From 460376177868cd0dfb3242d34095181241819da4 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Fri, 6 Sep 2024 12:33:03 -0600 Subject: [PATCH 001/123] Windows Sandbox TOC change --- .../application-security/application-isolation/toc.yml | 7 +------ .../application-isolation/windows-sandbox/toc.yml | 7 +++++++ 2 files changed, 8 insertions(+), 6 deletions(-) create mode 100644 windows/security/application-security/application-isolation/windows-sandbox/toc.yml diff --git a/windows/security/application-security/application-isolation/toc.yml b/windows/security/application-security/application-isolation/toc.yml index c8ed951135..dab0110050 100644 --- a/windows/security/application-security/application-isolation/toc.yml +++ b/windows/security/application-security/application-isolation/toc.yml @@ -12,9 +12,4 @@ items: - name: App containers 🔗 href: /virtualization/windowscontainers/about - name: Windows Sandbox - href: windows-sandbox/windows-sandbox-overview.md - items: - - name: Windows Sandbox architecture - href: windows-sandbox/windows-sandbox-architecture.md - - name: Windows Sandbox configuration - href: windows-sandbox/windows-sandbox-configure-using-wsb-file.md + href: windows-sandbox/toc.yml \ No newline at end of file diff --git a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml new file mode 100644 index 0000000000..c1ab7907d3 --- /dev/null +++ b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml @@ -0,0 +1,7 @@ +items: + - name: Overview + href: windows-sandbox-overview.md + - name: Windows Sandbox architecture + href: windows-sandbox-architecture.md + - name: Windows Sandbox configuration + href: windows-sandbox-configure-using-wsb-file.md From 5e324a0b1918fcf8a9218db9d4305d6f511f882c Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Mon, 9 Sep 2024 10:40:48 -0600 Subject: [PATCH 002/123] TOC draft --- .../windows-sandbox/toc.yml | 23 +++++++++++++--- .../windows-sandbox/windows-sandbox-faq.yml | 26 +++++++++++++++++++ .../windows-sandbox-install.md | 6 +++++ .../windows-sandbox-overview.md | 2 +- .../windows-sandbox-troubleshoot.md | 6 +++++ .../windows-sandbox/windows-sandbox-use.md | 6 +++++ .../windows-sandbox-versions.md | 6 +++++ 7 files changed, 70 insertions(+), 5 deletions(-) create mode 100644 windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml create mode 100644 windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md create mode 100644 windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md create mode 100644 windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md create mode 100644 windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md diff --git a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml index c1ab7907d3..6aeb54f60e 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml @@ -1,7 +1,22 @@ items: - name: Overview href: windows-sandbox-overview.md - - name: Windows Sandbox architecture - href: windows-sandbox-architecture.md - - name: Windows Sandbox configuration - href: windows-sandbox-configure-using-wsb-file.md + items: + - name: Compare versions + href: windows-sandbox-versions.md + - name: Architecture + href: windows-sandbox-architecture.md + - name: Install Windows Sandbox + href: windows-sandbox-install.md + - name: Use Windows Sandbox + href: windows-sandbox-use.md + - name: Tutorials + items: + - name: Configuration file + href: windows-sandbox-configure-using-wsb-file.md + - name: WindowsSandbox Policy CSP + href: /windows/client-management/mdm/policy-csp-windowssandbox.md + - name: Frequently asked questions + href: windows-sandbox-faq.yml + - name: Troubleshooting + href: windows-sandbox-troubleshoot.md \ No newline at end of file diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml new file mode 100644 index 0000000000..29eb624836 --- /dev/null +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml @@ -0,0 +1,26 @@ +### YamlMime:FAQ +metadata: + title: Windows Sandbox frequently asked questions (FAQ) + description: Use these frequently asked questions (FAQ) to learn important details about Windows Sandbox. + author: vinaypamnani-msft + ms.author: vinpa + ms.topic: faq + ms.date: 09/09/2024 + +title: Common questions about Windows Sandbox +summary: Windows Sandbox (WSB) provides a lightweight desktop environment to safely run applications in isolation. This feature provides a safe and secure space for testing and debugging apps, exploring unknown files, or experimenting with tools since software installed inside the Windows Sandbox environment remains "sandboxed" and runs separately from the host machine. + +sections: + + - name: Concepts + questions: + - question: Who can use WSB? + answer: | + WSB can be used by anyone without any technical skills in various scenarios where users need a secure, clean environment for testing or running potentially harmful software. Here are some ways in which you can leverage WSB: + + - *Clean environment for software testing*: Test or debug your applications in WSB's clean environment to identify and resolve bugs or compatibility issues. + - *Secure web browsing*: Use WSB for secure web browsing, especially when accessing unfamiliar or potentially dangerous websites without putting your system at risk of malware infection. + - *Running Untrusted Applications*: Mitigate security risks by running untrusted applications or files, such as email attachments in WSB. + - *Test software features risk-free*: Easily test out software without the need for installing or uninstalling on your host machine. + - *Maintaining multiple dev environments*: Streamline your development process by utilizing WSB to maintain multiple sandboxes for different development environments + - *Privacy Protection*: Users concerned about online privacy can use Windows Sandbox for activities like social media browsing or online shopping to prevent tracking cookies and other privacy-invading techniques. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md new file mode 100644 index 0000000000..8ffb4f952e --- /dev/null +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md @@ -0,0 +1,6 @@ +--- +title: Install Windows Sandbox +description: Install Windows Sandbox +ms.topic: how-to +ms.date: 09/09/2024 +--- \ No newline at end of file diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md index 8d8f873a38..d634acd3e5 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md @@ -2,7 +2,7 @@ title: Windows Sandbox description: Windows Sandbox overview ms.topic: conceptual -ms.date: 03/26/2024 +ms.date: 09/09/2024 --- # Windows Sandbox diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md new file mode 100644 index 0000000000..52f21ae2c2 --- /dev/null +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md @@ -0,0 +1,6 @@ +--- +title: Troubleshoot Windows Sandbox +description: Troubleshoot Windows Sandbox +ms.topic: troubleshooting +ms.date: 09/09/2024 +--- \ No newline at end of file diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md new file mode 100644 index 0000000000..4ba08383b4 --- /dev/null +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md @@ -0,0 +1,6 @@ +--- +title: Use Windows Sandbox +description: Use Windows Sandbox +ms.topic: how-to +ms.date: 09/09/2024 +--- \ No newline at end of file diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md new file mode 100644 index 0000000000..86b6cfc065 --- /dev/null +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md @@ -0,0 +1,6 @@ +--- +title: Windows Sandbox versions +description: Windows Sandbox versions +ms.topic: conceptual +ms.date: 09/09/2024 +--- \ No newline at end of file From b3e6e1202c6a8fe676a11c9e01ab73d7e882eee5 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Mon, 9 Sep 2024 10:46:58 -0600 Subject: [PATCH 003/123] More changes --- .../application-isolation/toc.yml | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/windows/security/application-security/application-isolation/toc.yml b/windows/security/application-security/application-isolation/toc.yml index dab0110050..db3200f4a3 100644 --- a/windows/security/application-security/application-isolation/toc.yml +++ b/windows/security/application-security/application-isolation/toc.yml @@ -1,14 +1,15 @@ items: - name: Microsoft Defender Application Guard (MDAG) href: microsoft-defender-application-guard/md-app-guard-overview.md -- name: MDAG for Edge standalone mode - href: microsoft-defender-application-guard/md-app-guard-overview.md -- name: MDAG for Edge enterprise mode and enterprise management 🔗 - href: /deployedge/microsoft-edge-security-windows-defender-application-guard -- name: MDAG for Microsoft Office - href: https://support.microsoft.com/office/application-guard-for-office-9e0fb9c2-ffad-43bf-8ba3-78f785fdba46 -- name: MDAG configure via MDM 🔗 - href: /windows/client-management/mdm/windowsdefenderapplicationguard-csp + items: + - name: MDAG for Microsoft Edge standalone mode + href: microsoft-defender-application-guard/md-app-guard-overview.md + - name: MDAG for Microsoft Edge enterprise mode and enterprise management 🔗 + href: /deployedge/microsoft-edge-security-windows-defender-application-guard + - name: MDAG for Microsoft Office + href: https://support.microsoft.com/office/application-guard-for-office-9e0fb9c2-ffad-43bf-8ba3-78f785fdba46 + - name: Configure MDAG via MDM 🔗 + href: /windows/client-management/mdm/windowsdefenderapplicationguard-csp - name: App containers 🔗 href: /virtualization/windowscontainers/about - name: Windows Sandbox From 65c37f071ec3522c95f040c7a98065347e359ce3 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Mon, 9 Sep 2024 10:48:29 -0600 Subject: [PATCH 004/123] Fix warnings --- .../windows-sandbox/windows-sandbox-install.md | 4 +++- .../windows-sandbox/windows-sandbox-troubleshoot.md | 4 +++- .../windows-sandbox/windows-sandbox-use.md | 4 +++- .../windows-sandbox/windows-sandbox-versions.md | 4 +++- 4 files changed, 12 insertions(+), 4 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md index 8ffb4f952e..9348c762d7 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md @@ -3,4 +3,6 @@ title: Install Windows Sandbox description: Install Windows Sandbox ms.topic: how-to ms.date: 09/09/2024 ---- \ No newline at end of file +--- + +# Install Windows Sandbox diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md index 52f21ae2c2..90722f5722 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md @@ -3,4 +3,6 @@ title: Troubleshoot Windows Sandbox description: Troubleshoot Windows Sandbox ms.topic: troubleshooting ms.date: 09/09/2024 ---- \ No newline at end of file +--- + +# Troubleshoot Windows Sandbox diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md index 4ba08383b4..4a3a48313e 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md @@ -3,4 +3,6 @@ title: Use Windows Sandbox description: Use Windows Sandbox ms.topic: how-to ms.date: 09/09/2024 ---- \ No newline at end of file +--- + +# Use Windows Sandbox diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md index 86b6cfc065..7a957abe53 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md @@ -3,4 +3,6 @@ title: Windows Sandbox versions description: Windows Sandbox versions ms.topic: conceptual ms.date: 09/09/2024 ---- \ No newline at end of file +--- + +# Windows Sandbox versions From 67d0c455dac18fc45f5fe3b8604a4ee6aabed1b0 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Mon, 9 Sep 2024 11:03:32 -0600 Subject: [PATCH 005/123] chore: Update Windows Sandbox TOC to include sample configuration files --- .../windows-sandbox/toc.yml | 11 ++--- .../windows-sandbox-install.md | 44 +++++++++++++++++++ .../windows-sandbox-overview.md | 43 +----------------- .../windows-sandbox-sample-configuration.md | 8 ++++ .../windows-sandbox/windows-sandbox-use.md | 8 ---- 5 files changed, 59 insertions(+), 55 deletions(-) create mode 100644 windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md delete mode 100644 windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md diff --git a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml index 6aeb54f60e..7509425be9 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml @@ -1,6 +1,7 @@ items: - - name: Overview + - name: What is Windows Sandbox? href: windows-sandbox-overview.md + expanded: true items: - name: Compare versions href: windows-sandbox-versions.md @@ -9,13 +10,13 @@ items: - name: Install Windows Sandbox href: windows-sandbox-install.md - name: Use Windows Sandbox - href: windows-sandbox-use.md + href: windows-sandbox-configure-using-wsb-file.md - name: Tutorials items: - - name: Configuration file - href: windows-sandbox-configure-using-wsb-file.md + - name: Sample configuration files + href: windows-sandbox-sample-configuration.md - name: WindowsSandbox Policy CSP - href: /windows/client-management/mdm/policy-csp-windowssandbox.md + href: /windows/client-management/mdm/policy-csp-windowssandbox - name: Frequently asked questions href: windows-sandbox-faq.yml - name: Troubleshooting diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md index 9348c762d7..b57e6ef35b 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md @@ -6,3 +6,47 @@ ms.date: 09/09/2024 --- # Install Windows Sandbox + +## Prerequisites + +- ARM64 (for Windows 11, version 22H2 and later) or AMD64 architecture +- Virtualization capabilities enabled in BIOS +- At least 4 GB of RAM (8 GB recommended) +- At least 1 GB of free disk space (SSD recommended) +- At least two CPU cores (four cores with hyper-threading recommended) + +> [!NOTE] +> Windows Sandbox is currently not supported on Windows Home edition. +> Beginning in Windows 11, version 24H2, all inbox store apps like calculator, photos, notepad and terminal are not available inside Windows Sandbox. Ability to use these apps will be added soon. + +## Installation + +1. Ensure that your machine is using Windows 10 Pro or Enterprise, build version 18305 or Windows 11. + +2. Enable virtualization on the machine. + + - If you're using a physical machine, make sure virtualization capabilities are enabled in the BIOS. + - If you're using a virtual machine, you need to enable nested virtualization. If needed, also update the VM to support nested virtualization. Run the following PowerShell commands on the host: + + ```powershell + Set-VMProcessor -VMName -ExposeVirtualizationExtensions $true + Update-VMVersion -VMName + ``` + +3. Use the search bar on the task bar and type **Turn Windows Features on or off** to access the Windows Optional Features tool. Select **Windows Sandbox** and then **OK**. Restart the computer if you're prompted. + + If the **Windows Sandbox** option is unavailable, your computer doesn't meet the requirements to run Windows Sandbox. If you think this analysis is incorrect, review the prerequisite list and steps 1 and 2. + + > [!NOTE] + > To enable Sandbox using PowerShell, open PowerShell as Administrator and run the following command: + > + > ```powershell + > Enable-WindowsOptionalFeature -FeatureName "Containers-DisposableClientVM" -All -Online + > ``` + +4. Locate and select **Windows Sandbox** on the Start menu to run it for the first time. + + > [!NOTE] + > Beginning in Windows 11, version 24H2, Windows Sandbox adheres to the mouse settings of the host system. + > + > If you are on an older build and if the host system is set to use a left-handed mouse, you must apply these settings in Windows Sandbox manually when Windows Sandbox starts. Alternatively, you can use a sandbox configuration file to run a logon command to swap the mouse setting. For an example, see [Example 3](windows-sandbox-configure-using-wsb-file.md#example-3). \ No newline at end of file diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md index d634acd3e5..858efad675 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md @@ -22,51 +22,10 @@ Windows Sandbox has the following properties: - **Efficient:** Uses the integrated kernel scheduler, smart memory management, and virtual GPU. > [!IMPORTANT] -> Windows Sandbox enables network connection by default. It can be disabled using the [Windows Sandbox configuration file](/windows/security/threat-protection/windows-sandbox/windows-sandbox-configure-using-wsb-file#networking). +> Windows Sandbox enables network connection by default. It can be disabled using the [Windows Sandbox configuration file](windows-sandbox-configure-using-wsb-file.md#networking). [!INCLUDE [windows-sandbox](../../../../../includes/licensing/windows-sandbox.md)] -## Prerequisites - -- ARM64 (for Windows 11, version 22H2 and later) or AMD64 architecture -- Virtualization capabilities enabled in BIOS -- At least 4 GB of RAM (8 GB recommended) -- At least 1 GB of free disk space (SSD recommended) -- At least two CPU cores (four cores with hyper-threading recommended) - -> [!NOTE] -> Windows Sandbox is currently not supported on Windows Home edition. -> Beginning in Windows 11, version 24H2, all inbox store apps like calculator, photos, notepad and terminal are not available inside Windows Sandbox. Ability to use these apps will be added soon. -## Installation - -1. Ensure that your machine is using Windows 10 Pro or Enterprise, build version 18305 or Windows 11. - -2. Enable virtualization on the machine. - - - If you're using a physical machine, make sure virtualization capabilities are enabled in the BIOS. - - If you're using a virtual machine, you need to enable nested virtualization. If needed, also update the VM to support nested virtualization. Run the following PowerShell commands on the host: - - ```powershell - Set-VMProcessor -VMName -ExposeVirtualizationExtensions $true - Update-VMVersion -VMName - ``` - -3. Use the search bar on the task bar and type **Turn Windows Features on or off** to access the Windows Optional Features tool. Select **Windows Sandbox** and then **OK**. Restart the computer if you're prompted. - - If the **Windows Sandbox** option is unavailable, your computer doesn't meet the requirements to run Windows Sandbox. If you think this analysis is incorrect, review the prerequisite list and steps 1 and 2. - - > [!NOTE] - > To enable Sandbox using PowerShell, open PowerShell as Administrator and run the following command: - > - > ```powershell - > Enable-WindowsOptionalFeature -FeatureName "Containers-DisposableClientVM" -All -Online - > ``` - -4. Locate and select **Windows Sandbox** on the Start menu to run it for the first time. - - > [!NOTE] - > Windows Sandbox does not adhere to the mouse settings of the host system, so if the host system is set to use a left-handed mouse, you must apply these settings in Windows Sandbox manually when Windows Sandbox starts. Alternatively, you can use a sandbox configuration file to run a logon command to swap the mouse setting. For an example, see [Example 3](windows-sandbox-configure-using-wsb-file.md#example-3). - ## Usage 1. Copy an executable file (and any other files needed to run the application) from the host and paste them into the **Windows Sandbox** window. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md new file mode 100644 index 0000000000..079dc91f7f --- /dev/null +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md @@ -0,0 +1,8 @@ +--- +title: Windows Sandbox sample configuration files +description: Windows Sandbox sample configuration files +ms.topic: how-to +ms.date: 09/09/2024 +--- + +# Windows Sandbox sample configuration files diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md deleted file mode 100644 index 4a3a48313e..0000000000 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-use.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -title: Use Windows Sandbox -description: Use Windows Sandbox -ms.topic: how-to -ms.date: 09/09/2024 ---- - -# Use Windows Sandbox From 633ac1f6e3bc0808c7793afccc70425706b61b5c Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Mon, 9 Sep 2024 16:09:00 -0600 Subject: [PATCH 006/123] chore: Update Windows Sandbox TOC and sample configuration files --- .../windows-sandbox/toc.yml | 7 +- .../windows-sandbox-architecture.md | 12 +- ...indows-sandbox-configure-using-wsb-file.md | 238 +++++++----------- .../windows-sandbox/windows-sandbox-faq.yml | 49 ++++ .../windows-sandbox-install.md | 15 +- .../windows-sandbox-overview.md | 31 ++- .../windows-sandbox-sample-configuration.md | 104 ++++++++ .../windows-sandbox-troubleshoot.md | 1 + 8 files changed, 277 insertions(+), 180 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml index 7509425be9..dc3bd5efd0 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml @@ -1,15 +1,16 @@ items: - - name: What is Windows Sandbox? - href: windows-sandbox-overview.md + - name: Overview expanded: true items: + - name: What is Windows Sandbox? + href: windows-sandbox-overview.md - name: Compare versions href: windows-sandbox-versions.md - name: Architecture href: windows-sandbox-architecture.md - name: Install Windows Sandbox href: windows-sandbox-install.md - - name: Use Windows Sandbox + - name: Use & configure Windows Sandbox href: windows-sandbox-configure-using-wsb-file.md - name: Tutorials items: diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-architecture.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-architecture.md index 0da205053a..fcb9b56ddc 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-architecture.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-architecture.md @@ -2,7 +2,7 @@ title: Windows Sandbox architecture description: Windows Sandbox architecture ms.topic: conceptual -ms.date: 03/26/2024 +ms.date: 09/09/2024 --- # Windows Sandbox architecture @@ -27,18 +27,10 @@ Traditional VMs apportion statically sized allocations of host memory. When reso ## Memory sharing -Because Windows Sandbox runs the same operating system image as the host, it's enhanced to use the same physical memory pages as the host for operating system binaries via a technology referred to as "direct map." For example, when *ntdll.dll* is loaded into memory in the sandbox, it uses the same physical pages as those pages of the binary when loaded on the host. Memory sharing between the host and the sandbox results in a smaller memory footprint when compared to traditional VMs, without compromising valuable host secrets. +Because Windows Sandbox runs the same operating system image as the host, it's enhanced to use the same physical memory pages as the host for operating system binaries via a technology referred to as "direct map." For example, when `ntdll.dll` is loaded into memory in the sandbox, it uses the same physical pages as those pages of the binary when loaded on the host. Memory sharing between the host and the sandbox results in a smaller memory footprint when compared to traditional VMs, without compromising valuable host secrets. ![A chart compares the memory footprint in Windows Sandbox versus a traditional VM.](images/3-memory-sharing.png) -## Integrated kernel scheduler - -With ordinary virtual machines, the Microsoft hypervisor controls the scheduling of the virtual processors running in the VMs. Windows Sandbox uses a new technology called "integrated scheduling," which allows the host scheduler to decide when the sandbox gets CPU cycles. - -![A chart compares the scheduling in Windows Sandbox versus a traditional VM.](images/4-integrated-kernal.png) - -Windows Sandbox employs a unique policy that allows the virtual processors of the Sandbox to be scheduled like host threads. Under this scheme, high-priority tasks on the host can preempt less important work in the Sandbox. This preemption means that the most important work is prioritized, whether it's on the host or in the container. - ## WDDM GPU virtualization Hardware accelerated rendering is key to a smooth and responsive user experience, especially for graphics-intensive use cases. Microsoft works with its graphics ecosystem partners to integrate modern graphics virtualization capabilities directly into DirectX and Windows Display Driver Model (WDDM), the driver model used by Windows. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md index 29d6d96ecb..df8539a64c 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md @@ -1,11 +1,32 @@ --- -title: Windows Sandbox configuration -description: Windows Sandbox configuration +title: Use and configure Windows Sandbox +description: Use and configure Windows Sandbox ms.topic: how-to -ms.date: 03/26/2024 +ms.date: 09/09/2024 --- -# Windows Sandbox configuration +# Use and configure Windows Sandbox + +To launch a Windows Sandbox with default settings, simply Locate and select Windows Sandbox on the Start menu or search for 'Windows Sandbox'. This launches a basic Sandbox with 4GB memory with the following properties: + +- **vGPU (virtualized GPU)**: Enabled on non-ARM64 devices. +- **Networking**: Enabled. The sandbox uses the Hyper-V default switch. +- **Audio input**: Enabled. The sandbox shares the host's microphone input into the sandbox. +- **Video input**: Disabled. The sandbox doesn't share the host's video input into the sandbox. +- **Protected client**: Disabled. The sandbox doesn't have increased security settings on the Remote Desktop Protocol (RDP) session. +- **Printer redirection**: Disabled. The sandbox doesn't share printers with the host. +- **Clipboard redirection**: Enabled. The sandbox shares the host clipboard with the sandbox so that text and files can be pasted back and forth. + +> [!IMPORTANT] +> +> - Networking is enabled by default. This can expose untrusted applications to the internal network. To launch a Sandbox with networking disabled, use a custom .wsb file. +> - With Clipboard redirection automatically enabled, you can easily copy files from the host and paste them into the Windows Sandbox window. + +You have the freedom to open files, install applications from the web, and perform various other tasks that benefit from an isolated clean environment. + +When you're finished experimenting, close the sandbox. A dialog box will prompt you to confirm the deletion of all sandbox content. Select "Ok" to proceed. Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox. + +## Configure a custom Windows Sandbox Windows Sandbox supports simple configuration files, which provide a minimal set of customization parameters for Sandbox. This feature can be used with Windows 10 build 18342 or Windows 11. Windows Sandbox configuration files are formatted as XML and are associated with Sandbox via the `.wsb` file extension. @@ -25,7 +46,7 @@ A configuration file enables the user to control the following aspects of Window > [!NOTE] > The size of the sandbox window currently isn't configurable. -## Creating a configuration file +## Create a configuration file To create a configuration file: @@ -37,10 +58,8 @@ To create a configuration file: ``` -3. Add appropriate configuration text between the two lines. For details, see [examples](#examples). -4. Save the file with the desired name, but make sure its filename extension is `.wsb`. In Notepad, you should enclose the filename and the extension inside double quotation marks, for example, `"My config file.wsb"`. - -## Using a configuration file +3. Add appropriate configuration text between the two lines. For details, see [examples](windows-sandbox-sample-configuration.md). +4. Save the file with the desired name, but make sure its filename extension is `.wsb`. In Notepad, you should enclose the filename and the extension inside double quotation marks, for example, `"MyConfigFile.wsb"`. To use a configuration file, double-click it to start Windows Sandbox according to its settings. You can also invoke it via the command line as shown here: @@ -48,19 +67,21 @@ To use a configuration file, double-click it to start Windows Sandbox according C:\Temp> MyConfigFile.wsb ``` -## Keywords, values, and limits +## Configuration options ### vGPU Enables or disables GPU sharing. -`value` +```xml +value +``` Supported values: -- *Enable*: Enables vGPU support in the sandbox. -- *Disable*: Disables vGPU support in the sandbox. If this value is set, the sandbox uses software rendering, which might be slower than virtualized GPU. -- *Default* This value is the default value for vGPU support. Currently, this default value denotes that vGPU is enabled. +- **Enable**: Enables vGPU support in the sandbox. +- **Disable**: Disables vGPU support in the sandbox. If this value is set, the sandbox uses software rendering, which might be slower than virtualized GPU. +- **Default**: This value is the default value for vGPU support. Currently, this default value denotes that vGPU is enabled. > [!NOTE] > Enabling virtualized GPU can potentially increase the attack surface of the sandbox. @@ -69,20 +90,24 @@ Supported values: Enables or disables networking in the sandbox. You can disable network access to decrease the attack surface exposed by the sandbox. -`value` +```xml +value +``` Supported values: -- *Enable*: Enables networking in the sandbox. -- *Disable*: Disables networking in the sandbox. -- *Default*: This value is the default value for networking support. This value enables networking by creating a virtual switch on the host and connects the sandbox to it via a virtual NIC. +- **Enable**: Enables networking in the sandbox. +- **Disable**: Disables networking in the sandbox. +- **Default**: This value is the default value for networking support. This value enables networking by creating a virtual switch on the host and connects the sandbox to it via a virtual NIC. > [!NOTE] > Enabling networking can expose untrusted applications to the internal network. ### Mapped folders -An array of folders, each representing a location on the host machine that is shared with the sandbox at the specified path. At this time, relative paths aren't supported. If no path is specified, the folder is mapped to the container user's desktop. +An array of folders, each representing a location on the host machine that is shared with the sandbox at the specified path. Currently, relative paths aren't supported. + +When using `` to map folders, the folders are mapped prior to the execution of the [Logon command](#logon-command). ```xml @@ -97,12 +122,12 @@ An array of folders, each representing a location on the host machine that is sh ``` -- *HostFolder*: Specifies the folder on the host machine to share into the sandbox. The folder must already exist on the host, or the container fails to start. -- *SandboxFolder*: Specifies the destination in the sandbox to map the folder to. If the folder doesn't exist, it is created. If no sandbox folder is specified, the folder is mapped to the container desktop. -- *ReadOnly*: If *true*, enforces read-only access to the shared folder from within the container. Supported values: *true*/*false*. Defaults to *false*. +- **HostFolder**: Specifies the folder on the host machine to share into the sandbox. The folder must already exist on the host, or the container fails to start. +- **SandboxFolder**: Specifies the destination in the sandbox to map the folder to. If the folder doesn't exist, it is created. If no sandbox folder is specified, the folder is mapped to the container desktop. +- **ReadOnly**: If *true*, enforces read-only access to the shared folder from within the container. Supported values: *true*/*false*. Defaults to *false*. > [!NOTE] -> Files and folders mapped in from the host can be compromised by apps in the sandbox or potentially affect the host. +> Files and folders mapped in from the host can be compromised by apps in the sandbox or potentially affect the host. Changes made during a Sandbox session to a mapped folder with write-permissions will persist after a Sandbox is disposed. ### Logon command @@ -114,22 +139,24 @@ Specifies a single command that will be invoked automatically after the sandbox ``` -*Command*: A path to an executable or script inside the container that will be executed after signing in. +**Command**: A path to an executable or script inside the container that will be executed after signing in. > [!NOTE] -> Although very simple commands will work (such as launching an executable or script), more complicated scenarios involving multiple steps should be placed into a script file. This script file may be mapped into the container via a shared folder, and then executed via the *LogonCommand* directive. +> Although very simple commands will work (such as launching an executable or script), more complicated scenarios involving multiple steps should be placed into a script file. This script file may be mapped into the container via a shared folder, and then executed via ``. ### Audio input Enables or disables audio input to the sandbox. -`value` +```xml +value +``` Supported values: -- *Enable*: Enables audio input in the sandbox. If this value is set, the sandbox can receive audio input from the user. Applications that use a microphone may require this capability. -- *Disable*: Disables audio input in the sandbox. If this value is set, the sandbox can't receive audio input from the user. Applications that use a microphone may not function properly with this setting. -- *Default*: This value is the default value for audio input support. Currently, this default value denotes that audio input is enabled. +- **Enable**: Enables audio input in the sandbox. If this value is set, the sandbox can receive audio input from the user. Applications that use a microphone may require this capability. +- **Disable**: Disables audio input in the sandbox. If this value is set, the sandbox can't receive audio input from the user. Applications that use a microphone may not function properly with this setting. +- **Default**: This value is the default value for audio input support. Currently, this default value denotes that audio input is enabled. > [!NOTE] > There may be security implications of exposing host audio input to the container. @@ -138,30 +165,32 @@ Supported values: Enables or disables video input to the sandbox. -`value` +```xml +value +``` Supported values: -- *Enable*: Enables video input in the sandbox. -- *Disable*: Disables video input in the sandbox. Applications that use video input may not function properly in the sandbox. -- *Default*: This value is the default value for video input support. Currently, this default value denotes that video input is disabled. Applications that use video input may not function properly in the sandbox. +- **Enable**: Enables video input in the sandbox. +- **Disable**: Disables video input in the sandbox. Applications that use video input may not function properly in the sandbox. +- **Default**: This value is the default value for video input support. Currently, this default value denotes that video input is disabled. Applications that use video input may not function properly in the sandbox. > [!NOTE] > There may be security implications of exposing host video input to the container. ### Protected client -When Protected Client mode is enabled, Sandbox adds a new layer of security boundary by running inside an [AppContainer Isolation](/windows/win32/secauthz/appcontainer-isolation) execution environment. +When Protected Client mode is enabled, Sandbox adds a new layer of security boundary by running inside an [AppContainer Isolation](/windows/win32/secauthz/appcontainer-isolation) execution environment. AppContainer Isolation provides Credential, Device, File, Network, Process, and Window isolation. -AppContainer Isolation provides Credential, Device, File, Network, Process, and Window isolation. - -`value` +```xml +value +``` Supported values: -- *Enable*: Runs Windows sandbox in Protected Client mode. If this value is set, the Sandbox runs in AppContainer Isolation. -- *Disable*: Runs the Sandbox in the standard mode without extra security mitigations. -- *Default*: This value is the default value for Protected Client mode. Currently, this default value denotes that the sandbox doesn't run in Protected Client mode. +- **Enable**: Runs Windows sandbox in Protected Client mode. If this value is set, the Sandbox runs in AppContainer Isolation. +- **Disable**: Runs the Sandbox in the standard mode without extra security mitigations. +- **Default**: This value is the default value for Protected Client mode. Currently, this default value denotes that the sandbox doesn't run in Protected Client mode. > [!NOTE] > This setting may restrict the user's ability to copy/paste files in and out of the sandbox. @@ -170,135 +199,36 @@ Supported values: Enables or disables printer sharing from the host into the sandbox. -`value` +```xml +value +``` Supported values: -- *Enable*: Enables sharing of host printers into the sandbox. -- *Disable*: Disables printer redirection in the sandbox. If this value is set, the sandbox can't view printers from the host. -- *Default*: This value is the default value for printer redirection support. Currently, this default value denotes that printer redirection is disabled. +- **Enable**: Enables sharing of host printers into the sandbox. +- **Disable**: Disables printer redirection in the sandbox. If this value is set, the sandbox can't view printers from the host. +- **Default**: This value is the default value for printer redirection support. Currently, this default value denotes that printer redirection is disabled. ### Clipboard redirection Enables or disables sharing of the host clipboard with the sandbox. -`value` +```xml +value +``` Supported values: -- *Enable*: Enables sharing of the host clipboard with the sandbox. -- *Disable*: Disables clipboard redirection in the sandbox. If this value is set, copy/paste in and out of the sandbox is restricted. -- *Default*: This value is the default value for clipboard redirection. Currently, copy/paste between the host and sandbox are permitted under *Default*. +- **Enable**: Enables sharing of the host clipboard with the sandbox. +- **Disable**: Disables clipboard redirection in the sandbox. If this value is set, copy/paste in and out of the sandbox is restricted. +- **Default**: This value is the default value for clipboard redirection. Currently, copy/paste between the host and sandbox are permitted under *Default*. ### Memory in MB Specifies the amount of memory that the sandbox can use in megabytes (MB). -`value` +```xml +value +``` If the memory value specified is insufficient to boot a sandbox, it is automatically increased to the required minimum amount. - -## Examples - -### Example 1 - -The following config file can be used to easily test the downloaded files inside the sandbox. To achieve this testing, networking and vGPU are disabled, and the sandbox is allowed read-only access to the shared downloads folder. For convenience, the logon command opens the downloads folder inside the sandbox when it's started. - -#### Downloads.wsb - -```xml - - Disable - Disable - - - C:\Users\Public\Downloads - C:\Users\WDAGUtilityAccount\Downloads - true - - - - explorer.exe C:\users\WDAGUtilityAccount\Downloads - - -``` - -### Example 2 - -The following config file installs Visual Studio Code in the sandbox, which requires a slightly more complicated LogonCommand setup. - -Two folders are mapped into the sandbox; the first (SandboxScripts) contains VSCodeInstall.cmd, which installs and runs Visual Studio Code. The second folder (CodingProjects) is assumed to contain project files that the developer wants to modify using Visual Studio Code. - -With the Visual Studio Code installer script already mapped into the sandbox, the LogonCommand can reference it. - -#### VSCodeInstall.cmd - -Downloads VS Code to `downloads` folder and runs installation from `downloads` folder. - -```batch -REM Download Visual Studio Code -curl -L "https://update.code.visualstudio.com/latest/win32-x64-user/stable" --output C:\users\WDAGUtilityAccount\Downloads\vscode.exe - -REM Install and run Visual Studio Code -C:\users\WDAGUtilityAccount\Downloads\vscode.exe /verysilent /suppressmsgboxes -``` - -#### VSCode.wsb - -```xml - - - - C:\SandboxScripts - C:\Users\WDAGUtilityAccount\Downloads\sandbox - true - - - C:\CodingProjects - C:\Users\WDAGUtilityAccount\Documents\Projects - false - - - - C:\Users\WDAGUtilityAccount\Downloads\sandbox\VSCodeInstall.cmd - - -``` - -### Example 3 - -The following config file runs a PowerShell script as a logon command to swap the primary mouse button for left-handed users. - -`C:\sandbox` folder on the host is mapped to the `C:\sandbox` folder in the sandbox, so the `SwapMouse.ps1` script can be referenced in the sandbox configuration file. - -#### SwapMouse.ps1 - -Create a PowerShell script using the following code, and save it in the `C:\sandbox` directory as `SwapMouse.ps1`. - -```powershell -[Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms") | Out-Null - -$SwapButtons = Add-Type -MemberDefinition @' -[DllImport("user32.dll")] -public static extern bool SwapMouseButton(bool swap); -'@ -Name "NativeMethods" -Namespace "PInvoke" -PassThru - -$SwapButtons::SwapMouseButton(!([System.Windows.Forms.SystemInformation]::MouseButtonsSwapped)) -``` - -### SwapMouse.wsb - -```xml - - - - C:\sandbox - C:\sandbox - True - - - - powershell.exe -ExecutionPolicy Bypass -File C:\sandbox\SwapMouse.ps1 - - -``` diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml index 29eb624836..2f7a816a54 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml @@ -24,3 +24,52 @@ sections: - *Test software features risk-free*: Easily test out software without the need for installing or uninstalling on your host machine. - *Maintaining multiple dev environments*: Streamline your development process by utilizing WSB to maintain multiple sandboxes for different development environments - *Privacy Protection*: Users concerned about online privacy can use Windows Sandbox for activities like social media browsing or online shopping to prevent tracking cookies and other privacy-invading techniques. + + - question: What's the difference between a Hyper-V VM and Windows Sandbox? + answer: | + 1. **Lightweight and Temporary**: + - **Windows Sandbox**: It's a lightweight, disposable environment that runs within your existing Windows installation. You can quickly launch it, test applications, and discard it without affecting your main system. + - **Hyper-V VMs**: Hyper-V VMs are more heavyweight. They require dedicated resources (CPU, memory, disk space) and take longer to set up. + 1. **Security Isolation**: + - **Windows Sandbox**: Provides a secure, isolated environment for testing untrusted software. Any changes made within the sandbox are discarded when you close it. + - **Hyper-V VMs**: While VMs also offer isolation, they persistently store changes unless you revert them manually. + 1. **Resource Efficiency**: + - **Windows Sandbox**: More resource efficient than full VM. It adjusts memory usage according to the demand. It also reuses many of the host’s read only OS files. + - **Hyper-V VMs**: VMs have fixed resource allocations, which can impact overall system performance. + 1. **Ease of Use**: + - **Windows Sandbox**: Simple to use—just open it, test your software, and close it. No complex setup or management. + - **Hyper-V VMs**: Require more configuration, including setting up virtual switches, network adapters, and managing VM snapshots. + + - question: Why can I not change certain settings using a config file? + answer: | + You cannot make changes to properties if they are controlled by Group Policy. Contact your IT Administrator for more details. + + - question: How do I open multiple Sandbox instances? + answer: | + Today, Windows Sandbox only allows users to launch one Sandbox instance at a time. + + - name: Feedback + questions: + + - question: Where can I provide feedback? + answer: | + You can file a bug in Feedback Hub by: + + 1. Open the Feedback Hub app. + 1. Select **Report a problem** or **Suggest a feature**. + 1. Fill in the **Summarize your feedback** and **Explain in more details** boxes with a detailed description of the issue or suggestion. A useful feedback item includes the following: + - Short and descriptive issue title. + - Windows version and build number. This can be gathered from the CMD prompt using the `cmd.exe --version`` command. + - Device information (including CPU type, memory, disk etc.) + - Detailed repro steps. What steps do we need to take to reproduce the issue? Provide as much detail as you can. Provide error message text where possible or screenshots of errors if text cannot be captured. + - Behavior you were expecting. + 1. Select an appropriate category and subcategory by using the dropdown menus. There is a dedicated option in Feedback Hub to file **Windows Sandbox** bugs and feedback. It is located under **Security and Privacy** category. + 1. Select **Next**. + 1. If necessary, you can collect traces for the issue as follows: Select the Recreate my problem tile, then select Start capture, reproduce the issue, and then select **Stop capture**. + 1. Attach any relevant screenshots or files for the problem, then select **Submit**. + + Alternatively, you can also use the [Windows Sandbox GitHub repository](https://github.com/microsoft/Windows-Sandbox) to: + + - **Search existing issues** to see if there are any associated with a problem that you are having. Note that in the search bar, you can remove "is:open" to include issues that have already been resolved in your search. Please consider commenting or giving a thumbs up to any open issues that you would like to express your interest in moving forward as a priority. + - **File a new issue**: If you have found a problem with WSB or WSB documentation and there does not appear to be an existing issue, you can select the green New issue button and then choose WSB - Bug Report. You will need to include a title for the issue, your Windows build number (run cmd.exe /c ver to see your current build #), whether you're running inbox or undocked Windows Sandbox, any other software versions involved, the repro steps, expected behavior, actual behavior, and diagnostic logs if available and appropriate. + - **File a feature request** by selecting the green New issue button and then select Feature request. You will need to address a few questions describing your request. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md index b57e6ef35b..115a257de3 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md @@ -16,12 +16,11 @@ ms.date: 09/09/2024 - At least two CPU cores (four cores with hyper-threading recommended) > [!NOTE] -> Windows Sandbox is currently not supported on Windows Home edition. -> Beginning in Windows 11, version 24H2, all inbox store apps like calculator, photos, notepad and terminal are not available inside Windows Sandbox. Ability to use these apps will be added soon. +> Beginning in Windows 11, version 24H2, inbox store apps like Calculator, Photos, Notepad and Terminal are not available inside Windows Sandbox. Ability to use these apps will be added soon. ## Installation -1. Ensure that your machine is using Windows 10 Pro or Enterprise, build version 18305 or Windows 11. +1. Ensure that your machine is using Windows 11 or Windows 10, version 1903 or later. 2. Enable virtualization on the machine. @@ -49,4 +48,12 @@ ms.date: 09/09/2024 > [!NOTE] > Beginning in Windows 11, version 24H2, Windows Sandbox adheres to the mouse settings of the host system. > - > If you are on an older build and if the host system is set to use a left-handed mouse, you must apply these settings in Windows Sandbox manually when Windows Sandbox starts. Alternatively, you can use a sandbox configuration file to run a logon command to swap the mouse setting. For an example, see [Example 3](windows-sandbox-configure-using-wsb-file.md#example-3). \ No newline at end of file + > If you are on an older build and if the host system is set to use a left-handed mouse, you must apply these settings in Windows Sandbox manually when Windows Sandbox starts. Alternatively, you can use a sandbox configuration file to run a logon command to swap the mouse setting. For an example, see [Example 3](windows-sandbox-configure-using-wsb-file.md#example-3). + +## Try WSB preview features by joining the Windows Insider Program + +To try the most recent features or updates to WSB, join the [Windows Insiders Program](https://insider.windows.com/getting-started). Once you have joined Windows Insiders, you can choose the channel you would like to receive preview builds from inside the Windows settings menu. You can choose from: + +- **Dev channel**: Most recent updates, but low stability. +- **Beta channel**: Ideal for early adopters, more reliable builds than the Dev channel. +- **Release Preview channel**: Preview fixes and key features on the next version of Windows just before its available to the general public. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md index 858efad675..c8431f91d4 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md @@ -1,31 +1,44 @@ --- title: Windows Sandbox description: Windows Sandbox overview -ms.topic: conceptual +ms.topic: overview ms.date: 09/09/2024 --- # Windows Sandbox -Windows Sandbox provides a lightweight desktop environment to safely run applications in isolation. Software installed inside the Windows Sandbox environment remains "sandboxed" and runs separately from the host machine. +Windows Sandbox (WSB) offers a lightweight, isolated desktop environment for safely running applications. It is ideal for testing, debugging, exploring unknown files, and experimenting with tools. Applications installed within the sandbox remain isolated from the host machine using hypervisor-based virtualization. As a disposable virtual machine (VM), Windows Sandbox ensures reboot persistence, quick launch times, and a lower memory footprint compared to full VMs. Its one-click setup simplifies the user experience. -A sandbox is temporary. When it's closed, all the software and files and the state are deleted. You get a brand-new instance of the sandbox every time you open the application. Note, however, that as of Windows 11, version 22H2, your data persists through a restart initiated from inside the virtualized environment—useful for installing applications that require the OS to reboot. +The sandbox is temporary; closing it deletes all software, files, and state. Each launch provides a fresh instance. Host-installed software isn't available in the sandbox. Applications needed within the sandbox must be installed there explicitly. -Software and applications installed on the host aren't directly available in the sandbox. If you need specific applications available inside the Windows Sandbox environment, they must be explicitly installed within the environment. +> [!NOTE] +> Starting with Windows 11, version 22H2, data persists through restarts initiated within the sandbox, useful for applications requiring a reboot. -Windows Sandbox has the following properties: +Windows Sandbox offers the following features: -- **Part of Windows**: Everything required for this feature is included in Windows 10 Pro and Enterprise. There's no need to download a Virtual Hard Disk (VHD). -- **Pristine**: Every time Windows Sandbox runs, it's as clean as a brand-new installation of Windows. +- **Part of Windows**: Everything required for this feature is included in the supported Windows SKUs like Pro, Enterprise and Education. There's no need to maintain a separate VM installation. - **Disposable**: Nothing persists on the device. Everything is discarded when the user closes the application. +- **Pristine**: Every time Windows Sandbox runs, it's as clean as a brand-new installation of Windows. - **Secure**: Uses hardware-based virtualization for kernel isolation. It relies on the Microsoft hypervisor to run a separate kernel that isolates Windows Sandbox from the host. -- **Efficient:** Uses the integrated kernel scheduler, smart memory management, and virtual GPU. +- **Efficient**: Takes a few seconds to launch, supports virtual GPU and has smart memory management that optimizes memory footprint. > [!IMPORTANT] -> Windows Sandbox enables network connection by default. It can be disabled using the [Windows Sandbox configuration file](windows-sandbox-configure-using-wsb-file.md#networking). +> Windows Sandbox enables network connection by default. It can be disabled using the [Windows Sandbox configuration file](windows-sandbox-configure-using-wsb-file.md#networking). Enabling networking can expose untrusted applications to the internal network. + +WSB can be used by anyone without any technical skills in various scenarios where users need a secure, clean environment for testing or running potentially harmful software. Here are some ways in which you can leverage WSB: + +- **Clean environment for software testing**: Test or debug your applications in WSB's clean environment to identify and resolve bugs or compatibility issues. +- **Secure web browsing**: Use WSB for secure web browsing, especially when accessing unfamiliar or potentially dangerous websites without putting your system at risk of malware infection. +- **Running Untrusted Applications**: Mitigate security risks by opening untrusted applications or files, such as email attachments in WSB. Improve your safety and security by opening a sandbox with networking disabled and mapping the folder with the application or file you want to open to the sandbox in read-only mode. Check [Sample configuration files](windows-sandbox-sample-configuration.md) for more details. +- **Testing or demoing new software for the first time**: Test drive or demo new software, unstable versions like beta, extensions or add-ons without the hassle of installing and then uninstalling on your host machine. +- **Maintaining multiple dev environments**: Streamline your development process by utilizing WSB to maintain multiple sandboxes for different development environments. For example, maintain a sandbox for each python version and its dependencies! + [!INCLUDE [windows-sandbox](../../../../../includes/licensing/windows-sandbox.md)] +> [!NOTE] +> Windows Sandbox is currently not supported on Windows Home edition. + ## Usage 1. Copy an executable file (and any other files needed to run the application) from the host and paste them into the **Windows Sandbox** window. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md index 079dc91f7f..95d5bcbfe9 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md @@ -6,3 +6,107 @@ ms.date: 09/09/2024 --- # Windows Sandbox sample configuration files + +## Example 1 - Mapping Folders and testing an unknown downloaded file in a Sandbox + +The following config file can be used to easily test unknown downloaded files inside a sandbox. To achieve this testing, networking and vGPU are disabled, and the sandbox is allowed read-only access to the downloads folder from the host and is placed inside a 'temp' folder in the sandbox. For convenience, the logon command opens the downloads folder inside the sandbox when it's started. + +### Downloads.wsb + +```xml + + Disable + Disable + + + C:\Users\Public\Downloads + C:\temp + true + + + + explorer.exe C:\temp + + + +``` + +## Example 2 - Installing Visual Studio Code at launch in a Sandbox + +The following config file installs Visual Studio Code in the sandbox, which requires a slightly more complicated LogonCommand setup. + +Two folders are mapped into the sandbox; the first (`SandboxScripts`) contains VSCodeInstall.cmd, which installs and runs Visual Studio Code. The second folder (`CodingProjects`) is assumed to contain project files that the developer wants to modify using Visual Studio Code. + +With the Visual Studio Code installer script already mapped into the sandbox, the `` can reference it. + +### VSCodeInstall.cmd + +This batch file should be created in the `C:\SandboxScripts` directory on the host. It downloads VS Code to `temp` folder inside the sandbox and runs installation from `temp` folder. + +```batch +REM Download Visual Studio Code +curl -L "https://update.code.visualstudio.com/latest/win32-x64-user/stable" --output C:\temp\vscode.exe + +REM Install and run Visual Studio Code +C:\temp\vscode.exe /verysilent /suppressmsgboxes +``` + +### VSCode.wsb + +```xml + + + + C:\SandboxScripts + C:\temp\sandbox + true + + + C:\CodingProjects + C:\temp\Projects + false + + + + C:\temp\sandbox\VSCodeInstall.cmd + + +``` + +## Example 3 - Mapping Folders and running a PowerShell script as a LogOn Command + +The following config file runs a PowerShell script as a logon command to swap the primary mouse button for left-handed users. + +`C:\sandbox` folder on the host is mapped to the `C:\sandbox` folder in the sandbox, so the `SwapMouse.ps1` script can be referenced in the sandbox configuration file. + +### SwapMouse.ps1 + +Create a PowerShell script using the following code, and save it in the `C:\sandbox` directory as `SwapMouse.ps1`. + +```powershell +[Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms") | Out-Null + +$SwapButtons = Add-Type -MemberDefinition @' +[DllImport("user32.dll")] +public static extern bool SwapMouseButton(bool swap); +'@ -Name "NativeMethods" -Namespace "PInvoke" -PassThru + +$SwapButtons::SwapMouseButton(!([System.Windows.Forms.SystemInformation]::MouseButtonsSwapped)) +``` + +### SwapMouse.wsb + +```xml + + + + C:\sandbox + C:\sandbox + True + + + + powershell.exe -ExecutionPolicy Bypass -File C:\sandbox\SwapMouse.ps1 + + +``` \ No newline at end of file diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md index 90722f5722..ac4107cb4a 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md @@ -6,3 +6,4 @@ ms.date: 09/09/2024 --- # Troubleshoot Windows Sandbox + From 63e6ed22e7f4e9a8fe4c68ddcd25880e8fdf6368 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 10 Sep 2024 11:41:14 -0600 Subject: [PATCH 007/123] chore: Update Windows Sandbox TOC to include sample configuration files --- .../windows-sandbox/windows-sandbox-faq.yml | 56 +++++++++---------- .../windows-sandbox-install.md | 2 +- 2 files changed, 29 insertions(+), 29 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml index 2f7a816a54..6fa2f42583 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml @@ -8,7 +8,7 @@ metadata: ms.date: 09/09/2024 title: Common questions about Windows Sandbox -summary: Windows Sandbox (WSB) provides a lightweight desktop environment to safely run applications in isolation. This feature provides a safe and secure space for testing and debugging apps, exploring unknown files, or experimenting with tools since software installed inside the Windows Sandbox environment remains "sandboxed" and runs separately from the host machine. +summary: Windows Sandbox (WSB) provides a lightweight desktop environment to safely run applications in isolation. This Frequently Asked Questions (FAQ) article is intended to help you learn more about Windows Sandbox. sections: @@ -16,33 +16,33 @@ sections: questions: - question: Who can use WSB? answer: | - WSB can be used by anyone without any technical skills in various scenarios where users need a secure, clean environment for testing or running potentially harmful software. Here are some ways in which you can leverage WSB: + WSB can be used in various scenarios by anyone without any technical skills. Here are some ways in which you can use WSB: - - *Clean environment for software testing*: Test or debug your applications in WSB's clean environment to identify and resolve bugs or compatibility issues. - - *Secure web browsing*: Use WSB for secure web browsing, especially when accessing unfamiliar or potentially dangerous websites without putting your system at risk of malware infection. - - *Running Untrusted Applications*: Mitigate security risks by running untrusted applications or files, such as email attachments in WSB. - - *Test software features risk-free*: Easily test out software without the need for installing or uninstalling on your host machine. - - *Maintaining multiple dev environments*: Streamline your development process by utilizing WSB to maintain multiple sandboxes for different development environments - - *Privacy Protection*: Users concerned about online privacy can use Windows Sandbox for activities like social media browsing or online shopping to prevent tracking cookies and other privacy-invading techniques. + - **Clean environment for software testing**: Test or debug your applications in WSB's clean environment to identify and resolve bugs or compatibility issues. + - **Secure web browsing**: Use WSB for secure web browsing, especially when accessing unfamiliar or potentially dangerous websites without putting your system at risk of malware infection. + - **Running Untrusted Applications**: Mitigate security risks by running untrusted applications or files, such as email attachments in WSB. + - **Test software features risk-free**: Easily test out software without the need for installing or uninstalling on your host machine. + - **Maintaining multiple dev environments**: Streamline your development process by utilizing WSB to maintain multiple sandboxes for different development environments. + - **Privacy Protection**: Users concerned about online privacy can use Windows Sandbox for activities like social media browsing or online shopping to prevent tracking cookies and other privacy-invading techniques. - - question: What's the difference between a Hyper-V VM and Windows Sandbox? + - question: What's the difference between a Hyper-V virtual machine (VM) and Windows Sandbox? answer: | 1. **Lightweight and Temporary**: - - **Windows Sandbox**: It's a lightweight, disposable environment that runs within your existing Windows installation. You can quickly launch it, test applications, and discard it without affecting your main system. - - **Hyper-V VMs**: Hyper-V VMs are more heavyweight. They require dedicated resources (CPU, memory, disk space) and take longer to set up. + - **Windows Sandbox**: It's a lightweight, disposable environment that runs within your existing Windows installation. You can quickly launch it, test applications, and discard it without affecting your main system. + - **Hyper-V VMs**: Hyper-V VMs are more heavyweight. They require dedicated resources (CPU, memory, disk space) and take longer to set up. 1. **Security Isolation**: - - **Windows Sandbox**: Provides a secure, isolated environment for testing untrusted software. Any changes made within the sandbox are discarded when you close it. - - **Hyper-V VMs**: While VMs also offer isolation, they persistently store changes unless you revert them manually. + - **Windows Sandbox**: Provides a secure, isolated environment for testing untrusted software. Any changes made within the sandbox are discarded when you close it. + - **Hyper-V VMs**: While VMs also offer isolation, they persistently store changes unless you revert them manually. 1. **Resource Efficiency**: - - **Windows Sandbox**: More resource efficient than full VM. It adjusts memory usage according to the demand. It also reuses many of the host’s read only OS files. - - **Hyper-V VMs**: VMs have fixed resource allocations, which can impact overall system performance. + - **Windows Sandbox**: More resource efficient than full VM. It adjusts memory usage according to the demand. It also reuses many of the host’s read only OS files. + - **Hyper-V VMs**: VMs have fixed resource allocations, which can impact overall system performance. 1. **Ease of Use**: - - **Windows Sandbox**: Simple to use—just open it, test your software, and close it. No complex setup or management. - - **Hyper-V VMs**: Require more configuration, including setting up virtual switches, network adapters, and managing VM snapshots. + - **Windows Sandbox**: Simple to use—just open it, test your software, and close it. No complex setup or management. + - **Hyper-V VMs**: Require more configuration, including setting up virtual switches, network adapters, and managing VM snapshots. - question: Why can I not change certain settings using a config file? answer: | - You cannot make changes to properties if they are controlled by Group Policy. Contact your IT Administrator for more details. + You can't make changes to properties if they're controlled by Group Policy. Contact your IT Administrator for more details. - question: How do I open multiple Sandbox instances? answer: | @@ -57,19 +57,19 @@ sections: 1. Open the Feedback Hub app. 1. Select **Report a problem** or **Suggest a feature**. - 1. Fill in the **Summarize your feedback** and **Explain in more details** boxes with a detailed description of the issue or suggestion. A useful feedback item includes the following: - - Short and descriptive issue title. - - Windows version and build number. This can be gathered from the CMD prompt using the `cmd.exe --version`` command. - - Device information (including CPU type, memory, disk etc.) - - Detailed repro steps. What steps do we need to take to reproduce the issue? Provide as much detail as you can. Provide error message text where possible or screenshots of errors if text cannot be captured. - - Behavior you were expecting. - 1. Select an appropriate category and subcategory by using the dropdown menus. There is a dedicated option in Feedback Hub to file **Windows Sandbox** bugs and feedback. It is located under **Security and Privacy** category. + 1. Fill in the **Summarize your feedback** and **Explain in more details** boxes with a detailed description of the issue or suggestion. A useful feedback item includes: + - Short and descriptive issue title. + - Windows version and build number, which can be gathered from a command prompt using the `cmd.exe --version` command. + - Device information (including CPU type, memory, disk etc.) + - Detailed repro steps. What steps do we need to take to reproduce the issue? Provide as much detail as you can. Provide error message text where possible or screenshots of errors if text can't be captured. + - Behavior you were expecting. + 1. Select an appropriate category and subcategory by using the dropdown menus. There's a dedicated option in Feedback Hub to file **Windows Sandbox** bugs and feedback. It's located under **Security and Privacy** category. 1. Select **Next**. 1. If necessary, you can collect traces for the issue as follows: Select the Recreate my problem tile, then select Start capture, reproduce the issue, and then select **Stop capture**. 1. Attach any relevant screenshots or files for the problem, then select **Submit**. Alternatively, you can also use the [Windows Sandbox GitHub repository](https://github.com/microsoft/Windows-Sandbox) to: - - **Search existing issues** to see if there are any associated with a problem that you are having. Note that in the search bar, you can remove "is:open" to include issues that have already been resolved in your search. Please consider commenting or giving a thumbs up to any open issues that you would like to express your interest in moving forward as a priority. - - **File a new issue**: If you have found a problem with WSB or WSB documentation and there does not appear to be an existing issue, you can select the green New issue button and then choose WSB - Bug Report. You will need to include a title for the issue, your Windows build number (run cmd.exe /c ver to see your current build #), whether you're running inbox or undocked Windows Sandbox, any other software versions involved, the repro steps, expected behavior, actual behavior, and diagnostic logs if available and appropriate. - - **File a feature request** by selecting the green New issue button and then select Feature request. You will need to address a few questions describing your request. + - **Search existing issues** to see if there are any associated with a problem that you're having. In the search bar, you can remove "is:open" to include resolved issues in your search. Consider commenting or giving a thumbs up to any open issues that you would like to express your interest in moving forward as a priority. + - **File a new issue**: If you have found a problem with WSB or WSB documentation and there doesn't appear to be an existing issue, you can select the green **New issue** button and then choose **WSB - Bug Report**. Provide a title for the issue, your Windows build number, whether you're running inbox or undocked Windows Sandbox, any other software versions involved, the repro steps, expected behavior, actual behavior, and diagnostic logs if available and appropriate. + - **File a feature request** by selecting the green **New issue** button and then select **Feature request**, then answer the questions describing your request. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md index 115a257de3..0a3e624f7a 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md @@ -48,7 +48,7 @@ ms.date: 09/09/2024 > [!NOTE] > Beginning in Windows 11, version 24H2, Windows Sandbox adheres to the mouse settings of the host system. > - > If you are on an older build and if the host system is set to use a left-handed mouse, you must apply these settings in Windows Sandbox manually when Windows Sandbox starts. Alternatively, you can use a sandbox configuration file to run a logon command to swap the mouse setting. For an example, see [Example 3](windows-sandbox-configure-using-wsb-file.md#example-3). + > If you are on an older build and if the host system is set to use a left-handed mouse, you must apply these settings in Windows Sandbox manually when Windows Sandbox starts. Alternatively, you can use a sandbox configuration file to run a logon command to swap the mouse setting. For an example, see [Example 3](windows-sandbox-sample-configuration.md#example-3---mapping-folders-and-running-a-powershell-script-as-a-logon-command). ## Try WSB preview features by joining the Windows Insider Program From a721cb1af017d36c27742c965525091ba0151c5a Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 10 Sep 2024 12:13:07 -0600 Subject: [PATCH 008/123] chore: Update Windows Sandbox TOC and sample configuration files --- ...indows-sandbox-configure-using-wsb-file.md | 22 +++++++++---------- .../windows-sandbox-install.md | 2 +- .../windows-sandbox-overview.md | 17 +++++--------- .../windows-sandbox-sample-configuration.md | 2 +- 4 files changed, 18 insertions(+), 25 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md index df8539a64c..18d00a04e1 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md @@ -7,13 +7,13 @@ ms.date: 09/09/2024 # Use and configure Windows Sandbox -To launch a Windows Sandbox with default settings, simply Locate and select Windows Sandbox on the Start menu or search for 'Windows Sandbox'. This launches a basic Sandbox with 4GB memory with the following properties: +To launch a Windows Sandbox with default settings, locate and select Windows Sandbox on the Start menu or search for 'Windows Sandbox'. This launches a basic Sandbox with 4GB memory with the following properties: - **vGPU (virtualized GPU)**: Enabled on non-ARM64 devices. - **Networking**: Enabled. The sandbox uses the Hyper-V default switch. - **Audio input**: Enabled. The sandbox shares the host's microphone input into the sandbox. - **Video input**: Disabled. The sandbox doesn't share the host's video input into the sandbox. -- **Protected client**: Disabled. The sandbox doesn't have increased security settings on the Remote Desktop Protocol (RDP) session. +- **Protected client**: Disabled. The sandbox doesn't use increased security settings on the Remote Desktop Protocol (RDP) session. - **Printer redirection**: Disabled. The sandbox doesn't share printers with the host. - **Clipboard redirection**: Enabled. The sandbox shares the host clipboard with the sandbox so that text and files can be pasted back and forth. @@ -24,7 +24,7 @@ To launch a Windows Sandbox with default settings, simply Locate and select Wind You have the freedom to open files, install applications from the web, and perform various other tasks that benefit from an isolated clean environment. -When you're finished experimenting, close the sandbox. A dialog box will prompt you to confirm the deletion of all sandbox content. Select "Ok" to proceed. Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox. +When you're finished experimenting, close the sandbox. A dialog box prompts you to confirm the deletion of all sandbox content. Select **Ok** to proceed. Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox. ## Configure a custom Windows Sandbox @@ -35,7 +35,7 @@ A configuration file enables the user to control the following aspects of Window - **vGPU (virtualized GPU)**: Enable or disable the virtualized GPU. If vGPU is disabled, the sandbox uses Windows Advanced Rasterization Platform (WARP). - **Networking**: Enable or disable network access within the sandbox. - **Mapped folders**: Share folders from the host with *read* or *write* permissions. Exposing host directories might allow malicious software to affect the system or steal data. -- **Logon command**: A command that's executed when Windows Sandbox starts. +- **Logon command**: A command to execute when Windows Sandbox starts. - **Audio input**: Shares the host's microphone input into the sandbox. - **Video input**: Shares the host's webcam input into the sandbox. - **Protected client**: Places increased security settings on the Remote Desktop Protocol (RDP) session to the sandbox. @@ -107,7 +107,7 @@ Supported values: An array of folders, each representing a location on the host machine that is shared with the sandbox at the specified path. Currently, relative paths aren't supported. -When using `` to map folders, the folders are mapped prior to the execution of the [Logon command](#logon-command). +When using `` to map folders, the folders are mapped before the execution of the [Logon command](#logon-command). ```xml @@ -123,7 +123,7 @@ When using `` to map folders, the folders are mapped prior to the ``` - **HostFolder**: Specifies the folder on the host machine to share into the sandbox. The folder must already exist on the host, or the container fails to start. -- **SandboxFolder**: Specifies the destination in the sandbox to map the folder to. If the folder doesn't exist, it is created. If no sandbox folder is specified, the folder is mapped to the container desktop. +- **SandboxFolder**: Specifies the destination in the sandbox to map the folder to. If the folder doesn't exist, it gets created. If no sandbox folder is specified, the folder is mapped to the container desktop. - **ReadOnly**: If *true*, enforces read-only access to the shared folder from within the container. Supported values: *true*/*false*. Defaults to *false*. > [!NOTE] @@ -154,8 +154,8 @@ Enables or disables audio input to the sandbox. Supported values: -- **Enable**: Enables audio input in the sandbox. If this value is set, the sandbox can receive audio input from the user. Applications that use a microphone may require this capability. -- **Disable**: Disables audio input in the sandbox. If this value is set, the sandbox can't receive audio input from the user. Applications that use a microphone may not function properly with this setting. +- **Enable**: Enables audio input in the sandbox. If this value is set, the sandbox can receive audio input from the user. Applications that use a microphone might require this capability. +- **Disable**: Disables audio input in the sandbox. If this value is set, the sandbox can't receive audio input from the user. Applications that use a microphone might not function properly with this setting. - **Default**: This value is the default value for audio input support. Currently, this default value denotes that audio input is enabled. > [!NOTE] @@ -172,8 +172,8 @@ Enables or disables video input to the sandbox. Supported values: - **Enable**: Enables video input in the sandbox. -- **Disable**: Disables video input in the sandbox. Applications that use video input may not function properly in the sandbox. -- **Default**: This value is the default value for video input support. Currently, this default value denotes that video input is disabled. Applications that use video input may not function properly in the sandbox. +- **Disable**: Disables video input in the sandbox. Applications that use video input might not function properly in the sandbox. +- **Default**: This value is the default value for video input support. Currently, this default value denotes that video input is disabled. Applications that use video input might not function properly in the sandbox. > [!NOTE] > There may be security implications of exposing host video input to the container. @@ -231,4 +231,4 @@ Specifies the amount of memory that the sandbox can use in megabytes (MB). value ``` -If the memory value specified is insufficient to boot a sandbox, it is automatically increased to the required minimum amount. +If the memory value specified is insufficient to boot a sandbox, it's automatically increased to the required minimum amount. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md index 0a3e624f7a..d634d4aa6a 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md @@ -52,7 +52,7 @@ ms.date: 09/09/2024 ## Try WSB preview features by joining the Windows Insider Program -To try the most recent features or updates to WSB, join the [Windows Insiders Program](https://insider.windows.com/getting-started). Once you have joined Windows Insiders, you can choose the channel you would like to receive preview builds from inside the Windows settings menu. You can choose from: +To try the most recent features or updates to WSB, join the [Windows Insiders Program](https://insider.windows.com/getting-started). After joining the Windows Insiders Program, you can choose the channel you would like to receive preview builds from inside the Windows settings menu. You can choose from: - **Dev channel**: Most recent updates, but low stability. - **Beta channel**: Ideal for early adopters, more reliable builds than the Dev channel. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md index c8431f91d4..33aa59a1b8 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md @@ -7,7 +7,7 @@ ms.date: 09/09/2024 # Windows Sandbox -Windows Sandbox (WSB) offers a lightweight, isolated desktop environment for safely running applications. It is ideal for testing, debugging, exploring unknown files, and experimenting with tools. Applications installed within the sandbox remain isolated from the host machine using hypervisor-based virtualization. As a disposable virtual machine (VM), Windows Sandbox ensures reboot persistence, quick launch times, and a lower memory footprint compared to full VMs. Its one-click setup simplifies the user experience. +Windows Sandbox (WSB) offers a lightweight, isolated desktop environment for safely running applications. It's ideal for testing, debugging, exploring unknown files, and experimenting with tools. Applications installed within the sandbox remain isolated from the host machine using hypervisor-based virtualization. As a disposable virtual machine (VM), Windows Sandbox ensures reboot persistence, quick launch times, and a lower memory footprint compared to full VMs. Its one-click setup simplifies the user experience. The sandbox is temporary; closing it deletes all software, files, and state. Each launch provides a fresh instance. Host-installed software isn't available in the sandbox. Applications needed within the sandbox must be installed there explicitly. @@ -16,21 +16,21 @@ The sandbox is temporary; closing it deletes all software, files, and state. Eac Windows Sandbox offers the following features: -- **Part of Windows**: Everything required for this feature is included in the supported Windows SKUs like Pro, Enterprise and Education. There's no need to maintain a separate VM installation. +- **Part of Windows**: Everything required for this feature is included in the supported Windows editions like Pro, Enterprise, and Education. There's no need to maintain a separate VM installation. - **Disposable**: Nothing persists on the device. Everything is discarded when the user closes the application. - **Pristine**: Every time Windows Sandbox runs, it's as clean as a brand-new installation of Windows. - **Secure**: Uses hardware-based virtualization for kernel isolation. It relies on the Microsoft hypervisor to run a separate kernel that isolates Windows Sandbox from the host. -- **Efficient**: Takes a few seconds to launch, supports virtual GPU and has smart memory management that optimizes memory footprint. +- **Efficient**: Takes a few seconds to launch, supports virtual GPU, and has smart memory management that optimizes memory footprint. > [!IMPORTANT] > Windows Sandbox enables network connection by default. It can be disabled using the [Windows Sandbox configuration file](windows-sandbox-configure-using-wsb-file.md#networking). Enabling networking can expose untrusted applications to the internal network. -WSB can be used by anyone without any technical skills in various scenarios where users need a secure, clean environment for testing or running potentially harmful software. Here are some ways in which you can leverage WSB: +WSB can be used without any technical skills in various scenarios where users need a secure, clean environment for testing or running potentially harmful software. Here are some ways in which you can use WSB: - **Clean environment for software testing**: Test or debug your applications in WSB's clean environment to identify and resolve bugs or compatibility issues. - **Secure web browsing**: Use WSB for secure web browsing, especially when accessing unfamiliar or potentially dangerous websites without putting your system at risk of malware infection. - **Running Untrusted Applications**: Mitigate security risks by opening untrusted applications or files, such as email attachments in WSB. Improve your safety and security by opening a sandbox with networking disabled and mapping the folder with the application or file you want to open to the sandbox in read-only mode. Check [Sample configuration files](windows-sandbox-sample-configuration.md) for more details. -- **Testing or demoing new software for the first time**: Test drive or demo new software, unstable versions like beta, extensions or add-ons without the hassle of installing and then uninstalling on your host machine. +- **Testing or demoing new software for the first time**: Test drive or demo new software, preview versions, extensions, or add-ons without the hassle of installing and then uninstalling on your host machine. - **Maintaining multiple dev environments**: Streamline your development process by utilizing WSB to maintain multiple sandboxes for different development environments. For example, maintain a sandbox for each python version and its dependencies! @@ -38,10 +38,3 @@ WSB can be used by anyone without any technical skills in various scenarios wher > [!NOTE] > Windows Sandbox is currently not supported on Windows Home edition. - -## Usage - -1. Copy an executable file (and any other files needed to run the application) from the host and paste them into the **Windows Sandbox** window. -2. Run the executable file or installer inside the sandbox. -3. When you're finished experimenting, close the sandbox. A dialog box will state that all sandbox content will be discarded and permanently deleted. Select **Ok**. -4. Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md index 95d5bcbfe9..91efb7e818 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md @@ -73,7 +73,7 @@ C:\temp\vscode.exe /verysilent /suppressmsgboxes ``` -## Example 3 - Mapping Folders and running a PowerShell script as a LogOn Command +## Example 3 - Mapping Folders and running a PowerShell script as a Logon Command The following config file runs a PowerShell script as a logon command to swap the primary mouse button for left-handed users. From a70c340e045d0c201f33e03ec31aa66304a6d804 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 10 Sep 2024 14:26:02 -0600 Subject: [PATCH 009/123] Update Windows Sandbox TOC to include sample configuration files --- .../application-isolation/windows-sandbox/toc.yml | 6 ++---- .../windows-sandbox/windows-sandbox-troubleshoot.md | 10 ++++++++++ 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml index dc3bd5efd0..1ef0028e08 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml @@ -12,10 +12,8 @@ items: href: windows-sandbox-install.md - name: Use & configure Windows Sandbox href: windows-sandbox-configure-using-wsb-file.md - - name: Tutorials - items: - - name: Sample configuration files - href: windows-sandbox-sample-configuration.md + - name: Sample configuration files + href: windows-sandbox-sample-configuration.md - name: WindowsSandbox Policy CSP href: /windows/client-management/mdm/policy-csp-windowssandbox - name: Frequently asked questions diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md index ac4107cb4a..4d61fa1b31 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md @@ -7,3 +7,13 @@ ms.date: 09/09/2024 # Troubleshoot Windows Sandbox +This article lists some common issues with Windows Sandbox and possible solutions. To submit feedback about Windows Sandbox, see [Where can I provide feedback?](windows-sandbox-faq.yml#feedback) + +| Error | Possible Solution | +|--|--| +| `WININET_E_NAME_NOT_RESOLVED`
`WU_E_PT_ENDPOINT_UNREACHABLE` | Upgrade to Windows Sandbox app fails because user isn't connected to internet or network adapter is connected but no internet connection. Check your internet connection. | +| `ERROR_FILE_NOT_FOUND` | `.wsb` config file provided by the user doesn't exist. Make sure that the path to the `.wsb` file is correct. | +| `E_INVALIDARG` | The `.wsb` file provided by the user is invalid or has errors. Check the `.wsb` file. | +| `REGDB_E_IIDNOTREG` | Verify if Windows Sandbox component is enabled under 'Turn Windows features on or off'. For more information, see [Install Windows Sandbox](windows-sandbox-install.md) | +| `The following settings are enforced by your IT administrator.` | `.wsb` file has a setting enabled that is controlled via group policy. | +| General failure during installation. | Possible causes:

- Installing Windows Sandbox is disabled via group policy. Check with your IT Admin.
- Timeout error where we can't reach the Microsoft Store. Try again later. | From 3f042fafb25a9e761f23d0fc9f017fcf1efadb53 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 10 Sep 2024 14:32:12 -0600 Subject: [PATCH 010/123] Update Windows Sandbox TOC to include sample configuration files and fix broken link in troubleshoot.md --- .../application-isolation/windows-sandbox/toc.yml | 2 +- .../windows-sandbox/windows-sandbox-troubleshoot.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml index 1ef0028e08..2d0ed23d23 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml @@ -14,7 +14,7 @@ items: href: windows-sandbox-configure-using-wsb-file.md - name: Sample configuration files href: windows-sandbox-sample-configuration.md - - name: WindowsSandbox Policy CSP + - name: WindowsSandbox Policy CSP 🔗 href: /windows/client-management/mdm/policy-csp-windowssandbox - name: Frequently asked questions href: windows-sandbox-faq.yml diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md index 4d61fa1b31..719eb8a1d2 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md @@ -7,7 +7,7 @@ ms.date: 09/09/2024 # Troubleshoot Windows Sandbox -This article lists some common issues with Windows Sandbox and possible solutions. To submit feedback about Windows Sandbox, see [Where can I provide feedback?](windows-sandbox-faq.yml#feedback) +This article lists some common issues with Windows Sandbox and possible solutions. To submit feedback about Windows Sandbox, see [Where can I provide feedback?](windows-sandbox-faq.yml##where-can-i-provide-feedback) | Error | Possible Solution | |--|--| From e6e59d69b4cb55b4c25acd66665b5d7ad1358afb Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Wed, 11 Sep 2024 15:39:38 -0600 Subject: [PATCH 011/123] Test --- .../security/application-security/application-isolation/toc.yml | 2 +- .../windows-sandbox/{windows-sandbox-overview.md => index.md} | 0 2 files changed, 1 insertion(+), 1 deletion(-) rename windows/security/application-security/application-isolation/windows-sandbox/{windows-sandbox-overview.md => index.md} (100%) diff --git a/windows/security/application-security/application-isolation/toc.yml b/windows/security/application-security/application-isolation/toc.yml index db3200f4a3..c2de68aab3 100644 --- a/windows/security/application-security/application-isolation/toc.yml +++ b/windows/security/application-security/application-isolation/toc.yml @@ -13,4 +13,4 @@ items: - name: App containers 🔗 href: /virtualization/windowscontainers/about - name: Windows Sandbox - href: windows-sandbox/toc.yml \ No newline at end of file + href: windows-sandbox/index.md \ No newline at end of file diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md b/windows/security/application-security/application-isolation/windows-sandbox/index.md similarity index 100% rename from windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md rename to windows/security/application-security/application-isolation/windows-sandbox/index.md From a0adc7e8ae3de776aed9f501b802bf7e5e861e34 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Wed, 11 Sep 2024 15:49:36 -0600 Subject: [PATCH 012/123] Update Windows Sandbox TOC to include sample configuration files and fix broken link in troubleshoot.md --- ...blishing.redirection.windows-security.json | 5 +++ .../windows-sandbox/toc.yml | 40 ++++++++++--------- .../windows-sandbox-troubleshoot.md | 2 +- ...lication-security-application-isolation.md | 2 +- .../security/includes/sections/application.md | 2 +- windows/security/index.yml | 2 +- windows/security/threat-protection/index.md | 2 +- 7 files changed, 31 insertions(+), 24 deletions(-) diff --git a/.openpublishing.redirection.windows-security.json b/.openpublishing.redirection.windows-security.json index fc3a796e95..e66a1c8cae 100644 --- a/.openpublishing.redirection.windows-security.json +++ b/.openpublishing.redirection.windows-security.json @@ -5,6 +5,11 @@ "redirect_url": "/windows/security/hardware-security/kernel-dma-protection-for-thunderbolt", "redirect_document_id": false }, + { + "source_path": "windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md", + "redirect_url": "/windows/security/application-security/application-isolation/windows-sandbox/index.md", + "redirect_document_id": false + }, { "source_path": "windows/security//threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity.md", "redirect_url": "/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity", diff --git a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml index 2d0ed23d23..6a17c8dd4a 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml @@ -1,22 +1,24 @@ items: - - name: Overview - expanded: true - items: - - name: What is Windows Sandbox? - href: windows-sandbox-overview.md - - name: Compare versions - href: windows-sandbox-versions.md - - name: Architecture - href: windows-sandbox-architecture.md - - name: Install Windows Sandbox - href: windows-sandbox-install.md - - name: Use & configure Windows Sandbox - href: windows-sandbox-configure-using-wsb-file.md +- name: Windows Sandbox + href: index.md +- name: Overview + expanded: true + items: + - name: Compare versions + href: windows-sandbox-versions.md + - name: Architecture + href: windows-sandbox-architecture.md +- name: Install Windows Sandbox + href: windows-sandbox-install.md +- name: Use & configure Windows Sandbox + href: windows-sandbox-configure-using-wsb-file.md +- name: Tutorials + items: - name: Sample configuration files href: windows-sandbox-sample-configuration.md - - name: WindowsSandbox Policy CSP 🔗 - href: /windows/client-management/mdm/policy-csp-windowssandbox - - name: Frequently asked questions - href: windows-sandbox-faq.yml - - name: Troubleshooting - href: windows-sandbox-troubleshoot.md \ No newline at end of file +- name: WindowsSandbox Policy CSP 🔗 + href: /windows/client-management/mdm/policy-csp-windowssandbox +- name: Frequently asked questions + href: windows-sandbox-faq.yml +- name: Troubleshooting + href: windows-sandbox-troubleshoot.md \ No newline at end of file diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md index 719eb8a1d2..23b9f62263 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md @@ -7,7 +7,7 @@ ms.date: 09/09/2024 # Troubleshoot Windows Sandbox -This article lists some common issues with Windows Sandbox and possible solutions. To submit feedback about Windows Sandbox, see [Where can I provide feedback?](windows-sandbox-faq.yml##where-can-i-provide-feedback) +This article lists some common issues with Windows Sandbox and possible solutions. To submit feedback about Windows Sandbox, see [Where can I provide feedback?](windows-sandbox-faq.yml#where-can-i-provide-feedback) | Error | Possible Solution | |--|--| diff --git a/windows/security/book/application-security-application-isolation.md b/windows/security/book/application-security-application-isolation.md index 603d0138a4..a81d5c9c9c 100644 --- a/windows/security/book/application-security-application-isolation.md +++ b/windows/security/book/application-security-application-isolation.md @@ -38,7 +38,7 @@ Once Windows Sandbox is closed, nothing persists on the device. All the software :::image type="icon" source="images/learn-more.svg" border="false"::: **Learn more:** -- [Windows Sandbox](/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview) +- [Windows Sandbox](/windows/security/application-security/application-isolation/windows-sandbox) - [Windows Sandbox is a new lightweight desktop environment tailored for safely running applications in isolation](https://techcommunity.microsoft.com/t5/windows-os-platform-blog/windows-sandbox/ba-p/301849) diff --git a/windows/security/includes/sections/application.md b/windows/security/includes/sections/application.md index 8b6b510ef4..f185a1ec04 100644 --- a/windows/security/includes/sections/application.md +++ b/windows/security/includes/sections/application.md @@ -25,4 +25,4 @@ ms.topic: include | **[Microsoft Defender Application Guard (MDAG) for Microsoft Office](https://support.microsoft.com/office/application-guard-for-office-9e0fb9c2-ffad-43bf-8ba3-78f785fdba46)** | Application Guard protects Office files including Word, PowerPoint, and Excel. Application icons have a small shield if Application Guard has been enabled and they are under protection. | | **[Microsoft Defender Application Guard (MDAG) configure via MDM](/windows/client-management/mdm/windowsdefenderapplicationguard-csp)** | The WindowsDefenderApplicationGuard configuration service provider (CSP) is used by the enterprise to configure the settings in Microsoft Defender Application Guard. | | **[App containers](/virtualization/windowscontainers/about/)** | Universal Windows Platform (UWP) applications run in Windows containers known as app containers. Processes that run in app containers operate with low integrity level, meaning they have limited access to resources they don't own. Because the default integrity level of most resources is medium integrity level, the UWP app can access only a subset of the filesystem, registry, and other resources. The app container also enforces restrictions on network connectivity; for example, access to a local host isn't allowed. As a result, malware or infected apps have limited footprint for escape. | -| **[Windows Sandbox](/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview)** | Windows Sandbox provides a lightweight desktop environment to safely run untrusted Win32 applications in isolation, using the same hardware-based Hyper-V virtualization technology to isolate apps without fear of lasting impact to your PC. | +| **[Windows Sandbox](/windows/security/application-security/application-isolation/windows-sandbox)** | Windows Sandbox provides a lightweight desktop environment to safely run untrusted Win32 applications in isolation, using the same hardware-based Hyper-V virtualization technology to isolate apps without fear of lasting impact to your PC. | diff --git a/windows/security/index.yml b/windows/security/index.yml index 9553388f93..6bcbbcbb10 100644 --- a/windows/security/index.yml +++ b/windows/security/index.yml @@ -110,7 +110,7 @@ landingContent: - text: Microsoft Defender Application Guard (MDAG) url: /windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview - text: Windows Sandbox - url: /windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview + url: /windows/security/application-security/application-isolation/windows-sandbox/ - linkListType: how-to-guide links: - text: Configure Windows Sandbox diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md index 5dd0c7c3f0..326b453de1 100644 --- a/windows/security/threat-protection/index.md +++ b/windows/security/threat-protection/index.md @@ -25,7 +25,7 @@ See the following articles to learn more about the different areas of Windows th - [Virtualization-Based Protection of Code Integrity](../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) - [Web Protection](/microsoft-365/security/defender-endpoint/web-protection-overview) - [Windows Firewall](../operating-system-security/network-security/windows-firewall/index.md) -- [Windows Sandbox](../application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md) +- [Windows Sandbox](../application-security/application-isolation/windows-sandbox/index.md) ## Next-generation protection From e6613bb5f4fd15010b5c0aa91e3a53e8d765b0ce Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 22 Oct 2024 10:44:07 -0600 Subject: [PATCH 013/123] Updates --- .../windows-sandbox/toc.yml | 4 +- .../windows-sandbox/windows-sandbox-cli.md | 101 ++++++++++++++++++ ...indows-sandbox-configure-using-wsb-file.md | 4 +- .../windows-sandbox-sample-configuration.md | 4 +- .../windows-sandbox-versions.md | 26 ++++- 5 files changed, 133 insertions(+), 6 deletions(-) create mode 100644 windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md diff --git a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml index 6a17c8dd4a..9654e55dcd 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/toc.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/toc.yml @@ -4,7 +4,7 @@ items: - name: Overview expanded: true items: - - name: Compare versions + - name: Windows Sandbox versions href: windows-sandbox-versions.md - name: Architecture href: windows-sandbox-architecture.md @@ -12,6 +12,8 @@ items: href: windows-sandbox-install.md - name: Use & configure Windows Sandbox href: windows-sandbox-configure-using-wsb-file.md +- name: Windows Sandbox command line interface + href: windows-sandbox-cli.md - name: Tutorials items: - name: Sample configuration files diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md new file mode 100644 index 0000000000..b68d31277e --- /dev/null +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md @@ -0,0 +1,101 @@ +--- +title: Windows Sandbox command line +description: Windows Sandbox command line interface +ms.topic: how-to +ms.date: 10/22/2024 +--- + +# Windows Sandbox command line interface + +Starting with Windows 11, version 24H2, the Windows Command Line Interface (CLI) offers powerful tools for creating, managing, and controlling sandboxes, executing commands, and sharing folders within sandbox sessions. This functionality is especially valuable for scripting, task automation, and improving development workflows. In this section, you'll explore how the Windows Sandbox CLI operates, with examples demonstrating how to use each command to enhance your development process. + +**Common parameters**: + +- `--raw`: Formats all outputs in JSON format. +- `-?, -h, --help`: Show help and usage information + +## Start + +The start command creates and launches a new sandbox. The command returns the sandbox ID, which is a unique identifier for the sandbox. The sandbox ID can be used to refer to the sandbox in other commands. + +- `--id `: ID of the Windows Sandbox environment. +- `--c, --config `: Formatted string with the settings that should be used to create the Windows Sandbox environment. + +**Examples**: + +- Create a Windows Sandbox environment with the default settings: + + ```cmd + wsb start + ``` + +- Create a Windows Sandbox environment with a custom configuration: + + ```cmd + wsb start --config "Disabled" + ``` + +## List + +The list command displays a table that shows the information the running Windows Sandbox sessions for the current user. The table includes the sandbox ID. The status can be either running or stopped. The uptime is the duration that the sandbox has been running. + +```cmd +wsb list +``` + +## Exec + +The exec command executes a command in the sandbox. The command takes two arguments: the sandbox ID and the command to execute. The command can be either a built-in command or an executable file. The exec command runs the command in the sandbox and returns the exit code. The exec command can also take optional arguments that are passed to the process started in the sandbox. + +> [!NOTE] +> Currently, there is no support for process I/O meaning that there is no way to retrieve the output of a command run in Sandbox. + +Commands in Windows Sandbox can be executed in the system context or in the context of the currently logged on user. However, there is no way to log on a user without an active RDP session. Therefore, there currently is no way to execute commands in the user context unless there is an active RDP session. + +- `--id ` (REQUIRED): ID of the Windows Sandbox environment. +- `-c, --command ` (REQUIRED): The command to execute within Windows Sandbox. +- `-r, --run-as ` (REQUIRED): Specifies the user context to execute the command within. If the System option is selected, the command will run in the system context. If the ExistingLogin option is selected, the command will run in the currently active user session or fail if there is no active user session. +- `-d, --working-directory `: Directory to execute command in. + +```cmd +wsb exec –-id 12345678-1234-1234-1234-1234567890AB -c app.exe -r System +``` + +## Stop + +The stop command stops a running Windows Sandbox session. The command takes the sandbox ID as an argument. + +The stop command terminates the sandbox process and releases the resources allocated to the sandbox. The stop command also closes the window that shows the sandbox desktop. + +```cmd +wsb stop --id 12345678-1234-1234-1234-1234567890AB +``` + +## Map + +The map command maps a host folder to a folder in the sandbox. The command takes three arguments: the sandbox ID, the host path, and the sandbox path. The host path should be a folder. The sandbox path can be either an existing or a new folder. The share command allows the user to share files and folders between the host and the sandbox. An Additional, `--allow-write` option can be used to allow or disallow the Windows Sandbox environment to write to the folder. + +- `--id ` (REQUIRED): ID of the Windows Sandbox environment. +- `-f, --host-path ` (REQUIRED): Path to folder that will be mapped from the host. +- `-s, --sandbox-path ` (REQUIRED): Path to the folder within the Windows Sandbox. +- `-w, --allow-write`: If specified, the Windows Sandbox environment will be allowed to write to the shared folder. + +```cmd +wsb map --id 12345678-1234-1234-1234-1234567890AB -f C:\host\folder -s C:\sandbox\folder --allow-write +``` + +## Connect + +The connect command starts a remote session within the sandbox. The command takes the sandbox ID as an argument. The connect command opens a new window with a remote desktop session. The connect command allows the user to interact with the sandbox using the mouse and keyboard. + +```cmd +wsb connect --id 12345678-1234-1234-1234-1234567890AB +``` + +## IP + +The ip command displays the IP address of the sandbox. The command takes the sandbox ID as an argument. + +```cmd +wsb ip --id 12345678-1234-1234-1234-1234567890AB +``` diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md index 512d72f4c5..0dd5cdf761 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md @@ -7,7 +7,7 @@ ms.date: 09/09/2024 # Use and configure Windows Sandbox -To launch a Windows Sandbox with default settings, locate and select Windows Sandbox on the Start menu or search for 'Windows Sandbox'. This launches a basic Sandbox with 4GB memory with the following properties: +To launch a Windows Sandbox with default settings, locate and select Windows Sandbox on the Start menu or search for 'Windows Sandbox'. This launches a basic Sandbox with maximum capacity of 4GB memory with the following properties: - **vGPU (virtualized GPU)**: Enabled on non-ARM64 devices. - **Networking**: Enabled. The sandbox uses the Hyper-V default switch. @@ -231,4 +231,4 @@ Specifies the amount of memory that the sandbox can use in megabytes (MB). value ``` -If the memory value specified is insufficient to boot a sandbox, it's automatically increased to the required minimum amount. +If the memory value specified is insufficient to boot a sandbox, it's automatically increased to the required minimum amount of 2048 MB. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md index 91efb7e818..8d1a0ca697 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-sample-configuration.md @@ -75,9 +75,9 @@ C:\temp\vscode.exe /verysilent /suppressmsgboxes ## Example 3 - Mapping Folders and running a PowerShell script as a Logon Command -The following config file runs a PowerShell script as a logon command to swap the primary mouse button for left-handed users. +Beginning in Windows 11, version 24H2, Windows Sandbox adheres to the mouse settings of the host system. If you are on an older build and if the host system is set to use a left-handed mouse, you must apply these settings in Windows Sandbox manually when Windows Sandbox starts. Alternatively, you can use a sandbox configuration file to run a logon command to swap the mouse setting. -`C:\sandbox` folder on the host is mapped to the `C:\sandbox` folder in the sandbox, so the `SwapMouse.ps1` script can be referenced in the sandbox configuration file. +In this example, the `C:\sandbox` folder on the host is mapped to the `C:\sandbox` folder in the sandbox, so the `SwapMouse.ps1` script can be referenced in the sandbox configuration file. ### SwapMouse.ps1 diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md index 7a957abe53..4249eb5e92 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md @@ -2,7 +2,31 @@ title: Windows Sandbox versions description: Windows Sandbox versions ms.topic: conceptual -ms.date: 09/09/2024 +ms.date: 10/22/2024 --- # Windows Sandbox versions + +Starting with Windows 11, version 24H2, a newer version of Windows Sandbox is available from the Microsoft Store, featuring an improved user experience and new command line functionality. + +- **Faster Updates**: With the app now being updated through the Microsoft Store, you can install the bug fixes and new features as soon as they're available, rather than needing to wait for an update of the Windows operating system. +- **Revamped UI**: The app now features WinUI 3, a modern and sleek user interface built on the Fluent design system. +- **New Runtime Features**: Users can now access clipboard redirection, audio/video input control, and folder sharing directly during runtime using the "…" icon in the top-right corner. No need for pre-configured .wsb files. +- **Command Line Preview**: We've introduced an early version of command line support for Windows Sandbox. Check out ---- for more details. + +## Upgrading to the newer version + +### Prerequisites + +- Windows Sandbox must already be installed. If it isn't already installed, [install Windows Sandbox](windows-sandbox-install.md). +- Device must be running Windows 11, version 24H2, with KB10D or later. +- Microsoft Store and Windows Update must be accessible. + +### Upgrade + +- Launch **Windows Sandbox** from the Start menu. +- If the app hasn't been upgraded to the latest version, a progress dialog appears as it automatically attempts to update. This process typically takes 30 seconds to 2 minutes. +- Once the installation is complete, you'll be directed to the updated version of the app. + +> [!NOTE] +> If the upgrade fails on the first try, the installation continues in the background while you use the older version of the app. Additionally, the app is queued in the "Updates & downloads" section of the Microsoft Store app for users who wish to manually install it. \ No newline at end of file From 284258a52408a2f069e90c9a9fd4fd1f05ba92f5 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 22 Oct 2024 15:57:56 -0600 Subject: [PATCH 014/123] Acro-updates --- .../windows-sandbox/windows-sandbox-cli.md | 8 ++++---- .../windows-sandbox-configure-using-wsb-file.md | 2 +- .../windows-sandbox/windows-sandbox-install.md | 2 +- .../windows-sandbox/windows-sandbox-versions.md | 8 ++++---- 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md index b68d31277e..896af70b77 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md @@ -50,11 +50,11 @@ The exec command executes a command in the sandbox. The command takes two argume > [!NOTE] > Currently, there is no support for process I/O meaning that there is no way to retrieve the output of a command run in Sandbox. -Commands in Windows Sandbox can be executed in the system context or in the context of the currently logged on user. However, there is no way to log on a user without an active RDP session. Therefore, there currently is no way to execute commands in the user context unless there is an active RDP session. +Commands in Windows Sandbox can be executed in the system context or in the context of the currently logged on user. However, there's no way to sign-in a user without an active RDP session. Therefore, there currently is no way to execute commands in the user context unless there's an active RDP session. - `--id ` (REQUIRED): ID of the Windows Sandbox environment. - `-c, --command ` (REQUIRED): The command to execute within Windows Sandbox. -- `-r, --run-as ` (REQUIRED): Specifies the user context to execute the command within. If the System option is selected, the command will run in the system context. If the ExistingLogin option is selected, the command will run in the currently active user session or fail if there is no active user session. +- `-r, --run-as ` (REQUIRED): Specifies the user context to execute the command within. If the System option is selected, the command runs in the system context. If the ExistingLogin option is selected, the command runs in the currently active user session or fails if there's no active user session. - `-d, --working-directory `: Directory to execute command in. ```cmd @@ -76,9 +76,9 @@ wsb stop --id 12345678-1234-1234-1234-1234567890AB The map command maps a host folder to a folder in the sandbox. The command takes three arguments: the sandbox ID, the host path, and the sandbox path. The host path should be a folder. The sandbox path can be either an existing or a new folder. The share command allows the user to share files and folders between the host and the sandbox. An Additional, `--allow-write` option can be used to allow or disallow the Windows Sandbox environment to write to the folder. - `--id ` (REQUIRED): ID of the Windows Sandbox environment. -- `-f, --host-path ` (REQUIRED): Path to folder that will be mapped from the host. +- `-f, --host-path ` (REQUIRED): Path to folder that is mapped from the host. - `-s, --sandbox-path ` (REQUIRED): Path to the folder within the Windows Sandbox. -- `-w, --allow-write`: If specified, the Windows Sandbox environment will be allowed to write to the shared folder. +- `-w, --allow-write`: If specified, the Windows Sandbox environment is allowed to write to the shared folder. ```cmd wsb map --id 12345678-1234-1234-1234-1234567890AB -f C:\host\folder -s C:\sandbox\folder --allow-write diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md index 0dd5cdf761..71c365b89e 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md @@ -9,7 +9,7 @@ ms.date: 09/09/2024 To launch a Windows Sandbox with default settings, locate and select Windows Sandbox on the Start menu or search for 'Windows Sandbox'. This launches a basic Sandbox with maximum capacity of 4GB memory with the following properties: -- **vGPU (virtualized GPU)**: Enabled on non-ARM64 devices. +- **vGPU (virtualized GPU)**: Enabled on non-Arm64 devices. - **Networking**: Enabled. The sandbox uses the Hyper-V default switch. - **Audio input**: Enabled. The sandbox shares the host's microphone input into the sandbox. - **Video input**: Disabled. The sandbox doesn't share the host's video input into the sandbox. diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md index d634d4aa6a..32b1aee636 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install.md @@ -9,7 +9,7 @@ ms.date: 09/09/2024 ## Prerequisites -- ARM64 (for Windows 11, version 22H2 and later) or AMD64 architecture +- Arm64 (for Windows 11, version 22H2 and later) or AMD64 architecture - Virtualization capabilities enabled in BIOS - At least 4 GB of RAM (8 GB recommended) - At least 1 GB of free disk space (SSD recommended) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md index 4249eb5e92..be0502cecd 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md @@ -11,8 +11,8 @@ Starting with Windows 11, version 24H2, a newer version of Windows Sandbox is av - **Faster Updates**: With the app now being updated through the Microsoft Store, you can install the bug fixes and new features as soon as they're available, rather than needing to wait for an update of the Windows operating system. - **Revamped UI**: The app now features WinUI 3, a modern and sleek user interface built on the Fluent design system. -- **New Runtime Features**: Users can now access clipboard redirection, audio/video input control, and folder sharing directly during runtime using the "…" icon in the top-right corner. No need for pre-configured .wsb files. -- **Command Line Preview**: We've introduced an early version of command line support for Windows Sandbox. Check out ---- for more details. +- **New Runtime Features**: Users can now access clipboard redirection, audio/video input control, and folder sharing directly during runtime using the "…" icon in the top-right corner without needing a preconfigured `.wsb` file. +- **Command Line Preview**: An early version of [command line support](windows-sandbox-cli.md) for Windows Sandbox is now available. ## Upgrading to the newer version @@ -25,8 +25,8 @@ Starting with Windows 11, version 24H2, a newer version of Windows Sandbox is av ### Upgrade - Launch **Windows Sandbox** from the Start menu. -- If the app hasn't been upgraded to the latest version, a progress dialog appears as it automatically attempts to update. This process typically takes 30 seconds to 2 minutes. -- Once the installation is complete, you'll be directed to the updated version of the app. +- If the app isn't upgraded to the latest version, a progress dialog appears as it automatically attempts to update. This process typically takes 30 seconds to 2 minutes. +- Once the installation is complete, you're directed to the updated version of the app. > [!NOTE] > If the upgrade fails on the first try, the installation continues in the background while you use the older version of the app. Additionally, the app is queued in the "Updates & downloads" section of the Microsoft Store app for users who wish to manually install it. \ No newline at end of file From 78a8b00b0de9f6c59f47ddd80b193cdce4b707d0 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Wed, 23 Oct 2024 16:17:04 -0600 Subject: [PATCH 015/123] Implement feedback items from Kavya --- ...indows-sandbox-configure-using-wsb-file.md | 6 ++--- .../windows-sandbox/windows-sandbox-faq.yml | 26 +++++++++++++++++++ .../windows-sandbox-troubleshoot.md | 4 ++- .../windows-sandbox-versions.md | 4 +-- 4 files changed, 34 insertions(+), 6 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md index 71c365b89e..f1a42226e3 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md @@ -107,7 +107,7 @@ Supported values: An array of folders, each representing a location on the host machine that is shared with the sandbox at the specified path. Currently, relative paths aren't supported. -When using `` to map folders, the folders are mapped before the execution of the [Logon command](#logon-command). +When using `` to map folders, the folders are mapped before the execution of the [Logon command](#logon-command). Beginning in Windows 11, version 23H2, you can use environment variables in the path. ```xml @@ -123,11 +123,11 @@ When using `` to map folders, the folders are mapped before the e ``` - **HostFolder**: Specifies the folder on the host machine to share into the sandbox. The folder must already exist on the host, or the container fails to start. -- **SandboxFolder**: Specifies the destination in the sandbox to map the folder to. If the folder doesn't exist, it gets created. If no sandbox folder is specified, the folder is mapped to the container desktop. +- **SandboxFolder**: Specifies the destination in the sandbox to map the folder to. If the folder doesn't exist, it gets created. If no sandbox folder is specified, the folder is mapped to the container user's desktop. The default user of Sandbox is `WDAGUtilityAccount`. - **ReadOnly**: If *true*, enforces read-only access to the shared folder from within the container. Supported values: *true*/*false*. Defaults to *false*. > [!NOTE] -> Files and folders mapped in from the host can be compromised by apps in the sandbox or potentially affect the host. Changes made during a Sandbox session to a mapped folder with write-permissions will persist after a Sandbox is disposed. +> Files and folders mapped from the host can be compromised by apps in the sandbox or potentially affect the host. Changes made during a Sandbox session to a mapped folder with write-permissions will persist after a Sandbox is disposed. ### Logon command diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml index 6fa2f42583..1cb0a58a9f 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml @@ -48,6 +48,32 @@ sections: answer: | Today, Windows Sandbox only allows users to launch one Sandbox instance at a time. + - question: Installing the latest version of Windows Sandbox fails. How do I fix this? + answer: | + Ensure that your device has access to the Internet, Windows Update and Microsoft Store. Beginning from Windows 11 24H2, the old Windows Sandbox app attempts to download the latest version from the Store. If the upgrade fails initially, installation continues in the background while the user can still use the app. Additionally, the app is queued in the "Updates & Downloads" section of the Microsoft Store app for users who wish to manually install it manually. + + - question: How do I know which version of Windows Sandbox I am running? + answer: | + Run `Get-AppxPackage -Name WindowsSandbox | Select-Object Version` in a PowerShell prompt. If the version is empty, you are running an older version of Windows Sandbox. If this returns a set of digits, you are running the newer version. + Alternatively, if your Windows Sandbox app has a '...' button in the top-right corner that opens a drop-down menu, you're using the new version. + + - question: How do I save the Sandbox state? + answer: | + Windows Sandbox is temporary; closing it deletes all software, files, and state. + + - question: How can I open Windows Sandbox with a different OS version? + answer: | + Windows Sandbox only allows you to use the same build as your host OS. This allows us to keep Windows Sandbox 'lightweight'. + + - question: What applications aren't supported inside a Windows Sandbox? + answer: | + Inbox apps (for example, Store, Notepad) and Optional features turned on via 'Turn Windows Features On or Off' are not supported. + While Store apps can be installed, you can't download them directly from the Store since the Store app isn't available in the Sandbox. However, if you have an `.appx` package, you can still install those apps. + + - question: How do I uninstall Windows Sandbox? + answer: | + Run the following PowerShell cmdlet to uninstall the app: `Get-AppxPackage -name WindowsSandbox | Remove-AppxPackage` + - name: Feedback questions: diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md index 23b9f62263..a908b5875c 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-troubleshoot.md @@ -16,4 +16,6 @@ This article lists some common issues with Windows Sandbox and possible solution | `E_INVALIDARG` | The `.wsb` file provided by the user is invalid or has errors. Check the `.wsb` file. | | `REGDB_E_IIDNOTREG` | Verify if Windows Sandbox component is enabled under 'Turn Windows features on or off'. For more information, see [Install Windows Sandbox](windows-sandbox-install.md) | | `The following settings are enforced by your IT administrator.` | `.wsb` file has a setting enabled that is controlled via group policy. | -| General failure during installation. | Possible causes:

- Installing Windows Sandbox is disabled via group policy. Check with your IT Admin.
- Timeout error where we can't reach the Microsoft Store. Try again later. | +| `No hypervisor was found. Please enable hypervisor support.` | Windows Sandbox only supports Hyper-V Hypervisor. Third-party hypervisors are not supported. Ensure that Hyper-V is enabled. | +| `Cannot upgrade to the latest version of Windows Sandbox` | Ensure that your device has access to the Internet, Windows Update and Microsoft Store. Beginning with Windows 11, version 24H2, the old Windows Sandbox app attempts to download the latest version from the Store. If the upgrade fails initially, installation continues in the background while the user can still use the app. Additionally, the app is queued in the "Updates & downloads" section of the Microsoft Store app for users who wish to install it manually. | +| `E_FAIL`, or `E_UNEXPECTED` or general failure during installation. | Possible causes:

