From b1b4beb16197275648603fd04fad992985a9b29f Mon Sep 17 00:00:00 2001
From: ManikaDhiman
Date: Wed, 5 Jun 2019 11:11:45 -0700
Subject: [PATCH 001/318] Added a note for reboot
---
.../mdm/policy-csp-textinput.md | 232 ++++++++++++++++++
1 file changed, 232 insertions(+)
diff --git a/windows/client-management/mdm/policy-csp-textinput.md b/windows/client-management/mdm/policy-csp-textinput.md
index 0cfafcfe1b..43fdafc317 100644
--- a/windows/client-management/mdm/policy-csp-textinput.md
+++ b/windows/client-management/mdm/policy-csp-textinput.md
@@ -59,6 +59,18 @@ manager: dansimp
TextInput/AllowLinguisticDataCollection
+
+ TextInput/ConfigureSimplifiedChineseIMEVersion
+
+
+ TextInput/ConfigureTraditionalChineseIMEVersion
+
+
+ TextInput/ConfigureJapaneseIMEVersion
+
+
+ TextInput/ConfigureKoreanIMEVersion
+
TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode
@@ -705,6 +717,226 @@ This setting supports a range of values between 0 and 1.
+
+**TextInput/ConfigureSimplifiedChineseIMEVersion**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 8 |
+ 8 |
+ 8 |
+ 8 |
+  |
+  |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+> [!NOTES]
+> - This policy is enforced only in Windows 10 for desktop.
+> - This policy requires reboot to take effect.
+
+Added in 20H1. Allows IT admins to configure the Microsoft Simplified Chinese IME version in the desktop.
+
+
+
+The following list shows the supported values:
+
+- 0 (default) - Allows you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is configured by default.
+- 1 - Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The previous version of Microsoft Simplified Chinese IME is always selected.
+- 2 - Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is always selected.
+
+
+
+
+
+
+
+**TextInput/ConfigureTraditionalChineseIMEVersion**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 8 |
+ 8 |
+ 8 |
+ 8 |
+  |
+  |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+> [!NOTES]
+> - This policy is enforced only in Windows 10 for desktop.
+> - This policy requires reboot to take effect.
+
+Added in 20H1. Allows IT admins to configure the Microsoft Traditional Chinese IME version in the desktop.
+
+
+
+The following list shows the supported values:
+
+- 0 (default) - Allows you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is configured by default.
+- 1 - Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The previous version of Microsoft Traditional Chinese IME is always selected.
+- 2 - Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is always selected.
+
+
+
+
+
+
+
+**TextInput/ConfigureJapaneseIMEVersion**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 8 |
+ 8 |
+ 8 |
+ 8 |
+  |
+  |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+> [!NOTES]
+> - This policy is enforced only in Windows 10 for desktop.
+> - This policy requires reboot to take effect.
+
+Added in 20H1. Allows IT admins to configure the Microsoft Japanese IME version in the desktop.
+
+
+
+The following list shows the supported values:
+
+- 0 (default) - Allows you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is configured by default.
+- 1 - Does not allow you to configure which Microsoft Japanese IME version to use. The previous version of Microsoft Japanese IME is always selected.
+- 2 - Does not allow you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is always selected.
+
+
+
+
+
+
+
+**TextInput/ConfigureKoreanIMEVersion**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 8 |
+ 8 |
+ 8 |
+ 8 |
+  |
+  |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+> [!NOTES]
+> - This policy is enforced only in Windows 10 for desktop.
+> - This policy requires reboot to take effect.
+
+Added in 20H1. Allows IT admins to configure the Microsoft Korean IME version in the desktop.
+
+
+
+The following list shows the supported values:
+
+- 0 (default) - Allows you to configure which Microsoft Korean IME version to use. The new Microsoft Korean IME version is configured by default.
+- 1 - Does not allow you to configure which Microsoft Korean IME version to use. The previous version of Microsoft Korean IME is always selected.
+- 2 - Does not allow you to configure which Microsoft Korean IME version to use. The new Microsoft Korean IME version is always selected.
+
+
+
+
+
+
**TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode**
From 87d6485641c8c6a3aaec09071bc1b902bd0b5a98 Mon Sep 17 00:00:00 2001
From: ManikaDhiman
Date: Wed, 5 Jun 2019 12:02:57 -0700
Subject: [PATCH 002/318] Updated note
---
.../client-management/mdm/policy-csp-textinput.md | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
diff --git a/windows/client-management/mdm/policy-csp-textinput.md b/windows/client-management/mdm/policy-csp-textinput.md
index 43fdafc317..92c664f842 100644
--- a/windows/client-management/mdm/policy-csp-textinput.md
+++ b/windows/client-management/mdm/policy-csp-textinput.md
@@ -67,10 +67,10 @@ manager: dansimp
TextInput/ConfigureJapaneseIMEVersion
-
+
TextInput/ConfigureKoreanIMEVersion
-
+
TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode
@@ -753,7 +753,7 @@ This setting supports a range of values between 0 and 1.
-> [!NOTES]
+> [!NOTE]
> - This policy is enforced only in Windows 10 for desktop.
> - This policy requires reboot to take effect.
@@ -808,7 +808,7 @@ The following list shows the supported values:
-> [!NOTES]
+> [!NOTE]
> - This policy is enforced only in Windows 10 for desktop.
> - This policy requires reboot to take effect.
@@ -863,8 +863,8 @@ The following list shows the supported values:
-> [!NOTES]
-> - This policy is enforced only in Windows 10 for desktop.
+> [!NOTE]
+> - The policy is only enforced in Windows 10 for desktop.
> - This policy requires reboot to take effect.
Added in 20H1. Allows IT admins to configure the Microsoft Japanese IME version in the desktop.
@@ -918,7 +918,7 @@ The following list shows the supported values:
-> [!NOTES]
+> [!NOTE]
> - This policy is enforced only in Windows 10 for desktop.
> - This policy requires reboot to take effect.
From 986029e98f7154734d3d6fb5231ff5a6b4d0bf29 Mon Sep 17 00:00:00 2001
From: ManikaDhiman
Date: Thu, 15 Aug 2019 17:09:50 +0530
Subject: [PATCH 003/318] Added 20H1 policies
---
.../mdm/policy-csp-deviceinstallation.md | 158 +++++++++++++++++-
1 file changed, 156 insertions(+), 2 deletions(-)
diff --git a/windows/client-management/mdm/policy-csp-deviceinstallation.md b/windows/client-management/mdm/policy-csp-deviceinstallation.md
index e137a5dc9f..3df85a5ecf 100644
--- a/windows/client-management/mdm/policy-csp-deviceinstallation.md
+++ b/windows/client-management/mdm/policy-csp-deviceinstallation.md
@@ -11,6 +11,8 @@ author: manikadhiman
---
# Policy CSP - DeviceInstallation
+> [!WARNING]
+> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
@@ -24,6 +26,9 @@ author: manikadhiman
DeviceInstallation/AllowInstallationOfMatchingDeviceSetupClasses
+
+ DeviceInstallation/AllowInstallationOfMatchingDeviceInstanceIDs
+
DeviceInstallation/PreventDeviceMetadataFromNetwork
@@ -33,12 +38,14 @@ author: manikadhiman
DeviceInstallation/PreventInstallationOfMatchingDeviceIDs
+
+ DeviceInstallation/PreventInstallationOfMatchingDeviceInstanceIDs
+
DeviceInstallation/PreventInstallationOfMatchingDeviceSetupClasses
-
@@ -264,6 +271,79 @@ To verify the policy is applied, check C:\windows\INF\setupapi.dev.log and see i
+
+**DeviceInstallation/AllowInstallationOfMatchingDeviceInstanceIDs**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to specify a list of Plug and Play device instance IDs for devices that Windows is allowed to install. Use this policy setting only when the "Prevent installation of devices not described by other policy settings" policy setting is enabled. Other policy settings that prevent device installation take precedence over this one.
+
+If you enable this policy setting, Windows is allowed to install or update any device whose Plug and Play device instance ID appears in the list you create, unless another policy setting specifically prevents that installation (for example, the "Prevent installation of devices that match any of these device IDs" policy setting, the "Prevent installation of devices for these device classes" policy setting, the "Prevent installation of devices that match any of these device instance IDs" policy setting, or the "Prevent installation of removable devices" policy setting). If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.
+
+If you disable or do not configure this policy setting, and no other policy setting describes the device, the "Prevent installation of devices not described by other policy settings" policy setting determines whether the device can be installed.
+
+Peripherals can be specified by their [device instance ID](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/device-instance-ids). Test the configuration prior to rolling it out to ensure it allows the devices expected. Ideally test various instances of the hardware. For example, test multiple USB keys rather than only one.
+
+
+> [!TIP]
+> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
+
+> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
+
+> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
+
+
+ADMX Info:
+- GP English name: *Allow installation of devices that match any of these device instance IDs*
+- GP name: *DeviceInstall_Instance_IDs_Allow*
+- GP path: *System/Device Installation/Device Installation Restrictions*
+- GP ADMX file name: *deviceinstallation.admx*
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
**DeviceInstallation/PreventDeviceMetadataFromNetwork**
@@ -546,6 +626,80 @@ For example, this custom profile blocks installation and usage of USB devices wi
+
+
+
+**DeviceInstallation/PreventInstallationOfMatchingDeviceInstanceIDs**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to specify a list of Plug and Play device instance IDs for devices that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device.
+
+If you enable this policy setting, Windows is prevented from installing a device whose device instance ID appears in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.
+
+If you disable or do not configure this policy setting, devices can be installed and updated as allowed or prevented by other policy settings.
+
+Peripherals can be specified by their [device instance ID](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/device-instance-ids). Test the configuration prior to rolling it out to ensure it allows the devices expected. Ideally test various instances of the hardware. For example, test multiple USB keys rather than only one.
+
+
+> [!TIP]
+> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
+
+> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
+
+> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
+
+
+ADMX Info:
+- GP English name: *Prevent installation of devices that match any of these device instance IDs*
+- GP name: *DeviceInstall_Instance_IDs_Deny*
+- GP path: *System/Device Installation/Device Installation Restrictions*
+- GP ADMX file name: *deviceinstallation.admx*
+
+
+
+
+
+
+
+
+
+
+
+
+
+
**DeviceInstallation/PreventInstallationOfMatchingDeviceSetupClasses**
@@ -661,6 +815,6 @@ Footnote:
- 3 - Added in Windows 10, version 1709.
- 4 - Added in Windows 10, version 1803.
- 5 - Added in Windows 10, version 1809.
-- 6 - Added in the next major release of Windows 10.
+- 6 - Added in Windows 10, version 1903.
\ No newline at end of file
From a1cf16038a4c05135af71d9bf73f6b110849269c Mon Sep 17 00:00:00 2001
From: ManikaDhiman
Date: Tue, 20 Aug 2019 14:37:44 +0530
Subject: [PATCH 004/318] Added Audit policies
---
.../client-management/mdm/policy-csp-audit.md | 3623 +++++++++++++++++
1 file changed, 3623 insertions(+)
create mode 100644 windows/client-management/mdm/policy-csp-audit.md
diff --git a/windows/client-management/mdm/policy-csp-audit.md b/windows/client-management/mdm/policy-csp-audit.md
new file mode 100644
index 0000000000..08e3891e5b
--- /dev/null
+++ b/windows/client-management/mdm/policy-csp-audit.md
@@ -0,0 +1,3623 @@
+---
+title: Policy CSP - Audit
+description: Policy CSP - Audit
+ms.author: Heidi.Lohr
+ms.topic: article
+ms.prod: w10
+ms.technology: windows
+author: Heidilohr
+ms.date: 08/13/2019
+---
+
+# Policy CSP - Audit
+
+> [!WARNING]
+> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
+
+
+
+
+
+## Audit policies
+
+
+ -
+ Audit/AccountLogonLogoff_AuditAccountLockout
+
+ -
+ Audit/AccountLogonLogoff_AuditGroupMembership
+
+ -
+ Audit/AccountLogonLogoff_AuditIPsecExtendedMode
+
+ -
+ Audit/AccountLogonLogoff_AuditIPsecMainMode
+
+ -
+ Audit/AccountLogonLogoff_AuditIPsecQuickMode
+
+ -
+ Audit/AccountLogonLogoff_AuditLogoff
+
+ -
+ Audit/AccountLogonLogoff_AuditLogon
+
+ -
+ Audit/AccountLogonLogoff_AuditNetworkPolicyServer
+
+ -
+ Audit/AccountLogonLogoff_AuditOtherLogonLogoffEvents
+
+ -
+ Audit/AccountLogonLogoff_AuditSpecialLogon
+
+ -
+ Audit/AccountLogonLogoff_AuditUserDeviceClaims
+
+ -
+ Audit/AccountLogon_AuditCredentialValidation
+
+ -
+ Audit/AccountLogon_AuditKerberosAuthenticationService
+
+ -
+ Audit/AccountLogon_AuditKerberosServiceTicketOperations
+
+ -
+ Audit/AccountLogon_AuditOtherAccountLogonEvents
+
+ -
+ Audit/AccountManagement_AuditApplicationGroupManagement
+
+ -
+ Audit/AccountManagement_AuditComputerAccountManagement
+
+ -
+ Audit/AccountManagement_AuditDistributionGroupManagement
+
+ -
+ Audit/AccountManagement_AuditOtherAccountManagementEvents
+
+ -
+ Audit/AccountManagement_AuditSecurityGroupManagement
+
+ -
+ Audit/AccountManagement_AuditUserAccountManagement
+
+ -
+ Audit/DSAccess_AuditDetailedDirectoryServiceReplication
+
+ -
+ Audit/DSAccess_AuditDirectoryServiceAccess
+
+ -
+ Audit/DSAccess_AuditDirectoryServiceChanges
+
+ -
+ Audit/DSAccess_AuditDirectoryServiceReplication
+
+ -
+ Audit/DetailedTracking_AuditDPAPIActivity
+
+ -
+ Audit/DetailedTracking_AuditPNPActivity
+
+ -
+ Audit/DetailedTracking_AuditProcessCreation
+
+ -
+ Audit/DetailedTracking_AuditProcessTermination
+
+ -
+ Audit/DetailedTracking_AuditRPCEvents
+
+ -
+ Audit/DetailedTracking_AuditTokenRightAdjusted
+
+ -
+ Audit/ObjectAccess_AuditApplicationGenerated
+
+ -
+ Audit/ObjectAccess_AuditCentralAccessPolicyStaging
+
+ -
+ Audit/ObjectAccess_AuditCertificationServices
+
+ -
+ Audit/ObjectAccess_AuditDetailedFileShare
+
+ -
+ Audit/ObjectAccess_AuditFileShare
+
+ -
+ Audit/ObjectAccess_AuditFileSystem
+
+ -
+ Audit/ObjectAccess_AuditFilteringPlatformConnection
+
+ -
+ Audit/ObjectAccess_AuditFilteringPlatformPacketDrop
+
+ -
+ Audit/ObjectAccess_AuditHandleManipulation
+
+ -
+ Audit/ObjectAccess_AuditKernelObject
+
+ -
+ Audit/ObjectAccess_AuditOtherObjectAccessEvents
+
+ -
+ Audit/ObjectAccess_AuditRegistry
+
+ -
+ Audit/ObjectAccess_AuditRemovableStorage
+
+ -
+ Audit/ObjectAccess_AuditSAM
+
+ -
+ Audit/PolicyChange_AuditAuthenticationPolicyChange
+
+ -
+ Audit/PolicyChange_AuditAuthorizationPolicyChange
+
+ -
+ Audit/PolicyChange_AuditFilteringPlatformPolicyChange
+
+ -
+ Audit/PolicyChange_AuditMPSSVCRuleLevelPolicyChange
+
+ -
+ Audit/PolicyChange_AuditOtherPolicyChangeEvents
+
+ -
+ Audit/PolicyChange_AuditPolicyChange
+
+ -
+ Audit/PrivilegeUse_AuditNonSensitivePrivilegeUse
+
+ -
+ Audit/PrivilegeUse_AuditOtherPrivilegeUseEvents
+
+ -
+ Audit/PrivilegeUse_AuditSensitivePrivilegeUse
+
+ -
+ Audit/System_AuditIPsecDriver
+
+ -
+ Audit/System_AuditOtherSystemEvents
+
+ -
+ Audit/System_AuditSecurityStateChange
+
+ -
+ Audit/System_AuditSecuritySystemExtension
+
+ -
+ Audit/System_AuditSystemIntegrity
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditAccountLockout**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by a failed attempt to log on to an account that is locked out.
+
+If you configure this policy setting, an audit event is generated when an account cannot log on to a computer because the account is locked out. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+
+Logon events are essential for understanding user activity and to detect potential attacks.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditGroupMembership**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy allows you to audit the group memberhsip information in the user's logon token. Events in this subcategory are generated on the computer on which a logon session is created. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource.
+
+When this setting is configured, one or more security audit events are generated for each successful logon. You must also enable the Audit Logon setting under Advanced Audit Policy Configuration\System Audit Policies\Logon/Logoff. Multiple events are generated if the group memberhsip information cannot fit in a single security audit event.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditIPsecExtendedMode**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by Internet Key Exchange protocol (IKE) and Authenticated Internet Protocol (AuthIP) during Extended Mode negotiations.
+
+If you configure this policy setting, an audit event is generated during an IPsec Extended Mode negotiation. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated during an IPsec Extended Mode negotiation.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditIPsecMainMode**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by Internet Key Exchange protocol (IKE) and Authenticated Internet Protocol (AuthIP) during Main Mode negotiations.
+
+If you configure this policy setting, an audit event is generated during an IPsec Main Mode negotiation. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated during an IPsec Main Mode negotiation.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditIPsecQuickMode**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by Internet Key Exchange protocol (IKE) and Authenticated Internet Protocol (AuthIP) during Quick Mode negotiations.
+
+If you configure this policy setting, an audit event is generated during an IPsec Quick Mode negotiation. Success audits record successful attempts and Failure audits record unsuccessful attempts.If
+ you do not configure this policy setting, no audit event is generated during an IPsec Quick Mode negotiation.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditLogoff**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by the closing of a logon session. These events occur on the computer that was accessed. For an interactive logoff the security audit event is generated on the computer that the user account logged on to.
+
+If you configure this policy setting, an audit event is generated when a logon session is closed. Success audits record successful attempts to close sessions and Failure audits record unsuccessful attempts to close sessions.
+If you do not configure this policy setting, no audit event is generated when a logon session is closed.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditLogon**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by user account logon attempts on the computer.
+Events in this subcategory are related to the creation of logon sessions and occur on the computer which was accessed. For an interactive logon, the security audit event is generated on the computer that the user account logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource. The following events are included:
+ Successful logon attempts.
+ Failed logon attempts.
+ Logon attempts using explicit credentials. This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch logon configurations, such as scheduled tasks or when using the RUNAS command.
+ Security identifiers (SIDs) were filtered and not allowed to log on.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditNetworkPolicyServer**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by RADIUS (IAS) and Network Access Protection (NAP) user access requests. These requests can be Grant, Deny, Discard, Quarantine, Lock, and Unlock.
+If you configure this policy setting, an audit event is generated for each IAS and NAP user access request. Success audits record successful user access requests and Failure audits record unsuccessful attempts.
+If you do not configure this policy settings, IAS and NAP user access requests are not audited.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditOtherLogonLogoffEvents**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit other logon/logoff-related events that are not covered in the “Logon/Logoff” policy setting such as the following:
+ Terminal Services session disconnections.
+ New Terminal Services sessions.
+ Locking and unlocking a workstation.
+ Invoking a screen saver.
+ Dismissal of a screen saver.
+ Detection of a Kerberos replay attack, in which a Kerberos request was received twice with identical information. This condition could be caused by network misconfiguration.
+ Access to a wireless network granted to a user or computer account.
+ Access to a wired 802.1x network granted to a user or computer account.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditSpecialLogon**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by special logons such as the following :
+ The use of a special logon, which is a logon that has administrator-equivalent privileges and can be used to elevate a process to a higher level.
+ A logon by a member of a Special Group. Special Groups enable you to audit events generated when a member of a certain group has logged on to your network. You can configure a list of group security identifiers (SIDs) in the registry. If any of those SIDs are added to a token during logon and the subcategory is enabled, an event is logged. For more information about this feature, see article 947223 in the Microsoft Knowledge Base (https://go.microsoft.com/fwlink/?LinkId=121697).
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogonLogoff_AuditUserDeviceClaims**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy allows you to audit user and device claims information in the user's logon token. Events in this subcategory are generated on the computer on which a logon session is created. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource.
+
+User claims are added to a logon token when claims are included with a user's account attributes in Active Directory. Device claims are added to the logon token when claims are included with a device's computer account attributes in Active Directory. In addition, compound identity must be enabled for the domain and on the computer where the user logged on.
+
+When this setting is configured, one or more security audit events are generated for each successful logon. You must also enable the Audit Logon setting under Advanced Audit Policy Configuration\System Audit Policies\Logon/Logoff. Multiple events are generated if the user and device claims information cannot fit in a single security audit event.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogon_AuditCredentialValidation**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by validation tests on user account logon credentials.
+
+Events in this subcategory occur only on the computer that is authoritative for those credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogon_AuditKerberosAuthenticationService**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by Kerberos authentication ticket-granting ticket (TGT) requests.
+
+If you configure this policy setting, an audit event is generated after a Kerberos authentication TGT request. Success audits record successful requests and Failure audits record unsuccessful requests.
+If you do not configure this policy setting, no audit event is generated after a Kerberos authentication TGT request.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogon_AuditKerberosServiceTicketOperations**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by Kerberos authentication ticket-granting ticket (TGT) requests submitted for user accounts.
+
+If you configure this policy setting, an audit event is generated after a Kerberos authentication TGT is requested for a user account. Success audits record successful requests and Failure audits record unsuccessful requests.
+If you do not configure this policy setting, no audit event is generated after a Kerberos authentication TGT is request for a user account.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountLogon_AuditOtherAccountLogonEvents**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by responses to credential requests submitted for a user account logon that are not credential validation or Kerberos tickets.
+
+Currently, there are no events in this subcategory.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountManagement_AuditApplicationGroupManagement**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes to application groups such as the following:
+ Application group is created, changed, or deleted.
+ Member is added or removed from an application group.
+
+If you configure this policy setting, an audit event is generated when an attempt to change an application group is made. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when an application group changes.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountManagement_AuditComputerAccountManagement**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes to computer accounts such as when a computer account is created, changed, or deleted.
+
+If you configure this policy setting, an audit event is generated when an attempt to change a computer account is made. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when a computer account changes.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountManagement_AuditDistributionGroupManagement**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes to distribution groups such as the following:
+ Distribution group is created, changed, or deleted.
+ Member is added or removed from a distribution group.
+ Distribution group type is changed.
+
+If you configure this policy setting, an audit event is generated when an attempt to change a distribution group is made. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when a distribution group changes.
+
+Note: Events in this subcategory are logged only on domain controllers.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountManagement_AuditOtherAccountManagementEvents**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by other user account changes that are not covered in this category, such as the following:
+ The password hash of a user account was accessed. This typically happens during an Active Directory Management Tool password migration.
+ The Password Policy Checking API was called. Calls to this function can be part of an attack when a malicious application tests the policy to reduce the number of attempts during a password dictionary attack.
+ Changes to the Default Domain Group Policy under the following Group Policy paths:
+Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy
+Computer Configuration\Windows Settings\Security Settings\Account Policies\Account Lockout Policy
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountManagement_AuditSecurityGroupManagement**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes to security groups such as the following:
+ Security group is created, changed, or deleted.
+ Member is added or removed from a security group.
+ Group type is changed.
+
+If you configure this policy setting, an audit event is generated when an attempt to change a security group is made. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when a security group changes.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/AccountManagement_AuditUserAccountManagement**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit changes to user accounts. Events include the following:
+ A user account is created, changed, deleted; renamed, disabled, enabled, locked out, or unlocked.
+ A user account’s password is set or changed.
+ A security identifier (SID) is added to the SID History of a user account.
+ The Directory Services Restore Mode password is configured.
+ Permissions on administrative user accounts are changed.
+ Credential Manager credentials are backed up or restored.
+
+If you configure this policy setting, an audit event is generated when an attempt to change a user account is made. Success audits record successful attempts and Failure audits record unsuccessful attempts. If you do not configure this policy setting, no audit event is generated when a user account changes.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DSAccess_AuditDetailedDirectoryServiceReplication**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by detailed Active Directory Domain Services (AD DS) replication between domain controllers.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DSAccess_AuditDirectoryServiceAccess**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated when an Active Directory Domain Services (AD DS) object is accessed.
+
+Only AD DS objects with a matching system access control list (SACL) are logged.
+
+Events in this subcategory are similar to the Directory Service Access events available in previous versions of Windows.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DSAccess_AuditDirectoryServiceChanges**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes to objects in Active Directory Domain Services (AD DS). Events are logged when an object is created, deleted, modified, moved, or undeleted.
+
+When possible, events logged in this subcategory indicate the old and new values of the object’s properties.
+
+Events in this subcategory are logged only on domain controllers, and only objects in AD DS with a matching system access control list (SACL) are logged.
+
+Note: Actions on some objects and properties do not cause audit events to be generated due to settings on the object class in the schema.
+
+If you configure this policy setting, an audit event is generated when an attempt to change an object in AD DS is made. Success audits record successful attempts, however unsuccessful attempts are NOT recorded.
+If you do not configure this policy setting, no audit event is generated when an attempt to change an object in AD DS object is made.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DSAccess_AuditDirectoryServiceReplication**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit replication between two Active Directory Domain Services (AD DS) domain controllers.
+
+If you configure this policy setting, an audit event is generated during AD DS replication. Success audits record successful replication and Failure audits record unsuccessful replication.
+If you do not configure this policy setting, no audit event is generated during AD DS replication.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DetailedTracking_AuditDPAPIActivity**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated when encryption or decryption requests are made to the Data Protection application interface (DPAPI). DPAPI is used to protect secret information such as stored password and key information. For more information about DPAPI, see https://go.microsoft.com/fwlink/?LinkId=121720.
+
+If you configure this policy setting, an audit event is generated when an encryption or decryption request is made to DPAPI. Success audits record successful requests and Failure audits record unsuccessful requests.
+If you do not configure this policy setting, no audit event is generated when an encryption or decryption request is made to DPAPI.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DetailedTracking_AuditPNPActivity**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit when plug and play detects an external device.
+
+If you configure this policy setting, an audit event is generated whenever plug and play detects an external device. Only Success audits are recorded for this category.
+If you do not configure this policy setting, no audit event is generated when an external device is detected by plug and play.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DetailedTracking_AuditProcessCreation**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated when a process is created or starts. The name of the application or user that created the process is also audited.
+
+If you configure this policy setting, an audit event is generated when a process is created. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when a process is created.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DetailedTracking_AuditProcessTermination**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated when a process ends.
+
+If you configure this policy setting, an audit event is generated when a process ends. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when a process ends.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DetailedTracking_AuditRPCEvents**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit inbound remote procedure call (RPC) connections.
+
+If you configure this policy setting, an audit event is generated when a remote RPC connection is attempted. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when a remote RPC connection is attempted.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/DetailedTracking_AuditTokenRightAdjusted**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by adjusting the privileges of a token.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditApplicationGenerated**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit applications that generate events using the Windows Auditing application programming interfaces (APIs). Applications designed to use the Windows Auditing API use this subcategory to log auditing events related to their function.
+Events in this subcategory include:
+ Creation of an application client context.
+ Deletion of an application client context.
+ Initialization of an application client context.
+ Other application operations using the Windows Auditing APIs.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditCentralAccessPolicyStaging**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit access requests where the permission granted or denied by a proposed policy differs from the current central access policy on an object.
+
+If you configure this policy setting, an audit event is generated each time a user accesses an object and the permission granted by the current central access policy on the object differs from that granted by the proposed policy. The resulting audit event will be generated as follows:
+1) Success audits, when configured, records access attempts when the current central access policy grants access but the proposed policy denies access.
+2) Failure audits when configured records access attempts when:
+ a) The current central access policy does not grant access but the proposed policy grants access.
+ b) A principal requests the maximum access rights they are allowed and the access rights granted by the current central access policy are different than the access rights granted by the proposed policy.
+
+Volume: Potentially high on a file server when the proposed policy differs significantly from the current central access policy.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditCertificationServices**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit Active Directory Certificate Services (AD CS) operations.
+AD CS operations include the following:
+ AD CS startup/shutdown/backup/restore.
+ Changes to the certificate revocation list (CRL).
+ New certificate requests.
+ Issuing of a certificate.
+ Revocation of a certificate.
+ Changes to the Certificate Manager settings for AD CS.
+ Changes in the configuration of AD CS.
+ Changes to a Certificate Services template.
+ Importing of a certificate.
+ Publishing of a certification authority certificate is to Active Directory Domain Services.
+ Changes to the security permissions for AD CS.
+ Archival of a key.
+ Importing of a key.
+ Retrieval of a key.
+ Starting of Online Certificate Status Protocol (OCSP) Responder Service.
+ Stopping of Online Certificate Status Protocol (OCSP) Responder Service.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditDetailedFileShare**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit attempts to access files and folders on a shared folder. The Detailed File Share setting logs an event every time a file or folder is accessed, whereas the File Share setting only records one event for any connection established between a client and file share. Detailed File Share audit events include detailed information about the permissions or other criteria used to grant or deny access.
+
+If you configure this policy setting, an audit event is generated when an attempt is made to access a file or folder on a share. The administrator can specify whether to audit only successes, only failures, or both successes and failures.
+
+Note: There are no system access control lists (SACLs) for shared folders. If this policy setting is enabled, access to all shared files and folders on the system is audited.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditFileShare**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit attempts to access a shared folder.
+
+If you configure this policy setting, an audit event is generated when an attempt is made to access a shared folder. If this policy setting is defined, the administrator can specify whether to audit only successes, only failures, or both successes and failures.
+
+Note: There are no system access control lists (SACLs) for shared folders. If this policy setting is enabled, access to all shared folders on the system is audited.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditFileSystem**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit user attempts to access file system objects. A security audit event is generated only for objects that have system access control lists (SACL) specified, and only if the type of access requested, such as Write, Read, or Modify and the account making the request match the settings in the SACL. For more information about enabling object access auditing, see https://go.microsoft.com/fwlink/?LinkId=122083.
+
+If you configure this policy setting, an audit event is generated each time an account accesses a file system object with a matching SACL. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when an account accesses a file system object with a matching SACL.
+
+Note: You can set a SACL on a file system object using the Security tab in that object's Properties dialog box.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditFilteringPlatformConnection**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit connections that are allowed or blocked by the Windows Filtering Platform (WFP). The following events are included:
+ The Windows Firewall Service blocks an application from accepting incoming connections on the network.
+ The WFP allows a connection.
+ The WFP blocks a connection.
+ The WFP permits a bind to a local port.
+ The WFP blocks a bind to a local port.
+ The WFP allows a connection.
+ The WFP blocks a connection.
+ The WFP permits an application or service to listen on a port for incoming connections.
+ The WFP blocks an application or service to listen on a port for incoming connections.
+
+If you configure this policy setting, an audit event is generated when connections are allowed or blocked by the WFP. Success audits record events generated when connections are allowed and Failure audits record events generated when connections are blocked.
+If you do not configure this policy setting, no audit event is generated when connected are allowed or blocked by the WFP.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditFilteringPlatformPacketDrop**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit packets that are dropped by Windows Filtering Platform (WFP).
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditHandleManipulation**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated when a handle to an object is opened or closed. Only objects with a matching system access control list (SACL) generate security audit events.
+
+If you configure this policy setting, an audit event is generated when a handle is manipulated. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when a handle is manipulated.
+
+Note: Events in this subcategory generate events only for object types where the corresponding Object Access subcategory is enabled. For example, if File system object access is enabled, handle manipulation security audit events are generated. If Registry object access is not enabled, handle manipulation security audit events will not be generated.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditKernelObject**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit attempts to access the kernel, which include mutexes and semaphores.
+Only kernel objects with a matching system access control list (SACL) generate security audit events.
+
+Note: The Audit: Audit the access of global system objects policy setting controls the default SACL of kernel objects.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditOtherObjectAccessEvents**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by the management of task scheduler jobs or COM+ objects.
+For scheduler jobs, the following are audited:
+ Job created.
+ Job deleted.
+ Job enabled.
+ Job disabled.
+ Job updated.
+For COM+ objects, the following are audited:
+ Catalog object added.
+ Catalog object updated.
+ Catalog object deleted.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditRegistry**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit attempts to access registry objects. A security audit event is generated only for objects that have system access control lists (SACLs) specified, and only if the type of access requested, such as Read, Write, or Modify, and the account making the request match the settings in the SACL.
+
+If you configure this policy setting, an audit event is generated each time an account accesses a registry object with a matching SACL. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when an account accesses a registry object with a matching SACL.
+
+Note: You can set a SACL on a registry object using the Permissions dialog box.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditRemovableStorage**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit user attempts to access file system objects on a removable storage device. A security audit event is generated only for all objects for all types of access requested.
+
+If you configure this policy setting, an audit event is generated each time an account accesses a file system object on a removable storage. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+
+If you do not configure this policy setting, no audit event is generated when an account accesses a file system object on a removable storage.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/ObjectAccess_AuditSAM**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by attempts to access to Security Accounts Manager (SAM) objects.
+SAM objects include the following:
+ SAM_ALIAS -- A local group.
+ SAM_GROUP -- A group that is not a local group.
+ SAM_USER – A user account.
+ SAM_DOMAIN – A domain.
+ SAM_SERVER – A computer account.
+If you configure this policy setting, an audit event is generated when an attempt to access a kernel object is made. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when an attempt to access a kernel object is made.
+Note: Only the System Access Control List (SACL) for SAM_SERVER can be modified.
+Volume: High on domain controllers. For information about reducing the amount of events generated in this subcategory, see article 841001 in the Microsoft Knowledge Base (https://go.microsoft.com/fwlink/?LinkId=121698).
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/PolicyChange_AuditAuthenticationPolicyChange**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes to the authentication policy such as the following:
+ Creation of forest and domain trusts.
+ Modification of forest and domain trusts.
+ Removal of forest and domain trusts.
+ Changes to Kerberos policy under Computer Configuration\Windows Settings\Security Settings\Account Policies\Kerberos Policy.
+ Granting of any of the following user rights to a user or group:
+ Access This Computer From the Network.
+ Allow Logon Locally.
+ Allow Logon Through Terminal Services.
+ Logon as a Batch Job.
+ Logon a Service.
+ Namespace collision. For example, when a new trust has the same name as an existing namespace name.
+
+If you configure this policy setting, an audit event is generated when an attempt to change the authentication policy is made. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when the authentication policy is changed.
+
+Note: The security audit event is logged when the group policy is applied. It does not occur at the time when the settings are modified.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/PolicyChange_AuditAuthorizationPolicyChange**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes to the authorization policy such as the following:
+ Assignment of user rights (privileges), such as SeCreateTokenPrivilege, that are not audited through the “Authentication Policy Change” subcategory.
+ Removal of user rights (privileges), such as SeCreateTokenPrivilege, that are not audited through the “Authentication Policy Change” subcategory.
+ Changes in the Encrypted File System (EFS) policy.
+ Changes to the Resource attributes of an object.
+ Changes to the Central Access Policy (CAP) applied to an object.
+
+If you configure this policy setting, an audit event is generated when an attempt to change the authorization policy is made. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when the authorization policy changes.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/PolicyChange_AuditFilteringPlatformPolicyChange**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes to the Windows Filtering Platform (WFP) such as the following:
+ IPsec services status.
+ Changes to IPsec policy settings.
+ Changes to Windows Firewall policy settings.
+ Changes to WFP providers and engine.
+
+If you configure this policy setting, an audit event is generated when a change to the WFP is attempted. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when a change occurs to the WFP.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/PolicyChange_AuditMPSSVCRuleLevelPolicyChange**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes in policy rules used by the Microsoft Protection Service (MPSSVC). This service is used by Windows Firewall. Events include the following:
+ Reporting of active policies when Windows Firewall service starts.
+ Changes to Windows Firewall rules.
+ Changes to Windows Firewall exception list.
+ Changes to Windows Firewall settings.
+ Rules ignored or not applied by Windows Firewall Service.
+ Changes to Windows Firewall Group Policy settings.
+
+If you configure this policy setting, an audit event is generated by attempts to change policy rules used by the MPSSVC. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated by changes in policy rules used by the MPSSVC.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/PolicyChange_AuditOtherPolicyChangeEvents**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by other security policy changes that are not audited in the policy change category, such as the following:
+ Trusted Platform Module (TPM) configuration changes.
