From 736a484570121c79d890626df5c092f831892274 Mon Sep 17 00:00:00 2001 From: Iaan Date: Wed, 11 May 2016 17:56:53 +1000 Subject: [PATCH] Updates to include services troubleshooting --- ...ows-defender-advanced-threat-protection.md | 1 + .../images/windef-utc-console-start.png | Bin 0 -> 7836 bytes .../windefatp-utc-console-autostart.png | Bin 0 -> 22317 bytes ...ows-defender-advanced-threat-protection.md | 41 +-- ...ows-defender-advanced-threat-protection.md | 295 ++++++++++++------ 5 files changed, 220 insertions(+), 117 deletions(-) create mode 100644 windows/keep-secure/images/windef-utc-console-start.png create mode 100644 windows/keep-secure/images/windefatp-utc-console-autostart.png diff --git a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md index 4f5cf021ce..c26707df8f 100644 --- a/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-endpoints-windows-defender-advanced-threat-protection.md @@ -14,6 +14,7 @@ author: mjcaparas **Applies to:** - Windows 10 Insider Preview +- Windows Defender Advanced Threat Protection (Windows Defender ATP) [Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.] diff --git a/windows/keep-secure/images/windef-utc-console-start.png b/windows/keep-secure/images/windef-utc-console-start.png new file mode 100644 index 0000000000000000000000000000000000000000..0dcf33a47cdd833c39bf1728dadfd59cb4de959c GIT binary patch literal 7836 zcmcI|XH=8x)@=X#`{LQ(`Su<6oHNd!`;H_dW4$X+o@C86=Uh*?j+Pn?6$=#z1fqdKRdhih zl33vV=_PXDl~G0y2!JTvpeCLm5bdY)CrP3ZEh`YD@PcWoQvA3`O(8-4NyGy6JEUst zb3YFH zl=gSj!`AvdmCFl`umwr)(NO|-D9`Wcx!QU8SbNxl%-zn;)2V+i4)?Tiwgyr?K$s7; zF+ljzdDzI>!v*eQ5Bk759|puI{_%Nl4;x$1&e@BV|4CDJMIdZlyg<9XNmw98ex9Ze z_j0xc6|Up>Kp=K|n94nU-}JSKU^lb5j16MUOr;c2UzwDDoo1QaVA+bNXoTl&UQ=@F zC*&e&li7%D?K(nyf|vcO8aE~c+=yvkW7nkF&gZv-to-pNIb(&Hb!Nh>Q>M!1@}vOc zixofA>yB`iSE#5Q-L{DPZLdc6=-9ieMaKFWV94Gh>6shgg}Vz+w_j`xZb495{fmo> zg&@#-C2Gm4Z#(`HRYsr>kE*R2$zvc#j>l6gd(fuLgHY}zHAKsWi=co=&AVg=M}b(J zVrH{NvJbod7VFCP2QmF7UOLfD&;u)N?ql7o5#Gxi5FJzjJ@h*i#?a+`3v&>Y6(l$j$^uKdgQB>*7Ss^1J4< zdM)k1HD!adSq}u;X z7l-?m8dwA;6APR&WPRptk``g7vqM*I+E~mdACx)qvr244uVhlYNXeFa=T-? z!gw=Rk}_*fAtM&7o(TDUUk%eXQ>>a}p|6?G**3%BE-F~_QcNM|ck^=B;Q5hFFY~N3 z;??%$hGVV3ts_mCT;bF;ni%(u$f-D%1*k6w)XSam?7RP(_0z^-hk<#zy1F$n?~@G{ z9(;_`)*kjmZ>?NDXD#EPacz^#Z#}iKOU_hqqFKf7adBm(9Y4C>g*V9>iAap5gPKL; zU>Gzm>6N9uAE4NaY{~gkIB#bcI(|)rY(k$0aaXi#BlGdm%Q;tCsOz8Zn0yKMKjf5) zj=t9!;M|w;6K6KQ=pVHn(5zIssaFIln2LU{HvmuGnrL=+KK=%=U^tqL-Cy^KKMcDtj3 zo}=L9!kMnvRT~#|7A{LHJjz3i6*pW@da|E{sk5F}F1D8l%r2J(2C`g!JgD?xoRDYe=?)Ox)? zP#I)nV+@cOJVEkwf*21O-iqCq?RmEW??_vI3On2{7&qeYnvsh0{;DbQa;PHe%~RTf zhABxnLojWrJ9`YIRq`oK!LPQLf#35Nw_2yEic)lMOYp-(*g6kTG6CCXUT0guWnrz` z{tdxFbwS&So`>s_m`<~x2d(R@UdbzwLHjuTc=HcDtE%Pgj&I8~6^_?;vBRo`O};*K0Q;h#1X7 ztp(rsH7DFm!aj?sptlQ~<$8Bg%J&T~c^Td#2aebv-$1Wn>`xjy&d$>8-aT%J+&>eH!b&Wp5Xa1M-<7gE{RR~-$&f?DMZ4RwEvhYJVW9& z4i~f?HZ{%$d{?%bqNc>CHf}AxGW%Kx7A`eL;L~S1;1L1A!aVrc%3)GK3Ng z|Acs6#94QvC7#~ctMHm>D)W;v&Y@XARe%J}$(-j&6ow$}gh_ z&qg;#o5mMnH0XHK-~L&5(x15~Ye~2UnI22aK3izaOZ0)3Rc+m;-1B)nHun*t7xNSx zzMwS87HeUArL07eZ)q`P$S=%mX!$5gh*8lf(Rfl~iSQ&%KPDI#cp`H!!*~^ydEC5n z4V~o2*MF!R<^O8Hx_iyu4XcUnNm;e|>12Q!E?+hBY}+#oIx`c{#*HVkVA$Sm;|*;&kV@( z%<LVT0XU20}Q`+McNYyzKILnALhyIu3hpiQTzO9YT49@zsEv1m4yNz;78EP`tb zrPiDKvYlKDScd>Mh@ZY|%TChGxYzv|as@^G9+$a5A@Ae)w3q3E_g^UN{~*gy3=Zn9 zzi=sJ+wXv*!PWT5$wbbGy}$f>t_|#2YkwxBBu3#7nv;{$s|0$|WfrqE=%43`^>}b< z)Zcm5TStWzh8^LN?R|d4GU|z}C8W5tgoFgb?b9y-VbIc6)70XAqm#Gy>aO(O;+v7) z`H)x`uu$$m6lR5*V&mIcpdc}sZLehQ6?RbLFb|BahOWOlLFJCHGDjsgmfBWbS2Jtx z8*c0(Sg%`=lX6ALz_*0Lwtr5QCmwylUFCq}^xbj6%^RJnHfG&B7-+tXj$`!e@7##X z&Ki7o72Dcnx~Gxx$Q^oWluq;x|7(%H^uwPs_OrqBS2CJ?;>Ins28DyFPh7Wg@0o)0 ze`4M8M=yC&l8|yqmN%$bP7&?>mOgXm6}a;e=!!hdcf-QosD*%_=wwcf{ZIPPFuG%1 zA*0gN@1n#fM`ns6A3m-e^2=5 zXZ9JHL$;~vdkA2M34YzE3e$2E_RA8Xz~rDX9l~Ok$AT7PVVMpgz1KBIRXjns)zoB> zw>!qcjr*PA8YZ3YI$}^o*wrPq;kX5qG{&hc!qg1U>{g_Z$#$>K-%Oex7F5yr#&Na; zscJ8D>Ox~y7U39BjQl*l*J)9sMPZh+veh#|dDQ;sBg_i~pVh4!DD$Q`+4O61qytP@ zA@o4d=O}wR>)rUtgsI_7{J=u|fO)xISrpYvo1^Q7J~6dprUmQuFTLLi0lyz^X9N!v zW_)}@;+|}&o*-^~bj;hoNQRk4=ondgueJM5a(AW|`#crt1tq&tjk*ST%NJoNp3cxq zLIHvzx9+E2;R50Ku0i>wLz(1dO9PG!;t6AGrup|i*YL3E3|O^Asbmw&kZ z1otwft5C!$h&HuZR5Vu+RHZi)$9cx;>I)6ZDES6UCgvQszl_h9d^bn`3XBU7p~iHr zu-7AJW}3J?bnUO_gh(h{?>@!nxylZ|Iz~{8czM#m6QRE^Ul|-oG2MK4(w^H z9GYDT=ANV#`nqVe=jP0SE;dKCkw_ml*_ykkOSd|T%1ToM<+#p3yX_zzoblc8q}yOE zzQQyjROQ`}^v*$?mC{5HfC=r$Frcs$b^U94E#|tF=26coAEi5VfzNkDQ$pARNZb+yvcz*o^%nw zLRAl{n2?Ds!YB-$l_om-CevrbD50lJMIH9ZPmJoC9z_LVo2yt1k6+4H3)p)BS3L#E zheyG|SSl(iZrH6`w@lXjKaxgV+v@uIHP+AHf6h%--`JQxtUar_S$=MQo)u`GmNXH3JKiB<;d}>ChOM0W&r;$(zdJ+xvt(UrW z`H7U+Z8DPByC0QVdM){URyXSb8aSDVu!s~#nv7SHMg@7B8SzIZH3N(8c5+~)Tz(=} zrleQADy17MvRTmT?NOU%a$RED&9D5b72;^m3&LuMnJRG+@XPyfI64h3M4sI%^E}db zO~kN}SvRbbc#CN`-)UFy8}3@$>f&%t#^6iz=3EW}kR{H{I+eAi<@$kIjaG7hp6|RD zOpy)jCycQasX9drYX|39({!|{q9TUXMgIW{?YGjsxiNit)fz;JlnGnJifPHs9e%c? zN9uzGmtwuR02IG!(NF7P#mlU-2UpXhG5x{lX-F6^V2krnCV(blpa5qR@5% zLG_a7cmMBPK%pOEl81ZDGb{9_D|1Vp3~(CmBb;o1eSIH8J`e!X+Y5iw{>KF+@&tQY7W5Rc0c4M2%s(b;C6$6_IOc-;!mfT@sQ&km|SXG3h18(z( zcsx*3Q?vKK4C>w4+benZP6;I?A%ViTUKM`#`ZoFx8k!;u#t4vr(9lp1S+?