From d8849befc689adb51d18d42e00d42c924e8ceaaa Mon Sep 17 00:00:00 2001 From: Steven Tricanowicz Date: Wed, 14 Jun 2017 18:08:02 -0700 Subject: [PATCH 01/33] Cleaning up WSfB REST Data Structures Page Fixing a number of errors, including: - incorrect types - inconsistent types - missing type links - fixing typoes While I'm here, I'm also: - alphabetizing the page - aligning columns across classes/enums - removing unnecessary columns - improving capitalization/punctuation consistency - rewording a couple descriptions --- ...a-structures-windows-store-for-business.md | 431 ++++++++---------- 1 file changed, 200 insertions(+), 231 deletions(-) diff --git a/windows/client-management/mdm/data-structures-windows-store-for-business.md b/windows/client-management/mdm/data-structures-windows-store-for-business.md index 18b093df38..38f80513d0 100644 --- a/windows/client-management/mdm/data-structures-windows-store-for-business.md +++ b/windows/client-management/mdm/data-structures-windows-store-for-business.md @@ -28,6 +28,7 @@ Here's the list of data structures used in the Windows Store for Business REST A - [LicenseType](#licensetype) - [LocalizedProductDetail](#localizedproductdetail) - [OfflineLicense](#offlinelicense) +- [PackageContentInfo](#packagecontentinfo) - [PackageLocation](#packagelocation) - [ProductArchitectures](#productarchitectures) - [ProductDetails](#productdetails) @@ -85,26 +86,22 @@ Specifies the properties of the alternate identifier. --+ - - - + - - +
Name TypeDescription

seatDetails

Collection of [SeatDetails](#seatdetails)

collection of [SeatDetails](#seatdetails)

failedSeatOperations

Collection of [FailedSeatRequest](#failedseatrequest)

collection of [FailedSeatRequest](#failedseatrequest)
@@ -117,31 +114,26 @@ Specifies the properties of the alternate identifier. --+ - - - -
Name TypeDescription

failureReason

string

productKey

[ProductKey](#productkey)

userName

string
@@ -173,7 +165,7 @@ Specifies the properties of the alternate identifier.

contentId

string

-

Identifies a specific application

+

Identifies a specific application.

location

@@ -207,12 +199,12 @@ Specifies the properties of the alternate identifier.

fileSize

-

integer -64

-

+

integer-64

+

Size of the file.

packageRank

-

integer-3232

+

integer-32

Optional

@@ -225,26 +217,22 @@ Specifies the properties of the alternate identifier. --+ - - - @@ -277,7 +265,7 @@ Specifies the properties of the alternate identifier. - + @@ -296,12 +284,12 @@ Specifies the properties of the alternate identifier. - + - + @@ -329,11 +317,11 @@ Specifies the properties of the alternate identifier. - + - + @@ -346,27 +334,23 @@ Specifies the properties of the alternate identifier.
NameType Description

open

Open distribution policy - licenses/seats can be assigned/consumed without limit

restricted

Restricted distribution policy - licenses/seats must be assigned/consumed according to the available count

seatCapacity

integer-64

Total number of seats that have been purchased for an application

Total number of seats that have been purchased for an application.

availableSeats

distributionPolicy

InventoryDistributionPolicy

[InventoryDistributionPolicy](#inventorydistributionpolicy)

status

InventoryStatus

[InventoryStatus](#inventorystatus)

continuationToken

string

continuationToken is only available if there is a next page

Only available if there is a next page.

inventoryEntries

collection of

collection of [InventoryEntryDetails](#inventoryentrydetails)

--+ - - - + - - +
NameType Description

active

Entry is available in the organization’s inventory

Entry is available in the organization’s inventory.

removed

Entry has been removed from the organization’s inventory

Entry has been removed from the organization’s inventory.
@@ -378,8 +362,8 @@ Specifies the properties of the alternate identifier. --++ @@ -497,43 +481,13 @@ Specifies the properties of the localized product.   -## ProductArchitectures - - -
--- - - - - - - - - - - - - - - - - - - - -
Name

neutral

arm

x86

x64

- -  - ## PackageContentInfo --++ @@ -582,6 +536,36 @@ Specifies the properties of the localized product.   +## ProductArchitectures + + +
+++ + + + + + + + + + + + + + + + + + + + +
Name

neutral

arm

x86

x64

+ +  + ## ProductDetails @@ -611,7 +595,7 @@ Specifies the properties of the localized product.

supportedLanguages

-

collection of strings

+

collection of string

The set of localized languages for an application.

@@ -644,10 +628,74 @@ Specifies the properties of the localized product.   +## ProductImage + + +Specifies the properties of the product image. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameTypeDescription

location

URI

Location of the download image.

purpose

string

Tag for the purpose of the image, e.g. "screenshot" or "logo".

height

string

Height of the image in pixels.

width

string

Width of the image in pixels.

caption

string

Unlimited length.

backgroundColor

string

Format "#RRGGBB"

foregroundColor

string

Format "#RRGGBB"

fileSize

integer-64

Size of the file.

+ +  + ## ProductKey -Specifies the proerties of the product key. +Specifies the properties of the product key. @@ -678,104 +726,6 @@ Specifies the proerties of the product key.   -## ProductImage - - -Specifies the proerties of the product image. - -
----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NameTypeDescription

location

URI

Location of the download images.

purpose

string

App screenshots and icons

height

string

Height of the image in pixels.

width

string

Width of the image in pixels.

caption

string

Unlimited

backgroundColor

string

Format #RRGGBB

foregroundColor

string

Format #RRGGBB

fileSize

long

Size of the file.

- -  - -## PublisherDetails - - -Specifies the proerties of the publisher details. - - ----- - - - - - - - - - - - - - - - - - - - -
NameTypeDescription

publisherName

string

Name of the publisher.

publisherWebsite

string

Website of the publisher.

- -  - ## ProductPackageDetails @@ -799,15 +749,15 @@ Specifies the proerties of the publisher details.

-

contentId

-

string

-

Identifies a specific application.

- -

packageId

string

+ +

contentId

+

string

+

Identifies a specific application.

+

location

[PackageLocation](#packagelocation)

@@ -831,7 +781,7 @@ Specifies the proerties of the publisher details.

packageFormat

[ProductPackageFormat](#productpackageformat)

-

appx, appxbundle, xap

+

Extension of the package file.

platforms

@@ -839,19 +789,41 @@ Specifies the proerties of the publisher details.

-

packageId

-

string

-

- -

fileSize

integer-64

-

+

Size of the file.

- +

packageRank

integer-32

-

optional

+

Optional

+ + + + +  + +## ProductPackageFormat + + + +++ + + + + + + + + + + + + + +
Name

appx

appxBundle

xap
@@ -890,40 +862,13 @@ Specifies the proerties of the publisher details.   -## ProductPackageFormat - - - --- - - - - - - - - - - - - - - - - -
Name

appx

appxBundle

xap

- -  - ## ProductPlatform --++ @@ -949,6 +894,40 @@ Specifies the proerties of the publisher details.   +## PublisherDetails + + +Specifies the properties of the publisher details. + +
+++++ + + + + + + + + + + + + + + + + + + + +
NameTypeDescription

publisherName

string

Name of the publisher.

publisherWebsite

string

Website of the publisher.

+ +  + ## SeatAction @@ -1020,8 +999,8 @@ Specifies the proerties of the publisher details. --++ @@ -1032,7 +1011,7 @@ Specifies the proerties of the publisher details. - + @@ -1096,7 +1075,7 @@ Specifies the proerties of the publisher details. - +

seats

Collection of [SeatDetails](#seatdetails)

collection of [SeatDetails](#seatdetails)

continuationToken

architectures

collection of ProductArchitectures

collection of [ProductArchitecture](#productarchitecture)
@@ -1108,8 +1087,8 @@ Specifies the proerties of the publisher details. --++ @@ -1120,29 +1099,19 @@ Specifies the proerties of the publisher details. - + - + - + - +