+ Kernel-mode cryptographic self tests.
+ Cryptographic provider operations.
+ Cryptographic context operations or modifications.
+ Applied Central Access Policies (CAPs) changes.
+ Boot Configuration Data (BCD) modifications.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/PolicyChange_AuditPolicyChange**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit changes in the security audit policy settings such as the following:
+ Settings permissions and audit settings on the Audit Policy object.
+ Changes to the system audit policy.
+ Registration of security event sources.
+ De-registration of security event sources.
+ Changes to the per-user audit settings.
+ Changes to the value of CrashOnAuditFail.
+ Changes to the system access control list on a file system or registry object.
+ Changes to the Special Groups list.
+
+Note: System access control list (SACL) change auditing is done when a SACL for an object changes and the policy change category is enabled. Discretionary access control list (DACL) and ownership changes are audited when object access auditing is enabled and the object's SACL is configured for auditing of DACL/Owner change.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/PrivilegeUse_AuditNonSensitivePrivilegeUse**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by the use of non-sensitive privileges (user rights).
+The following privileges are non-sensitive:
+ Access Credential Manager as a trusted caller.
+ Access this computer from the network.
+ Add workstations to domain.
+ Adjust memory quotas for a process.
+ Allow log on locally.
+ Allow log on through Terminal Services.
+ Bypass traverse checking.
+ Change the system time.
+ Create a pagefile.
+ Create global objects.
+
+ Create permanent shared objects.
+ Create symbolic links.
+ Deny access this computer from the network.
+ Deny log on as a batch job.
+ Deny log on as a service.
+ Deny log on locally.
+ Deny log on through Terminal Services.
+ Force shutdown from a remote system.
+ Increase a process working set.
+ Increase scheduling priority.
+ Lock pages in memory.
+ Log on as a batch job.
+ Log on as a service.
+ Modify an object label.
+ Perform volume maintenance tasks.
+ Profile single process.
+ Profile system performance.
+ Remove computer from docking station.
+ Shut down the system.
+ Synchronize directory service data.
+
+If you configure this policy setting, an audit event is generated when a non-sensitive privilege is called. Success audits record successful calls and Failure audits record unsuccessful calls.
+If you do not configure this policy setting, no audit event is generated when a non-sensitive privilege is called.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/PrivilegeUse_AuditOtherPrivilegeUseEvents**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+Not used.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/PrivilegeUse_AuditSensitivePrivilegeUse**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated when sensitive privileges (user rights) are used such as the following:
+ A privileged service is called.
+ One of the following privileges are called:
+ Act as part of the operating system.
+ Back up files and directories.
+ Create a token object.
+ Debug programs.
+ Enable computer and user accounts to be trusted for delegation.
+ Generate security audits.
+ Impersonate a client after authentication.
+ Load and unload device drivers.
+ Manage auditing and security log.
+ Modify firmware environment values.
+ Replace a process-level token.
+ Restore files and directories.
+ Take ownership of files or other objects.
+
+If you configure this policy setting, an audit event is generated when sensitive privilege requests are made. Success audits record successful requests and Failure audits record unsuccessful requests.
+If you do not configure this policy setting, no audit event is generated when sensitive privilege requests are made.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/System_AuditIPsecDriver**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by the IPsec filter driver such as the following:
+ Startup and shutdown of the IPsec services.
+ Network packets dropped due to integrity check failure.
+ Network packets dropped due to replay check failure.
+ Network packets dropped due to being in plaintext.
+ Network packets received with incorrect Security Parameter Index (SPI). This may indicate that either the network card is not working correctly or the driver needs to be updated.
+ Inability to process IPsec filters.
+
+If you configure this policy setting, an audit event is generated on an IPsec filter driver operation. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated on an IPSec filter driver operation.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/System_AuditOtherSystemEvents**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit any of the following events:
+ Startup and shutdown of the Windows Firewall service and driver.
+ Security policy processing by the Windows Firewall Service.
+ Cryptography key file and migration operations.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/System_AuditSecurityStateChange**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events generated by changes in the security state of the computer such as the following events:
+ Startup and shutdown of the computer.
+ Change of system time.
+ Recovering the system from CrashOnAuditFail, which is logged after a system restarts when the security event log is full and the CrashOnAuditFail registry entry is configured.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/System_AuditSecuritySystemExtension**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events related to security system extensions or services such as the following:
+ A security system extension, such as an authentication, notification, or security package is loaded and is registered with the Local Security Authority (LSA). It is used to authenticate logon attempts, submit logon requests, and any account or password changes. Examples of security system extensions are Kerberos and NTLM.
+ A service is installed and registered with the Service Control Manager. The audit log contains information about the service name, binary, type, start type, and service account.
+If you configure this policy setting, an audit event is generated when an attempt is made to load a security system extension. Success audits record successful attempts and Failure audits record unsuccessful attempts.
+If you do not configure this policy setting, no audit event is generated when an attempt is made to load a security system extension.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Audit/System_AuditSystemIntegrity**
+
+
+
+
+ Home |
+ Pro |
+ Business |
+ Enterprise |
+ Education |
+ Mobile |
+ Mobile Enterprise |
+
+
+  |
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ |
+ |
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy setting allows you to audit events that violate the integrity of the security subsystem, such as the following:
+ Events that could not be written to the event log because of a problem with the auditing system.
+ A process that uses a local procedure call (LPC) port that is not valid in an attempt to impersonate a client by replying, reading, or writing to or from a client address space.
+ The detection of a Remote Procedure Call (RPC) that compromises system integrity.
+ The detection of a hash value of an executable file that is not valid as determined by Code Integrity.
+ Cryptographic operations that compromise system integrity.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Footnote:
+
+- 1 - Added in Windows 10, version 1607.
+- 2 - Added in Windows 10, version 1703.
+- 3 - Added in Windows 10, version 1709.
+- 4 - Added in Windows 10, version 1803.
+- 5 - Added in Windows 10, version 1809.
+- 6 - Added in Windows 10, version 1903.
+
+
From 581d943598b74fb33cc9bdc1bcb9aae3826f0389 Mon Sep 17 00:00:00 2001
From: ManikaDhiman
Date: Tue, 20 Aug 2019 15:32:42 +0530
Subject: [PATCH 005/318] Updated TOC for Audit policies
---
windows/client-management/mdm/TOC.md | 1 +
1 file changed, 1 insertion(+)
diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md
index d77896805e..c90eee3566 100644
--- a/windows/client-management/mdm/TOC.md
+++ b/windows/client-management/mdm/TOC.md
@@ -168,6 +168,7 @@
#### [AppRuntime](policy-csp-appruntime.md)
#### [AppVirtualization](policy-csp-appvirtualization.md)
#### [AttachmentManager](policy-csp-attachmentmanager.md)
+#### [Audit](policy-csp-audit.md)
#### [Authentication](policy-csp-authentication.md)
#### [Autoplay](policy-csp-autoplay.md)
#### [Bitlocker](policy-csp-bitlocker.md)
From 31b2f746829621dd1a29c737517c5f2a867a3dbf Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Sun, 25 Aug 2019 12:55:54 -0500
Subject: [PATCH 006/318] Update networkproxy-csp.md
---
.../client-management/mdm/networkproxy-csp.md | 58 ++++++++++++++++++-
1 file changed, 55 insertions(+), 3 deletions(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 563f13334a..95d3ddc7c0 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -39,7 +39,7 @@ Added in Windows 10, version 1803. When set to 0, it enables proxy configuration
Supported operations are Add, Get, Replace, and Delete.
> [!Note]
-> Per user proxy configuration setting is not supported.
+> Per user proxy configuration setting is not supported using a configuration file, only modifying registry settings on local machine.
**AutoDetect**
Automatically detect settings. If enabled, the system tries to find the path to a PAC script.
@@ -50,7 +50,7 @@ Valid values:
1 (default) - Enabled
-The data type is int. Supported operations are Get and Replace. Starting in Window 10, version 1803, the Delete operation is also supported.
+The data type is integer. Supported operations are Get and Replace. Starting in Window 10, version 1803, the Delete operation is also supported.
**SetupScriptUrl**
Address to the PAC script you want to use.
@@ -80,4 +80,56 @@ Valid values:
1 - Use proxy server for local addresses
-The data type is int. Supported operations are Get and Replace. Starting in Window 10, version 1803, the Delete operation is also supported.
+The data type is integer. Supported operations are Get and Replace. Starting in Window 10, version 1803, the Delete operation is also supported.
+
+# Configuration Example
+
+These generic code portions for the options **ProxySettingsPerUser**, **Autodetect** and **SetupScriptURL** can be used for a specific operation, for example Replace. Only put the portion of code needed in the **Replace** section.
+
+
+
+ 1
+ -
+
+ ./Vendor/MSFT/NetworkProxy/ProxySettingsPerUser
+
+
+ int
+ text/plain
+
+ 0
+
+
+
+
+
+
+ 2
+ -
+
+ ./Vendor/MSFT/NetworkProxy/AutoDetect
+
+
+ int
+ text/plain
+
+ 1
+
+
+
+
+
+
+ 3
+ -
+
+ ./Vendor/MSFT/NetworkProxy/SetupScriptUrl
+
+
+ chr
+ text/plain
+
+ Insert the proxy PAC URL location here:
+
+
+
From 17155b7a3d3aa719646276698598fe0da98cdac0 Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:41:30 -0500
Subject: [PATCH 007/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 1 -
1 file changed, 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 95cb657da4..0cfeb4c628 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -40,7 +40,6 @@ Added in Windows 10, version 1803. When set to 0, it enables proxy configuration
Supported operations are Add, Get, Replace, and Delete.
-
> [!Note]
> Per user proxy configuration setting is not supported using a configuration file, only modifying registry settings on local machine.
From 83bb8a90db9703a2b4a473c6b7968d083c0d0bdb Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:41:39 -0500
Subject: [PATCH 008/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 1 -
1 file changed, 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 0cfeb4c628..d1a6b9c3f1 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -43,7 +43,6 @@ Supported operations are Add, Get, Replace, and Delete.
> [!Note]
> Per user proxy configuration setting is not supported using a configuration file, only modifying registry settings on local machine.
-
**AutoDetect**
Automatically detect settings. If enabled, the system tries to find the path to a PAC script.
From 13eec67b3d7da1beef3506c41d92b287c446d65c Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:41:49 -0500
Subject: [PATCH 009/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 1 -
1 file changed, 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index d1a6b9c3f1..c56c872e67 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -52,7 +52,6 @@ Valid values:
1 (default) - Enabled
-
The data type is integer. Supported operations are Get and Replace. Starting in Window 10, version 1803, the Delete operation is also supported.
From b290d189b9ad8f2f12e5151175bc48db38bc99bb Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:42:00 -0500
Subject: [PATCH 010/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 1 -
1 file changed, 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index c56c872e67..55790413a8 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -54,7 +54,6 @@ Valid values:
The data type is integer. Supported operations are Get and Replace. Starting in Window 10, version 1803, the Delete operation is also supported.
-
**SetupScriptUrl**
Address to the PAC script you want to use.
From d4a0b7ec2a58d9374db93b9e4123ad37ff0532c1 Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:42:12 -0500
Subject: [PATCH 011/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 1 -
1 file changed, 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 55790413a8..4a028dfe80 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -82,7 +82,6 @@ Valid values:
1 - Do not use proxy server for local addresses
-
The data type is integer. Supported operations are Get and Replace. Starting in Window 10, version 1803, the Delete operation is also supported.
# Configuration Example
From 377afbdb0afd7e0a7ee0d988be4f6af1da7b823f Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:42:27 -0500
Subject: [PATCH 012/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 4a028dfe80..2e2d0754d9 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -87,7 +87,7 @@ The data type is integer. Supported operations are Get and Replace. Starting in
# Configuration Example
These generic code portions for the options **ProxySettingsPerUser**, **Autodetect** and **SetupScriptURL** can be used for a specific operation, for example Replace. Only put the portion of code needed in the **Replace** section.
-
+```xml
1
From dc8e628f980b3c1660e128e1775abdfd062e0d9e Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:42:37 -0500
Subject: [PATCH 013/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 1 -
1 file changed, 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 2e2d0754d9..4df0b781a3 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -89,7 +89,6 @@ The data type is integer. Supported operations are Get and Replace. Starting in
These generic code portions for the options **ProxySettingsPerUser**, **Autodetect** and **SetupScriptURL** can be used for a specific operation, for example Replace. Only put the portion of code needed in the **Replace** section.
```xml
-
1
-
From 5de5fb66c50ce496337240e39c520935a278a680 Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:42:46 -0500
Subject: [PATCH 014/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 4df0b781a3..3205db8481 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -89,7 +89,7 @@ The data type is integer. Supported operations are Get and Replace. Starting in
These generic code portions for the options **ProxySettingsPerUser**, **Autodetect** and **SetupScriptURL** can be used for a specific operation, for example Replace. Only put the portion of code needed in the **Replace** section.
```xml
- 1
+ 1
-
./Vendor/MSFT/NetworkProxy/ProxySettingsPerUser
From 191ea43706015bf00dcd596f6121c9261006868b Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:43:00 -0500
Subject: [PATCH 015/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 3205db8481..ed708b8621 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -90,7 +90,7 @@ These generic code portions for the options **ProxySettingsPerUser**, **Autodete
```xml
1
-
-
+
-
./Vendor/MSFT/NetworkProxy/ProxySettingsPerUser
From c0e60244be23ec03ed09f4ba539d19f493fc9bbc Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:43:35 -0500
Subject: [PATCH 016/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index ed708b8621..b36b3d4a66 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -41,7 +41,7 @@ Added in Windows 10, version 1803. When set to 0, it enables proxy configuration
Supported operations are Add, Get, Replace, and Delete.
> [!Note]
-> Per user proxy configuration setting is not supported using a configuration file, only modifying registry settings on local machine.
+> Per user proxy configuration setting is not supported using a configuration file, only modifying registry settings on a local machine.
**AutoDetect**
Automatically detect settings. If enabled, the system tries to find the path to a PAC script.
From e0a58387c235ebf1f1af09ff181ddb09ea67fbc9 Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Wed, 28 Aug 2019 19:43:50 -0500
Subject: [PATCH 017/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index b36b3d4a66..0179caef55 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -86,7 +86,7 @@ The data type is integer. Supported operations are Get and Replace. Starting in
# Configuration Example
-These generic code portions for the options **ProxySettingsPerUser**, **Autodetect** and **SetupScriptURL** can be used for a specific operation, for example Replace. Only put the portion of code needed in the **Replace** section.
+These generic code portions for the options **ProxySettingsPerUser**, **Autodetect**, and **SetupScriptURL** can be used for a specific operation, for example Replace. Only enter the portion of code needed in the **Replace** section.
```xml
1
From 49bddd1894a92c4f345f08fede14be26c9c9f476 Mon Sep 17 00:00:00 2001
From: ManikaDhiman
Date: Thu, 29 Aug 2019 09:43:19 -0700
Subject: [PATCH 018/318] Added SyncML examples
---
.../mdm/policy-csp-deviceinstallation.md | 53 +++++++++++++++++++
1 file changed, 53 insertions(+)
diff --git a/windows/client-management/mdm/policy-csp-deviceinstallation.md b/windows/client-management/mdm/policy-csp-deviceinstallation.md
index 3df85a5ecf..192db804ab 100644
--- a/windows/client-management/mdm/policy-csp-deviceinstallation.md
+++ b/windows/client-management/mdm/policy-csp-deviceinstallation.md
@@ -335,7 +335,33 @@ ADMX Info:
+To enable this policy, use the following SyncML.
+``` xml
+
+
+
+ $CmdID$
+
-
+
+ ./Device/Vendor/MSFT/Policy/Config/DeviceInstallation/AllowInstallationOfMatchingDeviceInstanceIDs
+
+
+ string
+
+
+
+
+
+
+```
+To verify the policy is applied, check C:\windows\INF\setupapi.dev.log and see if the following is listed near the end of the log:
+``` txt
+>>> [Device Installation Restrictions Policy Check]
+>>> Section start 2018/11/15 12:26:41.659
+<<< Section end 2018/11/15 12:26:41.751
+<<< [Exit status: SUCCESS]
+```
@@ -692,7 +718,34 @@ ADMX Info:
+To enable this policy, use the following SyncML.
+``` xml
+
+
+
+ $CmdID$
+ -
+
+ ./Device/Vendor/MSFT/Policy/Config/DeviceInstallation/PreventInstallationOfMatchingDeviceInstanceIDs
+
+
+ string
+
+
+
+
+
+
+```
+To verify the policy is applied, check C:\windows\INF\setupapi.dev.log and see if the following is listed near the end of the log:
+
+``` txt
+>>> [Device Installation Restrictions Policy Check]
+>>> Section start 2018/11/15 12:26:41.659
+<<< Section end 2018/11/15 12:26:41.751
+<<< [Exit status: SUCCESS]
+```
From 7d6a9f65cd79de514040d8c537a8b377efbdd86d Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Mon, 2 Sep 2019 17:40:26 -0500
Subject: [PATCH 019/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 0179caef55..ed7d1c51bf 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -52,7 +52,7 @@ Valid values:
1 (default) - Enabled
-The data type is integer. Supported operations are Get and Replace. Starting in Window 10, version 1803, the Delete operation is also supported.
+The data type is integer. Supported operations are Get and Replace. Starting in Windows 10, version 1803, the Delete operation is also supported.
**SetupScriptUrl**
Address to the PAC script you want to use.
From cd88d244152b606c3565eeb1550ec53b81aed038 Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Sun, 8 Sep 2019 07:36:20 -0500
Subject: [PATCH 020/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 2 ++
1 file changed, 2 insertions(+)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index ed7d1c51bf..2b8b5ead84 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -103,6 +103,8 @@ These generic code portions for the options **ProxySettingsPerUser**, **Autodete
+
+
2
From 70107be12cdc429d3273f25d57891578450f602d Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Sun, 8 Sep 2019 07:36:42 -0500
Subject: [PATCH 021/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 1 -
1 file changed, 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 2b8b5ead84..5d48e50969 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -106,7 +106,6 @@ These generic code portions for the options **ProxySettingsPerUser**, **Autodete
-
2
-
From c966b3ad773b7c8185b8ffeef387c7e9fb71d52f Mon Sep 17 00:00:00 2001
From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com>
Date: Sun, 8 Sep 2019 07:36:59 -0500
Subject: [PATCH 022/318] Update
windows/client-management/mdm/networkproxy-csp.md
Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>
---
windows/client-management/mdm/networkproxy-csp.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md
index 5d48e50969..ca499526ef 100644
--- a/windows/client-management/mdm/networkproxy-csp.md
+++ b/windows/client-management/mdm/networkproxy-csp.md
@@ -106,7 +106,7 @@ These generic code portions for the options **ProxySettingsPerUser**, **Autodete
- 2
+ 2
-
./Vendor/MSFT/NetworkProxy/AutoDetect
From 635f053451aaca641d4e86886b6ec325417a06cf Mon Sep 17 00:00:00 2001
From: Sarah Cooley
Date: Sun, 8 Sep 2019 21:47:29 -0700
Subject: [PATCH 023/318] hololens 1 and 2 quickstarts
---
.openpublishing.redirection.json | 45 ++++
devices/hololens/TOC.md | 48 +++--
.../hololens/holographic-3d-viewer-beta.md | 200 +++++++++++++++++
devices/hololens/holographic-custom-apps.md | 57 +++++
devices/hololens/holographic-home.md | 33 ++-
.../hololens/holographic-photos-and-video.md | 27 ++-
devices/hololens/holographic-store-apps.md | 51 +++++
devices/hololens/hololens-calibration.md | 121 +++++++++++
.../hololens-clicker-restart-recover.md | 49 -----
devices/hololens/hololens-clicker.md | 65 ------
.../hololens/hololens-commercial-features.md | 77 +++++++
devices/hololens/hololens-connect-devices.md | 32 ++-
devices/hololens/hololens-cortana.md | 40 +++-
devices/hololens/hololens-get-apps.md | 37 ----
devices/hololens/hololens-install-apps.md | 89 --------
devices/hololens/hololens-multiple-users.md | 24 ++-
devices/hololens/hololens-network.md | 71 +++++-
devices/hololens/hololens-setup.md | 75 -------
.../hololens/hololens-spaces-on-hololens.md | 40 ----
devices/hololens/hololens-spaces.md | 128 +++++++----
devices/hololens/hololens-use-apps.md | 40 ----
devices/hololens/hololens1-basic-usage.md | 107 ++++++++++
devices/hololens/hololens1-clicker.md | 105 +++++++++
devices/hololens/hololens1-hardware.md | 157 ++++++++++++++
...ized.md => hololens1-install-localized.md} | 31 +--
devices/hololens/hololens1-setup.md | 102 +++++++++
.../{hololens-start.md => hololens1-start.md} | 35 ++-
...ise.md => hololens1-upgrade-enterprise.md} | 75 +++----
devices/hololens/hololens2-basic-usage.md | 202 ++++++++++++++++++
devices/hololens/hololens2-hardware.md | 140 ++++++++++++
devices/hololens/hololens2-setup.md | 62 ++++++
devices/hololens/hololens2-start.md | 98 +++++++++
.../201608-enterprisemanagement-400px.png | Bin 0 -> 182211 bytes
.../images/201608-kioskmode-400px.png | Bin 0 -> 216246 bytes
.../A-Calibration-2-Adjust-Hololens.png | Bin 0 -> 172240 bytes
.../hololens/images/B-Calibration-4-Gem.png | Bin 0 -> 18800 bytes
.../images/C-Settings.Calibration.png | Bin 0 -> 144468 bytes
.../images/HoloLens2_AppBarFollowing.gif | Bin 0 -> 1782639 bytes
.../hololens/images/HoloLens2_BoundingBox.gif | Bin 0 -> 4451306 bytes
.../images/HoloLens2_BoundingBox_Rotate.gif | Bin 0 -> 3843723 bytes
devices/hololens/images/HoloLens2_Loader.gif | Bin 0 -> 788400 bytes
.../hololens/images/HoloLens2_Proximity.gif | Bin 0 -> 2146121 bytes
.../images/calibration-livecube-200px.png | Bin 0 -> 31130 bytes
.../images/calibration-settings-500px.jpg | Bin 0 -> 23336 bytes
devices/hololens/images/calibration-shell.png | Bin 0 -> 81338 bytes
.../images/deviceportal-appmanager.jpg | Bin 0 -> 15751 bytes
devices/hololens/images/displays-400px.jpg | Bin 0 -> 14026 bytes
.../hololens/images/hololens-2-air-tap.gif | Bin 0 -> 140838 bytes
.../images/hololens-2-gesture-frame.png | Bin 0 -> 36037 bytes
.../hololens-2-screenshot-with-callouts.png | Bin 0 -> 514116 bytes
.../images/hololens-2-start-alternative.jpg | Bin 0 -> 30145 bytes
.../images/hololens-2-start-gesture.png | Bin 0 -> 32558 bytes
devices/hololens/images/hololens-air-tap.gif | Bin 0 -> 140838 bytes
devices/hololens/images/hololens-bloom.gif | Bin 0 -> 189190 bytes
.../hololens/images/hololens-box-contents.png | Bin 0 -> 75460 bytes
.../images/hololens-cleaning-visor.png | Bin 0 -> 33945 bytes
.../images/hololens2-exploded-large.png | Bin 0 -> 2089382 bytes
.../images/hololens2-exploded-medium.png | Bin 0 -> 678836 bytes
devices/hololens/images/hololens2-fit.png | Bin 0 -> 53031 bytes
.../hololens/images/hololens2-headstrap.png | Bin 0 -> 52710 bytes
.../hololens/images/hololens2-lift-visor.png | Bin 0 -> 24999 bytes
.../images/hololens2-remove-browpad.png | Bin 0 -> 45888 bytes
.../images/ipd-finger-alignment-300px.jpg | Bin 0 -> 4351 bytes
devices/hololens/images/motherboard-400px.jpg | Bin 0 -> 16232 bytes
devices/hololens/images/see-through-400px.jpg | Bin 0 -> 17809 bytes
devices/hololens/images/sensor-bar-400px.jpg | Bin 0 -> 14039 bytes
.../images/vs2015-remotedeployment.jpg | Bin 0 -> 82301 bytes
.../hololens/images/wifi-hololens-600px.jpg | Bin 0 -> 21893 bytes
.../images/wifi-hololens-hwdetails.jpg | Bin 0 -> 102073 bytes
69 files changed, 1905 insertions(+), 558 deletions(-)
create mode 100644 devices/hololens/holographic-3d-viewer-beta.md
create mode 100644 devices/hololens/holographic-custom-apps.md
create mode 100644 devices/hololens/holographic-store-apps.md
create mode 100644 devices/hololens/hololens-calibration.md
delete mode 100644 devices/hololens/hololens-clicker-restart-recover.md
delete mode 100644 devices/hololens/hololens-clicker.md
create mode 100644 devices/hololens/hololens-commercial-features.md
delete mode 100644 devices/hololens/hololens-get-apps.md
delete mode 100644 devices/hololens/hololens-install-apps.md
delete mode 100644 devices/hololens/hololens-setup.md
delete mode 100644 devices/hololens/hololens-spaces-on-hololens.md
delete mode 100644 devices/hololens/hololens-use-apps.md
create mode 100644 devices/hololens/hololens1-basic-usage.md
create mode 100644 devices/hololens/hololens1-clicker.md
create mode 100644 devices/hololens/hololens1-hardware.md
rename devices/hololens/{hololens-install-localized.md => hololens1-install-localized.md} (71%)
create mode 100644 devices/hololens/hololens1-setup.md
rename devices/hololens/{hololens-start.md => hololens1-start.md} (66%)
rename devices/hololens/{hololens-upgrade-enterprise.md => hololens1-upgrade-enterprise.md} (57%)
create mode 100644 devices/hololens/hololens2-basic-usage.md
create mode 100644 devices/hololens/hololens2-hardware.md
create mode 100644 devices/hololens/hololens2-setup.md
create mode 100644 devices/hololens/hololens2-start.md
create mode 100644 devices/hololens/images/201608-enterprisemanagement-400px.png
create mode 100644 devices/hololens/images/201608-kioskmode-400px.png
create mode 100644 devices/hololens/images/A-Calibration-2-Adjust-Hololens.png
create mode 100644 devices/hololens/images/B-Calibration-4-Gem.png
create mode 100644 devices/hololens/images/C-Settings.Calibration.png
create mode 100644 devices/hololens/images/HoloLens2_AppBarFollowing.gif
create mode 100644 devices/hololens/images/HoloLens2_BoundingBox.gif
create mode 100644 devices/hololens/images/HoloLens2_BoundingBox_Rotate.gif
create mode 100644 devices/hololens/images/HoloLens2_Loader.gif
create mode 100644 devices/hololens/images/HoloLens2_Proximity.gif
create mode 100644 devices/hololens/images/calibration-livecube-200px.png
create mode 100644 devices/hololens/images/calibration-settings-500px.jpg
create mode 100644 devices/hololens/images/calibration-shell.png
create mode 100644 devices/hololens/images/deviceportal-appmanager.jpg
create mode 100644 devices/hololens/images/displays-400px.jpg
create mode 100644 devices/hololens/images/hololens-2-air-tap.gif
create mode 100644 devices/hololens/images/hololens-2-gesture-frame.png
create mode 100644 devices/hololens/images/hololens-2-screenshot-with-callouts.png
create mode 100644 devices/hololens/images/hololens-2-start-alternative.jpg
create mode 100644 devices/hololens/images/hololens-2-start-gesture.png
create mode 100644 devices/hololens/images/hololens-air-tap.gif
create mode 100644 devices/hololens/images/hololens-bloom.gif
create mode 100644 devices/hololens/images/hololens-box-contents.png
create mode 100644 devices/hololens/images/hololens-cleaning-visor.png
create mode 100644 devices/hololens/images/hololens2-exploded-large.png
create mode 100644 devices/hololens/images/hololens2-exploded-medium.png
create mode 100644 devices/hololens/images/hololens2-fit.png
create mode 100644 devices/hololens/images/hololens2-headstrap.png
create mode 100644 devices/hololens/images/hololens2-lift-visor.png
create mode 100644 devices/hololens/images/hololens2-remove-browpad.png
create mode 100644 devices/hololens/images/ipd-finger-alignment-300px.jpg
create mode 100644 devices/hololens/images/motherboard-400px.jpg
create mode 100644 devices/hololens/images/see-through-400px.jpg
create mode 100644 devices/hololens/images/sensor-bar-400px.jpg
create mode 100644 devices/hololens/images/vs2015-remotedeployment.jpg
create mode 100644 devices/hololens/images/wifi-hololens-600px.jpg
create mode 100644 devices/hololens/images/wifi-hololens-hwdetails.jpg
diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json
index 5fb03f440d..1017131c23 100644
--- a/.openpublishing.redirection.json
+++ b/.openpublishing.redirection.json
@@ -6095,6 +6095,51 @@
"redirect_url": "https://docs.microsoft.com/dynamics365/#pivot=mixed-reality-apps",
"redirect_document_id": true
},
+{
+ "source_path": "devices/hololens/hololens-clicker.md",
+ "redirect_url": "devices/hololens/hololens1-clicker.md",
+ "redirect_document_id": true
+},
+{
+ "source_path": "devices/hololens/hololens-clicker-restart-recover.md",
+ "redirect_url": "devices/hololens/hololens1-clicker.md",
+ "redirect_document_id": true
+},
+{
+ "source_path": "devices/hololens/hololens-upgrade-enterprise.md",
+ "redirect_url": "devices/hololens/hololens1-upgrade-enterprise.md",
+ "redirect_document_id": true
+},
+{
+ "source_path": "devices/hololens/hololens-setup.md",
+ "redirect_url": "devices/hololens/hololens1-setup.md",
+ "redirect_document_id": true
+},
+{
+ "source_path": "devices/hololens/hololens-install-localized.md",
+ "redirect_url": "devices/hololens/hololens1-install-localized.md",
+ "redirect_document_id": true
+},
+{
+ "source_path": "devices/hololens/hololens-spaces-on-hololens.md",
+ "redirect_url": "devices/hololens/hololens-spaces.md",
+ "redirect_document_id": true
+},
+{
+ "source_path": "devices/hololens/hololens-get-apps.md",
+ "redirect_url": "devices/hololens/holographic-store-apps.md",
+ "redirect_document_id": true
+},
+{
+ "source_path": "devices/hololens/hololens-install-apps.md",
+ "redirect_url": "devices/hololens/holographic-store-apps.md",
+ "redirect_document_id": true
+},
+{
+ "source_path": "devices/hololens/hololens-use-apps.md",
+ "redirect_url": "devices/hololens/holographic-home.md",
+ "redirect_document_id": true
+},
{
"source_path": "devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md",
"redirect_url": "/surface-hub/provisioning-packages-for-surface-hub",
diff --git a/devices/hololens/TOC.md b/devices/hololens/TOC.md
index fe85d293be..2a14f793ea 100644
--- a/devices/hololens/TOC.md
+++ b/devices/hololens/TOC.md
@@ -1,45 +1,59 @@
# [HoloLens overview](index.md)
# [Hololens status](hololens-status.md)
-# Get started with HoloLens (gen 1)
-## [Start your HoloLens (1st gen) for the first time](hololens-start.md)
-## [Install localized version of HoloLens](hololens-install-localized.md)
+# Get Started with HoloLens 2
+## [HoloLens 2 hardware](hololens2-hardware.md)
+## [Set up your HoloLens 2](hololens2-setup.md)
+## [Start your HoloLens 2 for the first time](hololens2-start.md)
+## [Getting around HoloLens 2](hololens2-basic-usage.md)
+
+# Get started with HoloLens (1st gen)
+## [HoloLens (1st gen) hardware](hololens1-hardware.md)
+## [Set up your HoloLens (1st gen)](hololens1-setup.md)
+## [Start your HoloLens (1st gen) for the first time](hololens1-start.md)
+## [Install localized version of HoloLens (1st gen)](hololens1-install-localized.md)
+## [Getting around HoloLens (1st gen)](hololens1-basic-usage.md)
# Get started with HoloLens in commercial environments
-## [Overview and deployment planning](hololens-requirements.md)
-## [Unlock Windows Holographic for Business features](hololens-upgrade-enterprise.md)
+## [Commercial feature overview](hololens-commercial-features.md)
+## [Deployment planning](hololens-requirements.md)
+## [Unlock Windows Holographic for Business features](hololens1-upgrade-enterprise.md)
## [Configure HoloLens using a provisioning package](hololens-provisioning.md)
## [Enroll HoloLens in MDM](hololens-enroll-mdm.md)
## [Set up ring based updates for HoloLens](hololens-updates.md)
-## [Manage custom enterprise apps](hololens-install-apps.md)
## [Enable Bitlocker device encryption for HoloLens](hololens-encryption.md)
+# User management and access management
+## [Accounts on HoloLens](hololens-accounts.md)
+## [Sharing a HoloLens with many people](hololens-multiple-users.md)
+## [Set up HoloLens as a kiosk (single application access)](hololens-kiosk.md)
+## [Set up limited application access](hololens-kiosk.md)
+
# Navigating Windows Holographic
## [Windows Mixed Reality home](holographic-home.md)
## [Voice and Cortana](hololens-cortana.md)
## [Find and save files](hololens-find-and-save-files.md)
## [Create, share, and view photos and video](holographic-photos-and-video.md)
+# Holographic Applications
+## [Try 3D Viewer (beta)](holographic-3d-viewer-beta.md)
+## [Find, install, and uninstall applications](holographic-store-apps.md)
+## [Install and uninstall custom applications](holographic-custom-apps.md)
+
# Accessories and connectivity
## [Connect to Bluetooth and USB-C devices](hololens-connect-devices.md)
-## [Restart or recover the HoloLens (1st gen) clicker](hololens-clicker-restart-recover.md)
+## [HoloLens (1st gen) clicker](hololens1-clicker.md)
## [Connect to a network](hololens-network.md)
## [Use HoloLens offline](hololens-offline.md)
-# Application Management
-## [Share HoloLens with multiple people](hololens-multiple-users.md)
-## [Get apps for HoloLens](hololens-get-apps.md)
-## [Use apps on HoloLens](hololens-use-apps.md)
-## [Use HoloLens offline](hololens-offline.md)
-## [Spaces on HoloLens](hololens-spaces-on-hololens.md)
-## [How HoloLens stores data for spaces](hololens-spaces.md)
+# Hologram optics and placement in space
+## [Tips for viewing clear Holograms](hololens-calibration.md)
+## [Environment considerations for HoloLens](hololens-environment-considerations.md)
+## [Spatial mapping on HoloLens](hololens-spaces.md)
# Recovery and troubleshooting
## [Restore HoloLens 2 using Advanced Recovery Companion](hololens-recovery.md)
## [Restart, reset, or recover the HoloLens](hololens-restart-recover.md)
-# User/Access Management
-## [Set up single application access](hololens-kiosk.md)
-
# [Insider preview for Microsoft HoloLens](hololens-insider.md)
# [Change history for Microsoft HoloLens documentation](change-history-hololens.md)
diff --git a/devices/hololens/holographic-3d-viewer-beta.md b/devices/hololens/holographic-3d-viewer-beta.md
new file mode 100644
index 0000000000..923cdd8115
--- /dev/null
+++ b/devices/hololens/holographic-3d-viewer-beta.md
@@ -0,0 +1,200 @@
+---
+title: Using 3D Viewer Beta on HoloLens
+description:
+ms.prod: hololens
+ms.sitesec: library
+author: Teresa-Motiv
+ms.author: v-tea
+ms.topic: article
+ms.localizationpriority: medium
+ms.date: 9/3/19
+ms.reviewer:
+manager: jarrettr
+appliesto:
+- HoloLens 1
+---
+
+# Using 3D Viewer Beta on HoloLens
+
+3D Viewer Beta lets you view 3D models on HoloLens. You can open and view *supported* .fbx files from Microsoft Edge, OneDrive, and other apps.
+
+If you're having trouble opening a 3D model in 3D Viewer Beta, or certain features of your 3D model are unsupported, see [Supported content specifications](#supported-content-specifications).
+
+To build or optimize 3D models for use with 3D Viewer Beta, see [Optimizing 3D models for 3D Viewer Beta](#optimizing-3d-models-for-3d-viewer-beta).
+
+There are two ways to open a 3D model on HoloLens. See [Viewing 3D models on HoloLens](#viewing-3d-models-on-hololens) to learn more.
+
+If you're having trouble after reading these topics, see [Troubleshooting](#troubleshooting).
+
+## Supported content specifications
+
+### File format
+
+- FBX format
+- Maximum FBX release 2015.1.0
+
+### File size
+
+- Minimum 5 KB
+- Maximum 500 MB
+
+### Geometry
+
+- Polygonal models only. No subdivision surfaces or NURBs.