$;9z7Qq z7u>G=(SOtQ{{khyoSH#6{z9bd%6qhh_Sp_Z+(;ZKz1=zC&TbvdmI&aioSL3rZH{?2 z-V)XLtH<}P3kBd$LVBx2@378?D2P35BmG~bMEnCOEJ;$xqOspVQM+1PnE$}BuGOi-Z=Irgi<*Y#l%t{Bv)@-Q0Xjr(Ukb-u*jD-c`h~e|q7#$2kPXXzw6lACc1J zZ60G}%N9waTBwQ#o4cLs%jJ&f0Q_)JGlVLkvDCXAZ0pmrQ1fMk$0e*6ki%S) z*6xWNK?9|zQ)Mc{rdd?3n{k0u=||)DP~Ab(E?c8hs}hzq7reIj5M4drqeB_XIm(kV z&p76qXMp%!-_=Eky6T&82^+~@du&^xB8op!XQGwrUSZcdEh_tqUhET_$E!WAic6nU z$vIhythl@h66|&vk)SE&`>d9`nz!STys)BQExG=eRHDwM&lKIU&YR=Lv2Qdp6dRHs9zcpc}D7f;&AV z{{KH_juR+BHhfy?Z`W>c(Ikmky413hkbZc(^o(MQj7RuCc#wZujB_0roU8AeUr&9n z?_!pcdY|D8Vl79Q#a4&Y6s$v*TH`DL0BloBFHN`C6+@1HUF7^EbbLkiCh%Y{HV9`S z&&JRV-IbIaemXl^Wpg-;Y0XnSCB~R6#Q>#3W}Rf{&LI&M3E(|Rn$9GH62q<~FUK#@ z>?V|eK~hQ$t;OmUf1ge8)XN)cuw06Wb)PHqeJY%rUtKj9Uu?IGlA8=_tWQ>m`4V4u z`5ZY$4p^{3k){@`U$a=h04Gg(-DuLWs@ulAY0l)EwMa~-p!(CnO(bD9z~Z5_{DyiQ#pW1yZn0rxAJnya^?GjI$S@hmrlX&B(*S2G9^ zc$2&0%#3=q8QQyRgaVr{(M#n`>)j5D=iRW3bJ0d0%6}$GJgh3vb{s2t6CJA)pB*3m z`eq!7bb@hDhBx?fc%cb_HzDtkJF##BdfzzLSuS{$fYFYD?7rm)+gd=dC&*JAY}*h?jlrzA%*?Q4+tZj|L(soc9~ujtton5iS_4P-cV z!gvQ{c`+HB(d=?bb-!ZI&DBsHMwN%SX%MNGCa5vwQAMd+WlpnMIBFMEQ8FOT~PoY0%B5Y<7fB#!;%Mh>`^%%udU&A(K)Nj<*;21(87dJMH?%jLF z4S({4yChJ|_=Eq~gC`CS(3X}Kfa3&(g%jGRbu270Jv=?*>lel-{vW6Nca;6j51Ysm z$UtsOVE3P&oasp5l>rAHIcvaA==hUP{w*iqZT>s61kDj`K*)^IpME!&9P4FASPtiY zRo%19&woRpw0jMJ&yL6O+G~FLaDLpwk|aS)et)cJLy4(A;mX5VrHphF79LR!V1)1# zbTKHST^X&Fd`@4+dspNn1cuIt-2H}gOMj4R@@OiNb1 z-}PUg`ZA60i%>Z(hBlf*m&Zj0Qll5Ep(>{lFHbp>Qp@N~(e`^%JW_9O0)S8PrhW46 z9*>Cs7uv}z8*utHQ3H`>Ig}$(C%b#JmIsgQ#|y%X)Fs;aA1c={nM#UgeY|i!8KrwW zy2!F+h zBymH>t~$O5<2lU!RY^IVR1!mQ_g)#Y?vLxkLZpma0~!XAfVH;Cr{L(N102)8oTdPT{SAcYT%rvWS0>FlJlIx~ zs&Dr_YRRL=uBNCIt`)tGQUb<9EQ*{)f3km$Fw0doXf>G&EKkPdDZP*o zev$<-^IgA)9wy@7M4#%4lC(CTii;hpGZH}!=`v+7G5Yf+chMiF3^N{imPa#B%YROH zLjw)x)BK8`O>B^HaH0?CAxDH8EH!?9Dh@yu~7W`T|hH znu4|ps2XBBqoptZu{K(rgZ zpyXxz;*3%LcgtisBix)4Va^vFSN_ShV?vYQu zFy$N7U?JyCf2o%LZw($Wc>M*o)^J)Ym!D}rJvsj4^dCbc6-WO36h6j5inBV{oO?h3 zG$1mC!&h8Ur;YT#qtMs~<{pIZA;#3DO=`r8hX3o3VeG1-Zb~0-+WDib97a>>VK`#k zB;jc0Nei$--{Gu4bg1%bg}MlF$K2zpPq7DAHk3OX8n*3*b6bpGur9hw{}AAtP3M{8 zPPX$ik{WvHPi;3&N3zC8m%rX-*ZL!+n0bdCmh=aYqeFST9xC0t5nHbfOS2vZ$j|Ox z8JM1|!}7M~QEW7OfAWL-Pl{FM;lpfWylG_vj`UX!Zez}AwebEaw7UKHp97o`CLky;TXC4acgtcHvnUm+Xx2q}?XH?cMMw8<7P<)-*E+q^e86HX=@3Aw=v4 rugBK6iC7qco(lwG2%!6)qo{*3^kt>Ae7+t%5OBd%wN%RQTRs0j2&b!w literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/windefatp-utc-console-autostart.png b/windows/keep-secure/images/windefatp-utc-console-autostart.png new file mode 100644 index 0000000000000000000000000000000000000000..fc9c01ff7960ab7e44c310bebb9c80080e34bad3 GIT binary patch literal 22317 zcmb5WbyyrvyDd6caCc{rkl^m_1cD|=aCdhnxO>%*^xDRQFU@SFiV7>s>XW3UZRj2m}Zq5C~aXN=yj^f=C2jQ*dv97JO5bGvEW> zR!ZFg1VZV4eL;MqMIi(lVI8GEio>qKAi{#*u6?U4Z?&6QvmG*{Qq!WZ z_8U}q;2ZeYZ$P)dr6DIfDJwnnhuDDErNFYP2ShB?N$=)z{0lE)mUpe$n2?d)Ts(csesghpf8%{JTd`WPdg9bh&F63< z2Ni%OA|d;kv`y^Qe{^S4jj;pK#T|uu++_adDN-;_&nUP+Az=#zbE)I+h%yZ zr-spZ7*2oaHh1rNHaQn?)kgjs$yrdd%SelM@irfJOUvpGB~@Ul)7mYBWBJZZ6W4=y zhT!F*x@@h!TB6fwjzUt$H#hh~TFVm5a6)bP7UZ9?@8QVi?y>GmA zcB(%B57A1R z{GTh;z&e!zdAUEeGAH2um;I#E_-JplMxzLL6B&3SSSD{P3I;EpBjd?u0u0j3uK7`- z-k#V@4SBD1a|2$%$Yo9++_F(V1YI4Xu<{Q{XU8vZb}Tm-K_Jz~3RyT;YDpC*zuivlby8A#N-=TWySt#AsHZ$>tNK zKqKuZdF5V3OOLrll|NjP9jS#bf7T69cC0}Lg0o&uJsm;P}gfumaA`qy18@g`orzLdZ!CoN(;2az@^s0R@iW64iKgFFX0o~og+PP zov9<-*jXMU`J_4AiK-S{9`_n^Z=p;ic@(ccxy+gF6iPZiBCK52*Qb+n{Avqlp?=4C zRG~N8)%-jA!~(+T=keM)<=2l%+%Keghg?@z@qyO7>`OZvKRv$2leW$fAbXj0RBwz; zYn*UdvW7$$rFruOFF#atrS|J7ukm#;k=%#messgn(n5;&UR?Tq<+I|z%;)!ZAJ&Nh zos`r1&sASWXT8VE!qdCM5%~?4d64$B9eRU7>Y>!?#nir>AJs+m)2!PBFzy9v{_`^) zhGQ;Y;>7aQ>m8zOFg3lVrx&iXr)T+-)Sr4U*wgC`NiE#|9tyKs62ZWaFWW!YSYY+v zG@rb#-I|V8p8%_)J^~lL#R~QFvbmFa2`R5GyxnBb!%fUqb$t9#Md#uXQ`ZPv{n07! zg5-(R4%6nX_Epq|X1Pdj52+_^Gu=2{QMtQA#Yf44)<&+HtCeufsJ&HAnFj1>jk_~;AAz!l#h`snb?D}*+I(zsG^W04glaEKJNDdG{cK(l zolbO=bH<+b9AmUGDgVbZFEnm5yAdTwJWU%Z#C-qB8RZMg%U!m17AdE}jd4B7nk< zMb46|uX=@{gVkiDls6q#FL%lT@6r>0afe8~ob0hC5~!$O!0deS&2HB zg+6?+6r0=vYy5lFBsLqa`<4xPm0<_d;JYMZy@uZ3MPc@pWh zHPWao>Lq&evnBWzw#T@cnB~Tk1I%?Hm(^hE%ofz<*)OOf`ji5FaWoCQ9{8Y38k)#A zVR2iQdE^9<2tNow>c2Dx9Xw6F`}+I2f5e8FcB??3mY>R?OL|Q<=$G7BUuz_OO;sqG>fbI%m1{uO6u6cHKy=d_F~iPsWUE z9|Uh6!At8djmuTM^Yr9;K0e1}a)$Z{TKq0(oZQ6AAE}vcHofK|<6YNQB&$x`B)N`P zU~Ms|&pL=7AevEjqCgKP9Z=Lz`z;Rwzn3qFNW40yPB$^5*PA@HZC8)U?m!t9f4)~} zT)P#SJMBs;dhL?@UdEkmy_;^_PQ!V@d0srJKLbr`)?BW zkdnwI>rL;VLcqSD#iKz`#t;7>lF{=f5Pu&%!WJCX!XJjl+CLbs<~*Fqb>SY8=0l)- zy(?~kY|?Fi4$l`RdYgwmwBWTPurx7YHxW+~qVsM)FDmirDG`n(XFbJ(%W+7wh@@`+ zbjg9sHGV_xp-J+rThWI2T7>(C@>o1 z=73J+gW&L?Mp@h4?(;rs;IfPUDn0$~3b140vy(kOAzR>) z;pVMw>s|@c+}UFS3Z>V}0iLL30CRGc)S-`{dj;v(ttc$F`J`LG<5K^ivd*-idEXYR zr_5yy0(xrx$7K40um1xoYwibbR=S#v%wO6`3FCI~AOS7ndqEhSi zX?25AGuYBQy+#}l8W^r=xLmqDqk9GeL`MZfADp4Od?E&r(mzGhC}i;I%i-`k&LQen z&=NQ9^m8jW`0_xhyxSwItT-Ze-Vo5aLtU$s$!zUkf~qZVa&VFta2pxtmmCqEUlfhj z_`=oVM0@SAkNNS$d3br}F;Sz`t*+?GrT?tvVH$O9oXM^EYY8fUSgQ3xm_Nvx`;sqX zlfuyO_uue!mSOYQf71s5x9n2&T@{0)Yi&r`G}6fXF2c~#mmd7+oW{B^+32RPa|dp( z_{(^Dg?