major

integer-23

integer-32

minor

integer-23

integer-32

build

integer-23

integer-32

revision

integer-23

integer-32
- -  - -  - - - - - - From 2436f248fb05f7688fe8a511603a3e723dbc5c71 Mon Sep 17 00:00:00 2001 From: Matt Nelson Date: Tue, 20 Jun 2017 11:07:09 -0400 Subject: [PATCH 02/33] Updated to include fsiAnyCpu.exe Same as FSI.exe, has different fileName. --- .../device-guard/deploy-code-integrity-policies-steps.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md index df7aacb570..8f0f7d4c6f 100644 --- a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md +++ b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md @@ -38,6 +38,7 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you - csi.exe - dnx.exe - fsi.exe +- fsiAnyCpu.exe - kd.exe - lxssmanager.dll - msbuild.exe[1] @@ -110,6 +111,7 @@ Microsoft recommends that you block the following Microsoft-signed applications + @@ -175,6 +177,7 @@ Microsoft recommends that you block the following Microsoft-signed applications + From 34e135859f64a4c97e03b155c5ecfa8351d7dcce Mon Sep 17 00:00:00 2001 From: Matt Nelson Date: Tue, 20 Jun 2017 12:01:19 -0400 Subject: [PATCH 03/33] Updated to include Alex Ionescu credit Alex contributed to the bash.exe and lxssmanager.dll findings. Reference: https://twitter.com/aionescu/status/876226982534565889 --- .../device-guard/deploy-code-integrity-policies-steps.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md index 8f0f7d4c6f..5cbed02e22 100644 --- a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md +++ b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md @@ -60,6 +60,7 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you |Matt Graeber | @mattifestation| |Matt Nelson | @enigma0x3| |Oddvar Moe |@Oddvarmoe| +|Alex Ionescu | @aionescu|
From cc29c4ba47afe8c261e643e9dade3e19b0a6875c Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 23 Jun 2017 13:07:27 -0700 Subject: [PATCH 04/33] clarified TPM 2.0 requirement --- windows/device-security/tpm/tpm-recommendations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/device-security/tpm/tpm-recommendations.md b/windows/device-security/tpm/tpm-recommendations.md index 1b874b2988..0ccddbb144 100644 --- a/windows/device-security/tpm/tpm-recommendations.md +++ b/windows/device-security/tpm/tpm-recommendations.md @@ -84,7 +84,7 @@ For end consumers, TPM is behind the scenes but is still very relevant. TPM is u ### Windows 10 for desktop editions (Home, Pro, Enterprise, and Education) -- Since July 28, 2016, all new device models, lines or series (or if you are updating the hardware configuration of a existing model, line or series with a major update, such as CPU, graphic cards) must implement and enable by default TPM 2.0 (details in section 3.7 of the [Minimum hardware requirements](https://msdn.microsoft.com/library/windows/hardware/dn915086(v=vs.85).aspx) page). +- Since July 28, 2016, all new device models, lines or series (or if you are updating the hardware configuration of a existing model, line or series with a major update, such as CPU, graphic cards) must implement and enable by default TPM 2.0 (details in section 3.7 of the [Minimum hardware requirements](https://msdn.microsoft.com/library/windows/hardware/dn915086(v=vs.85).aspx) page). The requirement to enable TPM 2.0 only applies to the manufacturing of new devices. Windows 10 features such as [Windows Hello for Business](https://docs.microsoft.com/windows/access-protection/hello-for-business/hello-manage-in-organization#prerequisites) and [BitLocker](https://docs.microsoft.com/windows/device-security/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#bkmk-tpmconfigurations) do not require TPM 2.0. ### IoT Core From afc2e557d3fd7084faf8ffdde80dadf3f110e940 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 23 Jun 2017 13:46:15 -0700 Subject: [PATCH 05/33] added link to feature table --- windows/device-security/tpm/tpm-recommendations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/device-security/tpm/tpm-recommendations.md b/windows/device-security/tpm/tpm-recommendations.md index 0ccddbb144..d0283a1020 100644 --- a/windows/device-security/tpm/tpm-recommendations.md +++ b/windows/device-security/tpm/tpm-recommendations.md @@ -84,7 +84,7 @@ For end consumers, TPM is behind the scenes but is still very relevant. TPM is u ### Windows 10 for desktop editions (Home, Pro, Enterprise, and Education) -- Since July 28, 2016, all new device models, lines or series (or if you are updating the hardware configuration of a existing model, line or series with a major update, such as CPU, graphic cards) must implement and enable by default TPM 2.0 (details in section 3.7 of the [Minimum hardware requirements](https://msdn.microsoft.com/library/windows/hardware/dn915086(v=vs.85).aspx) page). The requirement to enable TPM 2.0 only applies to the manufacturing of new devices. Windows 10 features such as [Windows Hello for Business](https://docs.microsoft.com/windows/access-protection/hello-for-business/hello-manage-in-organization#prerequisites) and [BitLocker](https://docs.microsoft.com/windows/device-security/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#bkmk-tpmconfigurations) do not require TPM 2.0. +- Since July 28, 2016, all new device models, lines or series (or if you are updating the hardware configuration of a existing model, line or series with a major update, such as CPU, graphic cards) must implement and enable by default TPM 2.0 (details in section 3.7 of the [Minimum hardware requirements](https://msdn.microsoft.com/library/windows/hardware/dn91508.aspx) page). The requirement to enable TPM 2.0 only applies to the manufacturing of new devices. For TPM recommendations for specific Windows features, see [TPM and Windows Features](#tpm-and-windows-features). ### IoT Core From 58e0621f4c6f1cd7e684fb421e2f12a0f8d8005b Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 26 Jun 2017 13:41:38 -0700 Subject: [PATCH 06/33] Updating --- .../application-management/app-v/appv-auto-batch-sequencing.md | 1 + windows/application-management/app-v/appv-auto-batch-updating.md | 1 + 2 files changed, 2 insertions(+) diff --git a/windows/application-management/app-v/appv-auto-batch-sequencing.md b/windows/application-management/app-v/appv-auto-batch-sequencing.md index a90e25e2eb..5de2cf686f 100644 --- a/windows/application-management/app-v/appv-auto-batch-sequencing.md +++ b/windows/application-management/app-v/appv-auto-batch-sequencing.md @@ -155,6 +155,7 @@ There are 3 types of log files that occur when you sequence multiple apps at the - **Log.txt file**. Located in the **Output Package** folder. This file contains all code included in the NewAppVSequencerPackage cmdlet, including the allowed parameters. ### Related topics + - [Download the Windows ADK](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) - [How to install the App-V Sequencer](appv-install-the-sequencer.md) diff --git a/windows/application-management/app-v/appv-auto-batch-updating.md b/windows/application-management/app-v/appv-auto-batch-updating.md index 0430b81a0b..9dd0ce0b52 100644 --- a/windows/application-management/app-v/appv-auto-batch-updating.md +++ b/windows/application-management/app-v/appv-auto-batch-updating.md @@ -158,6 +158,7 @@ There are 3 types of log files that occur when you sequence multiple apps at the - **Log.txt file**. Located in the **Output Package** folder. This file contains all code included in the NewAppVSequencerPackage cmdlet, including the allowed parameters. ### Related topics + - [Download the Windows ADK](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) - [How to install the App-V Sequencer](appv-install-the-sequencer.md) From 7a042ab2a0f82ad2cdb73b3f18efddc16a3b93ce Mon Sep 17 00:00:00 2001 From: Steven Tricanowicz Date: Mon, 26 Jun 2017 14:47:37 -0700 Subject: [PATCH 07/33] Update column width on SupportedProductPlatform Fixing a column width that wasn't aligned with the rest of the page. --- .../mdm/data-structures-windows-store-for-business.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/data-structures-windows-store-for-business.md b/windows/client-management/mdm/data-structures-windows-store-for-business.md index 38f80513d0..00837af89f 100644 --- a/windows/client-management/mdm/data-structures-windows-store-for-business.md +++ b/windows/client-management/mdm/data-structures-windows-store-for-business.md @@ -1051,8 +1051,8 @@ Specifies the properties of the publisher details. --++ From deca044ecbb30a8c88d9003533ced79834f41e01 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 26 Jun 2017 21:39:42 -0700 Subject: [PATCH 08/33] update hklm path --- ...roxy-internet-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md index 6c9b1b4da5..c497229e55 100644 --- a/windows/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/configure-proxy-internet-windows-defender-advanced-threat-protection.md @@ -45,7 +45,7 @@ Configure a registry-based static proxy to allow only Windows Defender ATP senso The static proxy is configurable through Group Policy (GP). The group policy can be found under: **Administrative Templates > Windows Components > Data Collection and Preview Builds > Configure connected user experiences and telemetry**. -The policy sets two registry values `TelemetryProxyServer` as REG_SZ and `DisableEnterpriseAuthProxy` as REG_DWORD under the registry key `HKLM\Software\Policies\Microsoft\Windows\DisableEnterpriseAuthProxy\DataCollection`. +The policy sets two registry values `TelemetryProxyServer` as REG_SZ and `DisableEnterpriseAuthProxy` as REG_DWORD under the registry key `HKLM\Software\Policies\Microsoft\Windows\DataCollection`. The registry value `TelemetryProxyServer` takes the following string format: From 8c5ee6e53ed34fcb2fd1d3096c59aeaada9f3067 Mon Sep 17 00:00:00 2001 From: Celeste de Guzman Date: Tue, 27 Jun 2017 11:07:13 -0700 Subject: [PATCH 09/33] removed ms date on page for hub --- education/index.md | 1 - 1 file changed, 1 deletion(-) diff --git a/education/index.md b/education/index.md index 4033cef903..f1dbb98cc3 100644 --- a/education/index.md +++ b/education/index.md @@ -5,7 +5,6 @@ title: Microsoft Education documentation and resources | Microsoft Docs description: Learn about product documentation and resources available for school IT administrators, teachers, students, and education app developers. author: CelesteDG ms.author: celested -ms.date: ms.date: 06/12/2017 ---
From c595986ea793c5ad65227a35d92cb5e154819755 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 27 Jun 2017 12:02:02 -0700 Subject: [PATCH 10/33] added a new topic about containers --- ...ow-windows-uses-containers-for-security.md | 59 ++++++++++++++++++ .../application-guard-and-system-guard.png | Bin 0 -> 40533 bytes .../traditional-windows-software-stack.png | Bin 0 -> 33346 bytes .../images/windows-defender-system-guard.png | Bin 0 -> 71005 bytes 4 files changed, 59 insertions(+) create mode 100644 windows/threat-protection/how-windows-uses-containers-for-security.md create mode 100644 windows/threat-protection/images/application-guard-and-system-guard.png create mode 100644 windows/threat-protection/images/traditional-windows-software-stack.png create mode 100644 windows/threat-protection/images/windows-defender-system-guard.png diff --git a/windows/threat-protection/how-windows-uses-containers-for-security.md b/windows/threat-protection/how-windows-uses-containers-for-security.md new file mode 100644 index 0000000000..2601eafcc9 --- /dev/null +++ b/windows/threat-protection/how-windows-uses-containers-for-security.md @@ -0,0 +1,59 @@ +--- +title: How Windows 10 uses containers for security (Windows 10) +description: Windows 10 uses containers to isolate sensitive system services and data, enabling them to remain secure even when the operating system has been compromised. +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +author: justinha +--- + +# How Windows 10 uses containers for security + +Windows 10 uses containers to isolate sensitive system services and data, enabling them to remain secure even when the operating system has been compromised. +Windows 10 protects critical resources, such as the Windows authentication stack, single sign-on tokens, Windows Hello biometric stack, and Virtual Trusted Platform Module, by using a container type called Windows Defender System Guard. + +Protecting system services and data with Windows Defender System Guard is an important first step, but is just the beginning of what we need to do as it doesn’t protect the rest of the operating system, information on the device, other apps, or the network. +Since systems are generally compromised through the application layer, and often though browsers, Windows 10 includes Windows Defender Application Guard to isolate Microsoft Edge from the operating system, information on the device, and the network. +With this, Windows can start to protect the broader range of resources. + +The following diagram shows Windows Defender System Guard and Windows Defender Application Guard in relation to the Windows 10 operating system. + +![Application Guard and System Guard](images/application-guard-and-system-guard.png) + +## What security threats do containers protect against + +Exploiting zero days and vulnerabilities are an increasing threat that attackers are attempting to take advantage of. +The following diagram shows the traditional Windows software stack: a kernel with an app platform, and an app running on top of it. +Let’s look at how an attacker might elevate privileges and move down the stack. + +![Traditional Windows software stack](images/traditional-windows-software-stack.png) + +In desktop operating systems, those apps typically run under the context of the user’s privileges. +If the app was malicious, it would have access to all the files in the file system, all the settings that you as a user Standard user have access to, and so on. + +A different type of app may run under the context of an Administrator. +If attackers exploit a vulnerability in that app, they could gain Administrator privileges. +Then they can start turning off defenses. + +They can poke down a little bit lower in the stack and maybe elevate to System, which is greater than Administrator. +Or if they can exploit the kernel mode, they can turn on and turn off all defenses, while at the same time making the computer look healthy. +SecOps tools could report the computer as healthy when in fact it’s completely under the control of someone else. + +One way to address this threat is to use a sandbox, as smartphones do. +That puts a layer between the app layer and the Windows platform services. +Universal Windows Platform (UWP) applications work this way. +But what if a vulnerability in the sandbox exists? +The attacker can escape and take control of the system. + +## How containers help protect Windows 10 + +Windows 10 addresses this by using virtualization based security to isolate more and more components out of Windows (left side) over time and moving those components into a separate, isolated hardware container. +The container helps prevent zero days and vulnerabilities from allowing an attacker to take control of a device. + +Anything that's running in that container on the right side will be safe, even from Windows, even if the kernel's compromised. +Anything that's running in that container will also be secure against a compromised app. +Initially, Windows Defender System Guard will protect things like authentication and other system services and data that needs to resist malware, and more things will be protected over time. + +![Windows Defender System Guard](images/windows-defender-system-guard.png) diff --git a/windows/threat-protection/images/application-guard-and-system-guard.png b/windows/threat-protection/images/application-guard-and-system-guard.png new file mode 100644 index 0000000000000000000000000000000000000000..b4b883db9020dd3eff357c2006113e4f8b41beec GIT binary patch literal 40533 zcmc$_WmH{V(m!}{4eklrb_up}T5GzlU!2n4l>Z8HE2 zK)I+&iGs>UU+n@9uofZ;A|Oyz9Ll{B9Po_fD6QiH0-<$3|AXpxC^Q9uzV6A0i>Q0* zA3mUbdDZW`5`{)L^nt10h>GWf-Jtn>xYdosuUo3<#5vc}Br)n=bNoENsLmcX7f)P{ z1tN`g-%uy?1)+=hAZ44SVVJxSAD|%ofk$KP>iMaILLj*c5{LmZ%A|&6!i(xPtm?Vr z@N{a@X2SD+(sC7mb}_GYiM)!{r={QOxPPnDcCJ=our+XH*Ze&l!y{Sn5R2kV zAviH4?T2lB3bTP?hG3b`d}U)JK`|k0e>}^~5vE_{&3O8jRa>9dEboSgS6qA~$%fM# zHJoM^iU}^bLq(+Ysu0YTgv8?U|;j!WL_ey4>1n)9> z!y#fwO2+O-budRa|AXDXc<;8jpS!8aBet{%&@HpfHY@4FBSQ`z3_P+bCvdaAS! z9O$*L$dQ~TS@IG(#X=@eJnItOzB9ZlAn2VT zQWjF9eF;rTspPX1=Cu3Sb9kEh+9Fzxpl5n(i+We*YUz=aDL4lun68pqVhvX^&@)6u zj0`oHMVjE7`=M%EGxP`xB4Rfg7Gn3$5wjQrf~VnBm>HEKt!c5%58GJFlGoVCCq-FrP(4ofot_ zDmT?o*(h{Oszb|bWFojp1ZHOMKIwEe6uF7tSbpL6QuPw~5za*g5|gGx^`>}(FqtNP z`049cjliCN={tQWl(EX!X>_X)BeGrlWp+S90W7Fp+(xei-nr6X`9&CrPU+r@e*FAd ztu9SOf<1@mUu*wqIO0vAohxT&jk>c}zVU{L)OcZ1@Xc!UL-6_Z!G%FA7tGjOrvk~} z=`vW-MrfXhDUkx&g?qZ|4cFN>BHFcRb zcn`mNCVg$?+Ub{uB8}3JTghdpnHATxoL*Ub0SOIe*MOAbYojlXwbwUg0(^57lTl~f zI$EllR0FE4Mvga~oEv+pmJRtXZ*4`zKX{|(j;0fBgd`*+aipRBaZ#vp1YCkYuT(L* zPTnvX<%0hDQ<~6@wTO=qmTH7#vVZV$D3xF%MC1hnhCQgEN2w=I7;pvB2JMo4TPQ{# z^YE@6e8g@PU^{c9oGRz1-;C|E+I3F~j2=%DVhifFRN(zVV%DB3n6Nr=pH3ZbZ!_;g z13ON60#jQpg{nc{<8D6g>LvSn-Sv^Ako$O{2-ZN-5^uagk`Iq^BCkjXO6=;StJP~NSPQ$;}0bnJh!1zSXPpfI1^Y$319g< zoR#}2QL)hD6p0DfBDM_UQgqN}>{o4?f)tTjhO5w zbcl)z#k*Hs11|x~2b6+NnE-GulCAoyy+v|EsVL@18x~KwcNOV8E%u)skn~{tnO_SE zbsEe&XKLi1&7&UEW?><3oNA3u{Ca_Y@GG+ygLi~Fnj^=;vgEg}|B(h-UHq>yN&Wk| zG^?Mci${+ynBrJGVR{}rWy%SsD#sk$ehXejy<=ayzgG1puw%0pP?&xNaDs{@$#~|m z1!?;wbe}uZdy;=_IpBQ33%*%Ys0}1C=8_<&s~wT1K&?+(cS`ArCGTOBhrN*TrC&BM z7GlQ+AJjsK{W>G0l^%BY+sH=Z^G=3U)#LBiXOjw#^xyB{kszhm(Q#ml^)4z|1K-xM_=>C>9_LUF8h(MgkXl^o@{0p~JS1nDRjS`Vj z%Sji?5P~S+8UTw5zYnRhU*auB70=-kF@27lfHxqZMg2W2OMb#kPyOCt9Y3si zf*_Od@5uTuZ!sOhdNx77#Ynz|2mb{1{%9)HSyj`>({$B|L1jJwu<%4AF&|>{xfKr9 z_h(4Kf;T0+_X5;}U^JJ~3Wf++YFvE4ul(^+CmvVVck!>V?;b>k5@COf$q_NMvkJ4J zX0r;6Fr&hENQ@vz25+lwo!glV?_BG{zb})2p>icOcXh-F!l4XEi$j8sgz7zk?j_44 zP)21|Muq;rc?>iOLiS&MS@4qas@QQl&^UwvzF(+iH~R5RT8U`#i}jY_l#e`%aYxVgh$rKQnn3xP{Ij@7mXeW+6 z<)f0pc|ckdj6>DC3i~#kPVUi@1L393*g!^^pfw|WuYW6tO!I}{jrTf^X$qL_C71kM2c2*k678zlN(g^lW5S<*G%yHhu4W98CTw0Bh|Kj#;uRv`ub^9)GIbuXdIKf%fn4(4p$T(=HMLJQo?r#s>(OF zHNCUg7$uHLx$}R_ zB7P%d_B=a!m2a)}ATq%>MnjEMyM1&Tn(n} zvaX`4{WkJ6eR^TwVRNrc=zOs1X_jrpcWm!)LS^&v%D;Y*>o{=c^U_VALAx#Ai`hQ}t+@EX2Y)K~jY~_IxXMRegd4>L~=5^g$ zIrO2U+=LSNJP~)RnQXDComoi|q>G}|4RU=}MSY!jo4OW$M}dbiaSHd__?MiTiPu-> zWY?kZVc-LoXxhXeLfRhtKr$CqW8&`q;ad)K7f#NK;1A`m9hAXvVtzI~+;CL9}t{**<04mw{ z=SyT52Fdvd)#$KGGmRw!FXKFKAaQ@p|FxH@cmLzt#^(Oz_7_;gA4f{2J`X41}$E=$T>A-UJH+2yf&EQ1Vv z33UlqY9?@wwQ6k|WxpONwB2PxCbo#ATLbkm$1Yupf;R>?_?;$QFh}q}k;Z+6l=+KG z0;t@V*tjN*k)6qwB51v!PSY#`YUs!Wgz~SF7^5DdOqLpY2Ne%utSyluSP47wQ#mgt?vTkg^BLqRy02n+dl+S){9|biCioF+V>uJ5?j^ z=$eCe#xVQ+WcwL|3Fpu4AZMu*kpGMcbaX=oZfJg*Q~xf4h&wCnVR@+^b_f zEcYaj_i0CIzY5jTqoBh+-#0Q9xz^OE|F@No@hGJF2!RYRz0#q_hiRF{&tt-LVeeMV zG%EcKSm5?vqzo#1Rf|j~5bn8UlNU-(rC6s$CDBga5B)e=`j&z|_1W6G_xtzgGpKPP zS;o;31G{MX4@)B#BPaRJRB-epD{Aw8!<&=Wh2rEN|z%xn{KBnO{4PN;l2tv8UBk-UY~KK{^vI^9+1N zW7yF4Mk8^~cU+Z&gry?dm($)ZyG)^B)n^FMze-IC)ogi4AiS$cyUmi1D(|ezhW6j` zKHD5D#Kq~YSa7!=*&%dBci_eT;OupCc0rSc)iY}by_SWk^u^ivM?qw5&}2b!MsQcn zjO_8HV;WVgi&=FLq^ZFvqj_ZWM2=%{@+i{7?7TLIvn?a{m>iPvuhmUr} zSKo)UgMs&Bg`Dyk2p&XS@J&PlH3%kw*s{w0hxeD`?FTGekCn6KAXMf}vo71k_g_4|~#?byY z3@fK5@%N&{=C-flsqcbWKsG6A(wq~w>Ydt!YqPG|Z>&V3;j=H`xr=m$Dl^Qk4O%of z_Wz2_^0dt;#g8QKvN+0AyG|VUy~W)xfuFk~JZ~MM!rR{f2z(0a|4MCGG#L*Z)_0>x zKl?i|Bza_rG6n<>)*C-xXlRXmE2#zF0{YZxS~lL~_Q2%3hei4t&@yG@GQ$+WvFfK@ zJ3gz}d0mi(@krshf;FLl>GOQYG6FA|`@_K2?zW946E6PBjE8PGKw-Z(;BNGvU31U? z3JXx)#;^E6%ba0rU;ilRx+Ba8U3fUw{mGWmbFJ21H|{BO>(U}_U`JjV!us>;Icmk5 z<`)(Es|$q6jGPY3^3G*1fqZP&FJT@%CEsU0zDO2BmJtsRuhB+!Bow9lN95q348T<- zpQCUg-4-M5hcdbwJC;j5LxY4^qZcrip(4VJ@UZ{QQfMHIA9kK*Q&SDn1#dq4Us`Wm z^$~d-Hu-H`U8e-++FK zXu-k<(owli+iTy%AK}r}u=!@~wiQaMmJ$`S{li1I``Ce=e3|dm3@4j9b1!-rx#%fV zI|lI4%zp>f;pBLYk=!ivaZOJnd%dnVHa*roUN$04s#2q8N-K+vf8|@xd$~#@lSqkf z1=r52+QOsMMicFtIq4kZP431>nb%O)HEP-Jtr}Z4&YB>~xQW7?#6Z5{mnc}3RbTva z);{To(Xo0}5NByXx-2uK3ew4Jki(cBdzcDPp3GNxL<`YGOhBBk$*P3sig-^=Roj(D zqqDsCP@Lw3p{$GsovNu#ct}nqhe)6lEyd{BLmR>-+1;>`s(Aut*F964ME2fsF&KX$ z9x*Jw96%$d%UPnW*PJ6nnn8{vF4uG%qcYv-i($|Wty>o;X=t_hed*zU_D#t5cqP8y zdBJZxX+@R(dv^}5jA2Bv@GG-}q&8{Rw4^!Yyl+mGGN|eYa}sW=djcGo^~SQzyA4aN z(`RxG47M-y_yZxVTwDb{BJzr1isyc%igaoj7ZS*2o?9te$x7WCv1X?@u>!Wc$YirP z)>#AAlFg7tjV6hB&}4=1B)p%EL%c)Z@Aj0YS%|a@;i=Jd{YJqP z^OmT7y%;Cko)NlEv;$(KXVzO892l|$Dby@&l;Ss$sSexDK75g(uK9!Nc4e9Vrxsgp z4(?RtremLF;#I^8ImOf$LLr9Q2BjrB9!mV_Mw!httPHy2jWS_HIEdW2BZy|zE$5Od>{(Zws5k(KLxa}N}(cs-8L@6*t59r!D@W<~fOBJzE- z`7yvoSaz1ym$mfATeC7c;!C~gxVRdG3%LItaQ;Ln3D7NNDFpCa$(rh@bCJgMMVhut z%_#zvxE)zU-G+{U+c47Z&dlu|wCAj)peB5{RId_doWst;^|0sn>V~;<@G}luIj|DE zvFz17TIf$dH95yzL1Ci&WZk<_@#W#A%kEcSPfeR!(BO=)$$zqA|mi%JSt?kU>(Fy&}s9fY#$wfC3)E3J2aw>3*INnbqqIi)s>UqtK>-bmqRf6FZnFR!7f zq10!Tz7#s2hq>>EIez>e__S}6Wq|T~4w(c&bt1NwF$cHD(j!)USm3-0X?C{2iWm}QDHW4gkyf@PJ8N(Ub5toNb?j@cwjw<`zh zai>BtXiTiep1Wpgwv0P%g;}oOHVa2wrE+n7e8{K71jE%4{gqla%4wZ{w4d!LeM!Q* zF3uu@b?Mk`Mxuu=`Eq*dE88Umvz|$-%rns3>1GB<>Lm#$I@AQrF&CfTf zUnw#C_9y)s(o*CfD6zw5NuyBPvZP_>k*z6^WMb8aL{-V#EwkT!(yCA(`6LMs-oY!A zoO3%ZJ8PX!5M3!1lT{qIuP=P$Hjwys#+%4WB*|N@uhi_2(_OR`EQEQ^Q1=U zk6QS-xhph~{EO*)=jLE7;bukVJVZS@6;gAQlcmh&Bc&7GvKUMYOc9+$@nJfg;pbr% z^JuS?3)hix5>&1P=_2x zow2d8=*_K>k&(!aa4ROHii1ruDqwHRTTVp9jx%!PGgrw`A>(u{E(ldr5z?t^iZPO} z@HrVBw#sgSb8Gk`f2}A#nKkG8JNuKp&emLLvhc-bI+wD>cfT1{P_wcF;$FPuEEE)F z4$XX5Fz*9g4%F4n4dKj?1BJdJx)%EDd#=IZ4q#b^(hD;h2Wn2CSxPXCNB)E=3x|WK z@MYoxR&R|^OYs5O8V(c;AnaY{C@K9weuz$sFR49lM#yGNAfF=QK zZ5PJhLlUTa6`YLy6BCKeVyiF^%-$xKU&$5D@y2wdCjbp-h>B7su8J_@9#SnuWOQv; z$O>hcra0(7MvyHf1Ohe1p~?zr$0O-7aeu=?FyU&m(}fwc12m_wEhTWqBi}*)bCGE- zE|(B%j!!Q@0R+L6kc9leCoICKrGN%z>R9$3j*(<3LBy$@zEGoN;$i~340LMpFY#3P ztWn8KGLJ_h0z9GWG4kh=HL2aa2VVbqAzXY8((Ye)wJN=x?i-Aj~-b?X;)Th(yYozXHYU}@;g(m{yl|R@r5uWMS!L_Yoq2k z;x^Rx?yq4rh;t(Cn%YRb;5-;uM#+kW`nsSE1gJkm5B?I;|D^p#6roCt%@Bdkh{>>~R>aVU)pyatHWr8!dGbEPY1$p~cT@b`x zZ#$pulWE=oNk&3M!9jyJvO9&KjG@r1M!Lx|;K4EM?M@a{6_(=GHle<9sKl#-o9VJF z$Te2U%r=fKB(KC1M)>mslnvAw>>GtiqzrEuecbu2&Wi?ll+ z0sMh=Al^zmNj_>^6m67v+W&V%=|bxo?WfzqbwShsi5*l^u-}#oLc6!C{#GrwyVL2@ zJ##-l{n`Z2bOByoCEnD5ZpIgt$7!j#n%k|(TVFuWFmVt8zGSSx`h5NpX5pK+-fxHH z8~wiSNkyq@N8u(kfMj8xCzyb_x2ASONqtSzf}T#!*>0ypOJ=#DT+V;J)mpoCF2)AS z8iB=!wT|rgJ+qxwM4rF_Sb+FkZ|m`rw-v4s$Aok|!tYD;dGid+Xyu$w-v0gu+>KgV z3I#rY%N9o`#nEW^C| zbT5NbprlwZeNg|I0Td>?HnYAtm^6eCxqY(MO`jp|>t~~6CLKUqu~JocJx(I)-Nfpw zZfd2s8Et?M_janl)A`NT+0VMJ3as$!;LW@EG<$BERckDpPGzEmhbclQ8HYGN^R&l= z(0Ge?N!kkNKUC&<0pT@G*m-P9+j69IT5{?h?7Bf*BZLUOie_!y)Cqc28tVv1NwowG zLG)#zvaKyXYiFv*F(p4nlV*?SAn{V)TlfpSOGCfxd#OIYlhZ*NwYfXAgQCtO4I^F{GPIu;?kQ=1A|SBS2^zxv{irj+Vv#cyjT$Hc<+D(mU)dO?t9O9m#j3osy@LhxV- z9@wC%;S|&+qWkV&G~CBD9ea7HaijhVaYwlSuLGFFQEI80?LN0Nzia$F`d#{WCM-P^ zsX1O&xSfRgV&lCH1dKgf*p5CbJBS>M&Q&{#Dqi5^C2FMCeM-$n|CcNGJGVu;f5_r* zcJjm{k;5c1$Bn@7YxMIm7{~v-Fs`!tIPd$1TrkEn zla{dtfZsf9!ak%;Kl)-J)cx~t)+y%%g5WU6Wz>ng1Nc7VsSm1j3~)wCFuX zUI9v~_yw=$SKje*`KJUOG*ndxJ`U+zevFvq_3Um#LMa#i%c<5AloyhrJRcEeVCyF` zNqt@kU1Z$x#yomIso2U4S;DCQnE$b&&~WGZ1t^Gq%FIcwZ`1bda}fSCo!budAm85j z54o_hvGI8vsY5BF8-i8YysXJjlulglj09O{pg*F9z#${dWHZ}akz|+kHQTk8)i@Lu zo?)1P={(oE;BY~`PP-G-?e>5^VPj)^DPm_jLQ9cB0s6{MOkxO5M#qUUz=M-TfXNB_ zOQ3?Dysu`u-riT!Df1E#a8N1lRO0>aoLsBK+g?wV2%PBbC?x-*!s%%5>savHnUIsw z;3Z!m;qaD9_@20WuFQ1Z+9cTw&z9@!Hgh(#v^4tI?e0PQa^q8LrKZN|x860Qy)7f!$c6r!gBAxHk!AtkwU`Qd{p;3Wmk-@z3iqpexO zPP(~FQOQf~hc$yb>yo>n*P(fmz>+&#zJyp8Ghj-2E5$Vgv?S6P^|`KD@xr@FutS|J zwt@K}eFdU1`o0748S z@G?2!RXbDlIG*+1Y}+LVE@Ht-F&iPRpe=pUW-?AP4sn(vk#4N4wR1VXkquc9>`!IW zI5Y1a@fEA6WMrOf0-J#%_;4k#CG~z0mH@|4vQOyGQCyV;+qgz$j6hM+=DN9BE9@on zvAkqt?I`2Z=fe%sSW>H*8=xg|o$sDN_)M_(b202USL&H{s@s4%sA2s};V3EICIP&Pf5#f4S ziPyWndxA4#oN-vIlj-vLBit7``&3iBOof06!rg|;1M-<5vNCLwVJ|F+61l(&lqm*P zb0g|pf469e6>qi zVo{Wp%^VkCyIws>qFa)lqpHV)Dq&4KO5v&3L}jNOuCzm%nw0w~JW=p#u*M!tH&J~6 zZ4LHr6y{XCPo5|b`W{9nDd3Kw(|A!SHR&#yBIaFM7Kvek2YujB@b27J}=@EQbPk$g#rHSLMH*%>VJ{RM3?=;x;mxEddnoSHER2lAz zi;M)~E*%;MKVt8pN%Tip2onGDX0ERI`X2Rcw5$N5yk&;kK`RBSo#}#r6H6zP!SVTo zO<5IvU`H`W!Qm>xkh#6N<{`?FbVTV0Q)js(>I1D*pRL(Q;j9HV?w1kKs|;AWD1p=p zqKH!;ss+y{IDA1TZ#z}ZD;_rI2VX0XeK|yW?+jrpyQ9z32qhjX`ofwoscvjTu3T3V z|84##@}jTtC0-g6veNsj_J-@ZqdwWJdq&AiR1duPEH;O}hb}0A zLO`p~a9$TPioi1xwYKnzw-}lWFeEYejUMzmoq;rTDjZ`n9^|oRyRYny{4uDQhR|md z?RA{E;+f-zgg)->n(kUOj<~)$QHz<|R%(hVe;Iw3$o(hW8rQwEY2RPl8HE0aPxny| z$9im!4ML}7eWcNxf}B4ZKj#NL%*Gttgd#K)*NU7(#wq87sHftlv`6o7)|7pygQ{JZ zIh+rOQu5H(2gMJr!fpYMS9rH_UODjlj)|cs!7}%$5qP}WPM>ug64(zfgzH`!`pV?; zz@c{%S+4YYAbGriuY!pAGO;op7I}#+7~7T;*%u4$4G^7RfC~nzpAHTkF={jskd?I8 z4WRwyvA9b^o371NGF@3%tfik5kiFo7ZX@vbUcl$)1qZ79BX{E`Mzb+`{cjs+M*%+G zQ5(hObU0gh*U)e(UO1~8GKHY@z8mr}>OUjqq768fR7jDv1GZW3_{xu7^(NAA_yc&6 zMH%~^GClyv_tMeO=X60X%Boc-{hRO#uNJA48I!L$kZbXJ0NhVwSh!DKL7_;op(Baz z-$~+If-N7jX##yde*CEXU=Q^_n7n{4gM&9pzxMW4wmAi0sNHh_-CZRkpa9;Z5G+=D zI~qefYp3Sm07ZjMcTue!r8_&uKq?*D-k=7FTF4L(%>eMh>lHr<&&Tfb{&~a2`=02= zMdncy;@$vqn_y-$12NDg!8-`S|1z(4I%lF5j&Bot;=ya$H*O zhLe`Q?0{}smVn0z6djv{coJdoAv(M(YSF1MqkWnAJ;JAe>B**D zbv#M6M-#f82}_n11-{~TdyM$)!`UurqyI|9!~A#j@^p&3(|RRE0U;+9J;hK0)EP!N z>d}h2;rRX32`@yR3LMvhkh&9WI@hE!2@~;$+=&4>T8Eqati$&!WKTeEht)Q<4N}RN z+%Da2?&k4fTUltU_cLlBTLJts-_)^QS8!BN( z6kFD$Bj0|s&gr@_gC&uR#dU&L(t0g(PcO$qf8))!wH&nBnNI4Zjkx+1ot_o-o=SE= z__FqKff(We+|kIW%x+GHDY9Iv4LgdD7d;aNa;r+mxCCgZ%+YgQ;}_>C)pd_>Ln2Xf z9}pYx#Iw9#g>=$klDg2e9P54)^YIfajADaox)|lDeJ$eQu zXa(<2RJAF;M8-|pluKL;6X&3j7CR~HMdUD7$ey4X8`y0UKEPEzU~H}k^LT`r`Y{VZ{r zC6FT%-2CQ!Gv)3tSq(LTt967K3Jg3bu}FmsCZZ!ps}i`WqDxTb8dY|!lU%D}218&i zG80V~BbuDBItsepP+sDk*iw+_A_0+^V$d6t(Phygy>RWzGF8s`1%V?MdXYR=CIf1? zHmW@NQ!pz?{EhB>w+?pqvmEJa(~ITuN-I2zOf3Z6F?(ZzO=`tK1UWGT;iN0f7V zHJH&kNPd;CnT~KeFY<7euOz?PD~3A4qoGKs%hb1Vk#b$IvnlCRU5o6&aR7hQW~g7= zs!!w>zqQwOE9}_iP+&NVU1H?c2+|-kk_%0oKV47PBh*-+Qq;2!TD7U>v}fr|LMy<@ zfLJZUTNi|nmxX?njMQ-;Fp(4ekhw|AkhmLaFchcObVQA)9mP`kD=${Nbt%EW#tLqW zgPh3wI>ND}J6L4X&clnKk(zE9BALqW)cA-qg~zTns&bGufoQ=rKZIoS1DzE{U%syN z4HbSKUv+~Xa-RBfVpNOq*hgmr(MT}v+imCV7vB05H`P*>uU{nA)5X`!!Kt#|u4Z|v zKs``KO}?={S5-4UL>LPq$7r(^gTIjNK0^R* zgE6??ZlSNbN(CRZgUu1Z1hmZOz6Qld7b{Aoyu<1Z@>&bUS0@Nij}Kj~%IyMOprdCo zC`eV}0R>XPq`SosXS$S&X-Sk3EAb2+JrO%01hT(-V346^pi$A#$+c0$iqbuW$${!) z=NdVzjS<~6HaZ=wHVO+je~2L%HMF+|=oq~OfrP7of+unm!VEOX5ZDT&{z}sg7X$)I zpBO-~5CmL|fleD>5FHqU1-wWAf;I}!a#IKDfB}Y~fO)F`Nnjs-pb9Dgv>&AXHcMGG~oZ}z>43%>|B6az%8)ZgxYJH9|WI(GOq9w!083Bn=&a- zd3^^^Ed(f%2>?{50E+P>0M)(c{r>kJ!1)UM0u1c}a>*3@AKS>9f`N8|X9NsdZ0jZ> zY6w9%516$}A5}*n#909}2z;f7?s)Y~5vXXA_-~b-g}R($vkl>QHQNbnq0q`mfRgc_ z$)A_?KEqvYjzG;st4-Q6SkxO47m<8s52URBynM)Q=mm%Xknextw7}8k$9`>Eq9*M& zPMRv60k?XZo@~vMMjOUO4`>SNc@1`HsDN40Ql?Tp@`$;2Q_1!nXa6w9C*0eETD~QB zHPhM&7C)O#&VeDup@ei!UsX5Pga`FddHTqGH*wSyrHrnRgDrv6P|B~Ld6BQi)2nLD zEP{NF>wUF^xgCg6Q}3Rl5QR`tS4rc+iDd0Dv0sU#0&m!~up5bJgr7^l-lLAQRfmFF ziWcAu6mlnmUH+e?9Z`dKc0ao%6XuqP3SxOaqja!tJ)HrI-lGX(kh%ZkYkJ?>Ee|E# z^_Sukk**6D?bnh?C*j9LPW%PoqwIgTMySoYa1Xt zZdD}^KO;(Z@Lry>?aPpX%AbjV!Fd9z0Rr_e`T>}De) z1TznSJ3!4}$I#39@?f5r&t060d�GqKzX-D5s9*_8fo|*i{M>psZy~-n}CV&cunI zU@&+MWS#V+pv0RSuWCXD(4N%B$=Wq3J`4@ZbK}5#unZLJ8@6Clgi_|1ygceHxDMzX zXh8J~7Rdrs?h`mc9WMao2H0zvSqJKRT#__v$Q}*s==2FVf&LCvjg8U?nSuw4O=^QA zpon1zzmU@pHj7T&ZB2#P7FSuMK9J?@$BYauC}kM;gSj7vXTw?`jKc)+nWDIm%rg|UH5q9mkd(s zXptaCfM99w9_4}86F#v`)`~io2havPiirG-I_1{lwYOYm4qtzW6M=ZU~kKobgU>6&|2lMW_j-gaR9bh_e-HdR8D`ZIrSHMomIj zluQEvjZ!4C$x@YT6S(UW^LN>9^?&F1d$_=2Oi!f>59fFgWj0mq;Ui!00a(}!5WnKe z%sL~`N7dth@mme&es+xHM}^;J``6Wy@1etTw;F$eL@+xJ4o)kbeZjOuj8{Z%{~+T( zv(9^CXq4{}8oX4a<@YeCbI0&)7XL#d`?eJ6r%S36KE)ey#>UHJL`4VQIc@JSew$fd zdIS&BpOnb715a)%;1Zjl;dl4!5(hlR{hJ$&^fzn+%h^t2fiM<5ug`(jwM|EqL-U%F z7Q+D?doU260gG$^LUdOq;;78PWJaCmQ%3t`9`Ubvp?12q7iI?4OZfE>&UPfXpRXrT zWH}Y^y3%5Kaw_qTOvRjxmxZW5Pc=*HKVb1h-n<*e?Jl>U2|{?UNIJ8=3{#smVRNRMa5 zc)H-V#Tt-yW#a2dRfpckn#Y}s*!)QEs*K1^FrgiF^>kyyAohlT{vmdv@@pnf+T>(` zJ$OgWph->o5LC+pIeHm_RCR?NsAWj;Md@hhk7jc z(1#?xW6%!i66B<*L3&YD>yT$jmY#M-K+4L2eBDf?7U|?Ib({&0?R+p zl1t3|svi;ELg!om`~&Ln^SfrcM71p6XF1@^IS2({g^AzVc8|}1#T)FXVN^bvgMm-q z3T4Ph^9y=St;ATZN_#Wx1&4R>%k|IS%Kj>(dtAr%^4zA51B!xSFW`^ScS!9Nwazhh z;ry^9=F9_veNw)dfJ^nle=T-N_EbXgxk(;U(S>ngzeCkU^GFKYYTUffO2`77`bQSk zmYd+oi>Mk048(J?E4-F9<TI!2BaNaCu@xKtT_V#f59deJ#)h4%5z;T_ju*5l(F@rDk1RtFWs?sd-mZ)y ze0uZB=Jbk0AoGoM+f&=B2jb%-^Q(6Yv<3VLW*&R#*jLj5iW(pI9<3;Dda@dXesTGC zKu}Ww>QFgEY6$$qik<8;L0^UpfAG9{I({7fLF#AuwBqaeWT(_>E>zsSrgkSl2w=pE zF*j--j>QAz1M3Re#A@)knj7$qfSq>Kg|=f2*pl{(EqRvjRgj|7GGnaeiBDX);nW}~ z&K?ibGAZC!+EGwn_xcwJcNQsDxcmbSfVvS|cP-xLV<$G-Y>QCX=1JM7rv2m2F^U(P z>RNv`+#_>%tR(hZ>4N>YJrSz$4*WLPcKbOqd|eMvzX>h*TpmBk%qGFV{;CGJ@xV*G zDQEtOV%SPNHyUgksMP0QiQCOZwQRywMEeoH6Dqw|!+35G0Ak#=A`Y1$cn`HyV(<$P zEU!7Rn;~M+SiF*kqn^B9g8l;d{{&cIH~5)sQ$-+Z-lrkym61y#5mT~Q0MZkA?kD(1 zq}7h%g|Sh2^Srg+NJ#k%Movg9=0~=4v;wl{PJ(}g+)@eT`q8#30K^Lwdyd?g zQlp>f2yj!E-A*=i?yvY{_Cte3JQ}NcjWRyE2S`-&m2hKCmg<+kkvKgp##{X__6C2{ zx%r*`eD0B34a<3q>3v2v-;iiWCGr57#;HyIS~GHW2VK@nL1-Oaq5FHJhyHZ{_Z7Q| z?w?%433={p==>A9>!i_aY-&f_xZNTIYHtkV27yM5@4z5%$S-C!;^8EbmQFASeiCH? zkm&Z4Ue$)RYi_OaVu-yasW90U}47%ZNy8q4#jGHDGt_QzIw7~Ypt|M~S zbF+rwUwJ|YgzA0WbVW^b(ep=3m&wroeFFjBk_?SxORdiTEfXWV>8I7B-BGW*Z%Pe9 z-XQ`&pT*yYXw_IA#Ka=I6BZ}@m^L{eSHN9(Om&|hgo@<*a{-O*6wqIz=Vp*U*_R&TU?4vDr`ahMoHiC_?gB(p2J6y8zQRX63uxa7_bMM7jK7{T#bhwrUXB zaW8eaO5qk+{-q&pl~3xQKN_^)d1|uy*`}kjeSh-9`KJO-`sl%l_0wgg8pHnljPwvy z!}(IbwZj6}b?`(CrR#s4RA6f!S(5N};6um*?P6`ixCeP3mI>J2)3Dv5K8SJVV( zml%cdhDfNrXTR?