+- Right-handed coordinate system
+- Shear in transformation matrices is not supported
+
+### Textures
+
+- Texture maps must be embedded in the FBX file
+- Supported image formats
+ - JPEG and PNG images
+ - BMP images (24-bit RGB true-color)
+ - TGA images (24-bit RGB and 32-bit RGBQ true-color)
+- Maximum texture resolution of 2048x2048
+- Maximum of one diffuse map, one normal map, and one reflection cube map per mesh
+- Alpha channel in diffuse textures causes pixels to be discarded if below 50%
+
+### Animation
+
+- Scale/rotation/translation animation on individual objects
+- Skeletal (rigged) animation with skinning
+ - Maximum of 4 influences per vertex
+
+### Materials
+
+- Lambert and Phong materials are supported, with adjustable parameters
+- Supported material properties for Lambert
+ - Main Texture (RGB + Alpha Test)
+ - Diffuse Color (RGB)
+ - Ambient Color (RGB)
+- Supported material properties for Phong
+ - Main Texture (RGB + Alpha Test)
+ - Diffuse Color (RGB)
+ - Ambient Color (RGB)
+ - Specular Color (RGB)
+ - Shininess
+ - Reflectivity
+- Custom materials are not supported
+- Maximum of one material per mesh
+- Maximum of one material layer
+- Maximum of 8 materials per file
+
+### File and model limitations
+
+There are hard limits on the size of files, as well as the number of models, vertices, and meshes that can be open simultaneously in 3D Viewer Beta:
+
+- 500 MB maximum file size per model
+- Vertices: 600,000 combined on all open models
+- Meshes: 1,600 combined on all open models
+- Maximum of 40 models open at one time
+
+## Optimizing 3D models for 3D Viewer Beta
+
+### Special considerations
+
+- Avoid black materials or black areas in texture maps. Holograms are made of light, thus HoloLens renders black (the absence of light) as transparent.
+- Before exporting to FBX from your creation tool, ensure all geometry is visible and unlocked and no layers that contain geometry are turned off or templated. Visibility is not respected.
+- Avoid very large translation offsets between nodes (for example, 100,000 units). This can cause the model to jitter while being moved/scaled/rotated.
+
+### Performance optimization
+
+Keep performance in mind while authoring content and validate in the 3D Viewer Beta app on HoloLens during the authoring process for best results. 3D Viewer Beta renders content real-time and performance is subject to HoloLens hardware capabilities.
+
+There are many variables in a 3D model that can impact performance. 3D Viewer Beta will show a warning on load if there are more than 150,000 vertices or more than 400 meshes. Animations can have an impact on the performance of other open models. There are also hard limits on the total number models, vertices, and meshes that can be open simultaneously in 3D Viewer Beta (see [File and model limitations](#file-and-model-limitations)).
+
+If the 3D model isn't running well due to model complexity, consider:
+
+- Reducing polygon count
+- Reducing number of bones in rigged animation
+- Avoiding self-occlusion
+
+Double-sided rendering is supported in 3D Viewer Beta, although it is turned off by default for performance reasons. This can be turned on via the **Double Sided** button on the **Details** page. For best performance, avoid the need for double-sided rendering in your content.
+
+### Validating your 3D model
+
+Validate your model by opening it in 3D Viewer Beta on HoloLens. Select the **Details** button to view your model's characteristics and warnings of unsupported content (if present).
+
+### Rendering 3D models with true-to-life dimensions
+
+By default, 3D Viewer Beta displays 3D models at a comfortable size and position relative to the user. However, if rendering a 3D model with true-to-life measurements is important (for example, when evaluating furniture models in a room), the content creator can set a flag within the file's metadata to prevent resizing of that model by both the application and the user.
+
+To prevent scaling of the model, add a Boolean custom attribute to any object in the scene named Microsoft_DisableScale and set it to true. 3D Viewer Beta will then respect the FbxSystemUnit information baked into the FBX file. Scale in 3D Viewer Beta is 1 meter per FBX unit.
+
+## Viewing 3D models on HoloLens
+
+### Open an FBX file from Microsoft Edge
+
+FBX files can be opened directly from a website using Microsoft Edge on HoloLens.
+
+1. In Microsoft Edge, navigate to the webpage containing the FBX file you want to view.
+1. Select the file to download it.
+1. When the download is complete, select the **Open** button in Microsoft Edge to open the file in 3D Viewer Beta.
+
+The downloaded file can be accessed and opened again later via Downloads in Microsoft Edge. To save a 3D model and ensure continued access, download the file on your PC and save it to your OneDrive account. The file can then be opened from the OneDrive app on HoloLens. See [**]Open an FBX file from OneDrive]() for more information.
+
+Note: Some websites with downloadable FBX models provide them in compressed ZIP format. 3D Viewer Beta cannot open ZIP files directly. Instead, use your PC to extract the FBX file and save it to your OneDrive account. The file can then be opened from the OneDrive app on HoloLens.
+
+### Open an FBX file from OneDrive
+
+FBX files can be opened from OneDrive using the OneDrive app on HoloLens. Be sure you've installed OneDrive using Microsoft Store app on HoloLens and that you've already uploaded the FBX file to OneDrive on your PC.
+
+Once in OneDrive, FBX files can be opened on HoloLens using 3D Viewer Beta in one of two ways:
+
+- Launch OneDrive on HoloLens and select the FBX file to open it in 3D Viewer Beta.
+- Launch 3D Viewer Beta, air tap to show the toolbar, and select **Open File**. OneDrive will launch, allowing you to select an FBX file.
+
+## Troubleshooting
+
+### I see a warning when opening a 3D model
+
+You will see a warning if you attempt to open a 3D model containing features not supported by 3D Viewer Beta, or if the model is too complex and performance may be impacted. 3D Viewer Beta will still load the 3D model, but performance or visual fidelity may be compromised.
+
+For more info, see [Supported content specifications](#supported-content-specifications) and [Optimizing 3D models for 3D Viewer Beta](#optimizing-3d-models-for-3d-viewer-beta).
+
+### I see a warning and the 3D model doesn't load
+
+You will see an error message when 3D Viewer Beta cannot load a 3D model due to complexity or file size, or if the FBX file is corrupt or invalid. You will also see an error message if you have reached the limit on the total number of models, vertices, or meshes that can be open simultaneously.
+
+For more info, see [Supported content specifications](#supported-content-specifications) and [File and model limitations](#file-and-model-limitations).
+
+If you feel your model meets the supported content specifications and has not exceeded the file or model limitations, you may send your FBX file to the 3D Viewer Beta team at holoapps@microsoft.com. We are not able to respond personally, but having examples of files that do not load properly will help our team improve on future versions of the app.
+
+### My 3D model loads, but does not appear as expected
+
+If your 3D model does not look as expected in 3D Viewer Beta, air tap to show the toolbar, then select **Details**. Aspects of the file which are not supported by 3D Viewer Beta will be highlighted as warnings.
+
+The most common issue you might see is missing textures, likely because they are not embedded in the FBX file. In this case, the model will appear white. This issue can be addressed in the creation process by exporting from your creation tool to FBX with the embed textures option selected.
+
+For more info, see [Supported content specifications](#supported-content-specifications) and [Optimizing 3D models for 3D Viewer Beta](#optimizing-3d-models-for-3d-viewer-beta).
+
+### I experience performance drops while viewing my 3D model
+
+Performance when loading and viewing a 3D model can be impacted by the complexity of the model, number of models open simultaneously, or number of models with active animations.
+
+For more info, see [Optimizing 3D models for 3D Viewer Beta](#optimizing-3d-models-for-3d-viewer-beta) and [File and model limitations](#file-and-model-limitations).
+
+### When I open an FBX file on HoloLens, it doesn't open in 3D Viewer Beta
+
+3D Viewer Beta is automatically associated with the .fbx file extension when it is installed.
+
+If attempting to open an FBX file shows a dialog directing you to Microsoft Store, you do not currently have an app associated with the .fbx file extension on HoloLens.
+
+Verify that 3D Viewer Beta is installed. If it is not installed, download it from Microsoft Store on HoloLens.
+
+If 3D Viewer Beta is already installed, launch 3D Viewer Beta, then try opening the file again. If the issue persists, uninstall and reinstall 3D Viewer Beta. This will re-associate the .fbx file extension with 3D Viewer Beta.
+
+If attempting to open an FBX file opens an app other than 3D Viewer Beta, that app was likely installed after 3D Viewer Beta and has taken over association with the .fbx file extension. If you prefer 3D Viewer Beta to be associated with the .fbx file extension, uninstall and reinstall 3D Viewer Beta.
+
+### The Open File button in 3D Viewer Beta doesn't launch an app
+
+The **Open File** button will open the app associated with the file picker function on HoloLens. If OneDrive is installed, the **Open File** button should launch OneDrive. However, if there is currently no app associated with the file picker function installed on HoloLens, you will be directed to Microsoft Store.
+
+If the **Open File** button launches an app other than OneDrive, that app was likely installed after OneDrive and has taken over association with the file picker function. If you prefer OneDrive to launch when selecting the **Open File** button in 3D Viewer Beta, uninstall and reinstall OneDrive.
+
+If the **Open File** button is not active, it's possible that you have reached the limit of models that can be open in 3D Viewer Beta at one time. If you have 40 models open in 3D Viewer Beta, you will need to close some before you will be able to open additional models.
+
+## Additional resources
+
+- [Support forums](http://forums.hololens.com/categories/3d-viewer-beta)
+- [Third-party notices](https://www.microsoft.com/{lang-locale}/legal/products)
diff --git a/devices/hololens/holographic-custom-apps.md b/devices/hololens/holographic-custom-apps.md
new file mode 100644
index 0000000000..dab90a0f3e
--- /dev/null
+++ b/devices/hololens/holographic-custom-apps.md
@@ -0,0 +1,57 @@
+---
+title: Manage custom apps for HoloLens
+description: Side load custom apps on HoloLens. Learn more about installing, and uninstalling holographic apps.
+ms.assetid: 6bd124c4-731c-4bcc-86c7-23f9b67ff616
+ms.date: 07/01/2019
+manager: v-miegge
+keywords: hololens, sideload, side load, side-load, store, uwp, app, install
+ms.prod: hololens
+ms.sitesec: library
+author: mattzmsft
+ms.author: mazeller
+ms.topic: article
+ms.localizationpriority: medium
+appliesto:
+- HoloLens (1st gen)
+- HoloLens 2
+---
+
+# Install and manage custom applications (non-store)
+
+HoloLens supports many existing applications from the Microsoft Store, as well as new apps built specifically for HoloLens. This article will focus on custom holographic applications.
+
+Read [manage apps with the store](holographic-store-apps.md) for more information about store apps.
+
+## Install custom apps
+
+You can install your own applications on HoloLens using either the Device Portal or by deploying them from Visual Studio.
+
+### Installing an application package with the Device Portal
+
+1. Establish a connection from [Device Portal](https://docs.microsoft.com/windows/mixed-reality/using-the-windows-device-portal) to the target HoloLens.
+1. Navigate to the **Apps** page in the left navigation.
+1. Under **App Package** browse to the .appx file that is associated with your application.
+ > [!IMPORTANT]
+ > Make sure to reference any associated dependency and certificate files.
+
+1. Select **Go**.
+
+ 
+ Using Windows Device Portal to install an app on HoloLens
+
+### Deploying from Microsoft Visual Studio 2015
+
+1. Open your app's Visual Studio solution (.sln file).
+1. Open the project's **Properties** .
+1. Select the following build configuration: **Master/x86/Remote Machine**.
+1. When you select **Remote Machine**:
+
+ - Make sure the address points to the HoloLens' WiFi IP address.
+ - Set authentication to Universal (Unencrypted Protocol).
+1. Build your solution.
+1. Click the **Remote Machine** button to deploy the app from your development PC to your HoloLens. If you already have an existing build on the HoloLens, select yes to re-install this newer version.
+
+ 
+1. The application will install and auto launch on your HoloLens.
+
+Once you've installed an app, you'll find it in the All apps list (Start > All apps ).
diff --git a/devices/hololens/holographic-home.md b/devices/hololens/holographic-home.md
index 576866ca2c..fb1a83198d 100644
--- a/devices/hololens/holographic-home.md
+++ b/devices/hololens/holographic-home.md
@@ -10,31 +10,41 @@ author: scooley
ms.author: scooley
ms.topic: article
ms.localizationpriority: medium
+appliesto:
+- HoloLens (1st gen)
+- HoloLens 2
---
# Navigate the Windows Mixed Reality home
-## [Navigating MR Home](https://docs.microsoft.com/en-us/windows/mixed-reality/navigating-the-windows-mixed-reality-home)
+Just like the Windows PC experience starts with an empty desktop, Windows Mixed Reality starts with your physical surroundings as your holographic home. You can use the Start menu anywhere to open and place apps and content in your space, filling your home with mixed reality content and multitask by using multiple apps at the same time. The things you place in your home stay there, even if you restart your device.
## Use the Start menu
The **Start** menu on HoloLens is where you'll open apps and get to the HoloLens camera.
-Wherever you are in HoloLens, you can always open the **Start** menu by using the [bloom gesture](https://support.microsoft.com/help/12644/hololens-use-gestures) on HoloLens (1st gen) or tapping your wrist on HoloLens 2. Usually, you'll use it once to get to **Start**, but sometimes you might need to use it twice.
+Wherever you are in HoloLens, you can always open the **Start** menu by using the [bloom gesture](hololens1-basic-usage.md#navigate-windows-holographic) on HoloLens (1st gen) or [tapping your wrist](hololens2-basic-usage.md#navigate-windows-holographic) on HoloLens 2. Usually, you'll use it once to get to **Start**, but sometimes you might need to use it twice.
> [!TIP]
> When the **Start** menu is open, use the start gesture to hide it again.
-At the top of the **Start** menu, you'll see status indicators for Wi-Fi, battery, and volume, plus a clock. The tiles are your pinned apps. To talk to Cortana, select her tile, or just say "Hey Cortana" from anywhere on HoloLens. At the bottom you'll find the photo and video icons, which open the camera app.
+The **Start** menu has all of your holographic applications but it is also a great place for common tasks and status. You'll see indicators for Wi-Fi, battery, and volume, plus a clock. The tiles are your pinned apps.
-To see the rest of your apps, select **All apps**. To get back to **Start** from the **All apps** list, select **Pinned apps**.
+To talk to Cortana, select her tile, or just say "Hey Cortana" from anywhere on HoloLens. At the bottom you'll find the photo and video icons, which open the camera app.
-## Use apps on HoloLens
+Read more about [voice commands and Cortana](hololens-cortana.md).
+
+## Find the All apps list on HoloLens
+
+1. On **Start**, select **All apps**.
+1. Scroll down the list to see all your apps.
+
+To get back to **Start** from the **All apps** list, select **Pinned apps**.
+
+## Open apps on HoloLens
Apps on HoloLens use either 2D view or holographic view. Apps with 2D view look like windows, and apps with holographic view surround you and become the only app you see.
-### Open apps
-
You'll find your apps either pinned to **Start** or in the **All apps** list. To get to the **All apps** list, use the bloom gesture to go to **Start**, then select **All apps**.
On **Start** or in the **All apps** list, select an app. It will open in a good position for viewing.
@@ -88,3 +98,12 @@ To close an app that uses holographic view, use the bloom gesture to leave holog
## Pin apps
Keep your favorite apps handy by pinning them to **Start**. In the **All apps** list, gaze at an app to highlight it. Tap and hold until the menu appears, then select **Pin**. To unpin an app, gaze at the app on **Start**, then tap and hold and select **Unpin**.
+
+## Help! I can’t place holograms on HoloLens
+
+If you’re using HoloLens and having trouble placing holograms, here are some things to try:
+
+- Make sure you’re in a well-lit room without a lot of direct sunlight.
+- Stand 1 to 3 meters from where you’re trying to place the hologram.
+- Don’t place holograms on black or reflective surfaces.
+- Walk around so HoloLens can rescan your surroundings.
diff --git a/devices/hololens/holographic-photos-and-video.md b/devices/hololens/holographic-photos-and-video.md
index 25e8d4a104..d06e2b5236 100644
--- a/devices/hololens/holographic-photos-and-video.md
+++ b/devices/hololens/holographic-photos-and-video.md
@@ -13,7 +13,8 @@ ms.date: 8/12/19
ms.reviewer:
manager: jarrettr
appliesto:
-- Hololens (1st gen)
+- HoloLens (1st gen)
+- HoloLens 2
---
# Create, share, and view photos and video
@@ -22,13 +23,17 @@ Use your HoloLens to take photos and videos that capture the holograms you've pl
To sync your photos and videos to OneDrive, open the OneDrive app and select **Settings** > **Camera upload**, and then turn on **Camera upload**.
-## Take a photo
+## Take a photo on HoloLens (1st gen)
-Use the [bloom](https://support.microsoft.com/help/12644/hololens-use-gestures) gesture to go to **Start**, then select **Photo**. Use gaze to position the photo frame, then air tap to take the picture. The picture will be saved to your collection in the Photos app.
+Use the [bloom gesture](hololens-use-gestures.md#the-bloom-gesture) to go to **Start**, and then select the Photos app.
-Want to snap a quick pic? Press the volume up and volume down buttons at the same time. [Where are the buttons?](https://support.microsoft.com/help/12649/hololens-whats-in-the-box)
+
-## Take a video
+Use gaze to position the photo frame, then air tap to take the picture. The picture will be saved to your collection in the Photos app.
+
+Want to snap a quick picture? Press the [volume up and volume down buttons](hololens-hardware.md#hololens-components) at the same time.
+
+## Take a video on HoloLens (1st gen)
Use the bloom gesture to go to **Start**, then select **Video**. Use gaze to position the video frame, then air tap to start recording. To stop recording, use bloom once. The video will be saved to your collection in the Photos app.
@@ -37,6 +42,14 @@ To start recording more quickly, press and hold the volume up and volume down bu
> [!TIP]
> You can always have Cortana take a photo or a video for you. Just say "Hey Cortana, take a photo" or "Hey Cortana, take a video." [What else can I say to Cortana?](hololens-cortana.md)
-[Take + share photos and video with Mixed reality capture](https://docs.microsoft.com/en-us/windows/mixed-reality/mixed-reality-capture)
+## Find your photos and videos
-[Find and view your photos](https://docs.microsoft.com/en-us/windows/mixed-reality/see-your-photos)
+To see your photos from OneDrive, select **More** > **Settings**, and then turn on **Show my cloud-only content from OneDrive**. (You'll need to sign in to the Photos app with your Microsoft account, if you haven't already.)
+
+To pin a photo or video in your world, open it, then select **Place in mixed world**. Use tap and hold to move it to where you want it.
+
+## Share photos and videos
+
+To share images to a social network, in the Collection view, tap and hold the photo you want to share, then select **Share**. Select **Share Assistant**, then select the app that you want to share to.
+
+You can also share directly from the camera app right after you take a photo - at the top of the image, select **Share**.
diff --git a/devices/hololens/holographic-store-apps.md b/devices/hololens/holographic-store-apps.md
new file mode 100644
index 0000000000..0c8021bc9b
--- /dev/null
+++ b/devices/hololens/holographic-store-apps.md
@@ -0,0 +1,51 @@
+---
+title: Manage apps in from the Microsoft Store
+description: The Microsoft Store is your source for apps and games that work with HoloLens. Learn more about finding, installing, and uninstalling holographic apps.
+ms.assetid: cbe9aa3a-884f-4a92-bf54-8d4917bc3435
+ms.reviewer: jarrettrenshaw
+ms.date: 8/30/2019
+manager: v-miegge
+keywords: hololens, store, uwp, app, install
+ms.prod: hololens
+ms.sitesec: library
+author: mattzmsft
+ms.author: mazeller
+ms.topic: article
+ms.localizationpriority: medium
+appliesto:
+- HoloLens (1st gen)
+- HoloLens 2
+---
+
+# Find, Install, and Uninstall applications from the Microsoft Store
+
+The Microsoft Store is your go-to source for apps and games that work with HoloLens. When you go to the Store on your HoloLens, any apps you see there will run on it.
+
+Apps on HoloLens use either 2D view or holographic view. Apps with 2D view look like windows and can be positioned all around you. Apps that use holographic view surround you and become the only app you see.
+
+HoloLens supports many existing applications from the Microsoft Store, as well as new apps built specifically for HoloLens. This article will focus on holographic applications from the Microsoft store, read [custom holographic applications](holographic-custom-apps.md) to learn more about installing and running custom apps.
+
+## Find apps
+
+Open the Microsoft Store from the Start menu. Then browse for apps and games (or use your voice to search), select the microphone on the HoloLens keyboard, and start talking.
+
+## Install apps
+
+To download apps, you'll need to be signed in with a Microsoft account. To buy them, you'll need a payment method associated with the Microsoft account you use on your HoloLens. To set up a payment method, go to [account.microsoft.com](http://account.microsoft.com/) and select **Payment & billing** > **Payment options** > **Add a payment option**.
+
+1. Perform a [bloom](hololens-use-gestures.md#the-bloom-gesture) gesture to open the [**Start** menu](holographic-home.md#use-the-start-menu).
+2. Select the Store app and then tap to place this tile into your world.
+3. Once the Store app opens, use the search bar to look for any desired application.
+4. Select **Get** or **Install** on the application's page (a purchase may be required).
+
+## Uninstall apps
+
+There are two ways to uninstall applications. You can uninstall applications through the Microsoft Store or Start menu.
+
+### Uninstall from the Start menu
+
+On **Start** or in the **All apps** list, gaze at the app. Tap and hold until the menu appears, then select **Uninstall**.
+
+### Uninstall from the Microsoft Store
+
+Open the Microsoft Store from the Start menu. Then browse for the application you'd like to uninstall. There will be an **uninstall** button on the store page for applications you have installed.
diff --git a/devices/hololens/hololens-calibration.md b/devices/hololens/hololens-calibration.md
new file mode 100644
index 0000000000..2f061ef10d
--- /dev/null
+++ b/devices/hololens/hololens-calibration.md
@@ -0,0 +1,121 @@
+---
+title: Calibration
+description: Calibrating your IPD (interpupillary distance) can improve the quality of your visuals. Both HoloLens and Windows Mixed Reality immersive headsets offer ways to customize IPD.
+author: Teresa-Motiv
+ms.author: xerxesb
+ms.date: 08/23/19
+ms.topic: article
+keywords: calibration, comfort, visuals, quality, ipd
+ms.prod: hololens
+ms.sitesec: library
+author: Teresa-Motiv
+ms.localizationpriority: medium
+ms.reviewer:
+manager: jarrettr
+appliesto:
+- HoloLens 1
+- HoloLens 2
+---
+
+# Improve visual quality and comfort
+
+HoloLens, HoloLens 2 and Windows Mixed Reality immersive headsets offer different ways to improve quality of visual experience.
+
+## Hololens 2 calibration
+
+HoloLens 2 is designed to provide the highest quality visual imagery and comfort for our customers. Eye-tracking technology is used to improve the user experience of seeing and interacting with the virtual environment.
+
+On HoloLens 2, you'll be prompted to calibrate your visuals during device setup. Users are asked to look at the set of fixation targets. This allows the device to adjust hologram rendering for the user to ensure accurately positioned holograms, comfortable 3D viewing experience and improved display quality. All adjustments happen on the fly without a need for manual tuning. By using the eyes as landmarks, the device is adjusted for every user and visuals are tuned as the headset shifts slightly throughout use. Eye position tracking is used internally by the system and developers don’t need to do anything to leverage this capability. This information is not available to developers.
+
+On HoloLens 2, performing calibration also ensures accurate eye gaze tracking for every user. Eye tracking enables applications to track where the user is looking in real time. This is the main capability developers can leverage to enable a whole new level of context, human understanding and interactions within the Holographic experience.
+
+Calibration information is stored locally on the device and is not associated with any account information. There is no record of who has used the device without calibration. This mean new users will get prompted to calibrate visuals when they use the device for the first time, as well as users who opted out of calibration previously or if calibration was unsuccessful. Calibration can always be deleted from the device in **Settings** > **Privacy** > **Eye tracker**.
+
+
+
+
+### Calibration failures
+
+Calibration should work for most users, but there are cases in which the user might be unable to calibrate successfully.
+Some examples of calibration failures are due to:
+
+- User getting distracted and not following the calibration targets during calibration experience
+- Dirty or scratched device visor or device visor not positioned properly
+- Dirty or scratched glasses
+- Certain types of contact lenses and glasses (colored contact lenses, some toric contact lenses, IR blocking glasses, some high prescription glasses, sunglasses, and so forth)
+- More-pronounced makeup, some eyelash extensions
+- Occlusions of eye and/or device visor (hair, some thick eyeglass frames)
+- Eye physiology, certain eye conditions and/or eye surgery (some narrow eyes, long eyelashes, amblyopia, nystagmus, some cases of LASIK or other eye surgeries, and so forth)
+
+If calibration is unsuccessful try one of these fixes:
+
+- Clean your device visor
+- Clean your glasses
+- Push your device visor all the way in
+- Make sure nothing is obstructing the sensors or your eyes (such as hair)
+- Make sure there is enough light in your room and that you are not under direct sunlight
+- Make sure you are carefully following the targets during calibration
+
+If you followed all guidelines and calibration is still failing, you can disable calibration prompt in **Settings** > **System** > **Calibration**. **When a new person uses this HoloLens, automatically ask to run eye calibration** should be turned off. Please understand that this might result in worse hologram rendering quality and discomfort.
+
+### Launching the Calibration app from Settings
+
+1. Use Start gesture to get to the [**Start** menu](holographic-mixed-reality-modern-workplace.md#navigate-the-windows-mixed-reality-home).
+1. Select **All Apps** to view all apps if the Settings app isn't pinned to **Start**.
+1. Launch Settings.
+1. Navigate to **System** > **Calibration** > **Eye Calibration** and select **Run eye calibration**.
+
+ 
+
+### Calibration when sharing a device or session
+
+HoloLens 2 can be shared between people, without a need for each person to go through device setup. HoloLens 2 will prompt the user to calibrate visuals when the device is put on the head if the user is new to the device. If the user has previously calibrated visuals on the device, the display will be seamlessly adjusted for quality and a comfortable viewing experience when the user puts the device on the head.
+
+
+
+## HoloLens (Gen 1) calibration
+
+Calibrating your IPD (interpupillary distance) can improve the quality of your visuals.
+
+### During setup
+
+
+
+*IPD finger-alignment screen at second step*
+
+On HoloLens, you'll be prompted to calibrate your visuals during setup. This allows the device to adjust hologram display according to the user's [interpupillary distance](https://en.wikipedia.org/wiki/Interpupillary_distance) (IPD). With an incorrect IPD, holograms may appear unstable or at an incorrect distance.
+
+After Cortana introduces herself, the first setup step is calibration. It's recommended that you complete the calibration step during this setup phase, but it can be skipped by waiting until Cortana prompts you to say "Skip" to move on.
+
+Users are asked to align their finger with a series of six targets per eye. Through this process, HoloLens sets the correct IPD for the user. If the calibration needs to be updated or adjusted for a new user, it can be run outside of setup using the Calibration app.
+
+### Calibration app
+
+Calibration can be performed any time through the Calibration app. The Calibration app is installed by default and may be accessed from the **Start** menu, or through the Settings app. Calibration is recommended if you'd like to improve the quality of your visuals or calibrate visuals for a new user.
+
+**Launching the app from Start**
+
+1. Use [bloom](hololens-use-gestures.md#the-bloom-gesture) to get to the [**Start** menu](holographic-mixed-reality-modern-workplace.md#navigate-the-windows-mixed-reality-home).
+1. Select **+** to view all apps.
+1. Launch **Calibration**.
+
+
+
+
+
+**Launching the app from Settings**
+
+1. Use [bloom](hololens-use-gestures.md#the-bloom-gesture) to get to the [**Start** menu](holographic-mixed-reality-modern-workplace.md#navigate-the-windows-mixed-reality-home).
+1. If **Settings** isn't pinned to **Start**, select **+** to view all apps.
+1. Launch **Settings**.
+1. Navigate to **System** > **Utilities** and select **Open Calibration**.
+
+
+
+## Immersive headsets
+
+To change IPD within your headset, open the Settings app and navigate to **Mixed reality** > **Headset display** and move the slider control. You’ll see the changes in real time in your headset. If you know your IPD, maybe from a visit to the optometrist, you can enter it directly as well.
+
+You can also adjust this setting by going to **Settings** > **Mixed reality** > **Headset display** on your PC.
+
+If your headset does not support IPD customization, this setting will be disabled.
diff --git a/devices/hololens/hololens-clicker-restart-recover.md b/devices/hololens/hololens-clicker-restart-recover.md
deleted file mode 100644
index 25e49740c9..0000000000
--- a/devices/hololens/hololens-clicker-restart-recover.md
+++ /dev/null
@@ -1,49 +0,0 @@
----
-title: Restart or recover the HoloLens clicker
-description: Things to try if the HoloLens clicker is unresponsive or isn’t working well.
-ms.assetid: 13406eca-e2c6-4cfc-8ace-426ff8f837f4
-ms.reviewer: jarrettrenshaw
-ms.date: 07/01/2019
-manager: v-miegge
-keywords: hololens
-ms.prod: hololens
-ms.sitesec: library
-author: v-miegge
-ms.author: v-miegge
-ms.topic: article
-ms.localizationpriority: medium
----
-
-# Restart or recover the HoloLens clicker
-
-[Clicker recovery](https://support.microsoft.com/en-us/help/15555)
-
-Here are some things to try if the HoloLens clicker is unresponsive or isn’t working well.
-
-## Restart the clicker
-
-Use the tip of a pen to press and hold the [pairing button](https://support.microsoft.com/en-us/help/12646).
-
-
-
-At the same time, click and hold the clicker for 15 seconds. If the clicker was already paired with your HoloLens, it will stay paired after it restarts.
-
-
-
-If the clicker won't turn on or restart, try charging it using the HoloLens charger. If the battery is very low, it might take a few minutes for the white indicator light to turn on.
-
-## Re-pair the clicker
-
-Go to Settings > Devices and select the clicker. Select Remove, wait a few seconds, then pair the clicker again.
-
-## Recover the clicker
-
-If restarting and re-pairing the clicker don’t fix the problem, the Windows Device Recovery Tool can help you recover it. The recovery process may take some time, and the latest version of the clicker software will be installed. To use the tool, you’ll need a computer running Windows 10 or later with at least 4 GB of free storage space.
-
-To recover the clicker:
-
-1. Download and install the [Windows Device Recovery Tool](https://dev.azure.com/ContentIdea/ContentIdea/_queries/query/8a004dbe-73f8-4a32-94bc-368fc2f2a895/) on your computer.
-1. Connect the clicker to your computer using the Micro USB cable that came with your HoloLens.
-1. Run the Windows Device Recovery Tool and follow the instructions.
-
-If the clicker isn’t automatically detected, select **My device was not detected** and follow the instructions to put your device into recovery mode.
diff --git a/devices/hololens/hololens-clicker.md b/devices/hololens/hololens-clicker.md
deleted file mode 100644
index 8ec7e8077b..0000000000
--- a/devices/hololens/hololens-clicker.md
+++ /dev/null
@@ -1,65 +0,0 @@
----
-title: Use the HoloLens Clicker
-description:
-ms.assetid: 7d4a30fd-cf1d-4c9a-8eb1-1968ccecbe59
-ms.reviewer: jarrettrenshaw
-ms.date: 07/01/2019
-manager: v-miegge
-keywords: hololens
-ms.prod: hololens
-ms.sitesec: library
-author: v-miegge
-ms.author: v-miegge
-ms.topic: article
-ms.localizationpriority: medium
----
-
-# Use the HoloLens Clicker
-
-The clicker was designed specifically for HoloLens and gives you another way to interact with holograms. It comes with HoloLens, in a separate box. Use it in place of hand gestures to select, scroll, move, and resize.
-
-
-
-## Hold the clicker
-
-To put on the clicker, slide the loop over your ring or middle finger with the Micro USB port toward your wrist. Rest your thumb in the indentation.
-
-
-
-## Clicker gestures
-
-Clicker gestures are small wrist rotations, not the larger movements used for HoloLens hand gestures. And HoloLens will recognize your gestures and clicks even if the clicker is outside the [gesture frame](https://support.microsoft.com/help/12644), so you can hold the clicker in the position that's most comfortable for you.
-
-- **Select**. To select a hologram, button, or other element, gaze at it, then click.
-
-- **Click and hold**. Click and hold your thumb down on the button to do some of the same things you would with tap and hold, like move or resize a hologram.
-
-- **Scroll**. On the app bar, select **Scroll Tool**. Click and hold, then rotate the clicker up, down, left, or right. To scroll faster, move your hand farther from the center of the scroll tool.
-
-- **Zoom**. On the app bar, select **Zoom Tool**. Click and hold, then rotate the clicker up to zoom in, or down to zoom out.
-
->[!TIP]
->In Microsoft Edge, gaze at a page and double-click to zoom in or out.
-
-## Pair and charge the clicker
-
-To pair the clicker with your HoloLens, see [Pair Bluetooth devices](https://support.microsoft.com/help/12636).
-
-When the clicker battery is low, the battery indicator will blink amber. Plug the Micro USB cable into a USB power supply to charge the device.
-
-## Indicator lights
-
-Here's what the lights on the clicker mean.
-
-- **Blinking white**. The clicker is in pairing mode.
-
-- **Fast-blinking white**. Pairing was successful.
-
-- **Solid white**. The clicker is charging.
-
-- **Blinking amber**. The battery is low.
-
-- **Solid amber**. The clicker ran into an error and you'll need to restart it. While pressing the pairing button, click and hold for 15 seconds.
-
->[!NOTE]
->If the clicker doesn't respond or won't start, see [Restart or recover the HoloLens clicker](https://support.microsoft.com/help/15555/hololens-restart-or-recover-the-hololens-clicker).
diff --git a/devices/hololens/hololens-commercial-features.md b/devices/hololens/hololens-commercial-features.md
new file mode 100644
index 0000000000..15c02baaa3
--- /dev/null
+++ b/devices/hololens/hololens-commercial-features.md
@@ -0,0 +1,77 @@
+---
+title: Commercial features
+description: The Microsoft HoloLens Commercial Suite includes features that make it easier for businesses to manage HoloLens devices. HoloLens 2 devices are equipped with commercial features by default.
+author: scooley
+ms.author: scooley
+ms.date: 08/26/19
+ms.topic: article
+keywords: HoloLens, commercial, features, mdm, mobile device management, kiosk mode
+ms.prod: hololens
+ms.sitesec: library
+ms.localizationpriority: medium
+ms.reviewer:
+manager: jarrettr
+appliesto:
+- HoloLens 1
+- HoloLens 2
+---
+
+# Commercial features
+
+HoloLens includes features that make it easier for businesses to manage HoloLens devices.
+
+Every HoloLens 2 device has commercial features available.
+
+HoloLens (Gen 1) came with two licensing options, the developer license and a commercial license. To unlock HoloLens's commercial capabilities, upgrade from the developer license to a commercial license. To purchase the Microsoft HoloLens Commercial Suite, contact your local Microsoft account manager.
+
+>[!VIDEO https://www.youtube.com/embed/tNd0e2CiAkE]
+
+## Key commercial features
+
+- **Kiosk mode.** With HoloLens kiosk mode, you can limit which apps to run to enable demo or showcase experiences.
+
+ 
+
+- **Mobile Device Management (MDM) for HoloLens.** Your IT department can manage multiple HoloLens devices simultaneously by using solutions such as Microsoft Intune. You can manage settings, select apps to install, and set security configurations that are tailored to your organization's needs.
+
+ 
+
+- **Windows Update for Business.** Controlled operating system updates to devices and support for long term servicing branch.
+- **Data security.** BitLocker data encryption is enabled on HoloLens to provide the same level of security protection as any other Windows device.
+- **Work access.** Anyone in your organization can remotely connect to the corporate network through virtual private network on a HoloLens. HoloLens can also access Wi-Fi networks that require credentials.
+- **Microsoft Store for Business.** Your IT department can also set up an enterprise private store, containing only your company’s apps for your specific HoloLens usage. Securely distribute your enterprise software to selected group of enterprise users.