#$%fnf`8xvAL5|I>C{aK1EVsPugZjJ|~aoq~r7E zQ>UPJb*mAz%)71T=&K+f9+xNL);KEc{A-t1$rPINP8vxwe=<3}pW}YpcvZJEWil=h zA{FRSLnLmS{+n;oNnO2n;1Xg&4MMV+&;x%4S&E-KHu8L^89`IW`KDgtV8#}!#xiNq z^oHhh&CqxWHk}tq{5S8@GwTI_!9rqu zhsf3T#Z$on8!j_%7Ip%Vq_U%wDq&X-tyPgTVVd<$-K9neJyHVZGqP`*c<;WEl0$k_ z^B0H&ZpoWcRmHDhqi$A_+#XQ)1;P>73`Fh{;0 zh}~3eVBnSLHuIOVFT0?CFvSAHo6&7=D`rW84axDBH+qZlHwoyIIm@C3bh~`@TzKTV zk*bTbeyAvZEo4RQk#x>8XeQ+dalC2!!4e$M=2ws=)R$LMtbym>Kb&oBs_@-RfJ&-A zfQ79uCn@e&QhC~lZV+Bd|BbpE`cOGu`zl{Rh%C;#f^Z>@4U{Cc3(jDzvq#DgAvC-p zX0r1zW@RHGR1y7G_}D707Au7M=fxUH#IWEn&4Wi%&?YqH0fhf&K`JRYe3_tawQdn& z_B>w9X0t36MxlTZk=8ePN2k)j%Jd--`E3Xmm8iF9T#wa5kQ9z!Ximl2PIx#p8`JuI|P&ffGPLZd- zmw6*^JU1lU1T(lD-Y6?8Q>cWN;+vCno+GV(1_#_$S6BNTEj9#i-@U>_90MWY4aF~! zpL^a?erO_ZbX^&x;+%vKjJkx}%BINzWU+|;dx7ge9?JirDmHjZ6z(we<)G#VG1L`C zoOI^XL1t}o zbqxp8F=~|zY8*f2#$=?WzLj>3Y`@X4m|-sOb2uV+_S(`D!cHYyWp>xv`-o4e=-OG_mo@E*#i;lYi%#qYdZ4lJYAgV@{&3QGW#Pj7pD1vU<{I8F5o~S&4 zKwLXG%@hl9ctSAhjz>$D8xx}w)cq*nYxs&n*7m3gOW?skkMo+vb1Y?TJ)w`aLeHqj z{FHH^DZ$HVuI;;4EZT-O!Qqj(NMFHg4`Bg$sJ{$VVUs;04=|{h^VL zrsf)rFR)tg#G_p$8F$`sxGxIA`BWbDM`4r_3-VMNxKUkK`zsyo*gi~%ULTJmt9cW| z{?4qk$cS|F$Gfy7;9@PT$xsuJrwYQ8>5HwjhVY?lhvBx&5jL;g;0FnHUl@27(~C0G zd@TlrZ9PzVUP`!C^=73RJuW?-KF6xt*9%5Jd0e4Va!9oJ=LM-45U|EQwFd;Wgw$5T zsgEmgBKT@|`Ykmf;604F^_g3%~Ro0p> z$}{;ul~-f@s}Mqe(FzRz&KW`IGovouLW#CG3_@b*eOL*`@xcW^GN<90Q%3LG&I=|k_gdJ;p0%d2vnf)cV zeB&4mS&C((Cf+M5A#J>WaFXlNbo+CfVYSdW_7|p&GdFr59CBH{-?Zt2gPvA)9O4}M zn3H$qQ>tACJ*U|{!S$vuTE}c2LlII-J^AA0IBF_v4P_Ih~esmY2Z zGLJWVyTdl~>H$7l;zIk?;X^rI^)3fyBXB!3r?+GG*A~$v_Ttz>$R$r^@T1KBm#Btl z0Vc;QW-U8}g6B_Xzf)L~zkeqvlK`?Cb=?8R?dAA!r(Hv+>L2yeGbGojB}PU@FpCW~ zsKXZ<(OQDSGCzyl;6w;M8bw70p{)l!bxGm3qXXrLm@31K$k*yb1kC>sum4st{yUKW zhHmpwcHP*_%&hD)SwIALO-&62eRPx&B%V_)@H>eux^JI*@E0H&6QChKdp|J1D`6r$xRMhK7-PBz;h_E4cXezy6@mWsO z;uVE~*!3*Um55%r3 z(;4p)tKPA}FiaBY@b&T}$e zghxJ)Ixj6c55$EjRnInE*9ulV5qG(=pV*{Eb^`%Z-ZQ0Yi# z`91Yd#t-=Gsjtw?r>*>5YLR-jp~d@ZOz}g(*YB**oQS_^V~k+Fw1Suq)q<@h=sA7I zKM^s=rGjxkLWBip2hEp`i|G&e>LrY0rYeCK((KbXA{ELD zgsd}@vRWXnPpWH{L+=O9YQj_H=4kfsbcUPur=xP`QT~-ozNsCeVUZcR-l=+7uQo!& z9t!9Fjq7*Zzh0bWQqi5u2*@wJW{1u1bOtk~~?VlOQiKXr4%DsY>M^COHE4-lRdnClQ?N|0_p}4N_E)(wWycC+Ol~}py7)lh9QWZQ;O4s{%mGBE=hfH_W zy5Gxkei`!>FlZF8({0DA;r!UI0Y`le4I2?IO@8 z?|>_eV#Lvd%b+gJVIud6pVOUUNOCmV)U7e7%3chv%&Ew%8THM7eoa&^m|;1{1|r6S z;g3?`*iAx)&*vt1ifo zlLJ9F%MCJ5;W|9Gf)`*N+qqrad1f%`WzE_Ebkl3t{YFpT$xf@5$ecM-qC&LFx;2g= z$#4Wj%>8$H1x(BDL@>@3x}u!+g8t&SsQxeJm#P@1129fy9!Ol;mrSb2FsZcpYK7w< z$0DjHK|QTJI}K84i=ZGJBQ99Ocd6TNt$=3i_w}MIaFfKD3)y1p4^p%b_0o2C zXyTr=u82?5V2G)C7BiEujO~5Xh9lSr^m)J8A^1apUS(;!<0bCZ(NIk4h_B;VqKVj| z4pcJ{MD`LNm67n7*6#a*a?FCrQ(uO{aLD`Ot$l8`r?Euqhr;7H>AY-ZkiG?zxSIkn zYsa*G6mi+PzZgWhyvVugFv{QN<*eYYnZ{*DKBhC5`5HMQoVzEY^q~BEY+ z7KEy{vYfCzpZk7ym~tV+fuj5ciT=;nAj(>WNemSU*0$_H7W9960a6p_nw+)0sPaSr za>-)+RzCyK9)kS;Ga6%tZCUH`N%y#qrD|v!HhmOtq~<$rjJD&-VFWW_r50+slkwy< z12B2*k3&_vRsS2$>Fx?rGadEh{mIeq7n55(YCecR>wuRx`(>Zkbbe(Pr+0kCqTi5S zWT59(WmKXv`wDGf>C1tz>`e7=kK(mNqw#$JMIyXzB@E^hj(I`DiyBPr1!2WDJcu>Yw&RY&?^Pf{`yhVxH*vZ*|= zN8L9mr_(keBBLtV%ts|(?Q#}>Z8_((UmbxA4^y-1^~)Td3%WW-Stm*5)R;W~`f21T zd*n~0>>97n=TeKoe3&=xJI9F={SduyTn5Ms0miDJM9g|MeFURncfFZ+6xcZy4RQjA z=x@gBFNjp`XA}>;i#e;8I~@;OL-KrxTNu$`=@aoUJF7Otx3%jLJ-M4iZ8i2Jbr^+@ zT1g2}&nK=7UjueBA{2s@3TqLeQC_L|+bF4*QNX;PuJt*|qsN8{T0 zl2!Ri?3=9{y9QC!@>opo93{P(yMr$_>aT^F1&b<6-YmUUzKsBD5{NYM(eeEKu=cG8XjW3p+E?o)(#)|nq0X4 z67$HGuIpQ&)w)#cU@^b5x>swdJP4fS(yqOVN8j-a>vG3$)FD{qy4am zhQUq`|M6x!RJc#!UhQ)H24*vc2YOz>wCZ7BM(Fv3qk_k*=->g^fTG>;BQRm5 z#=pdv;{%cK=ga?m$V9{nB3^VjYp?7<#9iE54%b5Ysiu#m1?6Z@FSa{SGj`dOO03W~ z27~G`N58AK$|AbI*8I*`!95^Qnqs;b7i^W!=+z2ccjIkIG`n8f3jd|YRa1pCqZF5t zlMM68k5ZjC=+=H;LCxm=I`jrcdhzQmeacCLHl9ulB_Pbf@1VqOKugjc5JjoMrFcFj zI-WVa6)qwCTYAc))~04*klBWMtq8?94K*H( zm(~=JctBGvoMNvU*K7K=+1ORF?cZrCaHo~sz~`B3UCsx{crv)r5iR?fvtr^agewZf1AONs#LWj*q+^|b3`35ye?m`vLlc<^`NNY4(A;J42W-P61T-K!RdFpPCNCkc z$rDP%Hg#e}B>*_KU#BTKLiuAsZc2H|9eaML<7_|_AO`>nP-2R>Q9X3AWfq54x23ez z(7VFNi~WD)Z)HBnfP8mO97M&mQ>^ULTE@eU^YxBw+20Yu7i&-gzxZ|ps6Uo|A0Mv5 zbHWm%U3P=|(rfyFj5V0lYkMZgfUqbRp0WI#`dZklpg(|J7ti15$ zb}Vj{B`ORsks>5NC?br5x-ZvSGVFhIM^Sz_ItVq$kE#v4{ZzCg;@wnkJ05913|IrIJs6ZU9{o#5pT3o!%LfwrxKaaQK zeczoDuxJfuA!7hFdzL)XyZvU4LSmTL+huTHnKASHw_`g`@D?e*dB=KYxj5SejmSYY z!OVd()WK&P5q)FRC~-zA@aO8Nx=wSUg+=uOrlc~i6+>7MdP-@;c9@sjevt}D-8v_} z*6*!-@|hQH<=1t~{+^>R?Xp1blO6v(I7Y(c4vRiK%#b(9`)XgiGe2cS^s3B3?Kz}- zy13XaFSS0>+&AA}`vZC8mqqIjtdT7QpOTn$Tb<4iKI({w;C(kJRsr>V8J?pA6r$vC zJ{~m03ttl`COdP2$Pd#WCdWi@F4VL1D_V-`#`=eE+pQRA6$--9d3hba89IE^BhC+e zi#2?P)2t@c$`P4ERm#|UiOse}$C4wOcoo#5liqb6o$v`isI`-gl9I0PJI_{sw0!nSnFh=Piz1o0s_`;_;uemcq+G5~k?a8cE zF{xEvcEV2cp*cE3nB!}ddH&bE_u~x=*2|a2X!!>|nNL=9o;Mrtb1sF2{F?iHRgChC zrS5J+(Ty(hF+v%a5%U{lS~02f(S&O&xWZc{{m zDXnI^Eu}%KS^9d3p;%G|BcS20kc6h}=2Jo!hwOd1DUxO!&e>fm==h8~ox7-4qz`e?B;jFL2t0(F+lpwS z*9~XO(bT4^#5O6~9*wopdO8`}Mg53~Ql>!$m$*SLCmEpTUFNw&Q5hD<-pyjB6Riq3 z2QppfnQby55lHM$PRR7D&8E@a_VoH8y>ZmP>IQ8IJ*1!hj$H%S*=m9HW<#)j>YEOo zu7F9Ibt!