%Tjof6EUq=X3)G2M2+V6>(Vt zoMSpVuHY5ZA%&yIx)^i%1nbMrD}vOC6el(`^XQSVzm05dYkt(**~=kiMtci?M>OB4$J7iQ0ZA+-a< z3mBUOHUK0(V~K?BU8^86$q6H%c8%`%^5@{b=LtKl@~H#>2TTyi^GC5h$_1{UXvI{i z{0|e~R?XxF65)`4cMflnao)FEN5>EuCy%p2yY&5$dn$BqAdravyMK6Ie6L|*JM}*- zy$Od74aks<{$uffa(P#SCpSF2ZjrIG@pGci=Hh9>43p14ru=P^7W-?k!OLU48=qg} zckRx$PoZA8C|GKl?|?wi!CeFo7b`3z$&ruttnm*zD0w@gYx8<}JgdkzAMgwWyl>|9 zq>knsSMh}a6yxaU%=Lo{5_UR zY~-xi`1p93Y$cB$YD_X}9yZyV25E-+yWIco>%Rm#^zmyzP2Ok|Zyg_o^kyp-eV1e* zY)792pTZa@0?L&gkapX*mDuUg?ZN!!WOESi!FTQ`H8cpn=V~nC&YDiOmb6T&32F6T z{qR^Q(`-*V!zhLGR*wPjOvRZhh&F{YL7;d=sx-z8JN(?AGl;^a^wx@&9~x`TePYx+ zvRd@MZvNJORc3rr0M|8Gz}oR_4hJp{8wTr$B zUj%=5lT^tO=@#dsdiOOn>mz-slBB}8vub9~5T&5^frrs2sN#gE+I-wlhItDxv~{iV zwIrg=2PgXiW@lyedOSb3-_IxU7RJzXqvt(V;er39E(HLbCFVPPIl*wgtYhN9BJ52x z;ASMC6C6g>-hXKk{>D1|wiLjchb$!u19QECByD3iS)h?f0>v+AC^Py%FM;qsj%Y)E zkw2;Sj{29G?x1fm9j%SUk>;(#K2@iVxO|0JlQ{IQQBPql8#Y7*)uI5eD!cfm*8+Uc z@zYMTCcv^T%`D6YoNI0tR8|gi1bz!cCT5eB`#l@e&-=@DDV)+w+SI1)YXp+_DOw*S ztMMi1;+kb2y8R?cLC^(~AKU<(ced~oVLyb9(x|*He#7iq-1f~aQJ|sYa|C584V}W) zWlbxq7sz6?yV6Ech_Vd%QP3Jm%lr$sc<#fkj1AYNwj-WIcwJ@6Tk1<46#p39O1z%F zn3qM!{?k<^V*MPT>RP<1X{xtJx_gK9zop+p^BeNdbm768ZR#wfXCB%iya3-N3ZTIq zC7m1EWHALGR`=TgZ`TF6R(5OLwSf)le0HLDb$EBS4aRx5<|rf3D>yYBA$}Sz5#~@6 zuXHU29BjoBb8!%`{{V>yvug=&svisR*ltQ)Z#O;aLO;b|JDMXBFpd#YqkgA8IW zd(`!9Sb2B`HBeg`9N{}0`ym2QR$NIlu|lWQo6glOAw@_8|m);*6lBz*zfbc`}<=b`#83L z;T`K<*P2)qqBbx4qGio}uY?(n&U?5)S+}H{}Df4d~ zWRuSkzDE@{hb1`{94(YWyvT&xvYU^dYV|U>?P+ZxqixxTJ+24>;OXgs@R^M7P;T;S z!Y8%yvTLl6kK-5}(_-9izomcrCro=^JW2n*mjz>&zrpmR~WU z50U#3t*F#SNaAJ;W|TxYMGg*bL$WMmTMx!dkfMV5DJKp{Bu{3%HL_fN>p8=bHDGDW zfk}_ocy;Sj`$tk0O5pO zX=ikB5ywPK(^EQm#T*^AQhvO(_Vw$4Kc?doZv)feDp{!s-}%8*v^;iJG$gZUeqNh- z{DuwPaqHc(WJ+#Y`Yu)z1B&P$uX>bcfr~h2DO<-L{cf4bu zs=q_=NjT5%Mby=_Oy+oE5bn9NNj^8pD=$_SYyx7JHs+X2WX+3*m*hCQ_ zaGka2OJQcWX|d2y!5g)e=B9eCs$I?4A^hvM@BHbJ>*gWq@ip%Ft2-9&%8;M8#dZ5sas_GxtAg0c>>< z%yiGc7S!dXk1T*%Crj){o%-JqpGf->@#^x^`U>!BY|U(2*U1#$0$dMv+F^CdHg;a# zM?35|fGF3`Tmo7>7`eZFnR}EZia~vX9U;Krg_`BKbD&H7U50eUMmrGy93*sF`Jcj9 z2Uy{8{m{xDxW5QwGNZ0D*JomNE)Q1wzD23j6fYEwjFi0#&g%?B zQPTUeP*055r_n|79QGOIo5t#M8mq^`w5=>(6Wh?Vb<2TPt^RF^OYwtDf98?ZP!tRd z?{-9|H%@r$E3=Yae5C7`z3Sd+I6KiXam^b#VFE_}H0 zuD)!;q)@Ltmz8m#!$)A+X~b4fFp-f!s;zn5WWpf@_cuUZ> z^dOV+Hcdq27kn>KNy!$55@JJdx-_y7RMfE164aO(!yXumlM_NfLTu6HVOpTVd4GT3 zX`fkJ=l(%UL_kz*z@u;9=n9zX2l#LHEbEVzL&+vx?s=q6a&@==h>5WYIL+NQHCxq- zj{;CcrfTs1Yw>j~)Is=e$f(38H$}tkv^vI5Uix>Z{xr8^EbCvQ?{^Fe4*^)+LjUy@ z(ytF-FQWn`335=YE@y}MUG{(T|C<0<{?DO1{L9xl>`zVp1snkWKMFvx|BnU_ET+Yv zi_YiI4?v7#1L~sT1vx^0KoDF(Bwp@pzvGU@#YGlVVYBfPKWwj-2gJn6lnjVBGYcT$ zk@Gs46qgtADs1gb66`?4CG1{5luR*Sjt|{`!V!fDJx;CRJ3I4Q& z8WW@EgUy+GO#nn7_A?7j(_10k_P%RjF(7XNkjJB1UrOs9^S{>)WC}hySb8<<<01#$ znhgYeZMihJi@m->l^c9oSdvQP&T6O&_FXuaQ$e~*M74r|l_ zU?CpO^Q%&_^Jy-r!7B^xq%%uypRWpYsE4mqUabT2pMOzh)w{)RyGdtwg@D(3`1H)e z@0LLRNrKJ7dK|!ubmP38JNDa88Bz}(VNG)X=5_&i(0qW){0cNWi8TEn8)Co0eH%mG zt7g5>IjloAQKP8ykFFG;q1e~vgVBqVA12Rf5ondb4-cumDheWb2=mXJ()>_o8zj)J zF?FaO`wB3DuFu*{m!#hI$Mw;=@Z`VAeeC(6c1zeMPTZ@8XR03gB{~uFlG9JBAvlHs zetw%=EMmonI3x&nZM9<31Okl9sE{|M>8?VlO<1dR73^h5U&{mD;$7IT@G+Zrx3ZHz zgIm=eI>of(L#K;UiLU1&loG<%vIx1(g+nD#g3Lwu&s%hlJU==e)L)DpdT~-yQ0)b4TO}1n>3K%4}mjD_$6dD@&(1s>VZG^FBCP{54v$ooxDTjn4-jcFb|8p zBnO?-D+2kc-Rx`!fwCk~kC@Z$~Ox#{?8EF zGl$+{bA2S1ThMlCZeH}o)0xBgP@rXTs@$T11XshzH1e0>y9EE|ER`(sGxw)<2P^mB_*tcI zceuuMy1+{E`fK9+TJ!vjEebdBv^)rTef|Ck{_%kn5k*+Z#l);Vl_CoxTgT>rTZ!@+rel(Hs{aYK$SL zhBKzbM0?N_k_*mrNz>TVIx0QRb_)fceS6++Uv{3_kJ}%G*YFME+1SknjI?Hrz1VLHorriLiHKF7{|_)b zk1HRg+emQFeB>_KnI)a1WZLEN8Zu!#qTPt@5&6gY9o5-EKG9L{8Yj>raR%0vd0vS;1;#}c_^j=+w|-qy(z`p8)p{q69TKVHj#a&moI+c z9JdOyiGs)2ypFl>7ocevmW=W7Y5H@V)(y<_vKyA2oAbudgW{L#ouqc~$oXNH#{JMn z8+;G_BrN3hoW^y1&i4e)458)14e$*@ZQ1+9GO?M_9z=rzt25r}kDcEPG!`RL;AZ8H zZ!rgm=M;)~UNV5?Sj%NsZ@(7;4m|Fxa%f!fA4t^9U&ahm-x8rDRmj?~rV@JH{NEpt zJ2M6++tX2qge{;CV6>hMos}iRI$Y!WzbEjjmI|?etWqOtd;3i3rzsp+8mU2Q z0*Z3R>M^s3Z>+pMWtFSzx8#u|1NJ*Z@{&rz_9KFZP0M|Gj(8T7?>_yek;Pi_E7A3AeQI-3yYSb_xa!}D^KGGsm z>l^D!or?b?qacSDuxY^E&6}KdXj~3Ujuj8X4)Acijtbnu`gV7>j4cK{%@pxXQ? z$7c;U1!Aqzz}|0iczvY;*-tDys~Cf9`UDD|tViVPw=C*JtnLrdG1X?D*W=23KE{us zl@aw6dmeBv(-ZlqCL!vTW7#g-JVo=JHneUcN4{%2L&Y3?ne7~LP45q*p9)wE*pSku z(&Ymima8LN;zojKvZCarq@}!A_jsz9-%^G5MpWJ1sP)aAOIadU3{>?h=^!nnHhNmI zSk3P&KJpa(%h@x6Of0AJH@ikZN+(+b<1#Sm63vaO2AfiY8Drg*ZL&1)T9vcixzi7d z8VyTD-@Vq&;xWrsXnzPR3R0KDHIL}7!Ig1m@!yuvj^$Pg7n2gh2{3BV%<1=z6Fybd zNDq6Ut)zcp_z|<#C(8Hqiy5iz0?e)8?Smq-)1gRl{B%y)g(&jLweTdf>`z6T7Q;K~ z>OFQA`k`dnuD+`tGKbijLLw}~{R`4n<#QkGjfwagYDvyRshBAC$BIxO{nu(e-FKQ4 z$is_Q*OY%sYktk@Hz&bmm_CS5C`-JL-ku{Rl-Ep>U)hQGI_=vzjWmP5XM*>@?NB_+ zJ{fuOpLK1!k~pea*qd*%?nrziWsi?nT!}L`I>zm`Go824$BqCo@_32Ipwd-dwJzg# zTq!AYyk&uO*mk+SMEQ?t(+U+wujEH@+TM%`_j3lF#p_)s`*D0n7Ns$A?8n_)yETa_ zy_8CJ%dCwv!*Rk!*#fn(VgYCH(I6dDJ@K;LBQ@)&EnY=~D`6{7p0FAfOzax=WQ)vC zi6uBDTMOm*N-UJ0Gvr6Vh#41RmreaD)d^rKL6w&vmHASH-|Ej3=MuftLb`3P{gqx^ z>#IkUmhYwtqBS`M^_WRF9g_A{gis#_weH$i4sIs2vK1tjA~^%QyQG|I>aUuKRc2X{mU_P|p^83>N|Ul2 zb-8y+ue!T5wS_2N7w5-}uN}$wcG2J0ZnaWBWy)6gD4Hi7?Ae>O9$~eGT}=2jg_}U4 zoM&HxD<47M1Di7OHS6`(m_xH)7qy16+o<>48_heSV%km;=f1DGqBYZDFfqk~dOsA+ zC(nh+Vl0LuQK0wUPvt&K%H7PgJdP7uxtarpvJ1yl*qBA?1V7m#%GnYDBIG&Mw7B03 zCoEz@kfSBLpkSd$lNmXK0yiBjC`q;dW9eH!X{Y~UQ8_tQ{Vo#?p>({)E_Z*qC4__* ze5HGEaBy=o4{fPszSWYE$^am$PnZeY0q3zD{ zEj>0HcOlFiiKC2E>6gK8N~?{BXz?I&=E(~4$2W!Pp7Sb}JUJodV@3M60{yF8&q{(2 zlRXM_>U(aj{q7nD9ZJz;rUt2_PaGDT5#pf>-DI&-Hy_Z4c>{7JUNOEj6TTxU@?dj+ zvh6T3gq`|6MC^4&Dx*5O%TT7ziej?v=350G@QL%3mLWyE@627ErFwu$S+*oA!QoCbA&we6#nI}tdMd@Pn}+@ zFec{~8#!Q1Ix1Fx3UTNz;7r!hYXU-_=WQ^CPE|Xs3W~;dV=)ouq)5fYKveicA3!{URQyFh2 z7zP&%V+~KMo{32A)31TBN1@@qfhj`rCRhbV9Nup@AmWrgYXOb1Bli6w(;h-S=wJys zic4Mh8Lne~Q7ofV1Y52m{{H2Xfy?b@#$6NBhw5r0cZHVWTK7K)2Z92CB%(fL_@Vg^ zm~*-G5Q~8}5a15QPLC{oeBH0 zWn`?m@y4IVc5Ta~ZdT%tKDNAK&XVk#H3?D@Q@9-32xu#z3^IMHc?i?Aur|c|7C$y~ zi1Y$Qs2WUv=y+6n>ge7>18x23-Gr(E9MBev zb_zxdq7*vCW{?oIGV*(sKS$_DoORNM9XvsKQ1amTy%5q?t_{^f=PPE%j?8i0N_^(( zkL29ewc{ptV1?6LLE3&3=2>+)O=0U0Jpm9_8|d4|>4Wp|jbQ%1Q_#sK9{2k>I_0ON zrp>j!iBF)4a`M8i@ogJ}pcM`?<+kOTJTXZ-C3Z76LE*xBDRs&wL~F zml;fCvoZEI^a&_^SI{un)_P#`lk)?^-9zAez`_q`zuC`4(xWmo%be;$9fITnNC?gTrIhi?!Nn3pshj#F#r*~oG-?|%n{hL)U3;gIl7P( z?->o@$!F_4c;vm$?@CENB*`0I4HQWf5Wj6i8ph+A(lCV>{`0=qX9h&qn(1wDfc;uo z=}+XB5pK8*Nq+Z3CkP?s=K+a+dc|T@-)&paefILT*8V$cprf6kWSPcRpyEtj22y~v zjT%^36ihs#fNb8ly2e*LU{s(m$}e&`*QSShrK1Za6D$Da_WO4dH4qh^?;gE`IP_H-(25LH_A?-8+)L_~XUz}KiCbaF z(R}4iw!mINo~YOfaDML|*n(AOfuB3Ns2^(aPXi{%j^p-Njk%O=xz2%d@K7cUCMUNw zR_s#(L5xixilU>VySRG9(Uav0c{<;JXJS36?B8Bv67BFA8AVN|GM2xr4-i2zqNsf* z5;Zm_%7Y`!XX>2n?T@Fb-!bAt3O1)Sj+zx_^X9j8AY=%YdVP2S088uN7`VB)C#Nq( zd%u5;=wCOmG%+yn9#q-iQiq`T$AoFW;GF$=NycY5h!AA}Px)?M`rO={ZRR1huXCb? zg7?@H$g|{@917%%WoI(~QnI2bso|{wR zNvETj8%Bf_RFl^rPc|zP1eDl82L3x=BkZ}3GnSlhq2GfT9~ycg#d-S?V<-2(?QUtbMu0m7pQ;Q z%A!KUcjGmhn$vBiVIp8MP;!pY5CWwC_b?(fTNayg-AA|aA3`eeOJ73nAb8ezDWh{& zMZs5-8*B^}JR=^69OLg{veKqM)-zPkGO?3H7lK}f`2mH>5eDmP+2Aniad|@`Xl<;h8u_X3vE^k)WNG5y++2{2iPrnS z^d`LdH+MKTnFP5LwAtKC5Y~ia%oXX8;k9;Gc{v!KL_m7}0u&I0LHAQRSo4d&4sRho zicis-!w;E;+*OweL?K|u7^r96TVWOD_hc1CP~dwBlp&dD$<}1A6?1FW!9+Nk`1^Qu z?mM*@74ndqou45tCSE?@hO)f~|4Y>h@62u&v>?@}a+bq05$62}CUi}=aW7weS+0M( zLju#)`LH*FD=C<+GU;H++vi(fwjv==_4n=Iq68=B8GBnP8boMG5+CS&*6q(p8g*cO zxeBtb5S&O!cn=CBhLc|3Y$n+@?yviq7uN4>b1Hgd)gMQbzQr`WazLBXeyHUl{d8gY z^NADd=Vj1sy~HeQZi9JelgWL$ve zH-e{JnX^})EdaUxGJ!rC6$+#3=5$-d@ix|~u{8$h6ENM0@$r1_m)s{9m*Z!hot^M* z`5uYapz+lA{(k?n&W;ZItqD%vjY|rHicEaL>$SDu*mi<=BlNukkBRa{wR+p2#?vy; z`q|#_lgq}{MT7O6-FOPb!m4wTsms089nrEDY}rzKT|v+nu_lM|?E1Nj;n-5X-_U+A zSqYUUfvVOLY10rLe(cYJqYRaMn&`j=z?CaEbm}}US8(>G{W{Qqu={6xiGvi0ONDs9ZG#W>Uz)%`T?`;4yU+k z2J2*wnAtghk$B$LO@gu|V0K6%X@)40QM@|}2}%F4QJ+`Yt_=<<4GP{xPJUtNVzL)1 zu)_m8_3OlRcCRx~UoB62cRXsarD4io#$1(BT9~=tnQwC7aFKLYj28F1QHl9-#)5rYvAr^`Phl7=B$_PWe@dDMXk?baqwH z4)Zu}%KrIyT(|qL$2*KR2$;J*_Ba$xE=mbyPJ5i)B6brFJ?3 zJ`yw7K8U6#qO?-4z-1qXld@Jh2^1=WySO$cimI;Y9@UQq?vd2#i+{t96FR3E)A#%u zp*57tLlMtQaP%4tT9Ll;589uyw2b8^}pZ@%Pgd!8J1 zmY{LD_Qulmdq3;dw@l30L-i8^GC}U-gW>2FrwV*8-JQU3jj&RJ9-=xHO!!~ud&xbv z6*xpMDA=9+(6wf3Zz`JIx~;ubadPZkBIi1PzCsYqyki`pD9_1>G{~}?d*AOWA9Smk zx$f%qdc2Op_10N!2J6stDxJdY4CaVQqjiDMe@xCIT$w*Y!HWFzj!+}@&%>`U)c5zT zO@!lu0BljS2e_xw?*+S|kvY&Eu1qr~N06w#xoc;ba+jp!#%aX~#!+R$>r%ULZlL~* zWL6R!`h@r?l{@@GE_Wsrt$IyY2xcFYl@l)YR{`(r6Jt9eiDNVB>KQX)L_k=bIFz6c!NX}(WcA=}N1;>m%{+j78L zPQG#@AJzA5sBrdrnM&}qn*oL&>eA_RakD(+pETvZedL$!Q~$`)!>W-E;h~m={Kx4( zeVJ~~`uCame~iT6vZmyoiN6Gx{cgIK@+mKWl^>{O$g|2Oy&Us!_Tq~rxD~={Ptxex znpsrt`KT9uc=#?v$BM`^7ii)+=San>P(nf>e=aj{uM{*5BpeGe@i(vg)Ize*Zr{>G zuQEs=3iy3m1^n0cdJgsr0otdi&R85q^bEp+&k2lBQ+v>u^l+-khK!C!K|2TiZkch)EV^})7 zaNpJGA8zG8kMy^nMj^7-BSQgx0UDAlSW``ai_Ju46SebS9bakS4+FOmkILD1h~{q> zFhHSh-y3+jQ21|C@#hbR{Hxm-4ZKP48AkC#)J&Pbz1sU<9hZ^eKMU7nJGf7p#avAF z@ZUV)|2SoIxZ5jgBUiW%-0Wak_p(|`Ze?`94_WzD*s$E- z#t5BL|Mx3ENyS%Tm*MalPfH#59{a4`a11f5+<$PQ)xr-kih)v4Y4aqGAl85#8ENRjg+dDZGsFE@#a7vft% zZ!ZnQOV<5Q&yIGO;F$#P1nu5>^K;TmVF8ZhA&#kG_`prbzij+}-9>rTfTq%^`z#j` zzf3CG5iej7+;UY};}JqCV0A0C#R6ZA_2+Pvs=7uN&RWPjKjs2WgqvMDQD_q{J@ z-&)an%I%Kt;@!S=|9?+#o@ByME?;1QxTLqgKk|#^c!`)F71$nx zXk}cemlr{c1O&##()iDImlZ)n9m2SvuW)5h8qP*GKZ2v4T9R8s1gch6oDLw5uDeMV zCI+@wAb+{KhQ>sV-J|IXkl!%6`f7jxMeA8xTie(~;JTWbF@5z`v!SK7GEqb=)2sp! z)r}<^-{FzN3|vHxVDRU>EtnSE(!3)5>uC21EJEyYLHQ2#`J=?AM||aap#48BEiGsh zOSwV@35g|>w1Yc1R(}18%AtcY@yXGR4y-`Qe_~?-`9{3qBEoIB{YeLF0127E_extL zz$HB8Y2Jz;X5zmGAzQEJHqLC`-sLoMSI8I^shtVP#WXq{ykS9vl5sBR3&2`^dIDwL zxf4nSbU~;+0Bk>o^oeVbJ{=?_!d`C z{cUEUEW#gD@htP;IBo!AMh}y~p_YK9FFGT4K$M$Y@!Ot216)!n0O0_j0`N<%|C%{4 z9MGX0_DELR_P$7k6s|U@*s5Z|r_n)})5I zvWvD24^F%D;7QDxi^1L<0p2T^VCBYJvg_})+c(>j0@qtR7xk8PXMz>PH`a#)Y96Mu zPSW>;DyS7d>aT?;655z}ogsM|fJJ^Li|Y56)6C8T~6Lve$ErJ2A-qTlda3XNS!5cm~w%imXo#G4tm zUSwv9+~)XjyT=_HV^l38Oq3JEF|Le)z{R{n_W&=>3WNHe9V`$qHa70y_^v68298&Zj#%JBb~(Eb`)w@}^2fT(@t$YI$b`ocBC*8o{Sd z=->Di9l8*=$US|rrOD2*mk~W%Yhf6QI*6ucI2$K^+~Bmly`%Z;IwQK4App`BHA218N$2D&s&)ZmoxW#&t1K z{BlN(FU$SON*Z8*{T3qh_~7W80A6q@f4L*h%fsk>>twbq!)*=cu|3bjUNqVdInTsScuHL z^JUT<7es48)}K}DGd$n33BOnGc=^Eft}R!8!%~jiz`8BJq6WME3B3ZR26B(qi^t`z z@lwH7Q91gl0d!_$B7&t8dNpfn?{N)8pciA1yN&`!%yUVzgH6 zcN&!&%nXB>$rrU8GCv4a3}~k}{+Oq6a;DCE!YtiLhVBrLfgGLEY3(~xlinHmsfJy%lxns{9}B$Q zvPFWvds64jKP%@pp(f_CP@xnU(U4?DyAB&FjxPNNAp4<5#CVH?_sv zl)+Q7-1omDB!7TgVqax+lGk#s;$joMo{mZ7ci0r2GZfI@ zh~1{yC3=R3eX}~gT60bZS<@uz1=b!yS|9f-2S{)fzR>mPdN)PW(+4){=`wz9)3v=# zt#}uPXq+$oezt01*dQxQc#C+_zzC)N;A4Zk|38Dm=k3h#tT5_B z5kJ7wf5%STDqFI=SjQwG#}06eo7Q3OJ=YTo44T;*2QWls?~^=k)eJ>QD*zeYF*4m?q}?r zlJj!wPqqJE~S5bUCJsPRqbZM$Xrq$3V@RV2?y&x^6DcgWFH z;eN0B<7fwuZXcY86qA#jJ^rWUlLL)TzoP z>HGE)zK>$)Bn%l}x)e zb!nWErh1Nn4Yj+oF{D&i4bob#UE=23brB@SU+*&4C?nym2fZVhZ_)jVk2CsMe{W4% zMrsok*qH^MJrbirobX4PZQmBvwsebaJYE@!xR#!6y9wI<{AEeTds8^NV?0$oDZl1m z|Ewi2z_;gf>YzctZbf};Iwi}(2$jvcVCmy{Y@GfQ~6Uwxz~e%lD%}$ zl8lWU%-uvW#yBjn>S`$=HQa2E;8PFIn(nI_>^3!ObSo=tI@8o>{xqq?Ux6I;-N=cC ziBF$pnI$gy78Y|zi5^_3I$~c~3Z_Xi^VEI29AU^?(&xt^OsXkUft#18y==du*l?Xn z8>P#Ik(_Q&?t{}PZ`UvTYWeHVMQTD^h;|k8NRoDg@v`XRV&Qeq^Vvkw)t~R`TOPbe z^$z2(XF#CGlTx7y+%95RZWjM!sodxKJSzJ@is_S;&`aR$6n9H=-Q{?$%WJ&x!^)TC zV$hNDweWoIX24pLZVhjT2mizVt$<|Imp8X5G~Z|+&WMSYBC~Tb@0NA>H=<%9RFX|m zX-Hx9g;Z0Ke14L=rg3>+T1Fm-;PkHIzG8|aT31rcUJNGsN9R{=DJ_$N00+kyc3s^NIga&3H*aTfJfW-dt#%Dl z@nXh9xrZ~7=C8jw;&hd#$Fw*%#<}Pyef(i_dz8iMEw$m@?X>HKfB>#K%Z_`FLhqpTtQ+v_|YHfZm1xBrNx zao0$G%(65FQD@#I{HOV6DJ&jrT!Qw{VV?1;l*pGVA7po88g+R5cwdZWIZsDpobucr zK#@{uO(O4&`Vv~>l>%dyev;Hi8BKt5kN#0N=X7Kq;t+Y{+C+B5>N{+D&SEOQN#$U? zM|1@^x(2^sCF7BgUIgNKmd(<#AdfAf**@Pa?M3AOZf^6S@WH5EkE)Jujo8nPrx)ZB z5n1n7h8Omiza^f8MWNbZHmG_h!Ci|%;9BUlAkcsfwjr}?BI_gDwneuSf9|=KD*aoF zwzAu|bhocNJSHyQVVYg>CXF3lk-4Pr`Og|(&O0tr6+RW9on59(6o_Ds4fctSw5+au zHK-({VN%gl%!6eZZimC-dTyt7KG*AQSVONY}BymwA2m zrSWWg@1XG_$wBw#Vpd}h1yqh(m|yB=?iEjegvmbL78p=}R&OvOx=4Dq9}~W|A%6U< z@Ll!EZ?9T#;zS11f_aqxHjZTnuUK zkpQ>nQQ(ZdtGLEyDG-PZgv8a&$!~B+KFXTNkkUfXX$4Xc|5GJe`Z@17!9x)iR@R_^ z+;1|mewsQO_tmtRm{`dY8lSpvF8rhmb=&6kzs|av*l}MT5Oi5^;o`5_lGr)>K3ikz zvPd;+aoJhCabqR3NTunq_BH>4Md8_+6={dmWsK&85=viA4Rhr^f_2U&;Wh2_T9)@C z8zGnlWQHQxBa#KY71r&+4uojgz)+>1a&Ef^ z!adDf5Irw=p7Y_9x_@?5qE6tzB6*;RijspYFGw`wiu{4=mE-&g3H}k`EtS@c)yfY( z2Kj!Fulye(Ky_X(xX%v%)GY8{ekbq$4a58$QKm-J06q9CNY&dy`V;$v+#=yI4LlqF zZx|$eypPiB_x=fh{MU*8uW@4wctH4gAR>l`qW1wNo`ZupD*xYywjd~nUuql$@1x|0 z07VoR7o*l27~n*Ok13E<7H4et(n&rKsksx8+X zaAIfIXm0Vg54LE6#=xO4gON{43*@=H43dc1TI|7_|3Daif0tXgo%n_(Wo$jf;#OXeZ3lgIk8M{jK`|1*q=j$0_pN>gU5lp%`O?6~_ONRG z!Mei->t0<4n5W0w+RvGT&&E9|EI-36YR5rRlM$&G1VnSglyAjr-&GbQCFs_HF1OcvQNh=@3woWeVZklaz%c`eJBCq>Ct&Jm9)5qt{~c z$WT|r*u0z?JmK@$g82(N4kN<(}` z-fIHdMN)`}ZvTa^la==T*}QC+Nhml|qTs3!j5~EU z3u`!=aZ8#^DGMK!ziC~;yxM(!(FrQ}l8%W5&sM!W&U*D5q^GL)sKs)GGP>4o^^2~{ z!u1DG7{Z=q{=T#>Lz{D}sCy7xju={Z@fhX$Vkv#6(Q=(@w7MCjv}5^$P<@`4MpD{nHqN9D^*QrZW>^*Bc$ z8*rt_q^$w&w7>e?ibDWH{SA`M2bjPRZJ5E~|ZRs+60%(7VHM z2d3pntMtmipG&*%a@YVa1X!0|WW+!~W20LT(-qgffX2epZg3yb#LC;5`d`pmtL9G9 z`RvU;suO)8J{mm1@Qt_srs+x<_j!ozCMX8&+2`=Vd+(p~uwuJ7NB173l@*HUI#GCz ztR5t#^2%zO{r+PZGhbvcYd-%eU<{dwUn?&1lE$BhOB^?@JVt>R6_Q;XJ`o#q6*-Q3 z^QlvJ?J9r7;QdQ>4)`^c2cHaWZMQms)WrXmS}M+Ilp*M`WqEaGDtNhji0RgILT@k1 z7j*a1v=}2PBI~8-^4DekU)hoSl7H{X(YC3%CmW@~p!U%l;qz8AHb6tuX34Esgf`ib&CaK&SXT0@HzGf zVaoO=pKi+l9(U{T-kd8rsH7Y&IbGK^&dHv{xW;o(yjpi9OxFhzkNDNKP;wctUMaM` zh*C4pum(t<-=L#SnDO!0|DqFke5IVU<$ijGbFPf-o)$45n{4a4;X0$st;mq5+h)eB z6n%$-%HDCs*+kgo_JmSosvI)e{ErG@!8UU9mz8oK?uD$hU7Bb>A1MDY_OvkO-{#SH zweTx?ykQsiP=+_o%Ap1xlmie8xLF5QF5pVm_e}+0bHT6jgn0}(?ViuCw96Q81%5x! zL-yQ+pMm9bx{KFd7bo>M{q1p-D+Gn%1_N}RxAZtbWM(?e;5&FlbYkgo#wN#ciN^px z^n#bZSPc7utTZp(2awBpx>OklE>UVHeqSU}Tvl6kc4w~^KdP!ocMZXg^7jK_p?4Z0UG>ucTyK$cllKHjJL&68WD}!-f?Ke8^#RLQ%R`+_e{A4 zp6kE|YfB`L+RdBEx*LV`NoaGI-%RfZQeJm?j1x=0_+U% zWX#My6tFO5&3;CK*px~Qm?ZeY8Ep(Hpe*5jGCI-%K@e!73nx_U?!NFMUo{!dZoj;| z1RhNlF67wEj<697bbDgWs>C$XG!p$iS!ULWBFN5cn$#FAeUvkmG<4!Jlyz zov9fi3lIL%Bk=$8uag!}a};6}q^D^XwUPzdFJ>spY?|Vtr%l7%GLJsyy1guC3r2XJ!~Q`T zT@w?R&*m`vslsAu)jPok4fUKmjQG#|-$4FWr7B45X|#&07+;g;qZT9%V>HF5?P>AS z!)0jHKpMO2_RhncfnWHe6r_8IC)^GT3Fv%p%AI6o3^NzLp?#KCe!n8OQ2H1aC4{d_ z4bV|K9H$Co;bRf#9w|)5Hn4?1cB4aIs(UPnfQ2zrvxK2a9;Bb3QFZP`yk0`~1>*@T z9c~h~nncj%hklFk2S_jKa(NsAaCIn8VHDq&SY4g&CQbnhd7qrA2)c&IqQLFf9qVx4|ArKjv|Rzb#$G)@eCU zJ&!x39zAI6w7S3mgy@;(8}fR^n=6p8h|hH`NG-`wgiZ`{rgcEj=+gGqE~*sAx@RFk zVN-n1Z$yu4RLwV+6qa5vYV^{LLQO^(VQ#p^M__COb>w!AfOomk3u-)Uc#jc@RBJRXuz9+4G3N)hArUN-DV{6)fCU>qTEb z$VW+1O8*G1aA}R^$g{Udt!d({5qYtwZ8Yw)tCoj-!gFlC?)NRjn4dhzfs?bOLM6-u zW6hE|zM;rc^MsqZ^3}-Q$;u7euo%&lRBV3!-olH8fFuflQO$taHgGCeK8|K) znl@xIK(Mbgm=~q4TMD{sXk0W8auHE#=N18+FB5%Sz0ZRZtGMm4j@zy zVA>d(yz0e?5$0tQIj0|0ng}hJdiBCL?_tYM_fC!^j6lV^cc(x{=B;pcndIkA?ci(X zFpJ53ljw6IeA~DZ`dsE86bgV|u}c-5Jw19P6LMVP(qyuzHiRzni$KjR)Q?F#<3QUc zTG-u*s8C7a>7M9|T#^XGLv*J{%g3-iG>vsL!6oqre zGnDY&k8Vrjkqmx)G}DuCv5VKTw@o~vf$QvbC(Be%lJot^d-@*+(>howecOcfY9f~E zhNX|KAH3jsQ1aM`r(2sud)Qnpd2MjFBd931vtG3}Br)EWqI)V(H0vhrE>n;Aqak6@ zoVM!{s+nX|Xt7_15$)Tr_J17`l7hb%DotY6RSUX$A=`<+x~D?yhd!xbHzci$P~V*!j^a z>^3kN6b4Zd6ESjwN!m(I{^q@&#UQ60g;qS)5oB~H*5=gC8vjbX}13J`J3^0K5U2u?T zHvz?!>7bRqo&$pC-Rw)CxUfXN@nnb@7tYXRo&N@T;uc|t*FSSP&I`(+^v5L2_&Bt; z*vbA1g7^lOga)2)KYJ!6a~DrjaaG=U=Lx9ldHPiRM5dJTEHLE~@Of9hC-?}$1U*hN zzq=D%A{_nR~Zxc6u&51L0?MCIeTDLjf_fQCxBEMOt9{(Lh<$ur;2+HA5yj^SemxHNkBH3W4L z$Vx+=EzP1T_(kPxr~&1pyw{X<#NWkgMM<=uw|eqM`$kdVM%V-0%c z`(YuG{`vCgUoUfb=lcbQIn#@U*X_2TuY-~uTm)JgNN8Sl|wSWP*_+ctP!vs~}&Qwr%LPa;+VN{S`kj>Cwa}cp0GF>aOi%}|9cAERI4#TYiE$Sj zaKARlO{~DBl5ZfJzEU)0OhZkjQrJM|KuwQ$m%^@lbL#mDuPawRF~u^&ZCUAB2FzE<*1G!cgOc@;Jf%2gS!d_~yVGR0v!X3EXPPeqWPO8k8a{K}E#^h7ETl zWulH;4vJ&FOJ)(FUHU`ofT*&d|n(h0l*o2A)0>#(L?~ z!{`2MZeI&#G++QFd}ww^*vaf*=Wrcv4Y1b)EUJ-%hmYYW19IwQW%vnP1J9t~4@&DI z4AZO`o-m{M4ai4{C7!w9fmojU*zEO}jrLCzWk$|z-1n8Db9iR~&#YwaRw-asxMg1O zdc)Qe@+e;Cj7!QgILg?;pMj+(nJ zbkp*!N-M6uhbanAKxvJ_U7v5a^H1{&r88RB~+Yp3oKx)AzsxrOA?JomrJOFbe5H#8y_M2B`;h$UYC z6rs2JZNd7>W$TwjzcpKbLifwn(u8{}nC@2GRx3O;-8YoAaP!v*+Kcz(96uqJ!I@HY zsB3}2LzM|TCx>1+e)lRbNh>+^jZ!qc;JAJ{{R1sPbQf6Nr&st0*QIL`njxgN@xNA=|(T3 literal 0 HcmV?d00001 diff --git a/windows/threat-protection/images/traditional-windows-software-stack.png b/windows/threat-protection/images/traditional-windows-software-stack.png new file mode 100644 index 0000000000000000000000000000000000000000..0da610c368995b52a40aba734d2bccbe4da093c4 GIT binary patch literal 33346 zcmdRW2{@GR-|t9LgkNRJI{9fw$Ue48j5d;eFN}R>#!j@TFsSUIDEpFa#x8`iW;Zhi z5reVsjOE;;-+z1m@B5x}u5+DpU8ig4G0*+n&%J!N&*%Gno|pI4;Y6Y5f z2N1|1H25hwdISQY*`5lk1}A9TAHZ)w@;i8@!5@dMuiv{4ffPnC?mVIce;;#EGjNAM zI8IQ1Xj;y%C_x}W1GjEo*Y+}<+hvL5A$gO$r63PpHwzeH_FSzM__q9tbHYz|UX+@@ zV%gjnhMKq1BUKZB+%q2X9ycek7K%wHM5#RZGw8^*+ixB05x3GW+B$xVq(3Pi8P56R z4<_!D7wFEoUnPGX6rc*Vy=5mFNfq+M0$(-+LpW-!lpiOIV)${rSX%BM=fb zKInX6itn4yvSDN5Joc}j@2Olx_T$$YiVV911U~Q!7~EHG+U`ku_ihynNAtMu?(PO` z*FR(2!(_AfMv{iBqBMj%VuX#Bv+y1o8XAhEp|4+WD(c*0Bu8x|wPcJP*9C05}~{;t#idf(r}xMizs{&OlS>PO_ie1tOjk?(&7ZiikUKz6Ro zla$sz8WD&KPULxalf;g){Pu>@Xx%J2Nz2{MwRC<@iirj>VFUSO%P^;>Nb=X_rkCQx z5SmwRIV)j$dU`uZEKeE+GgRsxe1X1Zr$E%hVs;A)#XOhBRHQ{kN136Dv*a7P0|Nsj z=Wq;`mC^2-S@}wVfBE=)^?ddIqzHNC@8-JFW3 zsO1K3MEJ+GjfIhg^;z7Tfi@jKzryCeBC7~o+n>I_9vk^?^c4I2njyt=IXv{JwfTLo>g2dS9T(93m7OTf8^)riHr+<9`^KapN}Q{g)Xb#)NH<~ z#q>tXnU%fM;J+QQGw<#^sg*O3%I!8ybW@j@r;9P<0{Csu6q}GIlu73I{^%k?$ z6b#qm{_=vo!cv2g=`uD4_j<(PMYQA{C$-++TlH4zEIayde za=8%~)Ao!IQ8hu>KGu?}sO!zZqhoT%T_@W(vGxO3l=6;Tk+auxFq(s9mE3*6WKhKw z%_Zva?T4R&8@WI4o<S)IZ$>ZMc9{YDEzw|eW1E7DJ8$aTJ2{kAf$ zwTF3gGc>ASO(lFru056O>g=OX;UtuhykUg#99TH;so)FTab-4#j|N_Iw98)Uj+&4V z6J`eDb;^N|4tglwpO`h}pNA&?>e5;iy z%S_Mk&3^p@oY?8;zA!${TV#dhAom?@ol|+zzfSJ^A%pJjb`J&7($8>=l`J^NCUxjZ z=1E&_yv*g-_~p)+A>N|h((#9&93j^(CJ&x4A>ZdDE9|R`%BGX})xB3DXVS{_a`N{i z{`EH<%roC_^f`4SjNcbqcTQ>*cm10x1^pKaU|Iz5;3$U7&?n+08_V1FbAgJTjEfUJ)rLR%COX$-up*+RdVAS7gMu3%NUAoNw>mA6aED zlFqMrupa+VAL`ot{Q1+*PKxX5Nv^A}&q;m^kY|!)boypSxjk1YWe)Z))m}x$vd@-% zDAKywX)|SkGBF}I9pJH?O_}oS5T5d^mAF~zyWynd_vu5)m^4qeon|1uqB~jDPjNLI zN1M+0i0KmINuf?d;=Qw>cHhRF8#^`{Ugy-M`u?J?MO93sz)YAnd(i)^AAdi#>|)C5 z#50!0QMBp)$wuC~%2XcrMvlWh1$8SMp8Y6yYSl{47aO(BXI&aim{%GFz_!zco2`EiBCP7U;7(i=7x5 z=cvhKtJJL5Kb{b+j`>re=oCwWa2bEA58nKC2EXb*#9vfg+&yMQCG5*SLz2XHA@{@b zOqT7AxLpLao&1<>LhfAGiLCd^e_rxXJBz5}eE^p&ReaWMC+oHNaM*V;W6fwjGB2NA zh@JQ3tq;FjJ!5|P@dtktE9~s+ZVdCZhHtNPyys|EgiVSR>f5Qkr&a+Ary0ANm~rJ7 zLel*41N_BUGJdXgPq$tjX7;kKCgR16jaf+8P&s?{<~f7Pnhe(1>5a!vnX8sTTj3i4 z^VZa+hPvimeLl+DKLwF$6qN#h%KDZO`SJF4<>0cFSsvWCG*3DGd|2f9oo5msKREIh zk!$dD!vnvt57^mAg8C--e*U1wzozw11HKV*^TAZ4T1znOqm2mz;=`xD1uJ_Z9r9Zm zJfg!}lmSt*Jd=~R`!%zFLYVvezh3_qgZh@J>oln)U4X#$I9;V|*y(N;$Zb@zu#^Sv z(1#3FXv})rOY?c!OQpDB9lh$pty>GXOG=f8laZfGiM#nZl&40;wigAPO$O3?oZ5+< z75Plc`SupNQcPu%6~wr_v^Q?jDc@(F`-L>l^z<{!l8!ItrXd}9Jg_5c+Wq{Dt@TB= zF1L8E?iA^!OM&Bs`xR??{r{&0}5Qo-ZcWmYK|1Z2D1sr*kNw z$jDdTzF?7b$B~!vz*sJ@rWZ^h+Spv|O+dF37KZVtyq-IS z#ZM^?5juW67Hb$2Bc&m0vW@xLdh|ovlDS3irv85BEH&);R)IN3ukzs{O%unt$bG+7 z*Nv5ZrxbDp`C&gzAHRkbFPiyf6CTgs-qsc-!nMj-o3+I~KiSTiAzg4O{ODF4KWQW# z>N}oI;Rsyoe?3y9d9SsbKS;Ohx9n3ziM^LU#e0%7ke&e{_KD4~V1oHr2_YDEmX~8r z6`a=1RSwwsskbv1o9sm#IaD;uyR1ASpQzEEj@}{=I?F?ttD*)TN*b;+Ut*Ehm7`yL z!jim>otzScm7R|0$Squ9(qwX6h@>qr>CCWG+)i?Lnwz}t+022wjDKtv;5ak+uEQ(9 z?{bPEPtu=k$>%?5{iyE&pKoF6buhPI-`*h${qV#56CgC$&h$dfK2O>I606ZC_a0`W zmejl4dOBBYI+k6+v9|0!3jLwaR)H;*ylfQ1eCg5r=C`FKACmUR!)--KwcYujelr)z*Ig&;V=eIm*RrHjS{e_pR!9U*9lruzl8VU#@)UVCF!_82(`~5RI^p zXakXu2_K%X*MDo^-_L$K2{Rfh8P8p6bW*A^%Scs@xkwg8v3tun&u$MrN~&SdtctKj zP|m+&S-=AOUE5ak>Vx3Y^9^jPh*8q*%L6BzpEDcW5ZQUg$N}P%`U1HZCVMhF^Jv&} z|F!E_dS;%*9{x&?68#HW^nBdhiG9;y3i-qW2j00mfq{Yk24(wr6dNoJ*t556(~;az zf8i8EK0oISSWLBYzBcL11Koxq)VF6Iubvr8TpJ-f(M4VL2lF?Y3(G_0|LI?fVJj>^ z2bIN0-Z-@KPxf(>`O=pB=Ts1{EEU%%-|m-FN{J4i`GgBzaBH1&8?r)}4b$1rN+$+I zclY$Hk!LLWvRhY7sCZhiCWRG8Y4q!ZuYi~q^#p?cQh zdQueBDnqCwEUax`TqJ#>Ba?|Xw99Vfrz4jm{NI{C>3CuJgEQ*C=&KQycI7k|`$HAE zv`gwDCGW*^9W4DuCk#I*^DBc3Bf%}dPlV}LU#8HUf1aG2+&!|{(4ybx-1Af9^{aqQ z*ZsZSy%2sCULB=BZEMXh8)j@a#JsTRBZc+!^lbI!rSzBDYd%l9GFxI3!8RARKPHzp zpGJV|eH1s;F8R}kz#NTi0-k+aVl3OZ<8{+ZzTpwrtKlYO1YCOUo0jpQ@8@*y^$`o2OLP@>?1pwY=kES&QXq+`JMYR3k~`No&r1{Zi*V5YiQ z+cQQ|+T^&z=l(?BiogVCnk4f^xik|71H?TnjCgEBmQs){K5WR&p0|=bpRpqRUMm;h zaXLW3d||kHOM8x^c-HeFetPj|Lvg?#Sy77|RrMqJ211S+5#>KfnY)fy9Rg?GsVS1A z13tjZ#>1m`1RWk;9u;*$$+1QKkg)Fu2X0i(++gRITV5&VA-&EVh8KFTIx3&rv5j2Z zTW`3P>fc}B^?h@*tkUIYaEer8^GQd-dOHR|5l&!+rVXC|>9^#4iu6fpYERc=-l4RYRG-6AG_8!(#LY+7$OkH4a_wr;#OcK?tog0)5R=GVc6k(@b4D?s0 zx2uVFp!j3%Dk`EDOh&U|x=>X}s3qpENb)@+(xrTXa9B*91$HK`Y2KndEdZ_0-px5D zJd|o!{4JAYOSpsy(zN8LHhQbj`Akj3dba<52hPui)L-;Dm#jFsH@w}Cl9!sW4ApES zCL9~t<2vSE_RO%wpHv)4GAJ2KawRtH&C=fL|1QPU4;#Pg|MSnn8`%(smf7eIHrt zOHc?g8Bo}rpW}|O;$712e^lI2HvQ3eK|%11c&h*F>9Evdq(?fsV=%tTKrRh#vO3uw zzl~F%HMp=lw3IWiCoST5mvQ=5wzxSm?YHUt&#l3WVb0R))L;;c9f;Na-w5^F^o>j9K}lv(nPHJdr0O)f+n4rLKXURe&h)BdIHAdpHa35j|q_i50JJoaP)^ z@hwGPHWYb2rh|zwFN|IJ;&7|_9>++6(&B{H-g;$c^|bTE&Zf3vsYHK}xyMB^h2=`c z=mQyNtbPIzCidNyLAJAsnDL2j{$#lt{mRsSb8u0TT8~eqZdYSceU2+Gx}w(r(TwH| zP%!D$nhJ9TMoq|YR`c)s@n#@-zbr18D-B_)V zYT4q?6_@9X22yozO8mTF?-BEHIK3T&P}O@VVXi;+0iK(1pVI#B(G)b0KM+y$f;TGa zv&Hihr;^U$u(tlMnr2=*SW7(8zG;1@M%;YuFRv-!W8Hh?(%Z(EzisfpJJ$bPI{v!; zzd70T*yN%IKgTg)(>Y9hqp6=qsd35Mj?+iYRt4bbUs_8)I1|&vkGvAu2K>R!r)Xsi z+T^Jz$0v^62f>BN*+c89Yul1^f>*^fD}5Gf{3$z*Wi0;w{(G3R>Nx_ILU1ujn?r~7 zUJ!G)!`8Zf@Q! z8H~7+Wva5$|GjZWC;KsVND_${^^*)D4+=UmnLn9xRc|8Jbg_U73$$N(^XAQ-ZmxP# zd%Cds#`^lU(Ir%qxurU9lGuBWp45A4TNaythLDZR?o)(ss@(O>VcUHjEG&*7uva%4 zkr)RwL$r>Og|0qF#{6l+{pi=*MV1Rl5Uo(xO~}`}H{v8t#Im$m6m0(5q&5GfdRZntZF!4{%%vn|XMN?W17% zyAwGa|A?RdX(zjo)7_u^PU;(&E)uJGRvietd0p)z8+=ZP{8` zSs9IWh9o)J*|juRSf}{+C&{>uMa_n9@p{YTdhaYXr`*4G_;H_ligD30KO&SRNzorx za0DX1_3MqaUw>RDE#xXa3*RrB;}F(MS6<5=x)#KOwnRfjx#I;OZ_l_NetZ)Abw9Z6 z1mt#!uzTf=MMHFNtd6Qp9({ib^j7$Uv+l%~+u-u=JTxA` zQ{bke_HdV3yv&c!kjJ2b&Nm+aGeZ);YL?%KDeafi#_q`1op}6`db?r_U9(7Ajq1nA z*5EWVPfmu%CE$YS?>yYBkjTIFbolWW^~)9>s26T`$U0<4I9}lK{e$tB3d=ZgwUO-l z9pp8+c!X`5gf8KVtu++s&af)T=nA|0k!W+I-G_=0q1@cuD_DqC=)ql4hv70Ic74b>Myg)}onN$?>h`JOSJ3NUZ1!N29k>&t$`TT3`f>;|lqnh6ZJ#y1IJn zDidg3XTD^~S}q=0H%oO)=GNZco?kxuCTd|gsgrnexF8zI`czWs>ebf+kUp@QP0Ut~ zjA$Hu`u+eZK$nZB;Y)ekYc7OK;};w4f{D~G8DH2h4`ZW|Hvkr~DLbxqZ*^2Zscq>g zWljl-EHF(%?T@4NcKi%P8EJ{;x9wQpT`{eS>ug8;tbgXS_+XSgJ-r0Q>SR1=;!*VkDF&#k2fwE|u7y)6;tiV{JX=!N# z8dw>g6}>yR-E6me>J3I(QZl-e=F9R6&Q?E{U-JJuLMc2Pj-_|0R zShr+#zpZ_zb~@g{XYzT^hP#!Mm3Yso`KFS|^kTXi-5lR_UOq>7X_~>bzjytd*HRT> zvq5iYf3A*pUT=QKej~pU>RIcv5HVDydn7VmOz*{aknpim^nJwmz0ME7$cWxMKB!LO|7h^ z&~2^XJbm z<2QYLef_g4z`oeUTNwON-2Jl7wKG{^FGA`gq!2(+S(@u>g-;9^>NM*%5Dh;A)zEC71JqOn=~fnFr55k z{Z7!W2)%S6ne~m0&TPhvzViuK(g)kts*;feJ<;Bh8DviLaG^y=ij<*7=e>wpYH|ju zD4l2Tm_6|*=@51f%Xi1|6Ee3wfzI4fnf%uOswl?95#HmIoL*+u&&Q7#*R>`m{`~o< z_U>B$g|Kb(WNA(5OWUD?JDHFK%ydPg-W4bV}=jZ9f^noZU$~wHsuUGUr+XWpGH12se~IK7|na z_H^P~l)zRuS09_LSxKi|flGOMXnfkCG`{AyjvDno3LHd{k1%`2G|E)@b1p}vj{^h4 zUs*qgO*+Qay_ykniJgnZUvp+Z@8_2XU4No_z1?(w(X~N3OV_Lu_1kr!fR2P`6r~FE zcz1c2+QpAQl*&u%Y$jGPJ(D1Dcrpz(sJ&#Pj1=|^5Eb9v6i<+;-m~h@} zW>PlqR`U zHc|+QVXx@&%w1Sp@wu#ovS_L3Mc1$yu4B-i+hTEoYHR~y2+G3}(?S-u0TJKu@I#ia z@pSlqtSN>b9%!1HlqfUROh;Cs$)j!Np=lEV6EU8QOKH%j9L-%hnRoHD)%Ebvqq(;a z;*q{xm{RA`i^>`MoZqt)+D&|4NA?}@lz1+9}#@vxtlOX|Bs+lMtT z@`m1DamHDaJskTzb3%xe{{5!~EQenH6;aSPrzT1}SH#ET=`IS{bWD{bP7A$jH}(|A zEt3tB^6_b*I)j&FIf^RfU4fDQ@kV)mJWz5pV1@h1JaI#Du78)nx9>k&N;Y$Gt|f79 ztk08(yvKO*j{GnN?za@U-d%9?SaI4pW z0R>2KPs;O_K)yRc+Mn*GJ!Uv_??6OA*P8KZMb&1MmLZ4EL*tb-F5M$7&8Vu`4m8mv z#p~A%Q*ooT$K?+&4!GAEePIz1l#1`)zgJlyST`8;Z-G88gv%Xh-h>MFZ)ir7~`mH7E zC+bdI`fWNUj-y*3N~`U~?!m@!Thm`c+ebFiLg$r7WX3xpG`8Mz@_qCkEyU5NFr%v` zpvp9*r#)id1pffM(-6q3tR&zt&Li`{5v`Obh`P*yh*$lLU`~%8m7@auYjUyQNR7YK z#yoM0r|yI;xMfa^>}CDZ8+CWbpQE(#%q99;<(k>^QXrb;mAZ>G%=O z3A&>US?YE9`a(~7LG4FGiquNq9Ica{TVS&6BFbBfrL%MXU_cI-Urf3ix#-vgROQHhMXFI=Lb9n!yh0&Sv$@ zeXoRwe($L-+*|JwC7I6n15wBbmyI!~^!~9c9jHsW==jQv_waoxCYXH~WA5^H%sVW+ z#_j0)gx_+`6)rGy*hTRwZPJAU==6XY4T0&cj+P}*;gsOPcO}(XSy_I}kQg`>(zt6s z{0Fp~API>)$8abB@Rz+pRnnsn9XR-P?i&xy`@{c^3nPKL9s@mJyiRSTt23#;(^sc{ z5rVhSL7Ya@AF(lTXy;?;y8${AWaGIfc8yQQ<;#Ep=jqJ3k$7?I z9lxkPUPZq_AR-MKi9puc@iFm0kacR2d5Vr){ zM{uZz;%_7Q+wJ9w+)3(6&MGTS_;3A%b5eHhLcCzCpZ?(4m?P+=T*=RX(Wz>V4%Pt^+iwy?H}mSnTc+S)+%q|7UR@^ngcH|Z?6LrW;nHk{w;;4v*l z_QELz?S)=oPcX)Hg}F}+-fC6{2L*>6dOsPet+#X0c&A|jpgr=mKw9vR^*O@Ixl&p_ z!*t5Usi}Yjr<-KVNuE-T%M1^=v`YO&f0lGv5Na|9?_XP5(#}9M6{*kFazddSNS_XT zOnQT3R{m)o6>{6aq&^SWZE^{T_T$rkm4XzVH?o%_jT0;4JCV$X&i>%b`O|%N6|#(` z&=b4#@+aIO=2KH`n(}4S#%R8?_^4-><1USdPVa28jz?ZQ%o{5^47ksYr4Y04q%kj`x0U0e4O_;>_;p~d zucm~CK#mFBgCo!_^)-~C#4TeUC}F9H@>QU80gDNJ4#A&jD`{7kzri9Dg8t4UStGNE zU-P@d?6@-e&1lQmx0E~@mE2JCL2!%bu`W^@Xh)&PUGQ5h>R&YGU)3r`Hb8zyff1rV z=jS5fT(zV+R1gQbM%T^|c0On41$$dt8&7W@TP5vEn|P<+g*K>yPl;)Idb;24c!W}b zBFnRhqG-i;c_msFQCoigX`qq(N|Ho@Ozf7Q?(m1L2e^6`Ynn9+!1;LK;0~U1T(QIS zKX6w}Dt@V_D4MXuxLYzR=0C$VPw!lTe6BFA@^W>G)TV>vq6%uZvzzz|w!V06F8y~O#a^NB_^DT$B9hGk8jey zzkl&9D%zqMUH?q-_}*63ei`8B_~!4cNDR6>BRtgDaL4aFwIeg*ZnLNayuSFi#78c zqq0u3gQxu4qNp_1SF{42z3#-diAL%H81>}>;kqa=a2*c0bui-h0{>sM&^B*#B~H=| zlonRy66E6w=pIUj^7@wK{dzK<``Bwg-tgEAv+1+3eJe; zBm{qwM+@q{dflZb(syac(sX?2rQQX96EPXZ#lc3O9}d=C;}A9Y?4Z_5F*u{z#?I&s z&?FshmNyV`6#Zp}Rc_tJsE^Zq$gg`BAFEMrwm&oN;8SMG0x7hJ!0052H6Nj)-b1$Y z#I-)K%+XXC*rG10ZfS?R&?U$p)DGCV+~qapXm)CPN^JpoXlxX0ajwI?t;KnFx^tO} zw1-Pc0)8YD%<8h(e+ASortDLe+X{Q0jDxyVKN`^k0nxEV zxQhL8$vGKaL|dVzfiNp89Ee+_P%GcYEN~sH50Ipjxp_T(&6v+hUK*@D0t9;?(5nD0%I{bt zX0Q-WxUDFYPtZ;l%g&7nCC*$63r^7N*E?>^VAmKy*gnmdFFgVSbTJ-Nl ztTC##{j3{Y(Rc0oJ%gljm!I{yVH&Si+yE=Nzcko}MJqnAPb!KaTx$WlAPClCOLM?? zQh1{mhuvAVJBH@6*8Xx?aC^#L!tCQ+mzq(1WBBa&`aH36h3kxCp@qh|CLZCVdoGK& z!M0m8=oMEO9^o{c$&$ZxIY2@RW|JB*kS?@n>+NM~DM)@=vPUhcrT-{+u<$2&=!t2{ zdMjKcKBZEhU<-q5Z;GBsJo?;wJ$lTaWMuvDA&MI~O?ovGs;25#w~0|M?)F4shd!iC zTdcKyqRHzCPHUnKrMdDE0b6$HX<7ELKgW~tcB_ASZZ4_xF0?%8vdtZr++J_=HZg7o zYmxh2wa!5?FPBzZ^FUymOYf;q7*xI-$&)$^&$XgTWaF(--r&&}eL{cfgE6*T-d@{4 z_(Bl&M#fHCMl|yAWjku0acNgjIVXE*uKn&wRMa&7o$D#UIY_2dvz?(i(5LJZJkm_% z9Gx1Ik{wB2$fAH=STC9^8^fl+{Mh4Qdk`J&RU~>2Aj47$+jiB8Hvy{5z#MLF36phF zoDP_4%@`^OT=NL1BN!?`z!iO5?hf~VE2|99m;=M4y9_LoXbQNh7a-Y(ioZAI;2;8{ z;&S-D_rb*C1Rl58-*K@7G(1(&fHj^vNIs;eIVijx=d$t|V!1It_xn+Op6ZeQpJ#Vu8+>5}THI#+Y^RK7C@$&K4>8edW! zRe6EgQ6B{n_6tUc&Oi*X@tLp`S&V=TUeli8*$rDyPCmX40S$S))2dkW82SLDzMX>S zSfFK@nV7c14}EcaFyy_CvtBv4d8Q-CdI(`bn3f6j77R4AimJe4K7aWTvh1PEiowDV za35ZNs;B{nbXkOY0PNp=Z!jsaKmYGqWW2UOORt=)h~Jf#OzP_xa*;0Dnoblqm?%k% zuZanZ64qN*+r4 z@fkw{zUo^@nva(bG@X~ndAO}U^;Ms`hUJpRb(i{1!LuEAO;%{!fIiC;{gRwGMIRTn9zQKm@rSXfm!RcMv9abtXI7y zp1PK8-puEi<70sqe`7GzT5l4=`TXr}Qc~4)a=_dx!m!e$;#NcJyt0{hor2pA(*}$5 z{^0J80=>yV26LHYiuV;pFOiD;dky*aEAg}IpJq{mc{rKTeiYP`Tr^s?zSm>muUk?@ z`AA8-plZi*=*%s!IXc|#y~BKdh;DyUc`T9Wdt^vy#F@5RupY6KfXK|P)+jKn}R$z zaLv(-XnX0^N`e%NrGZ%tjn(x$PzU<+qptsaWNq3@&r;_!n6q6;^;JYHbeeQik z5{r|8i}tmZI>&GH-$Lk{hA0&*z5OX#>XzhH(njm#E}SeR(;qt!Jgx@<#@GEZfR7Su zHVU#wb#4C4{SxEf*6%1Rqv)R#a9stOLm@r^tkr9FurTgzg%U52RxVXuOR3zvyzL|> zfa$K}rM!EWJ3vhy7qNo$j8kij@YYaEmwV9zE5M`YXJlMRF?uI%-LXkZs9%u;AZi{I z5#`s`Dizp9yiHy)KZy703T+K=qc(w`RTvJ3&tRR1GZ|~}PerU*hv9R|g*-5ii)Iyz zqnYouK040ayFll=F~3GhBYjG>t!AGq0`A@~yW&7HgDudA>$&bqx@49#H6%lD?YP6La3&z*}Juc9`5gVd|#jSkGGQ9 zE6>+vKL7L+duS66n*#v?k(xW$0ksCppCq#h3v?k}Q-y`&uFiBpVvN!3Q)>R4o+6XJ8*bU>acglT) zg_CD2veNU^DXE}lsMO*9Ts43P+ZEw9<$T2_$ftaGe3@<}ux#A~yb zx8JxJ=ew|-GGy3U!2MPgN%Wt`gyW=&rwi8KwL|^4*p#fMS$c~iJ}d4t#F&$MD_SJN zie4@5Z42~3J=6lv{)BC(U9`%jGy)1cev7usX?~l+85#OQD z`Gb?H$VZV~emL&1WUOW)J66XyLk$<(f61u8VPy3*gSl#J!*0Lm z{$e)L_zt&&aK0s6Ho$+%PWOCp>Q>Ht1ic;B4EoMxgr{n3@7J#~-^ER~jpEiGC(6qu z19A+pR)3?G$rKp~+f1jVjgLExBK_TcCo+2sQ0%B{NH0dOY!;>N7`o=v&-o7C#a}os z=UYGyI%=;7 z*KTLQhej&N1w>v?g_*tL%JniiP}WA7(3o>qf-SwGT=1N`Sgq0HHekAOXa9;|ici}v zE+T>yQFFC7Dw>y-Hhgb!mL+2_%i?hJ7!-wro$Mz^3>V$W8Gsf)r+G`qCa$3%oi}jN zC`vWLz9l*5mEt5DZOB_kk=&m3`iM}~PT}L)D~|A%;Iu<(f^}U}V$r3c{vN`D=ifd;*M6ml^Ay7xyZ=8l3KJ+(+fO-smHl3D5F*jBxX~ zFW@%s`d6!Nq-bH6EOm<_rg6<{N``e2eW_vhdDUs&Z+7XeAp#$Z1zRkQ+v8vlatEq{ zKOipPmFBRA(iA&lHNPCC)yV7`PgpF!Tq$^Dv}jk5f&4ZpdM@;k)@Gqw&74};Xr?q9 z;d#?N?$S4x2qFa4B_`eats+W-RqLyS>Vq-b7y(OP(P3_oW#V@u=$>9*m)yL6Ooe-N0aHFYy~?Rq3D&nwQL;AaR) z)eTM2;}J0&Se=iBRjRFtM2&hl9okDi zStEr{4mQ3x%YmSr%N`&jI6od6&@*B;v+(V})6e;44npr0|4k(mNV1n*48BJQ6||=h zIQexEF+ZOgVGBF0(O5^B$-V8bDjR#@8hr!y9{aM$y;n-s#iKI6YIeSMF2l`aeK@X= z9T;vP))<-4Qa_+EMM@64KcAA{hPUJ3wULvd@i)tOqg4ZK4EyhH8aF)Qyo}P8WW6HY zh@6d(6GFiKLSG@lm6(9Sr*9S5V?)N<8`r{vjc`TgCQFjc8-3f4^zRndbdhn)AQDJ& zPqsjjfo&g0u19UxM9r?35M(7Lhq10dGnS_q6tD<`@d{tG+xMcAjVqiSf^A>T4Lg+D zP?zK)M77)aEbJu?{~3En|^>$e1V8J7p5{7IRME3Y~AH$wZ7}Y0-rDccH+U~&Wfw4 zl(kMi5A1#-oS2}o`!$fG!v4u21NP&)-w6iir;Bfa=7tAI2Kanr>f=}HZl^0Ihtfn$ zT#Z;FD&+Qi9#a-M0>=WjJolTbSCVNBP~P3vah2*-GXYsfwTf}{9rHpx+Rw8DhEZc> zEV%|am!WBrk^jS9X{S{q2?OH5DVbwD*DQX=T<^vw+jHACZ_%}L826n@Yu(xP5uPS$`rztoxG3aBhL7 zQAVIclS21KQKjd|u?;0Z(nre3{_x8DT*~Zs#q5m=!o0#*Kao;JspO6*E8XC6Wl<=v z;+Q}DS(J*i`cBkovYyE(`ksR;aeIV_bec>^>?pp?_}-A@qpNdACc{5Tb4oro+B)CZ zGjMB$ZDZfxt$sH)aHoPY1M)Q!knZ0B8#h2IsZ@v0*Yz|xHv$%c|85U-6DC)0u9PDsi{KLD>)6NT@OVpC>iS=%^b1qTE7Si$;w;5 zJ`MOR%j_sJ6PI@P-o34(rbDh&a0Lf=J)G;b3LzW@Xuza1+kh7IIP`Z4(IP_DE{&Qr z96ERY;M$}X_pRlLsv{8m9eN8^Pi8*(xB(%PRWZ1u;N&{wJ=?#+TF)FBZBwIQfswo; z_mPDbEC4OT0Lhm|g=pHQ)B`cFPRoG)&})qw|6)Ht^i1*X@%L)I ztyi)VE~smi0o-Fe&_v@&n54lvPu;FLe2u!JjyVF&JZxv#geHtansywcc;9O-Rsk}5 zZ@s(J7Rs|0Re9Qy<~Pj(GjA&ticEs0EN9I5t;&&>6L2NQoYpwF6W#5mvq3X}A(?$D z*1WM-cWa{nRsFiNJ^k+I*|gFkl_ZLO`eu~xx$uaH%C4^R48E)@>k$mXUy~Jljj4}p z)92<67G_v9@vuR3S}wZx!fm*fwcnSF>a9l^wMNvq38xr&hp<3VMi__hBs);;GKrcU zjOxrgPEGJpmx~wBO)ueBerXj`M^nY5kyF(96yDfEJAyrO?pKkD`CTa>K9$9VAAIhmQI(~*{< zpN}wv=c+^7b)>I82(WuIQ@S(Oh;yW-0>S3UO~}Lj9rjW@tH*}7w)ml|tHP)0DnppV z%0)J6=J#e7&jnVXTlS|T%$BhX>4xwLY|Yy1eVe^PUXe;TI)Y?m;?2$@VqEq^RCIo% zc0{D7LW;M$>QIj2E5cRc<+7|ni&+r7i->0vs(n5E%hQ>DPvNq{WZBBI)_L9ymhCU> zd@hgv+fj(8+i?z`KpIK+ z3}Z&SA2NX%o0VEoScvDQ``a#nfb+TDfbC@9Mzofq%#2?n$bC;6)M=`CP&()*0~RVy zAU?IW2d7O*wH-wOG8Dj1eYVhJPm<#c)O!$wl0x{sQ#?_xfGx`om&Ld#sQS0*re`p! zUzFKfU&q6zibgXh@~oZ;x@HxN%DhT%h^XAQkss+IZyow@Nl{(=_uR5(~x2uHpN!-;2^Q5M;(I$p2taNu) zG-_O%M0$2TMy=1WJxQBd+{o$VVj!FXqdk-b}s9wMe^S^05${qQwV3A zIf^NQv$e8wvl(e@6w*rKn?