+
+## Development Edition vs. Commercial Suite
+
+|Features |HoloLens Development Edition |HoloLens Commercial Suite |HoloLens 2 |
+|---|:---:|:---:|:---:|
+|Device Encryption (BitLocker) | |✔️ |✔️ |
+|Virtual Private Network (VPN) | |✔️ |✔️ |
+|[Kiosk mode](https://docs.microsoft.com/windows/mixed-reality/using-the-windows-device-portal#kiosk-mode) | |✔️ |✔️ |
+|**Management and deployment** | | | |
+|Mobile Device Management (MDM) | |✔️ |✔️ |
+|Ability to block unenrollment | |✔️ |✔️ |
+|Cert-based corporate Wi-Fi access | |✔️ |✔️ |
+|Microsoft Store (Consumer) |Consumer |Filter by using MDM |Filter by using MDM |
+[Business Store Portal](https://docs.microsoft.com/en-us/microsoft-store/working-with-line-of-business-apps) | |✔️ |✔️ |
+|**Security and identity** | | | |
+|Sign in by using Azure Active Directory (AAD) account |✔️ |✔️ |✔️ |
+|Sign in by using Microsoft Account (MSA) |✔️ |✔️ |✔️ |
+|Next Generation Credentials with PIN unlock |✔️ |✔️ |✔️ |
+|[Secure boot](https://docs.microsoft.com/windows-hardware/design/device-experiences/oem-secure-boot) |✔️ |✔️ |✔️ |
+|**Servicing and support** | | | |
+|Automatic system updates as they arrive |✔️ |✔️ |✔️ |
+|[Windows Update for Business](https://docs.microsoft.com/windows/deployment/update/waas-manage-updates-wufb) | |✔️ |✔️ |
+|Long-Term Servicing Channel (LTSC) | |✔️ |✔️ |
+
+## Enabling commercial features
+
+Commercial features like Microsoft Store for Business, kiosk mode, and enterprise Wi-Fi access are set up by an organization's IT admin. The [Microsoft HoloLens](https://docs.microsoft.com/hololens) documentation provides step-by-step instructions for device enrollment and installing apps from Microsoft Store for Business.
+
+## See also
+
+- [Microsoft HoloLens](https://docs.microsoft.com/hololens)
+- [Kiosk mode](/windows/mixed-reality/using-the-windows-device-portal.md#kiosk-mode)
+- [CSPs supported in HoloLens devices](/windows/client-management/mdm/configuration-service-provider-reference#csps-supported-in-hololens-devices)
+- [Microsoft Store For Business and line of business applications](https://blogs.technet.microsoft.com/sbucci/2016/04/13/windows-store-for-business-and-line-of-business-applications/)
+- [Working with line-of-business apps](/microsoft-store/working-with-line-of-business-apps)
diff --git a/devices/hololens/hololens-connect-devices.md b/devices/hololens/hololens-connect-devices.md
index c702921e14..8604fab488 100644
--- a/devices/hololens/hololens-connect-devices.md
+++ b/devices/hololens/hololens-connect-devices.md
@@ -19,10 +19,22 @@ appliesto:
## Pair Bluetooth devices
-Pair a Bluetooth mouse and keyboard with HoloLens, then use them to interact with holograms and to type anywhere you'd use the holographic keyboard. Pair the HoloLens [clicker](hololens-clicker.md) for a different way to interact with HoloLens.
+Pair a Bluetooth mouse and keyboard with HoloLens, then use them to interact with holograms and to type anywhere you'd use the holographic keyboard.
+
+Classes of Bluetooth devices supported by HoloLens 2:
+
+- Mouse
+- Keyboard
+- Bluetooth audio output (A2DP) devices
+
+Classes of Bluetooth devices supported by HoloLens (1st gen):
+
+- Mouse
+- Keyboard
+- HoloLens (1st gen) clicker
> [!NOTE]
-> Other types of Bluetooth devices, such as speakers, headsets, smartphones, and game pads, may appear as available in HoloLens settings, but aren't supported. [Learn more](http://go.microsoft.com/fwlink/p/?LinkId=746660).
+> Other types of Bluetooth devices, such as speakers, headsets, smartphones, and game pads, may appear as available in HoloLens settings, but aren't supported on HoloLen (1st gen). [Learn more](http://go.microsoft.com/fwlink/p/?LinkId=746660).
### Pair a Bluetooth keyboard or mouse
@@ -41,6 +53,22 @@ Pair a Bluetooth mouse and keyboard with HoloLens, then use them to interact wit
## Connect USB-C devices
+> Applies to HoloLens 2 only.
+
+HoloLens 2 lets you connect a wide range of USB-c devices.
+
+Devices classes supported by HoloLens 2:
+
+- Mass storage devices (e.g. thumb drives)
+- Ethernet adapters (including ethernet with charging)
+- USB-C to 3.5mm digital audio adapters
+- USB-C digital audio headsets (including headset adapters with charging)
+- Wired mouse
+- Wired keyboard
+- Combination PD hubs (USB A + PD charging)
+
## Connect to Miracast
> Applies to HoloLens 2 only.
+
+Use Miracast on HoloLens 2 by opening the **Start** menu and selecting the display icon.
diff --git a/devices/hololens/hololens-cortana.md b/devices/hololens/hololens-cortana.md
index 03ad75f637..8fe740e706 100644
--- a/devices/hololens/hololens-cortana.md
+++ b/devices/hololens/hololens-cortana.md
@@ -11,19 +11,45 @@ ms.author: v-miegge
ms.topic: article
manager: jarrettr
ms.localizationpriority: medium
+appliesto:
+- HoloLens (1st gen)
+- HoloLens 2
---
# Use your voice with HoloLens
You can use your voice to do many of the same things you do with gestures on HoloLens, like taking a quick photo or opening an app.
-## Voice commands
+## Voice commands with HoloLens
Get around HoloLens faster with these basic commands. If you turn Cortana off, "Hey Cortana" voice commands won't be available, but you'll still be able to use the following built-in voice commands.
-**Select**. Use this instead of air tap. Gaze at a hologram, then say "Select."
+> [!NOTES]
+>
+> - Speech is only supported in some languages. [Learn more](https://support.microsoft.com/en-us/help/4039262#Languages).
+> - Regardless of the language you choose for the keyboard, the speech language is always based on the Windows display language. You can verify the Windows display language in **Settings** > **Time and Language** > **Language**.
-**Go to start**. Say "Go to Start" anytime to bring up the **Start** menu. Or when you're in an immersive app, say "Go to Start" to get to the quick actions menu.
+### General speech commands
+
+Use these commands throughout Windows Mixed Reality to get around faster. Some commands use the gaze cursor, which you bring up by saying “select.”
+
+| To do this | Say this |
+| - | - |
+|Select | Say "select" to bring up the gaze cursor. Then, turn your head to position the cursor on the thing you want to select, and say “select” again. |
+|Open the Start menu | "Go to Start" |
+|Leave an immersive app | Say "Go to Start" to bring up the quick actions menu, then say "Mixed reality home." |
+|See available speech commands | "What can I say?" |
+
+### 3D object commands
+
+To use these commands, gaze at a 3D object, hologram, or app window.
+|To do this |Say this |
+| - | - |
+|Make it bigger |"Bigger" |
+|Make it smaller |"Smaller" |
+|Turn it to face you |"Face me" |
+|Get it ready to move—it’ll follow your gaze |"Move this" |
+|Place it when you’re done moving it |"There" |
**Move this**. Instead of air tapping and dragging an app, say "Move this" and use gaze to move it.
@@ -31,7 +57,9 @@ Get around HoloLens faster with these basic commands. If you turn Cortana off,
**Bigger/Smaller**. Gaze at a hologram, and then say "Bigger" or "Smaller" to resize it.
-Many buttons and other elements on HoloLens also respond to your voice—for example, **Adjust** and **Close** on the app bar. To find out if a button is voice-enabled, rest your gaze on it for a moment. If it is, you'll see a voice tip.
+### See it, say it
+
+Many buttons and other elements on HoloLens also respond to your voice—for example, **Adjust** and **Close** on the app bar. To find out if a button is voice-enabled, rest your gaze on it for a moment. If it is, you'll see a voice tip.
## Dictation mode
@@ -59,7 +87,9 @@ Cortana can help you do all kinds of things on your HoloLens, from searching the

-Here are some things you can try saying (remember to say "Hey Cortana" first):
+Here are some things you can try saying (remember to say "Hey Cortana" first).
+
+**Hey, Cortana**...
- What can I say?
- Increase the volume.
diff --git a/devices/hololens/hololens-get-apps.md b/devices/hololens/hololens-get-apps.md
deleted file mode 100644
index cd14341075..0000000000
--- a/devices/hololens/hololens-get-apps.md
+++ /dev/null
@@ -1,37 +0,0 @@
----
-title: Get apps for HoloLens
-description: The Microsoft Store is your source for apps and games that work with HoloLens.
-ms.assetid: cbe9aa3a-884f-4a92-bf54-8d4917bc3435
-ms.reviewer: jarrettrenshaw
-ms.date: 07/01/2019
-manager: v-miegge
-keywords: hololens
-ms.prod: hololens
-ms.sitesec: library
-author: v-miegge
-ms.author: v-miegge
-ms.topic: article
-ms.localizationpriority: medium
----
-
-# Get apps for HoloLens
-
-The Microsoft Store is your source for apps and games that work with HoloLens. When you go to the Store on your HoloLens, any apps you see there will run on it.
-
-Apps on HoloLens use either 2D view or holographic view. Apps with 2D view look like windows and can be positioned all around you. Apps that use holographic view surround you and become the only app you see.
-
-## Get apps
-
-Open the Microsoft Store from the Start menu. Then browse for apps and games (or use your voice to search), select the microphone on the HoloLens keyboard, and start talking.
-
-To download apps, you'll need to be signed in with a Microsoft account. To buy them, you'll need a payment method associated with the Microsoft account you use on your HoloLens. To set up a payment method, go to [account.microsoft.com](http://account.microsoft.com/) and select **Payment & billing** > **Payment options** > **Add a payment option**.
-
-## Find your apps
-
-Once you've installed an app, you'll find it in the All apps list (Start > All apps ). Keep apps handy by [pinning them to Start](https://support.microsoft.com/help/12638).
-
-App updates are automatic, and they're free.
-
->[!NOTE]
->- To purchase apps in the Store, the billing address for your payment method must match the country or region your HoloLens is set to.
->- Some apps may not be available in all countries and regions.
diff --git a/devices/hololens/hololens-install-apps.md b/devices/hololens/hololens-install-apps.md
deleted file mode 100644
index 7ff737a027..0000000000
--- a/devices/hololens/hololens-install-apps.md
+++ /dev/null
@@ -1,89 +0,0 @@
----
-title: Install apps on HoloLens
-description: The recommended way to install apps on HoloLens is to use Microsoft Store for Business.
-ms.prod: hololens
-ms.mktglfcycl: manage
-ms.sitesec: library
-author: scooley
-ms.author: scooley
-ms.topic: article
-ms.localizationpriority: medium
-ms.date: 10/23/2018
-ms.reviewer:
----
-
-# Install apps on HoloLens
-
-The recommended way to install Universal Windows Platform (UWP) apps on HoloLens is to use Microsoft Store for Business. You can make your own [line-of-business application](https://technet.microsoft.com/itpro/windows/manage/working-with-line-of-business-apps) available through Microsoft Store for Business.
-
-You can also deploy apps using your mobile device management (MDM) provider or use the Windows Device Portal to install apps.
-
-## Use Microsoft Store for Business to deploy apps to HoloLens
-
-Microsoft Store for Business is a private Microsoft Store for your enterprise. People in your organization can open the Store app and select your private Store to install apps that you have made available to them.
-
-
-
-In your Microsoft Store for Business dashboard, you can also download apps to distribute to devices that aren't connected to the Internet, plus add line-of-business (LOB) apps for distribution.
-
-### Requirements
-
-- You need to be a global administrator for your Azure Active Directory (Azure AD) tenant.
-
- >[!TIP]
- >You can create an Azure AD account and tenant as part of the Store for Business sign-up process.
-
-- End users need Azure AD accounts when they access Store for Business content from Windows-based devices.
-
-### Microsoft Store for Business process
-
-1. [Sign up for Microsoft Store for Business.](https://technet.microsoft.com/itpro/windows/manage/sign-up-windows-store-for-business)
-2. [Assign roles and permissions for managing your Store for Business.](https://technet.microsoft.com/itpro/windows/manage/roles-and-permissions-windows-store-for-business)
-3. (Optional) [Configure Microsoft Store for Business to work with your MDM provider.](https://technet.microsoft.com/itpro/windows/manage/configure-mdm-provider-windows-store-for-business)
-3. [Get apps for your Store for Business.](https://technet.microsoft.com/itpro/windows/manage/acquire-apps-windows-store-for-business)
-4. [Distribute apps to your employees.](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-to-your-employees-windows-store-for-business)
-
-### Install apps on HoloLens from Microsoft Store for Business
-
-The method that you use to install an app from your Microsoft Store for Business on HoloLens depends on the distribution method that you choose.
-
-| Distribution method | To install on HoloLens|
-| --- | --- |
-| [Using private store](https://docs.microsoft.com/microsoft-store/distribute-apps-from-your-private-store) | Open the Store app and select the tab for your organization to choose from available apps. |
-| Using MDM | [You can configure MDM to synchronize your Store for Business inventory.](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-with-management-tool) See the **Important** note in [Use MDM to deploy apps to HoloLens.](#use-mdm-to-deploy-apps-to-hololens) |
-
-
-
-## Use MDM to deploy apps to HoloLens
-
->[!IMPORTANT]
->Online-licensed apps cannot be deployed with Microsoft Store for Business on HoloLens via an MDM provider. If attempted, apps will remain in “downloading” state. Instead, you can use your MDM provider to deploy MDM-hosted apps to HoloLens, or deploy offline-licensed apps to HoloLens via Store for Business
-
-
-You can deploy UWP apps to HoloLens using your MDM provider. For Intune instructions, see [Deploy apps in Microsoft Intune](https://docs.microsoft.com/intune/deploy-use/add-apps).
-
-Using Intune, you can also [monitor your app deployment](https://docs.microsoft.com/intune/deploy-use/monitor-apps-in-microsoft-intune).
-
-
-
-## Use the Windows Device Portal to install apps on HoloLens
-
->[!IMPORTANT]
->When you set up HoloLens to use the Device Portal, you must enable **Developer Mode** on the device. **Developer Mode** on a device that has been upgraded to Windows Holographic for Business enables side-loading of apps, which risks the installation of apps that have not been certified by the Microsoft Store. Administrators can block the ability to enable **Developer Mode** using the **ApplicationManagement/AllowDeveloper Unlock** setting in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx). [Learn more about Developer Mode.](https://msdn.microsoft.com/windows/uwp/get-started/enable-your-device-for-development#developer-mode)
-
-1. [Set up the HoloLens to use the Windows Device Portal](https://developer.microsoft.com/windows/mixed-reality/using_the_windows_device_portal#setting_up_hololens_to_use_windows_device_portal). The Device Portal is a web server on your HoloLens that you can connect to from a web browser on your PC.
-
-2. On a PC, connect to the HoloLens using [Wi-Fi](https://docs.microsoft.com/windows/mixed-reality/connecting-to-wi-fi-on-hololens) or USB.
-
-3. [Create a user name and password](https://developer.microsoft.com/windows/mixed-reality/Using_the_Windows_Device_Portal.html#creating_a_username_and_password) if this is the first time you connect to the Windows Device Portal, or enter the user name and password that you previously set up.
-
- >[!TIP]
- >If you see a certificate error in the browser, follow [these troubleshooting steps](https://developer.microsoft.com/windows/mixed-reality/Using_the_Windows_Device_Portal.html#security_certificate).
-
-4. In the Windows Device Portal, click **Apps**.
-
- 
-
-5. In **Install app**, select an **app package** from a folder on your computer or network. If the app package requires additional software, such as dependency frameworks, select **I want to specify framework packages**.
-
-6. In **Deploy**, click **Go** to deploy the app package and added dependencies to the connected HoloLens.
diff --git a/devices/hololens/hololens-multiple-users.md b/devices/hololens/hololens-multiple-users.md
index d4aac40795..0f038a6f7b 100644
--- a/devices/hololens/hololens-multiple-users.md
+++ b/devices/hololens/hololens-multiple-users.md
@@ -3,31 +3,39 @@ title: Share HoloLens with multiple people (HoloLens)
description: You can configure HoloLens to be shared by multiple Azure Active Directory accounts.
ms.prod: hololens
ms.sitesec: library
-author: dansimp
-ms.author: dansimp
+author: scooley
+ms.author: scooley
ms.topic: article
ms.localizationpriority: medium
ms.date: 04/30/2018
ms.reviewer:
manager: dansimp
+appliesto:
+- HoloLens (1st gen)
+- HoloLens 2
---
-# Share HoloLens with multiple people
+# Sharing a HoloLens with many people
+It's common to share one HoloLens with many people or to have many people share a set of HoloLens. This article talks about options for device sharing.
+
+## Multiple users with unique accounts per person
A HoloLens device can be shared by multiple Azure Active Directory (Azure AD) accounts, each with their own user settings and user data on the device.
-**Prerequisite**: The HoloLens device must be running Windows 10, version 1803, and be [upgraded to Windows Holographic for Business](hololens-upgrade-enterprise.md).
+**Prerequisite**: The HoloLens device must be running Windows 10, version 1803 or later. HoloLens (1st gen) also need to be [upgraded to Windows Holographic for Business](hololens1-upgrade-enterprise.md).
During setup, you must select **My work or school owns it** and sign in with an Azure AD account. After setup, ensure that **Other People** appears in **Settings** > **Accounts**.
Other people can use the HoloLens device by signing in with their Azure AD account credentials. To switch users, press the power button once to go to standby and then press the power button again to return to the lock screen, or select the user tile on the upper right of the pins panel to sign out the current user.
->[!NOTE]
->Each subsequent user will need to perform [Calibration](https://developer.microsoft.com/windows/mixed-reality/calibration) in order to set their correct interpupillary distance (PD) for the device while signed in.
+>[!NOTE]
+>Each subsequent user will need to perform [Calibration](hololens-calibration.md).
To see users on the device or to remove a user from the device, go to **Settings** > **Accounts** > **Other users**.
-
-
+## Multiple people sharing a single account
+Multiple users can also share a HoloLens device while using a single user account.
+
+On HoloLens 2, when a user shares the device with another user (while keeping the same account signed in), the device prompts the new user to quickly calibrate and personalize the viewing experience. The device can store the calibration information so that in the future, the device can automatically optimize the quality and comfort of each user's viewing experience. The users do not need to calibrate the device again.
diff --git a/devices/hololens/hololens-network.md b/devices/hololens/hololens-network.md
index 6f7cb43370..3241617fe4 100644
--- a/devices/hololens/hololens-network.md
+++ b/devices/hololens/hololens-network.md
@@ -1,16 +1,16 @@
---
title: Connect to a network
-description: Connect to a wi-fi or ethernet network with HoloLens.
+description: Instructions on how to connect to internet with HoloLens and how to identify the device's IP address.
ms.assetid: 0895606e-96c0-491e-8b1c-52e56b00365d
+author: mattzmsft
+ms.author: mazeller
+keywords: HoloLens, wifi, wireless, internet, ip, ip address
+ms.date: 08/30/19
ms.prod: hololens
ms.sitesec: library
-author: Teresa-Motiv
-ms.author: v-tea
-ms.topic: article
ms.localizationpriority: medium
-ms.date: 8/12/19
-manager: jarrettr
ms.reviewer:
+manager: jarrettr
appliesto:
- Hololens
- HoloLens (1st gen)
@@ -28,13 +28,62 @@ The first time you use your HoloLens, you'll be guided through connecting to a W
## Connecting to Wi-Fi after setup
1. Go to **Start**, then select **Settings**.
-
1. _HoloLens (1st gen) only_ - Use your gaze to position the Settings app, then air tap to place it, or say "Place."
-
1. Select **Network & Internet** > **Wi-Fi**. If you don't see your network, scroll down the list.
-
1. Select a network > **Connect**.
-
1. Type the network password if asked for one, then select **Next**.
-Also see [Connect to Wifi](https://docs.microsoft.com/en-us/windows/mixed-reality/connecting-to-wi-fi-on-hololens)
+## Connecting to Wi-Fi on HoloLens (1st gen)
+
+HoloLens contains a 802.11ac-capable, 2x2 Wi-Fi radio. Connecting HoloLens to a Wi-Fi network is similar to connecting a Windows 10 Desktop or Mobile device to a Wi-Fi network.
+
+
+
+1. [Bloom](hololens-use-gestures.md#the-bloom-gesture) to the **Start** menu.
+1. Select the Settings app from **Start** or from the **All Apps** list on the right of the **Start** menu. The Settings app will be auto-placed in front of you.
+1. Select **Network & Internet**.
+1. Make sure Wi-Fi is turned on.
+1. Select a Wi-Fi network from the list.
+1. If needed, type in the Wi-Fi network password.
+
+You can also confirm you are connected to a Wi-Fi network by checking the Wi-Fi status in the **Start** menu:
+
+1. [Bloom](hololens-use-gestures.md#the-bloom-gesture) to bring up the **Start** menu.
+2. Look at the top left of the **Start** menu for Wi-Fi status. The state of Wi-Fi and the SSID of the connected network will be shown.
+
+## Disabling Wi-Fi on HoloLens (1st gen)
+
+### Using the Settings app on HoloLens
+
+1. [Bloom](hololens-use-gestures.md#the-bloom-gesture) to the **Start** menu.
+1. Select the **Settings** app from **Start** or from the **All Apps** list on the right of the **Start** menu. The **Settings** app will be auto-placed in front of you.
+1. Select **Network & Internet**.
+1. Select the Wi-Fi slider switch to move it to the **Off** position. This will turn off the RF components of the Wi-Fi radio and disable all Wi-Fi functionality on HoloLens.
+
+ > [!WARNING]
+ > When the Wi-Fi radio is disabled, HoloLens will not be able to automatically load your [spaces](hololens-environment-considerations.md#wi-fi-fingerprint-considerations).
+
+1. Move the slider switch to the **On** position to turn on the Wi-Fi radio and restore Wi-Fi functionality on Microsoft HoloLens. The selected Wi-Fi radio state (**On** or **Off**) will persist across reboots.
+
+## Identifying the IP Address of your HoloLens on the Wi-Fi network
+
+### Using the Settings app
+
+1. [Bloom](hololens-use-gestures.md#the-bloom-gesture) to the **Start** menu.
+1. Select the **Settings** app from **Start** or from the **All Apps** list on the right of the **Start** menu. The **Settings** app will be auto-placed in front of you.
+1. Select **Network & Internet**.
+1. Scroll down to beneath the list of available Wi-Fi networks and select **Hardware properties**.
+
+ 
+
+ The IP address will be shown next to **IPv4 address**.
+
+### Using Cortana
+
+Say "Hey Cortana, What's my IP address?" and Cortana will display and read out your IP address.
+
+### Using Windows Device Portal
+
+1. Open the [device portal](/windows/mixed-reality/using-the-windows-device-portal.md#networking) in a web browser on your PC.
+1. Navigate to the **Networking** section.
+ Your IP address and other network information will be displayed there. This method allows for easy copy and paste of the IP address on your development PC.
diff --git a/devices/hololens/hololens-setup.md b/devices/hololens/hololens-setup.md
deleted file mode 100644
index 77bb29070f..0000000000
--- a/devices/hololens/hololens-setup.md
+++ /dev/null
@@ -1,75 +0,0 @@
----
-title: Set up a new HoloLens
-description: This guide walks through first time set up. You'll need a Wi-Fi network and either a Microsoft (MSA) or Azure Active Directory (AAD) account.
-ms.prod: hololens
-ms.sitesec: library
-author: scooley
-ms.author: scooley
-ms.topic: quickstart
-ms.localizationpriority: medium
-ms.date: 07/14/2019
----
-
-# Set up HoloLens for the first time
-
-Follow along to set up a HoloLens for the first time. At the end of this quickstart, you'll be able to use HoloLens and navigate HoloLens settings on-device.
-
-This is a high level unboxing guide to become familiar with HoloLens.
-See [Set up HoloLens in the enterprise](hololens-requirements.md) to configure HoloLens for scale enterprise deployment and ongoing device management.
-
-## Prerequisites
-
-- Internet access.
- - Wi-Fi is the easiest way to do first set up on both HoloLens and HoloLens 2. It can be an open Wi-Fi or password-protected Wi-Fi network; the Wi-Fi network does not need to provide access to enterprise resources or intranet sites.
- - HoloLens 2 can connect to the internet via ethernet and a USB-C adapter.
-- a user account - Microsoft (MSA) or Azure Active Directory (AAD)
-
-## Prepare for first-boot
-
-Become familiar with the HoloLens hardware and prepare to turn your HoloLens on for the first time.
-
-1. Be sure your HoloLens is [charged](https://support.microsoft.com/help/12627)
-1. [Adjust fit](https://support.microsoft.com/help/12632) for a comfortable fit.
-1. [Turn on HoloLens](https://support.microsoft.com/help/12642). You will be guided through a calibration procedure and how to perform [the gestures](https://support.microsoft.com/help/12644/hololens-use-gestures) that you will use to operate HoloLens.
-
-## Set up your HoloLens
-
-Set up your HoloLens and your user account.
-
-1. Connect to the internet (select Wi-Fi).
-1. Sign in to your user account. You'll choose between **My work or school owns it** and **I own it**.
- - When you choose **My work or school owns it**, you sign in with an Azure AD account. If your organization uses Azure AD Premium and has configured automatic MDM enrollment, HoloLens will be enrolled in MDM. If your organization does not use Azure AD Premium, automatic MDM enrollment isn't available, so you will need to [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
- 1. Enter your organizational account.
- 2. Accept privacy statement.
- 3. Sign in using your Azure AD credentials. This may redirect to your organization's sign-in page.
- 4. Continue with device setup.
- - When you choose **I own it**, you sign in with a Microsoft account. After setup is complete, you can [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
- 1. Enter your Microsoft account.
- 2. Enter your password. If your Microsoft account requires [two-step verification (2FA)](https://blogs.technet.microsoft.com/microsoft_blog/2013/04/17/microsoft-account-gets-more-secure/), complete the verification process.
-1. The device sets your time zone based on information obtained from the Wi-Fi network.
-1. Follow the first-start guides to learn how to interact with holograms, control the HoloLens with your voice, and access the start menu.
-
-Congratulations! Setup is complete and you can begin using HoloLens.
-
-## Explore HoloLens
-
-### Check out on-device settings and desktop
-
-HoloLens doesn't have an on-device command line. With that in mind, the settings section in HoloLens plays an important role in diagnosing problems on-device. Understanding the information available to HoloLens users will pay dividends when troubleshooting or configuring the device.
-
-Open settings by opening the start menu and clicking on the **Settings** in the top bar. You can also ask Cortana to open settings.
-
-Follow [this guide](https://docs.microsoft.com/windows/mixed-reality/navigating-the-windows-mixed-reality-home) to navigate around the HoloLens home.
-
-### Connect bluetooth devices
-
-Connecting a bluetooth keyboard makes typing on HoloLens as efficient as a Windows PC.
-
-[Connect a bluetooth keyboard or clicker](https://support.microsoft.com/en-us/help/12636).
-
-## Next steps
-
-Start planning for HoloLens at scale with HoloLens' enterprise management features.
-
-> [!div class="nextstepaction"]
-> [HoloLens in the enterprise](hololens-requirements.md)
\ No newline at end of file
diff --git a/devices/hololens/hololens-spaces-on-hololens.md b/devices/hololens/hololens-spaces-on-hololens.md
deleted file mode 100644
index 5c04bb7c3e..0000000000
--- a/devices/hololens/hololens-spaces-on-hololens.md
+++ /dev/null
@@ -1,40 +0,0 @@
----
-title: Spaces on HoloLens
-description: HoloLens blends holograms with your world
-ms.assetid: bd55ecd1-697a-4b09-8274-48d1499fcb0b
-ms.reviewer: jarrettrenshaw
-ms.date: 07/01/2019
-manager: v-miegge
-keywords: hololens
-ms.prod: hololens
-ms.sitesec: library
-author: v-miegge
-ms.author: v-miegge
-ms.topic: article
-ms.localizationpriority: medium
----
-
-# Spaces on HoloLens
-
-HoloLens blends holograms with your world, mapping your surroundings to remember where you place your apps and content.
-
->[!NOTE]
->For your HoloLens to work properly, HoloLens Wi-Fi needs to be turned on, though it doesn't have to be connected to a network.
-
-## Tips for setting up your space
-
-HoloLens works best in certain kinds of environments. Choose a room with adequate light and plenty of space. Avoid dark spaces and rooms with a lot of dark, shiny, or translucent surfaces (for instance, mirrors or gauzy curtains).
-
->[!NOTE]
->HoloLens is optimized for indoor use. Use it in a safe place with no tripping hazards. [More on safety](https://support.microsoft.com/help/4023454/safety-information).
-
-## Mapping your space
-
-When HoloLens starts mapping your surroundings, you'll see a mesh graphic spreading over the space.
-
-To help HoloLens learn a space, walk around the space and gaze around you. Air tap in a space to light up the mesh and see what's been mapped.
-
-If your space changes significantly—for example, if a piece of furniture is moved—you might need to walk around the space and gaze around you so HoloLens can relearn it.
-
->[!NOTE]
->If HoloLens is having trouble mapping your space or you're have difficulty placing holograms, see [HoloLens and holograms: FAQ](https://support.microsoft.com/help/13456/hololens-and-holograms-faq).
diff --git a/devices/hololens/hololens-spaces.md b/devices/hololens/hololens-spaces.md
index 3df4ee1cc8..6d1446e92f 100644
--- a/devices/hololens/hololens-spaces.md
+++ b/devices/hololens/hololens-spaces.md
@@ -1,71 +1,121 @@
---
-title: How HoloLens stores data for spaces (HoloLens)
-description:
+title: Use HoloLens in New Spaces
+description: HoloLens learns what a space looks like over time. Users can facilitate this process by moving the HoloLens in certain ways through the space.
+ms.assetid: bd55ecd1-697a-4b09-8274-48d1499fcb0b
+author: dorreneb
+ms.author: dobrown
+ms.date: 08/16/2019
+keywords: hololens, Windows Mixed Reality, design, spatial mapping, HoloLens, surface reconstruction, mesh, head tracking, mapping
ms.prod: hololens
ms.sitesec: library
-author: dansimp
-ms.author: dansimp
ms.topic: article
ms.localizationpriority: medium
-ms.date: 11/05/2018
-ms.reviewer:
-manager: dansimp
+appliesto:
+- HoloLens 1
+- HoloLens 2
---
-# How HoloLens stores data for spaces
+# Mapping physical spaces with HoloLens
-In the Windows 10, version 1803 update for Microsoft HoloLens, the mapping data for [spaces](https://support.microsoft.com/help/13760/hololens-spaces-on-hololens) is stored in a local database.
+HoloLens blends holograms with your physical world. To do that, HoloLens needs to learn about the physical world around you and remember where you place holograms within that space.
+
+Over time, the HoloLens builds up a *spatial map* of the environment that it has seen. HoloLens updates the map as the environment changes.
+
+HoloLens will create and update your spatial maps as long as the device is on and a user is logged in. If you hold or wear the device with the cameras pointed at a space, the device will try to map the area. While the HoloLens will learn a space naturally over time, there are tips and tricks available to map the space faster and more efficiently.
+
+> [!NOTE]
+> If your HoloLens can’t map your space or is out of calibration, you may enter Limited mode. In Limited mode, you won’t be able to place holograms in your surroundings.
+
+This article explains how HoloLens maps spaces, how to improve spatial mapping, and how to manage the spatial data HoloLens collects.
+
+## Setting up and choosing your space
+
+Features in an environment can make it difficult for the HoloLens to interpret a space. Light levels, materials in the space, the layout of objects, and more can all affect how HoloLens maps an area.
+
+HoloLens works best in certain kinds of environments. For the best spatial map, choose a room with adequate light and plenty of space. Avoid dark spaces and rooms with a lot of dark, shiny, or translucent surfaces (for instance, mirrors or gauzy curtains).
+
+HoloLens is optimized for indoor use. Spatial mapping also works best when Wi-Fi is turned on, though it doesn't have to be connected to a network. Wi-Fi access points are obtained without being connected or authenticated. It does not change functionality if the access points are internet connected or intranet/local only.
+
+Only use HoloLens in safe places with no tripping hazards. [More on safety](https://support.microsoft.com/help/4023454/safety-information).
+
+## Mapping your space
+
+Now you're ready to start mapping your spare. When HoloLens starts mapping your surroundings, you'll see a mesh graphic spreading over the space.
+
+Here are guidelines for building a great spatial map.
+
+### Understand the scenarios for the area
+
+It is important to spend the most time where you will be using the HoloLens so that the map is relevant and complete.
+
+For example, if a user scenario for HoloLens involves moving from Point A to Point B, walk that path two to three times, looking in all directions as you move.
+
+### Walk slowly around the space
+
+If you walk too quickly around the area, it's likely that the HoloLens will miss mapping areas. Walk slowly around the space, stopping every 5-8 feet to look around at your surroundings.
+
+Smooth movements also help the HoloLens map more efficiently.
+
+### Look in all directions
+
+Looking around as you map the space gives the HoloLens more data on where points are relative to each other.
+
+If you don't look up, for example, the HoloLens may not know where the ceiling in a room is.
+
+Don't forget to look down at the floor as you map the space.
+
+### Cover key areas multiple times
+
+Moving through an area multiple times will help pick up features you may have missed on the first walkthrough. Try traversing an area two to three times to build an ideal map.
+
+If possible, while repeating these movements, spend time walking through an area in one direction, then turn around and walk back the way you came.
+
+### Take your time mapping the area
+
+It can take between 15 and 20 minutes for the HoloLens to fully map and adjust itself to its surroundings. If you have a space in which you plan to use a HoloLens frequently, taking that time up front to map the space can prevent issues later on.
+
+## Possible errors in the spatial map
+
+Errors in spatial mapping data fall into one of three categories:
+
+- *Holes*: Real-world surfaces are missing from the spatial mapping data.
+- *Hallucinations*: Surfaces exist in the spatial mapping data that do not exist in the real world.
+- *Wormholes*: HoloLens 'loses' part of the spatial map by thinking it is in a different part of the map than it actually is.
+- *Bias*: Surfaces in the spatial mapping data are imperfectly aligned with real-world surfaces, either pushed in or pulled out.
+
+If you see any of these errors please file feedback via [FeedbackHub](hololens-feedback.md).
+
+## Security and storage for spatial data
+
+Windows 10 version 1803 update for Microsoft HoloLens and later store mapping data in a local (on-device) database.
The map database is not exposed to a user of the device, even when plugged into a PC or when using the File Explorer app. When BitLocker is enabled, the stored map data is also encrypted with the entire volume.
Holograms that are anchored within the same map section are considered to be “nearby” in the current space.
+### Remove map data and known spaces from HoloLens
-## Frequently asked questions
-
-**How can I remove map data and known spaces from the HoloLens?**
-
-There are two options for deleting map data in **Settings > System > Holograms**:
+There are two options for deleting map data in **Settings > System > Holograms**:
- Select **Remove nearby holograms** to delete nearby holograms, clearing the map data and anchored holograms for the current space. A brand new map section would be created and stored in the database for that location while the device is used there. This option can be used to clear the map data for work without affecting any map data from home, for example.
- Select **Remove all holograms** to delete all holograms, clearing all locally stored map data and anchored holograms. No holograms will be rediscovered and any holograms need to be newly placed.
->[!NOTE]
->When you remove nearby or all holograms, HoloLens immediately starts scanning and mapping the current space.
+> [!NOTE]
+> When you remove nearby or all holograms, HoloLens immediately starts scanning and mapping the current space.
-**How does Wi-Fi data get used by HoloLens and where is the data stored?**
+### Wi-Fi data in spatial maps
As long as Wi-Fi is enabled, map data will be correlated with nearby Wi-Fi access points. There is no difference in behavior if a network is connected or just nearby. Network characteristics are not sent to Microsoft, and all Wi-Fi references are kept local on the HoloLens.
Wi-Fi characteristics are stored locally to help correlate hologram locations and map sections stored within HoloLens’ database of known spaces. It’s inaccessible to users, and not sent to Microsoft via the cloud or via telemetry.
-
-
-**Does HoloLens need to be connected to the internet?**
-
-No, internet connectivity is not required. Observed Wi-Fi access points are obtained without being connected or authenticated. It does not change functionality if the access points are internet connected or intranet/local only.
-
-
-
-
-
-**Since HoloLens no longer requires you to select a space when Wi-Fi is disabled, how does it find the space automatically?**
-
-If Wi-Fi is disabled, the space search can still happen; HoloLens will need to search more of the map data within the spaces database, and finding holograms can take longer.
+If Wi-Fi is disabled, the space search can still happen; HoloLens will need to search more of the map data within the spaces database, and finding holograms can take longer.
HoloLens will sense and remember spaces even when Wi-Fi is disabled, by securely storing the sensor data when holograms are placed. Without the Wi-Fi info, the space and holograms may be slower to recognize at a later time, as the HoloLens needs to compare active scans to all hologram anchors and map sections stored on the device in order to locate the correct portion of the map.