- Installing Windows Sandbox is disabled via group policy. Check with your IT Admin.
- Timeout error where we can't reach the Microsoft Store. Try again later. | diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md index be0502cecd..42ffe331cc 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-versions.md @@ -20,7 +20,7 @@ Starting with Windows 11, version 24H2, a newer version of Windows Sandbox is av - Windows Sandbox must already be installed. If it isn't already installed, [install Windows Sandbox](windows-sandbox-install.md). - Device must be running Windows 11, version 24H2, with KB10D or later. -- Microsoft Store and Windows Update must be accessible. +- Internet access for Microsoft Store and Windows Update. ### Upgrade @@ -29,4 +29,4 @@ Starting with Windows 11, version 24H2, a newer version of Windows Sandbox is av - Once the installation is complete, you're directed to the updated version of the app. > [!NOTE] -> If the upgrade fails on the first try, the installation continues in the background while you use the older version of the app. Additionally, the app is queued in the "Updates & downloads" section of the Microsoft Store app for users who wish to manually install it. \ No newline at end of file +> If the upgrade fails on the first try, the installation continues in the background while you use the older version of the app. Additionally, the app is queued in the "Updates & downloads" section of the Microsoft Store app for users who wish to install it manually. \ No newline at end of file From 470aff9146bcf6c2783db482737413c8c85ffeb4 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Wed, 23 Oct 2024 16:20:55 -0600 Subject: [PATCH 016/123] Minor update --- .../windows-sandbox/windows-sandbox-faq.yml | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml index 1cb0a58a9f..015bb5dd5d 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml @@ -14,6 +14,7 @@ sections: - name: Concepts questions: + - question: Who can use WSB? answer: | WSB can be used in various scenarios by anyone without any technical skills. Here are some ways in which you can use WSB: @@ -40,6 +41,14 @@ sections: - **Windows Sandbox**: Simple to use—just open it, test your software, and close it. No complex setup or management. - **Hyper-V VMs**: Require more configuration, including setting up virtual switches, network adapters, and managing VM snapshots. + - question: What applications aren't supported inside a Windows Sandbox? + answer: | + Inbox apps (for example, Store, Notepad) and Optional features turned on via 'Turn Windows Features On or Off' are not supported. + While Store apps can be installed, you can't download them directly from the Store since the Store app isn't available in the Sandbox. However, if you have an `.appx` package, you can still install those apps. + + - name: Usage + questions: + - question: Why can I not change certain settings using a config file? answer: | You can't make changes to properties if they're controlled by Group Policy. Contact your IT Administrator for more details. @@ -65,11 +74,6 @@ sections: answer: | Windows Sandbox only allows you to use the same build as your host OS. This allows us to keep Windows Sandbox 'lightweight'. - - question: What applications aren't supported inside a Windows Sandbox? - answer: | - Inbox apps (for example, Store, Notepad) and Optional features turned on via 'Turn Windows Features On or Off' are not supported. - While Store apps can be installed, you can't download them directly from the Store since the Store app isn't available in the Sandbox. However, if you have an `.appx` package, you can still install those apps. - - question: How do I uninstall Windows Sandbox? answer: | Run the following PowerShell cmdlet to uninstall the app: `Get-AppxPackage -name WindowsSandbox | Remove-AppxPackage` From ba82227826b7cacbf69c0a20306d3c73b99af6bb Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Wed, 23 Oct 2024 16:32:28 -0600 Subject: [PATCH 017/123] Update FAQ --- .../windows-sandbox/windows-sandbox-faq.yml | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml index 015bb5dd5d..bcec797106 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml @@ -5,7 +5,7 @@ metadata: author: vinaypamnani-msft ms.author: vinpa ms.topic: faq - ms.date: 09/09/2024 + ms.date: 10/23/2024 title: Common questions about Windows Sandbox summary: Windows Sandbox (WSB) provides a lightweight desktop environment to safely run applications in isolation. This Frequently Asked Questions (FAQ) article is intended to help you learn more about Windows Sandbox. @@ -29,21 +29,21 @@ sections: - question: What's the difference between a Hyper-V virtual machine (VM) and Windows Sandbox? answer: | 1. **Lightweight and Temporary**: - - **Windows Sandbox**: It's a lightweight, disposable environment that runs within your existing Windows installation. You can quickly launch it, test applications, and discard it without affecting your main system. - - **Hyper-V VMs**: Hyper-V VMs are more heavyweight. They require dedicated resources (CPU, memory, disk space) and take longer to set up. + - Windows Sandbox: It's a lightweight, disposable environment that runs within your existing Windows installation. You can quickly launch it, test applications, and discard it without affecting your main system. + - Hyper-V VMs: Hyper-V VMs are more heavyweight. They require dedicated resources (CPU, memory, disk space) and take longer to set up. 1. **Security Isolation**: - - **Windows Sandbox**: Provides a secure, isolated environment for testing untrusted software. Any changes made within the sandbox are discarded when you close it. - - **Hyper-V VMs**: While VMs also offer isolation, they persistently store changes unless you revert them manually. + - Windows Sandbox: Provides a secure, isolated environment for testing untrusted software. Any changes made within the sandbox are discarded when you close it. + - Hyper-V VMs: While VMs also offer isolation, they persistently store changes unless you revert them manually. 1. **Resource Efficiency**: - - **Windows Sandbox**: More resource efficient than full VM. It adjusts memory usage according to the demand. It also reuses many of the host’s read only OS files. - - **Hyper-V VMs**: VMs have fixed resource allocations, which can impact overall system performance. + - Windows Sandbox: More resource efficient than full VM. It adjusts memory usage according to the demand. It also reuses many of the host's read only OS files. + - Hyper-V VMs: VMs have fixed resource allocations, which can impact overall system performance. 1. **Ease of Use**: - - **Windows Sandbox**: Simple to use—just open it, test your software, and close it. No complex setup or management. - - **Hyper-V VMs**: Require more configuration, including setting up virtual switches, network adapters, and managing VM snapshots. + - Windows Sandbox: Simple to use—just open it, test your software, and close it. No complex setup or management. + - Hyper-V VMs: Require more configuration, including setting up virtual switches, network adapters, and managing VM snapshots. - question: What applications aren't supported inside a Windows Sandbox? answer: | - Inbox apps (for example, Store, Notepad) and Optional features turned on via 'Turn Windows Features On or Off' are not supported. + Inbox apps (for example, Store, Notepad) and Optional features turned on via 'Turn Windows Features On or Off' aren't supported. While Store apps can be installed, you can't download them directly from the Store since the Store app isn't available in the Sandbox. However, if you have an `.appx` package, you can still install those apps. - name: Usage @@ -59,11 +59,11 @@ sections: - question: Installing the latest version of Windows Sandbox fails. How do I fix this? answer: | - Ensure that your device has access to the Internet, Windows Update and Microsoft Store. Beginning from Windows 11 24H2, the old Windows Sandbox app attempts to download the latest version from the Store. If the upgrade fails initially, installation continues in the background while the user can still use the app. Additionally, the app is queued in the "Updates & Downloads" section of the Microsoft Store app for users who wish to manually install it manually. + Ensure that your device has access to the Internet, Windows Update, and Microsoft Store. Beginning from Windows 11 24H2, the old Windows Sandbox app attempts to download the latest version from the Store. If the upgrade fails initially, installation continues in the background while the user can still use the app. Additionally, the app is queued in the "Updates & Downloads" section of the Microsoft Store app for users who wish to manually install it manually. - - question: How do I know which version of Windows Sandbox I am running? + - question: How do I know which version of Windows Sandbox am I running? answer: | - Run `Get-AppxPackage -Name WindowsSandbox | Select-Object Version` in a PowerShell prompt. If the version is empty, you are running an older version of Windows Sandbox. If this returns a set of digits, you are running the newer version. + Run `Get-AppxPackage -Name WindowsSandbox | Select-Object Version` in a PowerShell prompt. If the version is empty, you're running an older version of Windows Sandbox. If it returns a version number, you're running the newer version. Alternatively, if your Windows Sandbox app has a '...' button in the top-right corner that opens a drop-down menu, you're using the new version. - question: How do I save the Sandbox state? From 53fd912111cc3fcf1695e7add01770d19041783c Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 26 Nov 2024 10:11:54 -0700 Subject: [PATCH 018/123] Update link --- .../security/book/application-security-application-isolation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/book/application-security-application-isolation.md b/windows/security/book/application-security-application-isolation.md index f5a440d04b..bedd6481b2 100644 --- a/windows/security/book/application-security-application-isolation.md +++ b/windows/security/book/application-security-application-isolation.md @@ -91,7 +91,7 @@ A **Virtualization-based security enclave** is a software-based trusted executio [LINK-6]: /windows/win32/secauthz/app-isolation-packaging-with-vs [LINK-7]: https://blogs.windows.com/windowsdeveloper/2024/03/06/sandboxing-python-with-win32-app-isolation/ [LINK-8]: /windows/apps/windows-app-sdk/migrate-to-windows-app-sdk/feature-mapping-table?source=recommendations -[LINK-9]: /windows/security/application-security/application-isolation/windows-sandbox +[LINK-9]: /windows/security/application-security/application-isolation/windows-sandbox/index [LINK-10]: /windows/security/operating-system-security/network-security/windows-firewall/hyper-v-firewall [LINK-11]: /windows/wsl/networking#dns-tunneling [LINK-12]: /windows/wsl/networking#auto-proxy From bd4ae8fe0beba497de490eda13c92173f6205d76 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 26 Nov 2024 10:14:53 -0700 Subject: [PATCH 019/123] Update link --- .../security/book/application-security-application-isolation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/book/application-security-application-isolation.md b/windows/security/book/application-security-application-isolation.md index bedd6481b2..f5a440d04b 100644 --- a/windows/security/book/application-security-application-isolation.md +++ b/windows/security/book/application-security-application-isolation.md @@ -91,7 +91,7 @@ A **Virtualization-based security enclave** is a software-based trusted executio [LINK-6]: /windows/win32/secauthz/app-isolation-packaging-with-vs [LINK-7]: https://blogs.windows.com/windowsdeveloper/2024/03/06/sandboxing-python-with-win32-app-isolation/ [LINK-8]: /windows/apps/windows-app-sdk/migrate-to-windows-app-sdk/feature-mapping-table?source=recommendations -[LINK-9]: /windows/security/application-security/application-isolation/windows-sandbox/index +[LINK-9]: /windows/security/application-security/application-isolation/windows-sandbox [LINK-10]: /windows/security/operating-system-security/network-security/windows-firewall/hyper-v-firewall [LINK-11]: /windows/wsl/networking#dns-tunneling [LINK-12]: /windows/wsl/networking#auto-proxy From 83932149e53c8a15bd96850a50cbaf6c3c1e2ccf Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 14 Jan 2025 16:45:06 -0700 Subject: [PATCH 020/123] December DDF updates --- .../mdm/healthattestation-csp.md | 4 +- .../mdm/healthattestation-ddf.md | 4 +- .../mdm/policies-in-preview.md | 17 +- .../mdm/policy-csp-connectivity.md | 57 +++++- .../mdm/policy-csp-deliveryoptimization.md | 58 +++--- .../mdm/policy-csp-deviceguard.md | 68 ++++++- .../mdm/policy-csp-humanpresence.md | 181 +++++++++++++++++- .../mdm/policy-csp-printers.md | 54 +++++- windows/client-management/mdm/vpnv2-csp.md | 14 +- .../client-management/mdm/vpnv2-ddf-file.md | 12 +- 10 files changed, 415 insertions(+), 54 deletions(-) diff --git a/windows/client-management/mdm/healthattestation-csp.md b/windows/client-management/mdm/healthattestation-csp.md index 4367d3cb2f..a43aae095f 100644 --- a/windows/client-management/mdm/healthattestation-csp.md +++ b/windows/client-management/mdm/healthattestation-csp.md @@ -1,7 +1,7 @@ --- title: HealthAttestation CSP description: Learn more about the HealthAttestation CSP. -ms.date: 01/31/2024 +ms.date: 01/14/2025 --- @@ -51,7 +51,7 @@ The following list shows the HealthAttestation configuration service provider no | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 with [KB5046732](https://support.microsoft.com/help/5046732) [10.0.22621.4541] and later
✅ Windows 11, version 24H2 with [KB5046617](https://support.microsoft.com/help/5046617) [10.0.26100.2314] and later
✅ Windows Insider Preview | diff --git a/windows/client-management/mdm/healthattestation-ddf.md b/windows/client-management/mdm/healthattestation-ddf.md index 0c9d382872..5a273aecc4 100644 --- a/windows/client-management/mdm/healthattestation-ddf.md +++ b/windows/client-management/mdm/healthattestation-ddf.md @@ -1,7 +1,7 @@ --- title: HealthAttestation DDF file description: View the XML file containing the device description framework (DDF) for the HealthAttestation configuration service provider. -ms.date: 06/28/2024 +ms.date: 01/14/2025 --- @@ -436,7 +436,7 @@ The following XML file contains the device description framework (DDF) for the H - 99.9.99999 + 99.9.99999, 10.0.26100.2314, 10.0.22621.4541 1.4 diff --git a/windows/client-management/mdm/policies-in-preview.md b/windows/client-management/mdm/policies-in-preview.md index 0e4249d643..a728e43011 100644 --- a/windows/client-management/mdm/policies-in-preview.md +++ b/windows/client-management/mdm/policies-in-preview.md @@ -1,7 +1,7 @@ --- title: Configuration service provider preview policies description: Learn more about configuration service provider (CSP) policies that are available for Windows Insider Preview. -ms.date: 11/27/2024 +ms.date: 01/14/2025 --- @@ -31,6 +31,7 @@ This article lists the policies that are applicable for Windows Insider Preview ## Connectivity +- [DisableCrossDeviceResume](policy-csp-connectivity.md#disablecrossdeviceresume) - [UseCellularWhenWiFiPoor](policy-csp-connectivity.md#usecellularwhenwifipoor) - [DisableCellularSettingsPage](policy-csp-connectivity.md#disablecellularsettingspage) - [DisableCellularOperatorSettingsPage](policy-csp-connectivity.md#disablecellularoperatorsettingspage) @@ -46,6 +47,10 @@ This article lists the policies that are applicable for Windows Insider Preview - [DODisallowCacheServerDownloadsOnVPN](policy-csp-deliveryoptimization.md#dodisallowcacheserverdownloadsonvpn) - [DOVpnKeywords](policy-csp-deliveryoptimization.md#dovpnkeywords) +## DeviceGuard + +- [MachineIdentityIsolation](policy-csp-deviceguard.md#machineidentityisolation) + ## DevicePreparation CSP - [PageEnabled](devicepreparation-csp.md#pageenabled) @@ -80,6 +85,12 @@ This article lists the policies that are applicable for Windows Insider Preview - [AttestErrorMessage](healthattestation-csp.md#attesterrormessage) +## HumanPresence + +- [ForcePrivacyScreen](policy-csp-humanpresence.md#forceprivacyscreen) +- [ForcePrivacyScreenDim](policy-csp-humanpresence.md#forceprivacyscreendim) +- [ForcePrivacyScreenNotification](policy-csp-humanpresence.md#forceprivacyscreennotification) + ## InternetExplorer - [AllowLegacyURLFields](policy-csp-internetexplorer.md#allowlegacyurlfields) @@ -115,6 +126,10 @@ This article lists the policies that are applicable for Windows Insider Preview - [DisablePostLogonProvisioning](passportforwork-csp.md#devicetenantidpoliciesdisablepostlogonprovisioning) +## Printers + +- [ConfigureIppTlsCertificatePolicy](policy-csp-printers.md#configureipptlscertificatepolicy) + ## Reboot CSP - [WeeklyRecurrent](reboot-csp.md#scheduleweeklyrecurrent) diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index 5ed3127e3f..a58ea71af2 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -1,7 +1,7 @@ --- title: Connectivity Policy CSP description: Learn more about the Connectivity Area in Policy CSP. -ms.date: 11/05/2024 +ms.date: 01/14/2025 --- @@ -684,6 +684,61 @@ This policy makes all configurable settings in the 'Cellular' Settings page read + +## DisableCrossDeviceResume + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ❌ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```User +./User/Vendor/MSFT/Policy/Config/Connectivity/DisableCrossDeviceResume +``` + + + + +This policy allows IT admins to turn off CrossDeviceResume feature to continue tasks, such as browsing file, continue using 1P/3P apps that require linking between Phone and PC. + +- If you enable this policy setting, the Windows device won't receive any CrossDeviceResume notification. + +- If you disable this policy setting, the Windows device will receive notification to resume activity from linked phone. + +- If you don't configure this policy setting, the default behavior is that the CrossDeviceResume feature is turned 'ON'. Changes to this policy take effect on reboot. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 (Default) | CrossDeviceResume is Enabled. | +| 1 | CrossDeviceResume is Disabled. | + + + + + + + + ## DisableDownloadingOfPrintDriversOverHTTP diff --git a/windows/client-management/mdm/policy-csp-deliveryoptimization.md b/windows/client-management/mdm/policy-csp-deliveryoptimization.md index c058b8bccf..c8994390c1 100644 --- a/windows/client-management/mdm/policy-csp-deliveryoptimization.md +++ b/windows/client-management/mdm/policy-csp-deliveryoptimization.md @@ -1,7 +1,7 @@ --- title: DeliveryOptimization Policy CSP description: Learn more about the DeliveryOptimization Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 01/14/2025 --- @@ -93,7 +93,7 @@ The value 0 (zero) means "unlimited" cache; Delivery Optimization will clear the -Specifies whether the device is allowed to participate in Peer Caching while connected via VPN to the domain network. This means the device can download from or upload to other domain network devices, either on VPN or on the corporate domain network. +Specifies whether the device, with an active VPN connection, is allowed to participate in P2P or not. @@ -240,10 +240,18 @@ If this policy isn't configured, the client will attempt to automatically find a |:--|:--| | Format | `int` | | Access Type | Add, Delete, Get, Replace | -| Allowed Values | Range: `[0-4294967295]` | | Default Value | 0 | + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 1 | DHCP Option 235. | +| 2 | DHCP Option 235 Force. | + + **Group policy mapping**: @@ -342,7 +350,7 @@ The recommended value is 1 hour (3600). -Specifies the time in seconds to delay the fallback from Cache Server to the HTTP source for a background content download. Note that the DODelayBackgroundDownloadFromHttp policy takes precedence over this policy to allow downloads from peers first. +For background downloads that use a cache server, specifies the time to wait before falling back to download from the original HTTP source. @@ -397,7 +405,7 @@ Specifies the time in seconds to delay the fallback from Cache Server to the HTT -Specifies the time in seconds to delay the fallback from Cache Server to the HTTP source for foreground content download. Note that the DODelayForegroundDownloadFromHttp policy takes precedence over this policy to allow downloads from peers first. +For foreground downloads that use a cache server, specifies the time to wait before falling back to download from the original HTTP source. @@ -513,7 +521,7 @@ The recommended value is 1 minute (60). -Disallow downloads from Microsoft Connected Cache servers when the device connects via VPN. By default, the device is allowed to download from Microsoft Connected Cache when connected via VPN. +Specify to disallow downloads from Microsoft Connected Cache servers when the device has an active VPN connection. By default, the button is 'Not Set'. This means the device is allowed to download from Microsoft Connected Cache when the device has an active VPN connection. To block these downloads, turn the button on to 'Enabled'. @@ -535,8 +543,8 @@ Disallow downloads from Microsoft Connected Cache servers when the device connec | Value | Description | |:--|:--| -| 0 (Default) | Allowed. | -| 1 | Not allowed. | +| 0 (Default) | Not Set. | +| 1 | Enabled. | @@ -572,7 +580,7 @@ Disallow downloads from Microsoft Connected Cache servers when the device connec -Specifies the download method that Delivery Optimization can use in downloads of Windows Updates, Apps and App updates. The default value is 1. +Specifies the method that Delivery Optimization can use to download content on behalf of various Microsoft products. @@ -598,10 +606,10 @@ Specifies the download method that Delivery Optimization can use in downloads of |:--|:--| | 0 (Default) | HTTP only, no peering. | | 1 | HTTP blended with peering behind the same NAT. | -| 2 | When this option is selected, peering will cross NATs. To create a custom group use Group ID in combination with Mode 2. | +| 2 | HTTP blended with peering across a private group. | | 3 | HTTP blended with Internet peering. | -| 99 | Simple download mode with no peering. Delivery Optimization downloads using HTTP only and doesn't attempt to contact the Delivery Optimization cloud services. Added in Windows 10, version 1607. | -| 100 | Bypass mode. Windows 10: Don't use Delivery Optimization and use BITS instead. Windows 11: Deprecated, use Simple mode instead. | +| 99 | HTTP only, no peering, no use of DO cloud service. | +| 100 | Bypass mode, deprecated in Windows 11. | @@ -698,7 +706,7 @@ Note this is a best effort optimization and shouldn't be relied on for an authen -Set this policy to restrict peer selection to a specific source. Available options are: 1 = AD Site, 2 = Authenticated domain SID, 3 = DHCP Option ID, 4 = DNS Suffix, 5 = Microsoft Entra ID. When set, the Group ID will be assigned automatically from the selected source. This policy is ignored if the GroupID policy is also set. The options set in this policy only apply to Group (2) download mode. If Group (2) isn't set as Download mode, this policy will be ignored. For option 3 - DHCP Option ID, the client will query DHCP Option ID 234 and use the returned GUID value as the Group ID. Starting with Windows 10, version 1903, you can use the Microsoft Entra tenant ID as a means to define groups. To do this, set the value of DOGroupIdSource to 5. +Specifies the source of group ID used for peer selection. @@ -722,12 +730,12 @@ Set this policy to restrict peer selection to a specific source. Available optio | Value | Description | |:--|:--| -| 0 (Default) | Unset. | +| 0 (Default) | Not Set. | | 1 | AD site. | | 2 | Authenticated domain SID. | -| 3 | DHCP user option. | -| 4 | DNS suffix. | -| 5 | Microsoft Entra ID. | +| 3 | DHCP Option ID. | +| 4 | DNS Suffix. | +| 5 | Entra ID Tenant ID. | @@ -824,7 +832,7 @@ The default value 0 (zero) means that Delivery Optimization dynamically adjusts -Specifies the maximum time in seconds that each file is held in the Delivery Optimization cache after downloading successfully. The value 0 (zero) means unlimited; Delivery Optimization will hold the files in the cache longer and make the files available for uploads to other devices, as long as the cache size hasn't exceeded. The value 0 is new in Windows 10, version 1607. The default value is 604800 seconds (7 days). +Specifies the maximum time in seconds that each file is held in the Delivery Optimization cache after downloading successfully. @@ -879,7 +887,7 @@ Specifies the maximum time in seconds that each file is held in the Delivery Opt -Specifies the maximum cache size that Delivery Optimization can utilize, as a percentage of disk size (1-100). The default value is 20. +Specifies the maximum cache size that Delivery Optimization can utilize, as a percentage of the available drive space. @@ -991,7 +999,7 @@ The default value 0 (zero) means that Delivery Optimization dynamically adjusts -Specifies the minimum download QoS (Quality of Service or speed) in KiloBytes/sec for background downloads. This policy affects the blending of peer and HTTP sources. Delivery Optimization complements the download from the HTTP source to achieve the minimum QoS value set. The default value is 20480 (20 MB/s). +Specifies the minimum download QoS (Quality of Service) in KiloBytes/sec for background downloads. @@ -1165,7 +1173,7 @@ Recommended values: 64 GB to 256 GB. -Specifies the minimum content file size in MB enabled to use Peer Caching. Recommended values: 1 MB to 100,000 MB. The default value is 100 MB. +Specifies the minimum content file size in MB eligible to use P2P. @@ -1220,7 +1228,7 @@ Specifies the minimum content file size in MB enabled to use Peer Caching. Recom -Specifies the minimum RAM size in GB required to use Peer Caching. For example, if the minimum set is 1 GB, then devices with 1 GB or higher available RAM will be allowed to use Peer caching. Recommended values: 1 GB to 4 GB. The default value is 4 GB. +Specifies the minimum total RAM size in GB required to use P2P. @@ -1330,7 +1338,7 @@ By default, %SystemDrive% is used to store the cache. The drive location can be -Specifies the maximum total bytes in GB that Delivery Optimization is allowed to upload to Internet peers in each calendar month. The value 0 (zero) means unlimited; No monthly upload limit's applied if 0 is set. The default value is 5120 (5 TB). +Specifies the maximum bytes in GB that Delivery Optimization is allowed to upload to Internet peers in each calendar month. @@ -1501,7 +1509,7 @@ The default value 0 (zero) means that Delivery Optimization dynamically adjusts -Set this policy to restrict peer selection via selected option. Options available are: 1=Subnet mask, 2 = Local discovery (DNS-SD). These options apply to both Download Mode LAN (1) and Group (2). +Specifies to restrict peer selection using the selected method, in addition to the DownloadMode policy. @@ -1528,7 +1536,7 @@ In Windows 11 the 'Local Peer Discovery' option was introduced to restrict peer |:--|:--| | 0 (Default) | None. | | 1 | Subnet mask. | -| 2 | Local peer discovery (DNS-SD). | +| 2 | Local discovery (DNS-SD). | diff --git a/windows/client-management/mdm/policy-csp-deviceguard.md b/windows/client-management/mdm/policy-csp-deviceguard.md index c27a142696..ba7cfacf34 100644 --- a/windows/client-management/mdm/policy-csp-deviceguard.md +++ b/windows/client-management/mdm/policy-csp-deviceguard.md @@ -1,7 +1,7 @@ --- title: DeviceGuard Policy CSP description: Learn more about the DeviceGuard Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 01/14/2025 --- @@ -9,6 +9,8 @@ ms.date: 01/18/2024 # Policy CSP - DeviceGuard +[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] + @@ -205,6 +207,70 @@ Credential Guard Configuration: 0 - Turns off CredentialGuard remotely if config + +## MachineIdentityIsolation + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ❌ Pro
✅ Enterprise
✅ Education
❌ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/DeviceGuard/MachineIdentityIsolation +``` + + + + +Machine Identity Isolation: 0 - Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key. 1 - Machine password both LSASS-bound and IUM-bound. It's stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys. 2 - Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 (Default) | (Disabled) Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key. | +| 1 | (Enabled in audit mode) Machine password both LSASS-bound and IUM-bound. It's stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys. | +| 2 | (Enabled in enforcement mode) Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | VirtualizationBasedSecurity | +| Friendly Name | Turn On Virtualization Based Security | +| Element Name | Machine Identity Isolation Configuration. | +| Location | Computer Configuration | +| Path | System > Device Guard | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeviceGuard | +| ADMX File Name | DeviceGuard.admx | + + + + + + + + ## RequirePlatformSecurityFeatures diff --git a/windows/client-management/mdm/policy-csp-humanpresence.md b/windows/client-management/mdm/policy-csp-humanpresence.md index 1cf592ddff..b27018ae74 100644 --- a/windows/client-management/mdm/policy-csp-humanpresence.md +++ b/windows/client-management/mdm/policy-csp-humanpresence.md @@ -1,7 +1,7 @@ --- title: HumanPresence Policy CSP description: Learn more about the HumanPresence Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 01/14/2025 --- @@ -9,6 +9,8 @@ ms.date: 09/27/2024 # Policy CSP - HumanPresence +[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] + @@ -526,6 +528,183 @@ Determines the timeout for Lock on Leave forced by the MDM policy. The user will + +## ForcePrivacyScreen + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
❌ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/HumanPresence/ForcePrivacyScreen +``` + + + + +Determines whether detect when other people are looking at my screen is forced on/off by the MDM policy. The user won't be able to change this setting and the UI will be greyed out. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 2 | ForcedOff. | +| 1 | ForcedOn. | +| 0 (Default) | DefaultToUserChoice. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | ForcePrivacyScreen | +| Path | Sensors > AT > WindowsComponents > HumanPresence | + + + + + + + + + +## ForcePrivacyScreenDim + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
❌ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/HumanPresence/ForcePrivacyScreenDim +``` + + + + +Determines whether dim the screen when other people are looking at my screen checkbox is forced checked/unchecked by the MDM policy. The user won't be able to change this setting and the checkbox in the UI will be greyed out. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 2 | ForcedUnchecked. | +| 1 | ForcedChecked. | +| 0 (Default) | DefaultToUserChoice. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | ForcePrivacyScreenDim | +| Path | Sensors > AT > WindowsComponents > HumanPresence | + + + + + + + + + +## ForcePrivacyScreenNotification + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
❌ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/HumanPresence/ForcePrivacyScreenNotification +``` + + + + +Determines whether providing alert when people are looking at my screen checkbox is forced checked/unchecked by the MDM policy. The user won't be able to change this setting and the checkbox in the UI will be greyed out. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 2 | ForcedUnchecked. | +| 1 | ForcedChecked. | +| 0 (Default) | DefaultToUserChoice. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | ForcePrivacyScreenNotification | +| Path | Sensors > AT > WindowsComponents > HumanPresence | + + + + + + + + diff --git a/windows/client-management/mdm/policy-csp-printers.md b/windows/client-management/mdm/policy-csp-printers.md index 098733446d..b852afb0b4 100644 --- a/windows/client-management/mdm/policy-csp-printers.md +++ b/windows/client-management/mdm/policy-csp-printers.md @@ -1,7 +1,7 @@ --- title: Printers Policy CSP description: Learn more about the Printers Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 01/14/2025 --- @@ -11,6 +11,8 @@ ms.date: 09/27/2024 [!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)] +[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] + @@ -348,6 +350,56 @@ The following are the supported values: + +## ConfigureIppTlsCertificatePolicy + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Printers/ConfigureIppTlsCertificatePolicy +``` + + + + + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | + + + + +[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)] + +**ADMX mapping**: + +| Name | Value | +|:--|:--| +| Name | ConfigureIppTlsCertificatePolicy | +| ADMX File Name | Printing.admx | + + + + + + + + ## ConfigureRedirectionGuardPolicy diff --git a/windows/client-management/mdm/vpnv2-csp.md b/windows/client-management/mdm/vpnv2-csp.md index 58d6463c97..f8ca2e1a8a 100644 --- a/windows/client-management/mdm/vpnv2-csp.md +++ b/windows/client-management/mdm/vpnv2-csp.md @@ -1,7 +1,7 @@ --- title: VPNv2 CSP description: Learn more about the VPNv2 CSP. -ms.date: 01/18/2024 +ms.date: 01/14/2025 --- @@ -863,11 +863,7 @@ Returns the type of App/Id. This value can be either of the following: PackageFa -False: Don't Bypass for Local traffic. - -True: ByPass VPN Interface for Local Traffic. - -Optional. When this setting is True, requests to local resources that are available on the same Wi-Fi network as the VPN client can bypass the VPN. For example, if enterprise policy for VPN requires force tunnel for VPN, but enterprise intends to allow the remote user to connect locally to media center in their home, then this option should be set to True. The user can bypass VPN for local subnet traffic. When this is set to False, the setting is disabled and no subnet exceptions are allowed. +Not supported. @@ -5160,11 +5156,7 @@ Returns the type of App/Id. This value can be either of the following: PackageFa -False: Don't Bypass for Local traffic. - -True: ByPass VPN Interface for Local Traffic. - -Optional. When this setting is True, requests to local resources that are available on the same Wi-Fi network as the VPN client can bypass the VPN. For example, if enterprise policy for VPN requires force tunnel for VPN, but enterprise intends to allow the remote user to connect locally to media center in their home, then this option should be set to True. The user can bypass VPN for local subnet traffic. When this is set to False, the setting is disabled and no subnet exceptions are allowed. +Not supported. diff --git a/windows/client-management/mdm/vpnv2-ddf-file.md b/windows/client-management/mdm/vpnv2-ddf-file.md index abe39e405a..8927c4cc29 100644 --- a/windows/client-management/mdm/vpnv2-ddf-file.md +++ b/windows/client-management/mdm/vpnv2-ddf-file.md @@ -1,7 +1,7 @@ --- title: VPNv2 DDF file description: View the XML file containing the device description framework (DDF) for the VPNv2 configuration service provider. -ms.date: 06/28/2024 +ms.date: 01/14/2025 --- @@ -1156,10 +1156,7 @@ The following XML file contains the device description framework (DDF) for the V - False : Do not Bypass for Local traffic - True : ByPass VPN Interface for Local Traffic - - Optional. When this setting is True, requests to local resources that are available on the same Wi-Fi network as the VPN client can bypass the VPN. For example, if enterprise policy for VPN requires force tunnel for VPN, but enterprise intends to allow the remote user to connect locally to media center in their home, then this option should be set to True. The user can bypass VPN for local subnet traffic. When this is set to False, the setting is disabled and no subnet exceptions are allowed. + Not supported. @@ -4425,10 +4422,7 @@ A device tunnel profile must be deleted before another device tunnel profile can - False : Do not Bypass for Local traffic - True : ByPass VPN Interface for Local Traffic - - Optional. When this setting is True, requests to local resources that are available on the same Wi-Fi network as the VPN client can bypass the VPN. For example, if enterprise policy for VPN requires force tunnel for VPN, but enterprise intends to allow the remote user to connect locally to media center in their home, then this option should be set to True. The user can bypass VPN for local subnet traffic. When this is set to False, the setting is disabled and no subnet exceptions are allowed. + Not supported. From 7742185b2bdb537fcb6ff81d702d2c3a263d6d2a Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Wed, 15 Jan 2025 09:43:25 -0700 Subject: [PATCH 021/123] Fix link --- windows/security/book/includes/windows-sandbox.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/book/includes/windows-sandbox.md b/windows/security/book/includes/windows-sandbox.md index 8e2f55f747..d8d6385b3f 100644 --- a/windows/security/book/includes/windows-sandbox.md +++ b/windows/security/book/includes/windows-sandbox.md @@ -14,4 +14,4 @@ Once Windows Sandbox is closed, nothing persists on the device. All the software [!INCLUDE [learn-more](learn-more.md)] -- [Windows Sandbox](/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview) +- [Windows Sandbox](/windows/security/application-security/application-isolation/windows-sandbox) From b34d3f8baadc0a6e220399a86b5a9a4e1a12cc58 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Wed, 15 Jan 2025 10:13:34 -0700 Subject: [PATCH 022/123] Implement feedback --- .../application-isolation/windows-sandbox/index.md | 3 +++ .../windows-sandbox/windows-sandbox-cli.md | 12 ++++++------ .../windows-sandbox/windows-sandbox-faq.yml | 13 ++++++++----- 3 files changed, 17 insertions(+), 11 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/index.md b/windows/security/application-security/application-isolation/windows-sandbox/index.md index 33aa59a1b8..90957adc4b 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/index.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/index.md @@ -33,6 +33,9 @@ WSB can be used without any technical skills in various scenarios where users ne - **Testing or demoing new software for the first time**: Test drive or demo new software, preview versions, extensions, or add-ons without the hassle of installing and then uninstalling on your host machine. - **Maintaining multiple dev environments**: Streamline your development process by utilizing WSB to maintain multiple sandboxes for different development environments. For example, maintain a sandbox for each python version and its dependencies! +> [!NOTE] +> Windows Sandbox currently doesn't allow multiple instances to run simultaneously. + [!INCLUDE [windows-sandbox](../../../../../includes/licensing/windows-sandbox.md)] diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md index 896af70b77..c181a80a91 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-cli.md @@ -32,7 +32,7 @@ The start command creates and launches a new sandbox. The command returns the sa - Create a Windows Sandbox environment with a custom configuration: ```cmd - wsb start --config "Disabled" + wsb start --config "Disabled" ``` ## List @@ -50,7 +50,7 @@ The exec command executes a command in the sandbox. The command takes two argume > [!NOTE] > Currently, there is no support for process I/O meaning that there is no way to retrieve the output of a command run in Sandbox. -Commands in Windows Sandbox can be executed in the system context or in the context of the currently logged on user. However, there's no way to sign-in a user without an active RDP session. Therefore, there currently is no way to execute commands in the user context unless there's an active RDP session. +An active user session is required to execute a command in the context of the currently logged on user. Therefore, before running this command a remote desktop connection should be established. This can be done using the [connect](#connect) command. - `--id ` (REQUIRED): ID of the Windows Sandbox environment. - `-c, --command ` (REQUIRED): The command to execute within Windows Sandbox. @@ -71,17 +71,17 @@ The stop command terminates the sandbox process and releases the resources alloc wsb stop --id 12345678-1234-1234-1234-1234567890AB ``` -## Map +## Share -The map command maps a host folder to a folder in the sandbox. The command takes three arguments: the sandbox ID, the host path, and the sandbox path. The host path should be a folder. The sandbox path can be either an existing or a new folder. The share command allows the user to share files and folders between the host and the sandbox. An Additional, `--allow-write` option can be used to allow or disallow the Windows Sandbox environment to write to the folder. +The share command shares a host folder with the sandbox. The command takes three arguments: the sandbox ID, the host path, and the sandbox path. The host path should be a folder. The sandbox path can be either an existing or a new folder. An Additional, `--allow-write` option can be used to allow or disallow the Windows Sandbox environment to write to the folder. - `--id ` (REQUIRED): ID of the Windows Sandbox environment. -- `-f, --host-path ` (REQUIRED): Path to folder that is mapped from the host. +- `-f, --host-path ` (REQUIRED): Path to folder that is shared from the host. - `-s, --sandbox-path ` (REQUIRED): Path to the folder within the Windows Sandbox. - `-w, --allow-write`: If specified, the Windows Sandbox environment is allowed to write to the shared folder. ```cmd -wsb map --id 12345678-1234-1234-1234-1234567890AB -f C:\host\folder -s C:\sandbox\folder --allow-write +wsb share --id 12345678-1234-1234-1234-1234567890AB -f C:\host\folder -s C:\sandbox\folder --allow-write ``` ## Connect diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml index bcec797106..16847cf371 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml @@ -35,7 +35,7 @@ sections: - Windows Sandbox: Provides a secure, isolated environment for testing untrusted software. Any changes made within the sandbox are discarded when you close it. - Hyper-V VMs: While VMs also offer isolation, they persistently store changes unless you revert them manually. 1. **Resource Efficiency**: - - Windows Sandbox: More resource efficient than full VM. It adjusts memory usage according to the demand. It also reuses many of the host's read only OS files. + - Windows Sandbox: More resource efficient than a full VM. It adjusts memory usage according to the demand. It also reuses many of the host's read only OS files. - Hyper-V VMs: VMs have fixed resource allocations, which can impact overall system performance. 1. **Ease of Use**: - Windows Sandbox: Simple to use—just open it, test your software, and close it. No complex setup or management. @@ -59,12 +59,13 @@ sections: - question: Installing the latest version of Windows Sandbox fails. How do I fix this? answer: | - Ensure that your device has access to the Internet, Windows Update, and Microsoft Store. Beginning from Windows 11 24H2, the old Windows Sandbox app attempts to download the latest version from the Store. If the upgrade fails initially, installation continues in the background while the user can still use the app. Additionally, the app is queued in the "Updates & Downloads" section of the Microsoft Store app for users who wish to manually install it manually. + Ensure that your device has access to the Internet, Windows Update, and Microsoft Store. Beginning from Windows 11 24H2, the old Windows Sandbox app attempts to download the latest version from the Store. If the upgrade fails on the first attempt, subsequent attempts continue in the background. Meanwhile, the app can still be used. Additionally, the installation app is queued in the "Updates & Downloads" section of the Microsoft Store app for users who wish to manually install. - question: How do I know which version of Windows Sandbox am I running? answer: | Run `Get-AppxPackage -Name WindowsSandbox | Select-Object Version` in a PowerShell prompt. If the version is empty, you're running an older version of Windows Sandbox. If it returns a version number, you're running the newer version. - Alternatively, if your Windows Sandbox app has a '...' button in the top-right corner that opens a drop-down menu, you're using the new version. + Alternatively, you can run `wsb --version`. If `wsb` is not available, you're running an older version of Windows Sandbox. + The new version of Windows Sandbox also appears in Windows Settings under **System** > **System components**. - question: How do I save the Sandbox state? answer: | @@ -76,7 +77,9 @@ sections: - question: How do I uninstall Windows Sandbox? answer: | - Run the following PowerShell cmdlet to uninstall the app: `Get-AppxPackage -name WindowsSandbox | Remove-AppxPackage` + Run the following PowerShell cmdlet to uninstall the Windows Sandbox app: `Get-AppxPackage -name WindowsSandbox | Remove-AppxPackage` + + To completely remove Windows Sandbox, and all its components, navigate to **Settings > System > Optional features**, then select **More Windows features**, scroll down and unselect Windows Sandbox, then select OK. - name: Feedback questions: @@ -95,7 +98,7 @@ sections: - Behavior you were expecting. 1. Select an appropriate category and subcategory by using the dropdown menus. There's a dedicated option in Feedback Hub to file **Windows Sandbox** bugs and feedback. It's located under **Security and Privacy** category. 1. Select **Next**. - 1. If necessary, you can collect traces for the issue as follows: Select the Recreate my problem tile, then select Start capture, reproduce the issue, and then select **Stop capture**. + 1. If you are able to reproduce the issue, please collect traces as follows: Select the Recreate my problem tile, then select Start capture, reproduce the issue, and then select **Stop capture**. 1. Attach any relevant screenshots or files for the problem, then select **Submit**. Alternatively, you can also use the [Windows Sandbox GitHub repository](https://github.com/microsoft/Windows-Sandbox) to: From a86ca422c4884bb8ebafef9c706d96dbd0d130b7 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Wed, 15 Jan 2025 13:20:15 -0700 Subject: [PATCH 023/123] Feedback --- .../windows-sandbox/windows-sandbox-faq.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml index 16847cf371..ca1408a957 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-faq.yml @@ -59,7 +59,8 @@ sections: - question: Installing the latest version of Windows Sandbox fails. How do I fix this? answer: | - Ensure that your device has access to the Internet, Windows Update, and Microsoft Store. Beginning from Windows 11 24H2, the old Windows Sandbox app attempts to download the latest version from the Store. If the upgrade fails on the first attempt, subsequent attempts continue in the background. Meanwhile, the app can still be used. Additionally, the installation app is queued in the "Updates & Downloads" section of the Microsoft Store app for users who wish to manually install. + Ensure that your device has access to the Internet, Windows Update, and Microsoft Store. Beginning from Windows 11 24H2, the old Windows Sandbox app attempts to download the latest version from the Store. If the upgrade fails on the first attempt, subsequent attempts continue in the background. Meanwhile, the app can still be used. Additionally, the update is queued in the "Updates & Downloads" section of the Microsoft Store app for users who wish to manually install. + - question: How do I know which version of Windows Sandbox am I running? answer: | @@ -77,9 +78,7 @@ sections: - question: How do I uninstall Windows Sandbox? answer: | - Run the following PowerShell cmdlet to uninstall the Windows Sandbox app: `Get-AppxPackage -name WindowsSandbox | Remove-AppxPackage` - - To completely remove Windows Sandbox, and all its components, navigate to **Settings > System > Optional features**, then select **More Windows features**, scroll down and unselect Windows Sandbox, then select OK. + To remove Windows Sandbox, and all its components, navigate to **Settings > System > Optional features**, then select **More Windows features**, scroll down and unselect Windows Sandbox, then select OK. - name: Feedback questions: From 6937671796a00c3999e5395b45d37f5c153f89b7 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 21 Jan 2025 14:25:02 -0700 Subject: [PATCH 024/123] Updates --- .../mdm/policy-csp-deliveryoptimization.md | 92 +++++-------------- 1 file changed, 22 insertions(+), 70 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-deliveryoptimization.md b/windows/client-management/mdm/policy-csp-deliveryoptimization.md index c8994390c1..6fd24a5ef3 100644 --- a/windows/client-management/mdm/policy-csp-deliveryoptimization.md +++ b/windows/client-management/mdm/policy-csp-deliveryoptimization.md @@ -1,7 +1,7 @@ --- title: DeliveryOptimization Policy CSP description: Learn more about the DeliveryOptimization Area in Policy CSP. -ms.date: 01/14/2025 +ms.date: 01/21/2025 --- @@ -34,11 +34,7 @@ ms.date: 01/14/2025 -Specifies the maximum size in GB of Delivery Optimization cache. - -This policy overrides the DOMaxCacheSize policy. - -The value 0 (zero) means "unlimited" cache; Delivery Optimization will clear the cache when the device runs low on disk space. +Specifies the maximum size in GB of Delivery Optimization cache. This policy overrides the MaxCacheSize policy. @@ -125,8 +121,8 @@ Specifies whether the device, with an active VPN connection, is allowed to parti | Name | Value | |:--|:--| | Name | AllowVPNPeerCaching | -| Friendly Name | Enable Peer Caching while the device connects via VPN | -| Element Name | Enable Peer Caching while the device connects via VPN. | +| Friendly Name | Enable P2P while the device connects via VPN | +| Element Name | Enable P2P while the device connects via VPN. | | Location | Computer Configuration | | Path | Windows Components > Delivery Optimization | | Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization | @@ -156,9 +152,7 @@ Specifies whether the device, with an active VPN connection, is allowed to parti -This policy allows you to set one or more Microsoft Connected Cache servers that will be used by your client(s). - -One or more values can be added as either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address by commas. +Specifies one or more Microsoft Connected Cache servers that will be used by your client(s). One or more values can be added as either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address by commas. @@ -214,17 +208,10 @@ One or more values can be added as either fully qualified domain names (FQDN) or -This policy allows you to specify how your client(s) can discover Microsoft Connected Cache servers dynamically. - -Options available are: - -0 = Disable DNS-SD. - -1 = DHCP Option 235. +Specifies how your client(s) can discover Microsoft Connected Cache servers dynamically. +1 = DHCP Option 235 2 = DHCP Option 235 Force. - -If this policy isn't configured, the client will attempt to automatically find a cache server using DNS-SD. If set to 0, the client won't use DNS-SD to automatically find a cache server. If set to 1 or 2, the client will query DHCP Option ID 235 and use the returned value as the Cache Server Hostname. Option 2 overrides the Cache Server Hostname policy, if configured. @@ -289,13 +276,7 @@ If this policy isn't configured, the client will attempt to automatically find a -This policy allows you to delay the use of an HTTP source in a background download that's allowed to use P2P. - -After the max delay has reached, the download will resume using HTTP, either downloading the entire payload or complementing the bytes that couldn't be downloaded from Peers. - -Note that a download that's waiting for peer sources, will appear to be stuck for the end user. - -The recommended value is 1 hour (3600). +For background downloads that use P2P, specifies the time to wait before starting to download from the HTTP source. @@ -319,7 +300,7 @@ The recommended value is 1 hour (3600). | Name | Value | |:--|:--| | Name | DelayBackgroundDownloadFromHttp | -| Friendly Name | Delay background download from http (in secs) | +| Friendly Name | Delay background download from http (in seconds) | | Element Name | Delay background download from http (in secs) | | Location | Computer Configuration | | Path | Windows Components > Delivery Optimization | @@ -460,13 +441,7 @@ For foreground downloads that use a cache server, specifies the time to wait bef -This policy allows you to delay the use of an HTTP source in a foreground (interactive) download that's allowed to use P2P. - -After the max delay has reached, the download will resume using HTTP, either downloading the entire payload or complementing the bytes that couldn't be downloaded from Peers. - -Note that a download that's waiting for peer sources, will appear to be stuck for the end user. - -The recommended value is 1 minute (60). +For foreground downloads that use P2P, specifies the time to wait before starting to download from the HTTP source. @@ -490,7 +465,7 @@ The recommended value is 1 minute (60). | Name | Value | |:--|:--| | Name | DelayForegroundDownloadFromHttp | -| Friendly Name | Delay Foreground download from http (in secs) | +| Friendly Name | Delay Foreground download from http (in seconds) | | Element Name | Delay Foreground download from http (in secs) | | Location | Computer Configuration | | Path | Windows Components > Delivery Optimization | @@ -649,11 +624,7 @@ Specifies the method that Delivery Optimization can use to download content on b -Group ID must be set as a GUID. This Policy specifies an arbitrary group ID that the device belongs to. - -Use this if you need to create a single group for Local Network Peering for branches that are on different domains or aren't on the same LAN. - -Note this is a best effort optimization and shouldn't be relied on for an authentication of identity. +Specifies an arbitrary group ID that the device belongs to. A GUID must be used. @@ -776,8 +747,6 @@ Specifies the source of group ID used for peer selection. Specifies the maximum background download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization. - -The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads. @@ -943,8 +912,6 @@ Specifies the maximum cache size that Delivery Optimization can utilize, as a pe Specifies the maximum foreground download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization. - -The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads. @@ -1054,11 +1021,7 @@ Specifies the minimum download QoS (Quality of Service) in KiloBytes/sec for bac -Specify any value between 1 and 100 (in percentage) to allow the device to upload data to LAN and Group peers while on DC power (Battery). - -The recommended value to set if you allow uploads on battery is 40 (for 40%). The device can download from peers while on battery regardless of this policy. - -The value 0 means "not-limited"; The cloud service set default value will be used. +Specifies the minimum battery level required for uploading to peers, while on battery power. @@ -1113,12 +1076,7 @@ The value 0 means "not-limited"; The cloud service set default value will be use -Specifies the required minimum disk size (capacity in GB) for the device to use Peer Caching. The cloud service set default value will be used. - -Recommended values: 64 GB to 256 GB. - -> [!NOTE] -> If the DOModifyCacheDrive policy is set, the disk size check will apply to the new working directory specified by this policy. +Specifies the required minimum total disk size in GB for the device to use P2P. @@ -1142,8 +1100,8 @@ Recommended values: 64 GB to 256 GB. | Name | Value | |:--|:--| | Name | MinDiskSizeAllowedToPeer | -| Friendly Name | Minimum disk size allowed to use Peer Caching (in GB) | -| Element Name | Minimum disk size allowed to use Peer Caching (in GB) | +| Friendly Name | Minimum disk size allowed to use P2P (in GB) | +| Element Name | Minimum disk size allowed to use P2P (in GB) | | Location | Computer Configuration | | Path | Windows Components > Delivery Optimization | | Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization | @@ -1197,8 +1155,8 @@ Specifies the minimum content file size in MB eligible to use P2P. | Name | Value | |:--|:--| | Name | MinFileSizeToCache | -| Friendly Name | Minimum Peer Caching Content File Size (in MB) | -| Element Name | Minimum Peer Caching Content File Size (in MB) | +| Friendly Name | Minimum P2P Content File Size (in MB) | +| Element Name | Minimum P2P Content File Size (in MB) | | Location | Computer Configuration | | Path | Windows Components > Delivery Optimization | | Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization | @@ -1252,8 +1210,8 @@ Specifies the minimum total RAM size in GB required to use P2P. | Name | Value | |:--|:--| | Name | MinRAMAllowedToPeer | -| Friendly Name | Minimum RAM capacity (inclusive) required to enable use of Peer Caching (in GB) | -| Element Name | Minimum RAM capacity (inclusive) required to enable use of Peer Caching (in GB) | +| Friendly Name | Minimum RAM capacity (inclusive) required to enable use of P2P (in GB) | +| Element Name | Minimum RAM capacity (inclusive) required to enable use of P2P (in GB) | | Location | Computer Configuration | | Path | Windows Components > Delivery Optimization | | Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization | @@ -1283,9 +1241,7 @@ Specifies the minimum total RAM size in GB required to use P2P. -Specifies the drive Delivery Optimization shall use for its cache. - -By default, %SystemDrive% is used to store the cache. The drive location can be specified using environment variables, drive letter or using a full path. +Specifies the drive that Delivery Optimization should use for its cache. The drive location can be specified using environment variables, drive letter or using a full path. @@ -1394,8 +1350,6 @@ Specifies the maximum bytes in GB that Delivery Optimization is allowed to uploa Specifies the maximum background download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth. - -The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for background downloads. @@ -1453,8 +1407,6 @@ Downloads from LAN peers won't be throttled even when this policy is set. Specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth. - -The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for foreground downloads. @@ -1689,7 +1641,7 @@ This policy allows an IT Admin to define the following details: -This policy allows you to set one or more keywords used to recognize VPN connections. To add multiple keywords, separate them with commas. +Specifies one or more keywords used to recognize VPN connections. To add multiple keywords, separate each by a comma. From 682bf3f67fb7995ed8be63b899adff8b332c12c3 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 22 Jan 2025 15:51:43 -0800 Subject: [PATCH 025/123] ccu-9693727 --- .../catalog-checkpoint-cumulative-updates.md | 66 +++++++++++++++++++ 1 file changed, 66 insertions(+) create mode 100644 windows/deployment/update/catalog-checkpoint-cumulative-updates.md diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md new file mode 100644 index 0000000000..66e7894d4f --- /dev/null +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -0,0 +1,66 @@ +--- +title: Checkpoint cumulative updates and the Microsoft Update Catalog +description: This article describes how to handle checkpoint cumulative updates when you use the Microsoft Update Catalog to update devices and images. +ms.service: windows-client +ms.subservice: itpro-updates +ms.topic: conceptual +ms.author: mstewart +author: mestew +manager: aaroncz +ms.collection: + - tier2 +ms.localizationpriority: medium +appliesto: + - ✅ Windows 11, version 24H2 and later +ms.date: 01/23/2025 +--- + +# Checkpoint cumulative updates and Microsoft Update Catalog usage + +Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates may be preceded by a checkpoint cumulative update (CU). Devices (and images) updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint CUs, so update processes involving WU and WSUS remain unchanged. This article covers how Catalog users can easily update their devices (or images) through checkpoint CUs. + +## Checkpoint CUs + +Windows 11 quality updates use servicing technology and are built cumulatively from the time when a new Windows OS was "released to manufacturing" (RTM). These monthly updates include all the changes since RTM in the form of binary differentials computed from the initial version of those binaries. + +With Windows 11, version 24H2, Microsoft introduced a new concept of checkpoint cumulative updates. This will allow you to get features and security enhancements via the latest cumulative update through smaller, incremental differentials containing only the changes since the previous checkpoint cumulative update. This means that you can save time, bandwidth, and hard drive space. + +Going forward, Microsoft might periodically release cumulative updates as checkpoints. The subsequent updates will then consist of: +- The update package files associated with the checkpoints, and +- New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. + +This process may be repeated multiple times, thereby generating multiple checkpoints during the lifecycle of a given Windows release. The Windows 11, version 24H2 servicing stack can merge all the checkpoints and only download and install content that's missing on the device. + +If any checkpoint CUs precede a target update, a device or image needs to take all prior checkpoint CUs before it can take the target update. In other words, a post-checkpoint LCU can be applied to images/devices that are on that checkpoint or on a subsequent LCU. For updates sourced from WU and WSUS this happens seamlessly, and you can continue to use the same tools and processes that you currently use for approving and deploying updates. + +### Applicability + +A checkpoint CU is just another monthly security update that informs how subsequent updates are built. There is no policy change or new requirement around when users must take these updates, though it is best practice to take monthly security updates at the earliest opportunity to keep your devices protected and productive. + +This feature does not introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). + +WinRE is serviced by applying the servicing stack update (SSU) from OnePackage (LCU does not apply) and SafeOS DU. This is how it has been for a while now, and there is no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying SSU then SafeOS DU is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). + +### Current Checkpoint CUs + +For Windows 11, version 24H2 and above, for a given update the KB article will note all preceding checkpoint CUs under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint CU will position you to efficiently take future checkpoint CUs. + +## Updating from the Microsoft Update Catalog + +When installing a given monthly security or optional nonsecurity preview update, [Microsoft Update Catalog](https://www.catalog.update.microsoft.com) users can determine and download the prior checkpoint CUs and apply these sequentially under certain situations or in one go using DISM. + +### Finding prior Checkpoint CUs + +For a given update, users can look up the KB article and find all preceding checkpoints, if any, listed under the **Catalog** release channel. For instance, the 2024-12 monthly security update (KB5048667) has one preceding checkpoint CU per [December 10, 2024—KB5048667 (OS Build 26100.2605)](https://support.microsoft.com/topic/708755a6-d809-4a8a-8d20-53c4108590e6#ID0ELBD=Catalog): + + +

+**Method 2: Install each MSU file individually, in order** + +Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order: + +- windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu +- windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu + +

+ From f2bfea529bb9735e71bebb35ce5b87005da5aff0 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 22 Jan 2025 15:56:20 -0800 Subject: [PATCH 026/123] ccu-9693727 --- .../catalog-checkpoint-cumulative-updates.md | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index 66e7894d4f..c71bab2808 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -55,12 +55,10 @@ For a given update, users can look up the KB article and find all preceding chec

-**Method 2: Install each MSU file individually, in order** - -Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order: - -- windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu -- windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu - -

+Method 2: Install each MSU file individually, in order

+

+Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

+

+

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
    • +
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu

From 1b7a8b67ffbf62f74038639b982cc760045a06c7 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 22 Jan 2025 16:08:51 -0800 Subject: [PATCH 027/123] ccu-9693727 --- .../update/catalog-checkpoint-cumulative-updates.md | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index c71bab2808..dc46168501 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -54,11 +54,8 @@ When installing a given monthly security or optional nonsecurity preview update, For a given update, users can look up the KB article and find all preceding checkpoints, if any, listed under the **Catalog** release channel. For instance, the 2024-12 monthly security update (KB5048667) has one preceding checkpoint CU per [December 10, 2024—KB5048667 (OS Build 26100.2605)](https://support.microsoft.com/topic/708755a6-d809-4a8a-8d20-53c4108590e6#ID0ELBD=Catalog): -

-Method 2: Install each MSU file individually, in order

-

-Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

-

-

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
    • -
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu

+| | +|---| +|Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu
| +> Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu
\ No newline at end of file From ca009c6fd50474152576d128bfad6a55dfd7b928 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 23 Jan 2025 11:12:49 -0800 Subject: [PATCH 028/123] ccu-9693727 --- .../catalog-checkpoint-cumulative-updates.md | 44 ++++++++++++++++--- 1 file changed, 38 insertions(+), 6 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index dc46168501..b6e802f722 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -43,7 +43,7 @@ WinRE is serviced by applying the servicing stack update (SSU) from OnePackage ( ### Current Checkpoint CUs -For Windows 11, version 24H2 and above, for a given update the KB article will note all preceding checkpoint CUs under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint CU will position you to efficiently take future checkpoint CUs. +For Windows 11, version 24H2 and above, for a given update the knowledge base (KB) article will note all preceding checkpoint CUs under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint CU will position you to efficiently take future checkpoint CUs. ## Updating from the Microsoft Update Catalog @@ -51,11 +51,43 @@ When installing a given monthly security or optional nonsecurity preview update, ### Finding prior Checkpoint CUs -For a given update, users can look up the KB article and find all preceding checkpoints, if any, listed under the **Catalog** release channel. For instance, the 2024-12 monthly security update (KB5048667) has one preceding checkpoint CU per [December 10, 2024—KB5048667 (OS Build 26100.2605)](https://support.microsoft.com/topic/708755a6-d809-4a8a-8d20-53c4108590e6#ID0ELBD=Catalog): +For a given update, users can look up the KB article and find all preceding checkpoints, if any, listed under the **Catalog** release channel. For instance, the 2024-12 monthly security update (KB5048667) has one preceding checkpoint CU per [December 10, 2024-KB5048667 (OS Build 26100.2605)](https://support.microsoft.com/topic/708755a6-d809-4a8a-8d20-53c4108590e6#ID0ELBD=Catalog): + > Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu
-| | -|---| -|Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu
| +Alternately, users can search the KB number in the [Microsoft Update Catalog](https://catalog.update.microsoft.com/) and select the **Download** button for the selected architecture. The download pop-up shows all prior checkpoints for the update so that users can conveniently download all MSUs and apply them to their image or device. For instance, Microsoft Update Catalog shows the [2024-12 cumulative update (KB5048667)](https://support.microsoft.com/help/5048667) has one preceding checkpoint CU, [KB5043080](https://support.microsoft.com/help/5043080). -> Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu
\ No newline at end of file +### Updating through Checkpoint CUs + +**Device has the latest checkpoint CU and doesn't need customization:** + +Devices or images that have the latest checkpoint CU installed and do not need Features on Demand (FoD) or language pack (LP) customization can be updated to the latest target CU with no change to your existing process. You can simply copy the target MSU from Catalog and install it, for instance using [Add-WindowsPackage (DISM)](/powershell/module/dism/add-windowspackage) or [DISM operating system package (`.cab` or `.msu`) servicing command-line options](/windows-hardware/manufacture/desktop/dism-operating-system-package-servicing-command-line-options). + +Examples of eligible devices: + +| Device is on | Needs to install| +|---|---| +|
  • The checkpoint CU, 2024-09 (KB5043080)
|
  • A subsequent monthly security update like 2024-11 (KB5046617), or
  • A subsequent optional nonsecurity releaselike 2024-11 (KB5046740)
| +|
  • A subsequent optional nonsecurity preview release like 2024-09 (KB5043178), or
  • A subsequent monthly security update like 2024-10 (KB5044284)
|
  • A subsequent monthly security update like 2025-01 (KB5050009), or
  • A subsequent optional nonsecurity release like 2024-11 (KB5046740)
| + +**Device needs FoD or LP customization:** + +Installing FoDs or LPs requires the full LCU payload, which now can be split across files associated with each preceding checkpoint CU. So, when customizing FoDs or LPs, all prior checkpoint CUs and the target CU need to be installed regardless of whether the device already had any of the prior checkpoints CU installed. This needs to be done using DISM. + +1. Copy the MSUs of the latest CU (the target) and all prior checkpoint CUs to a local folder. Make sure there are no other MSUs present. +1. Mount the install.wim file. +1. Run `DISM /add-package` with the latest MSU as the sole target. +1. Run `/Cleanup-Image /StartComponentCleanup`. +1. Unmount. +1. Run `DISM /export-image` to optimize the image size, if that's important to you. + +**Device doesn't have the latest checkpoint CU and doesn't need customization:** + +Devices that are not on the latest checkpoint CU and do not need FoD/LP customization can either install all needed CUs one by one in the right sequence. Alternately they can be updated using DISM to install all CUs in one go, see above. If there are total 4 checkpoint CUs available and device already has the first one installed, DISM will apply the remaining 3 checkpoint CUs in the right order followed by the target CU, all in one go. + +## Related articles + +- [Servicing stack updates](/windows/deployment/update/servicing-stack-updates) +- [Features on Demand](/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities) +- [How to download updates that include drivers and hotfixes from the Windows Update Catalog](/troubleshoot/windows-client/installing-updates-features-roles/download-updates-drivers-hotfixes-windows-update-catalog) +- [Update Windows installation media with Dynamic Update](media-dynamic-update.md) From a5475acc005510c2faf96bdba9efd3f963337815 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 23 Jan 2025 11:31:55 -0800 Subject: [PATCH 029/123] ccu-9693727 --- windows/deployment/update/release-cycle.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/windows/deployment/update/release-cycle.md b/windows/deployment/update/release-cycle.md index 2df0fe24ef..82e635558d 100644 --- a/windows/deployment/update/release-cycle.md +++ b/windows/deployment/update/release-cycle.md @@ -54,6 +54,14 @@ Monthly security update releases are available through the following channels: Many update management tools, such as [Microsoft Configuration Manager](/mem/configmgr/) and [Microsoft Intune](/mem/intune/), rely on these channels for update deployment. +Starting Windows 11, version 24H2, Microsoft may periodically release cumulative updates as checkpoints. The subsequent updates will consist of: +- The update package files associated with the checkpoints, and +- New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. + +Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, no change is needed to their update process. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. + + + ## Optional nonsecurity preview release **Optional nonsecurity preview releases** provide IT admins an opportunity for early validation of that content prior to the **monthly security update release**. Admins can test and validate production-quality releases ahead of the planned monthly security update release for the following month. These updates are optional, cumulative, nonsecurity preview releases. New features might initially be deployed in the prior month's **optional nonsecurity preview release**, then ship in the following **monthly security update release**. **Optional nonsecurity preview releases** are typically released on the fourth Tuesday of the month at 10:00 AM Pacific Time (PST/PDT). These releases are only offered to the most recent, supported versions of Windows. From 8c0f17456288528849486e3ee0fa7237f9365d7f Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 23 Jan 2025 11:35:56 -0800 Subject: [PATCH 030/123] ccu-9693727 --- windows/deployment/update/release-cycle.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/deployment/update/release-cycle.md b/windows/deployment/update/release-cycle.md index 82e635558d..c7c628ba1b 100644 --- a/windows/deployment/update/release-cycle.md +++ b/windows/deployment/update/release-cycle.md @@ -78,6 +78,12 @@ To access the optional nonsecurity preview release: - Use [Windows Insider Program for Business](https://insider.windows.com/for-business) - Use the [Microsoft Update Catalog](https://www.catalog.update.microsoft.com/Home.aspx). +Starting Windows 11, version 24H2, Microsoft may periodically release cumulative updates as checkpoints. The subsequent updates will consist of: +- The update package files associated with the checkpoints, and +- New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. + +Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, no change is needed to their update process. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. + ## OOB releases **Out-of-band (OOB) releases** might be provided to fix a recently identified issue or vulnerability. They're used in atypical cases when an issue is detected and can't wait for the next monthly release, because devices must be updated immediately to address security vulnerabilities or to resolve a quality issue impacting many devices. **Out-of-band (OOB) releases** are provided outside of the monthly schedule when there's an exceptional need. From 618377a20d1cc9b6fa4c57cf58b841f0a4e7c536 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 23 Jan 2025 11:37:59 -0800 Subject: [PATCH 031/123] ccu-9693727 --- windows/deployment/update/release-cycle.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/release-cycle.md b/windows/deployment/update/release-cycle.md index c7c628ba1b..266d95bfcf 100644 --- a/windows/deployment/update/release-cycle.md +++ b/windows/deployment/update/release-cycle.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 06/04/2024 +ms.date: 01/23/2025 --- # Update release cycle for Windows clients @@ -74,7 +74,7 @@ Multiple checkpoints may be shipped during the lifecycle of a given Windows rele - LCU preview To access the optional nonsecurity preview release: -- Navigate to **Settings** > **Update & Security** > **Windows Update** and select **Check for updates**. +- Navigate to **Settings** > **Update & Security** > **Windows Update** and select **Check for updates**. - Use [Windows Insider Program for Business](https://insider.windows.com/for-business) - Use the [Microsoft Update Catalog](https://www.catalog.update.microsoft.com/Home.aspx). From 3c8cfb2a61edf741e908f9b38e27bb8ed3f854b6 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 23 Jan 2025 13:54:40 -0800 Subject: [PATCH 032/123] ccu-9693727 --- .../catalog-checkpoint-cumulative-updates.md | 40 +++++++++---------- windows/deployment/update/release-cycle.md | 2 +- 2 files changed, 21 insertions(+), 21 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index b6e802f722..9c930c27e2 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -17,9 +17,9 @@ ms.date: 01/23/2025 # Checkpoint cumulative updates and Microsoft Update Catalog usage -Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates may be preceded by a checkpoint cumulative update (CU). Devices (and images) updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint CUs, so update processes involving WU and WSUS remain unchanged. This article covers how Catalog users can easily update their devices (or images) through checkpoint CUs. +Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates may be preceded by a checkpoint cumulative update. Devices (and images) updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint cumulative updates, so update processes involving WU and WSUS remain unchanged. This article covers how Microsoft Update Catalog users can easily update their devices (or images) through checkpoint cumulative updates. -## Checkpoint CUs +## Checkpoint cumulative updates Windows 11 quality updates use servicing technology and are built cumulatively from the time when a new Windows OS was "released to manufacturing" (RTM). These monthly updates include all the changes since RTM in the form of binary differentials computed from the initial version of those binaries. @@ -31,63 +31,63 @@ Going forward, Microsoft might periodically release cumulative updates as checkp This process may be repeated multiple times, thereby generating multiple checkpoints during the lifecycle of a given Windows release. The Windows 11, version 24H2 servicing stack can merge all the checkpoints and only download and install content that's missing on the device. -If any checkpoint CUs precede a target update, a device or image needs to take all prior checkpoint CUs before it can take the target update. In other words, a post-checkpoint LCU can be applied to images/devices that are on that checkpoint or on a subsequent LCU. For updates sourced from WU and WSUS this happens seamlessly, and you can continue to use the same tools and processes that you currently use for approving and deploying updates. +If any checkpoint cumulative updates precede a target update, a device or image needs to take all prior checkpoint cumulative updates before it can take the target update. In other words, a post-checkpoint latest cumulative update can be applied to images/devices that are on that checkpoint or on a subsequent latest cumulative update. For updates sourced from WU and WSUS this happens seamlessly, and you can continue to use the same tools and processes that you currently use for approving and deploying updates. ### Applicability -A checkpoint CU is just another monthly security update that informs how subsequent updates are built. There is no policy change or new requirement around when users must take these updates, though it is best practice to take monthly security updates at the earliest opportunity to keep your devices protected and productive. +A checkpoint cumulative update is just another monthly security update that informs how subsequent updates are built. There is no policy change or new requirement around when users must take these updates, though it is best practice to take monthly security updates at the earliest opportunity to keep your devices protected and productive. This feature does not introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). -WinRE is serviced by applying the servicing stack update (SSU) from OnePackage (LCU does not apply) and SafeOS DU. This is how it has been for a while now, and there is no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying SSU then SafeOS DU is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). +WinRE is serviced by applying the servicing stack update from OnePackage (latest cumulative update does not apply) and SafeOS DU. This is how it has been for a while now, and there is no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying servicing stack update then SafeOS DU is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). -### Current Checkpoint CUs +### Current checkpoint cumulative updates -For Windows 11, version 24H2 and above, for a given update the knowledge base (KB) article will note all preceding checkpoint CUs under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint CU will position you to efficiently take future checkpoint CUs. +For Windows 11, version 24H2 and above, for a given update the knowledge base (KB) article will note all preceding checkpoint cumulative updates under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint cumulative update will position you to efficiently take future checkpoint cumulative updates. ## Updating from the Microsoft Update Catalog -When installing a given monthly security or optional nonsecurity preview update, [Microsoft Update Catalog](https://www.catalog.update.microsoft.com) users can determine and download the prior checkpoint CUs and apply these sequentially under certain situations or in one go using DISM. +When installing a given monthly security or optional nonsecurity preview update, [Microsoft Update Catalog](https://www.catalog.update.microsoft.com) users can determine and download the prior checkpoint cumulative updates and apply these sequentially under certain situations or in one go using DISM. -### Finding prior Checkpoint CUs +### Finding prior checkpoint cumulative updates -For a given update, users can look up the KB article and find all preceding checkpoints, if any, listed under the **Catalog** release channel. For instance, the 2024-12 monthly security update (KB5048667) has one preceding checkpoint CU per [December 10, 2024-KB5048667 (OS Build 26100.2605)](https://support.microsoft.com/topic/708755a6-d809-4a8a-8d20-53c4108590e6#ID0ELBD=Catalog): +For a given update, users can look up the KB article and find all preceding checkpoints, if any, listed under the **Catalog** release channel. For instance, the 2024-12 monthly security update (KB5048667) has one preceding checkpoint cumulative update per [December 10, 2024-KB5048667 (OS Build 26100.2605)](https://support.microsoft.com/topic/708755a6-d809-4a8a-8d20-53c4108590e6#ID0ELBD=Catalog): > Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu
-Alternately, users can search the KB number in the [Microsoft Update Catalog](https://catalog.update.microsoft.com/) and select the **Download** button for the selected architecture. The download pop-up shows all prior checkpoints for the update so that users can conveniently download all MSUs and apply them to their image or device. For instance, Microsoft Update Catalog shows the [2024-12 cumulative update (KB5048667)](https://support.microsoft.com/help/5048667) has one preceding checkpoint CU, [KB5043080](https://support.microsoft.com/help/5043080). +Alternately, users can search the KB number in the [Microsoft Update Catalog](https://catalog.update.microsoft.com/) and select the **Download** button for the selected architecture. The download pop-up shows all prior checkpoints for the update so that users can conveniently download all MSUs and apply them to their image or device. For instance, Microsoft Update Catalog shows the [2024-12 cumulative update (KB5048667)](https://support.microsoft.com/help/5048667) has one preceding checkpoint cumulative update, [KB5043080](https://support.microsoft.com/help/5043080). -### Updating through Checkpoint CUs +### Updating through checkpoint cumulative updates -**Device has the latest checkpoint CU and doesn't need customization:** +**Device has the latest checkpoint cumulative update and doesn't need customization:** -Devices or images that have the latest checkpoint CU installed and do not need Features on Demand (FoD) or language pack (LP) customization can be updated to the latest target CU with no change to your existing process. You can simply copy the target MSU from Catalog and install it, for instance using [Add-WindowsPackage (DISM)](/powershell/module/dism/add-windowspackage) or [DISM operating system package (`.cab` or `.msu`) servicing command-line options](/windows-hardware/manufacture/desktop/dism-operating-system-package-servicing-command-line-options). +Devices or images that have the latest checkpoint cumulative update installed and do not need Features on Demand (FoD) or language pack (LP) customization can be updated to the latest target cumulative update with no change to your existing process. You can simply copy the target MSU from Microsoft Update Catalog and install it, for instance using [Add-WindowsPackage (DISM)](/powershell/module/dism/add-windowspackage) or [DISM operating system package (`.cab` or `.msu`) servicing command-line options](/windows-hardware/manufacture/desktop/dism-operating-system-package-servicing-command-line-options). Examples of eligible devices: | Device is on | Needs to install| |---|---| -|
  • The checkpoint CU, 2024-09 (KB5043080)
|
  • A subsequent monthly security update like 2024-11 (KB5046617), or
  • A subsequent optional nonsecurity releaselike 2024-11 (KB5046740)
| +|
  • The checkpoint cumulative update, 2024-09 (KB5043080)
|
  • A subsequent monthly security update like 2024-11 (KB5046617), or
  • A subsequent optional nonsecurity releaselike 2024-11 (KB5046740)
| |
  • A subsequent optional nonsecurity preview release like 2024-09 (KB5043178), or
  • A subsequent monthly security update like 2024-10 (KB5044284)
|
  • A subsequent monthly security update like 2025-01 (KB5050009), or
  • A subsequent optional nonsecurity release like 2024-11 (KB5046740)
| **Device needs FoD or LP customization:** -Installing FoDs or LPs requires the full LCU payload, which now can be split across files associated with each preceding checkpoint CU. So, when customizing FoDs or LPs, all prior checkpoint CUs and the target CU need to be installed regardless of whether the device already had any of the prior checkpoints CU installed. This needs to be done using DISM. +Installing FoDs or LPs requires the full latest cumulative update payload, which now can be split across files associated with each preceding checkpoint cumulative update. So, when customizing FoDs or LPs, all prior checkpoint cumulative updates and the target cumulative update need to be installed regardless of whether the device already had any of the prior checkpoints cumulative update installed. This needs to be done using DISM. -1. Copy the MSUs of the latest CU (the target) and all prior checkpoint CUs to a local folder. Make sure there are no other MSUs present. +1. Copy the MSUs of the latest cumulative update (the target) and all prior checkpoint cumulative updates to a local folder. Make sure there are no other MSUs present. 1. Mount the install.wim file. 1. Run `DISM /add-package` with the latest MSU as the sole target. 1. Run `/Cleanup-Image /StartComponentCleanup`. 1. Unmount. 1. Run `DISM /export-image` to optimize the image size, if that's important to you. -**Device doesn't have the latest checkpoint CU and doesn't need customization:** +**Device doesn't have the latest checkpoint cumulative update and doesn't need customization:** -Devices that are not on the latest checkpoint CU and do not need FoD/LP customization can either install all needed CUs one by one in the right sequence. Alternately they can be updated using DISM to install all CUs in one go, see above. If there are total 4 checkpoint CUs available and device already has the first one installed, DISM will apply the remaining 3 checkpoint CUs in the right order followed by the target CU, all in one go. +Devices that are not on the latest checkpoint cumulative update and do not need FoD/LP customization can either install all needed cumulative updates one by one in the right sequence. Alternately they can be updated using DISM to install all cumulative updates in one go, see above. If there are total 4 checkpoint cumulative updates available and device already has the first one installed, DISM will apply the remaining 3 checkpoint cumulative updates in the right order followed by the target cumulative update, all in one go. ## Related articles - [Servicing stack updates](/windows/deployment/update/servicing-stack-updates) - [Features on Demand](/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities) -- [How to download updates that include drivers and hotfixes from the Windows Update Catalog](/troubleshoot/windows-client/installing-updates-features-roles/download-updates-drivers-hotfixes-windows-update-catalog) +- [How to download updates that include drivers and hotfixes from the Microsoft Update Catalog](/troubleshoot/windows-client/installing-updates-features-roles/download-updates-drivers-hotfixes-windows-update-catalog) - [Update Windows installation media with Dynamic Update](media-dynamic-update.md) diff --git a/windows/deployment/update/release-cycle.md b/windows/deployment/update/release-cycle.md index 266d95bfcf..aa99ea62f3 100644 --- a/windows/deployment/update/release-cycle.md +++ b/windows/deployment/update/release-cycle.md @@ -1,6 +1,6 @@ --- title: Update release cycle for Windows clients -description: Learn about the release cycle for updates so Windows clients in your organization stay productive and protected. +description: Learn about the release cycle for updates so Windows clients in your organization stay productive and protected. ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual From 379b99618c5695f67b63011ea9ea42b1a940aa79 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 23 Jan 2025 14:04:17 -0800 Subject: [PATCH 033/123] ccu-9693727 --- .../catalog-checkpoint-cumulative-updates.md | 28 +++++++++---------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index 9c930c27e2..acabef6211 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -17,37 +17,37 @@ ms.date: 01/23/2025 # Checkpoint cumulative updates and Microsoft Update Catalog usage -Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates may be preceded by a checkpoint cumulative update. Devices (and images) updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint cumulative updates, so update processes involving WU and WSUS remain unchanged. This article covers how Microsoft Update Catalog users can easily update their devices (or images) through checkpoint cumulative updates. +Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates might be preceded by a checkpoint cumulative update. Devices (and images) updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint cumulative updates, so update processes involving WU and WSUS remain unchanged. This article covers how Microsoft Update Catalog users can easily update their devices (or images) through checkpoint cumulative updates. ## Checkpoint cumulative updates -Windows 11 quality updates use servicing technology and are built cumulatively from the time when a new Windows OS was "released to manufacturing" (RTM). These monthly updates include all the changes since RTM in the form of binary differentials computed from the initial version of those binaries. +Windows 11 quality updates use servicing technology and are built cumulatively from the time when a new Windows OS was released to manufacturing (RTM). These monthly updates include all the changes since RTM in the form of binary differentials computed from the initial version of those binaries. -With Windows 11, version 24H2, Microsoft introduced a new concept of checkpoint cumulative updates. This will allow you to get features and security enhancements via the latest cumulative update through smaller, incremental differentials containing only the changes since the previous checkpoint cumulative update. This means that you can save time, bandwidth, and hard drive space. +With Windows 11, version 24H2, Microsoft introduced a new concept of checkpoint cumulative updates. This change allows you to get features and security enhancements via the latest cumulative update through smaller, incremental differentials containing only the changes since the previous checkpoint cumulative update. This change means that you can save time, bandwidth, and hard drive space. Going forward, Microsoft might periodically release cumulative updates as checkpoints. The subsequent updates will then consist of: - The update package files associated with the checkpoints, and - New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. -This process may be repeated multiple times, thereby generating multiple checkpoints during the lifecycle of a given Windows release. The Windows 11, version 24H2 servicing stack can merge all the checkpoints and only download and install content that's missing on the device. +This process might be repeated multiple times, thereby generating multiple checkpoints during the lifecycle of a given Windows release. The Windows 11, version 24H2 servicing stack can merge all the checkpoints and only download and install content that's missing on the device. -If any checkpoint cumulative updates precede a target update, a device or image needs to take all prior checkpoint cumulative updates before it can take the target update. In other words, a post-checkpoint latest cumulative update can be applied to images/devices that are on that checkpoint or on a subsequent latest cumulative update. For updates sourced from WU and WSUS this happens seamlessly, and you can continue to use the same tools and processes that you currently use for approving and deploying updates. +If any checkpoint cumulative updates precede a target update, a device or image needs to take all prior checkpoint cumulative updates before it can take the target update. In other words, a post-checkpoint latest cumulative update can be applied to images/devices that are on that checkpoint or on a subsequent latest cumulative update. For updates sourced from WU and WSUS this process happens seamlessly. You can continue to use the same tools and processes that you currently use for approving and deploying updates. ### Applicability -A checkpoint cumulative update is just another monthly security update that informs how subsequent updates are built. There is no policy change or new requirement around when users must take these updates, though it is best practice to take monthly security updates at the earliest opportunity to keep your devices protected and productive. +A checkpoint cumulative update is just another monthly security update that informs how subsequent updates are built. There's no policy change or new requirement around when users must take these updates, though it's best practice to take monthly security updates at the earliest opportunity to keep your devices protected and productive. -This feature does not introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). +This feature doesn't introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). -WinRE is serviced by applying the servicing stack update from OnePackage (latest cumulative update does not apply) and SafeOS DU. This is how it has been for a while now, and there is no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying servicing stack update then SafeOS DU is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). +WinRE is serviced by applying the servicing stack update from OnePackage (latest cumulative update doesn't apply) and SafeOS Dynamic Update. This is how it has been for a while now, and there's no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying servicing stack update then SafeOS Dynamic Update is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). ### Current checkpoint cumulative updates -For Windows 11, version 24H2 and above, for a given update the knowledge base (KB) article will note all preceding checkpoint cumulative updates under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint cumulative update will position you to efficiently take future checkpoint cumulative updates. +For Windows 11, version 24H2 and later, for a given update the knowledge base (KB) article notes all preceding checkpoint cumulative updates under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint cumulative update will position you to efficiently take future checkpoint cumulative updates. ## Updating from the Microsoft Update Catalog -When installing a given monthly security or optional nonsecurity preview update, [Microsoft Update Catalog](https://www.catalog.update.microsoft.com) users can determine and download the prior checkpoint cumulative updates and apply these sequentially under certain situations or in one go using DISM. +When installing a given monthly security or optional nonsecurity preview update, [Microsoft Update Catalog](https://www.catalog.update.microsoft.com) users can determine and download the prior checkpoint cumulative updates and apply them sequentially under certain situations or in one go using DISM. ### Finding prior checkpoint cumulative updates @@ -61,20 +61,20 @@ Alternately, users can search the KB number in the [Microsoft Update Catalog](ht **Device has the latest checkpoint cumulative update and doesn't need customization:** -Devices or images that have the latest checkpoint cumulative update installed and do not need Features on Demand (FoD) or language pack (LP) customization can be updated to the latest target cumulative update with no change to your existing process. You can simply copy the target MSU from Microsoft Update Catalog and install it, for instance using [Add-WindowsPackage (DISM)](/powershell/module/dism/add-windowspackage) or [DISM operating system package (`.cab` or `.msu`) servicing command-line options](/windows-hardware/manufacture/desktop/dism-operating-system-package-servicing-command-line-options). +Devices or images that have the latest checkpoint cumulative update installed and don't need Features on Demand (FoD) or language pack (LP) customization can be updated to the latest target cumulative update with no change to your existing process. You can copy the target MSU from Microsoft Update Catalog and install it, for instance using [Add-WindowsPackage (DISM)](/powershell/module/dism/add-windowspackage) or [DISM operating system package (`.cab` or `.msu`) servicing command-line options](/windows-hardware/manufacture/desktop/dism-operating-system-package-servicing-command-line-options). Examples of eligible devices: | Device is on | Needs to install| |---|---| -|
  • The checkpoint cumulative update, 2024-09 (KB5043080)
|
  • A subsequent monthly security update like 2024-11 (KB5046617), or
  • A subsequent optional nonsecurity releaselike 2024-11 (KB5046740)
| +|
  • The checkpoint cumulative update, 2024-09 (KB5043080)
|
  • A subsequent monthly security update like 2024-11 (KB5046617), or
  • A subsequent optional nonsecurity release like 2024-11 (KB5046740)
| |
  • A subsequent optional nonsecurity preview release like 2024-09 (KB5043178), or
  • A subsequent monthly security update like 2024-10 (KB5044284)
|
  • A subsequent monthly security update like 2025-01 (KB5050009), or
  • A subsequent optional nonsecurity release like 2024-11 (KB5046740)
| **Device needs FoD or LP customization:** Installing FoDs or LPs requires the full latest cumulative update payload, which now can be split across files associated with each preceding checkpoint cumulative update. So, when customizing FoDs or LPs, all prior checkpoint cumulative updates and the target cumulative update need to be installed regardless of whether the device already had any of the prior checkpoints cumulative update installed. This needs to be done using DISM. -1. Copy the MSUs of the latest cumulative update (the target) and all prior checkpoint cumulative updates to a local folder. Make sure there are no other MSUs present. +1. Copy the .msu files of the latest cumulative update (the target) and all prior checkpoint cumulative updates to a local folder. Make sure there are no other .msu files present. 1. Mount the install.wim file. 1. Run `DISM /add-package` with the latest MSU as the sole target. 1. Run `/Cleanup-Image /StartComponentCleanup`. @@ -83,7 +83,7 @@ Installing FoDs or LPs requires the full latest cumulative update payload, which **Device doesn't have the latest checkpoint cumulative update and doesn't need customization:** -Devices that are not on the latest checkpoint cumulative update and do not need FoD/LP customization can either install all needed cumulative updates one by one in the right sequence. Alternately they can be updated using DISM to install all cumulative updates in one go, see above. If there are total 4 checkpoint cumulative updates available and device already has the first one installed, DISM will apply the remaining 3 checkpoint cumulative updates in the right order followed by the target cumulative update, all in one go. +Devices that aren't on the latest checkpoint cumulative update and don't need FoD/LP customization can either install all needed cumulative updates one by one in the right sequence. Alternately they can be updated using DISM to install all cumulative updates in one go, see above. If there are total four checkpoint cumulative updates available and device already has the first one installed, DISM applies the remaining three checkpoint cumulative updates in the right order followed by the target cumulative update, all in one go. ## Related articles From 39e1c81dd5a7b27f45798f36b3ba665d4ba077b6 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 23 Jan 2025 15:11:33 -0800 Subject: [PATCH 034/123] ccu-9693727 --- windows/deployment/TOC.yml | 2 ++ .../catalog-checkpoint-cumulative-updates.md | 16 ++++++++-------- 2 files changed, 10 insertions(+), 8 deletions(-) diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index e816d252d7..db0c863b4a 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -294,6 +294,8 @@ items: href: update/windows-update-logs.md - name: Servicing stack updates href: update/servicing-stack-updates.md + - name: Checkpoint cumulative updates and Microsoft Update Catalog usage + href: update/catalog-checkpoint-cumulative-updates.md - name: Update CSP policies href: /windows/client-management/mdm/policy-csp-update?context=/windows/deployment/context/context - name: Update other Microsoft products diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index acabef6211..c569bad856 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -43,11 +43,11 @@ WinRE is serviced by applying the servicing stack update from OnePackage (latest ### Current checkpoint cumulative updates -For Windows 11, version 24H2 and later, for a given update the knowledge base (KB) article notes all preceding checkpoint cumulative updates under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint cumulative update will position you to efficiently take future checkpoint cumulative updates. +For Windows 11, version 24H2 and later, for a given update, the knowledge base (KB) article notes all preceding checkpoint cumulative updates under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint cumulative update will position you to efficiently take future checkpoint cumulative updates. ## Updating from the Microsoft Update Catalog -When installing a given monthly security or optional nonsecurity preview update, [Microsoft Update Catalog](https://www.catalog.update.microsoft.com) users can determine and download the prior checkpoint cumulative updates and apply them sequentially under certain situations or in one go using DISM. +When installing a given monthly security or optional nonsecurity preview update, [Microsoft Update Catalog](https://www.catalog.update.microsoft.com) users can determine and download the prior checkpoint cumulative updates and apply them sequentially under certain situations, or in one go using Deployment Image Servicing and Management (DISM). ### Finding prior checkpoint cumulative updates @@ -55,13 +55,13 @@ For a given update, users can look up the KB article and find all preceding chec > Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu
-Alternately, users can search the KB number in the [Microsoft Update Catalog](https://catalog.update.microsoft.com/) and select the **Download** button for the selected architecture. The download pop-up shows all prior checkpoints for the update so that users can conveniently download all MSUs and apply them to their image or device. For instance, Microsoft Update Catalog shows the [2024-12 cumulative update (KB5048667)](https://support.microsoft.com/help/5048667) has one preceding checkpoint cumulative update, [KB5043080](https://support.microsoft.com/help/5043080). +Alternately, users can search the KB number in the [Microsoft Update Catalog](https://catalog.update.microsoft.com/) and select the **Download** button for the selected architecture. The download pop-up shows all prior checkpoints for the update so that users can conveniently download all `.msu` files and apply them to their image or device. For instance, Microsoft Update Catalog shows the [2024-12 cumulative update (KB5048667)](https://support.microsoft.com/help/5048667) has one preceding checkpoint cumulative update, [KB5043080](https://support.microsoft.com/help/5043080). ### Updating through checkpoint cumulative updates **Device has the latest checkpoint cumulative update and doesn't need customization:** -Devices or images that have the latest checkpoint cumulative update installed and don't need Features on Demand (FoD) or language pack (LP) customization can be updated to the latest target cumulative update with no change to your existing process. You can copy the target MSU from Microsoft Update Catalog and install it, for instance using [Add-WindowsPackage (DISM)](/powershell/module/dism/add-windowspackage) or [DISM operating system package (`.cab` or `.msu`) servicing command-line options](/windows-hardware/manufacture/desktop/dism-operating-system-package-servicing-command-line-options). +Devices or images that have the latest checkpoint cumulative update installed and don't need Features on Demand (FoD) or language pack customization can be updated to the latest target cumulative update with no change to your existing process. You can copy the target `.msu` file from Microsoft Update Catalog and install it, for instance using [Add-WindowsPackage (DISM)](/powershell/module/dism/add-windowspackage) or [DISM operating system package (`.cab` or `.msu`) servicing command-line options](/windows-hardware/manufacture/desktop/dism-operating-system-package-servicing-command-line-options). Examples of eligible devices: @@ -70,20 +70,20 @@ Examples of eligible devices: |
  • The checkpoint cumulative update, 2024-09 (KB5043080)
|
  • A subsequent monthly security update like 2024-11 (KB5046617), or
  • A subsequent optional nonsecurity release like 2024-11 (KB5046740)
| |
  • A subsequent optional nonsecurity preview release like 2024-09 (KB5043178), or
  • A subsequent monthly security update like 2024-10 (KB5044284)
|
  • A subsequent monthly security update like 2025-01 (KB5050009), or
  • A subsequent optional nonsecurity release like 2024-11 (KB5046740)
| -**Device needs FoD or LP customization:** +**Device needs FoD or language pack customization:** -Installing FoDs or LPs requires the full latest cumulative update payload, which now can be split across files associated with each preceding checkpoint cumulative update. So, when customizing FoDs or LPs, all prior checkpoint cumulative updates and the target cumulative update need to be installed regardless of whether the device already had any of the prior checkpoints cumulative update installed. This needs to be done using DISM. +Installing FoDs or language packs requires the full latest cumulative update payload, which now can be split across files associated with each preceding checkpoint cumulative update. So, when customizing FoDs or language packs, all prior checkpoint cumulative updates and the target cumulative update need to be installed regardless of whether the device already had any of the prior checkpoints cumulative update installed. This needs to be done using DISM. 1. Copy the .msu files of the latest cumulative update (the target) and all prior checkpoint cumulative updates to a local folder. Make sure there are no other .msu files present. 1. Mount the install.wim file. -1. Run `DISM /add-package` with the latest MSU as the sole target. +1. Run `DISM /add-package` with the latest `.msu` file as the sole target. 1. Run `/Cleanup-Image /StartComponentCleanup`. 1. Unmount. 1. Run `DISM /export-image` to optimize the image size, if that's important to you. **Device doesn't have the latest checkpoint cumulative update and doesn't need customization:** -Devices that aren't on the latest checkpoint cumulative update and don't need FoD/LP customization can either install all needed cumulative updates one by one in the right sequence. Alternately they can be updated using DISM to install all cumulative updates in one go, see above. If there are total four checkpoint cumulative updates available and device already has the first one installed, DISM applies the remaining three checkpoint cumulative updates in the right order followed by the target cumulative update, all in one go. +Devices that aren't on the latest checkpoint cumulative update and don't need FoD/language pack customization can either install all needed cumulative updates one by one in the right sequence. Alternately they can be updated using DISM to install all cumulative updates in one go. For more information, see the [Updating through checkpoint cumulative updates](#updating-through-checkpoint-cumulative-updates) section. If there are total four checkpoint cumulative updates available and device already has the first one installed, DISM applies the remaining three checkpoint cumulative updates in the right order followed by the target cumulative update, all in one go. ## Related articles From 17443cb81b95b7ceb225aaad2cf16e627d0c1ddf Mon Sep 17 00:00:00 2001 From: Aditi Srivastava <133841950+aditisrivastava07@users.noreply.github.com> Date: Fri, 24 Jan 2025 13:59:38 +0530 Subject: [PATCH 035/123] removed .md from redirect_url path to make redirection work --- .openpublishing.redirection.windows-security.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.openpublishing.redirection.windows-security.json b/.openpublishing.redirection.windows-security.json index 075b0bf165..52233f5ad0 100644 --- a/.openpublishing.redirection.windows-security.json +++ b/.openpublishing.redirection.windows-security.json @@ -7,7 +7,7 @@ }, { "source_path": "windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview.md", - "redirect_url": "/windows/security/application-security/application-isolation/windows-sandbox/index.md", + "redirect_url": "/windows/security/application-security/application-isolation/windows-sandbox/index", "redirect_document_id": false }, { From 6a87dff88e8e1b1b980ec0db7af100b90c3c3fdc Mon Sep 17 00:00:00 2001 From: TCGL23 <140627881+TCGL23@users.noreply.github.com> Date: Fri, 24 Jan 2025 12:32:15 +0000 Subject: [PATCH 036/123] Update choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md Previously before the template was migrated the backup of the recovery key was covered under 'Require device to back up recovery information to Azure AD'; Since the migration this setting now shows as 'Save BitLocker recovery information to AD DS for operating system drives'; Regardless of the wording in the UI, the recovery key is being backed up to Entra as expected for both Entra Joined (MM) and Hybrid joined (CM) managed devices --- ...cker-protected-operating-system-drives-can-be-recovered.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/includes/choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md b/windows/security/operating-system-security/data-protection/bitlocker/includes/choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md index b0ff6c39b5..bcca1625ad 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/includes/choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/includes/choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md @@ -17,7 +17,9 @@ This policy setting allows you to control how BitLocker-protected operating syst If this policy setting is disabled or not configured, the default recovery options are supported for BitLocker recovery. By default a DRA is allowed, the recovery options can be specified by the user including the recovery password and recovery key, and recovery information is not backed up to AD DS. -For Microsoft Entra hybrid joined devices, the BitLocker recovery password is backed up to both Active Directory and Entra ID. +For Microsoft Entra hybrid joined devices, the BitLocker recovery password is backed up to both Active Directory and Entra ID.
+ +For Microsoft Entra joined devices, the BitLocker recovery password is backed up to Entra ID. | | Path | |--|--| From 9495808a8366f28165ba7eee098ec5171d541796 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Fri, 24 Jan 2025 07:54:44 -0500 Subject: [PATCH 037/123] Update windows/security/operating-system-security/data-protection/bitlocker/includes/choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md --- ...locker-protected-operating-system-drives-can-be-recovered.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/includes/choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md b/windows/security/operating-system-security/data-protection/bitlocker/includes/choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md index bcca1625ad..45ad55ad06 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/includes/choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/includes/choose-how-bitlocker-protected-operating-system-drives-can-be-recovered.md @@ -17,7 +17,7 @@ This policy setting allows you to control how BitLocker-protected operating syst If this policy setting is disabled or not configured, the default recovery options are supported for BitLocker recovery. By default a DRA is allowed, the recovery options can be specified by the user including the recovery password and recovery key, and recovery information is not backed up to AD DS. -For Microsoft Entra hybrid joined devices, the BitLocker recovery password is backed up to both Active Directory and Entra ID.
+For Microsoft Entra hybrid joined devices, the BitLocker recovery password is backed up to both Active Directory and Entra ID. For Microsoft Entra joined devices, the BitLocker recovery password is backed up to Entra ID. From 61e0e38f59da8a9842ad1d1880712a5b5d135f35 Mon Sep 17 00:00:00 2001 From: Chris Olin Date: Fri, 24 Jan 2025 11:37:24 -0500 Subject: [PATCH 038/123] Update pinned-apps.md added key details for provisioning package configuration / expected syntax --- windows/configuration/taskbar/pinned-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/taskbar/pinned-apps.md b/windows/configuration/taskbar/pinned-apps.md index d2454b1e79..6f93e76b25 100644 --- a/windows/configuration/taskbar/pinned-apps.md +++ b/windows/configuration/taskbar/pinned-apps.md @@ -193,7 +193,7 @@ Alternatively, you can configure devices using a [custom policy][MEM-1] with the - **Value:** content of the XML file > [!NOTE] -> The content of the file must be entered as a single line in the `Value` field. Use a text editor to remove any line breaks from the XML file, usually with a function called *join lines*. +> The content of the file must be entered as a single line in the `Value` field. Use a text editor to remove any line breaks from the XML file, usually with a function called *join lines* or *linearize*. If customizations.xml is being modified directly instead of using the WCD editor, the XML brackets need to be escaped / replaced with \< and \> entity encodings. Single and double quote characters do not need to be escaped. [!INCLUDE [provisioning-package-2](../../../includes/configure/provisioning-package-2.md)] From f814a24f965d8db9d463c375bbd7e2a1b115a5ef Mon Sep 17 00:00:00 2001 From: TCGL23 <140627881+TCGL23@users.noreply.github.com> Date: Fri, 24 Jan 2025 17:41:58 +0000 Subject: [PATCH 039/123] Update bitlocker-csp.md Updating as descriptions in CSP refer to AD DS yet when configured to backup to AD DS, Microsoft Entra hybrid joined devices, the BitLocker recovery password is backed up to both Active Directory and Entra ID. and Microsoft Entra joined devices, the BitLocker recovery password is backed up to Entra ID. --- windows/client-management/mdm/bitlocker-csp.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index f4d06f4ce7..052ed1a825 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -551,6 +551,10 @@ The possible values for 'zz' are: - 1 = Store recovery passwords and key packages - 2 = Store recovery passwords only + +For Microsoft Entra hybrid joined devices, the BitLocker recovery password is backed up to both Active Directory and Entra ID. + +For Microsoft Entra joined devices, the BitLocker recovery password is backed up to Entra ID. @@ -2092,6 +2096,10 @@ The possible values for 'zz' are: - 1 = Store recovery passwords and key packages. - 2 = Store recovery passwords only. + +For Microsoft Entra hybrid joined devices, the BitLocker recovery password is backed up to both Active Directory and Entra ID. + +For Microsoft Entra joined devices, the BitLocker recovery password is backed up to Entra ID. From b8bf5fb18a523dcf9154c4c6fe7b21a82bcef25c Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 24 Jan 2025 10:33:31 -0800 Subject: [PATCH 040/123] wmr-dep-9720344 --- windows/whats-new/deprecated-features.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index 568b781fc7..b958a5b5df 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -1,7 +1,7 @@ --- title: Deprecated features in the Windows client description: Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11. -ms.date: 12/12/2024 +ms.date: 01/25/2025 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium @@ -57,7 +57,7 @@ The features in this article are no longer being actively developed, and might b | NPLogonNotify and NPPasswordChangeNotify APIs | Starting in Windows 11, version 24H2, the inclusion of password payload in MPR notifications is set to disabled by default through group policy in [NPLogonNotify](/windows/win32/api/npapi/nf-npapi-nplogonnotify) and [NPPasswordChangeNotify](/windows/win32/api/npapi/nf-npapi-nppasswordchangenotify) APIs. The APIs may be removed in a future release. The primary reason for disabling this feature is to enhance security. When enabled, these APIs allow the caller to retrieve a user's password, presenting potential risks for password exposure and harvesting by malicious users. To include password payload in MPR notifications, set the [EnableMPRNotifications](/windows/client-management/mdm/policy-csp-windowslogon#enablemprnotifications) policy to `enabled`.| March 2024 | | TLS server authentication certificates using RSA keys with key lengths shorter than 2048 bits | Support for certificates using RSA keys with key lengths shorter than 2048 bits will be deprecated. Internet standards and regulatory bodies disallowed the use of 1024-bit keys in 2013, recommending specifically that RSA keys should have a key length of 2048 bits or longer. For more information, see [Transitioning of Cryptographic Algorithms and Key Sizes - Discussion Paper (nist.gov)](https://csrc.nist.gov/CSRC/media/Projects/Key-Management/documents/transitions/Transitioning_CryptoAlgos_070209.pdf). This deprecation focuses on ensuring that all RSA certificates used for TLS server authentication must have key lengths greater than or equal to 2048 bits to be considered valid by Windows.

TLS certificates issued by enterprise or test certification authorities (CA) aren't impacted with this change. However, we recommend that they be updated to RSA keys greater than or equal to 2048 bits as a security best practice. This change is necessary to preserve security of Windows customers using certificates for authentication and cryptographic purposes.| March 2024| | Test Base | [Test Base for Microsoft 365](/microsoft-365/test-base/overview), an Azure cloud service for application testing, is deprecated. The service will be retired in the future and will be no longer available for use after retirement. | March 2024 | -| Windows Mixed Reality | [Windows Mixed Reality](/windows/mixed-reality/enthusiast-guide/before-you-start) is deprecated and will be removed in Windows 11, version 24H2. This deprecation includes the [Mixed Reality Portal](/windows/mixed-reality/enthusiast-guide/install-windows-mixed-reality) app, [Windows Mixed Reality for SteamVR](/windows/mixed-reality/enthusiast-guide/using-steamvr-with-windows-mixed-reality), and Steam VR Beta. Existing Windows Mixed Reality devices will continue to work with Steam through November 2026, if users remain on their current released version of Windows 11, version 23H2. After November 2026, Windows Mixed Reality will no longer receive security updates, nonsecurity updates, bug fixes, technical support, or online technical content updates.

This deprecation doesn't affect HoloLens. We remain committed to HoloLens and our enterprise customers. | December 2023 | +| Windows Mixed Reality | [Windows Mixed Reality](/windows/mixed-reality/enthusiast-guide/before-you-start) is deprecated and will be removed in Windows 11, version 24H2. This deprecation includes the [Mixed Reality Portal](/windows/mixed-reality/enthusiast-guide/install-windows-mixed-reality) app, [Windows Mixed Reality for SteamVR](/windows/mixed-reality/enthusiast-guide/using-steamvr-with-windows-mixed-reality), and Steam VR Beta. Existing Windows Mixed Reality devices will continue to work with Steam through November 2026, if users remain on their current released version of Windows 11, version 23H2. After November 2026, Windows Mixed Reality will no longer receive security updates, nonsecurity updates, bug fixes, technical support, or online technical content updates. | December 2023 | | Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is deprecated for Microsoft Edge for Business and [will no longer be updated](feature-lifecycle.md). To learn more about Edge for Business security capabilities, see [Microsoft Edge security for your business](/deployedge/ms-edge-security-for-business).

**[Update - October 2024]**: Starting with Windows 11, version 24H2, Microsoft Defender Application Guard, including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is no longer available.