`ZGp9e+Uw#GyF<@T6Ylu@D9R8*Q-#Xr3@|%A43O_7N-;(+=@%G_Vk50o> z+EI(_;(LeUaxX{ChsE2YKFr1wIaCj^s*i#X=dJ{w9{|c4R@bCO5Z-k6tAPWqIvmg6 zs%aS#A41fDPW`e0|Jx0UcG~ye^>e-21u%Pwaz%L-K3n^G=i#9-YC~tuyvEybe8Y6i zGmebAw69n8LF177LjN zudYT=Xa76b?c?;`CWjqQL29`)CKdmJ{x`nY)T%W;#rWKt5npD}M;wP04DqUS+`N;J zRpScqs!Q>{-!v=3?wp`_E%D5YZxXe84DL%Zb}^ZAo2YwVIn8p@`Oxn$Oqyx1wi<70 z_RYTl9!f*n=;bu`IisIW4lmnf;S>298fK!$)$z*m2cE8@xvHwX?G*BC9?e1)c* zZ!TOK(z34CI&vF|m2a5K4@45n3_3@23e%luYvdO(suASUxX^bQ4@X&DPS_erhkp7J zx}%HCkN_0n{l5h;xj?jP1~vb(P-&gKL8gfFFBX88H};u22HZCCkfh(0%dh?F6ZlFy z19)ZL`r`VyT4t?E^q`6Aks~-E&xdX9#)xAjV)a);mTCLKk$tWgF>-FS{AEuR`4&UQ z_&ci)nX`A7Zvk7Z^T*xBA^P9%V{nt`gR}JAn1k<{#C(y6^VLnH7y)a~(UQ`;=#6)W z31PV>&t!3EcG%BEqZuMMA%CV+?bbvyJ8%&kZpY8K4;`ZD7*+#P8DC#7(EB4Tq%4!D zkE`-)qYJCU=!#FQ*UZ~Hi1Mugf)0bu-(H~G)&_aaq0pzU7081;D)F- zH`)tQwZrkvdZuP~)hxsM_=AsMr%47=4ap09IgM6#l?f`;%?pICPlJTm0OR*QB9CF& zS#0cvpN5Mq0fG->NT<}!&qix5T)1LVpE%kb5D_v}PY>gL{@63f3!dR+c%3sU+_v}) zpDa}e5k#F2KTILn?-`j&abfUcK02Wn#HU0S^KnDG|CCNNF+^iL7QmwVrV@jkB6xu- zO4id2epKLj^{oHwqieU^LhgEDJNln7WtymUCIO%3yA$koJI-<+O;$;KkK^95W>DI> zrw!@DXQD_xMU^-sRwD78za3HE3RC;afX z^e480!`RT7{Rp*3w7=Cke|c}opW039SJTk*%4apKe_wexV240OnGrPT|cyR{Y z75a7`dd6KCT_jK|*w5P6N6!w2y67(9J^#!I_N|!kQY0P(s}q5{+3oSE3n7ult3m>K z%%xo3ZchpUYw{gXlUEF&+{`8q zz+;1hD}nO^Dv&xI{#A@(m}C^cnGIJoT-+c2nG^wSh-$$m(z%Dj>GE1y?+xp<8C<*R zCqdyq=O2yNGhX0lHU>UzGq%s{I;)2rdCYx=gVFL8LlgLbQ2uqkA9p>E+jW;HWDb+A6g>-LEa{?*g= zc0Pw~q=JG1iP8y>nggp$YX(t`;sx47cnmi3mEW9l5E)#XK2n!jKr%NsFJeU%RC-ExEb@7XZ5FD6cSM4omW31W3ggn4fEx?~Ks+Mo$pK^AhwAir6 zb){wV*R(GeJpmnYG&I^${D{L^LdC0#~Jk@ zu8M|^K%iIM-JsV6pTl9Y{yNBZqqDMpU2a&|EC@JIN^B%kFghHUaeYVdh5PwR=f$ar zHf*d)mH@zsJ^VZ}FocCD%PM{PMZZUVsB^G=DO!Zd;*O!Tc=6M6!dz=>tqG#J>K)B_ zYp3|g@a&_lbtYP)6&s{u%|wfaa?+))x^U`vlOsW=%2I)@>_^^uD>6eNxlDn`_J`*7 zuAXq*Gsc&5Mp63kD5K7?5^UMg(d$2^1_Ug1hmq7<)rPLl%*L(GOu<0++b{MM z!O(AVwv;vI2SjWSszr|W^N3BdwOlV)-1hlANGTdJQr)5Etc+jp9rJyRFK4*$U7qt!f><`3NpQ z))$~G_16=XKr!jxucSVdtU`t(9_r3ow?*%FUw;pj zL9jHWZmsqX7s}_|7Y0#s@2pM^Wjd}Wv^0dFv=;eNA3nPTcPg>=)AM8mm}7zKs9UIN zw~>>71X>Xi=cHbxdRXj}scScPxFj&Al{J37R`%YgQ+yB3mhDA}BgFf&7LM7J2T;}Z z(@(^)o{K^NH5f_`-H2V&%h?9gjdtK=fcxJFaov))JqrG4To0qQJ*t}pKFT|`hf~jH z8rtd@xfNYvHbVjOC+ZS!x4URS7J5C?O zj!4kqN%L>?@rLN{eM>E-1t&k@T_-3Ow{LDV`ZVs&yhmWrS+0Z1= z5?sq8q^-}0XZzON$Bq)v=}ke`-6YW|1W4x&rSjm(I74t5=J9&mbSp8v`e-~%vVK@K z3RF4Bl?Zi8Y>_7lmx9*_x5Xm~th;MXcDL6Uu)c9Sq!|zg!~~w8_#4cQsw}HHcrdiD zt!?d=-Ct8Zunq4mJm3W(Yi#Hbj8X!s^>o6hd`!LPl8Pu`!_sVn6gESAdx!kVri0I) zax6>b0Lc)jF54N#rk7`#d*GD8Y}&Uy)B?&D(`zVTVVx{e%MjPHCg+VeeJR+6ffLz@ zR~<*u`*!}kmp(4PbkNA8#A^$63}GCK1qR{bMB(O70bHRZXPJMC zgY&(An5#7~tmTui%0UF%n^ccb8Q?@1z?CQfWld9Ag8~aImdN)WaJhAzk_78m1%&jb zr$ej3L?Zn``ldE3jP&%#GHiBd7S99v5KdjG$(?D{AZaun>1qt}#dw`WFa@(O&{x7Q zT%p_n2$!8)-Qw@y!N1^Oo8YJbCD;k+uOR%tHYmggTr9_Nt%RU{`Bc5y^R|hL3QUN= zlPE2!k~MGBO-O)&2r*Ox+@hE@2_4MHkj^;2e|xXWu7JIf&|LZ{j)zG^#1uHK36{Zw zaa0yngB{{j8eD0$lNY;TrA?hSfE1hQ$Z!W-fnSu-dTdNgs+w85K*hSP9Ra(=dmJoO zQSrI;gz%1*l=Al<^IB6whIx{l2Xa_6{7_zbO@W1qd!z?7W_2uZ4_(=62_}=xD{Se& zU`BF!xPM9-zEa`Jub!Wtt&t+}e_0s0qbxotd@d>Ks4B`&So@+MU`Yn7CSos`kKA8J z2JZj@<3P#08drL%LK^ompc7V}uK_%m5Lg7Ey$I67xI8jD2UL`0O)&s# z2h1rsP+!A8@Ze-m0Vd6~p;JJI*b=8Jk(+lb0*bL%c4|&UoZVkAM0ybgusO`w0Hcfk z!>Z=65I0P1CMyo28c<@Rgb)W+=VUX4jX~jl(-ixnW?5)!`Mg;BDlZFwMeZjC%4AVynuj67l4?!kCr$8OpiZ$`#j zaq}ET6v(W)Pet_Z5x(2wI5-QfxcI~fpx?!1l6L;WoqgS2V#dnXM{XPw7%;E&=E`sP zc^I3Vb>kc+AtudAk04yll50Yo*9T_)3(hwf-C}^%VY`8mY41;xWlm$4KYL;*jSpr| z#gt)0YNIi12 z>a~V11Roh)PfngGyiabPbsm3_K0 zQtOK_3@Gbw9t0(Uz{Gn@`C$QLje2o>&siI-lp;SVCLxhI|9uQ`dW{;8%9kAiE}nUs z?L@3khkWkuvqrS%gR^l4rNDvJ%-sW2qXGQ3Ak>%3i^j!Rhjl9;K7h6Ulnf!iToC|v$Q9xwQ z?^~Ed=P?ebf2HyK)xQwxe=y)Gr^Haw3Zb5*ik*B$CP>7wU4S84#2BJOpWv zgFgh7w~a;jTO}Kp1<;X=-otdb6G(IFbZD60Osn*jCBxdB??J1zFxk zFn4M5f+=tnYf*(6l1Os>u-*QPljDin^H-{O*_9yJaM*2eaV5y5WrO%OU*|smy2wZ^ z;@EEEABx)HSv-P?Ga)l$+AZ>%EL{E5=PW=T;0#$;GUgxjGq~M!&>)~&Dt8o0fxDUzq{4$NZJKSIz`S!) zo%LEt6CzO$iV*7<3hrQ{K6ye5cn{ca_^!q9UsBI~gnn+uMP+n4xgKah2!mGcXByVa zK&LYeYA-h*Q171z9vM+-r9LD%5+sy5o}-I!V0C#3$63loEBy2Vfw0$J{}*72FJLQW z#Pk~)3wp#a#5lu^tnayE5AoI_DY?pE!(2dWlS0Z<;6O_7Frf^v1aayAUvJ0%kHX^r zN6^28x< z`lNc=&!8r^O_p)r7Es}daC=SxTWJx=t~qNNYn!@!&9Liw4MU8}V5AWNQ~3H5#&21% zod1|`wQngMR%-Mcqc;>-gKQ-9x2J}&%Ec0B86S?z&(AEMA1#6)x1XM zyBq{BdG8A^UA;%1T}!>)wv)Uk_-u68bjq5xT8&Tc%L%zyX5e^)XC>-`BX41ButL6U ztc_W2JBB0Gu#8|w!D$=p0eR2vyEOi*X%d>~Y`Cn<2}8qY64 zm9Uu)&lFszTcdv#j}(&kOv~MNvH9$IZTEjQpRV}J|M|w}yFpFn^@80}Jrp|v{~cwA zozIFxcg~8dcKQDNjiVK!wd``33?pz~%!qA5$i1)qs6RdWMG+Ggr#D+7f|CC9P9e`l zAdY!iU5r@s9>Y~7)}Xq5fn9hSFw;bHS-T8a^bsLO)a6M^aDzSXMa^!@G6=p|zmQwE ziY;wd!8__Ka?~05U4OMrvL8tdU z$Tncyx%C8U?&6O6Y$|(^+q~**1ZobtPQwR0*RloElGSFtLSI6&Pcg5zw>oOHFw_ByCmoW;L3D7%hb`70MQ}dsi zHLMJnJUqY3EHHT}9iPg9OZ@@-pDaRGjRR!;qS+vCMzJAgTaq-+ z#L$~xhuXl%FIfK`;2D^<@~rWvjD`I_2$pWYtzfl&EwS=_``^Jp_ih=uJG^L(2#o7W zp%u0$p-p5_61VN8AurWcn>xp{kkgskGopmh;>0&4*n&Lm_4RfCeMe0ERjGri7LiOoqXtUkzp}`PgZN^I+{dkR`Rd3$ud4+imMUK~h zfqY4{*0f=a%u`CKF3L^!hqAIC`T~yXj;JZFnpsy138^I$Ibegc2u@=nI82c~cj|X?