From 661d08850789b7a23ff90402c6b0c91ff5d69886 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 13 Dec 2018 14:21:55 -0800 Subject: [PATCH] added custom profile image --- .../control-usb-devices-using-intune.md | 19 ++++-------------- .../custom-profile-prevent-device-ids.png | Bin 0 -> 19503 bytes 2 files changed, 4 insertions(+), 15 deletions(-) create mode 100644 windows/security/threat-protection/device-control/images/custom-profile-prevent-device-ids.png diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 8226378386..3394754e8d 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -81,24 +81,13 @@ For more information about controlling USB devices, see the [Microsoft Secure bl ### Only allow installation and usage of specifically approved USB peripherals -Windows Defender ATP also allows you to only allow installation and usage of specific approved USB peripherals by creating a custom profile in Intune and configuring [DeviceInstallation policies](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation). +Windows Defender ATP also allows installation and usage of only specifically approved USB peripherals by creating a custom profile in Intune and configuring [DeviceInstallation policies](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation). -Peripherals that are allowed to be installed can be specified by their hardware ID or their compatible ID. +![Custom profile](images/custom-profile-prevent-device-ids.png) -Hardware IDs are the identifiers that provide the most exact match between a device and a driver package. The first string in the list of hardware IDs generally matches the make, model, and revision of the device. The other hardware IDs in the list match fewer details of the device. For example, a hardware ID might identify the make and model of the device but not the specific revision. This scheme allows Windows to use a driver for a different revision of the device if the driver for the correct revision is not available. +Instead of recommending a particular device ID to select, I would recommend we point the reader to the documentation on hardware identity . That has information about how the identities work overall and link to the common identifier structures (https://docs.microsoft.com/en-us/windows-hardware/drivers/install/device-identifier-formats). From there they can make an educated choice. One suggestion we can put, is to ensure to test the configuration prior to rolling it out to ensure it blocks and allows the devices expected. In testing, ideally various instances of the hardware should be used (i.e. two USB keys rather than only one example). -You can get the hardware ID of a USB device in Device Manager. Locate the USB under Disk drives: - -![Disk drives](images/device-manager-disk-drives.png) - -Right-click the name of the device, click **Properties** > **Details** and select **Hardware Ids** as the **Property**: - -![Hardware IDs](images/disk-drive-hardware-id.png) - -Compatible IDs are identifiers that Windows uses to select a device driver if the operating system cannot find a match with the device ID or any of the other hardware IDs. Compatible IDs are listed in the order of decreasing suitability. These strings are often generic. When a match is made using a compatible ID, you might only the most basic functions of the device. - -> [!Note] -> Some physical devices create one or more logical devices when they are installed. Each logical device might handle part of the functionality of the physical device. For example, a multi-function device, such as an all-in-one scanner/fax/printer, might have a different device identification string for each function. You must allow or prevent all of the device identification strings for that device. +Peripherals that are allowed to be installed can be specified by their [hardware identity](https://docs.microsoft.com/windows-hardware/drivers/install/device-identification-strings). For a list of common identifier structures, see [Device Identifier Formats](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/device-identifier-formats). Test the configuration prior to rolling it out to ensure it blocks and allows the devices expected. Ideally test various instances of the hardware. For example, test multiple USB keys rather than only one. For a SyncML example that allows installation of specific device IDs, see [DeviceInstallation/AllowInstallationOfMatchingDeviceIDs CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-allowinstallationofmatchingdeviceids). To