HoloLens will visually compare the current scanning data from the sensors to locally stored map sections in the entire spaces database. It will locate holograms faster if the Wi-Fi characteristics can be found, to narrow down the number of spaces to compare.
-
-
-
-
-
-
-
## Related topics
-- [Environment considerations for HoloLens](https://docs.microsoft.com/windows/mixed-reality/environment-considerations-for-hololens)
+- [Environment considerations for HoloLens](hololens-environment-considerations)
- [Spatial mapping design](https://docs.microsoft.com/windows/mixed-reality/spatial-mapping-design)
-- [HoloLens and holograms: FAQ](https://support.microsoft.com/help/13456/hololens-and-holograms-faq)
diff --git a/devices/hololens/hololens-use-apps.md b/devices/hololens/hololens-use-apps.md
deleted file mode 100644
index e3d0aba0a9..0000000000
--- a/devices/hololens/hololens-use-apps.md
+++ /dev/null
@@ -1,40 +0,0 @@
----
-title: Use apps on HoloLens
-description: Apps on HoloLens use either 2D view or holographic view.
-ms.assetid: 6bd124c4-731c-4bcc-86c7-23f9b67ff616
-ms.reviewer: jarrettrenshaw
-ms.date: 07/01/2019
-manager: v-miegge
-keywords: hololens
-ms.prod: hololens
-ms.sitesec: library
-author: v-miegge
-ms.author: v-miegge
-ms.topic: article
-ms.localizationpriority: medium
----
-
-# Use apps on HoloLens
-
-Apps on HoloLens use either 2D view or holographic view. Apps with 2D view look like windows, and apps with holographic view surround you and become the only app you see.
-
-## Open apps
-
-You'll find your apps either pinned to Start or in the All apps list. To get to the All apps list, use the bloom gesture to go to Start, then select **All apps**.
-
-On Start or in the All apps list, select an app. It will open in a good position for viewing.
-
->[!NOTE]
->- Up to three 2D app windows can be active at a time. You can open more, but only three will remain active.
->- Each open app can have one active window at a time, except Microsoft Edge, which can have up to three.
->- If you're having problems with apps, make sure there's enough light in your space, and walk around so HoloLens has a current scan. If you keep having trouble, see [HoloLens and holograms: FAQ](https://support.microsoft.com/help/13456/hololens-and-holograms-faq) for more info.
-
-## Move, resize, and rotate apps
-
-After opening an app, you can [change its position and size](https://support.microsoft.com/help/12634).
-
-## Close apps
-
-To close an app that uses 2D view, gaze at it, then select **Close**.
-
-To close an app that uses holographic view, use the bloom gesture to leave holographic view, then select **Close**.
diff --git a/devices/hololens/hololens1-basic-usage.md b/devices/hololens/hololens1-basic-usage.md
new file mode 100644
index 0000000000..df36fe9cc8
--- /dev/null
+++ b/devices/hololens/hololens1-basic-usage.md
@@ -0,0 +1,107 @@
+---
+title: Getting around HoloLens (1st gen)
+description: A brief tour of the HoloLens (1st gen) interface
+ms.assetid: 064f7eb0-190e-4643-abeb-ed3b09312042
+ms.date: 08/07/2019
+ms.reviewer: jarrettr
+keywords: hololens
+ms.prod: hololens
+ms.sitesec: library
+author: v-miegge
+ms.author: v-miegge
+ms.topic: article
+ms.localizationpriority: medium
+appliesto:
+- HoloLens (1st gen)
+---
+
+# Getting around HoloLens (1st gen)
+
+Ready to step into the world of holograms? Here's some information to get started.
+
+This guide provides an intro to mixed reality, gestures for interacting with holograms, and an intro to Windows Holographic.
+
+## Discover mixed reality
+
+On HoloLens, holograms blend with your physical environment to look and sound like they're part of your world. Even when holograms are all around you, you can still see your surroundings, move freely, and interact with other people and objects. We call this experience "mixed reality."
+
+The holographic frame positions your holograms where your eyes are most sensitive to detail, and the see-through lenses leave your peripheral vision unobscured. With spatial sound, you can pinpoint a hologram even if it’s behind you. And because HoloLens learns and understands your environment, you can place holograms on and around real objects—and so can your apps and games. So a character in a game might sit down on your sofa, or [space robots could bust out of your walls](https://www.microsoft.com/store/apps/9nblggh5fv3j).
+
+## Using gaze, gesture, voice
+
+Instead of pointing, clicking, or tapping, you'll use your gaze, your [voice](hololens-cortana.md), and gestures to select apps and holograms and to get around HoloLens.
+
+We'll walk you through the basics the first time you use your HoloLens. You'll also find a gesture tutorial on your Start menu—look for the Learn Gestures app.
+
+### Open the Start menu with bloom
+
+### Select holograms with gaze and air tap
+
+1. Gaze at the hologram you want to select.
+1. Point your index finger straight up toward the ceiling.
+1. Air tap: lower your finger, then quickly raise it.
+
+### Select a hologram by using your voice
+
+1. To bring up the gaze cursor, say “Select.” The gaze cursor is a dot that you move around by moving your head. You can use it to target voice commands with precision.
+
+1. Target the gaze cursor on the hologram that you want to select.
+
+1. To select the hologram, say "Select."
+
+## Holograms and apps
+
+Now it's time to put gestures to the test!
+
+You'll find your installed apps in the Start menu and there are more apps for HoloLens (1st gen) in the Microsoft Store.
+
+Open the Start menu and select an app!
+
+Using apps on HoloLens is a little different from on a PC: once you open an app, you'll need to place it in your world to run it. Place it wherever you'd like. Some apps use a 2D view and look like other Windows applications, other apps (holographic apps) use a 3D view and become the only app you see.
+
+Once you've placed an app, it will stay put until you remove it. You can move or resize 2D apps at any time.
+
+### Help! I don't see my holograms
+
+If you don’t see holograms you’ve placed using HoloLens, here are some things to try:
+
+- Make sure you’re looking in the right area - remember, holograms stay where you left them!
+- Make sure you're in a well-lit place without a lot of direct sunlight.
+- Use the Sensor Tuning app to tune the device sensors.
+- Go to **Settings** > **System** > **Spaces** and make sure the right space is loaded.
+
+## Help! I can’t place holograms on HoloLens
+
+If you’re using HoloLens and having trouble placing holograms, here are some things to try:
+
+- Make sure you’re in a well-lit room without a lot of direct sunlight.
+- Stand 1 to 3 meters from where you’re trying to place the hologram.
+- Don’t place holograms on black or reflective surfaces.
+- Walk around so HoloLens can rescan your surroundings.
+
+## Meet the HoloLens (1st gen) Clicker
+
+The [HoloLens (1st Gen) clicker](hololens-clicker.md) gives you another way to interact with holograms. [Pair it](hololens-connect-devices.md) with your HoloLens and then use it along with your gaze to select, scroll, and more.
+Learn to navigate around HoloLens (1st gen).
+
+## Using gaze, gesture, voice
+
+Instead of pointing, clicking, or tapping, you'll use your gaze, your [voice](hololens-cortana.md), and to select apps and holograms and to get around HoloLens. We'll walk you through the basics the first time you use your HoloLens. You'll also find a gesture tutorial on your Start menu—look for the Learn Gestures app.
+
+### Select holograms using gaze and gestures
+
+1. Gaze at the hologram you want to select.
+1. Point your index finger straight up toward the ceiling.
+1. Air tap: lower your finger, then quickly raise it.
+
+[Getting around HoloLens](https://support.microsoft.com/en-us/hub/4338666/hololens-help)
+
+[Use gestures](https://support.microsoft.com/en-us/help/12644)
+
+[Calibration](https://docs.microsoft.com/en-us/windows/mixed-reality/calibration)
+
+## Next Steps
+
+### Connect bluetooth devices
+
+### Explore holographic apps and services
diff --git a/devices/hololens/hololens1-clicker.md b/devices/hololens/hololens1-clicker.md
new file mode 100644
index 0000000000..6bfad16f71
--- /dev/null
+++ b/devices/hololens/hololens1-clicker.md
@@ -0,0 +1,105 @@
+---
+title: Use the HoloLens Clicker
+description: This article outlines how to use the HoloLens clicker, including clicker pairing, charging, and recovery.
+ms.assetid: 7d4a30fd-cf1d-4c9a-8eb1-1968ccecbe59
+ms.date: 08/15/2019
+manager: v-miegge
+keywords: hololens
+ms.prod: hololens
+ms.sitesec: library
+author: v-miegge
+ms.author: v-miegge
+ms.topic: article
+ms.localizationpriority: medium
+appliesto:
+- HoloLens (1st gen)
+---
+
+# HoloLens Clicker
+
+The clicker was designed specifically for HoloLens (1st gen) and gives you another way to interact with holograms. It comes with HoloLens (1st gen), in a separate box.
+
+Use it in place of hand gestures to select, scroll, move, and resize.
+
+## Clicker hardware and pairing
+
+The HoloLens (1st gen) clicker can do three things.
+
+1. Pair with HoloLens (1st gen) using bluetooth
+1. Charge
+1. (once paired) Click.
+
+It has a finger loop to make it easier to hold and an indicator light.
+
+
+
+### Pair the clicker with your HoloLens (1st gen)
+
+1. Use the bloom gesture to go to **Start**, select **Settings**, then **Devices** and verify that Bluetooth is on.
+1. On the clicker, press and hold the pairing button until the status light blinks white.
+1. On the pairing screen, select **Clicker**, then **Pair**.
+
+### Charge the Clicker
+
+When the clicker battery is low, the battery indicator will blink amber. Plug the Micro USB cable into a USB power supply to charge the device.
+
+### Clicker indicator lights
+
+Here's what the lights on the clicker mean.
+
+- **Blinking white**. The clicker is in pairing mode.
+- **Fast-blinking white**. Pairing was successful.
+- **Solid white**. The clicker is charging.
+- **Blinking amber**. The battery is low.
+- **Solid amber**. The clicker ran into an error and you'll need to restart it. While pressing the pairing button, click and hold for 15 seconds.
+
+## Use the Clicker with HoloLens (1st gen)
+
+### Hold the clicker
+
+To put on the clicker, slide the loop over your ring or middle finger with the Micro USB port toward your wrist. Rest your thumb in the indentation.
+
+
+
+### Clicker gestures
+
+Clicker gestures are small wrist rotations, not the larger movements used for HoloLens hand gestures. And HoloLens will recognize your gestures and clicks even if the clicker is outside the [gesture frame](hololens1-basic-usage.md), so you can hold the clicker in the position that's most comfortable for you.
+
+- **Select**. To select a hologram, button, or other element, gaze at it, then click.
+
+- **Click and hold**. Click and hold your thumb down on the button to do some of the same things you would with tap and hold, like move or resize a hologram.
+
+- **Scroll**. On the app bar, select **Scroll Tool**. Click and hold, then rotate the clicker up, down, left, or right. To scroll faster, move your hand farther from the center of the scroll tool.
+
+- **Zoom**. On the app bar, select **Zoom Tool**. Click and hold, then rotate the clicker up to zoom in, or down to zoom out.
+
+>[!TIP]
+>In Microsoft Edge, gaze at a page and double-click to zoom in or out.
+
+## Restart or recover the Clicker
+
+Here are some things to try if the HoloLens clicker is unresponsive or isn’t working well.
+
+### Restart the Clicker
+
+Use the tip of a pen to press and hold the pairing button.
+
+At the same time, click and hold the clicker for 15 seconds. If the clicker was already paired with your HoloLens, it will stay paired after it restarts.
+
+If the clicker won't turn on or restart, try charging it using the HoloLens charger. If the battery is very low, it might take a few minutes for the white indicator light to turn on.
+
+### Re-pair the clicker
+
+Go to **Settings** > **Devices** and select the clicker. Select **Remove**, wait a few seconds, then pair the clicker again.
+
+### Recover the clicker
+
+If restarting and re-pairing the clicker don’t fix the problem, the Windows Device Recovery Tool can help you recover it. The recovery process may take some time, and the latest version of the clicker software will be installed. To use the tool, you’ll need a computer running Windows 10 or later with at least 4 GB of free storage space.
+
+To recover the clicker:
+
+1. Download and install the [Windows Device Recovery Tool](https://dev.azure.com/ContentIdea/ContentIdea/_queries/query/8a004dbe-73f8-4a32-94bc-368fc2f2a895/) on your computer.
+1. Connect the clicker to your computer using the Micro USB cable that came with your HoloLens.
+1. Run the Windows Device Recovery Tool and follow the instructions.
+
+If the clicker isn’t automatically detected, select **My device was not detected** and follow the instructions to put your device into recovery mode.
diff --git a/devices/hololens/hololens1-hardware.md b/devices/hololens/hololens1-hardware.md
new file mode 100644
index 0000000000..ce5dffd21c
--- /dev/null
+++ b/devices/hololens/hololens1-hardware.md
@@ -0,0 +1,157 @@
+---
+title: HoloLens (1st gen) hardware
+description: An outline of the components that make up Microsoft HoloLens (1st gen), the world's first fully untethered holographic computer running Windows.
+ms.assetid: 527d494e-2ab6-46ca-bd5a-bfc6b43cc833
+ms.date: 08/07/2019
+keywords: hololens
+ms.prod: hololens
+ms.sitesec: library
+author: mattzmsft
+ms.author: mazeller
+ms.topic: article
+ms.localizationpriority: medium
+appliesto:
+- HoloLens (1st gen)
+---
+
+# HoloLens (1st Gen) hardware
+
+
+
+Microsoft HoloLens (1st gen) is the world's first fully untethered holographic computer. HoloLens redefines personal computing through holographic experiences to empower you in new ways. HoloLens blends cutting-edge optics and sensors to deliver 3D holograms pinned to the real world around you.
+
+## HoloLens components
+
+
+
+Your HoloLens includes the following features:
+
+- **Visor**. Contains the HoloLens sensors and displays. You can rotate the visor up while you are wearing the HoloLens.
+- **Headband**. To put the HoloLens on, use the adjustment wheel to expand the headband. With the HoloLens in place, tighten the adjustment wheel until the headband is comfortable.
+- **Brightness buttons**. When you're wearing the HoloLens, the brightness buttons are on the left side of the device.
+- **Volume buttons**. When you're wearing the HoloLens, the volume buttons are on the right side of the device.- .
+- **Device arms**. When you pick up, put on, or take off your HoloLens, always grasp or hold it by the device arms.
+
+## In the box
+
+> [!VIDEO https://www.microsoft.com/videoplayer/embed/c7ceb904-9d5f-4194-9e10-e8a949dbad7d]
+
+The HoloLens box contains the following items:
+
+- **Nose pads**. Select a nose pad that fits the shape of your nose and accommodates your eyewear.
+- **Overhead strap**. When you're wearing the HoloLens while you move around, use the overhead strap to help keep the device in place. Additionally, if you're wearing the HoloLens for extended periods, using the overhead strap may make the device more comfortable to wear.
+- **Micro USB cable**. Use the micro-USB cable to connect your HoloLens to the power supply for charging, or use it to connect your HoloLens to your computer.
+- **Power supply**. Plugs into a power outlet.
+- **Microfiber cloth**. Use the cloth to clean your HoloLens visor.
+
+>[!TIP]
+>The [clicker](hololens1-clicker.md) ships with HoloLens (1st Gen), in a separate box.
+
+## Device Specifications
+
+### Display
+
+
+
+| | |
+| - | - |
+| Optics | See-through holographic lenses (waveguides) |
+| Holographic resolution | 2 HD 16:9 light engines producing 2.3M total light points |
+| Holographic density | >2.5k radiants (light points per radian) |
+| Eye-based rendering | Automatic pupillary distance calibration |
+
+### Sensors
+
+
+
+- 1 IMU
+- 4 environment understanding cameras
+- 1 depth camera
+- 1 2MP photo / HD video camera
+- Mixed reality capture
+- 4 microphones
+- 1 ambient light sensor
+
+### Input / Output / Connectivity
+
+- Built-in speakers
+- Audio 3.5mm jack
+- Volume up/down
+- Brightness up/down
+- Power button
+- Battery status LEDs
+- Wi-Fi 802.11ac
+- Micro USB 2.0
+- Bluetooth 4.1 LE
+
+### Power
+
+- Battery Life
+- 2-3 hours of active use
+- Up to 2 weeks of standby time
+- Fully functional when charging
+- Passively cooled (no fans)
+
+### Processors
+
+
+
+- Intel 32-bit architecture with TPM 2.0 support
+- Custom-built Microsoft Holographic Processing Unit (HPU 1.0)
+
+### Memory
+
+- 64 GB Flash
+- 2 GB RAM
+
+### Fit
+
+| | |
+| - | - |
+| Sizing | Single size with adjustable band. Fits over glasses |
+| Weight | 579 grams |
+
+## Device capabilities
+
+Human understanding using:
+
+- Gaze tracking
+- Gesture input
+- Voice support
+
+Environmental understanding via:
+
+- Spatial sound
+
+## Pre-installed software
+
+- Windows 10
+- Windows Store
+- Holograms
+- Microsoft Edge
+- Photos
+- Settings
+- Windows Feedback
+- Calibration
+- Learn Gestures
+
+## Device certifications
+
+### Safety
+
+HoloLens has been tested and found to conform to the basic impact protection requirements of ANSI Z87.1, CSA Z94.3 and EN 166
+
+## Care and cleaning
+
+Handle your HoloLens carefully. Use the device arms—not the overhead strap—to lift, carry, and adjust it. To keep the visor free of dust and fingerprints, avoid touching it. Repeated cleaning could damage the visor, so try to keep your device clean.
+
+Don't use any cleaners or solvents on your HoloLens, and don't submerge it in water or apply water directly to it.
+
+To clean the visor, remove any dust using a camel or goat hair lens brush or a bulb-style lens blower. Lightly moisten the microfiber cloth with a small amount of distilled water, then use it to wipe the visor gently in a circular motion.
+
+Clean the rest of the device, including the headband and device arms, with a lint-free cloth moistened with mild soap and water. Let your HoloLens dry completely before using it again.
+
+
+
+> [!div class="nextstepaction"]
+> [Set up and start your HoloLens (1st gen)](hololens1-setup.md)
diff --git a/devices/hololens/hololens-install-localized.md b/devices/hololens/hololens1-install-localized.md
similarity index 71%
rename from devices/hololens/hololens-install-localized.md
rename to devices/hololens/hololens1-install-localized.md
index 0d3b2aecfb..ddd16a9b58 100644
--- a/devices/hololens/hololens-install-localized.md
+++ b/devices/hololens/hololens1-install-localized.md
@@ -11,26 +11,27 @@ ms.localizationpriority: medium
ms.date: 11/13/2018
ms.reviewer:
manager: dansimp
+appliesto:
+- HoloLens (1st gen)
---
-# Install localized versions of HoloLens
+# Install localized versions of HoloLens 91st gen)
+
+In order to switch to the Chinese or Japanese version of HoloLens, you’ll need to download the build for the language on a PC and then install it on your HoloLens using the Windows Device Recovery Tool (WDRT).
-In order to switch to the Chinese or Japanese version of HoloLens, you’ll need to download the build for the language on a PC and then install it on your HoloLens using the Windows Device Recovery Tool (WDRT).
-
>[!IMPORTANT]
>Installing the Chinese or Japanese builds of HoloLens using WDRT will delete existing data, like personal files and settings, from your HoloLens.
-
-
-2. On your PC, download and install [the Windows Device Recovery Tool (WDRT)](https://support.microsoft.com/help/12379).
-3. Download the package for the language you want to your PC: [Simplified Chinese](https://aka.ms/hololensdownload-ch) or [Japanese](https://aka.ms/hololensdownload-jp).
-4. When the download is finished, select **File Explorer > Downloads**. Right-click the zipped folder you just downloaded, and select **Extract all... > Extract** to unzip it.
-5. Connect your HoloLens to your PC using the micro-USB cable it came with. (Even if you've been using other cables to connect your HoloLens, this one works best.)
-6. The tool will automatically detect your HoloLens. Select the Microsoft HoloLens tile.
-7. On the next screen, select **Manual package selection** and choose the installation file contained in the folder you unzipped in step 4. (Look for a file with the extension “.ffu”.)
-8. Select **Install software** and follow the instructions to finish installing.
-9. Once the build is installed, HoloLens setup will start automatically. Put on the device and follow the setup directions.
-
-When you’re done with setup, go to **Settings -> Update & Security -> Windows Insider Program** and check that you’re configured to receive the latest preview builds. The Chinese/Japanese version of HoloLens will be kept up-to-date with the latest preview builds via the Windows Insider Program the same way the English version is.
+
+1. On your PC, download and install [the Windows Device Recovery Tool (WDRT)](https://support.microsoft.com/help/12379).
+1. Download the package for the language you want to your PC: [Simplified Chinese](https://aka.ms/hololensdownload-ch) or [Japanese](https://aka.ms/hololensdownload-jp).
+1. When the download is finished, select **File Explorer > Downloads**. Right-click the zipped folder you just downloaded, and select **Extract all... > Extract** to unzip it.
+1. Connect your HoloLens to your PC using the micro-USB cable it came with. (Even if you've been using other cables to connect your HoloLens, this one works best.)
+1. The tool will automatically detect your HoloLens. Select the Microsoft HoloLens tile.
+1. On the next screen, select **Manual package selection** and choose the installation file contained in the folder you unzipped in step 4. (Look for a file with the extension “.ffu”.)
+1. Select **Install software** and follow the instructions to finish installing.
+1. Once the build is installed, HoloLens setup will start automatically. Put on the device and follow the setup directions.
+
+When you’re done with setup, go to **Settings -> Update & Security -> Windows Insider Program** and check that you’re configured to receive the latest preview builds. The Chinese/Japanese version of HoloLens will be kept up-to-date with the latest preview builds via the Windows Insider Program the same way the English version is.
## Note for language support
diff --git a/devices/hololens/hololens1-setup.md b/devices/hololens/hololens1-setup.md
new file mode 100644
index 0000000000..ef4fe7a898
--- /dev/null
+++ b/devices/hololens/hololens1-setup.md
@@ -0,0 +1,102 @@
+---
+title: Set up a new HoloLens
+description: This guide walks through first time set up.
+ms.prod: hololens
+ms.sitesec: library
+author: JesseMcCulloch
+ms.author: jemccull
+ms.topic: article
+ms.localizationpriority: medium
+ms.date: 8/12/19
+ms.reviewer:
+manager: jarrettr
+appliesto:
+- Hololens (1st gen)
+---
+
+# Set up HoloLens (1st gen)
+
+Follow along to set up a HoloLens (1st gen) for the first time.
+
+## Charge your HoloLens (1st gen)
+
+To charge your HoloLens, connect the power supply to the charging port using the included Micro USB cable. Then plug the power supply into a power outlet. When the device is charging, the battery indicator will light up in a wave pattern.
+
+
+
+When your HoloLens is on, the battery indicator shows the battery level in increments. When only one of the five lights is on, the battery level is below 20 percent. If the battery level is critically low and you try to turn on the device, one light will blink briefly, then go out.
+
+> [!TIP]
+> To get an estimate of your current battery level, say "Hey Cortana, how much battery do I have left?"
+
+## Adjust fit
+
+> [!VIDEO https://www.microsoft.com/videoplayer/embed/be3cb527-f2f1-4f85-b4f7-a34fbaba980d]
+
+| | |
+|:--- |:--- |
+|1. Rotate the headband up to about 20-30 degrees.||
+|2. Push the headband back. Do not pull it back, or manipulate the band behind the hinge, as this can break the band over time.||
+|3. Turn the adjustment wheel to extend the headband all the way out. Show the user where the band should rest on the forehead, and show them the adjustment wheel.||
+|4. Hold the headband for the user, and have them grab the arms of the device and place in on their head. Make sure the band rests in the correct spot, and let them tighten the adjustment wheel. Slide the visor back.||
+|5. The headband should sit at the top of the forehead, just below your hairline, with the speakers above the ears. By looking at them from the front, you should be able to tell that the lenses are centered over their eyes.||
+
+## Turn on your HoloLens
+
+Use the power button to turn HoloLens on and off or put it in standby mode.
+
+If your device doesn't respond or won't start, see [Restart, reset, or recover HoloLens](hololens-restart-recover.md).
+
+
+
+When your HoloLens is off or in standby, turn it on by pressing the power button for one second. If it doesn't turn on, plug it in and charge it for at least 30 minutes.
+
+> [!TIP]
+> To restart HoloLens, say "Hey Cortana, reboot the device."
+
+### Put HoloLens in standby
+
+To put your HoloLens in standby when it's turned on, press the power button once. The battery indicators blink off. To wake it from standby, press the power button again.
+
+HoloLens automatically goes into standby after 3 minutes of inactivity. When it's in standby, it automatically shuts down after 4 hours, or after the battery level drops by 10 percent.
+
+### Shut down HoloLens
+
+To shut down (turn off) HoloLens, hold the power button down for four seconds. The battery indicators turn off one by one and the device will shut down.
+
+HoloLens automatically shuts down when the battery level drops to one percent, even if it's plugged in. After you've recharged the battery to three percent, you'll be able to turn HoloLens on again.
+
+## Adjust volume and brightness
+
+The brightness and volume buttons are on top of the device arms - volume to your right and brightness to your left.
+
+
+
+## HoloLens indicator lights
+
+
+
+Not sure what the indicator lights on your HoloLens mean? Here's some help.
+
+|When the lights do this |It means |
+| - | - |
+|Scroll from the center outward. |HoloLens is starting up. |
+|Stay lit (all or some). |HoloLens is on and ready to use. Battery life is shown in 20 percent increments. |
+|Scroll, then light up, then scroll. |HoloLens is on and charging. Battery life is shown in 20 percent increments. |
+|Turn off one by one. |HoloLens is shutting down. |
+|Turn off all at once. |HoloLens is going into standby. |
+|All light up, then one blinks briefly, then all turn off. |Battery is critically low. HoloLens needs to charge. |
+|All scroll, then one blinks, then all scroll. |Battery is critically low. HoloLens is charging. |
+
+## Safety and Comfort
+
+### Use in safe surroundings
+
+Use your HoloLens in a safe space that’s free of obstructions and tripping hazards. Don’t use it when you need a clear field of view and your full attention, such as while you’re operating a vehicle or doing other potentially hazardous activities.
+
+### Stay comfortable
+
+Keep your first few sessions with HoloLens brief and be sure to take breaks. If you experience discomfort, stop and rest until you feel better. This might include temporary feelings of nausea, motion sickness, dizziness, disorientation, headache, fatigue, eye strain, or dry eyes.
+
+> [!div class="nextstepaction"]
+> [Start and configure your HoloLens (1st gen)](hololens1-start.md)
diff --git a/devices/hololens/hololens-start.md b/devices/hololens/hololens1-start.md
similarity index 66%
rename from devices/hololens/hololens-start.md
rename to devices/hololens/hololens1-start.md
index d303ee0c44..2ab228497f 100644
--- a/devices/hololens/hololens-start.md
+++ b/devices/hololens/hololens1-start.md
@@ -1,6 +1,6 @@
---
title: HoloLens (1st gen) first start
-description: Go through the first start experience for HoloLens (1st gen).
+description: This guide walks through first time set up. You'll need a Wi-Fi network and either a Microsoft (MSA) or Azure Active Directory (AAD) account.
ms.assetid: 0136188e-1305-43be-906e-151d70292e87
ms.prod: hololens
author: Teresa-Motiv
@@ -10,19 +10,21 @@ ms.date: 8/12/19
manager: jarrettr
ms.topic: article
ms.localizationpriority: medium
+appliesto:
+- HoloLens (1st gen)
---
# Set up HoloLens for the first time
The first time you turn on your HoloLens, you'll be guided through calibrating your device, setting up your device, and signing in. This section walks through the HoloLens (1st gen) first start experience.
-In the next section, you'll learn how to work with HoloLens and interact with holograms. Skip ahead to [Get started with HoloLens (1st gen)](holographic-home.md)
+In the next section, you'll learn how to work with HoloLens and interact with holograms. Skip ahead to [Get started with HoloLens (1st gen)](hololens1-basic-usage.md).
## Before you start
Before you get started, make sure you have the following available:
-**A Wi-Fi connection**. You'll need to connect your HoloLens to a Wi-Fi network to set it up. The first time you connect, you'll need an open or password-protected network that doesn't require navigating to a website or using certificates to connect. After setup, you can [use your device offline](hololens-offline.md).
+**A Wi-Fi connection**. You'll need to connect your HoloLens to a Wi-Fi network to set it up. The first time you connect, you'll need an open or password-protected network that doesn't require navigating to a website or using certificates to connect. Setup uses [the following websites](hololens-offline.md).
**A Microsoft account**. You'll also need to sign in to HoloLens with a Microsoft account (or with your work account, if your organization owns the device). If you don't have a Microsoft account, go to [account.microsoft.com](http://account.microsoft.com) and set one up for free.
@@ -33,11 +35,15 @@ Before you get started, make sure you have the following available:
> [!NOTE]
> [Cortana](hololens-cortana.md) is already on and ready to guide you the first time you use your HoloLens (though she won't be able to respond to your questions until after you set up your device). You can turn Cortana off at any time in Cortana's settings.
-## Set up your HoloLens
+## Set up Windows
-Set up your HoloLens and your user account.
+Set up your Windows Holographic on your HoloLens (1st gen).
+
+> In order to switch to the Chinese or Japanese version of HoloLens, you’ll need to download the build for the language on a PC and then install it on your HoloLens.
+Instructions [here](hololens1-install-localized.md).
+
+1. Connect to the internet (select Wi-Fi).
-1. The first time you use your HoloLens, you'll be guided through connecting to a Wi-Fi network. If you have trouble connecting to Wi-Fi during setup, make sure your network is either open, password protected, or a captive portal network and doesn't require using certificates to connect. After setup, you can connect to other types of Wi-Fi networks.
1. Sign in to your user account. You'll choose between **My work or school owns it** and **I own it**.
- When you choose **My work or school owns it**, you sign in by using an Azure AD account. If your organization uses Azure AD Premium and has configured automatic MDM enrollment, HoloLens will be enrolled in MDM. If your organization does not use Azure AD Premium, automatic MDM enrollment isn't available, so you will need to [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
1. Enter your organizational account information.
@@ -47,11 +53,24 @@ Set up your HoloLens and your user account.
- When you choose **I own it**, you sign in by using a Microsoft account. After setup is complete, you can [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
1. Enter your Microsoft account information.
1. Enter your password. If your Microsoft account requires [two-step verification (2FA)](https://blogs.technet.microsoft.com/microsoft_blog/2013/04/17/microsoft-account-gets-more-secure/), complete the verification process.
+
1. The device sets your time zone based on information obtained from the Wi-Fi network.
-1. Follow the first-start guides to learn how to interact with holograms, control the HoloLens with your voice, and access the start menu.
+
+## Calibration
+
+After Cortana introduces herself, the next setup step is calibration. For the best HoloLens experience, you should complete calibration during setup.
+
+HoloLens (1st gen) uses the distance between your pupils (IPD or [interpupillary distance](https://en.wikipedia.org/wiki/Interpupillary_distance)) to make holograms clear and easy to interact with. With an incorrect IPD, holograms may appear unstable or at an incorrect distance.
+
+During calibration, users are asked to align their finger with a series of six targets per eye. Through this process, HoloLens sets the correct IPD for the user. If the calibration needs to be updated or adjusted for a new user, it can be run outside of setup using the Calibration app.
+
+
+
+*IPD finger-alignment screen at second step*
Congratulations! Setup is complete and you can begin using HoloLens.
## Next steps
-- [Get started with HoloLens (1st gen)](holographic-home.md)
+> [!div class="nextstepaction"]
+> [Get started with HoloLens (1st gen)](hololens1-basic-usage.md)
diff --git a/devices/hololens/hololens-upgrade-enterprise.md b/devices/hololens/hololens1-upgrade-enterprise.md
similarity index 57%
rename from devices/hololens/hololens-upgrade-enterprise.md
rename to devices/hololens/hololens1-upgrade-enterprise.md
index 57bf3d0e04..54fcc86256 100644
--- a/devices/hololens/hololens-upgrade-enterprise.md
+++ b/devices/hololens/hololens1-upgrade-enterprise.md
@@ -14,18 +14,14 @@ manager: dansimp
# Unlock Windows Holographic for Business features
-
-
-Microsoft HoloLens is available in the *Development Edition*, which runs Windows Holographic (an edition of Windows 10 designed for HoloLens), and in the [Commercial Suite](https://docs.microsoft.com/windows/mixed-reality/commercial-features), which provides extra features designed for business.
+Microsoft HoloLens is available in the *Development Edition*, which runs Windows Holographic (an edition of Windows 10 designed for HoloLens), and in the [Commercial Suite](hololens-commercial-features.md), which provides extra features designed for business.
When you purchase the Commercial Suite, you receive a license that upgrades Windows Holographic to Windows Holographic for Business. This license can be applied to the device either through the organization's [mobile device management (MDM) provider](#edition-upgrade-using-mdm) or a [provisioning package](#edition-upgrade-using-a-provisioning-package).
->[!TIP]
->In Windows 10, version 1803, you can tell that the HoloLens has been upgraded to the business edition in **Settings** > **System**.
+> [!TIP]
+> In Windows 10, version 1803, you can tell that the HoloLens has been upgraded to the business edition in **Settings** > **System**.
-
-
-## Edition upgrade using MDM
+## Edition upgrade using MDM
The enterprise license can be applied by any MDM provider that supports the [WindowsLicensing configuration service provider (CSP)](https://msdn.microsoft.com/library/windows/hardware/dn904983.aspx). The latest version of the Microsoft MDM API will support WindowsLicensing CSP.
@@ -33,70 +29,61 @@ For step-by-step instructions for upgrading HoloLens using Microsoft Intune, see
On other MDM providers, the specific steps for setting up and deploying the policy might vary.
-
-
## Edition upgrade using a provisioning package
-Provisioning packages are files created by the Windows Configuration Designer tool that apply a specified configuration to a device.
+Provisioning packages are files created by the Windows Configuration Designer tool that apply a specified configuration to a device.
### Create a provisioning package that upgrades the Windows Holographic edition
-1. [Create a provisioning package for HoloLens.](hololens-provisioning.md)
-
-2. Go to **Runtime settings** > **EditionUpgrade**, and select **EditionUpgradeWithLicense**.
+1. [Create a provisioning package for HoloLens.](hololens-provisioning.md)
+1. Go to **Runtime settings** > **EditionUpgrade**, and select **EditionUpgradeWithLicense**.

-2. Browse to and select the XML license file that was provided when you purchased the Commercial Suite.
+1. Browse to and select the XML license file that was provided when you purchased the Commercial Suite.
- >[!NOTE]
- >You can configure [additional settings in the provisioning package](hololens-provisioning.md).
+ > [!NOTE]
+ > You can configure [additional settings in the provisioning package](hololens-provisioning.md).
-3. On the **File** menu, click **Save**.
+1. On the **File** menu, click **Save**.
-4. Read the warning that project files may contain sensitive information, and click **OK**.
+1. Read the warning that project files may contain sensitive information, and click **OK**.
- >[!IMPORTANT]
- >When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed.
-
-3. On the **Export** menu, click **Provisioning package**.
+ > [!IMPORTANT]
+ > When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed.
-4. Change **Owner** to **IT Admin**, which will set the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select **Next**.
+1. On the **Export** menu, click **Provisioning package**.
-5. Set a value for **Package Version**.
+1. Change **Owner** to **IT Admin**, which will set the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select **Next**.
- >[!TIP]
- >You can make changes to existing packages and change the version number to update previously applied packages.
+1. Set a value for **Package Version**.
-6. On the **Select security details for the provisioning package**, click **Next**.
+ > [!TIP]
+ > You can make changes to existing packages and change the version number to update previously applied packages.
-7. Click **Next** to specify the output location where you want the provisioning package to go once it's built. By default, Windows ICD uses the project folder as the output location.
+1. On the **Select security details for the provisioning package**, click **Next**.
+
+1. Click **Next** to specify the output location where you want the provisioning package to go once it's built. By default, Windows ICD uses the project folder as the output location.
Optionally, you can click **Browse** to change the default output location.
-8. Click **Next**.
+1. Click **Next**.
-9. Click **Build** to start building the package. The project information is displayed in the build page and the progress bar indicates the build status.
-
-10. When the build completes, click **Finish**.
+1. Click **Build** to start building the package. The project information is displayed in the build page and the progress bar indicates the build status.
+1. When the build completes, click **Finish**.
### Apply the provisioning package to HoloLens
1. Connect the device via USB to a PC and start the device, but do not continue past the **fit** page of the initial setup experience (the first page with the blue box). HoloLens will show up as a device in File Explorer on the PC.