**[Update - April 2024]**: Because Application Guard is deprecated there will not be a migration to Edge Manifest V3. The corresponding extensions and associated Windows Store app will not be available after May 2024. This affects the following browsers: *Application Guard Extension - Chrome* and *Application Guard Extension - Firefox*. If you want to block unprotected browsers until you are ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard). | December 2023 | | Legacy console mode | The [legacy console mode](/windows/console/legacymode) is deprecated and no longer being updated. In future Windows releases, it will be available as an optional [Feature on Demand](/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities). This feature won't be installed by default. | December 2023 | | Windows speech recognition | [Windows speech recognition](https://support.microsoft.com/windows/83ff75bd-63eb-0b6c-18d4-6fae94050571) is deprecated and is no longer being developed. This feature is being replaced with [voice access](https://support.microsoft.com/topic/4dcd23ee-f1b9-4fd1-bacc-862ab611f55d). Voice access is available for Windows 11, version 22H2, or later devices. Currently, voice access supports five English locales: English - US, English - UK, English - India, English - New Zealand, English - Canada, and English - Australia. For more information, see [Setup voice access](https://support.microsoft.com/topic/set-up-voice-access-9fc44e29-12bf-4d86-bc4e-e9bb69df9a0e). | December 2023 | From c132053d089fe2d4bf760aeb0762526ac36b3f4d Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 24 Jan 2025 11:08:51 -0800 Subject: [PATCH 041/123] Update windows/whats-new/deprecated-features.md --- windows/whats-new/deprecated-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index b958a5b5df..4b2f886e48 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -1,7 +1,7 @@ --- title: Deprecated features in the Windows client description: Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11. -ms.date: 01/25/2025 +ms.date: 01/24/2025 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium From 871071ea651124af44c2acd42050d87bb17888ff Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 24 Jan 2025 11:10:40 -0800 Subject: [PATCH 042/123] edits from pm --- .../update/catalog-checkpoint-cumulative-updates.md | 6 +++--- windows/deployment/update/release-cycle.md | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index c569bad856..3d038d8a0a 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -12,12 +12,12 @@ ms.collection: ms.localizationpriority: medium appliesto: - ✅ Windows 11, version 24H2 and later -ms.date: 01/23/2025 +ms.date: 01/27/2025 --- # Checkpoint cumulative updates and Microsoft Update Catalog usage -Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates might be preceded by a checkpoint cumulative update. Devices (and images) updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint cumulative updates, so update processes involving WU and WSUS remain unchanged. This article covers how Microsoft Update Catalog users can easily update their devices (or images) through checkpoint cumulative updates. +Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates might be preceded by a checkpoint cumulative update. Devices (and images) updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint cumulative updates, so **update processes involving WU and WSUS remain unchanged**. This article covers how Microsoft Update Catalog users can easily update their devices (or images) through checkpoint cumulative updates. ## Checkpoint cumulative updates @@ -39,7 +39,7 @@ A checkpoint cumulative update is just another monthly security update that info This feature doesn't introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). -WinRE is serviced by applying the servicing stack update from OnePackage (latest cumulative update doesn't apply) and SafeOS Dynamic Update. This is how it has been for a while now, and there's no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying servicing stack update then SafeOS Dynamic Update is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). +WinRE is serviced by applying the servicing stack update from a cumulative update (latest cumulative update doesn't apply) and SafeOS Dynamic Update. This is how it has been for a while now, and there's no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying servicing stack update then SafeOS Dynamic Update is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). ### Current checkpoint cumulative updates diff --git a/windows/deployment/update/release-cycle.md b/windows/deployment/update/release-cycle.md index aa99ea62f3..7df3d99935 100644 --- a/windows/deployment/update/release-cycle.md +++ b/windows/deployment/update/release-cycle.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 01/23/2025 +ms.date: 01/27/2025 --- # Update release cycle for Windows clients @@ -58,7 +58,7 @@ Starting Windows 11, version 24H2, Microsoft may periodically release cumulative - The update package files associated with the checkpoints, and - New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. -Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, no change is needed to their update process. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. +Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, **no change is needed to their update process**. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. @@ -82,7 +82,7 @@ Starting Windows 11, version 24H2, Microsoft may periodically release cumulative - The update package files associated with the checkpoints, and - New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. -Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, no change is needed to their update process. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. +Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, **no change is needed to their update process**. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. ## OOB releases From 750aa34feffcb2209449d3d33aeee9db07573698 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 24 Jan 2025 11:41:49 -0800 Subject: [PATCH 043/123] edits from pm --- .../deployment/update/catalog-checkpoint-cumulative-updates.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index 3d038d8a0a..a537aea3fa 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -12,6 +12,7 @@ ms.collection: ms.localizationpriority: medium appliesto: - ✅ Windows 11, version 24H2 and later + - ✅ Windows Server 2025 ms.date: 01/27/2025 --- From d8c6f3453149dd9bc68732d312b7ad464765b2d2 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 27 Jan 2025 08:23:08 -0800 Subject: [PATCH 044/123] cpw-9694988 --- windows/client-management/manage-windows-copilot.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/manage-windows-copilot.md b/windows/client-management/manage-windows-copilot.md index fdb5c9671f..c899d98a8e 100644 --- a/windows/client-management/manage-windows-copilot.md +++ b/windows/client-management/manage-windows-copilot.md @@ -59,9 +59,9 @@ For users signing in to new PCs with work or school accounts, the following expe The update to Microsoft 365 Copilot Chat to offer enterprise data protection is rolling out now. The shift to Microsoft 365 Copilot Chat is coming soon. Changes will be rolled out to managed PCs starting with the September 2024 optional nonsecurity preview release, and following with the October 2024 monthly security update for all supported versions of Windows 11. These changes will be applied to Windows 10 PCs the month after. This update is replacing the current Copilot in Windows experience. -The Microsoft 365 Copilot app will be automatically enabled after you install the Windows updates listed above if you haven't previously enabled a group policy to prevent the installation of Copilot. The [AppLocker policy](/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) is available to control this Copilot experience before installing these Windows updates mentioned above or any subsequent Windows updates. +The Microsoft Copilot app, which is a consumer experience, will be automatically enabled after you install the Windows updates listed above if you haven't previously enabled a group policy to prevent the installation of Copilot. The [AppLocker policy](/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) is available to control this Copilot experience before installing these Windows updates mentioned above or any subsequent Windows updates. -Note that the Microsoft 365 Copilot app doesn't support Microsoft Entra authentication and users trying to sign in to the app using a Microsoft Entra account will be redirected to https://copilot.cloud.microsoft/ in their default browser. For users authenticating with a Microsoft Entra account, they should access Copilot through the Microsoft 365 Copilot app as the entry point. We recommend you pin Copilot to the navigation bar of the Microsoft 365 Copilot app to enable easy access. +Note that the Microsoft Copilot app doesn't support Microsoft Entra authentication and users trying to sign in to the app using a Microsoft Entra account will be redirected to https://copilot.cloud.microsoft/ in their default browser. For users authenticating with a Microsoft Entra account, they should access Copilot through the Microsoft 365 Copilot app as the entry point. We recommend you pin Copilot to the navigation bar of the Microsoft 365 Copilot app to enable easy access. ## Policy information for previous Copilot in Windows (preview) experience From c01e4d1591ef7bb7b762a3cf69dacbab341f24b6 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 27 Jan 2025 08:27:33 -0800 Subject: [PATCH 045/123] cpw-9694988 --- windows/client-management/manage-windows-copilot.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/manage-windows-copilot.md b/windows/client-management/manage-windows-copilot.md index c899d98a8e..5014d53399 100644 --- a/windows/client-management/manage-windows-copilot.md +++ b/windows/client-management/manage-windows-copilot.md @@ -59,9 +59,9 @@ For users signing in to new PCs with work or school accounts, the following expe The update to Microsoft 365 Copilot Chat to offer enterprise data protection is rolling out now. The shift to Microsoft 365 Copilot Chat is coming soon. Changes will be rolled out to managed PCs starting with the September 2024 optional nonsecurity preview release, and following with the October 2024 monthly security update for all supported versions of Windows 11. These changes will be applied to Windows 10 PCs the month after. This update is replacing the current Copilot in Windows experience. -The Microsoft Copilot app, which is a consumer experience, will be automatically enabled after you install the Windows updates listed above if you haven't previously enabled a group policy to prevent the installation of Copilot. The [AppLocker policy](/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) is available to control this Copilot experience before installing these Windows updates mentioned above or any subsequent Windows updates. +The Microsoft Copilot app will be automatically enabled after you install the Windows updates listed above if you haven't previously enabled a group policy to prevent the installation of Copilot. The [AppLocker policy](/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) is available to control this Copilot experience before installing these Windows updates mentioned above or any subsequent Windows updates. -Note that the Microsoft Copilot app doesn't support Microsoft Entra authentication and users trying to sign in to the app using a Microsoft Entra account will be redirected to https://copilot.cloud.microsoft/ in their default browser. For users authenticating with a Microsoft Entra account, they should access Copilot through the Microsoft 365 Copilot app as the entry point. We recommend you pin Copilot to the navigation bar of the Microsoft 365 Copilot app to enable easy access. +Note that the Microsoft Copilot app, which is a consumer experience, doesn't support Microsoft Entra authentication and users trying to sign in to the app using a Microsoft Entra account will be redirected to https://copilot.cloud.microsoft/ in their default browser. For users authenticating with a Microsoft Entra account, they should access Copilot through the Microsoft 365 Copilot app as the entry point. We recommend you pin Copilot to the navigation bar of the Microsoft 365 Copilot app to enable easy access. ## Policy information for previous Copilot in Windows (preview) experience From 3a5da118ae2635ad17409b3a3c93f4f6c672dd29 Mon Sep 17 00:00:00 2001 From: "Steve DiAcetis (MSFT)" <52939067+SteveDiAcetis@users.noreply.github.com> Date: Mon, 27 Jan 2025 11:12:40 -0800 Subject: [PATCH 046/123] Update media-dynamic-update.md Due to changes in how optional components are implemented, we are moving the installation of these before the final LCU install. This means cleanup may fail with a warning. Further, other changes include: 1) Moving some script comments into the main article, to improve readability. Most of this is related to the old approach where SSU was a separate update. 2) Adding Optional Components (or Legacy Features) to the script. This help ensure they are showcased before the LCU install. 3) Tweaked the main table of steps, to highlight SSU is coming from LCU, and the sequence change with main OS cleanup. --- .../deployment/update/media-dynamic-update.md | 350 +++++++++--------- 1 file changed, 171 insertions(+), 179 deletions(-) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index e5b5cd4a0b..511f9384c1 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -13,7 +13,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Windows Server -ms.date: 11/11/2024 +ms.date: 1/28/2024 --- # Update Windows installation media with Dynamic Update @@ -124,27 +124,27 @@ Properly updating the installation media involves many actions operating on seve This table shows the correct sequence for applying the various tasks to the files. For example, the full sequence starts with adding the servicing stack update to WinRE (1) and concludes with adding boot manager from WinPE to the new media (28). -|Task |WinRE (winre.wim) |Operating system (install.wim) | WinPE (boot.wim) | New media | -|-------------------------------------------|-------------------|--------------------------------|------------------|-----------| -|Add servicing stack Dynamic Update | 1 | 9 | 17 | | -|Add language pack | 2 | 10 | 18 | | -|Add localized optional packages | 3 | | 19 | | -|Add font support | 4 | | 20 | | -|Add text-to-speech | 5 | | 21 | | -|Update Lang.ini | | | 22 | | -|Add Features on Demand | | 11 | | | -|Add Safe OS Dynamic Update | 6 | | | | -|Add Setup Dynamic Update | | | | 26 | -|Add setup.exe and setuphost.exe from WinPE | | | | 27 | -|Add boot manager from WinPE | | | | 28 | -|Add latest cumulative update | | 12 | 23 | | -|Clean up the image | 7 | 13 | 24 | | -|Add Optional Components | | 14 | | | -|Add .NET and .NET cumulative updates | | 15 | | | -|Export image | 8 | 16 | 25 | | +|Task |WinRE (winre.wim) |Operating system (install.wim) | WinPE (boot.wim) | New media | +|--------------------------------------------------------|-------------------|--------------------------------|------------------|-----------| +|Add servicing stack update via latest cumulative update | 1 | 9 | 17 | | +|Add language pack | 2 | 10 | 18 | | +|Add localized optional packages | 3 | | 19 | | +|Add font support | 4 | | 20 | | +|Add text-to-speech | 5 | | 21 | | +|Update Lang.ini | | | 22 | | +|Add Features on Demand | | 11 | | | +|Add Optional Components | | 12 | | | +|Add Safe OS Dynamic Update | 6 | | | | +|Add Setup Dynamic Update | | | | 26 | +|Add setup.exe and setuphost.exe from WinPE | | | | 27 | +|Add boot manager from WinPE | | | | 28 | +|Add latest cumulative update | | 13 | 23 | | +|Clean up the image | 7 | 14 | 24 | | +|Add .NET and .NET cumulative updates | | 15 | | | +|Export image | 8 | 16 | 25 | | > [!NOTE] -> Starting in February 2021, the latest cumulative update and servicing stack update will be combined and distributed in the Microsoft Update Catalog as a new combined cumulative update. For Steps 1, 9, and 18 that require the servicing stack update for updating the installation media, you should use the combined cumulative update. For more information on the combined cumulative update, see [Servicing stack updates](./servicing-stack-updates.md). +> Starting in February 2021, the latest cumulative update and servicing stack update is combined and distributed in the Microsoft Update Catalog as a new combined cumulative update. For Steps 1, 9, and 17 that require the servicing stack update for updating the installation media, you should use the combined cumulative update. For more information on the combined cumulative update, see [Servicing stack updates](./servicing-stack-updates.md). > [!NOTE] > Microsoft will remove the Flash component from Windows through KB4577586, "Update for Removal of Adobe Flash Player". You can also remove Flash anytime by deploying the update in KB4577586 (available on the Catalog) between steps 20 and 21. As of July 2021, KB4577586, "Update for Removal of Adobe Flash Player" will be included in the latest cumulative update for Windows 10, versions 1607 and 1507. The update will also be included in the Monthly Rollup and the Security Only Update for Windows 8.1, Windows Server 2012, and Windows Embedded 8 Standard. For more information, see [Update on Adobe Flash Player End of Support](https://blogs.windows.com/msedgedev/2020/09/04/update-adobe-flash-end-support/). @@ -178,7 +178,8 @@ These examples are for illustration only, and therefore lack error handling. The ### Get started -The script starts by declaring global variables and creating folders to use for mounting images. Then, make a copy of the original media, from \oldMedia to \newMedia, keeping the original media in case there's a script error and it's necessary to start over from a known state. Also, it provides a comparison of old versus new media to evaluate changes. To ensure that the new media updates, make sure they aren't read-only. +The script starts by declaring global variables and creating folders to use for mounting images. Then, make a copy of the original media, from \oldMedia to \newMedia, keeping the original media in case there's a script error and it's necessary to start over from a known state. Also, it provides a comparison of old versus new media to evaluate changes. To ensure that the new media updates, make sure they aren't read-only. The script also showcases adding additional languages, Features on Demand, and Optional Components. These are not required, but added to highlight when in the sequence they should be addeed. Starting with Windows 11, version 21H2, the language pack (LANGPACK) ISO has been superseded by the FOD ISO. Language packs and the \Windows Preinstallation Environment packages are part of the LOF ISO. Further, the path for main OS language and optional features moved to \LanguagesAndOptionalFeatures instead of the root. If you are using this script for Windows 10, modify to mount and use the LANGPACK ISO. + ```powershell #Requires -RunAsAdministrator @@ -187,40 +188,38 @@ function Get-TS { return "{0:HH:mm:ss}" -f [DateTime]::Now } Write-Output "$(Get-TS): Starting media refresh" -# Declare language for showcasing adding optional localized components -$LANG = "ja-jp" -$LANG_FONT_CAPABILITY = "jpan" - -# Declare media for FOD and LPs -# Note: Starting with Windows 11, version 21H2, the language pack (LANGPACK) ISO has been superseded by the FOD ISO. -# Language packs and the \Windows Preinstallation Environment packages are part of the LOF ISO. -# If you are using this script for Windows 10, modify to mount and use the LANGPACK ISO. -$FOD_ISO_PATH = "C:\mediaRefresh\packages\FOD-PACKAGES_OEM_PT1_amd64fre_MULTI.iso" - # Declare Dynamic Update packages. A dedicated folder is used for the latest cumulative update, and as needed # checkpoint cumulative updates. $LCU_PATH = "C:\mediaRefresh\packages\CU\LCU.msu" -$SSU_PATH = "C:\mediaRefresh\packages\Other\SSU_DU.msu" $SETUP_DU_PATH = "C:\mediaRefresh\packages\Other\Setup_DU.cab" $SAFE_OS_DU_PATH = "C:\mediaRefresh\packages\Other\SafeOS_DU.cab" $DOTNET_CU_PATH = "C:\mediaRefresh\packages\Other\DotNet_CU.msu" -# Declare folders for mounted images and temp files -$MEDIA_OLD_PATH = "C:\mediaRefresh\oldMedia" -$MEDIA_NEW_PATH = "C:\mediaRefresh\newMedia" -$WORKING_PATH = "C:\mediaRefresh\temp" -$MAIN_OS_MOUNT = "C:\mediaRefresh\temp\MainOSMount" -$WINRE_MOUNT = "C:\mediaRefresh\temp\WinREMount" -$WINPE_MOUNT = "C:\mediaRefresh\temp\WinPEMount" +# Declare media for FOD and LPs +$FOD_ISO_PATH = "C:\mediaRefresh\packages\CLIENT_LOF_PACKAGES_OEM.iso" + +# Array of Features On Demand for main OS +# This is optional to showcase where these are added +$FOD = @( +'XPS.Viewer~~~~0.0.1.0' +) + +# Array of Legacy Features for main OS +# This is optional to showcase where these are added +$OC = @( +'MediaPlayback' +'WindowsMediaPlayer' +) # Mount the Features on Demand ISO Write-Output "$(Get-TS): Mounting FOD ISO" $FOD_ISO_DRIVE_LETTER = (Mount-DiskImage -ImagePath $FOD_ISO_PATH -ErrorAction stop | Get-Volume).DriveLetter - -# Note: Starting with Windows 11, version 21H2, the correct path for main OS language and optional features -# moved to \LanguagesAndOptionalFeatures instead of the root. For Windows 10, use $FOD_PATH = $FOD_ISO_DRIVE_LETTER + ":\" $FOD_PATH = $FOD_ISO_DRIVE_LETTER + ":\LanguagesAndOptionalFeatures" +# Declare language for showcasing adding optional localized components +$LANG = "ja-jp" +$LANG_FONT_CAPABILITY = "jpan" + # Declare language related cabs $WINPE_OC_PATH = "$FOD_ISO_DRIVE_LETTER`:\Windows Preinstallation Environment\x64\WinPE_OCs" $WINPE_OC_LANG_PATH = "$WINPE_OC_PATH\$LANG" @@ -231,6 +230,14 @@ $WINPE_SPEECH_TTS_PATH = "$WINPE_OC_PATH\WinPE-Speech-TTS.cab" $WINPE_SPEECH_TTS_LANG_PATH = "$WINPE_OC_PATH\WinPE-Speech-TTS-$LANG.cab" $OS_LP_PATH = "$FOD_PATH\Microsoft-Windows-Client-Language-Pack_x64_$LANG.cab" +# Declare folders for mounted images and temp files +$MEDIA_OLD_PATH = "C:\mediaRefresh\oldMedia\Ge\client_professional_en-us" +$MEDIA_NEW_PATH = "C:\mediaRefresh\newMedia" +$WORKING_PATH = "C:\mediaRefresh\temp" +$MAIN_OS_MOUNT = "C:\mediaRefresh\temp\MainOSMount" +$WINRE_MOUNT = "C:\mediaRefresh\temp\WinREMount" +$WINPE_MOUNT = "C:\mediaRefresh\temp\WinPEMount" + # Create folders for mounting images and storing temporary files New-Item -ItemType directory -Path $WORKING_PATH -ErrorAction Stop | Out-Null New-Item -ItemType directory -Path $MAIN_OS_MOUNT -ErrorAction stop | Out-Null @@ -241,15 +248,16 @@ New-Item -ItemType directory -Path $WINPE_MOUNT -ErrorAction stop | Out-Null Write-Output "$(Get-TS): Copying original media to new media path" Copy-Item -Path $MEDIA_OLD_PATH"\*" -Destination $MEDIA_NEW_PATH -Force -Recurse -ErrorAction stop | Out-Null Get-ChildItem -Path $MEDIA_NEW_PATH -Recurse | Where-Object { -not $_.PSIsContainer -and $_.IsReadOnly } | ForEach-Object { $_.IsReadOnly = $false } + ``` ### Update WinRE and each main OS Windows edition The script will update each edition of Windows within the main operating system file (install.wim). For each edition, the main OS image is mounted. -For the first image, Winre.wim is copied to the working folder, and mounted. It then applies servicing stack Dynamic Update, since its components are used for updating other components. Since the script is optionally adding Japanese, it adds the language pack to the image, and installs the Japanese versions of all optional packages already installed in Winre.wim. Then, it applies the Safe OS Dynamic Update package. It finishes by cleaning and exporting the image to reduce the image size. +For the first image, Winre.wim is copied to the working folder, and mounted. It then applies servicing stack servicing stack via the latest cumulative update, since its components are used for updating other components. Depending on the Windows release that you are updating, there are two different approaches for updating the servicing stack. The first approach is to use the combined cumulative update. This is for Windows releases that are shipping a combined cumulative update that includes the servicing stack updates (i.e. SSU + LCU are combined). Windows 11, version 21H2 and Windows 11, version 22H2 are examples. In these cases, the servicing stack update is not published seperately; the combined cumulative update should be used for this step. However, in hopefully rare cases, there may breaking change in the combined cumulative update format change, that requires a standalone servicing stack update to be published, and installed first before the combined cumulative update can be installed. Since the script is optionally adding Japanese, it adds the language pack to the image, and installs the Japanese versions of all optional packages already installed in Winre.wim. Then, it applies the Safe OS Dynamic Update package. It finishes by cleaning and exporting the image to reduce the image size. -Next, for the mounted OS image, the script starts by applying the servicing stack Dynamic Update. Then, it adds Japanese language support and then the Japanese language features. Unlike the Dynamic Update packages, it uses `Add-WindowsCapability` to add these features. For a full list of such features, and their associated capability name, see [Available Features on Demand](/windows-hardware/manufacture/desktop/features-on-demand-non-language-fod). Now is the time to enable other Optional Components or add other Features on Demand. If such a feature has an associated cumulative update (for example, .NET), this is the time to apply those. The script then proceeds with applying the latest cumulative update. Finally, the script cleans and exports the image. You can install Optional Components, along with the .NET feature, offline, but that requires the device to be restarted. This is why the script installs .NET and Optional Components after cleanup and before export. +Next, for the mounted OS image, the script starts by applying the servicing stack via the latest cumulative update. Then, it adds Japanese language support and then the Japanese language features. Unlike the Dynamic Update packages, it uses `Add-WindowsCapability` to add these features. For a full list of such features, and their associated capability name, see [Available Features on Demand](/windows-hardware/manufacture/desktop/features-on-demand-non-language-fod). Now is the time to enable other Optional Components or add other Features on Demand. If such a feature has an associated cumulative update (for example, .NET), this is the time to apply those. The script then attempts to clean the image, then a final step to apply the latest cumulative update. It is important to apply the latest cumulative update last, to ensure Features on Demand, Optional Components and Languages are updated from their initial release state. The .NET feature is an exception, that is added along with its cumulative update next. Finally, the script exports the image. This process is repeated for each edition of Windows within the main operating system file. To reduce size, the serviced Winre.wim file from the first image is saved, and used to update each subsequent Windows edition. This reduces the final size of install.wim. @@ -262,13 +270,15 @@ This process is repeated for each edition of Windows within the main operating s # Get the list of images contained within the main OS $WINOS_IMAGES = Get-WindowsImage -ImagePath $MEDIA_NEW_PATH"\sources\install.wim" -Foreach ($IMAGE in $WINOS_IMAGES) { +Foreach ($IMAGE in $WINOS_IMAGES) +{ # first mount the main OS image Write-Output "$(Get-TS): Mounting main OS, image index $($IMAGE.ImageIndex)" Mount-WindowsImage -ImagePath $MEDIA_NEW_PATH"\sources\install.wim" -Index $IMAGE.ImageIndex -Path $MAIN_OS_MOUNT -ErrorAction stop| Out-Null - if ($IMAGE.ImageIndex -eq "1") { + if ($IMAGE.ImageIndex -eq "1") + { # # update Windows Recovery Environment (WinRE) within this OS image @@ -278,29 +288,9 @@ Foreach ($IMAGE in $WINOS_IMAGES) { Mount-WindowsImage -ImagePath $WORKING_PATH"\winre.wim" -Index 1 -Path $WINRE_MOUNT -ErrorAction stop | Out-Null # Add servicing stack update (Step 1 from the table) - - # Depending on the Windows release that you are updating, there are 2 different approaches for updating the servicing stack - # The first approach is to use the combined cumulative update. This is for Windows releases that are shipping a combined - # cumulative update that includes the servicing stack updates (i.e. SSU + LCU are combined). Windows 11, version 21H2 and - # Windows 11, version 22H2 are examples. In these cases, the servicing stack update is not published seperately; the combined - # cumulative update should be used for this step. However, in hopefully rare cases, there may breaking change in the combined - # cumulative update format, that requires a standalone servicing stack update to be published, and installed first before the - # combined cumulative update can be installed. - - # This is the code to handle the rare case that the SSU is published and required for the combined cumulative update - # Write-Output "$(Get-TS): Adding package $SSU_PATH" - # Add-WindowsPackage -Path $WINRE_MOUNT -PackagePath $SSU_PATH | Out-Null - - # Now, attempt the combined cumulative update. - # There is a known issue where the servicing stack update is installed, but the cumulative update will fail. This error should - # be caught and ignored, as the last step will be to apply the Safe OS update and thus the image will be left with the correct - # packages installed. - - Write-Output "$(Get-TS): Adding package $LCU_PATH to WinRE" try { - Add-WindowsPackage -Path $WINRE_MOUNT -PackagePath $LCU_PATH | Out-Null } Catch @@ -308,38 +298,36 @@ Foreach ($IMAGE in $WINOS_IMAGES) { $theError = $_ Write-Output "$(Get-TS): $theError" - if ($theError.Exception -like "*0x8007007e*") { - Write-Output "$(Get-TS): This failure is a known issue with combined cumulative update, we can ignore." + if ($theError.Exception -like "*0x8007007e*") + { + Write-Warning "$(Get-TS): Failed with error 0x8007007e. This failure is a known issue with combined cumulative update, we can ignore." } - else { + else + { throw } } - # The second approach for Step 1 is for Windows releases that have not adopted the combined cumulative update - # but instead continue to have a seperate servicing stack update published. In this case, we'll install the SSU - # update. This second approach is commented out below. - - # Write-Output "$(Get-TS): Adding package $SSU_PATH" - # Add-WindowsPackage -Path $WINRE_MOUNT -PackagePath $SSU_PATH | Out-Null - # # Optional: Add the language to recovery environment # + # Install lp.cab cab Write-Output "$(Get-TS): Adding package $WINPE_OC_LP_PATH to WinRE" Add-WindowsPackage -Path $WINRE_MOUNT -PackagePath $WINPE_OC_LP_PATH -ErrorAction stop | Out-Null # Install language cabs for each optional package installed $WINRE_INSTALLED_OC = Get-WindowsPackage -Path $WINRE_MOUNT - Foreach ($PACKAGE in $WINRE_INSTALLED_OC) { - - if ( ($PACKAGE.PackageState -eq "Installed") -and ($PACKAGE.PackageName.startsWith("WinPE-")) -and ($PACKAGE.ReleaseType -eq "FeaturePack") ) { - + Foreach ($PACKAGE in $WINRE_INSTALLED_OC) + { + if ( ($PACKAGE.PackageState -eq "Installed") -and ($PACKAGE.PackageName.startsWith("WinPE-")) -and ($PACKAGE.ReleaseType -eq "FeaturePack") ) + { $INDEX = $PACKAGE.PackageName.IndexOf("-Package") - if ($INDEX -ge 0) { + if ($INDEX -ge 0) + { $OC_CAB = $PACKAGE.PackageName.Substring(0, $INDEX) + "_" + $LANG + ".cab" - if ($WINPE_OC_LANG_CABS.Contains($OC_CAB)) { + if ($WINPE_OC_LANG_CABS.Contains($OC_CAB)) + { $OC_CAB_PATH = Join-Path $WINPE_OC_LANG_PATH $OC_CAB Write-Output "$(Get-TS): Adding package $OC_CAB_PATH to WinRE" Add-WindowsPackage -Path $WINRE_MOUNT -PackagePath $OC_CAB_PATH -ErrorAction stop | Out-Null @@ -349,15 +337,17 @@ Foreach ($IMAGE in $WINOS_IMAGES) { } # Add font support for the new language - if ( (Test-Path -Path $WINPE_FONT_SUPPORT_PATH) ) { + if ( (Test-Path -Path $WINPE_FONT_SUPPORT_PATH) ) + { Write-Output "$(Get-TS): Adding package $WINPE_FONT_SUPPORT_PATH to WinRE" Add-WindowsPackage -Path $WINRE_MOUNT -PackagePath $WINPE_FONT_SUPPORT_PATH -ErrorAction stop | Out-Null } # Add TTS support for the new language - if (Test-Path -Path $WINPE_SPEECH_TTS_PATH) { - if ( (Test-Path -Path $WINPE_SPEECH_TTS_LANG_PATH) ) { - + if (Test-Path -Path $WINPE_SPEECH_TTS_PATH) + { + if ( (Test-Path -Path $WINPE_SPEECH_TTS_LANG_PATH) ) + { Write-Output "$(Get-TS): Adding package $WINPE_SPEECH_TTS_PATH to WinRE" Add-WindowsPackage -Path $WINRE_MOUNT -PackagePath $WINPE_SPEECH_TTS_PATH -ErrorAction stop | Out-Null @@ -373,6 +363,10 @@ Foreach ($IMAGE in $WINOS_IMAGES) { # Perform image cleanup Write-Output "$(Get-TS): Performing image cleanup on WinRE" DISM /image:$WINRE_MOUNT /cleanup-image /StartComponentCleanup /ResetBase /Defer | Out-Null + if ($LastExitCode -ne 0) + { + throw "Error: Failed to perform image cleanup on WinRE. Exit code: $LastExitCode" + } # Dismount Dismount-WindowsImage -Path $WINRE_MOUNT -Save -ErrorAction stop | Out-Null @@ -389,35 +383,15 @@ Foreach ($IMAGE in $WINOS_IMAGES) { # update Main OS # - # Add servicing stack update (Step 18 from the table) - - # Depending on the Windows release that you are updating, there are 2 different approaches for updating the servicing stack - # The first approach is to use the combined cumulative update. This is for Windows releases that are shipping a combined cumulative update that - # includes the servicing stack updates (i.e. SSU + LCU are combined). Windows 11, version 21H2 and Windows 11, version 22H2 are examples. In these - # cases, the servicing stack update is not published seperately; the combined cumulative update should be used for this step. However, in hopefully - # rare cases, there may breaking change in the combined cumulative update format, that requires a standalone servicing stack update to be published, - # and installed first before the combined cumulative update can be installed. - - # This is the code to handle the rare case that the SSU is published and required for the combined cumulative update - # Write-Output "$(Get-TS): Adding package $SSU_PATH" - # Add-WindowsPackage -Path $MAIN_OS_MOUNT -PackagePath $SSU_PATH | Out-Null - - # Now, attempt the combined cumulative update. Unlike WinRE and WinPE, we don't need to check for error 0x8007007e + # Add servicing stack update (Step 17 from the table). Unlike WinRE and WinPE, we don't need to check for error 0x8007007e Write-Output "$(Get-TS): Adding package $LCU_PATH to main OS, index $($IMAGE.ImageIndex)" Add-WindowsPackage -Path $MAIN_OS_MOUNT -PackagePath $LCU_PATH | Out-Null - # The second approach for Step 18 is for Windows releases that have not adopted the combined cumulative update - # but instead continue to have a seperate servicing stack update published. In this case, we'll install the SSU - # update. This second approach is commented out below. - # Write-Output "$(Get-TS): Adding package $SSU_PATH to main OS, index $($IMAGE.ImageIndex)" - # Add-WindowsPackage -Path $MAIN_OS_MOUNT -PackagePath $SSU_PATH | Out-Null - - # Optional: Add language to main OS + # Optional: Add language to main OS and corresponding language experience Features on Demand Write-Output "$(Get-TS): Adding package $OS_LP_PATH to main OS, index $($IMAGE.ImageIndex)" Add-WindowsPackage -Path $MAIN_OS_MOUNT -PackagePath $OS_LP_PATH -ErrorAction stop | Out-Null - # Optional: Add a Features on Demand to the image Write-Output "$(Get-TS): Adding language FOD: Language.Fonts.Jpan~~~und-JPAN~0.0.1.0 to main OS, index $($IMAGE.ImageIndex)" Add-WindowsCapability -Name "Language.Fonts.$LANG_FONT_CAPABILITY~~~und-$LANG_FONT_CAPABILITY~0.0.1.0" -Path $MAIN_OS_MOUNT -Source $FOD_PATH -ErrorAction stop | Out-Null @@ -436,22 +410,47 @@ Foreach ($IMAGE in $WINOS_IMAGES) { Write-Output "$(Get-TS): Adding language FOD: Language.Speech~~~$LANG~0.0.1.0 to main OS, index $($IMAGE.ImageIndex)" Add-WindowsCapability -Name "Language.Speech~~~$LANG~0.0.1.0" -Path $MAIN_OS_MOUNT -Source $FOD_PATH -ErrorAction stop | Out-Null - # Note: If I wanted to enable additional Features on Demand, I'd add these here. + # Optional: Add additional Features On Demand + For ( $index = 0; $index -lt $FOD.count; $index++)# + { + Write-Output "$(Get-TS): Adding $($FOD[$index]) to main OS, index $($IMAGE.ImageIndex)" + Add-WindowsCapability -Name $($FOD[$index]) -Path $MAIN_OS_MOUNT -Source $FOD_PATH -ErrorAction stop | Out-Null + } + + # Optional: Add Legacy Features + For ( $index = 0; $index -lt $OC.count; $index++) + { + Write-Output "$(Get-TS): Adding $($OC[$index]) to main OS, index $($IMAGE.ImageIndex)" + DISM /Image:$MAIN_OS_MOUNT /Enable-Feature /FeatureName:$($OC[$index]) /All | Out-Null + if ($LastExitCode -ne 0) + { + throw "Error: Failed to add $($OC[$index]) to main OS, index $($IMAGE.ImageIndex). Exit code: $LastExitCode" + } + } # Add latest cumulative update Write-Output "$(Get-TS): Adding package $LCU_PATH to main OS, index $($IMAGE.ImageIndex)" Add-WindowsPackage -Path $MAIN_OS_MOUNT -PackagePath $LCU_PATH -ErrorAction stop | Out-Null - # Perform image cleanup + # Perform image cleanup. Some Optional Components might require the image to be booted, and thus + # image cleanup may fail. We'll catch and handle as a warning. Write-Output "$(Get-TS): Performing image cleanup on main OS, index $($IMAGE.ImageIndex)" DISM /image:$MAIN_OS_MOUNT /cleanup-image /StartComponentCleanup | Out-Null + if ($LastExitCode -ne 0) + { + if ($LastExitCode -eq -2146498554) + { + # We hit 0x800F0806 CBS_E_PENDING. We will ignore this with a warning + # This is likely due to legacy components being added that require online operations. + Write-Warning "$(Get-TS): Failed to perform image cleanup on main OS, index $($IMAGE.ImageIndex). Exit code: $LastExitCode. The operation cannot be performed until pending servicing operations are completed. The image must be booted to complete the pending servicing operation." + } + else + { + throw "Error: Failed to perform image cleanup on main OS, index $($IMAGE.ImageIndex). Exit code: $LastExitCode" + } + } - # - # Note: If I wanted to enable additional Optional Components, I'd add these here. - # In addition, we'll add .NET 3.5 here as well. Both .NET and Optional Components might require - # the image to be booted, and thus if we tried to cleanup after installation, it would fail. - # - + # Finally, we'll add .NET 3.5 and the .NET cumulative update Write-Output "$(Get-TS): Adding NetFX3~~~~ to main OS, index $($IMAGE.ImageIndex)" Add-WindowsCapability -Name "NetFX3~~~~" -Path $MAIN_OS_MOUNT -Source $FOD_PATH -ErrorAction stop | Out-Null @@ -465,7 +464,6 @@ Foreach ($IMAGE in $WINOS_IMAGES) { # Export Write-Output "$(Get-TS): Exporting image to $WORKING_PATH\install2.wim" Export-WindowsImage -SourceImagePath $MEDIA_NEW_PATH"\sources\install.wim" -SourceIndex $IMAGE.ImageIndex -DestinationImagePath $WORKING_PATH"\install2.wim" -ErrorAction stop | Out-Null - } Move-Item -Path $WORKING_PATH"\install2.wim" -Destination $MEDIA_NEW_PATH"\sources\install.wim" -Force -ErrorAction stop | Out-Null @@ -484,31 +482,14 @@ This script is similar to the one that updates WinRE, but instead it mounts Boot # Get the list of images contained within WinPE $WINPE_IMAGES = Get-WindowsImage -ImagePath $MEDIA_NEW_PATH"\sources\boot.wim" -Foreach ($IMAGE in $WINPE_IMAGES) { +Foreach ($IMAGE in $WINPE_IMAGES) +{ # update WinPE Write-Output "$(Get-TS): Mounting WinPE, image index $($IMAGE.ImageIndex)" Mount-WindowsImage -ImagePath $MEDIA_NEW_PATH"\sources\boot.wim" -Index $IMAGE.ImageIndex -Path $WINPE_MOUNT -ErrorAction stop | Out-Null # Add servicing stack update (Step 9 from the table) - - # Depending on the Windows release that you are updating, there are 2 different approaches for updating the servicing stack - # The first approach is to use the combined cumulative update. This is for Windows releases that are shipping a combined - # cumulative update that includes the servicing stack updates (i.e. SSU + LCU are combined). Windows 11, version 21H2 and - # Windows 11, version 22H2 are examples. In these cases, the servicing stack update is not published separately; the combined - # cumulative update should be used for this step. However, in hopefully rare cases, there may breaking change in the combined - # cumulative update format, that requires a standalone servicing stack update to be published, and installed first before the - # combined cumulative update can be installed. - - # This is the code to handle the rare case that the SSU is published and required for the combined cumulative update - # Write-Output "$(Get-TS): Adding package $SSU_PATH" - # Add-WindowsPackage -Path $WINPE_MOUNT -PackagePath $SSU_PATH | Out-Null - - # Now, attempt the combined cumulative update. - # There is a known issue where the servicing stack update is installed, but the cumulative update will fail. - # This error should be caught and ignored, as the last step will be to apply the cumulative update - # (or in this case the combined cumulative update) and thus the image will be left with the correct packages installed. - try { Write-Output "$(Get-TS): Adding package $LCU_PATH to WinPE, image index $($IMAGE.ImageIndex)" @@ -518,38 +499,34 @@ Foreach ($IMAGE in $WINPE_IMAGES) { { $theError = $_ Write-Output "$(Get-TS): $theError" - - if ($theError.Exception -like "*0x8007007e*") { - Write-Output "$(Get-TS): This failure is a known issue with combined cumulative update, we can ignore." + if ($theError.Exception -like "*0x8007007e*") + { + Write-Warning "$(Get-TS): Failed with error 0x8007007e. This failure is a known issue with combined cumulative update, we can ignore." } - else { + else + { throw } } - # The second approach for Step 9 is for Windows releases that have not adopted the combined cumulative update - # but instead continue to have a separate servicing stack update published. In this case, we'll install the SSU - # update. This second approach is commented out below. - - # Write-Output "$(Get-TS): Adding package $SSU_PATH" - # Add-WindowsPackage -Path $WINPE_MOUNT -PackagePath $SSU_PATH | Out-Null - # Install lp.cab cab Write-Output "$(Get-TS): Adding package $WINPE_OC_LP_PATH to WinPE, image index $($IMAGE.ImageIndex)" Add-WindowsPackage -Path $WINPE_MOUNT -PackagePath $WINPE_OC_LP_PATH -ErrorAction stop | Out-Null # Install language cabs for each optional package installed $WINPE_INSTALLED_OC = Get-WindowsPackage -Path $WINPE_MOUNT - Foreach ($PACKAGE in $WINPE_INSTALLED_OC) { - - if ( ($PACKAGE.PackageState -eq "Installed") -and ($PACKAGE.PackageName.startsWith("WinPE-")) -and ($PACKAGE.ReleaseType -eq "FeaturePack") ) { - + Foreach ($PACKAGE in $WINPE_INSTALLED_OC) + { + if ( ($PACKAGE.PackageState -eq "Installed") -and ($PACKAGE.PackageName.startsWith("WinPE-")) -and ($PACKAGE.ReleaseType -eq "FeaturePack") ) + { $INDEX = $PACKAGE.PackageName.IndexOf("-Package") - if ($INDEX -ge 0) { - + if ($INDEX -ge 0) + { $OC_CAB = $PACKAGE.PackageName.Substring(0, $INDEX) + "_" + $LANG + ".cab" - if ($WINPE_OC_LANG_CABS.Contains($OC_CAB)) { + if ($WINPE_OC_LANG_CABS.Contains($OC_CAB)) + { $OC_CAB_PATH = Join-Path $WINPE_OC_LANG_PATH $OC_CAB + Write-Output "$(Get-TS): Adding package $OC_CAB_PATH to WinPE, image index $($IMAGE.ImageIndex)" Add-WindowsPackage -Path $WINPE_MOUNT -PackagePath $OC_CAB_PATH -ErrorAction stop | Out-Null } @@ -558,15 +535,17 @@ Foreach ($IMAGE in $WINPE_IMAGES) { } # Add font support for the new language - if ( (Test-Path -Path $WINPE_FONT_SUPPORT_PATH) ) { + if ( (Test-Path -Path $WINPE_FONT_SUPPORT_PATH) ) + { Write-Output "$(Get-TS): Adding package $WINPE_FONT_SUPPORT_PATH to WinPE, image index $($IMAGE.ImageIndex)" Add-WindowsPackage -Path $WINPE_MOUNT -PackagePath $WINPE_FONT_SUPPORT_PATH -ErrorAction stop | Out-Null } # Add TTS support for the new language - if (Test-Path -Path $WINPE_SPEECH_TTS_PATH) { - if ( (Test-Path -Path $WINPE_SPEECH_TTS_LANG_PATH) ) { - + if (Test-Path -Path $WINPE_SPEECH_TTS_PATH) + { + if ( (Test-Path -Path $WINPE_SPEECH_TTS_LANG_PATH) ) + { Write-Output "$(Get-TS): Adding package $WINPE_SPEECH_TTS_PATH to WinPE, image index $($IMAGE.ImageIndex)" Add-WindowsPackage -Path $WINPE_MOUNT -PackagePath $WINPE_SPEECH_TTS_PATH -ErrorAction stop | Out-Null @@ -576,9 +555,14 @@ Foreach ($IMAGE in $WINPE_IMAGES) { } # Generates a new Lang.ini file which is used to define the language packs inside the image - if ( (Test-Path -Path $WINPE_MOUNT"\sources\lang.ini") ) { + if ( (Test-Path -Path $WINPE_MOUNT"\sources\lang.ini") ) + { Write-Output "$(Get-TS): Updating lang.ini" DISM /image:$WINPE_MOUNT /Gen-LangINI /distribution:$WINPE_MOUNT | Out-Null + if ($LastExitCode -ne 0) + { + throw "Error: Failed to update lang.ini. Exit code: $LastExitCode" + } } # Add latest cumulative update @@ -588,28 +572,31 @@ Foreach ($IMAGE in $WINPE_IMAGES) { # Perform image cleanup Write-Output "$(Get-TS): Performing image cleanup on WinPE, image index $($IMAGE.ImageIndex)" DISM /image:$WINPE_MOUNT /cleanup-image /StartComponentCleanup /ResetBase /Defer | Out-Null + if ($LastExitCode -ne 0) + { + throw "Error: Failed to perform image cleanup on WinPE, image index $($IMAGE.ImageIndex). Exit code: $LastExitCode" + } - if ($IMAGE.ImageIndex -eq "2") { - + if ($IMAGE.ImageIndex -eq "2") + { # Save setup.exe for later use. This will address possible binary mismatch with the version in the main OS \sources folder Copy-Item -Path $WINPE_MOUNT"\sources\setup.exe" -Destination $WORKING_PATH"\setup.exe" -Force -ErrorAction stop | Out-Null # Save setuphost.exe for later use. This will address possible binary mismatch with the version in the main OS \sources folder # This is only required starting with Windows 11 version 24H2 $TEMP = Get-WindowsImage -ImagePath $MEDIA_NEW_PATH"\sources\boot.wim" -Index $IMAGE.ImageIndex - if ([System.Version]$TEMP.Version -ge [System.Version]"10.0.26100") { - + if ([System.Version]$TEMP.Version -ge [System.Version]"10.0.26100") + { Copy-Item -Path $WINPE_MOUNT"\sources\setuphost.exe" -Destination $WORKING_PATH"\setuphost.exe" -Force -ErrorAction stop | Out-Null } - else { - + else + { Write-Output "$(Get-TS): Skipping copy of setuphost.exe; image version $($TEMP.Version)" } # Save serviced boot manager files later copy to the root media. Copy-Item -Path $WINPE_MOUNT"\Windows\boot\efi\bootmgfw.efi" -Destination $WORKING_PATH"\bootmgfw.efi" -Force -ErrorAction stop | Out-Null Copy-Item -Path $WINPE_MOUNT"\Windows\boot\efi\bootmgr.efi" -Destination $WORKING_PATH"\bootmgr.efi" -Force -ErrorAction stop | Out-Null - } # Dismount @@ -618,10 +605,10 @@ Foreach ($IMAGE in $WINPE_IMAGES) { #Export WinPE Write-Output "$(Get-TS): Exporting image to $WORKING_PATH\boot2.wim" Export-WindowsImage -SourceImagePath $MEDIA_NEW_PATH"\sources\boot.wim" -SourceIndex $IMAGE.ImageIndex -DestinationImagePath $WORKING_PATH"\boot2.wim" -ErrorAction stop | Out-Null - } Move-Item -Path $WORKING_PATH"\boot2.wim" -Destination $MEDIA_NEW_PATH"\sources\boot.wim" -Force -ErrorAction stop | Out-Null + ``` ### Update remaining media files @@ -636,14 +623,18 @@ This part of the script updates the Setup files. It simply copies the individual # Add Setup DU by copy the files from the package into the newMedia Write-Output "$(Get-TS): Adding package $SETUP_DU_PATH" cmd.exe /c $env:SystemRoot\System32\expand.exe $SETUP_DU_PATH -F:* $MEDIA_NEW_PATH"\sources" | Out-Null +if ($LastExitCode -ne 0) +{ + throw "Error: Failed to expand $SETUP_DU_PATH. Exit code: $LastExitCode" +} # Copy setup.exe from boot.wim, saved earlier. Write-Output "$(Get-TS): Copying $WORKING_PATH\setup.exe to $MEDIA_NEW_PATH\sources\setup.exe" Copy-Item -Path $WORKING_PATH"\setup.exe" -Destination $MEDIA_NEW_PATH"\sources\setup.exe" -Force -ErrorAction stop | Out-Null # Copy setuphost.exe from boot.wim, saved earlier. -if (Test-Path -Path $WORKING_PATH"\setuphost.exe") { - +if (Test-Path -Path $WORKING_PATH"\setuphost.exe") +{ Write-Output "$(Get-TS): Copying $WORKING_PATH\setuphost.exe to $MEDIA_NEW_PATH\sources\setuphost.exe" Copy-Item -Path $WORKING_PATH"\setuphost.exe" -Destination $MEDIA_NEW_PATH"\sources\setuphost.exe" -Force -ErrorAction stop | Out-Null } @@ -651,28 +642,20 @@ if (Test-Path -Path $WORKING_PATH"\setuphost.exe") { # Copy bootmgr files from boot.wim, saved earlier. $MEDIA_NEW_FILES = Get-ChildItem $MEDIA_NEW_PATH -Force -Recurse -Filter b*.efi -Foreach ($File in $MEDIA_NEW_FILES){ +Foreach ($File in $MEDIA_NEW_FILES) +{ if (($File.Name -ieq "bootmgfw.efi") -or ($File.Name -ieq "bootx64.efi") -or ($File.Name -ieq "bootia32.efi") -or ($File.Name -ieq "bootaa64.efi")) { - Write-Output "$(Get-TS): Copying $WORKING_PATH\bootmgfw.efi to $($File.FullName)" Copy-Item -Path $WORKING_PATH"\bootmgfw.efi" -Destination $File.FullName -Force -ErrorAction stop | Out-Null } elseif ($File.Name -ieq "bootmgr.efi") { - Write-Output "$(Get-TS): Copying $WORKING_PATH\bootmgr.efi to $($File.FullName)" Copy-Item -Path $WORKING_PATH"\bootmgr.efi" -Destination $File.FullName -Force -ErrorAction stop | Out-Null } } -``` - -### Finish up - -As a last step, the script removes the working folder of temporary files, and unmounts our language pack and Features on Demand ISOs. - -```powershell # # Perform final cleanup # @@ -685,4 +668,13 @@ Write-Output "$(Get-TS): Dismounting ISO images" Dismount-DiskImage -ImagePath $FOD_ISO_PATH -ErrorAction stop | Out-Null Write-Output "$(Get-TS): Media refresh completed!" + +``` + +### Finish up + +As a last step, the script removes the working folder of temporary files, and unmounts our language pack and Features on Demand ISOs. + +```powershell +TODO ``` From 094d415c7a865a6ecbc9d12bce15cf42a2847035 Mon Sep 17 00:00:00 2001 From: "Steve DiAcetis (MSFT)" <52939067+SteveDiAcetis@users.noreply.github.com> Date: Mon, 27 Jan 2025 11:27:28 -0800 Subject: [PATCH 047/123] Update media-dynamic-update.md --- windows/deployment/update/media-dynamic-update.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index 511f9384c1..1e669a15c7 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -178,7 +178,7 @@ These examples are for illustration only, and therefore lack error handling. The ### Get started -The script starts by declaring global variables and creating folders to use for mounting images. Then, make a copy of the original media, from \oldMedia to \newMedia, keeping the original media in case there's a script error and it's necessary to start over from a known state. Also, it provides a comparison of old versus new media to evaluate changes. To ensure that the new media updates, make sure they aren't read-only. The script also showcases adding additional languages, Features on Demand, and Optional Components. These are not required, but added to highlight when in the sequence they should be addeed. Starting with Windows 11, version 21H2, the language pack (LANGPACK) ISO has been superseded by the FOD ISO. Language packs and the \Windows Preinstallation Environment packages are part of the LOF ISO. Further, the path for main OS language and optional features moved to \LanguagesAndOptionalFeatures instead of the root. If you are using this script for Windows 10, modify to mount and use the LANGPACK ISO. +The script starts by declaring global variables and creating folders to use for mounting images. Then, make a copy of the original media, from \oldMedia to \newMedia, keeping the original media in case there's a script error and it's necessary to start over from a known state. Also, it provides a comparison of old versus new media to evaluate changes. To ensure that the new media updates, make sure they aren't read-only. The script also showcases adding additional languages, Features on Demand, and Optional Components. These are not required, but added to highlight when in the sequence they should be addeed. Starting with Windows 11, version 21H2, the language pack (LANGPACK) ISO has been superseded by the Features on Demand ISO. Language packs and the \Windows Preinstallation Environment packages are part of the Features on Demand ISO. Further, the path for main OS language and optional features moved to \LanguagesAndOptionalFeatures instead of the root. If you are using this script for Windows 10, modify to mount and use the language pack (LANGPACK) ISO. ```powershell From 2fe8a6231bbd70eabef20c231d1566e9be081931 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 27 Jan 2025 12:35:34 -0800 Subject: [PATCH 048/123] cpw-9694988 --- windows/client-management/toc.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/toc.yml b/windows/client-management/toc.yml index 711bc21aea..955dee1921 100644 --- a/windows/client-management/toc.yml +++ b/windows/client-management/toc.yml @@ -48,7 +48,7 @@ items: href: enterprise-app-management.md - name: Manage updates href: device-update-management.md - - name: Updated Windows and Microsoft Copilot experience + - name: Updated Windows and Microsoft 365 Copilot Chat experience href: manage-windows-copilot.md - name: Manage Recall href: manage-recall.md From a149e3de7b255fb9a6fd740658184702d1186860 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 27 Jan 2025 12:37:17 -0800 Subject: [PATCH 049/123] cpw-9694988 --- windows/client-management/manage-windows-copilot.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/manage-windows-copilot.md b/windows/client-management/manage-windows-copilot.md index 5014d53399..2af6627e8d 100644 --- a/windows/client-management/manage-windows-copilot.md +++ b/windows/client-management/manage-windows-copilot.md @@ -59,9 +59,9 @@ For users signing in to new PCs with work or school accounts, the following expe The update to Microsoft 365 Copilot Chat to offer enterprise data protection is rolling out now. The shift to Microsoft 365 Copilot Chat is coming soon. Changes will be rolled out to managed PCs starting with the September 2024 optional nonsecurity preview release, and following with the October 2024 monthly security update for all supported versions of Windows 11. These changes will be applied to Windows 10 PCs the month after. This update is replacing the current Copilot in Windows experience. -The Microsoft Copilot app will be automatically enabled after you install the Windows updates listed above if you haven't previously enabled a group policy to prevent the installation of Copilot. The [AppLocker policy](/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) is available to control this Copilot experience before installing these Windows updates mentioned above or any subsequent Windows updates. +The Copilot app will be automatically enabled after you install the Windows updates listed above if you haven't previously enabled a group policy to prevent the installation of Copilot. The [AppLocker policy](/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) is available to control this Copilot experience before installing these Windows updates mentioned above or any subsequent Windows updates. -Note that the Microsoft Copilot app, which is a consumer experience, doesn't support Microsoft Entra authentication and users trying to sign in to the app using a Microsoft Entra account will be redirected to https://copilot.cloud.microsoft/ in their default browser. For users authenticating with a Microsoft Entra account, they should access Copilot through the Microsoft 365 Copilot app as the entry point. We recommend you pin Copilot to the navigation bar of the Microsoft 365 Copilot app to enable easy access. +Note that the Copilot app, which is a consumer experience, doesn't support Microsoft Entra authentication and users trying to sign in to the app using a Microsoft Entra account will be redirected to https://copilot.cloud.microsoft/ in their default browser. For users authenticating with a Microsoft Entra account, they should access Copilot through the Microsoft 365 Copilot app as the entry point. We recommend you pin Copilot to the navigation bar of the Microsoft 365 Copilot app to enable easy access. ## Policy information for previous Copilot in Windows (preview) experience From 9bd82cce5f826a981939db7ae8c967548b50ea6c Mon Sep 17 00:00:00 2001 From: "Steve DiAcetis (MSFT)" <52939067+SteveDiAcetis@users.noreply.github.com> Date: Mon, 27 Jan 2025 13:36:06 -0800 Subject: [PATCH 050/123] Update media-dynamic-update.md --- windows/deployment/update/media-dynamic-update.md | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index 1e669a15c7..0ae148a631 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -656,6 +656,13 @@ Foreach ($File in $MEDIA_NEW_FILES) } } +``` + +### Finish up + +As a last step, the script removes the working folder of temporary files, and unmounts our language pack and Features on Demand ISOs. + +```powershell # # Perform final cleanup # @@ -670,11 +677,3 @@ Dismount-DiskImage -ImagePath $FOD_ISO_PATH -ErrorAction stop | Out-Null Write-Output "$(Get-TS): Media refresh completed!" ``` - -### Finish up - -As a last step, the script removes the working folder of temporary files, and unmounts our language pack and Features on Demand ISOs. - -```powershell -TODO -``` From a59e627cf321c8d417783ef68ab692fe878c3596 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 27 Jan 2025 20:51:26 -0500 Subject: [PATCH 051/123] freshness review --- education/windows/federated-sign-in.md | 2 +- .../hello-for-business/rdp-sign-in.md | 2 +- ...e-hellman-protocol-over-ikev2-vpn-connections.md | 2 +- ...le-sign-on-sso-over-vpn-and-wi-fi-connections.md | 2 +- .../network-security/vpn/vpn-authentication.md | 13 +------------ .../vpn/vpn-auto-trigger-profile.md | 13 +------------ .../network-security/vpn/vpn-conditional-access.md | 13 +------------ .../network-security/vpn/vpn-connection-type.md | 12 +----------- .../network-security/vpn/vpn-guide.md | 2 +- .../network-security/vpn/vpn-name-resolution.md | 13 +------------ .../vpn/vpn-office-365-optimization.md | 2 +- .../network-security/vpn/vpn-profile-options.md | 12 +----------- .../network-security/vpn/vpn-routing.md | 13 +------------ .../network-security/vpn/vpn-security-features.md | 13 +------------ 14 files changed, 14 insertions(+), 100 deletions(-) diff --git a/education/windows/federated-sign-in.md b/education/windows/federated-sign-in.md index aca908bb45..9a73ef453c 100644 --- a/education/windows/federated-sign-in.md +++ b/education/windows/federated-sign-in.md @@ -1,7 +1,7 @@ --- title: Configure federated sign-in for Windows devices description: Learn how federated sign-in in Windows works and how to configure it. -ms.date: 06/03/2024 +ms.date: 01/27/2025 ms.topic: how-to appliesto: - ✅ Windows 11 diff --git a/windows/security/identity-protection/hello-for-business/rdp-sign-in.md b/windows/security/identity-protection/hello-for-business/rdp-sign-in.md index bc28fecee5..305932af9b 100644 --- a/windows/security/identity-protection/hello-for-business/rdp-sign-in.md +++ b/windows/security/identity-protection/hello-for-business/rdp-sign-in.md @@ -1,7 +1,7 @@ --- title: Remote Desktop sign-in with Windows Hello for Business description: Learn how to configure Remote Desktop (RDP) sign-in with Windows Hello for Business. -ms.date: 06/11/2024 +ms.date: 01/27/2025 ms.topic: how-to --- diff --git a/windows/security/operating-system-security/network-security/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/security/operating-system-security/network-security/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index c2a7ae57a8..2fc0efca6e 100644 --- a/windows/security/operating-system-security/network-security/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/security/operating-system-security/network-security/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -1,7 +1,7 @@ --- title: How to configure cryptographic settings for IKEv2 VPN connections description: Learn how to update the IKEv2 cryptographic settings of VPN servers and clients by running VPN cmdlets to secure connections. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: how-to --- diff --git a/windows/security/operating-system-security/network-security/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md b/windows/security/operating-system-security/network-security/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md index daf7f89f5d..9a4865a98c 100644 --- a/windows/security/operating-system-security/network-security/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md +++ b/windows/security/operating-system-security/network-security/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md @@ -1,7 +1,7 @@ --- title: How to use single sign-on (SSO) over VPN and Wi-Fi connections description: Explains requirements to enable single sign-on (SSO) to on-premises domain resources over WiFi or VPN connections. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: how-to --- diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-authentication.md b/windows/security/operating-system-security/network-security/vpn/vpn-authentication.md index 539eeaeda6..26a2c22a06 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-authentication.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-authentication.md @@ -1,7 +1,7 @@ --- title: VPN authentication options description: Learn about the EAP authentication methods that Windows supports in VPNs to provide secure authentication using username/password and certificate-based methods. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: concept-article --- @@ -80,14 +80,3 @@ The following image shows the field for EAP XML in a Microsoft Intune VPN profil :::image type="content" source="images/vpn-eap-xml.png" alt-text="Screenshot showing EAP XML configuration in Intune profile."::: -## Related topics - -- [VPN technical guide](vpn-guide.md) -- [VPN connection types](vpn-connection-type.md) -- [VPN routing decisions](vpn-routing.md) -- [VPN and conditional access](vpn-conditional-access.md) -- [VPN name resolution](vpn-name-resolution.md) -- [VPN auto-triggered profile options](vpn-auto-trigger-profile.md) -- [VPN security features](vpn-security-features.md) -- [VPN profile options](vpn-profile-options.md) -- [Extensible Authentication Protocol (EAP) for network access](/windows-server/networking/technologies/extensible-authentication-protocol/network-access) diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-auto-trigger-profile.md b/windows/security/operating-system-security/network-security/vpn/vpn-auto-trigger-profile.md index 85b51dd4d1..53c870afc0 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-auto-trigger-profile.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-auto-trigger-profile.md @@ -1,7 +1,7 @@ --- title: VPN auto-triggered profile options description: With auto-triggered VPN profile options, Windows can automatically establish a VPN connection based on IT admin-defined rules. Learn about the types of auto-trigger rules that you can create for VPN connections. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: how-to --- @@ -77,14 +77,3 @@ See [VPN profile options](vpn-profile-options.md) and [VPNv2 CSP](/windows/clien The following image shows associating apps to a VPN connection in a VPN Profile configuration policy using Microsoft Intune. :::image type="content" source="images/vpn-app-trigger.png" alt-text="Creation of VPN profile in Intune: application association options." lightbox="images/vpn-app-trigger.png"::: - -## Related articles - -- [VPN technical guide](vpn-guide.md) -- [VPN connection types](vpn-connection-type.md) -- [VPN routing decisions](vpn-routing.md) -- [VPN authentication options](vpn-authentication.md) -- [VPN and conditional access](vpn-conditional-access.md) -- [VPN name resolution](vpn-name-resolution.md) -- [VPN security features](vpn-security-features.md) -- [VPN profile options](vpn-profile-options.md) diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md b/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md index 8fa4ab6725..e912b38f54 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md @@ -1,7 +1,7 @@ --- title: VPN and conditional access description: Learn how to integrate the VPN client with the Conditional Access platform, and how to create access rules for Microsoft Entra connected apps. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: how-to --- @@ -92,14 +92,3 @@ See [VPN profile options](vpn-profile-options.md) and [VPNv2 CSP](/windows/clien - [Tip of the Day: The Conditional Access Framework and Device Compliance for VPN (Part 2)](/archive/blogs/tip_of_the_day/tip-of-the-day-the-conditional-access-framework-and-device-compliance-for-vpn-part-2) - [Tip of the Day: The Conditional Access Framework and Device Compliance for VPN (Part 3)](/archive/blogs/tip_of_the_day/tip-of-the-day-the-conditional-access-framework-and-device-compliance-for-vpn-part-3) - [Tip of the Day: The Conditional Access Framework and Device Compliance for VPN (Part 4)](/archive/blogs/tip_of_the_day/tip-of-the-day-the-conditional-access-framework-and-device-compliance-for-vpn-part-4) - -## Related articles - -- [VPN technical guide](vpn-guide.md) -- [VPN connection types](vpn-connection-type.md) -- [VPN routing decisions](vpn-routing.md) -- [VPN authentication options](vpn-authentication.md) -- [VPN name resolution](vpn-name-resolution.md) -- [VPN auto-triggered profile options](vpn-auto-trigger-profile.md) -- [VPN security features](vpn-security-features.md) -- [VPN profile options](vpn-profile-options.md) diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-connection-type.md b/windows/security/operating-system-security/network-security/vpn/vpn-connection-type.md index 7199978f6c..0c0b47c65c 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-connection-type.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-connection-type.md @@ -1,7 +1,7 @@ --- title: VPN connection types description: Learn about Windows VPN platform clients and the VPN connection-type features that can be configured. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: concept-article --- @@ -46,13 +46,3 @@ In Intune, you can also include custom XML for non-Microsoft plug-in profiles: > [!div class="mx-imgBorder"] > ![Custom XML.](images/vpn-custom-xml-intune.png) -## Related articles - -- [VPN technical guide](vpn-guide.md) -- [VPN routing decisions](vpn-routing.md) -- [VPN authentication options](vpn-authentication.md) -- [VPN and conditional access](vpn-conditional-access.md) -- [VPN name resolution](vpn-name-resolution.md) -- [VPN auto-triggered profile options](vpn-auto-trigger-profile.md) -- [VPN security features](vpn-security-features.md) -- [VPN profile options](vpn-profile-options.md) diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-guide.md b/windows/security/operating-system-security/network-security/vpn/vpn-guide.md index 3233517baa..c1c9ac3826 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-guide.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-guide.md @@ -1,7 +1,7 @@ --- title: Windows VPN technical guide description: Learn how to plan and configure Windows devices for your organization's VPN solution. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: overview --- diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-name-resolution.md b/windows/security/operating-system-security/network-security/vpn/vpn-name-resolution.md index 666f60d6c1..36074af74a 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-name-resolution.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-name-resolution.md @@ -1,7 +1,7 @@ --- title: VPN name resolution description: Learn how name resolution works when using a VPN connection. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: concept-article --- @@ -58,14 +58,3 @@ The fields in **Add or edit DNS rule** in the Intune profile correspond to the X | **Name** | **VPNv2/*ProfileName*/DomainNameInformationList/*dniRowId*/DomainName** | | **Servers (comma separated)** | **VPNv2/*ProfileName*/DomainNameInformationList/*dniRowId*/DnsServers** | | **Proxy server** | **VPNv2/*ProfileName*/DomainNameInformationList/*dniRowId*/WebServers** | - -## Related articles - -- [VPN technical guide](vpn-guide.md) -- [VPN connection types](vpn-connection-type.md) -- [VPN routing decisions](vpn-routing.md) -- [VPN authentication options](vpn-authentication.md) -- [VPN and conditional access](vpn-conditional-access.md) -- [VPN auto-triggered profile options](vpn-auto-trigger-profile.md) -- [VPN security features](vpn-security-features.md) -- [VPN profile options](vpn-profile-options.md) \ No newline at end of file diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-office-365-optimization.md b/windows/security/operating-system-security/network-security/vpn/vpn-office-365-optimization.md index aced17dd8e..02b7c5daff 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-office-365-optimization.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-office-365-optimization.md @@ -2,7 +2,7 @@ title: Optimize Microsoft 365 traffic for remote workers with the Windows VPN client description: Learn how to optimize Microsoft 365 traffic for remote workers with the Windows VPN client ms.topic: how-to -ms.date: 05/06/2024 +ms.date: 01/27/2025 --- # Optimize Microsoft 365 traffic for remote workers with the Windows VPN client diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-profile-options.md b/windows/security/operating-system-security/network-security/vpn/vpn-profile-options.md index 4fdbb86971..43f5802163 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-profile-options.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-profile-options.md @@ -1,7 +1,7 @@ --- title: VPN profile options description: Windows adds Virtual Private Network (VPN) profile options to help manage how users connect. VPNs give users secure remote access to the company network. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: how-to --- @@ -316,13 +316,3 @@ After you configure the settings that you want using ProfileXML, you can create - [VPNv2 configuration service provider (CSP) reference](/windows/client-management/mdm/vpnv2-csp) - [How to Create VPN Profiles in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/dn261200(v=technet.10)) -## Related articles - -- [VPN technical guide](vpn-guide.md) -- [VPN connection types](vpn-connection-type.md) -- [VPN routing decisions](vpn-routing.md) -- [VPN authentication options](vpn-authentication.md) -- [VPN and conditional access](vpn-conditional-access.md) -- [VPN name resolution](vpn-name-resolution.md) -- [VPN auto-triggered profile options](vpn-auto-trigger-profile.md) -- [VPN security features](vpn-security-features.md) diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-routing.md b/windows/security/operating-system-security/network-security/vpn/vpn-routing.md index e5f0bc3f68..6bbae9aa58 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-routing.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-routing.md @@ -1,5 +1,5 @@ --- -ms.date: 05/06/2024 +ms.date: 01/27/2025 title: VPN routing decisions description: Learn about approaches that either send all data through a VPN or only selected data. The one you choose impacts capacity planning and security expectations. ms.topic: concept-article @@ -43,14 +43,3 @@ When you configure a VPN profile in Microsoft Intune, you can enable split tunne ![split tunnel.](images/vpn-split.png) Once enabled, you can add the routes that should use the VPN connection. - -## Related articles - -- [VPN technical guide](vpn-guide.md) -- [VPN connection types](vpn-connection-type.md) -- [VPN authentication options](vpn-authentication.md) -- [VPN and conditional access](vpn-conditional-access.md) -- [VPN name resolution](vpn-name-resolution.md) -- [VPN auto-triggered profile options](vpn-auto-trigger-profile.md) -- [VPN security features](vpn-security-features.md) -- [VPN profile options](vpn-profile-options.md) \ No newline at end of file diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-security-features.md b/windows/security/operating-system-security/network-security/vpn/vpn-security-features.md index 0ca87d7370..2e53eeeae5 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-security-features.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-security-features.md @@ -1,7 +1,7 @@ --- title: VPN security features description: Learn about security features for VPN, including LockDown VPN and traffic filters. -ms.date: 05/06/2024 +ms.date: 01/27/2025 ms.topic: concept-article --- @@ -55,14 +55,3 @@ A VPN profile configured with LockDown secures the device to only allow network > [!CAUTION] > Be careful when deploying LockDown VPN, as the resultant connection won't be able to send or receive any network traffic without the VPN connection being established. - -## Related articles - -- [VPN technical guide](vpn-guide.md) -- [VPN connection types](vpn-connection-type.md) -- [VPN routing decisions](vpn-routing.md) -- [VPN authentication options](vpn-authentication.md) -- [VPN and conditional access](vpn-conditional-access.md) -- [VPN name resolution](vpn-name-resolution.md) -- [VPN auto-triggered profile options](vpn-auto-trigger-profile.md) -- [VPN profile options](vpn-profile-options.md) From fc28c60c9d565f66f1d6b86170a57b2082374839 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 27 Jan 2025 21:04:32 -0500 Subject: [PATCH 052/123] Acrolinx --- .../network-security/vpn/vpn-conditional-access.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md b/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md index e912b38f54..8b93ff6019 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md @@ -19,7 +19,7 @@ Conditional Access Platform components used for Device Compliance include the fo - [Windows Health Attestation Service](../../system-security/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices.md) (optional) - Microsoft Entra Certificate Authority - It's a requirement that the client certificate used for the cloud-based device compliance solution be issued by a Microsoft Entra ID-based Certificate Authority (CA). A Microsoft Entra CA is essentially a mini-CA cloud tenant in Azure. The Microsoft Entra CA can't be configured as part of an on-premises Enterprise CA. See also [Always On VPN deployment for Windows Server and Windows 10](/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy). -- Microsoft Entra ID-issued short-lived certificates - When a VPN connection attempt is made, the Microsoft Entra Token Broker on the local device communicates with Microsoft Entra ID, which then checks for health based on compliance rules. If compliant, Microsoft Entra ID sends back a short-lived certificate that is used to authenticate the VPN. Note that certificate authentication methods such as EAP-TLS can be used. When the client reconnects and determines that the certificate has expired, the client will again check with Microsoft Entra ID for health validation before a new certificate is issued. +- Microsoft Entra ID-issued short-lived certificates - When a VPN connection attempt is made, the Microsoft Entra Token Broker on the local device communicates with Microsoft Entra ID, which then checks for health based on compliance rules. If compliant, Microsoft Entra ID sends back a short-lived certificate that is used to authenticate the VPN. Certificate authentication methods such as EAP-TLS can be used. When the client reconnects and determines that the certificate has expired, the client will again check with Microsoft Entra ID for health validation before a new certificate is issued. - [Microsoft Intune device compliance policies](/mem/intune/protect/device-compliance-get-started): Cloud-based device compliance uses Microsoft Intune Compliance Policies, which are capable of querying the device state and define compliance rules for the following, among other things. - Antivirus status - Auto-update status and update compliance @@ -35,7 +35,7 @@ The following client-side components are also required: ## VPN device compliance -At this time, the Microsoft Entra certificates issued to users don't contain a CRL Distribution Point (CDP) and aren't suitable for Key Distribution Centers (KDCs) to issue Kerberos tokens. For users to gain access to on-premises resources such as files on a network share, client authentication certificates must be deployed to the Windows profiles of the users, and their VPNv2 profiles must contain the <SSO> section. +At this time, the Microsoft Entra certificates issued to users don't contain a CRL Distribution Point (CDP) and aren't suitable for Key Distribution Centers (KDCs) to issue Kerberos tokens. For users to gain access to on-premises resources such as files on a network share, client authentication certificates must be deployed to the Windows profiles of the users, and their VPNv2 profiles must contain the section. Server-side infrastructure requirements to support VPN device compliance include: @@ -60,8 +60,8 @@ Two client-side configuration service providers are leveraged for VPN device com - Upon request, forward the Health Attestation Certificate (received from HAS) and related runtime information to the MDM server for verification > [!NOTE] -> It's required that certificates used for obtaining Kerberos tickets to be issued from an on-premises CA, and that SSO to be enabled in the user's VPN profile. This will enable the user to access on-premises resources. -> In the case of AzureAD-only joined devices (not hybrid joined devices), if the user certificate issued by the on-premises CA has the user UPN from AzureAD in Subject and SAN (Subject Alternative Name), the VPN profile must be modified to ensure that the client does not cache the credentials used for VPN authentication. To do this, after deploying the VPN profile to the client, modify the *Rasphone.pbk* on the client by changing the entry **UseRasCredentials** from 1 (default) to 0 (zero). +> It's required that certificates used for obtaining Kerberos tickets to be issued from an on-premises CA, and that SSO to be enabled in the user's VPN profile. This allows the user to access on-premises resources. +> In the case of Microsoft Entra joined devices (not hybrid joined devices), if the user certificate issued by the on-premises CA has the user UPN from Microsoft Entra in Subject and SAN (Subject Alternative Name), the VPN profile must be modified to ensure that the client doesn't cache the credentials used for VPN authentication. To do this, after deploying the VPN profile to the client, modify the *Rasphone.pbk* on the client by changing the entry **UseRasCredentials** from 1 (default) to 0 (zero). ## Client connection flow @@ -71,7 +71,7 @@ The VPN client side connection flow works as follows: When a VPNv2 Profile is configured with \ \true<\/Enabled> the VPN client uses this connection flow: -1. The VPN client calls into Windows 10's or Windows 11's Microsoft Entra Token Broker, identifying itself as a VPN client. +1. The VPN client calls into Windows 10 or Windows 11 Microsoft Entra Token Broker, identifying itself as a VPN client. 1. The Microsoft Entra Token Broker authenticates to Microsoft Entra ID and provides it with information about the device trying to connect. The Microsoft Entra Server checks if the device is in compliance with the policies. 1. If compliant, Microsoft Entra ID requests a short-lived certificate. 1. Microsoft Entra ID pushes down a short-lived certificate to the Certificate Store via the Token Broker. The Token Broker then returns control back over to the VPN client for further connection processing. From 245f29986b072dce32e6ab40f591d278cf2e72f8 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 27 Jan 2025 21:09:08 -0500 Subject: [PATCH 053/123] fix HTML tag --- .../network-security/vpn/vpn-conditional-access.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md b/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md index 8b93ff6019..9702c4afee 100644 --- a/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md +++ b/windows/security/operating-system-security/network-security/vpn/vpn-conditional-access.md @@ -35,7 +35,7 @@ The following client-side components are also required: ## VPN device compliance -At this time, the Microsoft Entra certificates issued to users don't contain a CRL Distribution Point (CDP) and aren't suitable for Key Distribution Centers (KDCs) to issue Kerberos tokens. For users to gain access to on-premises resources such as files on a network share, client authentication certificates must be deployed to the Windows profiles of the users, and their VPNv2 profiles must contain the section. +At this time, the Microsoft Entra certificates issued to users don't contain a CRL Distribution Point (CDP) and aren't suitable for Key Distribution Centers (KDCs) to issue Kerberos tokens. For users to gain access to on-premises resources such as files on a network share, client authentication certificates must be deployed to the Windows profiles of the users, and their VPNv2 profiles must contain the `` section. Server-side infrastructure requirements to support VPN device compliance include: From b883d6e6c6453ba8f515de5702b741b7d01469cc Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 28 Jan 2025 08:57:50 -0800 Subject: [PATCH 054/123] cpw2-9694988 --- windows/client-management/manage-windows-copilot.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/manage-windows-copilot.md b/windows/client-management/manage-windows-copilot.md index 2af6627e8d..655fdb09e4 100644 --- a/windows/client-management/manage-windows-copilot.md +++ b/windows/client-management/manage-windows-copilot.md @@ -3,7 +3,7 @@ title: Updated Windows and Microsoft 365 Copilot Chat experience description: Learn about changes to the Copilot in Windows experience for commercial environments and how to configure it for your organization. ms.topic: overview ms.subservice: windows-copilot -ms.date: 01/22/2025 +ms.date: 01/28/2025 ms.author: mstewart author: mestew ms.collection: @@ -80,7 +80,7 @@ The following policy to manage Copilot in Windows (preview) will be removed in t You can remove or uninstall the Copilot app from your device by using one of the following methods: -1. Enterprise users can uninstall the Copilot app by going to **Settings** > **Apps** >**Installed Apps**. Select the three dots appearing on the right side of the app and select **Uninstall** from the dropdown list. +1. Enterprise users can uninstall the [Copilot app](https://apps.microsoft.com/detail/9NHT9RB2F4HD), which is a consumer experience, by going to **Settings** > **Apps** >**Installed Apps**. Select the three dots appearing on the right side of the app and select **Uninstall** from the dropdown list. 1. If you are an IT administrator, you can prevent installation of the app or remove the Copilot app using one of the following methods: 1. Prevent installation of the Copilot app: From 866d47341e471cab8d31f0352ed10c65238cec54 Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Tue, 28 Jan 2025 10:05:32 -0700 Subject: [PATCH 055/123] Update applications-that-can-bypass-appcontrol.md --- .../design/applications-that-can-bypass-appcontrol.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md b/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md index 23d40c8440..f25bd9c11d 100644 --- a/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md +++ b/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md @@ -49,7 +49,7 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you - texttransform.exe - visualuiaverifynative.exe - system.management.automation.dll -- webclnt.dll/davsvc.dll +- webclnt.dll/davsvc.dll3 - wfc.exe - windbg.exe - wmic.exe @@ -62,6 +62,8 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you 2 If you're using your reference system in a development context and use msbuild.exe to build managed applications, we recommend that you allow msbuild.exe in your code integrity policies. Otherwise, we recommend that you block msbuild.exe. +3 If you block WebDAV DLL's, we recommend that you also disable the **WebClient** service using a group policy or MDM policies. + * Microsoft recognizes the efforts of people in the security community who help us protect customers through responsible vulnerability disclosure, and extends thanks to the following people:
From bc953482d3337b2af5b0c26774077e6731a000f8 Mon Sep 17 00:00:00 2001 From: Padma Jayaraman Date: Tue, 28 Jan 2025 23:18:34 +0530 Subject: [PATCH 056/123] Fix typo in WebDAV DLLs recommendation. --- .../design/applications-that-can-bypass-appcontrol.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md b/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md index f25bd9c11d..f2ebb636f5 100644 --- a/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md +++ b/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md @@ -62,7 +62,7 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you 2 If you're using your reference system in a development context and use msbuild.exe to build managed applications, we recommend that you allow msbuild.exe in your code integrity policies. Otherwise, we recommend that you block msbuild.exe. -3 If you block WebDAV DLL's, we recommend that you also disable the **WebClient** service using a group policy or MDM policies. +3 If you block WebDAV DLLs, we recommend that you also disable the **WebClient** service using a group policy or MDM policies. * Microsoft recognizes the efforts of people in the security community who help us protect customers through responsible vulnerability disclosure, and extends thanks to the following people: From 7b0694f4bc50372c74a9470a32bd0fcde3754149 Mon Sep 17 00:00:00 2001 From: David Strome <21028455+dstrome@users.noreply.github.com> Date: Tue, 28 Jan 2025 14:10:33 -0800 Subject: [PATCH 057/123] Add BuildValidation workflow --- .github/workflows/BuildValidation.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/workflows/BuildValidation.yml diff --git a/.github/workflows/BuildValidation.yml b/.github/workflows/BuildValidation.yml new file mode 100644 index 0000000000..e57844b453 --- /dev/null +++ b/.github/workflows/BuildValidation.yml @@ -0,0 +1,21 @@ +name: PR has no warnings or errors + +permissions: + pull-requests: write + statuses: write + +on: + issue_comment: + types: [created] + +jobs: + + build-status: + uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-BuildValidation.yml@workflows-prod + with: + PayloadJson: ${{ toJSON(github) }} + secrets: + AccessToken: ${{ secrets.GITHUB_TOKEN }} + + + From f01b4a9fd585a2bd5b1a813b4cbc5fbf7473682e Mon Sep 17 00:00:00 2001 From: David Callaghan Date: Wed, 29 Jan 2025 11:49:50 -0800 Subject: [PATCH 058/123] Update windows-autopatch-hotpatch-updates.md Removing ** asterisks and clarifying the registry key value and path to avoid customers using the wrong information. --- .../manage/windows-autopatch-hotpatch-updates.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md index 026f05bd13..d92f402704 100644 --- a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md +++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md @@ -40,9 +40,9 @@ VBS must be turned on for a device to be offered Hotpatch updates. For informati ### Arm 64 devices must disable compiled hybrid PE usage (CHPE) (Arm 64 CPU Only) -This requirement only applies to Arm 64 CPU devices when using Hotpatch updates. Hotpatch updates aren't compatible with servicing CHPE OS binaries located in the `%SystemRoot%\SyChpe32` folder. To ensure all the Hotpatch updates are applied, you must set the CHPE disable flag and restart the device to disable CHPE usage. You only need to set this flag one time. The registry setting remains applied through updates. To disable CHPE, set the following registry key: -Path: `**HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management**` -Key value: `**HotPatchRestrictions=1**` +This requirement only applies to Arm 64 CPU devices when using Hotpatch updates. Hotpatch updates aren't compatible with servicing CHPE OS binaries located in the `%SystemRoot%\SyChpe32` folder. To ensure all the Hotpatch updates are applied, you must set the CHPE disable flag and restart the device to disable CHPE usage. You only need to set this flag one time. The registry setting remains applied through updates. To disable CHPE, create and/or set the following DWORD registry key: +Path: `HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management` +DWORD key value: HotPatchRestrictions=1 > [!IMPORTANT] > This setting is required because it forces the operating system to use the emulation x86-only binaries instead of CHPE binaries on Arm 64 devices. CHPE binaries include native Arm 64 code to improve performance, excluding the CHPE binaries might affect performance or compatibility. Be sure to test application compatibility and performance before rolling out Hotpatch updates widely on Arm 64 CPU based devices. From 24c2e18504b1afaf66778ece499504cd45eb3537 Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Wed, 29 Jan 2025 15:35:05 -0500 Subject: [PATCH 059/123] Update review date on reviewed articles --- ...rted-with-the-user-state-migration-tool.md | 2 +- .../usmt/migrate-application-settings.md | 2 +- .../usmt/migration-store-types-overview.md | 2 +- .../usmt/offline-migration-reference.md | 10 ++-- .../usmt/understanding-migration-xml-files.md | 2 +- .../deployment/usmt/usmt-best-practices.md | 2 +- .../usmt/usmt-choose-migration-store-type.md | 2 +- .../usmt/usmt-command-line-syntax.md | 2 +- .../usmt/usmt-common-migration-scenarios.md | 2 +- .../deployment/usmt/usmt-configxml-file.md | 4 +- .../usmt/usmt-conflicts-and-precedence.md | 16 +++---- .../usmt/usmt-custom-xml-examples.md | 10 ++-- .../usmt/usmt-customize-xml-files.md | 2 +- .../usmt/usmt-determine-what-to-migrate.md | 2 +- .../usmt-estimate-migration-store-size.md | 2 +- .../usmt/usmt-exclude-files-and-settings.md | 2 +- ...files-from-a-compressed-migration-store.md | 2 +- windows/deployment/usmt/usmt-faq.yml | 48 +++++++++---------- .../usmt/usmt-general-conventions.md | 18 +++---- .../usmt/usmt-hard-link-migration-store.md | 2 +- windows/deployment/usmt/usmt-how-it-works.md | 4 +- windows/deployment/usmt/usmt-how-to.md | 2 +- .../usmt-identify-application-settings.md | 2 +- ...t-identify-file-types-files-and-folders.md | 2 +- ...usmt-identify-operating-system-settings.md | 2 +- .../deployment/usmt/usmt-identify-users.md | 2 +- .../usmt/usmt-include-files-and-settings.md | 14 +++--- .../deployment/usmt/usmt-loadstate-syntax.md | 2 +- windows/deployment/usmt/usmt-log-files.md | 2 +- ...usmt-migrate-efs-files-and-certificates.md | 2 +- .../usmt/usmt-migrate-user-accounts.md | 2 +- .../usmt/usmt-migration-store-encryption.md | 2 +- windows/deployment/usmt/usmt-overview.md | 2 +- .../usmt/usmt-plan-your-migration.md | 2 +- .../usmt-recognized-environment-variables.md | 2 +- windows/deployment/usmt/usmt-reference.md | 2 +- windows/deployment/usmt/usmt-requirements.md | 2 +- .../usmt/usmt-reroute-files-and-settings.md | 8 ++-- windows/deployment/usmt/usmt-resources.md | 4 +- .../deployment/usmt/usmt-scanstate-syntax.md | 2 +- .../usmt/usmt-technical-reference.md | 2 +- .../usmt/usmt-test-your-migration.md | 2 +- windows/deployment/usmt/usmt-topics.md | 2 +- .../deployment/usmt/usmt-troubleshooting.md | 2 +- windows/deployment/usmt/usmt-utilities.md | 2 +- .../usmt/usmt-what-does-usmt-migrate.md | 2 +- .../usmt/usmt-xml-elements-library.md | 44 ++++++++--------- windows/deployment/usmt/usmt-xml-reference.md | 2 +- ...ndition-of-a-compressed-migration-store.md | 2 +- .../deployment/usmt/xml-file-requirements.md | 2 +- 50 files changed, 129 insertions(+), 129 deletions(-) diff --git a/windows/deployment/usmt/getting-started-with-the-user-state-migration-tool.md b/windows/deployment/usmt/getting-started-with-the-user-state-migration-tool.md index 9e1d97ccac..3a2a091e06 100644 --- a/windows/deployment/usmt/getting-started-with-the-user-state-migration-tool.md +++ b/windows/deployment/usmt/getting-started-with-the-user-state-migration-tool.md @@ -8,7 +8,7 @@ ms.service: windows-client author: frankroj ms.topic: conceptual ms.subservice: itpro-deploy -ms.date: 08/30/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 11 - ✅ Windows 10 diff --git a/windows/deployment/usmt/migrate-application-settings.md b/windows/deployment/usmt/migrate-application-settings.md index d189141607..563fffa13b 100644 --- a/windows/deployment/usmt/migrate-application-settings.md +++ b/windows/deployment/usmt/migrate-application-settings.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 08/30/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/migration-store-types-overview.md b/windows/deployment/usmt/migration-store-types-overview.md index f0fdf74531..e69fa2a0eb 100644 --- a/windows/deployment/usmt/migration-store-types-overview.md +++ b/windows/deployment/usmt/migration-store-types-overview.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/offline-migration-reference.md b/windows/deployment/usmt/offline-migration-reference.md index 8e72361a5d..631c7b6aa6 100644 --- a/windows/deployment/usmt/offline-migration-reference.md +++ b/windows/deployment/usmt/offline-migration-reference.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: @@ -50,7 +50,7 @@ For exceptions to what can be migrated offline, see [What Does USMT Migrate?](us ## What offline environments are supported? -All currently supported +All currently supported The following table defines the supported combination of online and offline operating systems in USMT. @@ -183,9 +183,9 @@ The following XML example illustrates some of the elements discussed earlier in ```xml - C:\Windows - D:\Windows - E:\ + C:\Windows + D:\Windows + E:\ 1 diff --git a/windows/deployment/usmt/understanding-migration-xml-files.md b/windows/deployment/usmt/understanding-migration-xml-files.md index 3adb68387b..2994c4a929 100644 --- a/windows/deployment/usmt/understanding-migration-xml-files.md +++ b/windows/deployment/usmt/understanding-migration-xml-files.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-best-practices.md b/windows/deployment/usmt/usmt-best-practices.md index 4ebf6ff55f..fe77583153 100644 --- a/windows/deployment/usmt/usmt-best-practices.md +++ b/windows/deployment/usmt/usmt-best-practices.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-choose-migration-store-type.md b/windows/deployment/usmt/usmt-choose-migration-store-type.md index 1847cce5d9..e8a0d69a2f 100644 --- a/windows/deployment/usmt/usmt-choose-migration-store-type.md +++ b/windows/deployment/usmt/usmt-choose-migration-store-type.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-command-line-syntax.md b/windows/deployment/usmt/usmt-command-line-syntax.md index 4844937b52..71da51bdda 100644 --- a/windows/deployment/usmt/usmt-command-line-syntax.md +++ b/windows/deployment/usmt/usmt-command-line-syntax.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-common-migration-scenarios.md b/windows/deployment/usmt/usmt-common-migration-scenarios.md index 1685667185..d618b669c3 100644 --- a/windows/deployment/usmt/usmt-common-migration-scenarios.md +++ b/windows/deployment/usmt/usmt-common-migration-scenarios.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-configxml-file.md b/windows/deployment/usmt/usmt-configxml-file.md index c0e4682965..f77777e41f 100644 --- a/windows/deployment/usmt/usmt-configxml-file.md +++ b/windows/deployment/usmt/usmt-configxml-file.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: @@ -496,7 +496,7 @@ The following sample `Config.xml` file contains detailed examples about items th - + --> diff --git a/windows/deployment/usmt/usmt-conflicts-and-precedence.md b/windows/deployment/usmt/usmt-conflicts-and-precedence.md index f9874a4d2f..c2a0454e4b 100644 --- a/windows/deployment/usmt/usmt-conflicts-and-precedence.md +++ b/windows/deployment/usmt/usmt-conflicts-and-precedence.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: @@ -79,7 +79,7 @@ Specifying `migrate="no"` in the `Config.xml` file is the same as deleting the c %CSIDL_PERSONAL%\* [*.doc] - + ``` ### How does USMT process each component in an .xml file with multiple components? @@ -116,7 +116,7 @@ In the following example, mp3 files aren't excluded from the migration. The mp3 C:\* [*.mp3] - + ``` ### \ and \ rules precedence examples @@ -185,11 +185,11 @@ The destination computer contains the following files: A custom **.xml** file contains the following code: ```xml - - - c:\data\* [*] - - + + + c:\data\* [*] + + ``` For this example, the following information describes the resulting behavior if the code is added to the custom **.xml** file. diff --git a/windows/deployment/usmt/usmt-custom-xml-examples.md b/windows/deployment/usmt/usmt-custom-xml-examples.md index 130f3031c8..c398822c63 100644 --- a/windows/deployment/usmt/usmt-custom-xml-examples.md +++ b/windows/deployment/usmt/usmt-custom-xml-examples.md @@ -8,7 +8,7 @@ ms.service: windows-client author: frankroj ms.topic: conceptual ms.subservice: itpro-deploy -ms.date: 01/09/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 11 - ✅ Windows 10 @@ -120,7 +120,7 @@ The following sample is a custom **.xml** file named `CustomFile.xml` that migra My Video - + MigXmlHelper.DoesObjectExist("File","%CSIDL_MYVIDEO%") @@ -251,8 +251,8 @@ The behavior for this custom **.xml** file is described within the ` - - + + @@ -264,7 +264,7 @@ The behavior for this custom **.xml** file is described within the ` - + C:\*\Presentations\* [*] C:\Presentations\* [*] diff --git a/windows/deployment/usmt/usmt-customize-xml-files.md b/windows/deployment/usmt/usmt-customize-xml-files.md index 8eefa733d4..00a902de28 100644 --- a/windows/deployment/usmt/usmt-customize-xml-files.md +++ b/windows/deployment/usmt/usmt-customize-xml-files.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-determine-what-to-migrate.md b/windows/deployment/usmt/usmt-determine-what-to-migrate.md index bad57314e9..098c1a8a45 100644 --- a/windows/deployment/usmt/usmt-determine-what-to-migrate.md +++ b/windows/deployment/usmt/usmt-determine-what-to-migrate.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-estimate-migration-store-size.md b/windows/deployment/usmt/usmt-estimate-migration-store-size.md index 014e48a76e..ae5b4e142e 100644 --- a/windows/deployment/usmt/usmt-estimate-migration-store-size.md +++ b/windows/deployment/usmt/usmt-estimate-migration-store-size.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-exclude-files-and-settings.md b/windows/deployment/usmt/usmt-exclude-files-and-settings.md index 354badb01a..72388d511e 100644 --- a/windows/deployment/usmt/usmt-exclude-files-and-settings.md +++ b/windows/deployment/usmt/usmt-exclude-files-and-settings.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-extract-files-from-a-compressed-migration-store.md b/windows/deployment/usmt/usmt-extract-files-from-a-compressed-migration-store.md index 59234776e5..9fefd6f0b4 100644 --- a/windows/deployment/usmt/usmt-extract-files-from-a-compressed-migration-store.md +++ b/windows/deployment/usmt/usmt-extract-files-from-a-compressed-migration-store.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-faq.yml b/windows/deployment/usmt/usmt-faq.yml index 666888f9d3..fb9a10a99e 100644 --- a/windows/deployment/usmt/usmt-faq.yml +++ b/windows/deployment/usmt/usmt-faq.yml @@ -11,12 +11,12 @@ metadata: ms.mktglfcycl: deploy ms.sitesec: library audience: itpro - ms.date: 01/09/2024 + ms.date: 01/29/2025 ms.topic: faq title: Frequently Asked Questions summary: | **Applies to:** - + - Windows 11 - Windows 10 @@ -30,13 +30,13 @@ sections: How much space is needed on the destination computer? answer: | The destination computer needs enough available space for the following items: - + - Operating system - + - Applications - + - Uncompressed store - + - question: | Can the files and settings be stored directly on the destination computer or is a server needed? answer: | @@ -47,13 +47,13 @@ sections: - Directly on the destination computer. To store it directly on the destination computer: - + 1. Create and share the directory `C:\store` on the destination computer. - + 1. Run the **ScanState** tool on the source computer and save the files and settings to `\\\store` - + 1. Run the **LoadState** tool on the destination computer and specify `C:\store` as the store location. - + - question: | Can data be migrated between operating systems with different languages? answer: | @@ -80,7 +80,7 @@ sections: How can a folder or a certain type of file be excluded from the migration? answer: | The **\** element can be used to globally exclude data from the migration. For example, this element can be used to exclude all MP3 files on the computer or to exclude all files from `C:\UserData`. This element excludes objects regardless of any other **\** rules that are in the **.xml** files. For an example, see **\** in the [Exclude files and settings](usmt-exclude-files-and-settings.md) article. For the syntax of this element, see [XML elements library](usmt-xml-elements-library.md). - + - question: | What happens to files that were located on a drive that don't exist on the destination computer? answer: | @@ -91,22 +91,22 @@ sections: - C:\\ is the system drive on the destination computer. the file is migrated to `C:\data\File.pst`. This behavior holds true even when **\** rules attempt to move data to a drive that doesn't exist on the destination computer. - + - name: USMT .xml Files questions: - question: | Where are there examples of USMT **.xml** files? answer: | The following articles include examples of USMT **.xml** files: - + - [Exclude files and settings](usmt-exclude-files-and-settings.md) - + - [Reroute files and settings](usmt-reroute-files-and-settings.md) - + - [Include files and settings](usmt-include-files-and-settings.md) - + - [Custom XML examples](usmt-custom-xml-examples.md) - + - question: | Can custom **.xml** files that were written for USMT 5.0 be used? answer: | @@ -121,9 +121,9 @@ sections: Why must the **.xml** files be included with both the `ScanState.exe` and `LoadState.exe` commands? answer: | The **.xml** files aren't copied to the store as in previous versions of USMT. Because the **ScanState** and **LoadState** tools need the **.xml** files to control the migration, the same set of **.xml** files must be specified for the `ScanState.exe` and `LoadState.exe` commands. If a particular set of mig\*.xml files were used in the **ScanState** tool, either called through the `/auto` option, or individually through the `/i` option, then the same option should be used to call the exact same mig\*.xml files in the **LoadState** tool. However, the `Config.xml` file doesn't need to be specified, unless files and settings that were migrated to the store need to be excluded. For example, the **Documents** folder might be migrated to the store, but not to the destination computer. To do this type of migration, modify the `Config.xml` file and specify the updated file with the `LoadState.exe` command. **LoadState** migrates only the desired files and settings. - + If an **.xml** file is excluded from the `LoadState.exe` command, then all of the data in the store that was migrated with the missing **.xml** files are migrated. However, the migration rules that were specified for the `ScanState.exe` command don't apply. For example, if a `MigApp.xml` file that has a rerouting rule such as `MigsysHelperFunction.RelativeMove("c:\data", "%CSIDL_PERSONAL%")` is excluded, USMT doesn't reroute the files. Instead, it migrates them to `C:\data`. - + - question: | Which files can be modified and specified on the command line? answer: | @@ -133,20 +133,20 @@ sections: What happens if the **.xml** files aren't specified on the command line? answer: | - **ScanState** - + If no files are specified with the `ScanState.exe` command, all user accounts and default operating system components are migrated. - + - **LoadState** - + If no files are specified with the `LoadState.exe` command, all data that is in the store is migrated. However, any target-specific migration rules that were specified in **.xml** files with the `ScanState.exe` command doesn't apply. For example, if a `MigApp.xml` file that has a rerouting rule such as `MigsysHelperFunction.RelativeMove("c:\data", "%CSIDL_PERSONAL%")` is excluded, USMT doesn't reroute the files. Instead, it migrates them to `C:\data`. - + - name: Conflicts and Precedence questions: - question: | What happens when there are conflicting XML rules or conflicting objects on the destination computer? answer: | For more information, see [Conflicts and precedence](usmt-conflicts-and-precedence.md). - + additionalContent: | diff --git a/windows/deployment/usmt/usmt-general-conventions.md b/windows/deployment/usmt/usmt-general-conventions.md index 38b66a02b6..950371b73e 100644 --- a/windows/deployment/usmt/usmt-general-conventions.md +++ b/windows/deployment/usmt/usmt-general-conventions.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: @@ -73,21 +73,21 @@ The XML helper functions in the [XML elements library](usmt-xml-elements-library The encoded location is composed of the node part, optionally followed by the leaf enclosed in square brackets. This format makes a clear distinction between nodes and leaves. For example, specify the file - + `C:\Windows\Notepad.exe` - + as - + **c:\\Windows\[Notepad.exe\]** - + Similarly, specify the directory - + `C:\Windows\System32` - + as - + **c:\\Windows\\System32** - + Note the absence of the **\[\]** characters in second example. The registry is represented in a similar way. The default value of a registry key is represented as an empty **\[\]** construct. For example, the default value for the `HKLM\SOFTWARE\MyKey` registry key is **HKLM\\SOFTWARE\\MyKey\[\]**. diff --git a/windows/deployment/usmt/usmt-hard-link-migration-store.md b/windows/deployment/usmt/usmt-hard-link-migration-store.md index d2cae89bc7..7c21f7e783 100644 --- a/windows/deployment/usmt/usmt-hard-link-migration-store.md +++ b/windows/deployment/usmt/usmt-hard-link-migration-store.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-how-it-works.md b/windows/deployment/usmt/usmt-how-it-works.md index 591b1d3804..0da69dfec4 100644 --- a/windows/deployment/usmt/usmt-how-it-works.md +++ b/windows/deployment/usmt/usmt-how-it-works.md @@ -8,7 +8,7 @@ ms.service: windows-client author: frankroj ms.topic: conceptual ms.subservice: itpro-deploy -ms.date: 01/09/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 11 - ✅ Windows 10 @@ -33,7 +33,7 @@ When the **ScanState** tool runs on the source computer, it goes through the fol There are three types of components: - Components that migrate the operating system settings. - + - Components that migrate application settings. - Components that migrate users' files. diff --git a/windows/deployment/usmt/usmt-how-to.md b/windows/deployment/usmt/usmt-how-to.md index c3589124d1..72231c5f35 100644 --- a/windows/deployment/usmt/usmt-how-to.md +++ b/windows/deployment/usmt/usmt-how-to.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-identify-application-settings.md b/windows/deployment/usmt/usmt-identify-application-settings.md index feca874008..41d2a4f881 100644 --- a/windows/deployment/usmt/usmt-identify-application-settings.md +++ b/windows/deployment/usmt/usmt-identify-application-settings.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-identify-file-types-files-and-folders.md b/windows/deployment/usmt/usmt-identify-file-types-files-and-folders.md index e5b15c352d..e46ff9f218 100644 --- a/windows/deployment/usmt/usmt-identify-file-types-files-and-folders.md +++ b/windows/deployment/usmt/usmt-identify-file-types-files-and-folders.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-identify-operating-system-settings.md b/windows/deployment/usmt/usmt-identify-operating-system-settings.md index cedbe8d1f9..941df2cced 100644 --- a/windows/deployment/usmt/usmt-identify-operating-system-settings.md +++ b/windows/deployment/usmt/usmt-identify-operating-system-settings.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-identify-users.md b/windows/deployment/usmt/usmt-identify-users.md index 736881d3b3..314590b2b7 100644 --- a/windows/deployment/usmt/usmt-identify-users.md +++ b/windows/deployment/usmt/usmt-identify-users.md @@ -9,7 +9,7 @@ author: frankroj ms.topic: conceptual ms.localizationpriority: medium ms.subservice: itpro-deploy -ms.date: 01/09/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 11 - ✅ Windows 10 diff --git a/windows/deployment/usmt/usmt-include-files-and-settings.md b/windows/deployment/usmt/usmt-include-files-and-settings.md index f4d79a27f2..6ff87626e6 100644 --- a/windows/deployment/usmt/usmt-include-files-and-settings.md +++ b/windows/deployment/usmt/usmt-include-files-and-settings.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: @@ -25,12 +25,12 @@ The following **.xml** file migrates a single registry key. ```xml - Component to migrate only registry value string + Component to migrate only registry value string - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache [Persistent] + HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache [Persistent] @@ -95,8 +95,8 @@ The following **.xml** file migrates all files and subfolders of the `Engineerin - - + + @@ -114,7 +114,7 @@ The following **.xml** file migrates all files and subfolders of the `Engineerin - + C:\*\EngineeringDrafts\* [*] C:\EngineeringDrafts\* [*] @@ -149,7 +149,7 @@ The following **.xml** file migrates `.mp3` files located in the specified drive - + ``` ## Migrate a specific file diff --git a/windows/deployment/usmt/usmt-loadstate-syntax.md b/windows/deployment/usmt/usmt-loadstate-syntax.md index a4bf1f2eeb..30667f7873 100644 --- a/windows/deployment/usmt/usmt-loadstate-syntax.md +++ b/windows/deployment/usmt/usmt-loadstate-syntax.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 04/30/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-log-files.md b/windows/deployment/usmt/usmt-log-files.md index 70f159b544..27e897b01d 100644 --- a/windows/deployment/usmt/usmt-log-files.md +++ b/windows/deployment/usmt/usmt-log-files.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-migrate-efs-files-and-certificates.md b/windows/deployment/usmt/usmt-migrate-efs-files-and-certificates.md index 39944f9a6a..8d146557a2 100644 --- a/windows/deployment/usmt/usmt-migrate-efs-files-and-certificates.md +++ b/windows/deployment/usmt/usmt-migrate-efs-files-and-certificates.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-migrate-user-accounts.md b/windows/deployment/usmt/usmt-migrate-user-accounts.md index 41f319446d..2e82b3db4e 100644 --- a/windows/deployment/usmt/usmt-migrate-user-accounts.md +++ b/windows/deployment/usmt/usmt-migrate-user-accounts.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-migration-store-encryption.md b/windows/deployment/usmt/usmt-migration-store-encryption.md index b5dc3eb5fe..2084dbdd22 100644 --- a/windows/deployment/usmt/usmt-migration-store-encryption.md +++ b/windows/deployment/usmt/usmt-migration-store-encryption.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-overview.md b/windows/deployment/usmt/usmt-overview.md index f0023bfc0b..0e8726cf9a 100644 --- a/windows/deployment/usmt/usmt-overview.md +++ b/windows/deployment/usmt/usmt-overview.md @@ -7,7 +7,7 @@ author: frankroj ms.reviewer: kevinmi,warrenw manager: aaroncz ms.author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: overview ms.collection: - highpri diff --git a/windows/deployment/usmt/usmt-plan-your-migration.md b/windows/deployment/usmt/usmt-plan-your-migration.md index 20bbc09ad5..6fbc90a488 100644 --- a/windows/deployment/usmt/usmt-plan-your-migration.md +++ b/windows/deployment/usmt/usmt-plan-your-migration.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-recognized-environment-variables.md b/windows/deployment/usmt/usmt-recognized-environment-variables.md index 0d2153bbaa..74170fceed 100644 --- a/windows/deployment/usmt/usmt-recognized-environment-variables.md +++ b/windows/deployment/usmt/usmt-recognized-environment-variables.md @@ -7,7 +7,7 @@ ms.reviewer: kevinmi,warrenw manager: aaroncz ms.author: frankroj author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.collection: - highpri diff --git a/windows/deployment/usmt/usmt-reference.md b/windows/deployment/usmt/usmt-reference.md index 9581170803..adeaf3c10e 100644 --- a/windows/deployment/usmt/usmt-reference.md +++ b/windows/deployment/usmt/usmt-reference.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-requirements.md b/windows/deployment/usmt/usmt-requirements.md index 26b5f86f7a..438b71d40b 100644 --- a/windows/deployment/usmt/usmt-requirements.md +++ b/windows/deployment/usmt/usmt-requirements.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 04/30/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-reroute-files-and-settings.md b/windows/deployment/usmt/usmt-reroute-files-and-settings.md index f002c6d337..e7a5305f00 100644 --- a/windows/deployment/usmt/usmt-reroute-files-and-settings.md +++ b/windows/deployment/usmt/usmt-reroute-files-and-settings.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: @@ -70,7 +70,7 @@ The following custom **.xml** file reroutes **.mp3** files located in the fixed - + ``` ## Reroute a specific file @@ -83,8 +83,8 @@ The following custom **.xml** file migrates the `Sample.doc` file from `C:\Engin Sample.doc into the Documents folder - - + + C:\EngineeringDrafts\ [Sample.doc] diff --git a/windows/deployment/usmt/usmt-resources.md b/windows/deployment/usmt/usmt-resources.md index 239d7be582..6e81c92b9a 100644 --- a/windows/deployment/usmt/usmt-resources.md +++ b/windows/deployment/usmt/usmt-resources.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: @@ -23,7 +23,7 @@ appliesto: - Microsoft Visual Studio - The User State Migration Tool (USMT) XML schema (the `MigXML.xsd` file) can be used to validate the migration **.xml** files using an XML authoring tool such as Microsoft Visual Studio. - + For more information about how to use the schema with an XML authoring environment, see the environment's documentation. - [Ask the Directory Services Team blog](https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/bg-p/AskDS). diff --git a/windows/deployment/usmt/usmt-scanstate-syntax.md b/windows/deployment/usmt/usmt-scanstate-syntax.md index 24f73b72d1..a25a4bde8e 100644 --- a/windows/deployment/usmt/usmt-scanstate-syntax.md +++ b/windows/deployment/usmt/usmt-scanstate-syntax.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 04/30/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-technical-reference.md b/windows/deployment/usmt/usmt-technical-reference.md index 1254f4fef0..d269cd7597 100644 --- a/windows/deployment/usmt/usmt-technical-reference.md +++ b/windows/deployment/usmt/usmt-technical-reference.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-test-your-migration.md b/windows/deployment/usmt/usmt-test-your-migration.md index 57767aecf4..4b1d005a41 100644 --- a/windows/deployment/usmt/usmt-test-your-migration.md +++ b/windows/deployment/usmt/usmt-test-your-migration.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-topics.md b/windows/deployment/usmt/usmt-topics.md index e3be3d8fd0..56ee8a1868 100644 --- a/windows/deployment/usmt/usmt-topics.md +++ b/windows/deployment/usmt/usmt-topics.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-troubleshooting.md b/windows/deployment/usmt/usmt-troubleshooting.md index 3e85b84a37..3ca79322a4 100644 --- a/windows/deployment/usmt/usmt-troubleshooting.md +++ b/windows/deployment/usmt/usmt-troubleshooting.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-utilities.md b/windows/deployment/usmt/usmt-utilities.md index 20c70db094..bef1f41088 100644 --- a/windows/deployment/usmt/usmt-utilities.md +++ b/windows/deployment/usmt/usmt-utilities.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-what-does-usmt-migrate.md b/windows/deployment/usmt/usmt-what-does-usmt-migrate.md index e03e8db9c0..56cee12f98 100644 --- a/windows/deployment/usmt/usmt-what-does-usmt-migrate.md +++ b/windows/deployment/usmt/usmt-what-does-usmt-migrate.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/18/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/usmt-xml-elements-library.md b/windows/deployment/usmt/usmt-xml-elements-library.md index a4694c75a9..fc41899980 100644 --- a/windows/deployment/usmt/usmt-xml-elements-library.md +++ b/windows/deployment/usmt/usmt-xml-elements-library.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: @@ -95,7 +95,7 @@ The following example is from the `MigApp.xml` file: %HklmWowSoftware%\Microsoft\Office\16.0\Common\Migration\Office [Lang] DWORD 00000000 - + ``` ## \ @@ -127,7 +127,7 @@ The following example is from the `MigApp.xml` file: %HklmWowSoftware%\Microsoft\Office\16.0\Common\Migration\Office [Lang] DWORD 00000000 - + ``` ## \ @@ -1070,10 +1070,10 @@ Example: - DOC @@ -1126,18 +1126,18 @@ Syntax: For example, to migrate all \*.doc files from the source computer, specifying the following code under the **\** element: ```xml - - doc - + + doc + ``` is the same as specifying the following code below the **\** element: ```xml - - - - + + + + ``` @@ -1202,7 +1202,7 @@ The following example is from the `MigUser.xml` file: %CSIDL_MYVIDEO% - + MigXmlHelper.DoesObjectExist("File","%CSIDL_MYVIDEO%") @@ -1702,11 +1702,11 @@ The following example is from the `MigUser.xml` file: %CSIDL_MYMUSIC% - + MigXmlHelper.DoesObjectExist("File","%CSIDL_MYMUSIC%") - + @@ -1846,11 +1846,11 @@ The following example is from the `MigUser.xml` file. For more examples, see the %CSIDL_STARTMENU% - + MigXmlHelper.DoesObjectExist("File","%CSIDL_STARTMENU%") - + @@ -1901,11 +1901,11 @@ The following example is from the `MigUser.xml` file: %CSIDL_MYMUSIC% - + MigXmlHelper.DoesObjectExist("File","%CSIDL_MYMUSIC%") - + @@ -1969,7 +1969,7 @@ Examples: To migrate the Sample.doc file from any drive on the source computer, use **\** as follows. If multiple files exist with the same name, all such files get migrated. ```xml - + ``` For more examples of how to use this element, see [Exclude Files and Settings](usmt-exclude-files-and-settings.md), [Reroute Files and Settings](usmt-reroute-files-and-settings.md), and [Custom XML Examples](usmt-custom-xml-examples.md). @@ -2171,7 +2171,7 @@ For example: ```xml - %CSIDL_COMMON_APPDATA%\QuickTime + %CSIDL_COMMON_APPDATA%\QuickTime ``` @@ -2204,7 +2204,7 @@ The following **.xml** file excludes all `.mp3` files from migration. For additi - + diff --git a/windows/deployment/usmt/usmt-xml-reference.md b/windows/deployment/usmt/usmt-xml-reference.md index 3b1f32fc27..21d2195393 100644 --- a/windows/deployment/usmt/usmt-xml-reference.md +++ b/windows/deployment/usmt/usmt-xml-reference.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/verify-the-condition-of-a-compressed-migration-store.md b/windows/deployment/usmt/verify-the-condition-of-a-compressed-migration-store.md index 818a24659e..f611d55175 100644 --- a/windows/deployment/usmt/verify-the-condition-of-a-compressed-migration-store.md +++ b/windows/deployment/usmt/verify-the-condition-of-a-compressed-migration-store.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: diff --git a/windows/deployment/usmt/xml-file-requirements.md b/windows/deployment/usmt/xml-file-requirements.md index 7d1969ad11..8b1d97b433 100644 --- a/windows/deployment/usmt/xml-file-requirements.md +++ b/windows/deployment/usmt/xml-file-requirements.md @@ -6,7 +6,7 @@ manager: aaroncz ms.author: frankroj ms.service: windows-client author: frankroj -ms.date: 01/09/2024 +ms.date: 01/29/2025 ms.topic: conceptual ms.subservice: itpro-deploy appliesto: From c809361069aa33717ca0c5527ab82c16c5346d0a Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Wed, 29 Jan 2025 15:50:59 -0500 Subject: [PATCH 060/123] Update review date on reviewed articles 2 --- windows/deployment/upgrade/log-files.md | 2 +- windows/deployment/upgrade/resolve-windows-upgrade-errors.md | 2 +- windows/deployment/upgrade/setupdiag.md | 4 ++-- windows/deployment/upgrade/submit-errors.md | 2 +- windows/deployment/upgrade/windows-error-reporting.md | 4 ++-- windows/deployment/upgrade/windows-upgrade-paths.md | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/deployment/upgrade/log-files.md b/windows/deployment/upgrade/log-files.md index 5da693649e..d8dc167a04 100644 --- a/windows/deployment/upgrade/log-files.md +++ b/windows/deployment/upgrade/log-files.md @@ -11,7 +11,7 @@ ms.collection: - highpri - tier2 ms.subservice: itpro-deploy -ms.date: 01/18/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 11 - ✅ Windows 10 diff --git a/windows/deployment/upgrade/resolve-windows-upgrade-errors.md b/windows/deployment/upgrade/resolve-windows-upgrade-errors.md index da72341ab0..444ff9cf37 100644 --- a/windows/deployment/upgrade/resolve-windows-upgrade-errors.md +++ b/windows/deployment/upgrade/resolve-windows-upgrade-errors.md @@ -8,7 +8,7 @@ ms.localizationpriority: medium ms.topic: conceptual ms.service: windows-client ms.subservice: itpro-deploy -ms.date: 01/18/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 11 - ✅ Windows 10 diff --git a/windows/deployment/upgrade/setupdiag.md b/windows/deployment/upgrade/setupdiag.md index 00ae1403ff..c66b48114b 100644 --- a/windows/deployment/upgrade/setupdiag.md +++ b/windows/deployment/upgrade/setupdiag.md @@ -12,7 +12,7 @@ ms.topic: troubleshooting ms.collection: - highpri - tier2 -ms.date: 01/18/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 11 - ✅ Windows 10 @@ -479,7 +479,7 @@ Refer to "https://learn.microsoft.com/windows/desktop/Debug/system-error-codes" "FailureDetails":"Err = 0x00000057, LastOperation = Gather data, scope: EVERYTHING, LastPhase = Downlevel", "DeviceDriverInfo":null, "Remediation":[ - + ], "SetupPhaseInfo":null, "SetupOperationInfo":null diff --git a/windows/deployment/upgrade/submit-errors.md b/windows/deployment/upgrade/submit-errors.md index 48726194a2..5caad8feef 100644 --- a/windows/deployment/upgrade/submit-errors.md +++ b/windows/deployment/upgrade/submit-errors.md @@ -8,7 +8,7 @@ author: frankroj ms.localizationpriority: medium ms.topic: conceptual ms.subservice: itpro-deploy -ms.date: 01/18/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 11 - ✅ Windows 10 diff --git a/windows/deployment/upgrade/windows-error-reporting.md b/windows/deployment/upgrade/windows-error-reporting.md index c7251d75b2..34c5e47773 100644 --- a/windows/deployment/upgrade/windows-error-reporting.md +++ b/windows/deployment/upgrade/windows-error-reporting.md @@ -8,7 +8,7 @@ author: frankroj ms.localizationpriority: medium ms.topic: conceptual ms.subservice: itpro-deploy -ms.date: 01/18/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 11 - ✅ Windows 10 @@ -18,7 +18,7 @@ appliesto: > [!NOTE] > -> This article is a 300 level article (moderately advanced). +> This article is a 300 level article (moderately advanced). > > See [Resolve Windows upgrade errors](resolve-windows-upgrade-errors.md) for a full list of articles in this section. diff --git a/windows/deployment/upgrade/windows-upgrade-paths.md b/windows/deployment/upgrade/windows-upgrade-paths.md index 1033866907..4d1dcd205e 100644 --- a/windows/deployment/upgrade/windows-upgrade-paths.md +++ b/windows/deployment/upgrade/windows-upgrade-paths.md @@ -11,7 +11,7 @@ ms.collection: - highpri - tier2 ms.subservice: itpro-deploy -ms.date: 02/13/2024 +ms.date: 01/29/2025 appliesto: - ✅ Windows 10 - ✅ Windows 11 From 360ec467a50435d5adb48f151b8fef010140652e Mon Sep 17 00:00:00 2001 From: Ruchika Mittal Date: Thu, 30 Jan 2025 02:37:19 +0530 Subject: [PATCH 061/123] Fix numbering --- windows/deployment/upgrade/log-files.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/upgrade/log-files.md b/windows/deployment/upgrade/log-files.md index d8dc167a04..78f9f1690b 100644 --- a/windows/deployment/upgrade/log-files.md +++ b/windows/deployment/upgrade/log-files.md @@ -51,13 +51,13 @@ A `setupact.log` or `setuperr.log` entry includes the following elements: 1. **The date and time** - 2023-09-08 09:20:05 -1. **The log level** - Info, Warning, Error, Fatal Error +2. **The log level** - Info, Warning, Error, Fatal Error -1. **The logging component** - CONX, MOUPG, PANTHR, SP, IBSLIB, MIG, DISM, CSI, CBS +3. **The logging component** - CONX, MOUPG, PANTHR, SP, IBSLIB, MIG, DISM, CSI, CBS The logging components SP (setup platform), MIG (migration engine), and CONX (compatibility information) are useful for troubleshooting Windows Setup errors. -1. **The message** - Operation completed successfully. +4. **The message** - Operation completed successfully. See the following example: From e9ca0075d60a6f39fd5d7a598e2e6fa3544519b2 Mon Sep 17 00:00:00 2001 From: Rebecca Agiewich <16087112+rjagiewich@users.noreply.github.com> Date: Wed, 29 Jan 2025 15:21:24 -0800 Subject: [PATCH 062/123] UI updates --- .acrolinx-config.edn | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.acrolinx-config.edn b/.acrolinx-config.edn index 2794193b88..3e58e829a1 100644 --- a/.acrolinx-config.edn +++ b/.acrolinx-config.edn @@ -39,7 +39,7 @@ For more information about the exception criteria and exception process, see [Mi Select the total score link to review all feedback on clarity, consistency, tone, brand, terms, spelling, grammar, readability, and inclusive language. _You should fix all spelling errors regardless of your total score_. Fixing spelling errors helps maintain customer trust in overall content quality. -| Article | Total score
(Required: 80) | Words + phrases
(Brand, terms) | Correctness
(Spelling, grammar) | Clarity
(Readability) | +| Article | Total score
(Required: 80) | Terminology | Spelling and Grammar| Clarity
(Readability) | |---------|:--------------:|:--------------------:|:------:|:---------:| " From 121a3e9d45e2ab05d43d26476bd551962a1ae31f Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Wed, 29 Jan 2025 17:50:01 -0700 Subject: [PATCH 063/123] Update docfx.json --- windows/security/docfx.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/docfx.json b/windows/security/docfx.json index e0cd0064c8..eebfabaaa0 100644 --- a/windows/security/docfx.json +++ b/windows/security/docfx.json @@ -142,9 +142,10 @@ "✅ Windows Server 2019", "✅ Windows Server 2016" ], - "application-security/application-control/windows-defender-application-control/**/*.md": [ + "application-security/application-control/app-control-for-business/**/*.md": [ "✅ Windows 11", "✅ Windows 10", + "✅ Windows Server 2025", "✅ Windows Server 2022", "✅ Windows Server 2019", "✅ Windows Server 2016" From 1a4d132553d6a0547cd66007fb6f34ea04083423 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 30 Jan 2025 10:01:58 -0800 Subject: [PATCH 064/123] edits and use include file --- .../catalog-checkpoint-cumulative-updates.md | 2 +- .../includes/checkpoint-cumulative-updates.md | 17 ++++++++++++++++ windows/deployment/update/release-cycle.md | 20 ++++++++----------- 3 files changed, 26 insertions(+), 13 deletions(-) create mode 100644 windows/deployment/update/includes/checkpoint-cumulative-updates.md diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index a537aea3fa..cef752e648 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -13,7 +13,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11, version 24H2 and later - ✅ Windows Server 2025 -ms.date: 01/27/2025 +ms.date: 01/30/2025 --- # Checkpoint cumulative updates and Microsoft Update Catalog usage diff --git a/windows/deployment/update/includes/checkpoint-cumulative-updates.md b/windows/deployment/update/includes/checkpoint-cumulative-updates.md new file mode 100644 index 0000000000..9e266ddb65 --- /dev/null +++ b/windows/deployment/update/includes/checkpoint-cumulative-updates.md @@ -0,0 +1,17 @@ +--- +author: mestew +ms.author: mstewart +manager: aaroncz +ms.subservice: itpro-updates +ms.service: windows-client +ms.topic: include +ms.date: 01/30/2025 +ms.localizationpriority: medium +--- + + +Starting Windows 11, version 24H2, Microsoft may periodically release cumulative updates as checkpoints. The subsequent updates will consist of: +- The update package files associated with the checkpoints, and +- New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. + +Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, **no change is needed to their update process**. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. diff --git a/windows/deployment/update/release-cycle.md b/windows/deployment/update/release-cycle.md index 7df3d99935..449627bbbe 100644 --- a/windows/deployment/update/release-cycle.md +++ b/windows/deployment/update/release-cycle.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 01/27/2025 +ms.date: 01/30/2025 --- # Update release cycle for Windows clients @@ -54,13 +54,8 @@ Monthly security update releases are available through the following channels: Many update management tools, such as [Microsoft Configuration Manager](/mem/configmgr/) and [Microsoft Intune](/mem/intune/), rely on these channels for update deployment. -Starting Windows 11, version 24H2, Microsoft may periodically release cumulative updates as checkpoints. The subsequent updates will consist of: -- The update package files associated with the checkpoints, and -- New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. - -Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, **no change is needed to their update process**. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. - - + +[!INCLUDE [Checkpoint cumulative updates](./includes/checkpoint-cumulative-updates.md)] ## Optional nonsecurity preview release @@ -78,11 +73,9 @@ To access the optional nonsecurity preview release: - Use [Windows Insider Program for Business](https://insider.windows.com/for-business) - Use the [Microsoft Update Catalog](https://www.catalog.update.microsoft.com/Home.aspx). -Starting Windows 11, version 24H2, Microsoft may periodically release cumulative updates as checkpoints. The subsequent updates will consist of: -- The update package files associated with the checkpoints, and -- New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. + +[!INCLUDE [Checkpoint cumulative updates](./includes/checkpoint-cumulative-updates.md)] -Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, **no change is needed to their update process**. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. ## OOB releases @@ -97,6 +90,9 @@ Some key considerations about OOB releases include: - Critical OOB releases are automatically available to WSUS and Windows Update for Business, just like the monthly security update releases. - Some OOB releases are classified as noncritical. - Noncritical releases only go to the Microsoft Update Catalog for users or organizations to voluntarily obtain the update. + + +[!INCLUDE [Checkpoint cumulative updates](./includes/checkpoint-cumulative-updates.md)] ## Continuous innovation for Windows 11 From 453ad36bf40b41e29f18af5d1cc9621ab4184e93 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 30 Jan 2025 10:07:34 -0800 Subject: [PATCH 065/123] fix link --- .../deployment/update/includes/checkpoint-cumulative-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/includes/checkpoint-cumulative-updates.md b/windows/deployment/update/includes/checkpoint-cumulative-updates.md index 9e266ddb65..c1be20d788 100644 --- a/windows/deployment/update/includes/checkpoint-cumulative-updates.md +++ b/windows/deployment/update/includes/checkpoint-cumulative-updates.md @@ -14,4 +14,4 @@ Starting Windows 11, version 24H2, Microsoft may periodically release cumulative - The update package files associated with the checkpoints, and - New update package files that contain incremental binary differentials against the version of binaries in the last checkpoint. -Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, **no change is needed to their update process**. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](catalog-checkpoint-cumulative-updates.md) for reference. +Multiple checkpoints may be shipped during the lifecycle of a given Windows release. Devices updating from Windows Update and WSUS can continue to seamlessly install the latest monthly security update regardless of whether there are any preceding checkpoint cumulative updates, **no change is needed to their update process**. Catalog users can review [Checkpoint cumulative updates and Microsoft Update Catalog usage](../catalog-checkpoint-cumulative-updates.md) for reference. From 0df087627d8d8bf258704d57f22a68134130860d Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Thu, 30 Jan 2025 13:36:49 -0500 Subject: [PATCH 066/123] script variable update --- .../passwordless-strategy/journey-step-3.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/passwordless-strategy/journey-step-3.md b/windows/security/identity-protection/passwordless-strategy/journey-step-3.md index 9bc006a4e0..46402af58c 100644 --- a/windows/security/identity-protection/passwordless-strategy/journey-step-3.md +++ b/windows/security/identity-protection/passwordless-strategy/journey-step-3.md @@ -2,7 +2,7 @@ title: Transition into a passwordless deployment description: Learn about how to transition into a passwordless deployment, the third step of the Microsoft passwordless journey. ms.topic: concept-article -ms.date: 10/29/2024 +ms.date: 01/30/2025 --- # Transition into a passwordless deployment @@ -123,7 +123,7 @@ function Generate-RandomPassword{ $NewPassword = ConvertTo-SecureString -String (Generate-RandomPassword) -AsPlainText -Force -Set-ADAccountPassword -identity $userId -NewPassword $NewPassword -Reset +Set-ADAccountPassword -identity $samAccountName = -NewPassword $NewPassword -Reset ``` If your organizational policies allow it, you can configure the randomized passwords to never expire, or use a long expiration period. This configuration prevents the user from being prompted to change their password. From 1007a030d7c902902a9f7d4c6aeb505a8b7df216 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Thu, 30 Jan 2025 13:43:07 -0500 Subject: [PATCH 067/123] fix --- .../identity-protection/passwordless-strategy/journey-step-3.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/passwordless-strategy/journey-step-3.md b/windows/security/identity-protection/passwordless-strategy/journey-step-3.md index 46402af58c..3d3f9622e0 100644 --- a/windows/security/identity-protection/passwordless-strategy/journey-step-3.md +++ b/windows/security/identity-protection/passwordless-strategy/journey-step-3.md @@ -123,7 +123,7 @@ function Generate-RandomPassword{ $NewPassword = ConvertTo-SecureString -String (Generate-RandomPassword) -AsPlainText -Force -Set-ADAccountPassword -identity $samAccountName = -NewPassword $NewPassword -Reset +Set-ADAccountPassword -identity $samAccountName -NewPassword $NewPassword -Reset ``` If your organizational policies allow it, you can configure the randomized passwords to never expire, or use a long expiration period. This configuration prevents the user from being prompted to change their password. From c017ce9ba4e83117530c3448bd5db16aa947f36a Mon Sep 17 00:00:00 2001 From: StevenHosking-Msft <64120663+StevenHosking-Msft@users.noreply.github.com> Date: Fri, 31 Jan 2025 10:33:54 +1100 Subject: [PATCH 068/123] Update windows-autopatch-configure-network.md --- .../prepare/windows-autopatch-configure-network.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md index 8ba74fe797..c3c115d488 100644 --- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md +++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md @@ -63,7 +63,7 @@ The following URLs must be on the allowed list of your proxy and firewall so tha | Microsoft service | URLs required on allowlist | | ----- | ----- | -| Windows Autopatch |
  • mmdcustomer.microsoft.com
  • mmdls.microsoft.com
  • logcollection.mmd.microsoft.com
  • support.mmd.microsoft.com
  • devicelistenerprod.microsoft.com
  • login.windows.net
  • payloadprod*.blob.core.windows.net
  • device.autopatch.microsoft.com
| +| Windows Autopatch |
  • mmdcustomer.microsoft.com
  • mmdls.microsoft.com
  • logcollection.mmd.microsoft.com
  • support.mmd.microsoft.com
  • devicelistenerprod.microsoft.com
  • login.windows.net
  • device.autopatch.microsoft.com
| ## Delivery Optimization From 746a55a558255fa98a24c552ec4e49a653707c65 Mon Sep 17 00:00:00 2001 From: Rick Munck <33725928+jmunck@users.noreply.github.com> Date: Fri, 31 Jan 2025 07:47:26 -0600 Subject: [PATCH 069/123] Update security-compliance-toolkit-10.md Removed reference to Server 2012 R2, Office 2016, Windows 10 20H2. Added Server 2025 Updated Office baseline to v2412 --- .../security-compliance-toolkit-10.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md index ced5288d21..3556919a26 100644 --- a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md +++ b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md @@ -23,18 +23,16 @@ The Security Compliance Toolkit consists of: - Windows 10 security baselines - Windows 10, version 22H2 - Windows 10, version 21H2 - - Windows 10, version 20H2 - Windows 10, version 1809 - Windows 10, version 1607 - Windows 10, version 1507 - Windows Server security baselines + - Windows Server 2025 - Windows Server 2022 - Windows Server 2019 - Windows Server 2016 - - Windows Server 2012 R2 - Microsoft Office security baseline - - Office 2016 - - Microsoft 365 Apps for Enterprise Version 2206 + - Microsoft 365 Apps for Enterprise Version 2412 - Microsoft Edge security baseline - Microsoft Edge version 128 - Tools From 56501a2715c401e2beb228aaa26e499e5d14c1e1 Mon Sep 17 00:00:00 2001 From: Rick Munck <33725928+jmunck@users.noreply.github.com> Date: Fri, 31 Jan 2025 08:12:47 -0600 Subject: [PATCH 070/123] Update get-support-for-security-baselines.md Updated versions and removed links to SCM --- .../get-support-for-security-baselines.md | 15 +++------------ 1 file changed, 3 insertions(+), 12 deletions(-) diff --git a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md index 05f61ccf78..75939e36c9 100644 --- a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md +++ b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md @@ -16,16 +16,7 @@ The Security Compliance Manager (SCM) is now retired and is no longer supported. More information about this change can be found on the [Microsoft Security Guidance blog](/archive/blogs/secguide/security-compliance-manager-scm-retired-new-tools-and-procedures). -### Where can I get an older version of a Windows baseline? - -Any version of Windows baseline before Windows 10, version 1703, can still be downloaded using SCM. Any future versions of Windows baseline will be available through SCT. See the version matrix in this article to see if your version of Windows baseline is available on SCT. - -- [SCM 4.0 Download](/previous-versions/tn-archive/cc936627(v=technet.10)) -- [SCM Frequently Asked Questions (FAQ)](https://social.technet.microsoft.com/wiki/contents/articles/1836.microsoft-security-compliance-manager-scm-frequently-asked-questions-faq.aspx) -- [SCM Release Notes](https://social.technet.microsoft.com/wiki/contents/articles/1864.microsoft-security-compliance-manager-scm-release-notes.aspx) -- [SCM baseline download help](https://social.technet.microsoft.com/wiki/contents/articles/1865.microsoft-security-compliance-manager-scm-baseline-download-help.aspx) - -### What file formats are supported by the new SCT? +### What file formats are supported by the SCT? The toolkit supports formats created by the Windows GPO backup feature (`.pol`, `.inf`, and `.csv`). Policy Analyzer saves its data in XML files with a `.PolicyRules` file extension. LGPO also supports its own LGPO text file format as a text-based analog for the binary registry.pol file format. For more information, see the LGPO documentation. Keep in mind that SCMs' `.cab` files are no longer supported. @@ -56,16 +47,16 @@ No. SCM supported only SCAP 1.0, which wasn't updated as SCAP evolved. The new t | Name | Build | Baseline Release Date | Security Tools | |--|--|--|--| +| Windows Server 2025 | [SecGuide](https://techcommunity.microsoft.com/blog/microsoft-security-baselines/windows-server-2025-security-baseline/4358733) | January 2025 | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | | Windows Server 2022 | [SecGuide](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-server-2022-security-baseline/ba-p/2724685) | September 2021 | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | | Windows Server 2019 | [SecGuide](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-windows-10-v1809-and-windows-server/ba-p/701082) | November 2018 | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | | Windows Server 2016 | [SecGuide](/archive/blogs/secguide/security-baseline-for-windows-10-v1607-anniversary-edition-and-windows-server-2016) | October 2016 | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | -| Windows Server 2012 R2 | [SecGuide](/archive/blogs/secguide/security-baseline-for-windows-10-v1607-anniversary-edition-and-windows-server-2016) | August 2014 | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | ### Microsoft products | Name | Details | Security Tools | |--|--|--| -| Microsoft 365 Apps for enterprise, version 2306 | [SecGuide](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-m365-apps-for-enterprise-v2306/ba-p/3858702) | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | +| Microsoft 365 Apps for enterprise, version 2412 | [SecGuide](https://techcommunity.microsoft.com/blog/microsoft-security-baselines/security-baseline-for-m365-apps-for-enterprise-v2412/4357320) | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | | Microsoft Edge, version 128 | [SecGuide](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-version-128/ba-p/4237524) | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) | ## Related articles From ef635d68903f2bd699414a1e6de8db3fae68c075 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 31 Jan 2025 08:39:25 -0800 Subject: [PATCH 071/123] edit --- .../update/catalog-checkpoint-cumulative-updates.md | 4 ++-- .../update/includes/checkpoint-cumulative-updates.md | 4 ++-- windows/deployment/update/release-cycle.md | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index cef752e648..0c3fda339a 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -13,11 +13,11 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11, version 24H2 and later - ✅ Windows Server 2025 -ms.date: 01/30/2025 +ms.date: 01/31/2025 --- # Checkpoint cumulative updates and Microsoft Update Catalog usage - + Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates might be preceded by a checkpoint cumulative update. Devices (and images) updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint cumulative updates, so **update processes involving WU and WSUS remain unchanged**. This article covers how Microsoft Update Catalog users can easily update their devices (or images) through checkpoint cumulative updates. ## Checkpoint cumulative updates diff --git a/windows/deployment/update/includes/checkpoint-cumulative-updates.md b/windows/deployment/update/includes/checkpoint-cumulative-updates.md index c1be20d788..dd9b0e1abd 100644 --- a/windows/deployment/update/includes/checkpoint-cumulative-updates.md +++ b/windows/deployment/update/includes/checkpoint-cumulative-updates.md @@ -5,10 +5,10 @@ manager: aaroncz ms.subservice: itpro-updates ms.service: windows-client ms.topic: include -ms.date: 01/30/2025 +ms.date: 01/31/2025 ms.localizationpriority: medium --- - + Starting Windows 11, version 24H2, Microsoft may periodically release cumulative updates as checkpoints. The subsequent updates will consist of: - The update package files associated with the checkpoints, and diff --git a/windows/deployment/update/release-cycle.md b/windows/deployment/update/release-cycle.md index 449627bbbe..ef01bc96d7 100644 --- a/windows/deployment/update/release-cycle.md +++ b/windows/deployment/update/release-cycle.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 01/30/2025 +ms.date: 01/31/2025 --- # Update release cycle for Windows clients From 14751d75763c5009894ca7922c94a717cbd8761d Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 31 Jan 2025 09:50:46 -0800 Subject: [PATCH 072/123] edits --- .../catalog-checkpoint-cumulative-updates.md | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index 0c3fda339a..867e17a256 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -12,13 +12,13 @@ ms.collection: ms.localizationpriority: medium appliesto: - ✅ Windows 11, version 24H2 and later - - ✅ Windows Server 2025 + - ✅ Windows Server 2025 and later ms.date: 01/31/2025 --- # Checkpoint cumulative updates and Microsoft Update Catalog usage -Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates might be preceded by a checkpoint cumulative update. Devices (and images) updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint cumulative updates, so **update processes involving WU and WSUS remain unchanged**. This article covers how Microsoft Update Catalog users can easily update their devices (or images) through checkpoint cumulative updates. +Starting Windows 11, version 24H2, monthly security updates and optional nonsecurity preview release updates might be preceded by a checkpoint cumulative update. Devices updating from Windows Update (WU) and Windows Server Update Services (WSUS) release channels can continue to seamlessly install the latest monthly security update or the optional nonsecurity preview release regardless of whether there are any preceding checkpoint cumulative updates, so **update processes involving WU and WSUS remain unchanged**. This article covers how Microsoft Update Catalog users can easily update their devices (or images) through checkpoint cumulative updates. ## Checkpoint cumulative updates @@ -32,7 +32,7 @@ Going forward, Microsoft might periodically release cumulative updates as checkp This process might be repeated multiple times, thereby generating multiple checkpoints during the lifecycle of a given Windows release. The Windows 11, version 24H2 servicing stack can merge all the checkpoints and only download and install content that's missing on the device. -If any checkpoint cumulative updates precede a target update, a device or image needs to take all prior checkpoint cumulative updates before it can take the target update. In other words, a post-checkpoint latest cumulative update can be applied to images/devices that are on that checkpoint or on a subsequent latest cumulative update. For updates sourced from WU and WSUS this process happens seamlessly. You can continue to use the same tools and processes that you currently use for approving and deploying updates. +If any checkpoint cumulative updates precede a target update, a device or image needs to take all prior checkpoint cumulative updates before it can take the target update. In other words, a post-checkpoint latest cumulative update can be applied to images/devices that are on that checkpoint or on a subsequent latest cumulative update. For updates sourced from WU and WSUS this process happens seamlessly. You can continue to use the same tools and processes that you currently use for approving and deploying updates. We expect that your experience updating through a checkpoint cumulative update will position you to efficiently take future checkpoint cumulative updates. ### Applicability @@ -40,11 +40,10 @@ A checkpoint cumulative update is just another monthly security update that info This feature doesn't introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). +### Update Windows installation media + WinRE is serviced by applying the servicing stack update from a cumulative update (latest cumulative update doesn't apply) and SafeOS Dynamic Update. This is how it has been for a while now, and there's no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying servicing stack update then SafeOS Dynamic Update is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). -### Current checkpoint cumulative updates - -For Windows 11, version 24H2 and later, for a given update, the knowledge base (KB) article notes all preceding checkpoint cumulative updates under the **Catalog** release channel tab. We expect that your experience updating through a checkpoint cumulative update will position you to efficiently take future checkpoint cumulative updates. ## Updating from the Microsoft Update Catalog @@ -54,7 +53,7 @@ When installing a given monthly security or optional nonsecurity preview update, For a given update, users can look up the KB article and find all preceding checkpoints, if any, listed under the **Catalog** release channel. For instance, the 2024-12 monthly security update (KB5048667) has one preceding checkpoint cumulative update per [December 10, 2024-KB5048667 (OS Build 26100.2605)](https://support.microsoft.com/topic/708755a6-d809-4a8a-8d20-53c4108590e6#ID0ELBD=Catalog): - > Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu
+ > Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or [Windows Update Standalone Installer](https://support.microsoft.com/topic/799ba3df-ec7e-b05e-ee13-1cdae8f23b19) in the following order:

  • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  • windows11.0-kb5048667-x64_d4ad0ca69de9a02bc356757581e0e0d6960c9f93.msu
Alternately, users can search the KB number in the [Microsoft Update Catalog](https://catalog.update.microsoft.com/) and select the **Download** button for the selected architecture. The download pop-up shows all prior checkpoints for the update so that users can conveniently download all `.msu` files and apply them to their image or device. For instance, Microsoft Update Catalog shows the [2024-12 cumulative update (KB5048667)](https://support.microsoft.com/help/5048667) has one preceding checkpoint cumulative update, [KB5043080](https://support.microsoft.com/help/5043080). @@ -73,7 +72,7 @@ Examples of eligible devices: **Device needs FoD or language pack customization:** -Installing FoDs or language packs requires the full latest cumulative update payload, which now can be split across files associated with each preceding checkpoint cumulative update. So, when customizing FoDs or language packs, all prior checkpoint cumulative updates and the target cumulative update need to be installed regardless of whether the device already had any of the prior checkpoints cumulative update installed. This needs to be done using DISM. +Installing FoDs or language packs requires the full latest cumulative update payload, which now can be split across files associated with each preceding checkpoint cumulative update. So, when customizing FoDs or language packs for offline media, all prior checkpoint cumulative updates and the target cumulative update need to be installed regardless of whether the device already had any of the prior checkpoints cumulative update installed. This needs to be done using DISM. 1. Copy the .msu files of the latest cumulative update (the target) and all prior checkpoint cumulative updates to a local folder. Make sure there are no other .msu files present. 1. Mount the install.wim file. From bc3239cafdcdd56555b9b42b7cd520fe8d0783ae Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 31 Jan 2025 10:39:10 -0800 Subject: [PATCH 073/123] Update catalog-checkpoint-cumulative-updates.md commit --- .../deployment/update/catalog-checkpoint-cumulative-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index 867e17a256..f92a84a8fa 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -90,4 +90,4 @@ Devices that aren't on the latest checkpoint cumulative update and don't need Fo - [Servicing stack updates](/windows/deployment/update/servicing-stack-updates) - [Features on Demand](/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities) - [How to download updates that include drivers and hotfixes from the Microsoft Update Catalog](/troubleshoot/windows-client/installing-updates-features-roles/download-updates-drivers-hotfixes-windows-update-catalog) -- [Update Windows installation media with Dynamic Update](media-dynamic-update.md) +- [Update Windows installation media with Dynamic Update](media-dynamic-update.md) From 248eef82d97bfc706fc386fff79bdc22decbdeef Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 31 Jan 2025 11:01:47 -0800 Subject: [PATCH 074/123] edits --- .../deployment/update/catalog-checkpoint-cumulative-updates.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index 867e17a256..a4e7755200 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -38,9 +38,10 @@ If any checkpoint cumulative updates precede a target update, a device or image A checkpoint cumulative update is just another monthly security update that informs how subsequent updates are built. There's no policy change or new requirement around when users must take these updates, though it's best practice to take monthly security updates at the earliest opportunity to keep your devices protected and productive. +### Update Windows installation media + This feature doesn't introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). -### Update Windows installation media WinRE is serviced by applying the servicing stack update from a cumulative update (latest cumulative update doesn't apply) and SafeOS Dynamic Update. This is how it has been for a while now, and there's no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying servicing stack update then SafeOS Dynamic Update is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). From dae02a5ae9b4f40a7084d58759f629ee5c5f3c0d Mon Sep 17 00:00:00 2001 From: Mukund Kher Date: Fri, 31 Jan 2025 11:03:11 -0800 Subject: [PATCH 075/123] Update catalog-checkpoint-cumulative-updates.md Commit --- .../update/catalog-checkpoint-cumulative-updates.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index 4778484089..c7ba0f378d 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -38,10 +38,9 @@ If any checkpoint cumulative updates precede a target update, a device or image A checkpoint cumulative update is just another monthly security update that informs how subsequent updates are built. There's no policy change or new requirement around when users must take these updates, though it's best practice to take monthly security updates at the earliest opportunity to keep your devices protected and productive. -### Update Windows installation media - This feature doesn't introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). +### Update Windows installation media WinRE is serviced by applying the servicing stack update from a cumulative update (latest cumulative update doesn't apply) and SafeOS Dynamic Update. This is how it has been for a while now, and there's no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying servicing stack update then SafeOS Dynamic Update is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). @@ -84,7 +83,7 @@ Installing FoDs or language packs requires the full latest cumulative update pay **Device doesn't have the latest checkpoint cumulative update and doesn't need customization:** -Devices that aren't on the latest checkpoint cumulative update and don't need FoD/language pack customization can either install all needed cumulative updates one by one in the right sequence. Alternately they can be updated using DISM to install all cumulative updates in one go. For more information, see the [Updating through checkpoint cumulative updates](#updating-through-checkpoint-cumulative-updates) section. If there are total four checkpoint cumulative updates available and device already has the first one installed, DISM applies the remaining three checkpoint cumulative updates in the right order followed by the target cumulative update, all in one go. +Devices that aren't on the latest checkpoint cumulative update and don't need FoD/language pack customization can either install all needed cumulative updates one by one in the right sequence. Alternately they can be updated using DISM to install all cumulative updates in one go. For more information, see the [Updating through checkpoint cumulative updates](#updating-through-checkpoint-cumulative-updates) section. If there are total four checkpoint cumulative updates available and device already has the first one installed, DISM applies the remaining three checkpoint cumulative updates in the right order followed by the target cumulative update, all in one go. ## Related articles From 53a7beeb303649515112b4542b9efc9494218f8b Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 31 Jan 2025 11:09:40 -0800 Subject: [PATCH 076/123] edits --- .../update/catalog-checkpoint-cumulative-updates.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md index c7ba0f378d..ce4b36fd45 100644 --- a/windows/deployment/update/catalog-checkpoint-cumulative-updates.md +++ b/windows/deployment/update/catalog-checkpoint-cumulative-updates.md @@ -38,10 +38,10 @@ If any checkpoint cumulative updates precede a target update, a device or image A checkpoint cumulative update is just another monthly security update that informs how subsequent updates are built. There's no policy change or new requirement around when users must take these updates, though it's best practice to take monthly security updates at the earliest opportunity to keep your devices protected and productive. -This feature doesn't introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). - ### Update Windows installation media +This feature doesn't introduce any change to the applicability of monthly security updates. As before, these updates apply to the main OS (install.wim) and to WinPE (boot.wim) but not to WinRE (winre.wim). + WinRE is serviced by applying the servicing stack update from a cumulative update (latest cumulative update doesn't apply) and SafeOS Dynamic Update. This is how it has been for a while now, and there's no recent change to WinRE servicing and certainly no change due to the checkpoint cumulative updates feature. We understand that not everybody may have had a shared understanding about this, but applying servicing stack update then SafeOS Dynamic Update is the only way to ensure WinRE is serviced. For more information, see [Update Windows installation media with Dynamic Update](media-dynamic-update.md). From a01cdb5681bbf0da0da91ac69ec2dbaa420a4e1d Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 31 Jan 2025 14:09:44 -0800 Subject: [PATCH 077/123] edits --- .../deployment/update/media-dynamic-update.md | 36 +++++++++---------- 1 file changed, 18 insertions(+), 18 deletions(-) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index 0ae148a631..33f43d08f6 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -13,7 +13,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Windows Server -ms.date: 1/28/2024 +ms.date: 1/31/2024 --- # Update Windows installation media with Dynamic Update @@ -62,7 +62,7 @@ You can obtain Dynamic Update packages from the [Microsoft Update Catalog](https |Servicing stack Dynamic Update | YYYY-MM Servicing Stack Update for Microsoft server operating system version 23H2 | ### Azure Stack HCI, version 22H2 Dynamic Update packages -**Title**, **Product** and **Description** are required to distinguish each Dynamic Package. Latest cumulative update has the servicing stack embedded. Servicing stack published separately only if necessary as a prerequisite for a given cumulative update. +**Title**, **Product**, and **Description** are required to distinguish each Dynamic Package. Latest cumulative update has the servicing stack embedded. Servicing stack published separately only if necessary as a prerequisite for a given cumulative update. | Update packages |Title |Product |Description | |-----------------------------------|----------------------------------------------------------------------------------------|----------------------------------------------|------------------| @@ -72,7 +72,7 @@ You can obtain Dynamic Update packages from the [Microsoft Update Catalog](https |Servicing stack Dynamic Update | YYYY-MM Servicing Stack Update for Microsoft server operating system, version 22H2 | | | ### Windows Server 2022 later Dynamic Update packages -**Title**, **Product** and **Description** are required to distinguish each Dynamic Package. Latest cumulative update has the servicing stack embedded. Servicing stack published separately only if necessary as a prerequisite for a given cumulative update. +**Title**, **Product**, and **Description** are required to distinguish each Dynamic Package. Latest cumulative update has the servicing stack embedded. Servicing stack published separately only if necessary as a prerequisite for a given cumulative update. | Update packages |Title |Product |Description | |-----------------------------------|----------------------------------------------------------------------------------------|----------------------------------------------|------------------| @@ -81,8 +81,8 @@ You can obtain Dynamic Update packages from the [Microsoft Update Catalog](https |Latest cumulative update | YYYY-MM Cumulative Update for Microsoft server operating system, version 21H2 | | | |Servicing stack Dynamic Update | YYYY-MM Servicing Stack Update for Microsoft server operating system, version 21H2 | | | -### Windows 11, version 22H2 and later Dynamic Update packages -**Title** can distinguish each Dynamic Package. Latest cumulative updates have the servicing stack embedded. The servicing stack is published only if necessary for a given cumulative update. Titles below are for Windows 11, version 22H2. Windows 11, version 23H2 and 24H2 have a similar format. +### Windows 11, version 22H2, and later Dynamic Update packages +**Title** can distinguish each Dynamic Package. Latest cumulative updates have the servicing stack embedded. The servicing stack is published only if necessary for a given cumulative update. The following titles are for Windows 11, version 22H2. Windows 11, version 23H2, and version 24H2 have a similar format: | Update packages |Title | |-----------------------------------|---------------------------------------------------------------| @@ -92,7 +92,7 @@ You can obtain Dynamic Update packages from the [Microsoft Update Catalog](https |Servicing stack Dynamic Update | YYYY-MM Servicing Stack Update for Windows 11 Version 22H2 | ### Windows 11, version 21H2 Dynamic Update packages -**Title**, **Product** and **Description** are required to distinguish each Dynamic Package. Latest cumulative update has the servicing stack embedded. Servicing stack published separately only if necessary as a prerequisite for a given cumulative update. +**Title**, **Product**, and **Description** are required to distinguish each Dynamic Package. Latest cumulative update has the servicing stack embedded. Servicing stack published separately only if necessary as a prerequisite for a given cumulative update. | Update packages |Title |Product |Description | |-----------------------------------|---------------------------------------------------------------|----------------------------------------------|------------------| @@ -102,7 +102,7 @@ You can obtain Dynamic Update packages from the [Microsoft Update Catalog](https |Servicing stack Dynamic Update | YYYY-MM Servicing Stack Update for Windows 11 Version 21H2 | | | ### Windows 10, version 22H2 Dynamic Update packages -**Title**, **Product** and **Description** are required to distinguish each Dynamic Package. Latest cumulative update has the servicing stack embedded. Servicing stack published separately only if necessary as a prerequisite for a given cumulative update. +**Title**, **Product**, and **Description** are required to distinguish each Dynamic Package. Latest cumulative update has the servicing stack embedded. Servicing stack published separately only if necessary as a prerequisite for a given cumulative update. | Update packages |Title |Product |Description | |-----------------------------------|---------------------------------------------------------------|----------------------------------------------|------------------| @@ -136,7 +136,7 @@ This table shows the correct sequence for applying the various tasks to the file |Add Optional Components | | 12 | | | |Add Safe OS Dynamic Update | 6 | | | | |Add Setup Dynamic Update | | | | 26 | -|Add setup.exe and setuphost.exe from WinPE | | | | 27 | +|Add Setup.exe and setuphost.exe from WinPE | | | | 27 | |Add boot manager from WinPE | | | | 28 | |Add latest cumulative update | | 13 | 23 | | |Clean up the image | 7 | 14 | 24 | | @@ -147,7 +147,7 @@ This table shows the correct sequence for applying the various tasks to the file > Starting in February 2021, the latest cumulative update and servicing stack update is combined and distributed in the Microsoft Update Catalog as a new combined cumulative update. For Steps 1, 9, and 17 that require the servicing stack update for updating the installation media, you should use the combined cumulative update. For more information on the combined cumulative update, see [Servicing stack updates](./servicing-stack-updates.md). > [!NOTE] -> Microsoft will remove the Flash component from Windows through KB4577586, "Update for Removal of Adobe Flash Player". You can also remove Flash anytime by deploying the update in KB4577586 (available on the Catalog) between steps 20 and 21. As of July 2021, KB4577586, "Update for Removal of Adobe Flash Player" will be included in the latest cumulative update for Windows 10, versions 1607 and 1507. The update will also be included in the Monthly Rollup and the Security Only Update for Windows 8.1, Windows Server 2012, and Windows Embedded 8 Standard. For more information, see [Update on Adobe Flash Player End of Support](https://blogs.windows.com/msedgedev/2020/09/04/update-adobe-flash-end-support/). +> Microsoft removes the Flash component from Windows through [KB4577586: Update for Removal of Adobe Flash Player](https://support.microsoft.com/kb/4577586). You can also remove Flash anytime by deploying the update in KB4577586 (available on the Catalog) between steps 20 and 21. As of July 2021, KB4577586, "Update for Removal of Adobe Flash Player" will be included in the latest cumulative update for Windows 10, versions 1607 and 1507. The update will also be included in the Monthly Rollup and the Security Only Update for Windows 8.1, Windows Server 2012, and Windows Embedded 8 Standard. For more information, see [Update on Adobe Flash Player End of Support](https://blogs.windows.com/msedgedev/2020/09/04/update-adobe-flash-end-support/). ### Multiple Windows editions @@ -157,13 +157,13 @@ The main operating system file (install.wim) might contain multiple editions of You don't have to add more languages and features to the image to accomplish the updates, but it's an opportunity to customize the image with more languages, Optional Components, and Features on Demand beyond what's in your starting image. When you add more languages and features, it's important to make these changes in the correct order: first apply servicing stack updates, followed by language additions, then by feature additions, and finally the latest cumulative update. The provided sample script installs a second language (in this case Japanese (ja-JP)). Since this language is backed by an lp.cab, there's no need to add a Language Experience Pack. Japanese is added to both the main operating system and to the recovery environment to allow the user to see the recovery screens in Japanese. This includes adding localized versions of the packages currently installed in the recovery image. -Optional Components, along with the .NET feature, can be installed offline, however doing so creates pending operations that require the device to restart. As a result, the call to perform image cleanup would fail. There are two options to avoid the cleanup failure. One option is to skip the image cleanup step, though that results in a larger install.wim. Another option is to install the .NET and Optional Components in a step after cleanup but before export. This is the option in the sample script. By doing this, you'll have to start with the original install.wim (with no pending actions) when you maintain or update the image the next time (for example, the next month). +Optional Components, along with the .NET feature, can be installed offline. However, doing so creates pending operations that require the device to restart. As a result, the call to perform image cleanup would fail. There are two options to avoid the cleanup failure. One option is to skip the image cleanup step, though that results in a larger install.wim. Another option is to install the .NET and Optional Components in a step after cleanup but before export. This is the option in the sample script. By doing this, you'll have to start with the original install.wim (with no pending actions) when you maintain or update the image the next time (for example, the next month). ### Checkpoint cumulative updates -Starting with Windows 11, version 24H2, and Windows Server 2025, the latest cumulative update may have a prerequisite cumulative update that is required to be installed first. These are known as checkpoint cumulative updates. In these cases, the cumulative update file level differentials are based on a previous cumulative update instead of the Windows RTM release. The benefit is a smaller update package and faster installation. When you obtain the latest cumulative update from the [Microsoft Update Catalog](https://catalog.update.microsoft.com), checkpoint cumulative updates will be available from the download button. In addition, the knowledge base article for the cumulative update will provide additional information. +Starting with Windows 11, version 24H2, and Windows Server 2025, the latest cumulative update might have a prerequisite cumulative update that is required to be installed first. These updates are known as checkpoint cumulative updates. In these cases, the cumulative update file level differentials are based on a previous cumulative update instead of the Windows RTM release. The benefit is a smaller update package and faster installation. When you obtain the latest cumulative update from the [Microsoft Update Catalog](https://catalog.update.microsoft.com), checkpoint cumulative updates are available from the download button. In addition, the knowledge base article for the cumulative update provides additional information. -To install the checkpoint(s) when servicing the Windows OS (steps 9 & 12) and WinPE (steps 17 & 23), call `Add-WindowsPackage` with the target cumulative update. The folder from `-PackagePath` will be used to discover and install one or more checkpoints as needed. Only the target cumulative update and checkpoint cumulative updates should be in the `-PackagePath` folder. Cumulative update packages with a revision <= the target cumulative update will be processed. If you are not customizing the image with additional languages and/or optional features, then separate calls to `Add-WindowsPackage` (checkpoint cumulative updates first) can be used for steps 9 & 17 above. Separate calls cannot be used for steps 12 and 23. +To install the checkpoint(s) when servicing the Windows OS (steps 9 & 12) and WinPE (steps 17 & 23), call `Add-WindowsPackage` with the target cumulative update. The folder from `-PackagePath` is used to discover and install one or more checkpoints as needed. Only the target cumulative update and checkpoint cumulative updates should be in the `-PackagePath` folder. Cumulative update packages with a revision <= the target cumulative update are processed. If you aren't customizing the image with additional languages and/or optional features, then separate calls to `Add-WindowsPackage` (checkpoint cumulative updates first) can be used for steps 9 & 17 above. Separate calls can't be used for steps 12 and 23. ## Windows PowerShell scripts to apply Dynamic Updates to an existing image @@ -178,7 +178,7 @@ These examples are for illustration only, and therefore lack error handling. The ### Get started -The script starts by declaring global variables and creating folders to use for mounting images. Then, make a copy of the original media, from \oldMedia to \newMedia, keeping the original media in case there's a script error and it's necessary to start over from a known state. Also, it provides a comparison of old versus new media to evaluate changes. To ensure that the new media updates, make sure they aren't read-only. The script also showcases adding additional languages, Features on Demand, and Optional Components. These are not required, but added to highlight when in the sequence they should be addeed. Starting with Windows 11, version 21H2, the language pack (LANGPACK) ISO has been superseded by the Features on Demand ISO. Language packs and the \Windows Preinstallation Environment packages are part of the Features on Demand ISO. Further, the path for main OS language and optional features moved to \LanguagesAndOptionalFeatures instead of the root. If you are using this script for Windows 10, modify to mount and use the language pack (LANGPACK) ISO. +The script starts by declaring global variables and creating folders to use for mounting images. Then, make a copy of the original media, from \oldMedia to \newMedia, keeping the original media in case there's a script error and it's necessary to start over from a known state. Also, it provides a comparison of old versus new media to evaluate changes. To ensure that the new media updates, make sure they aren't read-only. The script also showcases adding additional languages, Features on Demand, and Optional Components. These aren't required, but added to highlight when in the sequence they should be added. Starting with Windows 11, version 21H2, the language pack (LANGPACK) ISO is superseded by the Features on Demand ISO. Language packs and the \Windows Preinstallation Environment packages are part of the Features on Demand ISO. Further, the path for main OS language and optional features moved to \LanguagesAndOptionalFeatures instead of the root. If you're using this script for Windows 10, modify to mount and use the language pack (LANGPACK) ISO. ```powershell @@ -253,11 +253,11 @@ Get-ChildItem -Path $MEDIA_NEW_PATH -Recurse | Where-Object { -not $_.PSIsContai ### Update WinRE and each main OS Windows edition -The script will update each edition of Windows within the main operating system file (install.wim). For each edition, the main OS image is mounted. +The script updates each edition of Windows within the main operating system file (install.wim). For each edition, the main OS image is mounted. -For the first image, Winre.wim is copied to the working folder, and mounted. It then applies servicing stack servicing stack via the latest cumulative update, since its components are used for updating other components. Depending on the Windows release that you are updating, there are two different approaches for updating the servicing stack. The first approach is to use the combined cumulative update. This is for Windows releases that are shipping a combined cumulative update that includes the servicing stack updates (i.e. SSU + LCU are combined). Windows 11, version 21H2 and Windows 11, version 22H2 are examples. In these cases, the servicing stack update is not published seperately; the combined cumulative update should be used for this step. However, in hopefully rare cases, there may breaking change in the combined cumulative update format change, that requires a standalone servicing stack update to be published, and installed first before the combined cumulative update can be installed. Since the script is optionally adding Japanese, it adds the language pack to the image, and installs the Japanese versions of all optional packages already installed in Winre.wim. Then, it applies the Safe OS Dynamic Update package. It finishes by cleaning and exporting the image to reduce the image size. +For the first image, Winre.wim is copied to the working folder, and mounted. It then applies servicing stack via the latest cumulative update, since its components are used for updating other components. Depending on the Windows release that you're updating, there are two different approaches for updating the servicing stack. The first approach is to use the combined cumulative update. This is for Windows releases that are shipping a combined cumulative update that includes the servicing stack updates (that is, SSU + LCU are combined). Windows 11, version 21H2, and Windows 11, version 22H2 are examples. In these cases, the servicing stack update isn't published separately; the combined cumulative update should be used for this step. However, in rare cases, there might be a breaking change in the combined cumulative update format change, that requires a standalone servicing stack update to be published, and installed first before the combined cumulative update can be installed. Since the script is optionally adding Japanese, it adds the language pack to the image, and installs the Japanese versions of all optional packages already installed in Winre.wim. Then, it applies the Safe OS Dynamic Update package. It finishes by cleaning and exporting the image to reduce the image size. -Next, for the mounted OS image, the script starts by applying the servicing stack via the latest cumulative update. Then, it adds Japanese language support and then the Japanese language features. Unlike the Dynamic Update packages, it uses `Add-WindowsCapability` to add these features. For a full list of such features, and their associated capability name, see [Available Features on Demand](/windows-hardware/manufacture/desktop/features-on-demand-non-language-fod). Now is the time to enable other Optional Components or add other Features on Demand. If such a feature has an associated cumulative update (for example, .NET), this is the time to apply those. The script then attempts to clean the image, then a final step to apply the latest cumulative update. It is important to apply the latest cumulative update last, to ensure Features on Demand, Optional Components and Languages are updated from their initial release state. The .NET feature is an exception, that is added along with its cumulative update next. Finally, the script exports the image. +Next, for the mounted OS image, the script starts by applying the servicing stack via the latest cumulative update. Then, it adds Japanese language support and then the Japanese language features. Unlike the Dynamic Update packages, it uses `Add-WindowsCapability` to add these features. For a full list of such features, and their associated capability name, see [Available Features on Demand](/windows-hardware/manufacture/desktop/features-on-demand-non-language-fod). Now is the time to enable other Optional Components or add other Features on Demand. If such a feature has an associated cumulative update (for example, .NET), this is the time to apply those. The script then attempts to clean the image, then a final step to apply the latest cumulative update. It's important to apply the latest cumulative update last, to ensure Features on Demand, Optional Components, and Languages are updated from their initial release state. The .NET feature is an exception that's added along with its cumulative update next. Finally, the script exports the image. This process is repeated for each edition of Windows within the main operating system file. To reduce size, the serviced Winre.wim file from the first image is saved, and used to update each subsequent Windows edition. This reduces the final size of install.wim. @@ -472,7 +472,7 @@ Move-Item -Path $WORKING_PATH"\install2.wim" -Destination $MEDIA_NEW_PATH"\sourc ### Update WinPE -This script is similar to the one that updates WinRE, but instead it mounts Boot.wim, applies the packages with the latest cumulative update last, and saves. It repeats this for all images inside of Boot.wim, typically two images. It starts by applying the servicing stack Dynamic Update. Since the script is customizing this media with Japanese, it installs the language pack from the WinPE folder on the language pack ISO. Additionally, it adds font support and text to speech (TTS) support. Since the script is adding a new language, it rebuilds lang.ini, used to identify languages installed in the image. For the second image, we'll save setup.exe and setuphost.exe for later use, to ensure these versions matches the \sources\setup.exe and \sources\setuphost.exe version from the installation media. If these binaries aren't identical, Windows Setup will fail during installation. We'll also save the serviced boot manager files for later use in the script. Finally, the script cleans and exports Boot.wim, and copies it back to the new media. +This script is similar to the one that updates WinRE, but instead it mounts Boot.wim, applies the packages with the latest cumulative update last, and saves. It repeats this for all images inside of Boot.wim, typically two images. It starts by applying the servicing stack Dynamic Update. Since the script is customizing this media with Japanese, it installs the language pack from the WinPE folder on the language pack ISO. Additionally, it adds font support and text to speech (TTS) support. Since the script is adding a new language, it rebuilds lang.ini, used to identify languages installed in the image. For the second image, we save setup.exe and setuphost.exe for later use, to ensure these versions matches the \sources\setup.exe and \sources\setuphost.exe version from the installation media. If these binaries aren't identical, Windows Setup will fail during installation. We'll also save the serviced boot manager files for later use in the script. Finally, the script cleans and exports Boot.wim, and copies it back to the new media. ```powershell # @@ -613,7 +613,7 @@ Move-Item -Path $WORKING_PATH"\boot2.wim" -Destination $MEDIA_NEW_PATH"\sources\ ### Update remaining media files -This part of the script updates the Setup files. It simply copies the individual files in the Setup Dynamic Update package to the new media. This step brings in updated Setup files as needed, along with the latest compatibility database, and replacement component manifests. This script also does a final replacement of setup.exe, setuphost.exe and boot manager files using the previously saved versions from WinPE. +This part of the script updates the Setup files. It simply copies the individual files in the Setup Dynamic Update package to the new media. This step brings in updated Setup files as needed, along with the latest compatibility database, and replacement component manifests. This script also does a final replacement of setup.exe, setuphost.exe, and boot manager files using the previously saved versions from WinPE. ```powershell # From 91177ed30463896996a7bdce6ceae640d31e4f46 Mon Sep 17 00:00:00 2001 From: tiaraquan Date: Mon, 3 Feb 2025 10:15:42 -0800 Subject: [PATCH 078/123] Updates to hotpatch content --- .../windows-autopatch-hotpatch-updates.md | 33 +++++++++++++------ 1 file changed, 23 insertions(+), 10 deletions(-) diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md index d92f402704..5ffdbf1d92 100644 --- a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md +++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md @@ -1,7 +1,7 @@ --- title: Hotpatch updates description: Use Hotpatch updates to receive security updates without restarting your device -ms.date: 11/19/2024 +ms.date: 02/03/2025 ms.service: windows-client ms.subservice: autopatch ms.topic: how-to @@ -22,7 +22,12 @@ ms.collection: > [!IMPORTANT] > This feature is in public preview. It's being actively developed and might not be complete. They're made available on a "Preview" basis. You can test and use these features in production environments and scenarios and provide feedback. -Hotpatch updates are [Monthly B release security updates](/windows/deployment/update/release-cycle#monthly-security-update-release) that can be installed without requiring you to restart the device. Hotpatch updates are designed to reduce downtime and disruptions. By minimizing the need to restart, these updates help ensure faster compliance, making it easier for organizations to maintain security while keeping workflows uninterrupted. +Hotpatch updates are designed to reduce downtime and disruptions. Hotpatch updates are [Monthly B release security updates](/windows/deployment/update/release-cycle#monthly-security-update-release) that install and take effect without requiring you to restart the device. By minimizing the need to restart, these updates help ensure faster compliance, making it easier for organizations to maintain security while keeping workflows uninterrupted. + +Hotpatch is an extension of Windows Update and requires Autopatch to create and deploy hotpatches to devices enrolled in the Autopatch quality update policy. + +> [!NOTE] +> Hotpatch is also available on Windows Server and Windows 365. For more information, see [Hotpatch for Windows Server Azure Edition](/windows-server/get-started/enable-hotpatch-azure-edition). ## Key benefits @@ -30,7 +35,18 @@ Hotpatch updates are [Monthly B release security updates](/windows/deployment/up - No changes are required to your existing update ring configurations. Your existing ring configurations are honored alongside Hotpatch policies. - The [Hotpatch quality update report](../monitor/windows-autopatch-hotpatch-quality-update-report.md) provides a per policy level view of the current update statuses for all devices that receive Hotpatch updates. -## Operating system configuration prerequisites +## Release cycles + +For more information about the release calendar for Hotpatch updates, see [Release notes for Hotpatch](https://support.microsoft.com/topic/release-notes-for-hotpatch-in-azure-automanage-for-windows-server-2022-4e234525-5bd5-4171-9886-b475dabe0ce8?preview=true). + +| Quarter | Baseline updates (requires restart) | Hotpatch (no restart required) | +| ----- | ----- | ----- | +| 1 | January | February and March | +| 2 | April | May and June | +| 3 | July | August and September | +| 4 | October | November and December | + +## Operating system configuration prerequisites To prepare a device to receive Hotpatch updates, configure the following operating system settings on the device. You must configure these settings for the device to be offered the Hotpatch update and to apply all Hotpatch updates. @@ -66,13 +82,6 @@ LCUs requires you to restart the device, but the LCU ensures that the device rem > [!NOTE] > If devices aren't eligible for Hotpatch updates, these devices are offered the LCU. The LCU keeps your configured Update ring settings, it doesn't change the settings. -## Release cycles - -For more information about the release calendar for Hotpatch updates, see [Release notes for Hotpatch](https://support.microsoft.com/topic/release-notes-for-hotpatch-in-azure-automanage-for-windows-server-2022-4e234525-5bd5-4171-9886-b475dabe0ce8?preview=true). - -- Baseline Release Months: January, April, July, October -- Hotpatch Release Months: February, March, May, June, August, September, November, December - ## Enroll devices to receive Hotpatch updates > [!NOTE] @@ -95,3 +104,7 @@ These steps ensure that targeted devices, which are [eligible](#eligible-devices > [!NOTE] > Turning on Hotpatch updates doesn't change the existing deadline-driven or scheduled install configurations on your managed devices. Deferral and active hour settings still apply. + +## Roll back a hotpatch update + +Automatic rollback of a Hotpatch update isn’t supported but you can uninstall them. If you experience an unexpected issue with hotpatch updates, you can investigate by uninstalling the hotpatch update and installing the latest standard cumulative update (LCU) and restart. Uninstalling a hotpatch update is quick, however, it does require a device restart. From 037fc0d57108936d6df0f429ec0db30fd8e26663 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 3 Feb 2025 11:58:44 -0800 Subject: [PATCH 079/123] dep-bloglink-and-edits --- windows/whats-new/deprecated-features.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index 4b2f886e48..f18324df51 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -1,7 +1,7 @@ --- title: Deprecated features in the Windows client description: Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11. -ms.date: 01/24/2025 +ms.date: 02/03/2025 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium @@ -21,9 +21,9 @@ appliesto: Each version of Windows client adds new features and functionality. Occasionally, new versions also remove features and functionality, often because they added a newer option. This article provides details about the features and functionalities that are no longer being developed in Windows client. For more information about features that were removed, see [Windows features removed](removed-features.md). -For more information about features in Windows 11, see [Feature deprecations and removals](https://www.microsoft.com/windows/windows-11-specifications#table3). - -To understand the distinction between *deprecation* and *removal*, see [Windows client features lifecycle](feature-lifecycle.md). +- To understand the distinction between *deprecation* and *removal*, see [Windows client features lifecycle](feature-lifecycle.md). +- For more information about how deprecation fits into the Windows lifecycle, see [Deprecation: What it means in the Windows lifecycle](https://techcommunity.microsoft.com/blog/windows-itpro-blog/deprecation-what-it-means-in-the-windows-lifecycle/4372457). +- For more information about features removed on upgrade to Windows 11 from Windows 10, see [Feature deprecations and removals](https://www.microsoft.com/windows/windows-11-specifications#table3). The features in this article are no longer being actively developed, and might be removed in a future update. Some features were replaced with other features or functionality and some are now available from other sources. @@ -50,15 +50,15 @@ The features in this article are no longer being actively developed, and might b | Suggested actions | Suggested actions that appear when you copy a phone number or future date in Windows 11 are deprecated and will be removed in a future Windows 11 update. | December 2024 | | Legacy DRM services | Legacy DRM services, used by either Windows Media Player, Silverlight clients, Windows 7, or Windows 8 clients are deprecated. The following functionality won't work when these services are fully retired:
  • Playback of protected content in the legacy Windows Media Player on Windows 7
  • Playback of protected content in a Silverlight client and Windows 8 clients
  • In-home streaming playback from a Silverlight client or Windows 8 client to an Xbox 360
  • Playback of protected content ripped from a personal CD on Windows 7 clients using Windows Media Player
| September 2024 | | Paint 3D | Paint 3D is deprecated and will be removed from the Microsoft Store on November 4, 2024. To view and edit 2D images, you can use [Paint](https://apps.microsoft.com/detail/9pcfs5b6t72h) or [Photos](https://apps.microsoft.com/detail/9wzdncrfjbh4). For viewing 3D content, you can use [3D Viewer](https://apps.microsoft.com/detail/9nblggh42ths). For more information, see [Resources for deprecated features](deprecated-features-resources.md#paint-3d). | August 2024 | -| Adobe Type1 fonts | Adobe PostScript Type1 fonts are deprecated and support will be removed in a future release of Windows.

In January 2023, Adobe announced the [end of support for PostScript Type1 fonts](https://helpx.adobe.com/fonts/kb/postscript-type-1-fonts-end-of-support.html) for their latest software offerings. Remove any dependencies on this font type by selecting a supported font type. To display currently installed fonts, go to **Settings** > **Personalization** > **Fonts**. Application developers and content owners should test their apps and data files with the Adobe Type1 fonts removed. For more information, contact the application vendor or Adobe. | August 2024 | +| Adobe Type1 fonts | Adobe PostScript Type1 fonts are deprecated and support will be removed in a future release of Windows.

In January 2023, Adobe announced the [end of support for PostScript Type1 fonts](https://helpx.adobe.com/fonts/kb/postscript-type-1-fonts-end-of-support.html) for their latest software offerings. Remove any dependencies on this font type by selecting a supported font type. To display currently installed fonts, go to **Settings** > **Personalization** > **Fonts**. Application developers and content owners should test their apps and data files with the Adobe Type1 fonts removed. For more information, contact the application vendor or Adobe. | August 2024 | | DirectAccess | DirectAccess is deprecated and will be removed in a future release of Windows. We recommend [migrating from DirectAccess to Always On VPN](/windows-server/remote/remote-access/da-always-on-vpn-migration/da-always-on-migration-overview). | June 2024 | -| NTLM | All versions of [NTLM](/windows/win32/secauthn/microsoft-ntlm), including LANMAN, NTLMv1, and NTLMv2, are no longer under active feature development and are deprecated. Use of NTLM will continue to work in the next release of Windows Server and the next annual release of Windows. Calls to NTLM should be replaced by calls to Negotiate, which will try to authenticate with Kerberos and only fall back to NTLM when necessary. For more information, see, [Resources for deprecated features](deprecated-features-resources.md).

**[Update - November 2024]**: NTLMv1 is [removed](removed-features.md) starting in Windows 11, version 24H2 and Windows Server 2025. | June 2024 | +| NTLM | All versions of [NTLM](/windows/win32/secauthn/microsoft-ntlm), including LANMAN, NTLMv1, and NTLMv2, are no longer under active feature development and are deprecated. Use of NTLM will continue to work in the next release of Windows Server and the next annual release of Windows. Calls to NTLM should be replaced by calls to Negotiate, which tries to authenticate with Kerberos and only falls back to NTLM when necessary. For more information, see, [Resources for deprecated features](deprecated-features-resources.md).

**[Update - November 2024]**: NTLMv1 is [removed](removed-features.md) starting in Windows 11, version 24H2 and Windows Server 2025. | June 2024 | | Driver Verifier GUI (verifiergui.exe) | Driver Verifier GUI, verifiergui.exe, is deprecated and will be removed in a future version of Windows. You can use the [Verifier Command Line](/windows-hardware/drivers/devtest/verifier-command-line) (verifier.exe) instead of the Driver Verifier GUI.| May 2024 | -| NPLogonNotify and NPPasswordChangeNotify APIs | Starting in Windows 11, version 24H2, the inclusion of password payload in MPR notifications is set to disabled by default through group policy in [NPLogonNotify](/windows/win32/api/npapi/nf-npapi-nplogonnotify) and [NPPasswordChangeNotify](/windows/win32/api/npapi/nf-npapi-nppasswordchangenotify) APIs. The APIs may be removed in a future release. The primary reason for disabling this feature is to enhance security. When enabled, these APIs allow the caller to retrieve a user's password, presenting potential risks for password exposure and harvesting by malicious users. To include password payload in MPR notifications, set the [EnableMPRNotifications](/windows/client-management/mdm/policy-csp-windowslogon#enablemprnotifications) policy to `enabled`.| March 2024 | -| TLS server authentication certificates using RSA keys with key lengths shorter than 2048 bits | Support for certificates using RSA keys with key lengths shorter than 2048 bits will be deprecated. Internet standards and regulatory bodies disallowed the use of 1024-bit keys in 2013, recommending specifically that RSA keys should have a key length of 2048 bits or longer. For more information, see [Transitioning of Cryptographic Algorithms and Key Sizes - Discussion Paper (nist.gov)](https://csrc.nist.gov/CSRC/media/Projects/Key-Management/documents/transitions/Transitioning_CryptoAlgos_070209.pdf). This deprecation focuses on ensuring that all RSA certificates used for TLS server authentication must have key lengths greater than or equal to 2048 bits to be considered valid by Windows.

TLS certificates issued by enterprise or test certification authorities (CA) aren't impacted with this change. However, we recommend that they be updated to RSA keys greater than or equal to 2048 bits as a security best practice. This change is necessary to preserve security of Windows customers using certificates for authentication and cryptographic purposes.| March 2024| +| NPLogonNotify and NPPasswordChangeNotify APIs | Starting in Windows 11, version 24H2, the inclusion of password payload in MPR notifications is set to `disabled` by default through group policy in [NPLogonNotify](/windows/win32/api/npapi/nf-npapi-nplogonnotify) and [NPPasswordChangeNotify](/windows/win32/api/npapi/nf-npapi-nppasswordchangenotify) APIs. The APIs may be removed in a future release. The primary reason for disabling this feature is to enhance security. When enabled, these APIs allow the caller to retrieve a user's password, presenting potential risks for password exposure and harvesting by malicious users. To include password payload in MPR notifications, set the [EnableMPRNotifications](/windows/client-management/mdm/policy-csp-windowslogon#enablemprnotifications) policy to `enabled`.| March 2024 | +| TLS server authentication certificates using RSA keys with key lengths shorter than 2048 bits | Support for certificates using RSA keys with key lengths shorter than 2048 bits is deprecated. Internet standards and regulatory bodies disallowed the use of 1024-bit keys in 2013, recommending specifically that RSA keys should have a key length of 2048 bits or longer. For more information, see [Transitioning of Cryptographic Algorithms and Key Sizes - Discussion Paper (nist.gov)](https://csrc.nist.gov/CSRC/media/Projects/Key-Management/documents/transitions/Transitioning_CryptoAlgos_070209.pdf). This deprecation focuses on ensuring that all RSA certificates used for TLS server authentication must have key lengths greater than or equal to 2048 bits to be considered valid by Windows.

TLS certificates issued by enterprise or test certification authorities (CA) aren't impacted with this change. However, we recommend that they be updated to RSA keys greater than or equal to 2048 bits as a security best practice. This change is necessary to preserve security of Windows customers using certificates for authentication and cryptographic purposes.| March 2024| | Test Base | [Test Base for Microsoft 365](/microsoft-365/test-base/overview), an Azure cloud service for application testing, is deprecated. The service will be retired in the future and will be no longer available for use after retirement. | March 2024 | | Windows Mixed Reality | [Windows Mixed Reality](/windows/mixed-reality/enthusiast-guide/before-you-start) is deprecated and will be removed in Windows 11, version 24H2. This deprecation includes the [Mixed Reality Portal](/windows/mixed-reality/enthusiast-guide/install-windows-mixed-reality) app, [Windows Mixed Reality for SteamVR](/windows/mixed-reality/enthusiast-guide/using-steamvr-with-windows-mixed-reality), and Steam VR Beta. Existing Windows Mixed Reality devices will continue to work with Steam through November 2026, if users remain on their current released version of Windows 11, version 23H2. After November 2026, Windows Mixed Reality will no longer receive security updates, nonsecurity updates, bug fixes, technical support, or online technical content updates. | December 2023 | -| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is deprecated for Microsoft Edge for Business and [will no longer be updated](feature-lifecycle.md). To learn more about Edge for Business security capabilities, see [Microsoft Edge security for your business](/deployedge/ms-edge-security-for-business).

**[Update - October 2024]**: Starting with Windows 11, version 24H2, Microsoft Defender Application Guard, including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is no longer available.

**[Update - April 2024]**: Because Application Guard is deprecated there will not be a migration to Edge Manifest V3. The corresponding extensions and associated Windows Store app will not be available after May 2024. This affects the following browsers: *Application Guard Extension - Chrome* and *Application Guard Extension - Firefox*. If you want to block unprotected browsers until you are ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard). | December 2023 | +| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is deprecated for Microsoft Edge for Business and [will no longer be updated](feature-lifecycle.md). To learn more about Edge for Business security capabilities, see [Microsoft Edge security for your business](/deployedge/ms-edge-security-for-business).

**[Update - October 2024]**: Starting with Windows 11, version 24H2, Microsoft Defender Application Guard, including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is no longer available.

**[Update - April 2024]**: Because Application Guard is deprecated there won't be a migration to Edge Manifest V3. The corresponding extensions and associated Windows Store app won't be available after May 2024. This change affects the following browsers: *Application Guard Extension - Chrome* and *Application Guard Extension - Firefox*. If you want to block unprotected browsers until you're ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard). | December 2023 | | Legacy console mode | The [legacy console mode](/windows/console/legacymode) is deprecated and no longer being updated. In future Windows releases, it will be available as an optional [Feature on Demand](/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities). This feature won't be installed by default. | December 2023 | | Windows speech recognition | [Windows speech recognition](https://support.microsoft.com/windows/83ff75bd-63eb-0b6c-18d4-6fae94050571) is deprecated and is no longer being developed. This feature is being replaced with [voice access](https://support.microsoft.com/topic/4dcd23ee-f1b9-4fd1-bacc-862ab611f55d). Voice access is available for Windows 11, version 22H2, or later devices. Currently, voice access supports five English locales: English - US, English - UK, English - India, English - New Zealand, English - Canada, and English - Australia. For more information, see [Setup voice access](https://support.microsoft.com/topic/set-up-voice-access-9fc44e29-12bf-4d86-bc4e-e9bb69df9a0e). | December 2023 | | Microsoft Defender Application Guard for Office | [Microsoft Defender Application Guard for Office](/microsoft-365/security/office-365-security/app-guard-for-office-install), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated and will no longer be updated. We recommend transitioning to Microsoft Defender for Endpoint [attack surface reduction rules](/microsoft-365/security/defender-endpoint/overview-attack-surface-reduction) along with [Protected View](/microsoft-365/security/office-365-security/recommended-settings-for-eop-and-office365#global-settings-for-safe-attachments) and [Windows Defender Application Control](/windows/security/application-security/application-control/windows-defender-application-control/wdac). | November 2023 | From 516a9e8f2d2ab5af3009f19b21a7a6a2bb05a598 Mon Sep 17 00:00:00 2001 From: Mike England Date: Mon, 3 Feb 2025 13:12:08 -0800 Subject: [PATCH 080/123] Update windows-autopatch-configure-network.md --- .../prepare/windows-autopatch-configure-network.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md index c3c115d488..7778e7edf0 100644 --- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md +++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md @@ -63,7 +63,7 @@ The following URLs must be on the allowed list of your proxy and firewall so tha | Microsoft service | URLs required on allowlist | | ----- | ----- | -| Windows Autopatch |
  • mmdcustomer.microsoft.com
  • mmdls.microsoft.com
  • logcollection.mmd.microsoft.com
  • support.mmd.microsoft.com
  • devicelistenerprod.microsoft.com
  • login.windows.net
  • device.autopatch.microsoft.com
| +| Windows Autopatch |
  • mmdcustomer.microsoft.com
  • mmdls.microsoft.com
  • devicelistenerprod.microsoft.com
  • login.windows.net
  • device.autopatch.microsoft.com
| ## Delivery Optimization From 30baf3ec6a11af515e9543487ce6b7afa873a7cd Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Tue, 4 Feb 2025 15:06:08 -0800 Subject: [PATCH 081/123] Add ubuntu/snapcraft endpoints --- windows/deployment/do/delivery-optimization-endpoints.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/do/delivery-optimization-endpoints.md b/windows/deployment/do/delivery-optimization-endpoints.md index 79e8211757..2dfd4d8e9e 100644 --- a/windows/deployment/do/delivery-optimization-endpoints.md +++ b/windows/deployment/do/delivery-optimization-endpoints.md @@ -36,4 +36,5 @@ Use the table below to reference any particular content types or services endpoi | *.assets1.xboxlive.com, *.assets2.xboxlive.com, *.dlassets.xboxlive.com, *.dlassets2.xboxlive.com, *.d1.xboxlive.com, *.d2.xboxlive.com, *.assets.xbox.com, *.xbl-dlassets-origin.xboxlive.com, *.assets-origin.xboxlive.com, *.xvcb1.xboxlive.com, *.xvcb2.xboxlive.com, *.xvcf1.xboxlive.com, *.xvcf2.xboxlive.com | HTTP / 80 | Xbox | | Both | | *.tlu.dl.adu.microsoft.com, *.nlu.dl.adu.microsoft.com, *.dcsfe.prod.adu.microsoft.com | HTTP / 80 | Device Update | [Complete list](/azure/iot-hub-device-update/) of endpoints for Device Update updates. | Both | | *.do.dsp.mp.microsoft.com | HTTP / 80
HTTPs / 443 | Microsoft Connected Cache -> Delivery Optimization Services communication | [Complete list](../do/waas-delivery-optimization-faq.yml) of endpoints for Delivery Optimization only. | Connected Cache Managed in Azure | -| *.azure-devices.net, *.global.azure-devices-provisioning.net, *.azurecr.io, *.blob.core.windows.net, *.mcr.microsoft.com, github.com | AMQP / 5671
MQTT / 8883
HTTPs / 443 | IoT Edge / IoT Hub communication| [Complete list](/azure/iot-hub/iot-hub-devguide-protocols) of Azure IoT Hub communication protocols and ports. [Azure IoT Guide](/azure/iot-hub/iot-hub-devguide-endpoints) to understanding Azure IoT Hub endpoints. | Connected Cache Managed in Azure | +| *.azure-devices.net, *.global.azure-devices-provisioning.net, *.azurecr.io, *.blob.core.windows.net, *.mcr.microsoft.com, github.com | HTTPs / 443 | IoT Edge / IoT Hub communication| [Complete list](/azure/iot-hub/iot-hub-devguide-protocols) of Azure IoT Hub communication protocols and ports. [Azure IoT Guide](/azure/iot-hub/iot-hub-devguide-endpoints) to understanding Azure IoT Hub endpoints. | Connected Cache Managed in Azure | +| *.ubuntu.com, api.snapcraft.io | HTTP / 80
HTTPs / 443 | Ubuntu package updates | Used to deploy Connected Cache to Windows host machines. | Connected Cache Managed in Azure | From 287ff269718ba555310d8a1b02277d7305e44cf5 Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Tue, 4 Feb 2025 15:07:12 -0800 Subject: [PATCH 082/123] Update known issues page --- windows/deployment/do/mcc-ent-troubleshooting.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md index 9e896b0acf..a602264680 100644 --- a/windows/deployment/do/mcc-ent-troubleshooting.md +++ b/windows/deployment/do/mcc-ent-troubleshooting.md @@ -23,8 +23,6 @@ This article contains instructions on how to troubleshoot different issues you m This section describes known issues with the latest release of Microsoft Connected Cache for Enterprise and Education. See the [Release Notes page](mcc-ent-release-notes.md) for more details on the fixes included in the latest release. -### Cache node monitoring chart in the Azure portal user interface displays incorrect information - ### Script provisionmcconwsl.ps1 fails when executed on a Windows 11 host machine configured to use Japanese language In the Connected Cache installation script (provisionmcconwsl.ps1), the check processing is executed until the value of the last execution code (Last Result) of the installation task becomes 0 in the following processing. However, in Japanese OS, the return value is null because "Last Result" is displayed, and an exception occurs. From ebf63cf1df4fe46e1b0e8a302ce784de04055efb Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Tue, 4 Feb 2025 15:09:39 -0800 Subject: [PATCH 083/123] Added packages.microsoft.com to endpoints --- windows/deployment/do/delivery-optimization-endpoints.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/do/delivery-optimization-endpoints.md b/windows/deployment/do/delivery-optimization-endpoints.md index 2dfd4d8e9e..3bc2a48d9b 100644 --- a/windows/deployment/do/delivery-optimization-endpoints.md +++ b/windows/deployment/do/delivery-optimization-endpoints.md @@ -38,3 +38,4 @@ Use the table below to reference any particular content types or services endpoi | *.do.dsp.mp.microsoft.com | HTTP / 80
HTTPs / 443 | Microsoft Connected Cache -> Delivery Optimization Services communication | [Complete list](../do/waas-delivery-optimization-faq.yml) of endpoints for Delivery Optimization only. | Connected Cache Managed in Azure | | *.azure-devices.net, *.global.azure-devices-provisioning.net, *.azurecr.io, *.blob.core.windows.net, *.mcr.microsoft.com, github.com | HTTPs / 443 | IoT Edge / IoT Hub communication| [Complete list](/azure/iot-hub/iot-hub-devguide-protocols) of Azure IoT Hub communication protocols and ports. [Azure IoT Guide](/azure/iot-hub/iot-hub-devguide-endpoints) to understanding Azure IoT Hub endpoints. | Connected Cache Managed in Azure | | *.ubuntu.com, api.snapcraft.io | HTTP / 80
HTTPs / 443 | Ubuntu package updates | Used to deploy Connected Cache to Windows host machines. | Connected Cache Managed in Azure | +| packages.microsoft.com | HTTP / 80
HTTPs / 443 | Microsoft package updates | Used to deploy Connected Cache to Windows and Linux host machines. | Connected Cache Managed in Azure | From 2dae80083b8cb477138cb63c923ab70a64868bb2 Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Tue, 4 Feb 2025 15:21:07 -0800 Subject: [PATCH 084/123] Install script v2.0.0.2 release notes --- windows/deployment/do/mcc-ent-release-notes.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md index 28471a7fb7..4f9a0b4e30 100644 --- a/windows/deployment/do/mcc-ent-release-notes.md +++ b/windows/deployment/do/mcc-ent-release-notes.md @@ -18,6 +18,18 @@ ms.date: 10/30/2024 This article contains details about the latest releases of Connected Cache. Since Connected Cache is a preview service, some releases may contain breaking changes. +## Install script v2.0.0.2 + +Released on **2/5/2025** + +These changes only affect the installation scripts for Connected Cache. To take advantage of these changes, you will need to re-deploy your existing cache nodes using the updated installation script. + +### Feature updates + +- **Removes dependency on AMQP/MQTT ports**: Cache nodes deployed using this updated installation script will no longer use AMQP (5671) or MQTT (8883) ports. This change simplifies the network configuration for cache nodes and reduces the number of ports that need to be opened in your network security group. +- **Improves cleanup during uninstall**: Windows-hosted cache nodes will now remove port proxy rules when uninstalled using the `uninstallmcconwsl.ps1` script. This change ensures that the host machine's WSL port-forwarding rules are cleaned up properly when uninstalling Connected Cache. +- **Changes install error codes from decimal to hex code**: Install error codes for Windows-hosted cache nodes are now displayed in hex code format, improving error code readability. + ## Release v1.2.1.2076_E (public preview launch) The public preview released on **10/30/2024** From 85227fc618327c3432aba237d7a000a8e1948e38 Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Tue, 4 Feb 2025 15:35:06 -0800 Subject: [PATCH 085/123] Retitle feature updates to improvements in release notes --- windows/deployment/do/mcc-ent-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md index 4f9a0b4e30..fb5b1e5eb5 100644 --- a/windows/deployment/do/mcc-ent-release-notes.md +++ b/windows/deployment/do/mcc-ent-release-notes.md @@ -24,7 +24,7 @@ Released on **2/5/2025** These changes only affect the installation scripts for Connected Cache. To take advantage of these changes, you will need to re-deploy your existing cache nodes using the updated installation script. -### Feature updates +### Improvements - **Removes dependency on AMQP/MQTT ports**: Cache nodes deployed using this updated installation script will no longer use AMQP (5671) or MQTT (8883) ports. This change simplifies the network configuration for cache nodes and reduces the number of ports that need to be opened in your network security group. - **Improves cleanup during uninstall**: Windows-hosted cache nodes will now remove port proxy rules when uninstalled using the `uninstallmcconwsl.ps1` script. This change ensures that the host machine's WSL port-forwarding rules are cleaned up properly when uninstalling Connected Cache. From 2f3ae7ec767dfa988aa59ff411c3c196822aaca3 Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Wed, 5 Feb 2025 09:40:54 -0800 Subject: [PATCH 086/123] Add proxy install to release notes --- windows/deployment/do/mcc-ent-release-notes.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md index fb5b1e5eb5..b866870600 100644 --- a/windows/deployment/do/mcc-ent-release-notes.md +++ b/windows/deployment/do/mcc-ent-release-notes.md @@ -29,6 +29,7 @@ These changes only affect the installation scripts for Connected Cache. To take - **Removes dependency on AMQP/MQTT ports**: Cache nodes deployed using this updated installation script will no longer use AMQP (5671) or MQTT (8883) ports. This change simplifies the network configuration for cache nodes and reduces the number of ports that need to be opened in your network security group. - **Improves cleanup during uninstall**: Windows-hosted cache nodes will now remove port proxy rules when uninstalled using the `uninstallmcconwsl.ps1` script. This change ensures that the host machine's WSL port-forwarding rules are cleaned up properly when uninstalling Connected Cache. - **Changes install error codes from decimal to hex code**: Install error codes for Windows-hosted cache nodes are now displayed in hex code format, improving error code readability. +- **Uses proxy to perform install if configured**: If proxy is enabled in its configuration, the Windows-hosted cache node will use the configured proxy host name during installation. ## Release v1.2.1.2076_E (public preview launch) From ace00ab40695563af94a34f3df091235362f4014 Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Thu, 6 Feb 2025 11:28:27 -0800 Subject: [PATCH 087/123] revise proxy wording on release notes --- windows/deployment/do/mcc-ent-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md index b866870600..8596a20961 100644 --- a/windows/deployment/do/mcc-ent-release-notes.md +++ b/windows/deployment/do/mcc-ent-release-notes.md @@ -29,7 +29,7 @@ These changes only affect the installation scripts for Connected Cache. To take - **Removes dependency on AMQP/MQTT ports**: Cache nodes deployed using this updated installation script will no longer use AMQP (5671) or MQTT (8883) ports. This change simplifies the network configuration for cache nodes and reduces the number of ports that need to be opened in your network security group. - **Improves cleanup during uninstall**: Windows-hosted cache nodes will now remove port proxy rules when uninstalled using the `uninstallmcconwsl.ps1` script. This change ensures that the host machine's WSL port-forwarding rules are cleaned up properly when uninstalling Connected Cache. - **Changes install error codes from decimal to hex code**: Install error codes for Windows-hosted cache nodes are now displayed in hex code format, improving error code readability. -- **Uses proxy to perform install if configured**: If proxy is enabled in its configuration, the Windows-hosted cache node will use the configured proxy host name during installation. +- **Uses configured proxy to perform install**: If a proxy was configured for the Windows-hosted cache node in Azure Portal, the cache node will use the specified proxy during installation. ## Release v1.2.1.2076_E (public preview launch) From 837625d0c9c123687bda525191b04c5bfa34ca46 Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Thu, 6 Feb 2025 11:34:15 -0800 Subject: [PATCH 088/123] Added note to prereqs about connection limit --- windows/deployment/do/mcc-ent-prerequisites.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md index f30f503e31..f8ddaef129 100644 --- a/windows/deployment/do/mcc-ent-prerequisites.md +++ b/windows/deployment/do/mcc-ent-prerequisites.md @@ -30,6 +30,8 @@ This article details the requirements and recommended specifications for using M - [Windows Enterprise E3 or E5](/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916) - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans) + Note that there is no limit to the number of licensed machines that may concurrently download from a Connected Cache node. + ## Cache node host machine requirements ### General requirements From cf039a5a2ecd3379bc3f407a295b00d2d2a8caba Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Thu, 6 Feb 2025 11:50:29 -0800 Subject: [PATCH 089/123] Adding GPO guidance to troubleshooting --- windows/deployment/do/mcc-ent-troubleshooting.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md index a602264680..ac07cde399 100644 --- a/windows/deployment/do/mcc-ent-troubleshooting.md +++ b/windows/deployment/do/mcc-ent-troubleshooting.md @@ -80,6 +80,10 @@ You can expect to see the following types of log files: 1. **WSL_Mcc_UserUninstall_Transcript**: This log file records the output of the "uninstallmcconwsl.ps1" script that the user can run to uninstall MCC software from the host machine. 1. **WSL_Mcc_Uninstall_FromRegisteredTask_Transcript**: This log file records the output of the "MCC_Uninstall_Task" scheduled task that is responsible for uninstalling the MCC software from the host machine when called by the "uninstallmcconwsl.ps1" script. +### Group Policy Object conflicts with Scheduled Task registration + +Enabling the Group Policy Object: ["Network access: Do not allow storage of passwords and credentials for network authentication"](https://learn.microsoft.com/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication) will prevent the Connected Cache software from registering the scheduled tasks necessary for successful cache node registration and operation. + ### WSL2 fails to install with message "A specified logon session doesn't exist" If you're encountering this failure message when attempting to run the PowerShell command `wsl.exe --install --no-distribution` on your Windows host machine, verify that you're logged on as a local administrator and running the command from an elevated PowerShell window. From de7a95e0c6aca58f5e465b0008b2b1dccbcfd18b Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Thu, 6 Feb 2025 11:55:17 -0800 Subject: [PATCH 090/123] Revise language for ubuntu endpoint --- windows/deployment/do/delivery-optimization-endpoints.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/do/delivery-optimization-endpoints.md b/windows/deployment/do/delivery-optimization-endpoints.md index 3bc2a48d9b..1f8366e62b 100644 --- a/windows/deployment/do/delivery-optimization-endpoints.md +++ b/windows/deployment/do/delivery-optimization-endpoints.md @@ -37,5 +37,5 @@ Use the table below to reference any particular content types or services endpoi | *.tlu.dl.adu.microsoft.com, *.nlu.dl.adu.microsoft.com, *.dcsfe.prod.adu.microsoft.com | HTTP / 80 | Device Update | [Complete list](/azure/iot-hub-device-update/) of endpoints for Device Update updates. | Both | | *.do.dsp.mp.microsoft.com | HTTP / 80
HTTPs / 443 | Microsoft Connected Cache -> Delivery Optimization Services communication | [Complete list](../do/waas-delivery-optimization-faq.yml) of endpoints for Delivery Optimization only. | Connected Cache Managed in Azure | | *.azure-devices.net, *.global.azure-devices-provisioning.net, *.azurecr.io, *.blob.core.windows.net, *.mcr.microsoft.com, github.com | HTTPs / 443 | IoT Edge / IoT Hub communication| [Complete list](/azure/iot-hub/iot-hub-devguide-protocols) of Azure IoT Hub communication protocols and ports. [Azure IoT Guide](/azure/iot-hub/iot-hub-devguide-endpoints) to understanding Azure IoT Hub endpoints. | Connected Cache Managed in Azure | -| *.ubuntu.com, api.snapcraft.io | HTTP / 80
HTTPs / 443 | Ubuntu package updates | Used to deploy Connected Cache to Windows host machines. | Connected Cache Managed in Azure | -| packages.microsoft.com | HTTP / 80
HTTPs / 443 | Microsoft package updates | Used to deploy Connected Cache to Windows and Linux host machines. | Connected Cache Managed in Azure | +| *.ubuntu.com, api.snapcraft.io | HTTP / 80
HTTPs / 443 | Ubuntu package updates | Used by Linux distribution image in WSL on Windows host machine to deploy Connected Cache. | Connected Cache Managed in Azure | +| packages.microsoft.com | HTTP / 80
HTTPs / 443 | Microsoft package updates | Used to deploy required Connected Cache packages to Windows and Linux host machines. | Connected Cache Managed in Azure | From e5ed38e6621f15383c35d7269d02f3c2702b8f26 Mon Sep 17 00:00:00 2001 From: chrisjlin <36452239+chrisjlin@users.noreply.github.com> Date: Thu, 6 Feb 2025 11:57:09 -0800 Subject: [PATCH 091/123] Acrolinx fixes to release notes --- windows/deployment/do/mcc-ent-release-notes.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md index 8596a20961..7a69747aff 100644 --- a/windows/deployment/do/mcc-ent-release-notes.md +++ b/windows/deployment/do/mcc-ent-release-notes.md @@ -20,27 +20,27 @@ This article contains details about the latest releases of Connected Cache. Sinc ## Install script v2.0.0.2 -Released on **2/5/2025** +Released on **2/7/2025** -These changes only affect the installation scripts for Connected Cache. To take advantage of these changes, you will need to re-deploy your existing cache nodes using the updated installation script. +These changes only affect the installation scripts for Connected Cache. To take advantage of these changes, you'll need to redeploy your existing cache nodes using the updated installation script. ### Improvements - **Removes dependency on AMQP/MQTT ports**: Cache nodes deployed using this updated installation script will no longer use AMQP (5671) or MQTT (8883) ports. This change simplifies the network configuration for cache nodes and reduces the number of ports that need to be opened in your network security group. - **Improves cleanup during uninstall**: Windows-hosted cache nodes will now remove port proxy rules when uninstalled using the `uninstallmcconwsl.ps1` script. This change ensures that the host machine's WSL port-forwarding rules are cleaned up properly when uninstalling Connected Cache. - **Changes install error codes from decimal to hex code**: Install error codes for Windows-hosted cache nodes are now displayed in hex code format, improving error code readability. -- **Uses configured proxy to perform install**: If a proxy was configured for the Windows-hosted cache node in Azure Portal, the cache node will use the specified proxy during installation. +- **Uses configured proxy to perform install**: If a proxy was configured for the Windows-hosted cache node in Azure portal, the cache node uses the specified proxy during installation. ## Release v1.2.1.2076_E (public preview launch) The public preview released on **10/30/2024** -For customers that installed earlier versions of Connected Cache, this release contains breaking changes that affect both Linux and Windows host machines. Please see the [early preview documentation page](mcc-ent-early-preview.md) for more details. +For customers that installed earlier versions of Connected Cache, this release contains breaking changes that affect both Linux and Windows host machines. See the [early preview documentation page](mcc-ent-early-preview.md) for more details. ### Feature updates - **Metrics and charts in Azure portal**: You can now visualize *Outbound egress* and *Volume by Content type* charts for your cache node on Azure portal. You can also create custom monitoring charts for your cache nodes. This capability is under the **Metrics** tab on Azure portal. -- **Cache nodes for Windows or Linux host machines**: Cache nodes can now be created and deployed to Windows host machine or Linux host machines by simply choosing the OS when creating cache nodes. +- **Cache nodes for Windows or Linux host machines**: Cache nodes can now be created and deployed to Windows host machine or Linux host machines by choosing the OS when creating cache nodes. - **Ubuntu 22.04 LTS**: Cache nodes can now be deployed on Ubuntu 22.04 LTS. - **Azure CLI support**: Cache nodes can now be created and managed via Azure CLI. - **Proxy**: We added support for unauthenticated proxy and cloud proxy integration. From dc623da946946d931abc79fa25f554f3186f7c38 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 6 Feb 2025 12:05:12 -0800 Subject: [PATCH 092/123] Update windows/deployment/do/mcc-ent-troubleshooting.md fix link --- windows/deployment/do/mcc-ent-troubleshooting.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md index ac07cde399..fd4a693300 100644 --- a/windows/deployment/do/mcc-ent-troubleshooting.md +++ b/windows/deployment/do/mcc-ent-troubleshooting.md @@ -82,7 +82,7 @@ You can expect to see the following types of log files: ### Group Policy Object conflicts with Scheduled Task registration -Enabling the Group Policy Object: ["Network access: Do not allow storage of passwords and credentials for network authentication"](https://learn.microsoft.com/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication) will prevent the Connected Cache software from registering the scheduled tasks necessary for successful cache node registration and operation. +Enabling the Group Policy Object: [Network access: Do not allow storage of passwords and credentials for network authentication](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication) will prevent the Connected Cache software from registering the scheduled tasks necessary for successful cache node registration and operation. ### WSL2 fails to install with message "A specified logon session doesn't exist" From caf9f1dd08af730333238784bacdfbd14c18e3d1 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 6 Feb 2025 13:00:55 -0800 Subject: [PATCH 093/123] Add new endpoint api.cdp.microsoft.com --- windows/privacy/manage-windows-11-endpoints.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/privacy/manage-windows-11-endpoints.md b/windows/privacy/manage-windows-11-endpoints.md index 7c41ff3d2a..4bf198648c 100644 --- a/windows/privacy/manage-windows-11-endpoints.md +++ b/windows/privacy/manage-windows-11-endpoints.md @@ -174,6 +174,7 @@ To view endpoints for non-Enterprise Windows 11 editions, see [Windows 11 connec |||TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| ||The following endpoint is used for compatibility database updates for Windows.|HTTPS|adl.windows.com| ||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint, and fallback behavior will be used. This may result in content being either incorrectly downloaded or not downloaded at all.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +||The following endpoint is for a public web API used by Windows and other OS-agnostic products to check for new updates. If you disable this endpoint, these products won't be able to check for and apply software updates.|TLSv1.2/HTTPS/HTTP|*.api.cdp.microsoft.com| |Xbox Live|||[Learn how to turn off traffic to all of the following endpoint(s) for Xbox Live.](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| ||The following endpoints are used for Xbox Live.|HTTPS|dlassets-ssl.xboxlive.com| |||TLSv1.2|da.xboxservices.com| From 0e9bb7b9342aa359f416b36ad1cbf95c4e404915 Mon Sep 17 00:00:00 2001 From: Padma Jayaraman Date: Fri, 7 Feb 2025 17:25:35 +0530 Subject: [PATCH 094/123] Update docfx.json --- education/docfx.json | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/education/docfx.json b/education/docfx.json index cc2b912248..41cc74d824 100644 --- a/education/docfx.json +++ b/education/docfx.json @@ -53,14 +53,12 @@ "contributors_to_exclude": [ "dstrome2", "rjagiewich", - "American-Dipper", "claydetels19", - "jborsecnik", - "v-stchambers", - "shdyas", - "Stacyrch140", "garycentric", - "dstrome" + "dstrome", + "padmagit77", + "aditisrivastava07", + "Ruchika-mittal01" ] }, "fileMetadata": { @@ -77,4 +75,4 @@ "dest": "education", "markdownEngineName": "markdig" } -} \ No newline at end of file +} From 17cec89eb27f85d64c057e8ae2babf48f01f1803 Mon Sep 17 00:00:00 2001 From: Christine Eaton <40660908+ceaton-msft@users.noreply.github.com> Date: Fri, 7 Feb 2025 12:04:07 +0000 Subject: [PATCH 095/123] Update windows-autopatch-hotpatch-updates.md Corrected link to Release Notes to point to Windows 11 instead of Server 2022. --- .../manage/windows-autopatch-hotpatch-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md index 5ffdbf1d92..9a78e9814f 100644 --- a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md +++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md @@ -37,7 +37,7 @@ Hotpatch is an extension of Windows Update and requires Autopatch to create and ## Release cycles -For more information about the release calendar for Hotpatch updates, see [Release notes for Hotpatch](https://support.microsoft.com/topic/release-notes-for-hotpatch-in-azure-automanage-for-windows-server-2022-4e234525-5bd5-4171-9886-b475dabe0ce8?preview=true). +For more information about the release calendar for Hotpatch updates, see [Release notes for Hotpatch](https://support.microsoft.com/en-us/topic/release-notes-for-hotpatch-public-preview-on-windows-11-version-24h2-enterprise-clients-c117ee02-fd35-4612-8ea9-949c5d0ba6d1). | Quarter | Baseline updates (requires restart) | Hotpatch (no restart required) | | ----- | ----- | ----- | From 479898c50eaa3beec0581f4d9035ffbf6db3033a Mon Sep 17 00:00:00 2001 From: Tiara Quan <95256667+tiaraquan@users.noreply.github.com> Date: Fri, 7 Feb 2025 09:24:56 -0800 Subject: [PATCH 096/123] Fix broken link in Hotpatch updates documentation removed en-us from url --- .../manage/windows-autopatch-hotpatch-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md index 9a78e9814f..0cf0c9260b 100644 --- a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md +++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md @@ -37,7 +37,7 @@ Hotpatch is an extension of Windows Update and requires Autopatch to create and ## Release cycles -For more information about the release calendar for Hotpatch updates, see [Release notes for Hotpatch](https://support.microsoft.com/en-us/topic/release-notes-for-hotpatch-public-preview-on-windows-11-version-24h2-enterprise-clients-c117ee02-fd35-4612-8ea9-949c5d0ba6d1). +For more information about the release calendar for Hotpatch updates, see [Release notes for Hotpatch](https://support.microsoft.com/topic/release-notes-for-hotpatch-public-preview-on-windows-11-version-24h2-enterprise-clients-c117ee02-fd35-4612-8ea9-949c5d0ba6d1). | Quarter | Baseline updates (requires restart) | Hotpatch (no restart required) | | ----- | ----- | ----- | From 841282d72cfe2ff325d40cf694aa08b83e8a9d15 Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Fri, 7 Feb 2025 13:19:04 -0700 Subject: [PATCH 097/123] Update policy-csp-admx-kerberos.md --- windows/client-management/mdm/policy-csp-admx-kerberos.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-admx-kerberos.md b/windows/client-management/mdm/policy-csp-admx-kerberos.md index 44ad26e627..8458736726 100644 --- a/windows/client-management/mdm/policy-csp-admx-kerberos.md +++ b/windows/client-management/mdm/policy-csp-admx-kerberos.md @@ -172,6 +172,8 @@ This policy setting allows you to specify which DNS host names and which DNS suf +> [!NOTE] +> The list of DNS host names and DNS suffixes has a 2048 character limit. This policy would not apply if you exceed this limit. From 25022aea88ee5baaae298733781cca5991fa1a5c Mon Sep 17 00:00:00 2001 From: Violet Hansen Date: Sat, 8 Feb 2025 11:22:16 +0200 Subject: [PATCH 098/123] Improved OS support sections and a small format improvement Improved OS support sections and a small format improvement --- .../design/select-types-of-rules-to-create.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md b/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md index 8cdfe418ba..f7a5f2142e 100644 --- a/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md +++ b/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md @@ -130,7 +130,9 @@ There's a defined list of SIDs that App Control recognizes as admins. If a filep App Control's list of well-known admin SIDs are: +``` S-1-3-0; S-1-5-18; S-1-5-19; S-1-5-20; S-1-5-32-544; S-1-5-32-549; S-1-5-32-550; S-1-5-32-551; S-1-5-32-577; S-1-5-32-559; S-1-5-32-568; S-1-15-2-1430448594-2639229838-973813799-439329657-1197984847-4069167804-1277922394; S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523. +``` When filepath rules are generated using [New-CIPolicy](/powershell/module/configci/new-cipolicy), a unique, fully qualified path rule is generated for every file discovered in the scanned path(s). To create rules that instead allow all files under a specified folder path, use [New-CIPolicyRule](/powershell/module/configci/new-cipolicyrule) to define rules containing wildcards, using the [-FilePathRules](/powershell/module/configci/new-cipolicyrule#parameters) switch. @@ -140,8 +142,8 @@ The following wildcards can be used in App Control filepath rules: | Wildcard character | Meaning | Supported operating systems | |------------ | ----------- | ----------- | -| **`*`** | Matches zero or more characters. | Windows 11, Windows 10, and Windows Server 2022 | -| **`?`** | Matches a single character. | Windows 11 only | +| **`*`** | Matches zero or more characters. | Windows 10 and later, or Windows Server 2022 and later | +| **`?`** | Matches a single character. | Windows 11 and later, or Windows Server 2025 and later | You can also use the following macros when the exact volume may vary: `%OSDRIVE%`, `%WINDIR%`, `%SYSTEM32%`. These macros can be used in combination with the wildcards above. @@ -154,9 +156,9 @@ You can also use the following macros when the exact volume may vary: `%OSDRIVE% | Examples | Description | Supported operating systems | |------------ | ----------- | ----------- | -| **C:\\Windows\\\***
**D:\\EnterpriseApps\\MyApp\\\***
**%OSDRIVE%\\Windows\\\*** | Wildcards placed at the end of a path authorize all files in the immediate path and its subdirectories recursively. | Windows 11, Windows 10, and Windows Server 2022 | -| **\*\\bar.exe** | Wildcards placed at the beginning of a path allow the exact specified filename in any location. | Windows 11, Windows 10, and Windows Server 2022 | -| **C:\\\*\\CCMCACHE\\\*\\7z????-x64.exe**
**%OSDRIVE%\\\*\\CCMCACHE\\\*\\7z????-x64.exe** | Wildcards used in the middle of a path allow all files that match that pattern. Consider carefully all the possible matches, particularly if your policy disables the admin-writeable check with the **Disabled:Runtime FilePath Rule Protection** option. In this example, both of these hypothetical paths would match:
*`C:\WINDOWS\CCMCACHE\12345\7zabcd-x64.exe`*
*`C:\USERS\AppControlUSER\Downloads\Malware\CCMCACHE\Pwned\7zhaha-x64.exe`* | Windows 11 only | +| **C:\\Windows\\\***
**D:\\EnterpriseApps\\MyApp\\\***
**%OSDRIVE%\\Windows\\\*** | Wildcards placed at the end of a path authorize all files in the immediate path and its subdirectories recursively. | Windows 10 and later, or Windows Server 2022 and later | +| **\*\\bar.exe** | Wildcards placed at the beginning of a path allow the exact specified filename in any location. | Windows 10 and later, or Windows Server 2022 and later | +| **C:\\\*\\CCMCACHE\\\*\\7z????-x64.exe**
**%OSDRIVE%\\\*\\CCMCACHE\\\*\\7z????-x64.exe** | Wildcards used in the middle of a path allow all files that match that pattern. Consider carefully all the possible matches, particularly if your policy disables the admin-writeable check with the **Disabled:Runtime FilePath Rule Protection** option. In this example, both of these hypothetical paths would match:
*`C:\WINDOWS\CCMCACHE\12345\7zabcd-x64.exe`*
*`C:\USERS\AppControlUSER\Downloads\Malware\CCMCACHE\Pwned\7zhaha-x64.exe`* | Windows 11 and later, or Windows Server 2025 and later | Without a wildcard, the filepath rule allows only a specific file (ex. `C:\foo\bar.exe`). From 0d86af35cd4c3377dfdd7474a17f4ecdfbda9486 Mon Sep 17 00:00:00 2001 From: Violet Hansen Date: Sat, 8 Feb 2025 11:35:02 +0200 Subject: [PATCH 099/123] Update supported OS versions in documentation --- .../design/select-types-of-rules-to-create.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md b/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md index f7a5f2142e..0c9fb3469f 100644 --- a/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md +++ b/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md @@ -142,7 +142,7 @@ The following wildcards can be used in App Control filepath rules: | Wildcard character | Meaning | Supported operating systems | |------------ | ----------- | ----------- | -| **`*`** | Matches zero or more characters. | Windows 10 and later, or Windows Server 2022 and later | +| **`*`** | Matches zero or more characters. | Windows 10, Windows 11 and later, or Windows Server 2022 and later | | **`?`** | Matches a single character. | Windows 11 and later, or Windows Server 2025 and later | You can also use the following macros when the exact volume may vary: `%OSDRIVE%`, `%WINDIR%`, `%SYSTEM32%`. These macros can be used in combination with the wildcards above. @@ -156,8 +156,8 @@ You can also use the following macros when the exact volume may vary: `%OSDRIVE% | Examples | Description | Supported operating systems | |------------ | ----------- | ----------- | -| **C:\\Windows\\\***
**D:\\EnterpriseApps\\MyApp\\\***
**%OSDRIVE%\\Windows\\\*** | Wildcards placed at the end of a path authorize all files in the immediate path and its subdirectories recursively. | Windows 10 and later, or Windows Server 2022 and later | -| **\*\\bar.exe** | Wildcards placed at the beginning of a path allow the exact specified filename in any location. | Windows 10 and later, or Windows Server 2022 and later | +| **C:\\Windows\\\***
**D:\\EnterpriseApps\\MyApp\\\***
**%OSDRIVE%\\Windows\\\*** | Wildcards placed at the end of a path authorize all files in the immediate path and its subdirectories recursively. | Windows 10, Windows 11 and later, or Windows Server 2022 and later | +| **\*\\bar.exe** | Wildcards placed at the beginning of a path allow the exact specified filename in any location. | Windows 10, Windows 11 and later, or Windows Server 2022 and later | | **C:\\\*\\CCMCACHE\\\*\\7z????-x64.exe**
**%OSDRIVE%\\\*\\CCMCACHE\\\*\\7z????-x64.exe** | Wildcards used in the middle of a path allow all files that match that pattern. Consider carefully all the possible matches, particularly if your policy disables the admin-writeable check with the **Disabled:Runtime FilePath Rule Protection** option. In this example, both of these hypothetical paths would match:
*`C:\WINDOWS\CCMCACHE\12345\7zabcd-x64.exe`*
*`C:\USERS\AppControlUSER\Downloads\Malware\CCMCACHE\Pwned\7zhaha-x64.exe`* | Windows 11 and later, or Windows Server 2025 and later | Without a wildcard, the filepath rule allows only a specific file (ex. `C:\foo\bar.exe`). From 2daa4d8e983387b8a02a064e3f02fd1177a0a88b Mon Sep 17 00:00:00 2001 From: Aditi Srivastava <133841950+aditisrivastava07@users.noreply.github.com> Date: Mon, 10 Feb 2025 17:16:55 +0530 Subject: [PATCH 100/123] Update contributors_to_exclude list in docfx.json --- education/docfx.json | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/education/docfx.json b/education/docfx.json index 41cc74d824..8a348ff39f 100644 --- a/education/docfx.json +++ b/education/docfx.json @@ -52,8 +52,13 @@ "titleSuffix": "Windows Education", "contributors_to_exclude": [ "dstrome2", - "rjagiewich", - "claydetels19", + "rjagiewich", + "American-Dipper", + "claydetels19", + "jborsecnik", + "v-stchambers", + "shdyas", + "Stacyrch140", "garycentric", "dstrome", "padmagit77", From 8b0b3db6537a1b0073058f90a68210893ad6f9c8 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 10 Feb 2025 08:52:41 -0800 Subject: [PATCH 101/123] dep-lpd-9787121 --- windows/whats-new/deprecated-features.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index f18324df51..447edf20ed 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -1,7 +1,7 @@ --- title: Deprecated features in the Windows client description: Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11. -ms.date: 02/03/2025 +ms.date: 02/10/2025 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium @@ -47,6 +47,7 @@ The features in this article are no longer being actively developed, and might b | Feature | Details and mitigation | Deprecation announced | |---|---|---| +| Line Printer Daemon (LPR/LPD) | Deprecation reminder: [LPD was deprecated](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing) starting in Windows Server 2012. As removal of LPD nears, we'd like to remind customers to ensure their environments are prepared for removal. When this feature is removed, clients that print to a server using this protocol, such as UNIX clients, will not be able to connect or print. Instead, UNIX clients should use IPP. Windows clients can connect to UNIX shared printers using the [Windows Standard Port Monitor](/troubleshoot/windows-server/printing/standard-port-monitor-for-tcpip). | [Windows Server 2012 - original announcement]((/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing))

February 2025 - courtesy reminder | | Suggested actions | Suggested actions that appear when you copy a phone number or future date in Windows 11 are deprecated and will be removed in a future Windows 11 update. | December 2024 | | Legacy DRM services | Legacy DRM services, used by either Windows Media Player, Silverlight clients, Windows 7, or Windows 8 clients are deprecated. The following functionality won't work when these services are fully retired:
  • Playback of protected content in the legacy Windows Media Player on Windows 7
  • Playback of protected content in a Silverlight client and Windows 8 clients
  • In-home streaming playback from a Silverlight client or Windows 8 client to an Xbox 360
  • Playback of protected content ripped from a personal CD on Windows 7 clients using Windows Media Player
| September 2024 | | Paint 3D | Paint 3D is deprecated and will be removed from the Microsoft Store on November 4, 2024. To view and edit 2D images, you can use [Paint](https://apps.microsoft.com/detail/9pcfs5b6t72h) or [Photos](https://apps.microsoft.com/detail/9wzdncrfjbh4). For viewing 3D content, you can use [3D Viewer](https://apps.microsoft.com/detail/9nblggh42ths). For more information, see [Resources for deprecated features](deprecated-features-resources.md#paint-3d). | August 2024 | From aadf085d45ed8a83d6b5bdd1b49b49eb4c723d07 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 10 Feb 2025 09:20:06 -0800 Subject: [PATCH 102/123] dep-lpd-9787121 --- windows/whats-new/deprecated-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index 447edf20ed..e01e00d130 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -47,7 +47,7 @@ The features in this article are no longer being actively developed, and might b | Feature | Details and mitigation | Deprecation announced | |---|---|---| -| Line Printer Daemon (LPR/LPD) | Deprecation reminder: [LPD was deprecated](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing) starting in Windows Server 2012. As removal of LPD nears, we'd like to remind customers to ensure their environments are prepared for removal. When this feature is removed, clients that print to a server using this protocol, such as UNIX clients, will not be able to connect or print. Instead, UNIX clients should use IPP. Windows clients can connect to UNIX shared printers using the [Windows Standard Port Monitor](/troubleshoot/windows-server/printing/standard-port-monitor-for-tcpip). | [Windows Server 2012 - original announcement]((/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing))