(EqzG={^nSmHM;~gne3)#XP_mm^Xi{M|H)^mPm)3N2s zO_~F$717MoD#3M1TlFGJ(#8L<-kInktzeH&e2~81+H`^^k=Jo=VSi`noxl(*F0JsZ zDn0T+#buVqTL&H;9wsYQq5rh#3t^!W`QzNj*(K>3*Yhcf;Sv4UN&%ORs*kh4*~+Yo zRd#ttt#=u=w$9hSHsd_-UmD=t8O_tZ%nNcX7&Z5Er% zq!k22Y%TXG23pfhp|swLZT7o3O$W&ItG~3iu&s7)&l~I1Gvo?qu7D(^3D*^Bb+|ix ztkteFsv4C;SNP4s|#3UX5P->G{#9yolxT%!`A*pzac|;JncL zZ~X<2Tq_064h6i%;|`FR$xQ&PT9PnT?ElWH>9$i(_Qi~T1OI0OxRe?pI}?)fI}J3N z>8Qelw(d;MTR00+Ne=QUCk7nk5fD`sxl^iH_eV^7secM7H3Sw>~X@O=q zpOk(oMpCpHWH~U0s@3L~D%fIh1IR z6q~+z@vcZQsE{7$>3P%HD5j`5yts59u+$*kPuG0^w5S%`ob5EIGlT85g53iivUj@1Pr(I=NW-~^)(o%i|*{31txiJsJurbgb)=J6l6ePXkG%v zk)rnT{f?IWb()luP6O-rsPF9aby4;U0xPzB@1PUS|^1SD2W!)$5RwtdmaDhxH zOqG&MU>S(AazuZ!_??T#L$kX|_6FNQ#f;wxx~G8g*|JSrb9^T@gr z9`pOQZdRA4U!wHLMcd@!P<|ft$fhdgWItQ1J@=y|d~=g?ANx=DVXX7WJL$M0DTm%k zec115r6Gh*THQ?-@=6$M?i?#A>b`1dWss<8a{9~-%zle}s7g=E;}@qGcwW~10g zA)k)uLL7rz5=D&p)b9v_MWG4{C{V~Yh3I{(#0r-p}2la>#6)u@yFwh5|b-EHm z@ZaaHUy-Rx&`6aF{O-HAxQo~H<0F_)PDL1AZ))nh!SDxya4AP?u?HH6gH|>XxP%#T zd$C=6&*)`XKO^nXyvMtDg^INng?trL{eP_VRUkSGa@FUwF=jrd02%AKj-uaK=n#s}x*b`s=k$>k;< zIoXD8cR3|RP^|vq(|Geikz0*Nc3Oe)__*YcBfLtJWn71vdChoG)K|rTMjz6ec_ceF ziKO8+5{w%s@P}SATGo!oNs{h36R)2`b1Nu)_%t&p*6cZ?Glhl{NT>scIL9NbHO2n-*nJhUoKw|Q#QSCKz>-%#uQy+H2?tw~E zP_vXi-o#V8`jtE{Fp|70{{Bv1eh-3AR&iLg!9=L~Qi+9GP#?7k;l$~Z_B#VDfvdJz zC3AxpT*>V}sc)lkhp?xm0d!iTYnByi3yMcd*93i9ZWF}R)z*)KdJhnL2--VH)4}P! z$F2G=4?=N4eIKb&?a^cz;&vwra|8Yi3R_fF98jEtUC<)P%b^6obpGH4{%-UnC2iU* zN-Yeam6h>(kO+!&GCri$6Xq2Ab*?-Gw=@Sxyr-O$a zyeD%M3&cHg)jscxdtY=2pZ{a1+|=RSGARFWk12dN0sLdDL5EvRu{?32plZ40rmMj^ z|CXVKMrZ6Y>t{(EZ{P*NH~250%zd|s1_Jqk0|s)^%F1e}x3_onjfUdZjhLH?Z!<#N z5iiF=guz41k>HhC`bnTjlqvkiu(oMjbmfZ2QjGM7-^wZ2cg^_o;PiWC!fifs8h8;B zT*q~1bIFeleEE>wpESW7c%APYn(Osp@WqXR0yC^g=R2J-uUq0;T3TD?;LFjNC-f}a zzq+9L9c1w5W7(OPX?vPrU=XgQwD7aw&0Y|jre&3raBv`@qrr2ofEFB0W?n!`Q5#8& z!MShoQ0Eag5&FAzcCyTEQ+jZ&O;dx%@enw$`5GbhS_T}w=WONp-CA40^=%b1I2V_e zEQ6 zB>@|V2q;28dhZbFJ*a>P2uP98LZk)=1f>NCwcpAlKIW- znb~{K-p_tUQ2)HMl;2j3&rEjajHE{LZE!w*+Ql;g3QioYtj>3McUe%U6*(8H&VeeS zcDp_>D<9(}J=;yH+<0K1e@R9KcPmF-<3N<&(5t=BqG>^-%bXgu^emO>)?ghd3=^GJ z;{XyW1O<9C*TOP%#ueG&7j)dde|zuE&3hGee(Dw*M{(SR#+uJ7eA5k`E0?}*f_9%l zCu*8jTEiqJ-J6vw_kdxWt6ZBe+%#_hTxO^DWD})PB|;ONYPCC$lxdI7(uSmTy~QhR zE{eM-M?DFa0AHPYnvn z&P3y&7bXsXmY(s@dJudROo#vev;@j(=f?=o%gZ~Db~+cl+Z7(7bQuiQBZN`aXgLB} z`b&q_16FR@e9|dN&x5(;nZGx)^GJ2)QP6Hz+I<}AHnJ>Cqv9gi{{n-`*y(`+ZHk#* zdJm5&vg-`L@7Z~T-g!h@8K5h1ls?p&R#T0@H6F3kU{Gp1J$ONz^>e3}YnsADGin}Z z?>yq)d9<@w=#*$OT1XA`GI7y%ybfB5)~5B~#IDq4yu!HPYF-C*5ZAj)o$qx5_PFai z&y_g1qvH=JIGMz1RuzD(C~U3kEw$~EU?ps`UI#Udv-f%{0~-5BukKw`+Yf+j!}#TL z)&*#B{`N>N%Buo(l~KyWxwlGB&>MUs>F!T49qoCYsxDVR!s?Lwo;Le7JM6=#SBX%L z;CfrLQXbJxyLP>NcJXjBpjjNiDf+b?7x5mH3I^v1#lYzO2e8SJK z?MmBXzol}xAjLXpbe~{#L5CG^_KJb5PXA-#P8d}Ks7M?p4=)^z05g#1@xPX8l41F$ zqfPFyCuw36`6=F`5zwbt2R1j8*yT$zvtk6^FkkGjEv_Xp9d9l+VWG zp;)mY9czLM7hcAw`j9v)1ndRq&nbCvT5UgQii^RtIqLID-*-LSa%G|=3D5S>A%iz+ zY>mc~=5rVVVd49GzLP2=Z&}if>?01*pe)d0Y1H!u=h73LobDj(ksTGxS{VR^BvtON zq^3hw7qm;|zSeCLQ^}d!h)M&DMzx%*PwQrwq-paEtl$!3FCw6!FeW226AwIDEE|*GC1S*Fy|B&7S@!VzngJC@2KjkZiFvOxkbd=es4>n=EuJFcklc$2BUo!3-?1B zUhnSn6F2&8%ya*UHv_1P1b^CjptN{-Wu-m#nc;_W;5OG}2ub>B2Yw7TcTnt*Tjo_c zy9Y8CN&D^uO$Cmp4f!Wm(v8sh8734^J1P>XdF`%JCb5FPLJFW!P%A6*URygWEnlnf zRvv#pvvFpm+&d6=DnMW^_Ie0w8%li!=|Kh@fzT0!gq$w=x!<{?BM-|swQu$&Zt=se z49ZfAUBPaV$?0IA@Y?D!_2z*LZ&rf;wC|_0s;fq8XWM8c(N%2<98p#ADL;PvSU;5h z{M13nU%&4X9nJmAbJOaN9aoo0YvKJgwFUk3L;WX9QsaOI_lP?$h$g+n?S-Jv?kK_rp+|;vIIz5AH&-gbHr?JJ z*f(ee<{7KDD{*vZ)K{RTB12AzS`a03rZ$u;=n@^>mF}cQ50o(+;cKQ>q{bkpp&vaQ z&grG1*)HjsXHx@VS)GeOKfn4f0#-Iag^nRJha|a9xR}HSEwH z_>s(xitT5TkrdM+9<@8C6Ih{_nTCmM3NGagIS&N($c8SB%znNa;xGPd#U(`_7D$66 zn|~<3Q&_eSaz`fnZ}ai6PYGa^mUoN`upmq~fi=iAplObO8Igb%h8yKZzqWMnQQGEt zyf)z>BRhkdP^~A6mDh};mKinI)&?veSoz%m?3~wsTdgsdkIt@t@bbhF&@i0iCL?UQ zwSGC)aJuzJgTQZ^Fvw#6^0*Q!q;5V!(j$4p^VvbuSWuC}UXUL}$UI5Y{rX`$E9RGt zI^3r6vM9}|ZPR*4ECD-yKGSi10+)%XlD)PB$nh$Ri%}v9>A!zbfrI;^YPfHutm-lM zk@>$B;cwDt8&IE69`UuD%Xsfg56pI{>i@T_|2fMF?Bt!FMs>%?|6}2U^(B-}v+Y8= z{z%W_DcOPO1%`}afAFYq$H2bYHS&L3mTTTiHb_N5P#_I9D#Q(Kk1P1B9IXZj0NJDlm0!TG&TKp^k5d4fvf6r(1TUva@p z;?-Ww8Rt-e5&i4`3NPzFzZU-KCKtA46kmBA8G9qUGXgz6F{x{sf&bhVD?lY^5vg=2o>8%?G(u!l&~~pRnhB;=F&@ z52aj_CO777@Ec1BJL5Uosz*4wP9d(6=5^pU~;f$w)K=|*> z{L8O=*QkAkg$3$n*fPZ|p^A6ZuvQ*h<~NDMqT4L39Pf8C8#Z@UydhyPzW;28@6lbs z%oO<$KEGB^4@C_cB@ou#i&HLP!{Hg*U(1KKbS%iS9Mbcre9b?(Z^IL*1_a5;twGsq zWSOOOBA&24YeosJ_BO%Qk=*Uc8`-2PT6s9>rB9P|M+K~c$U_M>TwC+;n{nL!e1@{+ z<1-|uSu@Uj7Xo?f^wXzHD)0OTlc zqV=AB)N$w|!_o2#$?C7jqUBxy9qzTo^Pkk69(V~2j4fWHYT&{f$azDaqSf0@`hMqg zTQkHCTZL_wPzRU=E6bPm?}5B~^ivD=S#kNTzMw{Jn|;|VMx1ipZo+W5Z%+kxR8y?! zh9zazEXpSdD-{KP)HG6;**8sDVsDg-~2;Oby^_LPLX_h9qS7M(4kV zIwR^9c_^FA7LMO%+&vXN(c+F@l+0v|P8@@V6+hQJRea0Y!Vg~EpU-8x)GCra|ivGv$l0(dmAeU|gIm2Yk{Q#e?egrE6_fU%@WJ_N`wiYPh62E_z=%Ltzuh8;O`w z$B8-D*IJJy&pNx+CE0M+nXtnT2cIIU>9<>TvuX7p58wyLV=`JLDPGW*rBoZvIYqQE zFOOb$HI`6|sMjIeOIy=UC-+|cG&O?`Aqo(&CCPZc3P;yVJd4C5R&-HJm{LRSDaHLr z7qmKczfP*ZpcS1ttPIQ4z;9MPZ*6!j5$eS)vj;i2p4u`w+ZICRw= z)KHKVU1pDDy>hCSI2U)8smYiP8YkT!I!P@^Gyr#&($ULZkQ# za#kofy>nVD7}+kgEt7lh_pNOgq>sK^dben~dePRT)!7w=ly4)&1Q`}(q`~LbE&AbT zanz(OCF*h1P$yWp9Ul{|f>Pm`A@a>BgpNEL2~{@&ep81Mc|l=A^K60W$g^AhXO#XB zzeLYyJ(y)-_?`as%OWv?)s0~^&+Xh}6ve^fZy5i(9-q`Hg-wF0ApT@dMWn0s33%6E z@)3}*{yco*c_4MUqAYJ#y%{|yF_3v>CF6Kmqi?E`U6ewQ%^Q6t#W_UZihP@?0o1b! zA#^R`d*wx2UW?Y!c&kZv=eslZcC(d$N&X-Q^NO;u=3qDWxT0-6)^1Qc@rW%~{anQI z+S-&%uPCp|mr489+ZBnHaQ5@_jdg}^Ftt79d5L1GS+kGRdXH=u#4by3)((=g8R;#F z(>VpJl%fbC2X($!<(D3sHSv@tqkfRNs$o5FaeR^nsgBy-G*mr5kk}?WiQ4LxCbN>g zd2<1Vd%=V{R4rSItDSG>s;KiMh7AcKXB5dM+uoVf!7)sgj=_06hOmsJEGD*;xl@Mb z+G7|HtXdSZL*1|+g%Mxv=NaZhuttp!uVo|2`x4i~$eNV8DZjhUB1NxWj!xYX|8NZT z@ciKyBeBWDnzK0|$A$*N6(Kf;Zm@D4C#^o1%yQ2l)*~`NHo_8oK zKbvVy2$RMR`_CRJT|IE0&cr!QDb+K_z;+^7eX+1ftJCey(w!B+5w4oiVv1YqThzLF z`{OAeo*;`nobGI8j{b;SP~5bT7&%tL)J}CFvgU^JGB#CXX`q6cOstuGWzZ+Xjk=q*;KI0n`4l=RrE!_PZWCMZf?dZsPYm!M^oQsamRq_R5(-2{N(8jv|^;|2N z-T+_UKenA|P*4$1#8lO?7F6hr;qdC)szbS9OfvLtBkZsL7%zHtT5{;vc@dB3{C;-J z)YF1xYC#THL(0s;2sTRs$3jmWv+c?JI`^zrD?%Ef`e(gpiI}i-n3Ig!P-M*=CexKk z9jOWN1nbD1bCb|$pA|{8COQ)PM`SsE@sSU;RuM4zBzTgRas}8!D+kHQ&JF^) zjeyQyTv^`S63eZYS*xH1zZV-?WELBuiY|eOBpPwmv3X^Bn0085RJ=Lco7AiV%O-O{~0sl+yCsL?XmIn{-WEd%MRluk>jU1rg@6Q zLiGtwF;M7;QV{gOfTOsew?IyD1AchPNcq^(iGhQv!u4|{XVo}Zb35%*4q*qjDM6#3*f@u3@NMYLx%l` zlT+QK=7s-ulFZNAyhYfnT8~>TyM^Dr9G~owA0GG@1zAYj>0fieQ zkMKL^A+Jp)kp}*9$jp}~iUIbbCCLF2?DHw=1#(z|c=e2*%a`G}CENatSkBSH&ObS4 zitgo3TgB7{m8>7=wyFL8MeD~~#6^zxw|R<=UXNU3aGqB09sY|gKXn5l5oA^^5w>waH-;Ei|yw_!|Kr+sNU(~Z(#sC>vNf+-*Lm}pEs(Qfd{BGjPJ zwEM(nPl=>+$sB2GJt>oz)}%FPYt)+Gkrlyt>Co8CRkjmwMNIxcSzenFTrd@*rMMcvZ7TvN~Isv?Mao6puLhR}Zmcl&Y%%5zxt-FQwVX2EAD&7%WH z9y^-I%nNoDue~rX9&tl|I#NA2kNPmj=8Na-PM)!><_KdNG&0O=@YoC{Z?Y%2FfPYA z({E$ViCUL+PwU%GFci&G$$>AtyD2#MX z6-0O5olXBcpXBhg?!Z`HI247w$nzN!D1PA#pE5`B`hY|~vH~IwfpA{f4Zjw)fy-iA zTY>@Iu@J1+gF;Pd$W1uRyH<2gh;Qri<()){O3UwY%Q6+hGxC5NZ?)b@5Br(A{jZ@< z)-9vgmD0i+_~}|-U)hN%M(z0I3LJwDZ2=aJb05dZD{cE6P4ufom#9Vh%D4kaISEy! z;&Ihd}>g}#7v6RwWb1ATZGqht#=}sc*tg}P$h%(W%VtgnyQ?R;DeEm7~Bj5=t4oh&_UId5tZPXyB zn-k-4U&OL$5b>`Gn3%NxV3bI@}^FDek%~3i4Vl0 zx@u)rMdznbU7H4p>-3bzW30ZTs}!8DZL+`*5_Ud>y}Kcy7dIsK_b_0 zzE-m;@RaP_a7!XclHQ5_Ie7+O+G1Uq6;1HllP?Os`*mkVqK@Q?U43(@=ixW|{*8#( z=8TeFU43EcH~A^87;HkML9vTOtl#<(qDMl-BzFDvBKd0A;i|ChMj?vdc6TZ{QF`eS z^+MgY4ux@k-hIB76iA-;9YqYyZBHI_oV&o~X)lZXvOVmMt2Mkb&FDkgP=yAoToz$_ z6X|G@R73DH_H7GbEpAxK^68M)tO!ha5CoE?{_-k+r$Z}_sj$^IXmww`s zYkccwnGYRachsP|H*LnBQ*+&#f<; zU71{-^BZaysw8Er2k+5g1|mS-LytA%OqOM@f!%4o6M*=iVy*v-ul>KBhQ_2Raxk8f zx{pL(2Z`?COuPwQ#pS zEHqyHxdK}vYJGa00hB1yg2ry<%3d!&uXNH<`k=jc9Lo)zG(?5J!iEhuO?yFN3VjQi zg2r+&*cr`ZM>ILocfbfYr=O(EyDTj)LpP!K1`T$yABuDqeQ$R|(HG-Q0ZUYr_08$G zNLB9!S~+&k{1mvt%M|1ag*dMPQ|5qW(U+l!ap+luIbu7>T@^=_O{p0 zKqTilH{q1CW}M>&y(H}>pK-AA(spdZzt9mni=TctQved2=o&)9ty5_CVO;~DhUY)^ z19P%q@l-JXe1+eaFb+GT=6ks`AeJFfL^MUN*ZYOO!+NJZ8BRG;SrD?%u`Oc{rTt*Q z5FnVAhJnzQ`ER@SL~y$#4c@;t65DzGrKrQ|*VnJv$`Vc3JY4vok z*~s=}hr$B1&9>n?*H$NwpT@W^@tR$Pc4{OwpkVc=0=`UzJ4S-S%ytd2|Srf20%KwtjrqD|cK>qP87?#dJo&gjM=qtjN`gr@D9E zDQ?heeszicq*;SL$a(GpF#eU~6gUX-vr?J2VRoH=U?V^EKO4ay*Gj00jPXALU+HcA zz;#rV(5VMe- zW5MBiaN|X`8IiuFDzIaP@QY{o{)~!3W;cWv z0*+1U{Q?JebCNCRTxNUqVV?fMIzPY7LIKk_9|^fUB-9y@2K|=H6?oDv(qm=`^^_pq zCY~0!FRTgE(CX4x>!RH~hxhT@*8h;Tf3ddC&!u;nRd09`gxC|9OI=C)4|S1B$~jCp zeSucyE*YMOy5`w}gsE_8`ZcuYSI|W!F+8sjpK4XhlOX-#MXq|S&!aY`(SK>E3CqZe z-o^Asxq_0F5uBvcx9g@l%&sti?YdXCv%8s^M0L()-giDzx3~KllW@oqk5Ko;q;O$q zC^~J8-h<%DXUNZ2SGySpGZ>s15T9cH#M-XeTL+f&;m4J4LRA99@7ow0FQMZt8MsZDK&w({{ zDhLo3sTYXno;SJ-P8z4ah}jN7#5vc+K||(Nd2Y-Z#yvhX zpYz?_H~byc`(}PIyX#s2TTr)6TDysZN2g=wGs{$0Mm)!A5SIkCjgcq{vM=afxHn!JT1*!G;82v)n>(0f_P5rTSpBQMUm4idxR{BZKj{>GK zibS~q(GpWXzq-1xsW^E~a%p`-qg-9l-Jn!{9Cq(JyPxQk=tEE!2`=rRScMrkR1%XU z^!|1uSNsZHqJn^4Ny2f?vNBhWNDg#}!@wa6=lx%pnw)&95EQHdUJ!-)w3&)YTxrhl z)p@k;n#j4(%{%XV?-PNww6*KvN$oe96$RnBqpXTcPnn^*=)2idQp#UvTHp$ ziP{5FwI#n{R^EBMwU;VWA)YV_&#v#YggI$-WsP?Vun4fJ_qaoilc|Bk+rVV5{){Fv zr*yu5YFb5<Zb(u%MU>3Dq{8cdXal!Bwe*O~UWk?pHrkQxztB5{)4_cCrm9+j zAtG0@Qv^TqPu?z4IM4N9R>W^`M!qUC+HP|V`v(9^vIzWKfcyKBzgaDXScj}mhl@2f zs0Ze-F3?|+7|(-0jVQ6>a$BwH*JPOSZP90R-UspT{mq`gP^L>}x&n1qVTwF76L%|e zt=+2!oTL}#h(&@uPlTUmyPg%P$})z-0xR5eH#=#myo#S=lk`{M-)<)c4ApH6+jMu{ zOtqIQbCEd*oC2ADoXw-dzl#BhrU+QD9tDH7-8sRSHx%xh`d)_8|6bPim@JF!TfML? z%$8l>0U&SEznLVRRD`}5we%$NOn|-6UdYQ`_#smhL#kle#T$n^+;z_a6?IJTFc3%A zKQTJl-Q`6h>shL^!qfvI0COovJ9hr35RU*eS~l!YBU8Kta5UDHZqwS*L{OL6X5Vc_ zMZ1lPU%fg87OXbGa0iNTF+xLt#wrI8w;flL-TJm@jsfWMzk$2%f@8D2M=yGDf)8C* zly)uwiE2pFQP}|{8t}s3iXXNMj@4Oi&{_aE1IWEl?@=3O@XK{>RLLtE>J!p-2fO>} z3;^OC|M&jv?x)qiGAlO!dwj&%UGF#NLTES+;6fm-JVke%F62xLLd;m z2^uz8^5CyO@2{N=vN(8#N0|$A6q59OM@CuVzgo_s;gEB}e)cM7fd+n#fBdVHMZT{Z z3Ln3WNDIRqg4~whnFL*qUoGp>fX-hPfA&gm4WLY#+Hd^oq#>A`OqsMg$T+6_3B{7^&i0YC@3#4$6^(PL}-lY80TPyYP&T6wOow( zSb{M!Xe<)}7XcI9Pn4gW!zk!2i>thgI7C9_fE%Q4Vten>dkN$lsZmw=f>KvJ0e>z^ zwv>U_@hwuHGYm1C@D71&Fv5s*O^iQT8<*9v@VhW+TxoD4UExs&hx2!7DC% z!`W;N*!gKw)V#Z^N29S{D40vYBt!9R=M&Y4JD> zoQ>@AWZp!h*oHoXUsTZAT{c4-YOF#~DpWXxiI+~X^?6u-))Bc8nGRfn*`u#hYqkv< zt&!jQ*K!-1a3qX(ey02E(1)TXSg7coQ0$%(on0M86SW)=wbIu?vm3{2AClTCUwv0M zRDL+T)OzuZu5E)tTnS5YkY$w2Y5@uBob+xc#vG>fBRSaz-_BTEd zu>1g){hi|?Djf23>d|kX%6HWDTa?8JgS@r@zqc%>`QRhvXqJ@Ezq0bS4xd*ZAshmHK~dGWdCt(@YQG*M4Mg=iQVSNms)O9g^tdXL_FueTq^_Ix6m>U%H2jt$wj-`8f83Z&hvMk6y4++Cg z&dVA0FVNU}VXxMvZ;M3f?}emg(5zUOUgWK_%dX2GTEC^Crq5E7-o8v@hWLBzsQ2j{ z?G%f^PT87?^qTYPcHJPl6G6cBV3JqgS+H)RTx9ql_tI%5D>{qUBvmUayc4BA?fpdW zWaE*#8-CLRZXk&CZeho0pE;^msbC>~)~FG7-SD$lD&LLGhxE1kAo|+0HJ+Bti?iW) zFz2m!?kZYptG&GwypIi@*J4W#@oxteH_9B{T9Nj`MlQLkO>Q4By}Hv^6g{4q5TXx4 z?p4xUndoOZ=LF-|pN8;C3nII#c!LBWNmqdz(oA}LlmBSaZ5AW#Z5GMh|NU=W6A+dD zZ!cN;>BC)i-uTXrsBuQw+3~_aH3nozTa$weTrfIsXYS@Eyz{Rf8>b%wrS_VG*Frrn zI?v9{xzqea1K?%7vl9c3WCCj4mfd+nN!n|6dU`E3*8pSs83)Gjju)6(kt6)WpI?6r zTT2s4Q@PZm5+z{LG7rGr{$D>}DdEsizdmqP>1{MSmQV9|>jdALSu+6MwwPdj`w=wn zEqxFzq}Xp2C{b1vo2;SG=1qSD>R h*EqK{(yOYrwofQaGW_w*E1ULiWqFNT1vl?K`X7XXRk#2E literal 0 HcmV?d00001 diff --git a/windows/threat-protection/images/windows-defender-system-guard.png b/windows/threat-protection/images/windows-defender-system-guard.png new file mode 100644 index 0000000000000000000000000000000000000000..865af86b19a1cbfcae03aa988f34667c92c87ee6 GIT binary patch literal 71005 zcmdpeWmuG3`|r>o(gI2hBdLQ2)@rFzm{$3BY)bQ@_D9tZ_#Zsv{m|i9n&uFx zzs|h9vX)r!UC~H+?R86p6nZj$=8a7)hOqXJs&YY%nDmbx;bKE2`Z4itk%GK2v2Yos zyfJNp)=GbW@X6)L;lR+4U8%$B zuz!`sXlV%dos{pYtxqBO?^w{;cA9YLFbji{8QO>Njr7R9WFo(*lbA9t|KEMQofq+y zU6lB}_ChXh4OJ%+K9|@{p(zcCOt({4i~UeXS!p?b@J27hxb;xvrbuXv4I$0Vx1#V1 zx4kO!2@%e(-BbA1^~cXubmvY+o`p$&U+9do>S)}UtWBHMpE++m*!(cgmGs z`Yg!J#faFRe&XVDHPa3;o#Go)d_*NZD7TZ35yI#* zzWAnQRH17?ZbgQnv-66goJy<76);oRxSU3z-ZGdxhCI-e@j;Ed0l*z7y}W-l>XYzL zrs9V-$2&jF7^CX3hR2s|{>wY+>JK_shVmxU<~ro>&HZGK4y}Bp_4Ed~n|V^caq;Sz z+6O*sLdUg{*+ll}tcdKSXOVJ|``_+VM3}bZQzl(e_+;5WDvQCKrdw2gE}o~M03++e z^*{Nb%n%_@B~S4e8#1hpZFYDg<&6_^|01cJ`S&;8^U=vY+l>*P)RNUpbm*9ryBM7< zYih4AXOGo&gdBC0R{7L?KlQ00_fO;gmcBVZPu;(VHS}}2f~W{7%|v!>3f{Lkgdut% zycGfX8_ z5U$*TT~38f+&EwO$xi_q`Oh8Oji)sXf%K9(L>r01t`ljFc30|?n~$JI%AFxDM|^PF zIam}Eov-mlG7-_>Mc>h8kBtgI!1w#Al}KDZd7Pizsr`16jUf1`Djh{-F$z)S_V*%y%c`7Wxw)M?_#aXZ7M{Jym^2g!u8;eLmi}B!+Cmo0lc3wqv|j zNiX^x5&k56uBqRrPt9Jf4^J*_FCv-YByc^3N}^1-Ioyg=Pe$5nG*Gt z{kXSCPK#2zZPc=)o(OteJm2cHu3Kzl`@sit*E7_NTuvT<)qYCFd&3aOt0wGzEiP<> z2L3*F(xi`92L7TZB7l%PuVL|!^Wy9!&E$~`vj1p*)c11;V~<&;@|ED~J3eF;*2qq( z3b4eHUlID-#y+RYq!x~7bBbK;lZB%}K{|l(*44P*81Y7jsxwMiz{jt4DNE{`$zL( zvSAeoI@a&=G>c?bi`w%v3WD0`L_Tf3sfsahG1HC)NM00y!J3UrylQ_!JH?-(M;{3wA2Sp zH|yHY-1a9YuQp3p>c^pjJU=~@6;ugnaa#PAkPV)P*74A*>YJVRBnU40UH^1`Fy6N{ zkfj_3rD6Z$LMPQPZU3hKfa0IR_vVRI+;|`q!wJib@I6=`KioA<`|M{cw9MYi7L#q% zDNmC14izTb7gjX=*}SgHgmqzf-0@&#$AO;rnLK=74Dz& zz8{A$u11YORWl4v&ScP&mG#Qkd8%^mbPYW#s!^2IE(E)FTi*L(yRTJ4?*z?1-SD@1 zq8gpo{-saOrDf>ZcT+~;xs?)IXe8KXU+V#td|0(hK21ovte&t&s7yaYA(%Cb7M4EP zc{Rs~`Om=*zt<#OIpsvWWRRFS$vL%i2FlP$gJxE}dLW-6OzScVzSctJX^#R%~^Pmjo{#hhg=Ay|mt z;>Py4%JKYM7i-r)NHMVc5LBusd=Njb_U`*i334LSh_sMHcElaFA5x8k!G%xEH@bsyQz&8zxlJX9 zu1NKA(+mlw8&OUfJS3g%x*+}9;1XldAVrCazS z&gQ*j{VBc1emT;0kX9W^%;##o@DgHjG_9js_Po1ew{k@RBgYn|bVI!VqmZ-hLQ$_+ z{J?9BIC5xsD{~M;<0O@ppvB|*T}2HHRj6iPjwn7!%fNeV`uTdPL?_sf2kQf3LWx7w^}NfX zEX)4{tp8Xgiolpu{iD%Ns@H4O^1Wg&`=u~S?BI!8iBd^Fo_8lza0cf~KF8>D{cw5K zIo~v)d5GQ9;L4$eSeu+7nz+>9s+u$9a)R%0LXI|zhNj_bBliz2AU&s>k=2hF^5YZKHl0$z;kx$NviQavzaXK-C4rVyUwS;(cdlZhPBR3ub*X z1Gx)zg|~^QI*clKh~Y2BH6hTowb8QXgw?Xe54@H^7tc#fdc`Qr%e~IJD@5OZp+we` zd^(TXZC<>0*;8R%lXK#QU8=Q#Te@%|*))LD6CxF!0aLVwY~%J}Iq(rTY=|5@J>C== z=k9-N4!Ll1_K@JM^~&cLx-;t?`~y;-{=_SRS)<5c-S3em8G+Pror8^*zx45LdUsNm zm)jY&e_De!H+8`ABAwe!i?K^_uEX!bv%zcl)7@*F6<$V3XbatZ@sBILvLkB!pHX*E z4kujar9}wkS1F$l_bpkIbTu3f%x;3R&c9h}V3Zsuy7Qf`mef#pum$iD2fuPw(7?#? zrWz%)J`)m<&fqD|cXtLnD&Rr=a9l$%K4Q-W@`ZoOw+Z;*o?jY))T?$B8V?0_-Y! zv{w~Yd%H8=YeZO#xkgcn92nNumP5HEs=a$^C1;Zh(l^XxZGN8P)j?;UG;=Zbqs*$q zD3?y(=0(yIhfJ^RP1p@-k>i5H)OPnLFEEZbXa*z$@0JPZ@ z5*z|0e&|5JXf~>UFVl&={@#`HZxT?+U8`yU@`*zkChBy-%Z-r|27b5KuM*M<@2hK9 zyj0&>E9=3|Qc4J#syF*o*F$-3-!^XDKr8HV{5>Yk*}!ePb=Gb>#>Bv7Ib*gInozHq zX0lw9B*eZKXDwFnc43no$#eFtNu zJPFZN@XHI+Pi@OQ#$D0u&FwZQr>^#5TY&dHG(4Rs6AVAwZlQGB>10W3I6;4(shVLn zFU6W;INbYaxK!$W&b2-28ODhVj<4M!660C>ht?_X$2;F=589kUDh{=34%^CFk>>FJM4S~p{|sqd2?6RIhE{{{_3X&NKum~rd6s^JXE`DN|``S z=f2nHuyL0=yMChi0-w4K&2sCJa;ybY=?rP`_ zb^E1XOMc5)xboa*wc4D#AZ8txFI&Cb;E!fYJHs)rRH8~ZUOl?GWuI*Ba)T%+v3qRx zv8BEgUFb0#_w#e?4St=XxYnnK84IgFS?!||#G)_ABoF!g8;s0fVF3kh9Au({DR{p(~f;ym-3 z4br?GH4YgT^@%ah{2Hc(KMB5PokMo@I%~|qIIG#0i55=It67FQdfZ#~%4i&tQ3Gey zZiH}~{66^4H9rQxL$aMuma`_)R1xON6GM5LlW8u!s8wDWc`)?RMy`E+uCHbR4N+X2 z9%Y#l+nL&D`MH8piz8yAhiPo~C4}?Smc*W0vmZepOck?lJvpDm)IhPwHF!B%@q%A> zD*b=nC4(b=XMKv7ni#nm!9pNQV!*v&t9z@#)29R7q4jns$qIUY`E;_9w{e8tHePDd z#f-G@L}Tg}BPm=4VVH?aHCs>SZq5mmkJoP2Q>U9`qaMqP`>tU|4ioAPpkd?E%SjT8 zb6}FB-wuFKdgJyJONHZ$W18X8cf5gkLorDfB#6bSym4)Tp9#bc-Ci%YK&UC6)Wmr68tLkdW$Pl|{A`*U}eO&6Es_44!C13#X*NYZV(4*OPOlN2DKL7Zl8WUVpK`oOt?-G|;CNf$pNo^E(GhhUNuJJf`*+Y)JT8J7ZoG6*Rd06^HeIYhmff^~^lh-K)7MjvxCe4D7$`)tK=m@@Q zcYHR{rKBG5ES1Aj4@bD@PQdjO$xIR{m85dVnb7sN>X?LF`gSS(v1&pW19{@(vS}Ai zH$k%cjN1Ww4}Xo1){uU#vk)5q1Pw{9H`rDhSdAhb_+LGp9TBqo@o3NK{A9mxntpCI zd65iv7>+PY07U(-N!7{QeMQ*!rZsM;w+iUh*fMQ52Yf=U4aohW zInKt2)mzumoR`h_``R3O?YwaxXH;M~S@5;hS(q*MB!vl(>^HC81JVw=XFDJEVtZFt z5X`#%+__pf4oey}|DrPB@$0&T*kLp_0nY-u)Me!tZ!Zz*`96tcQsMUsXse&q-rq1` z$@Gyi0b(jEIS+LjvTKk^!Y`pgxh}L{+>FToMSFB68>2x`{6egpi~IZ3fAfT0aT;1t zR`foVS(tgQ2-f<>K)Mx~5)_8m{|NC`Gh1(@9S^bL6pRR==97W%Yh*63N_~yzF;8u9 zB&GydF~T>Nr-LJ`e4W0L|1T!k^tU<45zt#|X+MJf;-E%b;S^iy$}=OKxPYSJN9il? zrTKpGXiduAGC-d$C66~acP_RVne?Omt9sGDHjJw58HzTRmx3<$PfP#FGIm8Y+_>L9?q=O ze69>0_8Ted!Hg9MpZIuf!x=HJ!Vw4zIyF4%u~ESrPw%n7elBd$h99= z1z#>i_lJ`wX70D^5^oc^x#l0+6L=+BkCor0$^^|Rvu>M=y*{rvUauKJjM)V$&li;? z@SHDaG5u1RtlXvhs{Xu%K8c#7Qt$Myca?JS=krsz8IKA!ZPM0r34CLp|Kj$ZO0@V>|_d*CaFT3ev=Jzb;bYwo1ndS$ zD%DGLrDPRY5wc+Ch2RY)dSIS1pLS7dN}lEWhO5c-cyVn40hb!NZvp;35Xa2vAM+Bd zqzt4xlYaXFS+}NEF&k?-|JzRt0!Qa;p9u=z{TH0;5kA{$raQ!t8)~h)F5Y4WjB_?3 zc3!VQrbgU&Na|z}R_r;KsPUz4EnFl{K?f<&wLFkDnMYJih(Q&7Q_5-*QDOT0%i8<$ z&GVn|=AUV^rGou^9|?1EH56-pE$H(X6a`bz2Rvo-#w~?XNJYapvo=T&>73%}Ut3K& zvMM1v3yE*KUY-ZP{G#`iEK6Z(Uy#23NLcjDx~HxE_;4ivUPhUQppwczci)bC(v)-j>%Dyiu{w42f=t7Rx`=W;^E3in?l2cgcJ!UuQ3K=~EyaO5-_C|t)DKA+Msh%HV zZ)Y(DyhRQ{j5eIbrf<@fHz>buLKX2Q(%c3O?9*Q0V|xhppTo{RfOV6%HyNI_CLYRL zinnkSoPR5966RgA)<4*oTm_q~_MZ!77UYSyaEHQ9Ha2D9@Z-@wi}Gt2C%@yxDTZF>khCVKj;{$v3W?4x3K4 zgZRRa?hk#_>UkQ{@G=p?vgM$DTL;s%`(jAlxn^Bc_Hru;3N&P8?Q<%C^NjqI@&^;dz!xg8o<0Y1I5$niqz z!{K6nbI_O^HGEOYp0iDQj(m|527}(fH&{g$(QSya>o%A(2s&-Nb@ZmnbPO;qh}qov z-qpunS6T4Ft*%_ibv>BUfuZw_Lx{4VUjf4W+vJr zOCV^wdqs+NxylWx5&1htKo-)TCNq%C<;r@PK{?2Aoj%E~7O!3wNCZ5mSP@xbCZ@W7 zGz#S9S2s1b03Ur5-XeM{pJNJAIiy&2<2piDB*x=O)=UTARPr#4^kw5)n#+uYW~!{* zE6hnLns9&uwZVr1Toa~mXLGN)e?PEeSgVD~!B-pAwlZ=#0F;k;@H!yB|eK)6{PKl8Aq00Atbio8%SyFc!Joj9`)J{?+zm? zC-iPR%i<@v^uaZgc+j4TCZ*c}Y(M@_U;g&`U{Ya2Raj(uRdyoH%BGggG|}8AVQbl% z&M9nVsP%2jPkJg15-|j=DYoO>^4R1iG-Or)F9`LIpc4JH0 zQTYTam6Zt#vFbUxDmlZPzrUZ!$w~|YvnZMa20?xOA|j zWo(^p{ooDaf$f;vyn!9nPj<|x9g9oh*q(jcy66rfmpa?lc8aKi*dA@o&cbRRluq(% zuVD{v+sN$Dxd|FWIbNVuCkp|HV`CmYjdJzzU{gI#X9BG-m2s9 zu_^Sc$ZWB)(4ft&q;Cc>+}h6jLz;N>rZ_(#z_b2m7>>RVWHk!06_%&v3ezH8u!|FT z^TD>S`MpN(VjDIm7PhDP)O=RqLr(`=gDLfQL8WivI+T$1AQ4-s`z{Le@q}U^@%xy> zZ(pq&`BHUm&v#Fd60O_KetwfpzVtxb#lky*CnV^&+%=A9Y!V=GW+aEFG%loLVGOGn7Y#E`uNFjc+Y=IHPT5G0No;Jp zj;;j^e)Ru#u~H6 z^c&#sA-$4U1f{;qVC|qk$!AAnbn8~GY3MWGt)hi96zadT?ZLnd7kMHXNNpxWV8a;_ z?Yx-aDEzWi48Bny`=<~#i0@5E@xN@Sb>~5TE%PWU1=UhrX_(DZDiN`OV%hxx;b76xlJv-6N@T{A!-nl59JeHhVP- zu*LFwesV{=rjvUte#-bKy%Sx86|;?Z5ri%u3Y2kK)(4a9Y1Q`7nnP&?{gPBD$l;Tn ze}v-@;=nif!bmY)?&L(gj0HRZ3CuqgCseJ^Yoo!c&ta=bU#HHc!c}d8akbcNAakjR zuH}q~ZYQW=LkbP^JbF-$=PTfTUvUbm?KMW+6Bs^6vLgt$%iKpF8Am$ALQn4l#bhb~X7BwO^uXE>e_-;EeR~G zSr-Y*^A1)z5ToNh{#zU>dyU%-YB?C$Ylo?4sAY|C3NEZhif_BLEv+sXnT zz)0@>$*5TaN7G1*7o-=frG)sn5V`k%@*1m7)i~nojL1SD} zQqoJ{yo=I$MVFq2$g;pl%%TM?^SVC(Tfg)BMY>TM#b-kF zQU187OMngXFQL=aImq3UJ}%O26?oV8Pe}rbN-q5B(Rd-o-Lw^l*m63V-zWsQ8Hdph zpDud*Lx=d%A-K?oaNIFU!R(yg3Ywq8I4FOMlrT&O2lI7Q%$6+%{y%z*RIsCGV?mR0Oq-v ziRZdH7(=iAwA?rhS$n$c_%tT{PFJckIU9s1RlJ_^102=2=_m&&! z8E~aQIC*s*afE6>?gqG>e`qER|KkH@kv0@b$<`RkFZ&(tP($7RZMcB(Yzq=)ZBsnY z6i`Kzf0<78BXnJ+I)?V%ubuv`@!Jk}TxO0M-iqR(geEy!=C1djs<+pu3fdlUWJT$P zJ#Fr5cYruKCbWgZFO#*i(_4K7L_Ra$-p|PJuW4x6lU4Y`1j){18_s36`YwOGdD^LY zfT;lHr#WjnJ-}?J**|~9HulRnuTYHeR)-kvD&#$8xD)5ZwTmX!O`OXQ)@y_t$2)~j zm))(g?YaoDFTb3RduMbVU@1gz5+!XCZQ#-M6!23-Gc-+L$a?!%(by?;ya0-A8-1p4 zMzom~M#Hw;TxiKpuTR!9zR%31aWq?ixfUy z3SfqJwjfgoa0pk6lOsW?Pr2Asi*E{DM0FWZ)ABt&z-dtD@*MHX@#(MEHpMYLD>7ld zK(p8#hn;GqDwf&Iw=ETkDpP$x5<%KS3Al69K}PU(-MACxg$M@O)b?$&G5WvpEc@pw zPtc^^J;*nx6L86Q6>1?8IW>o=9}qpH9g&ZdJ!`CRl{KxVU0}W-H^m~>kIpx9D8iAy z2Dx}6MYYM$97Z!>yq6ff>S8a5dBPqmMxUnwVxOo#i(EBLi;Khc7v3hsc zJ-+3O4+qG43~^9r`!7!^&V(j)4%QfafG|F;ZR+3J=488^?ci^?Prn;9^_hm|or$6I%&T|$O9RoOHEaGph8M3-YmMMr zVU@H_3S!j%a7&|(dk?o-UnpTE>GO!PQE9xpMCj|{INVy=-;dX*FI#on3WSN0qAEUC zxo&esx_}j&@P2OOx+B|u;59*p9XmbcGRS^gbe~cyN!&m>t6l837$O2dqM4R)gIgD? zjyAM}XKFEy9K{ZI5FFdc0%p(bc{QY0w(ZL`DJEhl>+e2YX#&a}&R+o3OhOw#_vO`B zlaZ8y6u|)vRy=6N+BczKer{ZP9&BQF`Z=cnROjo&oNo1AV|LnOry1T0_1pub$hwMb zmb;M=UDFuLT{)}203d#$QMEQIVHZfBrH_gPmj(1{9r*Y?E;6YjVdSe@HJgMdwCB%C z03WAuLu`s*1E^%3Zw^w4y`>|*ah(k^@=7&15dLlzer>KNFZdg@Kwr+!>!%P3-yXbi zt(J461+eU;9jZ~-Hx2mu1Y_D8LQ_Hx-2``^_d9I)_@7s_JGa8BB0=2AMT1yPDMUp$ zu<4z$nV$2y^`<1<1D}~h*tu$Tq~Y__E@U&CNe+h@GN_23Lg>@?I@83`Gtb)>cEXj5 z2T1gg^hqtg`mfr5D$x59_x*Ki_~{d?-f$oeqsRG%sN%prv^snGI$UV)yh+-Z3cN|y zG1p)<>Yy@gGdngTkj#t}&nG?xW4{$exT`cS+~|3zTGwMGkx#q?ps0^9;j>W?ct-fl5J}p^XC1!TW}Bf6i@+{ z4hwdx%G^YS70Zp4h`cnZh~~f|$q0;gQU1LgpX0C3HkIvX07r&zATuiVWc6uM`JJaX z>m2()%m5)=7~<2Y=y1R*!G1`8Y7fFR_m6Y5U2Sp4@`4-9D82*MIs89 z^Gsxu!L)Z4cZ&R};jci={wWLXp8EScw)|HZAK>kG0v>ce*|w%}lnmZR1qNCa&~Art z&V0dJL$bGicO#l@=#>gEoFqT zU*YiI@qpwPnl>yidBE$uyb65(4l`ue)@Ak480!fw`Cn=IWBoZ(CdPPaDB|G_VF@4v z`x#sRJz0nwDH+WF%Eo_-nigjL=`LQMB^O2h6?nIRQUmY2>x$v5r6>_=o-7egEd-?^ zgLjc7IixXA#YrX(vv`C8%`Mz(stmS3ssOa1GDw}m>wkd5gx-y^%0nlB7&)M*y+F5$ zqJSl%#)$7eUm%(kEC^%p=^XUW0Qz0IlBv?C3we@=TmsZSFvFMWJt0-Rn8ZNF^4FK} zBLQNu%)D*T4sfo}DXf>r5*Gq&EeNn%2ihSssOM6p!JH_y_cj$i zeOrn7nG>(y|d2;xymR$i^MfCss}n8$ZIMb^o(Si-MC zw#lL|=a=SSbT$`fpU*X08$_*4I`4}f zj)`oIu!<*PG`A-BhcnA)t$WsEj`1L)W5i-Wd}xA2EZWtpYibTZxqmmI*WQ0G_3Xpz z;Dp9}f>FEko3&W@r-8)y%;v-SfftVY1!ygs#gBh%TVKql`HWW=+^h@H9j)TN20?YV zf=qFA`uH#Np9&%`EpM_O(9Bod_H02K>Vb~W#*(UKeZI~QG}y6~oReoXJq`Y%42cHEbQ`En@^Wys31&MFcUjwmjM4&5QsUU6irlH2Cfx zR~$IaURNbQ4-KZ{Z|fAK#ReEKw;ImkdGi#ntKo;ou;KBc2i19jcRgpcX405G16qqm zW83Ct@2PTafe<2v0IdbEtVEE}Ipl&!E00LY{dVjl;3Xg$>6~&kLj0O8HiPWI{b`8| z1}>uD=a>kP_X>$vxGpt1fVa4i0cnu9)z4l0{bkz$;`vAuP=3H1>=wV({4|HFoO;_K z9SU5GuK{WdZyWdtQ`eUOa(RJg&VK((xtXGTmX!wvHaJoYJF#Bc&wfpYD z*SJ5dI=qi41qbx%1dcqE;(?QkIMlora&94|YMeUHhs{rSz_0>5h(NK)P_DY_cWs7h z;FLxAfB{hdoB=AQL4LyLdjqN@A*kxm-bh1IY7t{Pf)WRhH# zRInzLL-nM0wa2$%U1QmPqi%DY%4^5-VWMCxJa&Zv^INOt9G)H7brtF_$I zF86XgD8@Cz$wm*$9C$5Ud99SzJf9@s9t=%ta7Jy9O8&i7NGErA{{GJB&fb`dBD~Jx z<3;WWbgsx;xBNavpGTRCCYMGDXpYYJC1t9+$-MM_{<7Mh)~-2K?eV*k^AsQUDUEWs z3MT4IGbxtq4T`3>cta{i`Ole4G6w`kJ{<@!FIVIfoD7WdvSO5oF*>>}S@(0FIe@d& z(OSIy?oB#soQYKsRA5Zs>!1pGEdSwhZ+W1PAD`Q(tH0ZzCHfgTb;H5!dJJ~;ZXM2P z)JdB23X`K%lV%G+Ur=ddodxqa<*;8QdO$;i)ah7e+4=L`U^?TL1OIiph62;$VeB7^ zi~eCl6w>Ph=spGQ+w<-IVIf%T<}WG>=c)?Qkq@sys9wyocLY`rBu!>%jcnY zKo<(KKe5#*l3KIr54K%T?>UQtQFprmg+9w}F)rFQ$PEc>^y!aNl4#DBqovefcJmD-dtW^X=M^>m1%%F)b#;c`Ni30o$9kD zDX{BWNl&%^603Xueg{LC+h<{{dy?ZT57wWuS`n+@jcN3}5j^~%2OU3wm9+wQ8n`IhJ>O*Q60YjsV4eMzR zl&5Ifnbj*2bT#gJf;?`5pmSIb+36c7L0MbD@_J0O+ksu2qOCg55Xh*gz-Vt?e;f90 zfU{KoQ)uhTz@;>T`OmSnud!48tVOphM3b_ytwqJ}$fFrkiGE(s%~ih@a9(LSru;bQ zd@w^qofPp8x;*;U77k zL$Ww0ulre9G0f;CRhavwQIsv~ zVE2E&o?>rzE^FNbnxfLl2XUBNvu zd+`H5PzZiw%8TDXvfJv`nWm*0lyIv+^pfJw+D3hE%&9+d?O}iK(rvVT@+=>A&a%YQD}W z?wLKK!~J6Ozv15hpk>-X89j{ZsZi{a#9i{fj7bDUAtowVUnOHRWW-6wRABRD z7y1&0lOCs0j4f+dcBHE|$bBYs6*%F9)r$jweSR$G-(qVW)fv zdRnrj|K){#KFIS+4qwX~YS7ILkg9LJ$qGX2?u{?kqcLy@t4+hh@OePRS~t~f_kFc? z(4JN<&pEVu1E(Gkx981tD6K$G)uvh`21eaWKwo)VeLj^mzo7zYv0Z1Zago@;rU9L6 zGUD~wb4&p1(|cip(&b3!BnUuk6xgIL5}+H8|Ns9nGH2g+qHIo#t4gS5Vz*J8kKD8J zZltfNz!mQz#2!}|_HXY;H61+D^wA81g@DIjf!5U+@oZACK@|8Hor5kC*qv=nGp_z3 z_LAODyIkpHnj<5L6_i#uKy9r5m?$FZGDy;AjsT-qNjj4FO2S;>TkAJLZ*Is-Koju! z>MBgSqA|w49UnVa4T1VCrt5`q!{YG!nw~I*t95Vg$GUEfB)@J3l}F8qPsI{r#e?%0 zc+tydfH0%y(Pex%xxaUnGRz4e;}QqyPuJCQjQ3DI1FzO`{aPaY;&`T{9c(A*X>~=F zQ~gGUfDr>1e(Hz{FuP^!b)i@MN2s%TM|KU)P&c>qKFky=%|g9f%yd8@UjJPHaCLy2 zsuK9TvJxVkKdPgGMN?6&!D2isj4b{ER0xNywCqW&uY<5|F=Dgd@=VOj6 ztYKG@5x%ZMgh9!n7Z6EYh?k=(bW5ww#i1AoR1Ym~Hw6q7GsuQYh3!5n11_1Fj*5}7 z^)93=PaGp+N>{|^9j^DFTjnVh%4hqdtr&W>Ri&{oX4of0V(x2XHyuki_aq8aD?aO) zhkoU-?fN4mEX+fN4^a2}O$m9fta;#-fCNjPLVaNU!DjEALtm}Z?F`Cq)wji8O)Jo) zGvDU@WMLNRBDmKl7YSeoQ52>E7jzxCxaf!HD}uQ1oY`kbfRyE3AyMtYRf)-;nH#X* zaGO-n-dB-bv&geq_jb9N45l#EV|9^;Ml}OHR;^ymA56|9HaH3Km=({OC{SnY+aB#a z!hqgotv;HlK~$Blq=b%)YRr#e?Q@9f5gdQ1SDOsR&i2Qm;u}f~cLmESiK!i-2`1N-dI$IXmt79)k)?ikr(f^Eg6d5c zFCZzbw6K#CfVY(gYIYqsO@<_COUeq`DuS6;nhImat8LP#xpQ;C-_4Ld^~JAd8b3c6 zER1vV$OA6KQ_J!bd&S<-7F8tw<>XIXIRaTNhj(h7a!~I#vE9FVh%BxC-^5>O?2JDM3pJT-S;8 z%0VA}$~mNbRNIh`DUI-L(6z2>93oDI8wL3;rreGz&v5kL|NhFRkk3N1=H1e`V30 zFX#@_Z#o9OC3pyQnX}6c)^XOQQzh z=WJ`hz)x`im5OV_h5DkK zU`i?Y+s6lgY}G&mBjV3@9N^#Q8+=`s8Z@>8h!b z9P#-$Ltc^hMe$0^nc{mZU5eXnfh*h^gFd}v=*jPX!watN5i^$LOn|!sx&F-7kDq7z zd!ck$RvFjx^KXV6n&6`Op=!`luQt0399hXz0QGXYc~g@}0(kH7ZzkN#*81%)`1w!m z&2*R6q`b|$z2S7FK=!n9{hIa;32#@#;Hv(SF-Oz-ndGj8qbMnvFcS;lR# zp)340GM&1qi#1uQhZH@M79B5is&~=j6I5n2%LNbak`(zUe&FTN!08`$>23eRG6!dN z{Qf_2!7?yG;20%gQ%S&V{uTp>}iIbHusa^Q3i$%^4qz5lB8?ow^;5*$1SHj?qYgFfywe<;qch(kkxJ-h~Una$1nK>@1W*K9A&oDcJzfgvcve+U@9nE)zw_=%3b zY54vF4<~_PnJeNjVZ|{=Rz<)|{TD3F7Ia)`)4S-d$uzrC>akbBwsiYk{|&$p&sgMf zrVGYrdj1{sGFhOoV;-s!MTa+;kxSDR}Kn7q4ZCn z2Z)RG4fnn2BEf94=n^aLnCr5BI_e zHcjDnmM3~W`fNSMhw1R*PVDIyT~rtKvn^Y!?zYF#VcpZt9gL>_@0-|%`TRH8+_y~m zh1jSX)?NW!v~D7UbQ9oD8QkA?8r^q4GK1Yp@F%=U%O4e+loS>{km*yj`J0(bPL@P5 z`ZBikl5u<0xK3a13iGKcswV^fKE+LDeE&2l!woMVL;7u{tq2oqEIR#4z9S67I9(5Z zEjV!UjV0!i>*GeaCNwDs?7!<57Q=>57H+cXyIXh5ZS6w1iSE;7`|QpEj@@A$?b*R_ z+Qv{`7Ct_5?Zk08M8C(x{?tS-iG>u9DY38joj`ImSr{MY-7G zkza(nrb08R8JQl+=|!fR?H^v8H;GOhoNf%QrbMMB;Vum~9TZBlJWGSI3>Q&RUA9BV{HzhyH41t4kG}?tj z9|(3=Euw#qQ4r5wd;k!9uo<*pEH*zjKsLuj=Amj!%0$e&=G8PWPP#Mpc}qfC`1Yyy z^w>$g>;B17i^+}V?l?fRqI%cIw-+;c3qsdn=^Ma!8<^3>SVOBp(o+vK}x1jfQ>)WN&>obvsb`kGy{> zXPIJK1^$Ymr;Apy&7Ln*jHNI=3Rykt97WtGui4|!KPW3AK+-N6T4F3N@29l)Fz77I z^KE8eLt^4-VC1l3QA$|E+OyR1RqeU1pn=!p8oJR23U$QWn9Zad?u@Bnii{#5BkhVh zi7QfJ>M#5ljcxx%MThopytj}XS80KGo{PlA&X+3hhO?uoH>rz;#~GWSZk@@pPG9%0 zBRfl?nC)^F#)hVKgsHk(moD#nY7ti^!ge;l!feWEyPm7T`ry*R3N zbpT2K9$Ed)X|Z{oL9*0f8Oj*f4Wx7~f@@!;*!Z}<=}jIhA(k@u6Y<&SorK`b9uA+P zHI5o<>#Yx>*_-3{#ghJ;*{tOI<0Gwbdg@*8zFsvw5^vUnJwbmMP+j2buPvHR<$B5m4n=9Un2f#&(lC$@-_Rkg%{g*#*Bb4Q; zKUoi*t=~*8`dwVKB~MtWf^8g)P<{KCB~g*xyFjPeN`8n6#YQiI74dO;>qGdpf} z6=wmeao@MMgX(yOyA z_AM#;9B>fPsT_`$SSnS2YpZ}!)?Dm)ozpx{-#k=ccI{)sN+Q9?nK}?f0gEG64QZI} zz_j?PML0HvqJW5}KNm=LqSu2rR#Va?ogP$t2xV6_>hHsU^4`;!2^%v6WRg>=xi$0fcy~qOagu&{4*mm&zO0`5z|_=WeKgo_{wtfo@m}aLJc{jd zO4)zYwrCO|_!iD>RWA?NHW1Le>)j9D2fF!*H;27keBOl*>Em!;ZGM2vHq5Hvq7k@C zbbg9H`Q2XL{@Hz}-BLohpbX!5X;clonXRvwA07)n<>QGu653v7$LlMY9&piL8)p%5 z|Iii*VP{!3FZBG)|NJDy{R5#s_*P*%0=p4>3eV#$)PGb4X2Tn3CkM#7SDpbrTbK{z z^AO>#-w+4~!bSjUA5c|>Y|@@cz5h4PkzlrL!nQW+R~hq*;KSdHJSA}68rQ^zDQ~y zYwQO}RE29%UDRf&doZO%S6$U?~E-*Zj6DehT^t}G;`PNpY zOBAvD#O$=FWF2s~%Xed7b~;azF7SxO4XfofDZS(6waY15(jMo!T02TmA4HLbK1@g^^rp=2KFk4e^J69?=0=Tw6lc+V!F-NC7Wb&_w zvmiR$KAjm{4+Mwz9LHW<;&`|)xLC2I!8{!Ibc#?3*I={QlYPhv)<9*Rmc&^4zj7bl zBDuNQu3Z1$QrP6*az_D5CbWmx69dEleC78nS2&sp>|v9p!RD%okFW+n~H|;*T-u#f4Ug7-_!eGUzYtr z-vzKsuyDWoSki7zUX6?FTU4?|r{-o%6>zYn`=@|2XU6iJkYp_kCa2wJin>hH_|b z_xx=`X8bZ4;4)t?e!dHGGR0Z?a!wO&Cc+Icm#Ju$Cs5(#SYy*^I&VXmUfl zotr$G>f_e3JVy^Sg?K0~w--afsexLDP4RTiJB1k?Df5gy&lHzYq4j`Zg_^*!)c(B`wJ6$4d z0PaQvanI|NUtvKI2x^C-od-B(t1%PfcaI&CQqGq3MDOLJAv9%^h7j)>k8 z!j|8gcUf5*$gk=Ua{Nd`k+QK6YdyOd22+hNvX6Tr&$!6VpT%}&anS*m1~v7jdp`FeuJVrVV)vVaE|zxKk5TM zjUeFUPGc9}OCe~siHKj=iBcE zR#?l1r_`O?Tv!01-Aq8(!CN|ACtevRBYe?au4i+{XbNrGOFHuQdsbGE3x;uWfK~2_ z)CoWgXAJWsu1|r;kItv}(cI}bw&g$WUSlc+z{l&jnVt@F0QD^>uXs2HB#9cvMOq=U zfk70lsyde4UbX#a&{B7Khq{u7Tnuj!0h!nu!uh8_19QYPX9*9$eVZH-w<%Rfg> zj(B9qQWdMWIDSRzquJ*0XhbE8t~4$pVxJ=)HARZq2EAwxkFz%MN0G%)(H+d&FD2Ic zPVArB+Nxe2bb7lk#hFI#xct4f!~BYv7qX$)#@C?p!ErVXx`#*})~{hyJMlhE5f>le zqEslQ6H5fKczhoXrSI+5;12w8qApz&{2afY!g+;4Ro^X9NyP?+DlZjg&?v{HO5MG! z8qU7&U_#;Du#Y*zl!`#9)mH*|8v1bTF0GG!)ml>Ui&^Frn&LPVz)4dk7zo{ z?rm0R$!2m?CXM`cz3qVQRP`9j5P+rtZWagPV^De`yb&T@k+3fauR+ zotVZAZvqqYVZ&pZDhq$M=gYo9(-Tdh9TBauJ-6u6`c%YIh4X^_9RcU_w6kFe??VQ} zeO(l0SUo~FHUK}bd0w$jah7x<@n(B#qUdnZM1mv-ca2_hytZ@o>zj##tmZlv0yQg9 zo_ck>ZDv|Fmg1p{2dsr45tuy>9zLA6L~ytRz|i9dmm9YB*?-hLjr9*6dEc-8gj>=> z$}coHQb(Q8OnPqX>%HZ#v~2L>m95&rV?OM`l(EQJ zzRyv4cnLY*8e892JpJaQCb(uy- zyCv!*maMX|S+oh)HSMV>t*JHDMy0G##5m=x&(7D?A|y5DKxMZ2xm`o8ZcqAh$I zr;3(UUZ`c^f>8D&ZpKHYILr-xj4vJ%7DAi|5@s(9w6rl5Rwcm~MPIn3tBJGccVJ3Z z2tNL_63S7QCy4|`(py~F<+Dc^``&KZhG|R*NX+|1U%&~6o4I=A*|t|U`pZ_=ZlZyP z2+rK?6uACtJ;=?{&Qk|1gK zjjUVr?hBu9xgAZemdVjMFT@;9c@Vp`HO>tL16jK8=Ij>|uAdLHv6$vKslq&CLW8as44wWXpT<1ahse1Lv==W{!=(Zx;Yn7U5JnB zeC56?w%WFckvq}h)*V<{`&r_J6!-7XEu~pzt%M>nwE!kSt~l8NiDEM&6`L1+unkAQ zEH7w0F(^_~dalcoNm#wG&)!VLc=qnch(6TUFtkDk{llP?6U7fWJq7AE?;l;7xO^#e z&x1W$n=nuhOw`sn}>K{uzh<{PZb~)e!w~GM6TZ~K$2k?T@S5&fb<@L zuw$1LlQN@TnRb@?UcmWwZ99eu7*YbaPf!JgFbRLXGs`eA;#AJHH`RLR{1D%yI>mv{ zkWFD?q}W(nq@iY$W*(|^<~uNOpcCrL6|mJCw##AP%?5uTtC&h=+P4;ZTtM+-XEBn@ z3=*0e0~pAKFV`=rr9>u7BSh&O422#`q5mwbA@`m_KU=3$?T(3e ze0+RPd}3JA&%eeXbu26zAIu&W2Vj&M0^%JjVb)iVU`R?PV}_s`3BQWi(+NT#j^dt^vwmdGq=SfUq}DExd5 zl8^M6%#pY6fpfs_?33bJ=gDm+*9#EBmo=0f0a6NMe0f<} z7WV0ohipPuNwhe!#cB5ep~r9v_x~^amg8Q5FQ4j^jG~2I^iPf?IB&@p;1Ga+ z;Tc%@bf*Qna|NWRQZ{=%>l-9KS6IBJ-)#n|g5k=<1V2l+!O*Dia!7^Mi!g{DzS#W; zPVx3rDtCs*cHj#HycWLPilNoHVSH65pfo?nS@y#2*X~ZA4(0VY=eH_nNLl9BGcjk42@L@&o!H$A$r*16|Gw7==@vVveqv{=#j#K-}1OU$w z=vpvbLrh5bn;RwEB=ckV|VDRbbTM}sOcrYEpW z)@0uD(8RMDuEgCKF3t%mhRchlT@X?2y7uGxB+kP{P9RYo8EA*Kjj&}MPSTDL{$zK* z1fc9ND7ymA%17nH_dfQvnz6Ps09ok$r8Zyg*Rv$U1gngVjo~1K$RguxWItRw6t(Bd ziAK8MjAVMmd)i@J?X!l#5&E*}63zqXn!-$tx|*^yCPe6Au;MTYeSr%LlP8ikw<6SH z0{SCT*2~DtZp3B4IS>1^g@lzEh2zG5wI zP!$*{=${OvwSGI1L8@=9CV%P0l;qTU`BVtg%eL9`u&>AVh0hY6tPfQD$L=>DSZPDXy0qo{FLbgRk%hgq?Z*?XWnEFb|w-Fk^F`a>rXTf@aE8mb?c+zfOZ} zsLqI6>a_7|GQTG90I<1lmFV`Q(zzEHv?Y~;{|JjzwbXRKu`ViTBWjukIe%&a9qB@C`1bo0B%sW@)ldoU3rUN<5B{tu+ zTlXfWME%?HFP)?w)S%l_Z2Z)13>sP@IQZ9>DdiUAj=qa)^wE)zYkge=y;~JfhTy){~s)voRHckPl2W08l7g!(ca=Rg$z=y{vw3viWe?H&_%9mT0^m(xyPEX}v&C z#|InWvzKgl(n_5!ymztA4J<|V`^a0qeS2nB%fKSz{t$T@*&@fSm`rYoI)!CFASA`m z+fehEn&rOHfz+TS{QA&JGz2^J#eZ1GtRqGoI6Owm;I}}ytKK|9>U%QT@H0`?ovk+n zZv}wgH-pz;?!y(17PM@cJ}Hr?nyKW&XB|ePf^#ROIe@~JW7&$w88X88t2U==I4nNDaES0Dd<~=2 zik!YwmJK`5DQa=;o>~hL(>o8Cscc*GgRLLHNd+gF#RU6VIXNJD6e|-`W*vYhh7p^i zV5`g@iGKcf+*7!_nFJb^TC-7t|yc>47xvhu3)svn%?gu8^z`=j3NWz z&uW*V9|5q(UO>lkXxrCGcYq<-|~vaUF+AceGyj6aV(J1%mIKbIG*jgYbnvwL*kGts26cRAW=)Auk)4D#9MNv?9K`wo?&i;?e0|R=v4HB*dB}AAuTQsx$kijfZZE}l`BqQL zLIFX`vi~SXFW1ZsfTHc#iqe5Vhk^XQ!sX$DdeXT}^L z*oV%`rKh?|Um4*eu@6(UZJBq#uOQf%6>Ys)_9~Op)@ZhXGRZ62vV3^tx?U7*N~u(~ zUFS^hUBkf~>>u3%W+UiS2k~s7bwl5TV%z*G)@Iwfu*4>~{6s^yd5n+=%bQZ&$qER} z_oLaLr)A~EV7I(lle%*~_g1D(S7&L-0>HF6ze+N&eW5ZMO>6QZH{yD;)ersNqEhFX zz5o~|^Az?ih!wmvKtA@BdV7|WLyvO6hZHc2u%p8XMwa9oLr}(Fr33K5N|^R>)0tXYmkR@x&er$7 ze>y3uu(e&FC5?ByD$RhcHr#&)WUZZwF4VC`Ex?Vk@@x;I9o6>xP5fvk|Czy2L#x-V z$wfGu_|;Oqyp=&^H3$X`zV96-zEAmgSn# zR$ZJq>&*=5Kipt>4eWgyx=S$ML-XB9)MKv2gLKbI@)_HJmv!LdulX+w0B`3578qU* z-X9EB=Eh_$a72~ntM&Sq8V1Kl3FeY>-i>=9{PG+wbu(RxpI1ExSrxBKMP#efyW5HN|06=)xwwa#q9_?kXMC?cAwx^YF zvNeP#7G;&coH;d=$#qxUCDZ$$EHY@}_|>vvTiZ9Roik&A9uVezC8HJB{>b)m6V{>NMekCaX6 zbx<|4ZZwh9o{GPM9!yQVXJym{z>g8>pM+*_fUsuAYH0=QlYdsvdE$BIcG)sbC}pJ% z-LlR7^B!o979Er5DvjM#YgG3x+k@wgU{Y-9-Rcn}qNr;`?UbJhKiUESBr3m$KW!G81jH|6UO_^ygyw zHYj8Ft2<=s1SRLA?U`mCYybmO{d)?BCsndGMje*u=vS*uz$e&&ni{ScWPzq502Hf|b@QNhzL2v&ztt5f z{PE0dg|qSrz-;_Ee9Zw!zqLR6AZ;QTW?eayxINiI`L?