|sl>jtKP}xtLA*bek}O!z!hn;=OE$ojxQb%5z{npg0LVoT@3ZzUt| z!o7U#>84ZuSc1{U;~G)dz1T)J*)||JHRajNPdm6gsUa&dNfqk9DtTGY2F62>|B&E3 zWkIxMmb4l3fu}PEQc3fIqd1B}a=Br9rH#(fAN#EKje?1XXDf}p(^Htx$)vG*&llxT zcRRmtwV2|d4}q=9>==*ZP4xGb&mOgj9vdwjVI$WbpPEi^;;PMB$Qp~uA~k!6)~Zcg zM3C?t1*78Sd!K6No$T+zHpYylqE!rK?scMuKQ6mTXGe7dT;(ZBBn5RMW+q(4I9+TX zma!3;fFu_oj6}@tKH`~fHEFUbK)v!iZ!1!$U$oHv+OO8ww>f(<&Qy+VYLxfhhoP|D zQl;I8enG*Ug!s77@3gC|dG@UXAKm2wqDQdmLu#z|bgtFwM?Zl!`!aTqO3rsmKAu)D zV1|)n9XW}$EXi|fk_Ajk8z#Mev#!(*oK9qt6Rkrw{88DtMhY|O5@w8MR`K+#KmFQr z{))V9J~U-mgL?;)imTUBX}dLO>e>?F1}#vqxXRUCOOIJ z^!ao2^eEN`FpcUA*lgv}lf@HWq7$&b{3R%v8sWl9FXg5#nr9*226?geih}?Jr7``h zl88DbeD~o+nOu8GB^ZP>rizf_Il6(pC=_oQoeOnm-KqJaU5R;_L$x7-XNKLtzwV8L zt!hL-1b-pFH27XaQ3dLLXZ9g$4ajL3ynP;-guHsVT9e`acyfcNn?*zvK6ay#Mn^TZMac)9TTiFlp#!@UkJ|7PT@l6b$^#Hf1*|;6rISVJB+Ou;vlXZFj$UYIGd+?ZrqzJt)Wk_qhMy>g5P~&5`Gc z;_fDk!f<&IvmF$AKLK0TTurV*;bG_pc7^FcYxu++v%WLXBYZ1fbk9d7w;vR8bR$Jc zqtSFt1#d^wv_Pt7raBB?=W=zx*n5g9gsh)Te-;5)v`A>|fV)QH^4S4Q&|AbnxgvR+Za+wlZ zI{8PFXeLw}ltZKZelG8+rX7U7m%JatKlTqSOaW$_ zj~|DHgtG5$y*~X}Cx2v4#4YkUyjCtjb8X$_=3}AjvwU)uOjOeEQ>AzJiM^%|2cneo zl;p>8KrffLTVxp&VtcXaF@z50A9HUW>7liNzwmn!7R&B2->ND<7_aV6Dd?+uB`~IP zhA*~Awi6T2*m1os4><;SBme9(1B4`SP@jkZGIJ=0T}=C#vSKYdzND_990oZ~yG20& zq4toEg4}sPLs-!Unxpv_Gw%Ls(x}`fMBI~&4>FUUH}I2u=lEu3p+|t%%FNU)Wd9u6 zVyBMrW<$TwG#V*e6Lj=N57@YnGV-1Ly$tfoY!j}(CQ&R^$^v%Ve%m;W69exHcW@Yt9r+>7`&TRz+o_Iw;fSl4}?TYqz|0=?X5P$>TO^zgy@hEVH|}R zeg7*MHb7dlVi(}9O2dpOj4mxU0tzRokv@p0ngmQ8*s?Hz!FSX)ucX}6&M}H&(S$Rl z`kqu^^pdMUQ1=Y~gYjtp*Y1lQUgy>A$XV!&uc&2+NZ_k>8O%w#-`y|B zlLqKmzI)%SM)wixtg)2Yj?ASW^Q5d6+?nMqQ)iklRiiDPXRa!`W~0Xwfpx+@I71i( z=8|M>Ex-T$LWdh_B`^9Tk2iW!W=;imi0j!)n(}Uh$>y(Iwjf(0f%A~UwHGY1DxaHL zjsJmJiBh{m-;}v88*})(s4VR@Mdm58YgbMIG%LM`P&th(8JY@ zeMitusfdKVxW7XhOVlS>JKt?DbT&50@LlLRo}Z(H3#V*4T?ygv@*~iC6;~mcL`ycK z{z%q(&&Wsz_foWY_{<68S=0o-gDor4t@5a%eJN&6%`9P{dEZ>;y|Tqmje!Tdlh?BL z>Y5`jDVQduqi{{0I<8hgAXu!qIX3%Vqw%Z(HNp_iJcqNb9@~0s+)9B7b@e1pXvGAmLEsO620ifL=`(2%gl7NW827f@WC>09pCfn$05U7Anq82 ze-8ahD)yG(cL(jM%`O=tyvo&mawqjD+a+zs3i>zV{enii$Z5cv?)K;0Pj+RV7DrOFT9P$=c|_Y5TN^1`&b6u6jOuo5V5Cqw0JaUDmP>@)FV1q5L+eFFPpD;?oK=p)zH5Bi7>AUXHIu z$5t4D%WsRzF1z@0dMCVhd+D%ded$GH0}-0K`>lu%*V7%UM|2hy5aBX5 z7LUI^D)QN(^lzA@2Nq~q>~0pR7OP4Tm2VQt(U80~!{wN`^0V>EwS#ZUp(7=e3o%D>tiS@% z#RkuqDA;h97dO;BYhEs$IZSPyKep2@ZDl%!J`ofv$qu`H6>PXSp^GL72$0N)sqfNz z-{vs_ zvlbO@gy!~{p4MtbqTxHU$wj#mUlY=`x%jN&kcjg1Z@n>*t?}T}ln>%19Bk-0k0*4>=-+1XJeoJE>+o zG6#i|1DGIrL0xr+>s~6eQ&Usnb^R}nHalj)*^q*=<&y1(X%lK4mZPhp8S`T*3{EhX zz8T2zC}}IL3iP(+dYs%|nscH0aYV4W5l#q9Ah2P`r-5YJr>pkjxP|tH8Tw~X$M$5= zw?pS=$=n=UR3IIhyKN(%w91|o$2wAJF6HsO!K`wB+ip&a15!)FR-DMpR;zN(!#7p| wDxaJXcmG|Y9aDT0a=hVy;XVW6RryKtu7?Y;iZ?$5row`BwT*6+YdVJg54It(G5`Po literal 0 HcmV?d00001 diff --git a/windows/keep-secure/minimum-requirements-windows-defender-advanced-threat-protection.md b/windows/keep-secure/minimum-requirements-windows-defender-advanced-threat-protection.md index 994416c82c..28d5b89736 100644 --- a/windows/keep-secure/minimum-requirements-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/minimum-requirements-windows-defender-advanced-threat-protection.md @@ -6,6 +6,7 @@ search.product: eADQiWindows 10XVcnh ms.prod: W10 ms.mktglfcycl: deploy ms.sitesec: library +author: iaanw --- # Minimum requirements for Windows Defender ATP @@ -13,6 +14,7 @@ ms.sitesec: library **Applies to:** - Windows 10 Insider Preview +- Windows Defender Advanced Threat Protection (Windows Defender ATP) [Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.] @@ -21,45 +23,28 @@ There are some minimum requirements for onboarding your network and endpoints. ## Minimum requirements ### Network and data storage and configuration requirements - + - + -When you run the onboarding wizard for the first time, you must choose -where your Windows Defender Advanced Threat Protection-related information is stored: in either -a European or United States datacenter. +When you run the onboarding wizard for the first time, you must choose where your Windows Defender Advanced Threat Protection-related information is stored: in either a European or United States datacenter. > **Notes**   -- You cannot change your data storage location after the - first-time setup. -- Review the [Windows Defender ATP data storage and privacy](data-storage-privacy-windows-defender-advanced-threat-protection.md) for more information on where and how - Microsoft stores your data. +- You cannot change your data storage location after the first-time setup. +- Review the [Windows Defender ATP data storage and privacy](data-storage-privacy-windows-defender-advanced-threat-protection.md) for more information on where and how Microsoft stores your data. ### Endpoint hardware and software requirements -Endpoints on your network must run the Testing and Adoption Program -version of Windows 10 (Windows 10 TAP). The hardware requirements for -Windows Defender ATP on endpoints is the same as those for Windows 10 -TAP. +Endpoints on your network must be running the pre-release version of Windows build 14332 or greater. The hardware