February 2025 - courtesy reminder | +| Line Printer Daemon (LPR/LPD) | Deprecation reminder: [LPD was deprecated](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing) starting in Windows Server 2012. As removal of LPD nears, we'd like to remind customers to ensure their environments are prepared for removal. When this feature is removed, clients that print to a server using this protocol, such as UNIX clients, will not be able to connect or print. Instead, UNIX clients should use IPP. Windows clients can connect to UNIX shared printers using the [Windows Standard Port Monitor](/troubleshoot/windows-server/printing/standard-port-monitor-for-tcpip). | [Windows Server 2012 - original announcement](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing)

February 2025 - courtesy reminder | | Suggested actions | Suggested actions that appear when you copy a phone number or future date in Windows 11 are deprecated and will be removed in a future Windows 11 update. | December 2024 | | Legacy DRM services | Legacy DRM services, used by either Windows Media Player, Silverlight clients, Windows 7, or Windows 8 clients are deprecated. The following functionality won't work when these services are fully retired:
  • Playback of protected content in the legacy Windows Media Player on Windows 7
  • Playback of protected content in a Silverlight client and Windows 8 clients
  • In-home streaming playback from a Silverlight client or Windows 8 client to an Xbox 360
  • Playback of protected content ripped from a personal CD on Windows 7 clients using Windows Media Player
| September 2024 | | Paint 3D | Paint 3D is deprecated and will be removed from the Microsoft Store on November 4, 2024. To view and edit 2D images, you can use [Paint](https://apps.microsoft.com/detail/9pcfs5b6t72h) or [Photos](https://apps.microsoft.com/detail/9wzdncrfjbh4). For viewing 3D content, you can use [3D Viewer](https://apps.microsoft.com/detail/9nblggh42ths). For more information, see [Resources for deprecated features](deprecated-features-resources.md#paint-3d). | August 2024 | From d76a1014df169736f9bb96f8802809bdb033ab56 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 10 Feb 2025 09:21:25 -0800 Subject: [PATCH 103/123] dep-lpd-9787121 --- windows/whats-new/deprecated-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index e01e00d130..5e7d3f20d2 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -47,7 +47,7 @@ The features in this article are no longer being actively developed, and might b | Feature | Details and mitigation | Deprecation announced | |---|---|---| -| Line Printer Daemon (LPR/LPD) | Deprecation reminder: [LPD was deprecated](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing) starting in Windows Server 2012. As removal of LPD nears, we'd like to remind customers to ensure their environments are prepared for removal. When this feature is removed, clients that print to a server using this protocol, such as UNIX clients, will not be able to connect or print. Instead, UNIX clients should use IPP. Windows clients can connect to UNIX shared printers using the [Windows Standard Port Monitor](/troubleshoot/windows-server/printing/standard-port-monitor-for-tcpip). | [Windows Server 2012 - original announcement](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing)

February 2025 - courtesy reminder | +| Line Printer Daemon (LPR/LPD) | Deprecation reminder: [LPD was deprecated](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing) starting in Windows Server 2012. As removal of LPD nears, we'd like to remind customers to ensure their environments are prepared for removal. When this feature is removed, clients that print to a server using this protocol, such as UNIX clients, will not be able to connect or print. Instead, UNIX clients should use IPP. Windows clients can connect to UNIX shared printers using the [Windows Standard Port Monitor](/troubleshoot/windows-server/printing/standard-port-monitor-for-tcpip). | [Original announcement: Windows Server 2012](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing)