allow specific device classes, see [DeviceInstallation/AllowInstallationOfMatchingDeviceSetupClasses CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-allowinstallationofmatchingdevicesetupclasses). Allowing installation of specific devices requires also enabling [DeviceInstallation/PreventInstallationOfDevicesNotDescribedByOtherPolicySettings](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-preventinstallationofdevicesnotdescribedbyotherpolicysettings). diff --git a/windows/security/threat-protection/device-control/images/custom-profile-prevent-device-ids.png b/windows/security/threat-protection/device-control/images/custom-profile-prevent-device-ids.png new file mode 100644 index 0000000000000000000000000000000000000000..f3c3b59fb748c37c2b30c9e9ea9d701e5d6bb5dc GIT binary patch literal 19503 zcmd42cT`ht_a+=3R8$ZY!9o>5kS@K1@(9wT2}tiCB3)YO1e78my?5!-d#}<7y#xpl zklq538X%C&;dy_*cV^bieBZZb)|&PG!C{?1&e``q``*{Juf0#mI~BQmcd71zK%jdH z@^92ZpuZ+SAOh6wzkp9ZM{VX^xr44&r&FF+|-i&!SM1WIRQh?8}{t@ zx6e`~`8aO>@ta+atg^A={z6-rbz?Qiv^%%PtXJJ4TIgq`fA+-R;BQ|#$AULAusfRY=K3YCldG+Pw#~Gq^K@rp zq#Jq^uDPc{PY41%2~41M1B|{Uiy#1jWTpNekGzov z-^1UnlhJZ(J{aWV4Vtb%;>Xj|(^5H0;nYGB$5~{7vXKmf5on(a?uM%0Q-xl>tL*jC zn-m}QAl=V)kHzWFda5(qE_xYGZ-6=$+<*HMb&kK8DL2kkKpaf#J1B_rG#*B!tX`p^ z_?;c=Pnahas0y-6X*liIMA~25WMVZ}IrndYIy#>;qVC7CN3zA@1-bFLYlOLH3DgM^?8lU{D{8{>5zpJ9eu z?BEQ&X1UB=GVjyCQHdW!!9T&bSi!I#^gg(pwm-sGW3gGpAitZA+Az}bQZZ6Z=WqV7 zhJ_B^TfLmR3p6!d5E;f}iB0+_9LE29|p0G-ifYa?W>)a5)kjGl^MR zD!gsqemr38bTjy*4U5MA01K-iqTA;kv3aAo9!z7~Tik=F`T1h|`nt|5*XPPr7atoT<-k|Yd1Bk=MbCe}ck4=Zv7_#8IUHQ(nTk@ju zYAU5%LFjyhA92Vwr5`$f}UN`s;&*KFOCJzT1iWi6fK6^S)5i;SlU!px;0D?Gej( z+x1^W^tQNw?GJ=;w53#x5|_i=6M|6YPLD$dywCS{kOr3KEpPPiUX~M6NehIU*JvjG zgnL2Eo!jaJE9oJf%7ZNT{WW|t9O;V-4ZFK^;|}7dCyr+})}#ig_CtHI6-OpLD*BNsXBJ`fv8JEE{DIJfQ!`beD{E{2kE##Ka zr8Gr{NsfqU=&Ky<67Wh++mWIF*^hEqguU|p!C2`y+MQEHYD}|akBARm_RKW;jFCDV z{mupVjRm(8YTKvz%rrukp(jXEUUHKF)KL;{3{k=vBDUEh5ec+~J7>R*m+nY*BpZ4N zd($&rKDWEne^u1Z%73M7REhc~@cPm<=J%;HJ=r;_F63LQ>P08xRh;$rovUc|qrvv9 zePBg zw}tLm^xmw)jqIS;mcqg<m8^ zoXd$G7SWf)HE6Fb1r3=1$#;#LbgZdEZUWvP@I5nf?NGeDD9te5v}8j5oGw zwKI@7)`nD-Es}6IOE-b`0Q1^&*YC_HOeY~%a{raeQu}hdanvB`l}(S9kD5t~gX`+@ zM;WypR`AeV)}K$f_zyecz}{VX>^AH{u>_Zg3cGYffIz~9A9W$`mxexV`GVJw+8Jjj zf9j(%+cvw}FZESh4(*Td15ViRVrnwqZai`eeSQ<)UWzV$dH3q|Hkw2cI^>KEf9$(i z?