B|47fH3+1K zcg>fUi_KJHh%vEDwroES^aKPPZZc81+2olK60n=^W9Sq;uQn*{N#jGDy7sIu7&ew3 zkY5YP49Bb|a$x-)|B?EVHZ3?ij=i6a`@~K9-O9O6{wR{SmGT(P-FG{x= zIV=!kiV|HBQo!liv{yjLmg*)649wp3(8sehN<9k=z-pzsxjsBCQ~zZJ1wfd_Y!dAe6atFyP=$X3?fcb52SDig<-^xPr=}^+H zbo746TQyzQLVdKSGyahEI}R!8h35UYkKljRHTo;<3%m0;HpBm%SA&ty6tb{j4qrj~ zPS&603sUug!LTp!T!T?vX~zl+;f@Hl@-Zh+I1HMxj!E_J+SG4#&<#3 zGx`WPuI`T0fJ81;ic%fgE|#%&$IEV?Z`e4dS1VYqyYI`7w-1!>#1#nfM-nQyHiET8 z>t6(SIX{to>CeOSd-%J}cQ#&*vEiMF@CV!ubFpqVJ27?P#9o$PpHEd~?S*KcBZ$Qs zH}g)b?GJF(toi*eicUlCdL;yjJ1yim{5)$^DACPyt#V#|NYv$lDI?IfZZ+=Uz6!CY zuo@lboG22;-wO#^>qM;R=rh$kcRce7$VfJ&%9g_)JH44-7D}e8rdOX5ru$F#9L&rC zTx_g^Ln+;n|L5#1%o+@xa+UI)ED@_VZu(o)z4$fyl4GIm_j|B#aDZryI9px!nWzm9 zV!W5GW)ICEyT+=|NT5by7Fyn%iGm ztbI&HZE)%s#ZCVMsh^j8J}oXP@n(1uOyty_pSv&%x%Fc7z75syH^58;lULok9R_5!S*O zTx7;(%|2tPdZ0?=g%9}4?DOw0+?;~k{~gR=v}XR9Uhw=IB%5c zG^$pV$m^{i}0C&6@ zegg`HYCAuepn#s^e8m^7)Th!F>D7 zQiTb_&ru8V8v%y#19&H5L7t1m&=;+?Nnow~4fBH2#W{=Krif$s*eM+%LFPLA2T%R1 zIcFhwe29vt_jA*@hcc*@WfA=C^`)fj0^479@|FB3j zp*)}4=^sPgon3&%WyT8bO0Oplo~{C(2SUqYRQrzah?eEWWP`~_Qk8ecp!BdcUrmq@ zk0&ETgNPwto#t*9^y-(YYi2i}5?61({Z9~K(v^{a5k&Cpft39CBldQ365D15QGDG_ufkhTMB#j#N$!925>M{J!yRc* z93mC4m53y|KKM~hlDnCpAlDcR4qS2P&4vVoR=Uk%DO%a;s}sv`T>yBs4Sp2`fR9(O z=*F9W`WISKjoTJl;(oE#L#`Y26S!+gg5VL3c6lN<1uJO+2L zj*?#u?Y%+NyJUS=f^mCd)JBo0wxuvco{|%5tF$nWga7@In6%;s`{L3ATwarFhaIA@ zyK?3hE;fmg1j-1Bs#-zII&3RQq;SN#v(h-V6gSLzpkCw-=CX5(rNr`j%8%We* zWJ%S^FIW~Q_8JSTACcgoUS1dnr6D9wx&8G|v0_3_az693`<&}l5{Wb`DYwgvq8rOe zdqkmTSI1?8Kd%uzo@tcSXL>O_Bu?;nq00}d;TBka93ao-xMn)~ zRNF-P;kuZ|X3@YFk$V~UDa38`*XClfp)7r}U+;q+B8i%?tO9;MoNr4RC7-EqgWqO) z!Cvrg+kaD`b*&jZd0}w1b8mB#lBPONn>9-BfFyqLnIHWH)!o zfkf!+S{GNMZ`LaA4UoI*840sz7Ceh_vu4zkJDs3EVEHv@{lT&}buHx8T{7__CUM=y zRTc$`kQbvBw#>RUBAu)o6&%pIoSY!mM3)Z*p8Gkxy|U-+-!k2V*XF91`1vz>3U0bT z4?MxSE`EeB=yt@%Futt;7hCaukTUnixQq{CusWB0Rn zO80Kol&53#B%n?DUKc?AfP{>r)^Akz=v+weycWKPzc^;##f z4s#T-SC1!cqWA%O!Z1VKo&Tt?QQ2<<;;M?WZ~f>9_04#8U2&Y z=eO+h+*kTl7^;5I+P_EmTE6(k@r~Kl*raTQkag$kJ3c8UiVV-WpC5wzjryLMl(FZ= zGoz0ezDwIHz~W>aogYFzW%r^j(DVJXI}$sXu;G)#m8pw^ocWA zrKKc|UTIq>Q#-K!8WfNSlQ|U7kwt5fsa=kR@-BFY$t(>Qsa^vR>ix+MY)hUN!ef@O zj^5YKr!G*k=BQJH5F%Z?o;kBRT3Y@-nfWX%>CB2-)^)6eUP8*_nx;drP?bjn+u|v8 z8a1(-iBYcPdY5CCv>=b?rC+UQVWVX;IhZ6v>-WXRfQ)W3;$*jtfqJC5NcEJ}YH&c> zOW`#oD!b9sQlG?;UVB-6SJ0zR*i4km?31gDphvB^^NI*XhB(yo8N@DsK4WQ-Q;M29 zE)g_obXeDXS6Rd1jLRuaRNuLIv%0Gf0~}7%o0VOnhFX{L_p-t-ij}Rp$RIPBSJf`u)H!YgH!w zr*&#Xs6_(OoCW?O_cmW|k7g+O@|^|d>g%`rCJBG)1X$dAGaT{5oOnIeiCv7KoIN+6 zMb4TiajjN_&>$LL!rbW<{k_4f=&>XV!XB)LkE-zOoBXFSN#I6-fP z&HGp(Nb&i@cPUQK&(*>p&GiP*K>tgSw8hrel1jid6AxJy6yadAwioVD82lh>a;-t6 z|GAVl2}6Ts9F4p2Fgomy)VL8WgW^M)4<0B_b^JWhq8yq8MnCSJ1X83u;I%m{ExZ>) zDq#@KERn|cLQfVDu9h)~y8YPgwV^Q0j&YOJs;VfT;GrS!t+oy8&m`dP=;ZRx#a}y? zrQ=*dv3xjseMq}L+OmR{o`rKp`$xg$xNZv&a1|?7dfZRbz7UmmJ{UGo7GzHLZv0W% ztll_jsJV@H#8rX{(olUHdY{#*Y!B?K;S4TPC;GSp%$kb&z)6)qKD^|1HQnu}s_YV} z_2GcWZ^}uBFAB4VrM>3F<0Fr^uK|ig<74lcjaq%0Xg6Xzdlc$c**$vF~g3gKT@gK}TN#!(p`I zhfKdJlYqQY!>zm~SwNI;u=2i&Uh06ppFhd4L*|^C z2Kr@dx}BHO9FA=%0DTCiEH5my?tb=Sdd!I z9wd+J7Y$5hiY2UAso#t$kC3PlgOY)xmeK@n8q)$4g^t+Vd}`n_@WeVRl!MYLcGK9N z)|daIOxmV=TbyOnHyf%(r9{h4)T!y!1uJZ|hBGAJp5g0b4$kB%1~(#?jAe-bxdmza zrSCBX|XaX;e^F& zw@3ZY%Fk7Gon2$V{a}1+ugG}026gKs5oMh}@*VKHFuiRx>ez*w9~JV|Vch#D&7IKS z8$L0Vr-Dc=HjGnIjxO8jeLD&M!eYVOZ_!8BE+Sd-R#7lql^{n5JCJLix!{JuSN{~Aw+FY4utV$H{3N`R#Ba{FXX@S^LYu+4DPYQ< zL-XSaBvO*7m4vG)g)-kCnbl62CJ*oR&pc=u=u*9U?b1O|-P6P_^gMHO+L%zcac$+( zqigWOqQki{Z-adPjo;H?P&0v<(DqD6EW)1?)H9cJ$j&Ag~z7 z(!Cg{h4L>(K(20m-BfYt`iG)M+eSxa7>gzK%U|JQHV%p_Jx!p6cJGp_3c8Sr z*Vpfn0BaMKB~wgZvlY}4bPUMqMcGfxoy=)HKcEXB3SgjcH{+f<%9ie*=|^oqN+vXEnpKDZZUsi|NVw^4l~B5|W+ z`SwWPOTp>P$vyJlQkoNbV`t0!!i2vE458oOuHsydt?!pjtXC%F4Ypb~{#>Cxwpv=_ z&GKW}SoP~Ocj@UwJnqu7>tC&cIZe?or=;fNkxk{vlhl>0qNV0jElVH+1W)>(_&kGf z>(a)`f^Zs__wBW_-vs?%Z&g4wMy|=>GZlAGF!kSHF1!aMOy1?`Ag2+_=AkD!E;)!; zNVU`?N(?__EI@o7Bkn6M%=N2jkVxEPxO&@K80UMkkIBQTOVzulvI79uZ{pfmPz^Ku zD$}-TZ7idw8=k6Sxj}A2PuDsnj5qA4e2RPhj@VY{UMoR{)Ba{YIQ717@ST6w{4Lz#=cGsG)U?<;MeW3ivXVAJ~YIvqFZM( zYcaU*A&DoYcl;YS$oe+_`(^Y0ofAl{iReWzWQLH#9V-3QXt!(BT^Job;`$HCl!hZJ z(Sm0O)(lqm%8ZVq!~jITaY7zY?vZK}dEX>)X?gfoiFD0)VW-Pc>h-oP^Yy)|SmOI_ z#+57dIn?g6CI|6`B-Z=J{pKin{zF8{VW20?2eM8%e?=k?p{bb7)&^e_A#dNE@*$hq z4XK9fYxS9Y1$XDzX|8T^p9vi=UaYRFa+wKaJz7z%7sjc*j%hVK{9t3U;~Ss3%h9y| zZnx^!EQrLk56mmoUw5{MzFp1#?U2QDzyv$UiC#0BcWzaAIP7=VR_ zFxTx^e?_rP8qr}Go%y`uy`{)YlRv>@jSaLOKzi&UBKz{dVp7T1zvjawH48n!(OUWR zvVKp$>lyE!*cn2r=*fTll4}XB9)c)As|59a<*a;;K5!DBoAto^GmB zQw9DaKVpz4Sm!Sg?liDa<39t;Kv$ zGl+9Y5gWq5)Hf-ktw~!{Cz#gVJ4xtmNfUD+?`=qaYaW1Z{EEKM?1$A1l-wBCS6^o6 z)KcPLlGH&%!=upJF^Fv{sG1I6zHKRz9GKIZXRR*XiKHUWW@`RT*#w@7^5+9L$X3|0cVt4}^i*J;k!ozX4 z0yiSUb**R<9OkrF?|xR->BY$##j`uPHTp6upS2qI-Qc577jkF%PUi~nzcA@$0@Y*^ zX+fb?G@@SRH$i89yo#p0Fx_`Crn?iD3~bD^>O76;Q$LB970-#6#UmH`PDdG$?rV>tPuoW#RW-5jA;Nvn(iPdnJ1L^<_yEs)m zVt)Aze}uOxLKQ!UI#izH?X+>GxvmXPt`!#F@P#!;477G5Nxqy$b9fCNSLBNIY!%BQ zoq^q%yjxd&`y7fkD9w^;uq-p3YTyg38)2oO{T#$$&IXNdOvgfC!J7;kZX}sQH0s7z z54X$p2M?!~px`mc&fiGq9Jh2A%V+~C1%kaeB zH60%*Q%-?jOy&jqv6UF|E&Jxh3u1q`mf&Av(g3*xY~a!a5_$dCV?*wLC>23;yg7LC zj%{w_aF>(w1@?G$(>DbV2wjIIE_z1QyCRMk*$wx{_Sp-LdBsmHT~0h=7x-9y@l&-#6mCY#=QQ3cTUa ziK0Q)$4b+;>KaHgH7GI$ZO;vGUR#CnLFJyOjs7wV4HlKfU}Wx{-3O6H>}(#7d5a@u zWPGz3SH&-TWiO$G1B9A42u@XG&Om*YqUnA8qp1fM;jEcwCpLna zIv;FmBlGP4{K32Ig6VxX0B|N4cCwA&&tH#!z0g8y-6;ZeLpDWq+?LaeXcZg=WV~LG zO_|=6V4aKz0(z}xaD{7`@y02>)h6K1ET?0M_0k;lTe%U;q;gnst*U+!oT}zE7VO{U6+z6r(}zBNdaJ@|H)}$uS3{W z6!)rOF;>f$muTy|kv}(+xq;-ohyI0d$PbilUJS+_!xoVV=cfQ#knprhz>$&+4rFXko7ki4u)>7Ten(VV6Eodx-#+^)1a{sBbHTX&jKd<@Q$HT!_R3zatD$>51{?UNJ zr_#M^*1Hs|sw|gU+ZmrycV$Y9c3e^Duvd}{Yb!ZyB7PF!iXgEWUI;VnFw76RzP!>v z6%bKxTJPWD74}Lst?=hAispo!h;3JF#K&|SU;s()L1?X7a=iIEX!=MVyKp>B_2isN z%%&ZHQ~ow9TmsxJEpeCSAZolSk}P!OX{}2?aW9mL#~##V>aJ;T@3qAV3okN{Iiroy z6GtE)x)?cX&U`#hk{Yrt#!+kFL~SAvdkq!emYm1==MaDJuyjK($34iVDJnic|WD?7`a_{s4aYz?+ zxdBY7R{RaWKD+HtWfKuUTgWhZENpxG{7tb`FKK|bE^2+(>rPQ!) zwTqb6;N;T@%_Rb+i2X0R_)Ls(5k-=yA@9D-R`h1x_bq~PAXsHPfif%LrsXXUm$4f(Lz#?x; z=0(t@BG%QlucpFF0eZ@lH9K#kJ7BXkOH41@%$1VVAvP~7pN`W$q9PSAj%FEL%#)QS z&u7#r>!o`a4-HjPxp>*!<2N<{6NObehFXnlWxS_SO`<=xO_@9j`odbRhCK=M5!veH z+c7#XddFwHl{)TSwXm+x0#)8aT>5b-pRvSdIxo4RHm{!(L>~c~;#b-|0mYY7nwd$6 z4P=i(JBqjbR+ic|TQ`|M2jYQ@F z;9`v1Oszjbf#9j^pJi6on024qF zxR%7NsHZAq_c&B)fj$|U)sY?XgXe{2_;d(vZE}@zH0k9O#=m&jQa6`5864>Z`NId| zos9XfUz#}tiWxn}LXtfU(v`+{^gAEiyPQk~*;!nS4KWaR+3SOYIuwTfVy@wDpGu<>2Ag_)3a~><1c-)%U1{$tNR|@pRawskX3||Of7vMUMb@P z1LL@X9)}NrG8u69*Py1(Nf~vp4CDBB5uW**pwl3s$AuDSlwS!u&u#=63tKA8z$b2!or#5f+!~39U*>^Z#BbAAPy9Cx(m4@|A4j1DON_%G*OI~}s54vTJ z`vqKYYHRd0qI$j{egzBDDaL^_^ri*yT|A=2nlIwpZ^f4TsY^Pc3txygBHKTV6_svGB(;dG>SC9m1YbOVj%lD}7jkAl7 z@n>?L#1ULeg{8>sUa&=G7)!*O#bfc?-hiK`lxFFEnj3ebltJQv-cyVnG4O211Ki}g zjXc*WJGH?i@{#b;w;?~+y)R(?=CdmtOi90Xmd5HR@ zF))ukgU4QyZnx5#P1OLHi3gn9C(a^p$BibaNiO=?_b! zi#mH?{>+axZ>n_n(Z#Nx4pS;zFX;9yL61x3sukVw@Es9%YBwEIFlp|ZD9<^vG&#U{ zXM=+qbU+(14S2?6Vv6I7XP?-1H#fBiu;m^RHDG8|xfPScu(wtZefEW{hCL>b?~aBV z02~|~Vp02Bf$LnnK8~2LR+qkd6)@T2v^$BBeF8ja2;$tD`x$L(x^OxsQlT&TK;$mQ zqwW6n#R5PjSAf{xBjDPv1;D%{#|p3VS-4T|iQCF$3Q{fB5kuXN&f|2Yb!YHi`PDUQ zcxAuR6i3K$rRj{>N=ySvIe4qpx2HZid^{0J3=0?dTc6PTiOe3NxD%VBT6pKH#`Qw6 z()TXe5++cE(YVUZx@kjPfyJ_)tKwGOi9L!5)CIM#mKLVx31&;VY0}Xcl=HR47t5=X z=M{N)EH4@xy8Oh$sdqg&z1+X5R|SLxR$hs49XENh#!fqLCkPljfZn~t{X4!!3CiF9*wwXYqyf z9%Tm!1DJ7K4ZMJo`+27U)3#50TAkW?dsZdms51W?nh#4^Hmxy%X_xLhRr> z)#_9JQpCRs=4F$l3us4r+bs9ON3N{B>~&s`Zqw3$wi;Qn71lyr&|`zGfn(H9O3;{@ zPFLPy@w$o~&V&g4yH_;M&D{>}hSAu3IHR_`GbrrR2*6ER}(fRYJ4W&DP zYupv_rs(_xqfDbJF-*4}RLa!iZ6!iCVwG|HkC(bdHs`>b4kPOEI%v{NWwbomA0_o z?-$S#>^bN0owj*RIt>kIj0Eb`Ho)k#nu$(mySaDT;1cL>mM++tbmD#5# zZI4VM5%7+0K1=!&=|1vl9Ll>3In55^at{E156%k>_OZ1 zx>`0r1S_J6&rR%IRek^i!XgX7!E90obWg{IUrt7*#4i1X#j<-1m}Y2Q$ceq=l?JL! z(&#G2J9mHynBu+m?IOW$lT9hjgikz*qrz&zt}7#s4mb`BxtE zzkg(c0OY1E#q8`IDdO?>Hxj^XTArKH41b`Fn2No@pn3R$y2~X~6fR^X2z&;;HXzob zCr9R(EI&XOFJ;nAI~8`cagjTW?G^(A4*3MEnRS#B=jr$?u5jk*CDndsSCb$3ytLt4 z)|KYh2a4Jg-_9tzo_2P8h+0jgVsKa0cIY~B+FAl!)NeN)K>v+HFxiuLvKzC*7@uH}Ik-{5megM%$uUrqZcAXvO4 zX&54HOffjap+I&Sq%73L0}{Rqoi98|dI!esR=Q8Zr{zy-l7-7kUH%D=hF`}ak1^E( zCjvXrWMt_f?y`yW&)PtV?rUI`f_HrRjo>i|6I`k^-zZ+-%EcfB#Dj4&y8SG#_ zUEoYVPT{fS*?r^_hE;eUDYS9&Yx3Sk-&(~Y%;Ouc zhPdjA6{ZVqrgKY>pC)9NL2CHNe`&TJLk(Wx5o&J6aH7I&`|HYvpvwpAItL3s=v|&_ z@!B0jymd+5v4uc=ocNz9->MN6RxidAWaJ|QQ^cHAceHuO^3Pjv=t=;*xT*EITDlS+ zvLz*KOjek2n~$GlzHwH~dVvMR4ukIk*t)R<&0EGMYN>9jZZ7nqwB1iQd?wCXLU@M` zGJ4rs^t3DykhwGF=S^h*jfIr>RD0JYk?!8KU%b0)RHSq zyCQNYhqr>c1zYsIet%&LOx$g}cIav38^!3ovfIEAAB)HKW3(J5aO#YXpY*AJe+WNg z*Ks1$;^pn?`AVi%(A8~^c+A^{k*c;%m*b*!cXYlcR)zSUYktjs=!cH$uLWlNdSKXI zai|TpQF|YMvh6J?MAx@fba~D0tsdB{c;fL`^zm7N*sqt?>(`TP+?9!d>s)OG_e-)I zzRZ&D^!(6y+!V(AI;KOh#bvlSTFo`q|3)|D*E<}4f3CX8)F_DOmPo|`Z3SNZ(k^nP zb5%&I(ku$9jmygibQeJnt?+c9A8-6!v>o~+>$3AhvHM6Y!}4b0X&XsW;x_brJ_bn` z#DC9D_iQIyi~srZcX4|XQvZ=}7#<@q!XWA%kU)=aYxUg2mMH54|59E}U^c{sv6XD2 z!?T;C#AMWtv>rM0U=g2;apoAmULzjAhdUc+=q+N7_|}ddPZC#b-PG00t&^po7j_9y zbwY>YoWi~0J#J;{$YpPitg*Gg}@R;tVe z4^}pJ@MiEmDiCW3;TfaYcvi^trB!(BdSiD4|(okfIQ5 zDq2KnaVJM`XS|Q~uJNBVY`~gfqP3b+BQF*?5MW3gd6WHN$$gxM>_oG|&yoVRv;7>k zJRA9_bBMXrntpOcU12$Oe9G!aSCtf4vinh6%Y9TcJ4@%oTa~KvSNVmysdjxDKxpFG zEkO}S)ClSn%f`~*r`p-JaeT;j%^DThNXaT>i@d9fW^#I|*+M_l+i_@*Ji0?#gJgT; zG5*7$_qUfVcgy@z-`#d&W_w=XGcPS_t$VVmdWMzC{+BqG)5_|1F}Hm@^k3#Nwx^6i z?~=vKF~W@f6PYrIMl-s)Qpu_$wbF8;zO70oEzY-=?IHy>W%20i(+>E4<^CWE0)mBvw_LL5MqxQ;D{cEM)%Z^usHNExGWcg4ws)Xt< z2>Nm?A{@1-=jv{Sn;F9$)kAH4_02X0dM@&3{X0DH?V-QOyG3Ei0%5OJiUM|?rxVhh z_4O%qYiYHxan=ZmDl4A!#PgwLRdRocAM^OI`U`@i=hM17(4vbteO#U7LC{*He2SB1 ze3}HcvlixUNGrkB3N}}>s*Lw=CoAA|HJ3@OCSM)W#nyVgV%1so@niyH`-xH|A1k`3+X%UEgh^ zVGbLhz4mpY6K%}z9mJ*;Ax(^#hIcX$NycK~x}>VFNH~PY>KscLxJW zNn!?*R_Z42Gbtg|1g!AvQ_uDNcs# z{APP(wQw;cV(Sl4L!|5B%PUXlf>&)0MkC*h+Cx7c1*iS$ktEu$1mTszhVaNCk&_dW zdDSOrMi0Tclh2`jb~CD=()aDp)hw-IhnMTdcxVw36gSk$V@o*|?}}X{=Z};HA4bFW z(HvGs$mwre9oMSpjGv3W`wrH9A82N82?^?+!pVwPTf^q|??vn+g{xnCB|Qnkw^m(f zWa~KU5!AC?XpzU|=#`Ex&n@g~*p8TAD5(u2coflb6=2tkl3_ih^_j2m>X@1$ z59;W!c`(}>_~haJ)Z&TvNg{0>QaKe%!4IR}e6^i)l|9<-u(s=WqPAP-C6@P3+$s`LUs3U{0!&sX z@j<+g8}g0oyLKXFx$~QdHplQ<8mXfr3eH3$C#Qs|XVVS=X^%1+u9jeU_7~YMy#h@b zgAM%aO2(Tobu%lCtR4nUTM5@5_p@GBtvIW?X6K! z+k-`8PLi#Spq`lzhCymN>fW0*>Cbe8e|n9~%g1!8sk2(mkzHh%%kpq_@vZCms~N** z)tT|UEjBGXFDHa(&lfp_AJ14)C4?;^|GJ+IIA`+6o3E%HMDZzGSsO4h9qyVKCL~8( zDHpTb(tSxaS?KK@eGLf{(887I;$WQrqq#W+`Um5V+`S1#Knfe``ZL?{Wgbxybe4qXNEZzQ|{O#Bc?;SvctAfj7)2n2*&u zzwfP|t63XA97<;E!X@Jx`~123tw<2+l{Fn6(#;$WCw2+RK2)ns`#{U7)#9ux`b)3> z-m=#^b#TPD<8nHje96%i9#Z0XJ*AJyx$h|q@9ALcVX3I^3;LiZJV@;DP-#wktd;(M zKK&g;!qK70#KAZ%3Oz^T)Dd!qxE1Y#hkHp<_&WNV)==YV!pujJSCc|TZ^mDRt>h>! z#9f#`9`vN=e)_XSq>v)ane6k+KHaycq>m~NCY7!1b3FhS4TjHbCH`0q>*X~Cb3W)` zHtX8iuimF^V!)%ScQ}oiq}SgF47WL=D))J?5i|^Bpi$gS3A%tyAB6E!ScGo zUXnlA9y={AY7<;Cl-R-6iYMgWuNV2m6*Cx*TG{@nTlgIn9IYbXb&bYrYj-!xvbi39 zGZaO}NfOfu(0T6O_3`mbeiBFNBSSYnjl4InWwSsooAc*>PHtLm%^f}xh_Sj?oWM~J zdZ1Ad`fe$G@H-@71A-iFsZbCm_^f_)s?cFs}K(*=yO8TgDlAmDU$%Azndz zNwbG>a<0P@;xvQ1S-H9!aTN#_n1#HJ6(bf$ANTacHrC$<3JcYz^wJMkO1M;RwZcVZ zD(82`rUh;}bTkwfK75#U-&y_5yDYn@n1nfmeu3@yc+Yg_C%Z?Gl22?Zj}{QljB`hE z{OwPuzQ{<^u#dkRExw052w`T|(UNgByrJT{+>gG!J67NKdYdF;O_bdj;;qXGV+be*CH308yTC98u?luSAU%%-0%(|j=+~k zD*cW0b`4J1Tz)s+&i_7Oe7D{#3r=J_4i?Y`J40+~z?yF99T*Ah(~<&$O(kgk?vv_c z9~1=^FiV{Ar}JIU#zfM~kBS+1rK}cLr9X0_PG1IDUQVTs&KS(=K&s4so1rI)7r>amUkEBG9-^Ze~7kJRB=)Q&d9a4|`|0l)q%vtj4f^5Us3l8^DU+PP?` zl6*JOt#evZYd^YttE8m+-C+_eDiekESNhpMB42sWraPyXs%LwPr{sh-8sci2q&ohuV(A zPwtA!^DB{H*r&DeK2mi`^Jk1ErwFaSUN5)1;bM-U3_cxIgu`oZU_AK;_KzImeA_Io zH!|w;ci3}EO}DZWj_jRLtbDz#%~S7hiLlNi8sF5>D~R)^tD|dnyP5Ju$_22r$~~(n zhL44a>Ru&jf?@lDzep3Bv!Dir$GNV!{_f}d(QELtgL1)=uMm@WageB4jnj?>QJfx^6!5AObNtuagT8!QuS!0FUfYa-opRW zRff~q!5uGJ&#?}uWgHdC4re>Z;}7orYaCcHewt?8Q`Tik!bkWn3m?VY=RAhDH><Q`?0(%$eE1& zVOn}JZhA?ck%*M?rm2CCWGAhJz!X@aQGnISXJhesNx6Eo9O7tc%U5GRc@KFq?BRZ# zgbFFo6$)#R+j+p-L&;U63X z&WcvA3TRcFSfIjSHDNyfVR{LND)5~;h(Y^fyl!TJV-f3R3KfRc*-!N@Y=^Mou($K( zqb0^Y4h&axJR)xxYkAey`hP;NZdOdQA-sll{T){e(bK!Rg0tA&F03`SiO^ICk+uub;qi;hOZNL+lQ0ltdM)(k3 z47#Gk-`ua12tlmZi2m~2P^--Cfpgugs0ydH?9NdCMTmXBck&;t=lF6tbb+`m(6&2NVF;mGCtB`B-z zDNp1R*oL21K9q;vB*xqi1}*{@YWVK)LDC;@v=#(w*mXs&qB}{V2OAjCwkt>&5^D)2F zl>(ulFgJFF6F8ac*;dglYxEj#G=4Sp%sVU%smKD3GH<7!^Y%1ISd^z{o*k<=BB_|Hoo}7@9@;FR13N6nNS5|~# zjW^n91fO7+1qWjGTwj$;qguY0-d*j!?K&1 z&lY#WHuH>k!>&==Ynu&7=-)4IP{5Z5ms{~=tKP3_X--2sX!+P`cV`K9LsgoOr(8YW zyw8lH6lAqsGywEQs`lBuZXi4AAsu5!0n_QhhW^wDAso8vUxD1|7>GFY zVb9N6Fhf9>Q5#LUM+#rPy|ME1Tt2XJ*5!W<<9V=}uPAo-wd)OwHzp3hd;QA_?H%>s=^0rV+;jqO}lN-6qeT3>W8we`5ftKI<% zAkN3q@{jOgRj;i0mfGqsO%wfR$L_}u;+$v|yJ%|;$HhlYK)uU8^`TgK(v8SSt*Vr3 zP#K{E8J`4)QJCImRYextyup*>Vje+r^?N;=VxOGXZ)NYJ=hI;%I%b3tZhm!Z*kzlp zk!+7D{Z`E%s;TR=$Xjc-CsN9YyPtimi2aLw^J_$jy_aF3+{#DqO3ufn?Dsi+{zpq! z9uL*`hQ~e_L!^{!S;j6Q6NXk}Cy6ljU1S-{keIAdlqI{72&HU^VzSE?LUtPal3^HX zFk|L7_5Iz?d(XX}_ng1p=RVJS?|aVqTsQuB+?Pl-oI%hYWNll|4G2Y|*wF<#==b)P z1qFxN_pH?>$MRR+tfr~Gu_hc>(JLV}46G>_blY_hxV^EW%E{kfx$4{`H$VCA#|BO` zzue&Y$gboMM^F~Q{GvzX2-~B-Q_vT|6ZM~0`fz}qdd>tQ75jn8vK>j48N{xS1kBLC zZn+Ra9js~HxaFCl8)AISpEjiOt7x!^C?A#C2o=gs!W&6I6r~$Mt7&n@G1-PKRv%k!05Xn}+DzjMq49ERX3 zf?6W7akd{pxSJlg?gJ*~1vtBv^Yt1j#~n@PGV`pN^0F?wyw!aOSy?&hs&^%LnjhhQ z%+lLIrW6{XfBWad)VefZ>wB?JU2O%GdX3Iiu-5}k~zaka+V>u=6|Xd+=oxkDul zGfx_h+t~CRKCCVooBFWky(|P9f(;?xIHwb<(bX_?+!i`e&Mr4EuqXDhsy@lF`9 z^|8XXogXkZ%fru9T`;PSU5qHPHlFTnFg!hNz_Yp;QNXI<55-PQSHe1`aRnPU}R0} zDCt;cNb5K3)PxU<;{^}m0SpFOHS%^&t2pJeR`kAK3Kk`O3KG1K%cqa#)a)6XoNSl_ z+u2cwa#x=>g>0DPXYNBt-(pJga^(VjH|8|GT2^%{KhemKsi2`qFW5kZQkj!J8^HeR z&bA7z?X6~u#=_)Xm!vTVs_ogKmgoE11r$p2j2G5%%>SkK)Mfhz`yvO$g)M9sC@5b; zL7mU!Q+Q7w3j*tKq0=Tw*s&vB>BK#wWNT8;I&-T8h=owlO)PH4B&8QV(9n-nX;-cG z5fo$gP#fPdF+Iz4=Ep8M&8WFE^%0|KkdQO&3WJO>*j5VeEOuT@@J#-n1Zn+xf=FjN z?{${YzI)D2C0i$u-(FI2V3vj+j~sadz^t$MF1}cCHVGo;jh2|)E>w^SIj3ndo_-Q0 z(xDnp_>>0w6 z$NT95czGx8Mx11Kl5ptpME~8)IH&0YVLi7!UEOMz!Y5wVqFk;gB5 zZy4g80303YYOh;@+$s%HDPFeA6j64^GxKt1d}!(sAnUh{ylAax(H)o!+8A1g8Ko~} zZ~F9`+i%5c#@@Z_wVZ!bQ?Dxv`43(^EBFMHS1b>dixc3f2VIVB-7;K~IIE|qS1Wo; zWY(_gJfA(uYg7_IM=7`T&bS%ZF*e1tV0a>Nz-u`=kHGA>B19q{71Mf-ZW6#zQC`T@ zZo-C>7c$_WhR(J^b4GxP1OsMnstY?b*UnkkoN2a(RHd%7Js%t;cRi4{Yo3``!WjPn8>mCV$69an zrJ1z3iy_Bn#%AgHH3g&5P8DNN2eWu=n!CR|x>gy)*#V5Xm^#wA! zae%#MI6C*}g8Qd%UVy>dz|cr;$ptfw{wcLnA}h@CNqgQT(bI)@3?E#Ny?%VzN2Q#~ zZNe?jw&Q&uQewWp5{Qkg6LFhX9fM>$h;WCq>hb4;91SvLU;V(7t_XCAdpfSU>FQwk zKUrs$FYPEjI~MHM(71x;dk^7{8~<=SD0u5tu$P<;is%&?HQ)vmgN|gi8JE!o(|7B= zL^>EHI{V82V1$}0d!N?J{7((*_|*1QeCgN(LP!{tD95)P|AUNJ=YUi1Y&g+^Pdeh2 z0_X(>K@Q9Ial+4`#ftj^;GZ|6;$ccYiyvqdT-muMm!%G$=$*0+UdaQX8>3d|b~A zz@B3Rz&PL--NwF820e}5@Sl5YdGz5hFjQ0S)2MH@DAxt~lTrdwQm6VZT(GES5q5iN zaaaju4X)vVr+7%0Ywa!lo=lZ4wG(1T7YPCMxFxwbF!0LxfF6a^q=d`s9A?6&U-OS;6CnMopz zPFUrLb93>n{+O1}E)+%FPT0B;Q^0)Zib0&YWQKfE$)nEJJ^s(H;Pegr9M3#s28yeM zmx~N>9p73K)7pAj+Xfk05Z8E^{}>!0NENo94)9@krL2RjBw;q~pu?AB>3kInk^^jp zCgQoFKqHtgPOdGWiW{mq8~x+ZX`;a)9HAHZn5ox99iip4>4xU(7pFQk{qWaNjNPmg z1H+d0nb$L#maO{0=)7OtY!fg)$|mM5ruiX0Vlzx5vrgCR1(3E0^+dU*hq@+;4on^7hX`{0>98@n`Pv`qy^MXn5HK$b?87 z*nZp^ov01%U(GQEfK))Bj@DMtpsvdeQJuu));A$wRjDA@mQh7sxa{-DFjG~4ek^ln(kc1c$2gVe5b5d3MP}|ubatkTFPU?rS zfgUO*=p2o7U*ZB?4w85L&Q70tR?IIhFP*1t$CCnh#fPw=U$K0^)H3q-X5}Fv4oaK= z$GT8?FwcqzU4yiC3LUxLiFyb8BJ z)@fJkRc1IwC6lGj&XE6vcn{t0dQ$=4_gH^O4$j08A-8kIm1*+fxJaR4k&MD-^0z2r zj-U3Wg~oKw(;w)B4)Qr*q*IuXInbi)bbn zQgu6L^*gOTB^EWx2$MC47ua{bmp5L1LGFTt*?mCyNl`dW;KfB*qDw(#1kNOOLS^3`r-MlwEr69E;2iuDvSwJrV z)#0WN>g`)!b8J8Fd8_@Wb{j};{KD}XW|4lLjr1wc`Pus~NZ6x5Oyhn2uB8|N;&@*7 zY-Uh3Jq+m>m&5m=0lf}dt=u}u?efb~Befwy+mB!r^7JXd^aL(wdW9L1H+35zm3I!{ z?e1@FD%?X{el%>06R}qFW3@74=?lfjbQ%WLTOoBH^4M{-pui;w&&5*u^L7nS5D(8E zi!rs_ZC9FfMTXf=6Hhta5vcraWu8nekH#>5j_#C`#hzcmxk&SiLFS`0uixm?1Q2U} z$XJH1!kq1gUR2F$zo`K~uNC^mck3b)$c;#4R$^VLVvtVSWx6M(CzucH7d}Mg>!jUzym!)G0e2>6m*OZ`TA`Q+pYVHDl@rKgYjERx(6K0+`4u z`7;?;a-Ck)_s%u~xAxBOw}j>w+V22LgMW>%?DpB)P`|6O&aR48Ra9{O z9lMqZ9lJ}rnZ>;}59cRb5m}gK&}D{YT?q!f^exBk+8X$)Z>2F=TDNvDFSTCj@)-M% z`Gd@5l^7hkDZ%4m%9J^b9W6T=CO_2BOkqlZrYt*fzoG}pN9o32QKDO&vUW~` z)PGOjKab!|2;jf2zwK57I$&==-Kwq4HMi7w90Pmc{(xP@dv~!55EL9dKs0b4PvV!O f`~D9SR_PbBz8UL Date: Fri, 23 Feb 2018 18:38:32 -0800 Subject: [PATCH 006/138] more work for multifactor unlock --- .../feature-multifactor-unlock.md | 43 ++++++++++++------- 1 file changed, 27 insertions(+), 16 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index 31859ed9fc..0af19c6bda 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -18,7 +18,7 @@ ms.date: 02/23/2018 * Hybird Azure AD joined (Hybrid deployments) * Domain Joined (on-premises deployments) * Windows 10, version 1709 -* Bluetooth, Bluetooth capable smartphone - optional +* Bluetooth, Bluetooth capable phone - optional Windows, today, natively only supports the use of a single credential (password, PIN, fingerprint, face, etc.) for unlocking a device. Therefore, if any of those credentials are compromised (shoulder surfed), an attacker could gain access to the system. @@ -32,23 +32,30 @@ Which organizations can take advanage of Multifactor unlock? Those who: You enable multifactor unlock using Group Policy. The **Configure device unlock factors** policy setting is located under **Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business**. -The policy setting has three components: -* First unlock factor credential provider -* Second unlock factor credential provider -* Signal rules for device unlock - ## The Basics: How it works First unlock factor credential provider and Second unlock credential provider are repsonsible for the bulk of the configuration. Each of these components contains a globally unqiue identifier (GUID) that represents a different Windows credential provider. With the policy setting enabled, users unlock the device using at least one credenital provider from each category before Windows allows the user to proceed to their desktop. -The credenital providers included in the default policy settings are: +The policy setting has three components: +* First unlock factor credential provider +* Second unlock factor credential provider +* Signal rules for device unlock + +## Configuring Unlock Factors + +The **First unlock factor credential providers** and **Second unlock factor credential providers** portion of the policy setting each contain a comma separated list of credential providers. + +Supported credential providers include: |Credential Provider| GUID| -|:------------------|:----:| +|:------------------|:----| |PIN | \{D6886603-9D2F-4EB2-B667-1971041FA96B}| |Fingerprint | \{BEC09223-B018-416D-A0AC-523971B639F5}| |Facial Recognition | \{8AF662BF-65A0-4D0A-A540-A338A999D36F}| -|Trusted Signal | \{27FBDB57-B613-4AF2-9D7E-4FA7A66C21AD}| +|Trusted Signal
(Phone proximity, Network location) | \{27FBDB57-B613-4AF2-9D7E-4FA7A66C21AD}| + +>[!NOTE] +>Multifactor unlock does not support third-party credential providers or credential providers not listed in the above table. The default credential providers for the **First unlock factor credential provider** include: * PIN @@ -59,15 +66,18 @@ The default credential providers for the **Second unlock factor credential provi * Trusted Signal * PIN +Configure a comma separated list of credential provider GUIDs you want to use as first and second unlock factors. While a credential provider can appear in both lists, remember that a credential supported by that provider can only satisfy one of the unlock factors. Listed credential providers do not need to be in any specific order. + +For example, if you include the PIN and fingerprint credential providers in both first and second factor lists, a user can use their fingerprint or PIN as the first unlock factor. However, whichever factor they used to satisfy the first unlock factor cannot be used to satisfy the second unlock factor. + + +## Configure Signal Rules for the Trusted Signal Credential Provider + The **Signal rules for device unlock** setting contains the rules the Trusted Signal credential provider uses to satisfy unlocking the device. -The default signal rules for the policy setting include the proximity of any paired bluetooth smartphone. +The default signal rules for the policy setting include the proximity of any paired bluetooth phone.
+` ` -To successfully reach their desktop, the user must satisfy one credential provider from each category. The order in which the user satisfies each credential provider does not matter. Therefore, using the default policy setting a user can provide: -* PIN and Fingerprint -* PIN and Facial Recognition -* Fingerprint and PIN -* Facial Recognition and Trusted Signal (bluetooth paired smartphone) >[!IMPORTANT] > * PIN **must** be in at least one of the groups @@ -96,5 +106,6 @@ The Group Policy object contains the policy settings needed to trigger Windows H 6. In the navigation pane, expand **Policies** under **Computer Configuration**. 7. Expand **Administrative Templates > Windows Component**, and select **Windows Hello for Business**.
![Group Policy Editor](images/multifactorUnlock/gpme.png) -8. In the content pane, double-click **Configure device unlock factors**. Click **Enable**. The **Options** section populates the policy setting with default values. +8. In the content pane, double-click **Configure device unlock factors**. Click **Enable**. The **Options** section populates the policy setting with default values.
+![Multifactor Policy Setting](images/multifactorUnlock/gp-setting.png) From 0b10162e7920bec4e897f77fc7e8b6df55b20d97 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Mon, 5 Mar 2018 17:04:30 -0800 Subject: [PATCH 007/138] Completed work moving multifactor unlock on its own page that includes configuration information. --- .../feature-multifactor-unlock.md | 183 +++++++++++++++++- .../hello-for-business/hello-features.md | 78 +------- .../hello-for-business/toc.md | 3 +- 3 files changed, 182 insertions(+), 82 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index 0af19c6bda..5d77353c51 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -9,7 +9,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 02/23/2018 +ms.date: 03/5/2018 --- # Multifactor Unlock @@ -73,18 +73,187 @@ For example, if you include the PIN and fingerprint credential providers in both ## Configure Signal Rules for the Trusted Signal Credential Provider -The **Signal rules for device unlock** setting contains the rules the Trusted Signal credential provider uses to satisfy unlocking the device. +The **Signal rules for device unlock** setting contains the rules the Trusted Signal credential provider uses to satisfy unlocking the device. + +### Rule element +You represent signal rules in XML. Each signal rule has an starting and ending **rule** element that contains the **schemaVersion** attribute and value. The current supported scheam version is 1.0. + +|Attribute|Value| +|---------|-----| +|schemaVersion| "1.0"| + +**Example**
+``` + + +``` + +### Signal element +Each rule element has a **signal** element. All signal elements have a **type** element and value. Windows 10, version 1709 supports the **ipConfig** and **bluetooth** type values.
+ +|Attribute|Value| +|---------|-----| +| type| "bluetooth" or "ipConfig" (Windows 10, version 1709)| + +#### Bluetooth +You define the bluetooth signal with additional attribute in the signal elment. The bluetooth configuration does not use any other elements. You can end the signal element with short ending tag "\/>". + +|Attribute|Value|Required| +|---------|-----|--------| +|type|"bluetooth"|yes| +|scenario|"Authentication"|yes| +|classOfDevice|"*number*"|no| +|rssiMin|"*number*"|no| +|rssiMaxDelta|"*number*"|no| +|sessionId|"*number*"|no| + +Example: +``` + + + +``` +The **classofDevice** attribute defaults Phones and uses the values from the following table + +|Description|Value| +|:-------------|:-------:| +|Miscellaneous|0| +|Computer|256| +|Phone|512| +|LAN/Network Access Point|768| +|Audio/Video|1024| +|Peripheral|1280| +|Imaging|1536| +|Wearable|1792| +|Toy|2048| +|Health|2304| +|Uncategorized|7936| + +The **rssiMin** attribute value signal indicates the strength needed for the device to be considered "in-range". The default value of **-10** enables a user to move about an average size office or cubicle without triggering Windows to lock the device. The **rssiMaxDelta** has a default value of **-10**, which instruct Windows 10 to lock the device once the signal strength weakens by more than measurement of 10. + +RSSI measurements are relative and lower as the bluetooth signals between the two paired devices reduces. Therefore a measurement of 0 is stronger than -10, which is stronger than -60, which is an indicator the devices are moving further apart from each other. + +>[!IMPORTANT] +>Microsoft recommends using the default values for this policy settings. Measurements are relative, based on the varying conditions of each environment. Therefore, the same values may produce different results. Test policy settings in each environment prior to broadly deploying the setting. + +#### IP Configuration +You define IP configuration signals using one or more ipConfiguration elements. Each element has a string value. IpConfiguraiton elements do not have attributes or nested elements. + +##### IPv4Prefix +The IPv4 network prefix represented in Internet standard dotted-decimal notation. A network prefix that uses the Classless Inter-Domain Routing (CIDR) notation is required as part of the network string. A network port must not be present in the network string. A **signal** element may only contain one **ipv4Prefix** element.
+**Example** +``` +192.168.100.0/24 +``` +##### IPv4Gateway +The IPv4 network gateway represented in Internet standard dotted-decimal notation. A network port or prefix must not be present in the network string. A **signal** element may only contain one **ipv4Gateway** element.
+**Example** +``` +192.168.100.10 +``` +##### IPv4DhcpServer +The IPv4 DHCP server represented in Internet standard dotted-decimal notation. A network port or prefix must not be present in the network string. A **signal** element may only contain one **ipv4DhcpServer** element.
+**Example** +``` +192.168.100.10 +``` +##### IPv4DnsServer +The IPv4 DNS server represented in Internet standard dotted-decimal notation. A network port or prefix must not be present in the network string.The **signal** element may contain one or more **ipv4DnsServer** elements.
+**Example:** +``` +192.168.100.10 +``` + +##### IPv6Prefix +The IPv6 network prefix represented in IPv6 network using Internet standard hexadecimal encoding. A network prefix in CIDR notation is required as part of the network string. A network port or scope ID must not be present in the network string. A **signal** element may only contain one **ipv6Prefix** element.
+**Example** +``` +21DA:D3::/48 +``` + +##### IPv6Gateway +The IPv6 network gateway represented in Internet standard hexadecimal encoding. An IPv6 scope ID may be present in the network string. A network port or prefix must not be present in the network string. A **signal** element may only contain one **ipv6Gateway** element.
+**Example** +``` +21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A%2 +``` + +##### IPv6DhcpServer +The IPv6 DNS server represented in Internet standard hexadecimal encoding. An IPv6 scope ID may be present in the network string. A network port or prefix must not be present in the network string. A **signal** element may only contain one **ipv6DhcpServer** element.
+**Example** +``` +21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A%2 +**Example syntax** +``` +21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A%2 +``` +##### dnsSuffix +The fully qualified domain name of your organizations internal dns suffix where any part of the fully qualified domain name in this setting exists in the computer's primary dns suffix. The **signal** element may contain one or more **dnsSuffix** elements. + +Windows 10, version 1703 includes two trusted signal types, which are bluetooth and IP configuration The default signal rules for the policy setting include the proximity of any paired bluetooth phone.
` ` + >[!IMPORTANT] > * PIN **must** be in at least one of the groups > * Trusted signals **must** be combined with another credential provider -> * You cannot use the same unlock factor to satisfy both categories. Therefore, if you include any credential provider in both categories, it means it can be used to satisfy either category, but not both. +> * You cannot use the same unlock factor to satisfy both categories. Therefore, if you include any credential provider in both categories, it means it can satisfy either category, but not both. -## Configuring Multifactor Unlock +### Sample Trusted Signal Congfigurations + +These examples are wrapped for readability. Once properly formatted, the entire XML contents must be a single line. + +#### Example 1 +This example configures an IPConfig signal type using Ipv4Prefix, Ipv4DnsServer, and DnsSuffix elements. +``` + + + 10.10.10.0/24 + 10.10.0.1 + 10.10.0.2 + corp.contoso.com + + +``` + + +#### Example 2 +This example configures an IpConfig signal type using a dnsSuffix element and a bluetooth signal for phones. This configuration is wrapped for reading. Once properly formatted, the entire XML contents must be a single line. +>[!NOTE] +>Separate each rule element using a comma. + +``` + + + corp.contoso.com + +, + + + +``` +#### Example 3 +This example configures the same as example 2 using compounding And elements. +``` + + + + corp.microsoft.com + + + + +``` + + +## Deploying Multifactor Unlock >[!IMPORTANT] >Once the you deploy multifactor unlock policies, users are not be able to unlock their devices if they do not have the required factors. The fall back options are to use passwords or smart cards (both of which could be disabled as needed). @@ -95,7 +264,7 @@ You need a Windows 10, version 1709 workstation to run the Group Policy Manageme Alternatively, you can create copy the .ADMX and .ADML files from a Windows 10, version 1703 to their respective language folder on a Windows Server or you can create a Group Policy Central Store and copy them their respective language folder. See [How to create and manage the Central Store for Group Policy Administrative Templates in Windows](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administrative-templates-in-windows) for more information. -#### Create the Multifactor Unlock Group Policy object +### Create the Multifactor Unlock Group Policy object The Group Policy object contains the policy settings needed to trigger Windows Hello for Business provisioning and to ensure Windows Hello for Business authentication certificates are automatically renewed. 1. Start the **Group Policy Management Console** (gpmc.msc) @@ -108,4 +277,8 @@ The Group Policy object contains the policy settings needed to trigger Windows H ![Group Policy Editor](images/multifactorUnlock/gpme.png) 8. In the content pane, double-click **Configure device unlock factors**. Click **Enable**. The **Options** section populates the policy setting with default values.
![Multifactor Policy Setting](images/multifactorUnlock/gp-setting.png) +9. Configure first and second unlock factors using the information in the [Configure Unlock Factors](#configuring-unlock-factors) section. +10. If using trusted signals, configure the trusted signals used by the unlock factor using the information in the [Configure Signal Rules for the Trusted Signal Credential Provider](#configure-signal-rules-for-the-trusted-signal-credential-provider) section. +11. Click **Ok** to close the **Group Policy Management Editor**. Use the **Group Policy Management Console** to deploy the newly created Group Policy object to your organization's computers. + diff --git a/windows/security/identity-protection/hello-for-business/hello-features.md b/windows/security/identity-protection/hello-for-business/hello-features.md index 5c6fcc07d2..1800c4b80f 100644 --- a/windows/security/identity-protection/hello-for-business/hello-features.md +++ b/windows/security/identity-protection/hello-for-business/hello-features.md @@ -10,7 +10,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 12/04/2017 +ms.date: 3/5/2018 --- # Windows Hello for Business Features @@ -20,7 +20,6 @@ Consider these additional features you can use after your organization deploys W * [Dynamic lock](#dynamic-lock) * [PIN reset](#pin-reset) * [Privileged credentials](#privileged-credentials) -* [Mulitfactor Unlock](#multifactor-unlock) ## Conditional access @@ -153,77 +152,4 @@ The privileged credentials scenario enables administrators to perform elevated, By design, Windows 10 does not enumerate all Windows Hello for Business users from within a user's session. Using the computer Group Policy setting, Allow enumeration of emulated smartd card for all users, you can configure a device to all this enumeration on selected devices. -With this setting, administrative users can sign-in to Windows 10, version 1709 using their non-privileged Windows Hello for Business credentials for normal workflow such as email, but can launch Microsoft Managment Consoles (MMCs), Remote Desktop Services clients, and other applications by selecting **Run as different user** or **Run as administrator**, selecting the privileged user account, and providing their PIN. Administrators can also take advantage of this feature with command line applications by using **runas.exe** combined with the **/smartcard** argument. This enables administrators to perform their day-to-day operations without needing to sign-in and out, or use fast user switching when alternativing between privileged and non-privileged workloads. - -## Multifactor Unlock - -**Requirements:** -* Windows Hello for Business deployment (Hybrid or On-premises) -* Hybird Azure AD joined (Hybrid deployments) -* Domain Joined (on-premises deployments) -* Windows 10, version 1709 -* Bluetooth, Bluetooth capable smartphone - optional - -Windows, today, natively only supports the use of a single credential (password, PIN, fingerprint, face, etc.) for unlocking a device. Therefore, if any of those credentials are compromised (shoulder surfed), an attacker could gain access to the system. - -Windows 10 offers Multifactor device unlock by extending Windows Hello with trusted signals, administrators can configure Windows 10 to request a combination of factors and trusted signals to unlock their devices. - -Which organizations can take advanage of Multifactor unlock? Those who: -* Have expressed that PINs alone do not meet their security needs. -* Want to prevent Information Workers from sharing credentials. -* Want their orgs to comply with regulatory two-factor authentication policy. -* Want to retain the familiar Windows logon UX and not settle for a custom solution. - ->[!IMPORTANT] ->Once the you deploy multifactor unlock policies, users are not be able to unlock their devices if they do not have the required factors. The fall back options are to use passwords or smart cards (both of which could be disabled as needed). - -You enable multifactor unlock using Group Policy. The **Configure device unlock factors** policy setting is located under **Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business**. - -The policy setting has three components: -* First unlock factor credential provider -* Second unlock factor credential provider -* Signal rules for device unlock - -### The Basics: How it works - -First unlock factor credential provider and Second unlock credential provider are repsonsible for the bulk of the configuration. Each of these components contains a globally unqiue identifier (GUID) that represents a different Windows credential provider. With the policy setting enabled, users unlock the device using at least one credenital provider from each category before Windows allows the user to proceed to their desktop. - -The credenital providers included in the default policy settings are: - -|Credential Provider| GUID| -|:------------------|:----:| -|PIN | \{D6886603-9D2F-4EB2-B667-1971041FA96B}| -|Fingerprint | \{BEC09223-B018-416D-A0AC-523971B639F5}| -|Facial Recognition | \{8AF662BF-65A0-4D0A-A540-A338A999D36F}| -|Trusted Signal | \{27FBDB57-B613-4AF2-9D7E-4FA7A66C21AD}| - -The default credential providers for the **First unlock factor credential provider** include: -* PIN -* Fingerprint -* Facial Recongition - -The default credential providers for the **Second unlock factor credential provider** include: -* Trusted Signal -* PIN - -The **Signal rules for device unlock** setting contains the rules the Trusted Signal credential provider uses to satisfy unlocking the device. - -The default signal rules for the policy setting include the proximity of any paired bluetooth smartphone. - -To successfully reach their desktop, the user must satisfy one credential provider from each category. The order in which the user satisfies each credential provider does not matter. Therefore, using the default policy setting a user can provide: -* PIN and Fingerprint -* PIN and Facial Recognition -* Fingerprint and PIN -* Facial Recognition and Trusted Signal (bluetooth paired smartphone) - ->[!IMPORTANT] -> * PIN **must** be in at least one of the groups -> * Trusted signals **must** be combined with another credential provider -> * You cannot use the same unlock factor to satisfy both categories. Therefore, if you include any credential provider in both categories, it means it can be used to satisfy either category, but not both. - - - - - - - +With this setting, administrative users can sign-in to Windows 10, version 1709 using their non-privileged Windows Hello for Business credentials for normal workflow such as email, but can launch Microsoft Managment Consoles (MMCs), Remote Desktop Services clients, and other applications by selecting **Run as different user** or **Run as administrator**, selecting the privileged user account, and providing their PIN. Administrators can also take advantage of this feature with command line applications by using **runas.exe** combined with the **/smartcard** argument. This enables administrators to perform their day-to-day operations without needing to sign-in and out, or use fast user switching when alternativing between privileged and non-privileged workloads. \ No newline at end of file diff --git a/windows/security/identity-protection/hello-for-business/toc.md b/windows/security/identity-protection/hello-for-business/toc.md index 81267549c1..86c01a544c 100644 --- a/windows/security/identity-protection/hello-for-business/toc.md +++ b/windows/security/identity-protection/hello-for-business/toc.md @@ -43,4 +43,5 @@ ##### [Configure or Deploy Multifactor Authentication Services](hello-cert-trust-deploy-mfa.md) #### [Configure Windows Hello for Business Policy settings](hello-cert-trust-policy-settings.md) -## [Windows Hello for Business Features](hello-features.md) \ No newline at end of file +## [Windows Hello for Business Features](hello-features.md) +### [Multifactor Unlock](feature-multifactor-unlock.md) \ No newline at end of file From ea50ef26fbf5cb58eec49de95411af495968733c Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Tue, 6 Mar 2018 06:47:22 -0800 Subject: [PATCH 008/138] fixes --- .../feature-multifactor-unlock.md | 41 ++++++++----------- 1 file changed, 17 insertions(+), 24 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index 5d77353c51..5d9d741fa1 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -76,13 +76,8 @@ For example, if you include the PIN and fingerprint credential providers in both The **Signal rules for device unlock** setting contains the rules the Trusted Signal credential provider uses to satisfy unlocking the device. ### Rule element -You represent signal rules in XML. Each signal rule has an starting and ending **rule** element that contains the **schemaVersion** attribute and value. The current supported scheam version is 1.0. - -|Attribute|Value| -|---------|-----| -|schemaVersion| "1.0"| - -**Example**
+You represent signal rules in XML. Each signal rule has an starting and ending **rule** element that contains the **schemaVersion** attribute and value. The current supported scheam version is 1.0.
+**Example** ``` @@ -105,7 +100,6 @@ You define the bluetooth signal with additional attribute in the signal elment. |classOfDevice|"*number*"|no| |rssiMin|"*number*"|no| |rssiMaxDelta|"*number*"|no| -|sessionId|"*number*"|no| Example: ``` @@ -155,13 +149,13 @@ The IPv4 network gateway represented in Internet standard dotted-decimal notatio The IPv4 DHCP server represented in Internet standard dotted-decimal notation. A network port or prefix must not be present in the network string. A **signal** element may only contain one **ipv4DhcpServer** element.
**Example** ``` -192.168.100.10 +192.168.100.10 ``` ##### IPv4DnsServer The IPv4 DNS server represented in Internet standard dotted-decimal notation. A network port or prefix must not be present in the network string.The **signal** element may contain one or more **ipv4DnsServer** elements.
**Example:** ``` -192.168.100.10 +192.168.100.10 ``` ##### IPv6Prefix @@ -187,24 +181,16 @@ The IPv6 DNS server represented in Internet standard hexadecimal encoding. An IP ##### IPv6DnsServer The IPv6 DNS server represented in Internet standard hexadecimal encoding. An IPv6 scope ID may be present in the network string. A network port or prefix must not be present in the network string. The **signal** element may contain one or more **ipv6DnsServer** elements.
-**Example syntax** +**Example** ``` 21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A%2 ``` ##### dnsSuffix -The fully qualified domain name of your organizations internal dns suffix where any part of the fully qualified domain name in this setting exists in the computer's primary dns suffix. The **signal** element may contain one or more **dnsSuffix** elements. - -Windows 10, version 1703 includes two trusted signal types, which are bluetooth and IP configuration - -The default signal rules for the policy setting include the proximity of any paired bluetooth phone.
-` ` - - - ->[!IMPORTANT] -> * PIN **must** be in at least one of the groups -> * Trusted signals **must** be combined with another credential provider -> * You cannot use the same unlock factor to satisfy both categories. Therefore, if you include any credential provider in both categories, it means it can satisfy either category, but not both. +The fully qualified domain name of your organizations internal dns suffix where any part of the fully qualified domain name in this setting exists in the computer's primary dns suffix. The **signal** element may contain one or more **dnsSuffix** elements.
+**Example** +``` +corp.contoso.com +``` ### Sample Trusted Signal Congfigurations @@ -264,9 +250,16 @@ You need a Windows 10, version 1709 workstation to run the Group Policy Manageme Alternatively, you can create copy the .ADMX and .ADML files from a Windows 10, version 1703 to their respective language folder on a Windows Server or you can create a Group Policy Central Store and copy them their respective language folder. See [How to create and manage the Central Store for Group Policy Administrative Templates in Windows](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administrative-templates-in-windows) for more information. + ### Create the Multifactor Unlock Group Policy object The Group Policy object contains the policy settings needed to trigger Windows Hello for Business provisioning and to ensure Windows Hello for Business authentication certificates are automatically renewed. + +>[!IMPORTANT] +> * PIN **must** be in at least one of the groups +> * Trusted signals **must** be combined with another credential provider +> * You cannot use the same unlock factor to satisfy both categories. Therefore, if you include any credential provider in both categories, it means it can satisfy either category, but not both. + 1. Start the **Group Policy Management Console** (gpmc.msc) 2. Expand the domain and select the **Group Policy Object** node in the navigation pane. 3. Right-click **Group Policy object** and select **New**. From c2cf6f93fcd60598c5573965eeb6e834b0307f68 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 12:20:14 -0800 Subject: [PATCH 009/138] initial import of unified steps to WA topic --- .../update/windows-analytics-get-started.md | 209 ++++++++++++++++++ 1 file changed, 209 insertions(+) create mode 100644 windows/deployment/update/windows-analytics-get-started.md diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md new file mode 100644 index 0000000000..c1a00cf528 --- /dev/null +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -0,0 +1,209 @@ +--- +title: Get started with Windows Analytics (Windows 10) +description: Configure Windows Analytics in OMS to enable use of Update Compliance, Upgrade Readiness, and Device Health. +keywords: windows analytics, oms, operations management suite, prerequisites, requirements, updates, upgrades, log analytics, health +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: jaimeo +ms.author: jaimeo +ms.date: 03/06/2018 +--- + +# Get started with Windows Analytics + +The three Windows Analytics solutions (Update Compliance, Upgrade Readiness, and Device Health) have common prerequisites and configuration steps. + +>[!NOTE] The steps in this topic are common to all of the Windwos Analytics solutions, but each of the individual solutions might require a few further steps to fully configure. Consult the topics for each solution you intend to use in addition to this topic. + +## Prerequisites +[DO WE HAVE WA PREREQUISITES TO LIST HERE?] + +## Deploy your Commercial ID to your Windows 10 devices and enable data sharing + +In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. You can use either Group Policy or Mobile Device Management (MDM) to deploy your Commercial ID. + +### Copy your commercial ID key + +Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. + + + +1. On the **Settings** dashboard, navigate to the **Windows telemetry** panel. + + ![Operations Management Suite dialog showing settings icon (a gear) in the title bar indicated by a red box.](../images/upgrade-analytics-settings.png) + +2. On the **Connected Sources** tab, navigate to the Windows telemetry panel. + + >**Important**
Regenerate a commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. + + + +### Enable data sharing + +To enable data sharing, configure your proxy sever to whitelist the following endpoints. You might need to get approval from your security group to do this. + +| **Endpoint** | **Function** | +|---------------------------------------------------------|-----------| +| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. +| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 +| `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. +| `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | +| `https://v10.events.data.microsoft.com` | New telemetry endpoint for Windows 10, version 1803| +| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | +| `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | + +>[!IMPORTANT] +> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for these endpoints. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See the **Excluding endpoints** section for options. + +>[!NOTE] The compatibility update runs under the device's system account. + +#### Excluding endpoints +[ADD FROM MATT'S MAIL] + +### Test data sharing +Devices must be able to reach the endpoints specified in the "Enable data sharing" section of this topic, so it's worth taking some time now to verify that they are reachable. + +Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. + +Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). + +To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: + +```powershell + +$endPoints = @( + 'v10.vortex-win.data.microsoft.com' + 'vortex-win.data.microsoft.com' + 'settings-win.data.microsoft.com' + 'adl.windows.com' + 'watson.telemetry.microsoft.com' + 'oca.telemetry.microsoft.com' + 'v10.events.data.microsoft.com' + ) + +$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded + +``` + +If this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. + +To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: + +```powershell + +[scriptblock]$accessTest = { + $endPoints = @( + 'v10.vortex-win.data.microsoft.com' + 'vortex-win.data.microsoft.com' + 'settings-win.data.microsoft.com' + 'adl.windows.com' + 'watson.telemetry.microsoft.com' + 'oca.telemetry.microsoft.com' + 'v10.events.data.microsoft.com' + ) + + $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded +} + +$scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" +$outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" +$accessTest.ToString() > $scriptFullPath +$null > $outputFileFullPath +$taskAction = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument "-ExecutionPolicy Bypass -Command `"&{$scriptFullPath > $outputFileFullPath}`"" +$taskTrigger = New-ScheduledTaskTrigger -Once -At (Get-Date).Addseconds(10) +$task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftTelemetryAccessTest' -Trigger $taskTrigger -Action $taskAction -Force +Start-Sleep -Seconds 120 +Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false +Get-Content $outputFileFullPath + +``` + +As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. + + +## Deploy the compatibility update and related updates + +The compatibility update scans your devices and enables application usage tracking. If you don’t already have these updates installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager. + +| **Operating System** | **Updates** | +|----------------------|-----------------------------------------------------------------------------| +| Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](upgrade-readiness-requirements.md) for more information. | +| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
**NOTE:** KB2976978 must be installed before you can download and install KB3150513. | +| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this update, see
**NOTE:** KB2952664 must be installed before you can download and install KB3150513. | + +>[!IMPORTANT] Restart computers after you install the compatibility updates for the first time. + +If you are planning to enable IE Site Discovery in Upgrade Readiness, you will need to install a few additional updates. + +| **Site discovery** | **Update** | +|----------------------|-----------------------------------------------------------------------------| +| [Review site discovery](upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this update, see

Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | + +## Enroll a few pilot devices + +You can use the Upgrade Readiness deployment script to automate and verify your deployment. We always recommend manually running this script on a few representative devices to verify things are properly configured and the device can connect to the diagnostic data endpoints. Make sure to run the pilot version of the script, which will provide extra diagnostics. + +See the [Upgrade Readiness deployment script](./upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script to, which will enable the script properly check for telemetry endpoint connectivity. + +After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in the Upgrade Readiness solution. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. + +## Deploy additional optional settings + +Certain of the Windows Analytics features have additional settings you can use. + +- **Update Compliance** is only compatible with Windows 10 desktop devices (workstations and laptops). To use the Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a partner antivirus application), and must have enabled cloud-delivered protection, as described in [Utilize Microsoft cloud-delivered protection in Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). See the [Troubleshoot Windows Defender Antivirus reporting in Update Compliance](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/troubleshoot-reporting) topic for help with ensuring that the configuration is correct. + +- For endpoints running Windows 10, version 1607 or earlier, Windows diagnostic data must also be set to Enhanced (see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization#enhanced-level)) in order to be compatible with Windows Defender Antivirus. See the [Windows Defender Antivirus in Windows 10 and Windows Server 2016](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) for more information about enabling, configuring, and validating Windows Defender AV. + +- **Device Health** is only compatible with Windows 10 desktop devices (workstations and laptops) and Windows Server 2016. The solution requires that at least the Enhanced level of diagnostic data is enabled on all devices that are intended to be displayed in the solution. In Windows 10, version 1709, a new policy was added to "limit enhanced telemetry to the minimum required by Windows Analytics". To learn more about Windows diagnostic data, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). + +- **IE site discovery** is an optional feature of Upgrade Readiness that provides an inventory of websites that are accessed by client devices using Internet Explorer on Windows 7, Windows 8.1, and Windows 10. To enable IE site discovery, make sure the required updates are installed (per previous section) and enable IE site discovery in the deployment script batch file. + +## Deploying Windows Analytics at scale + +When you have completed a pilot deployment, you are ready to automate data collection and distribute the deployment script to the remaining devices in your organization. + +### Automate data collection + +To ensure that user computers are receiving the most up-to-date data from Microsoft, we recommend that you establish the following data sharing and analysis processes: + +- Enable automatic updates for the compatibility update and related updates. These updates include the latest application and driver issue information as we discover it during testing. +- Schedule the Upgrade Readiness deployment script to automatically run monthly so that you don’t have to manually initiate an inventory scan each time the compatibility updates are refreshed. Make sure to run the production version of the script, which is lighter weight and non-interactive. The script also has a number of built-in error checks, so you can monitor the results. If you can't run the deployment script at scale, another option is to configure things centrally via Group Policy or Mobile Device Management (MDM). Although we recommend using the deployment script, both options are discussed in the sections below. + +When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the changes is created when the update package is installed. For Windows 10 devices, this task is already included in the operating system. A full scan averages about 2 MB, but the scans for changes are very small. The scheduled task is named "Windows Compatibility Appraiser" and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Changes are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. + +### Distribute the deployment script at scale + +Use a software distribution system such as System Center Configuration Manager to distribute the Upgrade Readiness deployment script at scale. For more information, see [New version of the Upgrade Analytics Deployment Script available](https://blogs.technet.microsoft.com/upgradeanalytics/2016/09/20/new-version-of-the-upgrade-analytics-deployment-script-available/) on the Upgrade Readiness blog. For information on how to deploy PowerShell scripts by using Windows Intune, see [Manage PowerShell scripts in Intune for Windows 10 devices](https://docs.microsoft.com/intune/intune-management-extension). + +### Distributing policies at scale +There are a number of policies that can be centrally managed to control Windows Analytics device configuration. These policies are under Microsoft\Windows\DataCollection: + +| Policy | Value | +|-----------------------|------------------| +| CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. | +| AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level. For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | +| LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).| +| CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8 | + + +You can set these values by using Group Policy (in Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds) or by using Mobile Device Management (in Provider/ProviderID/CommercialID). For more information about deployment using MDM, see the [DMClient CSP](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp) topic in MDM documentation. + +There are corresponding registry values that available in **HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection**; these by the deployment script. If a given setting is configured by both registry settings and policy, the policy values will override. The **IEDataOptIn** setting is an exception--you can only set this in the registry: + +- IEOptInLevel = 0 Internet Explorer data collection is disabled +- IEOptInLevel = 1 Data collection is enabled for sites in the Local intranet + Trusted sites + Machine local zones +- IEOptInLevel = 2 Data collection is enabled for sites in the Internet + Restricted sites zones +- IEOptInLevel = 3 Data collection is enabled for all sites + +For more information about Internet Explorer Security Zones, see [About URL Security Zones](https://docs.microsoft.com/previous-versions/windows/internet-explorer/ie-developer/platform-apis/ms537183(v=vs.85)). + +### Distribution at scale without using the deployment script + +We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. To accelerate this, you can force devices to send the initial data by using the following commands. For more information about how to check for error conditions, refer to the code in the deployment script in this topic. Note: these commands need to be run from a system context (an elevated user context won't work): + +- `CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun ent` +- (On Windows 10 devices) `windir\system32\devicecensus.exe` +- (On devices running systems older then Windows 10) `CompatTelRunner.exe -m:generaltel.dll -f:DoCensusRun` \ No newline at end of file From cf06fb7e83633b850041e52a17878eb25aac9764 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 13:29:08 -0800 Subject: [PATCH 010/138] added proxy stuff from Matt; fixed Notes --- windows/deployment/TOC.md | 2 +- .../update/windows-analytics-get-started.md | 19 +++++++++++++------ 2 files changed, 14 insertions(+), 7 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index df889e6bbf..b6e6fdd229 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -229,7 +229,7 @@ #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md) ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) -## Windows Analytics +## [Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) #### [Upgrade Readiness requirements](upgrade/upgrade-readiness-requirements.md) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index c1a00cf528..9b01fe0cf8 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -15,7 +15,8 @@ ms.date: 03/06/2018 The three Windows Analytics solutions (Update Compliance, Upgrade Readiness, and Device Health) have common prerequisites and configuration steps. ->[!NOTE] The steps in this topic are common to all of the Windwos Analytics solutions, but each of the individual solutions might require a few further steps to fully configure. Consult the topics for each solution you intend to use in addition to this topic. +>[!NOTE] +>The steps in this topic are common to all of the Windwos Analytics solutions, but each of the individual solutions might require a few further steps to fully configure. Consult the topics for each solution you intend to use in addition to this topic. ## Prerequisites [DO WE HAVE WA PREREQUISITES TO LIST HERE?] @@ -55,12 +56,17 @@ To enable data sharing, configure your proxy sever to whitelist the following en | `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | >[!IMPORTANT] -> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for these endpoints. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See the **Excluding endpoints** section for options. +> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for these endpoints. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See the **Configuring endpoint access with proxy servers** section for options. ->[!NOTE] The compatibility update runs under the device's system account. +>[!NOTE] +>The compatibility update runs under the device's system account. -#### Excluding endpoints -[ADD FROM MATT'S MAIL] +#### Configuring endpoint access with proxy servers +If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: + +- **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. This is the most comprehensive solution and it works for all versions of Windows 10. +- **User proxy authentication:** Alternatively, you can configure devices on the user side. First, update the devices to Windows 10, version 1703 or later. Then, ensure that users of the devices have proxy permission to reach the diagnostic data endpoints. This requires that the devices have console users with proxy permissions, so you couldn't use this method with headless devices. +- **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints. ### Test data sharing Devices must be able to reach the endpoints specified in the "Enable data sharing" section of this topic, so it's worth taking some time now to verify that they are reachable. @@ -133,7 +139,8 @@ The compatibility update scans your devices and enables application usage tracki | Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
**NOTE:** KB2976978 must be installed before you can download and install KB3150513. | | Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this update, see
**NOTE:** KB2952664 must be installed before you can download and install KB3150513. | ->[!IMPORTANT] Restart computers after you install the compatibility updates for the first time. +>[!IMPORTANT] +>Restart computers after you install the compatibility updates for the first time. If you are planning to enable IE Site Discovery in Upgrade Readiness, you will need to install a few additional updates. From 224ce57eff2c4764d0f1ca5f509e7d681b991fc5 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 13:46:15 -0800 Subject: [PATCH 011/138] fixing cross-topic links --- windows/deployment/update/windows-analytics-get-started.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 9b01fe0cf8..8d8825e432 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -135,7 +135,7 @@ The compatibility update scans your devices and enables application usage tracki | **Operating System** | **Updates** | |----------------------|-----------------------------------------------------------------------------| -| Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](upgrade-readiness-requirements.md) for more information. | +| Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](../upgrade/upgrade-readiness-requirements.md) for more information. | | Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this KB, see
**NOTE:** KB2976978 must be installed before you can download and install KB3150513. | | Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
For more information about this update, see

[KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
Provides updated configuration and definitions for compatibility diagnostics performed on the system.
For more information about this update, see
**NOTE:** KB2952664 must be installed before you can download and install KB3150513. | @@ -146,13 +146,13 @@ If you are planning to enable IE Site Discovery in Upgrade Readiness, you will n | **Site discovery** | **Update** | |----------------------|-----------------------------------------------------------------------------| -| [Review site discovery](upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this update, see

Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | +| [Review site discovery](../upgrade/upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this update, see

Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | ## Enroll a few pilot devices You can use the Upgrade Readiness deployment script to automate and verify your deployment. We always recommend manually running this script on a few representative devices to verify things are properly configured and the device can connect to the diagnostic data endpoints. Make sure to run the pilot version of the script, which will provide extra diagnostics. -See the [Upgrade Readiness deployment script](./upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script to, which will enable the script properly check for telemetry endpoint connectivity. +See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script to, which will enable the script properly check for telemetry endpoint connectivity. After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in the Upgrade Readiness solution. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. From ddca18cd69aac8ec1843960862f559a67ef1d8a7 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 14:21:54 -0800 Subject: [PATCH 012/138] initial outline of FAQ; comment test --- .../windows-analytics-FAQ-troubleshooting.md | 94 +++++++++++++++++++ 1 file changed, 94 insertions(+) create mode 100644 windows/deployment/update/windows-analytics-FAQ-troubleshooting.md diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md new file mode 100644 index 0000000000..e5ef5b216b --- /dev/null +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -0,0 +1,94 @@ +--- +title: Frequently asked questions and troubleshooting Windows Analytics +description: Frequently asked questions about Windows Analytics and steps to take when things go wrong +keywords: windows analytics, oms, operations management suite, prerequisites, requirements, updates, upgrades, log analytics, health, FAQ, problems, troubleshooting, error +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: jaimeo +ms.author: jaimeo +ms.date: 03/07/2018 +--- + +# Frequently asked questions and troubleshooting Windows Analytics + +## Troubleshooting common problems + +### Devices Not Showing Up + +In Log Analytics, go to the settings/connected sources/windows telemetry and verify that you are subscribed to the Windows Analytics solutions you intend to use. + +Even though devices can take a 2-3 days after enrolled to show up due to latency in the system, you can now check out the status of your devices with a few hours of running the deployment script as described in https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/. If you see an error message in the report saying "Sorry! We’re not recognizing your Commercial Id.", try unsubscribing and then re-subscribing to Upgrade Readiness from the OMS settings/connected sources/windows telemetry page. + +If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). Some additional notes to fold in: + • In the collected logs, the file name with a GUID has clear text that can be read to uncover common issues, so it's worth looking through this for "self-help" before opening a support ticket. + • Troubleshooting network proxy issues is one of the trickiest things to pin down since it's a common trap that can't be determined purely from the device. See https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/. + + + +### Upgrade Readiness reports outdated updates +Currently, updates are not auto-updated by Microsoft Update; so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, they might not be running the latest version. + + +### Upgrade Readiness reports incomplete inventory +Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, make sure to schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. + + +### Device Health Data Not Showing Up +Check for disabled Windows Error Reporting (WER) +If WER is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. +Check these Registry settings in HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting: + • Verify that the value "Disabled" (REG_DWORD), if set, is 0. + • Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. + • Verify that the value "CorporateWERServer" (REG_SZ) is not configured. +If you need further information on Windows Error Reporting (WER) settings, see WER Settings. +Endpoint connectivity +Devices must be able to reach the endpoints specified in the device configuration topic. +Note +If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must exclude authentication for the endpoints listed in Step 3 of the "Device Health prerequisites" section of this topic. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. (for more information, see Configure Windows diagnostic data in your organization. +If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. +Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). +To test access as a given user, you can run this Windows PowerShell cmdlet while logged on as that user: +PowerShell Copy + +$endPoints = @( + 'watson.telemetry.microsoft.com' + 'oca.telemetry.microsoft.com' + ) +$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded +If this is successful, TcpTestSucceeded should return True for each of the endpoints. +To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: +PowerShell Copy + +[scriptblock]$accessTest = { + $endPoints = @( + 'watson.telemetry.microsoft.com' + 'oca.telemetry.microsoft.com' + ) +$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded +} +$scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" +$outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" +$accessTest.ToString() > $scriptFullPath +$null > $outputFileFullPath +$taskAction = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument "-ExecutionPolicy Bypass -Command `"&{$scriptFullPath > $outputFileFullPath}`"" +$taskTrigger = New-ScheduledTaskTrigger -Once -At (Get-Date).Addseconds(10) +$task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftTelemetryAccessTest' -Trigger $taskTrigger -Action $taskAction -Force +Start-Sleep -Seconds 120 +Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false +Get-Content $outputFileFullPath +As in the other example, if this is successful, TcpTestSucceeded should return True for each of the endpoints + + +### Upgrade Readiness doesn't show app inventory data on some devices +Note: Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target OS version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). + + +### Upgrade Readiness doesn't show IE site discovery data from some devices +Please double check that IE site discovery opt-in has been configured in the deployment script. +Also, on Windows 10 devices remember that IE site discovery requires enhanced telemetry. +Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target OS version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). + +[comment]: # (Device names are not showing up properly? Starting with Windows 10 1803, the device name is no longer collected by default and requires a separate opt-in by setting HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection\AllowDeviceNameInTelemetry:DWORD == 1. This is done by default if you run the latest version of the deployment script, or can be set via policy. If the policy is not set, then the device name will show up as "Unknown (aka.ms/analyticsDeviceName)") + From bb6bc29cc270b3a481b09ec53d6fda4d80dbb3ac Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 7 Mar 2018 14:55:49 -0800 Subject: [PATCH 013/138] most bits added into new FAQ topic --- .../windows-analytics-FAQ-troubleshooting.md | 102 +++++++++++++----- 1 file changed, 75 insertions(+), 27 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index e5ef5b216b..c9fca691c7 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -19,7 +19,7 @@ ms.date: 03/07/2018 In Log Analytics, go to the settings/connected sources/windows telemetry and verify that you are subscribed to the Windows Analytics solutions you intend to use. -Even though devices can take a 2-3 days after enrolled to show up due to latency in the system, you can now check out the status of your devices with a few hours of running the deployment script as described in https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/. If you see an error message in the report saying "Sorry! We’re not recognizing your Commercial Id.", try unsubscribing and then re-subscribing to Upgrade Readiness from the OMS settings/connected sources/windows telemetry page. +Even though devices can take a 2-3 days after enrolled to show up due to latency in the system, you can now check out the status of your devices with a few hours of running the deployment script as described in https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/. If you see an error message in the report saying "Sorry! We’re not recognizing your Commercial Id.", try unsubscribing and then re-subscribing to Upgrade Readiness from the OMS settings/connected sources/windows telemetry page. If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). Some additional notes to fold in: • In the collected logs, the file name with a GUID has clear text that can be read to uncover common issues, so it's worth looking through this for "self-help" before opening a support ticket. @@ -28,46 +28,72 @@ If devices are not showing up as expected, find a representative device and reru ### Upgrade Readiness reports outdated updates -Currently, updates are not auto-updated by Microsoft Update; so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, they might not be running the latest version. +Currently, updates are not automatically updated by Microsoft Update, so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, *they might not be running the latest version*. ### Upgrade Readiness reports incomplete inventory -Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, make sure to schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. +Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. -### Device Health Data Not Showing Up -Check for disabled Windows Error Reporting (WER) -If WER is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. -Check these Registry settings in HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting: - • Verify that the value "Disabled" (REG_DWORD), if set, is 0. - • Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. - • Verify that the value "CorporateWERServer" (REG_SZ) is not configured. +### Device Health data not appearing + +#### Is WER disabled? +If Windows Error Reporting (WER) is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. + +Check these r settings in **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting**: + +- Verify that the value "Disabled" (REG_DWORD), if set, is 0. +- Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. +- Verify that the value "CorporateWERServer" (REG_SZ) is not configured. + If you need further information on Windows Error Reporting (WER) settings, see WER Settings. -Endpoint connectivity -Devices must be able to reach the endpoints specified in the device configuration topic. -Note -If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must exclude authentication for the endpoints listed in Step 3 of the "Device Health prerequisites" section of this topic. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. (for more information, see Configure Windows diagnostic data in your organization. -If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. -Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). -To test access as a given user, you can run this Windows PowerShell cmdlet while logged on as that user: -PowerShell Copy + +#### Endpoint connectivity + +Devices must be able to reach the endpoints specified in (windows-analytics-get-started.md). + +If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. + +Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). For suggested methods, see (windows-analytics-get-started.md#Configuring endpoint access with proxy servers) + +To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: + +```powershell $endPoints = @( + 'v10.vortex-win.data.microsoft.com' + 'vortex-win.data.microsoft.com' + 'settings-win.data.microsoft.com' + 'adl.windows.com' 'watson.telemetry.microsoft.com' 'oca.telemetry.microsoft.com' + 'v10.events.data.microsoft.com' ) + $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded -If this is successful, TcpTestSucceeded should return True for each of the endpoints. -To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: -PowerShell Copy + +``` + +If this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. + +To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: + +```powershell [scriptblock]$accessTest = { $endPoints = @( + 'v10.vortex-win.data.microsoft.com' + 'vortex-win.data.microsoft.com' + 'settings-win.data.microsoft.com' + 'adl.windows.com' 'watson.telemetry.microsoft.com' 'oca.telemetry.microsoft.com' + 'v10.events.data.microsoft.com' ) -$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded + + $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded } + $scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" $outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" $accessTest.ToString() > $scriptFullPath @@ -78,17 +104,39 @@ $task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftT Start-Sleep -Seconds 120 Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false Get-Content $outputFileFullPath -As in the other example, if this is successful, TcpTestSucceeded should return True for each of the endpoints + +``` + +As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. ### Upgrade Readiness doesn't show app inventory data on some devices -Note: Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target OS version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). +Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). ### Upgrade Readiness doesn't show IE site discovery data from some devices -Please double check that IE site discovery opt-in has been configured in the deployment script. -Also, on Windows 10 devices remember that IE site discovery requires enhanced telemetry. -Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target OS version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). +Double-check that IE site discovery opt-in has been configured in the deployment script. +Also, on Windows 10 devices remember that IE site discovery requires data diagnostics set to the Enhanced level. +Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). [comment]: # (Device names are not showing up properly? Starting with Windows 10 1803, the device name is no longer collected by default and requires a separate opt-in by setting HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection\AllowDeviceNameInTelemetry:DWORD == 1. This is done by default if you run the latest version of the deployment script, or can be set via policy. If the policy is not set, then the device name will show up as "Unknown (aka.ms/analyticsDeviceName)") +## Other common questions + +### What are the requirements and costs for Windows Analytics solutions? +[TBA] + +### How does Windows Analytics support privacy? + +Windows Analytics is fully committed to privacy, centering on these tenets: + +- **Transparency:** We fully document the Windows Analytics diagnostic events [LINK?] so you can review them with your company’s security and compliance teams. The Diagnostic Data Viewer lets you see diagnostic data sent from a given device (see [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) for details). +- **Control:** You ultimately control the level of diagnostic data you wish to share. In Windows 10 1709 we added a new policy to Limit enhanced diagnostic data to the minimum required by Windows Analytics +- **Security:** Your data is protected with strong security and encryption +- **Trust:** Windows Analytics supports the Microsoft Online Service Terms + +### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service? +No + +### Can I chose the data center location? +Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). \ No newline at end of file From 440d21726e03527c511c23c354f0fb81e800d855 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 8 Mar 2018 10:01:39 -0800 Subject: [PATCH 014/138] filled in more; added questions to reviewers in square brackets; addred requirements table; shifted solution order --- .../windows-analytics-FAQ-troubleshooting.md | 48 ++++++++++++------- .../upgrade/upgrade-readiness-get-started.md | 2 +- 2 files changed, 33 insertions(+), 17 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index c9fca691c7..a6c6ab8647 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -13,34 +13,31 @@ ms.date: 03/07/2018 # Frequently asked questions and troubleshooting Windows Analytics +This topic compiles the most common issues encountered with configuring and using Windows Analytics, as well as general questions. + ## Troubleshooting common problems -### Devices Not Showing Up +If you've followed the steps in the [Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. -In Log Analytics, go to the settings/connected sources/windows telemetry and verify that you are subscribed to the Windows Analytics solutions you intend to use. +Devices not showing up(#Devices not showing up) -Even though devices can take a 2-3 days after enrolled to show up due to latency in the system, you can now check out the status of your devices with a few hours of running the deployment script as described in https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/. If you see an error message in the report saying "Sorry! We’re not recognizing your Commercial Id.", try unsubscribing and then re-subscribing to Upgrade Readiness from the OMS settings/connected sources/windows telemetry page. +### Devices not showing up -If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). Some additional notes to fold in: - • In the collected logs, the file name with a GUID has clear text that can be read to uncover common issues, so it's worth looking through this for "self-help" before opening a support ticket. - • Troubleshooting network proxy issues is one of the trickiest things to pin down since it's a common trap that can't be determined purely from the device. See https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/. +In Log Analytics, go to **Settings > Connected sources > Windows telemetry** and verify that you are subscribed to the Windows Analytics solutions you intend to use. +Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog. + +If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). [MERGE WHAT EXACTLY FROM WHERE?] - -### Upgrade Readiness reports outdated updates -Currently, updates are not automatically updated by Microsoft Update, so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, *they might not be running the latest version*. - - -### Upgrade Readiness reports incomplete inventory -Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. - +- In the collected logs, the filename with a GUID has clear text that can be read to uncover common issues, so it's worth checking these logs prior to opening a support ticket. +- If you think the issue might be related a network proxy, check the endpoint connectivity[INTERNAL LINK]. Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. [WHY IS THAT BLOG POST LISTING DIFFERENT ENDPOINTS THAN WE ARE DOCUMENTING?] ### Device Health data not appearing #### Is WER disabled? If Windows Error Reporting (WER) is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. -Check these r settings in **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting**: +Check these registry settings in **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting**: - Verify that the value "Disabled" (REG_DWORD), if set, is 0. - Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. @@ -109,6 +106,16 @@ Get-Content $outputFileFullPath As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. +### Upgrade Readiness reports outdated updates +Currently, updates are not automatically updated by Microsoft Update, so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, *they might not be running the latest version*. + + +### Upgrade Readiness reports incomplete inventory +Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. + + + + ### Upgrade Readiness doesn't show app inventory data on some devices Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). @@ -124,7 +131,16 @@ Finally, Upgrade Readiness only collects IE site discovery data on devices that ## Other common questions ### What are the requirements and costs for Windows Analytics solutions? -[TBA] +| Windows Analytics solution| Windows license requirements | Windows version requirements | Diagnostic data requirements | +|----------------------|-----------------------------------|------------------------------|------------------------------| +| Upgrade Readiness | [??? EDITION?] | Windows 7 with Service Pack 1, Windows 8, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | +| Update Compliance | [??? EDITION?] | Windows 10 | Basic level in most cases; Enhanced level to support Windows Defender AV data if using [1607 pre-Oct-EXACTLY WHAT RELEASE IS THIS?]. | +| Device Health | [??? EDITION?] | E3 or [EXACTLY WHICH E LICENSES?] | Windows 10 | Enhanced level | + +>[!NOTE] +> Regarding licensing requirements for Device Health, you do not need per-seat licensing, but only enough licenses to cover your total device usage. For example, if you have 100 E3 licenses, you can monitor 100 devices with Device Health. + +Beyond the cost of Windows operating system licenses, there is no additional cost for using Windows Analytics. In Azure Log Analytics, Windows Analytics is "zero-rated;" this means it is excluded from data limits and costs regardless of the Azure Log Analytics pricing tier you have chosen. ### How does Windows Analytics support privacy? diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index 8691c8f111..f36c4018aa 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -112,7 +112,7 @@ IMPORTANT: Restart user computers after you install the compatibility update KBs If you are planning to enable IE Site Discovery, you will need to install a few additional KBs. -| **Site discovery** | **KB** | +| **Site discovery** | **Update** | |----------------------|-----------------------------------------------------------------------------| | [Review site discovery](upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
For more information about this KB, see

Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | From 832568758c590eb674a3bc71b79a99c13b401584 Mon Sep 17 00:00:00 2001 From: "Tim Mangan (MVP)" Date: Thu, 8 Mar 2018 14:51:18 -0500 Subject: [PATCH 015/138] Update Applies To --- .../app-v/appv-performance-guidance.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/application-management/app-v/appv-performance-guidance.md b/windows/application-management/app-v/appv-performance-guidance.md index a9ee4e4cc8..5fe043b48f 100644 --- a/windows/application-management/app-v/appv-performance-guidance.md +++ b/windows/application-management/app-v/appv-performance-guidance.md @@ -13,7 +13,10 @@ ms.date: 04/19/2017 # Performance Guidance for Application Virtualization **Applies to** -- Windows 10, version 1607 +- Windows 7 SP1 +- Windows 10 +- Server 2012 R2 +- Server 2016 Learn how to configure App-V for optimal performance, optimize virtual app packages, and provide a better user experience with RDS and VDI. From 7860d83fb61377c1b6bfc3bb43cc55f3cc94b835 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 8 Mar 2018 11:55:29 -0800 Subject: [PATCH 016/138] capability / feature rename --- ...ows-defender-advanced-threat-protection.md | 4 ++-- ...ows-defender-advanced-threat-protection.md | 18 ++++++++--------- ...ows-defender-advanced-threat-protection.md | 4 ++-- ...ows-defender-advanced-threat-protection.md | 8 ++++---- ...ows-defender-advanced-threat-protection.md | 20 +++++++++---------- ...ows-defender-advanced-threat-protection.md | 6 +++--- ...ows-defender-advanced-threat-protection.md | 4 ++-- 7 files changed, 32 insertions(+), 32 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/alerts-queue-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/alerts-queue-windows-defender-advanced-threat-protection.md index fea04741f7..489d6db5d4 100644 --- a/windows/security/threat-protection/windows-defender-atp/alerts-queue-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/alerts-queue-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: high -ms.date: 11/09/2017 +ms.date: 03/12/2018 --- # View and organize the Windows Defender Advanced Threat Protection Alerts queue @@ -135,7 +135,7 @@ Select multiple alerts (Ctrl or Shift select) and manage or edit alerts together ## Related topics - [View the Windows Defender Advanced Threat Protection Security operations dashboard](dashboard-windows-defender-advanced-threat-protection.md) -- [View the Windows Defender Advanced Threat Protection Security analytics dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md) +- [View the Windows Defender Advanced Threat Protection Secure score dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md) - [Investigate Windows Defender Advanced Threat Protection alerts](investigate-alerts-windows-defender-advanced-threat-protection.md) - [Investigate a file associated with a Windows Defender ATP alert](investigate-files-windows-defender-advanced-threat-protection.md) - [Investigate an IP address associated with a Windows Defender ATP alert](investigate-ip-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/enable-security-analytics-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/enable-security-analytics-windows-defender-advanced-threat-protection.md index 2ff55bdc25..fc7325015e 100644 --- a/windows/security/threat-protection/windows-defender-atp/enable-security-analytics-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/enable-security-analytics-windows-defender-advanced-threat-protection.md @@ -1,7 +1,7 @@ --- -title: Enable Security Analytics in Windows Defender ATP -description: Set the baselines for calculating the score of Windows Defender security controls on the Security Analytics dashboard. -keywords: enable security analytics, baseline, calculation, analytics, score, security analytics dashboard, dashboard +title: Enable Secure score security controls in Windows Defender ATP +description: Set the baselines for calculating the score of Windows Defender security controls on the Secure score dashboard. +keywords: secure score, baseline, calculation, score, secure score dashboard, dashboard, windows defender antivirus, av, exploit guard, application guard, smartscreen search.product: eADQiWindows 10XVcnh ms.prod: w10 ms.mktglfcycl: deploy @@ -10,10 +10,10 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: high -ms.date: 10/16/2017 +ms.date: 03/12/2018 --- -# Enable Security Analytics security controls +# Enable Secure score security controls **Applies to:** @@ -25,21 +25,21 @@ ms.date: 10/16/2017 -Set the baselines for calculating the score of Windows Defender security controls on the Security Analytics dashboard. If you use third-party solutions, consider excluding the corresponding controls from the calculations. +Set the baselines for calculating the score of Windows Defender security controls on the Secure score dashboard. If you use third-party solutions, consider excluding the corresponding controls from the calculations. >[!NOTE] >Changes might take up to a few hours to reflect on the dashboard. -1. In the navigation pane, select **Preferences setup** > **Security Analytics**. +1. In the navigation pane, select **Preferences setup** > **Secure score**. - ![Image of Security Analytics controls from Preferences setup menu](images/atp-enable-security-analytics.png) + ![Image of Secure score controls from Preferences setup menu](images/atp-enable-security-analytics.png) 2. Select the security control, then toggle the setting between **On** and **Off**. 3. Click **Save preferences**. ## Related topics -- [View the Security Analytics dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md) +- [View the Secure score dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md) - [Update general settings in Windows Defender ATP](general-settings-windows-defender-advanced-threat-protection.md) - [Turn on advanced features in Windows Defender ATP](advanced-features-windows-defender-advanced-threat-protection.md) - [Turn on the preview experience in Windows Defender ATP](preview-settings-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md index 4c24bf012f..b25f671461 100644 --- a/windows/security/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/machines-view-overview-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: high -ms.date: 10/23/2017 +ms.date: 03/12/2018 --- # View and organize the Windows Defender ATP Machines list @@ -80,7 +80,7 @@ Filter the list to view specific machines that are well configured or require at - **Well configured** - Machines have the Windows Defender security controls well configured. - **Requires attention** - Machines where improvements can be made to increase the overall security posture of your organization. -For more information, see [View the Security Analytics dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md). +For more information, see [View the Secure score dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md). **Malware category alerts**
Filter the list to view specific machines grouped together by the following malware categories: diff --git a/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index adef15a6bb..14d4fc1ac4 100644 --- a/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: DulceMV ms.localizationpriority: high -ms.date: 10/19/2017 +ms.date: 03/12/2018 --- # Windows Defender Advanced Threat Protection portal overview @@ -51,11 +51,11 @@ You can navigate through the portal using the menu options available in all sect Area | Description :---|:--- (1) Navigation pane | Use the navigation pane to move between the **Dashboards**, **Alerts queue**, **Machines list**, **Service health**, **Preferences setup**, and **Endpoint management**. -**Dashboards** | Enables you to view the Security operations or the Security analytics dashboard. -**Alerts queue** | Enables you to view separate queues of new, in progress, resolved alerts, alerts assigned to you, and suppression rules. +**Dashboards** | Allows you to access the Security operations or the Secure score dashboard. +**Alerts queue** | Allows you to view separate queues: new, in progress, resolved alerts, alerts assigned to you, and suppression rules. **Machines list** | Displays the list of machines that are onboarded to Windows Defender ATP, some information about them, and the corresponding number of alerts. **Service health** | Provides information on the current status of the Window Defender ATP service. You'll be able to verify that the service health is healthy or if there are current issues. -**Preferences setup** | Shows the settings you selected during onboarding and lets you update your industry preferences and retention policy period. You can also set other configuration settings such as email notifications, activate the preview experience, enable or turn off advanced features, SIEM integration, threat intel API, build Power BI reports, and set baselines for the Security analytics dashboard. +**Preferences setup** | Shows the settings you selected during onboarding and lets you update your industry preferences and retention policy period. You can also set other configuration settings such as email notifications, activate the preview experience, enable or turn off advanced features, SIEM integration, threat intel API, build Power BI reports, and set baselines for the Secure score dashboard. **Endpoint management** | Provides access to endpoints such as clients and servers. Allows you to download the onboarding configuration package for endpoints. It also provides access to endpoint offboarding. **Community center** | Access the Community center to learn, collaborate, and share experiences about the product. (2) Main portal| Main area where you will see the different views such as the Dashboards, Alerts queue, and Machines list. diff --git a/windows/security/threat-protection/windows-defender-atp/security-analytics-dashboard-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/security-analytics-dashboard-windows-defender-advanced-threat-protection.md index a7f177c650..6ea27c4f75 100644 --- a/windows/security/threat-protection/windows-defender-atp/security-analytics-dashboard-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/security-analytics-dashboard-windows-defender-advanced-threat-protection.md @@ -1,7 +1,7 @@ --- -title: View the Security Analytics dashboard in Windows Defender ATP -description: Use the Security Analytics dashboard to assess and improve the security state of your organization by analyzing various security control tiles. -keywords: security analytics, dashboard, security recommendations, security control state, security score, score improvement, organizational security score, security coverage, security control, improvement opportunities, edr, antivirus, av, os security updates +title: View the Secure score dashboard in Windows Defender ATP +description: Use the Secure score dashboard to assess and improve the security state of your organization by analyzing various security control tiles. +keywords: secure score, dashboard, security recommendations, security control state, security score, score improvement, organizational security score, security coverage, security control, improvement opportunities, edr, antivirus, av, os security updates search.product: eADQiWindows 10XVcnh ms.prod: w10 ms.mktglfcycl: deploy @@ -9,10 +9,10 @@ ms.sitesec: library ms.pagetype: security author: mjcaparas localizationpriority: high -ms.date: 11/17/2017 +ms.date: 03/12/2018 --- -# View the Windows Defender Advanced Threat Protection Security analytics dashboard +# View the Windows Defender Advanced Threat Protection Secure score dashboard **Applies to:** @@ -27,18 +27,18 @@ ms.date: 11/17/2017 >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-sadashboard-abovefoldlink) -The Security Analytics dashboard expands your visibility into the overall security posture of your organization. From this dashboard, you'll be able to quickly assess the security posture of your organization, see machines that require attention, as well as recommendations for actions to further reduce the attack surface in your organization - all in one place. From there you can take action based on the recommended configuration baselines. +The Secure score dashboard expands your visibility into the overall security posture of your organization. From this dashboard, you'll be able to quickly assess the security posture of your organization, see machines that require attention, as well as recommendations for actions to further reduce the attack surface in your organization - all in one place. From there you can take action based on the recommended configuration baselines. >[!IMPORTANT] > This feature is available for machines on Windows 10, version 1703 or later. -The **Security analytics dashboard** displays a snapshot of: +The **Secure score dashboard** displays a snapshot of: - Organizational security score - Security coverage - Improvement opportunities - Security score over time -![Security analytics dashboard](images/atp-dashboard-security-analytics-full.png) +![Secure score dashboard](images/atp-dashboard-security-analytics-full.png) ## Organizational security score The organization security score is reflective of the average score of all the Windows Defender security controls that are configured according to the recommended baseline. You can improve this score by taking the steps in configuring each of the security controls in the optimal settings. @@ -52,7 +52,7 @@ The denominator is reflective of the organizational score potential and calculat In the example image, the total points from the **Improvement opportunities** tile add up to 321 points for the six pillars from the **Security coverage** tile. -You can set the baselines for calculating the score of Windows Defender security controls on the Security Analytics dashboard through the **Preferences settings**. For more information, see [Enable Security Analytics security controls](enable-security-analytics-windows-defender-advanced-threat-protection.md). +You can set the baselines for calculating the score of Windows Defender security controls on the Secure score dashboard through the **Preferences settings**. For more information, see [Enable Secure score security controls](enable-security-analytics-windows-defender-advanced-threat-protection.md). ## Security coverage The security coverage tile shows a bar graph where each bar represents a Windows Defender security control. Each bar reflects the number of machines that are well configured and those that require **any kind of attention** for each security control. Hovering on top of the individual bars will show exact numbers for each category. Machines that are green are well configured, while machines that are orange require some level of attention. @@ -241,7 +241,7 @@ For more information, see [Windows Defender SmartScreen](../windows-defender-sma >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-sadashboard-belowfoldlink) ## Related topics -- [Enable Security Analytics security controls](enable-security-analytics-windows-defender-advanced-threat-protection.md) +- [Enable Secure score security controls](enable-security-analytics-windows-defender-advanced-threat-protection.md) - [View the Security operations dashboard](dashboard-windows-defender-advanced-threat-protection.md) - [View and organize the Windows Defender Advanced Threat Protection Alerts queue ](alerts-queue-windows-defender-advanced-threat-protection.md) - [Investigate Windows Defender Advanced Threat Protection alerts](investigate-alerts-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md index 75aed7ba70..9ec694fdde 100644 --- a/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: high -ms.date: 02/13/2018 +ms.date: 03/12/2018 --- # Use the Windows Defender Advanced Threat Protection portal @@ -31,7 +31,7 @@ You can use the Windows Defender ATP portal to carry out an end-to-end security Use the **Security operations** dashboard to gain insight on the various alerts on machines and users in your network. -Use the **Security analytics** dashboard to expand your visibility on the overall security posture of your organization. You'll see machines that require attention and recommendations that can help you reduce the attack surface in your organization. +Use the **Secure score** dashboard to expand your visibility on the overall security posture of your organization. You'll see machines that require attention and recommendations that can help you reduce the attack surface in your organization. ### In this section @@ -40,6 +40,6 @@ Topic | Description :---|:--- [Portal overview](portal-overview-windows-defender-advanced-threat-protection.md) | Understand the portal layout and area descriptions. [View the Windows Defender Advanced Threat Protection Security operations dashboard](dashboard-windows-defender-advanced-threat-protection.md) | The Windows Defender ATP **Security operations dashboard** provides a snapshot of your network. You can view aggregates of alerts, the overall status of the service of the endpoints on your network, investigate machines, files, and URLs, and see snapshots of threats seen on machines. -[View the Windows Defender Advanced Threat Protection Security analytics dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md) | The **Security Analytics dashboard** expands your visibility into the overall security posture of your organization. From this dashboard, you'll be able to quickly assess the security posture of your organization, see machines that require attention, as well as recommendations for actions to further reduce the attack surface in your organization - all in one place. +[View the Windows Defender Advanced Threat Protection Secure score dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md) | The **Secure score dashboard** expands your visibility into the overall security posture of your organization. From this dashboard, you'll be able to quickly assess the security posture of your organization, see machines that require attention, as well as recommendations for actions to further reduce the attack surface in your organization - all in one place. diff --git a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md index 42fe8383b5..a82528a68f 100644 --- a/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection.md @@ -1,7 +1,7 @@ --- title: Windows Defender Advanced Threat Protection - Windows Defender description: Windows Defender Advanced Threat Protection is an enterprise security service that helps detect and respond to possible cybersecurity threats related to advanced persistent threats. -keywords: introduction to Windows Defender Advanced Threat Protection, introduction to Windows Defender ATP, cybersecurity, advanced persistent threat, enterprise security, endpoint behavioral sensor, cloud security, analytics, threat intelligence +keywords: introduction to Windows Defender Advanced Threat Protection, introduction to Windows Defender ATP, cybersecurity, advanced persistent threat, enterprise security, endpoint behavioral sensor, cloud security, score, threat intelligence search.product: eADQiWindows 10XVcnh ms.prod: w10 ms.mktglfcycl: deploy @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: high -ms.date: 11/13/2017 +ms.date: 03/12/2018 --- # Windows Defender Advanced Threat Protection From 5980e1ed82a39eef75574b8b80e0e09e8dfc7b3f Mon Sep 17 00:00:00 2001 From: Raymond Comvalius Date: Thu, 8 Mar 2018 12:10:37 -0800 Subject: [PATCH 017/138] Added configuration of the settingsstoragepath --- .../configuration/ue-v/uev-getting-started.md | 35 +++++++++++++++---- 1 file changed, 29 insertions(+), 6 deletions(-) diff --git a/windows/configuration/ue-v/uev-getting-started.md b/windows/configuration/ue-v/uev-getting-started.md index ef86f5916c..5ec8571305 100644 --- a/windows/configuration/ue-v/uev-getting-started.md +++ b/windows/configuration/ue-v/uev-getting-started.md @@ -6,7 +6,7 @@ ms.pagetype: mdop, virtualization ms.mktglfcycl: deploy ms.sitesec: library ms.prod: w10 -ms.date: 04/19/2017 +ms.date: 03/08/2018 --- # Get Started with UE-V @@ -25,7 +25,7 @@ The standard installation of UE-V synchronizes the default Microsoft Windows and - [Step 2: Deploy the settings storage location](#step-2-deploy-the-settings-storage-location). Explains how to deploy a settings storage location. All UE-V deployments require a location to store settings packages that contain the synchronized setting values. -- [Step 3: Enable the UE-V service](#step-3-enable-the-ue-v-service-on-user-devices). Explains how to enable to UE-V service on user devices. To synchronize settings using UE-V, devices must have the UE-V service enabled and running. +- [Step 3: Enable and configure the UE-V service](#step-3-enable-the-ue-v-service-on-user-devices). Explains how to enable to UE-V service on user devices and configure the storage path. To synchronize settings using UE-V, devices must have the UE-V service enabled and running. - [Step 4: Test Your UE-V evaluation deployment](#step-4-test-your-ue-v-evaluation-deployment). Run a few tests on two computers with the UE-V service enabled to see how UE-V works and if it meets your organization’s needs. @@ -73,13 +73,34 @@ You’ll need to deploy a settings storage location, a standard network share wh 2. Set the registry key value to *1*. -## Step 3: Enable the UE-V service on user devices +## Step 3: Enable and configure the UE-V service on user devices For evaluation purposes, enable the service on at least two devices that belong to the same user in your test environment. The UE-V service is the client-side component that captures user-personalized application and Windows settings and saves them in settings packages. Settings packages are built, locally stored, and copied to the settings storage location. -Before enabling the UE-V service, you'll need to register the UE-V templates for first use. In a PowerShell window, type `register-TemplateName` where **TemplateName** is the name of the UE-V template you want to register, and press ENTER. +Before enabling the UE-V service, you'll need to register the UE-V templates for first use. In a PowerShell window, type `Register-UevTemplate [TemplateName]` where **TemplateName** is the name of the UE-V template you want to register, and press ENTER. For instance, to register all built-in UE-V templates, use the following PowerShell Command: +'Get-childItem c:\programdata\Microsoft\UEV\InboxTemplates\*.xml|% {Register-UevTemplate $_.Fullname}' + +A storage path must be configured on the client-side to tell where the personalized settings are stored. + +**To set the storage path for UE-V with Group Policy** + +1. Open the device’s **Group Policy Editor**. + +2. Navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft** **User Experience Virtualization**. + +3. Double click **Settings storage path**. + +4. Select **Enabled**, fill in the **Settings storage path**, and click **OK**. + + - Ensure that the storage path ends with **%username%** to ensure that eah user gets a unique folder. + +**To set the storage path for UE-V with PowerShell** + +1. In a PowerShell window, type **Set-uevConfiguration -SettingsStoragePath [StoragePath]** where **[StoragePath]** is the path to the location created in step 2 followed by **\%username%**. + + - Ensure that the storage path ends with **%username%** to ensure that eah user gets a unique folder. With Windows 10, version 1607 and later, the UE-V service is installed on user devices when the operating system is installed. Enable the service to start using UE-V. You can enable the service with the Group Policy editor or with Windows PowerShell. @@ -89,9 +110,11 @@ With Windows 10, version 1607 and later, the UE-V service is installed on user d 2. Navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft** **User Experience Virtualization**. -3. Run **Enable UEV**. +3. Double click **Use Users Experience Virtualization (UE-V)**. -4. Restart the device. +4. Select **Enabled** and click **OK**. + +5. Restart the device. **To enable the UE-V service with Windows PowerShell** From 777d6169e62c46f4320b05e0ad8a50c801ecfa30 Mon Sep 17 00:00:00 2001 From: "Tim Mangan (MVP)" Date: Thu, 8 Mar 2018 15:39:02 -0500 Subject: [PATCH 018/138] Update appv-running-locally-installed-applications-inside-a-virtual-environment.md --- ...talled-applications-inside-a-virtual-environment.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md b/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md index 4dd867d228..c404cdd892 100644 --- a/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md +++ b/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md @@ -6,14 +6,17 @@ ms.pagetype: mdop, appcompat, virtualization ms.mktglfcycl: deploy ms.sitesec: library ms.prod: w10 -ms.date: 04/19/2017 +ms.date: 03/08/2018 --- # Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications **Applies to** -- Windows 10, version 1607 +- Windows 7 SP1 +- Windows 10 +- Windows Server 2012 R2 +- Windows Server 2016 You can run a locally installed application in a virtual environment, alongside applications that have been virtualized by using Microsoft Application Virtualization (App-V). You might want to do this if you: @@ -42,6 +45,7 @@ There is no Group Policy setting available to manage this registry key, so you h Starting with App-V 5.0 SP3, when using RunVirtual, you can publish packages globally or to the user. + ### Steps to create the subkey 1. Using the information in the following table, create a new registry key using the name of the executable file, for example, **MyApp.exe**. @@ -79,7 +83,7 @@ Starting with App-V 5.0 SP3, when using RunVirtual, you can publish packages glo

  • If you want to include multiple packages in the virtual environment, you must include them in an enabled connection group.

  • Create only one subkey for one of the packages in the connection group. If, for example, you have one package that is published globally, and another package that is published to the user, you create a subkey for either of these packages, but not both. Although you create a subkey for only one of the packages, all of the packages in the connection group, plus the local application, will be available in the virtual environment.

  • The key under which you create the subkey must match the publishing method you used for the package.

    -

    For example, if you published the package to the user, you must create the subkey under HKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual.

    • +

    For example, if you published the package to the user, you must create the subkey under HKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual. Do not add a key for the same application under both hives.

    From 0001b9b26badd37b8405c4514c305060718a922a Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 8 Mar 2018 13:07:00 -0800 Subject: [PATCH 019/138] changed title; fixed screenshot; removed scripts; new intro with links; adjusted TOC; removed proxy whitelist warning text --- windows/deployment/TOC.md | 3 +- .../update/images/WA-device-enrollment.png | Bin 0 -> 43657 bytes .../update/windows-analytics-get-started.md | 116 ++++++------------ 3 files changed, 38 insertions(+), 81 deletions(-) create mode 100644 windows/deployment/update/images/WA-device-enrollment.png diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index b6e6fdd229..de56d4d613 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -229,7 +229,8 @@ #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md) ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) -## [Windows Analytics](update/windows-analytics-get-started.md) +## [Windows Analytics] +### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) #### [Upgrade Readiness requirements](upgrade/upgrade-readiness-requirements.md) diff --git a/windows/deployment/update/images/WA-device-enrollment.png b/windows/deployment/update/images/WA-device-enrollment.png new file mode 100644 index 0000000000000000000000000000000000000000..06408def682033d1de1d299c1092b62673d27a16 GIT binary patch literal 43657 zcmZU4byQnH6K|0g+9FNSqQ%|aTim6%OL2FX0>RxKTHM_&xVt;WJ-7$*((gO(`{TVm zCntON&fPn^BRlh(Bur6W0`&vlhc|EDph`)K{&@2SUgOOhIC*4v*vS0Pn^@QvoYM~p z;Ww2N1V^w7M6>U5-`~8ciTMaId<(mNZ!f9o^yUp(@4pY+pk1*sZ19V-n1-{movE{% zp`*zgdqWFbXGU8S=dbLH%#5romtQTC-n=P!loI`};;wg^_0}6-J-6!I>%PMcCw(S4 zBmdqOX9b+xrfn*}QZKjqt#^uf(9r%f8?3Fe)-eQHk7C2RGQMWy{Vuvis_~q*3D+;L za%K~mU!uf!9-SwCz3#+GK+zEXHK);c;h)~Y+J5qcHz{Pb4!z^{XlC%0rOp0m_MHFb zsm;J(7?jN5`?|cG;G0bEEVqTKg(cDx2QtDk@~-b=&{G)B9rFLr zHJH-g?0s1`3H=SRylN^U_I2uy_v3%;=<(}(oys8gt=et+WNZbhyYjzR6TBHYaia97 zy=g%w^1a-2`e0~aVBi~(rU0C*deuceSD;h(R=-Lq0t;>4`>{oIUx=JUfOTIs+!A~X z`Kyc06i!kYUIy!A1l#N<(`}pz89mGfZKML-2o;*`)*pr5x^7@6cJAhEUf(qAzj#gd zF+L)>2SUB=-TFJ|s?L1`Iv_Cx?R-tv*{TmQNa%BroPdP_znA6l7pJ}95U!%N`{8@l zmpOGea+LKtp^MJ5_ii~T4;%TTnh>#LfmL;X|Byyw{)amuGlc+ufB#1t6JNkV%BtUP#^pwwMy1uv2Fz@W8c$AAgCo&1T8q(Kqzt@=0Eq)T~mU9E{2|~uMBT@*VB4`KqN-a&q z(b|c;x6mJaU~YGZqs^R)_NN&WDyTinQygeatG7svVdNWw@A1*I0_vIz?{?+iQn9%8 zre_Jp$Ag_1$lm5XVR^eixucTkW)_mX{|I_TdB=&)#F=5#y>I)~AD3Y_QBKAW799+< zPQyY_-*f+TsJcw&nfJ&`RXen+yU`2ec^U_LIeFE6+ccPqty|tAQ24r)lI^=Yt^SG` z)^eh=Md(lAC!5oJA7KJ}-zAdk?go)w2X*`2E0gI>WT?H8^khd7-??7XjPlh*Ykb>X z;aawTsQnR$YZGg}?ojxMcy*ZJ`5s5F&aU{TTzf4U@=re{J->LpT>i5XbS$tUlEF z)rNYr6z_)iLc;1djPY!%FroFt}y+mvQ5QNB0 z5u@j1>cZ1s6#*OjC&@_L&z4FgUZ0l8{5+ms>vY}x8hkHP{xlIUg_O_#gm&_Mxc)o( z4H)HzjB;N-IYX801_C?XzeU@)el)Ao0zz*>?JuvU#10t0CPA;3;_qS1ka`{I>pv>9 zUxFLTz75ZCalJ4$dLM0O>m-J2UQPN1+)C(~n^ycnPSC~{YO+%LarvWK8tM*>26l$% ztsMhM9yqISYWzq~s<-FPnFbhrZqC|%gx;4w%)JP=`Qc=@VQO|9@MrA3Mj+g`Lx*Q# z5bQoih{%Tqpf)r(13qnSZnW}MUT>LYi>U4I{1U_IA@(qt_uE4igg|D0PY9%3G!cK_ zc%H$T*d)Sv8QR=v=WD#)I?(?ny&>eJ{cVhF($`U25bWQyiAWJ4)b=n~*L~fH+%3)c zdb3TeJP6+KbsrY;kEtT>VTzU7z~0(HKdWf>S{JY0l^}v%RQ6SdKyP213YcLHw4kE| zlzDyaS>GbN2i^CGSY4g3b@&|3KEnh&9A3|dK5?9hNGc0P3USQu`Li$Nw-;tdw~x<^C~Nm&O${|SK{385Yj589iUMUiZ=k)IY^pIn4iZ|| z+eHAt#≫;(R=ZhnvmPZP#5kR9fPNq!h4wKa6nihb*cAEt0eIJf`<`I_WU8JP);g z)O~*fRz2~h?m@b5+PuHh&K`+@n9LLM6jLa4Tor|GA?Z7PJnv_U%T}g16l-ZEWXgHZ2S;+iqJ&-+*p| zaB{6?-Zs7G@ul5HDebk#ofxWa;`J|`i7xjcIRfo;&lBUD?%16-N3m_ckf9y7Zdi$% z5@hFK^y#yR2|e%Kc~wvhqwaC#bys2Ivl@Shim&%-?p(UWYs1k!*4${)Ds~pS-qRXY zM0^HLo3^iv(ArDe)L6lF#FXw9F_SM*3*E#4{2rx;TM6at4x_Mw%A{L9?&K)digBDukW}AbYIU^ z{bWn^ueiP@Q6;xSme;pL?mO%N5!YI_R?F`DuRVW|^j%Wi#X{*ljy@7^cr`y(uInka zoOp>o+!ve^wJ|h5fSX}7z9!*s?zmCqE**eh2>(J`^KYndyqM{mgyTnY4 z(gf~@9MzsoLiU}+fUUboF)wtOKz0-ASN)N5blkkO#^b3>C%6UghDOVLiB-1&TY>mm z;OCoK}bD>fZ_ZDMG@j39iZ==A@#)uQNi6I7$Gm8srSkayLA9t-6B9T+dM;~?yh6*M-Vw~Oe^a?^aDIqMK$Nov$ zDeaJ31U_YG>Kf$22^@G{;=kEHF93O3jSv!W({?-;nG|ZeX;}9gI`ld0h)M3Of67Jx z{M8-9-Xhc#h|u@g*s{<0T>v)&zMR zMbMqU7uL50`04|p-bal$TOk|nZkI(=c60`B0D@ONjjOfqh`imF=K{?) zo5T~DK|b!w%U+ES3?6&4A)KNwf)zyckS$djKa?n~tJ4#7Tc+14)){NS2B-{V@w)>xHJ+b8=Lm$Bcs}O#q+WvE5--oxmxk&{I-ma5P zA+hmX(LxWLM&%OOTE6GqyJAJN=gakeM;Hq0b!P-W4ku>RIXBNzS`VF9I`nOX(W?Bk zT_;K0#_c*?^y4m<;+xzyTv%W35{A*~^}%U-f2t6Oz1Mv%xAgTo@4t;?Jx?;eJl|K= z>s(E2v_%&%@FqCiZ$!ut-OD<07T9>fG7=Qtf4n?lY9VUeo}cnuuRdPXp~pk9D7p8{1xHx<)qd zZ{IcHXL}hacWs-+Efae@RkXQfX+AAdfuWpW*J?^Wn54bc77sD1)}PP5O!~w|Y_8o; zjb>AxdfkJ012YS}O#9a*lBzm<~OHwGZ`s>tjB2L8CPwL(e`(yi{ial?``OE6C7UvLJ2Jfgx396A zl#0Ml$cXSQ1+WLdef>1VfQm_i2)ku#@f(>0cE?fX`X{OP`Ru%%4`eU1hZvR;{(BIl zTS?txqF*V|;JU!c3Fz?iL#&H?&j?)cNCfv-rX8%{+5xk=Ni?*fdus2EKqw zjfRqz3a8m<1Z_9sN*il9xn3SD(}Pmcp#w!))}M{GYqgf^g|}_dNlj5#h#OLiD2Bza zM$TWZTT^=X9D{mtW=dj(fV4c#PJ^Yl8S3TB{^_|MqaY+dBa~hockF&V!mMw>h-10M zu~)vCZU5yHdmpe>q>u2?wPLe#lI`hC5R~pYhm=#1R>DlBP9h9P$9LG3{hOZNU$$tr z`tWXDyQ!$bpj{aUj~+WhJnzxF)6H8D7g%YxKzNKxHGSm#Ic#iyvP}Of%*TsHmXVeE zbiHW@VnQPfTjZ|#pbo(IVR?n+bndQ0!VHH<2xn=Y?_%Pr$_!_s&kgW{WxR|l6W7e! zEPc50wCZj!+BI2Ex_GP2-A41q*Oz$Zx$>9IpHke9iLe-a9i^<}p(jz@>)E^y+f^IfMeo zl+!*(ryGA|gZ{d_ysWLQ?e6|g6m!7v1UEO_nshQLTLYq!dBWs zrYaMAH$zrCLNG?3118VB?_ZMI?s6=<6ibzR(j~gRNc!|bkL@bC9d4H5B50JYMGL&K z8>m@~HsL^_r&rA~aOS+)LuPp&exMTyIEd?FP;2w4;rXJA5ndkLqPvyUE9!jv zWHVsh-(1J<>}huS8{t`+ z|LP>=Z462hrS22w?@$p-Jb=+kvRG#B@7@rR+UF2)D@UWv zS94wbFdijh(CfFkzlV}Pe>KSx@A!Oyh_956pz5{5uB!g~-#CHOx+k`MvZ z)YOb>mU7xH#i{>dzYDxOToP5?O@I00a+|$qbDHty-OGCb5yVuezYgFTA-GA{Gl*Kb z;cgwj2n50wanD0qlAdmMDL;fVNQ z13o<7^kMMby)%j0kz&VlsYh?HdY*_E+!dB4@wz%(sPNTx?!KA)UoV z;WbYR_$&%cGdHIB&1!c1(8vHInnP3SE|vh&3-Uegg4r|~RCojB^F9^RGl#J%-p(Jt zcx|6Nc+0P`fXD@#$lNeD%grvMuXP;jKT|S7dY&Hg^a-VnoB8115@@+5LR(Q+IepviRaE|bqb8t@ zX-{O^tql7mEqM9ZsnP0X+GFsd2Ic28cZy?4i9Uy#?%dgU#pKVSkAx(_OG`(HEnXdkc1bQ;P=E`t;SC}~4{LLkxvh)TOzsYu~^}5<` zjC-b+##-_oDTA@n5q>PrW9x6J+%uhoq~^hW@*Vt%!h?;V@NH-{$auaRx$_(Q{ARV= zVAH1cx(^M>_1`DdZ@{I2$Xom-o3+*xSy_^(k6se619msXhzOu(Qz;FM&H2Sv<8-!Q zNIS**pA#5S5eWJ~`ECVCe1LL5-0|n6Eq_{HfO;6rE{3Au!!OjoE4UPH#^tr$5r33o z$a7%4#}@hLXj72>dqy|0|G#JZ_~h4~VTbrwvVVvT46|X_H~X~p@Fq**$A4m!E(kWv z|NIB~m4VIipO7IL4U+^G-JpyyWD#R*HO0kPqds24;(+}XQAzw{!;H88MP*?zh`p~0 zP)VjK=oLbm|GR)8%osFi*$r}{{1-QOb*=qfQv^6(lvY|lE&Fl7y$xnM&yN{7P-!Nh z@QocH34p`0NfqxO&#sUC6H`mW-JjWG_0a@4LSDR&>5G$V1V4TdYuxNh={7;0liPz{ zo9gt@k3P}??Y&oj(*VJNY?Rai<`dq9Uh75RnKBu|X-k4Hdmo_Hi}>L?a(E5PvT6t4 zzu<{@7!}J)a46jNWiFZo!bnF1+bHRLInNV(#t7Mh|;L zvNUCP8!29h?Lk)(P7sN2HD|Eob`$2UJ>{3JkP&Jp+OhZFvGMgJzm|Rx!5B>N@(?xg zvLL<;&v48B)EfL$*)HgTvrx66>JSA^`&#bl>ZBsO5XW)CcFf~c)Y^M`E+>VXs(c87 zvd!c>%99}D%e}Z=d^?Hpj{5a4h)W;C+G?#+7~8df%?fcm&(>uvs-+TQ5YA0sqJqO- zd$xaD{dK5+G2_dQ&_X?F6PNY6{(y#REU(Ns9adgt zztV!+HA84@qAO9b{lIxo%k|}w15afQDO1t@4FEc#wy~EEIS!3)W+OR}PmYgO`o4cD zLxmo~USD@H?$V$uj2)br%F;zjJ94!`Z5wx!v=?b)Z1DR}wS9AA5jw-}=jM_Fh=Sf& zZVXET+q7(aDMK5cKp{M%h1E5uCncVe8TvDlXaj=B98QB;et#A}23PQRJXNePB`O69 z-L>n1NaVCUU<4J@Q%>dAz-cM*{LTKZgt)2-cv8%H6ZP9&3W0ke;%r&)orCGBtTAgnzOFIixwb%9vQjztZD{I zX^8-oMB(SGVkrYQO?shwXW0fs)lE6eV7+Zm4R23=6``B^(%N719Rpmp7 znPdAl`rwFd#($NHQJ7ae`$2BAvp>m;=o==o<{3gUV^sn{9?R%(lX7dO|@~cwaIT>-*jX??<{x z*gYBP6O}Z%^_NlEBTgDgSwWv12HzCjEVVjmD!)C50b*htl07ugMgQbI;XJD(q8@#` zn2&jyF0Xr?&K4Z@UrVhHyZjTnZ z70S+21aZ1L3Y4*H#E|~<_@m#hyhtY0b`()et7YeU)AYT#bIAuOS0YU$VRXZ5uNK*) zn{UAx?SrRdAQ>xVF4~#hA;2(WB*$wtM>02Oqdtm-w_&THOR8P{y-RnuMT4<8pY4a) zj;&FrdMWu`t~M_u55C51!v0~JtTVeuth&qESPnD3OC1mwRCQ(GSbhog?Cs?w8|x>S z%p0kHJC+e8qKve$tT13d9cVOZ^js%`@Zs>5;SvHGc1-Mcm>Tw>(=)N&Xc#m#GG zVkiO1gN_Ebhsj#Y+y_sYwa$yrtTBBZ)prq>wqsVr*2DutgCjo{a;%C_6e?En6kI0J zL?3SJ@O#N-73|j3)+xf)t~@-bGI&{=O-9A!6$aVP&$IDT5|j#%(A8?gN-NtvN4R~i z@x8nXy#aqp%bjn6c1r;4*PBX*jfPu~jw6`qPqOxYQd|dVp`A-;ENvN(gQ<-N&WY%U z&hfnsg`#}-hh^aOOlcS>>KkRVwY@aFOXkEXb6umkp z8n>L_Gm#`dzs6u^p{*s%9qW7fE>|jHtEJU?d`e}q=>0VqfTL%XZHWU5a_t66>t1p_ zyS|x~>)Z1<`W(4?xPCkBLKoxKNwjDEIm5<3Ki7EoqOb{B94*>@=Z`#z#o|srP_pRS zk|FvvKhKVcWM{59_fVup#0-KaOHzSov9K^{<;hdj1g4Jq$RLLz6{FDp>FliJXY^m! zoNxH7DL~G4Qv- zhW6_Wn;)I+UXFmhDPj@1YrPH1n1XgkXE~0F;sDs=pcc901PWPn+l2cFc~H?fsR_hC zbjNbTgl-&5#vrHRLI$`3-h-3i45PO1{a*KML6LFs&HW1Puib5d>j8NrwpQqy#T&xNI5tci_l z^Z?@L^5yxLl9|^hos_z^Z*-TgrnT)Dyr30L(A&E&1bT9%Wh>sDVPY!dfUVV#neThS zUqLu}uZMwdDLxkq@;A+1?=gU=RoQ2RzcB_x`9Gh{h45V%47(3U3&1^q@0vgiZ=+1L ztopZlIr!U~FM0}0&V6rgdhLD(!<6at$8i^ETYTXl(l3rPd2wPnnZKRVY`5g^1`6gu z+M$24(wC}?D;Xe=AJ6P>|H9lK}f1lHK z6?M)_Xu-8hoyGFq->5EgwqDBWDAmjiewF+|HZ-sufz*=j{#9v~2h^zlaCPm0Che2? zRak_QkCiwTL@w@TM@zI0rP^?eE+F1CDUcH^sjQ4u@OyD{qibh;x{4X6$xbit?A+6T zXlO7R4WCkym{e(y$3}X}y7>;A|5Fq*=#0khTD6MFE~aRPNVL{KWmoFuyi~UjyC!{ABv2R%p=j*zl(HS&Q z&YiQnsN{L^Dv0lAY287>e2q^CGqe@?t50UWRq=iNtF9y3y5&1GIv+s!k%F;BDRk2?+`v_%dcz zjCP&HUx^VIs);D9zZx@m+nzyfm9<6f{3Ny2rTIqQvKzWWq7f_#3iyZSBM-Nle8_|R#hI)`l2~bA5hOzP~7Ujq%J5*KH^EI=-i&pCT~%ecVQ37 zUCNwW8tbSc24`a?N|;cPt9+{7_~l?kgDmdffNw~a;q4!>b-6G`e= zwf{prHHYQl4je%RA5F|(|EP1BDfO?k+2rUe3#{^M-o8aw8>4|3dSh-$qTY|(%XC4u zw>~G0(R{(6%7E_k|4SgWIfN*MiFfi~KIdQa4f-G6`u}H66O&(s<1~&P<$Ajwh>B)Q z7EcZ^d%7UZv`HgD%uNLE_RYp%6tG+x)n5nIwJodLz+K{NEFBvs=RRS;H(wSQ0Q>O` zCP|+Jti$z&T6hTljTrJJ0M9bZT#p#W%-S0mFv}$f z@xK3qfz=ST-VwO`mZFRkoT+RGgL-4j-iCkLCWCeGyC9_AFM*SjNaF0AO@4JQlSTS= zYi>6;%%(;!jXqAL9`ItwEn2Ww3;yfCjWG#-1%W%eV?Y{6!M#TDU7)T|IR-*DEK^vf z=-BW-UQ+deCr#(0G}N~!ZqE15SuHnUDt!gnZ8O?2SSGn^31jgA8P<8n3_||?T-9C( zhmxqa00+3slh}B6b}>_cp7OH6h;$hKx1fETExu6@5y6108opM5yUyjc<4B&vB*Qd)_KSj6;V+IkGmGRAv)GEs{= z*1(YLyHdJq7wk5--9e?lq!H6X^(?#ULplJpIrdC$9PXlvL6{c)S7_TJi^UxvZiio0 zm1C2`3i76`gWaUcR>h3iY#qyCKd5Lgbwl#vM%4tWX`LVH6e*{V_ zQbt}@6leDNwpje8bgM6eNPcq{Urki^;Z&w36;9D)q8TJj?%)k;de~LF$&ABoXs^v-?kQU-q!h09Y0+TepZImUB{2K5ptTS zNe9pD)`gL9g}0D;LucomqkWbAQx33Rl|cn&`qJjSs~2vxpx)|H18(MKzM zJ|53%p*efWdP{~^B$7pxNk!gdjOwU68$EHg3vd?U@%&9IAlTwV&R6xbwvD+oH>7IH zOU^|Tcyl?!V8(cg-uy|KOHDIQAXjp#Yr`_bgBMOO*$0%}uK8?lzYShF0vKxkXk9Ztp_4trCu&t>A;n^g&XNaQOp|CbSY|PEaRyQ)?3#(O zV6UB#Ik_i+MCGvOnKjH?(I>I%Mgy#$3T7!9rARkNrLDxmuKnJA#Kd5**5yVo_c8el*cY<41m2NteE~ zMPtw1->T35^L06*4`qWTID0sz&eMq-4ntKa|Mym0h6r$$F=QE@Pt335f9qN!Cj~-U zA5}xA_R<@dvcxlbt=(F^c1gH+7HNd*e&S_YwTQvI<=Pu;J)l|$8!?@Ra* z`eSzGuyJUJY4Lg>{LK~{hT_ppCqq?j5or#1Uh~!trSLGfD*Vw&ox?4blJCITO50f3 zK81y|ec5E;t3Qy7H-FR2>FBp*9^Qr{i$GLvPrdK*Dk*v?GqcB zJh~>Rz73BHXPjBH#1pp!c;3ANt*ZKHy!pjtKI|wC&}qmDi!aI_c92~g#@Fneurv?k z6Fp6Cpqd_yNmJ1sJX-#BUO9`VE5D>q>;uOe`nwqmdRj$bdg`N>ab~#OX)?Y2sJ%2^ z_f(CyxmAswxTtj|-!|^4YBu%FC!|+NNzcUTuvFP`uP*yE56dASpy%TAEPO;YA{9Kg zH-nF)RgDB%wIBno48gv4Dj(j==*>cNWPIM%3;2FKUzXA?Q`(p7Bj6T-A0 z9opI!9W@TKla;?G$6Y}X+{(C_gh_$>bJnq#m*uhjQqd&}mtBX`76QK2zwijziZB@Q zCtAB2bmt2$^SDWT_QU?D5{aYt4l35^IKH@*o*qL+an=k0_k)7 zW;hm|n(Z>hR9E3K)^x0uz89FdNJipJ@c!|EvL~^Trcl$ABhbXM!eT3olbC&HH?IM9!b0n;GvY$lPoqyT|iuG;AFwfb8cL@7#|C6TnJw zo*Y~^0M3INp#VfMzP+Vg7LqS*xk)a9W(rVx=XJzem#w-Pwj+C&{V|$ajLl>%&b&G^ z6FVrBC_x=lo#hv9kA+x@S=Psxhz?x2WW4FyejLVruFurN6cyM-A7?k%S*LkO)o4Nm z{Nds>Z!x@iIqCUH`9X43W_?c~{lw}eeKO_RFwiq`Pmz9)<%oMPb zu#ogWlz-XcGI?t)grSf>!xsN@0+zJInl~S=)aTD(Lkt|8!9iUQSKW6*7ZgUe;(LoUtR%y364gKyW7LY$nI8Fu^;mU9 z>srZDtEUy2(RaKjpmitiBAa4zURF-tS7FP%;SMBAv77wu_!)T!e5j(TgC49VdJyLj9Re&N<-m9x)K|;P8}_yq73PW_r7x_Q{1mjmjy%l#?<&U5Ni*P z7nxZWn-PSsmu3E&f z5vxX5=z75EJSAJ|wP_!Vit};jGnA?!Vt+?JO@VYwj{c*Y;9 z+aDH*XdntpVNb+#HsJ~d3FV^fl1*?pko-ym+8Bt#_%@h8y7-)4zBhb#eot=BL4_+2 zD@W-F%*|n{%kRm^{dBmMaG3pC7sjEL_pBJk|K_)VU+g5VRo6`7-!4r>#dlgi|6-hu zg;f&#^xxXJLW!RmI;KA@2pv8Qj=*8eX8bacSF45md0J(#GJ)hZB>+K2f}hw~SMPHK zXQm#XX@k9E9iG@tSUlX3sLw02x{ytrae?Y~dPFPo_K}6SuxOIf2!F;x@jRVVxRP2% zJ2~g{`R*4K-Ar8-IK8Ge+Ca&(3jD8uHfyS?%u?Bs^u%0RNgi)+!60TYGd)_1ax!vq zVv!tbT!TL|Y?`#%QVw6t0m%cDHL6c{V`EYjSKr?N_Ww{i)zTh>S69~`OZ+RIsM85M zJUH&JKrhG}DzVsK(~D=+XQs7F9r&X>OfI=U844X-^%64X89H}B#|6u~RwsXN=YrN7 z`PkWSF2FY9n71Z?cqW@jI3#*PyVI;X8pu}by&iNitXP&a<)S-T^6ciu-sEsX`%@8WpgYlSptMBkGkbjj zS?~E=$*-M^$xlpBMt=i#!#zj8%RP}c19Ira^3ESKg;Vqr=3}g~4NYHWUQP;5BO7C? zhn|9hlv9DE$((XNFJ|V8nSMeXRusmD&1Z$6kau~^H%lL%Cxe3Zkh#k`HQTOqlaGJh zqSO2Sfup-hhER7lAkWtP*sc4Uu)>@AqbNZmR!A}ROU1&_b#HvCrO^)*Zc#kTc(&qG zxUW6?J+h@nYE|*tKt~dmR->+2BLoIv`iL)|^$T2M*ap*|`ta5@e9pKPLQhKZaBzaC z9O|hb3w!G5+{L(mXmcT^E0+fB!spHNoG~W@^FQBCT%Ed; zc!>jh%KJ$3#-)zOPDsP?EwAy9r+;z`|Iu7Gz2^;;e0hsNK|E^VII^z)0nT+rQdvt=-wkz!gH}Y{ z4K44pG9P;;4Rq$au+_vTWd;gos$BCrFRyh{f)YFf9^IMkQ!M~0U`yqv9-Y+wjN{G> zKJuA~1{(Jj>(viF8|jIH8Q%+34iE~5j_wi_Yt&qRq+$>oDY??~RXVc)A3L^LEVU$4 z*}5qMZAoLB{ttN@nFyw@@xe?3m^IEL%cRb3QCdh5wF7;6fc>UflU^(*F%6~JivgsZ zNqI8`klF9f5*K+Bg-T_hgSot@(8nQk#KVgu_M0@<`lmTi@45_He0%omI0lVe!_Y<&1C3SZ{z~- zK_AU_fBx>g3dd-qu*!E6StBhbO}hm)iDBWCc>J71q8weyc@IPb zM9Wi>5=t$)T#Omo)?ppe;HoC%qSh{RSC^_#9|;W?4kl|`^UHs8wSY zTvGATd@c%IAWn%*-e83j^Z}UI2Uw{`6p0V%70G9)7Nqewc(|K-hy$%r z%7RaigfgGJsK1cCw)tVHufE4Mvq`EL$Cv_ZcJ68g0y*r9e9veu{iYmOMbp{n30FcS z4R=QSl=lf&s#rX!5QY&Yqp~1A_y&(5AK%Uyi%}T6Bq{qo!?7&pq)2a~V}J z=$z!@uZ`p1=(jZ-lBx;fypoB{I_WK>^i{U0$}`jJ=UE1%{+QcKj4V%41xN0 zGH8oFR143>=!Wg4Qu8~Nrs-lg8tH^)jyK8#H`y>?>tJs^x^#Cr-CqgZ_nHDq+T5Q=P_eLADB$uKGYp$H#R^1lI-zB) zkUCvNaM(pxYA6C;M6WGJbW+aaeTH`0CQj$5AsyQKwDfPA4d-a`#W(f59kaz6*BeT~ z&#Uv2Vxp?hivbxL0~|SSD34h2H(Cp4w3HRUYqJkzOD8(md4Kr3?e;8%vhK~DXSZr& zF!i+@p*cT~DSaL%jslVW1X3y6v}gFjxQ?jY*sf<;007fWUL6Tz^L)%EWI_*|&M=!k0OeCt6;FR7_d#fN9eIRkR`@c=QX0ahqwOuT zRgZttyRhc9sUOZFtRD^E*@Vodd8d)yp}Spk>4z1KG><*d>Qy$(@^r9OV{o7 z9VgrO$LcjVWy!Zo|Pv^%$M7w99v)AmIY}cc-gBoHDI|#vEBo z_#NGOIn!A;Qg&p@M&gZ>O>wy1j^!fsq6Wp1zL{f^MH7J5?aF?m_y?CUKPYFxQ6YqL zKi`#7z!4f~77@}8y0}n=6pETBgd3|Z72M$O7Kw4QgbDd_zA?sSV=;@TS|saPb~yGs zoy%0}x3Kz#n{C|Y#?Ds(!jD9gtL-XQWlA#&`(6?+XKroYHPtMF$%s22Q6g8-A>Co> z9v^liovK<~SolsQL^1FtSn80R=89vDh7$Fo3+D`TYJ(xlQBklCR^@aph77SD!Q%Fb zo8hL|61{6|z5LWCM7eMEJtftxso?#uVh8z0RqoUUhAWSFZdEB_%kv=+WHj8wI&lwL zwj~PcANeQZRHQR~p4E(ff+`|TNEu=z)p0R;{bad#cTcfbMwB~2k;Rx-UM~+2|N2=;1G{>$}I5c+lNA6t3`;5cW7ukQI|y;0YNPO z`pZvOvet%zKYuL3X%LVUkI4tZb%uTt9epWKX~&<40Ric4!ID2 z^q1Gt(Mr?Sn^gA%ok4W$hZ3|Ja(yy6Cm)R}@?#>s&n05(g42dxur>#|mnE2WPtr^y zzHMYQTf zch9i4tES@XeH`dWSVu|hk0tN4J>xmCQ;A7x*!BjaUCgM&{$~DqvP%ekn@ZPXIOcxd zHFX*pY1n}vq`X)>TkeLZB7|~vYBN;fe+~l#w;$+*O$=pKj3s4-HO;(bosA9Kf+dh; zX;4tZ9;omw76dhJ)kTNT%axToA3T)`4T?I4SH=pQah${s4xPM5LwN9Dl5& zbpgYZS)sAjhNUVLeU!if-~iUgzMkSS$U|{;YW#-($gW&SKwBy}XB7(&SUPy7_1*nD z($8vIa+)SQIl9T{7TnKSE9};sq47P!!aW!-Gx)oGw$SENNaOTO{ai!}qsu4frR1yf z)7`qbFJc~PzTHxe2##t?N6cKzLH}85bq`ZIa!cskyJYN5Zd+dFjd!21PIvI)lzZSFe1{Imw6v? z88Z@F2D}7lD%I3<^Vkqkm2iuYbZ?c+_a;dlxMj+HDTq>W0X%`IgmGFxTh@{)9KoB~ zm;^W(aB3Q+Q%(Ct4KW7&YK)e zwAW}3e7+aQY*Hszu^(S)%pHs9-uj}d%!?q%#(MkXn}J%&U(4|)k^S%sJjVvuUmX4w zw6^Pz_dFb0w4%r<8)Xe$FtM?yH4|7kb~r;yNGlBj<}zl)+34I`qR2C>(!*@6aZM=A znjC^pkj(2Zb|fa=2Iq8QD)iPLG;Jl#b@!RpW(w(Sh?R!E=flQz*ml<7%EH#1vTj_Z z`{0DB<0w4q#?Vs{!lV-#+FLsp**R0{kOd6>KK=H$*u0wJ8t>fPHx*u#+FxT@G?fe; z30u|LZDli)`rJ5b{Ol_l0RSs1yqTxN58m1y#ON*gqs4{ExAM(}gcSwL-kc1buAytH z@fy=ivv|Op?u*!JIp6oJ;N60m?;-0NDcSu5XNaWqk^G*=Kl+C2aFmjQICiu`bkhMk zU;s&H9U6m#ysox$IOOJmOk$!DL!;(WRl2T)ze#1g^Q|uDGJ)#YC2ei^bDEjM6qhV1h!;37mc#0B!!uvn(p6oTld@)zw5Z~ zZFc=%u@vTfq@+tUsbr*Wr?|8FDa5`3aU8wsJym5LSyJXQ)+e3JMF9@CpUZ5TOED|{ z4`1&XU1{^Jdw04!Mt5wj*tTukwrwXJ+qP|WY}@MCw%^syv-f|WcZ_|`w`7cU->It9 zs+u*g-!+R?YQgvy;nH#C!Ct>$$B2G2hvWQY8Q-ro?u3;wWhmOj4nsxbw=ZM*^=nk- za-K@rb4*%VJ1Ba6fsbT%7bv-hv@n7pfK}wP(v(5`@Rfx4Odh61ImX__QBm*OLf$~P z08cjP%vD~-S&sa$X@U}{u*nFEkwII={z>s@2q_F}dA0I^vdNH8$8g)_ZQJ3e<%YYn z24BJ|L1g$;vK{FxX)_j6BSU%hnHP_GAQ3^Uv zTC+O3LP!d%$`Pw{L!yGbJ2(w1@6>K8{^Yq__-Xw*^5>_{I=w_;_WN(}{zYX1fv2HV zf-bG?!matR`xA(Vw;p?OwJlh9y(ipNN`og-X5Ffm%)utRnkah03n>aTqM{b@twN&w zDoW9}jr7)d?VD!jgspJ`ezZsB(CSEG?X+ zc|(Z>0z+wU?arv&VFMvcUX%bDVL0P3g*F9H?E?jh**gT>T9gcI#LQ@RXumhivCs?E zHL0<1ink@fj8u>l7o{QRiP>EI!?8$-_Hy6ipyt1zW0l;Ck3zt=YH9Ukl2ewJnD?0P zNg~LYDc=mSna3-O?v)h5=AF!rzNIlYsxwLM`Hm8DE*dX7&*#=;>C{e-xr=Rz?2)p$ zV%UpB!Y&1j(v)HpN%Vx@DJ~$PE@ezvErz4VbDlS-t;wn+Z!HF8?m(IfwhmC|%0Mij zpob6JZSBB*u$BmDJrCS-86c`R>ZgqFZ-d>0QwXb>FABQosW}M@1!@yi0W*!%RefTO zb5M(<3f79DqZH)ft3fxTd0^qPe*svp1?r7&Qozmbq&+p=;$4da+h=Mm$bBP=Oc`A4py9>>8m*3kd;J zqvn{2yzrbTr5`EQ(@Vc6T`tYdAHQ5Fjum=JU;c|^*_^wxprH(Yp>K{&sKxID=WMS# zVf9#FzpdvcxCA3u%bx(M8)Xnqb`J|MwG>=1^#cjt5Co{RJ%#)LWZ+`EkhezeIQ4wh zV<7c-1(z%7{RJ|GSdQN%|DP{ym0BQmao_K0p6he_)qD32X`4IF7wDV6w8Fof!(JND z81n=q2>yNVKLi1ghEV(RA3)(h8X)io>n~j`5RuFxBuUeBj8F~~B8As)DXGbBLJ)9n zXv3AT>5*@=!m63(SAJ z2^4+*ADzL0&+7bHcav_#kWVrN?$zxE)UI?)mh ze=_DJ#9k7}f3+KEa8QUg7ie^Lr)U3#jfFEoO`54-MGTDb)8PHKFk{<44)1bN{TXJb z9g2F_8C#{{;ePzES+3E0yx5RGjy|`HN&oTBkp5$X5DA2Jbz8tIPf3zvr}f+`oF>lG zmj+EqCs-ojpZ>YtXtDJ9vGw_y8;ry5`Bc-4WN!iNXe$V11cb(ZlLXpzlJej&J|7*` zT-Uh|QFJxOGvE5kBci|}YQkcykJ3g#=2yJ~JP&F7aix8C!6QfZ@bGZNuU*>h#tR0~ zT+YbY1=Qe11u7+vQGDLv|4bxkyk6=;0$oWgPHM9_)%2EM?f@3pSF8Q`=^2&2a`0!; zI&x19v-23;NliR0D2Hv^vC&5!ulrpY9#zbRJBJZ@GpZq4^*tWau8hUdmqZVTw%_?p zC$U-8oth6PLu1L=)~4A?=O|HJM7O}Q6|aXQD1$$U-5fHh_zzTnxn1S%gcN7H9f*}L zoMhU9_EKY^E@KVH^ksN?TA&V@*l7($XbLd?q@mFEOwmuB_ygl1W zcTF6h2LGJ|Ae6ok97qr6RxnpIXjNysSUw!9K30pNkNWYw9BoLWbrsuM9TXKkne#;d~>F02f{QI_Tn$qR! zyG~iZ<~&Gi`oET`I?)FpQV!)Qh!G+*F2WS4OR0Bg6Udc0nODAQwceRmZm?M~ne$<{ zPHGM1EF9lM6)x&E5A&4@KEK1-j_qWWKzd$%5XnWd2HRl%Lu;v`!CPAy`8wyCG#IPK zDA2-1uqx!1z$9a=GBKP)Ds~zTl)+%=!^yA*hMi+FTZT)l*}V)GwQRzLp6t48=^SS} zPj6jjZWvL?PmthxUIqEA=0Xo`ZYr(j(FO+xSwf4ixh>i#a2F}$ZPa`1F19pO^68m1 zf_}Q6B~IiHC;gmd$**$&7X;{;n8>G*3*kg?NUV>`Yr% zX53(O9@?D`e~nuSU8X$p!*bn~mfY+-w}NZjR6w4tee)V za(})#7fUz)o&tb3gp{gG-5R^ie42pVhcGye7nqbCD=&psb4`RV5IxJ=!dj zB+*4tYCW=?LF)@65qPR%Sz!nQUnO%GAQmT8?W4*M4$#aV6cA?V`ryOKy8loagZnjv z``h;Ak_I&4?w}gh?3P*_pz}UiWZ9Ho)wO3+9_7#O5p}8QT!Tlv^A-do&92_7$0D%xbvsDbJ0J0l#iHv#ypqdDhtr1nl#rCyM8QA5b$Da)q={`sD( zqiAi{H+i1VvFPMXYZEurkMt+fq-U48w$t+q!*a7L|>HAME~9BGNS751boo;1V+7EyAZ&K=#KCA**JOMVOSyn%Gz zMvu)Dda`7si|>f2Ggt}h(X5K3)*Ivtp7U&nK$7;ltBVfTnpD<0=`nJL;1<2#dB`?odoq=OwdbHG#LOAVkL;{xQ*& z8=x*y953>5m#Gy*P?;WZx=xf7f5@`;QxKEqZcM@3%4m)JyXX+j zaBa8;y_mhBl;AJv!hC@;PM^DUk){6TN%apK>P-28P%Yez#=FMvZ!Xz0lE9(Q_IglL zP>Ao_K0e7{#)!=JZrhm=!3CALN_dNT7Idvp%XyX#ggkr|VxMLlS!;p`nbt$V)_L7r zo!jSOrECurSfMcRc!i2W`B5ureKvVq6`{puij!iw=U5GGNy*lMK|sF^1sCiRx~??t z9Q-Y$Mt2nKgcVy^++mr*rYaxpx6QWlkP+rE*ZbAGkCZk3i+$eDzdOBZNVt(=RF2)q zik=?)+SSt4h$XJdf!@*ax?nf#Q7Y)%L#2w(f**|pz zc0FIV&1o@G5gP$@9SUy-0Lr}6Chyl{KLkm4i^CvgXK0e7n25=OxCa3)}?!HE>47n=gbd=)c)GiY-=N zG6nJx1FRZhO0Vl68lNGRc6SZzf}?*(=q-_UhuVaBK6M5Ml#z6HiD>>q1?z$cLd*i{ zL8B!)s|u-Mvq*~`wM{>#_O9>usqUtwg!D8dM$<|hPNoVn`@%%-eGPYFIp8!*328It zIf69Z^BYidj;TbM9FDsc%jeZy-5OvbMzJ^eLp?UP+39A5R(f;%W)iq*Y0!%NZ-h(p zLq|ndoe$|r%ZP;tMJJ@hSX$>&B>g+V5 zdWbL94)}bu>kv3ex4RK90SVMOx{s}@*w6CgcOD8Juc>24e`h_7O*p&TPY0NHYxS(t z%7<^PhLT;FZK{0)a*a)9pwWeOUw^b3GWxGGa#;b_g!~zScugp|Dux{rNaf%$y#yJ# zmMo&>i4!`;xRtcd3I^Y%32bh5Wk8op%N8f9_8&!!m|n()nbG;_5cvJNl-|l3gu$ zt^cM)SbQnMuFj2guz4`Q+zbZmjHfaJGw}Q|&aE9n<`#)=G=zSwWDXOkW4zXO|MhX( zfs+ZbVAS5b4)s50kmyiaLV9juI_$8Y2QPn_R1@SR6(2|34W$5%zlD4Fj3;KtN#Y!T%hrsvwemTD^Ch!If=RA%!4r8Gr>x?5+L@ z#T|suk~8e??gsS6za!y~PyK~4|2>?I6ZAGG;~xY70-w?UZ><5k9?3rcWO+LZN%aj; zEP;Ib{l33WraIrqnZ6t^WJ~0Fwu4U_KY$-c8>hmlR6g9mUmvIFy}q`yoex+aty!_W z+_XiPJ^F{t|C>#`*#%}3y&)|BcL*OikpBz2ADfMo+qW&deq-9GetF=liTI!N2M-y4 z_`r=A&1W=rnFd=tW08vkZxtl4ga0!BI)YE$)qi+anVRi$AgcdD?Emcr(D^Flnh6}9 zf4N>>_!k7y-cw+l`R}nA$Rm5tlawN)eA)ybST}HI=6-JRT=i$X8TH%h46XNOkDqfD zd4^r{Z1hQhO9d(R{m>SDd?@+&94A-%)qHU=^HHrvq!RToLHF+S3}hUO1#Wq(A3n4z zO_0K_*n#umU*EyCTp&}jPzs3Pa;_Vgfvbn4k4*AIDE`LfDw7P{Hx6@LfzuC~Y2jpQ zRsAi7BAxk4FQf4*X5p@*I;{_#u8VWJzPWF!9PW-&FvnY144ljP9qlTQiz(Y%0&N`b zl0lNU?FPSmU`+iW!hIpy8>%DGwQ&~Tc^=Qg!6o1APocl9f=|2GWPD!CQIn`X-kE;V z`bK=@>v*VCU##H2pQ62Q#X`M+vom&`&UUgJyIKjl=w#=L82MNTf-B!6M{E!1Vb`4L zH+(!$U$*&i`YlGAVI#5+<*a@@7uZQ2=A>tQ9y^mDZ9CP`0vJ;z)iWn`X<0L+ZDKuw z53XG$i4_2`uHkqrWI(p4raWW-A@jmx$}C_V>WQ=$KA@h@+Cq5+lkJ7ZG)cDXx{*wQ zdnk^qmTSu*gO*hrn>pc1O4OlJ!9(0shohjKu%R-8maPoUd+I6 z{DFAUKS_0yMD=EPaLvPMthNZF^?ZO2QQN}9epr>P{==eQQIO^Aa0N~pT_*JW^GrnD z*yS;8m1r?}5Qa#9ELmZYy!M&F-|4f4TSWg|e^iyau`{~<0b+uJwFxKJ?pq%M-@MMx zRp*}(=m@XI5xGKo9`1rV<#v|cCzGL;k4}E~weKB|9Pl3&f#Ytnzpr|yr(>F# z_l)<-1V!^_qOf^tAJUz`e_$8Mk}|VUFFj`Mz_zNj{zA#coq7-pKJaNg_4DX7T%8oP zD%Esg8}iieUz2D}wD72uNG7fMU@2MDtJq27i@%5h@hb0av!89z@4dPSBr=9#1c_wA znzL`ZXPs27Xz1dBQuh;GI)bcypP+Mq@B2yC?89ZG>BmHQ-LwXy%anyh*AOa|GtgwI z`AOE}?ma$@-|W4ueYU2M^at{sKq2W?^?l3kz%{K_Rc|Ylr7DGyd$qhgM)mSy4q3cX zf`f5tcU+E76-2!5ss!rvM61#otJjtKEROOJMX zdf9bnZ^URU2^I#%6-q;0{o#D=5dGJB!V@+BGzzEl8*5Dt$ySBNkFQ`SC#NPZB)rzj zReXUmGAZRoO{9MJfK6MOY&}r}j~Wr4yvD7qU8Ygqde{uO04@Zpas!x^} z12QjftI5fkIm3Py!jye?S3NY>H-`A`F5quxqPZUAPfH4L#(eY^jt{^8Y^^|x95{ii zDOPtXTejBEwX4cxVJ_w~MUj_IAZBcW%pawG2d<;QEQuQB11Z=yFhRgf`(>xb);#5+ zhA51(g9OELu@?2xNIVH&{JsO^XS1EM?>XvWF;MYf>OF zZV>%3r8C=hyy>6aiwgf0`eM1&BI?c9#Hre1o!hzg#87#edF@<0-cW6 z^K;m~#SOUG+#E4j)=3~&-ICug`PW_@+||rky?Zx~7t&sIjrH%(I_GVswdeJ?nm~cq z&7|3x*u~L;FZ931*O3+L9yan1EjXp>im!Oe&z=22vQ$6b!sf=tfZbh8o8NSE>=`|j zJsr(la?vpCqEw~jG6|_#bH<5*BZg3d;>mN;=rrqf1Q9fHzIyP%6Na@5!s#B$!!%KI zMb%JmH(9|r)fq8Q_JOxTf$#6{4&#q~SRCHH8m}I#3i1_inunT(=5p6U49b98E-5tL z@s=?@UZLBci;HX1y*`DA-xduK+vCw9cU4wF4OkS%Nq?+}E;O%{@+p4m(HTa{JZ10q z&1{^1V6_Zkcl9L;%rszX`F7IF=M{p4$t}Dpf(AhNGX#^_I?bSy4VYKISJB&NUk-pBuC8gE+wBSF>p2TZw_E~sW zR(9mzQ6DV0396PzveXsJ++81V5I*LIN%nE~{CKkZ+GwA(wMtd0q!hY6G*xh)&iMPs zrW@1mny-BeaL9y-N{O#F8ksEA%5?55mmEsU+RonZH%`SE8N_l|7x6(x`^j)t?%r2pZDTru3X=0M1xUI>>*}T=(bw~eU4`f z?@yQNSFmh4)PQv@=T3%|#$4HLWBS0sz^pZDf7|lsA~#~QXPu{V28Ffn`5cV6JmOJ( z9fs}e*6e)Z(Rm?Wc~j7N@ZuC%UR_N~OUg>f;Ix5)4xcw~Y(Am1HQLVIcryz(yad-E zW8c%Yn450)>P#%6mr(%5U2D-zYG>4BwJ&4UO@3a->pf1FuM0j)@w&0a8C*BdN%gGw z%WG)C$u=x&#psoxcJ~+5YT;MoX;uJ8n-vm~po@SuwE?jRsJped$&c~cwB_3kO~c?u zse>w>jbZF@Pm@0HD+G|&E_H{Bi=@uUp(6I@#aW@~s>3vIbzsJ)^ZUO$-O2q6s*a~z z@tl*hGyF)x*F45=BE{Wv8&0o2vzTkF}pC@%=V7 zQ(dcElOQm6A8<%98jlRinQ;REzx7xv%jP#Oxv!2m^7FEbg^qfhjD9m6=yNw-C)zC9 ze5rW*vrtd8`=><%-mxZN=OU&cp{ipZgs>k+lIs{{dwc3Z6?;zKQ;S!)7`7s5gs6F zpL#&^lBp>v8ZboG(%MjP^`A6^gM?n|@MvC%$mmMV$jFl~y=dD45qug{@va1}8C3hH zO;3>X#vLs_TYfPgA5{jp9jdgswB?~14=++NXjUVryQgVu7Iip2*BYd~m;rrdBRtPD z9THh)H%|w}yl~o`p;zW~v*gZaGA=DYYK76A`?7quU;eNxf;!&c=LXvnQ#c$RVzPU* zd?y7;8Ala>&eCQ z>UcO!1OBOBv)rpx9v$TddF)qyuSvqW5Lr`4B+p{-{CG=KUqftn2P6CX`m*$Fc`Iy8 zRU6G0I=xC{dB#wC0`0w^p4buAQI{-(o? z)!gsPwO<=14w>ox3Q#p)0P9Uw8ct4)WBc~3SfHSwG@VcS{QUe@TG+vT*LN}-1h172QG3e!r~iY!=ysymg<=Kc0`jBzLRA?+jg&yg1NC;pcP zP%GxW*+8~rPS#9nlBdhCB|ctj1Zz+rPlfW&hl1eo_fUXt=70UsKSsyOdW_=YlpP?L|!;b4B^HkjQO*B@C561`TasUu(<%~wt_ zHU$|fE=hG><7PAKY)1@cR@Ulb`6+)?u+Z1wHs!AO+D5c^ss&ptK*t*Lc^w`*vLS`m z`ABWTFM}ypglldlj}hzkpJU~}Hau(!Cw0Z%{sPZbw-1k^7Yk_Q7mcG%Wc2o8yRgG+ zegW;@@@4aAb&9H`WKdy{17Z?HHdGq@}K2mCaTEWX| zbVK^J(OdrfUJCZ_-xamx?d^|(YK-H`s+(lXWSNjnz6%lwo3KQ>EH>9Rf*lK5Pmr1x zL0p|969DS9W7Jn8E-l*75`W^v$|O=SjGkaqtB5F}q)$YMN{UyW2*B-&TkEdmj2VxR zSJgp>2KUkT_U_KM+0~UM?dV;YYDkNk>gy}&Li1^B#hBGeJthyx5sgOO_)pg?*MVfU zpYO&+IA%pkkMl>$)lkL4*B<809U%xPECvN0?R7tet&b~yhG1n%x>B<-oPS%3%pfJOmB*uZsbg@R=#u+vE5yEQzns@+b6W=w^ht_z&Iy-)S~t zl5=>|_(CAsMJx6KVf;h1Gvl!_5ENE6Q4_aJm@Mdb#t3uj#Ijts&yGtZzs4e7R~BK#$YJj*!xQkRi)RM3XM%34N9%wQ2{@g>m-!O~UM zR8w+2v=;=@ft-nqj+WX1X+xfyk`Yr-$mv_8QlWYyIS&CbC3R%?9!oMx;4eZH8M;C8 z+qZm#v>MMVf9HI9F0kL?kW)ETQ_|28Au^;#ORXL3n<J7;nn%82>vT5nGOc zUsdcG=F9GV=kFuyYA8(6RQhvBL1xVj)U6~djUOdbInvnIJ+SJelMEvU0Y!;%ROn*f z9=#xyZ6cy44KA;sGjDXqmW;J;Kl5pRM;)*CAf-#C zmi|CWX^q&GoH`C{dVcw9TLEn(6(iG-5q$Nt4kl20kVARuQF9lhgT0jVy7g)DMc$RH zc)t&jT*!OG5`WUBS$g>-9ztPtW_e{6s3GKNmu%RmD-Kj4BBv=D{@_C9YE=tR1z(8U zAK!;Y9Z`-2&-H4SyQc%`9UaWT0+^NOq;AGft>H((pvFdw)5q{9!^)Pvm9}K;7Xm?{ z{zU|UMoenLEYswHtjI$q3_C6wyyA4I87Z!i_Xeo02x_uSY6TqGy}p`@!YmQb=Wso$ zKRfZV8G2;HM;b_4S!rDg`;7MG@siP<4cp!iW<^ckCD7t8;~A0S(Qwdpq`(ony$q$5+mbW zz!>$oh;qX=eszaY#lIq}I83W5Ql>y~+eVcvqcPJCjkt4)#H`|`jKK#OYF281XGJe{ zV{FA^ApROc3m){i$Rw%{5J%VF9(Z!Z>&-c_OXhP^3k=LFU`&!-k3sV99if1VYXwMq zoBoXDN=#9uNG$JG$Ct2WFH@kWlMhm_HXoP9B8DFBE7{>zcHoN;wXhDO%3;rVcM9SS z1PQ|alcS?9tLrd)D^T7N_>f@VpqWdrigg||!^vbCpSb6|n_!-qva&!c9VtEnKb$hc zN5_Mtr>h((S%p19g8_)ItV&lsO~Pl>8>Dl#8@8I!r0i4mU{4Kr)IQi<%bWYhH^Ipq_S z?;k)DiXton+HT3*GgpAph*Umfki3BtTS;Xr2$_^{I&?^k07huVSrUa33O+M^tuiGz zbZuG#274)2yY6rlBOkVTVM{A(zDeNExY_Y!22*lVz>&nrY0!W2e0+h@kl0I` z3rkUh>ang^EHR{O{qXuf0aCCiKBO6^q=oP}->)2k_gb__Q zd~j$?WrCR-UhnyiV~nP#ajWgqst9V;OLX72-sd5+BaV-bMG%*%^D%~$q}Qlee|1+N z(HaRy#w@NdEh{BLsRx?Vq2cuIkTe(<`_hAIWAxo|e=g^t0IQ6^!h;&uyXLf4d!hYE zv*0HlF?4_smAr()gjJA)uc1jFacmoxEt;nfk zl|aiM?opZCg`48E!*^G*YKn$?W^;+Dpwl@!h<6xpKlF!`yb_1u`ywv*VzvO9+2u*L zAsLcq)lK`Y)9OstM~~hatAug0nK1ZEH^%6>biFpOae2=e1W?558|{vAyn_j2L;(SP zj;OJOw6Mp5xmp;uKSSBQ($#q-h4iHQ>HA=y!s8b_9KM>emHHoM7faWP$t7_c#Ee8lto@g*@x? z`G9`V(B3&p^Rh#ep9~eLdB6>?%Bb+LAe1 zz}n5R?UKvVK^tCLQqt8zz*>nlqqR%OoeSWIA6Cp*+b2#OlRJ+-?}uX1`wCe=r?1y zl~iT7SiPAH?Kh-TZB~9$pA{Z+;!5r|W@bbx)P#^mj}>o&S|gO!bC|dq|Fs>-@}u5o zC;m%|rgZ*ud;6Ee0b}Mht-0}S=FVA3z2mKe$~iF39lrKblcfAV7l>4RgnEbSfQ@QFO>Y+ zG)%FLRaVliX8E*;(6(3X1CIIMS^qr}AybCqS^wxPX-lj#ve41dNLa{Y1Jh%IOtE9O z8FVAg8AU-wPkVkzPf(QFn7K`bEX3HPIhkE$5~DH6hwa%jxmtRLD|vnQBp=BlNpi7} z2vHgfdD2w2Yqd}_BTDLxPf1H{B@b;^coq7KOWfpy45Vb1BE-4d+nfAdhBj648r}8` z`-`KM`PI(Ys@1^xh^v%4NO=3;JZa%89(&F_j18SQ)k;{686TDtQA$dOc#Ycs}BkdPSZlWLruwxWRnw)>;DaV?Yhmr?>Dr+frwA4^qf zO>z0h1ls~mCdv*xM#dyS;z1D+QPKX-fe>|w_riC^(9nf!^_4B{tkjqcu~}^Cx%!yl-t%(*a>}xMFR#{MZvBiY znEm;W&V1Ly(h?kuT6PKoIx4QxFGjXHu_KrQ3o>dA0C#T=qq3&&zp>{Dvzb?8lVY*6 zWbtk`yJ)TGLT<}nsM}?9(B*m^WN&BN2m^Dc=g;oSKrB_f-(&FT$TE*Uqz&R6;^N{E zb{Oj2Ay2Mf7`DwK^C@XrEK0nWLh*p$d~qipJ2$LQg8u1_00K0DzWl1Gd=0;JFy6;r z>-4O#q?5a+xN`SO4SuM1T{9gK0RwZrwiVx^+C)!(zp)95GqlkE5vZBN!;#-(jOZHS zvJs5(;Bivpaip3j5%a%j;>2@;Oicw1(tdE&F@3%TKHU6qokrkF}`F zAvF|_%{V3-AS6hroN+oE?c!WN-hy&Mo%b* zi!Q@uCk6sga^(a-0B6>fEb3U)nS?bpZY7i!qPn}g9CC>3t8c&49zaUr*hbTpdNW>P zH&5j0;n0D?{9f2VI%$s4Rb^z zkkyDIb`I)+&fBt9KVTye)Wb^k_t;xj0E9rxU_x_@kiUQT+@ZkkR{?{XuhlP>!cyXP zbNfl_E&xk%iTLA~UwEeQ*4)S>%&xe(5@+5Siz?;Q3iv5~`bY0#VjvMpi8)e-=jzNF(suH;#T3oAzeM&h45MGObtv1; zJBQQa6{JXZ7ZEPr)?m{aVKahB9GhLRo|ok5!^mi+BnYcfs30@h+^kR zfCHPt$!`H2ixVHiBn)m*?1JXiHNIX!_Ff@ z%9o&q>4-YMLgIwPOlxS)3J>V3hpi6x8L<%nf_*mhwHgYt(NMvAl+FW!3R zi};EKk`QD4iR4cm;)}n>y*)AZ5)OW9=86Qup|g>es^a}2`4t4`U}dBxr=WmH_W{Wp zC}h+(X(ndvTB*u6Nqw5oo;`0aXKMhZF(9sKZb=s;O*uIncM{WFtp^)~>Kyr?R4^~M zAP*0+l$gmdEsLLD0XN>+hILi=Pd zui~xOCo0KTKfj?=N%$y&+$c*tln2FLU=WE+uo)g^Ku_ecrH_Mw0asg2VV|7oBU(Ga&f3tA(7U1TJj9@ z;QxeTLV?r)VZ6I#Oi-B{$2G@D>hT*T_;IC%U`v*CqcIjlXZE!)Y}{=b@;K?dc@~t^ z;mYEGxfIE)P4i@XHbSUGvPEA3%0$URJ3_c%t!{k;QJBmT!Z>rSIk+HR5=A8sr-gv#*>c6`(F`M$`VH+sgnmvl+&%i3V)7^ z9=55Nt(GF$_LTH~S&fCF59QaD;Efk1N?tx^=8hN3aS%i(9MdzJOOekME}EBFn{b3m z6f{V+gv-<{t8c3ijubc1XXtsc<(yjhZj-p4w#Ls3Hz}N$BAQ1lNKVT~wS!;^!~J>_ zZ%|aJpEZABE9#2CV9GQaBnTBSgq(H`mWsuAZz=CLdr=cWB*7Ui>9Fc5nIvi;FY%Ch5kUb<*WM=E9rl}dfLuES%+pis(44~zakp|wz83~n!4 zRk)0W5=iR?h9naqEN%6UdI8)2A?^dg_WuwA|ImlPsxX8IGcFBOIAJ?+15ZF7I~Sz1+;L{hjiExla>X=&Q?5V+p*Gyb! z)Q&q;U;jxI(o*&MblpAatox$q85r!A1258PY5!y6^QxhulH9!cL-uwM;m7&s%W1WW zXG@j9(_D1)Eogn33@?u7-U!bFz*XRD?hCP9kt)A+qXw(QQLvliRCFi)1byGdrXeWyOlh z7lb-@Z&juInon6PO<}No^}X~JMLIR5Pzl18l~X3HMWHwWBUU7{y@5Y!(D0ZBP7^z3 z>L)=L7uBvp_nCgB)9OBggOEO5IR4!SZ(*MxXA`i}%09P!+ZkBLh}i<28v;~f9@82& zF*44$SW&9ga9p802z_$jsIgd&o-8Fo$=+94z8w4N-)aFvyAVie1KvOr^f7I2-r|PC zRyK6-`c(828L+OIuAhFTmAqlni6xN$z^|9o<eXhX% z#GeIt?v{4(JdmP+M)p!PLXeg0)trc3Lik(Y?fU8%N}HJUWx=kIn%9?5-Pu@3J2@x$ zJVz%l1{*Og_S@V^d=p9g1N)=;2aTnT8Su6uY~^E1$u361#ehD!g%6rhh+jo}h!jyn z259>GhWlB*6>y5rSyJt+;To4d#ujx^*WoD!AZ`H2^DX~*kaq{ zklfibtJ-RD{Yg`t=G(^IW^*XGpLd&|ZoqoEb0%)p;(@~DyPDrQbOl!y!;Ykm`a3HXz4^Ofj=;-t6?zyL;+*OaomLZHidzqjgL3)e8K zY{N$U4ZwK?rUruXvudQmiX@$N3lV>10CRLDlLI0ug{{5o*?owwyY4Z|8b2hedWG9K z<(a`rZ`PS40&gm=`0-FEYpeBGw<&4yW->{0n!iDA^bssSrp#Gt{-ruJ3^&B~RXFVx z|JLgmGtPtcIoUZgY@&_LV;rVJCh6l)VvBIN~C+=2OU8PAr-KRw@Gn|`-` z)Ce%X4A$XQ8mwBUvi?5)-ABfDJ6X)%A;I?Z`mTLg!cy&ivi1#9FZi=4h8h>i_EujZ z+uP(gPh`nKil+npzf_ZL%w)ArPc~Ed&i9YG&!jStMig}Sa~|4&cM`^um3`L4zq5?-z+(NR_pHhMrGs%*KG0a!B!RNdTq<~=n_|2 z)VrKt7!`jsL_D`gb1?M5M-~L+LJvup@jG?7r~Uo|W5D~(xc)c? z1wt&1+7@cAKHd&5@xe_e6V=J@E34TW50y3|JGC{02cD;Ho}1UyPD`M+0xUDREfm6^ z`+GuwrK6)`(|v1bpK%HN{4spk(#(u(Y)bf+@u)%o{9C-bdRY_>H(+iJSok+G{86Zw zX;HaKr#AjH!}!tI%ZnUxLALWCHP{!Tv0^j&0rZDl(A&qnlg1=dV?zQ8Dp`bs5bL>p zf{+cQcm-(nW(uw&dxf0DW7xD&^LMKcKnJ8!EN&}HAu`sb{iF}3_PSym*4@-lG#+66 zX(#H*|E2D1;WYX>vTAi5LeU|->ytUmQF(2LC8{q^oagSr>+|-~xk$#P>j}W$-p6Nh zdk==_9A?Rws)SM5xBcCfLT zf>hB0caTXXaPaOM1=I-#llyAYR5LSku6db+nfyj275|X!$ja-*>t(-m8O?j%7hFM8 zOwtH0oS%pp@&;-56xGi4cn|uP;Bwp8T^KL`adph=A(d&f=7lB~Xh^R{RU4h4K*ni_ z%ms%Jfiq$_o##HTD>Zzgz@N-~k#hfHwp1nE5POuJIF)gnbP1K&ES+M9CUQsjd|%5p+EoFv-f*4v-;Av@L%b* zXE@{kKv!s^3AROJf_jXWFjJD>OJht{04Vud{ZJ1S#7OMX9p#ddaZzQnM2R0z5gQo3 zozQXyQa>tq!8SoZ)i7j0oGp_10iQh|M=^D(qOimYCU)#r!m+(;ZssgyymaAX&8;qc z?P9RP&j^XKCH5^Efr9Yhk}Bx2#5wX`f1!IWOc?Ohv7!UQDstpZpN|iJs%_vB1oXwbS4k#BqXH9cD_X;_R*pJFhVsy8 zF!)cRVMRv6VY2eO^3akGmmnL(`q%K4ZZh5`N-EfLW z@|R%zT-9$Mwp!HTnqgQ!CossuCqRQ~;>8cNiTtqV>B)@JELybhjd=yCyiNy9-YJH> zx?~}+h<*#G^e-kSM&?VAQH6eWqVa&|7B)oH*2F{C28 zR7Y`YnGz+7liZ424%m3c@uTUk7DeIoppDS`eigv7x+|{k+wOxxVMAvVxZf`&Vn3?PllZ5`^J0)+FqNdIym?WT5u1i-)mn^ zG~bg@mrGX1D|9ARd4WbiUobwxU`K=q<83U4>{IsY=qP04qa$yHTiN_ws3BQ6oBaG( z21-KDKIK}jRp7`E+Qgvs0(WeoMtCY{Z&$5%c^qrJUs2h+b2Y+~Een3TK^RGOKCG(3 z8ViehiUtGCx(aibgSA6#qCf37A-4&jy~M)OpHLT}u54{hU4#53B@5FWbCx<2Hmnl~ zp^<=eh}wuanc2z7u^^Auoz3SbS6poDh*9)6cxlE%;RKkt(8|Ldi5GS88}%z3!~h!4 zz`-}_urT)JdA__uMdtgvdCU6xGZYH>U#A6y?QBi8C49WiQ8dU!X(}&|F(t`F z+&cM7h3-DQ9rfip;@F%SS=+0BV9U<~Qq4I~SM!X)1FpIU^ocr?l1*5v%nx{ z7oI;G*<%i~FK|wXWSo>WLN6FeQZ8F2!ePTr0XxZQgUq5CW_7gCwq}y*Pp9hbH^zh1 z@Nl0g(3DkEl9La&rji^Ki_sDr$s#{NV!_?L#ex+I4GyKaL-FFpB?XFWa4i9fyStSBLeKY{``r6H_rLqk&3~JBcHY^Y z-FJ3(c0M!cgwIwa{oEY$2W2TGqjC<#j~x1(oUap0$6Up3IYl-)EIFrwCize>;%lkT zdas4XQiPo-WdwVWvXrC&D7iV?*`*;ny%=25^>NZh#J-^p-`O&{7Vk52gs7Z2SW!NC zir3D=k^AZR^l&vqHBEmEjG?cHM)k}gT9dM ztz`Z@9LM4aR*J5=b-d#MCZ+cN%eb$%4}(8}b%RC&+X5B7iOtD{%nV6>u>kd<=_)&(>R6&&%iHL1Olr@Tmn&*s zIGlT<`ACtVZ)Me@U?I|w{qR0cd-6_2vYAcs4>G4yJ#-(xAYrtAhL* zfj(Ovw|XaK(G3VfyJ=9Ug^YCl(t5hz2au;A5xVNeW~P_Ia(PoKQF@V_Iake=`8?y|F&Ez`#d18G{ zR;VI+qer8mvp7MeG0)Ido2ATBQc|L7oA&KjY5<_HHg@Lg>CeQv)k})Xbhjk~MGZnW z;buctvQ&JKM-9C|1<8LLYn@N=A)*c>3@(qzx2)V|$}&xp#tQxI0k>Lrsf}djjm9zNOKg$-@5cL=?R`bn6kc(KPN67qd z@IE9B$@_C^c|Sv@;Z{A#x;`+x*AlO{gO$qUp~;TQTx|{tyn>sk}ybdu`X$AXWJ7uw{^-MRao)CnZR)(3fY2)~^Rvb)$3``VZs zEkt8q5dp>Q0f{-5s(CfB*s`l}>c2!?yi+oV+fU5oktr%=^v~DN?B)exkeD8!wxq|O z3~|3z{r7CMCG>DQoKcj2+d$q-g0iuEdphh@#YKM)sd80Kr}88J^?n@{FEd%8fALq5 zVt@RgBiMQ5`|Qp5NG+juOQd86M|sv^`03OC9-Q7L$^fpA{};HBOFAhZUGac@@#fXl zqe+pu8pR^wKbI$SyLEvi;S*wx>R96#^Q0fI!y7GiBE`&q+r1U$WOdg_dCeMA((J1^ zq&>j_A%Uum^Aihhdllr7W+)~FLdU;~?e3N616!rtm}1sj4zjM2PkY`kABX}72MwcM{DHQNnh2`}pV>1C zy^GW={$)b#2V+t&^LS9|#r;+-;nEON}#xGodE&C<+-SrrA#U1J(So{{aY)4?CP z-k3iYi9jmIkmN)43}l;QxF>V2M2eu%>-J?oWFS7acu{3)h8%6tnC>nS9dj*s3Wsxm{Zl~B$8r!-xQfX#VsKjMC{%HXimJgBy4w|yt(;vmJA6j`x zcz)!v#=#sOZS;(*!H#`V5w<&{@JX6xvQS<&K}rvsr3#W^jzJ3*pa-tj-vsc%c0G;as%bg}vq_Z}|%a zi-Ow{--1Wfo7x$P<%On46bR<8Fpl9U9n>qTC01#XPK(A_j@V3_wKuPeLq#YIStD#L zjs^OEs1q1Qe+`sgVTu}J_v{zENhkrLM znk|hgXEaL=3}n@EmJqi2AR!`4{);tkwD`_w`3pLn`h%_Yz`xi-9~B*{iwZZ#v`zgK z5cA`uX#`i4WGQOTAxZForZ*2_n6)anlBrC#xU#=uwoJ4}?JW+O?36w$)1-(a4kJ;m zn)R{M#m!hZAolZl;%7{qQ088#fZ`<9c%oA~yH8LYDXrr%(ooYFGSa11@2(PrGg7yq zY~~gInGG}Qc|RGUb{%1!owN=yelCw}LR7RD4dsdbfANDl>q$Uk0wOYb*c8gODvt{m zg3|Kb!_o~NRx1F0zAZK3TOL~-Og+EyWk}${x`RCf5C5kEk4K}N?RT%nLW#T}nNYeXoNOPbG=sGs zI;yh{G8Ytu42m1e^=Npl@vm+!j=uWQH!({s7NV48pfVny?eb#BCzKyX%JeQdJb~eY zC7wTy*F64ZiUK@$U3RVr)mW=*!*3O| ztiq+Q@-Gji_1*%z_Kl)VC3C)7^|@C`a=D=kg@eEK{u>h7sEDs8GWYJTgFrCleZxmp zv+<$HH@V)=8l~+pWq|Xq@F)no1%a}xC|vSmhZz(u#_{+ZiH4g1*Y}WjEU@%EfxPKo z4Bne`PBhrs5>I6$bhmeMg0;hA&1_`OKL5=7VGwSx$6SmrY=; zhERx}PT?E#=>{1am69Lps(oB_l``}TM~aHup`l7iRMIiIKjpW~7278+WaLK~JzP;- z(ywj4iTa3yb}19bv;#JizG^jj$&fAdly5Q@;9-GfEi(ySuW)p-mwY(eXX&x`NUeqN z!+V=9p~bK1#MC+>x9N7BOoStY17AT5B%WL9(D61Mi@u8yFFiqORzmgRRyVo5zv<&X zGkw}O#W;U=#-%;Y!;&1wH|}z?#HH#rugU6Khs_jM{XH@95{Oj zJ{Y<=z?d-;ZKfcrNstGrlI_ZdoLf+piHC;yzvr7T~W<9$Pp&tBxKc)cx ztPQLd?oHeM`RM((7VL~Zg2qC75&z!QPZ7E&LgP~1$3C|YQlg0h|1tWe>o{nlSO47H z;yFPFl~>XIVCEeLIgfzyK$2)0CoRdEf#s9dS z`VV(Gb_MPboIqb9A?&;Nyl%fnUFXw|-)7Rv1*0$x$^evM;fEi!vgefgMajTHDO=JY zO01opPB0Ts>)E}e@F&2fVESuo-S~>}9`>EII81v&O#78%dp@O|)YLReinIxesCt^! z^)48`2dl$XLc>f1a?jTsF+$~6)0B{V5IZ-f@zgb<8xemleCE%XK`@`6Q$VtYa&abF z-^>|mVpnPY^rhfB=lVXS_rLoK4OMgp`|(;?l(V6RDX+$hnG`E+Xk*fq5!1PucDbrP z*vY_E%zl5d-+jsC)7e+$)@@_eyUCM3a|pam=KaUfD}Bw#7MPFoVxp2@Um{{)f6d7i zQIFV4t5cBwuuAugF0JT&!uM%$;nYl(J;vIK`sc!kNKui67!&t4d1)pYe zC9qv+_z&Cr}3zWlc8U8|zM;o-P7-PKJ0EmE z>PN8b^qPDlcOKTg931z*J~*S&_dXxO`!pGCB>gU4Az@To)Jf0FI9dw2 z5Z8LOHRl5+53g(;0)R#WGl5*nyJ>MV0-}vuD-lR*dvERhDK3@rt4*oN?+x46F9W2q zC$`R7W^-rG+EqQW0Q1*fA7*dHm(@>UXuol-`-!1bG;{*OA>@JEFi%shhmuVHx%L4${STeOL1I36$L(7`F%woSLR@tFe$?sVOPgTpXW-LL%R5BvPsr5S zpL9-*T7$a7KH5+7#S`1D40UPvoy~PU<9k|NxYRYKvOG-L%jFnrkW7@JS;7csm}M>MHPCc`^#P?p_nKLC>A2vt9r@eVsUEeH>{U6&16_ z*>$``dM9tuNtNTD@1kUI)RnYe9$vm<8A?=HcAH$>G?SVsMecRg_4}5iB_`cJ3rCKP z;aodfOl-rGRoZKu*@X@+iA5pRKp%B7@#?&g{5>tR(3(fzaesxuU_ZIInZ_7<`P8*l zbUQcBVv@lyr!amxI`>XpLTw(`^(`$23Hx(lwUIt-y+%Z8mttRkjl3uc*IiyicvmEz zVWsF4t8-QhR}@E1;l;p(_S|Wp?w{YcMVid)+_x+4qk3M8+SOUA4F)BAE*_khrRP5< zvD9SNmr6b&mR-nP&WHS0g}Aj&i@O~`T|lct!tRS++gl83woGiqL3wJ&<<(yb87TEc#a>Fn6hk>ES2F;ZQ`KdR@ z723uu!YP#CvuZ+1#hq)M6W9h+meKHX&zu$rii7}u+c>+pZ6!QWvI-L1gjQsx@SDgh zF5I5fPbU@cQq~QM7#dzLU3ZLHPM^zIg5?Yk@M?2rpaDwDysfy1rmv8!WFZiirn4=i94e9lTL zpZV?(Fl!oWbVQ=$aIQmaJm|Y_q97rR-$KoB(d_@H&6qT^F0x)#g%>Wd@T!0-55h~( zj?S`7+K!oGvLF|+l2SxV#ldEpk6d{3&GjJFoU=Fvh=KHa9_P#&$Fhj|GkIL&&vn%d zf!RSP%trIiRq;jDN&;|7MghLcL3fmJW@`Nx}~wiQpVXs#+G-DoE`-mea|J5DyQv z>I<-M&(OXqQ4;Q~a$ay3F*=*09WoT!{j=a5BK&n|{tTkfdO(<;vLQs`*55oJ-lf)~ zB-|0PUQt&;FZIIx$cxW+J#p;-U1(S?6CmLGvWN}pizU6@I#DtYE_nv)v5g7g^tzh< zb7GX%zOL`?vnT?el^R#FwhL?16mg=Is&(C|(<;GrlF(r&f1~tL?{YNI3tSa66$9il zl+Qd3`j)#r%VZr2OdO~I7nVnAQv_-w2Z=uWq+dnGjYm&yOss!zytxfoY7~}{v)&iy z7phE~(Jbe2Tom^2w+_p_uyuled+C0j*&dTyumH>yduL+YJcbA+6Owx2uRnAKTtC<3 zM$t&PbPuFcf_y=YiwM7!JI;;cahP^&kL|%gHXk*rb$KKDw=L;M*Ar$q&_+rh@I-GQ z+is|hZK&I2sL932w@|FcNS?!2Z>%-%>%kNdnmJFV(Rap$wX=NZ7n;3^5VP* zfMc^(aM>8WRfkT^!j%!J2(zQoubrhchlU{QiY8Rk;TPQ=GcIQ8tJ^(ZsZF+*wJfJ@ zRiAy_ooyVTsH=oDjXt~f`L{ap`1VHcPy4h>(6Ca>Fpmo9Eu)w&~Gl@2jzB?R3ROm>_dr<_ud#i^FU{;Pq~akW_Lkp{V0tCicrKRRmth z-s)DA#8uZpXvM~6Avztl6rkn{C!8TiKLk>boqxd=3UsQVLFoxJ*p-S)#X)S{Fa6|E zkTi8mHy;#6tvY?o*HfrjhHfrhl7OsP;Cv}lB9lwh1-3^ugr0ni3|pjjYR|(?>*vy+ zs?9NbfzCxpiJAz%MV;>2s+UFL&h(@BMoK=9mZSBWcHBkCRl~kJU|_Wy^-yc}ZNB2; zex>E5`aHE+?jr$WJD<@nfvCKy4LrO4&_2HR9`!svk{QEVaUrx?bxO_4gHCDzy_A%4 zysF)F#(iePw4ZskaF^R%n}Sm2W7CZG+km!;t1ag5^Ud6$^*kl2vZx`xq5_jk3?e)N zQue`Bg8G04EsEf=R|||ZUX=aB>tZbdHqt4YN<&*QiLu;s?}&~pW~rFoMJ2s%(au?i zGNZHAEtL(I&y(i<(i=Ld_+G_VJLxlx5&=qmdGZ?+X`AF&MuTln%x$(DXC%L0|J(ulksd8Wijl7}5@7E)9WJBa$B|22 zmIeP_w(QQnP2|O6gM11AKH}WO13jh-2Xz8!?n~(RJ(LRNU6(|ERnTl6fI7)s@2xd@ zYJ32iMGD``BL(1>1n_oKp`SkjJ*J?8lbPe9pQEee0Hq>%pQ5#nu8si!btnG|Z6MIq z{{;t{5B{I*FT~)`l3JWcnQezr(Whi!xFLO!v*2U4>^GY?P7S!A#}YqiKqDrDz(*)d zbm8AD(dmc-Y5&cUMGDY{_g7vt4l(@K)4$@PF_)wc(XT^Gi$+`pT|WFPEPC$(ynXOj zR`ens;D>&Q78Sjb_}|zne*iX7(Tr+E&uxi5dx$3g%d1Ix)5D95UA%|pSksvSatUp> z2>FNiJZR$73-WuA@chHZX)aCmSUmx=C>;1#FdLlgf&D)3kkT)(c#h{VAnW)UlvHT` z*68f5F}f-D0)3bQx*Uu5`27m=P2OD$TJ&lE)5YL?;z$uUphiZ(Z#_;veaNe+b~L*8 ztaJ&-{9BP%DKy~VF-m{GdyqO>;`lJYpbov_{-+^dxZ%*UjZ^Mk>bB6V*yjwvc%Qp} zSM-?DEQn#GeQNbI?p$)TzfoRgx0jV-S*hbo8DuU`H&{Q#dD~=PQJ2KHpMl`WEBfdR zW+`S*UQ5uTVD|#O_W-1frww%jB$Mt*{$*u4%l?urQR{i>j~3c1fefS~Zhr(SP0onQ=v= z&|@+=>!wOB@>0S_(=cRaiX zY0maMqy#Zy*OGAf?I7(ypQ09|aZld#qO7w#y&?7Cx7Um0QUIcP5S;jlb@@@RwR*aA zDb|y-P6k67#J1gyq=BM^QQ3^+>VbrNFqlPAK5Vd2F`Wo5o4K_S=E5%0*V7q(S0mfp zl%zW{kwWDD%I0~NBX4RdrM^s4OK=6DM%txF9Qwk=jnOCT$=-+=l>M3|L6SbQEUIWd zCL^v|gUhgw-BQ=Bf6$K0s}f^rsd{6DP=krt?a)t34nXX<3L1&o&A6&91h)~M%|r=w zLfx~RkKHZRc9x617A%iyJ5{A3ygESq&vrvPA$)J!GtnjEtU^lzzW2T^1c0E**&}s2&EGXB|i|RN@j7O?%^+ zdP?i06H{l9)U!6qTHDcp;WW*MI$Q%P@sObfB7z0R5%0+U-#uXwDkLI??`s=_GF&VU z@6c_f#GSWU*ppR?M>h{zz2NuzSHaxc2qgyuG3mfS+oP)@Qma=cpc9Jph?w2~UEqO; z@-Az$sU<^qNwekcJkezxs^6+gxeyXN{h=ZXv)r@c1%W6b`kaBBunGV0KF_ zC$D%Wd#r`_X=p0@g(1h5$r>SOuxOK@Uh_by5jCqL3FqN0S=G}|i=RvD9vjeC)UXo; z#|{x!>8JW!Cp4{hcVAEJxX$nF;Om+2i-Sw>)pl zAZea8t+uhG=otB&Jd;=5MC}nV8736@eR$;5j2z%_-*tt+N4~26uS^ZU6CeXpNVLx` zGJiOSugv(5-Rj24o^?PY+1*?m{CTGAQ1SgZTrq#lh93=!)JZMG-t?!@-|gC(2=?j3 zNaCL=U*TwA;DdQ|SZVUi-EmSY@Fo!BV;g0=&?lI&MUhCz;Dxtx^d{1N(z8|HsfQNi zCjH~&J-flZ`GQflKSjeZEeO;He+xE0TnM|EDBXN{EscgnM9}>rkCI&!>f}M2 zv!*$qpn$-Y;1Bpw2kjlth&13W`(G>f{2?4@g8kPdKpxd&EhW%6$}9fqx7ddipe~NQ z7BdEz)N%Y@F1iCi%5VNlX6jylE*~?q{ z1C=2?79~#Qj=xHY;8((|I%NFEr^iabzoP><+j&hd~tc_I~HXNg_tHlp{2 z6=}*&j}=_-nhwqbLXTH`sTa>sUeRw@$7!tDEHT%bI@>MVg3rn61EU1bwV>MC^_M1}JZ%kH4ID9%_(fFR z;-nZYTtu`Ln&0t10o&pKG>m55KYU!VY8IU&tcjddVjJcEpor-~I*%JHrCR?Q zVNq88UkbwMF{z2=j(ztcof$D__O2HPx2$W;r7;0R&N$>nw#YZ5@7G zm@ULCuv;Ed_aa!eN!%kX?nM!AoGMc)ay4jX53(G|R(lY-4dR^=R@Y? z`@!b{I$a18TJlh6m0v3BC1K@U?66ljDppJWf}U!dPSOBEk~5%RD^Tk19{^A~zZ1@q zGpzR7T6q)b;qGoolV4L4e@Ssw*OnKIR{Kiuh*foMeSP(;gBi23g^G$wr??C->~$x# zHLS@IR|01mdEns-{wXEzdvlLvvol?>=stgQ&`L{0v^s|!M}f9|_^p!fl^$GRQ-j

    ydc4;zx{?BUKiSEwxCY8^p+kOs1m8r+N+SyZT$ET%&b1l`(XPq0T zoerE@9qD))4KC0qG$u7qef|IS;K5@?IPk%PN9eA5@Zcd1=<$OOAJD3JAc^jmhY#q! wfZz`v0MREz4;}z)03b9u|Nr;o$vr23oLg9v<1iRLK0yBzWFW80rAz|<2Ps;`JOBUy literal 0 HcmV?d00001 diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 8d8825e432..d7f650f6cc 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -1,6 +1,6 @@ --- -title: Get started with Windows Analytics (Windows 10) -description: Configure Windows Analytics in OMS to enable use of Update Compliance, Upgrade Readiness, and Device Health. +title: Enrolling devices in Windows Analytics (Windows 10) +description: Enroll devices to enable use of Update Compliance, Upgrade Readiness, and Device Health in Windows Analytics. keywords: windows analytics, oms, operations management suite, prerequisites, requirements, updates, upgrades, log analytics, health ms.prod: w10 ms.mktglfcycl: deploy @@ -8,36 +8,50 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/06/2018 +ms.date: 03/08/2018 --- -# Get started with Windows Analytics +# Enrolling devices in Windows Analytics -The three Windows Analytics solutions (Update Compliance, Upgrade Readiness, and Device Health) have common prerequisites and configuration steps. +If you have not already done so, consult the topics for any of the three Windows Analytics solutions (Update Compliance, Upgrade Readiness, and Device Health) you intend to use and follow the steps there to add the solutions to Microsoft Operations Management Suite. ->[!NOTE] ->The steps in this topic are common to all of the Windwos Analytics solutions, but each of the individual solutions might require a few further steps to fully configure. Consult the topics for each solution you intend to use in addition to this topic. +- [Get started with Device Health](device-health-get-started.md) +- [Get started with Update Compliance](update-compliance-get-started.md) +- [Get started with Upgrade Readiness](../upgrade/upgrade-readiness-get-started.md) + +If you've already done that, you're ready to enroll your devices in Windows Analytics by following these steps: -## Prerequisites -[DO WE HAVE WA PREREQUISITES TO LIST HERE?] ## Deploy your Commercial ID to your Windows 10 devices and enable data sharing In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. You can use either Group Policy or Mobile Device Management (MDM) to deploy your Commercial ID. -### Copy your commercial ID key +### Copy your Commercial ID key -Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. +Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. -1. On the **Settings** dashboard, navigate to the **Windows telemetry** panel. +1. On the **Settings** dashboard, navigate to the **Windows Telemetry** panel under **Connected Sources** . - ![Operations Management Suite dialog showing settings icon (a gear) in the title bar indicated by a red box.](../images/upgrade-analytics-settings.png) + ![Operations Management Suite Settings dialog showing Connected sources and Windows telemetry selected and the commercial ID location marked by a black box in the lower right.](images/WA-device-enrollment.png) -2. On the **Connected Sources** tab, navigate to the Windows telemetry panel. +2. Copy your Commercial ID (which should already be populated). - >**Important**
    Regenerate a commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. + >**Important**
    Regenerate a Commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. + +### Deploy your Commercial ID to your Windows 10 devices and set the diagnostic data level + +There are two primary methods for widespread deployment of your Commercial ID: Group Policy and Mobile Device Management (MDM). + +- Using Group Policy

    + Deploying your Commercial ID using Group Policy can be accomplished by configuring domain Group Policy Objects with the Group Policy Management Editor, or by configuring local Group Policy using the Local Group Policy Editor. + 1. In the console tree, navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** + 2. Double-click **Configure the Commercial ID** + 3. In the **Options** box, under **Commercial Id**, type the Commercial ID GUID, and then click **OK**.

  • - +
    @@ -283,7 +283,7 @@ ms.date: 10/30/2017

    Microsoft Teams

    -

    Make the most of Microsoft Teams and find out how to deploy, launch pilot teams, and launch Teams to the rest of your institution.

    +

    Make the most of Microsoft Teams and find out how to deploy, launch pilot teams, and launch Teams to the rest of your organization.