Courtesy reminder: February 2025 | | Suggested actions | Suggested actions that appear when you copy a phone number or future date in Windows 11 are deprecated and will be removed in a future Windows 11 update. | December 2024 | | Legacy DRM services | Legacy DRM services, used by either Windows Media Player, Silverlight clients, Windows 7, or Windows 8 clients are deprecated. The following functionality won't work when these services are fully retired:
  • Playback of protected content in the legacy Windows Media Player on Windows 7
  • Playback of protected content in a Silverlight client and Windows 8 clients
  • In-home streaming playback from a Silverlight client or Windows 8 client to an Xbox 360
  • Playback of protected content ripped from a personal CD on Windows 7 clients using Windows Media Player
| September 2024 | | Paint 3D | Paint 3D is deprecated and will be removed from the Microsoft Store on November 4, 2024. To view and edit 2D images, you can use [Paint](https://apps.microsoft.com/detail/9pcfs5b6t72h) or [Photos](https://apps.microsoft.com/detail/9wzdncrfjbh4). For viewing 3D content, you can use [3D Viewer](https://apps.microsoft.com/detail/9nblggh42ths). For more information, see [Resources for deprecated features](deprecated-features-resources.md#paint-3d). | August 2024 | From 5ea3075b0a67d9bab044443dfb48738cc2aed8c9 Mon Sep 17 00:00:00 2001 From: ChunlinXuMSFT <40968607+ChunlinXuMSFT@users.noreply.github.com> Date: Tue, 11 Feb 2025 14:25:14 +1100 Subject: [PATCH 104/123] Update faq.yml to fix wrong information cloud trust compatibility with a real RODC MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit as per internal discussion and tests, we confirmed with engineering team there is a known issue between cloud trust and real RODC: 1. WHfB Cloud trust would only work with RODC if the user’s password can’t be cached by that RODC (as per the password replicdation policy). that is, RODC will to return TGT_Revoked to the client after successfully verifying the partial tgt from WHfB cloud trust client if the user is supposed to have a password cached locally on local RODC. 2. Auth can be successful if the same RODC has KDC certs and then it can failover to Key trust. --- windows/security/identity-protection/hello-for-business/faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/faq.yml b/windows/security/identity-protection/hello-for-business/faq.yml index 26e30724a9..8b205bbe9f 100644 --- a/windows/security/identity-protection/hello-for-business/faq.yml +++ b/windows/security/identity-protection/hello-for-business/faq.yml @@ -212,7 +212,7 @@ sections: This feature doesn't work in a pure on-premises AD domain services environment. - question: Does Windows Hello for Business cloud Kerberos trust work in a Windows sign-in with RODC present in the hybrid environment? answer: | - Windows Hello for Business cloud Kerberos trust looks for a writeable DC to exchange the partial TGT. As long as you have at least one writeable DC per site, login with cloud Kerberos trust will work. + Windows Hello for Business cloud Kerberos trust will still work if the client directly talks with a wriable domain controller or talks with RODC which doesn't cache credential of the user who tries to sign-in as per Password Replication Policy. If the client happens to contact a local RODC and the user can cache credentials on the same RODC, Windows Hello for business cloud Kerberos trust may fail. In a production environment, most customers deploy KDC certificates to all domain controllers including RODC to support LDAP over SSL. If so, the authentication will transparently failover to Windows Hello for Business key trust authentication and user signin will still be successful. - question: Do I need line of sight to a domain controller to use Windows Hello for Business cloud Kerberos trust? answer: | Windows Hello for Business cloud Kerberos trust requires line of sight to a domain controller when: From 6b7593034ce186df2f9046fe8a2aaa1ee93d28d5 Mon Sep 17 00:00:00 2001 From: Sandeep Deo <38295759+SanDeo-MSFT@users.noreply.github.com> Date: Tue, 11 Feb 2025 01:31:34 -0800 Subject: [PATCH 105/123] Update recovery-process.md --- .../data-protection/bitlocker/recovery-process.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md index 421165a49b..9da8c4e609 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md @@ -2,7 +2,7 @@ title: BitLocker recovery process description: Learn how to obtain BitLocker recovery information for Microsoft Entra joined, Microsoft Entra hybrid joined, and Active Directory joined devices, and how to restore access to a locked drive. ms.topic: how-to -ms.date: 12/05/2024 +ms.date: 02/11/2025 --- # BitLocker recovery process @@ -75,7 +75,7 @@ The following list can be used as a template for creating a recovery process for There are a few Microsoft Entra ID roles that allow a delegated administrator to read BitLocker recovery passwords from the devices in the tenant. While it's common for organizations to use the existing Microsoft Entra ID *[Cloud Device Administrator][ENTRA-2]* or *[Helpdesk Administrator][ENTRA-3]* built-in roles, you can also [create a custom role][ENTRA-5], delegating access to BitLocker keys using the `microsoft.directory/bitlockerKeys/key/read` permission. Roles can be delegated to access BitLocker recovery passwords for devices in specific Administrative Units. > [!NOTE] -> When devices that utilize [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused to join to Entra, **and there is a new device owner**, that new device owner must contact an administrator to acquire the BitLocker recovery key for that device. Custom role or administrative unit scoped administrators will lose access to BitLocker recovery keys for those devices that have undergone device ownership changes. These scoped administrators will need to contact a non-scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user). +> When devices that utilize [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused to join to Entra, **and there is a new device owner**, that new device owner must contact an administrator to acquire the BitLocker recovery key for that device. Custom role or administrative unit scoped administrators will continue to have access to BitLocker recovery keys for those devices that have undergone device ownership changes, unless the new device owner belongs to a custom role or adminstrative unit scope. In such an instance, the user will need to contact other scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user). The [Microsoft Entra admin center][ENTRA] allows administrators to retrieve BitLocker recovery passwords. To learn more about the process, see [View or copy BitLocker keys][ENTRA-4]. Another option to access BitLocker recovery passwords is to use the Microsoft Graph API, which might be useful for integrated or scripted solutions. For more information about this option, see [Get bitlockerRecoveryKey][GRAPH-1]. From be01c9505b1841227efd0bbcb666403a5e1bb06e Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 11 Feb 2025 12:23:51 -0700 Subject: [PATCH 106/123] January 2025 CSP Updates --- .../mdm/policies-in-preview.md | 16 +++-- .../mdm/policy-csp-applicationmanagement.md | 56 ++++++++++++++- .../mdm/policy-csp-connectivity.md | 2 +- ...policy-csp-localpoliciessecurityoptions.md | 69 +++++++++---------- .../mdm/policy-csp-newsandinterests.md | 60 +++++++++++++++- .../mdm/policy-csp-settingssync.md | 54 ++++++++++++++- .../mdm/policy-csp-windowsai.md | 14 ++-- windows/client-management/mdm/reboot-csp.md | 12 ++-- .../client-management/mdm/reboot-ddf-file.md | 12 ++-- 9 files changed, 231 insertions(+), 64 deletions(-) diff --git a/windows/client-management/mdm/policies-in-preview.md b/windows/client-management/mdm/policies-in-preview.md index a728e43011..8bce8b6a6e 100644 --- a/windows/client-management/mdm/policies-in-preview.md +++ b/windows/client-management/mdm/policies-in-preview.md @@ -1,7 +1,7 @@ --- title: Configuration service provider preview policies description: Learn more about configuration service provider (CSP) policies that are available for Windows Insider Preview. -ms.date: 01/14/2025 +ms.date: 02/11/2025 --- @@ -19,6 +19,10 @@ This article lists the policies that are applicable for Windows Insider Preview - [TurnOffApplicationFootprint](policy-csp-appdeviceinventory.md#turnoffapplicationfootprint) - [TurnOffWin32AppBackup](policy-csp-appdeviceinventory.md#turnoffwin32appbackup) +## ApplicationManagement + +- [AllowedNonAdminPackageFamilyNameRules](policy-csp-applicationmanagement.md#allowednonadminpackagefamilynamerules) + ## ClientCertificateInstall CSP - [AttestPrivateKey](clientcertificateinstall-csp.md#userscepuniqueidinstallattestprivatekey) @@ -108,6 +112,7 @@ This article lists the policies that are applicable for Windows Insider Preview ## LocalPoliciesSecurityOptions +- [InteractiveLogon_NumberOfPreviousLogonsToCache](policy-csp-localpoliciessecurityoptions.md#interactivelogon_numberofpreviouslogonstocache) - [UserAccountControl_BehaviorOfTheElevationPromptForAdministratorProtection](policy-csp-localpoliciessecurityoptions.md#useraccountcontrol_behavioroftheelevationpromptforadministratorprotection) - [UserAccountControl_TypeOfAdminApprovalMode](policy-csp-localpoliciessecurityoptions.md#useraccountcontrol_typeofadminapprovalmode) @@ -121,6 +126,7 @@ This article lists the policies that are applicable for Windows Insider Preview ## NewsAndInterests - [DisableWidgetsOnLockScreen](policy-csp-newsandinterests.md#disablewidgetsonlockscreen) +- [DisableWidgetsBoard](policy-csp-newsandinterests.md#disablewidgetsboard) ## PassportForWork CSP @@ -130,14 +136,14 @@ This article lists the policies that are applicable for Windows Insider Preview - [ConfigureIppTlsCertificatePolicy](policy-csp-printers.md#configureipptlscertificatepolicy) -## Reboot CSP - -- [WeeklyRecurrent](reboot-csp.md#scheduleweeklyrecurrent) - ## RemoteDesktopServices - [TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME](policy-csp-remotedesktopservices.md#ts_server_remoteapp_use_shellappruntime) +## SettingsSync + +- [EnableWindowsbackup](policy-csp-settingssync.md#enablewindowsbackup) + ## Start - [AlwaysShowNotificationIcon](policy-csp-start.md#alwaysshownotificationicon) diff --git a/windows/client-management/mdm/policy-csp-applicationmanagement.md b/windows/client-management/mdm/policy-csp-applicationmanagement.md index 64cecc6c0c..2fc29f5665 100644 --- a/windows/client-management/mdm/policy-csp-applicationmanagement.md +++ b/windows/client-management/mdm/policy-csp-applicationmanagement.md @@ -1,7 +1,7 @@ --- title: ApplicationManagement Policy CSP description: Learn more about the ApplicationManagement Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/11/2025 --- @@ -9,6 +9,10 @@ ms.date: 11/26/2024 # Policy CSP - ApplicationManagement +[!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)] + +[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] + @@ -283,6 +287,56 @@ Allows or denies development of Microsoft Store applications and installing them + +## AllowedNonAdminPackageFamilyNameRules + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ❌ Pro
✅ Enterprise
✅ Education
❌ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/ApplicationManagement/AllowedNonAdminPackageFamilyNameRules +``` + + + + + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | + + + + +[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)] + +**ADMX mapping**: + +| Name | Value | +|:--|:--| +| Name | AllowedNonAdminPackageFamilyNameRules | +| ADMX File Name | AppxPackageManager.admx | + + + + + + + + ## AllowGameDVR diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index a58ea71af2..4fc9aba757 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -1,7 +1,7 @@ --- title: Connectivity Policy CSP description: Learn more about the Connectivity Area in Policy CSP. -ms.date: 01/14/2025 +ms.date: 02/11/2025 --- diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index 3c37204919..d0b6243ed4 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -1,7 +1,7 @@ --- title: LocalPoliciesSecurityOptions Policy CSP description: Learn more about the LocalPoliciesSecurityOptions Area in Policy CSP. -ms.date: 11/05/2024 +ms.date: 02/11/2025 --- @@ -9,7 +9,7 @@ ms.date: 11/05/2024 # Policy CSP - LocalPoliciesSecurityOptions -[!INCLUDE [Windows Windows Insider Preview tip](includes/mdm-insider-csp-note.md)] +[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] @@ -517,7 +517,7 @@ Audit: Shut down system immediately if unable to log security audits This securi -Devices: Allowed to format and eject removable media This security setting determines who is allowed to format and eject removable NTFS media. This capability can be given to: Administrators and Interactive Users Default: This policy isn't defined and only Administrators have this ability. +Devices: Allowed to format and eject removable media This security setting determines who is allowed to format and eject removable NTFS media. This capability can be given to: Administrators Administrators and Interactive Users Default: This policy isn't defined and only Administrators have this ability. @@ -1117,7 +1117,7 @@ Domain member: Require strong (Windows 2000 or later) session key This security -Interactive Logon: Display user information when the session is locked User display name, domain and user names (1) User display name only (2) Don't display user information (3) Domain and user names only (4) +Interactive Logon:Display user information when the session is locked User display name, domain and user names (1) User display name only (2) Don't display user information (3) Domain and user names only (4) @@ -1568,13 +1568,12 @@ Interactive logon: Message title for users attempting to log on This security se Interactive logon: Number of previous logons to cache (in case domain controller isn't available) Each unique user's logon information is cached locally so that, in the event that a domain controller is unavailable during subsequent logon attempts, they're able to log on. The cached logon information is stored from the previous logon session. If a domain controller is unavailable and a user's logon information isn't cached, the user is prompted with this message: There are currently no logon servers available to service the logon request. In this policy setting, a value of 0 disables logon caching. Any value above 50 only caches 50 logon attempts. Windows supports a maximum of 50 cache entries and the number of entries consumed per user depends on the credential. For example, a maximum of 50 unique password user accounts can be cached on a Windows system, but only 25 smart card user accounts can be cached because both the password information and the smart card information are stored. When a user with cached logon information logs on again, the user's individual cached information is replaced. Default: Windows Server 2008: 25 All Other Versions: 10. - -> [!NOTE] -> This setting previously showed as applicable to Windows 11, version 24H2 [10.0.26100] and later in error. MDM solutions may show as applicable to that version until a future release. +> [!NOTE] +> This setting previously showed as applicable to Windows 11, version 24H2 [10.0.26100] and later in error. MDM solutions may show as applicable to that version until a future release. @@ -1783,7 +1782,7 @@ Microsoft network client: Digitally sign communications (if server agrees) This - If this setting is enabled, the Microsoft network client will ask the server to perform SMB packet signing upon session setup. If packet signing has been enabled on the server, packet signing will be negotiated. -- If this policy is disabled, the SMB client will never negotiate SMB packet signing. Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. If both client-side and server-side SMB signing are enabled and the client establishes an SMB 1.0 connection to the server, SMB signing will be attempted. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. This setting only applies to SMB 1.0 connections. For more information, reference:< https://go.microsoft.com/fwlink/?LinkID=787136>. +- If this policy is disabled, the SMB client will never negotiate SMB packet signing. Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. If both client-side and server-side SMB signing is enabled and the client establishes an SMB 1.0 connection to the server, SMB signing will be attempted. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. This setting only applies to SMB 1.0 connections. For more information, reference:< https://go.microsoft.com/fwlink/?LinkID=787136>. @@ -2024,7 +2023,7 @@ Microsoft network server: Digitally sign communications (if client agrees) This - If this policy is disabled, the SMB client will never negotiate SMB packet signing. on domain controllers only. > [!IMPORTANT] -> For Windows 2000 servers to negotiate signing with Windows NT 4.0 clients, the following registry value must be set to 1 on the server running Windows 2000: HKLM\System\CurrentControlSet\Services\lanmanserver\parameters\enableW9xsecuritysignature Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. For Windows 2000 and above, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. If both client-side and server-side SMB signing are enabled and the client establishes an SMB 1.0 connection to the server, SMB signing will be attempted. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. This setting only applies to SMB 1.0 connections. For more information, reference:< https://go.microsoft.com/fwlink/?LinkID=787136>. +> For Windows 2000 servers to negotiate signing with Windows NT 4.0 clients, the following registry value must be set to 1 on the server running Windows 2000: HKLM\System\CurrentControlSet\Services\lanmanserver\parameters\enableW9xsecuritysignature Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. For Windows 2000 and above, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. If both client-side and server-side SMB signing is enabled and the client establishes an SMB 1.0 connection to the server, SMB signing will be attempted. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. This setting only applies to SMB 1.0 connections. For more information, reference:< https://go.microsoft.com/fwlink/?LinkID=787136>. @@ -3865,9 +3864,9 @@ System objects: Strengthen default permissions of internal system objects (e.g., -User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop. This policy setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts used by a standard user. +User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop. This policy setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts used by a standard user. -- Enabled: UIA programs, including Windows Remote Assistance, automatically disable the secure desktop for elevation prompts. If you don't disable the "User Account Control: Switch to the secure desktop when prompting for elevation" policy setting, the prompts appear on the interactive user's desktop instead of the secure desktop. +- Enabled: UIA programs, including Windows Remote Assistance, automatically disable the secure desktop for elevation prompts. If you don't disable the "User Account Control: Switch to the secure desktop when prompting for elevation" policy setting, the prompts appear on the interactive user's desktop instead of the secure desktop. - Disabled: (Default) The secure desktop can be disabled only by the user of the interactive desktop or by disabling the "User Account Control: Switch to the secure desktop when prompting for elevation" policy setting. @@ -3927,9 +3926,9 @@ User Account Control: Allow UIAccess applications to prompt for elevation withou -User Account Control: Behavior of the elevation prompt for administrators running with Administrator protection. This policy setting controls the behavior of the elevation prompt for administrators. The options are: +User Account Control: Behavior of the elevation prompt for administrators running with Administrator protection. This policy setting controls the behavior of the elevation prompt for administrators. The options are: -- Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged credentials. If the user enters valid credentials, the operation continues with the user's highest available privilege. +- Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged credentials. If the user enters valid credentials, the operation continues with the user's highest available privilege. - Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Allow changes or Don't allow. If the user selects Allow changes, the operation continues with the user's highest available privilege. @@ -3991,20 +3990,20 @@ User Account Control: Behavior of the elevation prompt for administrators runnin -User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode This policy setting controls the behavior of the elevation prompt for administrators. The options are: +User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode This policy setting controls the behavior of the elevation prompt for administrators. The options are: -- Elevate without prompting: Allows privileged accounts to perform an operation that requires elevation without requiring consent or credentials. +- Elevate without prompting: Allows privileged accounts to perform an operation that requires elevation without requiring consent or credentials. >[!NOTE] - > Use this option only in the most constrained environments. + > Use this option only in the most constrained environments. -- Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. +- Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. -- Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. +- Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. -- Prompt for credentials: When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. +- Prompt for credentials: When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. -- Prompt for consent: When an operation requires elevation of privilege, the user is prompted to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. +- Prompt for consent: When an operation requires elevation of privilege, the user is prompted to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. - Prompt for consent for non-Windows binaries: (Default) When an operation for a non-Microsoft application requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. @@ -4070,11 +4069,11 @@ User Account Control: Behavior of the elevation prompt for administrators in Adm -User Account Control: Behavior of the elevation prompt for standard users This policy setting controls the behavior of the elevation prompt for standard users. The options are: +User Account Control: Behavior of the elevation prompt for standard users This policy setting controls the behavior of the elevation prompt for standard users. The options are: -- Prompt for credentials: (Default) When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. +- Prompt for credentials: (Default) When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. -- Automatically deny elevation requests: When an operation requires elevation of privilege, a configurable access denied error message is displayed. An enterprise that's running desktops as standard user may choose this setting to reduce help desk calls. +- Automatically deny elevation requests: When an operation requires elevation of privilege, a configurable access denied error message is displayed. An enterprise that's running desktops as standard user may choose this setting to reduce help desk calls. - Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a different user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. @@ -4193,9 +4192,9 @@ User Account Control: Detect application installations and prompt for elevation -User Account Control: Only elevate executable files that are signed and validated This policy setting enforces public key infrastructure (PKI) signature checks for any interactive applications that request elevation of privilege. Enterprise administrators can control which applications are allowed to run by adding certificates to the Trusted Publishers certificate store on local computers. The options are: +User Account Control: Only elevate executable files that are signed and validated This policy setting enforces public key infrastructure (PKI) signature checks for any interactive applications that request elevation of privilege. Enterprise administrators can control which applications are allowed to run by adding certificates to the Trusted Publishers certificate store on local computers. The options are: -- Enabled: Enforces the PKI certification path validation for a given executable file before it's permitted to run. +- Enabled: Enforces the PKI certification path validation for a given executable file before it's permitted to run. - Disabled: (Default) Does not enforce PKI certification path validation before a given executable file is permitted to run. @@ -4255,9 +4254,9 @@ User Account Control: Only elevate executable files that are signed and validate -User Account Control: Only elevate UIAccess applications that are installed in secure locations This policy setting controls whether applications that request to run with a User Interface Accessibility (UIAccess) integrity level must reside in a secure location in the file system. Secure locations are limited to the following: - ..\Program Files\, including subfolders - ..\Windows\system32\ - ..\Program Files (x86)\, including subfolders for 64-bit versions of Windows Note: Windows enforces a public key infrastructure (PKI) signature check on any interactive application that requests to run with a UIAccess integrity level regardless of the state of this security setting. The options are: +User Account Control: Only elevate UIAccess applications that are installed in secure locations This policy setting controls whether applications that request to run with a User Interface Accessibility (UIAccess) integrity level must reside in a secure location in the file system. Secure locations are limited to the following: - ..\Program Files\, including subfolders - ..\Windows\system32\ - ..\Program Files (x86)\, including subfolders for 64-bit versions of Windows Note: Windows enforces a public key infrastructure (PKI) signature check on any interactive application that requests to run with a UIAccess integrity level regardless of the state of this security setting. The options are: -- Enabled: (Default) If an application resides in a secure location in the file system, it runs only with UIAccess integrity. +- Enabled: (Default) If an application resides in a secure location in the file system, it runs only with UIAccess integrity. - Disabled: An application runs with UIAccess integrity even if it doesn't reside in a secure location in the file system. @@ -4317,9 +4316,9 @@ User Account Control: Only elevate UIAccess applications that are installed in s -User Account Control: Turn on Admin Approval Mode This policy setting controls the behavior of all User Account Control (UAC) policy settings for the computer. If you change this policy setting, you must restart your computer. The options are: +User Account Control: Turn on Admin Approval Mode This policy setting controls the behavior of all User Account Control (UAC) policy settings for the computer. If you change this policy setting, you must restart your computer. The options are: -- Enabled: (Default) Admin Approval Mode is enabled. This policy must be enabled and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. +- Enabled: (Default) Admin Approval Mode is enabled. This policy must be enabled and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. - Disabled: Admin Approval Mode and all related UAC policy settings are disabled. @@ -4382,9 +4381,9 @@ User Account Control: Turn on Admin Approval Mode This policy setting controls t -User Account Control: Switch to the secure desktop when prompting for elevation This policy setting controls whether the elevation request prompt is displayed on the interactive user's desktop or the secure desktop. The options are: +User Account Control: Switch to the secure desktop when prompting for elevation This policy setting controls whether the elevation request prompt is displayed on the interactive user's desktop or the secure desktop. The options are: -- Enabled: (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users. +- Enabled: (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users. - Disabled: All elevation requests go to the interactive user's desktop. Prompt behavior policy settings for administrators and standard users are used. @@ -4502,9 +4501,9 @@ User Account Control: Configure type of Admin Approval Mode. This policy setting -User Account Control: Use Admin Approval Mode for the built-in Administrator account This policy setting controls the behavior of Admin Approval Mode for the built-in Administrator account. The options are: +User Account Control: Use Admin Approval Mode for the built-in Administrator account This policy setting controls the behavior of Admin Approval Mode for the built-in Administrator account. The options are: -- Enabled: The built-in Administrator account uses Admin Approval Mode. By default, any operation that requires elevation of privilege will prompt the user to approve the operation. +- Enabled: The built-in Administrator account uses Admin Approval Mode. By default, any operation that requires elevation of privilege will prompt the user to approve the operation. - Disabled: (Default) The built-in Administrator account runs all applications with full administrative privilege. @@ -4564,9 +4563,9 @@ User Account Control: Use Admin Approval Mode for the built-in Administrator acc -User Account Control: Virtualize file and registry write failures to per-user locations This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\system32, or HKLM\Software. The options are: +User Account Control: Virtualize file and registry write failures to per-user locations This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\system32, or HKLM\Software. The options are: -- Enabled: (Default) Application write failures are redirected at run time to defined user locations for both the file system and registry. +- Enabled: (Default) Application write failures are redirected at run time to defined user locations for both the file system and registry. - Disabled: Applications that write data to protected locations fail. diff --git a/windows/client-management/mdm/policy-csp-newsandinterests.md b/windows/client-management/mdm/policy-csp-newsandinterests.md index df2f909bd6..b070afc551 100644 --- a/windows/client-management/mdm/policy-csp-newsandinterests.md +++ b/windows/client-management/mdm/policy-csp-newsandinterests.md @@ -1,7 +1,7 @@ --- title: NewsAndInterests Policy CSP description: Learn more about the NewsAndInterests Area in Policy CSP. -ms.date: 11/27/2024 +ms.date: 02/11/2025 --- @@ -84,6 +84,64 @@ This policy applies to the entire widgets experience, including content on the t + +## DisableWidgetsBoard + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/NewsAndInterests/DisableWidgetsBoard +``` + + + + +Disable widgets board. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 (Default) | Enabled. | +| 1 | Disabled. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | DisableWidgetsBoard | +| Path | NewsAndInterests > AT > WindowsComponents > NewsAndInterests | + + + + + + + + ## DisableWidgetsOnLockScreen diff --git a/windows/client-management/mdm/policy-csp-settingssync.md b/windows/client-management/mdm/policy-csp-settingssync.md index e8025d4898..5016dff037 100644 --- a/windows/client-management/mdm/policy-csp-settingssync.md +++ b/windows/client-management/mdm/policy-csp-settingssync.md @@ -1,7 +1,7 @@ --- title: SettingsSync Policy CSP description: Learn more about the SettingsSync Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/11/2025 --- @@ -11,6 +11,8 @@ ms.date: 09/27/2024 [!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)] +[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] + @@ -137,6 +139,56 @@ If you don't set or disable this setting, syncing of the "language preferences" + +## EnableWindowsbackup + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/SettingsSync/EnableWindowsbackup +``` + + + + + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | + + + + +[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)] + +**ADMX mapping**: + +| Name | Value | +|:--|:--| +| Name | EnableWindowsbackup | +| ADMX File Name | SettingSync.admx | + + + + + + + + diff --git a/windows/client-management/mdm/policy-csp-windowsai.md b/windows/client-management/mdm/policy-csp-windowsai.md index 8633998eec..2188f397f9 100644 --- a/windows/client-management/mdm/policy-csp-windowsai.md +++ b/windows/client-management/mdm/policy-csp-windowsai.md @@ -1,7 +1,7 @@ --- title: WindowsAI Policy CSP description: Learn more about the WindowsAI Area in Policy CSP. -ms.date: 12/09/2024 +ms.date: 02/11/2025 --- @@ -659,12 +659,12 @@ When this setting isn't configured, the OS configures the storage allocation for | Value | Description | |:--|:--| | 0 (Default) | Let the OS define the maximum storage amount based on hard drive storage size. | -| 10000 | 10GB. | -| 25000 | 25GB. | -| 50000 | 50GB. | -| 75000 | 75GB. | -| 100000 | 100GB. | -| 150000 | 150GB. | +| 10240 | 10GB. | +| 25600 | 25GB. | +| 51200 | 50GB. | +| 76800 | 75GB. | +| 102400 | 100GB. | +| 153600 | 150GB. | diff --git a/windows/client-management/mdm/reboot-csp.md b/windows/client-management/mdm/reboot-csp.md index b095998bbd..7b8903d816 100644 --- a/windows/client-management/mdm/reboot-csp.md +++ b/windows/client-management/mdm/reboot-csp.md @@ -1,7 +1,7 @@ --- title: Reboot CSP description: Learn more about the Reboot CSP. -ms.date: 01/18/2024 +ms.date: 02/11/2025 --- @@ -9,8 +9,6 @@ ms.date: 01/18/2024 # Reboot CSP -[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] - The Reboot configuration service provider is used to configure reboot settings. @@ -122,7 +120,7 @@ The supported operation is Get. -Value in ISO8601, time is required. Either setting DailyRecurrent or WeeklyRecurrent is supported but not both at same time. A reboot will be scheduled each day at the configured time starting at the date and time. Setting a null (empty) date will delete the existing schedule. +Value in ISO8601 date and time format (such as 2025-10-07. T10:35:00) is required. While it's supported to set either DailyRecurrent or WeeklyRecurrent schedules, it isn't supported to enable both settings simultaneously. A reboot will be scheduled to occur every day at the configured time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule. @@ -161,7 +159,7 @@ Value in ISO8601, time is required. Either setting DailyRecurrent or WeeklyRecur -Value in ISO8601, both the date and time are required. A reboot will be scheduled at the configured date time. Setting a null (empty) date will delete the existing schedule. +Value in ISO8601 date and time format (such as 2025-10-07. T10:35:00) is required. Both the date and time are required. A reboot will be scheduled to occur at the specified date and time. Setting a null (empty) date will delete the existing schedule. @@ -189,7 +187,7 @@ Value in ISO8601, both the date and time are required. A reboot will be schedule | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later | @@ -200,7 +198,7 @@ Value in ISO8601, both the date and time are required. A reboot will be schedule -Value in ISO8601, time is required. Either setting DailyRecurrent or WeeklyRecurrent is supported but not both at same time. A reboot will be scheduled every week at the configured time starting at the date and time. Setting a null (empty) date will delete the existing schedule. +Value in ISO8601 date and time format (such as 2025-10-07. T10:35:00) is required. While it's supported to set either DailyRecurrent or WeeklyRecurrent schedules, it isn't supported to enable both settings simultaneously. A reboot will be scheduled to occur every week at the configured day and time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule. diff --git a/windows/client-management/mdm/reboot-ddf-file.md b/windows/client-management/mdm/reboot-ddf-file.md index ab06e22815..6a23c0924b 100644 --- a/windows/client-management/mdm/reboot-ddf-file.md +++ b/windows/client-management/mdm/reboot-ddf-file.md @@ -1,7 +1,7 @@ --- title: Reboot DDF file description: View the XML file containing the device description framework (DDF) for the Reboot configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/11/2025 --- @@ -95,7 +95,7 @@ The following XML file contains the device description framework (DDF) for the R - Value in ISO8601, both the date and time are required. A reboot will be scheduled at the configured date time. Setting a null (empty) date will delete the existing schedule. + Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. Both the date and time are required. A reboot will be scheduled to occur at the specified date and time. Setting a null (empty) date will delete the existing schedule. @@ -122,7 +122,7 @@ The following XML file contains the device description framework (DDF) for the R - Value in ISO8601, time is required. Either setting DailyRecurrent or WeeklyRecurrent is supported but not both at same time. A reboot will be scheduled each day at the configured time starting at the date and time. Setting a null (empty) date will delete the existing schedule. + Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. While it is supported to set either DailyRecurrent or WeeklyRecurrent schedules, it is not supported to enable both settings simultaneously. A reboot will be scheduled to occur every day at the configured time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule. @@ -149,7 +149,7 @@ The following XML file contains the device description framework (DDF) for the R - Value in ISO8601, time is required. Either setting DailyRecurrent or WeeklyRecurrent is supported but not both at same time. A reboot will be scheduled every week at the configured time starting at the date and time. Setting a null (empty) date will delete the existing schedule. + Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. While it is supported to set either DailyRecurrent or WeeklyRecurrent schedules, it is not supported to enable both settings simultaneously. A reboot will be scheduled to occur every week at the configured day and time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule. @@ -164,8 +164,8 @@ The following XML file contains the device description framework (DDF) for the R - 99.9.99999 - 9.9 + 10.0.26100 + 1.0 From 9232384c97a717816b080d964debc5c1a6c88308 Mon Sep 17 00:00:00 2001 From: Ruchika Mittal Date: Wed, 12 Feb 2025 02:01:07 +0530 Subject: [PATCH 107/123] acro fix --- windows/client-management/mdm/policy-csp-connectivity.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index 4fc9aba757..695c626c56 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -314,7 +314,7 @@ This policy is deprecated. -This policy allows IT admins to turn off the ability to Link a Phone with a PC to continue reading, emailing and other tasks that requires linking between Phone and PC. +This policy allows IT admins to turn off the ability to Link a Phone with a PC to continue reading, emailing and other tasks that require linking between Phone and PC. - If you enable this policy setting, the Windows device will be able to enroll in Phone-PC linking functionality and participate in Continue on PC experiences. @@ -1014,7 +1014,7 @@ Determines whether a user can install and configure the Network Bridge. > [!IMPORTANT] > This settings is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting doesn't apply. -The Network Bridge allows users to create a layer 2 MAC bridge, enabling them to connect two or more network segements together. This connection appears in the Network Connections folder. +The Network Bridge allows users to create a layer 2 MAC bridge, enabling them to connect two or more network segments together. This connection appears in the Network Connections folder. If you disable this setting or don't configure it, the user will be able to create and modify the configuration of a Network Bridge. Enabling this setting doesn't remove an existing Network Bridge from the user's computer. From 8e410be417e7a266a55368e80715311a3c56570c Mon Sep 17 00:00:00 2001 From: Ruchika Mittal Date: Wed, 12 Feb 2025 02:07:13 +0530 Subject: [PATCH 108/123] acro fix --- windows/client-management/mdm/policy-csp-connectivity.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index 695c626c56..ddefe2ddfe 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -1012,7 +1012,7 @@ For more information, see [MS15-011: Vulnerability in Group Policy could allow r Determines whether a user can install and configure the Network Bridge. > [!IMPORTANT] -> This settings is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting doesn't apply. +> This setting is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting doesn't apply. The Network Bridge allows users to create a layer 2 MAC bridge, enabling them to connect two or more network segments together. This connection appears in the Network Connections folder. From f0558dcafa73f840b2976dcd28eec258a8c8fc39 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 11 Feb 2025 15:16:18 -0800 Subject: [PATCH 109/123] dep-lochist-9798092 --- windows/whats-new/deprecated-features.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index f18324df51..c8cdc5b2a8 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -1,7 +1,7 @@ --- title: Deprecated features in the Windows client description: Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11. -ms.date: 02/03/2025 +ms.date: 02/12/2025 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium @@ -47,6 +47,7 @@ The features in this article are no longer being actively developed, and might b | Feature | Details and mitigation | Deprecation announced | |---|---|---| +| Location History | We are deprecating and removing the Location History feature, an [API](/uwp/api/windows.devices.geolocation.geolocator.getgeopositionhistoryasync) that allowed Cortana to access 24 hours of device history when location was enabled. With the removal of the Location History feature, location data will no longer be saved locally and the corresponding settings will also be removed from the **Settings** > **Privacy & Security** > **Location** page. | February 2025 | | Suggested actions | Suggested actions that appear when you copy a phone number or future date in Windows 11 are deprecated and will be removed in a future Windows 11 update. | December 2024 | | Legacy DRM services | Legacy DRM services, used by either Windows Media Player, Silverlight clients, Windows 7, or Windows 8 clients are deprecated. The following functionality won't work when these services are fully retired:
  • Playback of protected content in the legacy Windows Media Player on Windows 7
  • Playback of protected content in a Silverlight client and Windows 8 clients
  • In-home streaming playback from a Silverlight client or Windows 8 client to an Xbox 360
  • Playback of protected content ripped from a personal CD on Windows 7 clients using Windows Media Player
| September 2024 | | Paint 3D | Paint 3D is deprecated and will be removed from the Microsoft Store on November 4, 2024. To view and edit 2D images, you can use [Paint](https://apps.microsoft.com/detail/9pcfs5b6t72h) or [Photos](https://apps.microsoft.com/detail/9wzdncrfjbh4). For viewing 3D content, you can use [3D Viewer](https://apps.microsoft.com/detail/9nblggh42ths). For more information, see [Resources for deprecated features](deprecated-features-resources.md#paint-3d). | August 2024 | From 6ad23695b9ae767838d2030fbd1b0a4795ec0a93 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 11 Feb 2025 15:36:31 -0800 Subject: [PATCH 110/123] dep-lochist-9798092 --- windows/whats-new/deprecated-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index c8cdc5b2a8..b9612ab0de 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -47,7 +47,7 @@ The features in this article are no longer being actively developed, and might b | Feature | Details and mitigation | Deprecation announced | |---|---|---| -| Location History | We are deprecating and removing the Location History feature, an [API](/uwp/api/windows.devices.geolocation.geolocator.getgeopositionhistoryasync) that allowed Cortana to access 24 hours of device history when location was enabled. With the removal of the Location History feature, location data will no longer be saved locally and the corresponding settings will also be removed from the **Settings** > **Privacy & Security** > **Location** page. | February 2025 | +| Location History | We are deprecating and removing the Location History feature, an [API](/uwp/api/windows.devices.geolocation.geolocator.getgeopositionhistoryasync) that allowed Cortana to access 24 hours of device history when location was enabled. With the removal of the Location History feature, location data will no longer be saved locally and the corresponding settings will also be removed from the **Privacy & Security** > **Location** page in **Settings**. | February 2025 | | Suggested actions | Suggested actions that appear when you copy a phone number or future date in Windows 11 are deprecated and will be removed in a future Windows 11 update. | December 2024 | | Legacy DRM services | Legacy DRM services, used by either Windows Media Player, Silverlight clients, Windows 7, or Windows 8 clients are deprecated. The following functionality won't work when these services are fully retired:
  • Playback of protected content in the legacy Windows Media Player on Windows 7
  • Playback of protected content in a Silverlight client and Windows 8 clients
  • In-home streaming playback from a Silverlight client or Windows 8 client to an Xbox 360
  • Playback of protected content ripped from a personal CD on Windows 7 clients using Windows Media Player
| September 2024 | | Paint 3D | Paint 3D is deprecated and will be removed from the Microsoft Store on November 4, 2024. To view and edit 2D images, you can use [Paint](https://apps.microsoft.com/detail/9pcfs5b6t72h) or [Photos](https://apps.microsoft.com/detail/9wzdncrfjbh4). For viewing 3D content, you can use [3D Viewer](https://apps.microsoft.com/detail/9nblggh42ths). For more information, see [Resources for deprecated features](deprecated-features-resources.md#paint-3d). | August 2024 | From 60df47a7bd329c5b6926e2bce7e5df77e8142d1d Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 12 Feb 2025 07:58:16 -0500 Subject: [PATCH 111/123] Clarify RODC support for cloud Kerberos trust --- .../security/identity-protection/hello-for-business/faq.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/faq.yml b/windows/security/identity-protection/hello-for-business/faq.yml index 8b205bbe9f..f133b4dfd0 100644 --- a/windows/security/identity-protection/hello-for-business/faq.yml +++ b/windows/security/identity-protection/hello-for-business/faq.yml @@ -210,9 +210,9 @@ sections: - question: Does Windows Hello for Business cloud Kerberos trust work in my on-premises environment? answer: | This feature doesn't work in a pure on-premises AD domain services environment. - - question: Does Windows Hello for Business cloud Kerberos trust work in a Windows sign-in with RODC present in the hybrid environment? + - question: Does Windows Hello for Business cloud Kerberos trust work with RODC present in the hybrid environment? answer: | - Windows Hello for Business cloud Kerberos trust will still work if the client directly talks with a wriable domain controller or talks with RODC which doesn't cache credential of the user who tries to sign-in as per Password Replication Policy. If the client happens to contact a local RODC and the user can cache credentials on the same RODC, Windows Hello for business cloud Kerberos trust may fail. In a production environment, most customers deploy KDC certificates to all domain controllers including RODC to support LDAP over SSL. If so, the authentication will transparently failover to Windows Hello for Business key trust authentication and user signin will still be successful. + Windows Hello for Business cloud Kerberos trust functions correctly when the client authenticates directly to a writable domain controller or to a Read-Only Domain Controller (RODC) that doesn't cache the user's credentials, in accordance with the Password Replication Policy. If the client attempts to authenticate to an RODC that can cache the user's credentials, cloud Kerberos trust authentication might fail. To mitigate this, deploy KDC certificates to all RODCs to support Windows Hello for Business key trust authentication, which is also required for those RODCs to support LDAP over SSL. This configuration ensures that authentication can seamlessly failover to Windows Hello for Business key trust authentication, thereby guaranteeing successful user authentication. - question: Do I need line of sight to a domain controller to use Windows Hello for Business cloud Kerberos trust? answer: | Windows Hello for Business cloud Kerberos trust requires line of sight to a domain controller when: From 494304bf56a1ebaf2543dfdd150ae62104407eb7 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 12 Feb 2025 08:01:51 -0500 Subject: [PATCH 112/123] Fix indentation in FAQ answer text --- windows/security/identity-protection/hello-for-business/faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/faq.yml b/windows/security/identity-protection/hello-for-business/faq.yml index f133b4dfd0..3a5d20bea8 100644 --- a/windows/security/identity-protection/hello-for-business/faq.yml +++ b/windows/security/identity-protection/hello-for-business/faq.yml @@ -212,7 +212,7 @@ sections: This feature doesn't work in a pure on-premises AD domain services environment. - question: Does Windows Hello for Business cloud Kerberos trust work with RODC present in the hybrid environment? answer: | - Windows Hello for Business cloud Kerberos trust functions correctly when the client authenticates directly to a writable domain controller or to a Read-Only Domain Controller (RODC) that doesn't cache the user's credentials, in accordance with the Password Replication Policy. If the client attempts to authenticate to an RODC that can cache the user's credentials, cloud Kerberos trust authentication might fail. To mitigate this, deploy KDC certificates to all RODCs to support Windows Hello for Business key trust authentication, which is also required for those RODCs to support LDAP over SSL. This configuration ensures that authentication can seamlessly failover to Windows Hello for Business key trust authentication, thereby guaranteeing successful user authentication. + Windows Hello for Business cloud Kerberos trust functions correctly when the client authenticates directly to a writable domain controller or to a Read-Only Domain Controller (RODC) that doesn't cache the user's credentials, in accordance with the Password Replication Policy. If the client attempts to authenticate to an RODC that can cache the user's credentials, cloud Kerberos trust authentication might fail. To mitigate this, deploy KDC certificates to all RODCs to support Windows Hello for Business key trust authentication, which is also required for those RODCs to support LDAP over SSL. This configuration ensures that authentication can seamlessly failover to Windows Hello for Business key trust authentication, thereby guaranteeing successful user authentication. - question: Do I need line of sight to a domain controller to use Windows Hello for Business cloud Kerberos trust? answer: | Windows Hello for Business cloud Kerberos trust requires line of sight to a domain controller when: From 39d7a057342d5bd6a48649bb9bd366e388b07c6e Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Thu, 13 Feb 2025 09:18:15 -0500 Subject: [PATCH 113/123] screenshot update --- .../pin-reset/pin-reset-client-prompt.png | Bin 59295 -> 143989 bytes .../pin-reset/pin-reset-service-prompt-2.png | Bin 51382 -> 135388 bytes .../pin-reset/pin-reset-service-prompt.png | Bin 53477 -> 136146 bytes 3 files changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/images/pin-reset/pin-reset-client-prompt.png b/windows/security/identity-protection/hello-for-business/images/pin-reset/pin-reset-client-prompt.png index d5c3416a676f2a74093d957e39ea3248da3f8eef..fffcd5b0f2e81700bf222b771002eaaedfe643e5 100644 GIT binary patch literal 143989 zcmeFYWmnYS8~>{kg5-bdPL)XwXgrtD<(B0j2 zhVSpc&NDdcoEzr`u$bAi*WRCf#rwMUYeF^E6$zeEJbU!$5rMLj-1|q5p2R-p#8^Pb7WOPB%fIFEV*tSE?eoWv z$>efK64KD`t~ZvIiJX15+s(+Xscrb>Wnp_~m|?uG?)Gu7uyp8mp{qI$eIT(6l;sP% zmq{#>?2VM(<zSOs)W@G)7n7&V_caJ> z<9qVdLGRZI@4=2oD}QVkTK)JesJE8?8!Kn`C?>_-c*-)d%zMgL@VNcx^d!^?M~<82 zBZ_sQlYqxs0(|Hi$U{tKNu=s9Pe?eCo7BRY_(!Tw|xBR>bL zPVHV(efDq`I6RbdI3gWhRUIm0A;k~`qG7s03KN8o-ka}5 zsPzT?x1MAS7Hv;irq5IKU&1ACuTEzseP3qj%sxCJ;vA03s^zSgd=@st-Fh5=c-j9M z1M%34ji6O*h@npNYD@pV@5cInClJU+v~AZ#$HwX<9h&@4SNi`BI4C5S}Bhf6Cq;cJxFH_Oj`b46tDvrf61Pqew;rT(o$Elqs-ba!;V`trV)S0ZKY zs_N89_9@4P6yC-D?SFnI=l0frgwOOu&-Q4l#c_1MVfYkm_R6l7lO2;Z$@`+&TF*#J z$SgCn;cz>`S*Yby?0iLK9kGZ(p2qyFFE9attF743cDwGd9Vzq(OlQZ6(WHI%}vTV=?W$p3qM-b`%PRRbdqH+t{? zGN)|~?T&VLGL%7dH6diq*-U0b#$6FFo0ZLAzv7s1?`x`mccES3gsQ4nZ^dMZ^;U0u z-^5}nw{s=_l{N|)N;+F*HQGK;5{sVNlc7S>m5-Qn^p}R)?bYf>>TZC5{1TR*_H*p+ z>$7wxV`5{5)SZS4%&jiu%EjUGEUAY0qM^qsnUL!asJ8V99ztM3f0VOk(&V)edczWg zxV^U6CYbcl)$O0rl8$k#8YQ<96Z%ed07eB&dXSm?N^+<&l5o+UK*qWC`(s;lF0lQZ zCA}!TD0TWzdoSH>&OwEh zj6UI>A9QS$S>nw6=-oPhWMXT01&y~ZZ5nSn8BwvF^H_H=?TWxPF%O}3#c3~%5Wc)v zj-E~UXt+t^u>uf6&llK2Zs=}YyIV6;Po@i^PjlLDIm%2R} zwM8KuZ0lANodTW`5psds7sZSOWQ|Nxs6?F$^dQw^C=wNpML9v*Zx`8Kr(+)jCeisC zL>vZ+_|3XpTs!AjJL?K-xVzf!*l*ZxZg_~LP}}H-t(SkHy{3E&HIn|oz(xU0|SFF)Phk_V<^!%q>&=cv_`YQ_g-U8 zQ9T(6xChdPm)4SP0bRXOHEW^E{0`)$6;U0^pRJc>N~+y=K%e^ad~1D2HyMX+y8bjR0X|V?vWyk!Xa$Wi#3mEkD)I`QG0y z>~#sCPZ|~?&v+AD&D-Qj8BS4x!X;%1)LB_0(ZFj^j$;XeI3`;w3nNy*P=B!uk&K)0 zWV1ygJa3#N{y2s9WuY}1hF)ELht4;(f7@AT+T{;oftc+6k=wYG(l-9l@?2Ib>=PuC z4vb&@Al_vNlHg+dXn86Jo*<)>jp6JFW%5hgqGTc93TjzNEu&7 z`IH5$uIYSE??EQW)yn#l;;pTf&RHmF#to=oV%q(V-Kje~T46bJODNB-rrPVqBpj}6w8 zgO*DW=iu<1DAz~=5}gJaj89>{_s-Uy7=M2-tZ`TL~?L!#Xi0wdc$^}y!#P9->>xyxuYBK1d#6}=u zfF@kH+cQL-BqkUKnHPCFRI>b;!wUyo(z2f6)xHmRU89gA_jvoIJabu1X!bcKr5+hz zudt|uqW!In>&2a|Qf6C1dmEPk$fkyNoP_0a0dU}o1fUy?tDhRS(k={+dRa zaj^LDABo8%I{||9LxN)6iPvksrrF!5TjKlw0}>tDH9~%jN#9T?qWvOAj4r8monXIM za?fMk)_uM%ud!rP`@NpAhNoSu6CTm-c5}VS=UTh_!@;H-%2Jf=VXvP&Gnrgl6;Da= zJgQ_~=2}?jh_B5AEdPE%5*taZ%ZIA8$m5p|H779+N|uR8X_Z06cLoxUOJR~N5%p2o z1@bI{6o{u9HBf)clQH3uIJ!r2)8%Zbnrb0xD3IA7R$Ff*vk|qKB;z_mRw-gB?1vji zXdg#qzs;d>Le&@wDibv$vMIs(imyGN1A-+E1aVZYgdW?l(+Apko(g+Zxcxr18~=b2 z`cNp&65zhuPrPf@d%^AXHI4Fk=lS{7jgJ9y(mCSg-tW5WdNtrd;-47PG|F4r^$g#E zhC$lG0-W2Y7^v?-KEhs?Dn+5s^!ojv?MKiuq)aHZog%bV8k6Uq2oN&H4Uu3E0OJDU zaM&aiRsMRNv9r=`Fsw;6QR!t>82 z^O-~FgjCmg3}@dq!n_t@CGol04$X9j10j_pyhh*FUzZ#OPZkDUzwD#2HPx>~L;-kl z=mIH#H5V?vI;dF|88E*oWx`BGgibqO(dY3(i@@w%Rxr2tOg|NSR*C`exZ~C)1-wqS|%vfAC z6m8T=DkGSbhy&$k;8HuS&IG+jnzDU1xga ziI;c|Tr-N4!&%I*IK*$q{V05lN!bZJpzFoKI}F({?W5LBq&&NlMaDGEc6}>-Y8>}% z?KJ}mEy5S+pvz@`B57_Y2gPJsM!MsbHE#wgqg zOa~izrf7~wGWI02T*q*aEDul$G3&A5s8v4BL~!dI~N#W?i@fMh{IlCDxFe;Okw_8Ln?z< zEL=;UY|J2jY~@6Qdpsz%k5Bp2)Z8pjXtTU7yFUT>khHi~da`JIxcuUn58!)- zO^F%|?C^hqj0F<{Y8>3xWI`sJBG_iVj|XJ$CeK1HqYb{@*p`5V}MAy>(3;X z;+AoZTC6LP2>a+?L3vH0u~!QT;W&IUBD3Z9xF~5=oKsYHs_l z+{;96Ia1wsgNkL7CTZ@5bWaF|y`1`e?&R%pbalnzn~pC^``1T6`7 zxy=}%%b7Zulh;`B+h)!)ZyIGOpfqsEt;Qs!|@c*wAW1C!@N zs<|WoFfjJgH62lgvz7WW&4MV(1DEnGnT2&fdEE<6o+;{w2*mLlryw1byg?Lz(A*?~ zMZo6T>uAm&IA(e$riZx(H%Ms@V%q(;tQu$bt!oE|FekL3L-%B0wPz8h0aQOhrDRFb zzWlShUf1sD7bqawb$cHcDPmQQT&3$mrpf1IFCu!+Y%`%jp!wGCpv&5+oZER;KL-`GQf93Rhxr8Z~hdu;?50-6=+c(4rBf9v9BO@F9;p?iUtdA~|0?2hrjIN1?=b@IX1)r;ekuyXRbX0{#S zugYp^zSkctCmn2kw!f;7OqeFAt*B1Bj*+@Tn%9JbF6nTFC4OX`M4ZSR!TN~oqq!!B zBB@Zi%9`qFl1_%GE!pz-gS*&K;;l(r6oUjturvng(6BTz()<1c!9lC#bjs!uslX=f z|8-Jl0}NXrn!MY-d{jjNfRF?(qEGg{_#6pyZ>ACvk9{oqN5XvctN+CNSbSmu#6d6` zgWg{Q9@?`xUVpc-RzH;9U)7rRGC0v*4_x`;;j~w@{I6fQb#gUEd#k7W4imGu(nvcLdm*lBa! zlgDZ?f%PoH-H4l1H<6fwR5#_IFN1ddRXW!-%{`2eu}HOI@RgJ8%dIilxpL>`dJOO` z^4rjrSn1tS`)h3$Fyyz5n8tlNFyT<-uzc^mR8we)<2@dIJvW5UqW{IVn7?#MQmBf= zE6X@wiuqu`$$5^`RuGI#VZ8jJ_GBMy?20vlVQ*&@aylKnp?^ffd;DeXPQ#a6<^VFgwqIDV7qs#6)MZKAUwgL*d zt_LzuV~XEJ^g%0fmgQwin_h|it#*9d|1&{1ivwWzkMOv?$9mZT0iIwI(H7_p%v5(9 zKFq0teqE_f@tpY3bU!-r96S-Od5bsPw5j9ocy+Q_!ai*Hq^SS9W~cuIDctfj(7Z_A zJVv0PXLp9QfOUNPmh+PexX&!{X>J0fLgzM?ILCT~9W&1*th}MYhE*@H`nw!Rxuc)) zqW@O_28} zDliG^zm|}Q%(el6eej>-s-qpdp0%k= zkATi}=GZ>*=ZSz=c_OF7eXGK%P|pcm`g*}81x@u7-n^4KaJr>8eD3XgmYpd7D#7XB zZv5uhvz{0}sjnIG4MC>`mYbZ%dWz2u&RB{Xw{IObZHn)jA| zoivAgnq%KvY~^O?utl+N&o|DeDr;0Oejs2h+SMV0Qgascg(3=;`F^9&b3b~p!M zZfYe#KE+$;o$lN*()5$u8o{2qLAb}iq9lgLAb~+o;KFO&-p2Xq01m)&+P-Uv?bMvI zuy$)^c_KwH5%=c4d`m(eTeN)QChr6~aIiG>%7F6&I7n<2Jc+qT3{KmJ#4^tHz(u+l zSlJw4{wAi6!7^e z$F#?IcaDA7ptZ&lFPEpVKq|x(ymBfb?_;U^f+SJKnf3}{sFdNtrjcvzg4o>d&G;A} z47We}rV^qR-wnU{7yeVnERV5|IayuhDz(uuBAOf=ThD90Rk=}r##FjH){x(OdD_0A zv;_u-W4fc%i$G#C0k4VRr%@k0HVWKq4R6w|vVk&H!G>ZXyrr@>`|ihgC2rrYYI6w1 zhu+1SJA_8p#=;S!-Gw+y3QHVb@SjTS4gGItl*Fuvdc&Sro0{LNb!!bhnS3{5)l)Au zviUo84emM-)6UDzd3gT%H1*CfUwyf38_dY*O)qzzi#{+IfbDSpkahbeXZcX%bcy|0 zi)wuz{&SB*i(3O-VvD?T)tlny3i24H-i-+kz&ys%w2J1L`C_iPC_0U-1Rwhi4jwK3 zT0WK{!!Z3Gut^o)c2x#h8Qai<7k5Dd5A`M9=Za-i8Jt)(UtVfbGs|l zYYdmEkR-UTX?@|?Z$mLiUvd%5w&=8dz!6sK=7BsnZW2%2?FcLBW2AOVsF|Hw(!5W}K^Zr-NBtbLAaZ7&kkS{CYgS&$sDf-PQWS!x~3> zJGt*<1~8%4@oR}&yQzB4cXp!9IikH^XVCSvfnSa!gIY?Xv%+22UXenH9n+q|F=}i& zfH+68X<7z6RzIOc1@0bQDj8b=D-}X32XiDiNsCGLJoxz@jg$JAkLq+mrtnWWvdlNO zWZL$I6sAowh~IgUPscIf{m#qY*l(N{O)VK=#ij2ZF2XcdL}+c{cAh;RVXQ+kD1d{T8ATv5wMr=(`ccl2j zq{qOx;*{eL=J(JH*;0e}(K%-e#T3ik*Ny>#u({W((^^G_eTb97XPK`ZbREzFgN?5s z2_OmXrYPR_JZ7i_*2NS2Dw^ds=j`4T9jq{N<@ebArE~5{)?1^6_S;_*xV?j0s-uT) z!41Fpka~uqq9Z2yIy-{zrt5W1KmD|siYJ4o8)F4~?v_;+Ys;UT*obg>DiyFM_xA5X z1P;Y_PxcR6gg%mWAj*4Y!|%yb1Ohg!rHosbHV(JGmpBLw!nVHmuJIG8!k?4Vqf#@ zyh0Nz4&BU;;8Gs(BENcDXA8a;yyN5A7Y{>CY`RXsg>4lcJqNGV7vcoN1ygkLEgtuK z5i4a*#F&)C)bojMefzS4KueGZyP#InTDR>^efg-Oo#U!u$IiSMvbi4#{ZTbJM0$U? zU(D8^o7fP;npTJ;4UciosFYLv)M}Psb%lagsCLH@vQvN5P3^le=#-et_)s37FK?`` z?y>l3QvP%}CU;cx15vS(WlA&KzPn{2+7fxtVzQrvNj|{lMsNJ|Oix!_XEXtw65X}F z^`>Q#eIDLFY)u*46q>nQ56wL}ui!f3_t@-DwH%-OV8sny2UZW~*!QKuCgw(cyZv8p zH^MI}?;wu##eO->I^#^wFNTQ*+Lp{CQUSlA|r% z-D0wGX4OSG^1_?*91#~@iRMB+jeNgHy0#?n|80kawZFdN3f%aHCLRK#s1RXGz1#eH zG5HMTu+t``=em)s`;C+DM(12Kb=U;I9>SA?d5@2lOcN8~^S#f0!0ik3E5U{F=1n27 zXZZ!F(VRE4-zv9Qw^Ij6R5rysH#K~R#A?}gJc)31qH*axvC(>_>$!`q$CI)!B{nCY zIS*IcN^1MD!KNnB8}W&co^&-%Gb$_bf1KERv*!F$UwaIxc>N6Uk^8fMV<;hQdn+!YZ4fqk8%Cf4q|a;7zd2Xb3RC#fl_w=qY|p;Pj%IE(99$ z`A5d7gT3XMZs_@_SIl<4FIZ0w%x+$p?#;(grleoxNcV?i^OT0=6Z1+@ys|E(Rc@p! z&||l#SN21y?mv0(*6c5ZaSUm1A8$k53-Edkd1O^f;Rhf0KVC-fd_$t(zVvd|8#-Ke za^`cb=@W|rraXNlsvhk;DmU@;`>4kGUQlr1C+ZR3+Ued&93A`zOpPI;&`GK&6{ zR38^2c7(X-Ljndt)Nlrf^*G89a{9|?3TmUEm)0QE>B{LR6#sk-on?gnxUQM0wFbj?@7B@Zu~$U?)$ zVaA*t%2K^8B)}QI-AM3{ zRj&fDoBs?jkg)#XH5?IC`b#q(e_92(658SEdyaX;@d@lZac#h_m=Y2n^(DaLTyGeo z;=$Ui=i^Pi-pi1MtNuJR_u0p%2yKZV6Ov$i9yFZsPem~`3K*yGlH6qYgFpPuR)QCq zo5kEdc(Xr@eLIzbiD5e0{h6|sS70H8%}0Is5WWw7km{^WBQjQh{amVC*sK=@a{!NZ z$FNe!71)2X23FkF%r99V4ffUN<5P>+yVRH$6w!ryOk~9fezYiY{`tQG`Kz=Qe}mF5 zFvaE%%DViXrGGjbIPCI8*zFbQke(<~8$l+hk-Kj2@wAphON+bMqkGpA{981tQonG&@Y9Q5?)We?zmpt%p7 z-Vcz<<=+#ZUF0aM-Iw?aIB|xXVzT%9Uq!mcBj<@*wPT;s|*Hl-F@Ko~s z*UoAsUQudLXKVH0v?SVP7w9cchVu~KF6?mXR$rRPwQaB=XEieZ8Wz*(85{2kz>0U zM4qwhy?wk(aaB(K*?X9Pg1?8eqKAQil72cIq{>S(Yu`bzhrYDOyG1>qLs53+oxr_T z3?gUt;;Q$*-&E3+NL_6(o-c;bV#mA_c~A4e2)!Wp`2X&f970(mJX8%b`6x-)k6*-zxS2`~wZpvo9UGL5U6sfdG<6R9of-^kU zUY?(~+|NGT$Sf`%&&=Ps5^EV?_4Xr~6kdDOh^<{V+>V|{@Y!5rh-L{Ks4T*2#ecU5FcH|| z@S7XW5mt5*#Sh?dH!j#V9x6OgJ#}a*P7n&m0)krAGQ_7`m^lWZ-F$<>9k)A{Qg{j^ zbiO|oA|27RxKkf@i+8euCN^mtn&+`NSTV9`+eUr}ggc3-OZiS3htxe>^(U5qdcre8 zG0mUZ;-F|`LkJ1diTnY^#zJI5NHpLW01H$Pf`tt+MvIe(7NCFg>T7hvfANxI`i6PUFhn zDCsI;@=W77QNzJl={EuQ_sJh|;tAUEtWl8KSs;=r@qI7e3(}2=`cG2Emkp=mdL17g zBbiz_(G=sJcIH+519cG)p4vEko?zY{h`X10e}ir@1(KpB%S}7%s>nHF-M87uF zMoD=7gnDFHk(OGND&-=5#wulMvwbSt5o?|1sc1TN}6j%)L249q{#pZ z9@HBUvxdlO`~vnu@UoCT1GHf7uQa(aHCbXb2BB~(q;f!TQ7GffGVXG^IT_D6-sv@3 zT2Dg|i@|M2jYtxefBLhjHFTa7Ab2vjH=0z#$_{)hqj`$0Dy)UA>V!tG$~1pmO9lTH z{gv+eY1dAF5fKhh=jhq&rNQr_?_wlvbDsizLBnVp*YnQ0c?I1=$2-Osh9k?rHd2%{$La03VEsV?%SfQ(ILV+UCN@^U9M#oS#REiU${pS=oPTwsh$Q z8UaOMpf3i9Uvvs@W26r@s|7Njia0 z%s@3yAwqEk_LUs6qE{v2rduDG6B)oskhsPR^Zq5&Q|xB&soX<5c{O52D^lh}8%9j(v0#B;2-suq?JH}mSuOi29Y2y~h z2GzHDhvSWf)z|8xhIj6pM{2e5TZve*!JM|eIdj5B994g1Z0~Q+iRRMW zX%~gnTA%au{yBSQj&D+wQ&QuuTt!r&DTu3KP;(AM6TeP}&+4nT<4rlXj7|837&Ly^ zOj_ssYcJzu-}$63(63?K%%YKLV--l*71e@ z{~mb0+)f}9phQBg%jy>fJ>lB$4?&bU(sYJ->aDS^)JSqvX4!J1MKKq%n!ckFaB+m8A z=!}h*DWW6}S}~0Ma4%UUPAt9q+Y`vRf#U7C_|OnxW#8eZ6dl6D;2C|(T`UCcPFs!6 zoAY#!{oF{z%3Cwd@)`#KLwEXRRjb9M?Cjr_w*5M*s-$hsFa?}fCt!WRjw_G78 z*H?PI$CvAwrL&e*0`L*{&;q-oA0^8SI5T^S>ym(I51^v8n`X5yV3rcM7f3w+hNWal zeYAPh%Fy@rw3^in+iaoBf{fFXk&*3C+s2BF^UU)*nK2Gwo;a?q{a z;f%tRL?j*8$^RnVX~S%iBB0oQL$zkkbGwX)DL{(76wGnF5I_|C*k9dfHQ^)S9<~0N zGk&7$NS`ZlKW9Z$cvL2NMy>3K6>Ra0spE~7TIf0gts z)hV6)|6He7X1rYUWMojrXixB5x0`<1-6Peqi&mP(V|+P$oX?c`_DrUwhzOvxR|FiH zRiCHhR;A`7In$qx$cdEM2PFK1YDWPGS9`=Iwth5Lz5nrdyk9i50d~#SwWsAp7h!dp zw&m=L7I)!61=`a*IV3zi5^b)|J1_q%X|8Q(Yv`7|oh_GQagxPN63xFulo(P^Fsd{D zDSnt7Uoc($m}(w9qXySQjgwKG#+k zVLqgOyX(#EO)`(m{E(QJ#FnP_AB5r3(=>Ym<4fs6*Z%N?m6{n_JX&t`HKhRB0@8gF z6?KWzf1et^JyP~oOiZzupJM)e(N0cs|4&MB>ia&GW%xW^$_iR5r~MSaC3SH`0u-4Z zl+Th_SwG@}%KM-#l-Ap#Vcg9ql>AL7EtK^Bd8St}xnw9gUZuhI(@rzApTg5+FW(RH zI8eLuq~C0PYO!8fSny>8er=XO@-KstvOwHfXXDc+ZTp9gJN z4T)LiJY)6UW?d>1+^B5%%)yDTA&2GNG_c)IN9UuNcl?Lr*{BnbKDUbf=IdZriuJg9 z=u8qhDwMo3v=$yx10(Fl3qa!iv7bXLXq{`H2Q&)8$6`S10U0Zps8O~|8&|k~Bqco2 z{LyMVN#9W!(S;W`HKL5lO}I{TO>G{RDq}K?A4>elZ9~HSj^v&=)_pkjC96+9c|dlf z$b8n|(wQ>tHf@^B^~sV&l>HadlWfB(mb+}`Ln7=T9|y3~=wUZ)rn>`a`}NgC3(d3% z80r;7ri(M-X(#=HwMT^!xhj3@IIp?)&sSHh=4drTWG&gWy$QHX``V(&R5Bh$-k-OP z&{`7QqkR*5f8BDga)Y5#Ja{9k&*1sALNk%>8-of%EzZG*P_iDu=+4ssok!=nZC~xB zzSpB^djyb1qbsdjTdW8>1rfm>rn4N_8C(U5F;T(S@C1Eu&*^6985M^e-J$i!vvHDu zU(zbH^PwU9sbYX4Ca0Y!ILf3LDnV)Zc z@ai32w3lBK?w_9nML%~(5;wwy)$fl(q;BX>G+ceFo*Y@;0xy}G2SGoc>wPV@(GWjG z8YS=_+-b7JGg{@V{^p+JSGfFJ(o_ZqPuA5IN8!?17pkfJDO%PA>BYq>J}VLd+Dy~h zYn&t+Us;VhAmYYu_Y4!q^a5 zPb1YQ!OyzCJ8$XmaDK5VJ+x%GU}lIPAjCx_s%Wb(>aFi{NTu#1z+1LZ*gl4QBzKV; zFc?DcEi_4ba;=)@dzqCOL(t%}B$lN%{Z+*73prvDxZ}ExSzr>21T)TLaBB|v%hS~r5K`yGJp9;;KRO|R=?c9T37Jr#)UGh@jr{6b6)h57X@F)BQGLGqw znzpB;wm9+KnotX_!xW0S7bgDjor-Mz7gTJNs8W1*6%mp-?#fCQ5meb5OoZ{oMe!nV zx7cdW`t$Xt0+l26Sxv=%co+=keqQ1H$o&_#`RL@7&pG`8CyVBVFrfdeux7|-&uQ`7 zTg?##E8msJwS1d$93xie3$f4>qV zjk_8A5XJrNFx>bGiy_D>Kv3h#EyEn*>qHN1|0)3kd4!v5HexyVS39|Z-lSG$vzLRS(cW0q` zLzjF(DTz>QWTrpVfVQPOw?2N#WSBgL`iPKj+$g9ku*W*64O$iJM-us0*1aX*o+g>6 zXKKd4UH1%EwHN4KaBK@|b&w*)njqy`H*lL3IKTGYfP*fTsOq^Rei-{x z`(r>$(CX9Z74$a>yQ8EQeJ8DQqsMs9fPf6_ zsfFu?`CD5HZ;&9m>sI_+OFXqOqxc!H2);*?oa)?H|P$- z)29<3Few&B%X&+^q?6;oaI831J-xcH>M^3dwrS!3yjTR7-#;kUabYvFv5Wo5wqIU5 zydiN;oSa-^yWC4K<+SE$!<_E?8hEzs$NYgz)fCc(*O^us0whT?h(hLKmGR$csc_X$?=VC6zIo`obK_# zh^H>uKMC}0t!P6V?F)9YaY_z%l-oaU;2SuoMu7aBFkHAoP=m#LPkEXTXwkmab8Gzj zT=(QLTBvHgr~If*2;x~T{#?+)Asnm|aqLT~e0sK=gMF7f&Oq zZfi3H^hSO@){u;-iXK=nZ0TSy;t%ocVFi9O+R_+rhn=z1jK8m`a>x?@($c7dUt~wI zXL?1|8+WELv;O%CgX7T2i?X1 zwtBN;TcLzK{z}umN#+iOLd9OK4e@m2+n2sUq|D&d2D)%Lv*6<+64jI@uiI0?V}V%C zB~<4c1$*dHq=aBWd8M}+HX&*}np$b(ctFgJ zzngu3D*9g6xO<72i}YF@*6Pw}1l=&D`^l-Pu&EZzX#iDN69i|BroWLP6MA71c8uFs z!()}tQ7LBt?yZtHnj@z*YRw%ueyebu?Y-l@hY`h?3r~ANC-Rg&a8mBe)Xm!wjky=C zBd35QS}wV@jOnn;D1Q;Vfs@B+)q;nsZ-%!&*h=qA+iEINEh2c)f>H z;58j2@mxy*k*lWK1rci2Nby8=aNa&UmpT_d_gAwkJBIYVVl0g+l9cOWAN|cvlkB0% zH>}}~3h!U88N1tTetV+N#DW zA|F6jh*!&$b3mQH4x`4$LO`jK0h0K)PdgSOvC5&7B#)s{?&|Lw$B6E`^st8O=qU!C z#qPZjwtZ4ROyFA{%d=0Q!m5G3M(fY)c>nH>*v=-eJ=bw06&PT%E2G$t5*Gy_fz%uU zoH7B{xBlG>82U(w3dgBdEbGL}2_H|@)Xr<%j6 zh^(Ur63r`Tvg577|Ai*dGvE|a%lL`gmm)oweXG0%Yl|(*x~3Tj;b~B^tVZJf!=4FqNdI=y! zML?+{MWqD@2m%73cLgbiA{_xkN4n0AznQt4e_$@W@!?5M_Bm&-wcquw&r&7uV8AgO zI`ew9nr%tpdbP#8sJ52UA}*GFce)%TU)7fhpDuRvZ;OzW;vy0WRy)SexX-=?50*Bv z|H|i?LkDd$TdsVicBxGHyA6NmIM6xPF0c8D#lqh&N^;q1t=hj5*UCyY@H_e}<>RG; zsI=Et&g^$$ob3dgRcI zU&qeJIWG!4m4l~7kar2Y53=ef_hE%4Ia!wE=DXNjTt!UVKiLuW?a%4=c3_wW&c59- zp-Hwt@u41M(A}Z&t+B@~dogaLj@umTuv&z5zF9E?m?IGgGdfhM-@!@`u^Gs2ts&4GA zZ}dq!k%hCm>u!CmhTW?PYUr(&BPM3w1Ei_-Ihi$|*YBtUl8%5A`X^ zpOX8YpJC;AuF^v#K9hXHovY}~s5(!VquGvVFVZT#-bHui;iF?wJ|Tb9Nc>2~%cLV4 z?}B1k?vG{mssW|ckB6>l#*THYH~BW^YankCL33o<`bJ_tR14O5Y3(Bm7Amzyd2zQq zt}5P;E$G=l22!=4r@ND7FN`l+ua`lAtCVr!HzAvlA8FkaYI8~RYRL%#W*H9A#a;V$ zXVn>S{x+}s??iD_cMpTIlgLeJ1w&I=Pa6( z%}%Sd-tfI94wW7HAyqDZtatH+A-TVWJnjaa5>rFs59M0U+Ob7+5gk(HDt_rIM}aUC zg>uS)X$wEO{nf+TK+P*9412|vB!iMG^!#4y8A{RPWwSKXvsuAmqa(M>My`gy|4K|G z6?wQaa=N1^db(4bpDU6!1Ug(2%=mxTa(+9WtbME-T}vD2_>FgtTO6|ZK_VH(Wwi{4 zEXd_gCM!a`9mvp!!UT>io=Oi@5wFc#m_!=#7m}O_FmV`70;`Wh!}cTW#4MICV4}e{ zUA^yK2++b4JX18TE#GvmRa~N+63e8YEe1h-r_-*_X|Hx>)l`rAr)*vnE$CJ~8|K%A zyDjMuTD^EEwY2;kENfK-AvgZO8zn1kP$K2$*4K-d%j#S zcWfue#1Z#>%%NIfh?uGnclw&qyZoG>?l=0LrHNMFcOKa;V!#D({KM;BeN3S7#IA(g zKbiQb|HyfEy7H$Z^}Yiqo8mX_p zbULB*%Ojaun!I`u4G-fuqcX5oN)FshL#S=-cX9)ID&q&M*K%Gw`iPFDMx z^th-=oAIoAA#y6OmUKa}ygk3JS2Vfl4WGW`2fOt#C|7P057lPg3gY#eE4AVKdY*ki zBIy26a+P&o-P-RnWq0kud_xvzI+v_pnX2b8vSR81eL?HZI>zbq9^Bo620>?6b;YIM z1OE}Ny_1Z)Qp>bTa7oGJ?%_YHb$6#g*Pc->6p2;oD3^^m>Es$|0Orl+ew`hSGzgAF z?&>!8%vjvWvmn`-n^TYNI5vg^f2Kx9iH(j$x!I|*%s6KY$CWv)J^db5!BfuiVk%8} zzYmq&k)IExq-eb%K9x=?tA4+R;%gJ@p1Kdmbxh(gGLddtHKy#;1)g!_hK3(BTy^L7 zv>FkZjMO2cx;|5y(Gf@|{_frkBo_tg@w9d*j^m!Hl}}`xYLFM8nt9M$^|3>VR<6op z?H#s3%wqDZ`4M54f$G6o%nh%+mV-oQr`37`ZMx`Drf2pvt5L;Id*gi_x%Hncveu)y zA2+EPu~yLR|(mLIe2l6MupHR5)VX&VmNO=rj6`T3LpIxx-id4ttlK9 zG~ynA{5`=r-KuV3{ji_Eo>U%bP-;{B@s{v?0`pNV*e5mm3><~Iw70TnYEq}Mt4;hWG z2sR)irKL~~gafQA&==pNLL`srGI{0~#`3{_QyENZslsxCICb|{T|3#6eOZL&K?avo zS-zO&VQ*henwW@%#7Ox3Y_BYcCr|rvxgFH;H~|F*prKXBqK`k*wOMyt3wLdnTA`>) zUkGUkPyO8|1b=x1UVCj_c-_$K5 zccU|us4zn}QeIL;Jp^T_VL!TO;oBnfn!2Y<6Bdlf8LI*1F#9*?eVou61~DhcgezxE zcBvvnue(JpGVcr^AC?XMl0PP}JVeZRj4Cfo6yoT~k2#dChjxhNsTE{IV3p@g^)l>Q0z*l$;1+7_=nVA^Dlm^NI|L% zamL)xh-Kb3gI}Y*-|+R57egm3LA*vVv_hce2g}!vaY>U)3L-`EDtq6~2@jJ$)DQMP zzjiJRNBq>ZDt@VfJVkyJ%!6xwwFyc*ik$f7ne3RU*6`3?Ys3{8t_w}W*L^s98XYGosNx8=x` z$UI}OY0@W4PA%Nh4(QEM?VaADes9@XEW`$1P8&U_ajn)jfX31(+KRPk0JuEfI<#kq%#(yg2+45Pa6~0d>e7!G=l} zFD_xGqI}uDXyGyD7>|5Kt*5-2sK84gE7IE6mHM zv+*zXU+l*u#7!4_H|vzaP^mB_uZ^ouk1f(H`lxZDmPF6`L|BciHf|=uB2ayU{aI zV?7CGN5J1&oI`lcKI#i!YmIQqC1IN4=DYj71vYWB`j&P3o;nt_PfU4<&AvCVjJi9$ zUETpkfj24Re@>YP$%S89>_$b_h{QuO8aAY2?qY9t$DdO_Y+23;O`=?gN~G?e<-tjg>0EZP16t_TlIB36_;k2#e{_Y82){YYZ-Yl z({6ur1m@pe6vohAnKU3#!sP{kn!(>IbYy79O%iUsX4FYznFTvz8xF3L*8I|u<;cl$ z+AO{}huj^0JUL%`2Fdw=nQ#0x2GjU{@T|~CBcb2eOBk{oRSB0(oNMT@Td@CPrzyp8 zJ%-Ap$D)cx(LVpyvRnj zzcnf=v$}NCPV6*tMycEBTUV`JOV#AZQQrWynCEnKE|}HJl+7U z!wVKD7j8}#Q|L=~6vi~3q9vI0y$GL1?ygdF%)YB{@_G+c&|$y$#jPvJ`jEts1Bi%~ zwgN8p!rpz^hTj%#&tOOaAt6|b{cZOsvnnmvXVT@IV1LZWGHr{%13I;2(_Qj3J*Dhw zSNWT$hNmn7*2>C$G^@zSl=W<)BTd$}!xFIxtT}Zu5^`!3q@Dq*+TdNfPB2vOEFXEj|;vAsLi`IT|?7sZAD&JxeNOyyPs=1hvPF^ioe`v62hHiGk~+lhCM zmutzZi=`s|Cyfc=tpHn@s4 zPmTDhIV+hUoa48u--zSqt4nDQU40vLxb0%}TF)BpzW<#Uuzz1-lTf28(uqx;cM>8> z-TsYRv@)12J)qaNzVbWpvFvw=d{3%<`f=d8;mZaVy28lvjJR8f639J@tFtb-j^&Gf z5j=$`PsqKNF9P#7t_U-&#ciIOh?7m0^B-6`Lou_XKhU|MD=kAT{5s*bP_pC zyRj+niia18^j6GDt@MHsd^PH3Oov>^hG53#k|=o;g1e{2_x9fm;^-K1ic&jBn@a36 zT`a*d#nD%NTXwBKs4ut4m4m;y1Q&MDTkdeW75^RP_3q6Wmuov6PIsNr`i6~fEkT~~ z{T*t4T1G$pVKcjts|+V==^d-rtf^1WyfHj;L%0W?@f5nEaTtaTOOTk9qusueXec*+ zrK`P@Ku@rDxD)pEXV-3p*Hwy~wBbiZS}y8~rO9)%YadWi*=0tG8s4|bpd)3D!uS8P zH)m56#JpYRQ?sb{=M$~VwbMaO8Lr_{dh9f(l{=p6k-ZFfoU~+ONzzyFl4>2xB-|Lh zG#q;UPHOMc^I(<*&jI!+vT$)k2bNDE*a<#z2AdRvpxX_^5DW$r4Z1Pu_ zHiPq*54E07IccD&EQf_X7+xGQFsb1(O>#$1Cek(@!aO;P^@)3hz9Z_>|=P7dW2o&fI_Bcl(EaPIXpk#pRtQuAgF{oMkyzdXN{iQ+mGV(u-;=h`u34 z0ZZvJyudZdy!y$iZ>ozZdmUGq+wo*yxM~)El9y2b>&(G1*GtDRnX3HpQnOVcs zOz`|s5>{z=E-hv>=CXJ1iB_x%hurPbz}Aww2T#g6g&15Xo9-@)Dz<&EtVK|o>A?}pwy~$n~%~o4+Z|QG!KJ4IR(YbvPnJRwS=-gz&H8U zBf0p){n$7NFxMh&H0#dy61V9@Z9Rw^Thip0kam?$el*EX5l;NEZq${(m^8sBsQssI z3S;+-tN&@;m3)61lO%WLt88|1?#GhXpoI(nIh<*@ga>TO2d#H^kW6z_GsI&|ohZit zTGm}BZ#?1FeuDN&hZOZXp1*lr=tQT1OA(BPRBD0l^RJHYKXR4-?qSeGPQswqV}I6s zn@OvGdH#!%TiZwXg*M&>%>DnMfwD$d%IwP~u4UU;3xK~nKo4OK_wx zXkEi&Y=3g-nlEm3aeL-fxj-!@j}!Lk0Lz;Kt~;|Y4-k-EE{ZI z@KT~TAb8P66o5+9HlX_Xf-8^xsRBMH9%+pQ9)pS*pSH`{zGu91jeg6~?=rS5|L-5@ zQ*~E1U~de)jRn^|ZvEtF!oL0=B=s>^-6H!Xh38Zv==2%j_0nUjTv@OC-YmIF&I4EPrByuPggyv?xU>eimdNBa)H=o0 z<4t%evRI+8Hc;E2ZN?-lx|Xv{wo>VlXnXUSTJT3EOi)KWI+5MJp0I<7vuE zUjCpQ-*?A+S*k%p>HK*VZrM=A1jBzovL^Ni#kjPAO~+=VCzWF>A1r)2?V9<(&42d< z=(xNPzeu-GfMT2j7q*4xL>}YqyIW_WUA>;W{GLZTv%qMtWa9@7eFhW@dk6L;@5S$a2hKiRVU@i52xllzHC!?wLb zSKiZUQcNh|$;EW<1M+5&U_sbJ$a4t_{jq^ZKmPpwILDI=m&|#G-c<<4x|fk^Bo>Z5 zjPe(qa!8ckV=wc;(<$+u?Y`zGvOmK7!CSA1%ufckT`M%+WIPAVuB^b6lM+X_#g5rH znz9WN`+VYnB2xu!KC`` z$m;_SWb;IIcrJ+r@*nJUGuyJy3&kj%1G5c!26)kbJNJDs3} zn&=xMYp7{%3TPgMdPP!W!uLKljaQ^hs=(fHG+n(1Oz~GVWta*YKV~5u675=@M)(gT zYM$fihTw&07^Kc3Rme@Ac%ITtnI--d_@Kootl@bShFxMCjle-U2b@W4@Z!kTXQa|= zOE$n9G6($cm*UKlWWvHzHKvJ;jzbeBHm@9SHc41Vl4@QE|ARgsTA{s6uaNNi^VBSq zbQgDMW{-xgNp*apK#OuHq;PW#HR;Q01@9Yi`cOb`8O`jP~agJ%U4?HjdY%_RO$!XChK9 zzuV`bgF*p%3GA*s8VXc!PYOP(ImGq4_P9X>#GG$R&aRfWAADz6Ja)LL;>tS1Us{)I z+Ob{@-(Boe`C$K9G{zVz(oF5zADxIc|GMq3<%&B-Cgwp=NtayF5x+7- z(+Ze}(K3?4-s)B^QPXHrr3~gttN)2sEBpDRJpJ0~mnm*5o$Pw>^r3s`I8k^}jaRhi zi=Cq3<{GU1rSxDy6Oy~ZoCg98hF@?SE$LTd*X}b^Q}nkeq|~szt_+0?AY`B+jhncW z+lC^mfgpImVEtktN<^@w>Kc*jE$7Mkmm%)|g6^np^jH&iZBgLYwAxpu zy4^gl5Y)HsnV-I*!mpvohL^V{*X9J?p|ITtwByM^)Y=7=`2wF?XgWkhYC;vnto}Iv zHK==c|NgRykl&)CfieKrb_N0`9dC~d|+tN?G=jX!N}*iA_wo{sW2)G zlmiyoKkXkK83^WGWtz=)h5({ty21+tokc)&pA)0Z_Rk8O{}`-dU)z=1&p`$4u`m8L zUjL~``G!AS6`toZAuYjLM%vLoYql0*0|>+&il?9k6h|uKdD)quqdByp4BUS)t7F>k z<~AZYgx0}Y=0B8;D@44)_y_o~xZn@lGZjEAuA9LlYeUtRp09=d{t&j^w0^TW zV0>pSwcF-`cnLOkwzXu*UV7%>O!ZV9C!4c>G#~%;!l#XR7_Y2Kr0)fW`SZf(gS;K5 zs^A_6i=KU#=wy)?$fG@vt97&8jnl7sDG<6|RQb{k*A@H~mp`6n%RlXOsSE6?t!!{H zG2YLj9fZvT`+{JYZyYabRB@}qF0YGckTVzTxqmT9M{te)-`Xq8sLjlpg?~T(yy)(H zUHkA;#*tV^j(;78NoIDJX2KEe;(tt-ZfpYEwXvLhVu$Dco_FP_+)>XemS5YqdAw25xdo+JOIWkG4@Hx+`$osd6S5E;D6`@dtsD%?}2K8nD}?)_%p3Jr=#5ctu&VA_)ZtBEd zJ-A|l#sq5M?ViCp+}o~bO(_dYjESDQMo0 zpwy&r&_Ihr9Dbbi$l+mc=GiV|m=B&d%SgAC`V=9(?okLn{4Hf z{T4ahc@qFh$tPzw8omhhbP2XaZ2K2bt#gI`sT`19fO&r1<}S!T`|8zpk=n9@Hf<9u(h`_dwSeZKeX; zv+s~Q%vXYs)fhTJwj2(%C1q;^GoV-hq4{?y)9&#KERf$f#}v@-kGYd#xy zu8KNj4iAT@$-8S;I8?3#!OI$R<)-ao?98;~S!?vI{kj?FKDJ%r>?Cv`JgI(fVt_YW|E~1u6!FU3vB^rB^-k--mhFRNa4F&bu42ES>3^5@i~zx;q2~svw2u zr*q>ZhpdM%B*k%TZ7*gTBnAfWnPVNE^+j{6#qV?aV&)!iRpS5MYrf@xAJ_1+3CICg zn=%LUUmUY)BfG7jcf0Ss3Rus(_xnEYElaqNg;STydStp2zk;_9vg|587!<9)F|&~d z4#8J?kHKJ*SX=_+8R$)n$fhSi;;BRUOMd&zMmjc8n@NxZKq9w6UQZFhD_~K=*;Z!t zFP^Y9wah@fGAKWsgbH`oE9B*o=42C7MNId;xRkQ6b8>(2=-<@=!%hP){6BkP4xzex z&esr!TG@Q!8a5f(VrUa71PIC9dFdeIhNY5`0tEDi*0%7Ucq%iu8=sG z*_of(a+aR**{k}dRp&5b8)Zr_P#y2o3~PWnL>T!?;lD^TKpGUv2#V5hQTwsHn(0qO z%Wns8m}>~ti9GuktA(HapD7t{47~B@PDl|LrJ;0fcG=z6R<4<~#SE$B!NxQ8;-&dl zl{cw%n{};Qjde?m;AQ>Xw~BK~;#bwFHkO81RpyuV!3Hxm!Ex@&%r-Tb>g*%3z0c2z zH-OukZsR_{%}f695dEYEI`ycMdlAyI4_EqVEnoex*aLCIjZ4~RY&dL-ip$)w4V)|N z4LQk_?HFZd_NOO7<*(wpbC;_{Pa4-w_))nnDdBOY&yztMX!ER+Lg{G3|D1wU5QjIq zkvt0l$I1k`1-CCdA+z8i+Q#e6mR1}Q7keV1*^5!J3Dqs<#jXFYUjaN<%0SiF27Y&6 zJX{}jRZ=MY@T;DN_BO~iw}ov_lkg`X7Cy^Xzn}}_UYRa3ZPT(IEL#2*4P3LfZ^b>@{*q+yX~lf8|ASLsS6%5__I&2`Wx$rHK_v1<6C-N_^);Zo2fb<{$z=#9S7)f zhB)DZ;8_V=;f?3uAhT+26XJ~T3S^FVq@r6=;l<_6Al$~P)ZvAo|I!!d)5YFoz6}_kNyk^<_BZ`bsl|Q0f!=UHY7s29To`UXS@bvtE2-K4vw`6TdIFfmVHHI zcnUy>?q~%+-yWueMg$9F<2!>E%-7@(ge;2NVJY2`^DG>L8~7Y|q`);lL=(X-=(!d~ z>T+6o-s%e9j zr7R8N{&lW__JJNuajpT^6x0>)3*03PuBq(z@xJ+EAUL%<$ur2c&LHb&I^QD7AT00B zJ6uc?jBEt`nR8lnDp#u<2T0vr&93fQ<`IYR?&KPtit~5u4<|Hep9Btrv)?9=u~O50 z_8sYj*?Db7__>PX9tx<11)C^)Wy@+Qx<$kqvq?+zD^Td}j~s!pd=JNRy2kyqA-PdX zqra{Ag)HF0_sZ-=qa?ka))pI`LZQFhz>jQ2o6TH_kk4SxlN1j3hbQgBas066y`g4%~IB?`t% zU;NZl`%v=gP`tg)A?LtRUrjS%*+lI!05TE*8oab#(<-c_L&%(c2d%k`?H)(0=|blD&>Ae()9w^4QVZK~W{k7K$Q#M#&vvBnT6$iELhorkVwP z(Z7Dr1=)W5cH5AY@G+1IMxVulm6&{j^RO*1i6XrPde!}c<>h}C#<SsrNf2PW69EO1D_J1UhJ718+8N2IB?hz|O`v;=1@9u=KAo#Q^HmeSYrp68jjcMfrsj3u~3hp5;U2oo>EBPk=9ZoQ}(9TBaH_N>uj;FA2 zOp%$L58dGicTIOn;fW=@0Ecrr zbGGE;>WE7Z7WB2NHAz)~A)rA3W2)KYW z!)rUi>pq*O;CN8^QrIDRALhLo?_VR$OJLB9TSb!on^k~IkEqG!=@Y6000A+I{l;9k zpp~45MXHcD6bO!W)^725LYVMHU(pc_ebg+rsS z&0Qm^@J$6OknqS#taa}y3A`FUh8YL}Cye;U;o;=zw>IwzfN&*;G@6l!40fk$jEidF zX-C;OoGO9$T9chZ9$xTGX6m_WJ4ecwPNJm9xSc0Eq1%JDe;z{e5jWmz4R9rMxtD&v zt~LhRAPs+mDB8Jm(`Af|l8x4lf#? z?4qJyGJTZvire-2@n4;j!^EnO_9v0E#DiP+jf;C86^IJLyBd3;wTR1Kjky2XbGrfF zM0A$?o7|Dkkv2USn7a_`1Vf4=yVd2D=~bNLfTLaQBADJ zcP8g-%L&xSr?4xKJBUn_E_Olx3}Q$9IyTMDd7)=GVL|;u;+Q52en1CxFHZCKyT)qa zKZsNs{P3dwGAZ#LT6~!PgGJY(L>Xl7DNHvK_WT{)fLv9Mq`P=WOrd&4adl$lTPEFn z87Z;34RlwuWL^Z8oJd;46B46iDe>L>&Tj&Bl_k|RLc$uiZ3p<~p6+5M*SQF7fux4- zYf_0k@)+5HLz*seQQsU|B4yLX$sUKHo#Hszfg|J~qQdgjmGV5`mASiPpz&9wwfYdC z+61uEXFy$A?IRmnuR&89W&D~X66oIawJ4K0RmAqP`x{wvW2_X{CTn;m=g~2tGJ~ux z=ll-FEAmyQbx&P7)KlcUlM+|2K$CWLzDa&@#A&$kC`0OW>`Q7oSQeuv7@j5A*?rZ| zb!EzfkwAY?P?IDyS&us?q)?K^N*!FHHYLbk?)DM;6A_x}yqYp3j?R~cAt8$txPVJo zAL`<}l`#X{d5j7%NRfp`C?zhp-_~QpjNN2!U{w+c>mzoKD;Y!izKf_BK&rugzmZP* z!sjZ!xNcVttML5_-n#`yk3|psPD6Xt&41~V8G`cD4SjWzKu{lqS~$f{16oc5=KyhV zu)U4Ms`sKEYX%hZph-PUL*(|~20Mh6p;XvVb-;|7ap{7tY5jRAh=*C@>G zz7qLwPV18TlJkVW3X0F+&~T55_&QsQpe8Uk9@An01&+}NI|}65qxc@UbWSGk^uQd; z``wCN?IsFPIZN)vG5%XQJBjH+FUZ!;2#aD+kUc~K%`6(B3ALBq8QHgzZT-gK{Q%>T z>IHYx=kg-rHpn3yd+mJc{D+HcK$2IfU^2_XN^5*>} ziX54;{(3Js2cDAJZjf5FU!}mxdttE*dvyudi^hJNk&g9Wr5WR#dgXQI?X0J?n*U*} zXTM@2qzwoFZfZ_%o~pl-*yV0nB20`*d)bF%uw-wa4?!41!aOx%b{ARKqV1cU)C|_f z2*C&(ikW;E_4GYRl#}?bBMp!8A5wE-#}t5GO2!0f^F|YHvHq=f$kpL&Z_%u{Lw(rT z;>BN8Y2#8aKB>Cz%#@>i%xlhrA*c&}7GX~QLe^$bU$N%?GjAqA`@2r0HI;$AX9*PQ z-&UJ=Q{*`s_x;AD1R4Ee+MhCi$S{bZgsq9!vc47xL;c({wWHGa%op4s>4Jn*W!cn~ zI*2&ml`R@Dcf9krK|z6z5zSo6PhfvX4qeTHB^O3pK!-D~#I{+)y!vSPID0ZuCiRn} z8TFn7Y0Pz^Z(Yk>LpixD+C>|^kCuf*G*WPnE5{`52eesw+M_T^% z{WnGyPqh@YcOL&aT~9cuur{MZ>J7w6@*5*>ZIf$@;j;7S-TtauOFrqUXqmked#@p7 zb;2TyYjE{n9GK5w=zw(-Bn#7dWDk=%7V2nY;|G2{>b+@6rc9<2%k@_>n}|uXOS=UY z-SN_&#mdW)tut0=iEyzmOd77V_CT9JynX44HrkgxOMzG!mddiLFk&~_8_Pnh)aFQY zepsfaGIL`Y{tE|3;B9D~cEI8w( z#!~V?_naQJOOQyqr>&!+hnrS4q5^KG6~~ZTB9PY&2cpjw?r$b+Ff@oG1LMV=vBY%r zdlQ{41pRP-mq=1Zmb{_?OcshlNYM(@Azq>}X9$_a0a_N^%0hJxqrDg}ybn0+fub4o|4@nxP!cDcOyLmL0lUnxf zPvVb#=7L@yzq9==T8AW>{*ZRNd;z8oNvG9brpFpq0v79;+}1uJurtrC(#NK24c50g zk3cF=ygJtl^hYe+QSHd8ceq!K=_Kr4PYRQmk-nq7Yup_^ms-r|%^WX;HUF;)$KRGJ zW_FgHPI+0(g6pq?9T!{~yefPUg2qO#)zQ0KCESMcjP{vBk{iQGf@v*YNVxUy!l>?a zWrwCZ*{JjLKHfBH^9_~X({It)0Sc%640pg)z483+U=8=+fRC@SxjQ;@4gvX8I_)u* z^Jb9Wfjz(DBXLVo3EQ-$C-Bcdg%q1}5y;L=H42^?#RMJI4AKMf5Go_a4=ZJ@2cq}t z@TMZ*@hOWgNo@*-d)kNd`UpuTTfK58ox2A2g5T#ZfcM$wb4Sz5Nmu(g$$T76z->5# z^rtBFtwKi8osKz=>IA0_@??c}^E<}@!px!(Br@giEZ{M0uXXMc}M2}?V0y8cpv*`rT>Lg#OMb#vy`IqO5W{G<)6H@+gjm+ zn{sgw>jK$`gH$gM54M%IWB=Bx3|zo|G^%_{aDA}vXhW*`&)VzHPtM~V-Q_2%ZQH~V z;547W{R@iV>+^N_dvRtLdhi*Wk+i3!D*2Xwyn?`d%u80f26Cj!^ zhZUC33#Xv_Yn{JwexU;mESCR)XTn$E)EBe^z#Y@*{ZoN~I~{YLVdh zF=*JneAX5MebG93-(bBPW>R(zl#%9pHX;1f!Qx<4?rZTxB?Uzl2KwdRw4mzGXCLr3 zC#{5Gm{joYg6|0Ml>7<@jYyw>v#nF4Y2~^1GaaUln!FMk5`ot~%{bYAn#4tcU(dD0 zV=%^Do|@I2CHH`A7UYAbKO+8K!i>N?!Mt5Dz|zyS?q0;toZJTf+Z3gZ;un~O`m@b) z*Pb6jOh17041y)tSXRO%(7A(2J#I^3q3Rn~aFOU@u8gGcv^S~!mhg8qk6VG~V^M1^ z49M{^i_WWm@Lr|M1#&e!Td)8xZ^gXJ6}OK*2b<^u9@ms0i62~xQTYaS{-%FT8Y?iE z;Ss8S1_%zejrhKtH=_7?qnY#M7Sl1-pJ;L1)c*j3-^}!y06j+;ISWic_Z@B{y>C|6 z-*nkq%klXH2tM7HptA7jPN|U}Q2U$C0gVv{m|`iITeM$;H{X|i0vi2%W!s;#Z6N0P zzniNI>(FXpf&5q{$Tbb&_LkUWBGO(zP zS%cMG^ywnWydGZm#Ezf84Ugsoke_q4k0(pXez zZ(0cA*sb2Ke7Nd5_&7RrTL#Nx^E?%TUSU|gdAc&Uby%q!HWLIm^f~~+3dYXpFw;y*D_X&6 zlr`G$g^NG7p4N3cjgM*?#bNvBU}m#f&R->%OAyhm^Q>eQ-+^zBd+g3G9aoBf(;R0}8z&-+_-wx>9|;(M)lgyT`QYo$=tgEoCC z;&Bafj;meQFkDn$`vnWwOPMb4;LW3YfLZ;7S8b4a(;PmlcjFJkhLj=nXu=A=Mt?9@ zb`UZJIHb5gz)#qWw>lK31xS##Z`SA64_FoZoo$s&Y%1(nr7nNaIU#cHh#YNi1J$gd z$u-YKZO_W&@uzmWaJ)Bh(T5X;>NDHUAlJnGIp3k{bz^2KUF~L?hqXt5qIDyv05t>- zVc&P(%LuX@G7G%LYxG+B{i3A!2eiS6mgy8jMnmv>8=Iw2#r*K}I1AkrWh&>EY;g~7 z)C5Ncw70nOr_B$1fxj11Cl5C{+E!BfI1pyuTvayg%v1#I2u4xU3zV&xlCDj{t(&9xNg1)As6d%NXBB?fvlz9x)%n?0 zbwboDjn`3AYo0t|7Ay3YbMkZ^kmx9o;MwD9Mt+3L>5DDqw8OkfB#0kO66I8&`pF~i z1hRJ~^;zASLh>vUbL z#M5|aW+`)aB%k+~76(Mt`)(Jcmoho*Atw|22!AWGt1&f+OfJ=5MHB}tl%HHu1Z?7;&T@<$IS2Uo~jwJy+XgG1Gi3VqHT}b=#F96wAMn%^~H94jvD-5&k>@mz2X+2RgGb&k=k0cI`g#%J*1O zf7Vx{Nd64}$UuFLFMoo6E?>9|z)C%HRu=uiUO?5`MBc}Yi$SNmVEK-v_Ig$wLIivc zjnRTRwgU;u=|SZ|1KADIE<@R-YsGQrNod4h=SO|BcL(An3*ic4-s>5>bl=cw+mxL2 zW5>})RFgqtVx|qb$G}MCI=@vsQ7Zi<-+mC!gmc^mOgd z5@EbA^f*Ig>Z`yn#l)N3_o>TUE{)}6pou|`1VLbQT>c&-#2=($#Ftpk^xg<81OH z{SWs9|FDpWkz*q6?{+aX^g9EFK$i633x^rEP#BD;{k^~{%pc`cfT8ky3@4AO-qa#_)t_6%jc;uDd*2pXCT>e86+*L(qd)s|o zbkd1j#SCid!-2ESdEh&x90WkoIQX5g8iF6hZ{J!_#uEgkpB;}Qd|@u`;qS?3U6$#Z zbLl~9g$XTYe=oedj`HI#{(^W(b7}?RvP(1VMPzmuFp<%1VBOxP(2I$>DBTLVLzj`j zMe+hj_o@n@5YHgS`od-NsVsU}c7`u}fp*=D928z%mdNLQM*unvQ7(q{va${TVgjaR zwiHvOGKiikE<_U3i>W?;oSuM>M2XCF{rFkW+uXYt0fo(XZ|QwFsQ&^c_NRdGcaELO z1z%(v*IS$wLwF?pJlsanF%_~KajuQMeS+)b zrFgdjKghwH_nStai0<*oqII_DTBfNk`+>ihaeGwW=<@+vFJ5$3I1|Hu#mA1WP;Sjo zKGkh5tf*IRK=7hmZ|kkguVn3Ns08%>V!n~qSt@9?