<-QWg0nwvzZ7znrsc6ZHw=Ft{zs7m1gaUTLIJpt%SkhyZ6&l?BY}PyW7kOv?8rsiI2*vtwU!jMU}*_PD{HZHFv%bYUj{P2U>aVjx?eEys&ppZI+? z$C&TA3e2#LNSB6v0h|0TGoI!`7Y?FRYEdf|s}$m~pmb7DhXVgIP8hx?u7Xvg9HAjmmtLuMoc944P6+y3_5Bb@ ziXkB-Tbhc%s}QbV@*A*cr-@eY4)Cx-V}o`$l=Z)*a**e7=9$kwb$eHulZ*=N6L`L%Rpz(PM>XDTssbcRIO`=C1nK}1S!~owLhS|IP zGlgzH8kIP&Z$BS)XtTujIb9}}U7GBkI}G}_;5KILy-_>GxU(?smSYFsb61fw7Th1@ zJGj6>hk*k^V~@SV8RJ6&=vA^dzIUc=H4@*x*?vNAbnZ`cDLpTl@S9BHoKXa)4Owis z2!HI;(OA%ql{AL-&_hoVt@yR#rNpo8n`Da#zoEFW`n5AgS!JCp-^S>K+G z#rJXV;+8PM4zPpvll7U*?^t864Y*tzq>COeISR$**yHg(=G$8&ojB0&+6FxSa2t&) zcf@CUK+xKm7a25{hVA%>8~AhXZ5)2#u`3>mrf=cw!yjn3 zAGe(k$8&GLILPAOd2xVgyvjV^!AN2Z8klf>HbS`6VpF`f(d^YsTL~85LBE5;KX6mH z^a36du`wAIdX|jtAEZ|-AQ|uvP^eIfHc#eK@b=3Ur^n#yGXN7D6T34V69a5zBP`5~ z@f$)u9njM$3=U)2g~QkHa^p7-V%%}m+&E&u!nAq(68aSX8*qsG0v`W)FQ`Qgr?c1u zMH)`vbDMMVYQRb{?B!R!Elj?<$=WlkFRr?emM$>mTR1$bZr`}=gA<2wTfqtrzgsLs z-~5Ox1dnYLKhGZYHvo}yJpM{E7|77)6y0BG@X85sX3`k7=5*NSECXs~Z*o7Q# zzlGXITa2uUnKXlWFCXWUMJc||pvCEAFdr&K6MD4CSBTlH>12Qb%T!-LIYwDM^alLJ z8kux5%$zt>Yeew!FwTDZL1hJdWv6HLtanuC6$;tCJD>;0ZbE?fw=IoHE&5dP$0Olx zP~Y?6%+?zG5!h|t;QU~8O~-TbELJj}5Q-vPJ8|gQu*=JM>)POKS1x zq*cjq?2C0mR)LQNQ*Q(X7c)^pxfr+aZCI;W>!fz=vu5 z;+Vjx=K@467EG_8J3>Eri^=^WGB?dnGNCz2DeW>kt~psUV?Hw1z*pjLE_uMr;>cVv z8*e``A7BYa$C0@UahH_~`AqJIa))p?C>@OS4p4nRp}3|6PwxEh9$&?rcu97JJ?1td zKDb+7O7IQ>VvJTjeEnV%WS8P$M*2LF~AIE*H}2TD?OO3g-r5(q4a z{LbYN1RQr@q@bh7DncFdI9kxg(f}7&P-{O;?_OW+9$ce9rPLM``0-h5x`YWAaQP%C zOD$^FsI|IE?Xr3U7NN52SPzRpB9XPVwS2u77Z;`a^_{Q&Mi7`hNSmrMKbcC`IE7zj z1hc;q%sqVx``)Y$v9+^H7x$XhrrsP$KO)MAV`R9^LU(P9oBAMWWqlUBw-=TU-y74o zeKW{+vWtRB22ojGxzfg%txld^(Nv08x)LeVfhlFagUOpdcuS(~i~?u*YletVL(Uyk zzm3BxS8UZd#SQZ6pG&n&mq-Jh%fbX6)B^6t(L1*Z&O~6X0uCejb(o(y}(Z^463=}N$Jg|tO zNrTL+>Xs7c=AD_3QB}!p6otgyL8{S-wgq8fFBnQ{&EyN^QtG^_LT=3YKp2%RG0IlL zFBQPbvw7W=gz3XV)r3d8wQgmSEmuZ`B6QH@Ut=ll{EK2Z>*@{i1SB8SWbM_UFP=5KZ*agk2T3m*^6PtHJv<3C~oKu$C?U&yvOhlY?q}l9@ z^1PTbnQ~$AVxpLMK!SzenIq-~hqBLT>0Q)pCV@Gn(%#ZrcJ@FBtDBdtD zO`()adOHCuW8QF;xsA=B+)6;|fE#!rQ1@W`942^2-SWWiyGu<%_9|uOk!a)7I`xkN zHeNkJ(iyyRmio!V(*q@kvI3SyS)<)dJz9j14fiJak4%;R8e+h+us$wZd_1=yCt3!