    From 6a35f0ab3c4db6b5808b0cecb5f35ba1065f8812 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 8 Mar 2018 15:16:09 -0800 Subject: [PATCH 021/138] update toc label for secure score --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index e0c3ba2050..d5c63e1673 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -39,7 +39,7 @@ ### [Understand the Windows Defender ATP portal](windows-defender-atp\use-windows-defender-advanced-threat-protection.md) #### [Portal overview](windows-defender-atp\portal-overview-windows-defender-advanced-threat-protection.md) #### [View the Security operations dashboard](windows-defender-atp\dashboard-windows-defender-advanced-threat-protection.md) -#### [View the Security analytics dashboard](windows-defender-atp\security-analytics-dashboard-windows-defender-advanced-threat-protection.md) +#### [View the Secure score dashboard](windows-defender-atp\security-analytics-dashboard-windows-defender-advanced-threat-protection.md) #### [View the Threat analytics dashboard](windows-defender-atp\threat-analytics-windows-defender-advanced-threat-protection.md) ###Investigate and remediate threats From f7eddd127e4e2c7041165f0d2726a8406535ec74 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Thu, 8 Mar 2018 23:42:40 +0000 Subject: [PATCH 022/138] Merged PR 6260: Updated description for the ShellLauncher node in AssignedAccess CSP --- windows/client-management/mdm/assignedaccess-csp.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/client-management/mdm/assignedaccess-csp.md b/windows/client-management/mdm/assignedaccess-csp.md index 554704a16d..b08768dc86 100644 --- a/windows/client-management/mdm/assignedaccess-csp.md +++ b/windows/client-management/mdm/assignedaccess-csp.md @@ -101,6 +101,8 @@ Added in Windows 10,version 1803. This node accepts a ShellLauncherConfiguration > [!Note] > You cannot set both ShellLauncher and Configuration at the same time on the device. +> +> Configuring Shell Launcher using the ShellLauncher node automatically enables the Shell Launcher feature if it is available within the SKU.     **./Device/Vendor/MSFT/AssignedAccess/StatusConfiguration** Added in Windows 10, version 1803. This node accepts a StatusConfiguration xml as input to configure the Kiosk App Health monitoring. There are three possible values for StatusEnabled node inside StatusConfiguration xml: On, OnWithAlerts, and Off. Click [link](#statusconfiguration-xsd) to see the StatusConfiguration schema. From 9349e1eb5776b94282d79afd935a9021b3293032 Mon Sep 17 00:00:00 2001 From: chintanpatel Date: Fri, 9 Mar 2018 09:52:03 -0800 Subject: [PATCH 023/138] Update configure-wd-app-guard.md --- .../configure-wd-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md index 07eb24860e..991d95bf12 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md @@ -29,7 +29,7 @@ These settings, located at **Computer Configuration\Administrative Templates\Net |Policy name|Supported versions|Description| |-----------|------------------|-----------| |Private network ranges for apps|At least Windows Server 2012, Windows 8, or Windows RT|A comma-separated list of IP address ranges that are in your corporate network. Included endpoints or endpoints that are included within a specified IP address range, are rendered using Microsoft Edge and won't be accessible from the Application Guard environment.| -|Enterprise resource domains hosted in the cloud|At least Windows Server 2012, Windows 8, or Windows RT|A pipe-separated (\|) list of your domain cloud resources. Included endpoints are rendered using Microsoft Edge and won't be accessible from the Application Guard environment.| +|Enterprise resource domains hosted in the cloud|At least Windows Server 2012, Windows 8, or Windows RT|A pipe-separated (\|) list of your domain cloud resources. Included endpoints are rendered using Microsoft Edge and won't be accessible from the Application Guard environment. Notes: 1) Please include a full domain name (www.contoso.com) in the configuration 2) You may use "." as a wildcard character to automatically trust subdomains. Configuring '.constoso.com' will automatically trust 'subdomain1.contoso.com', 'subdomain2.contoso.com etc. | |Domains categorized as both work and personal|At least Windows Server 2012, Windows 8, or Windows RT|A comma-separated list of domain names used as both work or personal resources. Included endpoints are rendered using Microsoft Edge and won't be accessible from the Application Guard environment.| ### Application-specific settings From 69402bbf8ebf26ce79488d9cb16ddc21316adde8 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 10:02:15 -0800 Subject: [PATCH 024/138] testing intratopic links --- .../windows-analytics-FAQ-troubleshooting.md | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index a6c6ab8647..ac9b497002 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/07/2018 +ms.date: 03/09/2018 --- # Frequently asked questions and troubleshooting Windows Analytics @@ -19,7 +19,18 @@ This topic compiles the most common issues encountered with configuring and usin If you've followed the steps in the [Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. -Devices not showing up(#Devices not showing up) +Devices not showing up(#Devices-not-showing-up) + +Device Health data not appearing(#Device-Health-data-not-appearing) + +Upgrade Readiness reports outdated updates(#Upgrade-Readiness-reports-outdated-updates) + +Upgrade Readiness reports incomplete inventory(#Upgrade-Readiness-reports-incomplete-inventory) + +Upgrade Readiness doesn't show app inventory data on some devices(#Upgrade-Readiness-doesn't-show-app-inventory-data-on-some-devices) + +Upgrade Readiness doesn't show IE site discovery data from some devices(#Upgrade-Readiness-doesn't-show-IE-site-discovery-data-from-some-devices) + ### Devices not showing up @@ -30,7 +41,7 @@ Even though devices can take 2-3 days after enrollment to show up due to latency If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). [MERGE WHAT EXACTLY FROM WHERE?] - In the collected logs, the filename with a GUID has clear text that can be read to uncover common issues, so it's worth checking these logs prior to opening a support ticket. -- If you think the issue might be related a network proxy, check the endpoint connectivity[INTERNAL LINK]. Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. [WHY IS THAT BLOG POST LISTING DIFFERENT ENDPOINTS THAN WE ARE DOCUMENTING?] +- If you think the issue might be related a network proxy, check the endpoint connectivity(#Endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. [WHY IS THAT BLOG POST LISTING DIFFERENT ENDPOINTS THAN WE ARE DOCUMENTING?] ### Device Health data not appearing From df5352cd83ec4c6ffda5a16f67aef3b2b5aeb576 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 10:18:17 -0800 Subject: [PATCH 025/138] tweaking TOC --- windows/deployment/TOC.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index de56d4d613..42da0786c7 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -229,7 +229,7 @@ #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md) ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) -## [Windows Analytics] +## Windows Analytics ### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) @@ -254,6 +254,7 @@ ### [Device Health](update/device-health-monitor.md) #### [Get started with Device Health](update/device-health-get-started.md) #### [Using Device Health](update/device-health-using.md) +### [Troubleshooting Windows Analytics and FAQ](windows-analytics-FAQ-troubleshooting.md) ## [Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management](upgrade/upgrade-windows-phone-8-1-to-10.md) From 29b5f025a8a2a716b8592070e9efe8e62dda52dd Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 10:37:20 -0800 Subject: [PATCH 026/138] fix TOC error --- windows/deployment/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 42da0786c7..e2008ee5b6 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -254,7 +254,7 @@ ### [Device Health](update/device-health-monitor.md) #### [Get started with Device Health](update/device-health-get-started.md) #### [Using Device Health](update/device-health-using.md) -### [Troubleshooting Windows Analytics and FAQ](windows-analytics-FAQ-troubleshooting.md) +### [Troubleshooting Windows Analytics and FAQ](update/windows-analytics-FAQ-troubleshooting.md) ## [Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management](upgrade/upgrade-windows-phone-8-1-to-10.md) From 7c570be73f764be271c5de5c534ac9c7ac88025b Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 10:59:02 -0800 Subject: [PATCH 027/138] still fixing internal links --- .../windows-analytics-FAQ-troubleshooting.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index ac9b497002..903e8b32d5 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -17,19 +17,19 @@ This topic compiles the most common issues encountered with configuring and usin ## Troubleshooting common problems -If you've followed the steps in the [Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. +If you've followed the steps in the [Enrolling devices in Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. -Devices not showing up(#Devices-not-showing-up) +[Devices not showing up](#Devices-not-showing-up) -Device Health data not appearing(#Device-Health-data-not-appearing) +[Device Health data not appearing](#Device-Health-data-not-appearing) -Upgrade Readiness reports outdated updates(#Upgrade-Readiness-reports-outdated-updates) +[Upgrade Readiness reports outdated updates](#Upgrade-Readiness-reports-outdated-updates) -Upgrade Readiness reports incomplete inventory(#Upgrade-Readiness-reports-incomplete-inventory) +[Upgrade Readiness reports incomplete inventory](#Upgrade-Readiness-reports-incomplete-inventory) -Upgrade Readiness doesn't show app inventory data on some devices(#Upgrade-Readiness-doesn't-show-app-inventory-data-on-some-devices) +[Upgrade Readiness doesn't show app inventory data on some devices](#Upgrade-Readiness-doesn't-show-app-inventory-data-on-some-devices) -Upgrade Readiness doesn't show IE site discovery data from some devices(#Upgrade-Readiness-doesn't-show-IE-site-discovery-data-from-some-devices) +[Upgrade Readiness doesn't show IE site discovery data from some devices](#Upgrade-Readiness-doesn't-show-IE-site-discovery-data-from-some-devices) ### Devices not showing up From e814dbc200e8b73424228ee44837951ff18e5c76 Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Fri, 9 Mar 2018 11:26:26 -0800 Subject: [PATCH 028/138] typo "manage" instead of "manager" --- browsers/edge/available-policies.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 8f9901dcb2..016f1295f1 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -24,7 +24,7 @@ By using Group Policy and Intune, you can set up a policy setting once, and then > For more info about the tools you can use to change your Group Policy objects, see the Internet Explorer 11 topics, [Group Policy and the Group Policy Management Console (GPMC)](https://go.microsoft.com/fwlink/p/?LinkId=617921), [Group Policy and the Local Group Policy Editor](https://go.microsoft.com/fwlink/p/?LinkId=617922), [Group Policy and the Advanced Group Policy Management (AGPM)](https://go.microsoft.com/fwlink/p/?LinkId=617923), and [Group Policy and Windows PowerShell](https://go.microsoft.com/fwlink/p/?LinkId=617924). ## Group Policy settings -Microsoft Edge works with the following Group Policy settings to help you manager your company's web browser configurations. The Group Policy settings are found in the Group Policy Editor in the following location: +Microsoft Edge works with the following Group Policy settings to help you manage your company's web browser configurations. The Group Policy settings are found in the Group Policy Editor in the following location: `Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\` @@ -1007,4 +1007,4 @@ These are additional Windows 10-specific MDM policy settings that work with Mic - **1 (default).** Employees can sync between PCs. ## Related topics -* [Mobile Device Management (MDM) settings]( https://go.microsoft.com/fwlink/p/?LinkId=722885) \ No newline at end of file +* [Mobile Device Management (MDM) settings]( https://go.microsoft.com/fwlink/p/?LinkId=722885) From 3d599f14436c376c0718d20fc5ee5d682d49461f Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 12:06:56 -0800 Subject: [PATCH 029/138] populated some content on the WA landing node to unblock Greg --- windows/deployment/TOC.md | 2 +- .../update/windows-analytics-overview.md | 51 +++++++++++++++++++ 2 files changed, 52 insertions(+), 1 deletion(-) create mode 100644 windows/deployment/update/windows-analytics-overview.md diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index df889e6bbf..634d132448 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -229,7 +229,7 @@ #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md) ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) -## Windows Analytics +## [Windows Analytics](update/windows-analytics-overview.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) #### [Upgrade Readiness requirements](upgrade/upgrade-readiness-requirements.md) diff --git a/windows/deployment/update/windows-analytics-overview.md b/windows/deployment/update/windows-analytics-overview.md new file mode 100644 index 0000000000..d500f271dd --- /dev/null +++ b/windows/deployment/update/windows-analytics-overview.md @@ -0,0 +1,51 @@ +--- +title: Windows Analytics +description: Introduction and overview of Windows Analytics +keywords: Device Health, Upgrade Readiness, Update Compliance, oms, operations management suite, prerequisites, requirements, monitoring, crash, drivers +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.date: 03/09/2018 +ms.pagetype: deploy +author: jaimeo +--- + +# Windows Analytics overview + +Windows Analytics is a set of solutions for Microsoft Operations Management Suite (OMS) that provide you with extensive data about the state of devices in your deployment. There are currently three solutions which you can use singly or in any combination: + +## Device Health + +[Device Health](device-health-get-started.md) provides the following: + +- Identification of devices that crash frequently, and therefore might need to be rebuilt or replaced +- Identification of device drivers that are causing device crashes, with suggestions of alternative versions of those drivers that might reduce the number of crashes +- Notification of Windows Information Protection misconfigurations that send prompts to end users + + +## Update Compliance + +[Update Compliance](update-compliance-get-started.md) shows you the state of your devices with respect to the Windows updates so that you can ensure that they are on the most current updates as appropriate. In addition, Update Compliance provides the following: + +- Dedicated drill-downs for devices that might need attention +- An inventory of devices, including the version of Windows they are running and their update status +- The ability to track protection and threat status for Windows Defender Antivirus-enabled devices +- An overview of Windows Update for Business deferral configurations (Windows 10, version 1607 and later) +- Powerful built-in log analytics to create useful custom queries +- Cloud-connected access utilizing Windows 10 diagnostic data means no need for new complex, customized infrastructure + +## Upgrade Readiness + +[Upgrade Readiness](../upgrade/upgrade-readiness-get-started.md) offers a set of tools to plan and manage the upgrade process end to end, allowing you to adopt new Windows releases more quickly. With new Windows versions being released multiple times a year, ensuring application and driver compatibility on an ongoing basis is key to adopting new Windows versions as they are released. Upgrade Readiness not only supports upgrade management from Windows 7 and Windows 8.1 to Windows 10, but also Windows 10 upgrades in the Windows as a Service model. + +Use Upgrade Readiness to get: + +- A visual workflow that guides you from pilot to production +- Detailed computer and application inventory +- Powerful computer-level search and drill-downs +- Guidance and insights into application and driver compatibility issues, with suggested fixes +- Data-driven application rationalization tools +- Application usage information, allowing targeted validation; workflow to track validation progress and decisions +- Data export to commonly used software deployment tools, including System Center Configuration Manager + +To get started with any of these solutions, visit the links for instructions to add it to OMS. \ No newline at end of file From 049ea1f190f15b747f94e18cf1359db77264bb04 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Fri, 9 Mar 2018 20:23:01 +0000 Subject: [PATCH 030/138] Merged PR 6278: Add troubleshooting info for powerwash --- devices/hololens/hololens-provisioning.md | 3 +++ education/windows/change-history-edu.md | 8 ++++++- .../windows/windows-automatic-redeployment.md | 24 ++++++++++++++++++- 3 files changed, 33 insertions(+), 2 deletions(-) diff --git a/devices/hololens/hololens-provisioning.md b/devices/hololens/hololens-provisioning.md index 44d24432f7..2c07c79718 100644 --- a/devices/hololens/hololens-provisioning.md +++ b/devices/hololens/hololens-provisioning.md @@ -68,6 +68,9 @@ When you run ADKsetup.exe for Windows 10, version 1607, select **Configuration D 6. On the **Select security details for the provisioning package**, click **Next**. + >[WARNING!] + >If you encrypt the provisioning package, provisioning the HoloLens device will fail. + 7. Click **Next** to specify the output location where you want the provisioning package to go once it's built. By default, Windows Configuration Designer uses the project folder as the output location. Optionally, you can click **Browse** to change the default output location. diff --git a/education/windows/change-history-edu.md b/education/windows/change-history-edu.md index ca5709975a..0775c1d4c7 100644 --- a/education/windows/change-history-edu.md +++ b/education/windows/change-history-edu.md @@ -8,13 +8,19 @@ ms.sitesec: library ms.pagetype: edu author: CelesteDG ms.author: celested -ms.date: 11/27/2017 +ms.date: 03/08/2018 --- # Change history for Windows 10 for Education This topic lists new and updated topics in the [Windows 10 for Education](index.md) documentation. +## March 2018 + +New or changed topic | Description +--- | --- +[Reset devices with Windows Automatic Redeployment](windows-automatic-redeployment.md) | Added section for troubleshooting Windows Automatic Redeployment. + ## November 2017 | New or changed topic | Description | diff --git a/education/windows/windows-automatic-redeployment.md b/education/windows/windows-automatic-redeployment.md index cbeaace1d6..f65d87c10f 100644 --- a/education/windows/windows-automatic-redeployment.md +++ b/education/windows/windows-automatic-redeployment.md @@ -9,7 +9,7 @@ ms.pagetype: edu ms.localizationpriority: high author: CelesteDG ms.author: celested -ms.date: 12/11/2017 +ms.date: 03/08/2018 --- # Reset devices with Windows Automatic Redeployment @@ -25,6 +25,9 @@ To enable Windows Automatic Redeployment in Windows 10, version 1709 (Fall Creat 2. [Trigger a reset for each device](#trigger-windows-automatic-redeployment) ## Enable Windows Automatic Redeployment + +To use Windows Automatic Redeployment, [Windows Recovery Environment (WinRE) must be enabled on the device](#winre). + **DisableAutomaticReDeploymentCredentials** is a policy that enables or disables the visibility of the credentials for Windows Automatic Redeployment. It is a policy node in the [Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialproviders), **CredentialProviders/DisableAutomaticReDeploymentCredentials**. By default, this policy is set to 1 (Disable). This ensures that Windows Automatic Redeployment isn't triggered by accident. You can set the policy using one of these methods: @@ -84,6 +87,25 @@ Windows Automatic Redeployment is a two-step process: trigger it and then authen Once provisioning is complete, the device is again ready for use. + +## Troubleshoot Windows Automatic Redeployment + +Windows Automatic Redeployment will fail when the [Windows Recovery Environment (WinRE)](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-recovery-environment--windows-re--technical-reference) is not enabled on the device. You will see `Error code: ERROR_NOT_SUPPORTED (0x80070032)`. + +To check if WinRE is enabled, use the [REAgentC.exe tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/reagentc-command-line-options) to run the following command: + +``` +reagent /info +``` + +If WinRE is not enabled, use the [REAgentC.exe tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/reagentc-command-line-options) to run the following command: + +``` +reagent /enable +``` + +If Windows Automatic Reployment fails after enabling WinRE, or if you are unable to enable WinRE, please contact [Microsoft Support](https://support.microsoft.com) for assistance. + ## Related topics [Set up Windows devices for education](set-up-windows-10.md) From 23fca603011f3117eb0edd369732d00a69d4f37b Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 12:46:29 -0800 Subject: [PATCH 031/138] still trying to fix internal links --- .../windows-analytics-FAQ-troubleshooting.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 903e8b32d5..f39c74c83f 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -19,17 +19,17 @@ This topic compiles the most common issues encountered with configuring and usin If you've followed the steps in the [Enrolling devices in Windows Analytics](windows-analytics-get-started.md) topic and are still encountering problems, you might find the solution here. -[Devices not showing up](#Devices-not-showing-up) +[Devices not showing up](#devices-not-showing-up) -[Device Health data not appearing](#Device-Health-data-not-appearing) +[Device Health data not appearing](#device-health-data-not-appearing) -[Upgrade Readiness reports outdated updates](#Upgrade-Readiness-reports-outdated-updates) +[Upgrade Readiness reports outdated updates](#upgrade-readiness-reports-outdated-updates) -[Upgrade Readiness reports incomplete inventory](#Upgrade-Readiness-reports-incomplete-inventory) +[Upgrade Readiness reports incomplete inventory](#upgrade-readiness-reports-incomplete-inventory) -[Upgrade Readiness doesn't show app inventory data on some devices](#Upgrade-Readiness-doesn't-show-app-inventory-data-on-some-devices) +[Upgrade Readiness doesn't show app inventory data on some devices](#upgrade-readiness-doesn't-show-app-inventory-data-on-some-devices) -[Upgrade Readiness doesn't show IE site discovery data from some devices](#Upgrade-Readiness-doesn't-show-IE-site-discovery-data-from-some-devices) +[Upgrade Readiness doesn't show IE site discovery data from some devices](#upgrade-readiness-doesn't-show-ie-site-discovery-data-from-some-devices) ### Devices not showing up @@ -58,7 +58,7 @@ If you need further information on Windows Error Reporting (WER) settings, see W #### Endpoint connectivity -Devices must be able to reach the endpoints specified in (windows-analytics-get-started.md). +Devices must be able to reach the endpoints specified in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. From 1373401dff3a66eb05b724fe65baffb310b4a535 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Mar 2018 13:25:06 -0800 Subject: [PATCH 032/138] still fixing internal links --- .../update/windows-analytics-FAQ-troubleshooting.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index f39c74c83f..608d68218f 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -27,9 +27,9 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win [Upgrade Readiness reports incomplete inventory](#upgrade-readiness-reports-incomplete-inventory) -[Upgrade Readiness doesn't show app inventory data on some devices](#upgrade-readiness-doesn't-show-app-inventory-data-on-some-devices) +[Upgrade Readiness doesn't show app inventory data on some devices](#upgrade-readiness-doesnt-show-app-inventory-data-on-some-devices) -[Upgrade Readiness doesn't show IE site discovery data from some devices](#upgrade-readiness-doesn't-show-ie-site-discovery-data-from-some-devices) +[Upgrade Readiness doesn't show IE site discovery data from some devices](#upgrade-readiness-doesnt-show-ie-site-discovery-data-from-some-devices) ### Devices not showing up From e7244ca35ee7750dfa0faf52ac5ce835c1c540ba Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 9 Mar 2018 22:55:01 +0000 Subject: [PATCH 033/138] Merged PR 6285: Add new yaml index to deployment node with cards Add new yaml index to deployment node with cards --- windows/deployment/TOC.md | 2 +- .../change-history-for-deploy-windows-10.md | 2 +- windows/deployment/docfx.json | 3 +- windows/deployment/index.md | 76 ------------- windows/deployment/index.yml | 104 ++++++++++++++++++ .../change-history-for-update-windows-10.md | 2 +- 6 files changed, 109 insertions(+), 80 deletions(-) delete mode 100644 windows/deployment/index.md create mode 100644 windows/deployment/index.yml diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 634d132448..b110f3c3c8 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -1,4 +1,4 @@ -# [Deploy and update Windows 10](index.md) +# [Deploy and update Windows 10](https://docs.microsoft.com/en-us/windows/deployment) ## [What's new in Windows 10 deployment](deploy-whats-new.md) ## [Windows 10 deployment scenarios](windows-10-deployment-scenarios.md) diff --git a/windows/deployment/change-history-for-deploy-windows-10.md b/windows/deployment/change-history-for-deploy-windows-10.md index bd0da028fe..5f48b4eb49 100644 --- a/windows/deployment/change-history-for-deploy-windows-10.md +++ b/windows/deployment/change-history-for-deploy-windows-10.md @@ -10,7 +10,7 @@ ms.date: 11/08/2017 --- # Change history for Deploy Windows 10 -This topic lists new and updated topics in the [Deploy Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](/windows/windows-10). +This topic lists new and updated topics in the [Deploy Windows 10](https://docs.microsoft.com/en-us/windows/deployment) documentation for [Windows 10 and Windows 10 Mobile](/windows/windows-10). ## November 2017 diff --git a/windows/deployment/docfx.json b/windows/deployment/docfx.json index 0c1117e840..353f473c8c 100644 --- a/windows/deployment/docfx.json +++ b/windows/deployment/docfx.json @@ -3,7 +3,8 @@ "content": [ { "files": [ - "**/*.md" + "**/*.md", + "**/*.yml" ], "exclude": [ "**/obj/**", diff --git a/windows/deployment/index.md b/windows/deployment/index.md deleted file mode 100644 index f63641d04f..0000000000 --- a/windows/deployment/index.md +++ /dev/null @@ -1,76 +0,0 @@ ---- -title: Deploy and update Windows 10 (Windows 10) -description: Deploying and updating Windows 10 for IT professionals. -ms.assetid: E9E2DED5-DBA7-4300-B411-BA0FD39BE18C -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.localizationpriority: high -ms.date: 12/13/2017 -author: greg-lindsay ---- - -# Deploy and update Windows 10 - -Learn about deployment in Windows 10 for IT professionals. This includes deploying the operating system, upgrading to it from previous versions and updating Windows 10. The following sections and topics are available. - -|Topic |Description | -|------|------------| -|[What's new in Windows 10 deployment](deploy-whats-new.md) |See this topic for a summary of new features and some recent changes related to deploying Windows 10 in your organization. | -|[Windows 10 deployment scenarios](windows-10-deployment-scenarios.md) |To successfully deploy the Windows 10 operating system in your organization, it is important to understand the different ways that it can be deployed, especially now that there are new scenarios to consider. Choosing among these scenarios, and understanding the key capabilities and limitations of each, is a key task. | -|[Windows 10 Subscription Activation](windows-10-enterprise-subscription-activation.md) |Windows 10 Enterprise has traditionally been sold as on premises software, however, with Windows 10 version 1703 (also known as the Creator’s Update), both Windows 10 Enterprise E3 and Windows 10 Enterprise E5 are available as true online services via subscription. You can move from Windows 10 Pro to Windows 10 Enterprise with no keys and no reboots. If you are using a Cloud Service Providers (CSP) see the related topic: [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md). | -|[Resolve Windows 10 upgrade errors](upgrade/resolve-windows-10-upgrade-errors.md) |This topic provides a brief introduction to Windows 10 installation processes, and provides resolution procedures that IT administrators can use to resolve issues with Windows 10 upgrade. | - - -## Deploy Windows 10 - -Windows 10 upgrade options are discussed and information is provided about planning, testing, and managing your production deployment. - -|Topic |Description | -|------|------------| -|[Overview of Windows AutoPilot](windows-autopilot/windows-10-autopilot.md) |Windows AutoPilot deployment is a new cloud service from Microsoft that provides a zero touch experience for deploying Windows 10 devices. | -|[Windows 10 upgrade paths](upgrade/windows-10-upgrade-paths.md) |This topic provides information about support for upgrading directly to Windows 10 from a previous operating system. | -|[Windows 10 edition upgrade](upgrade/windows-10-edition-upgrades.md) |This topic provides information about support for upgrading from one edition of Windows 10 to another. | -|[Windows 10 volume license media](windows-10-media.md) |This topic provides information about media available in the Microsoft Volume Licensing Service Center. | -|[Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) |With Upgrade Readiness, enterprises now have the tools to plan and manage the upgrade process end to end, allowing them to adopt new Windows releases more quickly. With Windows diagnostic data enabled, Upgrade Readiness collects system, application, and driver data for analysis. We then identify compatibility issues that can block an upgrade and suggest fixes when they are known to Microsoft. The Upgrade Readiness workflow steps you through the discovery and rationalization process until you have a list of computers that are ready to be upgraded. | -|[Windows 10 deployment test lab](windows-10-poc.md) |This guide contains instructions to configure a proof of concept (PoC) environment requiring a minimum amount of resources. The guide makes extensive use of Windows PowerShell and Hyper-V. Subsequent companion guides contain steps to deploy Windows 10 using the PoC environment. After completing this guide, additional guides are provided to deploy Windows 10 in the test lab using [Microsoft Deployment Toolkit](windows-10-poc-mdt.md) or [System Center Configuration Manager](windows-10-poc-sc-config-mgr.md). | -|[Plan for Windows 10 deployment](planning/index.md) | This section describes Windows 10 deployment considerations and provides information to assist in Windows 10 deployment planning. | -|[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) |This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). | -|[Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) |If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT) or. | -|[Windows 10 deployment tools](windows-10-deployment-tools-reference.md) |Learn about available tools to deploy Windows 10, such as the Windows ADK, DISM, USMT, WDS, MDT, Windows PE and more. | - -## Update Windows 10 - -Information is provided about keeping Windows 10 up-to-date. - -|Topic |Description | -|------|------------| -| [Quick guide to Windows as a service](update/waas-quick-start.md) | Provides a brief summary of the key points for the new servicing model for Windows 10. | -| [Overview of Windows as a service](update/waas-overview.md) | Explains the differences in building, deploying, and servicing Windows 10; introduces feature updates, quality updates, and the different servicing branches; compares servicing tools. | -| [Prepare servicing strategy for Windows 10 updates](update/waas-servicing-strategy-windows-10-updates.md) | Explains the decisions you need to make in your servicing strategy. | -| [Build deployment rings for Windows 10 updates](update/waas-deployment-rings-windows-10-updates.md) | Explains how to make use of servicing branches and update deferrals to manage Windows 10 updates. | -| [Assign devices to servicing branches for Windows 10 updates](update/waas-servicing-branches-windows-10-updates.md) | Explains how to assign devices to Current Branch (CB) or Current Branch for Business (CBB) for feature and quality updates, and how to enroll devices in Windows Insider. | -| [Monitor Windows Updates with Update Compliance](update/update-compliance-monitor.md) | Explains how to use Windows Analytics: Update Compliance to monitor and manage Windows Updates on devices in your organization. | -| [Optimize update delivery for Windows 10 updates](update/waas-optimize-windows-10-updates.md) | Explains the benefits of using Delivery Optimization or BranchCache for update distribution. | -| [Deploy updates for Windows 10 Mobile Enterprise and Windows 10 IoT Mobile](update/waas-mobile-updates.md) | Explains updates for Windows 10 Mobile Enterprise and Windows 10 IoT Mobile. | -| [Deploy updates using Windows Update for Business](update/waas-manage-updates-wufb.md) | Explains how to use Windows Update for Business to manage when devices receive updates directly from Windows Update. Includes walkthroughs for configuring Windows Update for Business using Group Policy and Microsoft Intune. | -| [Deploy Windows 10 updates using Windows Server Update Services (WSUS)](update/waas-manage-updates-wsus.md) | Explains how to use WSUS to manage Windows 10 updates. | -| [Deploy Windows 10 updates using System Center Configuration Manager](update/waas-manage-updates-configuration-manager.md) | Explains how to use Configuration Manager to manage Windows 10 updates. | -| [Manage device restarts after updates](update/waas-restart.md) | Explains how to manage update related device restarts. | -| [Manage additional Windows Update settings](update/waas-wu-settings.md) | Provides details about settings available to control and configure Windows Update | -| [Windows Insider Program for Business](update/waas-windows-insider-for-business.md) | Explains how the Windows Insider Program for Business works and how to become an insider. | - -## Additional topics - -|Topic |Description | -|------|------------| -|[Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management](upgrade/upgrade-windows-phone-8-1-to-10.md) |This topic describes how to upgrade eligible Windows Phone 8.1 devices to Windows 10 Mobile. | - -  - -  - - - - - diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml new file mode 100644 index 0000000000..649a715cf9 --- /dev/null +++ b/windows/deployment/index.yml @@ -0,0 +1,104 @@ +### YamlMime:YamlDocument + +documentType: LandingData +title: Deploy and update Windows 10 +metadata: + document_id: + title: Deploy and update Windows 10 + description: Deploying and updating Windows 10 for IT professionals. + keywords: deploy, update, Windows, service, Microsoft365, e5, e3 + ms.localizationpriority: high + author: greg-lindsay + ms.author: greglin + manager: elizapo + ms.date: 02/09/2018 + ms.topic: article + ms.devlang: na + +sections: +- items: + - type: markdown + text: Learn about deployment of Windows 10 for IT professionals. This includes deploying the operating system, upgrading to it from previous versions and updating Windows 10. +- items: + - type: list + style: cards + className: cardsM + columns: 3 + items: + - href: windows-10-deployment-scenarios + html:

    Understand the different ways that Windows 10 can be deployed

    + image: + src: https://docs.microsoft.com/en-us/media/common/i_deploy.svg" + title: Windows 10 deployment scenarios + - href: update + html:

    Update Windows 10 in the enterprise

    + image: + src: https://docs.microsoft.com/media/common/i_upgrade.svg + title: Windows as a service + - href: upgrade/windows-analytics-overview + html:

    Windows Analytics provides deep insights into your Windows 10 environment.

    + image: + src: https://docs.microsoft.com/media/common/i_investigate.svg + title: Windows Analytics +- title: +- items: + - type: markdown + text: " +
    + + + + + +
    [What's new in Windows 10 deployment](deploy-whats-new.md) See this topic for a summary of new features and some recent changes related to deploying Windows 10 in your organization.
    [Windows 10 deployment scenarios](windows-10-deployment-scenarios.md) To successfully deploy the Windows 10 operating system in your organization, it is important to understand the different ways that it can be deployed, especially now that there are new scenarios to consider. Choosing among these scenarios, and understanding the key capabilities and limitations of each, is a key task.
    [Windows 10 Subscription Activation](windows-10-enterprise-subscription-activation.md) Windows 10 Enterprise has traditionally been sold as on premises software, however, with Windows 10 version 1703 (also known as the Creator’s Update), both Windows 10 Enterprise E3 and Windows 10 Enterprise E5 are available as true online services via subscription. You can move from Windows 10 Pro to Windows 10 Enterprise with no keys and no reboots. If you are using a Cloud Service Providers (CSP) see the related topic: [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md).
    [Resolve Windows 10 upgrade errors](upgrade/resolve-windows-10-upgrade-errors.md) This topic provides a brief introduction to Windows 10 installation processes, and provides resolution procedures that IT administrators can use to resolve issues with Windows 10 upgrade.
    + " +- title: Deploy Windows 10 +- items: + - type: markdown + text: " + Windows 10 upgrade options are discussed and information is provided about planning, testing, and managing your production deployment. +
     
    + + + + + + + + + + + +
    TopicDescription
    [Overview of Windows AutoPilot](windows-autopilot/windows-10-autopilot.md) Windows AutoPilot deployment is a new cloud service from Microsoft that provides a zero touch experience for deploying Windows 10 devices.
    [Windows 10 upgrade paths](upgrade/windows-10-upgrade-paths.md) This topic provides information about support for upgrading directly to Windows 10 from a previous operating system.
    [Windows 10 edition upgrade](upgrade/windows-10-edition-upgrades.md) This topic provides information about support for upgrading from one edition of Windows 10 to another.
    [Windows 10 volume license media](windows-10-media.md) This topic provides information about media available in the Microsoft Volume Licensing Service Center.
    [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) With Upgrade Readiness, enterprises now have the tools to plan and manage the upgrade process end to end, allowing them to adopt new Windows releases more quickly. With Windows diagnostic data enabled, Upgrade Readiness collects system, application, and driver data for analysis. We then identify compatibility issues that can block an upgrade and suggest fixes when they are known to Microsoft. The Upgrade Readiness workflow steps you through the discovery and rationalization process until you have a list of computers that are ready to be upgraded.
    [Windows 10 deployment test lab](windows-10-poc.md) This guide contains instructions to configure a proof of concept (PoC) environment requiring a minimum amount of resources. The guide makes extensive use of Windows PowerShell and Hyper-V. Subsequent companion guides contain steps to deploy Windows 10 using the PoC environment. After completing this guide, additional guides are provided to deploy Windows 10 in the test lab using [Microsoft Deployment Toolkit](windows-10-poc-mdt.md) or [System Center Configuration Manager](windows-10-poc-sc-config-mgr.md).
    [Plan for Windows 10 deployment](planning/index.md) This section describes Windows 10 deployment considerations and provides information to assist in Windows 10 deployment planning.
    [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT).
    [Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT) or.
    [Windows 10 deployment tools](windows-10-deployment-tools-reference.md) Learn about available tools to deploy Windows 10, such as the Windows ADK, DISM, USMT, WDS, MDT, Windows PE and more.
    + " +- title: Update Windows 10 +- items: + - type: markdown + text: " + Information is provided about keeping Windows 10 up-to-date. +
     
    + + + + + + + + + + + + + + + +
    TopicDescription
    [Quick guide to Windows as a service](update/waas-quick-start.md) Provides a brief summary of the key points for the new servicing model for Windows 10.
    [Overview of Windows as a service](update/waas-overview.md) Explains the differences in building, deploying, and servicing Windows 10; introduces feature updates, quality updates, and the different servicing branches; compares servicing tools.
    [Prepare servicing strategy for Windows 10 updates](update/waas-servicing-strategy-windows-10-updates.md) Explains the decisions you need to make in your servicing strategy.
    [Build deployment rings for Windows 10 updates](update/waas-deployment-rings-windows-10-updates.md) Explains how to make use of servicing branches and update deferrals to manage Windows 10 updates.
    [Assign devices to servicing branches for Windows 10 updates](update/waas-servicing-branches-windows-10-updates.md) Explains how to assign devices to Current Branch (CB) or Current Branch for Business (CBB) for feature and quality updates, and how to enroll devices in Windows Insider.
    [Monitor Windows Updates with Update Compliance](update/update-compliance-monitor.md) Explains how to use Windows Analytics: Update Compliance to monitor and manage Windows Updates on devices in your organization.
    [Optimize update delivery for Windows 10 updates](update/waas-optimize-windows-10-updates.md) Explains the benefits of using Delivery Optimization or BranchCache for update distribution.
    [Deploy updates for Windows 10 Mobile Enterprise and Windows 10 IoT Mobile](update/waas-mobile-updates.md) Explains updates for Windows 10 Mobile Enterprise and Windows 10 IoT Mobile.
    [Deploy updates using Windows Update for Business](update/waas-manage-updates-wufb.md) Explains how to use Windows Update for Business to manage when devices receive updates directly from Windows Update. Includes walkthroughs for configuring Windows Update for Business using Group Policy and Microsoft Intune.
    [Deploy Windows 10 updates using Windows Server Update Services (WSUS)](update/waas-manage-updates-wsus.md) Explains how to use WSUS to manage Windows 10 updates.
    [Deploy Windows 10 updates using System Center Configuration Manager](update/waas-manage-updates-configuration-manager.md) Explains how to use Configuration Manager to manage Windows 10 updates.
    [Manage device restarts after updates](update/waas-restart.md) Explains how to manage update related device restarts.
    [Manage additional Windows Update settings](update/waas-wu-settings.md) Provides details about settings available to control and configure Windows Update.
    [Windows Insider Program for Business](update/waas-windows-insider-for-business.md) Explains how the Windows Insider Program for Business works and how to become an insider.
    + " +- title: Additional topics +- items: + - type: markdown + text: " +
    + [Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management](upgrade/upgrade-windows-phone-8-1-to-10.md) This topic describes how to upgrade eligible Windows Phone 8.1 devices to Windows 10 Mobile. + +  " diff --git a/windows/deployment/update/change-history-for-update-windows-10.md b/windows/deployment/update/change-history-for-update-windows-10.md index 6df6256b76..e76b08389c 100644 --- a/windows/deployment/update/change-history-for-update-windows-10.md +++ b/windows/deployment/update/change-history-for-update-windows-10.md @@ -11,7 +11,7 @@ ms.date: 10/17/2017 # Change history for Update Windows 10 -This topic lists new and updated topics in the [Update Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md). +This topic lists new and updated topics in the [Update Windows 10](index.md) documentation for [Deploy and Update Windows 10](https://docs.microsoft.com/en-us/windows/deployment). >If you're looking for **update history** for Windows 10, see [Windows 10 and Windows Server 2016 update history](https://support.microsoft.com/help/12387/windows-10-update-history). From 580647e1ce85f09ba910c8a58c4000d384d8093b Mon Sep 17 00:00:00 2001 From: Nicholas Brower Date: Fri, 9 Mar 2018 23:00:00 +0000 Subject: [PATCH 034/138] Merged PR 6284: "updated policies supported by GP" includes new ADMX-backed policies --- .../mdm/policy-csp-applicationmanagement.md | 7 +- .../mdm/policy-csp-appruntime.md | 77 ++++++ .../mdm/policy-csp-credentialsdelegation.md | 79 ++++++ .../mdm/policy-csp-deliveryoptimization.md | 48 ++-- .../mdm/policy-csp-devicelock.md | 44 +++- .../mdm/policy-csp-fileexplorer.md | 111 ++++++++ .../mdm/policy-csp-internetexplorer.md | 193 ++++++++++++-- .../mdm/policy-csp-mssecurityguide.md | 245 ++++++++++++++++++ .../mdm/policy-csp-msslegacy.md | 175 +++++++++++++ .../client-management/mdm/policy-csp-power.md | 44 +++- .../policy-csp-windowsconnectionmanager.md | 85 ++++++ .../mdm/policy-csp-windowslogon.md | 86 +++++- .../mdm/policy-csp-windowspowershell.md | 82 ++++++ 13 files changed, 1232 insertions(+), 44 deletions(-) create mode 100644 windows/client-management/mdm/policy-csp-appruntime.md create mode 100644 windows/client-management/mdm/policy-csp-credentialsdelegation.md create mode 100644 windows/client-management/mdm/policy-csp-fileexplorer.md create mode 100644 windows/client-management/mdm/policy-csp-mssecurityguide.md create mode 100644 windows/client-management/mdm/policy-csp-msslegacy.md create mode 100644 windows/client-management/mdm/policy-csp-windowsconnectionmanager.md create mode 100644 windows/client-management/mdm/policy-csp-windowspowershell.md diff --git a/windows/client-management/mdm/policy-csp-applicationmanagement.md b/windows/client-management/mdm/policy-csp-applicationmanagement.md index 5822ec21c5..634f53cafc 100644 --- a/windows/client-management/mdm/policy-csp-applicationmanagement.md +++ b/windows/client-management/mdm/policy-csp-applicationmanagement.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/09/2018 --- # Policy CSP - ApplicationManagement @@ -569,6 +569,7 @@ The following list shows the supported values: > [!div class = "checklist"] > * User +> * Device
    @@ -582,9 +583,7 @@ Most restricted value is 1. ADMX Info: -- GP English name: *Only display the private store within the Microsoft Store* -- GP name: *RequirePrivateStoreOnly_1* -- GP path: *Windows Components/Store* +- GP name: *RequirePrivateStoreOnly* - GP ADMX file name: *WindowsStore.admx* diff --git a/windows/client-management/mdm/policy-csp-appruntime.md b/windows/client-management/mdm/policy-csp-appruntime.md new file mode 100644 index 0000000000..941e26cef4 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-appruntime.md @@ -0,0 +1,77 @@ +--- +title: Policy CSP - AppRuntime +description: Policy CSP - AppRuntime +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/09/2018 +--- + +# Policy CSP - AppRuntime + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + + +## AppRuntime policies + +
    +
    + AppRuntime/AllowMicrosoftAccountsToBeOptional +
    +
    + + +
    + + +**AppRuntime/AllowMicrosoftAccountsToBeOptional** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +This policy setting lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in. This policy only affects Windows Store apps that support it. + +If you enable this policy setting, Windows Store apps that typically require a Microsoft account to sign in will allow users to sign in with an enterprise account instead. + +If you disable or do not configure this policy setting, users will need to sign in with a Microsoft account. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow Microsoft accounts to be optional* +- GP name: *AppxRuntimeMicrosoftAccountsOptional* +- GP path: *Windows Components/App runtime* +- GP ADMX file name: *AppXRuntime.admx* + + + +
    + +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. + + + diff --git a/windows/client-management/mdm/policy-csp-credentialsdelegation.md b/windows/client-management/mdm/policy-csp-credentialsdelegation.md new file mode 100644 index 0000000000..1e465a7a21 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-credentialsdelegation.md @@ -0,0 +1,79 @@ +--- +title: Policy CSP - CredentialsDelegation +description: Policy CSP - CredentialsDelegation +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/09/2018 +--- + +# Policy CSP - CredentialsDelegation + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + + +## CredentialsDelegation policies + +
    +
    + CredentialsDelegation/RemoteHostAllowsDelegationOfNonExportableCredentials +
    +
    + + +
    + + +**CredentialsDelegation/RemoteHostAllowsDelegationOfNonExportableCredentials** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Remote host allows delegation of non-exportable credentials + +When using credential delegation, devices provide an exportable version of credentials to the remote host. This exposes users to the risk of credential theft from attackers on the remote host. + +If you enable this policy setting, the host supports Restricted Admin or Remote Credential Guard mode. + +If you disable or do not configure this policy setting, Restricted Administration and Remote Credential Guard mode are not supported. User will always need to pass their credentials to the host. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remote host allows delegation of non-exportable credentials* +- GP name: *AllowProtectedCreds* +- GP path: *System/Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. + + + diff --git a/windows/client-management/mdm/policy-csp-deliveryoptimization.md b/windows/client-management/mdm/policy-csp-deliveryoptimization.md index 2dda85153c..849fcb5d99 100644 --- a/windows/client-management/mdm/policy-csp-deliveryoptimization.md +++ b/windows/client-management/mdm/policy-csp-deliveryoptimization.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/09/2018 --- # Policy CSP - DeliveryOptimization @@ -1217,6 +1217,13 @@ Added in Windows 10, version 1803. Specifies the maximum background download ban Note that downloads from LAN peers will not be throttled even when this policy is set. + +ADMX Info: +- GP name: *PercentageMaxBackgroundBandwidth* +- GP element: *PercentageMaxBackgroundBandwidth* +- GP ADMX file name: *DeliveryOptimization.admx* + +
    @@ -1273,6 +1280,13 @@ Added in Windows 10, version 1803. Specifies the maximum foreground download ban Note that downloads from LAN peers will not be throttled even when this policy is set. + +ADMX Info: +- GP name: *PercentageMaxForegroundBandwidth* +- GP element: *PercentageMaxForegroundBandwidth* +- GP ADMX file name: *DeliveryOptimization.admx* + +
    @@ -1377,14 +1391,6 @@ The following list shows the supported values: Added in Windows 10, version 1803. Specifies the maximum background download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth. - -This policy allows an IT Admin to define the following: - -- Business hours range (for example 06:00 to 18:00) -- % of throttle for background traffic during business hours -- % of throttle for background traffic outside of business hours - - > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1400,6 +1406,14 @@ ADMX Info: - GP ADMX file name: *DeliveryOptimization.admx* + +This policy allows an IT Admin to define the following: + +- Business hours range (for example 06:00 to 18:00) +- % of throttle for background traffic during business hours +- % of throttle for background traffic outside of business hours + +
    @@ -1443,14 +1457,6 @@ ADMX Info: Added in Windows 10, version 1803. Specifies the maximum foreground download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth. - -This policy allows an IT Admin to define the following: - -- Business hours range (for example 06:00 to 18:00) -- % of throttle for foreground traffic during business hours -- % of throttle for foreground traffic outside of business hours - - > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1466,6 +1472,14 @@ ADMX Info: - GP ADMX file name: *DeliveryOptimization.admx* + +This policy allows an IT Admin to define the following: + +- Business hours range (for example 06:00 to 18:00) +- % of throttle for foreground traffic during business hours +- % of throttle for foreground traffic outside of business hours + +
    diff --git a/windows/client-management/mdm/policy-csp-devicelock.md b/windows/client-management/mdm/policy-csp-devicelock.md index e418951b10..5663570085 100644 --- a/windows/client-management/mdm/policy-csp-devicelock.md +++ b/windows/client-management/mdm/policy-csp-devicelock.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/09/2018 --- # Policy CSP - DeviceLock @@ -66,6 +66,9 @@ ms.date: 03/05/2018
    DeviceLock/MinimumPasswordAge
    +
    + DeviceLock/PreventEnablingLockScreenCamera +
    DeviceLock/PreventLockScreenSlideShow
    @@ -1030,6 +1033,45 @@ GP Info:
    + +**DeviceLock/PreventEnablingLockScreenCamera** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Disables the lock screen camera toggle switch in PC Settings and prevents a camera from being invoked on the lock screen. + +By default, users can enable invocation of an available camera on the lock screen. + +If you enable this setting, users will no longer be able to enable or disable lock screen camera access in PC Settings, and the camera cannot be invoked on the lock screen. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent enabling lock screen camera* +- GP name: *CPL_Personalization_NoLockScreenCamera* +- GP path: *Control Panel/Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + + +
    + **DeviceLock/PreventLockScreenSlideShow** diff --git a/windows/client-management/mdm/policy-csp-fileexplorer.md b/windows/client-management/mdm/policy-csp-fileexplorer.md new file mode 100644 index 0000000000..13c169e91b --- /dev/null +++ b/windows/client-management/mdm/policy-csp-fileexplorer.md @@ -0,0 +1,111 @@ +--- +title: Policy CSP - FileExplorer +description: Policy CSP - FileExplorer +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/09/2018 +--- + +# Policy CSP - FileExplorer + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + + +## FileExplorer policies + +
    +
    + FileExplorer/TurnOffDataExecutionPreventionForExplorer +
    +
    + FileExplorer/TurnOffHeapTerminationOnCorruption +
    +
    + + +
    + + +**FileExplorer/TurnOffDataExecutionPreventionForExplorer** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Data Execution Prevention for Explorer* +- GP name: *NoDataExecutionPrevention* +- GP path: *File Explorer* +- GP ADMX file name: *Explorer.admx* + + + + +
    + + +**FileExplorer/TurnOffHeapTerminationOnCorruption** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off heap termination on corruption* +- GP name: *NoHeapTerminationOnCorruption* +- GP path: *File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. + + + diff --git a/windows/client-management/mdm/policy-csp-internetexplorer.md b/windows/client-management/mdm/policy-csp-internetexplorer.md index 23a0b5a050..ff5dd18eae 100644 --- a/windows/client-management/mdm/policy-csp-internetexplorer.md +++ b/windows/client-management/mdm/policy-csp-internetexplorer.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/09/2018 --- # Policy CSP - InternetExplorer @@ -238,6 +238,9 @@ ms.date: 03/05/2018
    InternetExplorer/InternetZoneAllowUserDataPersistence
    +
    + InternetExplorer/InternetZoneAllowVBScriptToRunInInternetExplorer +
    InternetExplorer/InternetZoneDoNotRunAntimalwareAgainstActiveXControls
    @@ -406,6 +409,9 @@ ms.date: 03/05/2018
    InternetExplorer/LockedDownInternetZoneNavigateWindowsAndFrames
    +
    + InternetExplorer/LockedDownIntranetJavaPermissions +
    InternetExplorer/LockedDownIntranetZoneAllowAccessToDataSources
    @@ -637,6 +643,9 @@ ms.date: 03/05/2018
    InternetExplorer/RestrictedSitesZoneAllowUserDataPersistence
    +
    + InternetExplorer/RestrictedSitesZoneAllowVBScriptToRunInInternetExplorer +
    InternetExplorer/RestrictedSitesZoneDoNotRunAntimalwareAgainstActiveXControls
    @@ -5530,6 +5539,50 @@ ADMX Info:
    + +**InternetExplorer/InternetZoneAllowVBScriptToRunInInternetExplorer** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User +> * Device + +
    + + + +This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer. + +If you selected Enable in the drop-down box, VBScript can run without user intervention. + +If you selected Prompt in the drop-down box, users are asked to choose whether to allow VBScript to run. + +If you selected Disable in the drop-down box, VBScript is prevented from running. + +If you do not configure or disable this policy setting, VBScript is prevented from running. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow VBScript to run in Internet Explorer* +- GP name: *IZ_PolicyAllowVBScript_1* +- GP path: *Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone* +- GP ADMX file name: *inetres.admx* + + + + +
    + **InternetExplorer/InternetZoneDoNotRunAntimalwareAgainstActiveXControls** @@ -9180,6 +9233,54 @@ ADMX Info:
    + +**InternetExplorer/LockedDownIntranetJavaPermissions** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User +> * Device + +
    + + + +This policy setting allows you to manage permissions for Java applets. + +If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. + +Low Safety enables applets to perform all operations. + +Medium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O. + +High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. + +If you disable this policy setting, Java applets cannot run. + +If you do not configure this policy setting, Java applets are disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Java permissions* +- GP name: *IZ_PolicyJavaPermissions_4* +- GP path: *Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Intranet Zone* +- GP ADMX file name: *inetres.admx* + + + + +
    + **InternetExplorer/LockedDownIntranetZoneAllowAccessToDataSources** @@ -12619,11 +12720,13 @@ ADMX Info: -Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local Machine zone, and so on). For example, Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone, making the Local Machine security zone a prime target for malicious users. +Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local Machine zone, etc.). Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone, making the Local Machine security zone a prime target for malicious users. Zone Elevation also disables JavaScript navigation if there is no security context. -If you enable this policy setting, any zone can be protected from zone elevation for all processes. +If you enable this policy setting, any zone can be protected from zone elevation by Internet Explorer processes. -If you disable or do not configure this policy setting, processes other than Internet Explorer or those listed in the Process List receive no such protection. +If you disable this policy setting, no zone receives such protection for Internet Explorer processes. + +If you do not configure this policy setting, any zone can be protected from zone elevation by Internet Explorer processes. > [!TIP] @@ -12635,8 +12738,8 @@ If you disable or do not configure this policy setting, processes other than Int ADMX Info: -- GP English name: *All Processes* -- GP name: *IESF_PolicyAllProcesses_9* +- GP English name: *Internet Explorer Processes* +- GP name: *IESF_PolicyExplorerProcesses_9* - GP path: *Windows Components/Internet Explorer/Security Features/Protection From Zone Elevation* - GP ADMX file name: *inetres.admx* @@ -12747,11 +12850,13 @@ ADMX Info: -This policy setting enables applications hosting the Web Browser Control to block automatic prompting of ActiveX control installation. +This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. -If you enable this policy setting, the Web Browser Control will block automatic prompting of ActiveX control installation for all processes. +If you enable this policy setting, prompting for ActiveX control installations will be blocked for Internet Explorer processes. -If you disable or do not configure this policy setting, the Web Browser Control will not block automatic prompting of ActiveX control installation for all processes. +If you disable this policy setting, prompting for ActiveX control installations will not be blocked for Internet Explorer processes. + +If you do not configure this policy setting, the user's preference will be used to determine whether to block ActiveX control installations for Internet Explorer processes. > [!TIP] @@ -12763,8 +12868,8 @@ If you disable or do not configure this policy setting, the Web Browser Control ADMX Info: -- GP English name: *All Processes* -- GP name: *IESF_PolicyAllProcesses_11* +- GP English name: *Internet Explorer Processes* +- GP name: *IESF_PolicyExplorerProcesses_11* - GP path: *Windows Components/Internet Explorer/Security Features/Restrict ActiveX Install* - GP ADMX file name: *inetres.admx* @@ -12810,11 +12915,13 @@ ADMX Info: -This policy setting enables applications hosting the Web Browser Control to block automatic prompting of file downloads that are not user initiated. +This policy setting enables blocking of file download prompts that are not user initiated. -If you enable this policy setting, the Web Browser Control will block automatic prompting of file downloads that are not user initiated for all processes. +If you enable this policy setting, file download prompts that are not user initiated will be blocked for Internet Explorer processes. -If you disable this policy setting, the Web Browser Control will not block automatic prompting of file downloads that are not user initiated for all processes. +If you disable this policy setting, prompting will occur for file downloads that are not user initiated for Internet Explorer processes. + +If you do not configure this policy setting, the user's preference determines whether to prompt for file downloads that are not user initiated for Internet Explorer processes. > [!TIP] @@ -12826,8 +12933,8 @@ If you disable this policy setting, the Web Browser Control will not block autom ADMX Info: -- GP English name: *All Processes* -- GP name: *IESF_PolicyAllProcesses_12* +- GP English name: *Internet Explorer Processes* +- GP name: *IESF_PolicyExplorerProcesses_12* - GP path: *Windows Components/Internet Explorer/Security Features/Restrict File Download* - GP ADMX file name: *inetres.admx* @@ -14197,6 +14304,50 @@ ADMX Info:
    + +**InternetExplorer/RestrictedSitesZoneAllowVBScriptToRunInInternetExplorer** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User +> * Device + +
    + + + +This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer. + +If you selected Enable in the drop-down box, VBScript can run without user intervention. + +If you selected Prompt in the drop-down box, users are asked to choose whether to allow VBScript to run. + +If you selected Disable in the drop-down box, VBScript is prevented from running. + +If you do not configure or disable this policy setting, VBScript is prevented from running. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow VBScript to run in Internet Explorer* +- GP name: *IZ_PolicyAllowVBScript_7* +- GP path: *Windows Components/Internet Explorer/Internet Control Panel/Security Page/Restricted Sites Zone* +- GP ADMX file name: *inetres.admx* + + + + +
    + **InternetExplorer/RestrictedSitesZoneDoNotRunAntimalwareAgainstActiveXControls** @@ -15560,9 +15711,11 @@ ADMX Info: Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions security feature restricts popup windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or obfuscate other Windows' title and status bars. -If you enable this policy setting, scripted windows are restricted for all processes. +If you enable this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes. -If you disable or do not configure this policy setting, scripted windows are not restricted. +If you disable this policy setting, scripts can continue to create popup windows and windows that obfuscate other windows. + +If you do not configure this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes. > [!TIP] @@ -15574,8 +15727,8 @@ If you disable or do not configure this policy setting, scripted windows are not ADMX Info: -- GP English name: *All Processes* -- GP name: *IESF_PolicyAllProcesses_8* +- GP English name: *Internet Explorer Processes* +- GP name: *IESF_PolicyExplorerProcesses_8* - GP path: *Windows Components/Internet Explorer/Security Features/Scripted Window Security Restrictions* - GP ADMX file name: *inetres.admx* diff --git a/windows/client-management/mdm/policy-csp-mssecurityguide.md b/windows/client-management/mdm/policy-csp-mssecurityguide.md new file mode 100644 index 0000000000..8dc3535360 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-mssecurityguide.md @@ -0,0 +1,245 @@ +--- +title: Policy CSP - MSSecurityGuide +description: Policy CSP - MSSecurityGuide +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/09/2018 +--- + +# Policy CSP - MSSecurityGuide + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + + +## MSSecurityGuide policies + +
    +
    + MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon +
    +
    + MSSecurityGuide/ConfigureSMBV1ClientDriver +
    +
    + MSSecurityGuide/ConfigureSMBV1Server +
    +
    + MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection +
    +
    + MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications +
    +
    + MSSecurityGuide/WDigestAuthentication +
    +
    + + +
    + + +**MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_SecGuide_0201_LATFP* +- GP ADMX file name: *SecGuide.admx* + + + + +
    + + +**MSSecurityGuide/ConfigureSMBV1ClientDriver** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_SecGuide_0002_SMBv1_ClientDriver* +- GP ADMX file name: *SecGuide.admx* + + + + +
    + + +**MSSecurityGuide/ConfigureSMBV1Server** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_SecGuide_0001_SMBv1_Server* +- GP ADMX file name: *SecGuide.admx* + + + + +
    + + +**MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_SecGuide_0102_SEHOP* +- GP ADMX file name: *SecGuide.admx* + + + + +
    + + +**MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_SecGuide_0101_WDPUA* +- GP ADMX file name: *SecGuide.admx* + + + + +
    + + +**MSSecurityGuide/WDigestAuthentication** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_SecGuide_0202_WDigestAuthn* +- GP ADMX file name: *SecGuide.admx* + + + +
    + +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. + + + diff --git a/windows/client-management/mdm/policy-csp-msslegacy.md b/windows/client-management/mdm/policy-csp-msslegacy.md new file mode 100644 index 0000000000..68078ca276 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-msslegacy.md @@ -0,0 +1,175 @@ +--- +title: Policy CSP - MSSLegacy +description: Policy CSP - MSSLegacy +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/09/2018 +--- + +# Policy CSP - MSSLegacy + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + + +## MSSLegacy policies + +
    +
    + MSSLegacy/AllowICMPRedirectsToOverrideOSPFGeneratedRoutes +
    +
    + MSSLegacy/AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers +
    +
    + MSSLegacy/IPSourceRoutingProtectionLevel +
    +
    + MSSLegacy/IPv6SourceRoutingProtectionLevel +
    +
    + + +
    + + +**MSSLegacy/AllowICMPRedirectsToOverrideOSPFGeneratedRoutes** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_MSS_EnableICMPRedirect* +- GP ADMX file name: *mss-legacy.admx* + + + + +
    + + +**MSSLegacy/AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_MSS_NoNameReleaseOnDemand* +- GP ADMX file name: *mss-legacy.admx* + + + + +
    + + +**MSSLegacy/IPSourceRoutingProtectionLevel** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_MSS_DisableIPSourceRouting* +- GP ADMX file name: *mss-legacy.admx* + + + + +
    + + +**MSSLegacy/IPv6SourceRoutingProtectionLevel** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP name: *Pol_MSS_DisableIPSourceRoutingIPv6* +- GP ADMX file name: *mss-legacy.admx* + + + +
    + +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. + + + diff --git a/windows/client-management/mdm/policy-csp-power.md b/windows/client-management/mdm/policy-csp-power.md index c69cf5db4a..89d381dddf 100644 --- a/windows/client-management/mdm/policy-csp-power.md +++ b/windows/client-management/mdm/policy-csp-power.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/09/2018 --- # Policy CSP - Power @@ -19,6 +19,9 @@ ms.date: 03/05/2018 ## Power policies
    +
    + Power/AllowStandbyStatesWhenSleepingOnBattery +
    Power/AllowStandbyWhenSleepingPluggedIn
    @@ -49,6 +52,45 @@ ms.date: 03/05/2018
    +
    + + +**Power/AllowStandbyStatesWhenSleepingOnBattery** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +This policy setting manages whether or not Windows is allowed to use standby states when putting the computer in a sleep state. + +If you enable or do not configure this policy setting, Windows uses standby states to put the computer in a sleep state. + +If you disable this policy setting, standby states (S1-S3) are not allowed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow standby states (S1-S3) when sleeping (on battery)* +- GP name: *AllowStandbyStatesDC_2* +- GP path: *System/Power Management/Sleep Settings* +- GP ADMX file name: *power.admx* + + + +
    diff --git a/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md new file mode 100644 index 0000000000..87aa32bfbb --- /dev/null +++ b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md @@ -0,0 +1,85 @@ +--- +title: Policy CSP - WindowsConnectionManager +description: Policy CSP - WindowsConnectionManager +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/09/2018 +--- + +# Policy CSP - WindowsConnectionManager + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + + +## WindowsConnectionManager policies + +
    +
    + WindowsConnectionManager/ProhitConnectionToNonDomainNetworksWhenConnectedToDomainAuthenticatedNetwork +
    +
    + + +
    + + +**WindowsConnectionManager/ProhitConnectionToNonDomainNetworksWhenConnectedToDomainAuthenticatedNetwork** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +This policy setting prevents computers from connecting to both a domain based network and a non-domain based network at the same time. + +If this policy setting is enabled, the computer responds to automatic and manual network connection attempts based on the following circumstances: + +Automatic connection attempts +- When the computer is already connected to a domain based network, all automatic connection attempts to non-domain networks are blocked. +- When the computer is already connected to a non-domain based network, automatic connection attempts to domain based networks are blocked. + +Manual connection attempts +- When the computer is already connected to either a non-domain based network or a domain based network over media other than Ethernet, and a user attempts to create a manual connection to an additional network in violation of this policy setting, the existing network connection is disconnected and the manual connection is allowed. +- When the computer is already connected to either a non-domain based network or a domain based network over Ethernet, and a user attempts to create a manual connection to an additional network in violation of this policy setting, the existing Ethernet connection is maintained and the manual connection attempt is blocked. + +If this policy setting is not configured or is disabled, computers are allowed to connect simultaneously to both domain and non-domain networks. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit connection to non-domain networks when connected to domain authenticated network* +- GP name: *WCM_BlockNonDomain* +- GP path: *Network/Windows Connection Manager* +- GP ADMX file name: *WCM.admx* + + + +
    + +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. + + + diff --git a/windows/client-management/mdm/policy-csp-windowslogon.md b/windows/client-management/mdm/policy-csp-windowslogon.md index cc10b25f2c..3847749f8f 100644 --- a/windows/client-management/mdm/policy-csp-windowslogon.md +++ b/windows/client-management/mdm/policy-csp-windowslogon.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/09/2018 --- # Policy CSP - WindowsLogon @@ -25,9 +25,15 @@ ms.date: 03/05/2018
    WindowsLogon/DontDisplayNetworkSelectionUI
    +
    + WindowsLogon/EnumerateLocalUsersOnDomainJoinedComputers +
    WindowsLogon/HideFastUserSwitching
    +
    + WindowsLogon/SignInLastInteractiveUserAutomaticallyAfterASystemInitiatedRestart +
    @@ -157,6 +163,45 @@ ADMX Info:
    + +**WindowsLogon/EnumerateLocalUsersOnDomainJoinedComputers** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +This policy setting allows local users to be enumerated on domain-joined computers. + +If you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers. + +If you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enumerate local users on domain-joined computers* +- GP name: *EnumerateLocalUsers* +- GP path: *System/Logon* +- GP ADMX file name: *logon.admx* + + + + +
    + **WindowsLogon/HideFastUserSwitching** @@ -219,6 +264,45 @@ To validate on Desktop, do the following: + +
    + + +**WindowsLogon/SignInLastInteractiveUserAutomaticallyAfterASystemInitiatedRestart** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +This policy setting controls whether a device will automatically sign-in the last interactive user after Windows Update restarts the system. + +If you enable or do not configure this policy setting, the device securely saves the user's credentials (including the user name, domain and encrypted password) to configure automatic sign-in after a Windows Update restart. After the Windows Update restart, the user is automatically signed-in and the session is automatically locked with all the lock screen apps configured for that user. + +If you disable this policy setting, the device does not store the user's credentials for automatic sign-in after a Windows Update restart. The users' lock screen apps are not restarted after the system restarts. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Sign-in last interactive user automatically after a system-initiated restart* +- GP name: *AutomaticRestartSignOn* +- GP path: *Windows Components/Windows Logon Options* +- GP ADMX file name: *WinLogon.admx* + + +
    Footnote: diff --git a/windows/client-management/mdm/policy-csp-windowspowershell.md b/windows/client-management/mdm/policy-csp-windowspowershell.md new file mode 100644 index 0000000000..4ed6d00d53 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-windowspowershell.md @@ -0,0 +1,82 @@ +--- +title: Policy CSP - WindowsPowerShell +description: Policy CSP - WindowsPowerShell +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/09/2018 +--- + +# Policy CSP - WindowsPowerShell + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + + +## WindowsPowerShell policies + +
    +
    + WindowsPowerShell/TurnOnPowerShellScriptBlockLogging +
    +
    + + +
    + + +**WindowsPowerShell/TurnOnPowerShellScriptBlockLogging** + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User +> * Device + +
    + + + +This policy setting enables logging of all PowerShell script input to the Microsoft-Windows-PowerShell/Operational event log. If you enable this policy setting, +Windows PowerShell will log the processing of commands, script blocks, functions, and scripts - whether invoked interactively, or through automation. + +If you disable this policy setting, logging of PowerShell script input is disabled. + +If you enable the Script Block Invocation Logging, PowerShell additionally logs events when invocation of a command, script block, function, or script +starts or stops. Enabling Invocation Logging generates a high volume of event logs. + +Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on PowerShell Script Block Logging* +- GP name: *EnableScriptBlockLogging* +- GP path: *Windows Components/Windows PowerShell* +- GP ADMX file name: *PowerShellExecutionPolicy.admx* + + + +
    + +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. + + + From 5ff0098c846c43e20d88b45754d3a930627d940a Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Mon, 12 Mar 2018 06:49:25 -0700 Subject: [PATCH 035/138] Finished Edits for multifactor unlock --- .../feature-multifactor-unlock.md | 27 ++++++++++++++----- 1 file changed, 20 insertions(+), 7 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index 5d9d741fa1..0ed18314c4 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -68,7 +68,7 @@ The default credential providers for the **Second unlock factor credential provi Configure a comma separated list of credential provider GUIDs you want to use as first and second unlock factors. While a credential provider can appear in both lists, remember that a credential supported by that provider can only satisfy one of the unlock factors. Listed credential providers do not need to be in any specific order. -For example, if you include the PIN and fingerprint credential providers in both first and second factor lists, a user can use their fingerprint or PIN as the first unlock factor. However, whichever factor they used to satisfy the first unlock factor cannot be used to satisfy the second unlock factor. +For example, if you include the PIN and fingerprint credential providers in both first and second factor lists, a user can use their fingerprint or PIN as the first unlock factor. However, whichever factor they used to satisfy the first unlock factor cannot be used to satisfy the second unlock factor. Each factor can therefore be used exactly once. The Trusted Signal provider can *only* be specified as part of the Second unlock factor credential provider list. ## Configure Signal Rules for the Trusted Signal Credential Provider @@ -128,10 +128,10 @@ The **rssiMin** attribute value signal indicates the strength needed for the dev RSSI measurements are relative and lower as the bluetooth signals between the two paired devices reduces. Therefore a measurement of 0 is stronger than -10, which is stronger than -60, which is an indicator the devices are moving further apart from each other. >[!IMPORTANT] ->Microsoft recommends using the default values for this policy settings. Measurements are relative, based on the varying conditions of each environment. Therefore, the same values may produce different results. Test policy settings in each environment prior to broadly deploying the setting. +>Microsoft recommends using the default values for this policy settings. Measurements are relative, based on the varying conditions of each environment. Therefore, the same values may produce different results. Test policy settings in each environment prior to broadly deploying the setting. Use the rssiMIN and rssiMaxDelta values from the XML file created by the Group Policy Management Editor or remove both attributes to use the default values. #### IP Configuration -You define IP configuration signals using one or more ipConfiguration elements. Each element has a string value. IpConfiguraiton elements do not have attributes or nested elements. +You define IP configuration signals using one or more ipConfiguration elements. Each element has a string value. IpConfiguration elements do not have attributes or nested elements. ##### IPv4Prefix The IPv4 network prefix represented in Internet standard dotted-decimal notation. A network prefix that uses the Classless Inter-Domain Routing (CIDR) notation is required as part of the network string. A network port must not be present in the network string. A **signal** element may only contain one **ipv4Prefix** element.
    @@ -139,6 +139,8 @@ The IPv4 network prefix represented in Internet standard dotted-decimal notation ``` 192.168.100.0/24 ``` +The assigned IPs in the range of 192.168.100.1 to 192.168.100.254 match this signal configuration. + ##### IPv4Gateway The IPv4 network gateway represented in Internet standard dotted-decimal notation. A network port or prefix must not be present in the network string. A **signal** element may only contain one **ipv4Gateway** element.
    **Example** @@ -211,7 +213,7 @@ This example configures an IPConfig signal type using Ipv4Prefix, Ipv4DnsServer, #### Example 2 -This example configures an IpConfig signal type using a dnsSuffix element and a bluetooth signal for phones. This configuration is wrapped for reading. Once properly formatted, the entire XML contents must be a single line. +This example configures an IpConfig signal type using a dnsSuffix element and a bluetooth signal for phones. This configuration is wrapped for reading. Once properly formatted, the entire XML contents must be a single line. This example implies that either the ipconfig **or** the Bluetooth rule must evaluate to true, for the resulting signal evaluation to be true. >[!NOTE] >Separate each rule element using a comma. @@ -226,7 +228,7 @@ This example configures an IpConfig signal type using a dnsSuffix element and a ``` #### Example 3 -This example configures the same as example 2 using compounding And elements. +This example configures the same as example 2 using compounding And elements. This example implies that the ipconfig **and** the Bluetooth rule must evaluate to true, for the resulting signal evaluation to be true. ``` @@ -242,7 +244,7 @@ This example configures the same as example 2 using compounding And elements. ## Deploying Multifactor Unlock >[!IMPORTANT] ->Once the you deploy multifactor unlock policies, users are not be able to unlock their devices if they do not have the required factors. The fall back options are to use passwords or smart cards (both of which could be disabled as needed). +>You need to remove all third party credential providers to ensure users cannot unlock their devices if they do not have the required factors. The fall back options are to use passwords or smart cards (both of which could be disabled as needed). ### How to configure Multifactor Unlock policy settings @@ -274,4 +276,15 @@ The Group Policy object contains the policy settings needed to trigger Windows H 10. If using trusted signals, configure the trusted signals used by the unlock factor using the information in the [Configure Signal Rules for the Trusted Signal Credential Provider](#configure-signal-rules-for-the-trusted-signal-credential-provider) section. 11. Click **Ok** to close the **Group Policy Management Editor**. Use the **Group Policy Management Console** to deploy the newly created Group Policy object to your organization's computers. - + ## Troubleshooting +Mulitfactor unlock writes events to event log under **Application and Services Logs\Microsoft\Windows\HelloForBusiness** with the category name **Device Unlock**. + +### Events + +|Event ID | Details| +|*********|********| +|3520|Unlock attempt initiated.| +|5520|Unlock policy not configured.| +|6520|Warning event.| +|7520|Error event.| +|8520|Success event.| From 7f054179c0e49714be61c9a23f4f7aaf39120d27 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Mon, 12 Mar 2018 08:40:12 -0700 Subject: [PATCH 036/138] edits to multifactor unlock --- .../hello-for-business/feature-multifactor-unlock.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index 0ed18314c4..d661f6e23b 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -139,7 +139,7 @@ The IPv4 network prefix represented in Internet standard dotted-decimal notation ``` 192.168.100.0/24 ``` -The assigned IPs in the range of 192.168.100.1 to 192.168.100.254 match this signal configuration. +The assigned IPv4 addresses in the range of 192.168.100.1 to 192.168.100.254 match this signal configuration. ##### IPv4Gateway The IPv4 network gateway represented in Internet standard dotted-decimal notation. A network port or prefix must not be present in the network string. A **signal** element may only contain one **ipv4Gateway** element.
    @@ -281,8 +281,8 @@ Mulitfactor unlock writes events to event log under **Application and Services L ### Events -|Event ID | Details| -|*********|********| +|Event ID|Details| +|********|*******| |3520|Unlock attempt initiated.| |5520|Unlock policy not configured.| |6520|Warning event.| From 5b500aab3a02cb00edb6823c7a0b49b5144da5a1 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Mar 2018 15:44:06 +0000 Subject: [PATCH 037/138] Merged PR 6295: Fix link in analytics card Fix link in analytics card --- windows/deployment/index.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/index.yml b/windows/deployment/index.yml index 649a715cf9..04a15dea0b 100644 --- a/windows/deployment/index.yml +++ b/windows/deployment/index.yml @@ -35,7 +35,7 @@ sections: image: src: https://docs.microsoft.com/media/common/i_upgrade.svg title: Windows as a service - - href: upgrade/windows-analytics-overview + - href: update/windows-analytics-overview html:

    Windows Analytics provides deep insights into your Windows 10 environment.

    image: src: https://docs.microsoft.com/media/common/i_investigate.svg From 4285e11b5ef52707de66911132f23c9c3506f836 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Mon, 12 Mar 2018 09:11:44 -0700 Subject: [PATCH 038/138] troubleshooting a table issue --- .../feature-multifactor-unlock.md | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index d661f6e23b..fec8954348 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -280,11 +280,10 @@ The Group Policy object contains the policy settings needed to trigger Windows H Mulitfactor unlock writes events to event log under **Application and Services Logs\Microsoft\Windows\HelloForBusiness** with the category name **Device Unlock**. ### Events - |Event ID|Details| -|********|*******| -|3520|Unlock attempt initiated.| -|5520|Unlock policy not configured.| -|6520|Warning event.| -|7520|Error event.| -|8520|Success event.| +|:********:|:*******| +|3520|Unlock attempt initiated| +|5520|Unlock policy not configured| +|6520|Warning event| +|7520|Error event| +|8520|Success event| From 96813d40b337d9cceaafceda3d523d3286e8ff95 Mon Sep 17 00:00:00 2001 From: Nicholas Brower Date: Mon, 12 Mar 2018 16:21:58 +0000 Subject: [PATCH 039/138] Merged PR 6288: Merge nibr-Index_Updates to master --- windows/client-management/mdm/TOC.md | 7 +++ .../policy-configuration-service-provider.md | 56 +++++++++++++++++-- 2 files changed, 58 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index ca5fd03714..c29fa0959d 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -180,6 +180,7 @@ #### [ActiveXControls](policy-csp-activexcontrols.md) #### [ApplicationDefaults](policy-csp-applicationdefaults.md) #### [ApplicationManagement](policy-csp-applicationmanagement.md) +#### [AppRuntime](policy-csp-appruntime.md) #### [AppVirtualization](policy-csp-appvirtualization.md) #### [AttachmentManager](policy-csp-attachmentmanager.md) #### [Authentication](policy-csp-authentication.md) @@ -191,6 +192,7 @@ #### [Cellular](policy-csp-cellular.md) #### [Connectivity](policy-csp-connectivity.md) #### [ControlPolicyConflict](policy-csp-controlpolicyconflict.md) +#### [CredentialsDelegation](policy-csp-credentialsdelegation.md) #### [CredentialProviders](policy-csp-credentialproviders.md) #### [CredentialsUI](policy-csp-credentialsui.md) #### [Cryptography](policy-csp-cryptography.md) @@ -209,6 +211,7 @@ #### [EventLogService](policy-csp-eventlogservice.md) #### [Experience](policy-csp-experience.md) #### [ExploitGuard](policy-csp-exploitguard.md) +#### [FileExplorer](policy-csp-fileexplorer.md) #### [Games](policy-csp-games.md) #### [Handwriting](policy-csp-handwriting.md) #### [InternetExplorer](policy-csp-internetexplorer.md) @@ -220,6 +223,8 @@ #### [LockDown](policy-csp-lockdown.md) #### [Maps](policy-csp-maps.md) #### [Messaging](policy-csp-messaging.md) +#### [MSSecurityGuide](policy-csp-mssecurityguide.md) +#### [MSSLegacy](policy-csp-msslegacy.md) #### [NetworkIsolation](policy-csp-networkisolation.md) #### [Notifications](policy-csp-notifications.md) #### [Power](policy-csp-power.md) @@ -246,9 +251,11 @@ #### [Update](policy-csp-update.md) #### [UserRights](policy-csp-userrights.md) #### [Wifi](policy-csp-wifi.md) +#### [WindowsConnectionManager](policy-csp-windowsconnectionmanager.md) #### [WindowsDefenderSecurityCenter](policy-csp-windowsdefendersecuritycenter.md) #### [WindowsInkWorkspace](policy-csp-windowsinkworkspace.md) #### [WindowsLogon](policy-csp-windowslogon.md) +#### [WindowsPowerShell](policy-csp-windowspowershell.md) #### [WirelessDisplay](policy-csp-wirelessdisplay.md) ### [PolicyManager CSP](policymanager-csp.md) ### [Provisioning CSP](provisioning-csp.md) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 4f14d81f4f..6f733c2214 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -3269,6 +3269,7 @@ The following diagram shows the Policy configuration service provider in tree fo ## ADMX-backed policies - [ActiveXControls/ApprovedInstallationSites](./policy-csp-activexcontrols.md#activexcontrols-approvedinstallationsites) +- [AppRuntime/AllowMicrosoftAccountsToBeOptional](./policy-csp-appruntime.md#appruntime-allowmicrosoftaccountstobeoptional) - [AppVirtualization/AllowAppVClient](./policy-csp-appvirtualization.md#appvirtualization-allowappvclient) - [AppVirtualization/AllowDynamicVirtualization](./policy-csp-appvirtualization.md#appvirtualization-allowdynamicvirtualization) - [AppVirtualization/AllowPackageCleanup](./policy-csp-appvirtualization.md#appvirtualization-allowpackagecleanup) @@ -3311,13 +3312,17 @@ The following diagram shows the Policy configuration service provider in tree fo - [Connectivity/ProhibitInstallationAndConfigurationOfNetworkBridge](./policy-csp-connectivity.md#connectivity-prohibitinstallationandconfigurationofnetworkbridge) - [CredentialProviders/AllowPINLogon](./policy-csp-credentialproviders.md#credentialproviders-allowpinlogon) - [CredentialProviders/BlockPicturePassword](./policy-csp-credentialproviders.md#credentialproviders-blockpicturepassword) +- [CredentialsDelegation/RemoteHostAllowsDelegationOfNonExportableCredentials](./policy-csp-credentialsdelegation.md#credentialsdelegation-remotehostallowsdelegationofnonexportablecredentials) - [CredentialsUI/DisablePasswordReveal](./policy-csp-credentialsui.md#credentialsui-disablepasswordreveal) - [CredentialsUI/EnumerateAdministrators](./policy-csp-credentialsui.md#credentialsui-enumerateadministrators) - [DataUsage/SetCost3G](./policy-csp-datausage.md#datausage-setcost3g) - [DataUsage/SetCost4G](./policy-csp-datausage.md#datausage-setcost4g) +- [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](./policy-csp-deliveryoptimization.md#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth) +- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](./policy-csp-deliveryoptimization.md#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth) - [Desktop/PreventUserRedirectionOfProfileFolders](./policy-csp-desktop.md#desktop-preventuserredirectionofprofilefolders) - [DeviceInstallation/PreventInstallationOfMatchingDeviceIDs](./policy-csp-deviceinstallation.md#deviceinstallation-preventinstallationofmatchingdeviceids) - [DeviceInstallation/PreventInstallationOfMatchingDeviceSetupClasses](./policy-csp-deviceinstallation.md#deviceinstallation-preventinstallationofmatchingdevicesetupclasses) +- [DeviceLock/PreventEnablingLockScreenCamera](./policy-csp-devicelock.md#devicelock-preventenablinglockscreencamera) - [DeviceLock/PreventLockScreenSlideShow](./policy-csp-devicelock.md#devicelock-preventlockscreenslideshow) - [ErrorReporting/CustomizeConsentSettings](./policy-csp-errorreporting.md#errorreporting-customizeconsentsettings) - [ErrorReporting/DisableWindowsErrorReporting](./policy-csp-errorreporting.md#errorreporting-disablewindowserrorreporting) @@ -3328,6 +3333,8 @@ The following diagram shows the Policy configuration service provider in tree fo - [EventLogService/SpecifyMaximumFileSizeApplicationLog](./policy-csp-eventlogservice.md#eventlogservice-specifymaximumfilesizeapplicationlog) - [EventLogService/SpecifyMaximumFileSizeSecurityLog](./policy-csp-eventlogservice.md#eventlogservice-specifymaximumfilesizesecuritylog) - [EventLogService/SpecifyMaximumFileSizeSystemLog](./policy-csp-eventlogservice.md#eventlogservice-specifymaximumfilesizesystemlog) +- [FileExplorer/TurnOffDataExecutionPreventionForExplorer](./policy-csp-fileexplorer.md#fileexplorer-turnoffdataexecutionpreventionforexplorer) +- [FileExplorer/TurnOffHeapTerminationOnCorruption](./policy-csp-fileexplorer.md#fileexplorer-turnoffheapterminationoncorruption) - [InternetExplorer/AddSearchProvider](./policy-csp-internetexplorer.md#internetexplorer-addsearchprovider) - [InternetExplorer/AllowActiveXFiltering](./policy-csp-internetexplorer.md#internetexplorer-allowactivexfiltering) - [InternetExplorer/AllowAddOnList](./policy-csp-internetexplorer.md#internetexplorer-allowaddonlist) @@ -3401,6 +3408,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [InternetExplorer/InternetZoneAllowSmartScreenIE](./policy-csp-internetexplorer.md#internetexplorer-internetzoneallowsmartscreenie) - [InternetExplorer/InternetZoneAllowUpdatesToStatusBarViaScript](./policy-csp-internetexplorer.md#internetexplorer-internetzoneallowupdatestostatusbarviascript) - [InternetExplorer/InternetZoneAllowUserDataPersistence](./policy-csp-internetexplorer.md#internetexplorer-internetzoneallowuserdatapersistence) +- [InternetExplorer/InternetZoneAllowVBScriptToRunInInternetExplorer](./policy-csp-internetexplorer.md#internetexplorer-internetzoneallowvbscripttorunininternetexplorer) - [InternetExplorer/InternetZoneDoNotRunAntimalwareAgainstActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-internetzonedonotrunantimalwareagainstactivexcontrols) - [InternetExplorer/InternetZoneDownloadSignedActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-internetzonedownloadsignedactivexcontrols) - [InternetExplorer/InternetZoneDownloadUnsignedActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-internetzonedownloadunsignedactivexcontrols) @@ -3456,6 +3464,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [InternetExplorer/LockedDownInternetZoneInitializeAndScriptActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-lockeddowninternetzoneinitializeandscriptactivexcontrols) - [InternetExplorer/LockedDownInternetZoneJavaPermissions](./policy-csp-internetexplorer.md#internetexplorer-lockeddowninternetzonejavapermissions) - [InternetExplorer/LockedDownInternetZoneNavigateWindowsAndFrames](./policy-csp-internetexplorer.md#internetexplorer-lockeddowninternetzonenavigatewindowsandframes) +- [InternetExplorer/LockedDownIntranetJavaPermissions](./policy-csp-internetexplorer.md#internetexplorer-lockeddownintranetjavapermissions) - [InternetExplorer/LockedDownIntranetZoneAllowAccessToDataSources](./policy-csp-internetexplorer.md#internetexplorer-lockeddownintranetzoneallowaccesstodatasources) - [InternetExplorer/LockedDownIntranetZoneAllowAutomaticPromptingForActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforactivexcontrols) - [InternetExplorer/LockedDownIntranetZoneAllowAutomaticPromptingForFileDownloads](./policy-csp-internetexplorer.md#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforfiledownloads) @@ -3533,6 +3542,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [InternetExplorer/RestrictedSitesZoneAllowSmartScreenIE](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszoneallowsmartscreenie) - [InternetExplorer/RestrictedSitesZoneAllowUpdatesToStatusBarViaScript](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszoneallowupdatestostatusbarviascript) - [InternetExplorer/RestrictedSitesZoneAllowUserDataPersistence](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszoneallowuserdatapersistence) +- [InternetExplorer/RestrictedSitesZoneAllowVBScriptToRunInInternetExplorer](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszoneallowvbscripttorunininternetexplorer) - [InternetExplorer/RestrictedSitesZoneDoNotRunAntimalwareAgainstActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszonedonotrunantimalwareagainstactivexcontrols) - [InternetExplorer/RestrictedSitesZoneDownloadSignedActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszonedownloadsignedactivexcontrols) - [InternetExplorer/RestrictedSitesZoneDownloadUnsignedActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszonedownloadunsignedactivexcontrols) @@ -3575,6 +3585,17 @@ The following diagram shows the Policy configuration service provider in tree fo - [Kerberos/RequireKerberosArmoring](./policy-csp-kerberos.md#kerberos-requirekerberosarmoring) - [Kerberos/RequireStrictKDCValidation](./policy-csp-kerberos.md#kerberos-requirestrictkdcvalidation) - [Kerberos/SetMaximumContextTokenSize](./policy-csp-kerberos.md#kerberos-setmaximumcontexttokensize) +- [MSSLegacy/AllowICMPRedirectsToOverrideOSPFGeneratedRoutes](./policy-csp-msslegacy.md#msslegacy-allowicmpredirectstooverrideospfgeneratedroutes) +- [MSSLegacy/AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers](./policy-csp-msslegacy.md#msslegacy-allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers) +- [MSSLegacy/IPSourceRoutingProtectionLevel](./policy-csp-msslegacy.md#msslegacy-ipsourceroutingprotectionlevel) +- [MSSLegacy/IPv6SourceRoutingProtectionLevel](./policy-csp-msslegacy.md#msslegacy-ipv6sourceroutingprotectionlevel) +- [MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon](./policy-csp-mssecurityguide.md#mssecurityguide-applyuacrestrictionstolocalaccountsonnetworklogon) +- [MSSecurityGuide/ConfigureSMBV1ClientDriver](./policy-csp-mssecurityguide.md#mssecurityguide-configuresmbv1clientdriver) +- [MSSecurityGuide/ConfigureSMBV1Server](./policy-csp-mssecurityguide.md#mssecurityguide-configuresmbv1server) +- [MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection](./policy-csp-mssecurityguide.md#mssecurityguide-enablestructuredexceptionhandlingoverwriteprotection) +- [MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications](./policy-csp-mssecurityguide.md#mssecurityguide-turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications) +- [MSSecurityGuide/WDigestAuthentication](./policy-csp-mssecurityguide.md#mssecurityguide-wdigestauthentication) +- [Power/AllowStandbyStatesWhenSleepingOnBattery](./policy-csp-power.md#power-allowstandbystateswhensleepingonbattery) - [Power/AllowStandbyWhenSleepingPluggedIn](./policy-csp-power.md#power-allowstandbywhensleepingpluggedin) - [Power/DisplayOffTimeoutOnBattery](./policy-csp-power.md#power-displayofftimeoutonbattery) - [Power/DisplayOffTimeoutPluggedIn](./policy-csp-power.md#power-displayofftimeoutpluggedin) @@ -3624,13 +3645,19 @@ The following diagram shows the Policy configuration service provider in tree fo - [Storage/EnhancedStorageDevices](./policy-csp-storage.md#storage-enhancedstoragedevices) - [System/BootStartDriverInitialization](./policy-csp-system.md#system-bootstartdriverinitialization) - [System/DisableSystemRestore](./policy-csp-system.md#system-disablesystemrestore) +- [WindowsConnectionManager/ProhitConnectionToNonDomainNetworksWhenConnectedToDomainAuthenticatedNetwork](./policy-csp-windowsconnectionmanager.md#windowsconnectionmanager-prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork) - [WindowsLogon/DisableLockScreenAppNotifications](./policy-csp-windowslogon.md#windowslogon-disablelockscreenappnotifications) - [WindowsLogon/DontDisplayNetworkSelectionUI](./policy-csp-windowslogon.md#windowslogon-dontdisplaynetworkselectionui) +- [WindowsLogon/EnumerateLocalUsersOnDomainJoinedComputers](./policy-csp-windowslogon.md#windowslogon-enumeratelocalusersondomainjoinedcomputers) +- [WindowsLogon/SignInLastInteractiveUserAutomaticallyAfterASystemInitiatedRestart](./policy-csp-windowslogon.md#windowslogon-signinlastinteractiveuserautomaticallyafterasysteminitiatedrestart) +- [WindowsPowerShell/TurnOnPowerShellScriptBlockLogging](./policy-csp-windowspowershell.md#windowspowershell-turnonpowershellscriptblocklogging) + ## Policies supported by GP - [AboveLock/AllowCortanaAboveLock](./policy-csp-abovelock.md#abovelock-allowcortanaabovelock) - [ActiveXControls/ApprovedInstallationSites](./policy-csp-activexcontrols.md#activexcontrols-approvedinstallationsites) +- [AppRuntime/AllowMicrosoftAccountsToBeOptional](./policy-csp-appruntime.md#appruntime-allowmicrosoftaccountstobeoptional) - [AppVirtualization/AllowAppVClient](./policy-csp-appvirtualization.md#appvirtualization-allowappvclient) - [AppVirtualization/AllowDynamicVirtualization](./policy-csp-appvirtualization.md#appvirtualization-allowdynamicvirtualization) - [AppVirtualization/AllowPackageCleanup](./policy-csp-appvirtualization.md#appvirtualization-allowpackagecleanup) @@ -3726,6 +3753,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [Connectivity/ProhibitInstallationAndConfigurationOfNetworkBridge](./policy-csp-connectivity.md#connectivity-prohibitinstallationandconfigurationofnetworkbridge) - [CredentialProviders/AllowPINLogon](./policy-csp-credentialproviders.md#credentialproviders-allowpinlogon) - [CredentialProviders/BlockPicturePassword](./policy-csp-credentialproviders.md#credentialproviders-blockpicturepassword) +- [CredentialsDelegation/RemoteHostAllowsDelegationOfNonExportableCredentials](./policy-csp-credentialsdelegation.md#credentialsdelegation-remotehostallowsdelegationofnonexportablecredentials) - [CredentialsUI/DisablePasswordReveal](./policy-csp-credentialsui.md#credentialsui-disablepasswordreveal) - [CredentialsUI/EnumerateAdministrators](./policy-csp-credentialsui.md#credentialsui-enumerateadministrators) - [Cryptography/AllowFipsAlgorithmPolicy](./policy-csp-cryptography.md#cryptography-allowfipsalgorithmpolicy) @@ -3781,6 +3809,8 @@ The following diagram shows the Policy configuration service provider in tree fo - [DeliveryOptimization/DOMinRAMAllowedToPeer](./policy-csp-deliveryoptimization.md#deliveryoptimization-dominramallowedtopeer) - [DeliveryOptimization/DOModifyCacheDrive](./policy-csp-deliveryoptimization.md#deliveryoptimization-domodifycachedrive) - [DeliveryOptimization/DOMonthlyUploadDataCap](./policy-csp-deliveryoptimization.md#deliveryoptimization-domonthlyuploaddatacap) +- [DeliveryOptimization/DOPercentageMaxBackgroundBandwidth](./policy-csp-deliveryoptimization.md#deliveryoptimization-dopercentagemaxbackgroundbandwidth) +- [DeliveryOptimization/DOPercentageMaxForegroundBandwidth](./policy-csp-deliveryoptimization.md#deliveryoptimization-dopercentagemaxforegroundbandwidth) - [DeliveryOptimization/DORestrictPeerSelectionBy](./policy-csp-deliveryoptimization.md#deliveryoptimization-dorestrictpeerselectionby) - [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](./policy-csp-deliveryoptimization.md#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth) - [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](./policy-csp-deliveryoptimization.md#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth) @@ -3791,6 +3821,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [DeviceInstallation/PreventInstallationOfMatchingDeviceIDs](./policy-csp-deviceinstallation.md#deviceinstallation-preventinstallationofmatchingdeviceids) - [DeviceInstallation/PreventInstallationOfMatchingDeviceSetupClasses](./policy-csp-deviceinstallation.md#deviceinstallation-preventinstallationofmatchingdevicesetupclasses) - [DeviceLock/MinimumPasswordAge](./policy-csp-devicelock.md#devicelock-minimumpasswordage) +- [DeviceLock/PreventEnablingLockScreenCamera](./policy-csp-devicelock.md#devicelock-preventenablinglockscreencamera) - [DeviceLock/PreventLockScreenSlideShow](./policy-csp-devicelock.md#devicelock-preventlockscreenslideshow) - [Display/DisablePerProcessDpiForApps](./policy-csp-display.md#display-disableperprocessdpiforapps) - [Display/EnablePerProcessDpi](./policy-csp-display.md#display-enableperprocessdpi) @@ -3820,6 +3851,8 @@ The following diagram shows the Policy configuration service provider in tree fo - [Experience/ConfigureWindowsSpotlightOnLockScreen](./policy-csp-experience.md#experience-configurewindowsspotlightonlockscreen) - [Experience/DoNotShowFeedbackNotifications](./policy-csp-experience.md#experience-donotshowfeedbacknotifications) - [ExploitGuard/ExploitProtectionSettings](./policy-csp-exploitguard.md#exploitguard-exploitprotectionsettings) +- [FileExplorer/TurnOffDataExecutionPreventionForExplorer](./policy-csp-fileexplorer.md#fileexplorer-turnoffdataexecutionpreventionforexplorer) +- [FileExplorer/TurnOffHeapTerminationOnCorruption](./policy-csp-fileexplorer.md#fileexplorer-turnoffheapterminationoncorruption) - [Handwriting/PanelDefaultModeDocked](./policy-csp-handwriting.md#handwriting-paneldefaultmodedocked) - [InternetExplorer/AddSearchProvider](./policy-csp-internetexplorer.md#internetexplorer-addsearchprovider) - [InternetExplorer/AllowActiveXFiltering](./policy-csp-internetexplorer.md#internetexplorer-allowactivexfiltering) @@ -3894,6 +3927,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [InternetExplorer/InternetZoneAllowSmartScreenIE](./policy-csp-internetexplorer.md#internetexplorer-internetzoneallowsmartscreenie) - [InternetExplorer/InternetZoneAllowUpdatesToStatusBarViaScript](./policy-csp-internetexplorer.md#internetexplorer-internetzoneallowupdatestostatusbarviascript) - [InternetExplorer/InternetZoneAllowUserDataPersistence](./policy-csp-internetexplorer.md#internetexplorer-internetzoneallowuserdatapersistence) +- [InternetExplorer/InternetZoneAllowVBScriptToRunInInternetExplorer](./policy-csp-internetexplorer.md#internetexplorer-internetzoneallowvbscripttorunininternetexplorer) - [InternetExplorer/InternetZoneDoNotRunAntimalwareAgainstActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-internetzonedonotrunantimalwareagainstactivexcontrols) - [InternetExplorer/InternetZoneDownloadSignedActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-internetzonedownloadsignedactivexcontrols) - [InternetExplorer/InternetZoneDownloadUnsignedActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-internetzonedownloadunsignedactivexcontrols) @@ -3949,6 +3983,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [InternetExplorer/LockedDownInternetZoneInitializeAndScriptActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-lockeddowninternetzoneinitializeandscriptactivexcontrols) - [InternetExplorer/LockedDownInternetZoneJavaPermissions](./policy-csp-internetexplorer.md#internetexplorer-lockeddowninternetzonejavapermissions) - [InternetExplorer/LockedDownInternetZoneNavigateWindowsAndFrames](./policy-csp-internetexplorer.md#internetexplorer-lockeddowninternetzonenavigatewindowsandframes) +- [InternetExplorer/LockedDownIntranetJavaPermissions](./policy-csp-internetexplorer.md#internetexplorer-lockeddownintranetjavapermissions) - [InternetExplorer/LockedDownIntranetZoneAllowAccessToDataSources](./policy-csp-internetexplorer.md#internetexplorer-lockeddownintranetzoneallowaccesstodatasources) - [InternetExplorer/LockedDownIntranetZoneAllowAutomaticPromptingForActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforactivexcontrols) - [InternetExplorer/LockedDownIntranetZoneAllowAutomaticPromptingForFileDownloads](./policy-csp-internetexplorer.md#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforfiledownloads) @@ -4026,6 +4061,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [InternetExplorer/RestrictedSitesZoneAllowSmartScreenIE](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszoneallowsmartscreenie) - [InternetExplorer/RestrictedSitesZoneAllowUpdatesToStatusBarViaScript](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszoneallowupdatestostatusbarviascript) - [InternetExplorer/RestrictedSitesZoneAllowUserDataPersistence](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszoneallowuserdatapersistence) +- [InternetExplorer/RestrictedSitesZoneAllowVBScriptToRunInInternetExplorer](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszoneallowvbscripttorunininternetexplorer) - [InternetExplorer/RestrictedSitesZoneDoNotRunAntimalwareAgainstActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszonedonotrunantimalwareagainstactivexcontrols) - [InternetExplorer/RestrictedSitesZoneDownloadSignedActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszonedownloadsignedactivexcontrols) - [InternetExplorer/RestrictedSitesZoneDownloadUnsignedActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-restrictedsiteszonedownloadunsignedactivexcontrols) @@ -4082,10 +4118,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [LocalPoliciesSecurityOptions/Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnly](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-devices-restrictcdromaccesstolocallyloggedonuseronly) - [LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-domainmember-digitallyencryptorsignsecurechanneldataalways) - [LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptSecureChannelDataWhenPossible](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-domainmember-digitallyencryptsecurechanneldatawhenpossible) -- [LocalPoliciesSecurityOptions/DomainMember_DigitallySignSecureChannelDataWhenPossible](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-domainmember-digitallysignsecurechanneldatawhenpossible) - [LocalPoliciesSecurityOptions/DomainMember_DisableMachineAccountPasswordChanges](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-domainmember-disablemachineaccountpasswordchanges) -- [LocalPoliciesSecurityOptions/DomainMember_MaximumMachineAccountPasswordAge](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-domainmember-maximummachineaccountpasswordage) -- [LocalPoliciesSecurityOptions/DomainMember_RequireStrongSessionKey](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-domainmember-requirestrongsessionkey) - [LocalPoliciesSecurityOptions/InteractiveLogon_DisplayUserInformationWhenTheSessionIsLocked](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-interactivelogon-displayuserinformationwhenthesessionislocked) - [LocalPoliciesSecurityOptions/InteractiveLogon_DoNotDisplayLastSignedIn](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-interactivelogon-donotdisplaylastsignedin) - [LocalPoliciesSecurityOptions/InteractiveLogon_DoNotDisplayUsernameAtSignIn](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-interactivelogon-donotdisplayusernameatsignin) @@ -4094,7 +4127,6 @@ The following diagram shows the Policy configuration service provider in tree fo - [LocalPoliciesSecurityOptions/InteractiveLogon_MessageTextForUsersAttemptingToLogOn](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-interactivelogon-messagetextforusersattemptingtologon) - [LocalPoliciesSecurityOptions/InteractiveLogon_MessageTitleForUsersAttemptingToLogOn](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-interactivelogon-messagetitleforusersattemptingtologon) - [LocalPoliciesSecurityOptions/InteractiveLogon_SmartCardRemovalBehavior](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-interactivelogon-smartcardremovalbehavior) -- [LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsAlways](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-microsoftnetworkclient-digitallysigncommunicationsalways) - [LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-microsoftnetworkclient-digitallysigncommunicationsifserveragrees) - [LocalPoliciesSecurityOptions/MicrosoftNetworkClient_SendUnencryptedPasswordToThirdPartySMBServers](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-microsoftnetworkclient-sendunencryptedpasswordtothirdpartysmbservers) - [LocalPoliciesSecurityOptions/MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-microsoftnetworkserver-amountofidletimerequiredbeforesuspendingsession) @@ -4107,7 +4139,6 @@ The following diagram shows the Policy configuration service provider in tree fo - [LocalPoliciesSecurityOptions/NetworkSecurity_AllowPKU2UAuthenticationRequests](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-networksecurity-allowpku2uauthenticationrequests) - [LocalPoliciesSecurityOptions/NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-networksecurity-donotstorelanmanagerhashvalueonnextpasswordchange) - [LocalPoliciesSecurityOptions/NetworkSecurity_LANManagerAuthenticationLevel](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-networksecurity-lanmanagerauthenticationlevel) -- [LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-networksecurity-minimumsessionsecurityforntlmsspbasedclients) - [LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-networksecurity-minimumsessionsecurityforntlmsspbasedservers) - [LocalPoliciesSecurityOptions/Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOn](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-shutdown-allowsystemtobeshutdownwithouthavingtologon) - [LocalPoliciesSecurityOptions/Shutdown_ClearVirtualMemoryPageFile](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-shutdown-clearvirtualmemorypagefile) @@ -4123,6 +4154,16 @@ The following diagram shows the Policy configuration service provider in tree fo - [LocalPoliciesSecurityOptions/UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPerUserLocations](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-useraccountcontrol-virtualizefileandregistrywritefailurestoperuserlocations) - [Location/EnableLocation](./policy-csp-location.md#location-enablelocation) - [LockDown/AllowEdgeSwipe](./policy-csp-lockdown.md#lockdown-allowedgeswipe) +- [MSSLegacy/AllowICMPRedirectsToOverrideOSPFGeneratedRoutes](./policy-csp-msslegacy.md#msslegacy-allowicmpredirectstooverrideospfgeneratedroutes) +- [MSSLegacy/AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers](./policy-csp-msslegacy.md#msslegacy-allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers) +- [MSSLegacy/IPSourceRoutingProtectionLevel](./policy-csp-msslegacy.md#msslegacy-ipsourceroutingprotectionlevel) +- [MSSLegacy/IPv6SourceRoutingProtectionLevel](./policy-csp-msslegacy.md#msslegacy-ipv6sourceroutingprotectionlevel) +- [MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon](./policy-csp-mssecurityguide.md#mssecurityguide-applyuacrestrictionstolocalaccountsonnetworklogon) +- [MSSecurityGuide/ConfigureSMBV1ClientDriver](./policy-csp-mssecurityguide.md#mssecurityguide-configuresmbv1clientdriver) +- [MSSecurityGuide/ConfigureSMBV1Server](./policy-csp-mssecurityguide.md#mssecurityguide-configuresmbv1server) +- [MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection](./policy-csp-mssecurityguide.md#mssecurityguide-enablestructuredexceptionhandlingoverwriteprotection) +- [MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications](./policy-csp-mssecurityguide.md#mssecurityguide-turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications) +- [MSSecurityGuide/WDigestAuthentication](./policy-csp-mssecurityguide.md#mssecurityguide-wdigestauthentication) - [Maps/EnableOfflineMapsAutoUpdate](./policy-csp-maps.md#maps-enableofflinemapsautoupdate) - [Messaging/AllowMessageSync](./policy-csp-messaging.md#messaging-allowmessagesync) - [NetworkIsolation/EnterpriseCloudResources](./policy-csp-networkisolation.md#networkisolation-enterprisecloudresources) @@ -4133,6 +4174,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [NetworkIsolation/EnterpriseProxyServersAreAuthoritative](./policy-csp-networkisolation.md#networkisolation-enterpriseproxyserversareauthoritative) - [NetworkIsolation/NeutralResources](./policy-csp-networkisolation.md#networkisolation-neutralresources) - [Notifications/DisallowNotificationMirroring](./policy-csp-notifications.md#notifications-disallownotificationmirroring) +- [Power/AllowStandbyStatesWhenSleepingOnBattery](./policy-csp-power.md#power-allowstandbystateswhensleepingonbattery) - [Power/AllowStandbyWhenSleepingPluggedIn](./policy-csp-power.md#power-allowstandbywhensleepingpluggedin) - [Power/DisplayOffTimeoutOnBattery](./policy-csp-power.md#power-displayofftimeoutonbattery) - [Power/DisplayOffTimeoutPluggedIn](./policy-csp-power.md#power-displayofftimeoutpluggedin) @@ -4369,6 +4411,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [UserRights/TakeOwnership](./policy-csp-userrights.md#userrights-takeownership) - [Wifi/AllowAutoConnectToWiFiSenseHotspots](./policy-csp-wifi.md#wifi-allowautoconnecttowifisensehotspots) - [Wifi/AllowInternetSharing](./policy-csp-wifi.md#wifi-allowinternetsharing) +- [WindowsConnectionManager/ProhitConnectionToNonDomainNetworksWhenConnectedToDomainAuthenticatedNetwork](./policy-csp-windowsconnectionmanager.md#windowsconnectionmanager-prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork) - [WindowsDefenderSecurityCenter/CompanyName](./policy-csp-windowsdefendersecuritycenter.md#windowsdefendersecuritycenter-companyname) - [WindowsDefenderSecurityCenter/DisableAccountProtectionUI](./policy-csp-windowsdefendersecuritycenter.md#windowsdefendersecuritycenter-disableaccountprotectionui) - [WindowsDefenderSecurityCenter/DisableAppBrowserUI](./policy-csp-windowsdefendersecuritycenter.md#windowsdefendersecuritycenter-disableappbrowserui) @@ -4392,7 +4435,10 @@ The following diagram shows the Policy configuration service provider in tree fo - [WindowsInkWorkspace/AllowWindowsInkWorkspace](./policy-csp-windowsinkworkspace.md#windowsinkworkspace-allowwindowsinkworkspace) - [WindowsLogon/DisableLockScreenAppNotifications](./policy-csp-windowslogon.md#windowslogon-disablelockscreenappnotifications) - [WindowsLogon/DontDisplayNetworkSelectionUI](./policy-csp-windowslogon.md#windowslogon-dontdisplaynetworkselectionui) +- [WindowsLogon/EnumerateLocalUsersOnDomainJoinedComputers](./policy-csp-windowslogon.md#windowslogon-enumeratelocalusersondomainjoinedcomputers) - [WindowsLogon/HideFastUserSwitching](./policy-csp-windowslogon.md#windowslogon-hidefastuserswitching) +- [WindowsLogon/SignInLastInteractiveUserAutomaticallyAfterASystemInitiatedRestart](./policy-csp-windowslogon.md#windowslogon-signinlastinteractiveuserautomaticallyafterasysteminitiatedrestart) +- [WindowsPowerShell/TurnOnPowerShellScriptBlockLogging](./policy-csp-windowspowershell.md#windowspowershell-turnonpowershellscriptblocklogging) - [WirelessDisplay/AllowProjectionToPC](./policy-csp-wirelessdisplay.md#wirelessdisplay-allowprojectiontopc) - [WirelessDisplay/RequirePinForPairing](./policy-csp-wirelessdisplay.md#wirelessdisplay-requirepinforpairing) From 308427bd6305effb7a8216557dbdd2622c70dc5f Mon Sep 17 00:00:00 2001 From: jaimeo Date: Mon, 12 Mar 2018 09:39:23 -0700 Subject: [PATCH 040/138] readded enrolling topic to TOC --- windows/deployment/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index b7322887c4..11c73b9a7d 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -230,6 +230,7 @@ ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) ## [Windows Analytics](update/windows-analytics-overview.md) +### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) #### [Upgrade Readiness requirements](upgrade/upgrade-readiness-requirements.md) From 956c6fdc4a1b05fafc509d8e981fa1399ae7d10f Mon Sep 17 00:00:00 2001 From: Nicholas Brower Date: Mon, 12 Mar 2018 17:54:50 +0000 Subject: [PATCH 041/138] Merged PR 6306: Adding 1803 footnote to Policy CSP. "updating policies (id=4934)" --- windows/client-management/mdm/policy-csp-abovelock.md | 3 ++- .../mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md | 3 ++- windows/client-management/mdm/policy-csp-accounts.md | 3 ++- windows/client-management/mdm/policy-csp-activexcontrols.md | 3 ++- .../client-management/mdm/policy-csp-applicationdefaults.md | 3 ++- .../client-management/mdm/policy-csp-applicationmanagement.md | 3 ++- windows/client-management/mdm/policy-csp-appruntime.md | 3 ++- windows/client-management/mdm/policy-csp-appvirtualization.md | 3 ++- windows/client-management/mdm/policy-csp-attachmentmanager.md | 3 ++- windows/client-management/mdm/policy-csp-authentication.md | 3 ++- windows/client-management/mdm/policy-csp-autoplay.md | 3 ++- windows/client-management/mdm/policy-csp-bitlocker.md | 3 ++- windows/client-management/mdm/policy-csp-bluetooth.md | 3 ++- windows/client-management/mdm/policy-csp-browser.md | 3 ++- windows/client-management/mdm/policy-csp-camera.md | 3 ++- windows/client-management/mdm/policy-csp-cellular.md | 3 ++- windows/client-management/mdm/policy-csp-connectivity.md | 3 ++- .../client-management/mdm/policy-csp-controlpolicyconflict.md | 3 ++- .../client-management/mdm/policy-csp-credentialproviders.md | 3 ++- .../client-management/mdm/policy-csp-credentialsdelegation.md | 3 ++- windows/client-management/mdm/policy-csp-credentialsui.md | 3 ++- windows/client-management/mdm/policy-csp-cryptography.md | 3 ++- windows/client-management/mdm/policy-csp-dataprotection.md | 3 ++- windows/client-management/mdm/policy-csp-datausage.md | 3 ++- windows/client-management/mdm/policy-csp-defender.md | 3 ++- .../client-management/mdm/policy-csp-deliveryoptimization.md | 3 ++- windows/client-management/mdm/policy-csp-desktop.md | 3 ++- windows/client-management/mdm/policy-csp-deviceguard.md | 3 ++- windows/client-management/mdm/policy-csp-deviceinstallation.md | 3 ++- windows/client-management/mdm/policy-csp-devicelock.md | 3 ++- windows/client-management/mdm/policy-csp-display.md | 3 ++- windows/client-management/mdm/policy-csp-education.md | 3 ++- .../client-management/mdm/policy-csp-enterprisecloudprint.md | 3 ++- windows/client-management/mdm/policy-csp-errorreporting.md | 3 ++- windows/client-management/mdm/policy-csp-eventlogservice.md | 3 ++- windows/client-management/mdm/policy-csp-experience.md | 3 ++- windows/client-management/mdm/policy-csp-exploitguard.md | 3 ++- windows/client-management/mdm/policy-csp-fileexplorer.md | 3 ++- windows/client-management/mdm/policy-csp-games.md | 3 ++- windows/client-management/mdm/policy-csp-handwriting.md | 3 ++- windows/client-management/mdm/policy-csp-internetexplorer.md | 3 ++- windows/client-management/mdm/policy-csp-kerberos.md | 3 ++- windows/client-management/mdm/policy-csp-kioskbrowser.md | 3 ++- windows/client-management/mdm/policy-csp-licensing.md | 3 ++- .../mdm/policy-csp-localpoliciessecurityoptions.md | 3 ++- windows/client-management/mdm/policy-csp-location.md | 3 ++- windows/client-management/mdm/policy-csp-lockdown.md | 3 ++- windows/client-management/mdm/policy-csp-maps.md | 3 ++- windows/client-management/mdm/policy-csp-messaging.md | 3 ++- windows/client-management/mdm/policy-csp-mssecurityguide.md | 3 ++- windows/client-management/mdm/policy-csp-msslegacy.md | 3 ++- windows/client-management/mdm/policy-csp-networkisolation.md | 3 ++- windows/client-management/mdm/policy-csp-notifications.md | 3 ++- windows/client-management/mdm/policy-csp-power.md | 3 ++- windows/client-management/mdm/policy-csp-printers.md | 3 ++- windows/client-management/mdm/policy-csp-privacy.md | 3 ++- windows/client-management/mdm/policy-csp-remoteassistance.md | 3 ++- .../client-management/mdm/policy-csp-remotedesktopservices.md | 3 ++- windows/client-management/mdm/policy-csp-remotemanagement.md | 3 ++- .../client-management/mdm/policy-csp-remoteprocedurecall.md | 3 ++- windows/client-management/mdm/policy-csp-remoteshell.md | 3 ++- windows/client-management/mdm/policy-csp-search.md | 3 ++- windows/client-management/mdm/policy-csp-security.md | 3 ++- windows/client-management/mdm/policy-csp-settings.md | 3 ++- windows/client-management/mdm/policy-csp-smartscreen.md | 3 ++- windows/client-management/mdm/policy-csp-speech.md | 3 ++- windows/client-management/mdm/policy-csp-start.md | 3 ++- windows/client-management/mdm/policy-csp-storage.md | 3 ++- windows/client-management/mdm/policy-csp-system.md | 3 ++- windows/client-management/mdm/policy-csp-systemservices.md | 3 ++- windows/client-management/mdm/policy-csp-taskscheduler.md | 3 ++- windows/client-management/mdm/policy-csp-textinput.md | 3 ++- .../client-management/mdm/policy-csp-timelanguagesettings.md | 3 ++- windows/client-management/mdm/policy-csp-update.md | 3 ++- windows/client-management/mdm/policy-csp-userrights.md | 3 ++- windows/client-management/mdm/policy-csp-wifi.md | 3 ++- .../mdm/policy-csp-windowsconnectionmanager.md | 3 ++- .../mdm/policy-csp-windowsdefendersecuritycenter.md | 3 ++- .../client-management/mdm/policy-csp-windowsinkworkspace.md | 3 ++- windows/client-management/mdm/policy-csp-windowslogon.md | 3 ++- windows/client-management/mdm/policy-csp-windowspowershell.md | 3 ++- windows/client-management/mdm/policy-csp-wirelessdisplay.md | 3 ++- 82 files changed, 164 insertions(+), 82 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-abovelock.md b/windows/client-management/mdm/policy-csp-abovelock.md index d0b77e50dc..16115c79c9 100644 --- a/windows/client-management/mdm/policy-csp-abovelock.md +++ b/windows/client-management/mdm/policy-csp-abovelock.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - AboveLock @@ -202,6 +202,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md b/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md index 2d0549e77b..7cee27e382 100644 --- a/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md +++ b/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - AccountPoliciesAccountLockoutPolicy @@ -180,6 +180,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-accounts.md b/windows/client-management/mdm/policy-csp-accounts.md index 0fb29f4870..5eb439322d 100644 --- a/windows/client-management/mdm/policy-csp-accounts.md +++ b/windows/client-management/mdm/policy-csp-accounts.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - Accounts @@ -244,6 +244,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-activexcontrols.md b/windows/client-management/mdm/policy-csp-activexcontrols.md index 925504ac0d..2563d21bc2 100644 --- a/windows/client-management/mdm/policy-csp-activexcontrols.md +++ b/windows/client-management/mdm/policy-csp-activexcontrols.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - ActiveXControls @@ -95,6 +95,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-applicationdefaults.md b/windows/client-management/mdm/policy-csp-applicationdefaults.md index dba53edc54..5aaf01d6fb 100644 --- a/windows/client-management/mdm/policy-csp-applicationdefaults.md +++ b/windows/client-management/mdm/policy-csp-applicationdefaults.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - ApplicationDefaults @@ -139,6 +139,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-applicationmanagement.md b/windows/client-management/mdm/policy-csp-applicationmanagement.md index 634f53cafc..47b9d1e09d 100644 --- a/windows/client-management/mdm/policy-csp-applicationmanagement.md +++ b/windows/client-management/mdm/policy-csp-applicationmanagement.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - ApplicationManagement @@ -722,6 +722,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-appruntime.md b/windows/client-management/mdm/policy-csp-appruntime.md index 941e26cef4..7e6fb10c8d 100644 --- a/windows/client-management/mdm/policy-csp-appruntime.md +++ b/windows/client-management/mdm/policy-csp-appruntime.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - AppRuntime @@ -72,6 +72,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-appvirtualization.md b/windows/client-management/mdm/policy-csp-appvirtualization.md index bbb346e93c..562a5224dc 100644 --- a/windows/client-management/mdm/policy-csp-appvirtualization.md +++ b/windows/client-management/mdm/policy-csp-appvirtualization.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - AppVirtualization @@ -1836,6 +1836,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-attachmentmanager.md b/windows/client-management/mdm/policy-csp-attachmentmanager.md index c80e44f614..7b97a87a4b 100644 --- a/windows/client-management/mdm/policy-csp-attachmentmanager.md +++ b/windows/client-management/mdm/policy-csp-attachmentmanager.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - AttachmentManager @@ -229,6 +229,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-authentication.md b/windows/client-management/mdm/policy-csp-authentication.md index 02a363e078..f83bb3905c 100644 --- a/windows/client-management/mdm/policy-csp-authentication.md +++ b/windows/client-management/mdm/policy-csp-authentication.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Authentication @@ -309,6 +309,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-autoplay.md b/windows/client-management/mdm/policy-csp-autoplay.md index 2e2ecaf426..c748e76ae7 100644 --- a/windows/client-management/mdm/policy-csp-autoplay.md +++ b/windows/client-management/mdm/policy-csp-autoplay.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Autoplay @@ -245,6 +245,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-bitlocker.md b/windows/client-management/mdm/policy-csp-bitlocker.md index 852a915bac..fa358dcb81 100644 --- a/windows/client-management/mdm/policy-csp-bitlocker.md +++ b/windows/client-management/mdm/policy-csp-bitlocker.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - Bitlocker @@ -114,6 +114,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-bluetooth.md b/windows/client-management/mdm/policy-csp-bluetooth.md index 3a6b797bf3..fb08f30dc0 100644 --- a/windows/client-management/mdm/policy-csp-bluetooth.md +++ b/windows/client-management/mdm/policy-csp-bluetooth.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - Bluetooth @@ -293,6 +293,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index 22fc158c08..ccafd7cbed 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Browser @@ -2616,6 +2616,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-camera.md b/windows/client-management/mdm/policy-csp-camera.md index 02a242ec12..3cbf216e52 100644 --- a/windows/client-management/mdm/policy-csp-camera.md +++ b/windows/client-management/mdm/policy-csp-camera.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Camera @@ -91,6 +91,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-cellular.md b/windows/client-management/mdm/policy-csp-cellular.md index 5b9aa0d665..431c59baa4 100644 --- a/windows/client-management/mdm/policy-csp-cellular.md +++ b/windows/client-management/mdm/policy-csp-cellular.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Cellular @@ -324,6 +324,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index 249cc6cac3..faf33814cc 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Connectivity @@ -898,6 +898,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md index 229109756e..b606419501 100644 --- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md +++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - ControlPolicyConflict @@ -91,6 +91,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-credentialproviders.md b/windows/client-management/mdm/policy-csp-credentialproviders.md index 039a57e0fb..f3f12c6f73 100644 --- a/windows/client-management/mdm/policy-csp-credentialproviders.md +++ b/windows/client-management/mdm/policy-csp-credentialproviders.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - CredentialProviders @@ -219,6 +219,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-credentialsdelegation.md b/windows/client-management/mdm/policy-csp-credentialsdelegation.md index 1e465a7a21..e347fbd029 100644 --- a/windows/client-management/mdm/policy-csp-credentialsdelegation.md +++ b/windows/client-management/mdm/policy-csp-credentialsdelegation.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - CredentialsDelegation @@ -74,6 +74,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-credentialsui.md b/windows/client-management/mdm/policy-csp-credentialsui.md index ec0f9a0c5e..900ad6176a 100644 --- a/windows/client-management/mdm/policy-csp-credentialsui.md +++ b/windows/client-management/mdm/policy-csp-credentialsui.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - CredentialsUI @@ -163,6 +163,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-cryptography.md b/windows/client-management/mdm/policy-csp-cryptography.md index b2360eb40b..7dadd07af1 100644 --- a/windows/client-management/mdm/policy-csp-cryptography.md +++ b/windows/client-management/mdm/policy-csp-cryptography.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Cryptography @@ -133,6 +133,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-dataprotection.md b/windows/client-management/mdm/policy-csp-dataprotection.md index 1563402e93..28ad8aaca3 100644 --- a/windows/client-management/mdm/policy-csp-dataprotection.md +++ b/windows/client-management/mdm/policy-csp-dataprotection.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - DataProtection @@ -136,6 +136,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-datausage.md b/windows/client-management/mdm/policy-csp-datausage.md index 2aa9b34cd0..89086b22bb 100644 --- a/windows/client-management/mdm/policy-csp-datausage.md +++ b/windows/client-management/mdm/policy-csp-datausage.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - DataUsage @@ -170,6 +170,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index 74091500ca..76c96ac41d 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Defender @@ -2318,6 +2318,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-deliveryoptimization.md b/windows/client-management/mdm/policy-csp-deliveryoptimization.md index 849fcb5d99..cf43d37c41 100644 --- a/windows/client-management/mdm/policy-csp-deliveryoptimization.md +++ b/windows/client-management/mdm/policy-csp-deliveryoptimization.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - DeliveryOptimization @@ -1488,6 +1488,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-desktop.md b/windows/client-management/mdm/policy-csp-desktop.md index 2957bd78f7..36afbf2a08 100644 --- a/windows/client-management/mdm/policy-csp-desktop.md +++ b/windows/client-management/mdm/policy-csp-desktop.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Desktop @@ -93,6 +93,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-deviceguard.md b/windows/client-management/mdm/policy-csp-deviceguard.md index a516cc7ab4..b541578089 100644 --- a/windows/client-management/mdm/policy-csp-deviceguard.md +++ b/windows/client-management/mdm/policy-csp-deviceguard.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - DeviceGuard @@ -214,6 +214,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-deviceinstallation.md b/windows/client-management/mdm/policy-csp-deviceinstallation.md index c8b4f6b9d9..38941fd46b 100644 --- a/windows/client-management/mdm/policy-csp-deviceinstallation.md +++ b/windows/client-management/mdm/policy-csp-deviceinstallation.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - DeviceInstallation @@ -158,6 +158,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-devicelock.md b/windows/client-management/mdm/policy-csp-devicelock.md index 5663570085..1a791a7b71 100644 --- a/windows/client-management/mdm/policy-csp-devicelock.md +++ b/windows/client-management/mdm/policy-csp-devicelock.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - DeviceLock @@ -1192,6 +1192,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-display.md b/windows/client-management/mdm/policy-csp-display.md index 827b347c3e..0cf8a9740d 100644 --- a/windows/client-management/mdm/policy-csp-display.md +++ b/windows/client-management/mdm/policy-csp-display.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Display @@ -355,6 +355,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-education.md b/windows/client-management/mdm/policy-csp-education.md index 8eab86d6e3..e1fb1b9965 100644 --- a/windows/client-management/mdm/policy-csp-education.md +++ b/windows/client-management/mdm/policy-csp-education.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Education @@ -185,6 +185,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-enterprisecloudprint.md b/windows/client-management/mdm/policy-csp-enterprisecloudprint.md index 63d4b5f3b2..4b5b961ad9 100644 --- a/windows/client-management/mdm/policy-csp-enterprisecloudprint.md +++ b/windows/client-management/mdm/policy-csp-enterprisecloudprint.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - EnterpriseCloudPrint @@ -328,6 +328,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-errorreporting.md b/windows/client-management/mdm/policy-csp-errorreporting.md index ed18d1d8d9..d2a31d1077 100644 --- a/windows/client-management/mdm/policy-csp-errorreporting.md +++ b/windows/client-management/mdm/policy-csp-errorreporting.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - ErrorReporting @@ -367,6 +367,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-eventlogservice.md b/windows/client-management/mdm/policy-csp-eventlogservice.md index e0d3529cc9..835be83eb0 100644 --- a/windows/client-management/mdm/policy-csp-eventlogservice.md +++ b/windows/client-management/mdm/policy-csp-eventlogservice.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - EventLogService @@ -290,6 +290,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index b741cd983e..3f96460055 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Experience @@ -1304,6 +1304,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-exploitguard.md b/windows/client-management/mdm/policy-csp-exploitguard.md index ca51c9a7a7..bdf443d549 100644 --- a/windows/client-management/mdm/policy-csp-exploitguard.md +++ b/windows/client-management/mdm/policy-csp-exploitguard.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - ExploitGuard @@ -112,6 +112,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-fileexplorer.md b/windows/client-management/mdm/policy-csp-fileexplorer.md index 13c169e91b..9216df0e67 100644 --- a/windows/client-management/mdm/policy-csp-fileexplorer.md +++ b/windows/client-management/mdm/policy-csp-fileexplorer.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - FileExplorer @@ -106,6 +106,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-games.md b/windows/client-management/mdm/policy-csp-games.md index 2a651204e1..d14fd92fed 100644 --- a/windows/client-management/mdm/policy-csp-games.md +++ b/windows/client-management/mdm/policy-csp-games.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - Games @@ -81,6 +81,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-handwriting.md b/windows/client-management/mdm/policy-csp-handwriting.md index 438387b1b6..bdbcb764ae 100644 --- a/windows/client-management/mdm/policy-csp-handwriting.md +++ b/windows/client-management/mdm/policy-csp-handwriting.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Handwriting @@ -95,6 +95,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-internetexplorer.md b/windows/client-management/mdm/policy-csp-internetexplorer.md index ff5dd18eae..304792e860 100644 --- a/windows/client-management/mdm/policy-csp-internetexplorer.md +++ b/windows/client-management/mdm/policy-csp-internetexplorer.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - InternetExplorer @@ -16786,6 +16786,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-kerberos.md b/windows/client-management/mdm/policy-csp-kerberos.md index 6831acebc5..974db5f350 100644 --- a/windows/client-management/mdm/policy-csp-kerberos.md +++ b/windows/client-management/mdm/policy-csp-kerberos.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Kerberos @@ -360,6 +360,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-kioskbrowser.md b/windows/client-management/mdm/policy-csp-kioskbrowser.md index 933c3fa2e8..27f995e4d9 100644 --- a/windows/client-management/mdm/policy-csp-kioskbrowser.md +++ b/windows/client-management/mdm/policy-csp-kioskbrowser.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - KioskBrowser @@ -314,6 +314,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-licensing.md b/windows/client-management/mdm/policy-csp-licensing.md index 0e063d9b5f..eae5cdc5d7 100644 --- a/windows/client-management/mdm/policy-csp-licensing.md +++ b/windows/client-management/mdm/policy-csp-licensing.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Licensing @@ -150,6 +150,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index 1ffde8a086..27c960d639 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - LocalPoliciesSecurityOptions @@ -3529,6 +3529,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-location.md b/windows/client-management/mdm/policy-csp-location.md index 18e7a7fd97..8117114323 100644 --- a/windows/client-management/mdm/policy-csp-location.md +++ b/windows/client-management/mdm/policy-csp-location.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Location @@ -99,6 +99,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-lockdown.md b/windows/client-management/mdm/policy-csp-lockdown.md index be9c02f1d7..228d2f75ec 100644 --- a/windows/client-management/mdm/policy-csp-lockdown.md +++ b/windows/client-management/mdm/policy-csp-lockdown.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - LockDown @@ -91,6 +91,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-maps.md b/windows/client-management/mdm/policy-csp-maps.md index d60af40683..8b44913146 100644 --- a/windows/client-management/mdm/policy-csp-maps.md +++ b/windows/client-management/mdm/policy-csp-maps.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Maps @@ -148,6 +148,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-messaging.md b/windows/client-management/mdm/policy-csp-messaging.md index 2ad6d83fe0..f1862d266d 100644 --- a/windows/client-management/mdm/policy-csp-messaging.md +++ b/windows/client-management/mdm/policy-csp-messaging.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Messaging @@ -201,6 +201,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-mssecurityguide.md b/windows/client-management/mdm/policy-csp-mssecurityguide.md index 8dc3535360..8759b6d49a 100644 --- a/windows/client-management/mdm/policy-csp-mssecurityguide.md +++ b/windows/client-management/mdm/policy-csp-mssecurityguide.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - MSSecurityGuide @@ -240,6 +240,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-msslegacy.md b/windows/client-management/mdm/policy-csp-msslegacy.md index 68078ca276..54107559ca 100644 --- a/windows/client-management/mdm/policy-csp-msslegacy.md +++ b/windows/client-management/mdm/policy-csp-msslegacy.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - MSSLegacy @@ -170,6 +170,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-networkisolation.md b/windows/client-management/mdm/policy-csp-networkisolation.md index 70db29303b..d5d98f64b1 100644 --- a/windows/client-management/mdm/policy-csp-networkisolation.md +++ b/windows/client-management/mdm/policy-csp-networkisolation.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - NetworkIsolation @@ -480,6 +480,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-notifications.md b/windows/client-management/mdm/policy-csp-notifications.md index b4363ef967..8dddbe0d18 100644 --- a/windows/client-management/mdm/policy-csp-notifications.md +++ b/windows/client-management/mdm/policy-csp-notifications.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Notifications @@ -93,6 +93,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-power.md b/windows/client-management/mdm/policy-csp-power.md index 89d381dddf..5bee576aca 100644 --- a/windows/client-management/mdm/policy-csp-power.md +++ b/windows/client-management/mdm/policy-csp-power.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - Power @@ -667,6 +667,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-printers.md b/windows/client-management/mdm/policy-csp-printers.md index fd0939f604..be94af174b 100644 --- a/windows/client-management/mdm/policy-csp-printers.md +++ b/windows/client-management/mdm/policy-csp-printers.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Printers @@ -251,6 +251,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-privacy.md b/windows/client-management/mdm/policy-csp-privacy.md index 3595219241..c084709cd0 100644 --- a/windows/client-management/mdm/policy-csp-privacy.md +++ b/windows/client-management/mdm/policy-csp-privacy.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Privacy @@ -4485,6 +4485,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-remoteassistance.md b/windows/client-management/mdm/policy-csp-remoteassistance.md index a26dd4c251..01e2f7e4b7 100644 --- a/windows/client-management/mdm/policy-csp-remoteassistance.md +++ b/windows/client-management/mdm/policy-csp-remoteassistance.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - RemoteAssistance @@ -339,6 +339,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-remotedesktopservices.md b/windows/client-management/mdm/policy-csp-remotedesktopservices.md index 3af7f7ca34..0e4be98697 100644 --- a/windows/client-management/mdm/policy-csp-remotedesktopservices.md +++ b/windows/client-management/mdm/policy-csp-remotedesktopservices.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - RemoteDesktopServices @@ -450,6 +450,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-remotemanagement.md b/windows/client-management/mdm/policy-csp-remotemanagement.md index 67d82bb4f9..96324dc5cc 100644 --- a/windows/client-management/mdm/policy-csp-remotemanagement.md +++ b/windows/client-management/mdm/policy-csp-remotemanagement.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - RemoteManagement @@ -1032,6 +1032,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-remoteprocedurecall.md b/windows/client-management/mdm/policy-csp-remoteprocedurecall.md index 41fb1d8539..295bf5c56e 100644 --- a/windows/client-management/mdm/policy-csp-remoteprocedurecall.md +++ b/windows/client-management/mdm/policy-csp-remoteprocedurecall.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - RemoteProcedureCall @@ -174,6 +174,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-remoteshell.md b/windows/client-management/mdm/policy-csp-remoteshell.md index 20a0ac4151..cbb9717f73 100644 --- a/windows/client-management/mdm/policy-csp-remoteshell.md +++ b/windows/client-management/mdm/policy-csp-remoteshell.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - RemoteShell @@ -487,6 +487,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-search.md b/windows/client-management/mdm/policy-csp-search.md index 85b59673d8..dfdf82afa1 100644 --- a/windows/client-management/mdm/policy-csp-search.md +++ b/windows/client-management/mdm/policy-csp-search.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Search @@ -858,6 +858,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-security.md b/windows/client-management/mdm/policy-csp-security.md index 9d95aab726..b03abc2582 100644 --- a/windows/client-management/mdm/policy-csp-security.md +++ b/windows/client-management/mdm/policy-csp-security.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Security @@ -662,6 +662,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-settings.md b/windows/client-management/mdm/policy-csp-settings.md index 5031440194..5773e32200 100644 --- a/windows/client-management/mdm/policy-csp-settings.md +++ b/windows/client-management/mdm/policy-csp-settings.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Settings @@ -847,6 +847,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-smartscreen.md b/windows/client-management/mdm/policy-csp-smartscreen.md index be4301165b..3eea69f19b 100644 --- a/windows/client-management/mdm/policy-csp-smartscreen.md +++ b/windows/client-management/mdm/policy-csp-smartscreen.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - SmartScreen @@ -212,6 +212,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-speech.md b/windows/client-management/mdm/policy-csp-speech.md index 9a691d7670..33cdd64750 100644 --- a/windows/client-management/mdm/policy-csp-speech.md +++ b/windows/client-management/mdm/policy-csp-speech.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Speech @@ -89,6 +89,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-start.md b/windows/client-management/mdm/policy-csp-start.md index 50809d5486..d9d149dd3a 100644 --- a/windows/client-management/mdm/policy-csp-start.md +++ b/windows/client-management/mdm/policy-csp-start.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Start @@ -1763,6 +1763,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-storage.md b/windows/client-management/mdm/policy-csp-storage.md index 536aac2ce2..b27f3af35b 100644 --- a/windows/client-management/mdm/policy-csp-storage.md +++ b/windows/client-management/mdm/policy-csp-storage.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Storage @@ -158,6 +158,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-system.md b/windows/client-management/mdm/policy-csp-system.md index d943b9d855..6c6ed3c4c9 100644 --- a/windows/client-management/mdm/policy-csp-system.md +++ b/windows/client-management/mdm/policy-csp-system.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - System @@ -1052,6 +1052,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-systemservices.md b/windows/client-management/mdm/policy-csp-systemservices.md index ffdb12f42a..9dd4ebd067 100644 --- a/windows/client-management/mdm/policy-csp-systemservices.md +++ b/windows/client-management/mdm/policy-csp-systemservices.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - SystemServices @@ -342,6 +342,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-taskscheduler.md b/windows/client-management/mdm/policy-csp-taskscheduler.md index 88a19a26c4..7fee0be3b0 100644 --- a/windows/client-management/mdm/policy-csp-taskscheduler.md +++ b/windows/client-management/mdm/policy-csp-taskscheduler.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - TaskScheduler @@ -76,6 +76,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-textinput.md b/windows/client-management/mdm/policy-csp-textinput.md index b5cb108686..6b2f4389e8 100644 --- a/windows/client-management/mdm/policy-csp-textinput.md +++ b/windows/client-management/mdm/policy-csp-textinput.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - TextInput @@ -1306,6 +1306,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-timelanguagesettings.md b/windows/client-management/mdm/policy-csp-timelanguagesettings.md index c926c03e45..f577d940bb 100644 --- a/windows/client-management/mdm/policy-csp-timelanguagesettings.md +++ b/windows/client-management/mdm/policy-csp-timelanguagesettings.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/30/2018 +ms.date: 03/12/2018 --- # Policy CSP - TimeLanguageSettings @@ -81,6 +81,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 7a92fffc6a..70198e988d 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Update @@ -3064,6 +3064,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 6e52bc893b..3584468818 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - UserRights @@ -1542,6 +1542,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-wifi.md b/windows/client-management/mdm/policy-csp-wifi.md index f4e3dbae88..358dc3fc01 100644 --- a/windows/client-management/mdm/policy-csp-wifi.md +++ b/windows/client-management/mdm/policy-csp-wifi.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - Wifi @@ -386,6 +386,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md index 87aa32bfbb..c5ac238f1d 100644 --- a/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md +++ b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - WindowsConnectionManager @@ -80,6 +80,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md index 8329d11f77..c94d1e9dd5 100644 --- a/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md +++ b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - WindowsDefenderSecurityCenter @@ -1196,6 +1196,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-windowsinkworkspace.md b/windows/client-management/mdm/policy-csp-windowsinkworkspace.md index 3549c95e06..27f04f2813 100644 --- a/windows/client-management/mdm/policy-csp-windowsinkworkspace.md +++ b/windows/client-management/mdm/policy-csp-windowsinkworkspace.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - WindowsInkWorkspace @@ -152,6 +152,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-windowslogon.md b/windows/client-management/mdm/policy-csp-windowslogon.md index 3847749f8f..16e39d3e9c 100644 --- a/windows/client-management/mdm/policy-csp-windowslogon.md +++ b/windows/client-management/mdm/policy-csp-windowslogon.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - WindowsLogon @@ -310,6 +310,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-windowspowershell.md b/windows/client-management/mdm/policy-csp-windowspowershell.md index 4ed6d00d53..ee96a4746f 100644 --- a/windows/client-management/mdm/policy-csp-windowspowershell.md +++ b/windows/client-management/mdm/policy-csp-windowspowershell.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/09/2018 +ms.date: 03/12/2018 --- # Policy CSP - WindowsPowerShell @@ -77,6 +77,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/policy-csp-wirelessdisplay.md b/windows/client-management/mdm/policy-csp-wirelessdisplay.md index 9e122a3f3f..cafb7be12e 100644 --- a/windows/client-management/mdm/policy-csp-wirelessdisplay.md +++ b/windows/client-management/mdm/policy-csp-wirelessdisplay.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/12/2018 --- # Policy CSP - WirelessDisplay @@ -453,6 +453,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. From 8f0298db30a3563323ff0a00518a09103917545b Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 12 Mar 2018 21:44:24 +0000 Subject: [PATCH 042/138] Merged PR 6314: TimeLanguageSettings/AllowSet24HourClock - updated the default value fixed default value --- .../mdm/policy-csp-timelanguagesettings.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-timelanguagesettings.md b/windows/client-management/mdm/policy-csp-timelanguagesettings.md index f577d940bb..731fc2ae63 100644 --- a/windows/client-management/mdm/policy-csp-timelanguagesettings.md +++ b/windows/client-management/mdm/policy-csp-timelanguagesettings.md @@ -63,14 +63,14 @@ ms.date: 03/12/2018 -Allows for the configuration of the default clock setting to be the 24 hour format. Selecting 'Set 24 hour Clock' enables this setting. Selecting 'Locale default setting' uses the default clock as prescribed by the current locale setting. +Allows for the configuration of the default clock setting to be the 24 hour format. If set to 0 (zero), the device uses the default clock as prescribed by the current locale setting. The following list shows the supported values: -- 0 – Locale default setting. -- 1 (default) – Set 24 hour clock. +- 0 (default) – Current locale setting. +- 1 – Set 24 hour clock. From 0292ef2bf3d68859455d386b1c1e3109449aa8cb Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 12 Mar 2018 21:44:51 +0000 Subject: [PATCH 043/138] Merged PR 6313: Updated the Policy DDF topic with the latest version --- .../client-management/mdm/policy-ddf-file.md | 1158 +++++++++++------ 1 file changed, 779 insertions(+), 379 deletions(-) diff --git a/windows/client-management/mdm/policy-ddf-file.md b/windows/client-management/mdm/policy-ddf-file.md index 406db3df06..0b6035ae0a 100644 --- a/windows/client-management/mdm/policy-ddf-file.md +++ b/windows/client-management/mdm/policy-ddf-file.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 02/26/2018 +ms.date: 03/12/2018 --- # Policy DDF file @@ -95,6 +95,30 @@ The XML below is the DDF for Windows 10, version 1803. + + MSIAlwaysInstallWithElevatedPrivileges + + + + + + + + + + + + + + + + + + + text/plain + + + RequirePrivateStoreOnly @@ -7848,6 +7872,30 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on + + EnableEndSessionButton + + + + + + + + Enable/disable kiosk browser's end session button. + + + + + + + + + + + text/plain + + + EnableHomeButton @@ -7966,6 +8014,30 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on + + DisallowTileNotification + + + + + + + + + + + + + + + + + + + text/plain + + + Printers @@ -8284,6 +8356,34 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on + + MSIAlwaysInstallWithElevatedPrivileges + + + + + 0 + + + + + + + + + + + + text/plain + + + phone + MSI.admx + MSI~AT~WindowsComponents~MSI + AlwaysInstallElevated + HighestValueMostSecure + + RequirePrivateStoreOnly @@ -8307,7 +8407,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on WindowsStore.admx WindowsStore~AT~WindowsComponents~WindowsStore - RequirePrivateStoreOnly_1 + RequirePrivateStoreOnly HighestValueMostSecure @@ -15167,7 +15267,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on phone inetres.admx inetres~AT~WindowsComponents~InternetExplorer~SecurityFeatures~IESF_CategoryProtectionFromZoneElevation - IESF_PolicyAllProcesses_9 + IESF_PolicyExplorerProcesses_9 LastWrite @@ -15221,7 +15321,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on phone inetres.admx inetres~AT~WindowsComponents~InternetExplorer~SecurityFeatures~IESF_CategoryRestrictActiveXInstall - IESF_PolicyAllProcesses_11 + IESF_PolicyExplorerProcesses_11 LastWrite @@ -16382,7 +16482,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on phone inetres.admx inetres~AT~WindowsComponents~InternetExplorer~SecurityFeatures~IESF_CategoryRestrictFileDownload - IESF_PolicyAllProcesses_12 + IESF_PolicyExplorerProcesses_12 LastWrite @@ -16409,7 +16509,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on phone inetres.admx inetres~AT~WindowsComponents~InternetExplorer~SecurityFeatures~IESF_CategoryScriptedWindowSecurityRestrictions - IESF_PolicyAllProcesses_8 + IESF_PolicyExplorerProcesses_8 LastWrite @@ -16910,6 +17010,31 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on LastWrite + + EnableEndSessionButton + + + + + 0 + Enable/disable kiosk browser's end session button. + + + + + + + + + + + text/plain + + + phone + LastWrite + + EnableHomeButton @@ -17032,6 +17157,33 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on LowestValueMostSecure + + DisallowTileNotification + + + + + 0 + + + + + + + + + + + + text/plain + + + WPN.admx + WPN~AT~StartMenu~NotificationsCategory + NoTileNotification + LowestValueMostSecure + + Printers @@ -18024,6 +18176,78 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on + + MSIAllowUserControlOverInstall + + + + + + + + + + + + + + + + + + + text/plain + + + + + MSIAlwaysInstallWithElevatedPrivileges + + + + + + + + + + + + + + + + + + + text/plain + + + + + RequirePrivateStoreOnly + + + + + + + + + + + + + + + + + + + text/plain + + + RestrictAppDataToSystemVolume @@ -30441,6 +30665,30 @@ Configure the minimum password age to be more than 0 if you want Enforce passwor + + EnableEndSessionButton + + + + + + + + Enable/disable kiosk browser's end session button. + + + + + + + + + + + text/plain + + + EnableHomeButton @@ -30514,6 +30762,52 @@ Configure the minimum password age to be more than 0 if you want Enforce passwor + + LanmanWorkstation + + + + + + + + + + + + + + + + + + + + + EnableInsecureGuestLogons + + + + + + + + + + + + + + + + + + + text/plain + + + + Licensing @@ -30994,38 +31288,6 @@ Note: Domain controllers are also domain members and establish secure channels w - - DomainMember_DigitallySignSecureChannelDataWhenPossible - - - - - - - - Domain member: Digitally sign secure channel data (when possible) - -This security setting determines whether a domain member attempts to negotiate signing for all secure channel traffic that it initiates. - -When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass through authentication, LSA SID/name Lookup etc. - -This setting determines whether or not the domain member attempts to negotiate signing for all secure channel traffic that it initiates. If enabled, the domain member will request signing of all secure channel traffic. If the Domain Controller supports signing of all secure channel traffic, then all secure channel traffic will be signed which ensures that it cannot be tampered with in transit. - -Default: Enabled. - - - - - - - - - - - text/plain - - - DomainMember_DisableMachineAccountPasswordChanges @@ -31059,81 +31321,6 @@ This setting should not be used in an attempt to support dual-boot scenarios tha - - DomainMember_MaximumMachineAccountPasswordAge - - - - - - - - Domain member: Maximum machine account password age - -This security setting determines how often a domain member will attempt to change its computer account password. - -Default: 30 days. - -Important - -This setting applies to Windows 2000 computers, but it is not available through the Security Configuration Manager tools on these computers. - - - - - - - - - - - text/plain - - - - - DomainMember_RequireStrongSessionKey - - - - - - - - Domain member: Require strong (Windows 2000 or later) session key - -This security setting determines whether 128-bit key strength is required for encrypted secure channel data. - -When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller within the domain. This secure channel is used to perform operations such as NTLM pass-through authentication, LSA SID/name Lookup, and so on. - -Depending on what version of Windows is running on the domain controller that the domain member is communicating with and the settings of the parameters: - -Domain member: Digitally encrypt or sign secure channel data (always) -Domain member: Digitally encrypt secure channel data (when possible) -Some or all of the information that is transmitted over the secure channel will be encrypted. This policy setting determines whether or not 128-bit key strength is required for the secure channel information that is encrypted. - -If this setting is enabled, then the secure channel will not be established unless 128-bit encryption can be performed. If this setting is disabled, then the key strength is negotiated with the domain controller. - -Default: Enabled. - -Important - -In order to take advantage of this policy on member workstations and servers, all domain controllers that constitute the member's domain must be running Windows 2000 or later. -In order to take advantage of this policy on domain controllers, all domain controllers in the same domain as well as all trusted domains must run Windows 2000 or later. - - - - - - - - - - - text/plain - - - InteractiveLogon_DisplayUserInformationWhenTheSessionIsLocked @@ -31385,52 +31572,6 @@ On Windows Vista and above: For this setting to work, the Smart Card Removal Pol - - MicrosoftNetworkClient_DigitallySignCommunicationsAlways - - - - - - - - Microsoft network client: Digitally sign communications (always) - -This security setting determines whether packet signing is required by the SMB client component. - -The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether SMB packet signing must be negotiated before further communication with an SMB server is permitted. - -If this setting is enabled, the Microsoft network client will not communicate with a Microsoft network server unless that server agrees to perform SMB packet signing. If this policy is disabled, SMB packet signing is negotiated between the client and server. - -Default: Disabled. - -Important - -For this policy to take effect on computers running Windows 2000, client-side packet signing must also be enabled. To enable client-side SMB packet signing, set Microsoft network client: Digitally sign communications (if server agrees). - -Notes - -All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later operating systems, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: -Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. -Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. -Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. -Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. -SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. -For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136. - - - - - - - - - - - text/plain - - - MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees @@ -31880,7 +32021,7 @@ Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: Send - NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients + NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers @@ -31888,12 +32029,12 @@ Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: Send - Network security: Minimum session security for NTLM SSP based (including secure RPC) clients + Network security: Minimum session security for NTLM SSP based (including secure RPC) servers -This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: +This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: -Require NTLMv2 session security: The connection will fail if NTLMv2 protocol is not negotiated. -Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated. +Require NTLMv2 session security: The connection will fail if message integrity is not negotiated. +Require 128-bit encryption. The connection will fail if strong encryption (128-bit) is not negotiated. Default: @@ -31915,7 +32056,7 @@ Windows 7 and Windows Server 2008 R2: Require 128-bit encryption - NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers + NetworkSecurity_RestrictNTLM_AddRemoteServerExceptionsForNTLMAuthentication @@ -31923,18 +32064,123 @@ Windows 7 and Windows Server 2008 R2: Require 128-bit encryption - Network security: Minimum session security for NTLM SSP based (including secure RPC) servers + Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication -This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: +This policy setting allows you to create an exception list of remote servers to which clients are allowed to use NTLM authentication if the "Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers" policy setting is configured. -Require NTLMv2 session security: The connection will fail if message integrity is not negotiated. -Require 128-bit encryption. The connection will fail if strong encryption (128-bit) is not negotiated. +If you configure this policy setting, you can define a list of remote servers to which clients are allowed to use NTLM authentication. -Default: +If you do not configure this policy setting, no exceptions will be applied. -Windows XP, Windows Vista, Windows 2000 Server, Windows Server 2003, and Windows Server 2008: No requirements. +The naming format for servers on this exception list is the fully qualified domain name (FQDN) or NetBIOS server name used by the application, listed one per line. To ensure exceptions the name used by all applications needs to be in the list, and to ensure an exception is accurate, the server name should be listed in both naming formats . A single asterisk (*) can be used anywhere in the string as a wildcard character. + + + + + + + + + + + text/plain + + + + + NetworkSecurity_RestrictNTLM_AuditIncomingNTLMTraffic + + + + + + + + Network security: Restrict NTLM: Audit Incoming NTLM Traffic -Windows 7 and Windows Server 2008 R2: Require 128-bit encryption +This policy setting allows you to audit incoming NTLM traffic. + +If you select "Disable", or do not configure this policy setting, the server will not log events for incoming NTLM traffic. + +If you select "Enable auditing for domain accounts", the server will log events for NTLM pass-through authentication requests that would be blocked when the "Network Security: Restrict NTLM: Incoming NTLM traffic" policy setting is set to the "Deny all domain accounts" option. + +If you select "Enable auditing for all accounts", the server will log events for all NTLM authentication requests that would be blocked when the "Network Security: Restrict NTLM: Incoming NTLM traffic" policy setting is set to the "Deny all accounts" option. + +This policy is supported on at least Windows 7 or Windows Server 2008 R2. + +Note: Audit events are recorded on this computer in the "Operational" Log located under the Applications and Services Log/Microsoft/Windows/NTLM. + + + + + + + + + + + text/plain + + + + + NetworkSecurity_RestrictNTLM_IncomingNTLMTraffic + + + + + + + + Network security: Restrict NTLM: Incoming NTLM traffic + +This policy setting allows you to deny or allow incoming NTLM traffic. + +If you select "Allow all" or do not configure this policy setting, the server will allow all NTLM authentication requests. + +If you select "Deny all domain accounts," the server will deny NTLM authentication requests for domain logon and display an NTLM blocked error, but allow local account logon. + +If you select "Deny all accounts," the server will deny NTLM authentication requests from incoming traffic and display an NTLM blocked error. + +This policy is supported on at least Windows 7 or Windows Server 2008 R2. + +Note: Block events are recorded on this computer in the "Operational" Log located under the Applications and Services Log/Microsoft/Windows/NTLM. + + + + + + + + + + + text/plain + + + + + NetworkSecurity_RestrictNTLM_OutgoingNTLMTrafficToRemoteServers + + + + + + + + Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers + +This policy setting allows you to deny or audit outgoing NTLM traffic from this Windows 7 or this Windows Server 2008 R2 computer to any Windows remote server. + +If you select "Allow all" or do not configure this policy setting, the client computer can authenticate identities to a remote server by using NTLM authentication. + +If you select "Audit all," the client computer logs an event for each NTLM authentication request to a remote server. This allows you to identify those servers receiving NTLM authentication requests from the client computer. + +If you select "Deny all," the client computer cannot authenticate identities to a remote server by using NTLM authentication. You can use the "Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication" policy setting to define a list of remote servers to which clients are allowed to use NTLM authentication. + +This policy is supported on at least Windows 7 or Windows Server 2008 R2. + +Note: Audit and block events are recorded on this computer in the "Operational" Log located under the Applications and Services Log/Microsoft/Windows/NTLM. @@ -32721,6 +32967,30 @@ The options are: + + TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications + + + + + + + + + + + + + + + + + + + text/plain + + + WDigestAuthentication @@ -43215,6 +43485,89 @@ Because of these factors, users do not usually need this user right. Warning: If LowestValueMostSecure + + MSIAllowUserControlOverInstall + + + + + 0 + + + + + + + + + + + + text/plain + + + phone + MSI.admx + MSI~AT~WindowsComponents~MSI + EnableUserControl + HighestValueMostSecure + + + + MSIAlwaysInstallWithElevatedPrivileges + + + + + 0 + + + + + + + + + + + + text/plain + + + phone + MSI.admx + MSI~AT~WindowsComponents~MSI + AlwaysInstallElevated + HighestValueMostSecure + + + + RequirePrivateStoreOnly + + + + + 0 + + + + + + + + + + + + text/plain + + + WindowsStore.admx + WindowsStore~AT~WindowsComponents~WindowsStore + RequirePrivateStoreOnly + HighestValueMostSecure + + RestrictAppDataToSystemVolume @@ -55097,7 +55450,7 @@ Configure the minimum password age to be more than 0 if you want Enforce passwor phone inetres.admx inetres~AT~WindowsComponents~InternetExplorer~SecurityFeatures~IESF_CategoryProtectionFromZoneElevation - IESF_PolicyAllProcesses_9 + IESF_PolicyExplorerProcesses_9 LastWrite @@ -55151,7 +55504,7 @@ Configure the minimum password age to be more than 0 if you want Enforce passwor phone inetres.admx inetres~AT~WindowsComponents~InternetExplorer~SecurityFeatures~IESF_CategoryRestrictActiveXInstall - IESF_PolicyAllProcesses_11 + IESF_PolicyExplorerProcesses_11 LastWrite @@ -56312,7 +56665,7 @@ Configure the minimum password age to be more than 0 if you want Enforce passwor phone inetres.admx inetres~AT~WindowsComponents~InternetExplorer~SecurityFeatures~IESF_CategoryRestrictFileDownload - IESF_PolicyAllProcesses_12 + IESF_PolicyExplorerProcesses_12 LastWrite @@ -56339,7 +56692,7 @@ Configure the minimum password age to be more than 0 if you want Enforce passwor phone inetres.admx inetres~AT~WindowsComponents~InternetExplorer~SecurityFeatures~IESF_CategoryScriptedWindowSecurityRestrictions - IESF_PolicyAllProcesses_8 + IESF_PolicyExplorerProcesses_8 LastWrite @@ -57022,6 +57375,31 @@ Configure the minimum password age to be more than 0 if you want Enforce passwor LastWrite + + EnableEndSessionButton + + + + + 0 + Enable/disable kiosk browser's end session button. + + + + + + + + + + + text/plain + + + phone + LastWrite + + EnableHomeButton @@ -57098,6 +57476,53 @@ Configure the minimum password age to be more than 0 if you want Enforce passwor + + LanmanWorkstation + + + + + + + + + + + + + + + + + + + EnableInsecureGuestLogons + + + + + 0 + + + + + + + + + + + + text/plain + + + LanmanWorkstation.admx + LanmanWorkstation~AT~Network~Cat_LanmanWorkstation + Pol_EnableInsecureGuestLogons + LowestValueMostSecure + + + Licensing @@ -57614,41 +58039,6 @@ Note: Domain controllers are also domain members and establish secure channels w LastWrite - - DomainMember_DigitallySignSecureChannelDataWhenPossible - - - - - 1 - Domain member: Digitally sign secure channel data (when possible) - -This security setting determines whether a domain member attempts to negotiate signing for all secure channel traffic that it initiates. - -When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass through authentication, LSA SID/name Lookup etc. - -This setting determines whether or not the domain member attempts to negotiate signing for all secure channel traffic that it initiates. If enabled, the domain member will request signing of all secure channel traffic. If the Domain Controller supports signing of all secure channel traffic, then all secure channel traffic will be signed which ensures that it cannot be tampered with in transit. - -Default: Enabled. - - - - - - - - - - - text/plain - - - phone - Windows Settings~Security Settings~Local Policies~Security Options - Domain member: Digitally sign secure channel data (when possible) - LastWrite - - DomainMember_DisableMachineAccountPasswordChanges @@ -57685,87 +58075,6 @@ This setting should not be used in an attempt to support dual-boot scenarios tha LastWrite - - DomainMember_MaximumMachineAccountPasswordAge - - - - - 30 - Domain member: Maximum machine account password age - -This security setting determines how often a domain member will attempt to change its computer account password. - -Default: 30 days. - -Important - -This setting applies to Windows 2000 computers, but it is not available through the Security Configuration Manager tools on these computers. - - - - - - - - - - - text/plain - - - phone - Windows Settings~Security Settings~Local Policies~Security Options - Domain member: Maximum machine account password age - LowestValueMostSecure - - - - DomainMember_RequireStrongSessionKey - - - - - 1 - Domain member: Require strong (Windows 2000 or later) session key - -This security setting determines whether 128-bit key strength is required for encrypted secure channel data. - -When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller within the domain. This secure channel is used to perform operations such as NTLM pass-through authentication, LSA SID/name Lookup, and so on. - -Depending on what version of Windows is running on the domain controller that the domain member is communicating with and the settings of the parameters: - -Domain member: Digitally encrypt or sign secure channel data (always) -Domain member: Digitally encrypt secure channel data (when possible) -Some or all of the information that is transmitted over the secure channel will be encrypted. This policy setting determines whether or not 128-bit key strength is required for the secure channel information that is encrypted. - -If this setting is enabled, then the secure channel will not be established unless 128-bit encryption can be performed. If this setting is disabled, then the key strength is negotiated with the domain controller. - -Default: Enabled. - -Important - -In order to take advantage of this policy on member workstations and servers, all domain controllers that constitute the member's domain must be running Windows 2000 or later. -In order to take advantage of this policy on domain controllers, all domain controllers in the same domain as well as all trusted domains must run Windows 2000 or later. - - - - - - - - - - - text/plain - - - phone - Windows Settings~Security Settings~Local Policies~Security Options - Domain member: Require strong (Windows 2000 or later) session key - LastWrite - - InteractiveLogon_DisplayUserInformationWhenTheSessionIsLocked @@ -58039,55 +58348,6 @@ On Windows Vista and above: For this setting to work, the Smart Card Removal Pol LastWrite - - MicrosoftNetworkClient_DigitallySignCommunicationsAlways - - - - - 0 - Microsoft network client: Digitally sign communications (always) - -This security setting determines whether packet signing is required by the SMB client component. - -The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether SMB packet signing must be negotiated before further communication with an SMB server is permitted. - -If this setting is enabled, the Microsoft network client will not communicate with a Microsoft network server unless that server agrees to perform SMB packet signing. If this policy is disabled, SMB packet signing is negotiated between the client and server. - -Default: Disabled. - -Important - -For this policy to take effect on computers running Windows 2000, client-side packet signing must also be enabled. To enable client-side SMB packet signing, set Microsoft network client: Digitally sign communications (if server agrees). - -Notes - -All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later operating systems, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: -Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. -Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. -Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. -Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. -SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. -For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136. - - - - - - - - - - - text/plain - - - phone - Windows Settings~Security Settings~Local Policies~Security Options - Microsoft network client: Digitally sign communications (always) - LastWrite - - MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees @@ -58571,44 +58831,6 @@ Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: Send HighestValueMostSecure - - NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients - - - - - 0 - Network security: Minimum session security for NTLM SSP based (including secure RPC) clients - -This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: - -Require NTLMv2 session security: The connection will fail if NTLMv2 protocol is not negotiated. -Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated. - -Default: - -Windows XP, Windows Vista, Windows 2000 Server, Windows Server 2003, and Windows Server 2008: No requirements. - -Windows 7 and Windows Server 2008 R2: Require 128-bit encryption - - - - - - - - - - - text/plain - - - phone - Windows Settings~Security Settings~Local Policies~Security Options - Network security: Minimum session security for NTLM SSP based (including secure RPC) clients - HighestValueMostSecure - - NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers @@ -58647,6 +58869,157 @@ Windows 7 and Windows Server 2008 R2: Require 128-bit encryption HighestValueMostSecure + + NetworkSecurity_RestrictNTLM_AddRemoteServerExceptionsForNTLMAuthentication + + + + + + Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication + +This policy setting allows you to create an exception list of remote servers to which clients are allowed to use NTLM authentication if the "Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers" policy setting is configured. + +If you configure this policy setting, you can define a list of remote servers to which clients are allowed to use NTLM authentication. + +If you do not configure this policy setting, no exceptions will be applied. + +The naming format for servers on this exception list is the fully qualified domain name (FQDN) or NetBIOS server name used by the application, listed one per line. To ensure exceptions the name used by all applications needs to be in the list, and to ensure an exception is accurate, the server name should be listed in both naming formats . A single asterisk (*) can be used anywhere in the string as a wildcard character. + + + + + + + + + + + text/plain + + phone + Windows Settings~Security Settings~Local Policies~Security Options + Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication + LastWrite + + + + NetworkSecurity_RestrictNTLM_AuditIncomingNTLMTraffic + + + + + 0 + Network security: Restrict NTLM: Audit Incoming NTLM Traffic + +This policy setting allows you to audit incoming NTLM traffic. + +If you select "Disable", or do not configure this policy setting, the server will not log events for incoming NTLM traffic. + +If you select "Enable auditing for domain accounts", the server will log events for NTLM pass-through authentication requests that would be blocked when the "Network Security: Restrict NTLM: Incoming NTLM traffic" policy setting is set to the "Deny all domain accounts" option. + +If you select "Enable auditing for all accounts", the server will log events for all NTLM authentication requests that would be blocked when the "Network Security: Restrict NTLM: Incoming NTLM traffic" policy setting is set to the "Deny all accounts" option. + +This policy is supported on at least Windows 7 or Windows Server 2008 R2. + +Note: Audit events are recorded on this computer in the "Operational" Log located under the Applications and Services Log/Microsoft/Windows/NTLM. + + + + + + + + + + + text/plain + + + phone + Windows Settings~Security Settings~Local Policies~Security Options + Network security: Restrict NTLM: Audit Incoming NTLM Traffic + HighestValueMostSecure + + + + NetworkSecurity_RestrictNTLM_IncomingNTLMTraffic + + + + + 0 + Network security: Restrict NTLM: Incoming NTLM traffic + +This policy setting allows you to deny or allow incoming NTLM traffic. + +If you select "Allow all" or do not configure this policy setting, the server will allow all NTLM authentication requests. + +If you select "Deny all domain accounts," the server will deny NTLM authentication requests for domain logon and display an NTLM blocked error, but allow local account logon. + +If you select "Deny all accounts," the server will deny NTLM authentication requests from incoming traffic and display an NTLM blocked error. + +This policy is supported on at least Windows 7 or Windows Server 2008 R2. + +Note: Block events are recorded on this computer in the "Operational" Log located under the Applications and Services Log/Microsoft/Windows/NTLM. + + + + + + + + + + + text/plain + + + phone + Windows Settings~Security Settings~Local Policies~Security Options + Network security: Restrict NTLM: Incoming NTLM traffic + HighestValueMostSecure + + + + NetworkSecurity_RestrictNTLM_OutgoingNTLMTrafficToRemoteServers + + + + + 0 + Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers + +This policy setting allows you to deny or audit outgoing NTLM traffic from this Windows 7 or this Windows Server 2008 R2 computer to any Windows remote server. + +If you select "Allow all" or do not configure this policy setting, the client computer can authenticate identities to a remote server by using NTLM authentication. + +If you select "Audit all," the client computer logs an event for each NTLM authentication request to a remote server. This allows you to identify those servers receiving NTLM authentication requests from the client computer. + +If you select "Deny all," the client computer cannot authenticate identities to a remote server by using NTLM authentication. You can use the "Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication" policy setting to define a list of remote servers to which clients are allowed to use NTLM authentication. + +This policy is supported on at least Windows 7 or Windows Server 2008 R2. + +Note: Audit and block events are recorded on this computer in the "Operational" Log located under the Applications and Services Log/Microsoft/Windows/NTLM. + + + + + + + + + + + text/plain + + + phone + Windows Settings~Security Settings~Local Policies~Security Options + Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers + HighestValueMostSecure + + Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOn @@ -59472,6 +59845,33 @@ The options are: LastWrite + + TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications + + + + + + + + + + + + + + + + + text/plain + + phone + SecGuide.admx + SecGuide~AT~Cat_SecGuide + Pol_SecGuide_0101_WDPUA + LastWrite + + WDigestAuthentication From de920d843565108eb32c34195b2d926f7fc5ca85 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 12 Mar 2018 21:45:48 +0000 Subject: [PATCH 044/138] Merged PR 6315: UEFI CSP not supported in Pro --- .../mdm/configuration-service-provider-reference.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 1f6269d889..3764a9326f 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/02/2018 +ms.date: 03/12/2018 --- # Configuration service provider reference @@ -2136,7 +2136,7 @@ Footnotes: -[Uefi CSP](uefi-csp.md) +[UEFI CSP](uefi-csp.md) @@ -2151,7 +2151,7 @@ Footnotes: - + @@ -2596,6 +2596,7 @@ Footnotes: - [Reporting CSP](reporting-csp.md) - [RootCATrustedCertificates CSP](rootcacertificates-csp.md) - [SurfaceHub CSP](surfacehub-csp.md) +- [UEFI CSP](uefi-csp.md) - [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) From d12118140d5d977f5f49d5f4c7275dabeea41d5f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Akshatha=20Kommalapati=20=28=F0=9F=90=8D=29?= Date: Mon, 12 Mar 2018 22:03:20 +0000 Subject: [PATCH 045/138] Merged PR 6316: Set up School PCs Technical Reference: Updated the topic's date and removed an entry from the GP table Topic: Set up School PCs Technical Reference Changes: Updated the topic's date and removed the 'allow the system to be shut down without having to log on' line item since we no longer set this policy via the Set up School PCs app. --- .../windows/set-up-school-pcs-technical.md | 621 +++++++++--------- 1 file changed, 309 insertions(+), 312 deletions(-) diff --git a/education/windows/set-up-school-pcs-technical.md b/education/windows/set-up-school-pcs-technical.md index 59d779962f..c4c3cbd233 100644 --- a/education/windows/set-up-school-pcs-technical.md +++ b/education/windows/set-up-school-pcs-technical.md @@ -1,312 +1,309 @@ ---- -title: Set up School PCs app technical reference -description: Describes the changes that the Set up School PCs app makes to a PC. -keywords: shared cart, shared PC, school, set up school pcs -ms.prod: w10 -ms.mktglfcycl: plan -ms.sitesec: library -ms.pagetype: edu -ms.localizationpriority: high -author: CelesteDG -ms.author: celested -ms.date: 02/02/2018 ---- - -# Technical reference for the Set up School PCs app -**Applies to:** - -- Windows 10 - - - -The **Set up School PCs** app helps you set up new Windows 10 PCs that work great in your school by configuring shared PC mode. The latest Set up School PCs app is available for Windows 10, version 1703 (Creators Update). Set up School PCs also configures school-specific settings and policies, described in this topic. - -If your school uses Azure Active Directory (Azure AD) or Office 365, the Set up School PCs app will create a setup file that joins the PC to your Azure Active Directory tenant. You can also use the app to set up school PCs that anyone can use, with or without Internet connectivity. - -Here's a list of what you get when using the Set up School PCs app in your school. - -| Feature | No Internet | Azure AD | Office 365 | Azure AD Premium | -| --- | :---: | :---: | :---: | :---: | -| **Fast sign-in**
    Each student can sign in and start using the computer in less than a minute, even on their first sign-in. | X | X | X | X | -| **Custom Start experience**
    The apps students need are pinned to Start, and unnecessary apps are removed. | X | X | X | X | -| **Guest account, no sign-in required**
    This option sets up computers for common use. Anyone can use the computer without an account. | X | X | X | X | -| **School policies**
    Settings specific to education create a useful learning environment and the best computer performance. | X | X | X | X | -| **Azure AD Join**
    The computers are joined to your Azure AD or Office 365 subscription for centralized management. | | X | X | X | -| **Single sign-on to Office 365**
    By signing on with student IDs, students have fast access to Office 365 web apps or installed Office apps. | | | X | X | -| **Take a Test**
    Configure the Take a Test app and use it for taking quizzes and high-stakes assessments by some providers like Smarter Balanced. | | | | X | -| **[Settings roaming](https://azure.microsoft.com/en-us/documentation/articles/active-directory-windows-enterprise-state-roaming-overview/) via Azure AD**
    Student user and application settings data can be synchronized across devices for a personalized experience. | | | | X | - - -> [!NOTE] -> If your school uses Active Directory, use [Windows Configuration Designer](set-up-students-pcs-to-join-domain.md) to configure your PCs to join the domain. You can only use the Set up School PCs app to set up PCs that are connected to Azure AD. - -## Automated Azure AD join -One of the most important features in Set up School PCs is the ability to create a provisioning package that performs automated Azure AD join. With this feature, you no longer have to spend minutes going through Windows setup, manually connecting to a network, and manually joining your Azure AD domain. With the automated Azure AD join feature in Set up School School PCs, this process is reduced to zero clicks! You can skip all of the Windows setup experience and the OS automatically joins the PC to your Azure AD domain and enrolls it into MDM if you have a MDM provider activated. - -To make this as seamless as possible, in your Azure AD tenant: -- Allow your teacher and other IT staff to join devices to Azure AD so they can sucessfully request an automated Azure AD join token. - - In the Azure portal, select **Azure Active Directory**. Go to **Users and groups > Device Settings** and in **Users may join devices to Azure AD**, click **Selected** and choose the members you want to enable to join devices to Azure AD. - - **Figure 1** - Select the users you want to enable to join devices to Azure AD - - ![Select the users you want to enable to join devices to Azure AD](images/azuread_usersandgroups_devicesettings_usersmayjoin.png) - -- Consider creating a special account that uses a username and password that you provide, and which has the rights to join devices if you don't want to add all teachers and IT staff. - - When teachers or IT staff need to set up PCs, they can use this account in the Set up School PCs app. - - If you use a service to set up PCs for you, you can give them this special account so they can deliver PCs to you that are already Azure AD joined and ready to be given to a student. - -- Turn off multifactor authentication. - - In the Azure portal, select **Azure Active Directory**. Go to **Users and groups > Device Settings** and set **Require Multi-Factor Auth to join devices** to **No**. - - **Figure 2** - Turn off multi-factor authentication in Azure AD - - ![Turn off multi-factor authentication in Azure AD](images/azuread_usersandgroups_devicesettings_requiremultifactorauth.png) - -- Set the maximum number of devices a user can add to unlimited. - - In the Azure portal, select **Azure Active Directory**. Go to **Users and groups > Device Settings** and set **Maximum number of devices per user** to **Unlimited**. - - **Figure 3** - Set maximum number of devices per user to unlimited - - ![Set maximum number of devices per user to unlimited](images/azuread_usersandgroups_devicesettings_maxnumberofdevicesperuser.png) - -- Clear your Azure AD tokens from time to time. Your tenant can only have 500 automated Azure AD tokens active at any one time. - - In the Azure portal, select **Azure Active Directory**. Go to **Users and groups > All users** and look at the list of user names. User names that start with **package_** followed by a string of letters and numbers. These are the user accounts that are created automatically for the tokens and you can safely delete these. - - **Figure 4** - Delete the accounts automatically created for the Azure AD tokens - - ![Delete the accounts automatically created for the Azure AD tokens](images/azuread_usersandgroups_allusers_automaticaccounts.png) - -- Note that automated Azure AD tokens have expiration dates. Set up School PCs creates them with an expiration date of one month. You will see the specific expiration date for the package in the **Review package summary** page in Set up School PCs. - - **Figure 5** - Sample summary page showing the expiration date - - ![Sample summary page showing the expiration date](images/suspc_choosesettings_summary.png) - - - - - -## Information about Windows Update - -Shared PC mode helps ensure that computers are always up-to-date. If a PC is configured using the Set up School PCs app, shared PC mode sets the power states and Windows Update to: -* Wake nightly -* Check and install updates -* Forcibly reboot if necessary to finish applying updates - -The PC is also configured to not interrupt the user during normal daytime hours with updates or reboots. Notfications are also blocked. - -## Guidance for accounts on shared PCs - -* We recommend no local admin accounts on the PC to improve the reliability and security of the PC. -* When a PC is set up in shared PC mode with the default deletion policy, accounts will be cached automatically until disk space is low. Then, accounts will be deleted to reclaim disk space. This account management happens automatically. Both Azure AD and Active Directory domain accounts are managed in this way. Any accounts created through **Guest** or **Kiosk** will also be deleted automatically at sign out. -* On a Windows PC joined to Azure Active Directory: - * By default, the account that joined the PC to Azure AD will have an admin account on that PC. Global administrators for the Azure AD domain will also have admin accounts on the PC. - * With Azure AD Premium, you can specify which accounts have admin accounts on a PC using the **Additional administrators on Azure AD Joined devices** setting on the Azure portal. -* Local accounts that already exist on a PC won’t be deleted when turning on shared PC mode. New local accounts created through **Settings > Accounts > Other people > Add someone else to this PC** after shared PC mode is turned on won't be deleted. However, any new local accounts created by the **Guest** or **Kiosk** selection on the sign-in screen, if enabled, will automatically be deleted at sign-out. -* If admin accounts are necessary on the PC - * Ensure the PC is joined to a domain that enables accounts to be signed on as admin, or - * Create admin accounts before setting up shared PC mode, or - * Create exempt accounts before signing out. -* The account management service supports accounts that are exempt from deletion. - * An account can be marked exempt from deletion by adding the account SID to the `HKEY_LOCAL_MACHINE\SOFTARE\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\` registry key. - * To add the account SID to the registry key using PowerShell: - - ``` - $adminName = "LocalAdmin" - $adminPass = 'Pa$$word123' - iex "net user /add $adminName $adminPass" - $user = New-Object System.Security.Principal.NTAccount($adminName) - $sid = $user.Translate([System.Security.Principal.SecurityIdentifier]) - $sid = $sid.Value; - New-Item -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\$sid" -Force - ``` - -## Custom images -Shared PC mode is fully compatible with custom images that may be created by IT departments. Create a custom image and then use sysprep with the `/oobe` flag to create an image that teachers can then apply the Set up School PCs provisioning package to. [Learn more about sysprep](https://technet.microsoft.com/en-us/library/cc721940(v=ws.10).aspx). - -## Provisioning package details - -The Set up School PCs app produces a specialized provisioning package that makes use of the [SharedPC configuration service provider (CSP)](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723294%28v=vs.85%29.aspx). - -### Education customizations set by local MDM policy - -- By default, saving content locally to the PC is blocked, but you can choose to enable it. This prevents data loss by forcing students to save to the cloud. -- A custom Start layout, taskbar layout, and lock screen image are set. -- Prohibits unlocking the PC to developer mode. -- Prohibits untrusted Microsoft Store apps from being installed. -- Prohibits students from removing MDM. -- Prohibits students from adding new provisioning packages. -- Prohibits student from removing existing provisioning packages (including the one set by Set up School PCs). -- Sets Windows Update to update nightly. - - -### Uninstalled apps - -- 3D Builder (Microsoft.3DBuilder_8wekyb3d8bbwe) -- Weather (Microsoft.BingWeather_8wekyb3d8bbwe) -- Tips (Microsoft.Getstarted_8wekyb3d8bbwe) -- Get Office (Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe) -- Microsoft Solitaire Collection (Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe) -- Paid Wi-Fi & Cellular (Microsoft.OneConnect_8wekyb3d8bbwe) -- Feedback Hub (Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe) -- Xbox (Microsoft.XboxApp_8wekyb3d8bbwe) -- Mail/Calendar (microsoft.windowscommunicationsapps_8wekyb3d8bbwe) - -### Local Group Policies - -> [!IMPORTANT] -> We do not recommend setting additional policies on PCs configured with the Set up School PCs app. The shared PC mode is optimized to be fast and reliable over time with minimal to no manual maintenance required. - -
    cross markcheck mark4cross mark check mark4 check mark4 check mark4
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

    Policy path

    Policy name

    Value

    Admin Templates > Control Panel > Personalization

    Prevent enabling lock screen slide show

    Enabled

    Prevent changing lock screen and logon image

    Enabled

    Admin Templates > System > Power Management > Button Settings

    Select the Power button action (plugged in)

    Sleep

    Select the Power button action (on battery)

    Sleep

    Select the Sleep button action (plugged in)

    Sleep

    Select the lid switch action (plugged in)

    Sleep

    Select the lid switch action (on battery)

    Sleep

    Admin Templates > System > Power Management > Sleep Settings

    Require a password when a computer wakes (plugged in)

    Enabled

    Require a password when a computer wakes (on battery)

    Enabled

    Specify the system sleep timeout (plugged in)

    5 minutes

    Specify the system sleep timeout (on battery)

    5 minutes

    Turn off hybrid sleep (plugged in)

    Enabled

    Turn off hybrid sleep (on battery)

    Enabled

    Specify the unattended sleep timeout (plugged in)

    5 minutes

    Specify the unattended sleep timeout (on battery)

    5 minutes

    Allow standby states (S1-S3) when sleeping (plugged in)

    Enabled

    Allow standby states (S1-S3) when sleeping (on battery)

    Enabled

    Specify the system hibernate timeout (plugged in)

    Enabled, 0

    Specify the system hibernate timeout (on battery)

    Enabled, 0

    Admin Templates>System>Power Management>Video and Display Settings

    Turn off the display (plugged in)

    5 minutes

    Turn off the display (on battery)

    5 minutes

    Admin Templates>System>Power Management>Energy Saver Settings

    Energy Saver Battery Threshold (on battery)

    70

    Admin Templates>System>Logon

    Show first sign-in animation

    Disabled

    Hide entry points for Fast User Switching

    Enabled

    Turn on convenience PIN sign-in

    Disabled

    Turn off picture password sign-in

    Enabled

    Turn off app notification on the lock screen

    Enabled

    Allow users to select when a password is required when resuming from connected standby

    Disabled

    Block user from showing account details on sign-in

    Enabled

    Admin Templates>System>User Profiles

    Turn off the advertising ID

    Enabled

    Admin Templates>Windows Components>Biometrics

    Allow the use of biometrics

    Disabled

    Allow users to log on using biometrics

    Disabled

    Allow domain users to log on using biometrics

    Disabled

    Admin Templates>Windows Components>Cloud Content

    Do not show Windows Tips

    Enabled

    Turn off Microsoft consumer experiences

    Enabled

    Admin Templates>Windows Components>Data Collection and Preview Builds

    Toggle user control over Insider builds

    Disabled

    Disable pre-release features or settings

    Disabled

    Do not show feedback notifications

    Enabled

    Allow Telemetry

    Basic, 0

    Admin Templates > Windows Components > File Explorer

    Show lock in the user tile menu

    Disabled

    Admin Templates > Windows Components > Maintenance Scheduler

    Automatic Maintenance Activation Boundary

    *MaintenanceStartTime*

    Automatic Maintenance Random Delay

    Enabled, 2 hours

    Automatic Maintenance WakeUp Policy

    Enabled

    Admin Templates > Windows Components > OneDrive

    Prevent the usage of OneDrive for file storage

    Enabled

    Admin Templates > Windows Components > Windows Hello for Business

    Use phone sign-in

    Disabled

    Use Windows Hello for Business

    Disabled

    Use biometrics

    Disabled

    Windows Settings > Security Settings > Local Policies > Security Options

    Accounts: Block Microsoft accounts

    **Note** Microsoft accounts can still be used in apps.

    Enabled

    Interactive logon: Do not display last user name

    Enabled

    Interactive logon: Sign-in last interactive user automatically after a system-initiated restart

    Disabled

    Shutdown: Allow system to be shut down without having to log on

    Enabled

    User Account Control: Behavior of the elevation prompt for standard users

    Auto deny


    - -## Use the app -When you're ready to use the app, see [Use Set up School PCs app](use-set-up-school-pcs-app.md). - -## Related topics - -[Set up Windows devices for education](set-up-windows-10.md) - - - - - +--- +title: Set up School PCs app technical reference +description: Describes the changes that the Set up School PCs app makes to a PC. +keywords: shared cart, shared PC, school, set up school pcs +ms.prod: w10 +ms.mktglfcycl: plan +ms.sitesec: library +ms.pagetype: edu +ms.localizationpriority: high +author: CelesteDG +ms.author: celested +ms.date: 03/12/2018 +--- + +# Technical reference for the Set up School PCs app +**Applies to:** + +- Windows 10 + + + +The **Set up School PCs** app helps you set up new Windows 10 PCs that work great in your school by configuring shared PC mode. The latest Set up School PCs app is available for Windows 10, version 1703 (Creators Update). Set up School PCs also configures school-specific settings and policies, described in this topic. + +If your school uses Azure Active Directory (Azure AD) or Office 365, the Set up School PCs app will create a setup file that joins the PC to your Azure Active Directory tenant. You can also use the app to set up school PCs that anyone can use, with or without Internet connectivity. + +Here's a list of what you get when using the Set up School PCs app in your school. + +| Feature | No Internet | Azure AD | Office 365 | Azure AD Premium | +| --- | :---: | :---: | :---: | :---: | +| **Fast sign-in**
    Each student can sign in and start using the computer in less than a minute, even on their first sign-in. | X | X | X | X | +| **Custom Start experience**
    The apps students need are pinned to Start, and unnecessary apps are removed. | X | X | X | X | +| **Guest account, no sign-in required**
    This option sets up computers for common use. Anyone can use the computer without an account. | X | X | X | X | +| **School policies**
    Settings specific to education create a useful learning environment and the best computer performance. | X | X | X | X | +| **Azure AD Join**
    The computers are joined to your Azure AD or Office 365 subscription for centralized management. | | X | X | X | +| **Single sign-on to Office 365**
    By signing on with student IDs, students have fast access to Office 365 web apps or installed Office apps. | | | X | X | +| **Take a Test**
    Configure the Take a Test app and use it for taking quizzes and high-stakes assessments by some providers like Smarter Balanced. | | | | X | +| **[Settings roaming](https://azure.microsoft.com/en-us/documentation/articles/active-directory-windows-enterprise-state-roaming-overview/) via Azure AD**
    Student user and application settings data can be synchronized across devices for a personalized experience. | | | | X | + + +> [!NOTE] +> If your school uses Active Directory, use [Windows Configuration Designer](set-up-students-pcs-to-join-domain.md) to configure your PCs to join the domain. You can only use the Set up School PCs app to set up PCs that are connected to Azure AD. + +## Automated Azure AD join +One of the most important features in Set up School PCs is the ability to create a provisioning package that performs automated Azure AD join. With this feature, you no longer have to spend minutes going through Windows setup, manually connecting to a network, and manually joining your Azure AD domain. With the automated Azure AD join feature in Set up School School PCs, this process is reduced to zero clicks! You can skip all of the Windows setup experience and the OS automatically joins the PC to your Azure AD domain and enrolls it into MDM if you have a MDM provider activated. + +To make this as seamless as possible, in your Azure AD tenant: +- Allow your teacher and other IT staff to join devices to Azure AD so they can sucessfully request an automated Azure AD join token. + + In the Azure portal, select **Azure Active Directory**. Go to **Users and groups > Device Settings** and in **Users may join devices to Azure AD**, click **Selected** and choose the members you want to enable to join devices to Azure AD. + + **Figure 1** - Select the users you want to enable to join devices to Azure AD + + ![Select the users you want to enable to join devices to Azure AD](images/azuread_usersandgroups_devicesettings_usersmayjoin.png) + +- Consider creating a special account that uses a username and password that you provide, and which has the rights to join devices if you don't want to add all teachers and IT staff. + - When teachers or IT staff need to set up PCs, they can use this account in the Set up School PCs app. + - If you use a service to set up PCs for you, you can give them this special account so they can deliver PCs to you that are already Azure AD joined and ready to be given to a student. + +- Turn off multifactor authentication. + + In the Azure portal, select **Azure Active Directory**. Go to **Users and groups > Device Settings** and set **Require Multi-Factor Auth to join devices** to **No**. + + **Figure 2** - Turn off multi-factor authentication in Azure AD + + ![Turn off multi-factor authentication in Azure AD](images/azuread_usersandgroups_devicesettings_requiremultifactorauth.png) + +- Set the maximum number of devices a user can add to unlimited. + + In the Azure portal, select **Azure Active Directory**. Go to **Users and groups > Device Settings** and set **Maximum number of devices per user** to **Unlimited**. + + **Figure 3** - Set maximum number of devices per user to unlimited + + ![Set maximum number of devices per user to unlimited](images/azuread_usersandgroups_devicesettings_maxnumberofdevicesperuser.png) + +- Clear your Azure AD tokens from time to time. Your tenant can only have 500 automated Azure AD tokens active at any one time. + + In the Azure portal, select **Azure Active Directory**. Go to **Users and groups > All users** and look at the list of user names. User names that start with **package_** followed by a string of letters and numbers. These are the user accounts that are created automatically for the tokens and you can safely delete these. + + **Figure 4** - Delete the accounts automatically created for the Azure AD tokens + + ![Delete the accounts automatically created for the Azure AD tokens](images/azuread_usersandgroups_allusers_automaticaccounts.png) + +- Note that automated Azure AD tokens have expiration dates. Set up School PCs creates them with an expiration date of one month. You will see the specific expiration date for the package in the **Review package summary** page in Set up School PCs. + + **Figure 5** - Sample summary page showing the expiration date + + ![Sample summary page showing the expiration date](images/suspc_choosesettings_summary.png) + + + + + +## Information about Windows Update + +Shared PC mode helps ensure that computers are always up-to-date. If a PC is configured using the Set up School PCs app, shared PC mode sets the power states and Windows Update to: +* Wake nightly +* Check and install updates +* Forcibly reboot if necessary to finish applying updates + +The PC is also configured to not interrupt the user during normal daytime hours with updates or reboots. Notfications are also blocked. + +## Guidance for accounts on shared PCs + +* We recommend no local admin accounts on the PC to improve the reliability and security of the PC. +* When a PC is set up in shared PC mode with the default deletion policy, accounts will be cached automatically until disk space is low. Then, accounts will be deleted to reclaim disk space. This account management happens automatically. Both Azure AD and Active Directory domain accounts are managed in this way. Any accounts created through **Guest** or **Kiosk** will also be deleted automatically at sign out. +* On a Windows PC joined to Azure Active Directory: + * By default, the account that joined the PC to Azure AD will have an admin account on that PC. Global administrators for the Azure AD domain will also have admin accounts on the PC. + * With Azure AD Premium, you can specify which accounts have admin accounts on a PC using the **Additional administrators on Azure AD Joined devices** setting on the Azure portal. +* Local accounts that already exist on a PC won’t be deleted when turning on shared PC mode. New local accounts created through **Settings > Accounts > Other people > Add someone else to this PC** after shared PC mode is turned on won't be deleted. However, any new local accounts created by the **Guest** or **Kiosk** selection on the sign-in screen, if enabled, will automatically be deleted at sign-out. +* If admin accounts are necessary on the PC + * Ensure the PC is joined to a domain that enables accounts to be signed on as admin, or + * Create admin accounts before setting up shared PC mode, or + * Create exempt accounts before signing out. +* The account management service supports accounts that are exempt from deletion. + * An account can be marked exempt from deletion by adding the account SID to the `HKEY_LOCAL_MACHINE\SOFTARE\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\` registry key. + * To add the account SID to the registry key using PowerShell: + + ``` + $adminName = "LocalAdmin" + $adminPass = 'Pa$$word123' + iex "net user /add $adminName $adminPass" + $user = New-Object System.Security.Principal.NTAccount($adminName) + $sid = $user.Translate([System.Security.Principal.SecurityIdentifier]) + $sid = $sid.Value; + New-Item -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\$sid" -Force + ``` + +## Custom images +Shared PC mode is fully compatible with custom images that may be created by IT departments. Create a custom image and then use sysprep with the `/oobe` flag to create an image that teachers can then apply the Set up School PCs provisioning package to. [Learn more about sysprep](https://technet.microsoft.com/en-us/library/cc721940(v=ws.10).aspx). + +## Provisioning package details + +The Set up School PCs app produces a specialized provisioning package that makes use of the [SharedPC configuration service provider (CSP)](https://msdn.microsoft.com/en-us/library/windows/hardware/mt723294%28v=vs.85%29.aspx). + +### Education customizations set by local MDM policy + +- By default, saving content locally to the PC is blocked, but you can choose to enable it. This prevents data loss by forcing students to save to the cloud. +- A custom Start layout, taskbar layout, and lock screen image are set. +- Prohibits unlocking the PC to developer mode. +- Prohibits untrusted Microsoft Store apps from being installed. +- Prohibits students from removing MDM. +- Prohibits students from adding new provisioning packages. +- Prohibits student from removing existing provisioning packages (including the one set by Set up School PCs). +- Sets Windows Update to update nightly. + + +### Uninstalled apps + +- 3D Builder (Microsoft.3DBuilder_8wekyb3d8bbwe) +- Weather (Microsoft.BingWeather_8wekyb3d8bbwe) +- Tips (Microsoft.Getstarted_8wekyb3d8bbwe) +- Get Office (Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe) +- Microsoft Solitaire Collection (Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe) +- Paid Wi-Fi & Cellular (Microsoft.OneConnect_8wekyb3d8bbwe) +- Feedback Hub (Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe) +- Xbox (Microsoft.XboxApp_8wekyb3d8bbwe) +- Mail/Calendar (microsoft.windowscommunicationsapps_8wekyb3d8bbwe) + +### Local Group Policies + +> [!IMPORTANT] +> We do not recommend setting additional policies on PCs configured with the Set up School PCs app. The shared PC mode is optimized to be fast and reliable over time with minimal to no manual maintenance required. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

    Policy path

    Policy name

    Value

    Admin Templates > Control Panel > Personalization

    Prevent enabling lock screen slide show

    Enabled

    Prevent changing lock screen and logon image

    Enabled

    Admin Templates > System > Power Management > Button Settings

    Select the Power button action (plugged in)

    Sleep

    Select the Power button action (on battery)

    Sleep

    Select the Sleep button action (plugged in)

    Sleep

    Select the lid switch action (plugged in)

    Sleep

    Select the lid switch action (on battery)

    Sleep

    Admin Templates > System > Power Management > Sleep Settings

    Require a password when a computer wakes (plugged in)

    Enabled

    Require a password when a computer wakes (on battery)

    Enabled

    Specify the system sleep timeout (plugged in)

    5 minutes

    Specify the system sleep timeout (on battery)

    5 minutes

    Turn off hybrid sleep (plugged in)

    Enabled

    Turn off hybrid sleep (on battery)

    Enabled

    Specify the unattended sleep timeout (plugged in)

    5 minutes

    Specify the unattended sleep timeout (on battery)

    5 minutes

    Allow standby states (S1-S3) when sleeping (plugged in)

    Enabled

    Allow standby states (S1-S3) when sleeping (on battery)

    Enabled

    Specify the system hibernate timeout (plugged in)

    Enabled, 0

    Specify the system hibernate timeout (on battery)

    Enabled, 0

    Admin Templates>System>Power Management>Video and Display Settings

    Turn off the display (plugged in)

    5 minutes

    Turn off the display (on battery)

    5 minutes

    Admin Templates>System>Power Management>Energy Saver Settings

    Energy Saver Battery Threshold (on battery)

    70

    Admin Templates>System>Logon

    Show first sign-in animation

    Disabled

    Hide entry points for Fast User Switching

    Enabled

    Turn on convenience PIN sign-in

    Disabled

    Turn off picture password sign-in

    Enabled

    Turn off app notification on the lock screen

    Enabled

    Allow users to select when a password is required when resuming from connected standby

    Disabled

    Block user from showing account details on sign-in

    Enabled

    Admin Templates>System>User Profiles

    Turn off the advertising ID

    Enabled

    Admin Templates>Windows Components>Biometrics

    Allow the use of biometrics

    Disabled

    Allow users to log on using biometrics

    Disabled

    Allow domain users to log on using biometrics

    Disabled

    Admin Templates>Windows Components>Cloud Content

    Do not show Windows Tips

    Enabled

    Turn off Microsoft consumer experiences

    Enabled

    Admin Templates>Windows Components>Data Collection and Preview Builds

    Toggle user control over Insider builds

    Disabled

    Disable pre-release features or settings

    Disabled

    Do not show feedback notifications

    Enabled

    Allow Telemetry

    Basic, 0

    Admin Templates > Windows Components > File Explorer

    Show lock in the user tile menu

    Disabled

    Admin Templates > Windows Components > Maintenance Scheduler

    Automatic Maintenance Activation Boundary

    *MaintenanceStartTime*

    Automatic Maintenance Random Delay

    Enabled, 2 hours

    Automatic Maintenance WakeUp Policy

    Enabled

    Admin Templates > Windows Components > OneDrive

    Prevent the usage of OneDrive for file storage

    Enabled

    Admin Templates > Windows Components > Windows Hello for Business

    Use phone sign-in

    Disabled

    Use Windows Hello for Business

    Disabled

    Use biometrics

    Disabled

    Windows Settings > Security Settings > Local Policies > Security Options

    Accounts: Block Microsoft accounts

    **Note** Microsoft accounts can still be used in apps.

    Enabled

    Interactive logon: Do not display last user name

    Enabled

    Interactive logon: Sign-in last interactive user automatically after a system-initiated restart