*!h_nG68pX+q-*x}b1@LbZ z55Ns^&wZ<_r1F`??!9f*1+9`_#9C~E98A=iV+^iTOJ`kS_?ls>&f8T$NgqB1OlQ-d zi(_~ap+$i^MeLa@jJ6WCs0sr@<2doUqiWr?uP+AsO?mMKMz9AfD!<8Qgo8eWoJ(#? zD%Pk4u%lr_#yO<2*!DF0Flsp5l`Wa)9gf5AypBl+3K9s}bv1;UoSExjhS@1^4QSE;O_lX5bnPVfe&WPuZ*O;gT|&5DB>U3iKe5^W`v^V6G{Uv>JLK1UY})E#LEVc`+2` zPUmxyY*rRrkNJKu8_cuc7p&ewEEg}yXI;VBr&F>ue@QPfrGM73@_W>;*XL zzIp=|eBIMDQ;s^(RCUm~CiFLPWAhb~PJ;i!lPs&@^~y3}jo%RNhB()8 z$JP>Ke2qIxji#41*3q1{b+M(JF}@4dveNi5f6E(65vG0lGzKk-oFU0cH*>3}8zKg!4F-A$j^n-h0_KJ)iV8!>+wDLu zYa(2n=_GWc@3 zKijByLm`DU8*uT86bvh_StuU=YP20-DAkPF;D&>Y;cc#J%Fzszsat>ZLq2DO9&uhS z*zuGibtu)mF19HBW4YK_F`d(PmlPe!ZCFZX`Z-*?PMbzTo^6jCG}{e+yTa4`U%Ju! zR@;L=-i2lVzqwPu7UPS9?dvm;J0nLz$oXP{5LDBLLO7#KR&Pp$nIR7*1b8q%n;Oj3 z`F9N&?^v`e%yVKv?{xg}WmbTZ$~4d7msR5wnnl_-OHB4(b7IcIZiL~B_5P$yr==9> z&1*|2pXrLRh^?8pu{JMf$M$5eBbc~f3*bz6Qd+c%5%5BWaqXGnkygC`yBb5QA-gbA z!^Cxj|8NC;<}p{)qf1H#?;205O6`$4urRd0AkbI((8s5OlWuoOvDd#KB$zix^#OAJ zkv)+IpYCg+z4X+KXu9-NfW%X70d%~EychRfVRaM0W3~{~()US5^=zaW7l0PX_`|^& zF4R_*RhCtyjE;;mroYdv%C|7GKlJL8N6CjT9gkZp7^XIraOK3WGU@vRp`jz2Mu5<8 zo%C4L-^`#;0#9D|L**|3`8@c&c2iN%l|;O5*Yxx+W}5G{$KsaOI~g|oBLZ#*M@3RL z+~5n}=SahRkl61n;s4S9nPn{S@+h}Gy${xdm!Hdz>Z5K-IqSbIW%2U<-F2(|C+~I@ zCYRx#~lPwAT-j`QMF z6KIN9&Z_N+iv~A*y)d}``AoY_3)e5 z!wBGPqTR!j3vi9My}&)M6vjdH&IVq)8$XkbhybN z8-Uo_H_!A&S+?{cN0LOn)Y`&<)iYFvE?OUkF zZKH?d^2BI2vo}ink^>qAD7qHKA*CQU0MHtaB-ZW)QJE}d zNm$mb>L}Bc2oJ@-`%kvfzv3E34r)OjTyZ>D16E=Wnsea4 z{n3%JbhCjY)f?ksf>cyl2d4^evc0!Vwyfn@zeg1u6=7Mqv`GH=A);{ZafvDY%|(Lu zs-$gsqsAu>n~&GZ>`Ycfi8x*pxwLT?TluSL>82+RYim3q=HTntXj4qP){!ylpG3l> zfChnHR0dq0D#+W5Zd7luHsjlXqpw@1;D+Uurnsy+>BB|hx`j7XCRX}pFwpTRgaIdB z!{D*JmhCMea7{H`=WG&x?Yc%otYtUlPnpJ@JxD4L6H?}RMC}U$oMSJxMxx5qhU|vLG(e}fY!u{3m zjw=SpcTh$GJqhRJxR#02Y%CKdVq=@F7$-HXCmLd88qKsDHm$XUG_DH7W?m$;C^u|| z2E=|c5cr(;d-K`@2sd0mgIAsfR7mAxc}|x={!5+Pz5`9`a=+V5f@-F5A*CNs(Q8hx zS;Z%{IH&0gD7~mVgp15jGq2$w;FT4Msju0GmBByw=Gg|PG)7wv3#FKC;(&jqLG`qE zP=hBbGmPd+0+&xAigj_YtPR9n1*`O$8lS~>HwfkakHL#n*)9%N;~Me(N0P`BB7rRw zR2MsYMCg;p{uMWXF!7iR6*z6nDDi%St&GRLUHt9~PA%dO`QV^Hs{tX#EN~FgCREGN7Xarxs8{(S zAV~e1Pv?!!z-LI=C}~FQvzHMkJ3%6`StJ61Vx2ANj5^GDkhmh~*+fmq7bqtF4D zkIF<6FlVyWk+MH_8vGwa1FXZsUC1jnWLRq|C+`Q|U&r|p0{RuQrK{pQG3k%-LP&0J z&cg}4qyvS3IPO^k$9{`Hg;e&cQfQk*DsRq~BbOTydL3wStTnLtT+zQa(>Z^b0k8l& zpv<_h2yI3fH>y`+qn$Qy<)HzEr^6BFf|)#&gvWJ+)*ULe53%&lTYF~~*l)dode+_b za*DCQxo>tR{W%k}H#!{Jjse#gZj=F;F#^W2HoGp7IXjBQkc zhi{bes3&V&o419=(lfpJ!^BA-h3P$|R8RWW!A6;~!RA7d)d2sB*bEoVZ)HjZ)Ez|6 zh1zAsB{QEXhP9dP><5VQ{-fWZDNX!7z?Ke14@$>i!w`v0=5pvGd;Qns!uO-AMO(7pnM1fJQ@DsZ!Etn8LS6NHX-U~k=)D- zVMc4cO=BysjO+>s+g+lmBn5c4p~p*;0RJPT=jl(9&_^ili?&CfbsT-@5PP%j@$Gfu zSn|f`Vf6gL=*X>lHe#$=JqIVp4cVJr{ngm@$%eF0vUF|sug`?i&##U+YbiR zGhPs#4lSUbF8oAf#ZQM}9O#mqY_8G!n!egzY-V0l)=@WiDCvoWnXz@f1_29u zkgK^7b^hu*mBI_EvN4hY!7BQ8dYJ*I+ajvTO#TQ0gG>N#9AGd3ks{YyUdirU+vx_- zRGJyoF+u&4lFMqmP%{C8I8+4OEg@BYow)K3g#j74NafD??&yBBaAkV7ulc#E#Mijj z{ll`8LaJ;{{eVQJ{K?0X-)GQm*hbY=qNf}$Fn3qlQ!4-2mIwd!9nT%?gSr_c7(Q;+ zA%zxNwfoZ0DeiMy#>=W8t1@_%CWW|)9qEzlT{Y;uA*J9^?MS@)-AlIx8a<$Ti+h0> zG36Du{UpWFppGU*{|Jjpfag%3nDmen8u2mU_qlTK3U3S#M(?W%i9wkZLQ3eJm)402{&)I30Ng?A=iX+}kvVCN?TD2d6 zAeEdHbfj|N@i!`FGdG4-4ffnb#29;DO={mW5AFzI_pW{D{PU>rVY4uT2*?Vq)1dlEa16FcV~B%p6&&`C2$ z=I|>{yxU6BoXjecUjcoq)^Z@jJqL_x5S_XrlVOjGER{l11(BSGiq~^uO7h3?U<>fW zb#y=Q=Jf>EdTQ#WZbbdHLM%&YRWZ<7V$H^Z08X|Fvv{X@s0}`t*q_Eg;5PZ|TJcvQ6&XUi!Y@ z?=G#3(AR@Try>5BRPslZ&MDO^`8ZoFQ7#OhJi9d$;qO^XxYMnjc3{Kb%;S=ql37QX z-SuNvgu4AFp55zbe{hn86uP#!KYq!)4T|b%~oAJ&vUiwtYj_JX;&6x#= z3z#O6`}rJ#@fauLjdw>(%QDVjF+RL!ZKjO8TvRqvI^UhP~|9fR-gQ^Rs}0{w+5C3KikGyaYPc|`E(5Bvo=3AN~A;_l6F`Ot!Kjy&BgSuhdC}z zGt#Em&F3e&BRlaqU}FxVZ?-+64<~dGy%)id)Vw<0B{<9}q8|LXM=i;jeS1Mf3v<*~ zxl%G%`NrNGIuu$k3eJFK&b;+?VgC9OvM*`LSIvR@g^ysq<%|2{ePG*`EODP7-@B?^ z@4H^L@zB@&%bGue`0ZSM-BM2yI3(&rZ|Y|w&*?@M8cS@1@X>Ed>fDLAW3I z_kkS|y)#V1YPNuB}O&^@ICVejWo$7h5(&qBkh4us_;wviGnNU?0! zOi5r`%$yR>@2K8LWE0GqKnjFS7*klwaih!N&DE^!{KZ`5i7M*ms3^nNlv=2G+ahn> zKIw!G(Z>lYGH@vSGhYSXyRp0DJdNaDqmDUfhdcfrD5l)ZN-}o-!C=C4(`0^?zdV>8 zm0>$81cHpl8{g4qd;ASf-Fctgqt=U>(>n*M{715iyt9@ix_bj+7lNqt$QHp2*(1D1 z9NSnYtObe%P!53acttX=-&-yL7~wzD7Gz+5b$3x|JC}=AH=)15os@xk-Fpt&fIY~Z zy)p2&6j$y#Qdw{DF+@Q84Zk?>x3uS@fZ(@T!wrh%aJcK@V^FU@a{WSolo^JTeJy%Q z^?>y3zLINzhWPIZh)dbr@1*IbRp=li@vqrI@mQP>{!wzI-A~*E!{3r3^pB{}f2}nL zz&VCve(mdjCu8W~I3K51o<6yS-V;%Ib?D9^kVh8!oohS_Wtd-W`?xI) zG>A=X2EFIAkii(`zt!gN#Ze02Ugn>9yvrG- zH#2`EKY7BSjL%Md`8_QcbEt>H1owsr03~3Q5QL6Tjh~Im>|WXJ;9@>_s|C@;8fJ^Z zCQWL+Dl{S7LE%KrDHEjZo0)Nd{nIjOy@~|6wr#M-dI448lR$u$*MY=r(i+?ndI2Ys ziazqSeue-t=+lQ_3&7;C3ys!-a4vh)p3NrERya&59(9`#kbkLpC%1a}vjjiyt*(^? zucSl|1wu>!O!-*TV@c3VGAD0GMHVkxm`RtY74p4KuwZ*_DXq&mPki5;WcEYLlcioa5C&dr~{jc!=2 zJcCo%#`X{!9ENMTz8;)auT;9c1oj_}5wPxazq9550wuZB#RQIK@=)+AeSeq4*cWUq zyD*Hud~d#Ym}eUQxnS82V@cD3u5%D0*8$i_HVy#A84tYSBx(MF0zn~-uy_7gh7={zGt9S%kBr0-6p3% z8R)|CN`j;>(Fm&TlhTUFyiLW`u+dx3FIuGCD6=1RkxNjbd&v6>0T&Etc&mk>S}%%3 zO}_h*B+%*bCX8Al-7_xZN+&BV)h|`9i`|olkS!~>0Rz&6{z948$}>DMT9`ZVdF=>` z7x8^Pj^q2XweJM0T7)mHX`PRhM*+D@g0igUqhCSvoRB0ee$9e3?pcpr7EMQ2a(%5M zWPwA!xrl*z>R32*KySygRqYqLsL1J$cS+;r3jj#w)P%W=2S-LI)Nqi>xP9qZp7@|1 zkL=C!oK5o-ks?0GMlUZc=JcP8@SR~9 zal+hRdgimXmhLu%Ml?0xg-<*Gh^FOa^?0#*=gMSJRCGpp+)C zEC3oQ`EL2Ewavry3vVPS`lbM7MGWdY&K9KTZ*5jO&kmi4qSZOQjjDklDzSyjW?SE% zV#Gz8%6(@C(f)`Z?Jvhh-B-58%t)4Nu0{5No@>d_aqPJH;4Mdr{q zMABT!A?fhKgT?a0F)GRvDcK?llugi4z8UPn&1_``&?&HhY&BGao3QKK{mB2ym32q^5Z^tx)i9KC--d2nv9Ou&Klik-4-ra_x`xw~FAr;M z)NTqboW4obKh>3@EV(CnRqhcQO?MpY8I*em8H7Pei(}86`Ah7mK(nvSo4_v@CYn5wk=xB;ZJdju z(vp2?r*!3P%)C+A*A!p8!O~h8QAiv{N<5t9Kg_+4G9|MFm1*^Y`p#^cO#=1)bTqc@ z;uaPuBzttT6=7L)f= zC)KbX1`EcIr1{Sf4#rN!@t7&LG#4E{$BHtt&Dh z^}z4IOU})#0?&<)bsHO0SbNe^VOZDR+`6g_*(Cw*t;obGQ!Ko(V0a1T+O>>V;=>vo ze|nrg_m_d!?g9Fw`?P|o`l%EtPTs0%X|=# z5lXfMnLH@C{YCd%Ae=&%=O*wg#7|Z;TSJrJ*_pY{KYdC=znI1S|a(c@80@azcaDyz?W8M@jbw1QP28n)+s<7>n zLW(`_as)SLCBewdY*|1xY;=J|M)=R=W6RW}Nw%p3UlZBQmp6fKDh}0oka-KN$Fq&X z9F?_lDb52LYfPj9KSBprx@V}R2eoV}>+go=y_q%Q1SYh(1wEzw3f?W*KBDH!@|hJjcUaTW-};vd!3Egd;jQwuG$Y~iz?g*hBF z7S`RDvg$5jqPnME-P)3I{GK6Ii=jWN`rQWK$2Y` zoc^D#%Ix+7zf3YDesMN;%bFQ-PJhE6<>wmDf(7dDIL96D1HlY7nSaZ@LtJraDtrU$ z9nc+|l-WbuK@<3^A`r_wdp-j2%)MG1)mp$|n~x8sYw{e8mE2C=#{tOMwlfBuDv^Gp z@LwE0Kr4TVp8yh~@|zSNLMP;)Z9(cGz!I=Z!$(36E>HR*GN@c_uO=<1#_J@2NuhP{SpfI?bcW8g98X-{aQKz0-i7kaQ-=`8_9W0l2v4SpgN zIum%f=!;fqZM!YxeRc(ZgYj`hmbr5$2aHOiB*{& zmi65>@2M#dWou_W#Le~rB(6BmrpjocxzauS(v7ve^2})3z2|HJEr2PlE&@R;XVOO0 zxFi)zX-MI8ifwO~&H{QT{rr_DeQU{)ITKj}*llw9~x!}RR?3mJzKogzy{U<=Lm!cC4xqE@C!j7pw796ATK3XU=uL7t{K_>S*y7k2sSGOKS>7E&5s># zwia|aDMZwL&was8Mbz=Vakv&o2d^=`c3R`((7Cr?MBw@U{nnOATejYSy_aSs{Apy} zl4t?qwv61Rl3P7h4|r!jKI^vTB)(}(M$cYBrQb$u%oTN52a^T}*7I+B8v^+XwTA~B z;j`O)$erdgRd$7yDMQH-&|w1e(M^%bT_Ho-=hyH^{E11H<;ZC;$ySe`}2WsMVN zE#6@L8=kpn2C)PnXRlAL=zm-bt+P`^r8^)Et4MC01jeaYebbYlrv&7dulZfc5g?6q z5v;1sY%Yll+FrssuRMF8<-JIieZlA2y|uwS&b>sYy%N$2^PO2Dd|2~l`y%4zL`2ay zE1$ygRYHOu>ZR+d)dc!+;q9y@h7R-h;>Wy2GXzOeY?zh3 zWlVSTeQah~G81-I)XJ>c%#jY7>XEkwE)m1anr9YMtGRU%enIn%87y;@`}6%7pE8D- z@(~G&VQ1!L-ZY=EXxOq96yeV=Y$_9$P9h}`CxI?QD9|-HizP7B)oyyfC`PD0hml1^ zo|+37XS;aU6>HvPKZSK0W2b1aZpk`2QS5$ni8DC={of};Yhu3-mLed5#XwVD<4e)OPK}Dy-C!KcwkT3e% zrR5KPE?HO2!)Qqk47hIq*^=TZ)Xz^UDIT7Q#nSjpqLen-achs65k5euVqAfo zf{+prG}s-SZ8CjgE#h{`ITMR-Wh9__7>;r~TPVVWC=mV}L0PH(F+3PQnF(_NN zB>DY8R5?i0QY(FxNqZzZ2Xm8kUed(oXdAreQKkcyUtQP~!EPn(`}_cP!Xgl0c)%2; zdiZmuZeJpsm<>~&HGgd$ATY`|=;nozoO&53DNhZVg8Ge?- z3irx+ZOyrp*e-N?4@Egw#(u!mVS*d;BS&XN~eypR*5p%BNO_T*x&uwi% z!dShHG!y@3@ze@K#f9L5Ibg>seX3dKbO;T!@bY_W$Tr&Y`aOgev3ZDa6Oo!Gr8|uA|VDNPmB) zYX2yaaK37m)6ZrGZ_s@uhYVu8MZ;t+0X_Ueim#6R)hi=$=ZvV!ZNq2YvMvKAESt9v zSR*YOCchO+I4Od?Ant}*2AZfUIaNU<7WuBW9Z+jq{^Ctt+>{<6O>keMmC^T}0>WXL z3$&QzJucqaJg6=}9k>3vbMJYcsB**MZW^@7ODFBL#ft5Mlu@r z1j#XsP=S~~!72m)-@HYB^LnNxPfP)n!A_5&wmk4icKRyd*NXE_`$2!;|G)eP*b`-O z!*VSc>=1>_USmhb4=S=lHg6k^qxZBcEQsynnn>uPMeYac5=Z^`@1xHP9_f1#2!tAr z0-*+{rxM|wlYm=P54c9dMGrD=sI>>LeQ!-%`11Cb7|+&tLYJl_nU+KPsXsI!T3FCE z9hvm?#I21TMKN;mODj*U)#ZGC+-M35DgWZ}s8o~%QrI}<%Dkr78_docG`|iBZB%cq z4%UNj_ygwT6IEAmY8Ynyqd*<=R*7pokO&ALF(EW~K?f}Yj=#g2&0jC9UPLC0C3Hp3 zz)go<2mRK@0JU+j=fUs^qC@vyuaPU}x7vHhv+Ol}Jrp=XPt-+sZ#E;cG4hc;HThO^ za4gUr3a?g7DgQ2X6y?hx$~*B}&?9unVTj2mRfH&5BWGN4S9itW!Iy`{>J&r?l|=68 z#+%E0EgPFwHikeiNJa7`P{{!GG%@&Ri#&BcMZ4F#(2pNW|6mXPia?Ff{fVH^l>MEr zjf@w)N~&w`w_3Fz&RqMKC#U37*->r%TMITx`!}teI*aN3_Yi@YQX2X`BuisILjNFc z3&<>my|5%S3unD_+mkk-s4!$xBRiN#{j)Dmw*|`_#dsg+1x)*(hgBm|ga>A(ZsU(E zlPyxbdk??&J=HFuMLJb44V8nA2Izbo5j8@!uVywtG9F*UC!eRiWk#IG$hS|qhB`Zf zn>3{JpqqYceLy$8L|vW83*RDY*dgJBS!qWi8BFaSUgfTez`?0`D2J$GD=Y)38vaMg=LC4|UQNqDh+mO!Wo z_UR~?Us8}7!cpmPvH^b}?w|^0*+3IZ0<7KFi?zAoTu3B*~j4yqTGWg~YRN_qP?BxUh#_siQ~LvCMxw%hnSjRADR zE1{A!r--7jx{ZRh&O-G10<3_vh^E=$+>0H|rzcPFU$q5&4VCC>igZ$Wtmd?=Zg<;mfwd!m zuH)0OFRlU=76&1bM6LUst5I-Uu^hRbT3oFGk}kR~?+R{S(#>xJ=glgFWC2Lr4m{I;n^&e_z8+REXwp=-K}X(I(>Dm!i6)#W2$T^ z-7i1Dsd|8dgP=ATu;Sw9+pczqdTXBB=@1|dvis^o?LUW;jOXrX1ruebME`eZm^NxE z*^|HA1DE63Yj<40^pIZuwQtEc7_g|aF2=v_Ju;AdP!Dj zZaOQ)MUJwerzpLzPi%JlOPRgd$|g9~k`XDpc{>CV(T`6U;q- z9mKR7(8OT9_W^W=lJ3oC07;rbNgukjb?2KRs5+v@il{C0DO!*`|5%doE^3dFK*x{G zzMlIw9=g|dbcWmk6D_rwrF)~s1(CQC@6Y*~^uOP0wVVnQK`Y}pM7 zV_&n(7<1lZ)VJsPexK)@>-wGl&bh9x#%1|@-pjqb?$>?4@3(*HvAp2HCSmbMPJM4I zGPg%5WkMULL6=`Ge6-^TC#Pd&Z7GQ9e3wS+FqHybjmGUkDysC~0VRK*%ZMIv!5gaS zz=+~>oZ{b=BIRooQ5s9j$I1v-9yQL&FQBRgyN*Sj<2(2Wi6lr0@GRxp)N5WVT>$Rr z^faBebEJSxXYcikdt&xkcKd+yDF`N0g{AQ7bDZ{- z=V~JwWtL})KsP+!TRN%BapryRz`Bkw|1{{s^3@Hz^Im;plY{xovZWr&)JQepmkTXH z&cEJ7J3YIv8L+7m`r^vH+gAw0`26c~>t$n=(7u(Qj;GYv zJSFC{aQ>(QRPa|%9bg;xoDJ|gp7-`FJ7ivtv`u6rp10U@ zKV##k_dF7CO{TwWxUBD0hUW?Nma8O)lPUSYJf5O0Iss)FC8QzN{&|W#t0;kJ?rN zl1r(9*h6XTKC0J}*kKhK{v2dB4givgdSR&Yn7}Vo7&7iKygjkcbazlea*N}K{0#VM z2ga{(F{#pT-#(Ai&ofX!KtU@r43eHk#zOmcYGxfhP0^2fP04Nf@!d;W``vGrN6};i zHQLOM3JR+G`GW3WcG75Yn;SFe{sl>=Vz>m_`KU?f+kgYNQ3o^R>lg7$#!>8XeztJ6 zE8EMAPAb7aV@@ZvrAUVpoA!JaUAQH68_)xhj_(L`Pkdza4I6y;{FXE2K7Bl7F@!PjGyH(8rXf4?~SF?~el2$8XbXvG6|a<`2TaYVx= zPM7vUWCw{&KP$f+*u^!w|FJy>;0DIa&q@<8+U2`Gchwekc=Y+&It(Q!QCJg#dymj^bz28JbAH5@bvid zt*x!m(YnCih7hP;8~r3N>*J_X;8!o!TU|4JaLbUg8K6fB21?N1sCDS=J&rzb3xeqc zzr~jI^A<3!vj`G6*E~5{3!@ zzE?){+Rs5R67p=#l%o-6uF`|dsZD$-V2z0}57Zm<)XYd3mAUs_-eqgW`Z;y?IOu?M z#2tC*c_(<(56eetvE5s8*_5CK5|L@{HS;Zq)1X_R18-0*;(W#16v@hZP8u*GG{lqn zrva)|1Kqz)c?1}lz42N!6U$;OzeRe~)XJkr(-)1@RNX6i!EkF??6>@DMRiY@WU1MJ zSFIFrrXRwZy%AUh^$|{>TVT932tybqDfK7L)Jp-8kmb=o$K}C!6-*5`(@ghP2>@B{ zS1p+z;`Dn~z>j6RpK&#clHg*?CFCnJ;*$*(Hg**vTitfo8Ga!p-iTS{ zC|Lhman}PTFG&N>y~tB!tzRYyRD;Ij2h|V+NxKsIEvR-WPMeZYZ!RKxWN8 zBmfkaGE4R@^_2o`hzGL%ThwwnKIOJ5Pc>dYAAnd~MtfN*;zLlrXBihYQzk&s19L*{ ztis@a$a~KJQqdU^zYNrOEu*6pN^sAHa0ZX#!*Sos9YwEUd zNedT=N4=k4A6jF5lzeY3w8Q?X4*O-~oO=?uNQgiRf z;hm2mN6Ep_#CyzaM74aN(({bt&kffw{hrLEa0nQZtcWxJtfiPYE;4Wj(8dZ~3VXd$ zl7gQLT`wuzUJfzQRyw`wIA*=y3Bk*ozuDvFoOJ#$Gy9h+(7x-xmw_OkMMj zY384Rh@-vduespA4cl&q4|)YEdEq7BPAxKfK_iXhrHOADD7Dk=US8f_ZLemRdjndZ zD>OvC09OGfDk_L|J_8`&0Pz~9$}0KsNO1ZxTvMmVRX$k^dpFW!!KgzN@U)lT!lf#^ zjzR|Vcg4!xr0*or8;i7QT#M!6D$jo%XPBKC;h!UUUy`JE$cKpN#t`!Pw4?hy=szHL zv}}SrWakFTTB%KMpw-GFC_FA=kcGU<5=`BnESULtRhSv{1#F1j?B9a)svskBt87l~ z`Grb$$XDiFACx)x+Li`ey8(nzY2ef=oHZ!CsH0@{8(nvWmxjPk4($IZXgwHMH1XL% zsk!sSr{pun*3)5uP6y*fhxdOFKN00rniX+?Ne1-t3XWKj5OObTyt1?MeS zfph2jXvtOv=$8mKJm-+sc@M@PmEW&R1t%(Yogc`Cx-&Sj@?>yvmCm(0n-p9G&3Q<93c3!OA5M?AeVJUXCZerFeec8}ygnDN=;&5FQR6=y6tCBaK z1*ZN%oNg_T-`nnH(jqu}>V)}@OvfC0a(^o9B~I*W&qmkx*G3WI3Y|{DuPxU3E>_9$ zL)_JwuL9grgH&v~F~H)mqY~%u$y?&w`Z>^voAeRyjvjc|@u-SOVnbCC${dM_X_f>e(zs~p9E7DPC zn3wEh{Ve5jWmm&e@Stz6jo}wc#DZ9)V*3>6%y@cHJ#q&;1Cpq%6akP>m1F0+`Ko5| zky70Rn8_U$_v@sOhD_YI$yXei@^Xl;0QY{$;ZOo_YNH1euQC|;Mds7RuNv0tjtSmh zsrNpj7fh1G#OW$6jwQLjA|lg2#8;x0F;M=$f8Fa2k_bk>2tyl==J%>DjVRW zWOC@xn@8$ZI_fJDqHC*fp+4-Dbwe9E8*u50nRH;?&FP7d;~jT`+*A-Q0@=u>O((`@vf6Ty4B$N6kEc4Ur_@!^JQS;{B-k=(s{h#OyjUh{VeHN3{1YQOrdef zxfxnv(3ggqc+s`(5V&2PcmbzEB(VCESw^XzWlqCYW2G?dkF{mdTGrH=VX=2xnv?LL zbtM-K%VGFb+2OjMCSDoKVoqpkmf@eP#H*W!U{ZH1u)pyR03Ggwne%m%DOL_n;#&3E2Xr&@!4HhA72k zjzqP{$nwhQGB8vr2i#C6chnhKPl6EQ#@{VK$I10v$AKP5NfuGg zG);2cuH&F7Yg4bv)4kX3^b-;fFthKsp0qn`iqC-Mv~}DQ2@fm0z|{0z4O)Bl5>aV) zt$C4(;cFE&LryPOt60DwS8;)e=iM$k)4mwkc5s7vgX-RzN&)O{wM{#Vn7ik$G}%QL zm{cg@pomo+%23$DYtSTcX-n@?9=&^zd$p7;!P>(tXPiH8^|N@t-rKWQ?`Nv`CT`wBhj`bxXB>t%x;E!FdO#(o zm_p~HD!?2&dzvO{=lf>syfMWJ7>}(9@f^U`UYZpEw{x=*Bixl&hgoT2Rp4BZmNBX~#q>St+PN1IHdv$vnaQ}4ZKp;MV zcAi}Z0LpK&uZ?&>pewTnGR`^Dh!QwkZTV`Jmn9_U)LnIy9>q%I2X5>tdHG{RClZSP zYUz>qaRU`AJ{2@aC}(miFY6htUV1@#R^aV zw2ab}J$=mY@}1&;*@z}XOG%$&8NOtgE_ltpP9`Q4V5p?WdV1J>O1ceqE%rb&K{crM z& zebTD8&QPUE{jmHe`E~CA)pWxdJ0!KSuDUnFUrNriYZ^UDL;M^@F!Dcw)g3xxf%N0` zh|>Q!iospu?c(O$BlNp!D<`(Q^m1Z*_854sG7@5dZuRE`cw{oS! z8c%@G1mv|0i6A6t48g@Rzs%R{fsXSv($!wdo$A_``5kZd?%Ao~Q5~F~SiOEoD1#T0ia?PB(xMlz@0LTe=RpcrI^aEq8Q&YrLcqoL3gc_~iPF3H{J-}g^G%+_ zcl4I#ER}Z1BN!~52Ks1E{&sqp;n|IEBc2l5>^9(5F7uFf#}oWuStGo3-MmPCIZf~n zvXg*iJy+39bT0~uOh2HIKLTCAX#Wx9G{(x#!akih8}4lDXPf$ z?GPF_@6JE6(I_(Qi(78(&*O%@)l?>Vjitp!Eo*Ju%$`3;)p(qVziOB8lNiZP z6T<K9p@u z3=@WQs*$8u>3I`Q<6k&IcYP2M_sbH!u7mdi?6UYBQY81J{A(`*xZy;K-=`~GOb|4! zVq|z}0L158k|yER?qis8FMU{_1>Z{dB*q)h@W}=u&aAbJCrAz<9Ng|FHiY`dqPLBI zX|Q%eVxZx+sI&W7*M@VV(?lEz2i(D%358Eb#Lo|T`CUGzkN|9~%ASo~?TMErO~KQ; zma$9ee*=U)0Q=j_{sO8iprDZ2P*rROtUfJ1KrZ%b$e*5~V9t!L$}7~#^YnA~MFJe4-G zR$%dK+I3Ri1*D2tCMiLG{|F}Wt0q}Qey0d;7)K0s2UM8z_2SZPEm~65y!&Er`#wV zMpThh!mNHvb&BX?F-JV07WLXF8Zh zGiexq^1NxBJv~R#Bhw{75-Q>Jo$vgNUeWu!&pR?;VnVtVvCWjAo_5+HCk(4(KJK^y}ub&;{@jz&D%snXctM!~` zzi&r6&DrW-mc!6LYW?2Jbf&Cz1(Nz?NFCAJ!%E8%ax-svKnfJYLYQ*%cx9`Qlducg+e;ldY*AuEviKXZ2F zk{h**%$G>9pkhj&=Il&kt|`d`M9vvrbC3R9OY*0Nph$8uj5hK=#0OZ^lwHHK7w1C5 zbDw$yapHsSkhEf&!y^d83n?QXE-4~;_O)2?YuzkuFRqRUgV-PJ&EGvwDn}++6$8lp zGG&N~^AcOl-tZ!^FURl>#c;EJak({*+`SQQUXoyOcH0{wR+^XFph(pJ_XvuwX1a%o*(0=16S^=^#>W_^@80$K zSA^g*o(J;*wiOE|FY!dC7X}Z87B$(0lLr`E6K=9&rAf4rc%4 zg?N2R^iUXe*Ip9oQGHRYsWd$zdT#?gOGEsLlm1Pm{kKHPrSHz}HzEDM)<|fTnZ1f( z5>#Pjpo~bogaGJFRkr^GzrikM71&-EY86vZ*ZmJ&MU3!3KI#wh^NC#v@;yfIdEvpXzzYmDF;m$q355{2ut}cFrtFR>@rOLA(+$8wD>Ro&J_WNWC z7Y@}-w9JpT4Oh!;BGxvYt}HYxEr*Qh!jfihZW^^70WDA$hN|d?Dq)ur6|IG$8y~LD zM)G;pBeqeAggcwE$TQRowVp=lJSQ;;W*asZSLxdBZ_b2|DxH!(BDy{2x-=-WCA8VX zWEenbI&2sSy-6$`jBGowCP)TJ)cMUkx(5Ns&3hQd*j2MWidrssy_6?hN{IshXUy$I ze*=oihvC|k53AU^<QLyuGea9PI-j^*UPz)Vmg&u7E=@QJOUFo~wM0=FlY4|9i z=Z(uk^^9a?Uc|FH#LV0q>jCH&H_`2>ukD58f+)i3C}LzoZmG{+DG=!l7u!slr8z*D zZV9Y|ZiYBhr1;r-EeZNfPnb`m;aA^IsUgYLKvSj9_?EU&8kn`=k`ie6YGg*evt)=k z?YGui9iZvwp$4wD-^e)11c4-iLWsY}31IN|cKacr@zmqJ?M6vqgcWyDqxdyI1~rm- zSt}dmGhH7(Im4#iaoWQpCu1zzVoSv+Vx*Gk%)5K%-?~chS1cTmiAOQyd*d2LSskQL zZqK8Ar8Wgwe7QCwS>Ts9D-f18OU{1dKSwqBaoR5JHPr!?sA`FLTx@S(B^1WT?+ZF1 zy<`3?fMy*k`7Zm$y}!CnsufK=S&vc!{}#}v_^F!&j8Dd$2&qR=*1HOw$wuJ6w z>+T-b-+1U@&Hr_f&g1TjgRRf(<(4M5OzQHoFHoW-d_;{_+u8%19dO1=UOUe>KwDvi zpTwpY+)`=DW)Z=&3589(8a-8ubzKTsL^FTJ&&-0}NFxWOSD*;N`;(*nqw{%Ufimko z^L0apBL^oJ5MoBf-_75w`CqSlAz%Jv22vpIfa>1P{*p4?SJpWyF05D@B09qlS8c^D#~sciWm$7HlCpzocrZ z6_6bnu(#f;lQ|KM$&%gu=Bw(foR_t+|zg>jW1^o_f*k--shfyp@LqdTL>cl46g zgj+6{2BtdHI|pAOFSL0gS5>;DQR%yf#qtPn7;q-SH?HQGpH=^02lPv}Ms(%G4FAFjj~Oop;vFo z++>TY%Abd#vCwah1{>2|Fzky3X>_F4_nKi-7}ovg{A+B=jJSo8p`8{j$B;A*w&PPE zIuuG3bjxz;TDTIELRxBU+ZS*`r7JZw)+XP---=DXj+*>(>Ec-sBbZ&GnAnHSe&V~Y!-D2Ii@ipx}Otxh#_AH5sZNyosbpQg>=WqZ6)+N&X% za)>_so7S7UfTJleo-O0Lkib=xeUiIx_=1*>kbH)SnY$Rz{i0iuC7gpJ>-jiM9AeBf z1vNKP;@Y$w8t%?2ZI|SZ@=12+oIRu3$@i(9aXC#A*V$xwd@WwHx{EC|;Jg_3{iq*m zN?{oMruCuPcg|bU3-*_g?oRTdn0xzXM`v^iXA}L0%ezo5hHG#A9g&(p2E$~VFI%@g zBs=3-!+nMR?nT;k%VOB6jv!C#^8MJ+_8WW(bjr~w*I!9xnu#lz z;G(7fdWOlaGbhabc;mJ$b@+_({)5sy=21KOh{dlt5nIm~)eNOmD9*?Ett&@GRC9T; zXsj%_ExyB7Zaw&zjhOrPrFLxnMfKcB#Y*m)aI8B{#K=M=L(ES{mJ9E_Qzk$DwwD(v-Tqc+ znzU0$$0f|T?>6o;eEybp$klQU4$W^!DC*5EmAd$f5k^T0B@V{9LAQJ zV&kpDgC;s}l=k@>$trt0RHrjc&2NU0X`j?%4ED2*+xQ8b={|bzEo2x z_|8ObX0gQmCG)BpTc+3&e7JF^FtzSW4C>qfRk;ir5QX_9($^YTp@@q@y zDMjX+^AeeDdEcx9Db7hosur0)Adg)Wx0o7g3yiZ_oxbvOpnsg_wza`=s*asG{GE1u zs%+>wGSi;>7P85BuIN;9!;;k96xFH-2Xy(3PXP`-1gsQ4(nX>sIM*aA9X23cT2sgY zOL=FeG|T_>q*FFZ_|?)+_n|TS{-5b?_EU0%0oPa3FlVV5yYz5#oEj6L!!zgZi%@9) zMLD%990UY8u8|e7)u)zTp^f4cD0#+s*q`v9-~}AxNw#Ls*CpML%3&YG2`Bj(N?8x?7qnsFh=I+ z0zrB+U*QaH-Gk`7ouey3gVy_%*qI~CJIbO?y(>mtcRZ|o%<;e^)pYrfn{2cJIeWrD z(#6vX{WrNpiVs^Ir@X8}oS8hEmFt|Ym&g5Z@zQV4_nF{CUo)Mawzr;7B zA(JE|n`-`v%{v)EZW!DjDUK|MZN>*0P2EZ!db8@7vNE`SC;+n|L~Fe-#pnU2B&F)i z4;!fOX^T{jr0%V6m`5&F3I^Jhj1z{V=hl_OUiEog0#<~(Rm2ae5M3NRc*3;ZU|pdO zB`3#nBL#@`XFx7`ASqj+HmtVUe;Is^NqO9JS!K49@~2~{f^KN^X_snl&(FH9irbct zh|jcSqfZ?9q}y$Ap(`QIMFQ_ougzi|K<4dF>(Lj|uX*~xBS&XuQ(tBY4e|p|1P<>9 zYRY>^7T7`2fx4)cJEy&;((}`cb(b2xP2cP+?|&w#fRx!CX=#hc%~EE6TD=Z=rn>bh z9H?xl>J6Mgme7>yk_@@lD~G%va$?;ACap;Z@^E8E51PB3x8;K59?3Ra8Hea*oT}Hj zRo->CyRyWwv_^^|UBl#MdYeV;(Jc7UeoKl#vVDmub?bDqeuEh@i8&s$hao&4+w}Vm z_WC4kU&fsd3UBGy$>$Ga$qm(}90@qoaNv64p`f6;+`cp1^e2WK* zWBjKT5)3Le9+z{_2Jj}@atHxNhpU&&pH^O1;Q1MZUk?%-NyD->q5c)=o0sEe^eQl6!^ekp-Bu;Od#u8nxy60w=Z-_B zBL7G64ez=8YXUsp?)>G8?=(>2v+L@7MVV|W{gxNOq~x1!NB0Hu98o;tgE#UX;4sc| zc$4ZxoYTP|^X|PF_57n{HX~#Ae^ntp?X;PEeu%mPYb7(q-?c7wPDW52ZnlzpemDv} zyb!nDR^s%jU~o7bb!prQo29a|KsZ!kJd&F!l{@AZ5{`!9xNRDi%Hx4VZ7= z0J-~r);O_((Cy-Z8J6x$DP8ty3xAYyXP3&r%S`4S8<=AL&vvY}=2pt(L*w&Tr`FFC z21M1*)dWXHEH|n6TvWmCJW4rl*Ji4|Lj#dr1#8l`)7c29U>*sUa5=sI(w)}Or|*k3 zw{3IWb)!bMidd_XWY+gr%tbQ|ho`)_rzTU>BY@ky<28OBj)@x7k7Z$o;L?odF_*iU{jEHE*Xi|=w%lm8EB%G^}CHQ)MqJLpPv6dcZD zT&SXZS#IXB(=>C5Q~&&G^y}L3a)E_9eD=_Sd&E;_r%x-*J8RAk2|ESF{CH!xhn!96 zmQ{G~joK5MZ)N(oRh=h6Dx(y-XS4s8VM&M)yHGp-ZSKlEe6}{Fa)a;;86M+0es zHV>*gE5prvaJ5#0r-lV#*bpcDT>J1`W$QxR39ynCPy!=Xto#PSz$ETW2APN#FIQ8= zHu=U&(4U3X8UArX^C1=Fz3pY9f!Tsz7SCGvX}&c(XZZp%7h^~?gbAF5AuGF3Bznmo z$)ehd3Cx44BSZRoPeu02z}LeD{V;wvJ)xUpDjR9lG&DB`+B)~kTrJ7@T!x|+eCfdo z!x&+!#1Kv?&@N_=)^96WC!RqKOojs!OP7MRMR`uUjvopyzb~yK_}030qbezG@t#=W zP;x#(m^uPLD@XWN7t=5zL27#aW%V2!_OX1~&;CikB`;2dxvJMW9`7%xcej191;Vhy zL71e=YXzsU!BH2wa9<6#LA{a(##v|IgYvt7K!dEwj(E9bX8g|Pj#yVjYm?ZEP*10N z_dyQigr|GvY;rQuOSNaZNFB*0df7_{?GOSgiq^KRF-}_zfp!e`TfG&@s)1(%qYC#q zI`{TF!#Ut7Wxbe0;#M)x(Z6|Y5$`@f>xLf}=G)jp$C|mSN#pJo^H)+ur#Qcx=h+yo z?OJ%a`g|DIxc0LW%Zq-+w+?0wb!jzNxTl6#JimY(s{M$c{><)Ghg!U#^B@&7Yt+zv z`Mkypqbr^;az4nK+;2z_pC}tz)_SA7B!g}rBSY%Mh9vH>?bNv&Gu?61n9v%<=Xyl* zdydQG+%1}qq)mJ(5UCv#NoK)Fo{8taf7@VZ^ry(_JBrIUqyG}X#0{lgy;h%DDZLi| znEdLb;7PSrx!_T7hXQVEVs((ydtoRgzt@kwWFbpaW|}2YYMun-Z%g{qzSCzQ8YZ-bYI5$!M}Olta`ioxS5(gU6^C_&jD#xKK%a-x&6S=3c$5@lrB@f+gnsVh7`V z(|X?gb&J$%`}UFFDHiFhFW3Hh_T139Gp5?dskCM51Nb8)SCoBNT5@nN1u(_-y%$gi zAi-VoO#W9v;-&H=RZvW-#uM>N1JZsYQ0zc|E-`Ywp_)vb(2DrS{y(Oo$CGk#A1xRD zOv{1<&e!lySHVesF)j-#TrH-qwm7sH2U|!rd2QZo6Yb&kxs6iVpiPFir2D*L(2cl& zeT>Ey`^dOFu&d(R<-?#99UpatoUzo@Q%~u14tHXP{Op|3?F@stEADe?>9V2WEn2j; zr#;XmHHBnn``HdcVgMioLszs1UBW6j?OqYe?(O;U@!O6Uqw!LAaASuLGmp5m(Mh>020C&21X0mR`>BZ8}dF62R%X7Q;7k*GvpM-#5;GdRTHxECatv7_hu_2%dQ= zc1OK4UA9@2jNLNz*-1v`^oZ&xvcu=L72}FkK&H+=Oipf}ufwD-8ut=!ei$ z^Z~1S6|EAt2QiiBLsx8>O!*qg>`iq+An1IPZp*r?M=D39>pF#7LZ&ej{AFf}*}a92 zV#&VPpO2kZHQV13iWg(5XLFA&JdS+#W2dL4y&AFBlRZSZ-$XOyyq&aI4JC*%4I_tl zVob0JrcR&2el&XE>NsmgM}8v3-g@{#-P)5;-$!b;o18wmevwJfe8&0dVa_wIY0Im= z!_rdj2ykXB4zd{_E^ zL{7E+pb_X_fK|wh?YOVh48+gx!U%b-^W<}}21&mHCn90>}_%}rI-@zhX%6q@4eo~^9_}F{4!1NbsRDT>9FH{lV$yj^dZ}6FD@ypm7Gwl#}x*re&2v1`$m>* zpV9L+o#@LbtzKgE1Q4KwY0b=J)Y0jls}EHQ^|h+_J(zTKo-7pPxh=RC&v#VjEsPGj zEhLmUSIeMR6D54G0l>dpt-yY2Sm;6z&+fEe)_jZDEK^@_-odd}qt>0hs!XJDPpY>r zX;yQk3@yYBRW%4~eO}aCy z;Z)go@{4s8g~pn1RNSJ+BL4H8jh_k6C77tL`fa`;@T8DYi6Rx&?>%*?|LRhzY}`O` ztu)-xIYWGf<@vL8{NRt*str#*0DJRTa%XdV8vaud@&nKg@6WJj#Gax$*u@=q_EVYA zW&fw|+9JeX-Mo|B73plW9q!Qe+xo=L%E?h5PPLNw=>3*u03pTw-a7gWxSTMdMFU)G z8~ZhpIlId-wq@v;dvaf9WjSHVhwo5kS7u2Ghu3NBK!PSec z7H+S!Km38Nh&u6nXsG9^7rSwO-=g1X1p=3hY1xZjGCr)zbNtRF!{JCMtU;=L9^+^Etmxu z=U|FkE8O|H@086;PgK>#Ew7IkD%LKwSDC~)dq4+W`vhJ(zmuqMGK&%Uex2i34F9GD z&mtYYK*gu)v1`=aKDVqvI_vRzG%Qmgm^vu*+>J6xRfW12a=6~{D`S4#J_Mf+iu+i< zEL+SLzpk}8{DT|$jd;QcCNNQkpFTZj;tXNS+Qs-!3=(9O<7X%oWs!Az zr99|p_?;=@z*D=$-_~MQPR7Jso2q7&yrOAxkb|n>qxoW?c$Bc zl8I`H-tGc@<037CJ+tqL(yPX1MRf?yO?#W4Ej=}OL50yG&0B0_Y1*Nfzvjne6rtVp zMtRNLNUiwP$V&Cw#O)Ugx-#c^sIxd_Fle<;8b3?SGzLwRlW1c4%8gqx-Z!>Ki6mK# zcrQc^t~GjZjDB)kIPBYA9qCjvy3_mf)G%eOcMHD4OL}5wGeposl=gPFoZ*yNvMU!k z({cIJ>$C1xI3(5c89Qm1gv82g5hTrI-@_G@&;Y1fH_rMn8iAS$6Ee!Hf^vsFvvQGt$*@*ucF25;>f~&i{h&`^425S_G}{m z;pmA~i<-wAgXG+TZb>&o?T_v*(wD! zSCLj^OxB%Rb&*;mVqGceYky_d?u72#qUqhmyaO7Mvi+IOyv{hq1eeTsGFz-?s`Ni? zLEyl*7{a&s7Vt!1#&Nbc=)@&@h`#W`sL!ZR=)qQ*cNencNU#jlR)yQAhYQ(8&>pdo zWwYW0f8;6v0H^s)35i_?S~v#&=)LW4ng$$A|0<(iN=Na9E?`WajGco99<--%Uo}Xi z&R+Usmtpn)wR=P=+bM`_-yte)p;T{??eAtQ{!bMHS=0VkNc>l>ZMU3s51lfk32oA4 z)lyz-6!=G$;nyoOUT|;NNg)}yvls`Srf&~KWaSlX~hlib)Bz#6Sq zOO+l~Jl=8oudLYhzi-adOb)naxupi9^NIr9|FgMpODHwJ*3XlE;ocHyBQc#h87&x) z^UrIo#sM}BDf>izR7sPmmg<(F4c?$%8cc_u-}&w4@*T0zd?3iwo*kBHZPhK}WXAH{;;o<`$?0Hy<#@ znd>gZf$l>=pWE6l+|q5ATs`90&Y~6a6EvW?1^DuNQfoB5`>%Nv zhVbVFbux$7r(F*@dGv>Bt;^tfjKtbb$9yB4Ya+8=U#AbNoPDO;mGruthaa(vQXiJo+sBQ74)dGDN#1;TX#*TH>=7(zUr!JPXA4#O zdwfKKJkHOS~te%g2hQolmabfiy&G7~IT*5)wGrp6kq|ZsqqCTG?%w#4xEA75vQE{iq z4#b992FWSnsA3vuVb5?QFUvv{KXC4 zI^&J$MO2(YX4m$uY1qc_6!E%T&xN7s=O1c7U*~C0RS>H;>rs&D84q05nm7oF{`$vW z{rui>x@H33deU&ZB!%HQwqN@KYv9txHe{ljyV`~M%wSb zMN$(hVn{GqpJ6j) zPuPwuDR&&mYk6+?Oylu8*-%A4+aDp{3QViNB};mDA`{GjikALj0r!MW+k27qa|Pk} z=TPmzMZP3Nt0;`(}m- z0<8W|gO9_wZeEdTmcbF=ae9fkp|B>XCgS-!?`wL-llo7)&Yh$p9#_1k;IlL;hjJIv zuL5USq0M=j9h{(F@0S9XlDdb)EP0AnUvWZ00><-Dx2;h&ubW9>W^b=F1;fW8viF?3 zd8|Ka<`|JEL%E}6>C2?5+N5LM-3>*5B2`#s~}h7!V> zqHj~T#6XQk#Zz44im5obgm3*VJJ0-kkOsKB4fLA%Xyu6yaY@E!2IL)xikJ z=})Egoo+7|cRJx-t5fThgxTt*&I#4m%{z@LwR1bwGCqJBS={C?Sc}=&et&htYf=0~ zmaiB7Y=QC#Wo;IzW7tB$IZZxwDf$e}Gi!`kcexWeQoiEq^+0a&h@9K>qJ-z%lF5-Q zRaNg8F_SS{sx1AxMeOkwE*9W)>$J3<3U7Q`%gwEl!Q5*-(k0O*{r9+el<6b^fFsi>yA?E>M0n=uLkrfAH{F;LHiaxSt>{20=eA!MaG>&Y%*7O4643F#ey0Y z=$cysL;d9sI>u)bNV{rvq9rI#)eZJ}`6nV#aTKz(%j3G!+51q5+h+^{Ea>sLLNt1D zVPs1YixXPo@#p<0U7~^F-LHUlG)m)blWRC%R-=ExT357>j^b4D2|eziLd@Ix`T8(K zcatjHf%lnv?k3My%4kO%cUm!a9gVJ@b-_}7My$TV+tL0IgbAbY*);Fh76s1_(%{5F zXj%^Ko9+#{c~{U_R(`%lF7jv|^PR0$kgVi5;&NQ7^Y-9$;M=o4tmUY$+>x=eR9VJE zm&ZY?4Is8UL`;xE#4~$wLU7tM#=ACluDWHFVYcpt@R9yG4cyNOJTBCQqYzom0)RHP?++FdNDf2;Lzlhw2KnUjtG@h{Bj@56Y7xeAVvYs4&8uu9Gl?Lw46zR!U>{mHAb zQ=JkUuNp+khD9EcUwabFc#|vI@ZQax^sur}-gCa;=k~K-EVLwlaBer^+so4@zvPgg zzg$K*9;)SXy)G27Gb+5nheDx;*YWnN54iEkmyub7feOO({tM(P-C4SDa^rk_c8UNR zeG@-ZKg71UyyJE&!2eT{TJ71*Z@_&l*8bzwvC^dz#6m<+S7nP5{CEHyc zZ2kfs4YL3GY#uZ@G{>jg^A3EGA+#%X8P{E|i!Ew$jM;c;gKowb-gnGqQ-eyA=iJp| z`w-Ng(8#NyFVc_9D9fDxdHHS8XdM`4*7V+T69L;V4LVUaUGHfc_YLOIP*h5Nib4j! zu0c)5_a5yjpBxExYemvWX2&zy?H>3yXUYHq z#>_wlvHpwn!ctYWV$(W;j1E2FhR{p5rH=-uW4&XV6#a}`6mVa^Drab(%o?+I-3P({ z9Z!*qcbgq6TV4x&LUuB-m*Y%bS~+xX|Ah?6@|uCCSX0MVmwG=baZ4mQr0aDX9=#%b z*6M?ve{KM8*f+lBWqYVNrnY<@8;bfi5zb4epE`ih2A!j12mb?+M?TY~)4VH2FFpTR zMBOwDwD}cg{EJVi_+rs%p03&h5A3uzcAR6sHuFBMq7)I>nL$a!w{5~2n0pauiDz(# zEbCr?@N4(Z+Y^SjxA5>!m&a^rA+klpU_*(`Dq!uj`jw)%mj_L^0`1W(`ysN>|61Uo z+Z>3JNSXbRu)i!{m+Ez%pRu-B&IhWrkgtY-#&AH`k%Bj5t+dzaL=k8PIK*@$vKsQ< zWp}4JeuX}y0+#x23h<4dKRm+!ap(d~g6NVMdmid4G_Cf_OOqb7A*BEfXFL9{=B_)c$tB815yV1!fFMXwq$*V@ z(xfPefP#vE1qGxi?I93KNB~h#>XRyB0BMTU1Pn@V8VN0cLLdSU=@5w0B7xw}hd%J_ zp0j`K**$0TN6yLjWoGWo+?jjl-aEg`-;V~bjt}IWP2D)JKXiUF4enR)*#w{3C^ePh zl;#N{#up18bpAXhMP32sxSuE1)7=IearEIxgbte74?vvA zBNebXKJR-iw59}|jjcXz_#Q1+I{}Vj7={Qh5dp{Oiu=HM7p=nzkW>o(I0QxjrXCJG z*(h5u_Z(ns!q8>JC%TfIEX=SdawabH2Gr*MNP&L>|6mH2_qgp`1-7mX<0oR-Waua^ zQ7?0F`$4HP0QXf6%;)7^6X$A21Ar;oxZJwj9bFl?f&~Wyw*``YY)&l%lsPvXE&}J! z{+?0!=dfNyfwY&G*IcKeh!2$RV5C@CIv^HY?DHJ@u}N9DN6Tl2d_3T%p7i_6{6*dvaBz+|bKdnuE`+CzoyjaNK(6j3icg ztoYj7FLTwj!9`^i_s^3!*SWem!Mv^x0g#drdKq1fMS=PKw@)- z!&Tf)HEByf8Y?$2gd=81Gu=FlZPMy@gpfX?kp`+wnOzZ?HWl7^UpW+$I<#$B``TpS zrERF)JiCYDn-Oic+j&nH@8{N7cReBH{D(o7kG))k9(lE7c0rr@LsGu-m4^A)(~Yld zDK8Y3YwVi`$#06}t9x~OEloOKCn!6UWqK`Byqv>i?a^Ln?nF#A%1`KBJHm#OLkjy+ zF|^%?P-GGNzNud(4A)+j2{%lvc)1syj`eZv#3bjn6g(@HUhQw}iHw(;u#J`NkvpQN zk!zzN5m;zDpOU$nIQeYm4K~Qdf!u##Ss*W<@El>o78GG6p1=sj?jCf%hIv`w7S9ml z|ENYpVO6ECCYKkJM5=@;my_H0=Hvw*yhesmC8*Cuf8}XS zO~m~b7UtB5c3sy21*q#UksKG_UlCSuJnULBiXO6U7ZHUPr`w+UB*yXLnykWOKLkcx zXU@0|`P<>$TkNPOFDDz>45(3R-dnd@#L5<5S2^Q%w9LM!`rI<(9SIRrjmN&)p|@Dk zSO#!L#4L(Gsg#_3sKa^|b29Af`;62xe&6u!J1~OLB%FVADCI79YVlNzhd zgE)y1jEylOOA%fn!|=jn8+^V)zdI=cKZ>qBgrQw?JlTg8@t(7r*_oJcZlfHP9x$Ef zT@$Zhhb|no>%EttH&cB?p&G?YH+SBh6@T}t$2H@yBHhaB`jDq}3l0fpxa zk~1&}w`FZX7eSI%6t3NwtbSo!>j`B=I6>6|Nm;Y(v%E@pOTe&&!cEpaoA#=!Xs~Of zCp91~circ&My24EGhDI>ulrdp(>Ph{%^LP-Q^WSH+m0*4ZkdgUR^EuO?o3z_i*&o_ z?JAKZU)dVd8-pLLMU}fP*o-Vrbw^65TD((ijkY7QNgaW^w>%4X)o#h^?b%`HZJZyDXlx^HHBKjJg!>TG;IeG$hNm5NjaoamX2kdR zv*Z+dF_biHG}1hAK7=aY_}K%O^I8sHmi&~*hqq`4VqKkr?2KuCv1-ycYrooVGh>a> z*0Yl9qwyi4GhMQ$L1!ZS*-`ry%=|)$ZDMfSa6Sgup6>qmupl#`t2#~+c{N}%@6Lkj zpnPMm*wtq$fjEjgS)I207|DU7fZNi&1NY}iEBxb*w*C==p%_}6R!>Rh2aR@;zkv4~ zHiDo`y~0_UW>;)+X{v0P{_53a;H1@}I=JCxTHcHhu?F=j?n5`ea=3OW#((1Fq*}1% zuPyt^%F^56YA{OxQ{F-2;<9!r)tzTJ}hQ;LX~r z7%$%S>-!Ro{EiO0?5!|(Ws@I|g9J!0mJ*AZY$!i@E{7!YY?PtPPS0wo?7WZ9X-@d) z*9UI&&?_Y<&6WPVV;2dP&-+Az3g*jc8B2XMTUEia(&Ag)Gq(}4MSsRJU@%@?qf@$< zjv$!W9u&XGp753JQ###gAI)=QXJN19+5>#fP@?LxusD1!fnpW*Hl<&gyQU^=IpvkytztS2$*6t- z*2iB54X-+3-OwfR`+AaX(RnA#0?!o8U{~G_$^U~zZ{IFs`C4mDG$=oJblf{YP3!>XMAlv*6|(s>nwbI&7Vdo?a)>|c5Hzc zx>s>{wnP3ETfijo;Eh+n$n4_oJ|}#GEr-`!U~eDD;`a%1OqhbA{Z1fiias79YeXI! zsF4n3KTDuGn!+_e{8}R)fT4?43s`&^eORlAj<-C$5VxcX5J*>Slog(?tDgZ~#2(*% zYL;8sF3>LSqcBu)dfv5k6#X_0033XKvlo_u1IGL}02N)nObCQ;)y(Ci)!2@`j+V{4 z@CVZ3IvgF>rq~eBQ<}C^;G{KUeUd^4!C<*$t1hw1D?tD+JsG(EYtp%jgwDv#b~}yO0}EEMDs^nL zJd}9%Y0XNThxXs9;HA##vT~rahTL>^EW5z|hrTLMx@0n{nPED{hZEggoyRkph+s&A z6Xzywo^RJ9jJPKM&yUf z0LabF%;}$kuni&&F8HGk=V{hHNse0*Y=}@viknq&T5#yXGg<%*Cg|+yQ&4S1R;N&M8{4=JZYimigg4!xhAtH%=Q|7Q-B;W53Tp`@a_p{ ziW|}-)b53qh1F_-qmkz~9|c(1y;|kd@9qg>Mpa|y<(XiG!ye~>>*`vdP}DvEMHo>@ z8$^J}+?me+SC`Q>lQ>Ys0d&bExF0}3pGqDDW>l++S^HS6@#KuQwL)o`y>K4!TK|Ng z{bdJe)ia($Gx9+Qz#1c8W^R`83*DP(YioOJD1!Vr;M043uIUjsYHEq{>@#pe%r!jN zgOcuV9eSGCaMRFyKGkp~S+~V=s8W~)Z29GqVD#i_*bO2-O>vSWAMRv7a3-ij-D^DR zD!2gJ@FJ`a2@Lootwo~#9-&qMCQID#WZ)D%YF2U)AkWx7oMkA|(Q&+Dg#CtP^eVs< zenIBwPQf5Y$E3-(bt=DKy_j&_GW6#NU5Qz>0pz3p-KLVaE#9&H_;qObk^?UPl%W$^AzeMRzTf^Qj^UtwcwG(L2I*M z6-7lBhj!Z8iXp)r^S8~~^{wy&1>exf%h%Y(tHO}x6JnLMndicrddS)=K6hC#NT(sg zL4?67RACWSso6t#>;{W09w{#Z#^~GD7$x4$HtvKkOFw7hEobpsz6frVY;VajfH0r$ z#)rj_wRb9$I=~SHLd2cvIv+&8So==7&tCYWu5Kk%H?um+<|Jy(A-bD}(qO`hs*3CaNV;WK`ZCPtA8Dnp#iH*o&k6#wWfNB>yrI>F=| z0XW<`+{0{R{Ofs!Yr=60|BTgp9;stdsqEV%+5q2Sw}Ie6Xc>e`*CRQu|Gl{q(y+E< z`f+b?0%a0h@n%)H4Xq~@jfkJz5)id2T=5l1$hC$ zN5}W)G6Rwod?t&mh+;`=;~PJIeqAa9SCTo}TU!f&?$hl$U%IC&yiD6VZS9ToiJzh& zZK?Wd`r7*0IN>v>b=g8tlMcs;iNPQhPar3K$6HfYsC7)Ro4bK?eGskgBf~h6$Nhr_ zQp*OBER&%|nUM22=j%Rx1>0t?>p+Et*r}LR8E)_fc~d`R8?4UmvLXHFZyiwpc%ud! zYcQDB7#RWZ`M&}|G}ZZ}t)>EaeRV_>4uL2VEVqgrqiWT;@Re#X6- zV11!+DvLvC!Rf%H{3anf@>YgIZNmrbuP8uxj5-{Ohjt+KC9D0P*_-Tvu5-X9fetk( zs6N#;0{&$68!?M)=*4l*7)9AFlB#w7UDDuwhR0;KYOGh(?fL^7eLp3-Rein~G7&7= zU~O=>ujYCDpk}*bE;H20;I#Q!tqi_@muz~-x!K~A4S<_))~)JoeX@&{0JX%OJM@UE z-d(Bq6Yt9)BNB{wv8H3m}x!f^9N>(YiVOn=Rh_XA(B6fAFuVAR2iHPw;o&12!I*&iR#PVd9=&wEik- zcWSG}RtV>lsQ+7sO4Pe7Qvey0Oux+u@M3}|(nEtx0U^I={Z%pwO#VMDp4cECoK`nG z^gC~EPWf+)@t;a^ZE?XbR^bBGXQLN2#x_cXCGOi_1R^+`Wmhl9 z$*+CQzM*7Ie`+HXYoJx-`OU4iOvp8jUFfQygzW3bGH(0dG3^cg#U5M-oi(D}%?z*9 zhpUu4mUf#Xx!jM4!N|rZO@Di$!t4}`-CBBu4gL};BI?xSb4kn&{YpwX54VfD1$g6Y zrVR0mgsB!V8ScOHnAHaVsRw8n1xA~|b^t~EE%O!VN z*9eDjW~^>)VFkA8U+u_v^=}|4&-q^IDa=!V0rvv!a&=!#7&Ftn`k+Ac{A5XL@B z!loUuZh|p`yE#uBw$FaCbLPpSj@xwnJ!1in@?=&K&hqG~pEWNYMLE z@A2$_2QH|$_@kFJLFFG5CNL&{>12sO7Gq#XzMzIZNIeinIB?ab*B@S@+vL7WT zlqV6}xlOBTmGWHu?bNr}??R*Z--Y1r2PYQ+UKXj|8M^(T!(iyg6N8$K2lPP~?wJGx z$%B0Dnd}G~ow_8ajz`kmXa34G7wa4O$;UVRhNJ4 z4*8vWw*R&`Y(oqj7cWHEbARtD-6vKx*Io3MS@=-QiB$oI?aa#or^Sv_zT1=U7eDXq z@f>A7;ppVV$9&o(o?859zRBBeQ_38jfpMIL0QEitD|TSfjCJ@YoaKv4v6@nSSS2CP zoT~H73)>II(dhp1IXzl~1r;Hjn6adWk=~W^5g`>bQQHh%>1RhR{AKGN)6yE(FnHsJ zg%sbTrZu(Z$&$J8zsauuyA}4I^p*eJh74v%7<+e+cx|pOgbB3^mXZH!`Ml?1HUIPP zqRP3u8~%WO8b8lIvh~2nmcJ<;>T^v~eiU-0FSP+q$a>75G=EQ~ZzBq3$^A)ztV3|T<*}4bOE10v+*ey zp6OqHPQkphk*9vgu5O2YEccnYydi&)-hg0^BmADgj5D+-SO}WkP52D5OwVEP!p1?W zwtqLGEJZ~HTR*T!9!~AOl{{nhx`X19td&baybkQM-#f;PvMWyU4TJ@Ec4_$mi%y3- zNOTffEC*>we5tA)C|YZ4tAL=;9}>0A4PwWW!W3OaPhnf^$fL}vhXYMp@?m;MAK)*0 z7wo$)rJierYI%_$RBgNZVNb%OR+3hYt}|B^Q}d!UyNFoYGcne z7ds+vq2q37VU~>OB||_I!T9G=9a($^?YA+TbLxbI0#j3tm?pOVp6g$tJS;}@2427h zeVI(%$iaI_!t6PhD6TDoOKf=cFLP$SKt-_Xfl8({q`3Dp|MD=jaLc7tKE}QH=;Iv h{Fg5UQk?jYlf!RZ^goCSbwaO=PM Date: Tue, 27 Jun 2017 12:04:26 -0700 Subject: [PATCH 11/33] added TOC entry --- windows/threat-protection/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/threat-protection/TOC.md b/windows/threat-protection/TOC.md index 266a77fc24..e60bd7870f 100644 --- a/windows/threat-protection/TOC.md +++ b/windows/threat-protection/TOC.md @@ -152,6 +152,7 @@ #### [Using Outlook Web Access with Windows Information Protection (WIP)](windows-information-protection\using-owa-with-wip.md) ## [Mitigate threats by using Windows 10 security features](overview-of-threat-mitigations-in-windows-10.md) ## [Override Process Mitigation Options to help enforce app-related security policies](override-mitigation-options-for-app-related-security-policies.md) +## [How Windows 10 uses containers for security](how-windows-uses-containers-for-security.md) ## [Secure the windows 10 boot process](secure-the-windows-10-boot-process.md) ## [Use Windows Event Forwarding to help with intrusion detection](use-windows-event-forwarding-to-assist-in-instrusion-detection.md) ## [Block untrusted fonts in an enterprise](block-untrusted-fonts-in-enterprise.md) From ffdfba211abe8cf403b209e67b5262a11d3ec371 Mon Sep 17 00:00:00 2001 From: Nicholas Brower Date: Tue, 27 Jun 2017 21:34:50 +0000 Subject: [PATCH 12/33] Merged PR 1963: Merge nibr-BitLocker-12344168 to master added note about XTS-AES encryption only being supported on desktop --- .../mdm/policy-configuration-service-provider.md | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index c829fb36e4..e5cb50ad68 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1781,12 +1781,15 @@ ADMX Info:

Specifies the BitLocker Drive Encryption method and cipher strength. +> [!NOTE] +> XTS-AES 128-bit and XTS-AES 256-bit values are only supported on Windows 10 for desktop. +

The following list shows the supported values: -- 3- AES 128-bit -- 4- AES 256 -- 6 -XTS 128 -- 7 - XTS 256 +- 3 - AES-CBC 128-bit +- 4 - AES-CBC 256-bit +- 6 - XTS-AES 128-bit (Desktop only) +- 7 - XTS-AES 256-bit (Desktop only) From ad242b728526302c75bbfaf57fcbb42332e404ae Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Wed, 28 Jun 2017 08:37:24 -0700 Subject: [PATCH 13/33] more 1705 updates --- .../windows-store-for-business-overview.md | 188 +----------------- 1 file changed, 8 insertions(+), 180 deletions(-) diff --git a/store-for-business/windows-store-for-business-overview.md b/store-for-business/windows-store-for-business-overview.md index 430cd5c616..5bc9195325 100644 --- a/store-for-business/windows-store-for-business-overview.md +++ b/store-for-business/windows-store-for-business-overview.md @@ -157,7 +157,8 @@ For more information, see [Manage settings in the Store for Business](manage-set Microsoft Store for Business and Education is currently available in these markets. - -### Support for free and paid apps -