@ zOKpX|1Ygwb)9;VOdLAivUv=7U%_Mody{vZ8Q?M-Te)JSsB^^rc>;Guc5f*Xm&KKFD zmu9)SD}&;~Y-sR=Pusdsz8@X0JNJ|4a~SoxVLrJwB*L5)QH2N{dM%FRoOM1Jw8 zExZ+)|6yvqrW~sKd;hIW5dLWdwS&=VVE@DB@OGlKDszI__NLX6)yTY!C~~G7%iUmE z1cM<`4icRCB;%`5g#B>pSz7oncz2svmTHhj@1dH(t-!8DT6e)zaZ)`mt6R*mu{B4o z5M4ow7<|b5w33OD!J@umd~mr)5&bqmmmhWEaJY?)d_4QxJXF*dz^7qo=MGUbM3!pJ zMV2L<@aQ>E(oj&54YN7IMuZ&HKwTd8xArytnKlVtZQ zKi|;^K3DW)&QD8Xs+l}}(bPCtR46j&Mw_Il{`m|hZKUoo+g{vtofEqmU=dOnkB^L@ zEVd`J$I*>@L0@NWu%RRF2KoKNTD%XMeYEGcVZD%%WDRQ<$6GJ%DCMwfnoLuCbdhQ! zjCo1@fKRizM5t7Qne*<@J!22~;R7I+g3Cx@q$UbV`Vf;}@`%@P|3JqB1W{Sbh5V-) zAf+mPsmd|FGQ2&0CEIN}i|)BW7=O#VoKP|7UnyCUIZkkjMu#howj<^T3iJy9672Wl zHIQI&YX5wfu;VfZF#X2A)A>1*t+nS&ZkmL!^nf^JKYU#AI0Rf2~ zWWw}+_t+sXK?ov#zEF1yK!@*dBnG(KFAu3fuloLN;Gmo+Kgfh@z%CS6`K@a(qPHNb zU;+xLq4tOR5R_d>8e6G-a2A1WIh`*-eOG*V>(~v_YplVgZ&h_o6SR>$tvXKn@}8w@ z<|!77P2@71TUapA*9Sv!mq2Q`hNdTvfJ*!t_e{4iO#9Z$Jl=@P=4P+`g+@MFFc{46 z7janCKOU`ssbE+bjrNb1C>@moO{5IVWlL>sn|1d7*gd8rJ^CIspL^S9&b;muAxyc< ze$z1d4y};GqL|ldNjYEcSp#Hm?&6}!;jUGXFh_n@94+{<@7|2BolkL*V_yBFP*ZEE zD9!}u zT!PD#T*%x?j~k1_2w84e$T3K4?~dz`#ku-VD!rG)*CMs4l6JC{GKrMFB|e5{IjOY% z`aM@`lhyVu_wXmKV|^k|k%5YM>%K)WJ6#>umK%jsWYR_!SlPmf#trjJ^6}ChK?2S7 zWou7Njhx3#pN;b03{=CUKrFu?6mSl6q1ZuG%0T&0W$ul6IEC(B4Rlrg z1Avr>xw)8;qDRqe-9+XOlno)dn~ii7lv3_nO++rMvtrXWa0<6vvg0R4wB^PP75k~K zI2Qwsj|Hg&>1j!MpArZ6tZ4FrzWzY=6b|sPcLu`4RbP#B3_ndK&~8-PQT6zHJeluvJdYa{ z)p&Dtf0SqaTe|+*Xt*_ELCNb>X~ik@>1Su};uJ#x0+Q7?iL?ov83Pg z)}Gs${!p5yzgQ~O?CIo*R#Z>854p!@xdZ6<#)*3gv;c{lUs}RM>%0N(x6UXccG}f0 z73_0)8p%}Z??idDRsKcUfG0*Va6e#{W9F43v#b?g7$FkT6GT9=(han8lntZ5%NK>d zGi#t{jZZOmcAgX(%@A*HZl+$TNXq8`7s)xfUv3!N6lNTrJ1*c&%JPNRrI96bK6Al^ zGPoj1iy2w`-$_O!->kV`j~8RvH$YErS@g~Bn;{r-4~3z)7H)wUfSjfZIRxG2DA|TZ zTtss$FbYY!)IQDZJ8j_M<2Citf4tz&PAJtNKK(9MCgo#k6-fp4VPA~5_zZK3APw4J zj9y*9W=*NHtX$+$hsSWq&y3X1^d02;9-!_%nq$qLxH}QAS^`^JYpp4$2Mh;Y z=evA%@J74@MtObm>kdfAqu#7tz6 z6f_w4pEUm8nN#u_dj28q{~drZWUeI|`|3(efL_)AI{_1RNZtNd6#?>#2EOxu=g6qr zj^P7Jm6h82<)7!N03W;}{|Cd6soKVyJzG2ss?5#TM+)Je7wTF)VLC`sWCXQ7VwPBW@Lv45+dcp#$36O@^%-nFj@g4| zN$+TjELYb4L01)PL}ja|rA5w}rM98gl*LzSbi(aI-k-N}wP_68l+++=ruFY_6Qq@a z2(_`XvHX5=a-v^vA85+KdtFDNa}#Kb3-;5h%J(s1dVnZmqU!o}`mf?*BuguC%wIXE zM5AP@onVPzHZU_OoXfDuuTJEVIpqiv6QAIO}%jsoww`; z(%G3TW4zdtc(9a)vHW)9hn!$!Zue$+nCtO9*S08)qQy+zNw?ktA>+wynv?Gzmw_ET zf1yn3GdlS?3vYcV(M1AA8{sg06s8+n-lgTIn=@o^1LL4qQeGZR-qpAf5LDgR_*AMg zDZ&VnyE|y`DZ(2n5)vqtv_<)M#qM7#L3Do~kUaU%6ORTI+FjXaj#pqk9BcCy!rHo1KCsvBbS0fqX z)YtYIK-LBajehzYX}T^wnSd`KJ4)*K4+x#3#1OQlkR=g}{RaK!