    Disabled

    User Account Control: Behavior of the elevation prompt for standard users

    Auto deny


    + +## Use the app +When you're ready to use the app, see [Use Set up School PCs app](use-set-up-school-pcs-app.md). + +## Related topics + +[Set up Windows devices for education](set-up-windows-10.md) + + + + + From aaa60d5bb37d4b2c91f4b9e62166463ba8353a93 Mon Sep 17 00:00:00 2001 From: Douglas Plumley Date: Tue, 13 Mar 2018 09:29:31 -0400 Subject: [PATCH 046/138] Corrected spelling error, changed 'Dekstop' on line 53 to 'Desktop' --- ...lock-potentially-unwanted-apps-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md index b30883b882..9f225964af 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md @@ -50,7 +50,7 @@ PUAs are blocked when a user attempts to download or install the detected file, - The file is being scanned from the browser - The file is in a folder with "**downloads**" in the path - The file is in a folder with "**temp**" in the path -- The file is on the user's Dekstop +- The file is on the user's Desktop - The file does not meet one of these conditions and is not under *%programfiles%*, *%appdata%*, or *%windows%* The file is placed in the quarantine section so it won't run. From 4ffd88ad0328d6c15b8bbb621e854f4dbd23b89d Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 13 Mar 2018 14:44:01 +0000 Subject: [PATCH 047/138] Merged PR 6328: Diagnostic data changes for March update --- ...ndows-diagnostic-events-and-fields-1703.md | 38 ++++++++++++++++--- ...el-windows-diagnostic-events-and-fields.md | 27 ++++++++++++- ...change-history-for-configure-windows-10.md | 10 ++++- 3 files changed, 66 insertions(+), 9 deletions(-) diff --git a/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703.md b/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703.md index d6c2534f87..819b8ca97a 100644 --- a/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703.md +++ b/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703.md @@ -9,7 +9,7 @@ ms.pagetype: security ms.localizationpriority: high author: eross-msft ms.author: lizross -ms.date: 04/05/2017 +ms.date: 03/13/2018 --- @@ -832,13 +832,17 @@ This event represents the basic metadata about a file on the system. The file m The following fields are available: - **AppraiserVersion** The version of the Appraiser file generating the events. +- **AvDisplayName** The version of the Appraiser file generating the events. +- **AvProductState** If the app is an anti-virus app, this is its display name. +- **BinaryType** A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64 - **BinFileVersion** An attempt to clean up FileVersion at the client that tries to place the version into 4 octets. - **BinProductVersion** An attempt to clean up ProductVersion at the client that tries to place the version into 4 octets. -- **BinaryType** A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64 - **BoeProgramId** If there is no entry in Add/Remove Programs, this is the ProgramID that is generated from the file metadata. - **CompanyName** The company name of the vendor who developed this file. - **FileId** A hash that uniquely identifies a file. - **FileVersion** The File version field from the file metadata under Properties -> Details. +- **HasUpgradeExe** Represents state of antivirus program with respect to whether it's turned on and the signatures are up-to-date. +- **IsAv** A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64 - **LinkDate** The date and time that this file was linked on. - **LowerCaseLongPath** The full file path to the file that was inventoried on the device. - **Name** The name of the file that was inventoried. @@ -847,6 +851,24 @@ The following fields are available: - **ProgramId** A hash of the Name, Version, Publisher, and Language of an application used to identify it. - **Size** The size of the file (in hexadecimal bytes). +### Microsoft.Windows.Inventory.Core.InventoryApplicationDriverAdd + +This event represents the drivers that an application installs. + +The following fields are available: + +- **InventoryVersion** The version of the inventory component +- **Programids** The unique program identifier the driver is associated with. + + +## Microsoft.Windows.Inventory.Core.InventoryApplicationDriverStartSync + +This event indicates that a new set of InventoryApplicationDriverStartAdd events will be sent. + +The following fields are available: + +- **InventoryVersion** The version of the inventory component. + ### Microsoft.Windows.Appraiser.General.InventoryApplicationFileRemove @@ -1628,15 +1650,19 @@ This event sends data about the processor (architecture, speed, number of cores, The following fields are available: -- **ProcessorCores** Retrieves the number of cores in the processor. -- **ProcessorPhysicalCores** Number of physical cores in the processor. +- **KvaShadow** Microcode info of the processor. +- **MMSettingOverride** Microcode setting of the processor. +- **MMSettingOverrideMask** Microcode setting override of the processor. - **ProcessorArchitecture** Retrieves the processor architecture of the installed operating system. The complete list of values can be found in DimProcessorArchitecture. - **ProcessorClockSpeed** Retrieves the clock speed of the processor in MHz. +- **ProcessorCores** Retrieves the number of cores in the processor. +- **ProcessorIdentifier** The processor identifier of a manufacturer. - **ProcessorManufacturer** Retrieves the name of the processor's manufacturer. - **ProcessorModel** Retrieves the name of the processor model. -- **SocketCount** Number of physical CPU sockets of the machine. -- **ProcessorIdentifier** The processor identifier of a manufacturer. +- **ProcessorPhysicalCores** Number of physical cores in the processor. - **ProcessorUpdateRevision** The microcode version. +- **SocketCount** Number of physical CPU sockets of the machine. +- **SpeculationControl** Clock speed of the processor in MHz. ### Census.Speech diff --git a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md index eac9fde18a..963fb2a1f9 100644 --- a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md +++ b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md @@ -9,7 +9,7 @@ ms.pagetype: security localizationpriority: high author: eross-msft ms.author: lizross -ms.date: 02/12/2018 +ms.date: 03/13/2018 --- @@ -317,6 +317,8 @@ This event represents the basic metadata about a file on the system. The file m The following fields are available: - **AppraiserVersion** The version of the Appraiser file generating the events. +- **AvDisplayName** The version of the Appraiser file generating the events. +- **AvProductState** If the app is an anti-virus app, this is its display name. - **BinaryType** A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64 - **BinFileVersion** An attempt to clean up FileVersion at the client that tries to place the version into 4 octets. - **BinProductVersion** An attempt to clean up ProductVersion at the client that tries to place the version into 4 octets. @@ -324,6 +326,8 @@ The following fields are available: - **CompanyName** The company name of the vendor who developed this file. - **FileId** A hash that uniquely identifies a file. - **FileVersion** The File version field from the file metadata under Properties -> Details. +- **HasUpgradeExe** Represents state of antivirus program with respect to whether it's turned on and the signatures are up-to-date. +- **IsAv** A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64 - **LinkDate** The date and time that this file was linked on. - **LowerCaseLongPath** The full file path to the file that was inventoried on the device. - **Name** The name of the file that was inventoried. @@ -332,6 +336,23 @@ The following fields are available: - **ProgramId** A hash of the Name, Version, Publisher, and Language of an application used to identify it. - **Size** The size of the file (in hexadecimal bytes). +### Microsoft.Windows.Inventory.Core.InventoryApplicationDriverAdd + +This event represents the drivers that an application installs. + +The following fields are available: + +- **InventoryVersion** The version of the inventory component +- **Programids** The unique program identifier the driver is associated with. + + +## Microsoft.Windows.Inventory.Core.InventoryApplicationDriverStartSync + +This event indicates that a new set of InventoryApplicationDriverStartAdd events will be sent. + +The following fields are available: + +- **InventoryVersion** The version of the inventory component. ### Microsoft.Windows.Appraiser.General.DecisionApplicationFileAdd @@ -1593,6 +1614,9 @@ This event sends data about the processor (architecture, speed, number of cores, The following fields are available: +- **KvaShadow** Microcode info of the processor. +- **MMSettingOverride** Microcode setting of the processor. +- **MMSettingOverrideMask** Microcode setting override of the processor. - **ProcessorArchitecture** Retrieves the processor architecture of the installed operating system. The complete list of values can be found in DimProcessorArchitecture. - **ProcessorClockSpeed** Retrieves the clock speed of the processor in MHz. - **ProcessorCores** Retrieves the number of cores in the processor. @@ -1602,6 +1626,7 @@ The following fields are available: - **ProcessorPhysicalCores** Number of physical cores in the processor. - **ProcessorUpdateRevision** The microcode version. - **SocketCount** Number of physical CPU sockets of the machine. +- **SpeculationControl** Clock speed of the processor in MHz. ### Census.Security diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 144f6425e6..02dee783c1 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -8,18 +8,24 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: high author: jdeckerms -ms.date: 02/12/2018 +ms.date: 03/13/2018 --- # Change history for Configure Windows 10 This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## March 2018 + +New or changed topic | Description +--- | --- +[Windows 10, version 1709 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) and [Windows 10, version 1703 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md) | Added events and fields that were added in the March update. + ## February 2018 New or changed topic | Description --- | --- -[Windows 10, version 1709 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) | Added events and fields that were added in the February update. +[Windows 10, version 1709 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) and [Windows 10, version 1703 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md) | Added events and fields that were added in the February update. [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) | Added steps for configuring a kiosk in Microsoft Intune. [Customize Windows 10 Start and taskbar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md) | Updated the instructions for applying a customized Start layout using Microsoft Intune. From 97f4b6e9820c80c9738df61d9218f51b9846ed0c Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 13 Mar 2018 10:17:41 -0700 Subject: [PATCH 048/138] switching to new feedback system --- browsers/edge/docfx.json | 3 +++ browsers/internet-explorer/docfx.json | 3 +++ devices/hololens/docfx.json | 3 +++ devices/surface-hub/docfx.json | 3 +++ devices/surface/docfx.json | 3 +++ education/docfx.json | 13 ++++++++----- gdpr/docfx.json | 5 ++++- mdop/docfx.json | 3 +++ smb/docfx.json | 3 +++ store-for-business/docfx.json | 5 ++++- windows/application-management/docfx.json | 3 +++ windows/client-management/docfx.json | 3 +++ windows/configuration/docfx.json | 3 +++ windows/deployment/docfx.json | 3 +++ windows/hub/docfx.json | 3 +++ windows/security/docfx.json | 3 +++ windows/whats-new/docfx.json | 3 +++ 17 files changed, 58 insertions(+), 7 deletions(-) diff --git a/browsers/edge/docfx.json b/browsers/edge/docfx.json index a699361d13..31eafa6401 100644 --- a/browsers/edge/docfx.json +++ b/browsers/edge/docfx.json @@ -21,6 +21,9 @@ "ms.topic": "article", "ms.author": "lizross", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "Win.microsoft-edge" diff --git a/browsers/internet-explorer/docfx.json b/browsers/internet-explorer/docfx.json index 056939a089..b7a205ddd2 100644 --- a/browsers/internet-explorer/docfx.json +++ b/browsers/internet-explorer/docfx.json @@ -22,6 +22,9 @@ "ms.technology": "internet-explorer", "ms.topic": "article", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "Win.internet-explorer" diff --git a/devices/hololens/docfx.json b/devices/hololens/docfx.json index 91c25a934c..7a67485a17 100644 --- a/devices/hololens/docfx.json +++ b/devices/hololens/docfx.json @@ -35,6 +35,9 @@ "ms.topic": "article", "ms.author": "jdecker", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "Win.itpro-hololens" diff --git a/devices/surface-hub/docfx.json b/devices/surface-hub/docfx.json index d6a3efaf96..dc151c3165 100644 --- a/devices/surface-hub/docfx.json +++ b/devices/surface-hub/docfx.json @@ -24,6 +24,9 @@ "ms.sitesec": "library", "ms.author": "jdecker", "ms.date": "05/23/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "Win.surface-hub" diff --git a/devices/surface/docfx.json b/devices/surface/docfx.json index 502700db32..86d594455f 100644 --- a/devices/surface/docfx.json +++ b/devices/surface/docfx.json @@ -21,6 +21,9 @@ "ms.topic": "article", "ms.author": "jdecker", "ms.date": "05/09/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "Win.surface" diff --git a/education/docfx.json b/education/docfx.json index 067964f4d7..c01be28758 100644 --- a/education/docfx.json +++ b/education/docfx.json @@ -20,11 +20,14 @@ "audience": "windows-education", "ms.topic": "article", "breadcrumb_path": "/education/breadcrumb/toc.json", - "ms.date": "05/09/2017", - "_op_documentIdPathDepotMapping": { - "./": { - "depot_name": "Win.education" - } + "ms.date": "05/09/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", + "_op_documentIdPathDepotMapping": { + "./": { + "depot_name": "Win.education" + } } }, "externalReference": [ diff --git a/gdpr/docfx.json b/gdpr/docfx.json index dd5fca1462..d426f781dc 100644 --- a/gdpr/docfx.json +++ b/gdpr/docfx.json @@ -31,7 +31,10 @@ "externalReference": [], "globalMetadata": { "author": "eross-msft", - "ms.author": "lizross" + "ms.author": "lizross", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app" }, "fileMetadata": {}, "template": [], diff --git a/mdop/docfx.json b/mdop/docfx.json index a9a41d5222..a6ff6398ef 100644 --- a/mdop/docfx.json +++ b/mdop/docfx.json @@ -22,6 +22,9 @@ "ms.topic": "article", "ms.author": "jamiet", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "Win.mdop" diff --git a/smb/docfx.json b/smb/docfx.json index 866b2b152c..181bf75fda 100644 --- a/smb/docfx.json +++ b/smb/docfx.json @@ -31,6 +31,9 @@ "globalMetadata": { "uhfHeaderId": "MSDocsHeader-WindowsIT", "breadcrumb_path": "/windows/smb/breadcrumb/toc.json", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "TechNet.smb" diff --git a/store-for-business/docfx.json b/store-for-business/docfx.json index accb0bcea0..d739d26b28 100644 --- a/store-for-business/docfx.json +++ b/store-for-business/docfx.json @@ -37,7 +37,10 @@ "ms.technology": "windows", "ms.topic": "article", "ms.date": "05/09/2017", - "searchScope": ["Store"], + "searchScope": ["Store"], + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "MSDN.store-for-business" diff --git a/windows/application-management/docfx.json b/windows/application-management/docfx.json index 285dcee673..7d3ae2dae2 100644 --- a/windows/application-management/docfx.json +++ b/windows/application-management/docfx.json @@ -37,6 +37,9 @@ "ms.topic": "article", "ms.author": "elizapo", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "MSDN.win-app-management" diff --git a/windows/client-management/docfx.json b/windows/client-management/docfx.json index f649a5d1af..4fc5382798 100644 --- a/windows/client-management/docfx.json +++ b/windows/client-management/docfx.json @@ -37,6 +37,9 @@ "ms.topic": "article", "ms.author": "dongill", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "MSDN.win-client-management" diff --git a/windows/configuration/docfx.json b/windows/configuration/docfx.json index e5720e332c..abe019f76c 100644 --- a/windows/configuration/docfx.json +++ b/windows/configuration/docfx.json @@ -37,6 +37,9 @@ "ms.topic": "article", "ms.author": "jdecker", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "MSDN.win-configuration" diff --git a/windows/deployment/docfx.json b/windows/deployment/docfx.json index 353f473c8c..e722db5465 100644 --- a/windows/deployment/docfx.json +++ b/windows/deployment/docfx.json @@ -38,6 +38,9 @@ "ms.topic": "article", "ms.author": "greglin", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "MSDN.win-development" diff --git a/windows/hub/docfx.json b/windows/hub/docfx.json index e33995957d..781df2941e 100644 --- a/windows/hub/docfx.json +++ b/windows/hub/docfx.json @@ -39,6 +39,9 @@ "ms.topic": "article", "ms.author": "brianlic", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "MSDN.windows-hub" diff --git a/windows/security/docfx.json b/windows/security/docfx.json index 18fe87fb57..394ca15239 100644 --- a/windows/security/docfx.json +++ b/windows/security/docfx.json @@ -36,6 +36,9 @@ "breadcrumb_path": "/windows/windows-10/breadcrumb/toc.json", "ms.technology": "windows", "ms.topic": "article", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "ms.author": "justinha" }, "fileMetadata": {}, diff --git a/windows/whats-new/docfx.json b/windows/whats-new/docfx.json index 1bbc64ff9e..34346b0e9c 100644 --- a/windows/whats-new/docfx.json +++ b/windows/whats-new/docfx.json @@ -37,6 +37,9 @@ "ms.topic": "article", "ms.author": "trudyha", "ms.date": "04/05/2017", + "feedback_system": "GitHub", + "feedback_github_repo": "MicrosoftDocs/windows-itpro-docs", + "feedback_product_url": "https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app", "_op_documentIdPathDepotMapping": { "./": { "depot_name": "MSDN.win-whats-new" From 402dc5b319998426eb1ab5acbe064ac5864f3522 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 13 Mar 2018 10:40:54 -0700 Subject: [PATCH 049/138] added screenshot for cmd --- .../application-management/media/cmd-type.png | Bin 0 -> 25765 bytes .../per-user-services-in-windows.md | 14 +++++++++----- 2 files changed, 9 insertions(+), 5 deletions(-) create mode 100644 windows/application-management/media/cmd-type.png diff --git a/windows/application-management/media/cmd-type.png b/windows/application-management/media/cmd-type.png new file mode 100644 index 0000000000000000000000000000000000000000..a6c13e8c7c0bae4225dad0b0ced0dc0f3b510a60 GIT binary patch literal 25765 zcmd43WmH>HyDo}rkfH&KyA*;$aVTD(Sb<`pXn__l?hs1RqQ%`QT8b6d;%>z$#XSUv zyZH9E?VNkZ*?W)k zP=I&7z3Dyz{vo?)Das;Mj6B@|UZ7dasL3E9Rmb4onxO-)u^p8RT#%6PyB;6NeGbJI zNJtjXm0!r{c$geyXv8rIN4wu}Kac!Tdqix*yEi}bdQdd9+=0GUQZZ}u#-v;Bo=Dm2 z#b#S+|7j<`urMK-452F~e?Ha@Z5IUeAO3FlZ`;hkFtba_sb5S5R50MVqBd)M!Uy0z zFpXNqORc8Ik39t3_>^}ZKV2LDUk~(i_ItRy@XQQbv+fHnVOuJ@x@dbaW~{v3l6ug5 z`0db^xLYwQ^>AAod4Ceqc7I*=ou^}(*8f&B$}}>wS3?;EpM7!KV<)RcT8>A>8(HEk zNC*o4kS=8Z)cMD~@6W%=9>gw^cwN|4EF=Zqf|(j*BxT@Et&I<6%AIm`4yz=pSA+Rm zFaa+bp8*P_o2&eX{k*jG7aWb|8!$?Y)KQ77^&bns73&p)MiUOF^DF3!)LTw{-q>2s zJ)Fv$Q{c@g9!|FgDi-Dk?9$>}lSkGe>lNAa1mU_~IT!s*rBJpq3M!uOmPl}80~!3yWcVqXJkb4v6|xMPn2#4u7*NOK zxQW~i>*=$o~9GUv{26p1>3c1Ml zC0^L4l5^m+T5#l~jCi)wL5m3woWycpOWz@o*Xpgf`zZ$YhT}ni9N()byZG1yVnh1| z&V0`K?L7${3<1^8$7IYwb~1$L0V%c37H}K|B8SEE)wpUI7&DmlTQ6zX>qAdqE%(}0 zuV3z%M9I@9AaHu*H%*v3-k4i@;_1XL&CP#%E2fV8S|I0YSUFifP?yImjjUnB4X(nI zzz$FD^k>{x-!0VU&x?TUlcspU z9dz83u8er|gTP#mM8+#*OpgO>N=>eM1Ob@_dPxD^UO=P2fG5FwGOwVaiY1L+Hr2{ z;C`I5`Sy^*%-X|riioIJVEU;-nT(*&@sZJ7LvcWs@w@M?yc~leH1zO99OA|#GjJ={ z&z?ua(5Ln?-d;SaQ#aTX(~0U*YT_&#)hhikzPFI$g2xph>%wlbKq!rqm0GZS072uA ztaB&J*tauP(iMzfyilHQc)tH-d=9;ZoSXS-+lQ~eI~b&lB{aZ`8oEsN_J<;_faYs+ zR6T`$UtYr*B5<4tpo{hIXz?TJa4;L>)(3o9p5eOhn_eoj!qXpsc+(t9viz4gU?aK&OIz5S-YBIVa`o%8WZ zEFkLlXpyhn(!i#xOnh}`v1JPWEj)u7wq_kRaQt#-xzlch^*#OrcdNhTGi#y`>>pdm z%Bsl=^i8PKq=uecYbMApCU%(c+HXV(r~0NCKtV}FkpE zs3H@`n;N%a8e=M;nIF`Jq)VRf>dzXq9${% zE~BJ+J}Qm7X_A-0R$%nBnT=Rk-1XJ^`xG7gWN9X})%~S3d7~?ckN^#-S>@%RbeLQ?+v@H2SJZw(qX46c&l+zZZVdO1X0ag&K zfXj#D(!$IFN^!LSdy*I9`dHba@+Rsx)V$?JL`NBSlPC1|pR3*KWPUfm8`#Mfcon)j z(EB^Jo%5KMwyGy>q%?M4C+olZ$_H8SRZdJbPV-#_0vuhDIf%o_{ zuOwbsMffqch$&QOVPAR-GsIJ$r~Lo=z+1=r%MF6e_6HzXnWllQCI2IWF}&QXY_mO< zx<^3Po}IpBO~)r#V*R_49FyIAqRIjHZ646<}^?{|$zi9cM8H;MdG-O=W?2Tiww zNkhiXBe^IpDd8;r1$RhRg_JyZRHcK}mkU?)Op7Oi__=p8T&W)GDiLB8eI@H z&X<}^dgjxH92q^;Rf-P_Vi?Twa;w*S-&eI!Lmsce9zy+CI;=i&6jIKX&qB=SE@gLck3QqCt3Ud<-=9!oU@X#CKa0o7!#@u+!NcOw4)}tk zJ@)4V@l=2(@w&hi{_;94csqCdEtf3I^z?M8*Lg2>)Sz&nhg?#b=lN%$CN&R%b1Mhd zWg;eLjNGY2vjERSeum%Z6j-)TxtE;5Fl{Y|=7hs%`KMZHQ}7y;sV~5#e*dn}ch7gK z0*7vXwjMW}E6aa%S-!e>0%cdMa-EoZhC=g7;g!L%DUFiAxeIP2HTqCl9Q~4VU(g_* z@lGolYFTd`h2Aeidn1Px(4vs(a}+A^WPh6FadtuS zKR_p$;d4#Cub+du!q*c00ekOWz{{dyj2br0Yk5 zFb65zTgDTgm&rw$TOApiC7=>Fb`pIXkVaxFJ8>pIwo)Q`2ylraJx-Y}d6Lnruo;q1 zw9cOzP%Y|eZ%r|>FVv$%c>Nc}3y6HuLwD>=$gkhxUgu`V01hT$>Nj_RH@T=@IU~CO zlzyYtmA-6eQ_K&|liktFkmDYIdN>e_x;fOeSWO-V-XJXZT1;NQRN)ppe@CZ|)vlau zb0912fV68&8A~SU!OygFf0DgVVx^@wfCUyY8bxr^zq5A`##N2Q4UyrIC7aH%(|j(r z{OQ>snsv_XU&{=|Ep5OPU!t!*PQ_7>?OXQm(fMQ2m0nov`k=<4>j{x_b$i5maecx1 z(duG&WY}DJ0D^_-Foha5x!spNI_M-va;z*+caH9)@V9hwwV6G5m$@ZitgrVW4$a;s zXgJ~Y18mh3N`t`roT80(kW7c#tFW!^Rv*A(hYgyijbrA(yUxehAp!>23HFe&?5)1{3kh})u&y!%Fuyw(sMx8CcxI2)Gx%P8P9>*1F5V(NtiWB#I? z6iw1!{CjHj@D-$Pq_|w2HA_wW5J|Ge8&*+yO7#^L^#tdj_v=L z7^$NSrr1?9`hBqzp?^%2)MfoYZl&5)xR`cfKfC<9cuNwYGyy| zzqiGe>i5++Fm7FKoTJNYbUUveT6gFr+~%|2y!|w&$>Tq%J0Qs};@Eb*(dTO8&Qv3dfQ%%U~Iy*iJXZ|XAA1~Pj(R%A2eFWM3H_rnpIzd!>CCl6uYcU7Rsl>R*|O8((IvVX0QSY(6&SNp!3ir+|yL21>V)zu$f1c# z!ng zv{0Kg3~XSE7_oF}%y#de+l5t_VS%rND=m|JwFC;2H^sNh!uOF?!OO~xlV!hYs4k5x*Mj~YcLrng3Z*kCvF5%5`(lkyZ0_GJ%(n8BrmZOs ze;X{}cU1nQ3;`d8i&u+^d0FTe){@H*j8Ezu)$x>?T(22T(WnA;Ceb%YwHN%MMM?X# z6q4UY<>I@JuA0Fx{eief<0MeLAX;Cvk-BFXsn!=^Fl2 z91Z8m zYV9TZF4Cg1=$>7-U?`kBr`w#2$z;tn-K}-~F!feSVWUZUA;VX~GTVyqL(Xd|#Psoa zhS4m6-}q@v7s*ougqk#8z0=TWG&m9c6FB!ZiMVD{yrZY>#nv48&5X-Y525L|#${K{ zd}xWtp#0n6_Z%KPbq>SguV|knd1aUc&(os9ZIiavW;Q3jmL+ez#OZ&tPPS!0O$h-V zX3uBXX~?pufY})HXO%NJfiV~@8CE!8%=1?XHy)4qq6AXIkR{%1{4$Zg<B-=Vb?DoG$IDCYo=!Ia7rX+L_F+%EU7tZEWJ`@!lEALBVSCd zC-@$RaNgg4xbPpPq?jIhlT8utiLcaE{XR&xXHa{Yasoq zH!7Wqtamv&;#~c7U9pk1af40Cf%fgLm)=(CQ+1{HRSAboQ+eV5w%nooE0%=Z?~e%1 z3UlAAES+B()e3$(nZdUxcS3+8Dtu}dv z?$6*yB~QGxbzX0TulU^@@O7vr1s>lVwV6|x<6)sjVMx2ss{X+jrS;VwdT2J&7#t^c zx7Ca@aj{eJ#i)`|AE8!)^ry~;&bMmUZzl=d@bxHXFvoRvy%&6w2FyN$6X4%O-e7@f42D~meX0pn|A2%|;_P2@^D{?FE@Kryo1X{xk zQ{ab~*p$T4Q9&(OzAKu1gu(VGXzpB)N6 zZ8pE$S3T!`Y5#*Ld*kp)0?SOXs|p$K=DYEY-jf zD85DC8?SkC)b316!1Bsc3(rQ$qtKiOQmgEMkf1!26vFozzG6D8L7m&P^j~UeejS67A+J(<&O~(P=+1 zdo>{?hklM`Lkpq`WHmmG%nM)lW?m)o3h>u&7OOSi#0Dh~Z~WYhR#%jH9kqs`C;Xr` zmgEbjghSV=?>c0hCF-xQouQT*HR&9g9lsh%A>WM!l0^25wdLh-OT?55s}(@mBcHtnk^sk(su)c(0N z1X?-Q2?)!a>ePG-eYN}h8;8Rrupqne%8d_BCD(~5o}QDGeEE`~EYYdtqGZQG1sWfL z1e5cP>BG6H>$97C|JeupM#_D`?eSi}qO`Sd-+3;K4J07wdCrn0;r1-eWkA6753763 zoBo+XRc33=Tq;Y!K@Pb>&Ac~~pp|g1zW-6~lo5324!JL6x|EBTS{Thgl`of^F>QI8 zO1;kWrhBE*6)&Dr!LKqnAf?TB2Rh@g8@~c&j`MhxcdHG>xORwJ4*N|a)o=AqZkHcIP-F5|!{02b&a_Yd+@`C2KBmwUsOm$GY#km4ji3 z=i~lEV}Go_k||nd56V*bt_QYU6t$CdSZ8QJy`DJwePs|}Nm1715E=6z0`bXxM=si? z0>W{E;QFH!AQEb+fd{h+vdMaR2SzvxPeSQ8dG>n_O&_kw-4kYBgg9hsybQ}M$qVdm zjP#;oVSPf=Nz{*O=YB=o;lsk(&$J7XUsQ7zNFD!!kC7***CCN=_*(+hcAwFFipfv(H0dY z2+6;mFXt3(E;aO6O_U7(%FJcs=ef!!7e!IApD4QnvbbaEf14XO73a_Ti|D9=G#Ejd zT6JmEvJT>d1y3bO-=ZG-Fo?rP61{f02BgW=l*Ida)lZBS?nvO@e^S+d1$~vXaH%Q! z)NG*z6G`7Uvx1!m2WSn7X2I41jaC*|RorntWN6qRA)_W_5@IbrQ-0kv7$9UJEM{>u zEDd3LxT2{slip?T6-W#Ww273V5=5|!SWamm8#KlD>b;fx6;pzw<@J@}u>bChbha`` zfOE9EQht-hZw1Oin>sgD0=aKnj(N{}1)SO+GBAMIBxV zW8urI_|dmTEDI0EL@bAGOhoQV&Ti~Xj<8yw(Vc~{%bLffkQ7j2qU615sbZKx%7Lebr-Orf7a6;f19flB$?Fsra_gYs}=xk(5Xk8x^;^8_SfbGnXA z+w2Sd`I08RZ-9r~t5rvJlXCW8g5v-QK4|9zM@Q2}kFIf2b_qm=wK zu*?@lCgT68_P|-3Ab9Ho6to~dIJ$-f|Bb4}@!6_g`&QaY*D>j;+8^IP-^vkv4VkJM zz&w2|%&wu-yTv1R|8omtX$v^H5V%swRMY$=EfLUmBg*wD9p85y{O;d(m%|1Sc41A{-!3VgYn@L ztVUFj$otDHtu}A57h!SMe;FHM#bar^+dl&v>zF{Xka%j)hkpd3CsxZ;&GY*V zuUI0!1{!-Ap7!Q1fNAnb+9epAE#A|`zrInKp>hb9QB7UkFxUqgCycHN?X5g`a25eK zyJYh^VP}~iCA_W=wnS|)Npw6{m`3j!YbzxX10PnV|8&-Tzkv=BqA|W~$K6(|QC0u0 zYVQ?q-(fdH^AH<5wk;IDJ8-`6dt;nmsNa=70`cmgh-Bv(FRPHZ*hv!I6F$OuNIIo{ za}s61lh0?Ls}E8Q6TSe($CMV!6a9PN~T{%+mWZ)<$qV z;mf;UjkJ)_3M;L$W@fypv*`x$rgs@jk=p7`O4!`KIIP4bTtD`tfRMK z3%&hYMdhAV*vXPK$C#}-#)|rm!3aYfPcbh_#CTuz2CZdjPPxpfXDCgJD@s&WQI)0i zqc_J(a$|uG1071DAfrAB^SSv~7zob`c}oTh?gQ=6leu zZU%)#VW^_X4XCs!kFL>}L3DU&=wSW05}*)=iVUldOnaZBWDwk_h4ZY>0T7n=(pIjt zTZ`uN8he>SH_e!B(d!X`Dc!}k37(rWOoh(bI%bML4cg={5JR6g-zJ!e<7uiwbC=~$ z#2TkF;&%+ly%r%ov7Q617`}*aCf*E5R8e7LN*86UE z7qg0MH_d`E;18WkSgZ85k^z2~{hx){ze)}Yw;D8`hkL-xC5>%>Ij zULe9qJfdgYDyZWuW0oEP8Z7cDCCI+BHe-y)cWkuWIP>&RT)hvtyo%=tK`4}5m3N7b zp@V2V8~M0uf*)3kW50S&qJPACSsPkT@^mj3IzJX#jt?o^$q#2W${<}u8Wdl)k$c3fX4%!=Hq7k~kE#BGbBvU9JVxx0Tz}k-g_=l;l?srdIwSYXgb{KrYjaqXnp8c(e zvpb4V&K6Fs2Voux5KM;oVs}ap+f&k52?es4111ye`pE@ELDu2DbX_El2t?)W|hQt!6?m ztJO5SqkC+2J|Tr-&cl9>K}S~S;G|fA*Dm017|}~kCKy(l)C`M>>N57PN)O)UbCwaa zmiE@SpFV~bndn3bAnvpmeOXrmU>7FAwe)KhbN{t zqwn#MkiSOgTC^xsXyMUqyf+x^6_mkZsD>D;(+NOa4O?!CBKpOQ`WqAs=(@Nbe zHl;V-#`9blF;R>35ly7$O!(IpTk&!2RFR7iIGwjg&FGdGzlhsm42I zob?cP5TlHKe5>$1P++`j#aY0sX|!`_M#Iu7Od&(8V68mbE02r za3B_WHyVjyaOzv-10ZcXmnx!UK~Kk7SlcQ}BDU-bJz*YZ!yu;W|ANf*cYPoIv`wWj zM78NU4+HQAD@acdAF_n`uYJa*$=wV_&*eysb1<(YBO5hbv9!e)EwmKI7x{mc4##+& zH7W)_r5`Ix@!Phnh(s?^cSsQMK6aI%#ky&#>Ojh=RC1UoLY-y9PXLYTi#j&)Z8XXN^W?c2A2!`G(+UAK{h1Gw+{DEv zb!}A_g1{=w#xZkQDAKX-?rEh6E7c2_HX;t&SdGF`#tYSr#GF~swZ{d0L& zh-pvjeB111+tLUYo=!ZY-g6-7F1bm*K9vi+4@QF8yHERfRMqn2Q0mnbzswOAV65vyl1RX>7tw498TPS?&^n z-@bPBVc z`3Jft8N!geL3lxPJtSX}&y)*9N}j5-ie?d3xr#;ybqC*GpDDYF0qK@o@hKDV?bmC5 zlIMBrRSI(ITp-BV3r!O!RK5AB_$+^!WQYFAO}>|cqgG;^@gKl#O#_ zATpDzz~F))P#C_neU<%~4OQW2XOu1N@;OK2sd(C#--~kW4|`UPar#B$NYHK5vZi1W ziVGov>Elsk37Yff`QGiPyiv;{iHh&#ayc;bAq;kZq}UM1{&SKjxKfj>I5=I| zyZWXg^FP_5>NRUjtcLMQ_$Ggn&I*up@<@|P{--ec-xJZtob>;@mshk}zvqu!oVR?` zvst7x)|TnMr>EG(8u#s_=ne4AFnu;4()_ei{~&`g_{Z_{L>Id$+0oX_u>@4{7WwFO zV;i{C(7|dFpcIjG_A7PU|8IMY3Vb95Zt!(Z>}o2Y4LkO35E>^1>UzfZ1hByuTw9Y_ zvk#>7C@K$YL}i)&18@V6+plYKrzzoG*!(4}!0#m+MHjqkB9^(@+tQ9^zPGREtJ!_3 z1KB)nUcY*Ax|A@uBY;f{Tf<1&%ynfAI!!+N)pjVxwlggCHr4s6#R<2DQ36PALAYeQ zz~{MH8uz#ao43I%lH&BQgf&O5;43*N~qL!I9~jO&f&IHEu)B0qqj7odEvw!Opof%Jp^LHJ~IEM zfZ%?|>kyGbbWij27;(lPe+Y*CseZsh3oo+;Nl8gk z$?vGkEEgLJ4*vD~?0WOFHz{qCbb^RL9Sw_&s~O)^w0R<;#YGf-dDT|mJ2(IXxwZ@9 z$88kBSJL156Sa2jb?>vQp^w?FVnZ~tLfhJ(9x`aC;#u-z&e)evp?Wu1NxdkEQkD~; zn`%#C)S0nBT?*%#YI?8#^mTp(`e=-wm7|_MK1OOoovPZe77KibZMOv&6!*_PNFerjm&zzDvd zp1y|nEwD-+q1MDW4!wT_ZE!dP^77vQ6sPN#g2MRIi9zU+6*7 zoBsU>EOlY)5R3PklK-&$I&M?yUdalQ7rwc!W}axlg8h;lrFsdQXWP`wiRfX;Ua?jh z!shPKkHu{kGi=gJle%+Y>k)AOgcp&XUnVT_y#-i~YM7mS53K*+cVfl}$Rjst9O<94dyv#= zXfs5X!^=|V?blR@mO45SEW7r)ITytrCQ6LY4nvH85d@r#6Ee_S)lLXK3khpZOE$~ zja8#|8)7h-TU3myu#*DEcijdDjQUnHn+wJ~=El?*IFwa$tsf()acvtI-RnOn3P&#v zlfkV%ROay@Ln?z*(k&{D_kA6DVZ_5t!sCWXNLV&iI_8z^vU!HXa0PHb(L>X;@^-B? zsSrVj-#oiz&faTq)u>;Vhs!UH9&w&pRJpjMDjUR{0A#IeHf$K+gA}!68go5=b->x` zy)-1ed+b}qjpjv>DeOoQ^f>4_;qH27cf9nywuhUxs8`#}QxcK8_mm9+xWm+5BgR2B z?8AK1weD=gMY_6UaC^8>-~b7W1?xoDx1Y=qP(z*>8TzXjLVmAg&#oG6g^3pQL_)n0 ze4GYZ%ignXClfN9(+TXG88|9L)4aDF9DV@s0 zK7HSYxbEhWWVPDzvA|jf&33e{D32xrc!+=Hua4&N{l5IWk_Z4Ts?K=A|Ae>#K$QdE zX=3BOIhMckxIf70G7Wop>N1!B2KBt$i>e6mm%6K&FmFK|%%^{t_(UB1k-y9~8qe!n;?A^5 z0cLo9KEsxeR$~^o1Xw?{>gHjGPEUEGrs?JqbtvmZ381X_9uG(XrM33JwG`w8*#U-5 zzhgK@3VkyLbH0$YC0%drv!R??{%>~YV&nPPjqj+Zp;z_x2Fq2wG zkE}W!IcK%$2&;9%%^7~z@ucR_55QWDqEn0b>8!&QL+8@?+f~9gb0{b?9IdeiF3|{R z4mnUI$MwH7+93c^jEmyYoO;lcG-NfNKGlMI9I(lR-=}$L2rHIoR@21GbwW|2B;Qba z+pl}~Kn?Ep=M*jvfI2PCn_M}FXPf0&$Vp0b!(*#xgpfR8Ni)$bFI~4!p}&{wGc~4d zwlVQDe4P4W9gM|0w2?-Xot9_O_%u-+!+i3w#CBlV9!g(dIU?*z@3jQwBPbiU2^lLn;G_B$d4+_D{bkya!yR4RN)K_*<=G!3kA1f z2#7V{;`%XDBoUEXyu3I!nOt#|q_@#<;9#fAR($2@AxQyid0x%no&?1=$8{CmnOz$h zr|O4c7#K@s#d-2K7AYa{nzG6O8k>Sg2|(&(&-R-xU68uXsYu-2ycj&dYo>4?WsONm z*NFSPm>A$R!aDY?DESO$ZAWOk>bEq$kO2-{ul;Pt56aXr-DqJk%BozEeMFb({UJF) zts*>wL+q;YXH8Y!?1&2#Fb zrP@qZ?&t0>rc`(WK zluZuU;O<*zLapSOR|aK0sAy;IcwoKx5}Rzs)~JJP3r+2g5v(8mxu7u*xgiO>5zGFm zuh6O&rgdY1vDxQo`FR-)->K|Y<{>iU>>aoj>u1a(x;~vLxr6p!g)k$g*0I>!oCSZ5 zg&7VA;#P7+dxLATGz3zxZX{^XQU}61Tm{-=dW3sJ0*MoLHFG;6nb{zO%m^%UMR#7e zrluaV&pIk4LIopo7t;JCb9X$H7K|2w{j#+hnB{l2_qXp};;CUORL(;{S<#jHnoZhc zg9f&o%!N7{SwzKrGt^~Ox}d0*MN%fOxji~A!4Erlye_-YUuC_MIYCgh7mm=T8t$|e z@hl>jNVoNccMOmxlgPax$;+|I?(jwaAMxPQCCNqx{+YFAgRu5bRg^rVtmd&HpUVSX z%!p-z18TfyUd}5c(|0wlDE9*qf8fO)V6|9-PxUj4xm3^d7j2MAUUNKY&<@v;rS;R7 zCP=Jrr|MmjJi}2dQcWCk&Q6xM5RjNc$NTz8*)7OvF?W`p(rSoAHR-apMUUPO z@<51@cag*Eqk>=UwnpO`@Lx>s7HGsMgIqQOgkFNgP2K6x_Pbg>ptRn3Ugw?bTEw`e z5+ePrS_HuzF>9jSJZv_-9JbgO?r0egwc$XW90!5-vbZ}T_6E26Hqub`MX;E0Htunx zlXDQoScH}yZ8y@g6R^KftB+bROrsQrjQkD}L6dIGd?##Of}hFF#&9v@Y9C2cE{#9a zb6ksp3k+P7nlQGXMXQpw{x!eba_}}V0wLDDvn;iOa!MlOmqR06?j~Qvv^#ny|Bc4L zfMxS`Y`hA#qpt8LFTjAbgQ_%`+#!Dt&H9+(ByJC|z-)so0aW7%D_MTrooo$AdFbC7 z(`@0lRpBx*{sh4$5UbQj!g?0g(d=W$MDpd0ZkZ(+d$o>PQYtC4h`8?Pb5gC5QeR8q zX5Gfp8x^C#c#b_43VoDnw*os&lh6Cn7@0UDr;na;kvJ#w;cC=>q736JNlTr`VoJ|h zN!C-bFm^sBrFj*kAs>W*cDm$L1KMlvzox=fcey&o{b^TqO$S!@(|F8(-zVWXSZ z3lf@5W+K#2Iqr^uGQi$HsM(j|9JP2jmgl~-x5eLMNAcR|u9S2R07xS8af$fv_&km1 z6}8G(?}mh)~q3liWIi5E|~hSx{jis|0e4&#h#J3f1!WC z`KPMrNnEbn4IFS?EFNh_O6^Byl zFOqIt&bPjsa3Jp($ZdLCB>_@X-Z7Cm{&SiJRizReIAcCB+ClvqI zd~WC9WIKi1Vknk=a8Wx%cuOl~4uRI2CiC3;6s9#_B4e4Q*)mqZ2UP2+?UPLIc*b*i z&k!}w|74ztDBosVfnkPIWek9hr8O#ve_7eI^Zt#=H+-dUB_F#65_3_Xm-iBLu+vU2 zi%rNx$0OZ~Uu~%WS z?S!9X^cJORj=CWIo7A|E;|t08uIEvvd#Fp~Q}B(eGH}*g_~S>GQiN(c3KyR2Sz0`I z1PZPSTss?O9|{}qby&w8LVO%`fvq6fTmJrii)L(nu58Bo6@W=WvJDk9=LXZMPhkw%O;F z-;Rz^XcZ=muTFUicF9^QsGrZa<1h#$KhMQO&Oad&a@*3PnG;nh&C zgD0=?!ijN-9qNVyI8B|m5%pElN*J;wsS`LTLiCjFLxt#AQ-G30`6!xmf+b!7`{phB zMvYC%K2S;(cyoXJ(e6M3n!4oAllpupvZOQMzbYhAUy&5_#mUv8cnF7}rm*dOCgS@D zhRN;fewpx9{*YLd^~t2@QBHQ_0U<4*Y9(-y^tHUk z>(7fF)2p7*n-Ny?fO;B4)xU^J6dFtydTUWu`Bi@lfA>FGfRs8hqn0ftg*%m)oD2p6 z;Q6GKO$ktf_(^KQ5T~E5^g4w{S$`Tl&G^)OJ&Lk*WO!L52QFE4=()Z>>6#{}8(cxQ zU-XkapxS-SU4)w&NviN{&~>%wXdf7#m=4TZ<$}z_Me?1?rTfX<**npAN7d@RI{l~? zww}}7xm&a7v6x(v^$HLm)}gZgIlezQgkoNm0OguyU69XvC>O9n^(g$65h$XU@|~v) zLc>0-%DnAJ|E>g)m}yZ6E7vQ?){sT9qTuW`jpD4IkpwD!_=#(PZJ?{_;xOxfcoC)B z{2MK*tlG>0!^F<~E_qm|&^1>NLUV|-tvL}|&@)?F8b7DX(m6+&fkeVbE)pw78R`9Q zCYw@`ltRjuh=>x+TMomDyGuyOi(+~sd2bBYAkRW`G1=p}>rP)!5Hb5Cu9tdKJ^{9# zMrcbk`l2nWZTk|%zey2%jZ{eUhYCs$g`i87y$aEoY2HrXT^aIrASHp%&ZE~}|01!I z*^%C-p6h7)GNy}K(fwX#H0!s~^DrLf@MX&afhk>#hc zf3#~Qzo_n+p$YKfhN-k~SqA;>26g4!K|pPEGa&4Ry*(j&~m3a3@m`pz}5lN6Gt9E%&qJ{%Wj2L4B(^qKziZ(n7@$EoxO^L6x8 z&Oe_iKg2C;k<8R2NWBj!L``Rsn{hXQgI>FGzA zRaGuES@SHE`CIS%s_JFmr=|I!r^%h~Pkqkk22%hJe=L}z1#my=V}UaMb#kSymWo@N z58Y+|%Itl{{osA*Narv;JVplCx2EwN`v0eW|KHH10`T%*6R`f@KhRIa|Mmn^W7Yru zEXx+){0(kAR&$@-p3j;JUeZ2Xo{dV4J60kR{Y^`H6X){5clQ8A$~FHm^bw$Oq4h_|JqN62Ep-@;%=4<{U2Ae3IV^%rb1> zpvC7&eWH%=eW2t1Q#-Qj!39TTjq1`6$cU3Qm%rye%TI9+OWlPu`e`Y6hpWTHP( zbXP2r?i!{UDM%z+GaxpD@;(F>i0rOpKbYTHEa#i8huS$v0%d9^5or94CJ0>)5y7hq zuD`^@Xku#uN5m?-xz&}Lv^XhloT||+$8Or1wB$y8Af{1kng1PLj~1RD$mV7VhGyPG z_J5SY2%-#At>1^&VG3*m4QO9Q$B+Dte{O9rWmEbALK5;+1S_EWD*5U8;BA1s?7!l; z@*eHkxAE$>$e%K$mq~iS=E*pR*@~y5;yNQ17B!M)wj=S zLa$I^uB_C!+=H$KH*Y}Yl(SYw%nsE~EiIfWF#&uomLC(439MLJaJX5Kp)eu=jF1q@ z79p$?SX2e5E4C?6EqTm*4`HwqZHyLPP4o1VNmMN(B-A)XHN`{_>u=N?cLgxi>VI&j zgxAGD{~}ZIdFb$ZL7vA&@s?WikeTskjm7qi!7)^Hqe8ez%i68jX=vYC4x#a>a`H-C#D|nUd%hk#2Apbh@^}_~*|j3YPy@geyGtbP-Ji zlg#D=zAazIt)CBjA*Jjk#sl%c#OeV+Bzn}c7#}C9=LDLZ6KYj~om0*Wcw1~rPp0;J zG#!%C#2(cwtmysAA>9(ShCc`!czQG;l2e#og6*um7~#T87)_CQ=3TFNcF;p4h3=D? zpmN0ag{2?)(coBr%~rC%ipr1qVe>)lLk@M^acv%hv^#o(+=*-r+gR>3{3U`wQST5q zOLc$KbQ?bdQYR-XkhprUKGN)_FMnVrzD{bVI#eC`cZExd9sUy-msPzj=7)1AaxOUM zKM7o*k#w(l4N}D}-AS1IPzh0$K9hWPH%LIuiIG3NSC*%c5FLsXN;JlmUEwN}i-*vq z?C>|~V?KY;#L0FrxM>#?`;TV#;6nV`;jqN++2IFN-V))m+^XrZ-{h~h-|fcGPUh@f{X*S|>j~vi$=dQgh;R<4{lJ_rhIto(Ve|AisulL2 zv?Et?grMJWjWk;FDCxe$ziVDHHvr8`c>MsKKA!;63ODS}UCN%f>FeI7OqHWPwA+8R z{w^A%F4ah3nAm@(t`>!}_JJq!6J)0Q1p#7vn8Lyl(NFL(9iK*&$4N~K5aZ5+S&hp50fbK_^qY91{f zd2cHQJE2R<&hzq^8+k8z)x&wlX04k;(>su(?e2n>L<_<>NtwUu;_q$@Kvu{KMy7BO zNa^1y?MvFSz4+*{#t}oi>X?EhWlUTYVRkyq&(}eHYIb<`RC2g3Pi{jk3I-=}#@PSg5jISWc}?M`<@4 z)bs{Y`R?(?CM+20MY=#lLJIj*?x=_;(G6&X0KHE|5T`SPrun1#=EBmMnxpYLcj~L0 z$oJ7{{&sW^$B*1-=f99t1S$L4cNQhBy59?2Yradz|K;|*crE1Lrsqx+p?mRd^|{YA z#e`{TqvT1@lpRlfJIBspK4Ph@Jm5n?!Lx!H&YK1)j3lX$*&{(nsovI$h%o%??wJDu z+8=idasw|;s+e$=wFa_ypgObg0D{UMq#6_bpU>#sP?HHi5oZOIx$@4Mi7Q4>s`sC> zdjM_ff6?8!sn@$+zo;bv^Hi3)AREWM-Q2TMi{G_<8rcx!0jlw$UC@1hpb_dzUH?3sYAyEK33Jh; z;sRhrvhERPDjoj`E6UrWhej^G8|wsT=u)&kZFW~83|C6Lvs8~bWJv$NCG!>pnmCWY*N*43SlIq)87iECxz9k1?EOP%;*kMnRUm#O9NOu{t?8l0Xk77L9Pti`SME&4G2>>a}LbNq8v8tk-O z0Jzj|fsy&{QpZkYpm2UEC^DC?(#J}oVMV%v?=y`K6`C$Cy6M4z%$g|$Wf zavfPewd>ff(-64VfqI7tW%p;OCb0@euMQq?(hil7!dYsI$TBA?*q#cP$YV@01+NLgS20-S5obR6G?5ob%;8vkX^=1J530`<$Q`;_~6e+TPrTP&7 zsvLNJh)W@m8+6-}Q>=$rzB7_L_QX}YMNtSN_P8;lI@S6 z#UKIuHUh*QTRuBKXP1VNh0kxk`pT3WHb4K8o09Qe;3DU*tzj&cJLKFNma`U79jwo} z0O0pIUO`7)m(Jr;N^|3HU9`2|g5!+Zog!IRgIa>ZznbC082nXMkGigYcA=jfU0&B- z`{0VqIE|MiUTTRUO&lz?+Z+8Y36$0Xbt%4RcpD;j34cf3O)KcH7LU1XS1$o%(N)*3Hx=qU_ zk`Ty9iz(b?GS^)b;v})?uFd+ZQ0cS+L3FSa*hSjR8JsdYk6NGkyCeUbk_d)3<}&Zh{4^3I+VU#C&MF!lGv!GdlF5t` zI_m`m>}ZE^hL1fcKpe0vT?i=JYY3$l>$?^HVgIHb1b=?IL5581hO&AU*asGwhl#>dtDbpk zyMtxcM%+P07kd2~i}1eew@(xJ35u0O0VyQ!y*u$*lKq+Z1b%kNYY(@($B&lk<)%Uv zAK9Aksq%YZr_Gcap8p0^{;@Vc(^e@PS_p9*C5f=1WsYJGBNu!#)FlGBdU2Lc6@1aJ zxeup|)57?2QhZaa^S-qwoN=NZ{KQ-YX#`>hzQeR{`wW&6xr={6ju8FC#VpIXF@FNJ zb~b4P^S!wT1>+c4I2=%BvKEt9HP16KpAEQp4=m({S*l#^Lt)6!DZK;-E)WO>ju3U+ z)XW=xQ-Ia@oISCwH}Dms9%ktQKnJ}%zZWKx3bubx#b_OF%qRq)M}1-qz+`fUTb+as z_T%N@%O}wZq50-YUhrTX9@~M3v&X8$@&T{W7Q~t`C9`MAW9*S=3ewFE(*81<>7d&F z$%@z719&puN%bQ8ScN&&L`bleik{m|!#-1Nc*QS|b9cU|b1SXaz4HzIf7e89wbE7={I2?z^01vF)CL~2jy*tQ2wi8X^US9Tos z(j{|?UxoQ&gdBSsv1BriuZoFXk+Cym8Aj~hr~{J6_LiR0>|-1j z_{rh~yPkcT%SjtyJq<6Xt8l;}NrkVxf)nl_Hb#C_6e4|CyQGC`(&+|2*Wfgv_jOpF>GA zjVrkEZAbRC6&azr5?bI zz4Gyu$y0f>l-b^gZDgRp)RnI^0b`frT(pj6CI3fdZ{>`pe(A!B)>W!(o%x4P1&AOy z?)~3a8g6E5={l1V_N{tIc8Gw`4kpJ*_yUbgQomTf51j9R%MOptDnH?M=1I4uF-Rv`0t zG&AH!dU!#(|!QMUGbHMlRIKpDEc=KW2d`{c6xTLT!Kt!)r~$<@4fW$u<>}L;FM? zaCXSJB9sbt`Y_Jos378|cqQnb!ddOg+P-PT$*7gswv=X+CQpO1Oi7_O&V)h>kuPnM z5}kY7Oy&{3e|tl!!Ae}VSeX&6XJk@_hW^%(eimPweK`CLgcZ9r2{2)S7ZGjlZ^sWQ z3>>j+hE)o_tBER?^9e_k;?YN=Pf5;aU%u`^5YZ85;6N7{1TE|zVvMPr?IB)pg7&)FPJYQLl3_bh}G zVVpLvhz$Krdh{Q44s~_X@gBF ze)dx6s3uxv7y~nX#cqRSWPO?9?PX{6JpeO-=~$nPr{ffB77p)X6llZ=>4DB_QH9D_ zXOE;zDI4Wk&_}bz2RaSRU~Gty`8oG8K_e^^+R&EZ`Ci}1fA?hGOHZ7$Jw_ARFj;V z_pY%~Ex&_{N?Uboe4Y-hQ#JGQ@=lx~s0C`r!ABg1mOKqN<;u`~hrERK1D zY#q!hiYCNfy)WSAEK*z8Ed-*lgV3646rhWQqDWAdep_{s+;r>;*1>76VY2U|S{jFK z$7X)IKXQ>BTb47x1tV|9mnH_4r3p^pd+rILi zXr%aoLJRln@R>sWuahc<2JBk;iLPP4=_n{6D+i6KXe=MkZ2_4v2760akJmi>NO+~F z&jI3%qcrsKuTW_OF9fJ0qW`j|3uR=TA9ADjTy<-BiUzUpIfxmRM6EZ zH$}YioOXC9PNBK6FvYh{r#cGA5pAEB0x>(Qf7k*PykA2h7%=TyTmf<4#@~=V+JzO& zUt%GLjW(Rz@rUS@c^xdMqBbc-w-l`@+Mub9s?G%Ga-n=gY3@;B9taGZ40s)Vz10Id zAAEbng4j!N%i^z;Y0M0^ zE|hBH);_w+L6hI$YXBm$V>$|55bwZM20%P+b%eO#KQPF47}Pq9p>Zw8gJAUY zHQ1c$R2g)cI^@*X%$J+7>8v<~SnW6gyHI;y-Dn_5MtACSnUHIWi$kZ!)_jO|3yE-v z=Ia*kRSkmjVyCk>HLs|0Tj(?!GwUn^L&^A(=x_7CXWmmjt^tSxM{gD2o{3%_UXov2 zT&|0F%;|baQn!8ic}MxFVB;JSQoDQ2h@gyaA!^!jS?iZS_b}r_p|$T$-xd?j3-XWx z?-{C10VT>mrI!Cp=x=iSfA1-()xCWD>fCVYf=z1G={)#zZHO4-9}=Y|4?Zn&ywE%5 zKU|B!y2Qmq%xqU(hg;cM$cfa#9%ak9CN+LO6tX6@?sO0(LK>C~0qsXhqp0)Kw6=uJ zh9ZXS9~$({!zC>1qi-jR4Fd@}Y-d2>SMC$+J$>e+H~`mySrjwxuDgPL;g$^jNNk-= z34gerYK!N819q_JWd6q734`ipD^UY!UTtqaQlSA}q_H#9J*hU!OsnE2KBZ;>B%g+^ z>_8RzXo|l#Bqoec*wc%Yi-I(#rX$83efk!CYOo88wOqsf_io~?X`+XBYBY}{#T=WU znH_sHSidyQ0_S}x^+A?mb_omCYRax9-gBFYhr&I}sHhIY!A(?X{`FxUV8`YqRXLdA zQ^E-N)mfb|O{LzP^+!1YzEZ}W4vqy8akgnO6^bOF7c{ik4e^{T{OhS|?z$3rS{_o& zmKz>-Z^h!C9awAo9E=d~59tg2EfV9jhKD zER}NIPu(_qeG-Em3Wb9~!Q-o75J)A`KBLJASo7WKLYd!8_nqDV61vUg>%568&vq-4!CM(_GchCFlq1DS%bsZbeHMAbgtK$Q zWHUzowMarn5Z=*nS!ruTBfy)bul|>94--j9d$B zR5xa~l-x+qa~n7cCNTDD0>+_Ih$hn;Rn$LYF%vL9VJ>Lvq!_m2`Av*igmMM`z0du( z^7FroR@cwhSUSobi}AzSFAGDUJD=*3qP1B~Rz_u^I<=BwVg9_(t#Wh01)#G16T+48W0>I^FBHgxgoufwY`89DwwiA zP~3v4c&32o6{HI;s2PS%aWw;d`t`KrP;^0S5fe=fnqWnKC?!WB93H~Y2Zm39ljep}kT7h7Hycdsh zwAkp1=bAo@X}fyCege`B8Ed~b?{B!Ges$69;GC6K4$$D)^xext^PtAA`*C(iJem_v zD_bU2Uq*G&MjzF9Ka-KUaqY0ExhFlxxoOHh72ocijnhbJc+lsLWW8ShjUNL!~;W)SywT||LEHHC8~?8kplW<je%!Ye{ zrp~gv&8+;c?7w~D6A^6RxBpRKj+6)L7W)Gl;fo~-Vl12(t3Y~k&n7Vv3+wc-a&?>> zmlXLH3r#-zXarPCpnlJsUfR$IqUz!AllLg^<+8KdLC&E7TDNuFS{>{U>L(XglYccl zP+_Ng7jK@3l*`%ytVR3B#>TXXNWL4;NTnm9E2@KnHgrpfnb?;&sGr-!Js5lkrwe&s zq%Rs!*jQ(FqlSCf%~gu1$^5BP&%$~8in?4|KFqX&Us&?{-^vrXWj435h3a|B$q*&TzV)zg ztYelA7LneU@UXfQcA6~xie|+AX{+y~(fw>ytjQ=DXP+LzGee`i-Vm{`C>}DRp?Nx? zaP=8$cxFS4t$#Z$Lt#kdj1PLkvnkn)KW&B81vJXa+<_OGa^Lja5CZbV8bK?3k-AkO z;EcVk11EpY5YBN&E} z$K4*2i*6!C(jkyvdWppU1HxvG6 zNZn@6CuZml6W_4q8S?tTb1*~Z&);XC(K>R<+jgx%z(%k+j|@HNB+sLx1I22ViO&~9 zI-Uzwx!R9mY&IN5%@yTx+EJhszLU(?;3B5@xPS{7aRa2;ODo~^`epC;Mdi&S9_}Fb z*jBTDj`1-q`biwRV)(l8Z6;C$_6nlMAph^kjSo7Q%$_znSs8G}iQeiQ&+T=r%U0VS zK;|;J-pJce3f1!y94!VZ47Mu7hH&HA_Z}4Qo)R7iNxCixVV`~+u5569Q75}iEB-kI za2ca38drZ40G_@SadYTw@Ig!X;188UhV{o5iXa7@>*3{gCF=zGXu+P zWh4(lAp^7R0pEVKO+`X!03jE1Z5}^sAajEuJEEex3GGMXlTk5KPOhS{`vMS{7uUbJ=oT-0zBcA z*v49^N={mH`7#XvUjTl@{`8F9_0zYdTfAroyh0h3u0!viA|R4^v*iB^n38j#S(4d8 z6@AS&RTq4;6ZCyCe%sdZLYGs%Uh=}**|4XpAh`9LkM`xq2CcR=i?1PBbD;swDPO9g z7W%+|eoDVA6_~Xok&WeEo#T^`r+0hQB`kH<=lV&l0ZwfowvO5A5!ZW6>tr4u+0)NA zCL+Sh@Y}C}TmvrGdShP_3PK8lI1Yk)TSKI529{5;pKPzEO3w{bsprs*+* z18gYZRM7980UETGu}*0Wx$qZ{&in(=Vg+J5nE|0Llde%TV%)>rpg$Ij!&E&tDp`O) zMlYNIsZy~O$acFG!%0&JMwH(f!%0uQt4>)uujT@u+UX}&hz?Bv%mcI>fS zAeFY7sZPCQ9Ov!6+ed}=n5aX(F7W|!gSR@`H>vd!UghJaYc)Y-#Y*$wuDON!T=(O^ zy{y4g*2)1h{3{A+Xs8RcBhPSeI<^q$0+N`4Nyv6#D(!FhB4Gx-AeEuYltqh11Gq~2;Hri0G3NY;&ddu3on@SM@UYD;u`iiD7bDIj3PV~$R`}mAEwulv9ct2F&8l_tPES@~$8oA* zSJx{O(gw70s~oubQdSbFyS~WQ!wr`;POOl>h1s$HK)}p6a}@C1ik0Yl;JyX9o%Lb^ z!@5V^b)fX2|27R!G5Lyp$^(YdEbN$AqrnKgC?n8-dog)f0RLH?WPuC4I-xJJ<*S`} z(Z+KL>BhV0^~ip0QZHE$+f&`wmUo-cUN53)-~&hA{?aXV1dy z;P4UwDirH_2+;VY=Sh5$Fir{{JpDs|*-7eC$kjWdMdF&PI_ZK8)$`Lx02A3fEyDE2 zj{e#X@qq{kU?<`;#L(9B6*?4SgGMmU6+CdQw*fC@@WN=50Z>`!S-#D@%SAb-3#I3k zC}2`^^Bro&l`n)<1B$-+O#{ukZEp8lT2(dNHkSCkpVDg;Pc_$5;TJpCSNz8cZvfY- z{epukOl_XA3O75du?iT_w_m4;CVF0zLV-KZBDKomf1FnX jum9`8ebO&|CA|l4uEW`XD+K(t2!^VnmO`zZW%z#pL^-c` literal 0 HcmV?d00001 diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md index 69b7933f18..7e6bf874fa 100644 --- a/windows/application-management/per-user-services-in-windows.md +++ b/windows/application-management/per-user-services-in-windows.md @@ -67,8 +67,6 @@ In light of these restrictions, you can use the following methods to manage per- You can manage the CDPUserSvc and OneSyncSvc per-user services with a [security template](/windows/device-security/security-policy-settings/administer-security-policy-settings#bkmk-sectmpl). See [Administer security policy settings](/windows/device-security/security-policy-settings/administer-security-policy-settings) for more information. -device-security/security-policy-settings/administer-security-policy-settings - For example: ``` @@ -113,8 +111,8 @@ If a per-user service can't be disabled using a the security template, you can d ### Managing Template Services with reg.exe -If you cannot use GPP to manage the per-user services you can edit the registry with reg.exe. -To disable the Template Services change the Startup Type for each service to 4 (disabled). +If you cannot use Group Policy Preferences to manage the per-user services, you can edit the registry with reg.exe. +To disable the Template Services, change the Startup Type for each service to 4 (disabled). For example: ```code @@ -173,4 +171,10 @@ For example, you might see the following per-user services listed in the Service - ContactData_443f50 - Sync Host_443f50 - User Data Access_443f50 -- User Data Storage_443f50 \ No newline at end of file +- User Data Storage_443f50 + +## View per-user services from the command line + +You can query the service configuration from the command line. The **Type** value indicates whether the service is a user-service template or user-service instance. + +![Use sc.exe to view service type](media/cmd-type.png) From ed9db75ed43549f012bdd0c10af2167e2156e03b Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 13 Mar 2018 13:05:23 -0700 Subject: [PATCH 050/138] fixing links --- ...el-windows-diagnostic-events-and-fields.md | 38 +++++++++---------- .../configuration/windows-diagnostic-data.md | 6 +-- 2 files changed, 22 insertions(+), 22 deletions(-) diff --git a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md index 963fb2a1f9..dad1cbe857 100644 --- a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md +++ b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md @@ -30,9 +30,9 @@ Use this article to learn about diagnostic events, grouped by event area, and th You can learn more about Windows functional and diagnostic data through these articles: -- [Windows 10, version 1703 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md) -- [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) -- [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703) +- [Manage connections from Windows operating system components to Microsoft services](https://docs.microsoft.com/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services) +- [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization) @@ -2379,7 +2379,7 @@ The following fields are available: - **enumerator** The bus that enumerated the device - **HWID** A JSON array that provides the value and order of the HWID tree for the device. - **Inf** The INF file name. -- **installState** The device installation state. One of these values: https://msdn.microsoft.com/en-us/library/windows/hardware/ff543130.aspx +- **installState** The device installation state. One of these values: https://msdn.microsoft.com/library/windows/hardware/ff543130.aspx - **InventoryVersion** The version of the inventory file generating the events. - **lowerClassFilters** Lower filter class drivers IDs installed for the device. - **lowerFilters** Lower filter drivers IDs installed for the device @@ -2531,21 +2531,21 @@ There are no fields in this event. This event provides data on the installed Office-related Internet Explorer features. -- **OIeFeatureAddon** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeMachineLockdown** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeMimeHandling** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeMimeSniffing** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeNoAxInstall** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeNoDownload** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeObjectCaching** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIePasswordDisable** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeSafeBind** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeSecurityBand** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeUncSaveCheck** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeValidateUrl** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeWebOcPopup** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeWinRestrict** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). -- **OIeZoneElevate** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeFeatureAddon** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeMachineLockdown** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeMimeHandling** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeMimeSniffing** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeNoAxInstall** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeNoDownload** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeObjectCaching** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIePasswordDisable** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeSafeBind** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeSecurityBand** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeUncSaveCheck** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeValidateUrl** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeWebOcPopup** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeWinRestrict** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). +- **OIeZoneElevate** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/library/ee330720.aspx). ### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeIESettingsStartSync diff --git a/windows/configuration/windows-diagnostic-data.md b/windows/configuration/windows-diagnostic-data.md index e3c5fb9fa4..20b60ae7b9 100644 --- a/windows/configuration/windows-diagnostic-data.md +++ b/windows/configuration/windows-diagnostic-data.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.localizationpriority: high author: brianlic-msft ms.author: brianlic -ms.date: 01/30/2018 +ms.date: 03/13/2018 --- # Windows 10, version 1709 diagnostic data for the Full level @@ -16,7 +16,7 @@ ms.date: 01/30/2018 Applies to: - Windows 10, version 1709 -Microsoft uses Windows diagnostic data to keep Windows secure and up-to-date, troubleshoot problems, and make product improvements. For users who have turned on "Tailored experiences", it can also be used to offer you personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. This article describes all types of diagnostic data collected by Windows at the Full level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1709 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md). +Microsoft uses Windows diagnostic data to keep Windows secure and up-to-date, troubleshoot problems, and make product improvements. For users who have turned on "Tailored experiences", it can also be used to offer you personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. This article describes all types of diagnostic data collected by Windows at the Full level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1709 Basic level diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields). In addition, this article provides references to equivalent definitions for the data types and examples from [ISO/IEC 19944:2017 Information technology -- Cloud computing -- Cloud services and devices: Data flow, data categories and data use](https://www.iso.org/standard/66674.html). Each data type also has a Data Use statement, for diagnostics and for Tailored experiences on the device, using the terms as defined by the standard. These Data Use statements define the purposes for which Microsoft processes each type of Windows diagnostic data, using a uniform set of definitions referenced at the end of this document and based on the ISO standard. Reference to the ISO standard provides additional clarity about the information collected, and allows easy comparison with other services or guidance that also references the standard. @@ -129,7 +129,7 @@ This type of data includes details about the health of the device, operating sys **For Diagnostics:**
    [Pseudonymized](#pseudo) Product and Service Performance data from Windows 10 is used by Microsoft to [provide](#provide) and [improve](#improve) Windows 10 and related Microsoft product and services. For example: -- Data about the reliability of content that appears in the [Windows Spotlight](https://docs.microsoft.com/en-us/windows/configuration/windows-spotlight) (rotating lock screen images) is used for Windows Spotlight reliability investigations. +- Data about the reliability of content that appears in the [Windows Spotlight](https://docs.microsoft.com/windows/configuration/windows-spotlight) (rotating lock screen images) is used for Windows Spotlight reliability investigations. - Timing data about how quickly Cortana responds to voice commands is used to improve Cortana listening peformance. From f5532c9aedb6faf92aa2ffe465d1ea0422ab27a2 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 13 Mar 2018 22:12:10 +0000 Subject: [PATCH 051/138] Merged PR 6340: DeviceStatus CSP - added new node for RS4 --- .../client-management/mdm/devicestatus-csp.md | 11 +++++++- .../client-management/mdm/devicestatus-ddf.md | 25 ++++++++++++++++-- .../images/provisioning-csp-devicestatus.png | Bin 53563 -> 56103 bytes ...ew-in-windows-mdm-enrollment-management.md | 7 +++++ 4 files changed, 40 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/devicestatus-csp.md b/windows/client-management/mdm/devicestatus-csp.md index df99bcf53d..25e45dfb80 100644 --- a/windows/client-management/mdm/devicestatus-csp.md +++ b/windows/client-management/mdm/devicestatus-csp.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 11/01/2017 +ms.date: 03/12/2018 --- # DeviceStatus CSP @@ -132,6 +132,15 @@ Added in Windows, version 1607. String that specifies the OS edition. Supported operation is Get. +    **DeviceStatus/OS/Mode** +Added in Windows, version 1803. Read only node that specifies the device mode. + +Valid values: +- 0 - the device is in standard configuration +- 1 - the device is in S mode configuration + +Supported operation is Get. + **DeviceStatus/Antivirus** Added in Windows, version 1607. Node for the antivirus query. diff --git a/windows/client-management/mdm/devicestatus-ddf.md b/windows/client-management/mdm/devicestatus-ddf.md index 08187de0a3..7e4a7a5933 100644 --- a/windows/client-management/mdm/devicestatus-ddf.md +++ b/windows/client-management/mdm/devicestatus-ddf.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 12/05/2017 +ms.date: 03/12/2018 --- # DeviceStatus DDF @@ -17,7 +17,7 @@ This topic shows the OMA DM device description framework (DDF) for the **DeviceS Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). -The XML below is for Windows 10, version 1709. +The XML below is for Windows 10, version 1803. ``` syntax @@ -469,6 +469,27 @@ The XML below is for Windows 10, version 1709.     + + Mode + + + + + Not available + + + + + + + + + + + text/plain + + + Antivirus diff --git a/windows/client-management/mdm/images/provisioning-csp-devicestatus.png b/windows/client-management/mdm/images/provisioning-csp-devicestatus.png index 76c746d95f8a51464e9c6afba650054f0fc19cf7..520d58a825c4bf18f01d1841fabb280260a47466 100644 GIT binary patch literal 56103 zcmd?R2UL^Y)-D>mh=L!8sI*T-A}XS^NFt!1VnhN0igausARslg5E~*YAVj($(nY#- z2p}rG_YTq_p@+~ylCuJ~{ok|4*=OH>|6|;7$M`-SiErL_y=%=m*E8pQp5>*EQr@-W zzzzrmvI}|nf(8V#X%_^tb3LtM`)=9Gl0B#DiqfygaG3^x-`+#ZOUJP<`NKn| zLa@$@xmDWGRTw)2@_?fUSyfeKx^3mqwvnB&-Av;GtkKVzY`uY+n7Df7njj#<=RHu3qme!Yg3v&`Doh=vX8_x-NYVop_DelYarUCI3G zl)8n5WzoT&?Q&Yaud`y4P#-66$=M$YYoy6yO$9z zDMGj^Ia<4yUO^4vtkK&Bf$-BBhnkn_)K*W~p0#qFzaIBq*8b?twy-Zf#zur4FO|jl z#mS%N0zI3e-G?o*(3Mls?W)dD?@ET|#H7?je~n=NyHyW!j~PYlpaYR{&TP_Hsg~9G zcJ%XO_b9Dkk;@9DB;pD=Xxd-IonJZN}C7{N?kNkbMGj z5nn!BykrZ#=rVQ?A)1#OE@6V83cQ#Umg}vh8L3dXDpPUca&y$j=WC%GAgRbgDVy9m zUuc#x7@ew=4)OHpW3Bf$O`k@N;-1*J$;aQ~OnN)pTBKuiFb$W8QwwWFu9|~@Ak!3N zVydvb*dz{qD5}h>w43`FJIVAlY4G~RvA*^&51Un zc)Shgyb9D`>yOi{;2svEi~k1qo$E* z6MVdf@%7cKS0k(#;WOS>CMN}-0nU5abI3DnC_$@7qNm6cNty6V3ECi>#B&Gi&wT#c6^KgM9?m-TNjIjnG_+dLVo<1p;})2Dies_afH$gk7{sWHaz6zjmP z;_fTss+4317(H(jva+)?^kWRCJP|Ghf1_Nq+IP5bb$Ga^%r9iNewkDd-c ziGR%>9AXs)_KMZRXCUXY#-hDt#ci?=|+6UUd^5lGkKvHB zI)P;<@Bo*hYQ#3kxvsJ3U9Vqr!s)91r}2N8^G=_*w&brb6jpeHzFoX-kfx_R5j&UN+0Y?xat#(=72oP;z`H#9%#j9P?mNDT(PW8 zfL;nm%uSZhp84v95Q^$5N!TTR!Q6M@YE9^u`kKFXh%&!~WX9KXx6IAjeu-^v-Vy6a zt+{%~VatZQ3e9&jU7$w@nU#+2Zu4Qo{r<}bf#F$}Ohg;unOY7SHz;j1te~u*>6!l8 znYdPD15v$-o==te)E003F-?UFcJERUE;;7=Shg#GDsx?k zEOq^E8S(NC!=vNh>eV)F>hjN0GQ_8KZB3vZ(S z;jTAzbxFqsUh(@%@(b)8dGZ!^!_H}ts*2fi9AV%3tg*~|k94s^vhl6e*hGQtqp#X7 zx#TX|8)y}qYtsFm?YNO{n2ja4m%H*{wJkIi`rlGNpsy4djo>$db+B(NeaDcu5=rP^ zwAloaP=;DgEKGI*;K3t%OtMGjPXliDPg6N8&R`T>;HbX3_}T^C?0UCX3<8l*gl68g zv`jkNS=W+1#ZN8#fL1P09_iT#`TMZFM#9IIkMMnVH{!c46&xmEbPNonr@4VyN8mI7 zzT(T5vK<)Es}oqR0=TMU_1g3k7x8Aqmk?pdBk*JMZ0kP3eWdB*0=K^tP2E%~3fWp99>8jzf3W@h6n)t-k3pKf|e z-{hQ5YafGQoptDK-F1G&?o>JLK4*6|E{HLAJ(5e{fQ~vonqe`u3G(QSz5fMP&`Wxc z6OIJo@ctIO@LwSEojX1z?8Sr@fx!6a2Dk$&WM(`;`M&@t^*zu3 z<`&m(;4|{_bOoibPP;s8hC7c?wr&E^)&GKygGQ!qfx0~3GLCUIdDLT2&HFWHC~O}q zx`F`&M@QfwpD(ctc_)gl@!dk{d}bP~nuMS#`$nFtw-ZY*!0f7mp}*jp zt?YVlsz2dOu-njvozJ zs(B8t$iHf0@VCV+HB!~22SZTC{joP$>ZCT`0~=}Vt^6PFJNEhe=trERU{QodJYH5} zb(}_@R_4gyRLFZUf2}XCc{t`=($2&eY+`-rrj-2!ry_8Nj`(HhOlOI5T9ZZtBU5g6 z88^;#_H-(_+%EiF%6%~+<&cw*f9mIuJ4Z@!)D|>TSivE4QIXtYkWoE>B02v(J-xV7h_@VKZAU z5xAy=tp|If8e05|p2>Kwo7FXRxLTv=cLRk_jO(EX#J5-5N*7n~6+I)yk1D37VhJ2R z(I^e>A{_%ss)wIcnqgYZu!zgNtu^Oh(dQYsc_Jow5>JA4J-8{hjA#Pz4Pp$8nN*9q zopRH5Tw(|sUEt=nEl47bu1*C8=|fRMZUF!CM6~9x_(7LZUJ8&5meDO;cU&z`yKK(2xLdQ zP@!S@&fn?SSN!${b%kMMPOAl}UR3CfRx^i6I%g|w@#5aSw`)1(XMMk~1*o^TShow< zDsDn8wlt6=XPSjdht(s!)G9vV06;=^ripOohGNgAVFqkVh?yW&N5<|%jJGD~fp?X( z&B1&a-_M!tSNV21-ml)<=fK@D;p$A@tW zFZnHmZrdN~maT6}J!>`*eR<~r3tb(k#M(0zDZ3FN%S6l+)x+b#$?}coHh?&NuN}Eb ziLSFM3ByR35&3oYy+)gq==(}Oz76$o&`Z(j^Wl-|-|W@#KASVWV0aV7rT>Ao(UK^J zVLKfWe;F!mRnxa?dS?jpZDFZ&O{qmn<4{Dj_Ut9BcjmB}qNJG?_2Yu{k73#y&!k&3 z<{E1UVOqyBWtj^_$_z@EC9~Ah;NbbI7fQ)bbx+P;tyz&ahCOrW;@rdZLgM%6mg!EJ zs>+=|q=vjH=D0}o$V|CxU3P4rMS4Si1!qa&70Ps%Qf-|NHbp}Aw!1nDnj<3#i|%tZ zMuxTKS(8k0zdM#BGh3ps{1BeXMwsxLzra3IN7`OMWq4Qhwn8pYM_+Q`R8Tq8wsM>rb9%b3?Z zBi>KK9qQ^%#eIorszrStMiGm}+rfaQqiJzQ%zPZBk6p*->_ZqP3J^n|(qAE#!`OC|< zwV#~ahtY<47IYJ$iK$jJsBS3QKfCrhen{@_N$X{r&UAQtPuB-r_3_rJPJ|FseHC_4 zDk(#Y{c90=6KkKm_8f0dTbShL?PJ-DBk@2z&w#2N`PXKPR;J`7 zF%kU$D+FumU;(Lfo7Wx~4U)=^H1=(Wl=Vf>lx%BeN6DP5`+nHk#`|ef_})Zg`Kuyp zTK1+>0{A{Wy#xxg4o2^Re2>5hR}yhIw6#?Z^M+$hEr#l=fbS0XjOGk%g?O``HZ2^Z zoAgm@AW=hbv`?)_%Fzr!u%C{9h!-E7n4J9a>tsIN6ANIs-{I3ucnU!H2yJ-`#-x+z z0eN%^00w3Jke9TvDyD3K?%v*Amtu=75H%ke z9TgRZwC~0XH;CA46cb$>QJAt?Lp>>wcuK4xC^G<}{^n+3nzwraq>%tPqXGFJ`7(DZ zIv^mx!^5K@e)e&MJH@lTUKM1mDRpj6i&F-a=NooEWudGqRR*k(R^#SIANZb|U01-M za4Wb?l^b1Rd{JoH#memsofn~TDp1d3_srRLd#wNH8nh=LopQF3xe||c8JP(ze;hJi zyF8vY{XsWRUedBx5poeku?x_c;YeIyU|?-PA8oe5`jXGLtBZ9-1a~uF79fRp7T>Uk zcWp9mjNrABZiw$JtTT&Vtt~2~Ee55ag0s2L*{sjdy)GokbBF!hYlVj~?&t+xLO1bN zuNGv>#kHpdSVDW2?vB7r8M3zZ_iSNU+5*Ag1VN7#P>(-46v;xFji7SWeCxV^e#=1_ z+xnUY5SQe0?A}9j3JL|gGfniS@eb7b)n*y2mrlAofPE3F!#3^>i%sKXq2TPj=l=RJ zkai>iv(PbJ%aE|mscD;oOuqvWqEXdWR%PNvPc**GJ91xZI);)1u_E!ch%slYs@yg=O|h(=FWj zr%WkU%>I%RR%9PjWC3ms-TjV@pN&OFnbk>U9}hX`1*l7*t92r6nNL@oMQA$3-%eI{ zOpNzPBM=rKz<7Wi5Uc^UF3z+CJuzB9_+YJzuzR>f!P5E;E1a1h1%WiYR6%=)aO7iv z`q-R~Wklip-V@DrpXA>SiD$zCx_;HPo^E{q5O`(thA`BX;bpW*Gx|ira<4V>m~CQB zLpy=UVWr3ZRP#av?&?DN6EB0{eCOpM-(>y#yC8t?;aFSaR%rG#b711#ichA3tC|l$ zpUVem&DZFTlhtnwxpu{lt^cs!jZ2+{?@9Mnp$?UwjhX4ng@UrJBc>DS7Zxm2UdASp z??+gerxDtG41$ZC2b=3gM@Fji+1JK57R?cwqrY6n-F3LEbM-YQ@Ny4FK>a3i_7S$_ z-PxgqjcGA4M<`PpkMgsYBmU{$y?cA*7hQ&KhJ`gyH7%ml**dhl=by>DMz>|if14cj zD~Ru|mGsQs32=}e`}-GQ3cw>kseDohP8e0OzKU7Gbf4>Avkkm73{Ck=WA2q5kjUlZ z$&V?1wJKrto|S@(Mb~O5xB7X_v6m5E@}ooCYAP5?M%@F#6w=bV!0e?>pB*CcfGP_b+QW!YS?WlZl}z8FGD=mfS`j{OG}I2 zY%#jFsKP6TSPja|Gq;z!C%Vf<#5SwjuUU_Ft^>LCvpUvjy#4qzV+iD7a;#EMTFChK zvvy9eTr}MsS6zz`v?})Dbe!hk@#DtyZf7Lq&q%=^os_t#VSNQu z>(lGx6K;SlV&mUiS(j~YW2G?erO9q9%63AKIWN}OpIF#)J-WS?Ykog~-~4_bYes}~ zE+dlpEF!K1jgb90z^jJOQHpl!w~E3A6L;dD zjr@F%)6VQ-@bq8vkI!eyrWp$;l7@)v&3@3AlRabTm} zOBqv>K5fem-I8yKT0AKoUD#@&QmIjk)5$X?Ld_Y$Ilub_VAEcZV=Z51I&GMyM2N;*zp zq~SxB#wciU+n$=M`q1ULS6cKj<2k0R-UI0PETcb6==wiA4<%0+G9Exw&^9+NsTKv! zD|zAX;@u+u%M0V`k-e7Wubqz2@vifn)!mMI>ho9E#ZJlIwt1M z&cXY&0jRpVx-g+L?>DUb$0w376-!Py+`(!*?o&>WL$^&#BrZSRbYKnW06+NWQz8xb zs;H_*-uL-e9B+T^dSZ4VD6!2X%5x&lQ?R9}sLmz1`VY5=-U;mnCFV@X4naJjvvnxq zKGZ|oDOJ9!%XF%e{}1P^d>9#F2fWc~3)WxorF;)bI9>SGQ^h}hTY~?%)%^abS=+IO zPGR|GA}(uDAUFtf#p{><)2uxeG!*V&7Z)6Ou1;2~`M519_!_?8Z;w`$vkH|`om1ko z*GOOBI{nKeez;4OIb#LQJZSrXTiV{g>G${n0=`6ljekdU7;aL?lKd)ka&@6PAGl#g z+Q4(NRR`yZsNHI6<8Z&`oGQ8>jTR zFh+Z!LRk9ONDkoN_FotbdK{<`6AfRtJXZka^ zZdBj-GX_KUZ2B3hAtmchBMoOeclxLO{X3UdrLx**`I~bxva(FvJO9`_{);cv)P(#` z_(F6is4%9>8~U86Zrk%+<-W|XB?|qF>SXn2TuuS3%9yKpv6C4CN}L{n-4kq6SulI9 z3+sV8v>x>_23gnqKrBEe1t*xeIGr9;k4)P2%c4YpfeVrL8!dL-PKS?=Y@jL@iync; zQ-53MSoA|s>hCApFvgTEf=Ex&&#Q)W<-1SDRMCsS%+x+piYp8)!WFZ}dlWB3iHDkC zn?u(M3k?DJ_P@hmkt;24Wxpo#dU12@>QK2Sb8u2)=yNOnPMlYvWnQs38;;#&nN^b& z?Nt&D=h8JY>P)cwxX?)DF;|(7V$4OOcJ#?4luVdfVu>m*Tir`1d<#1G|Jcg3iwa}i zOFxAcF?z5s_`C8R66@JSK0J%Q#MajuMfn2Xa$Qd_u@!ABZ|_oyu;k8o+jrdMUO_4q zwIk3ooU1c?rs=8aktwzN={>(4p;OIwoNNV!S{p3S`%YHRc(QNnV`5mt=0@R+L4u1Y znO{oK5l6^5bH3JTc`Z)Z|tBO2S+Y`bFsAL-rMCe{U9~_2Go*h z%Z@9)q}WHI0+ctl;}5Wz#Eoy36tp_*@Hc_bxwm_Az@``3+C(=?$3^y$!sB(Ws|*es zZ-F+=T)!*%D{^#>p#9}v^s)+y#C=UBhwkd_OY0-4E-_4L*Ejz*4NDj3xFmnYs3fro zIO`x0&b?F8qI^pr!HIl7H1)eC`~)t)!9S`!7RNgH4EppO1kJt>b(H%XK< z^%HAHYZ4=ix>vqDr7sp8EH=*+U2JQ;rltiuKp0aP64z>)LyImaTuv|k_B+(DfGElI zDqVYvCW3-HEX455R`J`US3P$BGW?K>r$#U=!^KbXwcvYC^@)8T1*Oz0Xb*MvJ68*O)?KadYy3kmb`b131s_z7Hb>stE z$(5y7yRg?7&kz;55m_~@MJoNs)nmG@rm)}mWHPR7-XR-@%Le&VnWM?lSC6ODOnF=5 zS7Ad+cPx~fems%V7~x1QyE>@yESxKR#pG~U=Lg*UWGCEYAZvH0rFFIcH*25JXDIX4 z$kq6i`e_O`IZ&(-Bhh!AD$or566ABZ2LyK+64+Y_&&wYv`Ha$F^FfNg5lqci8ZK6KZ+=3Bh zk{%&HmRf%K&&E1|(W z!-N9e8o2JSXqEBllZ1>cd@WP#jf@}UhZ`F3E~svk^L1BLvv7h zcJIrI$Q~~SwOqzfr2Q$=VV#$m^480RVPcj^B`vl9Q2oe!L%UI=k?{Imu&yp%0~E9Y zd4H`Z4i;Er^4fH_Z*KFw+CE|Nwo%v8s+FS5VL*E*j4ycR-mI(8eXjLLR%cXiXhdro zI;z5|EP13TuZW?Y9YiA=y(l!$>sYC^AN}n?b%J@xzmszU|MJW%zJQf$G@?gO%TDQ1edux)w z4AgxwH08#0^t1FE2A~Q1Go8=+5$hJQi$aIXvXVn*MsqAiwVK=GZqAQ6#(Q40Osw9K zw43BV6Kl?S+fj4MQ8=IsU%qPG?s?fnZ|Tk>!NATHMd4Qcw*s? z5Ow1!;oNSW=rFHYJ=f72|K98qIl5kD3{0)sPD5BZulVcvFP&8-(}rKoTeaI*h^rv4 zcNaDyd}Ydk{Cfo>;qmNc>;mKo)R~BVuD`&rG(0|?TegI!Mx+$b8GcocNb_SVwyjk0 zL!vf+T>3BP%AoOQy0sSrI$R)OUm!4Ga5mNTNCaYou8z+BFn+-By}J(`W!wD^5a<8L z`PD$pkLtqSy~e-hJoBBSMqTs7Q!3SXBrfaXjdB;z+%-EcZ=b&zF>&U0BFY?{op1j8 za{e_k38SZQ6Qx!&9{+ue)#N4Zi*r?ho)=jUeLNAkJlYjpFU&$4b}Mf=zoGWGkzAY* zo)&(YTi#NXl7;$Wi}_?qoWReWu6o)6=yOj-w~9vyWwvrA4H7y&7Cd8qD8g9a>od|- z%p*G7hYr&6(;CpR<3V>)tYsQ=JZkuU+0$f)Qd>)1dtU*@0HCRKS`Q~D6qSMn{Sv=Z;&GSL(QN3L0Bis0YoB#2FEIH@I? zcBrw*^@Mh!-@ zIj_4#&Fu6Q-7#Tn%?1jxf6`OLMq95tW*)zXB5;{u8=2oWV{e@(@KF9|_WA{TR;G*+fE~JEz*mzYr>Dy@Oi_j8=rZi1-VKQg> zT)H?k!`0+)zqoM5C(2I%{fyW?gd%-Os~a2hl2IPvM)7a>g-x8#LocFiE~bmpB5;p( zuURGd%5p_o6wbDNEoFVfYtJ?4^3$vjijN7GQh(05qG3JqHTm~*)baKv-+KV%qXg{Z z%yDcKt{!xR|H3~b-ux$l=HF$N{ZqzDB%s%W7UvOr0xP5A*Z>Iy;K#NHNxHmR?5VwN zD@~l^9V@NNv)o!4Gxu=3v`n(ayoG4G&VQSN1LnxR0o#iLUd-hoyE?(;6;>rP&yGdn zOj(#Bs=G74`pSQw=Yj}>*#V>#przp5R!1N7n)FkWXv$pcc3VtS-zw8&(>6oWK($KW zzOiPx12maTIjp_-y+Wo4qkSDNw`S#R{$SX>!E zb78gG1-3w(z(t=XS#S1AX>>_SqxTnIj%U4Xo`s7|!OpxYBwXUia}EP#yw0vb7*&+*Y}A^~+V1p^~-pI4i+>ixsy zihEQEOQhf7hQcrb7tU^fQV!yX$zztDFL<@3WZ`F-XS2{ZFMG7 zQ-s=lKL)3t)g0@n;gsILZ-=FGIs#eK@mOBIeivi|AZ_eKnB8@o0R_K{KAC(zygRmO zZQdOBb~9STsX1_(f6VJd_c!Osf^c7j+*`lt5C`^=u&n+w>nChm5@f!Nf5$5~K;J#F zLoINnn}Bvoz#h551rOp%ARlZv*;LJVpJCq_R-+)Hr0fO6!#`DVEY<+!JPQXlz!%xzRaUd<Uu;#I_WE=Rx#2Ve#g%reiK%oi9+kGoKi0 zS{EPpe~TX~2<$o3di;_M&t&vU^2(s)SqkbUCZIIsqWJ8M?HDn!T7~d-d7Io{jGdhd z1TDdn^rbNvXvOY=>TV^cQ;ILfjCtW!F3c(VA|u0Xio}{@trnUGMD-@a}WiMOnDak&i*X}SI6l0u1oU1NoY5!Bg} z+||qtOl9Ak_ABhs@#_HmolXj^0lX4kUf!B~c9vFv#i;`B4_YC9cP5{6AKN7D?%W*Y zr21a(n-HzqJNuhUGJ5OL?OT{$=ZingYE%$huu^2<^uMf!>)p4eBxj{qccpOUe_fDK z!tYsD)Flf`r=@T)bmtSA+t{$)e06<=bki7HCW{h*-mu1Z+KE8!KOo=)9MJFZNn9Dr zO*j=+J`;hc0dUG5Ak3VdmnY5{4ZWxuvSR6B8oyseiL5ba0jo_Tx$Y{HHXd}S%s|Ab zNgJM(k#V>88sw2D;2Tj;8l@+_S?aEf90gYmM<(r3u(mh_?TwIYpt^W+P5d!nJB&8P z&h9Qkd4bL_dPp4Pb1#G;F96wMC=%yJdgy91)6F7juy__1eafz8*MKHHBTSNc_LQ4n zl_liOGn9Y10aO%pkhSAdcD_{sbn8seAxbDf7@c8g^^TTVGwE4a>}XLDg>bma4yJ%$ z$WdcI$Rg@tfKWJy+b^H93&H}gvXjxDC%dvuO--%c&PoD#)1q^KdCrQ@q^q?QpzLUd z@L#ij`H4t;090z{KpP~oW<2_kGnK_Mz!#K?f7}YuVYLyWGXN*^&0075$}7PC4Eb;V z(xQpg!8jQ~3(ns5=q#&DtD&2WFtf3lt;|#b&+tJu+nJ|EP>!hoUqyern8VR`qMQxK>@2tYv@h2{p1=o0B~{+e0&SIRW0L;W+{HVddMg zv{4|w(mYV8o^+$emF<1b`c+_a61Nh2H=(dcc11!q6g*p3aB_4bzdDP>4PL3kv9YqU zvZUCqj=z^nc3xsRlu4xtsp=;O!+6e}U+dAB0jdt^`wB~v#gTWB5I#$#&f4CM2#p?I z4hGr~z+xD|Y*D|ke!u;W{_w<)Pc4QX=Cd_PO4E!n^kUEgXz&DhTSuF-M$M94Tul1d<9}nLUiXzFot(Kw^@Mz;&mxRR)dVXo!8WHU#*?k@v zwH&{x;gvpP{GF{U)M2&N%*CWUAuTvv6-MkIcnfRjmv&8(1(30We&P-eJxhJ8pME%yszxt{?t#!HiO8K*EP7xeI zor>bOuUamhztgCkqMxwaq06vu&()(}{IiH6G?j&XDZuv>T@t(H)0wl3naQoHqQ`JyTcg#B+Pm+i+h7YPW{p z)=whsFT&MRp2_b^o?5Ydo6+rRb=2ld%KcEJ_|6oQ)(1CpoB>IDotW%U|M~N|p>z3c zn&QEoaW4{2rs9XH{!;apl+GoxXSU{aQuMGPd2>Nb8T(<^s!U~SFX_la zNZgV~m=p_y&Cb3C5pkVB)O;RjyL^4!C2bQO&MxHcXHkKs()d0Io*dDMJ*!w{ai@0n zri!ARmQhjfU1U`fw~EPaqtn6dRw^%K+bBS{NuiJs8{P-6nL5YH_pb>oE+&}G*>;|R z7PZw9X=avAlY;i$8|k>qJ*~5MuWOw;A1`bf*Rk;R`W|jM63--k-n#5$ce5#%YQdqYx9AhXqbV_IhQ#>w2ZW)uy4fx@8^+8kO@@ z&aGQnTd1oGn&%FqtRI%e94Rm&c5&;3H?baKc$6S;Kp+Q0%X035l&>{(9pYkQVmcz1 zW+N;BZ)9TWbuPgU(C_w-zFCjp!Z}$$z(tjG1a0$B8sv={Yv5e^K(qHB=nemIS3reb zUUsImDXH&S{cGRQ_VqsWCsH&Ru3b!%U(uDSAs3DU<_eG^R`cz&m-|uwY)69k@8ZM+ zh*lHb=9KNZY{5pkPLRS$f%?<$Qt`j~NdxnfsQwYDYd9Z)dn3L+2UQNx$)DuJwH|SV zbU|x;3co^F7t+NOpl>t%eVrBIv+d%hnjm*CTrU(QspGZsdnBd#%-E@8OEuoMrhsoS zUUO;VW$gy1+`+sYg3pT+Re)B)%VgRY_~i2lvuWf@$x&GmcaDht82*{Nc#HWaul0 z1EQV$h6BN-;~5|2j+^CTx`bR+nGzvwa^5!FVTcHih%AcWoZ-<0uQ1SY`#Ia#bmk@m zTF^xcDj?T2j+#?zxu7AkokI?8K?=${#Kxt+a79-TxnH{B#kJ#0Xlf`RAD&iezDeWG z8#57$!#x7ULqOtvnDoA_hct+Z?Lr+TYiJ);P0UADfzl*#c4ddlJ!_=8thWj&?tL?( z?f8{~+o?Evu6iI~V3FT=3UIfpVgm*IHnX`LHFKsU9r1Q|aT0L#>Uh#=ixHq_21kAp zN#2O(z&~?ap90-tM11&};`X3k`^B3<*;+o$uHc6sa9;rZoKPCLLu__o6gBx&)w^kF zz6KN+mlfA3MYqu!6N=MU^u@xjZgoBqZ4EQ(ZAY3DwIq(ak`p}g>PYNV%>zNrS>KKJ zCmPwm+KJzs@qFDrbEkw$L2IX+cYVm~%9j7Pp8%*Hy%M)LKXrSDq-QS{k5cqmpGsD_ z(!cI)>p;t90QmYWXVr1w!fwlU z`r21~@rT=peMJHJVwd|^!qrdy3VQ%tBP&Kq;(GCaiO=s~UM;tx>2nKKPdvtYjv2^ok~U4g@9C)Gh?lJ)dZv zhZj}1oJPdi&o>9sv}+Coj$yJ+e$X*e%%K25!mj};toC@4Oi$pJ$=HP1ss%o=!&9^N+f%d%v_*v-@9FT$Lu@J(tp3i z`3_pbcqLz*6r{{J=uynE8k=Zed`ckh2o}JHO?)ec32Y& zpBQ%NaS5Xa{Z~YfW-|L9r5kTP+)`}dyyfv`T^#<4ih zwzQyNu@7QhX{1rzCdCz0Ek=eLSKLTB3GG#Us#( zW*4_m9NRf29+&kEab)lEF_}AmJgNto#;(+HOQQVvK}`PgTssABcq}BKfZC$iV@mZ{ z5%pFv*PBV%scY)Hng;87d|Bi78wQe5x8MB^H=r#C1eibV@8A6dIEMCsUZFO9GWL|+ z7`<&=_>X-PaF=!V)XvR)a(?pie@(W`rmkC!7h;?UT<&7X*S~?53`9W5ULF)+dJ6KP|7Na3`eNi0L}a($D~4E=NT*-nx~o((S+E z{Ur>wR+vA7C zd^N$Fu_&0w z@x4v?uSBc)U6>AVHrXH0AaSkmV`XKvw`8rFV*H-GPPzP_r4?L<&Z1RzcopeA`QcE2 zpY^S;Sgdyj{m}0xvQ5PS7C(!Sr5VgpnE-G30l)!g-|V;V{M({`7o%f4QFydDQXGXMyG}`0r<+2OkdMqo;MX`@m5}1^Ix=RlTr4eI0h(o|L6? z(2XqxYc%O4EAShdG2M)H>96les1=-EShxO~whML809w+{#$8ehnMr$PGjUx5PKkh_8aIf^W^_%3lpQ`X?WvBy31L0#LH$T6h?`=$Dd@{54^qITbzd z$B^wcW`Aw@h*;t4Ua8bFy>xc+D=H8u5p zZxE|Z1x{`82X6_~d3Ex%2lws24}4w*4I^0HgwHC^RdATjLT+0NO+x)7D5{+}c`|fy zCuBD$+k#@Mn3!0ArwU7*1IluFtm2?mI8YkXLB%kj!p}U@yjKBoZXaIQ4^#z*M!dmI zg@ouPLr$!;ePU@5r0ppi+la3q5P(JeUZL_FF(gpr{Y!SMWNt9%S6zGTO6D{QUgTQW zO*=y|Kb4(EBFa%39;kSa>+2<#= zmD+r}iO)z{L~RHg2jXy{eG@QiF$j?8i2f?_#p|y(*n`(p)YWk__~_Ua``1|7)}LLc z4;l=hMZDmX877&hJH^@nr>qiD$0jDmyQmG`oPSjHL2VYa{(t~1Uo=Wh#5?FP`_tLl z#bB}xomQ>L6z$bHntt}CWma~bdvYFM;tg#1RPfT~E&oR|z#uF(v&jNU{6 zvdMSvG+cKtG?1+_ldye;$oTjjm`R7ulr!Qa?l6ut4odDoa<+2L_RS> zcMYK$1ESPaLpoA%pbeh71+>B2oBQ+l*7UkyF*vY3`Tehb!XF?i;2l8EV>qz+xT(E- zJdV=oDkp@s{raO#2DHXf2wDY@a>{~ti=I{cdNV#+@?u|$+@2i=nof$s<6G*W9`Fj+ zo?VEFzQRm=`6v#K04h=-p=Bu(e@LH6^V1>oVX-pQ<{AGIA?}kVw_f4*(9~LP!z-R? zS=Pie_QH|gnXV>JS#9pQkzGZmT#!Rxe!)p%F%PlX!tc)bKQGeT2>A;Dk{`9{x!jF( z0sRR4JUA!I^U}8JupN*YkX3@JbR}>0UetmR(BIi1xDewZU-f`b7=ijX;>RVu$jWU( z1{m5Zc?_&%$x0&444^nUiA&0A0ylRzw{!MhzvZJSSV!W0x{zp}ctFe}JzAk`_q z1{EbeL}-Z?*)eL?PGkb!*TRz49g7BKx*w7{`Xg5uU64QS z32I?$!B&<6y8wZ)PA=r+f0VTr-_6!#PepF0=d#WAi+q)xXOOj%4I~sELOR!^j4=V= z^n;^>9*|B0B9o!~@?khzIS^H^iKf?tDSzv+5U7UkI;Zl{gZ2A@sss?}ZTz&Z3BCwj zljW7K*XY5YcNco}!3kE-Pp6DPl^UEnwI&L_2&Doc@J*xaSgg@kc$hrcsx$Ni^9-Jd zSF$3}+v0Ha-7(>x56m5pMr?CA5NJIj_0HEUUB;#Kt7UYSfw{&StY%a6 z-na-{=YfLE8v4smJxm`^O1ZnH<+^gb4j*0j>UB^7x1_ODUU* z_Fgz^mQD5zje9UNYzhdcZ^T##QZ$L_{@@a(tdn4AeKkDqp@^++l@C|M!GEEsnK596Xz2lrhN&W;+XY69$h^V9KlBOOPCin8gZxgo&m6?~_Hsdm+ zU74!IOMRXzCQsw6GnkoOF2jGfCGv1NBAm)QYn@~>gd^^!10m#(8E<9GjWTWOc=DYD zt=^$EsvBVT!Haoi7EhLTG+16U((!fATfVGL7wxyyt^0)dDwHnlWFWb~9@D90&6T~k zlUZN;EWELi0dp5KPqeoEVwGUlO&Q~&zGO4f?fSKT@EAM5fMSL_%I5G~q1c3* z`(T9Rs`C;!fo8v?mma&^k@Wv(&?~q7wWe|Q*PtbYBrjENY(xQmMkY!1UMKRjo+K_O zv!3A@F6eSag=TH#>cyS-u3=f&^N&Zrf>-ES!5(L$9zdN--m5)+20uJYk?Y5N2=MH+ zJ$jy$AkFEslHNSlW}cO~2j5H@#VLX|`qXp4Ln_!MW&{7ZRPmbc(EiCG#;ac)abI)M z&5LFHUzG6Igy<(|r>3nXo$?%Fzlrl%+)Fr{7{s2bg_D!=4K8#>@bnk$RfIZB*CWBna4fqVdkg54M+e(djmAfeod@eBYmtCy6J1cqRL@w zd@|9^{_S{{tb4L;gp|}7cwy>i*^&WGoz)2-c4jOM8ZqXAvLAHJ4ZIRZsj7yQL0Hvo z0MGznDk&*$z{<%l&@njDkzlKEA%@9qrfa}l`4S6oGS%-N3+51#Ct_#|3iKug%zT3~ z!F|QdVUajV@5VyF3j=jG{E+7jF-qZAbi-m_}IPthcfdM(Z9#c9{K;0kfdoo$! zrgddL=vr!cQ_iLSY}E-uNM=@)sdCJLv#>dJpOLN_dqbB--NiVvKQVm{SZ#017+)$z%rFMBgcLA_Q{F4Tz{mdd$C*1;wR zQgll69<+uedG!WYyvMPyL+p0&x*};Ao8{2u^BcYZn^;{M^tCJfD-u8zIyofFFDh!r ztQWcBIH?$>05m zrRG~L@|7d@KrZd}0x@qE-5I(f`JE91!z=gNjSFwLnH#D|!Ax3=aI75+u-{!iUh2%J zN$)RMa7xW`{E-xb{i)@kA&{;iIDHHX;g-Dye;0GBowXUM-fy?O%jv-{Dd}~aO{fvoEXaXV?%}oO0 z2lX9FkOz#D{?f<}H!i12!zn)Wa@pq}1DTFW_aGGd3Sv{3mh3>}K~?xRQvo+-x-Bn| zdzXsxRIvTNTV9kQ2ig1GSt%Y7?k_$c_wvgkDZhj_`Wv!*dG2{vVxEI*%GWC>c4RpU zwI1jekoy)C_DP@Kvly1m&Gst*y^(JU_<~+St-F0?nbE3_q=aOP(UO%8SI!AAk%`v! zNOZAu1y|Kv_Y0ChGd-6bRQQHE%z{fQwB459NWvRBcLQu@>A%7M5ueX4ca#}}JI3{2JX40fU z^>5yk8zjd~U{-d7YAvMN+DI7yScP0c{l-sumSkHRaN;As#{c~#DinZKaJF!wk@Zt% z2oK2;G`@o3sEfNP(F$1t9L7T;f!cif z$3ZxDDD01?6s7rE*uzE9mam;yK>I-y{p-;l*sy_d!+I$86x(cRR}qg^Q&kdmI!*i| zHR$IjzgeM}v|iOLzPUM|{3((aT_Z`~!1Dcja1Qa>{YyL0GtX=4C2Z2TxJPbjHCE*{ zhXSW|Eeh>T#~FFnH}rGVw42#J(`{yQO2bpre~OK!8ZInmIeX$GQ;p7xft4qrP1PM< z>C!K-XE&a{e*<<0zRybVy);94M-={4`TSOWsy6}=ewHQvFWrMu(wVeX34D18>MfW&=@8Hgu02hE|2nD;N7rv+`$T7M zJL^x?J}UfrDMLxPS`($Zyd_uAZTy{b!l&GM`2^IA_zAvCrPnxj;dcZ|F1RS3J8?;F zhWCwC*~In`bJpxngrqCzeIpVBTEU3{%}+hjjaG9DkUd^v{ zIfxqVyBR~$7(>XV(V>@ElFp_!Dv|ncD+LpRitvM=bDzSqUgukw?kRD z8NOm0KlOnG{pxQcb)UwnPdp37DoPHc!f!KB$yOgVyY@LLJjG~c$nJn+Ue$-sEjkT$ zegzd$1B99C=7t*`++?4WSS2Ci67K#qXXlnISGS^kGr86&`TBPZwO2uGvdRqpcaKXFhZ=g5zWhTxhDpnr*l*%vhW<1YR^kLcgpeW=dVVz z0@oQ%PHDVoGw+WZkRm5mF}Lra26rSY70=ugdrpPAnk#*$@LsF)S1j3nggvH&K7}_dc+L12wGSWi`)7@tF@)^*qjlore$#uZ zF+{Zyrq~CJ9{J---=ul?n9KE9-lHpZ6F+;f(XLn@YXC|U| zR?<{Xf$nhkgIQS?HKv*24f z46)`Bh$bZQdL7Xo?kwg*_?{SXOWyNg&aT&)CukQ6Cxr%&I%nl2p9p!M>h-5)!JI*! z2>;n3xp#Rl3DmZ{4vIT9vCZPnS*sUDv7>whIytvq3}3y;PZ)P$!iTgyGRYE`QG;8oEU%~ge0#Aa&Go#T(@7^8Rayu8klWw%xa#HJCB68N zKYL;HkzT+pMhih>+Ju`DVb>!tAtSZ zuMV(||9QBNCE)mz>m9OACyg}Qx5)AvCLf@R?Zl|*p7DLR8XNsE>yVq5Ezgb8&RM!Z z&+&%zXp-uxuhaL|xTH4?^QmD~knSQU2_hbxA zOY4mitu1|kQsZ3AO%OHKwya@MN=av_OYc<4bR@tQ zSlz>6#Jku_{jvo!{>PN};#onfeGyU;?af-C#X5sF+c?=aSMFXvb2l|#Tssk|F9@%n z3%}i>!fzEsZiaQ!s62kAQQtRq)#w&LX-2~r1jvQQO=;qWWlwqX9Zo3m^78)rzis_E z7_F(w9113~Cj~Uor^e@X1a6nFCN$?0$4{jMdbqFJshx2veIbl2{JnSWDluH3KfPZ- zv$tLABWI&KFYDyE=Rm(7hLKF=+LZPH+wAhzc4qbAn|C+vq4r*&7Tve1g#cP$;?%5A zi}eb#kF|ejUtRqBw@aeS{(;y9-`cRZ;fmc{J2S41*v))I$!)E8Mjf0z(Z?{(m=NDL zD*fGh52Orf)QEj>_JyQm~}}?;z?0OBkJFefy$iq zPBUUD8c7$pMCCD8pz63dFpwzj4@9Et*#=?mrZRc#1;mxctm=tBEqf6+9|fII8*CowY2tTHkX`y>oj%>qS&>txQ_|)h3q|Mg=C&<>R1Ca)`jahQG^xw+A7SDnkEDDxS)s;3nDQ= zXix(3>KYnnEm$k>A9MFbPPX)?vl>!03B~50o3olfy>Rt$ zqkeHS;t<5~V4!MiJKH61xRit%-Etb7$L34}m$-ePhd@Iv{!a-n=z?(Bfn|~U&Sg~z zt?bJoY*7Ix>ZOQA6I(g2H4m~n3(xs@%n1@%mjoN33a8MAKPSS!_&tPf4l!FrqTQVj zK+3Xz+Gn%u{v2HHv&XfM1DR||`pIRA^cj8x2~lN@p{R*;{~wEU`Au@qT)Eg@$|DYn z3h8(o>#>@Kj@~<(WBp$Wm{@Yo8MZ6Gj=gWc_d2{v$Qo2sRLW_0xtmt7EddSQ#wR=u zshDIOxGF(jLy*i3cFP&9_No<$)gRC&M|!kxon~Io4irAhY8DrdiSJ!R9^XOckaHGX z&!16ZT}WAe3@p&PD}9hVQMNmFdvFjj&yno+ z;~#`x9=G0>Gw@c9zDP?}n4p|PJRsVl{9&($MxdYq7@c0|E=6&>GQ4{V>2OlK5x+qcwdKHibDKLLjgW9hZXyRn|)y~n*wmR3TO zMl&JFTXDGgWJGz&EzmD(;4M$aHrhILtM+qb;$2(#+t&wcP_q2M_`HnM>N~Di6G5yz zAD9alPs`q{RHVR71xfHPM^=Cm)O32JKzER{ry?>9)L}fv#AFBzD)Qf#iPq* zA*x{f7%68FvgBxo*nZA!qJ2skG;~6Fl)UmM)sS$yrDq4%)?1YO1fNWBgkO8XWZ485 zv#;f7Ttd`fjJ}qQ0oH%}KXwUJo(6r*VOu==EGNrNzkWIGm&_0_nRDln2Ud|QSa_OS zV#Ovl{LFMsA0%?*Loq51=sD}< z0MeeXt;W9K#H0|5ln_oNdP18dR~xI9!tb|jwu#Cz>j6b>Jr!L({yeLOIRc-S`62R# zgCDcd9$bv z(x-vZiMC3<^LefLw^d7z=ec}RQZEVy9nBYJ=Xk}~SHc$}$ftX(jJsQf*lvPgzm#~W zTs4$S)ltsz!{%JJiZeoZZmy(1m!~m=Uh2T<9U@?gontrZG}m;qjOq0NISx}MRphM> zv)luN$SRW7!GmvcGnaRGV87kcvad!EO@IZhss12)F-lS1#2%+M?`cd3A6D2He2wMM zD`{CECG?DP2-Z(r37u%hti`1oc4R4Z8M zdfF#Oai@G4;J)>&ee>}&oC!RX__5AgHc4GcE3t-H;zRm3w9y)C2TXn zv_aojRE5Kzf($}Ig)(I%ucOX{2tu(DFk2QtaBl)19sbp5&yihZIEC^P;;1uNR2){w zWnluoWzO5eMc>G%_|)dhl&aI(tO8DLS`!8^AD;Y$u1H_8Y{Sw6ZsL1ilcR0pwKu-E z+lDzChrq^Q-YLoKXaLV5RDAPha-ya|o`JOZ&*$-Jc$>cOK{4TO8ogBkT$*!ZZKeIs z@BU6+2|s5$mJ<(Mtdjf&7y&vCELiSEg*kNjtLi97f7jpik^G|4C=(S~E*QMcDrx1D zC#?l2)RJL7^t_Nv2iJG^RZ>yWmFd%WxBfB;ImcT)Z99(xa&?xx4j&wksL)+1I5s6m z>XA#Q0OnJJw~y?nEKWF`A;^%v3(dLemeU*oL#;@9yp@@O{1ib_vvt$gJ(R%%*l$32 zZm>07APef*VK4d@|0e=r47Ctu37mamn^*-Wdjj)kdZ?{Y@g?HP)rkd*+3vKdWHw!N zisj8Kt~u!}3xBp!9SQg=DBx|GXu^NN0(RR|@To`G%|Dd>^_;$(Y&7~(Djh$w_>umT zK5kdHIqde@(2@;pc_<4WF-(h0_f@;5Rn7gz4Zifd*~Z&d83IHM z^bArx8Bf#fb4>VZo-uumLbR7+Yr$r_*gDN8S0S-2_*&(k+qXz(F*>nxunJK6<;gD@ z=4~bcUQxb9?JtBfZwxHuC*{s4c6W-*L1L7UpnG%MgM#Bu_Z+3PPQEIiFkh0JSRLk? z2&iQ?GcF~*X#RL0|CsYqr)#nfj{{SYQ|uq6{b^s@JeCfTUy~we;O&?XD=``%j#}qJ zF{o{i(xB$CxQK8_zKyY>neK-aPPPtjnZE1(C#_EdhPJ76)SItK8GmhSJCT4I?oEE7 z;C^W|I$ri&NFh$6@lG{!bLk3|iM>fuEZ$*?Q|^7Tic-et{@@RGSn9m6`Ysh_vi|+2a>egUU zMF;%k98iu_eWzDH9L8(~7O?o4mMP|2DeO-P=daSpeI$B0US5&oV*6e;p%m{-t+_iX zJX6G_Af0QrfaqSU->2icKQA98XnTyOYG!{brDzQq_F}N-aMX!MJ-9Xujpq&5SM$4v z3TeXg^s2>Q^xiuWlA`u>mTt(DH9l#9QS3%STju2^2N?Q6*TD(b)MPq2qTDrF5A^YC zG2!&{c!gs;dzx@x+hiykcqK+#C?N7%cj!r1Q?~7J$LdN)NYd$xGY3awS>EMohIvf0KB28+nWzmA zXj1kj@OJX)%~wxknD##?U`=zA)|?BExiTl8WN^+vYN6=ke0)FqEPVnsI&rI}ultp} zm)J`o15wHYQSrq#is#J9(CmRY8%32GDO5C9)Mlj@X*W3^(e~T10 zHtHPcB5E0C=WF$rcYPd#J7_vL&bovBK9<98FfiZGimeKBwh9wliBb1%z@&o9uK#6| zh;MJdezYLn(dd0?KgI4s8vOAwR9#I}BN;4eTwma7G5Zuxt^0GtF5qYKI<)ep23cCd zrIo6MOHA=YRS()fHji4O9IKR;4&v+y<#H^}S@|0D86qj{Pih+Bdb)Mf3dO|*+WFB3 z@*&gpL1zZ>J%--ygR%nN4FVCFPjuvKFz0OEGhZ`u{GefwrPGnmX?_fUj+b}(>v3O~ zZpMz+&-K8#i0r>AHJp`!Ch`<4St1!iMN=ndmoWR)!%Q+lcQr<$zD~)bw$ZnJUkLFR z^zO%<531d|=F1bcyK5TEc6nTlhT3q0i>!lmON*@Bd2H(*5w#a>6j$b)sy)4I4nC?s zM?2Wt*YPdL`l=iDky!X=R#zX*hyaH5K@1%cDrv2|`Ctfj?;}2{Seng!q<2>Owsg+y z=#Mm9pj4sKrI^UivN-INf;1E;D2_QytXa5MWkJ9&lH^+SYQ(hjoOrylPT zW*>;~IQX9H!z%XbM>B%kAChw%ixe%|ANbFiVaoU()93&=T$cz*u4T&#X?hB}`HRQ) z7`>5L^=-p+E)|O6dq>67n=scX72&wHoa0^g_h3iDq(Xsnm`lkL%k-;^?>byWK8Km~;9O;T^2RR& zU7NJzPT+e|O^xA!+V~wO!yB|OPA75eJuQApTV?$w0Q~lWLet zwG_SfAuGYEw6iA0dI?b$+vO_lWwO(%FrC`dV~dP5qVn#38d~Gg6S!$|T)O%0Sl6t~ z`6Ibe@1|KyPcp1N;j`jYH+|^LmMe8DE+0^g=4o--T7lpRjm|oKotQWZD)!%Z&H7)E z9R7p7yQ=zZs;8!=T3cIZDT$ai9{>pu+o}^Z_$>BsIs#<)7sJ?W!Fgk2%O0E60nRU+ ztJ9XfP>+6<7#!&9Gd9d5tjfTAm`N8(>lTcg5TEE5Iam!H9p;0Hxumhibb%9f(x zkeckIwSU!T}+Gk_)|-;Q?= zoit^!2@)x<@bv*#{bEqbQd|@U$pC}O$R{)UGNeE^OlxEmS*jU482Pj;Jg0MqV2H(N zmW|tW2SY=ooeyFV0=N`#LP(!FWEwqN#)8^-hsAk0`~&O+MD_`rxW+kuw)G1R?1Zj(y z9M{lJ_Ziz4n$8KQ2j5f_`(&6`qSRxiSVE;8$+N|F|^ zt|}|ggiep!pv*GDr4~U4{lkWIaH>_N^>%L=`+F9vkd_M@*KJs+CW2{T)|Mk|2>AdVo(7ca z)jaNH7sV)z5!?mZCJce=VHoKH-hgL3TN&!aee~A!-+{2RG*crNBD|^kZwV*g?7(yX z$!_{_lLiTV?M%0nHLrAiZ|({FKG&1^xa{#%sSdZ%JF)R|^jD_8aVFhvO6f&7I$~t8 zC+HTXj4cgX7~5v|L|^S#=+=Islw3U{;|t&C^=cmc@@Bq8u*nL=21x209W1NYDeAat z_EBzdc|_#A-QrN1qp89vPg)kYt|usDH*(#?g$yno>7qP69oe=h*Z!*3y5}|-flj#6 z`BEzS3yZspkw*b`OB#r~!QcZ52wA7q$P}T@fRgT!MzolaRa0)#$#=1_v5?W-SKh2~ znZkCM4tFKBD1|D1n@8}cu7ZBcl)Btx1A@q@bxl&CSUS8BxFAo)*h6B;t{WmJ4 ztpN~`TvTIj0tnbf8ctlMX_IMPUdZU~-!5?;$68Z@LoFKqb^&RoFeZcnH?Yk{c^rg8WyhYK(Mm1XyYS zZwu1SKBsm;VPb-4pxeZ7$=4~7@<)DdN>UGwH=whv5b(?6;s>x2Ap-)tk>)^eWCvJV zAR`I5GX@Y@+<0S0u47$mMJjUK6mJS!njc34!G_EfLlEcY9xTV*N5Y(dm;r9qCnkRi zN-e%<(!%m`ZWirpayb~xMJ{zhB;EG}6?WQwQ!OQv2hi*~oQE(ONomS*1$FT; zyw*@!4q#j$d`-w`FUiQt0v$uVM$Wv08oS69PuSI z5>fz6RJm)2aSb_u-}BI|rdgn*^8>6`p%ca`RE;J>P-Jxx(uM|Le_NNSZxl901%3W$ zw56HDWDz~|qck7eq)0xwjA5oj>ueX}0odjdFH$jnCz!vB_e?*nEX@P@p@3z-c%G8Z z-xeO!GFCJ5h8_py5A=g<{64a?QNSGFXWTgls5)|q^GI@REW0(!bI>#ZrDN?+es>lo zI=M8{UkR^!rvR}xvLqe1@N(}%ia`f3HxA1JMmrHGbL0>OXnBnl$~>KsPx>ywznr#YW!F)JQ( zj7##HEw^z1kI3FZh%kEnRlhSKj4#aLx#=aDnk zREX6L+=+DUVpOr-?}iU;9ZMMturq=&5lZbf!#h_dv64Z(_0$}xpF2`kXPT9;Ty^!z zjPcB(y#;z7%8F@-rV?|xlh+sm<6^!f2BZN*-u&(9PT}Q8+WdekJHj3TYfFD@linIA zL{1uVkfb4Wcv@O}Wid*Fsy6Y)V6sq2cJ6+mN8Jq`S#b>lG<$aJ&dK-~W9gUunKtQ& zN38>ovU8V@6oHwOaU=^pxm4pqAd+r(EvDNQE1))3*BVY%AJSVf(k(BX3Jk3ICC_6! zbIfeq)$S=)Joey!Uvyb<;9+rjaJ_JBzLsp7axNWKC6jf`v32WGjR~qLsIjQ~9S$}& z7RR1FVr4W49S(qGKpt0hJBXHFB8JJ%T61AbnQ;}UZQa_s(;18-HkJLPx zj=TT$!)CUlr*cnH2MC`J-zS{xJSO{*6a{sv8-Z{AabnqOjJ^2tohnqd zyqCD*A7LFd23eDmN3bdUhW=jRdelJGmCrPuIoD$C>`6C=%GT&2snsYZ+Zwgn?hR}| zLgu5_UetCI!_42aPy8yTu6N~uDyz{pQ9|EUk>B(abRq3KTPl4ZPvqrslK{J6PcSL) z4wN!7v~aa>90?Q1mHJ3J7k{7tO&p%0A2M!CHa}#KkFp%3sV2W^xTj(BGu>A_Y>kSB zj=ps+HbzXShqt7eRnl9D?y#@%FW)8@5Hhp|%GeML5P=SNw4OM$Q2 z)%7N83&l04_M+f8>j|pvY#cyxu`|6uqvC6<~~O*QmLpSj#?xE+x3AY5 z$O#>Q_7t>>ob(_hXfhiO5?Klfnp}dQJX0tEtTCUFOz`K0S8WiEnWnD$kFv^G56Pfs zK*~M~$M$8E?eiblV1%$5C*zzE)jH~gcO6RcQ^QkiOtpKEAJXG*?%rSavDN~BCUkiUsYnxnM4p% zuRU|}tX@}|Q1a`a!$H=-uQ&KFUkF0LT`#GqHU%cS+kEpXsBYo9LG4D8>Rtx#<$vdMXo|HB~8*In^jq;@e(pFGAo7f3iJfwUNU2hv@ z+d)}%r1j6QC;>E|#ZmA-A+vU~2BJ&|8qE0RnB(1ZH(m{r7VE>Lm*l+T{^SEj!{#+= zZ#%-Ki0(XtJ>F}t^+*-TZDrh9h*#47va%6qR$H!Q&AS7M1x_%4c_2yhyA9^DOni-CZ zoHt@I6)>jce_8AK-(EU2rLI0#$hU7lWru-k=)F!UN$%{?chD1y+T5Z0X3a?~#yffTRhAc}vkWO)rR1U}WOJqcbzhRlp7|ctv7s%}7YN!Z~lUW*e(44Dq zXj=Lsbc+(Fs&ANL8GWwQh)IY*&hBf8vbqA}-0QRgH`J(zn|RwT>vjkGnU*|=s77#zg1*kXIga|>o^zk& zl3#n~HYA7&gzAQzL*_GUfa^>PHjhR>Ljvw96S~c>V<${SYZz{pz>~H(xE%;RQ zQD$@0QD4`yKKpxXBL?b9F}Li>LPp3^Nam;6Ztuhc<0+7b8sLBP8fR7Fa1uTfE;l8C zRtO(_(nPi5yyO094K0Qpb|-2v+1^NyboINAS=aK=ygvA`g8pEgd-4gZp{CZj+WwYA zifYV{jh0EpPU&Ak`OMD{?Pg5ehy#;hV-{a_GKh9si;#$uOMm2M>uSuZ&a?1o#+_ob zfqeT(;boKWi=mt}s$h6Cwwap3KtsA7CnoBgqP6b|&lSX5T3mU%GtozoLF}{l`cnIZ zRWvVmB@%P+3)gVFW7JXV;oKa}p<^uCIy(I0oa@}0COf}*RC{s8YBrsFS6SV;LDm)d zg}~qU8IT6QE=0$%1Pkn6r{Tj#6%$k{Xq0!@&&pOVPYBTUR$=^e!M|*svC#*NjY-cI z4u3CO70fqy$~p|p{S_T=Y$@~NP8CLqpmEK!1q3<8NJm5fpgM%K59QeS^J1<(qHJ+K zLKp?l7GHChJNY8nN%ptDkjhr_q-07XFU>7x6e}N{rS)#lwk^$dyiiJc76?fnGzI{S zH4S|3z4vBeanFkI8@KuP4`59eJyrR+*Yy4K^WG1Caxs)elEUyx9m%N;2g+P8{NJ$a zAqD(*Is8yzovHGc`>w0LMd#l+&M(FI6vG)46dv8)Km9nG_Jc zu7A2ig|iA~9TCKXL&Q2+u-fK?S33v{jaq(})RXsk>t>f@(ArM;$_iEmsGI ziQE`_$me)crFm9BcYgeaIVFo;8Tm{DG!(~i)KEx$-!mQJ>p1Yn9lqPlcS=+Rr5>1Z zDaLZS`Lz8k@$Jz|g*WC^7WQEk0~b2?e}2v|{>VhGRUx)s-|&IxJj%@-dN*{0%ZhZ= zmtP%Z)!r`K@~0yTVVLd%xbwCIkqvezzI#g9DL3nj_2fngVy#`n& zfpJd)yzD=g>Kk(1T?5))(d9TiwDA+tKrb59oWJF_+c@r++saG6NY#wgufyIR zZ0&Q|>9}QAl}ky{f%W;jm+UBQ*^Kk-dudlKr;0T{RpG>G&-6~lwRK>ea)(Xb=+q8X zjkqYfpd4E!D`o~tUgP2u9OGb-Y@LfllP|x8}~k$ zn+_Q(sD;(p0}j$AzUgU(E6{pqr|yfqm5F?{B>G$*y*%Z|1Z#~R^G_?eWF$lAf1Y>( z*&=**Vc8FdvDtf$f1-a-eHo7O9O<1a4!-@qoMW@aN;7VDs`2YPbi|xu{fXML9~iFN zP^ASojx7XXLPIT9WYHg0rxq96GPgrkO*rPEj-06#C!{?{#vvaVE?4dP1J9Wv7ob-4 zWB(KNi*gBqd*%LA8&>sIiT^(3cZG+x_i=D^8!;jZtJodwr{1L5p~;-nPm|>L0ZkKE zH112vh8UZ{E?)EP0zQiNbK$)vAr8sim2;gUgAoH~v_*fknIYA2HFQM2#7AQN76QGO z`Wtn|t4Mucqhh9Uez-y*BiCA)bi7b{z(2wJ#P04Ua20oW6pcC zLfqHJpN;cNbUdTYw{1M?7S+kZ7fnLx!-i5HjH<=k@x@ZN(qn~8b!Vhz`Sk2kif@-W zWm;jR5m`Z=h{Jt?UqwqZu6~=q${9A(rQh=O27+ws%N=tAGjz{P)>)IyjfY-`+V90Z zV7EhE@vRCY-fPb3H9jxrw;;dro1B>=PPR@>m`>-o9S@Crj-A+o^rhj9G{aR#4FlR) zDGBkn4|PwuR5*nxx>p5HbW44hT~Mu+2Ai(+qN&%apn1=OZ&AytYixE(y8xR9P!Csp zDD?&hINRT4!>@-~+752g;-K9P5kxS60e{J9|95hpSi|;T%Dglo)9!KUNhIN?Bhj55 z1xzZ>I_~t4+f5@mzhWtb(myO7JQN6=*fH0!3$wg*l$d2uy&Zw1fJ^@x#~*IYw1SQ} zX`=Sy$yWJGv_)w88_1i2L~9=b_oiQah^Z5wcIJMHJgs|gG#%+UA!ab9)}izx*WMha zyonOJLSFs*Z@F``ikBof;~bavPXDCBH%?=OQ1@l1u^%7aKc+U6#Kb`}oP77%$%s)0 zxw&x%V7y3V+(_n+aZFn1!ObpAg)=y@aT!(U9XPsv14VgbMnxb(Vc3UMV_z64=pBp6 zSG1Y^k?(eoxW!wOaD}-}j-aD}en0N`bkzHDfrq!wc3a9!18;P?Y1Pb4k{%KZOXjp( zzk4~UJ5=rI+%Iw4WZ)4qj_oIj{c)Sgk*RkX7WFI5pPnQcUJmy(pnL~NKl7%4ydvWu zf~pLOU>{3W?)`64%-4~nN{pG}o=(>u)Ym;wbRFDl7VumnSdDWqq>wIN**FF_GTJE2 z(A+5VOHKa7Wc75<$iz5k`emM9O0$> zCEyw(o)BcTY9kh4x(t$)f0*LG5e9-rE0MUx!UM}E^34FO2r1Oj*autft0CnA0!VX? zC=fc0GcsJ}zY`w>shbiOjIH=2Ho}{sBUwmGg=@ad&$wf7XIXv%2p_=#Me`AOYJQrj8WfP|xD_w1|Y!+od?96&W>rA=?&Vm~-#!NrXWSdeB@oh}!WrdS>?@NZP zwQ73v3p6x&Jx&NWYXjEm)>xUcB5@1jm-+9`O<=`h!iwiFr#591* z=S~-=hhb`OHgKcMD91=nR6Z{E>WI9Haq0~XfPG5l zVXL?G@zg4zJ6V6ho2=Tr$%X;{0#=4F3;stS+dw2^I6!>H4b+P~v`1ua|9tbl!#}1#~P~=T9TCJfg-Ap-NlRG581#PCw!Sfkd4C2UlePUl0JK zfSF~Og#k&*{sw=EtKs!5SFVj{5ZlY!hHhzpB~phb7O|Lz2BW!DfH$WS#kVE}D&+rt~M zp-?=BlFcY%n;_`SeYLYq+ErgeH<~*DCqv~)pkK^&rEP5GM>-Z~Yijcrpv=}%p- z6kz8p*MzXWwHj}vzYZgasRqrN>yr9nqnl06$SLC@v5Ju&ReO`b$8s&(2O|Jk+smzv z%N|nEc73z+N%OgFbp^X$Kf>Mp4df3>O6Bx zVY{2zW==fMCU$QAaFlYlX0B!&i2eg=zlo$GKOx!g)Xbu8U)1v62(v$C6t$xb+P|D5 z^kCWgDo2A|E@$EFY0oGR|N39q5Z7+ZvU z5_Mf^Q8fH>Kdy4e+H0x92(HYVmkF^iFGfu`1U4GkFc0Q%JUbBRasR1#1hzV)OdmBl z-d1^Rr$<6{U9KDFs(ocfvqqyRxrJz*Hk)!#NaLxF*%e{jpVeQpJzZ>vjgF822u?lJ}v!B<=J`Ej;)X!LORPLk9 zZ0O?K+Z|%PM9e1AZ#^yBr|HZ+s}nylys1)XZD?Q&RW}#}HSwXxrYv_sbA?#y46&?q z(Poq}Qm3s+bD&(e=+gOgddsJZf}$_k(`PtLR%aK~R{scZlQ3DsBx*5;6*_nXEbJN)pRe7~Az(b#-#XD4WzzKM(WAP$YttUTv9IkPwy6EzKjQb#jyAjf*ka8B z##?KOeh!zL*!K%jKVFZ*fJD3X@&*zBtY$DZLc9~89DND(+n)Eh{Fj7+)ujRf zO{#2aaw!(Mz*3C7Zpn*Ibcnkxx;n`n5`LgKyIs`%1fH{}igL%NKAcD%%@B^y)NQs1E zlLKVaT@v9k@0mppLW4*{Xfw8^rr$5b{tq54tN6(DL3a zUn38fi0B-1hd)QKfrZk0b>2S$f=+ix#PE`EGY5ucSI@Swa8{IPVL&E(by z{r%5&A6cq_E~-=IySCvCk`8d7R=0u+F=i!x?OUOZ!M>7yoK4d?ojp4fQ|dV0&;547 zg7D3+B+{cUe%KV~p^-YM!Ohe3L$TqOen|L6_P&Z$${Z`sWL|&Ewd|BcW$g}QD4opK zhl7ZkAws0MhS|b|_*XAXA zkoDsPlo+VPZ1>>o zDG+|Zlb+T3^}V z3_4Jbl4A_eae-;v)Bx*EzbP@E0$w*;C*bN`P@-&}z>uO~%=&YC0!s$}3%Cpvljdd( zcgG&6Q8jtCxRi|rA@!WHK$mHxw&U@LP&FJUxq?wc(NA}GK)exr_HR_5A3uI1&2!8p zLw`gmR4f~X)~C5MFNkSJ#tRMW#IsDTWo>_fjmv7~&n;^%<`1M(JVPEK3NY6JWmi5v zr!olf>-};ophyPnpYMND6pAiGuc`fW2UN4o}Z}t}^1G5QCD%T4q z_X;a!_Dn9&_)D3UkLgEtG~>EyQL#<$aPc))iJui`2QH>+%$OfF`a+t7li?TjXZXC^ zUO}OB-qi}8H_}slj5eUS>_bO|#F8c>kJ(l8T3{!hzFZG23?0M<15rDG(4cF&lf)H* zo~32oKatJ&^GuJ;SCG6st7~0Avu)8uaUivE4io9IcSpFm$?f>uinXw7W7yykX|p&q zQ~p43l?^B4I;2{YOLvv9x4M9zeJW=Y15e%~#n{f&cEJ!h?hYI{yHI!`c_U1u6z&#D zD;THc)-y`9k&QK1bgni{MwQ08UE}VL2_#Z^EIh~rp)e&l9f{h!48g!bHx>aPzO7aF z$j7nx%_(;&%rZiLgOeGcduTu8xAr^GDT@QA1V&6ZfF0UemY+WfAud>)uGb*I9cyT4 zs3;cel*SW{-k;9<(ok5P!byM26UdpauGp})9w$GB(N z$}&e_UC0|FH@C1$AH^ww1Qdc53v-?9u&!Uqbu`b-|JJl|)c&6t0R7_<1%&!g+69hw z$OJtkhijn*ct8SG7om~h`Xvt)S3$WNd3jXjG?bkT{E6T~a$)t|>U(am46=^yG$EL{ z{b*g^NP!tg2@5F50OA&jgas7dgfX~9B4Gig_z%WMl(68Z%_I^}tY7$7VZr(*|AnxC z!u|kP$iEK@C^}WHe=jUp8~+L<=r#NSxFwS_Lt%-Vk$fwovRf^Fz*q&=W2&_>tK3g|ZRw6~MHpesF6 z(e*>VPIyq$*B#H$Yt({vjbA3aK4VdEnD>pX!GbzR&*t2G!&R3V^$s+S zT3{pm>%n)<&Uolc!RTBEZXX!5MoQj6t^7r~o`c5cwsT|)x{zro>cLLy;bHNZ`;tKS z+8)>wVCM-f)@n1OCe=xAL9`YpDK|KZmKWIVWNSF9&f1V|4GPN~7u)8aAqCUHWtk1D z2ea~ucIG7@(#+jU--#kFMmfa~v{DDNpEphe7gHWT6Z-^WmFi6V?d;_;C26yh=-}o(;UyT zYUeUi{SpijHwX4FOH9T@U|Uer+Ovup;)+qEO@n6)b)qzCC=D(0^F1G;dvqL zcCR&`I|w1Wy1FK<9T!$G^?YY@?!|k)m*kYTLk~XkZfO3FbZ=mDTHX#Ujq#e+WbHcJ zX*ii7RiC7?N?rqK;81F3v1c46Nn7AUKM&hz3qa5i5(=$52^%(rjhJshME4CHol}xx z3LS`v%(h)~tU##e`5TxNm=)>=CXR_Tju!amh~s>9L!yjUV<+Xz-AvjQHjuJ*45=;y zoJKzab6*g&Cx;4bX2qxNHbcKGGWrEP3FWxDsev9eQ)j$lIf8GDqOY(X1v7mFY0Da5 zH8eAmWipoo%Z|^AI(@LT%W0ljX3@YAiO>PS)p{`?AYi*B61L>t$(;gsm!ek%E3-Z6 z0^BPN9=(F(R|gx!qiTfz08D{g>kYm{8qNh22O%LLjLadYikCkrtO$&_S#xBI#PGrz z0f9z$czP!o3?RRBi%ux^`nqEwSMbu^|D40b0PDZ)V*#}z*eKZkj7EI#!})*05w_PS ztY?{=Z;tGQNVwr`Qh5G(m#O8G5P~Q=ew}3*rvzExR;}XEfkg85poP}dCu^aRec~4k z`rlzn{Pz@#Z$>~YOGrXb7$JUzG7=j_1^9`SS4|PKvsvHL?45}NUDf6mi0s3Njk*a$M}}vJE{d79;L;jgYUwltg6%-NFG+9d>v`Jo z8dLSV%o|j6v>H2kUT)M-*b^GKUEb$IyE~b25x2;)!6ccIm4D7JO;he@{1Rc;_an$E z3*S@bBUKj{9RNqa>RdTBp&1h)caa(1UCGx(tB2#FNR{2=OAF z=#yvHsRWbOI=mb*Z!lX4%5<@XME+N1PXZ8?z%&LdZz><;mTUpzNNnyG*3F<>A|$#7Z+Jo zz=cN~e0zD^)qxsAwS#O)O`$C%3dbsQh=S?!1{R#75K;d*#5{rf0)g;#6QkF2FNmo34e+yN?;v_49+ki}>q~AS|cFy-yh>#;9u?{@~2Ug+|WWa}x~KRdZH_#=Q&{yyUcGvQ*Af>0HvP+Z||gE9Ee7Ox(jBUe{7+UhVumrVkn1B`!QI1sn2U$Fl- zqD^@v`*@TOvp-L}@h;aKu-M9Lx}H^_VSxEiSX`GoSzhU|GftB8B5E;7M-z3<4Yf_! zXk2DQ`W+vHHH%4I30m$~-0yRJ9=}lomXcD!9Ri~DbF({=b&WZPS>1!minUSDNd-Oi z^?2XzBU>oypAL-s?64`NN&B+72|yn|p4S`9M6?M>1pla{Djz63d&iEo8Z(!SZuHTK zX{RAsH5V{7YdDnZ(AAD<^xojf&^cqSYT7LtJ@<~li*eR-KiZd=WqH8KKT32L(9&55 zs!v>{JUTL>lG6Nb{qn!lz%cTrzH$DI5e?teB-7IQ+CHS*_0_MDnyGnMpGnwMpC#gx z{p`17s;LvJ9A$28l}c|sO$b)w<_3-*dW}5ik2zgMQvE$*n(x)d(f)oxoQJn7aNeYGM~}B?BXZp<^09j z`VShWuj2NaV(r7?cb@M_?iXRGpOml=Nr@%4RmORuvT$AVtSRiS0)3aItC>CWgNV_? z9gPby1`DpHkvQ^CD!}aF7K3NKoVE8VMXMG~ghm43+jCoo z`iMn49%3ECWa1d|1?$BpoevJOj_-d^bJbhUcz!8B7R9%8HpKfWwyQz<(kaTq@d0q* zoQ`O%K3g^SqaaVxS#6u@8ki{{9tBk!D`oN6D5}c#^vI{7yw1|D7#g)>fWPZ2Mm!n* z!$W5M6M?eJMTC!K;%-5JK7lcL7)Y?e7inEx2vRzzvr^P|RnUVLDms7rr_N8FU{0?$ zwrPs8S0XUSiBDL>vIm@q_`&gDY|Gl8peIU>ueTV*aCtg9B3@{)h+Y>gwR7OjkaZ|X zCl18co}v$mqu7kmwmzf|9D&~%?5>nQhH7SY_I+`tu7#6&rWQ$N#zsqiKf$`@@!c8H?6 zramPoCZ*1YO#Q=pDFf48kwnYkbuYK`dCKiUmQOT_aVgwpYVp(-w?ZgvcB_-V6Za&GfU34 z;9rD}!}v6KUl!oh0fN`_Yf}S)0OMpZ))UD>Y@(uBD=7v-WROc^FpBqPxeM$S$Nlco ztUo+_xRNw&eW0D>fwNYrP($PJN3_8mo7W5pq~fmP)5saHx$M))Gi$zOpQg$f;&8`w zKWZ5Yr5S0~4D#?k1uOc?dm(!V|BRO^RYHiX;iswMCQ*HQ@qpjM$stDfif;-MR}pOHknl6^(jVjFU<9Q>+ z7v)FXepkCL%cWi3{HA{EiQ~(o1GYok=-wZ2Htpnc#w+BQ@;%RMbt?jo7Orc~{*{~( zLhO%2Ca@BA#rZAY0)x_~@u9_7CnBgw$t(8)1LgH)jFAfFtlpI^$~p5~3Ao+Idbre< z>atjGjmQzbEnoA64jfvt6_r0gI79(|U|m>1^7p;fc}Qtd^iB zHr12{5U{{OrUS}Tr{BX{^U+q*W8@$>^px(BaUekWH}9!3_g(E!xv0gijeW}{ z-&u`zwA#))a5^e68p-kzxVFZ{vJunOnPo*+-V|b((7wmyjO#IG?m^VT9a%r&zS>Ew z-VXFn8W$pI{12diivJ+0X8H^3u1(G49ppdXRSvdVa4`X#9Kpe3Xg2XPA#R=csNL5$ zOo!WZ&MOAx>bd>cbiD>P0dk|I|JU1f1~t`nYnmWM6c7PvN()7bR0RSeMMDc60VyI? znluT7q9|QN2ptIup$jNgx=2xa?}XkVbb_>S56Js|?>BSj&i&@j+#eYdlC$?d&t7}2 z^{jpNTDzymvO|Gm*#Id3GAsfQVd4$BoysINA`U1D>UK8oXH}K(lFyP*os~_xXMLtb zP75mWmL?=HxRNjG{e2Ocs$vh2t`0bJdXPC<<|GTaCkAA0Kss5rX24UmI*k?? z5=7STiWG@d!m&^9biQVtP8M0Pvr?>vTJgA0FnmX#%BCQ^FfBN2XR#ZI3Y}W>6tI?Xr|*x5+0sEu$^pHdlMGD0(Z;Qu=iiKUQfRkfPaRTX zkc^8??$P12>p4_FPi@Ik9_lGF$mz}RZy5+LDeoHz+uXw+@2Wz=o)qJ#_Mlo2iBhwhcdKS zu|nH*h8C5b1wyrXHgmuGamcoL$~^d~tEe7)K_0>6n6*{3wJ2AMAcCFxl9(36uw z`?pcEkO=0Qvc9G8NytF>W0mGMF^O2iIJMHnRT8Mbj9Vr8>Cbn-GiF0iU*3KR+`c%R z+E#CaBg?|q7gxT3EF!`CdL~c`iPX}h%O9mlb^UJxs8dOYh;qWH`-uMiq z3M9~H>@aFuWuT$Xj*gB<_6NUxo?oGp&IU$-;;BQJ-G~NlCQaTDfN3#?EJF1426Z^u zEmZfL8!3@QyLE^glBZwHK_XaXYupz^bek?RnAUi2SRay5ek7A7O+B5cM@S+(A?-=X z73Q;M@t$*^Uss2~o74bsbp!DC2jPGJLr93H;sQc`Oi131dJ34KNN}3dp z61bW3QR6WI!w#kdu-xFlyA%E2bdV4a!mO|FnPFi^zrXqf;Zf3^Up#~5&<#2H=IOD! zJi@9s7+dfeVbHo9q%T`FP`A2swO<= zX=QBep4FU;3#X%O43@xm7n3ht{~0SG=uva9%y(ErAbRC|%7T%_wY7e8^>&D(2F&U} z9fC07lbE?{HhjavPHNDE4=0X|6?nruZBd961%{kE=rmMz?c=L+ycBj&z)DFuIaFZf zvX!H9dFpL>M~z_wQ92mS=+26C=BHyBXGOHD4j^>KkIj;u76a$crGUB{k?$~e&@JfH za$jnV2x(!2DtUXC#@KNhxg%JM@y0cl`gq_c6918nhYC=`(uL7Ve3Vn8oyaDVaU@Nkz)3)h&Dp=R92>+QOWt&oFN zes?Ymq|_sHrNen$v<+-8eHf_sOH zyih)kG}(vAYP*K2bC+~5c6^-Lp6am?EV|Q>ah|Wm`&T>H^<17&PnlNBrJYZvXFE(w zzPA%`Kje1Avzd|o zpDmMEm%XVq&}E#kmw<7N_*6=r@g$^!epc@w>bDI+gOai^pO(|)7t{;Se{gh+3~6(+`p%KW zs$0s?si^Tm_@Tm4v+C`u+o+Vst7FH#;D6y$_izk-aFkvqDVN7=M*!^!N_a#cLW&em z*95OS?ascTgUAtrA(AL{b@Dp|_L@a=H8=5!(2KK%~XXcLO8IzCh{8!cHE z_s>gEwetW+V(qZZaGUzs;2SVXH%(cl&GjoOVFw{qC>FC5skm z#p=V_^Q?um@TlH2e}<-HYm@S7FL%u5%ug)(g3a}__3p1(?seRB#7J|z82*+=_7Ky= z#abbUunhzmOYY`5C0AHn_CEN)Yte;6SYtgNT|g406;@Uru949ApcI-S*OP0H>-txu zRsEGjXppG(j|Gfx(Fk!-xZuL38bFGTi2it8Bo3od3Ig@Kc2jFl*M0!a4t88FS?wbEdN-g9nK6IsCNRrZetsv2 z&NW}y?s8I`lpufJ$xeGmgs*4OQi9*ifN4tY@#T~2z=o6cHK!~I#X0ol0sVq}^r3l@ z(^z1ALo^sdXRaTws7py!d~3ln^G9O7dVIZ%HmO1p%llpKB|&u*Ic>2`0}v0bD2gv8@*@Qg8QmT-Fy7#xr!)20?Z;xV)t$B9N}Y3;_A|o{HiztL zE18QW1Xd(u^_)V@Jv;_$pm;&SOI}etZ88u8%BylLvB|vgtsfReV(y7b^$SJs=nsi3 z%VsMN#o?|v>j)Q3)E1*<)fco*`cE_$Ry79{_avfo)xRiA(5}1&;p=Q~%^kKN1WqDZ zbuJ0@s`evXEFZ;rYWJbTh=#we>U6E0HN1jv5D|q7wU|~(^{7$Q1iKDX)~5r7poY`6 zn>E~fPFS)j!1;?E-2R;Y$wWaVfQ8NhUf1hH!8|*70l96dr7PkAD+VuGm}dDuP3SO~ z3sz_kq?sXjUWhwOPH5T97cwuukhtfjEL4#Ao)n$I>|y^q1v(rgsa(T!qzX zRy8~dXGI%L+hnO{t`4X2;5-A8s$q)gP!PTX5tP7&NE;{PXhW=wcxFV6B+?*}CjCeS z_+8EOVGl^YZ~&huPrLl1`2KYNpS-66+xq#{l5{!N?9VeE?p|R$vk(C2xe+)c&mJSj zlcy06COfQ?)@%G6_FE)xV%{EXpZsjE#ID>FKhr@3S@RNuth`XI6FcCSGf;_?+Ap81 z*ip%vez<=9SI1t#mykM)+k^$%vcq1F+B&PR^>WHWM?uHgid!GXckk=gPH3?3}JTUZ}{5xDb9NQH-=Cm}%;e0L6H)1M)dul_(e2i0xV z6sgezFkF`odH<*m5%|3#7)(~p-WU=9JiFhh(wyKH&l06&#uc!=*rXjd_OSdl6V8pr z$`LNG8p}e0=}57{`^VLCc5k+cK~!4zP=<@+F(WtI8j^les8gy|eh~d2ePICcDkd;w_bbGNf**x%~3-+t12kz1(#V8sD14eTHS0J2cghE*$s=lh| zD(t}k&+6K{U4r3|qt8)2MdPGt@`Xv?h|#y_7Bx?LG5}vkqumV*X;t2vO7Kn-k8e+3 zqu1qH=1o&~$tc>JoxIT+pD($ABEP(z$(NrO?6@hiaolXQ`q6}OtmiPf{bT(df6%1| zub3H@E(%de-q1*{9|qHk>LAe?hpN%E(5EY#c}y_y?%MkfLE#`GPeM!a9QU! zejh$+S8BhsNRz!I)*>bB8A5CEAtLb z*lImHw6v|BVpLW{NW!x;^f!~TqO_fJc=Pk&s3a6D*x|8Jw~5UN_(8Mm(G}J=wCx#! zLJq}*IGfJg1SZe9-E=P!Sq$ue1ko3{VwTHo+;c<6@QT+K?ay5*N6@GW#ew)>LE$ zivkW(ETr}3H#fqBI~20yP7=7u|7)>Ec^%wm-(Ej6ShZ&v|{9VkFEl4B2Zd*Y0WGlK;!t z<(g;Zkr8Oz=d1E__;IX#@JN-XLfq#S45&JvV@WsSdD=3{8R@n;ttcf`3{a(yiP?T@ z8Pm7q`tKXy6m2O~obunr8U+iy$~Uo!cs52+r*ojetunX4G5q9_Il80OgL~~I*zQ_M za+t)&OfmlawlEnkFW8ra!Y!x36)96!mZU;HvWZ)?o|XPa3;D+5Z$3i1QsK*k&j`H~ z-IWD1B~l!;+A{WRO(S4wIl_)m$+ncrI??Zd=}5Q$74BE*KioMP%fzILQm#NU1S+sU zlvmZ#NkYMW^hgdV3YAqGq)rWfl12SN(yJ;X>!(ikUi542itGHlsO#H9(Z=0o$Y|`I zRqO7i(T;DQ;iz3RT0_OjVI_$@5VqHXZc3zkFcf56aSWv)brV&@o=rFDtMt!cMwiw zz506qm!QJB{Lilzh|Vh)@LLtmbEc2z-0{)7_{u@zWRfp0*>TIBHjf+vrRjYnEAf3{Z-H5wbxgrIXm-O(GiTXjqdaF7X&+~QklwSp zu=lgpU9y?hvX^+T=p$!2Kd!_&&PpnHl)mC4x|E*NDf(os?=q68o#1rkD@lhGOO9xw za@C|@)Ww8<)VL~mswgEJh%CH#3Fx@jph(*Xepjw}&q~e#0UUszzI?X9ao-$Z9#*f; zzNez*gHel;|H}q^G?;|o^*8LI8a?uBi;LACN~PhBW*}WRPOtUdYu0Z;m>ky=!lenS zO`I4%qO%GJ{$V&>_altwAcCefP7(NKTxZni+$;D`%<})yq&qov;?{^?mZsK_tq#iD zpOJDR4K)Sm^xkAtY|zAO@-qOr@WwfNTo}*%~a#NF$v3h>ObmnA2Jmj4k^hKvWIM#ALzHt4o4(oBHH+h@c(R zQz-k*aD-EJbfWrO=wkk9qeQWM`DwD3u6HAjE;VeR+URzfzfBBBGfy{cbCidUoIFYq z@!ZR7g6mh6B|04}`iT=?`b$=KSYX_DhsaX`I^ztFTc_9 zap#2RdKxvk@3jDo^v{Y*UWfMR<|$A$*rjX3RrrRjZyVT?95=8XzHCD9Zwu99J1N@K zka=t}E1FcDB9EU6KQ5i+;$bmo9MmhOOMKBuC=C@Jy}~N~AKDgQFV-zMImxw>+V65&`z65x$9n`q!=nwR-sBHYaMGMQoUEjMozy-!O*IY(*|A>XrHkYVza; zm{c;&nJi=|2ZD@pSddbp>4q<8q&BN=ZV>8!sZKO5e&zp@e?0X^g#{dTIhiwf!P9-d zdsN713(K|U>3DM;2Pp6Zz@)@>g(%f_HSTfrkE99mj)OjKg6<9K)UHBX^1)T4kg;(WLiDhGnH4PGC`D?0 zLTU8Q^S}BPnS*4EWZzE@jn&UT>ke&bvz%oY7cjc*aEII271d_7D=uNlLt0qu0_RKr-cBBBh3 zE^*$wTEzxk9vvRIUl5&$b&FnMrHH;<%o`YX=}qqFV4+d%Gv}zB2SSP%1_sl z6#cj6V@!;Is(4AU_p~qU8fdyXRPK|Q+Fo!+Sm!QAeb^Db9d23w`ciOSOY$#&K*#+< zrMLW>N=LB)ev@F%r1IQsxdh)gSzKN(B%eE})WWI!RpYw4FYbrWwTY%De=l({C|lmU z7jaXp3##CMsp2;Eou@Z9FXlP_rAQ_r7FMaUOXM;x4nTPLk1)WfPf5d{jiy3!y&1zZ9&*D%3{%l^(PS*IKi6{NmfXx2}e?!ep?M>c4(@`NS zr|~_FBC4K_EZGwPJs_&`hYB&IfWTfm4?TN2I^KbagYo}jP(aKVDKbR(^5LnKJ5}Q? z@zSTI4zn|ng(P^Jr>@2+k}=LOt<2uLFIFD`VXU8j{Xcc~EM^*0olZWL?QEI8H~Y~; z+~&i*j1os0YBU1KBoN6#f5wCJwooF;)gW|`wF`!jQIiv%oAqu? z^7L-v8tkWY)PHQWSy>|N47Ppp1RvrL%;%}uz7&NKnHC-$WFBGOsl#km;Tmc+$T*@VQ}&V@?UA{vkdk#cyXZ(t&`U@N}kO zTE~k$CU+iZ%ZJ;l1YM?^f<#)cv6eYDYl})Z`+_N2fnBVzu@48Pa0(&uKOTbi@7{>q z)#3JZ$B}8-qGrDe)JioY@~ZEqZ8U_9rmE97#ETOOqQt(yHt=|d{Xt(SQ9WG;gx$mOfzI_c>)z*2dgo?U}y*1jHCBxXu zvmFuD`gthAPh5g9q=J3`|T))$nFWPCcf* z6BfU{eyKXsJ^2ME(^}f%Hl0u;h%}E!SsaxC@j}2tXXfsx+Jdj#Zrha!N+hQ zbo(Qp?5IBCn~3gVbNk1iWS%Xg@9D}kjG;MRudR6HVLia{2q4+FFlu|DbCm0JQw(1< zI>UD@wp{TU;RuD+s0I(sMLONSB3nh{J&H7YSU&g>TEXKYQ6qCAuC8rb86Z&ema%z! zPcxMBE50K_ujODMyk06+pSwyD+U_BXtE!HGboG4lKpwxz!;&Ywfb7zwe?>+s4O$)M z-OV>^y_pVG?)z?UsNd&~dLB(7xPxN5d2vJp(G^JbSic0s;K5VTmU9dvo=Mf`!J?u9 zh&MTg@AT&A{6v(NmYTq(E~G#B8Npf$+e~%15Kj!F{;ptK1>(Fv=@}KtBGC}-ZGhf= zv#inYH29!~QcJpu&I>XPM#^(^Cs9FjqJz@8BAG(n=VHj%Axr}6kS$?Xq)uUeH5L^i zL|^@(ijb2$0NsM+Ny~he19GoK11Pady-;Q70iN=1b;1Q1;6VxEx!X55j9>O<<$Nah z9*Bwtss|ix3lw}{3~`o^s#vSk{G$Adu)N3%Hm>4=CSX-I+_AHzuDf#AI+dAsJS(d8 z)(Et@V#I!oLf!Q7LSJeqU5h*4xOF$9Xi+mfYU>lQ=gKVWdo((M!vb06C*bQ~VBeJ( z5J0Y$Rd^4P`G^KDusKdB6R*vwt#cSg_#jFmYsw^YS&L6zZ@lpwJzg4dS9=h}&oo<#2Y`o2# zD{~-n!p48@$H#N$+`m=hdYqo_et(2vcYzh^PkbgoCIw}ex*Sh+;vnJoHb52Q;o)8V fpZ+*M-#EF`^cuB2B4MgH)+eQ4tXs2uKZx^e!OM zi73*0uR){}Aan?X@a=$z_q%iNotZoT@BchA&XXZIXPZXPb1ajyb?Y}$9(Fq0+NJ9fc=7!1>oryI~E7p;a(Y3VdyzuJ08be;!vC!lm!=zd5 z1ny++#7S}9^qO0GikZ-^$^iXTbETi2+@aqq-wg0Y&)iB`eqZ|T6jA23pI(#y zMSQ`^Xns=YJT3cDt(5VDtbWGLhfCcgud?ogR}abHPoJz`S6AYikc)2Qyf=ywdN6|z z0PDN6AGaI)%lgN^n(oLh0)cmVcJy^%;89Y1QE{ROl%;9+|R6p>tYsF6)b?)&r1$}C%V%y*35y2fPH8}5Q#(9H72GGV4)k8kNl||2 zmCk;T*#2{Vf%M4LRR`A>o^^T2XhMO5lB6L7@p{c3)t&@kB@ED${;*{GGPhFyB z6yF!=G_x15P)AxFANN9eOOJ=uCoe3{FtTgTv@Hwbgm`Lu-8EpsR+5EsO0D%#vE;E3 z%<*c&1wlFpL`xZGyEN6C!;5DZ<%06NHpf!FyiYr^?$w|eSkXcL)QuQAm+}H>fF8f5 zJ~fhBJkwr7TEG+FR(=4FUDg(a_dzRbq!gtZvyg-Q!(t z7F_>Jlp{ynd2;wp>Vu-8BS^YzLozP$v{OsfSPH`>Oi|$Zz?`DlU2}fOq&%MW4|mo2 zs*&MI=d{MNsuAh)!u!(a855J7$4l?v!tAf$*{@j<2V~a+ z*vq%RRlO2beT7@73Y||jRIb~XeA9O39{Nouv34>4gOth9iCewjdyaIbi1nYlDx}Y0 zOeWqGBeP@_vb{rPWMNyD>C*8*F#Z5@=u9yy1j05j zY}3?l4%gvZQKMgdAbtZ#3bCc7su+LFOOcDz*V zjyEz%LaM;1rM)d}0*TV4lTY@kk_mHNs%XhGp|jy~PP}(%{MYp_dSZ;5#$!5e%eWcH zP@h4BsIJxM{J;We8uq!^Y>tX99d6J&@|F{~kXkDu+vkdkpc=%HIWNM1`<9|%Se-4? zdL7soTnwxd`=jr&CnhLKGj7%Qisf~191@c#nwOm&V>U;b-BwtXoc0e=w{sln7t?d-cHDMs4A>-uCggrP~FGxRm$`kg(3n!e$)qFfrsmcuih}CF!=3;Tpy8zR}SF(%dIDWzgjDb~%KYXYB8bVI|Jnb{ zeJnIGg0hCeI8Fo^uM1`tua@(ukc=h#YoEOQL<@Yts2Uz;;9@}FJIe49ys^RNVU`g~ zvBjU+&F45mhUTXkT318Dpddg_MC`={=-`V#P1rTXGPczSfS~3@GpDCr|Mb5xpT(X` zKd`fFrIZ}DEv>3zz$_kuG@P()LYiAxT<$647Z7$aF_@;AjHE&JHC%h2xGlepo559^ zHTOKdj7Je5VxD@By}tv{3!QR z7Rn;dflzTpz%fu|Cxp`nY1-x;HkYnL(e)F&+RQaKXVW*w-6p0AfpES+npSmnb#;G> zKRaR+mpt6zyzcDiSSj`p{OuX|TgPBU7FztUD8Hb#5Lls&o$VtVn`SX%2;`GD(sY7Q z+It>M~Yy z*kl*vy@f4Gzg;renMz?i7e5#yXXk%Z#7%gJZZ8k(RdF~mrg#ixV(6B>o}J@yD^~W< zCCkvB6v4R(O{KSrKEd$^Ax}RyBD}rd8uhG6Lt1fBZ9S50#;K35jq9N%FWuIMI@;I` z3ZRR2K>VekLLZBY#Qke!kY)5p@49{2UYNiOly_QJV=}+3#7(EAz(WIt>|@iRsxN(t z3~>eO=(si&LLm>wJu-3j9WRg76`Qy_7lMJ$K3$wQhprJrWYe)sA?u4xJ(6te=^#3w zl!;DnOpCyBNwsa4NcIa?Uxd zDlMsi(_Y<3MKtj~Lz-Z#*cCy0Bar>54oAkW$lFYfhk=wOhzEK1Q@k7}TaoEZS zijJzI?aSSldsgkfvvGF~@jLL}i{s-7R^dnRe-5dW&29C0lv4>);%s zB;hB$+N=F?lc}eq`;oKh2Rd;_%#XqLy6#9!!iI8xW~-~Ob92^nY7w*8G`W(_KC!YJZeLGlL%;V=## zPL+=#3%TFqTNJ6$qtcg^hMp@oeT(GX0pavQn%=Us|JhgP2DMf*$~TRWSZl2rZJnI7 zmvSzC}A`2QT;4E(Ri-$Zi%<3qiK9$Oy8Bq?QxEpi>|o zwG(3Hf$WNEZEX!P%kwigx?*$QJByU4#K6LQ@~g(`Nwdfqy3KSVlYHP4D4cLJx9?p9%H}Qtx#W6QSo}~PrKn` z(_czlp~W@xH4O;JU+=LmK461$qp*MqW9{a&QTC&t7f(aa;2DP4UJT8*;fD{H$rVDylkU<-OX5aai6 zyFK`5>S_$_L0GgR=8O6JPJ^3kdm)*U%+jH)x1JU4T5=cpI^m_z=48W{9XIQyW}jPF zlruuPu7)2u8gOf}_Z6%X6ISEop5l3qpExO0(yxkf7ZNeEMz@A>3I1B4EmRx7rV)k> zTfb0Q4^7Ox3w0x=^5XYaSv-_gc(mrnr7dV`r~sAKJ8PLkZ9gwTNz~GOBcXRe&om|7 zZcjp)$nnlg^OrkBRME#S$)!EZ7X5wQY{~j1rSqK#YQXL9>E5Hxs?@+U=!`|@dr=jy zZT;;uF1Y2W*4`b9s3Ob5EIoYtNP+>qfK*Q(qL9 z2>*J20aKh=4SS8(-Tb*Dtf8&>D3tS>4+zF_(zqio?%6vpTx*F-hjMK_K>kOp3iEEZ z_dlf_o{oFo&pv#gBqXC6nxNx38Pm}#2S-dcTv~yDV$Wz?X=o>uy14h(O5p}cd5Z)+ zU;NrHOKQcnV^tWI(PuQ)RYOJGn1dGxyIIh-^kn6WuO19dA8tMM7&oXm*_#xam~!AH za`bSR21(xczKME3XVc2wZ($mAf8z+|NSnBlpOedRyWp2mCc)vJW3T>EW4!?L^kn^I zShh^eBEMeHDCc=g08I7)SLA9%R99C^hj@Vi0sQ3VJLFCXa8~ZbjZ*M^jyWjmj9DP1 z(byNalCYqndibxn>3`|ycJHym!ou%@g3!Ef*Z9S&Z0l>Zs)y#t0IykEScJqgK>h-& zsWO2&j{NY;=#QHCuFgmK`7#GH3oxHizOkE|WgozDAexC|*&=X}yvMv~nO`Le`@*^f zK|nZM3Rz7%fa>bmx`A~FJ&4YfXLgyOGX8;gV*$s@QRuR##G z^%?u-`_I4(he#0DD>{P^jaw1A{sQESJd{4r99pYYO)H2i9NQO8X>f~cjVDuKmZ6<- zot1|qFCFCYOi@@5FIX8aa$c&zGCmN4op2!sST)77BPc0ATk^f znb^fcJ-+adFcHxZ<31-nbL&#EbO5*!DZAkp^SltQ&Hci&0)~ce=#R%k=Iv2Wa-xnW z*(e)>=uLwf@yE7aDu984o&DgUZw=ZOxZm}(TEC~;x{{lLJuCbu#l$GAqLjc@iDalf zbV#7nv41kMM~l)RRscE8j^k88;Z!ah*(+##cBG5VJ3sg;&O7Bm89q~w;4An{5BhQ; zyDKx3gXhs#dQ_1#2{OB@Q=i9F5d^n!UiX#r>urt&SkqIQM2VxFC+$ zI>pwdgX}jkzC#PCFN|s(u0nw#^rXT`GX zow}FB0$_q;z-sKqW)1#~J z(NgEJnSnMU*emCyDO|yd(V$F0mM5o_;fEkpP3fR4Gj32s{-ffDcI@-VuHuPp3GyZ) zfo`@dX6N+34R`K=%z$jX>?)}1}k$5d@Phzq4d;58LDpzv6V z#YuaAOtPc%ZI1X(i%EU69>hwsY{>`L>1^~H=hJ4PCW&$Y*RL9-4b^1rhx`PI8ibFC zi6_G$)bg|O-8diJT}e`uM1vboiuz797ABad%vJO$#7e6|$94*KFR#zsA3!q9UdZnb zEmy;1xeI0;bXM;sp_9nhP3r>#{Ra99DY{;l$0yVw&JwP*U{K8S?$H_~l6vQ8nFBX9p-t@6p@)kJKkS)M<$x6CD#6 zJGsE8fIQ&bY8IgaidjyzOxz%V3zU9`LvqL>h5N&a%FeGcNwi=W&kXrN3wDKAF~N3g ze8F;c1%2=smE1U%UL+!5wZs=03T1-ak%Q6?eZY!|u&@B@cXJx%IBTpI2Oj~*ZMF&S z8ZyHJpxhOuGmtM*;EM@Zv6oU0F9o?eFSmg9SI2FRDe4plmFir+B%>DR5aCMnq=mIx zi$#o*`5D>Sh7n?$v8e#r1l&Ijb45e|CMF;t5Kwe2SQI<%NSw_pXRH^W8-8TqdeWFP zY$hTgqtb6^Xoyw-UV&V{3`{Q#UimpAy^=Fz+6x9cAcLP9|>YOO?$ z?`TJ3hSzd|g&Mxw0TI{$W|u)~xqcpoxByG!0@An1I+z-QMS>T+S*zG7D1p_1SNTS zYvcoIk>g>fW+MDL$z!dpsw7c?`eP9O&D&j@jM2*&#l1@R(V~8fWx;@W55W2=&EPPE z$j(&9#Z+ja@gU2Ho0awGQIcprwd7Rx?$=<~Wue)n+R&jO$zp%kdiX(kWW9nz9oYRR zLhwOxvtjbC2IA%|az|q(CnwEF_2Gq-D$qgTvKBDPcPt#Kc5X|f;cL#P5#VjpE+-3h z^qUVWiIl4=0X7rsup*HwijKGqDFVn0JTT%XE&uW%Nwonv^3LLE}{dUF}iai6lY zg~E&c7rhX)iaBV7Teq)1J>Zq^i=3HV6`H!Cb)iCwMb8uS1TGJV`-V(RFD`xt@Ob{z z=6k2NZyFyTuZ;SH5kP2P;MV18(&Y&I>~ypCM@AsZ?KE+n^j^oLk0&^kr}-+HG4j5q zreHnq(+KI!XDmVH&-Ab2VUbfJy^FZftfY$7E}p1IQ^CnHpurkQRM@<;;vDhWt{e%S ztJ^=7acEld;SCSIXJMmLbY)I*eOYBtD=f3I{ms1U2W$G51PPvW6?D-ap4OriM(EhW zVp@}EedK!o0^@KEAH&uH49sVWsh(T{eU6h06?wwi`j}bRa@YM6T4x!w4Khhb6>0-P z>j$^CSUR6Tmfg`{1FT@4zWdU9`uc+|6yojMeqPe>VCj)~jLUerpN&O+S+T7OIp4+b zW~%32<$0Zw7Ojvp^7lNBnmXsc3r`6f9y0k3G$O?@R1ffjq_W~$2AE0p#=-@O`=jF7 zp^@!rc>;!WU%Msq@|L51Z?s8HPoB*PW020jfbsA)9TU+&ycZKGZ8^71gfX{O?~XSmr^BSHjv#Lm0Z5J`fU*j z7tEy~wi`>}OJQCdsGCo()9%L<4&%=lUwiJjZuV}+X&lY_Ij;d|I(l&PuOG0G`Moq3 zphtoV)oIs8VHyttTG2DwLY^zzGCd`1)QBY)Vf5G08}|eC?(X*@8?n>s4RU7#>wkAy zkS;+pt@G}jd>aIsd5)Epb(rN)!bY$vNsNJkwyjR3&Kt^t+be_>$SceH%M$?n-MlsS zT@>~X$JUz8UzUbONo*}v;r=V6l$4t|ppF#3g!R{<7i&A$~9g1Eg( zKzwOkSuJ0A9_U`KRwzVOFs{Ajtp3&GkBez3cq6$Fa?o2ei)eGF_S9?Q2Gc|Oh?pXW zAH|&!NQOUetflY?`_AWJ597&-$cc~YH|2*@kti1I>@N4AgH_VdJ%28lH!cag(o$gF zrfE*N#TWLKr*$D_obvCLP4Hh-P@=#*qx#yxbTz zPpF+=<+_!>>yYQ43t5RAk!-{3ThtNMjr;OuEeA`_+nd_@uT=QapAM9#rZysHtH{_9P-5rcZBcK*d$gRQ;{=hq^$S|>P#sF>xr=r?~}ewL|xbnStzhHPegSCBEk3HYX^Ew0=7)!0O)+c{s1T* zB#b~djvc3}d}tU*_u6}gO+y2)5z?W(Wmx}TyT>11N5iX2y>hjY{X0)NPXBmDez_}Y z)5$<-%6-gBJu~Pm<_GQ}Q+P>Dh*Z=AxBjQxTg&|K?ElZ_23?&P!~b%lQO|7*5<5#@|{&XXz z@JFMdeau3*uGFL0SfGhBXe*t#Q}M@(MLpO5?wzl96?d@rendyuxIGqZJ$CqW+ zeYgbHpG-LW*@PuTVZ#q?#)tW_@=FjzGpS&0rD=AdJ2G3anInCz|ECr37>ktLe%GAA z?PvHohoDDB@0T+AX_HLLn*Ft-0UIY#NhlorMv1i!|x&OX2@Q0oMkzD}nDl3!QVPymw zFhaZXHX8I=5nL@dHbTSijM3%rv--fmqe2zX$=F{0{~~f! zWjXwCGl8*cgrtoho=mw!Dm2WzjmAWD^wH9mD~HpGrBvp>WNXJ8aDT0DFbzi3!P-_o=6Ra}3>1 zJDYRmKMwk3-5|LyRJ9%@v6%N|yxe7s&K6u>X_H^aOAb=UmNDMp-T77%SMTbESvGJz zw7!vw$E4Kve8(rgEO_x*9X%Q7pz1bSwRcEpT&+kV4f|C$tk(3DG5HB4=Sb>6%44xb zOXVxSBWO!~AN3C((`51CfR*eH{Hy&!e|l>|;YZ#Zf$el*2iZ00wIgQux_4iWb(XbA zQ4{V%l&mypOO+ohcD73I7@(j0y!y-GR_67OJ&hS#>UDE9A+Jo|Vqsmbf?*sl;%;6PcObrxM5gc$TLPu1D|S zA1QCjzxZU7bNW5XlYD_7QEj^Y|H7~Rap!KwdfayP3sg9}?TnLZ z(8P!ffl#4`8Nlt`qqAX&Gi8bjJK^+e3Af45N=Eno0U=FAV2Nm0j~v0%h1Oc^_&!jG zO(`InWMMx@j)UN@e!IEz!7ixsf;K0ZGi)J@5jX-TL*gJN-|u5>Hag3xd0Yt7!nRC? zu4?bzUWi>Gw&keLGVug;hPh@VYGaK?m(RP%=a0xcO1TG4tDyMIqctSEcW6UyQnw z@<_Z&QAkl-zh65gqx`>(6G|M_Yt1w3Cq;8)5^$ARhc30v9N7$2Iu73YQUY%-itp z56baa6}gUh1v{n%rEeuHrcxt68ni<@F0G6bwCD9ki%s=>1hpVWDgOH`{vzBHm+2}0 z_*`6t)R*G9*8hZgJaAfsl^Qqy0$$nmzOa56bE~a%?XPim$09bhUt#y}!U0^KEtj=k zvd~O?SqHP}DDTY3kMqKF%~6!Se+wD+*w@P?7T7Ci-bJEdd*>pPGDNbPPFXDbl;rdbDkbJ| zNcEmeU&&}^`(5iK&EaC|(-+B_IK9>nFtfeH)Mm#~^OKlEmPUfAdl#jH;#Xd3WGoMb|eBC5HR2*(5~-XPM-&Qog@~SB6bXhb;&xb+naq#Dmfk z&pn??en#%Ub5=%J%~yxuD>9^MM!FH?ogI?>Efko_PdLKcF1^d)fbhrkGeQf>Z&uH! zxUxK!XYYLoW=mTopnW1X*fQAaf!*46a<=vV5ru6~-m3iQ*|{g-EerZ|_px8-*M?TL4<&Sj?_;@yfnpn=TgY(gWyyp29l6AreIZVS%+JAh_D z0uu23BrgR%*9hrj?L6JMO-iv5d}1E!65iaIq$#@{Xt>g_Qyj!*FSpmZ3bFPelIB~R z6Wm_;E)#t(31xpfFLJwg`*m8w6T_UPgtXiqT*;3>e%M}n%xo%kh+|GID9?=CVUg+L~|u=o^tmu46(;+T0KCvh!p~vA)PJ?F!76h*K$~|9@=0@m0Et~8drq66`W%$U?&Kwa$aoh0hKqo(PiZOqGQjba z@Lmqu3M-6*SF$dQQeBm;9(w+6Y51>_Iq_E%#7ph`i@c+Wh(Od`<<2;P@#1Xw#o_7u zW1P;0Iq^)tqcB$vR!Y3T{8rxO7N;VO3o;Z7CK4yfjQF?tgn$`Ax=lP4)q6?{GFK z_d{ptz3rFTh$s*rzbr~z<2!rN{=Y15{~LhC)q(idne0J#NB}rZl~&Ae!vjTmeO1*h zb}J)CM@KLkrF`C@`U}ZCfbRIhyU|hnry64ale7Q*J{xxl@+axtmy1+O`YlIC;Y#~T z47C_BbS%GmUEoXk{zacir9l7~g5nAI)&IJewlKIkw)IL;Sl#y1vB{WXGUXfUVlW_k z_#I@z0eVLFWyV(Ck{xiL(4GxITDY4H#g#)`%yo<-ISRL60u1<_{ z?%QZ4mn5=}#Z0-yBiO?164-(*sU{NuwEyY{C9+R)uAhD5h&5Zj=@=HgFs@f`+lC+1 z2N($u+iG3UsXt1Y@TLii=9;tOr$nRY$rrKBFmF zb`rlKS_`JQAO=(36<(BHS8OxXTj5zdrh+G_Ssq@Ou~dI9iX)zG=IW>`U8t_=C>$Wyx?<*ePyt658;pd zzY$b9FLA>^aqtGn4AqX?q9&q*?QS-n%a}6kiBWIeakwj9{IN$@&ly?Y7?e>|L2$Z0 zek~YX-lb`1nl{n0Wgb%8w#_5CYxgpEZlI4b?7@VU!Yfz1U@=w8jM|;45>K*^+a#m{ zYFDJvo3+J(Vm8c38J?NFm< zT2zDu6_q1ynYM_v90QYMOp;L_*D`FlJAH2QUb&j+k7*G-SJKw5+cKe|=5Q@9^>rKX zG9xe0F(bou0P|?mWp3_)Rfbh?r9BenlC)*Ivr%oFIXcRTfl(qrms@3{G67%md@R1b zHe03vr!C{8eYtF5`^lf+u7(#mJ^67O^j4y3WMRLGo10#MNhbEAW_ETK44%jqzdC#W zE>74M*+hj7W@2W>v+Tvp+#IbSQUk_B^ML0IsJ&1KjU;v)_X?OPMY+lG8rAu}J%m|qJjiEU+q@S-Ytw^CZXtH6CcEdsa19=}R!37cU|sGI#^J@wyf9H}N;TXZ6t-eRH^JgR57B`cEbkKhst9penT+zMKw zB;ixiQQ{8y*h7r$l+iYiZFWM;!omXJZG-Wd;DExQic?d7_lPSw!_$^zAGQ_DcU;1oIjrKYHgQH9VnA@=0Rf^3bVBIewR zGatHB&srR?CeKBG8_wCiL7ZvA1yoQ5NNI9)*|iGfc~a!6+1_Vl*b!;KJnP^Xsyvi_ z$x+`jm4MeUVUW(bebrV4s^Moar8i|s;rnRg=c`k^^L-OIx2 zaeP=|y=%tZ-gydHchGG6uO z{=lRR*Xx{TU8uYQ z&bPSMf9Ha3HNP1}mgn5_yGxlTzjEMZ->I-C%BDl77?sq=OYxZ~LZIDJ2T~xcb>B%l zmN~a~N$;wJXXvy#<3n#kRm<;u)bI}b$^O9-`n^qcqL4Zj1;kNdyC4^U4}zYpe2#>e z*pn-?dqoLM%LU0BdPnX_lAZ5Rx1 z!7OC2T@YgIAQ&fL&-UE}L>^b|xid)sqF)HC{o1GRPNr6-YthLAZL4ui)>v+b7+4}a~yApNRHN0*!lD?Kw&e0 zR|*P=%=AQ3MXkpTn*{nK$$^{WlL#c_DVQ*E&(LUp?2%O)17GNaxYZHBj48Z%|9)lI z$R_J0@CnqhP$l0@e-R9*C4o=)3Gz2*(`Z3yK8GH2(L+oD3bbxSboCZE2u7>xVwM^} zq(lw|gpZTs2iAo$&$kX_PXONbqboK>!}opaId@#A@eUktgPjC|j)q2ME%NQ#w^}vf zOUN>l$Q<5CXHYT-qJ8Ar;%(D>wAfFu6$5^OmfX&#v=L{xy}t$Mm%~rQ_bz)R6MTu# zc*(2P7t8l>LLM;zf?7E&QA7*B7P2$|19L=;y^xBH0q(z((eig`GPZFv;@&Ko0f?5{M#JrlVQUMTY>T92@(!WuVQVf==evw@YeHkVNlO zmgAOOLW~bR1-vF2!=}fsDc(WdqnsB%kL**9Uz~u?7{-N_JNxM5P2&qkh*P=}LiHR^ zbv9-**`;@(y;@q=Bwc=vHS2oQ(hxg|e6nI5lUeG~3OP)J?=kOkM>+ZYfiOwL&*lpD zov7$ML*nk6n;XSBgIt-P8VBk-KV?2_8YrUszx7_P-E*&tEOSeR$!+tXjXkP~Ul^Gg;2AR(myaAcV`q%Vb8^ZvTkiwT5&s z9qqK&H?@V3C1e^#`SPHd*nEY?!3y)*53*AO5Y^C@%h|D^>YJF}VC$4kemSKvi#m@- zfz+mxzJf^YBg?X(>v@)n_IXW-UhVAfVl7Qo`nEyydsGIvWlo1_O@J1EFc{hrm-N~j zw8%yWlJy%!^5%!a%~@IOY)7x=Um9$`=e-~KnAj}fa*KY{V)G3!O~kNr6t5@GNxlg; zgA2GeC+XW>Rwd{vvxK}`Im=>K1GlAWn(VsWwrDDdaWx!x;2|VobR;LTi&)f@kC}K~ zoQOi2=9H9Cs~#x+&9K!BCIX7B;W@{-iJhaOo42rquK8j`iuk&Kt|@VYmEUf!SH)%U z^+F-)I~64aTP}1LVr(PvVq>@6>>Y?3Fqre@=;5r7twg4I0BScZdc$Waf$!Tw@F>iNUvR1 zy^6N;?Y$mo#lIvl1Nhp$d0+HXGjizBx+a;q3vDmC1Y3O{DcR+;a_1eY*^gcy9R5i| z9~Q_x;JpNv+_EllgSs+r9LFOo&9Emrk0%oC5J-M`&Ub!rYL! znGDnE-5YMl1qjDMK|!zN`PTcJyb9(V`oe2zEg=I%CmMh9r#KvlQY+u;EJW}TEO!lV zvU&icsSO8r0Mt`C7Z$-0IzeNU`1(xwZ318L65ekik(HEpM+qT3AP!GXPCmkP`ryW` zYTMe|_g`FEu_A0THsaqcX$2ead3uxPWdA?Wfxy@aY=CjPl9Gb2fVd#Gd4M8xJZ9f! zThf0V&>f%H8H^em<7?+@C^J=I$;n!eWWZ1#sAjCTdm14TAz1132E@(7o6XrqghCJa z#PW}P0y0S2NcJqxLQ7s^JgCR>e_g#5XS+dpNT0Q%4R{|sx{bHvW^E7laqx%z05qW_ zbvedNbpEizpxY=XsMbLc-5u|ggsswDsvSA^u)h~pq$1(~!-yj$g;A2+o^e@=C)b_x zB6Xv%PvtfnMXgxek%K;f*uZT|qpz#oG=%jbs5jDTNU14_Zl~=A$O@u2$rHFoE; z_0Q)V=sV)_P)_wG*)^YR72Q%?*`1npY}NZppzhGpYKnNm=*9GQQo3sD-E#Ayg=5rX zH7Adv^52bezUSTCjxi)H`7g=BZJa2Ju{F+q%&A0ABIkk~mqtqU&8Q#Kt7Sd1cB+HC z*_Ln2k9DH(^1}{FcAYKexQ41b-GS%@j^tt2UN9xG-E4Tb@a>go{F7iLLv%{&x^SGw z@Ojsr=*+Uh)}x+`tK#V$VWx3!wXYENI^DH6;iQyWb`qU3;8{F&43mI63EG69qKs9N zGTL#oE2B};8UMgjOUVhHtC32_3)dz=+mQ=Xai7 zJk=%V3O}Eel6ds_6c}OrGJvFVcx4)gV9BZms3Jr@7yd>6`E3Ev$bF4eN)m6qeDwYR zNB!C?U6?6yfgJ|;LruSi3q`#MA@vnfDY;kwWJUeyg=|%oY;@8TCz_%nz`EM)%%d8q zs+Lrsl75kN121^osrfSaal`J-mlKDpQc?@ zy3(+)c{A{b9bcyYU$rg&pa;@cWMN@gUdypZy8Z%SZP4${2YL#cKW&BpF6WE0bR!`u z^`JAMrk>aEx@C)PNK>M18RDic?H~JOa2`(ic-4h76QzU;a{@h^EeA&R{$>dWJ+EXu z@aprtW_;#j@3AM)#9hUhlys+9*S`UN;B$16seb$Rn`%|YsZjIL5*!FFQrlQ;eqJ+~ zh%n9Ziy(&a2F7I#$x8Zjd$EDil4j?C$(9%~5p%z!|79KF+3HMZBN;i%XbnclhKkG2 zzVD{L^&7mMivl@c?n}}Jb zwRak=C+%w53QQJIXpwD89`6{9EYkf5SRamwEp?QKwnLKZ!D|H1bsp<9JJ@4fOmP~g zm)!|Ot5PnyMq4F7W(q}&t1$ArymqL$m)YqwCaGOU{nfV$you9Aju_R^DrNaUE{=&< zzei(KIr~y=2DON`o4&7N^((30dG68evw{^ zxMp{<<|N%X;Ad?FYu6Qiz&v!Cb@CUd8s|^G$n4vbm0zm!wkXjE`qDwC^SZ@EI{iwV zlj0ClfCDA!&Fqr7xLT`p!S=RZvFaDSm&E#0PrzYBnxV~#MWQ@-sGl}I2(`rFS&vL8XYJ2xsM78|Z=o}(D zK0j8wEi{Uoo|$2cJm6=mjEy_Aaq zdL&vz*p%ySZQDQbDdvcR{qjST<(mevtJ@oW%NfeHAwKg;dHc4DMs8$v7-&FTXa1F; ziMSRKHp_G9RWQvc(Hn^m`RH{BxBKcZ4m61M<83r7&_?>%fOvZDmmMV{QQ~*qFp5Kd zG!@uE3v?~;@{-lZH(n+LHfyYN2ZYk_#41cgb&|VKhb^W^!>WUSiB0UYp4u?o@EGTN z{>^N_##%J6_MGjSbM@_5`(egt9z0BNrHFZ59r&3OH!kMuSIeOLX50hq2+@x%NQKv< zru<6`x;}3TE`CY|e6!jG!eV|0H(d{qwTEn*`O5b%&=rSEe&llfKCf^yZQnq)B&bxR zcv3T>(IN9Wj}rGC?x6QlVc@h8*CS|ks$NaB2Q0C2b+(vwBTa33DN|v@Jkh4Jw=g0` zPS=S(ZDsd@vJjwExiwTJ)av~Ngyv8XP13ZsfkHsgwGDu39TOb%5;PW4n;QveBF<2*{;_sRNi~5Lu3)28<= zd^Hx5Cm>);B8boJ-lhGEh>fsAW!x*=958Nz@szaLSC>$~XN)wp?bgLMwYUGmr>0_N zTJxU$UD7Z(YiRTxjf(dRti3^IjsPlVKT6jiwqx77KVT=KX#d#`q!XUD{`Wr-T!~@z zt6t!0BXoOL<7(lygmxqMY0W3!S^=q%cfUrv2N(cOgM?z1we_P9*uOCpt%_RWZrHQFgkQ{k3y$9jSoysP zs3?zhXOV1__9+I5pj235{|MFzFzh!YDj4n!VOXxahIZ?ur$dD(q~1cr5@uFz3z5c1 zp>0uM>88|DzmUSbbB{o!( z3J`#mvu83C1mU?O~wlpJC%19e}b`I4=h{9P$Yd3`xVSyR4S0m%jqVd#&>CIT@HMVFmR)`b3Y59u(}|I7;lL zpN+%%Y@#DLUBeLMAy0><1=cJ)`*J&wY$B>%)(6!KRemNhL1bu?wr)fYnvacR#bU6f zI>wAPvrE>Oc2T2;n1i2!K0atLOm`TPF0qP|7JrZVCqn*He|-hatvu))=JXLs+P8)t zpW;`8PO|0pnbpp(VRiFDhy0l!v`Hz5DV;MlQ)_gV8$xWD5sfVwygY9Yb^P5f`lWIO z@{5cN{(z$6qV4wPD%n6Lpq@?Wy@zWFn?oDpv0=C?^}G-o)gDw0psP;mX%#s)(uLgC zTNCsNzN`{@YU2gV>QOZ-53&F`+f^6M-;rXC?L{=2-41je_invK%s9Ksht^F@3x$u( zQ@|-)a%Hb-e+hZT7k`GgBk1Y~rZ&`}L2qLv3cq#QWWxbKS^n-J?q<_*L%&K|-D@rT zV(N74McgH$5!X5LX)Pd^nL6WIKK?`ip0UUwF1%hG6*ztv?u@I6@bf!7r@3=OB|Jt% zc-CO$<<3I84k_Z0RfjzIDib(oZ8(>uyxGM23&4>o#X+t?4ZYR+T*xQT5~>-yy>0B$ zYyQ4afLk`s<%ne-p|POD`-!*9`Pe+eAHjv9M(Gtj;0RTp{Hum>Zctg@+QV86vZU0r;zCI)|iE(B|?In2yjc;$s;)tAhHbbWHrbR!!A;IBi<57L8T7 z8JH8!VF}JF_%*Ocb>>D328$|RI8vkhOK07I0N$8;Rp7X2Z=B0l&vQmJ&2gEv#$4e} zaLQc<&_UN*>Y{GBys-CgFVI;Cg&qaRYk7hr2WVv`=-O?Zxz^j_Q;J;a{jN*U(z>#J zDuE+7b!J+}etKg-;2NS*gDG5#P86kT(L-ctGiU-L0!(Ltw@AWQCo4pQ$A)QRC2&?$ zEtrJUq@!my{f`$`nU$9($}hgMIGwm5)FTIveWs1DC?nmH#W2`BZF)`F0r?6*z$rU_ z5M_klRRhJ_3Q+a}!XX8SDrxP-W(lC(TxRT}I2st99BJQ0R|p*fHZPwUvc!_+Y+@E6 z47q+3#H4s!41mqFley-|KsxL>)~Hh7nam7^Kpy2r=ZMYMfV^}*A^?cyLq_N!e}U+f zvtB>I|J}jQ-_=L^KY)TW#Ke98$Z!>J0qNS*6LXdz zPo7|vurYtR5V zO?FM=Gw!I|=w$#s_J->3<}q3U0iJF{LUuiqhP`MCZmHp4z`-yd9FXGwOPqWZ;QmO= zJ#Gy_ml)HqI$D`dZ{T4X^drog7UZ~Wrg5O^{B=$L7TYE;x=|&GLB-ZkCN2PJld#5aHmzziRP{_5pX(0=R@>gh0uE=(;L{~ky5R;V>F3r zqPE~-hrq12ItTvb>eJM8O>t|p)xCXgv)kJtko74Iqc>Uqk|zj0M~<<6INF>g>ZPgv zh_ax@yxdL9awA`gVEYVM-K(?CI#I4GzGhQQhoX~OKC-8|1m%7Mb-)e2_KD?v=PlI< z9pz{Sx%E?0&X!Zl)w;>v?pj&Gui>+!{osVF)VCMA41R5CY<;KE4sRE0(pMP`&+sd-yodPKpO%>rql3CYED3xEje*OM0eGb**v^qfz#vn#@gS`vGvCjEO%nU#*wo&H?-G3Hkabj zk=+AFU!N5^`9 z%yyJ>)0mqqA9o|TA3aYD|Ew=nDoG^r$4{Tc4fb(a`?Rkfn6lKq*l4IskWk@X{H9tJ zSJyu_v;SOfv|YGrfdJ9HsFf5GTCN+7m6GhBe4$t|zcgmk8R}-loNGi2W^6z4cWr21 z=twT_C5Rw=_t7R z#`#yDG^ctCg6OoIXi`UuUEnY1!Jy(^OoO(ahUxGXWAU2?xCar8I=vEk%?@dz(FAi`n#`up#kS8PK z>U1Lt{ZCXQ75Zp{F5^*c9ZvC;(P$lxFhfWx=uH9?2N2qRj^2|eL#|o5jEC{nkI6sG zw^>|sTderfQt>1W96B??D9(+obQ!y?yF!_(uN8P22SUM^V64W?is4}+d+SAY<2ZIn zg)^~6#m)wcl%Y!Bpm()dui5R!K}L684Bi7#1c0$=A(ekxBpPmOXaZEW{<5Bll`5ZSpBkpSh0w&?$h>e5Z3P-$T=VCsvxKha@m?a0y z(o_K{)DYsm^$TAIqlLP3m-C5q!yzJZ@x#Nlb8pzQGc#u^&iPJ9;&&*5H`g>Go7E6u zM&dhlEuzT_v471h)+07aL$i1NXSTH0VwK+dV;jCKH-7Y_d@WUrKNme1ccj)i#M9gR z;9ScG`I!*Q_l_XUuf#k$)`hL~S@xc(udEjlePI= zo)@@56Vt2FpF$SO)q~s_F9+hM{ttQY9oN*htqognyOphOLBR%C&?pF~G^tTkAe10o zq$$z_1*P{Wij5{jqy|KKm)=1XLArG5BE9zx$vaj8i2L66-gC?M{_~yRIe#2Uveuew z&N0V)#`8SmF?Lc{Tf1=i?YqX6?|O8b5NiK^KJGNm+*VBQmDXUH6JF^GL10{x8zne7 zCJARWVbbyxhy8%0uT;_5tq4aitm=hs@Gh-(%a~N6NWmCtztkcdU%Ta%!ETdGF-Ggc zvt%Y;n9M8WQ^LjSrn#ixuxsj)gW-(*%)-TN-}3C20&Pe6k~bZ7S$$4h=H={7v)_m6 z8^cPq_JAcS`=d+CW%x@B>o27jr$WGk7lDreo``^yZij0cFj;~y-WN?ejge!C7{ zcp4Z>@|cfAHR?Gcd>?B={lVI79Jq>H{ps$zsUCT$QPpReZv)klQ}`N7*h5CNpyl+Z z>FvB|o~o0fH&s*?KGElmFZ2b$N(E<}MXI}WG(W>?zSpH{5`2FqOPuku&kqv9=?vn- zT6$HU-djGr8QHzx2#fhSb>A~K=CCsxn*2IHW!y8H$A1_cve*Mw#3J1D@DL2>cW#?n zzAVUoX7gU;ex>fxd8TD%TANOEmG>9I44(2vx&I|4)PeRLv>r7ZJ^N{ z`3m0{<{;xi|A5T2EHFdld^cQz3bN~TqA%ZqSW7`H+6h|peH80e`O%u`_j6q~y@lI# z`6}S3mV?qUG%ORuTsnX&q51$(#5^2tQv@1jYjixI{=PczB1W2$`|6_PbvM6uMS?Hl zMaKk57W7Hn~^-PV5N zF-(q3`=wdmZI@V(AdL9rQ2p!(pb~@;AZKDW8MPWDqSTovBS4*9`L$~QRGFK#{ zRW6+{1NQ&JY782Ahy!qq6;A`YZ+{{grJ7mI^71l${`@r<2XJ%=)0C?~;6PJwQy}o#|{w#n4kX&9I42=kKSo~4&1V;NQteX5#zinLLiW+dmIqdmK z<5w%iA-v}aN5lwkO0?mAWRo|EBTJS1>7d#y!G=}J#Zz3t=i9>QrkOjzvdpKPPU&8_p^+h`Fqw+RA7f@ z#-Z%%ONV7G(`({h=2|bEnbrJeEWem7cUQ4JHiy*^&26dGP|TpXy+|E3vB&fZV#q{( zM_+@TB@3)0D-PxeHdj}nykuq@zU;Smnr?c+}zFE!y*}ipBnM+ z&+p9&seCcW_E{h{8~;Gv*Z68&dcs|&_^>F0GiZH%WxmO5~E5K!=b<(HT{3?t0A_O8cWz^)4!m<35^Z{R2{9|vNk+^MnsX;M*(bpoM!v@yJ%UTI}Tb-jm{MON>AAGpHQT2rl+| z2zxB)Eq+@pjqAy_q7CSJG9t}%g8?K?2CdZ`oVnrOgOW%4H4UP3aki+qeJ>qiqumeI zFEiF(c{-=mbn1pNgJK1|#bSY%?x!ywTAMeQv*+?u&vnxB)v9)7;eSOiunVM2tjoaT zH&e5u!S(N|SzA)O-$P{{J`UlQxR^j{KD%kl`kw|Jv066PYL=eQ(J!cF*8T1I#${irur(jkWIG8L1*o6LMzj?+xIYXQC~_xayjyQdc)vvwNzTTP=^1jON(8D zAt=8y4e!P%vlR+^hp1HBf#M>?_&WIx1bTYDWU?I`54FA_5y|kd6Jb zwT~CsT3l#KR1NA*2TShSKe$}6jz=KCy77bMWE*R!a(iI&(qOE^pW%jmkXJJZqqzln zQ~({C+RpWy@=;{#rI{?L8F?JTxATm8myl*3hm1o`%DupAKo225`C8iCZf7|-@!7Nh zFw*Lr*~+>KRqH9WEs)S6k1r9#P$AN?)9KR!NDi|4+`UbMh&_SUqK~usnZE*gJ50t^ zH&_TV{m)G=jq{|K!)$Z(#s~Ym5yL5s$5yLXiV%f-H>{^6AxCI`fRU~4Znn3KZynFf zGNl^{X@6V zZA|HM>QXy3H3ozE1m1v<0({CK)|1DUoJ@bn$yxr?1o`X8OIdGcgB*X0;Oh=^Y&NM; z-n|_%Jw^^@WrEq4{#v~~{7=Lqg|9D}>Bz-)RVM5t+7`U!hs(sHee0g%OULqNDg~#C zrt4aB7T7k!#suT(*I{PyW~W^vsWygxT4^0FI+^G!z_KF;`!jKZCHWHC5uPODGrqiS zbuIS`q`mf7&V60(ZLLEsoCF>!*zZwZH}jLbDp z-Z7n1z;pyRNZ1pPg0%LH@EJd+Sr;sp^dr^x$JMe>OE~}W2%Ntks0>LRdDTr@!x5wp zT>j~w+l~bJz2S@C=oxM6lIeWEaT>G?FS|ZL*^bNPy!6{z91+pm&RcaFNMV$pfP^>Y zzOAhQr*Q7rTyg=%8`Eev_jR~FF$xhTyKFJ1EIjgLrUBcu`ovcGgsID6(-m-{$rR-8 z5qbg&8%S#?_k7vU=_$DDyUJALP0rTwYV0ID^NnX1^X0d5U=iTU&dj{KVHHJSl3z!{ z+*VHR%3rD7*Z4Ne8cv}ub4S!GvF(e@`MJ6G0|noKl`s-*YEY8NuT!8R;^pNv5!D3c zlHl@r2y=IXIs)W_W4&Q8;|_BU3x zwziY}dbqkw#r2seV*tH7ayttPqvyIN!HQ~Y(pvOF(%kQqmj{-GVBC0*awim*Mjpyk zhC~r?b?E&<4uc3J_-HlckQ3OCYf%x&ZEuB;M~Pzi2$?n|NdA5qKr$Dn1|z!UlmF^6 zq7%;2acBXpH8QxXH0$Oi>gSbG!ZVA1ea`UF>j)@y!TNOY=&j!;I3w~uu#+GyA3QbD zv^02@0&}jVk?UaQ8wU(Gwf<8q+3bgm*Zj&{SK*`8q_ku~?X=+8{kyLzU5ML5!C%&X zEtPZ0^vm-wPwrHk$QsIF+Y<7Qtvfiqm4Sgk|<<}!%{GduI999re!Dn>b8W#>z zxrQmZseg6%o%urSvdMk(+m$t{+9w>;prM2vxdvL7diWDMh|A(~LVCy5S{2%X(Ei5G zFW+n*804;`sq?wlEk5&3vN7B^0v4=NMzRHt{ zkSOCg2Uf8;!o4Foj9?RhU|f{J?UpgcEsPp637Rg3Af`Ed-bD$u7=zLJ;|JpFRW`7eD7!`TSGPlj7E?lydLaEH98cm{W6z*{Hzl3pHPpicBQC{f6 z5g9%;7E-Qi=j+8RQIulZMB`JVnyAo-8aXo>_*KwJP_n_-;2gsbE9%!9C#NeLpZ5tU z521)nfkcrr4msV}IH=@oW)-)iWF1#g=dl~#CjX0HVBKmOTH$Wwx`|!7JG{c!AM8y2 zmlFse1pbFFDIyBCmI>XlnB>L1zUoXXE^ro{0i@=XK-zdUgd?`8^38ybQNo`N<(x00 zng5VD8EScIH?~}=v9jxVA0T0a1{ST7s#E*6NUsHWX-crvLFp}FWyR0<8|Ro+NVbHv zSeDc7fFmC{ow9f2qQ-o0Z=XH>vP^t{Ks(k;%vp@G=HHk_9NQspI>vNSm?6N-x2^)N z_D6g#Qt{>731;Jz8{_tKN<#{s(_v~4ige`ommJXk1Row57O3S=Ht`$)NRpvYcQ9xc zn^-WA=G-gNc^h2Y&NHcZ)SaD9sLwb4ysL&6@{rUNyB5LJU;8YQY6M@uh_k+MvD%{k z$j!5^Y&KB}7ZuFqD<;y?v&6Je4>3C`)*c$!)mlNZm>)D)%G>6az#bza$IWRGJlJrP zc9c1o^UXmHa2{{kX0SGKpoa(KBW$aC zi(VluZOllOb6-T(WKc_*#5MIBuclwCxKLg1wvp43{UWWu2UeotR(18+Y+LAI#P7*Y zps(zG>z&)ZRf`hH2T3#j{Y{CDML7fE^sG9xs^^G>7M{7=W6X!KJM&ZN=S~}xO?sFO z2m*pr)mOo>6KNZUY#P%C&ztDz>rDaD*kNbQezDA=Byz6VF+F|SXGj!)Fx+z@qa#P` zF26Bmv#@_OSYG*uYT&)lQ_-mlQJ;*td*)z?a(o*=8?B&`uaGQs7_2 z8X-2&8=mzlWR!d8j2H#0bs%E6vdeb<%2_~E5NYH>wEU0jf& z4F_i;Vq>cQj&3!3KxX&;~>yj&pct$dY%)uAMxeQn$Yyu_6tgX7A~B-L=TAzV6^14 z3-G{WJ0M|IE)LI{PUyTKU0!A^(~5VdZ5*-!5Yk7xx>;SpAXN?z`1*HB+(ABIZuL5AfS9nNg~H?uWtGEkFkU2fo(A9pamw>x^FiZ ztfvAH6t}EJ+M7U9*}Rsr#J$HuFOJoeMG44#k0_65CKm%c!Rk}+M=6@oKu?d=+=GRG z2Xr}DOl~BYPH_#h^&*LD3C*~R%dr0z(hiX?q&$4h)E^6mMf7T z2w2(U)tu%iav=ZreAhG5}Xs3UZq9aw(_FDD8@1}-Q|e&OvqKGG@Ek;TGm~u^(zI7Mj(Cob@5MV zQs5Wy&r5@?RKEp zrOj+reBU$0*cAir)suMWNG9)nMk%p`^i&cYKN zjgGw(rG54EKF7cpdz{C=tJK<|6dP=5+4hqh@%z~m#Wc9%m|S?3PFYMqKJn`vvfF={ zEh~^YuKdj6oUychb3NGYPjqP3O5f7CIy@8l9XmM}k}w^Kd54e9U7!VzE$Mm>WuxfU z^d9V_D1#>yj&eU-MQvW60|YNm92(OjQi0vcA993t;&!Jc<^lf65QaOV*CQQwu2Xg> zo6BqCdri(t!z=JpW!^Hsbn--wS5Ml9@Dl9g;W8|(p|Vm`|32pdW>R8o_<8xUuTRA8 z&fWS{tB^PXz9+vPLeG3^hS}>+V(RfFt(Wz?96Wq>)y+4_j%{&CwNFIr>AclsGq8^o z&pC5Mj`xeXC$9sGuj|Ul$_%%=;Nvnh%VkM}H~>GQLh6Ez^2v`X5e(|L ztARiS$=Ybhxg^X^e&^M!jSL>bS~6>>YhC{HM@_M0*~YcI$--qdUeG*ZSUb~D-6~#- z2%EpJolf@BMT0mwlxHxB8nJ*Vfr|(^jq5OC0 zbwp7Jb|19m8OCn){JwDCbPcaSR(A4gmb*SH^$@`Ae>z@oTe19r%CHDc>mdldl*n)6 zeKHk4357)yqXLpmFfQ)FS52ILB4k*`_myn@T3sf9?(pkfNa~}aoH1~ssh%;D`}zCt zEZE3pnA0sbmbW}GVBu{VqJC~*9Im9)o|AojJpHdccH^A1EX{;B$RT5W0jrpxgA~|( zCbNwVqS^O3Z8@EhO4RkjzREN>Y4F?9=!TWOWO^2=ZXY=>`Q+4-HPQu$x{uUUM zpCUbk&~~-l@*((G(pjvuAv8ZE{SkC1m>%R}zal7%vpQd@K#6v>o7#G;CJ}p3Xz^rj-!g^o^@3K)@)dKFLMJ!OT!l#5`U}*v#}Oa;+xz@!&r3eo{O`VUIzr(^gxavS z2lSs!zz5o!4nmdjK+%^Y{G1rnW(=8BZcz;-@uCRbgGFu2)-&>eysjcp|5NnzKRf&Y z|6vW2jlP2zR4ZQMMVz3mjUEx+Qw|72*qiF=gv{9jaUKD|3l_vl=2{`shgK$qoPpU3 z)p1Dq{OM*OCy-AQ*;r^)FjZL~)=?s~)LRGH()8BzZ9E-97na5%OyJZM-;seBg#H7( z37Dg&tJ>X@WBTBMux^&!B34@cU-?Ey`^3_27)z;S5Zn1gFSb96^)+x5B z3UA~B;~K$rF{aWC*rgEKMGr-yf9q5RYd%w03ghK+Y>_%kvBA zCIy*krl!H;AE0Hek9)ka0jxj^yN*Btup87F5B8yPS2iN3fgTfW3wv4tuq~p?RbV+1 zofXw<)uMX)Dyly4#8!FB(bn@aZ0ngULP&sa0TUX!$KeEEL^&5_uAhs-XNS@JLVWn| z+Z(?@j`j;s1o?}A{ayNYvz8#%!Tue2<6?U94zUVy#wA{mhOiE;a1-ZSo+n}Qog(z^ zo98#TXB(TL2id`jSB4basI+H+q^c1$niQb=?eKi|E_TbN;=g03(>P`|$Nf00-uU^O z8$loi>H-jFf8DDUxsw=psaVZc_yV#TRV~zwi(@}~%_h>K;c7fek?xA^H`-?R!DEE8 z(Y7M)VV+;}mYhCKzUS?gjTKATeKAEN;zmYTsbwPr-4R?dg{Oe@DM6l#Oj3|pPU|9t z`CHdYbG)?;TQ={xpYg3HU>^HQjYgK)nxLK{|!0umr8G40lZH`uq-hoB;0=?C=fPBySro?2(CuUyd$4D&J4Tehm{7!FM z*Jz;Jo?G|X+E(fCb1f`~64L{7lu8SDSc#%~4|AxOY3DxKGPrg$g|jRVl+~d$|0MaI z*r`^!_NN>p3Px~rExpsOLOq5u^A$te%>2>5wWru@#Y#Y>+`H?{_jgIT^*8DXDb)0@ zhZjaYnmi@~{s}I_iAc&~c;YjI-4L4^niy#?(Xn7qhv{Lxq??$9mx_v9shhX+L=Ut$2RP|Q~i1;o#Ns8QDz*P+b#OZ6f8(ybe2w_`q7PWx1NC!(U+Hh z&b!TER+>*|(A?8)zt=@#8|#v+|G>0tSBLso@t#B6orZ!oOXKI~xBo4eQh8P&wEPcU z<4h4L6p#fEOX;H+eBjBcogDvpo@=ujs+f6d%X&e5eAFkTX>O@$xG-fyO#|WZr0v#} zGeOVrmn@peChVfee_LC(Nadmh^dddgQMn1DpENlha+>pF+V&B}sBE-}Q|`56xUVSu zw|%S29H>U(pOD5IyJZ}vdfZ5=5>hm#Kjx?BfljvvTqY>kF)){2zXs;5yP~KIxuv_SzeX5N@}t>ex+hp`FXmq)Oa<;s&=E^&0^ZU+#D8X& z{vpb>z;i|EEZtaZCcdgqFW&x~Ft`68pXoLG(ZT1%@z)w69vay%znlxTVlxaxy)&mg z%-|)|j3>|WGTarxPWR_%I(rM@y8WMUlW)gh8y{1Jkk>u!5 zcq_eLpiWiPEoV{oIIF6V&#lCq34qsc+4H)-!OH1ePu~?_S@Vg5l;+f?U>rBQn4Yh8 zPEumw;mwxhnnBAH`N46xYCnH2#3P&)D?L>`jh*4n`)=z#fNv_x0IFcTe;CAFj}>r)xG}5*W9~PxA<*x z;|P0eFzq{*R6C*%Z#SdtX($jW zha%_WL)PY2Cok?u<+G2_&C0?r%dXtsCUNqFNbuj&SM6>*Ew1$I6^Ke|_t%e_rw@pI z@KR_p`tHiDoWu)>&SFZ;K}#NMr!Ld z#?vO{BX-nn&~b-6gUqfQ5Y;!4R=C@!ltc?PWT5W|4!tPh?nlL6((I28-c{P7z+l}I zUTUujBK*2z3zlQ;)RHv(7=qgh-hA9C_-$(bN)Ja&RX?|JbnCa)+5JkK{aa;O%he51 z9WlE|hW6W6@`*cf(hCiffkUH8Z8tPJ3N5wA&~|4VENKMapqBMTKZMb##NHg;yaqZv zk*mcxu-6TTzT+%Czn6*5!JCSgFC$RF)PT`?X*(@rYM!J#<`Qba=FhypD*GImd=5|V zKws1;ZqrUkw^Y(o-mkQ8zQubiwt@GB%j6Z6?D4$6Min&F_0k`T=_fSuzM(I5j|y07 z=x``IY{)rgX#3=1&xu-*J>gu*&QLp{z$y%N6@<{5V_&z$Y-Ksv8Fx0_iCfyjv*U(^ z-;L}fiE9xzpqIM44!5hXjTob#MD}*t!0=c1EyL%)oZR_|X|g#?{*Vz)8)(o`n`QYV z|AwA2ondO$6&+`vk+{QP3wOs=PUCQXOU8+mbXkLr;-%7jsW9UmjMwhp8%cRPPOKNY zvWK28Rs(2W8}!f?|s_b zmpZIA$($)3X;wr&Tkn>rf@b$cV}A|(l(_iPhuv3WEHs)kk-uUIHS>eIqW#=x_}9ft z1a+0z`oY~^Y+7k^{R~0LY4I9eXU2{?z>7Ix-#?zz)RAdCkZr^J41Gc|cvN`^Mcahy zK6l(%2n55cvvp9Q#0JOWCoN?uy zYz9ZPeVhEvO=tW{cMlHpjQ&}_c#GBWL`6qudMs~iUGbaP=YK}-x-!QlQv73rsm0;q zP*Jp)%*nNAa5-v}0xS5nkB0W&ZC2(}Uea8Mj>i|aD`XZZYiQ~z>ogQRO^>vG^Q=9A zu*XJPe`#{};HXlE%*!Le&6Sa*Z^oZEdB-kU$BM~);`gMwIL#zwHM|7Zf9XlA{4VtKe zhVWLgO)CC0Aw#enZvGuCYB|c}d-P$jqk0ugk9P``T@0u~u z8Ct#~z35m}I+-`Ee#Jes?qbrR7^q6D-ouua*hz~R^WMM#CSGl zdt~eNTxHd6C3EGWz4dVhC7Sogm=}e(Yz|P2O|y021ZQpCwEP&1#i0!$oOGr3;Dpco z`AR}%zItyby=X<@$PwBzg58~GPChgw-V`lY|msxqPx!3vFBD04$W$e zI>&xoh<~2{q=l|lOex!ko7i~F+*!0Oa#XSDbeei>@nl__VFlsFcI7-ilk#fgV`9p^exBQZWU;k6%b115`}GNp=I?0~J${yZ_2<%wG5Z2UrpV zbH;xGOA=WgOzsV47%qxZA*lrTHSm`lChZdD z7U4L%5&3~pB}SG;wP75Xw{5OloMASslXw}m5eQ~r23U83D)`QRmz_tKY8yZmlknFz zg0?Xo3yR#LKGZ=8is!#THu1?BW<{R*u@~FMlDt@>mp7lnC94&5%hu~QEEzgo8HC=d z3Xcc83|Qy`m^UV#W`B=m|7Y*--^MFSVEYBhQKr`hunZ}^gX!-tuxq@PRNz3S^{44#3V6ynl(60s(+IF!1Ka zzjt>|$pfks!{j(niP+t98cXd_^YtO*lRLYjf1?Jy27ybJW?<_Qi_@EMJ}Z;K!S8iN zMbE719)l$1HJOih0wAMy%^QLjE;0nz`|hi-bT8lS+AV&PYpn(j6~5-#zIqv%9Di!W z2)IZxEar}U&gSQ*Hn5;<0g>i#cR@Q?v6FG7RZbNcUu@)56$@nAM122YR;ExD`~@Ll zuUxaN{L)zhd`+LeU-**-7xn$qbj~m=Kd!boh17&o0SD1{_yCFOB#4_R^?u}YQk7~gxRjU7pDM(%M38ox-SFRh~c4;?r^npS(4dpVIx(_U7ULT*m?iO+DNol;C zjnDv0W$2#w51{3?x%o`Lfcgr({up;UJBy&YfJ>nQ&F>t+-b!nIePy10N@%09Ak< zIJ% zqnzB0d{O%&omb1-@#tX4xh!Tx*^Ux@{RM_G=5iC(NhbkbKl6a?_1W1 zX9+U_)LYleP8SiAcq76H%IJf@?6pYnIWEtkN%UON_b&4hSk#$K*2i}MagH)sfd|vQ z&-qKq!5QOm!KGd@5fD+Wp)0%Nb&HMdKjr7SzFk{^XDdW%AUKq#?zzx(p2NrHj)R3s zFD!uK_7VV0%${B7I?*3&F3|xB4Y80&E6n4nk%F zR6q@K*_>~!_!V`s#G(e;bKba=YL)A??A)8p~Cx-Y@wxMVSF8 z4D>|(jj2cD(-l(|R&xbc#IDd*%KRId4K$sz-K((4j0ovw=j(jpH?4tAt@h^FS+2~3 zUC2HP8cs4T3|LO70)tv|i6kpCA;O#a-)~K>B_tl@q^cK;tH{|E5pIId&3h0zt81Xs zQ;|)*4OjMKXtKyKW@$zO1F03F*QVU?a(CRdv0`(F*?6Sc>8BvxZU^BgwR1g|9d!!o zr+03<{=jghf`zcpv|a*w3;g1_sqZ0HHISAb^efa==I{!hO2IET1+gxs*46dl!7q?I zSXbc8^qJGazg=v4WuOa%nA#!MZ1_y_zmm|bvnct+A@TpOBs6O;f}GI&Clo$NXvmeWHG(7g zqy}B+{%2gmLxiun_BubwFyVRn1UKA=2er#->(lveIz$El7=aZJ72Ie4ujq< z>E~d$Eh1$N8Vj2vieD}PJzRwWx_t@*OY zs}X;Pbz&hx6@*HIC1>UsWAJM^9`N$=@+bTQxZZ&j&p?qnKG=;guOIoQlqVZky2xmv zyw>4$q%5Wic1v8IOTA^L1=ik}w&jG{TGKI{exNM4eE!-WTA=n13Dk?u)RiGW9N5oaVf+XvmliDzWIB1Mbb=voSJpyJ{}1G7W*WwU%WeOhZl( zd625jG^Gr}@j2XgoHbbX?^a=DvOSNc1HZIn(9eGG$y!w!{Ig1ixQVz4Ib3WDk}_z; zfZ$c}7~6D$R}uSDUR4k(+5!Qxl&(5L{Yvb%MA1XzGKz&u;Tj3@1mi{9n2H5&Jn!znfF0PxGlWG# zXuBab(UeE1mlGp2pXU!U`t@uMD3CnUAJIF1xJJMKR-72;ELwkFTU|7IcWg=(gnG^p z+J7c>z|_C4D|oRi++1N%foSVM+9J2Gi+iT()HNd8qpzyQ!3sNZ-vsQZ$`9Adn@;`X z+qR-bwm*$K27jKH-x1=c?6UlNr@dCxrP{tZ=s{7Sd~0l-rrBVEku|PNgHkPo1(*k(wRp|6qSMM9;NIzt)smi#E_gfPu0RaU(2F(+dw!O zzCQYK;*4->TWT_BB{%{qK+}HK&J3ninV|J0)3qA1RKMND?nll9re#E1o&AM>&_N zQ3i|Ce_QK9dcSLgQj%6c2}Et*XvD9*M!`YMSN<=ug8xn;($D;_s24Dfgp|BIVNXTe z?OhLa?tPl+;0Y(^brihrJ@5Q!Rn2t<`ZUe z7fjb`JWkQ7zEA&AMe_7nz7Yk-nDKm#eofXRlZ{L_&kCuPtNPamp5ncevk|!wg=Wj5 z>QXGTOz!a!cpAjEWsT_p#U=@@x|z@iLqL!AP4BEzFiL8q-(BA>6&IUhZ5jN-_@JG7 zyA@R3HO|~!%fb-ukw@Ye$GNV>_G%|!9pA6)pON{GGn940$_b8~^dkXJn*$)N`4QlP_||0XvO&*v{ao#too_uG7VK z|Ll;N6jQ{GU?)$U`SV>v0!k%BNkZ!6h5_h5nn(zJh5C~r=9a>yrl7Rl=AJm6)BVi0 z$=CS?5c)9lOtQpA4$@^$K=G5J9K_CAdB>^A_Ut*g;NP?JlzTK!ayz^SxpatvJEam7 z1@EY$8>FOdI7U-M|dO6Jeca#0tY7ry@C!V8snql*HGh?eZvo`oE* z_3R905i1DO`<8Blp}?orJ&*3~Q8y}RKYHOgT?m_EZaAv1!kLd4wux))zze<;_rdA~ z>|3ZSlhg$|u?9zkv;@`;;p_MZ*`VV74OLYEfj8t222-G1SM@)Q)cZB5+dWy2>|`6{ ziPn&}=g5tLVDue#d4v=^_vK-Je5|l@_f2|anEtu1%Sgqh@#SaR4WTQ;e*|rP0mm8| zRu)S~-JR@*xU&Mg#pJB3qnT#h0==XgArbplu&*_SxMZI#3^2^$65R^p9e=MnR{T6c|VsIHYuAW>(ulDv!Q_n zbl@|uh$<4WZ{t~>Gx|-(iQ*XYtTT`-H)z|JGn3{|yCke`xr@ZeyFOD9w61F`yFREtA|%Va zJ>y)eNncg(?@4hBC~vmM_kwi@eZa$mhH~Ror>r5(;_Rw@xgzl{eQlY6QtXJ6tC{?05S;ll`FRwPRN*&qP|2BnI}rgTKj#$+dHNm)Rx@Z&Xqm-f1#ZG7gHQSP{6=?IhgyS>u~>feydm7*qwest_IXBMwt;c-|N8$gMIm_NQ3~8iih-_>5$0=cG{R*9G-*ni^%bN$E z-gl`WZiY9;Os-s!Rd!>U%hhh#yXp!4x<62|>V~ugN`h80-)l-r+Y4jv4{OpIq~S$^ z9BB{?VV$Q;HC8-BXcW$HSW4#6BZlZ?BH{qjXI^zqZXkjUrWm!*#BLc{E#t;~3uXK%}&r#q1y9E<%<@hae zr|7oVD|d&kqZX8(IbxG|slD)dj}+=La_E?iwIylsLDZ=Q8&4MhLCZo%%cj!(io{L$ ze3kfHlaU6TLo2DDj+w`FV4^=xOK^KpV?8&foPMwCWL)OjelGzcKPdW-Dj@lT|0o1< z9g7M&@Q>QJzK9(9{6EV{PeUEFkb))uHw(G%qXMIu0S6nXKG~x^nK+DTH zt6$e!QJSFLDhOvM+)5+vKHa9xP&~ajl>RE{z>gB`3+}>;kt&<0K==JKwgb6PpA)@? z)no~(V#`sagueQ9aO5g1-rr?DxZ>HGI{`34wUxQ?b(=eFdv7H5M@IMU_g=tS_pRIhXi%oi*< z=XMIu&;q7!`43*&toctN*MJdB9sBNj)jb`PqcE+N?FbmI=wDk1Ri0(R^M2~<}ke%>2@6xa+D;n5a~;}CEf zC{`Xvf!470m%8CK0k*&UM)&TFPZDp(J~r?|0CM{Yz2oSFQrR>^jiN8HTMdgl>gX?FgXxV@V|2uWeX zoEpZ0b@6DzO-&(|t1No0h1idsZ9GE3*iv`JW^vbanS5D`5WFK(??k;$dQ_bup)iQ` zvG)3)3=D)8hOc1dY$I3Lh7C}BOE1k!nAIkQ_Fh=2+3*V?m*(3^Yi^q5o?H*`u& zEp5Rpwi;i1loh~fQIH=QQdCAyy6|i<>pQNs{r(5xBww^w=!<(wdD%FpB2AUys%?Z& zrraE9eKXXy?Yc}-70<`h&VqT6`%hyv>#ITqj0Q}%?NDEYS}PrlbnUH4gAG2$$x-)z z=2zI@tx#Z-rfD#noYr-3Il%8V9X7JJ!}7Z>C|W8RwH)Xnp-L-z@oRVgVcA!bfR6ayx;Z zRQ()Tu{HO+@3^4>w!co};83dyK6-Gu{HCZY`G59E{oAHN8Pnv^8V%GJdwxDmw12-=+ zfw>;qR|cud5fsK+VtK)YAMqV*glG%?7dn@i*LYq}D=legc^!llw2s%%32_P#dGLeG z!UemaPxe~82_5zQ`XyLjX1a8EzC|h;KTpN`V~r>X`pc}l(BrMaH2JeJrw8^YZ7bpg zN6wT$4}1Qu?^XVnG7q*MT6;)xq-q`u1se|zFhR3(JUqU}qJu)c)J<6Vzk*)V`b|J$ zRy&3z+g@DsEAvgX;D70iSZyG7boK5_Xo*lf*r%Kd?{`EaY$SBPpNLdJ_dd; zG|(Tz|Ka%^FDRk<8tU>E_ETiXJ+k(7S`hvpVg%S93bNRKYiRcwO*WSU#q771-o8F2 z>+Ze3eIX6ZGz0j}OV4gPO>T$+I@{pq)|5Tx7MTr({EIT;d5JjS!G9_)Y@%2tgQ7Nf z5L}OB&?_k_oBpO)ZZ2h@2u|EtSvJ#z0OA6t zi}S%!7kV({q^381_;A8Qj8O$leabe0c45N~B!wqThk++#n`H+#HN_zgkrGl~lrOBl zhg;!rwDD~}BfKf=L44_mhk4%}Twj^UMi)I#fxn~3he%Xm4z0N4YUz;dAX#e*}o;37xabK0})-PgR>oFe2xB1flZcd788Zk~D ziK@leo!z0oe{H^rB&-^b)SK#8vp*}`ay+Lc994rUNPhqjVXlJ7^!?F>LUS72Fx~gf zYm0)4|4acU1K%u+73=6VlCHr1Om6uI`p?zL^x{o36TKni0d53E z?2)7y-toyV`G1Avv4cgE<>6TOd%ZGY*yH|QW22g^lge~UrWIzM%|Ja*ZkJ%q6~6f6 z$5F#0GD97@dKncxjIbTp4IMt5*)>TakUh2u}9I zaW!q}=crz_c>bf4XMz?t%Q9Rth_x&}PAh1nov!$@m%Mwp=Zy6#JELbm*AIo>9I8*5 zxnIPPqtfd1lI(>@wlRA|x0WXKb_=WIlhge9#Tr&)nQaj%>b~=aj4ag4ljrmn)3%7X z;}RokxDpB4_q*Jit+kaK-p{bjdz-R!RK}ah#XV{CA1NxdcRT!X_u8A;Em7Q;p-2^} zV8D7bXX5bj@3CN*e;y+L^E{_-A;XI^p=}!x-2QiFW^xOy38f#KlTsgzpHetC$nJ&R z$?ym#{guUQGBVpIeanh^Juo*mU)`P5gl%4+jMm2U%H_5iOpoP@<%z1f!9q=yyFWkH zy&QN%w^hV-<^~b>A>5QXM-{i+d`{IyzWvIFuyj%T`we39GD7+fWX1YqyV+;>qehH5 zdw*E|4tQq4DYN}|y6Zpl{eOWz_Mbzb-R3nx?C$6eG^Dh;R@!f%&`)lZF+w*+^>(}3 zO%089P{-sy*wjp>Rc_t{#uErZ^!G*=z?wxsGH?U;X`zg%WS0X9rP4hbW>!&LiZpBE-y^!Zthn? z!VM3EQpAHu z1OHGY$p%e{W~wmP;>Wk9)WO`YqxDl)P%}AIXwowHsLBX0bayOQbO?g$GZk$XG}wG2 zyu;UtCo~BkJ3l@Y3KEi}$4~A;^BJQMJX9mD!hwk2XLh*Bbh=+QneMyd`h{n)7YxDi zMAgtjXL+mY%qy0R(5ooxE2t7Puz3dO)FF*?h)JNcv$HPS2Y6O+E&d9`qV4SOwbYu){TqU%A{WC1|Uc?TAaT3qF zy|Nr4_F4&^%X`l;- zxDIMzOvv|4gp~F2&X?_VYN!ELq25sdJ%e4b7w+$iec5D+->wwT&gr#%gb4Rh42~^u zFb7Lq{kNO9ug!&H=5TT}>}TehhLb#Lz8K8|P4w3O2v!$9S4?R-yzIM;4imt06H zLajOPsIuwTpEOW}jB~wVG;oa8B%K#S1!K%;)F6F>yoc=B@<;$_0hfOt5{k8d-}FxM z8|DGI&Dxf4clwz#$acY-k;(<~&G-0C(+Bu>u)}>p;IaXB6+JvLgasksmr%pvf{?*@ z1y!&O9t-*}xCi5ZY#|4|cg6qaXX|~jH=!R2Aju0;wEeqb=Z0Fbsc9|vDJQ%mfA8N~ z!8+xJxxMn>*WrEESUM!B#UggLW>jtssx2hso51Rl7t z&CPz+#7A5ql#2+18u2NJ3w4Vkmax*>^t8g4^uV)9@3{#R2b;g%UU4?c0}q%&HO7%1 z1DG=~GY$tl0v@bK!N49PhkJpNM+ua%3afGh6K(KZXew!9%Hg36umoSJYU4u)A|296|pGI&o+mfJ}q|JW_R7TwMI<^%4}#kD=3-${l6ru7Uo~<~jH^>qYgW zimM|;Ha(|6Jlph|c1xL~7Q9UzA)qQApR({dyVqSj;s2BGX{)i8liop zTqgHTzIuUavN07yetP&aTcoj=vHWnAc@{!+RXa6g?|f;IGR+1P=@Z1TuLS~ecBvsj zKjNz~UKSHqLhXi#YSrBygI?Fg!I&l|Ax_v%=?EM+N_lMxF#g+!-e zF6mnwmzPS*dEtVVgXALx%1fz}FGjl{^jsN+k^X!(l?43zy5$DG>ayWyGSRA~t}3D8D(IFg z!RG;`W2HSz>S$jmYvLvmM)_a-M!rHp(|H3E1Y7o=k@F;wtmmsLrX4Gxu*5 z-0_Yk*pzuPm;{Kx|S*ZBl>ndt{+(+K?U^L80W;g9%D%?0>P&-MgT z**`*UPI-db{1=npj>SzfTlBZfY&jqdH?}#D>f7!>s&jV#-US$JYO1TN+mHD{Riv0xVcf#ve1f1XwQ7ZBUul}vREs&~f3;9ltzlh%=xbBbSU(*uL`^+1wLJ1bTkMBzeV0nqN|O4%!`OVQ+<}&<@mkVfd3Mh(r>Ar_ z^e4Y!eR)wp;69Fb)G|BsB4yrr*DzXp23(8FZ|sxmwApZ;|>o9=Z3vcmH|&`*!C0CYkKDX4b6rTfe>c%uq+* zu5pe2kmBv|CLtB6nmf|^o*0`)-^q5vbY3_Wt{SI+@&=`fcb~JhA8wep>K;O4;MGsp zT){#v!?VAX-=1@q0P!8TIu;eB#7p1nY&^$Y4)RNv3zxHSqmIrJ;-tbEuSpK32+Yg5 zcm>I~kG=?7SgPH)5YWOHVpW#r-tM2`s#Nq;pZihUu8pv0)*COxA&!bb-lj7x>1xTakI<&yZBrM zNG#TeZmmHviX<0$kw7b}w>&akCf7$G~*7QISN~pC#B(^A>-qGx9n)^Em z7(pbN&VW*-g8fF2_%@SNQM8y~YEhN6TR)XOhYlhx$e!JBL>9qFFynT+jZvch^NF^x zB*m$wia$wCn-vIR&1U!Bll5FuQ>0LE!**4zgON#p@JfqI za^BSrcUzuBDQ?7%m`cikVw>IhR#z1?mDbCZ1?Hd;+U_mQ&G}bvj8r>fQc6>pJ$$C*YMkXbj?PaR0e&#Z$`4OHJW39Feu_6+n!6r-ImDPIyLo zqE~MvSL5uBu6)7qP*E*xnk%L9z*HBPjI4(#r0OnPAuWBO}_}}ba`j%$nFGo&f{DWobV2aI-S_vKK0iNcaxrf&jE&T|NTK_|^f6E2{90r7zs(Y^m)E)N|`C24#Gkb1%Ha7h=y? z1;gD9>CUqtX1i0O4Jca8ee-*`Dn3&s>x`A+!pZ6SB(Zw9gGbrukKC3F95oA8hO~xo z-%pNqx6LD)wS^sA)A1C)wFy5t;)da&__E{f&_N;1=@N|HVzx)O@f6=HcD^A!kukLz zZLMWiOeNud@a1~zqmBo?y|tc~EMR#qTfo9Tfd&uRnRH}RzoLtd^{az$1*&E0T|4j& zc4TVMUb#YMk+QGxu8144`I;m)xUXX z5PqfQ&vsjA&0>+*^4C2{AZL?~iek-x71YwOP5$7G?}n@zAtohVRjnOJi%y$WXZgNl zXP1LZ7E|zha|>;{p?ZcN7eX-PIS-xs#9xPl$mnguTI*w_-?X5$ZM0Z<_&uunmSR#$ z0;{2ERQYREcRW{!!XZYp{UGWJN7!HTI&a$YCfmLRG+OL%+PEvH)^xx% z4(lYts0al90E-9#aD{U@0UjWF31GA8L+6HZ?h`!7*{eG{37{tAsTA{H(Dawib#w(x zgw8cE%TPd4FK&4}8V2^~G!s49uF`Ng0k6DS< zJoDl?pi2R0BjTyMwZ)C48E5&RqCuAEoE407juJuhB`~`RYu9V15^o@VDZMuxd3F5y z$1X2e@LKQz?w$rfa(_z?X4X@VtP88AJ#3G_m&j_h$tvYn);A8(g|qCGpxWwtujMGe zPy6;_)zoWJ=|dIzU)tm!?4iZ{?Q*%A?rRL0eTcj)Sf0_hdTb84;cizEbZa$LB4)R( z)|R)s%Jg36f}NFTPB7A+y=YO@Kwa`CLg^2g9| z@|LDBhQ(|_t~ok7i5vsEUU1{~h3yE#ti9-}_rM2a-hO>=U|8{l&GIJD zpATpN@Vb*wy^;?nFAvXZINsp?ry5QRP}XNgDHnZPhEk5Q4ZvH#=&1n98UHq5+jjYd z(bbJ&!YA$7xz-A5$w z_b&)+@z#C_-CiW!SAo>)$}O~wqn+EZ*LtxBZ;nG4an;vxSX(OuzEKSs%2AT*UXS;$aRuJ( zqxOooU>Uul6Fftf2uiVs2Db~3yZ+@IaDgQ#QU^d{`Q7N&)KKx6#1;1>g8ty0^xBY$ zG0Co<%h8=vW3Ba88Oot<-bTIWi_~QO@D}}?NA`ne0*^<}WCA*ugge>#QS3pCPT)9P zUGpHI?H|`6+1cmMFBGS~q%LO4YX0~rJG+ooZN)n&45not^_{1Rx(t?TAXu-;V+mKD zy3}ADl}Zo^CVFX!7yczQg280r$T#H5xDy^ln;BKgc@e9kTc=utT*GsWv*_wR+6}#q zi+_@g%q-bIu_>O*Rgcpp*12yoof@wqX~bh7fy7a|*04316F3#MwsttH zIG$|(cywJ=*XX_(PNhjp%cFXX*pXG*u-_gYYc8QCU^oZYR1hS_I(Yb|wHPMS~*n`BBy_WmtvkNzW;F^q=zbZ9NLGf7#OJ z0a(Vj$uL5b0b5`h{XF^gxOuG`UsPVw{_e72)V~oxr;#n%CI~X>o-Q8_`|H^Lt>wFb z{|x~MaDzd`uZ-E|7Gl-g*c9L8JIkU&QjZvaPeUYGAPO6CP?v-=>AVEEK5d%!8ivZPdN=48Ex&Bqwf2fGx5&0Jt zp%=cB3nT{9rDWFDXMYU~{I5uGGWGGw-cirpfA|YM6%$M)4!74tB;dyDAvZdhfvrG8 znQGRebk9VR+0I?!a4UwAm#6>VP;eC32i%i*rSjyH04Q^w&o)qQVRN^)_z2%owOg2Nz)4r1;5QwQ z2iZp^G0R%a*zstNXO_1Y?z9o&ELgm7@8SR=WuZSGp!PLrxBs~)lr;gDM0dGS-+9w6 zIDeT&tL0mdO{#{2c>C;7Wz+W707x4P!dCxP(Xf`+UuXRGX#}B-0f>qKc~(^sXhq8_naX!=tg;rZm;tZN_Q`yAcuXXyb}hb__lv*FBM0KOTaKM;V4OQaCU|%G)gLBf z5)U#@N91s@aT#%AV?#UAaFe4=te z525ujKaY(Pmuu`BlU3-==n>sE^o-=vQac2Oo!F+in3InN^@!+?Vx2O?e2ct-Pt6vX zrC-yfbB^~WTcS!CeuM)ah4IUMIWW@?eyGt9g+k>wZ=t%B#&L#MK3t**BzCEsg{R{3 z+~@c%cyvrnz6eV|p%v&>;?+cHtbYOWqNM9R944}`YJ_z4kyXgtm+Vct!MfSu6kwcK zbTE~8{1GwD1Gro1Z*Ol8Y$w&YPJMw4a^94$WiOW^-0QrJNL?pLNjZJ=B_`Kyet&0a zccB+}x@01Bk3b;6g0EQL28{O#1;ijr{%&Y>I7mqO|2uWE&H_@gv&;(kEp7SC@6f?W^&ja}gtw>Xx(ARj zZOwHP_AdPW17LoEV-t`8I0DzXfzPLMa9W^vz%EA#6t@9h7${x>R4`C{_6j*Xxe*xOi9C%q2 diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 62bdf664f0..375d058557 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1411,6 +1411,13 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware +[DeviceStatus CSP](devicestatus-csp.md) +

    Added the following node in Windows 10, version 1803:

    +
      +
    • OS/Mode
      • +
    + + [Understanding ADMX-backed policies](understanding-admx-backed-policies.md)

    Added the following videos:

      From c0bb8f48d6d3aede76a7cc3a1d97ac78e2eeb89c Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 13 Mar 2018 23:19:03 +0000 Subject: [PATCH 052/138] Merged PR 6349: Added Browser/PreventTabPreloading policy in Policy CSP --- .../policy-configuration-service-provider.md | 3 + .../mdm/policy-csp-browser.md | 57 ++++++++++++++++++- 2 files changed, 59 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 6f733c2214..204daddb5b 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -498,6 +498,9 @@ The following diagram shows the Policy configuration service provider in tree fo
      Browser/PreventSmartScreenPromptOverrideForFiles
      +
      + Browser/PreventTabPreloading +
      Browser/PreventUsingLocalHostIPAddressForWebRTC
      diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index ccafd7cbed..79d91ff2dc 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/12/2018 +ms.date: 03/13/2018 --- # Policy CSP - Browser @@ -117,6 +117,9 @@ ms.date: 03/12/2018
      Browser/PreventSmartScreenPromptOverrideForFiles
      +
      + Browser/PreventTabPreloading +
      Browser/PreventUsingLocalHostIPAddressForWebRTC
      @@ -2150,6 +2153,58 @@ The following list shows the supported values:
      + +**Browser/PreventTabPreloading** + + + + + + + + + + + + + + + + + + + + + +
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4
      + + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User +> * Device + +
      + + + +Added in Windows 10, version 1803. This is only a placeholder. Do not use in production code. + + + + +The following list shows the supported values: + +- 0 (default) – Allow pre-launch and preload. +- 1 – Prevent pre-launch and preload. + + + + +
      + **Browser/PreventUsingLocalHostIPAddressForWebRTC** From 4b4bf0403a347892651488e6832a96c4b3e12d4c Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 14 Mar 2018 15:21:49 +0000 Subject: [PATCH 053/138] Merged PR 6353: Remove system/allowfontproviders from Holographic Correction to Policy CSP --- .../mdm/policy-configuration-service-provider.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 204daddb5b..c94b2fe9d3 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -4546,7 +4546,6 @@ The following diagram shows the Policy configuration service provider in tree fo - [Security/RequireDeviceEncryption](#security-requiredeviceencryption) - [Settings/AllowDateTime](#settings-allowdatetime) - [Settings/AllowVPN](#settings-allowvpn) -- [System/AllowFontProviders](#system-allowfontproviders) - [System/AllowLocation](#system-allowlocation) - [System/AllowTelemetry](#system-allowtelemetry) - [Update/AllowAutoUpdate](#update-allowautoupdate) From 773920cd5e8ead05a3e1566ca384cb950b26c1cb Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 14 Mar 2018 17:55:32 +0000 Subject: [PATCH 054/138] Merged PR 6364: Change Store references --- ...el-windows-diagnostic-events-and-fields.md | 28 +++++++++---------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md index dad1cbe857..e8411d0b05 100644 --- a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md +++ b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md @@ -21,7 +21,7 @@ ms.date: 03/13/2018 - Windows 10, version 1709 -The Basic level gathers a limited set of information that is critical for understanding the device and its configuration including: basic device information, quality-related information, app compatibility, and Windows Store. When the level is set to Basic, it also includes the Security level information. +The Basic level gathers a limited set of information that is critical for understanding the device and its configuration including: basic device information, quality-related information, app compatibility, and Microsoft Store. When the level is set to Basic, it also includes the Security level information. The Basic level helps to identify problems that can occur on a particular device hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a particular driver version. This helps Microsoft fix operating system or app problems. @@ -1723,7 +1723,7 @@ The following fields are available: - **AppraiserGatedStatus** Indicates whether a device has been gated for upgrading. - **AppStoreAutoUpdate** Retrieves the Appstore settings for auto upgrade. (Enable/Disabled). - **AppStoreAutoUpdateMDM** Retrieves the App Auto Update value for MDM: 0 - Disallowed. 1 - Allowed. 2 - Not configured. Default: [2] Not configured -- **AppStoreAutoUpdatePolicy** Retrieves the Windows Store App Auto Update group policy setting +- **AppStoreAutoUpdatePolicy** Retrieves the Microsoft Store App Auto Update group policy setting - **DelayUpgrade** Retrieves the Windows upgrade flag for delaying upgrades. - **OSAssessmentFeatureOutOfDate** How many days has it been since a the last feature update was released but the device did not install it? - **OSAssessmentForFeatureUpdate** Is the device is on the latest feature update? @@ -2195,7 +2195,7 @@ The following fields are available: - **Publisher** The Publisher of the application. Location pulled from depends on the 'Source' field. - **RootDirPath** The path to the root directory where the program was installed. - **Source** How the program was installed (ARP, MSI, Appx, etc...) -- **StoreAppType** A sub-classification for the type of Windows Store app, such as UWP or Win8StoreApp. +- **StoreAppType** A sub-classification for the type of Microsoft Store app, such as UWP or Win8StoreApp. - **Type** "One of (""Application"", ""Hotfix"", ""BOE"", ""Service"", ""Unknown""). Application indicates Win32 or Appx app, Hotfix indicates app updates (KBs), BOE indicates it's an app with no ARP or MSI entry, Service indicates that it is a service. Application and BOE are the ones most likely seen." - **Version** The version number of the program. @@ -2836,7 +2836,7 @@ The following fields are available: ### SoftwareUpdateClientTelemetry.UpdateDetected -This event sends data about an AppX app that has been updated from the Windows Store, including what app needs an update and what version/architecture is required, in order to understand and address problems with apps getting required updates. +This event sends data about an AppX app that has been updated from the Microsoft Store, including what app needs an update and what version/architecture is required, in order to understand and address problems with apps getting required updates. The following fields are available: @@ -2846,7 +2846,7 @@ The following fields are available: - **RelatedCV** The previous Correlation Vector that was used before swapping with a new one - **WUDeviceID** The unique device ID controlled by the software distribution client - **IntentPFNs** Intended application-set metadata for atomic update scenarios. -- **ServiceGuid** An ID which represents which service the software distribution client is connecting to (Windows Update, Windows Store, etc.) +- **ServiceGuid** An ID which represents which service the software distribution client is connecting to (Windows Update, Microsoft Store, etc.) ### SoftwareUpdateClientTelemetry.SLSDiscovery @@ -2859,7 +2859,7 @@ The following fields are available: - **HResult** Indicates the result code of the event (success, cancellation, failure code HResult) - **IsBackground** Indicates whether the SLS discovery event took place in the foreground or background - **NextExpirationTime** Indicates when the SLS cab expires -- **ServiceID** An ID which represents which service the software distribution client is connecting to (Windows Update, Windows Store, etc.) +- **ServiceID** An ID which represents which service the software distribution client is connecting to (Windows Update, Microsoft Store, etc.) - **SusClientId** The unique device ID controlled by the software distribution client - **UrlPath** Path to the SLS cab that was downloaded - **WUAVersion** The version number of the software distribution client @@ -2885,7 +2885,7 @@ The following fields are available: - **EventType** "Possible values are ""Child"", ""Bundle"", or ""Driver""." - **HandlerType** Indicates the kind of content (app, driver, windows patch, etc.) - **RevisionNumber** Unique revision number of Update -- **ServerId** Identifier for the service to which the software distribution client is connecting, such as Windows Update and Windows Store. +- **ServerId** Identifier for the service to which the software distribution client is connecting, such as Windows Update and Microsoft Store. - **SystemBIOSMajorRelease** Major version of the BIOS. - **SystemBIOSMinorRelease** Minor version of the BIOS. - **UpdateId** Unique Update ID @@ -2930,7 +2930,7 @@ The following fields are available: - **MetadataSignature** A base64-encoded string of the signature associated with the update metadata (specified by revision ID). - **RevisionId** The revision ID for a specific piece of content. - **RevisionNumber** The revision number for a specific piece of content. -- **ServiceGuid** Identifies the service to which the software distribution client is connected, Example: Windows Update or Windows Store +- **ServiceGuid** Identifies the service to which the software distribution client is connected, Example: Windows Update or Microsoft Store - **SHA256OfLeafCertPublicKey** A base64 encoding of the hash of the Base64CertData in the FragmentSigning data of the leaf certificate. - **SHA256OfTimestampToken** A base64-encoded string of hash of the timestamp token blob. - **SignatureAlgorithm** The hash algorithm for the metadata signature. @@ -3011,7 +3011,7 @@ The following fields are available: - **RelatedCV** The previous Correlation Vector that was used before swapping with a new one - **RepeatFailFlag** Indicates whether this specific piece of content had previously failed to download. - **RevisionNumber** Identifies the revision number of this specific piece of content. -- **ServiceGuid** An ID which represents which service the software distribution client is installing content for (Windows Update, Windows Store, etc.). +- **ServiceGuid** An ID which represents which service the software distribution client is installing content for (Windows Update, Microsoft Store, etc.). - **Setup360Phase** If the download is for an operating system upgrade, this datapoint indicates which phase of the upgrade is underway. - **ShippingMobileOperator** The mobile operator that a device shipped on. - **StatusCode** Indicates the result of a Download event (success, cancellation, failure code HResult). @@ -3079,7 +3079,7 @@ The following fields are available: - **RelatedCV** The previous Correlation Vector that was used before swapping with a new one - **ScanDurationInSeconds** The number of seconds a scan took - **ScanEnqueueTime** The number of seconds it took to initialize a scan -- **ServiceGuid** An ID which represents which service the software distribution client is checking for content (Windows Update, Windows Store, etc.). +- **ServiceGuid** An ID which represents which service the software distribution client is checking for content (Windows Update, Microsoft Store, etc.). - **ServiceUrl** The environment URL a device is configured to scan with - **ShippingMobileOperator** The mobile operator that a device shipped on. - **StatusCode** Indicates the result of a CheckForUpdates event (success, cancellation, failure code HResult). @@ -3177,7 +3177,7 @@ The following fields are available: - **RepeatFailFlag** Indicates whether this specific piece of content had previously failed to install. - **RepeatSuccessInstallFlag** Indicates whether this specific piece of content had previously installed successful, for example if another user had already installed it. - **RevisionNumber** The revision number of this specific piece of content. -- **ServiceGuid** An ID which represents which service the software distribution client is installing content for (Windows Update, Windows Store, etc.). +- **ServiceGuid** An ID which represents which service the software distribution client is installing content for (Windows Update, Microsoft Store, etc.). - **Setup360Phase** If the install is for an operating system upgrade, indicates which phase of the upgrade is underway. - **ShippingMobileOperator** The mobile operator that a device shipped on. - **StatusCode** Indicates the result of an installation event (success, cancellation, failure code HResult). @@ -3212,7 +3212,7 @@ The following fields are available: - **PowerState** Indicates the power state of the device at the time of heartbeart (DC, AC, Battery Saver, or Connected Standby) - **RelatedCV** "The previous correlation vector that was used by the client, before swapping with a new one " - **ResumeCount** Number of times this active download has resumed from a suspended state -- **ServiceID** "Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc) " +- **ServiceID** "Identifier for the service to which the software distribution client is connecting (Windows Update, Microsoft Store, etc) " - **SuspendCount** Number of times this active download has entered a suspended state - **SuspendReason** Last reason for why this active download entered a suspended state - **CallerApplicationName** Name provided by the caller who initiated API calls into the software distribution client @@ -3220,7 +3220,7 @@ The following fields are available: - **EventType** "Possible values are ""Child"", ""Bundle"", or ""Driver""" - **FlightId** The unique identifier for each flight - **RevisionNumber** Identifies the revision number of this specific piece of content -- **ServiceGuid** Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc) +- **ServiceGuid** Identifier for the service to which the software distribution client is connecting (Windows Update, Microsoft Store, etc) - **UpdateId** "Identifier associated with the specific piece of content " - **WUDeviceID** "Unique device id controlled by the software distribution client " @@ -3735,7 +3735,7 @@ The following fields are available: - **ReportId** WER Report Id associated with this bug check (used for finding the corresponding report archive in Watson). -## Windows Store events +## Microsoft Store events ### Microsoft.Windows.StoreAgent.Telemetry.AbortedInstallation From f2e5b3b110f420d7376626856b52cc1dcfd149f2 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 10:57:06 -0700 Subject: [PATCH 055/138] latest updates from Marc's response --- .../windows-analytics-FAQ-troubleshooting.md | 45 +++++++++++++++---- 1 file changed, 36 insertions(+), 9 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 608d68218f..074e39dafe 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/09/2018 +ms.date: 03/14/2018 --- # Frequently asked questions and troubleshooting Windows Analytics @@ -38,10 +38,19 @@ In Log Analytics, go to **Settings > Connected sources > Windows telemetry** and Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog. -If devices are not showing up as expected, find a representative device and rerun the latest Upgrade Readiness deployment script (TODO - merge topic form here - but clarify the last step of "contact support" should only be done if all other tshooting steps in this topic don't work). [MERGE WHAT EXACTLY FROM WHERE?] +If devices are not showing up as expected, find a representative device and follow these steps to rerun the latest Upgrade Readiness deployment script on it to troubleshoot issues: -- In the collected logs, the filename with a GUID has clear text that can be read to uncover common issues, so it's worth checking these logs prior to opening a support ticket. -- If you think the issue might be related a network proxy, check the endpoint connectivity(#Endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. [WHY IS THAT BLOG POST LISTING DIFFERENT ENDPOINTS THAN WE ARE DOCUMENTING?] +1. Download and extract the [Upgrade Readiness Deployment Script](https://www.microsoft.com/download/details.aspx?id=53327). Ensure that the **Pilot/Diagnostics** folder is included. +2. Edit the script as described in [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md). +3. Check that `isVerboseLogging` is set to `$true`. +4. Run the script again. Log files will be saved to the directory specified in the script. +5. Check the output of the script in the command window and/or log **UA_dateTime_machineName.txt** to ensure that all steps were completed successfully. The filename with a GUID has clear text that can be read to uncover common issues. +6. If you are still seeing errors you can't diagnose, then consider open a support case with Microsoft Support through your regular channel and provide this information. + +If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally (you might not need verbose logging in this case, unless you plan to collect the log files). + + +If you think the issue might be related a network proxy, check the endpoint connectivity(#Endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. ### Device Health data not appearing @@ -144,9 +153,9 @@ Finally, Upgrade Readiness only collects IE site discovery data on devices that ### What are the requirements and costs for Windows Analytics solutions? | Windows Analytics solution| Windows license requirements | Windows version requirements | Diagnostic data requirements | |----------------------|-----------------------------------|------------------------------|------------------------------| -| Upgrade Readiness | [??? EDITION?] | Windows 7 with Service Pack 1, Windows 8, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | -| Update Compliance | [??? EDITION?] | Windows 10 | Basic level in most cases; Enhanced level to support Windows Defender AV data if using [1607 pre-Oct-EXACTLY WHAT RELEASE IS THIS?]. | -| Device Health | [??? EDITION?] | E3 or [EXACTLY WHICH E LICENSES?] | Windows 10 | Enhanced level | +| Upgrade Readiness | No additional requirements | Windows 7 with Service Pack 1, Windows 8, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | +| Update Compliance | No additional requirements | Windows 10 | Basic level | +| Device Health | No additional requirements | - Windows 10 Enterprise or Windows 10 Education per-device with active Software Assurance
      - Windows 10 Enterprise E3 or E5 per-device or per-user subscription (including Microsoft 365 F1, E3, or E5)
      - Windows 10 Education A3 or A5 (including Microsoft 365 Education A3 or A5)
      - Windows VDA E3 or E5 per-device or per-user subscription
      - Windows Server 2016 or later | Windows 10 | Enhanced level | >[!NOTE] > Regarding licensing requirements for Device Health, you do not need per-seat licensing, but only enough licenses to cover your total device usage. For example, if you have 100 E3 licenses, you can monitor 100 devices with Device Health. @@ -157,13 +166,31 @@ Beyond the cost of Windows operating system licenses, there is no additional cos Windows Analytics is fully committed to privacy, centering on these tenets: -- **Transparency:** We fully document the Windows Analytics diagnostic events [LINK?] so you can review them with your company’s security and compliance teams. The Diagnostic Data Viewer lets you see diagnostic data sent from a given device (see [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) for details). +- **Transparency:** We fully document the Windows Analytics diagnostic events (see the links for additional information) so you can review them with your company’s security and compliance teams. The Diagnostic Data Viewer lets you see diagnostic data sent from a given device (see [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) for details). - **Control:** You ultimately control the level of diagnostic data you wish to share. In Windows 10 1709 we added a new policy to Limit enhanced diagnostic data to the minimum required by Windows Analytics - **Security:** Your data is protected with strong security and encryption - **Trust:** Windows Analytics supports the Microsoft Online Service Terms +See these topics for additional background information about related privacy issues: + +- [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) +- [Configure Windows diagnostic data in your organization](../../../configuration/configure-windows-diagnostic-data-in-your-organization) +- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) +- [Licensing Terms and Documentation](www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) +- [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) +- [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) + ### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service? No ### Can I chose the data center location? -Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). \ No newline at end of file +Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). + +### Why do SCCM and Upgrade Readiness show different counts of devices that are ready to upgrade? +system Center Configuration Manager (SCCM) considers a device ready to upgrade if no installed app is marked “not ready”, while Upgrade Readiness considers a device ready to upgrade only if *all* installed apps are marked “ready” (or are in the ignore/low installation count category). +  +Currently, you can choose the criteria you wish to use: +- To use the SCCM criteria, create the collection of devices ready to upgrade within the SCCM console (using the analytics connector). +- To use the Upgrade Readiness criteria, export the list of ready-to-upgrade devices from the corresponding Upgrade Readiness report, and then build the SCCM collection from that spreadsheet. From ab008bb97f31af701075072d073c613a5799f94e Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 11:17:19 -0700 Subject: [PATCH 056/138] fixing relative links --- .../update/windows-analytics-FAQ-troubleshooting.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 074e39dafe..0f854ffac8 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,11 +174,11 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) -- [Configure Windows diagnostic data in your organization](../../../configuration/configure-windows-diagnostic-data-in-your-organization) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) -- [Licensing Terms and Documentation](www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) +- [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) - [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) From 24af92f24eff4ea5a000adb0ebb3bf0e6a53c508 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 11:30:38 -0700 Subject: [PATCH 057/138] still trying to fix links --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 0f854ffac8..4d9b920354 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -175,9 +175,9 @@ See these topics for additional background information about related privacy iss - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) - [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization) -- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) - [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) From dc71b6e5a64c1ac0e6ea4b2f54455c435dbf1c29 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 11:50:55 -0700 Subject: [PATCH 058/138] still trying to fix linking --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 4d9b920354..7e23be4471 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From 83bb15515c978db2823e754511724a13f7ea008f Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 12:05:05 -0700 Subject: [PATCH 059/138] STILL WITH THE LINKS --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 7e23be4471..4d9b920354 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From ad590b34cc1d197b5e775c9b1dc4170b017b09ff Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 12:17:13 -0700 Subject: [PATCH 060/138] trying 3 sets of dots again --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 4d9b920354..a8bf2e6db0 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From 6af728770b2692cd7adc19f2beacc0166779a214 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 12:35:40 -0700 Subject: [PATCH 061/138] trying another approach --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index a8bf2e6db0..547f543385 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../windows/configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../windows/configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From ed37abe9cfae4455f5a7d7a804747e08a54cc1e0 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 12:47:48 -0700 Subject: [PATCH 062/138] still trying paths --- .../update/windows-analytics-FAQ-troubleshooting.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 547f543385..4d9b920354 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../windows/configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../windows/configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From edb9fdf74b630441c9821ab70702cf83103ea4e5 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 13:06:22 -0700 Subject: [PATCH 063/138] trying w/o .md now --- .../update/windows-analytics-FAQ-troubleshooting.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 4d9b920354..394b8090ad 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,10 +174,10 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) -- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization) +- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) - [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) From 6b1120f8d6c6e33f620057191daca24270f80750 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 14 Mar 2018 20:16:11 +0000 Subject: [PATCH 064/138] Merged PR 6371: Fix field descriptions --- ...vel-windows-diagnostic-events-and-fields-1703.md | 13 ++++++------- ...ic-level-windows-diagnostic-events-and-fields.md | 12 ++++++------ 2 files changed, 12 insertions(+), 13 deletions(-) diff --git a/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703.md b/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703.md index 819b8ca97a..6cf9614a7c 100644 --- a/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703.md +++ b/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703.md @@ -831,9 +831,8 @@ This event represents the basic metadata about a file on the system. The file m The following fields are available: -- **AppraiserVersion** The version of the Appraiser file generating the events. -- **AvDisplayName** The version of the Appraiser file generating the events. -- **AvProductState** If the app is an anti-virus app, this is its display name. +- **AvDisplayName** If the app is an anti-virus app, this is its display name. +- **AvProductState** Represents state of antivirus program with respect to whether it's turned on and the signatures are up-to-date. - **BinaryType** A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64 - **BinFileVersion** An attempt to clean up FileVersion at the client that tries to place the version into 4 octets. - **BinProductVersion** An attempt to clean up ProductVersion at the client that tries to place the version into 4 octets. @@ -841,8 +840,8 @@ The following fields are available: - **CompanyName** The company name of the vendor who developed this file. - **FileId** A hash that uniquely identifies a file. - **FileVersion** The File version field from the file metadata under Properties -> Details. -- **HasUpgradeExe** Represents state of antivirus program with respect to whether it's turned on and the signatures are up-to-date. -- **IsAv** A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64 +- **HasUpgradeExe** Does the anti-virus app have an upgrade.exe file? +- **IsAv** Is the file an anti-virus reporting EXE? - **LinkDate** The date and time that this file was linked on. - **LowerCaseLongPath** The full file path to the file that was inventoried on the device. - **Name** The name of the file that was inventoried. @@ -1653,7 +1652,7 @@ The following fields are available: - **KvaShadow** Microcode info of the processor. - **MMSettingOverride** Microcode setting of the processor. - **MMSettingOverrideMask** Microcode setting override of the processor. -- **ProcessorArchitecture** Retrieves the processor architecture of the installed operating system. The complete list of values can be found in DimProcessorArchitecture. +- **ProcessorArchitecture** Retrieves the processor architecture of the installed operating system. - **ProcessorClockSpeed** Retrieves the clock speed of the processor in MHz. - **ProcessorCores** Retrieves the number of cores in the processor. - **ProcessorIdentifier** The processor identifier of a manufacturer. @@ -1662,7 +1661,7 @@ The following fields are available: - **ProcessorPhysicalCores** Number of physical cores in the processor. - **ProcessorUpdateRevision** The microcode version. - **SocketCount** Number of physical CPU sockets of the machine. -- **SpeculationControl** Clock speed of the processor in MHz. +- **SpeculationControl** If the system has enabled protections needed to validate the speculation control vulnerability. ### Census.Speech diff --git a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md index e8411d0b05..06874ee41a 100644 --- a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md +++ b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md @@ -317,8 +317,8 @@ This event represents the basic metadata about a file on the system. The file m The following fields are available: - **AppraiserVersion** The version of the Appraiser file generating the events. -- **AvDisplayName** The version of the Appraiser file generating the events. -- **AvProductState** If the app is an anti-virus app, this is its display name. +- **AvDisplayName** If the app is an anti-virus app, this is its display name. +- **AvProductState** Represents state of antivirus program with respect to whether it's turned on and the signatures are up-to-date. - **BinaryType** A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64 - **BinFileVersion** An attempt to clean up FileVersion at the client that tries to place the version into 4 octets. - **BinProductVersion** An attempt to clean up ProductVersion at the client that tries to place the version into 4 octets. @@ -326,8 +326,8 @@ The following fields are available: - **CompanyName** The company name of the vendor who developed this file. - **FileId** A hash that uniquely identifies a file. - **FileVersion** The File version field from the file metadata under Properties -> Details. -- **HasUpgradeExe** Represents state of antivirus program with respect to whether it's turned on and the signatures are up-to-date. -- **IsAv** A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64 +- **HasUpgradeExe** Does the anti-virus app have an upgrade.exe file? +- **IsAv** Is the file an anti-virus reporting EXE? - **LinkDate** The date and time that this file was linked on. - **LowerCaseLongPath** The full file path to the file that was inventoried on the device. - **Name** The name of the file that was inventoried. @@ -1617,7 +1617,7 @@ The following fields are available: - **KvaShadow** Microcode info of the processor. - **MMSettingOverride** Microcode setting of the processor. - **MMSettingOverrideMask** Microcode setting override of the processor. -- **ProcessorArchitecture** Retrieves the processor architecture of the installed operating system. The complete list of values can be found in DimProcessorArchitecture. +- **ProcessorArchitecture** Retrieves the processor architecture of the installed operating system. - **ProcessorClockSpeed** Retrieves the clock speed of the processor in MHz. - **ProcessorCores** Retrieves the number of cores in the processor. - **ProcessorIdentifier** The processor identifier of a manufacturer. @@ -1626,7 +1626,7 @@ The following fields are available: - **ProcessorPhysicalCores** Number of physical cores in the processor. - **ProcessorUpdateRevision** The microcode version. - **SocketCount** Number of physical CPU sockets of the machine. -- **SpeculationControl** Clock speed of the processor in MHz. +- **SpeculationControl** If the system has enabled protections needed to validate the speculation control vulnerability. ### Census.Security From d7402a212611c51aa3cbb38416fab40f69b37373 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 13:38:05 -0700 Subject: [PATCH 065/138] I think I've got it --- .../update/windows-analytics-FAQ-troubleshooting.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 394b8090ad..06611c8acc 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -50,7 +50,7 @@ If devices are not showing up as expected, find a representative device and foll If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally (you might not need verbose logging in this case, unless you plan to collect the log files). -If you think the issue might be related a network proxy, check the endpoint connectivity(#Endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. +If you think the issue might be related a network proxy, check the endpoint connectivity(#endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. ### Device Health data not appearing @@ -71,7 +71,7 @@ Devices must be able to reach the endpoints specified in [Enrolling devices in W If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. -Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). For suggested methods, see (windows-analytics-get-started.md#Configuring endpoint access with proxy servers) +Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). For suggested methods, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md#configuring-endpoint-access-with-proxy-servers). To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-1703) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-and-fields-1703.md) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) From ddc8d7f36f1b19131d530990b2f2a9b82ed16ec4 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 14 Mar 2018 16:11:22 -0700 Subject: [PATCH 066/138] giving up for now and using ordinary web links --- .../update/windows-analytics-FAQ-troubleshooting.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 06611c8acc..4cc127f412 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -174,9 +174,9 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) -- [Windows 10, version 1703 basic level Windows diagnostic events and fields](../../configuration/basic-level-windows-diagnostic-events-and-fields-1703.md) -- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](../../configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields.md) -- [Configure Windows diagnostic data in your organization](../../configuration/configure-windows-diagnostic-data-in-your-organization.md) +- [Windows 10, version 1703 basic level Windows diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703) +- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) +- [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windowsconfiguration/configure-windows-diagnostic-data-in-your-organization) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) @@ -185,7 +185,7 @@ See these topics for additional background information about related privacy iss ### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service? No -### Can I chose the data center location? +### Can I choose the data center location? Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). ### Why do SCCM and Upgrade Readiness show different counts of devices that are ready to upgrade? From 508d2f20882f687b8bab494c48b2ef029025b157 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Thu, 15 Mar 2018 04:45:14 +0000 Subject: [PATCH 067/138] Merged PR 6390: ApplicationDefaults/EnableAppUriHandlers - new policy in Policy CSP --- ...ew-in-windows-mdm-enrollment-management.md | 8 +++ .../policy-configuration-service-provider.md | 3 + .../mdm/policy-csp-applicationdefaults.md | 72 +++++++++++++++++++ 3 files changed, 83 insertions(+) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 375d058557..035cb49656 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1425,6 +1425,14 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
    • [How to import a custom ADMX file to a device using Intune](https://www.microsoft.com/showcase/video.aspx?uuid=a59888b1-429f-4a49-8570-c39a143d9a73)
    + +[Policy CSP](policy-configuration-service-provider.md) +

    Added the following new policies for Windows 10, version 1803:

    +
      +
    • ApplicationDefaults/EnableAppUriHandlers
      • +
    • Connectivity/AllowPhonePCLinking
      • +
    + diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index c94b2fe9d3..4648284ec8 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -193,6 +193,9 @@ The following diagram shows the Policy configuration service provider in tree fo
    ApplicationDefaults/DefaultAssociationsConfiguration
    +
    + ApplicationDefaults/EnableAppUriHandlers +
    ### ApplicationManagement policies diff --git a/windows/client-management/mdm/policy-csp-applicationdefaults.md b/windows/client-management/mdm/policy-csp-applicationdefaults.md index 5aaf01d6fb..774334df19 100644 --- a/windows/client-management/mdm/policy-csp-applicationdefaults.md +++ b/windows/client-management/mdm/policy-csp-applicationdefaults.md @@ -11,6 +11,8 @@ ms.date: 03/12/2018 # Policy CSP - ApplicationDefaults +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
    @@ -22,6 +24,9 @@ ms.date: 03/12/2018
    ApplicationDefaults/DefaultAssociationsConfiguration
    +
    + ApplicationDefaults/EnableAppUriHandlers +
    @@ -132,6 +137,73 @@ Here is the SyncMl example: + +
    + + +**ApplicationDefaults/EnableAppUriHandlers** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobile Enterprise
    cross markcheck mark4check mark4check mark4check mark4
    + + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +This policy setting determines whether Windows supports web-to-app linking with app URI handlers. + +Enabling this policy setting enables web-to-app linking so that apps can be launched with a http(s) URI. + +Disabling this policy disables web-to-app linking and http(s) URIs will be opened in the default browser instead of launching the associated app. + +If you do not configure this policy setting, the default behavior depends on the Windows edition. Changes to this policy take effect on reboot. + + + +ADMX Info: +- GP English name: *Configure web-to-app linking with app URI handlers* +- GP name: *EnableAppUriHandlers* +- GP ADMX file name: *GroupPolicy.admx* + + + +This setting supports a range of values between 0 and 1. + + + + + + + + + +
    Footnote: From 533e92a2c7d178fba348208d09a26ea3807ec5c4 Mon Sep 17 00:00:00 2001 From: rustychuck <37403738+rustychuck@users.noreply.github.com> Date: Thu, 15 Mar 2018 11:19:22 +0000 Subject: [PATCH 068/138] Update mbam-25-security-considerations.md --- mdop/mbam-v25/mbam-25-security-considerations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mdop/mbam-v25/mbam-25-security-considerations.md b/mdop/mbam-v25/mbam-25-security-considerations.md index a21a2b1440..1ab4144ac1 100644 --- a/mdop/mbam-v25/mbam-25-security-considerations.md +++ b/mdop/mbam-v25/mbam-25-security-considerations.md @@ -32,7 +32,7 @@ This topic contains the following information about how to secure Microsoft BitL ## Configure MBAM to escrow the TPM and store OwnerAuth passwords -**Note** For Windows 10, version 1607 or later, only Windows can take ownership of the TPM. In addiiton, Windows will not retain the TPM owner password when provisioning the TPM. See [TPM owner password](http://technet.microsoft.com/en-us/itpro/windows/keep-secure/change-the-tpm-owner-password) for further details. +**Note** For Windows 10, version 1607 or later, only Windows can take ownership of the TPM. In addition, Windows will not retain the TPM owner password when provisioning the TPM. See [TPM owner password](http://technet.microsoft.com/en-us/itpro/windows/keep-secure/change-the-tpm-owner-password) for further details. Depending on its configuration, the Trusted Platform Module (TPM) will lock itself in certain situations ─ such as when too many incorrect passwords are entered ─ and can remain locked for a period of time. During TPM lockout, BitLocker cannot access the encryption keys to perform unlock or decryption operations, requiring the user to enter their BitLocker recovery key to access the operating system drive. To reset TPM lockout, you must provide the TPM OwnerAuth password. From 2729896188b2b825c42f36678a29871f80d05058 Mon Sep 17 00:00:00 2001 From: benhopperau Date: Thu, 15 Mar 2018 21:22:09 +1000 Subject: [PATCH 069/138] Fixup typo in doco Small change to fix up typo --- .../hello-for-business/hello-hybrid-key-trust-prereqs.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md index cd36884d2c..43ce0a6db5 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md @@ -99,7 +99,7 @@ Hybrid Windows Hello for Business deployments can use Azure’s Multifactor Auth > [!div class="checklist"] > * Azure MFA Service > * Windows Server 2016 AD FS and Azure (optional, if federated) -> * Windows Server 2016 AD FS and third party MFA Adapter (optiona, if federated) +> * Windows Server 2016 AD FS and third party MFA Adapter (optional, if federated)
    @@ -136,4 +136,4 @@ For federerated and non-federated environments, start with **Configure Windows H 4. [Configure Directory Synchronization](hello-hybrid-key-trust-dirsync.md) 5. [Configure Azure Device Registration](hello-hybrid-key-trust-devreg.md) 6. [Configure Windows Hello for Business settings](hello-hybrid-key-whfb-settings.md) -7. [Sign-in and Provision](hello-hybrid-key-whfb-provision.md) \ No newline at end of file +7. [Sign-in and Provision](hello-hybrid-key-whfb-provision.md) From e2866e385dfc70557051264c34e620c1a1c6cf6e Mon Sep 17 00:00:00 2001 From: chintanpatel Date: Thu, 15 Mar 2018 09:52:12 -0700 Subject: [PATCH 070/138] Update configure-wd-app-guard.md --- .../configure-wd-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md index 991d95bf12..5ed68d6744 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/configure-wd-app-guard.md @@ -29,7 +29,7 @@ These settings, located at **Computer Configuration\Administrative Templates\Net |Policy name|Supported versions|Description| |-----------|------------------|-----------| |Private network ranges for apps|At least Windows Server 2012, Windows 8, or Windows RT|A comma-separated list of IP address ranges that are in your corporate network. Included endpoints or endpoints that are included within a specified IP address range, are rendered using Microsoft Edge and won't be accessible from the Application Guard environment.| -|Enterprise resource domains hosted in the cloud|At least Windows Server 2012, Windows 8, or Windows RT|A pipe-separated (\|) list of your domain cloud resources. Included endpoints are rendered using Microsoft Edge and won't be accessible from the Application Guard environment. Notes: 1) Please include a full domain name (www.contoso.com) in the configuration 2) You may use "." as a wildcard character to automatically trust subdomains. Configuring '.constoso.com' will automatically trust 'subdomain1.contoso.com', 'subdomain2.contoso.com etc. | +|Enterprise resource domains hosted in the cloud|At least Windows Server 2012, Windows 8, or Windows RT|A pipe-separated (\|) list of your domain cloud resources. Included endpoints are rendered using Microsoft Edge and won't be accessible from the Application Guard environment. Notes: 1) Please include a full domain name (www.contoso.com) in the configuration 2) You may optionally use "." as a wildcard character to automatically trust subdomains. Configuring ".constoso.com" will automatically trust "subdomain1.contoso.com", "subdomain2.contoso.com" etc. | |Domains categorized as both work and personal|At least Windows Server 2012, Windows 8, or Windows RT|A comma-separated list of domain names used as both work or personal resources. Included endpoints are rendered using Microsoft Edge and won't be accessible from the Application Guard environment.| ### Application-specific settings From c838abc0677c77699147c86fa8d10e581fa639af Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 15 Mar 2018 10:42:28 -0700 Subject: [PATCH 071/138] many changes, listed in WAtechreview2.txt --- .../update/device-health-get-started.md | 116 ++---------------- .../update/update-compliance-get-started.md | 48 ++------ .../update/windows-analytics-get-started.md | 15 ++- .../upgrade/upgrade-readiness-get-started.md | 78 ++---------- .../upgrade/upgrade-readiness-requirements.md | 31 +---- 5 files changed, 35 insertions(+), 253 deletions(-) diff --git a/windows/deployment/update/device-health-get-started.md b/windows/deployment/update/device-health-get-started.md index 175f553534..70a781cb0d 100644 --- a/windows/deployment/update/device-health-get-started.md +++ b/windows/deployment/update/device-health-get-started.md @@ -5,7 +5,7 @@ keywords: Device Health, oms, operations management suite, prerequisites, requir ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library -ms.date: 11/14/2017 +ms.date: 03/15/2018 ms.pagetype: deploy author: jaimeo --- @@ -15,25 +15,11 @@ author: jaimeo This topic explains the steps necessary to configure your environment for Windows Analytics: Device Health. Steps are provided in sections that follow the recommended setup process: -1. Ensure that [prerequisites](#device-health-prerequisites) are met. -2. [Add Device Health](#add-device-health-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. -3. [Deploy your Commercial ID](#deploy-your-commercial-id-to-your-windows-10-devices and set the telemetry level) to your organization’s devices. -## Device Health prerequisites +1. [Add Device Health](#add-device-health-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. +2. [Enroll devices in Windows Analytics](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. +3. [Use Device Health to monitor frequency and causes of device crashes](#use-device-health-to-monitor-frequency-and-causes-of-device-crashes) once your devices are enrolled. -Device Health has the following requirements: -1. Device Health is currently only compatible with Windows 10 and Windows Server 2016 devices. The solution is intended to be used with desktop devices (Windows 10 workstations and laptops). -2. The solution requires that at least the [enhanced level of diagnostic data](https://technet.microsoft.com/itpro/windows/manage/configure-windows-diagnostic-data-in-your-organization#basic-level) is enabled on all devices that are intended to be displayed in the solution. To learn more about Windows diagnostic data, see [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization). -3. The diagnostic data of your organization’s Windows devices must be successfully transmitted to Microsoft. Microsoft has specified [endpoints for each of the diagnostic data services](/windows/configuration//configure-windows-diagnostic-data-in-your-organization#endpoints), which must be whitelisted by your organization so the data can be transmitted. The following table is taken from the article on diagnostic data endpoints and summarizes the use of each endpoint: - -Service | Endpoint ---- | --- -Connected User Experiences and Telemetry component | v10.vortex-win.data.microsoft.com
    settings-win.data.microsoft.com -Windows Error Reporting | watson.telemetry.microsoft.com -Online Crash Analysis | oca.telemetry.microsoft.com - ->[!NOTE] -> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for the endpoints listed in Step 3. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization) for steps to exclude authentication for these endpoints. ## Add Device Health to Microsoft Operations Management Suite @@ -79,100 +65,14 @@ After you have added Device Health and devices have a Commercial ID, you will be >[!NOTE] >You can unsubscribe from the Device Health solution if you no longer want to monitor your organization’s devices. User device data will continue to be shared with Microsoft while the opt-in keys are set on user devices and the proxy allows traffic. -## Deploy your Commercial ID to your Windows 10 devices and set the diagnostic data level - -In order for your devices to show up in Windows Analytics: Device Health, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. There are two primary methods for widespread deployment of your Commercial ID: Group Policy and Mobile Device Management (MDM). - -- Using Group Policy

    - Deploying your Commercial ID using Group Policy can be accomplished by configuring domain Group Policy Objects with the Group Policy Management Editor, or by configuring local Group Policy using the Local Group Policy Editor. - 1. In the console tree, navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** - 2. Double-click **Configure the Commercial ID** - 3. In the **Options** box, under **Commercial Id**, type the Commercial ID GUID, and then click **OK**.