- >[!NOTE]
- >If the HoloLens device is running Windows 10, version 1607 or earlier, briefly press and release the **Volume Down** and **Power** buttons simultaneously to open File Explorer.
-
-4. In File Explorer, drag and drop the provisioning package (.ppkg) onto the device storage.
-
-5. Briefly press and release the **Volume Down** and **Power** buttons simultaneously again while on the **fit** page.
-
-6. The device will ask you if you trust the package and would like to apply it. Confirm that you trust the package.
-
-7. You will see whether the package was applied successfully or not. If it failed, you can fix your package and try again. If it succeeded, proceed with device setup.
-
+ > [!NOTE]
+ > If the HoloLens device is running Windows 10, version 1607 or earlier, briefly press and release the **Volume Down** and **Power** buttons simultaneously to open File Explorer.
+1. In File Explorer, drag and drop the provisioning package (.ppkg) onto the device storage.
+1. Briefly press and release the **Volume Down** and **Power** buttons simultaneously again while on the **fit** page.
+1. The device will ask you if you trust the package and would like to apply it. Confirm that you trust the package.
+1. You will see whether the package was applied successfully or not. If it failed, you can fix your package and try again. If it succeeded, proceed with device setup.
diff --git a/devices/hololens/hololens2-basic-usage.md b/devices/hololens/hololens2-basic-usage.md
new file mode 100644
index 0000000000..55c53435ca
--- /dev/null
+++ b/devices/hololens/hololens2-basic-usage.md
@@ -0,0 +1,202 @@
+---
+title: Getting around HoloLens 2
+description: A brief tour of the HoloLens 2 interface
+ms.assetid: 5f791a5c-bdb2-4c5d-bf46-4a198de68f21
+ms.date: 08/07/2019
+keywords: hololens
+ms.prod: hololens
+ms.sitesec: library
+author: scooley
+ms.author: scooley
+ms.topic: article
+ms.localizationpriority: medium
+appliesto:
+- HoloLens 2
+---
+
+# Getting around HoloLens 2
+
+Ready to step into the world of holograms?
+
+This guide provides an intro to:
+
+- mixed reality
+- using your hands and voice for interacting with holograms on HoloLens 2
+- navigating Windows 10 on HoloLens (Windows Holographic)
+
+## Discover mixed reality
+
+On HoloLens, holograms blend the digital world with your physical environment to look and sound like they're part of your world. Even when holograms are all around you, you can always see your surroundings, move freely, and interact with people and objects. We call this experience "mixed reality".
+
+The holographic frame positions your holograms where your eyes are most sensitive to detail and the see-through lenses leave your peripheral vision unobscured. With spatial sound, you can pinpoint a hologram even if it’s behind you using sound. And, because HoloLens understands your physical environment, you can place holograms on and around real objects like tables and walls.
+
+## Use HoloLens with your hands
+
+Getting around HoloLens is a lot like using your smart phone. You can use your hands to manipulate holographic windows, menus, and buttons.
+
+Once you know these basic interactions, getting around on HoloLens will be a snap.
+
+> [!TIP]
+> If you have a HoloLens near you right now, the **Tips** app gives you a hands-on tutorials for hand interactions on HoloLens.
+> Use the Start gesture to go to **Start** or say "Go to Start" and select **Tips**.
+
+### The hand-tracking frame
+
+HoloLens has sensors that can see a few feet to either side of you. When you use your hands, you'll need to keep them inside that frame, or HoloLens won't see them. As you move around, the frame moves with you.
+
+
+
+### Hand rays
+
+Use hand rays to interact with holograms from a distance. When your hands are not in the vicinity of any holograms, hand rays automatically appear from your palms. Use hand rays while performing the air-tap and air-tap and hold gestures.
+
+> [!TIP]
+> If you find hand rays distracting, you can hide them by saying “Hide hand rays”. To make them reappear, say "Show hand rays."
+
+### The Grab gesture
+
+To perform the grab gesture, pinch your thumb and index finger together and hold. To let go, release your fingers. Use the grab gesture to move, resize, and rotate app windows and 3D objects.
+
+### The Air-tap gesture
+
+To select an app or other hologram, air tap it while using hand rays. To do this, follow these steps:
+
+1. Use a had ray from your palm to target a hologram. You don't have to raise your whole arm—keep your elbow low and comfortable.
+1. To perform the air-tap gesture, pinch your thumb and index finger together and then quickly release them.
+
+ 
+
+### Tap-and-hold gesture
+
+To tap and hold an app or other hologram, start with an air tap, but keep your fingers together instead of releasing them.
+
+Use tap and hold to perform the following actions:
+
+- **Scroll**. To scroll content, tap and hold on the content and then slowly move your hand up and down or side to side.
+- **Grab**. To grab an app or hologram, target the app or hologram by using a hand ray and then tap and hold.
+- **Open context menus**. To open context menus, tap and hold is the equivalent of press and hold on a touch screen.
+
+## Voice commands
+
+You can use your voice to do many of the same things you do with gestures on HoloLens, like taking a quick photo or opening an app.
+
+| To do this | Say this |
+| - | - |
+| Open the Start menu | "Go to Start" |
+| Select | Say "select" to bring up the gaze cursor. Then, turn your head to position the cursor on the thing you want to select, and say “select” again. |
+| Leave an immersive app | Say "Go to Start" to bring up the quick actions menu, then say "Mixed reality home." |
+| See available speech commands | "What can I say?" |
+
+### See it, say it
+
+Many buttons and other elements on HoloLens also respond to your voice—for example, **Adjust** and **Close** on the app bar. To find out if a button is voice-enabled, rest your gaze on it for a moment. If it is, you'll see a voice tip.
+
+## Navigate Windows Holographic
+
+Now that you can use air touch, grab, and hand-rays, let's try using these gestures to move through the holographic world and explore Windows Holographic.
+
+You'll find your installed apps on the Start menu and there are more apps for HoloLens 2 in the Microsoft Store.
+
+Open the Start menu and select an app!
+
+### Open the Start menu
+
+The Start gesture opens the **Start** menu. To perform the Start gesture, hold out your hand with your palm facing you. You’ll see a **Start** icon appear over your inner wrist. Tap this icon using your other hand. The **Start** menu opens where you’re looking.
+
+You can use the Start gesture as long as your hands are inside the hand-tracking frame. You do not need to be looking down at the **Start** icon.
+
+
+
+Alternatively, you can also perform the Start gesture with one hand. To do this, hold out your hand with your palm facing you and look at the **Start** icon on your inner wrist. While looking at the icon, pinch your thumb and index finger together. This action opens the **Start** menu.
+
+> [!IMPORTANT]
+> For the one-handed Start gesture to work, your device must be calibrated to your eyes so that eye-tracking functions correctly.
+
+
+
+We'll talk more about voice commands later, but you can also open the **Start** menu by saying "Go to Start."
+
+### Open apps
+
+Now that the start menu is open, select an apps using touch. We'll use the Tips app as an example.
+
+1. bring your hand close to the **Start** menu and **Tips** app.
+1. look for a white ring to appear on your index fingertip on the **Tips** icon.
+1. move to touch the white ring/hologram. **Tips** should open as a Hologram with a play button.
+
+When you open an app, it will appear right in front of you. Some apps use a 2D view and look like other Windows applications, other apps (holographic apps) use a 3D view and appear as a cube with a hologram icon.
+
+For example, **Tips** is a holographic app while **Settings** is a 2D app.
+
+### Move and resize near-by holograms and apps by grabbing them
+
+To perform the grab gesture, pinch your thumb and index finger together and hold. To let go, release your fingers. Use the grab gesture to move, resize, and rotate app windows and 3D objects.
+
+Move a hologram or app by:
+
+1. Grabbing the hologram - pinch your index finger and thumb on the hologram it or close your fist facing down.
+1. Without letting go, move your hand to position the hologram. When moving an app window this way, the app window will automatically turn to face you as it moves, making it easier to use at its new position.
+1. Release your fingers to place it
+
+> [!TIP]
+> If you're having trouble moving a 2D app, try grabbing the top tool bar.
+
+Resize a hologram close to you by:
+
+1. move one hand close to one edge of the hologram and your other hand to the other
+1. Grab the edges of the hologram with both hands
+1. Move your hands closer together to shrink the hologram and further apart ot make it bigger
+1. release your fingers to keep the current size
+
+### Move and resize further-away holograms and apps using hand rays
+
+To move a hologram that's further away from you:
+
+1. Target your hand ray on the hologram.
+1. Pinch (air-tap) and hold to grab it.
+1. Without letting go, move your hand to position the hologram.
+1. Release your fingers to place it.
+
+> [!TIP]
+> If you're having trouble moving a 2D app, try grabbing the top tool bar.
+
+There are two ways o resize a hologram that's further away from you. You can either use the resize tool or grab two corners of the hologram.
+
+Resize an app or hologram with two hands by grabbing the corners:
+
+1. Point one hand ray at one corner of the hologram and the other hand ray at another corner
+1. Grab the resize controls on the window corners with your hand rays.
+1. Do air-tap and hold gesture, then as you move your hands closer together and apart the window will resize. You can also move your hands closer and further away from your body to rotate the window (on Y axis).
+
+Resize an app or hologram with the resize control:
+
+1. Move your hand close to the window. You’ll see resize controls appear on the corners of the app window.
+1. Grab the resize control by pinching your index finger and thumb on the control, move your hand to change the window size.
+1. Release your fingers when you're done.
+
+You can also move your hands closer and further away from your body to rotate the window (on Y axis).
+
+### Follow me, stay there
+
+
+
+## Help! I can’t see or place holograms
+
+If you’re using HoloLens and having trouble placing holograms, here are some things to try:
+
+- Make sure you’re in a well-lit room without a lot of direct sunlight.
+- Stand 1 to 3 meters from where you’re trying to place the hologram.
+- Don’t place holograms on black or reflective surfaces.
+- Look around so HoloLens can rescan your surroundings and incase a hologram was left behind somewhere.
+
+## Next Steps
+
+Congratulations! you're ready to use HoloLens 2.
+
+Now you can configure your HoloLens 2 to meet your specific needs.
+
+[Connect bluetooth devices](hololens-connect-devices.md)
+
+[Discover holographic apps and services](holographic-mixed-reality-modern-workplace.md)
+
+[Learn more about Voice and Cortana](hololens-cortana.md)
diff --git a/devices/hololens/hololens2-hardware.md b/devices/hololens/hololens2-hardware.md
new file mode 100644
index 0000000000..c0f4b91f7c
--- /dev/null
+++ b/devices/hololens/hololens2-hardware.md
@@ -0,0 +1,140 @@
+---
+title: HoloLens 2 hardware
+description: An outline of the components that make up Microsoft HoloLens 2, the evolution of Microsoft's fully untethered holographic computer running Windows 10.
+ms.assetid: 651d0430-bfbc-4685-a4fd-db7c33ce9325
+ms.date: 08/07/2019
+keywords: hololens
+ms.prod: hololens
+ms.sitesec: library
+author: scooley
+ms.author: scooley
+ms.topic: article
+ms.localizationpriority: medium
+appliesto:
+- HoloLens 2
+---
+
+# HoloLens 2 hardware
+
+
+
+Microsoft HoloLens 2 is an untethered holographic computer. It refines the holographic computing journey started with HoloLens (1st gen) to provide a more comfortable and immersive experience paired with more options for collaborating in mixed reality.
+
+## HoloLens components
+
+- **Visor**. Contains the HoloLens sensors and displays. You can rotate the visor up while you are wearing the HoloLens.
+- **Headband**. To put the HoloLens on, use the adjustment wheel to expand the headband. With the HoloLens in place, tighten the adjustment wheel until the headband is comfortable.
+- **Brightness buttons**. When you're wearing the HoloLens, the brightness buttons are on the left side of the device.
+- **Volume buttons**. When you're wearing the HoloLens, the volume buttons are on the right side of the device.
+
+## In the box
+
+- **Brow pad**. You can remove and replace the brow pad as needed.
+- **Overhead strap**. When you're wearing the HoloLens while you move around, use the overhead strap to help keep the device in place. Additionally, if you're wearing the HoloLens for extended periods, using the overhead strap may make the device more comfortable to wear.
+- **USB-C cable**. Use the USB-C cable to connect your HoloLens to the power supply for charging, or use it to connect your HoloLens to your computer.
+- **Power supply**. Plugs into a power outlet.
+- **Microfiber cloth**. Use the cloth to clean your HoloLens visor.
+
+## Device specifications
+
+### Display
+
+| | |
+| - | - |
+| Optics | See-through holographic lenses (waveguides) |
+| Holographic resolution | 2k 3:2 light engines |
+| Holographic density | >2.5k radiants (light points per radian) |
+| Eye-based rendering | Display optimization for 3D eye position |
+
+### Sensors
+
+| | |
+| - | - |
+| Head tracking | 4 visible light cameras |
+| Eye tracking | 2 IR cameras |
+| Depth | 1-MP Time-of-Flight depth sensor |
+| IMU | Accelerometer, gyroscope, magnetometer |
+| Camera | 8-MP stills, 1080p30 video |
+
+### Audio and speech
+
+| | |
+| - | - |
+| Microphone array | 5 channels |
+| Speakers | Built-in spatial sound |
+
+### Compute and connectivity
+
+| | |
+| - | - |
+| System on chip | Qualcomm Snapdragon 850 Compute Platform [details](https://www.qualcomm.com/products/snapdragon-850-mobile-compute-platform) |
+| Holographic processing unit | Second-generation custom-built holographic processing unit |
+| Memory | 4-GB LPDDR4x system DRAM |
+| Storage | 64-GB UFS 2.1 |
+| WiFi | 802.11ac 2x2 |
+| Bluetooth | 5.0 |
+| USB | USB Type-C |
+
+### Fit
+
+| | |
+| - | - |
+| Sizing | Single size with adjustable band. Fits over glasses |
+| Weight | 566 grams |
+
+## Device capabilities
+
+### Human understanding
+
+| | |
+| - | - |
+| Hand tracking | Two-handed fully articulated model, direct manipulation |
+| Eye tracking | Real-time tracking |
+| Voice | Command and control on-device; natural language with internet connectivity |
+
+### Environment understanding
+
+| | |
+| - | - |
+| Six Degree of Freedom (6DoF) tracking | World-scale positional tracking |
+| Spatial Mapping | Real-time environment mesh |
+| Mixed Reality Capture | Mixed hologram and physical environment photos and videos |
+
+## Pre-installed software
+
+- Windows Holographic Operating System
+- Microsoft Edge
+- Dynamics 365 Remote Assist
+- Dynamics 365 Layout
+- Dynamics 365 Guides
+- 3D Viewer
+- OneDrive for Business
+
+## Device certifications
+
+### Safety
+
+HoloLens 2 has been tested and found to conform to the basic impact protection requirements of ANSI Z87.1, CSA Z94.3 and EN 166
+
+## Care and cleaning
+
+Handle your HoloLens carefully. Use the headband to lift and carry the HoloLens 2.
+
+Like seeing glasses or protective eye-wear, try to keep the HoloLens visor free of dust and fingerprints. Avoid touching the visor when possible. Repeated cleaning could damage the visor, so try to keep your device clean.
+
+Don't use any cleaners or solvents on your HoloLens, and don't submerge it in water or apply water directly to it.
+
+To clean the visor, remove any dust using a camel or goat hair lens brush or a bulb-style lens blower. Lightly moisten the microfiber cloth with a small amount of distilled water, then use it to wipe the visor gently in a circular motion.
+
+Clean the rest of the device, including the headband and device arms, with a lint-free cloth moistened with mild soap and water. Let your HoloLens dry completely before using it again.
+
+
+
+### Replace the brow pad
+
+The brow pad is magnetically attached to the device. To detach it, pull gently away. To replace it, snap it back into place.
+
+
+
+> [!div class="nextstepaction"]
+> [Set up and start your HoloLens 2](hololens2-setup.md)
diff --git a/devices/hololens/hololens2-setup.md b/devices/hololens/hololens2-setup.md
new file mode 100644
index 0000000000..0269578a36
--- /dev/null
+++ b/devices/hololens/hololens2-setup.md
@@ -0,0 +1,62 @@
+---
+title: HoloLens 2 setup
+description: This guide walks through first time set up and hardware guide.
+ms.assetid: 02692dcf-aa22-4d1e-bd00-f89f51048e32
+ms.date: 08/07/2019
+keywords: hololens
+ms.prod: hololens
+ms.sitesec: library
+author: scooley
+ms.author: scooley
+ms.topic: article
+ms.localizationpriority: medium
+appliesto:
+- HoloLens 2
+---
+
+# Set up HoloLens 2
+
+Follow along to set up a HoloLens 2 for the first time.
+
+## Charge your HoloLens
+
+[Charge your HoloLens](https://support.microsoft.com/en-us/help/12627)
+
+## Adjust fit
+
+Place the HoloLens 2 on your head. If you wear glasses, leave them on. The brow pad should sit comfortably on your forehead and the back band should sit in the middle-back of your head.
+
+If necessary, extend the headband by turning the adjustment wheel, and then loosen the overhead strap.
+
+
+
+### Attach and detach the overhead strap
+
+The overhead strap isn't required, but it can make wearing HoloLens 2 more comfortable over longer periods of time.
+
+To detach the back of the overhead strap, press the button below each connection tab and pull gently.
+
+To detach the front of the overhead strap, unhook the strap and slide it through the retractable loop on the brow pad. To replace it, pull out the loop and slide the strap back through.
+
+To replace the strap, push the connection tabs back into the slots until they click.
+
+
+
+## Turn on the HoloLens 2
+
+To turn on your HoloLens 2, press the power button. The LED lights below the power button show the battery level.
+
+Putting to sleep: Briefly press the power button. • Turning off: Press and hold the power button until the display and all of the LED lights turn off.
+
+## Safety and Comfort
+
+### Use in safe surroundings
+
+Use your HoloLens in a safe space that’s free of obstructions and tripping hazards. Don’t use it when you need a clear field of view and your full attention, such as while you’re operating a vehicle or doing other potentially hazardous activities.
+
+### Stay comfortable
+
+Keep your first few sessions with HoloLens brief and be sure to take breaks. If you experience discomfort, stop and rest until you feel better. This might include temporary feelings of nausea, motion sickness, dizziness, disorientation, headache, fatigue, eye strain, or dry eyes.
+
+> [!div class="nextstepaction"]
+> [Start and configure your HoloLens 2](hololens2-start.md)
diff --git a/devices/hololens/hololens2-start.md b/devices/hololens/hololens2-start.md
new file mode 100644
index 0000000000..dc9bcc4e6b
--- /dev/null
+++ b/devices/hololens/hololens2-start.md
@@ -0,0 +1,98 @@
+---
+title: HoloLens 2 first start
+description: This guide walks through first time set up. You'll need a Wi-Fi network and either a Microsoft (MSA) or Azure Active Directory (AAD) account.
+ms.assetid: 507305f4-e85a-47c5-a055-a3400ae8a10e
+ms.date: 08/07/2019
+keywords: hololens
+ms.prod: hololens
+ms.sitesec: library
+author: scooley
+ms.author: scooley
+ms.topic: article
+ms.localizationpriority: medium
+appliesto:
+- HoloLens 2
+---
+
+# Set up HoloLens 2 for the first time
+
+The first time you turn on your HoloLens, you'll be guided through setting up your device, signing in with a user account, and calibrating HoloLens to your eyes and gaze. This section walks through the HoloLens 2 first start experience.
+
+In the next section, you'll learn how to work with HoloLens and interact with holograms. Skip ahead to [Get started with HoloLens 2](hololens2-basic-usage.md).
+
+## Before you start
+
+Before you get started, make sure you have the following available:
+
+**A network connection**. You'll need to connect your HoloLens to a network to set it up. With HoloLens 2, you can connect with Wi-Fi or using ethernet (you'll need a USB-C to ethernet adapter).
+The first time you connect, you'll need an open or password-protected network that doesn't require navigating to a website or using certificates to connect. Setup uses [the following websites](hololens-offline.md).
+
+**A Microsoft account**. You'll also need to sign in to HoloLens with a Microsoft account (or with your work account, if your organization owns the device). If you don't have a Microsoft account, go to [account.microsoft.com](http://account.microsoft.com) and set one up for free.
+
+**A safe, well-lit space with no tripping hazards**. [Health and safety info](http://go.microsoft.com/fwlink/p/?LinkId=746661).
+
+**The optional comfort accessories** that came with your HoloLens, to help you get the most comfortable fit. [More on fit and comfort](https://support.microsoft.com/help/12632/hololens-fit-your-hololens).
+
+## Set up Windows
+
+Set up your Windows Holographic on your HoloLens 2. This first start experience will let you pick your location, language, keyboard layout, and your user account.
+
+1. Connect to the internet (select Wi-Fi or your ethernet connection).
+
+1. Sign in to your user account. You'll choose between **My work or school owns it** and **I own it**.
+ - When you choose **My work or school owns it**, you sign in with an Azure AD account. If your organization uses Azure AD Premium and has configured automatic MDM enrollment, HoloLens will be enrolled in MDM. If your organization does not use Azure AD Premium, automatic MDM enrollment isn't available, so you will need to [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
+ 1. Enter your organizational account.
+ 2. Accept privacy statement.
+ 3. Sign in using your Azure AD credentials. This may redirect to your organization's sign-in page.
+ 4. Continue with device setup.
+ - When you choose **I own it**, you sign in with a Microsoft account. After setup is complete, you can [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
+ 1. Enter your Microsoft account.
+ 2. Enter your password. If your Microsoft account requires [two-step verification (2FA)](https://blogs.technet.microsoft.com/microsoft_blog/2013/04/17/microsoft-account-gets-more-secure/), complete the verification process.
+
+1. The device sets your time zone based on information obtained from the Wi-Fi network.
+
+## Calibration
+
+HoloLens 2 uses eye-tracking to make holograms clear and easy to interact with. You'll be prompted to calibrate during device setup and for every new HoloLens 2 user. HoloLens 2 will work without calibration and, if you choose to skip calibration in setup, you can calibrate later.
+
+To calibrate, you'll look at a set of targets (gems). It's fine if you blink or close your eyes during calibration but try not to stare at other objects in the room. This allows HoloLens to learn about your eye position and build your holographic world around your specific eye position. After calibration, holograms will appear correctly even when the visors position changes as the HoloLens shifts on your head.
+
+
+
+
+### Calibration data and security
+
+Calibration information is stored locally on the device and is not associated with any account information. There is no record of who has used the device without calibration. This mean new users will get prompted to calibrate visuals when they use the device for the first time, as well as users who opted out of calibration previously or if calibration was unsuccessful.
+
+Calibration information can always be deleted from the device in **Settings** > **Privacy** > **Eye tracker**.
+
+### Calibration failures
+
+Calibration should work for most people, but there are cases where calibration fails.
+
+Here are some common reasons for calibration failure:
+
+- User getting distracted and not following the calibration targets during calibration.
+- Dirty or scratched device visor or device visor not positioned properly
+- Dirty or scratched glasses
+- Certain types of contact lenses and glasses (colored contact lenses, some toric contact lenses, IR blocking glasses, some high prescription glasses, sunglasses, and so forth)
+- More-pronounced makeup, some eyelash extensions
+- Occlusions of eye and/or device visor (hair, some thick eyeglass frames)
+- Eye physiology, certain eye conditions and/or eye surgery (some narrow eyes, long eyelashes, amblyopia, nystagmus, some cases of LASIK or other eye surgeries, and so forth)
+
+If calibration is unsuccessful try:
+
+- Cleaning your device visor
+- Cleaning your glasses
+- Pushing your device visor all the way in
+- Moving objects in your visor out of the way (such as hair).
+- Turning on a light in your room or move out of direct sunlight
+
+If you followed all guidelines and calibration is still failing, please file feedback in FeedbackHub.
+
+Congratulations! Setup is complete and you can begin using HoloLens.
+
+## Next steps
+
+> [!div class="nextstepaction"]
+> [Get started with HoloLens 2](hololens2-basic-usage.md)
diff --git a/devices/hololens/images/201608-enterprisemanagement-400px.png b/devices/hololens/images/201608-enterprisemanagement-400px.png
new file mode 100644
index 0000000000000000000000000000000000000000..11c204f0f6deeecd3edff39947aa986b1768b285
GIT binary patch
literal 182211
zcmV)_K!3l9P)Px#1ZP1_K>z@;j|==^1poj532;bRa{vGi!vFvd!vV){sAK>D|D{PpK~#8NjQs_;
z6xY_Z4d?&fbAoPncXxMpcXwd}8`!vo00BaT1VV_ryAmVr?m|3-xDa>G_{Lb(4V;|k
z`QL9}*W6WIT~%FOT{Z7H=3Hyl5y|nz$jhijS#A&7YZhQ)a07bVmLoT<8Brlwhz?6b
ze0U}jBC?SfnT;e`a#R*lqjPMQi9K`K=X)7(MaHt?
zijfstgzUqn+3_XF)RdOPd0B3JDRPs_k(*eCyu@-8Bvhd&xemoCbtp-#M|oNkD${9M
zt*FlKL~Twt8VY*RQZz^#Mq9}kIxFX)yLJKk8x~`@c?Cv0S7W00C`|Tmz=DBI#wG{0
zVA0@aET%0PJq}C9Pr~wv?N~AQ6s(%R6RRgr{U1&5$=1w26>DinP42?F1-o$c!qc&S
z(OKAFx2dzSaq1k}+1Rw?9Bf{49=0sI0Gn1^h%Kuw!q(N7;Dl9|;e<6;;6&OzO7g~ax#zQ9GtrGI$X?kuiEt>u0HJ{T)pcdTzBT9
zxZ&)_al<)J;D&Rb#Es`YgMcjGWOSBhkW`9l7dza8Iei3^v
zdY<+iZolAZ+;O4o8NPm&?>&dRFMS^OUhx7RxcX&0a{X&~{N^|DVFu@Y-XvM?S?HeE-$^Kf){beu$Uu
zejhK~`7WNh?QJ~Hecp57v$*-xhp~I-Be;3TgShtiJ8;>?8*uTOt8xB{%W>w^h1fCw
zOl%$Bf%QYjVMX6YEb3Z=`JJmUr*%0-8y8`uZaxMo#xYPnj_$G%be0UEt*{?0`8{aL
z=|EF%2O6?lP?y<=+KfijWHz8WqYhPRHK;#1(Lz9OQGIg6J&dN2DSvC>izH
zDR|}S_Uq
zy}}5-AD+r-8j5JeoG;dVcp3^rIpwy6p|r46&daR%LbKltWCX?|+B+06Ug5|JNkm3)
zJi@(0;OpcKx7p5ccXEQeqYJzo-7tIlEXIZWgjq8jFl+j3IL~s0^Gp}GIXZJ+&TyXL1ji$1W9E@FF@xK>
z%yNORvljwf{Se?nbN7dzn?JvUJA7Sy5au0$n1B#O`$r(kKLzR0sYnVBhmVUVJY78C
zFcs0kStv+tL}$$+^wliJc9Nmed$Irs%i8HZfF{djpqi?wan>gLP>Ixjc
z_8R(`E3l|{GYaBr5agYNK(9mudd9-fBO3nhQT#5E#(dpr9#Qb&)XO~_-X4d{&p!>V
zZEJAs*4;S5fI-FsOr@hPEbK&e%>*jTMp2mFj)L?yWF^)kHLesXu?1Y0UnGnckwYU;
zqOy@fP^3o}AdO~$!?HAjM3y0d&@$p=MaUF1Xo80wAUSa*7Eo;P$PqmFnP!?$iac6=
zLZyL7VN$iRl4OD}r5kpm5BRbFq2Z`8bv!*t(J+Sa~UqTlL?zb>$^o=VEMGPGGFKfYXck`Vua`7+Y6e
zjN=H96IWl3ZELT@$ppvtqp!g!>#xO5I{ID5++g5wHsNvJiF*i*yKwQ2yKu=V1jecN
z;__Yh<4QrmZl^zlYtDEC*Pihxt|b_*I^{lGeEc4qvGIDGvX+2a&f{2oK2BbD4KCPz
zH?BSFG2DF4leqcZr?C6{rwI%?|BIi;9hVRqgv8xfzJzg)@Sx;gQ&%^Bm<&DSPfh*P%
zB&)B&*~>4%jz#C-*g2=*sNv(Wl)wGL?xQfTV+|p)j1ZZ^2!oD+iV5_Tj~a+{6b}$0
zJ!mF8nsV9*kY*b|2#>T{8$7BBk1CWW5gxpkN*VNMY6nOWul>S!!azWt1@_~47Lu=mZEFu$uEseZA@p##q+
zI4mO+c#jrEW?2?Num}`dZlFQfaC&h0VE`#2Km-muK#B+unIKZgz*4{vOtj2`h~`sJ
zz+=k`NkxKhES+os{OMTZ=}@By4-W@7xX~$l&!&@}=|qR@NT)puGpElm&fjIGBOU!L
zI`LVAf+IY*o`<6c!Qsng?#6+8(YXh@I3vi_87>6F>?3EH$IWq~4nFNz%22L}b;qT^27`PEOga@HBn^UJ5&TyROXaR^onaN`jJOr27+^>s+
z2izUp;X~;8yZX@42Eo@Y5Z+ww&EpL63WE=i)x*gLL4Gj^^Nr;3yTg%ibe!n`XC7C8
zyBlJBeBkdm8wtT4s7((-YJeMI=>{(s!o4ymGC%$e&T|i58&!EpTMs3p2kJDyo(PWd<&nv^A;X^^8;MPd-2MPUZ6dP%P)8i
zm!9z$j-&7CES-Z8&m;tR#`Ab$;7?fC0pd#&IK15=;O$Ct3n#q8XrY8)DEtF5(B5@4
zw(qzHMP5LaiSdax+}2l=qqVg;iUCf+2-wb72m&_b`?%I>I$4dP#h<
zTXPvsT6;OcaTRtD98w)SH&A&H9H&uvoN+ASaolY<-v*CMb`Tn;3K|dM8mflt&Y^0s
zDTbTQr%^TBOxu0Iv$&NP%&nZi{d~@!$92wp#Mrgm_VVrb;@qvb;hf`dCxjm4exBeq
zT$k{;>++Xz&y{;|?^Unj{_9@DgEzj8M|Qu3$8Xz*CvSfrPu=kWp1$*aJbl-Dc=qlO
z@cca=;(4lp7iiDxHSM`OKg82_yibMkE*`&SA0E5;9Xv|lJWAE^_$_ba3Bu#4+o>Gx
z+Hbbq`_QL&lPcrwr@zE|1j9$KevePy_#U6X{S&^}_cOlQ|0}+J?>Bt)!7upg{a^64
zY(HP``<2FZ-u@8>-uMBZ?fo7fzwizAQ@Oly`+IooikI;aRmmef7kBS^7}p$gGcKSS
zIh`OqVUoWo1B8`Bn=#e99+O>bG10LSBh9=f>K9_5Y99J3N6|$E(q5!%sFUiW4Ncjt
zXviW!vKmmES&y3ZdQ{6&>j)7`h1gAMq>L(BASq!mRFYV1tT>_Q;Cu=1i&9#NQ5%H>
z3ZX$OA~>W@1dhTOMx3-lDv%-qp*SYnsFA#cbTpQhp(>N=B$AGs${;Hw4Vkno&gXGm
zDVM@1S|qn2DDn@p0zrdnL5jfw$03Lm9|jPar9KD?8$^l;kYWKu;2<=L!cu5F2ENYb
zG{Peot}|TVNe3$D>O=FO;!x!8ul75oVNp=x|b7`1wr6EV+LX2NT(J`XY5B9
zxEUxo8l~ZgFn1Ru`nw^{*98F%GvUtd-3cFWXQ~zMUm$U!!*-^_4)XAW*KBvH4t@q-
z&*pON%ge#jyyxrWMW8rapdiF%QKih{{44@zCT+%%Gt6|B6w-7D0*J>)h2qK2@OSs&
zXG(n#Bm{_$vpYPgPR#Mnc4g%5!+BQ%Nc-0IJf_*R5Jtrjw|KM!&jU0zv^dmH+*WENjoYLWAZd)OvUr0CAeoH9
z1P7xw>?(wSkn%8K(L60vpbqh#;8ydEU*+N
z5iC3=rMapyTa49accLz@7mbC3MxAsLCcQNaG1#~mV{I!i(RCD+hy{`5W7`OiQ?Pda
z=~zc+BU4IB5ZSc!d~BhDIDXCLgn}SJ<*@Nu>^SB+oU-W#?A&}KPTg`7c5S(twi~Bz
zwrrP{@%>%LTyG#Dm9dlRK=Y?^o6|P!#_3yb!I{V2M%6(Ff5PoJ|759-dkK&GaD~!N
zQW$3`-9+V}G}9$i4VO|eT>c{Nq{F=H%2#kVqyBps_1|;#%eem+F8pfa9q>Hdx&I30`{OQ|x`@GrUHJ
z|N4^$@CKv*w`5O!iFaskKk+5rdi)EMeo`uG?}MM?<@-Oyi}!v^xO|9b?|L84?jbm6
zFDean|0h%)2h2Y9KmQFr+Dj0;^)n8KKk(xhzvIU*|G-aQ
z{*7N`U;Rbjt|DN2({4uL}^kQlR|QWRf^LZz{2
z7CK|UKtMV3dppo(5_&VH5m3{)Oi&>>1H7nSJbmbteW_pq
z5au1u^TXrdK0T>wbRJx1(Fh_}g2|I=#-BLtP_)t0h~poJ40VKi&%KMtqF$%je)V>1i=bVBKlV@UbbSvu0M@()mE3Oh5vE@jOEu{)k?SqPhmL-71s@7qp
zstgzyon;aZ0!W5biIfW0GwCjFV~oqv`ChtU#7HfR`_R5JDfczal~Unn<-{oUC9ssE
zAhFV@laiELf<#u2s*Dy?=X9VhzZ;GDy=W~SqGK3EcO{)f?LrJSF2`u=D$MCvi}^hp
zuxMZ_mXDr<)pJk9(F@MP#;J1&kn;$T^Gr(WxK)>#y2Z&<7&{1qQ#aqhA80quq-r>a
zs^MI!hVxFk+t>vs-)quF7i_;17t$^u7|uQM4$HRPfpbpUgVVR(icM5CYYC}!yg-gw
zc_EHJ>TbAD*VOep>3`w*6EQ`)yF51ApKXyz;eE@Z>G~@zn13@aT>2
zPA&~Vclh9y@9Ffv!^f}wfKOig37^tF
zdF==D`eVZ2!PkcuJeaYk7|L~`H{mu{Y$@4$pr+vU1cf5-$3GA)&PQ`{fCt>Z#30OX`84IaI
z=2MAEi71^l)-r{WCI%RFN`a0savNf>)Q8rBE*n6a(U8+@08&SVE`Zcz*Z`7x7(i0W
zX@?Yu%%~7rF`-eEKvQ}vKHmVOP^y9O5JUtIJ3#UysTyQ*_%ziw@(2KdBRx17>2&0&
zbn0m#iAbYEPYsAiT420!_Hz2Ugn`!2BUJJTg5-rixEYgD$kQyA1
z6#p2c1jHiFFB&m^QHb`5MkJkHm{%BrJ!K(;LkI#~LlDeqkZS-9#kM<#)(Q1__?~n*UcHOR1g6K
zNtBN-{GF&m0(_Aa%xInaao|4W;8hcueI$+hb)h46o8`g%yK>&0`zCDY@U>s51uqw=
z1SuRxDjcP(ESq7bHdR7JG;4+wiPBp9J_La$)rLEd-_O|vq5gFGt}Z48=0TA7x)28Z
zj#4u-1ri>ElfWs3#dF}s&vW51DDCFr;6_LW@%sf69BzD1;NbV<`cfbsjy!KJemplk
zr(TTyJ*mp52ohsUuzdA7xSRmF{ic2R-H5%jVE{)YZ=cM38lkhsqdgriRadPYyg
z8N2Sc0Fr0}NDAju2n;(YRND|dOg+QYG^i$M89ew5I`AY$Mu~Lb=}A>6DeOW`)i`R)
z$5CB0h^m4j$5J2*j>f*73xD~}w&D-R#wwx1CipWq>a6$&UsEZlCP84l
z{xhBZ&-h~hPx$ivpYinvQVhT0yN~4je>c>c(o>w3J)WAvm{^FhA@cl=B;O8&?#Bbm7w)lbf10jJwXwv6@@@CQW
zFWx3J{pt4kTX&C^|Hjt>%-4V7mydqK7cYK`H}CogFYWmN?>+ZDK6~kB+|F}<{KB(v
z^qiBiO7)O|O_=Iij|GItJVB&w8Ae+cW4Lh<`fBI$+7LvB(OT4pCS5mqooL8zH2|s4
zvH)UNAJqbgY9fS3S#p_CAH_y#6cZLw8wH%F(jYWsg$$Gq7T0;*9}bQ@Lc;(=^GZKa
zLF7eHNeCd38AfGf5g=)S2}lWwLu!zwiAdq=ME_VM6C~y}Etx<`5D>UL)-RS&h%r!z
z@QFgGcLah6g+LEFD~~{<0DN5n;G^Qvu8%fLsVDUjr|}$luKciJ{(%(5+gEKp;3d5kjUguG$9YU1rHSd-8on_ZC15
zTnH*nRqt@1$`EvB6B2@f(pE-!5FW<(+SF1A5~au73C1v=Km>Stn;M65E8TAD%-V6VHdMvl|_@8~oh85XkfC=jO-n
z8fcVAkY@y9LbK>^C$N6Qwb*mxySVf9@9>#!1asjZ0?4P|{*1f#yn~ysdjmHSAU9n0
zGK1SYFwwGx(2pZ92oI_aFPA{VLeQYvAUxch0tgNM&JO;Z59IFqB(*v1Xpk}~=%+FnL083G^i!3LG%m$>%L>fxSdGc#oJl_1ELHV{XJ5$KFaue+SOrb{8(%aUU+*C2%~7Yt+I?bqYHEn=g4DyXpLI
zy^MDGbGYsD=W)yBFW_b_yZ*c*j37ijm{7gb-Oo
zh)i}Lg^A8p3?i0eq-6;P8y8ZgPEf6mqOGKl*Km)ii!|g2AkC=FY&5O0l)^gHB1-_V
z;9-;p?;Q&umg2CC@SquZ@Ol?Kq&^A^Ff4%N5)`?Fh%ATTP`WCUmO(|47Lr1xkc6aw
z1jP8pFglMm7A_!og(Ju#l#ZDSfzv=bXn(h0Mw@}AMUyw-;6=w^MVfXn_|aj|1P2E%
zGj-$C)y&god(%OBTHv6$b6!Q{aBp8k`4T*C+|J3xs1Fs*Js4H1HIu;MGIJI`+nJw1
zwZPZTs)x9`A=umB6rTg=9DV7`TxPhKNZok`!Q&i4#~ErIt|uL=Hz$hhW
zitK#PgHZHwm6PRX+iEmQbIGiFixkT&qei@DyTC`a4M(XfZqMTpv;;U8LNVMwkmruy
zo5!f*b#dZ3;(76)1$uiS#FIv#2YLqa9EC!yXM0;$Vfp+saVCS&J9tk%{22o{UGu;4
zdguM|+1G#Ip+`Q$tvBt*byvNHYc72Sm!I<#cC5b+&Bep;bkH?GXwbYJ1NmDKA`Vm_
z1c*05qGd8Ko_}xGP@`0WyrSUm8j0|zVpLX5;)oPFYrE<&^$Qc(s{l@;b57+nm9JCj
z%u{%QYnrZfl8lbqT1Ryb8Q0@Jlmbg443ruZoCKCU-cZeTb1*V+G>+xXdj8T&ux8Fl
z=&W6UasoyQB|BCMMF3ONUmb_Qlt)l#{xAhZ1(L~ivbZdh$Dc{{k{xFOBvZ8%-k_?T
z$6bLC!RcbQtpUIUPacfX0p1(16_pt|@3uRiuU-hBEC
z?0fzzy#MmI_~uc;osrZO
zhj{e**RhAkebaeQQuRDz(qsbEenRIXrK#Tf5eHPO`1DWw^c9^u)xxje|Ajw(`V)Wt
z@)!Q(#rzjdiU7a==k#wXiod85e*f-oeD?M)c#@yD`-&HE@fr8y?45Vu4B6>>aMoG(
z;Jou5z(p54gv&2}47c9!3Z8%AfCZ8N4}X9D`j-LRpZuI(_Wh2%H}Avloe$%}WB1_n
z4L9KUx?MIu^Sov+J
z&m}yvb?vC$R*OnrPZg;(DC6~2mTc8ON)tFof}@4uK!di$L&Z#4ae<
zm4X{1dJloYfz#Pk5$3hGF?RzAA3}g;<}DL6EMT}>#z@_DmSsuAu{bOJMYW=qQ)+!B$8WX3@~}a{a?UbWwe(V5Le84bUGF*Bir{wB
zK22@J0ECbs2vlU(=gijn{C-jh&Pp%wI6QgooTuA9hufLYR+C?T2YrrIiuPsZXGpP7
z6$v(khnJI75aGnnag>rV>PCfiXZ~hXN8G2N;-ur({Pte15FiCq
zNcp^}3wU!EBvu(^QetW(b*4#hxk+y|qdL14H90M4$Zcn&*^O4JrjD`^^i@w_pl$(1
zo0n3Rti*!u^_c2A*3?SYEjS&=t-J)MZoJVHz%Sl@A63Icxazb=aNSu?;-(9q!R=HH
z_gwor9;OqM!+)9%|9Lv(=O6k6FFf)oUV8L1y!`0rc;)dgjJ-@1@e*I_{b%m~kWTgk
zJa*@Mc;vSIc<7dWc;KeD@Ze2v7}z{~`#a_WdQSZ$1dwOH#CvM``o@p=?46(R<$J&2
zn~#3O_n-ZW9}oPFpTGD6KdS)!rHavX{9pfN3erDPCH#1RQU51@;H$TP#d}mS&k|_&
zU-^>N$K#UcsCM4N`!D{0FW>nYpYQt#pA$yke#ZS#ai~6FK*8w$pgQ1Gvv#xpxBq?q
z;Sad{^n0*P?bnxGfUS$q#j#7y#kS=a;gq$P<4oQJ7xSFnc*Y~Rn^OGMrw(s(@_+yP
z^S8h77Zv{R4Aa!y_pXay!c{vS!ueZn#jc~S!q%yCuy*bateQ~M?Gvzgcr)hruEU(p
zl^AVZ%HUxE`fA3}Q9gv$qFyxRsmZvMYcnbZkIXt=H@t?ZJW3d#6w4T_s4s|$Ot2=2CfQBPA>gDWO?N4#`AfP#WQogh>BHDhC3>I|{*sM39FHoT2b>V-!f`;N=?3
zh>_7EA>pB^Kw;Da&GC?m@Nke3284vG%`8Qsw3DSKTpT>%`<^>H`?t|)s4%?OUZrsM(*_-A;C+R{(m+=q<$q%
z?mTuUen+V%M*`IkaiOt@3(@ruWX@9pedB_;+pu)vM6@(7!>V-)3O?4O{)8?