&XVh@p{i$}XZt6j zOijEBDQme{b=PnJq|naq#-J+L#;3^DaYkBu$w&;iU-I`7H!}=j{F=T ztMBjz>yBHM&5ji&X0@Ws{#E9=#=h7vo0bOK&Xbu^{F zK0+lrnD~%9+APm`d1!siEsUtMcjsQ@IH4IjZxP$c7SF>?Eb|toTvG}j&9;b0_h$+| zl|z-)mM_SSz|XpDg{VA-Otl~z29Ew0O2AEp^p(JTKCBa5n;L5`=C@bO6mHv;K2hI^ z&R4$LsG*vaHqIzU#idE!*sJwjHxn&yb-r5O!@M0nI3p$t;(|pO9YRutB>Aq8T?^*r zf_wY@#%Mhrfme!@U31?E_mUNUa?r4XbNg_%!JCYgKO(dsQ;F7X8QC;y1`eLO&HFCD zb1CZdBagc8xlO4&%H=5f#$TF2GM6rC2C)(%PdqRkrhUXI&LzZ>%O_*={3$6uRH~Yk z!+ys|`Meu8A%l&+Ffd^*8~X0BP%XSb4_J|;yP$J&>bSe27`p8es}ruf17 zf$aWRhwyx_hfGSuJ`AXq9tk#3u^}>9fG&L7!?0a>3ptN*mvYT$t{H27<=V%l5d*Em z#MRu%lTW_y(aa{kCQ~Xi`?6in==s4Ju_jtfQ=Fh;W$Pfu^*nGstpYnnNdlfqMz4hz zKY!!g6F8_eTrCh>8b9=z)&w(_LPg1%Mo}vLF;Xx`T#$7qmaX$mWwhs*B5RRy!KY?f z;8vwIt=I~}l+Kdb?*oSu0uPP%izpo?<5(vb_NQomzAmky6I&VO8x!^=OBCSn8bwFzIpNt?-WmoPn6pm0b>Vu}N96)I-LsmDL>+`6xm zk`fE9)6G>Sga@zYU`>oHb>bujK3;^AgA_h>}OC^$@DFE^&9y^A@ey9*I*J>-U%VGCX3)>`AIpm*R)xvD8>ASCYa5f;*7QER_GDR zyOnFw@`tmbihMrb?%5N2r<0FAZ>diXojA#1TEZ%=!El_?;^$AEP057ecNklFvU!;K z!pb&Wssms4B*bqsOS;kV zVUN}URJ!O2>2ct;i+W_t?Qz7NQy`+&?*^wI7zj8TvMRv zup~H)*pQyojd_D3Vo=*ePsj7y}TE*URo6q-9z_(u}ZY?>@W?k|{Zf;GB zrPiBZ-YKI7A6|SAw%{1eCAk~yK?E^F?0i3K^stU2)EJ}SLYL;jx@KtLkuE?5%rXKf z4crpBfY7iC)XUzP<|0bEkTtM^2erCpH3LJBWRRF?z2 zZ12Z03x=Hbsh(+n4K}0=`rcgcw^!T#p&3csTy8cyT+31zy*`pNtIuHxUUf`GU?d&LKnl@-Mgess$Aox03@U|No$w=t6FI5{oX}vmog)bRtErUm?@E z^*knyT$Xdwhq12C*#>}6$6hW$PQ`i6Z-w6j`idh3OXW_KbH-#5Bl>%hdDb;OUirMV z2O|AJ8I)8&)TBj)xP%WU-TF^;;eWxA|1GjeNeqm7TWd>9T(eYxdhSMLfTmpw>i->U z{XY@%|M$N8zmWfDpqTalN}c~hPB~Oah;;b`>M)3z2bvBQB-g6Se_c0AGip|+(b-yn zW~NSCHC{{bwDbO}$bXcVSUres`Jyi3B~CZCD(5A?!BeNt+khbNWbF#(&(|pDuK=pf z($Z3Z2On*YI@sIqqfh|^9K!zt8>Z^ZrFz-UU*} zKkWwvKn!0D(xRqjcbn6cs(wZsI2qqcysG{ylzgC!Tj9Z z-N4>tzSPuIK<&934#*#mvJS6{CZLlM!U?WBNu{~?u0lkqZ_0GxN2YqY2S3~5w!Zl= z>r_x{_1iQ_cxR45VSjwEl&Puq_i!^=G}Zp7778O`zu3Z>zPq~%G!}-=k2Zan9!&ug zNk&Wxqj2@liK&fj1i!ab{c6#x}L@TD}DBW zpQ&nb>{ee4Yy#dl@_jSEKK-`GAqdgP4>SM?dK3ytQLW6YV{P9%j|s)p34b?1sW znLv17YXT)RM<%fNcT_HAT`ShkkK(2eV?nv_{3-Hv_@C;0J?zTj4i>W6k_pB+(x#IG@iM-s@b zeiHwkzVPqd`Q=}7DkveqJEk4i%snWV0<=QdhSf^Kt3_;897Wm0fDw$|AIyA!NKg*J(7y0Y-VN_Jbxn` zk2Z#ZB$z1<2x~QMZCvT5Pe6WopMn2`Yq+T(v^Txzki2G2raZe)W0i#ZDLp2=y@+{_JV8*HPUihRHM-g#{5FZ*ItIMyVIOlWm2ns zGp<>BG%}zTweG-TwwYET-4u-;?