    - -- Using Microsoft Mobile Device Management (MDM)

    -Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under **Provider/ProviderID/CommercialID**. You can find more information on deployment using MDM at the [DMClient Configuration Service Provider topic](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/dmclient-csp).   - -## Perform checks to ensure and verify successful deployment - -While you're waiting for the initial data to populate, there are some configuration details it's worth confirming to ensure that the necessary data connections are set up properly. - -### Check for disabled Windows Error Reporting (WER) -  -If WER is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. - -Check these Registry settings in **HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting**: - -- Verify that the value "Disabled" (REG_DWORD), if set, is 0. -- Verify that the value "DontSendAdditionalData" (REG_DWORD), if set, is 0. -- Verify that the value "CorporateWERServer" (REG_SZ) is not configured. -  -If you need further information on Windows Error Reporting (WER) settings, see [WER Settings](https://msdn.microsoft.com/library/windows/desktop/bb513638(v=vs.85).aspx). - - -### Endpoint connectivity - -Devices must be able to reach the endpoints specified in the "Device Health prerequisites" section of this topic. - ->[!NOTE] -> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for the endpoints listed in Step 3 of the "Device Health prerequisites" section of this topic. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. (If you need more information about diagnostic data endpoints and how to manage them, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). - -If you are using proxy server authentication, it is worth taking extra care to check the configuration. Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. - -Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). - -To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: - -```powershell - -$endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'watson.telemetry.microsoft.com' - 'oca.telemetry.microsoft.com' - 'vortex.data.microsoft.com' - ) - -$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded - -``` - -If this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. - -To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: - -```powershell - -[scriptblock]$accessTest = { - $endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'watson.telemetry.microsoft.com' - 'oca.telemetry.microsoft.com' - 'vortex.data.microsoft.com' - ) - - $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded -} - -$scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" -$outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" -$accessTest.ToString() > $scriptFullPath -$null > $outputFileFullPath -$taskAction = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument "-ExecutionPolicy Bypass -Command `"&{$scriptFullPath > $outputFileFullPath}`"" -$taskTrigger = New-ScheduledTaskTrigger -Once -At (Get-Date).Addseconds(10) -$task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftTelemetryAccessTest' -Trigger $taskTrigger -Action $taskAction -Force -Start-Sleep -Seconds 120 -Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false -Get-Content $outputFileFullPath - -``` - -As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. - +## Enroll devices in Windows Analytics +Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). +## Use Device Health to monitor frequency and causes of device crashes +Once your devices are enrolled, you can move on to [Use Device Health](device-health-using.md). ## Related topics diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 354ad86c3d..504a1f501e 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -6,9 +6,9 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy -author: DaniHalfin -ms.author: daniha -ms.date: 10/13/2017 +author: Jaimeo +ms.author: jaimeo +ms.date: 03/15/2018 --- # Get started with Update Compliance @@ -16,29 +16,10 @@ ms.date: 10/13/2017 This topic explains the steps necessary to configure your environment for Windows Analytics: Update Compliance. Steps are provided in sections that follow the recommended setup process: -1. Ensure that [prerequisites](#update-compliance-prerequisites) are met. -2. [Add Update Compliance](#add-update-compliance-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. -3. [Deploy your Commercial ID](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. +1. [Add Update Compliance](#add-update-compliance-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. +2. [Enroll devices in Windows Analytics](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. +3. [Use Update Compliance to monitor Windows Updates](#use-update-compliance-to-monitor-windows-updates) once your devices are enrolled. -## Update Compliance prerequisites - -Update Compliance has the following requirements: -1. Update Compliance is currently only compatible with Windows 10 devices. The solution is intended to be used with desktop devices (Windows 10 workstations and laptops). -2. The solution requires that Windows 10 diagnostic data is enabled on all devices that are intended to be displayed in the solution. These devices must have at least the [basic level of diagnostic data](/configuration/configure-windows-diagnostic-data-in-your-organization#basic-level) enabled. To learn more about Windows diagnostic data, see [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization). -3. The diagnostic data of your organization’s Windows devices must be successfully transmitted to Microsoft. Microsoft has specified [endpoints for each of the diagnostic data services](/configuration/configure-windows-diagnostic-data-in-your-organization#endpoints), which must be whitelisted by your organization so the data can be transmitted. The following table is taken from the article on diagnostic data endpoints and summarizes the use of each endpoint: - - Service | Endpoint - --- | --- - Connected User Experiences and Telemetry component | v10.vortex-win.data.microsoft.com
    settings-win.data.microsoft.com - Windows Error Reporting | watson.telemetry.microsoft.com - Online Crash Analysis | oca.telemetry.microsoft.com - - - 4. To use Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a 3rd party AV program), and must have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). See the [Troublehsoot Windows Defender Antivirus reporting](/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md) topic for help on ensuring the configuration is correct. - - For endpoints running Windows 10, version 1607 or earlier, [Windows diagnostic data must also be set to **Enhanced**](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization#enhanced-level), to be compatible with Windows Defender Antivirus. - - See the [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) content library for more information on enabling, configuring, and validating Windows Defender AV. ## Add Update Compliance to Microsoft Operations Management Suite @@ -81,20 +62,11 @@ After you are subscribed to OMS Update Compliance and your devices have a Commer >[!NOTE] >You can unsubscribe from the Update Compliance solution if you no longer want to monitor your organization’s devices. User device data will continue to be shared with Microsoft while the opt-in keys are set on user devices and the proxy allows traffic. -## Deploy your Commercial ID to your Windows 10 devices +## Enroll devices in Windows Analytics -In order for your devices to show up in Windows Analytics: Update Compliance, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. There are two primary methods for widespread deployment of your Commercial ID: Group Policy and Mobile Device Management (MDM). - -- Using Group Policy

    - Deploying your Commercial ID using Group Policy can be accomplished by configuring domain Group Policy Objects with the Group Policy Management Editor, or by configuring local Group Policy using the Local Group Policy Editor. - 1. In the console tree, navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** - 2. Double-click **Configure the Commercial ID** - 3. In the **Options** box, under **Commercial Id**, type the Commercial ID GUID, and then click **OK**.

    - -- Using Microsoft Mobile Device Management (MDM)

    - Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under **Provider/ProviderID/CommercialID**. More information on deployment using MDM can be found [here](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/dmclient-csp).   +Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). -## Related topics +## Use Update Compliance to monitor Windows Updates -[Use Update Compliance to monitor Windows Updates](update-compliance-using.md) \ No newline at end of file +Once your devices are enrolled, you can starte to [Use Update Compliance to monitor Windows Updates](update-compliance-using.md). \ No newline at end of file diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index d7f650f6cc..1457e294d5 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -61,11 +61,11 @@ To enable data sharing, configure your proxy sever to whitelist the following en | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. -| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 +| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. (This endpoint is used by Windows 10, version 1709 or earlier.) +| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 | +| `https://v10.events.data.microsoft.com` | New diagnostic data endpoint for Windows 10, version 1803| | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | -| `https://v10.events.data.microsoft.com` | New diagnostic data endpoint for Windows 10, version 1803| | `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | | `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | @@ -95,8 +95,7 @@ The compatibility update scans your devices and enables application usage tracki >[!IMPORTANT] >Restart devices after you install the compatibility updates for the first time. ->[!NOTE] ->The compatibility update runs under the device's system account. + If you are planning to enable IE Site Discovery in Upgrade Readiness, you will need to install a few additional updates. @@ -110,7 +109,7 @@ You can use the Upgrade Readiness deployment script to automate and verify your See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. -After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in the Upgrade Readiness solution. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. +After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in Windows Analytics. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Windows Analytics. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. ## Deploy additional optional settings @@ -118,7 +117,7 @@ Certain of the Windows Analytics features have additional settings you can use. - **Update Compliance** is only compatible with Windows 10 desktop devices (workstations and laptops). To use the Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a partner antivirus application), and must have enabled cloud-delivered protection, as described in [Utilize Microsoft cloud-delivered protection in Windows Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). See the [Troubleshoot Windows Defender Antivirus reporting in Update Compliance](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/troubleshoot-reporting) topic for help with ensuring that the configuration is correct. -- For endpoints running Windows 10, version 1607 or earlier, Windows diagnostic data must also be set to Enhanced (see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization#enhanced-level)) in order to be compatible with Windows Defender Antivirus. See the [Windows Defender Antivirus in Windows 10 and Windows Server 2016](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) for more information about enabling, configuring, and validating Windows Defender AV. +- For devices running Windows 10, version 1607 or earlier, Windows diagnostic data must also be set to Enhanced (see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization#enhanced-level)) in order to be compatible with Windows Defender Antivirus. See the [Windows Defender Antivirus in Windows 10 and Windows Server 2016](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) for more information about enabling, configuring, and validating Windows Defender AV. - **Device Health** is only compatible with Windows 10 desktop devices (workstations and laptops) and Windows Server 2016. The solution requires that at least the Enhanced level of diagnostic data is enabled on all devices that are intended to be displayed in the solution. In Windows 10, version 1709, a new policy was added to "limit enhanced telemetry to the minimum required by Windows Analytics". To learn more about Windows diagnostic data, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). @@ -147,7 +146,7 @@ There are a number of policies that can be centrally managed to control Windows | Policy | Value | |-----------------------|------------------| | CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. | -| AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level. For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | +| AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level (for example, Device Health requires Enhanced diagnostic data and Upgrade Readiness only collects app usage and site discovery data on Windows 10 devices with Enhanced diagnostic data). For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | | LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).| | CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8 | diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index f36c4018aa..557a180f90 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -6,7 +6,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy author: jaimeo -ms.date: 09/20/2017 +ms.date: 03/18/2018 --- # Get started with Upgrade Readiness @@ -25,17 +25,12 @@ When you are ready to begin using Upgrade Readiness, perform the following steps 1. Review [data collection and privacy](#data-collection-and-privacy) information. 2. [Add Upgrade Readiness to OMS](#add-upgrade-readiness-to-operations-management-suite). -3. [Enable data sharing](#enable-data-sharing). -4. [Deploy required updates](#deploy-the-compatibility-update-and-related-kbs) to computers, and validate using a pilot deployment. -5. [Deploy Upgrade Readiness at scale](#deploy-upgrade-readiness-at-scale). +3. [Enroll devices in Windows Analytics](#enroll-devices-in-windows-analytics). +4. [Use Upgrade Readiness to manage Windows Upgrades](#use-upgrade-readiness-to-manage-windows-upgrades) once your devices are enrolled. ## Data collection and privacy -To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics: - -- [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization) -- [Manage connections from Windows operating system components to Microsoft services](/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services) -- [Windows 7, Windows 8, and Windows 8.1 appraiser diagnostic data events and fields](https://go.microsoft.com/fwlink/?LinkID=822965) +To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics, refer to [Frequently asked questions and troubleshooting Windows Analytics](windows-analytics-FAQ-troubleshooting.md), which discusses the issues and provides links to still more detailed information. ## Add Upgrade Readiness to Operations Management Suite @@ -57,36 +52,9 @@ If you are not using OMS: 5. To add the Upgrade Readiness solution to your workspace, go to the **Solutions Gallery**. Select the **Upgrade Readiness** tile in the gallery and then select **Add** on the solution’s details page. The solution is now visible on your workspace. Note that you may need to scroll to find Upgrade Readiness. -### Copy your commercial ID key +## Enroll devices in Windows Analytics -Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. - - - - - -1. On the **Settings** dashboard, navigate to the **Windows telemetry** panel. - - ![Operations Management Suite dialog showing settings icon (a gear) in the title bar indicated by a red box.](../images/upgrade-analytics-settings.png) - -2. On the **Connected Sources** tab, navigate to the Windows telemetry panel. - - >**Important**
    Regenerate a commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. - - - -## Enable data sharing - -To enable data sharing, whitelist the following endpoints. Note that you may need to get approval from your security group to do this. - -| **Endpoint** | **Function** | -|---------------------------------------------------------|-----------| -| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. -| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 -| `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. -| `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | - -Note: The compatibility update KB runs under the computer’s system account. +Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). ### Connection settings @@ -98,36 +66,6 @@ The settings that are used to enable client computers to connect to Windows diag | WinHTTP proxy | **ClientProxy=System** | Specify `netsh winhttp set proxy :` on client computers | | Other proxy | **ClientProxy=User** | Configure the Windows Registry value:

    **HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection\DisableEnterpriseAuthProxy**

    to 0 on client computers | -## Deploy the compatibility update and related KBs - -The compatibility update KB scans your computers and enables application usage tracking. If you don’t already have these KBs installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager. - -| **Operating System** | **KBs** | -|----------------------|-----------------------------------------------------------------------------| -| Windows 10 | The latest cumulative updates must be installed on Windows 10 computers to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

    Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](upgrade-readiness-requirements.md) for more information. | -| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
    Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues may be encountered when the latest Windows operating system is installed.
    For more information about this KB, see

    [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
    Provides updated configuration and definitions for compatibility diagnostics performed on the system.
    For more information about this KB, see
    NOTE: KB2976978 must be installed before you can download and install KB3150513. | -| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
    Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues may be encountered when the latest Windows operating system is installed.
    For more information about this KB, see

    [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
    Provides updated configuration and definitions for compatibility diagnostics performed on the system.
    For more information about this KB, see
    NOTE: KB2952664 must be installed before you can download and install KB3150513. | - -IMPORTANT: Restart user computers after you install the compatibility update KBs for the first time. - -If you are planning to enable IE Site Discovery, you will need to install a few additional KBs. - -| **Site discovery** | **Update** | -|----------------------|-----------------------------------------------------------------------------| -| [Review site discovery](upgrade-readiness-additional-insights.md#site-discovery) | [KB3080149](http://www.catalog.update.microsoft.com/Search.aspx?q=3080149)
    Updates the Diagnostic and Telemetry tracking service to existing devices. This update is only necessary on Windows 7 and Windows 8.1 devices.
    For more information about this KB, see

    Install the latest [Windows Monthly Rollup](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=security%20monthly%20quality%20rollup). This functionality has been included in Internet Explorer 11 starting with the July 2016 Cumulative Update. | - -### Deploy the Upgrade Readiness deployment script - -You can use the Upgrade Readiness deployment script to automate and verify your deployment. - -See [Upgrade Readiness deployment script](upgrade-readiness-deployment-script.md) for information on obtaining and running the script, and for a description of the error codes that can be displayed. - ->After data is sent from computers to Microsoft, it generally takes 48 hours for the data to populate in Upgrade Readiness. The compatibility update KB takes several minutes to run. If the KB does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most your computers to be populated in OMS in about 1-2 weeks after deploying the KB and configuration to user computers. - -## Deploy Upgrade Readiness at scale - -When you have completed a pilot deployment, you are ready to automate data collection and distribute the deployment script to the remaining computers in your organization. - ### Automate data collection To ensure that user computers are receiving the most up to date data from Microsoft, we recommend that you establish the following data sharing and analysis processes. @@ -138,6 +76,6 @@ To ensure that user computers are receiving the most up to date data from Micros >When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the deltas is created when the update package is installed. For Windows 10 devices, it's already part of the OS. A full scan averages about 2 MB, but the delta scans are very small. The scheduled task is named **Windows Compatibility Appraiser** and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Deltas are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. -### Distribute the deployment script at scale +## Use Upgrade Readiness to manage Windows Upgrades -Use a software distribution system such as System Center Configuration Manager to distribute the Upgrade Readiness deployment script at scale. For more information, see the [Upgrade Readiness blog](https://blogs.technet.microsoft.com/upgradeanalytics/2016/09/20/new-version-of-the-upgrade-analytics-deployment-script-available/). +Now that your devices are enrolled, you can move on to [Use Upgrade Readiness to manage Windows Upgrades](#use-upgrade-readiness-to-manage-windows-upgrades).. diff --git a/windows/deployment/upgrade/upgrade-readiness-requirements.md b/windows/deployment/upgrade/upgrade-readiness-requirements.md index 023c8405c5..83bda44d24 100644 --- a/windows/deployment/upgrade/upgrade-readiness-requirements.md +++ b/windows/deployment/upgrade/upgrade-readiness-requirements.md @@ -2,8 +2,8 @@ title: Upgrade Readiness requirements (Windows 10) description: Provides requirements for Upgrade Readiness. ms.prod: w10 -author: greg-lindsay -ms.date: 11/08/2017 +author: jaimeo +ms.date: 03/15/2018 --- # Upgrade Readiness requirements @@ -47,34 +47,7 @@ Important: You can use either a Microsoft Account or a Work or School account to Upgrade Readiness can be integrated with your installation of Configuration Manager. For more information, see [Integrate Upgrade Readiness with System Center Configuration Manager](https://docs.microsoft.com/sccm/core/clients/manage/upgrade/upgrade-analytics). -## Diagnostic data and data sharing -After you’ve signed in to Operations Management Suite and added the Upgrade Readiness solution to your workspace, you’ll need to complete the following tasks to allow user computer data to be shared with and assessed by Upgrade Readiness. - -See [Windows 7, Windows 8, and Windows 8.1 appraiser diagnostic data events and fields](https://go.microsoft.com/fwlink/?LinkID=822965) for more information about what user computer data Upgrade Readiness collects and assesses. See [Configure Windows diagnostic data in your organization](/windows/configuration/configure-windows-diagnostic-data-in-your-organization) for more information about how Microsoft uses Windows diagnostic data. - -**Whitelist diagnostic data endpoints.** To enable diagnostic data to be sent to Microsoft, you’ll need to whitelist the following Microsoft endpoints on your proxy server or firewall. You may need to get approval from your security group to do this. - -`https://v10.vortex-win.data.microsoft.com/collect/v1`
    -`https://vortex-win.data.microsoft.com/health/keepalive`
    -`https://settings.data.microsoft.com/qos`
    -`https://settings-win.data.microsoft.com/qos`
    -`https://go.microsoft.com/fwlink/?LinkID=544713`
    -`https://compatexchange1.trafficmanager.net/CompatibilityExchangeService.svc`
    - ->**Note** The compatibility update KB runs under the computer’s system account and does not support user authentication in this release. - -**Generate your commercial ID key.** Microsoft uses a unique commercial ID GUID to map data from your computers to your OMS workspace. You’ll need to generate your commercial ID key in OMS. We recommend that you save your commercial ID key as you’ll need it later. - -**Subscribe your OMS workspace to Upgrade Readiness.** For Upgrade Readiness to receive and display upgrade readiness data from Microsoft, you’ll need to subscribe your OMS workspace to Upgrade Readiness. - -**Enable diagnostic data and connect data sources.** To allow Upgrade Readiness to collect system, application, and driver data and assess your organization’s upgrade readiness, communication must be established between Upgrade Readiness and user computers. You’ll need to connect Upgrade Readiness to your data sources and enable diagnostic data to establish communication. - -**Deploy compatibility update and related KBs.** The compatibility update KB scans your systems and enables application usage tracking. If you don’t already have this KB installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager. - ->**Important**
    The compatibility update and related KBs are updated frequently to include new compatibility issues as they become known to Microsoft. We recommend that you use a deployment system that allows for automatic updates of these KBs. The compatibility update KB collects inventory information from computers only when it is updated. - -**Configure and deploy Upgrade Readiness deployment script.** Configure and deploy the Upgrade Readiness deployment script to user computers to finish setting up. ## Important information about this release From 8718fd369796bda9525370daf53a0efe258367c3 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 15 Mar 2018 10:53:38 -0700 Subject: [PATCH 072/138] moved 'enrolling' to more logical spot --- windows/deployment/TOC.md | 2 +- .../update/windows-analytics-FAQ-troubleshooting.md | 7 +++++-- windows/deployment/update/windows-analytics-get-started.md | 4 ++-- 3 files changed, 8 insertions(+), 5 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 788eae31c0..60b97c2e42 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -230,7 +230,6 @@ ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) ## [Windows Analytics](update/windows-analytics-overview.md) -### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) #### [Upgrade Readiness architecture](upgrade/upgrade-readiness-architecture.md) #### [Upgrade Readiness requirements](upgrade/upgrade-readiness-requirements.md) @@ -254,6 +253,7 @@ ### [Device Health](update/device-health-monitor.md) #### [Get started with Device Health](update/device-health-get-started.md) #### [Using Device Health](update/device-health-using.md) +### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) ### [Troubleshooting Windows Analytics and FAQ](update/windows-analytics-FAQ-troubleshooting.md) ## [Upgrade a Windows Phone 8.1 to Windows 10 Mobile with Mobile Device Management](upgrade/upgrade-windows-phone-8-1-to-10.md) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 4cc127f412..5548e78ab8 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -131,7 +131,9 @@ Currently, updates are not automatically updated by Microsoft Update, so new ver ### Upgrade Readiness reports incomplete inventory -Download the latest deployment script and run it on an affected device to check for issues. If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. +Download the latest deployment script and run it on an affected device to check for issues. See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. + +If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. @@ -142,7 +144,8 @@ Upgrade Readiness only collects app inventory on devices that are not yet upgrad ### Upgrade Readiness doesn't show IE site discovery data from some devices -Double-check that IE site discovery opt-in has been configured in the deployment script. +Double-check that IE site discovery opt-in has been configured in the deployment script. (See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity.) + Also, on Windows 10 devices remember that IE site discovery requires data diagnostics set to the Enhanced level. Finally, Upgrade Readiness only collects IE site discovery data on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 1457e294d5..1d0b442c14 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -89,8 +89,8 @@ The compatibility update scans your devices and enables application usage tracki | **Operating System** | **Updates** | |----------------------|-----------------------------------------------------------------------------| | Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

    Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](../upgrade/upgrade-readiness-requirements.md) for more information. | -| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
    Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
    For more information about this update, see

    [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
    Provides updated configuration and definitions for compatibility diagnostics performed on the system.
    For more information about this KB, see
    **NOTE:** KB2976978 must be installed before you can download and install KB3150513. | -| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
    Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
    For more information about this update, see

    [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
    Provides updated configuration and definitions for compatibility diagnostics performed on the system.
    For more information about this update, see
    **NOTE:** KB2952664 must be installed before you can download and install KB3150513. | +| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
    Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
    For more information about this update, see

    [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
    Provides updated configuration and definitions for compatibility diagnostics performed on the system.
    For more information about this KB, see
    **NOTE:** KB2976978 is a critical update, so it should already be installed by your management tool. You should, however, verify that it was deployed. | +| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
    Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
    For more information about this update, see

    [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
    Provides updated configuration and definitions for compatibility diagnostics performed on the system.
    For more information about this update, see
    **NOTE:** If KB 3510513 is reported as out of date, you should manually find a recent version at [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513) and ensure that it is installed and deployed. | >[!IMPORTANT] >Restart devices after you install the compatibility updates for the first time. From 1beda5a51bf0cf6553cf81bd743b22cf978ae1c6 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 15 Mar 2018 11:01:55 -0700 Subject: [PATCH 073/138] fixing UR links --- windows/deployment/upgrade/upgrade-readiness-get-started.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index 557a180f90..1a6a9e4da7 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -30,7 +30,7 @@ When you are ready to begin using Upgrade Readiness, perform the following steps ## Data collection and privacy -To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics, refer to [Frequently asked questions and troubleshooting Windows Analytics](windows-analytics-FAQ-troubleshooting.md), which discusses the issues and provides links to still more detailed information. +To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics, refer to [Frequently asked questions and troubleshooting Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md), which discusses the issues and provides links to still more detailed information. ## Add Upgrade Readiness to Operations Management Suite @@ -54,7 +54,7 @@ If you are not using OMS: ## Enroll devices in Windows Analytics -Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). +Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-get-started.md). ### Connection settings @@ -78,4 +78,4 @@ To ensure that user computers are receiving the most up to date data from Micros ## Use Upgrade Readiness to manage Windows Upgrades -Now that your devices are enrolled, you can move on to [Use Upgrade Readiness to manage Windows Upgrades](#use-upgrade-readiness-to-manage-windows-upgrades).. +Now that your devices are enrolled, you can move on to [Use Upgrade Readiness to manage Windows Upgrades](https://docs.microsoft.com/windows/deployment/upgrade/use-upgrade-readiness-to-manage-windows-upgrades). From 5f03ef9f3c0971486ef831fb1773da8e9bba73fe Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 15 Mar 2018 14:20:45 -0700 Subject: [PATCH 074/138] fixed some newly broken links and stray inappropriate references to 'KB' --- windows/deployment/update/device-health-monitor.md | 2 +- windows/deployment/update/update-compliance-monitor.md | 2 +- windows/deployment/update/update-compliance-using.md | 2 +- windows/deployment/upgrade/upgrade-readiness-get-started.md | 4 ++-- .../deployment/upgrade/upgrade-readiness-requirements.md | 4 ++-- .../upgrade/upgrade-readiness-upgrade-overview.md | 6 +++--- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/deployment/update/device-health-monitor.md b/windows/deployment/update/device-health-monitor.md index 078a95742a..96aec57103 100644 --- a/windows/deployment/update/device-health-monitor.md +++ b/windows/deployment/update/device-health-monitor.md @@ -67,7 +67,7 @@ These steps are illustrated in following diagram: [![](images/analytics-architecture.png)](images/analytics-architecture.png) >[!NOTE] ->This process assumes that Windows diagnostic data is enabled and you [have assigned your Commercial ID to devices](update-compliance-get-started.md#deploy-your-commercial-id-to-your-windows-10-devices). +>This process assumes that Windows diagnostic data is enabled and data sharing is enabled as described in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). diff --git a/windows/deployment/update/update-compliance-monitor.md b/windows/deployment/update/update-compliance-monitor.md index 638cb4079e..a7ed74d098 100644 --- a/windows/deployment/update/update-compliance-monitor.md +++ b/windows/deployment/update/update-compliance-monitor.md @@ -54,7 +54,7 @@ These steps are illustrated in following diagram: ![Update Compliance architecture](images/uc-01-wdav.png) >[!NOTE] ->This process assumes that Windows diagnostic data is enabled and you [have assigned your Commercial ID to devices](update-compliance-get-started.md#deploy-your-commercial-id-to-your-windows-10-devices). +>This process assumes that Windows diagnostic data is enabled and data sharing is enabled as described in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). diff --git a/windows/deployment/update/update-compliance-using.md b/windows/deployment/update/update-compliance-using.md index fe2d443d21..59660993ae 100644 --- a/windows/deployment/update/update-compliance-using.md +++ b/windows/deployment/update/update-compliance-using.md @@ -32,7 +32,7 @@ In Update Compliance, data is separated into vertically-sliced sections. Each se After Update Compliance has successfully been added from the solution gallery, you’ll see this tile: ![Empty Update Compliance Tile](images/uc-emptyworkspacetile.png) -When the solution is added, data is not immediately available. Data will begin to be collected after data is sent up that is associated with the Commercial ID associated with the device. If you haven’t read about assigning your Commercial ID to your devices, refer to [this topic](update-compliance-get-started.md#deploy-your-commercial-id-to-your-windows-10-devices). After Microsoft has collected and processed any device data associated with your Commercial ID, the tile will be replaced with the following summary: +When the solution is added, data is not immediately available. Data will begin to be collected after data is sent up that is associated with the Commercial ID associated with the device. This process assumes that Windows diagnostic data is enabled and data sharing is enabled as described in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). After Microsoft has collected and processed any device data associated with your Commercial ID, the tile will be replaced with the following summary: ![Filled Update Compliance Tile](images/uc-filledworkspacetile.png) diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index 1a6a9e4da7..ebfdbf06e8 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -70,8 +70,8 @@ The settings that are used to enable client computers to connect to Windows diag To ensure that user computers are receiving the most up to date data from Microsoft, we recommend that you establish the following data sharing and analysis processes. -- Enable automatic updates for the compatibility update and related KBs. These KBs are updated frequently to include the latest application and driver issue information as we discover it during testing. -- Schedule the Upgrade Readiness deployment script to automatically run so that you don’t have to manually initiate an inventory scan each time the compatibility update KBs are updated. +- Enable automatic updates for the compatibility update and related updates. These updates are updated frequently to include the latest application and driver issue information as we discover it during testing. +- Schedule the Upgrade Readiness deployment script to automatically run so that you don’t have to manually initiate an inventory scan each time the compatibility updates are updated. - Schedule monthly user computer scans to view monthly active computer and usage information. >When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the deltas is created when the update package is installed. For Windows 10 devices, it's already part of the OS. A full scan averages about 2 MB, but the delta scans are very small. The scheduled task is named **Windows Compatibility Appraiser** and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Deltas are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. diff --git a/windows/deployment/upgrade/upgrade-readiness-requirements.md b/windows/deployment/upgrade/upgrade-readiness-requirements.md index 83bda44d24..252ed481b1 100644 --- a/windows/deployment/upgrade/upgrade-readiness-requirements.md +++ b/windows/deployment/upgrade/upgrade-readiness-requirements.md @@ -16,7 +16,7 @@ This article introduces concepts and steps needed to get up and running with Upg To perform an in-place upgrade, user computers must be running the latest version of either Windows 7 SP1 or Windows 8.1. After you enable Windows diagnostic data, Upgrade Readiness performs a full inventory of computers so that you can see which version of Windows is installed on each computer. -The compatibility update KB that sends diagnostic data from user computers to Microsoft data centers works with Windows 7 SP1 and Windows 8.1 only. Upgrade Readiness cannot evaluate Windows XP or Windows Vista for upgrade eligibility. +The compatibility update that sends diagnostic data from user computers to Microsoft data centers works with Windows 7 SP1 and Windows 8.1 only. Upgrade Readiness cannot evaluate Windows XP or Windows Vista for upgrade eligibility. @@ -29,7 +29,7 @@ See [Windows 10 Specifications](http://www.microsoft.com/en-US/windows/windows-1 ### Windows 10 Keeping Windows 10 up to date involves deploying a feature update, and Upgrade Readiness tools help you prepare and plan for these Windows updates. -The latest cumulative updates must be installed on Windows 10 computers to make sure that the required compatibility KBs are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com). +The latest cumulative updates must be installed on Windows 10 computers to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com). Windows 10 LTSB is not supported by Upgrade Readiness. The Long-Term Servicing Channel of Windows 10 is not intended for general deployment, and does not receive feature updates, therefore it is not compatible with Upgrade Readiness. See [Windows as a service overview](../update/waas-overview.md#long-term-servicing-channel) to understand more about LTSB. diff --git a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md index f1e9422095..acdb75166c 100644 --- a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md +++ b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md @@ -33,9 +33,9 @@ The following color-coded status changes are reflected on the upgrade overview b - If the current value is an older OS version than the recommended value, but not deprecated, the version is displayed in amber. - If the current value is a deprecated OS version, the version is displayed in red. -Click on a row to drill down and see details about individual computers. If KBs are missing, see [Deploy the compatibility update and related KBs](upgrade-readiness-get-started.md#deploy-the-compatibility-update-and-related-kbs) for information on required KBs. +Click a row to drill down and see details about individual computers. If updates are missing, see [Deploy the compatibility update and related updates](windows-analytics-get-started.md#deploy-the-compatibility-update-and-related-updates) for information on required updates. -In the following example, there is no delay in data processing, more than 10% of computers (6k\8k) have incomplete data, more than 30% of computers (6k/8k) require a KB update, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: +In the following example, there is no delay in data processing, more than 10% of computers (6k\8k) have incomplete data, more than 30% of computers (6k/8k) require an update, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: ![Upgrade overview](../images/ur-overview.png) @@ -45,7 +45,7 @@ In the following example, there is no delay in data processing, more than 10% of If data processing is delayed, the "Last updated" banner will indicate the date on which data was last updated. You can continue using your workspace as normal. However, any changes or additional information that is added might not be displayed until data is refreshed. When your workspace is in this state, there is no action required; data is typically refreshed and the display will return to normal again within 24 hours. -If there are computers with incomplete data, verify that you have installed the latest compatibilty update KBs. Install the updated KBs if necessary and then run the most recent [Update Readiness deployment script](https://go.microsoft.com/fwlink/?LinkID=822966&clcid=0x409) from the Microsoft download center. The updated data payload should appear in Upgrade Readiness within 48 hours of a successful run on the deployment script. +If there are computers with incomplete data, verify that you have installed the latest compatibilty updates. Install the updates if necessary and then run the most recent [Update Readiness deployment script](https://go.microsoft.com/fwlink/?LinkID=822966&clcid=0x409) from the Microsoft download center. The updated data payload should appear in Upgrade Readiness within 48 hours of a successful run on the deployment script. Select **Total computers** for a list of computers and details about them, including: From ab48df27a4b337e9dee867774866608916276b2a Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Thu, 15 Mar 2018 22:04:29 +0000 Subject: [PATCH 075/138] Merged PR 6410: Updated the What's new in MDM topic --- ...ew-in-windows-mdm-enrollment-management.md | 224 ++++++++++++++++++ 1 file changed, 224 insertions(+) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 035cb49656..179f91846f 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -30,6 +30,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s - [What's new in Windows 10, version 1607](#whatsnew1607) - [What's new in Windows 10, version 1703](#whatsnew10) - [What's new in Windows 10, version 1709](#whatsnew1709) +- [What's new in Windows 10, version 1803](#whatsnew1803) - [Change history in MDM documentation](#change-history-in-mdm-documentation) - [Breaking changes and known issues](#breaking-changes-and-known-issues) - [Get command inside an atomic command is not supported](#getcommand) @@ -1124,6 +1125,229 @@ For details about Microsoft mobile device management protocols for Windows 10 s +## What's new in Windows 10, version 1803 + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    New or updated topicDescription
    [Policy CSP](policy-configuration-service-provider.md)

    Added the following new policies for Windows 10, version 1803:

    +
      +
    • AccountPoliciesAccountLockoutPolicy/AccountLockoutDuration
      • +
    • AccountPoliciesAccountLockoutPolicy/AccountLockoutThreshold
      • +
    • AccountPoliciesAccountLockoutPolicy/ResetAccountLockoutCounterAfter
      • +
    • ApplicationDefaults/EnableAppUriHandlers
      • +
    • Browser/AllowConfigurationUpdateForBooksLibrary
      • +
    • Browser/AlwaysEnableBooksLibrary
      • +
    • Browser/EnableExtendedBooksTelemetry
      • +
    • Browser/UseSharedFolderForBooks
      • +
    • Connectivity/AllowPhonePCLinking
      • +
    • DeliveryOptimization/DODelayBackgroundDownloadFromHttp
      • +
    • DeliveryOptimization/DODelayForegroundDownloadFromHttp
      • +
    • DeliveryOptimization/DOGroupIdSource
      • +
    • DeliveryOptimization/DOPercentageMaxBackDownloadBandwidth
      • +
    • DeliveryOptimization/DOPercentageMaxForeDownloadBandwidth
      • +
    • DeliveryOptimization/DORestrictPeerSelectionBy
      • +
    • DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth
      • +
    • DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth
      • +
    • Display/DisablePerProcessDpiForApps
      • +
    • Display/EnablePerProcessDpi
      • +
    • Display/EnablePerProcessDpiForApps
      • +
    • Experience/AllowWindowsSpotlightOnSettings
      • +
    • KioskBrowser/BlockedUrlExceptions
      • +
    • KioskBrowser/BlockedUrls
      • +
    • KioskBrowser/DefaultURL
      • +
    • KioskBrowser/EnableHomeButton
      • +
    • KioskBrowser/EnableNavigationButtons
      • +
    • KioskBrowser/RestartOnIdleTime
      • +
    • LocalPoliciesSecurityOptions/Devices_AllowUndockWithoutHavingToLogon
      • +
    • LocalPoliciesSecurityOptions/Devices_AllowedToFormatAndEjectRemovableMedia
      • +
    • LocalPoliciesSecurityOptions/Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrinters
      • +
    • LocalPoliciesSecurityOptions/Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnly
      • +
    • LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways
      • +
    • LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptSecureChannelDataWhenPossible
      • +
    • LocalPoliciesSecurityOptions/DomainMember_DigitallySignSecureChannelDataWhenPossible
      • +
    • LocalPoliciesSecurityOptions/DomainMember_DisableMachineAccountPasswordChanges
      • +
    • LocalPoliciesSecurityOptions/DomainMember_MaximumMachineAccountPasswordAge
      • +
    • LocalPoliciesSecurityOptions/DomainMember_RequireStrongSessionKey
      • +
    • LocalPoliciesSecurityOptions/InteractiveLogon_SmartCardRemovalBehavior
      • +
    • LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsAlways
      • +
    • LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees
      • +
    • LocalPoliciesSecurityOptions/MicrosoftNetworkClient_SendUnencryptedPasswordToThirdPartySMBServers
      • +
    • LocalPoliciesSecurityOptions/MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession
      • +
    • LocalPoliciesSecurityOptions/MicrosoftNetworkServer_DigitallySignCommunicationsAlways
      • +
    • LocalPoliciesSecurityOptions/MicrosoftNetworkServer_DigitallySignCommunicationsIfClientAgrees
      • +
    • LocalPoliciesSecurityOptions/NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts
      • +
    • LocalPoliciesSecurityOptions/NetworkAccess_DoNotAllowAnonymousEnumerationOfSamAccountsAndShares
      • +
    • LocalPoliciesSecurityOptions/NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers
      • +
    • LocalPoliciesSecurityOptions/NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares
      • +
    • LocalPoliciesSecurityOptions/NetworkAccess_RestrictClientsAllowedToMakeRemoteCallsToSAM
      • +
    • LocalPoliciesSecurityOptions/NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM
      • +
    • LocalPoliciesSecurityOptions/NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange
      • +
    • LocalPoliciesSecurityOptions/NetworkSecurity_LANManagerAuthenticationLevel
      • +
    • LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients
      • +
    • LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers
      • +
    • LocalPoliciesSecurityOptions/Shutdown_ClearVirtualMemoryPageFile
      • +
    • LocalPoliciesSecurityOptions/SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems
      • +
    • LocalPoliciesSecurityOptions/UserAccountControl_DetectApplicationInstallationsAndPromptForElevation
      • +
    • LocalPoliciesSecurityOptions/UserAccountControl_UseAdminApprovalMode
      • +
    • RestrictedGroups/ConfigureGroupMembership
      • +
    • Search/AllowCortanaInAAD
      • +
    • Search/DoNotUseWebResults
      • +
    • Security/ConfigureWindowsPasswords
      • +
    • System/FeedbackHubAlwaysSaveDiagnosticsLocally
      • +
    • SystemServices/ConfigureHomeGroupListenerServiceStartupMode
      • +
    • SystemServices/ConfigureHomeGroupProviderServiceStartupMode
      • +
    • SystemServices/ConfigureXboxAccessoryManagementServiceStartupMode
      • +
    • SystemServices/ConfigureXboxLiveAuthManagerServiceStartupMode
      • +
    • SystemServices/ConfigureXboxLiveGameSaveServiceStartupMode
      • +
    • SystemServices/ConfigureXboxLiveNetworkingServiceStartupMode
      • +
    • TaskScheduler/EnableXboxGameSaveTask
      • +
    • TextInput/AllowHardwareKeyboardTextSuggestions
      • +
    • TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode
      • +
    • TextInput/ForceTouchKeyboardDockedState
      • +
    • TextInput/TouchKeyboardDictationButtonAvailability
      • +
    • TextInput/TouchKeyboardEmojiButtonAvailability
      • +
    • TextInput/TouchKeyboardFullModeAvailability
      • +
    • TextInput/TouchKeyboardHandwritingModeAvailability
      • +
    • TextInput/TouchKeyboardNarrowModeAvailability
      • +
    • TextInput/TouchKeyboardSplitModeAvailability
      • +
    • TextInput/TouchKeyboardWideModeAvailability
      • +
    • Update/ConfigureFeatureUpdateUninstallPeriod
      • +
    • UserRights/AccessCredentialManagerAsTrustedCaller
      • +
    • UserRights/AccessFromNetwork
      • +
    • UserRights/ActAsPartOfTheOperatingSystem
      • +
    • UserRights/AllowLocalLogOn
      • +
    • UserRights/BackupFilesAndDirectories
      • +
    • UserRights/ChangeSystemTime
      • +
    • UserRights/CreateGlobalObjects
      • +
    • UserRights/CreatePageFile
      • +
    • UserRights/CreatePermanentSharedObjects
      • +
    • UserRights/CreateSymbolicLinks
      • +
    • UserRights/CreateToken
      • +
    • UserRights/DebugPrograms
      • +
    • UserRights/DenyAccessFromNetwork
      • +
    • UserRights/DenyLocalLogOn
      • +
    • UserRights/DenyRemoteDesktopServicesLogOn
      • +
    • UserRights/EnableDelegation
      • +
    • UserRights/GenerateSecurityAudits
      • +
    • UserRights/ImpersonateClient
      • +
    • UserRights/IncreaseSchedulingPriority
      • +
    • UserRights/LoadUnloadDeviceDrivers
      • +
    • UserRights/LockMemory
      • +
    • UserRights/ManageAuditingAndSecurityLog
      • +
    • UserRights/ManageVolume
      • +
    • UserRights/ModifyFirmwareEnvironment
      • +
    • UserRights/ModifyObjectLabel
      • +
    • UserRights/ProfileSingleProcess
      • +
    • UserRights/RemoteShutdown
      • +
    • UserRights/RestoreFilesAndDirectories
      • +
    • UserRights/TakeOwnership
      • +
    • WindowsDefenderSecurityCenter/DisableAccountProtectionUI
      • +
    • WindowsDefenderSecurityCenter/DisableDeviceSecurityUI
      • +
    • WindowsDefenderSecurityCenter/HideRansomwareDataRecovery
      • +
    • WindowsDefenderSecurityCenter/HideSecureBoot
      • +
    • WindowsDefenderSecurityCenter/HideTPMTroubleshooting
      • +
    +

    Security/RequireDeviceEncrption - updated to show it is supported in desktop.

    +
    [BitLocker CSP](bitlocker-csp.md)

    Updated the description for AllowWarningForOtherDiskEncryption to describe changes added in Windows 10, version 1803.

    +
    [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md)

    Added new node MaintainProcessorArchitectureOnUpdate in Windows 10, version 1803.

    +
    [DMClient CSP](dmclient-csp.md)

    Added ./User/Vendor/MSFT/DMClient/Provider/[ProviderID]/FirstSyncStatus node. Also added the following nodes in Windows 10, version 1803:

    +
      +
    • AADSendDeviceToken
      • +
    • BlockInStatusPage
      • +
    • AllowCollectLogsButton
      • +
    • CustomErrorText
      • +
    • SkipDeviceStatusPage
      • +
    • SkipUserStatusPage
      • +
    +
    [RemoteWipe CSP](remotewipe-csp.md)

    Added the following nodes in Windows 10, version 1803:

    +
      +
    • AutomaticRedeployment
      • +
    • doAutomaticRedeployment
      • +
    • LastError
      • +
    • Status
      • +
    +
    [Defender CSP](defender-csp.md)

    Added new node (OfflineScan) in Windows 10, version 1803.

    +
    [UEFI CSP](uefi-csp.md)

    Added a new CSP in Windows 10, version 1803.

    +
    [Update CSP](update-csp.md)

    Added the following nodes in Windows 10, version 1803:

    +
      +
    • Rollback
      • +
    • Rollback/FeatureUpdate
      • +
    • Rollback/QualityUpdateStatus
      • +
    • Rollback/FeatureUpdateStatus
      • +
    +
    [AssignedAccess CSP](assignedaccess-csp.md)

    Added the following nodes in Windows 10, version 1803:

    +
      +
    • Status
      • +
    • ShellLauncher
      • +
    • StatusConfiguration
      • +
    +

    Updated the AssigneAccessConfiguration schema.

    +
    [MultiSIM CSP](multisim-csp.md)

    Added a new CSP in Windows 10, version 1803.

    +
    [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md)

    Added the following node in Windows 10, version 1803:

    +
      +
    • MaintainProcessorArchitectureOnUpdate
      • +
    +
    [eUICCs CSP](euiccs-csp.md)

    Added the following node in Windows 10, version 1803:

    +
      +
    • IsEnabled
      • +
    +
    [DeviceStatus CSP](devicestatus-csp.md)

    Added the following node in Windows 10, version 1803:

    +
      +
    • OS/Mode
      • +
    +
    + ## Breaking changes and known issues ### Get command inside an atomic command is not supported From 945befa7ab2b5d54166b995e7c55729dcfe96ee6 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 15 Mar 2018 15:10:10 -0700 Subject: [PATCH 076/138] removed modern standby --- .../bitlocker/bitlocker-countermeasures.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-countermeasures.md b/windows/security/information-protection/bitlocker/bitlocker-countermeasures.md index ca2703df29..e692472aa5 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-countermeasures.md +++ b/windows/security/information-protection/bitlocker/bitlocker-countermeasures.md @@ -94,7 +94,7 @@ For many years, Microsoft has recommended using pre-boot authentication to prote Although effective, pre-boot authentication is inconvenient to users. In addition, if a user forgets their PIN or loses their startup key, they’re denied access to their data until they can contact their organization’s support team to obtain a recovery key. Today, most new PCs running Windows 10, Windows 8.1, or Windows 8 provide sufficient protection against DMA attacks without requiring pre-boot authentication. For example, most modern PCs include USB port options (which are not vulnerable to DMA attacks) but do not include FireWire or Thunderbolt ports (which are vulnerable to DMA attacks). -BitLocker-encrypted devices with DMA ports enabled, including FireWire or Thunderbolt ports, should be configured with pre-boot authentication if they are running Windows 10, Windows 7, Windows 8, or Windows 8.1 and disabling the ports using policy or firmware configuration is not an option. Windows 8.1 and later Modern Standby devices do not need pre-boot authentication to defend against DMA-based port attacks, as the ports will not be present on certified devices. A non-Modern Standby Windows 8.1 and later device requires pre-boot authentication if DMA ports are enabled on the device and additional mitigations described in this document are not implemented. Many customers find that the DMA ports on their devices are never used, and they choose to eliminate the possibility of an attack by disabling the DMA ports themselves, either at the hardware level or through Group Policy. +BitLocker-encrypted devices with DMA ports enabled, including FireWire or Thunderbolt ports, should be configured with pre-boot authentication if they are running Windows 10, Windows 7, Windows 8, or Windows 8.1 and disabling the ports using policy or firmware configuration is not an option. Many customers find that the DMA ports on their devices are never used, and they choose to eliminate the possibility of an attack by disabling the DMA ports themselves, either at the hardware level or through Group Policy. Many new mobile devices have the system memory soldered to the motherboard, which helps prevent the cold boot–style attack, where the system memory is frozen, removed, and then placed into another device. Those devices, and most PCs, can still be vulnerable when booting to a malicious operating system, however. You can mitigate the risk of booting to a malicious operating system: From 23623d0b76272bbfbfbcd099936a6105e285e25d Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Thu, 15 Mar 2018 23:12:46 +0000 Subject: [PATCH 077/138] Merged PR 6412: RestrictedGroups/ConfigureGroupMembership added to Policy CSP --- ...ew-in-windows-mdm-enrollment-management.md | 3 +- .../mdm/policy-csp-restrictedgroups.md | 41 +++++++++---------- 2 files changed, 21 insertions(+), 23 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 179f91846f..76e76e3673 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -10,7 +10,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/03/2018 +ms.date: 03/15/2018 --- # What's new in MDM enrollment and management @@ -1655,6 +1655,7 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware

    • ApplicationDefaults/EnableAppUriHandlers
    • Connectivity/AllowPhonePCLinking
      • +
    • RestrictedGroups/ConfigureGroupMembership
    diff --git a/windows/client-management/mdm/policy-csp-restrictedgroups.md b/windows/client-management/mdm/policy-csp-restrictedgroups.md index 8b0251476c..8e59202bfb 100644 --- a/windows/client-management/mdm/policy-csp-restrictedgroups.md +++ b/windows/client-management/mdm/policy-csp-restrictedgroups.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 01/12/2018 +ms.date: 03/15/2018 --- # Policy CSP - RestrictedGroups @@ -17,20 +17,22 @@ ms.date: 01/12/2018
    - + ## RestrictedGroups policies
    - RestrictedGroups/ConfigureGroupMembership + RestrictedGroups/ConfigureGroupMembership
    +
    - + + **RestrictedGroups/ConfigureGroupMembership** - + @@ -47,13 +49,13 @@ ms.date: 01/12/2018 - - + +
    Homecheck mark4 check mark4 check mark4cross markcross mark
    - - + + [Scope](./policy-configuration-service-provider.md#policy-scope): > [!div class = "checklist"] @@ -61,19 +63,13 @@ ms.date: 01/12/2018
    - - -This security setting allows an administrator to define the members of a security-sensitive (restricted) group. When a Restricted Groups Policy is enforced, any current member of a restricted group that is not on the Members list is removed. Any user on the Members list who is not currently a member of the restricted group is added. You can use Restricted Groups policy to control group membership. + + +This security setting allows an administrator to define the members of a security-sensitive (restricted) group. When a Restricted Groups Policy is enforced, any current member of a restricted group that is not on the Members list is removed. Any user on the Members list who is not currently a member of the restricted group is added. You can use Restricted Groups policy to control group membership. Using the policy, you can specify what members are part of a group. Any members that are not specified in the policy are removed during configuration or refresh. For example, you can create a Restricted Groups policy to only allow specified users (for example, Alice and John) to be members of the Administrators group. When policy is refreshed, only Alice and John will remain as members of the Administrators group. -> [!Note] -> This policy is only scoped to the Administrators group at this time. +Caution: If a Restricted Groups policy is applied, any current member not on the Restricted Groups policy members list is removed. This can include default members, such as administrators. Restricted Groups should be used primarily to configure membership of local groups on workstation or member servers. An empty Members list means that the restricted group has no members. -Using the policy, you can specify what members are part of a group. Any members that are not specified in the policy are removed during configuration or refresh. For example, you can create a Restricted Groups policy to only allow specified users (for example, Alice and John) to be members of the Administrators group. When policy is refreshed, only Alice and John will remain as members of the Administrators group. - -> [!Note] -> If a Restricted Groups policy is applied, any current member not on the Restricted Groups policy members list is removed. This can include default members, such as administrators. Restricted Groups should be used primarily to configure membership of local groups on workstation or member servers. An empty Members list means that the restricted group has no members. - - + @@ -83,7 +79,7 @@ Using the policy, you can specify what members are part of a group. Any members - +
    Footnote: @@ -91,6 +87,7 @@ Footnote: - 1 - Added in Windows 10, version 1607. - 2 - Added in Windows 10, version 1703. - 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. - + From c6f495d6c9a65262413c83d9060a46cbd8b28aa1 Mon Sep 17 00:00:00 2001 From: Technion Date: Fri, 16 Mar 2018 07:53:01 +0000 Subject: [PATCH 078/138] Fixes #559 by referencing modern password policy. --- .../security-policy-settings/maximum-password-age.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/security-policy-settings/maximum-password-age.md b/windows/security/threat-protection/security-policy-settings/maximum-password-age.md index 5577c3b083..cbcffa7067 100644 --- a/windows/security/threat-protection/security-policy-settings/maximum-password-age.md +++ b/windows/security/threat-protection/security-policy-settings/maximum-password-age.md @@ -59,15 +59,15 @@ None. Changes to this policy become effective without a computer restart when th ## Security considerations -This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and the possible negative consequences of countermeasure implementation. +This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and the possible negative consequences of implementation. ### Vulnerability -The longer a password exists, the higher the likelihood that it will be compromised by a brute force attack, by an attacker gaining general knowledge about the user, or by the user sharing the password. Configuring the **Maximum password age** policy setting to 0 so that users are never required to change their passwords is a major security risk because that allows a compromised password to be used by the malicious user for as long as the valid user is authorized access. +Modern security guidance does not consider long lifetime passwords a vulnerability. See [Microsoft Password Guidance](https://www.microsoft.com/en-us/research/publication/password-guidance/) for further information. -### Countermeasure +### Considerations -Configure the **Maximum password age** policy setting to a value that is suitable for your organization's business requirements. +Many organisations have compliance or insurance mandates requiring a short lifespan on passwords. Where such a requirement exists, the **Maximum password age** policy setting can be used to meet your organization's business requirements. ### Potential impact From 171aa66a2514f0e9b6394e12ab7ab7690c15c96e Mon Sep 17 00:00:00 2001 From: Ryan Parsons Date: Fri, 16 Mar 2018 08:07:22 -0600 Subject: [PATCH 079/138] Update hello-planning-guide.md Fixed a number of spelling and grammatical errors in the document. --- .../hello-planning-guide.md | 28 +++++++++---------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-planning-guide.md b/windows/security/identity-protection/hello-for-business/hello-planning-guide.md index 331d1f28df..6fb47a926e 100644 --- a/windows/security/identity-protection/hello-for-business/hello-planning-guide.md +++ b/windows/security/identity-protection/hello-for-business/hello-planning-guide.md @@ -70,7 +70,7 @@ It’s fundamentally important to understand which deployment model to use for a #### Trust types -A deployments trust type defines how each Windows Hello for Business client authenticates to the on-premises Active Directory. There are two trusts types, key trust and certificate trust. +A deployment's trust type defines how each Windows Hello for Business client authenticates to the on-premises Active Directory. There are two trust types: key trust and certificate trust. The key trust type does not require issuing authentication certificates to end users. Users authenticate using a hardware-bound key created during an in-box provisioning experience, which requires an adequate distribution of Windows Server 2016 domain controllers relative to your existing authentication and the number of users included in your Windows Hello for Business deployment. Read the [Planning an adequate number of Windows Server 2016 Domain Controllers for Windows Hello for Business deployments](hello-adequate-domain-controllers.md) to learn more. @@ -86,9 +86,9 @@ The in-box Windows Hello for Business provisioning experience creates a hardware #### Multifactor authentication -The goal of Windows Hello for Business is to move organizations away from passwords by providing them a strong credential that providers easy two-factor authentication. The inbox provisioning experience accepts the user’s weak credentials (username and password) as the first factor authentication; however, the user must provide a second factor of authentication before Windows provisions a strong credential. +The goal of Windows Hello for Business is to move organizations away from passwords by providing them a strong credential that provides easy two-factor authentication. The inbox provisioning experience accepts the user’s weak credentials (username and password) as the first factor authentication; however, the user must provide a second factor of authentication before Windows provisions a strong credential. -Cloud only and hybrid deployments provide many choices for multifactor authentication. On-premises deployments must use a multifactor authentication that provides an AD FS multifactor adapter to be used in conjunction with the on-premises Windows Server 2016 AD FS server role. Organizations can use from the on-premises Azure Multifactor Authentication server, or choose from several third parties (Read [Microsoft and third-party additional authentication methods](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods) for more information). +Cloud only and hybrid deployments provide many choices for multifactor authentication. On-premises deployments must use a multifactor authentication that provides an AD FS multifactor adapter to be used in conjunction with the on-premises Windows Server 2016 AD FS server role. Organizations can use the on-premises Azure Multifactor Authentication server, or choose from several third parties (Read [Microsoft and third-party additional authentication methods](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods) for more information). >[!NOTE] > Azure Multi-Factor Authentication is available through: >* Microsoft Enterprise Agreement @@ -102,11 +102,11 @@ Cloud only and hybrid deployments provide many choices for multifactor authentic #### Directory synchronization -Hybrid and on-premises deployments use directory synchronization, however, each for a different purpose. Hybrid deployments use Azure Active Directory Connect to synchronization Active Directory identities or credentials between itself and Azure Active Directory. This helps enable single sign-on to Azure Active Directory and its federated components. +Hybrid and on-premises deployments use directory synchronization, however, each for a different purpose. Hybrid deployments use Azure Active Directory Connect to synchronize Active Directory identities or credentials between itself and Azure Active Directory. This helps enable single sign-on to Azure Active Directory and its federated components. ### Management -Windows Hello for Business provides organizations with a rich set of granular policy setting with which they can use to manage their devices and users. There are three ways in which you can manage Windows Hello for Business: Group Policy, Modern Management, and Mixed. +Windows Hello for Business provides organizations with a rich set of granular policy settings with which they can use to manage their devices and users. There are three ways in which you can manage Windows Hello for Business: Group Policy, Modern Management, and Mixed. #### Group Policy @@ -129,11 +129,11 @@ Hybrid and on-premises deployments include Active Directory as part of their inf ### Public Key Infrastructure -The Windows Hello for Business deployment depends on an enterprise public key infrastructure a trust anchor for authentication. Domain controllers for hybrid and on-prem deployments need a certificate in order for Windows 10 devices to trust the domain controller as legitimate. Deployments using the certificate trust type need an enterprise public key infrastructure and a certificate registration authority to issue authentication certificates to users. Hybrid deployments may need to issue VPN certificates to users to enable connectivity on-premises resources. +The Windows Hello for Business deployment depends on an enterprise public key infrastructure as a trust anchor for authentication. Domain controllers for hybrid and on-prem deployments need a certificate in order for Windows 10 devices to trust the domain controller as legitimate. Deployments using the certificate trust type need an enterprise public key infrastructure and a certificate registration authority to issue authentication certificates to users. Hybrid deployments may need to issue VPN certificates to users to enable connectivity on-premises resources. ### Cloud -Some deployment combinations require an Azure account and some require Azure Active Directory for user identities. These cloud requirements may only need an Azure account while other features need an Azure Active Directory Premium subscription. The planning process identifies and differentiate the components that are needed from the those that are optional. +Some deployment combinations require an Azure account and some require Azure Active Directory for user identities. These cloud requirements may only need an Azure account while other features need an Azure Active Directory Premium subscription. The planning process identifies and differentiates the components that are needed from the those that are optional. ## Planning a Deployment @@ -147,13 +147,13 @@ Choose the deployment model based on the resources your users access. Use the f If your organization does not have on-premises resources, write **Cloud Only** in box **1a** on your planning worksheet. -If your organization is federated with Azure or uses any online service, such as Office365 or OneDrive, or your users access cloud and on-premises resources, write **Hyrbid** in box **1a** on your planning worksheet. +If your organization is federated with Azure or uses any online service, such as Office365 or OneDrive, or your users access cloud and on-premises resources, write **Hybrid** in box **1a** on your planning worksheet. If your organization does not have cloud resources, write **On-Premises** in box **1a** on your planning worksheet. >[!NOTE] ->If you’re unsure if your organization is federated, run the following Active Directory Windows PowerShell command from and elevated Windows PowerShell prompt and evaluate the results. ->```Get-AdObject “CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=corp,DC=[forest_root_CN_name],DC=com -Properties keywords``` ->* If the command returns an error stating it could not find the object, then you have yet to configured AAD Connect or on-premises Device Registration Services using AD FS. Ensure the name is accurate and validate the object does not exist with another Active Directory Management tool such as **ADSIEdit.msc**. If the object truly does not exists, then you environment does not bind you to a specific deployment or require changes to accommodate the desired deployment type. +>If you’re unsure if your organization is federated, run the following Active Directory Windows PowerShell command from an elevated Windows PowerShell prompt and evaluate the results. +>```Get-AdObject “CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=corp,DC=[forest_root_CN_name],DC=com" -Properties keywords``` +>* If the command returns an error stating it could not find the object, then you have yet to configured AAD Connect or on-premises Device Registration Services using AD FS. Ensure the name is accurate and validate the object does not exist with another Active Directory Management tool such as **ADSIEdit.msc**. If the object truly does not exist, then you environment does not bind you to a specific deployment or require changes to accommodate the desired deployment type. >* If the command returns a value, compare that value with the values below. The value indicates the deployment model you should implement > * If the value begins with **azureADName:** – write **Hybrid** in box **1a**on your planning worksheet. > * If the value begins with **enterpriseDrsName:** – write **On-Premises** in box **1a** on your planning worksheet. @@ -235,7 +235,7 @@ If box **1a** on your planning worksheet reads **on-prem**, write **GP** in box Managing hybrid deployments includes two categories of devices to consider for your Windows Hello for Business deployment—domain joined and non-domain joined. All devices are registered, however, not all devices are domain joined. You have the option of using Group Policy for domain joined devices and modern management for non-domain joined devices. Or, you can use modern management for both domain and non-domain joined devices. -If you use Group Policy to manage your domain joined devices, write **GP** in box **2a** on your planning worksheet, Write **modern management** in box **2b** if you decide to manage non-domain joined devices; otherwise, write **N/A**. +If you use Group Policy to manage your domain joined devices, write **GP** in box **2a** on your planning worksheet. Write **modern management** in box **2b** if you decide to manage non-domain joined devices; otherwise, write **N/A**. If you use modern management for both domain and non-domain joined devices, write **modern management** in box **2a** and **2b** on your planning worksheet. @@ -261,7 +261,7 @@ Write **1703 or later** in box **3a** on your planning worksheet if any of the f ### Active Directory -The Active Directory portion of the planning guide should be complete. Most of conditions are baseline prerequisites except for your domain controllers. The domain controllers used in your deployment are decided by the chosen trust type. +The Active Directory portion of the planning guide should be complete. Most of the conditions are baseline prerequisites except for your domain controllers. The domain controllers used in your deployment are decided by the chosen trust type. Review the trust type portion of this section if box **4d** on your planning worksheet remains empty. @@ -306,7 +306,7 @@ Nearly all deployments of Windows Hello for Business require an Azure account. If box **1a** on your planning worksheet reads **cloud only** or **hybrid**, write **Yes** in boxes **6a** and **6b** on your planning worksheet. -If box **1a** on your planning worksheet reads **on-premises**, and box **1f** reads **AD FS with third party**, write **No** in box **6a** on your planning worksheet. Otherwise, write **Yes** in box **1f** as you need an Azure account for per-consumption MFA billing. Write **No** in box **6b** on your planning worksheet—on-premises deployments do not use the cloud directory. +If box **1a** on your planning worksheet reads **on-premises**, and box **1f** reads **AD FS with third party**, write **No** in box **6a** on your planning worksheet. Otherwise, write **Yes** in box **6a** as you need an Azure account for per-consumption MFA billing. Write **No** in box **6b** on your planning worksheet—on-premises deployments do not use the cloud directory. Windows Hello for Business does not require an Azure AD premium subscription. However, some dependencies do. From ead73382abcc5fe7ea0453fb9676c1dc2a0520dd Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Fri, 16 Mar 2018 08:49:46 -0700 Subject: [PATCH 080/138] placeholder file for docset provision --- windows/privacy/index.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 windows/privacy/index.md diff --git a/windows/privacy/index.md b/windows/privacy/index.md new file mode 100644 index 0000000000..867e2c8492 --- /dev/null +++ b/windows/privacy/index.md @@ -0,0 +1 @@ +# Placeholder \ No newline at end of file From e4b404375345f2fa6c63f7f8f626baa034d1d26d Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Fri, 16 Mar 2018 16:31:35 +0000 Subject: [PATCH 081/138] Initialize open publishing repository: https://cpubwin.visualstudio.com/DefaultCollection/it-client/_git/it-client of branch master --- .openpublishing.publish.config.json | 19 +++++++++++- windows/privacy/TOC.md | 1 + windows/privacy/breadcrumb/toc.yml | 3 ++ windows/privacy/docfx.json | 46 +++++++++++++++++++++++++++++ windows/privacy/index.md | 2 +- 5 files changed, 69 insertions(+), 2 deletions(-) create mode 100644 windows/privacy/TOC.md create mode 100644 windows/privacy/breadcrumb/toc.yml create mode 100644 windows/privacy/docfx.json diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 7c4e04d4a5..f36ea9dc13 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -135,6 +135,22 @@ "moniker_groups": [], "version": 0 }, + { + "docset_name": "privacy", + "build_source_folder": "windows/privacy", + "build_output_subfolder": "privacy", + "locale": "en-us", + "monikers": [], + "moniker_ranges": [], + "open_to_public_contributors": false, + "type_mapping": { + "Conceptual": "Content", + "ManagedReference": "Content", + "RestApi": "Content" + }, + "build_entry_point": "docs", + "template_folder": "_themes" + }, { "docset_name": "security", "build_source_folder": "windows/security", @@ -465,7 +481,8 @@ "branches_to_filter": [ "" ], - "git_repository_url_open_to_public_contributors": "https://cpubwin.visualstudio.com/_git/it-client", + "git_repository_url_open_to_public_contributors": "https://github.com/MicrosoftDocs/windows-itpro-docs", + "git_repository_branch_open_to_public_contributors": "master", "skip_source_output_uploading": false, "need_preview_pull_request": true, "resolve_user_profile_using_github": true, diff --git a/windows/privacy/TOC.md b/windows/privacy/TOC.md new file mode 100644 index 0000000000..06913f7aef --- /dev/null +++ b/windows/privacy/TOC.md @@ -0,0 +1 @@ +# [Index](index.md) \ No newline at end of file diff --git a/windows/privacy/breadcrumb/toc.yml b/windows/privacy/breadcrumb/toc.yml new file mode 100644 index 0000000000..61d8fca61e --- /dev/null +++ b/windows/privacy/breadcrumb/toc.yml @@ -0,0 +1,3 @@ +- name: Docs + tocHref: / + topicHref: / \ No newline at end of file diff --git a/windows/privacy/docfx.json b/windows/privacy/docfx.json new file mode 100644 index 0000000000..e1cbc9d653 --- /dev/null +++ b/windows/privacy/docfx.json @@ -0,0 +1,46 @@ +{ + "build": { + "content": [ + { + "files": [ + "**/*.md", + "**/*.yml" + ], + "exclude": [ + "**/obj/**", + "**/includes/**", + "_themes/**", + "_themes.pdf/**", + "README.md", + "LICENSE", + "LICENSE-CODE", + "ThirdPartyNotices" + ] + } + ], + "resource": [ + { + "files": [ + "**/*.png", + "**/*.jpg" + ], + "exclude": [ + "**/obj/**", + "**/includes/**", + "_themes/**", + "_themes.pdf/**" + ] + } + ], + "overwrite": [], + "externalReference": [], + "globalMetadata": { + "breadcrumb_path": "/windows/privacy/breadcrumb/toc.json", + "extendBreadcrumb": true + }, + "fileMetadata": {}, + "template": [], + "dest": "privacy", + "markdownEngineName": "markdig" + } +} \ No newline at end of file diff --git a/windows/privacy/index.md b/windows/privacy/index.md index 867e2c8492..f20ef925b9 100644 --- a/windows/privacy/index.md +++ b/windows/privacy/index.md @@ -1 +1 @@ -# Placeholder \ No newline at end of file +# Welcome to privacy! \ No newline at end of file From b9215811226e6eb41b42bc500f090c5b70526a56 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Fri, 16 Mar 2018 17:14:14 +0000 Subject: [PATCH 082/138] Updated .openpublishing.publish.config.json --- .openpublishing.publish.config.json | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index f36ea9dc13..9e9233eb13 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -481,8 +481,7 @@ "branches_to_filter": [ "" ], - "git_repository_url_open_to_public_contributors": "https://github.com/MicrosoftDocs/windows-itpro-docs", - "git_repository_branch_open_to_public_contributors": "master", + "git_repository_url_open_to_public_contributors": "https://cpubwin.visualstudio.com/_git/it-client", "skip_source_output_uploading": false, "need_preview_pull_request": true, "resolve_user_profile_using_github": true, From b4f68f81238361393f9515d53389c80ec77a7a18 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Fri, 16 Mar 2018 11:24:42 -0700 Subject: [PATCH 083/138] update powerbi content, image, and note --- .../images/atp-powerbi-accept.png | Bin 0 -> 25688 bytes .../images/atp-powerbi-consent.png | Bin 77714 -> 30535 bytes ...ows-defender-advanced-threat-protection.md | 12 ++++++------ 3 files changed, 6 insertions(+), 6 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-powerbi-accept.png diff --git a/windows/security/threat-protection/windows-defender-atp/images/atp-powerbi-accept.png b/windows/security/threat-protection/windows-defender-atp/images/atp-powerbi-accept.png new file mode 100644 index 0000000000000000000000000000000000000000..d36fb7296c7b549b5e0396ddc4d33acbfff55614 GIT binary patch literal 25688 zcmd?Rbx@UG^gepjkDy2>-3T0M=@Jj1QqnCTDUFnbbXYWqbc29&2?z)XsC0LibT>%D zUB^4$JNN#3XYS1JH}}kVU|!y{&wlq_Ydz0;*4hRrDM;a9kz*kc2ps9B;wlKll`{n5 zD*278a7CukToQiVeDzez0fE46K>xcE#fnP-7cm{BZNRTfB0#u(d%D+@z(4>saXPVz#eb?JdmA9TE9>9YSyw z_uo}}lNab)?>bson;`fO@ovIjZleF9YHRA~{KDP@q5J9*efzC{gIhQlS-pT;?GY6} zzlFl(8|cd#FYIkBY|IcpDHi?U8s`7``PcSFCWwQ}_iO)io0zS&wTX=*;%`TE9bCge z-==2aXk~)P-t1#UAnqch#UHD=B(B$ZzoIxuy1e{2heXn1yrY=4(jHUMvMIV>W=H%T z_bRLNH&QA|F-$6h{;vO${7IXnQVAx%rB|^`G*eno$YZ|t_?=`)Xs=xP(eSqKoWH+> zMf>cCuuP80FHW+m;)K{oR=Whv7Z*EKKk96qGMcu_(9rZ(};EzQ$f5*mcs_$#Gkm$M0_>ky*o?|WiZa7|U9b8;7 z?NyzZXZiAFZe``@iX;1*UyT_R6^B3HUdt%IicliY-<%>NC2d)lhVODa7}Pjey4=qa zm6w<2YPvXE674Rs+xt0F?U7Rd-CLD<3;NVb+dg*xA78l#OxEu}SsKS_gwgzFYYXud{f7)1!U@(f6 zqn=c;P|=H{fq?<|SW(q#Zl4w=BGx&d^@NCsXuv>&uu*B>`|@;}Lhrjpf2JR`o4Hp= zg1|>=VHwPn;|{Z<*49>O7A(Zi@aC#C@0~`HBJGMz7<22#URM~s6u;HT-3zy~qn*@L z+9pk1T`Hb2pwt(wEB9MvrLs^v5tu?DlQL^3KWDhi6c+}yEm7X9#< zgBKrZL`C@dpJ{1TzNp9OMU}i|%gR3b*>rUDeQ`clJrA266T#*L4;Wl*Sy;IUlMODu zxVTtcG~LP4&~r6`tx8Lq&CM(9^S@Xts-q5VCNmP4a-l!`#My*PB}5q797_4%cXz&S z_0ZCu_1HJ&IJw%tW0t{Oq0Ky8TswWT97#g20~HeazxA0-2pm;INJG9y1cp-+T={t@% zcbptUMEq6P^Mhf1@AKEb%)$sZT{huQ+WPv6)-%I;?(+M#a`N(FB140N>gwuo0jtML zDc)y0%@U1f!AXL4PX^4JMrbaNny04pcIMw+!*tr5U}h09va+||1!FyGRrLBzl*pj< z(r~U$K|w*};%M&l??yki49x@kc{9;dvc**dLNMB9MdR5so2efUk`xr>Zh zzwDunvZ3KWqxE>pLN0>tR53q2j~xl2i#Cl~y7t|ZgEd&KG#Vn8y-tC=ygU=F-Vd_qDeu#TQ{6w?O5HT!+Cg!L75 z=Nna3RYuJp!Lse}D zydGa^xFujcwm;hK#ZQUL(}YVY_zLzcMc6%B?}_Db;rT2{ou;xfdUr)`*nv~1u{4tA zWoLiCyf|GsYYL&T=GR71dvBBtGcYoycwZb34GrN?@b4cU_N%8HH82)_e^UK@rRw$C zKI0XHY(UBFa}z}`1BQ`(T@s$Akz1xQ&rAin&fG@6zNjbC(AoJrZd-S}m_R^4ur^eX zF3I~Zex=C@lfac9QRfFm-nx5v48BF482U>~(>>LclgLifcGJ>`hzRfF zc6}>;Z4;A)`T6+(0>;^$qv^}@=^*+VKU}IbTg$bzHNN`ZVO?jcO_TvWH4iNo#Gh6Lns7xzje%CM|_=s zyIcw}ESy(EITAvU$cJjLb2pxth&dlFQ`3*>q)VfvW-A8Ay9=)DGZ!fkHG3CSRaJ|A z?6!TRdYGO56Q{>0GwUkiE8*?y&y4Mi zclU>UGt*wD8>(3fJBXs%6P5>u4?H&Rh7^gC#4~3h-eh2kr*Jh573p_pZF2UDeQy9a zfZJXQdF{3`mX5Mfr3l*1f@8ZtblKBsZ?+`}_%DTlmy4^|teZM~%d)7(>HOrNIh4lx zWF@PT!VJFGcnSjJvm!lRZEabOWWd15YG()i%bp%3eSI3E{Is-pi=K<`LYcC2WsQ>mAai%7FgrUtKXIna4WccK_p-9z@_m=>)Q{u0 znAEpPy5r*G$*HIo+;u%6GTT+^?DsFk=zD>etGau?e7QPOZ1m*__O@p3<3pFPI%?0J zRZZI1uwbyQ@DdU?VCj>KhZzQcD;;_*{&ReSl!|A|SCJ9*t>m zfnH6#yK>86!Od1u_tT9Eb#+g`wrBa8cEBKphKKuuJ{Xz?1HMStNm3YDSy`=bR7_{y z3 z{{F~_W*mp^^+Q~Qfrb6w^-);#ZsR{$$!@DFSt(N$w$r-KldmC~@9v?;S5*`~08A^; zDqXxhue&@9Q1mct%7$R%1p6JmA=wWz{fYnKY<;ob`(iJp?rgUmk4k92H0699y<2}P z>O4nHVrsU3-$DmTSiVZb#z5dFUX6i73`VEh^>{J&wb5e{8=szC?FEj*2Qbpy)MWZv z+6euclyzn$P-K8|f{-dJjz12st@9HvQU(R|N%qS5rg~2GU%@ z!si#KTO>~R3qG}wf{jsXcrdJM3A3Vigqw0$LY4;c^$Yxt$E)2!geZvg+Fw?Fep+sT zex#L*n6B>)Cr{o*!%!=nA|fJ(Mb>0S)0Y>Ab(iN`4=F!BXyO582WHyoRP5)P5j-V| zKyZ>|W@dJDH`9=kF0ZU8s}FVvR5?$%W*u#1$|qRyk3$r(FbxD?8HnRCWB>l=YJ_j6 zz`tdCyG1WdUw7PTOBeR^*G(!Bpk6cewzbELu%j;}JDZ!EHNYSkXx5%U5+M5)tR_xh zV@dR4P88zwQ2z0F-MO}iOWx8g{iEO36_c5wmnUmQW~HO)QlTP;6Am^N3=;}-=J5&S2bUK7ftNDx)eH3a1IU*Bmxr4r|usodZHi0Zm(C0hRBZYEKBr!MbZ1D zzcEn0ex*N4w)QR_xb4^P%+a=fg08#9`ufu_ZHL|Y)^_&lb)d&-MGir~!RPOuz|JuS zF0*zUbB7B5ja_DQ+pJtFtoi%AZdyMwKmd3IxDo3HB{ll{?(hf;du~otrir6zy~xRO zI;?9g7<=8{vZ4ar>c7CpPY<^)C%3$sNvnYw1%m*2tj%(hB)zj9aB^gX!$pnlFkxnb}a-;tt*bKp@0`a@ykuWhZNR9N0 zG^_%=Hyu){S27bwjnLK@6t2{Yc6Wq304A9cnriJ&EB2C9LY!uodD7@6ON5PH3V-Hk zG4F*oNWe|nqgOmR=H}*tiw*BbXziLr)1DySNXQlQ?w7Q)YnPgKLhf^M)GYeai>|o~ z$e42Ehn_x6#G5{JQ2exY5x|&ycS*!(eSf9D*L)uwQWHKi42~U6uE{IIW8z?J{N+s^ z)@fhWS3H3ZTXzl>&GfnT(bDTW>Y8Q_qa`NSb;>>+KW_=oqCWrqMP0L%WU-pb%Kj

    +)g?yc3uMI#a7V-K^%V@7p>gv3xNf zUX&Z^`tKR;Na#;Yqfri!JbezJn$XfZ#U6n+&jv!-{ZMM*6Noi5!fuWL1dx1KTU&2H z%!P6PLQ+X7;vtA1a0ZsNd+gz$m_0AMDh4hW6r1KEtB@jc4iTMN*li!k-bIY}ag3tp zs_GeI#dwk&!{Pd9|L|}HkYk=x=mrIwot-#t8u~jO%ZKt>>EU#iA{C{kL!5fTQriUO8N{lfaz_ zpHi#Qk_R@j;hm-sMO`7w()T)EaD4~1$-)lO z{!zaMsC?0$cvERN#H{nH)hIVwry+c6f4iTInSlPE>2y<0p4<|9(e6b^^)I-5eL0w` zlJF@M)<4ptgh81Y1iGJ;T%ufy|9G;PA1+b!5J0neSEyGrkr;sSGlotN-_eIa4}X=I zv_C6&Zel930C5w&+v_96!tQ_1Aoz0pOR89w~jlNUpTA1;8DSHua%2_AtBLtokWK-rV&37ppmuB>@52Izjcu`F)?YK zTyBry;1Fvxd$ol?L?d~v>%MNhTj~N%)7}}?{SWmS@}3psW@ih6#Bw#O8kT6+YL4LF z?QE>@d^K(dPrAbNA&q&!D)Jsp6Zq#Xv`8oQYusM9HshQAw@C#+o|TqnxG`1+!OyHa znQw1p$V#i+Y82+P-2XLAO3x7;HD#4RqX0ey*}$yZv4x)LaefIWea4;h-;0JMPU^?1 zi_|~g<>cl*54X6l9=*DE?{~sHjFxoTkPLeTtH&NVRCD7wjAZ#(wzL4a7SJ|(^sDbj zH+ll#p#v7N8uUweux~#D*|f`ppP}?B?H2$-0Y2azOeixeYbBNolAvPn3ow9}T`~3L ziw;@gaeDaVV0DIOVXo;QGIm@?o9+LCBBR&L$j0CD@^TgJ;uca0id+9(O%SjxAK!p? zYEn|BG6^v1BsCCn8n$|EVm`2u%zO?si)bPfvG~LYm%AvNJz;3 z7UWV7czMN_XirQ(A*I8S7h6Y1M?L755=)fZdU5lF&7l~cuv(+|>iHjs)jXGb{Q(C^^K$6^CnX(^{6e%&y@3?e~Yr&s1G@37A zc~uA{lp_lZ+4IW2t*)*DGhdFSP80{4hBVdwa!Wd3@*#*?HEB$kxRfpGk5(MrJUkM) zoFM&o->hur>;Scj)JS0B)wT1rSAu6=mn|)5G!vrX=MaAW{JBfSrwD~Cbod6KxQ8Eb zetJl<@FFwD?oKtXY%qj8HFfm@*k+K;VZVJjo`*K4yJ}`{*lGrl8y3eN+43iBY;Gzb z@qZZrujcpxa*6zymWD=F085gBRJyW+vWLiYvaox;Y9pS=(dQ#KY6^<+Vk1l<3o$V< z*J!Z-OncZFH>cYBwk;6VI!Ggs0ptO`Jqu~bvWg04C#UCGSr2HyEVewi+};1K(=Jta zFHulXu$C#y#=U)eMP0qZY7|s5*nx}l)1`+J37tcuqbrA}WJaPFJE2SXQS~$ajfTdq z&d$zZ*g75{OT(Zlp}7?m6$6W;s)oH4qgLU_kkHVj_=m;bmlwIYEW18rzMv?R($Ey; z<*|0htQt0(mcDj&j@aB9DNY|)WHa$P$kXR)Dg@37nkU-Cbz&X2s@B+>Vsmpxt(-n8 zpU;V2&>P8Zt(23`zwGLdzJEU>rKHlNo!F^XqKG!36SUTm5tl)AjRh<*Mm{|SCGp(6 zJn!xIG@MQN0Syzcugn|5iiaa7J@z_r{lvnN63WDx-z>~SxcIrbxtp_F9)HPwd8gy~ znYpiKn_pkhg+|?pdUX2hM|027TkZN5yS`^_ziO?JK(V~6Y$c0z+u{KBZ|2p=isRUZ zQ}yIjUmrdQq;bFi|27aP0>&#DWc8EX_|MdXynn^v z>OW9Q?IrX&8T_i(U~#bG_*_oNdoVUwADPf8vfDyGTY!)2cVJWKC}dqR4&H3EK5CYd zQ58F=abw5D15BCxQE+i|G%Vak9q;Gxfr*ThUA+IU!XtduOLm#PSv`3H^I!H(bAP0I zz_6z9Bk4Qayc>)BlcMgElaoquZtqCFeRLiJjspSYd`PmfZNCaA*43q`fVIhHsOS|PhDlM+{4#%ecPpfI>5kbO6fBdP zIf`>oR$E)Uu=vBHyMGScTn9OucGYk~z56re3H8(mbq*97=62Be#c-kS4{AmR2D-2o z&^waz{?6?jIoIwb1q9s8b==dZ{lv4BnP8LV-CAFYuF!O9nVtu#?nQVvLYZU1?Ep&`Z+6^@j4+$L6Xe*5Syet^;uh+SG{ z7pQC3t_6rc3I9@(R8wzQJmQ#B3F*A0r6nvWYck4h-yCS}{fdbvmm+7|^(UOI#wF$D ze<9Nw6dxHI1I;JzftI%R_}G{mD8v(x07`{YFD#v&oRCvcz$owwFGkOC(nIIKB|kqu z+scLL%uI&B9?liG)!D^G(_0%nNxv z`(lSB1y2l|m9;g3JTbY+uO2TgEhAdLFoeStJZoO@@E+LjFZXVYR}2pg{hQ}cHE~0H z)Q?(~<#27A$_1zw%^sWcq9rQz9A>U${d!s6g-35&k;QEd>+>&Q9yDf!+yh3L_zqDh z#hT*c-r$@_RnMCQ?uVO$qM<*w54uSPhv5N#-wI52tKmBPalwdxWrrb7eR8MI(#mR{ zI6g