z!C32B^ffF&Q^`0gGJEJRn~@n;LqA_dA76o};B18Wr6ABR^$BD9CP)TQk=KLrylxa{wIVO2fuB=JHByM=$XulJIMjM8hl)jzP%&Pu
zxJ)0CII9EVq5dOkrB%UsOMw{UjcrV6Ez_r@3Pq_>BbFj5Nuv`;Z=f~u1TwPBYGQ;*
zN0Hshh_egLJl@vg0d$s+(xFUXxM7h|B@+bUBpuEap}2xD*|6X&Y+HQ=&fIc~0m;>;
zKaT6qeG)fc^ek1#D^wM4;!&!Nr|BtgsUr68{T}bU^c~mxj_ZGommmKeFHmtj!|467yWYd2d-f49@8YR@sYD+8
zl7yI{V*#_#405iqe0oWE@&e&hZGi(kI`6JLJv3qe3QaeeK_q+}2K`)`2ItQY3*
zyN`dw<2O-i^L$-;(tWt{jK^^H$#>(}RhMGZvJ0_o-8DG-#67s=^apVVRo9#QzB8P%
z{Z0TB!?5VbF|{ASCE~mGhS=-Q-Ni=xh`O!NI9sI}sG>TVbG~NZUYy
z&d?|fndNBhX&!a5Q-?j%FM|%-mlo*i!|&qHV{_wiyVJ?~z}uCdq0WEG=QBEYn5km&
z4CBxR5UGKgaTXHRo7wGMv*#FfYI>k(=S%U%Kqfh5SNm_B{lbj+AGjoVK*
zO>Hg5uYMnb2OaXi2^T68wZigtazT{0`dcV1WhoG?D*#9}xe^X)?WEUgfi;Ux-PMV3
zbn@k~aT)hFn_$!T_H_2)`PTXMGLUkX(MSbWpDL);b+cP8jj~kO?kuoV-e&@wdodQ>Oo#^fd~u9K#+eL
zk{ARJw5>&F<0?!HFpwQS4&$9`F<3dp>va-MRrAnZJs)kQ6KELLOP!ImSK5F)u$AbA9c6o@IZ>vK~o4MQT<)smN+3Oj=N7R0&~{+ktwj5(ATx0dxr_l@l1GG8u1KiaBkoFu&_4
zEb7}thjbz~EIiAkxXwN94qSQaBe>zbXL0+bgvd2-;;~z(817NZ=>Xn(?n~^KVtA8^
z;oYC{#rr?wtB-%f*J_^nDebf0sUH3?^WS{J<$UkU_kW`T_!%EjW$b(Dd%X7a7kK{R
zkMYFa?;E9}>2p*suRZ$}-Xn;2LV?M=iIl
z@W1{2!{2}Y&iAHaz-8w=g|l|uZ~D%t!NLv#M4cGIeWmtyDE+p+uR*YVEBKS}J^
z{;Z1nw_p5)FL>U*;raTW=j|JwE1lQZpZF5b-2D+ApzPm$;d8iz08tZab@n`J@-!?R
z-b!V;h7sE&S_zFdT0>Dks&hM0n$|)kTSKK=!E3MrX;H;U3C~ADP#&TJvk>W*jxe7T
zgm@>>2n(-x1bD~7pTO|*h&H`@)yvo4O>OQYs4T*$EY!wcbqPX)kdS%0NMZQX{OGtW
zGoTP8lyb6}oB9g~5>gd5U`RdKr~j)795a=UQgPQRC_4!fG$|1+H}KGOhBdFWj#VRY
zW+d)|=)h1~Fd~D(;O^oKFHd&_`1tX=&>0#rDe(r0O3YU$)|zN0|m1aB%FKSzR5>S!k6L(mBxI!5(J(J`17Q=FO}^D}19
z;j6WjmMINKC~@jT_2r|_vK8A^3sL_M)j|XmrR(g=>_vG~FX8uB{}p!v*I9KRrOdd0
zefDg1XcWNQ1L5Ny#A}Av3D1pwBPYVli2+2Qe**GyTF_Cy2=iOkpt)ceDGaz1BgzpQ
zQiSNR0z`%6BbL`_To9*$c}NImFdkZpv`}8dp=C%VG}1yS47fZoARloANW6azVtum^
zy;LEp_|eD@|EY~lw+^Ongyqzn-Z(4pdSS(jRZrjIj#&U5`jhA=Wss;AOeN~
zi0UB(jE*6RQ(7)nNG@MXi71_A0Yqw~itwmGA+3lYDNV1p6iG%CA)=vEWQ0jpn}JDP
zZaW$ax*3@cpsi#OofV_#sU}S7=V7#Y3KMP1G0BKvQQt9)4z`&l&nK<99OoQ&E3P{2
zVcdGr^K_PP;ECJc!;5tEZ$JAj)yB^R$S=m}egFCI`0=aX@$%(obs^|{{Ps^&A7A0w2R_7uyWhgy*S(H=Z+sn(6DY4x>Ae5e
z5BQ28`k6rZi(oJw_@E>IhezjYdu(t11O$TNXQjCI{e&Ms{|$es87+PHUMi%kFL@4E
zU-}eoy8dO{f8V=!>7_65(fhyPJ0Ab<|2LS}{=Pl%Hy*lYKh8Vter(@#BThW}DuU#4
zY+Y^j?pMdoEmP-X`>Jbk!HM_dfm>e3%O8G&4}bm>uf6pnZn|PGuD|#N+}tcA%0dyd1r4bXrLAmJn-UQ`>;MVy4nUwE!RF=x9}h;%jPjkGo#E$2
z<-@7F6Zgyg&7vBRL-*zDAg=4}D7D}~N9jO^KikwXqzqhDA0P~!jboH@;eH4pIdrAI
zRHzOVm}Wa0=WCkRnmU5gMOI-v)He)Cp)rJrt4RxKxtipf)>u?8IuiDRMg3xQOnjf_#P8`!sHo@qEPf9M{ytJE
zo(|rom6`yl^rX~@2{L#+r9>8?t$4)LF0!J_5bc+ND4%RXgHQ-7;<+hCW+Z)k6#aHw
z9SY)`Q54_8Ai5FxakQ8wPMbN^d_AoJxlwh9T-`f
zCmaMBEz1#TXi^`teC|i4c}v9*RAxJx)C8S=Mm&{JLJ_jE>QG)ejQYB{Xl|H9OYMBr
zQj%2^^r0ZDmEWTtS;=+WM>V%4DAc5v@c0jq*Z`87Y(YepM@3R#Y9bYurO>EE3R0>J
zL`u?XO=`;ylG04VgdnNNXhB7GGb*!N7@fAGHop_~h24x+dngtAC>e*SOvcbtH5dJL
zlNf4TjM3I*nCM)I$)0ssI=BUECr-if%P+tgn{L2mJMJ^R%I~`B6+C_Chj{IY11632
z`F=WHM$x}~4Z?$5!QC$Df4{yC6CE$Itrx+duII9rpV#
zevN&v{eZ{r`vjMr`6$laeiu$Z=?KtsHx)9rzT#n<`-iXbcZpYEfufnRiXJh5OGYN;YuwubEw6kfPpMM6I
zpN7>FyRc^NX;{noqvoE9HT*5qx^BhD30O*)EbQIF-|A=#HmyW^#T4ob#;HUp`_sA^
zkWlhRRv<3C(By=}{8LSOD$pwy0Uj}w{!|;Tk??laI7lJzR!bKb0>f46f|0gBVXI}h
z(*a0rSScx)Kb-}g1Wiq4RrEd_8rIYX5L^91X(|EapP=~P%z4HkfN1JONC+TCaZD#P
zrb~I)Qdc&!14L%}DX8bSh5|9^8};`fINX%(Q94T7IGABToEWJGd-*Zq4M9>+0Q{YG
ztOApzcGOW$5R{XaqHv`1bYTRp{W>z*cchb+^PTap>84Ym;Bg2biqdI>nui%<%ax9s
z>+$^=N^@yFIdC3_)ijq5-3Ah4blysl1$p`-(l?wI0be&S12{QvHA6N4F`y7gG(Vjt
zB}FKh9q|YJhyHHt4S@=T&YY{pYc=;%1P@7@VG;G{uos7I!X&K;B{GnikwcgmyV$_wH4(_
zgb86F%VzLXnAnOUE-OxMM|oNgDl_{S1P`JvX9V>*V`$8q!|5oEel}+aby)+b$zl-2
zbt-cP=;ww|nLCK`?0%GI_Tq><0w5=aPFIdsz@VcPKyo?FWArUh2rjvNFPF=6v`p{O
z3b<`ST0IKV)nu3NbDg|oP6Y!SK%_pTZUmj2gV3l(A@@_jeH3yZh1!fQPkIjrK
ziMQ$~YObp~h=y57qe2mAbbM+uT#(T~BT+M3cq}d4R|8?8R6`XqsZ6rD50ma9M3mmL
z!$X#pP{L)FYLN*j_F9R72#;4OF4K>M$6CtoTgK0;pc1LbY9v6Kc!H@&a;Zr2I|z~v
z1Csi}9yAv9qq%s1Hi*{JVYHWzpu1`UeF93uB8;{WD5{-wucJEIigojLV#|`Va5jN*
z)hYMV**}9vZ+XY`)c*L@pYh$tpb8-z=x7ZntZa?t)&E;G(D+YNuK&lkf8(one#Dy(
zeT;{%eFe8%__P@c<=S(fz;y)5Z8yG(M<03*ufO`WNj?4Yv$gsE^^fcP^!eX-a!og+1qZ%_RZJfgbi2IuEL4OT!WLh-iT9Az71!eb`LH*?@?TJ`LnqB
z#=W>>&s(_bfp>Aw!|&r>+THi=!|vN($JN(7hYQYo5T|at1zXl$iq%tRVDZFBm{0gl
z^lrp>*U^~MwH|Xi*JEzSM$Bv5f;r6_G17Q6MjDR7chA-M=+
zR2SiwMHwGYM;T(q2l91iv_*W$@>&s%N-UZOAEE^$pA9fQ``stMi?UG0xjSAwZaUldiJVhJl7ug<2#L
z5^9;GdV~O?+`pq)ZkwkAl*thu4iKfYJe=JT=5BB}fM*Ig+)e`^&eZl?PepGHWuoQN)yv!l71Qs7
z`*7lMx+;z2z^Gs2XK`J0@JUT`VSCXH`X-YjEG!;fF<&0j_app1lF5vrxT(6MuC}c!l$Yq6$&J9p#`35A_
z+>XjZ>Oy9NP9gVE#C1zEnozes6FTa^$o*(r`@YTolrAeV`^_dya-~QTt>IDBVyjRs
zwQS17p5iJ_tLAYNCK)yS9y9@k-=l=*q(th3Kq)uMq?KT4wbV&o7k{)aG^p=D(IDE(
zG*a*!^wrPDQ1cW<+m~Wa#|q5tT1#iQ9?OQLPPSvq;&ZU;=&NwiwmWd+IggpCMAd;Ot-D0-x{w4$th_kGrmT5jULoBrZGsAzZNYUYvjG
z{kZtdhjGotPh-!`ui>#rKENxle}(s{2EO|4PyDPl<^-3@Bm##3_Uli;f%ksHTTgzA
zr|_g?!tu0Q_?oWJ8PY$r4}ueuOx==hgTo`S{mcVKGXb}XVTp4^GW3wB}2!qc#H
z@tIh<h}7?QPbK!4jhbTqD{dR>7!-YAvj1VrHoDof|1p=2JSBg+vK
zQi#C796H8y1b8LE$332ah=ZqlBm#Wm(NjE(g{{jmP%+9IS5Cs4@KEzvf`Vor_Q8W{
z!$avQstvm-N<17GN>3d!M&U|Z(K)DyY+B_A9^AhxRfY=R7CdCCE!fnAt$v|lGE5=-
zAS9$9{%3Qd!Z;iTYPM=QR~5Yf+f)cvpt{WYjyC(tS
z2X8LdupFwDsAskl6@sE@7b+L6r=dGkhmf+d9Q`ypXDSLhe8IwAA5gtu#$muP=^r^)
z&P!nk6k2Zvr_%%r!H3RT4p@K?C=4uY>nWXNKx7=WWe!v%>Kr(e+fU~{bu3!PtjBGo
zjHEtPLy>B7r=u5OO?r>#J4g(LuOy7Z@X$tT(bwJd>ib@N5IxC
zqcGZe6vjH&VGe`ax%5dBeH$>RhrwF+dWvKCPl3Y$zFOgY&NYs}^!>*K2nUoSHYSC53sRfuK9(OUJ
zSwyfDQ&|ZlWdw;-NwrZWT~s9mNI{oLZMBpR@yDbZsT@UT^*Ddfxfp0#fZ^7~{PC9Y
zM_b7sX*GYewV2nx9t(#zVfmbG*g!{n!paM9=BDd$*$%1zuRu`0lZ&WMZhZ@HJbeHM
z_Wxo!?ESOV)BpHK$FGik@4fszp1Sir+>Z^VwxH{le{
zpSJx@oOk9!xa^W=aN`ZH;?6zq;-ULL#^aBCiYFia6pudeF&?<{eeAj6bzIAJ&OQA;
zoVev$9JTyBESX2OFtiCHJx8OzeKq=9SD>eP8Eq+g&2$C&T32F_7ws68#N0lrg`wlH
zSYXgF`HN4-1`X*#2pzNL5^Pv?F;*`<7mIl==FQoTk^ZgdBp90NmZ6FuD9#(_bvs0*
zOy!W=i?p~_s^B){#4=ckZ%1AF02;DJ&{;SSyN8M+p*#fMJ$92N`gR0HO8o%rh0{GDyu2Y!^zFGywd)a*7DT=gBs=5mB-J|*6~`s
z$mQ5)n`qow#b<)gq<83G4FtGP$LTI~!tO{6_JoIu9uX7bo(aJj(iPDrZPzM37oI=FI~jzj4!DHav)rDW6?KrPw42vYvWvoy#f&%07-
z{A>doonxL09h2S@xE*;e41`qBH-UnyO|iK18goNvKqL~wQhCjWAuFaD)#<$`qw;8{
zk{D?}$^c=QpctWz$^;17I3XcGNX6StaIo7%&j$LSjYjQHGN7FtIu?_I4AlBJ@jl&z
zv7U`MqOEokja75dP&tmeiZRqNGOj5ZMpelG${8(}(D9YZ7(JKdcA(f;yRp)2SsTjp
zI#7|{i3)MKXDO{z<;xt#Oq++P|km6jea
zh^RJWH6&1j0>MhHwA4v4l@22%EZ_7uDd2tu4}rt1hvQ*Vf%Qmit^s
z<+Eb`PE5@`35zDSVQS7vn4%(DGJhAAFE|sc`2I>`=VIlO^UQSFLMn&(r(@~FsaQI`
zgLX1jjc>==Ij3OFoKwxH#w+RcmlF<4s2UdVyUZQfg7Lo180y=IK1Me^-D}asi@Jjs
zcT>v>G!Qa%4O1wuo==;Hj+T`u%pXK#R5hZaY7r4$gUGNNM2A(<#BORyP+dcS;qM}G9sTrhid8)Gw8hOP-o9lFM%Tk;9)sC>STrbHdLOP_&KGUIrdi
zGcvtCI5?t!#qTUL%ETV^|C{qPvz~#?ENFm3A5VXy@Kg}jxiKxs421L<{5&0t?Y!yv
zCZ5jvO#}t2PGW|U=Q>uu6heZ>EtB$7deHnLmtft3&tuQyzDmHau6iTu6K9|{h&6_k;OtI^@>2oKdo)bzI~t%^#D^BJ_v8kE@5TBSBqbKv6C
zdMcJ$lfJ7YOe*s!HB~R+`H?!QEhJpZ`p{h7kJhRYwAT_SbrX!#7hr(D&k)tgDAmar
zo$Q>xb&L!Ml+oj`V(!UUvv4P!{u$V?;sR{d(D29JgmZV^g)7c~6gOS{0&c(gb=`z%hn>vcTw
z5$XBsZ}=6z;qj+G#SNFeiW@F{3Fn=77wU^f;o(5XNYxSGmB7ea>8oh?5FTFc8rnJp
z?yjLoPH8|AgA*S&wTriug{!mQAuu=!5_~O{q5c{6g16F9QWrK@xXxC82}ZPPwrL`A
z0z;6XsU?yeuOp*P2Re({GDg0ZqOd6i0|7zd
zMR_mB0Qk}ZT|yAT?-=0~PZ%U1mhepUPeVdLI+Z{sl0)*45>mivJ`y>fL`&p+d~lAj
zgrHn1v><*D2jk3=!=e!{hbzZ7n~vR)4$r_s3WPwRW0fPFL6so0Qc5<5O^2)ItQrGL
zsV>zdoVZ{0BT-S=!&SZKJ(Hizj)(xzedzyHm1JDtCoqpeW^l^y}<
zU~4^gu*tDra~*xYQgvqZVgBasj$Q_`_PU3Zhw3e=yQraoBfr1Cqf%Q=Jdf&(=*aV;
z&Y7y$xDz5~zdSabqX54M#6=XKBBzfEf^eXdAMcjRu*|@M&R?LI-@nC}9;hd?zn<48
z(>i+C9sxqtv0(T(V*-e^4go>{9WlurO;EZl=s(6pi%UmNBS5T{WHc%l)kX?vh3Qo&NaMU(mGIEWC5j~fUT!eX(Uvd$_LO~IZU{WqP=boI_u`5
zvwl80`1=@ZS%fYsm+sc(=xkkzcBP02fqq^{1N^~<=S9^+y(@pVLaDZG7C5J-m;99n>&zv$F?sDCb}+$ZOQ{IaQh2XOMHn+b`%xc#b^@a#9=D1m3%6zK1p1Ha+UtKY;OSH6Y|
zw%twmcS1vD2N`(8SnzNcJVN2&t~8ZWQUP>=p1f(@jcV{vb5laW>e+2m4@Oxi6{UGW
zLLK?+N#xlFTOoAie24>LUAKFb@P1e2dr0D^hU
zVQx`~@+1I!k`U<`i%_>{#QCNoF(?Zu!MR8c$whitAu_{xt%oxx<1{0(45{Jj$5Mu*
zuwo?ew}}r`e}NoC`)3l+X@qGqg1z+QIt!+L?o?yyze13j+7B%%jH=C_$KV%*`AtX4_6c
zGq6!=Ngz|JFhQG8_&0&T{Yq^FdwCfvyR=39qX^g39Bx~rX^=#%{)4g(Gw_Jwh$`oFifZnG7=ta
zTgIr^vVJ-%qhuPXTi6QLp|yR4Vi{Rk&03J
zN&_#NZ86{}Lqmsa&T1Bm{_o2*II#C8cS#ww7G#TVnMuDWMf*)S)<&^O;mDN`Yml
zv4I*MP!Z9TV#}oI0beORw&eIiB=gvlqKl9aRfO26Ld1sg#t+LwOn5%xBIyjGOSw)p
z(i5AJpWcPCykVaINi(FuVCx#Hn4>X=7tuUM7jt>>%o}8MK_#(Zt+&_9E!qY>*@UVv*ZdKOn)_YzKh<0E|j
zlU)5@_~!RNaQD3*;g*~B;o2)+!m@>@!rw0yeqMBLepv|e$ut&7^Y=}o@jdS}G*&La
zdAlCO?yFzN12?=4d~Y=-umj}F4}ZWT*X_gOH}1#fgjHrjHE+mZ!XwUf`17IaP)9#c
zf{{)ghDvadk8@uVgo_|&Cfj+ey$q8Fr1M;%~eBthrv&yv^uL-
zbO^kiLf~UJzV>yo`mp%8s%dhd={+6n6^5k1SfmCMGA^F{egvUZg!+d#InlAHb(5O*
zI`jMr#@=+8R$57pQ|HFTiRVr5Gz!9c&-B^gHdbQ+o=d)OS|=H&su~2>Q_pmP!Z=}T
zeISiyb=J-hiCz8x^JPxm>9}FMfw$Z;e*0
z=ZOeb+E&LP@aQ{mA38n)&NKwzcGkYBh_sAQkqWbFAl7^OKB^P>xO?+FSr5}Pt;G2G
zN=FJD8Y4?Vhz}K+noB#(B5-(aG`OS2$&%ll=#!(jpdp9|0*6fLDrFBWNKC2$3a466
zfKly3DX#IZ^#&5kIGCb(JI!Pu)^mC^M%vfmh-dHn7|-4J37+K*`qW(?;IZ5H;i28H
z+5&VmE<{(uBJ^lbIxZj3JfrB=$`Mo+bfJ&{Q4wBEgYB)hERa-N
zX)4tw2o$M>jD%7%$fH_dndZT^_0=y$EyfDcc^pb#RT+2`@Obi4s*po7H5;Q`tmeO_39!;#d{0e)
z^9htZllm&RYAf8gJ|}|^NQ=!wa!fAbqp}ebk;zCd4G}>}jHKfkLC3-0n^CZ5Bz!y~
z;7w=d&FIgY5wV%qV<#D9`nkpNqR|i;sfhH?G7cj#ya*}LR8k4G$WCrE&b}zCn-Cd9
zX~7^0DR1*LyHT9m$8$cw=^%=^tTd+|9W@KNZYTU0$@+Q6Aufy%*1n=EkQu}89LIge
z6N+i=SkS#0JJwu*(~sGWvvxg+m#%vr&piAruDj+r+<3wBxbgfKuw&!(NTXwRogIuo
z9;09p$jDX}U@R5BJ}Fc!6FB?S`*8EMuj0OY-ozLGXbrIUg)eaTZSP|Db+2G-coW?9
z-RTJZsX_!2yZLw}!i$bK$UB|U(q>$7!86!%?HjoKj{SJ**FS7~1AZh$Uf@2T-}4Ff
z?m2+7j=PP-ssaJ6{m0SdsTv$K`L7GB{CR(XC_c%HiULP(50ioc}YsKFs
z5&^DJHdv^4HX+~?PEbUc_cX$40N?XB4;SLRw$Z#R*CEU-v%Mx@{B6&X&=4%%1YSmH
z8fv5S5FeoNqEz^&<5RAFrXwR{!ok&*PE(H15uUF8rl++jg4?2f0}w|Iu|n|BVLGTz
z!u16d6`oBiB)%_2W;tjpS~n1)^Ee=k3Qs({Lwh>MJ0q39p)1>s%O!={s|OdbWt4mk-nE3l-hfB5S1mA1$(Mrq_CZkOAgE%Ss%f@t59w_FL?G
z@jL9-gMaq^fDbhO(%v8O{!8EEofp2ro6mfSS0DR?p!oog-}Vmfz4|5Ge8Ce0%iUBg
z*JJxpml(COdfs+SjU3B^v+`~u-K#M~8>DLKBUlD#!?dw3J^637u`#|@(YUdE80Goh
zjB?vioJEkNGt#$#M4c3^be4L_Tm3{-(=cj+&Rv}p)zZsuS#0Z%$AMPhD&l=^;farWg!
zA<4>lQ)~?|xphUpD$sgr2m{`*egsN@XOw9f6yy_!P&)c>I-&@FepXN>VuEuK8=8x_
zP)43gM-V2l;RQTCr6&sL{OeFtFpR#kg;?6O37dwtVe?|8jV{FTt1iQ~qpm=2!xA$T
zM`Qq_-*Boqr8=l0(xS_d9;5j(bTPU=`-DBX?b26q-a~KV?w=2hNcGOgKjN;N-o;(l
z@59b5yQzkX>4byfOXu#({R&P#baY;ffIaj)W}j4y@Z!Gu;^(mYhBxu_6Q3QD3H+08
zc;T5(@Z^J^;{IFS#z6NPo)<#YGaf#k+z)}_$^Ce`N5hj&+MUiVl%QHV_f!Jp1>A7u
ztGND(*Kp1w@8X$vzQnsPe2oVl_z1UM^A?`J=K$`#Za)SH8`UkmX!ZdL%}^q?skhqO
z)A4DfSYI&RhTcYTdJrK?-WM&R9YH7g5NdRgV&L3EWs2_CvT0V
z70B-%%yS{rvH-pp?4e^xKp3|P)x3K=!Igjz?ZcBn2e(mYM?uBkMPRW2qeq(><9-4O
zK7k~Vzzc8}h%CU!0&M0hATrSDpkgi#AkgXL{WOe;DR|5I)4?hYB?oMClrocUvYF+i
z9l4&RFf`Djo*!;GO-9=@7+pKs0Af^t)Q6m@RD|WMjl;GLEtLPt=
zp|6pCyJ0zwxbNoI%~(k<5hQQF^esMo^Cx_^Un92ufge8m3qKtA6F+|OH-0+sH-0|w
z7k>VnuRr@8Kj>jW@BfM~-}wGHt+A|0XO_3Z;(++{J@xUW}HS3DlMjnZmo81{Y94sB@xvw_CLitKN}m
zri|hfl#A8sSFj@2@e4!
zo%0$v`hv52PvNgzaINsN>e!wQicQHII>
z<8bvw&*9Fi-o&SS4_Kbw_V?4*zvGcRKEi`Hy@%u1U44a`ZI0J?#Dz2DnWJXm`jg}!foYz%wCY2r?yAM^4
z7ac8sivUjjH9(?zqI<_9gfI^a;CcbsR;rG#wLHj+Duk*j+&7)S6|Wy3{zimEB&U&F
z7RhB%zBHdSL~}mck3oT724egf82Du(md6*veMS>7QR>i0@J8^r4>eE_9FpkFd7X2g
zQ5w65`-$LuxEHSrncgRibPQnxQm8R*N3a-}7}de=Ll6rdL0lHZ`5*#CuLBLNWLn2k
zDE`i2D2pvZe`YBD32=XSpEq=Qs*Q>CD+AxBi#p~E(cK~cWtpzY5cSG~a$
zkp&NXbS^c*?d|)qwzFVhnH;#B_Mv5h$Mk=z*{-#&9J>W0YySp5JQi)MJ|dPXupnW;
zCirlB?Mv!FsVi&$`W&rG*qH6?>P7Vp70Hzj(=iJ|gcucwd77bti}ksd(sDP=e$|v&
zEyZjhuoqCAc-^}pl76j;O1?U~
z3wbF`^o2EM$dX0|jLjtz=xy5KgNp>evG%C{Su!LARoT@Bi?%DJM4SyJAC&3&-m{1-|_R;!0$iu
zZq{=glnGFVL7|~c(V|}SZvXQK;Kxt@z$e`H#RuNS9hW_c3%1?L==Nd)>KxE2-NZF7nysO!8A=QZbl1OD_Ch|rmJW{DTRNJtIdsj;WS>*!YG`85D2tS
zDGEi9hg$$6=s-HwAX)&UT7RWG=zJ0ggIFp8r4IDmVvXn;M2JX*Xw0P$Z#n}y)i6RN
z)Spg*PFurkgcB%{jCLdF&?<6z&7*d2x%frg@Y)CXh(DSA@11>A4L9t^O_#ikuC~>5
z!s;9sj&LcP5Jtu{DViuo*I9A(*tGmoM(}Uq=Ih_ZYaeLrcI!`zS7%4~78LC599O0KhFj0Nc
z@rQ@yBU~+qVyci4*T}%5k=I2Xg9SRh=o+f3I;3-&6<^Qbq@MG&oHh_Dbx5F+h^DFw
zRwDq_4ETE}HKeDvsb{%H$@Mn1fDi)Tf^I0+jiB?7q6&)gWw1f#AFo1ocrnt$$_ObM
zr|DtkgcX$?=aWMi_yiNuvJgU=$DSNoj1*cbEjgI*=CTB;mBb)IT?69<^y!0RKm~u%;}h|$MbT1SAkP0PC`dxW$8N~tYh#v1Q0110n-4G`_OYgoE$$c3pFTE{|_}r&_lb-K#f!Ymc@!;;gxMbHoIAzmy*hYmSsBBnrE>;jI3kJ7fta~+O*Aml&xUOOp6-B)$&Q%Zj
zCX<@dI9*vOj0mX~GOm(l0r^|V9?-r
zZsBy4mif}rs1WPt$>@|fo?xV?P3A{1sJ5YX`~?X`eq3$=M8=!bz=P}3F(w3Mn&-Ap
zwy!`-aleUz{WU-zO(VSq$-H6_Oa~Y2lZard63YY>DHDRkH`O$Uz4Dx=aOdT(DL*Thk$)zl1E}bv@(74f}z?Q`a3NXC(Z6Jx|`G}U{k-9M|
zC-pyo5=K1#y;kBq?
z&>a{wDaGPxnwcuSB4?;nkJXe{CTFVVtaPk`1S5A>M%Ze3q{rK;_qv)I%YmEWLkI)o
zfVCe^{~I87M=mumgHF~;_gH;Aq#C4plv0{*Qd3%A%Ep3>W%lg_5Dot5>Evz-(@Lkw
zaZfktD65CMfs($50AfpXSrD8>zu`{*qU?dcIew#7==?26SrCy5v5NCHHN>gFVAXvD
zgxOSFYO*VUaNpdAnj>o*E;mOX#BAcJ*O_<3HfRb=Bc;xOtW7sXjo}A$WAxEiej;gy#^$HxT9w|aExuZJbA
z|F=K-Dh&+y;xeKw=OqKp>I=~|19+WAHW
zs7a+h!wwReIVKI}M^zGNvtR;178{(6Rr7XX_hql(`s?4q?O)me!oQFCV?Xx9CwPLY
z;j*(IM@7LPQs@Xn=p@x6JJ=ZaM?iVefmG)9;H1sB;?&a~!uB0^;iS{<#hDj8h|A7+
z7(2J$gB{!M!kK(;#qtXg#@|NcL;1O@=xUt@sVs9Yb<9*({yb*^1d|UHlrN9fm(g($
zBk7>v9E2$P56DA+e+~kCxy(NwA$0P=jLHM(I0FI;;72Fv>4&--<3!(z$c2XO;am^@6?M6kW28bI)c}73y`%#-SjH;X=R4`gAr<1Rsm8N#0
zIJuSU%i2(!(n=V#p)9q7*2(v|EV+ft+fkU@hQg#46mXrgv`zwI01e!KYw&*NXf7B>1CODWpIgQ4OS!+I#8wn0wD6egkr7p8
zR7`qUg;6hd1(Om&V9}C;2`{RZq@W@~rI0YmBTNo~#4;--7A>gwrgL6k`KLM&Op=WH
z2r$=Wn58~=-G%XY3*q%1M@8J7TZfX+BqaIreHRUzP6s^8k@u4;g9ApO`4AvX9fhB#5qJaK{TRSHGXQg>
z|B_-6p!t~ujtc7L87ykjJIlv(h;68vi?NP%W=yNb(g~w3tW=fKR93CSdVNTJ47aQ{
z@EB}df&ThsrsmO209gPz1P=p{AHF6ee$azVNzQo-(?#0y?