*h`_@9T27()27oK8y|mirvV&oZ-0NT zYIUK}nE@Duy6MK-Ht+aMpDAhX7Yr%VP>&k(Pf|Tuqd1Lxe-ZEw1bRec5uB(PQY1Cz z|LFn<*-+c3F+jUd#OoB*X5K!}AoUUiB95qH{8sy>h(^k|=+WWdB;r3%pAw(ezS9*} zw>wh-P@qFS8}-dQFDi^!|I^O}UICe>F~w0$blaBrs61Urt_pA)S_`@Cyf6LmFQv3K zQ{V1sKpI3&8k@-mf6XX#mi0tj#_CLILg5QRky!S6M`zn?|^;1v5TA63D?n_?dN zU>wWB1xWte)O0`>jP&fL9;jpD2dV*^TTu}oTq<(5+X(^<22`0F0o`W+tj@nkla6Fc zwzs#__X2*u`+v6;@_*WVVQE6?{D)?CEsyO`(!~-AZ(H>JH+_GA%Op9A>D)YblxWWHP3&xxPEqWWwB8~xC^hu#ZTN@LUq=_3Q((5P>_IzV5Ss3^Mb3;vF zj>CdsxLlG%_k6t7>7Tabu3OFFh!#$_y;WUKvFWN{r>SBYmYq8TiJ!PeiRJ$6t1jJ@ z1IA+fKB_|~=*2N=5@%hX94e0NI=@Pdo_uCeYu7J=yV*{*wDTFbUvOJ~kL&3Q@GPr~ z)bOO~ImVVNA2C~>-v2;KjS}49w8H*zP;3>qiqs&CBi^kdDis|Dd)QX%GJS~V9{2<9 zy`8(^zNUzVnz;$ou!3(1V5_8++G;&dlwEz5g{fPU>GqkZ(9^c|0ku|(OHa$ht`hlV zVJoImHv7v0)&V4)Usgg?sJh zB+AwiVWSd%D!J1<-Lb7%fG^+4v4KNX^^crw!Rx|zeLRWZN*N2mqQ|-xKJH@u22v)r zcF5y`hHf-hF1kBorrH*GtGxs(n>hP=lBkEp=ZoQ6A9!clz#fF`)bmaTX;KuTNBM8+ z%Ukc=`;_ibyTD+TF|trKi5ha-sX&_BYG2KLSFcmyHBCISOfJ~4o6=C`3lh-gZ{`iY z2cbR{u1qgI+KT$I?<7-@Poi!)YoW(L5@7#$g}>Sh{?1Vl`C{@dtj8)6+tM9jre{g5 zHtxV8A2ITL+xybYG~w0WzER}|pq^3~W+;EWG@P~)-f>sxHzB4aXWeR$R zB8*G7tPe~DkPVK_9=2IO}H!Kwv7sC z=W}4wxO}UUmUP`|XC4+AH8=cj!rt5?L=5G(R312~#pqA+ixCE<81J4D{r;*Tb4m z(3pFg|9~f!JQ<509{Q*>t=Buq_)&YK;uqI=bK0(5Bt)P-QBW;BKiAV_VzXyL2@c(n z5=u#`XnV2yAU!j+r%A=@AgxT?2$EXTWFWRop|SqTtLLvnXpGb9@L-nD<_MsR9{f4= z%F_rsi=H@8(u8dFm3qUT3`e>h5S&bYot;0wEtJFN>9DnM+cVqHw&&&!O>B=)9I z9`E;lG4-cgl}~qn;Au)pPNiakVU&WvvLX&VrMrfgQ#FwyX0>0tv zVTcJvZj@G~r6#fCy4H!^(Dq;gTLO1g)8hV(a-BB?Jz5!2Qp_meQC$mbccpho@Zw~J zd|U>ts-AS`6WHPu>30y4PdjMHRzcNy7P~~>Yn*Visy)q&YzyV=D(>e{V9hjoUbij$ zJ%4P-h;rgfm4O1yp80$E0-`*xN60B?d5Z-U8e3~l%h?5F4>SInTz2Yt-R$qlN91$Q zfO$sTs!`fzL|HNKYlQIV$c#CZyk|hBb-*@)?Po@gopUSYZUav&%l9=yL|4$odsNd1 z0T7RMk8{P3?enQ#ro^bZjV)xTairBFn?JO|#bn~m*-FcatX`c!SlnfxmC3>}jMuA^ zwcw9 zX99x{lRqB~NT0tsQp?KFuNk~a82)l3M|p;QG0u~)XByV9amxiM)^7VkW+G!?13qR>)jgdALNa$>mz{+@N|x>%z3% z%wn?UN>o6wW{HW{YYzps)0e$;95?(JGr(%a4~^4mz#T2TKaBPa)cRch>B#*c97Pa{hz9W_YeTTV5;^Si?a5Z8Io-LByH=mq;Gd& zC!dH664&C&Limetoa)ECZcbyar7cTmnIEhRr6%;%r2CbAf@ud7 z<&_iBvlR3tsoJYNWSGVtIteG*Dih<=c0-CV6zDy3-KcTm{AyamHk*<~g^{o`-t ziJtkJQEwC61HDvllh;&|bu}b~_U)B; z{ge2F%CM=;^`fh6C?uS2;<(2LZGKU|snSaeiOWE+*Um zE#0_gV}Ke!2#n-_I{vxL|AMjn0A9ej0AF@p*%4fXd3gn6=O@S*aE4S>?