    bOyk3gz<25Q<)XNcs63pX>C*K~c3C-Cf<~13#v6;`Z<^xAFElT;G~IF)Tq| zdyRm>vg^j{TV9}h1QEDX;!0Usvi66RL%=cuV6L7%FEnMK46!cMu27)yMp0`JN<=T9 zv+DS_CRKq#SQDp@^_V^9Od#k0!~yo4L?86@d}3>#@RCpl)Zw+pO6WALUE^Uj@4ELm zj;IbXo74ZPsP!i8s1-lhKx)9j69QVKG)Pe~wLISd$I#W1S+;ukEL6O*0o~?svX1Ua zuWoJ*bqLigCA&XK{gjGV1!b$;+_r7}ig96H-Y?FN*Qe{e+oSK#HW)_iH7_^KRS4NF zB{`Q+&S^H@BgEorTD}u|i&s00%c+^lc{@VwNG&|xJ$!X|#Ss?=NBDR?;tVN&rSDs_ zG!9V3w3PkFba#bZZe>>|Cnv)+{I$)!W>bdO7B<@+Zhoi74-ic1(m!9-SU4+wqUA3_ z^eK}^b_=2BwC`ex(XbM(6;(8I_+cOc*7UNY+qhI~HJ!|hQb||$T=8;W@nla|S2wuW zfYUtI@%8Jn?j@t&zR&nJHAzY+H*|3<#7GLtC_q6JDedb}Z_S_3 zzry=~_Jirs0t;`Sh-ZvWw8?o;K~+`!#B65PR$5GefAd^!?&1k@11b?_ zlI%Cs)o-0{=4WO3t>i{=hd)Iw+Gbh_CD~Y5q&i*eoMDc2L3#Dd3jml^PudjgWpD3! zOdKX{dH5x9TzS{_Sal94!Y5>ajNTsImz!Rw-ruVqxt_%e_`1_qR&z(mOgi?<^Zry# zj`Ud`x8jc{WE$d?H@$s*a>X(5g}F_4K7-}r?u9D0Ay2f*%r#55LJ-V5$?z?;qW4C` z1fm7$3T%J832gTMpI(6NFFBZdt9eDcDa)orgKvF>u%#*%uZhsUHRIQK>W1i$yOA2$ zrEXqURu){`+pFAptYcdX!g13G(6q*GC5xpT8Bg|XvA8_0$4dw2?|(1iWc6F9t0yUB zEsm|Oz9d&*OEasJ|7laHc)hujCjqHwVThU@ClVB}UD-Dcy%7Mxh&{rOi+W z1x+GZL^?h7KKn_e*2%0#Q{Jwa*pP2f{i}WYw0&;QYh~EGgh5`2i12iiSN4x-0)wo^ zzO{alrW@Gcaa69-DO6)AgWSdt=VqY2Gyz$BLc*=>|2~F>1}QIS)tdp7HZguHEL2dA z3=6wcmB=8dL=*FJ1HhJwhK3RIBU?M~>)5OP)sOc#2%kAat!Nb6l|Q6;u6Wc+B*hjm zMPSlVmF&c|O=7jRzaXfoet&XvbSUYV{{tE18aALV>Q+1L5Wmz? zW>1^$>3KvTuyUYK^Q6=8F7lmWtd{&xqODvlEpGw#YGalPv)k94h2NeeC2akinVqKT zB(y1mj7>eGqsKjBcz_kQAX9`r{gRbs28vH(&3LvXZ%%^NRwMRFnNHi=>zn~HeBIR% z#Hy!*MP3IrTb{PHAir&D>!Peb1;fN8f3wo?B;7^35>a3a*WOK=%>zWe?u{__Q_auC-tJCLcp;gh<^@Kvr7Zv7;@q*k{v_yGk+7ZZ@?D7tE6h9F3TCw}k z?=(%c^Q`FB*Mc@+>m$wQzsb!-I^M~Ta0v0nv3QfRc#{XyX5V~D(ihS7aG$rv59P@G4ofN(~jq7JYPY-(lq_Dc-CNtCOfd zm|VH~0$Mj4!|tj=cU7gSMypIdf38mM(Y^ z5p9Wcsp*^?JhPTU8rTSF?B-_vKN7WJEQG zuycm%!5gl;RR1&7>3S)6jE4t`5X%B(p?2i@>;=!U$Y%l2?N95Lutb{=v8JONwuc#0 zJXA#UrG6LNPS>KQb-Npp@1AMJ?oek+{(M(Z_e{sU%S%H;qYyvc&xc_#u%|$Tlk?GZ zzQ5?sO9F=fHs315l1FU;y>oL_JiFIsTOr@Ndp@}AC6t7w zusFi98yg$@p2y|Zv{JJP=Xe)=jw^X*R`O|<^H)%d0_fVK(LKqMv9Nh>EW zFa3p6)sNiVK;kjJdT>3}v4_J8_7=OpNz<=SFFkQ~J{&60u1tb`19KvDWg>*i>7a&* zyZdQN%Z-9q@dQx1dL;(N3>q~DqcUlsL8Vi0NsWppqLKbvP1 zl}@ncYD!dC3iaBjKUep7ca3KiyLX>Dx}Jt}`ZeS39L=TXy10GC>ZJ3uZn@Ex3F8SA z97x;On*R)gq(EdV+IoM)8~{^AU=f zD$HY?p|GzTHYqU`oGD0 znvVE1ha>AUX;J_okgt!bCTl94eXr4P`l>cTJ zXiUA(vUZ>{kGk*qml?yeQW=F(4op0qZV2`-WYh~r1(V*)U@{eFv))04>a*QWR=Rup z2F7~`me@|!fZj;_o1Vp%C2SWmzB`mV_)O25m=%g^?X?VD6v?B*W9{muZ7ar!Bm%_g zeEFCp+r5c42svm=S5TAp&vvhGK6!hcjyOm@<_fe3qBFhAya&@`V^vTkU0GRyhJrEl z>$%YM@UR9f{P1vd=*k)7s!-t;5f-j--kO43R;UtwLY8_`R$d-Gn{~tW`K+C)D#5)f zxC|c-RJx|<>E;%HHRx68%6GU0dwFe*KCi`8NIF`{3aZP5suQ)I54(LtB)CEiX_XLM zr~45M?UY;zgm@M5!DdiFEGQ^&s|Qu2Y-YhCU^J09 zSM$9&J`qXL)m~0La*2-bE@q3x4co~b>M|$6K>|_!r1jg|oP$N0Z%(w6{IbID&~SN$ zzRh^dM$FnAEmFpTqV5i+P48u*g2oUiOEuF&wWO`O37P;+OM8pi+9N-8nnswoIyy#j z5##zz+6V~zT-rO>-`~y_f;w%ODn&tNrtgKdt?lrC=FqYMA?H(WZq?)_hpz{BqRiE@$~!fJN@y&!Nyx3xQMYa zh$Of~JJPuVxQMZQ8f4~umH)c3)@qXB`8?ry4z{t#a&OO{Ys88_v>9|%B8i#z+WZNf zTZfDh(!EF_a|??XOSX&&oea`_pu6U)U@j<<1$c3ieo@HC&1JxB`@Y&+d{I3At)hZ8 zkj|;^X0LRc?GEtsUDDgX4097EJcU7QUytGCa3)2Ti=5H&e0xWq=>R~xXXk7w~`*rsyd$~_(60Y`^gtZ zV^*pat{c+*Sbfmf7vo~f>bk!kGEEwCA;ZGT7joH$bf$^=vCa7B!f{!Va;B&x1=(<9 z(<6SR@ptL2es-21US~63d5Q5hL);_>=jigL&lA(0?=^opX!apK1f=O#ufA4RR>B6ydl{axl83xZ9@Ocfj~A5?<}t1O@I@uZihs?% z^4%{3?l|7a-g~Y2o6?BDCuC*&IKAKac;(fKS3r*E;6KB$6QqojlMMfI<}e98HZ2r9 z+CZD9w@6NRDYc?8F)@iG;11-=9hbz4I;3=3c^x%Z`#cqXX&j>j?!By)S;8<#HCLNE z+AxF`PZVkyw4$r4tI3SQkzts@J!T$~5o+p06fHmo-M zE757e6AyjC8V{jkazLPNy2wuc#6v`cRe>^=yJ5k;_wDpn_ZBwfgssNmA7Z;YMh>7} zL#P>!tiN(|cYZgk_+QfdNh~FaMq$1?m972kIv_nT857lL6Orr$Q3>)GCuj&`)opBN ziTOw<$3_g=-rNoaG0DQyZ*P~v%qBLR`lVTJ>zUY8Xp4F&@Cpd@cSzJtbJVtjpEoK- zE^VTC8|0eyG}G!B_aei6L4YqBPI!tu;>>?xzpn#5b6c|i$%dK~YvzNpFklJ@AM5P2 zHKn@=MMVTc;=li0usvTw^k31w->N{E}5pcv1n(dpA-?+OmM%+ zv|{|&)&4Pv#JyWcp?Fj5yJ?4|{pujKz7ls&*kjt)4ouNq+Vs-l?F-!4#5ewf z0@orc97%>Do7EqV4EV*{H`?DHA;+*XY|Nd*6e#I!hW!X228{`KMS+%(Nhm`-Ys57t z$|Q~=Gxy~$`fT7v3--t7UV$v+A&V^EwC;p9(}(#_Z-q7*I{J#oW#MCE;Jg-%l95PP zZqj5TY%}JbT>xig1NCetqcC@M0?v$>YyOwEb$BZMh|CDum+es! z@9Srl*VpGS!AGEycW2iUFo&01ozSHG$_>c1nF7th1%TJ@bLgr-tNC%bi571@sQiFe zYg0%^OF45%n2~)^=|LgPk#$qqV)hiISmH%Pq9Xt%+gZT@GpRS zmq4I{M-fVn#BY}c1O)cxAddarY2ua&{{kZCsHDQ3!1~~U{l#U9bsmgA1H;34xiaz^ z;VwnPc}!SIWR#SV$kv%x5I|tUA$EXF?eGf*|;Sop;o)obNAGszrX_bps#>%U_yu6%E z7#JAPXa+z%zL6>LU((9fR*XqplJ|m=0kAZwU&u;BR#J8K8oi=S`X^PCz^B5VUa{+2 z7-+vU`rVG+$jaEb!L*dfh6{05An0?3ExuoUSgY}wS6v#DtH@YdDm3U+GP+&Jr40$a zz6!(MSeTv-IduPR; zM;4eE20wCNQj@jOd@e2yJ0k)XxR%iMslu;oSy%2uZtive+80(1i42O#&UWlL%+;x? z?bwdT%gfn|sHDd{G;fZLasosiv#;yONQwOSghSiobJX(2h6&AKKsV{54-*rR!IZE? zMDqy<<2on=+5ev zeGUmQ9cLV%M9Wm?h&Oa4j^g@>0;A*OvPNIxIguq_^n;5Xg$jnLB$U5f`d>Xd_bT3a zV1&4Xzb{VLJ2KK@-IMqt__d>>e=m2Fhe!&<;5kk58N!%`R#if;I?=GF+dpSseScGY z1&3ErT3tQak(1Pz#v2E!M>_o>`@+}AX>W5tg)KLCH|$zRKc<0*rqH#@`L--0t?0(e zH*^5<3--!SwW5LJc?vY_oSxIu)1z{gn7(L58#E!vvnAM^t}h2K_hemx;#}8w7x;?e zN8{jLJ5Ew$4vxJZnN%pk_sI8Ho--%bDT zG2UjLqn5f|O-VL*%S9r<7Toeg;c;mf8XtA9m>!Z6SU1s#;ouJxO- z=2OPN&=62(5{827=>-LyHWd$(x&S3A#^-hfAL^%O@Z%t!X}!EgYP1dw89$&bALOEb z_cmlWXVY>Fs^9Gp9loyw^K)4y?eDpoUHg<$V!qq z(vI-!58%gU-7~L@xyk(Ml_}GgAZ3eaHHJeCIXG8Jjf{=OqfLa$N3G)In&x&QhmZ*I zwzLdyD9@na6ijfjt=C?H>2Dg)d7(G_J2aKo?u6Kyd$pOC2Bsk+q|t$`)Iam;CmMD2 zd(tdrM2Pt>Y|l@o&lUx?KnQB4@t%-#Phq`)F4QWwgO~N3U~DH5R2d?a062(zSjD1YLN-K**pr7s5>LS?4@+&Q>E7wNUQtY5 zI26f-7VLeV(Ar-K2@Yloq{HwRr-NK%KQE2R&2`rWU=9Zxdz%N40-S{_S|O{kMJ)AG z`$GI&50uV&%_AS?gD1cEYRuhw{v5O<(+JjJFT>!SUC4fa8GOB>s%6UG*f2EN*c`~9?NP@XdVuO%n=AB4z5q^qwZ_9t5?_5=ti4Fn6R3v!j~*+rOWN;T|IRv28>Z+ zYDiB@kitgM!(0v7f9Ms>EW>U+25tSpe7^uR^{9Eg8`BvmR3r2uH>V3sgN_J)Gu~BD z!{{$yf+A6ii;Gb7=rje02a#!fgMn6wP@-S2Fee96{8n2Bul-p;Zf--S7r?x9dXD|m zL@?Tv`4iOD%W7+rQ@TYR*(A9I1z|gz(z(&caR%P@=!h5c6gdoLxbxlpPMSV)d3{y!l#Xt zUO*tFoT*Aij@Z32%DNXKx$BuIqJzd{erm@24CTWt(){(lv^>vFaH@l=qz=0Vcig<{ zla()Q?eQ&*79Q(!a~-~({=Z2nDG5CVebYzDvn`n2x;sOKttP(r_PD$Zb$atz`!v0xcib9rzC`j1+9&XS!Mi=(SYvf&)q6>;zLb z_5c^Mv=O9yM(8u;fbO>Wvbkwdy++I}v~2eDV_c37|J7rxf_o>FFu6saCW@h^Xb~$FiGmL55q@xb-wch4*Io zMaE5j{)GF4SOF&O`pDAzPM)JG*r+Gc;SD7la8&3J%ZQB-t26g-5qv(UgpH!A;D%fC zHhw$J$nA3~y2U$hTuuHj+dJ7!~7Do1o+F0A#ZXh5A!hn*ya3EGX!s>Sg-Lya|mJ5WCwy~^nwS*=KeKs+ke z{7(c9m;Ap;%4}&tuLCPan`|I8umsW2j7=XEkNlOckHhvsdrj zdEO*Y8^$VUYs+C>Iy^oewBULL1`Ud?HD%mCi=AKu-4GH~5NALHwJWvy&Hhu-xBi7! zcu{#ur|Ge@9la_Sr)@NFdM}mf`rGLXTtO5~tEyRhvvnX$oaX6l(Kc!2J_aorwJRh)cPj{^s0)RH;T2Yx~CM<26HLAi1(eywpo zPUjpeLel}{%4gW3BXFn%$Q7O>y6*-$W1!K7PkCdqItG)PntH0*nM3zC z!3Oj~uC4WJmVvkl$18Ot14W?|+Ge^o=_5d^#A#z5`f#l8z@rJ-s|x?q3((}i!}Q*m zMWS6SP(oZIU}yW2n&XK_m^#X|m@@k_F9yY;B^;PV(Sv-7;tz3!+5C`X;;(Pv(+FU= zVqjuetf}>FKY(oflwtfRxY(Fmx|XU*Q&v`1Q4#NwnGmaT(x#Szg$hDlC&q-M2ziL_ z6WZFMs_v!qY)L7pW8X#4Ih@w0$;f6Hsc`+KvIZt5@|mz~uRGAs?R?M8O&b@21d*(; z=ac1Wj5+VBQ*|X-yn&(p{rmS_%axXBp<{!s{r&s*C!A2_!g|X!1Ru}M9jS)qmb7bn zW5HZ8?e~Um9dy`_-kpU&E6Ic^GCzsw18D^k*D_#QlFkSNli8`6`CiYxKrju^39+7# zH_*61=Hfnsi;F80-q4to&V+SL=5N56oy+o&W12ig+QGqrE{xN0{Wdbbrlw}%sY=GL zUym!s@B8NGy^1^lj+(5fog0B^ciNrB$|r zzMXsV4DmVZ$Mcg9nKh!UaOxU*QK1%b=Z4Rd32npW&)G#q0#@}h;UFf*v(l=#LP!sh zJeK}PMUAyGokQWcw-|Nu#f8@tNpF^dwaP^_enPhEdM^dXB5y*cihvInzn~yfJNKd2 zyv0?Jw@%N!Y;J}={$RK$Lb->t3T$F`n<+5OyR^#(GHNl^D~JWA6Sb!%hwcx zvRd{E>UF&D)5}1SdvN?-Q1EH1bT}cFk4u7(s4+r7Bu>tL($>~?3v~E-W39iZ=Q^X{ z4#2Lca{<6SXT9pCzght&Vj{%Cc(3-Q*IbRQ_^c;EdYvV#Q?E!M>?tV0I*o$#kRI4n z>>X+`5wfsRBce&$!KXp`%js;9W{IkT)Bo};7in*FrhKWrZ$T3&@IROqbS?$;V4Rz=Ug1#8kieuHX*muO6vq*PYZ{`_CA$4`g zG&OJeE3OfW`d@?FZ=d^IOSZ)ITvmF?iug*0K8*0j=M9`a`2Xe|kf&mN0|+&W0M~EH z)>)@|GFc%j2wz<&33}9hMH}aK3{6t~mG5(^iJ*a0168`OdDMo5uG#(EX3XlBmVijL z;pEPrz=s{Z#LrH8p#*83PT0dF1-)kqS*1|R`OY8v|q95htMCr$K!S|kO*|4SksC&xIZp6_a#F_YRJY>l2z$wTCX`Lsg6s; zVgeix1zk-VzwRa!agov^Pn}laPKe|=1&BRa{seg>e%kE6Oh4mhv>d}d>F1jL*rZfc zohH6em@ygs%2%4re5=u7LJEktp-aiL>83B6xl`C&x;Ay1KTs0X??--Q zl*}$FW2@Z>Oap@vOITsqe6;OWL!P%^h~lEIeiQq+_zdTqLLrL>KY%Il_pP`>x>IKQ z%2nRmH~a&jfBO3S$Li__&Y;R=QcdZy$C%S{yp$iZpA0#^6}M7F?&gPGBvnrxK$@H@ zM<9B7)XAZj$BdJFCt0eKN|2NDk5hFc4|@!Vex2{3$ApMVQ6gWQOS$UPCRQ)Dm`P9K zQaPE3BTW8`;rJJx*XOzjV7lJkb+srG0a*DelsOzCURxWlb_PY3RkRYy{!qTVfd7wY z1JE0K)c~czlifW~JR{WMopZSyvT2PW`_DGrdsd*&sC4c!nGi(n-xhOz^va9rSE0xck5Hf1&OcV^U zYu-qjJ<))@%YCO^>%At2?`v`8ojp`(JW^bhuazwNnl9axELf-Elgd@KAAwoF3;NP4 ziE53Sa>x72Z< zI7)IW+Nx)u7Ye1$Kq*XRu8$?TTqh@|zE(Ii5$N-|6C?$8I9 zp0Z1o5%L{(5A{{+6O+6Vm3aWYx>jHJ+|}Qw64*iqIwURHQ6P3!uvaK~tWx1(7I9yU zEGlF4>dx)BwERB9)1_uw;imZ-ci#kgLLDllOxT;C7@Fc@1dTPXhg3!$W;(4^qt;7>H~Z$JDa$0Wf0`q}F+%$WAZ=>;8JHT8m`B9iy5B`B!7#(d}q zX8MF$sUcpxWf_eTXBBlFAbhfc? z6%ET4{RMR%we_P?%(>QU|Hf^|-pR8YX=^{he3!|3c+Ga}zCnR2y*GQLnpZsh3sk!= zILbb*%!DDOt&GU|Yk6ZFynSxO6_E8BKB2diTnjK zdi%aoDWyraL}XtYWQoX9Oq6Xxma;~cvM*VZrIa;^u|<|>2r(qfShN1^%ZS1-k+Egp z$9n&|?>En@=gs}Rc)U6vpEEOOu5+&I`u)D!NU+|HsUKT1;gD0$_?rJVLvJ7hZK{*j z{ZIFipd0%*WV^{oc`-UD>q%PeN(&3`HV!C$Qv%@9wYOn>`fg;ab*Q5 zofy({sdWu!BT;L({PFg{`zIzji{2hFMd4%_SdM_ukW0@7Y|6^1Ih5<>J0a>|OnUG&1{ z70^)A(`T}`2OUZuO3b+7Z~X$!yW94h74$2cCxF4Rd2taO-*AH}M??+y1kfqrn`}8E z)hA(NMYeA{hZ3D+;@thCwD>Va!}C>F-u?;h&~Le$yq&~H9n;Fo6gxcM6`%%%MK}uD zOn~i@YTF&#IaB|3LQvDL9ql@2@9Z3f;+7ocN`&tkus^R&5sGz z{@$cT0XsRrP`{K!!-<3l!TpRo(f1x-nrtH^<75G{ifC%9#v;~GnY|{C!%Z4j z*_&;DY6OGt{;>gz{8Y&Vi12Yg?6Yi(rvs1WbDI&*Q#jEm8=LNMk2}NpI9<~ch5Eyt7I=1TnXe@^J!j#E zwLov>!Ndwq-FMm3))>`u7~x@}I9$zCq@&;H=%e1E%j`!t9-eHW6O?---2x=kO(Lfo zMZPvxpO>Pesp(Zq{c+V)dz4CFe`ZIs7q9c}G)GdfNZ?3iR;J2jb5t`wIg|p*3tCDy9e1BE{xG;vcUdi?PM$+cb!E`eDN7RKgYfvEt01yXIkxnnXd>+WD~ZAX?HZo9*A61C#g!sb>2H)n(x~ zt*0i1#4BjLj|u%ArxQxL;W}F;Bi>PNL(SldVQ{5p?lik@S<|THk7_uznrzR;PM1Vu zP|O-J$?@AY+%SwyoOM(nB2;1s^$KUJ9PvKXo+E5Wr)R+WYxBqQGL^ar?#{l`9OJ6& z&sajirdjibE+2r72zR&n;u|yJClAf&fmbf04)mb$Mg0#S8Vq;-@#=4hQ&YhJ>PKNI zg>t|$WpYpeh2*aBx$fVn9HE*CG(h(7;GodLPMwPG^CkTd;IO!Kq`h=nzSgf*g>Z6V!KBIx{&jf;Gd z%U^F?5|hFdvD)1E2$1=Lj4lNXG*4*+!m1lP`xyPY2-`q0`rUfa=q|N1U-`(?m`?oYnR^?6RS_ei7}3N+jH)Wd+N z4m!j$he0A7qli+=tFfnV`GqX%y71RAnb5$1`oIL&JL5rMW`AAea`nA!(2V@z96{6p zaNw+5VQVgqC^pe#bp>t0w4IdPKja`V>mzAa^&yv%BN zC7o==Y6UeKpSfwc!9=z}#26trA^|uzCjayN~T;b$$%c+3e(2+`Ih9wRpR9w;p3_Z{LW5TSH+L@23-e(=9g>^7eL=oFp%{9tN-_4+G>(l{Wy6nRTQ6%b z)J$2~Lk$lT)>oPi2NDu_a{$E3yd>V8+T2)SR#5mPHTC+`J)sxBw_wdu--%>``G7N$20{e`zVH9>`o&t3q$@?D$~cB2q|S z<)eaGS>``F+S+m307(b%jf`eN0o*qo#+&SQZ5R@m=g%7!rjhV1m$e@w$mjhpwy%$? ztZL1OPm~E>X`f5{f|oKnpKOSvbz>^Idh(1B1Ce@Fi&bk7De|+9I?yd0mz5dDe0(S&%h?`<f7d~4RF3N!&B@;_i^5LKxSe_GJ_@u!bru+0PQ z8sF%1)SFL2jqikA8k-nGXb`J44y4;kiggPjtLLURtH%?T))K|x{$@9KwHgNsma{$olDE@^A&qhYxHMhc_NjxIzsn;vk8bZ>;xPtjD@xX zT8*!1Dt>+n=D(m^fgbte$}pUtGeX_NJ?AKL_6Q(#6g&YvjQ?j)6v7@D=e1Pw*dMoe5S7r z*`}?OzNPnZasI`H3CR^20`Y`Zuw<-uuFQJ3bNP^d#5)-9%sp4ayw5hgH7`IGX~!Ct zV6lAjB=?m1Xge$O6J~pl=F$~UGm!%cKT1=*7VzHejE1+#|B}49I316 z6&oEHU-kxS$wr3s)%(St;ppopgqJ~QGAL^3c z$>RRoM5?srm{Hx0YMe~Umo1GAtTdWz@d#*JbJFAs7Plwhyb}*D#!h( zE`LN;c!5ko-H-P22M{KcCKom%o^Th6P~1)+v>|Nn6xZ6JZ)cSMi-Y_K6!)@s)py%N z>9>yWorPK|+MLHz=UK!Q+L2d|#&R92NKYRfiJI#8BZ5^t$}d3yv8zX_)B0F4(Zv=u;}xi1Ou zMIT!?r&)#XVubU86z6Brb$t3KI1??;fe2}!tO5xONe=iB7BMsMmG+SL_xB-|LK}_# z<8_oCFgysZ8qF3%BG)!HDng(@D>Bkd7%4_Qw6Wo5q*WkR)@9B&Wq$Ay6Wb7&GE=yx zG&=G#ZS6-+s!uh!DYJH$?~%_=TmNGG6CZNDhOgHmfecqYOWKv%itUJun_jXu)kdT` zC>ojeOV0R>+cUUt(^)O==2RppJXL24>*_CApOsAT92Zfc-@Xa*k?gE2P)M#Udd?8| zHWe;H$+fZZlzJOXU@%NxEjE9FeNgL|-h`ys@84r9wZXP&iZgrx`4p+C9P}VIf)gfc ztbdP0a%bE~!xs@)6@H!c)0)anz3rFCA)j-Sx@fz%pc$@hc5DY<<-H$k{3&nncj}ku zX-!0`2Ofu$mERMi+g|(C+FPJX&#ECZP)nI9QrWQ~$t^EGD_u_+yx`kc9<`9deb3B{ zIXXMdU+%yOA|9Ram6gUQ2%6JaJPl+0{nZ^osmqryU%7%surM=Mg^6*)$R<-@Re^da zX^R_-aln0GS|=K6h2%3*{brY8;5>XJR`*6nDyz!eZOxpQ;Wnc}#Ox&lme$OxwY=$j zZT7vrtl-IrFT<6uFPfRbz|PNqPSXrnbmD+B#YU<(XT!dfhd9uEFz1ET?aa`*;j&k3 z2193S{dP)?;R8*xB5rAEMTWvOrKjw!cKaFk*Voqra+K=3AiLNG^Fx!rn7kPno?hls zyEXYnkzGTipdjB%n$zW)yqgN27fTAS@`1r^&(ppQrgHQNnQ2o>U+P3~xcK<|7W9Fa8 zDMUMtXDhFX=?6=|Tu)7PrI*(JHMK7X^I})HW86P=TU7?sdTka&qHM>qmm6jS)?G$5 zj)n*Jh{gPMiJ~C8J2hKiWF+{>$o6O@4iUuh>}vOS!-!j#)7?kAMBd|uX{;mQhJhDj z%w-FMR%|WqhBP9n^Xqie$UBaX`5UWSkgQ<-_l@?caA9qkrcyYq4*hk_rw7KS#sM2S z|J+0kkD%xFRF?1sjvU0bw2}kI5*+`^)IY?rJDM;3mm#eh+cyJBDqBux-)9dVd{|-$ zfT&EujK`ADPgFy>7x(*iM><6Fn^Pgn8 z@*1i=<0vvho{xl-vYJO_!ubTqDRk5;C9hVx+80JY{>utE52 z;@#?~g-HE=tmaMYa#upSinKB5ovEoY=lo+267`!4LsP2m!ixqY6Z5Czh9&NFro7+wS6p!o!0RYTKdnxNHLMh?xVOCQdLd|WprfN>`o`uWi8MU?r$DgR zPU>nG4HKGeMmB_GvghP8v!HO{q0f3H8RlimJGC-+#O$rAlw>!@ekgU+JgIlw_TKmB z$=vS1HmzpE)EhHfEeSIp;j;7D2_LSgC|$U4R+!r{({SCI;yR$62OSJFI#`7;Jf5c3 z?+9Z7tncN}iO=rqZtmPvV3Q<@xoP-uTk}x9><3s`WwxlLCMKq15k^H=t~fqar$Vudvy%_J~6O&kv7f=vH8r2kia1G^dOK(3dHROghZ|M!DkZkDaVZgeY(r~)0;AiVXQF0+VV`pawIf!ZCAfB^=@&mj%EK+hpY_Box+<%82Jav|K zakj8`MC259%flfeXE-El>h!|V(!tr%-VSl)(v6#NoB(}X#@@lh(bC+)8Ie!YEdoc0 z{~dKSHA0`t=xk|giV!#;xdg9VLcj9F-ptv}$k7z>+~ER!I^n;ITROe4F@jSa5tU74 zk#HCveOTMb(azG&9MMFx7y`%e{_}np#}}rEy^El=|DGmeZ)ef7~Ov@nt^|;Vj zX4tKa(x8Xn6-lUN#!Trq{3G`(66IsKl@swdIiG4)Y*T3?s}{ax4E<=uj<`uUDn%Gp z;uZ5)l<+N+NW~={{QEvni%rZ&)>2$WQdVFYdSXsP*<$Zc6!LX~D$cCk1mC8e45(NZ=Jj>NUE-8CyKmaX$I z#df;+J|!h#BWxzB$oBU3oRWB%(t?9Aq>0bQ8_#GW7$mv;8n!z*Ubb8odRlm}UfMf1 zYMvS^Y2es#Yox-K1~IcyIW70_Azo%ymim(?SdG)EC$D;6oE&Vn6LQz_AUhbDbpDQ* zynlFhcJ^^-d~k5k9Tlrhv~+>u_G{kV!5l4*i;4Vh0Uf$$tJl(FA zXCmtlZ1!g)dHeS5Le{Y?lMyv(-RX8$=D1F!9o?V$gQ=vcv;|9!&c&WT~e9$koidBg&To*Gx}Or=+2gv9!EBT%a3rjYEr) z%Wtmr(!22RFI82P=sOW*`Jn%D!kD4+oN9i4zGeq5Y*k~=#5BIV-VRKX~?UOI|aoz6}d2 zc{wi!p# zLbE+W)3Px8b^6@s0MgTYS5k6!eY(+rSf{XRj=*N57^CYWXA3Ok;ES{Ai#8amyCNcQ z(W5(k_Qwqa(JOgTS2xLUI)j&;o!zuG-+otEI6Jo@vd!4>bBWC;FHGu;qQNma+{@o~ z$#Zqz8o$MObBC3TIOCngp6uM*?>oJc+{lE(GhcTxdXK~?=GhL`RBWCrYHx_+#uiDK zn7(BhVqtD|1;>9XFyK5Lu51W)7b7;zbo#=}D9=oe@Yl@K`jVE02Ar2=w(69a{=G{r z2Mq_}M>`1u*60sfb*<5@u%Y@>x1*vNaF%Cq_DEl=w!md=couzQW8>o(-M^V_#>y@+ z_??!}_T|H(LXV-EhQ=!a>*4HUMKqq3JSA#UGVc=Itb3Bu=(?d(HEAcyL{@jang{6B z%GWCv#Hm|h*pnczytWoyxii}9dp%As?Se24f|Eb#p{(rwRU4_|+!{U-zNb|ag^gB2>@DmE06|jcCzEc|I0(&$ z9Y}qz%NJV=7XcRhxvNijL`2vxeEJ_ytk`*NjFso^l9KhWzmR%w9{1ceUhgLh`6al^ zT#+k<`t@U5f)6ys5$!VTWhWEBP`}2ilJs6wjNO_!ra2^PoAOs1g98&&0tqE)HztZLFizj| zQd4*ISw@_GLjOKM9P5P-pzP$AKv(of2LD}HV4iZH4=*!?^}VnHpq0z+Yq)4Ch17Gp zoRFA^$~vo@_N74s5$8!KN72u-OEEExsL#murnghYicCz7uQ8hMKsc6Ly~23^%>2F) zz;o5yTaJa^NXc{IsE)6vM}W`YOM4~4+@?I*hxcRXE~WQpTeY^pDskPM;-py6*7vxj zRiqz&g;iw+9#TW#(w*lu8WNc>UB+mzZ}hFFZ9?Z>p~j=|+{osc8Af7yF?>Uo5mFiI z0=5$o`6y;2@6)qSSINj$I7ZZQgBNwDkFQU8?JU0Q4m0mFr4bdsHv9+)&2T7J6JbWMs+9X9_9Lh6Yrms7KlLFo@7?}~ju`q7 zw{ylPTT?&`h*Nu6C1=B=WYFpMPt96k*)-iJSVzmtY!S5gm?V?^0P>~a0qeTkC=A}A zqr31n`UC(nl%ZkU+iO)vi;0?RPj7Q^$uW|u(cOH=MoMOCr|#zFmRnOpjY6TElCM8p zocF?S{d58`cT|7+s6B!XJv$OR@x5R7_9cN1ybcM$=)St&Y3154S6E5UGpNt4KtAPn z;S&=RGjqDr`_R-hgVsOv43qDS9I<(G)y#fBV$Y(0mB!Mj}tMUGE&Q(YWcg4lS z;q#P~m5m?~fSh&Y87NS-E&W13gWoP5(X%&1Q$WZKEY5EL_p*jc_^1b(= z7E=ic3Ew-SSy8M<-ia`ScnseDQBmYEA3qwy$CrMaKFWmCnV59kf3&x2a^Fc*PW9e? zBj)V|3v6kEq$pYUp`xtp&SUo2?;#An!sgBX1FWgu|9FP)?+v{svH3TJN-Ua15tTP%9~s%$tS24&Tot5(2TeKx4BI+C*)%Wvb467w04_%E zb?~RHpmORhM^W8lfr}Or$yW3$=w#Xz$KBp|and+nntGO>?n5i-OACh^{vCC zu)a*nQlnW_jr-Fc2w$A;@TpkeFhtY!QZ%o4@#4iZ+w|OA0!>ZL!=WPIU^FE{GlxHo z7rrsEv9kc`v2oV+_U$+nCUl4=aT zGlH0Agnxbz#wFMdos1P+TL^x+M^8SHd zL)&O(PF3Irob2BFs=Z;|5|16TNtDFl3|8I6`HA~lK_vnKAKr{s4MpB4j+(A%hnCA# zYlXFc|I}{I{rqr~D#I3igK=DKb8TUKI(`jC|88;*BFp@gz|b@`D2%H{-Yp)@oNaAw zYj!5=gy`L8FeW`H^xbbv`5a8Xv*v>ER!J5qH=HuAa-fzB4YknkT*}5oWNzaAJn+Iw zIzRvJ{R6G;I`foLn>K2Ii}w!?XP!_mbar;u{qeH0A^^5QI9HDy?1x^T_CDJktfjnW z7la0fm<@k}xfgsSJ%1(LD`oUu^2fj+BSR@SBoe-QlBF^`(;Ou1xPT9z9t`)1A7|iO zeY*JFTLgd-9iU8nrTsr7`1xO@wC}Zoi|hs{Ju*35f4IEjq=dUYwdwn#w+Dz7?kzg)A$64U5YnA_>O9ks+X+-b?9^ zDx!OrdwG4mmBzj<0APMzbo%I*-mOwYhmjjFA#G_7!nPYC*NPhHL8o2^Rdh}w>bl;v zI+Tab$TKijA3`v3gPQ9ulwPW<&q^Bbp&zC0Q@B4`$LF47v_~?uqcdeMq44{0V@#nDv9LTiYhuDjJD?5szAe+_?~&9GagV0ci`nb5OWT~?;1~0+!j_=ow_;% zXBo0m7+47Ay@Y@&g@OuTB*kCg zR1PkL6tWSVb?~e@f7@?kT5gc{GEvgRRmW@ZO`KXvN>jaYajOXsNmH%)ndXk&JGbz8 zqBmUDo#T}b%=bnMy;GfTx;93~FP3UbF=8^C&e{u+@^#{&T)Vq}1fc~U8in4zC76JC zw`}%T)71?F069HBXl%bY?Y)=*X&gMh@yo+=B*c*Tb`YY}Uy7Tu&)1cjZCSauO?ljI zBX~P3WkX^kvu(wjPi4ToB7dk(DWZAh$_tj}cS922?wOVNh_ci=0y z{c|@7#m?qHPP&YP>Az#hIEY7?=e+bCQuAM+$ry-+i?hvn$T@<~8wv}FL7o9@wsvth zcKbI;HRECfG`}v#c1<9|uI;&0on2F@TacJXjhW|@kkQ;BR&VO0xjg=iOIzSZwYPEi zP&iMVv;kM-Ed!xrZ(QtZBGPvw9eFmta@0vb`>6HdhK$Wf+1HNY(c03RIR2vG)OqzE z86%>PRN{?qMbm|?HVR!_totr50{Y%t59+pl(A-ldG}>PRK5K)r>;XN)hLxi-Ws*M=S?3=s=o?(VT-EFWC=HHXCNNKXpB2_~WeboiKl zR(?Ja!T~%FG*ij4=eoniWhTWFmyd~=*VOc9+B0>-!4s<&b?)S1w3z#&NvT3JqtkK} z_udgP!Mda82IXW`smF28q5{$`VfUl@FFrzC$7^~^B8+|4C$vdTl zB=4?f^xk1}U}vBsY}`rS6!z`!3#QNyovd|R660+8PHBX=^Vwf&^p#=dM@9pTfN1Xe ze&6na7ZnDjsPKk~(W~^MQ(^@JRv`@Kt_yCW2e-j~xbT2_9UOwsp!C+Vhj;%GyYOV#oE5Zzua^b4R`NFS15@lVPmThplk+aof};v zjRXnFZ@LDi>tSQZCxzJTwAjs<3-ELBS)w`t|QMta}P!l^Qmws2P4FW~|rgwRv7T zUs9Sf8YfO6RG~ybku_dc^KxY}yL-5Nyun7WSHU)5^i&B`o>lp#%E0`BLVq@op!K*= zUPnoye!A^bTRw_u-P(W(`H&$uu|e-A-^RPmS^dA&P^{nt#AEx*Ay0wtQs}9{{d{A5 zO+!GqB(L;zh;-yKF7M=lO_yd3-(}pGa$e7iq;(F8Z#h6++Zcgm(lQ$i%( zZ0S?d@9l*-krKXMJBF)#X3{BxYd_XcMXId8{Ud` zvW@$uC0+E|cx51C+j?mOZF-{B?0kFVi-SLt?nkIN^~aB+Ty!2je28L@)&Vs;zZZAs z8E;-sQt6k^SeSXMCMf5-s$R{jnhL9$OSh4g(OjjyS}S}f<8N&2spZCb9z{NzqABUj z)5FFYqlrm=F>qqzHmNisE-1PtdYQRkzu=&9-!I+Pl!nsen=i}Kz@K|%xmH4nb}{B! z;~i#+@qgMo8ZgfAXzI_dQc$FW0s+j6*qyrWdKJ{isuqH4N6qAy1F&7$7ud;Asjl=k!mWc2Zf%h;jVe1djnA` z{3wZhE4+LHzN{7J8r$@QD|sF&gBi(-{0%Y}xG6IS5%QRKNDXB@$XnkNcWMZggsFQJP(9%rxrAor(Z%1?E zoU-{MlB3CXm5ltgcTsb1#&W5oHto|*^DE3*2501I^Y=ZG*S+Jfn;qre_{q=1Q_Gda zk4Nb;+|~BPnWg!$ATs=!)XYMv=JCc9Nx>gh_$=Ygx*ggB)=$V)PG^pfP?KChtX|qz3#oau2jjPjm#S~-NnS%FfV14s?K-yk~lu_M6-LVYW6L+G;3hQY`(>jugPECdS+~x$=3DJ^M+g%X^dZ z6nzZ)>y(r}f+y4L1uBWZ(A9#pv^0;CfwWtoT@Dj4z5r7~JxEaIdA~8JU)V4c&wtJ2 z8@H|09CJdY4i{3hz|~Gl3r986vXjNITQmHZ%`o5@_Pb1~3?T!IyjYvWMn_KV=G4*S zvBq#Kq8LA2&KDIVqL$wh+vmdl%zq`t5A7J60%j08x_|i)co{!N0DJ5+f`=H>thBo6 zmze0v&kALcI9_;R>Gt62koTlUY|_=g)pjDqC;XP>(>95OWvK-OxLE=I(L1Q!+UN~O zl{f)D8fpK2=USZlQU3Z3;d{7QM{Kz$)l>;_?!Z7(@WDs=vE>K^8A&M$_00{oqa<^Bj zIeK%EJbhEX@LcFo>J-1}M*83>Cp-K1x7Rp$!1Dm#Z)A(`-M4a!ekLHxKe^RJkdSy7 zRfhG32|m3%M*TV%G|Su`jWMhwjSo-2DA3#Ec3>Z0`=R3WDVkNOv@v`jar1j`j-Fq8 zED2-a;Cu&aD=`@>PX{Z{wCCJ4iarY}2B=h}l!68vWBFMd{ltGzwWOm-OxADHk(qg0 zJ4SU4tnimpa!detFTg!nG70zB0z8wIE&I!tfVQ(=P#05OWv z!9Tu=7I6s&vW<7|5;;I6C+By!;tFWAg~bZR<_JEX%9$apBs+puT* ze+Fs{MbtO4m>`fV8Z3N#d=UPYsCsCJ_)jlD5FUvR7k93EUT*G!rG3K@3oafW>WBz` z5ihO_C$1|aK@i+d7%d`VVy5e1vtR&%th~X+``uOfsappvP{1w3?)41P#IjG znfwy`advk8YjjHyjD0pv®XF9m+;2mI7M$F$eq1`^;S3}G~(;^aOXOmRn5O^m+% z@K6|mt_-(;(`;9B3SJfhQ3Vwtl%+%}NwXp8&6_u?&X3nhABmz=oA6C{NqPU?!|6uBd6>)bV zr}*ULq~%~#2XjqL4QaR>89}ha`O(rmnA)ZF${Fw|lRjX#JG;6veUSg0lXI!oZF5oJ z(-*Hl)vTQFX=!L$pyIdSRAtoi8Yi_82btplkAsl#*%oqI?z;hX$>_P;zut{xR?Jw~ z*~#hZ(&V8CUO_1hN})3AQ}w!bz4lgC-$zD9^jO0k^BWr(qL{yc0}k^GWnE#1nI=6} zLa0K4--M4Fgz!&2TQ|Qq9n!lbh-4 z#y4Jfp}rp;R+-u_W8o2hE-TZpo4>2u0G|PuhO*+*zv?s9-#1*-^YRpl30&7l?jjY^ zXiqlm{Rk0NtGRh^?^y~M23FaB*CrdebmS~UBcFD6rNeq7@U18IQ{5Qru@Hw4v zC`b`fARYZxtr5G-(F*cWuX1zQ^?Z*|AG^XlJZ-}?s=(d)3x*FR0)}|U^+{&+%b6w& zh*mwfNf(F~hiW}o0y~RhVZN#e9$wz4IG@l=e1)j(Z$1fMkVPh6ZvXV3Nt`}qLF|M+ zb>^=@uLd*RQq+T8w;@gKj2>$X3!ZiLd~cy92z4ku&K{i1Zn@8FxvObwhsZM%Lyn4*zB?T01!D9~hWhUc4UJ4!@*53L1&fzpTI;9}{=C6pFskGtuwh3l^vtJ&BHv z&Ok(7ef@J6JsKgq)(YEkGux!|*OzG)=AXDq4Zf9Sf_4dA9g)3lWxXq%YxlhcJq=z7 z3(Y;pF}_#2CUauv?=F_|QLYv#&vJr%#1ice6@$UTt^Ix17M6IZxJI@I!S9HsC#vGN z3`j=nif)j<0sPYQl|q;ue?+7X)AkX)oZ4*&ky~oa$iM+0**!)-2t3>0kr$CvTsI4~ z>#g~t*Az~Y)ux;Z{=A4M4bTH9`Bf=Cebq$DVbTTprL62~P*Bioq5CiAiwX-rCQ`lo z$N=pHOdq5yEptpsOm6~^pxw1C7-Bj4!pG|B0T8~g?tdu@d|dlSS!fb%8dA2jv_O#? z{=jU7%B5GKKI-1FPk@0%H;hoz(2#}8l{lgvd5A)7Ru*C$UeOVeo%*C{`F1g8YwKl; zb13z7RGb`b9Oc}tfl|9kkyhiogVc$7SIT8Q|A90$H8m+ga32!MnpFz5XDAK>MxsYd zb1l@!w3GVQ*0cP)-I*Yg&Lz3(!YTy;wu45vu!oOA)SV(# z7|WTDx^~Tl&ucZ1NGKkCpXITuSz+l~TT}Ip!^6cTIyf7%F3LGa zUI}ZPajYIlFm`$=US3wlNK4$crmCd$iEC2>Rue#z9v8(!s%~?r3xu{A*R+s4z%Wo( zzu|_RUs(79Zqhl<54va;Y|T~!@aUy9HLsydb=e{eKjvSeYpXEm**Q7=8y#c6f4|z= z+A4ebtEoHg46ML50B`G>i`qXmgpd||8yVcDecZbS4XIY$5D8^;OE~#`{yv> zw4}>>!xYJav8vXQV%zx43IlZCqLo;7w1RWZ&yM#HjFBSheeZH(bSOOUG%n-{N}vvYPuo-?2wt*`?^^5UphvwkRcO>+C^ z%^FM66Lj8;^gEp|+c|*sicU6y1?1uF^Z3E{0fYMJN^VqaHDQr_&dPe|Mgv*974Xzy z+UFog?$l&plrLVXbNZ#J&V*ehZK&kl?%G_douBFGBvh(%dA4NW+;s$s{QVp2 z8RYK%p`nZ#^Vj!pw9Hu9*bu=20_cCev8F1%7gNWXp{J*cg@pyE>c2X9rFvC(VtP7K zCWQC~EpZFVF`4fylHl8G#G$jrXZ>Avt{K16cE6acH)gnZ%hW&;9!Faxs=OHsHaOpo zv%E>>Ex}M>Gm0tI7`F;{jIJM^{HaxS%Z^^Atb{0NIeW-N2H6iX{^@pH<8RL2ZLYEf zLEotL_@gNw9D#L?p5I4`ikDN1@$m3w_dGS*x$Q>KR`@(y;jeaCH*9!`pv|ubLjX1TCoMyxV*(TWJI2- zt8)^%&!5|lbm&g#mMfQ3SEWD&$zikpAUA?z@Pi>laxP0_qJ0C^tOF&i&_*C+z42~h z|48_I81O)Bl)_b^$My1BHa8Qa?e^vFs)rvT8_zWb#9Iqb4Gq>Zk=y^&?&B%nBAJ+`_U1%wW=&EU%= z$fdrGlIbaP#%!O4s>y;ssb9-Mt_cu*h77g9THF#svi7GjC#S>FrlBHUCRCQ`J#)u4 zj;he4^A*HAyO~0ie5|>T9f+@=f&RZU&4L?yqQkmC;SkTzbn<*q6*j zU{i#&<~W-p{JLRic@@Pm$Y!M`dnJsqp?EB@bh*-Kc-Ergc3xYohxvmE#w0RXeXN7 zh>eZyNbWLA=a!a{30h5UpO=2|;wG#GNV=Lsf8&7>YuFk%6A=a9cYKmQ#ZlT;GJczX z(ynqMOO|T)?V3uFSuu1tz@i%|HVP7}kx_v4g48c8WEDl0J%@fO66hpF`H72*Q&Lk$ zS-XFqbCwb+oow=NGzzu0p99NKe+o`q3~ z3Z)?=vISThnu`KJ!_d`!P9z}^VMKE_QsNM@u(kzu19jUB?VoS29I5VNN^>K|i;d77dX__Ll5XoG0nmIk zGpuW$Jk%srX1a=FFSl8Uj8=$ruXpS3Wl5h}QZYS=h|pUAf%S>DF8Kb9u1w0i-`G;Q zX}S&~#{l|Ti1XxlE!po9;6KQkhmM*DzNEs=%kOi|c60Lz@AFe@x{O`-iF#)xR9c_H zdpRn33_iZF@!WHLtXy%Ar<(MdvsAHB3$DlEmr(r&0`dBr#-=1DsO?cAp(N{g>?@vR zmDy(DZN}S|HDnJvSFMVW9B#f&wUdsBOxoj&Njsq1Xh2+_tfc_jE+aVVCc4%J zTrZz5XAG{?t|jw&Quus{CuwK=m7dI~a{9F2-tR=WrJsgSlcl*rz1Ry)3xdB?6}=@+ z3uN1cbiY6y|MU)SDC-|TQ7r{m8xE7~Yd2*sA?8p{U$w0>FeNnouzWUV8|yI#?_f$h*=N-rja znC@|Xa^J7*w3#mFDx-?lFv;$z6jsX1Ump8D+t~G|ka6D?SqM$=ha$H${fm6M;ahUd zbpTP@C-g~LXK##LOV!o(4-UH0dCG1|x0Wo2C;hxemh^UOq*R%RrnKfLB0QW5S8lH6 z)0&ZY+9k!h+>uV8&uZ%G7z$B~cP^Hq-1|y)SRSFg=ynsdbMx|UD3F8NM;%02^fqTI zCoZUr&*}6NHZ67SExcM*5{pyzEB!Kqg{iI?E6=a6N)+jPO zd=}l3HS2x%#}T^abLAXL$P3@qiB{CfmDxcoXUg1dQ~c6u5u|i%U@~a`y$~Yqk?+bA zYwJ9_()Yp#uKHq83Vn=$J?QFSnVuwr^qb|Xq0v#xnu+;HNxKmb#fc{H(5=_PM3H>uoQEvY6zEp1`mpM_4TpREN&^ zNB1@VVgzL8MloLkVqWoD5E!9!)Yq~~s$apNEFYd5aI=NB&sVKvCMqQgpe+RCd%N+9 zp1;Ynx|Mdp%nDVT4JSl9@?z?Lrs~IwZ%aM%J4ah!K+xfP z`SRr|pe888rtGY0_Z(GV=8B48e=cW(5QNuq<0?ip4Gg#&)7;Tk!=_Usv_#O_Pyaf9 z@KCLOo(2>ybfT~|zIqTjz9Gj$8RI9Xvng_|vCZgr95coKpGm@|s>ZkU>W8hyB_8Tk z-7KlSA>($n%Dxvt{T|kqmLJAX!W&rUnysfBe9%MD`nLse5#+^WoE*l^lIJ&>Bej>~ zww0WR2H!cCRf506oWGZ620~@G7H(*Kc*DQ$l=Afzow2^egT0S z)Zv{nY!8;6l=J|JIx;s)_FVYzu-Iiy3y?IeqC!hZ(m&oQngs4+q{bz0^)NR#7cFKs zYs<^8K}+{*7R6Gm>JbZFg%)mgef@|F=t$6-{93PHv@%%m7&s%OTe3H@ zf1!&FIuBJFK69|MJHUj*M?AYOn+iJP<=_Xbv?l&lzuBFmzOk{lQ&ajw6nT)jnhkl@ zj6%k~GkjW+y*0(VXi`^9NssQ&x_Le9#s~RqJNe29M?%2!<9CC)Fp4QD^w8Wpd0Omc z$EykdE-Wl8n|G?#%LerWi0>c&c?J^5cW^sC00`WlT=A%dP8!aK#NIoJ)2%RKHZJ@rU26)8MKZR9)2!({Rr zddCc{x!@Q~b&n-=H&|pKHIJzAwy)SM-oLSEDkFmhKFpG^sqBtSGamM%o}M0vsF6m$ z3q96gHdY7%P|AxURD_s2Q9mcZ2P^|Y!So^2Dxv>Mz_(H9+K8zAmHhhp$+C|7&mQC) zXk_VW-;*SN)3kZeHEwTd8PL1*L_FXP3(1!1W>qWimb+f8ne9-aBh}V|-A9HG^0MXc zrXGr$~}s^k@y^I)&AcJ^)EkF~sVq9w>}xpRLUJ59{I6IDKbePv)VcwfwV ziQ}NC$J!JIP6wO_=zptw4h{{_M+<%{_g{P4YPCti*G(JPb_Aw9ZtrK+`{obW?)&hG zl8n_6;Rbkt~_o&;M!pMH+G z*FL4nU}7UwL4HF+a>ApG$2lNDvWANcQqeV8u?y(x%Gp~(WYk-kn)jyso^1(1q2PVon+EHO@$?%@J&8hHmgA-7s#YNCw;OiZ2IC)P zEVz`%wBL~^GHBFSS!)i$L(P-6b1c4b4ml7YgjENu@zx#l(6kQJGy7!k#jaRs!%z4(6cJGT#))G!%wKJY+T&?u-N;| zvNyKhO|QD)r`v|O{E^R%1Z8lYav~xkG@v!uN_vPiRKB*MVXEH~T=wm0@Ph-SnzTw= zmY1`03BENnK*PT7`TCwGsth&~0RKcclzj5IkB^O+TP7$V@C8hU^2mw`!AYMm*7WUd zM-Lq*r_w*)Ap4^C7a*gVFF}jazqYf001S9Pg3qIWY>b^DWPC%Viv+CmN5Jc8m=*4e z(YwWPiGz}*qodniIzILUMF-dhpGtK3^0O3!4}z(^;I;=#F)}i!nws7MljS)CDid{h z?*8V^(ag@#LT|I7noC5>Z1L(bhX2NR29z` z!hmL@JVWgIhpbLkU&cm{(Xp{rwn?*Tp}d{MlT?Suf`$s*eU4mHl+Kw~1rE)+Wk zBc!wQ^05A{xPi|L9*2>M33Hw^IqE)y2T zGnrs){}GD9&%{KwaR1uH{V(rVjvu9cE-WZ0&vyi~S(fPo00VIr6n9;0%y(<&at2@A5W43GyKLLa!*h3l_i^)WrJxYg6Qje7)oAA~wFb*y3Q zg5`?lb;r)$4wJ`R7JIqTw-mkuIn)^Z#>ps)NE3(O1;3)wx1S=uZU{|#r7(D=gc1yZe?=M}b@ZG5yk5xwXrVrWhM(PsUueic|&I7j#Jc5u?hTen7Li zt*Qz7!u1FCw&I!;=uywhBWzOA4>O}_ zX5&t#4PsWXRBeNGTRPS{s`2IreDXK13Rn;J_xH;ZgDa?q<&~8$!y$HmprDyIX=9=~OmzMlx!%l$ znO9Yfw4y3Ph5;jjj?Ruj7)3JTkU`H#j>sob%tH-O2t!qv!o=q}5@Ta-52i9E(C5oh znRG4fKs77Zv$K8vyb=pA7w1THWYH35WdvobUGHC`>TyMsN=<3Z@+y{-50u zBJ=Ezpq-ap30#AbN_&Qn+y)KBi9|qQe$u0B$+E5gV{7eyHrW1e`+40#s&8rvUHdTM zwXD(Ojei9ulA>bQos9K~|Bx7H8om>EZK=g-^!008aGj2vn8_7%RcndJ$f!87{iP;$ zd(H*;`MX_sS7?od+;1?kW4AdaBUsTK7sQO8ou#ETKXqGQpW2Uc=i13<1*$ti`(vLj z!p-C1hPFODe)bYEWB+g6y^7eFbH?8rl zlQR$y*l3q>(zc?k>?wWf2sc^3p6*`^Xa9|+NLHJJ5 z&0#+DAV48uxSxX(_B{5Dk8^M%$H&8v z5D{kE?Q46Pbc(RY7?NWF+0R!as*sGudSJT}%Bv9I9qtZn>LCeT9Ub6`8XoIAM_`Kd z_4j}1Z;-Wpa_9OJWqWJupf1#XQ0`)!*TYIk2+4W~2_+bzN}}$=#m$ZP{yZjs!Lhn; za4>qWp{=1Txwmz&DysiUeY9yTY%IN@5OvDWP5=f049+Ew>6t~ZHW%C!IyOo1zv77WTWAPHmLDylD_xAFeaYI|+F6}`Ole1HpXI2! zKSDxJ2i{pIQkhGqMt+ll7v|IEK(A8AwdM6?g#Y=uFPbYr3LwS*+5GC$6cUM7ge069 zY?%cBPnelH zgK-RG-d_Uc4a*5T=mp`}&VPFW&_#G%ZZ7iVAxO;S4|=a{$#Pqffiu5w|Is~II+WM- zJ@bzrcMEaFb@9F@^Fi#Mqw@N$m&4Y|9ULsoE5O?w&5MEkKJ7_VVsR18y9c{5VB87< zzyIS+j(cUy3fotzKXE0HwK}J>5QB{YouXzZ9ql8&{U3`qdbkO^N;4_4S_Pri&}AuX zC7+Hl?dUZ|z~!{()7uQ;|Wzd`YnFU0-!QgD}+GC#|Jq^axbauhA? zdG?Qv-fpauyG==C48*HEa(Gy4QhO7^J<=U>c$g)0W$YX)?E;`uUHl$iko1s)IAVKA zjg6TiA0%6a2!o)I&s!2Ms1JlbJ-9o*p~Q?aq{0*R)ue~tI<|09=ec;QPPnD%d= zf1>wbFfkQBnawAs8*!|^Lq?`v@f5u^>3?gJ(f@3Ek{*UAhYJ7P)}bEjts#%by-)`GM^v&aos=y=L*3V-*mX>G4F75F}g za5V!1$&eh_Ay{w&y`QoKHj5&f!iA=m-Or%UcfPRp&v*DrfxnZRzS?f_CcFT`0ch`L z7X;AKB^D-xKeGaq@|}{2m~?BxWBX(FrkS9eOCHrXt{pJ*wgEyUr}~w8zKCHBXR#bZa9%6-`EHdbxRdiJtoU zjhXj{+_yI{Yd3Q4Mvp3Zf{}`4e7d&nD$@aQfg@q@e|;7jJKYg2cT_RXoa|T`@_%Is z`jsOSJ{6%3PEdj#AI{~OF~M_BFqo^+SZowbX4){G?%YWi=kD}iiX?x74TLR8)mT&u z88PZ2BRk45;*a^(tz8!1SEX0o4dTc9NLv)6Dh%i0D(2|@p4E@c7A?L zoFX&%Ya9jmQUb^U;6Q5*o*W-T)`Kmk#A7~{6&2v{334ZIfck@kntM9~s)WwTFrb<{ zVZguJ?<6?1@**^j7~aUDdF=S=`g&Qc*-Lt~TarMpUS+YPR4r+mf(w!Ray8ir)v!Bq zFBSY*bYWDC7&nN@?GK;_Yz8j2nIi~k$vs7@)>Bg18n6TX;|=A!^y~DCXp2KLF@Szc zG5Q14^9u>-X6j;-cX}fXPec`9GdvhL!h{4#!$b%vuo?keP^{E>iO}^z0dLL~FDoce zu6)Z+il6l12iP+NEfvVrAM-^hr?*g;5W632)H_MLM#!^^9ykMc6@Y;0f$sn&)l`5Q*+aC8SGG}N(c3UY>0v~}Z}-k^$X=d;2C zc?mrvx%Z2qr7wLq^c>SOoh~K@r*!|e1l*&m#Q)Kg!8U+Gpk`?`j=Uw{o}eY7qswG` zlnZUejP~^*;<`+a3NQC#XnW|(>U{HP_h07z+&yi=+o2LHd#}PUfhZ=X2hZT*7+IQ2 z1r>kGU@egTMztALTTt+8= zg4!KoT#$i?L=)gM&wBl?h!{^$l z8hhect!KGZ3bqjOBgE(Oa)CVR90)lPIjH!LePs$|eBhzKUTFPexn_8gg3Q$Xzd|v~ z_S?>bJJ(yFCK(@X7HD&H<_qzG`bwu!R%`9G{=_Ijb%`$yd7G@q?|*2?zwpGTz87`) zxbHlFnCE6?vCgwQCiuBays?mY+K17s2l>yEd(6_xDiDIVW0Nk_^>^_3_@yO+6jd~f zFkuL+E`y>iXqwy~N_dz7`Fj$-8^+^@B@ zG|&_36vMu5L?i;$=G>yfJG&0n?NRy(bd=H54D$fFc0aeg@+VG!z(LZucVF z(~q-$PfZmjKyu~kRb+|I_2A^>%v@tni#T>k=c|lYgKSFJ zi~ba>lBpDNFK8iz3Nx5{?8?542C)(!D4;XOR#Iz8*NgZ~=$-%Dsa}1VB5QV$T?pC6mL=RGqPyFceJgABoh*f9C%eIj zEX`O#)-gQCeLvsp_y6;I{`mb|U9P(N%x9U;d7t;|yv{kVlji+pbaTD=H~?3TaegrE zvy=+WgBlaYKtRjppAgRJ5+Kp!3;n!$-RyFHl2y=}I^wZ_1%;!)6B@bz-F67o$vG$d zwiFP)YjQg)6WPYQptW$qg@40n<*c4C-f#@=V#f(1K3Q%Pxlm@GVALGokAt@V1o>wZ z%i$Z<*{oAD=JDYoCdODSV`~vA`6?Fw3 zF*3wS@GXHv+%YxffT&5gyRy0(0>BJtWlrNcitd;PmjL2LdPUreUY?#=kmv&nI&Ext z_{zGKhX)goMQKZ(4Zumzn=jUUjN9^)OSf=W`j244y)y7|1O)KUl@C=`@aak1lg!+r zqF#>xh@DA;Uhwz&;_Ze&ODznl1G6F-O1+?xSV*totTu$0sG;iHClC&;k!sAzp&Yau zuFSu~KrsiVuh+pt{RTck4wS(*Y`i3r>uSH;>I4#QbxAa$<3?tGxQu&B#qKBFzao%e zAg&3H0VkO4C8(^VgyE)AJAPc&)R*iRc&SLmH~t8F3TSvw7x)-xPdP0dpWeRrB!@Abw>@_V_L87YmYs zgY=egx)!woYbK_5r^!j-dj}DudvK%@=3DF-e!-67vYVsAFvBTdF^UOtvKBQx;3KZX z1$B>sde$3Rw$&R1sv}1;M=*f~^1t!+jG=+hECBG);W6M$IC2(p6sR-thD?M>Ppx1vv(=c3tJ4g>znT=YS)D zMmQfo_pTDdq`7pWVdL;#Q8>{kYh>pKdGB@R8Qn9A1hC>5FOtHf(wH%QD5?I<5m6JLUY}XTnj|HlIaV`K~3?H^IF=VFF1nj*eK4 zol4kRA(;IcZ3m(-ZgFymk@_-2HD@wpn@$s7xMEy0S3yyCcekEiA1t*s?VLaFbnRu`>B+^{Ct(yV?KgYaNnv}{lQqIz{azrmbAsNr2BxN7!vedl4n_B1 z3wq-X5HXOF=vAlyQC4t9mW4JcO%tRqAd&`3YM+zx?Mqxw;T>h)+ORg0xtKoE z_ZJE^VLTv4{(f9lNeX`hd^86Xk!|wO>#Vq@m>XpND>#w;k^Nao$zEhGz zjQ$@_{I3E_`2Wk_%g308W(J938M9fld$nYBo&Mv8nS}U?)==%pI(M)8n7iWwjI}Y| zPeN_QjK4$(yft$i0L;+bbR^pg9p;F0Azrk%D>^BgJ$|fIW;mR~XfL~=IjulB-AMa@7%6H3s_1NwY zZ%fqV8w;YF7N-lxFXE(L?ML{3Mw^OWh#J^Fzoo778EOw)WGTfg61NP-I#M(TcIY2G z6A}=}7_@6an>t}4_QSW4=v$6~g}VGr<>#p>bPM&o(Vx1gJ;firg%`(l$#yn4@rl@8m)*1iS>Y$5)fr!zkj^<)!qDE-J|)-}1)dSKPl ze_J6$9es!Edqt`S?@ei~eBILe`iRFRyvJe}qGT1LLhq7HIO_Kay}fUTMMf&_o963& zCuQnz)e>MHbgo$twM?6LW2YK%(Ce$1cBWU48^NRDk%}IhjBTfq7mV=7CnOBwx6Ls- zE&H~@td+($Rx2PR0G7MO!y$JFHh{mo`xe}cIo{!~;8bE82kpM~V^*sVi?#S#$_4gK zg%kgbIF%X3;)k7Uz&>Xs>7WtrP(5EaBK8Q`ON9Ufs&b?LK(1K(hVOyYzH=fk%P~t&@{UJCOEHno6_akE1pji?ewup4{Y?h`F}% z2`?GF)98e8d)(Tme*OA&cq1VA3FSqNZsfrU9r9Ch#93@bf}^pLw7h^i7l~4w!ggiGfJt| zOH1g+jeSAfhleVC24|Yo6tH#0*T=B2svjzS&mnsi@Z^4`{k9WUWh|TfGE%8@GW|n> z0SQ88J0nh7ruho(0Z`u!EaLd&1F!HFLdt#dwdV%w$lToJf)QMcZkF$z2pd2^ zWaF~t{VBJz)j1>E&5hzyY;_g3bjg@wBqe(y?+$#n>f`;Gg5wC6d=+ZyJ^aTW9EL`8 z+7iV~s+Ux1kUy%rrpD&L_)tVA6XD0(lbDz&yGpNZEzEl3l%8hW$#ElBV^n1P_FS;t z!VYFsu9qg(ql0YOO6xf;%K7o>e8I^H_XIdTsxVo+C39bZ`JQ0HJ)RiWcb!`Ois0MI z9W7@pdX?_%xyrsirPhASxa34aD$Fx{YHEsID%E&hyRTuv&B)nIY?gIl3Pojw1KZgB zX`i!3uL@ttHPF`Bjp0w#=>9VW_V$U4?qR-eWzPAnXmgXxQFcdcp5LXHHT3rVE~YJI zV%J+;Q||N5W#1M3FkT&{#^Y}HhGr2KqtopI;$*cpX})n0kIq!K+)j=-I{$d5BE$n0 zU(hcc&fz^5J|lcSKnu&3^xBG%ft-=CmQ@cpv91`D)*ntW>Y@<`JFsw36PE7s(z?2Q zf1b7Q_R}5Z0@zfGaZ`-}nUO!0Dj(gosJOQY+ON(fEax%BM|hYT(2x!vaO%pL{}w-w zRkRlpT?fLqn(jkF)wc{sCnx(vn(lJango3PX7o)ykqR@Ts60aQslR0VrGGCqJh8R? z>OeSysm5{aXZ#{Lu7Bfh5-!Ic;=7alWe2ZK+btSlrTfP;{H){aNjlDjPlfTye}=%* z5(1ph+PsUOCGbgBlLX!WaYInhA>E)*Z?(c&INvm7c&C(0fi);kI>pZUCZ=+v&kG`n z=gq;(!(#WvlSd|bq*MC_cEl?xxJxk_$PXdf?;OP=Z7W#c35(_<6)Gw$wf5Uiw@&5E z6-&pdQg|Y0aD3OoPprHA&{3#Y!s7cc(fVmYu=G*(%MUkkiuxW+XNP+G`=18o&P(3Y z{H{H;(7IETK{O>VQ9v5$497O8TI&wm>=KBXsX?vPMYVhRTc>bW@b$&jH?l4w6&4~d z*hP3W`4nFeBS=b1v-yf3RxV~2;}7D+!oB@8WsBR+i7UVg!f)3LnKOJ|uU*Q?m>1_e zmFein?Fx^AJgtErQ8@bTsQ|cuBXAR}y`EZPT*@h=uHFwBP^uoQ6f)5|AGDRx-TsoWI zTDtiv3d8_0Om6Ijcm8>X28~OL||E!mlLba`D0~jW^ zkXF1+C$bpPK!{2*`nKQ}^d=!6ycBFHK*v4f)KQ$k_RK4rm?$zpUnDFTs-_;EgznB& zHnCMKew*POWm8Krcu4>R?$6)J0vnooZ zD#3cJEee`mowgHInk)(FVy@=MPVpLXH_zAo2OIU=nOe#jv+8L#bag+~*vM$Y2Na0* zEzeI@XykGeDA^SOy7k(+TM88?{n>mYGP+s}AZTJ@!r%Xb^#zV?_d)IQ#>Oam`9lV1 z?BCnyV;K11Af9}0-9)p%x3RCr?t4(-h{NXE!Fx&y06FcJu0LsMIJS7mq}aiJiu7qZ zt%XHRea^m05Fi;GT0lK_{k|)*VNDwqtxgHZm^XIP+Ql*bB-53({9o||8L7_rw_r=I zqzuM$AxeLe#4Wg&)xTs6^0m@l_^cu3^z5CC27!g5a13un?`A7Erz|Q+NzToXsy95- zQ0>&MU9I6zGQ*|Nin|!M@QxdC5#5326v5hP&NG&%F$cf&O`{BRy;q*lg1=&Zr&M`y zISfUJBCs%Wyv(ON#ojTfM5VLNq!{~A;~bM%q=bv2I(MW`glO@S&t{a1twY1(5-PzV zfv4kqPZYGbO8LetS-|(K2PzrGvcN-pL z>Xi~p4n=jL2l(9i(NYz1DAr-A(+-b?$K17ES`EnYR5$b07{0u1=8iqr4A0hNQ`pQl zipnm=mP%{8OG`#`?ovkv0Y4pfI1cW(pS{7K@wN}=om`!XA+Z>F?E5*M|~$hMUQGc z7Z(>jK|uD*?cPutq$kt^=MW#Kc2qqbJNchVdo`q>$#@+|6}L3&?XF|7C!as5TV8kq ziH^xSmmk49jR()QDStpRZD3SEEj#|vRh$Cxk$~CotJ_6+BJM^C+cp6uM@1TJxFmU8vcoP>i>kN@4PqXtFv+cma6+3fTR_=_GXiCfxH zItB{CeH0Ex&!+3I;=jv`_6SEVDr=5{4W7(VeTYL%K1Syu6ER`q@7we}_A2gW}K&l-)$)t3XBI{SD zK;-;e8jzT4;&|rcWAwbHnWYx>`fV|w*?1d!r_njnA9K$UO|C4I&~evvQnB4OtLh;Wj-xfr6V*4c=>Rjd_~ZQ6XC-QaSWde# zEmqr$C-cRr8t*$)T>y}^mNSffRj*GKod|G|qm(bbpD?4ssb7PrJUI0{EMR#4v&k;> zZ|{xD=FNn<;`qaT9lfMD4C6zsg|97@RaIRLvv~%4t$*v(8r*9~jB$=O{`;_<&`i-KePfceodbfuV%7C3{}Gt-0c8L``EO zhos#=z?QS_AxKP8#{{&!eWh_4KJ(ev!Vft?#@@(%6z zbNU83`};mVhvAWd5H2VLcdlIdBp;E>*M#RCipe-P^)4Fnjo=s7YTo-(3 zF}}#Zpj3qH)Al@fI4n6i8SpKYoZK!%sRzU+ zc7>8@=Wd&VV@@8&*iWu29pMoKb(!09l61m}YRi0R8XB5Xfd@Ow#bbEkc_tp!zi;1Y ztz@RA@J{2!x45PZycJWV)G&EZ?|{f6vL_1jZ;!8eHst9Sj?c^}RZPSpEzqVNre3ZJ zQ%_B!H>J#Oxm`m*IfVKM%T*B7ZG5arxo*Mj`j4}N2sy+OO@HS2yo>-L26=U~eof>I zyMLzO-Z*IkGALuC+jK0>%Spk@Q9H}UH4`ZKTG#oPCXWr3Wk-5?)a*=q`uddWS(H-c z@&vQu(egjHeE#^#LU{O2X?2(ITSim5jNFN8s{#TYY&*;rz^tzAkNmJ8d=F@fpF*47 zK!hiC;w8I6uBro6!8m3?3>-|27W#yka zg&@w!I=s;y)W|tn%kWLj8M60iFoihr#tX(@4%?(xz6V)Ky^Uv*_Q)OD_;5ildVbF{ z!1Zt23L_t7Zd&6dKRNpTt;%&pdN1=`b9YmN2WADw5}KzVB9!pY9eRsT)5slksH!Y4 zRHqIhPxV$}tUR(nhFV}0ZdANm1Zm<)Q3vd)4%gZGwKNgl%jyNAW*;6Z2q#YMO1m-U zZ4-zC!=LK?Da0g&HCNzk;IhQtN*BK1!8qPuuX^RI;p4}nf=56~1E*(fEF06g7jIND zR%JD~C9}F$>cm!OLRV(!XlGgw?0ng+E@kv56|Fqh2Et&BlXqI~$b;Ae$l^~nX_t(J zQIcyX_o0Y%#&1fkCLO<=(|o}GRaz(K^Drg(96A4F>*CUqvPJ{s8tqmmx3;!|h}1hE zyZd=d#%vO5$ug&%pE^Yr78V+JNyVvV>hgD12M%WPzMj;)v&sS?mNtJ}Wp&$4u&}~( zHJerMdGNFQRQp`C4uiNE1JkD>kjL$ij>>P+JOFSgawO4mdrzqBA;Y4fF*+Kp5e zY`^_Lma;vHj#HZU>mVKdtJ-jO6yX}jnbzvE<*{3;@^o1$KaPBbT`F7e>6eUI7%_*C zTu!KO9lKsK-o;qsez3)9x?z|=OX^aTkro> z+WoI+X!#vExuxNNwwYjA!jrLFmGRPS?QpNLH;)YFK&b8>$(t?b9pYK^A?f9;m{~&^ zo6_oP%I@+3=NfvV{~~YD?Jv`LZBJwMs+~AH%g#iTZhVO)vMUFN+r6`Td&#cK7z_+n z%BT6{vuR7AP3dXj;dEoeROHd~-x8kCUNCsfaoOlo*U*)R;|kn75wSi4ej^?=_3R=X zz|#1YbbTDd8~ZRbGgoHXP*F(W+=9Cv@iG0}RVZ0v`W5JY5jW7Z$U^DhgQ^?(MKw}b z=WO{H=Tf@pJBr_K*%nR?-7&_3!8Ca&`WZk(X-ivWZ)LdkGEb+=W3a58|QLq#8=Vg0;S)7-fB2+T`*pZN zz(2)I(8DfD_4f6ha6u-5-3B${$?A0}O4+wOWJi9*biRLvC>j~j+i!fATN@tvb_Euz zKv+I@J=;*Ai)fuv#!xU)P))oZ7r{PS3un;f=ji;=_G)=n&Hv79eKETsiq<6a@%^4* zkAc(GC(PBy0dWkFBxm-oy)>irT;Br?fAMucxi>%>yem7U!yk9o?7Tzu5>R%xeGPJl zg7EcC3QED0{tu}>FoqLM^!PFd(ETHHiUc;?MFOF*_9H7Hyu41Qh{hwz@ZA^+d(G9^zM-`0!=#WZa88 zPJ#?Qwjscc>K2X!c}ZLHOfSVOFom!uR$8iqt;Ae znsdZ=VrJ&0jZxE!^`1l#?h#Y|xPQ1iqX>V!gxgBZ$9M9OWyL%xNEf!N!MN3`#nfVu zUc*`bq6yvm!XygU&@n6zbsMdc+RPP0?<(YY22Ible43Y``!5VUAj$#t$t(UX!U?0i z*?FF^C4$SQgxh|zaT_IC#Tp#Y3?9Qqy5NBRMM-LneqrW>W7dd+{c6vH2M^p*ep{4J z2tfB<*@~2_OH{IrJ8^q2ggR1&cc9neyhmfl$G_wlR=CE zXd)GlY8nSB=EnAsYX5B;82}|89-eNuWc)Y2J@?_E{m*UC50WdcsjbaJ(~-RZB7gsz zF{of29{QO#2iyOx`eD{5ZRJzG)awI{4-bJ5DsP(KkOUHVH#Q0RId@Y3nfQZnqQu8H zFN}F$-{vVd5e!q~3GtRGMhBd!C@&`kNazMs$eYGAl&HVt;YK+4uhQCD?<<(NH{7nb z(ounDE@#b0w{pJeJjo_>n9u$_j7J;Bx0}BRUuIC-)}ai8M)?dw0n!#jp`gq`2>Q|& zBs%VZW_1V*SPItVZ>Jf$G>JD?1-){q6OsP^J<;pG`BneQ;-miW{zhC(_8-KUb*k~X*LOv(Bq=CQh!VH>!AW1uh3XjW!fMo$ zKmS5|QiJkexyirjF!KL^TR^7wd@OEPnGYz&H){f@meuTC})p4pVT zZ|RvdN=p37dhNKhSZGMpcKF_&aoXGQJ4Hro!u=}<#I&;k!O!2H0|0dl-`T;kjk|}e zZMJEs;~xp$+fx!7I|oD+Saz{pT;f~rO~O)> zOXeb#&3^p)PMFsvQ@=z>&imJrk2k2zxWM3vZ_Pe1*Pu%6ZjpX#+;sy#LjY{IS;{MSi*45*(MBXZ&l_|gT zaLiMMAj34`=i^wCmQ`GLUUT)MnVPY6tF?8E_oX9RDS4mM$De*(dR`>rDLdd{8T0w{ z#>A5bFZPrAVD95ZXuBUc5@e!Ayf~>oYqH0}yV(!yE{7-7`*(0z1q{B}4<<3MNxW-K z1&Ns7kX-&|jz9>S*8c?qL#&{U$*t}c&w|jABQr6~tg9K@xFs#K-6r9eN@EZhyGcQY zaG5!}Z%b7mzxS-E!5<+k?b7JN3{UX(V85ht{TN=NoCCu#lVN<2O=)BgZSR1BLVG15RhY5k0`1Hoc08TTR1L~4ALXP-qdcSOx zbh@9M%VPtfz90F#O+jAkht9L2m-n=ik%-y!DJ&V{h-W`{a!J7`A~5iGptT4IV=^t@ z@WFvpz~MaS8zP}!jzAl4^P?|SS`seS@(a~sxg*4&0pg>ctl@O6Cu@UbPw3OJ@3DJP z)N$yZNCT2^EVgHPJQp~9Ca*P3YcGcPh%C)_j%~bdA2)7uL_{7N#COsPEdR8)<8l{< zM`1}2hdVXRQNzq7o<}+a#&;Y?J8T5%fy#rex@lf&O4E#1DP;8ZJe43j6GvgmO9I_r zVBFWniRxlffW7_crT%n!KN(l{e%aj=N4Zm*Fsh7n{ET6EPSpL4gg{qhu3#gcu-l$p z@*5c_PJ`IgIMhr(ctf_7J5xu$+0037mdz!cJ6_PN6dvq^WIs7bV|{_{6IbXjzCV=g zg#)Pyw&xQk6HHv8;Vx*4!Jj6JQUImgNpF_aihR>_;oaQv7$Kb-*42uMHyE@38@2)z z&yONMmvlDs8lrq&>l~NDP%0sQCLt*3^S{^d0g1#75QLfoiN>#>UAaaG@b@=us^5dz zEkkK%5tKFS%B~x8iYHFPpx9(km;#T-Zw|Je%mM)os+~r;I{m`cYb=+f?&FeAQ|+%G z&tpmMcnUJvAN8{Z7O8tR9F+G^hv!oCjGcl$2mh6@ zeqO7nxVWoamatNB;>MU?!%YUv4xL8D@T|?Xrk&bTUl#!*zs5;*2!Bhd|5MDqb?4;r zn}S4eV|%>2yUT|^uR0|K&Kyc*1l0eLTWgL}SmG73@4kNg1#56=d&|sz$bVz`I@an9 zC>9+n3C6$>EhCMhj~`b~#x}i!#!?R>CAZzRBhS7|Qm6aUWTk&MKpmYwQ5p8AOi>S( zVTtqKNuZEp9}CBxX1-Fty6WV&_an^vaHAs;S}!Ie8)bI9-hI8nOZF-zgao=&9elvYN!y0fti1IFqeE3N?I5b;q}o&c8y7X$(kC@O$8Kp+$u;1Ph03Pdz%xD|mv zI8F-sE+7zL&wme;WG+HlAc*x%QAG}G9h;IwjHyPlJpF$mIlXUhUBB5leg&0Ojwk>j z{BJ-AZ0Tb0)z;~ot)l~o6o=^r5Xb#5F6-#z`PJ6i<{PN|*@!q0CH!CXtEJh0r!s!C zwYLNb-8{nq-og3r9Zg58Z|-JaEkQ<3$p22q``^WFT`cU(fK$JMn!4)afH3xdVO_JY z4z>=~pf1{-a3F^D|9{@~tA!=#3K@L(e@>Hiw70i(_y)Qj`2hoBnE#!oW&6#}5>$LL z#SQ{7f)v4TwLCJ9eBFJLw675^C%$WGgDio9*dZiddm$9*=5jT8=I*Ypx^oR&tq>EV zB?{f1%Ca(EXjyrOxe=ZQI_fV)0u?VBoWYUyo9v5+%`ED$kKpA~T!e>|k7=ss+S0h> zZnoQgmiuZ+Y3c8`bUknBYzD^0+)7JJ$E1-yNF;OZ@NQ}vG)be6s(|e6aqAlr3v&aA zMKs)?B&k2Ohw3ZcFn$nx2v>pA>M*_*e%}D8h~O~R+xX*;Vg81LB$tY|qMl6y6&v(D zDH73^jQE%z3p6zWgl=vIQMf~fYZId3G6rhkp2b3;*fNpOft=dUwht4pYQmsYsKf^HUlux9Z)1ZQmZ&93GvP`@)6 z9rftT&(sCiU=Zn~s&^nqfj-!Fo6@p^eWVf&-V%-F$3&)F3Rn&$*$NaQH-6)}oPTu& zsS1b@&VvF7ZDjgkDvv54s0>jJ{AGdPqXJ2Sp0YuL+wjg0)yFyI3rb!)==(8=-DSM- zwvQ4L4iiXaD5x6Vc{>G0$?{*tFyIWM^GLj3>$)MWhLK4jA1`8vOUegf{S7Js% z>vddqM#csP_U3Ey#P7Cph&lXMEMLttF_QEkKX1fAC9sGBM%q&K6m{ zL)Kh-+NS8p$Ow`g^~LswwDWBhk(H#34DTV%BD<1OvOvqSE%sbv89fCEsy`xU+@eq7 zwB3Y5gUE#A4oT?E{FmhgYp$5f&YQ=7e=smGWW(?kSC$hYq0sV%IBA53nb~?p)2ixc z&9rJ}0&|Yi%F@<{6KO&!y|2q>{bEYvnPL|s)ABcmbB@5++}+(V*NT)|xaT6qj@A5B z)zrozaBeDWM&2wxX$^=XPpSHG+k-8GhiRT}2v) z*O59+1*FI4Q5E)2KDO_~Dh)e;BR4uax_FmZA%uys;g!&d8P8MwZb?Vajf<)ONjN_B z`CeY!Shl41Ks*y-F2aO|_zr2*;iYYBYinU9h z4q7ZNO?>XQ4IMj#zHSZhTlA4pP~3~-9W6PaqS~zg4jmpIu4=tMh#p~6r**AYW`xz} z*zsY2ddDA`l{gWrx_+JWWdeKwCo64~4Y#N975n-5Z%LloTCL?US5^CKhvnwpC`#$; zd5bJ@SMwc7NQT?^9=6O~RUH~aOv_sG=O!twJOU5ILrM;~ff1wR{2Os!?j2>**87w6}^u*dVF9K-`Kn0_~HYr4AHTm@S1 zuokevOKr=|2R-`{3x!2R53~?QKhT2a3ptWZ=YCW<5;WE}nwpM15#nRfqDxu%=VuN> z&tJaz`?>y<)szIK4n!qy68xmh6fQefhZwzkDBHOT;O~ki|A172)!T08e!0` zo_9Y?BY3FU{%ldllJq`HL*)}t;HDk^k@jS6!9Pv~sVFcqqeMFupbAnW`+$#)!h*jFcl=#j|{I(52WJ4dYcS{wB!KQApsY6U0)iCnzGsX|<-*&m^hvOyxt_`3A3>OUT zB1p3Nw;{2wx_gLv7Lpyg$vIyhOyw(1rwLeRJNMa`VbmA|4}PbR=``ZAz9@|8r*qFF z-tD+yt6I`qcqz@!#$t|k>mMHTV7<)%#8)!O+Y4y)jetsU~)Z{5{>USI>xo3>N9 z$c#Ogozc(Ww-ju-_xJaXR-@b|4Y)GXm(jVoxno%p{VLxSu@htzLKu5~m;c21$PCVx z`GF0_XJVc@!{Gf*NZi%W;D2Q3*oipLPm#}Y_q)iXBe8mgTL2a_6|Jmm_qi&cnzE4v z;}|r2nXNK$PAsIZ(bMX2p|d`Or(c!n78F=l=-2hV9yR=DKTI(iLuvVHs?#X^GP+Qz zXx3m34*&7vN2OsCFHMYx94OV-iU<5|qr$LZd3wDaPCt#4tWADlH9BAI ztl3lAPT|?>>(w;mXcnG)^} zuC7MYh17kTi|R_j9aP;P?hZ0^Fzj2&U5#K47t-0jev`lDDlWn~F~*^J5kEoyAq-*r z#mkcwG!Tjb#+QSaj%`nkoxQS-ozD3E?%jWZj(?o$5y|#FVVD(~y;=2k)L&=^61J0Q zyWdmT!9lt*@6&d&?x*)o5kKo=y$B*hlHAa|4rcb_-n@2LsI^@9-$DMrBN*!$Vv_+m zQE#i6xTVdg1n7Pn)*%k(1n)y<0=If`>;1$5+`+AbU*+xY_K() zHchEA$j-@eKU8UAaG9CxOAH~BMdvt%4nV3pt}mz699P?c-^3^>>3elB%d#qFo#T49 ztqYO&?qg|F3$Vm#{xbNTb+a!fL(Ij>z`$Vm2S$dl{c^kQpTA7OjxEQrZuWSz(R>Mq z;@}erN7&P3kwCW3!6}|KPxCf>$=tZUu&`FUOy`;Oo673ymF!r<2ZB!d2ss@7v72(5 zHy;0XbNtnH8l7(ck!TPa#!<&+=r?#?L{q!mKYLF06?LVJ+%iAhdOTfd18Ro8_7s6V z_9ODj(q%Y|K!REFMa-rfHW#zD_H08#1K5+Q%W^hl(2q;N~^%XqCSG8*J3(Mu3hwJ3AXi z`O5F{jNPH*YG-3ra_Y~1r_AVxQbZn_VObgCau=q0e^XYJFuI%^tsY(Dd1#!%=d%u<{LTIqIA%`VF5FG9prka@sEZsK#E=Jsw@dsa+L zpZQ&YM*2^k%1_1y2KR?iuQV$0OxJ@#Q;fZA+uV+`y*363v&8iwFPpS{5DV5<1pgh> z)YQ@r!iwm>xqrvvemh+?;_5I(JSN7{bE4LkqXov$ihS~aN(Fk}1hKUC+;1yEU*&b) z)#Q2d_RX6ADY@<^#JoiuA%mYDH-)XCp2u#MJLj?A<)FXR(_<8EC9G31@k5Yywf$0K z1Kj5LL%QJps`n|ql+W!c03v|37c00sGIG?hL>mU@SH$CAgA*2k~&~kGR_% zm%Le?%#&|&Tr=j>*4MwArOc6f>e-wup8bL~nh8P?`DkF^H7Yc>wY9bE+)vNS%KGc0 z0m~Gh>rjgS{cw)oMaJ5jizDepGBR*XgE_s3o~~|Fi}~>PZROM3KMY}n^j@oXyEgK( zTDl^(Q{WKyqWxtUpWma$0`Z6)k0B&glK6!=w>R92x!q~K9mrWQ$y=7Fo@hZJk12q` zo%fGrhz=~D`@te+5~0=Jl*gSB7vADHkM}I*=KQfxFf99Cy~=oH)&CTYxaNmkF0(7S zHY8Tsa*N)5<2or;{)dp-_1xC~e%d5WA6(ur2wyo1&$uVp>$I6?`NT76Be;Nvl(n?n-cB(Q&(FUpPE<2$vm%WGw-@&}FegZ_c1H*VmZM#a@!MJ!DJMy*`4f(3XNjV$7yZEgG1w>z=Jj=KHVx zLc>(O^J<0mwCjz4bB#NoAAmdh={|+qsP;o@48KKX8v-a7R@*)6pn7X#Y|PBryZR6@ za-AM*0YkGF+14+Z8_ieJ^TG)cn;ri3%>0en)ycP;zwOE+QlT}(>%~xA?FQ$bnisq< zL@N~9kR2oU=GE7yt2qJ&DWCnR0_NYG1jXg$Z;tDyRVA-xDh!)wEX-@5$S37jogQ10 zFNAfp3c2Hop*~l$y1=CL{nw3^xS83LuZVP5tDHWp>dZ>Tps0l1Et=4~ZT;$xlX@r+ zS-XfL=0{x6HkC{4+**uD?JnQj6EOdVNA`fXPW}B`i;Hal5GA2D8dSTGrz&2fb}A*Z z>Om^tZAbH=1G~!bW`)0>&SgE65P-D}9E&Z_7tf@-t zyFfmNxC;!|V7P8i>xJ4!H_eiM3jWq1JN_58f5rA@SM^=3-QO|V%x4h0= zAW)ygh1YI2g9=r%vJtotRm4tO=khE-5cfm2f8nQJ7wfeRr+QKS9EJMHMn&LVW43Vjtmc5K&@3qs9?PP&VF5-kTzF4ESxxi9{{ub z2EF@LUw%}6ABGth3QeMY{M&IOjkrxTbZ9BiEK=2BvFg|aE94j+TlGKtvPd-P=Zob;T zrd?L_1LGrJz)^;qH-hbpmK* zJj?ZZAx}O|RaJ?O?r^p26oc~9M|E}1&g(&U@t`+1%Pv4}a9?(o_ws6G5q7q+5|;F) zF!4F-J#Bxwp4#ThY%VK7M-8kE#rty5WOR8Lg~5j-ylx|p)QZiOCi1q~j#cGBCC0&+ zR>ma!)M__aIGQ0d5eqkvv#8h4f!SlB_M8*J;aI2%CH{ba4r|D$V+C9PaOHpfw{gE_* zSFL*~>z5y=LIuP;nWuiqP7=%05l6gFf=B+O=cxvI_=~E;3D8JJ=1B!G$(LEMMLF~C zk;_lmiZbZz>KXz5sQnf@k18>X1;n6#m%9#{bF>O&4@@V z$Jf#?rBJlWavuLi;>a^2VT+*v+Kc+y$rM?dKDsuN zUI|ji?D{QtG3WTneZcGwh>DgpwbCeRv5_ZJ_!uICjxS0p;_#{Uo2{Z^#HJ0zeNzmy z{fg7#gP&iNgHanREz0fA2lI%+aM{s|jJes_8Vs3$bO3sZO1}At44@Y;Okx?q0g1bx zkT{{j_2ec#&Kh#^&Yzolq$!=jl0WJ(`XdkTmuseI?KO zW~#QfbP=`}%cheLEN$}C>D^TnftNjpryrm}wBB*mqr~m75AQIHqPR2hecCQgjMY^_OO>(!uG(x}mF?UX*wAfiGat{C z<8yxYV>IJDT?lPvx#hxKUBI+UhULhvB$R!FG%c-OqmQQFRp9mXy5ki0M`rV69k`c) zX5u9q9JMp^nPI27<;4z9`e*B+v9I54Z$Hyviw>!G)@Y&3&T1Pr+SyJwPMjJ9d9%=m z4L+N3Sp%~@Klowk*l5BHsRN?bw{DjEFKiL^H=Ox2a%s*BRa zdOjysNa(86Z)2m0@V(x*zStSnj4W^9e9sv0+0ggf@qv($xI6K!H3O9e!1rbBifm?u zoyv4)D*G&*1Fp&7j8R8Ri{3VGv%9oZA1|9*rI#KF8h-e6@` zfXV{D>LG=YgR0jfRfIfw@We8ACa)28MYznMNYO8i)G0hN{~C34u=8vkT#&>CNw03$ zR!Nu%IEbu;akR9wgl6QY1%g2LH>ZajFQ2TgyQEg$#TwQ%cwI-Qv1dB9=eYtjMeZ2S z?pV6#s@QJpqCHfL=aXPwGcsT#x|;u^Qdj00GjdX%fm-C`S5dad<8jj}mGAxDWZt+P zygY5!GX@+W*~LKO|4~6^slcy{(UiCV=b-IWSV!0XSZ}_2_guR{=$#-?^#PgHBb#Z8 zITD&|W#+%jT%a{qDVN`KVU9A#fE}Q4mu^N(gyWqM20$~N&Krbxb|}A2HxW0EEGMJP z#}OMK>+85tfaGw8g7EFqgLD?ra%E`1iRU0Z8%y-;tBy0!(#MWjhqCd(VT`{I-5iUn z$_3;yb}^QDNhC5{Dl)!L!ms*}cjGC2RQ;?LZ-`&j*!@z_SNCl347FdPv69Dmi}F$; zb5<~EAN9Q+r~j@FSzLoSsQKS>>}LKPbjIIcD!;vdYSQ<1z31o4D7_GPrGB%`WU{XD zK2fBXC4&hTE3voKfCeP3*%h3;etmBNMy~Dl;ACb&}3<})xB@Hw4Y~0p1Z+4oPxAnXFs5l%V zBK@vekvtjhYu;zBJle^#qZthf%6PXbt}7G&WW!Z5Z_is@4;Slgg&^>9VS8L4mvi%> zuQWL#DYG-`ZO($sM#D$awP~EDy>ECM0~Wgv=SkF^onadre!JP;C-XI%ylqFdK#OB( zgbwMKPwe!l! zRTwm+@>|dZ>`zlpi8|TZ%r*@>|ktVWu>oA4YF$Fw(I5=#^@YcbY9+S7t~>l068oP z+v}F=)!0tI59{f9UG9W`bl3NG{g$C$T}pB2`ePWF+8LE1=v6SvJ0%DTH%n4>+T0ue ztD$7O3byUxcb%Vpp%Vq+3eE_Xo50k$Qm`Wh0{}4TVf^{*yW=K(edn*0TB;g;ett+r zj6}jisR}_tQsOX*Vy^_zKh@`dUtYx_tFhYxy8`}Oc*;MudrTh8ay_FK7No(f}(!9Sq-t?@Qnrd-T8U`vS^@-e;nvoHMel#)-^v{gFo-X5`N72=leAGXHe(H{& zB$H=QjOE~Ur8av9IQrjgPbmOtoVqS;Gg4k9(9}Rjaqwr!bYZ1&9lR=mwDYlZaheKm zVx~kB0y)Gapuv`*8o^gcQ9U-?v3`|m(&}?}9+M&bjNXeQ07@xjCy*g{xKcDXWf`SY zVbEdTn=Ts`!^kl%SnV+)Y`gR?ZW&HvMT(8?cNS$bGdo-HsfC0Sb6iXLeIC&#q+=ue zwET*atBwyMADjswFsaK4S)h2_NRWR%7I4_w=QVn9A>n#(IjgJ5oPbSC+-MC^=)-?N z%)@D7*-42O-U`sp5tH5Q!x{?RhUQE-*ZdQBWbAt9XrIqlEdC!az@5sCEH{lDqMC8c z^J$92zc&VBi-;%`J>&D$%abOX$=s{MIkb;BnssL%-c1${4eRn6w+oUfT~OA5=*8Ve zMn|*HXHyigS4R*OzgT&dBiW$0>fb;lXYAf7Ii|>-XAL?J8$_7+d$hQs@`U<(n!Z6xNYyL-cDsq6BpB7$b#~8qP(ZhIv;nb8S}eqzbxZV< zY(7F{pm`=)O!vd7vox4=Lqn$&5&r!*^Jqm(D%kbu90iYFW=rU${J*1*NZgZ}5r0Ize z?tF>D_`FXhpUk#maB{2p<3Yt7(sz&*#>>mw`EL8G_~ zQr-8m;;-^JqMh_x9xElgIdPXj7zzcdO;1g~wyv(4*ETuq6oJ4EKnKU_3HUvR92^{c z9rf)!2nu+c~}J#cQmGE-6$(3$4<~-v^lneK=mxNKNZoheMo5Sr?Z)Vfihf) zka?SH6eUhxZ+CW(uZz1>e**8w5ZcHWFC?Kd=8Kp5Jn$D#?3)`K9rh-EA)du;tB&5rNWhu3Li6A zsYI8p;~XI1pZh-!MtZAvQJ>25psxqNDsI4@#=WPfOAs6?}9X3o)NC4LhfRM0>g0bcdkjA^uAqM)ESv3&^!*;L5> zibsn5q+j!of|m0`bSk}eM@4vB_HqGXJ=0@D@!6YyGCDdsvMi{``QIbo2{{%&6UaqvyMw{bM)?&4-S87`lB!3aG_e5QR5!u zniws2TC^PkYQ|)4C?ce_QimqLo`2_R&g5a(1VIxa$fAdVUM=j9s*_LHQ}=ImF|bJ% zv{668w$et?@!D1c>F0}vG8ctwi~Yh(;?gyvQMW3)Z*zIs3gEvQPzyFByk56X*H)C4 zE;icJR%h)3VxnV7u|lg}VUP@WV_~DP5)(*?(>$<(o_`~C$+6?E>PEWy^Lnny;|67D zXedA^)YhH@-XQ=}u6MYvbT}UuK7;wpTtuV(te>YM5<@Ou&>rN*MbqB&Qkq252$ceC z6qqckw@@tyang1QwjkJiPP5biNf46APGW@@DEB*YRR3G*eR{aEUaJUCviw5_*hHEv zhpiH&Z_f|79PrRNNiITtnclIGv~2&#sH?37Xwmvgqc#J`T!o=D;F*~%n~SEG5Ec*+ zXbC+wpTGbaLJkiP+0_uHF50g3zoh;)M;1FkjvHHB2@dDxv~=B0SFg_cpEEcwpMmrt z^m7qQI?1(goBj^q@{liIDqD6IEn=xXmj@C&N6(`p0GNL=ttOrI+Hwfcbu&a9PuQnP zYS3pyW^}c+3o)N$&?x{Vt^-(#9NI1#C#~beZ=x@vysunc4SZ!+E*-7fAI7$91h2!T zAK#XQpr(IpbA@E3*iw7-iyHcCrP+_d)9tT_G2h7WfBIWmR<#NcZ>N6ln=@4~sq5y1 z^?Jd6X9`|}%hk41qP@7AW#pcPn*D0KSoQ_jU7%_xEltgrXfXmi?bd-KmxRZP_*QGe%WjpW6N zcc(^o%Rb2dwZZ06F+d;95MdD53G+v|JPM4zF*JdVIxhplYi@33)2f$Ym2rnp=z*KD zd^J750;~b*+ zMI1g>@V_T}?0{NRJu%-I{m|pZ82|PE#I60bBE+v`THNsSiwiYT=dF@F)zgU@zJ01c z*w_2gf?sNbXn5)5P&k5Qx`~P7-QKO|$w%)^l>}pcB35CEzGO?gL2i$;24leE{chLz_A*gz)$gKW zaq+&qygYN6Ela!+P@wpqu<$Qcm^y1(tBv|!Jc|pFja7OMeOnR?Lk9Q7G30zW>P-1( z@m6!1UW1ub=A2rZCJGwO-}!~5BtX%ZJ8kCmK4AfwXZCJuV3u|*iQ4&ZRAR3DB>0kC z+ZLzu-T5}a`vI8-z{f8+I6!|rvq8Tzoyh0M)HZory6ypV1Mrbiy#NlL0v3Nj&t~JY zpZT7jXumAaw*cxA=o^>nwQF!=@%waT6t&qR5yKDoHH@1avNlEi@SgC$GjHU)x&~Qg zY~;Kf+&PxTT(Dm{&?)Drs;ndo{{u|!vGH-WV|tDEOUSA!6@{$5t?F|9I;+uiA?EK{ zi7S=Wd~~XgS}A}nfS>rx@`~QO$2meW&DH0@@Tl#6c4nsBsI9TEkPRU905t|s=M~Oe z)r3bF+&~CJK&1z2xzdV?;juBGX#>NEEeZ)WYPVHHVBQe2=`G_`OJQI5>-nN zDUwg};!p*=invSSWLDJPjZGv&O8M=|n#&WJNnZ?&U9s(s%<&ajC9aBjXTV;6*B06N zic@hqCK&(tyscJ%+9GL6N$5K0gP`&Er!SYjwfr$Jl}>`&>R9f+h?%Ij51VMZPf7k! zJFIgNa8qSH_RKzP9ejTLX0okZkRpm${cF_+VKq+63gSTcSZr=qzRqN^_WUUHZYR3g zTTN*$Rjh=@W(Ja9d`6nZYGR0(UU_|%SKTBcAQ%Kg)$o1hzThGa3xOS7^9f3kUh8`) z*|zy+54gL?ohKh3B@L|UJbEQ-APTdW=^t}6I0f`=&ujAEd$~vK`0kStS)DPcKFzYE z{u}#KYZOGJDEyjp_$bXQu}V;!oqg>bZy{srR`H7>MT5Zhtx0QT2Hn95d1#2Ggcup( zkAx!@b8gbLigS#3Kh9bHq#kQVIyc`Sev-z>JF+TP#e>1cCso!9i-%q|4gcOXB_}&q zMvbaCU#7qL&218xq3CIM!-Nw2yIL&!{W(1TJvGyvZ7yhTtBAx*;lYycb$il3MmST- z4OlgD*iDvMxoot&YvbA;XV)lcB;yUN4&Gg6q%8Nk>6XN0D1)G z33EZM`W1R+>vYj|`{airM15PojeNu+^7Q1rfGcc%+d$1%q$OGdsft)E)<9-_R(k0_ zds0a~$YZ;kob~A>=5~mO|NrS6*aNILIw^UUR7*w~z5ybJlzkLZ_s%F(%p zd2Y*7TqTa5s~Ml81O_u-0(N7R=wNgoA}nXnCL;<1U_S1;72~SWsF8r|BH3>fR@MqC zt{AVe=(f84`wl)rl7Ij2XDrsnx{k0m^84`b#4Avt;R5rPjTRr${MwpMMj zf0>Bc|ExXQg$=>lA>kjlR;-0`-?KO8D_0-`c^)YH*rVpprpHlgWi=F(M8ktY6zY*Q zy_gEGS>1h3sF+dL8dA4*1^A?~j?hq|6yDG_=ftlVxY6p+$L71DcJ$A(Zkh946mY)uFCHq`ui!w}~V- z`}45}WGfe-wCq~F#IxR|zRqHkyoqxY3X=XwGMJ&MhaTZkuJziA7=^1bX&`27h&*5h zc}mm$ge$EVLh<(X=jefPxzf;t-+vzaH*!elFh~?0=1Pd@Pt57en!lBV;(?e{WiCyLOI*|%y{$J4~p$ubzzTJ@vwefjbz~b0(v-)72<`KFJX7;Ra8-QHW2ghAH zBV|t-;~{Od?It3QShw;V#l!pE|z{mQ}&LN1Xew_E(-jW54g~{z%=w!&69n!CcjTKD36oHudsK zJgn?6IHfY(m(PhB0J6;w9;5Uh6qh)9wjE}hJFbT!HwP=@OuEtRL=>b^a!n4BJ!*|a z5wozfYr{J06vDkZlhg|S-{u{jWx5sSHBa|99eyJO9p2=$3vxR{pV7WM4+AzKFF-W{ z@G5|fk4@hGZ9S>Cod)QKSwYE*{6w|Z$5JkruP!Q^=mXMfM3ajRkR0Eg1wgXdX|j19 zG4o(+`Jcl)GBOgdo0xbXH^|ewl36?)`!Q-8cb-SEXYWmvxHzAlVC}mjyH`n^G&IP~ ztdwz;CIMhc$@@vv>2KHmbfNviS3l#rOcv4?%>B-f-d=!tYY|e}8QJq1y(gCT@d3a{ zH;*9_r;oC8V@Bn>tmEC4Ws;=-Id2;_#ls015CeanL8L7zpp+NF4)gzdDRZRHwk#;0 z&QkzidmIYd{V{KapAsA((qw;40HuHr;2!YG-o+aMl+W$$?bFVyYoOL_`g~Vg^DJ(7 zZ0Nq`&z)~x3SFiVqCRDJ(AQUvk&z^zyg?;h`0hysCcOb&Pf+M_uIDcVj{5pbzF@{|vGWrD=lsV;BPouYIn-=`1ul(i+C7w)5KtWnsfg4{=F9m z*$^;u0Kf>0;_ZmQcz)=gXK}Q;ZT1;u?(=KUmfHoSEgt`JD((epv1lOoi*hK)$+Nx= zakjLyoWi83+jeuzwC679@%?VtEVA5Mp^mA}szZ*8E0tk&vJ{I8QSa0C2l-@hIH!Cc#5#dTe`jD}Ss z;Fk4S^o)Q1GZTp2hz?5d&GdY05RjKs@L!_vZS2YRN#D#<=J+pHuJra*%YNwj82J+; z5`|eOw=2Ep9iBQF*$Y+^PG5$%^e&>P4n`wG2}>1Yi+Q+&RQ zmtqA4O9uylCb;u_#rwJ2?Yh3c3fQzl9v3}Z$h*<{!>J!@w+x86r(8h+#Qcgzzurkd zO8B@o-IBjfHa}PWIG&^AW~9F4!eDFH?bKkv_(KU%ci?-uZ2&JnjOT_b`$)b6q?cIn zgJNKndtHZ}==4FcYvOyYoS~iU`1e4Sz?QllzsugDtA+;O`%5vvR-loHAm&7=(W7S| zlEcZN0+n0P3{_(h%Mk_yOxcPPIT?Y<2kPM3*nD(h3;ayGZ_g2fH4wt~Y5h227*rqo zV{Dt{=3%|^4euM5q~Imk-Fcr zVCInfjhQd~aFke9)$(O_Q3&09ZCG*MLtVpbG?Lt+vc&<|J4DDdWS$lQj%J#w8&;}n zJNvP{U4}Ah&V(QHY&F9Nu5TSnE8+&YbO9kgL)stlU)i_nxjULA0T4snU=U})RsL?j z^nK4}*uTBz{;IZvR;16_cJ#ggn;PP0V`HN;2}4g6XYQ?Q05e_F3hi~3-@6eiWJQUI znj@e(*k?5QoxDdPyhdYucL>e>yE;A015pL6eCixl?la`+&;l01rqW~IoZN;p_<8}x zWVDB?nh$ormV4X?iqVswJZ_ggju#sMJ`)h=P&%9TB)9Uz+~`2tT)LK4R)UV%SSF(m zqJIlv$g?d-Wk;oB&PGv=S822E>7|n%xZTDMFwjULdPsGRJ$nI5qHiCywZS#nO!con zh_gq$i=myXy$MAHV(x^msBdK`fK1a=ezepZrP?*{GjAaZ=aE();K&P$LZ`j2c`=jR zg290)Y={S7U8MD#f-3u8l@T6Ge5tUg`OmiO0DHO~=54dv=!rO9YHF&%L<=Nr3zT{P zzR&Qq0r1lZ7A`_6ttWYw;hwSAt_i>$yi_l-#C?Xwp z#`{+meRN+3n2Dj%%+F7Yjgz zjt*WtTZw%7bGRzP@#|3WrSHb-L_W4s_asQg@8&qg#Pja)V*HhzQMI>P>~Xm+_|u$X zkAh61Mt;)N&|ATsC;Ovjl?)M+Z)X^bOcwfFmMTYps6RS5*mAo15LCHj`esRCYN`Xq193ih_Xlbok`vFlCh8cQm6TNgvK(*+ zbnGr3R!ZJ&CGrA>HvWuekWgX2pbEqt%M&2a9l9_V>Q+D!b z#?5iABPEYsy~iMl3K=e@lm~KUw-5GF(}eQtN^@STV>%@eKtW%DZ}_ac0FoLNClEe8<7 zSz&iEdbCbx@KpN-SG=9^@eynjzdQ02#C208ZFG&Rg1^bxMsqCu9zd^;R$e6y{0Xf; z%K$Ta+n2jOo#Q3R%YQG5=>0RzPz(uBXMkDRGw}0mFspO_#0IV9hg!bgzU3fbqxLC8*-vdFPI?%Fi^Y!%fQj=%v+uPsVb)0=LGc!})Wd?EM zFYwdZ-9X*#*3;tEwS_F8lm+j(@9P616)rY zg8c<@2-@^)7`;e;?zQ&|)=`h_GW+w@CBq{ifV`%f=<;6ZP_`Rr(W%ccv(5C53J5gjn7vljyf(5g0BB~v*9GO~tIdq=hLTf0eZ>g~WJN1{a|OODJzqVR z2==&0zZ(8gDSG(Zq!}!O57n{zWX!n0k=8~XVs`c5<7Y_&(bzw$naU`MMQ9zj>~Qo%Ju5#-GIlX&a) zImmJ6`|TMu<63xd+KYs}SG-~ubCkyD7*O?|kN^{d4k$%&^9>ZFVb~_bBbiB|+9VSl zgLXV|tzaRS9{QFHKg39+!VN;dp-YOTjQPyV<|r7rjSnX4umTq9lq=Q&%@%EMt*YwE z{6fk4#&(TbY1FX3T8f5V)QJ&f#w4e0*z`TO!d1J0z?BH$uT@TeB+OEViaWVSZu0k1Qgh_mggp;K58)=k3v`$ePq? z3hYbP8u!6$i#Urxh#uk8nP1on2_L(bT4V@gB+djmt+4-9P6>Tfq(LJu6l_r`t5j1R zKb2jrN9M|F0CT?BMc!@YYpTvvLY`<(^l(N_^qor2bZ`tg2$(7cv|~?INU$NTDYa9HA*qCX-K%v^J1C($N&Am0A9BH zpjtDpV5@xsm`NQWCLwA7Ynd(_GGDAeT?hj0VPT8@tyUw!m&x1uSYX3@MOSBB%2B^&Hew?;m{v` zn6C@{kspAKV?OgOJb6|_sW19|f4`uh01z7qrlwvzk}u*s2h}U7DNgeN8jz7LVCbGbQ!PlUJDiS(Wri_?&;A-=Ay4v7R+-C1M9oXtT9e z+Vd#EX{pV|gZzMJTd6YLp$moY8C|KO1!ba3P6&vGJ-q%D>XFGm{E>D&N$r((j^3S6 z`_WM`#|w(|zo}-fuY{0JmRY|uVbDkt=^2WPiJw~@DPM+W45Ri!-0@(--NIpw5lPR& z*M|Q7>({T+o~t9(wpKbi(~MSbcnCI2RZU3vt?q++0gd~<2$cdRFP|OzZPJhW%CVIG z*Bf#8Q-?cix|r;oL3{+oI6fqhUZt=+`=#XE@Fy)!dBrY&km()zEdFko-&M-*eJz^uw_fk|NAC9#vn}dlz7vy<+(h@ z9$`x4eD}iR-^o@x(?e!Pcg=|Z?z7=Pwhe1Ww~Xj5jm5==qeY8Z{I>sbP5yWz_L5+) zIxnj?BpSO&as2r_E2Jk-0wp}yGbcGz-EoO8N!)IDs-XB!V57C`P?42Om!U4c04iTk zxZJ&95YAhJ3OjGmDSXHx9E}SyX1IDg|Mi2$z|)hofP=+S3$^l$@K~C6H}v#FH#av! zs4%L}yILXydqtj|zI3v7#9R`L36G?Ge0l7=alqf{GRFozL4f#@(BW7TV={RRIy{Jd zSC;N*iJCL=(W{xRCY_63ge(<2^FQ8>&PCj?FCE1XItd+kbSo$B+IaU;YI5??T!Qd@ zx2wf}rn3^p1`6@r#Ay@|wwYu>%OoPI*G1SRdWsYMVTRjCFNIXZ#tgbem7VIEyYuPE z5LwOA6X)IfjXzg_`nozFA=o7$?ga|EGyP^aFt4CR8Lx4dHsB{jD(_%T0e%3U?Y_Rz zNd2Lnd{7fkg_s`c0`v*MHHa7}fjoyAV;pt70pbDvs7m|MoxxFuhh+=4sGql=r9RnR z9o?OJMyZ)3qKYwLyegDKJ`+q8A(%mULQhkO2u@K(J=Ok3L3BGq`#ofv6c*ZzR(v?! zYkOz5&N5WI9->QG6T|Lp5JEIhB(D0EYX{zpxc_vzZz6~>cpQx??0)UFUF}yPR@}a! z>>GxQ{RW+e>wGeRcwP(Sw;x)H+>M#~NQ2vQbDNrC*OeHU*v+{-4X~p2bxxF$F~dsZ z_&#;iVB3NeEj|5c1v&D?U1Mfpa6dwD$ej^&-Q>;S=e3A#U)f`MsO_h|s#`8TKEY!QL z2ze<=hCx5Y{Xi0(B#Apq%QV661SGzC7J{bWhK zhyFNTf&sSR0Uwsu(4TpOSrv_?p%rX?pOR#=fAq`#({ff0CXa!eP4Oppe8o)Y(x7A1 zXttFL7R4l6CUbNfvsmLW3eKp)LR>ckTT&3inm8UEi?$>MB=bQg4LF7 z6uIJd{Wx0dcNBkVSG@kyZDSCcjc{F*dcfwi^UDehlno!#od5!P#D8*7yWYTajn}R( zr;`ATpJ14F?b^OBUdnb}X%=4|Zd7Md`N4Lr00+lyj43WOW4A0gVn9Xn%*~!~!;mS1 z;r27ZRo4sh*y_CUW#Fj!Ma#QD+uyivx%ixp2VmycQBh9cxe~_UE=x*EDiGs;MRcN> zNm2(h_1=2u;mG2IGAZsTRDqBPpCE(26Z5|1a=Db}>Vskj`>bzY4imPjBm$&CvB{FFp6Ie#KEyI- z+0Q8dRzXFHNSqMOHl?hOVGX!VDj+Q2{%|ic=^8L=B&cy16;CfL7_! zypFOQJ0}(D1+l;r1!G)Wdd$mlD`gKGl3RGF%#5Hc?7#=|p2PE*BRP+So(o9n>OOb? zZg4#LmtZ};EV}iT*hD2_`DS!MtPt77OkR|{3Sq<(EPfO_zL^1y^$a=N6j>Y=7mUNG zqJEF{(($9w9!%U+#QjBv(qhWyI7Jm)GIbP!LfxTacaSxBGkpIA3SW^z{<%SG(%rPhR8di!%ADw)kBD}RrxAmFV->^cx`6vqzZrkVD~bQiiIkD4AnF%s?;1X%dY|-g zFoyP6-#}eUV(KAOP&B5#{UL2F_+22Cbv}JDgO|Z+TiO~y&!!EhX|!DVOFeVPFy)&O z%ACzQ(Y@DGfjr8};#^nN3cSQqj|4q-S>q};EFs1V5Bf^gVx5B~{8?d<8lyL4$ok<5 zQ8765>>>}Is6llz>1EVA(~ zZzJ$otQP08+1$S?4K!`6&#Fv1PsujM&6pZl+TK11Y}7e@<$WAXaX(sg) zf-iSSUBW44xG8@NJ25#Yf5DOd?-vPnJXw-ohAj-@zsXNVX)&JB*BJ*P+~(D?T9pKIT-Wn=^GJAFb-9+FaGwZ=@&Ex#9{8S@kKZNoQy zEK^IG$#Z7AF%0RXdG|{#HHv#jc+Y(^>cAtG$G?s?M43MpvZPVX{(}4Aeh!%-qQ|%h z1<7MRs&{Ng=6mSRNJLifh>_h^ZW(BwGK(&W~g)MHfr^xaho zJoaD{h7q;TYLgvGwU?Gw$|f`8m(0GJXD*#L-xyy^Bjr}H2~%ug=<8`BBQPAYNT#Kh zt3ZxIaa0`Fm9p&Xs8EA(DvCriF|pk$0#&8<%F+!l9w*}&2G|SHxij1}D4xvtJHQuG zuAGByFH=XH#?4~%y*NTV%>K4^?gcZol{jVk8n?cgkq9+WK{K}vMAv!;Xa4a#kGigu zoCsAD&?7Ql?~$K`#v|I)(HGhh#RLBUwZ~uvS~H_kbJfC^gm=8Bf$y{IPBk2X({^mzuk>u-0 zl5$^~c_p`2Q56p9mC00{#bX*;7fjMDw$=P7W%I zB{%vGI3mGl?2>zWPFL>*5_XZ!(gwOtV#A^7WZ_oo&+g2vZZ{p8oedNfau{5i zg^+LSyQJtRiOAG07ZNlRO4jNpoA&*u2pPg4YID!oxx`3_Ez>#)NuQVDE7MP<*1@2& zjdh-xw=$smHeAX}K3V8ZFfFL+*ty@FF-K=(V>kr5f|v1yxA+J@GSicHF?`}xD^9Ct zelkJnOX}NIJ&~;SMu1&Z^gj1t%SEj%fTq6(KVAKcK{H#oKuoBSId>R2yHrr=w@Wa8s_)xI0y*Mh%?}$tETy>}G|TnWl$3 zt586AKEN@uF||p$Eu>o?T<78OTp4B|Ij7N=ODh?9_uf6;Y!nt}JUZQ5N(0raO}~n! zx+XQ&ezfG%b%wGZh?#+^wSc7)1p*|8{di6J+E|YDC3^aG$R5kg#LvVoZSE^%{DibC zw^??+`Q*2sjh%Ma3?VfjXR+^c?eE{FXbV-43S?yP`c2q(z9 z{QM=*53>juHvs}yXZrPdX{jlkU%Lakk7QuI!O6`4xeM6|Mp95Hefa|CV}--GPaCtR zAF%6Ytr67+O9iL@5*k6FH7KH?b^93(gl2y5KIE!==0}1AE$kjbw~*%bJKVOY+H$I? z1A3pe&HbZ*Q$VpD8utGb6xG1GvJZtfC@+hgNuT~7aTRmzkmNs z>+KaX{+^}e1fK2&(i^&Mz>g6I0j!=^Sa^@P#9>@&lww&SJ~kGf>I2O5?qNqqd#=W5 zm8)j1xY4O6EDA>^pT5)-InI6+Q{s3FeEEQY6Nva?FiQg^BPoBK6I8G=n?HnQe0Mmp z$(z8?Q_Ak8Lum-K=n52T;wE1%hMGXHam-gamh|@RA@J}!%R}q1b|-2*wb-ck{=9WG z0yOmnf5YD3L&tJnHU1BMeSMV7Qd^+XCTM~R5opBCYS(#8p2Fw+{YRaUzGD(Fk>R^m z&CSQRI+tKn2U-gjpTE)f3x@Xm;;Br5b%q+od#!rDOSX0%5RJvauEB?a!#$f#Jk#}aep zWKX8WRpjRW>|B8v@Wg7*_IQaO;sVP}*J{|>y@CWb!UqBR%M=208W+^vt6(ItqEuD9B8@Pj$ zh33Y~%0|S;{ociFB{Y&9Og&qC zyBhZ-;gQRZq!mw|L(O6iL^)XWND;z()>|Hdtsv94v6wvMvM0Mj)!%?pqzs&rKk=a_E^e2nZ zC?P>XwD70uB7GMO`B2>49Nl>erXz<{&mjZpVG8Ll*%t!MvO;tk9!kUsh0v zl_xSz80&fzSpPnq&9OOjdkEq>db8EU9VZNQ^m-P``Ywyzv_ITohR4k)<@SE2Drb7K z)^Rd~ek)qx>fUS62~i@$9*Nxvv9CuL!#?<8@AkEhdv=p{H%fS}9YKVVq4QU|WJdWB z+_|S2*N4grp3WiKI(qv04-R^ig)i|P)YKJ{1Yz&q-6k%$AIkFXKc+yIqdH{yMyc^< z{Oo(cDrejd3npcjb~{?x)cVu?78cJCDl^AGMB=;vgpd{F=l3q>CdAzrFi&=VCRqA0 zU+6z9_N=1~YNpsBG#;&(k-(A3hbm;ic2ZU*(kEg#6xYMh=W}sQB64n1l{&oF^l}c* z3V=ct*1wV-hVmFVIu}_~X{Jc6*KKwk?Qf=e|M_*rv1YN^n)Sb&koV!f2*O|%Z!Oen zKe`s^d^+mbIPPx9eh-W7gt)8FXY5_oM(3!gh5DUc@Je9kR#jC6FE|e`?@G_Rwlm|8 z=~ohzO+pHJ6I0vSW_P;rDv+2xq~ItZ@O92hJ8mYj`*FIl_y`+8)cGA&6}18aM4WyD5ip*McD`iqdCyO~(7*?3t2%V93bFp;s6(C-&ih4L5(8m35}QNR@ee zg(wKlX?h{yhshrL7yCriFqoX~H$@i{cc#mX1%`ns8EzqX0%*c{*q4Q~Ip_bxqVF0E zt%AiDl;Xiufc`4BzzGA97#K9c6NEZ0KGtuihZ~Dw6_-0a`UKl#>QE&=-UTihx=Pt= zfB?A|R(h^az^?rp@-r*#$1N4D7u?n`=r(sOHU>Oy)qiT&v3)k4D{uO$U5l709>yyX zPdoj0C9UMzLn>;t_9FRZODij_WQh{kli{FWf_ojq1=)>8exUNeYm%Jb8mo5YrY?7! zEV`?CzH=WiIl7%NR!z_%{?!u&S8vJVp5I3GU2)i0U0QJ)w-Jbl>W8xv5?3Ef-{>es zn#z7Wf8JhN>ViBTo+{f}mFCqilaQ8{78kDs(Mr)W5&n}eU%tTp(e^6jG+BcEZaWx7 zKN!{f?ERfarfMjxuFiNZW+wo2;I>@RdEr8MUS3{bZs*?C45L!WdDu|W5=FiX_$ffS zI#~43ca>cHTY9bga>dz6Vredc{kwp96`QYHJOT2yFp7G1S`x?cnmJHt*!C}oAW#7e zp9QX&e~;PPa?^NxBioH>RHTy+T-dNh5;fm1&>g#J_g|Z4N{3o|{+DTO2|@(!Us~r6 zC^q4Ug9UT#+O?bW$wt3cOLtc$vbp_IYVAkk;^Owb&%yDfUuWJEgm?VulN89>hE$67 zfAn3{2!&mm)QLBkD&AyncJ}5*%UzB;Waonb`iJuEBRmMezYr)9xj?edEb{p0Vy-7i z7?a}8R!f`hVE%=4I7M5>ygi3+Ol}om#i5|z$pUCqnE@u z6;gYbm$44xHF8IPIbi1u{Od>=S$~*H&7r)r+Ls&P<6~rG1U8Y@msfU|3W~vGxd-~5 z?W*k2{p>s2&3b3m=fLqtt%1v{1NfLF!MJV7YB>Rna&2)49q-yhp3r zC!$~R_;p-LN=yv!)@fN;ibHhFBc2R`rsh6A{#+K&(P*vr=Xu!JD@HgCqFh3WwIP!2 z5}#1F-02aB+WJIUT`zO%3W^HPPHB1WY?>Jp{~BZaB?;%@j5Jzb80Uq^Qb z-BxisiEYQ}`*`|lY@gPYRImH1YgQ6=zV1D(0)nD+MZSvcaoEU<`y@rn4{EQpo$kH? zYuZMu9jbSPy8Az^(-%mNHOaJu!%v}$&|03Q>D0(tKP9;soufUMoDd&RqKgF4WN~IZ z855wjHuCC3lUi6mq?S<((_F_Hm=jM}0SrGYA7jI3q#(5{!w(mHzwmZ+4 z?D9*Jmmce5ueZLr>hCzVSN5rEDH0bUjBg&AVV1b>*Dx`ky1aWxOO5_oMS(vXvPXcZ zB#Y`4NoZ(iH@Y#v1SQ%G@E=C1DSba&|~c#=ZGme`zZDZtO%7>fUzE`>fc=>xFaY zso!`Wa0SZ~g??7CMp;_CQ9plg=10HCO0qLyt3+RFQ$$9uAnkuGKlIQc-?BKfn?|E- zpW1?p3s;udzW(#}Z;3o-Mf1>$j9(VHDJXpmS2y>!eq2a5G}XZ@O5G3=(RiH^+2gH9 zft#x7b++p$-5R^%EA6rJwH$B3Q;y%#djl@>Z!5Iq+}zs)yt)lCBNR6j7fE8L0G zQdCc~ye0Df9NrU!er{J4FNHRewi>$86X)h1uUXq({%|5Y+N#x$x6pgAHEOGa<86FN zc$;)W=R$9IlL&d=&6PTqw_b(f{EC^E*c6Xu=oDq5?~4w)A&9w8V!;f(V(=XCuJQBX z#KpXSxP$__p!Aw5mJe2}&L2j8pOaU%3!kI>+w#MkF)=6ODvAY-(>Fsq>`_S$gT{4H>U?{6Aqqd|~h`zHcHmQyM-MP}h1=2!Rj6=y3BNW^Hg6BuTC zDAX~ky@4^i>G(*$bYI%*nWg1Jvq!HCubdwj6_ngXVJHD5= zBVW@D{9=zhH{?DL{j*3?hy*zkI)c~iW}_>4z1Sc(Q%T_qBPrV3LksA%x)%pE56bS` zeT`9NXUYza+8OiyWE8OfxUc;A|K$SQ_CC)b%fykv>wYa{v>!1(aT^KEG*=)5XNqKTFh_rfI0h{yCGs4!Dm!D zRs8PcU_f^hFf0U#y!Z559OfDq?FDqUEZs$g1a0CBp6pR=`a9gqFERSAMav5kk>ZhF zkNApOq_~_`_L>CKugPRC*No)J#A~!3{#8;^0+3CE8VucuO5Sw3HU`4TTe{>ma}|Qf-@&)1@l;idt?UYTsu$9! zz8kY;H*1hK^;_O2=VH0lRZ2w0pj<_r0F4 z8>&XHj<$|?YQi{6GSrQ+Zpk-hB@TlVNPp2Ju{$oZa<#1@w{BAwDKyw#<^D7em8qd9 z&5=TtV!Krm+qq~3bD~N&sS5kH_^~T&b%w9782X2!VUW!Cc(dl*X`Lt$ zyHqP$(9wbETOJ^N5Ks4q^$6giOOO!nyAE-x={fncOaK8}DtyfU*TxFGZ{;h&9OlUo zCsI;Uy!5)lqoxxA{fV+Ex=WWXhw6Yh?%uuG-9yo^uGD&8p6l1Q_I_{fCy6^2z3LQb zANd4V@ccPOvCJMW3nw^M>*=VYQ}Tcuf+W{REBX2PAN4(2>>;Oyh8Pj{M}f9qCCtw(%(!bK{xWW<20+Js?D z3P2D*(;ylgPu@z$z@W}|w+H}MM>86d5WscA9|Hmm8G1ORq6qq_{70_@i;H&UFjW3zxO(dNGHwDU#hqtE)Q;J;Kmi zKvx7GrB4!y-|d>^qK@z1C1)aTzzP_s1{roN9HKqolLbf6=CApyG(D7W#kLlEWF(C( zDjj9qTF5=e+#lNLcb0A4sh;0DHXk%ly2rxnISxhC>7Qk_^9F8rhHg|>OL|T?`&v6+ zp#Gq@IW9V6xI6OpbuqJxy@$u()aM~439l$ze88tE{%1rD2P3w+M$Y$ZE9_5>dtX3a z+GU^P?G(**H|TBb$EsA(+pFzykP$Lj<;+2S0S)1G_$U z@a@*}*)RO$qN=zF0h+3ziwJ&b{%1yhWSGSi5ZOYG#=D*X;q$DI+ScT`qqJd1@+)%>0Wa8g+ z{;k+Ld{;}R+-dp??1iaWgPrFz@^D$TzCxm}sXx6HfX0jqjiiOoR1>g%h} zP{2@((TY`A!juqB3o+P_x{mC=$0#X^xGx>@J+!Pp>Mel0yTJ8&PvM6mzSAM9k@nrE zTbs!%D}fqGd*kshuTUH$^Gk;%InztDfzI~;k!=~@g6KBdo{q5DU z>Q6Q9-;b9&n^k%awy)R@X*5p35E{NWyI+6smzGLTxGXq|UL}CCvf@D0Hm#dRBf3KQyoKw*2i1iLI%EX8N!sna>1nP$r4XS5&mwhbFy`5WB#3~hBk z{3`b!n0fV5;?sOJYp20Sv-MXMwCuT9Ol@7^-*z7U#qrvqm0zy&-EU7f+JuAMCVURJ zK`7L?|L0+WuKzCJ%A$@FEAT+MGl4$h78G=bgB2LQz^&+wMQeBdD^B0%(*nd`pg{Zw z{gdO2^WoQMMcrNjx*N#eq$RU`4`f)kZsAd{0_$_@8Ifb%MreckW~Vsi6|o4Mk^rd}L1*`qLlbio83!1h-;yXPV z5$r00K3k8w=`sonS5{K%)870o+nwcjCFACi=Bg6j`z)-+qif%01K2zr} zkENBl*qhw}KmU5q?zP)REQNt*8&OwEEzz^-Ii7~qeo3q43VZMU{Z(lXuig67ma@dX z-yK>>qV}8PHmj-Z2V09WmOttzR^jH=LL&&9tml|)&Th3oDarFK_qGpJ|M&?Y#&k_a z(!TW&@Fb9|$Wf0=nC}HEb1zvQO&y2(->9m3-^+zku8t(8$zv3r=;*R3KMrH98-hLG zCw2T7>~~v5H&6Cv07G{(^aOwdbRK}Ra%O&c`gE{U_>tF+kcCr)jLg+B#a{^W>yXf z2J*zCaY+86wMNYA*PH(~!|#Dj1(HcK_y_3Y)N1f(_?LIun(=W~{%kr=FK#Zm1 zkbY3Nb(Dg$RpL*P^u>#>ebPofSH>yf8maR@Nby5{rjG}XS z`q>GF#^Bo1`IwX?i?p9B{kZ3J+^PZb9M-9cd0B&ow^f~Wpj4ahf}f@!MHT>s0b~YJ zSc8BFkY`JG*N4Bt4gdK_l3kFRn&aTv#gFX~Gl7v8k5%+_^R&>2{CZBEtCCj9q67ui znFgz>YS=x*`f{=$V03R#+1_uFrukh+dT-BX>wD6Re3||@Sn9Sq;tumcAmz{-aPw4< z?zOZK>f-YAF}Rpd3A*=G*gEE4WA^<5hTN$Tm1ru+;@d~6P_La?i6kohWFOtqVMiE3 zF9dydQXz?c^X6JMEjE8aCpTAy2-PegBEvT`=A2Bti#(O({+(=n_gW_v79!wC!l;5= zyAtt&u*7UXnQo5>NX&mWrb8aTi-BSd&1F{SJaebd%5M+C6N?P0UHacQK6r3nUzSIX zpB3Rvd-AwS;Tjjg1zFTINgM8Qt`0^(@{@!aEQr^72-RP%*aTgCWG4C@UWXN$3*uK0 zdEp^?disa)*~eirhLtf`$~zNbgGFpu)$P}8ubh*EC3Nt1B5&gb;S7cbS~{p?l+PiG ztqgY+;N*a<)$lcU<2fYaQ{C;bSU0>TcY`j*=pPV}0xBo7SF-v#_rH>x!M_5Y&O1%k zzwELY8oda?Q!9Xf|N1nal{2^&^Y-v)lb`9P(>H;Lr%&tP<(AI9n>%|MeL$EfNPz_L zGF7O(z#u_*@wAs#$I8iZ+v}63pSooq)?2>(>|exlmL@ZjR}Qvo=J5J-+81SrDmyK@ zuat^W>18!IEsY)x<$lIRxcV2S42Tr~I)4f&lut9#Ef~IXDHRdBG&?aVqc0$$cd@<@ zi3ZoUHc~yhu0;~|4B)#!n3gi0rTY5cKN4(zVADCcy0%is_;UsMu&jNT`aMA;{lb;Q zF5&cWK=-Xh#p9mRY;6h`rD#fvDAPEL>~?nsGoVv|1933~vbF(WLGR=3??@1ij?Th; zIj6FtD*z~Fc&Yhbuu8ctKRj5KSRg8K*_5@C`?x>x|b-wfVGf{^zuP^T?1l#SDSA9nWcJ-zHygqR6LZUc?2$wv4il5d!Qtf((i{_9J2VS&6=bZzy zz*O&whyBj#Xo`XG{z+{cUX&Z;ET7Y9+5CHSLO;G+xdC0!$>*@OM^#R1VST5L2Vs3g zlnsAI9f!!Sh!x(=-T4|4@^xS7)XPtS4P8=LIOfi@T0n+G&Ma)3Lpx!i6e8BdmTfRZ z9-?rNXe=;Gf)^CIO8D#+yP~PW7Z9n)daMk05K$C9tSmz9e&=RU2-23|%_2k;82|@a zOF3UuzXnm255d(SPvW)lHG#Lo2VPXj3hlj^dl)A0F zalaO*tfVa~zBoYm$aI*GGVEE5oBHjg!PS-dH1GL;YD7n?pAQY^BH$)?o^Gb~X>~KY z4vlxqN?T8id54C>!uK{mx(&lyPU0UrK!O)hx%Ie5$6zO@0_uRZ#baZl@O^=152nJd zYamSm5ysbulL&Yn!riY=&7<8#Yz7O@EOmc6-!5lc!mJTErXB(7gu-ZQI>4)P))xLN zw;#U>e4NSU6jxWN`PqB-&s`C>cDdCUprL7-9Am&yYj`%|O287sbw%v)@cL6yyl=)U z`9S~A#XnT<+uHZLaN)wVlLX8;nf*o$PG4#TP>k0sWWK=m^~T23`=t28TItvNpr-Jq z>9VMG@<5&$wlfLye9&IM@`s%gAtdpM%6`!KWXT8-V}cr+5U*@A{N6;#!nJ9jrXAcy?ETjxsA2jTWW;xvs?k(%PRHLyT9?9fi{yIXNF6kTZ*qWthD^ zWc7OQedkm9L)9M|8Xx*H{Bt2U^193NfZDpVCFSCC%g(ouXD|Ihbw)FH{=fJ}wS+D! zx5dj8qwdSuuSz8J9p`y9o0}l_6Gi08DXa+vl zir2wnxy{hkOfVBdP{LLYBO@7O>&p^NA3&*3yyE|(Wqx+Qe@=xbxo*MSM}N?EQTy8L z?tXN}#jD$0>I6X{&9_=5sc*M_V4&beL6iPF+4t%#M2M+EqmP?Q@4*V@ z*00D;LwtloFr%Hk_C1-roO5#-62!?q^hdek9!yH;lS+<`@)(8-+vg3FueufaL*$4o z{A?`+08p+2GsEid&l9aFP>Fc4$TycRj_B`xD)STG5AwCpQ)J9REdn0a}tZrnI}z2 z-|$WGwQLu|yDiskfwfdnn z|Cn*}-dV6cO!F( z^zId3nptI<-ulVMRIRErM2(UtO%8J{4jo=r?iY=`ix)^mZLOYgocM9%)X+wbKI`!D zIf=-3W8bqY!Xv^D#FJI_XZHH070>O7_gftWyxDRbHhiwU{kqTuo z+ElyP6mG^7tJTd%#7-hl8JFbA37^N}D=M0QQ;9}>eS`XU!`8*puyV#ePDayO1Jf1I z{RR>I@qKncW%5fJcODm*X_7uo_%098hN@8AzR(mcjDHUaBEfsb{dt19Gn^6^_IAVR zcRG%kTAPx%<)()|N=XrkC~1DgU4aeTWPhq6Mcicez5W$87hw1{65ZF9W{`Ad8qzYb8tkls@R>iWl z={NgdJ!~BZ@tL{9Xhq zXk{={j6hWI*pK-$uTtYj;Wr~#GU{L~QKdmR7VowQS&_;$Y=odZDlh0b;P`wtt&fmd zgkY=TkV#u=W`OR|k6avKSGb=7jY69U7F$KeN5G3*HTcTF!4;)P#+O}Xah3fbOA#ew zz$#2HLrxQIodm5Z!1bSaNdv4FMaekC+QTWl>={}&64r1FHDailvEh^E9l*kj9-WF_ zacT9sWzsX@e@OjPz)#W5)L$M?1-Wo73eCs=NOT4Moc~D0r`XCj)#|Lf+en9UHbWJVM>a(>aLCJ31pS!8 zL;A`h9_xgBX0#fkd(KXC6q!Ls&9QOJUU^QKNyGK5>Y!t<<*y~ z1sSo+Z$+$8+47w1Ew=oP|MAy<2K8xc6c3I3Qp)#Y>crbctU~TfwUIMM{@bFVpBYgo zCjXZ(=~{tUW*0{G6r3eLfs^TVOicc{JN=FIO1D;?OYLCFUl^&2$sBlX=f8iy2QrzV z;zz~Je%xGKDei-MP?2pM9veLt#jWv~$;Z=0VKf3ZJAu)u(Re!unngP(0ux;9K1b@O z+T<4c{0M-aVX{zfe_ec1U9Bjb1V<}$DZGbBd8Lvvms04T92=~?U^n>K>B!GPRVE zjIP}C$%0d3jb7isfXD=$?I+tYb-{yyscq-{FkdBwnudn|{3@mA+VI@-DC;CTb67BX8#c=ZYBI~aj3r@qE+ z4qVGM+L0>fW*FRC>NqJoss|JW}3@w5s0E01ka-Sx>vR^;jD^r8e^1$6e{!nJHpG*`BhA&mk_Mgc2D zm=f&)-TK4jJFZOJv?PnR3i%&7Vtd&yhPx`Z${l(g_?~*}V(vfC7u)|(3FCL$KTNLA z5}~Fbl;CbHl#B2}rbAxn)b7-xCC?)k#WjLbW^#1nW^kJ^-E=e^W^bKm4a2lTRlIyN)UuU5Wv~k#!Ww<< zhRin^ku3*3dT9@GN2gDBuq60*6^rb-^#bI7hh{wLdB~8`K&6nI6WbrANkS{+z^1&# zXYf(w`nMl;`+!FRWkH9;($se?4lE}dA+3eKSWoN!_P~R#F?n}@&>$7-!(Sw8k0VD9 zcjX=tgB&drR)q^dmmn;Eh0PKc*HA;pMMX)twD8?_V8ADYC=W&$Ci?oS%xTNTi*BN3 zxuVL%_%zr94K)m!PHo-sHd|12kx#sCwM9O@s*E@WtVO#Rb#m zOk1hccdu^$>*ywEYJIufB^TJV>{z$m-`Gm<5kN9@wL>7=2VZXNb9QbbWJ*bQ;E@LD z+lhw7R|~3zCqv5$6Ijha(vE+=_jeADpUBI5%C-Ky$cPL5a$LV5Tq`>sM%D~K$RQY~ zNk~Yj8S|zicoCEG@K zegEzad>ti|#9!C|1Y1?2EfTZ2=t${#PnHVK0e2d2;rz^Tv|@YIQCBKb*sN6 zak%2nMB&`bOq5_r=uB0FYa}l_J3@3Cu$hy%*)aUk;@JdvYv9&ZI8Js+J_6q>sNmZe zlxGp9Z`$~A_}R0E>sm1W;|UDeJ%q`gNicAafe1yywMEkJY;T^`MxRX^6w_`&_5@{; zcE;|$Q>HXTe>nJ^3}<&NO|Ujt*jGkY3pWq94Xgh>9IbF~1EayCkH()t_X=FHBO{S= zVSc`TxsSV&(mAvDw4fibpQuvhFJ&;R1!}U!y}*9dM*^_$ft6pMfQVMEe~HQj5hQFz za`3e3-S+?3k49%q^t&n|su;F(S_Jv^i&-d1jEA599D>~9EO^;Z925~3AMY?(ks=H` zL`AjhAJBjf36RN*E^Ai7T$2z|`Xc@E_P1tRR@ZrXlVQ4t_@v)VP0=OGapBt;`EwnO zK+G*0f4ojb9IU{OL}8sB;1@W8&l3zle7x6=%pL&2_{3fJg^cYY1d_ucROh}N4`SU* zv`hdD&Ml0#9Z#N5^WPr$QczSEEFVyA+_RV>l{}awh}3QMl0qC6Ncxz$9*_CYVDH)v z6_0wI)P>aUt}KGe^bEo*Hj+^s11|_j`p3{iv6HC@^#d@Toe+me~^uhXv=H0*A7tWWp6Hq2So`vkUOi$yHt8gBc{ z%*+5tIRVQ%MOv6!!|$YkOARP?O*EL8mp}*rH4G~qUEJ%&saO51Em{J-c5GSy{p0 z7Ac21gOr|c&*v-V)zIdc>%}#Yrh-WzO~To9tZIW>E0s!t==^!m#PXfF2+q<7!kVdB zSsURofG`^#SmQ?P6_B9{ka2KxTdfS206axXK>-M~bz;XwT3X&}L_V#17e;==^ZqRQ zXUAvliXX7dGt3kf-mq314vkJvj$yn?Prk)6ybj&d#>DdI=zC@ne`c8^Kb}s_ygGiT z`q~oMbQtSSzB?fuOZEI()zoFPU@EQ}f*|{c6k&HR+@j5j$sb(xX#4s#ZxTz=%K3if zGjW6sA}>l5lzl_j%d0AB`E1HAY!Ze=SoW-(67DpgrHu1o32|{UB7S>!wO*dN`WVa# z=!?8Pj;bIC!+mwIvtrdMjXB}X8vz)+vN_+al_Y`|7QP$Z7rZe8tW=@(2#Aw~g+1LD z`mKLGk9)SxcysNSpb9abYQKpX35Kyx9#akHN9n)PQHRm&g@n&VV+k;eZ((l5>5MnOraz#B+pt=NP(pt;+D?tM{~P|G ztedtf>Ey)E&dI-SYWXJ>Zg%R;Z36aL7&Hjg){sNWeD|q2P<8N)Nl3Ri&-$b2VQx{Z z?nC->ni|(`KingZj_7G=k*KV_m+5}AM|n3_0~{Zl@ewa40~@*WJeo_oHLvry${qI$ zYsrAuKJQOLM+1wnrMiyu$$OnwZHjGBVmK@hMqD}A3fTEoV%7aeiiu)WEP?+~Qf%x; zm$`g^7KZ@zl|9*eglOw8`5Y|f8r~RsdhSu7-sY-?_+*u>r{%|H>J|}#Z&w`aO4!Xh z!d&Oq#u_&3Jtt3pcbwySzbWf(}31bdLQx`4(+aV`8ofat#x3ngCoY>cF6jkuSqW_yH{etENfuk*l)jI z|K=7KZAZ%;8=<=Bsy2~$WzKpqKV0HT$pYHIKU``FI}IB|gt0+1IuE|hKDqcyE;)!N zr#3AVj}3*&za6#%3+4h+VK*5Ub+6W=Q=eHnYj%DfVmTq*e49l;1qpywSBz;TOv!4~bG14YuKwzgK!g`WYse>9Qd>i?nXyyL0<-~az2 zGSjg~c4W(*?~LPE$H-oxAsI!svI(8a?j$pN7s@6PMcFg5Lbj|#GJluP_x9_r_pMv+ zvtF;)^ZC54>+!fh>>OI>+CZ&s)1<_PfD`jusm;Msp+!coon=1k&++j^Md_>G8g-lL zkLur>s|w`N=^C416C`Hcm^#gcMTEQV59ZH9R+6HR{kM`IVym0|zkYF`TU&BU9w8BiCl!XS`<3swPM+;FfjId3i;jd*(dxiHWfV*JmC~l5|U%3;`+QtM!ODG73^sr{tW0q3!wo9E_j+y6qb}Yj%w0PE*iGM zQwYw7y6Zp0?J@#qIdUSWWPy1L2$|e`pNBIM0%T;`+S+74+x31;)cyQ*Uio&^&YJ(= z*3b4UuYONVNCG3Nb)5sMI(7tR8*Z?q!YN_**W}xv)_ph-Iyi8^x1!}>e8vyEBniS^ zQ{dexyk3=nDMzDu zHWof`N#Ex&GHtThqn{jau2nycjpaD{W4!)*fWtF}aQg7-0#@j2N5woie9Pxr zH_wnU@{FH91V6CwpRn+2`)3Snkzk^EuMO|Qje?L@V#RgMCYE)Q$kDJo32T@2s%i8Ua(z8E%7ZwPc<8w6c zUg8}pyLL5%N9mbD`tU_=Ezx1s&hBn$kp|Fa(d0RO50R3Q$p@n;-_>-Y5T!uZwC(=1 zfq{2$yoVpZ;`6C(Z3)n?khcDC#07EN=<~0rh^1nd$hGe@yBf_h*{EsW7G(LoG)R%M zz&=G)H6|_1PFq`=%n|(3#Keq?frn3e`Q%utqu0i(3=?qpaMZ$1E!WV)g)ZioCAU96 zrMJDzc!S_4>};**Rzzj6670VO$YNqXGfWK?{N_jyu-B(0B_++xokf#+FVV0uYYRxS zw#DZ>20f&t@10jl-Yu(Js5=H|VYZ?QlK+<@bprpB}AS%5pX3Js+nSlIIHbFQ)^&W2O<^NY~j+a4i!B& z%3!G%&AovjnC!V~n-ZTlcsxEcF7BI)QN8aPmcUxn+|_j*Qi7-urHY9@X>1kPs!I>= z&}YMa+zF}nZgBR32qySkF|7YKliu2a^%su%la=nzSB7&g+rAH>d0A$0lSu&~;f5Kg zX~i7?Ke0S}Rzl6d5QcPIVhlmDR0NQ%WFPp%1^TZLL`F6vb@LF2{ZP1 zapfWb(m88rXedof(>Oss5VhG?-dDbvnVI=chmo9u;-TTcYa8!Z1%%E~kO^MCywR8S zXn8yBioeWd<=~#QSnwPzdp2|$8#fRU6LZLwD+BaKoGUa3W#mjpL;D>2^jRGw6*?(E zhwi2AL;I~+_47)b&4GU>8Ch9dh#Ao)ukJS~mOcx~ql@Z??@tr*`56Nv9UWD}eJ147 z5DpCaKVho~Oms|5pkZTwGJP@AxLCU=Dv<}}G_Hhv&7938LLuHZvVlsSi;qx<9<#bO zmW(88HFElWZDA5kv3UO7l-@b)b0Q>N(f4@n=Rd{jjW1U`7ml0Gy|DP;_1zq#d79y% zuF;xvfBR&6A@Dtvf~Q@PRt`VM{YvIX8+AVg`_-502|`d$IUj|!_}+0n0$L^{BNMCG z79MyP9sS*EnV#EfBl*jYUoxX?Cl9o7CT*RC@Fg^ ziHgW=P9pQi;o%Z5JLh-y!K}tBfovw{59EtQ8)D(Kt?1a?>=CQOElv4&aI++bK!sEr z_pYJ2BQf?AA3;rf{#Pz#3<9nt*ouB#gixzQQKNNc6QM`$8WD6 zg3b#x0`V_jj=;np4lR!#KMp)OT7VnTd!zpx0!LT_x4!ZFjg}=oBI7d57pV&Fz#XV% z!l#+G#6pl69wyPk&4QfCzg9g$*IfAKZVYq)g17$7X7s#@*1_FkG1Z8n-{jD_t4o4$ z{jT4QAWyy!FQPeBLmzB3s=a!+keofsoo-k#_?4-j$@|5Nou&T3DLC3+aTOpQOe&Rh zFu>uhNgKk7xRJd8+nVuK5uNkr{N47{CjED=zcfJ{hu`tmtN|p{yo7;;jg6j~+HyhATtSBGUdN$_ z5UixZ+Qr>85i4BTM4aJ*kzF_*x-$dPs+{5d zn_rglMN%$bf7`O=K7xyRio=z=jIZq)6hnX58^{k(F_V_D+g_32=Ko@7W=4(xra=y* zO>ia76)Qr3c2E4DKYym+;w%|vi1{6ttA(VFpdAu74{ zsY)4|--QW7dL?wM?FrXJ(~UT4PmaZ}DtrD}ijC*Gsm$I{t*b-=miW8D{!0cGl@5e-#jo2mSXN&iWuAIxTH@ZTr0mjh_vX!y$Vd2&Hhc3I%9?ho zXT(tRiy6Tm9(uNk)KJR#{CeQ-zV#-D64U}c#|h8nB0TPeT!_sSK&uFx~z zy;nxY-tROlt;AQ@X5=l`cbcwvyg+|$fu@O$jtzg7%Q&8dBVaS*BtS-J^~ODG-Jbp& z_L^(hO~3bshQoaNDRK~$axgXE(AONwr@z47r6A?~I~N|4Yl-td4Z~Il?!~!R0Pski zm^ejsoOTs(6JlWvxjs}B6dB6FK?hU<$F%y-Uekbq@5r6!t|i=j=Q0Dh%wmq1_lyl6K)|g3mGS@0UKum56;)F?v6iwCVFan{Wa>a z|Cht9H;!w0Rc69xwfP`&lF?S=*SKj3Ko{ByG)^k~V{L0DgI00z=Q;kv&ksfCXvT=; zTPEr;cPph`32F&tOEaRG^K#=-^j`Pq3<*_148^d|o{D~MZwF)#0ZNpPLCSTa z5aIxwnd=R_xZav|gQk!shz#wmG08Di88#U7xIf z^`Sc4 z;ld$;1HS9WOL{32&=5;$%Z05R*vv+rYy-0kS(d2J_ zC%NPgY?&+HEBG!Nh)CpbbO-X>x^rit=s6!e{B_$gip8cBycp<7OY%qw+l~7SE(YG7 z`||CL)n|;R@A8m5x5T^LN-593>u@fECf`~SpJqgOxKR%M7emQ`_FS!RA&)9XKvx^c9?^vpD9UyrEsrMEMQwFoZw$#3JNFs08F<6sZPvJZY#=_Dv?-4L_Gj zRk9hJF1F9RyPC(IlefTxlRG37eUUC)N}vK^BH-h+AG0r5!X6SlnWL$T(_-RnM)4aw z4JUUMFDKH{2E{xaOP7%p9`WpfACl6G|BcGR*kDK9lmvTIHysW`th(){~- zq%jF18W4_fqKdyWj7T576IbBMcQVE%<+~H4QP}*XN+(z{3YpV-a-ONi@S+K$j6?WR zy=n-jc@MrrftZ*a8)^{7PwasdS8x)Q3#U@|d9xXkk87fmW{?&lS@}gO2U0|~+XMTg zbXg@#&&iljpkF+tRYyg zh|QJyN7{7x=kVp^=@$pj_2`M($4P2wO%q2!DO?qaj>k*1gPwd347Yzmg9IwDH>oQ82e9X(Xd$PEYl81&%V41Q^$cd0J6@E2UY8AV#cP@lR%!UGNsS+z@N=z##P128r zm-6r?G#&g1CohH;osDV3xh|#Yz-bci!B&7bAhehnyv!>xFQZMS#>wKjloF?;!cBZL zN=q9l^4J}b>cG9jW6&z!OR;!Ttq@M`i@Ka*#S~m3qWoErr8-%{yF7OF)2!hJj~3j{ zlFg_IFiWEHoZN4~n{sa@vtyaF@DyY;1ox_LQe*uJC=15}5N#lolq4 zH&qaGuY@DKDn~vJhzglI4F;o9EIxnfOk}Ako@59i8cI5YAY?b|J!<sbOZ zl{Yc`1mHZrSm^c2kJtW!IKHSfU+8zAz%aF;>|xNeD4PX7Jk4ZZnbA*@*JV&#-uUGq zMf|yt`69AHW0ZNUBz7Xb^0%9UoGzPXv5)PAW|WafUNE~eOJgwsL0xknGeX2n-=jjx z!b?i?vF!M{N>ct%yH?1)cNqQ8vT&SGCq{jSpvD2=q$E(uN!ee=eW@%N_J0{{tX5*N zM;g~jz(=Y!`-fui!9R6VV!Qo$s*8jnr4`Ms;hZ;-W~4B`sEUP@AiDTIBW^EiihPf* zcmpeRmLZgo+vpa;bzDe2UF+P&U0kmcjpUivRtW}u5!4G_Ie+OR*dHo8<_(++Ee&Rv z=Qm#8lpDsq#s0i{=oj21u-F?5 z@Qz}_>`(7b@-}Un$jny-$^QLwJGOLn9*GPlVQ;>?a;J1(-~1?Vs^Oh)Q`P;EqxBQV zzM!ncySg8L*ywq?9QIJF2>Sj~@c(_+&OLhMLlw53P^*Xe!eh1lNWC*vB^0Xqi3DVk{S}6-;Zn{9)bP+yqmzANx5} zrEyvo5U9ZmKYZ4dIh&N%U;L<8k4O}Ue~_y`4prfa5~u%`>k;t%`n}NCpTtbbnvCOY zDPLbY0jD{A@#eEy29h>x?W^`_1=3@dT>iXVJT)3vJ}`KzxVJ3PDt2f%8Dto(g&?|} zM&15v&}t4o^2Q8#PriHo^pdF@=Bz$X=~dpZOvZ*WTIzBiRv#3Ro9l+$7*Teo^t6QUN9#@ZV?znhg2q4B0MxUA^IP=5v1!~gsU8B7)D!&O3089 z)DiZZ{Nd@o>jhyH|7eKwIBV&uqr(v{ns`IB3Qb3?$`c%(iz{Kf<#0PqM<6bTQ{`xD zR+aw^12=)_xi(Y?ZMo`7xDgp%oM`_3n{0+`e1d_I?Yd>1hs#fm=xa4jH?LLaOClz1 zXZge1C_j>AJ*{`a@LwfDRUH8wM>Y2&`Uuuromi*~{)@rD;_*_(gP z_e5%IZ%ho_u4~QGu@50qO*9qGTkwiZwpNht2nj>s9|_44FYm*X&mQOtgshDsSuVgkG?^*_3rT~ZW6&259o3U8*QjT08W3-~>5>o%>F z;iAP|m&>J3j;Kgwst}+|Q0TTo`vWhVin=u~qK6anl6OvxBV`6?FEv>aj=bqUZ{(cd zJ^EY~E|-pbHWUm-*_e(}H?l%B{jsBUYcfG|Z)m)cnT18%3vYfUC9Xxs9v~3H#ipU9 zH6^uBZv;#I-491Hi(d>y_@zVz(WI%NqcuX$mp?9&i`oZduu~gOR$|O{`#vRmd?e` zdr@l9QD1fIbD#6f50_ClPETKx+g?>T=O9x_!$h_HqCtlbwp%;jTofNY3WJtBZiV{h zOjhIqzo@`e`AwHQ3ufaB(7*?zlzRi!oi)2IQi^kB<*~)LT1@vO<6gWV&IsJKyg@4@ zq*gfk!3Z0J>ogA-hU)Uq^5sc|rI__ee>m!cSD6<4i-I>ipj`?SO(U?gjDE0ztT)D> zMjGly`+vR@13zDV^qn~A`!X~XV0bW`wKCt zuD>QrZQ85X6eb^Ri!AocbIooZ03XVMf02fl9X`%3yvesprwpY=_}|=&o0PyWjKK=cm z0!g5&9gd5=0__woHR`voCjz&-1Hn)04z8P?Hyj>Rz8n2jS5Ja?Kl9@Dx|B5{OwI?} z?H<6DuPe~6aqah8>N_xzdeEac=y9$3rRR^CUuR$%cD>H|#rV$!H2CMm>I_@kPmVuD zJY#&Xto$-_R)&_Co>nnS4=$s zS;Zx~@|!t#F6(8ydhYoLxC+P(OEWCCqxJk1=TcQ)#(=`q+SsK-QBd(ge-ba>#>;51ZxA(9<&}9-m-j) z2?fVK_{e-sa&^9CmAy(wEtT>)Uf|&0SslIrShG0)_0Ea9_C9Y;OimXAD-tBPYj?}Y z2t*0Ij1#k*ug9vKA4i5W(9N9*ndTN1)wfIGB}RZ|lXJ3}d?RoAMH&TC>0*5J5ZvR{ z0&8Ju`l&g+e+X4T-ga+XP(Xkn*o?sbikW(i>7KDWTXo;kd6(%OzuL_LDguOFkAqqu z@9WpEz%+Zqz<%qRYZ1xC!DOjWe}No9gUkVINxd2u*W_x!B=MFyk-Xc2NH{t38B#id zi@G_;l3QdHo9ue2;)Yf2gRStzSIYiM!G{&SJhJzmF5FU8~vP*sUpJ5OGW% zc$(Ri*thBSvIO#<-djD8^C0YUYnW8ZD6^8Ta@(U_AQuRg5S81za<8n5QmdT%F%uFp z$efmOofN6pFrgatR8GGbPV_h&an#q8M#^;!^BRgZ5+ODt zr`;6DeJX(Q2I5!JAb-^V-#NA$hQXKPyq>-pt=X-Y5jgA&RI?+evmLN}4-1 zU^2SJNqB*qON(H7sEC&M;X`khAr9G_0g!+^@0@`S=?CN^InG!z#B%I(^MVDJ(W|8q2(+i;6k9nErGREkGX~x$Qiod^5n(qDXatScskcSsv`z+VTA-Xj<6f zJ^M19Sy1lDk3eQbuAN1CcI35X;IGlx;o^ugs~s1(S2SZ-pWuK62(9P~l6Sgb>I6$+ z6`+1#Y&UYtz+#3$9^10(0UAVu?IOm6jxr9sq8SZc z6e=<)ZG(RgoUwA5vS7Jg8OVFqI>Q-mk(i#8H2PLe^K+j3 zBFvgy2lJyPsGWw3^*lU0?%jLslmZX{RaI45KK)++ld%()5rw{+CkRKE0qJq7;{%8< zeS9S-LqVt+X9U*8Vi?^lZvXc1^t`~scQsi-x=M%9-shI*6bRzXM6OYDhSP982nYy( zo0U*t#N<8kI8B# z_Ak6eg|cz_Aa_UOej6F=7dMNzhgGx6i*wST8;)K1>fC z$ejHngc8;tp5Oil%sDc0`pM#U!eK`Nqp8JIf2A9&OEs|xF@r8?EzEas-WK^EFDwr zGkWnWgjdgU)0}0Jv#t{(W|$;{}Gy3>_Ol3oWujFrg67M?#jVsK-CqpE-d&> z?aO~O$$~dyb8lp|c!GPO-naVcWcJmjU-5B%puOY~9=6LBC~(w=(p$ zlw-t>0}>jrXN$7`2_D+kic-D41l?z|WhW>mPuNWi?cj}qnM{eSp{V0%%fL3DM65XG zWgMto*lnk0=a;|XuuEe4hwta*!FXkY5&x+0CK`!dmX+iZTf^XEhidG|UiOKl9U&v! z68eTG*Y4K&v$3>-&rCUz&ar)%Ua!t(#S!Co>p1DId678E(ydYu~p> z$l%7jRQ3rUDv2yK-n`9+fa2lK=zW&F6SYZDzLPxdBRKQAgYiTsvXPJN(0th%&f&!7P+j*L?lX!CPkHv zTr;!1wDlBoGc-1Q>9Wj?U*6td5jXi>bmm;AURZ{_N$Z*US86q07EPy-%;( z{?eW|AG%7G8BWT(@ioNBCv&Ak1T-wCFJ@)cAwP0>cAS)x`t#+XrTeK(pPLk(n36uk z#G&16&CFaa-+P=d-A5^Na0g#GE=H*qBYWl(Cwc#QG)>G3HH}GE^MpQoY7KlKYtfhX zmenq2LPmaiH%x|6Jo&x<^PE&uNJW zabY>oqlC2zl9|5Y0TQblysXtDj{e&2dFOoaJumf4Lq2c#XI@R@np-HE+e4t1 zjxaASY}|U(+T)`Og$nsi>`j8P>UlLhdeq2cyjreCckphCEru&sB=p*Zl*{0PwUz+S zzHTbTT#K2pDYnW&i!;qgA^7;criRkW&OX1rQiecyrHg1dhA50kUMnWy*;BdnYLyEg zHSiOO6K4esvCllqP}bxIh7VlE3FC}BdPIix(OUZ}rl6)0^7WSwAqwLpdrP2Kb(;)w zW){OdFQ{<3aotmiqXDsEBEA~MN_|f!bK06zClgQFGUP4izyIk=d&Ylw&#opbLQ<}w z;@q^ia*Jrv&UbX_g~}06iTH_Y-diWhSkdGn1PBq?VwlcNiksur)2uw)j1!e8!#7bK z)Oz%HQ|{cDHysh_Gj=(=Ya}kS;b6kBpuf6jGP?;|bOa zuI3iONd$>YyW5iqFAN&-uG-qY+P!c|<#ZigUFR|WI@?JeYGy#iU6g8Hgkld9P9cnPycW*o&&$-WbM9P(DFW$zZMHeQnM_PIBnUO|_ zcpJazLmpil-{QbB3;+`z!1-h>caJIOX*^aS9EGE#4i!UGo`mn)#4{Uz9hA$V3(+Q{ zA9a&cc|^R07U*!4jl%?k3@J9A zBHK_e`$m*i^-J++q{2m?-r>xwWS-g?=rP)q4%js8)^=QZ*<_Zt#%sp&@vY1Fve$lq zQo$e@R!jA(d;yCzF-a!cN@0+?uUc3e;YGMFnsB>~OR-WpjaNUW)$ndL@QV)d)S13U zWOnW}^M$~CrP)k9`Hxe|?lH;6{mE*V1tH1tN^N=X-x#<$$n?-x?oZ``;Z!d+oaT5254W5rTMewh)O+ zL)%oED8wSMSB%oe*Tk7@#2Xv3!crk`k>4w(@_7Q)(iB9?2@Iu!^S^#@zz6}w&A;?? zjNs!t;yfZ%Lc%;E0_laJ(RmUg?nR%faxJ8diGY+48J7_n=w2dVmf@F!KTOopXt_Kh zo*I|dnM}MPd3_JaSOcjZtG#*Lg>a#G$wkv+;yT{ZWTUEKz)?gSf&x`V)Fy5vCFr}Z zjl4OUSV#i{5!OtRBdgwWtSG-iX(wDA( zYuv;RO{z9BgOwG2p_gD(>}O^9w6yC2{f}=_r_^q>^}2%l8A^zl-yeSOkr_7(1_OLp zGP!e&Efthf1!_r&s4r1MueSv9Y|H+_`4GU)iT1<5#{_*lXt+)?k|=GjYNdB7YH)&T z9ZSX=j%wO`eN4?=r-?0d$jrHSTs^US1C#>@iY&D6ebu?|o%?ze~Y)H^Af3TwEVYfS3zM(_x** z5wxfJ;K74?_rd^|4ybSZOWzMSTidE#K=#|Dly)?e-+iIABx1PK@-YfZ^sM_$dJy+u zXb=aOc%QZUqk{@?MVv)c;!wGmAIWttor!NC?omKQ#HQ9w)xu&4q!vHGi3$3*v(YTe zk(Y9Zq%Khd8}dKTkr;VTCF|eAG_k25jmA06btOM98F@`k5xw_ds^A%8@Uq*|&Wf}O zk)9-0M`xky-_rKw549E+)9x=h6y1OKG>|B=MXG3%IkMd5=$NW?zp%KsaP2<%O(=Qg zE}u+1<_OxH4-K$C4)?djk4cU&T++R+q}l!94os|`r&UN-mpGDGpdpCi6($yEjMy4kHJz`kd0(!4d6>t$>e|zg6 zG(9qs>qg6$jF^VSC1B>&l+Qot3Ta6i}{!&*L)AE`Do{Z+r1^WTb7q*J=KcZFK-M z@9mALEB70B5}o{{HOOuX0aW~V=jAgq`#e}A5R3%p9RQ>3%zpK|P+1QvNPEEs-RG^~ z+EV*hDMby$B3Kp9W~rku{W-?A0dF~#IY=L_{{ux~w?kCAa_~A}>N1qG-vI`1P-#Tn-iy8%a z&z0X_zOaqg+)WWbXqBgZm5Rf;*7&zYEdv#tl#C4GdA>itq{o0ZK-aFCGh!W&J3^V7nD3305~ zAeE+kBo3Pp2dL5r5Po~o!sRF=S=^-~YI%@Nza3;e0Hb@j^2ajU$w2$&rMwA<{{#nw zv>w3DJE2@192kJF3I2xwc&<8(_hSq4Pk0ZVo#_SgFapEs&nPZ4&f|7>(=X84*%4%V zr^@i@XC&Z`L(BWOtaxzECX^+9D>42%dS0138>{Ie1(hDt#^&)M9~&!TrqO7!enFQ~r7aBb6uSqC;wH z@!+^CnYOrc@zVPTY8%&3?hXrorEgtSPCE*%4_ZvGIZZFZ?ZFQ&b${v)h#zoE?k|71 zuZDo{vc552Bv&BZ$)DQYW`AV3<<oL!h^q({O@Ex_vZ7tiS0!RpLN&4tj?Jn<-#YMyCu(E+1+x^Z{6sL zUkcwVy4;le>hFGlZN}BF;0QT%hlLB&DEY3901JTr0Kb61_qTSMK#^MPPAw?CnkGAbwv}xE!oF z9hrX|E;0=wCdH&%Y9WRuUNhFJ1jyXN0!Sxq9)6)v2^lxr!F`EU+IIvk7I1$bJ)SrS zZ1X|-DAQ44z#VkC3xD7Hs`1`9J_M{{nzwFcJ0;^(LjJ5zD*h)-NdP$_;5rYOX^Ftn ze+fD|pl782pUZq;aPZ*I@=q@X@YoK4)zEK;WlvWYnF4*a(QNXBb-p;Zs@Yac{iLq= zKDLoCByD?hvwW&?5I@nckQd#)=vmh(5Tb%XyY$%Inys@J+4DI5!))C2qf%S_ZM86D zDRsY^^e-fY4+zzmV0a_gZ2*+X%RBu0-+!tfxuA;zosMdktm|hv5l2fi2n2=Zw~oMn zQ?rx)J{ih?2aR(wShhCp;MgG_xZvgLT3UJ`o|+o=zyPquEcBkdjBBZ0J7a0Nvog{E zwnJ(?fd?5ufwXroeV-_usDc**nV3*@H5g1liVQ=rQxDqd8aZAA?L?%n?0Qq?^mOZY zP1YVx0RcNKA9os6w9(U$M3?rq&-r;fghpF zACw*<#FoyTjc27st(6wp9RKSwb}=4>r zNS0LPwu|y~eIyK~WhyeRNPRLcmE5>f*&QMlP0X!t)B?@wVBPnt>{N?Hu3hBP+W{$F_cPukhl;Wy?@L62CZZ#i@&onn5|(k`B-;!rxs`OY5O z0N3!Nsw(CbwuwAP=#b?|) z-?36@a!zL{aFR-OiBakens{NbMJSpVHFX%PhmI&69i7=*ccpY)`v6G@66Y(2n>Z47 zmUU_M`9tYymy)vvSg`QIOsW?AGcP;yoKjXU9Y;hsAhn4Mkc)hlmr_*|PpDqC$ufA| z&;FjawwG>H+;PP%$s32 zK%l{*ji`*IA#OKLRL86Dj=Z)>GM^UpeSx=r`lOT!DY%+Wb?)5bW=-|8;iya_$O&zh z5+RKj%RfWv`kg9MzgQd*P#H{e**3rKpL4h7)#cs*V&qO&Qu2p8A~|>?H9P(B1?NQU zllpa#kh{CPKR)kpCZv^`h|~912cD4mCVvRGIuBw*qb+6NycHMc93S7mvntIbdFS5z z1~jlAsMLFX^=SJO74-&2D3!w3J1?DkdD$l6x<#DDMFs?tdqmTFjk5yZ-tzpyv^v@F z7ksb`!WJPoI1vzqz?M;FS5MFUi-hzGB<1D*fpJ^#)iNLy;4SPe;aCm7*Gh6zwZguYp}?7!1Wddp z@s;?(WhsSAXXz?59HK~-T#(=?!l)ZBq*?huYZC+ zvwuEd@r|#>fBQ?1&MPHlWHbdVzl)o`p^}N%i@tQR43ehp0J-loF!@q54dUm9DjYVz z(%E=&Oj2>DQA2ov4GIEa?w(Twm zD~eA~Zwxw$gq7W9olXKN7hd0b7;m7m;GSw!7^_!jUq>$LoPUFql&&r}e7Mv!_$2h# zpFdTLy%`59B@y+do?r7g=j}g`j|=k)d0v12;EB<0^O@ESfTV*|6lO^F9P&wZcOA+l z33lelj9+e#DB$h1w$a5y)IlY2AKHp@K3xtiK5r4 z(IY#MCZ1cnN2Ar>pcy;j&=c?{izMT)eQA4<;)C@jeU<#%H_fufi`n24fD*bDrWEbb z7Z_=2w@*eJ*5yQ=ZlC-o*|2e7J0n-haTI4ur0-{}qVkCxjfuwcXnZbwVn}vYhx4tv zi4@CoTvH+Sg}2!ux9~ZnSW|+$zaGt#jlTECCzBWdw*P{Oj=#Ez@Tb53SlcK48!99# zw$lr`jFD*we}h4_Y#F3f0y45VKY#!7c_oi2dB*gyA~haoFUOI6U&w!26{&IkQNNY0 z&Qa|+7;z>fGiSaX@AbLPii3y~k>h5QD?fqL#%a3bx{W_aZSc3M5u5b*_?t``QY_~H zd7SAqb~*T8C%nZ^4Ie7@|Yt} zEkJO>h7rnN$NJ-{z=1(`(>t3+Ef`M1w!l}zUqAfVPzI;^ss9rYDKIXDRuGgicd>t*pj~8Lc+~!SV`_P0(I|zf{^8G6pLF2J^pw)k&DW zK|UMLeBexFlha_EO@q&Az^0SaawN6O)O&m23UqWNzTcbG0X@aua9QcA{~o@>ODHNf zz<3B46HsRbfqx1r(6o$yXE5}lEsAu*t6c(*ZaZA^;8fJ#T9A`Dvh*l zcvfEE@o63%0%eW6``PNx6nxj^?(J-w^X#z!`>yQ1Opf z-8CP`pX-*L3OE`bDGB>X(QZ3h>e2wj1%O2Wkmx@A24MMvh{);8W07l>%>Oy|K}W~%;Zcbs0cqo+sdXOtv_k8PgbjK|*{ z7H!0KAtJR(IGMfA|IaUQuE?Bpk33D4hMY{#Gt1HX%61mOJgU08h?9K0IKM!nWltH8 zmdFPO=a5(z4B-yGHXQ}RE%CfGO=^DsuH53|^Bkqc#Vqn3x1ld6+zFHMWstDL^*!*XP)A`XnI*fEsGodx#_^l52`fL~ zr-?zur-*ZV@Kw~;kBM>TGaJ)->}}rkR<&2}dlx?PtvK=o`ZeGX{N{bf%cUHyh}rgi zZ3z+TXlBf9rnjw+|E6jreJLy=OHO=UL^cxM66s{o@-A243*A8608h3iN8oLkw;6TZ z5VNqPHtCLRozdcfZ#Go)dcSn4CH|sj%ZwOxQSUItQw;Zt4bh{IT0D?ee3JgpVd z#S>owquZpghJotw@Z!4IWIac*wDg5J_u>|V9h1`LZFBJ}>WR3X zb_+U%bb5Qa#~wk_Bs(Pnm99h0ag(XO6tDv*>eI+GwHIFTM#Y-^;TLcDo&Kr6$wY$z zV8+{|KB*oiEkZ8s5wG7QI37;-HXiNHsN8~rJO>#<<}zzLCJj~9&@oOh%j*pyH}ajF zQ}T(_J83MVFMPGqZvnADIuLO{b6~ng;W1>#-O=02h}P0p2}jc02c^6xU#6zsw~Rzd zT)a3bM%gBY+7$9vr17l0fF|nkZWTjk8NgGOi_aIpg_o{&yn5|((_YY+{GqF>C{ie$ zIVUhIG|ch2lt6{dvN$BN-hw{e=q}{X-9Ie1YR8(GwNJ0}os1Wk>F_Z%JAZpm&omLf zJU1l!zB8dJfQN=iNYXj@V_1+A!%l63VF^hKvFsGzV9k5vc{V? z|Hgcd_5NrToAq~X=@KmS$ae>BvSukg^Q;K{3~hn0ws&9kE*eMk)0T|aj6E_XzBN&B zH-!p8kBL4f3MWljID_b&nV)#ZFJ<4)O{ha?w=Of6eocUPQ2`;;LX0k1wjnAH3J4K) zfMhov@00-%_#@zYzHT}2XcqJEF{BV&1R`aK5tt;rlo8UK9x*BTIs(JYp`JNox}l_m z1Wl4(!^G#TYt|lNs?M)XOny5EnmjU57?vFRyb@SfoUGWW%`NUn*z|rwwkU4+L@Zqk z;aJ4eGcsO<)gP?c2vit-u&9{k<%NnEC*PJ^1e8wG;qQ#|Onn?7?=O*GCHY`$MqU}) zG$euD&oL>eTHkPv5NnI!qm;ZUSA6d34EZ7>5fR~y5YjFIff)T@8U?zOVV|3(h+E8o z0ryy<{O5?XkkYqOQ~!S7@WLHDCKhZtuPyK%d)r;^9*8sY6&hcQn0p z6?~T@NT|8y=6@?`gLG zJk`Vxp~D;q%24>u-jR}T(vyvd5UunvF64Wb{ww9W3+F~7zSCc3L?>3dS`O6b*(W0j z;&DE4+ckvcz|^iwG$P_-X`Zsw_;Xul%XZF;l1LMuutPk^H${x}JJM038YO5-Xz#R7 zj_kYM&s6@}iJ$m#VI$qOWa(4a_yA#!RO@ygK*3>)UYjb47!@l4j13jd0@z1lT_a6AjTSR6ACPInH%Z)Ql56 zA4uX_KL zth{@XWMt2Pq^?-`Q8=4y1m2-N8}kK$D4 z!?BEAx?5&VRGe`%rlYAY&b0*lIU8i20H4g;Mp2)>&A)BOTXR6=ZcGXzUz8dHZU5aL zDdBscVtAW1ET4cheJA+J_GQd;RrFO10N%7P>0#f<3kx@v&v|9q8c`bL5g0DEMZLXI zzOpRu3H`;jMHa0DG$+!b;B`3nSZ;GCh|2?6$p38k8$a@HZ6RN$|F6o9z7(OD(e+O_ zCatq!q0RdQucvtJq9o6q&Y<4If_&OaQGtO98y(GZg)$@?61UMl9x1> zr*S@w_q7qq(C>#t)Xbb<<)CIl%qKN&S63QdJ4^jnXOr^&+rU{8GP_wD~GeQ zGh$(A*gvtDaq@kSOuSR~FNs$v7pF&?RLm1QuZOkUbmt7u%!OMA^4-Sv8e9?A0|VM5 zd;=KAramPn>{YV;p`hJQmP^DY=kBZ7&O`2ONvl0ioVg{n$%FTLsR#*AsN}YPJvP@) zW7Rdm@(XdO2M`kkk-c2uCNyl^ps?D8cmimce(CKsk2Wze0j;YdinP+PpBqIg)|TDB z1YK1m6QD`XZH+OAo0rW?8fWJgdir+QvAt~USYu7`n%wcT*$e%S zl>iUS%)9|-1Keo6_g!u@?`w(3W}l6zhfAAT5Mv|V!2r#i59m zHJDo6q=-U-VVK!wS!aS+u7;1r^I!+%!$@o40-k1r@o)0gOTp6x?!bSfMr%M^TT$Kg z6(Z_|k`i!OFa(^3?@kVodsPs#8KC?_VE98V>hXN-^44<|Jfi5B=#v->gf$Rt&x!RJ zyakYHR&libLd_coPgT`LuQ#=mJgQ8NadKbvU@$b4_h5v45s)0(+G$n$pzQ|6cdx-g z1j29xa<0s8>>SEhDfvvp7~!5-Qo)vbj25yqyhqiQq76Y0-826gundMbN$HYV;6pBe zCdeu_0upP`ax4H$8$5^nt3O~K^5LvRA^>F1Md}(Fih`el308p>9{^ZT#mIk7Qrx`R zukKurW&t3oC$LKcX~j?QLG3IGJ`5NP009ff`4Lna*VKRm67s+L^V%ff96%ATsa^#A z+n`3pBE^deg@s7+l7mmJ4;mq7U_vt>Xz{OM_2nCVLw`VNu<6xouG}7B>gW`Nt{1D? z++XKjP%c!NG~SQ59=$#I8UeaBB+2TwlS#j0w!ou#5-{!R`?qnVSDu1_dTfEE zE}@L{XztMY1kuMZb-R|CGWVSm3x%2*a))4r1gd~P9JrOn9o)om+~ZVPcZv~eIaC22 z7kkqVz>E=)%H1D$9*Cl30qijT?V|vplvLoUUM&@?-IRv16g(=l_`1Py`K$}Ew!wK( zTT^qY&Ta~rwbVN;zXdL+Ahc~P5}$s1BFG)AM$pQFo>~v+1#>~@G?-kSZSh2hs&u~| z0N;t^zcCBz=00NkISs?7Jzkz}zHbzg;pC^WHIWAAT( zl>j&%ew1t*J4bS4q2-VY&&h>|Gq^<8&S@Nl(8;p*YDHxtN%E~@~FCN^bG05zBY*RrU36l1tpA$WXV}SJH zyT`2tEFt^<*{&9yKnfKAekO86F2_ZVS=reeSYL=0z4}}UXybO^4xOYJ%5~qL&XFE; z_Jd3&!fEyEM$3Nj+3pGmi+VWz`s{vhs_to3ClfJG@2??%q*I26fOn_cw5ZrlV-obk zVCzi*O{X7t^dojjkxdg1|2p&hPKKX>WcXqs_uR)8b95w~djOAy2;HX8W=YI_Am-Hg z_xGPHEgZYHV3xkde7>DsgF5{2;1aNI2Zc1-Sm^Z%;vUI2C8|$x1PtC7$QTcxD=)3l}N$rp5H*g=R&jQU`cN7RJ%cA%rlia zK*rMJO1M2n&;04Z1n5pkvE5?`#=pjuw^vCKCLaZ=JuCP@|FofNl{RqT*uzY{0339$ zS0C9PAA)U;T@ z#t9%hAVKZtr|$Q~K+F&9LIGZq=e1xr3XC7Y{0%s1z$-!%x(h;y04k859am9aUh~-a z@6Y~Eo)tI|!S%tR5P?Oep`o#^ZwBqI$8g}Fyk}Menc*aWn~;2o%ir> z$LnwrIM7%C1E||eO5IK;3okFH&tvk;Uj>6@<+BEe;6NPwKU4iCojpC$Obj$Gs)WTt z-ba{(j4D_26O0WGi}#aJ8FAD>uLKGB71Md0T?fy8-`$=!vep8^@b=;uS4X?vcBKI1 zZ*g!`d+rkq{HdFIyXv)g3~W^qAW9LBr8>J5D`m(^O7cbM?KveU@W4n;o(b%HNYz|$ zTJ4~OB1-`bm-5U+TmS9CpI`J7!uyqv;H6T^5$J=t^mS|W&Ej%cLAC%0($q#99Hb6v18uj9U?tA!<-z>thVxX) z{oDKv^j%a-Lkt*~$iJEC2d~5fH(&*>?MTE^AT(58VbwpjB|{xVw{h6B7Xae+aSavT`6LN*}RE61S0Na&gbQm4drFnlo;u!V}NLnY?5+J1@7 z#H$LsX%fv@|wq*KL=a({o_QavaDEWrpXwKUz!*iU8N(!~gX8Gc2#~ z0zFy#KD?ZT$xcR+*@c{e^#}`2B(~^Fgg%uQh-wiY%+zCobR{Xm+w7-DXiIQWf=yLD&8F6~+x+XB`JGb9s>)D;F*yVu0P^c^ z`mn<1Fnj&)9_(ib!2@-Q&k3+}05eWs1I&cR@gcM_xqaeNuJh=R{0>gqhe7YQiUAH3g=FK4~& zGYgL2kz?$7kJBeb(rRAUSnaU48~gm~Pms9x0e(M#8CN#e@M5KvoSgzV*XrBT983<1 z#af#(Wsif?-!IZrwY8Dm-Q3=H@2Nk346jZ5&A6Pmtq^$TA_N7$+)+V=sAq-K>h5Mw zCrYfWlxblh!Rx1B*U@kD`3vB;qqb8u*|y)s9~pr;DUf$R0zr^6ek)`Wy z4jj+q;^??KiGEVS9Iut_K4S|Fjf~CJ`T;8z#I?4XVrEj|^pq4T#VNWZds*o%Q>+#< zNCu?~k8ew4m=v-=ONJxE$hpa)Z*9lmy=`yZz4JS2 zmLS%Q%|V9!hG;_DPRCo{b+3VwPZ*%be-1i<=Z|4pkd&;Q9(>Da>Nr-m?^~ma!)pFA zeZrW2`w=1Rqy!btE!E)qO6HFPMey6S^alGC$N30q{}xxxy!$(M_ftrcG~ML%TC2)& zTnWSTUV)q(4p&4OgKJ*yGqXHNLc$ZztJ>GMw!Q%cj?Z}W&WGYMhnCgj*#KdDS1Wv4 zSRe4G85}TmoP0WMtj2W1zT31(5jz;qDGRFgTR?3r*4b?o zW=2!D*k%FeX4{*VrOmPiM3sM4^x+`Yt!UOpD&aXp5`s;a7QU_n^Db3jkW zN?cJ^rq>yGM`n}#11KS)qelRTU;0T1QdcvYp4QF_y0`|1)y>%AK+)#4-L5+(#?6UM*sb>c34lvE z)8d3Ea0Kj<7ynx<14#Ln&d(H-Cn)YAv7zgZQ z({N*L0N>||s;XS@<$+otEoF_;d&zaJE94_EfAv+cw6=V#=VTiM*y(iX(x>1-0B81I z`a39643aQu$MSo_?~l9%CNjA;fL@DNl@R~9eWxQkn?jb~Y9tku&TP70zLb`J0TYJ+ zpGzM4zB8po;Jb*5DTNjTS8cuzpAdMs`FA=2++kFww%HaMohzb)m;UTO4Lbd}3bO3# z!1>Bl=DNYEJps~+T_0`Jn|E?=fvwnzOD{IA=%21d=g#E@qlmGwv$``6rDQG~NezvZ zrFSe<*=K!(FWC*x%sy)BTiFO$XCow9Wdcw=9eD_PZcUo)&{Na&l3L`bKo3{UaG`O+ zuBfQk%04#Z;y@3WfBp(1`M16Ok)!F4wDuu7RPY0gb|=FTt0(Bo6A8}sf&OpC1SA>) zFcx^6gUz2@#H$j+?xbT2yr!={%j5q5Eui?nKfQozdrZ3qjyS2BYP5sZCkCveM3fxA z0CQ4NH@Kj+BSa@s;3_y3 zfR%M;adEMC-inck*JOY&O`v+i=I9#(uyRmvDN;YC{dau^j1&XT{xWw?fP$g~0G*B)>chlkc%4ktfmlauq6gQ6L<&v(E{=jLKRBPXTN=JQf3n1`s}-D)-xKmo7Y? zo}LCS`_*M-N-tl6u-P}0g;6Ij+;RWC{P#{ZDFPgP&Ee2L>_`HZ^~9W@G0cb#( zDe2k447_MVDR0TKHzA#%FcImUL)V9w$_@u}F>iBbE^()Vs&SgLbKyV9q(!o_5#b*o zB$)S8ROrh~Y08Pf^lU5rkp=wtPX#yldWiIih4R>FkOs{T^U^E>Ar_@SWQylvM~k&fkgf zl)m#)@x)qd!lVhRl_(2{2WstNp(@x z7E$B0(sa{7u^Dng1Wsff=Np`t*>cN;7pUvm)a()`08=p${ky(jV#tw}XS4pNV_39! zcQgMOuPe&`q}5L?ThKywvLxuT{OQeG*N1q*rnq0is@zT=2|lT% z%jUA|Gt?RU+3YAiF25QFmV5*?GJ|Ry?V=oF-<;8F3QLVd808)o&nRJYqx0l{9BkAI zFgRwF^n0+;9MKm;qrGI*`e1=+A5@>CqA=~72YVrUp2sa2q0(~A6XP>%ZJK)Nv4?FW+)Vh1v(3I!uk-)4xA90F7Yf2Q5{(j2?z>O<`~s97$#k)q}P~# zt4*|3GnrZMWmOT~HSPKl*7UOFhy^8(qDA_@s-{}I zh(x#}hDqMKcM;KIO1wsdCzJ9IB^3z>^?rrIsuMv$m?_(*vq*5Ni&V2=DL6DF@kb-MPmL37tLC9SNpWy?PyZ%I&A+wErYtix-xe9`Iahr+8I`20^zT0B{emYij%G)bmjJ ztcCoZDtWfNKGI$v^e4G${}IW$yIiftXpt${yTT??tj8?P2Bw5gT8dT65#jT0$){d9 zY_KU{09bp_yO9*#*=Id&^Ab0^pMfD06wp$s{^g{(#vnk zW{Rrz*R-H?jdGLe1vdw;Qcq%xFe0a-)DX$w>?QqTJLdb}{6*qgoh|<{g)J>k=(6&= zfGP?R^_|5xH^T0wKB3oE6sZjdmV330C?pb2u6U3-9*D5Nl?7HjL4p)stD9EZ%-{ds7!N!= zBT(d9A1=ILRQm_On&XarU>49)0Rm*~wQ0=(Tvt)u(E?n!)1E37wHbhRdmt{a(e_6+ zS9~N`M!FsTzJTz&3w!_!Jb+pN#Kpn@)EKE;pg(Q^piwgri_Xu_$37Mf0Iz!trvPJZ zU{J=r$b`i2tFDUG2jJu20IpG6Qv<+)25@$R1_AV}{n6UhI23}385x&96sYym(^690 zK@$OVaKuDJK)?U%dS^$T&P@AE@%KemF}Ua+NE`bHP!9k!q<{EOHdkD1_o(5y?0jhV z`UcMBk8B1lOT3ln8yql?NqdN{2fz-XoNs4deoX4w%d!WNBjBF{?1WoFq7zh|PB_Xg z5D4r5MHtY11CpW!B&ZjwKGo(kn5qM}2a*m>M>9BVVu6&FmprZmsCxrDB}7C-l$4d< zS~1-)eFx%_wRxL7&+A|n_@zw$cVc$K#FP}ChyNM_uSZRAB;0*ii3xk?3VI_(AC+C~ zM#3g8-N>M-`n}XV1444?)rR8gT0uN6Y)lh3Qtv@4FwJ3dwl3 z_bP%sfufjQ@5GFi_|e`TJYSIYqOPwm4CGUwn7~g;mebY*J^U?Llz<(m2G|sDX zUYOx4)u_~{5WI`r1tkF3U0zyQG2j~kblWCZXdOs=C?o=<0m26=K@f$a|6102>!PNH z;Zef_)JH-)*;6%EF#tM|y*p2PZOqQbMhO~J;1>X*%ua0K0Lao%ow~o@OaXe8a1G=yfT6ir=eS(}NQ(eF|v&MS2vBEg0S)J_Mh|F#8`1#~n7@IhA^1Ln{4I{bz3 zDFt0jL6a?8XE_}4pF!iz)kd1^+0{l68!M|1AX9!KYgVErD;bA z9s-a0L8P}*N|lbg)dx#GI5Pf^_REO_u~Kh2Pw*Z1P1g(Q`A&5Hq1I*tc_z6TMqVGp z+K@VouVZG$Bn>>hs=Jm4%ZY?aHJjo@VEBuEC)5A zB1$Mb=)PG_E)0ytLBRqhLCZU*z~Shk!|yl<42kvp`U9FSVC!E40>Xf6GdLUoed#{V z-t5uyTV}izN5`*ZRLwo)9V%~{@_0143`(xJSr5>-l8}((xsMB#$5&leW#Y3R{;=8o zKGiwb_IvuZ$>LXc0le@Yv*nUTCMLbF{_|PW4wI9Uprxl#Y;c_3>j1COY&9-A0gU&X z(sKEvx7kSKdCKPvk$!DrMuHq+@4cn60I>BUW?7?SLbz0dG)1E4Kb;`SWVqbaic!#*2}3AbTWM7xevZE!5v@+ucLDbwj$<$xf(QxTwpv| zW5(=~0sbrZuliK6T%@ToEV#0gwFudVV?uHC-t_M~e3^;1U*S(z0Nn9ru`y&^=11oC z6!1UtGBf+p^woj`q^Sdp^u{A6(!7UTwd^~li6>`z!Go{xxR2>GckZO3c>8Qa&bZpA zPm7yvCaA#kcwzRTXRh7BduRL*frf>Jhak!YCzcip@5P_0OPVVf zVZpH%uZe*N67=vEOo@hp?-Va2Rx0KU-KRN%L(H7-edd z_ec{w7Z7-et(j9+3C~ z4r{4AL8nZ?86Z55$}3J#8Pq$>f+L#*B8>okh5Mh=sEbNav*!^6_9-_gl9+6f|A|j= zt4L8GK>q@R-VD}TD2!Yl&QEo|T-EvSh016akByqADxRkp5f6W*ogi7`JAhb>>&Gf*NJ0e~c1el$SRzGKDJpw5Mj_RB zDlw2*;SUxx4wdNKx0ceeAE20LVrOUP;Fy@0=mgaj2uooqLi*Ix(}RGB0yeds%}p?L z*{n=W#j~CLmn1IdGH-UAf~y9+`^2w+ebLRC@PDtYQ6Pk&g9AoT#jrCok30Uf9h;mW<}EBgA|tPM}R8Mvrk2cI(VA!^Bi!8SzAva>)(RmN zLE$^a6J401qzrH(s6mz-qj^^v{|q}h|l!g2)A@j#uLa zc!vUy56)BsH|-+j!RqxK)>^#_>=Z_I$FwBC-!ViR<+X?$JH7;BhDAVC^?(gw5e%0D zIQ{|X)2f;;S~QiFRhSByKC1*1A>=t_av5Fr7x1+lZDhpMOZqxDw$%Y&c zWzydo&X`2HQ7*|e%a?5V4$!o~X-V=)ybPVzd78%XT#$V#WLiy6#rQ8_h*!Z7k@E19 zF$BRj*N9qV=ujX-1sd#Es0?0yLmRo3=I9>=0!&G6Uo}v-QoS?CRTqL%Hu!hz5u064 zm7iO&QuVEZDLvoQ`_nm#1XLihU47W`I|6~Gqj;}Sp-$-}HKZ0QNU{n6vc0H!_uX_e zaU-wtS%8}4kfKa60zC~18aW*ToeSHFjdN|bD~_R=$&RG#p6%;H)Rt}3f6<(bCEtiP z?xHjTC^FZdh({{=9>S84VA8iQ*%gq!IK=r#gvcf>F%}IMFqf_q5&qRTTO!mlK)*y9 z^y5(R@e(C^MUVuVYCSD2UZ8IR>4&|XH6Ja3u^N!0qtTM?#BzlXk;)X?2Qq32|M@9( zwFjr&RTrDe^mjGFZaLkLZOg?&PHTm{+sDnPjKGB&nol-GqFr1Rs2J}uUV)qwrpA1%n+nL%YR5# z)LjSjUr-mR#SrOEHqW@=PONK{dhFWSb9R6Dv(MGoYfZ3&%$kFt!cYtauZO51N=JVv z_q)XJIE!iOhPG{oOnC07p2%b7-l@FHXT1~E;lYMi5WvY z;j*z@@z0IE(vfcZnp z=D-ltmxMXugo(BBdo?+oJeZJTKg=;_bil6!hARUf(BdJ0E7Fj_G+_8jW#$ecXwC03 z+_s{R^<6QwHCp1YuFxRub?n!TE(0l8Pi$~2DyFcLPhqKcFOw5{hGW){Id=><47vYA zBL9t`>>N}`zJk_T{QJFGPjr7+*IgtbSjET}B=ZA9wqHAx}+w7n+(J`Xw|KUWlYYjxJ-FUGayjN{P-` zgw49Gd6TLyVq;8)AUMU!v(fdnt+LrwL;)OX#ax*`W0>a(>xmQa6w5#`e2)SDWA=<+ z`!D8nG@@xy7&98r0I6ow>AFVAV%in`y0pi7b(A?nzsQcX9tP9FoI!rL=_m{*_z7V{ z6j!77idgRxS6Zja+91!SY=yCeS&@b(z7uUT1+obBIBqBmhpD0(inLl))J!1|SxeMN zC}75l@mvY0taN2Fb_xnb zC4L?hX^kMK+Fez{?w@|rSrnGxU0S~(+4lPRd)RR_Rq}M*ra>x>(5*!cVx)-N)5;`4oJ;Aki zr%RNy?X-;8=N>29A-BmEbR7s`>Ll8(PcPcNE!2k?Z%2`XU0%n2AtH1Md&Pl>lAtt- z(4kO}rr}Hf1qq_J$#%8&)0-EItaWYFwxUCc*kID;Lued{-qIg_5>5H5oBOcNE&XF= zeCpXKQ6OIxx~it=TtM(5iTAJtoAE}aqf4D%(bW4XYFtDw-H&W`czB5scZ`Un6j&*} zfz$lue`&41kAZGdb;T9EibFj#v~GzDoT4}l=~Kk-Ckho;XKBBHr3x(nq$;X|lU zJcWAme$n^aUUfEzUj5ygV@V*Fil%NcTMLtyJ;$D~N(CK`sX=)f4r)Wj$AI|0pT25z z;3ydC$_l|F-=r>ZPWg8_*FB(q|#e*XRrwZxoX1hDNiXh}T zjH`xHL9hJtPR_JHtZ}k4lwzZVWV4MoD}-RSL281tu7i8z^BXU{5LiQrTp`TJ7hHz! z$=FE=mgaVmg#qIgu;x7B;-k=Bww<(sx9_-Qgdwv8>m#afw)6bDjP`j6eHe7GP`G9Y`-ySOjeEF8_ zy9IG+enWE|^R@Pb2&{$AkP^5UDX#UDhXori(TN4#E|S6qlVvVUx{331mQjta7Gfua zet%7wt;iW;;a;SRVsUQOxj}+HXNmq2+Gt=MAWS zK$4tBj6@_wfG15VcOi4)qyNHDD4mDs+zeI8++(y5aKx7+y3HlY0{Y#US# z5Kw7*jbxlphGwKT(#n;Tzp@LCQ<4!J2eBC)7vY62mUbem&2@z|zf5t8YVW%cO%2dx zT}UwK@Ma^CFtkM9y`W=%bF{~`vT&s33W>P=r%BR-%n8@kp{$4*A(Yfmn(V0wO=(E^itiQ?p)gpI&I`G?-dAA;|54K)BN--Sh-&W04~1O^Q46 zYpZSdZ4*irL?sP^xI)2og4L{m^kQCWC~Jc_bf?BzcDh9_WB0CeuA29)T&$ueZMKf zi!38epUr-`MncTcLwL@%P}cG(*RD5|3)inZ6enffncusP776Fnb=cZN`Die-DC3|5 zLK*?bJX)c}_Y)ZDa&;5hH+ajoh^dOOHQYPF9ddkzX|em)OG-8wY4=DOi_(&rM%wUY z!xm}vk{Z>(k%~y)6BCUDPyVTvy*6Pq9gU7wh(dMf-tGJ|(c2)?n-Lf3Iz9SY)OSU!=oBA=GW1%A{8~xPMfhn}XTX~7| zzs-MFSc;AISco*!%uIJ#OE`#h1a!|}bb~ZQ&FlALu1v0d7J~$G=$jBhTad@Cl4Pzo z$`Ol4qx>Zq(+!vU9pq)4>fo&L?5d9}Lq!Tnlt1^Xh0zU9-qNDiSPA4$<%HQ9q&{)` z?wUjc)qFFY6t~tXb@NWybP{Goe-lRZGko3hzl~S~3n!B0968Fog`KV}l!h_%SX!D- ziJrQ)g`Y7Ag9q_{HjK`Hq>!O89ZL!UolA={ry}3S_@?+|CaalO^@rU;9~tmuV5SZ2 ziCRMDi&Se)GT9>K918}>3){z6mPs3y+m3k`goZ342*Lp_ak{ZW4X7EbCF=h+K3PJG zFTMvxjlCe>VHc5SG^(gxrz*v;XU1Qck=S6tqp)5RGnd;6?Gg+0wTy{@(6SPfn-99% z2f{@QqIny<5hFfx`*pvEOF0Hl?fyS4fb<&$%MF_ici`q@IIXDA;!|0pqdx`;{E6_5s-NQn__#hOeii1-S+Y}b z{5cd~8+oG`kDd>~gywG=hlhOG@siwlz4>t<2!~>6q?$kY2mkcqkv)Z&dKH^PAvn!s zq0gt3A++@Jn}Sd6TW}&((AeRGhVzjKj-HxAK1~WyRpsbweW-$>b3%}Y#5;%7a6v^y zWu|7lcQ2~D2c(!z?E}!%kdiQ|pT24kiU?N37!cf$#$ZYf+~qdit}#i&lzk(K^#Lri z3(u{TQpevH9zqDooASyFPqAc>tj0arG_rXnDj}ueLZrojZ~U3fikbs3KBbFLGeZPd zFC;fO={Z#}Ew|G%xyXvTF^f%lt4V9gO^W;G6Zh=D6=qG+X~GBY?+DpClU&*W(g5%-@yslWH@^K=3Z=y=;<0+wfAPJif!;nXxx!hjg1=xc$ygr!U@h^e2c#$ z-91^qyO1HGMxsPa=#qgb+}b=Fj-*DzE^{U+#l~H7RDGHKoLz3v@3)(n!KT7M)ABPI zQ&>+Fdnf}d(}B^z)@C%a1NkiPxVnrJV(&1qWnN9wUTy$uQ8+;!D??Jt5rr!oLR)LH z{fH2Iqry&e7qW}t4YJF}bKdcxdIzRB0pA$+fjl%*lDTobR6VwPS(_55y5O@H`o}32 z0oQT9Z|4RUPK9RCfq2TWFK?4B_Txtt6oZEtp1Dj|iDv)s@{F%0#a)d(9+ySGeoi4Y z!=m}Qx2t{dY1BRs{y?T|0|R>3#b1|prb8cie*neBw^XkZRy`b4l-cl&<*01h;AF=X zP73Oz2+X&-rBkU-H*5{wIUqK9eT;e^)|AF>=9crpTU^PB)s=|o0sjDB<_>De+jB~; zDnGpGE6)6bt8ngWdixBum)w35ImNxuPQkMxj7e-p%?*cX>B+0rJ=wD==?Kli{ED`u zu0<^kj%7ws7$f9!SGe&?d(td#tYdIyTX3hUlg~#I87baQ3A<7p-iNxTKiyVP=FLG< zzO&sl@p}2Vw_oWW(aj=Emyasw-6<|5B`Lm@A^)W^J38ZUuw!%DOQPxweMK zzryCXQ2yT3_7e(jm;UPh2Db6vsqr7!T-euE9CSnLBS<%SkVAI4K<$g5O+5KwrJO>z z>RS(jKJuf?(^|i;ehTf1Vk=2+A2#uk4Y6kD)dJ#Xo#sVi_Q=>{yeh-Jc%S<;q!HcG zXrTuGNXtLu!7cK7mE(n9xBk%l)*MJ{ ziui&}$}^ZKL!*7UG=qupl$XO%RI$_(li?Q|yDnbevSeF=AQf6>eHx? z*8Zbj*dz@ea`h5t`lEX*IvQu~uYeVDyKrR~s+>u)t^LEE(HqZ#BDEXkjvrmm)EW=5 z2#$ygtHSh|Jv2nHd)HW`)_IHA8=T#aRGZ*szivL>j7w=4ymY-^<1>cS^M|caC+?m1 zxvgU0^Zje+sOp-L)HJEc5q5srliPa!llH=|UKuwy!9Ca{CApzC)R@=Bs>gGcL~YM6 zF`!)QK^7G4CDrWzX{=&auyM`!&Ndc0&y2f9XDN})URG}Wet((OLY4Y6FI@j-#3n~l zm`V?E-H@bX=cs6x<+mWF|E!cry=5n^J)|F{Gk?{;QWdCRkTCUbaQmOk_rJLC{ueKe zZ?*xk_YcNEz1-@?v4#ewC-=^AxM9^aUVsrLtsK*d#z-9Fqu%6qpNnZm2YoRR zy)IBw-r0(z7o@z?pb-3Dv?v;o+N)?ab7h48?U(VF6jvf{UvE}+EsukuHME`;3A#jU zco0lAp7-6L7>}%0ZrwcZm)1PfEG9%-Bg86_h3Mhd6@TDyB1yQa;JWO>PEd+bR1T!2 zp;?G@P-^etAdXKIL;>T5quM#;h#vQ9 zk^g*~tH%6>@q;Xd6inueZ?$BaB|mstLS<6W;D?ktp85rXI+S=@2Y1<90WTP`M#gZ3 zo3GkCd1o6M<8>nZU;#)@7D`2eBOrLlO43PwNdBbhp`qCh#n-;BA&gz%3*Km;PYy;R zP;!&~vX7PhoGmjE2~zqA4^HeOQ>NS2=|*}Qs1_xwO;8uFA`E%a%EF{133zGZkX-P{ zd7k$NYI<;M!h%!Wy9^@P4L4{W|5qk2Xt(WSQ}&s_L;(S5fAQTv$ns#J54xVhO59_ReC9ef4_ zsq<%EK%j{0!W+s!U41)YfH_VoUZ-$L~)scIW5Dh1@rpNiS1)~ zjH%)emc4Z$7JL2FlzdF7Cko8mFi{bf7kE^{=6$lPtxBIg;>@}BcfVT9tCAO8lf5fT zN+^^EpEB%?h}S7rF`u3Fm2yueQ}>zO&5z6_U)u<~sF`mIme+c6f=z+@D^?%lEr}^m zmQA#>slVqJFt>THiU-Mmwq}c&^st0mq=i^u)%;tV4K2eg{?HX5wY_LW6|bdbW&gcc z&#Ywv#u@TYmYlX(J3}M2fchC9jr0qKJ~~dwF>A5Fae5(cF}_ZW;pKut)jJ-lKLXe0 zqxsYOvsy=j+c88Sccj#&S{kPNAlLuTJ6&sNlK!SI0ZU1Mlt2WtB%E@0D?yDkHRasWmVl%r{P1uw&O1_7(Q^6_Fy7qz(cVY9TqAA!M>?xR zL+GGSEM)}5h@!HFh<)ADo@p2LBSjZ{mZOUsil5^gFLJB7uMu=o|rr*ELv@rv{}pLWw*o7gV}qTbOYz(6_5?h|A33<5|N2QGJlJ`HktS1y}s?d+HNLsY+E0x zwf0VBmELU%^7+!@y?KM1EpfRw$+o)SyHDA=U3Elp&}h;8|=5%J;OVKSAS*LM+V)e?cd3PU^}J36k@kC#r95{&=eg^HRg4! zzdJhB@wgHSFE{p`9#HM<=DPZ<1ZA9-NN;;dw;)@La7}#!ePQ=arMb2?+d2PF|TJz~h z3`h3-3jQ;H)8{KK8@7IfOBQ$M?WhXY9%Eqk(3XDNO{h{QMMM1HIdb6_v*r2y8FuPQ z`LCEtjh8rZF3AC#Qc@bq$P?L+I-687GE$mdUw3^2{gbHRFeKPEYeU-KZJRwVmzFS| zn3(@82z_?)8cnwrR_|{P6M_z(N*vrw?JIu^lV)Gl!XV|NW(HT2m&c|&o}c-l!AxSd z6-hgs|6i)J_>9O^yf-UrgBQh~oh}w%30Wym+7W{&R~!(2+mG7koec6jDsvS1-lekDpzNr>VbE z3AF6{LUcZ7+=$_FpsW60f2~dZ{lIj_s`~`J0rj%)$^hW<-E_K7X;|4~%&k;#855*2 zhjl%ON66VQ-p*;i|8ljmYWUE%@$z_~+3)T~JNiGj83ib^#?UmSF|2B`(k4&Bx?+f= z1?#(klt!E~awi(A;rH_;cNwX#$75FCFk40w#A@!!{`1qt;_t)=^k{qUnAh9+@S4=sb`YSGIOxz}h7Ci3u?q>OPbOre4JvcAceR6b`V3F2H@+Jp8N_kNAZ72_Y5lXxp*98fB0gU^|y#9m?7 zT3=_atRzwY+a117a&!LA|MG5euYRxP$tl{=SkbbG_krL^PnDeei`qp`S{I<88CnlJ zHNZrx^D*5rhh7kmohJ{x_ZC|!ZSC#ty%hbkyQY|?N9@JFRpvU8lMs)k$1vBvF_%k; zDw7$U%A5RIp+dXcMO$9}=OoYg$WFVMh=TE)-<%{Fq|~RxOK#x(>Jyi48MPoc5sGfW z#X2V|77ibUq`E!t8!q~dZ{wR%tTi+!yrzn%gEu~>0hcJ>MB2WPCY%|cj>lw-|K58V z#oNtT`3a$)dv^!*DZidz>-FAc-sR`kpqsgsH{THieJ1!w#y%vyu(Vw{aQkFbHpF9~ zio;z|ardi)+K97r5n_*)6_8{-*dAkTdzj_8J$fUtaC*?tgEh_VZr5DK+ja>`i6!N(EZq0@D*v803KKFyCaB_F3PGH1xR6#5Lf1{eIt{tc1v5#0 z9bD0G!&yWwDXh6-h`)W9+Wh+SX_d0=a$^Yd95(5|3=u|2+T??9*RT~OirXKcJ( z>Qe?s&IYU4!_pDlH70|dg1qWh{F^fe#R88OpY@L=X;1jPd+FPOC3Di!WmLa}Gc4N; zAc*Oarh<57qcjT!rWkAN3S$MH0ZRp8r7jNh=(IZ+zIYO6*BJD3R~jUSv|FOObnlj) z6glHZ{;@4Mo>Th0DM$2~>DAaXD<)IN?$glPytmuwAErOPt7a2=O27h<%`ibScQJ{xq~3f+2CisYI^)zo zB9at_8|yZP56WF7`2$mHya$_hhGQH*-VY7=oF;xtx3pBT;6||d|K#st=7W2kWgB?K zO77ou+S)EMvZ>71tpbxC@Wp3L8*DPxAw1m0T$;M3C`es%#j|i40+^&lL@_3efd)BI zGLlS<2I+IA`-Aa)%gzVLO`bpMqpAAM+xlp6xQ=o z%ab#Of@!;Vc_PgdLt+Eb>5`kjlTF1i8QQ*r(CjGSf6CmMEvC^PIyT%Js#aeykvbwSOa324xu&LDEUEExb{Y^4IrCcycXQu!dT7?YBdp9BQylm61GqBH;Rjk9we zka|81kRx*@O~KSft3SCpkr?-DHC=_-lo5~2+$zc}bKgOzKF#_L3Qm)1LI&Tcp#Et2gtX-=0h%;Bo0r z3{nZeM21c!09J|>k!Xk^R-}knK$e6+lZLWh2N(LS-LuDs#Bc4}%s3@e2zY#aN+ExDkPAMfK zQ>b+6qZw~irkF;eF*BD6n@Ij6N&N_n1_ z&fiojl`srn<;PBe*1BG=d!EOXRXy*r;Zl8{UF>0REUnDh6 zq-ns$TZDI)iX#ex3JHmU8M-7zd>@{7v)!l5;Z_*R(3DFZ`rT03X0Qh+heX~Rw{oj?h(Pga~IGES@` zpS9KmaSf%kM&5BkDuRS8N<4975jS*H3$d}mbpi-FGISzur^UTqsJ)ip2r#|!9&t7`*CC8)V>4N8JH`kT%+A*mGCb5oO zY({5;1L4HDh{#9|d=V35;DOl;W;IS+T_{B!0W89dk_-Z}3GZ`;4s(Ai2#Y$bro4JjA(Derh3 zN4{# z_bE4{IV>sb^RQjBq3u^z`Tu_R*2YLV*VL(lAWEDtgVdx0?_Y?BW6pj4@tWRZ0O!pj-gS$A%LVm`ELMQKG>P?q4(Q2w6h4h=_rN*!6ctfPH# zTT^WIK7VBUfvqN39*}p=#=^j{?R5@UZa5>1W%rihr}iFd$uC&FV)ohds4XYgTt2_+ zK``>WfQu2}iqyYD!9aL1~(>sM_&zfrFfP{gAYEqWy{vK@{CI_yR5z33~&_10D0!^SUfc2<#0MZ zLvbkNTT_j~ey7=|4&M!3w5r@pc;aX62lHn2CHW0!E&tJ7zF$Dyz0lQp^p8HUYT5jb zy**Xdg#(><`q7~9RgZt-o&0MlL=XqE-tGiFW5sl|8O8BK4?ehH;evC|J@07GQE}EYUJ@sspNrzSP$+EK^6ckt{Cp62 zg?w()w{CgY`~UMN{^0kDIsMpUkKcUj_comWD+2?^2aoQ%=^LB=_|N{=yWjP07spW? z-T3(%ANkqOmM&USsa1~m^{iRDMi@8Vc;kKd-FN1h%MKsD|NFPy{^y_l)Vj4Rl~T^y zdZTgLH-AH2JBuTkc-MFIb(9VH9`|CZSJ#wsa z-s-Lg?&-B$@WQ_9uU%c9UHtObo_*}`I4sTdb(uhyT`>Rsm(2d=|J(QD2VXD=O6?1K z2hAnxH(q-|_olDke%m8Qyqtf-htGNc6&oITcz3N)Pze^7JHPmUw*O?;KwDA&{`;1` z_nMW@9K84Ycl@}>o!7qe?5};}v8RrAx_r^|d<$i*Bc)}GSNgpO5C%b`(KvGC$gJ*J zMr$}{jOSdW6j>V^V_2;5^d~?0iH#dK&g|^`>%aepFaFI<@4o8Fj+M)TAnfTmHfz?L z&wS=n%8q>EPyXjkH{EpkWtVr)oca0B{rN*bd+0B2{K9$fIJefQ9qKvg`QD~)d~?f| zEjQhC(}oQjdwT~y`jOxM>R12iZ~x}6wAP;Q`My7CN@m8}n^$Im2@r@Q2TFiQTa!Zz z*@4+}h8N6Vw0ZNkT-Q!Ebg;Ly@$6-b7aV(fe|=$hdDYSx-}{d(cid-N%PWsXhd9~Q zRvvoChLs1N8M*IA#|HCr@<#XeBN1A)tgR%;!g9w4-?@B{>dl2xXOq`GYxd)N`#rzy ziHG+7?EWLQ8OsL`9liVB?f?Dk^XAU&+_t^1=1ENjvFa9hS}O-qq(C&qJk2jen4NQ) zARjP|a&@>idHc6+5V(%0wRdDopE``E`Wx#W`GqsNt}X3d@zNAZ34 z-|uSe=b5@|6+i})V!90c8$t?n_uXwI%yrOs?Pqw{(NhxCk#p2ovS5v$(c^2 zh7h#Y2#EreQcAJV#Kl#oXMu^7bFSE2?Ck8^w(CHWB%bGS6ltS{+4ubD>ES8Km^?Kxm0>BRfVd**2Baj6P7F4S>7Oq$7tuvYi zhek$5Mzr#F@7_H!Qt9g(?3_7s<2h^6TS($Wc=DnM8EWpnP*9Zn|>D#x)Decl9@F2pC;n3BA>Php}u1`kR_;OJs}1jvTuq zYD6`Nk@sS@Ls5KmsQ#B}sB=mNvmR`TVTD;iGYL;Nm02f)^?p zJ{+oewoL@eI`qbIlkZv?%)~;9M$;irbMb?SF!O~MUHI>JfA$Br-~N%``MtrOgA&z! z&+`kVD5?()4SwlMUtG0%)yF^n-{#Kk{@Ei>{_YK*s*Y4hDS}F3E2DW7lnS1ObNO5n zCp|qqO-)Ue;o*EC?;LAwk~qHTvWq|Wxz8Ow+#^EyT;3+NII5*r&cf5G4tK`u$E5SX zObSrGq%|mEwKmoSmPA=n3D}2iS4_ftRxh8?*4%aHefw^`XZsxwjcoqu$hU7laQppz zEwkFrTo&v<^7OVBqAM<5bneP(j_#e+G;+!M`N?o)>k}g@)-Jj9^6nOSvMW4z+47by z$nLHE?ek_`bmgVZ=3v=9w_ri*!i{UW)RIJ1)ZLmDGdG^q+BE#cs+k8azijcr0qpMS zfj4NaF8aaz8I6u`sD#9Kk#YclqU4+;Ype?zr=Z zL10AeLqB`y+3nAXGD%_y43`)sl+KAMFVk|yIFnc8fC5M}pqzzHNO{g^CWceO#G$wX z%V1dOd&fCv4G)>EJ0icUtCH^slcEv-{^x2N>p1t^`A6!||S@cKd;$h`fZ1 zGeNpeQ45QW3x4IQ^V_=%9vnnjr&x)vWz@s&@9(eI>l5>t(u@V)^BRqMA)mkW(o4@d z=bUo6TqqRQtXcEn4}W;=+O>^Fef_$1bLPwzkqa-p@S1C`nLmI2;>C+S&m*E`%g$V~ zWT~|lfM?9?*>jdHTLz%1sp;~|FK=sWi{tq0vseD+Z(i&BUKsk9U3TfLS=}~qU0vP3 zb=_~BvtdJ{Q3J4K$&#f@mxf_zt$k6(m52mE(AL(LuCL4zlHP7?*|LRhzWL_sufIP1 zdt$K15g=q3P_ZTdrl0nF`5VVwVYcLIBurc+&M8WSj#@qjkx-TERE%_!j(y*u;MJt4`#tNg$7B|qovO%n{bd&UV8;VG#a)(0I9L@JU3Hub6l)< z%sl$pkF9+E{yks4eaDdB7IFh#S;9_B&6-HtK~xXhThlfC{wJw!PgM)+4xwK?g`b&C+%-qz}v}DPW@tomIz;7!yZQAsT zgIJ^6oPmWbL!b+y+O^gZ=a>u-ks)Pt#Nrobu!x`pop(x17%Gl(UNKI565Rkp6^w6~ z99wOzhMyxvjXLF;0@AL*zD}A7@S~&}M@^$0a$DAoTJ^kf~adBq1VWjJ38}tyU_P^mQUik|Yd6=iI=+KoA7Z zxhRT^G0d#BZZsN=MgwETU#+#ZS}hF2IF3EfW9CYwl0GsZ#`6uc#Bm(Q@sJxfCJ<4^ zXy;s#B>nyUFEe8~<88>x67Xn&^fY-8L@)#vN`&B8Gn$+whJkiQB?{u0phUzcB8Gw_ z9J)FsVzfw1S^z5$Ac+7GBU&kK92`3)Uq`728x+X(x}7?J z(R%o!CC5%ZT{P}Ozd;wA@g`zY0V~9eI8vcQV1WRQc5f%BA4#C8FxJCJWPFDtfhdR; z8IKsHzA=w&k8~n>iqRDmlo0BgPi(3*TK6v9cgz|sq=(9c=7=cWEm5l+06wwH=~zV` z0+Dv2IX(602?PLXxMTB8pYPVx1fB;4GOU#oh)(P8r9;#4VeRWndchh{V-K6zjAoABdGAf_3} zo1y08ixl{BE+(xSotob%s$^!oRhfJ(w34w6jf6;(gn$@?0+0lwWuaf{@r{jSCqh#@ zhA-`<&RPaGFR7IY%$EMsGBm6nNob2y(b^BN{LoA~>i_(8S^Av?ljy%BPTslPK1L-{rq$l zN}7YDNYdMz-j3(EVl(N!J((g3O$GoIfhLMc0U!&w@luK7$Yk67j!uo7;$[!NOTE] - >Loading your data in the Power BI service can take a few minutes. + >Depending on the number of onboarded machines, loading your data in the Power BI service can take several minutes. A larger number might take longer to load. When importing data is completed and the dataset is ready, you’ll the following notification: @@ -102,16 +102,16 @@ For more information, see [Create a Power BI dashboard from a report](https://po ![Image of Power BI authentication method](images/atp-powerbi-extension.png) -7. Click **Sign in**. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. +7. Click **Sign in**. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, access your data, and report refresh. - ![Consent image](images/atp-powerbi-consent.png) + ![Consent image](images/atp-powerbi-accept.png) 8. Click **Accept**. Power BI service will start downloading your Windows Defender ATP data from Microsoft Graph. After a successful login, you'll see a notification that data is being imported: ![Image of importing data](images/atp-powerbi-importing.png) >[!NOTE] - >Loading your data in the Power BI service can take a few minutes. + >Depending on the number of onboarded machines, loading your data in the Power BI service can take several minutes. A larger number might take longer to load. When importing data is completed and the dataset is ready, you’ll the following notification: From 7423a83ba2c04a40ea56b113452bd2e707b85b66 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Fri, 16 Mar 2018 11:27:11 -0700 Subject: [PATCH 084/138] update --- ...rbi-reports-windows-defender-advanced-threat-protection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md index 7197286e9c..59c0511902 100644 --- a/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md @@ -156,7 +156,7 @@ After completing the steps in the Before you begin section, you can proceed with 2. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. - ![Consent image](images/atp-powerbi-consent.png) + ![Consent image](images/atp-powerbi-accept.png) 3. Click **Accept**. Power BI Desktop will start downloading your Windows Defender ATP data from Microsoft Graph. When all data has been downloaded, you can proceed to customize your reports. @@ -175,7 +175,7 @@ You can use Power BI Desktop to analyse data from Windows Defender ATP and mash 4. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. - ![Consent image](images/atp-powerbi-consent.png) + ![Consent image](images/atp-powerbi-accept.png) 5. Click **Accept**. Power BI Desktop will start downloading your Windows Defender ATP data from Microsoft Graph. When all data has been downloaded, you can proceed to customize your reports. From 8aad3ef8623a43f24fc625a27b8428087ae6852d Mon Sep 17 00:00:00 2001 From: jcaparas Date: Fri, 16 Mar 2018 11:39:27 -0700 Subject: [PATCH 085/138] add report refresh --- ...reports-windows-defender-advanced-threat-protection.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md index 59c0511902..7a2b7d1460 100644 --- a/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md @@ -58,7 +58,7 @@ Windows Defender ATP makes it easy to create a Power BI dashboard by providing a ![Image of Power BI authentication method](images/atp-powerbi-extension.png) -4. Click **Sign in**. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. +4. Click **Sign in**. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, access your data, and be used for report refresh. ![Consent image](images/atp-powerbi-accept.png) @@ -102,7 +102,7 @@ For more information, see [Create a Power BI dashboard from a report](https://po ![Image of Power BI authentication method](images/atp-powerbi-extension.png) -7. Click **Sign in**. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, access your data, and report refresh. +7. Click **Sign in**. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, access your data, and be used for report refresh. ![Consent image](images/atp-powerbi-accept.png) @@ -154,7 +154,7 @@ After completing the steps in the Before you begin section, you can proceed with 1. Open WDATPPowerBI.pbit from the zip with Power BI Desktop. -2. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. +2. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, access your data, and be used for report refresh. ![Consent image](images/atp-powerbi-accept.png) @@ -173,7 +173,7 @@ You can use Power BI Desktop to analyse data from Windows Defender ATP and mash ![Power BI preview connector](images/atp-powerbi-preview.png) -4. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, and access your data. +4. If this is the first time you’re using Power BI with Windows Defender ATP, you’ll need to sign in and give consent to Windows Defender ATP Power BI app. By providing consent, you’re allowing Windows Defender ATP Power BI to sign in and read your profile, access your data, and be used for report refresh. ![Consent image](images/atp-powerbi-accept.png) From 3c2adc710d5e2385c2365237a4e2e42e27470b25 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Fri, 16 Mar 2018 20:09:05 +0000 Subject: [PATCH 086/138] Merged PR 6430: DiagnosticLog CSP not supported in Windows Holographic --- .../mdm/configuration-service-provider-reference.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 3764a9326f..691891af81 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2535,7 +2535,6 @@ The following list shows the configuration service providers supported in Window | [DeveloperSetup CSP](developersetup-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)2 (Provisioning only)| | [DeviceStatus CSP](devicestatus-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [DevInfo CSP](devinfo-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | -| [DiagnosticLog CSP](diagnosticlog-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [DMAcc CSP](dmacc-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [DMClient CSP](dmclient-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | From 402396fbc2bf348a7199a69e235e7b0f35d7fb8f Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Fri, 16 Mar 2018 20:11:11 +0000 Subject: [PATCH 087/138] Merged PR 6431: LanmanWorkstation policy added to Policy CSP --- windows/client-management/mdm/TOC.md | 1 + ...ew-in-windows-mdm-enrollment-management.md | 1 + .../policy-configuration-service-provider.md | 8 ++ .../mdm/policy-csp-lanmanworkstation.md | 106 ++++++++++++++++++ 4 files changed, 116 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-lanmanworkstation.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index c29fa0959d..5b232fca9e 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -217,6 +217,7 @@ #### [InternetExplorer](policy-csp-internetexplorer.md) #### [Kerberos](policy-csp-kerberos.md) #### [KioskBrowser](policy-csp-kioskbrowser.md) +#### [LanmanWorkstation](policy-csp-lanmanworkstation.md) #### [Licensing](policy-csp-licensing.md) #### [LocalPoliciesSecurityOptions](policy-csp-localpoliciessecurityoptions.md) #### [Location](policy-csp-location.md) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 76e76e3673..1ec94b2451 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1170,6 +1170,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s