requirements for Windows Defender ATP on endpoints is the same as those for Windows build 14332. -> **Note**   Endpoints that are running Windows -Server and mobile versions of Windows are not supported. +> **Note**  Endpoints that are running Windows Server and mobile versions of Windows are not supported. -Internet connectivity on endpoints is also required. See -[Configure Windows Defender ATP endpoint proxy and Internet connectivity settings](configure-proxy-internet-windows-defender-advanced-threat-protection.md) - for additional proxy configuration settings. +Internet connectivity on endpoints is also required. See [Configure Windows Defender ATP endpoint proxy and Internet connectivity settings](configure-proxy-internet-windows-defender-advanced-threat-protection.md) for additional proxy configuration settings. -Before you configure endpoints, the telemetry and diagnostics service must be enabled. The service is enabled by default in Windows 10 TAP, but if it has been disabled you can turn it on by following the instructions in the -[Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) section. +Before you configure endpoints, the telemetry and diagnostics service must be enabled. The service is enabled by default in Windows 10, but if it has been disabled you can turn it on by following the instructions in the [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) section. ### Deployment channel operating system requirements -You can choose to onboard endpoints with a scheduled Group Policy -(GP) or System Center Configuration Manager (SCCM) update (using a configuration package that you -download from the portal or during the service onboarding wizard), or by making -manual registry changes. +You can choose to onboard endpoints with a scheduled Group Policy (GP) or System Center Configuration Manager (SCCM) update (using a configuration package that you download from the portal or during the service onboarding wizard), or by manually running a script to modify the registry. The following describes the minimum operating system or software version required for each deployment channel. @@ -68,4 +53,4 @@ Deployment channel | Minimum server requirements :---|:--- Group Policy settings | Windows Server 2008 R2 System Center Configuration Manager | SCCM 2012 - +Manual (script) | No minimum requirements diff --git a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md index 375f3f74e6..c29d81114e 100644 --- a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md @@ -14,6 +14,7 @@ author: mjcaparas **Applies to:** - Windows 10 Insider Preview +- Windows Defender Advanced Threat Protection (Windows Defender ATP) [Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.] @@ -53,7 +54,7 @@ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Advanced Threat Protection ![Image of OnboardingState status in Registry Editor](images/onboardingstate.png) - If the **OnboardingState** value is not set to `1`, follow the instructions on **Identifying and addressing onboarding issues**. + If the **OnboardingState** value is not set to **1**, follow the instructions on **Identifying and addressing onboarding issues**. **Identifying and addressing onboarding errors**: @@ -81,67 +82,12 @@ Event ID | Message | Resolution steps 15 | Windows Advanced Threat Protection cannot start command channel with URL: _variable_ | Ensure that the Windows Defender ATP endpoint has internet access. -### Ensure that the Windows Defender ATP service is enabled -If the endpoints aren't reporting correctly, you might need to check that the Windows Defender ATP service is enabled on the endpoint. You can use the SC comman line program for querying and managing the service. +### Ensure the Windows Defender ATP service is enabled +If the endpoints aren't reporting correctly, you might need to check that the Windows Defender ATP service is set to automatically start and is running on the endpoint. -**Check the startup type from the command line**: +You can use the SC command line program for checking and managing the startup type and running state of the service. -1. Open an elevated command-line prompt on the endpoint: - - a. Click **Start** and type **cmd**. - - b. Right-click **Command prompt** and select **Run as administrator**. - -2. Enter the following command and press **Enter**: - ``` - sc qc sense - ``` - If the the service is running, then the result should look like the following screenshot: - - ![Result of the sq query sense command](images/sc-query-sense-autostart.png) - -3. If the service `START\_TYPE` is not set to `AUTO\_START`, then you'll need to enter the following command and press **Enter**: - ``` - sc config sense start=auto - ``` -4. A success message is displayed. Verify the change by entering the following command and press **Enter**: - ``` - sc qc sense - ``` - -**Check that the service is running from the command line**: - -1. Open an elevated command-line