|?V3XxSV(DR$M*H_b|3zPaBIlqBC#rc=-?CitgSF{!pr7s!k!4vQz_E+I&>oG((x}TOl<1MBcdht z7aF8!;}C}-*AcxA`9ICH>zqpZI3sf$e$|uZuFwx}ou!MRz2R=RPSTz=ij?VvJ9}); z(JcnmcXxRoith=VL>!v-G{$4^Dd8^haIQL?y&o*FS67}%%+0;Oz-To)#{SI@O9M58 z)$wC{(n=Ncni)xW{BimRL4PvVj2hGKfC3jtrpl4BExq8@&vg38>V~x8SfNQxyV1eI zu)Q^mZ1a)!d#um92aB;{pTgI-1=Y}AcR1()?n|o!dGD4n%{jdgbUZTCpcYD@vDqK% znwwK;puUK6*(Eu*xkLsD}QLkVX}*_oYw#n@RD1VXY6R2V zd|XQSF~w@5D=AmbW|>XZfYZwUkq$FpTuL@dUWm(!Fcz%Zw!JwY1;H9Q?>ea~k&4u{ zlogR{57(S~nm<(dY+SP8kP*T)M#qZTUEgc)a5SLi`6|92$y+lY=+f)Otdu7r)H(>C zx9j%k@dlS4WgN3qixmCvjHnwvs?w30J) z7WvxQtG7Ea#~NEI(xHBhko*>M4Xy){UiM;*d6v$^uc*TY6FT-VXy~100w#9h_kA)Xf`E!N2m}lQ_TWXLEmN3J#8o$#C zxiKHAKA!%dwP^Xw$7h*S#yx&?kI`+5ZjW^Gja^>F;>#|ju|H<^&Ykc1i~keh1dX+x zvT@PV(`-CCLPf?2#vsI#DA)vsXR7t`;0{Y~j{d30?s=8)*BcJdq~KCW=GGU=lz?u> z0FO=W^?;-{Y}i$k7%VbMfqqf(9Y|aJ7Kr72{+_)7Q2tpc-}n(5-&JJytO>wthiOTFDqfp zO=$fGY8*LUFIQ@FoPF731g=qw)oD_Nf3W2xhlVlduUVN`v>VP=R){#Jj__pIBo^ew`?kl%Yy&?dD>ro3zKC{|dZI8@w zqe8lO;aze~7E6eTVYs}AZCBe1pDTsv7q4t~vy$WR?JUc~2kIaBs(%nbem}wMr!AkP zzmYqUI2n%S5n{rZEp4l-k{`KFev9i8M9tKdOGf)mX@8)Y6AW|RxWyBA>197sC`@KC zJuS_*{bRQQHNxLfMtfAFmHEJ#T((&VrFV;^g|a$o0`5_ZJlk2n^=jEbm_k!WjbLIVAv_|i|asuP@Wx9rO=IA`t32exNh1Wdg#g{wMeetTD z)|jB!?fq6--wz^&?2f(^|E0aLFhOI_b8^9@Bq29HZ=Dfm#!9Odu&G?MkVQ{q!~mC}pvuPi zuQQfamBr|RdA;n($ExFLMGpzF7s%H}Ro@;!XvOW3ly=r4g4m)*wF9CCr~KCXJxxu2 zBSP8FDxB&CrP=F|`=_!aR2D4myh8Yf#3q~IE3qQ zgK%C)eu8;5H(3AuaEzfiz8tGuu1s6jD66gLg$!vfgga#FHys#F8R)n@O)YCBdpPbb z1f$7jd8^zw^WtxSR}v0JtiX29-Pen?%HPtzGp=CGABkq!m6tPb)N|A3iv4i%bX73d z!i|X?n~(aDM0dCz?pn8TA+7UBby4L#)lXWVE7_dl>WI4dy~(_4PiRH4Qz^+WPS zIL`tzs$t0+y3cFqMK7bYi`=p=daAjNa&5e>u0yLB4Tny%Au|S;BDnoh@vqYqB_5Fv zTBx=+ZvJNsY@T_1c0U&*GfnD@IhXS^?wU1|M(nlu7LTx|*s#;y{spgb3bjiXsqGbI zwG$~7@?r6!VYd`sPY`$p4gA0n_*i4l557lsXV7T-*ygQwdavrwx+&e_1y}o-UzNxi z!*@ure$(LMGxo~bc;uH-STNu8RNSy zF2Z@4qW4v7&D#PR>7EwJdVl80YxIRD*H6}C+I*$K#j$Lbx<2d>^?6f~eXiZSp273s za6t%s>urjNr)Tq=qbD~9{2v4P^Mh#FAOG2_&x!?E2* zRiCf-*t$!%8Q3(bEAHrdHY3Sp$&baCazZC1HSSoKcg|$?sn0%Zj|s&U_ANZm+1*(b zw>th;*G)^e8!wMG%njx<*=AM9DV%@b!q{35pWpJL|KQa-YQ37@A4fgg<5js(D>uSt%IB!Rm!7AK-{uRt(KIi3LUPO8IG!7p zPaTq1f90Gae5ix%=n~BX@zd=Noq2Vn^j@RWZ{9bx(cD6&nqL!5FTJ!|bFS!Yx$}|E ztG9z)=W2kO)Z5-1C`hZZ&YB#3@v#Jet&f&CBLSRN>&xu@Y$|`<;<-uK-HHDu+go4T6e8Q*3hr^wkOhwNpKgHk zzKQE)S~Vwz<%EXWCq%Jlg^udLg16toxzI31>6c`|t-c-HF^m>aie zRd|ID-vi**2H>og4=9Z3z4eKHHiD