  • KioskBrowser/EnableHomeButton
  • KioskBrowser/EnableNavigationButtons
  • KioskBrowser/RestartOnIdleTime
    • +
  • LanmanWorkstation/EnableInsecureGuestLogons
  • LocalPoliciesSecurityOptions/Devices_AllowUndockWithoutHavingToLogon
  • LocalPoliciesSecurityOptions/Devices_AllowedToFormatAndEjectRemovableMedia
  • LocalPoliciesSecurityOptions/Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrinters
    • diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 4648284ec8..c5ec170ba9 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1906,6 +1906,14 @@ The following diagram shows the Policy configuration service provider in tree fo +### LanmanWorkstation policies + +
    +
    + LanmanWorkstation/EnableInsecureGuestLogons +
    +
    + ### Licensing policies
    diff --git a/windows/client-management/mdm/policy-csp-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-lanmanworkstation.md new file mode 100644 index 0000000000..5c860249fc --- /dev/null +++ b/windows/client-management/mdm/policy-csp-lanmanworkstation.md @@ -0,0 +1,106 @@ +--- +title: Policy CSP - LanmanWorkstation +description: Policy CSP - LanmanWorkstation +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/16/2018 +--- + +# Policy CSP - LanmanWorkstation + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + + +## LanmanWorkstation policies + +
    +
    + LanmanWorkstation/EnableInsecureGuestLogons +
    +
    + + +
    + + +**LanmanWorkstation/EnableInsecureGuestLogons** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobile Enterprise
    cross markcheck mark4check mark4check mark4check mark4cross markcross mark
    + + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Added in Windows 10, version 1803. This policy setting determines if the SMB client will allow insecure guest logons to an SMB server. + +If you enable this policy setting or if you do not configure this policy setting, the SMB client will allow insecure guest logons. + +If you disable this policy setting, the SMB client will reject insecure guest logons. + +Insecure guest logons are used by file servers to allow unauthenticated access to shared folders. While uncommon in an enterprise environment, insecure guest logons are frequently used by consumer Network Attached Storage (NAS) appliances acting as file servers. Windows file servers require authentication and do not use insecure guest logons by default. Since insecure guest logons are unauthenticated, important security features such as SMB Signing and SMB Encryption are disabled. As a result, clients that allow insecure guest logons are vulnerable to a variety of man-in-the-middle attacks that can result in data loss, data corruption, and exposure to malware. Additionally, any data written to a file server using an insecure guest logon is potentially accessible to anyone on the network. Microsoft recommends disabling insecure guest logons and configuring file servers to require authenticated access. + + + +ADMX Info: +- GP English name: *Enable insecure guest logons* +- GP name: *Pol_EnableInsecureGuestLogons* +- GP ADMX file name: *LanmanWorkstation.admx* + + + +This setting supports a range of values between 0 and 1. + + + + + + + + + + +
    + +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. + + + From c622fcf3239a0b5b8723b1a725d43a251746ddd5 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 16 Mar 2018 20:14:58 +0000 Subject: [PATCH 088/138] Merged PR 6429: Fix bad link to Autopilot overview Fix bad link to Autopilot overview --- windows/deployment/windows-10-deployment-scenarios.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/windows-10-deployment-scenarios.md b/windows/deployment/windows-10-deployment-scenarios.md index bab7d12f57..51a8bd92fe 100644 --- a/windows/deployment/windows-10-deployment-scenarios.md +++ b/windows/deployment/windows-10-deployment-scenarios.md @@ -7,7 +7,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: high ms.sitesec: library -ms.date: 01/10/2018 +ms.date: 03/16/2018 author: greg-lindsay --- @@ -36,7 +36,7 @@ The following table summarizes various Windows 10 deployment scenarios. The scen Customize the out-of-box-experience (OOBE) for your organization, and deploy a new system with apps and settings already configured. -Overview of Windows AutoPilot +Overview of Windows AutoPilot From 7317da6ad1dbbc8762c3dd56eacdfed34ecaeda8 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Fri, 16 Mar 2018 13:55:24 -0700 Subject: [PATCH 089/138] update note --- ...rbi-reports-windows-defender-advanced-threat-protection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md index 7a2b7d1460..36517f85e2 100644 --- a/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/powerbi-reports-windows-defender-advanced-threat-protection.md @@ -67,7 +67,7 @@ Windows Defender ATP makes it easy to create a Power BI dashboard by providing a ![Image of importing data](images/atp-powerbi-importing.png) >[!NOTE] - >Depending on the number of onboarded machines, loading your data in the Power BI service can take several minutes. A larger number might take longer to load. + >Depending on the number of onboarded machines, loading your data in the Power BI service can take several minutes. A larger number of machines might take longer to load. When importing data is completed and the dataset is ready, you’ll the following notification: @@ -111,7 +111,7 @@ For more information, see [Create a Power BI dashboard from a report](https://po ![Image of importing data](images/atp-powerbi-importing.png) >[!NOTE] - >Depending on the number of onboarded machines, loading your data in the Power BI service can take several minutes. A larger number might take longer to load. + >Depending on the number of onboarded machines, loading your data in the Power BI service can take several minutes. A larger number of machines might take longer to load. When importing data is completed and the dataset is ready, you’ll the following notification: From 8463f8f32b03d0182635442be2ebff5f7c786641 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 16 Mar 2018 16:45:17 -0700 Subject: [PATCH 090/138] many small updates from Marc; two new screenshots in FAQ --- .../update/images/outdated_incomplete.png | Bin 0 -> 61025 bytes .../update/images/outdated_outdated.png | Bin 0 -> 61088 bytes .../windows-analytics-FAQ-troubleshooting.md | 52 +++++++++--------- .../update/windows-analytics-get-started.md | 50 ++++++----------- .../upgrade-readiness-additional-insights.md | 31 +---------- .../upgrade/upgrade-readiness-get-started.md | 18 ------ 6 files changed, 44 insertions(+), 107 deletions(-) create mode 100644 windows/deployment/update/images/outdated_incomplete.png create mode 100644 windows/deployment/update/images/outdated_outdated.png diff --git a/windows/deployment/update/images/outdated_incomplete.png b/windows/deployment/update/images/outdated_incomplete.png new file mode 100644 index 0000000000000000000000000000000000000000..61d9343b05cfe1451322da90c015d938ee7e7c57 GIT binary patch literal 61025 zcmb?>Ra6{dvn>)JxCVC!PH=Y!?(QywySq#90Ko=#XK;6ScXxN!%m1H;yUyEvxDUO$ zr&mvZ^_A>hT~!eZa^i?^xNu-#V2F|uzm>qiz)`=BobM1{cZPYf%D+zE079}tU|^tF z_%}nSuivot5}Hn6U`RdxIlzBVN%?=>#BmnYa8|Z6b9OUyGzGIaw6JylWozn8%=(M* z7cZ{H z5QuMc1j2&2DJEC}z|kjCK}#uWpolxY7)^lp&>l9)Qv%JLREQS*^-#CK0g)UdGNy(- zCq(&i%h>9SZlSH@zY<%Qi zc83H>_%{`7O>tH{2oCGgEpv-Zupk22pNi`bW!2pLxc!?shqen za^@tdQY9hxB;i8Eo(M7M_*;bFVpS=7m6ADJHk9u{5W|dzU*h2T{$=^iWQu#VFO-Vm zNN?Vt2D9FwS2piorUj$hrUc6xXZ}NqfGSB31q zT(sD)IVuxuy}W75dK8u@e9I(=iEg1haDk~uW4|h~7MgmkDCLrAk;B+J#nXJL3ax4A ze~Dru$8((D!Bs5lf5U>vRB-EmlfVF)ekxKC3uqNI$ri+y)f*9`DM1KZ&09u)8!9R+ zP)ZUb3B@*ni`Jr<9$wwX%nx*~FW39h=UNEMpNEGB0v^}8KYiRG<)RA5IGEH4!$ACu zLYb^)qve}_m^n%-Bg`-Bt>|X*8N5Che@8VBwQ)z1E7w_l4)*%X7FZ+p&{8Ez%o(Uh z++6RmhMl!ivm44SH_k*^%*OPp4J>S&Xpd~ls!iWRWoOOCGMJo%lxfYGu?^9Z^4mep zrrWvwvxRaIG0O#uii=gcJf5T#vb{BqLdMcg8hsNrWtsvLnM@upbFv-t;4!&FbUM|rLd6@%2`+Uo23r>C1i6}pt@ix~Tp zo7IwZN#lBTnFGt1;tQ+Ke*sMXh%HkNZJa5Ik* zgW3H{b!@P6hcg;EYMEGbgQp(Zw%)rMeDktm#vp%rC!I`lVky$wyH6vwRQPwqg7KfZ zsgBSah32r{h zct5e`vGlb;p3w@0DQ)H+vbvzc!|34jHxPhlBKLu ze_VswOhmRGXgMtB8SmpF?i~Xf)x&?&x!%~1V-;&UIGOx55!IaEuS*bTt{Ot1_}QyA zuinCA2jx^*D0#MjoIAfz<@lX5SsNipEnGiNC3iw%5(#c|gTmT%v#nCMEU5;%B4)kT zX|lhqJh0~^`cwy~%U6ehhl}R%lTy60TQbHJ2-=Eif&^p-g-qy`#5KU-vD>*=Sffun zO3EsBx7}-#qaB}l+)kS5@w)7|FFo)9CIA@{JTOkFJyCfRzKW}E=NRAN{B-K52Ns8? z#~bT}OcECXS={#IT$*JZEiYl=7Mc_DH(*s%IM@QrIEyOP6MT1K>9+SH{X*M3xo&3( zR8&$cxyk?NZ~wF@&X=l|nB2HR&Uf%}D=Ms~rFq+{%gC7O-il3vg=nNXal1T((r0#0 zf31qjxTW7a)@|(!~jNsY1JlW0BgCqey>#K6*ImhWs6I zxkH@VveSKMYho$9y(Bq?h==gtTw#saWHWPL~ZGk!AvkUfsYU%{*95vp9Q`BQi#xQRondt0VW9YIBT?tHRu#hsRW zrzK=OOMyk1THRF9?AadaS1Sydn!kua`t)4su_}P57k0SNF|(gT+KMWwrCrk1`mWVm>|#$@z7G$cu5F=#Y+ zZl_gX)i~YZ&UXie^)_Crma^6~G_akr@57&%FviDkt_{?Gr9w@4Hqc;6-Gj8M`He|A zafo<2K?BW5oISdnrG^`1@!>y}P!ZrvRuu#Fw*SdcB!u@Vl^}>A6{uA}LkH6I$iQ+t zr2eKz8gg(892mE=jFG^O$u&aYh&(~l1&}#(lU)+& z2o5*s z1b{0Ib#?K;RD^F)(_OgFvsnStUwfO}nolW0l$~Y9;YYb)0d6bm=^<^)?!`-XF&sug zVe*1)-Dl=fm8du(0|OZ8MsEV>zepqp0)g57+eCQ(&MJVJmk#)qOs7}d4}2*A5pzPr zpu2rr-66EkAOH#(>%(c{D(F8ivVKD5GA4mk2X8%Rb znL-@%5Y2!$3Ql9@YTb~;Z#DDOe5wDSkU2aB>wU?9&7!tWU&{n$_FP7@?1AKr2U+G1 z(0Ms=1&cR6Pay5Jzm z7iVU4wAIy>7j+hit!)yf5jFzFKJTHtmIOKNCk?Q-#za)xJ5?tP0E4bC{+(L{zXISe zbQ)n-UC(2*Yn=N#H$JBZ7JRQ1%6vt{5UX)H9N)aMJ{bY^$`URf2qiS$(B^jSlZGvZsr7dYy)|Er_=m*X34dso5@L4!j8dH6L2@EeybI zjTmED{84N~1pBak9w9BeY;vp^BJbDe2$6EJr6}*wk%wr*hAL!H599Fjr|qsRRP+z- zn=tf4C-Z!KX(`ig1_;Ck`ii(ZOrN_CFEz5wY8vw;U(j@mlOK^%+SUhT)#aMq&NQ>T=7nm;f@*L!H!mtk@;2%SS+?(C?c}`=-~HZCcN;0&?iWtU&cvf% z2g4`j^@nmK$uTG19EkxMs!p;SPt$p!OEEa#fH>C!aj59xOR;!tM!@xdPrI(T(w#wiU>CkDX@Y_`A|r#x$$P*T7EGQoYO zyva^P-tb^7`A^Cs3QD3&(m^CjB1wJ+#lq=b25t>_z{euc5Ro%1V5nPXi*vtzY}fd_ z8{5mNX*?ys)eed9vwwpOU>-9&I|MsnzSq@>S}1@qc(f(ei;YwB&1QRy0Y-#V`CmGB z&q|uT*-kZ6mTqZWx(3^lbun&KfN69aV|joXb|~9+IXX;nSVN{C3y>rOGfdf!tRi9Y z*OTE4N;;^4y}{>v<27vjl_@M{_ZI>u7^!EJ2@-JjxAd(*02KP z7BXKEAUJ=QLARq!|o zUM8G+6nwOcs9;J2i9vL*N3e~S-B`1tFf>LO)-;vFho{(T0@(JW#$edXhPm^@ATmpNZfyR_8F`y$=B^!rZ^mzoIG3{+f^KzJ)@#zh00SAtfeW8YvjWF{P?_weeY( z4d%_3<9aNuwK?XRqcG-*dKdo?^QyO`t*VyiTBR;?|P0oD5Tj=1)qtopTEe;PWt zkO5}u=F~$%Lj0b#^L-)1I_9jptllfcI|9O-rIi;eufF8Ew%W8193-d6ezf$>vZ!U!0?6Tz)>Fxf~4@us~qWW_y%^ z3@CT5uvNp(7GbI4h2)c=&>Y^2-Ebd27{`K+5%4Bak9;&gd&I7(D=eZt;hH>kYI8#@joe4$RYrX~yE2@c0&=pRzCHS)c1Sf`~ZQe9stPK|yCz?Va~{ zWSei+?N;_>D-zp1-~v*D1t7+`^r*D4{O@H#KAE+zXXBU2C-)dI(crRO=A3FC)_!&8 zSB6yxSyzAGTL&jhjjQgjP@(^`&-zIk6MD_d_Rnj^*6UvDL8N*wuj=)qaGUPlP=wn0 zEHGXiGY-$D^Ha4cf|XbTYnFu(*E##vc%O30s267k$-Lk4gg3!r-7yLzDL2R3?_zE5 zC)JIAC-n0K`OK?HsUUyeZPW~`JluD28X2s`6LJjBx@@e`rbU8VGEQ2Ci1>!=JZs~jf!+oxH$P5D z5pFW8s!4a_oz~tn3WP=iwmGvog;hmkJtBc6U!6`=JH#4~b=SGm-ND$#MjZAL+v19( zdHdD)ARBRil8w!m^VCy_I{YG$QJg`)gk0|dN_6Oz&ihzHJ0gBJS$Ny>G!}^+H=EkV z#!IWui6O~a+S9bIa!7U%@;Rrm5_WyXtl!(TCFk735efT4Z~1wsc64=34XA<8+SrP3 z?IC*GEdL8E2sz&@V!wK zNO#jCye?7RLQ1i5d?F`Va*KnFv~h)5d-aCaic_px%*5l^uE=@Vt*{o?SY1M_C0za@ zU0;H7s@8HY9Ufp{DH-{Cgc^b*oRiVWjb zX*wS654d_cYpRN5}R0JKF=G-()Zj1DW+n&B5|W)w5=SkQE$#OKv^_;4M&7ZeC+XtWnI;6 z@IIey1TB^F+;)Dav*57~;rp!jY){eEOl@^?-Um4o5!HqK=0Zf7?RZ91x2 zgRy7q)7I+`LPlvOMlA&!6nv3v0TY}URnwvi0w(Vv!BtpBs{6+0u9x)^7g8vz{Od5Q zkrC=F8GQ544S}%EbZ?Td`C&eeUqqbNbJ7h72X2E~MU5buqAc(+%&FD=)%)5zqp!)eM(8Eg|CR616xFEhrz?--e)8wL!A?~Vn31WOOel>+!udV#o~y97CRcqh$O`E^o}NuusgZ zX5wW2ER)gCAGMbN^HX?=j(3tfHHMCl{`fP}854uQhMj=zvG=VgrC%)%7cfMq6H)#p zhmj9Nrpa^4Q{hdo;lnq;0JE(qPdROl_gcSIjZUUM*WCK^r;a>|j21odCj(|`C}oOv zwkg{le-c+){(!Hf6S2+<@YE`R2~qNW_aYMq9!z7h9JVN2rtEMX50(~W3>=n z36Qa@D7^`r=&Fy&N3*WJ+N*!R}={DfsuE$9{+ z#^P+z99?jQ*C}l17|V>;U94W~0mK>tfbpx^W_$uO9NyTir|I}y>?WbX=Ydu4IabxW ziIo+{+QU7GosZv}6zuQN$r)nsYs7EJEP$a{hHS{dhhQ%5bsK!*TU;a_x;*kZ(~5b< z)-P6pS&jCZ{t&6k7|fQ8f;NT$6UCCgUeR=KIl0~B{f?34m6xnunBi_Z^?gQ6@=kDl;4l9gpLbaA-3Eq!; z(p(Alvd+r+&bpFgQi{Skmyc|Dw);>DNj%k*S?q2A3k!@xZA?S9XVPT+D=s@UfZVRG z^Pbd?$=H{R_e;R{$}C^2{P!+Ybg$SqVwz(JB;}|LgE>gb@oE0VCIR4fvK2yN?%7)( z>VpZX*oJ&}+(z+N>ZgK_#(@vLa0&4NA5eakQM>F&9dE>l z5b6qt2q?XCN`IYfzuif>?m{oOb1k_FZ*p`rsnB&DGTZHs!RK|j18!(C)Y4MheCEPY zgU&XwSwAB4$BaVT6!EkcfhQsnug2+y0GJ1sekL1RtA8siD_FNUQn^*HMbYd#-Fdnxf- z;@}^Ij7=|I?PBoEI9evd9~V8&XB3)-MKZ%Wv?~d%Q)FIVLM=hR;qIa7!0%zi|Mh3( zf@_EYO!Cnjj(aqf&&6WCK6*VnYm{WYDX!*sLe*KGesI zjOI9y{n?eZQT$_z{TsG>3a9ZRHsXlYUZW4~mu1?CONyib&b&6q7fN)P<<9$?D-I<6 zp@OLs<^4he51-(5`!6(I_QUsKl#T2}?LOpXybePH3W40brm*yVlH-$*qv2Sv{+J1w zr-kHzFDd8&Z_nKlLbX@5R%1X7UOrzOnJnf*=y!v*WIv_H=#El@I)QNh=+`7rD_r%} zkW#9-5mlyGUWvvx_`FDAz~m^A95uj0rv;Z4;)nk#YQY1-cXkvYgZK+O6VfBTzp+5xF)o*WLcdIx*GLz#Evp@vVuFhk`yq%RQ8Fw(@zdvCxmM z!G*)bWi&YohZQ;Z=iT+^6*2U+cr?>LZG?{bFo?FwP794dX+R?fPlcS=avD#dK*D~W zh+MEE7;Xy{m}X@XL>?%%qZ@v6-U;7!Md@8lNNy?14v_rLkB=qwZPaW_(5e+S z=$ulx0;$%AKrG2np;u$r7-lu*+>R$FdHgqa_&>WFlrl|xqU`7BCrhqk<{lhfHOun% zYN1b#msYpJ^7-Qc)V(4ZM$FW@ZMo4w4Q<3)yiLH|U>LKlIkD{9HY?J_febHx69bUM z3(6p6o5%!_KTkfu5TB^l=Bzj#5(cTJ2G5kk68PiJ??1$j^Xe$j8rzxScCzCF1d$GM zlMSM4={`WC?^sCh@F8s}rlQQn{PJk9Gt>K~c1`9;@;wzx#! z=YS8EM%K=DzF%#=dm-bp&TahjgL){wZXh!(1}}4$=_Dc3JGOi6E&r+6ENW7KiXFJi z?4eI>i~LpavRTPVQUCmSWAPD>{oLZo__t(h;%Yf(!Fuz6yn*{UVpY{KHQ5lm?v;di z-iE2+E8xWA3k%q~DeNNlPm9IGfWP%-Oq`x!R=Cn9w{8J?P)u#Ql?ClW!z7Pq`mVZC z?qMa-&TAEW9##7@uII9YUIq$7M^-{hPdp2d9`htmu3(@s&JIpaETIBVXoTvsD+5Ap zuPeQM6~OzU(ae9;)b!*Ui^se?KeckU*se60_7+xX19jd+NdL;`tE;G4bzeXwq$&ik z%%Tbq>R2Em3SXo*IDt>#RsB`ZYxEeFCw6nqdPE%%SS!RW+LW8*3 z%4glKg6s&*lb?lhHzpPrfe@c#&ikbrr1#nW{PGV+xmq8(5GuJV;p zxzPr{bMG8MwApotwz;Th$9TCnd2FCsaKyEu1abY{{L6gf!Gs0wiQRFe5G{za0kSIL z)*0I>D=m|zbWfhp-V4qT*%(*t-rVQAI&$3bNJzF7OkTBJo2J}xRo_Vp;QwbjjLEKu z#_yN0v5h>Ky6#{T;dV}PhXJq!M?gbi0BcloXW9{wqO*+?@-SZ$V>-g&tK8nQ!8duT zU}~S9YPr4I<`serq9EufoA{PWUdGMJPVf|}7!}$ytcN!cg&Ic|5dloV;tvFPv&Zvd z%couCc?@Q-^M9h15nDpn%M6cPrYeIoVS$tIkwrP zR0|T<$qJU?;1CWJX~uJP;4~Zy0>2L=W^MJjcvneT)q=3 z{zsE3r*gtZYje|uB>bQJM7;(D@orE!8WqzTtuxbX&qn+$f0xE^sr0utoBj%P&w3!Yp#zUs)pMF!j(IowOz{m&}@fHos)Aufy#esGw-N^{(N zcWPRH%rw*HzCpP8KO;f4kULsbimbsyVwGz-t|BmtDNe16Oh#vRqmK@);Br_mEtOLO zyP<=%$dRdq$cV2cf{&0yP&?GYbiRYvp}ZP}jaUZsQDR8mx*$(cF~Cl#gIaX*@fP;>ZcIv2KdoQsYxin^3VF7R zv`ePRHvE+(HBnZ4e|sGhzMP@2gG#uykJ}<%q?&5JUKyOY3z!J`=KdNQ8j&Owop1IC zvc}wD9hxxJsi3b~0`a}Iy9r$1N2?v}GkbVB-??&ZZm}HJA|$qOe%^$v;pOl=D7!2s z$Y(vk{egpvR6?P};Sn<@>Zto9+d4#dI8&1*--(U^HyI0fR2M-Q6z!X=@8~wT`8y`-KF11OGjC@d&$J&i81lV~(Zh9kOT5r*U}RQ;bBG z(-FH8-+7(sIQpRHAAU%PAspqy!`DfHBv0^V=sPgv`8-W+f&Gel-ltf zg_xGQ_BH_u&JF=~D-SixVW?Wg5)Nja)8=#@_3*t*KM4sq4@A&okr_miEVRo=M4b(| z97*@;$Nhb-C(ihE%PwHnN2J$y7ma)hCr#zYkAfT_a0j87GImb!bAgA~Ed47MXV|Ez>|P%`^HT*LgM^OGOCzOqmwxSUN^+>~UxQ2>_yGvxC1p(hh4<$uxAuKIEAhnXT-HrX<`A|Zu!CMB72pNWqHpEn^|Fpgw7 z)wF<4^TyiDV~t%$Au>i)lT<#uYoy5eU7~7YFN^xJ^XA80{#^wV@%TmhAd~L70;H{L z1MiuU`xvDH?~AeHFa}Kj(SUa^4i9KXrE@rdda);2UMn`1)0@sewUq|bvLG~X?EA{E z_HdO>@a!eUB=tC-D?gu8ch9}TVeU$s>V;68dqp-b2H5zw!sTrA56($dnq&vy%UEh% z+!i)uS?a@h`PtYhiiq{zMh2{dQT$#|EPn!(>K3!r%3I=GEwjU`xLv!lni}}A?g)3q z{BU*?Jb{~_0}|27{dp+1Lgr0r8pzIv{73!I0v(NQ46p|6yNRoN(DKMYO{~CslPFzs zgf{=1{mjEVbtm$~mY}ghL|SDh&nV0R0GLC6(Y2khxSI5o@ZOM65+SW?j39L!JA1%J zm7T6wXsQQy=Ykj;{$_S!y)_0$d5NBE$GEjze2@Z-m6dYVLy;gf%tV?b^RS(7L0Tb% zjKM5n_Df@WDmUEKt!(kQPRvK6FQ%`L99=shO|!}Km=v-it7S&N2w(tFtRmS^u1odr zPcr9#2pUkaf!=wuAX1bq`hHU;J?C!(^>TC-fMF9StI6we!_Y zKUt{I#ll6UFSb)kV8foEGO;*zW6AjGnA%On<8@#i=Z7)Ixz+&P1^iY>gqXDNi-(2Z zses+`SQjxJnEIp9N8J0(H&y3-JXzp78(ff(vYOsL9=7KYU>r-CgDM~QlD^C-TPE>$ zo|62tZ(3o6?Lwfbc6*T9*~U)!1y5_tj}7$WXEC*o;9 z<;6!73n#4dpY$94lyhTYs2`LU0`}Wtt+)ak*|M^HAp6Kp#d&s*gC2GQ+TxLS^OsOp z2fRDdG7eid?0edbb~&A2f~y#ZbQK>TsPl--m?JWc!=gRN0$CI)+jppDWwn@9mgaxO zJYE`)oVoM(Nj(p{`-1SbvmA5G`)5MR<@jt|{H2gx8^lO|G&gw-?cIzMdTB}x;_P)B z!b}2^*jd@VS!`NVs0$POS^l-|VJ_|+=rsH0$xvEwy52pNjFB?B8KBX{H<$u|nOrWe z6%bjI5Rv$tL1m(!JaPIJ{@azwlB;S}8>M;C1}$9zd?{u-D-r0MrD4NR^8+~hkq1?k z7_6bc!;)F+yHFCF$Vd$y9kBbV00-V2HkAq`OVy656*7iK+9^&II_s`v?{Cp_w`?XglS8I9{XhG&d^q5V zJfJ61$-9>NBk@=EX=0MHxHB%$YQju$+>-4Tc+jO)lT|{YT7DK~N=vj18G)T&9Qk-X z62ySewp2r(FM&)<%U`rAQ>Wii&+uL=grOY zI8)yy?J=L57`*;r7|;3rG<~hjfIlHuXyV9z1oFhTvQ0nawFgIMpOLzsez6mH`p3yx zO+{0S(dof4r<%Yz`#yc$k=8OB%@4@bDOp-x+VnA8_d_fCO=@Bung4UZ++?B2J#(TX zX4L#iT3%J|p!sLy!Vm`TAGO5=mDc9hpM=~H${FaC6Xh#ArSsF<8y`j)a&{&SqLWjH zr&%*lUsnUYM)SVWgKF_s=m2JPJ_+0Y({Nc4dJ=8t-F$!Ndk zJ7bcot;B~mjHiC=0d!OOy<&dr8iBNNGJWBdo)seA-2}(Du*OyPz)6{|8bGU((=W=QR6`HNY*5YdSQ%G^`hlRin z0}34X_b&avns+Mf&!-mi_v74}&pcTZ7IyJJ&tf!oaEFibp`I59+HZ3d$YWL$jtKKasaOA1D4W6mT02~em!_p5cDZ}Z?=m2h+$G^Xl*&dR$D3bBHDDkk$(P|k z62v0m1W%hA$ct0qeL`c$fc!bkf(c_C$y~$z)vLu zgD=CI8=eB$RP?89<_225<9(@Vrd~`!(c}Zt#>5WTuV&Z%p2k_sO07#@KC*X5Tc$pH zDiYh1@(|S?GqIm~+)gWXskiFQFQ-(`(Sd*0+8m3;3`M%%nj;Ixbkf}4$m=-9J5Ayg z+1YgT+f0VnOv{|Aum~lV;2Tnt^TJ{i2BUDC@*W6C%y?B3lUZB_dOW1rp}z&6bJ;88 z%(!#6(%?Y$Dm|++eCgWey)YW|8UrUPHIW?~;3%7QK!DaUyslpgO)J)EHyLvY_>~5- z4qC|Ps9yOCgpV|n)2(&&*{jqonweBK$24HDt!&bd{sIGYiSR`eQik3@!r^Z=(zA?# zQy6)R{_D|JG1-m?;?o#Q^#*(aBeMu130Z)iZ{JEs`@n0>Ymx&U6cD7X<_#!Bc)2nC zBH+3FI}n`Ha)tb|)pzfrBE%91D==bEan1MZTu5;LurW{hzo}u_b{${MZ<=%>k&hw{r|)*NHUMEX!d_^JLCu9^&qqtyS{rxe7l{%9AVq~$mp zFbP3zt2_a8p9ZcRHHWVIvKmp&H zf-W^?`V>J5G| zm`B3R0QFaR0NFpR_HKR0$XIl@0{d7nO)wA0`k%AVdpL5t*$!QJj7T&Pp(IyupAK_7 zZddMGX|z$s&|bJPk5I|N=<`8dtdvVo6a5^iJ2+Xx4!zqb6B zNuRqnz(!vLAZ2n%C<$t5%D>T(|NBn6478!bKKOy0|E*0PJ7WqG46abk3LmIr;t1v5 zwKYX4h#tp+hFa;i1r>pt9^EHR1MwrS4w_RWSfl<3nVvYGDFUpvR~&vrFqY(ItBcWG zv@O7^U&cx~I(@dVI-G!zU#RurC&@bql`&EfugU+2M0f@o`+Fo3PT%itGBIg1f7>Wd zBSHy^98d%d*hjy=268@{?+-@ME91nPx`B&pytZS{W)NYBohrSr5R~O#l|oGmTZolO z?}zF@s!Y@|B|T(rD_GXdV^TgS{vYjnvB;G1{6r!1C5etDGT^h=xU$gr+dK&rd_8vX z$hd&-#7>McdF){BEh(34aPWYqmjF+HG96dPLS@tOKhnIPo?D#Y{=tj{%qcmvh2M__ zgW{4PQ*vCk5n!Lvdx8dVjH(4wyY>!_g(6 z!S>fg?HbmGYe1M;2KwzU)3Y-rkl85ycZmw^4=P8lse=P2)?gMmi=xEj zWKv!1+e6{6y>5|!KmWnN=bGpPMd{7`dMN->)6z1fB2fHe+D`Tg;CkZXcqoDrSPaYB zZ?0YAqZ_J1u#G27{Rm0#RjSU*+FNzvuCTWZ-bCfvb&wG$aN1-V3@5?%ZRR{uiLhW1y=-; zsF;J+k0=)A2;oXn>+J$O02o|^6iM>PZw}n50UhM;t=pJ-Tiw#X1H?_#haaQH9xoDY zpfYnfczvaMY}YW~)L=X5CDa4vTAwd}J?rVR%qA#piT-V}yZ%Hju!7p4ScPk86jl#- zIQf!AFwzZvMwR&HOVW|`gbz*KKY})Qu(Vf53|Gr)TLfxbutGiXZ4LXoKP7&5Ag{rR zBNOZC*1{bsLJ>|s6DmFvPA|S89}rqA|G}uq+KUn{RFH~ifs0p4Dd1#Ux_(v%68VfD zgLtGEiUvJ-_&2EAfrNhj&!DWo>KUytmlRdpF32;gTecjZx&_*D7v%D5s$GzMSF<~J z=7U^Bs>#}&fB?@^wFKRLfYu%W@2-JZcmDzrZf4w%7ir4u| zVK18ppK1X>143?Qr&j;}+D{phHz&m{evn75>yY94(<{C*X-YSHqP1RFy?GLGW&J-A zKdXWBdDm1e?!LEY`j2+##ok|kI0;mVzk2eo5Uos~f_(L2(JOq7{1Xgvl@%O0T@pv3mKx?}#)0+E()A;-v`TKHw(#6c?ZHetng~58h z_Lc1o3%zstr|k?qWh3ms)hq;IW?LEW#^x=oV~_a!{lcY2%e)~+z+YFZkV*)*FHfOZ ze{)M{h3WK~A^y5Trz1eyz5Wsq!U@`okEQRv%2@ZcbD!5ccQh{EwhGDB&(?o1;hm3= z;OKcza1tOi+zPkJ(laaw*o#X1`zAc`oq<|z#l1r!_b8K6PcR@Zn`7T^I91!pu?m7M zMD=a<#$3SZ^Bcqm&${2HaN;hd_?G@U>HigAlcFni@Wm7IXD0UX%S=-RgKd@Ib&lrnHPXB==Pg!GY8D~jN)%kGUWG(;BtPNC+1FYaklXhvV{jf_{`>R2{@rVa$p{1eq>G;LQpHY?iI4nuu~8( zF(FH1x0e6j_r@%OaF4A)(+*B~#5->U8eA!G95B1MfPl1@`GQ^i}8rM1Wjn!XJ765-{2Ct`H?ZvFoeZp^f%p@4zR`X?WRC z#$kyM^R^&1h~-GVE4yy>iPhr(M?#X6a5==KfGM#X&)^hNZ=`Nin)jxuQTpQRA3m#8z@$i z)MY@X4)^0cb%aGN^K-8rPNlPI@Js1%Fe)AmS&vyS9&L<6=c=?ElNoM#n*EP#RwFCo#< zwS-?R7EH^VO)+iplkwI$TNOa>{zY0K>l1J9x`&Z&n@Iom!^sZYRVa)%6aNUQ_cWn> zo#^uN<%aS5{Ch62edH{kLTBuhZGa=*D?} z&M!aD`PX5gi_dBYpZS&j{_Pk)kZ=#Lz}kEN^n@SY&dT7x^L%`zAJM_{*r;9=f}@v1 z{;0I;uTPF|7!&WQ;I>s7tsmnP=MnsbpBzKCSq(8&F^=B-E9a>~da<1cFO*ag`jzNLNqk?YCtM6IIb&a^ReABUH)0WcZ)9r_W~w^2HlPU)ZuRx|>Rp`ChK8U;FST zqJIe>344%ZSZU?w7=nj;9Yaap*agBwI|Si=A9*-@JbCeUb|rgX=MDV;Sa6WZYmfrWZ^FwVhl@9#}tWFY8)*$EnUHiN|vd+)_{tA4#!IE&!uT881W^9xBFf&rJP{9hRRY^+~} zRnGSsd-L=PhFrz~N%6p#oTh5TUZr@E zjUU^7@SaTK`-y$Qetp~3m^XTGzx+1DShYdM7eM28yua{RyJhzeAKUKyF0A8X66qe_ z{QSPh;EXv7Z|nKwdu*pK2JbGAW?ME^pl#=U3@lcU=<=kBsitMiQc)wP-fhW`WBKq~)@(z4ll5tULDg;H|GaoL&)=7qq`3XhGbtflfm{*f#%SW1RCLyO({eKacwE zoFpwO*LP3liV<#)5A}vg=hMACU$l0A*&4f>e-3dO<$P-CCxNew^m_ai&*%Q>-hXNA zoc-1NqjTK-GA4t~{f6&1dvaoS=Pb5z{ezYF6R-JNjrACJtTf2woY%hMHTD}{o}0S- zNMT6w4S&azpV>kOfrIv+U-s@Z+Uc`v(&O`YKHJyxpQD}LD`-6xe&*|8UVr+B_diB% z{@_x@*)0c0Si3(C{(&&0^X}BD2U%cfg>KZw`5(S#wrsdEqmSp~qud5;zv8{CB=}(c z&J{`1`?)?b-1CL#!oW|%-h9dL&;7i?y6GX#SP{-ZXL(1?40d^UThabG5oj{?@%;Pf zK${Oj-u@=cc8tfc5w2E~0`0yDvbFJhd*l8E$@yDf_kFoP7$+XDj&vXTUeNG?u77>U z{iS!qN7=dAd>1(Jv*3x}g}(WQ>nkH%|NbwZ(fixb)OV_{S{)&zJfRDl^ei<@$wBLYX?gJ)xjhYlTZhrK-BID8by#DYSb{qd^ z4J6rW|CQfoXVd{>eIB>C!B1VP_B+U>93`qIXs-zLntF7|oDe~eq*!M&CK z!Ko8o_87c5bL-;mvp;bfm#*`l5d0DjL|%U#;M?!Bpb?Wo$J)EwPjr8`Ky_~Q{&&ZC zKlY0EtFL;!eOVOxWw_lKmx;;E@uN2VY4b&Yrxdpx*VhbkdE#B)e@yiKI`FD*NcyLP zHupPlJ$Qc9f^D^-U;DoBx%24Ll9;i+|LE@xYVpTDuA}B1-H=inkW{vEpw}z5?w?#} zO}pCYGS2t$*IfEf-|0}RE^#x(9$P_ZAOx30kUsRs8 z?lPajUJ54$T{z=9F|=ss^hmH1p6%oD>avR~r^HN+%3ibO)P{xeb9UxzoDppOdGeHv z`==)rtRETrkAB{N?CU=0-+}+$QRz0s?Zvgb-rdo-ed^xXb#&5?dp}rn!f|g+t(ZJ+B7K`9gZ_zawOV9K_Fz&WvBol$y^^nDIE zGr;Sg@9h3)+3s)G9#|1w9{8E}m@LJq6^AB{34G)=pT0x=CS{5@z3%cCc6D`{N@1(!lR+XF*2GX4b>BMDbTsku(oZApMmi4OTa}t3IPQ9U+)xkT zFiu(?D$We?es;9`Ylka#jPZW;HIF|I^8D*SpQr4cUtM;1n)kIe{oEe!@BZ8m!JkG~ z`#$FgX3>Aj898ons$>c&aHd@@&QhjzTLZvZ2XY3;^9&GRi0hkSMLTCiKGo0rZ?Cxy z9PKvI^^8m0Wsis}F0;3Pn=A;M9%kRybHM!VZ${*n?%o_(^n>-v=MS}|ho7G1b#B?t`qREAoK9BE9_0DwHv?u|F&!nGd7+=zUk3;N zZR6!-kpWN*L-vYG?vD)J@~=b9@k{si z9^~}NSc#u;2U zYtK@ixs5ZBA((>m^2h+!_kxRJXGJ~U-~SaW&xy%x2bRTsIn(32U6bbI|BpVtqS`hMa+C0XY2#@cTZ$|Bap^_mj1C8lVy&5Gxbw4eTH!}C^K zpa0vYv5OOz9nPE9+x_W}edd&LC*St?Lob-;cs$+T=@0$9`VV&b4fR*SjSWhmXUSZ?Eu~7WHa>_W^VFPT$$+ zJRsn?zTVHj>pp8|-MW9Qf9cKeuL|X^HvWJ6yZ75(c@9CzWBY8d-Xrkuv!UMr_pymt zTW0SYGsyc-L)@%f9UwqDcPa#Vuud*`NQ*meO~hZ`$N zoNePu0|$HjX@IBw`<@>~TwgQH>5sNs|J-~1JA0}_y^dJF=KXHi`K?X~nkG^5${@6e)^^?85q1CVt<`wG!mi}Ik4f1^4*5$>$#Ze!}j(f@V577GzcKGXp zw6DHC`X zuG--}|M#|+`Y%h^kgbiIe`v_NI~OL`2YwT5v+mrgJ;mEr?Ehp@#^f=L+n{{rxZZ%*zu- z&q@6JhutHGIX~Ik{e?GzModlo^poh}??m<=?E1=QyWX9=f6`|$LthX2>uVlEzKR_? zDQ4(U*B8Io{o&lif4?2sZ=m;!Hoik=9{%L39dAwAX*10CiQc%G^TLQg+sTQa{LfANIU6ZU1|Nya)MY%v_rC zE=<@4d%XBn)LZioemV2tzrH&#uD9#|*?SL~8vo9hvDSTE9_{P-)T`bvj^8%uz2F!B z>G6C&*WOe1eLQR5yJLM{>hJo*V815^dOm04IcVyE&%TTu|H1bDgWaCB^&S1){x`-3 z{&k@5BmKRf>gVvv7kmEw&Hj;AxM==tAJ2bUx&L!QSf9SG&%EXP%G=?+2Ri-jU)#pd zI{e9)fEU0d9_aq+4{;xVyJyr8=SK#4Ju=AiFV=qc|B4tq#1p!qCkJ~x|6#<4F}{7@ z-8Ib0<1b^pUVUTR%l$q7HagV$z3`WYc|I`+tPb3HKvj4c1XO>Z=Mw{5A06uO*O)Tj zm4~L=ZGCy9^Q-Si*!(NXYOF`!@tX$6Rc~8)VJg32*fk&=|3l8S$=lCMPgr^Wv$yBt z=0!7HH|xro$H7$V?e<35p$9uUy(Hqa79PIwo0FNj8dOXwD z^=T+Te@}il4Sn`?dwP)jpI-Fn`$fXH7n)p$di`aP`x67)9)Hc_3Ebas{Znt(M|wm2 zkf`g^{ahaF>-y*39*_5d;(0tqkdVDvacr!&+}Q-5xV!vh zA6LlaqrF`o11lK>_gm3ihB|x{x3fH-dd=;Tm)&qPr;pdOWXge!M>cK2&(lz=ecc}! z;LdMUKLZ8n?e=JI%mB%@*E54WAWkR?cz&uc=Hb!4u1^f~z$764KIYi4$hk(}WM-{ZYJ9(l?APkn(-9{3#OKp&WaAsaytK$H4; zJ_kBYR1Hc(HbbF=9-yz!!00y^9~tU+uFgEdVz&Xc&>OgiB!6}QsG|?w9pL?RKW|6^ zs{^VAAJM}nFY!T%fuPXf+3V>+KF{}e{|ofWgFPOBTcEy!ahLsRh#v;@KAw*N;Xxgd zZ@5p4D^b7%IO*m7Xg}b*=hFjW9);O>0zAL~f-zv;K>iH<1t#tJOkb~OUxi|#y+j%Y zH5>H%*g4>Yd(*V7%)XR0fAZtflG*!Jbr;~(aYzN z-uTSH)6jjq=F|DyfVu1sgMcDIJzy>QJlWUhDNw3$A-%&&-7@4y4z@>b%$;TvgwL4u zaR<*(^Ea!d3unlqEoRQ(a{zZF4RA&-Qz#@#+@BFEg;}!W)}H_9!*h=Gtf1mNTe=GA z6wTugsx_`TK(G85cn0a?iJdg>;pRgn#2XQOu(Y2KF|{Ees3SS=;sNAIxW)T~%RXKh zA$I(jBB%?V<7J0`vuBbSh>$oE&s`!hJ9fy;crX+e6Z4Pmd=W@&ymSO7v2_U4e%CCS zqb1%jUH+0UIG+uqggLC)+fBzVL3p{D7PJL_(kbARRBY!Z9`RwE4xc1QS26qijSEp2 zvmXBn!I74i0Wgnse!9Q&v;ADj^I4F}&3fxzEu`m#KIo|d&VT*h>nn*)qLiqVauq&~ zDOW1c95aLGj2t+lRH!71mTdV6YtI+?=Kwn7W+u9cnV=T2NKXjSv`($-Iq~FY8QqiX zls@E0OqFNAoEhZw*U8@BNN?c`oG5w10B+%oSkZDxe%#vY#oo~I<2c0&T2ntI&`I~U zh(&rxI!v2iD}BhZUl&13+w1XOx1|WeJHpUS%;v`iIzRh^&leKCnCA?zb0H{JGa+t zyNdg(-ID7jcJ41h25j8_Il`gWT=$s@twJd=6Xp(_0RU~}`1%=1X=CAr@D(dU=C2G{ zV3yFIlvU)o!Xg&w30WDou%~3zZ7#fYOR=kfGOrF@xH@dXn&3rY@j-I@9i~Esgn{{t z;trhYL~U*D*>h)(pE=ekCqPb<id164d0oM&3}@SYOuw(oo+h zZkNcr5auU2gRekWDb;GVQlU_F5x9i^Xor`;ITX+)?fvmIog(N#|}bnSfp#a7HSX;47K# zggbKPZfW-{AT6j4lF>Vh*`EauF+d+d6AU8pfDMvRc-jYgYt^n{Bog2t=F|x7FIOY)Yd{Z2--9%$Pm+@XZ1B=gHj@Gr{zky zsJ@9xXI}bj=0c;9+UVezQ&5(&drwAL=B}LynP+m9DmB#Ws%4AR>UKx( zkU2}ds|(JC?mC=$t;g`7I{k{34m4cprBZRr5yHpzG zx9RY))H$02@(Rk1?~Pcz*}Yt%M03`H-w#k%x(NRlIb$-$MsC}ia#9B4gF)WjR6ld( z0)G_+@)ivN7ZQlHoZ!j`fnE1YJobW~H|Zo%&fT~!zaKiZGV!*WL5 z`BO<#W-n?I%T#K$R#d%W@zQJ8Z>ZI>io%K&4jwhlqD`yUfClDXFPJ)gMvJh0+MER% ztu{H@d%=>m&O1*UjWTZ!|D#7wu`FdU>dA91-BRlr&cG4usb9ny9zQY85YFKG7R=)G zwWawRRxJ5$>hz@>oEn;ioI%Z~TR;19`sD%v^e4L`e82hj+o_Azo=nT~_i(SMZxgk( ze*E!gWfiq;wFRGiIk~W=6^81hUAwN8Tu#`zedc%5r_Eh)>};m8y=}tVpPb9i(`nmg zEm#v09gjVfIS&^6KG0Q#K{_~N;8;DSksa9|_rsLApU+xxHtl?URoVKL%fI_^=AyM* z>l%fuP8}2K_uaQYd^c;wwcM*3rEuzk#TuPXE2;bb>u-IwA7qU>f4`7pDJKmE#$>{E z=le9y@FzXQ8DtF}peo2InTeSUoI#H(%eaz=VXkr=0 z1iAyjJK!I51Ggb*gjJgLn!wcpeG#z(jz#XC|B}X4n zMyL){ekhuOhQSR$F$@jfaJPm;YJyq49{yvq0g4k{Gb#KrguY33o`$;DPswfnn}~KRm!w zpbA_8F)f_=oq_1UO@U@cj$q%20@t`kjPx-P&JZ;*;*v4L;%Ecpz)=L;KuJK6FcPE< z2Wm&OU{A)OK6Hr(n&0Rd)D}WQgj83so#Df1VfUscv!6^8v zI0JgzDLA^~Ac0T+{6e`qpc8`LrBl!->*=1ug8wGEwf?=z-OFI)ov&X94+A{KcFg@@rDY%>6G1_E_694%szhd=;0 zM*{rPH2@wwXZTr>1r|JnuyDo#3+@d)!WqV3pve)VVFsfCf8XD+pTfeW z!Tb=7d7YTN8i6%&_`nRDfxsQIri|dXqKpQXoIr5?2FtPLrvl)JXPA(A%ckRz3Vg)I zgc*a#@W~948D7wDhX)jrC6JC7h>(OVc(8#ggs-ST{a|>##>dxCS3vkvbmsMtM~`p@ zBE)AXL69ycj@C1jp4QW>j>bnZF=ZCSXu^lILB)Y1_y`)w7rA9(DVpMNH_bE=n>BF01c%fHoab-lz8ZH z!ol4K4#yu%(r9(i*@I?7TAYzK87UZ3Fj>e2sy}(7vysls%$7)$CZit595OT^r|@ZS z49VhCdgL0*10x1R1**@I$NDgC)=0w{#0t^ECC?2~PRKip`O~Li+FaUrap3lt2xj%ZisScnoJ;oV> zkpcyUk%W?~GLM};ajmdLr86@4q7a5LsnG0Fb0*CON56WJ90+D&Ra)dWjEVHBl^Y9- z>kURdFpo3pIips~n6xlja5~ng)w7%mh6EG**BKa^HgG!N4-2Ch1c#mg$_>L5%d$oW zd8K3U=>aUOkphCs8XE-h2T!Aei30AZX-! zHH-xelXv>;g~B4Okpk_{yOJFk5abuJi_$9!uBJ`;ZlRO!Hn~!|duN1~pI`E+laPni zt2P!C*TZnZ8MH7iWna1K>mTG35Nb4N^7F5H`fqb^@)fsqVtO zK~V<}90Q%db}8fJ@gso|ks%Q=lwNWv=UP!^EpX;oN_s_6wzI>gxr;WQO3%>gwJ}jq zp1y%;m#%P(c2E3)U9mgzE?1Z_WT8m8em@CNXxuXSghly#>#4E zM}L;l-zctLJbxAp0;?RhiDYWMR#jVF*(#B*c5!cLZd|!?V}40J4c$L0YHe%Z=n)Kq zLQ_+H;f>vxf2-0Z$h)7F#&;fCD*$lLc`@eapIa&d!d`>sKtjR9GQtZe2BZZeUcrmS_OX za$%YblW;y1phq}!3t(cwbLL`EvDQS#@7jOjRFGJuUG3%% z=O>S!OG(Kv>Y3C%yILsfVB*oVv^15`*dlDZl)UrUiL{LCB_@vc4^6mUm|I;}yMJFQ zMd>#?Z1VF9@DJPW5g4tMs+_z+VCJV&w0V06283^`sBdJ_sl4RxzlZ7eFSrwj~d5?{+N z*pr+NoKdMYS1(~5o|#6!u+M~|vl zw!FL|J1yzdxyu<>^C(^0sx6V%Z{*e0S0@}uWm(3{$Gf(v8G@6ys~KEn z=U+Op)x%qXZ-}PJ3LCD*nTuq>g9&~Cij}mrZ*lREC}dJ;qxbHl_Li0qAGi93hPCT9 z)(OQroX_BbYA1T0GoWimlPUYm+3bP>%0RQUI(l2k>}4BQY;bI8Zsv^4o~UiJmu;x8 zYgoEy$%-wWvzIKZs;Qp0U`fFZeA^(dn9+*p5WhuBR?b`JqE?9_gMAk*-86a8#`20A z5^?*Q&Ca0oDMwEwB^@^zOb2%CROqtYs(S#or4T;_*!k~ zgm6WT6v%=H6O56i$ z!D$uvAdB4)KTfh(y@EEVY228>5s@)zwCGW%r&JWHH^2=8Md7B4iSU_&;?R^v$0#W< zl?*19*63I@zF!d{HtDdS9D}1c4JA!R+yD0O-r!!a!6 zz)0yC6|TPP^?I#Z$50Hug+UJ^iR(DQv_UecrafQXGGUfJa}*D+Qq%|l0QMdL7{O5&)+p4yC%_j zw;OIx(SnBueAA-_kP}`>;QWr-0`B*PGyi2k*>FhWw{$JA;C|u(;f#ea7W~)nfN;hF z3;t`kH_m_`o-<$zS;Qg_mfYshO^6TR4E(w0ai+1cv9+~DC=|jGq`9TJ=|2?+3m}J| zz->Xg3fygJY38%h;jZHYu;ro?Ty!#Jb8 z4Z8mk%*o$Rm{YoUn8RD}TY|Z5ejWIDe(5{T!B0s^N!QsnOl@Ge!d347RPK(uM~-*9 zkDxs#V1nM7TsOHpEEeoy6wz&>M!azxi|>LW&oSdOm}ak-3V8qk-^qb~JD&#VJn6(wxpWFd3-Lm7{5S(A zm{s!XDY%3qM9*gm&#^4zB|8XGP!fYVY72f>fQG|H1l5AJiFUO}(SKQ?OCLR3k9HG?Rr36F%(aF^r?b4<=n z919WZ-~wOIfx3yQz~G2fQ?9Lg3O4eS#Zo{UlIajXc6`xGcM)J~19mD7` zWunxKR!33fSJ1S91|yB=J&S~)8E^oT4%|@F@x5gD*=K!8Q9*iEo*pO(VQ73K6l5LL z89!x9LwP8crSy8V10i}G!8jA#;j;t)&-|hVIFf)!58{EmfequKF(df8Gp$N*pkP!p z={O_g+Q4ZW(=X*6yIjOEY9pi9Qcx&M+(+7#!Tz)@I?%?+biuQP?e-0(`ws zpU*5P5oopgw#F7$S7*?csPJuj;uDcG`0KQrFC)4K&M1|N+t&cPg4auht423E_l>NDrFwrtw!6R=I8VWiD1hfkc@?C6+qFfpg3bi;;q*REcNoSjTPd9AE< z{kkn@PM>Ft-0`z#L}D>VNt2QibBjtgu9!1r;mXq&uPBu=cTca44jvLolS0sW)hT^6w;qM@9aFH7(jV>IUl$ic)~!RP0@73_FcrxA!e0PbvZZBAvB&d zsB?33!uB1PGze#|b*A;w4QrRUMC_%t5-$gL=(l}*!$S6-0Yk{g%P+U0K6Kaarsif& z*Y4x*1D6Gt(@te%XlTkO(66MrwxpywzTaKGcCXwZ$ICw1#5hF(hS?w*s^%V+>(mA^{XNo zok*t=Zgus&SX31ecbGGZ!72+2Kf>zkW;^X*V3=m*MFrQL)-0Ymcj|?_vf!8#EpjMD z%cY#6jGVI4W7|KQ?J{kp+lmFVQ}^!qa>^pP9&0o-DyFSXV&Tm16vW2Hcd1mA6z@yD zAZ`%`y16?ChBSgvgoYWJB$)m7C}(h3!8td~5@g$geXo>P!(72gYt$Omft2H!#T6W_ zP^o1>JCh}C(%|?5CWCl)Y{co@YL3&!28S55jCW8-lT>Xqs1gq!x?EnrKQXbfsfkgw zuUfbEx}Z7tQu>KAX;QUztE)Rqg@6|dX^W_})x&Q;Bu(p-kX+R6_^|D<8eBhUS1E)} zez7#8C@LvmvUX`{Ma_yOfs9V3kc)i$!fsU7_(a5VtWqqIc?Bo1`kI9IJ&wwizGC(H}s2UzxQFB0l?f_BWVot zbXd7=)6z|Dr_N@m6{1y37p&jpHg~0CnV_+?qS0$x3}e&hP@8-tpG`<18 z{?P{(tZ;Dh4$@NEvXZ=ci&i)}JAFTUL2g+MBd(mcV9}`y7cQJTJ#F$2OEeoAk09&tRom#YX`MkBx=db7B#v`r+aDl%5OIB=laPpWr`@4#Yim5-Ybl&Pbf90C1 zCB+(z$jj4r<;n%2+xL6=?q+m#GnQ{b&NDiP4Qto0Tfbtx>!~vrDoV>1End1|(}oQ` z+sV!W zwMy04)ZE%G22KK6g`%cbkzB2%@kP;=aprdk(3SS~_J+nLC8#C7p@o$z6gZOsb44tN z83uT`zvE0NAR$PVNLQeX*#`k!0AV;I=^SS)u%HwF31`a6%5bwEAG+!>0eS<= zf#*a3x7_^|0)SxzM-m`qha-Q&C&V8CT~9g%zz4C2MLGqc*Xt#cU&a}gN?BT3iZcNV zEO=PKb4Dut1@8mkeZV+VV}S(^F9d+v+S*_A-kDC@40y)Rjd+VKwC+WIhH~8! z`tM7(s%iEhdL z_r;tK3+@9zVMzVL0T-e0Q~0=)ioc>nC$k?^E6}R0Ezx6~!6!orAO(|I7$b|HVlw;q z33OSff^+=b62$)tf!p>_U=~t`k})QhGH2qK!JLDi0H`b^(N%;0n?g}~IGVF!!F>Sv zwIsfp0t7Bi2HIrM8}Z2U`wWCCsOq58_k}ZE0BIp#P52u)$i&ZZhHw}JvWdU4yeA-2 z%s&RY{Rg8xfL}i1^|;V9euT}O4-4)Cx^admD!v+pS0rAm;2e(KcItYVGhiq|dxK?0 z#(+C$F@%MQMArzwv;xn#CEuZ-<{Q5N5L3rCKZ*C}RwMZMNd|t#Cjk8L{{JTeoPi@` z)tnm(dJep@z+WH(=nfbv=M0G1$%38(C?Dtm%^(v%Wk4%a~Qp^S8#Pz3y=pWhs+1S zEi%0)nTD|FNWz$}vFJv1)|n$$DrMKNUd>25Nn-~=`U&(&e347e#7IPKVl`9&y?4(p zi9|wra1`PX8O2|MV4Xm3gIx~X>ntgp{A8)`2P~ZFaiA%Nf1#D3Y4rj@RcOp!aA~No z_waD@@$&U@^^MuPPa4&9DJk%8`No`F{M3}?WN*b?M*N+wgomE63d zVqgZxXmo0IwVfts%lr^FJvTQal1rbRaGUCNm(N$lgShcWp#B`n?!12W$8zErCyh*)heY@4#`nE zO_iXwskw=z^}^OxK~=RxA*b}}nC;<5va57@y{NsNOoI&d4Gq=R0zLL5kc3DkmseC) zs?-{&Pl&9tx~8c`2=wIVW_%IJ@xKAmW1yI?E$9irOa;ss=nA1LZmqcy5fZe@J6gjU z$V*r7;oyrImj!}aVPj)pfKPLK+a?F+`oQUemcH*$f=boCdq+&hsgs@&(Ue}{@4U%xPqJ8{a@_17Y7C;L%i{;B6W`<>%!Vmvq`cDh@iN{|RR-xF3M_L*+;F z0klkNWa({DJHb+CKy4YhMBFleW1vo_6*o5o2Ly-2#y8+E3xP}ccqN18nHfF68J;b0 z0`3?c8asykwDhdPB8`zcoqBfH?qs7;)gqG5pEb*%Q!LvU)Fu*}7=2S?%c+bD%hqpf zXsB7cYEw~39c$2W1_i`XT~l@L{MqRXJ(TS&8=YN~vPw9kG=ATXw99#}L9wZ)PIE?C z(y5C%*RH1}#hkgJx^VK?!NgsMPo6n?G!5T9$f^yDu2N8)oql3dKol_fMB>iOauM_= z?rWB{H#Dwy^^wYzoKYDZ6qK4*>F(*7m6fH}X}o;`Duilx$4$j$WeP2^WpP?);mm`8 zPR@Xt!5I~xC)*-pwJfgfaz^T4V$#XXTrkAi8=Iz2o9!R7R}I}i&H!*u(-o-XzmhX# zc)4l%{>g z>#NtV-dtSTKvNpd*j`sB*y`;i6baU@k5IO>IJmf;E2!giqSO;9X_v10h3~v}y^v$t zGp-cp)TOXmDXi)$E$;*6r)+$)JEPS@1e&Y0`0XlZnIaolk@T_IP6L`REc5`RDc zxLpTiVo`AP-j>Gtvxj0&^Ri0bh(7bG| zi$pAC7@8E27YlyJFwbX@GX~C}0?vd)#sX)IOuJMj^@}-VU~%cTt-0OTJ5aCJ1$uiQ zJbFTd3XU6{=2&`!GXUN;ZRUwjWtAd*RiqnFa$D6&1B_ z-@YYFmSkpTLO!nLUahXKE-bupDLWhDFUZSZwtV&W=VY0fNk_zDrLV8o+O_K%8(VO;*rhwL z;DG_oyg4rY>=`h-p?!tTO*cwPLH7Vssr2N@ljz4}3JnbfdhkIy(F2@;E40SQXamW> zUETvv9$eM~X2X3j4DsbG9GUOH75+35&PhhiVfhmX%|`;@7{w+hhYQ!sz(^tw3NQfy z0oSfwBR9zpp^0aV4kmIK7~?<(h!=vB*PjCwNm_8*yk|vH!BY@OnLokg$v!5D1<%Q) z*)p@>0Ry%!Dhucpwm-BtICkm=uZnO<^a%ZT0`C5L&hRT{oq|fnpYwpEfh{a~g*gbX zqx?B!m3SsGU{CBw3O?48t%*B!%Kj+O516JSc!>#myIf?*&d!rOZ?@a|Uz( zJ>Ck?haRxaz~xr(j=Z*kpi*`UlA84H{5kQ7#v&PxFeHhg1N?2$3z%KH!u%{M+``CU z5W$s1k|L&pNuVdQ-wu;1m9s^_~aejM;_X7IZ^Eb@Q}nHzUZdSRTAh$X*>Gho1#m6g#9%do~yfyq5Fj4Wc22UbAIX@ij> zZ(Y^12CbfwN~Ax}8L-|!O3TW*Km5TW7J0};B9Rf!D0uk^&dB8|rK+&Bx?5n2SmYrT zu@qnU*D=i8GSb|_8HHR~SXRr2DVNZ^R9M6!54MQ$SSF#$CHiU!&FjD9mvBY}vl)f* zM!A_Yw?t|Yi#)heNjOs~McPz~DKlqeDhp>UVv#$Gg)gn@M3Na*vz=^G&W$ z7Ibi?b3S7ci##+!RY*EHqXZDD@NyHkaz^|0zoPyEZnM)GQj3axRg>TBsTC|C8aB+Y=zWN3P+i~QlhPt zz|ou>i2-7R7%(^q0!Nmd=*lHJC?v#O2Dy?LDnxJ&o{d#frcolR5Npe%Mo1bmQzn5U z1v#%0GsPmVLTsoKL*yXl+*U~GD)c}y3~7<%zyzt&llC?HEV7(E7fYDe{B543Q;B0h13MBC zL@$8Mh-rZw_(_+wgDO+i;3DH!R5ZZPN(oykqKm{#ncP?|2G6=uD4obCQ^|eyBp@s6=JNC({++oW9gy1fTi_Wr_(N-KfEvM z>K>=75$iMJcM726masx`D^-2*LfHE1E6I7goi6V1IuIXs=~||~EbVgetV`QgmYg}t z)}*EGjw&lIF28i>YUt{=dSR8EgH%c-psrA{_k%N1ra{u4aQwtFzr;F;wo$G-U)ETq zpeoyy*96VE^%BqzL7TR)ReiNic%xNTDpKSKnxV-BQmU*;R@|=7scb4~R#yWPn&p)u z8g#3$MN%nN>_3#~7MGgSqOOssuhj^z)QYO1yA`Vnnw3{-TC3WWHyUNx0%2*JzCuRV zO0^}e%HnpaNhB|7(Nu%RiRSWH@R@nu-JI8^1Za>0I*qc$B{CuYYJ;F%QrsZT5;RpvWc6+B%N_jU(({U1 zAw_j=b>sC0X|)3T5$GmrC8{csuB4)&u)O)l^+BZ~wxm^YRnU~%Agz$8Gct0&SnPDM zUD+tr6bo9f3WO!tQ^3Fl<1=!mThly{0{ub>>84>M7f6(<_B{38SwiP88q!Y}Qe25% z#|g9Y!dDeu%&L%bMG~W4c)k39YyQ4?rr}aq@M5;2u$D0>G<6M!{Tp{JlAiOr>a|D| zzv^UM9CV|K=4&MZKa`$6ArKjhpw9&}A^5m4I z4l^9L#~eLhBr`}v!ib%5+fL>%D&dsXUJWYa!DGkQL}x5_@;RP;Wy%Kk@0V}BmV4SE zc>5~1fVB>;(;asfqe-c$k?M|L%#YfcbR^^QSM!%{3Wy#1&ARg?6#{YFlCAEm{GwL{ z##OhAH#@p+@QC_!g?C2Qh5U;8uNFEu`uKl2e~njE;^GZ{i=Be1^vp)@02lw@#je4h ztqXw>-ytd?;c{7V*_FBLJeIixZ14+B%Psz4#**32!B;EWw?)J)-|RhUk@tzhX5dVX zSSi-XJwx}b+v>Z)E##Zke)S4EFlOfluZWrJee+uyU40|oowhdkL{?=(y`!Vw+)Y8@ zr}D}b27yE;fWb;^HeDWUDU&dz*gH_=GOE43p3RFb-?6SKbXDEi)ax2rBFdFzMxP3H zDs2##A!j(Q{!GEPg*UELDFxZt?q4_W*-)Q-LZ;TWW+tBZno%4&t2KN^rr#Q2U1OAGz!^Oo>7Sf%{rYdIA;I;OEs?Bc4Y%+ zTI*MO`JXCjNKHSt_hfo$n{v(?mjkCV6H_kCT(&HusA|^ch(@*MMEbdP?!ho{6$mw@ zGE>@lNbw^4@gWh;W zAl??_DiF#RdF^l1aK5_|{A2d&8Op^cAWx)O=Np?|TvS8p{bEmFNI&Tun|L5c5VkEe zN{wNz(#{ki#d=MeRPd!Z)T+tZS8N@{0-cS=WB;dd-3@{>7BBRwzAx@j}eO)E_p63p6n2p{m6X3ulNx zzie!hw5SAW1;J~zg>f|jGesH4ixm_t%&gk8B|r5@wbTT?d9j2u)*LAanOa<`tPrd7 z8>*zGXYzyRSEeM^i`4lwrRw5j$@ax92YiJ&$C__kQnd=?8QZeM-DP6Ub(x8uD)&5R zKuX&64KixAqffcgR0^|{Hd%{W6N~o+Zvmw)jl!Tl_rV2E$&#_!EAw7*p5q;Emh5pE8Kifl{O}wIURfSR8Cdfy!9TZ z@@h|JS6#e*?P9TDm3LyLR8!s3o_W3E-R~ElENHHfaaCejn_9iqH*$^NzQiMGD>t}q z3W*o!*`+Q%r;97YQ!hjvJZVtWxP>4dlqnakMa3OYI(Kbd zU~DbJMJJ!xpRi+tU*yr^mQtarQEl*vjX!(663pC!7F|e?bFDLo?36Gy|+AW3!|sEy3@!*NRKQ(@NdH zJ>|RQYFUM`G3BD~QejnXrJMts8O9l7ZOV<%SyiQ~CaJVu(q?GR7N$C1j0&k1(`{`v zE$1RGdCn>Gozt@4G1Y5DQ)a5-LinW!PmxdooFM}mBzhk>12$iSRJ-fovCUz7^Xg?V zB{*}v=)k!wm&nAr7TKY5*FiUm3z{~^9I2JGd4`1TzEs&pQ=abIni{ohJVN)JE3Ry6 zU+))nu|l{jAvy6v!IhGV52r3XTi$y3)UnWg$py`-G9`OPh zbGf7NN;#m}= ziX}erC8b495%C8umG3>UKlI4iBAMy<#e#-bnWKMX(xn?$1hQ4G;rR{H{04P;em!() zHBwDQZNnO`=#qMA{L!;tt@OBXqiThRpFpT{^WKqKBf4;{aLSTRm1@IgCzrF?HT*{HuWS3{`G}WHDzQf_%;bW~55mkNuTKFnq&dJJvd5VmX z%+QUJ^GS_|oiFT+YHrsT%GeT#5t6%4oWX@1FknvS7Je~z+2`}uoX9J0P|*Rg`@fj6 zVv%D|mBg4=+#H#lArLEL4;??6SJOms+jk^1H_JDANAEaY^10=*tw!j*`7@OCpbEw5zF@LuXIt z3o1n7C0l$ynzkftUrMb=cfGp#yCs{_^8_gwIUi1$|H0&C#jP|<;;W^)TCqCu^rg?H zE((oH*&4dHMMDMcO!)A-*};2{U2RZRwaVAJhq^@WFK%d=wrJf_=WyrkM+F)*LMkQt zhlDeo0)s$_j4PF!>V?8nM-JxZ7YG#Et7nd!OFvUC))z|+Rbp+Wn3A?tRwp=!_Bu3G z<)9pr@~r>Z;{>Tm_Qh&PlbLs!=l4O12Vu1qo9tqpQSJHLeTO6;fl1RM#Zcu5jO0 ztl+BUbhQkZjBzTgU~3f+7GtQ9QMF2@1}>#ky#j9G_DH3iEt64IGTg(dfyfnXi3nzd zY=smiZH5ZDp;8Vy#0V5@1?I$1rC`7(Zi6VOY8h3nFqO*;FoT4dSh>_#iVDZnNsW+! za*4iDuCJ8nY87;~65`ik>T0%H4js8hAlKG{sM#_x)7BcP;YfB_ncP$bnoYI~ajyoq2pQZV5d&4| zDk%)a7&Gqc;r<{d1eB|k8IUBnAjp);AU`ZAA?~_h(?UWR6$Nw!EyOJyP${S#AhrZ7 zU0g#XnS|gF&`>Q#jU?NPP@9@6ESe4o%&P+Ken^31dV!oOmFdZNP2)xosew|7fozh} zb#nUT)e@{38RQ%)9ax9ifUspiNKypi&H_JC%OQtm0ooXWIS`~2*M*=sm~)69hy+Pg z$=F&fEbih}<2Er{4qXG7b0WH0WNre!QSP5$t#%0H89B_~>e$Tf>iNGQ`~n)`1{{$m zpxmVroP?B0@i{T@13AR3O7ud#sa9nymyzyLsv~=S(8WMls7Bn~u8B(D zInXZbhWLc;firkdi9fATcXEbro;wK7A6^5*d`fWCgCnn?m~}Gvpekd%8wmmUGVpEC z!5MOboB?*>rZ^}H43Rik;XWXGK+X^af-+-~u!4ZJBoE+|uPiELkYU^^Eyo84z#C9S3*Imfq(mU7ACP$%xTN}0DOy2%SbS)JPf=>9#-&NTtONp! zVLSmBxP($0$-u~fZb5#)8=o;g26HNq9OeOIz=r~fPw-X^y(S6-Azg+XN)3+Kn}CXd z2LX^u%omNX@cSsFGI_zB)@lh`FJoJ9)s8$8K?(xi_-vTV)ghhk_f4=tp=rn?mApzo zoj@g{rj^T##pHPol6fcyv>>!K9Ki#>1B12(K7=8LOXvZa3OQ;K2%#TVFR%aNyK+VW zccpkx5Y7m?aRy@fHMPL&A_#xp_114qIX6Te>GM;n1n93VgOuMeJ}2j@4iS5%cu{ z5Mm(UoUM~HcV^5joWX}URYeuGd>FLIiA^Ga`N`b{X7E2DaI3rL+oW5Nt|EZ>{cZkl zmF_{h%59!+liPxH%0rv;8VOsA3pu#G3nw)qs-UcD!JMUW@dx%Lovv<}KwfJ`^IH3h&n}Rt4um511-Gws%qzhPPz?+h?Dn5)w zEb=gmL?$EDxC403+(bo1MYq5fvB*Ox63H)n_pDN>#P^%gG;=Fh3mzIU_^MVToEQv7 z6UXUkLuFOfy!rFv_r_B(PW}n20!OOUJ(Yu81Q@iJtbXU z8jOM;I=*jWe)B8=P(Uh`{5)s)l{Nm|vt2=6EohO4Lr2Y}qPM3XaeNzfNg1)z;QU zMa6=8frg+X3p$Ns!L7RUy989gFXasH;dagd_yNa)hXLfh#heigBco~Q;uTVf>_~EQ za8L+#!v-2(ZH#wW;7mkB3=)j^Mt26qDox1ow* zXs2=1=NSB2I|m&c8Ry|HerLvHfEgwh3@)+BFbjB>7|-AiM~oU8i#8hc_)>Pv8*O44 z1II8dek>7sMx5mFL0ArFw-5y+1M%QQ6XvcEmLii*5+US?fwlk*z~YijLi~)8qm3Ly zi)w>kO2dNS7f(%`-o(+wV&T<|hUob(8N$)TQ49qkC`b#Z$wtVPj?z+4b=W2Isz8eM z+W=$;8Gt0<7>Y?cl)Pv6K5PIMDg-ALFxi1yg6i6YghbvaIAc{3!G`J~Kvd9J97}Uh z+n`|-%jiu83aS#D9;=w*Ky~oDvycaVDvx@`aeQ-A-~lxczv7JNs9O*S%3&lv4Ga{8 z1*HRp00rnA$L@_YGMNlGV-ETgFc~2!y+)(Cay2(Q`)Z@GO@qpeU;P9H0uPWjY8|IB`%;tG=}B-HE2PKg60AWpoWslA~ga>IOo69 ziz6KGZc}T4Y+&$oX|LY|pwmPq;GlsWgsZFPjT=SK2IvCC#eT&U z5*$`hQHAY_oWUyLrDp*VVvlRmO61j-OVhKC$EcIwOmntb5XUtMXb1a02m=T-l^*BVaS5+AE*e$Zf$PTXcTFeuAVrT&2jSWF|jqRa_|myid_+E0B}YJ-429= z|Bx@x4#+BtU%RG(R5D>*%)TTAa12U>B$H-ey?XRqA%vzFlbVG=gXRp{!w2?VDk#xH zcvfwsb-+@Hg!ElF=H_0#mXvxN3JNU_3GdkzS5Z~f+}yNki@!ox73}YIJhPy>q%d^n zVJHyPC(!se2vT3z+qJigzxwjKD_3%`6(PSyV^C1Yh7B7DweZp$;64B;3Uz4EYV?g| zqN}Bf!+yCA--S)7kmt+~``9II;U^xS1)MyfBH7?fRcA}Kf9O4>M088kM2)CBUk9u?b37SFC9ubm6nlKT2Zh+;ZRX=6*Rz=?98I7 zhC_)*u3X8Z8B@;n>vDy{#40XcI$zb$80qi4(JLgsQXrQ#CnqPx9y-w?ZdEAdC(>JuRaJ%AMOEjI z?p?5QV`^3&OY1VyGtV5^y?g(`&}b?!ksnnX%rQ&nPo z?17YYxl(DOwO4blB_vfPfyR|$B)BZ=psNJh==EZLDt{tuup8nkJ>noDO+b;Rfif{+B3;H+4c+n$a&c-82Rl-9*xPNq3em3d4 z|Kh;UJuhyb?eqDOtD8Rce&_qx88K&$zzoe`tO`CkcS)REJ5U4^xl0T5FlWHHqG%>8 zdKXR~(0XS$Ms_v7c)8CWgF%;uOtCrY&&Q z>GYRQpNNY;NU?^Z8zrP;5EbNP#_T_7G|J~L*`!lwGtL}~Nh|XU46mrGJDznVDJ9ip zYWE0;3g5mIy5Wog+^fSo-RPGogEv(=HbrOitm9;`EG^kV9vT zvii{NF_giWeKFf1B+g(^2YEXmJe8?ZsT&&`^-8JJrVY(%Q^L;h>p53oKy?iWhC0c- zT(~d9@5a@ui`{p?XtgIM=IE*OdX59*jbrt3F*_D6Ute6`s>flc)z8~GE+uPs^sa=n z7ooAyoQ9G3H)fvkKy4)g#x$rA?+BW}pAef2wSvFA4}gS_3~&bX7|Ph5*5vTv)*q@Q z8XcXtZuh_EpZIvJ!ZOWSbVfc*btZb>O(k*iK zyuf!{PklEf#6gbJ1+YBY4wd?T5xPJEfhm}d-mL!~00zDucd_(JO;?9F;UkLlaUAta$Iv$m3V5fmg9X5vi1v2y@pL*} zDq(2l^{dwprlbL9U|@rBX8-mGKVRRNq%#^&Fc@e2Jj3EnoKHU+v+uB6Ps98WRpK`Z zG|$LTgAGrnqX1qFzzu}=cK?7=VlbzXwkq0`zbJWuLwp!b%gSX3e~4Tbf7yHM{`s4Z zZG)*J%!Eby)CB?Kj}?}eOLoqSS-j)&u8@?uYmWQ2&=j;|v+TqdVV}-PnzH8bkE{2r zINOkuSs(d@?;PX|OdpKUA)9H_gPbwK+>V>_3f-)snKd8 zb|p)irQz|1VD`LcN5t7{RbY+o363&o4BjCTDhk4AQ%{__R$7~!5Z~C`!f2#U&aMTO z&3Rd8Pn|v`ma8^9yFuO|-z=jMHn%zZCg6e=&S#8q2U51}*bT!fYXF5b?uZCmv2~lU zx_r*enE^YGz{JSK-MhT5{^+?&`wk!DxVCN4I|V|iiKADpaS_xu7-%JM=KtG!53f3s zG*9%uc;}t7``$Ub`}UpLw==Ud(=*#$-Cf>ERV7m@NeD?G-F+RmHMx9C-otE=* zxG$%mTx3l}#rbjBm74jnkcb#9W6pk-J-MbcGwXG=wS_f3T@BUc)itp44+@H$Sz{l^ z1=av(baX`I11Ku8n4=?OBg%TFdD_s@(3V|X#X=Er#b!==^k{T!EHKEwX=p-V)`Nor z8v17iMw^tLKeM<7y$Dp7^r^o@NW_3DN(w-XRAVcVeqw;i!Tc4LD{2E*wKM#5>0qxY zu03gX-xGFr5hnPiihY4sl=#mqMLkn}Hst+;uFmIeZbyTTb~8P#GmqbQwdtK6H;7Zw zCD$)ToccKIZN=pV;NRkikma3A`Inf081aCA&YsefQdP+x(VpJHeWTMXrM%FdswXAqFFnps5|0sdoSavy{}zl$rH+g zyK82l-z)vpjpF1PRnzs*qwX1wm!eLF7d|nv>vhA0C;jafSB9OQI$e)CapK{S=@}xSo8~ZM{y;Sg&N8L1b01PS8>o8h6Pkn$fChvmU1Bq$grDl#-j))$VP@StuQIRBDm%aO|2(Vvg#q`ev4yNzzDCY$f|J@9e(=EtC<>uwYm^OdEtLbLRVi&n7mWv641Gp`vP`g=1mnfKLhV(IrS2ByBS5 zhiCd1*Okzqpbj8z^01CPDkLh4V#j+*tzGOJ@7FOVXbRQ>Q#;T^R3pIlI0G0Q93%z$ zUXb=C-8SeOY9>)SAV2&ib;Rmz0PN6XgVsPiumi8qk%UEcl!St!fRGpst{@+{M+;an z7-WaKg(^k>_o%*B1CSINDoj!bU5B7JSWCWAQiL%ZyP`-t;v%Jh6@k%5Dmh5jnit83 zgdhn?f31f6!Ucg@B2}PaFbe#lg+wBuQ9hWawRFfc;v<0sd37t}I{*@dmcbSTjo1*E zB%7HI_$3gHaH`_KLebR*aBl3PGDpsn>WZHV9a0`=Ergd%+@`CZ>1<3+5F}W zuB*2<&WwzVKxi2<-dHFU3MIjh!t$x#Sv0uo+@2iq2pS5c(X5F4J7JKA4`AV$V79OQ{2 zG#WmG$F>ttwWQ-0))qD6tG$vh0p3a4vf;epL;R$N`S=1Eq=R0Yx?l|^ofsf_pgW!y zAZoTXou7m=xF3f{9nG9Y;9>HI`9o>JaOA@T5Ffu50aqxTg?zjM5Bvxg7K(%KDw`QR zCXbGI=nJkG5OXEf1`F0_hnj$mj0bm7TR;t@Muq_33t{klB8^7@ zK@CwWATCiGa-<2uV0bHMz#TJ$REV9VjF8qd+u+RT=qM`o_roGW0r7MqR1B&M8IcN` zfe#G%EDOgv1 z)sqbPi#*NZ+tuhUy`U@xkckO2Bp&%9Unjx0Jn$1Ul6vDuPB=250L5Tw zoZX1ngCcoA1$j^*n)H>>+R!zFdN3AV(mD$RWB?ZnYvITjBOpl(gJ*Q17bZGJ<7rx{ z7}jIM5?()NKvid^W|Wv8ZRWL;Gt(N#5^I6H$3t(xDo||F1wi3|TSzbLI3QV|yL2v? zVi{G>#5`06ZX||)JJbt+gAW+A;76dq14)AEkd6r`$CE?|V4%ZV;>k`jxXYaR^#IRM z3hG&PUeEj(jfW>^#ue3l>nr#|tJK6~$N`l?Ey2E7jo$?TU-H2dGSR@X0(AnF9;bG2 zZ??=eFLaO4THqlBAj$-Z8+maNqJy##O+sZulH$Av<~cv#|)G;(i!ITS?)kran5#K@PdDejEvGJ`Ts5exLv2eVR5jjeuSbu4E)7u2MCYFM# znkh4Fq9~Rogb-Mc;mmr*Y=R+)=PaCwqbV4tDOQ958?s?(PRHWeRuKm)!NgebdlUe| z7MU}@3gEZAEQ;vrPaHy=InZsfHz42EwIo>ygM)c(#j?C+*0P|^_;j8V#HEUf$XhAS zGn5fOs9|1O6V{bHC>rnvCmJv%;RTh(JiWx%e-v``$y5i7B^q%?Bj{-}O9|s~^_LTx zO4XvkSd@BkVO3P?$hZWZHjV{9DQ5z`eJ5y+=X56RlE1(IvR<5@8G4kGk)Ky6Fx1S# zL|ST6ZozYgWfrG;>)Hp4o>#CezIP*<^~;M34-(U}vNG3~x=!B>XlUt3N=}_$Qwe5c z>C^vd96~lnwk0Jd2w-FLxS6UnuL%>!shYJ+KMiNh z{@(s$48yY;lXmg`{ebax^PxlgHD+O`vtBhjYLS$~OguA1H=d zU|C9e&%<|B&kc6fug`XUWPiJ&zOB8fDJ(h_x{`sOMuUlVa&l)F?FEl0pNLqPl)1XP z@Vvn#DrIPDW_51-sNKc2b#-D+#ZX`O)Wpzfm&l6N*6674b(OMZZ~){6Q%0FHzZT%! zh+B?pdfz_E#fTHJKL3KF9##HHQ$c&2-^p$)e%#}*+yC$k4+|0a;h*;0-0gO7UcVk! zbLu1i+e<>DYx2Pp$zJ%aCV^9Mg?3?YyXWQfPDa1)@=o$>V|{;Z$@Ac>;jj;!z8qI} z1Q!1;w4h|2?K&Rzk$ZW1(^&YI{zsN!-pApap3>R|@cKC;vQ)6I&ls+)bVl8(&;5WI zwK>GYF*^CFLb2XlUw-i94R8Ml7vGS=?9}$M)U1Xv9=Al)7K?uD<=oS(=g@7KSlZY) zq`Y?1(ci~C(ARIT-KD|a-b?4sl-D+^Xec<0GdQu8IrFOkF8R6jhxP9sjlO5VEr4FX zqQjn*!6}mu4*5AuP?{m5+mXNngIX=&y`)CU-s*#&cwVQP}@XXM!Q#2_l8~8 zfc6NQF+;{z{_nTXXf$l?p75`dX0yjM#dp#U*=6nd5H z$#nA0yl_6~T<^j(tcEz;cCg~La|V=B8y6edI;Z71TBBO`4G3S+!<@)m+0b_B+^PDC zg3w3VxN-yVOlwJ6QR@`=S_HjCWTuCPvvNxC6UMA*eQnInDU!BWDCKf&WKj1&--E4TBh5325d{6MFPgb*UJg^BX zxl^G`f9u8<-D|DB1%J9Petv4j@?AII(9o!;2agvQ=c{s43+e}PM+8-vH`B`Kn5clT z*r>3Owdr2lYu->I6|}XrJcx<*^AF80Ya_*zIrA$5C@iC+n{Gb3e)r+^ zz|=bjybq19wC9aQyzBa}*B;%r^*<0^@Cd(@LdKbv@%Rrfza3keTHc?r+jUP!{yjSn z+l+=vRC8Wr_+j^?Q-=eu1Uz%x;rM>;L|#zNy{jP(x0BAicX3bOa(_zAMLXZCrR}+q zMIHzIPNbA2dd3D&xNjtq=RH=ucFvgb-Fb^ZYiCBs#ztpWKubl=v^+iWa(qh3z_gM# z8&)RACx@n&DPAz>)M^S=82Eu@+~X2Vv~j(EcxrNfjpvLDYX%?_3>53@Dp9m7&drWb zEv_gu0&kpO*Xd#2X0a%hDp&}aDb?7}z{LE@rMvgn^d_D)%}>paj4bIGGec>|#>U5H z*PtL$k0EpB*8)&i!Hka+4D`gXqM>JXd{NJdmZ|3>p?jnDR;mZPR_9IlU8RN0dCsymZSjr!8IWv;r#jYSFT)rIXnWnfGWXR!`XZ%+00qMZ z6KEb$P@=SC#3Eh-2kzh~rM4B|_u4u0^8u;{g^{jXvFZK|15&fbl<_MBcC65hI8S1M z4&-A*fLHAc#v1ge1gMt8nZNwM0VVv>I0ILne7_8UeTP+u(jfIs+Wc}#F5|C&l_l23 zv{jQW8{6QF^gV!)kr5ux5yNyyGQTE}|Ml=I zE3=GW6eRtjC`zdW&RD7O4SbC=YPA|T^Kxita9}_(Lo#H%K^O$QeECxPl8luY-@+@- zNUVZ*65#+aNXd}#rom#da2&Ud^^Eil4cxUQYcGjBGGx3t0L^C@hRn^j!xTdT*91;*WCemFY#ek1%3n>QA?VM9K~zzO*7E-&EQ^9?ScRbUJ2?DI)x5nBuBqM37%EFS8ZfYj6!wvqwECMO46j<8g z!WTA4M%I+2Z~%!jKXz^gVSWT>NG6z%%$Z*np#IY9Lj+(&1I)qq;3bVgVt{SSmM&2* zqJp5-+$+v}kC8NNi-BY%6_k`762j~-FewCh0aaK$28i!t^jMuZ$t8v0!TuKwGt5-nD38<0AFi(DGISjnZbp) zNRD6gdgDOE0m_C#0HJ^$Gx*Qmptpwxf*%$X1+)rv&H{Zs2H!Nm6Y_8BP;%1gUJM8N zWF-$+qyY!6Xe6<38uBlykTjsaU?Hu5y*s|eh0Ovfb1Z(Bh@9@imI5ANKIC{J$w4ys zaTPG6{V*L!7=j@g7zhUWB4@}jidHlX7%OL>Oqe~X5>kaXGaP<1fPAzFl>-uGIDr8l zl0FZNz~E^YyoDkX ziGdr`l=xU9N=6E{0dfF|gv4G1k|qDck7N$OH)o(kQfhdG+szK{jRA;Ev~Z%RVnoIO z!o+WiC>haW5#|1{#6oIE&UOns`n$^R!uj*vrv4b@rqGgH;Mw(2(%kOMinSIG&AT89vR?7LMKoQ zQ8Y7fueXRMs5LJx>BPx(aat=XmH1IHkrCGn;=CHjgrl695|@?YxL#x+FY+xUtjQ)` zFK19%dXph7Ir&joOwfbJ4^wlDMhe0cgRq9ie#iQR5de0GNZcV9w$h(rP} z2qRgfq+Z3^Y#8h*kWL)OPERcq6qJEKc105F;6e_mN?8E5l;pP$=%JAd;!t*XLPkdo zC#u)kl&eL)ed=k!GL+PEE3x}U_KS*+u686BhzqnFC~Qe+2RkJ7f(^WANBMwg_npq$;SfXqj8)o8n(a2G>1?)V1PRYIA_!a~G$4 z*J1sd37W>d+&PwZy)sF`7)5@fdpXxN$7?~YK$??}L?Fi@3o@a?z89*(p<-7zl~yz~ zQ_@HDAQ-rV1*!m7hyvkZI)|J`HuIL@A$_`AiCfOlluo~xU-2}lJRqvV@p8IgQ6LZp=pZp^$*b)VXVZQ zpbNuTWDI2)7{+mToT6w*4kZIDfs_fr5pJO*kUC0>WhfdlVNr%=p2dJ1II#HT9V{#u zsRF-kKu3#HcyTMHtI%{4xutqJ6D5An-UecMhCe}m=>+77B=1h#BF_|f7cuHI{m{;_i z$;7FQX8dFfYo62bN+^TY%riKDfsurpS!_Du`d>ctf8W2RgX2t4GK;v}IQ49w$JtJG z@mM*cnORNp!>IVQvdG6N&^0}H@G$;iT32&@XIF33!}O%o?29hGbBps+K9;?lx>5AT_Y*?{1%M~~9OALZy+v!9<=W@cu0 z%ZtF!xP-KVjFgzJ!MU*DXba1xX6D8vriaEPSJk#CG^#5%FDEA@N5wp=3Cv}o zS*o@(YKj`#ui*$6KjqE0>Bs@cQTW^%r+jE z5@Y9)zx&I8gSq4N!|RE54~_*^Tt5-J`*_Nw6`|KJ-`(lSao4O%=hFg8MttukxD2x6 z&e>o3)~EH)mmKu`gHN;Pk&yQ;K6UfUOr%-R321XhrR_-?h&hsUi4*7I8eLCDdM&X_ zm6In91YKHWa3E80Lwke&;Xz%dlAk^u{i#<`Y~xDF)%ZPbFK!)*cbHe!-7Y?DpK>y$ zGBCR8;^C~be$U(s+7j+P_w;%eJfN?*?>_+R?GtuQX)87j5tT;<%0L zAL`cThN;Yt0>A3#^e~QbWM(Acb#g{BgfpC#Gcb!})jGw(-27r-Of2+wUV#xE-NP^o zy?WbqPN|2QIJ@0lm>WEM?qcuo+}!M}S7?HsX77iFYoMFJ^%wLM%){u=sa3wbET^IN zd3;<_drR-)!uw!+))_eMRA>LveGiZB&UWwE98?$0(h=L^ zgG$cf^ohlV(UsM;z_@gnE(2p=ShUvQHw_qZ;R`#%NNx&PDsD=`hnZN2`< zt@+`f1COp!Wf$YV3~#?3(R}Lzw;MC6!kcMlE|*<(efBSxA3cNtB&y)-vE)7RV^O>O zZ&3Wy==$^j>9;4R=c=v$mrqyAJ_`Bo`xEUFT5j)g`?t%*j&>=>2K8%;N)uTdz|ao7 znMv)5IhuTt6=wpguAPg!uMie%#*gptIWb{^^$5(WR??c!9!tGgt*<)d`EHlG?^5R8 z%TJHBD2gs*zw@Bb>#HZHZ6Dk;2$SyVZ{28!T+^=Vn9*y6r=6eK-Dvap(BrhqxV)fC z{3z()v!&<*PQOd*C~I6u`P|QToHik6EDQ)h$JaSTe&$)z#=)A`JkzDkJrr~h)($m` zsc$*%>{kr08;brIVHZ>5ddB-doEw}y8c+PuXV)MFW2(rI4FgG@ub(rxMs_5A}T z3pX_~77!5I)Y9o6>;;?&i%p!GTNaH=H|{#Gu=qdLy!|}qCVKZCv@31w>1c23=<3xO zDgWSLg&H^m^EOHp)fJ^V4b77e9>y^=<>BsMURmGO(b3k~1?=(+41yIVxOaE=2KwEH zkgWr={+>Q%g@vhw)iA{sO>37f-e{j=&R@BzRnI9D>&||W6mSOj72gQJP>t^|;u_>- zc*$q)h5zq&{5&VL$)EZCAHR?K>Sk7g$y|LUc2{Woov>!7gMof3s?qt$IlHXGm*f9i zcvS@}YU0bT*`@CFt#h)E_Y%d`S-Se)V;t)HgPoszemLj!(UeOEqW|;3$M3mh$4sdv z%bRcPjQT2}qs&CM(O`igiZdxa5l50PSj6?j#(O8juFbI1MN_wI0^vr9mIWF0If zelpHL=K@JeoY9-P{EW29vPz}SLOhYrPz+mNnn1 z$!`+4rOflV-DFv<8TI=&mw$H2DKZM(7n0xo2d8&(`$o-T+m-0AB3nJe>)a3ddas*W zot|92ka;yB_wdmNmtN{y&c`3LOFY{!pJj7@Z|iz)`OLFFx}P1NZ%t{v`L^qy5<4oL zGT(W}`42Bvd)lV*do+*S8^Ub-ZtH0p34_}(3mILp4v!pp3tKmmX5;+r)*m_y5i1os5=Rvsn>da@8*KK$~H-e701pDL?t->eY-e+M+BUj_A-< z2Ry&wlzHZ6k&|nNcVbuIr+43LTx}|zjj#*7RJ)qJ&*|No+40`xtj|36_frN)A9`N6 z>iM?Qk^8-CTJf+LReL04UqnqIZxq$0TDyQ9;qBq|(~k~^x-L`8I%aT~YQB+q#x*6< zgexvw5m}}AlW+z)G&4We)!jce#Rz7~pbZTQcJ>HL%PoN1b8<_TR~10nnb}!yZ=dj} z$lLcLr{)$Zqb@Qy$oZaMd0nfSrK>6`?%j`2YjqIP!qXyeN{Nr^?0qTnJZ)4)J$QJ} z(?9h|4r>-tpFD-tzhY^^+tcH&i~HjI*!aX!a#DtwXeOGrfi%aLu^awY0{Y71g6pZaj7yUD26gnUNd#d?2T& z`&m$WnvR)Gu1b7Vo~G6fxjpglesVXaG%~Uz#bBNsX?(Vj62_D=vxI=K;Sa5gP zxH|+31lQp1?yf#=mVzm|Bg zHtYMo8~4C~@QAll3wH@KXG6KxP>kU4jkBziyIjW_=elq{(Y^2HtCN|fTgPAi8NY-g z2UNQsxff=SEq_ioGh&4T)T%7Ke1L846Y^T1b9)04t&)!4+lMKqOJCn-rK@Q7*4*XV zb~3j*N*Aw*<+qG5KhhW34WSC)HIKf+FZI-VCa)U(3B~aCvMQ~stE(;jC(IU_r~S&v ztIhf|fpC$)K_Z@3?~yg7S^TU=>AIJp1}lgiP>UoA?xB#Na?>*GA+=^5mxzQP=!5Ly z^|z9{UTU|4fk$^woJM-jGb*ewm-zwWDdS(7F)<;{hEL$gip`$_)vIaKm}2xK%A-K;>Q$-I3*y*f>h6WeC>i)tL2(@5y`K1N-Ty= z_@p-iz4y>D?JFqBS7prD#O)(-tq}^s1Ro=AHAf-yyeBfqTN3qDZd4YHh{??SXJueu zP+9X?UXBUV%YO66V59t1cqOI$f!c&vQ~vF|nKBk9p>h)*m$l&EBMVkR*npO8Gno`C zMa>RVoKmP^A%Hgs3AURphkUAJoprVw664`n^g*=OA&d$@p0gh)Fiw2S{73Xr5B48q zc96f>5C7E)R;wIB!Kjqz?Ankg~~>G&WZqPIB2Gri;{2m!_#FgV^*9!kvC zT^!>86O^qL;sW9dq>l)pcnV}TJ`z#yMqul0A4e`wN+N_5O<={aP+}#{at@$r5*i9- zu+(Y}2+T!#6iX1n%aPu7q#f*?&6D(pHA??Q_*IJ@sB|gq_C;aUv5z*(0||CO>Qlun9*RLUBORE~nFpOHfM8>ijB+8Gvoa68qkM2b^ z_Z<_02YQVh&LBfXoa0DFz{QMbHUHF6EGR}6xsh%c<$O0XJ%G<2Ie_09iz2LG62o{W zLLv4L0x5#B>?>vpDLvp^mk`}PJT^f88WR0p)J`MFDj;3-TJ){IlGqO3fSTDT-(RDu z0`Rano<<7y2Zai1_D79oulILjY(_3zuMgyX&bgf?_;_SM{kRo*<}Gd?78D6ms6zg%@pK1Lz>DqUqSSJ;#rD*hr9RN=9vu6;rc8Bex=W3<-0-@y%`Y`&1) zm~cG#swKXsJnURtTwlLJEN;LK`bAYQC=4nE&CFml(OY*ssQ#t z?dr|s18AhBu1VVF7bNJQW<%~zC5j}6O#RS&H8Z}R7dhyI9k zkRUaMl;l8~u3nX77GXF2M`IpuFVG)+xGB?{=OxNG5^qBWXq5?}n%S!2bi{l-2>y;p z$MhrW?%P>!tDFHv95Muw2KtwY2mxx$f8o=Xa+Y8;X)9$)5IpU?igCy;r0VWhv&(8H zNe=dJr(^`u8Ef*d4Gy6k$r9K(LQ5j?baRQ{agZ!g?tQv{tQZ&gVyJFG=OOsnOOM`Z zc2f-W>4=np*dA{>WDur}iHD5(j2n6Yf?5__>{Ctx9<%KsdrZhvYL{>ls0M*)At?hi zaAz3guHPX7B)mYF-+umTE^yuqf2YD%MG}z4Wjux{Mg0R4Yl)8ouE8O{lqB4g9sPJy zUjla0eql@|C9nAc8VQ-6;+~Ux?p;xvcZo`<6poy&@+5 zTYN}%7C;zS6Z%3_tqq{dG=;Ef@S`m#75VaRJbVG&Sa0#QXBYlB6bdFDpjPK)?+=ef zH4uplYmFlMEnzPg4JJZ4&|*gCn=Cd;-f%>o3U&iXR1mWVDNjT9p54yM}c_YzUd)p@&% zp%@5pA^R$S!7{9Y34aJx4W9%&FaZS^s-m;UP|}Bz)tYe&bP)}s^vKr=&NQb-dqZXhMhM!JgH2*qt~7&`g*oLf)TIp)a}nFE647)=uJVjw zKsfk8NIy_Ub-2pZOO;@y0Y?%4OB2gLC8oU2YJZofiy;b+CI*g zsWG#(kk37lBv?0iox2 z^x$Ah3TFjyKBIW#7uDY78er0acx7d=tG)KKFz(o4-`G-|c0i0lqydGZEQC=@PuD@9 z?Be)HdnR2(c9IdPoPh|t3L(@gHW@K$-J}7i~#1mQ3*frBTeYoB@nRxaLf)uA|g@(jyP(X!nTd% z18_V>bBa-U^(xQtgZadw(kupTW(h@!SragMNlaivI8^Evx~I!6*eon39OTqa%)^++ ztLP;ZO)#N{>hH&7n98u*=)$dHm~Erql!O|*(oc5#Eiq)7qv5v;$YP!H4GAiG(+ElUezBw9T-_17nm*2ZJ zwVOCQTKSHQi^w^^VmSd#VUioP@Mp>cS929a_sJl>yKKWeqo@X#*VN>!ZQ)V}dgGB9 zz$0`B4E3JQ=H)|&&Wc9?(j+F~nP7Sg@dvvju}v20STC zJ=ihtY)VkT}XTQK{E82tLmR_E;3^)P;FI)?G$+<1_2!NcG6a!#wJ#%{@L z=7wr++$-+;5#r-uLobh&GgP1{wJz-OIGRaRe2TVWczJtw`+6w%J3S@kD&gGyJ_`XA ztyb8LjgL>E?(!OIg*|LiZ$b z3|Uuu6Z?-82{o?mgapASW0;9=?WT?NB|0yfqUuE3Xx(v?9%z7*#tHGGt6s=@?$)rq zv|i_4X;O*Ql|G7}#`oYCeu}>5*UgcN==TnzO3y1@kw9-m@d zOyk~n%ZQEXRn*y2?po_=pFFYFx32<8XtkBt#)p>;b&cYA^H;SKlK>!79TsaOM> zqf-|7sHe>`20LbM;nk;QgD~rLUm-)Fa04s5k>Bg-Iu`d&6Uh4&!!mp88-(jm!6|&f zA{_a~`N2s}LE$Mi&gKp3?Z;s8l)-g$Y?Pqet%svxqoKuVb{8KWHa0rO9cXb~Jj+0+ zNg$u@kcQVsLHoVutxc&7y7LdCpwr=SF_(D|q`(8Pqja7SC>g@*`3!XDIm1PN=b#JE4t~P7x>bLSNU#`anW&hjI(x98g z+J3j}%1={g8CUT2dm9z}F>+1B-p3tx^Yt`JGBCbBj7F zb{^pDCa2uMp4ab~Gve8=7vr=rAFl~M5++3AEWj=x`V%Xhq^?TAQbSGC8M8}V z7vtpEitPz>X0T?nJ6LDi$GrU+ckDVj$et zxc4F9_s-k{>iG3qq3eMx$`D&M)~R6ft<`1S+$#y?n#tLE20TR#F2yqem)}3=NEi9D z)&r`oglw#ZKXm~XvaPvHhnNV$%HhZ3rHKA$tG2`@9OM_C;e*B<1sJCD24U?D9qnYp z%Pm?iwAn}~NHO1!k&!1}YxM!@ zg7Qd?$;KELIGw9|ub`B#8y^3g)s)|QFV6R#issLdy&dnhn^cwjwhe#$ zo<7y@x{h^r0?FbcC*+y6bTnOM+g8d?q7K0g@p}zaI$PCQ*=0`*;K1VIaG2@2SM%cI zC+E$m{r#Kxah*HyHZF^S%U> zCKvAEbl>Y*th}+dnD0uX?vmsOQr^5>-Tinxl=jv%@raL`I9i#i&0cSJy4tLqx_}dY zzxx|@<#|Wega-`Cg1DW6C2H|gk$d4EH9Rp{w*)hEDL|SZEG{lUGiWVsWTiVYg(tXHu3a+tmbvx{y+!z?7elr?MOPNfi`P)7rQ57CsY&!DI zG4e_nDD;rc(vHB~`}1UvuO98Z`(!gzQ=t7;y=Con2++22f)TjrfFR@7Ik72AF5*5y7w9^VFr zAt~rH%`eBTZx|&SF8^Czn0;{);AgiT%Idh0WS8GKWH=qPV8s|HwXY|LE5T_N%3tU|9Ci50UYJaeH0;aYgOY2_etNBpz z$M(i*Vdx&7TPdq(t0u>F;R>Y|cIMb2Ke7IUWpDRWaRrNkqPimeP|BUR7z4=->~}A( zV!xxbFdUq|s0tGX_A)E2u!vKzrr}N3KfUa9QiO*)G~}si(Faq#595y!Z6=QDncmXR zqscrVj+=rQ%T3 zs*$xdtC-GeTQn9R+51DP>&D5AS>ZS+B>%#@Ql3=WAnq`|tsmw-xhu58ZSVq&7A-X2mW<^1|=0`+E zM8L;@9bQlGLR;}asQ-~1a5Eds*AAm{V@pz-bGr-+U=;ql2aVURmH1*4M+!GgIek60f+8 zwkU>XpvHvO1QVz<$*kAx=&p}aX7OvgqK$9O8O4`_y9=EZ10Rpb{d&%`W8LAd=pYDG zwNR9`CRLTD^{?+v(LxJaz9$aYU`TLweHZt18D*kYH^xmONC7OY=jI|=s;e^hSm=2V z+_6Oyv|V?R#SNV1#s^GiN@>j*Gw@Ln)R@n7;h&!)xkD&-Hd)!9#?#rI~5J`6Wj9b%8-Hb z5$;&HkU7Z=OCH*`It$D?w$QTPoMrw~{c_k5ZkE!Oxb8%m%UWyXa!~Py90x~LXl{w$ zjfZTEp$hBqBGbTRCtIlK>p)WdgA#MEm-22(Tbq^e@&PL=+rL%im-m*+r{ppM2;FKS%M%=n0LQOl`*T!g_12_E0=h~tf{M_ z0VP%oj&HQWTkK(#dB(QW8Krk%Ib71A9cMa*ZIcecPNuqM#fllgk@e`P$qvx(hc{Q%9|49c7heeoo%OlZtlygH$%YG`vof-1@VK=1 zXY1-Lp;p==7Y81$@Wm<7=$DF_6YM9PyADba+dkBBDP3|E#jHH7rrQB&!&i#u>hNt7t6itt>&DT!s!7-S+AX zjDr2#rR+qt6-7OVHXk4RO%+9R1Ga|3;IeU3%&;}$6y$Y1)V!UgB=i~N>y?=twI_Nw zD(pafg=SQpX7!!s9xiK1b8Hp`hvh|`GwKbpCSE#=*~`~#T|Uhwrj-rmV1pqV&RdS? z$xC9SiCMlzt=ZK=?%yY22c=%mt~B@B`bu6a7EbyX>672*u4*lfMLGV`Q)bSrrY`aQ zTv>?IooLo5_QyAak!UgFv_2_om{)I+NG5oasFPz*c8?ONsc+o%R1tMFd%v-wlw+Ad zKG;9N)8Ja*autIl(br%0lvw^0r+g@z*M}+~t?Znr7>cRdb|vI=!*p8Sk;Rg}A82x_ zGO`N^Bt5lb(14TYT{9^Yy<{`hQuu}E{f?Iqq#h1u4;rXBC*mta^T)@$4YYLB*Ovax z&h*q4U0+{k9B?9LR<^V-b9WtUi$2}XnHpYzL_M)4(hN|M_p!eVGI@UOs7L;5uQ&NS zEuk}|y*(o!H=(_@HFre2r`|wWN3f}OVPWBCvZjIlOE zdWjH8jmo%Y-5ziv9%yUOv@S;VWz>CCyZ1*D%4Q|DGU;{#!?(BCR-2fHG#CwY%2RG| z7s?kvzbFKl7p}N zVAyeX@2 z7f)Anpqnb9wK8P;2VXf*7~XoCsoLw6j11fJ@Dr9PG(ov?)p~2}J{ASJQdINV2FwR_ zAKwO5!%~0VK*0YTK2Hw7;pPeY>CD0TRj9L6S+tE(4b&N#Zm)1$)m>C7UDAC=5*o=KF!rCTqG zf-dJsfJq3QcVr0fx_i!tnD3z^As*ViUvo2l_ps6UM!)=!ine>Xmhm(IWo2rH^cBD; zz=c;%r3FStc1A$efx`x@#6dq10lr8_pbx&Ib3uW{PaR(VI>ClOLUu!m{y-%?lyzF> zVpXEx2}jce%fs>^F_Hx}V8hbO{H-ST;6#-3Z{8eme58uFrPgroF4F6UT+*13j;QAO zJoG^H|0xX<)SI|XepBIV2sO9e)J<@xKC;E^LS6dVLC(Gl{Ip8?7{4c=yk+(nKz$~^ z?N58?p=TmQ&CsZmpw0G#lfh5Nd*q-aKW~kYUeZ#cA;fV%rh3Q@rpIt17k%@cNknGz z;DhdSIFu=>?#nmn5I2d(IzP)HLWlf_#C0>asrU0h%tlV6Mt{V*291z~RL0)lR~k5o z;)GZf0H_$`A<7HL7Q}1;ItdQQSma7AGZ=e-08p;HF$f?XfDPq4a)esn3-cjXt-y~U znU`QQjqt{!Oc0|wzs%m9NPy_?0fs_%O=JZr-*;h(=u4YmLJ5dskc((c^s8ZnZqXN;%Rq)a4jv&F}U+Uh-QG$&7$-LPz}C>z)r9UU~WS`fRYXm zY0Gm4g!^TVG{qRiiSld{;5!faN1i4f`!KY6@SHX+fD<4Y0A`I+uXbx z8zzk1KS299T%pV<=lG|a%sCN43B6~tG8XNccPFjXNCGSDX(x@br&pwt=US~aIqhpm zR@gjUaS+Fs^}rz`P%_Ijc2fL~_Ah;tliXe%E!3n%Q?9ZJ4^<>Wyg6*bmEc4v*Jo}HB96g70AxO zUwVR;;iO$$$e!B#VM4vg@apwxX6duuM4lAzgfi3dPI~5`X0G9 z^uPGJqqSKn^HpDx_MXy8l(PG&3fv!11HIfD?geFKrY1dc6Eirg=5}tojgPFXy$w`w zvr~W%Jk~B?)e4ouz2t8~Og3dzSy{T$(y~*s3QXlT#surqGjVLSe`~MhBBM}f&Sl(u zb)3LnI+Z;Zf9y`9l}420BeSwIJ+Jb<2nl|O>IC@O?(dDICG8d;MWE?Q?ZaewrTk92 zqPkJBn0r^NL?kSvb>6>-UHm#J5@)ec#n|3{2J9!|{n#Q2$cr<{^PRSN|UsNgV=jLMbBe#vMi;7`~J&a!tQQui@qz$f<@W}qdB2Hi4 zn8uckSitRIj>$0HEXZe-c_V7B^bXGL!m8Z5TG03G)b^p|YDTGRX@iILuU>}lc_nw! z$kfEh)^mj%5F;Q!h}cBH<=D>pLJky7cZ}5w{y3^bGEuuZLP!`oC8oD-TYtai>ATT9 z_wop)9`rEi+{X}L6RO+kXqv6Pc?-<1H0%)K?09}RA1X>oqV_z>KC2_jFu(#8U@>*q z3;SN$=^84@%3ojQyX~lz+50)t(=?45>v)MX7T8wHX z;yhfc43?Y#B|EmtI;1F#^WSf`%sEj6We7^<_sr}&?$(DNU2LpcoQm8R4PKtqZPnE$ zUcApR6BFNGk7yH-qP_wRUX*yC%*njd*!|o;1>4P0ooP#T_5ifMK^^Bl)fXOOqCUf! ziK&A5mS_L&oQvx}4+{We~eC3O}RdC&?S$VcDIqe0_ae2=~)CSbNj23Dp3Awt5LsCX32&9o5g5&rM~)t%ZzxT{S)z=VRF=MZ zKX^h@pE)#Nv0l|geO4O<-D<_j;a$MQMk|r5c9?i6{7(LOjSlirG`g!ytYlS42UEWap@yoccGbgpfL+@}6NE|3+?5-s@_{Kubm>I|un*I7S6c~OscV`j0@iw@ z=cMaqezr!gHT42FXFjMVKA&6k+6ucf?xWN$zGIB6U-m}xnsF<8Tr5G2__ut?iXSrw z2T9wZcOh3kaQ8GRjo%AGNW0DvGp?>(>Ku`cTuywsl}H_VT-iBDrtUU*{zM|&y&qe} zuQ#tRemC>$C#QcO>Cwfg?k=_%w8-0uXYZlJVsCtLnEB*7k3+--B?GErQ`e3y_fYg{}lVvU07Ivt7>!Ja8N!uv~G{e8GfJS}q2d^jCtd2t-PJVl?zr;g~Of1Cwu3K4Q z7kfwtu%V%GnVp-5yWp$iJ$Iq?uXFRS3onLq94^0*8NBaF(7fU;8d+Jg4t$<_6y38O z!t$jC4ex!tE={fM_C|ZhW2c0b82%8Kvn)LgoWn(wXl4r7POjBBAWhY>eV7bwrMx?` zeTAwfCx6erXy`cDdMm6DS65hjy}dja^v=x8K;zXLW-hsLY<0UTI=MVtGS6;rs;^B+ zOLHAwP|Q^}=<;}OH1|Kqlp{T_J<8BABap1GE{V(E@VeMRat8}7d$Tey_}GA-&q&}x zi-wrWDX4}I`j?TKGCLHry4q@a3=J-CFSjU#AbJcQf}UTz+%ML5wn#fahD&OHuCjD3 zIez#KOOc+APcp34n1qG7Z;HNru2_`sz;!&9bw`)0X5U4h_9l~qNu`Vqa8;(Dwf9n` zJLvK4LFnl45LR}0XM6*r$|M7$dLsxSJt4Fvm`$0n&+*43Xxotpe_@+gt`BkPTOSCj z%;I{Gm(kh-f;a{n%GxDz=MLL;+k>)C2Rbw_cOoEkn#B3>n*V&vF&Y6D8o&JVOKJiJ zK0Mj4FDdQs3>{40bdfWbrGGPKun89L9-`Po1reD}Q}=20-7p5RcsQa*BMV7pajC%O z17~+7=&-3^r~_Q_u+vREVsjZG2UM(LoEkPg*M?q{Ccez&#N>sHco4gu|I0L!<)|hT z21h7LIieHs!T-sO$m5iZ4LC{+>8lfqmXT7CB&0~U{P!oHm(sM4y?n%!<2nf;FB}=F zciTb$MOvFDmdnX2viMR^0`(cMBO;(zg$A)evJVpDBzU&*f4B&Z1wIw#>Z(C zy8ghQPB|n?t?0zdkfjt2Oj)cy-L^%?rmJ(j;_2+zC|`#AP%$A4L;8Jq0iOO}ww(pR zLJ)R`<5!TrU}*3a0>XH&e^&aXzrR{4v3KauSI#_x95ZQKFfr8C)9s`DFm+73%pHbQEjj@6 zv;=OKQ2=R4_YmSEkQd2!+Ezr5;SvG|gWwCY)@1^^=Tgv}lvK4G(TYWrPB;CsOwooF zJo$wi;aZ$u?vCtqzZo=P=IIwVJ9Mg znp#seI0%O#wH8R1^O>`2^bCTK6;H;v+|JgYVLEzdESJZDZ?&9u~C zyPJi^W=kb5mn&ywfmGFKwu4fvrC7n~NKmrueFM=|(w$Cbf!@)Znl^+3shn1={Dv!O9q$LW1^33RL_^L4W9LQ-|UHynPLevfsEOPW2k8K1mvM0c_ z&tHE7X)fbb(A_`QD!|p1R^%P3O-|g;o=O65$7v;KQ@9k(WtmC~@iv#JMHKf}22atF z1Tvnq#Mha4Bcwib)GntD4xVn?Rq3Vb9YbSUGrv8`mi#2?bI>#rTPkAR7KKrn{@@gf zh4<$8XHoJ-V^#wBP7K8OtY=o@e<7~8kpB&C`LkaG{Xdy5z@hN6wT4aHCj{1>w$z(O z`T&OQjgE`Ed4$L4`80~sKy;0F??kZX&pev&=BsYuNiopVMO oDpWkV_#m42|3Q|aa-@HdDxI^-7x7SJ06s4n3B_-fVxYkP0Lw^Q^Z)<= literal 0 HcmV?d00001 diff --git a/windows/deployment/update/images/outdated_outdated.png b/windows/deployment/update/images/outdated_outdated.png new file mode 100644 index 0000000000000000000000000000000000000000..761d9066c2f52ee906c9f086d1ca5d49f3ce94e8 GIT binary patch literal 61088 zcmb??Wl$Ym&?fE<0WMB(CtTbmxVt4dTqL-=yE_CA65N8jySux)bMfWP=T_~H zshK%*X8KG|pQoQb-4m{)Ac=}ZfCK>nfhsNaT?GOH67zG*LxB2h8Ro|;|J=cVMC3&v zAZlWfUkzbD&k^mUv>hQJ(0cycAivPc_FOr6Ns znOT|HzFm`9Btt-45KDg-QFGHf`w45Hrn#V3GV1bT>)Oh(7H$NKG=Hv9!fVS-}Sa11&hn?26mqq!lC8gvQ1S5SCNrk3u1zY^tXjJV5G$)Cct-B zf}};NWW-ILx7bjV$w)Z-L&N$B$iAbmp)mW%!#TICc#)Y`(_|eo)S5R`{+(XGf|0NW zKagmNB#wTE!QwjgDmuc=X_CXn)0@l?%D^Cnmc~B+rCf<6O-3pqxI=SRDoH9+!v4ZG zC5wfn(v>gDtUOYf7Nml*P0njh^Fw(Z0|9;U8$T4A-wTFvp_1jCLkR(vnkaSgeB3uW zG@^OSU?`Y5Vk2RaG*dkPgi$cPu#F5|rkEEKHNC&X&|Vr@P$K=DOt22}@enzG3aLUh z3a*wN%_~31q}ctyDpxT#|GSm_P^d1~5#%osbyZ`0MDu1OX{er6+!{IZkODu-gS5C@ zEG)cX5$|}>ID}%>+8BJSDT^NHLYWd3ih4V}f*vU;gErW0as)kp>~uMLuE-#SNk9Vk zoG7`bvkxn-U6y30T&Q9-CrlQFMA@65YtU^CmY%@qPqHvb zf;Uwes?S~4Ax3%esL+7coae>gNtVg=|6ZnaBD~D*!Eux+3dQAYS*TM1*P9209aJP) zx^Pl}6fMC#M{9zwpFeF`AIGMJRxbm2XeW~I&&v9+>sBSvLSL^Vr&==IyA@lfd|Dt= zp)-w^og^W4JZByR@pSXxw9cQnUehKjW!hYRox-M{h4E$eMr2qjP)1hsmeDXn ze~SuLk|oGPa7>V*b?B#u`L=NP0-Wm0^*;5v77UDtiHRZRbEymO;|(rXSK0^Q(j^XO z5@i+17?gYws~xvi382X^r{Uke##OaS!Yx`zlF%pnvG?Ba};qTG-u;B#7Zv6 zFDZ21{?k8Oq!1pnT)3$Gv{*?j5Wi4qsNI}fQcuNb1bUh;Ck0KW@q4eV1tZIp(sPyT za(Nz%Jw@VmueW8ci49Bc@%~O}jMRle&JtzTACDADTVlkr-l*Qruy8z_%t}sn=HPuV zh+wNZd1wlPPIuqu)t3DEbZ^b~&@e(*mx(*^pBnsuM{~J&l(tq@&Q4A?mX}k*ef9mY zw_LxlWKI9!F)`rH%_Se$IHS&&?r)PrO4CdXe`hkSw@wGeE^6xO9-e7#t|Y0d>=P5@ zPy7GGq9T^d6f}01cCS#;uz$0xY4mh!RoYNm+}S_Q@;O#9_5Nw@*7TzvVO3p)2Xz9g z;uixwowL(5)*PoxU48#~#4@3;6n#8zvnNLhDqQf^SaV(4dT3>)>}HNfn>eNQ#Zj?E zx#L=Gb74vIpN5Iv)%+5XYV-aR+-3z9i*fGcJ)GnuduAXlV_S2(_i4!emkO2e?+6-Z ziH9!nAu8b+AQr7!ri(B=D!$}QoO&AN0@Lo0-xZ!$eONJCtb=u z6@eDm<|MZDz_55a$9f+Ze(&Jls2TR1(dEXD38PrsUe@HhiK+YjeqEv@Th$N>HC3+$ zms&HQEv##0gZA0}@t=9lat8$NR9z?uhCUW4dSy@n2tL@>7O$bnR&OzHUPe1mWAI|R z`OrvD!%%sAz?pfXl0+v26*asqA(3Kni*nEi#Mne}(FMRaFs#<3FR<)JmRT%cDzl(Oreh;H`@y_C zEl(*N5m7fGXR7cqlr&cN5}F?v-*1ey(G1ZG-EL*LkPnO#-%;jy6q(QP=QAt3*hzKt!wOu{}M=uz&7?bELA15CBc$0S(^atA~sfqZoYXWcL|*$TXQul$-$ea+jVGB zv4%_K2wvuF?j|6ok?ly~+-`~C1{zhg3jF2LKnhyjH<@bo|7HdJn!R8keZJDrccZ-4 z3{YbAPxM_^<^4aX%=F=I2V)jC{^XuJShUeMC;g6y(sXR7)+(II2rDU7KlPP=HgE8y z6xBoe8^TgSRg}-qFME!|Dcx8LP3Wl6l(!`4?w=FqCzWy3Hb{sR1}bV|4ST(lroU+fPo%6BX(y#6#Y3s`Sy`;<`YZ@g2)l{TCR$x1=zf}-pp~K^4DZtmT z&omsA68%LbZc4coY^H`wdz;I3?H6^9fO?YnulAl| z>dk-4WSzZt2^OvAot^IkLjHkf8@MZ)e(Mt8w1no-#aCOjCxUE5l&!N2USfzD$CW(V zMGN5@O4Soi7n%8fIj0P%u@?$CnA>(;z%=WP(*Mqf_6C(ZF%?_nQ~t@Uo25&wIyR4( zv4WK!&-jsP(v$Fz^823ooe3#RM6;2P_x02QxhffP4ynJ{F}+)v&kvYAQMu)6L8ns{ zZxzI$yJ)Rb$Du@xt+{XN^L&5yX5mhsr3afy-YWR%ZTUWDLy0IN0dx`EyX=Z?WBF#a z`LRxH7ec*CK30S6N?VD-l4yhUo@KBam8Hv4lgstU_^k#H&K};vyt-$IHQul~fkl32 z6BnKhD112mg_c~b=Tf^th&hH5TvVoO>s@qKw4Xarkiqem)z(F0`VBr8ol~o zIS85YQeU1uB6v^gZ(^#e!-Dp9;k3OU`pfGH8zR1oCd(vdIlI5aWc9>6B+KHlXf=3j z|E|ERb-W{(?+y&@ZM;-3Wv_jB;5g;{f^cHW8Xv#8Hc;OcVAGUu3kQ+hJ;~+9i(mqq z^1R;F^?3)!4>&U)(iU)Y74gzf349%k~Zu}qfp?m^Qr7PR|M=KhsVp2abKA9 zIM*JQC|&C&#(kv@ehTZyN=9mv1v9{QOW6_n4<}&B+Q(u8M)e!J0{FK6a^I2${2JfI zti$$iL0#)QSInfu>^?-YL0~IG27ia}`qhIyWhOY!*GrVx<#ntx`fL zuwc(T?~0DB&CnlKD3oLirF5g>s140yIhm;uc*yLr!cn3hJCU>%6b2|j5XSd1nAGZ}&tRZ7-9_axf`;dQ{8Cx)G&c{e|^)l=Z{4L+GEktL{j@FeB zY*kHL8q0df=Txj1ko0)MH*xqiO^r-~yG95ayYQv~fhYI&2L9&21ZkEe?Ui^%YVEnw zy&^G9;wqWFQ=s?6W;6{05TGUFrTXlt_2e>#rDC!)8I9uMwcPB8K&;h4m{LSwMX){g z&vO)#)6-LF_C$ZbZvgTg^`z_WH6VZD_LM5P-9ChW!J_S2uKo#T zGFk%TCK*bviMjq6o#CO{-&XMm*WA$jhl3B-6_etuQ*4Y+r}ygyH}n>Fj1zu!55#hP zL&Mzs;^IQ%92e5+iYa?wWA3c4cRvXy2HF}BACCK0iR02X8OXgw>Y4Mw3aVF?k{3Izs#@xWd$oa+wNi7? zx4q=BTCDonX#e&sf4XR^*J(K0g32{vJ5t19#Z|t(qrJ(xK{E{8nG;tk2zB zLp1oCJLMYz{ubIOdO+QVurzZ4iPuYXxLCQwQk2)|$V0SYLlwHXyK&e#c)KeH6Z@U_ zCKUV7(Y%02*3z__1q!u;sUoiKi|^gLrv}AlHGpT@r;qS~f_kOv=?JkQpGGIPjgFIo z=JR1M^N6>jI^#Z9y+~8viXvbC40c~2gUF;~Oy%KzJHZ`veWO>H-|8@J&srZcY@mQ& zT}H1V1%Eg&jua{xc-%E4+1Q9dsinq0TX^L87L?$ znbTbWwYonpw=>P0F8Lwau{E`T&CQDn^8AfD65#edqOGFW;hXQ<>24!U+x@~R#hGOE z%V5}~qW(~x^jF-8R|hhXmb$F<26#F@WGMy!lL@#Uh{ME|T#6;+Fv?sXy5^)9aEbrM zNg;_!_$V(Q3H1hX^e1!<@_pP64x+JJ`9N-pkYIu~_F>i1ipwVs6~$pUbg6@{>%DhA z=AGv$SSC3lPb-D<*!j63Bx06ERS<0Evl7g}%lgSI){x_X64AM5YqYuj9KHPsb}T%L56Im}6$Pgo2#}1^jk2>subT1bhyAR6M!t)PL{G8U);LrlTmY zKm<{v5#BBr$~1?o2Tq2RcH?U;3?cUtn1>i@VNdW*3k%epzh-Qs0P46ip9w9p+HAVf z6GN7w>g#LHtsXaoer?3^Bt^8c!VIA#hJ$C_*yGjBnqKWH_U~YXU*xIfl@|>8tTMl$ zReOV$f=DC#b>N~9kV)9s8823yAnp3wLX8!64Et=ufs8W{9^&em$!s=3_hhZ#7C7@g zSG~C{E+k4M6nT*~bH}?8K`mjhk0{x|r@t;MI?LU2zJBMO6&slgXkOjx%tvUW_)e0q zA>7bj5XRjOa%HQ}$(#+JpEEw*cBio(i-{Y`B(qnbiEwyp!#DNZ7x@Cf$XR@%A{uvZ zSN3UKFUvms2l>G`@R|M@pBlpP0cJwdK!84|vpRSl+YxP1Y6!XdTud&fb9_6OVBL(^ zEXjFI*3uCa@#6>;A=aSXE@Om#vj`;l@#Iby@HP(m2AvNXavFQC`hL4Ut)D_=95c$5 zt}z_f9mRF(wjG+lAIAE}`RI1G<@;g>4SiM1+4l^kq3QRu`eZg+|HL~g!z!ZKuaEoMw@@k$ z`Aq5A6(wR^-1qI!#Aj5ZXO$|*s{2NQw}F=llDy?$RGpA{<8)Tkk+62;xBladNs`UR z)2{2E@GA7WR9gXdZ~}_x6U9k&a|1Lan;B^Y-mLA)1yCIV>`lQyB8G#g9S9nDhSNp( z)fi$UK9{EPQ*SsF&t}a|O%HUp=0~zqOl-3WeL(A_dE)mHF-5dY&X8ikzCmSNQg~L2 zRoEx^T~~1`Q{v&FLD*jfsNYn|Cxl1YRM0Mj>`V^3RcY96x4!O0%JLlC@G~~CWQtfB zD3$g|m_M!bSOXs#C6E6W?7nQlm8xaLido)vt3iwAPSKwL(`6pc3D1 zM(pAazlqH8M0od39FXdo_e~jLs|ALuSueJN%B(~7UkZbXFD`@^$Fi6 z9%a{s@uvKJwWgwhSTQ!MO&UCChl_{hBB}}I4tZK9H(q^8^c3x<08_A0A;!srkCLls zqz@xkh%C#Up07VRV|36-4Iv(bflJTjq6@$8H(p55{}Bp}xtuArHo~t)$1LIU{~BV| zeL?I>G<3-iUG1=e?ag~z>gF`A_$7(jNVq)c(NnC5m&z%9w@0pcghPbzC4ercW8SuJ zwF=FX;rNvUX)X|sC4fyy^peS{+*<$A>T%*I7PQdlgda85yGOe=0tn2^4@SltBentB zgsl_yo((K7MgME?^=={_S`ztmhxp$N{nnfO8;n0)3yBGz;cLNDArltC0GA_g!J^#n z@?A`q-e&=!gIm|XjL;Jp`T)25@^PWJhbBzuvkfon*Twko5{W>PHQTG`Jbd)kKWlH> zC}~a-3)6Ae1AVTc%kua(e3r%I#d!_+18ssn)o)Ec6dMF4w=L(zi-WPGwzj}uN$X0w z3}xH@xycv^$+ph>Rp275IgdhUHgLr^@sH5}4L00L=Y6c9EvcZZJo2Iz2Pm%Za>dNn zc60GPD?ZUobDk?u7yg$KsScm93VyxytncfzC3oG!5jp2WZ~1wMZgh2RZA}BoFJmi# zwTI~KzW1$J^G}>xlFzK0(~V5|F-Q}txJd^3;|FAkdf#au9`y%O+f77?TIf#4=6KCb z9%Q9TdY#}jL7Qa|2}&cp6XW#kWUNCz3g-BenBWjQ9}dX7SrxyzF|1-PaJuxCOFlGu zmTe9_;+1dcXlqBF{*a&$I|fciT*?SPyfr6!=u0lt+;I0a5_)NTiG62%QiB`+BP7Kga_`P9%>Dr9C`ZlO zc9Jqc9V}Wg+glK8Yd|5dS|4yy9CoFx>PsZ#P>>w`rbPHdi;&Ie*Ci%t$b}HBF$N-% zqc^v*J}<7RP{Ac~euvj(XrV_I+8SGa<+mZz{N(ivZwVh>iwWv*Tz(!nO|&Sp&9lnV zD~O$rPxPSIn4XT~ap}<&lW6<42FGnIG-UQ_^*|bQCO>U{zch@2Lh93F`mM0d;u-Iw z0akCh%?4!skuX09T!bs5J;I0xgcv!Y%W323de>*sZuh+E;aHG5rkq#p{P3uL(`}dV zIm2tuF*NVNt&??SS?YzrEqZ{tN<|>h<35>-Fn;-?-}tY#0U+Oj$?6gI2Cm5&w}>m2 zpYr44PV{C>I2>ygs+>AaB4XmjZS+o?FYd?}1bp-dXoQQxOYig?^cqjL?sj$q7&0(5 z8jL++!CNn1NLXdRvFa#UW7LtelGLIMme#61#NZ2>Sye4O0Aq}CrYbat4G9)(9EyiYhUcp`jF=0!q+{zdM#gxKqfY_X65We|Pz z&w+Y5ex3YbLF1F^1$gogO>|72CNkq9$-xm%6*7R{IiE*eeSQ=zN{>|LZ(>^(bG8^k^*9&@~f#8#EKug}p9>pZUSSz=7^5}Bb>Q3eH&K^O3#B!}sGS0Qkiof(Xr zfPUQvZEKx>fI{E8Pt&W1z(m1Y}V}TvaAO?%s-CzYpH*<^@&`<85;N*M`wym0{R#Z73%+yaN%x624tQVeWA?C(oHRf}+c}|lx#=OAB zs^%{SD}eNdJaU(l9ZFf z-IINmzx)aJhh8}!2H`)Xsy56TpV>FWR=H8r^x zw;tivM*Rj4zGKlCjg8u0Cx10K^Wl~iUv1LGLUCI#0@H7Ov<%tUSUa{Blc#O+ulJ+b z5xfF8L4No}3p1IH6b5Rwgj_=x=vrVB#wISOvA%RsN7F``-HOw3-b1kFK z7t}5`UJ8ojuu#W{=aYiJDHd^B;S^7dUBO7 z&-qf&LPSRKY2lo+Oz#Xkm>*myLUm$^Ecq<`)^!^$z4d2H`~0zZdI9_DvqI_IL+=%- zp`G?%QRZO19D1(vq0bOGWVL;H@_qLx&_d@m20`%9KV2wk3nij`HLwGG(i&9`b)=To zti+BiI?I>_XCNjnJ<+%+PhewhWz9FRa&a%hxvNib@BTV0yVWb=>wisVLXinrx%{y6 zH4D}YwJj<%`4U+qS6ff`=@i$$=`-4BBxZLDQtLsr1bAV7u4v(XrV_*3vy{EtK&QUrvc08kX$fNH_gp=Yk5C+(A zd@{YJMF}r4xfdVUfnH+Y=XFIRXcv8mu zFtx1_WOmMuPBa9u%=1u$$8aDweE%2RkR24AtWx`F&CBJbC@A><+`XYo6?#3PmB0yV zS-dR@DUW^F8==_tpYgPfhRgTf_t|5sHFX^(Nx8AM*re)c)g0>tvDOhj>WeH z8m(cpUVEPppw|GtjoF~2J*S=vR=+&T<$ag-AL#AsQyBsnfe=7&ZLBA&t~6CUoyZWg z;`t&j{1d(b>b?x0h#L)F;&4N^-nm1uW>+={H?LjzxY~MO23+Cdo6AaN1E;M~zl;`n zbBtKhx|w&yunf-@u~$YFqeE9d;}k{?HZY z)F=%(2o=0z56;!}y}7|P@q=g$#H*VwqAVHV24N|-HyCBwb?8%X5?=L0?11ekW(KMS zpQYRn!nbuk)rFJ0E`%F(>S}Rn>!#V8Zwnfq5yd0m{yHz}lwb(ElRJ7~{YO|R^k>jx zQUyT-d<`t`2HnxwMeQ0lL=$s3Y;}ofxa6NnME?u8w(V>3=QP&806kte-YWbY8w4;o zlmqSg^Y-sa+c=(|HhQzYO_#R+rSEzEX0_-aOyiO8*mhFc>i)3{yawkpao3QMJpv;OOiFYlQy1AE>m6m(#b4?WyhGRZ}K*XB@ zwRh*|(`znNDJta@y~)0K|6nZ9{q41@z0-P~{b-21ZX2$y*GBYp_ z3REzBTMITK*g_$R_Q+CE(^b`0)!kfML(za4puTe>=f4^=I5D@vL?|t_I<>SURHsK3 zY7zLAuZHdb2Vanbf#3t=N3mlaT1RRMfa=ytgJ1v6tqsElFMJZu0P#-oPIE|RSEjob z3SU46c4IY^)lhfx4@@-gZ!y|1{GbD8Wpn2GR4|02+A{gRz@>ayHQfbHyP^%!Ds* zk#1EzdaNGaK0C|dG3TaD2AH^*v?{sE7bp^WaUJjv} zBPr2w`$N1Ylk|CSqu}6kg98#GXncayB z;!W{9)OHln%v~=Bx|CY3ur2oJ=v?iWN&O^KZznR^oS^lZ&j*ObzS?xk1hBCV)G{vj zP|NhBRsp$Rx4Cbff9UR1Jz#i502?8qU<#1CDsc3oz;RfSgeFR)1dYll9ul!u+-`)? zD4iTdTm&mFB!ZbV<|b2xy{_}=xp5}yp#znHQwII!QWqUe(uT;z6_s%NOD#QwL=QlLx0BlO%a9SL~Q6 z&M6EWs{(MWl9d$XS9|K;#&dO$1Q-b+9>xJnbd(}eCu#~WpU& zMO28$d@U*w@gJkcBg~TJZ-v|qpC(UAA5D6n=0#JrZAFGT;#hsDuPt@ zTK~T05DxE`Gm?TXEbksy%!G~J4eA>qm_3C&4-qD(a=m1?qaia%E)b~E!ZB5!fmXy8 zj{x2o4Qj_6Rvum)ZocQIT(MvS1oE3d^6L?7F0-RV0Y)ASfLaRp)$s0*m3uSWD;zrp zA`i5B=tbXxC^ea)lKi;5s1BxMA2S&RG7&32CJbPd3`0@V@k5l+1OX8RF+o=eqMUNm zo-FqZJH2A4236MG`Kt#2hZHFgJ!@;#Zc0cb*x%A2X|8vcj+a?EJhPkS;|}LDccGLI zC@lVVnGevNo}D=zK7xM>5`Z?F9}=A{GaLI!zwqz-xc!F&dVJReKCD%yfZ|@#uIAe` z5A@q$quEBDbS&~G-# zOxX_m%U|IzQgVQE?I@%Zr6BZs&!*`v3RZ=V!0}*my@Qk}ydgOrExgKNuK33Q0#okI z-R)+_$I)dVu-Gw5WlaTqnQjB-(~asGGKZ;0-S+Ru?l7cb-eXJRTSzXL(kcaL%u>PyVMkvahn11(S+I1fAHxDzrFA(>Lg<>nQRgeBtrH3vCp;V;ElHf1;h$u9bSik* z(9rLFE@6~Yqj)p3lllw~H%Kcr0u99ll$1j(Wc+&h#&^6=d15ar6PXX_2#$~I)S9P& zVD{}H!`E|y1tohrhR$m6(M6nej+_pjlM=Iy>Ja60cgMRRq%_D8C4^JNRQjRtb!lj7 zA*8gfj{VXvF83;Hir)Z(JAbIJ_^V5nO6ir#`yHp&8q0c}$F{YVm zfaMN`v3*%wj3h8&mpoOOEP4qE862RJGGJvdp=THs4TRbWAkwt9i&^n~ee4Dhm1@^F z)n5gsXS1?9mKXogVcmYaq(Va7YxKIli40bsqL{^FhICDuDgDPn)Z1LvU2TvB)Cx3J z*eFSjysj^%CLXl7K_1=kxl|=sqnVgnnK`>8^k6(@KazDh>9z$iO_`TWRajA1J^Jzg zmCq3Hy|%=kX){LW;r(T*zVg_q=R@}wAL_G=i4Y5)40E2@MR6+duMLK{^{OvVnJ^{h z`0rMT5b3Rxv3&)a85Xgv;Y6C$)YMBMud`57G)wTB@(vLZnr~U@h%8jMP!rB2sG5Cp}1rJYM~5f@uar2V&&!`ix;2PR$OB#fS7 zSLd|^@BOctK3wh!+85Wi$LYwpm7$z?^ZOMJ=mBG=FdVrMN7SrLa9LM_?v*OdQM+@X ziGpC5L42+8I$JYS(193IO}wWobziu60=nR{+#j{>WbN4lQdu4bY*(+l1-||L!iMl+xBIdw8|OtGu6^HerzaCB>D*FAI_?%APYd$PAfKU9OQEfDS=U-DS1+>%XLp z5&LZRr=g?@D;*z8pEKOt9ED!l@xAq*mx0d!U}YDLNHBdfudnK?F-K1N#|eS4l8kRA zXO%K!ZxkETtx9f{mD~3{E>#dTNQ2uwr^zeJze|E+ki7-mXM)F(fg%%wSz=O)P9u+P zf$EVPC&K2~9WkIGUe~G{sPLELr1z@}B{g;W(n`|UpLtn4fce{8@;k2pG`4V|Os(m; zXpLH1-#3!lt*Bb-ycg!5jFr}wV6zpJWI4IvN?!rbrwMT1dg~*z?y1}RT#Z<0;v;oV z;KrYQj!})V&3c-=LiGY@bjWsu9rt{(k51_4!mUGE`Vr(e(Vc0=e45GbHhGr#Xu=N{ zY;ngHGfrmRekRNH-}_dpCJu=mS@TYE z`Yj}8=(1ckuVx{@8Yp8>* zf5ds@(K=mPVCTbfG1$DsfWdEU&CeMuz8ID`aDhc_e^$6y@8TwZvlQ7VNpWoGY8(n@ z(S}PDX5YNA%X_|+!;Ut1d=|IWkB$lroxG(Z!lQwMLjZu^vrcYq&HY4D)K(A#PA&EX z3(#WgZ#6(}MAe9lTfww*V^P>IG@n_mZI4g_-!_qq1P7yST;Kds@0+pUb6yRlte5FK zRN@^Md~priHA~hLO1M@oIVR>*gWp1;EP$;c9z37vzbfT%Kp9bi|-I z_)ud09QB2zIq-Phu}Wc@O3IklMS`wMMusERhexx*jN7aENy(UzovQ&BV|)V$l$p)r z?2-kQGYJ(-#2r{B{=pY#Tj94`nJT@iS+!A`AHCJmB_z;fw$l=hy=mz;3_Cvo*pED@ zs>EUs{vMjj*%*K*vxbRT&G#kB&BtuQb@l)$IRceIbAA|yT0(S~Z-Ey^xL**26XR=K0~R5E+aOzx?bV(*FwUk|KNlebXU%GGrkX$~rgWR#e?h}md# z-NY=ByI*gdEv&-{83L%{nc*ebXAW^}<;oOXuh;Tw!l}~KNKoalIj5*C@!L+fEcO2V z=g9JNv^7bSf;XjlRfrKQy1HX|9Qgn^$UX!hR&WV$!KTKiNp-?ra)%mHZyL)hv>UM-6=d6&){m(M8OhYo%^Ci-mw>^FtxBaxM z8#*)Zekr&oS@sa9GtZ~bGD=svgJKEdicM>WpSK(y1IPx+qpC;`wvtZryOw;PnSR(F z%xMUtf@|>Z9$~`!S0xI~#aVAj8BI5+qNv9hkX>HJm>~0=u|m7vMBSOs7zz)8Z|kDy zp#z#A9qy4BuYd04;bQ&hh)%u4ux(_hLqk(_Yx|;Q*MMH`fekoO`J+XmY&uk2Qlp`+ zhls^+F($5k(2$mPsD;h@fhb&t^C@F8_GgC?yUIp(2f6Y~7io5@n|P#B5stLr%U0y> zp~L*AQ*|_(56fL}SgarfPX6>e`cf}1W3N5%v^M9spDP|v`U%6>7^dgA=sd6_jHOIz z#*gx+RX8ap$q7{*Sv$Bj8K(96iof;LRbcn*ZxDrC4xCi2&+AA*9QEPyNe(0E$k+*! zGW#RLo1bf4G9|xm7H2I9bew7;d5~ih*kt?G;55@ANh#G08$7%Y^ z*`$(Z$`&ItMjV7bc1}~!;)^Rz@+UiE<++Q*C#DQQ!n2+Qqn{jks3%;Hyu|)~0}fzE zEdZKxVqciZtl3&6JSIAw zS)5^KGzzHKWG<4=5`6hL{Esk0S6kw8_gK(*KrXdQ%4;Z{gIIyTpon(BfIr27cUKe+ z6nB8DE&=P#rt>tXzM)6*o(N(@Tf#LpaV9Do;dk^JsiP}vXrlR>&BDxl7&UisM4Sk! zzz8T*;i%B6*?R#*{%jAxm-+2T^%lOlZq)cU)_9XYN9LmzB6-n ztCX=4F2R{fM?*V>%kf~0?%#oTtATqN4r72I+ZgC1GdP1^)XsXmK+ub^P@R&q_POrg z-$X@F_g-FG)7<#1?jMaxz521)QTv;_<&ExDZT77MD@|rEKI`q$`->;QajK&%S+E$Q zy();Q9Jhg${(2^TwrD)Fb7Wp$a<~dF<={YF7>GoOd^q`&-Sl9lZ!U3all>z>L}Ga@ zt25mh1vt`dvu;9ay2La)_*aAlsqM%-Log*F@mAs1%Hapbp0|w>$&^AZ9ptavdz^~E zlmT`7DXwB_`9O@|?)QMssWe7hLI!wWx{!pjq|wE4ypeqzSwiz-3Yh*1m9TLo-mA1+ zNV{`ftUpdo8b$>ccDeQdUqBI@O1uI~o@-7)Awhb*9bCe^acl+fCBwOD z7tG|`7h;~GfBjOfOb6inU|9u4|6=A;Lm7>LSAiC!)S^Lw@QWy!CxEBHOaB20$;umr zI0d^GMHzHT4ECptUYD4mLiIckdB?UL#h zW^<5$`L>+mu1zMnFrVXYUw~(quRqYQG7BC`j{sH9-|?>3?zhiJ?FA-(+$Y!y!I(o& zroTkkyup`m(J<{bBgJicguavT82iJ1$ZBza?jGU(ubSHbT`(K?S%0f#XIpJI@L6w+ z`dJNY(B0nsKNYxK|DSJyrWNutH2-8fd43;eHfw(WBN$ouLp!DBKjA)f|8E1jBDE`8 zdky4!ts)e~Iw<%o2^I+%_Ukl}^J&3W0MtnRQ7irYhp(B)-0_x&pa&3Kr%F#h62~0% zbSU~MXp0>3=?fjVLuR-!puJe^PL@YiPtTGKAjfFjqkjQ=ur=9SBg6!D^alUqcTH&> zgnde$W}4Z(={%pZ*>06?>{{Qu(8l)H9#lk*fz9x%$zOxdXn6AD=#o_SqC^XD%;*$QT)f`D97^gtdYr|~ zj2_o)#KgMFu>2j=xA!^wyQhA5G2J>`rm&vx^rdO_Q~a?;0^cyU>lXwFy4N~x0gv5G z#nRD=&40qJ&Q`;fH$Z`#f5aZTNtF(dXt2k)9T`r@Yx2+B{E#;UbJN=;8)&he2Vev# z(!s$O9{%Oc>*0uIf`1L1YUaN41>uGSMLk?e^C)j3& z>8b+C18kySHTdEw07?4dA+Rv`GWpg8Cw1h!@AY3t$!ND?COhe$4zPkaI%4PQM`E zB7R9NG%MElX>98<4jBeWLQEK2!>uE`pFPNEyi|VLzQq*k61rd)TQq)}f?eaMq0TUQ zaW#A1wSrLpJL+B`|3-3odQZy=s$K+&{rKQrsQ=KN=%r~v0USS^7(5=rxqYg6ciKN& z5$(s`cih?2&#Ytj9if))?FX}2`ry%+;k}~|lbO#m(0ntPCJvFnrp7N1?N@b}} zh$;2~7^_Hz(Q*5HsT=0-S^)b#FW~Th2JmVPmFZqy#ig_p9$(24y~=A~(~}y1e?ha< z9y&iAKYy_)(E&PrKvE-ZNhZ3SVhjTMl4m|y@CC9UDU}u?m8evnDb<1K6jyU?T_h)j z#d@1w%5kwK%6RUlj z&VzbEyLT@|r@m(_K$Pz8nj*cq@q#Mo9Q^#y*(5NMibHtD{)BL@(j6Ei0||$4?!vrg zHi3;0%a}God>Er$tEL^iil}#9CT~@2*fo zPqaV$4dSRVJJc}1EK2mWz^Ggkj9{&}Ip7h6yMX8q%#I*COvg}0I8R|5eDgd?Gx9M> zaw_*IC&*0}*SJ;&=FM=|_)o|iUeDhYu!{RULS}Dz%*pGnSj+wx^ZoThJk09hCbl7# z=zP=jhtdbjpUtbWAEarQzxJP0Y=2pvHFEwoWCCa zmL39pFiz`-_EWp$7n5jqzAcT5js>M!)LUONAG>=5c>8waMQpar1?MLZ0cymtgYX{w zGn>2p{>;9FCrI?~_%NR1r|FvQ?=zE!A8_t%tSDCC!Ns-S0)^gu0=*oOxnkLttC(3VcK^BJq4*+>@~-(Xhnwrs+k>saLpU%=LNZ1+X`*}5Ll z$<1HQ_8g+UcXYx<&5ECTL>FK@2FkJ9-gSMV^Vdf5O7CBp`ozc2kA~TkZD;o*WQ}-| zEo~-;H@;%R+iN+1t%r#E)6KKB?4#Xl-$4Eki&O9k?Vx7)dNyG19&A}gxsQZ{&{v(^<d?5IKO3;KJh^huVKpiA zDGXP}{PONk`>A7KTW;+niv6*`g!>dem-#jg9Qd^mJ;rqE%%so#3Ra?5Qsh#S=OL!z z>fPldD0Pjr=GN`FckA0O^fUTrQrdIvBhy&8#?co)%bSe94khNy94TPB!S5M+a z2ItGZNrRj4Zd%>|ZhP%DzFq-??=a8r&S5XNz3tiXfvi)f!~PqrP4CuCnpM*z?Gnv_ z4*U3PATELTtB6M+G{1*;+b#6sugRk|+RNEliKf@+x4SpZlkK|D~~W z_Sfu>&T;q4m<&Gm8@}J{$%)yWv)Ib@4_4k!yyj~))??i9vLKgpUi(Vc*l&D!Zp!i_ zMIp)8{T)w!W(xxZ8tp&7?A>Ry(`VPDsq=R}+t>4-qn+L>Y&#Wx=IdczfBJ{_KSpl; z;8Nw;EeA(fyFU)$fiPt7?$oLWS-`ZyFlyuc58pFeHe8v}$Mf+~ZUeSo@!nM$e6V5X zilpiNT%Q>3`9gG2;HP14zU24ke%|2S^blvP2xnlhyd!4@yS%%tc>kOTbeZ~i{(W?y z%?BZGe-maq#$(tBSF1^ZcHacq+W5V_asPtkf~~LnzT6+26OUI%x(|IXX!t)&yI#m0TWM`07c3>iDxZ@@730TaANO$r+~KYCrU@#uSAe|QatjsLR- zl5DmA%I~u?>VUC6kK1}$&po(gSLNh!VH36q5>ut&-);MQe;2#eXV-2_nmu;oD^@OG z-~K$@Wu$Mehr^k%_Q9|9akL)e@OqLU=zB-I{S8}R+Bo#vggNW{}Gh@B02@qVLy%SA9d$KOMBW z-+}z#`B4kD)rEfT`@-kWqfbj>#`^xFzc;AGAN#nDns;==vATey@|6RuxeL1OW=X(*udwV_h zM)2^2#t?g#SKr!fzrDf_oZfyO&o0aJgWavNodH=Dm`=EaZ{(DE2+Yq-G*Y0|EN7MGHduP|vNk8uWV9g1~y|s~(gNIyK z?fYi$Y>%vs2{rD0HofeWJ^RPdIjNHPDch}A9STbyBdBDx~*Gw(53ic>2NO&k;W$ZI}*hx$#*6mNRn`_KJd$Ay>f{nGVM z!`y7&^OzJ>uzrZ^6KgWw_b-S`ZcbR4&}V?hvq2d?0jKu_mAOrH`{Ve{0}_N$V|`xf z@AvqtK2N;i{z+rLc~giQ~#@9Q~W{`NPca%cU+8@&8K^mDiR$nUebD!%~^|J=O& zo!yPQXYZa>-t27`_>VDuGt$&~J1@_Qzx3^3FZ(wGN5@t;4q7{8*7i5O&+fS*KfZo{ z|8IA1jx7Gcdgb$n+S9{N&+GIcnp6TQBfBhXt#x`yHChUcgn}(*!V?T-c!p>!42fcG* z*vHeN-V3-m>95{@>FaJaJ^HI8VZcW*!{&wldq?@Ar=15{g?&{i-)0x|_rH3N_sDbh zPafCLW8n8Yz6z_13@G%Cy*z)6$8$LCcJF27@}A4FHQTZx&q;TG>hh0c+Wp_e4I1YA z$KF1DtbIRBlQ@j_cyh4IxX8+#UkChYfcwCAeLjuJUv2C9hoSC|4BhgtLoM-3_x2v- z@tp5j_u%sh0VSSqyZrHuP5lqFM~?SGdoNZ)l=uLn}VHyiBz^l0~2j|z5;_v`nH z*B=LYKRLwxnb|R4rONhBjOaJe?a{$*&;J-QDWcl@ug-Vm4DRp{&V2T>oFR4w*UdVz zlxJ?^3={~a;JiFC!1cZ0;@DYHkN5X~#maMHa{Ga0abM2#_-@zbwYHm|7#BM6h$MS% z>f$wF@9elT_n)4B>hBKokm2unzQ4P|zptCMYxIYS%{yo9otoF^IxP6v5$@lntBSW@ zT^xA)t$}W@zvJ`zp)%i3{HG+#JlaV$#|hE(KKA~0 zePafB|7nPumCv=rjVGtR@ATnG>HZHLUpgf_^j+-G;XZ$O-mlL~-k)3-?-=9ps*SU4 zTv^~?k3S9Yw1408qlo-9!<_zTyY1t#9BYu+Z%cf$6#Ku9$@M3_1GZK$8B9++*=a$aqPI4T>k*0&tQkYE=c?8 z>!WYNEMt(z)5BcHbF&1qT$qar%;m!j)Lp=YI71{8w@Y_{S3l1SThA zg3AwhotQG~z&GFR`tYDAdc)!QiA5e!Ia{VDe7*SaJnz$MS7-kCWyHS^*M@%@)pvl` zBfY#|9=z2mu`zM>_8-%#og*8=ChuQZrA}UY_y^C6tKF}y{Al|dnQY3ughf#$TjFXQ z-t&KNdzt^Tgbmr+xcP^Myt{K@azo%Z!8Ys8t=dzvZN>gi7G+Ex6Fg>5{kEmaQvxpf zz?}ND=z&uU3PLg@38XV^b_*nH$q?T>-oolZm&9C30{48 zeqff@aA_Vs=0Rj)o?*)D!pJvW~D(Kr8xS8-i?$UB}RLrPW+ zaDICAk@q)USTyy(m;37i<|WLDu3kG}=3yx3s-`wX^!;WvlChnAbkMn$G!_j3YB;K~J{nlP^-FWKl;qH$QfN>O@jfaLa zptMlmAui7>KKMgufy;2`7kYX9d62`i-|U|-F=}9M&qoJ)Kl7o(>pLpFCvF=^EU-D^ zujNd(8hx|Ao{!@;$Q?NISYMCV-UxepR^n$f4t@OTu2B;L2G2h9*(YH`-ixpu;WKRN z!B1!Idvmz^(?i_)PTD!~v)DcZydUr5^_Tu`ue=>LZo#3izYXg|L0! z4fc5PtEji;9sF|U!GC>sU|et4|FicVG&TO6FJrCyx;)y~^Ql+8UmU+}(0joz{?p_6 zey+Wz?E84uzIVs^zSQ6KiNStP4)lD^#&gir1D|~vJN|?1{Rg`}YwJ7uyZvvB4gBjs z-$(j;Kh@9Sl`r=E`2Cv~vIFgs?t+U7vZ&_m#K9dk=K_+rPGrpLO_? zF##`tOFYp1)gR(M{&vr(AcqP5o3J&zPoFf zmB(Mkc)j|@wwL>R{%v%q^?Ttj4fA|r5O^K9^MI=GFbJsrK+h)zxIQ}6;jb~}zAFz+ zx7+&iNat7IkFfbyl+{>|zT-Cyj;q!GmnF-*4yo=-fn;C>-J@KRMX_sR15O_VswCuj|uL zf&QNSZW@N{>-O{@_dmVp(f5mlZ!a{v4)yxWAonK*xIO-w#}l}};rgfEu8;JF^dVE% zr~A1)*4OpVy*(c91J(0*jL4I{U7qOU@?>9EIDZ@p*2fJpeGGE%gT6a@rM=ys>E-q~ zl;lO%m%iHn`n!>@^>=?9H!HDSa8|}|nD+C07B@QGo_g8!)dff28|n2IT3 zFxGtZ!7>Qw%0R*JRnV|3j}_uFP7oazOGLU^uR12{XXW@u*!TevJ;9r@xTkz z7dQj;?eG2gSnojrmz`p+`^<=&^g-C@&tt}|NuH5Zx^rp9ltJGANA^E%Hp_p)8JR*Y zmP=(aTx(93rVjV|XK(K(KvQoBzXNR+vX}fg+8?i{AQ(tLpQro#JUbXy`kox<_0&KQ z(6dKD)ga6ud?fCX{$773u}H~qgYWTP9*?}_{-?e`Cl7oMa-a{)z>tlg2cSv)Jf8!d zCaMNCA)BF4Ll4l`XTbUm#z%&3JXdG7usCc$EA$5LA<3T|0P5(2cL#Vs-On4cz~+Fa z!AJD)$xD1tVjw6q1onD*kk9k|-Twlk@?eig;1;OwVBBSY8qx=Y-pBJ1AUvoe@(uTi zaU}|v04KfNAMFR6_k4OF%%iXvPe1@LAeaJ{4dl--USQUq&-C?r_Eo4R`b(r^P_se5 zpY26v9iZhz>7N+r^W-4h?!*VfkQH7}yyo)=Nda?&6A)-s5cmjblE*KwFM9br(i@*S zcp8R}*L*sk8!*@XVGvLxXa{U1pC|kJJOxTME~Ix@nOlbZ$ia@tjk(iog76u$KJE}0 zTK;CUbm0tnw8hLBd=B7_qyf&zWeSBviTg8Rr7%mDYVG-tK0N2h$OG=ATUTDPaLHA05=~hA;E~?gQfj^h^q||K^@6?mjED7!Yw`|eC*?e3F5$y zIfA<2Iexqm-W-?|1`;F}N#HJtm@nRto9SRItR|Kpuk%$Psqu0nI!Wz@KMO)Bxwde(&{_L?=;7R7$xDAIFp{ z73hwc!E;6qoKY%N5=Cpa{DigVi~Mr{H{@m^x`~;f7O_ZA2+_1ot?N1Qx9d)HS{++Mzm*txxI>uwQ?^nlp8gGRm9Q)1`#nr&Bc zf3;h7-NerQB`AQ6`#(oG^qT8FQ=wHTC1%3hfinQ0jT~P;BPnYt+7P~CMacY>Aq&hB z`jfJX99LMxB0V81!xr|Gth((AFWqwNDxl1(Ll>?NTd*d0QCNJC9KVODP$6MpKBKq; zXF5?=S9kW@nbb4KJLLq(X>z<>$n_M9Sfr=q^nDai=I+^b6+Refby{jsMUg}zR!G75 zy6vqqT{*+AMN6g9=Emlx`lc?@+-wnx+<$4R18M4Zv8Mzz`L2mK);BfOH-a=aG>JPT z@-Bq=NzULa&{aycTCG$lR9yrADC->FB$N-Xa$1A-P5GdRn^W)lE?A^^{hxhoeTTg9*%?-w4=kJ_Cdk ziA3giNq4>(nl;{C$WI4Y#3H{|Kl=I zBM8a{HIDE#W;Ub1L zXKcam7BKdqX7EEHm<#B87Wx%`9E|0s5cnUI1oZ^M-OwelDi8rrL194k;1f{^3`Hn{ z%GO1CKvl3H_rw{HpS3fLk!7LAM9;AbP*)RU;saz+Mh2GkwM1m~QA;!HGBfYg%b z1G2`*um&1R2fQJ-ut|V0a2>0TRANY@KbI1}ualLnsU5v4KTJ;B^PXz<&s4B&%S*8P1qv-x)@Zk#h!Ft3+H}-7FC4pdM0T ztq@paP?!wT>UR9zK}BU*}Bx1nn9X6o_fmv-(=GK`D`T&~l|* zRaaJ5T2U#MD_X=ljy14qRYjW){^}`HL$ln%nFj#G&Jdm$*}A5->$M{AX`pANVqs;q zKp=*}Qmv%ub}Mm z&Optv@YcW&P75WoMBs6*nt zc9nlrth>`jKVQFI2q;Zfm-jweS&N2i@lQ>rxvN*B3x zc|mp6;S*`ASFAmsdFiv63ynr+bsi9q0EnB2kcQ|^7 z%vs`HQ+PIX*Wr|FO%~2P0KlP^ly@+pQc zHXS~mGG}u@USWCa-iXDU-76$YbZ0I2{Qz~Pi|~JuGbUqf#QEv)8RCZKnd=0ys{gl1YB}dU9Js^Q@V(N~@c_H!nVLPf4E%-g5s|thQkM^VTu$)nM z{#4SG*^8RRGL>4b71gX*y!2ZBb+uYnSyZ{g!K1cCv}yGk(7@dM!l~0|v%~_z) zYLlbA7c5!pyz`{dDD(F4KYH{O%TflTo;>H$Ew`TG3>?9q`bC`K@e_82a0b`6U>2vZ zD=XNrV##+?r!U>$)Yu~A3~EN*_Su)yFBb}6JlP%L`^~rCPF=M2WLlQLhkIp1yQsbG zh| z-y~#p>X=Z!@4o%vyICu)Ey#+5|0nHbP$LcvJr$r5u%!a^{UiG}}g3FrlG zDF(s}F#v{x^k7V);1i#Qg*Cq~bX8#x!WryA7;CX}S=^6-KE=KTErK3LT`)056U#6r z&>aBYf$*RkxNX6iXuJmgk^yv#2VCHDL(S|WJ)kO`N%sI}c)_xRrsIwbT!-XI%`pVj z5t;*)AF5`c!MFh^hM^%C?$(e*P0&gp&}0~qL}!f<*ucQB!I1TKmIFZ-5L32HW`1`t zE6NS&syxUR91`&XX7qmW>3JAM!G$-%InA0_&=XV-R2UpNVQ@taA-jDT6M58`+MT4E z-u@@JUz~y3!&MrXbE6u(x|2XK>4AK4ut4FXk`!>@z#zE!33o`!5P%PgkzwwFUp&B5 zpbC5fVp=%!I|I>yn*!a89Ko>>1wP{%G1A9GI78ILh)c!{i`E9nfmQ^rfs%kCVIoKy z5YQ{4G`vdPQOrv9Yrrc%%d%pz_}6geCZMuFn!5zJR{$q~8J%LGhz0*!0Aa!T11tEe zI0JgzDQI2MNZ`{yzfkTD7=&PS=@fLzdV1ur;J=A(y??KAcXSKfO?nFVz!@cZMw90Z zdSLi;LU-`aS&!No3ui3&Z2{Dqrs;d&OhrXSCuh*FB*K5}6m!}=0m7M^0v`!ax{3wA zW5DRzO?i4ydT{IpKx#zWA!UxDD3M6?i+nSgOjcD@Reb}swY36)phh65CP!YXYijOE z?vCmjNU*k3YPyTS9L|E@3A*(@N*Cq%S-Cs91@4y7uYp1r|JnuyDo#3+@d)!WqV3pve)F4VGigPX)jc&oCqNmd%YvD)12- z6BY~-!zVLHVR*r?Hv*uLB7xjUfe6XSf(IL@Limab)DMQ&YkYhSbp?b!#ml@N^5_xH zK!W%TB?!{R#L;?&($jjH)zSDUCg#k77)|()HmEpo1Rp^on0H%^GPqgH$0|_{ejE)RQwpserZkfq#gP+##We4di1{ zq%imdD8?a=8(=649(?e7@N8yQcKqIi+J+{LT2q*x4+a4A@O)-A&iygKO?3c$=`qe2 zj1(v+SQ1LE$~=Dh#I>SUmCnfEi$WO2q(Zk#&6zYC9Q_(Zav+$ARcVpiU=!(8D>oLE zG#HF}U>;}Gb4IO}F=@eCa5~ng)w7%mOo9pi>kJG{8#o>ChXpGJ(P1QjdV`r_S=PuP zuXGGPJ%DvJQb15yQ==gM;Ay;IqJTSUn$zL8HH=U&9c$77{b&irGHR0vr~`E)#>#>R zA4HQuVT@OEt{h4_s@EFy24h=OtG|yI-1YbJPd=6olMK#CfhLi0)*P!R<};WgnK{5< z4Yq(`@=l+L(&%D##U~^r`UQvP7ncPE zMIAhF9CZHLrHqrQM*<@vLn2}*z2s8Pwc@He;LP!3>6OLV&JLUAF4}l1JwvD0#zaMV z`Ua+5y23HqJ@E&2#qP+vd@=gKac>`=V<(U6Zg2*GlP3!vT!5aU-(_OuQfXLNSWR7H zhe!$PD{8EZ3=T^+-i+f{B)5?__3rZVk82(vNTYJYwk6|pGvr(y5RF##i zSnHx^4HdNlo-V`|TR8K81380}1#x3T>$-K$&W_IOS1i3$R4Hj`TQzrXU{t)8XaLM| zVVVq+a6T5GM>ul}U}C{@=3;S))lr!&$rvS=1uDQ;&}kXWT%?dA{X zCsWTIJCZ=B45ijX{@o z^5nk#Nd{KZB$O^)IFHfF7OxK!3abk8OH)r?rD%GSr=Os)e$}dt#bphYf#FQzYXyaS zlGA}RDz)b7rHk=<4=GGiA^2c8W?ol$?C@sETDP zDk`(nl1`nwoN+ae(zUPJ5}AKJufCxs;Xn$@GG0F3bBLqKZw0;~nkFl3xEg1!k_8VY_ys6d(%!Mf#Y3WyNu^ERyOTOvTSI)@8X6nduG?5I z6zgz4gA1yi=y}e7t{F|H>@#Px3kxX&&C=@VZ6ULlZCtUzv9+azGctRkw#{C)p`pHU z>7peows_87vaGtcX5NA&h1c)hqaj+Umnd2{Bk-r_uW;ks*i z1&mt0eDSi~NoO0XixJ3m!}`MwTW^vz&ptdg1KCWvgZ{-%?fE*xKCW;pqWW13`J|jD^cp489un{&EJV zRS<$Kc0>9&$zt^i+MuR!V+JiEW723bpiWPzC{}NP8wQHPO&1g4GY8e7DUFU%Qs62X zOf0R@v1)w3A|!0mVMRFxcT;fb%b;hC9C!FoQtH_>n8E32xJpCLdYVz{^g4!PSSW#! z(laVteb?*tTD6X$7<>zZ9s=SzG^5whI$Vjvb$ZOt$U=i!e6t4|xXp)77j!w=8}eJ3 z z-Ee!37Cb!QyB;-wobXBl=XcZ=xPD(a^Irzk4NVfirE7r&_Y)5YXDo!V;J=0kgfkXc z@L$8daR$QhoB?0RA{KeD%gb;OW$!0VMWX1-&)9ZgO{6JlNly+_gi0fg+m$Jxfvgj*gCB>YD*)AR4%IECHX21s44N@k=?w zaU9HN?twGloAEI_2?Kvv+&DK2KHG>VMsn=@c=O~I;gk4j+?qIkkMb5Vhw3pvv*9>G zjyJN#OiAIfMx9l#;CF{^iptAPoxD$+Q7RRkoZ-P|*%f^DCj8zp7LvaL8S?u5Yn07s zehtR`0^fA_XpMp4zp05;!FMXaxe>p&O_~@!aOA}U7W}S(JRm>R3O$J(jMuPl&8K+M z$rfJB0N)G@#xLazg!x&{KaBy;S%|p8@Yh5upqC|FtBif-%KDWn1z(L zYcU}_iGpbmb?pX{Bz{GdKlxRP%qIbd8%GqHJjMq_1-{^eome|47=BqCLs{^92Cp%^ zVvz$V8c!Ae9J?NlH*T2$oPp!L?a%NrdECw!bI$x~HhJ<9Kpu2Mg@)|0MC55re1wub zf(ZdhR7AIl8VSa6EWQhhJjaaBV48zsF603Kd?yEn?R*-b^Q03$b){1vSx6VMG@LlxEas8=v5^N)?1wGdU3U(Fy&YQiHSG~6Yn!V;5n z6URb=I{1LE=Rn=WT);RY75Qr6^T;G`jEJe-fcdI9Bl5EiBoMA)U|a&YMb1eC1hJBs z4z?EFF)CU+#LXfFJ~R%d5pH4#49>?YEiKh*wQ$a7XTk3Rpd293ozUw=*RSt8aB%;D zBVv(6r_vS|6@iU`zRk+If+_}j-h-ThEW2~YpptbotlO~ZYR;9bc_k;)vyr^CQpYfQ z%$X=Pqt#Iq`4%*7putHade0(ZXa+8TO9$6b)A7Az__NRY(&EDOtUNtX65`PKMkpvc zs5AbQEe-XdSeDZ3(GP^=(SmU%xWg9-0D<{M3%E!kB0Wd|@&-0chsJ{7>&~<)y@3L& zX3}v+D7AspHl<(6JAS#CW7I}Qucs&-O~wFxRGeX0HZVB2y}jMSnco-q-lA|=GzIv2 zpFW>iSSrwJ_3cfquCC6YEm7gy_QWS5XYku;H(y3{51dgd6}PVebOo=MMgtWT=wI2= z0k#090R~pfvFbDDv$ky7>JzX{p<$#gt%pyX+3e_;a4<2av~0tMb=R)uL&;92oV-@v zwtn4~GpElpMlSX28If4bQPQNO#N6W2jVtC%S-A4_#Vbms%-z##ql1S;(yWkm?A~{D z-KMRz)g@8ex3AdXRFGFlAp_-7SzGLp(>m55?vO?7h-hqTKD_s2WO(FOH;;CS)X1u9 z>wwrRfzl^WW*g}C=>10y96xjEd`4YWg`s=9XqXe&dkqXsrtl^f{e% zH96%XL+PPcVFbrPoPa0HFMW0f2m`37sNf@a15X$jvniU6*uIOnImE3psxIf|IfTY@ z26b+3PT0OwNuzM)T4!1>-LQ6vOT=DUEAeu0hjH7-H!NiT8E}Mry!>)28$x&OZf!gyVE4kNwz4oyBrtemH zUASJ!8R^{1mo#!&!r`RC%KGFJ7vmGpaz^bIkHEBR6|H3#0wa?YTH4LUweV`e78mdI z%u5=ES-N(;M5eZI=J$(z`{FmO-?)0kx;hakMf18Pi@l;^)iCJ8SPo_Y9H1NC6nHUk zq$sKfIKu-t1FnmgUm$HVf{Vq`D$YdhOgNNTr{X9Pqmz2YCW%|60r5wS2GQ==@Z(o% zOq_bVe=w^y_y$LIpf@H;PfI^tTpzv@IMWK8@%Hn*TG5zy`NF9)=_0ve`n-9I*KS?D zVvYO81&y_hE=!mX~p7mKSS;tq30F?eNR;YV0~{cNWl447$FUR;>(v}W&IL1?Su_OOR~~_PtV319JrZl1`n!R#BCH;PAOiCXUnVbaHXW_j8uFizQ&(oqU6( z61jylzf*vFq|@n4EL~DudhkS+uvHlB8&E9}IJ&yGh$J-hH;jwsu=l~v0ATK|ku-&Q zI;>o`Y3U}nQ)e^O3el>i3)XLPo4eAnT+q~3+2pk?hB4{_Ljz7-Dgf>GcXMNP8s7k4 z|L6k?Rya6$2Wcs7d1>CfMJt?~oxY#FAh*1h5m(Jyu;|o<3m49vo;LZ1r5oK-k`si@ z4eOmkfUVcEPAyuxeBN5;^Z7Zr@rdgHT%fQ2k`Fa`MPy(ep41LZ*G(Fo~{MIJG8e8mn~bm$-!y8 zlebu=0`F$4vlFOgb#dvBvzALJ4roPwhXQe5IAg@kO7PKijm<3$&21Eo`xt7avazYP zT?~UUXJm{DwbsNLR4SF0g1f9nWTN#Nd{mn_NJMwh>`{8EsadE{s3elQii#3vhv?R3 zVRM@hYR_?uPOGb{t0^k4iQRL+z^cRw4O|6iHJaw;7MVh;$Fgx^v81`FS;v|*6xbnF ztx`2Lx3qPLfs=qXp{Th{Bv)%`d{MN;&ipO`y3*0n(b&|i1hvFBw6Jo80%tPdu88F@ z!+-$y*UoeTGJ;%*bOl~9hai9tKp4(Q`2~jRfIzrXjCyYleM1rXj|5#4nOMg`BG#9)4m4P9zy&XKsL z7X1D|oDzijGr^7i1@NP=8TXenJV@SzsbmwAFNFD?8K7&R+`w-GDWh2tyB4(b6jC5H zgadzKCKUuGSGsF0xrWm?QUG(x1Y~1}H2^Va;0D;8E^OhY3upMhw}8LcwU8G4P6670 zdPlU>e2MfdQ9@9S|2k(-XKxI~{0X0H7npFX6H5#h2Bt%(+IQDQo*P|{d=2?rx`MO@ zUwLd9(mL>w4~&~x@R#I;5rHIKIRk-iPtbw~4>#!1eat1=(p{-|?Y+O8`2{fIqbj%u z&p#4(OSyj?ASp1nN<5R}He{$Y=1%P3?ai-JGSYSaX{u9oWmzU#aKR$HTV*>OB zmIKd;0B*VaD+B;$1T6`W^2SB}gwKdS0=k}b3V@Gd5sP#RLa*0LB)^O^DwVRVtPE!Y z7Fh7Gg6E7>`U~C%z=r@kQ)__*4=)6Oy1Kew^xm0H-wb%h&y9HLHgmdHbWQ3%5OXT` z2i@}eZwllN4cqOaMScT<0BiG$<}*AhDk^|8yh`zauKigt2fY(+E7Ltox4iB}eui@0 zGWzdJx2Cq>w*csrU(1e>@M#ug z5I=z~>r`-#Keq(w|3culJye*5+@WTSiKWbi_+>Dc;3oho3t4p4;Qyvjlpc=eqF8Vr zK)x-BuciQjk0t|cGU$zXWchstLKReX(CPcanJ$35kgq2E4jdHXXE;MR3t#PW-f;X_W|8FLlhNXjlwGuuT^jk$8I}yJ!}l%CQfC>;f( zB^2S7@Zc1Y;^9R|iNiOAQ4GWXKp^uAl(`c|&Y&|Ibd-t1??3>6K;~QB(U~3SA}PQ< zWb@w#v@p*Z5c4GqdJdp`paV36OaPSut>D!aU-iH+=DXxwVh{$WI`|L?bc9)FdYChi znMR`x4-9eHuyuo*w|7XmQmuy2{GtHl4FhOhqgYEp5kPH`%M8w8^uAufHPx*^9-tgD z9{{(=^qv$N;^IXT$NU+qZd7NTIdY{+mVfnXM%qal2M97wU`P^*eB?}wMAR-;Lle+@ z_w15LBxD3fA>oiw{6`RM6Buo9$boyEHHDL(to8kXg)==4bj9#5^fGjAQaE9+-GA?rXXg$po zre|C#D%P7Aj@E?u2OT}0>KPfAd?K~6wqp96b-RvcsimSlks)!%)7N_kD>TaWtJam3 z*3kwXYoN7i)zN(s$%o_TJI8R8!q3-hjaSU2a~E9vyyYz88yxQF=yonGWs7H!Owyiq zB=%H+A>;yeTNcMs*c?|Vlqyh^o)q6^a_9HO@4cl#R`?->#@I-OSB(ij{N91T~DMPG9Ju>}cKS?3$ES${D5c`*x&V&T|clO*wU% zGs==qUCgRqTcO5=?=IGHheD@%$HZZy>K}~l0iA@1fz~mE&J2NXp zFrK)tS=Q0mwBFT6DpztwWpGeXN?w(_r)O4HmR_gv_6evIs@)wom6Vq&w8WRiX`zKP z4+1(l18xRqRDhmri;UH>xVFm~se_40Co^-w5$kAbo<421f6QJr4F5O-z&TAMXy=DN-Gns*bpG>5H>fqI64Kiw2L-- zc+@r2tY5vkq^yyqG@P-czFx4^+e;`CtX&_WY;ARLaXnX9&*?-dCyu3Ey6P9c^ICop z$8=;|DapyXmUd|S*&_9Y6UPo6-W$9tuD)JG8DVtLgpwKZ}f~g2%JgX7j?E+ z2!5m6+SMI(EiT@nT0L!Klt+#nK6D}9$oBR5ZIMwsT)o1eIxri& z@dZ8$XC44RCxWZRat1k!^ARz7m8^kb6iHq_0S>#S&Pa&~dtaX4KeSA|4Ji)0di zKmWL02V`PVaP;2RriQbJVo&8ZrKcW`-?u9}C&%Bzr$H!gsx3c}ba3y%6T+6N#g4wf znd5Phhtu;Y*05pCMp3gUGA!~+PF{0s+eSyX^15bMAHVB`1+-q~;Otr0tgWudt!r#q zw$?==mNE=YD#(ikzhju^GsqbOXHWrWLLy^Eep+N=5jZSkaJ;E6P@0;=9&&$crZjz5&QBld7)$2k-!{Ho?RbF1Xal>YbSmx{F z@8;^Bay&&SY}>ncZ)0OK%i;=xUat=e3){S9OI%z$Efcuh00n4J_m1=kMUKIV1fXTyJY@ zUA%Z{ZEbC0Vj|Q+tJS)=IImr^PAbLMdZeVBXsB-hdL$(s5sQ_+zFuqBu4`&)#o1z) z;lP3i1~~KPxb(AU!0m?q6}B{AFD(Pz14yOPlP6DN7?UY9G!*E;N9jZla0Wi1H%6=t zWCM5k06ckcSr3>E_rWp5m$PtWz5}1|tC4U{3TlqapFnIr5dg<1HaR(5$S(&ci99I4 z1Oxb0g4^ajE0PPIfw$Lx01?PTk;D5k3+F-Ai10QL62udXVZnnAv@>`_`Go+z=>g8%6%g30 znm-``UYqZbEH3w=wSiLz34hFb&x3Hre1+fTC4uk>8W5xqUgMMHZ*~LR;>*w}eBjO# z3m#k;!DVN0V}hs<{|NIhftfQRvGNykrnIya$7f=^c!4qbt^&@{&q`;ot`SlA!T;8f zca|HL0t>|l?mW3wy2k2utDAHUX^{s|cn#^IC*1>d5!7^E05r`?L}IlB^ov za0Z+nbL>v(o`FRy@_-4M8{e4pf}N3wCBKL>;J}ram(vW(u*Ob-$vtt5EMk!dRzS&V zgOMU{UDdM&t)7xfq(9FY@ZLbm$}36)O@%d0*KbG>NVP>Q@?cA2QBD2zn);%ehT@ur zs`_S$L`FEH;N>ScBbTd`s-m)*N{Oya%9KlKUMeJXrPLx8d4Pq1W0gc#Ez#CUbhToA zqgW-D;tT(7n3-EF%`Kc!$dyIqb=6|3Lc#!5c&W6AMILMsW8Zp%@QcGki3ui21kvofpGZwMP zJqque;ne*eIRoyST%jzisDo%-=Q9?u$U`GwEhw-VgfmJ2p$acIaVuw(gfkMV{4Si4 zvei;uy;NB#(w26xr4mEA3@!rAs4A(UTEbRJ^p#S!LTadzG9VD8Qo_P5T%7s z3P}wDS4-(CDO)Kul)+J^uaao1BycomM^b>)AO(z0qQH?QC%OuW4k`&LmqV!}hDs5f zLttaIlxdR4D#hAzsS&bpoW(QXw zOa(5j;0a`b6_GLJG7JC>MOIx*wGvI4lqr#!ppbl&Y6(*VwU$8cOpOe3;X{%W$X5() z$U-93QhlvNUm=Ey8zFFwn1wkgDF$63Gn7MnqEJwPaydkYwt|5W8>IY3`#h+^SCI5I zXc4bGIRWud#kv;P1@0*Yprb%>&hiYP@!_vD26NpbaF<4jJOl-fiqBU zNLL_L3B>Z_mx^bvcA2u=Wm{54r2@1^TP~t2L5YOx+WRcgd25`Ae0RROjS{5_E# z6sSr>m3L_2I#{zx2n?K&=m3O3d%vp0n$l*;)fQc;n6444DkRzpAOPG&Rbz@p3@8ma zofTqe7gRgKA5__DsRrFh&_9t5)P18*paK0VMRt1R&wYiPz0-3QEDAcYi>CjcmaWKNVKOCItBG4el zYB^mmX)~4`$_rT9kaark()q*tqOR_7x*D-QBYvj<25t!}6t__|7cYdZuep+(x7+FB z4zC08ahI-T>dVtE2hX~+ZDr}1qik(j%I>K0l9Gx`hpvXMZf_7)%Q?uUOakf(4SPR0 zBV`&T9SNx?miZ;tOSDaL-TCsSY6Vr*p}Zz&$!(B;ehAvNMQ!S<^}_3IvNDk(N6-RY zE|5~?&9agXeNI(#X^XlBn9w4x649VrMXi!5v10$BM7OwNLt$m&kx0Tf zY-yX~s-QWyQCcZeXJq7lvDoQihq6hkDG{_?6$ndlqyWQ(Q%&B?KJWtLLMa)h!IBFk zN>xXmdhaZu^B0Zjr;8}ARIlTNS$W~BiY{hVO1WZ*Q7_D|IN(~aFP>?3Uj`Nf@(?RZT14}=_-^*_|8Awz;q02ct3_Wg*|NdIf98Uv?on}zHact#-rpiM zt#|g`7=B>$R_|q-{0l{z4FRE-D;jItn-{rw?>%3zSGnvxpPP8YC_` zELnp&wY^ev<$w|ukrq($B*iduj(wPK}MBlis5vu>;J2DgxJR{J$5=)jnr8@wWBuJ`;1gL@jSY^Desebkg`di+P#6RfodArL*zCGI*aAvehNA;jA)`7v8rZzpiXH2k zLs!+GP082L5>c)!Gx}7pQ(2?9967^r4QC3sExdlES}DlRcK^C%&xVHV6Ed}~Ei>`F z*Nl?TS#9AnGX2&F>zm5Nnht4m(?RE)oqi&T>beYUIIx9xD0-ALRdTR^biJH%3Elw% zKneKn5>>NI5teW)ETdAYkrdQ5ZQXXfs-$&U$lhkT#L?5w=g1|wLGS1i(j;V8c}67` zw&--S;F$gUFV(tk+m#KRX=_;N<$tQQF(v)n-jnHN?aDc8Tn?PdOgwgB=CWlO#nrPm zM>MH5C(_TYa}Nf?RVdVy$xQ81QFdX`y5Rkw(2LgkoX*IJh&z~AC|czam{wXDaq3b` z(kY|5ev@C+;j85hO3l~v9kMFgD#R**Onp2vKVr|3qZh8t-r_0HvY`p5k`C>PNy!L1 zThOM)*+qCl%8p|hje6r1fp}Yxt3W7QN6XDAn+fIN|Aoo{SD{IJHoOsu!fk(yvM zFOhJ@+9QP_Q%lN}m11>4W3{yGOhNGcs$+=_B6UG+nYtudvVC#u0bgOx@s{hCRBZxz z#te0wuBw6 zye?cDbELMt$uD$U?B)7)z0%inTT?T&+9xJoX_Cm>2rCzh8W^u%%MQRf}cq zYV}s%$TfcZ5|5;<+~B$?BwnCrm%8|zE~yGnxe#^mq(M>Z61wwjRY#RfIb*qNW@%G} zSY0Dg9=mWYDlRqY+_iOqv2_d=oqT40!j27okw;5f%Y>>XwZSJg{%n2~xVeR`x{x5} zI*Dd^@bOxODQsU-!ilqLz1}A%h$kis5v96){`?a2h z&9Z509gm&58XUUsc%$Otm6Cbu+{M z@-nF@?Mik|dEIi4c!7+$Tv}NmXgQcsu*z>&wai#1V_Vd^kf@kX7J60IHT}3~^`_|K zEm~%YlTTW4WmL)qkJ!U1Ws_q_Oh#3EwM;u@sZ(ZIQ@Kb}BUTeaSbWmH)O4wq zatjE_X;*Iy*naTrxq>#u5})|evSO!*_ydG~Cc zY?W(xL8G*wQJr4U07F`>R8v{kxW+5Gv_Tqw^z2tFJuY0YUg6;<5bE5#ccj#cE?g^` zvSd@0+OXNlL;IL)Bz#LC9@4xzBoC`hde zT-bCbu}$70IT@I_-LGA&E0M6(5(+}nO&1EbEor=zBdN`<$k=JBJCnb|;oRZlZ4wbx zbN*WRDq+sas(^WljF8OGjgs?8O^2N??2KyZ&=<+rQi+l1{C(jJF6@88^<8H47+OwW$@7UnRo$-e*_9Z7si;z{^V*S+UD;65uKs%Q zhUE0L$U|qc1fpuWexrZP<(l>iF;y+4((|h0j;EivQsy6btU+%|Jb!uD>GRbc(txO) zAI@0jy*If*qYvB}_sR6-vmFB3RGN}zQNaF_6*4C7RMzpV{C2G=GX7A7Nb3+98+jz{ zU(=RE9?j@bQ!$6mo-Pnnio{E{_crERKAXBIH162e(7ml1DrjfIhu_T(-h2FNqpG@1zScd|C31gBW9zg< z>y|o)J8wTK(4Z4iCDA`5oaq!W0;MvpOm1or3Qrw5m|IXNP-w57IdU%jOodoqA~jTt zwN+wD+Fn(Y;2_%T&|I0Dx;r2x((Qceu{OD}O)9yRo|<;zOr1z|{rr)GyMoRfiZ#}p zFAJQXefC_bge#Nk?$^564Kct-UoF+u$o04iB*UGP8aY*~WNMUb6^sfJrcOpf#x=Mu zOjk;ctx{dHRJ+1`TZw|Jk<&FYTr$R~u!5~qKwM0rRz}q+nOgWLr5Y4)3%5tA=>kU@NgChH3=^A#oc-LDk5p8ilDsW`G$a z%)~0B#xhhmre11<0#r!!RdRimL|3PvYm|__4s%ztHF6lpH3GS|4n)nCi=ni1y#jZW zs<8l&8Y_^qt!iey_qJjYT`i|;6;MK2AZMy&P&Q~2D7>y(3W>AjQbWB`Cy-GPrBTH; zsMt!ep-N(eaR*n}3TJ`VKwenLE$MVTa{E>r_|T0*jfcdgj(a$ zAK6dn)+s$KKu(a(bMtkwaC-COe@lQfB~nv~)CfIG)PSjyfx;M|v!G9jTLt5YzD6pq z6%-%c6PZ;~3(WFlpGaS(=0EQLXYdJ#HepQ zIiKMlE-;H2R2+9O;G9qbH-jo=I;cja6#5mkffkrgz-U7Eb1-eKl^Tv@mzT>;)u7pA zyAbzkaEp+^9TG86g|3!@A;y$(Uk~>OF(aT{mCS%7!39C4Oa|p)Neyw=1-lk9!lWpm zD`+8Z=|K6Rb%59s@N{tvkrWc5LqtQ37&Ve?FG6c-swpp6lj15wIw zT?nd!C5QBZNRUOfjIG1U;x1kdZWFT=Ff@QWC!%Xa<}Tnn<^Bn_>J5Q1BZv80H#T#- z2L3My_Pc~7+<+tU1eCi>f|HOkDLy9#VW5OqREb`wH`S?(6*4khN_Awf5A+%0LNns- zcBRB9kQy81tXRXL%7J#_FvMqsoB@;dOE`n~l=#&eHQ@}f7W?nc!t;mM05P8v9QAOK zS5PcEF+Qlu*zQI`0KN`;jN=K|Sb888KWD3FAN zU^OsmqCgZfWXPe`a1lonP!R|q08-&|fLNaUZDdGe@`5|9H4?T##ml=!eY<+SMpli|@)A1>BY5K|wep0J4Ir^;9eHx(LFbcfIvnlg^^vrJS92 zJ41H6(luD;$DfkUV0RQgK-cj1TlkI!t-8q>a3)*T8y&n>ZFJ7BZHMxJdejixjw%b~ zghF-^UWv8Q<8e{gEQDCCQ7L?a4nzwXM zT*9GKS(W%~p^Et76dY^71-jLZ|NRPa5XhVjCgdU|aOTd8xrHu*j4^J=;RD}AHW^ZeGQQtkDKK%7Y^~Wv2K7UjrsgWv^$jvE_AzQ4t28zok`&(a?yMPf!D}o^XK0Z2m?_6 zfi_teE`Q%I#Ll2^MuOr2y&7bU+2HhuV6&l^8;r%DD&ob^ zc}{*tv+KK;JHznO^-8z9=7@X>ow#St+|kZ-1^J~w{OJLPF))nY$kH$%G0?*JlTrLn zEU}c)NTIn#?Es_AlGm=|{LuV+AVwOl8#uTPO$?@;Myt;;_-pMP3~9Rh+T$7z`MkGhU;*|q@lBDqd|`^WyiA7CYCX948!7&CBn#vlRQ2O%i-)6l7MU= z9h_*w+!f+dWYS3zgfcPE7oY)HT~bI$pD}W@k%MGWZSa@Uup;=2rzTEs;%MTr@ajfG z^87Cu!qLQ03;M)T z1Sb_R*@0Vvn!1F9L_Q>3#-=2K9o0jCq@c4nmgbfrCr zLK*m}Jn9+8@!d^90MtDE6=yt0-GWF^4BT~!7>i4aLfCU_9kSXOdp+p5P337%EsZb_pWZ-}v zstq+V-smPs6{4^vrA*!~66r|Ap<$X^I#g<C#`n34nz}CZN&40m9YQ^ZNB-=mWe0)x~ke6cQX(Sy_$!ik!hF;iYE*3F3%r(n{nt zm&?+#%TJ!KI-Ff|K}d<}q^HsaM=}ICLajrnf4FJyQVAz3}@E^(r+5tsn@z<_tAeBs5AG0q>0UU!G zA<3lKSFavDR|K&s#-wJ!XwaNNd-%YrE&d8&b+ErzYGz?gX;J9T!%!h;PoVK{5Tw0uwCm^)fA!^eSFYq> zFG6{Z#-N~(4I4HRYT-w7g!=%bD72wLtI;==i>{U_4*TUgd>1yQQl2wE>|>X-g`aqQ z7I5-_iWGx0Ri7>0{-O7jQqhGakze}dIn0UrF(lb>cUj!0j)OwdmwfKG^kiMccTRIl zMNJK&Gn3p$C0tJjO@ndmzHo*#5Dq9tS{oD+T+%2)2L^pJ3QWPZYdHrGAKjmPMy}AQ zJEZ5%UpjQ`R9Z$_S!Ln=ghRz8)zAS~vNMaT8xJKOxpF0sW=uKx`ErHA#40XcI$zz` z6zT80(JQ2&N+6fDBqt}u9y-w~Zc`}bC(;`plL7t#l z$QjkA&SldkQ)9j0Vqxv2%uHc(jeAh&Mt6T@^R?YOV$VQHl8>epRMBAF4Gb7&qd}K@ z`SQU-M-Cl7Ez?q!wN2N{t2l$Iy1FR4xcdCjy$e=uOv%b)Xln5uqaO^YIIn)&OK;Hvq&jyu1<`PJ#Z{tu2h<6?bV!XiHXPK;}0G_mI8!g zV2osqaXZ4VivvIRytsX~&*w+3Zu->wo$q63#GE+- zGc<#-I{4(=C2?*YzIRjU@yU*orzVHK`hT_6Q_pKynW!vlKXnCt7~nYw!l@V(_cD$A};!u@sZ3!y_OneETk)R{PFZt0i(h$AA~9E2^w< zjyz>x>8lscgzimFyIgoM`50#ur)L}sIdsM-YY5#QLm7sPNXcHaTkYEMke(NpL390$%D z$Lix^b}U@JzNDc|k7lRM&)YffSk~_7T?uC|LT95p4VL&f=AQ9DZ6yNEG)?2g5&)XO zpAer6wSxb69{?F48Q=`&F_f_*t=Zwjtv^&tG&(wO-R^(SKk@Nchc^#i%|!dhaw6*3 zoS=7hXV+3(txxi#O<9va44)C5l`U0Oxkb*N7x<3rsqdzQILL9j0G>ztp)%huLKjFN zG6mDoo9*9&oWaI|BSldG!4cp?L07|g583bDpLn@VWze@XdS%d#qmo8xXu>fAE8e>^ zGWBW=@G3Sag4G&4L!w$?WMXCMXV0E1u8ZEeqq(Jp(@A{%0`n?ca?YPTdHO`VM6ztv zhHbl(qqippd2DH@YjyQI#2R#sf+AmUzl5YyaxJ*kpok)syv;8lHtj;*j>woJd*b%) zO{`Zk?%uw|wY3M+FUB7_!f~yk(YpmgIXHW(Hu%-lHgYtaQ+xLAx>VP~QZh!_9<=Ak z`73$*4;=$n_{^E3LHke28Y}#Q!ZoyE*Y5Zxjm|{37hcUicD|6Jqcp^ zF|#Ye?_%b8u}ZgW-KK4^`vbxbM0-2yv13TmA85VcqeEQj#eTU_G8s>+n62D2HdqzwRc08Gm0(domYao2E`v;s7gFB71 zRnew`Mac^s;=^cKRv|n1L*%mf%ide}&);->8%!NxCM?pYEC?8Xyr`l=vU6U{;vJWF zg&do^Ce^oX6vWY{oH%u@tS&hrzNw{^(MX+~T??yP^0LmJI(7lU-GYa+zdXvdqjVuvoH~!LnqrWXoc(#TGMz#mw+A zBdf-e}W@_8$1jm^4YE@)v_RGPZ?EF%RH5V4;#blLhXGemc78zY)THe(B3iKjSUDBui5+M@;Nq zMEZ#VDhKmdSgvS{T*da#Q_uUmC28exqwB7aGxIRPH<#`4zpTQ4W+@q%$}>Ul$91$n zYjHUeaHNyzYMy%ZzVm_Z$x)*;5m|igLfFZVLq5(J3cC0Bj@$E)l417)K^N3e8xEGr zKgl>_6%nj@7v{$AheQX4gaw6!SJ%}nuP)tnaSIKNa=#zkH88p~Iu{v=fv=~)Ulz#fU4{z4ox#t+0UBYp^ zldI>*#6lsDOpP=}#>7s{uR^geUcNgvJ_++mNubs0Wmk8f@X$zi&%mDHNtROG zadZs}4RdsIdYDnj8dh%HaeR_fFg`kT>yA@wbg;9#S9VGL%)}(j<6|NtE?&Gow`#7h zdVce+6x+Hu09bF(H`zT*+tKwsd0anXQLh_4h)ZJwbQ4r zIhL0edU&`yxCI6H2RwN6n1+=MO7#~y&TL?VBxJ}zSUrAXfLtsvSi_`7)Q-;Q?sB~{ zqc=-}Ze+FQu&>R%^ecAWw&BH(DGTnd31Y8D+R5uhNmJ^EYr#ic({EmkI1yU#*u<{Y z3>KX5wVhuYba>)$E#mm`dx!D{vV)!*S2}O12p!Rt@U}9c7_$ zmyDtrorV?+Fg+(d5rezBEOfoN?F;vmLE_lJkcVm*Kn=iX5I+p@teLi$X@=%_3Px6m zp&5aqcni#=b#J2OZ}J}hBa_SXCUJJjGBOVeg{r7CiCR6;8(y4R6K2)I^0cb`E8ovEJ6{-apBh`p zn&oTc%mz5Qjo}9$Y=BZgA0RTI5O9OfG(qKH#fV#k@?!_GQvfP$iA=~a<1h#$!rc(? zgdaQ-i)Q{l|_0iR8*KVv0r zfI>ypLJP;j%mJSg;G;{BFi6@g7zU?$=hsxwpr8&QZt}2>JSrqAi()SAV2&ib;Rne1MJXagVsPiumi8q zk%UEcl!bz#fRGqXo+`sVTEL3IAUo78R51d$NA#Jad-7w|;gAPqvA8idWTNGs3)qG-@EsA(HA2lWCk4rV75 zI1!aY&vn88UO#8P59=!QHGt!W*}yk$WymhF*Jks#<2#djU5Woid?WXtC)3{^z9B{# z-@e@(>>Iut*zCR$cr&)Z8TnlEH#kE&dIbvJAZ&p%^7}IzoPjY7Coqap%o}6~w!|4Q zoA&^|m7-!4^P4wYPK=$xA6@P#VF=YHfpu{M{!1@(Ew+@ zZ^J=>f;Ry$J7ZZ^t^N_?jJ$6KoUuk#px}*!D2l+DEj*ur^^7vkD0q|c`Z*(#$L(O@ z*FQdhPvEUyc%Wq?HdychEIL>p#DW!mcs%5?;Yf}`SQC)(Dm>UWdAy1upN3fXl-<$( zDg-eKe&HZb6rs`Z89cU~h^i$Yzp%EbfUow-z65wDYsFagBJuSLKW3TGi7ufPL8 zqJ@Rx;JeBKgU9625f6RA6$4_fq}pJ?`m7&6!4qO6XK<0o8%PqK(ZaKLU@*LVWDCk; zjk#_xzJgycpvACJEqFQ%R0vf;l6a(!eB6ZMsX&vK{<*vNQr7qtb{KyG9R z0KO0g&nMD&6cE%9wF2T2wIN5EAPk1Lat7QnLr8_#Ny-R$J+lSQ3=a>ZVt+p@5)=?m zCql)bx{wj6umF5u$Y)uIPJW&9dEfRxWiWw4sA3`%Ix0N$82Z*Hb zdmR#<4#HR@ajc$fz+d8N7T>N$cliZXnJu#Up=v1j1%OOUpdsXVi-K5 z3%xMWF&aR01iH2(1IU<0uLk!rb9X=pd3#UA%KAnYl$a2 z$>6SV=GOx}Ln&&eHMw20BQzeKoElxN>{(mF7h2^eCPNOW6lw|f%^LhJ0Qiy*o{)(K zjuogAsPs6sgL}a;(>T{TMC*Wu5P&EXByQrRd58|mMl=bP4M~dg9+>C+q~i?Bdb_w! z&^*r@jJgGPZ|^w+)KJgR90gM@R8|wkFeZElndey}p2xKFf7i`JxEB)%*`qF}=;N{CIwAVnRh!VrA;Ib{UpJEDlNY)0*1Y zlCUR@UY~^9rHnN$s{5aoyFVy5;if`mVnI%AAKM zy^~@1fno?E%TlU)Zr;lVuD_#pZMx$lyW3^8Ev*d=A(1K2mGpJh8_l$XgDb=6&bvi; zg+;@p%-PwA=Z#Jg$paHp%QK@#Y%i>=X%e!_26{Rt#s*F~g_kuqM@EFMsZ~w=eIPfO zGAf+;wE*Wv++s|_`*smdCY*@%_~svRtME;n2-xNLPF8)owbYi@S;c;x#|?<7sv*Y;KyKMTwp z4Eey}%TZOEf6?!P^NZKmj$ ziM(gTEr4#H!b9%mfyv_!4*J-SQQ85M%VGb0{W=}!F*JWh*X14VU-lX%PDj1(SKUBc zhC7#2c86Tjg7%2o5o7vSzVEkAX|-(iuF$U%r?W=1MR!sU+Gg(hzGtcEz;cCg~La|V=B7ZV-cJfq_|TB~03_6uDyz??`Z zuWPw@_GE2YesFviuG|1T(_EZd*gOHg7SUjln8|^`%^B^G}7W!df5v+FRyhl*afnKkAe4t&3AZg!R}-4*!h z6#`mBR@_t+dvaqoM2 zF$|OXI5)u8KOrIE#6^ddRW&SjT-|-5A|F1<&2MRGdJq-q;~Sh;(n5--aOPJ8P*_G! zH{6K7cK6{m|CBrXJP(d8wdRh5z3cq1SL1Kn`0fkMkH;^ika4DIH1@+wZ%02*DeX<) z>AWi_@1CujO?q89syQz){Ge;%$wU5^{hr?3cJuw5vD|>{dsl+&ZzrC9@4~L0#opwq z3%1@@p10= z<>-WpfoUZ#7?;LJ#|I`CDPA<{H5v+582Eu@+~X3>v}vt(aAJIRh38CjD@Gs_3>0f? zYDu!p&rFX_%rC8KMcy>KrZ>R6&0{w8H)=LM|3nX~x}sWw zzR2kyK*4aq1e!+_lqfA3v51$*fjc`z0e1PgfVdU#(Y`A~JfYhup75oZ; z9V;{=&XZW61Nj&c;8pvAu?GDq0jec)<}d$mKpDR@&cKx?-!B7T-(eM^JVTJ zDs+`FCzDTLB9S&Xu^jNH1!VIp=8S?j3NSar^Ix(7yVd#U#uhjue-B`2Xo$yi#4sI_ z&94dMe?9!l%B zH`@wl6exIOv1QJ{-0X+9&B%jO3l2qOe*Z3FB_-X^Ok#%{ z{C`;la#%UAyv2ntY?6$uDa+viGG~75+zi6}2+oj9Fdv08zbrug<=2M@z={T#gYUu1 z8iT|D+ommDqFzJ=L9Mx0ocSIjYuF|O$;v7yD?KEH*H;WCOm|x7(K``Qox#J_7uNnO2#KtY8AZIP%7X^q#{xS?a41g$`>aA~G=F9}NM% z*6?x^Vv#e03vrPhzvlJEfrtZ?4TS(g0X=5$pS?kE4-EuAEGP2~LozTB4Dva@VYpIXCk4>c$8rs7VI*}DF=Ls1shAgZr(f~ z2VTJ7X&1bOA`*##8`PBeSR=|t4z><*0EvXeUIdaQ|HF@D4!}2OphR+Nc!k@I4(^Qs zh)l9@lB8xN#t6d1Z;GfG$zqm3UyK$>Z;+-ml1eXGjH1L!3=cX69Wk~8F%| zXin0a;8v74ff6K*C>c!_@@ga~C!q=igDZq*C4q(FBaN3#(wa#Up+=zH05YmT$)TA+ zZ}7+fClNYz`emDnW5Iaw4j&9*Q80Eq*CEW#Uw^rF-o%F9;)B!}xKXyej>)=8TsmfUZHkIVJ59pzh z3(`PVXIy$)6(?!d*yJmP-aVR0(K3+ObSt6rMb?Y5wvJXL7l;eA94H1FhyPg=q`z3y zl^9g}2pSS+O)MUgByT+7H-AL(4Lf8FOk?oaKDG#H3#2Njv1FN9g4A`= zNJ^uh&od{7Jm*2fiW!QM9$EefA{)B^ovJJO#RX5e@h>#rg)kY zX}xID3X5iLLeJ3@bkE{~K~R~wp`bFS6Ulcq{3;{r%-pJpGiXJQ7UyUl1}-Bb%GmqwcRMXe4UHhE zdS>4Yq8CjDKMign)EG*~+otZUL;@TRgqd7ApYRv)# z4Npl6Mq$aona!NqB;Y4wSYbxbtDp=zfoE|30wW1GHQ#X9`M-ST`@U~g8^@WUWEN?$ ze&XpKw=?aUr2XD|)4Otp)zRB-(68z)7xi+GPByGhY_)9ABM)JXXX?Qj|`tYe>Fa%P)Ein-fWJKihK$|maT~}gX)ZxU7oHP?t z?|dTMV}V^LA3we?;Nm=k1DTo|*d6!}4{9=0{N$;~Pdy5w>z9hJ#O`u=aqD2L{j93y zcF`%jJPlIA426?e0eWrotUAXoe7k#9D~q$S6_e%V^|aIRg=uYTY46_J);8a(GG@IO zY3KRk*a7E1)U3=5QW+olf7QzwU>xJf%t*%T3=0^s93-v-AE@(a_&{ z_=mN14#F(-%5CQvl>utv=yG>%rvJ>@3*Cb=Gt<)^!Epwfy&oK^g>C}ZU(i!94?7He_u`!9QP2KZzv-hKu2iNq@F89o49V7q|H;3`^`Guv zj;cFmlAgK3OjLDCocMO|Xq?y1mQg-!2v1v`s$RZ&;aE znaSD!hIZi1R7zLWk)#W(H057$^=!=jRdK#*^w>79<6~x6kHD;IDYfy;(Uc37hKhsk z?{;Wn&~{ zx}8#+7U%Q{9|i1xx)8a~;diNRCG~U3pZnO1(q`n0g#iKR`5OE1&)ln8I9T%vQysdT zg8}*owE zxj5uZZEv61!c7c~`1wUQG`0H%dH`oaq7x=&7A4cd^}CKsEDQ#$r;q#0SoiMzw$JOk z+FD!MI=b~H$~Q1@RRf%Xc^f53nzHBFb&cZ>9>y><<>u;JT3*}H*4EPA0qk=34}cXW zxOaAT`}^F7kj;J5zV2Qn1qCSul`zGX%qtf!TyLFW&RxEu)6A@{t~vUIQ@|PAS9~J? zLp8p?h-;9Sp~auQ7y7^7@o^v1C4J`efBZh;s~eedW})(O^p4=xJ0Xn@`~7{?RK4Tl zv$mOsF2(-0(26ov(#DotwN2UWUE^RE>mfi*20A|e{809(Bgq%{MgHgg zkKS|2ikeW5mo{GC9`RLNTZx%$qrn10lBSZo!VV{%w@7OV_4iJMT%BSk3ny+J@V`3G zQaDSpXjgO@+aLbB-SdmL6C5=Bz|r^v=M$Z32irOZUrbJA*=C?VFt^&{k#p=q z_U^+c|Pgge{gswr)OA@S}sR^72fO? zTH|`q+jGs_?C|)~`HU-ZIfsrsxcJi0bS`$kZNizl*~|m?cQ>!)lukYUqwAT`+2-Wt z8*e-RDWR?0A>*BQ9RKiQxvOO&uS*;6S{HJ_=eB{SkubOoGnd{GZ6AM=x3D!ssRum& zSUR77wa6)=@Cl6rKCC^Va~nIK`u@K;y_4QlEeNZj#aC>@_q7;@OQ)afw52B=U%8SV zLR(a&gJEsDO222<9WqYeD0Fa6_e|*U|Mc#A^~()K(_yy37ps@E_Bgy-H9gwBnE9Fe z-d@TG=|j&8R|DU2DtxbJRWlwIqpA-F?Fp+Y;7yXoTy5*OEwnYXb~64@u=66dsAu{I zsmALWr=63-&A8&i6_Hh%KM7}`LlgLsj?UhR2}Tqsqb@ig(9ta*H76f(&(0}cTwVpr zPEAjHdU}OMgx|g&J~1;-ne^d-0gm^4N^6=0maZr(yLUfKqtio33r|bDIXO0>z5Aua z^R!77@!;V-ci)u9*{mR@JbnVJ|J8*tPj|PwPOkH_Bco#rNr~wK%QZK(I6J#~hD57% zI=xmM8S}uTUx9iiras0p0%xq{|BVC28894nW(FyrdUk znUUlFtS`H;^Jzd@s-Brnsz``0P1WcJTpqi5KE50EJUqNO*(l5wx1_ivU2}YNuWG1Y z;OO0*)l;3n8|^plQrumOI~%9CySux)yA`+Mu#o~^+})kx4#i<(#ogiXJGbXQIJwI^ zlT0q&Nir+X`YZ&GZl#9Np^BC+%6^umpe((B<;>%3-)qS(zuPBxPU0R4Saa-qkFa#| z=NJ$Gt2J!_9h~X9NiOKCQ#P!aEAU_Vvxr5|{K1vpAj5a<-SXoe5K$|?&9vi54d1@8 zy@cuy8E!KjIYyWEoHKCFF|cPfPdhb5Rkh?uk_7z1OV!a)vT=cTo;Q!?E9C6o-o)Cy ze37-oucXEchpT<;haX5o!NA&CEd}Oe`0H3JRYR<1hLib?2TG_#TpYdb(&QRp&DNKh6jCSyw>*Tf>nJmS`f%Kx3y(xsB%I` zA~DAp_$!wYZ(KV56uFIJ43pU(Pi~{|VTaalH+?mxA0Mz5LDplOOo_o?RlAeOg?C6H z6~1Q@vP~q?Y~f?C&jSS=-6?Yn6Es(Mv)stY!J4~7e0E&llc*FfPjvnBRh`a;mCVdu zgA)(w$AA&h=A1F)6DbpwwQa6Ya#wVS=(mYrPasm9q$*ka7_1a4(2GcTMXYB1K+iQI z>FHXX6U;_j;?&>m3Ln$DoQ!?}W=ELKDH_&=d^SM~q$B@M(j0IPjQ1y)DIb{PWWjN`c{Wm ziGmA;m!$ISI=CLcs>C9*a_$Fc!*YUwON5dH+GKl%!pB0=co#{~WYCNHNl|^Gm!SmV zGZrAGD4}I&9|HS87c}fVtt?6iNIDa~i53rard=de zufS{|os)4xq<HVIoQ}&Y!-JA@nf%Zj_0H%`Zl*N0e5Jd-THL%tiu=!0BW$4#3cW~zVo@w1&wisK>0l?iPUS%5+N3e?8|FLNEUNF zg0H_GqLI1_ju=W_!b6xq!v;JmphWYCkM=S9LBPL~@l=X7i%gL{g91&pP%Y1}*Z%^trekamFieka^Mvt=aQP&? zPy-IhmTNRZLJMF(9-InLRv$OKw@6@QbpY%ir^!R?;>?2iokPy&$dSbTuW+iUs34X7 zI7k>_4p7n5`M zHAXM&>mytZ6#sIxf0g6_Bx=GHWqWEVPy7IvdQ71t*pI@LtsCJB18YQ=8lGO^_@@3s#+!GrrN- zL!zpfZo6RzGKBjpKpOC0VNHtc_3F0$6vV6oGgS;~P<2ddpD-<0 zRm6r(uZq?dciG?}#oHWSyDn7PMsbfmW>zv(QBQH-Pee70078tnJ%OFU95;y~kv=Rc zog<|Wy*|vG%*B)PdSw8AUL8j!{KXhbv`AS=RfDmFYxNN#$00TORYE!fGlu4^o19_A z2qKmU%?_eEbbM##k%sz5tP4>TO6(FW)SYqR8g%}F_f?4x(u5vfe%TJ%PoggIkceNy zG;rt1WFG1e$r8TC7~(0JZB=eN(H~TJsz?ITIE?>bDp1Q|5^V6W{p+#GuY3u1WdD4= zYpfFV(9$!e2WtS3Jcn|lxzeO@AuOP%CDAaXOFP6R5y~O81KX^{n>43)1nb4_RV>4S z$C7^}7?a2jVS-J^DAKP9c%h~ozTuOVMu-f>hQ~v&M_sG^@Uk1bgnZHwVa8BKU3Dld zoGLV%Ew+8X&A7Hn10@o^C^?i7T|nUWQWW{THILL zQlJEiTI64hfGe8%&%1&Y7~caFs9l|_zK2lMoG6_FefY63j@wmi3Q`$hJ;|(kxn@v6 z@t6xau{83+D^f!`4CD)d5%TxwGoJQN29`L;MSK`tyydLp$P22S9FcRP5k0B|Nrjx# zIc5w342xjGMNT(5hYowBsBLA(Lj~pfku!>KjS*{N+jR6!EalkY?c@8JE>tVdg$}eP z35i;MAvb=lkqbF$Ye{g7*Id}z+{Zy@>tuz?tL55QCdb8;MQTh$LDGjH%ZUeU!=;fT z)PFlY?TgG13#6qA2`xX*>#ii|jwlPkRz{STO`tYn!-jCj;Un(pEc~|>zpzrfjrs)> zvJ^d{hv)2%?vXGk6U*24Rp0xDkpVRKWhmEmvfN0ymE$ui($%BtrmEH{soT5ALHIqp z59rt4L5su0q2JTFT#`z^4KYn2M(YDVfcfGDlHQ6}%PNT1PZ6EjN4W zQF+f~0E>w-oHi`cG>X{vUP+E*0_BVZ@N$Os9f&|?VvHo`;20|iQ-l!ccN9%YLho8L zuW+)}ox@k2^2v^qaYfxm*+Cwy-xTbQm6Ky&n0P2-5va8*)3$~wZ&5MzNP>yALrSnh zAvQ3ORHP{Aw$CD--MyS7Z?kGP$d=EJH%xt%Sm+gUCIAAnd)O&Mj@s2vS(5gol6V*_EJ?t;jj0pb@L(nd z!%fr10LY(n(mIx7Ratf~?W$=$|dR;4XYfW}Sk0#H${|cWQ!;Y*n zG%(7zV)v#Nm*rv3=M*YR_Ic$71w%BcZc| zha2XbnRwdFsZogGgCv3{F|0y=LGG#|o0(Jp{D#bk+$AvO3>%3{*Bu!$PK6u_OZPqQ zH)~&AoR6*lUEa(CxBGoqmkAM!U?gnFfao5GWHq}4sEh-`Dkq6kY4yF>XkW~=Vu-yp zI&U6lbXd%ql2nG&C&8!BUgE$&7U#QfsNTH(_kn+$as@Zvthj()8^R$Ty|`*T5%fM- zwsijP#!zu^@XR3P_1pZY9geo6(??1oGAM9lb9{L4Vi9}$imK7~ZWd-GxNm1L3N_-l zP!6db(0eb=2wd!DHEkh0?(H-q!$MjRSCzYcDI_Sk<-U4RHKjAkpOA3b^Ey5>q;BgO zQ~iEYJ`36oGQq{mgIs_Od9$l?yn(=^9Iy+%91@ zd!X`HxV-t-uR>yuh2Q z-L$wxFnB<$Wn~eI_~hLG_U5@{Xi=$`&zFPDyRG`6rZ^)uqhO)AkpvB?u|R0E=Y3Gm z@FPp7UFs|WHgaU+9yv-#aqp1$;&~%6P*#N|X2pw%?UL6V2ZdQ~@+W+w(cdJX{RayP zHXrdT?I`W_c|}o6{r09j{P_3YoyR9l-^+`n8@U;)#||O9?EKJ=pDof}x3C}AKklB> zDjqLr4(_LE6U!g@1h15WKDI9owGu0ZItw0YX9n8N=A)W1qc-;6T>p7`TP9RlySyk) z4NFA4E#$}c?~=dAv!I>{gNd;MKNb;IK-TOy_}aHm7I2pnT22K(AI{z;0Re%-vxCY& zm3kgWpqlUgFn`a5Bgv?uzBA(Z9-cA}mE752xgc$guTKZ>M)wD+pwmpf99of>5Wj2T zf8DKQT>rvqnLBwmpPXNR<=FWidq zrLqYOjV=vRQ&T@12{l~bKV}i+3AoJ(veUdAC!0yE=?L}D1%3Rp7YR1f9ttDwMCcau5B@QSNiII2{Y%jHrq5H#;K}J@1w+A1;!1a`!)KZ23a*yc z!k+1e&80%f(&SWJkk6UEW%wn@D+4`H!YeOV=-I!ucO_nKtKXK4qskUnQkdVrzO<&I z<@fpHtK+0%Yk<$*$a~vHbJlKH!P{lr==0}WvVl$jlGqGs=OOL~E1{&GOwnq3a;w9P zS3(ctpQ%loeL!BgRJoPC?LdH5!L8vq%`pwvewqEl!=2LmMJxwX-X`U{gHuq)>D>Ms zoXYj*K53BA$~}g(lMdmF>B?^CFN931fh6aL$?BceALZJww~G@;N@*)f_QKvdmUJvf zU!hhXb+$t0W;}w+elsi=;5_B(ECNQk&wt0);dip@n5|m)4=TYc=Q%u@Ha4xBF@Fzl zes;Z~2?MXln#X2Xjvouo5Re{xg4Q2&m=^R>nyd;GZZlE;iWZgm56rW)Mdg5kO6X&X zCnPm`JF$)U%hK_PXLU{gt1@}{bgi8wSp9TnKqhV?x|2=B3r<*-j@{eL?f<;>9KXCM zePALq*8O5$#=6(;9H5TEEyOv$%UoWJEpN&Mc*dYWG`sb7W}N2fHVT4=v&!+iT9RB;fq1qUw0kh_?OAdu}p<>o-$sfz8|Y+I{;Rv&4lG_us$&GW^i~ z-mA=-*=Z1*OK~4@$emKz%(0N4zD@bHpRkeUIrCVT&KUHZ7bsV$#$UEH+m+L|3c73o zUt+AYVvzj&58t?=j4$(6DDEvi%)@JgfE?0AV*c-cCZ^ovJAe!-)voPeTUH<$`8DWagu}Mq5|pY3}9Bu|m_of{*q4 z@k<`7mG5O#tSslH^QMvAi>Rx3rJ5J+Nl04p#@XH7UwQc2_V(s@ZmfJ5Q`j_>6@_q(;KGy)=0XXw1Qx7jyF6*5OvhGm|y zeCi^H-+}IEp5;3VWT>%1D3v7BP+lte_95)2VRLszx`7DEKUABGu~$khYl_kZPPx4) za1wgP-5xjx>6rT7V=gZp}oe8p4hrx2| zXx}d`s+(tiMsSp+a4>v4J>ZV7Nq8_#b#LZzNx-Z>7zE9&qRK5?gvj6=&UKk|^bQ}6 z&50uZBDc#OjsN!|q zE1D_(p_2JCZd@>Eij9?Gr?1&K%!itcVsewk+t=~t^YzKvN~^3OIIzO2E+zE=b=`J-v{Z*ao^OSN z54Q0aDy{^-^Ve+L8d_RvI_lpyp)xG3UQu(q-^q%tZ9MHCr_mZ+Zy(n3(U1^G@rhrJ z)|JGm55z>p=NKzSgkaf$fU304+^YuiZ@8hx6=dbbqTD9NBmiA*a{Gg0Z+qoF(<=>Jevc1sd}e`59fau zxOg3$ygm*cc%YchfUZTL4v)Zcv(f2p3lw4&I4S*r;@jIB&x`e5P_b*i<%+r%&toEK z9lu!RVdFefXp!3FQzpQx+gLP7Rj_50y4_})*TT{i(~bSrqxW`lSm@v;! zMp|CL;~AA1&nK)Obl-JZtgF`uG`%Fo@f!KaG_r2mvPMKe;;Lb`f4#95wQ+ddX-jpA ziz#%`OJB+puqDiRF6u1f_|6DEYtKpe5**z+l?)k~8Cc|l?#5Mc@Bh8E$F2-6#A<33 z^V>hRaHbXT`fOeN?9{Dp2Kv1ESQuO^G_|&pW@q9(-$Zv?8DCAFjrDfF`UI%0_sz~e z2y!>NW&i#A_vxw+j!kCW;qsU+!18b*<~ri6XnxyiyOyJ$0Isz4-vljMsTJ<@wESf~ ze@2oXeKqpx8VPev`F8V6&3}GlyUX$WxK1p!HZw%c^o05#Ad!``#e**}42dOqsRC!A z(Y3Ka<4}-=rP^Vfu42x*S>&Z6W&Su*s$ea5oQZL2GC-)a2~l@zb~QWoRe+2`BFLL*rSlJIG#owc0C8Z?Y3YHpaDtfv*t81eQ%yc^1D)k))lU+AD z$G;_fZC$@u1pJk4dlF`}aO}IlS><9$HD%@O*RGz@nynHwTnj5)>|ejJ)&Jcy#Bw0{ z46|s5*x6QHT3-SL8GJq_t8(tH<9P#j4HaGP_d^l$=KAo|XOLWD#bNJCh_drY-=#)qn7Z1V>#M6u@o99+ zf3;N|8fR-R@MLXpVy$!PuXFKsSt{E9<56+96q~tfkgVns{_kYU+Ba*3ZUK)x z;w~135`x3*#bHqRGyhBmvE|YMR=lZMun+0(j1I%KSHyBZ+x0pG{%)vZl zNeAr}W!p&%72u)_FdCKApEMKXZws`NUW)}hZbc_4SDGLW!BbGqQ`G*B=O{Z%q_$cy zDM0=MWeP!Pb8!hpkEd^e|7Qg8Dzwe@7h${EIRaR(-8gtEA$ZCYu+c*@?N16?oS2xP z#8ji>%WuZ9#jM)p?*Dh~5zG(f7hs>?++0}LY^+e-R}_l&F+ksj175UV=Uq@$UPf{a z@tNaKPEXHFvlQl~4G^ROE_+ccN6`id+%c<2gyG>ONID!cwNA9f{E0Pt73zG^we#Ss z6myL4$?Evt$*M#VzB+(Vss=v`<6)F(5SU0IK0blDwxVz|nV!{1VyczqUdvca1FXLD zf+7NF`vaX?|1EB)5z;Zpbb2SDduSHtPma@Xdk|a= z4H0+%9FiO)O$^vtUoMHR`I~lXL3z3ivML^6FaUD5s9iT;> zLzRLtLBFB^5=7eF*(EfYPhx`8N^g*Uu___M_HyC7GwsQiv?NL zeM$0d5kO87Tyd)b)24Ba(J*&bif9T>DiS*Aut4t{xVP~!v4MS*59<7edP_5uF#2Sp zJE}0`eAIqcBHtAHvz;sH$3A#)xF7#9Y{snPvAMKzy0`y0?fHu2yVR3bH zb1|X5vIIE+JzyMB4ZuJj-K=~XtVu;QC_bj<=q?TvA=9Qy#lr)rk_`tNxpqKRJNJLR zEDb7#CRO%WTj zB|$@!S=%*F+Yn@*y*|19!&xeO%T&u`h!`m6jJuLp@`Z7I=o{(__)Ivd;a0iM$iXj2 zSiGUG_2~H-aiQXcA9Ywzl{T|hNOzTzvp91<8oNShNAz|NGtUG0$DM_<$p$?bD2Uh2hN?czZf%w}U(_;6rI)7^CEqlAne}QqW*pa++^N zeUwh~TX?x#lcV6U^!M*FbKDS$(C>f@GJl1D_2RgVs_@n2Up1MNN4l6?LR*->e)Y7~ zW#;DRq$F$HadOc!@d(y3GI4m>x_*C9aaEPIv>Z|UD=rwId&OJ(WHO(6R~Dhx*jSUW z;hSfC79qa}{cCv4aIzO^cd})04y0r52?nSZO?U$WBGaPj^*|lU;j7 z6vbJ7x#=0%SUJD4%{cKHPS?#+Z!s_^t;)&_yR4%XCj64Jze>t{pIyHLPh@ll1`i8$ zlFRZB%}a!*qtOyp{pNkrB~R#cpF8(G;y7k05hH)MXS5nXd8c}=_haHyqmZLowXWrs z`H<6mzghk5hdh|ybB3O(Y5ol_M#sV7`03V4O0x8jZ{qeR$AWNUZ)07BlRaIa*S3~e zcQxsGL%i%5XlmqL>N2$cqp`jm*>1uu;o3K zfg;X51t#-h6m84lmd|s@)7|v>oJCRcKwW!M?(*v@YNK?eIEl z$uU^gP*?BnUFRmJzn&=wWEbKgJvgj?Y@>9BZP4Pq^&0*9xofHC4A9q? zTRH@~&OqcW-Xt`D0k5abbdxOFFcsFEBf6wugKB4Y7rx$Vk#Q zaECouXW_5$j-eG2Q? zIgr*V3MsLdJadI!4&i2_lh?p)X~W{I*-CB*2gwC9oFgpT3s(VQ8R~jL*SFlrBVT7C zbtxFXKo9CZW8G7m@;ZKd(r>TcpVh3|J8GO}>b zo0dUgR&nPF&6npw^Fr-Zd$N-9aei%&SL9HGXddzT4T7w^^-m8yat4hPjSjfc6~fL-W~c_xj-a=VU|<=0anrh#OI3 z9k16N`1#9un=xH*PKYPq`|nKwZWKw2x%>9IB_v^_b?dXJqGrlo|8Mh=c3&8D|3H`b zuh$c}b%X97=ZQol0c*D>ADHyO135Rfb)ioIuHLR*?x0s(ep0FueHUk8=ZA!d9KYft2^m*G>LkG0@pzkjUQZyQo!&IaE?}Apay_0kVd)h~e1+&1-2C#kx!$5| z`aPM;xJ+jl*>?sB9~YywSRDv$w>aeFlzj$vPRKQi^*H9^GHfIZJ^POZJxAI=MS zeZ7qY-9`?R9K5!7UM~aYmzNRJlt;39DGf(?DNTFfFgY<%%n&R}v?KSSr>zfN2=SKp zh~x$lSLFwdztoJI5g?)g(D%BIrh%!4_75D;NxL}iROVImIk^3CXCrCrh_D|M%XG;goBQaLIKW+lf5N`!y% z`rS`cP~+<)k@kp}mGMTS5JN9c%g^azj`rP+5A5oYk5rY>VWND4$>u(>nTB4wLbl`1 zkr%Ltq{A2tuHz+8f>OmvC|1Y~*`xPYN)G!NHns#gr)5F@H&-Vz#8=oU9ccXB3b zg>4!jzF~!Z&59)C4ux0`Dj~9lYhi|#YWWJRbcm&m1Lt|qvU4()lTiK4nH&?ksS6YD z(;{~T5?v;84D(pmd;|h6a-tV+dJMqO_WMMYK*I3yuA*N@5{5XnmPf)nvY#Qmn4)X)(qb3rP$kq^Z#GNgFo6 zBsUzm?5<22QDLmem$PDohsFr8A?AqE2*fMm?4p3BxT=&~CN zjkQ>(f9#5f*BgVM=zqy%yjiL5b4eyhgXpNeuG_4G8JHC^ifKZVdNS%NSv|s%@GCtX z`y2S^h+dM-DSA!B#pSxMFIcj;rD0F+>5!L0SQu@gF#|dP5vz;sSgH@3DK<8iAb#Y} zPp93S+>mSO5J(tJS%2J~b~unoNGNIK|GTvRTZD#f-TWyW68U%T5a)Fi@YQ4_6vb

    E8JUE(yP literal 0 HcmV?d00001 diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 5548e78ab8..bfb7bc57df 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/14/2018 +ms.date: 03/16/2018 --- # Frequently asked questions and troubleshooting Windows Analytics @@ -21,7 +21,7 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win [Devices not showing up](#devices-not-showing-up) -[Device Health data not appearing](#device-health-data-not-appearing) +[Device Health crash data not appearing](#device-health-crash-data-not-appearing) [Upgrade Readiness reports outdated updates](#upgrade-readiness-reports-outdated-updates) @@ -38,21 +38,21 @@ In Log Analytics, go to **Settings > Connected sources > Windows telemetry** and Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog. -If devices are not showing up as expected, find a representative device and follow these steps to rerun the latest Upgrade Readiness deployment script on it to troubleshoot issues: +If devices are not showing up as expected, find a representative device and follow these steps to run the latest pilot version of the Upgrade Readiness deployment script on it to troubleshoot issues: 1. Download and extract the [Upgrade Readiness Deployment Script](https://www.microsoft.com/download/details.aspx?id=53327). Ensure that the **Pilot/Diagnostics** folder is included. 2. Edit the script as described in [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md). 3. Check that `isVerboseLogging` is set to `$true`. 4. Run the script again. Log files will be saved to the directory specified in the script. -5. Check the output of the script in the command window and/or log **UA_dateTime_machineName.txt** to ensure that all steps were completed successfully. The filename with a GUID has clear text that can be read to uncover common issues. +5. Check the output of the script in the command window and/or log **UA_dateTime_machineName.txt** to ensure that all steps were completed successfully. 6. If you are still seeing errors you can't diagnose, then consider open a support case with Microsoft Support through your regular channel and provide this information. -If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally (you might not need verbose logging in this case, unless you plan to collect the log files). +If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally. -If you think the issue might be related a network proxy, check the endpoint connectivity(#endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. +If you think the issue might be related to a network proxy, check "Enable data sharing" section of the [Enrolling devices in Windows Analytics](windows-analytics-get-started.md) topic. Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. -### Device Health data not appearing +### Device Health crash data not appearing #### Is WER disabled? If Windows Error Reporting (WER) is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health. @@ -78,10 +78,6 @@ To test access as a given user, you can run this Windows PowerShell cmdlet *whil ```powershell $endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'adl.windows.com' 'watson.telemetry.microsoft.com' 'oca.telemetry.microsoft.com' 'v10.events.data.microsoft.com' @@ -99,10 +95,6 @@ To test access in the machine context (requires administrative rights), run the [scriptblock]$accessTest = { $endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'adl.windows.com' 'watson.telemetry.microsoft.com' 'oca.telemetry.microsoft.com' 'v10.events.data.microsoft.com' @@ -126,19 +118,29 @@ Get-Content $outputFileFullPath As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. -### Upgrade Readiness reports outdated updates -Currently, updates are not automatically updated by Microsoft Update, so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, *they might not be running the latest version*. +### Upgrade Readiness shows many "Computers with outdated KB" +If you see a large number of devices reported as shown in this screenshot of the Upgrade Readiness tile: + +[![Upgrade Readiness tile showing Computers with outdated KB datum in red box](images/outdated_outdated.png)](images/outdated_outdated.png) + +On Windows 7 SP1 and Windows 8.1 devices, you must deploy the compatibility update as described in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md). + +Note that the compatibility update retains the same KB number when a new version is released, so even if the update is installed on your devices, *they might not be running the latest version*. The compatibility update is now a critical update, so you can check that the latest version is installed from your management tool. -### Upgrade Readiness reports incomplete inventory -Download the latest deployment script and run it on an affected device to check for issues. See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. +### Upgrade Readiness shows many "Computers with incomplete data" +If you see a large number of devices reported as shown in this screenshot of the Upgrade Readiness tile: + +[![Upgrade Readiness tile showing Computers with incomplete data datum in red box](images/outdated_incomplete.png)](images/outdated_incomplete.png) + +Download the latest deployment script and run it on an affected device to check for issues. See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. Remember to wait up to 48-72 hours to see the results. +See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. + If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale. - - ### Upgrade Readiness doesn't show app inventory data on some devices Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded). @@ -156,7 +158,7 @@ Finally, Upgrade Readiness only collects IE site discovery data on devices that ### What are the requirements and costs for Windows Analytics solutions? | Windows Analytics solution| Windows license requirements | Windows version requirements | Diagnostic data requirements | |----------------------|-----------------------------------|------------------------------|------------------------------| -| Upgrade Readiness | No additional requirements | Windows 7 with Service Pack 1, Windows 8, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | +| Upgrade Readiness | No additional requirements | Windows 7 with Service Pack 1, Windows 8.1, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery | | Update Compliance | No additional requirements | Windows 10 | Basic level | | Device Health | No additional requirements | - Windows 10 Enterprise or Windows 10 Education per-device with active Software Assurance
    - Windows 10 Enterprise E3 or E5 per-device or per-user subscription (including Microsoft 365 F1, E3, or E5)
    - Windows 10 Education A3 or A5 (including Microsoft 365 Education A3 or A5)
    - Windows VDA E3 or E5 per-device or per-user subscription
    - Windows Server 2016 or later | Windows 10 | Enhanced level | @@ -176,23 +178,23 @@ Windows Analytics is fully committed to privacy, centering on these tenets: See these topics for additional background information about related privacy issues: +- [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windowsconfiguration/configure-windows-diagnostic-data-in-your-organization) - [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file) - [Windows 10, version 1703 basic level Windows diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703) - [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields) -- [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windowsconfiguration/configure-windows-diagnostic-data-in-your-organization) - [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview) - [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31) - [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters) - [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/) ### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service? -No +No, the entire service is powered by Windows diagnostic data, which requires that devices have this direct connectivity. ### Can I choose the data center location? Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US). ### Why do SCCM and Upgrade Readiness show different counts of devices that are ready to upgrade? -system Center Configuration Manager (SCCM) considers a device ready to upgrade if no installed app is marked “not ready”, while Upgrade Readiness considers a device ready to upgrade only if *all* installed apps are marked “ready” (or are in the ignore/low installation count category). +System Center Configuration Manager (SCCM) considers a device ready to upgrade if *no installed app* has an upgrade decision of “not ready” (that is, they are all "ready" or "in progress"), while Upgrade Readiness considers a device ready to upgrade only if *all* installed apps are marked “ready”.   Currently, you can choose the criteria you wish to use: - To use the SCCM criteria, create the collection of devices ready to upgrade within the SCCM console (using the analytics connector). diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 1d0b442c14..de69f455fc 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -22,11 +22,8 @@ If you have not already done so, consult the topics for any of the three Windows If you've already done that, you're ready to enroll your devices in Windows Analytics by following these steps: -## Deploy your Commercial ID to your Windows 10 devices and enable data sharing -In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. You can use either Group Policy or Mobile Device Management (MDM) to deploy your Commercial ID. - -### Copy your Commercial ID key +## Copy your Commercial ID key Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers. @@ -36,34 +33,20 @@ Microsoft uses a unique commercial ID to map information from user computers to ![Operations Management Suite Settings dialog showing Connected sources and Windows telemetry selected and the commercial ID location marked by a black box in the lower right.](images/WA-device-enrollment.png) -2. Copy your Commercial ID (which should already be populated). +2. Copy your Commercial ID (which should already be populated). Save this Commercial ID because you will need it later for use in the deployment scripts and policies. >**Important**
    Regenerate a Commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again. -### Deploy your Commercial ID to your Windows 10 devices and set the diagnostic data level -There are two primary methods for widespread deployment of your Commercial ID: Group Policy and Mobile Device Management (MDM). - -- Using Group Policy

    - Deploying your Commercial ID using Group Policy can be accomplished by configuring domain Group Policy Objects with the Group Policy Management Editor, or by configuring local Group Policy using the Local Group Policy Editor. - 1. In the console tree, navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds** - 2. Double-click **Configure the Commercial ID** - 3. In the **Options** box, under **Commercial Id**, type the Commercial ID GUID, and then click **OK**.

    - -- Using Microsoft Mobile Device Management (MDM)

    -Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under **Provider/ProviderID/CommercialID**. You can find more information on deployment using MDM at the [DMClient Configuration Service Provider topic](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/dmclient-csp).   - - - -### Enable data sharing +## Enable data sharing To enable data sharing, configure your proxy sever to whitelist the following endpoints. You might need to get approval from your security group to do this. | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. (This endpoint is used by Windows 10, version 1709 or earlier.) +| `https://v10.events.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10, version 1803| +| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10, version 1709 or earlier | | `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 | -| `https://v10.events.data.microsoft.com` | New diagnostic data endpoint for Windows 10, version 1803| | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | | `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | @@ -72,7 +55,7 @@ To enable data sharing, configure your proxy sever to whitelist the following en -#### Configuring endpoint access with proxy servers +### Configuring endpoint access with proxy servers If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: - **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. This is the most comprehensive solution and it works for all versions of Windows 10. @@ -80,8 +63,6 @@ If your organization uses proxy server authentication for outbound traffic, use - **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints. - - ## Deploy the compatibility update and related updates The compatibility update scans your devices and enables application usage tracking. If you don’t already have these updates installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager. @@ -132,7 +113,7 @@ When you have completed a pilot deployment, you are ready to automate data colle To ensure that user computers are receiving the most up-to-date data from Microsoft, we recommend that you establish the following data sharing and analysis processes: - Enable automatic updates for the compatibility update and related updates. These updates include the latest application and driver issue information as we discover it during testing. -- Schedule the Upgrade Readiness deployment script to automatically run monthly so that you don’t have to manually initiate an inventory scan each time the compatibility updates are refreshed. Make sure to run the production version of the script, which is lighter weight and non-interactive. The script also has a number of built-in error checks, so you can monitor the results. If you can't run the deployment script at scale, another option is to configure things centrally via Group Policy or Mobile Device Management (MDM). Although we recommend using the deployment script, both options are discussed in the sections below. +- Schedule the Upgrade Readiness deployment script to automatically run monthly. Scheduling the script ensures that full inventory is sent monthly even if devices were not connected or had low battery power at the time the system normally sends inventory. Make sure to run the production version of the script, which is lighter weight and non-interactive. The script also has a number of built-in error checks, so you can monitor the results. If you can't run the deployment script at scale, another option is to configure things centrally via Group Policy or Mobile Device Management (MDM). Although we recommend using the deployment script, both options are discussed in the sections below. When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the changes is created when the update package is installed. For Windows 10 devices, this task is already included in the operating system. A full scan averages about 2 MB, but the scans for changes are very small. The scheduled task is named "Windows Compatibility Appraiser" and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Changes are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. @@ -141,19 +122,24 @@ When you run the deployment script, it initiates a full scan. The daily schedule Use a software distribution system such as System Center Configuration Manager to distribute the Upgrade Readiness deployment script at scale. For more information, see [New version of the Upgrade Analytics Deployment Script available](https://blogs.technet.microsoft.com/upgradeanalytics/2016/09/20/new-version-of-the-upgrade-analytics-deployment-script-available/) on the Upgrade Readiness blog. For information on how to deploy PowerShell scripts by using Windows Intune, see [Manage PowerShell scripts in Intune for Windows 10 devices](https://docs.microsoft.com/intune/intune-management-extension). ### Distributing policies at scale -There are a number of policies that can be centrally managed to control Windows Analytics device configuration. These policies are under Microsoft\Windows\DataCollection: +There are a number of policies that can be centrally managed to control Windows Analytics device configuration. All of these policies have *preference* registry key equivalents that can be set by using the deployment script. Policy settings override preference settings if both are set. + +>[!NOTE] +>You can only set the diagnostic data level to Enhanced by using policy. For example, this is necessary for using Device Health. + +These policies are under Microsoft\Windows\DataCollection: | Policy | Value | |-----------------------|------------------| | CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. | | AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level (for example, Device Health requires Enhanced diagnostic data and Upgrade Readiness only collects app usage and site discovery data on Windows 10 devices with Enhanced diagnostic data). For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). | | LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).| -| CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8 | +| CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8. | You can set these values by using Group Policy (in Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds) or by using Mobile Device Management (in Provider/ProviderID/CommercialID). For more information about deployment using MDM, see the [DMClient CSP](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp) topic in MDM documentation. -There are corresponding registry values that available in **HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection**; these by the deployment script. If a given setting is configured by both registry settings and policy, the policy values will override. The **IEDataOptIn** setting is an exception--you can only set this in the registry: +The corresponding preference registry values are available in **HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection** and can be configured by the deployment script. If a given setting is configured by both preference registry settings and policy, the policy values will override. However, the **IEDataOptIn** setting is different--you can only set this with the preference registry keys: - IEOptInLevel = 0 Internet Explorer data collection is disabled - IEOptInLevel = 1 Data collection is enabled for sites in the Local intranet + Trusted sites + Machine local zones @@ -164,8 +150,4 @@ For more information about Internet Explorer Security Zones, see [About URL Secu ### Distribution at scale without using the deployment script -We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. To accelerate this, you can force devices to send the initial data by using the following commands. For more information about how to check for error conditions, refer to the code in the deployment script in this topic. Note: these commands need to be run from a system context (an elevated user context won't work): - -- `CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun ent` -- (On Windows 10 devices) `windir\system32\devicecensus.exe` -- (On devices running systems older then Windows 10) `CompatTelRunner.exe -m:generaltel.dll -f:DoCensusRun` \ No newline at end of file +We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. \ No newline at end of file diff --git a/windows/deployment/upgrade/upgrade-readiness-additional-insights.md b/windows/deployment/upgrade/upgrade-readiness-additional-insights.md index 858aed34fc..5594afcec8 100644 --- a/windows/deployment/upgrade/upgrade-readiness-additional-insights.md +++ b/windows/deployment/upgrade/upgrade-readiness-additional-insights.md @@ -20,36 +20,7 @@ The site discovery feature in Upgrade Readiness provides an inventory of web sit > [!NOTE] > Site discovery data is disabled by default; you can find documentation on what is collected in the [Windows 7, Windows 8, and Windows 8.1 appraiser diagnostic data events and fields](https://go.microsoft.com/fwlink/?LinkID=822965). After you turn on this feature, data is collected on all sites visited by Internet Explorer, except during InPrivate sessions. The data collection process is silent, without notification to the employee. You are responsible for ensuring that your use of this feature complies with all applicable local laws and regulatory requirements, including any requirements to provide notice to employees. -### Install prerequisite security update for Internet Explorer - -Ensure the following prerequisites are met before using site discovery: - -1. Install the prerequisite KBs to add Site Discovery support and the latest fixes from the [Microsoft Update Catalog](http://www.catalog.update.microsoft.com/home.aspx). Install the following: - - For Windows 7 and Windows 8.1 - March, 2017 (or later) Security Monthly Rollup - - For Windows 10 - Cumulative Update for Windows 10 Version 1607 (KB4015217) (or later) -2. Enable Internet Explorer data collection, which is disabled by default. The best way to enable it is to modify the [Upgrade Readiness deployment script](upgrade-readiness-deployment-script.md) to allow Internet Explorer data collection before you run it. In addition, to enable Site Discovery on Windows 10 you must set computers to the **Enhanced** diagnostic data level for the Feedback and Diagnostics setting (Privacy > Feedback & Diagnostics settings), and enable **Page Prediction within Internet Explorer 11**. - - If you do not plan to use the Upgrade Readiness deployment script to enable Site discovery, you must create the following registry entry. - - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection - - Entry name: IEDataOptIn - - Data type: DWORD - - Values: - - > *IEOptInLevel = 0 Internet Explorer data collection is disabled* - > - > *IEOptInLevel = 1 Data collection is enabled for sites in the Local intranet + Trusted sites + Machine local zones* - > - > *IEOptInLevel = 2 Data collection is enabled for sites in the Internet + Restricted sites zones* - > - > *IEOptInLevel = 3 Data collection is enabled for all sites* - - For more information about Internet Explorer Security Zones, see [About URL Security Zones](https://msdn.microsoft.com/library/ms537183.aspx). - - ![Create the IEDataOptIn registry key](../images/upgrade-analytics-create-iedataoptin.png) +[In order to use site discovery, a separate opt-in is required; see Enrolling] ### Review most active sites diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index ebfdbf06e8..c7fa20adf6 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -56,25 +56,7 @@ If you are not using OMS: Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-get-started.md). -### Connection settings -The settings that are used to enable client computers to connect to Windows diagnostic data depend on the type of connection scenario you use. These scenarios are discussed in [this blog post](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) and are summarized below. - -| **Connection scenario** | **ClientProxy setting**
    in **runconfig.bat** | **Local computer configuration** | -|---------------------------------------------------------|-----------|-----------| -| Direct connection to the Internet (no proxy) | **ClientProxy=Direct** | No additional configuration necessary | -| WinHTTP proxy | **ClientProxy=System** | Specify `netsh winhttp set proxy :` on client computers | -| Other proxy | **ClientProxy=User** | Configure the Windows Registry value:

    **HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection\DisableEnterpriseAuthProxy**

    to 0 on client computers | - -### Automate data collection - -To ensure that user computers are receiving the most up to date data from Microsoft, we recommend that you establish the following data sharing and analysis processes. - -- Enable automatic updates for the compatibility update and related updates. These updates are updated frequently to include the latest application and driver issue information as we discover it during testing. -- Schedule the Upgrade Readiness deployment script to automatically run so that you don’t have to manually initiate an inventory scan each time the compatibility updates are updated. -- Schedule monthly user computer scans to view monthly active computer and usage information. - ->When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the deltas is created when the update package is installed. For Windows 10 devices, it's already part of the OS. A full scan averages about 2 MB, but the delta scans are very small. The scheduled task is named **Windows Compatibility Appraiser** and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Deltas are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on. ## Use Upgrade Readiness to manage Windows Upgrades From 930fbd9dffe88c552cf0bec5c5b1fae527492f78 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 16 Mar 2018 17:07:09 -0700 Subject: [PATCH 091/138] fixing cross link in UR upgrade overview --- .../deployment/upgrade/upgrade-readiness-upgrade-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md index acdb75166c..21c4aa84c2 100644 --- a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md +++ b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md @@ -33,7 +33,7 @@ The following color-coded status changes are reflected on the upgrade overview b - If the current value is an older OS version than the recommended value, but not deprecated, the version is displayed in amber. - If the current value is a deprecated OS version, the version is displayed in red. -Click a row to drill down and see details about individual computers. If updates are missing, see [Deploy the compatibility update and related updates](windows-analytics-get-started.md#deploy-the-compatibility-update-and-related-updates) for information on required updates. +Click a row to drill down and see details about individual computers. If updates are missing, see [Deploy the compatibility update and related updates](../update/windows-analytics-get-started.md) for information on required updates. In the following example, there is no delay in data processing, more than 10% of computers (6k\8k) have incomplete data, more than 30% of computers (6k/8k) require an update, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: From 210cde603bb72dbe3767e9da5966a74945a3af3a Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 16 Mar 2018 17:25:42 -0700 Subject: [PATCH 092/138] some more link fixes --- windows/deployment/update/update-compliance-get-started.md | 2 +- .../deployment/upgrade/upgrade-readiness-upgrade-overview.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 504a1f501e..d5059b3973 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -17,7 +17,7 @@ This topic explains the steps necessary to configure your environment for Window Steps are provided in sections that follow the recommended setup process: 1. [Add Update Compliance](#add-update-compliance-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. -2. [Enroll devices in Windows Analytics](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. +2. [Enroll devices in Windows Analytics](#enroll-devices-in-windows-analytics) to your organization’s devices. 3. [Use Update Compliance to monitor Windows Updates](#use-update-compliance-to-monitor-windows-updates) once your devices are enrolled. diff --git a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md index 21c4aa84c2..d33af45a70 100644 --- a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md +++ b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md @@ -33,7 +33,7 @@ The following color-coded status changes are reflected on the upgrade overview b - If the current value is an older OS version than the recommended value, but not deprecated, the version is displayed in amber. - If the current value is a deprecated OS version, the version is displayed in red. -Click a row to drill down and see details about individual computers. If updates are missing, see [Deploy the compatibility update and related updates](../update/windows-analytics-get-started.md) for information on required updates. +Click a row to drill down and see details about individual computers. If updates are missing, see [Enrolling devices in Windows Analytics](../update/windows-analytics-get-started.md) for information on required updates. In the following example, there is no delay in data processing, more than 10% of computers (6k\8k) have incomplete data, more than 30% of computers (6k/8k) require an update, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: From 5fb49ccf915dd097b2a1813e53c4e4f1cb600f26 Mon Sep 17 00:00:00 2001 From: coreyp-at-msft Date: Sun, 18 Mar 2018 21:58:34 -0700 Subject: [PATCH 093/138] Update your apps prompt added to all TIB topics --- .../trial-in-a-box/educator-tib-get-started.md | 11 ++++++++++- .../trial-in-a-box/itadmin-tib-get-started.md | 12 +++++++++++- education/trial-in-a-box/support-options.md | 16 +++++++++++++--- 3 files changed, 34 insertions(+), 5 deletions(-) diff --git a/education/trial-in-a-box/educator-tib-get-started.md b/education/trial-in-a-box/educator-tib-get-started.md index d1b54552d1..c827683002 100644 --- a/education/trial-in-a-box/educator-tib-get-started.md +++ b/education/trial-in-a-box/educator-tib-get-started.md @@ -11,7 +11,7 @@ ms.pagetype: edu ROBOTS: noindex,nofollow author: CelesteDG ms.author: celested -ms.date: 01/12/2017 +ms.date: 03/18/2018 --- # Educator Trial in a Box Guide @@ -186,6 +186,15 @@ Bring out the best in students by providing a platform for collaborating, explor |
    Watch teachers elevate the education of students using OneNote. |
    Here what other teachers say about using Minecraft: Education Edition in their classrooms. | | | | +## Update your apps + +Microsoft Education works hard to bring you the most current Trial in a Box program experience. As a result, you may need to update your apps to get our latest innovations. + +For more information about checking for updates, and how to optionally turn on automatic app updates, see the following articles: + +- [Check updates for apps and games from Microsoft Store](https://support.microsoft.com/en-us/help/4026259/microsoft-store-check-updates-for-apps-and-games) + +- [Turn on automatic app updates](https://support.microsoft.com/en-us/help/15081/windows-turn-on-automatic-app-updates) ## Get more info * Learn more at microsoft.com/education diff --git a/education/trial-in-a-box/itadmin-tib-get-started.md b/education/trial-in-a-box/itadmin-tib-get-started.md index bd1c4b36cd..97a8d7964f 100644 --- a/education/trial-in-a-box/itadmin-tib-get-started.md +++ b/education/trial-in-a-box/itadmin-tib-get-started.md @@ -11,7 +11,7 @@ ms.pagetype: edu ROBOTS: noindex,nofollow author: CelesteDG ms.author: celested -ms.date: 12/11/2017 +ms.date: 03/18/2018 --- # IT Admin Trial in a Box Guide @@ -259,6 +259,16 @@ Follow these instructions to confirm if you configured your tenant correctly and 3. In the **Downloads and updates** page, click **Get updates**. * [Try the BYOD scenario](https://docs.microsoft.com/en-us/education/get-started/finish-setup-and-other-tasks#connect-other-devices-to-your-cloud-infrastructure) +## Update your apps + +Microsoft Education works hard to bring you the most current Trial in a Box program experience. As a result, you may need to update your apps to get our latest innovations. + +For more information about checking for updates, and how to optionally turn on automatic app updates, see the following articles: + +- [Check updates for apps and games from Microsoft Store](https://support.microsoft.com/en-us/help/4026259/microsoft-store-check-updates-for-apps-and-games) + +- [Turn on automatic app updates](https://support.microsoft.com/en-us/help/15081/windows-turn-on-automatic-app-updates) + ## Get more info * Learn more at microsoft.com/education diff --git a/education/trial-in-a-box/support-options.md b/education/trial-in-a-box/support-options.md index bf520efef1..9df3ab2015 100644 --- a/education/trial-in-a-box/support-options.md +++ b/education/trial-in-a-box/support-options.md @@ -11,13 +11,23 @@ ms.pagetype: edu ROBOTS: noindex,nofollow author: CelesteDG ms.author: celested -ms.date: 12/11/2017 +ms.date: 03/18/2018 --- # Microsoft Education Trial in a Box Support Need help or have a question about using Microsoft Education? Start here. -## 1. Confirm your admin contact information is current +## 1. Update your apps + +Microsoft Education works hard to bring you the most current Trial in a Box program experience. As a result, you may need to update your apps to get our latest innovations. + +For more information about checking for updates, and how to optionally turn on automatic app updates, see the following articles: + +- [Check updates for apps and games from Microsoft Store](https://support.microsoft.com/en-us/help/4026259/microsoft-store-check-updates-for-apps-and-games) + +- [Turn on automatic app updates](https://support.microsoft.com/en-us/help/15081/windows-turn-on-automatic-app-updates) + +## 2. Confirm your admin contact information is current 1. Go to the Office 365 admin center and sign in with your Office 365 admin credentials. 2. In the admin center dashboard, select your profile on the upper righthand corner and select **My account** from the options. @@ -30,7 +40,7 @@ Need help or have a question about using Microsoft Education? Start here. 4. Click **Save**. -## 2. Request a call back +## 3. Request a call back 1. Click the **Need help?** button in the lower right-hand corner of the Office 365 console. From 50d65ef15f4a2a99d25c693e32c9eb658c25545c Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 19 Mar 2018 15:33:42 +0000 Subject: [PATCH 094/138] Merged PR 6455: Add info on diagnostic tool for Hub --- devices/surface-hub/troubleshoot-surface-hub.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/devices/surface-hub/troubleshoot-surface-hub.md b/devices/surface-hub/troubleshoot-surface-hub.md index 9b2ef8764a..1056ed9472 100644 --- a/devices/surface-hub/troubleshoot-surface-hub.md +++ b/devices/surface-hub/troubleshoot-surface-hub.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: surfacehub author: jdeckerms ms.author: jdecker -ms.date: 09/07/2017 +ms.date: 03/16/2018 ms.localizationpriority: medium --- @@ -18,9 +18,13 @@ ms.localizationpriority: medium Troubleshoot common problems, including setup issues, Exchange ActiveSync errors. +The [Surface Hub Hardware Diagnostic tool](https://www.microsoft.com/store/p/surface-hub-hardware-diagnostic/9nblggh51f2g?rtc=1&activetab=pivot%3aoverviewtab) contains interactive tests which allow you to confirm essential functionality of your Hub is working as expected. In addition to testing hardware, the diagnostic can test the resource account to verify that it is configured properly for your environment. If problems are encountered, results can be saved and shared with the Surface Hub Support Team. For usage information, see [Using the Surface Hub Hardware Diagnostic Tool to test a device account](https://support.microsoft.com/help/4077574/using-the-surface-hub-hardware-diagnostic-tool-to-test-a-device-accoun). + Common issues are listed in the following table, along with causes and possible fixes. The [Setup troubleshooting](#setup-troubleshooting) section contains a listing of on-device problems, along with several types of issues that may be encountered during the first-run experience. The [Exchange ActiveSync errors](#exchange-activesync-errors) section lists common errors the device may encounter when trying to synchronize with an Microsoft Exchange ActiveSync server. + + ## Setup troubleshooting From fadc9a4a140982968f0009c42c62cfbf9148ca16 Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Mon, 19 Mar 2018 16:33:31 +0000 Subject: [PATCH 095/138] Merged PR 6456: Merge msfb-mkts to master Updates for Puerto Rico market. --- store-for-business/microsoft-store-for-business-overview.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/store-for-business/microsoft-store-for-business-overview.md b/store-for-business/microsoft-store-for-business-overview.md index 53ac6bd262..3dd01700a4 100644 --- a/store-for-business/microsoft-store-for-business-overview.md +++ b/store-for-business/microsoft-store-for-business-overview.md @@ -282,7 +282,6 @@ Store for Business and Education is currently available in these markets.
  • Philippines
  • Poland
  • Portugal
    • -
  • Puerto Rico
  • Qatar
  • Republic of Cabo Verde
  • Reunion
    • @@ -358,6 +357,10 @@ Customers in these markets can use Microsoft Store for Business and Education to - Tajikistan - Ukraine +### Support to only manage products +Customers in these markets can use Microsoft Store for Business and Education only to manage products that they've purchased from other channels. For example, they might have purchased products through Volume Licensing Service Center. However, they can't purhcase apps directly from Microsoft Store for Business and Education. +- Puerto Rico + This table summarize what customers can purchase, depending on which Microsoft Store they are using. | Store | Free apps | Minecraft: Education Edition | From fbbf49d17aa49514b9bbba539a8cf36ab391f057 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 19 Mar 2018 21:24:06 +0000 Subject: [PATCH 096/138] Merged PR 6466: TextInput/AllowIMENetworkAccess in Policy CSP was updated --- ...ew-in-windows-mdm-enrollment-management.md | 4 ++ .../mdm/policy-csp-textinput.md | 72 +++++++++++++++++-- 2 files changed, 70 insertions(+), 6 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 1ec94b2451..04192347f7 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1658,6 +1658,10 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
  • Connectivity/AllowPhonePCLinking
  • RestrictedGroups/ConfigureGroupMembership
    • +

    The following policy was updated in Windows 10, version 1803:

    +
      +
    • TextInput/AllowIMENetworkAccess - when this policy is set to 1, suggestions from the Microsoft AI chatbot Rinna are enabled in the Japanese IME.
      • +
    diff --git a/windows/client-management/mdm/policy-csp-textinput.md b/windows/client-management/mdm/policy-csp-textinput.md index 6b2f4389e8..07ba3d94de 100644 --- a/windows/client-management/mdm/policy-csp-textinput.md +++ b/windows/client-management/mdm/policy-csp-textinput.md @@ -54,6 +54,9 @@ ms.date: 03/12/2018
    TextInput/AllowLanguageFeaturesUninstall
    +
    + TextInput/AllowLinguisticDataCollection +
    TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode
    @@ -218,7 +221,7 @@ The following list shows the supported values: cross mark check mark - + check mark check mark check mark cross mark @@ -237,20 +240,18 @@ The following list shows the supported values: -> [!NOTE] -> The policy is only enforced in Windows 10 for desktop. - - Allows the user to turn on Open Extended Dictionary, Internet search integration, or cloud candidate features to provide input suggestions that do not exist in the device's local dictionary. Most restricted value is 0. +In Windows 10, version 1803, we introduced new suggestion services in Japanese IME in addition to cloud suggestion. When AllowIMENetworkAccess is set to 1, all suggestion services are available as predictive input. + The following list shows the supported values: - 0 – Not allowed. -- 1 (default) – Allowed. +- 1 (default) – Allowed. In Windows 10, version 1803, suggestion services are also available in Japanese IME. @@ -676,6 +677,65 @@ The following list shows the supported values:
    + +**TextInput/AllowLinguisticDataCollection** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobile Enterprise
    + + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + + + + +ADMX Info: +- GP name: *AllowLinguisticDataCollection* +- GP ADMX file name: *TextInput.admx* + + + +This setting supports a range of values between 0 and 1. + + + + + + + + + + + +
    + **TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode** From 1aeba9b3c93968b7fca8e40bbbc16947638d82e4 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Mon, 19 Mar 2018 14:57:27 -0700 Subject: [PATCH 097/138] added first draft of data flow diagram and description --- .../update/images/WA-data-flow-v1.png | Bin 0 -> 36443 bytes .../windows-analytics-FAQ-troubleshooting.md | 16 +++++++++++++++- 2 files changed, 15 insertions(+), 1 deletion(-) create mode 100644 windows/deployment/update/images/WA-data-flow-v1.png diff --git a/windows/deployment/update/images/WA-data-flow-v1.png b/windows/deployment/update/images/WA-data-flow-v1.png new file mode 100644 index 0000000000000000000000000000000000000000..072502b2c7379b3d6b79acf11614dfb664242556 GIT binary patch literal 36443 zcma&NWl&r}yDf~n2ZCF03GVJ5+zB$cTX2HI-~@Mfg3S<|;2siO28ZAA{CnMDq0)@mOlf=~ zgm9M`-TDfY=(u8S3?aY(2@-uM0EZSyW=skVk0(0v=lGw$lfn8_`galsyFU-0p9;_I zYz~a3%$!bJ?pLM)7FXH%uUkoMF%BFikArqXv9}NxL-8Osj^Yc^a6j@!^w_Vz5 zZribMM~3ie0T2*C=pCMY8@LGANel^LpcEBw+Yn=rCjy_!$@qw-Tm-hIrKYA6;>~mJ z*FS`o(pp0yV8hbq=jYF8hxWG;5IHYnQHrip;xpg8Ts}cT->17%!_?F;ZRIe6vaS!# zIoA~Ed1e8?NQr*?p8<}Sv78!C*GW1)>p>Ma@fhwz9kwQ0sISu#{#uD*OHJzCf#QBd1G+vA3^pDwl0P5D^tai4k@)_*Q|=kL)v(l^lfV z?%%&| zr?Z3B3vZS04woc?EL>3rUOw@r&duU?8(=QIUPj=DnElvZB+jh<`Sx+cg?_q>H3e0O z)RX@pNE(3+pE;*zHF+D8`Ec?ll271fPf#UQ?Nl+3iTk(J$ePYuwtWLVy&7+`FwzrJ z;e0>ua1{?Iq}9KXd0f!%I|-}UnU5j*7Cr9!rq#O=nu$Hd@czuMQ&B#oR)T}BQ}oqy z0qlJHqqlRRaqhjVu4yZ1g>kcM{c)!zqVL~-P(~SX7mnTkHt#n$Q3c*}ed1s7 z$TRHZ6AfK?dp_my(>*wF&C%TP%t80WrOi~Jq@?++JyGT((L1{6*)&Erws?N}K6V{# z?dm03>{*K=_WQGEpCs>AdGTy}RDG|M-$2Wh_;&B#a>vOmksu}{CVzU5pAy}xN&Vl_ z7ek;+6*CflC%j_9mezv1Oh117ZZ}ofz_E0zQ*lfEr7Q6pS&*}|G`!-`mHRw;Y{zn4 zi)<9s=iTkwE=!G4#PZI2N8>H-kjmY3te*l0sQ&?CS5fz6*z?p=lOewVM!$2rJq7qk_RaiyOYWmg1 z_8?)Rh~;W*p=7ZJ7jJxcY^d)L4Kjc*w*+%0~^2~Eb=B+CXT8`Jp9U>sc1-uJgRf5N;Dykg) zLOtcHeVrN!2iov=dDrJzkJP&A#Kgol-Zv*s92^$0aIi3$d@8W>)Cf||WS4$PO-rk< zH#RdaEx*|EXsfNQHF07)GM2NlDw{QSZB(oP^YN1z2Ao8xVBow;Pk05EaE9@84*zn^ zJENMHRWxO&;D%1xT-$TI*6x4Zsl2I_8b^pAE3U1NLPGrFYxst>N_6d9;EK<6(w=R7 z^Skdvjp+$~MSvhNR6BM}+TrVFp>#NvW{i{3&fIC9t2CvEsL1S+E4!GNy?Jo3nT=wg z;%M4L+Q!eGA1(1HsF;`;*2SKkgT0IU>k6Ve5jyEy43*Ohi*Yt~I^vnqX9CQeoRWTc zqGm{>UE((K+HKz=^uyxfFc?Uy^Un^g+P+jtG$;l+xNy>DuNVHgB>pBb9(BYLh_<(3W;Zu%`YT_}@3j@U$+m6lCc14)qPF`=t?U%G; z>vEAYn0U-LRm|Etuxo8|A)~1xC&3_o)_nKgA-CGh0&1I=hTh>8bmKYA8Yi;0_#%~(AMc&XsfyU>}kYhGt5%Am}2VOefpUAH-3fw%+ zu!?3Ir`+%{QSRnmKcX1#drEMBT|F~dofrg*1fRDOS9b`}q1V*Zc%|SO2I__{evPrC zXyb6t7u7udqjq3&{vFfib>#-`Ij3!XQER38DlMMF>-+TF*4&`gDtF8Yeed3R^J;{o zQu(@s_pz?J`Xnrt(VS#~Uxs&FuW>Pt*##fXjw{NL#jPXaJk}9L)axl_tlQqi(tB5V zgr^j@%`h>}LeL}md=O|83#5=BkV4nO`|zwTNpFeQ2djT!&q;sl3k#+`g0ph~6tT{% zdu2XO9~-{nC=l7+;Ab9nz#%P>pdS=Gnm&)1arb!Aczw+rphZ8;%NANB?SI~Vf8$8= zwH#@rcVr|b=+9o(a-9d#jIo#6(M-*7JaJc07&pycUl^kQcy=K{X*vW?Qf=^PeDUCC zPFay)<*(D#wl9)#p)w#o7Y+b^QGt|_6%!upf#neRedf(;$h@CjogevQkY2`nfBsan zf4DbMDZ@0&7H}cU+dT25W zq#`T9ZoS(g3{l}+ImLXfjfsgH*&^2L1`_9;?J2prDk=!M@vjpMOvz|*=EKZY?FBI=gxWqD08nqEx+XVbMPBD#{hD$6ooO5$VHN$Bz z`GJ9JVU*pSQu=x|zHY$6Lg*L3`jXHU{Bo<+`?9|!I`up(YqxfJxTKi)RD@cY&wVAh z*>Q8+D9&@5fBu(CSK4KY`m+mka-VUoEN)}4WVL6(&>$k=b>r6Y!=|x`zvris{t|P3 zmjSXLBiN3O?1Jmz<8+~*M<`VA8gXs4k6bR`BZs*yM3+g<&yLO%qphd0g5znsjBxbI=yEzjv+3wDLTMpyNCx@CE8mLMtE8p^vJrz+0WAwjq41C=( zxAL7YlnOxmUf#G2uKZS0DB+4q+W!>syir0>Cmk}o8OX)&W8F~P-z2(fd~z~l%P)lU z=g*&P3Fv0g=KOpl^W1Wcg#3e?g7!-0EB#3^IAa&SMLYy;s3{1S)(u)oSyVERm^Vx7 z+tQ+)Zgv8|)`E^`kWq{B`!7$Uz&c*kfZ5pCK8)gzwz)2wP*nJO7Ber>5UzVS{Gi5D zwA-l4dMg#`QqzPb1A)NuM%!PJT705hVI!`-Ghr5vh5vJpZp|JB4BSy&r-uhqWxO0$ z3Zx71v@twqtJRn>uN_7oj{Ms4WXmAhJWeGmMFi?1#=H1+)%9M^bxibmNI0L*Zp`C? zw*#~oWJWkpmm54;s`seDzWvZY-N;h`ri-ou&S+r9&9=zT^1=dFe`@+?+SIH}Q0Y6=IP5L`DN|F9lZHSTDhyr4>&DeeSVt>68 zPN!1senS^#T{xndjFO z`^sqG+H^JiN9@xy5*MgYAGdAoM6N?kG~t2Gxo}lwPsyx2-e0o7P~^5p1GCH9Kq-%e z+Hb(Y;Gs3h(vCXqfxcLY{YJvhlfnB-n58HG{ zp6h;yXoub0oh9%%(&&Co%tHv4%iH0M$X>^6dd(>#>NMrxH)sw}q=5y9On5S3hHxmJ z|9>~hkcoyR|NnaQj#Rd>AReIEES zQfa$0Qif`BX!8N702?kKytF4dHL3;I~H9zh>hSB|AjMq zAb64}sS&BjNzVX}7;qy;0=?~L(n`5t<~NV7Vv(CNC9<&$IDEO0U)Yhvk2596O{OMC zDSx4h*Z)SEhZr6wCSFq=MBctQAJN$Q^CJh89UdJm7G!Lu5$BVk8SG~6yoOU-?HoLwdubYp? z8YNS?A46{SydK81$3G|XpBV}Jw5K|&GLz@oSr%Sc%eqQNRel3ho=C{bWFdz34n*{% zH(cvjl~n}swfFUa2{DltAi=kgdFoso=2Cb0UCbvjgSXfsCd%NjRo9~gQ7Z9kV%#E+ z(d@swMtgn!>ewZaAZ`a9`1ApWOoJ#m*x&_xtgNh@To`zG z*9$18vn8TQa55!5(^8-NiT@IiRJt{%wVvZu70o|Te&6m4`yGJu7il7upgyIFQYm>9~ z`#P3*4gPsj#$x+(C=b8h1?|T~Sh4FOQrUx=RwN)+hB?N^I6ycoGD$!B(QB!ra`qX+ zWmKi6S;_NHF~Hv0ai@98Q`97{OLT>KCGYHUU!MVG2r}SFMspu@ONlrPof%KWL@Ruy9+-l zZiPQ%Ke9_y+Y8w==YCpESyBe2hJXx}-<}1|owIOw{&88h*+KF4^`2qWI5qxK_+}#M zYgx=9M{vbMAtntC>3cnVcbSnqOFIuh(MQDLZVcDC>0B}9w!masY|3XNX? zp(%&2Fr2j%^>`58nk+I6`c_8^9!XCVDTn_l<5QuL_D64m?O`I(L>~`avZsu?bLp}1 zaU;-<0-ET=rn8X$)ggFiB%ryqiMdU#0UU(;HHK=sIeY7I6=LebagPE&0SoUliYs9H zz03Jg7SdAeocMnrh1S0zIsz`-4SlqIz%*=ssyVO#69yPB`jaXCF@oy`LY3TVR;6PmCj79@7jykn1{l9>!bU3~cd zC?pEl+(eR*>&yXxz}|-SZ%#{-Ki)9K#m57BgxE#q6MIvF7T%DCeb?f{$i&X$bx@Ng z!pEyDML_#nj21rfx_LxB`AAQ`y=Wj2ba9*TbYLqMdeO-y1q7y-y>>!3mLzTo6?*TE zVk9|l30$AzH?w|3xIiT$Sl`j8$$M~3IwJ>oBi(FN@)7=f4)(5=g+1T1rzgA0aSt@v z-TmdmHgKd-n*jyTg2JcDgv~%6DYAwc!`{F-=DUzR%g-=^@IoMBM%v5BQ5Ir5gWE7F z8o8Z@vClmmJ4<%M=>u%pP-YdAD8M#W5syUIw-HLHSy@O0@B#L~3&cQ}zVZuR^vnrN~ljeX+8TkjU? z%AD3&yTj_*y6S38dAT@=kg-^iV8K=*ijNHPaXX`52ETEskgH|~Q^w-UOhasP!X8@X zXg>FT=A>HDP=2LJr1Tl^u+p)BWl-Vn&p*lf@TC6}hFiH`MPPAytp8pFh!KK`C2f^; z;H;OrmC?sB9);)N9JsTTxbR=a7U)pWTxyYeX@Wm=YY!z+>0KhF%^|I%OqMvHTX^oi zB$Ur5ef;Oo`SWrGYN_?m9{RANmvRPl&Bxd02#v%Kg7N+ci66)r4_Wk0We>?tj7v1a zCGCSv1Os$U6z=fmpZ0P*Fu8I_yh)W8Vmhn542|2p0_}%9lpX8}?RY5A@wO2Ht zS=!S94D!298+5Hl&^qCLE$q~0n}wtdDo)&0EPIKGYgozu=hc!Vtbg!LhXwll`jxoc z@oG#&u%_KSv9!aPNJ%?z|CMyJCLJPA}j}u8tGh4Y(ba3?zt7$QkJ0hFFv9DE;|9%b$kDm;~6{^rwLlW-4;hU! zA2cy&i&YT@o6#Fr2LvkEnS9%cD#W1xWP;T^f~}@^g86-_H}J?}NA9BBt+CpFCU1!} zeK}RnJ@X>(2~KRg8zd2>z$KCE1*cRL7l&pNGKkaU@aLyKxABW3GOWQKs5c&GIUPAb zicE@9q7;cG0&sBWk~HcgVk=@Ambi-cH=v)>)vq_p#w}mmVIu!Pm)?0O&SsRl_j^!v z?dEG*M+JUxz!WvgueK?;Uzn^~1H3NAaXWYNNs7MN#$?-Z=&Hdl7ca0?xoiY~^7KTx zu|3gWYSAW|DZYutN@DkehIRc~_lvtmjTp7aP$8BEY4yH0xj-(fFJPG~5z`!|s zdwb0lLs#ccpO{Mn6%`C~+fue9G3Fg7!~9SVGYszV#>5X14KRrptG;~hmt=idfrOuHo_tl(n5yC|i~4W;;(t=P|GsP|dxCjVei?)< zN9X63mX`h=Wa${(bbze(dM6Fqog$VA-fui^XXzN(ArLYx4*uZVNFlj@jmZyu&@A&{ zBjxbqq!U`g>SMf^iVaEU^x6t`d~ zsBF4EzOG<5uzKTgrtH>qi%#K?NGeBInD*5*+d}l63#89cIP^`IscQTCWOZL)27LmB za4HhYI#On5p)+vT|9U@XgfK=uPvC<*d-5Exen3JQv6_#W7?!S+g`3I350Z0RA~~SF z+!AtKEt!W<4y3c_D3vuLui=BZt)QXUL~q|}&!?LyslkR4LiVtg?Td{;@*+S~|2cv# zRxxu~8ac;n#Iki`y$y0?=Z+~hJ~FXea}D3p6D!{0Kt%Y#2QQwf|K-Qx*zz){eoxa! zU8<+RaX^K(Keie$826CBxHRxA^c9!qmd{;h5h2XC!r?u}wlq&ZFY6$kb#~_2$OlbM ziveAs(!*B2kBJ3MI5Y4jmFPld-BRlyWl*@tr!S%Ecyn(%9GUR|d{Bvg3nHe{TlQ!$ zj1dAs1rp8sGQ&BMG^5~6+=}|XZ)*WOS*e(tF%7@A)A%vu0^g&_WaIsRCh>pTiKxW5 z$z@n-WTYI{Dz?>V694*Vf^VAQ;I;4m-^}c|p`j&%?RHaCaXc`vSUXiT8M7)e&i*iw zKzYCt@(geSS@efDH}j!2a9ZDd#DaeT@13ilCz+cTmv(2hACyRL`n9iiZt5jwTU&Ni9v8m`v+)v73>Z3BdoioEsjKr z4n*i?g%W5)C4$b`q|RRw-t+SlO{}f0A?)OhjszGWkkHCI#8!h9NSV@~g923gfFI01 z>|ddC(07`v#j(WsbVvYMwkhzyyX5 z&-Nm}KDlXIc6i*C@47M4PETu5Tj&VWe-b8flf{KsRZ-jY;?JPK`Jt+sxh_s~+^-l< zG^p-gx&>Cf^1NE=>}fd7gz;T0EF;r)^`D98uZr1pQw{zN0wQTW^P~ObHK#gdkyBW> zaiG^AKJnJFChLv27^zQiutaGmu=FuQ!+4@MYg&UPMn;2&fs1JG?w*L-xu1Bz1_CnU zQOz=9VhB1>ZD8AO&K&#sbC(a!iG@Ml;q-!6H~m(NUZH{a$sS_nSW9gOw>-}mRBA_T znFbpeJwN{WI>UFZkUM*gmE~);8UuaWA2@b;da6}x2>T(=`?=X!P!%#Vavgox$j3){ zJoej-9OP8x=`K&xyQsQ4_Q&xz9opL3Hv?ePy1g@HH!|j$uSyC=H=as^2&d|fj;tqI zgcF9TQc{%zv?jj!$8UPrB!URg2hBu{_(Lp)#_Cqn0M|BRv)Rs}wAkiG<*K2J)EmM9l}w6*RcR2zMUQ3m+oVXretETS89RAKj7c){XY zI*G-Hv!KoOn1l!n^0Sv@kjF~{SW$oApFhpCLF-hLvFKaz(Dks^{TRcJ&+lBy6-XBz zXV`~+c{cS|ltj@qIYYSz4Uv}0l3PC!2iiZO;n5R{&(12v1Bg>Vfubc@UldrONgp&l zr{q1~9+Q$zn9_=`6J<6knRkfn=*R*I5b9rUbh3aqh8*TOVf>mL=J*lY*NIdbuXqH= zgE-Wy``xAGRCTV=ZsvmdX^Q8&FQY!@eWX8oa)S@zvAArVMM66icKc~cr_d+=5Ss?P z%4dE4+qwPH&|SaT($+P=FFxQc-e2+kwt1F;=9kM$GTYq%Cv}MSsfiGJ7QjGXUtmeM zQ)MGxOTcwHtd;^kdhm;x5v+{M{2g@4baH%hvVan>V}piAf5?u|&K~l6C^k1YcVuK_ zaYZHaYAS0-6K|dJ^cQj$-pY^o^dF(x?^I=FWxc&ySjX(tvPi6U<3i83Xsn3qq8~Fw z70kU~K<64yTQAUo5NFYw;5%uJ?Q^3iPBo*e9a2>*v9?(jqNcG)c>IV+_$7gAk9`jvXUAp`f2ESbQ6L? zaTeebwKDEbz%vL;a}aM|^?C>7?@J4LeG*;RUr%vZ+Zz~kHU&yK34d*T*Z*EQt#0h%IZ*xMSq_>_LS!H4Q&%8~at;o4a24z2ePM_2 zId{DnqB{;}#7gz`L#u^@t$+VY)>zQ3S!t(p#d;EaQ`GZ&rNkQ2dE1kl6JfIq-sun) zc5!imk%y96N4bvxp$MB#pT4oB%o)udx9ZGI_aaf`*rIPd;8cqCQEjF{B38P>>FKww|c^5O?>yL z>V>2oq~ZY!Tt_H$US8hc0Cu~Q68;@0yLOdzN{{a6_Nh+ll=S@=q&|K0y)F8%jnof> zg~t^14eUJjMUfGplzTeTCbu49N!cBeuW~>i*qbdcyb5X-?mO7}DrKS5K*9&jC3j`` zvJNYEVD8q~7$ZmQ?uTA&R#0wXo7?8s1*ciw%yUQwuhU#5uH@sx+)V7t5~F9anj%a@M3k7A zNVq^d$iX72q7?#e8&!}3Uo^N6i9;?e?+yau$g)5}Bi}ftF78TcS5ST+mD#bW>hl4%FJzU9Lf;(K*@MwTF zK)jb=`2C=vDw9dPyEF^&UM`tRlnRTSiEYvtE#{c1lmFPK-Br7(P?qojqJ@jjL%4)( z5{(sjba!RbmE`)q!L;jqC~hq-zv*!=FsX4|^z!J;ik|#&hu)fap>Dhu5>S0Sq|A?q zo4|dJB23uU0Z^nF>H)wQir*Kx>9pwRu8{ke7v9H(A3puIy;e__5NP*03TLetvWcHF zL;(GJ1by-^Sb<;3oJs#c0s&!u6P)a#aey%sT(&r(`@Jeor%A355@Um<`E+XUf)-22 zMn5e^B7j;lcrDA^*C8PGJ%YaFnCZ7e2Gg1eGZ{Obh?URQ+@u?BH*IE9e&!#tLPf#Rvd7A+`TF(v3|eiJO_tO(ouu}?qr%Vp)2}0w z#!`d;a1wAuY2#C6v`&YKd$OLM7@q$iPQuk}DhyC9Q|y6d9_jiKSWlzhB>rsH#NWEl zc#*G(9}7ShKtb>a48SuO`EIpvEPs1@%X;?LWtJPkC(adT^m2$IEI3KwqC2AOW-JD3 z`o2memn`?#2~m{h^74~`wEq6e_&6+x>Us3rm0Cd-d!U-Y zrA_fKQ@6(=N5oP)W=>W+mwbnfK7BIItl1P1Kc_S@tICrJPO#=#QOw3bFh+(SIIFl; zLJYIP(b7N(`&xg_67Ha(yf1FE+%vu?;oZwQZkY6$hg~vopH^Mr7oq2n73L-IeM2eg z^M)BUtO)vzcXHxtiHB8}PKaVT0Gjyp`?`%(I_9kduyZ4<4BvfKAnmNeq4G$Zsy_)$Q66Ra>Vl8D@Ww^JeXJlk_!#~y4TavDe zz=Vdv?My2%etr6uGE14%9JA6*@-hp(WLLvw7FAmreYGsTj$Rz_*u)g#1MKbp8nXN* z01n>9k_a8_3egp2@5rQ|qp}Q9(hz?;{@qLT5kWylFZXCJ8LswFwlzIL@{=lygKRl| zq#@mI+mOP%RheuP89iF;=-V!$Y^b0u+c?{<7X35p8x?|Q4o@j_!bpdd%1DdNI%ync$*|%einS!j5yAzH3cqCS94wclW4bn|v* z1|bC_s;b$NFTz7s6=lP)iY>@q zEC(a3s{M>wRm;>s$+LDDe^05g@cACMMe@%&f!qQ{Vz$V_AMl^#2yvppx6nvHp)Ezk zhNqgZi0usy%Op9m(BJdM4TD%L%UxaE`>uRY6}k)LW``DOjso3~Nj-t7J89J%ir%(d zucCuqc(%$7Sm*dfb;O$TC2EKV=wDb_RpDP+3c_9rP`L73yYVrTSTDA==c z=Q97V%IjfVo`S34ZOsq7SDm1Pfe!G+5c3@$6_$w-1=h8f$mI7Qm(#ZEl7YB?CFcCM zF>Mr8F=V{I5}&SMASNwG%X-8RtbjV6Kkkg1&Fwz`h!QM5(D|V8ZB+KZ7q65>!1cZ5 zaiCD=A+S(R9zi0|3Ht~S2Y*3RG?$D5LU96@*K7VN+15)h{DcqNK=kgkQjJv{io{uZ zMVD_zgL0B`fHSW%NBd1VEMn(g31+t$2L%z5?wN#V2FSPauPa`V_jQ7GoJ^Q+VqGB; z;d3Gg{OHk_a+UijyRn-|9tq3a*(>`^hFHCg1uGN4b>PwDIS$$N%Tj*CzGzX0%w(OE8{>;av$uCfZs(5?FLloovE-j^U&=4%9%6Rj-HmPXnn}06SDa(n zLRBJndkR?tv3D#ou@)d0_2pM{e_PuNe+;X$%9g$%DNvHF_7%n>b${vXa;sMH-$W zc18>+W#=dadw#b&2K45I{Oz7_``bVKVqnd#LplUP3=NjvHX-Kr6POQ{l657TK`UmK zRFUG3mmi!aHq(0<#aK;GV>vwJ!`E34 zTn?6Wqk#dKGD0+SHi(rCMVyr~`+Dqfrs{nE8$|Vg;t~JAEE`BT%@C<2Bpffgx}=>3 z?NVA*HJ-lu~A6LCAysX6x#m;L*ka2~qwz_=FCFO&uWOY)wXd-ZEEntST1q03^ zQmSK6EvG@^!Wtf5Wt<5d22nb>`@-lj#&BTF_4TwYE?_NbZz%Q+3-%*|%Fd$rqa}nH zdl?mrB=kx-f=8L==Fk?Ah+FCpb;vU~?gj<<-6eGSo8I?mhq=lWxJFUWT_tBqZyM~- z&kq;dVThwihNJE))zx+MChJUD_e#mGY^RIK(Rq!)gs z!OCzZx=@Nd7~v9_my70jW9Wn|s9Jl2p&7O)1IJM8kCC{`y<0*nV$z;GCbt4ADXEnZ z!n|eEzL3-(1pc~E#=^ti0D)=Y;9D`$_O&>EsjmAVaS5L!7m^frDAqz$Pz<=^=vA z-+g^TDiQ8i8~PUBm7Z|3Cs~zRdiFP0FFellBgMw&V`CsK?p#L0lAS>Vc(8*8Wpc88 zz(ch=2Dy+%?5({8-&qVqW-l&RK26`x(byFL)V2%(oUTa68A5v3|fWHVk1Nsw77RM27ay^m%Mi zso;HoV>9>`iI(F3eXIXpdq$3cd^xd?k7`MnV1%9FiWhawmCR4=>~1Y(S_VEKW#x}y zv{nIVsi{c@{SZC33*>SeeDs29c+4pe=fe#JTa6lQi+s|R z+nFwrRq<5Jo~)fFxvR`7)S3lb!96l6cUp#W5q5uk}};ymI(dar_X$eqvhKBu2h1y#-Mc@3_TslMOp!zVK?B zTNN}tfh@{XT1pu2=3^_jGfe4QTW&Sl)YJsi)+?(kD;qUgqt~UlkT`kJFvnGJke_^c zZwP|p31gnsX$-5VVV)%C@~U%)oy97^B*z{;N}t6a#DOE(c>Z%uTW8)|_+FFP5E#F> znfMK+S2mjng74=+5;ssIZ>{m{1Pmeo+?-)za*JgIT1|vhWjOaMSV^rDkQqj`a2u9V zRP-f6U3Fc?at*Z2z@-u{WrxK=N*afXLMnhobf-+#q{a@oyXY*hss?W$Tel;rC@ZK3 zh?822JCYAlNd}7v>yc5VDW{?IJ-f?ob+W{9z-bcJCTBx+1Py#vVg{_zEN&tBg1eA0 zD-#%s`GtOsfFgG1tMyzE z;b4--5J=YU6d6sMd zM>J9@{9mPpEDGZ>0a&)`j#tTIMuMHkMJlkVEc4?$gu&r-*BS|0IL_EXF>8WNo|(W5 zo2y;C0bn-_DiCW;{SGrV4_G?IYN=^v++;hz3}MQ^^L)Z05rE1^ zOfr5TTowvUP5ms3B{~vY8!ctgr_z+%E6`2P*(!lV&N_J3xE_t9rbT_Z1lprbCSeN3 z3S6J(R=G+T&ru}S0RGBU_Wd*W-U;szA7NH4PXJp5Eygo|K!_XNYmS5{Y7eIWNy*|l zh81R{+~S1y!SJDWy`esc*VehTf&CMtVldpk$M^lejn4k(lCo7VF10Yd6OKkF9Xl`m zBO#Y~yv&0W#Iw;a!HRrv5{5*Z$Yrq`$*6P=-DX{Wu|Tgy!Lxts62OC`)tR4k2+Y}; zot>@5>xm|8+R%{;9h(9JHk?lxVMSs>wt#cDr*$A)4MiYIw2PDibjxU9e25Kz%8&-j|^uT(0>}Enqf_Nl)_jn7U`|sa zN$|b{5Zmm?)tyAXDZ?cLW)D9BN(n1k3Xz2C#mK5AHB4NDVd=#w;!uUraJvbh1ZDB+0 zAV0%nbaL|6b4|sZjJywzEa6vb_fkNoyxu7rq8ZQ#5PHn2bsYY9Q?; z#H_CzJ5HH?vIzrHi|P!5IwMx``s51WyUByn%Fvq(EozwZ)H63f}h@; zIZ;BVp~61SUV=Ie@|P_RrjUodaf<}8`oF=y;_8iH3J5sk{XCyF*%zxSXWm`}Ax7ki zkyx0jTqR1twiOod-O?*J#vmTbw{jST!m8(N#UrDUe2WtCh1?SA0_k5%Wvc$J1#eT1Gy<4@FXo#3DypJbo=4 z)xTP*4D5W?PtJ&)15c?(V+X!!^oX5@(>wJsGFSYQBxlc}lInK!0C=1YwXWks_gf%7}EfoCz1> zN-G)8c3LN}bh?SJa4K<{xvGYO?+9Y_oZx%5# z2#uyopys_Y@?sV%FQ9PR?A|g^!X6tBPo`aY6*=u7QD0S&?Po_hupB~*!1{E^F@b)a z*Pcw@3Ix+}6YH~Brnqj5B6+l!SK`epVY zCqDX4N4s3=rDnxTS+Y_pE3t5C)TwmyX~W;V_sQ1|hy3L>rB`@oa;^Oa`=%o{` z*sbKfr1uEtXz+_culV)iZlgHY-pPH!-<3ffm?V7AJn(Rt*R6XhNsRwc=Im+ z3#G*k<I77gYNi90C_@2nPAZd1K6a)=lh0*Dk?=XApjJ)MeR>_1 z6#ZMO8p35^-|OUd;(L1f(m=j(ehlE~C*mLQrr+E+|7xN>(Jc2n8w>W%mMfs3nl+dN z#mUi;jGP>H>;)f2K!CK`G!e>?78Vv*dvPDG%G*rD))^3bqnBA=F!3kagr9VGqRF>t zntN6hHzkD}H6OiqPJ15~BC^y}o?wU7Jl@RrkV2+FT3&%cA5<@Uj@#@gf^U8x8VDoc zz!YfwpIebKoEvJ891*+GAzz=YZy!<&A6MZHQ>VH47nZao_m05<_8bs->0#`Z2 zQ8!5^txgmo=J5ST&6G!>Wl5}!iLK!Yeminf0WE#MP~)_QLY(&P*6p&hXh3fdz+BZT z;#=3m0%pKg?s8GK8nZwIxD11wM1Z~CXWaaQot>eqN&Q41s_`^>N!Ru6L#EL8;If>7~xX4^ANtkAO3-EaB zEzb(!#GHTm0RwuaD43-4RqhE*Hau`hh_sAA=fgYFA5{s}q8@8mMUSUW5G3Gl1FTMD z;L8XwNJ#aUm$#7UY986~$8h3K(ZrCd?icbC&x~D3RJP-ELS~rtI9ovKZBQffRiDV! z&o&JGq09^Y@1N_4@)}&*nlsC!vPjoKf|G@OFh6AH+g8Jvg4;suPlO>vf(4svu-`x}2yI9BvSGn&;B4PLsn$V}5ebseebRLe;*z+i9l5uQ3!h z+Ou{6v4&JsR4gwq<5@s{)w_TWB*GR>`lp4=O}bE3e?N?ipWwc1+sigO<(SdHXbh2N z|7+XXhxir22(A}hihw}{DF>MOO)qOA(nZ5d?eos+NWD!1$^;Gr2>wCr9y_D!F7KJl z3i_PzpC82&EL89C+klB53?_p*Z@12raI|r7UL0SpeAR6^!au__q+eJ3hR=XOF!|}d z5|C-mO-s&yb>_eMxuU+OL z06lVg{dD}boGFV5AnbjcrF2Be1O1iPl*#cD!}t1c@@#>>R2M@lp?Xz5^-QEPPq93y zfami5rmk;@>+nbrEWXbvf7%5wruX2mR?Wpo1yCUZ3D_!L;w9agz@SF|bB)tc6)qX> zjC>j(_Lrb1rKMqBl7GrxY3crr?!fr?c+t*I00g#6|NMDk`%12&qT?0}#mm{RIEb?_2c1Cx2HkG0 zuA7NDxjMNyNVEV>co+3e|2$d*C7^jUTm! zYGj&*EmyHvS?@!0b)xv}+hl;0|GYKS8saKzU{dRvT!I1P=QzCP2xig?4T@)3$9lv@ z2t#4~5q%5*_xqno7M3Y<9`4gWHwD9bOu`gGW=kt)w<_%h77){Q$}}uqS9|;Fy1F4K zB@drVK_Z?{dhhb$%FMKTQ%6TfPY=B8%NH&1t;P9Z58-P^6MD!Kmxj3xT&m!`+d;pi#3R0u?Sg^=zEM|4$H&7RjaHY< z!f$p{z$wYic857s>fmNUH}jD=B0Sh1mktUeXZiUs3Xp`Xd@W=P4g>y&l^wmecN-L6dc?#tqGI`29-m($qz4(zu}>-{);mWl zeSby$uxcaR2dU}cqKV1$KZiFWSQ2Rna*@(XPi~qt?m)ot)7>652OAp)OHF-kM9+}>Fyk1AyC&Fs z?oTW-avMv!o6%ZWGy~9_tFe59>@rN ztaS96FYHUbpI-=AX@P^h&*3no1Ca^XRaq+`S~0?_w&`RKT|znm)M9=h*r%*4qA@P8 zq->5~SHUvw7-qXJkk_9-%5$9lTIuxEt$)cU@S|=1c_8oV*!M&Zf#cIy`oDIj?qbH19chIQ||dzid}*#ITjv9^%L`jb6y zzrV)c2Gc)v*08Lu4lw~+-f5iWi>^&4oqou$CK$!F~QkE~+yI~Y2@ zZ<-t#a2%!&w$M=n2K|<^k&in0O}hKQm@?!8=zPH3zqgtH{oDbr24ya{8CT#Jzqer?SzL77-<{g!0WKfq= zsq_SrrUA0j)15baC=p;YDZ`B2bv>^69s9p{d+VS$y6)c>4elYh1qcL!ySs-V z2@;$DAq01K8Qe9vI}DKEE&(FA3{G&j;CeRC^S-Co`5VMKg4gaxZEBS!@p&ND_w-Q@&tcJ)V*gs z0!u1l5}IDl^g1cbi$AGFX7W38jbpVNcv-W#5nP!u&_NG2_&v3lC*;LmVPM% z$d25LMJqv~KpeYK9*nmwLPDQEf1dc>9Wx1)FtK(9_E~u{;x)hE-NCtsp{tk+<{SZk zEAf#@$>G$*4AeKVcFnh#bt-UB$Lc9?M?qvu74JuGBca;_;C;>$oB@yyv;$TnPj|7h z22<}#3Z+?F+aWy8DcMpyg?%jnS*Ee2suC~|dYGEG`*+Q%l^i>?AcHOC+OrcU9 z6|)!Z6Q6vX^L0e>UEcwY|MG;6kig7My0&!`i%5OUat7-S-K!QN z`~hfSHb&{2pA<|o#L&$Cb0im}XOzE+Nlg;mc=u|5rHWojn!(g)Y%tSjI5(S)yhk}I zUQx~t&ys(DsRdSv1((8iE8ha|H8zQ)hAl5R9E54=7i~a@iDv-X<3uab7^cZAV-Q|PnyAz=gFu{BJZu0x$%xacPmI2DNKoY%xzSCf+&F7=-Wu&`!@8Ta$M zq%o%n*JB+J;t+G}9mVm7VDS!R6%@c^`95;&mC%G()3$ms3A>C87qVw+<#O!Rb|V7F z4a}wIv8t(Uc>df^3pH#KDD*O96%E#TNi6uKUy&@FBaz6egBMvi37k)4NT{t$&*Ig_ zw>%YVEmZK_R9?bFX710Jy%a)l`%G`9E0;|t)N>zS+vqqBYLGquY>%F%KA)$>0I@Ud zE^S$buy7D9gTPj%tD&0eAPJQxr41qEFoqRk?B9LL#SMh5xKGAI7jT$ESb7=iFBdEU zJ^@P39#icfBFsBLYCgahwqD3=>`|}x_;rO;*;Q~bQ9((GnUPU7&ZIv+KHe=2wfAqP z`3G3oYX^rDAQbYhpureOn@|AUQ?J1IEd#tFs^3`bSW%Ek5laY*G)d~#a#x^6FVyiB zz>Q+)Nm#BNdG+<-tYC~N0SCAHlKia8AXCKqQNjs0kGy9gdhImg*5L!etc1w`|T^b z66Yl#bjA>^o^oD4okEHP!;*b@??^PmklZXV+L`5-rCGC$pc(&5$*xNtFxagkba zEmKM%ooYIHzntIpi&NjAF#bs5MwR>s^Oz(NME73lgO@Cesh~4 z!bReOidNWvZlmvH4X3n&@Tmk5{x3Q)uZjh#6NGNd#j?3Mr#i3D$2+NrnNF(HOO{Fx z&0b|dnZ6?E_P*|j)CCZoXxfG8g*G74>qwelJid-}Kne{?8e_Vf#$&ufrz7Jn4C;z7 zW_T(=%9|F;NPWI741c|f%nIyJ;^bP@L$RM*(*kX3o$I(f)_Akn$ z(a*7(uo|f-X&gA2;5(rlGa<#f8h+zjBxn@~1q^8!X*&C24#%(MKN$(LixD$LArBuS6KM+L_Y8JbT$JI$-%Yf5=zzTb|g(3y1f{_YcQfc*vJK#bD7E z{G1+8vQ((X;6^L7ptjJ4%ZTH_g<4F#z4$Y2v>5cyOkV#%VtC3>T z5X8sXe(cRiNgLD(=q*V}DXn@CyksO5CVq#A>hn8R>fSE}eB1WYxekSdW|@p?ONaEg zj{-H;(yH`eZKN&>KSnYVcR@j6Owg@k060VIpOgz)L*)*)nwQOluRAtlYa7!!G~#c z(wkvce)BEcMNh|Qo#I^daCk|d-;v;4Rw2geHe0Uu!xW`&`XjSqS8hL+Id1iX1oN^v zlMGH-&L@H?OL&kb{mpJQ{>zriv-3FqaFuzeOq;F){9{gANCp**rM2czcvth1KF8V5tR;u{OK!y3f2uC2q`h4Z?Vo9m_Ah_VzOkq5; z$nIQe$p4Ukn5036o(Eh2B4$U=1&wIt015A#&`#|}_E&~1<6WB2*Gfv`EE$P@Sy^&V z^~F67FW%L{)p}%QLBubZBto9Jmmd0=#mBRAo-v^l<_M9$6rs=Igs&Z6c&bO`$CwOz zzF;UJt}sVW(pjKp{E?Na9DHg@ENdQdeVOw?m=?y zl+tqW@KNdDT=}0%QnyOKP+aTirc&$iStsmp#cArchE+LE@xPyWpLW`e*h_^m*zB^<(FMHqXC^%wU)P3EjOT@UpA%FPVj*4tqxfn5~t)F~%uoJ~;)wQip8MLqxAb=|ZfTexP4udG^`$Q;@K7`HVu> zy6Pyz8fT8jP5Wg!ob<$Ym$IuaH%1gXs4g0R80Da&<3KmRB_w!zmAhYtqV%vX#k+&r zrO}{tB?E6s$$3awgE_a)J;x9%&NbTZ^`Vm^2l*EudXgqGx;^CU+vPrpfnwXX{w(D^ zWb++_9#kbWxnv>6aE_hmrR1W|k+jxCqzwaJ1cg74gIw&p;#+dMGx0z|Go8 z73dMztPJhT&HGie;1|U-Na1z&QvS3umOLKs+r^LcqePfa1FXwzir;LwmDl2Qr(p9} zhpjut+sp>9J-xpc%hR_;JsJ5bm|{khx}MF@EQs-9`)TM7KB>q_#^o1 z;?$>-dfVJ-L0bWi&iCoQj=~xH#IEA*Caw)dsXh5Z9HLa0(SLuHQ>r3gbq)nPa&*=Q z)2HM1h+4y*ni2HHBY_m&?P{eBO()aV6aox7_?@4G`uzpWG%Di>!d$U|20nk9O+r?E zH_&cUw6lbHpv|*MQ)HAc2~}sW=Dso;9_DVY3fkq}W4+xa=x3j4_i6w8VYq{ST-Y6? zrD_D4&w(3}?U!K6jLv-9qE!;A{hRj5oA+`Z=@d9#RhT#ReEQQpp6N9_x4ynEf|Nrf zCs~e1>eHpzIGAFuyIgEVPmw_##K+saLtj_DYu*0Ch@?@2>)2JCHY=F*<&I%y^xWn` zqd1AnJb_xz!F2T!oEWf(uUl_VenwL*?4~+RnALD)Mq|ica`xXJ=oPOvZ}YY9-u|It zekWnCER7|^4(x9x2#YO6d!HH(wJje1df9K75v@eYIRl-un`wC?*I}4(oWINTQ|f^- zkC;vp80lPu&Cj6h)$rkZdXV6IRO{IjxrZgeEF1Q;8iCi2izji82ZkSMZ38lP{_t4w zWSxgAdhEe~bW_p~E~e7hPU8AfK$P@!+#TZfClG>VOmY7gXK0s5KncU)WeO8x6pRFOU}NAo%C2v_5rttSHEV zb<7X24U6x0ANSsi-Cp^gw`>^t+?TBGm{ahzt`VQ`^)CxV?;73?`>SN}ZTTPSIcc2S zaa<&i+0p*H$Eb{tj;iVE>KYjM94&W&s-6X->8du*i)TcH8lVn=kFVT`v@ECbMQ@0; z2U*cJ>pC4()^l-E5APUiRCt09J-lsL1jJ(RO65Z3bEZFyj$>oyfOS5RpSYrqQhAUxA_H8e$=0>S zDP;6{CSmOMJX}=)T38fY7QI6qnpMNKMQ3ddXRZnkNaDppx3tV>On{Fe3kLXquGjmY zVW|JHvTr;@pB7cJbp!@00jCS%2S6$=k_4`mp973RCF>oRt;FL$KRjus#_l!72%tul z+mjv)o8pCNyQd4qDi-ifpG#->X)Fyy$K*koR}$Nln=h2dnKD&hk6 zE4_~uh|#z?+?VM9(>j^7HRbT}^mYf2-n|}ZdkkkXrB<6P-SAR+O4iKL*IYD>j_c;Bu;Am7`!v=&SnULHy^blJj z7mg3YY6MI#7IX9y$9we%#BnCWH3rWkEls zL||S?Wes1iTnl%gp&{16G@Hr5Zh4-I1N%SU;p zgm_3aYGJ+*tk_gf-R^N^sjY8uu+zU~#U#Af_A0F5_Zoh5 z7q@}GTvtd=FVlE?57xzYSR7vZ2t~nR=Wq=dVhP&0jtuwmgmX&R?1zXfS$)6rFV(Cg zxpmR+oJM*}BAt=^^onRdI>6TUn)E9GOhbvLiW06)kjfi`poY!kfA$$S#sUdYl`Bie zZ(YL-)cZWev!l_lgz2Xc9Co%MXwns5w1sQ?X%$iGv7x*f(23R^NV&|4r;y6_3Gg!! z=UmWAD=O0t4(#OIQQ^!nB=Bl_!w#N4Yp?4k?fe*l0h2V+-Lq*!hOw_Fl7 zMaydyBcjt$#GC{aB|<)S0V~W;k(Fou?Qe@P;I#XCo^tye@DH)>wWQ>RQKN=Q-3nPb z1#eMl^ulFwUQ0JrVT{Fxpk%Pvx zJBLQWU;K8Yio*@~o(@4MR*Oa1@=ya}se9{sWFIh6xB%IBcS5U2bmDR1$ZgG&v^Qlu zUcHc2B)Zn=<=WF;yq1+YuaHfY7Y8@^`mDDgw#Z5Q3#Dg%#2~+u-JH)AjUct=#ReL` zz8h^q!wb7pRr5V+aSWZGy??svh40p^`s5&3r=ytI(Q}rgFCfb1iHAuvk=dkr9Xv+N zMa<|Wh&&{x*EsM2)O7szThP(*(Fv^k?>ng$-#1)Vm1He6r)7wgD%+7npRA84 zPiK8DA%ONgSsNZHZgKY1#wZR&no>ii5a*|?&|t#i$FGn?7%yBFmGHPU;wNKEkbD<{ z-mj@DRrt;C3t~a9dZ~vLOQE5_h(yb-tHsp;6n-{(qcQ6{^9u;pz;Dmb(pJ;W;a}k9 z99jrTX`lOdtinm)t`L(6SuxuY+97WJSP*0n@qRLvZyprm|EnQRs@|nKk@5g5tf@{` z07ibQnn#}aB(13Ros^}3W`I2msSLh4L<6o(?3QmZUoPg{ft=k_iZrowh4h`fDD^!8 zAEqtD#B8D)GdguH>Pt>d=pdVpgzmVp+y`!WYXrGYC;LS<2v!M?2!%*_&x?`JcO-&T zk#5gn{q2-{K5f@msmd8(v zqCY5OFN@tAAF&ci?nF=2MR~K7XAz-0%rW)Xa=yiNd3aE(Jxlf8ps8M~4**a*kby0y^Kr8!?V(;UF z>7vFK67Mzc$G*F{&{B_yGy~9qI%q7B$b#b4-XGBvr^wpx3xePIu76HY?W(;!5V-j0S-A{ zr0lq>)N70q*#XfZug4`^76sdTJ4owhq$!&DjVBH1zN$$^GKo@xnRKFQ4)mo&eV#h9?DM!+}0iHQR?`L7F*~8@I!-epM$Frrr>wcqT5>h`Bjk!&h&{|V<&h- z9=xwp;OTP;S!2m$6DioCFaGKu#rugTN=&>PPL;WM?!YFg&2jh1`eZ49`Z5>{#PJIB zjD*FVGvGzeQ7Nu`Aotz}4&C5}Kul;jlA`=~BIkVfTRVE8fh01(ROH}t>lpQSMNoM8B zlRMA+ulIqiMGcI-{QOIjyHI6HF!iaC0>RazE&2C2xdW_}AApMlrqV8795HOR$Bha0 z%4iA-3y;&0!!*h@kC~za%zh@5?CQH)JPPKlA>T4di$pM&!kdO*80YA9_=uqU|C$SU zO~@7Bn4OcH;Tg)I+wFBY;>nJ)6TMeSQ6yEkQI=J&M1#23w zMs_2%?=mw&j0<)BYo4v>vrmS%HCnuei(I3`1J!%`2?EuIan945f-o+y?L-i<$tDUv&zs`L1@vb{Z(Ps? zy$G|jzmiGh*D_oKrE!~q0+i5rqcTDn_(Jag>jh_F>w)OqwcL11?;ivK0F)?29=dnt z-d`Q$8W{9PB{IgECGM5l=|uDfdbV$NxpUZ4U205wn|m1OVDJlVuTm~pyV=9egY|`e zk9y02!S3ZezxL_CBInJZ*Q36Xc}3IW4AX9R?k9ZMP+j_a6fjxr@Qy7bPd?J#FYZTh z7SY@N_*U}p_$QWUNQ~i{eSG$ZP{bF{$a%A~vvQF5C*6%mv9Bv+OOC$ghH6lggM0#= zy!i?(KPmqUCVV7LFh8hq$jLVWoj4NS?1+VL_=;SlsC8JN8Jq0)(>m|>k^EM0=D%>B ze_^NhL+)}%dS!TPvEgwxTr3t3@?H>JOTMZVAJp8@#wlT7{_d`7i^Qr+T2kpF12q{Z4a z6JbG94+*mqvRXokI5I6-{ho@AAe?Ohw|36h1>cFa49km>55a#q+U{4kg%B=7p-M1j z$N4H(I?USfSsg06{K~CDcsg3Fiz; zJnGXgjpxPYF{i6NGl3H1E`CUk%gZ#9b1c^wFD?`n<-tNTZidQwoKq-<~HY_Ph|Gr*W-TE2kdPHS~pm^7_}b1J#P^-WYFF%1K_&kHRHZ> zy2>lKVd?046+6+M?3xA){6vCQIZS*u&mfZk+WhDKk9IbIZ?)vo$_j5zBTky07(yW` zIcAQGruQ@;JSZTR->T90Jin`PjT!`U{py0f1VUP45q(L7Q{3 zI+KF7(Q)ha3-o5Aol86N*WOefE{q(jxmN_ADZ2;L4rF-SPG194p-sJpJ?Dfqzt*v! z9-k5@E0LdnCdHYDbs>+M)GH8)4!M;kL?Qr=16>dbwoLGxb^a2jwH!H|lZmhgHz5w{ zX$W@*T9NL=f-KyA=pNO=Ro!~b{8Md;k&fYq!4wU;#p6EX1c-rv3qStqa;nd#pcdyl zw~{-rR7>|6xa5KL>s*bN8#IJ?2?86){U}PjHd!Vet4Th>%69xwAOt#O^P0H__#+LQSg7kLgAu= z5Irg*OR_iAqM)_D)GJ*yEG{bYXfj7{W6E91Eeq6`pp~MI!uI05mY^y=^r)0{R>C94 zId|QzB)T3W%3qCMarBOp7MtLgF8>~7w_D)dZ@oMB6owi}QT!X2n6)Y1E+XJk$u|O< z!#iKU9iGRQLxfr+g_#AsVmDgvPIx&b0%{+l9(32KO8yOeGXA$0PkEQn#D;chxuNel+I# zyr|c185nrjVx?i#Ae_n2@ksP()FObg@$%nj!s z$fV@*V(WaJ1_d_nmx1K7Y5*Hhw9J1O_#PK*Z0CY@asE}8rJ+x5zy5J2ye-3}*itZp zWM*Yy``1$cK%*XcOTgIwGm*lmG4P69mYr!)3al=~{>aguJPC7KU<)na@Rqdt?1Q#_ zkP{%!fRD!?$?wlG?{D@}!!Ey#wRZNPfr*g6tzT!exnsMa;RC1)BX$N?j{0|a7xf&(NBN0pX8)Sy|RruWF!SiFOq6gN|)*J$!% z9Qe_zrzrCr^;WP=@0Tn4q^!p1j7*>Lu2DXqzyCUEfP#$G$u_jwsBWx}WBkx5W)g97 zmrK8g??6)ePj?h_uoT}EdTmc(ubFD5y2jur+F z4TZf2W6WPA;l|r7rCa`U8`7h^*ksYrrlQ)qrqZ_BR-eAx{P9Cp_htM9^Qcl)uVLg8 zy0UQe{Miy=7m58ylo5&ij-!*e_P=UZGqtWzHdIOA=9#eibUrh25bu1p?7Es!(<+Vm z{-#w>f=Y=HXj+#NBA^1L{&);w&f|}>s{0TN7;DV%tjbibqVl)N63QJ=QB=xAf%NGD zB!14^JzM$rLj9YFGWY^g6o|=P9(HZo_nOnI+Kx5(_v(sX`RxAneq&x-{3{5UT&NwR$-;xyOrx~)tZ(FLgmvD&fr z8mY+pvl!NL8AqoUUQ3sa2~gG3ygOixzbVMe3;1qKp^TLobp|M`@{Akq`2yv1GTMQY zm$aXs6?IqlBmz(z$Up#!ePYoAE}y&+X~|ce$9)UVChsXi;DO;ByCeB`jlaGpW*$;{ z503}c$z`iinc_nR^68=Vwb|#>^&g_-9dBv&N6PF8aETtx!B!#C}Q2PP#`|vo}V3`|2Rn|ecd;y zN50TjEVV{q4;w{R<~(@)Mn{F_ zLjL!uNfd1@8%?_onG5>#^pFT8 zMI0*Do)5N*?LB64xGYSpFZtcJRMqUey1GsJnH6zT*4GY#@hz~QKBW{hkRU^kY+Ij< zX>aM;-eZ0BO8A|g`g;xMf?IhFWn~R#Whw8TKk;Kg5d}n}4#ezmQP7>Ms;UHR<~;&r z^u2rVCZMNwW*R)4n(s17ELBm)U4bm`D#qVFV-!@Oy`7yMV4-AOGv_icWET1zBMzH7 zCw6B9ja;E`Vc#aFy}r3vzHmuC7leZq>xeKT@f(%*Y&5)YI_uAXtyg(6urCDIbSLzL zWF2I8I~9Ca|Ui!NM_pj?BeLu;^^Y&41wUR;2XJ`ABQ8OqcfBHO#PwH100~zpByW< zzZWr+zGiBYSTM}&xcgeR}}RsALvz`r-rgAz?%zu4b3sCFhUr*C$Zh?iO_9E9q`!1X^IEth`jG=~*gF28tSkxm7Y zJ{>35y49^dsguThJUsggEe(~GSmTCca1JmQ>ndF$DM_t{y2AXHNvRy}qh;-8XBY#i z{q2}xa;2W!7gVsZodTPNT0(}V zVf$wPvt_Wj0XcSONn=FS)W+MEDc6aNc8~E7^Y`Nh_Qa3M#A;}u@qikFCHsss{bY_Q z-NY*o1(itElTP~37q6*>$*`#UqyyJ=?oVPm6?FMX^cM7Xp{YICe4>I@ z;|Htqc~@JPCSh?{C##obbn7ox{&*#>SLp1bu| zhwXf}_W^xM$scVO1dj&?eX}pHxotbR9wPSknrvII25VK8Zg1vrcXr4~g_;4FuSNO! zx5%guv?xEX^slP5oU)^qeuQNJI=rs^E>wm4AhUgADcc~8+e~Kcl;?rdw;zjYzwKcm zQ|hDXJsJ0KMbPGb%1OvRld~PP=R00Wd1Yx;X=zneH>(y%qiRh%5l>Tghl5$QTHW)J zUdSlCTV$6tIgzfjzh_jkGd_63dq&@y#TtS!Z~?TltEvkNw`+wH>9&$MGy=y{Pd!4( zAeEkYD#M-Hu1iXOo6Omq2rLMjkYij5k;rgrDMS$j9s=a%75r{LdqkpWVYF3*#a5`751II%8NdL{=}wQ zjQ!^BYivJjY0*+|bFjA~>aZtm-81;5`8q+l7?+eZy=-?U{flmybe>9PPr18{l<~W={E`|ay_bkHiFekgZrC3-#`*d$%x0H_ZJf{%= z@iuIcMT+`E|2vMN`XY^*XCN|j+l0M*&dYIEZ#QNXrZc_t zf4%i+`rGFaEWV}(ad8Lfj0>~2Rk;tW~%}TobmVV z&VJ0ZlMADx{;#6Ghiqv&ZY?bcAXzL=%n7P2CAH<>{?_kb6tu6PB!snjx+*J2>HJ9= z$8KqHbeFvziy2q>7P6=1We8p$JS5kl)=!@=LkBq$o+wG5-L(A~ihBVb@|=@wK=b$|z-|DofR?wAYv|t*w}HFI;U8{?M-X zLD2vHz1W}Yct|u;r_=#!fwF^~w`^9;Ga!E=*KvZCh8VJ+NlgLm*s`G|hA4|B8EvAx zCz@Ym_7mVn;y0-nBdF_CLuVwvhdE(=Z+3RGxqpeI$c7+A$_C;u!haTwH#awFeigxr^gkl?I?neE)ZNoGaPW_s#4Mw56qGaiHDl#9_L6!gtBT`m8jt z0LA%tA%+WP@O>$vg72J{kGU3VQFqNPS$)dI(06KH7uc41DVIzG1_`Nw%n|0VpSPGG zGs-0t3nk%TBVTDIBMxa?1itmzdukH} zwYLa~k&LFFMN#3b6~pi5+^DqdJ`j&GcbiI7@|@hSBBjxbb4bfZ8E&1b?dF>zYe;kDa>rJ=$>z^Q;4|iMX=TW87MC+F9rSA1g$<8 z_N|y}-BDd`l$Psd-3($*pUh}frSTO_x5Ttpjv+_!@2MJ_K%(e9RGN`~kRmm3u|Iol zS*i=ExL6I!`pML&e!Bb;UZxEMI%qJD+KWgWt)765E@;wtcp-La#({~A4aYJfJRF-+ z*lhp~Aup=<%Vx!IdPvlaON5Kqdx$-)4&UiQ@e)ZlUvb>X{M38*T0-WQW<8bAZ_Z8< ztIeMen!heC7>6>D>fn7&pDiQP|D&z%sGqR=(Yd_mqoO6BSyDk2tDA?(F-9Lx?nOn- z9&}xQ1-=_)$Q7bYB%!>EDY&$IyypcvObqv zTZv4LEsjn3b890jJ4<0CS6UZOKmXd`%AN7KkEuZ7>xL`3v8iza(>ObBcaFbCZF)YTT1jE@AIt#EEoM~9A@b@Rq}eM*OCSxs|B6W=2xl3FR!oIT~5;!^kpbV3y`^;A0c)HDgvp6)| zJ()1iNi4kCNz7EmXg&vVfD^1J1(JT-fNMPe3+ibj__x>F_hGNK_@OKN zb26^~qw|z1dT+e5vBC+gI48M^cWc{<9q3%wV!enS^hJh^W{b4F64T#Tr3;@E;Vwv` zkVbsD7x<0jyxwGujQ^ps_Onj3S-P{Kw7{0i)JWYbX!-tCv2DsRz@(QPPz zb^zM#X?OWhhO5LFsL-(!RyGFhI-hb@Kw|aLO@Yv2LE`Dg`Ml5Ia&O8>xMlagy0^h2^UEZ@V0|5_L)RXweHqm=fx-rN~1s{k{ z`D{c^OQ7s0&^IhR9jHPN*Ju^m1Me6^LqkPHFRtrffPB~qcpO`!IC{Us!s|^6i(=HC zJX^W}xf?m?NmBFBB*Cz_J2{cAt!hP6M6UyVMPd~3PBan{Ut4FG#qPBmk3}tr4m{p( z|GvM}9S9;AcSpI0RknD(yWcu(QCYXy{`C1%Nu^o~5!>Yol$nW1$C9aR>2Cb7iy1`* z5*ko#4d80}6C_CO5AJ{%*8kXeCuIa_Z&n%mraO%a=duSPr7m`i@5B2yFrqkJBs>TT zOh9gb3L@zJ8BAI~@$N(Ol)?MOud8*S);v*##Q6Hw>?=ZIlF9P3B$pxqgu+Jg z#KG>JMSC=yF_85DIvo=`i(t+4)roR6p`+E{KKfqEIC_Pfi(;hnh}&bl~%#rkH$=IVxk47(?SUHOWW(Kst$U?mN!PTKpspVq{3}L z{JLo4Xnn@^SN(JZ3-V(Eo30t9>Qndc;0uF-=Kd`~9}tf7m`czi(){{3-*(!#^#$gGKt}B^yiEtBj9pcAHs6s{od)rb*$qB08Gl zw#Ltcx+iHuO!x=kJoE-n!v3vw#2Kx95|ZWI91emUS*|4s5*{{V6R>DR=; zSA0dQiu6HIpaLli#E!eO%rKIEAfE43gTRp71^wO%^fBep%kKW^?%u15H3yFaIni}A zCw<24%&-<54wQRlacH1;0`9mTT(rU9Nn_%G3Y>>!5-(avxnJ-HSUkp8gDd$BpTs1*tFpAAl8Px#&VeUu&^GmDjbyD zOF&jNG2R1YgvCLlw+IPbNkAijbbRm(nSdRFH{oES%cF?}o5FN&NP~&1*+320T5TI$kWQ*nE|!gwvc=r^+g_313(wHV{i1_?6!258608+`{>SS~E%w4X78nxypNJy`} zHR>{1`boF~B`m}+d^x;*rid;9PAAD42|-UcsKSL*KEfT6d$b9_ZRn?}>oaD4#Bp$M z)~c0LVuFLv=k8Kj{=En!U23g9so;H|5C8dA7*I7;1RBK-wKvgZ<%tuz=M-y9k40Rn zP*68Xk0t?{;aHLB6BGUWBWMGlNDH(PY{2#e+B~r@za%9EONxIiDqn)&)55iBE6O5Z zVJE+OpC|W{)+y=qM-p>7>zjq*6SN@UX#~LKEg{*>9!E2!10lrtk@Cl+QX^A?hmkLp4Iv`Zhy^8TwuIdTu9oY5@Tf1FF=6h1ER%>f%I?Kd}vDP<(`Ngd!zuVm@&+|1)`o z^Q-4LlA)j%PDmk$UM)YM=?((^CykE z&XWuNFtq8_Pwkz9C~^i9CUhl5BV~mx-5@Jx7~NLRiSVk5ib`>FTCI^qSxC*8hVOt^ zCfrGtM)qSPZ-x;H-VtU3nGZw8tBuP@Ck~&W;Uh8M=D0f9TKTQm*2xI%yONHH)-=>@ zXM$2RY>xTbs8Q=5>tMjj)Sxr=dn?X>DLGk}%lO4~xA*=xJcnS;Ti|^uQ?u%pafZ;IPQgg{tpolHLWz$92-84Po;~8IVXW2^Om1;n2e+)2M2k zkr_iLn5{~Fn>`mX{h@@0BoWH6mR5D-PvW9r5FOr2XTJ`e$&P#CqvUE^a7x!{T>bt; z^t&FTv>~$m6b~jdctIDmLom{jX-pD9(`+mLT?0U9VPNyTp6<_*t{NhR2|$$Vqyi|c z{as|fXm%-$auF8L`1>SNi~Uv;e@R1J`Ud0l9FYkfdoJlK0|ya8PH()=p1&2CTy5ag zTkENsct@wi^y0Q2pO6Nj+`pk`=n0GOiXJhV=&`3X8U%9QB4_*u`>)Q-3M2^=8R7AMkPZHi{`#5yzRVE5|EXOUBAtm*QhuztwCA+&QGnpF=P$X7uV>Z{S1$tu?KR=gvG?0?SxmA-y zU&zYXZnxK?N9V{v0Z)+-1(z_Sbg0h20o!1?b(?mxX?P>Ub=1r`iIR`5t$7FtBlC=@Ur&?*rX?^lLtDAdMfK3R}y4&jG|93Wch>MlNr?=;wu7|Vg zSIb@SO0nm2ll8a@2C+-(m%C!`E&0wAin-{Ci~~{L{?j*gwk~Aq8B6lc*gn$&pW6R^ z_Z958xjcEP^5$LN*^4;OGf+PbRG(^ACv6*g(|Z;h?N>|G@*k^g#vMKXY;;0k=-#l{5%XfeCEw!$PlvCU>2v9Ekaig2tOJ4}F7{a*U_+s2+jC0j_71grj zu^#-stap(vr)Nm___2?P$%72zJ-!yU=k8SH7RB@70tJq{b~i(9py=pph3y&SlWp)^ zo|NG0G?GjlrQJJUdYT{bt>I^MxTikStng|~u^Cu9PaaTcL_{(dYv4$XD(~I(MKH#4 z#C7_%bc=f{Xikw}$RhsVymU^oI7?{SDAQsnzO}`@SC$=Xe(JkKv zk2MD}BIO{+htLnclLDCr?pJ5L0l%_IKw)y^XWFuCG(E>Q(N3pO;x^oOgJ09b;G8QL z-?w{ReKpS(eYpKgA+=-|IWyZZoON(J_Ii`&ZwBZni><#Syg5iAWz#;ny{8GDhy*!r z(WvE%$R9o?kHT~6eH0+(ZRk$F*FadpGBa)&Z^P(jdE(@FQyBhezyP9^;94TQy(-`{Luua3$Jvu& zPYR(wPh6nft%<>fniiIFUf(0^Vk3|%ES!zu(aua_CWpYq*3jIMk0flHBgiyu6kVrc zt| zCTrcwY$|)|+FRbk`fIV##ewr5Z=Gooym9bHqtt|Ep%d?S(){$3dgrT1v-h(vp~y)|>N?w`Y@O{I0!_p6{*hKyq>|*W@-`=Z_S* z%W?@z@PKiOH)r+HVg$C{I-~xlX*q0A7X%hn*aS(!!_t)$c|+@_TXWxW-uPK7k6x_> zDb_`#hOd)gmcTl(;mW0Q`|3qsbg@da@CC+q9n-6XzhVXsKD&MAhf%}A7ez~$?dwET zcdHcNqA2%ZAik^9bPOxdk+9e%#B);b+a*N}bvM zE`>r+)IvFQKbxJ2m?C%+W#}&3@sqbo|BY_sx&ctaglzr>xaM4)l`;7P0);SmSCg}T zdCVGSlCp5GvmJ))aw#c_CSBrVETg8l(^a-jFoe)m-E%Q@S@d6 zL260S!P7KPfA)>FH?>GNe-FzRu+y4^h8rA7SMns#$x@<6c2G`rR?ZAjm#Vl+13!pO+Dnnflb_U#kmz5jlr(neA2Kugp zk3B1A+nfwWS+DMmL;szgysogV=s#~qE8o7`kB66euYz#&HC*pSo`)|M){@WbR8F0r z$7)7SBG4auUl|o2@50RiR&^_)ns`R%HXEy8S9t)h_Lczm>kp<>USq+Hg45?)b1NEt zrusdpif~1OZetio*OT@2Q$isN%a?=N{U$9G7rqx&$f&)(AIVL?S35yzhWkXw;_Ux1!B2@+K4$OeS?CxYj+)|=8Ts{WqcVnF_e#P{@C*D(S0vUVr-8V9{=5UbC%HqgS$WL|3BLE;G4Sa;%WbX7cyD z@_k>-t}e;A9yU|#wp8Jb#>LxIKsEJwU8T;RBUyG(q?)zFL&Nb(I>;91b z$jwF%COon!?)$vS{ogZ*NmWmsp7Vb0z22i=X!kw6dcR#{0&pXpyAY_STk&Y;^Lf=} zr-c9ieJgLpw)fGG+RoR4Sw-hR+KW9~cVBX!`A)zd@g~R!*)z#A-Ogawa#0jv>zI5Tjhm-2_&&)E_PQA5xf8B?9 z+3Ww@G_NoDy8q7~!Q*R-Wy8-G#Qa|K_-EPm;45nHU+2#NR!Tb0zjn_R|MzWj-F?f) zog4Yz{zw9z#`vnqFUAtoz=&wx6}D*Y+O<1&Q~>uP%GZ9mD4oB@@ZH1eNp%)VnP{I1GR&(2@b4(?cC->%!jwc9GkXW7-SFCJL@ezW@(7aM}-#8;iGym}jS3r7Br<)42)o_2nQm22(-;DBRc zbBqwMsmY-XbjZyunU}x3)C`ZUoS7W3D!FLueZJ~lr=#P)%qo6Sy>9nG!FBOZZ1OKO zAN^gvn)i#s-l{v`O{1VzT-MTs3m=}Z|Mz+BcD}NhU((0(xzGH&Q9a|?pL^QNV@(e| zsJA-*@9eDmHveX5#X47g1+E{1wIFp@hpnx8G0$4|IZvTVy5+m`MLwBDd*e#Bef;Xv zBHrt;X&ta?S+nz8qWsQvjr>*jE6?5s9$fM1<9fS&|9ZIBS%$_h?YcH0&NdI)MqZI! zdK!4<-TeB0Kd*?#&zSk?jIn>;{2#LoljV2)ez?26e_!&86}Q*z|GX?ae}CbDwb$b< zb1ppH&a)p^L1Sg!fCs zHZOH#w%gwLaUs~zk+DVP@nL4*;oSaye#^GrTlmHCP%Cix_l565dlu)LsEC60;t4BTrDyjf4ja~Z$AbwB&Fk3 zfnq~S%EGgOalv{nfqOqbK0evU%i$!0=0+FJj#KWvAYHdr=t@b2zuk@xsLW8x}W2EK@k5dQY}2DoTp?(N}Na)wjuS z&K2|MOl))ivur23?!qfyogP7wg2@ZND^CJ`9ydB*e}?h0tK+$+o*Q1Z9s$QTRd#m~ rzd!5@WXoAggc~TS0SDP^{GR{kXUh*3OyFX5WdH(CS3j3^P6 Date: Mon, 19 Mar 2018 22:52:13 +0000 Subject: [PATCH 098/138] Merged PR 6470: Bluetooth/ServicesAllowedList policy - added a usage guide --- ...ew-in-windows-mdm-enrollment-management.md | 4 + .../mdm/policy-csp-bluetooth.md | 91 ++++++++++++++++++- 2 files changed, 94 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 04192347f7..9fcd4410f0 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1663,6 +1663,10 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
  • TextInput/AllowIMENetworkAccess - when this policy is set to 1, suggestions from the Microsoft AI chatbot Rinna are enabled in the Japanese IME.
    • + +[Policy CSP - Bluetooth](policy-csp-bluetooth.md) +

    Added new section [ServicesAllowedList usage guide](policy-csp-bluetooth.md#servicesallowedlist-usage-guide).