prompt on the endpoint: - - a. Click **Start** and type **cmd**. - - b. Right-click **Command prompt** and select **Run as administrator**. - -2. Enter the following command and press **Enter**: - ``` - sc query sense - ``` - If the service is running, the result should look like the following screenshot: - - ![Result of the sc query sense command](images/sc-query-sense-running.png) - -3. If the service **STATE** is not set to **RUNNING**, then you'll need to enter the following command and press **Enter**: - ``` - sc start sense - ``` -4. A success message is displayed. Verify the change by entering the following command and press **Enter**: - ``` - sc qc sense - ``` - -### Ensure that telemetry and diagnostics service is enabled -If the endpoints aren't reporting correctly, you might need to check that the Windows 10 telemetry and diagnostics service is enabled on the endpoint. The service may have been disabled by other programs or user configuration changes. - -You will need to check the startup type and verify that the service is running. - -There are two ways to check the startup type for the service: from the command line or in the services console. - -**Check the startup type from the command line**: +**Check the Windows Defender ATP service startup type from the command line:** 1. Open an elevated command-line prompt on the endpoint: @@ -150,24 +96,131 @@ There are two ways to check the startup type for the service: from the command l b. Right-click **Command prompt** and select **Run as administrator**. 2. Enter the following command and press **Enter**: - ``` - sc qc diagtrack - ``` - If the service is enabled, then the result should look like the following screenshot: - ![Result of the sc query command for diagtrack](images/windefatp-sc-qc-diagtrack.png) + ```text + sc qc sense + ``` -4. If the **START_TYPE** is not set to **AUTO_START**, then you'll need to enter the following command and press **Enter**: - ``` - sc config diagtrack start=auto - ``` +If the the service is running, then the result should look like the following screenshot: -5. A success message is displayed. Verify the change by entering the following command and press **Enter**: - ``` - sc qc diagtrack - ``` + ![Result of the sq query sense command](images/sc-query-sense-autostart.png) -**Check the startup type in the services console**: +If the service **START_TYPE** is not set to **AUTO_START**, then you'll need to set the service to automatically start. + +**Change the Windows Defender ATP service startup type from the command line:** + +1. Open an elevated command-line prompt on the endpoint: + + a. Click **Start** and type **cmd**. + + b. Right-click **Command prompt** and select **Run as administrator**. + +2. Enter the following command and press **Enter**: + + ```text + sc config sense start=auto + ``` + +3. A success message is displayed. Verify the change by entering the following command and press **Enter**: + + ```text + sc qc sense + ``` + +**Check the Windows Defender ATP service is running from the command line:** + +1. Open an elevated command-line prompt on the endpoint: + + a. Click **Start** and type **cmd**. + + b. Right-click **Command prompt** and select **Run as administrator**. + +2. Enter the following command and press **Enter**: + + ```text + sc query sense + ``` + +If the service is running, the result should look like the following screenshot: + +![Result of the sc query sense command](images/sc-query-sense-running.png) + +If the service **STATE** is not set to **RUNNING**, then you'll need to start it. + +**Start the Windows Defender ATP service from the command line:** + +1. Open an elevated command-line prompt on the endpoint: + + a. Click **Start** and type **cmd**. + + b. Right-click **Command prompt** and select **Run as administrator**. + +2. Enter the following command and press **Enter**: + + ```text + sc start sense + ``` + +3. A success message is displayed. Verify the change by entering the following command and press **Enter**: + + ```text + sc qc sense + ``` + +### Ensure the telemetry and diagnostics service is enabled +If the endpoints aren't reporting correctly, you might need to check that the Windows 10 telemetry and diagnostics service is set to automatically start and is running on the endpoint. The service may have been disabled by other programs or user configuration changes. + + +First, you should check that the service is set to start automatically when Windows starts, then you should check that the service is currently running (and start it if it isn't.) + + +#### Ensure the service is set to automatically start + + + +**Use the command line to check the Windows 10 telemetry and diganostics service startup type**: + +1. Open an elevated command-line prompt on the endpoint: + + a. Click **Start** and type **cmd**. + + b. Right-click **Command prompt** and select **Run as administrator**. + +2. Enter the