- - - - - - - - - -
Support for free and paid apps
-
    -
  • Algeria
    • -
  • Angola
    • -
  • Argentina
    • -
  • Australia
    • -
  • Austria
    • -
  • Bahamas
    • -
  • Bahrain
    • -
  • Bangladesh
    • -
  • Barbados
    • -
  • Belgium
    • -
  • Belize
    • -
  • Bermuda
    • -
  • Bolivia
    • -
  • Botswana
    • -
  • Brunei Darussalam
    • -
  • Bulgaria
    • -
  • Cameroon
    • -
  • Canada
    • -
  • Republic of Cabo Verde
    • -
  • Cayman Islands
    • -
  • Chile
    • -
  • Colombia
    • -
  • Costa Rica
    • -
  • Côte D'ivoire
    • -
  • Croatia
    • -
  • Curçao
    • -
  • Cyprus
    • -
  • Czech Republic
    • -
  • Denmark
    • -
- 		-
    -
  • Dominican Republic
    • -
  • Ecuador
    • -
  • Egypt
    • -
  • El Salvador
    • -
  • Estonia
    • -
  • Faroe Islands
    • -
  • Fiji
    • -
  • Finland
    • -
  • France
    • -
  • Germany
    • -
  • Ghana
    • -
  • Greece
    • -
  • Guatemala
    • -
  • Honduras
    • -
  • Hong Kong SAR
    • -
  • Hungary
    • -
  • Iceland
    • -
  • Indonesia
    • -
  • Iraq
    • -
  • Ireland
    • -
  • Israel
    • -
  • Italy
    • -
  • Jamaica
    • -
  • Japan
    • -
  • Jordan
    • -
  • Kenya
    • -
  • Kuwait
    • -
  • Latvia
    • -
  • Lebanon
    • -
- 		-
    -
  • Libya
    • -
  • Liechtenstein
    • -
  • Lithuania
    • -
  • Luxembourg
    • -
  • Malaysia
    • -
  • Malta
    • -
  • Mauritius
    • -
  • Mexico
    • -
  • Mongolia
    • -
  • Montenegro
    • -
  • Morocco
    • -
  • Namibia
    • -
  • Netherlands
    • -
  • New Zealand
    • -
  • Nicaragua
    • -
  • Nigeria
    • -
  • Norway
    • -
  • Oman
    • -
  • Pakistan
    • -
  • Palestinian Authority
    • -
  • Panama
    • -
  • Paraguay
    • -
  • Peru
    • -
  • Philippines
    • -
  • Poland
    • -
  • Portugal
    • -
  • Puerto Rico
    • -
  • Qatar
    • -
  • Romania
    • -
- 		-
    -
  • Rwanda
    • -
  • Saint Kitts and Nevis
    • -
  • Saudi Arabia
    • -
  • Senegal
    • -
  • Serbia
    • -
  • Singapore
    • -
  • Slovakia
    • -
  • Slovenia
    • -
  • South Africa
    • -
  • Spain
    • -
  • Sweden
    • -
  • Switzerland
    • -
  • Tanzania
    • -
  • Thailand
    • -
  • Trinidad and Tobago
    • -
  • Tunisia
    • -
  • Turkey
    • -
  • Uganda
    • -
  • United Arab Emirates
    • -
  • United Kingdom
    • -
  • United States
    • -
  • Uruguay
    • -
  • Vietnam
    • -
  • Virgin Islands, U.S.
    • -
  • Zambia
    • -
  • Zimbabwe
          
    • -
-
- ### Support for free apps Customers in these markets can use Microsoft Store for Business and Education to acquire free apps: - India @@ -489,11 +311,17 @@ Customers in these markets can use Microsoft Store for Business and Education to ### Support for free apps and Minecraft: Education Edition Customers in these markets can use Microsoft Store for Business and Education to acquire free apps and Minecraft: Education Edition: - Albania +- Aremenia +- Azerbaijan +- Belarus - Bosnia - Brazil - Georgia +- Kazakhstan - Korea +- Republic of Moldova - Taiwan +- Tajikistan - Ukraine This table summarize what customers can purchase, depending on which Microsoft Store they are using. From 99ada674b6961e47957504972675354b2b4d58ab Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Wed, 28 Jun 2017 15:57:07 +0000 Subject: [PATCH 14/33] Merged PR 1971: Surface Data Eraser updates article updates --- .../surface/microsoft-surface-data-eraser.md | 24 ++++++++++++++++++- 1 file changed, 23 insertions(+), 1 deletion(-) diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index b04f01e727..c744876e01 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -23,6 +23,12 @@ Find out how the Microsoft Surface Data Eraser tool can help you securely wipe d Compatible Surface devices include: +- Surface Studio + +- Surface Pro + +- Surface Laptop + - Surface Book - Surface Pro 4 @@ -35,6 +41,9 @@ Compatible Surface devices include: - Surface Pro 2 +>[!NOTE] +>Surface Pro devices with 1 TB storage are not currently supported by Microsoft Surface Data Eraser. + Some scenarios where Microsoft Surface Data Eraser can be helpful include: - Prepare a Surface device to be sent for repair @@ -137,7 +146,20 @@ After you create a Microsoft Surface Data Eraser USB stick, you can boot a suppo 8. Click the **Yes** button to continue erasing data on the Surface device. -  +## Changes and updates + +Microsoft Surface Data Eraser is periodically updated by Microsoft. For information about the changes provided in each new version, see the following: + +### Version 3.2.36 + +This version of Microsoft Surface Data Eraser adds support for the following: + +- Surface Pro + +- Surface Laptop + +>[!NOTE] +>The Microsoft Surface Data Eraser USB drive creation tool is unable to run on Windows 10 S. To wipe a Surface Laptop running Windows 10 S, you must first create the Microsoft Surface Data Eraser USB drive on another computer with Windows 10 Pro or Windows 10 Enterprise.   From e7d0780b9f83acd57fdd60322971ab9297613356 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 28 Jun 2017 16:14:29 +0000 Subject: [PATCH 15/33] Merged PR 1972: Merge maricia-12523476 to master --- .../mdm/configuration-service-provider-reference.md | 10 +++++++--- .../mdm/new-in-windows-mdm-enrollment-management.md | 6 +++++- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 498d52cb2a..b9c1c1cd51 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/19/2017 +ms.date: 06/27/2017 --- # Configuration service provider reference @@ -26,6 +26,10 @@ Additional lists: - [List of CSPs supported in Windows 10 S](#windows10s) The following tables show the configuration service providers support in Windows 10. +Footnotes: +- 1 - Added in Windows 10, version 1607 +- 2 - Added in Windows 10, version 1703 +- 3 - Added in Windows 10, version 1709
@@ -836,8 +840,8 @@ The following tables show the configuration service providers support in Windows cross mark check mark2 check mark2 - check mark2 - check mark2 + cross mark + cross mark diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 46d1d00429..ecc0734eb3 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -10,7 +10,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/19/2017 +ms.date: 06/27/2017 --- # What's new in MDM enrollment and management @@ -1257,6 +1257,10 @@ Also Added [Firewall DDF file](firewall-ddf-file.md).
  • DeviceTagging/Criticality
    • + +[DynamicManagement CSP](dynamicmanagement-csp.md) +The DynamicManagement CSP is not supported in Windows 10 Mobile and Mobile Enterprise. The table of SKU information in the [Configuration service provider reference](configuration-service-provider-reference.md) was updated. + From be8e0cc8dd38b2c9f28d16617c66c0285e731433 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 28 Jun 2017 17:31:50 +0000 Subject: [PATCH 16/33] Merged PR 1978: Merge maricia-12054259 to master --- ...ew-in-windows-mdm-enrollment-management.md | 9 +++-- .../policy-configuration-service-provider.md | 37 ++++++++++++++++++- 2 files changed, 41 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index ecc0734eb3..6076927aba 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -10,7 +10,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/27/2017 +ms.date: 06/28/2017 --- # What's new in MDM enrollment and management @@ -1232,6 +1232,10 @@ Also Added [Firewall DDF file](firewall-ddf-file.md).

    Added the following new policies for Windows 10, version 1709:

      +
    • CredentialProviders/EnableWindowsAutoPilotResetCredentials
      • +
    • DeviceGuard/EnableVirtualizationBasedSecurity
      • +
    • DeviceGuard/RequirePlatformSecurityFeatures
      • +
    • DeviceGuard/LsaCfgFlags
    • Power/DisplayOffTimeoutOnBattery
    • Power/DisplayOffTimeoutPluggedIn
    • Power/HibernateTimeoutOnBattery
      • @@ -1243,9 +1247,6 @@ Also Added [Firewall DDF file](firewall-ddf-file.md).
    • Update/ScheduledInstallFourthWeek
    • Update/ScheduledInstallSecondWeek
    • Update/ScheduledInstallThirdWeek
      • -
    • DeviceGuard/EnableVirtualizationBasedSecurity
      • -
    • DeviceGuard/RequirePlatformSecurityFeatures
      • -
    • DeviceGuard/LsaCfgFlags

    EnterpriseCloudPrint/DiscoveryMaxPrinterLimit is only supported in Windows 10 Mobile and Mobile Enterprise.

    diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index e5cb50ad68..44bf627310 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/19/2017 +ms.date: 06/28/2017 --- # Policy CSP @@ -3762,6 +3762,41 @@ ADMX Info: +**CredentialProviders/EnableWindowsAutoPilotResetCredentials** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +Added in Windows 10, version 1709. Boolean policy to enable the credential provider that triggers the PC refresh on a device. This policy does not actually trigger the refresh. When the policy is enabled, a WNF notification is generated that would schedule a task to update the visibility of the new provider. The admin user is required to authenticate to trigger the refresh on the target device. + +The auto pilot reset feature allows admin to reset devices to a known good managed state while preserving the management enrollment. After the auto pilot reset is triggered the devices are for ready for use by information workers or students. + +Default value is 0. + + + + **CredentialsUI/DisablePasswordReveal** From b892f70e9d18c2beb3e5f465b9426b63643aa223 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 28 Jun 2017 17:50:35 +0000 Subject: [PATCH 17/33] Merged PR 1981: Merge maricia-12461998 to master --- windows/client-management/mdm/dmclient-csp.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/dmclient-csp.md b/windows/client-management/mdm/dmclient-csp.md index 303c8454a4..e0b8f44952 100644 --- a/windows/client-management/mdm/dmclient-csp.md +++ b/windows/client-management/mdm/dmclient-csp.md @@ -36,7 +36,9 @@ Required. The root node for all settings that belong to a single management serv Supported operation is Get. **Provider/****_ProviderID_** -Optional. This node contains the URI-encoded value of the bootstrapped device management account’s Provider ID. Scope is dynamic. As a best practice, use text that doesn’t require XML/URI escaping. +Required. This node contains the URI-encoded value of the bootstrapped device management account’s Provider ID. Scope is dynamic. This value is set and controlled by the MDM server. As a best practice, use text that doesn’t require XML/URI escaping. + +For Intune, use **MS DM Server** for Windows desktop or **SCConfigMgr** for Windows mobile for the _ProviderID_. Supported operations are Get and Add. From d12d7affec2f517ea30d9f335565164c08307ddb Mon Sep 17 00:00:00 2001 From: Matt Nelson Date: Wed, 28 Jun 2017 11:18:18 -0700 Subject: [PATCH 18/33] added ntkd debugger kernel debugger, nearly identical to kd.exe --- .../device-guard/deploy-code-integrity-policies-steps.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md index 8f0f7d4c6f..6ee22448d8 100644 --- a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md +++ b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md @@ -40,6 +40,7 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you - fsi.exe - fsiAnyCpu.exe - kd.exe +- ntkd.exe - lxssmanager.dll - msbuild.exe[1] - mshta.exe @@ -102,6 +103,7 @@ Microsoft recommends that you block the following Microsoft-signed applications + @@ -168,6 +170,7 @@ Microsoft recommends that you block the following Microsoft-signed applications + From fa0157fd954bac1efcde76d556be01e1b1d6bf54 Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Wed, 28 Jun 2017 11:37:59 -0700 Subject: [PATCH 19/33] Surface updates update verson info; update change history doc --- devices/surface/change-history-for-surface.md | 8 ++++++++ .../microsoft-surface-deployment-accelerator.md | 7 +++++++ devices/surface/surface-dock-updater.md | 11 +++++++++++ 3 files changed, 26 insertions(+) diff --git a/devices/surface/change-history-for-surface.md b/devices/surface/change-history-for-surface.md index 1dd7b983ea..33992b2d0a 100644 --- a/devices/surface/change-history-for-surface.md +++ b/devices/surface/change-history-for-surface.md @@ -11,6 +11,14 @@ author: jdeckerms This topic lists new and updated topics in the Surface documentation library. +## June 2017 + +|New or changed topic | Description | +| --- | --- | +|[Surface Data Eraser](microsoft-surface-data-eraser.md) | Update compatible devices, added version 3.2.36 information | +|[Surface Deployment Accelerator](microsoft-surface-deployment-accelerator.md) | Added version 2.0.8.0 information | +|[Surface Dock Updater](surface-dock-updater.md) | Added version 2.1.15.0 information | + ## April 2017 diff --git a/devices/surface/microsoft-surface-deployment-accelerator.md b/devices/surface/microsoft-surface-deployment-accelerator.md index cc2236665f..f64cc3d1cd 100644 --- a/devices/surface/microsoft-surface-deployment-accelerator.md +++ b/devices/surface/microsoft-surface-deployment-accelerator.md @@ -90,6 +90,13 @@ SDA is periodically updated by Microsoft. For instructions on how these features >[!NOTE] >To install a newer version of SDA on a server with a previous version of SDA installed, you only need to run the installation file for the new version of SDA. The installer will handle the upgrade process automatically. If you used SDA to create a deployment share prior to the upgrade and want to use new features of the new version of SDA, you will need to create a new deployment share. SDA does not support upgrades of an existing deployment share. + +### Version 2.0.8.0 +This version of SDA supports deployment of the following: +* Surface Pro + +>[!NOTE] +>SDA version 2.0.8.0 includes support only for Surface Pro, and does not support other Surface devices such as Surface Pro 4 or Surface Book. To deploy these devices, please continue to use SDA version 1.96.0405.   ### Version 1.96.0405 This version of SDA adds support for the following: diff --git a/devices/surface/surface-dock-updater.md b/devices/surface/surface-dock-updater.md index 6c009e69fb..f41c92b26b 100644 --- a/devices/surface/surface-dock-updater.md +++ b/devices/surface/surface-dock-updater.md @@ -111,6 +111,17 @@ Microsoft periodically updates Surface Dock Updater. To learn more about the app >[!Note] >Each update to Surface Dock firmware is included in a new version of Surface Dock Updater. To update a Surface Dock to the latest firmware, you must use the latest version of Surface Dock Updater. +### Version 2.1.15.0 +*Release date: June 19, 2017* + +This version of Surface Dock Updater adds support for the following: + +* Surface Laptop +* Surface Pro + +>[!NOTE] +>The Surface Dock Updater tool is unable to run on Windows 10 S. Surface Dock devices used with Surface Laptop with Windows 10 S will receive updates natively through Windows Update. To manually update a Surface Dock for use with Surface Laptop and Windows 10 S, connect the Surface Dock to another Surface device with a Windows 10 Pro or Windows 10 Enterprise environment. + ### Version 1.0.8.0 *Release date: April 26, 2016* From 9d9a1fe579dcb59aed6e2b6fd50c84ce3a4eb423 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 28 Jun 2017 12:38:18 -0700 Subject: [PATCH 20/33] revised title --- ...-windows-uses-hardware-based-containers-for-security.md} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename windows/threat-protection/{how-windows-uses-containers-for-security.md => how-windows-uses-hardware-based-containers-for-security.md} (96%) diff --git a/windows/threat-protection/how-windows-uses-containers-for-security.md b/windows/threat-protection/how-windows-uses-hardware-based-containers-for-security.md similarity index 96% rename from windows/threat-protection/how-windows-uses-containers-for-security.md rename to windows/threat-protection/how-windows-uses-hardware-based-containers-for-security.md index 2601eafcc9..8513e0597d 100644 --- a/windows/threat-protection/how-windows-uses-containers-for-security.md +++ b/windows/threat-protection/how-windows-uses-hardware-based-containers-for-security.md @@ -1,5 +1,5 @@ ---- -title: How Windows 10 uses containers for security (Windows 10) +---c +title: How Windows 10 uses hardware-based containers for security (Windows 10) description: Windows 10 uses containers to isolate sensitive system services and data, enabling them to remain secure even when the operating system has been compromised. ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 @@ -9,7 +9,7 @@ ms.pagetype: security author: justinha --- -# How Windows 10 uses containers for security +# How Windows 10 uses hardware-based containers for security Windows 10 uses containers to isolate sensitive system services and data, enabling them to remain secure even when the operating system has been compromised. Windows 10 protects critical resources, such as the Windows authentication stack, single sign-on tokens, Windows Hello biometric stack, and Virtual Trusted Platform Module, by using a container type called Windows Defender System Guard. From 01cf1c5bdf2e5a63922fbf55e775630e28af2b75 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 28 Jun 2017 12:43:23 -0700 Subject: [PATCH 21/33] changed file name and topic title --- ...> how-hardware-based-containers-help-protect-windows.md} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename windows/threat-protection/{how-windows-uses-hardware-based-containers-for-security.md => how-hardware-based-containers-help-protect-windows.md} (96%) diff --git a/windows/threat-protection/how-windows-uses-hardware-based-containers-for-security.md b/windows/threat-protection/how-hardware-based-containers-help-protect-windows.md similarity index 96% rename from windows/threat-protection/how-windows-uses-hardware-based-containers-for-security.md rename to windows/threat-protection/how-hardware-based-containers-help-protect-windows.md index 8513e0597d..3f6f9b4a81 100644 --- a/windows/threat-protection/how-windows-uses-hardware-based-containers-for-security.md +++ b/windows/threat-protection/how-hardware-based-containers-help-protect-windows.md @@ -1,5 +1,5 @@ ----c -title: How Windows 10 uses hardware-based containers for security (Windows 10) +--- +title: How hardware-based containers help protect Windows 10 (Windows 10) description: Windows 10 uses containers to isolate sensitive system services and data, enabling them to remain secure even when the operating system has been compromised. ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 @@ -9,7 +9,7 @@ ms.pagetype: security author: justinha --- -# How Windows 10 uses hardware-based containers for security +# How hardware-based containers help protect Windows 10 Windows 10 uses containers to isolate sensitive system services and data, enabling them to remain secure even when the operating system has been compromised. Windows 10 protects critical resources, such as the Windows authentication stack, single sign-on tokens, Windows Hello biometric stack, and Virtual Trusted Platform Module, by using a container type called Windows Defender System Guard. From a1823d2e93a2c8b7e6dc6a44340c9e6638f9e5c5 Mon Sep 17 00:00:00 2001 From: arottem Date: Wed, 28 Jun 2017 12:51:01 -0700 Subject: [PATCH 22/33] Update enable-cloud-protection-windows-defender-antivirus.md --- .../enable-cloud-protection-windows-defender-antivirus.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md index d5f456a9fb..4057fe4655 100644 --- a/windows/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md +++ b/windows/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md @@ -18,7 +18,7 @@ author: iaanw **Applies to:** -- Windows 10, version 1703 +- Windows 10 **Audience** @@ -150,4 +150,4 @@ See [Help secure Windows PCs with Endpoint Protection for Microsoft Intune](http - [Defender cmdlets](https://technet.microsoft.com/en-us/library/dn433280.aspx) - [Utilize Microsoft cloud-delivered protection in Windows Defender Antivirus](utilize-microsoft-cloud-protection-windows-defender-antivirus.md) - [How to create and deploy antimalware policies: Cloud-protection service](https://docs.microsoft.com/en-us/sccm/protect/deploy-use/endpoint-antimalware-policies#cloud-protection-service) -- [Windows Defender Antivirus in Windows 10](windows-defender-antivirus-in-windows-10.md) \ No newline at end of file +- [Windows Defender Antivirus in Windows 10](windows-defender-antivirus-in-windows-10.md) From fe715f1b0b387134ea3405e1c3acf586c3d8052e Mon Sep 17 00:00:00 2001 From: intothedarkness Date: Wed, 28 Jun 2017 12:53:39 -0700 Subject: [PATCH 23/33] Update copying-the-mbam-25-group-policy-templates.md --- mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md b/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md index 8991e9e68f..e76227cb88 100644 --- a/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md +++ b/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md @@ -16,14 +16,14 @@ ms.prod: w10 Before deploying the MBAM Client installation, you must download the MBAM Group Policy Templates, which contain Group Policy settings that define MBAM implementation settings for BitLocker Drive Encryption. After downloading the templates, you then set the Group Policy settings to implement across your enterprise. ## Downloading and deploying the MDOP Group Policy templates - - MDOP Group Policy templates are available for download in a self-extracting, compressed file, grouped by technology and version. **How to download and deploy the MDOP Group Policy templates** 1. Download the MDOP Group Policy templates from [Microsoft Desktop Optimization Pack Group Policy Administrative Templates -](https://www.microsoft.com/en-us/download/details.aspx?id=54957). +](https://www.microsoft.com/en-us/download/details.aspx?id=55531 + +). 2. Run the downloaded file to extract the template folders. From 3226727009ac757ff3a2018aafe04177c532c087 Mon Sep 17 00:00:00 2001 From: intothedarkness Date: Wed, 28 Jun 2017 12:57:58 -0700 Subject: [PATCH 24/33] Update copying-the-mbam-25-group-policy-templates.md update the AMDX template to new link --- mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md b/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md index 8991e9e68f..dab054da3e 100644 --- a/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md +++ b/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md @@ -23,7 +23,7 @@ MDOP Group Policy templates are available for download in a self-extracting, com **How to download and deploy the MDOP Group Policy templates** 1. Download the MDOP Group Policy templates from [Microsoft Desktop Optimization Pack Group Policy Administrative Templates -](https://www.microsoft.com/en-us/download/details.aspx?id=54957). +](https://www.microsoft.com/en-us/download/details.aspx?id=55531). 2. Run the downloaded file to extract the template folders. From b3be0d2623f464a4cad2659b9ffc5f3909f75d00 Mon Sep 17 00:00:00 2001 From: intothedarkness Date: Wed, 28 Jun 2017 13:03:00 -0700 Subject: [PATCH 25/33] Revert "Update copying-the-mbam-25-group-policy-templates.md" --- mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md b/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md index e76227cb88..8991e9e68f 100644 --- a/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md +++ b/mdop/mbam-v25/copying-the-mbam-25-group-policy-templates.md @@ -16,14 +16,14 @@ ms.prod: w10 Before deploying the MBAM Client installation, you must download the MBAM Group Policy Templates, which contain Group Policy settings that define MBAM implementation settings for BitLocker Drive Encryption. After downloading the templates, you then set the Group Policy settings to implement across your enterprise. ## Downloading and deploying the MDOP Group Policy templates + + MDOP Group Policy templates are available for download in a self-extracting, compressed file, grouped by technology and version. **How to download and deploy the MDOP Group Policy templates** 1. Download the MDOP Group Policy templates from [Microsoft Desktop Optimization Pack Group Policy Administrative Templates -](https://www.microsoft.com/en-us/download/details.aspx?id=55531 - -). +](https://www.microsoft.com/en-us/download/details.aspx?id=54957). 2. Run the downloaded file to extract the template folders. From 9c86a5d9b43513ef147f3f3492923b8c8e1a8d17 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 28 Jun 2017 20:05:11 +0000 Subject: [PATCH 26/33] Merged PR 1985: Merge maricia-12544946 to master --- ...ew-in-windows-mdm-enrollment-management.md | 1 - .../mdm/policymanager-csp.md | 947 +----------------- 2 files changed, 3 insertions(+), 945 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 6076927aba..d71053ae18 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -969,7 +969,6 @@ The software version information from **DevDetail/SwV** does not match the versi - In the SyncML, you must use lowercase product ID. - Do not duplicate a product ID. Messaging and Skype Video use the same product ID. Duplicates cause an error. - For additional details, see [ApplicationRestrictions in PolicyManager CSP](policymanager-csp.md#applicationmanagement-applicationrestrictions). - Silverlight xaps may not install even if publisher policy is specified using Windows Phone 8.1 publisher rule. For example, Silverlight app "Level" will not install even if you specify <Publisher PublisherName=”Microsoft Corporation” />. diff --git a/windows/client-management/mdm/policymanager-csp.md b/windows/client-management/mdm/policymanager-csp.md index d72dde44b5..a888021e38 100644 --- a/windows/client-management/mdm/policymanager-csp.md +++ b/windows/client-management/mdm/policymanager-csp.md @@ -7,957 +7,16 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/19/2017 +ms.date: 06/28/2017 --- # PolicyManager CSP -The PolicyManager configuration service provider enables the enterprise to configure company policies on Windows 10 Mobile. +PolicyManager CSP is deprecated. Use [Policy CSP](policy-configuration-service-provider.md) instead. -> **Note**   The PolicyManager CSP is supported in Windows 10 Mobile for backward compatibility. For Windows 10 devices you should use [Policy CSP](policy-configuration-service-provider.md), which replaces PolicyManager CSP. You can continue to use PolicyManager CSP for Windows Phone 8.1 and Windows Phone 8.1 GDR devices. The PolicyManager CSP will be deprecated some time in the future. +> **Note**   The PolicyManager CSP is supported in Windows 10 Mobile for backward compatibility. For Windows 10 devices you should use [Policy CSP](policy-configuration-service-provider.md), which replaces PolicyManager CSP. You can continue to use PolicyManager CSP for Windows Phone 8.1 and Windows Phone 8.1 GDR devices. -  - -The PolicyManager CSP has the following sub-categories: - -- PolicyManager/My/*AreaName* – Handles the policy configuration request from the server. - -- PolicyManager/Device/*AreaName* – Provides a read-only path to policies enforced on the device. - -The configuration policies for the same *AreaName* must be wrapped in an Atomic command. - -The following image shows the PolicyManager configuration service provider in tree format as used by both the Open Mobile Alliance (OMA) Device Management (DM) and OMA Client Provisioning. - -![provisioning\-csp\-policymanager](images/provisioning-csp-policymanager.png) - -The following list describes the characteristics and parameters. - -**./Vendor/MSFT/PolicyManager** -The root node for the PolicyManager configuration service provider. - -Supported operation is Get. - -**My** -Node for policies for a specific provider that can be retrieved, modified, or deleted. - -Supported operation is Get. - -**My/****_<AreaName>_** -The area group that can be configured by a single technology for a single provider. Once added, you cannot change the value. - -Supported operations are Add, Get, and Delete. - -**My/_<AreaName>_/****_<PolicyName>_** -Specifies the name/value pair used in the policy. The following list shows some tips to help you when configuring policies: - -- Separate multistring values by the Unicode &\#xF000; in the XML file. - -- End multistrings with &\#xF000; For example, One string&\#xF000;two string&\#xF000;red string&\#xF000;blue string&\#xF000;&\#xF000;. Note that a query from different caller could provide a different value as each caller could have different values for a named policy. - -- In Syncml, wrap this policy with the Atomic command so that the policy settings are treated as a single transaction. - -- Supported operations are Add, Get, Delete, and Replace. - -- Value type is string. - -For possible area and policy names, see [Supported company policies](#bkmk-supportedpolicies) below. - -**Device** -Groups the evaluated policies from all providers that can be configured. Supported operations is Get. - -**Device/****_<AreaName>_** -The area group that can be configured by a single technology independent of the providers. Supported operation is Get. - -**Device/_<AreaName>_/****_<PolicyName>_** -Specifies the name/value pair used in the policy. Supported operation is Get. - -## List of *<AreaName>*/*<PolicyName>* - - -**DeviceLock/DevicePasswordEnabled** -Specifies whether device lock is enabled. - -The following list shows the supported values: - -- 0 (default) - Enabled - -- 1 – Disabled - -> **Important**   ->The DevicePasswordEnabled setting must be set to 0 (device password is enabled) for the following settings to take effect: -> -> - AllowSimpleDevicePassword -> - MinDevicePasswordLength -> - AlphanumericDevicePasswordRequired -> - MaxDevicePasswordFailedAttempts -> - MaxInactivityTimeDeviceLock -> - MinDevicePasswordComplexCharacters - -  - -Supported via MDM and EAS - -EAS policy name - DevicePasswordEnabled - -Min policy value is the most restricted - -**DeviceLock/AllowSimpleDevicePassword** -Specifies whether passwords like “1111” or “1234” are allowed. - -The following list shows the supported values: - -- 0 - Not allowed. - -- 1 (default) – Allowed. - -Supported via MDM and EAS - -EAS policy name - AllowSimpleDevicePassword - -Min policy value is the most restricted - -**DeviceLock/MinDevicePasswordLength** -Specifies the minimum number or characters required in the PIN. - -The following list shows the supported values: - -- An integer X where - - 4 <= X <= 16. - -- 0- Not enforced. - -- Default: 4. - -Supported via MDM and EAS - -EAS policy name - MinDevicePasswordLength - -Max policy value is the most restricted - -**DeviceLock/AlphanumericDevicePasswordRequired** -Determines the type of password required. This policy only applies if DevicedPasswordEnabled policy is set to 0 (required). - -The following list shows the supported values: - -- 0 - Alphanumeric password required. - -- 1 - Numeric password required. - -- 2 (default) - Users can choose: Numeric Password, or Alphanumeric Password. - -Supported via MDM and EAS - -EAS policy name - AlphanumericDevicePasswordRequired - -Min policy value is the most restricted - -**DeviceLock/DevicePasswordExpiration** -Specifies when the password expires (in days). - -The following list shows the supported values: - -- An integer X where - - 0 <= X <= 730. - -- 0 (default) - Passwords do not expire. - -Supported via MDM and EAS - -EAS policy name - DevicePasswordExpiration - -If all policy values = 0 then 0; otherwise, Min policy value is the most secure value - -**DeviceLock/DevicePasswordHistory** -Specifies how many passwords can be stored in the history that can’t be used. - -The following list shows the supported values: - -- An integer X where - - 0 <= X <=50. - -- Default: 0 - -Supported via MDM and EAS - -EAS policy name - DevicePasswordHistory - -Max policy value is the most restricted - -**DeviceLock/MaxDevicePasswordFailedAttempts** -The number of authentication failures allowed before the device will be wiped. A value of 0 disables device wipe functionality. - -The following list shows the supported values: - -- An integer X where - - 0 <= X <= 999. - -- Default: 0. The device is never wiped after wrong passwords are entered. - -Supported via MDM and EAS - -EAS policy name - MaxDevicePasswordFailedAttempts - -If all policy values = 0 then 0; otherwise, Min policy value is the most restricted value. - -**DeviceLock/MaxInactivityTimeDeviceLock** -Specifies the amount of time (in minutes) after the device is idle that will cause the device to become password locked. - -The following list shows the supported values: - -- An integer X where - - 0 <= X <= 999. - -- 0 (default) - No timeout is defined. The default of "0" is Mango parity and is interpreted by as "No timeout is defined." - -Supported via MDM and EAS - -EAS policy name - MaxInactivityTimeDeviceLock - -Min policy value (except ‘0’) is the most restricted value. - -**DeviceLock/MinDevicePasswordComplexCharacters** -The number of complex element types (uppercase and lowercase letters, numbers, and punctuation) required for a strong password. - -The following list shows the supported values: - -- An integer X where - - 1 <= X <= 4. - -The default value is 1. - -Supported via MDM and EAS. - -EAS policy name - MinDevicePasswordComplexCharacters - -Max policy value is the most restricted - -**DeviceLock/AllowIdleReturnWithoutPassword** -Force the user to input password every time the device returns from an idle state. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 - user is not able to set the password grace period timer, and the value is set as "each time." - - 1 (default) - user is able to set the password grace period timer. - -Supported via MDM and EAS. - -Most restricted value is 0. - -**WiFi/AllowWiFi** -Allow or disallow Wi-Fi connection. (Configurable by Exchange as well – definition will be consistent with EAS definition.) - -> **Note**  The policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Use Wi-Fi connection is disallowed. - -- 1 (default) – Use Wi-Fi connection is allowed. - -Supported via MDM and EAS. - -EAS policy name - AllowWiFi - -Most restricted value is 0. - -**WiFi/AllowInternetSharing** -Allow or disallow internet sharing. - -(Configurable by Exchange as well – definition will be consistent with EAS definition.) - -The following list shows the supported values: - -- 0 – Do not allow the use of Internet Sharing. - -- 1 (default) – Allow the use of Internet Sharing. - -Supported via MDM and EAS. - -EAS policy name - AllowInternetSharing - -Most restricted value is 0. - -**WiFi/AllowAutoConnectToWiFiSenseHotspots** -Allow or disallow the device to automatically connect to Wi-Fi hotspots and friend social network. - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**WiFi/AllowWiFiHotSpotReporting** -Allow or disallow Wi-Fi Hotspot information reporting to Microsoft. Once disallowed, the user cannot turn it on. - -The following list shows the supported values: - -- 0 – HotSpot reporting is not allowed. - -- 1 (default) – HotSpot reporting is allowed. - -Most restricted value is 0. - -**WiFi/AllowManualWiFiConfiguration** -Allow or disallow connecting to Wi-Fi outside of MDM server-installed networks. - -> **Note**  The policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – No Wi-Fi connection outside of MDM provisioned network is allowed. - -- 1 (default) – Adding new network SSIDs beyond the already MDM provisioned ones is allowed. - -Most restricted value is 0. - -**Connectivity/AllowNFC** -Allow or disallow near field communication (NFC) on the device. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Do not allow NFC capabilities. - -- 1 (default) – Allow NFC capabilities. - -Most restricted value is 0. - -**Connectivity/AllowCellularDataRoaming** -Allows or disallows cellular data roaming on the device. - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Connectivity/AllowUSBConnection** -Enables USB connection between the device and a computer to sync files with the device or to use developer tools to deploy or debug applications. Changing this policy does not affect USB charging. - -Both Media Transfer Protocol (MTP) and IP over USB are disabled when this policy is enforced. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 - Not allowed. - -- 1 (default) - Allowed. - -Most restricted value is 0. - -**Connectivity/AllowVPNOverCellular** -This policy specifies what type of underlying connections VPN is allowed to use. - -The following list shows the supported values: - -- 0 - VPN is not allowed over cellular. - -- 1 (default) – VPN could use any connection including cellular. - -Most restricted value is 0. - -**Connectivity/AllowVPNRoamingOverCellular** -This policy, when enforced, will prevent the device from connecting VPN when the device roams over cellular networks. - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) - Allowed. - -Most restricted value is 0. - -**Connectivity/AllowBluetooth** -Allow the user to enable Bluetooth or restrict access. - -The following list shows the possible values: - -- 0 – Disable Bluetooth. - -- 1 – Not supported in Windows 10 Mobile for MDM and EAS Disable Bluetooth, but allow the configuration of hands-free profiles. - -- 2 (default) – Allow Bluetooth. - -Supported via MDM and EAS. - -EAS policy name - AllowBluetooth - -Most restricted value is 0. - -**System/AllowStorageCard** -Controls whether the user is allowed to use the storage card for device storage. This setting does not prevent programmatic access to the storage card, it only prevents the user from using the card as a storage location. - -The following list shows the supported values: - -- 0 – SD card use is not allowed. This does not prevent programmatic access to the storage card. - -- 1 (default) – Allow a storage card. - -EAS policy name - AllowStorageCard - -Most restricted value is 0. - -**System/AllowLocation** -Specifies whether to allow a location service. - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**System/AllowTelemetry** -Allow the device to send telemetry information (such as Software Quality Management (SQM) and Watson). - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 – Allowed, except for Secondary Data Requests. - -- 2 (default) – Allowed. - -Most restricted value is 0. - -**System/AllowUserToResetPhone** -Specifies whether to allow the user to factory reset the phone by using control panel and hardware key combination. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the possible values: - -- 0 - Not allowed. - -- 1 (default) - Allowed to reset to factory default settings. - -Most restricted value is 0. - -**Experience/AllowSaveAsOfOfficeFiles** -Specifies whether the user is allowed to save a file on the device as an office file. - -> **Note**  This policy is not supported and deprecated in Windows 10. - -  - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Experience/AllowCopyPaste** -Specifies whether copy and paste is allowed. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Experience/AllowScreenCapture** -Specifies whether screen capture is allowed. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Experience/AllowVoiceRecording** -Specifies whether voice recording is allowed. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Experience/AllowCortana** -Specifies whether Cortana is allowed on the device. - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Experience/AllowSyncMySettings** -Allows the enterprise to disallow roaming settings among devices (in/from a device). If not enforced, whether or not roaming is allowed may depend on other factors. - -The following list shows the supported values: - -- 0 – Roaming is not allowed. - -- 1 (default) – The enterprise does not enforce roaming restrictions. - -Most restricted value is 0. - - **Experience/AllowManualMDMUnenrollment** -Specifies whether to allow the user to delete the workplace account using the workplace control panel. The MDM server can always remotely delete the account. - -- 0 - Not allowed server. - -- 1 – Allowed. - -Most restricted value is 0. - - **Experience/AllowSharingOfOfficeFiles** -Specifies whether the user is allowed to share Office files. - -The following list shows the supported values: - -> **Note**  This policy is not supported in Windows 10. - -  - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Accounts/AllowMicrosoftAccountConnection** -Specifies whether user is allowed to use an MSA account for non-email related connection authentication and services. - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Accounts/AllowAddingNonMicrosoftAccountsManually** -Specifies whether user is allowed to add non-MSA email accounts. - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Security/AllowManualRootCertificateInstallation** -Specifies whether the user is allowed to manually install root and intermediate CAP certificates. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Security/RequireDeviceEncryption** -Allows enterprise to turn on internal storage encryption. Note that once turned on, it cannot be turned off via policy. - -The following list shows the supported values: - -- 0 (default) – Encryption is not required. - -- 1 – Encryption is required. - -Supported via MDM and EAS. - -EAS policy name - RequireDeviceEncryption - -Most restricted value is 1. - -**Browser/AllowBrowser** -Specifies whether Internet Explorer is allowed in the device. - -> **Note**  This policy in only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Supported via MDM and EAS. - -EAS policy name - AllowBrowser - -Most restricted value is 0. - -**Camera/AllowCamera** -Disables or enables the camera. - -The following list shows the supported values: - -- 0 – Use of camera is disallowed. - -- 1 (default) – Use of camera is allowed. - -Most restricted value is 0. - -**ApplicationManagement/AllowStore** -Specifies whether app store is allowed at the device. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**ApplicationManagement/ApplicationRestrictions** -An XML blob that specifies the application restrictions company want to put to the device. It could be app allow list, app disallow list, allowed publisher IDs, etc. An application that is running may not be immediately terminated. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -> **Note**  List of known issues: -- When you upgrade Windows Phone 8.1 devices to Windows 10 Mobile with a list of allowed apps, some Windows inbox apps get blocked causing unexpected behavior. To work around this issue, you must include the [inbox apps](applocker-csp.md#inboxappsandcomponents) that you need to your list of allowed apps. - - Here's additional guidance for the upgrade process: - - - Use Windows 10 product IDs for the apps listed in [inbox apps](applocker-csp.md#inboxappsandcomponents). - - Use the new Microsoft publisher name (PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US") and Publisher="CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" if you are using the publisher policy. Do not remove the Windows Phone 8.1 publisher if you are using it. - - In the SyncML, you must use lowercase product ID. - - Do not duplicate a product ID. Messaging and Skype Video use the same product ID. Duplicates cause an error. - - For a sample SyncML, see [Examples](#examples). - -- You cannot disable or enable **Contact Support** and **Windows Feedback** apps using ApplicationManagement/ApplicationRestrictions policy, although these are listed in the [inbox apps](applocker-csp.md#inboxappsandcomponents). -- When ApplicationManagement/ApplicationRestrictions policy is deployed to Windows 10 Mobile, installation and update of apps dependent on Microsoft Frameworks may get blocked with error 0x80073CF9. To work around this issue, you must include the Microsoft Framework Id to your list of allowed apps. - - ``` syntax - - ``` - -  - -Value type is chr. - -Value evaluation rule - The information for PolicyManager is opaque. There is no most restricted value evaluation. Whenever there is a change to the value, the device parses the node value and enforces specified policies. - -**ApplicationManagement/AllowDeveloperUnlock** -Specifies whether developer unlock is allowed at the device. - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Search/AllowSearchToUseLocation** -Specifies whether search could leverage location information. - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**Search/SafeSearchPermissions** -Specifies what level of safe search (filtering adult content) is required. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Strict, highest filtering against adult content. - -- 1 (default) – Moderate filtering against adult content (valid search results will not be filtered. - -Most restricted value is 0. - -**Search/AllowStoringImagesFromVisionSearch** -Specifies whether to allow Bing Vision to store the contents of the images captured when performing Bing Vision search. - -> **Note**  This policy is not supported in Windows 10. - -  - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -**AboveLock/AllowActionCenterNotifications** -Specifies whether to allow action center notifications above the device lock screen. - -> **Note**  This policy is only supported in Windows 10 Mobile. - -  - -The following list shows the supported values: - -- 0 – Not allowed. - -- 1 (default) – Allowed. - -Most restricted value is 0. - -## Examples - - -Here is an example SyncML for ApplicationRestrictions for adding all the inbox apps listed in [inbox apps](applocker-csp.md#inboxappsandcomponents). - -``` syntax - - - - 144-0 - - 144-1 - - - ./Vendor/MSFT/PolicyManager/My/ApplicationManagement/ApplicationRestrictions - - - chr - text/plain - - -<AppPolicy Version="1" xmlns="http://schemas.microsoft.com/phone/2013/policy"> -<Allow> - - <!-- Alarms and clock --> - <App ProductId="{44f7d2b4-553d-4bec-a8b7-634ce897ed5f}" /> - <!--Calculator --> - <App ProductId="{b58171c6-c70c-4266-a2e8-8f9c994f4456}" /> - <!--Camera --> - <App ProductId="{f0d8fefd-31cd-43a1-a45a-d0276db069f1}" /> - - <App ProductId="{0db5fcff-4544-458a-b320-e352dfd9ca2b}" /> - <!--Cortana --> - <App ProductId="{fd68dcf4-166f-4c55-a4ca-348020f71b94}" /> - <!--Excel --> - <App ProductId="{ead3e7c0-fae6-4603-8699-6a448138f4dc}" /> - <!--Facebook --> - <App ProductId="{82a23635-5bd9-df11-a844-00237de2db9e}" /> - <!--File Explorer --> - <App ProductId="{c5e2524a-ea46-4f67-841f-6a9465d9d515}" /> - <!--FM Radio --> - <App ProductId="{f725010e-455d-4c09-ac48-bcdef0d4b626}" /> - <!--Get Started --> - <App ProductId="{b3726308-3d74-4a14-a84c-867c8c735c3c}" /> - <!--Groove Music --> - <App ProductId="{d2b6a184-da39-4c9a-9e0a-8b589b03dec0}" /> - <!--Maps --> - <App ProductId="{ed27a07e-af57-416b-bc0c-2596b622ef7d}" /> - - <!--Messaging --> - <App ProductId="{27e26f40-e031-48a6-b130-d1f20388991a}" /> - <!--Microsoft Edge --> - <App ProductId="{395589fb-5884-4709-b9df-f7d558663ffd}" /> - <!--Money --> - <App ProductId="{1e0440f1-7abf-4b9a-863d-177970eefb5e}" /> - <!--Movies and TV --> - <App ProductId="{6affe59e-0467-4701-851f-7ac026e21665}" /> - <!--News --> - <App ProductId="{9c3e8cad-6702-4842-8f61-b8b33cc9caf1}" /> - <!--OneDrive --> - <App ProductId="{ad543082-80ec-45bb-aa02-ffe7f4182ba8}" /> - <!--OneNote --> - <App ProductId="{ca05b3ab-f157-450c-8c49-a1f127f5e71d}" /> - <!--Outlook Mail Calendar --> - <App ProductId="{a558feba-85d7-4665-b5d8-a2ff9c19799b}" /> - <!--People --> - <App ProductId="{60be1fb8-3291-4b21-bd39-2221ab166481}" /> - <!--Phone (dialer) --> - <App ProductId="{f41b5d0e-ee94-4f47-9cfe-3d3934c5a2c7}" /> - <!--Photos --> - <App ProductId="{fca55e1b-b9a4-4289-882f-084ef4145005}" /> - - <!--Podcasts --> - <App ProductId="{c3215724-b279-4206-8c3e-61d1a9d63ed3}" /> - <!--Powerpoint --> - <App ProductId="{b50483c4-8046-4e1b-81ba-590b24935798}" /> - <!--Settings --> - <App ProductId="{2a4e62d8-8809-4787-89f8-69d0f01654fb}" /> - <!--Skype --> - <App ProductId="{c3f8e570-68b3-4d6a-bdbb-c0a3f4360a51}" /> - <!--Skype Video GUID is same as Messaging --> - <!--Sports --> - <App ProductId="{0f4c8c7e-7114-4e1e-a84c-50664db13b17}" /> - <!--Storage --> - <App ProductId="{5b04b775-356b-4aa0-aaf8-6491ffea564d}" /> - <!--Store --> - <App ProductId="{7d47d89a-7900-47c5-93f2-46eb6d94c159}" /> - - <!--Voice recorder --> - <App ProductId="{7311b9c5-a4e9-4c74-bc3c-55b06ba95ad0}" /> - <!--Wallet --> - <App ProductId="{587a4577-7868-4745-a29e-f996203f1462}" /> - <!--Weather --> - <App ProductId="{63c2a117-8604-44e7-8cef-df10be3a57c8}" /> - - <App ProductId="{7604089d-d13f-4a2d-9998-33fc02b63ce3}" /> - <!--Word --> - <App ProductId="{258f115c-48f4-4adb-9a68-1387e634459b}" /> - <!--Xbox --> - <App ProductId="{b806836f-eebe-41c9-8669-19e243b81b83}" /> - - <!-- CloudExperienceHost --> - <App ProductId="{3a4fae89-7b7e-44b4-867b-f7e2772b8253}" /> - <!-- AAD BrokerPlugin --> - <App ProductId="{e5f8b2c4-75ae-45ee-9be8-212e34f77747}" /> - <!-- Ringtone --> - <App ProductId="{3e962450-486b-406b-abb5-d38b4ee7e6fe}" /> - <!-- Advanced Info --> - <App ProductId="{b6e3e590-9fa5-40c0-86ac-ef475de98e88}" /> - <!-- Glance --> - <App ProductId="{106e0a97-8b19-42cf-8879-a8ed2598fcbb}" /> - <!-- Connect --> - <App ProductId="{af7d2801-56c0-4eb1-824b-dd91cdf7ece5}" /> - <!-- Miracast View --> - <App ProductId="{906beeda-b7e6-4ddc-ba8d-ad5031223ef9}" /> - <!-- PrintDialog --> - <App ProductId="{0d32eeb1-32f0-40da-8558-cea6fcbec4a4}" /> - - <!-- Music downloads--> - <App ProductId="{3da8a0c1-f7e5-47c0-a680-be8fd013f747}" /> - <!-- App downloads--> - <App ProductId="{20bf77a0-19c7-4daa-8db5-bc3dfdfa44ac}" /> - <!-- Podcast downloads--> - <App ProductId="{063773e7-f26f-4a92-81f0-aa71a1161e30}" /> - <!-- Email and accounts--> - <App ProductId="{39cf127b-8c67-c149-539a-c02271d07060}" /> - <!-- Assigned Access Lock app--> - <App ProductId="{b84f4722-313e-4f85-8f41-cf5417c9c5cb}" /> - <!-- Windows Hello Setup--> - <App ProductId="{01293c37-72ec-3c8b-0eb3-1de4f7d0cdc4}" /> - <!-- Purchase Dialog--> - <App ProductId="{c60e79ca-063b-4e5d-9177-1309357b2c3f}" /> - <!-- Xbox Identity Provider--> - <App ProductId="{ba88225b-059a-45a2-a8eb-d3580283e49d}" /> - <!-- Block and Filter--> - <App ProductId="{59553c14-5701-49a2-9909-264d034deb3d}" /> - <!-- Sharing--> - <App ProductId="{b0894dfd-4671-4bb9-bc17-a8b39947ffb6}" /> - <!-- Setup wizard--> - <App ProductId="{07d87655-e4f0-474b-895a-773790ad4a32}" /> - <!-- Phone Reset Dialog--> - <App ProductId="{2864278d-09b5-46f7-b502-1c24139ecbdd}" /> - <!-- SaveRingtone--> - <App ProductId="{d8cf8ec7-ec6d-4892-aab9-1e3a4b5fa24b}" /> - <!-- HAP Update Background Worker--> - <App ProductId="{73c73cdd-4dea-462c-bd83-fa983056a4ef}" /> - <!-- Windows Default Lock Screen--> - <App ProductId="{cdd63e31-9307-4ccb-ab62-1ffa5721b503}" /> - <!-- navigation bar--> - <App ProductId="{2cd23676-8f68-4d07-8dd2-e693d4b01279}" /> - <!-- SSMHost--> - <App ProductId="{e232aa77-2b6d-442c-b0c3-f3bb9788af2a}" /> - <!-- Bing lock images--> - <App ProductId="{5f28c179-2780-41df-b966-27807b8de02c}" /> - <!-- CertInstaller--> - <App ProductId="{4c4ad968-7100-49de-8cd1-402e198d869e}" /> - <!-- Age Out Worker--> - <App ProductId="{09296e27-c9f3-4ab9-aa76-ecc4497d94bb}" /> - <!-- EnterpriseInstall App--> - <App ProductId="{da52fa01-ac0f-479d-957f-bfe4595941cb}" /> - <!-- Hands-Free Activation--> - <App ProductId="{df6c9621-e873-4e86-bb56-93e9f21b1d6f}" /> - <!-- Hands-Free Activation--> - <App ProductId="{72803bd5-4f36-41a4-a349-e83e027c4722}" /> - - - <!--Field Medic --> - <App ProductId="{73c58570-d5a7-46f8-b1b2-2a90024fc29c}" /> - <!--Windows Insider --> - <App ProductId="{ed2b1421-6414-4544-bd8d-06d58ee402a5}" /> - - <!-- Microsoft Frameworks --> - <App ProductId="{00000000-0000-0000-0000-000000000000}" PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" /> - - </Allow> -</AppPolicy> - - - - - - - - -``` - -## Related topics - - -[Configuration service provider reference](configuration-service-provider-reference.md) - -  - -  From b816da6c5993052ecfc4fb3ca97966261a2c02e1 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 28 Jun 2017 13:26:17 -0700 Subject: [PATCH 27/33] added ToC and Change History --- windows/threat-protection/TOC.md | 2 +- .../threat-protection/change-history-for-threat-protection.md | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/threat-protection/TOC.md b/windows/threat-protection/TOC.md index e60bd7870f..9714c77347 100644 --- a/windows/threat-protection/TOC.md +++ b/windows/threat-protection/TOC.md @@ -152,7 +152,7 @@ #### [Using Outlook Web Access with Windows Information Protection (WIP)](windows-information-protection\using-owa-with-wip.md) ## [Mitigate threats by using Windows 10 security features](overview-of-threat-mitigations-in-windows-10.md) ## [Override Process Mitigation Options to help enforce app-related security policies](override-mitigation-options-for-app-related-security-policies.md) -## [How Windows 10 uses containers for security](how-windows-uses-containers-for-security.md) +## [How hardware-based containers help protect Windows 10](how-hardware-based-containers-help-protect-windows.md) ## [Secure the windows 10 boot process](secure-the-windows-10-boot-process.md) ## [Use Windows Event Forwarding to help with intrusion detection](use-windows-event-forwarding-to-assist-in-instrusion-detection.md) ## [Block untrusted fonts in an enterprise](block-untrusted-fonts-in-enterprise.md) diff --git a/windows/threat-protection/change-history-for-threat-protection.md b/windows/threat-protection/change-history-for-threat-protection.md index c664fa8066..ee84b688ce 100644 --- a/windows/threat-protection/change-history-for-threat-protection.md +++ b/windows/threat-protection/change-history-for-threat-protection.md @@ -14,7 +14,8 @@ This topic lists new and updated topics in the [Threat protection](index.md) doc ## June 2017 |New or changed topic |Description | |---------------------|------------| -[Create a Windows Information Protection (WIP) with enrollment policy using the Azure portal for Microsoft Intune](windows-information-protection\create-wip-policy-using-intune-azure.md)|New topic for MDM using the Azure portal.| +| [How hardware-based containers help protect Windows 10](how-hardware-based-containers-help-protect-windows.md) | New | +|[Create a Windows Information Protection (WIP) with enrollment policy using the Azure portal for Microsoft Intune](windows-information-protection\create-wip-policy-using-intune-azure.md)|New topic for MDM using the Azure portal.| [Deploy your Windows Information Protection (WIP) policy using the Azure portal for Microsoft Intune](windows-information-protection\deploy-wip-policy-using-intune-azure.md)|New topic for MDM using the Azure portal.| [Associate and deploy a VPN policy for Windows Information Protection (WIP) using the Azure portal for Microsoft Intune](windows-information-protection\create-vpn-and-wip-policy-using-intune-azure.md)|New topic for MDM using the Azure portal.| |[List of enlightened Microsoft apps for use with Windows Information Protection (WIP)](windows-information-protection\enlightened-microsoft-apps-and-wip.md)|Updated to include newly enlightened and supported apps.| From 85a1a568ca034c35f3bbc26803c947f59fcd73ad Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 28 Jun 2017 23:16:46 +0000 Subject: [PATCH 28/33] Merged PR 1994: Publishing a Windows AutoPilot (new topic) should go live tomorrow --- windows/deployment/windows-10-auto-pilot.md | 107 ++++++++++++++++++++ 1 file changed, 107 insertions(+) create mode 100644 windows/deployment/windows-10-auto-pilot.md diff --git a/windows/deployment/windows-10-auto-pilot.md b/windows/deployment/windows-10-auto-pilot.md new file mode 100644 index 0000000000..da64ff50b4 --- /dev/null +++ b/windows/deployment/windows-10-auto-pilot.md @@ -0,0 +1,107 @@ +--- +title: Overview of Windows AutoPilot +description: This topic goes over Auto-Pilot and how it helps setup OOBE Windows 10 devices. +keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune +ms.prod: w10 +ms.mktglfcycl: deploy +localizationpriority: high +ms.sitesec: library +ms.pagetype: deploy +author: DaniHalfin +--- + +# Overview of Windows AutoPilot + +**Applies to** + +- Windows 10 + +Windows AutoPilot is a collection of technologies used to setup and pre-configure new devices, getting them ready for productive use. In addition, you can use Windows AutoPilot to reset, repurpose and recover devices.
    +This solution enables the IT department to achieve the above with little to no infrastructure to manage, with a process that's easy and simple. + +## Benefits of Windows AutoPilot + +Traditionally, IT Pros spend a lot of time on building and customizing images that will later be deployed to devices with a perfectly good OS already installed on them. Windows AutoPilot introduces a new approach. + +From the users' perspective, it only takes a few simple operations to make their device ready to use. + +From the IT Pros' perspective, the only interaction required from the end-user, is to connect to a network and to verify their credentials. Everything past that is automated. + +Windows AutoPilot allows you to: +* Automatically join devices to Azure Active Directory +* Auto-enroll devices into MDM services, such as Intune ([*Requires an Azure AD Premium subscription*](#prerequisites)) +* Restrict the Administrator account creation +* Create and auto-assign devices to configuration groups based on the devices' profile +* Customize OOBE content specific to the organization + +### Prerequisites + +* [Devices must be registered to the organization](#registering-devices-to-your-organization) +* Devices have to be pre-installed with Windows 10, version 1703 or later +* Devices must have access to the internet +* [Azure AD premium P1 or P2](https://www.microsoft.com/cloud-platform/azure-active-directory-features) +* Microsoft Intune or other MDM services to manage your devices + +## Windows AutoPilot Scenarios + +### Cloud-Driven + +The Cloud-Driven scenario enables you to pre-register devices through the Windows AutoPilot Deployment Program. Your devices will be fully configured with no additional intervention required on the users' side. + +#### The Windows AutoPilot Deployment Program experience + +The end user unboxes and turns on a new device. What follows are a few simple configuration steps: +* Select a language and keyboard layout +* Connect to the network +* Provide email address (the email of the user's Azure Active Directory account) and password + +Multiple additional settings are skipped here, since the device automatically recognizes that [it belongs to an organization](#registering-devices-to-your-organization). Following this process the device is joined to Azure Active Directory, enrolled in Microsoft Intune (or any other MDM service). + +MDM enrollment ensures policies are applied, apps are installed and setting are configured on the device. Windows Update for Business applies the latest updates to ensure the device is up to date. + +
    + + +#### Registering devices to your organization + +In order to register devices, you will need to acquire their hardware ID and register it. We are actively working with various hardware vendors to enable them to provide the required information to you, or upload it on your behalf. + +If you would like to capture that information by yourself, the following PowerShell script will generate a text file with the device's hardware ID. + +```PowerShell +$wmi = Get-WMIObject -Namespace root/cimv2/mdm/dmmap -Class MDM_DevDetail_Ext01 -Filter "InstanceID='Ext' AND ParentID='./DevDetail'" +$wmi.DeviceHardwareData | Out-File "$($env:COMPUTERNAME).txt" +``` +>[!NOTE] +>This PowerShell script requires elevated permissions. The output format might not fit the upload method. Check out the [Microsoft Store for Business](/microsoft-store/add-profile-to-devices) or [Partner Center](https://msdn.microsoft.com/partner-center/autopilot) for additional guidance. + +By uploading this information to the Microsoft Store for Business or Partner Center admin portal, you'll be able to assign devices to your organization. +Additional options and customization is available through these portals to pre-configure the devices. + +Options available for Windows 10, Version 1703: +* Skipping Work or Home usage selection (*Automatic*) +* Skipping OEM registration, OneDrive and Cortana (*Automatic*) +* Skipping privacy settings +* Preventing the account used to set-up the device from getting local administrator permissions + +Additional options we are working on for the next Windows 10 release: +* Skipping EULA +* Personalizing the setup experience +* MDM Support + +To see additional details on how to customize the OOBE experience and how to follow this process, see guidance for [Microsoft Store for Business](/microsoft-store/add-profile-to-devices) or [Partner Center](https://msdn.microsoft.com/partner-center/autopilot). + +### IT-Driven + +If you are planning to use to configure these devices with traditional on-premises or cloud-based solutions, the [Windows Configuration Designer](https://www.microsoft.com/store/p/windows-configuration-designer/9nblggh4tx22) can be used to help automate the process. This is more suited to scenarios in which you require a higher level of control over the provisioning process. For more information on creating provisioning packages with WCD, see [Create a provisioning package for Windows 10](/windows/configuration/provisioning-packages/provisioning-create-package). + +### Teacher-Driven + +If you're an IT Pro or a technical staff member at a school, your scenario might be simpler. The [Set Up School PCs](http://www.microsoft.com/store/p/set-up-school-pcs/9nblggh4ls40) app can be used to quickly set up PCs for students and will get you to a productive state faster and simpler. Please see [Use the Set up School PCs app](https://docs.microsoft.com/education/windows/use-set-up-school-pcs-app) for all the details. + +## Ensuring your device can be auto-enrolled to MDM + +In order for your devices to be auto-enrolled into MDM management, MDM auto-enrollment needs to be configured in Azure AD. To do that with Intune, please follow [Enroll Windows devices for Microsoft Intune](https://docs.microsoft.com/intune/windows-enroll). For other MDM vendors, please consult your vendor for further details. + +>[!NOTE] +>MDM Auto-enrollment requires an Azure AD Premium P1 or P2 subscription. \ No newline at end of file From 6f69aa87233c2657fb746badd12474f71e403010 Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Thu, 29 Jun 2017 10:45:13 -0700 Subject: [PATCH 29/33] Surface updates Add correct publish dates to articles --- devices/surface/microsoft-surface-data-eraser.md | 1 + devices/surface/microsoft-surface-deployment-accelerator.md | 1 + devices/surface/surface-dock-updater.md | 1 + 3 files changed, 3 insertions(+) diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index c744876e01..64cc54a9f0 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -9,6 +9,7 @@ ms.mktglfcycl: manage ms.pagetype: surface, devices, security ms.sitesec: library author: miladCA +ms.date=06/29/2017 --- # Microsoft Surface Data Eraser diff --git a/devices/surface/microsoft-surface-deployment-accelerator.md b/devices/surface/microsoft-surface-deployment-accelerator.md index f64cc3d1cd..dd78fd463d 100644 --- a/devices/surface/microsoft-surface-deployment-accelerator.md +++ b/devices/surface/microsoft-surface-deployment-accelerator.md @@ -9,6 +9,7 @@ ms.mktglfcycl: deploy ms.pagetype: surface, devices ms.sitesec: library author: miladCA +ms.date=06/29/2017 --- # Microsoft Surface Deployment Accelerator diff --git a/devices/surface/surface-dock-updater.md b/devices/surface/surface-dock-updater.md index f41c92b26b..c4690ec3be 100644 --- a/devices/surface/surface-dock-updater.md +++ b/devices/surface/surface-dock-updater.md @@ -9,6 +9,7 @@ ms.mktglfcycl: manage ms.pagetype: surface, devices ms.sitesec: library author: jobotto +ms.date=06/29/2017 --- # Microsoft Surface Dock Updater From 9a231f718e0f1f8c46e3160805c2e209654baf91 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 29 Jun 2017 11:04:41 -0700 Subject: [PATCH 30/33] Added dates --- .../how-hardware-based-containers-help-protect-windows.md | 1 + windows/threat-protection/secure-the-windows-10-boot-process.md | 1 + 2 files changed, 2 insertions(+) diff --git a/windows/threat-protection/how-hardware-based-containers-help-protect-windows.md b/windows/threat-protection/how-hardware-based-containers-help-protect-windows.md index 3f6f9b4a81..8b6124f000 100644 --- a/windows/threat-protection/how-hardware-based-containers-help-protect-windows.md +++ b/windows/threat-protection/how-hardware-based-containers-help-protect-windows.md @@ -7,6 +7,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security author: justinha +ms.date: 06/29/2017 --- # How hardware-based containers help protect Windows 10 diff --git a/windows/threat-protection/secure-the-windows-10-boot-process.md b/windows/threat-protection/secure-the-windows-10-boot-process.md index 069d8b1578..2f0931b1dc 100644 --- a/windows/threat-protection/secure-the-windows-10-boot-process.md +++ b/windows/threat-protection/secure-the-windows-10-boot-process.md @@ -8,6 +8,7 @@ ms.pagetype: security ms.sitesec: library localizationpriority: medium author: brianlic-msft +ms.date: 06/23/2017 --- # Secure the Windows 10 boot process From 43049d313f6c63d6a088937b8c5ae2ad7cc8f6e6 Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Thu, 29 Jun 2017 11:07:16 -0700 Subject: [PATCH 31/33] Surface-SDA change date location --- devices/surface/microsoft-surface-deployment-accelerator.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/microsoft-surface-deployment-accelerator.md b/devices/surface/microsoft-surface-deployment-accelerator.md index dd78fd463d..dc11992c2f 100644 --- a/devices/surface/microsoft-surface-deployment-accelerator.md +++ b/devices/surface/microsoft-surface-deployment-accelerator.md @@ -2,6 +2,7 @@ title: Microsoft Surface Deployment Accelerator (Surface) description: Microsoft Surface Deployment Accelerator provides a quick and simple deployment mechanism for organizations to reimage Surface devices. ms.assetid: E7991E90-4AAE-44B6-8822-58BFDE3EADE4 +ms.date=06/29/2017 localizationpriority: high keywords: deploy, install, tool ms.prod: w10 @@ -9,7 +10,6 @@ ms.mktglfcycl: deploy ms.pagetype: surface, devices ms.sitesec: library author: miladCA -ms.date=06/29/2017 --- # Microsoft Surface Deployment Accelerator From 9124a8f3acd7d126834fbfc471b970a8da70bf81 Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Thu, 29 Jun 2017 11:23:53 -0700 Subject: [PATCH 32/33] surface - fix dates --- devices/surface/microsoft-surface-data-eraser.md | 2 +- devices/surface/microsoft-surface-deployment-accelerator.md | 2 +- devices/surface/surface-dock-updater.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index 64cc54a9f0..ef8103d135 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -9,7 +9,7 @@ ms.mktglfcycl: manage ms.pagetype: surface, devices, security ms.sitesec: library author: miladCA -ms.date=06/29/2017 +ms.date: 06/29/2017 --- # Microsoft Surface Data Eraser diff --git a/devices/surface/microsoft-surface-deployment-accelerator.md b/devices/surface/microsoft-surface-deployment-accelerator.md index dc11992c2f..207c434259 100644 --- a/devices/surface/microsoft-surface-deployment-accelerator.md +++ b/devices/surface/microsoft-surface-deployment-accelerator.md @@ -2,7 +2,7 @@ title: Microsoft Surface Deployment Accelerator (Surface) description: Microsoft Surface Deployment Accelerator provides a quick and simple deployment mechanism for organizations to reimage Surface devices. ms.assetid: E7991E90-4AAE-44B6-8822-58BFDE3EADE4 -ms.date=06/29/2017 +ms.date: 06/29/2017 localizationpriority: high keywords: deploy, install, tool ms.prod: w10 diff --git a/devices/surface/surface-dock-updater.md b/devices/surface/surface-dock-updater.md index c4690ec3be..e555b82072 100644 --- a/devices/surface/surface-dock-updater.md +++ b/devices/surface/surface-dock-updater.md @@ -9,7 +9,7 @@ ms.mktglfcycl: manage ms.pagetype: surface, devices ms.sitesec: library author: jobotto -ms.date=06/29/2017 +ms.date: 06/29/2017 --- # Microsoft Surface Dock Updater From 7a74fe16ea6474b674057f597638953918263cf9 Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Thu, 29 Jun 2017 18:55:50 +0000 Subject: [PATCH 33/33] Merged PR 2007: Added autopilot to ToC and CH. Also added ms.author\ms.date where appropriate --- .../hello-for-business/hello-and-password-changes.md | 1 + .../hello-for-business/hello-biometrics-in-enterprise.md | 1 + .../hello-errors-during-pin-creation.md | 1 + .../hello-for-business/hello-event-300.md | 1 + .../hello-for-business/hello-how-it-works.md | 1 + .../hello-for-business/hello-identity-verification.md | 1 + .../hello-for-business/hello-manage-in-organization.md | 1 + .../hello-for-business/hello-prepare-people-to-use.md | 1 + .../hello-why-pin-is-better-than-password.md | 1 + windows/deployment/TOC.md | 2 ++ .../deployment/change-history-for-deploy-windows-10.md | 6 ++++++ .../update/change-history-for-update-windows-10.md | 8 ++++++++ windows/deployment/update/index.md | 1 + windows/deployment/update/waas-branchcache.md | 1 + windows/deployment/update/waas-configure-wufb.md | 1 + windows/deployment/update/waas-delivery-optimization.md | 1 + .../update/waas-deployment-rings-windows-10-updates.md | 1 + windows/deployment/update/waas-integrate-wufb.md | 1 + .../update/waas-manage-updates-configuration-manager.md | 1 + windows/deployment/update/waas-manage-updates-wsus.md | 1 + windows/deployment/update/waas-manage-updates-wufb.md | 1 + windows/deployment/update/waas-mobile-updates.md | 1 + .../deployment/update/waas-optimize-windows-10-updates.md | 1 + windows/deployment/update/waas-overview.md | 1 + windows/deployment/update/waas-quick-start.md | 1 + windows/deployment/update/waas-restart.md | 1 + .../update/waas-servicing-branches-windows-10-updates.md | 1 + .../update/waas-servicing-strategy-windows-10-updates.md | 1 + .../update/waas-windows-insider-for-business-aad.md | 1 + .../update/waas-windows-insider-for-business-faq.md | 1 + .../update/waas-windows-insider-for-business.md | 1 + windows/deployment/update/waas-wu-settings.md | 2 ++ windows/deployment/update/waas-wufb-group-policy.md | 1 + windows/deployment/update/waas-wufb-intune.md | 1 + windows/deployment/windows-10-auto-pilot.md | 6 ++++-- 35 files changed, 52 insertions(+), 2 deletions(-) diff --git a/windows/access-protection/hello-for-business/hello-and-password-changes.md b/windows/access-protection/hello-for-business/hello-and-password-changes.md index 33bc609550..0a5b5a6d31 100644 --- a/windows/access-protection/hello-for-business/hello-and-password-changes.md +++ b/windows/access-protection/hello-for-business/hello-and-password-changes.md @@ -8,6 +8,7 @@ ms.sitesec: library ms.pagetype: security author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Windows Hello and password changes diff --git a/windows/access-protection/hello-for-business/hello-biometrics-in-enterprise.md b/windows/access-protection/hello-for-business/hello-biometrics-in-enterprise.md index cb9bfb63dd..c458afafc8 100644 --- a/windows/access-protection/hello-for-business/hello-biometrics-in-enterprise.md +++ b/windows/access-protection/hello-for-business/hello-biometrics-in-enterprise.md @@ -9,6 +9,7 @@ ms.sitesec: library ms.pagetype: security author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Windows Hello biometrics in the enterprise diff --git a/windows/access-protection/hello-for-business/hello-errors-during-pin-creation.md b/windows/access-protection/hello-for-business/hello-errors-during-pin-creation.md index b9f0619b20..ee01d1173d 100644 --- a/windows/access-protection/hello-for-business/hello-errors-during-pin-creation.md +++ b/windows/access-protection/hello-for-business/hello-errors-during-pin-creation.md @@ -9,6 +9,7 @@ ms.sitesec: library ms.pagetype: security author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Windows Hello errors during PIN creation diff --git a/windows/access-protection/hello-for-business/hello-event-300.md b/windows/access-protection/hello-for-business/hello-event-300.md index 1eecd8dd53..3d94345736 100644 --- a/windows/access-protection/hello-for-business/hello-event-300.md +++ b/windows/access-protection/hello-for-business/hello-event-300.md @@ -9,6 +9,7 @@ ms.sitesec: library ms.pagetype: security author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Event ID 300 - Windows Hello successfully created diff --git a/windows/access-protection/hello-for-business/hello-how-it-works.md b/windows/access-protection/hello-for-business/hello-how-it-works.md index 379783c65a..1e42ccaded 100644 --- a/windows/access-protection/hello-for-business/hello-how-it-works.md +++ b/windows/access-protection/hello-for-business/hello-how-it-works.md @@ -7,6 +7,7 @@ ms.sitesec: library ms.pagetype: security author: DaniHalfin localizationpriority: high +ms.author: daniha --- # How Windows Hello for Business works diff --git a/windows/access-protection/hello-for-business/hello-identity-verification.md b/windows/access-protection/hello-for-business/hello-identity-verification.md index 063ed2cfe2..eaac2063b5 100644 --- a/windows/access-protection/hello-for-business/hello-identity-verification.md +++ b/windows/access-protection/hello-for-business/hello-identity-verification.md @@ -9,6 +9,7 @@ ms.sitesec: library ms.pagetype: security, mobile author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Windows Hello for Business diff --git a/windows/access-protection/hello-for-business/hello-manage-in-organization.md b/windows/access-protection/hello-for-business/hello-manage-in-organization.md index 165f6259f6..8ef71c6d85 100644 --- a/windows/access-protection/hello-for-business/hello-manage-in-organization.md +++ b/windows/access-protection/hello-for-business/hello-manage-in-organization.md @@ -9,6 +9,7 @@ ms.sitesec: library ms.pagetype: security author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Manage Windows Hello for Business in your organization diff --git a/windows/access-protection/hello-for-business/hello-prepare-people-to-use.md b/windows/access-protection/hello-for-business/hello-prepare-people-to-use.md index 8426ced11d..eaa96377ed 100644 --- a/windows/access-protection/hello-for-business/hello-prepare-people-to-use.md +++ b/windows/access-protection/hello-for-business/hello-prepare-people-to-use.md @@ -9,6 +9,7 @@ ms.sitesec: library ms.pagetype: security author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Prepare people to use Windows Hello diff --git a/windows/access-protection/hello-for-business/hello-why-pin-is-better-than-password.md b/windows/access-protection/hello-for-business/hello-why-pin-is-better-than-password.md index 208b3e6a3c..a224eeab82 100644 --- a/windows/access-protection/hello-for-business/hello-why-pin-is-better-than-password.md +++ b/windows/access-protection/hello-for-business/hello-why-pin-is-better-than-password.md @@ -9,6 +9,7 @@ ms.sitesec: library ms.pagetype: security author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Why a PIN is better than a password diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index babe4c7aa6..7dc9c4e629 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -41,6 +41,8 @@ ##### [Compatibility Fixes for Windows 10, Windows 8, Windows 7, and Windows Vista](planning/compatibility-fixes-for-windows-8-windows-7-and-windows-vista.md) #### [Change history for Plan for Windows 10 deployment](planning/change-history-for-plan-for-windows-10-deployment.md) +### [Overview of Windows AutoPilot](windows-10-auto-pilot.md) + ### [Windows 10 deployment scenarios](windows-10-deployment-scenarios.md) ### [Windows 10 deployment tools reference](windows-10-deployment-tools-reference.md) diff --git a/windows/deployment/change-history-for-deploy-windows-10.md b/windows/deployment/change-history-for-deploy-windows-10.md index 56563526b0..7353568c47 100644 --- a/windows/deployment/change-history-for-deploy-windows-10.md +++ b/windows/deployment/change-history-for-deploy-windows-10.md @@ -6,11 +6,17 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library author: greg-lindsay +ms.date: 06/28/2017 --- # Change history for Deploy Windows 10 This topic lists new and updated topics in the [Deploy Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](/windows/windows-10). +## June 2017 +| New or changed topic | Description | +|----------------------|-------------| +| [Overview of Windows AutoPilot](windows-10-auto-pilot.md) | New | + ## April 2017 | New or changed topic | Description | |----------------------|-------------| diff --git a/windows/deployment/update/change-history-for-update-windows-10.md b/windows/deployment/update/change-history-for-update-windows-10.md index 97ece9af22..3af0220b18 100644 --- a/windows/deployment/update/change-history-for-update-windows-10.md +++ b/windows/deployment/update/change-history-for-update-windows-10.md @@ -5,6 +5,8 @@ ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin +ms.author: daniha +ms.date: 05/16/2017 --- # Change history for Update Windows 10 @@ -13,6 +15,12 @@ This topic lists new and updated topics in the [Update Windows 10](index.md) doc >If you're looking for **update history** for Windows 10, see [Windows 10 and Windows Server 2016 update history](https://support.microsoft.com/help/12387/windows-10-update-history). +## May 2017 + +| New or changed topic | Description | +| --- | --- | +| [Manage additional Windows Update settings](waas-wu-settings.md) | New | + ## RELEASE: Windows 10, version 1703 The topics in this library have been updated for Windows 10, version 1703 (also known as the Creators Update). The following new topics have been added: diff --git a/windows/deployment/update/index.md b/windows/deployment/update/index.md index bc18ab0d95..4d6601fda8 100644 --- a/windows/deployment/update/index.md +++ b/windows/deployment/update/index.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Update Windows 10 in the enterprise diff --git a/windows/deployment/update/waas-branchcache.md b/windows/deployment/update/waas-branchcache.md index 4c15562191..e284dc274b 100644 --- a/windows/deployment/update/waas-branchcache.md +++ b/windows/deployment/update/waas-branchcache.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Configure BranchCache for Windows 10 updates diff --git a/windows/deployment/update/waas-configure-wufb.md b/windows/deployment/update/waas-configure-wufb.md index 18983b1998..b41a060c96 100644 --- a/windows/deployment/update/waas-configure-wufb.md +++ b/windows/deployment/update/waas-configure-wufb.md @@ -6,6 +6,7 @@ ms.mktglfcycl: deploy ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Configure Windows Update for Business diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index 919c9ff1d3..e15cd39494 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -6,6 +6,7 @@ ms.mktglfcycl: deploy ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Configure Delivery Optimization for Windows 10 updates diff --git a/windows/deployment/update/waas-deployment-rings-windows-10-updates.md b/windows/deployment/update/waas-deployment-rings-windows-10-updates.md index bec102fa51..f8a51fb650 100644 --- a/windows/deployment/update/waas-deployment-rings-windows-10-updates.md +++ b/windows/deployment/update/waas-deployment-rings-windows-10-updates.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Build deployment rings for Windows 10 updates diff --git a/windows/deployment/update/waas-integrate-wufb.md b/windows/deployment/update/waas-integrate-wufb.md index 36bba4f716..294a8ed333 100644 --- a/windows/deployment/update/waas-integrate-wufb.md +++ b/windows/deployment/update/waas-integrate-wufb.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Integrate Windows Update for Business with management solutions diff --git a/windows/deployment/update/waas-manage-updates-configuration-manager.md b/windows/deployment/update/waas-manage-updates-configuration-manager.md index 6d68004a30..13e614dbf4 100644 --- a/windows/deployment/update/waas-manage-updates-configuration-manager.md +++ b/windows/deployment/update/waas-manage-updates-configuration-manager.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Deploy Windows 10 updates using System Center Configuration Manager diff --git a/windows/deployment/update/waas-manage-updates-wsus.md b/windows/deployment/update/waas-manage-updates-wsus.md index 2c9f7a83e5..f9cc0b2feb 100644 --- a/windows/deployment/update/waas-manage-updates-wsus.md +++ b/windows/deployment/update/waas-manage-updates-wsus.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Deploy Windows 10 updates using Windows Server Update Services (WSUS) diff --git a/windows/deployment/update/waas-manage-updates-wufb.md b/windows/deployment/update/waas-manage-updates-wufb.md index d7207457f6..2c33b3ad01 100644 --- a/windows/deployment/update/waas-manage-updates-wufb.md +++ b/windows/deployment/update/waas-manage-updates-wufb.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Deploy updates using Windows Update for Business diff --git a/windows/deployment/update/waas-mobile-updates.md b/windows/deployment/update/waas-mobile-updates.md index 570725361b..35ed31ba72 100644 --- a/windows/deployment/update/waas-mobile-updates.md +++ b/windows/deployment/update/waas-mobile-updates.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Deploy updates for Windows 10 Mobile Enterprise and Windows 10 IoT Mobile diff --git a/windows/deployment/update/waas-optimize-windows-10-updates.md b/windows/deployment/update/waas-optimize-windows-10-updates.md index 0d6fac4aab..f6ff84324d 100644 --- a/windows/deployment/update/waas-optimize-windows-10-updates.md +++ b/windows/deployment/update/waas-optimize-windows-10-updates.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Optimize Windows 10 update delivery diff --git a/windows/deployment/update/waas-overview.md b/windows/deployment/update/waas-overview.md index c8811f1289..b1034016b5 100644 --- a/windows/deployment/update/waas-overview.md +++ b/windows/deployment/update/waas-overview.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Overview of Windows as a service diff --git a/windows/deployment/update/waas-quick-start.md b/windows/deployment/update/waas-quick-start.md index ae3f319cef..3a5f929896 100644 --- a/windows/deployment/update/waas-quick-start.md +++ b/windows/deployment/update/waas-quick-start.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Quick guide to Windows as a service diff --git a/windows/deployment/update/waas-restart.md b/windows/deployment/update/waas-restart.md index 4d57b5a82a..1c88ea8fb5 100644 --- a/windows/deployment/update/waas-restart.md +++ b/windows/deployment/update/waas-restart.md @@ -6,6 +6,7 @@ ms.mktglfcycl: deploy ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Manage device restarts after updates diff --git a/windows/deployment/update/waas-servicing-branches-windows-10-updates.md b/windows/deployment/update/waas-servicing-branches-windows-10-updates.md index 964db9c8fc..43aade46a5 100644 --- a/windows/deployment/update/waas-servicing-branches-windows-10-updates.md +++ b/windows/deployment/update/waas-servicing-branches-windows-10-updates.md @@ -6,6 +6,7 @@ ms.mktglfcycl: deploy ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Assign devices to servicing branches for Windows 10 updates diff --git a/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md b/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md index 99c0566d7f..a53ddfc63c 100644 --- a/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md +++ b/windows/deployment/update/waas-servicing-strategy-windows-10-updates.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Prepare servicing strategy for Windows 10 updates diff --git a/windows/deployment/update/waas-windows-insider-for-business-aad.md b/windows/deployment/update/waas-windows-insider-for-business-aad.md index 5467e01600..9b9ebc28ce 100644 --- a/windows/deployment/update/waas-windows-insider-for-business-aad.md +++ b/windows/deployment/update/waas-windows-insider-for-business-aad.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Windows Insider Program for Business using Azure Active Directory diff --git a/windows/deployment/update/waas-windows-insider-for-business-faq.md b/windows/deployment/update/waas-windows-insider-for-business-faq.md index aa84530023..4ad1cd7e3f 100644 --- a/windows/deployment/update/waas-windows-insider-for-business-faq.md +++ b/windows/deployment/update/waas-windows-insider-for-business-faq.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Windows Insider Program for Business Frequently Asked Questions diff --git a/windows/deployment/update/waas-windows-insider-for-business.md b/windows/deployment/update/waas-windows-insider-for-business.md index 5308d3e795..4a57a47307 100644 --- a/windows/deployment/update/waas-windows-insider-for-business.md +++ b/windows/deployment/update/waas-windows-insider-for-business.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Windows Insider Program for Business diff --git a/windows/deployment/update/waas-wu-settings.md b/windows/deployment/update/waas-wu-settings.md index b2d249199f..006e2e91e3 100644 --- a/windows/deployment/update/waas-wu-settings.md +++ b/windows/deployment/update/waas-wu-settings.md @@ -6,6 +6,8 @@ ms.mktglfcycl: deploy ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha +ms.date: 05/16/2017 --- # Manage additional Windows Update settings diff --git a/windows/deployment/update/waas-wufb-group-policy.md b/windows/deployment/update/waas-wufb-group-policy.md index 4b8c9d6362..5833d568ae 100644 --- a/windows/deployment/update/waas-wufb-group-policy.md +++ b/windows/deployment/update/waas-wufb-group-policy.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Walkthrough: use Group Policy to configure Windows Update for Business diff --git a/windows/deployment/update/waas-wufb-intune.md b/windows/deployment/update/waas-wufb-intune.md index fd8cb722f8..8375a45ceb 100644 --- a/windows/deployment/update/waas-wufb-intune.md +++ b/windows/deployment/update/waas-wufb-intune.md @@ -6,6 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library author: DaniHalfin localizationpriority: high +ms.author: daniha --- # Walkthrough: use Microsoft Intune to configure Windows Update for Business diff --git a/windows/deployment/windows-10-auto-pilot.md b/windows/deployment/windows-10-auto-pilot.md index da64ff50b4..9d8881dce7 100644 --- a/windows/deployment/windows-10-auto-pilot.md +++ b/windows/deployment/windows-10-auto-pilot.md @@ -8,6 +8,8 @@ localizationpriority: high ms.sitesec: library ms.pagetype: deploy author: DaniHalfin +ms.author: daniha +ms.date: 06/28/2017 --- # Overview of Windows AutoPilot @@ -73,7 +75,7 @@ $wmi = Get-WMIObject -Namespace root/cimv2/mdm/dmmap -Class MDM_DevDetail_Ext01 $wmi.DeviceHardwareData | Out-File "$($env:COMPUTERNAME).txt" ``` >[!NOTE] ->This PowerShell script requires elevated permissions. The output format might not fit the upload method. Check out the [Microsoft Store for Business](/microsoft-store/add-profile-to-devices) or [Partner Center](https://msdn.microsoft.com/partner-center/autopilot) for additional guidance. +>This PowerShell script requires elevated permissions. The output format might not fit the upload method. Check out the Microsoft Store for Business or [Partner Center](https://msdn.microsoft.com/partner-center/autopilot) for additional guidance. By uploading this information to the Microsoft Store for Business or Partner Center admin portal, you'll be able to assign devices to your organization. Additional options and customization is available through these portals to pre-configure the devices. @@ -89,7 +91,7 @@ Additional options we are working on for the next Windows 10 release: * Personalizing the setup experience * MDM Support -To see additional details on how to customize the OOBE experience and how to follow this process, see guidance for [Microsoft Store for Business](/microsoft-store/add-profile-to-devices) or [Partner Center](https://msdn.microsoft.com/partner-center/autopilot). +To see additional details on how to customize the OOBE experience and how to follow this process, see guidance for Microsoft Store for Business or [Partner Center](https://msdn.microsoft.com/partner-center/autopilot). ### IT-Driven