    + diff --git a/windows/client-management/mdm/policy-csp-bluetooth.md b/windows/client-management/mdm/policy-csp-bluetooth.md index fb08f30dc0..7c004110fe 100644 --- a/windows/client-management/mdm/policy-csp-bluetooth.md +++ b/windows/client-management/mdm/policy-csp-bluetooth.md @@ -282,7 +282,7 @@ If this policy is not set or it is deleted, the default local radio name is used Set a list of allowable services and profiles. String hex formatted array of Bluetooth service UUIDs in canonical format, delimited by semicolons. For example, {782AFCFC-7CAA-436C-8BF0-78CD0FFBD4AF}. -The default value is an empty string. +The default value is an empty string. For more information, see [ServicesAllowedList usage guide](#servicesallowedlist-usage-guide) @@ -297,6 +297,95 @@ Footnote: +## ServicesAllowedList usage guide + +When the Bluetooth/ServicesAllowedList policy is provisioned, it will only allow pairing and connections of Windows PCs and phones to explicitly define Bluetooth profiles and services. It is an allowed list, enabling admins to still allow custom Bluetooth profiles that are not defined by the Bluetooth Special Interests Group (SIG). + +To define which profiles and services are allowed, enter the profile or service Universally Unique Identifiers (UUID) using semicolon delimiter. To get a profile UUID, refer to the [Service Discovery](https://www.bluetooth.com/specifications/assigned-numbers/service-discovery) page on the Bluetooth SIG website. + +These UUIDs all use the same base UUID with the profile identifiers added to the beginning of the base UUID. + +Here are some examples: + +**Bluetooth Headsets for Voice (HFP)** + +BASE_UUID = 0x00000000-0000-1000-8000-00805F9B34FB + +|UUID name |Protocol specification |UUID | +|---------|---------|---------| +|HFP(Hands Free Profile) |Hands-Free Profile (HFP) * |0x111E | + +Footnote: * Used as both Service Class Identifier and Profile Identifier. + +Hands Free Profile UUID = base UUID + 0x111E to the beginning = 0000111E-0000-1000-8000-00805F9B34FB + +**Allow Audio Headsets only (Voice)** + +|Profile |Reasoning |UUID | +|---------|---------|---------| +|HFP (Hands Free Profile) |For voice enabled headsets |0x111E | +|GAP (Generic Access Profile)* |Generic service used by Bluetooth |0x1800 | +|DID (Device ID)* |Generic service used by Bluetooth |0x180A | +|Scan Parameters* |Generic service used by Bluetooth |0x1813 | + +Footnote: * *GAP, DID, and Scan Parameter are required, as these are underlying profiles and services used by all Bluetooth devices. + +This means that if you only want Bluetooth headsets, the UUIDs are: + +{0000111E-0000-1000-8000-00805F9B34FB};{00001800-0000-1000-8000-00805F9B34FB};{0000180A-0000-1000-8000-00805F9B34FB};{00001813-0000-1000-8000-00805F9B34FB} + +**Allow Audio Headsets and Speakers (Voice & Music)** + +|Profile |Reasoning |UUID | +|---------|---------|---------| +|HFP (Hands Free Profile) |For voice enabled headsets |0x111E | +|A2DP Source (Advance Audio Distribution)|For streaming to Bluetooth speakers |0x110A | +|GAP (Generic Access Profile) |Generic service used by Bluetooth |0x1800 | +|Device ID (DID) |Generic service used by Bluetooth |0x180A | +|Scan Parameters |Generic service used by Bluetooth |0x1813 | + +{0000111E-0000-1000-8000-00805F9B34FB};{0000110A-0000-1000-8000-00805F9B34FB};{00001800-0000-1000-8000-00805F9B34FB};{0000180A-0000-1000-8000-00805F9B34FB};{00001813-0000-1000-8000-00805F9B34FB} + +**Classic Keyboards and Mice** + +|Profile |Reasoning |UUID | +|---------|---------|---------| +|HID (Human Interface Device) |For classic BR/EDR keyboards and mice |0x1124 | +|GAP (Generic Access Profile) |Generic service used by Bluetooth |0x1800 | +|DID (Device ID) |Generic service used by Bluetooth |0x180A | +|Scan Parameters |Generic service used by Bluetooth |0x1813 | + +{00001801-0000-1000-8000-00805F9B34FB};{00001812-0000-1000-8000-00805F9B34FB};{00001800-0000-1000-8000-00805F9B34FB};{0000180A-0000-1000-8000-00805F9B34FB};{00001813-0000-1000-8000-00805F9B34FB} + +> [!Note] +> For both Classic and LE use a super set of the two formula’s UUIDs + +**LE Keyboards and Mice** + +|Profile |Reasoning |UUID | +|---------|---------|---------| +|Generic Access Atribute |For the LE Protocol |0x1801 | +|HID Over GATT * |For LE keyboards and mice |0x1812 | +|GAP (Generic Access Profile) |Generic service used by Bluetooth |0x1800 | +|DID (Device ID) |Generic service used by Bluetooth |0x180A | +|Scan Parameters |Generic service used by Bluetooth |0x1813 | + +Footnote: * The Surface pen uses the HID over GATT profile + +{00001801-0000-1000-8000-00805F9B34FB};{00001812-0000-1000-8000-00805F9B34FB};{00001800-0000-1000-8000-00805F9B34FB};{0000180A-0000-1000-8000-00805F9B34FB};{00001813-0000-1000-8000-00805F9B34FB} + +**Allow File Transfer** + +|Profile |Reasoning |UUID | +|---------|---------|---------| +|OBEX Object Push (OPP) |For file transfer |0x1105 | +|Object Exchange (OBEX) |Protocol for file transfer |0x0008 | +|Generic Access Profile (GAP) |Generic service used by Bluetooth |0x1800 | +|Device ID (DID) |Generic service used by Bluetooth |0x180A | +|Scan Parameters |Generic service used by Bluetooth |0x1813 | + +{00001105-0000-1000-8000-00805F9B34FB};{00000008-0000-1000-8000-00805F9B34FB};{0000111E-0000-1000-8000-00805F9B34FB};{00001800-0000-1000-8000-00805F9B34FB};{0000180A-0000-1000-8000-00805F9B34FB};{00001813-0000-1000-8000-00805F9B34FB} + ## Bluetooth policies supported by Windows Holographic for Business From 97a435713a8bb20d1e26773cc2ec27cd51628194 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 19 Mar 2018 23:16:26 +0000 Subject: [PATCH 099/138] Merged PR 6478: InternetExplorer/AllowSiteToZoneAssignmentList in Policy CSP - added SyncML example --- ...ew-in-windows-mdm-enrollment-management.md | 5 ++-- .../mdm/policy-csp-internetexplorer.md | 30 +++++++++++++++++++ 2 files changed, 33 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 9fcd4410f0..b9bf7dd558 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1658,9 +1658,10 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
  • Connectivity/AllowPhonePCLinking
  • RestrictedGroups/ConfigureGroupMembership
    • -

    The following policy was updated in Windows 10, version 1803:

    +

    The following existing policies were updated:

      -
    • TextInput/AllowIMENetworkAccess - when this policy is set to 1, suggestions from the Microsoft AI chatbot Rinna are enabled in the Japanese IME.
      • +
    • InternetExplorer/AllowSiteToZoneAssignmentList - updated the description and added an example SyncML
      • +
    • TextInput/AllowIMENetworkAccess - introduced new suggestion services in Japanese IME in addition to cloud suggestion.
    diff --git a/windows/client-management/mdm/policy-csp-internetexplorer.md b/windows/client-management/mdm/policy-csp-internetexplorer.md index 304792e860..38156a6d35 100644 --- a/windows/client-management/mdm/policy-csp-internetexplorer.md +++ b/windows/client-management/mdm/policy-csp-internetexplorer.md @@ -2129,6 +2129,11 @@ Value - A number indicating the zone with which this site should be associated f If you disable or do not configure this policy, users may choose their own site-to-zone assignments. +> [!Note] +> This policy is a list that contains the site and index value. + +The list is a set of pairs of strings. Each string is seperated by F000. Each pair of string are stored as a registry name and value. The registry name is the site and the value is an index. The index has to be sequential. See an example below. + > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -2145,6 +2150,31 @@ ADMX Info: - GP ADMX file name: *inetres.admx* + +```syntax + + + 2 + + + chr + text/plain + + + ./Device/Vendor/MSFT/Policy/Config/InternetExplorer/AllowSiteToZoneAssignmentList + + <Enabled/><Data id="IZ_ZonemapPrompt" value="http://adfs.contoso.org1http://microsoft.com2"/> + + + + +``` + +Value and index pairs in the SyncML example: +- http://adfs.contoso.org 1 +- http://microsoft.com 2 + +
    From 0859ed2f76ee88362057e5038419729dc6fc8560 Mon Sep 17 00:00:00 2001 From: Austin Lin Date: Mon, 19 Mar 2018 21:53:24 -0700 Subject: [PATCH 100/138] Fix typo in clientcertificateinstall-csp.md ptional --> optional --- windows/client-management/mdm/clientcertificateinstall-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/clientcertificateinstall-csp.md b/windows/client-management/mdm/clientcertificateinstall-csp.md index 5948135c19..1183e5b3d6 100644 --- a/windows/client-management/mdm/clientcertificateinstall-csp.md +++ b/windows/client-management/mdm/clientcertificateinstall-csp.md @@ -63,7 +63,7 @@ The following image shows the ClientCertificateInstall configuration service pro **ClientCertificateInstall/PFXCertInstall/*UniqueID*/ContainerName** -

    ptional. Specifies the Windows Hello for Business (formerly known as Microsoft Passport for Work) container name (if Windows Hello for Business storage provider (KSP) is chosen for the KeyLocation). If this node is not specified when Windows Hello for Business KSP is chosen, enrollment will fail. +

    Optional. Specifies the Windows Hello for Business (formerly known as Microsoft Passport for Work) container name (if Windows Hello for Business storage provider (KSP) is chosen for the KeyLocation). If this node is not specified when Windows Hello for Business KSP is chosen, enrollment will fail.

    Date type is string. From 2a3e2abdb69a9c0defc103f8c04b9bb9167f83ca Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Tue, 20 Mar 2018 06:28:40 -0700 Subject: [PATCH 101/138] Attempt to fix a table rendering at the bottom of the page --- .../hello-for-business/feature-multifactor-unlock.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index fec8954348..498c210e44 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -279,7 +279,7 @@ The Group Policy object contains the policy settings needed to trigger Windows H ## Troubleshooting Mulitfactor unlock writes events to event log under **Application and Services Logs\Microsoft\Windows\HelloForBusiness** with the category name **Device Unlock**. -### Events +**Events ** |Event ID|Details| |:********:|:*******| |3520|Unlock attempt initiated| From e726eede1c7e966e00cd5bfbe6fec25037a8e96e Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Tue, 20 Mar 2018 07:14:05 -0700 Subject: [PATCH 102/138] Fixes --- .../hello-for-business/feature-multifactor-unlock.md | 5 ++++- .../hello-for-business/hello-cert-trust-deploy-mfa.md | 10 +++++----- 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index 498c210e44..7ab304b61f 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -279,7 +279,8 @@ The Group Policy object contains the policy settings needed to trigger Windows H ## Troubleshooting Mulitfactor unlock writes events to event log under **Application and Services Logs\Microsoft\Windows\HelloForBusiness** with the category name **Device Unlock**. -**Events ** +### Events + |Event ID|Details| |:********:|:*******| |3520|Unlock attempt initiated| @@ -287,3 +288,5 @@ Mulitfactor unlock writes events to event log under **Application and Services L |6520|Warning event| |7520|Error event| |8520|Success event| + + diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-deploy-mfa.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-deploy-mfa.md index d2126063c5..99a39e91b2 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-deploy-mfa.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-deploy-mfa.md @@ -6,10 +6,10 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security, mobile -author: DaniHalfin -ms.localizationpriority: high -ms.author: daniha -ms.date: 07/27/2017 +author: mikestephens-MS +ms.author: mstephen +localizationpriority: high +ms.date: 03/5/2018 --- # Configure or Deploy Multifactor Authentication Services @@ -523,7 +523,7 @@ Before you continue with the deployment, validate your deployment progress by re * Confirm you saved the changes to the web.config file. * Confirm you restarted the AD FS Service after completing the configuration. -## Test AD FS with the Multifactor Authentication connector +## Test Multifactor Authentication Now, you should test your Azure Multi-Factor Authentication server configuration before proceeding any further in the deployment. The AD FS and Azure Multi-Factor Authentication server configurations are complete. From 4d4e8b1b8616555cf7456316b7f05dc12917fd69 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Tue, 20 Mar 2018 09:01:20 -0700 Subject: [PATCH 103/138] Table rendering removal for troubleshooting --- .../hello-for-business/feature-multifactor-unlock.md | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index 7ab304b61f..7e4a318c9b 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -279,14 +279,3 @@ The Group Policy object contains the policy settings needed to trigger Windows H ## Troubleshooting Mulitfactor unlock writes events to event log under **Application and Services Logs\Microsoft\Windows\HelloForBusiness** with the category name **Device Unlock**. -### Events - -|Event ID|Details| -|:********:|:*******| -|3520|Unlock attempt initiated| -|5520|Unlock policy not configured| -|6520|Warning event| -|7520|Error event| -|8520|Success event| - - From 2854ecc8b7298fbc4f46f5b06c35550a2751a0af Mon Sep 17 00:00:00 2001 From: Christopher McClister Date: Tue, 20 Mar 2018 09:11:23 -0700 Subject: [PATCH 104/138] C-Card Alt Tags & Accessibility - remove alt content --- education/index.md | 64 +++++++++++++++++++++++----------------------- 1 file changed, 32 insertions(+), 32 deletions(-) diff --git a/education/index.md b/education/index.md index 1f982844d6..4a5f5a36ba 100644 --- a/education/index.md +++ b/education/index.md @@ -18,7 +18,7 @@ ms.date: 10/30/2017

    - Learn more about Microsoft Education products. +
    @@ -36,7 +36,7 @@ ms.date: 10/30/2017
    - For IT Pros: Get started with Microsoft Education +
    @@ -54,7 +54,7 @@ ms.date: 10/30/2017
    - Test Windows 10 S for education +
    @@ -88,7 +88,7 @@ ms.date: 10/30/2017
    - Learn about Microsoft 365 Education +
    @@ -107,7 +107,7 @@ ms.date: 10/30/2017
    - For IT Pros: Get started with Microsoft Education +
    @@ -126,7 +126,7 @@ ms.date: 10/30/2017
    - Office 365 for Education +
    @@ -145,7 +145,7 @@ ms.date: 10/30/2017
    - Microsoft Intune for Education +
    @@ -164,7 +164,7 @@ ms.date: 10/30/2017
    - Windows 10 for Education +
    @@ -183,7 +183,7 @@ ms.date: 10/30/2017
    - School Data Sync +
    @@ -202,7 +202,7 @@ ms.date: 10/30/2017
    - Azure Active Directory +
    @@ -221,7 +221,7 @@ ms.date: 10/30/2017
    - Microsoft Store for Education +
    @@ -240,7 +240,7 @@ ms.date: 10/30/2017
    - Minecraft: Educaton Edition +
    @@ -259,7 +259,7 @@ ms.date: 10/30/2017
    - Set up School PCs +
    @@ -278,7 +278,7 @@ ms.date: 10/30/2017
    - Meet Microsoft Teams +
    @@ -312,7 +312,7 @@ ms.date: 10/30/2017
    - Office help and training +
    @@ -331,7 +331,7 @@ ms.date: 10/30/2017
    - Windows help +
    @@ -350,7 +350,7 @@ ms.date: 10/30/2017
    - Microsoft Store for Education +
    @@ -369,7 +369,7 @@ ms.date: 10/30/2017
    - Minecraft: Education Edition +
    @@ -388,7 +388,7 @@ ms.date: 10/30/2017
    - Microsoft Educator Community +
    @@ -407,7 +407,7 @@ ms.date: 10/30/2017
    - Meet Microsoft Teams +
    @@ -426,7 +426,7 @@ ms.date: 10/30/2017
    - Set up School PCs +
    @@ -460,7 +460,7 @@ ms.date: 10/30/2017
    - Get started for students +
    @@ -479,7 +479,7 @@ ms.date: 10/30/2017
    - Office help and training +
    @@ -498,7 +498,7 @@ ms.date: 10/30/2017
    - Windows help +
    @@ -517,7 +517,7 @@ ms.date: 10/30/2017
    - Microsoft Imagine +
    @@ -551,7 +551,7 @@ ms.date: 10/30/2017
    - UWP apps for education +
    @@ -570,7 +570,7 @@ ms.date: 10/30/2017
    - Take a Test API +
    @@ -589,7 +589,7 @@ ms.date: 10/30/2017
    - Office Education Dev Center +
    @@ -623,7 +623,7 @@ ms.date: 10/30/2017
    - Microsoft Education Partner Network +
    @@ -642,7 +642,7 @@ ms.date: 10/30/2017
    - Authorized Education Partner home page +
    @@ -661,7 +661,7 @@ ms.date: 10/30/2017
    - Authorized Education Partner directory +
    @@ -680,7 +680,7 @@ ms.date: 10/30/2017
    - Education Partner community Yammer group +
    From d328791b8cd9eec472add48bcf0378bb8efb3565 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Tue, 20 Mar 2018 09:18:22 -0700 Subject: [PATCH 105/138] Fixed table formatting-- author error. --- .../hello-for-business/feature-multifactor-unlock.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md index 7e4a318c9b..b2d6b3e54b 100644 --- a/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md +++ b/windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md @@ -9,7 +9,7 @@ ms.pagetype: security, mobile author: mikestephens-MS ms.author: mstephen localizationpriority: high -ms.date: 03/5/2018 +ms.date: 03/20/2018 --- # Multifactor Unlock @@ -279,3 +279,12 @@ The Group Policy object contains the policy settings needed to trigger Windows H ## Troubleshooting Mulitfactor unlock writes events to event log under **Application and Services Logs\Microsoft\Windows\HelloForBusiness** with the category name **Device Unlock**. +### Events + +|Event ID|Details| +|:------:|:------| +|3520|Unlock attempt initiated| +|5520|Unlock policy not configured| +|6520|Warning event| +|7520|Error event| +|8520|Success event| From 1d57d4c4f4cab3fb20a364ae909fe88fc68cbf72 Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Tue, 20 Mar 2018 17:05:28 +0000 Subject: [PATCH 106/138] Merged PR 6493: Merge msfb-ps to master LOB app time publish updates --- .../distribute-apps-from-your-private-store.md | 6 +++++- store-for-business/images/lob-workflow.png | Bin 0 -> 34107 bytes .../working-with-line-of-business-apps.md | 7 +++++-- 3 files changed, 10 insertions(+), 3 deletions(-) create mode 100644 store-for-business/images/lob-workflow.png diff --git a/store-for-business/distribute-apps-from-your-private-store.md b/store-for-business/distribute-apps-from-your-private-store.md index 3ce46baf61..2228ac8f3e 100644 --- a/store-for-business/distribute-apps-from-your-private-store.md +++ b/store-for-business/distribute-apps-from-your-private-store.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: store author: TrudyHa ms.localizationpriority: high -ms.date: 10/17/2017 +ms.date: 3/19/2018 --- # Distribute apps using your private store @@ -47,6 +47,9 @@ Microsoft Store adds the app to **Apps & software**. Click **Manage**, **Apps & The value under **Private store** for the app will change to pending. It will take approximately thirty-six hours before the app is available in the private store. +>[!Note] + > If you are working with a new Line-of-Business (LOB) app, you have to wait for the app to be avilable in **Products & services** before adding it to your private store. For more information, see [Working with line of business apps](working-with-line-of-business-apps.md). + Employees can claim apps that admins added to the private store by doing the following. **To claim an app from the private store** @@ -57,6 +60,7 @@ Employees can claim apps that admins added to the private store by doing the fol ## Related topics - [Manage access to private store](manage-access-to-private-store.md) +- [Manage private store settings](manage-private-store-settings.md) - [Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-microsoft-store)   diff --git a/store-for-business/images/lob-workflow.png b/store-for-business/images/lob-workflow.png new file mode 100644 index 0000000000000000000000000000000000000000..954b787e6da7627f8360d7347ba36175da5fdbd3 GIT binary patch literal 34107 zcmeFZXIxWjw=aqn6~Qi802LGk0qIRZML<9hq)81*@4Yu0pwa~CReC4VOCYESNS7{z zA}s+zKsq4=&WLNR{qD8Tx%bok-A{)vLXtV>Q^qsKzl``+SxJ`m$oV5wR8+Kb5AHvv zqB`J4MYZSsp@Zvt-u*Zy?+fB*hQ)#>-%zka`y zkot=L@0TY|GuHh5>+!6aUw>cuTv(c#`|p>(-4J!#^Vjc}l)Apq{Qa{1yZ?J@s{gwn zlxXS3Fu@iVXHv3*t=c;@UB&2hacn&%HLBdG2lA@05OI5m>{uu>M^71OQHA6HkI zMa!0i7V))?`@-CgP}Sd>TxPZ2PS)CL8E%$;@W#dbr4*W~DA;Sy@f-i#q~*bs!hKP< zU8mefuJgi$ET&uawU$&**Jp=M*E)5owxwL zSN*;AJUjKT+nP-){Ddj2>Lan@gIN1%v#khLLXDW_uHn#3%%_VCwChaHX0sh1L`S^4 zrZ-fth4j22tq4pmA68+H6<ol5q ztCMN*_;EtJGF{M~L~(lOMTN!LXj>Q5w$EtOUy?C?coB&h=2KLV2*WOu8eKitT7^2LbJUW)(_h+o&rNm3@1NV8 zd+T-1g?h0H9k|tzL>E2QUU^$ia`V}`ohz-u{@aeE$QF6V#bwkknK`S^muKtL+6V4C zUM&B_2W7)fHvhRpU_f=>pqSZC!uw0)?S;IE@Y7LWzEEA6UzVF(8y-W^JBKiN46E3{$@7J*Y`RVTA!-wS`JophOV413y{$4;xC?1(sUM@J%Sz+9I_9`o@ z*ySCj6{%lw=w_xAWr83vW(dXr;=_noD@)G=OJK>8%C|6{EzE)az_{r!dq*jRx zvS#^RlVEUgaGZp9wV=)L%#x60Rsd;$vtl@vQ>Q#TEsbUKl|k3g&|L9YV`Jk}f^B+% z9!euzO;t55Dk|!F^g%@&}?SQG2P;)biH^78VfChh0z&KZ-b9Cx+Ltzs=KEt`y{ zldL|QNs$}QtkGZc`cAJ2n=Uchq3JvLV#dGLuIWvLv0-$ zb$$K912kvNFy+=378VXfQn@w8ibJ9Qor0cTA|0b>dJ~gpn{BKMVJM@_a$t@IvHA5A zJEQ0N{L)X`+k-`h0j%b0bA55*o-Ppz`}Q}D+nK=<#qpVj^cU*k9d-l+1kB;q+Mf(w z*i=oQEh{fSSi2h+cYegNQ=FZfo7u&XZS*}Y10lOk*>?{dFG!)EzoVrC&-z7Ng(Vv* zHVzcD`gwdIwZX6J_tvR2z2^qjm~zE2@`7t*WaRW356X3M9hFR4tQ(u&zuBURPOWmp z$%lt9ie=VqPjhemu0JMT&R4Eg>rr-=TYuhp*V)-Qj>phHJw+)6m+U*5f8BbxQe}6E zd3U@b$R){V%RD++$YwaZrA0m?GtGIJx__k7V&QF-c;zr8h3x4w0G#!h(kD-E}sm0{n{pEHk73|2em zwT{*55e}Kekb=(f>8|tHj^3_a=@2u)DOy_Qb%rpD!2)9=o$!{HW@bOOi7T&$=%4?x z8m$?;jXTS!oz6_2k!8aD7D6x4lBd`tyN1dvVdCkOr8YHeh&xeY+S$)0Nt81-HB|_Q z1@PnP`$7|>(Tm8gqm-lf+;`HAjEruj-VUJ*F^csJJ$*c5B!lOK$vgj`pra*hWK&5} z>_C$MKYw;kj$A`S!`3!V(v}pHCL0L7x3l=JdLFVYdl>JZ&OW+V|6%I=ua8H3#1+{ZpX=zb)E+k8fV6pt(^D(W(}&oXX} zA|~Qny!Ye|4QV^t`|H?LHB37T2??R{6Y$o%qZ$uNxjz3G9-c2cX?tn(MeGxuHY{8BgUq7yF zZC#*%`IMf1|AL^^tqpvVWdBVe{pc{_=<>+eSa5l4SoFdoE#jp}6nZqY(PhDMdjIm) zq`zZK=>lgo((c1l#FQ?a-=0|~QP}Uq@C0>rb*4~jb8{Z%vC+{5%6r5W%0X*#c6E&> zg-zvWXWJ1`D5(It*w8Z45F{zewXX9&pOU;dIXO+V-USAFOGFDnE?^?rn3>)3)zs4? zIAd~i*^$N-JMC_a2k}J+INyZzzP>)LX}etq--7<#w~=c<;qR(#-+aW{+S*-avHh88 zo}Z_6JG@r8ySTdF-~xsEH>?#D6qHFWzDQ3o>htH%Cj_45bdY!8(k}fzI5NW6jn6JD zT=$TuPL>>PnOI!xUnxVQNAW~$6_xQN(Hcfa+fL(li4AVNM81d~3<{?58x@?AkTr;$na8!X?Zeocdbr0B*1=J zH{54uC7GJ6&FsCZ;=L4z;NQ?xS2x}vyk$!|w#1LB@gVc_UOc>4E?>So zfbgxQ6hVj)!f+K|x{l@g;utcLL(`%ugs~j=$k^EUfo8RLPJVtb51mj(t~!|mES8^helEEbjG-&nj4 zG<%$>E-dWuN?6M+=?YvV94Y%kW-ni>nwRO+LdySKo6)kz7h{q&fXSN;6MhK|vggJ>+jcJqL#c_VO0;$T`jWS6cS#^mUtl z#9C6{Z*E^=D|Q2*mJ21H-$MH5!veWXjVHQ}&TbG3G#hCB{QR&R6{8+`t!DLb@>kr> zYg)Xt-xzWA-0s+dSVg@WWxLfaDkesjX#9R?@<^urs1*P&K$G+@nXFL|j_vV6os%2= zd7bbq#LJ;9$unopFr@{T6c@LJu`4Pn`rv|>O}18Nu^W#h$xfdgtw-RTF{MRFY*cl| zjwOq^c5IKvnEv3xJyun9?okwy3wJjj9vP_Haju)*!}`}gTypr6E$>!p$?|B|c?Fv} zNz$9P#f%qAZme*=-}p457xtxGAb)Uq4e2|wt|Vt^b5Ypt^CU4oE>3r024K>yI-wzL zx`6tcl^&ZSK1&k@yca(Zi&%rU92)`G1>F@-!wv@y!_^fEk_g3>j1o2hfl@~njXV7Q zb$5m2xmY_exkw}uxsnC^l|wR67#mdkG;SPgcl!;BPJgyrPD54IP=hz9!R4NofZh81 zpow&&$6n712btfT<1;aX7XWIPW834isF}TfOrOm(uxT$E)sIL_Bsc`#cX25vR?zFa zeKAHwMV(#owDeSNs2aq*uT^Da{1tQ>HkSqT z5|QQxyu7^k*ky%>&dY`}3Dj+9xK>2f=H<0+?*PUX!Z`MupI;|n*qX~GhvK*`2MWuq zbvD^CFAvb%X0p}$-aRr}>)9S6Z%JJ?p5(c}v*HOUA2>(Hr?c5K4avLPrYod7S)vj5 z#G)1&pV>4TQzO?{J(n8j`?|WG3Vt2Yq&?a=KUlIh_2E%<+bnNFUhhJ_rcq7sK}S=) z6J5#5qOYkoU02$L;>W0qi%Zw$7T_Q>d`xN;wP4l7m8|W%EiNv8leF68amGhDIDxo= zi(eT(UsY#6DFYQu_L2Bn@2A$oK@fB60EO#i(LY%b&%18uTGRScVsk*xRj%6U%lC0R zx5Nz>)^qer8c2O>OjS}`TrMujQwgAjiHIwd8qb9)+3D%&r|k~k{43{wIZHMN={Ny0 zKi#Xo$CgyCA4ZEKaHZ&8Ez-Zrd+n_2Zt*CSfv#M*?yH5`jnR@3-)t8A^P=?p{I=~K zC~Utyxg?2GAFvx485wuQHCYQYwPjHr7Yd$j)Vz4eH(pSKtX+>IlI;c1lS zHH;x2#9B}@FxVA>|jtsQmwZZy<@rlx03jwFBTAa9t%~t-qBH;QO;`1 z0WR^CHa>}pmBt0W&pJ^$p&1ooPsiMGjG<$G4mVF^G1i3R<;tO$%f0CI+ic-Ly4BVW zjN4V#eEI4w@ZDog_&tX>98X=vqSVxTfEG$>6`zgPxMO#Kcbg>%!@)C={SHLN`qA~t z++$RWCY?zHUPNcEdY)A$8&qA|3xY8fWKA`-7>?Y7EusL+Z699(Fk*rkCvLBF#*bZa zY^h!x(^d&f2bBTI5$C~yOsT3GH1E7# z#aCbbS>8w?O)Df{@_=s{A*i$iPms9NB-%+_^w|(wNmYT`-pWsEZ`Z<* zTrkQZS0^f84S0l~+v{xz2~x=s+tvlpUrk3R4{AFoB6;QI8W3UF3vD)6e&1mfb7>p4 zb#yE#w;D{nst^_9izu^*9P@r6rfXBPB$FIkOJ2vcFCu)&&MPFOH^CCSfgsOmf&`*Z zxmQtVe$%|=0K&e(mb~NoPw;p z*ZMTu*W=c>9=){@rGO+6y&GMUM5fLY2B| zd_yjccx|*-)qsHIOYx}sY5ZDK;5RdR17V6(z#+7t`Dm|-s_LZk>mfiLtK>yr$*E#3 z4vvL6Jl`kn*e=Uz_e@QOcW?R0D-HlDq#OcoO%>}=+EU97WP9483}k0aOY>;@9iCSqPcrqdl6iKa9`6C9S%bw;d;N`_27`E z&Lo<&&;w#msS80Hi7WtuVw@|^VVLB|!VNjnh%_8X&#eK6iK0V=aclH<<%3`ZN|`Ez z;-3?}!@F=Ta+|x*#0_9dZFw53fiq}1)!Pe&s0H2)%Tk(xP86s;E0rJ-bxr#g!>V9h z)Br#U+KyT+bkc{ViX(lIXSIm`vkFDesEFGPMEc zip=Yr_xOO+uhoVZhG5{I#OU%VItwt0vWg07r>i5PS@M@0O+h%qaQVE4YQUE4^;pbh z{?@L(u5Lbj3^E3pp5ybryAKo<`}zxX)DZ~VcxLCYl+dP4(d2jfwobKhN#31flN_5jR)t2BvS4U%S5c>#_f67=Zorj}h@Jyc#x47T;EPt)6s?euEgCe^sF+}@#wYDBpcwj&W=c2P#B z)#ElC2Q>s@u|k}FzUU&IFH(|;RXCu^;o;YcF&E+>akH$R{rK}4w=sJatzFz3q9Zna z$-~$C?rDYl=>6=#@Vb=`JeR|s2>g%ueN`0VrM>H803GAI*cWFZW%0-+1GT31t}qsM za&o#ZCZ^NK()s@~oQF@-)8iqayD2&zNSZPz z;pdt#kUI&EqKRExe~jy+nC=XPGN;*YGkPhV3L8pjrRg2LWN`DJu~7Yg?nz$_`SxLT zRcy^SRCG1K)zfLYeox{8)BDMnj;u-NpQo1|p5$jDZ{+;b3$RwawDrUzTq0glg~kNt z@Zc$UW?j<%@*cE_C%foIB`Xj=Hg;?STxv%OlJ@L9@a9a8+~KX|`PS8$-L}U&5$R_1 zY^B&_-@lNfd_?DJWXATy>)dcS)MBMvL@L%=>OCp2DneYSJ@ z$<0&Ge>F^0T?{ndd%WgWQY(BqIF#75XY*7b&f#X%;XA*dE$N0d@a{RJe>17I=*cyz zFMK8PKBM|ElYUz_rp1>ryTrFClbb2k4ihJ9sV2Qftc&rdMG!=w1l zS{$3AxyAl3Z|txv`e@#(3fIrgXIKp)91cG5G!w@lJCeS9l9VLw4brC!XDOOHtmVwU zfBrmN>OIx^Nz_gCq#V6L?~z*w?ap<)f>=lZdA6C};55a*dzb9>R;`c$?5sb3$}`B| zj`_YjNM$&h*VKW}<3`gHo>4LQ!7#^V3jeakN@0O6-AuBc>n>5$>*6~2T;&beh&EG4 z{&I}>!5V$V!j)N?p^2d`JXAsVU}$zMnt#k>gLLQ&xs;DyU2JmxZGnsW;$E_o%6NK3rtCAdO_Ki1vN4qO~_yup64nQ=heng zMDw1t;Sa$*d-y2@YZRn=sA|f{H!pgO|$cpN+bnNCE zNy%G7PV01Y3cEhKyJG{(5j;GCNREQ*as#zj&&9=x+#NKZY#*y|UbozM8lZvpVt`p))Yg2=?7R-Z%|WO;|rw5<=@FKfYQFaG20WOw!MXS;76Xg4w0qhEXq_cDkS zMPKK!dU`i^9og1%;n>4a7nSFgr&>9_7jm@shDJ}#G}gRrQM!PH$(1>;=h=SFsR?3@ zJOgR=4U37MdFH5_K{X6nde!~x+4MPrZTkWb&9EpPUd@kzec*)qdQxq$@sbYh&&EOAd&?p06*}#EX9&xyp9!XUNc)ZdArZ z-ZhyVr?4XOo#=ArnPM{LWo!;izCU(ll>RM4q2Ga=+$ugzcy?c(ST_C6W=hkc*>+x+fjc+Y(3uJ)L!q#3L zl71O4#1vDQI&1{tQHFa{Z4&(Y40 zx3o?q=i1Dy3R7FQI+o20@sGp^so37WrI);wvfeVrLU~zWIgoY^f890C++l9OKb~VkF?n)cUwvHPP??x zmKy8(A;PlrT$QOqHmZZl`E06I$_$2P7f)Xov#vqcqNHG(mtubVLULp(ZmWoj4r9el z4#*cL8`W%;UxdRM_u&I3l0z8|lJ+gWKHZr#SQH=V;c;HuLVJ6_sg0t~iVr-tN-Mmk zK{^n9K*FNc(b=`jh;gCvqvb9!hT!wWjxOv6)D23)Qm+%A?3y+AMwf`c($-I~=@56VoP3$<<0*qV=41}(MKIEs z)OPF zd+|2ID=hupqpWz>!w&(SsE*I3NOX`-p*LtSO7W1ySWC^F)i?kU##)nMBTaukKV&xy5 z%UWLu+{2w&MfxPQ(cbz)k@(`#*eQ!^=TxPh(5J4t-1h&#+26T;gOc=A)?^tCC!(Bf zpK)p)O_>V3+$$)PjiC+TA$;Q=yG{RNlEc;2%-!CdyUWzZ^PO-A}b<{M|$wwx8t%6$2Y{MJs6*Cnn6^_IVwSD7vl#d`4rAT*$p&OT=t>~rpc`SHOhw&TG81f^k^g2nBU1~aS~>NQ;{s18+k%G zYLVhAg{|dZ`kw}^$Cv4jF4xl|ocR%fH5y}4Y4N5H9n48?o;xsq_T4F?=wc6&q$v6lR2f3CVN+2+5g+fV#ny2?s+lM8WRW6On& z7KwWXWsvI>es}9Z1?%iq=%D7;fk=}$&DXVwcT7DGw)^p>r<`iQuuf946)dr`l6ERA z!7XGXM37uoo$B#kORvcnv(+fGVi9DNiaW|y-``ymkmJY-fri@mw{ZIV(M>(Z+l;E*HQ7C9U^x zKkC*Y(ChLR`84$Tv^rILe%3X+e}3x|zeC5&{$l}OIsDn3>uklDe+xDm?wfs$Pzf)j zzyc_6@Q~wb0k2h3+LFVKOiXo5>mVrbX!mouXwD{l`Jcqyo}8WZ;%;q!e;R}!dt2Pc z0C_&|kYyTYvCXp_#4FA7`?vdaq}IX+)YWZ%6@W*G!-C?*HSYS!qCy`bH}{gd-mEio zH!oHH)Xc`nb@%IJ#U-LN@bY}>nmmdtrb>?;p1ss+;+dlljW({TF_kLt^($dI^X9^` ze~ask+OM>%AekVfdLwOpGppRzEI~6DYI$NUJ)qF!R-7NwFa2J76l}tX5VusgF7NM! z)Mi7U%b8DF&PZhwPg-1H=_UAc__qA0I{VNx)n19ZIOJ<}_rqFp!8yugG)L#?HlG#q z_bz!rQZh~t5(<55kET>!HU>83NE>2`EnsXng{E6Sr^LY zOLd*3yy=EnQH-NXfEd?nUR+3(QDftH8)#LG4&&=hz=fVJVU3o zkyLx)dQ;1FWS6bcwk@TkeR(*rp54`CBx#5HnoZRoi$@NS|zM9t4kYCl6UQrMiR)QX_erFC(R@@k~tD;oeBo?~bKA*dQ#I>F4Plx7-j=rQh6#Z&( zZ8jdIgdba|=WvEfMSc6omD6~ej$Va!oNn>w>O-CWM9rT` zjx;on^~!agywA--C!|q6Z_uSiIdg!P9d%erBrbfu&IeZVp|A(RQ3`VBt9iHMUH2~j zB12-s<2pGdn?^X}J;r_I>%?nLS3Ilp3n97^6QK{%XSxq&GG8$tNBwjL> zv9qfw#U|kMw|nUP>vEdvHQx0H;o*I@s=%MA0h))hH6cva{h$+b;G!%G*hnqWrenls`&G1`z*DY?qyAUdd9^dqDPQAO_>vgy+_{5yc`1^zy z0~eWtb2G6tT&~xu_+;|WLq_)4`4w;%7ntVz!$mAj!r4~NpMcwZfJ3Q&w8lV?s=Ev+ z2PBXV-Ep|Q{p<#UwbSw2F9Kbo^gw3Ssw7Nt08n{0#C!ipLQcgHcV&%ju%l5k8&}B) zqH?aeeCHo3+0H5luYh{C5Vd@|KgIoB2n#Tt=ks$5?TKQud#5h7~%mA_iSO+ zhkX(iN=~$9IA+OJH}A$nmK!ThyDhg%YK|?MyNZNRAgEYqdWz3w+a^0{x#|VZ=0il` zVV&@&I(53R$=rIbu?puPM`1?2J3huJOt|b{%vsnI+7Zw)!iZ)6=Wu%#Vyg>FD2figd&8 z9J?(s9Nl|SNOp*Uv?1`dk*o5#oo9KDLTGOtb04pjs^k&*leAv#D-)b~WjO~VHo&(VW*76TpT2{K z&%zxrvu7!|6&lL{%znuTXSO19B&=l{9PspX?|iXZ|t(=rYHQ)(l&a_#mQrSZ&DQcaV&PK%Q{GQ4B2AhD?WX`O;vnGGXvnDj*h zgti{peZgAg^wq%a*;NGVfaA9<=l<5~lir*-Jqbxj9*=?6u9$9Y6!4sR$8&E?4`NVe z_q#&-dXK2rTmUEbftumB`SpEzqQmxgo8KO0N;9KBn@%YgurN&Y^{;a38JzQA0X&Vq zXL_4DK>>laIdJ>kM&_I#X25looZ|7ltxX}ZuU|lg-N&apElH&cRiA-2%~v-VxQhnn z)p}swAoNvO*rNB0N7D>!cQl=O+O}zjrwQpv(!CbFVVB?MZPje+Dn>&LUpG0c>IK+n z0+?Biu=mI#fBhtzZNt?{sdu2~U=~`1&1;;GKPli~tPbz#A6#5}7g2$Urz!D2tNmN> zO7==xOGwwHTcXb)-ciH%rZ_8~KiJ$E-B??W@2Y$M$$*3aU7>QY%M$=+-*D`O^$rzV zdPT}IK^-5U8=TZjQoYJR8v}e6Q**0>c!NhUOY>GRn{TLhd5$VEevGH?B$`~V@1CbK zdt-7Hc<0N7bPCf1aDWe{&ddWjW6kE~D$xz0Wxb6I&bjfmi1FpAb}t_67q98g!WEeX zk%?Ou=*}dsOK=8t-JQeRHlE%${<8z)q~6Hsfacmf&thMYc@BDnk+X3!(r%sVq!ijHTrQw43lN9^A{uzIy>eDO zT}Pv@)6f2Ufctcd{jCskbRnt@=fv1(54_s%1WMu?;WTZddeZ|AcexXcMl$*KQ6ahyt{A2MQ>G8 zY}D~v3M3kB$d8ni{4o0Du0xqT{!HH=MDw_oS^ea` zA_yJ#*2t05{4V{GCKe;@vDm2{$dHM1Ot-R%m#)3f7tG8&)Z}tVpMSYw=39h6Rt56i zdWG)R`LOd3^qOLxUAl-#BrGMepo=X*7otFwj7gq|EluG$m6Su7d#*O?-npinVifLt zo=FMt0N&b{_%Weh{Tb^L3oPl<0DMF=y;tfm%~ z$;gJ9=g)-7f++ZU1gh`K@C+zeri(u=rpq*iCx&%wC=)%=sw4YaS|1#-;1S!T=OCmS zY;Nshf~!~A64s1-lWlD)HYhSq^qK_dY4T8)=Xn%gh2<^K52XK?yG5x;_L7#o`=3D) zA2F+{>;dj1zVDR<{^Dxobt|L$m+;48h|J&AG`?J1S@)L|chp&^6V( z70cQ@KP>K6+-a!431_Ot<@c54R6X0bOT`&?a=?PxvT8F7WFt{7EokOLvjwDd`b7@ND)NkUw=!}Z+ zlxzdSpT#0No6ToYRNa*PF0XcU?Nr;Un)uzLrH9vrDY>0O$vf%OLB|_RFdXz&%*haY zG$*tu>;#Yoz8%!H9s7ab7t2Z>5y*Mi^E-^E=L^aSC-*0C1it_~r_?;$ghk4y_*DtD z9~bb=x>a zJ1@KEz4a-)MzXLn_HweJE;*!in}_TA8ARkWl<<2L2yobhZ!VfG_0tsm$i;3h)RfH~ z`=JK6RJxjSr0;NiNQrWV)Gzo>RwKV`xE1aa9|OzT8qTkVHOJ-|7MW2e&ZOAjLXju5 z8%uc?=wn{}#e)vvpV_?#xx=RsSl+?OU<3HE{XpqUai$a#1^>|M3>C?vE-86k*N4`k z?4}g5t%H;+E^tlW3nR%BMy;UMxD2_49+>&sUP(oMyi)a%de1j)w5MU>`VS?gp&y=C z!kgT0zI8!=3%Be4;H_xMs%Oztg_!Zd-pK+yVpc94RMi$|&*K-Yr_)?$*dOE3FhI24Y!{QV?3prVt;!#qA{2H1o^$XF5q45_ zj<4FxK)U<{q0~fDBmL}nu#jQytAQB2wUSaX(9iv~m2pdVlRrewEcuT>83OeK41teO zhSoMo5DQ?+zh^BTb@C4RjqKvL)ot#V#^WWJAwaklI_4e%UA0E`4^Yt7!KT^i7pL3$k-> zTs&9w>7;k=*+C%z28G=REk_nyz=u$S;0Iu286OCt;RFnrz3qH;B&nx8*N<} zH^1pLXB{~OWHYpL{x8{mpyu~e&CtWnVzw091b7!nzn^nPV@NJt(lsgF(Rw$6(&FXF+na$!1@_)57PIV z&cGf}ln#pQ=4j8xk@m`@S@xA7Me1MG;$|%JfAZZGVU1BFbz~QmASfuXabJ)4j!i*D zzw~dqydu`K%U7db=OtOyNZKY_*S(1@ssnQdbK)aOCt%3?0v3@1$hMs3nE&GdcgPtq zi!H02`xwz**y5W6L@aJ&O)h$&(7yBFWNImjLeYq17^GW-E6B-J6q#^~EZg*}$ZwFz zdJI;>L_|u2uCHSHr$k3Kj$thY>PdMO^II|ciNToI)Vt@mK5DxoT!y7g|5A?X)ycn!Q{4)^pfRF6ezi0ztL3wMwbcu`9 z^57g2^fiiWFrk&iOhu8{-I?RF!SJBSd65H%xtQ6icM z1>msd@t_YYo9~&`*1x^Y5mg@<$8Td6_639hug*}6xV7vF_j6X zjYOihPG~FZ#)8k-kfG8Q+qOhgug!y)ONT4QY9@bxC__miO1@cl0E}!+dcJt1^Zr9r zHWXp2U6)kLJ3{Ie=A9=3Cg+)F#@#=%;}FVjCRy zhx8QUSkM9apaZvq+?Rq@9)}aQT^7EE$;q%ZS4wwnCN#?_K+^l@9@eImJ=onph#d9F z^6?-=YD?}Ok&E7`>;7Rqvm_CXxBGUl_UgsIrM$i4J{?cgg`6w^b7Dm*7O*Mi)0B(0 zzNF@GB@g&hzBm14y>81($&%~I7!K4`=P~ZRc>&^%A5|MPGbmz)mMQN#MLg^biz#}) zxHD9~L7s?!Vj;l2pv5;RJle^;{r>LVr^jiC6CD`SET`F;pme*w4;0m0+ar8|D{j7P zhj$%^uMx_OK-F1w9XP7UZ8uhP)O)tNwaww2$jR>$S=~Q=eI#Lx z&0rB%c1?^*Dh@CQuV89x8Xa{=L1(RY^F#=tp3EP*M40C6uX8-?^IqZAU4MGpX0dC< zBr#_*_pL`Z=qH?Q>zlivKk{A2vOp5n3|}ux7y!xTGI!znw?)YxEqJ~N5RxHYMZ275 z+p7RLs_rhmnbXuQ5D{tSI)+pXSXI%?iJAuUH##WnOt*IX(Fj*NFmdc)aB$-8m0(EoupFNb31PA&OeCriQX z{ZL-EV9kZ8l!gaEj+s!pLz1dKn$kH937R3vIKy0oeVKe_hFe1Nj!l`?Co(dZv$OAI zY;;E#q!KXa-fRW*0B7G~?zuJx0+FP}{g9p=^k*?OIJDaxj#p`ob$76?YM`=Cr)QLJGRw}qyfsqjyz6J5)n4!uQ-(kLrJl7vqtXtYf1zBShqb>$> z?QfIo(YiS#0c4^`iVgKxY9e=q&+6c|hNl6`;UM>%V9aj*?nVWMwCbS~>V8-5d`qTO z)|Qux{_E;QZcsl|0u1kLL>bLg=QML^QO+>a2p%=b`yMzCUd8_opIkWDx_tD+7%<~o zSC~P-&pcJT$2r%Jn7MMEEjH33xlne1Gw(2WJnBmoz48K8D#>-jRIGeEc^Ng znR~C)8cN@)diG}8>#kGS;-@Q!+YQge2N`O&)C^5~sV5Cq<=^wq7%Hn=YV5sOLzT+G z%@P**bkF_$&_^^3?IiF$(r=-#ELQZI`<~I7?=`sp7f1We!_GtXHRL~SG!wGc#2|s=6#3uZbL)zJVGP!hiR=6+9%juGwW@1zQ`!cx7< zOjQ2RZ1qoL&a*L!tPzpEe>(jtJJ`^a^wbb~f*u-H0qTe~f1l1lnJJH0Brv!rt@jHQSvU4PaJoX@K@svCBK@HUKD;@7m4CE0{lZcXtU95H^hz2E^30u z54}cfR;tlpuAG`a8A5rk*}K6LHQk*l$DlpsEl+81tOCd5m#()V0Oz4b>;tyyY;R;29 zYG&(e=?|7&@B<*Q znMy$SZu#ni-c;uMA&1DvW)9c}JpZcavJ*0VQfE8mFNEO+fv}?juTgp$z$CB}ap_jZ zAyLI&)uxSa4V|Wv`4GeSSJx;529Sgq)a*IHFqCG5iJsXmuE!6xmfyCr%5@4lyE`q& zcXubUl{w*>!??~;8NB}c|0sH6uE^$bRZg|%+4{BK><4o4?^&JK9H^xTA$G7wDlm=I7$;+NT~ho3n>=G7N>(FfosknhmeET;i2G)yWN7Wx~ZTbVIRAk#d-tO1uv_5 zl(_a|$KmpAiku=z5KH^3L7@grbDxN37#4aDM>B=>>oeyjnW9$K5ObF;`D9`nJhy9d?nLayU- zz6K2$xd7im(N%#YxHh=`R$l4hZ?^FJZeE#>4^5(*6)*`e*<8bFNJeI(gd4x2J^#B2oG z$5)rpnM4>v(?ThEOlKDX@O=i#cw`c<5~W7x&mRVW!EQ``ikU3>%LdAUGL^YAd4l9i zC({dUV44tbO`g4!hAw4j;S%rrIU9bt-dy2lVp`+a$XM3ssG|#!K7Ue=EYa#-ZmP_I z?4)R>3MQ4NZ|d48w$R9iPut}7@2G(Vg81aca?+r+>?c#xRRPXw?>J8;m>eGr-GSdhNP2fNG!bF@PM|G$!=E4`x zYR@}R2VuJ+_*XAKdw9|p{B^HkAXbSxN-qEn=7TW|=MZ03&h#I5I0bsAm>!>_bgWT& zg#pMz^^*lOO6eIp7HKln@w60H159Ab(FK=LL4=9BwOH@y$MV~nAWX($DCRK$B;%}L zO|29>>n6pEhYNE7z$!T(iy=LNo{)x;ZVIgh<#%rBVz`sFOEHs{o!{f|lN4(MtVznl zB%koB1G80kG%d_TB&CCk7eh*rbPR|5L@45(jOhefx%sUWNeny_2n;8{uE5;ryO$19 z8I-<}5jR1!y30K#vaw-yYN6w2#St@fiCKw!MGeN@=5fEW7YG$73;@0mf9!8aHR_JI z3{jnSU)LNs{1E*52-PL^8{z4oN?Pu8WFxggRRH%>J_zCvhy1+lndGRXbV~kOn7S{J zIOCjSsD)Q}fkp&XXWGwGnlSLr;1^RQ=JF7WksatyFkx$NK1SV!8L72)#mlY)^fS|1 z6{_AJ1(bSSjy+MLd3_O7C(8U`W4RcOyMzZu#vI3glmyMQ;0N+1_(g%&SQa0`i_HDViPl&N5_vfOr3-5LVRYanp~AI)@Tc0P(( zidrjW+jGg`na%#i-LX+JwU9GzW5;)oV7bvNMx%@UVbeyhjyv^eqsK?plopC#dDs0; z9Fp5=f4*^z?}e5JwLGe){}XLIv$YN1)pVNqc}3fMCM{gQ6OEdTx=~tQre7Ib9R~-0 zy5hpM(IbL9CPJ4uZql4B`d{sRXHZmWv~8oJ11KnnAkhFKK{6;va4-=?GDwstIp=6V zL~xa|_&jSk!VmkB=|JbooiR4tA z{46O=*pTQ*T0NwG*;*xxRJ7(wHs5pega(?6^t}d65=49aY~qP7dj7)RD#n6~6O)|X ziPpE2l|SCGCKQvIw>DH3^C)yO{Y;H~(%|a8rFrW{Zt=|QQBXZDHT&k~QnL(EzzGYR zsQIB;Hn?Mtu7GliXh21s_IqcqopPbPGb`lPxTD<1a<0jw`*mY*TcuXbr05U4 zbi{a|);^kc8xx&%W(94VO;))1wOTM?Z{zjhQoVJ%trg5=EIlEML));%i)Ak#`$b0g ztENgyLQSQjSGt4LPtirXS&!w0;JR1D)y_#y3*7>#yGj$Eiq;cZ7}Vb}{#I8ns<+TrtSmOD8ZsaH>^t+}yfExw+7zAZF;%R&k|)e}chLeU(+o zkTYA3=!8v1j!W`Zj(v)95>2&f(1|pD`=m{W)pG0*Z0-}2rRv@3@jm>In>A*GU+1F_ z=MyGmT{zaJ$Da!16q$Ie9vw#Utox<=wT{Xa*rdVxHmc%fS^|oQR&@U>cc@S2x;4V&*UbRKWD9nX*Vzyp;;iRa) zBvbk*bTl{j9-R^qJSt^I)t7iroRxYlN6x#P>H;_v&wlmXHwJKdzZM)A+X#STxVo(C9{NN zEh#7?L$9uE{o@b(h>|50uc`o}n}_dk%jGC3aoHq=f~36NB3q-SRq7;Ef`4blWo?hv zfs@Yu;4u^d#@d-afdNNZ<6*h54k) zm3aM>0wSywsXf*QW59MPqASrG)kzIgK{$MTpvib;PE)XN+jRfy2&d}3BBfQa8*gpKM@EoQJJ2qJe`|_?uTvo1Sjew>a4yN7Z_Shq$&K?K^T{ z*B>jc^<>QRp(PZpW~r1YCk`)Baq7^^#oggWbF#Br>E>C+*XMC)zq1i?Ok*lDam{&X znYI(lqbrTyji;Agrlj%SGjubefiv+~6N=#>Yv(898)s||l<5k>``5WJUc5oT?M|JP zoIeI*RE9+_Rqp%llqWWKx~1X28Sc*r`!(w5kRt+h60Hh49#*A_Kug)nSIF#3f8x zg_`&PWA%F6sIQc{^rph1TA}nf?P5uwny3XGMPt&vfGExZdl4ekjuCd=RCb)N+{IBD zjML2sYSM*gzLup}b7_=L#p#TfX>nO=iG4Q+O2H2Qqzb3$G;BOi!*H-hUfK837pLJCcTKV;VEk7<7zpK`OlYgR zF^=tW1SDDPp3u<0rqIJ&cji7JNgDrZ%)Iq&%IWG;TM5LAGeNCZH0eV zNZ9_lP`27sC+XBA&~#|3E-&(tiP@MYR|*{-2l$BfKNT4*YUGzc(bKgVw*Y4nbGALw zWM`_1PK{nnH0MjYU$IHTU2oi1Ue`#jjtatuc9=;+Ms1qz59ZPokKSLr_Ll*x3)kJ& zz@3?1H+s)ix9!Wz#Oh|iF=tTbboB^hvi6F7n8lRsH36!&PtJ*9oeM*+;2G4uGz#B* zw`Q{wz?8W-&d&YzV6}Z)@C=!E`O2M&w}oNd1w>7rEVD7;MjY|)IF$64eqx_4k3DAX zTx&3%XvL9_N7H-poQ(j0xq&I|+aEQSmNmW_)kNMaBovy*wRBIc;$00JfB1IIw+Hzv zYJ!|MNAJ|T8%^64vMkeLsHNuvtTqM`iLXk|M=#flG9?so zne(^YEuT<4M4`@xFS^Rw3Cw!u1Tio0YO{$Z?A)&)Ok`?S<*uysMmBfVW9;cQ{#13$ z*X@S>DQ!l2naVpovefzLQT3Zo*`zjt3kNq+oHI50MRY#X7T&dM@Jg#sc`BT=*&lJA zwNwgyqn$EHwRg)~EWFgLd^qj5hX->pm1SPS z62@5P%%?-Iy%dV7n7otR)T;pw%P5x5NQh}#O7u0++qlT5swmeqZ`tSUx|VyE$yCm0 zL4x9>!RNhBDr4fBvTc|RUGEwm;71))N#YE7#7j9lM?hNm6oE6OF+ z)9QaXh%G)4$j|2Re9u*W>LcayZOTXL9JUA(Id~hC`0+u=kc*P3dG}8CkW?uy__lrX zEu7$R_L;!dgqxaKyjFbO!u(hpbX8_Y|65^4 zvbeiT3=?*YUv#cf35eI8plaGu;oK-bGp*`zRNlDkt;f6Hv6q7agRx=mmZoawJi*ec zF&`TDz4u!>+;1w!Qc}GJUPfLLG9l=yUjo$2ATApyTV)rGh^2z94+iq zzhNvbW5mo3%ygQd9;!-PpGc!R^?W`Jo3d&Z_q2qSQiATrnMTqsTD3@~KzG=A7~WW5 zAZAT@ln^FhnrcvBhCx@9#eT;e$Sf64?CQC;c*wnF7Ek*m;VC>_t*f(ms0>&H=#lDK z1KZH|u_q7Qja6lgCMruUl9P9@EV%R!T4O&(d?PxPOl6e!+O^b7?}188&Pg4m@>??p z6YI-+%BmvfWLFFIi>~Zszb2-nd&A zvNH6Zdv$p@w>Z~A*c2`)zvgL&J)jqGD@keJ*UJ5b}1z@dSd-0mx-I@yr?Qa-vUqCZi z9yJBP_$~2Ejk;)KEyXp}$-}_nZI&sqv=!qXroHK9`_s#?w^oyWZ7o$tHdGqHrh_cM_cFEN~XL zsprgD`Tq1pv{HWu-eL^2TZYi)Ib<+H$Bb(W~(?fP?VGu=Fc zZWsWF1aw<5ZHcLl)Ti)ocJ9_FJ+<`wD4RGFKrwza(-5Gn_3@7O+y~?Mf=@|@i*s%c za+yH(FS=77{oDv;s7hCdceZz?1)c|Qg= z1+3e)#n}hv9J8b!gnvhwQPY^lQY}NVyGv7WYm6tSyQv)ZWG=B>7u`2NyVv15Tit3G zNx2}ks(1iIphQgFieZALV6~?|ZsagzxHNmxg&ehJGLYyd>fxsTP>dR(p`aa7V9zUr z?e;#Q5t6!rBiY6JsR?+9I&mu~>13=;4N)ySPgIJej*E5E8tjHUb1i_(cy{0P`ObZc zva@l9>9=Kez-K)1)vZYA1MG=42xB@LmK@>2ApAk|d8dQd{Oj_Aw>`%QIRodrj%cJS zEhlEU$V)`=*fZ6*faEH?74On*$^lSm#9D8(52N;DkGgMT%CAnNPxDS4ns%iPiFGj&FSqm!-3)bD(a$uYdh%jVeq(dGY2Z zSZ#cQUef%*Ct&;DYb*B)o6PpL3ZV?qG@aw8K$(8#3u=YrAI84k3&@t+RM+3E({1$@ z)NjmyjoIC9IdjllNwxk-Z$tK$hue^alwMULw#2o-;IU_vLBvX<$!d`9=^)MJ!<&b{ z!}5SX|1Q0@2Ch1GP6;r{6 z`W?lx{Kyh8S38N?OyHkUWrcRZ)!ooX#9E;uZUxuAAD)P0>9?z#?l{Y?SY!>0cAq8V!EcaP=}5YY#9 z3yMexa2Jnr6IX5H0+xPZ0bJPN(XUaQYgR(fYf_WcCh+JYcjuzQrCvHUjp9CaL#O`4 z$va+Wb?p{E4CH5(**q^_+XegM@P_ipo$7Tp5M}_fSp)W;^lJrk(T{39(Kx3W+VU)u zhYGz0L1Je6n4a;>m735=!cbL$%>&fht8KJ9Fj^XrjNme9c+P97WqQxeT1Xthrb!R- zFE8H~xS3TmXXjDwG#wceiU$dWv$09@JJH5&FI0ny)+m3&#e~$X=db|7>fAW1_j?1^ zM*GIu&{R-2#%{lXiAPS+o&W2n;p*p!{w|XL@jCh6)$sKc{u}~%Pwjijzf0%)+z7Q40 z)r%O0JJ%2}fyF-gITmv5AR3Nhd1EYfB>y~w=dP*)01{!^LkV#a(G&psUa>70X)|h( zjpTx6V%8}JU6p=!u;1lYw2dY(k#L~8ql^{i z<4i7$Vh&zuet(UlcPw(Xt`ax{k|JWl=GL0HZFlXw6Fd!3Aroiwn9J$3nW2NMyjzsn z=*TB2@rPsCj56q!w>OUL;Bb*E`YuOO!M@T2FGTUjgFEwOxl~N16PX{qyg1FoNPoQt zmD9F%gJwXPGZKM$8^uxYRTCr|(yFP#kDVJ@pP4cTMWPX8xir%cCVv-Sv&K#j5?s(t zx~*XXp*O&1712G7`qqbqVeeGW;qbJ3awb4ufJ-gZ82PfX>tuv=^LV;oNe(>m5rF}1 z%!@;_ieIEF4_B0LrQT?$l)t^X*DnYOEcE$B&3#-1t#PV-8ZIYOD+lB+*g3l;d!X!e zR7y>&Zi@Ci=i%n=c<1Ml(t;ik2ZeVSf2~9Beq`R{7%)2c3^GsHB)J71B!B|vlPdTz z=^|JrvjL}~W0BJZab{$FJe4(Qy*-l6(mO*-G3VjWon%@h_#kKmoFJ{JQx+lz7E)_t zr8$qO#2Hl}{gM|F+zk1wqun85J`GV7jAutK1ZIQ)9iw{C=e$EA)e_C^3^5O~U=`LH z$zt0-Dj?YaP$hxrLLfz~qpKQoU9jdEARQ3Pcib+LjKPN9Z!9?YV`n9Y9RF)QKK&XM zFYuh29O4JfKcA_F>>0ZB<)p|B0H*^r&GO9&yuIXTxKfG(&!2-t`08QB zh%FwFlJ~^LspK*S1hT9a|4a(D<*<$anVhUgZy~A446AY2=%|~VgE!5i(mZqHjR-67 zd7q0Yf!HEft(Fm%Sm*9Wqk2aPBjD7WpH=h`q*IiY7_ueW-__H}!+un+w{|L_vp}S6 zf})9H@|@1z%E8}GbjT%NfQSh`nEA<}`(3t+ny~&d_vf%UR=m-Iw+C+FnKb)rNX1yF zDjaF1w^wMQN?K>|ngIM~yzn9CwDMlW`&V;P#!QjZj0R;6o3roO!~b%<>`x8>C%=dq4Ij`n zZY4dimNVOfIdhn3Bm*k+8(<2Vve^_qC_0MVCmd$ZXj-ph=_V>=WsQHLPx>$ z;#W)6l-xP}J}rGY{cGqp!pQu|Gg{P0%5P$)!ayo1x2bS4t`=sDJvmchNRVyb&2cJHA}_4irRm9 zk^RMAJNC^OY({E#Z-pJ5@;YLRC|eSrV~>z*h>x?=*A}tf6f%uoG%;G5r|v@J5A<|D zGO)Br!V#%`u&jT}jHRd|Qwf<6$A5S4oxs5A1tJQ@i;tFd#TdQ2G+dU{B^f=)7neuN z?CezfVm#K2DD!X?zgCE%PMV>p@{=c91dK)N2mFDkwIXv!87njiMhy>cCg^%4s`$<) zH>u4-Vnq^t`0%Jdr>ShS&aUvu;7`Dm7>h$tiR)XQ>7S7#J52B0tIfC@Dj>yz_Oy`v z6W-M1vn7(#E-9CW7}Mt{CY&if=b$rOCNhH$wNtye|E2dXqFb)wM;zvHl%`2X02aM& zf1$J5&cvJ{blbd-e{WS>IvSP`o;)6ziy zbl>iL02(q8x3h0@6;TbZ58WbO=S|3N(<8W#!I2pY9J-K=8}#bt**{x-Eq(u?K|~`W zIDq1T&j;>RJZk*j`{jwZch1@pDcjTMYnqNCm5 z$KA>Ne#jjbcjyBY@Z(*7y!>7yYR-83LJx9ii0s=J)gNtQ^K6p&30Yocum!{k?1lN-U(Ya3%w%FW&sklc za{ujPmvrB7q1Jqn7r;3=CjMzTG|T=!Az5tESb{dA92=rv+j%J|ASevlw9eq5=MyfGH(RwO9t1C6AuT;ROJubtGD6RS^7_3^Qp_k!=&#=knS_7Zxi7689 zhv)tt2N_U?bE>t7qH1D0%X8!XxP&*RH3t+*$kACK1 zl2FIn1bhQhHVgIE?syQ)GW>nNKX2Tu;t}KYVo*gV17rj5@^e(QXw9Zx`2{MDXzWus zN})IZK1xd6w1mls6i-@q6@HQz^gdWk#iGYt2Yzp37+%Avx6%J|f8+(absHUiVzt_t z(rn`OO!*L{&&4g>*wukGjUr)o9AWhBe{2MK!5oESW+4KMTz?puX}Z~Vll~O95I~DC6bK$*lM>=PNtmBB$qm!4)%<8C%o;Fh^gAgbsp7I)yDpNYPvY1x}l*V z^+)*a)T@lA7sdBZIj;25?hJ|g(5Yju_u&sGDmS+Wa~xgCU|k3Q{_q5j*_ue_i}&)O zviQn@>}pcT?7At+FxfU$I}RR%ANFF{ld#FMU@Fm`|N7+2qlTy|7MC*+V6iXd-&gz` z&hT>IOw04MU3?^R10|IjK((;K9H6YNn&G`zlxc`ts_uKn2DZ?K7}S4QR?J&2XO4g5 z%Gca@&VP!gmD&H7>PD|+cW;l97$g(*FYjAdt&=4~`3N8-HW%jSLz$3@nwgoVuOI&E zc*1=IGHy0=Ys)F&mhF|rrfOUxEjs1-bAoljEEfW%#g&zTu&WQDGfBZ!4SpIGDB})A zmnl!5WR`NO)Yi#YgQBu_m19b7hZY9$P16eI=H{O*8_RZgciTp_IHRDZu3Ii5YdaqB7d|2nqq@1f_YV%HOEO)-I>}DnyUC5Yh`UUE znvITB22DrmC&CZ{b-RDq+`9J7?_4(2d=KYl$%2B9kvBB26_cUXsX!1aO|9?nb92Mp z8h=0Ib3R-u@4*KJdJ&f{kvBZ|uAGDFh?&{hGEk=tfdcTwz9JFjzR?YzB@z5`(U$Z@3)gL>k0G{ z7gty1Z)IBk=J#b`VL|cI*)F7fqNZk?E#uhOn6TG=nd{ouv;Oyx5um_2>@_zhc~z~* z49-Q-itpNG#ic-dPfyRrCKDyxF+DHr%F3fSI=L+dH z85vQA-YJgE))mxIZL9dWQ;KKKoS9u#%hTd%(p6JqN$+K4<#}-O&oJylDoV62*p4%%X`>Zm~~r<)h#+zewu1~%x^v#t#5ds z&}|?OY)qKsy@$bc-B1&`H}R}=%>t{}%4MnQ>S|}heN;}+2`+B=^0Ae7ucW-aF|Hq# z6cm0p;`GV64|^`|oQXC2CcwDHzwDb8KtxK!e4lx1r4C;NW2P zP?SNwr35KlS!AjtUEBr*bK72i%*%sK@*(8s=TFIvhq|7su%RhKb3$WP>DAR^vMU3F zgXU0#S9$4}5PTid z*Y#P}d{Goi`RB1{^fqB&Y+M{g2L~ewR@?BVBE;)Xn$|-Ro0SAQc6nUuCu(k_5v_bz+}yZ!yGwl$Q%xVx(V=E=P`8sWFjv zPfqH!9N9x&N2&X@&PbQ%78dsI3+>!Hi!x+)6{84x zKru3Hd-}MZFrdiSY;bkN^OKKpQJ-EY9@ObY3|Lz`_xLGNrf-a-evVW1M7|Q2mxl_j z8YNj{4oWl>C_2?SX4+!-v;@z5d)oa>87c70lvz+YZVNq?mw3ZHHY$xcsi z+Fzm-VUX|O@(<1*-*gc%<;tX!_was7+K4hI_LU$$aSVpMS*s6tI~&>*F$7YAs*hK4WLJluOHK0=E=udV|3L zG(Nv`2RaG0?56Ph?D*avK>g_7-CU#~jkOTe{5&NENY5G`@uM~BG$5PtmFupU#+smU z)$caZ3^BFzT@w@5c@pBo1E*gjEdVHY5T6D^cUm3K&DAVzu_|S!BQ-xdJXly=?QB;6 z^8F(K<98cbw;b3`sDmmkxw0}+9MBMn3JAD&g@&41vP^d5Eat2sH?=Z1^*abHP_h&n z48%UJo9OS4=vpB_orV&_N@{9R@4KJ1c;cGapsmTQR61-?7F4MgsiXJ5*Cwcr3MHbf zLak-Je}830Fuga%2CKju(qy1I{7M4E(ROQeFrCo*s}F+%_r8_q?H>=lPDdJdiVjXW zPS7%T!(e)}ps&B5d1KV6atw(#05DLrraQzd1^VX1;?uK3d8!~{UR({(<^IzHrce7y z2)k`$Xq3-EPbd4iM_JEM0XPVBE+RB^bjkp<*Uu};%ZF(ALMNPCR;Oij9uLf|H^VNj zN35(^JrO{ye_I)=WNygX`_P@?=H^D8Ws~H6xD(iP4Y14|zak*dFbI{dlauSJgn8&l zvoRR)Yzi!DmWs`Vpv|l~AfF(bJ}^u5!>Sd;V%3n<*Ae1;@!+0>1J^oD2Dr7Su=54`vf{>rkCp3MutV!d0cm89CJ59cH8G3N3<& zLgcB^r>yz%NKxG0-h->y`^anksJY)AmD369fVJm*4qDwyqPyBtY?v%Z;^S`t9n3`P;ziQ^ zL-=B*h-^>R8baDv?;@@_@y?|?FQ}rYr?RnAax;aDzny4Hs@7R88+`ycq~i=_X=i%O z^%#(*CUf-3kFTe?iPxlGyOE4CY+c+;vy`C!oa44B7lSN=?q5)Y{z^J#^Y}d_bjbs6*)I;_i#Vcj{}H~T($cv8n)dc~CT9W? z5?={u4riJ@3Gs2?3$t^yeP1tCJ%@X$3pd@Q^rV|k+)HHIfS`?Wdb2Uex;2!J1$xCo zxPiBWH7IUT5c`sk$QV6&LxW-hRmM?2-#pyg`vEo+5Idu$Ml6{oA2vVvu_TZKmo9Nr;F_Zwsm-BW|+qQD0wQ{T0btky5}D zXz>%r^5Qf@$ir;aTy*CgEuJaVmM|PD3Fzu3!NP^8Vy{0S@Og?zpCMVYzw!X6&}v^k z;3L1T+CCtnf4%F~gS#m?_(UWVPv@B4a>+ zn`wExTGOi39rVT}P2e*lU;#|c)3}V{Vn_Hly}ZjEsILN3#6IP(iFHtXjgs)&fZE#H z)4{*wNo_1_Ycvnk)<^4`w0nw8oDTU_#=6$+SvN|r(PE@X3PEb@(_hO`zW`|e>-yK@ zAb4}z@q~l~5G3JDP#@eBx=NUqx^E4e0PSLy;;Q=j0^AHt4lMjXq=*#QKLGbgm1`jq z1HFK+|%wiDJ6d5~~vcoh)1S$jG_7mcWyS407qA(Z^00G;ATRdl2e8|OkM z{CLWvCHZOO_P+gsj0G&V8|$6*V=7$ul56DzmVV{moGHBx?8~ zHT7fgAUMC7O*b$KhX)2CZG6rHXMWUD-xLe*3cQAuj+C9;f4=tlaf(FQ*eqGw ztjfw!ky~Ia5D-+MS>R5klY_$#4-Qo0!+3&F^Lk2@Jpn8#5pY9*q6%UgE0NB$nADnE z^=zkD5|@!?>1giTx5P*fKt+zH@vL>Ur%wV=ECLB4C2s*?x*Z1sl4a@kPWgcs#?{+{ z&~D8IOqntWT0-oj(yo#FXQZYwe`iu~bS&O+J>&NUREaSM_oD$xG%zRV%D8h2ZUH=$ zUf4krupgOsu&iy%8&-5*PY>G0X3nWnN&l+P{?)&|(dYhvkLzb(CRU{~(z3JC{>v9( zYbZu;8pfjPONFWPmtTMYK`4evF3f4i-lH?qp)(=R^B!Qcx3_o8GS*Fx;43|-BPhxY za;0^K_sDyug>rpvyJc7Qlo)uebfqV!+%*Kz(&L$~q@n&Xfi^3}pYzV_F67X2{v@Q@{3bWnO{p7$?TjrqfR%Og&HxPO*3eg3>TDHHT6pth#_703!SK)kJ zt94wf$8D*!2tvhyyOclBBH*S%awK7|U!UZwqXquJ1vykk|sgBcCnbtK4z6 ziN&(8z_j<;u!W$#gaOBuF0h0vjR@j4fH zD0EwaxL)MBw^bF`YgHO&QZeB&9hAc`3XL>jo`lB;AP~p)*Rni{e+&*>rbS%a<}ZFd zCPRD+6l0BFcvvr18SDbK5du1Zp6fBzB$9MgwAf#u5uG~^GvIqb@*0@M`1ts%t<%j> zOVs@}Xpk>i&=Ie7*=f#`_p!FN<>9x{(YVcNOTjoq)3~n)0sM_tB~ThXAO3=Mi1n;{ zS*O=XOl9ztLQ114QA@S`R>C9bIC~$+EP!7^iaK3TNHWTp>YqCU+e@K23I*$$wG7nBAKWjmuJ-&~IITF#H{VRc1X<82@kJ1*P9v66*77Uo z7#IuDWXclBT}4y^QdDYz6q2Z%=eLeu8hpc!GQRqRAGIF%<$GxBj3PI6AKazw!bxn+ z&uL9&I&hIQ@%NkI+4+gjQulsWK63_bxMkBq1=bWCOzQjPDWr+2H+p2upi3aT`_-^F zCr_U28y(F?0>7dK@5TqlgX>RkvksUKZPS;ZCW_WZI?lLoiMbG9i7> zkDog4e-Gq&yKSIJ)$)>4rPIo{n8oB{(I*Ygg>HB5`ctqtOx63pT84=^Ee(a)G5@|# zp!z4 z;sl|P2|bb_rOG-0zb_uI27g-s&rX`4e%Xtar7i_?G%zrbQ2A7_jO2hO2y2&k$4$nj zabM@wjYNL4y+!ACxHAU{5-W!5!^=+KrIzDW8eSOhCkD_yEp*K4rrIBo`YZvED1`M3 z-8#nc;_tJLBZQF+_(b7LB!6Caw$u&J{Pp_(_M?aYM4*1n;(zPgD*rQP_WuV)cHmzW o5X|$}uKd^E2>O3+k28))2;M~bAdd an LOB publisher (Admin) +The process and timing look like this: +![Process showing LOB workflow in Microsoft Store for Business. Includes workflow for MSFB admin, LOB publisher, and Developer](images/lob-workflow.png) +## Add an LOB publisher (Admin) Admins need to invite developer or ISVs to become an LOB publisher. **To invite a developer to become an LOB publisher** @@ -47,6 +49,7 @@ Admins need to invite developer or ISVs to become an LOB publisher. 1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com). 2. Click **Manage**, click **Permissions**, and then choose **Line-of-business publishers**. 3. On the Line-of business publishers page, click **Invite** to send an email invitation to a developer. + >[!Note] > This needs to be the email address listed in contact info for the developer account. From f9807b4dbdf6f7135730e613a2fdd141ebeabfc8 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 20 Mar 2018 10:12:12 -0700 Subject: [PATCH 107/138] fixed some cross-docset links hopefully --- windows/deployment/update/device-health-get-started.md | 4 ++-- .../update/windows-analytics-FAQ-troubleshooting.md | 4 ++-- windows/deployment/upgrade/upgrade-readiness-get-started.md | 6 +++--- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/device-health-get-started.md b/windows/deployment/update/device-health-get-started.md index 70a781cb0d..4a72395427 100644 --- a/windows/deployment/update/device-health-get-started.md +++ b/windows/deployment/update/device-health-get-started.md @@ -5,7 +5,7 @@ keywords: Device Health, oms, operations management suite, prerequisites, requir ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library -ms.date: 03/15/2018 +ms.date: 03/20/2018 ms.pagetype: deploy author: jaimeo --- @@ -72,7 +72,7 @@ Once you've added Update Compliance to Microsoft Operations Management Suite, yo ## Use Device Health to monitor frequency and causes of device crashes -Once your devices are enrolled, you can move on to [Use Device Health](device-health-using.md). +Once your devices are enrolled, you can move on to [Using Device Health](device-health-using.md). ## Related topics diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 6314e24f8e..6f9ab33923 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/16/2018 +ms.date: 03/20/2018 --- # Frequently asked questions and troubleshooting Windows Analytics @@ -25,7 +25,7 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win [Upgrade Readiness reports outdated updates](#upgrade-readiness-reports-outdated-updates) -[Upgrade Readiness reports incomplete inventory](#upgrade-readiness-reports-incomplete-inventory) +[Upgrade Readiness shows many "Computers with outdated KB"](#upgrade-readiness-shows-many-computers-with-outdated-kb) [Upgrade Readiness doesn't show app inventory data on some devices](#upgrade-readiness-doesnt-show-app-inventory-data-on-some-devices) diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index c7fa20adf6..9d80d93f94 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -6,7 +6,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy author: jaimeo -ms.date: 03/18/2018 +ms.date: 03/20/2018 --- # Get started with Upgrade Readiness @@ -30,7 +30,7 @@ When you are ready to begin using Upgrade Readiness, perform the following steps ## Data collection and privacy -To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics, refer to [Frequently asked questions and troubleshooting Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md), which discusses the issues and provides links to still more detailed information. +To enable system, application, and driver data to be shared with Microsoft, you must configure user computers to send data. For information about what diagnostic data Microsoft collects and how that data is used and protected by Microsoft, see the following topics, refer to [Frequently asked questions and troubleshooting Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-FAQ-troubleshooting), which discusses the issues and provides links to still more detailed information. ## Add Upgrade Readiness to Operations Management Suite @@ -54,7 +54,7 @@ If you are not using OMS: ## Enroll devices in Windows Analytics -Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-get-started.md). +Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-get-started). From 07d54eba25c058ef15a85b271a5023d38561be79 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 20 Mar 2018 14:42:32 -0700 Subject: [PATCH 108/138] added surface info --- .../bitlocker/bitlocker-recovery-guide-plan.md | 11 +---------- 1 file changed, 1 insertion(+), 10 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md index 9e780394d7..ef20349b31 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md +++ b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md @@ -24,15 +24,6 @@ This article assumes that you understand how to set up AD DS to back up BitLock This article does not detail how to configure AD DS to store the BitLocker recovery information. -This article contains the following topics: - -- [What Is BitLocker Recovery?](#bkmk-whatisrecovery) -- [Testing Recovery](#bkmk-testingrecovery) -- [Planning Your Recovery Process](#bkmk-planningrecovery) -- [Using Additional Recovery Information](#bkmk-usingaddrecovery) -- [Resetting Recovery Passwords](#bkmk-appendixb) -- [Retrieving the BitLocker Key Package](#bkmk-appendixc) - ## What is BitLocker recovery? BitLocker recovery is the process by which you can restore access to a BitLocker-protected drive in the event that you cannot unlock the drive normally. In a recovery scenario you have the following options to restore access to the drive: @@ -109,7 +100,7 @@ Before you create a thorough BitLocker recovery process, we recommend that you t 2. At the command prompt, type the following command and then press ENTER: `manage-bde. -ComputerName -forcerecovery ` -> **Note:**  Recovery triggered by `-forcerecovery` persists for multiple restarts until a TPM protector is added or protection is suspended by the user. +> **Note:**  Recovery triggered by `-forcerecovery` persists for multiple restarts until a TPM protector is added or protection is suspended by the user. When using Modern Standby devices (such as Surface devices), the `-forcerecovery` option is not recommended because the OS will not boot after the recovery key is entered. Instead, the BitLocker recovery screen reappears until BitLocker protection is suspended or teh OS drice is decrypted.   ## Planning your recovery process From 004a68d447add51564f1e2d48909c8af6ae7808d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 20 Mar 2018 14:47:27 -0700 Subject: [PATCH 109/138] added surface info --- .../bitlocker/bitlocker-recovery-guide-plan.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md index ef20349b31..94f1153940 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md +++ b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md @@ -100,7 +100,7 @@ Before you create a thorough BitLocker recovery process, we recommend that you t 2. At the command prompt, type the following command and then press ENTER: `manage-bde. -ComputerName -forcerecovery ` -> **Note:**  Recovery triggered by `-forcerecovery` persists for multiple restarts until a TPM protector is added or protection is suspended by the user. When using Modern Standby devices (such as Surface devices), the `-forcerecovery` option is not recommended because the OS will not boot after the recovery key is entered. Instead, the BitLocker recovery screen reappears until BitLocker protection is suspended or teh OS drice is decrypted. +> **Note:**  Recovery triggered by `-forcerecovery` persists for multiple restarts until a TPM protector is added or protection is suspended by the user. When using Modern Standby devices (such as Surface devices), the `-forcerecovery` option is not recommended because the OS will not boot after the recovery key is entered. Instead, the BitLocker recovery screen reappears until BitLocker protection is suspended or the OS drive is decrypted.   ## Planning your recovery process From 701e7b2ea738a15f798faf0c3a9ca147e153011c Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 20 Mar 2018 21:49:03 +0000 Subject: [PATCH 110/138] Merged PR 6507: Connectivity/AllowPhonePCLinking policy - added to Policy CSP --- .../policy-configuration-service-provider.md | 3 + .../mdm/policy-csp-connectivity.md | 77 ++++++++++++++++++- 2 files changed, 79 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index c5ec170ba9..7ab9c9e7f4 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -573,6 +573,9 @@ The following diagram shows the Policy configuration service provider in tree fo
    Connectivity/AllowNFC
    +
    + Connectivity/AllowPhonePCLinking +
    Connectivity/AllowUSBConnection
    diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index faf33814cc..e07d5f9e02 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -6,11 +6,13 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/12/2018 +ms.date: 03/14/2018 --- # Policy CSP - Connectivity +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
    @@ -34,6 +36,9 @@ ms.date: 03/12/2018
    Connectivity/AllowNFC
    +
    + Connectivity/AllowPhonePCLinking +
    Connectivity/AllowUSBConnection
    @@ -355,6 +360,76 @@ The following list shows the supported values:
    + +**Connectivity/AllowPhonePCLinking** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobile Enterprise
    cross markcheck mark4check mark4check mark4check mark4
    + + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Added in Windows 10, version 1803. This policy allows IT admins to turn off the ability to Link a Phone with a PC to continue tasks, such as reading, email, and other tasks that require linking between Phone and PC. + +If you enable this policy setting, the Windows device will be able to enroll in Phone-PC linking functionality and participate in 'Continue on PC experiences'. If you disable this policy setting, the Windows device is not allowed to be linked to phones, will remove itself from the device list of any linked Phones, and cannot participate in 'Continue on PC experiences'. +If you do not configure this policy setting, the default behavior depends on the Windows edition. Changes to this policy take effect on reboot. + + + +ADMX Info: +- GP name: *enableMMX* +- GP ADMX file name: *grouppolicy.admx* + + + +This setting supports a range of values between 0 and 1. + +- 0 - Do not link +- 1 (default) - Allow phone-PC linking + + + + + + + +Validation: + +If the Connectivity/AllowPhonePCLinking policy is configured to value 0, the add a phone button in the Phones section in settings will be greyed out and clicking it will not launch the window for a user to enter their phone number. + +Device that has previously opt-in to MMX will also stop showing on the device list. + + + +
    + **Connectivity/AllowUSBConnection** From 6148bd81471a71dd7a9d285bb0bc292c677e53aa Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 20 Mar 2018 21:52:35 +0000 Subject: [PATCH 111/138] Merged PR 6508: Configuration service provider reference topic updated --- .../mdm/configuration-service-provider-reference.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 691891af81..2ca9f64f6a 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -2631,6 +2631,8 @@ The CSPs supported in Windows 10 S is the same as in Windows 10 Pro except that - [CellularSettings CSP](cellularsettings-csp.md) - [CertificateStore CSP](certificatestore-csp.md) - [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) +- [CMPolicy CSP](cmpolicy-csp.md) +- [CM_ProxyEntries CSP](cm-proxyentries-csp.md) - [CM_CellularEntries CSP](cm-cellularentries-csp.md) - [Defender CSP](defender-csp.md) - [DevDetail CSP](devdetail-csp.md) @@ -2640,6 +2642,8 @@ The CSPs supported in Windows 10 S is the same as in Windows 10 Pro except that - [DiagnosticLog CSP](diagnosticlog-csp.md) - [DMAcc CSP](dmacc-csp.md) - [DMClient CSP](dmclient-csp.md) +- [eUICCs CSP](euiccs-csp.md) +- [Firewall CSP](firewall-csp.md) - [EMAIL2 CSP](email2-csp.md) - [EnterpriseAPN CSP](enterpriseapn-csp.md) - [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md) @@ -2669,4 +2673,5 @@ The CSPs supported in Windows 10 S is the same as in Windows 10 Pro except that - [WiFi CSP](wifi-csp.md) - [Win32AppInventory CSP](win32appinventory-csp.md) - [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) +- [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) - [WindowsLicensing CSP](windowslicensing-csp.md) From 1f6347f36ce88c886814fc343e741f023165b839 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 20 Mar 2018 22:16:34 +0000 Subject: [PATCH 112/138] Merged PR 6509: AssignedAccess CSP - updated some links --- .../mdm/assignedaccess-csp.md | 29 +++++++++++-------- 1 file changed, 17 insertions(+), 12 deletions(-) diff --git a/windows/client-management/mdm/assignedaccess-csp.md b/windows/client-management/mdm/assignedaccess-csp.md index b08768dc86..48635d81a9 100644 --- a/windows/client-management/mdm/assignedaccess-csp.md +++ b/windows/client-management/mdm/assignedaccess-csp.md @@ -7,20 +7,20 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/01/2018 +ms.date: 03/20/2018 --- # AssignedAccess CSP -The AssignedAccess configuration service provider (CSP) is used set the device to run in kiosk mode. Once the CSP has been executed, then the next user login that is associated with the kiosk mode puts the device in the kiosk mode running the application specified in the CSP configuration. +The AssignedAccess configuration service provider (CSP) is used to set the device to run in kiosk mode. Once the CSP has been executed, then the next user login that is associated with the kiosk mode puts the device into the kiosk mode running the application specified in the CSP configuration. For a step-by-step guide for setting up devices to run in kiosk mode, see [Set up a kiosk on Windows 10 Pro, Enterprise, or Education.](http://go.microsoft.com/fwlink/p/?LinkID=722211) In Windows 10, version 1709, the AssignedAccess configuration service provider (CSP) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using a provisioning package. For a step-by-step guide, see [Create a Windows 10 kiosk that runs multiple apps](https://docs.microsoft.com/en-us/windows/configuration/lock-down-windows-10-to-specific-apps). > [!Note] -> The AssignedAccess CSP is supported in Windows 10 Enterprise and Windows 10 Education. Starting in Windows 10, version 1709 it is also supported in Windows 10 Pro and Windows 10 S. +> The AssignedAccess CSP is supported in Windows 10 Enterprise and Windows 10 Education. Starting from Windows 10, version 1709 it is also supported in Windows 10 Pro and Windows 10 S. The following diagram shows the AssignedAccess configuration service provider in tree format @@ -30,10 +30,14 @@ The following diagram shows the AssignedAccess configuration service provider in Root node for the CSP. **./Device/Vendor/MSFT/AssignedAccess/KioskModeApp** -A JSON string that contains the user account name and Application User Model ID (AUMID) of the Kiosk mode app. For more information about how to get the AUMID, follow the information in [this Microsoft website](http://go.microsoft.com/fwlink/p/?LinkId=404220). +A JSON string that contains the user account name and Application User Model ID (AUMID) of the Kiosk mode app. For more information about how to get the AUMID, see [Find the Application User Model ID of an installed app](https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/find-the-application-user-model-id-of-an-installed-app). + +For a step-by-step guide for setting up devices to run in kiosk mode, see [Set up a kiosk on Windows 10 Pro, Enterprise, or Education.](http://go.microsoft.com/fwlink/p/?LinkID=722211) > [!Note] -> You cannot set both KioskModeApp and Configuration at the same time in the device in Windows 10, version 1709. +> You cannot set both KioskModeApp and Configuration at the same time in the device in Windows 10, version 1709. +> +> You cannot set both KioskModeApp and ShellLauncher at the same time on the device. In Windows 10, version 1607, you can use a provisioned app to configure the kiosk mode. For more information about how to remotely provision an app, see [Enterprise app management](enterprise-app-management.md). @@ -44,9 +48,9 @@ Here's an example: ``` > [!Tip] -> In this example the double \\\ is only required because it's in json and json escapes \ into \\\\. If MDM server uses json parser\composer, they should only ask customer to type one \\, which will be \\\ in the json. If user types \\\\, it'll be \\\\\\\ in json, which is wrong. For the same reason, domain\account used in Configuration xml does not need \\\ but only one \\, because xml does not (require) escape \\. +> In this example the double \\\ is required because it's in JSON and JSON escapes \ into \\\\. If an MDM server uses JSON parser\composer, they should ask customers to type only one \\, which will be \\\ in the JSON. If user types \\\\, it'll become \\\\\\\ in JSON, which will cause erroneous results. For the same reason, domain\account used in Configuration xml does not need \\\ but only one \\, because xml does not (need to) escape \\. > -> This comment applies to both domain\account, AzureAD\someone@contoso.onmicrosoft.com, i.e. as long as a \ used in json string.  +> This applies to both domain\account, AzureAD\someone@contoso.onmicrosoft.com, i.e. as long as a \ used in JSON string.  When configuring the kiosk mode app, the account name will be used to find the target user. The account name includes domain name and user name. @@ -59,11 +63,10 @@ For a local account, the domain name should be the device name. When Get is exec The supported operations are Add, Delete, Get and Replace. When there's no configuration, the Get and Delete methods fail. When there's already a configuration for kiosk mode app, the Add method fails. The data pattern for Add and Replace is the same. **./Device/Vendor/MSFT/AssignedAccess/Configuration** -Added in Windows 10, version 1709. Specifies the settings that you can configure in the kiosk or device. This node accepts an AssignedAccessConfiguration xml as input to configure the device experience. For details about the configuration settings in the XML, see [Create a Windows 10 kiosk that runs multiple apps](https://docs.microsoft.com/en-us/windows/configuration/lock-down-windows-10-to-specific-apps).Here is the schema for the [AssignedAccessConfiguration](#assignedaccessconfiguration-xsd). +Added in Windows 10, version 1709. Specifies the settings that you can configure in the kiosk or device. This node accepts an AssignedAccessConfiguration xml as input to configure the device experience. For details about the configuration settings in the XML, see [Create a Windows 10 kiosk that runs multiple apps](https://docs.microsoft.com/en-us/windows/configuration/lock-down-windows-10-to-specific-apps). Here is the schema for the [AssignedAccessConfiguration](#assignedaccessconfiguration-xsd). > [!Note] > You cannot set both KioskModeApp and Configuration at the same time on the device in Windows 10, version 1709. -> You cannot set both ShellLauncher and Configuration at the same time on the device. Enterprises can use this to easily configure and manage the curated lockdown experience. @@ -97,12 +100,14 @@ Additionally, the status payload includes a profileId, which can be used by the Supported operation is Get. **./Device/Vendor/MSFT/AssignedAccess/ShellLauncher** -Added in Windows 10,version 1803. This node accepts a ShellLauncherConfiguration xml as input. Click [link](#shelllauncherconfiguration-xsd) to see the schema. +Added in Windows 10,version 1803. This node accepts a ShellLauncherConfiguration xml as input. Click [link](#shelllauncherconfiguration-xsd) to see the schema. For more information, see [Shell Launcher](https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/shell-launcher). > [!Note] -> You cannot set both ShellLauncher and Configuration at the same time on the device. +> You cannot set both ShellLauncher and KioskModeApp at the same time on the device. > -> Configuring Shell Launcher using the ShellLauncher node automatically enables the Shell Launcher feature if it is available within the SKU. +> Configuring Shell Launcher using the ShellLauncher node automatically enables the Shell Launcher feature if it is available within the SKU. I. Shell Launcher as a feature and the ShellLauncher node both require Windows Enterprise or Windows Education to function. +> +>The ShellLauncher node is not supported in Windows 10 Pro. **./Device/Vendor/MSFT/AssignedAccess/StatusConfiguration** Added in Windows 10, version 1803. This node accepts a StatusConfiguration xml as input to configure the Kiosk App Health monitoring. There are three possible values for StatusEnabled node inside StatusConfiguration xml: On, OnWithAlerts, and Off. Click [link](#statusconfiguration-xsd) to see the StatusConfiguration schema. From f2a00934e98de4d58e396d233d37aa85d447daf5 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 20 Mar 2018 23:27:59 +0000 Subject: [PATCH 113/138] Merged PR 6515: Policy CSP - removed outdated list for IoT, Holographic, and Surface Hub removed outdated list for IoT, Holographic, and Surface Hub --- .../policy-configuration-service-provider.md | 230 ------------------ 1 file changed, 230 deletions(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 7ab9c9e7f4..42c5737c3e 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -4459,235 +4459,6 @@ The following diagram shows the Policy configuration service provider in tree fo - [WirelessDisplay/AllowProjectionToPC](./policy-csp-wirelessdisplay.md#wirelessdisplay-allowprojectiontopc) - [WirelessDisplay/RequirePinForPairing](./policy-csp-wirelessdisplay.md#wirelessdisplay-requirepinforpairing) - -## Policies supported by IoT Core - -- [ApplicationManagement/AllowDeveloperUnlock](#applicationmanagement-allowdeveloperunlock) -- [Authentication/AllowFastReconnect](#authentication-allowfastreconnect) -- [Bluetooth/AllowAdvertising](#bluetooth-allowadvertising) -- [Bluetooth/AllowDiscoverableMode](#bluetooth-allowdiscoverablemode) -- [Bluetooth/LocalDeviceName](#bluetooth-localdevicename) -- [Bluetooth/ServicesAllowedList](#bluetooth-servicesallowedlist) -- [Browser/AllowAutofill](#browser-allowautofill) -- [Browser/AllowBrowser](#browser-allowbrowser) -- [Browser/AllowCookies](#browser-allowcookies) -- [Browser/AllowDoNotTrack](#browser-allowdonottrack) -- [Browser/AllowInPrivate](#browser-allowinprivate) -- [Browser/AllowPasswordManager](#browser-allowpasswordmanager) -- [Browser/AllowPopups](#browser-allowpopups) -- [Browser/AllowSearchSuggestionsinAddressBar](#browser-allowsearchsuggestionsinaddressbar) -- [Browser/EnterpriseModeSiteList](#browser-enterprisemodesitelist) -- [Browser/EnterpriseSiteListServiceUrl](#browser-enterprisesitelistserviceurl) -- [Browser/SendIntranetTraffictoInternetExplorer](#browser-sendintranettraffictointernetexplorer) -- [Camera/AllowCamera](#camera-allowcamera) -- [Cellular/ShowAppCellularAccessUI](#cellular-showappcellularaccessui) -- [Connectivity/AllowBluetooth](#connectivity-allowbluetooth) -- [Connectivity/AllowCellularDataRoaming](#connectivity-allowcellulardataroaming) -- [Connectivity/AllowNFC](#connectivity-allownfc) -- [Connectivity/AllowUSBConnection](#connectivity-allowusbconnection) -- [Connectivity/AllowVPNOverCellular](#connectivity-allowvpnovercellular) -- [Connectivity/AllowVPNRoamingOverCellular](#connectivity-allowvpnroamingovercellular) -- [Connectivity/DiablePrintingOverHTTP](#connectivity-diableprintingoverhttp) -- [Connectivity/DisableDownloadingOfPrintDriversOverHTTP](#connectivity-disabledownloadingofprintdriversoverhttp) -- [Connectivity/DisableInternetDownloadForWebPublishingAndOnlineOrderingWizards](#connectivity-disableinternetdownloadforwebpublishingandonlineorderingwizards) -- [Connectivity/HardenedUNCPaths](#connectivity-hardeneduncpaths) -- [Connectivity/ProhibitInstallationAndConfigurationOfNetworkBridge](#connectivity-prohibitinstallationandconfigurationofnetworkbridge) -- [CredentialProviders/AllowPINLogon](#credentialproviders-allowpinlogon) -- [CredentialProviders/BlockPicturePassword](#credentialproviders-blockpicturepassword) -- [DataProtection/AllowDirectMemoryAccess](#dataprotection-allowdirectmemoryaccess) -- [Privacy/LetAppsGetDiagnosticInfo](#privacy-letappsgetdiagnosticinfo) -- [Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps](#privacy-letappsgetdiagnosticinfo-forceallowtheseapps) -- [Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps](#privacy-letappsgetdiagnosticinfo-forcedenytheseapps) -- [Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps](#privacy-letappsgetdiagnosticinfo-userincontroloftheseapps) -- [Privacy/LetAppsRunInBackground](#privacy-letappsruninbackground) -- [Privacy/LetAppsRunInBackground_ForceAllowTheseApps](#privacy-letappsruninbackground-forceallowtheseapps) -- [Privacy/LetAppsRunInBackground_ForceDenyTheseApps](#privacy-letappsruninbackground-forcedenytheseapps) -- [Privacy/LetAppsRunInBackground_UserInControlOfTheseApps](#privacy-letappsruninbackground-userincontroloftheseapps) -- [Security/AllowAddProvisioningPackage](#security-allowaddprovisioningpackage) -- [Security/AllowRemoveProvisioningPackage](#security-allowremoveprovisioningpackage) -- [Security/RequireDeviceEncryption](#security-requiredeviceencryption) -- [Security/RequireProvisioningPackageSignature](#security-requireprovisioningpackagesignature) -- [System/AllowEmbeddedMode](#system-allowembeddedmode) -- [System/AllowFontProviders](#system-allowfontproviders) -- [System/AllowStorageCard](#system-allowstoragecard) -- [System/TelemetryProxy](#system-telemetryproxy) -- [Update/AllowNonMicrosoftSignedUpdate](#update-allownonmicrosoftsignedupdate) -- [Update/AllowUpdateService](#update-allowupdateservice) -- [Update/PauseDeferrals](#update-pausedeferrals) -- [Update/RequireDeferUpgrade](#update-requiredeferupgrade) -- [Update/RequireUpdateApproval](#update-requireupdateapproval) -- [Update/ScheduledInstallDay](#update-scheduledinstallday) -- [Update/ScheduledInstallTime](#update-scheduledinstalltime) -- [Update/UpdateServiceUrl](#update-updateserviceurl) -- [Wifi/AllowAutoConnectToWiFiSenseHotspots](#wifi-allowautoconnecttowifisensehotspots) -- [Wifi/AllowInternetSharing](#wifi-allowinternetsharing) -- [Wifi/AllowWiFi](#wifi-allowwifi) -- [Wifi/WLANScanMode](#wifi-wlanscanmode) - - - -## Policies supported by Windows Holographic for Business - -- [Accounts/AllowMicrosoftAccountConnection](#accounts-allowmicrosoftaccountconnection) -- [ApplicationManagement/AllowAllTrustedApps](#applicationmanagement-allowalltrustedapps) -- [ApplicationManagement/AllowAppStoreAutoUpdate](#applicationmanagement-allowappstoreautoupdate) -- [ApplicationManagement/AllowDeveloperUnlock](#applicationmanagement-allowdeveloperunlock) -- [Authentication/AllowFastReconnect](#authentication-allowfastreconnect) -- [Bluetooth/AllowAdvertising](#bluetooth-allowadvertising) -- [Bluetooth/AllowDiscoverableMode](#bluetooth-allowdiscoverablemode) -- [Bluetooth/LocalDeviceName](#bluetooth-localdevicename) -- [Browser/AllowCookies](#browser-allowcookies) -- [Browser/AllowDoNotTrack](#browser-allowdonottrack) -- [Browser/AllowPasswordManager](#browser-allowpasswordmanager) -- [Browser/AllowPopups](#browser-allowpopups) -- [Browser/AllowSearchSuggestionsinAddressBar](#browser-allowsearchsuggestionsinaddressbar) -- [Browser/AllowSmartScreen](#browser-allowsmartscreen) -- [Connectivity/AllowBluetooth](#connectivity-allowbluetooth) -- [DeviceLock/AllowIdleReturnWithoutPassword](#devicelock-allowidlereturnwithoutpassword) -- [DeviceLock/DevicePasswordEnabled](#devicelock-devicepasswordenabled) -- [Experience/AllowCortana](#experience-allowcortana) -- [Experience/AllowManualMDMUnenrollment](#experience-allowmanualmdmunenrollment) -- [Privacy/AllowInputPersonalization](#privacy-allowinputpersonalization) -- [Privacy/LetAppsGetDiagnosticInfo](#privacy-letappsgetdiagnosticinfo) -- [Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps](#privacy-letappsgetdiagnosticinfo-forceallowtheseapps) -- [Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps](#privacy-letappsgetdiagnosticinfo-forcedenytheseapps) -- [Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps](#privacy-letappsgetdiagnosticinfo-userincontroloftheseapps) -- [Privacy/LetAppsRunInBackground](#privacy-letappsruninbackground) -- [Privacy/LetAppsRunInBackground_ForceAllowTheseApps](#privacy-letappsruninbackground-forceallowtheseapps) -- [Privacy/LetAppsRunInBackground_ForceDenyTheseApps](#privacy-letappsruninbackground-forcedenytheseapps) -- [Privacy/LetAppsRunInBackground_UserInControlOfTheseApps](#privacy-letappsruninbackground-userincontroloftheseapps) -- [Search/AllowSearchToUseLocation](#search-allowsearchtouselocation) -- [Security/RequireDeviceEncryption](#security-requiredeviceencryption) -- [Settings/AllowDateTime](#settings-allowdatetime) -- [Settings/AllowVPN](#settings-allowvpn) -- [System/AllowLocation](#system-allowlocation) -- [System/AllowTelemetry](#system-allowtelemetry) -- [Update/AllowAutoUpdate](#update-allowautoupdate) -- [Update/AllowUpdateService](#update-allowupdateservice) -- [Update/RequireDeferUpgrade](#update-requiredeferupgrade) -- [Update/RequireUpdateApproval](#update-requireupdateapproval) -- [Update/UpdateServiceUrl](#update-updateserviceurl) - - - -## Policies supported by Microsoft Surface Hub - -- [Bluetooth/AllowAdvertising](#bluetooth-allowadvertising) -- [Bluetooth/AllowDiscoverableMode](#bluetooth-allowdiscoverablemode) -- [Bluetooth/AllowPrepairing](#bluetooth-allowprepairing) -- [Bluetooth/LocalDeviceName](#bluetooth-localdevicename) -- [Bluetooth/ServicesAllowedList](#bluetooth-servicesallowedlist) -- [Browser/AllowAddressBarDropdown](#browser-allowaddressbardropdown) -- [Browser/AllowCookies](#browser-allowcookies) -- [Browser/AllowDeveloperTools](#browser-allowdevelopertools) -- [Browser/AllowDoNotTrack](#browser-allowdonottrack) -- [Browser/AllowMicrosoftCompatibilityList](#browser-allowmicrosoftcompatibilitylist) -- [Browser/AllowPopups](#browser-allowpopups) -- [Browser/AllowSearchSuggestionsinAddressBar](#browser-allowsearchsuggestionsinaddressbar) -- [Browser/AllowSmartScreen](#browser-allowsmartscreen) -- [Browser/ClearBrowsingDataOnExit](#browser-clearbrowsingdataonexit) -- [Browser/ConfigureAdditionalSearchEngines](#browser-configureadditionalsearchengines) -- [Browser/DisableLockdownOfStartPages](#browser-disablelockdownofstartpages) -- [Browser/HomePages](#browser-homepages) -- [Browser/PreventLiveTileDataCollection](#browser-preventlivetiledatacollection) -- [Browser/PreventSmartScreenPromptOverride](#browser-preventsmartscreenpromptoverride) -- [Browser/PreventSmartScreenPromptOverrideForFiles](#browser-preventsmartscreenpromptoverrideforfiles) -- [Browser/SetDefaultSearchEngine](#browser-setdefaultsearchengine) -- [Camera/AllowCamera](#camera-allowcamera) -- [Cellular/ShowAppCellularAccessUI](#cellular-showappcellularaccessui) -- [ConfigOperations/ADMXInstall](#configoperations-admxinstall) -- [Connectivity/AllowBluetooth](#connectivity-allowbluetooth) -- [Connectivity/AllowConnectedDevices](#connectivity-allowconnecteddevices) -- [Cryptography/AllowFipsAlgorithmPolicy](#cryptography-allowfipsalgorithmpolicy) -- [Cryptography/TLSCipherSuites](#cryptography-tlsciphersuites) -- [Defender/AllowArchiveScanning](#defender-allowarchivescanning) -- [Defender/AllowBehaviorMonitoring](#defender-allowbehaviormonitoring) -- [Defender/AllowCloudProtection](#defender-allowcloudprotection) -- [Defender/AllowEmailScanning](#defender-allowemailscanning) -- [Defender/AllowFullScanOnMappedNetworkDrives](#defender-allowfullscanonmappednetworkdrives) -- [Defender/AllowFullScanRemovableDriveScanning](#defender-allowfullscanremovabledrivescanning) -- [Defender/AllowIOAVProtection](#defender-allowioavprotection) -- [Defender/AllowIntrusionPreventionSystem](#defender-allowintrusionpreventionsystem) -- [Defender/AllowOnAccessProtection](#defender-allowonaccessprotection) -- [Defender/AllowRealtimeMonitoring](#defender-allowrealtimemonitoring) -- [Defender/AllowScanningNetworkFiles](#defender-allowscanningnetworkfiles) -- [Defender/AllowScriptScanning](#defender-allowscriptscanning) -- [Defender/AllowUserUIAccess](#defender-allowuseruiaccess) -- [Defender/AvgCPULoadFactor](#defender-avgcpuloadfactor) -- [Defender/DaysToRetainCleanedMalware](#defender-daystoretaincleanedmalware) -- [Defender/ExcludedExtensions](#defender-excludedextensions) -- [Defender/ExcludedPaths](#defender-excludedpaths) -- [Defender/ExcludedProcesses](#defender-excludedprocesses) -- [Defender/PUAProtection](#defender-puaprotection) -- [Defender/RealTimeScanDirection](#defender-realtimescandirection) -- [Defender/ScanParameter](#defender-scanparameter) -- [Defender/ScheduleQuickScanTime](#defender-schedulequickscantime) -- [Defender/ScheduleScanDay](#defender-schedulescanday) -- [Defender/ScheduleScanTime](#defender-schedulescantime) -- [Defender/SignatureUpdateInterval](#defender-signatureupdateinterval) -- [Defender/SubmitSamplesConsent](#defender-submitsamplesconsent) -- [Defender/ThreatSeverityDefaultAction](#defender-threatseveritydefaultaction) -- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize) -- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching) -- [DeliveryOptimization/DODownloadMode](#deliveryoptimization-dodownloadmode) -- [DeliveryOptimization/DOGroupId](#deliveryoptimization-dogroupid) -- [DeliveryOptimization/DOMaxCacheAge](#deliveryoptimization-domaxcacheage) -- [DeliveryOptimization/DOMaxCacheSize](#deliveryoptimization-domaxcachesize) -- [DeliveryOptimization/DOMaxDownloadBandwidth](#deliveryoptimization-domaxdownloadbandwidth) -- [DeliveryOptimization/DOMaxUploadBandwidth](#deliveryoptimization-domaxuploadbandwidth) -- [DeliveryOptimization/DOMinBackgroundQos](#deliveryoptimization-dominbackgroundqos) -- [DeliveryOptimization/DOMinDiskSizeAllowedToPeer](#deliveryoptimization-domindisksizeallowedtopeer) -- [DeliveryOptimization/DOMinFileSizeToCache](#deliveryoptimization-dominfilesizetocache) -- [DeliveryOptimization/DOMinRAMAllowedToPeer](#deliveryoptimization-dominramallowedtopeer) -- [DeliveryOptimization/DOModifyCacheDrive](#deliveryoptimization-domodifycachedrive) -- [DeliveryOptimization/DOMonthlyUploadDataCap](#deliveryoptimization-domonthlyuploaddatacap) -- [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](#deliveryoptimization-dopercentagemaxdownloadbandwidth) -- [Desktop/PreventUserRedirectionOfProfileFolders](#desktop-preventuserredirectionofprofilefolders) -- [Privacy/EnableActivityFeed](#privacy-enableactivityfeed) -- [Privacy/LetAppsGetDiagnosticInfo](#privacy-letappsgetdiagnosticinfo) -- [Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps](#privacy-letappsgetdiagnosticinfo-forceallowtheseapps) -- [Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps](#privacy-letappsgetdiagnosticinfo-forcedenytheseapps) -- [Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps](#privacy-letappsgetdiagnosticinfo-userincontroloftheseapps) -- [Privacy/LetAppsRunInBackground](#privacy-letappsruninbackground) -- [Privacy/LetAppsRunInBackground_ForceAllowTheseApps](#privacy-letappsruninbackground-forceallowtheseapps) -- [Privacy/LetAppsRunInBackground_ForceDenyTheseApps](#privacy-letappsruninbackground-forcedenytheseapps) -- [Privacy/LetAppsRunInBackground_UserInControlOfTheseApps](#privacy-letappsruninbackground-userincontroloftheseapps) -- [Privacy/PublishUserActivities](#privacy-publishuseractivities) -- [Security/RequireProvisioningPackageSignature](#security-requireprovisioningpackagesignature) -- [Security/RequireRetrieveHealthCertificateOnBoot](#security-requireretrievehealthcertificateonboot) -- [Start/StartLayout](#start-startlayout) -- [System/AllowFontProviders](#system-allowfontproviders) -- [System/AllowLocation](#system-allowlocation) -- [System/AllowTelemetry](#system-allowtelemetry) -- [TextInput/AllowIMELogging](#textinput-allowimelogging) -- [TextInput/AllowIMENetworkAccess](#textinput-allowimenetworkaccess) -- [TextInput/AllowInputPanel](#textinput-allowinputpanel) -- [TextInput/AllowJapaneseIMESurrogatePairCharacters](#textinput-allowjapaneseimesurrogatepaircharacters) -- [TextInput/AllowJapaneseIVSCharacters](#textinput-allowjapaneseivscharacters) -- [TextInput/AllowJapaneseNonPublishingStandardGlyph](#textinput-allowjapanesenonpublishingstandardglyph) -- [TextInput/AllowJapaneseUserDictionary](#textinput-allowjapaneseuserdictionary) -- [TextInput/AllowLanguageFeaturesUninstall](#textinput-allowlanguagefeaturesuninstall) -- [TextInput/ExcludeJapaneseIMEExceptJIS0208](#textinput-excludejapaneseimeexceptjis0208) -- [TextInput/ExcludeJapaneseIMEExceptJIS0208andEUDC](#textinput-excludejapaneseimeexceptjis0208andeudc) -- [TextInput/ExcludeJapaneseIMEExceptShiftJIS](#textinput-excludejapaneseimeexceptshiftjis) -- [Update/AllowAutoUpdate](#update-allowautoupdate) -- [Update/AllowUpdateService](#update-allowupdateservice) -- [Update/AutoRestartNotificationSchedule](#update-autorestartnotificationschedule) -- [Update/AutoRestartRequiredNotificationDismissal](#update-autorestartrequirednotificationdismissal) -- [Update/BranchReadinessLevel](#update-branchreadinesslevel) -- [Update/DeferFeatureUpdatesPeriodInDays](#update-deferfeatureupdatesperiodindays) -- [Update/DeferQualityUpdatesPeriodInDays](#update-deferqualityupdatesperiodindays) -- [Update/DetectionFrequency](#update-detectionfrequency) -- [Update/PauseFeatureUpdates](#update-pausefeatureupdates) -- [Update/PauseQualityUpdates](#update-pausequalityupdates) -- [Update/ScheduleImminentRestartWarning](#update-scheduleimminentrestartwarning) -- [Update/ScheduleRestartWarning](#update-schedulerestartwarning) -- [Update/SetAutoRestartNotificationDisable](#update-setautorestartnotificationdisable) -- [Update/UpdateServiceUrl](#update-updateserviceurl) -- [Update/UpdateServiceUrlAlternate](#update-updateserviceurlalternate) -- [WiFi/AllowWiFiHotSpotReporting](#wifi-allowwifihotspotreporting) - - ## Policies that can be set using Exchange Active Sync (EAS) @@ -4715,7 +4486,6 @@ The following diagram shows the Policy configuration service provider in tree fo - [Wifi/AllowWiFi](#wifi-allowwifi) - ## Examples Set the minimum password length to 4 characters. From ee9e7c35e3f0a253592d8b1e60fd963effd5dfba Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 21 Mar 2018 13:32:12 +0000 Subject: [PATCH 114/138] Merged PR 6514: RootCATrustedCertificates CSP - updated --- .../provisioning-csp-rootcacertificate.png | Bin 27086 -> 47074 bytes ...ew-in-windows-mdm-enrollment-management.md | 13 + .../mdm/rootcacertificates-csp.md | 8 +- .../mdm/rootcacertificates-ddf-file.md | 1245 ++++++++++++++++- 4 files changed, 1221 insertions(+), 45 deletions(-) diff --git a/windows/client-management/mdm/images/provisioning-csp-rootcacertificate.png b/windows/client-management/mdm/images/provisioning-csp-rootcacertificate.png index 7a3f67195542f4a8af567f15be2ab413dc43dd1c..68672472c3d6416a371b76d9c12b194b0f326fbe 100644 GIT binary patch literal 47074 zcmeFZ2UL^kx;7kSM#ix)qoa%<#Mz2CDx%U`u#F4~L_t7WQ0X9T)Tm&P-g^lcAoLJIAcR2vClS#7eS4p?XP$>ld z%etD|zZd-;0)cGT`u)5f1hOds0@>{F-6rtK^=C(%!T$t2^fb>xvKsb{gFn8pJ)?65 z0(l+2m2=};@b?zi-;F&WkR27g{{*U#DOM0jp|{rgGgo~OQ!D)*Vx9Ow?s8*SZBbus zQQXt?qS#dT<8$dw1_d>-OTJRX5aJPA%WQlO-mdhuWi;M;r&N4pgxjae?`? zI$->Qc}(D&U++DSx0`(TXnTvN-EZti_vFm>XmJ|GTZNP1g3w#%75}Wj5-0Qvn#Nq@ z&O{B2ZT@Yb^KjiJwie4+0P^?(3`g{!>Xso0Y8od`${VVhi*FCTx_D|ub~NIY3gQak z05e99AoE@rVrpuHBcdidUWUtrh8gTI5-wHXd3eFHcT* zynyLXFkV(@7#a}X#VR7Rva;?Hu0q}#zJ5rOk&&?|^773y><^g0M+>VhwasKJ|8fHz zBQ>y`#@<#Q@CoOTIoBL{X+l;E8zul*HMO9$cMmY(*?3Xa)yaociCz?O*ESOQ3ZXtg znH8v?PnlqpoY%b_ZPkQSkl{6k&G&jx6{yn`X7@dw*wq2gdhKh@?&W)m3?GVW9y*5^(jSJYqxf%Z$ z>TB~wXv!34xHWyK^Bc%psI(aOg9w2b@M$|0iB5`R%+SecBIqHb&5*ad>cs-64fu13 z%S)YZ+G-W;>WbWXYZg-gGJ7V1BqJ@2->31uut|17jXq!$-U%!9rXg4cn;>KUE)*jp zBS+gKjpf{D3?sD)C-Mq&VmyL#XCGuXsF&p-BE?+_l)@AH_LAzhE=xRpBD$4m2!X6f zx3hW+kiVz_Q89les6Em5`IvDK%) zVQR#BneAcLG3fNhChL0DO0Ak<&Ms;~?2NulT-vyZ(7QQL!-(_|=8$~}UB~-nQtpAc zy|2=dd(w8dYz;hD^Ns4tk3|OtO0q0xJe4AaZmo(aU~f7c3nr^1wm!LfP%Pd`i;>&@ z>_YRQ27A9^_>ARC@08B)<86gK$-i2>34y(Ok+X1U;asxUOGT|6&sKiC3oXIKH52f& zRoU1n+105Cd-$Y(r*EBjW2?VJ3O?(pj0EI#KnuTy8&#~!I7i-R7Jn58|a;%DqimHqL5%NrUoYdIZNK+}VSQ108P!tY`#n107 z!(PrfoT8GYMXLKowXP#Yi||P=O;Zb@p4VqPNm4cMyH4qstge!nky5^ugzMb3uXO2} ziJ{t)sKqSWlTJmh7i+|CMV4Xx4P@+GF+GARh0UYgpdx2c;jt0>)lxl;lY17%wg=Xg zQ2Xds4v&40sSk}hSUXBdFB;GKqDQ~W+$MCi@!-)sr&4Ap^9E(fR|(QYoiQ~x&+IrN z#%9VEpLUD8YSV``O-^w5<9=hkd#s#%*Nq6nB6)|oYkq(HEooKU zaJ!N}te$F>J+ce9le*26Zb*r%3eJYiADnc`qdTamj&84CmKu2D%dlCy|Hzz8sebC& zWjvZ`*;MbgOtP#KT+t5Vl9ag z5W>XA5C~?pyw*sA{o(d>1G#@&Yjr7lu=*0z;=8r)fJF(&;a;KAT<(rru{!)9W44Pp zct?Eivd-tv3TUhBF&{~e-X_R=%yJvKxu1JPG%4;JMc^5sKe`c~W_wW?SgS!+O!Mre zEs!SLnUZ;W5by@$oc{U~_&VTL)O@jjTf5!`?YGiCM8y+J_9jIPEl==nqNu32NP1`# zM=W9Nr3P0qtAD~=?WYkn2!%F`p4t0MKlSyC2TGS#LlnUeJz`iw873NW?R9qr_i(QE zbZE5XN1W7r$&FpQ;`s@FXWFOuc;0fU^^R)J$AMv1CiG_~?iAjY;bU`mKG#;}Wb23U z;a(KFio-##?R0;c|6i4!xqU_%Csok)weC+JkbyPC=#FCFENybs{b8Dd;k9I=bN&Zhjbr6!Z)CVfu|!H1TfXlbyn8=YAeEA8)W zV|l~h`<%4){-0rr{X4O=h2jmV7nr!m6YGmRUM+z zcTuL+I$2Sj!O3`%V!wfF4no$nJE&pbP~9ztm`mH){682sKVbX^8$Kf&bqbiFn^ zr6pVT6Xi;)gVeh@yIq)r3v;d*#`pV~Id5Sf$Bx_P+dYLL7u+rc=wj^HMSA|15c{6I zjz8*sr$mLYk~~m^nv7aH1;px?epY*XyTf$bE*hpCn6wJY!579?o+l-pb&QIQEe^Yp zmw|d@UL>};)g9?~D)@%_9n5WWwHL$Nmwk5GV*HI32+Z?P)Ld{|p3lG|N}Ii~p{qst z6Up(;?S71BD>hTXwQ9R3^fc@d=F=dOvj@Zg|q4 zYh~mD3$!mQOftqTW_ZQMeN)({b)TfFnL{TPVh7%@929!sTpB<4ks^HlyCPSk;0icV zfM@n$jkGN9ijEhD{X(>^?(?4Nmt%U-bO?m4-{tf2zQw8Z)|&(eDQac&&XU7yo1Gu7 z_jdgHG&VKQ$58{EfW*Pvk%9TF7R}w-KYSP_CrECMojxyvY+>zxJJf)pwQGt%UzOK_ zgSh=v4(5NSLr9F%-D5EEH%)X3`@th4v4zow@4Qi`CMM5g@;^J;NV(O4GXE;aU|w9t z5b+b*b-uYRy<5w*E7?cyjKMCa_>AlL+6lXt4v)k1FJG3eesAON=<6UMcZ$*PAiX2i zfI`U=a-7gGh5mtgP%RX1k4~pbufAznDQKi*CM)I({WARC9AEdk`5{04;`#PSIYg2B z^jx-PyvOQUi_W|^cT1~V37Xb$F7$?4T&3VG89lzQGf*v0(D#)cm+i;Ktg0RHXLG-+ zxMCqD<)|4Q74<&*XUJ*jC3!?@Ber<5at9UZb@wD=;k8A8g2w@li2!6?v5;O<)tO|m zJo_6}#``X?kHOK$3BtsSz&>VcQ6gojBwz)9q-Ogh)iFR2e5j$Fm7oY2d^n1;Fg8xr zjYIo23N~2GYx847BRJuz#qOa_A;?>yda>+dAf6M|Se;rHRte~rwH9OQ(T2O4LEsr= zu@?e?13&frl!dDPQnwHpwc27^BP%oIpQ7US=&j(b@E4?`>FMdVGTNNpA%bcEQ`Y)P zCk*X&(;@WIJY+Cc0jHQ{PIP~k!$|G7@DP3L)b9JKEPF;>d7hp>K6?}b8B7Qh%|`or zl%K-h1YxoleV6;s!WS^ufW@KH)>D;GD)BpwMF>O#)#GDrZ9T$H?$m7$yM7DM)dgY03ZCsKCrUM55RLIQ45DJhLTG}yk&_C|y%;CMb6RSUe`llzWT zb#=euCP`9Y8X3~#hRSr3PFrEPq`*W$SuN-5FdCKZ{gS;9U>0n9Q zQ!6=w#G;f{u>lZ_L*)=>DIocHPTwgi44DBZ0+wh)*}cCGr8JhaMNbgR?n2#!Ay_vtVsWwGN~>eCL)8-Q zwN3fTf?}McEkZ}VViZaK*l7ppgznoXgHBMT2w~fN63g-i!6D0;i^7ODIi2vTqiT9BW0V)*84H< zVn`Fqa8U7dwftpA;4>DsX?F$|-;q@;t2a(q4%xJ)uI{vZ zbeNrAb%S%o{f-*?u^rnFPR=`=!XcM#J6Zh^-Zo`rWp_NaBp=PVfT_P)rJI?R^)&k+ zmHwkyEM$(QQi)%X`8$vf5p9k`1b#(DTR5Y*V};bH4lK zerJPpq@2^DiWF&f&Q?f6zn8)aF>bnZdQv)uxP?r{gT*}u1CO;pHZVt(;!RayD;7Ph-1AZ*9E0K0C% zt%~7$OrR#Nk_WC`gT{v~{)*Wz?PU#h^?NQ{gTBQkj+dBVzkhnXExc=9urAAHj}3uf z=j(^)T5PIpyS5gwe2LO*b2=vypL`qiD)1+-=k0T2HhoXpdg~g-@OOmUZsvPV{Bdc- zD`iSOB}9zeJfH{tgSoA%HdE7S@wQxVr2pG-!QW-H2vw$zNnTk|LQv#{V7O7k6!F7t zE$AhOzmNVLlGEWd-?vL8y?a**iOMfM{^mf~I~meoZ7MD7l63LF@OkoX+WF4I%L862 zCaIcR4n?X=rp!NeUKo{l(sS_5_%Y;S@fmo!x%CdE*6WU1>7=dUVmkYf-rP^OQFHij zfFiQHF?dd`&*CwKFr7tQqv!GX`K|Y_XMBvYFHASY86_I+@QOWuJYTV2V=^Joel9^$ z(Gql()m@{dG*V!q!Ktvt|73%sWe~rL^EB^7n{QXmN|^Dcl-Yq4L4lF30M3O z^>(}VPnm|bfw8*wIXAW*iqKwp*r9ou7?8|;|V*JFEM_ysfTlu%s% zxg7qZ6#I)1Po|0}43>?hx<>a>^{Qs0dEB{2AlRJ~sy9@tLRo%tC2qvECM3D`C>Rj4hG=KYBqhlF~_b$++)V6sH(_yjL{p_T? zqlNSZSxaa@Iw{#ZD{4}Fv*yleW!Bq3XW3;W>UzhuM!44iY#~;roV6Zi8yXs><=$7_T*GJyQj@cz*NinxTo?Ad|YvbNw~S8fb0+OzsU=sD$7i6>VE5@)iX3W7n7y zQqe|+hVQd?LQaz%TUcFqRqu)0z>>N*5V0qg-Xf2$x^s1VoTWO6*mnHb<`WbK@p(>BzXlzH7YqZr&dP2Z6S^x zwVLjVbmX|JLB4DD(P{*x95NgS4Y21@bc>%b8$gVft{cZMRn=`e9RhxW6y;Ve$?U+* z1UM{q#+jWI6GQ0+lr9YQmv~oDMIbfzNSFMYd?KGGCRT(`7n8T_Zmmxd(Uz(TpIuP9 z^(c}4=sC|Bs`#;gqLquBY@A*hWm!q1p9?&DY*+eXjAQ}Mm%M}97qTm&a|%XBTA=B^ zEHlB=OHDpn3H-RMO?RQffPH(MZIbw7W8b`j?YD3$2$aOc)9=6)A&-S|(LeRD*7VT0 z=W#R6VxQ;~pd_)M9UFhyCk5M3=}* zZgY9CR3rROqY~utHe7V+mF2VYtIY{V8)+pEm*X-F<3Wn28=+tgY<9B4Xx6jtD`}|Z zinu}(iTrn#zQGoKPL{W>TxHQA%VZw)GBDF!qINP9wIwPom zh?^NDq_~_$2PXNMSFtEoMc|p0U1_CRdH}O)>SZH0Zuu(d2xd-(lF48VexnXcUL?{% z=xGP)QykAtr>l9}NUMU!6Ifu$_(RS$d8LN5017YC8%c)-t-S!)K@f}4ON5u72W1ke zx>c$>3J?-m9S*(`v9YQpVYDX%nc-F;$VxbGZ#dxW!*OA}y>SzT#wB$IYu458r`qU^ zxa6yq?tB)FTCUCw2t3}yJ0hQvz7N%esera$!AW!chKr7N9uIDm|9pV` ztX1VmvLB<;-$Gs93+?NxjLs5xhUQDiQ9^y6&vI8b9(J<7@pesv4029a?Uo*pED1S; zvbWn@`w&zmj#2eq$ETyr~FzE{f7zCfo!}{0@ z>X0U%D@ajfo2>?@G_#l=Jsx8%6DP_kP4INfWEXO|I4l`**+mY~QcF4t{uyPNONghZ z$ucEBs)3|WkrO`0I=WYA4Bz_i8H{;ItOiVbioHm^v2PzaU z2GzHH&h%R$C3i|Ck=VAI7vc;WNrS<*aU-#+6CrvteMP%q-jG}0;i8=kDa)gmLZ5zqVqxbX1+1^{QcIOcT7C_P5_z~m_6`_@Q)fboflm8hQ@=vgm~R1z zLNmQ)YD$}Rb<^oPytQS%AqC8hw}T454Af^1l+sm+_MqUz3on|Q12XYhbFvtLF8<>0 z+3`-N=zauJVnt+PV1;L$KqcLFbYduC>$Caw-^6%OxSV$py6I20hx?`GQHP-))gXbq zXGt%T0?^Lvd|?aEBOg4Kk1!^j;_oj&e&U7r1!%E=$&O4=eQ;x6y}S2GR<`tx?N(7# zrC#p<%>4YX*hm;;?RTI;KHt3v_5AdB5fr)HoWh% z1(oVK`~rl(EO#d!n(#X+JK|-Wt(9F?^OM+ts6I1zcGP(c6r(E>`Bzz?f`=v7 zes7^_jsX$BZiM?j%$|XiZ8lLtiATi{Z^Ikg0&_WM$_(6{$=X-x+ObU3AMDxRePn$q zuSa}H7>a2#1f?3CG6U-qZ%Ee-5ww@94b;V8#8W(eJHZX|@;pd~2BIt}npJ7=(nW)0 zttFjF*{S_mSJEQd-=CF|nn|nIA~Gutbahy#{??^tMxLrsyMsD;{d&!CsbRC&Q;lQ` z$zd4pjDd{2x7~O8S6)U{IMU5(z9RK|k#73r(D;IBS?9?Dcq%GHKU%=EsFm8+v2(?> z+9kr7S)pt?E_87r&R6o`B*%_i0gA(4ZnEMuEX#C4FHWZeTiQJGQ!lHny11lIWh)%t z)H`W=KYnGQ*eWE<@6p73L32LawRir0Xx-5eG*xODs_yM}iZd**wtvwYZMa733%YS# zyaYF5E_OZyr6wIa5f4wtCM&`VyNw_9IJ?foW96@#M|2A9AwKz7{^+AOcFi&p)YdlY zN*SArU~?M#;i%^eAa;m5G@|rQlHOL7KjW6ZNMyQ~taLw5?#ZYch(t+1)v~$`rw{hn za{jg-1L<}YTx#g8!ZJRHSll5ff4*V)eh&{1f!5o^9Xc%QY<-=-9WCx-BJOL^fa#%4Q+jLl+C&y)Ow1Ki}#x79$Dg#yNWUqkwRFMOXxik${ ziLekTR9LJT%eYMtTy!%FQH)t$_>5VCH^yCETxdsM?q2M87})S0`=r?f#i<)hCiD-^ zi=PI5rHQ5UIxjD;$rkIc&D}>1pH!^q#RTs1hHTk@#C{V zlHlx*|KwH|5d5s%f3>c%?Pp3Y$8GigY=n>x|5l-;qQqCPT&?B@dDW28C!LyD^f+bf zkd*N35B%FHD_~y~cP@Q9t4(gG6^egBpB4T5m~v2wA5#6iLbP%)slxm7idgPDaKSYG z%XB@(Wq$?)6V$}ItP*9FTCX{#qzZ?>@n$;NsiA>Kl#{q1Bc^e}T)1Zs{Dw|_BK=B8 zV9ee>qmgz6+hs1O?%n(J(u9jNZMw;a6~=q@P=q4Z&2E3L8h5;aE~r1Al|Im@gS?L{ z5MN>MH*iTGNfqk3PLW-Lq>Cv5P;yRI0g^gBGsz+r4u zamjIpkE71wx!AOENqYKre?rVkp~|bMjT0!KvCm^9(E*+EsI%mHwcO>2R$8cf4&x|z z+>ecv#8|pKBPkOl^IntM*HE+IFoXTW!v&Swe&{U4bovM^)UIATFjF#9R7TC^#6m80 zhB$INf1ju@nJ;$)B)NPkyS9M;G!Eu~- zSXC(FPd!Rz`yckJzntG#9J`P{Q)JH`aDDzpTo2G-ALDM`({gM zp}WaI^`YuS#s0`%mQ|x+ZiPmnQ>o}8B|rZ4pemQL9i+QUCkuXF-;m~7lI)7CoJ4sd zFRKb9MSHA2Y%@-Vx_<22L@gQ;=(FPgvbuasr+d=|#DhRwM-;`*L4^6c|Ii2kUeW(! z#^E2>8Sq3}e~F^W)`0FUrLLf2_{AFd%EyzXCp%|Ltp5|$e?}kKke@S@TIDaB<*k}u zW0H7k?AX-u#_pJA(?9b8Y;WAQl*e8#F7L2A*jih0?W@fsPb=}VsPAZ^PaNb%lL{pr z7h1n;HF-ME3EdcOrM@9U*f)!8P>Y?Ncx}x5&{SV~C6)H`Qqz{|B<-{emAB229{S{| zNBG{mB4YaacEX0a_2$j&j@X$4=RAhqvu8c;lY}Op^iQ12>7kYW)b;rDQd5YJ?bRL! zb7x<(FMf2Cz)qU#Uh>n>qM)oND-Lv&bxZo0$iu!v&%3|-KDW%w;sIP9<`i(k?IROL zscMf!vgOh1A_Q_L%=7Y{?#kf-<14$ur#Sao9}R?~BnTMI(sBP`plId$FZXU%#E*3N z21GbAJ8FYw-C~IiW6aO*+-6ZDCsAVwo>*Us<)nOhKvl8(tMQG~vO_l}!OMFawypb) zXY?{rOm{#l*BGs~e%)Wzv^fV3Kvyp~CeD5Y+@BzV+S_w{CpFye0~zB-v?u<{-t`|S z(1xQ9-6zJYlz+>zM4{w4bpjH6Uwt5(l>XMpG4kOAf^=WmL>%By?yPD-HNM{m&f16? zl(w%y=7crdi`Ad=7YxYXD_zM`6YI!BMXmq z06#gTCNU<=7m>%$>D|{&FJrszW zH)(R$*p&6c{3F++5nl3XIRu4davh9{;ykh~2169I3 zgW-{pk+ZU20?+JC02aTH=D$~F)DAT~*B<^JE;0BEKcbv-C{>ZUI^v4eQf@7*poOmm zlz%VaUwf5*ykDX23hVN&y$&fAHm!@sHnLc@W0{iN1M|a&)J$&l&fdH)pGlgG6zljX zvqNp~hNX&VCag4+a6i~<4JBHdK_y;`?9i4M)tC1VQJr+*M2!`zuL~)K z&JpF31N^bOM4>-nT>MOPUIf-oP3P)RZm;q(7zxrI9}R?JSFssE*WEQq0$~Gx56zA+ z@dcoiSuRYizkoiG{~P9wjlxNholi9kJ6^oA|T8lO{mwfS>L;f?Kv6O2)A`_^K zl=}-_X|eJHh5*`#8Lhp2I&p&^MJ^2u0wmi`GwE95W_@HypA9pt-9T%V~vS_+njyZsK zUsC@$fv)RJfaTR+^SH;%V?1pH-AV(*1$z^oDeQ7ZaGkC`;S5xGR@&p3qft}_nkM}?+$Vld%B8e;8 zlOz*7^6Xs9l^<}_Gkuvv2k56LTR+(r1G6@0qt8bij2CM zbaH^>)I+?5n@LV}V(&hStU{T#$<0+F)6>5zI+kMk5wsWP6#dR6X4y)#@A@*=lA&%| zdS}sgna;xU%OHCVhcCv;!I)GiX8^J0&1KXl^>7n@jva{Wu1p3U#C|ACB*7KJ9OrqFOE1)2m*{qU!yApRR+)qhz3@Ri2`z6q%7hoqh)MHek4%T#>jR(NI7zw?wt?;Qw! z8h4G0Y zN$0?eaeUXB_)d zjHCw4NCKooNe*mc^PEpUd-l(=%;LS-QGJov{nTGtXySQh^~XZJ4ALvNe!#~D;h{uh zyN-}(BzoNw+?B!!|4l?1)T1?#EwL(3r-EJr_AzQ+;*sK<&VdStiTYTpYuT0s`O)6! zgY>7>-#dE`bkhsbl`b1^$ZBSR=&sE-vnHV^wWKQpAK*xUtA^wkx0l+nJ^q1_Vg z&a`9RzojE1k?uSY4!6EWQ?N&OS;}UHRVv#s{&e>GU-sc)_5jwROth7Vk{e(zFo*NH z1`gT<O8%(xqcN~LO69R|o`@vIIqi1opvPjgH0l5fju6|9d zHIky#741dF#H_H4ISdM`g_E#S0;q)B>b!nV5Ci??5r%q zDqVH(2D&i-UIe%m&dz4D-eSiQojnWPYRjvE6x$0G$zqV2U_O95-CHPZIN*`frYL(N zQuoco3c%HuN83Vc(AFnRS_mG183;(CL$W&{lIJLrK?{xQQ?HW)162FdD7383MEaB{-m*bj@$rW z(D0l2WCd_89yndCnv9|lK$YGaw&-h3uG~daACya#xj^87%BN~8Uh9&3Gm4fNeFMla zc*lFV6d!Nrd}<1HK)W%xrF6J%1pDT&d$7nvy-vUXGKP(foh~85R1jM<@Sm~%F<%aH zN8BnlAinB;=LD0v#EPA+|Blv&Tqu1-O90f4+14%m*G#MYO!_lhBV8qHVNS9AXPy$9 z(q1lqqAb5@_$0Fe^M@$aG^@IXg_qme0&Mx$}ER-6FAj9Joe-4ULigk0Q|PN z*aS4&6gK~)$f;0zi{=EfWv$JU+n@au_Nq^J_8vo=P(Zh??i8 zN>2^YdqD-Havp}mgTltoP>OC^RC27i2W%T~!SIui$Gd@`KBL#Pv^=U&vt{_!^QfG+ zjb!5AuM;|2eSZ6P9QbumHqjj`i2-`z>Et;KxG@#UyCF3=AgLWbmN#zP;MAq0wWU`y zrkgQ);UAY8RJlwdt!wFH12;Su?V+iD#Q_^I_L7ocu}j|)9U%^>1kzfCQ@r{TvQ%wylt7*V^1w8qoi0>eKcrif1Cs7`!laf1` zObP?NGL)Aq;e2jQaEmOTUC9B410>jh`>N*$*}=c$4^bpGe+C-H`4qBPKJiWHI65A~ zJ!8NQ&(;Zs9|a7Ay|}{N%`8B#jR&n_$hLY%1mG@Xy!(e~roH)XiFXp;kRsZTv<>_feyxOTs_GFBZ1 zo5O7ey(GYpoHqUp`F3qEZ)$um+#MCg6^%Pr*E8ppdTCCvidP+1at;XN z@v6Rn#a%2$tG>*1Kwq_9mh1^@A?!-TxOYLlSb9F})$#1Zo=P-=4`sAI78oHORS3Kk zsBMh-yles%#dZi+bKS=GL~+j0w;YzXx>7B)%~Y~;q5k~t#yn#SsTASxJBopt+Y~?? z7_a5L`&f8Ko2kL(K*w!1BTU2u4UI+3#sJrFcO6VcF3+eg$(I}QD7ZYRxWl&Vj9KDU zsq~;AUEMx|*a+-oNP67US?lw!eBYFJNBVv@dGqbt$JM@>&lTkYbcq)~Vt6d)C3~i* z;Avm})~tB40FcdL1;X2RwTy&@g{hpWL7A8f!wbn1Wnr%|7c(!#6>oc1i-%DQqQ-(R zdBr-VLmRp;YFy5t0zli08iWzn(Z+#7DjzmZyC4T!cuyo>ZX|(9`wyJLbY%nSIW-t6 zXXbce!+U+H`2}|Ob6aBBapUKS@h?=$oINvPeF`goJHWX3H?r^2+lXjb`46BV^>`;w zwtDMTxr;A{8V8i8;~yih>xRZ3nOkA~YX~_)9J>mbEFj3?Bhdy2L@mBSVN)AU;r}8s z4!9+K#i*meWAGQn`Xgl_Ws|Z_jkmT-MTlM+98U?l;*v{kZFbN(BB8s`r`|=qT3>wd z+5LFG{bdGor@M`I`Zn-*Mjb~u?xN3zc~TLbHAnJgmt3{x?$-lQi8p4&a5xT|O!H1azQqL01BS026~1K`sKqlpR_) zC3gup_CBM7p{MV5|T>4PYSxpTgrP@@z%&jZoQ% z40H7>yf{Hj6QOLZ>NWFen5VyhTXc(e?{Mj3#{fwZb<@EKP|7U2F+Lp4l7{%Sj`zJQ z&kPOVZNp0;MMcUJJD&Z@TkeU~#oO?9qxXP1whs{Jp*&(hFr5QiS@r?tc_RPMe=Yg@ zYdAWuJP*2ML3!TVTJnD_&$BxxPx51D9wqH-%&c^nIH<=x9JqcQzP z0eQ=92ULll@+#x^;5w-}`uT%x#^Ec+QLaxX5z>WwdVcBbd|M9yw7gap%K3S?Rob3R zif*fUs?J13z7MkFe6Vv`1~<0+sQKhnRV+ryU+ccJKGdJFp6dK8%pJ01Mn33N<8&0p zMRie1p-@y?<*(W$E(n&&{%bDsr>>FBpB%Ax(^qQtr)qRhr60ceW<=ZaNJCyvB;!xr zqSi|-RC>qLnP3Hj)=Qs2w-Jm_R+ipiC~#b9C}yPVAgBHkfm_7SJaOj^=>8t}Uk1wQ zoKYf_{G9I6(7Jec*N1jv7joN*zEpSWkBV-Acq*E!}eYEpB58nD5O&-BJJyP>)H7~-! z7o6l(IUcp7bTl_qN>H(ahy>loiI%-1pYsK(@4A5ZW(#*Opo@%^W)JL0ROYOSuZ0H%_POPYQLt7==jWj&Nk*92*c{l$Z$|k=?Sed`E?lDPw z9M@_5*9Pz4$O@%h*Bq^E-0a>O6OkK*QME!N#nrbry_q`30fofnI_S~z&r zJR72*@=ugOLKsJL-FVW1IUyzc4nQszIOSsfb+RSdtAqW`nqF7{LxxL5UK1ajw`NQ| z8a%apRl4U~TKB?kpQFR;Bo-+g@-;z6d|fcsu#2)q%3s9XYZYMM&4O~wT3#EVe{K6V4N;1E)!gV6ZN`#8nr&?vwIpg`+e z*I9May*`*t__Dfq#7-CMmMq|^a>W%@H#Fv8etEo&%&AW+i_P#48&YqYLDvr6(7XSt zSNa-s6BW*0=W9h46&0y)00;D^^%83^fbImI+47Qs{}GDk7qo=0nl*sL&i9EP47kPJ zuYy-rP*Bi;L?Mf=#UCgiN?~)B|3#?qaqb4>;ouONf5E!R_)XA;0r%qPKMm#MQS zhnl|!;i_qdy*whj@6`pY+aM^kt?wzhAFUD`&^T$=qjJw#f+R?G4BMd+r(I3o5gl$sVe(p zL$;Fi_`9*qrqPqFT00urDr%>+SYJbjy$Xo3f)wG-xEA=)Lr799hTrOxDH6=E!WZmHBTSR&ZjliQ^tU$r z3cRJG986`ak$ir`hrqX0ZqpNL@gzYE=pq6XTIm)ak0R{J)Hm^0DJZ*_B%z~sIw9|K zxlFl%DGd`HCz z3Ehh48=L=#7yU(P{#_E-e?qSj*|R6?YcjzSU~_$DPXku<9S{UI{?#B5&r1;Nw<&Ga z*H6!oKN8q*mb{^DPD7+g6B*D{B64p_xM3IYNjK|X(cgWKtFw}Lt+AmvP9qE-aS9J9 zbiJO|{3NaWQs4L+diA4)2?m0W^^u8y`I7zkI#b=b7;5w4CT=VPvr- zTO!uLVq1TmSR}i4IZXMN?)heB{_*%^OD78__*3z(xhz_gSXybo=Vd-$)k~sZUabO< zo6%VWW4dtloqhG8a2F4B(Lnj-Y_WY7d4&i1Gw2H_|FQ@#9Ne7Rxwv34YQF}_l5%NO zF9~k?iYETS{JXKfyU~-T7AYV(u1a3!GgzA5<@9J2g!{hg8>%$X_Nk z{xhfbe*=9uaTo_((}3CyR%0ST6f{G=e%wWTvv*rbrg&$&R&qf?XxD@8^^6? zkN%;^uKKN~x?jXVTeFqSv5~7f*@=q}N*^Lc_ZsRW2M$*FiRWgPl~N9bbZQ&gl`tB@ zh$9EQHYny5;UvImdD-A-umd1UA8e*MrpxFat&FnB<VpY$gg+peiP6+9){;yozlrEJ@EPs*qKYdH^qly4(z1JS!xK-Jz^+(qA(K%$ zAIksUS$22H9d&Gt=-e(p&|{jT^`ONEAJ#~Ts8;jC94{vg+yr-n1@H2<-H2OTOHdTX z8be1+tT1DI@kOSwCZ)F&N~n1?;M~G`Rb^u$9^z3q`eW}@X)Xo1^k@HuF1=X}FbYR| zPPR}3X54ix@Bxz_&q#rpW}Y(j=i9ec%_GHeh2L-pju_=;QxOuzAj}{H{$fEUXNn@tG0#kjj~V?3d-zU%VTJ z;rEQrzu_@YL4E&(Njh&HBj{1(m7{r)=Yhsc%TS}nc2H_hp-$K2*MeTwq1-Kym%I*H zCyuSGBIv*(g1#(G?^WsC+r9w*AWHaVo$~qwI`;20{t9_4#s{^*{2Bmsmt&?n)AV!; zL8CaB;)J4AC-9-Hmq^(v17?+l?Xuvc(G62-Dc%XLfawQQ% z|3Dqe-Nwf?ep6fpy{A~IW*Aw0)Tb@| zFw^A7TFZDfabL_8oQz9B89lD`puCrUV6(s_hn`be4)aevT6>?%GhZx>ZZ^n-_IXAn zFYKKrUQ zo|9eJ2wQat?wpvuwS_CnF>&O_xL0 za;+(Z-sO6FwaI!5{aJE2R6~}{8_%Sp*J@6g9#M&jA@x$-AA0EJ~f>fr$L6ghR5vS`l<0LVsCi+%DgR+W& zDi-uW0b?`d@jV~t2GcAObWbDEeq~<8Dk>^|PM%gTiVFiq{gLf$x%AdWxKgd6cUb3+ zbgBdB3!R!eh6Dq*c>DyiPcN8KAi}QZ?qgq57t2QbsF(IbfvFLJSwL>diOO{MkrrdC z$mP%DaTd_n?MOig8<@H#A2Bc*iVuSoHv2$kxBfdHF`vLAtBvjaktC7OHsSre zSyjCLdJ8Z+irzECo1?I#BdZc@qJa@0l3?5ekCg&Q4`Db!vHm%A29@)e0RT67QDAT$#ZHd9 z74W*{Q##nzn(kMF>UsXhGedM8-z}A{;*Anvf_Y|cIgcl|X?NeY;99Zq&J2=6rf^2> z(eK4~&}sxfukAG*7^LJywL!UGtD67ITmpm`_BA3qc!Nq%`q3lSCHM%Ua@n@y{ntSi2+A$F|oKTC;b$6Tnza zUtVAE2JvAtjCECAjHs;OKhDtbR!&Sz)P3NNH|(rvoi6mtwsa!sP3}xSE;#0%+*p(; z$sT&tf2emN*rT9D`0LizQMnPA>HvwyoV8hO5)(Xv|A2v4sPx{Tn#mCg|aX{_UHqAi)Y3Tmb1 z4G;CD3Tdmw;EfMqZi>TelZvUWY2@+xR%frM7hYmv zIff*&sYU2PnZg6wluEfJHeSa3SsNeyKcBC;`{Q42tjEP)Lm+mnPev%;pQa9?3@8|n z7$JEmdwt*&u(CY*o?N*S=owuF14DFU01K~c>?1HUARPHjh~c-`Ypeo&Q+B&qOt6sX z!_pHyHh4KA7x8uy;^L$CFy)^aZH7xPJwEr~|5gIn(*~pWIo_TlPYIaW{$|-^FyIL= zvUo;#3yvm$QV4M1{7kF&R)$Zn_J9$xO8z(gcq{lP|63dw1^{~g2^r$c{lS7CxOz*{ z@;tH+n2OMkLTjR?+UjE!E2MscY~mfCzrDTvcx$5zU^yCq86Ur+klZ>VfxW1>1E;iA z(Hrm|$86IK!8iqXEH++oP{4}!4DvBx)V8h++X^uoCp4C;qlczpt^m@Xt=@EN55Fws zgC%bVC=n3S;6j17LjPw7==S!h3P}Nx+t73#o8s?#?Rktl4)*^7_P{@aKPqGXXIKMd zUq%kEC6_{8!UN(ME2I`=rkYm{{CODf5YpT_9+ z+O*1GiC4aYi7iC+ZZOnoSMz-t>5-S}pvYQ>S<6`VjAWlWpFFw$m+ABBSq_xm;!oz_ z+YVd`uz6+cRfy~N^NRF-Tq^!69Kglh?+-L)u$j^_AovS1YiH_<`F-87jdF>~y`60k zsN83F{K}u1Ww8y|hu8+Si4P;@9=5)8vZ}|4P8)PJvX~r550h{9MR*F+m!@?}>jqAG zPRZH{Pdh6WGu6Js#%ws#u&>DfY;yfc5qUcP`NHLEpq;tJk>>YJp@o1cSDujW8jkX% z!gL18yo}Gi4FUy0*U{FYbKX0rt71U&;x-|zCj4bxP0cI{#q2ivw6$I7hG_;0t^vR- zQcLdKJ({8w<)5Z({KaZAFaZx6dK8zko?ew&H79*f6K}R^$VspZf7z0wO=z0t@3&6- z2ui=er4=)|b*XG%_RBl8KE_FfWFQ?1HC*2^4HSimRWksnVpgPaz5gJP(t4{)2LtQUXyz6Oa9w;KT>#iRc)b!9?GD!NE~H?sV1zaag2vnql28kf9?~8 zt@7(DCYI;H`#Se=UspQ2ap00dRj=j+MfnS^m zuHAu#iA@h_K5zThpy9?CjPFY6jmI{8#7e8b=eFuO;m%^ydT(vdNshj5|6XBmYnVaP zrJG@&)UgLDN^@n8ri}#9BOh2@rJPg2m*2T*F2zt}jVQJf&pGOU;Y=5_)@T#l$m*>= zZnM5UCp4j-*dyF#B2_&6nSmve#?6Mpn9XYafByWrqu`dH`bS84;Y_oHH@Z&Av!$&{H5S0IUk5>&hBgy8p z*U1I(H%z4E$}cW6b1d#9Tf~&`LVp6x+1-6(Qn%A$#n$@sRrHWh86{~$o;__X7LH96 zu!?!kaZwzYJ7T6m4TK>9SIE(oIY+Nm^ouwZDXvYnU(@(bn#BKdbl-O9zy9534|nLG^6k;uifKTF*-@(bhi} zSToJ{iL9B2HWME%D zE&!R6xN(9e;F`{u{3~>waC_V|#Zw|CH#KE(uXkDH(p@<3&i`sSKw|IMGusM;*4`O~kM}KL0}h?B0f#j{Wv3`Cit!rR`>^tWreeRs3Tjy%%RD{C=t=BS zn$0G6>0oW(=KEhFTJN=DRjNm~hAmTMbu@S&96Hat8@-H?G}IN*n5q(M^K^gq4}+H+ ziVQHx>^(S1XY!7=v@;1)wo93AOrnf|PzGZ|#%?eLjjc)XekRLWgu^rx{<7U}joD!O z&HwRm7(KY-l^H!IK>D@Lo)CZLmhsJu`yXr%PQcl+l#x!x zQe!`3tZH0mlBPc;M_H#-&BBbibNSN)_ph!Vd+GnKHhrn~EPWYEh5u$@xhrP-L^J2r z`NOi&)FxRh5PgUg`9^oYWsvCxT@FpZ!{}Mlq|g-UTGsc}MrCcR93@R$`R_7hfnhc^ zYny^ZoFW3TFV^5O%Qb--I?@wFQlXBo0>*oz!b)~0oVO3}dl6Afi@2OaYN9YlEE;u8 z0^*%pn@}@%nJv}5TiZTI@d@zwCMk7-dzpBcZl$@>;I$1aqeg(0flI~BB7tR3{+3I< z`0#}jm2tQo8T1orN*$rK1cU*C+SC{bm4W<&D@P>LknjDJ?3 z@~3cuA_ib~wjc0ti1~n`!uo85jY!G-q5CcH+r5MB%*0GSY&DdflDeIvkMr3oONfxa zf-b~WDP;!LyMF?jE{z_F!uQg1A*7lfVpH}? zzHa>9LsBM?z>ES(;YtyH6<`r@ZgjVsHx(kS0Ip%Bcu*`xDMFpgG1U)blN8Y@u>xqW zkyE;fkqb1{mz26O=$Yz=;9oc)vKqEpa*2-hTiE+9F0H_&)v6oyRH|bwUI%#aABr5%idPA@F+8NNl#I=)ATMHj))+R%x?bU z0F=-n@suc^QhdJPG7?DN#x7DA^>Amw9 z8=QEeb?4CI75A4|=49&{2e%xfr{gzb=WRw)dbma=F`p7CjCQYnjX>HZy8rG=L6Uvm z?_@fI_N{)vTYsq{7HQcS8=y_7hJ9?^H#~KtTHqdM9sGM_vYPD z7;A+wazmU5wBro6CLYx;!EIz69{X%|vht#tu%Q;#*F=dVyM#nO;@2)BKiE;aH({it z0~V`txa(o%&7msFnBv9+*f>e@4#ltR!*K$u?7!VG|BV=+rNBRV#y&sW0(8&tL2!Vs zyz}g{$A2y4<9|i(AKofz;D8)Pk>QDXIbdb{T8I`Li1G4$TNdFC$cT(zaH=RyiAs(6 z$h|dYS;VW;cmo%di2X=5~#8*#6dd&3b!IeROi%BT=6?q@h@5Q`-JSV8KUA+aIraFG@1vtQ1ee-BE z3cLQ@gLIWK48jt%sV!ozKH~alUtsyCC z!?XgzT1Q*wG&3qiSQ^?0U35y??f=4EUF1n{&^RfZsVA@czHrSM;{&OouVO$;j{|yv z(=PDGS(+#5s=>n_hk3po5W{K{Hq8L}&=K7B-;!5((_k$gWBcH6=-$1F*ol%5E|Q3E z4t`yy!oigm8BncV`Q3xpyad#6_q^)S-;_NE;QfB8PR*vTIN zv~rUY>S)ahb3FOL%V87(mhh~Iuok#&RltpoujKG}!K0Ee@4V{4ByAB-`*QK}Z=m#_ z#8CQvqZ9TN458-<+mrKg@7+=ZS4CBd!8-g_H+3p0IYRy6(xAKnl3tVB>s#8t!_{X2 zTzx~s$go$DS25nf&4kQ#bt6>`Stzx7+bZjt;0x-xuDt#;Q-0fHGRF>yf&P$!OCx#r z6yntuk~7$&izYI<&;S{3YeB1Tc%LEkOZRG0Z9ikc7s_`iZ4AeS9W8=;Ru(M>c^FS#%*e6bLgS54Wt#|#M9Le zqzLu7U#$IL0~G-8h_LNNw7`F{;dyIG0v2b+OK~<0Ws<*2q>6f2Jt)tR`E4D*;b7F3_J3)h*S0JV!>gqb#&+{P+qpDKf=B)?7Mw#)S{ z6}jXAwqq>)U(|(v%?1($`#oObb#1q>DC;w zwoL&@Gz4qzP0OETPKgeMO}D*@4K{+@ED>e9OLjyAvtQN)k|#odnHq>Y5(5k2B7w!i z`B%h*Df_)>B8YemXzu_x1(?W4{^ns717t|_Lq@7V4#D`dLKzp)7S!jUwxA0~FmmD@ z8z~n-LPSYr^hj&k3)wT`*Vswp0v-g&d=e!ET093|tSL_=0i?jrcK?eaWLK=J`g-Rf zSeh=5L{><gyHE)J*v+i zBk-sB>WIRbMm-LP1GkRwzste*dy%)O6(K7c?BeFWZSuq317wds@cj2${|47s1yVXh zHwpmxFC$?hY(ahiXe_TY#of@`5*E|>w)^8vg+aR3$k%PCW6%cT-&-$g2ofXu2?c$7`4Ec)!x?GgIOzKt|HE0vDcN z1jKWz$6XQs3<;l!nw-pqqvt#-77rZ3_%TOgC5SOM2EMN_#&HEIEy5=Lhfag^jPT?p z=!jF<7n5fV8!a3c)O1?l{Oyl&N;ejnzp9sKct2C!MD+*#_6(5$oEtv0r@R(+YteEv z20zHs1Fsb1&&(4tJtJ%_R&f)dC)E1}{Q9;T1?+=nf+qQBQ{VlK2EB)0ked!sdP{xC zn!9$1TJ6(%g6UR!eoOH%3Kej^E1oZtCB5 zn5nxv$dah|GNZh2?j2{d^UjAm3^SKPP;_$NRNwyAi)CodYX-!VZZROGAnxmZSZ}l4 z*z0;;E4-jZ;9YCw({PUU(EuZ_Lh()wT+Y-&F8kHwN`Kx}1mjF69)uZ7WfRWd*Q;3n z0HO#Y%6)bpKQfZyU%ca^&nUvcF8%QP((;5NSzg?W)6w%T*ILOx%|D{DiFf3uYLOtY z-tI>0Udi|p0R%w4m;{3Zn)4u@$gzNgNt693;+Z2Z0m)<@*b;%py~80q%s>Y@6*MAN zo^bcY<9D!g*46 zx95n|ku}^W>1kwX%PO!tsI@s+ru-TI(bzL0;@w4M)M zR{RTPA$?Mzjl2jv!6ABxD`2T0vIDaN`r` z7{AKR<$y#1hY4;8ND6bVBv`GeW*X?}>JMyd#@&H6e=6dMHimqL@ll!+s+ zIpes}CYi5u#je7H)?}2bJmB6di2w6napnaF@ITc#7~*l;#H58CQW7c8keoj}rFxY1 z4ga!u|CKAR-|K#^Y4GwhwOYQ#u`o=wwAvmW( zE(*H99fbB+f3f(@Bj{S)I;mAXL(`|P2G)6GZ?fb%^Um?~fHNgO_L#!A{U{MM=o z$N`F(TkU7{D8D8~%h^0+c1~PFykMW@h27epF}4Et`Lu zmj4Gi6Ng!Dk&3u&Ju?)2vDO5rtPo;$ad_)Q6#4$QUVjLF3~0jGIzCCZ zribk?%~N@p(UiIHN#|Uv7;iU4TqA~%57}ioO(1zSFxK270}RwTKsRul{DeIq_aAva z7s;m+3|JJpF3oYT>i(gNGxC;mM^Vmr{c4*Pw)#Z}+>1|Zt;NTZy%puXmy5R%N7zut zWp`$zU&!Hb2D|p6iabYF@(;CQAVz~)*S6LT`XeTVI`H_xYbaQTrY@~t%kBw_i9u=4 zyee<{$imB`VkE|c!$q+lA5{f5_x~_lu2ws=gZcJ;-2^-q|KXRhR#V6-Y5m(fi=?GI z?c4%h`#*{y`BRAFKOm@zHib`i$z!%@YKH$`>DCk%BSt4-z7ua*pUNgGc{^rUs_XBzlGn^pZ^KXyryK3kR>(LFz%)&;k;W$`4qDiUatkX} zw-#nR5-PQ<%ItBt+TAjHGTCqw3|qQ(M~&Wq$A9KN!N>QyqVqGGuqydJh-?e^@R`Vt z?ID#fIbF{=o-t6hZmHhqt_C}Fq%gCsbD}|^7obKj9TOwMfAmi``7S4>`(PN~?g~-SVvT)=*tGm2No-o) zo#7Z?1{$OQbq*AaSqBxN+bNoAt0<8mjU&Ad0NDo>_rOMp2_!7vG_}Y4{`$x4Jpzfy zV9VcbgJ!0(+wKpx^+zjet8AKrl_#-36-w`lf26Sd%SwS@9RaB1)!QAskid3{urUQ` zvYVvmE1;6xDvD85A)EpMa1j4#n0OXjrbbKLI{i}#Xn#?gIRgy<^GT%T)?I`_==!gp z{jxMc1`=KonZHevV)oY+sxUDUR}|$qEvc!=mrg7D*Z)aUqvZ`C@awf=O#7>6er?>y zsZ6xeYpxShz(u&A# z>rdqmF?5R^S||4LfoIyJ1^Ss=CwF6MMt#xNT%p<(np7SHL#7Iw3SPIqc$YHP6`k zP5-anl0bJJ1=0#@8#fvG{Vt13MFuWT-1xgZ{J(}o{JWP52I*gi>B>m;B{SNYpo$3{ zpj(z`Xa2G{VpFhGShhvn zA5~%AX(K__Q7%{-AFYwB3tS^5h?aKo!?=%NVcac#j7x^`jvx^kM&c$Kkb-rxJxAJ> zh1dsZIcXGZ4bTqkp_}z}SiSO>PG#O+nk??m?K+XG8V7#wZy!u#14L8G zu-$|G{#HR*rwxS-Cb+=mUeHdHW7?OF7@92iGUwO8&jJ;}<;nEfDguGF)1QaqpW|g% z*4dVf1vy$x9qFXn9VM*m1t0iO;bW40$Wh&eCloWu>|n&M7}Lz^_mnU8{l#<=<6`@O z^gDsU^L-H_UYi?O&Yh#J{fk#r(^0$i0$l-JcQ1-dtwxUGgu^JoTY2O~-YE0pvYJeBK({j? zkpIlsjY%XQ)eB$UpeUEQTkcMbZH6AGwnmK>_tEOBhZ`Q}_&ZPToV>jkbu7RZExbeI z%GL9PT#WF$=>OnLp!7iN&aS=XK)Xp9DRhdC=JcFbRDH1fVTQ@|ts%blA+R8%Zc4~R zh9Cij;P1=RRYBH1!ae^CndnaJjT5}NI=Ag7(WVTvZ-wo5G#7*q>)!&#Z-2z*mv0@P zDLUJ3&Ix)ls&5#)kw6XnT=wfyNv(DrE+e3FuzVq*i~w~cBKa)A087w^;%62g#+ZPd zA;7)|-)^yBGvbx8a>J%Fcb|*4Ht-P@-)dAfAt-*mav1#4KwySiS+bYoa0NaRhqRF= z`qo6#5X0sH`-BsHnc?|Y1t3cYglcm*9r?1=O{fP@ST-{&s@uPTz5ngz>;%q8@5RTb zPp9YPGHNEhvty|ZX*iQr4XB7$c>IomfsfuUkm~_^ot$;`)oL zjs4+~Mhhq8H3k-u8g(5WhQ3n+@tJdy65@QFPdyJFjn83hN3KJ*JaTRU;RtVKRZlWF z2u+mnr^#2m#qf6gD`%&hlvD?q^%Q!Jb0624`mi?Og{x&7hUQYa zMr=|6*{wR<`L}MU?9z3|)H$XR>lQ-iVsDdDeFIQI7Zf=drg}a9YUO^qo_T<`OA{+3Fx{kZD~^;}yHz$iv9zk7?9mE$ zo1YJ{wuH(wRH{`rkUb%l4M7n<2IN@NHZ&6DwpO?MjTUY4ZK~Iy9%}N26%gquTlJ{k(7kDxY#2EuGNS1CU>W ziWvajf;H!Kysn_=Ly*v+Ms>ZCOeHQIjM(1m3HgkyTi}{8SS*hztIwB-`{5{iK=p`thdY{6Uyjwu3 zG}yO*5R;H#<2HO=1$&JIP0CR)feRdw_D1U~Bf{L=Tp{vAm#^xpV7oBpd+BHd&7C-m*q>>?H&w5jRmzW zc?8oYXd-ln$FHt%8=7DY-DM5GQ({D%R3CSm(CA4?PJpxDE0ikjdFzfK9z#90EmNaS zUL0aW;`{|9w~tzuM4dd|myVts21s*NKwdcGHI4y`8*v;QpKsB9E{JA7mSwNF;tK5G#g8FYD%ew1>^>fmT=PT9dG~&;Y<`n zqsF5VLS^_B(pVx;F9g^@^z>|5>Y7YqnuT@{2DzMe2wCT4II@<(V^q-HAUtX!#zc`O zvuHoPHpLcG`GTa%dl)JIgKY0fq@Ule;yFOXnP>&l-)cix__6v-q|VGk3duv86w#*1 z?nb|AT67-QR>WA;!hQ%su@z8ntFugj1;pSW{c1Cw+kVH=c;qB(?gu5wZx;c|c)*rw z`7G1DlHd91Vu1>vL3W>nDiT3PHweHmG*l8?UXx3*tfDHq8{HPYx_wHS`*gH;!9Fg% zun`XU^pSZO+`}eh3GRx$5+vlT-Fp+nmNq3t48TNPe(_oq@=~-5>00(S2P05L4$}%5 zEa##@j=j~E(H9(W_X6MuR1FLWQWLG_>j=m()X*~ZaeQG5W(&VOtK2YX;Cl5oqrLRw z>%jX0pae{YgX+4N?EN5$MaZ4FanH)_wJ%FS@@!kiNGLEOu;Je!szi5a7~-;@hsS0_ zRPET*i$^GlB1ggP86|9-Uu0>veVD6Sg^rI|gmdQ@PhF&y1SC0pj{OCrTS8jL=SJo@ z>p~R6&=6xL0JrwRfy#jYuDxIw=Y;(>R#(P+lZo0T`ipaU4YCcLt8Oe6 z?PJ{B>igDl45!{t8Ohd*F66?mw)!Mjmng|)o{y4E+^XdC22))ZmNRL~u_@0B)jIxO z%cp^|5ZwNi#FC7T(aD6ql=N$zwXyKj8@AV^NeoWS`s3^eUTs7O6M1DZSC=* zL&27RMvC#s#Mck$z8C5)h(kX3m1o3nsH4h}XI*XyVlc((-V)2VXlQ`3Q42D4%z!ky zIdA)=-d$I=2TjB^**#I+PW8!7NA7k5$CB~{t;`L6%8D#G$@}e%4tI;Y?G0OsOIrm? z|C4bGZFYD~@h60dfkZ4Y zce7$l3jIPaUjM|1{+Z8Cw{#1~KIN4?0e?_zQklEj>+l>+hQOr1{w4si^>Sa)YYG2E`R7mQ11n*Ysv zj7oX+dVlM5bZVi0D9u@0yy9pAK=>A0kRvmK9K!Cm6%vW~-8)0q0{~1HgHiAQ%t_@& zwesWv(Rh>39RmOh`N^(!Ng~3~e#xVz;=u?Ookx<13_gIlOv!ZHt*zpYAtizzV0GIQ zBK`qBFWE-PLZtgK_=*1JB|GaSu$ClCoN+aGm$RV9hFiXMvH0(6 zoB)3L)G6*@-MbagxO2r1ZATLdxU~-kBW>4+N9Q9vu#SFxw>EDp=}xeqB}ZEYlw)l8XVir?f_jr73`K%a#VPZy-2EAuSFtyahN#7pGC@lH2736DfM$=vt$F326ZW%dX}6X(ojfhn3$-n5pknlR z7f0`}Zb~v4?GhJ`z;m>K=-8SFxvJ%Eabxtvh}hjXJSdfN&a(3=(hn`@E0VM7l#9kj z%Uxoez@Ey~vh%(VCpO2}6#1#tZVrMUo-m?;?0_1Qe9uO9>XHy#3_suCWz^KQDYBGa ztBpr9V)T5{LzbBsFaiN9z<+E-oPR1dU3ZyctEVmd>;W%VMQ;s{dRW_~uq>Q$kWfQ@ z%IQCsIRY>PamkX9f@VSrFWDm7YQ1m!0z>cuK0aetu^(PiIS#V->~>T_u1mabS4Tev zfwb{H^XwZ-lj}45JP?5l_~GoPk+`yaiM`?xUf_e6Fm|=hJEQDq6>>IrKi+7P;j>pU zJ^DXV_@~J575?PL1F8jt&CHMB7uTD=Xnw(_VuC*VA_lKE0YfXX{%W2iMp^Vt|7{Y% zw&ExMOpt+ipv6qpI>D@Su9_NuiPMdxfB0ZUDjOWNQ|?Bjin93Htdb!FKL8$BbyGZB z-8Fw#;l3eW=VTiJvF8fd5dF8#>wmCRfL97OE0GM%c$1I>_65Oi;f23D?c0JXO1!|j zqgh5${W@00(~`u@f+cB+z93q2G#TQ$*|!g}0+(u}>8y6Tw0e|3_0K+d644Kz6^I`I z(d20)6x7cnz4qs%=He*Z!48F|-gw&Q>S zR+1^QC&V7luI*l)T%8cPQ5o<_Kz*;c1vcF1GI?wwOBXuzx&5h#0{Pth2TGaMFU@U6 z4n$MQM@!P%<+yU0-QHzuXFS`C>O3Y&qZudSv=$3PJ z9QyKyQ_EYLY7<6`YfF}z{1hVWIhUoPiCp&{{(NQMS8axCS75m0sccVn)l-cSS%rm) z$gV|XJ+vP6j&M!>CU<*S_$}+^Seqbf1v7qO(UDU+at#>Wh6?P0UDO}oo4gcyG3-Oi z{RQ>Q8Y?Q5Yth|1^Z2b3ebAIF8!OZ++wV`wCO=iN?7OJB9c)LU0lnUosO@CBA>y|6 zO7-o5x9wUwM}KZv*1R(CLe}cOCHHmg(x5HNjE_ZbjLi#M9pW2sy&-B2FEATDVRg~x zP4f!Kbth`0hg?s1jZ(5ot$sE*zlk?79AK<_{xs(4?%*8gtHRWB!ZpL|j;GV!Us9W^ z(O_E=QYU<}_$JB>>eAww#o$b6L?=T{c_)Mvq1D)p{QK6NiK`7UfhzkD@2aLRXiC>w zSbJ;HwUxrRFKxX8qH~PY`aim8G$?KG%01=0(~t&Dk9T~M+v=aX{<5k;s9`fz0F5!P zkMChE{JEPMYpiv9`1`7RyY&nYNj6Gk1$2;7(mU&{!l%)j*|F&Zi+s<^sWZ2nRlei2 z`E+9W-a~+q8RQmyIhSE$`aHT!>D1P>Z)t=Jj!!Aj3VR-=XO)$`T3VRgJb5U@rNUIy zp%CrfIQ!`>gn9Qr%tI|YUu9`ed(gb>mngZS+oxnBof3PF-~5DRa$+{7j2JfNP%Zo; zj%BX=xIveHrpLY^@W{}kdmR3e;;}Bw^XSj8A56h+uP2&S5T<&v-Eg}RTGl{vmaK9V zO^w7s(C?e~&E79jQD}=Au|-9uQk+r7&4wU6QM`{d)e%(cwHn>ux_$8*z;zexBHQeY z#XCk2D*#HN-CwwyCfPloyuZCKd=09A>uj9lv%k2A_nF_W`7GPF^7ktQ?_Q%9Ars$^c>XOA4(fcp0s&DCv zF4t<9! za;EwhiRjYcn5-`%dTas>t$18b@M~gyEZ)~IG%dCQB+wy~Y2TEO- z+g)@i?aULHr>9M$(gp_H{lz1676b&hBKgK!)$|K<9-Q{qYHCuuYGLDNi-GpZ{ygwu zpgsyu(dOAheg>5;u{*aqjXwiemK#d8ksjP_ue6$e68l3DeiV?*YJ412#TeHEv z%5a?`E_(OP!>h~>kgx61O~3TLg@&1D_WdF_!XC26&yE2sNAON?T<+ki3hs_S)_e076|Wi!Vz`xxHnkv9T`V`^HedJ2 zFI3vTP!RXi>Rlgw#7|Ik2cWK!{XeCf%p1>w-vJ+_@qZHEl0H0jyk{P>A*=A+(GXhR zEKUiy<(DJPzt_mbxMjzCAUq*}3G%@RU43s+t23(4-X<{MN9?m>+s^-H?X{6#2AdnY z{*$i)+EUf-Vnx4pfNAzUySQ8vJlj+NcYPwwCc@ zeV3G28ILeO2EVRUQp6=cdf&sHuW$B{w@XJ?=}>I?`Sg3fKJW*1PG}C{fjh5Gx!l6u z2$a{=FgakiQA2C+DOU7PNLS173%peW%W>TW*GZ;oJDrRooznu78?VvAb^k{FL{ynN zl|6Gu=zeKf?zO@{3VJ^duG*rAw}8Ec7*Rm1`{-H_>pofriJjUqG-abH>NV7g{+^9( zHfl`I)lRk42(0pX6Y2&#l_cX+_wAf5a}?IH1-$NLa3Tc#SMji&(mws+&g2%sSo`E6M}*-oNVX`8W5dpq2zEsd9s5y}h2?m{})L z+pC#(BUE=^x;b;FeI`2TgZ*zn}+^j1dG@3xt`h25eZ?nY$?S18U$ z5hp7-TpI%&tbjCI&JN+Uff<#6_I(*pU=rW))y%l~Q^IwKlX~6|I0m=Hf=SyX3Nty? z=>NgnW%~wgR9bi8H39UpZE=$S{3k(E&+9f7gH<{Ccl1sX{#0k^{pJgqYoloE9yn6PX%Ejr&YNiM6 zA4Zu-N*iEUqe-T2ZQn?pxJ#yvNlibY^`iTr>i;HpNcX8zZm6Vl#}t7&v`Q^ zLQnt^wx!$xFw8OlOz1ZTpRkT-6J<+}j*6->bKD&|YDBO2gfvk=4lSB0?SOy0x^3z! z7XSFy&o6LnYc241nQy`b_IWjRc%SuBQF*6rtgJLhTzHyN zQ;N=E`qCQ8-+a(;_~QtvailP3ht71BCsbm50V`)S$O{4oyo&8BSE!_4yim>G-1_?3f zi#Flh)FRv(%6l=KFTBaX5{tfW`_H*0A1pA5(6m z@Gbjbh~ei-K$gg-7j{0k678Zg|XTb$=OGsP|{Q%lf6FE5kw&FP*qJ1wY?azwqS~RFC zWUC5$ApB&J6EOd3G1#@?0U+h&%Zs_Y1Vag0;N5k7cqb&{L)?6n7R}u;X}iml(_Nc* zNO)x_t#Co%1}jta6#$ii&hT zrcuw%mBUp{78%s1ubepa3R^ef&oCpeLmzUP`+N>swquL85d=awXw_GZ8B=Z7F{hIQ zpRWRsyCd|H8%VhLcx6@9J4+sc-Nmno?3TC*MHb|psVTt{bE-|4jSGleZk z_2YEs;_zY45jRDl$p+mk6Sc5C5hPnGj3M}FuF_dVh7ssX>Jr&k96}Uv$c+%B4FL?MhN<~$UgVAQT@pNVs3AF;`{b7RgFWucYU47 zB_#W(XMKfVWKKQ?7dxt`ddRoH&l952`V`Z<=7QyKesJaf6>&cXuZMU(eeQaZdvmcY z??71+MXvR5v0HW+r{nzqWbAg4nKe4!r>K>sxmqr3$#bCXDG1aSv?E^)IrK4hG%hZD zof3~CSCeDjC1E}~x$9p#0{-5!`s?SnPdFVn1|ULkg^lPj+*kga;V`$C3Zf6rk{;&P z%(?E7mdlPw?a(#Jv)t{KyxfxZIa0wF(fj7&2~^bmoDjM>xh^1H9o8=gzED~yKYE-( zHMaKM+IBV&6PF_@iOJ z0{D9q!9)CMxjhBJym3p{XPomDg%b&vJzu#OcksCn7Rx4^D{8{mnbYFW59k*@>6m`& zJ*1)x!*xq7EiB&YzEsy%IcCaa^zv^_|EA7?d9OoY$YL|!6~hWCaoIoY|1pFJ5rRgXb8YoHW8#4%Db%Fqn2t z&5qp>9Ji literal 27086 zcmdpeXIN8N+pdniGJ=XoQz6np0YSPIOh9^(CQ6YG5}FW-4G^TrCV)s&3B5@Tp^k+T zsx%QoQE5_=VCaN$)($iC`nKWxQy~@3wazFRl!J6tS2lgJ{yJgFk z1ITMvw6|>8ir=zjhvM#Ez!mo$fY-k5747X3%=Bib)nb?7a`@fhMnYz>Tr3(9kBOl=0la97-O zubF8Xa(b$$`V4JBewlq6<|%wZ(QGzc<=w**N4IjXm|XZGCVXl4$@b-^E{@-)@@uO7 zH`ZI?rR_`l2(#Aex-k*C&#fRxn4Pxqq^o4gV07bUcemcMlD&n+Bc?4USq#vQj@K3M zjr~YX8S}BVZKEprI~xD!HlzA4L{}-@vu#^U9$Y>a9k?=)=iIcxqiy_DtZCySw@9VX zhIMpHs#t5@ljl=YQ$EbQ*@~bJbmiTNCfZqxY7>ZQa5h;!{EA_Y83kkX!9ylKH8Y|TrXr%!f7;SeS!CJaSMlc%6PNrAqnkd|k5fv^OU5?h1M{;3 zLs42yI@apfY946pKItp4oScnU5~D`3ZP^}|xYC{8hSd;l+#<=%{18$=e?_~uwf|x| z-Rq#sWvVDVuv?LDJA!A|sZ`QD{n17!tAw%mZ>I*Hc&F5<1iZA|9a*mt*FnA%!X`GM z?1P?Dc*)B@5nR1SfL&0yaw7nV`gx2=-SEcqRbb4QF~dV`v--YL$^XnJIMDI(%PoGrMVDT7;}}ISUm1aM{w->L`SpEVF=|Lsh8fP^-FU?G9Bu*vu^TB z%_GQrIf4odzRnm+JAYc9c^0Rm-HMT+*Z&Y`)XOm{n7eTb4*<4 z=UzezWmd)tHr=2TQXKj2N>1;5>8}(YP+9n*^VwW*vM3_eZ_$v_5xvjHuVKG{fOJkw zMM3!RtVFut$ID3e6J|;->JwMXrDR&p77gstTi#t6+tJ%KBUR=FYmp{FZ6w1qUqiY>4(rZvTIEX(hIdcnOpoaDk)F@CTVf_EWa)NTO4z` z<+Z289)6zgN)`SK z?Gx+tSEaH+dg$MLDHTgn2jfm6$dpps(9z?_q55;BB5dDz=mTylbMI7+ZDTh$?qnw| zgDxVMTE4U<8=DPaYZl3r8)lf#YuWf@sqogleu!>EPF1#8-8;5j_@_E>t2L$3H>=QO zX6}>XET}<%hxbcI6HacCJ9Y5^7gT zDdKeAbt&4-vwE#!e{W2}b7%o^vHrVTRIjEs*M1=lg@g~O0T1@Mjjg(}4(=maSiah3 zc{_RhBQjcD;$ysic-;QDd&c5(HvHu8r~%`X+Q`u-sn?O2J7&MU4`NzA964d29r!gU zaloUl5-Vd;b04LXK?>NvEqhy()Wf6smJJv}nxy^37w@ImU*TjAf3ywClHgi7mMo6$ zb7j(N^662}LX{8Pr4B`O@DD@Vre|Lwn2yHqy_pp_rIUx-k7{&{Q;BP*_)NZj;b0Wh z(-U`A58FHO=y1FlTlX6b`_-v(3l zZ;kmrmZ7XKc+EiLHjUeYK%WH+v?&4ZT?yP&D<~?DcgWso@vce4Yz+MwjqzHO=995* zp`+r&vp($zcj~!Z%=yw?!wqDuCC0N!+F}v6#`LAT?waY1^r6MqP*TUk7Ma!pndHxz zL^l;9h{Zx)lr$$Kq6MnyJm;Qz*dOfl|jewEwxwvsFNZ$FkHk;U_hH*)^qk)R$CsxxOCosQU z`OM|i%5q}q+kunikhrAnbCvqu3Cg_5u2c;BkFp)PDjePsS2rH*6};0G#r}?K;~D7Y z_JzAqNn75&McXiTOA;t6-o0hr2E={c3%8Nz7YEOG3id`G|Nyi}&2y{nNrc&^@?1!6s4tu&pRArVQI{Ts5!lW>wUJ3Vo z&#$jAWk`+t-?L8&Y@{{TTYdkTdbglV?K0Gy1@TDo z>Ckz%ac!I#gZx!S&2$uHES00NtK*Yo1(kjMawT^5@kP~EGzZoPeKH7&hs!i3PtWF3iN^D2SZNrWsFH;Kk9?-4uXs+>1 z@e5U9&kJiN1cz*k?80U8}rPJi6rN z7mQ!%OgLO>OdUp>^0Kb|Dt;d#FLQV;y!Rn|xHeiGn%cJV#Hy#vY;I&Ep!Swmo~ra!8D9yom1P zvs1U6c?@E#JpwYhGM-ay5jCz0qg5tnuI)xKV|gFHNW4l?FcRC*M|^4a`#0f)OV^T7<(`FaYOqxf&0~v6i)~_0p$%7zl}F98Z=o>X zeIJG7_!t&!m(MEgo6KUK4VpDBnXz>?Z{N6>m}YNc2?f0=pdH9Pg2#aua!} zHXfG-VL<_=!)tfH;`uMkcV-;sx7C7rwYBTUtiA;6^LATT6_3;F^<(ZmJQjBZF=`^l zZHC?X3-|hiCPvUQQblvmwnBD?r0T9xXp%-=U8fj6t&t#V?bAGd(jZqRxlR3CmMaU- zZ<*fe*4NAmUGqK{cdbq67Clpa07cd`oEcqBBZp!49%xgsT252+aB=Z^;3plo2hlRD z+U8HY$AmC_G#xQ@O|viDCV9r>>aMH$ckyEWd0jjt`v=#bHgsPNU>vsL};_PP=uj~d#%(aLykYamWxW%J!N z5~l1V9AS#|;z*IV57jsnheo7|oDg|<2&+r4v3n}!Mi?|Kl{UxMT-q^RnLn#c;Wk%V zD9ki!FODxCcq^A^P$Kh*(tt6Y{}O(6!!C8f_&inH9nZG-^oj#&;C5AcjV_&a|H3z( z4Y4Py8;Cj9&~?tWdcM^~D4)Gyv5?_|Xk#t$H5;oXTd{7T-_bAK*Akdq=}|{ZyP9x>)pfsKQ^NZy0YRU(-=6G~mJ)amIo!Zi61%lDJd2s_6$Rh z7R%~iT6SSCZApBi+_@W-wNEadoE^#D9TOVI9_&E5o+FYO7BV*!6Z#@4#3aZC34)|> zsrp<~`fD|svItZBJ}0~lR>K*8WP(Km*EvvRI62h)5(+uI5`NXxF=b9!&ar?Zb=m(A zJ>MmsCX|Vf4dRIH!n*mn7$6<#z9w3Sg#=vtEl*>McUIl(7^=Qoai?12Ru?)og;lY$ zFR}Z8k2j~nw%EIi-zzIBZjTH+Pi9}2n@sS=jk&Z-q^6Uu{RODW zAfv<(ExvD6wsDFc!jnsPt9auK5g5P4z}HI@IQU=YlCE7W+Y_wQF*(TcL_@Jw;lb`b z1|4XM7{OxQQE@|8X)#vbd-~T{Bm@F<^g1Jd@r=WH4`ln?c61D5Vv4(pKx`1ajgv65 zebwCWw;rjK)vi0`1zLAUh>Wv^q-P%?JfW>!u8G|D4M#rHB-y+qaX8iDWSi#d{JQm` zh~Jyy$_BRs!03xlcG*adytr*E*X(eQ%d^)68h1&S^BZuI{-o6{I=$=zv)8t&^{*oszN3end_zN*Xb`86@mXrzG z#)9_MD3qEjde1#6ihVgU$1mW?E9XA;p|tI00Kr8e%6ei+i|hPFO|&<5_1kn~4d=as z19f!Eq*{yFex1aZBa-}HqbsT8prPN+CDE<{JAL_7)w`6j+g$Z^EbsTAURzq4(PQaJ zgKpQ+-9}A?{dT(JX?Mg`lDaRuLN6`#qp@B$-pjuT48-MH7Cp1yDABbE-Dy?rR5D4x zURZ8_SCO5aoj}}EdBZ>=oZ7Wr+B^|;h1Swte2XRU76 zl)3d(@7A++UXy*0_{)<_O`~e3`DHS5`fWlWmaK?_Tu7p{<6JL$>RX%R-t@Buw%d-E z$oryDM1v~E+Y3dOmuW;m1xQ&rBGV(kmkJf-^Ex6QLTp^Il^$!8pT0F^Qe3Rfh>S=h z9NLa3%Ea|gs5)6hQF__ql^jqHLxs@w-(J}`DYBr%q?tqS-hpXg`QLEs>XGY!}6kGAZnuD^a6 z0`5~e&0}^&MP=}6aY0YMqOUTgk0_(2DL#wpqoTjgefsvaOsZ~WnL-swJm1LKvZU+`6gNdHqY(#$qN@O;jlcYI*?C1366k#8{sVRd|A2 z;^jz};Dk}HjikPM@*8fVqiE{*+n!~Oh^F?XT9tI|`SVU*=C3*U32!?d?P5A_u?N-q z7|Lu}UB;j#OIwFVG{N42!vZi$5E6iYfp7r)3k4X9e|0%LhOTahGw9nD!fpfZY7K#C z50p%E8+yV}su*195wp~9*}gAF!WU_^`qeK$YcegU##r%D_Bh&u*j-pxjc+HDSOlbz zktCmnvm@%)z&ms@aFQoMs2Ed$`7-bXQLh<}+?SxHS`enS-T==z2nk3OjSfF;Bd>_&g;kAY zG!|G<*b!RdB-CJ~p%{ms{mwnJN^3sihW8Ow4+2 z@yYQ#6+{twZ9jz3AZWsdJ~ip*GssiZ57B;g+c0c0VX^1pm3@1Ubvg1=9m=YzURV+j zjh#Y)4&;E)<<>L4ZncglCbh@+q};!MaUgKEb+F)&afxpX$8DL`1UwjdoUV4Bf716I zkca9=aay~&d-+!<`*vH~F|vVS^`z{vk1bBwpF$AxoN^@LPbCI2O%?Wi`QkKnIRnxI zqKTqFecbF(FsdjNmz?1`fZuhu^Wv4!<1<~gt;V?)2|f1?56EvFVBNW&d||q>vd9mk zL&j?!#}QEMS2}0zb|rFRh=*c^o4uYw{Bb4+^{I{ROFP#&e;PM%TQOF@|~Pnut?vRFR5B}u)2_w8g?4< z6~|#L^Ug#s98B6*lXCP|;4SXVu!j)4NU5=+H>-cM4FrGrF*ZVb?Gt&h{j|$QaqVcp z{Jgum1Po0T3agOx<&jofi~MgLeEsIk2rV=Uo#IE1N}+BYJr=|>dhZkaIdu^j{=q&t zKqkhITpcUYM(-cJb_wj!k;7weAMK)vL^84Z$r1BK)Ln@#QS7M3vsfPD#AC24N(k=R zqC;{w0S~%w?OupOGNOJmLq@DV3`2o8EXwkZeqKOcs&I0?$=Z5Na@0neWBtgDA8v*K z;)TnR&U%e;CpJbkVHf)l7+Ni0|KRk19|>m=AfLGMUtNZ8fX#`e1lB?F_&F%Cq3X33 zGXjZ5H6{w|ca1b=vq~-H_EAl;1=ELQ*3))!t2=PENE_tgTY=TNh}_F~VF37}CUlAM z+E>69Vbu!NQmojPku{c|8+&qN5PCu}jP3|VXMf`0?0@kbHLO`^AEz_lznd;$;2>zs zf8=;l#7YF?rqUMyCOi8eLWpR}lirNh1D}lMZszG^RJA`tO_EgLm&D~jr597k)(Pe` zWghPBV2qIF;CbCxiQB^SLw=rPLH?`pudu}=ogzlZ0TEqa z)WJDsjE3MHhsE9+0WV~(O}X)`XSZqB!>Xlc`soYwokQxT%tgn+2#Fa`$O+TnzT}yM z;V3!vsjx=0weQBImhe`ZRN2=mqpOooVr_;4U3fwp(|oAkou_R5yGc-E#KRhA`cTBP zun%+J>9%iDcu|nUeA&5ul}XMS`s;aa_P3U-RuAdSv&~E$pcAQ`W7(iLs)Z^qI#n&>WcA7}ujhv( zZ6P^jtSt9U>%IKg$8B$nBNN>`o8AUbgC6;rjXsennxX8QC#$SK1cTr;Mrr#*umdP+ zgI@rjU<1J}8ekj74+E$Sp7PGeiLJn~Wj%j29J&xuJ|*-hBK1;A(Hs37W&Vkr&cU22)sQ4bHF&RP z&5EV6qfdusC-FNVBcW2A5_9CT?OkL7bTHEN?vcK(Q4hQ<+N2}(<6s)SdZ9_WiVxn* zD=igI@gr)V3)fyJ>`&=>T9Ln6{D#&QG=$VK7C$e3OjiHcD_pX!SMIFA5N(MI|BKVO z@B36`Fr-jbr`9sdid<`f>x3`RF+^_6%>}z^RsYw~x^e@Qh>ni~@Ll|I`{FIyjqeUZ ziX`aJz`{D#Vanv}{363j#2rOg)bsl$&V6(t&NyMxtJnsH7d(H<#hN^X`=+U#+`1s! zw8HFP-`_x*321c@`pqlR#c{2nm)-rH0%y-oU}d0QJ@KmOa4&X-i4(}hHj@~bP_s_` zCXQrWJj?*bKiVjXl#!JcZ!fRR;^LsjE1ZJdOW&sVf;*AwNFv~_sZrA-?I|k%F|;9< zwcmJEs)=J~W3%B#We^0{;^NoIb^eD!)$;C zjE9l_%NGG0jB#O`oxdFfLxzG+JNNsoCb}Aznqi}EW4&D#qgfSicul^iGB#RVR;7OB zN$YoIlfmy|+yrb{(meehsV20dYxnDEkX3{Z$LtMjeP>kA7Xck2!CTUB!o@i;ze(UM zN-uASMy+1tTgR5HW7J59pi8Fvd))lxOb&b1kmvX{FqGZ15i z(94>uF2&>8N-eM8IpKK$=@y%u^28J_C|otrlO#uOS#m*I$AdQZioRy-#!L-sOrn)< zaE*o2h~v_w@v7~mc4H}G^G&+BGF$G`%g5tRupbay3aRgk2VoqCLG zMb(fcivve<)1j6cktA)(HIX>6W>0tXcR7*Qih+2GMmsVkwue(VHiG_gyfh9`VfbN_r zbC>D&>&Ep0nI3Inm22YSpR0}TOq^wvO6M|Uhw zYsFyClNE{T zpL%*=rvU;ymAs$)ZMu3g+$Ev_@OFe6*zACxj3zcQ{PPf4GJFQ?x?NqSo+~$r(-=!q zl!qgm7CmGC^(|$uYwev6FE|m2M{+Lg7(4{;VM`+tBxMcUlIip88~U|A4jib19jlBf zh->7+JDR7+N^4qsJ>imu!8%syk|ApS?#5)z8l{59b?y~sUlUR@twIIc*olQJba_cbI6WL8oVZkC>bnY>zum?8`jE?_2r~l-sn0*=VR~97PxcRJ&D>~SF_P2fT zM%O|}OG&l*EeH6_WaQ{pX~CBBKVzT_3=Hgf3{{|nwhjR=UHewSEM?wdI>4Vhx0X=0TBBa@JNpv37M=Hosb{7>|2e(5GcmxYi z+Bo|>fzJ_P923ci?1Q00*++09(^7nlDLS2l>*Mx}cL2eYo*KPoV3cB4VovmZwc2Z1 zZ_4GvGi3aoXG>(Z0O{<34XA95YCUe@=gGjW;^}f#z`uFEDZCyUq~7F_UJ=kL>u4@Z z`J8`%%1X*EG0PUEx@weX1Ac9V{qsE~IqumChQD=-1vP|RFGO1LMxRr7KvkptC)-Q4 zRaY{%_$w@YFmCZP^F@x-(R-Jl55XRaH)G_}a(M!Citgx2RmZnTq~Js{-NT118>;pU z))lwZ@Nv{$c8y>?m8>O4jts>aJWFH}tFh8+xd3X=8-uPEaC zx@K>M{9H%Z6`y3>Es-;Fqe)tH(}4ZW3c$AHrwnh?ve9scNs>>Y#~;$#ZMv>`pf}ci z!R%kUW&(rvzbjvDQoo?41x(?eHLZWa2meFq>*0S{6Z`w;|F1O+8?WsMWFvNUWh$RN ztgdl_1(c_)Tr<_oT^(w%+uWBYQ+F|O-K}HBCZG|u^*|2Aac+D_X)YdA>S;hgwbZUM zbkBR-LRSqgjGRKc0y25Gq?6@xJ0%tsnd(ln;EY)dy= z9;p>xC?nr2wX!`T@epYYlEq=@{Z%Imo<*B$^V8Rt?ptj6c-XT%nKVB@JNpQb>z1dZ zD_zH1DLmBlMRO!c@jzqil`yu-6~3xOO3%XDl3U5UI54?Us78F~fmxgKntK+r;}u!* z#bFb3Z#(aO9Z}gw&CAP!``L_xm{f^Wqt$(!wi%?6w?>#x@+N9+5IDlN!t<*IMjDHz8VY1M>PM zPHnhhHn-GwL2#4P&dbep`2|c1GlC@JPcSm-R&}fM#`@dmbz{zz5}HoqOE=*rKj?g8C9{~0P6P9icIAv`DIv8X;RK@L&eekE|HfnZl>^z zBX|TPm<@4wb;-M%yuAxVA^cXq@xF0Z1bV`3`w+=dji4r9FO+;zrSYzZ!-Fx6; zby9Kt$(Jbn>&ic@&q&8WJOcGm6@DO>0(F9pNtqu3%TKE`UXzZghNpAr8DYT_V6yw~ zJ(nxicwKtbOy2XWq_r?0sY|1=e4@>O~aO-{)Oas41H97|J z`715_Gl6}*&pd8#l>N^0w!jM(W#MK|(3XiPEkQ})Y^}uEb=fC27q>ntKQNkj0FO6_ z5|()fm{DhND*$<}$1u|_e+48D`iMPm=r6zQbZ2js!_+G~bT1eJ^7g#zAQ=1|ZKRi4 zn0%Xkp@n};WQ0dn=K)XSr|PN_&NYoRy`H!Coji<7^o292pL_2Vnt+ZIEqZ+?UIYfEP^LethQHykZZ!sWVnkb(o?bsBv$)7@ z((h&N{y|pzrjJvPCtu&d!Kv;^Z$b0Egv=IMl6bDbaXI&tMM_nVtgFh~x7VGU05ffb ze%w^Qf3qRl+aDX)l(R7_-@ioeDMgg*v@pSFI_hRkF-f^w6lHi;RrPpa`V)I5)piM| ziGc7hj-0dBQ@7FQFXG(KRVA`)xcr&79>J65bV`qgpPI#|`k z;lwHKEAQPZOZJ?YPha)!ypHx7pE;}IZf-=?3Bq&Bnchn^oOGXwCf{?G{IQRZa1(w3 z2{}?BU1aRDxD))Krz8}uC{Qdzs4gH@QNLWq_v_+z*eknyU5EP3;4Eft_oCqV%~1eK zoaa+$d~l{8CP+GXs?6dg0-pF}b<^D>2y zu!m-La0i2A`%7H%?|BEzJcAbFun-fsVx>kQ3*i7Kh_I3B#QFJo8V%}y_Yb5CaXS|m zGOS>v&JEpzV8m|!6bx?$9&tC~;DjT}kN5@zm?ElK`ofGPOIHx6LuAX&osF)0W!WR1 zK1n#VV4e3_w-mSj zLxkfaWm4PuTA<@l+zrRtuMWpJ16bfn4Sq9%~+1A@uX&F*-sAd_x?S_Lpr7I1xuW|lhcI-dn z^jNDGOXXa1R3PVj8*49X%`7@@&<_Ny<%w*mA{HY!*ZW%*24XB1b|Q$O{A`M%nWiZz`_22BFo&HxIy9Ergx#8-)FeM`Q90rcHda@xdaLk2SDt-_V`OTP5TniBwH z#2D!C5XkQzLYoKzQ^Fu&z*2(sg&7`ZEF8BYk7G@Q#Tu+58n1v7`VMd#lmW4`v!}P| zjXYAZN_FbWhx;=En6UkDa`_*R{kAa!Z7pvUxqXF*0o_ ztiw@sBKN3ZOm{{r1Nc{nnh2I5n7R-T{`WLcIktGu)Pg_BZ%6EOf{;{h2%BuH%|=E= zwfNEvK}p$t_O*78p;lRPOJ4=<`^5Xh;AJ@3jkyU1gf$MA;;tb{nSe%Gl`P{`M+P;B zmhE+%L{}Jd%7{*A+cMd|t@qdDrrcTh5tF zNTp1g(RhCK=nn;_9sRBJKvkG)Iu_fX;6n5;Zqt5&ev3GZG7_np?)HgYzao_BQ9i(( z`ltrgjcSHsZPfdzGpM0q`# zdf!-pu${p&;uI6f?lJR-^>C1C-oXF`Bpp^lS z0YVsg^btG)U^f2>!WejjQLt%oVVXz#rDaO{m!@{M#x?pP2m}DXgVs1f+4C6Oh2j4z zIeS{{?_467NFmhNlzw)SstJ)1nmn*OiU$3(+>7o1JIZgr5W!0hX01-Y@L!n=OxQD= z#kbcO>@P5Iy+PB;`B+k`Q?H+vdZ5;1?SR3$OMRmbw;!J=s_*ec;?Ni7^dgh9m%DZ7 z?Rx`$uWbNQ=Yt2lQHP=UOq`=(?hS3f<0j1MxXZ>p6(%KVS$(ES+1tPDcIEq{#ma`QgGVXyP$Z_IS8Itv`#&OvL_syVv5#l_3||Y}m9m_? zyieCW3QJ2tK^icDkfkW2JO5pE>u216CO6F-qo`XH-T(RXdHN_TdfN^`AwB0V*!BVD zPvODQrhRB7Q9+jZu?MUmhCo5M=#k9;;tv*lll=o2gO~HArR6A$h^NN&uv!!BVt{0K zgd_DuK>z*S9tO{aq<3{ZcHMoK22mJG$NT1f77gZ=Ps`bx+mAh?%X11CdL#F_)Fcffw zA*L`_SRrDhfzUfp(pn*bomjtST4Z5`$-lHq4-9<|D!j_!m24vAJH;c<$Q8L)OFKo% zX(6pCPjO|!-)ug;@5Kv3ymS<7+wY)|8W+x9V^E0dwfqy?nx@kkT)Cz=56Z*%Ve5_C zNS=;STU;rl^a)fiy%aZT`@S>DX*h`!$5L>z27|T_4!*X;&?n1qcs|DB>&y(WS7d&# z;LWJ`7+)H$qfJg?_oBCL6PRde&M<{52@fG#t-k^_u#SxJT!iDWLV~VQ-({=U2cwx1 zWPRZ!1_e;dO@?@cTWZr#@w)yWlFsqDBXxCk6Rt-HE&HRR%e87?U;`IONhk%RCf#L| z_x>%h6L4I)yo<2_f(!sNItoJ7&H6559)dFe?{d!nBG6NFO*bA_Ba34u2|pDxxDoHA z;ngmT?Fo?{Q9EYP;^=?cl;d+bAE5(tpK71BiAu9?=x;tmCgzFP4(#e2vpkU@UVd&JvH{*A*aN47z3@+6OE<-~=`y z6dn2kYSpv|g(gkB(svwJ5}k0+=<*RvlS_aT*~jEhY>* zY0z+sjPlqY@zPHP$e$5)g`4qy&=hP-XL9oM^%6gM|Y21QG_R3GiM21GKD_9@M2hATYb3pF(&T$tU{lkPal5?lLakW)l+jYWKd5DMl$9#mvk}_v)|rs&kJ4`exYG{L0J<;Q1HT#V~0L@bi~WSHQOcRR8m_i+}e# zqhav@)L@N&jed3_5JO+FiVMjH)NexpI1SPY&Sk-RPIUrAld17uLo*Zz)_*%w`|{fq z&<)2}l+YXKs%b9eMqW!ZC&xuD5+`(FU1c3D(o<<;97rp3(>)cH4`}6+=|3KN&4AO8 z3FSbLdY#BVZx2q9E}f5A8L%b*rr5#3;qE5k7tj!Kbnq(v>?fdx9s4k01`k<-jUgN?#^>U$$KzE?%x&F3iYEm%6$mVYqqlM%h0V5r6U|2T9YDIC zJ#W!z_9%Pk_#OL;hzjEdJ^QMcYLSrkuFweTKt=uU`=NrHr%s;~kar#mEEBmhT|@oVYf5Q@I6U?P(Q5e+iqfNT zE0zoUAH$H%6lb%2H$EmqS-aa&eI3gc?^iw*=j9FfQbI9VO}@_Qj&IpgbkFTK=tymx zcopQ(NV?OYXm9+cXKtr;%EC}hn-lSVpieAAl8q}wrwE|b^OAh1?-iqUy4tp{sytV)N+eBSB3T(PeWb%NV$x-?KkQ=keu`@)bekRloIpC-ghuOD z1=6P5{iv)aM>lg46cHfCodSj1S7GPKv$rnq{o#rN8eFI4=WjQs9}v`merF3}p>>K~ z8Dy$yUN`UK+&;13(Pys^9oiSRwH|SKL1rxZLD?FU9+2bn;`N6&7p14ChqXy1P*Z#2 z^>Hub7|~OcmIZWXeC%=YddC3wJM)fprqwLv?1jFb<%9?s$}`_^XW<}_OmI}hvM^@t@UCClhNt*3RVoZf4FVc7|FKr^3% zTRY0C-ZWtUtK+nlnTFrHFJrdgaz4%{G$L0RuCxHdR4=|HEsH1ZuC ztt- z+TbABovTibLi&w*ezXS~Coj8FHzX4k8*_R6H&qQ5yV!a7P63dF7ekqiq*>`vo7H>uR}b#kWGMbC9r#c3@R2u>VyuG%SCypQZm$c~ z=5^3HBTYs=0x*NV5{(sO1xKG_)GQVw7e`;&!a~n(4PpT#w%+6t#nR+zk zwHN&v-%5Oy#!8hh$M&DR8vcp{sjdtEQCqt@z_;Anu6~s?QMpTd%!z|fMLV2tTo9;X z!D)-N57Hq@+se+yaA?2@94JSmV)z}oP2xXTw2PW7LlQ7KPC_+awmsV1X8k55G5eEI z%O$6G)KhI^BY|Y#a(eZ(SNg=ip1BQ;fjW|vdzN{)A^vM+6D*2}{mn9*jH=m@Op zzG5uQ9hY+$9B3~*-YrATfAr+&;WHT|&B5Ng7|b~$#3THtD7!J>BRYDBH>^P~C-ThR z-9RROo;uCRUZ6*^{+sL?i5UHb7JQS_7QbDDhnuXM&Q2*kniz9u&@Xy4JMYoff$35^ zkhKmK6t$R}Vxo&GE7H~kd8oy%C7jPM{9QBI?zF1N;DaiGcp67i`Dd?e_t4qn5wGL< zUee#)f5rJEG1l{wvvbzkQPd+z1KUS7$GO7Gi!8+cy-UiILY_-m+ZDBzs@aFssSkXw!ca?E`?c=g?IfXp`&JOc@fDP@ewTo& zESGYG6?E|h9lhB%yB6F^dd$ye!;}?H#;=4GULoal`psSU!6?}0 zM#@b9V*A)`m^ml-4fjzMMeNZdC)J%wd!l~0r zcjy7q?7V==jc^G*c2HM2&11GNQY=VqPWHLf4UydU+09pkW?R2ngin4b9!x*ztmIKX zgDUEp`XWU7F=+FRRh>2uIB=rF_-7)m&C@@EYNC-b^11QQm?Tg-G~Wd@jOTAl$ABrJ zA5|*DEQ+SH!NnUM*L@o+6Gcy?9(cuz@YS5J+XD;5mm5UxwXoE|pRlmE5SB?&3kYzaXVdZpg4PdLV=q4drXP-&H#y0_ z8m9kF;-jDs(O8W3^Cm0kRf3#99OlD9S?v9ApdVt2eq94=Q{Ac zO?Z;^!wWJf@(m}40c)q;<(B`96r4@vrqJLsiQ6XU@N01o>JSyoB}!j8IifuhKCwrS zwyvxPyx>e6b-eo?Qxej3NUXi?z_9YM=B2@J@=*)f!%9V#f6yFOuK$v!xepe79u} z?H2-TDUKM14xs|WMU(|5j41}-q-3}+(k(*HPRBw^d~R{R$^r+y!obvLnlTYsg5WtG zSlt`{kr3H1HfY%g9rUN%p*yLHV;(`4%Gmwfv0ZuXT075@M-!jA%Q|K!8IZ2j;MNRA z5erEq|1c8Pj5zbQ{$d>>I}2(R%M+Y%wEWT(43kMA(fbKm@+hRI{s-y$Tw&dodD$f8 z!FAUz4*Zc%Y}9#ZhRs8$FpAa_;5U*WV&70IY&{c(~2 zfQbQCFh)kw2ZQ%-Iw{BwK^}ME9%t(@Y+P;vM~+|}<$pjMNBjCd2$1xr%&OouA;QQ1 zZ{EBqC_;WEt`*d{3!MLkN!GuVjdp7OpGv|{1&or&5*J@`qKQ0OvPQl zf!`o42$flmn-tjUHGgzbrmGChN58Fy1#vfo^m(u#<8=Nsh`6f3od)M+-Cnu(F1J2* z>F!^!*2dw;x_@I+Em=(hq}&Mux#1kKZUV*liR%0{+I4C$Ok7^KQFR)yPRkKt<6zs* zDHN*Np^;VjX*t{3%O}EkD}J{6t2Qi?szXRyn-mUwD#E6j+yw_1^i{<$=Y~?1+EH1F zPKzqG-<{yQu+0H21>Z%^J0p`FiBFs`{-{#-yyq(zMrA_nDO6yAtycH`US@d@U)4Dn zN^zmfebGmWUWAu{|DT1uUn*P6O8rKr!(_iEh1)*@2qaDm#towCD-Xa{h=|okjX5$H z(6l0Lm$=O%2LEW9I@3nXy)G(ZbWcyVY!d@%C3J-%Q#Clh``DgjOOl#i);uvQj&?WXOIhM(wp>4Tdo{c=4Y=-2P`Ji_|jPZR-lNNN5( zr+>64!tvc)tMlF9PQ$$CuO>6sYy#f>jxdlrnacrWJ$50s=yv=yK{$5$*H0O(4B@!` zpFnEk!u#*Qa983Ps&7K(Fhnj*>O3cURU}xeL&@4Pe@ur7^zx-;Otfxh2fgq2BLr}X z6V|m@P9ICnkK&RQWgB#)7E2G;BN836h9QBnCk(FopKCdibF#zL^C{0g@X0X@?Il3X zU()C5Ad@7UqVB+5v6PaMassCjd3uQ;T=)+WU$_fI<&?LvDH2#9xq&y|2zDgtLO;uH zVD%O>A-XEsf71+tS^ty!0+tb;2S$mL_(~AY$W8iX|9}SyD*cIiUufnY;Q03}z2SPQ z8^c7f1c)I0zc{wq)k5WG3<`2WmOr15PT0!^#z{Qm<@qBfVb4#83zCm+(n;V67WQt! z1KFl+^JU=HJqi?u2-OwY{|#pTA`ywrjc*F;8z?=Ct{4>bxQ)uHqL$hyMC+dGlBKq4 zrqOxaTf(EsReL#gf%F9M7Yl^}lWyfH6(oXP3qs%uGOVwxH(s=2<$L;uZ+Ehtz1^78 zpqebO3vmJng{`$G978*%uE-rp!7&LJB{QVP7eT$c*Kv=mMF1k~T5Nh`-)0rBD0frf z``!nzs`qdG&Z^2jfym_SVQ4UkvBlNidOA<1z5YjDl?jKFmPqj+!?S@(yZZ0W$8FYw zfUkqC)_U{^vPj5=mYW}ol&6X
    ~2qxIm-XQGdk~nP)V0P`@wcw^wzB6~ffESCSsm;Cyqd)d9zY_Z_} zpCsd54zxC3x$00oD}0ruJF;iDNGE0 zdiBmJN1|fGQ*G@b>>~3n9?z0$5~Ss9YA?CAzEeukWb^PQajfOC`|mO#D%>M>1Y+P1b#-5Me>5!l!;KrkOZ z%i!U1p^kf%-fOhigf}HiFo8gwNQ}^0>(TJ^rO&Um1wS`SFnwhUN@IJYu}ljE(Wx*^ z&+R*Rpn*Nrk3gNM9o=y}8W6B3Vh|Je@%o5LKtmprj#(kr4?)USRa(Q_!N)hi#}T~e zY$iUmgHL8~0MT{_??z=M6&xK;c+Vg(LsQnK(%ZiE@hS_lMu?nI1~Lu6kO_Nu^)H~%v8jp1QbQU7KJq*}d8Rw$&a3u`nLc0FHi4mIuh$IlcqiSin?Ba@c0D(} zZf92cj*DdZ3bGYs&WsjndJOt`y&2D|yxJv&>2j^8HdefI7nX46K>mw#u^o*CJsYdT zasK_wVkrU>!>2DHjb;5kZw$S#c-HrKG`zz`M)LI?pQx0iPFJRC&>B4pO=t#mGFscV zf5QlyVB+ZIPk(|EOzeMNimSSlBFjoRr<9^DRC4$Rmo$b2f%eo{Uv}{vpC9<-pV_Le z?8pK;@{`h(b#7ZN_1CES)>ZF~qG0}s((P6H#utzqlI2yI&zvy25%hw$Qs>@4w@K4f z%=yt#1T3PDYX)Cjg~?!~K&B}ERj8w?;?e3#GsJtT?sRCSiKh?RhV7TW;`HVNQ5lHE z+2$bHO;nc9QvI)wLVATTDVVMY6_m4)9iSNpCOf|?isbD;p z9ohQQZBKnFt|M29CS_;p)V0TH5#b~)Wy#zt-FmFFrL4*Al+-9WiTitq%twyJEuH-| z>aUBtPVvW0sC!o3UCQlUe^=scf=)mT*+b6KE-wxNT5P1X0w$)+c48Ag)QvZ#f|x{I z;vv)<-anv9`El;O^iU!e@;|>M7Mp)_WIGRlaOObeILP$h z-;r9(KRV^MMS3Ny5q!y2#FLC|-`^?(V);+=G0q%KmIw6@`X>Lc(ylwKsdJ6@y6G)d z5o-|~XrdqpE=Uo%(6CHWricRsy)r}@mnDXPvZHB4O}M%!+07uaV)u9>1K zct%w<73U@lSL@x>-+OEqFL1kY9oPh_t+0dmfU60jISGKu>>-Wz4|N?j=9O#Ak4x^M z$<3!K;&eQ(U2Kwx$S+98B@*!$7Zx3Je+UTs&9a43VsJGn9k$~(s?-h(M}Cx+n|^do z+xDtHMtT**t2ix{T2UaEMJ!RpY*Lmzn?1mWe&cf!I{H-%+FJ;3oK~Vej4A3Q#Ay0( zk1}wLwmvQ?g-JQ}jLNeX*-}K5WlX|$;^~3cFTeQqW_(@N!jxJm5H20(_zecCrsrTT zV*sru7*=zR)8o=?4(+y0-`erQf5E*_q&Bb8RrK`AU-MdQ&SzmzAjrK&-?C~~fyp(M zmHRCLt!D?g%iUcu|5dsQX;T(!+g;P;LE4Q4`qj5gb?drLmgN~=x|qmybRNxqy5E3M zmbVuaL;>CI?A;9x?drXk-72bX>Gs%r%w1#oO4?4+=#BG=#Ppk~)Il?|V@Gwbd{n*) zt~4lc%wl-6e5zbwThZXr)Z7Z@gp_qQ0M@znm(e=rPV)^6oFEork%LQ~+1V=|Sw+HKvMX3fL%YfZ#qDgjaJS8V>` z_6Z2W(^`%L`lbMLwW#tgJ1SZiKnL)2(b>7hO;@Sx_`)Eb&(QZ0Z}XQ);8i(@zq_%c z2$IUQb#yI$X+4l2@lla(HDC|%u7)tFDVW;Bz~&_Oj%A_L4!4TChe#q~JNhAgTl==L zr!ylC$v~+YI%GL`w==y%^*ogr7wFtOA3g?@$-h7RQH~1y)%z9i$|{XO#48-4JYIL@ z%qkdjgxyE((MruzhfNIEWqGZDZ^Um)Immvrmh^f~xTOX3LYfq;2p%JGtyUa0$QYXN}Hn)EfvqN_DV|(xUaUb_) zmu1eT^(p6>_l(H$m{)KvS`3_%5>;dwY)^hURJ=J@HEZ7exXc$ay}xD_iHce>)dT8B zG;6y%)xAzAw&d(&MIVdM_WY7?Ez`YfB>H9Xe}{KL9N~n@^YLQIi+PRPzlq_c%+ZCr zm$#hj@?FD#Y+Y4roVa*ANG&I4lq-U`!F!q!K=JSR?s3Nk^3ASp{lEuvRzpmROrj^= zu=0y^#^Cx9wXWWIl|0;)%4M9a0u_a^@v)YT5Gz;?Yjue7xgh?`p)bc=yoenptCDDR zH_FzD(xjfU_55yG<-ZZ762{uikIkt{XZX1q2l+Nt5$o*pMQ)(PGQHz%cYxXFped7b zfV)b!OB{bA~ zvpC;QVuxLDvbTL><|R&QNu|T4atTJ_Sk zKLdg)t~7Q|1KZ+^ky)#7Zpbx0k^rYi$OoKZN|J--X#`_ZS`3$E%eak5TCOVjaW*I3 znHtyT33c~&MhaYMno}kg(F?@YCLKJe#qTzc4XEraJ)U254CfE}VgK<8kBU&r(VE3c zwl_Xo=2{d|yU$S}NF79=;hcYK5lODhVV9nL)`NowPGe!LtzJsmkr>F6CC`mcGm4nm zizz6g;t|8|RCj33&lwurvbwV(Oe1_)yLp7;$m`PcX5d(@AeX23f%f!KH7!5NT2svH zAL&gQdl+3oes@F)@k12ra5psEqm8|Oq*BJ*DJFix@g0SEzBg)H|B0T>qPJ5oI+t@R zW_n(1lk-CwrlBtPe0Hv8U%>6CtFn%rO57RA4GInQG0EjtYnue#9t+^cm60>J_cwZ- zfQ^h3Sq%@mb-1rnxHzneJX)G*hfSN26ZCCdfwbL+Os=o57t_0qULG(c{jF*;jai;p zS&cIU{~@dk?h-D*TvX#W&Hjg&ASfVo;BWa|7ghh1pPh^7<^1I-&s z3MQ^>pCx{=VY9hBU544C=iaE4hj@_chZ`LRg&Q?}YSRzJ%5lStFt}xlU zep`A!*-E`ECH{yjrox$=_K}2TV3%AO+PwJj={u*i7UO&3)?a)?H6{@=)L%=&-#nJr z=Bil)KWDP^pG}LING6+ypMllifS9lc==uNDPEPWJaE*4h?@a&rxlh1Er#x74*OQr_ zQa03qh?ABY!re_zK8(d zgW>hZ2sW&of>ohV&hO@@l%;1iELL-XHCe#8U5xdZ2e30_2i(Y8XNFD%RCKN+7jyHY zDSPmchq5|hg4EmG3f4C))Zd1_UnQHa? zje0TTUrDha$IF2Ee00?SfAuD!1dDBBFk}S#N53lJA51*5eY9lm_5mpd;f3!sRnviGzj~kn$9L5n}fiigvB9n-gKIa+T z#k0cKUDWGb&{bt@hb;hGF{qF4oIi?B2U|hyD_a4wuqc9sMGycM7O0!ROTqw>Wk4#y zW7#Fv13dyny3uO9xofHSX{crV_VJuHBSNuG=|EvkPp%2WWlu@{M}M{2lLbOl6*M=H zGW^50&T!YIQ4rgw@urg-j@Sblo@zX@a~h-(M$%?1#EQV~3Iy4!=7q3g1UE`IAJW-z zPs)rbK~LJ0+6I(4C)WThptWjlUX>sPE6sflu@%1;g`@K+6zu)_!8K1`bT0nK!OvkA zSTPY|3_=W+<+?8tr3wn0yF63b=1J$Gb%&4qG=5|Fa8E;a^>`Cqe7MEp1OUEM3UBDp zS19E0ll52Sc0362AXHv+XxDnWCH0X*n$5Qr%W04DTq^Q;I3Ljz&J7>rLJtuO`yYvuX`IgcRp9eT+TZi8j_eZFL>cod zUW^Fn*48VM6p8#65w_H+MkO_erTzJrytNP61`o+s6nicBw;&2dhHry0MZ;zv1T)J) zoknwlkn(%l5~AEBKzLst_;eTQeRXA=c9cmv@M2P$R5|SWY=Daqvis@>*EJ#8HCV^~ VtRiCt{12v2NXF(ymx=pB{|_@>rH%jq diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index b9bf7dd558..5965974382 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1345,6 +1345,12 @@ For details about Microsoft mobile device management protocols for Windows 10 s
  • OS/Mode
    • + +[RootCATrustedCertificates CSP](rootcacertificates-csp.md) +