zJ&D~{zKnZ!zim3H-F4TSc;u1&c=6=}c<24^@#z=8;+r4-#7~S&f29)ng-Yj}PyWU`
zFZ_UK?)wyX-|!Z$KJRIqcEWAgxbi|wO`MF8-gW3`m_lvo9MdXDErK*SqH=mUN%hD|
zs6|>_H4>xCOo2E$G#`;6Rue^&W}qYTqf_^#Q}^P#bxhgHBI{RS(_-?oN@k*Y&jdzMa=h_$oQ%NaeCd!hZ&F5-@n(2#0}V;~I6A*rex9E7K(%3@VVU|5
z7!@Kl!p~LON>c+6nl~M)k4&$XhB3#Z_q0s!aUH$(P)irSRs2oYt
z2}V*4z8Al
z1{N$hl@6TFgw9(ndISs)!c=`A)I!PKArKLvc_=9zK~8=z()iotb6T1|L>oa~P9M@T
zyO5IBffz>jVgA_&4NRvhP_x|}1gqI@KorQ-}`G#(mWiIC7Tf~JJ~E-88Njml59lq88aeYRnFSe{|5qjzHE#vx(-V~7y
z8OP5l*B|2gfnnlO(FFM5VlFhd^S%MAI1lHma}0ni`7*lPI<3BSe(e
zQaUh*zl|UgN(-}DI0K1L{x;Rgl^D#ZLXLL?QhXy3>PF`_+r_8|jo)OVZPVJwio{JC
z$nLD^FxBEp&U%KRq6nVOTH9E)5INx4gpDF_86ByjapSbPzTM#)C#?P3`*+N=B625h
zI#;ErreoTXM;dr&-ckWpKM;MU<+P%>HKJaJP%5v%@(L=`V2QGPX@Lc
zvDd{)c@Zvxt9ins)Efcr;pz@=S05yWvk2pGzNZur&fmw8{8KyOl9|7V;r|vh_4mB8&iZ#X!tX-m$K0M
z{wkgdI)aaJ-rAq7-+)~?*i4}Ca;Kt^xhd5}7--a1qjcyjX&xG}m5$TX)#|LKLb|7U
z&l>()wHHsL;VsEMO7Ea^PCi%he%Gnxj!GC
zGe1uK34uUHt^QsFf@d#~(o?&TnbwD_tU+XD44VcM}P=WCia_E}9EHDKIeJEeN-3JkTcqJ&?=>un9jcw>#z
z=BV{b*HM^HM?cB)v#_5|zkeeZ_HoKPxNgz<-8j(wwWJlK_Gpd>j#d>Z-8qZk@A(BkBmS{j?J@iUF$CciS56tK9
zX~Dz*guhROuL}C9ghUd;Jrd0{jK6I-6==9pnY1tkR=fu?Lvt{g+la2Xd=&aeA=Wzx
zA@2V0adu-M=4nzurW2$bp)G}FB568Nd*p3*s%D-JQvD@N)Gvi#l!_dxwxMIDb3Hha
z;$fy#lGKM8#)XblDIe811Q4aX?9SS9^cHMPZG_50<7LS)8+dS;HTD#@krOu%vAt(g
zG1LBK?Z*xe)kCc5;or-uYiQn{o;n0O?(aVU!tJGO4%#6on(t-yXE!P%le(f(GlORm
zAcU44I;A08l)}>BmA>wQi1d#^JXK+kS13Y*(ixC1Kd3VP36R4|S6%WP&L9vrZ@d;u
z7oLrYp%XB~n{JRdjBJPpI7l1d%{#=KZcN4-XPi!J&fsyF7$7+MwqP!Aq_I8?ymt(S
zY5kq+(b>8jwY8HdDi}gqY8&EXY7iAx#3(b1QE587eNx~>XXHtz<3We!K^V9b5UzB9
zu8d?|89@sku5{dLt>Z~2uR^XIzEp|@51W!O=_kwVX(8)zJw5)PVC
z4FrQsj@>wN4XS4!!dnjw3WSFD76{B(NrZwKJIT}p{7hXy^R8yOFJJp`Y9B+%HfGXc
zQ&YS*V<&k*!(^ziZ=NOLMBI5<&`)5>bNm$WlhQmB@`#@A(Gv&>2}?LLI?f1TQ)gIes@nRnA{cXa#Pm2@j24
zOK0OvmElPcc=>0+htA4}PRqx?5PpG$@TE%d4annfm|v
za_GGN)M0YL@Ud7reiD|?*^U)+c3|1)Nmx950;YzK$HL*QW_SmUG&*KlrK}@dj>f#+
zO_C~f#e)2eNf*YljtwHWJAv-H&lKpFyOlu#LOUqdJm
z9=!f#^9hQDyv`T#+MgOe4of&)Ja8-)aoGZX)_gUy)?cPMxJhNDnp%m}i0VCR*%i*fEYgQiVUQKc-@ZAi9HZ%#XphZ7c?bgxFF*J?
zxxvdx<6#LPUNDb^rSr3j(^f&*UKl>)DD4rt-j~y~l)*GQ=Od{Mrv2+*bmY^`_)w;>
z&FKDMODfw`ib73mO^YQuRjWwuZazyXEGq@1+JXi_L_`C8RSFdzEt&s{uD#gzu2>v`4HCpiZi$@dhk5OJzW4sRk
z2@nGj+8hH4IO2=%fcqc%
z7#Hk(80VjKFV5ddm2k>^IO+IXaopCMvF4~tFgA9A84jaQkCdgeAL7k3O2sf|!Ks+P
zU>7DQcVgbe$(Z2HB`Ay^?A^Q-6a8Cgn+b)D=w-Cm!AP&QVF~K0CQ)26j*@~=Mu`(>
zs-T0YT!6UvYJ`X9BQdTTX$ke#a~L8@5k&ktRCP@Z|QM+^;twIK8c9*O){!M{SKl7(-BADs&!9VB;gQK
zj;z=k^MIM0_y+Toy)1$vC%zWB@iiz&YCv&{Y6R^lWi+o`et9}g9THPp&ALh4Pe?$f
zQ6hr3uRqlvKg-vTs>3fG{vr7Y4l6}qXek0h%Mln+g}}%fPHPbqQHPMII)p~oBAk(P
zG$ZI(I>Fe)RwSo)BR78(RRlqso;|?GXpn)&2&4Y-0Xq4?EtsQG5$J3O>5RL(*P)#^
zMhm0%Mn?N}Eh|yix)LpP;=R4RDY(tNp<}Ud|f*B}1TT3^9UZ$|#U6Sky;=XzU@XBR#}wOkO7zz(L09Q~f@D6Li{_y|cNEo`14fOMB&qj#hv{&b7uR3|34hP1T4Wf2R3MeV
zLrRF%(n}_o#H$GJpO09-+(Y#c{+_Y4xPUBMS}Xlfg8_ks_ngvKr7?vV%&J6Rat@lJ
z(vaj4i~v2e!okfvc~C=)Yj8ys&(##witMfa3QD&qZKW1fdf%!Y*d3=#k@&yiMh6>7
zM;XWM{ps{AAh=j*9RrR3HmMM`ZjxE4D(#!b{hE${Gu-%@G{VN=NcB8dGhV41!ettr
zGVe2IM=zVhJ_L{%)Ba6((2N4Hl!9qaY~UdvaB5H05q>JTYgl;IK1^c)^F1x~VF!ra
z%rZ6g<@VnpUBgfmv70QZo)+Tlpe%RPg$%T!x;i<>*oht7<7a
zxvZmnF^)KX=dIYX^*U@=a|t%CyA10Hj8)6e!{W(Zn8%xAlo$1AA8+8^_2}tbjmD;>
zsI6Iq%8L0YEuDk%k~t_Vn?Om~Jd~EqMKzb#*Dj(H7(_;T8*(x`ke}VfX(uw&D>}Uk
z?RCpB(0UA3_in@S%XVVj(lfDn*(F#u_f$kil`vusLKq{WM1muM(Qr&y0U|>35Ez(g
za_2sbh`ely!(CA@qhAXi1cxh)io?a3(4e{4`Ua@>;X!AsLb{hgAQfRVOO045DC;#<
zibput3xk)3Qc#41Q5IGz$pVESAvhc=#9QMZ2?&;1J(mRq+DvQQBbfyX3lK&*NKp_b
zdJ>(URHvuc`MQRf;=B491bf9I%*X2Q5#gVVsDKn&I${Dd5Fe6bEGbm2e+sD{ijm6m
zmdZ$8ErC)a)%j23dsQHd5o%6c9deVJke5Vo7{=$q)tR|8kW?>DUA_ybZR#eGWw95HGq_yA*APzBfoS3s_LmU7!CFJZZN>m
z5G#wuPNJP`O&P#UGI}2$+>Ak9n`*Ju(S0HD5CHRrPQ-Eo
zWX*yzv38OWS*YphSUvwVtPn)TcbM_OG%(~sDrgN|Z66D0l8#<#WtjjXc*uAhvK8Y5
z3a3*9l-5%ZUv;7#rurCcQYy>JJ*$J(SO+1(sQ@9RVbWkGC3cKSk14%1A=ubbXHqXp
zfelb)4d{VC46@pJewrC@)#nbQCTj>)>HVfYQfLb8ZOD&nK`zgIPBbAxHDZT|o_(FF
zVtZ(bDXuGh73-ISIDe(HEM=m!Rzg6oc@}n@znTN9;GSVxnng;Xcqbt>BpZEM^%%@7
zMQ36rasopU;pm1`_duk01R~zuAHi8fx#z*gS~%ni@LWK<410^$(vtmxjA+tL~T!=W0ZqgJnVXQ>Re_%h3-Qmk5v(qbAu
z#+jhgYE%+pXbdd7y7ja6W`03lci25P=LolrCN58JU?pD&nb*>syaQS;t^
zTkD&;ibmpl+nA6P(O&`rN0!lSVyo<9X5e
zSOSQ?w}v$_J^y*GGz?0xZ!Bs`$6yVDdI%s!eYB~?l~w;x9}#s9R4c7s)dF?xGI$wM
z07JFkTekweHG~MQ%QWF#Y~XUlC?l;AnxZ)kyw}c)wuL)wX<3fe*5zm-FiOfskdxO-
zAhaWe&L<_Y9!Yc>xr|J!D6Q)Y=5fc1(a!^!*S{5GJzLDfdE6aC%(y!V;YEyC%aBGV
zGtzVvc5b=_SKRyxzI*!@{PEi#xaaN9aP`G6W9yb%5E4_u6Xgzn0znUhk6IjN0Ag{0S35!Gn(4
zGWGEgUxM=6w&3#h^{p1BGV`g0wY0VcQv9Qr3Hlqg<27nQAt!}b)k}=5DWy1`Xa)D
zkZ36xqja5Mq@f_m79A(1hF_^e?9VjSrObCHrif%x1p#N~}6F@Fxy8C9p1%||*dj}Ee;
zb~%~}kM8b`81AFmpz~kANPqDhI`|387R}j?`BV%OBga!=Y$0eip^H&{2e09d?hWYU
z>p`lAAu3;OKSAd|K6pG9>5;Vp$D*^acA;gf2@?TisrFAmEgU`(3j~lsey-9}R3MX7
z-3w@z64A)Rgpmy%GAR+M7dt>SZ1z|el?a{xAaBavI^LAE)4Lb;|
zd6`i?rq6^k?@upA?JD^5K2@JB-pf)7dKQRTpUOeK(2YW%)3%(r>Mc5EsRHYBEyzff
zOvm(p>$Sim;8+U8jB`bZ>Us65Q#j5R+;mKq^00$QpK0}aw}HZT%;s~YV$=sjO@TS@
z>_89^6!v2?H4*OD0+bpM5G(|Umbubj`FlqoHK78Xx_8y;iouEM9i~^gT3R*JYz1_?
z**g!K4uk}W>d!sAc6)gZ_SP;#cQpZ0y%?<(3vontejm~qP3C3wqN;EXYD*{4#5cQm
z(T?>TgEkUKwFW1rKzK2_SF5BbzRqSOyKs0Ljy?W1JaEH4eEIrk*z@9>xaj<6aNM!C
zATFhW5rHrK-C__QRz!zahGIIdV^>^;doFqjKYo2^=!;Lj`wKT-`xch3xe{*PG5oRh
zjN&AO@
;sz$|d
zYeE$i4nAwj-#ziBO*_ryJnKGSZKg7#Gqk>!Gnsq!*pQ%P0NfU
zn@@+guvd}u1}y5|Xrg9C%YDtfxLQ`2798CTOUzL1G3k8>&*(>No?tN-vHA0mTr`QS
z@+st2EEwqQwDb@dos8()X`P%OAXtW!>QYK|=y;3`(7_WB%c(dFIAnUR2?4U4
z%2xoHq5@e!rD6awKzI-c8rt3tl=(_Caeqp8E$3$o9I_=kM!|;bs}YE5D5efV2uMMw
zNu=80cULbmftFfw2_$1wCPry6GL-VL1H`UA1d#rEf~S@M(ql%erqEfw5bY(rM+?SG
z^Wf^NK~$=_aauPa(upFI(rQORLbGZ1n-yJa`i`XX{xiS`6ey@xgNtndu|Q&QzIVh!CTf-{S^4APGj}+P?KH*3LdK*x%Q>~
zsz@(zC}ZF-Lp2To&q`g{)r3(iR4CK`Euh!{qO_IjI^0(9GHEP2d8Mq(gRgi@*7p~j
zEU+H_T?{~UJluy~8%Xf{*o*fv9jnf-8Ix*p1XS_X!ryg!W^
zrt*+!ewg>~!REVsZ6G3`*Z|T;>m>vF)EcXvAh7|Yo%d`T@7*I@7?sD+v5j}E$1xkO
z!2?&kjJKY88&}=>49?s22$rqB5P{)YJb6A)lTr0>R<2YL)p=X*#EZ{-Y{LLS@E35?
zt^2Wd<8|;0$$`@}FFMzFYdDP1Vhq-;#04imfIIH|06*FIp-%1ZzW)QRyy#_gF^Zc#
zQxUum$(cZKq?j6qT2HwcWg$5D@kII1ya@;|%%=RDO^5F=ORX-vFiS?~KZ_TegFS6z
z@}7jo40RG@G{EhgP4q!!KC
zE*_)0m_U2^d~{Y$qPt4!g21S^l*Lf!gPQmY7xZgBqL=FKO6`9
z>*Vs{ENoeWN?ynfUF*?GC)`74JVfU`&S-xg0kV*)VY503sE#n5F{!6xGcl9;fv@h0SK1ApyiZM}<%w){UqZRfLAr
zh}zYwd9a!h>pg)&brM12pQiIaN^lPlAf}j3^`WN1vXhkm+l%;gp
zAkt>F%!;Zp>O*NPrL!{mI#X&SwA}O;F@zDk`|E7rd66R$77C=K4>f8t%?&
zzz~&3Ut9*-qf*fpmVy%h2n0L3BE>Hp8UE2o_6k9=M+oA*^x!EfbvigxJQqYv=Qur=
zM5!n_cgxXRj(7$fX;F-*V;GHx|7$v$35{hXomgAbk7YSkXz~t)FCF!?BmZqW)*VVE
z$)U^P%Q0Jy)xK|QDksh3n5n)J-X<%c?0}vjFXdu)#`gW$9k_j7&@eTX=}uf{wgHV*
z3$blSn|`E<>`HT4h4yLFY{$s$qy)U2>7S%>1P`7Mdk=U6QXAx~l-nVI90G~pqGr(=
z`dx54R7=rRz|gZ(932S~M*?LwKhxQb-_Mc0)Dx+3m1Y!f0m2l`I~b(!KGnTy`hn2w
z@X&Nns#l!|dA%wHJJ3LgnATZJVJQ$=V&I_y`w^bbp=hT=x!{C5@zTqOVDQHGf8&~K
z-@x1z=fa(;KtpqQ(24uG#~?kr4C@!3hwCqR1>b#eNJ)J6-S4>W>enzhxf7mhx#Sv-
zFrQ>ICR0XKIgXh;8#kQ)JkGxJT|8A9*^`2q5*nP~V6M
zAA*nyAvQRR3V@Pc=^#e`$p!+YNM*FI`axPGqkcjlExMACzd%4IA5G`3Ucv-G9wWW{
z#1=YprH4A{%)1!%ccVH}j=axu=DCBYqC>Cbyq*@O{s^)Pu2YuLgYry0@SY$@r)tQc
z6Ce;&xGtr7u$$6OWd;)6T%Vu8?X-ObKcgm>u%NQ2D;z`v)kR~WY8GQ?EwzBrQ88(t
z(N(pO;8%Z!C3I#>8EHsaP-!SFMTa-es9CLvMmyD#Xr*yra&S@_i|L4$*lg+0u~MsOQkJ+n--De~j?pbYf&1=1>_7Qz`WI
zZy_)?p`Gfeg(iq}@wJu>(5Vj)a=mo$qjdHY!zUUgvUJ`q3m$V$q59a4#bX4B>KKH_
ze6By2@R;b^Xht+0SDHyJvTXGbLF90=;GyrVA+$9xogz9b1vS`2Xz(UfZn?XbDuN2c
zq5<$b%Kd3kof_M)|nFuDK42&2YDdiRIn~BP#
z3XEn|qBkZ5T@guCA1P=KPeENs0@8hh5$WlNNRI%7yHSx4B2n(V*BmsAiG~GH`bC`u
zt)9}(DqJ9_9jY-{b%w(oy9F3q
z=R>pqL)+Ou+ZgBddKy*DY^ny0mFMFcXzf!_;{Kdxso3vgQhBOr9IAO(;4t8_Ewkp;
z!c6N4gao5Wfk`nDLVQoEZZ;K&qoe9Pmh$s(@?tgxKr~?6`UU4;&n2(o?*r=bVf7^Z#_@R_Gu5}q@DL-+qw7Ptn=>2x-BkLEZeczPcr*Gg@yAqfa{Wj&enk^Qa2uqPb+;?5i$+
z7&ZArsLdNjUEUyS^9MN{LS61KY6&4(J=bX{;OBEHGq5NcH@``9nV#UsV=13UXv`-t
z^t=^*CXcDFPN|cn1{}i#$7q|>2Eoy>iqKe%iB35%IW9eQkgB6|72jKH^7D&_2#w*b
zgvM4ZACVnLSe$_6O644^1#H90IVWNjo$*R4hNX1IsvFFwDwyo2W2JL#Z#@cyRf~~X
zK82iWDv)}DgXbup=O>>RYY8vp3P$gBJsYS(HWL8HVuTPGr{mW{umlae>Gc?4HDKVe
z8SQl7f`_b45V3)zS4u?d5NN|x45LbCal841$YR1{v5M!MUo^bUq^m6Tv4!9}#%j63
z?>~nC)e{=kD$8D2KV&MlThCZf%Pp%wX#r%2icUG^eoFris*VnIEF?5_J!q&1r4$4T
zfy53I`@Bp5k`3u5CP1V_dU?}!6wfp1tC}nZCYcOMXsUx0CA6b3j@NHIgPFv3zUDk%
z=f^dfbe39YG0!8(aga9gQe_CL^dFo&sr_uh|d@l_HIW-tapbCjf
zK}%R7nj%ur6q&?nGAcvkk?I$W81DdtdU(O#$sNJ2KJam56s$T3!JyVtDx#}tsp(nH
zC|t#1rD%*&`1ee>Pjf&F9eo(pM--#}q3B{P%kRRn;yx_SX~w*W3{<%I!AZ~U_%|If
z;h}yZhaCBlbkNiJd35^fJ#KUK76csWbh({L3&~MiO?AqvJp&OcIa8zI
zXIem%GU0J)--NW%S!%!_fJ6poqP}!KhT1G>2p)$6M17rg#f`rUwM8;JhJhB*3w6O48ga%|F$U7DO>PhaGg5bam^WdQ%F8A@#GajPh%6&OG
z2gAWpHIE?9hrq=(25uh7aPv%st9vqBIqynb$_a~l
zGdx9A_5f;g7`1D(N;+UU^Hw_b_A)x(%7rG?&_ky$=Wlu;H!d?&R?|wQ7RGq8C-_6m
zQ>z+Ao(mYIsyU`HIu*6|SCh^8bU<_Ei1fqJDa&!FlbKQ)1}szs1}anvZDsRpHenQm
zj;pyu$HuAVXIDs(+Gt*G%qR|mL(nkb=pr--
z4|~+Brl%%_#pQFm*I^-}@TtMgSYlL%AaWc5a{NJntRO5b!iqb2mkX^e3MZ8!`7;TsGBCg;$sx~TQ13C$jex;uT5vq;D
zO%NEN`sf!Nq&^6#79MLe&vi3@3qhoV%ev^;yQye8dNyK^YGH%`5tOvOl*kkTqS}Xw
z=K{z)Dy%VeUez$yoX+8X1P}ue?n|jGsjI`y8Y0^ol+NBHQqNNuBtUuyj4nd6TRqYl
z$=Rbia~%;bQW$oV;;@@h9#k)bP0JXB5FWgF`>9-d38C(?1*S=F0|N^MIYr4-uX>KhK8IQ}-G#=%O_=Qx1W!6`KXn}AK{-44At}BBjcvbRI%gvZt(D5eI%
zjFtjIOW^IB4tLK4cz6>eJ}K}dWZVe~jen%!Ei@)lP-q1L!>SPwQf7^jL>V3sT84s3>l!j`5De;lZh#
zoub_~IxZ@ZG1`Qb2fz0sI?P3M&N}u*{0{mq_O#XVF@0az;qxb2AUVudY1Cy-m#UQ#
z9l2?JM5n917QOt83jPK;bh3Gj%F79|DxUjlI^qVNZ>b2?Gr9)UQ=V#sFp+|g2`Yk1
zuK~zrtANh+1&`)FDi|KKRZzDe(oP`t66}M0TQJD&)bm~`u!T||R5S~RPPF@jb5v8^q>ALMXD09(<99neC19TyKm-Y+GHla>s)Mhk
z82cFj4DkH)nL_#$y7;>{^Tw^uR{?#1ikQkYd&p8F8qX`O*8oIKdrOk2q!U`HL|Umt
znk^*~(`1xLHt#caI21hWz1EY01&|`6L^O1KoPQ=Fy+RS|?Sse5Nt9jJifbmVOK
z5+3n0T@g%x1aVn=P!c90^D#fY9?L5Fu_&byZR(%JsC$O3u&jvQ?!YYo%;f$xl!_;#
ze+{UpWfnl>{EdUQ^~q5G4%wk?t=fVdw9-o+R6A;_ub$tghGLwx)l+@C0P+v`*iC6J
zsRE7oYah7ND_e(i)Oun!
zSqnjOL`GaCdipn_nn1`a9YtDJAL3FP5tCE{U*9y+Jd_SUj0z&$q=Hmr_Vl2N^lT
zgxC;m1epZ{THYv9Gy9N|+Jm%=0lq(iLejEH%_tSowelvWY3PZGuA>Yb<_QRN23D_Q
zDhHdHj$L#`7`3Wb@(MblmE)%{`j%~{^He{96OFT7%ykxV
z-G$np6p5S<9gRR`&wC3bLv$Pij5wuqtkyR)LPb#MQ41bA5KT=HoPZH*Oie=y$*3et
zZ45Rov4P{TRMo+BmA6q3
z{PoiD4-9NI1@WQ&tp{r#oq`2_pBA21t>4V+S=P$=Hoh+iwemOa;cu$eU9x_fo)JHn
z%0vA==2Okg4V7$NX2m~5mf(Svv_U>t7thw|u#G*4?I984;JH>3gt
zr34O#hh>Mrp{arhO$Yh=3m#U=QS&RPJ{Sd7E=F6)0y8jUYtdXZ<&U9(0Z~1#eKqG*
z5A{O;=`zEe$V}5-(_>xmpizYgAXysWH>?WDA*Dz#;3zb$uhdFQO~+#c(-7?8ht$Y$
zR3s*#E-nG}2}!7qPc~K;M->v2MxdmjG$;zW0b$4t2t~BJFMJ(6;G)rZ)jG&14+k?<
z`pP(PMfr5X4g`mmyV4dwN^4uKJ!X655GwcDWFuYG6mu4oB`D44WYhZ1a-X7
ztFm};r>nNmii(U*)a3Lsni^$vy#PIQgh~s^nd;_is9b&@dGf
zbPUSxFQAiINN}hn(Ly>$wdbE2KF(@gL`Nc^Xov|pe)BA0IwVEVDw-~&LtD&fSn6X1
z)rSGdLEAwGdJ-M1dMj@;5YaxB*0K*-p
z3Mxir)XNy13L1=XWkZC|5Y>jjp=P+F?NS`7Wmt8N!)=tyMyN(cY(sCTlaWm4MT%pI
zhW;=nVAxHH>No=tP5=J^^KXvPnbWbafwtI)c5T
zdo5~u2@$G^7M}NZDu)g_eAPvyI{J7Xdjt=?M|iXf9z1S4JPbhiz5vq3b(*Lsq-0b~
z@3+CHpZgf%bb|0OO?CNO&gbz6Acr7g71BqkoJMG)o&OCFnWDL2USGONdsSy*fMUSR
zWg`NKZFp=okF*0s3S^kS^N3w}@OM|MHw6-d0tkOw^}}f{n?Nb=mAtfOWG7QOBr!Nk
zYhgsV5N(B{sL39n4H`vKncjzT-Y062RZ8VutXhbAs#AsJ8U@mbYyu=RqMGoiL`rZu
zl7mW&B?T3mq2bj6D>g8fL0%d{{DY96pNy8OY%~{TpeZi{wdtv-Nu#Btq9Kmcumltb
zMxih$8X10}h$KM#ojjo@5}M)M35Y}RP)cd0Nj*8yF*?)1I?+7o2*VxRk?iD+n3*o{
zp+hdGq8ScMFg7P58xs+^Xwx`!bf!lN7IfINRHHb|P1!uI)xitGZA
zrC^NnHxa&*DYVN}E3uRZ_h8f
zgXN!QDGjT?hl`UFoE&r>r&-@c=auidxw!K^u16K(=Io1LpLoQDWt&mT)(bdI$IQC-_wG}19QDXJx$
z>YA6MpYu``0)SEwnoiQO2o_UxAOeU55l-dYxLlF4fd|ccuCP>zQag&uk3Hy24;7Tv
zQ+Yd<9R$dUhpCWb478Na62O!un?r}GrkqM2DXpbeQ6qHz!%|8uJmzKsgo;A_G5YD8
zq*8P~P1;LSTNFFYbxr>bol~BJF@j=@io;Azy2@VXu%KZFhrJ(yOvh#w%T?>JY#D9o
z=pkSTB>$bt`k&z;v%hC*BLv5qc{_2`(qC1z1dYOPw|p4InMP
z0HL9=@bwFXtD6TL9qG_!d7!jp7-z1z99`uLP@zb1R4RM<)-I3)rF-Zq&OJS(;<7g1;ItV*SVb{esx&10HSp*
z74$y=#OhFJ9mB!nF~HDgTk2%mzYnF~{wGuFOTF-w5_5KNHLAl79UY6BMyutO!)&fQ
zYc`M93*K&i);2ts8eKyvt#$^U<84&awpxd-(@~|gX!hENeYrp)pbQcos@>^Hg!WE^
zG6N8`!ipp~)SNXgB**k}R)2=H$YKJc9NBR-$WO33r>P~9)qA3!?#Tq)7
zqb4~&SA*VJ(Yt^$&L~t58EPeLWc36@C2!OcQn93JDT=F?p^!?Xl#;)a(5dZMhdS=R
zfuCK^I_`7faJ5jg%6AdG}+
z_Cat^b?7@S8CD95&XMc|`(fP0eM13&Sj8+gB!y=B!n!6BtF)!t>;O3&9Ck1q4vc@=
zN?UP#)x^nIJ@*u>y2tRq0yFFF$&X&V-vZXPVQgy(FTQFJF`$@oba<8RPLKs3@?
z2m(Q*gHFAZzlBm$1|a+$+5`)}*Gg5`#^11&);x49ng$6Ip6h;|_qlwnAyE1|*Pya|
z7%8bW2#d&qe^4BJ{G#FQACK7BQuOi~(eJKwmOYha3h4xhr8uZY7|HcXDM(@PIzM{2~-ykqm1`WNj4QmW(%^@nvj>#jGVk?
z9$N-Hy@Cl0I>VWCHgrg)2usH?{a@4Y|4etm(iP`ne#=HwW>SR^AeHI;Rtk$&l-$Xn
zj>;pZ8JSUaNC~e%qMm%HV!0kl6;h1Y;Cw_dXbkmDMTk$bHK3wK<@HZPs81q-{Ug!U
z*NjDz0~jBy$52lt`Z`L{U0;N@qC7OFWTJ`+q#`g5B|L{3+CAPg2!2jN{HR2NQ_V(xiRt{YC9D(tmQZVaU5D_$F)22_uG`?0#E(=Pwb|eBS54;V$DN#3QQ}d%;<9D#8n|bv6dHK
zBT6+s5}~2~45rCwk@^>mTdja-rU_}mDB8HJoie+tYSQH2$LRbt0;%%+a+0R#Y>V7A
zjJA28JE5VLD{{i>)qB)DMx>Kx(5YDC6dg^6a`eJ87^P~=qSLU7&Sg0xdlfr}xlMZy
z0n)w>WlgJ4LiJHxy&Q#=OOa1`RamnGMK#M%*0>6lj0kIZlS`3Q(MlQl)iv`(5h9a<
zhyX$}YQn(48nQyBT)k3TlXOB_#|{yh>LX@URc>R4h+rXz$d(X5iqe(tvBTrP0Ad`H
zRje04)Ca?;1a;yg07lgsil$W4a0g)_RYKEidu>C|5HRfE_-Cr>AUw?eY~bjk5n2a7
zo4=8cM`@}RV`^dbKiLVi|5h6U!~e}Ja7cOVV1Qt$k9AZY0*HR&^@}V!X31IDxcDsd
z{&K=&DM7s440gB^qXdg-sylEDVL@O}akTetHmah7zfU_s)6VnU*ted6!fIXs^llf}^Z>0I^Z|@bV0WtCOcG=<4|oGkBvb68!i7GXu$KH8^?wb*5j4
zit2Ou8R`?FYgPcU9>$}F5DJ8>)^idBW7U_}lV^6=2#mc3kcN$_R-P24DGUZOBP!
zK^E_^jKq4I)geRA{!gk$WMB&Ze@7gF|MP$TACs!l^DJh~{x|$0T@e)Kjv4==)A^U8
zPX~AhB_S!Mh9D>~d2ckbz^r;@6g*w^*nl8-IH_s89;y~#`dFD~_0Lwv
zT6Oxf#%D9b^r#c=bXR_s1B$B3ux9O2OwQ}YoH^|nA8W>FKNU$;DVmZpQ5%try3j;a
z1yY6hMkB)~0+Fu1@TRJ8Qv}a*>_KJV!-)9*CGD^OBf0Kvf7tQxh^ZxYtJR`bi|GsQm^XxOf))tNG5PXm=jl@5-FHca9y)XoeiyAz2y*=>Jm&bk^=f-fL7q9Gvc{4
zKe_5wOc3UE+jSq7tsE>$sZQSk$hSl-V
zFLP~{G!vpJUh`)jP%
z!C^0LSF%*xs^+_P7lcDl2f_^<>Ib5Ea`qW`jI`{=O&Ug{$lHwajCNG#bfZ4MAI$_u
zTiJwFhf!nocNl6^-vX;cnpz22Qp+E;ZQn<595BI5L2D}ml$x!o`Kkhw378C=fdN=j
zE>G}Kj`WOR;nyj%WN;x&1dy|PA7Ws62&Z;Fz<_kODX*Sm!k!=m+L=J*IO@8Optk!k
zYWXK?`3GxT_oAU~KN|VxO&tmMY35C7BvI>n4xx?UnWmdj6H_@1<0u3KUej(uWETU!
zS@QFu_`Sek!y{0Fgy3TV!;%e;CHG;~f9RgrGR=Dx#O2E5(iDKytd{pt(*3m72>?Pu
zaGsaL@Jrwb1co#}PEbfZ&zvMj!=(vu{0(WrUl+8^K>R#&{+9`aTX1B{tvEtJSRx<-
zq~gWp&ccF&1qf?-BQ3&%I=TIBKF53cT<^8Sr+IZR-T67VXfQr%Zw%K|E@Cs0zToA|i|mG3zE_uVg@qaAKJEWt<6WC!d`SkSzut
z{^73)2^%O|Da~7>Op@;Tc<+An@_HJ|$5717Se}o${nQ4S!7b_Ri*i~~#Ee=Iud^Vt
ziPzf1eHxJKtw8~oo_L=LJaz!ldK9lSGdmkaxkbqFYW{b1OjD4H;&(|t!p;M`
zuyyMMS{q8y(prhB>0V6rw4*Pt1U&>uZ%RG^l8t%>_ey6vvZCB@g+vn?5p)^RgoJ~N
zf}5~NAUNE-&Q#{=b3+rTc;tu0qa?zO5`HcTb)u92Dvoxd$DNLi@!6P3D8#h80He-q
zY)C7|cyb9U)KPd{IHDNbqxfG15i2-b!P_cQvI4GTg0;D)He7Bbfr3DwtO|4W`|ww8
zn_z7LLxVFeIuHUtPT+dyU`y8#IK+xR>zP`>@$ct%Ew%!S+-z53#PeL=@z7k8aWqy@
zoci0C;ZN2FnZaN?8yB#Z@R(<2$Be-1cOU|XE!%-e(*%ebZpcBa;(UWT5UTEj&O?JJ
zjaeIRwwEVJVptR4d|-ajGpQl^vhv1ZZ*wD)mK5Sex}s7
zK;tEuViV?s8Px3Hr4~NhR3yU$Xj(T>3Y6P7s@bE}{LxfGGxx8`YPDE0MH;*4K>WdE
zQGS4&+0C5k-iM8}?FfUAsdVLeHZt(`3?8B5*pI6A1E{70sUbY-xU6s8XCP8fs2Eq$
zMQJHp{3w)51l463ynVRs5d0HjQ?$
zYHc){Yp401-DVP>V48&-_l$}=1&sE4su0VQHInq64@NpRzon%@S*#T(fs+DjjWTHN|
z8+9dvxP18>DvQeKQdS}~#6g$gg~yo$r^AKlNXO8rV{{mr`A?8g&*yLg
zL*qeFTxxx}G-9r_v~4}_oi95Jo2Ez6*;0X$igb)kwqvTR6a87m=u^Lt)BsjfW6PCOA^)c5*_TC?^DJqEk@EV_M@f&>WqPNhL=Tnxb*!Fv(5Hk?i~9))==*gUF6LxhKM${H1VIY8t-
zOoI-B!#EJtfAk);imtj2VS)fL9S56tqQ7w$`Wkklr*1nss}~56R0|-QI7oFJav$yf
zA}cu$bz&Q8+D7NG+cY7ydo-)kRukr2Uv#2CrXXksE0wLAmPQI-%DMRgqCkC+xmZ=G
z3Ls16;wsu;?v#PW6mj?gV(awo&(WbgfMX0yW)QoLmoUqlGfY}G(_U4z>_K(oZd5hz
zMh$6MLuytN9d}fPUf`lbKPdN<&g3n99IBlLUx9z?UXZ8>v+P+ss
zR}U=#gw8_%5j<``{v}*K@_8KOvz}!T?{43Y;{0v~+-e4BYnX8jYoC#%)+P+vTzVOV
z6^wlh%4wc*sshOg`AmcwvcjK;nc(dqD*`O@SlohDpIH?E5X-H|m00VNprWPV
zAy?veE$dZj%N%V;1Ztb=P*GEa=Js+-PWE6!Lkk9dr5H>t#$ZYzx(JX)I*?LF3Njr6h|3{B@-UiIjCS6qBA&yyJ{oQYOZWOH#IK1&@G1se)m!*;_NKC#&)g2)
z%K|#z18e!|z;7R;oV=aW4?K@Pt5sAm?~PR