following command and press **Enter**: + + ```doscon + sc qc diagtrack + ``` + +If the service is enabled, then the result should look like the following screenshot: + +![Result of the sc query command for diagtrack](images/windefatp-sc-qc-diagtrack.png) + +If the **START_TYPE** is not set to **AUTO_START**, then you'll need to set the service to automatically start. + + + +**Use the command line to set the Windows 10 telemetry and diganostics service to automatically start:** + +1. Open an elevated command-line prompt on the endpoint: + + a. Click **Start** and type **cmd**. + + b. Right-click **Command prompt** and select **Run as administrator**. + +2. Enter the following command and press **Enter**: + + ```doscon + sc config diagtrack start=auto + ``` + +3. A success message is displayed. Verify the change by entering the following command and press **Enter**: + + ```doscon + sc qc diagtrack + ``` + +**Use the Windows Services console to check the Windows 10 telemetry and diganostics service startup type**: 1. Open the services console: @@ -179,9 +232,28 @@ There are two ways to check the startup type for the service: from the command l 3. Check the **Startup type** column - the service should be set as **Automatic**. -**ASK ALON HOW SET TO AUTOMATIC FROM THE CONSOLE.** +If the startup type is not set to **Automatic**, you'll need to change it so the service starts when the endpoint does. -**Check that the service is running from the command line**: + +**Use the Windows Services console to set the Windows 10 telemetry and diganostics service to automatically start:** + +1. Open the services console: + + a. Click **Start** and type **services**. + + b. Press **Enter** to open the console. + +2. Scroll through the list of services until you find **Connected User Experiences and Telemetry**. + +3. Right-click on the entry and click **Properties**. + +4. On the **General** tab, change the **Startup type:** to **Automatic**, as shown in the following image. Click OK. + +![Select Automatic to change the startup type in the Properties dialog box for the service](images/windefatp-utc-console-autostart.png) + +#### Ensure the service is running + +**Use the command line to check the Windows 10 telemetry and diganostics service is running**: 1. Open an elevated command-line prompt on the endpoint: @@ -190,22 +262,67 @@ There are two ways to check the startup type for the service: from the command l b. Right-click **Command prompt** and select **Run as administrator**. 2. Enter the following command and press **Enter**: - ``` - sc query diagtrack - ``` - If the service is running, the result should look like the following screenshot: - ![Result of the sc query command for sc query diagtrack](images/windefatp-sc-query-diagtrack.png) + ```doscon + sc query diagtrack + ``` -3. If the service **STATE** is not set to **RUNNING**, then you'll need to enter the following command and press **Enter**: - ``` - sc start diagtrack - ``` +If the service is running, the result should look like the following screenshot: + +![Result of the sc query command for sc query diagtrack](images/windefatp-sc-query-diagtrack.png) + +If the service **STATE** is not set to **RUNNING**, then you'll need to start it. + + +**Use the command line to start the Windows 10 telemetry and diganostics service:** + +1. Open an elevated command-line prompt on the endpoint: + + a. Click **Start** and type **cmd**. + + b. Right-click **Command prompt** and select **Run as administrator**. + +2. Enter the following command and press **Enter**: + + ```doscon + sc start diagtrack + ``` + +3. A success message is displayed. Verify the change by entering the following command and press **Enter**: + + ```doscon + sc query diagtrack + ``` + +**Use the Windows Services console to check the Windows 10 telemetry and diganostics service is running**: + +1. Open the services console: + + a. Click **Start** and type **services**. + + b. Press **Enter** to open the console. + +2. Scroll through the list of services until you find **Connected User Experiences and Telemetry**. + +3. Check the **Status** column - the service should be marked as **Running**. + +If the service is not running, you'll need to start it. + + +**Use the Windows Services console to start the Windows 10 telemetry and diganostics service:** + +1. Open the services console: + + a. Click **Start** and type **services**. + + b. Press **Enter** to open the console. + +2. Scroll through the list of services until you find **Connected User Experiences and Telemetry**. + +3. Right-click on the entry and click **Start**, as shown in the following image. + +![Select Start to start the service](images/windefatp-utc-console-start.png) -4. A success message is displayed. Verify the change by entering the following command and press **Enter**: - ``` - sc query diagtrack - ``` ### Ensure that the Windows Defender ATP endpoint has internet connection