    Added the following node in Windows 10, version 1803:

    +
      +
    • UntrustedCertificates
      • +
    @@ -1651,6 +1657,13 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware +[RootCATrustedCertificates CSP](rootcacertificates-csp.md) +

    Added the following node in Windows 10, version 1803:

    +
      +
    • UntrustedCertificates
      • +
    + + [Policy CSP](policy-configuration-service-provider.md)

    Added the following new policies for Windows 10, version 1803:

      diff --git a/windows/client-management/mdm/rootcacertificates-csp.md b/windows/client-management/mdm/rootcacertificates-csp.md index 8f5c11db9d..b7fa5a8362 100644 --- a/windows/client-management/mdm/rootcacertificates-csp.md +++ b/windows/client-management/mdm/rootcacertificates-csp.md @@ -7,11 +7,14 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/26/2017 +ms.date: 03/06/2018 --- # RootCATrustedCertificates CSP +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + The RootCATrustedCertificates configuration service provider enables the enterprise to set the Root Certificate Authority (CA) certificates. > [!Note] @@ -44,6 +47,9 @@ Node for trusted publisher certificates. **RootCATrustedCertificates/TrustedPeople** Node for trusted people certificates. +**RootCATrustedCertificates/UntrustedCertificates** +Addeded in Windows 10, version 1803. Node for certificates that are not trusted. IT admin can use this node to immediately flag certificates that have been compromised and no longer usable. + **_CertHash_** Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. diff --git a/windows/client-management/mdm/rootcacertificates-ddf-file.md b/windows/client-management/mdm/rootcacertificates-ddf-file.md index 6e6492a240..03c352d150 100644 --- a/windows/client-management/mdm/rootcacertificates-ddf-file.md +++ b/windows/client-management/mdm/rootcacertificates-ddf-file.md @@ -7,17 +7,19 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 12/05/2017 +ms.date: 03/07/2018 --- # RootCATrustedCertificates DDF file +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. This topic shows the OMA DM device description framework (DDF) for the **RootCACertificates** configuration service provider. DDF files are used only with OMA DM provisioning XML. Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). -The XML below is the current version for this CSP. +The XML below is for Windows 10, version 1803. ``` syntax @@ -28,7 +30,7 @@ The XML below is the current version for this CSP. 1.2 RootCATrustedCertificates - ./Vendor/MSFT + ./User/Vendor/MSFT @@ -43,7 +45,7 @@ The XML below is the current version for this CSP. - + com.microsoft/1.1/MDM/RootCATrustedCertificates @@ -74,8 +76,6 @@ The XML below is the current version for this CSP. - - Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value @@ -100,12 +100,12 @@ The XML below is the current version for this CSP. - + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. - + @@ -117,7 +117,7 @@ The XML below is the current version for this CSP. - text/plain + @@ -271,8 +271,6 @@ The XML below is the current version for this CSP. - - Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value @@ -297,12 +295,12 @@ The XML below is the current version for this CSP. - + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. - + @@ -311,7 +309,7 @@ The XML below is the current version for this CSP. - text/plain + @@ -363,7 +361,7 @@ The XML below is the current version for this CSP. - Returns the starting date of the certificate's validity. This is equivalent to the NotBefore member in the CERT_INFO structure. + Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure. @@ -384,7 +382,7 @@ The XML below is the current version for this CSP. - Returns the expiration date of the certificate. This is equivalent to the NotAfter member in the CERT_INFO structure + Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure @@ -405,7 +403,7 @@ The XML below is the current version for this CSP. - Returns the certificate template name. + Returns the certificate template name. Supported operation is Get. @@ -450,8 +448,6 @@ The XML below is the current version for this CSP. - - Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value @@ -476,12 +472,12 @@ The XML below is the current version for this CSP. - + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. - + @@ -493,7 +489,7 @@ The XML below is the current version for this CSP. - text/plain + @@ -551,7 +547,7 @@ The XML below is the current version for this CSP. - Returns the starting date of the certificate's validity. This is equivalent to the NotBefore member in the CERT_INFO structure. + Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure. @@ -575,7 +571,7 @@ The XML below is the current version for this CSP. - Returns the expiration date of the certificate. This is equivalent to the NotAfter member in the CERT_INFO structure + Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure @@ -599,7 +595,7 @@ The XML below is the current version for this CSP. - Returns the certificate template name. + Returns the certificate template name. Supported operation is Get. @@ -647,8 +643,6 @@ The XML below is the current version for this CSP. - - Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value @@ -673,12 +667,12 @@ The XML below is the current version for this CSP. - + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. - + @@ -690,7 +684,7 @@ The XML below is the current version for this CSP. - text/plain + @@ -748,7 +742,7 @@ The XML below is the current version for this CSP. - Returns the starting date of the certificate's validity. This is equivalent to the NotBefore member in the CERT_INFO structure. + Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure. @@ -772,7 +766,7 @@ The XML below is the current version for this CSP. - Returns the expiration date of the certificate. This is equivalent to the NotAfter member in the CERT_INFO structure + Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure @@ -796,7 +790,1180 @@ The XML below is the current version for this CSP. - Returns the certificate template name. + Returns the certificate template name. Supported operation is Get. + + + + + + + + + + + + + + text/plain + + + + + + + UntrustedCertificates + + + + + + + + + + + + + + + + + + + + + + + + + + + + Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value + + + + + + + + + + + + + CertHash + + + + + + EncodedCertificate + + + + + + + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. + + + + + + + + + + + + + + + + + + + IssuedBy + + + + + Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + IssuedTo + + + + + Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + ValidFrom + + + + + Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure. + + + + + + + + + + + + + + text/plain + + + + + ValidTo + + + + + Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure + + + + + + + + + + + + + + text/plain + + + + + TemplateName + + + + + Returns the certificate template name. Supported operation is Get. + + + + + + + + + + + + + + text/plain + + + + + + + + RootCATrustedCertificates + ./Device/Vendor/MSFT + + + + + + + + + + + + + + + com.microsoft/1.1/MDM/RootCATrustedCertificates + + + + Root + + + + + + + + + + + + + + + + + + + + + + + + + + + + Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value + + + + + + + + + + + + + CertHash + + + + + + EncodedCertificate + + + + + + + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. + + + + + + + + + + + + + + + + + + + IssuedBy + + + + + Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + IssuedTo + + + + + Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + ValidFrom + + + + + Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure. + + + + + + + + + + + + + + text/plain + + + + + ValidTo + + + + + Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure + + + + + + + + + + + + + + text/plain + + + + + TemplateName + + + + + Returns the certificate template name. Supported operation is Get. + + + + + + + + + + + + + + text/plain + + + + + + + CA + + + + + + + + + + + + + + + + + + + + + + + + + + + + Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value + + + + + + + + + + + + + CertHash + + + + + + EncodedCertificate + + + + + + + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. + + + + + + + + + + + + + + + + IssuedBy + + + + + Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure. + + + + + + + + + + + text/plain + + + + + IssuedTo + + + + + Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure. + + + + + + + + + + + text/plain + + + + + ValidFrom + + + + + Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure. + + + + + + + + + + + text/plain + + + + + ValidTo + + + + + Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure + + + + + + + + + + + text/plain + + + + + TemplateName + + + + + Returns the certificate template name. Supported operation is Get. + + + + + + + + + + + text/plain + + + + + + + TrustedPublisher + + + + + + + + + + + + + + + + + + + + + + + + + + + + Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value + + + + + + + + + + + + + CertHash + + + + + + EncodedCertificate + + + + + + + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. + + + + + + + + + + + + + + + + + + + IssuedBy + + + + + Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + IssuedTo + + + + + Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + ValidFrom + + + + + Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure. + + + + + + + + + + + + + + text/plain + + + + + ValidTo + + + + + Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure + + + + + + + + + + + + + + text/plain + + + + + TemplateName + + + + + Returns the certificate template name. Supported operation is Get. + + + + + + + + + + + + + + text/plain + + + + + + + TrustedPeople + + + + + + + + + + + + + + + + + + + + + + + + + + + + Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value + + + + + + + + + + + + + CertHash + + + + + + EncodedCertificate + + + + + + + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. + + + + + + + + + + + + + + + + + + + IssuedBy + + + + + Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + IssuedTo + + + + + Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + ValidFrom + + + + + Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure. + + + + + + + + + + + + + + text/plain + + + + + ValidTo + + + + + Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure + + + + + + + + + + + + + + text/plain + + + + + TemplateName + + + + + Returns the certificate template name. Supported operation is Get. + + + + + + + + + + + + + + text/plain + + + + + + + UntrustedCertificates + + + + + + + + + + + + + + + + + + + + + + + + + + + + Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value + + + + + + + + + + + + + CertHash + + + + + + EncodedCertificate + + + + + + + Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. + + + + + + + + + + + + + + + + + + + IssuedBy + + + + + Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + IssuedTo + + + + + Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure. + + + + + + + + + + + + + + text/plain + + + + + ValidFrom + + + + + Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure. + + + + + + + + + + + + + + text/plain + + + + + ValidTo + + + + + Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure + + + + + + + + + + + + + + text/plain + + + + + TemplateName + + + + + Returns the certificate template name. Supported operation is Get. @@ -818,14 +1985,4 @@ The XML below is the current version for this CSP. -``` - -  - -  - - - - - - +``` \ No newline at end of file From 8d372a5586f6b6ff8440e849750bf0b57cf9749e Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 21 Mar 2018 14:42:03 +0000 Subject: [PATCH 115/138] Merged PR 6523: New topic for MPSA This topic is intentionally not added to the TOC at this time --- ...a-software-microsoft-store-for-business.md | 59 +++++++++++++++++++ 1 file changed, 59 insertions(+) create mode 100644 store-for-business/manage-mpsa-software-microsoft-store-for-business.md diff --git a/store-for-business/manage-mpsa-software-microsoft-store-for-business.md b/store-for-business/manage-mpsa-software-microsoft-store-for-business.md new file mode 100644 index 0000000000..970b3c783f --- /dev/null +++ b/store-for-business/manage-mpsa-software-microsoft-store-for-business.md @@ -0,0 +1,59 @@ +--- +title: Manage software purchased with Microsoft Products and Services agreement in Microsoft Store for Business +description: Software purchased under Microsoft Products and Services Agreement (MPSA) can be managed in Microsoft Store for Business +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: store +author: TrudyHa +ms.localizationpriority: high +ms.date: 3/20/2018 +--- + +# Manage software purchased with Microsoft Products and Services agreement in Microsoft Store for Business + +**Applies to** + +- Windows 10 +- Windows 10 Mobile + +Software purchased with the Microsoft Products and Services Agreement (MPSA) can now be managed in Microsoft Store for Business. This allows customers to manage online software purchases in one location. + +There are a couple of things you might need to set up to manage MPSA software purchases in Store for Business. + +**To manage MPSA software in Microsoft Store for Business** +1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com). +2. Click **Manage**, and then click **My Organization**. +3. Click **Connected tenants** to see purchasing accounts and the tenants that they are connected to. + +## Add tenant +The tenant or tenants that are added to your purchasing account control how you can distribute software to people in your organization. If there isn't a tenant listed for your purchasing account, you'll need to add one before you can use or manage the software you've purchased. When we give you a list to choose from, tenants are grouped by domain. + +**To add a tenant to a purchasing account** +1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com). +2. Click **Manage**, and then click **My Organization**. +3. Click **Connected tenants**, and then click the ellipses for a purchasing account without a tenant listed. +4. Click **Choose a tenant**, and then click **Submit**. + +If you don't see your tenant in the list, you can add the name of your tenant + +**To add the name of your tenant** +1. On **Add a tenant**, click **Don't see your tenant?**. +2. Enter a domain name, and then click **Next**, and then click **Done**. + +You'll need to get permissions for the admin that manages the domain you want to add. We'll take you to Business Center Portal where you can manage permissions and roles. The admin will need to be the **Account Manager**. + +## Add global admin +In some cases, we might not have info on who the global admin is for the tenant that you select. It might be that the tenant is unmanaged, and you'll need to identify a global admin. Or, you might only need to share account info for the global admin. + +If you need to nominate someone to be the global admin, they need sufficient permissions: +- someone who can distribute sofware +- in Business Center Portal (BCP), it should be someone with **Agreement Admin** role + +**To add a global admin to a tenant** + +We'll ask for a global admin if we need that info when you add a tenant to a purchasing account. You'd see the request for a global admin before returning to **Store for Business**. + +- On **Add a Global Admin**, click **Make me the Global Admin**, and then click **Submit**. +-or- +- On **Add a Global Admin**, type a name in **Invite someone else**, and then click **Submit**. \ No newline at end of file From 3123e0602f38ded82c52f8475f5ca4756d191fd7 Mon Sep 17 00:00:00 2001 From: mwalschburger <37340221+mwalschburger@users.noreply.github.com> Date: Wed, 21 Mar 2018 19:37:10 +0100 Subject: [PATCH 116/138] Update active-directory-security-groups.md --- .../access-control/active-directory-security-groups.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/windows/security/identity-protection/access-control/active-directory-security-groups.md b/windows/security/identity-protection/access-control/active-directory-security-groups.md index ea5e2203dd..05ea62503f 100644 --- a/windows/security/identity-protection/access-control/active-directory-security-groups.md +++ b/windows/security/identity-protection/access-control/active-directory-security-groups.md @@ -312,7 +312,14 @@ The following tables provide descriptions of the default groups that are located

      Yes

      Yes

      Yes

      - + + +

      [Enterprise Key Admins](#bkmk-enterprise-key-admins)

      +

      Yes

      +

      +

      +

      +

      [Enterprise Read-only Domain Controllers](#bkmk-entrodc)

      Yes

      From 9f2de57b533f017e390b0304582483f348f8b8a8 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 21 Mar 2018 12:40:50 -0700 Subject: [PATCH 117/138] changing build notification --- .openpublishing.publish.config.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 9e9233eb13..efe7a5e648 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -476,7 +476,7 @@ } ], "notification_subscribers": [ - "brianlic@microsoft.com" + "elizapo@microsoft.com" ], "branches_to_filter": [ "" From 0d60902a79725bf3c4db3f6a7cf9a0c015738fde Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 21 Mar 2018 20:55:45 +0000 Subject: [PATCH 118/138] Merged PR 6535: AssignedAccess CSP - updated descriptions and links fixed typo --- windows/client-management/mdm/assignedaccess-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/assignedaccess-csp.md b/windows/client-management/mdm/assignedaccess-csp.md index 48635d81a9..f083dad4a1 100644 --- a/windows/client-management/mdm/assignedaccess-csp.md +++ b/windows/client-management/mdm/assignedaccess-csp.md @@ -39,7 +39,7 @@ For a step-by-step guide for setting up devices to run in kiosk mode, see [Set u > > You cannot set both KioskModeApp and ShellLauncher at the same time on the device. -In Windows 10, version 1607, you can use a provisioned app to configure the kiosk mode. For more information about how to remotely provision an app, see [Enterprise app management](enterprise-app-management.md). +Starting in Windows 10, version 1607, you can use a provisioned app to configure the kiosk mode. For more information about how to remotely provision an app, see [Enterprise app management](enterprise-app-management.md). Here's an example: From 7378e96c6918217fe7ebbf1a01cdca81e266e835 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 21 Mar 2018 20:56:05 +0000 Subject: [PATCH 119/138] Merged PR 6539: Removed some LocalPoliciesSecurityOptions policies --- ...ew-in-windows-mdm-enrollment-management.md | 18 - .../policy-configuration-service-provider.md | 5 +- ...policy-csp-localpoliciessecurityoptions.md | 586 +----------------- 3 files changed, 2 insertions(+), 607 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 5965974382..66cacb8036 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1175,14 +1175,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s
    • LocalPoliciesSecurityOptions/Devices_AllowedToFormatAndEjectRemovableMedia
    • LocalPoliciesSecurityOptions/Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrinters
    • LocalPoliciesSecurityOptions/Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnly
      • -
    • LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways
      • -
    • LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptSecureChannelDataWhenPossible
      • -
    • LocalPoliciesSecurityOptions/DomainMember_DigitallySignSecureChannelDataWhenPossible
      • -
    • LocalPoliciesSecurityOptions/DomainMember_DisableMachineAccountPasswordChanges
      • -
    • LocalPoliciesSecurityOptions/DomainMember_MaximumMachineAccountPasswordAge
      • -
    • LocalPoliciesSecurityOptions/DomainMember_RequireStrongSessionKey
    • LocalPoliciesSecurityOptions/InteractiveLogon_SmartCardRemovalBehavior
      • -
    • LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsAlways
    • LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees
    • LocalPoliciesSecurityOptions/MicrosoftNetworkClient_SendUnencryptedPasswordToThirdPartySMBServers
    • LocalPoliciesSecurityOptions/MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession
      • @@ -1193,10 +1186,8 @@ For details about Microsoft mobile device management protocols for Windows 10 s
    • LocalPoliciesSecurityOptions/NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers
    • LocalPoliciesSecurityOptions/NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares
    • LocalPoliciesSecurityOptions/NetworkAccess_RestrictClientsAllowedToMakeRemoteCallsToSAM
      • -
    • LocalPoliciesSecurityOptions/NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM
    • LocalPoliciesSecurityOptions/NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange
    • LocalPoliciesSecurityOptions/NetworkSecurity_LANManagerAuthenticationLevel
      • -
    • LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients
    • LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers
    • LocalPoliciesSecurityOptions/Shutdown_ClearVirtualMemoryPageFile
    • LocalPoliciesSecurityOptions/SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems
      • @@ -1788,14 +1779,7 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
    • LocalPoliciesSecurityOptions/Devices_AllowedToFormatAndEjectRemovableMedia
    • LocalPoliciesSecurityOptions/Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrinters
    • LocalPoliciesSecurityOptions/Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnly
      • -
    • LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways
      • -
    • LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptSecureChannelDataWhenPossible
      • -
    • LocalPoliciesSecurityOptions/DomainMember_DigitallySignSecureChannelDataWhenPossible
      • -
    • LocalPoliciesSecurityOptions/DomainMember_DisableMachineAccountPasswordChanges
      • -
    • LocalPoliciesSecurityOptions/DomainMember_MaximumMachineAccountPasswordAge
      • -
    • LocalPoliciesSecurityOptions/DomainMember_RequireStrongSessionKey
    • LocalPoliciesSecurityOptions/InteractiveLogon_SmartCardRemovalBehavior
      • -
    • LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsAlways
    • LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees
    • LocalPoliciesSecurityOptions/MicrosoftNetworkClient_SendUnencryptedPasswordToThirdPartySMBServers
    • LocalPoliciesSecurityOptions/MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession
      • @@ -1806,10 +1790,8 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
    • LocalPoliciesSecurityOptions/NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers
    • LocalPoliciesSecurityOptions/NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares
    • LocalPoliciesSecurityOptions/NetworkAccess_RestrictClientsAllowedToMakeRemoteCallsToSAM
      • -
    • LocalPoliciesSecurityOptions/NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM
    • LocalPoliciesSecurityOptions/NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange
    • LocalPoliciesSecurityOptions/NetworkSecurity_LANManagerAuthenticationLevel
      • -
    • LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients
    • LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers
    • LocalPoliciesSecurityOptions/Shutdown_ClearVirtualMemoryPageFile
    • LocalPoliciesSecurityOptions/SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems
      • diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 42c5737c3e..debb631fa9 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/05/2018 +ms.date: 03/16/2018 --- # Policy CSP @@ -4133,9 +4133,6 @@ The following diagram shows the Policy configuration service provider in tree fo - [LocalPoliciesSecurityOptions/Devices_AllowedToFormatAndEjectRemovableMedia](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-devices-allowedtoformatandejectremovablemedia) - [LocalPoliciesSecurityOptions/Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrinters](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-devices-preventusersfrominstallingprinterdriverswhenconnectingtosharedprinters) - [LocalPoliciesSecurityOptions/Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnly](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-devices-restrictcdromaccesstolocallyloggedonuseronly) -- [LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-domainmember-digitallyencryptorsignsecurechanneldataalways) -- [LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptSecureChannelDataWhenPossible](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-domainmember-digitallyencryptsecurechanneldatawhenpossible) -- [LocalPoliciesSecurityOptions/DomainMember_DisableMachineAccountPasswordChanges](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-domainmember-disablemachineaccountpasswordchanges) - [LocalPoliciesSecurityOptions/InteractiveLogon_DisplayUserInformationWhenTheSessionIsLocked](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-interactivelogon-displayuserinformationwhenthesessionislocked) - [LocalPoliciesSecurityOptions/InteractiveLogon_DoNotDisplayLastSignedIn](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-interactivelogon-donotdisplaylastsignedin) - [LocalPoliciesSecurityOptions/InteractiveLogon_DoNotDisplayUsernameAtSignIn](./policy-csp-localpoliciessecurityoptions.md#localpoliciessecurityoptions-interactivelogon-donotdisplayusernameatsignin) diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index 27c960d639..327397bc54 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/12/2018 +ms.date: 03/16/2018 --- # Policy CSP - LocalPoliciesSecurityOptions @@ -51,24 +51,6 @@ ms.date: 03/12/2018
      LocalPoliciesSecurityOptions/Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnly
      -
      - LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways -
      -
      - LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptSecureChannelDataWhenPossible -
      -
      - LocalPoliciesSecurityOptions/DomainMember_DigitallySignSecureChannelDataWhenPossible -
      -
      - LocalPoliciesSecurityOptions/DomainMember_DisableMachineAccountPasswordChanges -
      -
      - LocalPoliciesSecurityOptions/DomainMember_MaximumMachineAccountPasswordAge -
      -
      - LocalPoliciesSecurityOptions/DomainMember_RequireStrongSessionKey -
      LocalPoliciesSecurityOptions/InteractiveLogon_DisplayUserInformationWhenTheSessionIsLocked
      @@ -93,9 +75,6 @@ ms.date: 03/12/2018
      LocalPoliciesSecurityOptions/InteractiveLogon_SmartCardRemovalBehavior
      -
      - LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsAlways -
      LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees
      @@ -126,9 +105,6 @@ ms.date: 03/12/2018
      LocalPoliciesSecurityOptions/NetworkAccess_RestrictClientsAllowedToMakeRemoteCallsToSAM
      -
      - LocalPoliciesSecurityOptions/NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM -
      LocalPoliciesSecurityOptions/NetworkSecurity_AllowPKU2UAuthenticationRequests
      @@ -138,9 +114,6 @@ ms.date: 03/12/2018
      LocalPoliciesSecurityOptions/NetworkSecurity_LANManagerAuthenticationLevel
      -
      - LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients -
      LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers
      @@ -784,375 +757,6 @@ GP Info:
      - -**LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways** - - - - - - - - - - - - - - - - - - - - - -
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
      - - - -Domain member: Digitally encrypt or sign secure channel data (always) - -This security setting determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. - -When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass through authentication, LSA SID/name Lookup etc. - -This setting determines whether or not all secure channel traffic initiated by the domain member meets minimum security requirements. Specifically it determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. If this policy is enabled, then the secure channel will not be established unless either signing or encryption of all secure channel traffic is negotiated. If this policy is disabled, then encryption and signing of all secure channel traffic is negotiated with the Domain Controller in which case the level of signing and encryption depends on the version of the Domain Controller and the settings of the following two policies: - -Domain member: Digitally encrypt secure channel data (when possible) -Domain member: Digitally sign secure channel data (when possible) - -Default: Enabled. - -Notes: - -If this policy is enabled, the policy Domain member: Digitally sign secure channel data (when possible) is assumed to be enabled regardless of its current setting. This ensures that the domain member attempts to negotiate at least signing of the secure channel traffic. -If this policy is enabled, the policy Domain member: Digitally sign secure channel data (when possible) is assumed to be enabled regardless of its current setting. This ensures that the domain member attempts to negotiate at least signing of the secure channel traffic. -Logon information transmitted over the secure channel is always encrypted regardless of whether encryption of ALL other secure channel traffic is negotiated or not. - - - -GP Info: -- GP English name: *Domain member: Digitally encrypt or sign secure channel data (always)* -- GP path: *Windows Settings/Security Settings/Local Policies/Security Options* - - - - -
      - - -**LocalPoliciesSecurityOptions/DomainMember_DigitallyEncryptSecureChannelDataWhenPossible** - - - - - - - - - - - - - - - - - - - - - -
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
      - - - -Domain member: Digitally encrypt secure channel data (when possible) - -This security setting determines whether a domain member attempts to negotiate encryption for all secure channel traffic that it initiates. - -When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass-through authentication, LSA SID/name Lookup etc. - -This setting determines whether or not the domain member attempts to negotiate encryption for all secure channel traffic that it initiates. If enabled, the domain member will request encryption of all secure channel traffic. If the domain controller supports encryption of all secure channel traffic, then all secure channel traffic will be encrypted. Otherwise only logon information transmitted over the secure channel will be encrypted. If this setting is disabled, then the domain member will not attempt to negotiate secure channel encryption. - -Default: Enabled. - -Important - -There is no known reason for disabling this setting. Besides unnecessarily reducing the potential confidentiality level of the secure channel, disabling this setting may unnecessarily reduce secure channel throughput, because concurrent API calls that use the secure channel are only possible when the secure channel is signed or encrypted. - -Note: Domain controllers are also domain members and establish secure channels with other domain controllers in the same domain as well as domain controllers in trusted domains. - - - -GP Info: -- GP English name: *Domain member: Digitally encrypt secure channel data (when possible)* -- GP path: *Windows Settings/Security Settings/Local Policies/Security Options* - - - - -
      - - -**LocalPoliciesSecurityOptions/DomainMember_DigitallySignSecureChannelDataWhenPossible** - - - - - - - - - - - - - - - - - - - - - -
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
      - - - -Domain member: Digitally sign secure channel data (when possible) - -This security setting determines whether a domain member attempts to negotiate signing for all secure channel traffic that it initiates. - -When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass through authentication, LSA SID/name Lookup etc. - -This setting determines whether or not the domain member attempts to negotiate signing for all secure channel traffic that it initiates. If enabled, the domain member will request signing of all secure channel traffic. If the Domain Controller supports signing of all secure channel traffic, then all secure channel traffic will be signed which ensures that it cannot be tampered with in transit. - -Default: Enabled. - - - -GP Info: -- GP English name: *Domain member: Digitally sign secure channel data (when possible)* -- GP path: *Windows Settings/Security Settings/Local Policies/Security Options* - - - - -
      - - -**LocalPoliciesSecurityOptions/DomainMember_DisableMachineAccountPasswordChanges** - - - - - - - - - - - - - - - - - - - - - -
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
      - - - -Domain member: Disable machine account password changes - -Determines whether a domain member periodically changes its computer account password. If this setting is enabled, the domain member does not attempt to change its computer account password. If this setting is disabled, the domain member attempts to change its computer account password as specified by the setting for Domain Member: Maximum age for machine account password, which by default is every 30 days. - -Default: Disabled. - -Notes - -This security setting should not be enabled. Computer account passwords are used to establish secure channel communications between members and domain controllers and, within the domain, between the domain controllers themselves. Once it is established, the secure channel is used to transmit sensitive information that is necessary for making authentication and authorization decisions. -This setting should not be used in an attempt to support dual-boot scenarios that use the same computer account. If you want to dual-boot two installations that are joined to the same domain, give the two installations different computer names. - - - -GP Info: -- GP English name: *Domain member: Disable machine account password changes* -- GP path: *Windows Settings/Security Settings/Local Policies/Security Options* - - - - -
      - - -**LocalPoliciesSecurityOptions/DomainMember_MaximumMachineAccountPasswordAge** - - - - - - - - - - - - - - - - - - - - - -
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
      - - - -Domain member: Maximum machine account password age - -This security setting determines how often a domain member will attempt to change its computer account password. - -Default: 30 days. - -Important - -This setting applies to Windows 2000 computers, but it is not available through the Security Configuration Manager tools on these computers. - - - -GP Info: -- GP English name: *Domain member: Maximum machine account password age* -- GP path: *Windows Settings/Security Settings/Local Policies/Security Options* - - - - -
      - - -**LocalPoliciesSecurityOptions/DomainMember_RequireStrongSessionKey** - - - - - - - - - - - - - - - - - - - - - -
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
      - - - -Domain member: Require strong (Windows 2000 or later) session key - -This security setting determines whether 128-bit key strength is required for encrypted secure channel data. - -When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller within the domain. This secure channel is used to perform operations such as NTLM pass-through authentication, LSA SID/name Lookup, and so on. - -Depending on what version of Windows is running on the domain controller that the domain member is communicating with and the settings of the parameters: - -Domain member: Digitally encrypt or sign secure channel data (always) -Domain member: Digitally encrypt secure channel data (when possible) -Some or all of the information that is transmitted over the secure channel will be encrypted. This policy setting determines whether or not 128-bit key strength is required for the secure channel information that is encrypted. - -If this setting is enabled, then the secure channel will not be established unless 128-bit encryption can be performed. If this setting is disabled, then the key strength is negotiated with the domain controller. - -Default: Enabled. - -Important - -In order to take advantage of this policy on member workstations and servers, all domain controllers that constitute the member's domain must be running Windows 2000 or later. -In order to take advantage of this policy on domain controllers, all domain controllers in the same domain as well as all trusted domains must run Windows 2000 or later. - - - -GP Info: -- GP English name: *Domain member: Require strong (Windows 2000 or later) session key* -- GP path: *Windows Settings/Security Settings/Local Policies/Security Options* - - - - -
      - **LocalPoliciesSecurityOptions/InteractiveLogon_DisplayUserInformationWhenTheSessionIsLocked** @@ -1650,77 +1254,6 @@ GP Info:
      - -**LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsAlways** - - - - - - - - - - - - - - - - - - - - - -
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
      - - - -Microsoft network client: Digitally sign communications (always) - -This security setting determines whether packet signing is required by the SMB client component. - -The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether SMB packet signing must be negotiated before further communication with an SMB server is permitted. - -If this setting is enabled, the Microsoft network client will not communicate with a Microsoft network server unless that server agrees to perform SMB packet signing. If this policy is disabled, SMB packet signing is negotiated between the client and server. - -Default: Disabled. - -Important - -For this policy to take effect on computers running Windows 2000, client-side packet signing must also be enabled. To enable client-side SMB packet signing, set Microsoft network client: Digitally sign communications (if server agrees). - -Notes - -All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later operating systems, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: -Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. -Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. -Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. -Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. -SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. -For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136. - - - -GP Info: -- GP English name: *Microsoft network client: Digitally sign communications (always)* -- GP path: *Windows Settings/Security Settings/Local Policies/Security Options* - - - - -
      - **LocalPoliciesSecurityOptions/MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees** @@ -2334,63 +1867,6 @@ GP Info:
      - -**LocalPoliciesSecurityOptions/NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM** - - - - - - - - - - - - - - - - - - - - - -
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
      - - - -Network security: Allow Local System to use computer identity for NTLM - -This policy setting allows Local System services that use Negotiate to use the computer identity when reverting to NTLM authentication. - -If you enable this policy setting, services running as Local System that use Negotiate will use the computer identity. This might cause some authentication requests between Windows operating systems to fail and log an error. - -If you disable this policy setting, services running as Local System that use Negotiate when reverting to NTLM authentication will authenticate anonymously. - -By default, this policy is enabled on Windows 7 and above. - -By default, this policy is disabled on Windows Vista. - -This policy is supported on at least Windows Vista or Windows Server 2008. - -Note: Windows Vista or Windows Server 2008 do not expose this setting in Group Policy. - - - - -
      - **LocalPoliciesSecurityOptions/NetworkSecurity_AllowPKU2UAuthenticationRequests** @@ -2586,66 +2062,6 @@ GP Info:
      - -**LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients** - - - - - - - - - - - - - - - - - - - - - -
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
      - - - -Network security: Minimum session security for NTLM SSP based (including secure RPC) clients - -This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: - -Require NTLMv2 session security: The connection will fail if NTLMv2 protocol is not negotiated. -Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated. - -Default: - -Windows XP, Windows Vista, Windows 2000 Server, Windows Server 2003, and Windows Server 2008: No requirements. - -Windows 7 and Windows Server 2008 R2: Require 128-bit encryption - - - -GP Info: -- GP English name: *Network security: Minimum session security for NTLM SSP based (including secure RPC) clients* -- GP path: *Windows Settings/Security Settings/Local Policies/Security Options* - - - - -
      - **LocalPoliciesSecurityOptions/NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers** From e47e8e86e180b6709b3b240a0bfedbeed726b2e8 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 21 Mar 2018 14:08:29 -0700 Subject: [PATCH 120/138] moved the one unique item out of UR troubleshoot into new general TR topic --- .../images/upgrade-analytics-unsubscribe.png | Bin 0 -> 33468 bytes .../windows-analytics-FAQ-troubleshooting.md | 19 ++++++++++++++++++ 2 files changed, 19 insertions(+) create mode 100644 windows/deployment/update/images/upgrade-analytics-unsubscribe.png diff --git a/windows/deployment/update/images/upgrade-analytics-unsubscribe.png b/windows/deployment/update/images/upgrade-analytics-unsubscribe.png new file mode 100644 index 0000000000000000000000000000000000000000..402db94d6fb3fca99d76f90cdf8709a409694cd6 GIT binary patch literal 33468 zcmeFZRa6{Z*DV}KaCdiicXxMpXsmJ9;O>Or5}9@Vw0x@+xSyVja(uDLr}RapiJ9v}YGr%y<7vXbhbK0!Kv`UHUr3kh!Nb=c$p zZy?;%WyC+#Oc5S~cfMGQDT#ghRG*0OY6b<~hjW(IbNlp(DDs~-MB@In<)=>}YI2fd zn%>6e-B8{JGONAk#a>$*Zx3%Qp6zu85#c3t65qwMxN{;hGc);IW?XVIz#qUbs^pBm zmYzI!%>||PD)VxPm-gCr_sL8S>nXyk^;=n)h82wu?_hK)`4r;EyH@Mmulsqmz0b99 zzt-z*!;X)wO>(Xd1iZTo{lbn%dqqCh6>8rO<6EUSAngC<@oWZM4C&0y6IDuouUoif z`MBM}klqT0$(&gOpL%nOv4ywMC!95U<`wvQS{v{*>{dr#G z54y#LE?58E>DI^73XbvnJw{;9KNtIWyGT@deJbx2dHh`_5QJ3!gb^5kuC!5aO9^N2 zw#}jF{{b914ufS)Phi+;u|%&aVRv_TiLEVVT)`nqTO{~9gXUxYu&G0UYahWR+2y&pfnC>d@!+JA zz5}l2=4uBA>6W>Tjp}KCm?OTED9Hk0B0*vtsb>#~KhC^m5o1Rv>EmYbcDA-_aTjD@ z1K1Am%2h#lNvauXN$n0x?_30}OeWp4E0c4$rJi0MeGb{Jm(g(v`?vAF)9pPy#2alg zD*19%&22tkCnKsAv}-yo9Y%Jq?@oK5Jz^B(v$C?-jDSu~EVPXM)W4jT8#tKB;5gv? zg+joc#7#(oPn|xbDlH1QJ5J~JOrWAFR%3JFIArSZ9Ds*l;Ew!iY6y!SY-DXsbN6`( zK3tqReQjm5zfu%NT!M1`iz71w{?rJO9o=piQGsvMFe?Q*{VPNs zlWxcA)T|T->(Ap;4ca{@D5*R@HUT!e{nz5kvQTOC@9L;f04;#)Sb`8t%cbzQ!?0FVG-llndUAH(sea2*I-9J%VE@R3m1VxvRGoZ54h9-tM!@LU zJ)ts*1-JPH`Iokui`>RT7R!QGpV+kYv@{l@W?_DAVzoaz`*s5q1?=pN*i0rG+Q!0O z+czmqcP%Xs>F@W8;R;Kd@O6Fe10Y`ELy1NF-~X1o-6O?+BkwXc(BbiafMg;0Xldc*LAlhsO+PrmGF|hD)hV*F z09akEhIv(=6LK^*h~#oJ@Ke{c7w?brAqaK(&5$NIjwc93DJ5M$Ac?}EPoXq=fu}S; zkd++NkF>zWl{fub(bR;fMj=nil!3*@0ALSuJe;T{J;?60po$&h?zOFV-|vVj%LvN< zHmYH5vA;+Dr_sZC5eN-Z_vU1&C8edbU#szVZMWa=m^{wZo59um0wRb0!RN#VkVIgx zlVxTWMoYQ~9-u)btugF`!*5()+*&7yjh2+rhZDL!Fy@d%$f=ce0&=!fC<=jNdDylsFlu z+j+zSR&2IRLLM?Aver>pOxgU(g85X4CGwQx5|a~n+N9}d4i8eDt$#h*TR}L+%N$Y8 z6>h@b;^3``m_0NMad5EDfaR*|c^%^c8Ju6+nvOALq9&waUX6br9e zKH4TYz4l}A$BP9!onIm?wi_f4&-90{He3j4RQ;eVi99-dIA}ZR((kUkHqg}H-``hy zaXoyz*0`4rEq1#?Y0Wbb?BD3hZRm@C^N<3!8y2dWs%LcdrAuUKbvs=;J4;c*#`ay| z;bVm}x$PF7nOI2@$Bmi*4t@Z2HJ8yYDTcAJG0;hqdo|A5ngD7eIc*peS=UF`JsBng zCTzwOB2*GvSXNqE1maA3072Bu&;|!Ndq;i!?83m;hu31%%T=W{v@eA^QbR*m40$8j zz23!vrmX#{gd2D5v9_ltzF&P&TXtyG=QvOkDAXgl9*G1!*M^D3Zb#;<_V;l(Il09< zW<(w!4GIU+YYl2v+K|Y=vG||R!)sb34i&ZhXCBLrr&_-i58lPyGgN+Cig$E!;OpA~ z(G^k(wB2TxWvAcdut&DndR;?=4r*gWxQv))6mk71*cm#m@rnvYeIOGFq~?5&P{kr+ zTpgsQnKnE+J4%rqq?s~ovvtv^)&}+ePCZ@IUqg*M>16)`?Ck0ytQ{CGK@=ojS`q;s zk9ojG>C|q8WZ<5IU5CSZ3&O@`m%oaYc7h@GJp!zFJ|PxHq;MXuf51k`ITBJlY{@M= zJlWLeNR|B0GH*rm_5L!tbq{~5+NVY%f3S1_{fA@!$z|;u%QUCF?>0~ zZx{dEbeEt0uvoy}#s2-4*4BX^sq1&SVR>_x;-8;8Fz%S+;?21p@WxFP$^o%S(~N^%^C@ z|AcSiHW3h{?ic=c2~&O0h8Dm(=qMqzW5`LH4KGMgf04z{t642n`r_zmgDOI5gWg}d z^}qlRwymN9zmK+m4#~ii*`%?&yd16(enZ;IX^pB`r-p~U`>7}_0N>>4iA$D;}}%xp#Qi1zZ!?1jJ%97(}y1TVm#SY z+jp{jLf#8jZ9?5f_HX=v^`Gl1&*4dZRvs~5`7OH{)l^Em(u>c`>G&7}S_7EaHjhqD zejmc_Tn{o*3+pkb$HoOMj5Lmxb!Te(GjtErS0Bi$TQXJZ&|{zKVC;Uzjtz%U>t$v4 z{o7wB-D8P2T^$h!%JAY%{K}ghi~eQ{5G2EdH!v``t}vmF8bNJrnjnmKAyg_0eAYkN zswon*OL{1<98M<=x7Hxoe+zwH82tOGu`xH7_^tmJEr#uc-@aANZ@KcZyvSdZ>y}mt zzpJU}!M~cLW?)b`jW)O&t!FFUA}l~p?@RU3lgc(rJr2tE*AqRq(>`|a%k=Rz2VlsU zn8PL|C1GP@v$3%~@7Jo)Vz#uj$QP^kzB;ff!azfx;J{*#VaI}BU@N(^)L@&%S+6=- zSDZcwQg#1hgJ^J3wWlc#5gUPxCf z+o?p;dPRX}IZHHJs|T%2cTDZM3$Ok0O&QO|{^zyruKQ!Zixr%~1WfF;psDGKFQIvOgzkwto zv$C`6k1j70{fv!sTRZ??oZHt+^8%hjQG`tkgedUBRT0`gTV0@YSYMZx-)u$7O?DMo z)$D9g4ak(Wsgx*XM<6<)yRWUS5p3jg*=d7w4amj!_W%|amR~5XGCDdq70pdeIlL}A zf3J6!;rR!Z`q!OwW3$6t>f+;(lp!5U|Niy9Be9E|dN`Q+ak{rRxCf!n>v^`^Y`64n zdTOerxj9@R!$6-riIrpXwxY{0JpeZ-VJzZhbx z2K)>O$@<%j(C_Vj2|Tu7@JnWd=$uTW!py{E*|_rjhDPxT`{~r=1D*+->;HUXhX=LD z!H6hmbfJfilvn%>dw6FmFV7mA8?rmLyhWHU#-t{jWa6ryV4 zf3LN!yi{uxT>z$dI8HcqNw(#+E78PaX;W{W# z!2N;_d^jW?qVWVhVm=|V^+*B{ZYj6@@=yB)-+Nm`2i&f2>Ervjy{rJojSi2G_czM< z7pTTGleZHc-oxkpS=U~1EfiZs^HN{YCk%WG?`bCLSOh=LFL!x7kE0XvDNnC3{s>~V2BIvr1_lJLFx}hKeN4eGhi{Kt)8pgW0$$8+z5Wj? z*4{!cJA>IyJu9oLF~>xWWEWKHkr>p9tYP0H1hAPzM}eq)w8+WRhXYj;FFBKwlO%pu z5IOOJMInEiYim)$ub#nPx}I;x6v#zO3)^?G+z2(b%o1=Nt5vCeoE{GbHUAk$IY-mO zdb%@&y!zS+)HWxa9A5+H1ETj)FV2le-#ruzA6WEV9026&%JS+eV6ZPJ0R$i0>2)bh zWNmFdSP~_J77Cc1okhF9y}dYE1@RL8LgYb@9a?R$L>Q|z?v5cq45lk_)NN{QwZ7nSa&lsfh>Ya8 z4Ee(xVwfb>)d_y?yU1UM$m_sq@p}Dob9gw^MDQ~z)5Szt8EpwZwP#rnqGm_Ho9~yx zQso~z&b+W8Xn%Iz2Pfma@v~X)M-Zcwz)rv<%eEj$8tf5wr^+^Okh)a`hN{e3^mfHL z7VD#tI41C|v$+&`l9vJw2htFu5F>;&#&)k!UD$mF+}LOdpW_g@`^Y0WtkC*`x3h^A zxn7~z@v87Q26A>W;@%IZekdp_FR~C!zQH%E^M3oiwna-^g@wc!0~6!(c|qLY)Hm^x zbxY_^L0G#`hR(p-CsVEgm;%$IH&337ob8+=oSuUO0c=kTN0Bo-;JC!``MISwUPtiS z@4sI2Bw_$_b8r~_`Q>^z6hTIuir7nsO|4N zuBht~uo+tX-i5{#!JqFi{PV+KMDed zJumU9pz(tLs#7ECZt@FOMS;nH4wAfwlTaBn=dUswMxv2_eVsh2ms_tmRTSu-eK0M^ zibSc|kNZ!g0nf$^Xmolr#DA_JDo&;N8GIDnzy?hULN5splg9-&;C}w53O5Hn8V7EO zgODu?vjHC+1~&|U0{;*v_^3I!!8`~J9?Ofb_&V((@hbw>XDYVM8IzZ!;AcwB9T#g! zafdSui*%hstp#;_8oJ7=ideTm5s|Mbpqr;xFp@${ALIpr@fbMiyuw(g_|KK3Dd*K^ zMHTbtgC%UbipqqwD((N01b#4IkZHz!|2)XM8?Yezj}a8;w&C8S!E1T_g`CFff~~zq z0f7<({t^G5^>j$d;NE_Y_#g9ABILj(K}h_M{qh5p==9e?WZ({bLZ>e_Lx)TC{`v1f z{br30lNU7occg4GB*Ax*^?!z{m{XA)gpPvy&seeQm%Ronrc%okj-D(P!9%P6>NF=$ zQjLZ|{AciRX*7k67lJNgT5&qNtbAr^ZZLo#I4Y!~b(;oN?Ll zYj8+_lC0})QaLwI!Vqze-?(37V48F?Xr9!*yO6zjgh7ZEq^+YP@^aSr@zVQY=jd3& zLOx9OpD7{_vVw;(_f64WFf6r|^Zwdb-J#N5X^7$nGG!d|9&O(_M>zWY&cRZAG`yMDv%a0F?uc0EyON~4F8>8kQMa&1oOI8`*G7h zj`4ASxg;eH>Pf*3{C9d~k>SFcjdD|QU&`4vIvyqd86i<%yR|YBWE+3!ho5FReRE(b zE{cY^d>|y(U&@K;<~d7P{VLhwIu{=hh|4aEW7A+UU_h2C@@+!vytyvg7N-cVS$Q(e z?(F;RgYI(fBeK$drJ5P=?K=7Qm$z9W@z$=fzm6+))|bI>TzqVs1Fu88t#nSkPt(fU ztv&9%(9qBgjg6`DR5#>Fw1R?!R1+0Rq1XJBl!H@KHC0uLCX#V!+C;eRHL3exGBQZZsB5a+SE zbt~{9??d@O);Z$x=;Jent)sHE+)sixq*IZPGYJ+a5&vW7GR=x<;g>3K!196RA}8Mo z2#@LWoz4|9Xt8JG;d#8enn_15q+(<|qY-(EZfu^kTF*TVvpt^|7f41we{nrdey9RN`C|Nm_~~>jPiX%{ zYd%p4kbWuR$-!Ukt%|WY-?_avbbf&Cpv${_Hj ze=L+n2;TP3Jcjb7i@gh@g8SGIOO1l-rhr9nakrbcoOrtP+_6F>$`5#lBWa#RVu9A% zn@LU(z6W<+cf-YBAETzX$GP98`FD1r-W0jCkdZZ(~e zTOwuGS9ebXB)Q-k%Cm5P*#xw~9tFBdGZoM@mXcj-U@a7;HR+g?-U|xY-{c9UaxRcXG1U zzkPU+{t*!Y9k=xU{;sU7%=^2ntW2X+IW;}q&H!&jS63HYquZuGN{|2P4Wj?D-nyF= zh(GsuyPWHi8i2piDqL-*N;Q`UyR*$E54so!qMUszxrJ`9)K?q2FS~i>dZJfim-zwu zy=-97wtR?$RlzLik=^ZxpcpYrcufL*Ew%Q@yjj0RPrh?L-E+lMp4n-(Cc|;47a`UC zzMV4YIQwEUrC;aqi09SoC6br>d*DaA@2=F=jK|2dSg<2s@ulM1jkI@@k?X;GHZlga zKf12I3m32N@ClM~bTr9S#%YocyTfQjXzPzeKJWLp)FtvYZ&c|Lch|C+ULLoaBF9}|nOEA&avq5C@I)HmbRcksY74fPdIJGt>r%($K3RXV zCA?Y1H=1lTL`6Tbe+~_0-7)!iUIJr2w#o~uGSzE-r%gdvkDbA29;eNwh6ZsBEG(=> z>*-;ASadU5%r@_9fVK6Z|H}g&^(7e@nN#;Yc2%^WrR6>tOm5Fg#bWR8?J*j*q3%qK zjXmGZsnlbuoh?-AyuH3A5DVdxko1D{x#h?9!(0Uw6%=ITTy6(^`;FOIke!ENX!Ov> z>-5JT&XaVR*lTeuIG+!BK;}^NN0GBZmT8?@q1eyX z+n9w_b8DtTjciW+X}%&H|7M#~9T%bgmGaoM>=zlK`+fxil^>A+9LKfBou4jE+J&>G z)eh>+VUg7(wT2&kcPnetIiW;4Bz&Pm^6?KsYjkcn&`b4X^A-sY66^Nu(l{;3jj$?N zg4PiFqA+Rad`*`TM4p%nV@OUH*_@}9S0$T?hfLz8=V>}zJ{RKd1f#;$S5DKyz4xzA zdUiZ4>n)Gc7UY`l!;=CMf>(e23CGV>Fl?P;Q2Rda0t2xZrbbizFf2qqfw;N76yLq6 z*=?J%==6Hc);?bEtRaKBv$_bR%U~sv4zImcYsEpj^#CXfxW@h;;3{{ePVMmO^71k` zNhEVSUv0L|^^xwpMn(1QPq3cK3APh?J}PuOoSMuNAu(g_0#jkJ@W3y=%N-sJ5BK}& zCXUN>+u(GJ73l5#cQ~FPvV{~C)?F#Vj@3o%oA2vim$w@rTePZ)$_ZyIP9_y>&j@C% zg4ba$Lwr#}5}k5WMA$QswPRWp2F1d|kp7rX4M@#5-)(JhuKA;ps^VFaxmC7M?(BPZ z?cGD7!!O($JlhCw)`sT8VmPObDA@@O8wdOiGVhP^73P(FEqtU`_bCR81yC|Jnj9;k zpmn-FtJ56vVO0ZRxYbw=R9X_<$CGJ;wOVzcrGcN<*04spHZgC4DNia(Ct4=thZ(71 z*X_^mMlk05ov#epIqdS(;20;dPNKPS-QP>|GYQo;D}SrCiwYzYEY$P9y$61N>k5xN zi5XwEC)#-mHMY&SZmhN%N&B;3HncQ;Br6@^a*3rDe*?dhU<-^1m2mC#6cRSz`Uk8X*e8|cVEg|L@8$` zitiI>Pe08j2J~Yfe$=pp@tY4LmSOq`=Oz9@7dPthYnP=27i18y8AZSF`9Hf?HP_dh zO|;rA)jVzmihyac&Ti??_h4sE3a*O_`P^90(9m%9TQ#ahN!P&v46EX!qkV2CdC;oK z6YCcG`hv?tAHclFbW`Y*D48=8_6P?rQ}5HHlXIH%bTUQp>&c4cHk`6d<)G>X|iJ>5+W zd;SGZ571rAF5cM5p*(G(DoC>qtWN#OJLXZ4?&9~w_TmFIjDp#i!@DrHVX z0zT-i2J)I;=wy2puvWxJI_!2@KG{z887ME?ZkC)IOL;^U%_2#T*6>k9Iv5^SZQTvs za0Or~W&R#H=9t&)6HU`>c772a#MTKZkaxcvK&ig!M$k$rru(XuW9e!C(R5+#AWOfG zEn~v1&~^Peeh{aSLBoy~*LGV$vLH$+`TKWd65%RMdasLhI_y}`0GNIx`@PZQ|8g*y z&DLYm8z98Vc?S-(ikx)GHY50m&o7UcCJh#FXQ#Wn6zSt?B=u)~p)lZbW+IV*wuZ*Q z+3AMYmZh*96Ft3t6L9uoqtn5`fq;OZo)6w^F_l55zhok^Y8QL3r1$OIY0Kx3NRj1E zO4_tbm2G9!X#U<2G{G3cQ>e+`Em?qrqQ1TqT~EY*9U@YUKywg%kCnk6*YvHAe3!li z$_itTqSuixC-U{!YG_0Xy^(g4Cwt^(_F#)$@|l~$XHK4SBzy1I`U*8V`)V501o^sP zyJ}VSK$TPk8|@r}!^oFQtfi`UWDe!NPe-&y^zMqzlc_uNZDC1;Gm%cga^xY z!?-vkL$8f~7YSR^_lndgd>>R3v+^E_aIu$T*NGqN^RTCE`bIY^?0l-Ti9U{Q8QpyC z=ND@EaznMz+nx;+vAkAq7>9;hAKaXH; z2SY#I$RCTi4Sq~viR4i|*NNU(L>!s$0UCju<-5y{-PEen4kX47p;|P}aV}aj+5t~110Aaf0tw@b0kAVU-4iDYKuTfr5)DC|iyn^|CV}{3xm9@5G+;SN;fEW7XFC#K%fsd)cnAI`@a# zGNBd9j|NG|#-3b?jt$UXn~*;;*N{3bH?pDYKdRUDDcr2+W|8Rylc^okuIhAp+F`DG1}m zJsTD69mKhI+BxF-xw4+x`_^w}Uee3VH>xOfe+5A@jKJNSIc!@88Jd zjx@|zF85;tqi%G4#~;pH z3`DZ4@Qj00wwM{^Uxp)0!j7iMO!%}!{?nzN(ND=*dzyzP+?ODEe3wchwJ#XD8 z>HKs#7Y1AjFAkG0#gThYWe{Gg`m2!z3(1YJ4_I10*?`>0{%wMQH9XYfbQrxgiu1v! z7iB)%W3DLfZ^5cvCfkm#R4=YUI#+c4f=0brpZ0qu|oF)ynYYW#UjCj9=whms#z^l#}= zp+{k(zZK|)3>{N_SBarys4V*Ug-Hf@ck6(4mCErg(Sz7{H~IcYyVKPs++8jlF(lH2 zQ~Tq@|1VqM=>m!{n@ki=(BW0OLVnr!N$X>R@u|7#W^()PmNvwuU?m_ zUA(s;2al@42LOGGKP{Uy=@toG^%g zq6i3Pd`aw2_gcQ|L~P80~png#8~%($oUX>3%?W?<@QtSXxtb5Os-#_Y(|ExYW4ENBe^#uc5KJ zZArlPSJ7g1EzN}!9AZYu;JS_$r=4sM#>sL?|#%w5KXMIQQ;$H(T4nhRqZue^&~W6;GGO(4#HnPgVuvbVRl z)-yx>HU5GfbO*u>wcpF@`diC!h|&WMF(-=;3C74v<1DyT`?!{;1Z?CI^}1*0yQWKi zJ)huW{Rx@pbyW>lH~ad@HA*{6RmfAhIk~(VI_jc=wMa4PFyY(e=~EXLxfbWS5fKp= z=ebNBG~Ddu^q^LQzvWXAn*=$iwb!*F3P?c(31MTVde$xT0xdH9Jv<)sE0^mUIueeh z%{367WBgq7pt#j4G{dP@rCDu$_RI)Jjz~2AIIC%SP}coIER{YZt7(XiKWKA(1xHU; z*%dI}Q{23a)C!{cE4IC(wpAx&%k z@|Dx;tZ>CKvV6(8t_>8t8jOHcNogwzk%UN+4t=Ur@%~cP*;u7*m^d0T#32M%Jv_k< zdOjK<1^(d?a!XxN4xb1RqZAS^h(klW+@ZZN`G<*a$ZfRX^V!+<={X5{b_PBghKXAB zj}cLCs3FTXLI^T6>{g-~AwdM@&pS$}j zIwGhkEmSc|k@39pL{aj7whe0D+O=M6Yl3SD_}~Hoo2ehCaT#%snBwLf3ojGL$n50W z*dpHS=!yb1uJrczvo7(tXxuy08Z$pc*yus(tH{tw98V)HjYuSr9O9gqncDX3b&E1_ zCf`%v_AC%Xso479g5NnLiL=0rb7B7X2?-%__BYqH&4sCz&rB5Xk`sG-2fO|_-{_=4wRYh;4=tfJT;u@}s_SlxxxO}YRh*m0S|3*FUH?KhFPv(*{zf8_%O4sR z!vQVlM`Y1fHNfQ#6}Ez*(3_xtXoDMqvperV#@nAyL>qo*IfAN?dM(FRxEWMAo%Ydi zG9C_}m5DmGF;HWE;vdcokA6my9;Dpyc5&HW?Rb{9a8GA>ZV2ak2*GY}MVNskM3K1= z@x&g9#jdbDnKd(%{OkG%N?yiRvPqoXpy3yOI#Dtp=P{h66HIBvyTxJjMU*_36xxe z8?`yBA#S2e9c4Cd4B1xy-AKwI3yY>@Y{s@Dt65X+baRaoY(imGa=XyFG1967hPHR`ioM1zM=tKp93wX*14Nl!3~rxY?l8 zD5l7;(H=PuGINaFse(DXW{ox|xBhn97QbU@hnIdM-fcbMZZQK#e zysf!Q`DdcYYOlz8U#v32FCQ6FV*+J{utb<@Kb806h-0i+oh|{>8aKvLe48PS8+~J~ zeVK?8&ZHnO1998E*y_MkJGe3OHc0T~(;1r1*vbHk8ubA-FS#LP-cQwo{49gD89d3u zwmaQHuqa$UK2A=u(a{)!_X}o$*oJWy+irA%!Xo!G(SNIZecqsc^|Zx=t92y<>p^SF z)CJr@G?Rx1mnozA!TdztlKeJI{GXz6q|k6K1~9SRE{9?RhYq+tkHkWuym8T^hJvrG z>T7&o0V$EAtor1NX0`xYnXpJwTnUjD+e-_wx=>ZLI`R{7*2p9xyUYwM=HS%ruY>$R z)JV8#5c>`vBcMzAg_*eLh+{B%nC%YCeW#c*AYM#XpU(&usMv={J2S$zIAh9{XRe96X2~4sjHs*P0Z~wDAwenv14k$AmY3w{(P~P? z+7u;&SbXM=!CJ}}J#ci#QI=>8wQDVjSt#lK>mK(dgg*W+xjgEH|)=HT~inO z`JY#3pRFe%|NlOKV8Ays|2rlag$euC>CKXIH-!&Ai=W}&)Oor~5PR63 z;A6p46{t%}spdP{otI|lO73RBlP+2aXGtM=OHt4cGMJExzAR&d$U4FV$@%P|+5ujQ zuk*iGjWzWX1o_F)6~0BXCrS0|=cpq`MqZdb1d(Q}e98B>T7tctaSbqovkx9qWxvhk zmhf;8N~o#q#Bsw+m469f`KdhtCutW&QBMZ%;;RM&VnPnSW=4&r0*5SAV(z|jiRny? zC?7=QZOsV+XMN{|nUsguJ?sY;?>hD@K)>M~p}#pbM20RVW@-W59>jrAMnXQjEua?& zaftfX*WMqTqO-tyOPM1vLF~NgoG~G1uI#E{Aix=yJZ#8LNZk>M0UJ*69DNGQW49FJ zOuM>B8qnt@QYQ7^T6r?8hb~wI7&MjS70QOLhDM=3GkVd#(@nBV$ma)QHN6l?Qn~-eIPv%r7poUs`gwySp#1t>uBWCpXxgM;~c40edrfprknIGO#uaEh%Y#AIsZ*FcHb$SN!`48XWae(Cry2ffrS!oep<$AMlRWek|AVD)%2Ydc~ zIIu7mD-cy$^r=zg7VK|0vKI)^n$Jci-?|CDEKYoF@yb`Fg&{utSfHK@*pfk*B2zBe zmR0TdyRk)2p~t#4Ouf$6iQvinU?@bhH8WH5P>Ki3`mS#t-bWgzFE+ak7#H)9?dKUzV%n@K?)v~Z7JAHghnl=S1HY-j}3JL(!c_}HJ z$Dxn@>qfV3ZZFSGd3PaT&7AMoz*Fr{jMxmcw7ae< zzpHap*q!d8YcM(TdBcP?bo!z?_SNd~K~1=o3I~JM9*Fmy+kh(rGEg0Ll0Qrkv36Zgr%mTi`A^|R8q3aPcmM7PGdqCyg$xzL1 zZCxQd?DN692nu7~f?`&l#FAQi8ak?)_^9Z?H(mYcAK#)UIoI30l3BQcru zelBflsp;FGA!X2cG15|1*A7-<{Vcl6o5wp%UjM~^ICF#!aPq0i=KN@}_66QX-%45D z7n?sKIdm>WLU!~Qa$*7tV+3>aEdH1|y1L+7$gBY;WTn|9?MU--)2*uAR~daP=9@Nk zAk5de1O-43MeKN(LXcI}Sx)zBC_$D!D!j}vB{;&fVmUvElLJ&qehfBCjEjR{5Ao6| zXgMpo8cHM|o7{}W>h-JrKd+BY!dP?h3ui`Z6lF7sWo=Uv(^iKob%ewb#SEz|F;yz?rF_;^O@gl0d)h{%~;Fkx92s)Ky2&(b~Fn z8f{C2_XAvPd>>*7m|cIJ#PAvCYlOy=>fe z>eT~=7;3w2jJ$4Tf3|>?XPb3q1J}DF8|&-OFE8ik=l7>kFJu%H0}~VWb0td8mb>7@ zjXw1mjH|!Ols1PFDE>Ktq8K!;ZxVxMs|>B=fd6##Z<{0Tz|OCCK_ch!vLuhQ%@lG( zE%WQz-(iruyFLd0VjF~sknDpA5Hp*JD9lD-4A&a9(VOAxI0V~F^>e`)YphM)F&&C!I_a+%6iZI)XJ~R)T88!>f~FY8X4pt-w`a6Vt<0@pLBdo4!M;{b%n zBVcK6f4?{_CN(9c;L~2RPOULk>`+t=vq?|f6N^UX-`pU5VQ@thtkcHF5jU~;LV-j7 z(CIUtrq_5#N=d|Rw$O1;a6xP^J8e0hHu*z~n_6pPc{)%9(p{tFCD zA({o`=g%$@?1`%`?S@TO4h}@9sGso6pS@om&Ix!Ne-WQ`Iw!(LM@Ku;D`$Z<*>O1Z zL7ylAaMCKlqPSS;7M6#uqdT4fYBov^p|O!H*&Ffs7!s_uJF8}jk>6My`_pj^$TSaN z5XhwF=_<=w+#Uw6vdUuz#^`O)zyC(n6E7=^4#qVaYSCe=E(Bn>-NvFC7U-+l@F7Nu zVSOFhS;%gI1$`3>`>Ztp5f#ezY|_}!35JYpsPnNi*h=-wMyntZ(v&A+dO+u&E8xc; zXIUvyOtaFCJb&1WzHeCmLK8Kfx{ z!=?>Za>!XHqrVGAqyJfv-7*D4m6qXCCLIjn#Z3i6y#tc)q5Y_}Os{?rTMqe;%jPXq zsjZAHV^Iol46cVO=f#Qws=*NTc%NfW2_jZ&mS>E|_LaNr*b#Y?;T_hdZb)+`oID01uDL`l74-wg({0-%UX#?%^>P5PXSjXlUr?=a(H&y|c5E8~E;% z!f4WygSI(et^ozvmu?c^b2Rgh)Desq0Qg`zZ{*7)t8U>BuT7tkJ~08Wg!p*>#|OBx|p(um9YSz><#&ZRz++E}6Q1#U7UkdZL|GB_sT!wpzIw{H~*z*a5Tfh)Egln8_u!b5cUWSY92H(`1oZv#T>uL(5 z3_*|k6=j90Lxvk3MoRD{9UO|6>+0LFl%*zj8sv2``bbtIahMzk*`~+xrlf3CpKn4D`wMqwNW6;+ zlaUxCWLYDh?hRn0%t((oSQ+832?-;7K8NUg(}GiZdMTPlH-!4?ZFBt`q=S(RR1o>q z&_NmWCHWpa+)`j34M*wE4VwJ+W+FF)3GqLOKx#TJj6)?b6(%{t)7<3qd>kkTj~)Eo zj9QUy#vq4$8Fv4OU}{)P!Qc)iG7gBsElwnh27@r@Kk#iT!wa0sQxqW=#=E|dz=S{;b`~damev;mDP4XDWT*4&<~u#mdvt~JLPQp%S@j< zltB4=I$t-qxSw8}4=@E|cnqvwcRJ3i!QX=ymw=<})cB;s@j=`CRSk9nq(I834-|>Y z^RMx>&X$YpKwneSGF3KHGs^z0Y4CCx9*5N?(>_Q{@akFAT0h~f^>sqKEx+5z2GH(-jkw}iPzb{yhuRGsTP}tGo`*5~mJ)J8hppeci zH43hXONfhq+rIV&FD{UFj};({Z6jkb>Ifr1=MX&d+#gF_J?Fx=hdSQ3=gk%tnzIT$F|Z$xeW| zM%&rySLn9BI*JXA%B|N^bl!-SZ+KfsN4ZmPi!xZ`^?TWG@|F=Ffg!Hc15Kesc*+P5 zmcKYeGzBp6Dgxdx*-9|KF%&Rc&CZnQZ-_LtdgWhSk~~Z*HdRg^2V4@@MnL1uP~XB) zA%~TJ%HT*Wf?xZjQDZXW z^2h}sJ`>lNz;koG9acn0|HNc24*haMe}d-=ckveV2>#=R)z#jE-is7qx)^R01iqwOL=v*DqHG08{{lT zxW1quqBy3#tAcG`d7LsZOTdNN@b6H1n6x)x1H%($0(>vhErW1b?`XLisl*?y%)(1* zEr%ggzlc0FjEs`B7rU&GD-4_FOn%5=G%mRm+u_W#2D9m!c~bXmW-3X+nRHgT46KAP5dTDmvK zHDN--q)p#(2nISn@cDE5YegNobVZ^AN6*zxX(a}^5FR!*HZE=$@*Mb#zAB`L=Hg!B z*hgg;8X6)Qnsom*z90E$deahc>zPKh;Opyass&ENvH7w|oi#uA7MpN6+4BD68n3(nvjFdM&zKI7KQ^sD~Lwzgg&I%lrR0AAzXNSrsg zE{z9`ym(b(YZ@!n40lu2%3eobe{eCO$jlonYmRUrollSq!*LQoSseIPC|_O3GJdPx z&Z9|)xPx-{%aQ=^Y0} zIEoI7mXcE9Dz0v)#y_TVh6unca43b#`z!x%GYiO?1#0~)($t1sGJZx@nVPRp2(_=%8 z-#<{n*(Y`rk}X!F{{_YZAPWBqEdTGf1-QZZ`1zwEB6_>K!N(yjE4y;&G>L8YVGOx0 z$oN&U#x`NJ%Rh7iXe%ixT{tP_?|{24W=^{Q_~xhj`fdxfvwg2OQnURIni`gUxxtT^7@LR)i-?E_C1q}5p^Q-y zk#anw=vs5Hs_fHHNkxWdAgq2j{s1T+j}iY7NM(vBvK`f}9{1~l+Kw)*9*#FNorHv& zg6j5+K+w-fkoVe%_~Z46(_$mE(u>fZ?{;UZ6p(hP=;%{~#KTCBFdsjDRL&Ce`1AAq zFmHFqv=EtiT1)gtf8-fPh zU!$wvVVHOKuwq#^9n6(&M{9BHz`PaY=IlH=bIV5rN3WP+Zf1sygR{1~>(~D1=%$nV zx1~kozSGMM0K9XxR)~m*w^vu;5fR&O`uJ6T5*qm*XRh4!YABIssm#GxNWsr=SM~`v zG#6-R=>K9WGoRwQToSFyyH^&w?j9K#>FFtWf*E`X(@N*&=C%oC5OPNPiW{9*Vd_2H z+&;<|+~9YGVB{tSn)rvwm87T7fu-_nuvg*?qB9S z_O0YRcD;CTzP)e=XmzUf+@BYg$@}r+$8aY9;c{zpWo6RfhGC2Mad!-EG|t-kdV}MV zt&>xdP-0>t$639@0!O?l_NtSY7r%LY>z}`1Pr5thum}hcMY%j&X$R-jii!%r`g}99 zu>rQaYB^cizGOyqbFOsHRG}*N`0QD7t&YB}u8aKzQW6rCU*R+0v@%QX8&T9VFkrjh zn*d(REA@uDI_crFGxx%*KJpZKUT~ZMcMibZJ8|*G?vV2BPtqF5Tp2ybDT|Hc2Yay< zeD%5c`T`uze}Cxd>)+-)-bFPPqC~8nZBJ~8pUhOe1<^%9eiwUS9apsi3!GESF@hr% z+2mNhtP72agP)%;M1PU0D8A7j@TF-}+j>)>h0dVw=x%Odv1%v;0PG(>o@I2F!#D^C z3ifZDc&&h2*|4IdsMxdQdh}ajF&$8~ECe9xsnE-wPk*KRijtZdMyV$!=D%oP4eXN2 z5ma`u^Al$F4y$Mt0OY14ofo7U27)sH^i@DB)$c=daQu=CgM!ra;UTcs$7LpCV}?NCu6b1Fb5kO&X_<7?BDdCJ&8iGQ#irb?s}dZ6quwP=p+-C zTc^&=Z5Z4*hQgcxQL_b_4`e*^IwL z+8ktWKRY{m+x7sSUC==~NFiH`p^r>ZIrf4H=uEw_c&lTq!Y=a-aLMsuKg~|T(U&Sr zrz$tsc<>YJ(2VO-U*qP;0Dz?goV}~~ndVkj0HoDf{nP&uNdk+<+uJ*rYnqFQ2ib~} zt`~R_FxT1TKWAle3hdb0Oqc0~L7#`QpAZ#Sdl3hwu{7mwo(D!dTiLS>;yoCqx`u|n@I7!O0(B)QUZYWG%Jrk( zB)ze>vg%tDe|)%XPa+cx-Hj6@s1SC<#G?Sj6B82(v4M5h83zBlqE1Q6iiJBp87G&QGyy%yUo7aJ|LD2!^PuTPfl;}e~W#KSr7 z>E)I0r+|val!5|jb=^R@fR~gkN=QhUrO`6^2yo>*@mXQ6EqoY4wp72}Y1X}>{Crq$ zgm1v4j~qmkD}ky5f6vXD^xRo1=yqX++I)tcv;)wW$DSKt4b>po7aN!$9;xI$>jD1KlWLuLE;7p)VjhATAN?vD_29iyVzv z?>eM;$avkOGn>lF(3)Sp%=qvjbYgsJDx#RwGs>?YX&IToi@C|mmB(kC%py@$ z%0`E5_V)IlSoI^VN5;o-f&`;!s8qXiL5u@v(JJU5OK`nNg@mA^qZd^HCUEer~7Fzi+r+gye_?ka)p!p*?^8yeNJbHDIj`k`~ttBSBB6 zS;ctD!hA6D`7_xTE)^GA>>SaA*tdjYqSNi$MrwBU!>0&+z_HtAuuq&+d6i#+HVk>n-Y2sR^4m9M~Ow=8-w) z4+vP+B#mBa-tB4ib+<5m=UA5yvo7s9P?&wp>yk-GwFc8iV2KLY{>kxBZNBzC^a+qv zpwtL`mXF0GLG<+g{eL`g{{LZzX>dyP%C&IT<8SX(Tm6vnyT0g2+qBT$PrV@ihi0XQ z*65Uh{6AmQ#o)nV5DAzXWDZ<&OKKMK76CHSiZT|g1;_8knQYzcNG312>1m!W7sQHj zpkHFyel_KYIUnDYL`pD(eP-f$9)>?^OTlCU$z%;fYR2EBun zJK8G@^uO=lcpDH9BPb|paPZ^DD>qrh+WM59olR$<=H~aZK5wk(qehhb2kq>gWW@ye zQ`vD$G~d2?Bk#z@bh*8pZDZ@ySNfWI`{73Xz8??8es*>`GJu%maMc+orOjUv8JoYn z{Q504Z|dKnoQDq9wRjbK6&MuyH}Vm~nB zWh!Nvo}Xz<&NL$+atntB2ju7N-QVNZ)(-FQ+ht~|65$d4CBebLA|*|IZ?dtiYpCrt z(M3~QgtU*T@?e~gkT zLIrkh?Omn4efPn;mXvsbg!%XAntySz zthE)lrp7-%zcwze+Cj^O6EDuSFE|*rz8*;jyPZjMKI+q|SyC0pWfe!!3_TZ42OA1@ z=0Ur^V0rGdkP}U-zn*;h3IN5LqS-*$Bs8LWU?X=y^EDevPp6 zvR5YcF_)GPv$Iz^Ij~k#MAF%1WaPH;@sS?eIocGbe6>=tv4MEje{UCOVlA($oe*R| zY8$F73XZQvVNIQx>iP1OCN|+^^ahqnVC^HOw-rY`}t+3rgQvmFL4tAge)0w*+L8Dc*Zmr!!e3Ga^Knc zH}e$hzwdn1Qj|}6^Pj)vZ7vJUDVT9t_;Ekof#?8vH*MhDfH5V0Dig0PLqECqTv1AT z<^3hgX9u@h1fKrI2lsRYCeibV@~=)lg?etX0rE-G|M{<`gi3FNF#bI5D~!S1c3!eu zwfS(aH%ZDdXQ2uPw0>?AyQwQb?!QL{z&P8K`GuW-o?XR@grgJoR!>S6sCq`h^h-Cq zPhZXK+32OUPsh8%A{EuHVc}s(TIgJE-S9HV3J}tHI*haBKeEo`!g29w@V&&dl;?Tf zRnaO7xhHEXe4WoYU0|@$p!bTuO1*0>pg`k+AMyN(?sEc5Is(18=27|OPCCc}=%ojB zl!egkA>p9?!~%6!CTSZZ9Akm-KFv)#xJ43)>CDxHSR;Y6-pcg})9wE$wOk-n@6#A>g;j&@m$_ zo`8cLBku%gvK*OaqWcdas#`4s%L;eOMAo(~Tu)Y>F=`P`eZC>93ZIe=b;k#*MOatO z%dec@JVjYt_Q$w0M+^+T_V#=ZM_G#7?s-;?rBJPQBX-jWew0NjKKON_y(;Q>`8#m` z0jbb^ELh!gd;f|>L2EqRD?2=jS|eTrR5APAk{}*aGN+lIX-U~UUQ>n;>Un=--GSCO zplLXVYB0fn``6)U`0Z+nXcv`5wi}6d30QmL%F0-{xog2%dS5ffkTL+;Xle=~D3p_+ zj{O6&e&UKh3%Noq8F)ithGmz(@2sjOGtA8LqP!)E*p?qY-6OgW9p%RjPB{-OT1hG{NeM>}tM#<*L^Xe z;j&|37aJ`m6=S`{4xE;kLdLx&mlLHvlvP4dAqE{CA8U*{hjk)yZ1!DoSl0JV4SNv} z>?{fIC>*%yt!Ffr_B~{KX75K&ccIl+Zidy5M4OUc3M>?{D$UK!rKP1VxSrUUSf7t- zYPecVUt=%gY5)f~J}NxU#_zV=3kx~^|bzmH{lX2uNr=-U7D zR;%A7g@`xS#87WKS<;R%VQ?3g-Q%ppJi_=)$tErHGOdE9KcDioLlY^X4AKnLwF((yBTw+%op7^ z#}7&yL{H+VG_IUZ=a}O>DHh$9NH7LJSijSC`TbizM`^*Q2Zbb({IBC;+e7!YPQ73ZEdRN9> z=mp65wKI+nyW-iRhvd%OLJkw@gQUtv5V+55Bno?)Pay=6w7ruZ&Oeh}JFh$N1vl1E zzaF%22j7j>VM-S@-eWy8(fN^}D8k{~3HlmGCGBXJaQWd1EPDj#B7S*$YGey^t$#xb zJPcXY9Vd5gk6SrOpmh95e+6b7k*u%ATaR8tS{>A&9vbueTWGhl3eB@Zv6JOZy0qvj{dA=A=-aDwW?U&($#1`9VpNDJa`R|V%JwD*l0VS zbzP4>O~h-GLf*))q~C0WWMc4l;)-YRjL9w6XWp|00Ez7$pex!JQr z7|&yTZYj=l@6mp>CVZN2Z&I{U@<~4_SPTs+T<%&g5@E)zQB2MDLY#Z^v(pi zuDl$*R#Krk1`$C?077G_wk*yu+o8>O*01l=bz29jQ;0>}%}TRg`N50(Itq9j^fjA? zoio%GQUF{^R%!@>&^%My_0{+b@@;ahjR1amzlMT(r`NVw*vs#F2zGY^6587zPe;Tt zPg{Y=_UY3nkd+sy!pp^lL&f+pN(+c5U4NcBEE&5qm9k>=^oVg+VRInLiGZ7ni_d8} z9_>rq3^-`xGi!k^KM5gGT=&oGqb^MB4OBQ7pxO{OsX+ThW9(~tj&aLMI=}zH+9~|9 z$@B1|WAfAWa|?<6HC;nROXiPW^i^^AEAe9h)hzOS_*PK*X-~*mkb^|^cc+6N)uc#- z~?aMkU&*{uc85q;Yx@-mqD=P;>Ho zjPaC!`gKoa;&zX+=;PY=b$aMEudLF3o9}K>tFUJXN=RK6cKK()-3CK+x!~HF7s6t8 z`}{61X4thLn-pTjXkkJfj)MGse8K!Tp-GZ!R_rWI{rIZDz2eDvN#1r zIFlb$R1lalcvx6ih7RU>Q$1sj$qwdPeAp9f+yqjgVxwd7T(JpUvWT`VyR_l-k(Ps5 zcsBzD#3~v*j0H)$8Yx~Du6?xfAHlW)He1}asFv6qan_5Jld){uafEL^c~1seY6tM> z-L9A)24mZ%7CkO8PX(CnOZym0X`-|>-Xo!=&}a@{GKyj8*U~p_yFO2b z+8Vo_8Y0cRNIX3~jrG(o&DZ}1JC-*Gws$yQ7n?B*Q=`4mIT}tJXVpNE=|$cB)NlD2 zfucz9dYel>>n__NL853oG^8o8V8lS)y=3FpsZE=H(QBd_Xwl03_6RoX=XW<1kB5)< zC`t~a)_gh5zC#_SMOl3paRe%Oq3yK?A%mCXOFq|@)e4c%u*Ze$*S~xJeK0M+3E3Os z&7{`z&GtWlPhOzgcz75IlHSXtO8#>61ti6!SG$U?sqQ6WGr=qZG}ylm!BTW}i+pKr z*Jut$V=y!&K%Ug_(K*)0M^eSX3W8~M+QjU~YLES`^|D7Hr=~D?=YsuHWymCUSR}9K zjpnyrk7GxvFA5pFm1^Z+%b#_TW#40HX(BwwR-ixcA9wfjXTh=8`!XhAMR0!+`el*idkb6G-mMd!gYnsLV-pwG|$;Wne-l!m-EZBGHJogVI^hdq{PHX3d(YD zm{QnP#m!gO(IKjj@KE{KV+ztKjhTC?L6Zk0`^}1QbK`1t*{P}F*g{_G#A(}yiley0 z?ql+D4vcYPM8P&2J6KrI%BS%Wr<)M|r0EKlw#UcD1|V`sM&yNw1jureBAMmoipP7d z1r^^Sl2I*$oh3wZQ2|2iQ2h|IZv=_}3K`=?=tEy`Zyp)iKI|`Kq4dw6<8K)HOy%U{ zKxdz;D8?26x>+Bi?ahB=z7zJoTzoF4cHnDup{%~6u?`ev<6boH@LsM!_H9w)X>(7k zW%ikxVPEznK|{&1KJ6ZBjAG^*>EFmHa}V1`*tX{e^#yNIcL;eh%Jm!8NW!C{Msmc1 zfDGQ)4r1Cl8)*=vi|}x8LI;j$Pp`(oTdM^E>Ri@)fo|>L<&`7oh7bYtktf3f0@Wc% z3&nb%hAh=P=$p~VXsoq|i3fv*F?Bry1H&jGanv#7Et$q~jdY2fsMCQLQeAEkmdRFg z&d6w>6jNA(W!5Q5@y-ho+ryBwbG27^c$!P%jq4vaHiEZi>z|TGWJU#TF775O9-2(2 z?pT{G%MCF-;5B%=hI3dAJcZe~BWZo_^OMYk!jbqv@Phk%%~XRax9cChYEDR2yN~v3 zN$ob*QQn5V3HUdbl}p}R^==AZv37)#g49>`wwd6gbkPQIlpoP!sx6Byl3HBU|pj8vx-3mwR)t!@rf+f&b%*Tf$D|r{7_#m4!tF`YO>ZYNCsmSKn2w z#UR1Z;U(zjf$knKI%x#w7?ZH2HoN^*iq`{Xm);5}wLQ|5$yX3XWv{DCJTFE6)V3C> zhkOfWgIdJ9I#*FqOZ|>+1p%J$ZzI&lxNP&pPF;vdbgPV?pUh&NuZr-%gyreF`+;mt zAoL46|9*zh3y!h5^gx*ElwvY%QK6ea=jZ3= z=}b0@?xlW(u+(*c1{t=)b;5LX++scpX|I&g&6pC&Kd>#_IN z>~kqxB!vA$X}hb)JX9qt39*YP3)?QQND=i@*H5&nCm*!WB-hKDe<*Lja?w0%s_ZD} zWM&gT2rPt44QGU7;Q#ZyqE(EatnuTK@1amP`EO;6eAq}FP#=jrgHjj7xtsB~i>It4 zDSTJ?h<3W2{lNlfhoe##$6;8fKK#1V`nxk$dXcBZCk5X{Rg_q?rK^& zGW-&%I|w`-XSq#|>Ib_Q8wm$kmhxvK8+jti1u=)8dc6j}MHp#Y8ln?V##qGQ`r*%u zq9E1@?|iWJDz|(2_DitJ(rHPWp(q=pI+rsmkI7}-f?R<7=W(bN+V(1nCaH2*(Y~Y?%8H88$aKdFwP~Z0 z6wV_cv}g=N9Vu6)1*G<_Cn5ccYN44%r^ljjfuLgFuFmmSw}Limnq?FWwDh6vsPypv6`y* zFmYcTQ}@K0Y$=PitTUIpaEfs3B4%)!<%J6zn*wHA3g0}eo|6dFRcX31*U^8~eWdzr zMl-oa5u>bV^oqQ%p?)O4BvsD-*elQ{lIUZ+K@qL|a0T3_xx2<7eXYnEiwPJe?LOXD zMQ;9Ya$3@UYYb*>P8;*FI}SFykT?CH1u<%8k3}%DGPywQm6!*A+D!d`YM<|zJH9@FUKzGK^=Eg=2i1g9U#zw>yFti|7leZxCcVtChgocJ< z$<8k<c}0g&*>opIKgS}^ql2unx8LF5TMlQy|AjVK z6Wm6KLHVuGYGj4&rpqLdnJCi?>+OjP;W?N)kr{{;SGRKczm2qbL_y5cqKTp0eBtE4 zOBt^qDG3`d;I^s218+yo1ojKkoDo^~#C!}?RAG?Jc7f5nF7oWNGEd?}gqXRdWuAo2 z=WFK#AO71!q`GS5wqKRlgj`=jo5jm42FeEt49|5?4+v~gWve^ud{Xq?JU}Y1q?9xLgJ4NjFNKsh!f;Z;nR5gaL0r22@zH7* z){_onf-31BBY?R|q7W90lVUZL*3q&a+sY0yY>bVcEkKMp*d}4jpctP+P_X`hP5PbO z>({~GCvADZghG;Ec~q&&$sw=lA)Nq0Kbjq?e+I`CVGYExYUEJuv=i`=K8d`4!ixwO zvPFDw$n{&iIm2UR$jHckiz8uH(?I0Tpx?gXUq2*F04cuh5{=Tp!ydsHLXg7`6!6gS zfzduPLAx}WB5KI+RL9ddjG;-%ozd_X{wHen9`o_r+pq=oUFjk>>b#HayRvm3v9tVO z>mu-3h+!5zv&VVAV)jZa7D^y_glVHP;ni=qw*#?+f?kGA1CB>GuLCEA&WQQLgF!W& z{+EPh*X|6MbOfkvg;cZW7N&6gYBC#%9iOysBSf=UgMxwr*sp@0Nl~lH%cFF%gc}q+ zBi7N?)zr{9ySV6-DXOxYVS|gt!h|Sv7jMDxg{xu(ck&;h+!2zJ#-U>iP;*E}`WO&Y z@;ffRN{jvg9BgUG=$*qH4E3FcRl;emApa3eZWx07Rut1ll~f192$6!)l}@}xX7M`m z8XEY|V$k%0yVBNS1jyi0RY>X~SJ8^bijz{pRpje@g>;^=$Z$9DH&-9SPpFj02;q__ z)*Af-0;&mh$Tp$_T;jL*;9{!qvpVF0rCdnf_p!YT@l}1kF^h5&p2@j@gp4eKti)*f zOn@v*rS!W6ZbfQ^4H(!w4|C8TThH$JK9dzdPX}NK1b%mV>gT9aTNP5 zwKz#B54I>qXbZN)WJV_f$9<#E6#qv(Lx*8n{;O=p=S4|4lbmFPC7eEmIRXS^ z&H|PP!ab)h<`w^vy_YdrHszSyXk`5IOSlsWN4RsQB~ki zH|WPN%E`+LjkrHvV#PvuNciuq8%E8IzRDG0168gMgnH0Q`szS>yc2X#!i0~1{6KaB zno#Kj*CH-KTo2OuIckdZ{uZxn= zwn4WA%V*xUZUw5xx4TppT8kkq-<*)}-$xXAX2OK`8#{Zj|46c{~ zBydDwJS8gAVC_6BaQX1T8y0AnWL(rx3`%+WUR>Kc62iAZ*Rs8$;qy?U_#MsOOQyBD z%H-a_*nQ1H=Vb89EnxT+5ITV`YVn|3;CX6h-}*NDxFP_9;-=DPO0Yt@;B zg~ip)4ag}#_m1z-fV{>35xC>Nq@GH0_*yxGUo661`}zo(mz_t$gBiFxyMJ;h6F z-76&r-va`?rbxZQDVb6x5*w0oZsT}w=r*meewSBhRDAroC}4eN+b6--TQ(GzUdbMe z3jlVvpK(2Fpd*Wkh6a}Rr!BJdC5{|$#(+8)Y?8n`1)NyySJ&4b9v2QzeY%664y451&)}8 zzT32*^&ND-YXpcj>3(3wHyHqS&kf)fZ1w;Kzoix*+|rtw8ep~vMGKt-9=P9{3ved3 z98jN!>%So5lcrdsgq;K=ws#UK&`!cHXC+?W*=;Z8?3Z&XZ+w1pP&>GOh;%3uXeHI4 zoPN|NYa6F~QWx^p;%)4cABSnRNp&`ATVGeH`UfuGW{4j==cu*Zo~D?bM8l@4mA@w9T+a_}fCOPO#AXy0w*@ z@)3vBsY{UQeru)y+2FVJr?Xk4w|*f7aSeLAeinL>qU)ZSdz@8<&9lqAt5P}zB8+a} zmtG{P74zI3Q|k3xC89ype&Ct14jh9)ZRt3j;b4;H(2xRdw*J#aUcKRuQE7MH_TE>^ zzX-{Ht7*BwWLRw-xapcdw;5}cUBVB_ZJmi=eBg>Jg9x~Ds$r8a)CL> zv*kiui`DYB4iolqQ$f@)$g8B{pEm}VhC-e?n(9B#5wq{2&1~#0(PI}csy>N);l0mD z;W=*K1*ZLi$_ex>sr>R(N{dtJ+X(GH=_hg*^Fs4DQ5Tnv4Ws&P-S?3HN<2^pb44kr z|9eMBB=(gmS@X0R3sa;e9~Z0ETM3JLTGIbBWWX$PeKjjcSnX!)JOeTP!L{*^E1CZP z{1pm#C==d*>RoWW0$pF^O+=+?>D0QXYgJeKzJ|Hg0)p3N}6#fZ0|TfSkn1*PKRPxA_^UWhe(<5dMs!<>BIM$kq8L*ox21=Wb`- z7y7!4oy2Mn&06?H*EqWf14g7L87e*4J>ma-S!{hQ>henoxrpXMyYdE@O1kpas7-M| z=9MO|M+j848kw;*;B!&qm$mWOlYxxfs;z@;v9?!4L?kvYgKghhVwa}SW%+m;xX`Jm zTTJ%7cRK4rLP9{)l|2y|0c$FAhTi-rNeQ4|zWZJ`)O+M|CHwCUSqRf70e;>iMguEHTM{9wSs`sTKB}L|Kf=d1M{z+T_-ix$+7n z2ut`LS;)Ofu&wKJo0PS`b09(HGci3kw=^>>{EW%t6y>$tNPUf)#Bl!CVNIreNwzu< zbT*2>=Tz?j-)udx+`~;rMJphZ(R1K=deUxjh?DbqbCopwL+|EvZWROjBi0sfY=W}9 zq=h#>eLIqvjLb|&b&^Dp;IL_%h93qusWi%YYlVI4D|{o?QFebs#ei7PY_59wTneH> zMqouL1P`v)mF^LUv~1zn|(c zq|%QT=LY#*QDeKP%{E+n5*8Ap4QTRkjisVbGg2I+H66?qVDc2CzFW)FeH3oG+C@?Op07OQP)cC6`YXiofI zxWJ5GUE_vpnVRprU(&S$x;4Sn2L+84@iNC7R~3>_@&+}(nv8D3^;zpbrYyox8SC`L z1kHNl`4`FopTn6x_J>2D(M0^eT~`j*6aTpf3>rUHPtsm+)-~=wgXemDc%BYIv`D8D zxtc!fmZ}xM#A*F=1w#dqqZ`>cP8TU54&=u7nUqCLS6ajGv>Y&zU&(z+o_i~uphK;? z%_mDPW)xiLe$P1!6}=$}_odFOO(+#TD;;K$!{D(g_IvM+T|_kd@~g$UxW0GIY&6(Fl$J4 zB_%u=G=NB-5$yuY*6`}cNNl_j_Mepjza#|2PZTTMR^;m~<$V6M@q%o5mS;#jmFL5< zn39wN42?}E<>aW^LpsAJr{|Y4u3nb;NbfBgUVBh}X|31CD2F7ZuFdH*ch(h$(&``1 z!3a|z?-%X9mu#5DQf1ls(;!bdnZeeiEk@s_=S-IoK}3jg!M`$GO9`cuPw{u2SLd}SlxkdH@|`ncWztRCK9b6(s^IH(u-l{#Xu?`# zjTfOjmo0PLV5*9d;>_K7AyxQ+)oz`!I(mRC=6lxH_)6@~nprZ%h?Ha1P!X`qsQ+h~ zDNrNMVJ~vBuP7>MlAWAgSsB^cnPy*vj~XPs!K{gX&#h5}iS|D}?UJdT;CIn2oonDr zGYsq)!sO!6>)BOl2a7vccg@{Nucas{ya^Ni%FdoliV zVw%6{{h8K{K_Dz9`1U2vf{+hfq|B11vxDtepd62Y$UHwsSxF&AHKRe?SY`89LfWeA$k;H53Dr3=7<4k9Up8+}1cp!-U?%_U}HRgFia5xGH2-ueeq95ozuuH5k-qdyle zDn9WkIW9k!SRFHbpaRiyNDdK@_eLr@FQUFWr4n)KDz2S!mLYy->#jm|e^Dl8@UI*1 zpOue#VCd&Br`;_yv>0=Fmhvob|3GW0vf3yo5G2^CMJjt)%I^?Cjm;99HZ|8(`K3&a zP5X1JdzUaJ+*B0-DWrOc&qON7^2&pfgJo`nsBf$>y7QNa55G5M-}N znO;DljGvTre&8w__{EI(<|Wv-K%5>^oltw#mkMZcMO$^zH!|qHXdqS&Wh5Bv_3sFv zLL8=GLMn~>PHRRMMyEsX(WDZbB;o(s=Q*G%$ZIA59{N8=1VQuj^P6vl+v$|CE)kf@ zi;F=an#7w=SRw^w+sA?<@cbNCl5UsT^?q^1sTkJ`E&Qtin|AvvtV?8#`RQpH&%$${J`RIfC)$m83Jn7We^p;LnS4#( zzXL>wlAS%tW_V%(HxA@G0M&Dd$@C><#<$v9W>(fIc3d!bv=@xJcsMsctMrU~t5_sX zWN^HW9ug#k<-wIVZ=XKGULSRViB@*W!gM(Kz#RfLX!G|0wHkm6UId(}zJ49ub|%Jo zhxhky zDuBajgL11A$nU_fWjY0-F2Gm_V?{SNwS#4S9?e0YWO#p} zp;`yfyE0e)Vgx{U87ZTd`4vyho$b9A^XpgCBWW7A6G_7PcsnmHWkvl&*xE|^zUJOv zHg^Vn6Ku?)KOeAbPhXrJNU3lpmMH=UaR9INfOr@{4tH(1Vp9N60ZGP2gW)A9yzGypQwkw zQ2_j-{w$54T2@d{5Cx8}9(W9RvD!uf`0BVZe^wtWc)(yux|JT!kgBr=+5S043sda~R;=Lz~YO%ilHwN*3d}qqQ|K z2eR^%8Og?@&7LLjFM9(HhO>Q)5F0$Be2Zkr{Q}gw7Cw9aTQ?~rLW`VBpDtTD!<+MZ zKd!$rTWRZ05RG``(a}*=6~_}Tyu6&43kFeSfpe)2UJU3n??Zs`!TX4ki)iD$g!j(Y zRy6d5Ns-$1u=ZQ*PBy)7NUD24BCjGMCML$h`T<@P7^N$qqy|0Su1p{nfoq^M;eo)T zw|=Nno1VJ5soZnT5y3i-BR83{S51BOi{K|zEju~z&#EfoY0BQ7Jw?*P5{(2_IOC}G aLs0+F?ukrV4AwL7BPXpSRRJ*${l5Ug4qMm& literal 0 HcmV?d00001 diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 6f9ab33923..5712daf23f 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -31,6 +31,8 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win [Upgrade Readiness doesn't show IE site discovery data from some devices](#upgrade-readiness-doesnt-show-ie-site-discovery-data-from-some-devices) +[Disable Upgrade Readiness](#disable-upgrade-readiness) + ### Devices not showing up @@ -153,6 +155,23 @@ Finally, Upgrade Readiness only collects IE site discovery data on devices that [comment]: # (Device names are not showing up properly? Starting with Windows 10 1803, the device name is no longer collected by default and requires a separate opt-in by setting HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection\AllowDeviceNameInTelemetry:DWORD == 1. This is done by default if you run the latest version of the deployment script, or can be set via policy. If the policy is not set, then the device name will show up as "Unknown (aka.ms/analyticsDeviceName)") +### Disable Upgrade Readiness + +If you want to stop using Upgrade Readiness and stop sending diagnostic data data to Microsoft, follow these steps: + +1. Unsubscribe from the Upgrade Readiness solution in the OMS portal. In the OMS portal, go to **Settings** > **Connected Sources** > **Windows Telemetry** and choose the **Unsubscribe** option. + + ![Upgrade Readiness unsubscribe](images/upgrade-analytics-unsubscribe.png) + +2. Disable the Commercial Data Opt-in Key on computers running Windows 7 SP1 or 8.1. On computers running Windows 10, set the diagnostic data level to **Security**: + + **Windows 7 and Windows 8.1**: Delete CommercialDataOptIn registry property from *HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection* + **Windows 10**: Follow the instructions in the [Configure Windows diagnostic data in your organization](/configuration/configure-windows-diagnostic-data-in-your-organization.md) topic. + +3. If you enabled **Internet Explorer Site Discovery**, you can disable Internet Explorer data collection by setting the *IEDataOptIn* registry key to value "0". The IEDataOptIn key can be found under: *HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection*. +4. **Optional step:** You can also remove the “CommercialId” key from: "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection". + + ## Other common questions ### What are the requirements and costs for Windows Analytics solutions? From fe72d455b1d042a7629e81b331786c73b0fe7cc0 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 21 Mar 2018 14:10:37 -0700 Subject: [PATCH 121/138] update mb daily usage --- ...equirements-windows-defender-advanced-threat-protection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/minimum-requirements-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/minimum-requirements-windows-defender-advanced-threat-protection.md index 3027bbe7f9..368f43a52c 100644 --- a/windows/security/threat-protection/windows-defender-atp/minimum-requirements-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/minimum-requirements-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: high -ms.date: 11/17/2017 +ms.date: 03/21/2018 --- # Minimum requirements for Windows Defender ATP @@ -68,7 +68,7 @@ The hardware requirements for Windows Defender ATP on endpoints is the same as t #### Internet connectivity Internet connectivity on endpoints is required either directly or through proxy. -The Windows Defender ATP sensor can utilize up to 5MB daily of bandwidth to communicate with the Windows Defender ATP cloud service and report cyber data. +The Windows Defender ATP sensor can utilize a daily average bandwidth of 5MB to communicate with the Windows Defender ATP cloud service and report cyber data. For more information on additional proxy configuration settings see, [Configure Windows Defender ATP endpoint proxy and Internet connectivity settings](configure-proxy-internet-windows-defender-advanced-threat-protection.md) . From 4e510d198258c4a74ca843c5469d9df424ee841a Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 21 Mar 2018 21:11:50 +0000 Subject: [PATCH 122/138] Merged PR 6531: ApplicationManagement policies in Policy CSP - added 2 new policies --- ...ew-in-windows-mdm-enrollment-management.md | 4 + .../policy-configuration-service-provider.md | 6 + .../mdm/policy-csp-applicationmanagement.md | 146 ++++++++++++++++++ 3 files changed, 156 insertions(+) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 66cacb8036..5904341127 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1147,6 +1147,8 @@ For details about Microsoft mobile device management protocols for Windows 10 s
    • AccountPoliciesAccountLockoutPolicy/AccountLockoutThreshold
    • AccountPoliciesAccountLockoutPolicy/ResetAccountLockoutCounterAfter
    • ApplicationDefaults/EnableAppUriHandlers
      • +
    • ApplicationManagement/MSIAllowUserControlOverInstall
      • +
    • ApplicationManagement/MSIAlwaysInstallWithElevatedPrivileges
    • Browser/AllowConfigurationUpdateForBooksLibrary
    • Browser/AlwaysEnableBooksLibrary
    • Browser/EnableExtendedBooksTelemetry
      • @@ -1659,6 +1661,8 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware

      Added the following new policies for Windows 10, version 1803:

      • ApplicationDefaults/EnableAppUriHandlers
        • +
      • ApplicationManagement/MSIAllowUserControlOverInstall
        • +
      • ApplicationManagement/MSIAlwaysInstallWithElevatedPrivileges
      • Connectivity/AllowPhonePCLinking
      • RestrictedGroups/ConfigureGroupMembership
      diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index debb631fa9..914f916fa6 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -225,6 +225,12 @@ The following diagram shows the Policy configuration service provider in tree fo
      ApplicationManagement/DisableStoreOriginatedApps
      +
      + ApplicationManagement/MSIAllowUserControlOverInstall +
      +
      + ApplicationManagement/MSIAlwaysInstallWithElevatedPrivileges +
      ApplicationManagement/RequirePrivateStoreOnly
      diff --git a/windows/client-management/mdm/policy-csp-applicationmanagement.md b/windows/client-management/mdm/policy-csp-applicationmanagement.md index 47b9d1e09d..4abd17e1d1 100644 --- a/windows/client-management/mdm/policy-csp-applicationmanagement.md +++ b/windows/client-management/mdm/policy-csp-applicationmanagement.md @@ -11,6 +11,8 @@ ms.date: 03/12/2018 # Policy CSP - ApplicationManagement +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
      @@ -43,6 +45,12 @@ ms.date: 03/12/2018
      ApplicationManagement/DisableStoreOriginatedApps
      +
      + ApplicationManagement/MSIAllowUserControlOverInstall +
      +
      + ApplicationManagement/MSIAlwaysInstallWithElevatedPrivileges +
      ApplicationManagement/RequirePrivateStoreOnly
      @@ -538,6 +546,144 @@ The following list shows the supported values:
      + +**ApplicationManagement/MSIAllowUserControlOverInstall** + + + + + + + + + + + + + + + + + + + + + +
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      + + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
      + + + +Added in Windows 10, version 1803. This policy setting permits users to change installation options that typically are available only to system administrators. + +If you enable this policy setting, some of the security features of Windows Installer are bypassed. It permits installations to complete that otherwise would be halted due to a security violation. + +If you disable or do not configure this policy setting, the security features of Windows Installer prevent users from changing installation options typically reserved for system administrators, such as specifying the directory to which files are installed. + +If Windows Installer detects that an installation package has permitted the user to change a protected option, it stops the installation and displays a message. These security features operate only when the installation program is running in a privileged security context in which it has access to directories denied to the user. + +This policy setting is designed for less restrictive environments. It can be used to circumvent errors in an installation program that prevents software from being installed. + + + +ADMX Info: +- GP English name: *Allow user control over installs* +- GP name: *EnableUserControl* +- GP ADMX file name: *MSI.admx* + + + +This setting supports a range of values between 0 and 1. + + + + + + + + + + + +
      + + +**ApplicationManagement/MSIAlwaysInstallWithElevatedPrivileges** + + + + + + + + + + + + + + + + + + + + + +
      HomeProBusinessEnterpriseEducationMobileMobile Enterprise
      cross markcheck mark4check mark4check mark4check mark4cross markcross mark
      + + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User +> * Device + +
      + + + +Added in Windows 10, version 1803. This policy setting directs Windows Installer to use elevated permissions when it installs any program on the system. + +If you enable this policy setting, privileges are extended to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add or Remove Programs in Control Panel. This profile setting lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers. + +If you disable or do not configure this policy setting, the system applies the current user's permissions when it installs programs that a system administrator does not distribute or offer. + +Note: This policy setting appears both in the Computer Configuration and User Configuration folders. To make this policy setting effective, you must enable it in both folders. + +Caution: Skilled users can take advantage of the permissions this policy setting grants to change their privileges and gain permanent access to restricted files and folders. Note that the User Configuration version of this policy setting is not guaranteed to be secure. + + +ADMX Info: +- GP English name: *Always install with elevated privileges* +- GP name: *AlwaysInstallElevated* +- GP ADMX file name: *MSI.admx* + + + +This setting supports a range of values between 0 and 1. + + + + + + + + + + + +
      + **ApplicationManagement/RequirePrivateStoreOnly** From 77200ef8b93f78e0a7cf5c4f22057513e8e4cd63 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 21 Mar 2018 14:30:21 -0700 Subject: [PATCH 123/138] set redirect in TroubleshootUR topic; removed from TOC --- windows/deployment/TOC.md | 1 - .../upgrade/troubleshoot-upgrade-readiness.md | 40 +------------------ 2 files changed, 2 insertions(+), 39 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 60b97c2e42..db15a838fa 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -241,7 +241,6 @@ ##### [Step 2: Resolve issues](upgrade/upgrade-readiness-resolve-issues.md) ##### [Step 3: Deploy Windows](upgrade/upgrade-readiness-deploy-windows.md) ##### [Additional insights](upgrade/upgrade-readiness-additional-insights.md) -#### [Troubleshoot Upgrade Readiness](upgrade/troubleshoot-upgrade-readiness.md) ### [Monitor Windows Updates with Update Compliance](update/update-compliance-monitor.md) #### [Get started with Update Compliance](update/update-compliance-get-started.md) #### [Use Update Compliance](update/update-compliance-using.md) diff --git a/windows/deployment/upgrade/troubleshoot-upgrade-readiness.md b/windows/deployment/upgrade/troubleshoot-upgrade-readiness.md index a837d861dc..e020be4aad 100644 --- a/windows/deployment/upgrade/troubleshoot-upgrade-readiness.md +++ b/windows/deployment/upgrade/troubleshoot-upgrade-readiness.md @@ -1,39 +1,3 @@ --- -title: Troubleshoot Upgrade Readiness (Windows 10) -description: Provides troubleshooting information for Upgrade Readiness. -ms.prod: w10 -author: greg-lindsay -ms.date: 04/19/2017 ---- - -# Troubleshoot Upgrade Readiness - -If you’re having issues seeing data in Upgrade Readiness after running the Upgrade Readiness Deployment script, make sure it completes successfully without any errors. Check the output of the script in the command window and/or log UA_dateTime_machineName.txt to ensure all steps were completed successfully. In addition, we recommend that you wait at least 48 hours before checking OMS for data after the script first completes without reporting any error. - -If you still don’t see data in Upgrade Readiness, follow these steps: - -1. Download and extract the [Upgrade Readiness Deployment Script](https://go.microsoft.com/fwlink/?LinkID=822966&clcid=0x409). Ensure the “Pilot/Diagnostics” folder is included . - -2. Edit the script as described in [Upgrade Readiness deployment script](upgrade-readiness-deployment-script.md). - -3. Check that isVerboseLogging is set to $true. - -4. Run the script again. Log files will be saved to the directory specified in the script. - -5. Open a support case with Microsoft Support through your regular channel and provide this information. - -## Disable Upgrade Readiness - -If you want to stop using Upgrade Readiness and stop sending diagnostic data data to Microsoft, follow these steps: - -1. Unsubscribe from the Upgrade Readiness solution in the OMS portal. In the OMS portal, go to **Settings** > **Connected Sources** > **Windows Telemetry** and choose the **Unsubscribe** option. - - ![Upgrade Readiness unsubscribe](../images/upgrade-analytics-unsubscribe.png) - -2. Disable the Commercial Data Opt-in Key on computers running Windows 7 SP1 or 8.1. On computers running Windows 10, set the diagnostic data level to **Security**: - - **Windows 7 and Windows 8.1**: Delete CommercialDataOptIn registry property from *HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection* - **Windows 10**: Follow the instructions in the [Configure Windows diagnostic data in your organization](/configuration/configure-windows-diagnostic-data-in-your-organization.md) topic. - -3. If you enabled **Internet Explorer Site Discovery**, you can disable Internet Explorer data collection by setting the *IEDataOptIn* registry key to value "0". The IEDataOptIn key can be found under: *HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection*. -4. You can also remove the “CommercialId” key from: "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection". **This is an optional step**. +redirect_url: /windows/deployment/update/windows-analytics-FAQ-troubleshooting +--- \ No newline at end of file From 38d6cc9c96cb8ed4d1b3ab025fe3af8e99258e08 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 21 Mar 2018 14:58:19 -0700 Subject: [PATCH 124/138] fixed table formatting --- .../active-directory-security-groups.md | 83 +++++++++++-------- 1 file changed, 50 insertions(+), 33 deletions(-) diff --git a/windows/security/identity-protection/access-control/active-directory-security-groups.md b/windows/security/identity-protection/access-control/active-directory-security-groups.md index 05ea62503f..4d1ebc58cb 100644 --- a/windows/security/identity-protection/access-control/active-directory-security-groups.md +++ b/windows/security/identity-protection/access-control/active-directory-security-groups.md @@ -313,217 +313,217 @@ The following tables provide descriptions of the default groups that are located

      Yes

      Yes

      - +

      [Enterprise Key Admins](#bkmk-enterprise-key-admins)

      Yes

      - +

      [Enterprise Read-only Domain Controllers](#bkmk-entrodc)

      Yes

      Yes

      Yes

      Yes

      - +

      [Event Log Readers](#bkmk-eventlogreaders)

      Yes

      Yes

      Yes

      Yes

      - +

      [Group Policy Creator Owners](#bkmk-gpcreatorsowners)

      Yes

      Yes

      Yes

      Yes

      - +

      [Guests](#bkmk-guests)

      Yes

      Yes

      Yes

      Yes

      - +

      [Hyper-V Administrators](#bkmk-hypervadministrators)

      Yes

      Yes

      Yes

      - +

      [IIS_IUSRS](#bkmk-iis-iusrs)

      Yes

      Yes

      Yes

      Yes

      - +

      [Incoming Forest Trust Builders](#bkmk-inforesttrustbldrs)

      Yes

      Yes

      Yes

      Yes

      - +

      [Key Admins](#key-admins)

      Yes

      - +

      [Network Configuration Operators](#bkmk-networkcfgoperators)

      Yes

      Yes

      Yes

      Yes

      - +

      [Performance Log Users](#bkmk-perflogusers)

      Yes

      Yes

      Yes

      Yes

      - +

      [Performance Monitor Users](#bkmk-perfmonitorusers)

      Yes

      Yes

      Yes

      Yes

      - +

      [Pre–Windows 2000 Compatible Access](#bkmk-pre-ws2kcompataccess)

      Yes

      Yes

      Yes

      Yes

      - +

      [Print Operators](#bkmk-printoperators)

      Yes

      Yes

      Yes

      Yes

      - +

      [Protected Users](#bkmk-protectedusers)

      Yes

      Yes

      - +

      [RAS and IAS Servers](#bkmk-rasandias)

      Yes

      Yes

      Yes

      Yes

      - +

      [RDS Endpoint Servers](#bkmk-rdsendpointservers)

      Yes

      Yes

      Yes

      - +

      [RDS Management Servers](#bkmk-rdsmanagementservers)

      Yes

      Yes

      Yes

      - +

      [RDS Remote Access Servers](#bkmk-rdsremoteaccessservers)

      Yes

      Yes

      Yes

      - +

      [Read-only Domain Controllers](#bkmk-rodc)

      Yes

      Yes

      Yes

      Yes

      - +

      [Remote Desktop Users](#bkmk-remotedesktopusers)

      Yes

      Yes

      Yes

      Yes

      - +

      [Remote Management Users](#bkmk-remotemanagementusers)

      Yes

      Yes

      Yes

      - +

      [Replicator](#bkmk-replicator)

      Yes

      Yes

      Yes

      Yes

      - +

      [Schema Admins](#bkmk-schemaadmins)

      Yes

      Yes

      Yes

      Yes

      - +

      [Server Operators](#bkmk-serveroperators)

      Yes

      Yes

      Yes

      Yes

      - +

      [Storage Replica Administrators](#storage-replica-administrators)

      Yes

      - +

      [System Managed Accounts Group](#system-managed-accounts-group)

      Yes

      - +

      [Terminal Server License Servers](#bkmk-terminalserverlic)

      Yes

      Yes

      Yes

      Yes

      - +

      [Users](#bkmk-users)

      Yes

      Yes

      Yes

      Yes

      - +

      [Windows Authorization Access Group](#bkmk-winauthaccess)

      Yes

      Yes

      Yes

      Yes

      - +

      [WinRMRemoteWMIUsers_](#bkmk-winrmremotewmiusers-)

      Yes

      @@ -1763,8 +1763,25 @@ This security group has not changed since Windows Server 2008. -  +### Enterprise Key Admins +Members of this group can perform administrative actions on key objects within the forest. + +The Enterprise Key Admins group was introduced in Windows Server 2016. + +| Attribute | Value | +|-----------|-------| +| Well-Known SID/RID | S-1-5-21-<domain>-527 | +| Type | Global | +| Default container | CN=Users, DC=<domain>, DC= | +| Default members | None | +| Default member of | None | +| Protected by ADMINSDHOLDER? | No | +| Safe to move out of default container? | Yes | +| Safe to delegate management of this group to non-Service admins? | No | +| Default User Rights | None | + +  ### Enterprise Read-Only Domain Controllers Members of this group are Read-Only Domain Controllers in the enterprise. Except for account passwords, a Read-only domain controller holds all the Active Directory objects and attributes that a writable domain controller holds. However, changes cannot be made to the database that is stored on the Read-only domain controller. Changes must be made on a writable domain controller and then replicated to the Read-only domain controller. @@ -2233,7 +2250,7 @@ The Key Admins group applies to versions of the Windows Server operating system | Attribute | Value | |-----------|-------| -| Well-Known SID/RID | S-1-5-21-4195037842-338827918-94892514-526 | +| Well-Known SID/RID | S-1-5-21-<domain>-526 | | Type | Global | | Default container | CN=Users, DC=<domain>, DC= | | Default members | None | From 6540c97dec55d36472279e0a23dae958bc401f73 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 21 Mar 2018 16:13:22 -0700 Subject: [PATCH 125/138] revised surface statement --- .../bitlocker/bitlocker-recovery-guide-plan.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md index 94f1153940..6505ce3f4a 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md +++ b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md @@ -100,7 +100,7 @@ Before you create a thorough BitLocker recovery process, we recommend that you t 2. At the command prompt, type the following command and then press ENTER: `manage-bde. -ComputerName -forcerecovery ` -> **Note:**  Recovery triggered by `-forcerecovery` persists for multiple restarts until a TPM protector is added or protection is suspended by the user. When using Modern Standby devices (such as Surface devices), the `-forcerecovery` option is not recommended because the OS will not boot after the recovery key is entered. Instead, the BitLocker recovery screen reappears until BitLocker protection is suspended or the OS drive is decrypted. +> **Note:**  Recovery triggered by `-forcerecovery` persists for multiple restarts until a TPM protector is added or protection is suspended by the user. When using Modern Standby devices (such as Surface devices), the `-forcerecovery` option is not recommended because BitLocker will have to be unlocked and disabled manually from the WinRE environment before the OS can boot up again. For more information, see [BitLocker Troubleshooting: Continuous reboot loop with BitLocker recovery on a slate device](https://social.technet.microsoft.com/wiki/contents/articles/18671.bitlocker-troubleshooting-continuous-reboot-loop-with-bitlocker-recovery-on-a-slate-device.aspx).   ## Planning your recovery process From 3fe77287e2def91634506ad9e88f0db731d55e9a Mon Sep 17 00:00:00 2001 From: ashley-kim <35980531+ashley-kim@users.noreply.github.com> Date: Thu, 22 Mar 2018 00:43:00 -0700 Subject: [PATCH 126/138] Updating flight rings Fast and Slow Included planned release cadence for flight rings: Fast/weekly and Slow/monthly. --- windows/deployment/update/waas-windows-insider-for-business.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/update/waas-windows-insider-for-business.md b/windows/deployment/update/waas-windows-insider-for-business.md index 52a170184a..dc35477a1b 100644 --- a/windows/deployment/update/waas-windows-insider-for-business.md +++ b/windows/deployment/update/waas-windows-insider-for-business.md @@ -145,6 +145,7 @@ The Slow Windows Insider level is for users who prefer to see new builds of Wind * Builds are sent to the Slow Ring after feedback has been received from Windows Insiders within the Fast Ring and analyzed by our Engineering teams. * These builds will include updates to fix key issues that would prevent many Windows Insiders from being able to use the build on a daily basis. * These builds still might have issues that would be addressed in a future flight. +* These builds are typically released once a month. ### Fast @@ -154,6 +155,7 @@ Best for Windows Insiders who prefer being the first to get access to builds and * Because we are also validating a build on a smaller set of devices before going to Fast, there is also a chance that some features might work on some devices but might fail in other device configurations. * Windows Insiders should be ready to reinstall Windows using the [Media Creation Tool](http://go.microsoft.com/fwlink/?LinkId=691209) or [Windows Device Recovery Tool](http://go.microsoft.com/fwlink/p/?LinkId=522381) when you are significantly blocked. * Remember to report any issue to us through the Windows Insider Feedback Hub or the Windows Insider community forum. +* These builds are typically released once a week. >[!NOTE] >Once your device is updated to Windows 10 and you select your desired flight ring, the process known as "Compatibility check" will need to run in the background. There is no manual way to force this process to run. This process allows for the discovery of your OS type (32-bit, 64-bit), build edition (Home, Pro, Enterprise), country and language settings, and other required information. Once this process is complete, your device will be auto-targeted for the next available flight for your selected ring. For the first build on any given device, this might take up to 24 hours to complete. From 324c22f9fb1e26af9e0b3b4d88285589c65e4887 Mon Sep 17 00:00:00 2001 From: Zach Dvorak Date: Thu, 22 Mar 2018 10:02:14 -0700 Subject: [PATCH 127/138] Update upgrade-readiness-get-started.md --- windows/deployment/upgrade/upgrade-readiness-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-get-started.md b/windows/deployment/upgrade/upgrade-readiness-get-started.md index 9d80d93f94..8468224bf5 100644 --- a/windows/deployment/upgrade/upgrade-readiness-get-started.md +++ b/windows/deployment/upgrade/upgrade-readiness-get-started.md @@ -37,7 +37,7 @@ To enable system, application, and driver data to be shared with Microsoft, you Upgrade Readiness is offered as a solution in the Microsoft Operations Management Suite (OMS), a collection of cloud based services for managing your on-premises and cloud environments. For more information about OMS, see [Operations Management Suite overview](http://azure.microsoft.com/documentation/articles/operations-management-suite-overview/). >[!IMPORTANT] ->Upgrade Readiness is a free solution for Azure subsribers. When configured correctly, all data associated with the Upgrade Readiness solution are exempt from billing in both OMS and Azure. Upgrade Readiness data **do not** count toward OMS daily upload limits. +>Upgrade Readiness is a free solution for Azure subscribers. When configured correctly, all data associated with the Upgrade Readiness solution are exempt from billing in both OMS and Azure. Upgrade Readiness data **do not** count toward OMS daily upload limits. The Upgrade Readiness service will ingest a full snapshot of your data into your OMS workspace on a daily basis. Each snapshot includes all of your devices that have been active within the past 30 days regardless of your OMS retention period. If you are already using OMS, you’ll find Upgrade Readiness in the Solutions Gallery. Select the **Upgrade Readiness** tile in the gallery and then click **Add** on the solution's details page. Upgrade Readiness is now visible in your workspace. While you have this dialog open, you should also consider adding the [Device Health](../update/device-health-monitor.md) and [Update Compliance](../update/update-compliance-monitor.md) solutions as well, if you haven't already. To do so, just select the check boxes for those solutions. From 836ae25a11f2001cfe07b399bf9ccfe0ccfdf54d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 22 Mar 2018 14:01:58 -0700 Subject: [PATCH 128/138] revised contribution from technion --- .../security-policy-settings/maximum-password-age.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/security-policy-settings/maximum-password-age.md b/windows/security/threat-protection/security-policy-settings/maximum-password-age.md index cbcffa7067..7057705ad8 100644 --- a/windows/security/threat-protection/security-policy-settings/maximum-password-age.md +++ b/windows/security/threat-protection/security-policy-settings/maximum-password-age.md @@ -63,11 +63,13 @@ This section describes how an attacker might exploit a feature or its configurat ### Vulnerability -Modern security guidance does not consider long lifetime passwords a vulnerability. See [Microsoft Password Guidance](https://www.microsoft.com/en-us/research/publication/password-guidance/) for further information. +The longer a password exists, the higher the likelihood that it will be compromised by a brute force attack, by an attacker gaining general knowledge about the user, or by the user sharing the password. Configuring the **Maximum password age** policy setting to 0 so that users are never required to change their passwords allows a compromised password to be used by the malicious user for as long as the valid user is authorized access. ### Considerations -Many organisations have compliance or insurance mandates requiring a short lifespan on passwords. Where such a requirement exists, the **Maximum password age** policy setting can be used to meet your organization's business requirements. +Mandated password changes are a long-standing security practice, but current research strongly indicates that password expiration has a negative effect. See [Microsoft Password Guidance](https://www.microsoft.com/en-us/research/publication/password-guidance/) for further information. + +Configure the **Maximum password age** policy setting to a value that is suitable for your organization's business requirements. For example, many organisations have compliance or insurance mandates requiring a short lifespan on passwords. Where such a requirement exists, the **Maximum password age** policy setting can be used to meet business requirements. ### Potential impact From 9c38eeda846437997bd1dcd720381d083f675b68 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Thu, 22 Mar 2018 21:39:11 +0000 Subject: [PATCH 129/138] Merged PR 6582: Policies supported by Windows Holographic for Business - updated list --- .../policy-configuration-service-provider.md | 36 +++++++++++++++++++ .../mdm/policy-csp-privacy.md | 8 ----- 2 files changed, 36 insertions(+), 8 deletions(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 914f916fa6..df4189187b 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -4462,6 +4462,42 @@ The following diagram shows the Policy configuration service provider in tree fo - [WirelessDisplay/AllowProjectionToPC](./policy-csp-wirelessdisplay.md#wirelessdisplay-allowprojectiontopc) - [WirelessDisplay/RequirePinForPairing](./policy-csp-wirelessdisplay.md#wirelessdisplay-requirepinforpairing) + +## Policies supported by Windows Holographic for Business + +- [Accounts/AllowMicrosoftAccountConnection](#accounts-allowmicrosoftaccountconnection) +- [ApplicationManagement/AllowAllTrustedApps](#applicationmanagement-allowalltrustedapps) +- [ApplicationManagement/AllowAppStoreAutoUpdate](#applicationmanagement-allowappstoreautoupdate) +- [ApplicationManagement/AllowDeveloperUnlock](#applicationmanagement-allowdeveloperunlock) +- [Authentication/AllowFastReconnect](#authentication-allowfastreconnect) +- [Bluetooth/AllowAdvertising](#bluetooth-allowadvertising) +- [Bluetooth/AllowDiscoverableMode](#bluetooth-allowdiscoverablemode) +- [Bluetooth/LocalDeviceName](#bluetooth-localdevicename) +- [Browser/AllowCookies](#browser-allowcookies) +- [Browser/AllowDoNotTrack](#browser-allowdonottrack) +- [Browser/AllowPasswordManager](#browser-allowpasswordmanager) +- [Browser/AllowPopups](#browser-allowpopups) +- [Browser/AllowSearchSuggestionsinAddressBar](#browser-allowsearchsuggestionsinaddressbar) +- [Browser/AllowSmartScreen](#browser-allowsmartscreen) +- [Connectivity/AllowBluetooth](#connectivity-allowbluetooth) +- [DeviceLock/AllowIdleReturnWithoutPassword](#devicelock-allowidlereturnwithoutpassword) +- [DeviceLock/DevicePasswordEnabled](#devicelock-devicepasswordenabled) +- [Experience/AllowCortana](#experience-allowcortana) +- [Experience/AllowManualMDMUnenrollment](#experience-allowmanualmdmunenrollment) +- [Privacy/AllowInputPersonalization](#privacy-allowinputpersonalization) +- [Search/AllowSearchToUseLocation](#search-allowsearchtouselocation) +- [Security/RequireDeviceEncryption](#security-requiredeviceencryption) +- [Settings/AllowDateTime](#settings-allowdatetime) +- [Settings/AllowVPN](#settings-allowvpn) +- [System/AllowLocation](#system-allowlocation) +- [System/AllowTelemetry](#system-allowtelemetry) +- [Update/AllowAutoUpdate](#update-allowautoupdate) +- [Update/AllowUpdateService](#update-allowupdateservice) +- [Update/RequireDeferUpgrade](#update-requiredeferupgrade) +- [Update/RequireUpdateApproval](#update-requireupdateapproval) +- [Update/UpdateServiceUrl](#update-updateserviceurl) + + ## Policies that can be set using Exchange Active Sync (EAS) diff --git a/windows/client-management/mdm/policy-csp-privacy.md b/windows/client-management/mdm/policy-csp-privacy.md index c084709cd0..932edbd301 100644 --- a/windows/client-management/mdm/policy-csp-privacy.md +++ b/windows/client-management/mdm/policy-csp-privacy.md @@ -4493,14 +4493,6 @@ Footnote: ## Privacy policies supported by Windows Holographic for Business - [Privacy/AllowInputPersonalization](#privacy-allowinputpersonalization) -- [Privacy/LetAppsGetDiagnosticInfo](#privacy-letappsgetdiagnosticinfo) -- [Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps](#privacy-letappsgetdiagnosticinfo-forceallowtheseapps) -- [Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps](#privacy-letappsgetdiagnosticinfo-forcedenytheseapps) -- [Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps](#privacy-letappsgetdiagnosticinfo-userincontroloftheseapps) -- [Privacy/LetAppsRunInBackground](#privacy-letappsruninbackground) -- [Privacy/LetAppsRunInBackground_ForceAllowTheseApps](#privacy-letappsruninbackground-forceallowtheseapps) -- [Privacy/LetAppsRunInBackground_ForceDenyTheseApps](#privacy-letappsruninbackground-forcedenytheseapps) -- [Privacy/LetAppsRunInBackground_UserInControlOfTheseApps](#privacy-letappsruninbackground-userincontroloftheseapps) From 36fb17ef8efc29ff82f900a5dfac6b62d8ee983a Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Thu, 22 Mar 2018 21:43:26 +0000 Subject: [PATCH 130/138] Merged PR 6580: MultiSim CSP - added SyncML examples --- windows/client-management/mdm/multisim-csp.md | 101 +++++++++++++++++- ...ew-in-windows-mdm-enrollment-management.md | 8 ++ 2 files changed, 107 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/multisim-csp.md b/windows/client-management/mdm/multisim-csp.md index 9467b896ff..5453323c70 100644 --- a/windows/client-management/mdm/multisim-csp.md +++ b/windows/client-management/mdm/multisim-csp.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 02/27/2018 +ms.date: 03/22/2018 --- # MultiSIM CSP @@ -30,9 +30,13 @@ Node representing a Mobile Broadband Modem. The node name is the modem ID. Modem **_ModemID_/Identifier** Modem ID. +Supported operation is Get. Value type is string. + **_ModemID_/IsEmbedded** Indicates whether this modem is embedded or external. +Supported operation is Get. Value type is bool. + **_ModemID_/Slots** Represents all SIM slots in the Modem. @@ -42,17 +46,110 @@ Node representing a SIM Slot. The node name is the Slot ID. SIM Slot ID format i **_ModemID_/Slots/_SlotID_/Identifier** Slot ID. +Supported operation is Get. Value type is integer. + **_ModemID_/Slots/_SlotID_/IsEmbedded** Indicates whether this Slot is embedded or a physical SIM slot. +Supported operation is Get. Value type is bool. + **_ModemID_/Slots/_SlotID_/IsSelected** Indicates whether this Slot is selected or not. +Supported operation is Get and Replace. Value type is bool. + **_ModemID_/Slots/_SlotID_/State** Slot state (Unknown = 0, OffEmpty = 1, Off = 2, Empty = 3, NotReady = 4, Active = 5, Error = 6, ActiveEsim = 7, ActiveEsimNoProfile = 8) +Supported operation is Get. Value type is integer. + **_ModemID_/Policies** Policies associated with the Modem. **_ModemID_/Policies/SlotSelectionEnabled** -Determines whether the user is allowed to change slots in the Cellular settings UI. Default is true. \ No newline at end of file +Determines whether the user is allowed to change slots in the Cellular settings UI. Default is true. + +Supported operation is Get and Replace. Value type is bool. + +## Examples + +Get modem +``` syntax + + + + 1 + + + + ./Vendor/MSFT/MultiSIM + + + + + + + +``` + +Get slots +``` syntax + + + + 1 + + + + ./Vendor/MSFT/MultiSIM/Embedded/Slots + + + + + + + +``` + +Get slot state +``` syntax + + + + 1 + + + + ./Vendor/MSFT/MultiSIM/Embedded/Slots/Embedded/State + + + + + + + +``` + +Select slot +``` syntax + + + + 1 + + + + ./Vendor/MSFT/MultiSIM/Embedded/Slots/0/IsSelected + + + + bool + text/plain + + true + + + + + +``` \ No newline at end of file diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 5904341127..af947d4d1e 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1671,11 +1671,19 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
    • InternetExplorer/AllowSiteToZoneAssignmentList - updated the description and added an example SyncML
    • TextInput/AllowIMENetworkAccess - introduced new suggestion services in Japanese IME in addition to cloud suggestion.
    +

    Added a new section:

    +
      +
    • [Policies supported by GP](policy-configuration-service-provider.md#policies-supported-by-gp) - list of policies in Policy CSP that has corresponding Group Policy. The policy description contains the GP information, such as GP policy name and variable name.
      • +
    [Policy CSP - Bluetooth](policy-csp-bluetooth.md)

    Added new section [ServicesAllowedList usage guide](policy-csp-bluetooth.md#servicesallowedlist-usage-guide).

    + +[MultiSIM CSP](multisim-csp.md) +

    Added SyncML examples and updated the settings descriptions.

    + From b7d4e31981010725b4b57840eb93359a297801eb Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 22 Mar 2018 14:55:32 -0700 Subject: [PATCH 131/138] added requested item about SMBLoris being fixed to What's New 1709 --- windows/whats-new/whats-new-windows-10-version-1709.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/whats-new/whats-new-windows-10-version-1709.md b/windows/whats-new/whats-new-windows-10-version-1709.md index 8bf610b344..fba100bb3c 100644 --- a/windows/whats-new/whats-new-windows-10-version-1709.md +++ b/windows/whats-new/whats-new-windows-10-version-1709.md @@ -114,6 +114,9 @@ The minimum PIN length is being changed from 6 to 4, with a default of 6. For mo Microsoft has released new [Windows security baselines](https://docs.microsoft.com/en-us/windows/device-security/windows-security-baselines) for Windows Server and Windows 10. A security baseline is a group of Microsoft-recommended configuration settings with an explanation of their security impact. For more information, and to download the Policy Analyzer tool, see [Microsoft Security Compliance Toolkit 1.0](https://docs.microsoft.com/en-us/windows/device-security/security-compliance-toolkit-10). +### SMBLoris vulnerability +An issue, known as “SMBLoris”, which could result in denial of service, has been addressed. + ## Windows Analytics From a4d1b69e59bfe039f8da4e609caf241437511d86 Mon Sep 17 00:00:00 2001 From: Marc Shepard <37675325+marcshep-msft@users.noreply.github.com> Date: Thu, 22 Mar 2018 16:12:07 -0700 Subject: [PATCH 132/138] Update windows-analytics-FAQ-troubleshooting.md --- .../update/windows-analytics-FAQ-troubleshooting.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 5712daf23f..d9ba685659 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -39,6 +39,8 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win In Log Analytics, go to **Settings > Connected sources > Windows telemetry** and verify that you are subscribed to the Windows Analytics solutions you intend to use. Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog. +>[!NOTE] +> If you generate the status report and get an error message saying "Sorry! We’re not recognizing your Commercial Id," please go to **Settings > Connected sources > Windows telemetry** and unsubscribe, wait a minute and then re-subscribe to Upgrade Readiness. This is a known issue and we are working on a fix. If devices are not showing up as expected, find a representative device and follow these steps to run the latest pilot version of the Upgrade Readiness deployment script on it to troubleshoot issues: @@ -51,9 +53,9 @@ If devices are not showing up as expected, find a representative device and foll If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally. - If you think the issue might be related to a network proxy, check "Enable data sharing" section of the [Enrolling devices in Windows Analytics](windows-analytics-get-started.md) topic. Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. + ### Device Health crash data not appearing #### Is WER disabled? @@ -184,7 +186,12 @@ If you want to stop using Upgrade Readiness and stop sending diagnostic data dat >[!NOTE] > Regarding licensing requirements for Device Health, you do not need per-seat licensing, but only enough licenses to cover your total device usage. For example, if you have 100 E3 licenses, you can monitor 100 devices with Device Health. -Beyond the cost of Windows operating system licenses, there is no additional cost for using Windows Analytics. In Azure Log Analytics, Windows Analytics is "zero-rated;" this means it is excluded from data limits and costs regardless of the Azure Log Analytics pricing tier you have chosen. +Beyond the cost of Windows operating system licenses, there is no additional cost for using Windows Analytics. Within Azure Log Analytics, Windows Analytics is "zero-rated;" this means it is excluded from data limits and costs regardless of the Azure Log Analytics pricing tier you have chosen. To be more specific, Azure Log Analytics is available in different pricing tiers as described in [Pricing - Log Analytics](https://azure.microsoft.com/en-us/pricing/details/log-analytics/). +- If you are using the free tier, which has a cap on the amount of data collected per day, the Windows Analytics data will not count towards this cap. You will be able to collect all the Windows Analytics data from your devices and still have the full cap available for collecting additional data from other sources. +- If you are using a paid tier that charges per GB of data collected, the Windows Analytics data will not be charged. You will be able to collect all the Windows Analytics data from your devices and not incur any costs. + +Note that different Azure Log Analytics plans have different data retention periods, and the Windows Analytics solutions inherit the workspace's data retention policy. So, for example, if your workspace is on the free plan then Windows Analytics will retain the last week's worth of "daily snapshots" that are collected in the workspace. + ### How does Windows Analytics support privacy? From 458533845283efc48443ba9a3ace979cdd5e16c9 Mon Sep 17 00:00:00 2001 From: Marc Shepard <37675325+marcshep-msft@users.noreply.github.com> Date: Thu, 22 Mar 2018 16:41:06 -0700 Subject: [PATCH 133/138] Update windows-analytics-get-started.md Vortex endpoint name tweak: Telemetry->Diagnostic Clarified that KB3150513 is optional Clarified that SSL inspection must be disabled --- .../update/windows-analytics-get-started.md | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index de69f455fc..eeb25666dc 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -44,9 +44,9 @@ To enable data sharing, configure your proxy sever to whitelist the following en | **Endpoint** | **Function** | |---------------------------------------------------------|-----------| -| `https://v10.events.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10, version 1803| -| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10, version 1709 or earlier | -| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 | +| `https://v10.events.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for Windows 10, version 1803| +| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for Windows 10, version 1709 or earlier | +| `https://vortex-win.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for operating systems older than Windows 10 | | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | | `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | @@ -58,7 +58,7 @@ To enable data sharing, configure your proxy sever to whitelist the following en ### Configuring endpoint access with proxy servers If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: -- **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. This is the most comprehensive solution and it works for all versions of Windows 10. +- **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. In particular, SSL inspection should be disabled because Windows checks for a Microsoft SSL certificate on the site and this will be stripped and replaced if the proxy performs inspection. This is the most comprehensive solution and it works for all versions of Windows 10. - **User proxy authentication:** Alternatively, you can configure devices on the user side. First, update the devices to Windows 10, version 1703 or later. Then, ensure that users of the devices have proxy permission to reach the diagnostic data endpoints. This requires that the devices have console users with proxy permissions, so you couldn't use this method with headless devices. - **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints. @@ -70,12 +70,14 @@ The compatibility update scans your devices and enables application usage tracki | **Operating System** | **Updates** | |----------------------|-----------------------------------------------------------------------------| | Windows 10 | The latest cumulative updates must be installed on Windows 10 devices to make sure that the required compatibility updates are installed. You can find the latest cumulative update on the [Microsoft Update Catalog](https://catalog.update.microsoft.com)

    Note: Windows 10 LTSB is not supported by Upgrade Readiness. See [Upgrade readiness requirements](../upgrade/upgrade-readiness-requirements.md) for more information. | -| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
    Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
    For more information about this update, see

    [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
    Provides updated configuration and definitions for compatibility diagnostics performed on the system.
    For more information about this KB, see
    **NOTE:** KB2976978 is a critical update, so it should already be installed by your management tool. You should, however, verify that it was deployed. | -| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
    Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
    For more information about this update, see

    [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
    Provides updated configuration and definitions for compatibility diagnostics performed on the system.
    For more information about this update, see
    **NOTE:** If KB 3510513 is reported as out of date, you should manually find a recent version at [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513) and ensure that it is installed and deployed. | +| Windows 8.1 | [KB 2976978](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2976978)
    Performs diagnostics on the Windows 8.1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
    For more information about this update, see | +| Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
    Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
    For more information about this update, see | >[!IMPORTANT] >Restart devices after you install the compatibility updates for the first time. +>[!NOTE] We recommend you configure your update management tool to automatically install the latest version of these updates. There is a related optional update, [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513), which can provide updated configuration and definitions for older compatibiltiy updates. For more information about this optional update, see . + If you are planning to enable IE Site Discovery in Upgrade Readiness, you will need to install a few additional updates. @@ -150,4 +152,4 @@ For more information about Internet Explorer Security Zones, see [About URL Secu ### Distribution at scale without using the deployment script -We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. \ No newline at end of file +We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. From 41fc2d717a84ff048fe144c7a40c6160fb98c2ea Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Thu, 22 Mar 2018 23:42:46 +0000 Subject: [PATCH 134/138] Merged PR 6596: Added note about app behavior if you set force deny on background added note about app behavior if you set force deny on background, per ask from support team. --- ...ndows-operating-system-components-to-microsoft-services.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index f37871b6d2..746ae03946 100644 --- a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.localizationpriority: high author: brianlic-msft ms.author: brianlic-msft -ms.date: 01/29/2018 +ms.date: 03/22/2018 --- # Manage connections from Windows operating system components to Microsoft services @@ -1516,6 +1516,8 @@ To turn off **Let apps run in the background**: - **1**. Force allow - **2**. Force deny +> [!NOTE] +> Some apps, including Cortana and Search, might not function as expected if you set **Let apps run in the background** to **Force Deny**. ### 17.18 Motion From c543a0f1642ab4d6884fb233c364a448e6755012 Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Thu, 22 Mar 2018 16:57:10 -0700 Subject: [PATCH 135/138] Removed /en-us/ from a link --- .../deployment/update/windows-analytics-FAQ-troubleshooting.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index d9ba685659..9a2dd2a71e 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -186,7 +186,7 @@ If you want to stop using Upgrade Readiness and stop sending diagnostic data dat >[!NOTE] > Regarding licensing requirements for Device Health, you do not need per-seat licensing, but only enough licenses to cover your total device usage. For example, if you have 100 E3 licenses, you can monitor 100 devices with Device Health. -Beyond the cost of Windows operating system licenses, there is no additional cost for using Windows Analytics. Within Azure Log Analytics, Windows Analytics is "zero-rated;" this means it is excluded from data limits and costs regardless of the Azure Log Analytics pricing tier you have chosen. To be more specific, Azure Log Analytics is available in different pricing tiers as described in [Pricing - Log Analytics](https://azure.microsoft.com/en-us/pricing/details/log-analytics/). +Beyond the cost of Windows operating system licenses, there is no additional cost for using Windows Analytics. Within Azure Log Analytics, Windows Analytics is "zero-rated;" this means it is excluded from data limits and costs regardless of the Azure Log Analytics pricing tier you have chosen. To be more specific, Azure Log Analytics is available in different pricing tiers as described in [Pricing - Log Analytics](https://azure.microsoft.com/pricing/details/log-analytics/). - If you are using the free tier, which has a cap on the amount of data collected per day, the Windows Analytics data will not count towards this cap. You will be able to collect all the Windows Analytics data from your devices and still have the full cap available for collecting additional data from other sources. - If you are using a paid tier that charges per GB of data collected, the Windows Analytics data will not be charged. You will be able to collect all the Windows Analytics data from your devices and not incur any costs. From 2f12cbd8e8eb234e7b1159026409cbe262c54cc3 Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Thu, 22 Mar 2018 16:59:13 -0700 Subject: [PATCH 136/138] Minor grammar change --- windows/deployment/update/windows-analytics-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index eeb25666dc..e346db089e 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -58,7 +58,7 @@ To enable data sharing, configure your proxy sever to whitelist the following en ### Configuring endpoint access with proxy servers If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: -- **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. In particular, SSL inspection should be disabled because Windows checks for a Microsoft SSL certificate on the site and this will be stripped and replaced if the proxy performs inspection. This is the most comprehensive solution and it works for all versions of Windows 10. +- **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. In particular, disable SSL inspection. Windows checks for a Microsoft SSL certificate on the site, and this will be stripped and replaced if the proxy performs inspection. This is the most comprehensive solution and it works for all versions of Windows 10. - **User proxy authentication:** Alternatively, you can configure devices on the user side. First, update the devices to Windows 10, version 1703 or later. Then, ensure that users of the devices have proxy permission to reach the diagnostic data endpoints. This requires that the devices have console users with proxy permissions, so you couldn't use this method with headless devices. - **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints. From ac76fd943e0fc31217c36ed553acb68526cbc940 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Fri, 23 Mar 2018 14:06:01 +0000 Subject: [PATCH 137/138] Merged PR 6601: Rename file and add digital sign info for marketing announcement --- .openpublishing.redirection.json | 5 + windows/configuration/TOC.md | 2 +- ...change-history-for-configure-windows-10.md | 4 +- windows/configuration/kiosk-shared-pc.md | 2 +- .../provisioning-create-package.md | 2 +- .../provisioning-packages.md | 2 +- ...ions.md => setup-kiosk-digital-signage.md} | 334 ++++++++++-------- windows/configuration/wcd/wcd-accounts.md | 2 +- 8 files changed, 195 insertions(+), 158 deletions(-) rename windows/configuration/{set-up-a-kiosk-for-windows-10-for-desktop-editions.md => setup-kiosk-digital-signage.md} (62%) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 19546735ca..79fce660b9 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -6185,6 +6185,11 @@ "redirect_url": "/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions", "redirect_document_id": true }, +{ + "source_path": "windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md", + "redirect_url": "/windows/configuration/setup-kiosk-digital-signage", + "redirect_document_id": true +}, { "source_path": "windows/configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md", "redirect_url": "/windows/configuration/mobile-devices/set-up-a-kiosk-for-windows-10-for-mobile-edition", diff --git a/windows/configuration/TOC.md b/windows/configuration/TOC.md index e08ae3f4bd..9768a7eb0b 100644 --- a/windows/configuration/TOC.md +++ b/windows/configuration/TOC.md @@ -12,7 +12,7 @@ ## [Manage Wi-Fi Sense in your company](manage-wifi-sense-in-enterprise.md) ## [Configure kiosk and shared devices running Windows 10 desktop editions](kiosk-shared-pc.md) ### [Set up a shared or guest PC with Windows 10](set-up-shared-or-guest-pc.md) -### [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) +### [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](setup-kiosk-digital-signage.md) ### [Guidelines for choosing an app for assigned access (kiosk mode)](guidelines-for-assigned-access-app.md) ### [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) #### [Troubleshoot multi-app kiosk](multi-app-kiosk-troubleshoot.md) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 02dee783c1..822b8ec80b 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: high author: jdeckerms -ms.date: 03/13/2018 +ms.date: 03/23/2018 --- # Change history for Configure Windows 10 @@ -20,6 +20,8 @@ This topic lists new and updated topics in the [Configure Windows 10](index.md) New or changed topic | Description --- | --- [Windows 10, version 1709 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) and [Windows 10, version 1703 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md) | Added events and fields that were added in the March update. +Set up a kiosk on Windows 10 Pro, Enterprise, or Education | Renamed it [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](setup-kiosk-digital-signage.md) and reorganized the information to make the choices clearer. + ## February 2018 diff --git a/windows/configuration/kiosk-shared-pc.md b/windows/configuration/kiosk-shared-pc.md index e2c1689b92..e8eb951b8c 100644 --- a/windows/configuration/kiosk-shared-pc.md +++ b/windows/configuration/kiosk-shared-pc.md @@ -19,6 +19,6 @@ Some desktop devices in an enterprise serve a special purpose, such as a common | Topic | Description | | --- | --- | | [Set up a shared or guest PC with Windows 10](set-up-shared-or-guest-pc.md) | Windows 10, version 1607, introduced *shared PC mode*, which optimizes Windows 10 for shared use scenarios, such as touchdown spaces in an enterprise and temporary customer use in retail. | -| [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) | You can configure a device running Windows 10 Pro, Windows 10 Enterprise, or Windows 10 Education as a kiosk device, so that users can only interact with a single application that you select. | +| [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](setup-kiosk-digital-signage.md) | You can configure a device running Windows 10 Pro, Windows 10 Enterprise, or Windows 10 Education as a kiosk device, so that users can only interact with a single application that you select. | | [Guidelines for choosing an app for assigned access (kiosk mode)](guidelines-for-assigned-access-app.md) | You can choose almost any Windows app for assigned access; however, some apps may not provide a good user experience. This topic provides guidelines to help you choose an approprate app for a kiosk device. | | [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) | Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to a kiosk device, but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. | \ No newline at end of file diff --git a/windows/configuration/provisioning-packages/provisioning-create-package.md b/windows/configuration/provisioning-packages/provisioning-create-package.md index 76176cb430..fe4f0b035a 100644 --- a/windows/configuration/provisioning-packages/provisioning-create-package.md +++ b/windows/configuration/provisioning-packages/provisioning-create-package.md @@ -41,7 +41,7 @@ You use Windows Configuration Designer to create a provisioning package (.ppkg) - [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md) - [Instructions for the mobile wizard](../mobile-devices/provisioning-configure-mobile.md) - - [Instructions for the kiosk wizard](../set-up-a-kiosk-for-windows-10-for-desktop-editions.md#wizard) + - [Instructions for the kiosk wizard](../setup-kiosk-digital-signage.md#wizard) - [Instructions for HoloLens wizard](https://technet.microsoft.com/itpro/hololens/hololens-provisioning) - [Instructions for Surface Hub wizard](https://technet.microsoft.com/itpro/surface-hub/provisioning-packages-for-certificates-surface-hub) diff --git a/windows/configuration/provisioning-packages/provisioning-packages.md b/windows/configuration/provisioning-packages/provisioning-packages.md index 2a0a5b4e8e..c61c9169d8 100644 --- a/windows/configuration/provisioning-packages/provisioning-packages.md +++ b/windows/configuration/provisioning-packages/provisioning-packages.md @@ -82,7 +82,7 @@ The following table describes settings that you can configure using the wizards - [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md) - [Instructions for the mobile wizard](../mobile-devices/provisioning-configure-mobile.md) -- [Instructions for the kiosk wizard](../set-up-a-kiosk-for-windows-10-for-desktop-editions.md#wizard) +- [Instructions for the kiosk wizard](../setup-kiosk-digital-signage.md#wizard) diff --git a/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md b/windows/configuration/setup-kiosk-digital-signage.md similarity index 62% rename from windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md rename to windows/configuration/setup-kiosk-digital-signage.md index d68048c98d..1d0f5bbcc6 100644 --- a/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md +++ b/windows/configuration/setup-kiosk-digital-signage.md @@ -1,44 +1,124 @@ --- -title: Set up a kiosk on Windows 10 Pro, Enterprise, or Education (Windows 10) -description: A single-use device is easy to set up in Windows 10 for desktop editions (Pro, Enterprise, and Education). +title: Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education (Windows 10) +description: A single-use device such as a digital sign is easy to set up in Windows 10 for desktop editions (Pro, Enterprise, and Education). ms.assetid: 428680AE-A05F-43ED-BD59-088024D1BFCC -keywords: ["assigned access", "kiosk", "lockdown"] +keywords: ["assigned access", "kiosk", "lockdown", "digital sign", "digital signage"] ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library author: jdeckerms ms.localizationpriority: high -ms.date: 01/31/2018 +ms.date: 03/23/2018 --- -# Set up a kiosk on Windows 10 Pro, Enterprise, or Education +# Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education **Applies to** - Windows 10 -> **Looking for Windows Embedded 8.1 Industry information?** See [Assigned Access]( https://go.microsoft.com/fwlink/p/?LinkId=613653) -A single-use or *kiosk* device is easy to set up in Windows 10 for desktop editions. -- Use the [Provision kiosk devices wizard](#wizard) in Windows Configuration Designer (Windows 10, version 1607 or later) to create a provisioning package that configures a kiosk device running either a Universal Windows app or a Classic Windows application (Windows 10 Enterprise or Education only). In Windows 10, version 1709, you can use the [Provision kiosk devices wizard](#wizard) to configure a kiosk device running a Universal Windows app for Windows 10 Pro. +Some desktop devices in an enterprise serve a special purpose, such as a PC in the lobby that customers can use to view your product catalog or a PC displaying visual content as a digital sign. A single-use, kiosk device is easy to set up in Windows 10. (For kiosks that run more than one more app, see [Create a Windows 10 kiosk that runs multiple apps.](lock-down-windows-10-to-specific-apps.md).) - or - -- For a kiosk device to run a Universal Windows app, use the [assigned access](#assigned-access) feature (Windows 10 Pro, Enterprise, or Education). - or - -- For a kiosk device to run a Classic Windows application, use [Shell Launcher](#shell-launcher) to set a custom user interface as the shell (Windows 10 Enterprise or Education only). + +## Choose a method for configuring your kiosks and digitals signs + +**Which type of app will your kiosk run?** Your kiosk can run a Universal Windows Platform (UWP) app or a Classic Windows desktop application. When the kiosk account signs in, the kiosk app will launch automatically. If the kiosk app is closed, it will automatically restart. >[!TIP] ->To return the device to the regular shell, see [Sign out of assigned access](#sign-out-of-assigned-access). +>For **digital signage**, simply select a digital sign player as your kiosk app. ->[!NOTE] ->A Universal Windows app is built on the Universal Windows Platform (UWP), which was first introduced in Windows 8 as the Windows Runtime. A Classic Windows application uses the Classic Windows Platform (CWP) (e.g., COM, Win32, WPF, WinForms, etc.) and is typically launched using an .EXE or .DLL file. +**Which type of user account will be the kiosk account?** The kiosk account can be a local standard user account, a local administrator account, a domain account, or an Azure Active Directory (Azure AD) account, depending on the method that you use to configure the kiosk. -## Using a local device as a kiosk +>[!WARNING] +>For kiosks in public-facing environments with auto sign-in enabled, you should use a user account with least privilege, such as a local standard user account. +> +>Assigned access can be configured via Windows Mangement Instrumentation (WMI) or configuration service provider (CSP) to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the assigned access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with assigned access, and consider the domain resources potentially exposed by the decision to do so. + +**Which edition of Windows 10 will the kiosk run?** All of the configuration methods work for Windows 10 Enterprise and Education; some of the methods work for Windows 10 Pro. Kiosk mode is not available on Windows 10 Home. + +### Methods for kiosks and digital signs running a UWP app + +Choose this method | For this edition | For this kiosk account type +--- | --- | --- +[Local settings](#local) (for 1 or a few devices) | Pro, Ent, Edu | Local standard user +[PowerShell](#powershell) | Pro, Ent, Edu | Local standard user +[Provisioning](#wizard) | Pro (version 1709), Ent, Edu | Local standard user +[Intune or other mobile device management (MDM)](#set-up-assigned-access-in-mdm) | Pro (version 1709), Ent, Edu | Local standard user, Azure AD + +### Methods for kiosks and digital signs running a Classic Windows app + +Choose this method | For this edition | For this kiosk account type +--- | --- | --- +[Provisioning](#wizard) | Ent, Edu | Local standard user +[ShellLauncher](#shelllauncher) | Ent, Edu | Local standard user or administrator, Active Directory, Azure AD + + + + + +### Other settings to lock down + +For a more secure kiosk experience, we recommend that you make the following configuration changes to the device before you configure it as a kiosk: + +Recommendation | How to +--- | --- +Replace "blue screen" with blank screen for OS errors | Add the following registry key as DWORD (32-bit) type with a value of `1`:

    `HKLM\SYSTEM\CurrentControlSet\Control\CrashControl\DisplayDisabled`

    [Learn how to modify the Windows registry](https://go.microsoft.com/fwlink/p/?LinkId=615002)

    You must restart the device after changing the registry. +Put device in **Tablet mode**. | If you want users to be able to use the touch (on screen) keyboard, go to **Settings** > **System** > **Tablet mode** and choose **On.** Do not turn on this setting if users will not interact with the kiosk, such as for a digital sign. +Hide **Ease of access** feature on the logon screen. | Go to **Control Panel** > **Ease of Access** > **Ease of Access Center**, and turn off all accessibility tools. +Disable the hardware power button. | Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. +Remove the power button from the sign-in screen. | Go to **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** >**Security Options** > **Shutdown: Allow system to be shut down without having to log on** and select **Disabled.** +Disable the camera. | Go to **Settings** > **Privacy** > **Camera**, and turn off **Let apps use my camera**. +Turn off app notifications on the lock screen. | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Logon\\Turn off app notifications on the lock screen**. +Disable removable media. | Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Device Installation\\Device Installation Restrictions**. Review the policy settings available in **Device Installation Restrictions** for the settings applicable to your situation.

    **NOTE**: To prevent this policy from affecting a member of the Administrators group, in **Device Installation Restrictions**, enable **Allow administrators to override Device Installation Restriction policies**. + +In addition to the settings in the table, you may want to set up **automatic logon** for your kiosk device. When your kiosk device restarts, whether from an update or power outage, you can log on the assigned access account manually or you can configure the device to log on to the assigned access account automatically. Make sure that Group Policy settings applied to the device do not prevent automatic logon. + + +**How to edit the registry to have an account automatically logged on** + +1. Open Registry Editor (regedit.exe). + + >[!NOTE]   + >If you are not familiar with Registry Editor, [learn how to modify the Windows registry](https://go.microsoft.com/fwlink/p/?LinkId=615002). +   + +2. Go to + + **HKEY\_LOCAL\_MACHINE\SOFTWARE\\Microsoft\WindowsNT\CurrentVersion\Winlogon** + +3. Set the values for the following keys. + + - *AutoAdminLogon*: set value as **1**. + + - *DefaultUserName*: set value as the account that you want logged in. + + - *DefaultPassword*: set value as the password for the account. + + > [!NOTE] + > If *DefaultUserName* and *DefaultPassword* aren't there, add them as **New** > **String Value**. + + - *DefaultDomainName*: set value for domain, only for domain accounts. For local accounts, do not add this key. + +4. Close Registry Editor. The next time the computer restarts, the account will be logged on automatically. + +>[!TIP] +>You can also configure automatic logon [using the Autologon tool from Sysinternals](https://docs.microsoft.com/sysinternals/downloads/autologon). + + + +## Set up a kiosk or digital sign in local Settings + +>App type: UWP +> +>OS edition: Windows 10 Pro, Ent, Edu +> +>Account type: Local standard user + +You can use **Settings** to quickly configure one or a few devices as a kiosk. (Using **Settings** isn't practical for configuring a lot of devices, but it would work.) When you set up a kiosk (also known as *assigned access*) in **Settings**, you must select a local standard user account. [Learn how to create a local standard user account.](https://support.microsoft.com/help/4026923/windows-create-a-local-user-or-administrator-account-in-windows-10) When your kiosk is a local device that is not managed by Active Directory or Azure Active Directory, there is a default setting that enables automatic sign-in after a restart. That means that when the device restarts, the last signed-in user will be signed in automatically. If the last signed-in user is the kiosk account, the kiosk app will be launched automatically after the device restarts. @@ -48,99 +128,33 @@ If you do not want the kiosk account signed in automatically when the device res ![Screenshot of automatic sign-in setting](images/auto-signin.png) - -## Set up a kiosk using Windows Configuration Designer +**To set up assigned access in PC settings** -When you use the **Provision kiosk devices** wizard in Windows Configuration Designer, you can configure the kiosk to run either a Universal Windows app or a Classic Windows application. - ->[!IMPORTANT] ->When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed. - - -[Install Windows Configuration Designer](provisioning-packages/provisioning-install-icd.md), then open Windows Configuration Designer and select **Provision kiosk devices**. After you name your project, and click **Next**, configure the settings as shown in the following table. - - - - - - - - - - - - -
    ![step one](images/one.png)![set up device](images/set-up-device.png)

    Enable device setup if you want to configure settings on this page.

    **If enabled:**

    Enter a name for the device.

    (Optional) Select a license file to upgrade Windows 10 to a different edition. [See the permitted upgrades.](https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades)

    Toggle **Configure devices for shared use** off. This setting optimizes Windows 10 for shared use scenarios and isn't necessary for a kiosk scenario.

    You can also select to remove pre-installed software from the device.     		![device name, upgrade to enterprise, shared use, remove pre-installed software](images/set-up-device-details.png)
    ![step two](images/two.png) ![set up network](images/set-up-network.png)

    Enable network setup if you want to configure settings on this page.

    **If enabled:**

    Toggle **On** or **Off** for wireless network connectivity. If you select **On**, enter the SSID, the network type (**Open** or **WPA2-Personal**), and (if **WPA2-Personal**) the password for the wireless network.    		![Enter network SSID and type](images/set-up-network-details.png)
    ![step three](images/three.png) ![account management](images/account-management.png)

    Enable account management if you want to configure settings on this page.

    **If enabled:**

    You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device

    To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.

    Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 30 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.

    **Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards.

    To create a local administrator account, select that option and enter a user name and password.

    **Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in.     		![join Active Directory, Azure AD, or create a local admin account](images/account-management-details.png)
    ![step four](images/four.png) ![add applications](images/add-applications.png)

    You can provision the kiosk app in the **Add applications** step. You can install multiple applications, both Classic Windows (Win32) apps and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see [Provision PCs with apps](provisioning-packages/provision-pcs-with-apps.md)

    **Warning:** If you click the plus button to add an application, you must specify an application for the provisioning package to validate. If you click the plus button in error, select any executable file in **Installer Path**, and then a **Cancel** button becomes available, allowing you to complete the provisioning package without an application.     		![add an application](images/add-applications-details.png)
    ![step five](images/five.png) ![add certificates](images/add-certificates.png)

    To provision the device with a certificate for the kiosk app, click **Add a certificate**. Enter a name for the certificate, and then browse to and select the certificate to be used.    		![add a certificate](images/add-certificates-details.png)
    ![step six](images/six.png) ![Configure kiosk account and app](images/kiosk-account.png)

    **Important:** You must use the Windows Configuration Designer app from Microsoft Store to select a Classic Windows application as the kiosk app in a provisioning package.

    You can create a local standard user account that will be used to run the kiosk app. If you toggle **No**, make sure that you have an existing user account to run the kiosk app.

    If you want to create an account, enter the user name and password, and then toggle **Yes** or **No** to automatically sign in the account when the device starts.

    In **Configure the kiosk mode app**, enter the name of the user account that will run the kiosk mode app. Select the type of app to run in kiosk mode, and then enter the path or filename (for a Classic Windows app) or the AUMID (for a Universal Windows app). For a Classic Windows app, you can use the filename if the path to the file is in the PATH environment variable, otherwise the full path is required.    		![Configure kiosk account and app](images/kiosk-account-details.png)
    ![step seven](images/seven.png) ![configure kiosk common settings](images/kiosk-common.png)

    On this step, select your options for tablet mode, the user experience on the Welcome and shutdown screens, and the timeout settings.    		![set tablet mode and configure welcome and shutdown and turn off timeout settings](images/kiosk-common-details.png)
    ![finish](images/finish.png)

    You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device.    		![Protect your package](images/finish-details.png)
    - - ->[!NOTE] ->If you want to use the advanced editor in Windows Configuration Designer, specify the user account and app (by AUMID) in **Runtime settings** > **AssignedAccess** > **AssignedAccessSettings** - - - - - -[Learn how to apply a provisioning package.](provisioning-packages/provisioning-apply-package.md) - - -   - -## Assigned access method for Universal Windows apps - - -Using assigned access, Windows 10 runs the designated Universal Windows app above the lockscreen, so that the assigned access account has no access to any other functionality on the device. You have these choices for setting up assigned access: - -| Method | Account type | Windows 10 edition | -| --- | --- | --- | -| [Use Settings on the PC](#set-up-assigned-access-in-pc-settings) | Local standard | Pro, Enterprise, Education | -| [Apply a mobile device management (MDM) policy](#set-up-assigned-access-in-mdm) | All (domain, local standard, local administrator, etc) | Pro (1709 only), Enterprise, Education | -| [Create a provisioning package using Windows Configuration Designer](#wizard) | All (domain, local standard, local administrator, etc) | Pro (1709 only), Enterprise, Education | -| [Run a PowerShell script](#set-up-assigned-access-using-windows-powershell) | Local standard | Pro, Enterprise, Education | - - - -### Requirements - -- A domain or local user account. - -- A Universal Windows app that is installed or provisioned for that account and is an above lock screen app. For more information, see [Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md). For details on building an above lock screen app, see [Kiosk apps for assigned access: Best practices](https://go.microsoft.com/fwlink/p/?LinkId=708386). - - The app can be your own company app that you have made available in your own app Store. To set up assigned access using MDM or PowerShell, you also need the Application User Model ID (AUMID) for the app. [Learn how to get the AUMID](https://go.microsoft.com/fwlink/p/?LinkId=614867). - - The Universal Windows app must be able to handle multiple views and cannot launch other apps or dialogs. - ->[!NOTE]   ->Assigned access does not work on a device that is connected to more than one monitor. - -  - -### Set up assigned access in PC settings - -1. Go to **Start** > **Settings** > **Accounts** > **Other users**. +1. Go to **Start** > **Settings** > **Accounts** > **Other people**. 2. Choose **Set up assigned access**. 3. Choose an account. -4. Choose an app. Only apps that can run above the lock screen will be displayed. For more information, see [Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md). +4. Choose an app. Only apps that can run above the lock screen will be available in the list of apps to choose from. For more information, see [Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md). 5. Close **Settings** – your choices are saved automatically, and will be applied the next time that user account logs on. To remove assigned access, choose **Turn off assigned access and sign out of the selected account**. -### Set up assigned access in MDM - -Assigned Access has one setting, KioskModeApp. In the KioskModeApp setting, you enter the user account name and AUMID for the app to run in kiosk mode. - -[Learn how to get the AUMID](https://go.microsoft.com/fwlink/p/?LinkId=614867). - -[See the technical reference for the Assigned Access configuration service provider.](https://go.microsoft.com/fwlink/p/?LinkId=626608) - - +>[!NOTE]   +>Single-app kiosk configuration using assigned access does not work on a device that is connected to more than one monitor. + +## Set up a kiosk or digital sign using Windows PowerShell -### Set up assigned access using Windows PowerShell + +>App type: UWP +> +>OS edition: Windows 10 Pro, Ent, Edu +> +>Account type: Local standard user You can use any of the following PowerShell cmdlets to set up assigned access on multiple devices. @@ -178,50 +192,91 @@ Clear-AssignedAccess ``` -### Set up automatic logon + +## Set up a kiosk or digital sign using a provisioning package -When your kiosk device restarts, whether from an update or power outage, you can log on the assigned access account manually or you can configure the device to log on to the assigned access account automatically. Make sure that Group Policy settings applied to the device do not prevent automatic logon. +>App type: UWP or Classic Windows +> +>OS edition: Windows 10 Pro (version 1709) for UWP only; Ent, Edu for both app types +> +>Account type: Local standard user -Edit the registry to have an account automatically logged on. +When you use the **Provision kiosk devices** wizard in Windows Configuration Designer, you can configure the kiosk to run either a Universal Windows app or a Classic Windows application. -1. Open Registry Editor (regedit.exe). +>[!IMPORTANT] +>When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed. - >[!NOTE]   - >If you are not familiar with Registry Editor, [learn how to modify the Windows registry](https://go.microsoft.com/fwlink/p/?LinkId=615002). -   -2. Go to +[Install Windows Configuration Designer](provisioning-packages/provisioning-install-icd.md), then open Windows Configuration Designer and select **Provision kiosk devices**. After you name your project, and click **Next**, configure the settings as shown in the following table. - **HKEY\_LOCAL\_MACHINE\SOFTWARE\\Microsoft\WindowsNT\CurrentVersion\Winlogon** -3. Set the values for the following keys. - - *AutoAdminLogon*: set value as **1**. + + + + + + + + + +
    ![step one](images/one.png)![set up device](images/set-up-device.png)

    Enable device setup if you want to configure settings on this page.

    **If enabled:**

    Enter a name for the device.

    (Optional) Select a license file to upgrade Windows 10 to a different edition. [See the permitted upgrades.](https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades)

    Toggle **Configure devices for shared use** off. This setting optimizes Windows 10 for shared use scenarios and isn't necessary for a kiosk scenario.

    You can also select to remove pre-installed software from the device.     		![device name, upgrade to enterprise, shared use, remove pre-installed software](images/set-up-device-details.png)
    ![step two](images/two.png) ![set up network](images/set-up-network.png)

    Enable network setup if you want to configure settings on this page.

    **If enabled:**

    Toggle **On** or **Off** for wireless network connectivity. If you select **On**, enter the SSID, the network type (**Open** or **WPA2-Personal**), and (if **WPA2-Personal**) the password for the wireless network.    		![Enter network SSID and type](images/set-up-network-details.png)
    ![step three](images/three.png) ![account management](images/account-management.png)

    Enable account management if you want to configure settings on this page.

    **If enabled:**

    You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device

    To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.

    Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 30 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.

    **Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards.

    To create a local administrator account, select that option and enter a user name and password.

    **Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in.     		![join Active Directory, Azure AD, or create a local admin account](images/account-management-details.png)
    ![step four](images/four.png) ![add applications](images/add-applications.png)

    You can provision the kiosk app in the **Add applications** step. You can install multiple applications, both Classic Windows (Win32) apps and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see [Provision PCs with apps](provisioning-packages/provision-pcs-with-apps.md)

    **Warning:** If you click the plus button to add an application, you must specify an application for the provisioning package to validate. If you click the plus button in error, select any executable file in **Installer Path**, and then a **Cancel** button becomes available, allowing you to complete the provisioning package without an application.     		![add an application](images/add-applications-details.png)
    ![step five](images/five.png) ![add certificates](images/add-certificates.png)

    To provision the device with a certificate for the kiosk app, click **Add a certificate**. Enter a name for the certificate, and then browse to and select the certificate to be used.    		![add a certificate](images/add-certificates-details.png)
    ![step six](images/six.png) ![Configure kiosk account and app](images/kiosk-account.png)

    You can create a local standard user account that will be used to run the kiosk app. If you toggle **No**, make sure that you have an existing user account to run the kiosk app.

    If you want to create an account, enter the user name and password, and then toggle **Yes** or **No** to automatically sign in the account when the device starts.

    In **Configure the kiosk mode app**, enter the name of the user account that will run the kiosk mode app. Select the type of app to run in kiosk mode, and then enter the path or filename (for a Classic Windows app) or the AUMID (for a Universal Windows app). For a Classic Windows app, you can use the filename if the path to the file is in the PATH environment variable, otherwise the full path is required.    		![Configure kiosk account and app](images/kiosk-account-details.png)
    ![step seven](images/seven.png) ![configure kiosk common settings](images/kiosk-common.png)

    On this step, select your options for tablet mode, the user experience on the Welcome and shutdown screens, and the timeout settings.    		![set tablet mode and configure welcome and shutdown and turn off timeout settings](images/kiosk-common-details.png)
    ![finish](images/finish.png)

    You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device.    		![Protect your package](images/finish-details.png)
    - - *DefaultUserName*: set value as the account that you want logged in. - - *DefaultPassword*: set value as the password for the account. +>[!NOTE] +>If you want to use [the advanced editor in Windows Configuration Designer](provisioning-packages/provisioning-create-package.md#configure-settings), specify the user account and app (by AUMID) in **Runtime settings** > **AssignedAccess** > **AssignedAccessSettings** - > [!NOTE] - > If *DefaultUserName* and *DefaultPassword* aren't there, add them as **New** > **String Value**. - - *DefaultDomainName*: set value for domain, only for domain accounts. For local accounts, do not add this key. -4. Close Registry Editor. The next time the computer restarts, the account will be logged on automatically. -### Sign out of assigned access -To exit the assigned access (kiosk) app, press **Ctrl + Alt + Del**, and then sign in using another account. When you press **Ctrl + Alt + Del** to sign out of assigned access, the kiosk app will exit automatically. If you sign in again as the assigned access account or wait for the login screen timeout, the kiosk app will be re-launched. The assigned access user will remain signed in until an admin account opens **Task Manager** > **Users** and signs out the user account. +[Learn how to apply a provisioning package.](provisioning-packages/provisioning-apply-package.md) -If you press **Ctrl + Alt + Del** and do not sign in to another account, after a set time, assigned access will resume. The default time is 30 seconds, but you can change that in the following registry key: -**HKEY\_LOCAL\_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI** -To change the default time for assigned access to resume, add *IdleTimeOut* (DWORD) and enter the value data as milliseconds in hexadecimal. - -## Shell Launcher for Classic Windows applications +  + + + +## Set up a kiosk or digital sign in Intune or other MDM service + +>App type: UWP +> +>OS edition: Windows 10 Pro (version 1709), Ent, Edu +> +>Account type: Local standard user, Azure AD + +Microsoft Intune and other MDM services enable kiosk configuration through the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp). Assigned Access has a KioskModeApp setting. In the KioskModeApp setting, you enter the user account name and [AUMID](https://docs.microsoft.com/windows-hardware/customize/enterprise/find-the-application-user-model-id-of-an-installed-app) for the app to run in kiosk mode. + +The following steps explain how to configure a kiosk in Microsoft Intune. For other MDM services, see the documentation for your provider. + +**To configure kiosk in Microsoft Intune** + +2. In the Microsoft Azure portal, search for **Intune** or go to **More services** > **Intune**. +3. Select **Device configuration**. +4. Select **Profiles**. +5. Select **Create profile**. +6. Enter a friendly name for the profile. +7. Select **Windows 10 and later** for the platform. +8. Select **Device restrictions** for the profile type. +9. Select **Kiosk**. +10. In **Kiosk Mode**, select **Single app kiosk**. +1. Enter the user account (Azure AD or a local standard user account). +11. Enter the Application User Model ID for an installed app. +14. Select **OK**, and then select **Create**. +18. Assign the profile to a device group to configure the devices in that group as kiosks. + + + +## Set up a kiosk or digital sign using Shell Launcher + +>App type: Classic Windows +> +>OS edition: Windows 10 Ent, Edu +> +>Account type: Local standard user or administrator, Active Directory, Azure AD Using Shell Launcher, you can configure a kiosk device that runs a Classic Windows application as the user interface. The application that you specify replaces the default shell (explorer.exe) that usually runs when a user logs on. @@ -239,6 +294,7 @@ Using Shell Launcher, you can configure a kiosk device that runs a Classic Windo [See the technical reference for the shell launcher component.](https://go.microsoft.com/fwlink/p/?LinkId=618603) + ### Configure Shell Launcher To set a Classic Windows application as the shell, you first turn on the Shell Launcher feature, and then you can set your custom shell as the default using PowerShell. @@ -399,41 +455,15 @@ $IsShellLauncherEnabled = $ShellLauncherClass.IsEnabled() "`nEnabled is set to " + $IsShellLauncherEnabled.Enabled ``` -## Other settings to lock down +## Sign out of assigned access +To exit the assigned access (kiosk) app, press **Ctrl + Alt + Del**, and then sign in using another account. When you press **Ctrl + Alt + Del** to sign out of assigned access, the kiosk app will exit automatically. If you sign in again as the assigned access account or wait for the login screen timeout, the kiosk app will be re-launched. The assigned access user will remain signed in until an admin account opens **Task Manager** > **Users** and signs out the user account. -For a more secure kiosk experience, we recommend that you make the following configuration changes to the device: +If you press **Ctrl + Alt + Del** and do not sign in to another account, after a set time, assigned access will resume. The default time is 30 seconds, but you can change that in the following registry key: -- Put device in **Tablet mode**. +**HKEY\_LOCAL\_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI** - If you want users to be able to use the touch (on screen) keyboard, go to **Settings** > **System** > **Tablet mode** and choose **On.** - -- Hide **Ease of access** feature on the logon screen. - - Go to **Control Panel** > **Ease of Access** > **Ease of Access Center**, and turn off all accessibility tools. - -- Disable the hardware power button. - - Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. - -- Remove the power button from the sign-in screen. - - Go to **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** >**Security Options** > **Shutdown: Allow system to be shut down without having to log on** and select **Disabled.** - -- Disable the camera. - - Go to **Settings** > **Privacy** > **Camera**, and turn off **Let apps use my camera**. - -- Turn off app notifications on the lock screen. - - Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Logon\\Turn off app notifications on the lock screen**. - -- Disable removable media. - - Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Device Installation\\Device Installation Restrictions**. Review the policy settings available in **Device Installation Restrictions** for the settings applicable to your situation. - - >[!NOTE]   - >To prevent this policy from affecting a member of the Administrators group, in **Device Installation Restrictions**, enable **Allow administrators to override Device Installation Restriction policies**. +To change the default time for assigned access to resume, add *IdleTimeOut* (DWORD) and enter the value data as milliseconds in hexadecimal.   ## Related topics diff --git a/windows/configuration/wcd/wcd-accounts.md b/windows/configuration/wcd/wcd-accounts.md index 2df8e81ee7..de3f2b1d0f 100644 --- a/windows/configuration/wcd/wcd-accounts.md +++ b/windows/configuration/wcd/wcd-accounts.md @@ -29,7 +29,7 @@ The **Azure > Authority** and **Azure > BPRT** settings for bulk Azure Active Di - [Instructions for desktop wizard](../provisioning-packages/provision-pcs-for-initial-deployment.md) - [Instructions for the mobile wizard](../mobile-devices/provisioning-configure-mobile.md) -- [Instructions for the kiosk wizard](../set-up-a-kiosk-for-windows-10-for-desktop-editions.md#wizard) +- [Instructions for the kiosk wizard](../setup-kiosk-digital-signage.md#wizard) ## ComputerAccount From 2e725ff97f006a10f367c1549a16291b64debd76 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 26 Mar 2018 15:27:27 +0000 Subject: [PATCH 138/138] Merged PR 6642: specify Enterprise --- .../configure-windows-diagnostic-data-in-your-organization.md | 2 +- windows/deployment/update/windows-analytics-get-started.md | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md b/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md index 9529995ecb..ec20ebc2bc 100644 --- a/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md @@ -15,7 +15,7 @@ ms.date: 10/17/2017 **Applies to** -- Windows 10 +- Windows 10 Enterprise - Windows 10 Mobile - Windows Server diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index e346db089e..898d4144d7 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -76,7 +76,8 @@ The compatibility update scans your devices and enables application usage tracki >[!IMPORTANT] >Restart devices after you install the compatibility updates for the first time. ->[!NOTE] We recommend you configure your update management tool to automatically install the latest version of these updates. There is a related optional update, [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513), which can provide updated configuration and definitions for older compatibiltiy updates. For more information about this optional update, see . +>[!NOTE] +>We recommend you configure your update management tool to automatically install the latest version of these updates. There is a related optional update, [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513), which can provide updated configuration and definitions for older compatibiltiy updates. For more information about this optional update, see .

    + +- Using Microsoft Mobile Device Management (MDM)

    +Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under **Provider/ProviderID/CommercialID**. You can find more information on deployment using MDM at the [DMClient Configuration Service Provider topic](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/dmclient-csp).   @@ -51,15 +65,12 @@ To enable data sharing, configure your proxy sever to whitelist the following en | `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 | `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft. | `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. | -| `https://v10.events.data.microsoft.com` | New telemetry endpoint for Windows 10, version 1803| +| `https://v10.events.data.microsoft.com` | New diagnostic data endpoint for Windows 10, version 1803| | `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | | `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | ->[!IMPORTANT] -> If your deployment includes devices running Windows 10 versions prior to Windows 10, version 1703, you must **exclude** *authentication* for these endpoints. Windows Error Reporting did not support authenticating proxies until Windows 10, version 1703. See the **Configuring endpoint access with proxy servers** section for options. ->[!NOTE] ->The compatibility update runs under the device's system account. + #### Configuring endpoint access with proxy servers If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: @@ -68,65 +79,7 @@ If your organization uses proxy server authentication for outbound traffic, use - **User proxy authentication:** Alternatively, you can configure devices on the user side. First, update the devices to Windows 10, version 1703 or later. Then, ensure that users of the devices have proxy permission to reach the diagnostic data endpoints. This requires that the devices have console users with proxy permissions, so you couldn't use this method with headless devices. - **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints. -### Test data sharing -Devices must be able to reach the endpoints specified in the "Enable data sharing" section of this topic, so it's worth taking some time now to verify that they are reachable. -Prior to Windows 10, version 1703, WER uploads error reports in the machine context. Both user (typically authenticated) and machine (typically anonymous) contexts require access through proxy servers to the diagnostic endpoints. In Windows 10, version 1703, and later WER will attempt to use the context of the user that is logged on for proxy authentication such that only the user account requires proxy access. - -Therefore, it's important to ensure that both machine and user accounts have access to the endpoints using authentication (or to whitelist the endpoints so that outbound proxy authentication is not required). - -To test access as a given user, you can run this Windows PowerShell cmdlet *while logged on as that user*: - -```powershell - -$endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'adl.windows.com' - 'watson.telemetry.microsoft.com' - 'oca.telemetry.microsoft.com' - 'v10.events.data.microsoft.com' - ) - -$endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded - -``` - -If this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. - -To test access in the machine context (requires administrative rights), run the above as SYSTEM using PSexec or Task Scheduler, as in this example: - -```powershell - -[scriptblock]$accessTest = { - $endPoints = @( - 'v10.vortex-win.data.microsoft.com' - 'vortex-win.data.microsoft.com' - 'settings-win.data.microsoft.com' - 'adl.windows.com' - 'watson.telemetry.microsoft.com' - 'oca.telemetry.microsoft.com' - 'v10.events.data.microsoft.com' - ) - - $endPoints | %{ Test-NetConnection -ComputerName $_ -Port 443 -ErrorAction Continue } | Select-Object -Property ComputerName,TcpTestSucceeded -} - -$scriptFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints.ps1" -$outputFileFullPath = Join-Path $env:ProgramData "TestAccessToMicrosoftEndpoints_Output.txt" -$accessTest.ToString() > $scriptFullPath -$null > $outputFileFullPath -$taskAction = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument "-ExecutionPolicy Bypass -Command `"&{$scriptFullPath > $outputFileFullPath}`"" -$taskTrigger = New-ScheduledTaskTrigger -Once -At (Get-Date).Addseconds(10) -$task = Register-ScheduledTask -User 'NT AUTHORITY\SYSTEM' -TaskName 'MicrosoftTelemetryAccessTest' -Trigger $taskTrigger -Action $taskAction -Force -Start-Sleep -Seconds 120 -Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false -Get-Content $outputFileFullPath - -``` - -As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints. ## Deploy the compatibility update and related updates @@ -140,7 +93,10 @@ The compatibility update scans your devices and enables application usage tracki | Windows 7 SP1 | [KB2952664](http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2952664)
    Performs diagnostics on the Windows 7 SP1 systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues might be encountered when the latest Windows operating system is installed.
    For more information about this update, see

    [KB 3150513](https://catalog.update.microsoft.com/v7/site/Search.aspx?q=3150513)
    Provides updated configuration and definitions for compatibility diagnostics performed on the system.
    For more information about this update, see
    **NOTE:** KB2952664 must be installed before you can download and install KB3150513. | >[!IMPORTANT] ->Restart computers after you install the compatibility updates for the first time. +>Restart devices after you install the compatibility updates for the first time. + +>[!NOTE] +>The compatibility update runs under the device's system account. If you are planning to enable IE Site Discovery in Upgrade Readiness, you will need to install a few additional updates. @@ -152,7 +108,7 @@ If you are planning to enable IE Site Discovery in Upgrade Readiness, you will n You can use the Upgrade Readiness deployment script to automate and verify your deployment. We always recommend manually running this script on a few representative devices to verify things are properly configured and the device can connect to the diagnostic data endpoints. Make sure to run the pilot version of the script, which will provide extra diagnostics. -See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script to, which will enable the script properly check for telemetry endpoint connectivity. +See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity. After data is sent from devices to Microsoft, it generally takes 48-56 hours for the data to populate in the Upgrade Readiness solution. The compatibility update takes several minutes to run. If the update does not get a chance to finish running or if the computers are inaccessible (turned off or sleeping for example), data will take longer to populate in Upgrade Readiness. For this reason, you can expect most of your devices to be populated in Windows Analytics in about 1-2 weeks after deploying the update and configuration to user computers. As described in the Windows Analytics blog post ["You can now check on the status of your computers within hours of running the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/), you can verify that devices have successfully connected to the service within a few hours. Most of those devices should start to show up in the Windows Analytics console within a few days. From 29921aaa71eb600399a6a22b03fc8270c115ab57 Mon Sep 17 00:00:00 2001 From: Celeste de Guzman Date: Thu, 8 Mar 2018 13:43:27 -0800 Subject: [PATCH 020/138] updated the Microsoft Teams link for IT admins to point to the docs that's on DMC (new) --- education/index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/education/index.md b/education/index.md index 3e75f1c5ee..1f982844d6 100644 --- a/education/index.md +++ b/education/index.md @@ -272,7 +272,7 @@ ms.date: 10/30/2017