_#*m_3sXj8ny?|OY5ma0v;mY2 zz2BV!zo2TDvEoIHjhmKV==D$4agd4hI7w2IW@QPfHma$qPC7MqI8~#lg%#A2He0Hf zFNg^u{x>1y;YRC0wq@_d4LIlLx*Qyff4T1-RMig38@6U8$;>cFyJ$bLWKbaZK;Y~k zV>Cq8Hd(sv_3M{I4JWZ>{uQi4RGmlhmh@Eg<^&_h990KALWrC4Sso}|I|Ja#7j9>l z7!kh0cCUo_TgOcoDxc>TndyA>ZFXUB71F{7DkXD)HT4~ED};=Y;b!6n6%(_$<{z?( z>xj5_yaQ~){9JIk4B@H+m$g#EEY&N0619Z84!RyaVPu>}cDH%~?UbGdza0ujy=Z_5|Vi zrd!5n9yNwH?pIr&Hdo21SToJAoNbQK<^0a)CLE3-UG%;68I1nL2E^_S-Et`z8m}LF zJr5nl=3C&NTTtboOmC06(5%{Y*7gTb!hL49fL=+4yE>(eb18W88_05mREv%Aflo_v z_6z4sOEZX1OGa?41F50e`){g~3|xk38c6>m=M1*Pu{^?TQvzxVmsXR*E54LNs-c*Y zR3WN^_^xBcZ06|N!dsCo-F{M}QOaWio-;C7%8;_ruFw@OO^;)8XI)!^%d>>uFMR$mRZo@D^W;nHSRIfP={GQb)LjzZ&N8159ZQ|=a4T@#ZR(yxzg>>%Y&G#Mq(Gz6J z#F?aU7@`;@uzQG`lkXUa>|XC;Frju|%dG}aKewlvI{!S5ZA6eZf4fG2AX6-V>6BwD za|ac}pK)kUdX#tMxlzq5JIPZ4kBlQL=Qp=hGbP*l0JvUa%9`x#5x;7B>BTTHFO&AW zu}ju>6N3zx?o$h~RZthNW&xNg7^ai@u)S70q#zLMz8C~IchNZeU);TCG@NhLKAMCe z(MgEty^|2VccMjz=%NKtMrRBr2~i@-=w%R{=)DfnJ5fg+z4to0^Z32*`k%Ab`FcK` zkJj_d?YZmT_ukjOE`T8HBQ7l`ADPui#Q3_{{DsC6cIG>5J%Q^7`V}16MH;qw7*e%? zF0EUe*hN#}7C(-PtBLMGe!3L|!=LjYeqGb5x7WWDi~yR`7Lxvbz3s0aU!UiyrI^7O znpeK<$8fHOK28vAk+pPq$Vqzo;|IK2mBQ>pX802+!a{rC7V<%va01LbYh4hUQJ$fm z%^jn+Y(pA=2HaBmvE&~gc%>>G?4Yy!SwVsea~0`(wzzsFjlXergMdQEE9{DCfv}i| zI=0cDeX}G!y=JDaYyrIfnRIR*Z)BTuamSI0_cewFK#LHM$ysBpn)-_t2q-Oj z_F{4}p$HqXOisr4Jdf6C&HcxzYSA0Xd4yZc#bS2I3Fsnqna>4wN~Cq`HGmkU1xRI{ zt_E9;g!cX$tVP}@L=T==nM1jx1kprhcqk9e4F!Ply+0bW0iy>TRG2OD1?zwdq_x=o z{e`JmBpgzpu~hW9f;xA(@>|-sr0`ios_$1J^BdQr3BdNF@ahXd0NExMTAu?M?p-{Z z>pgA<6*ANjc`pUpI7$4W(v8oScG{m1Lr^TPY{0y;wP9-YoX5O@| z_bBWKgVulLvR>4VIQhHS*UWjSHa=%&|9+G~Me&RRllWEe+un7!>tMcwFr7FXlRP8KsJm-_qH_ER)JUAwb0DLEQs;O2VQbx1z99c;fxd8s}v{*MMB@FpOFXstz( zT2eM@d6qQT`G9QtU-1RC5aPy>?py_X_t7F}fDN|`c>Po8TfrIoiiM^Yg&*5Nz9ao} zft)|b8*9B2oE(!~*Udt46J8C)iT>rVnOVY$(&y1P4EWZ7g{1a6TmwoQlBZhRtGcpW zbqSYm%VR6a2uK(7-?h_xt5t9gT^#HRgWMx}BwjjKMe(xi``5KODU^Ljs7;!jVAdp% zYqt1WhekVv1YN{2f>SW!bGhLf!^7`@NXlsw$On) zuvAD6-3qtCZ{unt)~@rFb+1a|btL)L)A(ZUC^JIkYPz3hi+JEphyK&JkG*wYDD({a zs#PwDf2%veo$Am7R=9wHGuoODWmrd$y6&9(9mAUDatMZ`U4=oCA(0&%JDy)=UQ^gx zDMHp#S#SSDYRPe0VEIqhaw4vH3IIu(9fae2K5p-WZroKsPuhN4-mhC~^{=e( zo>jxgsmqYd2z}e^SXmmq75NKXdIO-8ionh9FQwRv?nH7oz+wC$0|$!)bL$$<(0s8H zW!rw`u*#G|i2;XM_A^`lEBmm7M^-)XUwQ+}pPF)~1pYFni-_iNk;xioSz|J)IPbC9zhp6y|gH z&QE$e)@L4M?Ig$CiJ>8X%d5M#oPN&=v!-;FpMKw1m6KGl^A_-^(4*x0X3QeBl2TqH zKB;T+dJMZccUxSt1XitIrGE6_t>{Q{jcbuZ-H%Td;QYAaYJJegB7H!$zi<}!aGIW! zG(=UdS%$LwHp@PB2{P3S2S;W72%>`gE<3JhWiw3GWfk9mv2LZ@b_8E3wTs-mXq~u3 zopbBV8g6>+>hb$V5HZj`>7`miEWCK;b&MNoMigzY(x&}Ja|m_%Y_O)K4rd#WLhYQ$ zBQ~shH2PMBHihYK+Cx}B;p?)6Y~rr^J(@Lu+ccqaD1(R$$Bg1rxr8ni7X3DS`^Q`` z02(YTPv#;e^vAXeTJ3Cj(e||u6l^d8N12whsSDN;nf%%EvuOtScp<)cnF=^>Ey(2N*#g@G4`^OVLwjjlAvEK!tE^E$LD{D8>dT9w-IUex1- zE>9smZeFi2<{LI1<<0=dmzl>^OX{yY5c;y)t3hXKlnXwjc(ZMr^$Nd^=&vgu6dPc9 zsPjAUaXap$Vigy#j;PD)L$bNb_r{s5VN}Q@Yi7=rLtXi5p{!W;-Rd2`VynGVuVgxi zgoW0*N@XoCbzoI;?X|LyL&c5+cR*esut*PSylS;4M~RS6F+@2ZJI^e<4-uR7o|KkR z`t`gA1*YmstbRW&@QDHWTify<1AeVSnI*mS$O6Gi{`^@9zth7qjuU`nHt8Ov*7nw5 zR#{JqNMYwk_ks?KJ=gPUZxIbwn$N?TJ_W&FT#;reZLtaD9?$#CCw`lZ|1`ULw{*Mg zyBaJon}~Oy$9e}O;2ysoDv)sCw}((ulX01-D#P_6)rpb>L^V`RQnWr61}pRv5l;L| zyFJNW+~mfYG}<&obvsP&K9}+wPfLkm%g9XI zLKH3*Y3QUXwe6rRF@5i=@O~*yXU%PI8q;@|)J1MuJNddsbVc$SA#g1AM5dGULoZSU z10uuHi(VVI79MT7>6yk4ayldlzHH_h%V~P$@U?cQNKyYv)POps4q1fimNJVnDZJJ{ z5Ytw~87*u)%-PmIrMa8fvVAFwQ=$Uz&f@kC#RjO4)}(X$#Tuqin0Ca+tjovSX1bW7 z5R*-1);>E*2T3ccaQ%lbW{zc@xpOB;@^ zJeH)15)j(94xCSXD>D^^z1E!g1E+wNOa)7YMto-xgV^d~;17Rc`WVIO-!_8dO)sKS z^!wviGLtw&khJnD&Ji`=gAxajCHUvu-KW#He)k142ThRhyG24MPBNTvV`LJpk6W=b zllI_Ym~wGEEh)!D@t-lu$u+c9FP%E)3=>++6^r=839db7Y<2tVAeb$Q^u;@XCZsn6 z5@q2mTARwvNyfp%#xq8Si%C=HDsoFvM6wXo&ky--l)P!^9OJh7`#Xm(ckn81snJsV~6HPH8gB>EW`|ZP%8s-dG%Of;9F5O>D{0#pK@I4%SuC%N? zF`GdmAv;}sfIG-b!R9d4V$F+KG4W&G6rHIR$|TBrmwAko_CtF}N*Wm!Sa^bb-`vR3&Z{`hLtRpAZYTe{#QuR1`cjvRR6rizSQ)S#p8n?-RX`* z#AC1BHM}SL1p1DWZYhVQXT2UKuzCZ~Ub3~I#>iZ+*KbjBVfy_`XVSNQaWXVkGnRmS3utOF?5e=+^y%6$a%PUD32#IW%)noof6M|O13 z%dG&>`h!;7HqX}f%V3=Bu!pDCvdJgIIRIGr5gl{*hmNecu)`eX5 zO-MEVB_=>^f5vk1h!V5xI{m6{+ z*$n7kXw?B3&Kb^%QMH`e6;*XbnZviGHytyONWrr~3n`&Niz|le&eG<()ZO>L?27AH zcIvuJ98ChoP^~Q&_70@E(M4Z-0~}^19vCjK#Adcku*dOAqUuSiPuaY+HMDMG5S=3` z)cUhy#(0b6u@T8tNLsUJG6`oaa5srAEAtCxwHfS)n%Z|cjuSNB8pr*Mvd+Vf?F*=? z@y+jA_}n|m`0QKSbj5V71Nz7~?cF=b1P^b2tiW)4n?Y zorIRNAKM*xn{xBzst42YL?ZmY`2}(NOkM_7|MiP|T}h0(wlu3aC7QV^t)j49c6jYL zQLT1ZExB`H13IR+U&?3_9>Tpm5QF%Z*JQO+>)FeFKJBZP8hZk*7|_1%Oe=)UorPFY zRu-234m;GPoJs9QRm)9tNp1~Qb6`}HbNmTy1SYUDun9$tW}FW>P@dbKn-^c4CgTv# zUY-!N!_XYK9-O5%@)f`7a)o)hRD0?I3|wi&bl#%BTJVqIefXti_VE>ds01vGT%M_}eU?;g%l(9l-~sROWLR06LgzNw6=`!LF5x z*|28-E?h`pB966PkYXsfGs$hL6OMJbSl<45tuBMZ*ig_P=RWNySPLG zJMtx5jW^G@J&TR=!d_0A4^H5GH81J%iAx* zvSB|=&lD*OeXX{Bc>(msriE`~c*)*PQ&{~HNZidWyfJ4tj}->57)@i5eVIKySE6BAa?Ed%PVYP9m*)zk0}-)a{qPdf!=i@E`XGNU_|mHm&p( ziIhXYn?p)anRyG*gzWSSGRxvBH}mJYsij0C*jj<@1A-r82zAXa8Kwo|tbg0vxLyyq z2dL6^%vY)uZV96Kw@q>-RWQI7S|97Vx(Rj73!}2459;DXbBoLLj@C*hz18#-+_iM} zWP{gilNY&TZr3`n$AQUqo5T~uVZq`RJ)ZRK*{?-9Nlc}>U{MPrN9q`>?ad`pULgM^ zj^?{Kct7W&eoakJ&459DIHE-&)I6MSoz0%OS|7^V${$HWiy`TpXxCHP5~LCDsv^|9 zC@Ub8-SU?tbj{n$u<2*->(pA!MtIjJnG2_4gkL%AlHE0I+|a~VzrLH*-P$mI%uqPy z!;o|01BS@DuW%&;Cy3!CfGJ3(H>`|K-IF$C`%_^#QTeoh^tSWE;DvNDgNZ7oQpE>tdi(Cw2L;Ko+%@ z`pvuW>WT-xcveFo{mm80tdjJbg9o-(c}pg_#Wr>^?okGxp5+pz_l)6=kfy~qAyqI| zRqJ3AwOk{MT{nz3#K=yo&%SRF^=uqK?&}x;uZUnTy_mt^yJ<2N`%De>c4thXY|buv ze)zWC+i*AQu`v~h>t&R_q4zU0jM$=TF4y9LcuvY{Zp&Uyr7HnYL%Y) zPF;(xE3iS*j+cqJe!(XPNc73R?of;|N~9WJ2XWbLhrL<)+dicO>EvhPt5>%|%{z1Z zv$Y&M|BddNRjcM_?v);r+e403H~pDMuUkvrV*#1^#_L>YiHoKoZ4|Tow%N_c%kmqz`X*O{(sR^6f#kE@ z+}!>B;bQcLA%G|)s2cwZtHJA1TPJ(k`uBBlDyo_w?4sVZJ#wHPQvCm5JCy&U^NLZ|1k$=a(3)Jp>VyHbWmLS>{R-&R*-P%3zyFQ zPfm1BJm6G0YRQXOC&|Vj#;hE5O{2ReV_OURb*z)!WfqN;Jrin)DRuSFwH=ChF0O=* zgyYHHOyTjwTtDR}g7|BZ-ZNZ}9-eq*wICCU~uBV2ABg7Vafv^Rw zhRc6NinajV^ZBP%9khRFntL+bDgJ61zeK)xp?KpYB{63q((w(r06r6T%#2iftB$J^VV#lmffVAb^eD1Pa( zj@o>o-gQxlf3^g=fXU5q;1asJ5^k+a!e13tD!{k87mc!MiX1@+pE?@nwyFBtdh zOYHf22ZSo21Mr}3S!u*|OFLb!u7Qmn&hm}3_FP*Dlqz6+=@`$0)2rt7r&WtGRa)qX z7_Fu=2oir(j*I6khkb_Mx_A3g(uGzXzGmEiGxsHQaP^0IniIbB$ssH!Eb|3^(1o3| zHh&lF@w^_}I>pG)z`?w!4^$S%Qvsy^11SmLN%gWT1Vlkf41LFp78_rIMxes`RfH^c zxHLX9%)Z@i&pgLT_k%iweSPFZFPwt#FSB~Y?@*ZNKT>Hw-Ud|kGPHd^*b(E5SV3r# zSFYW|pfaj}QqK0hJx*FEQUX2Ug`T61^9Ztk%@JHRlXmlO?rb)w49iel^I~}uLP<2zf>mn64Sre^W+^Ftwt-gN1KUxQ!|1MI+th>5>tj=LQf*Z{<)UBpjEm#; z^EG@k@!K^$&;He+I?jD)7qdyXUBl`NcaoZO*RL5KVU(qb*3WpK^k0$kl=8dJuRgcx?4$gK%KkyFV%OdK zyl|I9Rq;H9B+tVe`Wq0Qh8EuvGo0cKlKAH8uuX0zB`(h)d#l5wb4$krM@ue$4BHGJ z=uaNE^JmWS4uM<4&UE`orD`%LN1$tJ{^Y3SjW(Z|xvSP7$L-iPPmtf69`1&Pcf9XO z(Hp>C=_~Q;LGXD;iCy&-Jho%dl_f2+l{{+Q^G>S{F&S$@3`8voaRm_~j>;eh>7KKr z`)UVd?ddX)OV&Hq7&=_aS`)0`s40%E=pUuFjl?8YNK1&@0Nl5TUL*ZM0#>ZuR9O znQImmlb`?bXlO_NhATu$RJaWl4M8_(&U71@5w(VPWs8e7-0^A1n_=9d?X;J>sSwZa zhGr|Qp{|Yb$Rd$136L>EN?NG9y)fDnQnC@33U$IcW&rhEE#(u|kCynLiq?P3AO$I( z7aMxCv^f4IcV2G9NiM$@-&==p?N=K)nye#+_w;!mpbuMj7aLGc&3ayWSL^W~(ar0) z6*9LO%!&lAwB8RxajAr9h2DHW65w@1&wn!W>|P74d)(M@$h`k_{;DLR9^3c4xo(fy zGn^3mnm1r*68gO6%-pq(*67Hn`%2%`V1RoO%37jl-t056yw^!->Q3oco+ox3S`fhg zFzYGtpn$bE=Vr|ilp|*7DPxdZ&ttXwlh%gYAjX0z?b_d+cu_HHV z3X)P68_}FrUpo+%wlff8qT^7%)VNnW7w6u`EzDG#UuNm&IQL_=3{tf4+$7nPw3&L1 zBe3B5u*ZU>t_3yXITqemyQ`Ztbh?iulb?Kwi;utLI2pw_E1>zy!xJ33+MiHvn|#{r zMK5S7b;j^dX~VB8W-2SKvguED{u3g&J^b>yL;+3 zqI;5Z{RH}5_WgRq;^wd;`+o1uu!br!yh1rpB;W=M?HVtB?U*2DvoO(7HP>Z`K^);a zWKc`eOzdp9KVtIFkjT^vnnAfcH}d!ArXVfK!!F!yn^%J2y7Q02%$~~!T2x?P7|yx` zdQbS{^Tq*MP59cSx833y=g>OVS+a3>c#`LD!){ztU08DWj~c|bZ+-j(Y3_g%aM((6 z@`f~AOcAy&rCT)NF)*xZ0L^y*SeSOZKr&M?3u>*iR^ z?YQT?D2Lt>TlTktfxq=rSe894D4Y6;9Xi`q;7 zSKU|W9>=FWg_WfO#K&^jUY?gDxOgE)&)<9wBlf?lZ;@}eH6!}-QSIu5r-wos2DCfj@$n57Owx6v;{e2>Tgxz@j*{g@|d^qd$iANf@UJ4{_`w4QRmN5 zYqKw+26}Uc3`9&oe;C*4zeZD3G|Y|0pE@LOuJMxQ+#73eta1P&Jv&F(EIHBOE_K3! zxOEI!U2{I}AD6PPYNNEs0UuT!i2Khz3RdRDECC<+qQh$p9+8QDe<9}lhf->lRCS59 zap{B<#jelaRVN=TGSw_9h6cKRQ*R}uy~V#xidWKf>FbvgHnJ`)yUZMl zaOUI@nJp5rs{&gjx~cm=cQ1Ip=1x9)ng?zGTphA;XN^*%-PbBw z!A`4U$U+J_CpP4};OBJ6zo!MFPkG&!HNg4 zc9Yug*25}-e5J(KQyb{NIWJW)s9dx8=eXe`4R~l5(wVvU1I>c@QFzn03wPOn5Ij5Q zg`{-!HB~g7v48y^3mrbzg_wR=62t?o8fQ`Ct*3Hj6 z8ZG5D2h+Iq7=kn(Ae?F_I}GG8&&Ex)>B!t!Yr-q*D6~z5!r;;|zDtnTA#!cE30emj z?SGsWvv{;;(wM(qyJwyF{k_#g&%ZMgE7Kb6o#OIW8NI13G`CO#IlN)8F7In-{WO>AoS zPkH%#<`SE$*WSN5I3LVOa~1R3kd{mnktP{}43=-bu_L1A|5VD2`?jfc>3`!a8eP5><^lrU#pp(TzXst7Q)-4^Be!N~j2!h^} z9j2@kyc0s)k=O}F-@GY_{D8ITmE%_3!neHK0V$k~Ai@|q#2|F9 z;umoz3Ciafrs-$qlbwmtKjiWfe7*9`W)14IhTAqpkhQogGNIB*EH7i@dv}FFtb*=2 zzQ*p}v}!t~!iL^W?;X--Mu*5Vz?63$?p)w7XRP6Ms;2EzVVBTHdAO%-o{#dr?uc#j z`g)Rb@!(K&ziv?c7URvnDt0k+57(69c2_%%wj{(wF^m7x*?FzmU5n5VmFILranZc| zKO#|3AA33%j$wq_r7_A{WbyoPSN!3+;xyOEZpXB$9d*QvrvaF7Y$zvDHFf_^=dZUW ze8l^ov-*Z@uxKA=Mpo}$Rru}rd9Uqo|4P*Vd?fx3Sayox%T?$0?#)|k(ZyfLt~LbW zbhPptIfUb7?pr>zdy6?DDSmG>!jl2Cf~MA z4|lYa4`0uH*O|_qon72-t8=;@SmNkhsac@r3U@SJ zpKbyUC18~Rzru9U9wb=k=TA2EuDyOd_}b{=%Q|hbdl~3O_z(vCf8L?W?p7BO100t6~Yu_$RJo46Fk6+pdKuu{%1OaQwbH{ zV*T&A{F04qR5$nV^sGzk>>9jte|as5>3?R8DO`4?7r_mC_P;HeD3SF3*Cn7;U1izC z`{seaC!eaYk^cA9OeBW%Pps}c4LmUCWJ*{2pEs24e=x=T?;9aSkpX=F^9DoN^Qd?K z+hL|^+5aClF7)?f^X2#=Krz%yQGB1j*^?Z-EQ-}w>dr*++_T5Bq}kmR&!P9{p@G{Y zpv`{(I`o2n_6h(IE#lb@Z5sYJmO-Rf1j0Gm=-nC535+z&7iVdy5X0ON|mm#NlY3_?)HgE{oPLp}gA8fDW(ax?fm5Of|$Uj}goaQy^#r>1uT@Y6zT z>KSzH@>-Xv>GcwMP=wz}CgY;m5O|Q^XAbE*w{mlLGk+)H13<5-+&6rHG@lp#w=C8Z zg(km(ed7$!e{)I2Lj@gCVU;-lY9Y&lwyY#kSxAsND~rIVJ^zax2vDZBG14DIU?{QO zE=%27oOdfp@?Fm~-^_TW$Vv6-5Aro`eJFWJbDYqHcMq%&v@% zR@NruJ1T_#v2p2nQ2Sm-+TBH3go6TWvG;fZfwkyp;^#COOz5!?)YYqv67|Xm=mxFI z>NAtG^7t_Div*+Pm&h0H8?<+av_WZCb!n8T0AQXlzP6n?Fw}U*Jhy>-80g20EM^tU zFrYkX7d3UivSTKrwR&E{S5$$yf#LW72tC@SL&|37UtGR7Na)SRJE_xrP5e7x$oWN& z_<_%E!vH$FXbnBHR{DM(1U(O8Y%yB4G}QhbG6$FhB$V3ZY8n~7DV*<{@SASo0exg{k~d?OQcDAu$r);S;d_Zhn6X1atLex$ME z2;VkZf0_Aoq=o zHB`Wde7kK1Yy%YlvP0ubo%;j6BG3<-|F(M`Ea2#Y@S!23--QD^`J8@PXi+NWj|nCSiyEkwOHRcAwN{>hl?yYn|(qlE=`TN$G9{PpbldL`7Y zx&-ZL%q>r1b(q^+a}Pi96vwwblsAHCpn_GP%qKvitz-DSz0w-*5Rlsb#Jl-#Vb z)QM-kov@nwjPH8CsXPeJ#MAMD0_88s&j0J6i3)>Pb4F0Yz!=$!Ea^b!E8|4J7np?%HHpYW3u&82$|23RuBk z3VYyRILn26LDczfJu}ws+Dd$Xgs6tawxv#S(Zf>SFD}VfOvF@&Mo7TxB$2@S6TU24 ze`3Yk+mX)bCzGQFsZL#eCh|%9JM;h>`s(_2|L%6a4m=^L9luJm4$Fs!iJA zFY8}u6u;Iny)cuVHi(U(N(S$yYwL^`6@{5o$c| z;H6PXU5EAc8LjcPQSUhgEnWf~W-aT)5v)=dJ&exv7Xu*4iDO$$$aL)?W+JH!V!*+X zzxYmDYN*b7fM14Wi!VAif0oeiz~2H<44K=eX;ex~I|yLK1Nj{%2Z^B$!`mY6&Le2A z@nI*kK)p{hp(kS7SZM_FzN{hWe#^B1Skl2mFi^Cs^ZWTcW zOLK3WIF8z#+w-VdERRR*Q0#H5B;YK`(Hup>9^CIS>f8J#?h zXH&@MX<|oyKMUIW(0zEYG^uGpOIHGZAm zCElZ9MjYk%Fdk(g5rsr)5#p%(8DONp9HzY)_P2aDol5K;x>%$2T^91Q;3_!%<1CetnIbO*%a6m`9(c|C_7ST?!|Cn{*=~g)Z9Xfbmbk;&-R=Bc z@-Hq8Ge-+ekq_MEmq1COmlpujmzdqstr4ZZ@If7?3W*RT8nwOWtE^BZl>u zDu2;U&~dt)HVQuH9uGX>bfcYuPPWkq7FRrTS7az+9LJ7yP*w6fB!@Z!`X#23n!bxH zLUldL|9L>pCyY;4$rgTF{Ly-&WvQwY*+!1=-jJge6+PX*NZqGk{K$~Vkiw8a+#=hW z3SfsKELYZ{x9dUoD~?fr!AoIW_%vSt0>gUWW*Zu%F!tfiW<0QMl&tUWr#mxKDM9VY z-DcYDrt;XHOMC-f^8s%2D-A~1qtvp`&sr2TsH`l!{Wke=I;x7@i&*mIaX`+YhE#AC zvNC-0?_P9&dV?E9GT0}Go7N@vDYh-~X}|jy(z#_g5_f?J-;R4vm)FcljQL)b$o6* zH@L7hh}==ljDe;b=X+pdVl^g{QfdY`$1|4S0}dezd1cJ?{YT7KH~CNTlKfRHd%Yi< zj+}-=P29Mmm1)>GNpc2p3WF1r8I@I^y_aa(ZfLS={QQ#aHHmE_P7 zrClO+6dTD;oxt$X#I%dVG>Y7vyH(R$D=Iw|@_eP%o^YOf?|W%dnxvQeQ&_Tc=7y=g z8_tn+{U{b$_=ifY-u#Z*A@9H2#{1sO^&*4l`@_3)L;cB6m9mw6Uhu$kU<3DcRXNl& zofdToBxNX#DB#FXEK#&a9@k8~!ck3ZV)xMQ$Ow=jK#E)RR%7$Y1j~O?KuA--zVJOG z)>ecmzH>x-51!ee6NuH!1R%DaiUO1-w*>rP3mnc%;BjZlu z?IpAUdD;M-lVe~<%zANqTw-6dh=TG1RtY}6V%VZic5~6z04zS$O*i{K_g@NzU#s;E zF6h@?9ABQnGDn;{tu@9gvvGdsjc8uCYyN`qB!h`qU}cjyOyKZHPc*+C$pRo_WRp7N)J1mu~bJx*9hFjHDK$T%G!RB#nr{4)g zAATi3VlXF&U9#U_tdy`vl0YHea&i<1ToR$0&~XE)_P=9QRSqD?%uFYBKZDjp!w)&f zRmSfpF}dPa@XI&&c8p7*NBFD#uo%AYq3Y}Dj`;4QqSJ3p<7v{wAeZe zTZVghqsv8=qkSrKSIMR)`M!}@E~oLmG-3l0DGdz^tr)j^j-q=CO!0JbEOk>?>rR}` z@4a3sUuD_4$4l?_=!EQWUgxwD8<*?#`2Rtp>VxbA%Jh*9h%Cn)SWT5D+S#9XySP%xt<3tF(%wr zq2ST~o!z7=Y+}I!k6lZKlP?i!nN4I&nE5U_3`;?i@^Ajdcs7!IZ$;W$s>W=5DDfUw zcKLd|-kpN(a%N0gT)8==X6HjV{t?dzFBX{@UZb&WDR!3DLrRXy>SHAf6Y(jb=)7>0 z{>FGk+IBsmS1vOl33;B*A8R)X!+{5X>J|t$m8B|@33H_=0>=>4dGmM(g}U6{yZFj% zJ!QW#Vt2_)dKwq;LBce{C&2mda(;humEA6Q@_C-uY*-b_7=Mo=ICayM#3EjpWawg< z%38S|66Tf;Kptvk)C%tYD+!kWsWbAN5?omKBmX1ohzwuNaMwkCYQ!pO&U6a1?Q%4} zRk-I*K08u}WjZLvgJDnUGh#DU5qR>;%gFyRZ4@*c52lDkNX z9m$vo8(6c&A&IbqJY4sbBXFpqTEB&!>61>0*;7Ue2Yq!#5xlF>!gx&*Msgz)DWA{K ztcSto!pgfsq$0miXeGap6%y0&8TZumQmwJ$v*VMm_4I#oRBz-MFc|cmg$2#c9jruF zLAz+&K-DE|gfnPeB zcI^i^({^L@N(Lc#s=R_L!eZ_OCtVLuaB8exG@~KSLQ!AJ$2BybmuiJ*bVsW#`{-_q zsSg;I6X(*^uKB#Z!Pqo@A9#OG?D+lPVF)gM1AS?x&Sy4o>=5Pgg9e*0e1g+$Vi7g@ za8l0zeC%*cI*ei!{*2JUO}T#I&rGr>n%)_bWs4asHiy*1BtMqVVMKS4I$4ie-Z|dI zJbeALfB?b1F5^VnGMNCiS+KBa*yBjy1wQ>+nQC`kboLCt#ZNRJ| zBdpdNDV*`Wk#63S98-frVH=K3L212Yq_F-Y$w28@6$W1}&qR>{h>dVXV6frYT&!fd zU6{GrDx*?{;|R>NFxPD_FE0-#T~IMD2Zf6or4JyX$O5=xb#jkPR^|STt6V`e8ooeA zuljayP>SzK1^$`*bUctQ*W=w>}*=Infbyn<9RH*hy8dHZdJK$k^1oDSBkw zgdgO{iIGxOnd$fV^Zgw-Tw_N}T2ez|p}qgusN& zCRnu4-I&GS}VLQ!VQwg2vQ|xGXGMcl?YN1 zkCWv8LH2NqI8&N^lsT)4XDEr$XGyI$pN~snKQWb{Dty9rQzak7%{5%a>;fMt$vz5p zsqRf~XaqvGfNyAU+!heGEJ>o3$ebMJv6Pret;Atot?eB}-29&r)?iAXwJ25m*U(i| zP>AH-TjBqoIPMvN3;rriThxG}*rD3}Vj>Aa_%p>oa9n|Awi54u%R~af{eMP=3Hk3$ z-u;vRufoAYscJh0JM+!ZYeU-KG)SRumEN1xN4)zbX`pOl$(m%Xc;{WToK_&Jsx6Ei zVHXRiJd7lgg|iqx;o9^>csnp;>ee6n7#T7)i_Vve7hQYbKx=+~OgpNnvnIqga7Yst zgc0|)7e8*(ro3_JUYTB3%`I=o;c?b!c$m$|(f4BB^X-JIO;4p;WKaPW;>2#MeZJl( zn`=Gz{l@!<%DvBp>~^6K;`j_g`NGPjc$jk}j16R27@OxNbgjS!E(xP;DO(>Aek4#& zKDx-sxo)9VDyt2JJ_7eQo62Tk6*eN@$>J1Q`YMGw9BqRPc#^%e&GnqoC1w zCJ!1Fwunb3zm{U?^+(wunSBD<3IcUD6o2xq4fJHW;v*}V7|qGSgi(C~oTNhZLU1i-wq_CM!P5X;P{$ zvN;(;ByY87XbL#`GrQXocNpjr<0Y za`VLnDH3?73yWp!9yF2qr_&HH%kY$SDmwldosmovegn9~eP#G%-`I0?=Us)h;_Z5L zT;)}kjz@4Dd{CXl4sSWuyLWOX^YdC*FzY-WSYIjS#AmE#8J?zmL8j2fxFS6(`0Zic zm&YS5)9)|P!L3n4s_&4tAvbzQzN}hEUv<-zq*GzIJ6qpq#i{C%DW$qPl|FC;bZk(} z3#@#OR_=}}?_Ztz$rL-Ed&Hgw8h59(E}ftlh|Lr{Y2qD#QWi1?s4_OV8*jPwLOgN3 ztrCA8R5#H+m7N;B`WMX{-sI6MpoOaTu?zMP$txI5x|)649B*>tb5nB)e#;BFsoCo* zx+cUX-iB?m%L>M$bifd#LH)#Nmx-UYyWw};COa(N5XPYU;djMqvOZAd3W?m2pNcb| zv3W%G56N$o+*e{1Y=Ar)l2@_Au6#4EPCWw8G`;k3NPy_caUfTkPrM7b?2hzQy&y~$ zThq^`k~!K)jP*EXXnGQ&(InqXEg#ghqfWLOSP&-lt~Uiix_3nmww&`0SI%G%X9+V? zaga#zIEUOmWPkdl{TAgGpBnM?#5zhMq%HKnuOe`~yWP!ApNO-5LY&Z+)R;>(O*Q;Q zB=zW+q^+|3;VB+ED!7+LkMoW_NYax#wWR0$#Y~b*%%++MpmW%8YG2Y=)MxY0B;o(;DT(mz?{X@8k1so>~gZYlAh`tmZ$ z4Y_8F1V2eHIGz$B9#7!VR9$mrvb1eFT^He^FXQeXFF6H2oe};m`jqsdy1O$+w0sXUO1@wsLY>Mibi;9JGPj$YE0JPj)2qOz$WJFeJ>HSMW&(YLVt+JK&RX=w z8(b|J59Z#5XzOJVN=T%PbX{JJf$aXhjEUVG_kIk(xxRVBiytzHe3GuKUwXi{x2x+ZHvSHlC|9r5`3aEgW_1&~xT-Wq z!w%lw0i>jAo9y&^mTZS_#Ax?6SlG;f0$Ix+Ux%TRbdsIDktNhm5aYR2S z=96k;ps;1#xxhs4T|;F{@6!!f(Pb0rSVFC*eB641sE<7c%~LcJ<&k>Hee$K4du>FG z>g9dPc*{wZ8kzpq^9ii*uIiQ5d2ciKve?IJ6v9psuDS>6p_4>HA-25EZx8FNU!XOK zE-sIA!t)#>m=)_k%?v^AP;_<~}~tTFoRR4-k4Z!TS@taDB>P9>Z-fVlpD{0cw{NyF5=GskKpo&j&n zxrZUIa8OYOks+u2@#u}RJB5A_yg%LfAHcJSA| zbOl$9n96R%31^ys*Qu7C>FXsUU#e|RQaQs%s@PlKuh+<IaMI9;=~nNQ>p(`akRR~R9$&d3(5DHOUcy}!%kP8A$7P{#Jh>+SZMCi z)CBPW#ax}Zq3zj7n%%nGYQWZ;x9^`pbN4{L^8xSTnon1nD!E+SEsIRJ=*^SOHOLOZ zKgG}BK8anoH`_R?BYus6?=-4zjA)Yak_er?a?ojFN3mIlP-}Q z+b^$@CMj0xdoYAY69?bGfegZbIf%tnbmO`cPzM(t@Jf01eMe!>%6$ZXF+|g6$q9&M z`_=*pR8g)DDp(SKu)Bd3HfOVD7?I)XCdJ)!LfpJz+B%+JpIHsu0F3afW({Ri;%zob zG=Od&RR&wBf8VOc=_k(3K27{H3O6#m7{koSm9n!E%e8Z-f$1VRJvrvsFXGXfvDw)m zS8v@+o-UGA89be-=;H(6smJr_e&E56`E#HFe4kWsxmWp(jT zY{SI(1jxOfTcoCG=yaWLJ`V9`+X$VRU(an@!t7m_lg0#|rB;>&Kd=_*)Bi8|+qMmG z`z!(loaatJ?izC46sWUT(!Fw@Xnf5*#29mw0P!Oo>&zT~k~_kaGOI&#x}JJ$>udV6 ziomki2=-Z(Wtw^Vk045QB<;$Oa$aNvshWE$e(KW~GBKodBkQJa%~aGeZfxC7i;3#nycK+SK!s3J__{@#tW-@ z)Z@#B--%bb;=`D#PJ-0e4IPn`+qN+5WR+rGuEO!RUGO4M`?rdrlVEOjV_MN*M?TG88CHcXL#oiYYl}nq27e*s&Bq>5Y>PEKj@q znoswMQ09W%-$o~L*#~#2u339d^{Xx!0V<=HREI>KnoU{scsr7M`>ZU#%e(!iG93AB4dU zgWpN;(Q+iS>?>ddSEg%%nwKdh0zjYrQ)|~2?DCEWv&K5Yz(ZeT5W-BqS+drK+%D?y z!HkPaO5wx(se2wGWqB)tQF_*LlD7j7vlMW!By->Ws~+G2RpHZ8w@m_?Fy~b*FJW5cM~kNg~xqjyqe>;4L%7@W)y8^@eMat z-hyiXSPg&?Y-?5g$ulCmjPc(1hn3R=fvzLlqD`5sa^+ar@R02p1_S<^>OgTgF`2oX zNGYoRelwu*m^U)6?`5RQUo|2}BeybjHu z$lWglxeqn7!>LLtJiK@g9Ow4Cfm&z;Vd78aT>g&+s^p6Ik=eLXECiZ3nJsgnanY#n5J-EY~ zcp6v~TF@4>V_Ot^$!&pGcshMIV{vq56gKw^wgP*negLt>Ro2*ThKiiQ;#_MBp#gOd z3upUZJxGRj50Hocc3EL%Tjc85(o8L_4TY(YeJ3U!!%Onk)UKQVw~Txvv7 zJ5V-kzH~u{+`}4K9NaC}?^*>Mxf*z+^4M`{@*UWwm5=tVRZP_= zh#;LgYJR!Pq808jMe-i1dRS=Ng6f3h3wGKlBuDYF|N%pn&c`m5s*;W^edA~c* z;R$lrS{!BxzGYfzrHs5Cf-3Ss^jIE-Qa1}sHgpEE+4eNoHK~F`eQTg&>4AsxYNLp% z#U)w1y_VW4ElzXF~NP2u5C!Wu&?696bbL12#N*VKM8XQqU$ z@aVY&11%Gg3cw_!V8~a<%FGcl^f3Kv2=nRb62cTfmhn0&X}eTk}yU31f+ zNMzIgBwMLFOT5~5UChpO(=2?+T$GCwzl82a$MBAlmaqrxFMgfKStUD0>cfF2MRl}m?y7)WgPAWJc;*)nHL(@WWEu`l?bn;g@%TsPj3J* zuJPbJ>s8y?6uVJzq27t0H{3sfpys#nbd^;Rd&w{SIGKH;$;-gwAj=s;iE7tOMo6T- zWlaVQbCZ5W@945w3VbR#bx5g)=wlPJxYnHP>GfTR7kXFlB3lXD-G|7`mc zz#=df%KhxCi9sjfuM@?Fe6Auf-5GBVSU;V{59)57qCaXHw0mB_y|)wjG|3&AN6VN+ zfJ+n!5tXd47429eQsniG!=H&4!Lhg zIuf2$EfJ3(WK0t0>fa8Ce{NcQtKEZ-_?pc!)5sx zoY;DN!J}_Q*O){CX1;m3d7eP_k-Fnip&GbkacH*`id%bm9aIlq>Bu}|-EbhtGsFVW zPcT zN;5%U{IF1=6G%)G#x{#pe>ChJYE2LAj~Y3NN*40b>L^xXnhb37R;k`Y8gn~?HtQ$faC72GJgMakbx=tG*Po?GQtS9#8Tx!lZUcU`2 z@3@+50cnVp9iKH06s>QhJntS(aqS8ofTe0$hWu|`R@DQ!U!aeiP<) zS*iTALuB7GG26rKCa>UYsC}P}&&&N8$v#m9++XxMczh6@T8PVDvqf3!%O+VJvMggf zeX+OnxH%El6f}hf#FGM2-j$<{jHjBr`onA$H(X{_Q`IRSnCp+gDlJv{H5cZ`C5U681p$4Yzn~`&Ks16+7G`6MnGAl=Z|} z_CBfVH1h4(@S6UO3)qWSR_kuHNc?*@kfaWKXh8!Go#i<9n72LJx`jImyn*_hyN4^* zX`6^+>-dH;@nrFP#yid}1#+8b5!|N^0FN41w9eJ%%|^&)@cr+2Iz$VVej|q)$W$FG z2R;z#QtXwKpSAbzGV&2#lGTOWa-HD{|W$7dlg5DOKrA0Krlt8o2 zS3jcgE#=18j1a)`cN|aWT9(rq#D-jr&mOQU0+^Z36UFY^IeQ^OIr-%I_DJ!C=8+Kb z9=?s5A%C%%`7Ez5h?g=E9oJPqjZH)qJlzM7@p`LNUO%RiATQaRUndJPCv9?>SjHik zLy>={>Y8fiX-l~T5muq7BbZg*YLFr4yHc0+*PR9Epzf0bp2xS2cuVxz@lUD%dqCr+ zSmU>hOQyiifpBn$7&@316t^_tM}c3F3kO z(rOMY6a{N$s;Vx_B%S!vH{@CX*HxPSqXeTC%oKMHDga)DGij}j*Vs2r-@Og*anJbI zb3UMyX1eXyr0*(WXp>ebtKGm9xQQ4N;iWkfe~t$#(t)y{m`bpBiQ4sgB^nh&CGOk zZ6M6R7PP|jKl(s@Hn2L`#jU#`x9-cy@^wVVO^1vcYi2KHSC3cMigC5&ISZc%p{H?# zqx5_K`tN<=l=JiEwW;_0cb*fCKC91)(VHNi=&rc+soWt)CI5{b8D!kr{K(d|p<;eU$Jjfup(WFq>bsknM8R&~ELz~4>$Y-9l^vN_+C=W^9-G5Q;}!QkaT8iOk{aG6|P4Ptws^9Oka z$GVZ1t5%fv*wOGMF09DV^_`KwpY3a*ke1R%T?&cL=jfnuF?fK4HF!pxiN` z!#)0a58-Cb#&S7Ei0^y{pMCKCg^nxDfoI5aZ{Y?7rbCzm$nSqoWTQM0IryEmUNkZ< z;VyP`3WDmhkg4OX2W`sfOub8HM(Y_$Wt z*<2Eunu%|5PsKl{xnrb^5NkqTbb_<9{I^4md4Z5On_=hQmL*#PJ6!QChB4ElX`&j? zqHOQ0l9B&xp#%u*&X>9)F|9FeEpnV+D`a&<*9wjQXQe?rkjNL+D1wd4<5l@6L(<$bF`xuE0OrWTM#SqhyWki;^}B==VJm4jl@? zU3&ab^OjqI3ma>d$nMHi$Ul1wJr68`qFfRj2DdlO*=Yf9``>GJ&@&BB5!zW`Ux4a_ z+nIg&-|wdwAW$6>+6*=HYR`IFLlc`z*E~^+dmt{>JGJ}^wG?#0|Ns2${x!gM?oW*m z${t8)rdYs0Epj0d8;oH-4v$ynUVHX0rImY|@1RK;sDN~P%2v8aP+)N#ba!1VODN%p z5gr{lw=v5@4_J$Y&14&-cVueEe|+hGw3u&DiqjmQGgJ9b42o*BR}Sx{M*R$eyD8XD zu7m0fnEhJ+cNoK2<$05Zr&u&sOCi3ICqCPUj&Lw;l{*A9@n$$uTuFiS%S6p;xW2PR z#ytO@U#)+cXu56oi?M2cqd^qy^V(vcJAN(=W7!u>$b9q9E&SpGNHwfrg{ksju*<(z z$iDhSpws{VTVa(7ZKn>@WwUsIN+XZL)Xu`<)fJoM_=UvVFMc5~i+@ZzHae$)AqC5&@Z6dwH)fueGy5((5Y4#B}pb)H<&r@7zg$H1+tnUY9GxW|I zGJNY`FWL;PyfQvdG9G_j+JbqQeWvdmA4aQp7rJXF(t(cqvn+hz{c%d8vZ5Bekuhpi zVYOHUtk}Ta{cuWCFX{Os)y>p#jKeEg@GN+wzHbV8*Y42RxNIL8*{UN_AT+SlQTyMF z1GvBHXceL=Ypf=NLGR^MNi{>vZXFqq2}31L7R{d*iXRkK4bOQFw|kMgz#+|b8B6VPwt}B zut%uwohO6@V9&<2(gq!p(Srsl_Fr_ekcC?nxC9MS-Bq(qodQhHA0WM6<=^WiP z%un|)&jbyy3=B4>TVhlIiy#Aav^MK3a73XTv3gUC?Tz146tsC)MDidU2p&FKWIVab zYzz7V->8jGGp?8I{%!yaD9oklv5HTcG_B&#EQ^K(XU!S=k2>*lVl7tssUqFgXA(X@JH z!NR7J`yCWhcX2MQvVcDWblFojD|M) zi8BVV3ysl#zm`1gcWm-bHWkl_C@^e%*wUWpZ+-uZ9N#MF3Msc?f5L%<%ig@wawbdH zBiQBl7(p2{2-$?QRlrCnKE$%6nt|voU}axYHe5_kUWY&QV(~Ew4@_{JrtQugv7do5 z+|$|5a>2|zz&~8-xvJ@bcxB9;uB_Q+2U}p_{UY}8?IaX`{_UPcwft)2p4;oc z(?!|Nk?zkeml`8uEOgO73l&eEZUK|Im3w!)+_C#96vLbNwj15xe%va%npdvOWc+Su z#eBf3a(ozy`A90&MUgWuLas8e8y^@{GD#MY=eTYBwcANur>KXxTm>;;TG`ci!$8S* zbI@BtNiOq@~M@NU)c!!s-Al=SfvhN@j?&!F!5p#JSc0s$A;1JK(e_MzMc@5f^n_f-6Z&Cviy>usqV2VSas@y=iveZ^xjh3|afmSvkm(suZ=th>p2P{cZpl!;aCEq1%yJ9@y&ezPYZc9C_P!D4S#<3mM zgX+vq+jeZKF5KVA^qCB@yDw+E;+FizBs2I%d}1eoD9+W?6}C1DKfCy-XxLS}=J<|N#tknm!GN#XN94`j<5_|qvY zjs7N;6jRJk(?>!=HfhvG^n*$alRWMyKQXRS&}1HW21z=wPhhr5PbJi?dNQBKLF{FV z2TQYlf4<6rv8c`)Oy$ExA#*H`E$ZV(i-1=CUC`M+!7Qz9(H|5Tl>DY&6&0A)r8c$c z5BNS`8JE!_Ef0sEe+D?zBO(Tr7bWKbo()U)F<#;(FouVyFU*zSH`U}}z`q0x*`Ph> z+6f=n2-wgLX!rsZE?9Iw%cwZETe7QcjW%jx4KL=sh+kXuLA5s#Yj)qA^{)xNl*`t; z4&q7e5?UcTB?A5-&MioC>{O^E)-`v z@riM4=Ees`gFG#XhAEy(F&8<~5#z^o#pA_rFa()xa&lz9=zqX&_$AX9$em#+AAkvC z?IB+?gKNUTfgTlRk=uAxzF|i;Bted*_npdSw{`lE}qJCDYfr) z^N`H<_HNI2OJM(`cp=k10inBba5$xm>CHT z5jT+Uet?K}w4KuqLl&Zj?%VWK1ls$L&Ub-^K$~dexKTzfhcsOg6gz!ELX-DPM~k{? zpHTQcJ*CQ1N)|bu{Qp)#C{02U#SF>%Zj{kF1!kOOH zFhUij@Y+{#_(#@Zp1sX~W>{19aG${wIrERbs;}+-jZAO9j&Q)`sO_ zc+E-nYDbF+7`7=Kon@p8aq(=gJ;u#uNXv_L@=r|qzX2J5b51R~L9Ai5gI%+2gA3(SM!eD02}mMQ~y&eGHpx}o{X zHw!f32onHrXFD{Z$B_NsCwA?C<7Bdtk~)G>7WdKDBMrp?yRFYdL^nj;uId~O-k zI|Qh^e!M|Q^aEAW6kEY+p+5l}-5?rV;3)BRR`Fo)17k^b(Iy@z3{LrNR3WQ3mW7-# z>VL(cpKAC2)S64hAEr85A(-6+@D7d64P4Z$q$B{hct>uB26MdZq{o(+CgHf?+ljh z^Rj_dRupLs&}i^Tl2k6`m@=6^9^fb zvl{dKUit^lWQaCTPhqO9x4Rm?WHx3W$*nH3_AuLcc(+7 zi0{=$5uc4CYwPy# zUME-#)cYJGyu*SvknG=s+sFCp`Wqe2Bauiw_d(iK&UK#>L(Euy>28nubaT(y)XxuMShq%0Xtfmghsw16D$0fF5> zJD7L#dElah1*o<1oQ+Qn_$l!uB~thEx;2xVU}%Eq3coe!M_L0qv*2eF9?MnkazoIq z=4Lm0+brYBIRoyA$prKu(WJE1qBvH|EK5t0b7Nz|B3l0coJ$qMx(tmL*0Xs=7m3%6 zw;)8*M+S^d`0{L%Id2A=g{JvAx*^3cnP~4LW3119p^fsowSTzqRx{OWp%X>c_Cj7D z|7N`otXjgj{}U*H0OGLP5puq8lm`h;X#Nl3rMRo5)7GMyVhS@HLq2UAG?p0cEjZ)v z+kf(L-Xe^WBmfR8B%`!-(M$Zo45+d%4M^NSF^}lHhm-QTYusj0Zy#+I^10=6r^hOB zD_Y^Oq~?n?I&rp9udoNkgdR&Aaizc6CQJyGeFEfo;H})c&biFm$l|lVu14)R@^v{IVKpmiCO7raEIa)q$p}fOhEY zDKH+6BhW=cBm9BF^4>zxcKSk9Wua0&&^yL~Uz?>UPW-9eS;_c+OJ!jN+taU{!h{ow$U(1AWxmw@E0)FIF_j&y(~;Qkk!J^yv6R5StoAU==P*mv zHJDalT^b$ZwFK~}Zvuq#GX;AJ8L)d-xkuWqTT9`zJlzET`}`xqjZit;cztt0>WpP) zqY*&&A*uYr;@RoJO<)GoWUM?eWUd#u2o{&qvO6J4lWZ5G?9&e0Ebl&-9raWnJpuTh z_}`R|{sQAIW$gj+3mCE@sp1bsEu)vRWc3cr`&|&{!IUqlpC3dJ)5|7#naHQgJ-f=i z6s?hE3Tg89XNd^kXS0)qa-AfU51V*UeL|Ag_Z4a zf+c`qtFe@po}ZlU@|?=Ii@PDt=YWVgB48>woKv4??suZQitAsByv6cn&*`Qf$8(K{ z{l+4;?(NO)?EvE3|BY&|r$$8lYuCeW@Xd~mcnts)aE_#)UjW6qCgvz7qBxGfYvTVA^urElA^|Nfn_yRj6~J=^Ir z$LXVE@wAk39_G^Q*t@d`@Y*^>6eXPXH`l|^@n!ExJ@}I$`H4v^<)V%W?)=H-diL%5 z|FS|#FIOR;I>4I$T5eFA|BNDd(6${|t9%TcguhQ7P^fgY0F%CFrhvhTiVCfM)TqvK zR3K;aOXYqoC5udnf~XzeZf*PgvXo&j_g;P{80eHR>Y<1#8^DYwH``XhpJ@iG#S& zh?GcO0tb04)CH(OIivIafL_(U1xiX+x- zi1hqaN)N(w!>tDP$YF$UD*^>|fc~x7A=muzA7ltg^cX+KP3-77>TtCk*9AxOX8pJ4 z745P2WDToZq}WwBQDJ@iyz1c>lFs@@n2KFitz)gVD<=5M3406BvO=aM*v;}RNj&>_ zJ^AF-gPVWV-14SXOAl4QG>KHj2h&&!}jqZJWa)GJsgEjS;ipUP?`jWaztt;E731q};{G|~&)as4ec+RV;Hb-^v40YpUFl%%cYn*)hJ0;f z2DL-H>*_7HA%@hqm-5ssBy>k)W+_5UX6hO8*e$~)3ziwUNtfe6JMM-LAR*Kbg|HrE zLO1PsZsH&F4vBB`xVFDdEP)m$68MXren%7zP6IL@i{mA;ar_d2>2d>hdJ$S#%Wb0Y z$j>5p^p;NhF5Rt;D~g=Iv6f`tkDeCEzS*9$qN8gxfRQ zbl<268Y}wtzK)OULGj$LTrwtMmv-*qDqElUo|Q7<1zrcEU7JzhNNpnoLqfUn&54-( zvBHV?{js2Wx%TPp0BtqCdUG7*zHmJ|uwmabVVPd3o(ehKRE99Yz_a##6UhJrKydE; zf>_nNc=K;wqld=omJ!mPrMU!!%;3RFK4|+LhzOb6uB>R%m@HnvIT{c>`qXJJDpi7c z{1zV3;+KWbWLHdIlI!LRa5p|P3vNvMM*>}S+lXsu!>J1fesNdQZ3X4AM(GfFc!*;h zQtgMbyd|P^(ZqLFU4*CcAbS^kk$vFaJ}ToWHe!rNls`F-3vjvqO(@f&jFVq!5nM>j z@SRQVDcDPagQ-D^8g_IBI%2 zXcg;xO#cY->V+PBI{w8Kd@K7lAiFYe&CmA5Uulq{xibD&@?uK(FV}%2vHUkCB1$ez zBLJ`iE+S7YQ!v19AIr-|^?bMKMcOR_nLOXfMn|3VBy|zi+Pb#&5XMJ4@E#mrf}lt zJq?@cTbWpjq5M%KyGx&&vEM6YVw*!mc-+F*SsJ0U7%=9yw;K^j{#rB&>izRXdK0Y( zje&V90-eLu<;?LDeW4#(@`|@lqQ$fO)QFiy>xiI)W)HH}lu+pvjP?O^!P4r$_c3J)A8Q_jRL+br#3HAz!=+(nPDs$ma8kjfh{I=%J+@a+I0|wOpO{ELrK~ z^}gwLgKBAhUM4)TC;r##DX z^v0a|74$e@FwjX9wWhoCGx4zH>o)<38sq-t({(*{xJ<-9L9ei#gNU7Pe+1ECJ!_%e z?iSuLQR6FZ3dHBM%knWlD0Y+=_+3M=I{^8# z&{YKHUwuv$zEx?WOG9F~ZrJ^6K$q`nHKeS^&Pwp* zFB`I<agXwe!*o12dWKIYBxun1tU86R5yZ*3ryfA8$r^d$dhD>C)tFGtn zTrpnQmfX}(yOJgIt(0Z{J9Sxs+pWO?n%JWaRr6Pasme#i-qc6r_oI|VK+iAkY3fxe zqM=PJj|9Av^;-BWkKq@15Gs%)C)3K$UfH2l$^%=XZ54tFl*xpDQ z6_NX<^+e=Uw(%d<)Pl7=C(>l(@gi{;bI1Pq3BMJ2z5SG_@m##U*389NDkVmSs`PuT zBOFoilawVoUQ8vA^tF1P+d_$7Rdk=y^wt7GaVaL3?g(Op-+lVv_mcG)v%|GM{;SvK zqiC6QO)BH6Bx$GLs>f!41(J8N68bylqx9UV+o-plv{vHfe>1x?QeY1-*~g2LOXBU>I>(Us;aqNN;$Z+h~UWaE3|3j zBxSaA>L}1n=G8a%=T^QyMqGv`7C*gKzyGEY5~m0zT_6f<+QvozGHoIGG1Gb(TYv)C z$u~I~g*Aq^I5G6)p=)T*NTMl!`>2oy)J*bXaphd8%eL9$sG6s_e>$F2yk)<9_*PHV z^VnFC{<0FvF)l}wOEonntl9ru2ot(<*kN0W_CD3%y@A^y;^Y2QS0FFERaUreD!$1& z9oTN~x43=;0p+?7 zug0n%`EQ!~_si7Re+G3Z7X;Sy-Ne|V=vaU>0 z3Ko(#VWSbhACRcITat~flJBetgB%>chwjl6?KkcAgxV`me+60|y*tZ*3L?OoY%q=3 zjhgS5Im&OapZ<=OKasKv03@$qQ#VK}qcl>z$(bh}wLE}Y0X_pcF7LK0Pp2)VbgtKx z(K|pOVC0SOEbE=J8Y=F5n)LBdL6}OdD;JxtM*W?x)~KhRQSp9~?T?(9?fY{Yjw=0+ zj1?7w*rW#`bjBVc@|R!HMEk}!^xHVHz8Dd4afwdyl8h$2uzsJ=PW1zPm+^b2_7(b? zZ*Oj`al#A7Mcf?9WZH?hJy1nDo~eRc%RU;R_aX?)As6W(&P{xm--&JgqTn+jPcyFJ zV_xw29oQKpG7qGNYB1}hYoGhzpPz+znrdK5J<45J>dRM>DEFgt%1W_Wq?9(XMTXgR zTo97Co48Re_>(_wEpeZo-lS)KupfOVRdRp1?@o|O6P7F4IPzA!xjHO?kpOm!7NdDq zy^ttZ62;0J{v&Qf$c23q-VA-vnwj)dK!CTr=@O!rD0F>o$ZTNNFg#{)b2DxS=Ix({ z7#oar)rPpRu^m3mWfftLd%|NLqJ3K)pVZsf zOjV%SPA@|edSO9!Aa~t>)l2q$;5@$k=A)?`3AJk}E?30%cc|!iXxwqCA&coqgJ~v- zv)#<9FQdyv`jecF(_5I1;_sU-_SraFGq=s=-V7fu9yimQEi`5Yo9g&gHXM+N0F$;~ zefgq2zFX+DD$>irlU_PQt%UC~;O_w)|n+?$b8mUM8PN(9e)Mc zi=P5$8Jva1ku~y&&>QfP^U;qa=sO%-cXJ|FCMHYn-1*YADxQC5q2)0mJzmH##FsNb z!;u(ALW?cjHp{o`5#jLQ3M_SsyXl}Qtl*5de4z9}h&upV%iR!H5yzn?Lf|qN@E~ZlW8;BwDzCQBT$O%z;pQ}7QQohNyRAoSYT&(?0 zgPiH@@ta43HLpg6vUS?F*@L2g*^)O3i57Hj*CHP-4)dqY@ppfgrHZ#+^ZGEbTC=6@ zHfNwNCyY&{UEn#2%k8k7T`|7=eLy(P)I0u8$sJ#=6kTT}RFAGCeMQ-KrHj2*>hF8k ztCiy2T?RZ+D@w9ak|Yz)5W6yW_@^f_iF9iMX`G{+Vtg1LF**(Ed%B-VJ4!YRl7Y9o zv@9~_GO7^V=KVwWT3C%(mFa)8*u1TU_fJKua5GrzmX)5OHg=vFKRy&~lYlrP@wRO7 z&pGEgf9%%9s(P^&36QB;ui81 zifQF9Al?`m(R4kI@6bOES%CnZEC$#^KbR3h)|tYucHOA7A}EE@*FN~g1u?_O2PJ_T zr#_A?eEV7}I-$4yMVnLd7Y+A|sU!CBe5sz)WfUM~hIkq;$P*=(r7t4q^ENxel$(3# z^e)}_O+V?MX04Z1?`!N`l9Q9Op4ws$wDWI)81xOk{CcmE%Yi=V1bmWtedeKf3vS2l z3>fM;soT~3jF0|ZV10HgeDk_*&lNcb8XG&R>ZHMF)^gH1PaRMFdu2Ct<3V*`+y@o`eh!S z&3<~2A8|ME0S-;?qMLLYU1mR@%=QPGHJKb@jC)-A2hUa8)A9hY%h#ww{We*1r7o$qr#X?asY z9vRNW#3(GksJ0a(sZhT<_3Tw}yn5d|;8OhbYJE$6tZlb1ty}Gxc3<|d9}lBTA6TI%!$vm43^2<5fH{@+Dn;xp-f6$P8v=E#Z%I1HxZkz23@3-C%D08kdfd5hndEObMLKQ;!vAw>Fj zzp62?3O{z3jI@R6In4|S^?YG(Lw5VN{4t^FPSIHr-?@-qEbE-Fq(iN2%6u-mw7Ic; zUUA6T`oOITA`@$`-E?1X>QA7HM@)LtcPldX^-RGN-o6c+o!-Iq&U|W@4Lxwe`6R1vb1d!I1-K!=fEx80$A-FB0g~;>Un>S&Iq?$?Xwtv zM4_w^5z?9YO2wF2k5SWIfWst;M<(gZI@)Rt@1=TcKri)t6iZ*(CF-g$%S9Ri;#vso z5kZU<1vf~i8H_?`9BW_osy1WdO{39lkKhT01{1E}^XE5S$*Lum%POyM5q_v`d1!X8 zWgw(YIS`_5dLLXI{)_Sn=Dq*KtgWi^Zb<@!X-CRETFfzpkNS45U9CZ^(XcKru8Wvn z^CDGBNc~6UVq)Eu;)X-^fuyNJziax>iPC@LqPp=N?NycgnXyW*7N?cUM?b$r%(@G;2Mo!EhgAHF$7)tGlaM{XkY3k2nPf!xB zmGaXic>U(N|A2bWzJ1m5%tK+;6uFAGX?J$))W)zQ{LPa+qR{S=CXWIP%60ncE?YVA#cJ zpBSQ{RgP%VOkb-$Zg-`^Yuj!%(r^L4^i!c#v8Q^Q94EDY3*tyl?>hq~7@XIQA5UgO z&?VF-eYbU2r*?THeqqpez5Mq5f%ZE+{+5YFX06G^y`ssx71UD9demO+-#Z-DX=eL8Of)AwIX*3R7 zUf;zxno&!wwGBEf^q%XJ=|o8B4IcvOwWPjpn~zt9OQ%Y$>d&z?SwDeMg}fwDW&z^& zd($_oWURSTtV0LeI!2tO*Ato7u3=u7_UpIvU#3Po40HwBK^?_h_|^U14h1WSY`~ zuMC&;F_-cws1U)ru;-kd&&dsN%%m!$*kK+w0ShdD}!9XDosL86T zkELhKV219gk$#EkyenlK(Q1D;ZHUOcWmntAdxYDun8pHpahAk7UhG2UHks*gx}n8U zR_?#71}>%u%?OCYNK9(V6|SyKt7=7lp1?R~8a9bxyPEIK>UVNN*?j=v|isLm@B57O`uT-nhpzl6q6OgE2 zl(j6RY;TiwFO|}9t$2}!ALx1820zwKPo%2XEWJdsI8`8U({&)} z%f@&DaWVBBDwr*&^@u@(f(onJbkRU2I_hY{6Kz!;R_*bOA?cJW}!Jl$%XY5gn7Oo#o?Rr`W?tJaRD z1<bbju89uq-QK&w~pgDHQ~LF z_=bA(_Jl{f9RZ)=6jY=#{lErp?+gG2__4)b4(3BC()HZlHq^R(jsV(vWO*?z+|UZrSj1#RsSdl$7gv1-%W zqgGLSZ>5yjLQu7L)v8^)Mu|{+&#I`sQi>RTzWF_Go^2Ww$uJwJZf9W~uMeotcgRhS>Ix4@mkhB>k zbIAx;aV+%0lLTf~0yfQEGc!82zK*_i%5UiC)r?U4xUyF5Gc2ZjhNAcNS)0Df-@8?; z*<|mY6=8~;tpG)Mu}q~JozB>O@*S`?&z`!H2(jKe^SA%hcq~Sw+!|&9S-6iGnA281Jj??Ovr0JHH(bTST1#tN#iW65Hv_C8?D|! zXYXJ>o#!n7UMw4VyOYiREA)rVDe8rdTg&D0pKAK!2uqo=(-8h{E(teh;a|o@T+^2V z2j2J``_ZyrSXUS_rt7*mT$Yzbn6kMp&s}s#eLGF-lbyYHMt80z|K`_EiJ01R=V!lZ zVe7I_yPYyilRneDp2dV}1s?(ir2SVvFoYoS_zaRbuOzVfX16=2(Ulk_U{O}N><5|1<`5}ll`vYJ0L9*TO5)U-K$JdjrvCU ziO}A~Wv_Zmif-Pph4k#m*^|{SKpfq2Ezh`}Ya95fuEgrJ=74?wFM39N`G%v;8(?|U z--&TLc;6H|>+&7p;P(8;I0jmzMkmooBDUu2SRJ{m5QTQMs4ZR=ePIkI#e^##8|+<@ z$I_f4FyhWhdkt8J$062c?^vDn4z9)=8~yNhwaG$dOs{rzB=>|VkAGv;oJrBS z^IR2svy#T3pEE751*t`5cS~N#8w>ki&IuykScgEW=&VaaZIs|s^zclrL}B92``?q?RnLvnR^EBb z(7Pp-{Iz_SA}(VZy4)0$`Ir4m?YCk2`S@AW<9P)ORUzh^k%?GV7*9{21d`pdheL8l zQ!wUxO(5z1#GU9>kN|1uw$fn30eSnAn4;Rp*#$aMy z1xXgk#lGpKM@Z`R9PruM~Xim-kbUiEWp9^H3j3O)XgPoEF&V?_l6%?_>xC>r9 z);>q$Q}dkG#HC6v50EmCRbL9~{{U?q4i-A{*iA&BEVXv%ei(+Sk`tD)#E~VfVXD_8 z`>q0*@gq)}6Fc$oddw8)mYQhA24;d-P@AOI(Mt!8am$Y}PfXwzel zLneoMud$pBL(#xOId14nBjnJQ-T^VbwR3eB;h@A~^&V>OY;C zj`%*I?S13&<8D|`C0!9u5pS7_vXe&Zccw4WE}=EK<@-I$m}$#@hnp1cGFg-FEyH4L zs;ingu1cGWW-O7)jJqvn6IX5j07O>{-9P29YR=u%p42r{gRc=@lD>yek0qbC_#7Oh zhDq6Pyc)7TF}Q3&tt!qBS~41uY?q3Zx4XPLeLvfvCzs#3g2)cN>+R=rsLTv3W0yp0 z@m$+S>&JQK&h-f?on2KSt}8TAdQaa|(E5uvZR1Hcen%4(=$TVd#}sF;S{vtn|9w+~ z)TenqSpQ-5B*zFs-Ln@WStw#Ko3`_5w|64wtnmE=`c#rzh9A_hseULk}VgDIzv zL*{B9CK!DToVBV|#;c`_HVvfqnsw9~E?V~ee(8Z+x7tp`%vT))f&@Pot6JYv({?5dv-=olW`#n`!PTA^EwznO zG+KNq`FbOCX15^BvhcS>6S}0u=Y7rP^=Y|WXo$cwuQDCrw7$b_Urrh;>X9?M&zz4= zRLVHx%P-%h+!+P21v<88uk61rHaOjF1(Ij%`>Nf1D~GmzFPdDM+Ex2R;d=lPPPBs? zFv#HigZkLUVgawo#eQe}AvQ~jazV`*i%Kha-Mgre zV0yEBa5`R*y~CS@Q%nF#HD(3K5lHhZCvdUc)}MBrLbPV?kQ>771>!%P)ags5f*Q0cJ(~$@FCc$ zSGXoyM0^u&Fi>xr`m61%))Go4Io-gq+r~}?7e7@~l(^2Xdv$CDgkU8+sM_$-?LGN# zmdQfw?f%}e2kd=xKC6BNM4vJ4-${sqJ{SxFB!ZzGWs#lOkfJ$9p$C#9iEci{>!K~K zKO7xHwtzx6s&8^gd}0aEe6oPXV`0)NDs3kWF9`6ioO82Ci1N;~jm~)1tci%YlpMI< z6}Dn0VqH_|*60q&r~E1z$X$ym|F3=YDt)G1Bz&mhh1Nl-D(ur?gtwv>rc3yN7jQG+ zOf>h<^7tK$P+0rq(5Bu%+xN7_`RK=M^U^1;e!Aw^jCa&QiL|ynco*U3RPMB&o-3M2 z3cB7F0a-mnmr@_HBmMKw6cQZ78NB2dm50M~(qVK|zOE%TdFOu_kBSW)Tq`;o`8YmR ziFIH8h{?xPFz)s+_}N(UTtr4NFBbZt?g+0)6|-5AwVAWyVkk2 zk`w9qHw*dne~fg5SROiYK5X^mUZh{R{zf4CbXFb>yoabywJM7DCM$C6M{qR08Crv^skfBSCQY-!{ z)0{qpWH8`ao_#h-M91%#weiVe3UtzOHBlA|O_34#!Pr;`#ss``>iX)Quf>_hD6KkvB`2mrl#T zgpcMvP6yyvVDg)EBTy5X^+ytAyv+EjNaz_5O_8-bS5c$b;B*bmFq!-z1 zd2<&(7W2p~&Un%c@_7`uu#xM%_WKoUIUo~7MYO0q7!|wCVuE45ScuG?U{FOnM=S{>XRFkCsjFz!gcm{6c7fMh3#nX zxjp_l;OBfQgRO&@>t-_ZIQNl{vYkq?#jogwc7>?flpN?ZJOxQa7)3V2rde*cdW=iSz{r;zkY3FFYVcY0c{gpAHyDju z|EsEs6mmC3rme?1)!)Tjm%#NqGo;bz%F7GM^gxSo+q>g#T30X$*SXt?)x~=&swMSY zG8Gt$o|xSaTK8?@m~F|yl7nqGGB940+viFy&6~mORPo|Lx!V(4+89f|im6F4N%c(4 z8KeA(QG6}~_l+#)t$-D)z4T9Xt(a|%JZ38=kFrV16P!^J^}?3Z)o@bSlL(Lrx@I?A zA;sZLcn5Z0NDZqUO@v zW~@-%qg`@8ZL@KXewo>y+}@`asK_5=p|(njZrOKw(%7YN5ug2L=4Onj@5)Gh4$~Wb ztUlpDrr^Y^fgfYffDs4uNl_~&(VU`pcS^-%XpI)Bf~x5oSr)*RY6ZOYe9jM!$L(C+Gi(brz_4+$-?Cl3w&vW6(s9IeS92sfR6qI`m2)IaHb^z|h1EjXTe zEu#V`b2SL6#SXW1bAmPR2}VhR2pCyH-r8>EPH@@sJ-GN!IFQS%sK@}g&5{O25HQ=H z5Xeq~Y0otN#w++x&kiaf1{Oq?LsR#GapECM?MTscH0t!aOd6V8FYJia#jVqmD|Tbi z+RuWcmaf6o(aYgfS=_kQ+bgXomMpcl$ss>E_6>@!NOv$xrieI%8%bD zQDjS*^s@==&`52lr(K^y+RKo%sFqK`oN0B{WF-|qpCu1R$e|$^$ho}Kc%7qzc8s-= z8|-e9k?gL@>R~XDk|{0uB$C8;+A!yZCZpw+=caK2 z6R+U{vuZ4N3EvElQaLsV`(4b5pY&6xb{0me!MY+S_jpd9)8b5)6RB0nhJUDwoNzER zDA8a72FupvMunA&ijepOm}Fb{x4*lC1C6@`cBP$UPwnbQl(NBNXb;AAt0nqPC9)fl z@SJ)z*d88*fOfPFU*wm)&P;Co*dtfkV6?lmj&i z?+}lMzU~jIoqhda0Ao!WJZ~KBAuk_Yl%@9G3GE=gL2ZlIV6IeNV^=h?>B)=!BQSdt zXExwPre^uVe$?%Z@w}eDkIzw@C@njCb=a zx2kqmhYSze&~m7UVo!RMR!$hU{16GYVKptK!zUw@>nxM2lV&X&E`20v@Gc?ctt9Jb zcJOZ#*PbM&T2566!;o4Q8O|oZs{)bFuYkOaTs;PZtW7;VW+}gZCOm1zNLDZFcp_uC z1b73)RZf~+lg-=HJkI>Lc$wJkC$QYw>uLMnER~+|L=b{sR7i@w(#o@>fD%n*%B`r^IGMIMqHG_sK9)y(6Gs@npHl4Q!qnkGyzV8W!i1LAy6 zJJp*_)j1!odvv`qZkrZ+4I+a{YMYjelrn#|riuRpYw_A1DH50D9vspYUIf`gwPZI* zB%%ipvq!UqRIx06MKq7SGxw^>m~xF1EWm#6=IqMgnFtt+EvASL{D{aDQXG=0?Hp4w z(fk(l{?(W3%0Dda^{ePuXKyJ+7?05QW-alKB9--AqsF%e&}L<_m|iVa`k*^lqbx4P zgM_qBg_Z1`{u;bJX|X?P%CNtKb!=r7xdY+E)hJWF}Ekpzr3R(2k6$ve=jgDdGth)eye_q`CK%?kxRDE0}q=bfj*{ z1hV)|-zt&##bPWk5uuFH;#~}Lo9Zocra>57aK`ln2Xb#+1&J!=O+Vr|y>A2V9-!Ta2O z>i*)A5nN~P!OcR=Kl)Ua65vllojR5anrPeeaCQrMmBQC7Y;=moIQ$5_kXO$>eBKPv zq?N_W&I0zZ4=QU^r+(IX>E%_2v2FfP&a>QpfiXZz#XJ zZndn%jkism7APV{3sHr=h#E=-o9wtqnW0*uM)F0xqE?tVmUZq{8P{R{eaKICzb-sqd^ zI>G8N^0^X0ww5nblT}wG^%@2y;C%7kYV#vRhEwI@S_-q&ccVDBhT-Zk#x^+z|2~3@ zl4shyS@j(2q!jH0tz28rK9m)Fn)SrXqEx6a8{_0vlP_S+=-k!{|CMbcSZY>d)HwPO z#z(K4Ag}f0!#lg>sy&KOGWF?o3EYRr2X2p@Jlv@q#)KYAIt3mwDm_veZ+o<7q1kTy zh40PN_iZ&x^6=D%rcY+9BQK0KgFiFc^2V7k>bl;f!Gs2f#xDnV1{A||t9bG%Y+SL@UW%J%n(&F0b!3VE4a+sY!XHh2He;f~9)x*m zMLI~<&Mo0SRRLA1DkWyhDyu>WBTCvn__atdiSohn!yJhRrEDv0$)gkE+BZTAUT;}dkecd$PI?jrBhCQ%{AMgr90diKcHOU{6W`0{o4qwgAQ-!)Yt<~1v>v=>} zaUgZo%K%fJAKc#9e63tBFYYXnC8ES0F$$vyH14H*g-i5%K7Y}F_Bf=YUFKU}e{?@r zaO#%sA-|n-4*o!t-j~96VBto;JueI$L~~d-#DJ}?>w$W_@O97tzbL(Nm3wv0y$ zEnx&Fn~tu#cOYt~Dn7~C|kAcKRBy%Azl_u1_O`-bTgX8Zz$1DL25X5dxwej#B7)hG`XY=lql>J7#-!4|cDWiEXRQG@uc`Vmick2lx7&{#{&f zn|XXH=E~MqQ?qMb{I2$eILG;4~CZwgIF(j+9xbC&ikkB=kH>mn)ODzB|m^ugF4bxl40-c zF0*%uJVaxKDM>@|1uD|+vsvq{POGVCQv%r(^&Gf&@m&`=#~UgLQ#Bzmt-=#q+Xvw9 zNgr`OA2`;AMHrVwy^t)^u=?_X13k`Akens}_j53#rD!u4E@~v0c#Kp!N|7l^N+y#K z4Xs|Dbx~Xy{PBS)4)u!Zb+PX7+86JMqw2ob!yAN>XD2QrR9X>yisU;_typAk_2pQ~ z^JHSt9Dbxpayuny3?cHDWWzG_)pi#?D)ci!V3jOSYdGx5gBk;{CfyU;QkHFAB4!qv zn5|jpj%DuqiLHHK&4KUUldtC`JoWC}gz?xVT7(#OxglAP$&zkCN%hK%~;{!FXci>WXu2 z`j&*-s8|A1U)jFOc#-_>AeV;+A^_sm^r*NtWViR&%T%rGdd9+sgT&m=9TMOSFUGW9 z+v1WGvGZmSyOGB zn$GRyR)7m8_EY8UWU9rqI_7r5$ety6{>B9NvLJ2Ogn^sU$!nJGDLs#v5a;;|Db=^} zB14-Fl4^c-6(Mw0&$d4V4b*Y$s=0yn?X6gq@U+{%COvf&hA8&~Q{1;DBkpQ8GEGl3 za7zlc(XqJb88!^3jCbvA&%nZ2O?3)CYw(szxdzx9({6eo{u z)jt)?^a6g98t(lU0~uP0J#J*0uI5000aM~P6$2BGBoy-0YKLz{e%|_sxwkEP7YO}) zA~887Ng6aVn(pUNk(gaCSb7Mr=RCj>B3yiFHjd*I8}~8RfT3J!n>M08dCJ?5>C}+g z)N9fZ1@RwBb!W*pMpA0zz*lZ$z9b??E&G3(+~yhF0&A;l)r>t2$dT|b5Y(0#r!sx5 zqr#&hgd>?S@v=igVGt@Jb}}0o@Fy;~x6m^~#kI*M)4j(-fMqn`sUuP56?LSCsARHG zzv-igi;8m zaPhmN(y+z3i_zJv79b${LE>UkQ ziIiWQAU=B|_aq_IYMO;fc|dTS>^IP41G*`e4cVeKF~O-CIA7;QH`$BM=U&3gAJ1Jf-A_!-=|jAaaFadbL0?;egjkEf$^$hM0I?t>$NIuIheu4N&@vQ*>nC%JE z@>a9Cle5{A%sp+2SS4V(9)rVY+vvl5S*WrPv5)d%ZI=k5B^OQn#z0b!#el~4Ycs2( ztmPA4X=Tpm*yOG(FX8%;^VL(tR~(T0gtxB@k!<>|THDCjC@BW!=maMGFztVLF3$hG z?pf!CKEQOrf)^1o=P{sF{GSLqRUJBQxZPlzENBSo6+uWo?ozN)nz?+7M113=hi z(6hu<(TyMCi(ISvlRWW%_j6YWCdGj(3W?jBk5gHks(ZQzkAD>$RQP7Ke!wDO$u&}r z&$=!NxExQ3NnI?Ja`RceX;eB|EaUD+b$fyNwp&R0H5e@O$?BNHEld>Az>WBQQi zng55;>iFH0gs90sWVIsRS_>VA$ZQwOi{2+m4jhud2TbLim_`+PO}z-wbdW(QTPpx( zm{2=X?>1f8RfUrP;5(tsoc`L+g)QyNq{A`~v8Mi$^!MN@=5zFcc(wGeAEdj*=CT@d zd!$2)rr()#(5FbjGx_OXFYOM!%gVa#IFAflnRm^Gm4YRMSXW=Hr{{#7ONt(p(rxzi zOeRJokExXj1%v8%@z zAcdAIu;O0^%v4&6bWPmr@%96!ey{WD$0An-&o{y3IjthGt6RtkGvPs}V5#Tgp7NuX zCvipz{e774|IJw>-XD4=hjf~3VregG?44KCmmYUSi_k!*iT{6N%t)VfT=83MQp-lq z!s@>SN~W|ifUBbFRXAeb2)gvZXTAHII%=}Al`bfrwG+6#GyZwWAN3nM%K8u^#%m53 z+-2!Oke_*f8_RRGNhVVrmLsD~IO0;$O1tfT-Smckkv^-?IVhX>D5TO0OhR^*0GNic zjw?!LS~mCzzhYBkj@@y6W~YnhnA97POvy;kce~BbrA3OmGKyK1yYIHBk9PhZnz;U^ z&aP^V^r;GlZ(&oQ>KO1j7F*y1it5diN~b%q%_p?zBQXMUIbd2uchA)1#;60MiuffiUhc*uZ z_6whi3Dk>ODYFB`HhA6HM{80!C4V|y_XtEG0gTunbWJ*BqGRAJgiO(Erek1$^4Vk* z5xJitWXD)x=>Cr`H_Dv(eNhM2x~WrKXi_TgHkyirW-I|N9BWD0Vs+H z_$;xTN92jDJ%kb@SCX%JO%X9YfV`a_l=Ta-{0NRJ$|TIHkKcy*Y9>z+l)!j30>e2g z6z$~08urUu}#-$B2mJwi`w^c|`B$Lpqcqrv)6^ZWH;_W+m7r(Nnzr%h)4gz#AW zH?&jzIIabuWFx6}z^3TV=~8}?W>88j&fP#HDOiYC=lG+#ea$8gVYM`zTH+a0;gls* zl8fGHKxAr*u&f6MA_e|}B^{`EZ8ID=h1-QQp-ozNR*L3OKmGNPODl(d8v}y4xb+Ip zhx)e6RsRF(b740S1P)lQn-3qf-U!0iri%4REZ%a|>WpJx) zTcZ@vWJHkr>d&fghIGQbG^ZL%oJ{Og7wOuAH5Ud{9_oog3>jv>GdqFvi)>~3N!Hs| z(FrRPn`Z&T4;71Z47|Slp88D%lY*HUT+X_1H#jW-qK-oX`(+K>OCjRrcfl!=C9O?; z)a$8YXsMUl5cBELpAmGWn?WY-2OCygJoO&Lb!Z8c@}cY?6LTJ{>k0xp@@r{N++$T@ zfUeOWdc?qV2TruY8dTk|h*@e=MRv zDe`+O`yWLgacfN|Lq0*oFXj_nCCy)`*`=kaj+De--1)`K=ge{QTBgW1qRbCw#A-+l zSqxJBCr@W!pps)V_(hF!l8Q5yK)5}Lp1&JkQ?bEe?5AG zt{hncdgmK3DWNJqA4GMUPgD&KMWl$Nidq=6aFRMNi~GVflH^3c_Lt>y&2zp`xhNVv zaXXdT@>PpJiM79TntokvhK~qVR z%y1Bw^5aq#a+fqxeGCAT{aKKpnVkk0*Z3S7Re8ASHy_l;U4Wa>e@J^8tz(zBDe1kF z|LO?+_sw{W-9aD<({Z-^ERxXs;P5ZNUF4iPmNxa5F%8L*Pjezk_%n}-?o*BKXDT$x zd0-@A8Mt~)2`PU%32#lLM2jZ!d9fBnBf#3wXz5=a3fcOa)sc-_!P!NSFJwBL#fEGt z_drHcF*6foM0U?1wKZaa#%Z5c%YMo@SLfC@p~6Er%b{F0ET&F;pA*%Q8Y;U{=B7vD zY{M8{Rrztqn;~6Rfzh9kdM%1<{$xM->8i~A&B7`|IObkq-W0A~MwPO0WI?)+kUbGJ z{|J#OUG-j>L?duM-F0`RNjzJhS}Qr;cB%L9aFHmBywd$cEr$ZA`jni=!3KOhJbIL(i&$56m-?S4Q#_PHobjUviHCW2PT~ z7Dr(qI7t5Xq>Ld7Fxy5YAQ%fDRlxJN8VQ76w<_u|j5bkzr&NcRalPJ5sE1~#n3P!Y zXUl(v$vb8J7X5Ia363cYDdqX%+lv|mE8Lmkf8nBZfdFQ8Kd5o` zVAHhgKia4t>F*~^Y~-p`&a-9McLfyf*J_IY?Nq?e^AFTH{|}bb{=ds7@V|NfAJAG! zXn{~Hxe#nQv(khuru(oO9A=nW4ujP#Ix~Cjw7CCYAzS$v0NE?Q>M{ciI&@v_d1`bA z01_3Zv(nqVBW$OnXcx+(3=+W2%ug?VF zpRQ+j?PN#yzb;6_1{P@hCwk8`JDo4OgqW`3ImXHgs<~%1U;Yq zx=7QO-0306AtnCd2*|%u5xs(L{2IEUh(Sw*loZ6pa!Gd(sw;zy z(k2FO)O*nntuA`|0!O{`)^%=CIs?uw7n=faFV{Va?bC3v9KdL!j$e;#rL2CDXNvb7 z4cfc~x=Iz1plU5f4;LnNyZ5^LEdbx754cOVtQ);OGl~KDLH{II+}lAa^$FY?8&*37 zx5uRaJiczp97$Y{9$k-me0@dvBLGTsjb$EgQz?aYbz?EBw?L&CrshIWat#8gq{rhi zvOX7Ez(ce)>-dvxqC2`MBlnRZHK* z9r`nWfYUhmR+a#K*YoR~rC|8mV}iF&r2+jEeQ_raXziiJw&KS03!7lb)gh&z_+zl4 zDht_Qx!lc8ALG9hM#lZhoNC9Vd;A^|^jU}eSE%lrrEcQE2Z$X&Y`sR6E4{QZDrza5 z9s=-5?Jlr1-F3A>hcp01@0~0;>!Vn=y2#%3Ry}nC%^!Iw8$gu5-;AHW++U!dg`fvSk0(B_|f2OnS6g zNd!d;O~%)s+R?H6wG6ev>1Yh{b*xUbXw&8@`i2yLIqJBT3z;6K+y-j<5Ra9kWt!(x zZ>`RKt>(1;U`d}b0Q~bvl1gj4nv100hi_!(aHI!jrK zwL1Oq?RKr>BDOU&mA)jiJL%lAtzmFbbL}$mB7c8~d+}ShDd~2zPp}^QrJ^f=t+yWE zpGDcTS@K!JyOwj^&4LD@*+kbo!;1|Yug&2VRY380)yMGHrT%DlG0luu=OXXuGH>c^ zkn3s%t*&uBtuIGm|8WnuT6);)%EfONn}Xf5Hk43vx^H(;(sp2aV8Xw_xmo!m)cJ}gVnHc^3(h5ozE0$O1QRD{NV_9t%#d4V9bu1m} zQ=>}0q>2wG{_>H^>scUp>ag(ZBn9RzHqWW1a>9up3o{)BF@R;yuWQWrLLlPuH(1J#wR07qz|y0{P8j1h7DlR z!HIhDYAiWU)68fw5i0Gzg5HM34{76JH8HR(ZVqZ8Lljv(^B*kxmwJl3c#zq_Ahn36 zF6sHl(<->0c#Xb)B;9bNEQ~MaH%-jrq!V1mi*K9)7|4@Gt%anC3^F11765no(sp5o z*8*lWy(Z$t(qNz?<69Ne^wvI0Ne-d)Ru_LNY_}jpq&4|!$2-J|rMM}mBnegK;`6{d z)ACxorKB_mg9f@>N681!ocG#Q6}Cibve)aRq*#8eieiOM#4T}+`W2Q8J>LTCmQRvy zwypvA=X~Be>e{yDl+CxGGR#QlJYbfl58KEp=5Na+_8^sjYa6fJ)bK5&c#+9lZNqPC zSHu38EWY;L&gfEYQEJ}pCutKv?Jx#c@FNFmrcq34Ro$=SO58D43kZ%=YIVUCEuEUc zAI?c_6=OlsN#+M{jHKv$9Czy5xGCxnOcCs}+`|T!#W|D3Tf3!iE4@+c0um=|uUn^+ zN1E=nI?{%oV&%x6Y)?&?iW~VRx;3Igf^J&aKNVh~bYxMg>`0BbyB7Xz}^yxiDuHT4&L1PwFD16d4> zYeChb*6KQ`=}jtws#y&EYmN~bN74gwzz8FVjZoy3SEnM-erE%ai~Q+`8Ok*msM(;} zy-dbS=p|s6+wd+MqJEouh4o?tjJ2!~TUl&r!GxM>J=VEZdH_o8)I z>7FPd@8g?btu0~WOka&GAJ4Ji9NKFRb9s9O-2TazOI3IB5|``>>i^WGsU$lozZ@9= zFCmid`{db`(Cx?Ozu8y;rFe?qWYO~8Y|KbMu^%s0=2vU-6Jh)7@b<3*i~7W4yK-U) ztAld7+gTy7k!xk5x$U($)n*D~QBlXDmSs+oPh)pu5wDNo($kV;;DRt%k3~z$emy+I zp3na=#jh=vCgmhmyWufJ+ugoxbRcRqvs|PQ!R40;Ji%Ya*M|ZG4&$?TZQ?w>7q}!Q zWHggXAR+m+ix>CEcRS6@qhQxVKtqc83*N1egcFlVf;H7X0Tou;h zTcbwK{!tNn@3<1kp$^kaL%JX13y~d|BGAWxx2HWV4jXvEae2JjOTTyHR60+qy}cBUD)-4dcFPJJIX1AAi5i|(_H>WD2YYM)m;*wXnGEw5~0P6 zstcJL%`6m;MdmL8^aeQXGO_}e{zC%UN*YZ)0b(SB17>(r=SVZr-U-FLwGJ1 z%eM$GrHt_RVHCO?XTQe~^mQew1~>ZD=@FXOK#$-x&n`~LFTh3>NTaAgrI;IAC^RDv zl5nQ~?(>RDIv2*`pzDMB@3>FT!u^fl%-8NA+>yrO>|?N<=Z%I0v5nH=e~Yy@i}O9o zN;*J<)~=3C z{>cTO+BJPL!M}AoxgbS*`C==v_Jt-KC(D1z#t~9pVr}Xe!2n!%GL$| z=Svs1{&00O$g%c$xw4HlG#&s-{QL%(r;Plaa+n~&0-5nC=y90OBB`dG7&Gd&%%P8}!GvZF#yKtZl z@G75wN|h;DvvJ|8L-*f#+hnj=!7WgQsN?LkA9V$DO$86+h5a!XGfJy{l~2C&`X6G_ z+vk1ALhvisF`0ATG1cVbN}UUQ3aT{Eu`j{jNInnN%9c2XYHaU{-Ac2l)i1fVKkA%& zyrICzl_|Gzb*$8KiC2(hKJ>0rabU>|h&=;Sbg6Y$n$Zt19&B9ATe|-0 z-hNV`lc(f2&`kk5)V|#z3m-oGg2TKK{jV?i?+3dpe;NLnAELWYaOk~sZ&?^lp!ykq zRg&wUOX$lbO2B`}WwhUjrj;3!h8;%^`%^;eo)+6q6EXC|JQET`Js#s`)rYgk4ZUhE z=oG)(PZb!gVE2j`1r#lT4r@yf! zgrHkOhmc~xp4&UY4WUm|CwD9&2ZQmC0fc$?;|;tQo?hX1%cF=)aWzZoY4y~)9@!#1 zpT16*Ov}GU**K#CJYWE!9VfsHWw`}dF8Cbv5q!370N^d^Wksl;1qNL7FCm_Rqcd+5hY^RmG1ETive(R4x!f2+E<5O(ilf4VaC`%CGGfKh z0Au2KUd#Y8!P+!mlAs(u@aLQTG44{&!iBG7uh5 z;(ClCZ~-P_GER1P-x6z|(&b=O|4Csbbb&UQ85%E+Bd;Ul(%C3(sSWhUOb35VuuzFZ z!Fy!xh_^(}8W~lvkyuaUYMA-8rXZWt@BI%z1@k^RUix&e;bEISgxU+3HLkwTu|`S_ zU`5MS0g6Tg`L-E*L(bF3W@ujpqB;br4W>C?re1D+%$5Jg*-|FsHE)@6>pZ1*+sJkK@+hZ zgZlX^d!5oGsn9(@r}^=a={S58CsOY}JHV!t^kiW$uf43nwQ_CY=2<`Eo{+&vEqKq* zG}}?c$HOCcWLpWnB+4IeM&1laJPq7yAOWoNB$_W8C70kEE!#dwd}e@SmMQ*5aV)kw zEn1My6<=f>WKJ)E!51rvIy=_eX9EiVE8fC?{$-smv04KR)<_6410=jyW)Ef_gr4nr zqu!Ww3|c)|@8i0ZJX6BIG}mgKk_z()`|*0e^d?JPamhM~nn0G}a`iGnU{ea;xG)0z z;2~eTpcdehO?cY%eYwCFwyQkQpHmE$DbtsV16bm!IE3}!r2(nY59ThWftQ>w+pF7n zeP;a8iz94Jp<*G>z*Z=JR90!&g@QSBRSX_Nb4jia{Got5G$T$mK6}sIc$`tG73Ild z2d{&T`YIWpjojr0;CbJwH${VQ!j&Vl1rIQeHs_rXP{i^Mqr}*(OujY88~0(ad{O|8 zQZOZg@iyzBldRdwvwZ4NK2IuCcBE5th8%9mV~=Lnl}MEE^XBAUdlPID7LM zZeE-0*2SCq@F{jVLjbtUVAzg?%5J-%be%^Ai)9YS{QNz=RQ)(^Q4Izj7TRoyRWui} z!0R%jTUioJ@<5N0>^!gWIby3onZ}RB+>_MY1uN0NL$8_59((ok3^MzWt!#O=1J&*ZzEd9!7 zpzNyONvgM^_2%v1kRQtNN-f8Q1;5E4AbFJ3`s@#7=l4MQ!NKI$Qy17arUJB_baORM|j%k$(? z-j8l{r(qDWCxHMeYhAu8+!S}N<}cflXt&$NB;deCJa6n~SVmsJFc~|FA`)C&?MDjZx|^R6yhSPz9m* zu*R(#X@&4V9#<+$r|jk|Jho@4${BywikG$$&8v388#)`D4Of09dvQ0X$xA#nP4avt z7$=eJ>a&#>n%qU&x*bZa%=edpa8>e7(R7psY%dut*_uKFsPlgB)J$>A9;i4d#zK_& z&fGfpUrj`h9wpek2{!;v5kemjus;(-5FCVY&meIdyJ^S`7 zBr&``;+dnQIXhvz$Oe)d!n0rXhb?deB|cUejZJLk_PqiBI@NHC{AI&uJKM|y*xcnS znW8B4c|u7*b@(07YW`&ga#gGIE4T|E=p0y0$5)O!@UDWc7%r+B3w>PIrj%0jLf<5E zEfMw}mtZMpbD&48Kd|vvBN;W%5)TzFG8AQtqcU5`6}F0}=BrsHnDNXnu&+Z<{JaqxCP2) zzb8>xf)Y-~NK;RrTQC@pY|x+2&JFV^?9s^dZb_&QU})^!F>`GJJFXp`ALuDURD z^n!unvGd?lt3}v9s0N`NARdUOq7r>IWJW`0rF$tzN@Vrh*MnVLvPodIU-3zJpKLiW zcacyxMAXOdEJ4-ELN=XI^#G>lU=hdjoO84b>zcA!q8+}BtTznliG4_2kO-+lxiH6Q z5J#T>83t_9^)H?zd_N=VAsFia{kyQ%-awZcDcWPeN^U)f=m=6oZ0f8V}iZt2taI?wGs7%9ZpF6v!;Io#QlGT&}IP$heE`>Pbw zq@t1RcGAAC*TSOtP@x-xgGFpp#es$$Uaan!IGom=^tZ~j$MqpT-yEyGNQl%A(qc zaQG{{SE4L|y?}4*+05l?UtuELTH6MVaSUIBA@i+yPai->8-S&68l}f6+UC_nr$lw= zLy+G=?>G9cM)w3>gsVasfa4spXW!LEct3VEF~X3{3ZwH6;A$60PQOPRDrbi8Y#}10 z?D)#3v2xmIXtrFGA@N5`0HIC@lr26O^iG(R+9fy;cklp|8$y=*Gnoo<=mtpAJ`xSi zBLs8z4-J?x9R-U9{{ZM!Tkm`0n$Z6{!WJBraY=nxMaUk|2Y0Qm6S`#^jpUsYG9^7^ z_@hj1+N*l&EqdfXQj=Z@mg^Wj2CzyEmnH;@tcBwCyOL)XbgSqAi!vF^`@-WZ&sXJd zqyC$xS`7U3u&B|SK~}p%+6>T#X~oU^8crSP_UFMFX!z9&d>Dq49WISk|d z>pCQmoQ@oB5J3}W}DL!rC!wY0i^$5~!1O>?BYls0bVB zCZV=pE|BbMMhaM)?nWOcB&@lCzUAS5bO;xz#Y^6SS-k4CmE!mtwbJp>K_qoGTn*AQ z{uLbfWE7z8Kt+q3so`^H)#igH13ur0>bc=_z`F~qubmu#U0cj)tGH&$?z%FmggzuB z-UXvw)za^;?W9tR2G2kh67zm%sY2Y6jgiK^&ae;H$*tNs>Ut&g^T24xMxDs4tqYhJi*yVMu`ELwpKI(_ekNY#;FA{QvB;tS{ zB!1`b$)%kCqYv*Rot|}Z4fM>}5TTBdSuY>u9oxj$vr6e0P4g;UUMi8s4_fm*IvOcKdKv8S<;CrMjYr&q|S=<}X?efsP z2OL}_GZ{p%&v=87<*N0zke!AYCr-bRKMEG^pFT`j9& z8O=tpmdzhR8JN&>+7>X}D-D-bEaNoS`3Flp8(HSp+{-ut{yo08^8UV-;5356JR06I zavsOdAy0|0tF>|IV}Q++d{wVX`)+%3dbNo*k>DYLdIhcs&)+( zch;ZGbNRl}lr1?^zxevA5P&xJ{iQi>&x0e&wsev0xg&Z^OOw(NaOA^5jL|1$*4|;x zg-kr;@{5hyUOqHhc|*U`I@nO`bAXq%N&H6psp<$mQq>eQ(e1{FSPQvx?%U z+S;A9oe~|v92}cOMeQt&$=@RU8#{)rg+10&{I?GTmCBr#MK;`o?8W(LX z;=_w=Svaw!*P?{x#AkJ14X4MdttH#E15{~!6ov3Jx08XQL8YeZe1ge?{A>=~sS;B- zBy^)8NZwbM;L-6S=^=d0g2vf6L5_+2fpW#@V8vkU2u|X$iNg8LiM#ydK^p_c$wqB< zg=Bs%ukm79YM#~<25B{6t%b8Tttv2C<%mUw@Gw~p)5VsKU)*|g@poxyAEi{+bqP7s1Tz2{ zsD-pv2)NAktpSZ0a(l0yi5;8h9%QUhkq^Fq0Oh$sM>@LUu z=m;66|A9QOUg%THATdv*UPx3*N`j6dzlkAl4t#XfEVHzxn^F+p*k|u^0K9ZsjnPdlR-@=YDFw2<-QId zy5HtAgC7qHI{Y`{73ElS+vp~>0<3Qha)NS_dq4uih}L@0PBTO&N3GST zL6~U$=#p2|wBq5}I*Ixqw_#HK*Hg#BU*lR%i$YRap&`e28^f>PA#54^+FG|-ar!*Ow+RvJml^BZb(+yEDetwLvd1-#B}YI_a6;j=X6v*%AM+^E z)&2QuGbmF>kC^p-BgUuJpBqZAkOnti(9MB+!V7fKou!W_73c* z#Von{B@~p^y6C>hNJBVy_`%q}?T+TkHDA!AK)o7tNi z^oT4NPgi&HadAvp1G5OwQr%?8d&wu%Z9p~^Npq?R$*SCI+ja@^>_MSDQF{#?;! z?mO*3pGT`Mvdy>-S)9qyBCP5q9b8rN%fR$|%hh8qdR&uy#0i}Wm}LFD2%~l5bM?*y zht61vn+1a<83;U%=Ztr$uVoSX?c;N~fu?s3UPRZjkWEg1fk}qDzRRKY_E``@NE;iN zuhw#Knu^H{aTLAb-t?u5LfpjbQ5x<7*X!x3IxH-~eaxKcJ>Rd1Gh*IXruc7&r}|}E z*p9O4fJwe6kr53(Pqx`zkZU2>nGvctu%6+_rlX52rsrSaGdDaKYs)avQ6$D^cs_XH zow1Q9wdt!N;~^fSTl;iRIXZ540A^`0kn`r_{CcsH+NQhMdBbORTr){m6VWjK&&#$>-V=ob;BnTw`YQB&_M}OlLD{=Jt1^lA?kZ zTcvc1CC1}!sZs9r`HuU^U?DxQfr=z%IfuZ;SA$x9|Fk(wY9~2GaI77fe;87h&eF@2d#RGxSrt1a!;&h*aIArf%l72Bv1WDR;u1V^_Vu1?Wv)Vt`3s! z+xsf$$ocOyYZG=&s8iLZ{Px$norWd;>4Tq$nnlII2AzjU{T0~V(z__DX;WIi*)aNm z%irrw$EP(NeE{+xB-EltxK=Bsd`Cc z#$%Hqa{k`2i%AIU>z$EkPH)|i&UT)nuDPn}odU^Z@ogUQ^%oyUP^F9fOgkD+i*i?ITkn!fUd1#M$7OF*igaD{MmP3)4ud__mV>mRSZYrlMCdNyaJx|LGf&jzQ>pmEvWk*XEci^tBd5M}NPR!ER<-Hxn8C3h#^z!kWm`Vy22*Uu)E{ zCH%!^s44+m-~e23$PDo-l{vbv#)%K(5QL-S;IT|<*0qsIDCzR`@&$$b)Djya`dRjC zO0%>0SpUMQo;a6m!jTxsgYQGUSm)l$ORRrVcc7`~^(~=5Xy58Ukq%?QQ4ooLE`U7u zq_iOB`IQGDu&Y1JmcaavfreNyo(6`qA+b6yu ze%Nt$RxPmNMvVUXUBZH)^WIMyF^PW=7zc36Rm_>h!@nJN4si3437s7MD&x383Q-E_ z;N*mqA{bDC+OJP>SB^P@=zKCQG&)biqaU~{iqlm|vz&AclV{3gVev?;1CpnVmqqUY z&kQEH9VcVN{wk6_4`G)WhP@Z&17kxw*IPK5mSjalpO)*TYxEr-@ zr%A6qjAoShk|R$d<^IiSA9L9!V*-%AN?mm+&i{yV<~C+@L3x8hNR5w(GxA7+7!Jpp z0AyV}ofvfeEQkf-E?E~29Z2ey7{ULLEa?ez4`SLfSO*`z^ zz$VE}Z?Vva5c$I$DCDsrDyg(=oKYg<>=I0yxEZB#%w)|2c8|Q(c$!UE(B!>FiHu?J zS-!T&t)549JmUc3-S%*()v2WI#W_}f+yh+k^u!Ls{fUgHoVGb_!C4}nr{Nh^{L<=pL=XIG*o-G_7hpHRx^`Gt-p3nQ8JK2Rxx{OarvUzM{BsRQ^%$ z7(YR8A{Kn>SgCU^jRC+#TK5$ey!DMrop_)%YGXw5(1?(M)NYIheHLRB82R^wzB4w+ z_|$snJ1mo!kbvU8EtisYqRD|91mpq*R7vX+EB(@U{X>4*KA8GKE-*BjdFKN!72ins zOI(fi!M~sw;ult94Z-o8k3}uMlZECTccl5Vq{?E){|3I=Zt(AL*%(3_j02dAoiV0O1eX5k$14esyUN2Rj1_f+TiN_gx zVRJJy7s0r~lRE?);&?D-R(L3-FLG-I3u33*!-f5z&1%N_bYDwL?tSZtnEX4R?RQ{+ zE~tjN2se9jKD-;QaV?bnaqr?`d5qB*JyJ_K!^`5lNTeRiKt`-PV4@k{UIGc|B$|QL z*#!Ci2h>kk5gfi6qI_$(Xn=w!OX0t>@|ON9tTV;WC)))03}$$?skLN*vxmbxFiRnG zYIKV(j=A@ED16+mRbeJ@qT7DFU-b%8kw_@8VG z%d2e1_nZgrC6dp4Rtd&%D1yW>y;km)U?I;aB9WNPhWJX5G{e1ZC$7vH%-ju*lUGDJ z@W!!rsabh5o$!X^7zMIOZ##Ka+OH2<1?o-N7R21`iQ26{MiXE(tigg)*$<#C=h4F; zhPik|4aM!bx>Ar_-S z6ApG0Ft&ZWA>gI+UJbHT9N3~gqH|f{NOP!At`E}QWbz;RKC}6l;~#HtkHaiEUT(=9 zWKbW+j_^@W5LGIt)V9jHb8k)$9uxHweEczs7f`36L+D zZq1TOhQfYEC<`VA<}~&@LNVt>0&v@So&e-Awyo6^h}yR(r}8S)T)U~;ODkgSN**Uj zua{BHN8!k#8C(Dex{#f>1lC-jKG!yEPQVD+KP7@uCV+Z}gh~69#C#e@Ky_K%*0*uv zTh)?Vd^fY;7fVfBB-R#2xr+kTa1kaTmXi?p^u%^r?g z=qhPVX_BbdMzw1tOYS!Q)_#CzdWQcjm#!;S&nr11h{(5+L`z5FG^b-)Lq@hdT4wJP zGUFntU%ZYU%TWDALB*r#hnjqKnzon3%`%*+tum? zpueS@&#ibs7@dVCm|*u$KTWq`UhTK|^^<^$g~vRy>iXv1mb1<3_y87dz4qMK(jWNc zm?OS1A&>C^-Q*)PlG1IHO&b=~f529LO%0qb#B0J9G#nrUD|gIxee~dYaL2a=+sM1g zfR-MOusfQJ-Y?TE5_u%@4jwwPEQkD-D&Fbpphs4St?Yp9ot#=YaTj-FG&8{y$o^mc zY~0%Dm+-G2=bs)c(;#Z%AF}z-QW{?;-xYw}=YOhRPlr>sRFL2a^2e4uigLfo#Y&{T zanynnH3L4&tp1mhgT1#8 z|KN)@s-+qAe^Of z=d=kKd{G}<^GpR7e@c@g{OQzwx!capU4NRZ#b_6S7DwoF$AWj0JJvtNpRXD&o#8Xq zPId6^Y7`iD=Bv`hC>tpIsrerDs7wde&PYBXW-Sx(Yfp;ml<1VXd_;6wPXk=UVH8=3MlfGiUhPq1wr4P#fHB%)w5@G8(a;apRjCG7JZ%i=>m;S=F< zX>Z(GtjY=BMCnSYMnj6*`?x>}EY_O-f1V6ZNCgsm;~?`ry$>6sZ?JAUr9`j40 ze4d)5ycOi%5;F;EbZ}4ecse>Z2i(~56|oI#e08OA$NlX;F$=rS;d{vCnWlP@U=J2M#~yM;+^=e4m-vn8`Ptu!C1;o8*((P z=Of)%RIJ9as{%`z()_5-fN{_fskfN*o1hBu^q=JWNfLfg%XlgJl1R3fq@%zdz%l0V z;aTU)#`&MZ!yVxfxOd`l3^wesX!ZghjaVw%{epXsMDV8?5S0Q2x|pgW9~v%3eMVegMv_Fya%I?;AfX38*rtV#4kM*OQutwx*h3y%il8^o?ZlgkSq)(Cp9l~oUa)~ z{&ejHzA&-sPCf+4kU@W@0^WrOdWIKdoHK+5JL5kht*;-NhXIm5)~~>99T#C037(R4 z)LS34_>^3Q2?d2ym9Us*UiPuIy|8V?g^4v(BS z$E(HvopWE!JScHA-a(0)<1z`00AQ`Z|Grb=RC*zq$45(fIo8)r*dzssOI3H1aMOj6iuo3E?&6uO z>PTajx-WMyFa@Tw1u%@USC8rN^l=@hl_qX|{y1A`0&!K$$Frz171L6MB?ta}o}P|P z79hSn`Vt@~*a(ygmzcVprraLh%+xvlYc)Me&D89e|ER%#J0>8@!^JBl7Al81wa-?j zyxlVCP7SkPX+2E~NT7vJS*`uhPiV5Dp6Q(2P;+Rpba6ikyx@I2fe_PE>OWX-0RjI#1b+0OWz}S&(4zmt z{UpQ5v=|FOk$lDQN3`7jt0?%!`>aFhE`V5tthv~F7% zZ%32TmSJiAPS(8ZQShK_2tcAa!Shh+c3V>*aIovFt$WD8ve9NWqDv*vDvpnF{?R}g z8vmIEV4)2(db`jSQbgCA8jP(2d~_9-EHh*lWcX+^p9yu8kkVGj+bPI!`~jWn+VN2N z1+51p6zWAxfGwRdOFv@0vZ^ zElxyf%UQJ=J(!DA=S}*k-zPsz{>h{MVy?tR-5gffv+gWCnX$6Yy%!D4KN5-pk~Arn z%67NN)7C0SNLVF7yNXW~7+N4+k4Oc>zx7OBdmeJW0#~Z3CNATpZ!crFG+Hbg$B&B= zwgjFq$iDjLlkJ38ul(o*|3>pNv5j#2_=-s7Ugy6%Jkq_Um4M+vY$~|S!|l$SSh;E; zU$fOQ%0DPuVj$VGPaHRh<;0!#d&BiS$gfKyC5q9OE~YGec^vO{#3}3r&1+`FYbHcy zh>gu2Rf$6e`$utDugu*#9ES`uNR_|aUoz7u;ng%ERbqcRrPnr#An~6u4|J+a!VI8O zv#=!nQ7SXmz+8UKd{@1ASe2vtv131l_gB4QJ zFIub))ls9=tL4DHpk_VKgFyJ!Ehw`Rje9$c=|ltxT@tYbXOdaF>>i4*!y=)FVq_u7FXP^AQRAi*fFsXwxnAfI;>+gk<+Zi(=72M^-&UtpA(Q;s4tWqy zE}Tam>i5sPcBRjES_d|<1^OkgJhQD| zFfW5hiu9-Kon&qWb^It$#}5qh0+4Hf;ffS0A+w_xTIGIpAZw2)8b1|SRJU`Xb}-1% z$1ASj1(9@jAYDEMnmpM@%PMq=)j~zx%s!@U^2awwcM+r|L|ZqQ{v%FO2@P~(0=O_U zV%Q>}jN(SVTYe)?N?%yP8X2?CUK-z#jw>8%<4cLS=GkBV6ac)?6&0UUVfxa+RvXMI z61Z5;4w*VW^CwQ3ae@FCEQ+NAp;^7b*68}QsVVak>9}Qd)r@4zZ@9=q{VpkFUw9D`uB2$ldE&ep+?x9XlFJ!p!^u<7723)-Q zH+_!02zTr9{Gt&^YjVfpnQE#n6xHe&_) z8$$6k3(Y}#Mq9Re4STUsn`b{Ih7IW})%asqtiBT_a9McrSk=8mnpxOD?FjW1WpJyO zh5JYiOpf`jdu(C7QN*0=I{ir3{7E`%V~${?ipz1P2{sRT8CS`+dtC+sbG zd8CDD1wIoO{MHPM32x#oSmFS5i28{xP~0jPYRD83pV`sMANW9E$(YiS?SbyK9Wz~^ z(0Y6jvN3fI&Gref z;EPc8EcWuL+KmnH=FoVSllg?9-n>+;tEfZ0XA|?qZCE_4SAC$Q+``#E4%b?d(#mmY z`#h!pOA9dUbhy4Hn&4Qj7wWFr?7cHknOtq7De|^(34@2sB{_wNM!HM^U5z{3pxPF1 zcC!S_4+~mraz;^UcSux6ra2~RjlbH~UavU7fAO3xep$zbD*1fbatwQ<$B+@il(MEP|rUH~`95srI>=Oe;nR zYA=<$x2$3pXaF+vW*6yukKXx)iKyrINRhSLNA54LOO@aF9BNi}Pm;1b*NqyCnhUjb zIis?MJ+kB-ckQnsmK)z-y|aqJnOAe`9@v(uGq>$S+Y8!R@j`=vYM`eG&a|aX&bj-c z&*4mLZJ8yF<%uf%5-!@@aZUI`-m`3G%1i0E;(FdXXYhYOQHP2OF z{ANXs#3_2lZwm zMAaK3o8kF9gVLPioQKS5=Wyw2X_BP0I{gyuoGQ=VtYU)6%(V*Fv5VUeXvD(j7Pv$u zW2gm+fWW5C>8|{W@sDlkK_=G=N5UZ*R`_uSdnl0pdyL-`27vWS59w;@&{WM zg}cSjcdpHH@WJ;y87-h)#P2wxSw(Y5`Ea=o2T$F>uhZ@HsZpL*zLX+q-VnXdv8oFk zd?8j1s=Cv*yC#mx2Y?CIA1OFRcVCT!kD6{*}s~8Vgwva-X);;zH$&*Uykw3>82i+d2 zjksGt9^0q#$H2^`8VAlIYq|G$d_24nYTYr4&HX0(PR21p+5H*9Y*2|4r`&FH_s z4@muU4~tTV`sXNgg;|Pm8R-GGmJpoWd-J2 z*Ze$KtpAAz{3ovDOcTB%E~@F5l^2$ow0TY*^Fy6;Brs#0iSF?CV#lD46?VvXpepjp zSh*M!@nG1Eyn8)*i?SV7`rUPNY-e#{spw7K+mmDinUp8Ef#4?Z;hy_j(Kk$z0O@+_ zf%OzJ=xnm>S+jb!J+ppk$(s9f=DZgU8D@NKHe*Cn@+gvN*0=q3-&r8nrp97&R1zCM zhnfG_@uz$qe1|=Qtu>0~kb5Cu={fiv6z4hJ8p0cjf1UYPr9(UB>ng8a6FWD8NCx%$ z+aKFPN7t}SP4X+_=Bq<-Vey$B4y`u4DxH3-w%3EX?No- zp;vds(sd}bn(A!)#>jd6j2aDaUFYkecGh_mQWYL}Re!OwN$C4FEL>-%>802MuP~~D zbz$Y5k?wZ!pWdZ0wkx3@+NgK{TF}av^fLSO8W+OJ`$Rpt!Hbh;9;^hCJ4?@jF0Ict z=0^iO!&f(AKCBZfyzDp0lK0vn{`+ixNPcH)7uS+_2~3}rdXX6DU(GiE^?gL|fG%BDgbtOSI+89GjCjCh=4Uu7h4j@?&%1qk9! zC3#mZoH#k{0LGxZL%D92`pG_MS`c}_5kZ`wZq?5ZnScLbt^aw8v%4WVn3&(b@fz+yES0xvGrKY6>B+d_H(>Q8A1W^zBaF zmASPqh#Cf1e9`n#m7dMP{EEdKl~xWUHCf5!4PkQEP`0*8bg!hCOP!a1V#aC7rC)A1 zKwrCuBL;ZMh#`@3yOOuKnPWr}N}<=uRW17>CR;@voJ~kD?V~MEy8H`doW{)H=Z?C} zKHzG`Vt=O}QLYyxQt50$uuZj`$?x!Ya0TSuN>%>H=t)wa`1idf0Tj0VI}Z%v_-M!0 zy(kzvyr#2iZ@C693t|tL2zg@{FFGN_mabdYx>Upo@*+68Y8r?H!l~&DjJUG^dE2;e6G4Enp<`s;?nKV~x|%sDcP2GAFe^ z6r$)`;tZ+o^xyQIo};Lp;27O*MR^X}n<}OU?;Sfm`}3(^8IkkvW)pEgappkw-jih1 zt41RTu%a8{9_N72Q{m(b%iP0e>Jgp*O{~_~s&-EzR!4OkFJF(x1_+6-2I6v%e7x-8 z+}ByRz-Fs6+fIuFvg&&){8#v2tDU3lt5wQZ5%;qj0-Ne~Mcg0TK0a#%xE?!W1(xYYedY&E^mgvBnOMpB zkN<8t`MziDwO=eFJn+~i;R_!C?NQ%D(P z5~rj;()8w!N-G_x`MwCW8B0o%!m>+Dz_wXv3&AOxFa20yyG=!MjQSvLzZX#3Mvt1Nlw}3JU@M zm7Od0OQt4@7n%pYv#lB?w>xh&v;Rg}s~K*-UcPAVAc6n8UJ<~I@i(a7vup&AZ&xmj zRvPg;{bw{F9DJ+k^)c|{3Tr9*34U#LLwRxA=s)ZOj-1aC_xvb`6TuvSl1?>U0K5`@eO3DxCuWDJs7X1;L;$LzFal&xx2s) zcA@ak$NMuOGl80hYcjSeoSgUM9m;ISf^oz(7XMYWJQIZd$2j|q=dkszLqs;>%X#C- z*Db>3>ryk&ZpsB7h{k z*{$cSoa7#D7*ApO$1EL%xCcrhMAG#f0*|+;d>V-xAqzNBIsuYoyjbwLBmJpGNtP$} z?i(SK62mIAZ!+rxza!Pe?`g;b`XmjAnTdmYxKELQ9N#LBZ{3pT!ZU+=)DX9M8=hBD z)l^>AviVAVY*iD_qhAz_UFAnBio=uxjxUY2tzq``?&ChkHbH-XfP4EZKnrhjmOCs6 zAodR4G5o877}=Eq9>%+)P|p45%GtlL@a-$c&GB|mIRn)4G@1F!6|1&ytds71w_35)dA09Wg>Bz@ar80xIgB?@suzEUdP_6ZOK+z?><=nW+TLp};HR|ALk#Pcc?B^NcJH@GM#Kl} ztX>>@-D43zxS(>fagd)Kf$P;sv?QM_&-(z?)_nl)RZ6&t?^`yq@DNm%wlrDYbEHtKTA($}LU=KH-TdgIxg1lPTFIZ;@s+J-$h{Xo?wC+SVa4^m7O` zbUYL|thIlz;M{qee&2gMd_Tm;ne?BJlj?stj1G0;ePD0-4#|k(cvEOTQDQ8luSQob%Uy)QM1|w=kBu=ZzTofQeyJ(>e&aL|CjgiZOG73wX?$PRv@M!x+)SdJwBFRuidKP zdsIf!pg^CzjT{59-*HY$&E=on&#|5FJRAM0@!o&oY+YHwg0hl4ZR={!k{X* zajW;C}2n@o(1p#YRDnUfdr+-xg`4p(nRo z@>4%ACrnWaReWaLXRn;Uxek+1V@7rWx4E&HB0PyAY4c=<#1)A_owt%e9&J_$zE?f? zHA)sLdZF~5b3YOa@9KcO+ma6d*=6}nYJ82TVrQ}R-;!^Eb|#FfhVo@JA!;Xb_+0qM zIk$OEZ=O|qD^RQM^;Lj24PK23r=Vmzqlt2ARFV2%inv4QSWd6?h<2)7%ch?w&(lpvvJ}{@ z$+6+`VS#Uox0pYP>zM45r^UCYMvKmK9xI71dUWX1{^Z!z+&2eDQJWjDTt(g0$zTwU zHTkUnao5h{TSPdCv77nq4Jw20)kJ18d9WuqH64l%diPWX47Pvf|Jx6|2rY-q5^t#3 zcfE4|jTO(gehiJN^*eOLXr$4H{|skf`|pck5&t+X7&Jv3MouqWaIUdKP9{w2hvn2Y zA61nW7%)i38#JcfXwm00DA!M`9p0k~Q^H?_Er#26=PeD)mpdz$I)4aHTkx2cmoL~L_k7D$3PlsaG-RTf=Egur6UIn#vdi586n+* zQqs~`G>k^NM)w#s>K*Twecp2%+jC#nef_TUbRqjf&v6GrQ|=6${&nQX?lIhZ%aBoF zeG10u5_44N!yre@kUFCbvvo1&kO^+TjV;~nOrCPQ@dba-@ej9lTh5{1mYr#Hsr`99 zGsY>q;<*s@p%7jk`Z$42tXh^Wf0n+y{QMx0%sNUSXYIZa|*;cRY6DU-@Ci6$~JQ~uz>*m34pqC(;@TIozViyg2o0e~;#1EPyE%ISv z#r|{TxTp&64Ck#y;lVx^darXuokIc{Z-%XK$`iwCV&9>h{(B449@=?y|B`r@ZM@?4 zzO!>I4JXijPTI$|mQ0CTxPaIH4q^?grc7lxzy=4&Pfv~ux@+FYb*ED*(@!xC+qe8> znNY4Qqlzf2r}=8rH@&)zVOHRN-6}81n*cAB3oP58j@(1XD^c?0nA+30Y3EcAcfMtM z^=jz8{K`{IT0@*#x~}a9DBmr8(&crBv4hp%NDWe-wrc*3i?RE}im&>eXM>UIc^0l3 zJSVnmDTRJ8ws{Go`*o^6`gz9R&^gpQPB^AGbh=HXq2D~Ok|k|{6$WOL#(Ei7$-qsFAh>&c>!PRd%be}ja!4%txOdO1?CnQs7%ym-kvW1vQ* zoO$VW*CRWigOEkv?$c`}V~!NQ$sIF=<5dm^;~d^>pKbmp@BDqbc^$?T={{+vcpeSNIZBOO*yQLiRG2tp`j}D zD$H~Ravc8iG<5|v=)$YW1C9sh`2Nmv)ni{KR<*XPm!Q$lYOq@8K|Z(L@oF98n}WtEG|I{m^Z#wvUGQ`i3yEPpiD zlGJZ^>JpgKTHrT<3vTeq{t_CcvC|&r7B6)1O0ei$DXUJ-sM4eCoa<$|@KU-NOPci= z_8e9jZc8`8CCu816<+jW(jf209{f^+@|*l2uFC5+@VqUeqXfnnZ31ev=04lV^?VXI z(-7mz`TH+5Aq za#bZ9`z-6Z&1`2FAmi9hPm`Pxn3PS%CLwAUhmSHUCIm7QBAd2Ku?IbL!w*~R3)p|L zUe|D@?{o_+Qvcv)%~iaa`or*@;!j$?F283s^UYD>33#_4rLOJnzH?ekA=>QlY%RYC&yy)Kz?Yr7orY zuF7CxVF5m{8w_*P=XJ9;@r-DKR*RNFgk?7g>~a;(yqzfmSIZzQ&Jg^Xgng!hty6A; zR--+Spql8qLt_>9lS;s+c+zLhnfNzOb|2tPe@zWJQS{hw*^XCDjgHqCz!u#vKvCBJ zf-ktkIa=+EMfLUg2RZ|B|jHAm~2j8{vp81h(%;z zQ7tTueI-OdrgjIH)c#LsKNVHem$H=QJ;>ttS}nHK_IU^cmv@PjTV))}p-h1WvG<+P zg|mtn-glp&Ar?*4^WhO8wQ|%{G!h=E;rB>AX~Q=nL9)6^mhL{&l@a~QIq(Wdi>gNf zNlomtUzPrb!F~~gBJ)@}X}a-5Pl1KV8tZ=MyT94daHP1c!Hu-$R|_FQ1-oV6g-rr@ zlTrhX+ptt)CO`ocEowj`!$8)i7t5fQY5OwJQtqOS)c#uV-q-yV#1+#`XI$F>tW!j0 zyeln2(ji%yRy6kxpAjwC+gYkjJ0F|HtDpY?V405va`VD_b%(kt1iH1w#c<`p;|a_| zJD)TtskRy6;llNTi|X(>u_;v)DnRs?Jnaw@T+d>P$RbBXQ5a!$Y1a6FkybRhxGbg< z@emnv#DCKu0p3-q`=I_&BI2?7%xX9K6$!-(G&wu8kaquY)o-A z*5!Z2!bJNiZWxvJ;|l~e(G>r_$QAxr*4aG5TDY?c zl@ef}uUaknUrIS&rF{xQqpwJkU4KnBAMj(0txqhf>CpOXFZCCDfezFTFR=(=o^awg zJs)s(b%l)$FSd2Ri{)GD?$`AU zyqo3-OE$1Bq<*+F@zFzda6Q(WI*pjeZE)Exel^auTEj{Vn%P{W+-2ib)25kmm}YAV zBFKSmD);{NO<`Ig$Kgz5=2s6|wqdG6)qLQu3(5i^S=z?N$_@balta(Uf!ZhF3tV|A z^4PFQOi+4kFDMl7`Rj%$QOPn;9zVwF8*?tV`_5`*} zKkogs!3#Gxl`JVGgZuEVR{>Xm`EmzzeC#F9sqc=1dD=sQI3;h9g9zkH<5ulZfSW3tx96YybPi6R zE*}5G+jSbmTYwAQ5?Sy(p}>JT&F=&=zd%;TL?r}i=)TMYp;$$^g_HV*hn)5erK>v4 z$GatE7mZqxJ5J46e--O}z8WbH-Ct(d#T~VDKU%jgeh2N@P|454ab9}zLZQIXq$uI) z=h3Fq=qx}^pz1Xsg7Q?y*0oI2OS|M*Eb!%T9f&*$@XJU`)%Hb8i8{i@v3 z4L`#tc-Ni90?o&0tpYh@(`p!0tYZ`?)o%cH`NUp~q+5n2zFQ^AkV(fgE)(ctw~U-j zA`gtm;(DO*6|q)t)XPw5(69iFp24^?vMQ6++w(Q56ck!1YdyIxnWG$$k})m)A-kD|QSGsU^o?7qgb$OC69Mb(PX@ya@is69rt z=}ow7L^NL$m;HyJVQ<)&@fWm3R0&M}Z3pLILe<&(#+f`xdag~T6?=|8s5=LFm8qvRV{EP(>4k}JBBL5t@GU&TUKm6S_w|rg_RUkpUX@akV(}#_p=|GzV-B3o%Oipyc6&YHWGN=wiPM?~T9Fe&C=g&VZ^XmWGwus&Eip8{w`KpmV((oOV*q;56OkD^LY5$p;be{Ffqg&=g;z}2 zuMS-Sm}zKNp5J&$87F`jyN%WJ^7zrtnN|F;f_Y?-y+eF0OZ36Vm|TC~IqylaiEfT_ zPqfREP|naTQoi#Hwzu~iOVqw8cRm}jyyQ)tt+}gmp$yvm*uJ`jvxMzL2mQ)u15*B@ zN4W?$6S9@YSv>2tlM3&><8?UXi`8xr-V_c{C&r28tcnqzP_R8&Bk0c$a4q%^AwjCu zt1VPNovsK%vD?naot#DQF&5W&RqCk)c3nG&Nmo{Q_wDk_8Td3MD;=5q{Rft!VK}bV z>b2cI$mrgny4xFHUZq9SJ@7eCE0732tk!26ng~I#)_d)>e3v&G*` z>uyU+mOP~EDIY&iA|?y9(--^aFheV@Dy{jK^wTXDCrV@XVH);#JWzx9kqT;n4_`=V zzd_j5r`a1S>WNdlBOTJ(WBr{{bmE`d5FhA+1S|CAic2$Cb{1RuXB&r02AGKFwXrKQ zk&CaIrT2G;4FR2E$q(#H#e~y6_C9hg1ijSM90^|Dy^mncK4aF`lYH!daw4-f)W4 zw@Q^W^{2CS4;Zqt3t?S7@BgEe=GEcp4KZ;47vY|u!{NcNVNg zey(zB@8RgUU=xM-r+TK|3IgEjjSz(*3NuY6B_I`74(;8BjfYnYl zwY$%8UZ*$l{dPc(eYDCcHmfHTw-Evnhrm->nzf}{v@CmjV>e8jOp3j|yp>I-Gq1D1 zxR~aZ?D|+u`Tg~E?-V`he)}@^3NV#atfTZ*XNnEke#msap`JC_)*@Ll18MrI>+?~_ zYr&xX{nrI}oBWA=;b!dwVK2ikXHBHtB3f?Zh1I5%GDtPcmR^(KTHmH=AGz`(Shc5_ zSXwJ!j?)zyyhRn)xLg?|tfeIrQGYGpoLW4LPrWG-iZf+bYyHqdm@kA(PXVRN??W?H zSaZF|i9&5;dZ9L{Sa>3KT~wfsJxjI6cKc+qWqs{v zsdkOMl599u!zUA!4_i%%d3BUD#ay5SpOO*<$yR?2ko{ZRL{In#=XKv3%wo~DP4N;= zYq5=-tgXIqvX8s+uQnWwcT*X?RLogO3y;GIVcc_cR^XzrtEI}y+e-$QE1`YUum?I% zG>>>U{Sb!$NYMj*V`&c{mapjp;eaBl{{BC zOi{TN>GR0D@7vK0l-Pz||0HI=4dW1!|C(-eTD&|H_7hzuyVXQj^Fq2-sZ9&MdR*ti z(k!xjJ|SNQ}wF(dv({f_>GwI=w*k1RrM<-@!c#KSi<63^|gG=y1wN- zaTkE_$s9}}()+_P=6@Pcr4&X`&rJkfwZJ^AR(ml}DkL{5t)@g$n$z#Lp>G(IhI zN399_RoKzhn=!No>%nU?aytKm&$|_tyoajz6G+BOkV)=V#ht=tmQ=lXQu(*5Lu}^`@g5IqPL=awc6p1DN4n7Cm@J z5GV)#T?As5>WgSse*e6g48AgvX&AtxtVO**L(|GrEhDa%W(;H{-)l!XlnbH{HXGWnc2}eSNqoe)Uv@hJ z#4lFVG&|M%)EG_vBZw_~pEUU?x_I{Avh*W0GW!PXmIx#q>$YK>hkry%{Jv$ldDIDh zX4C-UpirC=Y>*W6^o`@MGJ5&PZk~BQl^#kP&m;rl-Rn-7jeT!Qoz}G1_Xb@t6!q-B z{(9kTAvV^x#kL~Dd4jmwaB+50n{?ui=JdynMv!G!kKOYG!ksH=%D089;I6;YlsmV= z8_m1-0Qg4I>%iOH$&}eieW9~^OPxPMRnas7xUR|nfLNc7hiI}%rc{geUvhMzgffH zn}a$#<%?rXW$-wMHA!N=to(=C-m|)CPevGKLq>Klr@tRkB zUmnVw<6f4CA^!&wf|NqSoHtlr*khBCgahHc;Y}xkwx1JD1Ow3Trjl~n@%kG~GPQ=M zhj&G`w&`e!=9ZXCx??2KjZ)v%JaeMff<*@)qWS$?&o-s0loxsOgGX=8tj?!@d@d@i z?b}u6;E7Fs-~L{GM#mbx-P9~2g%b%7E)b{G7|7n?A#jPPQdDUhztI4z=lm$;R=?AVomG6FlZ9VB_tSS52+R^NIIdHHFaT)IH{<}Uu>0Uh1`dfK%#zXd$DUpZK^@F=Mr-KdyL_J{a?~%`F9r50^_-}$G)~gsKy?+KpWZUrL|hWLVOA;UcWx$_(M!Ee%Dv^D|>DF=uzL#?ouDBM@HAyk)Ffaks3mpWz5%idS3Z2+Kz8n?KWRQ^3;? zG(SMQn0*CsJl;yIlbA9+&fH)>aTo_O`nM~C0c+b>nq2OtIo!5apK;FRW`tP&B33}K z;B9lDNzPI$s^ZmVgut;d>`M?FITI1Bb@f>bG@@I5HdYLI>Bnsae>S-p)AOp+csdL7 zD**Rf&hMC|l~ZdsCdP3z5bQB|=HU1*xBKaXUfI*el#uowwxFLiSlg7n@ztKX&d^f- zDfRWw%LOb-GDL4u_C~XAof|5u!%}WB9t^2%YOhW41%#%Zb#GmQT+b_0mR0rno9ok5 z`*#VNgjt-PS?K|=xvR@t^nkSdurTo*QM$GOycYT;fUqFfJgk#>!MirDCaBMBencKG z(h>^043lbkBO0MjnS45rZ)cM+9`J3mR1}g1dpp2@O*YTJXD6Sv4!LWIa^C8yh|AZIbCwjeTUkaH$1iWG-0p0_N1A0S%ceDGr3b%h?JaFoj$@dR7 zSaAh9I7PVwwA@vPbGkG`F`7PH6D;}h;aDvKH*@eQ0qw`a#3M66!{3OdWhL$H8>FpV1p4}CJ(rGA1`PV)@%p$2`O*j zYMsKP+p^|R`;)^|fn8JQ6Djj|9Jkc`K1F+8MpnY)8hbVbRo`P!C~)B5{Ea?CK0{7A zfEDjZSo+~R?OaT>*c~ZC&})<`CVfqKU;ewa99u{YnhU7+fY17#2S*UO7{<4|2A<<< zAF_OhX6^~{__qOpF#v%IkyU-2ftRg-=|b0ZccwST?N>s`9~20VbRUShBJPRYjrS~T z-l^6CiYXTPhIj!8;zukI2IBYQM}%V8`U2-o?knl~D6%e-AKcHq9ij1~#Qq8U4@YU5 z`OL%C3Cj90z>}+!nM#HL)H`ibfd2?G`-Pq0<2;>AP7W^$Dr*fXgAk|o@rvKY1 zc-2VlJf#7Gtpu~uT$I!u@S#wa7rp4fjnDGK@s2c8|L|?S|2ZCsZvx^D+gXk=(TX?N2v!Kf?sMgj>uG+db~n}tjm0DE9(67XQ6i) z)p((|J95HQ@AbL%>vy8g6vpQ*61}U9KGrGwc)_Y%D(d$3L}Qzjr(EfC?Sop4ZRK7) z7g`>{cb{twS~Xl=2pM>|yx`fj7PgmP6OBu&RV^5sdQ^rnWzxu~r3@N*6t1!D)#vD@ z>^bsiU&G~$=k~Ax3vOiAhB=HpIx}=|>F8@WLp*Vg8GUZy=2b4geKc`E*_%&<`j|RV zl6+FHT7R&&P9*I2Y$;Eo8hKj?B7N%RoGJbl#ssFI%!;L*DS|v2r^CW07E>L~3XIQO zfcnk_`?Xcxg~-&_9eboChqyDd8H{D2TuE@X*5E%(5L0@BMQyC^=9W~M6pOoF;kqX)kT>^=W62wJ1wJgRQoUppV= z>muns>%A5chyCTZG=LQE<2l+lg+w-FSE17-DD?bkoA0o#|Fl}K3$u%}5z}xQw&!aM zL}$8tAAK9xAk)k9Sr&C>UP0sKCwk|;f=51ylFlKD&cS5e^qoYe3|&FfCHMqHrxuyD zW?J{Zw?M7Gt8H;zhuriYoe z2?rWv@^p~VVtg?Uh8u)IIDA)X_lkY;#T)Ubo}4o{u!tG0s(buoUIlAc5`7z+L;7&r zElmm44gay>@A5rQ^MTAMqV4oMeC#~6lvMkW+BKwgLN#{8e6wt{%-AQinJ#OS;G_8Fs|MAcjg zQ7hSsrotx4&BTr1E3>sMAMYYOC!MQ=g1qK4GNp*}V2RG$yTR zs#IMsB~n@L^~#Hs;O8 zKWvr#KCJsW7h6}6Q$cq*x6lLm1a$>VCx`53|IE&I%qT#B3NqOXxC4xYL!3RjgE~w*9d>97ogq)rs9H_P=CL zVnm0D1)MFv4rn2MNvL8cOB0dbKy2exWd?CzN=nk-3^E{6H zpk=SI5MHLeXi?kuSz{{<)dN${PT@~3EuRMmJPrEgS+ok znWQB2)R~2Gn_VuW?rEedSE|@f5$}K4`0n%>3$TsUR=HHR+N@L0sw&+-OnXSv1fF)) z9y5@Z?D}DQN^NlDx+Q6>w4(#%1&_z>6gsf^{~>-=HgnT3)RO_(TehRC?9xoknkOR8=eMt62BM#uO?H!%sx7if7Sj zl$$~LngBQ9%Rj5mDJXo~EK6FFQ>@1_xOECQuOxmz9Zufq_v>7gdbMrg8?EAN%C4mY z>qNL0Wd6+)B~ZLy@bm5yLkvcqNuTHkdV>BB0|6r1TTuAe@+7AowBfQ*< zbDDtiu|Hy11koKt>KnFh%h58wTt@)vHA|5RB>CeyU#1E42~M)v31bbXMjl{k9G~kU z^3Y}8GgBlxN{EV6fnaDnX&lfw!HR;e$FbUrFmWLh)mq7@c{@G&?K%)Mr>3615 z?JQ}ai<~uyYrIw~AxN*6;|M_(yp3{Jq#qjcO#|gsg!X;O-_ymHiXH$~wZ}Q*o;+ch z-|xouSo`=PO(;Z^($wwK<}lxU-{vOC)@d+KA=Y8G&z~wXv<^HuvnC94s`eUHf66ny zG{+7bF>@Qc$(C>zxO(IXL@=@{7Tx91*PzZYoH}!=1zXhB3@p#W+Of32cx8zM6hNY-G-IiM=Mk(@$R&ar zo+j{go_CmARbn-=`;Hx_B5$BbAzZay>-YiVd}Q7PG0b@y<&+q}5rytNjIaYd0C9zr z1`^0~07yL&-p5h_>ELS%Py#pisBZwgW)fxLHm_7u^LvQ2sWBlxSD7zp#k@p6CLk;SbAm!0AD{%GTClLEc-`0nE2($ z6J`UDXx&-Lt*I+LRG?Z1wI^{?IE1i zlQ%q09hs5j`p&KidH^YSuLh;W>Ys=vluar@^?F`6wJ_!#Q007Iu_DmG{*&&bQ%N+i z2`Yh~Ea_G_`k1bNxC4(0e@(n(&|D*DX7zF1xhZv=pT<#=D7T-OBd3pbw^xnox!s6I zps%+TYaS?ke7pgFftV)F;tEkjZuLK3{0oghNek7y4*ThGqskE(q#teKkTtrc*l~vt zZ0H~}8f`?-yn6r7=fx1ws!Ugs%8gjo8t0tzL2BOhFY?46SE&9HrU>MztE+k2y^mNH zXMC(Gq4iSqRdm+I!_dEXHH7Ft9z;7$=zEE|?PWK1M%vSJb`Y@nr{vjxK14dbn7(&u z`o+QPDd*H|HRCtbqU}M*oeXN~yLV`1s-zDe9f%cZRHskL|PMroPLIk`tUSVr4u(uxVE(=JMp)bXNt#ymSb#o_=bh5LHr zCOx7CoIf@YgC{{me&Y8~PucrwI25*wgkeA(AaK5B>em|RhVt`HDH5{DD*L&cKHW#i z8lA}dl;u)qAE@dKM&!L$Rzsu%?g5B+tF`;v04Y2qu0Qn|8Oh*|QX~9G%}vQ;>6H5C zYMW}hi3bf3K$GB#)+%7WmK{m5o9-Zdfh*Iim_uRqwSSD{D2nG^-TMB@o;#`KFXD)U zecCb@wmgw32pL=BG~7RB!^g3acQgYwV()_6m!4e77Y5*0!gl{uVp)pG(dgLdg!KFi z<7k|h!itrGkn!!iph{eom*2(}T12P#`>RO5!!QSH>?x2#FiwO^ku>-B_s`6aN}_)N zW0NFMA-$xzwfzKaVx%d8NlZ2yDnlT%r7dA%!ljT=Z*oetFaUKJ(@>&9k#^@ywIBg? z@f;0#G(i`LgVTXA;%6N)i(HvOfWBvyb`uZ*klpq5ic|kXwUjz~5I8^>3Wj!&&J5p6 za;8y3GZSAghTgZ7&c5qZXWlQv5nDCb&hdMeG$G=8;pCf(drt_i&Bu0?Vg#z$z3d?5+S=(M}*bk6MOQa~6=+CR_Xd}EH z^7o)Yf-;htQa>oYJsczsCb}%i8O`7CC7?!d4O=Q2>Q>2Hqn01U(><67jv#!Ydb)U} z+$_ep!HFc0aog%pAo&KuqngRR62jwd~N33SF0?_{8d)U-ad5xO6w&#JGa=_-dm zpH|tIw%Q#&RZPB1(~-9eYO#NFMafmvuFW>ay-vxhC>sah$v@hOt(q15?c2$~ za)H_D4xP&rHl)DPXFVhuuSW+FCgTih<92@0r!fZj{j7wHq|OC>xj~zrns&ylk2Y+o zH5uuB9^Y)#PKjneQM@Rc?N*W0J+!Az&G=S3$AF1$kKu-E2Fdg#xGL}A7ki}WGqh86 zpgJ4cUO=w~Z}$3znb?D91zX(($B}%B4qoQY(y9^q-4rs7Hdn=*JxA_mtUkvBg>NQ$ zXz>#ihDWHpvWOL15dbr#iuhx#KJo(Ko}6k_9-)}@14Xr3qQB0f%jEY&M7-S0V^I-3J1xec?Gy}h;Y(}$2HvkaLhV*SyN{2YHA zW?~r3!>p|0b4o}Q6L}rrRE<8!EJ?r?c`Y&bMPx(0=z-l&QIV}J4kg{x zmhnDQ&ZcKPz3Z9H=k*o@mIuXx`DWg8fGh|d9L=U|u<=ocPEj%9@>g6*DTE~OFjwzj zHb%YJD)CfPZ4CJv{Z!8(^I;dCCcjOj@YVfyeDo1R#QUYATwJp1*PQ^hyS(GJx$`0+ zYPkHs>OmfQ@2FS;ee7(zi^Z_7hSb4|>EbiFjnp>cCIoziZfJDf>l0;(RKfzz6DeIS zT9wO$jul2Zkuk={VG!Zyg$c12!LhSnkFuJ%Mq(T>+%y*|Qu7X)|2Ec@+?jBnAdeVj53_i)j_9KOY~F^e(uG1!((Qr zWHJS8LN|kwVzF9ts7|&lo_*}p&<_m-e@R=z_8}q~O1DY1j_jacan)raXO;ol_l`+q z0DaiO56>++8TDVChDe_2_;lvf^JVP6TX_jE+wq=@O?N!rpn;Q*J=UY-iZ2yD9BP=h z-ubSF9xJ}^5;?D~Yde&4J@E4yQs>9_%dYyRvlE09I4ADke}@>+#II9owle7z#rl{? zok~)vl732m;y@#I+wA3tCFQ)70BJ{5jQqn1JAbqWDK)b#9kQdf;k@ow0>ym^T;O{! zda4z~g+sB%rJh-JPnakV5+Hf}??b#ikM~$Jy$j^6&8r@Uc0~`rk{rD$)A|Wjlus5D zBOp8b2oB{MrR;oi)p0m^_XZc?*&V|H&oDwTQbx)vE7=a!yiuQlXP+zHHPN7 zMyO{$zOG(k!>pGa=hcI4#&*H`o;)d)o1BhoFiL8+P0OX!%SGG-TVGP9c-DFZK^VLX zxE>U+DCo!yE$h{+O`$B*UUe~ZpWBQLY08QqBvPj$aUur{;Q;q>-zQAm`Y4_P-Ec3y zg{QLy zKbEdMQtr`Z5itc&o@vttt7l`&S;*{)_v_+V2=k{7h(QFZir;*I*28(}mCp8F=W2#< zgyt$RdpcH)rsiLI#oUN)$M`~r^bmbOzCui?yTU~@cJ;yg@vVMVG`TB&LMNcq`em+q)7G{29p zl;!kzL8+C4O7b4w3R^1kc9JkRYHRt>NRQtVEY%jrPaBjS~4<#nE6V^dP#BU%&c0-g*IJ+U}EK!HS8*_aIxK$X1yDnUkOZY z6kAfM7j8G!r38QRl673I@Ix^o1IK(d?c0j3t^Tq}O|@LJ*GmB2R}4@*%nhY{tO!ph zH^_{0YyHR`gG#UeO z>&-|cy2;nOXr|uThvF4zTD^qgnD|eVr5n>@PxY=a$i8lMlf8GBrmu~(a`x~^+sS}z zq)lN0osuo3{iwFYz4O2cM22KZc&`JMGKUN}K@h!DlS%gKNQ#V2DDD}s4N@YK7o zIolc$XI$kKOhBy)Dg>Umz4{hBd5P7*;_SvIg-89;>(8S=7ajk~AfUvBq4iO(ulwhj zjB-(1o)#Bv_~1aY3TLjlhIn7zv4KybBYm|Fm59u@#*3OAqqUsOW0OZ_l@K~u3+8_Z&f9c5%p9^k3veH!z!DUYR`S`K~qV| z^70i=-u3slfrJ43YJg6#(3Jk*LT{O8$>mFnQ+3X~yv%B6nRXWr3-dt|*VLPdtjgBZ z@I%;76{JJxaZ35kWt5P+BrjWosl7P=zIOz^YJcQBQ2YSDc^GC`8(;JNj|56bIF?;_E$f1tYa?`9T!Dtp|*zue+ZaI6*X! zwr(-zTGfLan8+ANUGXzbl)O5w^~~@T{_$hV=O`w9K+3Z2{GCcHeFJm{@z)5|mMe4E zPnHoQW!^Bg_lZejMc%J4VL}&wqMK{_=*R|6CfoyU51pG&Mb2Ca$hkW{ZT_bIG-U}& zTFc$U^T!HCd>7#fB5x$`3%F5PP*B{mebayf+5E(oue79KP->t zY;`>-ahLn)3s+Z}4#iBa5)XgG;n^iFLNSg+0^A5K>b4A;FLNBoivaG;3k|Ht#*tR& zGHIsD*%ztSuRE$bSm$Y9PC8I;y$dp_TJe9|`?O)b4qB4U1 zwJeotRb0rg%#vlG>e;R`%C&_bRUYF19CazGc2!BrSx`kx8Mgw-nCv1$W3|9=e;&$& zdpw-7`GL}h@wIGsJFnXZ%6=PP*F;b;>%I(nHtEEnh{qpzO${iGx*Ijkj*hs?tp694 zo*Hy=Ic5fGDx^6X=3BOL<=BuneCmuL%n5u2;eP|rF z(dx8xV&*=Q=|4y`K*uCJm=wIX4i>kBjK9eeKcmT)#{ zsDow2X75!MFymY|2o(Qap6hkdE<8Nhx1eei^W>1L)jC_gwT&<;yf>4(9Y?kJ7bGxO z)Xl87=ZpG@LRMGVih2J2MI|Hqb|YO*`E+D*l(N+Lrnbb!B92KMbYp1s;H!oE+`B!S z@|iipct_?y$S%S!3DT{j5>*7Fw2Qq1xmuw~SBjIbZ=9>E{MWLYCnqG(vsbk;L8M)g zYW8J%^^i;mG_RkiBb*YEEGixs9}fE%lj4SyS4;TWTU$=jWjDLJU)zAB;C;QR z-PZ%x&93e7S}@EMy#VROa>x^NC3-;%ODm5%+4y3-bNI7TV-h0sc96{dZKL94!(<>H z03gse*$7D}sDHnHJEZQBIf`C=*5&YSY|r`_xm}BXyrwOe1G5^;V&cKiPAX~R*LpiZ z@=RS@CDgwDGrS3Gh0RuZs^iPh%*BJxK&)_^F==AmOu*~iS ziIiUOB*H0Y*h6hanj?HZV6yJNX)Sjg$pOi|V_$fAQB&CTH=$gKt2Y`~_|0+c$gq(& za5~G@99o)H)q_)F>G$z7n5=SYSClBHz@dR&8h>FxS3niGuZVk9f08d zH~IC;s0_Uu^uAl|e&JeiuuP5Xr>UkGcY@HAkl=t{Q$!+`?^h`9#bd9(I$He$1$V-@ zeLY9%)ZKs3E?ymv9i^}6%C)yNI}?cjzaM|&cD@Y!vD!z>kzmqy?ATy^d?NU2e(9~r ztH*J4BK0lI^Yu)hA;+0y8M_VhwE+EhgV39c>-`^VKSoh5In7Rdep%u(?o|dqKPud8 zrwusH*kd_^J>PovM>;kn%*5PN?CkoOQrqKFt-B&oeKUUOC}HKc+B~qvBzf98B{@K> z_47LvGL69ncV$jwj$i_cjKg|O`!TrN_#X~m)TL5)@t}sX>Olf(yOg#aA3Z%ki*^ml z1TE9#@W!Sdp?9S5diZw)HV7^2zw7SPRJ-T5Y70<4bKMs3K-wKJJl7NX4`_^E5+>1< z*&=`@uTa|OD6Gq%_=Z_eCBhE?Ab_v?^xfR;pwsW+Ps^0EW`ADXj=6~5m9Q%K4ZADu zbtzoG2Lk*61PE?x5Ayr!i{fGr6WQqMHINKEvO z*NAzGNI4dQ+rS8iAy}IRYtlf^*fRos}PP9Z=(DyqcO{1?C(vtua-WyKV zbM;N5YBrMgx#rB~)Vftc511A(6H)5e4gB7==Ur)*4OEZA6EjA@UR_NeO9O1?b$azy*r$=MPR#$*zd;&7)(9Enw z?S_EM5va+w#?=0_@f(?P~c)P5S=LVeQ&|aMsM_CfYM&|9WYR zP9%FM@Tj4f?z?wuscRF}l3Wv!fiPsb!JhNJ_4&9}&I<&$h##`lD$lxtK5(mn==1sM zOGzv0uUGwgdQOyQ-NUy9fRE=XlZVBb^j_^zdZ@zb1wqRmbdFylLlFP758f7V%h|}| z-QI4)bgk)uvqmqk|9IX5T<2J2nfny(`>d3wZ(G^->^{XG{pprf7`=!ORmLjv?~^8){}E5P~}DCl#t0nuEpNXrq!U6<#Ca1dgaX;dJTKhtXGG? zHkWHxz>0M4b)Q@Z*I8p16potLYCVPDx(AdCrnlF1V2|3Rs~X?(7m&>R&k!&uoYv4} zOkSZx2kx77Ttu~J4+mZ~6w@yHZ@aidSi*>%<{(pW3?I%IEYw^`Dii5CH9qSee zW~ZE^3cCb<>T&`Pj_?GW+5?i$3b&4m9H2!?#U`7`B|e~0fq1iuZ0~+NXAqvDqf82X zv3TFfQ%VB1DU~||$N2r7sc7DN-8=9yl$5OloVDjt8XQ1k{S-T-)OY9kx4*mYzRhBX zBRqkRb65b|mGE5`t>9TanMT0-ky_;2Pm6EK7`OR59*Rs;Jo4Gimpq z(V!dU*}uwZ?iHhqR*y!VntkR9%Z{;|TEwwdyL^=Zr&SG61xF++ZtuOD*E{5z(4<)+ zx02~Y{K=hcox2qg2&REtp9-o*990#x8FHW|Y4Op<5S=;n&_NnO!+ZNApU8vh! zhe$1aIXGEj1ue83Wdyrd_!PzTIs&RoqE>hu|& z`M9-q9RDB-#P<@~k38`&`$Zt&eMv*>t{Z&^J^1WL*VBpzqDy1SCFbos9GsfR|GFSP zdE~ly&Zf0IAs$=i*l8IoMtPr1l;ghXt1h2mT zxm$~G80D;i`ZT~hcMiA-E+W+A^AP~whYR>PqA&`&cAISKP0&mrLXgick-P$2BdBr* z-QV1Cy4AJt=JIM4+l8@O-=V??L6Vv$Ed!EI1ttlHZezG)i%G?#Ed+`kv-saQmyVUU zGYrj^-iSxgB=Iu00k{I$1J%QS;3H6@|KsjGqni4nZ&5l3C~MMCI^N;6>SBtWEu-a83_d-%P3|8KmnZ@f?MOGYx1vrlre z&)#dzHP@W2fUwz%xHv}_j=$PMfc(H`&qxRMT!;3EX5nKxZXJPP`=u&1nCass%$|5Q22#8J|I{T8opPT&7}K=q&Q@Oc3Fr|P=o(Vw3dG)KS|ei>Ne3&je3QIm50xk zhLo-|<#Tc`U2K2XyBJQdPEtyseJ|E-IcS%xlR}-uq*$@jox?rA<_H?Q*dt1PZ@|!R zI}RVmNcp#PYiENkf;>z;Ru5G7hu)Tym6S(MfOd!UCke0g5mX*?B2ISG_WE894Ttdp zr>&F;7MBKFjx-}0kL>mG21kgHh@GaO>28wF9PWh_KSDUf@B^LES zokQxz=Get0w>1yY=z>zl+*V7|20h83Mj5cEkj_T_9x+mDiCvYQ*^LJ9)AP(5A7;K#x}>=A$9CGU2$^9jr?wulXVYMJ zH}|$Ki02JU*Cr6J_DjKVNvzY8KZ6R>b(HoP*$8+3k6A;W<77|LjMLPI;(X9vzIl1p z2rXuDYNdUqzi9Uoe~gpDIwW=lmOm8Hj(o=2DbVa_`CBEh^&z{G(`&;d^8(~J6$S0uB8ywlp)Lse3 zd?5XSt}Kjp_b7u@{M$5b`9qTIwY9Aip$M#lnc_c$^x_1(J}h|gFW3>uR$6FgRM3r{ zka)TsE+kpEDbZKbd!>_n@ecITnaEWYP_55)E|DceO#vcc5K?7Vr(+J&4rn!(!x+}T zVzzcx7mo_mgd7$$q>{`?psxFrQnLllFjIt?c?Qw0I^o3Z3ayk48gkRtNgy|aeds8- zgVrIrZP<{f`}mr(+N3)k7Fks_qY|9t&sYO zAR#s1?ftuxH}&h?H47e}9?6Fguvn$)#V6@~S>oT$pS3iE&r)X8UHRNlZ!?OkGy=Ui z{csVET~~wl2VIEK4kLK9sw>CO(fIY(qghq-8UK*}B)j{k!_%t*kt6w?h>6O0B?wyFUhxQdy|B z0bh4Dd%FCxu!ik+!i`i9ee>II1#S0+B(@^4xzsqE?@$>Lx<{Xan!{Hwy)}m?;a{d;SEf7R;AIV%-T7!IZOCTV|y&KqnvPK`o43?5^$z z#O|EY2|KK|2>lxvebv@T|B>0Y{-uM9dUfRIJ9)6WZBKm@c8BLHuuXB)&mQ9Ty>f) zrET`n{I6VkPJ&q_Ty~7DPKuvP1au{6Ym9UF<*Id1+i9P&Yab8IXK9>22EWbH0 zE5C3eamH`(#a>`S)|P3fR!fXkR+^l}J-l|&GUH6SQ)Zc;On%M6`c#zRL|cBZH1U>{ zcnSv@V^pAWYCL!p-Vw&-$z0vXP#9D1q zOW-~@Bb-I>v6f|yChBj|kgt8#cA39k%HP8K^Yl`uLlX8RjHDSwCFgz?bT=ejA7Ima z{~=f<=Gxec4vcJj-?FkBZMdIzsO68h)>FO~LA)H!SU-#%s%qOmtQpM@K7ZpN^G9*aXP4o^ zPiH@#n`7dv4PsMVD&OfGtK6exef$u~zuf@dk2`V#5Mcy~P z)E566)-#a;NmhflvqJ$GzjQ3+Hx15oo`zJ4r;NR5@ewIgC#m=O9!-=0B1C?vm$V+y zEn&g4eAzrwe{oJ=Rd+IHyxH5Lt^zJ`P~SB)+txF&0k05-D(T zl{D{!`a}KQZfO-n|LMT*Tj~#fx&`Bei*GBK5b*}wZI>>ckxZRdi5zPp!q8o-JqH|> ztHOETq#*?7R)SPPll)oB?j=b}xvCKGx#J(DqzLY>U~pXWHKwF#K%DSlO9R_VDFfPZ z-nRQ;z%<60pR)@B2=gTeg^lPRzBp&-71p$sLv*b&2bU$kFYcEA`+0y$H1GAI*1IfA zN8uq4%kN0XJ3LeM=mVhtqfNQS{XTyn6KwBk+Fjjb^LM%=@F8C+mtL8m!P0lFm%v_j z!TQB6_l0--Rkz|G-Lr$3C1zb>8)ER8yvtGZ>a&LpD4pz-vz?Q=2RQTNrhwohc!XNZ zDH1yb$g%|wWO~oDvC4L+o>%%*^WFcqHQ~`U?Sd5RIEh_qdNSm8guux=m=honmc9FC zvrWNsg%g&&T`Zz3W34A2M)Ep50Mz=cn*@s6pg;Ls@d7Taz={oSSz5w~v)N4LSdYx0 z^-5+&VjBlg$7%tL3H6Y&y^a|C*Ev(ug5^68cKgH?VWRU+=tKlG- zVElHibMd*rNA{rpob<^25RMXl)0I$%k=QMtI{nvJk`h1C!+{9Ox7>hfWu`1`=dIrB zQ52=7Udim*Am?5LjL3SpijJ8#0rMF|W0{i|FgveIwr{BfwU?-lV zcCCrRUW$yWU6l@sixVbegX-1iI6n+_bOlf z%H_3CSF{WuOhu;y70X%sT)1nh5V+fW@E9F_H2Ql1nr7iRaHd_07d{iFzc^%iLhjK9 z**^{FJCzsrT5l;3RvImUp8g1xRQ$3=2Vpso+pIePYBZ%*pwq~JD^sRKA%lIUn((ru zJTtYO-@wG*iCr?-tdDTTgqgOqRwccgOdi<|Y}wgHF&~=8`LZ|+oJIz#UAz8*j87{>>$Z02;s`>a zRY-SeGIM@E%xpQ&dyP*G{bJi=%gxDyNa`HHV|cO8;}ky&NzIZ-6`9) z&q1VkyFP=TrTjLQ!A#-G1f^sl)gPFMEIA6ju|0yO{WyV08fJaeS{h9Df1w$`J6(GNiu0&k1HDpJ|04Dld!lYo3MCq3?h_Yb#p21Y6(+HcfMmtA@@7 zxPWJ#!_hroJ$6%)%!=O$7x;&Z0=huiNGA4vy*R7KX_JC z>$zyjk{TjqDpe+F^nKVb-tgY4+1_z8ok$2Wc4&8Ule%-v*FRWwU3Fq6Q?2_XIH=Ka=IZYp>6CNa)Oetd{5gZC1KxOJpJt8XG>; zY^P+ukStwZu>T?;5Oc3-w)ru9-ADISmP}(kNjaJ1OCV(VORwr}#AnvW{Y&K_!{o~( zWFb9p;iptyTWXz$xY!7(JJdl#nF+^4RZSpQSA z0B&av*H3ZTdc|M&w7%zazJNR3NUdDI&MClb0(XgI(mR^o>z8avZaECRP^sa-ujNwy zXg(a75Dq0p9^;sj1(0!d~T_YbUOBbcpi|AN2`79aPKz{yjJTzN?!do z^7^-i-Nc1=Was1S!GpqJsT`kJ=UL}jDqoJ9?WL9B>Iy?w<@5ZqDizj9)?GGNqWAw} zM-&6>i1c#BzM^fs&kfcm9>g}9M_ba@PU($%yXK%+3N34;aTPU^Jiw&_34E<`1AW> z@Yes%R^;7BF#Xt`|7$EQ@;B`K;1kY~!`9f4f6a2RKwI;2$nsuKU^xTgy|nSCfMdh$ z(xQBA*iegBaBvaF>kC_oPLP-yq?5>%Wv^7Q$s6>9shl6| zzx#WMeCJ*r2dg;T1%3utzF|DNHy6mZ(k`K9B=^Nh&r)Um;O%SuP7{bh|J;JW+2A>Z z0Ve($N_H9FaY5)nUJ$Vta)C|VoVhB;)B8-=g_#yK8%ZNl9#c7P%S1d|R`XN^Q~>}S zzXQ4tfaD&=s$v?;u!!*e%K~{X1O`2F@d)Z>m;cJX>Vzi(U94>lPG74UZ)c>qXl40f zm1f(3>ix7k5D6p8v?Igt`(_>ZXTGB*x^kaj;UT`nb(;>v0C>wZ2vvRS4ttUMxVCsl z4=liX|Lek#N3vT4%zO3?ZU6&be}{xLVvEfqM1z_?Q)aD$lOvyU^C)*vCbL(AfKZyMYWfzJfUvBui2+R2BQ+JpGM-=9(4{XwC^S@2`M1@Zd)#~ zQW92;BG6}myQND2(4Fe&FQ~rv*fZn_(CvR#9(=aIt!8FvsB$>Eq;|fb)_*hjs2(;0 z7`9&nuH0{aJV0?UAyF|720EhU0K3uUT-e#7F!Hi3nCb3T9t&sa9s)U_b`iVOi_M>& zw#|E-2T{O&K0U+^y3Sq{bjTBC=hl#RTOmngw^fxxVKI1P^?$(OSmSV9rlUe zF90wxe}dzG_xW95Z+v&J>{1yUd09?$+-^ITh}=z-8FUT@{%Qpqz$PIN5RW%Po)fmQ z)A(_?#Ngx1r8=tjS&bL#9p_)qh&6z74dv5fG3(uTNT356IdAKfCT}&q`NG`qjhIyt zV*GpcnAPDIGq3|>_&Bn8&#VWxWh@R0cDP>9QR(+vfb_$4&bFiPHQ)o{r4-2}DZAp) zTatzLOcs-t?g)Sw(I8KIyrN`Ng6O$ssi1Z?vWmoXc)RbX51mzO3Bj5Mj*vL-oB4rV zzmQ7p=gR?#__HN!K)a)Ff}6YQnHL?ET$d4F6^t--1<4u_>{Cy;W+}(u*0s+F`5Qgt z=GoTw1N+|^m{0^Veon#hf{*IfWplkldkat@$8Z3p669s^bO~T&x;6sH<{rX%%-FDO z`yQCY9=+!$?;qsxxiTcDO~Nc3XoEdl-fMFhzz6#aeHk$;+&*80omU|C3$|O0k7ZQ} zK6=Z2E#zd5;z_O@aZ}0$pX=8)q6^G}i(K|AIi{LxoT5Y_M^7e{3>v|R@ zAz#3LuZ1GXTAjZ%yMsu`d_+SIz4QOsK~2NZWV zH3}}9i}gK8?p)G%vae`oH#oKgTnW5Hwv_j|CL}s{vnHln&o;b!8FB+72$D#0Pw1E< zMqEC>c>{WM$|`qBgp;8Q%yL*Q+icsJ7c>|p?wRjZuB;drd4M-)cG;{ZgGvKpS!LUtPazKwMvXUqHyU3TeyOn% zMv}@=x94j6ZjD23;G>UJ6sav9=ubYCj+CprVk2A_^lG2D9nsP2v5!=cgtVZNJQ|D( z1NgD01YmV=Oj|~J1k^7X1~xwtjZGX4>=y;f`t#s{JS=bz^@j$wt%D8n(tRS!Nn18r zucg>m!$uW^7J1tmZbtan%{fmo;p76;f@IF^FJ!6 zBhb9C?4UIIl<)gs|5#>FvJ(`4G}D$eP27s{MGp;$!Kf#p02U#CL1=k0AicY#WQ`y( zEZ#HBI>&mw=pbV8kQ~+qgGDv`{wk6++}pH|mpCtJ=-xOL z*6rBy6*4~Um4}o_%Zrb_3hX|R<=>agS719z^vyFmUx`^7pO`M5I(=(-L$%F!PMcM7 zq#S7bF5N?X-o6T-sZ@4aDVWrGts)HHXAmx&iAF!k+r-eUR4Yuol0G`>`>;VWafp`I zH3s6NuMAZaIwIHH3$CPm8?W&WJ8r>>BVs$rNv>Ns@sdf2lIWJ|x3lT~0ks3xW1gyj zxruB90fWuG^nY;(<_MyriSJecoI?icZ3yUzcO|NqsKX>Vh4OL%V6~u$ywsDZy9PIi?VZ_Qas>aB7?SN_{=}^!v9LcmsrMeTHxgT#7Rt!kSv_ANu%Bys9fh2-H;%e}Kgf{}R~kv2HeJAnMo z;f+qQ+%cH_TV0-s`anR&gZ7{4(xt>s`Ve){X+_20Md$?qYcnhC>%(WM2n*s1Y#n8X zYR#(dL@@yJ&21Y;AU0BqwX$x!T~;NjlQc@wRG?Rmc)9Vn_mVUT8!=P*W12K=+5t_M z8&df!3B0FhDb04Yr}WWoN<xL26(io*Hy^xS<*S;EZeErSxzj3v%Zr`Rx@5pvr|`4dTz=l4!0LY2J4 zcIYusTF71^Vu@}o?%_K7BOUpuvr^*eqn3s<1gv1v9s1_#c|_0ROyg3DG^Te4x4lf%Ti=QB`G`k~tP#CQ(-_W-A2iX1vvei+8Eb%|7@K)BV+1nv zg>o8l>_cFu{DOvy`*LKnIW8H!GuZ2;>)n4q}b^6oKv+Vb)Bt&z~B?5PN% z0|MGw{X1cuf4jP#VPYITYv>$L#pDon^g1bELhS3NqOdb}<}*yXzrW#z#U{VmwbfUh z$ltk+!m*AER5*9ROi|7VZX3LP2KaDAcq@#(t)boA)Zw_pdBZ_~NtulBQ+vN4G& zYY%M%oBWu*U`si2E2M0+@I}*Xfo4HlL+SL}MJKeA(9iZqe`k2wlX{xvxz^Di>^A7Z z?_wC+bV2=Gap$jf7O%Wq=wjueOum_ZTi5nxXZLGH(K+6bLB-`0pWa2J0(L`izG1|0 zAH+&U!kfC0jryTnI>pNHxL8TKH*G>|UyLkGk1wBwB06$9wOz-U@o91X=zAX^RBn%0 z;fDrdq3~>KzWcr8pgVlZ`C^2Se^Jz7Gi-~IPfeB?QI9gwrSumk+`w%X@Z*Z`2{tVO zAa(qqV^4c{G_*}~0O*HYw@L10UQYRIynLx|VlDq!K|>4vT4qRj1TJ3u<7gvWgk>J} z?7kW!)lF1+;IwxvR$)`w@y|_esOEXx64-z2Svws$s(#kW=*Ym5=cRj3u$3=TuAS3J zjp)Z+@Q5P%SG)7;`XNAs?J~s(XCKT9SpNcDy&WC*R?=je8Mbsbzx^QQ z9KT+3Tz87}3?G3B3oxbSC(3eP5B1f4KXWi~T{T^gh2AAs3Hq%du=DdE%Vw1XZP0px zplV1k&V+d*>3ZJgMSH_=_}NeC(37vBmJgoiCOmwOA?`n)Y?pb9h9}>26K;Ac^Fs^4 zjqvHFvY&duOiMfuUtio`T7Fj`f}6}{V1smnGj{+fjRk6ov3q?j`&h>lJ=`tfsKEB8 zuP6=s+asp6xY@Kivzq;m*~P3_;MKp9^W`U1x04l%rM$BvpXKG>Q;O2$x*-02VPmp* zsKTl}6AC8{Xio4jISbnu0epJ`ggZ`{#(N7dduVFtk* zHWfQ-u|BxZ%)YXC;A&>36L&FD|LZ8@Q}!teSKo7W2dW0@rxLC;E0CI!xaZu!DSLPP z6XBY0#>MHMy%UC}0mi;u5~Z#- z1b=uNl4HPb{ z!DOl#1WWor)AYi#nM(fKlk}h`Z2me{&jFu3NPPb+F*Pr;BSt+CTw0n7sXbs#bO8+II72iQ&S}Ns6z50I~~$MX!c3h*6FX$}V2#;!V?m|IzGl=$gUVt7-OC-v8v5XIa# ziL$}p_+c-fzm0Q@SfHJ)yk!V;}AD%^-(J(uD9!CUEBt>9qlJj=7lBwX4L{ zxJ16EdRsuQzPwJo@j8>A;XwVv{VS+)l{oiH{3l=n92gv&e9doe8uSgYO#AZ0nq*bI za#caM^iBhRn%Pe=S`$sv6&kk#D`pUWE^SNjhyS0uJ%0U$O@_h+e(6S_k&e`-QWIZV z*5mVs#mSsCe)kmQB>5h54 z9<`r%8S44+(BFPX9b9ZQ=kdCJ^8gx)iI<6OzW;r4_|V_-J%Ld7__;M^WAV#Op^eqn z$lrtg(5bR?h5JRC8adIi=O1E?IPIObJN(Tu?T$EJ$>?04%YJumoOJ+gUHON? z{8G7Anx6ZW?ys>nUu$xXK-Mp?9wvcv4^fqrly~6D4xDNANXt#Yu-Y zEmleNX|e1~Qt?$#&PsRgeSW{)RiA$2?2{EP>8Lw@JNAYRBo9&C#ag9(X`+0O^mP3S z`~ONDMDf%9I^`ihNC};f7d}Iz^HHkuyWUXy$d^wpYO*!}ON-GG`}>Wd|1fjytyg&O zGqaLEirm%>oM0xAiJ8Mv4=dk~Rx1noEcZ$iqvVZbVZsyHdcw=cXZu5;Q#iDBz?6e^ zR$RZ2%`Y3be&1G}eLYDT&|h($kR(0NCs_gZ5h~yPdFcPp+SoRAER@8d0xs87zr7VQeV4zHyhSD z_BDaZ-|;-J0~u>uDfn~u!3T`ql@Qnc*N)N!|E?pPZ61t|6B18@ZwAy88$74<;l{D< ztYbfA*jzaO4V^vf^-j0g*7DSRT%z{ru|M)?BbL3*elIi_lJPjOV(W>OpNx#kuY}Xi zeAx-Z)f)vV6~pn$X=5>v*3inN_nSA0w|R>;qE^V?#nG%f6+3A~2I=u7KFBSukmrke z>7vRNoyn_>Y^0%q{s@XopQk6XMYa2DIo)J@z};|}!dM#?|6me)q^Ol6^^ol|HN#3O zRZ>>$jxhsDz&?F%!|rHfO111yw=z9baagh9d7PH?$7mQ(7*2uCkb2wlP(xVIX(A3` z&>yu^Y7q4{(O56tlA_4edX>7-G3VJ8RnmCvu;QMp6QWjX)u1|E#l?=V>wT)-EB5^; zvvd(D*xmQnOmwS7C-`!=uB|8Tt4?DLIWOr}CTaoIJ*1woQ zHp5pu5hpLK@u#it^k{Tkz3qpJx=N}mS|va5Y%f2I%k-eth+wLUuDOS9KZEiX8zC6K z6C0LU+o<*7Ho>^}1z_VJihgo&ubnM&#adAMf7c!-N%#Pz@@A1~JL;r5YOF|osEv&s zYk(HWq(WZ;9J;hI*ND;w`MxN`73YQ~{()cFg5rhi(APlSznkTf zTi25qhbJ;Y|29%tLaGf0n0Fmghbuy_`ue-oJFwq!Pjq{t6KurAl)yKl6Rur7S{3T< z=&u)4EMK^Uo~+r)5Gr9Qt|`h4q~NMn-uU4>LBgPfS7nN)1Ks1P)4QD)%NY~PCi+yz zXP;5~UeFHH?p#-FWmbAmlLBf91{(ody(diHiy7EfO^Tu5F7oS$xhSrrSuJf| z5Nhbem+{w*>MJeUa{!5kF4N3><1@;XV#<9W{Xj@jz9c68&YKlbx~A&~U*2K%k5#Eu z$p)ch%Nmw4&G%_Fj9}WOl`Rfr-P5t^1U}aTHtl)MJW}$^n~WNMAKVPTWZw_)SD9ik zx%&}$D)aTXlou|`(xVnYIWYyGIVo`?MuG58mKq;4GyGJ+a_N%Wnw0wR-9)}j(5$Q1u9{kP-JHHsYibk1hWzwH~bN4VLoYA8Y> z)x~<0HwV}rY(G;wXqshud`ewA@eGZi$mmu0!eSt2*cxq`eh9C7!6AiYTwri^dgWvg()uixe2i?iUHOpdxf8WneyJcN;1 zASyOc4@H%FOW*@6QjbyJUQKxiB(D`i!{e*J_wf@q2kIV$B3H5AC`0fWP{x?Y(A3&0 z;T7M~2-ay(B+A}3G5g7($kVLP4g)Ge1)>&O(QaL~tXi4QEaZ;&bSVnjgTYam%;F9< z4W#KmK3>&{m2r+)kMz1LofBSZRsY0L@t0@9P3c!npVs4JP;W;8CGihW^Xz5;5^Fd< z_tJpYx}mrNyj3REpQFZK(m*+p(`6P`!GrJXyxy$r#lQt*Z{h5w3k?pb&zhP3%A?$V zeyo<7Qox0bjB}7j;qbmSUgD?4-P?K`$HGtaQQO)3PEQs1h7{}6?5|(>1O=E-M=_fQ zd3{ zWd5pI31V*Ql@e}Z8}Gmt&(mK2r60(jPty7mZ+xbq}4 z2=>r6BT?N4vyS(!*wMoF&qIrd2c@F&Bb$MG=ZzVQGT#}Aci8e5mVNwu>m6L1f72wKfUXGPRLXTiXNLJm zbsj|;X+jY+RZ{@;z)4Gv=QhoQxG)f}X5yqI#NZ$y{L{ud(AB5oM4^ZZS+i0qO&5{g z>kE%_=8Mi}9&j7pPLo#!M5e=R+ERb({0Q+?so+mDkBMz`2tCraGz|=A=t*Xx^6@T6 zRnbZcSe~Wzedz=9x|%8ylPu2wiJ#{6vU1zXIC0ZbVtVP+LE~WrNy@C1tY)1kJi6v< zuCx6F9mS%U=D*h44ze9g3vkFSnQf5V)IK1N6xtkcEuNRtJ0K*RvRg_TYmuL9<3A$( zH8j`crDn@K)O=vP1;RtOw#-I&k!Q`!r78WckhIYEPe(CZ-Frk=87++U3)4A%Pc6Q$ zw{kaEwb_ZbO!j-i!jF&kjmhB4QOvY$9CuCg6a}%C&mh0p*EjzVbtaEf3MLi7peN^y zY${$FDER@gYht~1hla9jZ)TTDQxAJ}g+APmJ5S78vv7yil5gx(ye4|&Rp)*Z4Emov5CHX@K{8@OJIZJj?6*tR2#<>Z{fC)Ng2@j9XG~o25g^(Ya zPiLa;NDuK#cP}o+-B_KMdYDVYA+3Fogy2^EX<&Fu?Zp#2@hw(7f%ATFDz|L+zd|uC z>kZT9&4BgZuCkgd1gNi*4Lhnlagk2w6LGjqN;tW zr0CGz({)<=0F1g{Jv(hHDN()C!9D*oz{+ZoVP!(!wV+GxK${-J7m!%&_){So4rBgt z!bKLhU?DtSNu~Nls@_+QW3vTru7d(12tt7dL`lm?vri#@?>XX|Zj2B0=I zx$9RH_ZU->b+$afdr~*~@xgxQKMQ%1{`{jYwnCjsmk^fE7-QHyTTuzem-5nvX({P? zLM^Uz_M!(bH?~^u1sJWrh*eG7?NN_REj!ta_BvhyR7<5)zyl|4Su~3UCV237{}0i( z!_|0k(=*VUSXGrVr3TLrZ$5qsEo<4QBhVhdY~TW)bJo7Nt)MzTHp*nF%4q)Xf?n~R zA%>aZwTndP3cp&@@{w;j!5J&R9CgoMPt1SiHgw=8ebr{|sX&QaaIB(`d6<+5XNkj^ zZEgUjoTEqEb#PGn;F$+e{e=fJQ!Sg(Jwux_`N5YJ&BCap0in75fk?f?>45b z!|q)+mbrHW$RTT@$LsZ|=DFXhKv>1GGp`$z=2o}vwSiK%8dI>1E&KYJKHC+uCXCut zg*y*rBl(&O@0rN-gRU3|WX2~?J+nL*RYmQi3)k5M(;n#z0GDDn*fT3<9eF795CgXK zEsU>r`p{S*#`JyYsKL{-Jao+?Vg`c6VL?YZ>c4|(z7Exe=)vp2ISG?hUM}nJafesl zNSD}gt~GE~i+;*{g{d~@d|#0$vBoUk{c?U_*M%>K9;Qt&4j9vkUomWqa>e~l5;01u zy1IIiKmJ?jQ-49sMUtFb;Nsm?cD;VN=C{6ljO6(1b*>M?ZU;HxV5sD_ z8C}o*!}6*Y^w3e^fEs}dZ#JDFI@6lHQ_uB9-9A}0iuvs#{ye5l#nG%(;50Z87lO$b zZ40YuIaWh@zhNX&m$m-778NB;A5v^&|Ds+Iq$RSNqE9P>T3jl23c-xek38sato(vX ziE%XVn%?}tZc4+87h`(3D=BDl(WOPa%NxGw_R)rWyG&#e#g7>Q4ghtW%blEmSgm+C zOv@YKB9N&;lSXlH|NSH2mA~v%Hlv0>lsz!a*0(#mkpPNo+E|>+0$n@$O^gRD>;lgN@VU35-Yg{+(wwAwRFhM4tBh%LR;DcW?Y2 z34r%$`a;ZfHAG|dXwvlUeP){dvtTe!;DoNOu3?!zKjT0c8V3hx0@AXn%hmc$ErSrf zY=+T0PW_h9>z<9lTRls5!nvu&w7kucvI@Wm(!#<$F(=r_P)Q&|ws$I>Yyu&Uy0nBd z>}VgwaXt*)=<(p+yCVi(^|(AJL<=hNYf$gufl;&euVkV3m_ee^aiOk-cnl*jGtxDH z@Ad!L6C(X{`QbGkjX2KuENd2x4Ie*2%gxQr@oX0tmt8j-25!~qnuxZS-Be$zs~Z~{ zWUn|zd{jC6#A@*Pt)+Q3c!LL+n{nW1o`k8XDS6vYl7XQi_@6(IBrU3{s-9a~y5%W& z9;t~Yq#nxMgEu$d4_!!7sI00&zNKfIA7VzaKr3q`KsE$z(75!L^qVQ#7a~1b#{L{%NRdxyhx388+xmq;PJJl1}+)Cn-H+m zMQ!=)+56JElwmY_%K_5)k%L{yqe>o;8Jrc>a{QAV3E(w z|Au*UMVG6UqJjQtcCWRg#TPj_rM{V`p3j%VZ#bH}zAP_mUf^wcHSqxWr&cC-662nm zn54bW&c-aHsCir#3!r;_!m7DF%X&+t`WYKQ39Wu1S!s}#jt&Zhr#3dEr`m5T6hIG6 zX8;aFaYRjd`EM=mvWoYAi#e5jKJS?H@dsun!T$bGd3x1^e+FSs{ua`X-Q z7CmHG`0BmC_|c4R*5uinb!6T2g6aZ{+h14ciIu(ILp1|k zEYM9&@*ZBvoXXxG8DtCPLSw4#)WEl^sv8^Egxm%mVZLnqUIJy?D)ATJI)5jzJ6-ZoF6nu@6&^e)XKP<;@T!@5Y#sF~K01CGae_o~ zkW6tdz}9@kHcLnT(sto@Qo)ah7ux-)7T5-t46G#TFVCCZo{tOyFgZE7(>)GqUJ6rm z?_HPBg6B#I1B<0A@ zo}*r`^fvj8bDM^mqimD5+ICCm+&2=7p5qpG7v$u|S17*!qP&l>d}U*yW60@lmrz&L z)wfE^TA&<;wiPa}m6T$(5;&Cc6`n-*Q^BEMpEcn_+{Ogn5V`)FI2wNGA~V1&VGUi% zaXR~$w_ejRdrjrQSj~$vKB2rK{yASzFZ(MU`yE`iP2*)X`qMzX72ijGox~lexRD}` zMe_Z|>!FLCShW+8C6F%19Klr;AVM|1`bFC@!yC)-iq$%(XcG_~Xt$;jNgJuGydxQR zjE(4MI~=!EMGn?Z4FQ+c%_-me?dJChYwO$D;+9JT-l{L9P?NQGn;Z2*M^M2jZd~T< z7EG$wA=Q94;vdC!#jygKk~*bsYJqmMZfMg{&B|uEBy(K!{guz2N2r0_7S<_-6qx;| zEtTm#X}c^lYm9qGaPa$?okdeOt7i~$A^HXw?Cw}O{lNG2LJP-^vvpcGUzEv_%CGnp zu+8+y-b~}r9keq)*#3ZykkY`B9iVGCq~w(eUHyk@41!dF2|rCk7srM_{B<-?z$-QX z0M-%e^w_2w(|ZT8E9@Ou#H-u6pxUZ6#Dt;=`&v~H3DwAc;)m#9RYpc z2w*KfTDQ4Cd-|TAE{B?EQ>dNoXsZ3Cj^~hf|6mljjaV)`+G^Rx6M4Q(SotO)Kiuus zWr=rG1n`aG|0;LVEjsWVV3jUWg)77%W zeBZ&{o@ZZLB8Iml+};}KIyLG2W2T$HpubQNkinto_qr+Y>@4@XV96SR8uvjaxO*lO zv&q*4|GW=~ZLgMYi0|K@QQ;Ivdsh$TJM~3OgJ$A0+K!1Q?F^d>@1LpSUo27_SqQ_1 zBA$9As8)Ct^@S0ZKrK@*GZMl|8=6|X0*5LCFZu@c_IXhuRI3f8FUk@;&87jK z%iC2c^>)nF;5%Ys`x^HkXxR(Zy73Wp_Tmg0_H^CbXNws|jes}J%%>dSl5kMwLA3>b z!}>>uH4!t}x*{O!wa$OJ@5Ri}fNhE!Fu-TlSEZRS8etRTn9LQCilZk+Dr33|+7}K# zBkypVoXudL<9q+jwJ_9ib10!^?^HMR|H8dk&gvT5yph-3bHyPm;r{tXsi?J(LI3*Z zk5JYrEEa34DB%+npE1mCI5Sgy-y^+koi8&*rEYSteL*F3lbX7jC7>GmvLh`3skH8% zm0%c-OT8ODkxksS3-z+DH7J53^l(&?UqVyFzbRcKfYLLHGtFlz_ef&UagMT zq<3ie$nE2}n7jp49+##+^$s*qRu#_Gv(d*}@V(O_F{`q`!F8YNr|?4$(&)EQu^@oq zEJYa3Znx*xO+LVI0_^30EyOaOW&vR4ZM*@oX)&ht@&B*(uJf(I5CZ&e#H?G)fD$73unmjc#ZK(Gl z=qAi(fOWm3Q}wW-A1W9|BZH7%YD=zv_NKop5V%Q#qkqUJRDW|J53CdfLItA^zW7

otrN#hW8H+I1KeBRBrj){@lsQ-|aa zwD%fqg`)wt+^Zth$HcOjhyfgm(`hUC{zmxJ* zljJ>UZk!yQ{#fJwT=bt0UfYR0(pPPitOq8%Xxoh2hS=(oXp5e*$g^@kkm@b}#eQz5 zd8*$Y<|a%w^yhLsX({C5mLDz}mWaRXp=zgWU?-bcyKE;U)sCx<{T$BTD`>QNKlGk~ zALGv^jSn`ZCuypm0_zybZFE z(!fq)XNg+lQ^t@L*MDQ@yAa-JG>#$aYbO+QW5rYygD8!jh+A+7?X~4CD7BR;@qT;r zbxOdXp{($WWAR$8_rmuC)DllP6RU`2au!|5j|HPHkL;L+v_O*iUE;%xDf!27Q?k?(-9KP$q>vJM z39zM<<^oi6>u%Q}-l(uKRzuJL|uu-}v3rj2@x` zq#I$;xTpU)qoU*6A^wEtQshr0I4c=Ym15}#YvJ+CcK2I18%gCJtMbxe_I z$3zSk84bB-Dz7JV7?MWM zndL>rdi11A%ngUy_6{FTfiaYRo)Cczrs~}p3BR1_tkK!@Tw~w6sq$@4n9{TNS@K<$&EEsArpjl5iWoZQi#;6p??6k5)!b@^>b=4s^$VJ^$>z-gngMq`#_*XKA{+cZkvWp~ zsCZH-LW1BERSc#y9?KKRMBrQ^TAMlvp%0$cdR0tGS)24gYwQeLCua4q$B$t9;rHaHPyZ5i^JQ<@LCClfwp+GWMZjqpSfmnT8r4Mj zQ5N?pRNdH{CJy!%^u=45*u{h#QIHKj3s4Mln1Ii>2V-Sh-rzp3e z)n?CFW&PdEQ^^nNa?7j{QrBrFsT|GBNHGP~Ebez_t#^KQ&Yy`!dj7t1B<5%{RlEPL zC797y$<6)2AE~n>Ay(!4uO3U@XME2lR!+pQq~5Gz!sS23^o!}I3)XGnjjrqA<08TB z`Udc9*9a=dlT{%Rm35uW>NpJjcsqyAhTSHeW*IMJ&!zU^>V1?PBMEd_ADQ>TtC{$u??BcJI%!&30!HLj6TJp1P(qpTN{wn15SQ(BD_IQ6u>6nT%Zzl*5t+ zWe0~ux2SaZU;-p!%RhF|4=$ljeN2{fcy>`8>?RGOSCMsI5O_O`8(nj$t*D9tazW*)?w;Wi^y;=*O&+c&zj!y-_hUh zndIsgQqrm*kWli)KyRKt!IO{EZcQkK;5#FQf(Uu2pt2XojGCa%xxUTHxMKK5>1%`5 zLr+u{P0KyavyMmO_f4EePVb+I4e3m({$&Qb=H(1ohqbtk-qYRSlu~bsK)W+@PGzs{ zN>1?s%CoHt%7bsT0{3`Nn?}6OU1=lwW&Z-*0I&Z zqW(tWx9j|FbjW?N{X276-;5~KSF;85)-o?c%IEz)TmXNCaq=dR4Zu(cj;9j-9!t)Krr2M-;thb$_P@F&ul;xgfG5h$`+|4^4L9+{6m9KkXbir$o5m26p=G4X z$dfRA<}rIAwKM@8Z^Ty<4}-~^B1PK(>Lbnji=o+V(VyUO9|i`BS4XW2JZ~@fc2y6Fq!4>aA=VwdfmTVwQq^&+o8>lQ zrQlWf#=;W674gCD)n3s4MAU7_!ZbJ%w(-z3&&v#IZ&lLwOsbcB3t+$RpTQQqr`pz* z8zg016`A#K)APQs)e$25c#7I+uVQ}BYV^~$rNDs%l^7W{jK1S%d3x&6+Ym84PRqR+ zV~d?%8xjtavGQ0x&-KB*7f(O6;I%d0%{9ju(AmDocxhQR&k9fhYO}` zSe3?=y-EB+Qu~=!6x|kvPwz48(R?-?n)j9bdqPbEq7Gf0d2940FG*x^ln}pInTB|z zZEtzvo5Eq3ka?y3fZDGKlD!XAg4D?>Fl5`gLIt^-Kbl72LrR~w{^z|?D`fg{Ki4{k zAoV8}UuFL5X?E-V#@Rv}xr86ud=%6LeIE_kKhsu1MfvRJ5Vfq??)7hMnA;p6-A9Dy zXd|>X<2gk%5H(YRefG9|6zm&?k8I_t23e-R>Wka^da~Ww3vgVT{2f%p*Q2%X$jz@K z`T=oQzE%`E_f;&Coy~Ls4*esQH4^D~%e%_poV*1po4uJq1G`;ERiZ&r#8+#{7?9%D z`BS*qWSL$3c{Ki8A#o@@;$@1-jizwIUXICZ{m$A)MvXz9*n`MCA}N8%=b{Yd{5fl{ zWq#2T*4Mo(t(@zOoHeyX2l1K`wK!2)6gm8SJOVQj=rxo(&Z&N3^TJCL&XG`B{m?1l zx!L)0b>4XeYccfEB3Fr`s_MEoY$Qua=@=Y!tyw-TVUmPs zsCO;CVPoy)QAByt506f8V(Gi+HC4k}?$8o+nEgzy;wPm*)yDFPWX`#?r}jS&_Iyac z5gryQ-}DXB(hw1bbc_sbw(oaQ9 zx?-qnd58~klA6uJ^DnYBzG&oAVNq6nMAj{EKN~6>6AnseJ&HxGs;+cTQaa?>Grr>V z(i`+8BWaS?A$C%GSLYN`GI#91){^4?Au_jDl?%PVwfsv%M}< zGOK|%AH6reJHb6q(fT~HyEJrH`B8_JTI~mDZjQ>O3_bV*eV*|+kG=6V0gm&qN&Z%-^zt~5qT`z3dtdG(l%1sTtL7_jw9+Q%r z^*z2$zwG)BNpf-Sc=>h40biZ_;fM!}o@hva_hK z5O!Bu?z#7ls5I}l7q$Z6(JYfR?U-#_uW^N z%O4Z`R4GLL)b*qi-m|PgH%@C-gFsmC0DZOZ)2D+!!Lbx^_42@9PI^y>qdi=pZ5(~z zD)5AsTkV`|a6?MVDSi2VD=H-3lBpT0lle;%wJJV%4y9x58&s80uyJjP?TycDuzD!HT^^UUBIiN4vNHd~ zy0FWqva~dmOW$snp|Hb?>EBz$sC+oBT%``(*M5E)J7k_9p{h3frAg-;>GaN(lIK$)xzl2&+)~c zTU9yh*o6(*8h*biZc0mt7@UWaof7-%l=3_w9Od)iQ-_HkR!T_UvD!{DSkf|Jpl7PC zng9l2N_IN0PRlv1rcQNEwboq;XScxP`IeiG&xlkZz4u1#>CH1jRsjB)!7_$E<=K=k zl%IT&J zmf5MtKG5t%7BRJF>`y-Pp(zO{k0i1=>6th)6l?^Pyld_d%1ti)DbG9Sw?dOSC0Sam z_*HM9%6mSr_~OCz{YoZB%9caf$G(uNli7WErmu@px95Z0tjOn*FcOM}E?-Qvhd^^F zJ)Ol>9>|33J#i80qPg`;%<0}7GpnPgvxTC#qnA3}fnF_I?PM3mvPNrTR7RN1*2c}ol+8XXq07G&@&EXGH@!;8XU&rvdxj=8GrYf-X@_4armkQU zsq?wAfbRCQA=A^++8vHKi>&2Jwfq5q@N|vTxy# zu-yR%*WY>g>9>23C;q_)B*Wbe2ROc3a)24g-dV>38TBeg@{p%!~8ElR`m^q35 zs6@5H=}yXQIao`J*>71fyy90QxtH$!e3hHBovfKln%}?uiL_L-G;O^9aU0t?=QVZ9 z@g6gEnGN*0n6zt2oXA9JI1dp7Cf823(YgjNj&XJxF+9VgyV+lTP)c2D>9T=SXty5S z?GAlRj{QBTY;u<}UYIqjHq=$UCDiSH;2Vx8oEFK15=3jLV|=D65l6J@`?Pb{@s=mD zKw6?{Go{$V_x^3)vcyc4i5FLuPv>)|trh+g^G}le?&S5Dau?#^@mY;Q$G_FB+Q;d%2CO6eG*Bd;ZVD{`X?|t%Y*yftAz3A8od$M$e!(4)4O;Qs@1! zHzEoMJR%jI4Z92){d_ln+V(Z^H)A|C31J}|L8A41e7&vozd@v>mqoyW)1-r(VE-aL zz0m4{opiM`8cNN=n8dLgo0wI8%$Pwd*&edgF>^hTy~`5m#5FHls5xhPN7kH#zfgiw z7a{wf?|ep=k3c)y(!d{wNYxhEt@6`qgD;0ttJcI^2LbGs%H>oUt5dYXueN`22xo2^ zWb9Nk;=VaOMFG93xDEbZ=You{zw9C_uSB~-<&;`JbgcdG{Wjr^BjzI-;g^OrkJ;oIQkmpLqImI)uDkS!bsZmAxGMgTEbXW*^0jG`1Rp1MXr)4HLF~K!59Gzv(kFF933BpJr`4-S-1@ybS6L?3E zgQ5H8%&M2AgO5ldHzz1*BoLNu-T{*R7dn%b9>Y(|{yyaU#dY#o$0vKxug-kc{EJ)R zm%~o}2~Iof8BQ8#!c)YIksDpX{;2!ka9|2ZkIpq{@L&tZ4+spykJgP&Phct=51%t) zs=Fr1mcFhY)<>lqcC)^&zr%`!Qg7u|5Qd(Fc3>r6*!T(3kcmVX`*DF=$*9DQTeu60L}>+$ovuyu-RDc#y6O&c;Vfr5%btXV54GH^B+`@S(R*c; zW3byu*0vAZuucy8Yp zw&BojidkwKm|}5%LyhqU;pZb~p4Sy9mif_WV+G^0yp1>#`vNZ;lx3VBcK*}!F4-Pq z)2Wy+DRx;ULc;m2>w*e)(>{7nzkSE>Y<~OFLToU`Z=cKQnMUp2%&I4om>~VGab=w^ z<;l`{j$g&w+F8;GvW-~T8tMPsb9OG6x9(azSuI%~#4XhLt|j1)e6d9qaHiLt%wMd3 zHKS_|qqkNyfKsmR&|fu07GFtf1`cFSnBEHT#$87CRpJkai5dUCfv;mb3p z)k2e57m&8?ldW-_(paf6PI7;dFI0Wg$&AsK?3X+=p%EEMY#PhMFI0SMgPbF=W?FaT z{mebK!RTt%Pag}XEIG#SH;6`B)=kT@8=|mf&Fxv^sf}Q0|b4}%^ zQ8h0czPdU6CX;H)PqeStH92SvUO*~H{oIV47y0;^<<2C1`d{qVu1ey3Rd(C4tvC(c z!M9b4G5_~F)Xg$sq_8p;0$Tg%y&qG%c;@jl;VH$w^p_V!b_J#Sj;53JB)=I{!9iYFY9HX2du4 zJduwPl~_(e4t2K|yFq~VX?6C2Ac$bjLa?x7U!%4=QmAmO;azpBX;Y)nZ!~lX2je}J zuV(v-dfPv{@kX;UrMmQj6%`0IQ3>((gQ320p}RFFNyz@^m&ooN8n@rP(LD16KnLCa z{ad)rS=q>RupamekRbktg~;KN&{oIsAyg~>pFrRofiYt)r&FP>{WWnME#p)r(pCK@ z`^|CaF~AG%3)*ZI3KNm{>Y4!O z0<%g=c5moY0o zH#Y-6A)jI%E-T)jzy(?k0rK|%0 zKpIuKD~B{ze86BVpCmbt)aCB_E{KH2EHPorjeT}HzI|>4G}K->a(qKwA(Av;4$kv8Y$R5kAtu#nYwD%0AirGlt}Z= zoGe{Dq_v==X(AICUp7;pXYJ%{n#`Uioq;*?X3WAh+pIZU095hxFPHx`uwrhFn7Tax z@x949;23<*u?>B7D7BL1(#g09ETTJ>uK-uoO_SLL-As*q1B@tjVCLKZ?RY-Y43CR| z-pHCZdjRLip<(CxB376Q`Hr)memk77e;neyl=!qBm#1ZUHK^h^ z?LK*Y6X292SjVQ$DNeTrxfRlmJ7c}k-hLK z!!?3F0kQ_CmtJudO46eHfjotoIEdB!dZcsGIQbmBvIp+U{`a>3^KwGE5V}5M|`cJ7_L4*yY-Ti?_%@*PfR4}3V6$p zB`g$pz9B@zndUI>ar3gRD;&yq`u^?yU!~my1P6aV#vBI0F!4Sj0OdRLJ33Z_c{feN ztOm1vSH0`caMv*TBJsK~0licmE?jWR3s&`zyX|yt!~j1@zjdo~Ewr?K4dba+i}X@A z{!zvKHwDzxGqz0PkCURxL=JKxIF% z#HYi_Klpt_2Qy5Lh$Dv%A7em!B+BH)#b42a4Xc6{u%6w)ZS%}NhtAU-9nv>#6FYsg z9^ly%D~p=}+JPg$)%Q{+6U$^o{*H_4AWIf~``gf@pW+!j6Qa{DvRXSA$}|NGv};1S z0ZZ?QC6?#Sa1Ljji&cqUoJde`v`jy|R;};1o>{8Zy*jaH0mQ23g8zu_`_C#-`b0tR zWZogREye6gq07DIm*q9W1S2YN7fcKMIMd(<9D#J?&Ji~|xNkapzAW|4qQc-0!~h;- z#DsQJKwdipj;BpvgWlG)99AY`b#B3@8kNbR6%>q&qAZL-PRP(CzkxySPOTy|+fZ*+ zb>Lk^|CQ=aGKWdTDRcM?%O7@{Fj z{U8>#`>fJS%22K_+xFx(y%>7r9uX%&Oo$R%n|bFes`$=ML~LLBPloyr=TBvM(G~u@3AlG2jt$;Z`BI0pE?{!>@1-mj&@|z zy|Fihugb4-jh+Y<&9NrbZkKUqy;=L>*T6mX%YmysOehTTH&`y~B(HG3S^=(xbU<^8 z!=Hjrth)aIkfkkh!hZk$w~q{B0*92Oj6nSPwRMh2U1(}yPA5xdm9H)(_LknOP$=Js zS_3Z)9SYMvSbj6xY6rP0QIH=#Bq{{aU5*z2u?Hgb2P5CXQ({WwGjg3x5q`~5cLl^K z=7o}Z?^W!+wClQ=CRGDgA>d#WlHEJ1E48fJ+wwb-b9zTu-8T*x!P7Vv_1GD0vcyWo z)1{w!O3%jgn3~h&u6xhT*8Zj~2*B%jhDz#y(mC{1z~6M$bo4js4G?47jbFNimSk8{ z^9i=Gc`ed9Wm?C(xAO$WtzVt|@IO7t=__j|&f;mh4ePy?Bt>WHz=-}#Vg4~?Nw~9PK>luv_)C-R_OblMzE#TEWvh8n z%JlvT+TQAkG=)3g&6$%_8Vd@`Bd-3CYg%Lj`EW)yTq8+A8s{}Sy|Hc-6t@xHEn@Mz z$g&l86KJoDH1yKLm%42zO{eNG(EnQA$nqKm%ZMEMu>pkMp3Tu3Bc(vv&b>1B)e$yq z!4oCqBl(p-9e)&5YO7>9_8j#^W{N_-w^fumk2rf8WA=$ zTZvh_0c)_qE?{hYr1z8TdiRYB@Cf?*L}{H7R|u`PNf7N$pM7=BvlF1*7s0}TviT)* zElKk0T00r zGR$(LO`%Wl2JNFhLF*y%N#cuj^Q+ww{`UU9TTba)2qL7#PWwThTn(*hBj-D+VOmQE z2|qB2Ka(0ORiG{H7}S;9cygSkR@@Qsy|EW87=}y`E)OfnnJDIP;hqo?EJGkEj>bIc zceWuHuCm**=Gf97Q@~V^gUZsC2K^>TE>r^DiuJebbaBfVo!z$u={4j_s5l%O4bv0| z4pnLXjw7ml9v8=0k(#dp=Dg{J;tEO@^25ZBigQX*8QR|F zlX&GpI3K4Wjj`UX>=W-jmSE>UiSqE|3JToERiHS65c^A0He(S15yR#-&Pe$D?5~fg z;D2v4ipZt~7mR2E>yoo(+W6XdR4+53m^*G`@l-tBpU_QU{9JzOlQ@Y-B?>y=URz_d zcn!;}(avg!1uOGUbGkJlk{rB>Cl>|g7hjdGfLCQVGD6E6vNZ$(A5|BE3>7mJ(RUI~ zau6IY2NkVely+*LjZJOcxlz^KnC4W{2s~o60NcN-3dPNzxn8;Z2Itl;;jk9zeE9LM zS1&V6a;m#F63~o`5tPANYVu`y&=M*5gw!>APD3@*4$NIxXK4wSuw`*u)O`jA*66>K zHTweO^kTis%Z+Rq5}byhAVx0fvFU()VOeMmKPPjPey(ucV%#Qx!W_aL6LHKlJguoK zaw&+nEiBJfx*j{%xwN#ND;Tj^0y;hG+DJ6F(0ujU(XT;oK#r0j z_8PPcZB(fd_wPy|xt8!)G?2JDBDF4F>~O#lHohHRcI4faBHDfs^_~cx?qjLy@tU#y zhNHuPD&w-SEs|guOEvo)HOa8FBq)gbpk>`k?WX2MBR%KXxYOxa_1nBbEy7bCP=fIr~K%(y+I9laj^?P+0tOoPeNFdIaMu0 z-KqXzT>z7--a!sgZ{|XJ=Q2#%HR^B??38jhwWjOyKonyNGG&#E8@vMM)Bn_qQTjv?vPuK4YYl9%=X(F5wzQn$MR+z6HqreIGnkJ?XgqhQLI9RHLc;sVmp7aK7C( z^Qim%F}T9s(AMELW*`YScqa(_eK`vbg`xyRasKPm;YEEM3o)aofeS2kqv5CpI2k zEFQJs6OBi)Db28e_@?9bpH|e3c(qVU7p2pon8sdj5I%BNAanXthufy6h*|w(kl^B~ zXR~F-5ly5tl(^Cnr*%lv>%A$rA19>OCk~RE&u#p-UTNZ9x}F}qwE8>_as|lcYDZwq zTe~Bd)T>4<(|!T|;H)F^trGVjp=c`$A)U*5cQ}B8OOy#hDgMgu_5D1KPFax7mY<8L zwYfCHgg1GX+#BG@IQDRx4iomd*IH7$b0)+hr8A<@GA8d!+WRG{m5t?an6h|~3d8*kxY&TP0Jekrqv(W?juIN2xdNqWgh}J1tBx zW2R4LtQ_b6fc4of8~Rq#Ev7{o-3&xvU8wYNKU!+#kFYOL8+^uHQNJZD?DBm02?d!b z;$3-tO*JzNhV9!y&hX84E2-~Ayl(Makw%iz0H4GB`$n&4yoS!hchj_)wxKQ{j@&@X z>e*u6l|V5(ki$P;BTKq_cSa_87kMveDV+utzP*tK>dwA{t?Jd@39r&&DOPNL$#hr6 znE&~1Ti8+i&rrMDxxt5;W0fj&@fpDu+*_tfpb)H6Y`0&H0Y&ffJSfgzn-7(6To-MR zB}N)dFxY6P?s61^ezf1863Z*39mvB0R!{YnP`Umxlt#I6ZO|(%JM; zf3S%je*#HQRW^WL;{g^dA11+&eR>ou+jNnftON3U_y3gyf#hr(u3X2A{lChex-+s6 zNCZxvc;#*T#2({J;daO0_56mlZm%K(o_9#D zgvI)ysk^d0=gCAeuJ%7Eok*~Notq+M&mUYQbiN(_7E^$$^ue*m{QLyG)ECWwHe}{g zs>)0ug2kV!0GsUB5%eniT}qcjD>17?i#*qzaq3(H$W2b+!nJp!nOBMb;-0g^5~VGx zAYr^qLwdH=?9UfDf)nC8dVqj2*L2(=a_Vydw7q>h0UePgYwRY#8okEdxxS?=N)=)- zT+5S>KJmVE1i4s|LC+0d&KU7$z#;rEhT6ta1X_XWuUL=(+pSZ_lWaO1DKT)h_Oy8| z>Dg-|f8m^PNsXyWn)&v)^C%~uHj}#VXF%H6WFv?6R?<)KZA6t%f;6npSuPbqhIR(m z9yIwIC`Bs+if0blFjn3dq>F@eS`$qNMNTKOIX)>)_owwenTue z7QhPS8n~KD&i0Hvt4ECOPePuLR0~)QJ6h7s-7{)GXc)ImKiMnvqm4%Q&*p~7&w4II znK9#f>=a`fR}`-&;_ge-Mdc9DGH8QTDq$$Z2pMu?3TUMN`9F`fj^=2tAkV;e!WAI} zPl4*8za4CZ@|@Hv-4?7to(pXO7zh%td82x=@pmT}2AE&1k)lX63Uh!+6GxAS(I|Wa zAt_9LYVKRbWdn1jrEl&glrL)P}Fzl)~ueu(n0 zqqmG@Yaro@M8MtGZkIo+L>^2|k#3W0UJ<9MN z*nD@gl093KHw#?iQQoQ}pw{s38|x307JrCIxZNnYEE!&vLBu_-A%jb$ml7T~GDw3* zryOc8*np;&fzt`B>URmQ+f!`1qKQOP6hQ!fM)m|J4PAxuklWw192gEjv`)DFdZ>Aa zM1#a)-g>YjM{^1xRrZy`AyqRxk<6YpSUQQP5Sh!E%oAjhj;dZwa55p4_44R(**<&FW-1RbtoXX?CgJGd3PZSB-q zmn#U0AL#A@MAbbTKac>2<>R;RR+aenudt|eH&#nkk@cZ-nqA-CK*@?V8t2`{L9Svky*P$C-%8*tV|`7HZ1Fo5#u3YK%Tx z-m~_LH{NNVT$4Oey-r}){_?&_xohsZ-EG8%KRC@Bz=NnO(zbA-k_wh(RGUEhQ_T}0 zwl0>W-Qd(S!7w@@LAjP%RPA^ z6Vx4l)~*z(@KTGGj&iIMM8mJ`O}7OJ;+-_<`uji|;&rA1Q(t1bmN1KS3Np+Aj*ajmS&e~kj{OakEP=z4Jd)u=NGG^I zs`BKuShaLlJJpEnyx=`2h>f1Cz=HmL0-H;a;+_n9a3;70NzT<^eDBq%q{hsQV;?%byuu7Rk|M((9~Pekb^# zs|N*#`Vl*Y4W4BzKBVAU67^+gVvj}GXH|HBP;TorPoRc*C4UqOKvL6Ve;JlugKI`vRy4Lea6E5RJK-W()_@_h&PtbSD^o^P1fg`W`=51=7uar5GL ziN;mn@ zSH%0Mtv;rgj6!VF1r0Y;l5>>1A^Lm=6a*a{;U7HkeR%at??pe)#bK=FW1;yQNAmLT zp7&JVW2y)fDJRMELK_?_>y zk0FL6j#EAm>UK7_S?BNKSI~ENPo?RTKfJqB^R~94P}XR&Bn1-@Vwa@f&q*006M}h8 zBt}5=PTg0(2|4{lJD7}>h&YG4iMKM^n89nLuklrv9T~ArhW`X9fdotv)0$J1;!q&q zjrX3_g>5e&03qQa20L*6=-eA~0SnbjWtZ*`VpwT?A0_TfDE5|ODnA&H=1FZ;8N;5O z-G?Ywg?aJo>xP#`SViHVvZ%gdfj3=^l6v&2m`xy{w-icI4pvKX<j$+)TsjozlO^3+B`&l<>lhbiqFpS$e569! z@lcyYu~4w>0(krv2{`i_TY>mI4F$7%;2mZiDZ%|zZ+kZyGC9*mI`Sff{`lp)*QgPu zwAxUaoW($yG&l(b(oZDvE%Xdj)&B7D!lM!C6U?6ylJAMHR+Ec5il!uHJ2JYBq6}nC zF4!wLqh~0l4u^cCg<=l(H61yoSc;KcMz7TUl;dJoa-O$?_?F zPH-u72N6aE%tWfRNXe~%UDG??ez7>d#9Bt9_+MzTp$Is%)A5JXY)))0*=X?OA*Jpy zfhoC}qG7*gxZ9k52?<**8>UGwFfU7weAmmM)=97Xs7+(j8C2qlPcKRwB&nNTeW-r^ zA2Q-|rSFr#SK=DMm0|9-=}ji%L%MaJ)+)>7?cdC7{aaQUfwARFN*_pxv$EwMD<1Lr zb{J_XAFCl95u3>%yH9OsodrU8TraNfRX`#XA6v}_Aw0aH&dx}AjtGXt_y_)OL3|Xh z{X=jil|$Pa;2z~~BsRcFV`0WIB0%!Sbf)^+sG&%OF@rtZiFo9LtTS3cT4aDxW4BU4 zur^bP4Rfka67kJ(-@CwbhWib;XctBcmUQU@2H?5$Fu8uIMSsWG88U8YeGJQ9Ry zAO;q_ApSgnw4Ihvv5WD)lN6|x#fnEE633sBEfOEV&I|-Ckp(_?ThU@dLRnXlqM8zM zn!9a>GS#I-Lw7UaIW22X_Ft;?Dy=TP!P?xoLqPTLuFRNxqpaN@pZ2%k${<6;m?x&| z7^<~!JN(0u#Pa<#!Bl?%Z>&l?xKFcLVqOPnsmmL&I8z4RpJE6cCG6 z7|gOKuKc}XZPF?76fH!VlgV*E^{^#ay;d~*d?*WRu$CM0`oVFfo3|PrDk_Y%a1*V^ zw4wqzQm`C*O~ZcQFwg2@*<+cQi(Q*=j#i0AXECwzUv z{22!MKq=dprLL@FEgM+SNcOa3GLPVC(=%+71pAThE?L(^exFY!V!?lT4y2D-u>)L0mq_{Ny8jBDrCa9Y?=Es-n5n{*!u3Kx3A@WrjbTBu^!rPLXHT- z1~+Pgx9des{DMT3vjw@Ma5FU51+i-BQz9T+o83AIn9SJCu82qPYXm9}tDL5K{V0I+F`l-HR7_ zQ8v?ExJw@f22Uq1CyuFPs=ucBFWmU7QQ$_^K>ZFXqV-40B%G<_QbPjmy?-MlyGnH& zW<53{<1$w5grw}6e>HLP;e9VwJ$r)|0V~c^qNL-%E{|gZt)gY}fBL1CeeTmyZbZjP|%*6i(hMpupwk(u-Ast8kW3*=Y^Hy zp}*a+1G2WwiQxp3H+k0^8>MAN+nETJ(qCBlw#nLA4in{sm?wq8=boUA#0zqz1heFK zt2xSFjR%v!)OImT0~17>TWnXyT{E}7wNcAGfyE2+DS27mTA#Z0M98Et(x52VV8Z7% zs<0N}jPt$W|xx+)}RR>RM{<0AfdjXP<5 zNyy)Cueg1mO+RUo{Q^8hw!pTx_V=&z#i{$qtm)5Ye}8{?s1+dzr89sNyMa#6CK_)X zWpL%1`N$n#{GJGLF&y;|XYo11e^Few>n+PQ&f@gNt5m!E)N?+?8J2BjgDRnTNky00pP2xWC%0Kt zGvf+~imu@25?mGax&XF*t>?@b@{kRPwC%H#PR$!~w`7a-@j8Nak1udiH_(^s**=GY zI_$e|8Rkd@2kQO=QA}y`WiA3Ef+7wAUTa`z)Nx=?C}8CEuVEPw_&fkDu#WyZh_lDa z{a4yHMR~hV^mmm3I`#LDFgCw2=rOvtnUbIKHRd=Lh*&chz{T2tnBV$4o+6m<&o{Ss}6FpR*t9%5>nwpc(PjgY!sb7SJt@lg*}*oA!Bd zxJIdBFTmWJ29yIS5mj1gFvRqpBxT)o1tZehe{6d|!}b$hoD1@&CH_am!xe&qk?x{x zru#^!=U=LzVYoR2))T*#@c3PdI$mnZqSJ)bQ6Jcd&H>p`!~D}PzLU#Nsirv`pNF-o zl#$J6J5Ua|nWk~(vB|b9@6BzreO5fcgS7V7SC6UDjR= z{HXa*R?~+v?!IWg zI=Y$)q7eQ|Z0MA7s(cRl?ti|(wh0EyuYqKgdIqdpru=xQ(yp7~#HV0fUE~d9A0Nao zu`b4Kb0GQ8ZhF;P4sO|L5qh10_qoot`9}N!Mr}guf@;vLmK3UoV>;rnnLthIoucvE zCiDOxuY`#6Vj>YLnqUOK+QU(UF$EQ+pcg&>FL@r!c~lbk_i|#iX;~=YnY%ft+Tu`Q zRQ`mvziEGy@YYBPAYuM6fjS$7j@&t8su51oE_67*3=#49ASOlecOOSdx~i!Q+Bhw* zdst>7MuBaqZ#~cFbh%bhQ1)deT`BUBhS7CNUVELM%m3SfxECC7jlX$ zjBS*$MJoY=+i@kkYBMN>d(#@U-KBcGqI5Nm)BD|UI~!l$e+3^nSUZm2f7525tEYf` z$EQyoT2qNnQqOkrSJSbLN^0K)Np*(v)&bnVWwzq*f&bN!f7BbE^PJLt1=jp#c#+`` zuN7D3-k1jp@8QrRaAAHk0o??$RWc@jV|i?Wo-6MGBtEa+SzK{&kvifJ8NEG>Gb@bW zME#+S;(H-mt_^qM1R)Zx^Fo=L%FK^3iWB~YaG~O_OZF>?OCR9ybn@0_9OnKEuqw7j z5LQ(Fv-*xxOqe{JWsjmB(6rX`XxRGqiNR25&u%G!^r$G4Z8WorEAmrM@O77m)ba@c zDp^}nmyLZxv0nb4UzIrfGlP{1W5v@R<`*0jz+yneBA!G5e~vIJg<1HjA1jZ2h-Q%+ zVQYI-(SA+mnD3?fi!r0&@4ItSvZtjVDdb+wm)E6JN&s1~fnMJKq^>eqE|z?rpNq&ZgPFp`8eVYiZk!gsU4%zmv`i$VDSHm=)es(ggb` zoGixs`Ekv;T!PQOMyex-`%-@jRgYOJGVeb7)k>!b2W|kfcD$Tx6#Pqp2(>~$5{WXK zN(qpV5^`5QuI*v?EUk-JjNdEebroLK;0|?v!pm99ntb@LiTQ542v=GEXDPmJIyV5tRpW&Ud$q{N(P@VlNE(gzr!`@Y z>AG}3zEvLn@T#O4#x{Q_T^a+P**SW)ex<8(MJ46g4qu(rp(aRj3>ad`aObG3t?3R& zD`*$p*M3Q>^{B=!j{4Vk6;hUj+{|PpzKznGE1$sjzKHxgK$fQa06eemunN1jTswEw zl*EAcv*zyr6`YYPoX%Y(fB(jFSx-JtY2gq@p2N+;9bdV3?-55r25_rfdQOz_f`L(U zOjzk7dZV}q6MwUpZS%pSQKJQUu8r&Qz-lWq z4kn)$UKx7lUvxz4z{5>8(*!1oRJqmZqxiG+cUa=<8Esh%&liS!BLD`x`1baI)}x~r zapcPWy0R^23#)(r{7{<5aQT>O9K_dK10Impqq&q^%g;YSK0hOOgf&6O71uUWe~+|) zyULmuOpIUcHq2fWKlBGa+dPpKaK3VC7o{~hc6-ZyK52Y-b?%5hU{$;H2bQX1pZuJ! zKiy-g5umg9SS`C4c*X^_iJd+zBuE`7d*x#Jv`Kdtfk{_y7+=CJZ{UR*@UUvfkrVi{ zy2sXkj(=it?DpuX<;SKMHAvq)0%4qm-EA);BAok%jG|sU+o%SmjfKA67sT!n#mNJW zgl2zMzvDUG(cI!y?ke%KGtnC*-*Fh|9}n2@;+{Bgf05RE)C+)krHi;2*b|rhpq8-o zh!XB9+Y<>eApBqKeRWinU)ZgR0!j=B(jC$z-AW@RqO>%ULw74JInvTC(m6E9&?zA` zbobChbKmjzt#94`@4wfzTx(qOg6Ev~oaa1epS|}J-WrVymcn5tJbtcU27J9wI1X?;N`cx z8x8VLO5g>@pQ`)KMbwmj5PMlvf3p95wJ7$~JV7G%WziqyR)EpRf3Pd$7hMR{IS1SU z&u@ht@rZpNBHw9q6=C!vnNG)x1nCvKitV{-$X5)3t<$$jv1|Lo`b)rKUx%6Aqhmch z+T0=oma-X7#>3+=ldtnU1dhk$g?iEO+zJ~L)C!92NjAbl=z=%RWt z*kH!_S%l`|u)k+``(1>HG-EJ@Jd`oqGkCCT$_kXvRv* zp;Yk~oy>}?cZm}Oz(B+H!2EE5$QN5EQVCQFVyE{Z_{kvqOpr8* z_FO#|3md!28hJ7030+DPg`JhOL5f}bEq2;SOZ+z?d)FJlSn{uSeBcWNaC3dKuF{ff z9$l3aWy+6|Xt1s?qtauTNXCab8G0L#EF13~m-7Ime`)p1=WS;rrcE%#} zY&q7wnHTW;MEEAp5ig6Wb`-SbMvb*~A?c7we<}B8m{~1m@eMGpbjH%w$$D0lQuJ<4 z%jbHGFOAR4X0cq=eByCD87b#hmG_r2Ohuw~m=)PBvm&3ya3_!S-@blIZ-M%@(gv zX`H7lm!hIfeE}sYxTo9=)Zwqh)Va`xRB}T6*on18D_Y-S03;m!@3>2M(*QYi_5Cin z>mhKbJex$IIWj#Po& zdPU<>G{!Toc*2$bG~Lk}s5ua^lxsToIThTj-7%ynA9c;<;z{3&r|L2-utoo_WL$|O z+Yc|A2g<;C1dw!QGMj)ypqG|m?9_4zmowNhNgE1CIip#vb)j*-Z0duR+qxr2|% z4}Ot28w0Kt`K*A&T-9(!4L#wdcx?@%PM#*A;c$JH$?;=~v%rXP^nnSHbqs1h3+^g0 zoU`BYi*`Npi@XiSo{; zeNB?g?EU&RO}nykw-gyMXU79|h;CFfbI%JMO$$tl*{2;40kSyVB43jFMtuI)sag7@ z?;Ht2XgZ|a`Gc%vjkG_V7{7jLSX5gCc^LtFOb8C~!dhPDs3p6?pe}oIfJHDj=dW`X z@PL%Zr1Jya(}%{7cH||mAoo#jz+u^&e<$sl2#?|=Up@L4qRpuSH9XA(F|&pxX=YHz zTMoOs-|;LYc^Hne8GEfJ&(J|70kL&%GuDQ9lm0u5R;RL>=W^CXCuPpjCx7st^&htO zKaZaSorYq5$kLDKPdPVneI#}hev+7YM5|*2heyZ{W~?0?K~Nv2%|wuav%q*j(y8n^8j8FCMO>^lJc0{VoUZ8ZR#; zn!UjvX5pmkDjj*h+TUURri}a^_ zJf-!FaO${apMk|BWGeG3lx8mkM~KE>nWWMkW3sm^IL$@Z4><(Se8mX7>MXU^+tI!x zHjWTo=6uy3sIos}f-%Li^efjkJTUk{yd-D)hp;Q3cXmOFdcRA1JLomh zlK!SN>}oFsq{chFr0Uo(6a^7;w0+@-Tq4;FT{p+Vm+DxppP6ZTLCogA`qIo^R@0}D zZgGlhX{@spRDT#A=d~#~S6O4+Pw6hc{dgw?(K#Y+Qg+YnH_HPKXk5GFn_?S(lw2ky zJiWqkz$j`Lu@><0Z(4*BF;pDOw8LZYtp5@9+|bA4_S@L_`ldeW{S@zH4=r6Q#a@aL&4n8!Q{gG=}e25hEtP1vieK+%-HAvQ*{W~2;TIPqe zZko>1kd1d6MrgEbTBN<;)s2a(_01KUI&CXO3#^YKdIWFJS$Q>C$8<;)yY;0+RP`8# z-}WDJ@M1>?$;$T_{XSyXo>!Cy+iw^J^WX=Inq#W20~wkiT|j+t5I8kb z`Y(s*kKihrPXN};6Z9aD6Yte>_lE2{zp!s59I72))nBp7I)AYSA#3(Q46d-OK`}jo zhSxLC1<_oszZ^TmOKy5&p6bZZu7Dihq*q$k{v5^(bPIlG)XM10gMT=AZoAI0{&|JL z2G<<_Xi}r*p}>hn)@Q0YKxDTQ%wZDtP`tML+JU33#7#b#_MFASk7*tgv!l*MohzRD zE5ky-+`)@ZA-YJ?LK|FR$;^S|JuV_^P3!fS<`4Wdnhx)=3%-s@ZP+o+KS<60S z9=!*g;5Mp7H1$~K;vF=MyjV0ETFjLdsYvfB6{(>%*vAK zPBx5_(tYqa!6I0~kJAQKP#kTiK;Kkg?gnjjUf{W<<9MzHGxx=p%G*{9SMTXC z_4Wk4A}^~BqjBB5=%Uir(WdFlx_EvvECydGyK`ou4Lby_MJ2J_IfFHkpb z%R}-&2CHaf68qaY4uy(0T@}9kU%u46y}}Iq9m!Y0{1pR4^_p2J2t!l0e+pd~UKPs6 ztsM-%dytd)2J(gY%`t!C3JNV+5I*vH_t0$M(Z#YB|aWBvbT?;n^&x`u+g`F?bSyxWoiZM z7?7qRG8+CZ5*}9d3IwY-)xHfSN5F+?wz zZb^(&ptHo&x7MCj*J5l#%V=4Y&|ncf`%t37zh!TfpR4K!_W(f`>{Wuzu43+e@wrPS zW92Tu<%E{@r{vfw~rbN8!c)7_h)v11$cKBR-ZY267{04S?>EAO7+gH?)DFi zw)$0dUcxqA){#1=%!?v9Ki-g33@Lya^OQAxX8&0SV&qho!8Umy$g%QZm!UWd z|D-+?9O&kK#-RCeflVb%J5~kn#}ig%C4+QztrC6Niszt}0{~4tvvX%x53}>$Y{2=Z zd0^c1%`k>EDc2Wz%UIn{ip4|jcrt7|_ic_V%-G1NyY|}>gP(U2|D%BGj`QBf&hp=* zJwy~qxQ>=rI{OD$?T%xVh`$WQ$FrM6yfT*-ar~6ZD7+v)cJ9kQ5SU+XOa1n^Gn9ot zNNasae3>e_^z=zQ4mjcTyWK3U=g6!njzN7?pd z*TCVlsLbtV4{+{KAvUbC&`e~k`AxWUN}PO;GE?|EtDEUqC7n=M#Fr_7Io!nuu(Ntb z&ti~KIRC)Y!1oCieKEmcqEs=VMFH2(75!|5?6yl%wrfK=`%kgH>NJ!5w8f=4K?U;tw5vB^+QOknhp|Q)AHE$M zT`p;lHd|LecQWic3EO=S;3w}(SxVj@nANNCiGpwGi9Bbg4NeLaQBVk6%j$a z>LBx+p)vLRw4uO90$l0d^96w$hNRmm2LiYGOw+ZChWX zlbxj_)UnHU0rPpdd%t#@hXyvKSh|RPiLo8I_Y{w11?VN3sAHN_KZ~EkZ`To{fH1Sz z#{_(9F_)e|9?<`pDA56L=q>NM6%odYtR-!LZHM;@8=1sEEc7*EA!i?DW{yfuOy3MV zdb*QpI%w0$AMpZJE$Z|@a&9@E*Zg<0(oPWIVi>juvb0w+xtB0lPS&!R;E?)#&Xw<% zEFB(8qhAs{A)2UE04CX>%U8ZgcUJ&X)+C(>rvQO=s$gaD_E%oOt;BWR@3X-(GcLKM z>;WPnFmUMf%b-e>8S8E9lwPn@!?dTGw#85C($mDKQJY&3yGY5Z@fN7N3NA0?vk}}> zzsrMMW}@WMAPgI-?Hp_tf`jl|vbw~zHXL#V)M&cvTvh4ccLVUdQ)?28c z1J8Px%Z$G3LFOM(vniwPT5lXKtZVh-!$8@1w>N2XAZ5j@{jWoTLu^{tEp~=9oi6fp zWEE-|`zpQU^tO^>Mr@>Ts^ERA=^T27{deSgg+Y2s(*pE+Pf6@RotiIfcTKKws(dl^ zf+{x2Hmh2&;As`KmC3gm~Q7qv)k=(206_1 z_o&R2M{|FpQT8TK)gLiV0lbgmIP?Pqo!%AP3=6O|bA;~eT|}MO?o!v`m<%Max^|z7 z*v7yn-)LF{4b(~7x^~sQT~0OZ<pRc}pC^4P0nMY6$8%I#gV%evg6jy$5 zxL%yWWwEu`yY5T1EEyCYP88FJx#{V+_Ow=bt`D~DU0PjctB!?&+xYP|$1-NBr`IAX>SLzKCuy21K6Tpvq#M!nJKgkBipHBcmHaW4 zhN*U8r=zKLECVJ&*Vn#@&c{$10HFOjtB06GPrWT%Mg9oPwFULWiE;{OWPras(R{2a zx>C>~8?rvGsaFQ*V>tKYZ<}1g|4G|o~HY{XN7QU@FpEByB zvj;H2zz?gXT(Jwpt+p3N#-?9XnqSkQvngqclh?~S;;$^c9Ae+-a0<+?mv27|9k@E6)kk(wB#9W3C5O%58RlH4<$Y%+ipFJGVHJ}W3H9z5G zktSj_{%hih7qKn1`%A}*r3X-N4=!2=Y~oKbnOmOVDgx2hiN@~0T}dlJESX$5=JTw! z!L@w>7bZfhqy2V3%yK8g57UMsaUc*^q*t${QhSV=hiiIP08CcQZ9M9>oy$yIci5rZ zFaDbl>q@$~DaWZ`&+z*CuD@$bjLvWl# z$~-TK6yExfFL0eFO_HjEXR5dg@5I6b@1eaw`=z?hDTaFQNmgF2OY{E44KbH{oaTFCK-SD@@1R3svYQD^~QUUNNYI;lUdMsyc6}3eo`w zoA=c5l8!)`q3~X3q0DIRlO1N|m@etY6x`SPm}?h4$8SkBCgVBIWb`5tJr(H$=q#b@=y=29{8x#w6>8|!qMtNOyF1ZO4pnKL>dQ=HgT$6*m} zvSP~_wNhatkSrGsP$z9&e#m|?5q0%2+d%NSihX1WV1%?OrE_a`o8cZ++Kr1mtmd0JYWAqA!={ZcsWU!P zo>@;f)oY9YD{mkg2K)NUmB;{g>3L?n{+tSg%qn><-)!ByC(^W8b&xK^5v$col*kdy z@@wkX{+x`S4poP&y^iCgmFY*g|9oq}NmY;~>GDd&FFn7RM7fV;PdBrt6t(6XYh2b7 zip6a^_bYaM*?`mFV{>AB$tdIp5)*4LjRsA{h}kbFl1nsDvGhL*3z!^Gb^#xCrT$l! z_`lyheT&j3VvaulUvr=T<-nl)fBr|inAUAfJbD!OQtj-zvoAb#ZjC5cKNZ8#YV|$p zi6BeU6N+xNv^{j3tr959&+xeCf))M-xz>1}fGKCg_8n;c&f8I2x7W7iQZ>PG+h!qySx}L2oXTeC?v%Ulj#e#7*_^(vROxu2Uz}jcp4T-^qn4+C=X~*_uj|Qh8m2 z)e@WZP;E>>)e`8~YXh~dey2rC*E6L;j@Bz49EUDgQwZ8nI&Bsf3MB-@ZE>l3BS z-QMB@OTRyYUW6IjrFedJ;T_>_Z@J&@>?e}lP>D`G^pyC{_otG80NT}0KZnaUygt7q zjd6w?e;^l=u5JAw{X?t)>fN1+n`K9Gude2nN4sf>U)2#?6_@e=M1yemd2>+f`uQgd zKf&vYFF4LrbXX71I=oGrnSoxC`jQ|bGnV99jv>UFSi>Tn9FWGShiudlpRV$mS}sRD zka9ck4P1t^?WULR45sI=S3(b9JOmoVC$FJ%J}`~!=@CO|irX;-(^Y0U80ol;qXuse zeJ^i%hN5y`pC%}td8>S6E8mdb;h z>qQ4e$z$$?PnTPwemtsed^u0X94yk7PhOr3!ZRC_#!hs8$_Nb%islk$+!n4unvuJ~ zllrKR*8oD!fIsuTUG(-1g@*T?zCeYZ`G@3#h^|?%S_{I?_sSR05A#Jj+=zP3$++LV z7->REkRn>Em%rMXko`H*65FNnGOr;|)jj>J+O^!e%dzBl+y$|_SbB&9asBOUUmu|X zXz=!)TtWUqS=h_+!37XAW>z0#vm_0=hevko%N4a>HFKf zYoV5NVo}ZmO+(Aif&fB-JSom}xAzqq-mgBmxw~34Kz?oFa$RqF8mJ5UM zJ8dN*B4%Il+YbR&^deNtwEoVm_$P>0q=le#4 z3bkR|2Om{cjvqGcA`zl)aM^iXtdW(IWM%w>F_euFpwkAtOhFRqv5nA0H}=y7pY54B zx}qnJ30#9~cJ=ov?p8bJ3wFW6k_5pT6Jr;O!}G{7`Gaiv1vjo{(QXbQICfEe+LERM zM*#bt=V_n&JlC-2L`$kJhuX!?ce}0jks6P zo_Y{2D5=5`25Ww1!0`gmr`#beRmQ`jxJZyCI)sj)BNR-@2tT-Yxyy^4Q=zDiqJy}X`f``yu@a4wbsRSuP$D@ z+7I>n(1n}3M%hiW74$-&WDsjdH@t+?aB=d65*t=* z^yM>J+o&|W5j|t44xQGQZb>Cm+R)NUhf~&$KQHRo zRhaLzzi9Y&_v`ec9@O1PTa=He;2?HP<=}537s`S~R4{H(ZFJ2?Vhyd7`JH}pm$$CG zVK1;1DY)U%4;#v)&Zpy!`U7s5OFNJ+x?VWub&AfmN~6D*^mc#v8Lpm>;}IGZv~+;_ zgAM$(gWYh$fPX&ziY*~TkoXMeZXlojpgmdK((dR8eK9rN4p zkG|Px%rY57(D+?zVPLlzq$Z+^7P#vvA>M9^_c<(&Q$u|}Pq{@miEZk75sQyI!krgy zx-vteI&4p}DcAoygsl*{XQIj?7CH+BRhv4&xL&@dCMCO}~h?!O_h!CzRsz0CTr zdmY0ubn&o?E_^}i+jIL+>KmVXBApt}KR@22e%$MJBa8`~+iblLT^_g5fWJ{#s+<`HI6w3!GwwIH49@M}KCDSigl2GYmU0;G2~j~z#9EpW|$U@lVG zAj0-a+y2(YP#-7#Tr!+ICX%R?bIN`FS(zpe1T zgdZ3=kDIb#$T;*r&BI`o625V6ympqnTAi&qu%D9hlBZO4E?C9s5uH?rtBcx23R_0` zr0;pildA^Fl;Qt&_g~k7jZEbv(nv9dOHv&|jqlO!NfmE4KSse0cO@x>ZtU*caC)Yl zk;~KaqAufuWaG{zA@%2=zNlRA5EM9~LM?9bz~ zd)-FO>Dn5H&DGo`91=(6UcRj5FJ{(~`x73H8>PH(oNq`Xag$&OLfr0@hwACCt?j>a z3fgVYJdkYO{4-+vVLLbB+GocCmg#?;w46gMD(g)|@!aoF_X=U?z3JU{H{cLLa4^4s zMNx7WY=3Jfv}+Y3o`(E0zoDnqXFQH4+cKvUE!liPFG*o=RGEp5te>+AAt>)NMRHhH8U?y;6G!fHcm_ocj^n{ewL|>F zS*Om8{8gJm8Ek21k6}2&{#C#)aH>ZXf*QV!3P<)hdk^apo}Ag3?eZXQ+(bjiy!y~4 z3r4BW>g;jKJ(0)|g0!_Q*gluzx3iM;llq=nZ^`=&`w)z_?Oho0BwgOU5Z{lBGOk#oKTI8^Pdr8LAI$qq$=d+Y6NyXXxGFQ}K=fnR7qb46rmZRFu z17zUx0QKFd!;N#AQT;?pH1sgtCjD9lR=sc&wOoq0J~*r_&Ty;W+Kz#{y+hOz$%@VB zemEJj={!BN!S7q8^c`82Zxc7V0Op`1#croJNUeEU2aY4~J9Da_N6qCX7w4MVHwNg< zY0e0!XYu+c?9OJq-|%u6F-hm^PkrE2%8TpXbXpW@Uh#0_T5_?C(zf;95H#~?zRcie z{UI;`ZVKfbdM?IwuOtm4e%&pT_}lEtqm55q-(SSQ+@n1w+=RRwnscdLJ^FD*1m;}# zXFxtTOt2@D{T`DVBGW#|TAy=jzpBK^C&SL)m#qXv;0|M^)J|gRWhv~anVVg4lC!}O zDlJeLwwJzl!$f80d!$je_>9*byc9fHkY(?;K8{O$caE6-p@_5;rQ4if5}I|G;y;GM zb?1=6)K|X`XAt*x7d^VOn}+mR_g+!F*i#ZC;ZTL1S;g(e3n?aY&T2Um!;`*D9O|np z`;fp%%=K_JkJDw&B;mh@0c`1R)7~S}lltG#4bXK}0826FmK32Fvi!4A!9PS+Z>DedCOVZ?Ywq z?u+nQSYBMXDqRL=-pe+f%st#GK-#;_XyDwt4e?@Ih#b)(L-Y(i;~NS7&C;-`;j*-Z%<%XLw_8igZ;@=6Hv$AKW(zytun?_jj-FSyvSo zyS%cn>U3$dzpGP8$aDn%Xpzk5x#|?ZnqQ*7Im>DTNnQ*Y!V5Aq%4EgCcW++%S7_p% ziOe{jTjO_A0Y(r<_V=@8E-nF=2BF`37RzLL{jWmXaODk^VEe+8iW`_Yc)I@nt{imR z!k!tnQE3^sYd!k+cd_%U(y~lgz)OEO{iI?*o*AFtf;(eB5BLrnQd4~Wv&p`plTb^< zA?kF$L9SWVX-^yu%JTHryS@o%yYsymMcj=^5UeZb@p60n#4j(MrCLNgZGD=Ww5PMg zOouypF=KTI$iMXELbRMux6BU{2nmjT&K`HQ;VN|%>$eL{bT9Q27)o2uyZ`WTSKRUK z?i=`zKhhA90XFsb=I*7rnLKxXmVDLqX8-o7CUiGXDPh?OH=9f~gqFw-Rp@Oq0*Jwy~=3c5pKzVfqAdKj9f<_=AH75*-IamPJft;M+}m$U4|t_eqP zZzltG(8cgy*Yhg|5XTE(avx4QsO8B3g-Z~GD16YO zsr173zYSjMU8+;v!*l(rOLN>!i7uYd6T=HL7~`-*voTVnz3AT*>cIUr8()oM1YQ9V z+xn#hdUyCYoICI3B6!k{h2)F*Ls28oOz5USm_5f(Wt=ZB&^Ea5kTLtvw^uGJ5Uwuy z-}lc%pMQI2_k1-s7_~l8KfpiH-=dP!``@?(f1;FS{?`*AYNtx!_y4zV26q&^3#$6p z4q#EU5N7|kyx%d~KKuWVzYB6=I|Qg)rWXKr-7k3rS7a+|#=W35^=+ZUnrYc5RE-!8 zANw8eeLsL+MZMv?t+xFKRr(kvc8zkN;kM!$hyEMqXoWqu!+0n>xSa(7$YNlCkVC+h z5G7U)LGkEeJTabw%M47yePeuU>*;8?LPkQ%Pt}Ad5FS0`&){5l7d?`=ZC8KGLvkti zElYiYTxxx_91SGqZ~>4a7cdvY)qGZr0b?SAiyIV^eHmq_H=Z4rahkW!`}ljtAL7d^ zyPG}ME6smfHh%E@Js1bZiOulE^sbA`kH-g~*HZW$22%4$Erp`VGoxw;<4WEg#e||5 z{QJ(hzU3|FWD7^p?$~Oc{Td-C1~;sW)2%We*T4(pyCof3C~;NC42d&y!g(TJKpa?ptmp#iNi0;krra6^a&A%1%fR_>&8Y-qY(x* z+kc>dW6ZJyvSH*9@S^b&8c!MKOIyaam|oG5aev_pXP0@`!$77kfX?ws57iSYZ|vX= zhQ*6+K>@l$z=73C2x#*nol=kZfn%!lE#ST)xYu@nHv~ZdniiNe)p6{yoqLlWeVDyB z98UIoE-Y@oE3iWp+YhJ^fr}FR=v{NA9^h{Eg#tZ19|o*%R`W;v_iYSqL|jTtDQ#}6 zw|cbIt}J3O-!nOZddq$S&RTw_%OpKQ-Ty6R65zNJyhR`%C6w$%=z7!1Br#e*DI2Eh zRuzW>5bS!qWC&zPM|?JTp$N?{EC;}De6O8(%xSwQbY2-VpA%Uqw$7sU;{YA9JD#?| zS6Yf+VV;FyAv~b-12>pq3~B+)7!Ijvc_B5I9D-6wZ<#N52tYpoLru12!@G6E5T#E$ z@Bd3zObN5~(U|;l$>%NWyZOsT!_erC0N)gIk3Carc+Phuzyl2((BF8)@!m8_KdpJ& z0l^tTM2kMzMN3jB)WtF>nM4%ylhe!aN@JuKK9YmvRoTA(SOAVI+k|eU%hY+%?5w)H zFK-?n;3n5BI8I8m=mX=wGLIls$zS%}hJ8q(KXHV=b>H!fRhuX53wTWcPaC{c4rnXB=l#46CEwI}UnRH6<+g$NY({1Rh@BGvVZHtMd_(cuv4v(zVl(< zdH1e4R3@y~943$1C%2eFC!9f$a+YBsGb7b{yoWOPl$%Wu9&e--TYG8k1GK78_Kc3# z(|478(b7gwT!1V#o+KW^A1pnntQ=!5@OpZ3C&c@yM^l%|>jQb=QD^M$(o8 zuh!3WL>u8H=Znd3rbHe>-)! zA=uU+tc;5Uh{R_Oz*29kBNoiHw$gu)U~05VH)`cE>aCP7eX4lh4IOp~PRz zC(n)O!)kvxlXE{WmHM%8y@13;1sC$Z6A35J^Xg3B`uTl3LH+HwTDtz!M;^n@8RKE& zu4T^Ynj^%`OHaV7PhT;8^(xkz|5bXgA&Kz(Opgd+h#XMPC~yJ_?IG&CJ}p1f()O22 z$-Er2z@@(Il@EafS~!@Bom1Qy0#6ZfyT&9*df=4Q#5eXh^LlPGB&lW39L6Mh*>^4h zm;!v-x7M;5q2;Ib4~rJLSO`gq1B73C@%x_;UQ-o7n8igs9tt$Ob@!N(eobLM9|?$m z+Sb9~<-g^AXLaFn^Xo0@43fJZrJIa!K!$Jt6CUv#hKa%BxbZttAt363#L`2M<@m~P zlwb)|?$O2eV;B-6(0t%pE;F|m2K>!{6Ban{y_cC&U3GeCt$Fz-YM%%#6yLW}A+CYRaymi2sS*LlDb;`< z#|w|ENED;}41}z&h-Rs7vPfE8xvvF09iuD0>|X z;qqC=imIV8#9XJNfs}jC?~<{cNqjG62ikoPrNWn42%t}@YmVnqpK%6;GOEIJ6RQ52KuQ@9p}9puux~{BXN!^vU+i!uY501hl|gkr>Au#j*E*xxQisBf=UPy%atJ z8uZ(?W#C1*c~cds1R)(`y!F|N&whDQjgG43WcE(PWA~(*dYwL2opsxV_i@ZxKqcO* z$>n&=?mZ%|Z|~?`p<{6Niq?*uGj;@scFGeg_N&fE4@V*wJ zoyFB#*y=E3V^IBHinDjYEYU+a;ZIwsLuW+Rt!!?*xsvmay%SNqmjSpHG${F;B z{%XgLNdzdCA(y#SXFm%vk$@s3 z)W-07cGrfsHm>&w@Rz$0m@hxr6kWX3m2i3ANtu!tc#6>{XKU}A3a_a`LMBl8&EE9S zR40Ll(I11ts`*+tb`po^(h8XKdXu+^%}(C5RZ0b6I6l@0O!+LAX8ZX0lfi-z78;i{ zAq#tAy8>=}klEum(hJIZkG|8Zjf#yo^`}s7F38d;6Gs@)GSX1uPk&t0sd;&D14s`Y zfW)LVL6HFz|Kh2J#bZqwvL%LD1R-*xZMH6$m%Q^6=8#3V+M4ueo9kHfg_Z zr{AiAnj3^jy$w&tQ_&*9eS(^H827xjxit=2q&mJy7sJxVAFr_O3G7Zpqc|zDAwEni z%=Qo!8J^A>E+w-cKE3Qsr5ckBm}@y(X7_$}Z+Bw+$*5Q3m=|(-k0&2kP2kd%&#HH7 z)|5-8KalyB@bF7D_HV>&=lue7?dzT_7Bum+030t(SS?>p?DFU70~ZgmcVErrC10TM zy`I-PCn_e*+1W7*!JQoNF6&Zi6QdpAHOBbvnSwE@72?nA9D6k`!)U~ToENN-Szrv# z!)KJflex5Q##>j?k!s8n+#Hn6TeZYJQu#_R$ofFfB|OgtUYkP(ud2ng#3@=)d95fFaI$C%)h2 z*DH;qKlV5HzooXE<{(vobke*j6@2~%PZm_#K)5aSL*?TDh_vqf1EGe@*eP?))11Jt z??dl0`nuC&OJAqs>meQquU&QGEjXsqmPIJ2O`?Bp6xxcJe^U{ABf|=1e8pW4c(gCB z852aVCY6NO;Ine`XVliZx#(%Wp$ZqEPp0)8aDhth)-bKy$tm|$Wj;gXb{ahhxUgPi zY55sA1RRQuH(v*1*FCKJj5D2vw(e3&&lemeHuJy)XPH77BSJ!_a57G@V!J~`a9Gj? z^Onor<{_mcK@bVur(+q4YAZT3@L%@=H+AVX2G)XR%>318ytm}8uUu{7Fvcv!i-rVy zEr!Kplzk9eR2pq>{PiLb6y|278E27M%9y!D25V4zG#QnaUQaP!3bVe4uOb@ls? zC`#38>eLNZ1KR|#_5&v9`=T+u{sdA@tT_X_yNxdaL2T*opeR)x=+F5C4BCToydk@N zVamipH`$wR3mdY|SYmOF=-!;EeI#%q17Cg}dM`{!{ri;H)mil)I-pFLo%Tk6n7v8P zeiZ3TwmKpu70YVDO6M1*lJljY*_rD!N4g5ap`PR3yh<6h_F!`aB8rGvmE&7oyG7XN z^`15s9m`PqZrIAFddEI#>V9ZEza^@%HDE-5A+^y<{us23sT>}vEUJq6rr%4EK{IIh zLz#*^odexhh)uMi6h-Nqp@zswvA3c6ElEHL$uutCZ6)$-h8~G;lTgF5zUKaqWn9X3|7Wq$+t3XcH3@Y5rD?jJmos^5HzR38G#$Ga%U*)7sE<2FMWie5u^k;O1vjHl z!`f+CDC#XU`614sV6^9(cn-txhdTn+G;%rWIg*&)nLi#6kiCY8deVj}&^@x?pnt@q zlE+Iit)it$j={~XMr;4bUMNmHxbFBa5dYt=)E-- z*1}J{9co!6Zmrh~INS;(&x^4!n=lg>UkfRX6=4^;{)n8TB7ZvK^s=aZ_&Jx9E=>;1cGrcUB63!C&cVAA+-iM%u z%l3Zyb}{WnUkF>qMET2xn1YNo_F}~3^b&U~6$B=;CgdnT?XaZq;MEeZ)yu}MG>Ohg zQ#m@B`#h$dI2>ZruZeB=9O?js`}8Ou zj?I3N#P`)~{6a)djjB8pmKKq*l;ux=E`~>4(5wlNg?C1|N71wPVjZiv(K_@q>u!qm z+NSk2d>h8%uZ?E5#xPU;RH9eA@Q$k2X1IxPK0%_&Cd#DX7(%ZuxZNwd%aSh2%E~JB zGYXO~i~KsWjVBe3Jtn^C_ev(vUu54C9F|?60$h;AT5c0dpzm77Qc-vb=TNTf%5GG)KOI!fYlyhE?jJpXRed{ zu>G^8_$)M41ziI{uQ0<;Nh3XA=g=3DTx3yzIr%DVP<)LRWF<39*51I<KgNJ@e8u)=NJv0O)Lmb5_YEeh^EKubGUw=8SC($HL60 zqnYerT|&l(&T`bAE6?!l-GNDk+@JZ?$&b-f9Cicl|KYlOB0u@#n@IlqDO5HE{JPyN z%yrHn^VF!izoP#G{&M`^P_FBl2`c8JQW6bjsecm?)m_4G?|>sG@QImFAeb)xzfaGC zRkAV7|NrCv4t!i~?=}Se8Ip0+vO6_EUa- zg%{ign8ygFPrt}&MPZUenWMf{*MNb)5XCA~-wSzhOE?H1_jMMwZbDPBgkVHZoQq5or@hug1v+s7!$d?>1F!q8OOmJHLZ z`Q9-8(<|jN$UX|TSO#j?O*&+pq*(~{2oI~jT9gBJj!EvlmDda`glPQ^+%HkbYx1H1 z0C^>cVHsX@ECV>mlEe47G&7+Ao#FSxF63X|9Q64}?BcY`E&TOcxCTtv#rFW~Bp3?6 zT~6B++ceXi)h7E7TL*CJ(odx4pZeNksZ(ep+HUvlQ^y&IukLQs7(a_wr{4j^O#nJ-~Ul5=`*7txV9(=h0kTt$NKyISf zYj1PdFyd?HF*9Hwa09^lRKxDACt#754!#;*_|fA1?cz|hFOc+5sk%3g^Xq8_Il;3E znnmB$prB#c{T<@I%>Nt!w%tEnmbujy<0Lh&F-9ocnQ{+{TmkL^1Iqx!ZpFJLp_d;Q zv$&3VlFpM<;y(yR)%SIq%-0*dDxC2Q6VgJu?+GTx*55@ z894;3tV?e>zQ^RzljbCa3f9mU4v*dglgtWDBF|dOr9O3=-Z}ZZ{n+@V;mrzhC~)~e zQ0l+;>;ia1SPVeSNHPHIs7y_k+>9**{$Gvl;-MdE=-7c0m?}oq~_h z8UQa3Sm~nGYDb;?=@o!-S&%cFETeFe5EM8o`w~i9C!yL#u(E4-@8z5&$NnXnQ_K%A zvG%Xu{e)<|yZl@z{7mnw@m=}-Rk^^K^rVH@DyiV@!M_`o4}~Is9Xbdy9IVK~PxpRx z=a;){{tkPcab8pSDT(?Oldda(>hEHvKa#awxIJ(OSxB6uq)IP-gj@3Zn&B6$6_=vA z21U5%uZvec3`h3|P)|yU(`*n9fMh)h0nYb#`@Bw-gl2jWNw*!oLg68YvAB$y-l1j8 zK!yP#nQUrc0^p#)Q21ub8MA+@XZ&MPhcpp^P*UyjmFfi#3-RuW*#V!8`=i-r;MONg z1)}_gfSB=k*n@+~Ot*k5(7k*7<7(||Q-`-A(Z@rsStZo3zNPXy&@mK*6c$ivBz>f7 z=}<)^ z_ywcm!y0;IiQ8v%pZcpXljBCJS}~nPGTpC_qo&xRD|_A9uO;ddB;V_s>EN$P`!p6qJ0Ki>AKwu%B<%@IW z?*SGvJnVaw#ePaHR}MOMR&?y}Qwc#=%!MabPXWSaQcoXnd9%U(s??lPuPu?+Gv)Kz zI~Qj26kSnfoO@KIMC)80*Y89Y*|s7HxX)oU;u^Os5l$4FLOoXL(oDxC_*W~Xvg)3y=Ah2RfvxzwfC<<_iZ_BPFQHO^4qAvg8kpr#fTy7QOf@b16);sy8pIL! zKO~)pKb7zQ$18nM*@P1^j*M&y#~#Pbj0hp)bnJBwvI*JaWM`FejEo#BJ1LH1Z^x{h zgJYHsa)jUU{rv;yoX36c`@Y`SYdkO6`+?H;D3ZuI*J?H(^v>?CcSOh(J$|I!mXPlT zwArtk3t2r~`9Z<`SM4-8`OmYSmQg6~{ZcYN77vm}CSllZDIn%@Ctsrkl@T8h+(9bd(7~p(dyQt{W;6a<-%J*%s6_?Zv9~VE`~4d ze~x1#c{%#KeRxWCF0k-q@y%6u>;57vxJcz^2qaZJ-+}j0m|^~XGmOSYu&rqid4-_r zyHqXxPp%dIS4=3K9heW%)B*>DdbIPMu>7>55AG!SqY6gRIG(aa2ZYFB1J)W;Ga zXnk*)FoDM^*`}*^7t9n~>B+gJ3A0@z9o!VNh<_LvIkHUZS;edGH%;Ug94bgegvISl z%65(16WnFD0qbDxcD?jwa)rLV2pJ0`H5}xdGS8R~Xa(u0n4yqKyf%a+kCbpDIYI|q zqliFV{G*K+jm}BlOgPZB0i7P`rxgr(%XHssZ$zAz?!Dkx{qGA*V5hoN_{nT*fmEw~b8Dhxzc zpTcqv1ns$A{nm*=+@`!scp^y2hw)Zknj*g}Ed;oRLln^DJ9p*9KlWFbUazOqEkWc| zVk&#B%&hYPS(=S_IiR>Qp^yuo#!|BT0V{w@>!0)q6T?IzR}s_tS8v$s3~`T971W=M~xT*|>C zFZI*!$H zu!6j1_@#VdqY(e_3?GBe8tyv9Sazd8LY}~4JLpV`lIOZfxPpW|1*g&QTV;iHTMEQx zdGF3khKJ=F&!c&Q#>E1(^5g?>uk2h!PGX-D34Y&kWoeU1Xv-dR`Y^TPiMtEhtM7F< z>!qtTN!P+!XF1i!?HO!bc}sa+1{HU;`*)Bkz=*@+9$6l!>>DnAxsy}7h;b_PXUgod z+WM*brZ~UjU4&oiqU{3FzUN3Tq+$$JKlz(;`5wpDSE4f)_auV!wmCc?lNN#7Vqtqa zL5HeCUI#Q>Q$`4&RaM3jM3DHQ3eAc7s*U0z-CLemXY1P3%C9ZoAWfLB0Ol))p3YKN z6>rYN$ders3ZIkNDGD%(fYc*p8C)X*bg?2f~O=tCrjsI%M+zi>iso)B4I(-pE}VbU_3}j;=lKqnHfJ#)FSLR z6y{uGfWWsrqm%L5`j+jJ?dszI_98R#pwah`?7huST=E~~){Z4E4kY>@;;_8g-$HGn zmw%8P{)IfdVQLbP9!|X~#gaqjISFomjxq@)*lk%4d_@8Wll8<(NZ3o9iK+3xv`Gz@w(va=mHk00#aCL4;`0%S2#iiw&! zFR5Dy2pj;M<~QJJnxmlXRM#{9v>i3qFDKIh`0nU#PMe?K_Y+Jb$18$T%=I6IB)!gf zSn}??$P5}28Rg`H(An(^k|J^DD8K}q-hB4$!i#ykDnM{MT+gXNkMSKpXuao&23Wh} z_PK{3cMi{Q>Gzo{jI?PE@5i77o8cPy8Ne5oQf-h<)9z6P%;?t=rm0ex9ghkq;| zdZoM`r&Yh1Jhtx>r}$t%qduL%Q%eUOxi_fE{fL+nrtX;jq!`PoWgU;$y|LTfx*Vj4+b&FKb=OXSIIn>pK&&T+#a@k}ej!#ZMFW zXW)6~`9L5w6MhN-h~0_Ty4jdFK%MIFzr;tuO-Yl?C+4wH`0JowD(x)J8Q1?Sil$=& zR+u@vC2Kx(8+*a09mV)^y7cah0)wQFuRI2$E+tAIGT*mwtZUb8X?JM0a=CKshR|)0 zhiij;*>nNEvf%;>!C3QX>O6#ubgvLkU4RK69rYCX79I1S?Dn9&2mJcc7rqwQY=h+Y z3TVuKh?Uab8k^4xaP%qXeRa>Vq!W;EKZ6u~0r=8J;lnmqXgW#~PBpZ{MgP6F)?bAX zrV7vLSSkl7eATv*`LuN0qK~?b8lZ?Zsad*jirdHRdVPLEmIRezu;_w-i^Ssk* zP)64RSA909nYXD@QC6$`Z!gX<~atk6!_-&%fEYAMAA{N_0HsGC{EIN{H}CJNjOEip@aNnSS~v z=G7o>-%d%qJ!nD~Mv0(0dzuFdp#xa)NVMSIlcQ9mJ7AKSH^uX_u3}fc^PL!SzdCGh zit+|7=A{*liN)X$I~t+(b_^RAZVMSwQa=HI!rD9w_J&DXx|dzDWQ0W`Rv7q zQi+nK9V(Q2m*nWtdbiZ5*gvDq5{gw=cfRif*Z%-O#Vr9n}H7erh7?a{56|)uf^g~iR#m^}YmhYWlYQ{Q`;XzRR3X~XZl{Ud)8IYN#|s((sa*JnJFvbwOO8hz%G!l zAiM{W0+Zr#+FAR`9$*Bo(d5iO7hoz6UtkrUt{_p{(7c@WLK<%JQ0W!RI|e7_LT&2< z3a30FYkvoC+#qO!%(~d((~0(!nVS+T+s|RF4TEgfUN-p?(I6 z=)d%m(eFLB6v?;Td}zRT^2i_5$mV1rkX$yFYvq9?urlZ9)&2tWm!~dj?p%aY`zAeNK4}&NEfO>{4`?-M`C0I&@vqmie zdUZz3ZArE&f+EX+xBlDSIe=laq(|PH!IHHq!sFLy`dDZgXw}1dGs-~H(F}j%_oPGe zCj&Xt&_azk2NwL;I5gU{hqX!2tJ~73blf+SB~!{s2dc?)0D!*w#XeEdZ6@bQ*xG{s>GnNhtc_r0HAH(MSi6&N6e@ZX}wuLcbQw_z1<8?Y~yWP75U6spz3z}^1J z+~+f7aqr5)IuSEKT&vmJu?P$Vo&YxBw@1^MRdX z=GB<}%zGU3$OX-5CI_qJ_Z^W0Au3BssyOrxj~U`8V3otra2 z5_`6aA9W8?w-+0lay%u)Mjjj$ORGv)(b z{*P(e<>zKot8D^}5o}6qdB?6N9-Il03|lV=hoQykE&`0v3c)y)tWDa|JmU4tvtAbEn-Zolq}&oJ z-uXA8@Tq~0VBA)Cj}C&R)kc1<@iYtcOfTmxVdNcG$rvc`BG+)v_YQtPDD(Tv=)mTW z;|KZpvF?tXq!eURd=x8`6!Ylf8HgaKpX#yykB56UT&W!wu6XC-C*xE zVz4b#!Y}M6C!LZxYgcHa`?I%QblQQ9`Sw<2X-jztYL4>&@U^Prz!FecIO2yGIklqw z37m;g=Xg|>HNvq~&P~+i$6io^iP1~Qh3LDyJfv$J`LwKS0mjR+el5<%U(v5dBpZ2c z83WGD&a!S{pNO~29fw`;*h8kYVeY?!`5w%EYwMh`u}A;mnS{#z`C zIo_1iMMEQMW>@J0{N0X2R-s+3l^0@v#7LI$mG8b?D&_S{5y54Jw4rP#_#MtUyM`b6 zT_(?=+O_<9bf&Wk*5rG zbKDD+g=E&l0bBB1{e5@X3!~M|SherA=~|Hpnq0bNTAx<$6#PC8XXnE^f1Ft~PuNUi zbdHbQ_cu3-N4^SqN)hiO#gMo4{1d}?@|CbX8Os0EixYX&QX4l{Q-;^$C(R$2Eda0r ziLTWvqlO6DvWW*P+W1s7E}j-oY;$=+@0#=ivheNCLjOj|i>qDF)$mm*>!0WSO!ycl zXY3Zz>Ga1?R0`?T!6hb6R)&MFruH9YlW3ajUBW)+P2MxJn6RgNU4*m|t4`xLdPk9DywK_{I+&Fu1*JnCG0BAb<$Zr;|1=hbXO{Fnv z`bOUDpk-@c+@x=#MSsae(b9r`MAab2w}U8S&*xr)>~8SMwZHo6_NT_PpzmonD9*3$ zg8%2EfVM=F2Q*hd(v4;I^qf}pmT9U6pX7eg?yOCEF#mq_bLvON*^xuj$Fe3}Wqsl4 zZL7`upOl%n$}hr;-Hv}-^$d~JR1|-WtD~fO)K)4kbo23a)OT$uC=?W`!kug?(>@qe zlUPvvI#wZ8n~JcY#at~mZ1IxE%+Om-+U!B>l{mxiPCU*Nem7My_2LU==3`K-`xTGQ ztG34X%~ryH)o`&M_CUI0>+~$c{`DZvWo811S%uGVIarF~D(_L*71rqeLdNEy4hlgR zTJ{PfL@%8=<(2oj3s%ef1?+~B0rClao2t_Ddm#TN@jr99kv1%AV;I~R!a+8veGXfxO& ze!0V~J^7aFfWiNF!BG>>Y6u1ms7%w%MggB&S$_Mz$d$lg&Ej?6J9(22ix-D!&;L9W zmHIfo6l|#AY%Pm;Hij{7r_{id{fjRSmifXLiCN$0l#?FKF;lyiS=_6`Nfe9tkRR-3 zA5>{Z^s3P$J)w6c^)V!}?iI z`<#@}Y`-vh$0k^GtFn{)%c>fC)2NjJ<1m7o`$^S@?$}@H?*q^aplBLAk0s9AjcfVo z*kEtkziA-;zq3p`J)6a(zlXciz+mBJPCcaPxdk`Bq00F74UnsjY%1scwOwRa`GyPu zH;h)Xr!d@QI#n-n78P@jPnn>c{2fMTb(}0Dkk?pWq)Bby4ZLEutA0Uv9dLZ|X&LL$ zqSZ5rgj;ancb>Iq6c?WkU*H5(U58e$%un7T#gA{$`G7Gpd;_@NQK0`Me_$iE*@Oh6 zM;HWk(-=DIJ%u3>Bg@#iK);e!8xwt+N2n^O6xG_s|XGXeMqd?5n4myxDzam^VFV84(0 z)w%(&rF_>@>zI7LoEbF?68Ez_W{))J;}C{574!tZVUEu13u`n@{C&`UH2i*ygB+t- z_mD+77oem2%vH-KpT{bpj?#UPLFD+N%!>jMAu5eL1TmN2IZAP(PmS+7&ASb)S$1Df z$3jQ=TN;}CO&>P!k8%JG?e%m;rZ1#_4Zpne5W-{WIi?=Jw59306^>5a!wt*t%Fgnh zXvuB93f4^v1!WfSE=2bMRUy-q)Yq<6N_?nLQr4tg_y#j;udOFItsEfe^NmzP+4p{YJWc;{Xb6x}C2z3JT1k zErF&Y2J4Q&Px@1RMD6|Gb?BxkB*j2y)$b5v3I^|QgrGROlm@R)@D0#Z4~+MuUmwdT zZKCyIh=7<=xpTul!|Qryj3`%2e6QwJ_kB{H2kok_5{}F}M7R}sj8WwhAS!0S<6XRd(M%tpS8ofsx{wETYGz`M5XtDC%&~ksNeEnkF0=@WtoeUKc)t*u=Ynj@%^U{5p_S3=+rSkq zR;S!JVRMfB7gix|1*79L!RdHW!}!cS9FVBf?oXAKt-)qAgq~9MEo9b{H z$n;kjO7%pOILD611TLQFp#1T@W{oa>E{;2wij zON1fj0kmQuw|%IizK;ca%i_0~%~S;PU^sY8>pWo8yT;9%+zA!mcUZ_Z@_*aVi&-rw zpC|^>B>TiJYZf`~WCJo(cApq67cUl|Ze{~w&b{V@aY6|YI`w5O5innJdIdGaS^9}U zsXL+uY*0aWX1hN8s*P5eqbu5f>m-FeYiVLHqO4j+!g%7A-yWO%%yUua)!|RDk-y6s|*94^|DJme+?? ziWjbO56?IuiX?`-5o8jSjGyQPU-BRFMFJFj%PZ)K`Qb;XMNU=Erq>u2OjA4sF z$=eU_orboEE<;G&Zl@BcDJO%hst9k>j@q9#Ey#=ET0J|WQFlHm9Jt#i@}3$`Ba2ee zxIX$b!d;`r^G~C)Q&ziJ$cwB8>>?9dQxa#j*M`zvyi{w`Ary+zH9(AYSsPd?{E zw_wBka-hltSG_!27*M|GF z<|OYTbiZPJUn~f6loaf}>-2CNeE?@psyPa8#uR5PoRV&wqBKuERGspRJv$Mp@oQ2w)CK?Q<=RNOZ&+}(Mut2A9eyUQ+7 zQ{yhVq)V69qA|MJWV;Zsxc-ULXS}^p{j%70cm3v9AQRtXV{$z)Zkues?B?G4o=i$$ zgUTq>4I2HiWz_AF5h$F<75UpD_{o3$GLuVsl9S5eWX2`U^>-P1=3nIWaYVQA&-Gg$ z9F_(Mm=^17XQ#XNAZQwcUbKb+K~!JXV{ba)OKOx`8||0PmG>1`AqU!W%_qBuiN!? zT6&rWMmU*KP}!dj2f{x3>TtE@Q17I^>P}0#=`Hf~TEC?=@*_2!Zba`byN}^Bo(=Q4^#y>)J=M`VdbCVKmOG^F&+%N*^mYc zdj@(gUJGd-qC`pWn~|beV66~E=h>h{;ljcOT=RiXDbjpsoL}0n7VUZu7fm8??YHq^sO>hUZq(+X ziVSp~u%*t<#Ib4*P5E0OW6NB*D%YN|0_xLWbE3sOgRB~%w#-7&)EY<=$7D^}B`tdC<;pC_LqwD2H)Gm*%}{pGI|KkQcbz}$c9`ZD{Z)#mu``VG&{*tsH` zMxLF6&{o#C5~We@d(g2qtbn%3v;l{3@mRAdGA^T)+Gg)VR*U=mv;QhM!%O70oEpDe zb}47O>-^!hw(;S(T`s)z!_ALj7pJ4zuRYKvccG_Feaz^)PfeCOul zt(InlcTht;&TwzxbxO$;S|5YWSe=%bgB#7zA9S9V43n6b8wy_S@uv}Oc6(J019Vn) zjCP*Xhs?%eRAu`cahi6{gMyW5p|-Y|aG}!f(h+P9j@#-Z;@~m&9LuCKVTu;<%(YP! zBe}N*Z|aE-GolaXD(m>i+SPKD^-qb7Z?#WRMb7=#Ws5ay<_$}+&Bc~R%;tE3vgusP z^;b9JR1;0;E*`MboRb*?i!4tE@b6;Qyu-F_hXV}Ao+5xux@K^)q#daSQC2x)%&(Th5Ji;a7b=vJza7Vq8!!kP6}x4u$8Gf z^LIf=KsNw^Pwm(4%stI%JHSqtiPMLEr&xs2%w7JW+A)BN%dW|;49d*NA3oO{(g?65 z{72K7Vn*|pBMChYryD3S9E|+jj*~L7yepz#+%jk)21HBxx;{N)w|93jYq_{OD zt|l4xxzZizf7rbkv7}Qwy6`x})yBxgsvcIjP18y?;oc@2$k;d`mjO_GPEIG+yNIk0 z&&u&*Cq9(PM6NxbxT8G(RL-k{AMVbcR5RPQk$1(j2bRXtz+0|Dx7vK~FK}VW3D+L% z7O$~FIo+1`NWQdI1xP)g?;ro;vYmx9@xZo6Q*0=&n?_e75f=`wuQ zdOpP+uiV-aWTlu!rE|tZ9W)s@Xnx8^OZt!R5&bpSH}**HatT$^JL5wN1Dq|kIXbEs zdRhOg(|NUldG%5F7RWuqvvPR`82u3~9g|w;sw%zj+3V>A%RdaM^{ixH1grwjoUlU0 zkpE^~?a0pd-8%nT_u6CcZOd}s{gBlT#%nK!Y*r>IrO27FLu+S)E<_2((s#;Qu@=g$ z``nOml^tYl+D3gUuM>V#NzHq*jcgY@L zxWsXz&M}&KLI*|EB=xBdCZ&BM2l}x8s5tu0Cza>S+7mDx#LrM?g8_z@EsLwfKL5Hs zkfo7x>;9Stg2<>Z{hfJ($a9cs3AYR{LKHWxXY-(KE(Sl#O}ML0Fdz9KloOV#{Bstm zs&6ZpxM9YG=f6j~B&ckfoHcD}_g4BXtdZZH48WhT>ybY`rhfY)*Zn&s-|N7b6}n2FI(g-$C_ScrKO1hzLUwZW9;-mCCb>VbHe^R!p>5v0|K7Uuh>cr zMhP?fz2e9GA=5E@ZJsIL6U0N}mra*-^yE!PW2MyHrt#$DtVKpj3hN|W+s}U>fzog_ zQUz;h+T4(E+=N&OFW+bEDWTB9IK1nWe0*4lbVRK8~u)GgK- z_GS|50|NAOm1*^((_F2OdpPo7dde zYsLg6lA#-=&AvppEQQ+O(hT^ZdDtOf*CQRZDO&{DE!aLs)`9Wp86Eorx)c3qnJi>H zy-$Gd&93re%Fy^u>SXkrj%tc%p8YN8B#=2EQfctzv+QZTt}M%7BDL$EmU9b#vEto^I zzBxL8-^Tg&jp>$S@`7U>0Ug?8>Db2(vlB8%9SV~=XZ9-b-Qn7ElLOe=?zB_ItCaqQ zf861(}A zO#WyH8)M+*HGcVp`K^?UAC6s~(Nv+-LbAD6o*m-nqX1fSD7*VgMw|5yFj(pUBU;UG zY%~^#iT*337>%TH;*s5gPJ6~wEzzV40o(lCB26S&E?c8EEc9R(`6PBfI!mIfTW{d( z5G3zf#k)F{xt0<^^^&A0Ssi%t7sk%2e*n+dPckz^anTh*??VJVQyz5>_O^uXRA{YDJV-jW5 z>YDR9H@3byR8Cco_a9h#2W#ygGJDn9%p_Gik`C>DVAfrO(7w(vEv)GDZe(=+hid;5a!v>-2WJqTluLIEi?wqF zs*y6UCd^PV$OK4+1-K=`Z==a(@;u=Q{E1Dx3qtC#4jaRK8>vCc?2rOAX-Ca2joo-} zh=2yYOkL()F}x%9^q zBs=I)N|bEZ}vRCcxu7YeyMNc>tWz{C-X56mACnr zor-!G)hAugNgC8Im9a#=BsEDi?1W=RaFu=g+*;oC3e{x&F3udp`dTXW;RY!2C{g;7 zzv7OVsp-2$aR&vFXRMFxlz$DDL9MvE$^7TE`^gFtPjO9}WdwZRAfsnfOTvwDIGnby zojlMV4>X|1jAzdhEhZfhG3*zgpKGinG!Y(gjy)@s#&mDwGtDaLMvxSL69de0%O3q>CIX zzg=PWn6jg+&o8R0D-$W*GFG?UjniQn^3 zYJC3J3UeocCYiERUu>L+sH+a0f6_F^1ei~NJbeBIO-Anen&y2EST}&)`0+d~U$}W{ z#`_md%n-Cdad;f3rjzq_$hJxHS4Krs+N8Eqe~ToZLec&`MB#TQ>8YVdI5hf=rYRlb zCZ*VfP{bpsTU^;hOEH+2T~u}LAG)r-HS_?BDojJ)1`OltX$cz1AIF*=eP0Hj^bh1$ zT597@jGPC}8JR|Z@Xp3x*BIZ<_e(34#ri7TmfBB{wUzRW*-3i69<)CtHNlSm$&mb) zK>21;A{tGZCw#V@l&SUPCa0a>beBOhni{s;?QtmbI(e2fu=5?I(kJjsu`TS#8B+Pm2;X z_7n3j?goF%55;!*BZ_p2^HYC}S=h6;a1YEXyDkvfw)EUh?&u|@3tbrCT6o~?kT)v! z^C~80D{)`U#WtK4ev$h+e@To$ZDUSvzD)9bPjz*Qv4WbxsoF`VljbfJ-`lU1dDcv} zlR-6kQip`V*Yi!~6QxFbu>BJRo#r?m-2+s7uYv3Q%wPam&S+119BCKzy?uH`j# z?AK;#n3K6&aWxWfs;PP6@&(b*nRc^sY|~^?SH(=H5Inl#^c^;>OYe%XM-F63?J7N~ zs0y&g7yUX{#!(MSH;XVKcZ7Qa?8=}E*v7EyD&IS&u`ppX+5dEbsmc?C^k|iO^aCUA zP6=y~w*;>3n_8a{4irnm*eOld^sex4y-AX%2Ih-bqUw01235C584_1m8i_*DZyayqrw?s(kHP}173CI$>V<#3+1~+n~BdUv)-n6 zL44x*V-i+2Qp&J7{jr0y|)QyHZ6?6?f-7Gt6i=cUu z{LWuwwj(#7;knK9bH;xEWg4(B;Av93))#|V$b#7!yOZhg@2fMjssLeF0Zk#dk=(5l z^)O|qzDU3DYvqkTF%4N^F^p=*yrvMkEhpiDyyw{QR12T1?gQHr`UP}Jkh7rs>SwDr zNQG1M*MjgA)ift`o&M+|{Ql2$@r2k$m>Rj_%vE9mD z-i1F*I;1#UkKYtcA1hIS1Y6%-xC+Qi>etAwC8j2sv0^uTz)@mAJ##&HY%*(eqwdV~ zo;jG7(Sbwh*4eIlc>29DqTijlhtTS3W~OZP8!Jlwu_`)r`P99G<);y0MiIEQe*_!k zEFmL4&?CDY@|o>RdO(txWGsf&io!KA2M{H!nBlHmLCQFIsl6(zoX9eDY~anI2Eh)$ zJQ?T9Zx__qi8`eiiZDM5+urH3||RFCV@a#Ls48+y-R91T*WrRuPV ze^%6W&(ZVUjS@SIR$o<+X~+4u2e19$92%?vNZ){`7NGl>kdd^KxlR%N-7uQ{jlH8t z<-ylqwT{Y0-!FBW)cOjsGi&$0zL_{YzEC?vfHCA{zyFKWM|I!S8v=yG`o;6RnboNGdMU{bP|8IBiUA>K_dq3Ae+RK@N_Tgr+CAhUvC6PN>Le|K|8Ahvjij$CJ z!sFR#NN|3*dr0)#%PQz@-~oBF^N;Z^-P5od5!MmymN)jYoi2(8sJqkJOzy?$Yy_Ka z=bH)xiU_iBJ)Pj?N|mZ%-;~d+ehJHXfPDck2nE}aDj(P~`&&v>Jn%W<-J|s8`w~DL zZEjqyHXC1U%GzviuZ~N(x$s5%2IR6Kx{9gi+Pncu0cNhu*@qf;I|JV)>+;27;(x)` z7sh1FVyuhV5*{+B|0GIWe|Ew0{()^O&!F+DVTjdAM%B>#HB!6*%5tl0q-$;w5bdc@ zbQrAeoXQgKQpJJ$#1Ga|(M7f&ZeL`&V~|ITjtXmy;HMSu>TzJ&XzH@t?;U`fjJyjO#?WcgT0zH50Gl=-=>2zvdtbi#N?9np8vVi`T>?@HOg1>) z5=~Zt);mdyuVl#fjV2^9ZN?WlG|6jmiA*p-5IsiU5IzbtX%l7pxNp6|MHA@FaYgja z=r33J=x91p-=ZhjR~%RjeSO??VY62X$>m!&|C{L8-`~^M12)&+1&&!m@nNa?e^MBo z=QEe7tyy%>>_zwan0^AE04?iq<8RSqA9hl~Qd zI;>|+a!@@9RJK9K8waE*3>+t0$_z>xIWFMpdK`|*Ooet%Z2%38z~{XG!7blz)$SbV z(BTOC=T~6C_Y$?kRVp5Bv7Suq%ZHf?(8b!l$=WBhNu$%wNj7g6EN#mKBM2}h*)#sF z>K=nZasM~n+@xv`9AdfHiH95hSou^FpCJGpxjNMl4vhAbaN8iZ*68g;R75-LWMc+; z^`ld(psC8HI)2QEty4Y#pU=X#4eDrFO>^*4mfnR9CNz#ewc-f%K<&;Je=%ozy*Qzi zINV60;(*R|v}m-0OG0cS(JxLCS_)7yL>a|{fiOjMTcvZ1kciW41TbvNBiedW?OK*E z2KnM6$E&K80Sbg#@w697k_pP7E}$|cPA1Q9wIN9V!8xwZ&MqWz5(x72!Na460njHL zt>}JY`_xcLD;1i@#nMxqs_folJ&e0zV@Hi>0YKu)YS9UMZ|<#Xt5{(& z?-^nCPCy@1Fr#+PzeFSUg)a(}_3Vpn1kB`rk{$p2!oH>6iHsZL4#{RQ4%u4PRbdb>b>$51nCd=1Lb5;SVq-{-zJRp-uC};+5$fi z4Dy`~(*AnwBufCLM(107mX(++QaWnI%T)xq0=h@>$|K;4Hf+>1dAmm_!vDqua9}#H zQ{J|Xyk!!0DjP#9)+k(0;Kl!y4=pQ1jNVbkSI88&7t?vc`V+uG|Y5@u*4yvbGnSZH{TMQ^EOCPEIJ7;!X3e|OvGuy4oLxj#1a+> zEQ6jkCn%E^k((}<3GM(Y!ZPCN#_qlMP%vek#=H0)w?oGvA z%~9OE#62Fx3Fog#PWXS!`0dm5)l+v{v+QTiYH2^yXEe{UbWYF^gxKb`A{2^DKNu90 zxxFB^tH!;Fkp5t^#k42|F>CCTJHQ}Z%;NX1l+^4TOp1eW-QH6vv-CBJ0&)i$#FLx5 zA5;bDO=iK*oB~^7Qxf(nbtK3|+cSGrp1#Y5bghSO-Gj_0U{jTZ^Yz3hy4-Vi@%()4 z)dh4aM9ydJA9~hhx$ur`6(sNaG0Y=Y;>2?#w~IJRuq#50^JE@><6cd$@pi5xu}~`a z@vkR!an=C~Jr6WKtrx95Ydo)rpl8MR>?F3SoP`%Y3P=sE&#{#lYw!T+yOYq9AP*~> z|D58KwRT_(|oyw$Ips-_4j_2~;@*D@jiiWp(XR}k2N$O%A^D`g1oW04l~keDYFHP zdF{4ebr;bq*hr+9!P)@&+h=3YB7`9RWm-x-3HM3=-0bA27{c3DnI+T|pH5I1FipTz z9^ZFn>WAbFMUcyCA2>HAidjC=faF6=tV(2;?dU*-*8!d+p?x;3ar`9bPvmVk;fX%ww^jz~T9uoIw09U3lah{s=zfBdTM)5gVC<|)X=+dhcxnfTYTo>!}d&E%qgh_{v3 zcwV-n%d}lqV>nVNKfu3h@G*SYF$6JR!0eLpWOlArdifcdJge%geDIR?^TzLsg-MU(Tq`_QM_Y;SZ>Moes3cGPpa7n7GgUf*P7a6A80Ma zc~?jy==yUEdu@CAzhBw`CDIxX-z*0Yd+N?FQ139RAN@aA+=9$=(YYf1>Y=S8EYUw; z$cuhHJC{$<%D^+{9mUeFQGihWAG%u{IhL2ifTNy6U$WBlA6bdAN}#zU(xM`|oF} zmZSgCV;n-Xw1m>sa4rQv_pGZwH}8m>>UPvLp6l?_y0wQa^6YksP3Doh{)dm*rPUIO zo1vr9Zb251{(gj^d2wrnoqJ3HGY)ifBV*G|n|~>}85$0}>@CJXkpa~-C2!7tjGYJG zO5>m*amXnFAA?k`1esbp;nHDG;S6;ftXvkioPuinBtwfbj+fNCK4dz$BMwu%@_l7e z12AIuV33I-81y*m0hvyzQ|s+!jg%1{n0~)thE`upnuW|do?p^yYF@Pug~)&P1p;Qf zee0;pPOX;hx6nDy)S>!+$wY~bUs3d-@09mF)KeFwnD%%M^ETGro&6o~kL7H-uzSIh^uoV;rO%cT6t$s~I(E`5W6E3m(tOsH_Pd|@TGRW0Fu#ca0i z!6fV1sGjTkeHr}kE;yNW+uAB}OY14{_&lJXO3Cj}G)X9DwS1eTiE6Qs!s!*&ahlPC z#Vip)qj_)71vP_=vp62FHYhb!lg z>xBjIz4_MQ_mxb+g)M}&#b1Yd8J3(r0|mRU%X_w#eodh8J0e4bn;Gf1+5Tsxz-}sU z08ZMi@Rww1V8&iJxqK9vQb}%Z*R!u&oFBJF!?P&l&o9w0yWc&IRe}GZaYJ@TC~fh~ zwlrBj?$Jo_=gw%8_P0atTXiQdZJX?RKi&tYyRG&^eYCfrii_A5o>$aMx9ons62tL` z1+4@4hZRg?3PjJ01@_n|WAJ4D`MJj(GqZkOc8wS{a%FAR{cu`)@BL9nhYw@*lOa7y zvPGP49lTemMNF5bV#~-1X>AsCG!(2!xqf|2agPviTqFA@)zD%=U13%k^XCg&x6g;T z-h`uFe3Z$XS|USOaEWJV+`rS&sIQk?oc!>=%B{BPvF*EL=1gtq-fKZB{sXeZa~gd8 z+1U!2MBYNu<8b9_72%n_#I7vfu@CC-E>M|ht5s%cyL^Z`STC>oMENDNd!zyAgcK)p zXKu+d@oyc+2r9kjvIwhnw{`!t^`w45m-{F00<2%AsG%$Fc>&qFy8A!I^#j|fST#PA z0282le5}iNJQ@3Pl-y&h6YsO~gD%iz)%RaPH~jyYJMVus->`pEE!tWsYOh4?P3^r~ zyOg3py=zw~LG2wyRcxvVDvIaM=ljd|`4667z2Zgg+_~=SJg@h8 z93UzL?`l4f?f|&GPo#I5q0LfR1wfdSN;D5sa} z^nEyB``JGY`D28-8O1mb5#CoS;9a2}TpG(~g$C0&I>t1~;}RStA2Y&_!97U&<97>R zNnPKBbKEx&fNt}_q_jp>nO2Y}Nm5lkrgHEra5=gpC#Lx9uFZ)+a_kStYrueA<5N_j0RHsS*zRybye8A`L}9AS7+ z@KVr!GOi^ldaKG-Z6WFTyhz@THq6XTtHEpJj)gvq!D9@-O0@c_J|MMJeGs&%YlBX5 z1&=xsiOiGj7S;^E;^}rXkqE|{dabzT=C4GKu3jlR`44`@r&3)gOT{QO6=}`JgZqHy zdjbGB#|kkpu#BD9OvS(W49swg0LUFd$A~@S*7n&yspYbzYFkP7DRz{MY5^e6W06P6 z5ux^<=#K6RD~5jQ0B}4z=4QnG|IK>0#?U~`o~!;Y;goZP#3D7zoYE?-`Z6B}B76B= z-Q&b(D?5n=SRaB@R+I`rrVB4(Ln$(Jea=5IMd%(T! z499QcLFER0#F*fC}8pr@Vbj;%|mj&S5drjPL z(Uf7SbHG=2<19x6{62mfX&bcB-b#8kqlC#A8N=T zib`NQ?Dee zbGioH3XHrREd6}46x*V(PB;FdXEu5zX8S+FR^5M#P{iN|DP5-C`>OfcPT*H%#`t$t z2r1-166iZ1u{+$#kBVZ6V+6olVAxM4sL=Fe46z6&J^RxbMOKZn&md8QPTXXDwKlRm z5Jdl{O;+``8e?fZ38YvKJ4#n3T3xB4+$b&>LAj&GNN`)X9sDXL(x0^&9BC_+DRQ1O z4x(Wo03!G8nW^OajVu4EoQ$1#$Sw1wf)MDDY(_Ys1h{C zJN{B+aA3LJ$Qc@w9tbd$8e7C~i3lsQ>Rl*-`;KqVYxA7EU=E!aR>?xBgwv`j>`Xt| z(G<7Ot+Q@IWL8sVI&OkMq8L)BR|R$EDV z>=DV3iV(#k_Q|F*w~))F^fJdM(+$XkCMlos%!X0*`v&5w#>@cg-w~W&Wb26}TLX9j zS<91GTWuS63Ju28JnA;5H)#^Y8RX9w)BxEl7PI~)ke(kR8#9OJXL6EvBoVmmL)BS1-td&~PD z#Ho37Ce>6wYA^=+*k+T_P(N5iqd}rOVENFunj@$utEPz#76la+XzJMKgou{5;tRzpMH3HDBcE1Q=C5IWFJZu5GnnxDgLYVJ>MX5Y-7LdcbM$v zHv4UPncec^y6Z__6z615Uh3$ON*-~pZ(t8e>{};t0s<#@2>G5%sXG8sX>9)X-((!C z+GkQe9Cf?}S?*gTv$%F3XJEV$uFBPmr`AoV7ArsAT&lrk$_!N`5bZDf_sW9{(19ChN$=Sr_ZGtZC(Xw*I9>MjsFB z-JZexPGx*12vUwP=u$;#cY%9+bj-(Neg**muKYB+n-D!HQnLiKC>)vdI5BB?sO%E- zGy-&CmaZ}9op6^&d#G>K5bD8raWEbWcf}mn4NSH_MJ(|dD6%4?OXhWCb|dsTp1tRL zs=>a%!BT?hB@h174%g03Ar*1thoNkFcyc`=tH9kc)&KsnW{UG67;=kj^Cqv=IB;8M zAz(iqeanEN`B&y;4B4x9#H@V(oqW2h0Gs1Jo9wZcN&F;2vKxR`e=`q`2kXU(ysOaM zJ5Lg!=n}JYg+zAh*v2u&eq?Kip)6uc%#m;~d|%<6)Z*x7m`eQc*WI9*Pecu@zg}ON6k0d=;4? zTNSBB7T~v#=CZpClgfTZr;`}>=5j2mAcuv=YS6eB*m@p3#6M>~{w?MA{uv~o6^Laq zR2Xr3PxyEqyqCn9-_8m|j<2qykRS63?#VRg?)+&Z_P~`0J}y+igN^w9JD{U`v=~tK z=HRP0$$br1QBqEq_jKIbcaylEv#UouYifvgw7K1|>h%gH01g$B?huB(0LMuAJ_9D1 zPHTL-)Sn*v`N)PNt>%_ST?!Nxt5+%4M6PyYAUoWg52og`WoMRPY@nD4uoRy1JG|J} z7tFCL@J6SVO~iA%Mac95vLHtI*=qvwqUgUrc65Es5^%aUV6Vgw08N!AqelK3ZUx>r^ZEn8_SSt$cxDb}~U zY{}d@-bw`nPBJv5!qhfuIof^xb7OWF3#0o?s)E@@*h(Rq4MetYsI1Ds7AEwcry;p= z_M-;~&;_IkoOXPYccwVNXOfu`?a8kutoESP@x7^(;ls(PR5k2X!`%}4yQ%4puHjjD zg+?pxa##`AJ@clihP&uFPtAa-XZFXeR^#Iq7cX#2rUe5~!R>T(dPWOFO%99B8?${n z2l&qYRSw~U9Use+9tXGS3L>wTui|C>f^)`sR^vx_N8N)mmSso{&p#0DB2J?#ksjJy z2&U+f%l{yIHpfFB2Axr+J`$IiKLtKXU}So?(23e-40YIEq>&uWa+{p@%W)oGxA9UL zlO8p@oD{?AVw`2_EA8VAIc>_E6-NOu=heAkg3s86z3)-c$(1CQ8z1O+mpq~i;#V=Oy62FiK)I zVqC)PMs3`UoG5nQW)t^2FQ|cr!2+8#j|ubv_HiQaM_g11fdE_8`8?CC)x_!IKYr>$ z@c%E-;#+-W@E>dycrhQq`~UBkfcN`<&b0L=V(n)*IWtaU<#M!$^F6KMn4!R1Z0T1b zViLQ^3O4%7S%$^{pd`Dvo>m$e(dT3#m!0|xlR$6RF1IB#;Q*E>cee1$Qxys8IA~d_ zD^`>fJNyllMt>S1^p}S{H-B&vgaxPCF2LpZ^R|l3o+4+W|4gy#5#81&7l}{hUSB&5 zcj7OV*J8r2u>j+-y}1wYs&uY7Xvm=SCHb}w|ASh7As}be1(HlNKO-u95=M zCE*qsnZ9d)=oRwXP6ik)49GmJRCws4x_|BFM0?LXR7LzN?)8$4Z@%FF=h*VT)zbCg zDf*T611U(p@F$!_Xh|~@UuM{V?BSiC^jl zsPde~D3w+{$K_g|=B*%@8}v-J6)dDgh?qO>DKq<9}tqoza1dyrZESC#|Q8*z@ zHdx&-XbN_`IC)v%-+7!?%lMy32M1A$rp*7_-xm!4CC}&>f`5DF2S^qP+ogo#Qn7tF zQtI3oOnN$t?Br@}frYYa$6II;b&M}V^m;fTg6j-Gh2D_jf{oEQISmU?%~`n|EuRrX zOx4qlj;3Wk;vNruxbyurT=40QYA@G^BZ|j=fvbgLv_)?n0_v*bJ`+GIR#+#+y78YG zL__u$s1E>==Grv=ZhpRnM<8!$Ow8qqUT6$y&$yZS}bBMDS;`3^2!bnr{| z6aOmaQ+6Gr zdHkfP5qAS-%U@o`5Wk^Hpf%F+LGJh5^Z-|k1b0_P1ABw;zKm{6sf|Wx0`|jvXW7+X zInCR@Vl0=x;9dVGIs)t&MQQ;ApjDj7$>sH@I=_;jR%+n|IIiqyqj6|Yeh0&aHvKqZ>5}PS93S)=py82Av`@yP#QJcAv9)Iz z?M4ivFdm*lY#TRmvB4ysVUl4|0x>?PupM8gAo+A=94pgaly&c4d7s=gJeJ8bAlf;15=+|w&~|DJ@#j&~C&R)pt`y5*5zck^!q#reoj+3_ zD*I+o3(x1dAKj~h#|>xstfXspX@}vebu+8;4rkKRogRQf8z4TaWqF+32ZURXP947f z`0$H$y17of_V{Jl$!6ZpNKe+|o~5UWiYzDB4Ia>YbjB67t1MT7AAE2a-Z+l{b&E|D ze~_a=2d{#8(?`9rAs&~Xuqq-i^L9@Ij*G7gWcHquFE(v2#ah$fz$yN?Uk!@e8?15= zCCkpc{NV?%Ye&;uD0ei7->~<5H#q zP-kydvc=oxnrmi>ODm`#RuJoP)mZNGb8U-%fDh^X4`6mH=B}PBPe71;3%y)He)pHi zofoAt@mIdV)!a+%^tqcrWp5W?!c6jC0cAfCcwV6w^!hD;=3M~?GbT=c-qKF#I*NC5 z-iu0F`ww`GKcvO1*|MUxWBYMpyR+|GfZ8s-Ca^Rmasy!@ zUEc(h&gaekygkQEz-r+-`OwgyEOZRGiO2zxtRu=3*9Ox9{PLH>8#lDKU054lnazuu z&ePLn^ZbYVRPQ=|Rt5lUUzlrGu*c)-JpR`Rv0vJT(ZC42kZxbW*A7%>%0#eyBEr;2 zR|HyxWNTnM!I`4?tL6O}rLvQ$EQX|c9H$yB)!koq{f=TB371FkM{kOf@h2Q*ul}=7 zp$P(FQe|#~O^;Lu&}YEHT%49WHbs3=dMyu;5W!KS7j|t9tgJS-iQ0C^hpkb1OsQ_# zzfWX?##R{+lR3=s-UYRgHg1Mo<%QCW!=3b|R6{EOT)FxK1(J%>buLMuO9JSf3bdA& zsCjYa3cavvQu&m#wlVLTxz=-_u{sxmljk*`!BbB9Tz9l~6-|Ql9_Ag@JdVQgp0fq~ z(@Fo3NMUqeEC002486@2|14m+{7Mc7O0;O z$`^P`lwj;tkUTaCC8~;XhlS73H$d4^BKVWkg9OIa-?Y17!lfA8rP;I|K z@kr$8V%BXSz(&vV-I%v^YugE>Xxg0JxlUe&eI%!AK1kL`X;0b|?eoO4%Z1N57M#k& zb$9*C6aDWvf7<9z_uKM`(ZBc`3b(>!GD*kkvv&7HmIe zkX3dsx;%-(3BIxotcf>9-GxhXtdYBbC40tzjWb)^6x`9MVmJyWeWYq zEASNgv0G0?eoFC&imd-L!WEktNvi>?j^qvxlu`d(S||olX1CFlo_1t6QK}}O+3fT9 z(HZdA|BRq=QSw10oy-Oguiezck6Mz{x(+`z!{fJ0DMLmFje#(h6`R-9x9 z_p~-X!zr)!_I?ANrB)JLpAmJAO23|z!j{TH6>qAiH)4>AsNI zWOxfVYZ3m#g(tfo8G$7e5zN&g?c9`r=G7xm z8-H_+mD|$R*kK8JrGS~GP#=4FGp-oAp334;)YYZJ+zm_Ij`Z2TWWOk3!B{8aMn@zV z2JK7S>iC_*{sq;rI3)h3N|Re4_nsw6af4nqWOP+k=gO>JjJ5v$yfcAAEUSx^NF?Y# zva&OlKrhQ2XUqYg{-%0V*vn1g4K?8Hd7J9(G~DdSWPc~yO@w-;H|CUfl_%KWLhm)I zG9V!1)8roeN}NrR*BY+FWmV#9NnI_IE64V&rOSJWe~V8V?Boc&0V zV;qP!8b>e(I*cDZz##yUaKkM6E%0qxVT=;P+5TEOy_g+6Cg8WWC-SBdwZ2_@kNdta zdXVMdWo_@oNAg*#BOJm&x z#cV{hw5JgoQNb6L8eYJOi6nD?9DFcn7n9TDr1R`QAc0A$h`xh2VFOIAHY#0^XJDE( z&1snfoh^!|w=JcDe8L%iSm#n*TA6EJ;)Z8MJEtHt?SnfEYXMuzH0}D+kI5*8*1qiU zZWS?;h+K68Yx6WJj8XFGAsw2Qb;t1dKelL&WUgV<3LQrO5J#%79yLw_EhbMkoEZpQ zI2r2x7RhM){szYjO?!-fwpyx%TH)YI_yNNvw9L9~OUoTeWFf|RyxDCJ-<%!Kx1e;| zl0<;@HrGhp&q2d(UAwta3>h9sLV~kFlHlO$A4K6b!`aKnFR|=WJbH6Xgs8^|{c&i! z#TAJ0V&$x*)#WB7IuM!91o6ZUrhf=iY})4RdKO&?NF(AX0`H9_B>5Yx+TQI@F5ob|CWcs$r*gU7_NL2Vbur$4wQ@~uM=f>Xbb z)1$jJV2f+@Iyz!TSAXSOOmhDUVk5UxwsLZhe8E%ey$VdqZx)%vSts27Dr^|Aggb|v zUp-rKF7^RUuo3M5l|-wnV}%=rt1&gw5rCqvs zNQXSUMSp;ud9|7+6H4a z6{My~0psNAv{nM#5}Q|ZJBPN|A21=dH3uby7o%mp=IR+pd*t^h`2gjNJC~77UabMoE zYz-2$7z1XwKxDMrCE_JS&iA4}Dlq&glRK5W{eWAkn`EY`?c?cZy|WSde_XY}C8L(TQW1m`i-FgMpV|W?(H*k&q|!nKJ4YlHk~N&6VZ=zT zDDks>(Do1i{@@+Za{jd4L3v1Hqx^~NyJ5n=Ol%`l)QT(3EG!gluxf6kMz+7Nb4qhX zZ$WP#uFGAffs*hqu>t^*VkL~Kw=VMBZ#LXgU7kh_hX8-f(PFhJ$Qd%_77AwBm>t}< zBz*NRw>LJ68vkAi-}LdnJI@|6fn_!xfG`0?366aj)5DL&-3&_+ISo2-`|y8As546g z+x-h|Q*8TQt22A%9oqAerVJmEpZZY?y4J7@lU}^T8L5I3t|5{e#sgL%^`Bt=9G<=y zKB13rk-@@n14S|wjGD#)bya?mu(ExQGRJg7v&6%qR z`zeNaX01=lvoS4|O5R}HnBOA8LrF(<_bx3pQ&exNf=1OfTm{L#?V#E6Z$Kjpqn_I< zhRVom*JLQEPVwBm@{)?~YfB(#8^oS9N)_iE_ z2p#r(T_{6T89eo?F5oZxWYf7MdV-6yTxd+i{5{1JEoLC?<^Sdy)t30@mx!CqeG%BSkMk(34VrT=}Ogw2Ywlb?fB*2Dt2X#?=IXYAcT_6Xi+(sG6i&<)LfUWMtZ4B%x1$0L=@GLkuO0{ z^V!VPL$(=qofMbcxRhR(W1-O5{M$A^i?0x52l?A&XPp21NAymk5(s4sQ@6_`^Lm)V?6|S$|+SQ|(vGdN3%(?Rz_Bx#rA(THvX)un` zJ1$c2JT2A;J`Qkh=;rK_k}ImExI#vWdvMOX-{{aI)K&^9_nTom-u4Ae#fMWF+Y*Oh0`|@-BGW4^5$y+DdvqI|pI(UP*R(TmdXk(lMP17vZ@aBX&MfLHTB|Y#mEm zrtNtQfuG)~7KJvLCL)rLw3;P5JNAfw67jyQyJw5I?f?QAv{wd`KYlZ$D&}b&TSsSRlCMm zj4jo_ynhga4O{&|T9$s<=+p{dqu_Cl;-khXH~}m9#?QYEmSX`V?V8lE7>W=6wgnWo zCm%on_TlBqUL1OBDrP$SeM|+5?Rz|Uab5QaDGf9Vnl$~AIVR-cN4?Sv?(uF$saDar zC4vMt&`)7xXgwwMQMUt}n6Z3ZA7WL+t@+s@bW)lKg7pXR{_a7I)cp>eMdFWn&Z~UU zvxocnP9_oahhF9ihVmfCNznm|j?wt*R(17B^8?Xxf+85_^)KOnfL}UZVb~)jn0?);a+v1XX^s+goUb3r5dfB4tB@Z zHg^ZzG^^V3tK;ZhSpJZ6^Lp&B4i>ugG9B;M^(V2D+|@`x%bUqWpJim zd9`X5CV-2I*WLZ4vxuo5i8oAvxLLkE6{8rCz}q&mC0Jw$VY5)b#Vu^1WfPy{g-6EE zz{e#4qgnr|o7QU}zkafK&xefAr!$FKM zGWPMqv4+5o{@lZ|gD+bsKRyEFCPF)LD<-?mXB6~kHxa{=|M4yuR!k(vps^+aDZZ90 zt~dkTWg|jRYiaWt9Cd7~6;WViUxA8<*FD&4uZbUREITlHIzI_nGQfTk-##HJG?Kv9 z2B!C9Mm6_yXn8i}BVj%XTeKhD^K))l6z~@14hx!%)Jzt3lX$VVaG!PrNd^>>F$>- z5%eSjU3Y^BM8_4O^(oW)9gmlhV9&+85I4!55udaLcWXLrkZ-KC%}`j7CH%r=nYm(bl+At7N#!ON@=`nY> z{V{LU8xb~MUKC-7yvQ6@BP1z&EK}xti!6)4xK=GXW$QDA-L6I&+Xq9tKc><>2!*UY zv}Wt%BhL7r*&fD&s@&)e&--&AMnf@Tg=i!~yEJV3n_uEk`*@mY^wK#ic>>>_hh#o* z%Rm}f=edtX=O4y(Gql>VG{gT%=HhZhF72tdV!LFi^HiTI+}lTNcui2;j!+jtzt`u? z7;@neGL$Oe7V3E(n|Np^Tlbtp7E=C0Xvipx!STSiD4o) z-RT*W+G1>z>C9wxlwWP1QMp(?Y280*FK12iG1Bn2nz$d?`n8;8ve0bEp!co(yQy5h zbG`2#|J;A^?hfh&3v2WbvD?Jdzj#)iXHr|m5W6esS-r)O-8Qb*TJy*nh0AA4noe1{ zS?{es^_+=hzRDoD%F3S-Y#@BRad26B_FMyW#Yo=Yb8=affqcZ0J{s48pT93G%jI^Y^oJ_i?q-=U~v`lT|nK#@i_?7U?uC zpVe!Fsz#Mu2yeKKzK#Z@9S{Yg&j(Zjn5=a+XQW_x8{J#!H%h>eLC()!2aM< zFeX-DSRq@ri8|a>np@T39zz;po0`dLP9B3yE$l76cJ{6HLbz*WZr5VI448E=|;&pIF%ZoRfMJmyx?A!NaW5xtdgRhnFQE z)6Q4~onn`#iDr9Gyt2YcDX!woj>%+L>{CdTuqgh(5;?eXMVZ)y^|a zFr$<7a&mQoP7FL~gZzQxSBK;FQUGa)K5Mxj(KQb$4lo-Vc(eT*1h z0{h^coA1}R!au8`@ngmDb}#Mbz8@0>UW(=&!OOOs--(w6pi{bTSMr^ro*N7jR)^sO zWs5$Q6rw!TU}UY9Bvf}eDTducU%gTqOi)Al#(L2rYDVZ*>H<~xR!~BL$h}~gP>Bt@ zop7TVE%Andc&;*0dM)hWt%@bn%^P5DzL;B1=#Q!5Z>C(utql^-yq9Bz7!q(AG4q=e zxZwJu5WD%Kz_EJzYEk9xaSR@$3;8iQT$-1hD0!V-QX@B|O8Kdj+&}^)#QfBN>_U_W zTI>nA2TtAn<#$^RiwZ@gaIB|hE25=<#BaU@(l*oosPhn+>;A}B7ycc&d<(lBt@+J} z8J!}X(k3Eo8Pp%A9aJm7``Gn<6ran!>6m7)qn329Zi$7_d&Jh8hNT&q9JxL% z&SuW7$iNg6umwtqAt@e%Oi>ye3obEQl=PoQ$9lYZhgOGS8}Coopr*EtH@J|=o!fU{ zHlaci2W^i(0v935w(j)WGlARDVD`~@oy*%ehH>0AfeB!i{E}}Gk#(-{W zzEi_D$rE8U);-U#WA`Lsd?-|&hsC@o!8xp=oiQsp73(Z&|R^K#qk@8B0lLyH)RRf>vHz1GNp;R0t2 z-Nh`2vsEq8h*w*FR2pZ1AWJxhC$!Bxl098ztf zw8u^|gIB)q`?)EZCT=`jA6dM*ED_XcP|9h(+vW&EKz(lS|D;)luRIMGoEbp>Zp(S1 z9i?gN<@J=q>$x8??`2b|$ZIVTt2uE)qVC2JR5aOkz=~ns-@CnZ<8{&4M^;PcS}lfG z4N8bw4qFj620L^La7rrdBlFhaM-UBuLmGp#htLs~R}o`dlD8;4o9tWCGwZ0(2j`C4 z7_d2GJ>3iSsnsq>+>sG^ z{`p=^XKl*X3x*x8Vi5>}M1SsE>`cT7^X$rYWC-HeJ056nGzDzG zQ}nHgEi>|0)DbadK4)26@tw#gavRmb*S|+5w{{w6o z+Bay>tBI>YiChG5O^gg$(;1X{BB@!51ChIbb8HOk&mt`fWw2T`E@~vjEbA8YU2yaW zXM+Le6HBPT>+GZFafO0@8J0(e7!(}u!ISf@@;p@hzfG)NElXftSh)B@Rn1iY1TLEQ z`nt??qTQ=)J(bb`d9!(t=lorbNAxGI_uMchG$6|PzTcK;x>UbEwzTs3{50~YgSZAW zILIzE<#Q)sMc~&FDM-ji(i7<~I-Yp=XVgH(Q^e9o!{^~;;!@4v4~tfKmMFUvH;mE# zz$mezBcNPybA1Ef^n9^4@u^>lj4Q+udUR3bRsOq$^x+UMgTeshkDc#}^K9V(sP!ic z8kZfk4MJ55ouW9WNuOG`Pa|GM+L{M9y}vg2|k(lR8^wQhTCukCOX>veOL z6Q5goX|xje+dcnvxV!w7cYkExtBj2AMlgmD@lxxNIdXx${x$+XI*&SGJBepZDXrb% zqf+0Q4Rt+hsz@5XtrUru-O^6siaWI#cIAP-*Zv9?krTKvY8&jZD6fOVYm;xl>tXr~ zN{~~-2$3i|QyJY^+Zt!jei%=D#rQ+I4z=UtEviYR?u}H*Z(BM(RC5PkwY#+8cr{Nk z30L~*?DK(H+l$fWOK{M_2Va0YUO7@1V|0Eoq5>VDYGnFaMyNA;zE!TCHIJ2|6jqKZ)Fv36{S&y{~w%1&E_e||r`@X(JC%q*R>9ns8= zgg{=s*NK>#A%>STwNST2!doAj$~d&!x|#((cW%l77`E6&_37m~KSqNEP1DxrRzEE5 z@GH|@X16>VZi_gcWRWVbFMVl&F*0w+6zv77Zf3;8ubLx0>&j*uvsPA&7goGK)iE|l zdB{W)+xe)R?=dBEWv+~o-U@ZdIvf7bS_T&rIHFQaj5`C5Mz{ zr0ny38IG#@9J3qQ$coeNk+%SdXo7HScjJxo@E1X|z6Ks+(~c(o<3(oSN7F~`C}vM5 zfLod^C>~yMsuDLx#gr%6iK(s={$3q#UQ%9Z?Yg}BX>Z2IzUoz?ub6i8`AhThYM8vp zzP`<+Drh(tZ&Aq^)Vd5eB)Ux_p2!_OOndI+w4czV`em&5sAgqU8tNo{@S+KAElaAP zahohL=Gk0^{TAB3sMV0Hjd=GJ#^v>|%!eEH)7EOA_;Q9UK$MDhj(Ha)7 zCyW;i47T)t-?nyUly%<9_3R%Y(i-m)WqyuzUL=gNpreb;K6d{XG1&%r;vtte`ZU4B z-8HLOlacI}L%2%b63Gv&bqdujam&5b<=A6G@wokswq`QH+ungraeUo=37zo{wgjXNQB`QT3Y^Gul| z025>f3-yj7d^YwZr~TaDyw`aeXYySGhOn&nV3A)FLd`6?C>8s^3dj*HzrR&=FQN~B zgRIUw?}a#u>Y**q`@JOJh)p2O^#f}$7?ZJ$ZZUhFyp(}eIWpm2oxA1kby^a$t>fyE za*9mRlyt5n)*0@6ys?R9awBl{Sk&(K(ok~coOHYNBxr5b5p|r-wX;i05oBbuPnlZd z-s)zVVeP3awgwt8adU5U_>ILqay*Nq-~qdJJG67b!?3jQHWO36gDln8#!ADPOOLcC z&srnl)4P~z5d&SaS@krGthD5-Ge8RkWloPs@KmMbvcy!J? zXY8fbsP&`MO#cw-q8%y6@3Yfe;4>jz!655E#J3qzLpgAV)TPM4OL^{)>K#6K{YY)$ z47Vinv_Eke0yfvbkzhP8X1czS89||Fs3Y)!=8=%y*0tOC<)pg~$o}enc^W}_P@Zil z`q8IMb8l_iw(DU8Ne%y=OpvQzOz)eZ8FS!pJv~pv-$V{b6*M*zAeH2CQJ0R6MgPic zX*qL!7*MtLm$IK!$Z4V7D=&1vHA)K2q;+x zoT^^sbd}5QvOS2A)r@vOmwmP`)zcAWF!MYJL^^2px04gg*jPC*llyPlCvW6Hl+|Jn zY(bq-DOE~0MfpH)U{3r)O>;yjyqSMXq5GSI>2+7VZ~Ou-f_K(~X{v8|z~*lEBC(=T zQ6-_Pc)y#{z3HLha#LKp{ht|1ww*Sb^Zz#$h@z&@`a`#9rlFpJ8wz|_cra}=el4xq z>h7T8t@>q}(*tAV8d_*xw7HXw%{-yl$hb^B5m@%?V_2D(1Mx(kBQ2!;e0UCjye)!H z{ps-K=bmW2ti*07IO<}b>PmfI^@Q$(c+}Gg_}2vHmCCG4`|NTp3$xLaQ}HVqSRP`R zrJs9z_YTEqchuo`&%4b$ZgDbQJ%Zyyy~y~oCf#Pfp{yKBWzosv4g1PB>9xltFN0R? zwYD>whS*&gvgti`cIB?LtY!}va*=Ngvak#;MVE+6aCXMw^clA445D$I*+`8ZF!mq3 zoHO{;*ho7ls=U*;ujqR5q4CL3<-EeYiT@bfaKF&wk5V_R*fxJk?^I?Z*#|3m>GbKx zmX~Ny1NlSD*{J7m0n-Az-FXhiHW8iAdq1rj3AKTvQbidb47~+}z^lZmpq>Oe6(^!n zwFSmc7O9~~QnDJOeY=u1~o;oju=2i1y_hm~U?SrwDUa8B) z@$PS2@`R~MZ-FDS`Ki`E!)p@3=)s?6T8|VM7%i`MO(c}xdEugZE_-{lw<1zNhU5eN zjXADlC-yUGlLPk?!oyyb&@rqIBIA4idi-7i=AusxjGaCu-7cBFL5GnfKH*_i&1+@8 zKjdC6NDyNrTo)r(t`i(X=7*g3)GWVr4JiJ2(3v7LM`ygT&UljJn-BQLn-8UkJYKzI z5~=OPU?xW^*XyJwp7QNy+Cwo?M*W%OV1_!=f52^F7k6mcD3cO{ZLtL&g<#&3`Dn6Pqbl1 zqUwB|FDKTP-&fx?=xHZeqpjW!FxY_)p?f7U@!1U@+yx z{=~Re0vN%I|Cy4APX^<`mS2}mHRG38Yhx)U?i|+9p(ut<$b#;JCPOG(j*CUFH9mWC zzDYz{EpgQbM5rVz#4J2YDsR}n#Mb<4dg2C4KV@ow!nP@|>MDR>m|-wR+Bc+SpfjmU zbz`rvs-QAKHT#0xJRCH1E636X&yWjl5aA)oo*bUE9S9Ff2$=Nq1`}@an6y3hd?x*Q z+-nTSQ5|*g&|k3=6ZFg)5etuw*lm*b>w(a$y^{5syZ`d%tx-DB8pd*hz8i&rb9^_L zK{aWhGVzn`u5*r20dZ9|5QWkg|L2`&9xn5ibw9>e7|wjCmzsHvsqUY>d;cyH+;xt} zCbziykJEH;Xr$v@iaRyJ?=REX(8{5V-ROtM<5i}j;e7k`gUsJzF#P7n+N|&4`IY3Q zwgs=MNPgYIbd6*RDaS;|vmL+Uqva2$43En3pZ_uz(i;CiK5@45gO^@6Jvzx1W0@$Mtws1^Ki)H;$saC(tBuSb(F5@He2yc zQnW18fgvfSVKS?aT%j}2=ZE`Xn$jRFn%Un0k=XJ+ymF{nM(K|mL3S9`lLfmBi}!rn zGIECY?N$8SvTYh4l>GY|UrA*L^Ct5CO9K2+ZESRT8byJ>=_ny79R9iz{Ob@jvD!SO zzmdyjD6|c&1DlnXlUD7{&m8dP6PqIa zrz+ZSoO}<|&T+a?n&dbxUK5>vyWKj13lCj>?JBUu3DtanT>4nuTB#c?Js#V+7fY7!rykJ~D{7Z(yX`zI4F* z2Kb~OUT}4MewlLn@KR#&uP%`G6q%IpwhzDRa8r)^;}^x(F0R)zTLuM57Yal(`Mj9) z^tKn>p<8klrSE{h^!ptHN#GLK@JEVdk6E5YdM4EmMFdOa=}gU`S7#MmVio=Ke!P_% znmr6BlXj@OmR-aanmcXFT~;bg_)0TSs+``9)|~IIH^mYxjWZ)6yH#5Im>JH|wM>c9 zyB~c%2dM~tFfRF~MdY(7k_j&->-)I<7fuz<`j^RlW{57mwR3~tb|eJ(Rd|rm(7puT zP3DI8dx@Qrf%ogumyZmrfn%TNw(hI{Go>YOw9ul8$@{l%I`F{2R+E;@+8PJ1PwSxz zArQDVlqn<>!x7%=RJZ~Rgr5u!@1Em?(DfpJ^YE4Q5l{k6mYFqN^6@ZWc<|>?zB@3o znfLsd{7(~?)x18NDB+v%;xHuMAf7r&Vjzj-u{a(*tD;Qi21Hc0UiKNuqhIB&uNah; zfVhkspT~3NhJU~?fO*UrPG?HBPKFXAym@g3FNFZoYK;#w3hAn|cfw)4cJRo@g(f%;XDo&MA26pSwPBj@$1Swe+x@q4ixcJBw-b9c zdqO{3Szb9SDnHv3193y&F}}S)9s@c4=X6G4+Ai#qHOM596oUgLgo2#d(A4>@`X8qA zI&^;esg)}Q?@}SO#m5Pyub|tzMO0ZInw7WlBsI1zPgV| z!)4;XU230Ap%J@rAhqul1TMTj0w|TX9f@Cqwl4F6mxcQ)N?uJ?NWxc-tY56g{#9%* z$>HeYFbkE=M!ss=4}oAl1dh4%$rN)j|{uB)sfEqAOm3qL>6Hxa=QAcb=k&yqg; z_D~2>@POC*%+awm^N6$k1c(o>h$w$y+SCSh%5=f!J)R>9SimoLXRuX_NU;(;9mZO z__Q>H-xQ(gye{e`WVa-~2s0CMgolTb(@Jgp;ud-#H6&q??`^i`gJnu1s|ux)k|C^z(~FXH<{3`hmM!TFGLR-=Us35{mJte zYLRtBhW;A@%ii(6+Rbcl5Bl|8vH|upTwk5!`AocP{BS-S`xjv%>eU`d4MmW%)oRvX(1ecY7=B6vtv1v*syT4hmc-LT=N}q?~_% zW2B(>*B~9Z36e;PL3V1T7#;u9GD1~#tE!L1P!VK82e1;fjt@b?=Rls zK@t$rIq-#Eu4qXsbhj%frRsQQK{CifnQLRuRB^wEJfijaW#-#i$4ExZ9S@@f*Q{6E z-ENIVvNKMZqj98h&;e1MveO3shKQL-nw=xn-NCgD@;dJQfEj+T0z!sSb&|#>ohiGt zTctb!CO6z(2qfICccY}@+P50q;UO+UB>UPfyAkZylKN>qno0=*U}5H z7`GLGH!f2hfmvdg!2zJC#W=a<39alJU}OaHC9-nfhe zn&B!`fm6${ek9@(tb#4k;86HIoPB%|cpm&{@JcLztR?cEEH}sD3&`FhkqiF>C(K~gOs}Q&KM>6IH*HvoGFY`am{D_{d2e_t zYNIwjDgRHq&!n6~U{L{0y%J{uU;U)h3_`$SImWknx=zeCsRXt%%eieqVSo5GAC})* zEsxJya8212S-vtu>7v|1IbQ(W`Ta6=rPpeoueC5GwZ}Cwze>BBD6{5@X5yTLc znq7SyxR6dSoK?j+WP!}T{veB4ELoU%(6Iu6+bkrwwci4rhQeWPes)l(2N~S0F3VFdKsWO11%)Yl!{0e$&C3>RoPK<)xl?r=DAySJ2>X z4)E=Ml+f}Kl>N|4ccl;eB1Pb<3MgisPu*L8mF~qahoaxU(%oKk!QmfGrB$p=!#VM3 zwY=k)I^fzQIl_2CmiE2rhZG9Ts@B>`)qg^LYzi1o^YAs==-5>!rW$(Z@T@O1uJ|+N z2KW=6KXZ$QKrBc;ZEz8c0s|MD^*Z#sGih2$0glI9(ep#cpmpb{+Urir;Xd223Ga;5 zjzJ9_%-b^T1uMh)#`t>iN{}=MllKc_6BIxE*-mg+yCL{ zyyL0*|2SUpy(lx4y$fYun`;YYQ%3fvQ_iBMeM}G%3UzRhoTgv7(bIs`!X>onQCdl#cCl! zrLV1$ZFMCov#Lg?PVL(rSj^zjY*Uz>6iuVenE`&|7y5qt+Db+x^H!JQ7|TW*c_BL= zWbB|C`L#JHvNKNZ9Ut%G;|$BNfA0O4hS8@VeKYL7MIxOKl0U!08stx z#km^LE#S4A=k8cvK(kw#d+b${VxBXN7~+$eUth{26_?K6Y@xKGVoO|7%LrRi->{!1 zr_A;Ksg>*ez%ePA1-tS|P29+ywwpE_#K;J^;cY(!rDA+9S~c2SnW!lm_W|h;BdO?c zLnzj4`GX8U?HSKP3v< z{|S-fN8WB3c9-&7tn@ja%z(C-q%*Sz#e8DX_=x^GBjWLZNcFWu3lp{&@jE}(3s^>! zgx>S`NyV5Af%yoZLi}FjdJu054`3EQOYf(Z+vGWOM4qs*yk-q|SY~DM{o7N@c34hF z!hTMii#O5Qd{Ccx(R=YM^CF?q-g)EZtqB1XUn{_zF~il ztA~uqRxi0uXhJRN)|egFHD_>5#ZTE%Gm$=Wagm`pq}1nG4VgQQf#HRAk^V|09JJ)Bty*y zTR$j&QOR~R{f@=nqO9%lU=mR^{O^Kyzc-SF6#I#}>j3RI;X!-5+YFu=#$e36h5d6| zL3Fq$UV@UFiN{Wh^wwjIWU+B4Iud8mbdD5^7WV^`bhbG=aaYX%@eFH}RSmWXB0f^x z&wdF&B+2OCqjUjr)jht=Ej7NbTn%a=J{!q>&15T;Qa7s~t6m;Z4cr2?ar%NQSGrLN zKilTj5mBDm?aJyp+&c%yow$po5~lRhN6+`U2mSW11OJCIF(UV#7k21CXdmycL)-2b zKh+8g6-(aUO){Zp+V%K_zLo;0k|XeGWyRM`Hl8D?KLWljsjBFcyT!ENpHYnWZJHZvZ#a*Q-?Pr=EXffgPU!pnp z>arba4+pF+x3}~A=$2GhbpscUOQqvsWkXuER5|ueoA;KZzhi80mrX&dG7U4Gb(#c& zspn1EL-nS-d?!xLk&$*T{Qw~qMy)&>zR>|DZ$R_ayt3o4vS?5J!EYu?kDxa_Pa*r1 z+>}Ca&Zc3a+beuXaE7MvyO|gx`TNGG-nCx5Z1*Pg{NpCxGDZ{MDM7V-fOR)l zON9+1Uv(l9yGzC`m}qH$sT``@`j=he_A@%Kw>phEw7h&wx7lz9iYyTiC!5W=Qqb&| zbu`@s>J$#mqGaP-B`qoZ3opVN6F5GGzM}{pUi)%YMKf8&b<$A;%>+}P{qrS1h3;0w zpOHskF0X~0u+#Ks7RSAx>IVokg_F)lI`e6`v%00qYVGD+!V_EpOM(1qPxb3y*U`bw ztV#ZMAL@o@b=!G^@!Ejbmn;)XU&$^CkbVRD-yy1}_$47JZ#;WWN#~XZ@9LEELL3+2 zX+$NeTSiTfce=>FpM}|W^wW9G9qx>NFL6si3Wx&{y> ziNlW@hW~-nGJIlQs*^%onRvjWm@in=PR8J(y(}|V`GPTEU(6>iOQpw|vau92Ih8#x$<-SN%aJE!_**b;Km9iJSh|If%{*etlI~#y9WJM3**xd1 zZixCkArCW|joOQ3yN&zoUrSR&(8Em-l1b()xls3C$!e@mSmDubBBX zYta{t>4zsqr{pIUCtff9z0h-rr0{9pU5VzPH`#T!ER^435c?Wl4O5%geil0{tc1)k z;Vra`H;|(2-bEM$>^~gu5@ZrZ-pXA%eYS1(@!A_iJ$L`d2r<9Ex*FZ#T%Ywo_S2fnhn_nFTHEAl<&y@y+^G?JKBZ;D#?0K-g6lWX=wEv#8hbC_eu59- zJau@lyS7TR&5vpVvZ;R@@Gge+>s`(EV>@o~VNdfuaf9S_(c^S5w<|O4&jYBfVC)G~ zC;v7CpA#L@4&Gv6z0h*VO_hG$gz>phH_d>-)$@^21C9GfF@dL{Njka7#TK=W*< zh;~l3-Y&9!+sAFIyWaLG+FN_J7~BOpS$^sNF~Wc^r{}MPgw8#oNT3jJyp-~k6^gb; zBi7U1xZ8uK+aAYE{PLu#LQBP%zWn)((Kx5-N0ICk%ZdW7VSE0lo=18T)^&Dkg^j{$+x30*TdQ6IwQfc_ z!aVNNmF-7gBX!A8+Dew;y!Kz?&e##H<+Rcj`sRZ z#=O|sQo`}}@8QarQgbDuJUefG`9Ho_r}qbfU;Y?0J<`TY6-|B?(?M~tR-HnqtfzbTfJaE(=Ym?@#WtzG6EI2=w;d z7+3#Ql^;t_k|f>?(JkH)NI9!t{ymm#=i2|ekNDw`eeD05JhbH3K2*=CP9e>VD$8w%#z8gBaydQ{lGOA65&uR{PcF z&^MbierA-+SKi$KZ;0gif91#O=IXY74p*G+*zU``p56)uNmF{0P*n+be02HvRZspC zX!$=}iez$qV&-r34xe;c0;RV6UhFs78Pw+sj)^0Rlg-`=QHS@$w%^b^DN@ z#%iRn({6W?;khx&5Aj3-{bs$nVJ)En$j+Po|5m5vPp2IE_p%e*@Z24p-}<}DuWXdW zU*CO>fSoXw79Gb}Z~9)B6Yo&Oz|Y#t_akgF9_hPMZ98L9oI*s{3dB(9C4{ye3{a(p z<|fS#@tsz~)2eEVygpGjChP=UYG(rcVrHa&oM-0k(+fqGVoEZ0h^=>MOPg=u{J@5> zf3{UHf!K9!nu`(MH6xft8V1;MOSwE%wqA+ro?%R`homCM{d7cmAv-im2<5`9DHzpCVbL{W)Eb z{!YZ%l$qdBw6x>Hzx*7keFm*}W4%qTIIa$&);g`F|BeMxPO{iXt}QW6JIbo+1*--Y1mnMCAwz(797JQh0-Q)KG1J1 zR_R>bOR&QBbYV^;T{EmyvT1+Kg!L{QTCm7_=`s~R7TQm(lXL4IzSC!U;cCMIb_Z|@ ztleu~_1&$o`is(M8h_cgJfXv1Y|i0lN%Lxpj^w!lSGgBXMaC-of%Tn3UB?%xIrr1e zAu?&%46kNgIaVV)hh^pFn*GMVG+(KTd{tUPCb~UZH=vl zwKH%$uklh#`(IJwoV7;O&gL`6k)) zcykrM@mQBHT3FF=dP5y%Y!=U-+Ey31#q2tsBco9wOE(5nLx>qtT9s(xIq5Gk;;RLg z1Ru+nujtM8qvA6V>zl!IPiq!*)z4Htx5mqOWzM!s2@(PK7gY4?j=*SIz9Y#_DukQ=L?-KeMt1Z4|(- z8`g05pXf7aw*8wayC|yqcQkv%o-_@D=!T~5JRkH*Sj(YUUi@~o{S5$Rdi`e1P?HLA zx#LWO#}lT`h*5!jfETf-OLk2YCcEZ#qc5Pc_6McX9TlsWm-}zu9uONnL1X|i3K&}$0A6o-;p}_4T>v@@v(M}ql4A)?`sS+XKMN=Z-M6V5s`33;1oHc!Y@jo zG#Zd;Qc3cDZLclyF;RjG=VFc52fT&Qwd zdY^?8CZ~abh6!Pv-WiT!>AOZ3j(>raX-*g3{!?Lh!H7eLSsiPZIq8?V#W&}O6hbhdO)Dt&^jIf)ZiIN^JRv0E&NqC03tg7SizY3DU{3;#sR zb^F@LyQa|gxdud}ezCi0*C$9!yZ!_0swrmwrBWn}BxYb61z@?+dutTnieOXCkqGP(#2_;AmP+ad{YiNwP8jQivr^6D9l z8(%i>Zal~-%Tv${^^4g1kH~f07iypym97_esG27X5|1$A5MoZs0AcKfWeVKv1U87_ zo#?j?Uz_i0ce_Z?tliBjm?F13<@co0lU+-zE0LF97sP(-ie8ZYvk1pfqN*Y_F*}a~ zm+^Tlfj|`j&rt35R+5ZAm;>veOg=h@+U~G8$#nwd74ly7+k2G*zia`oOE<(D-sG5& zTCM9@gGvG>xbWGQHbv%zeZ|LmMYtRsL2PmTi10ULEH{=&D| z-RFb$uZTr)e)-vs%x7kgQ*rwoM1GTY$C&xd%yXPLwB;GoYC#pW@MS3EBkJV^e-zsZ z;dAH>XTG*+>oy%Ifg5~&eZXH9!e0L)>5L$cvJ(rDPYYbH>lkWsMBF zWLKM^@|XAG;O_`kV4g@Nm3`{hGC~~_A+ED}H$>y#G{^2hliA49`_<{6)Y*kBdK6~t z7o(!o0IL5$kxn~KqLL7ReG@9x$tmN0$WE~M+<^&HIPkZMlx=VO0g*Nq>h9!H>L_Is zT=p{ovJ9d5apyntirBNhI7*)={&_?3*Zb<$ph99(3Q{lH*qB*+zyKjHH!TOSycsG(%@zi{;R{HP*H5>?51O6`f`OvLmf6#OA3CxRk zZyIElp6$a+;xG@gZao^3ulXqqJ1y5#c%4LLbx51?4cm57ad@5MN{TUq>d8WaAsMUP z?S|{AWL4Z8U?cXE|G?{y@v>fk;Z&rb#k{n`Z&`GoM-m^S!zMmOt9uLR1 zyMnHvARUl1;!uy*6xQnuk_Am{@p8;FJ!KsAa;FGtSHYgFKxFFPkVQs+6^8KgbK zRP|ab^DJJE_-)D;^y)aOIr(hP8Dubn_yQ$n@r*(8itFY_thKs|Mc8YaV{zUElgz6}xjuV=o9dX1Zu?0mY(un0CrmQG|BaDvRHiWkuA~5dlVNGDI zPj~R%!d8vG3a?aeY>QxZodg#QazI@YB=CK=bJz>=U0%O~@f8N9v!a>X9KR zI8p|-s{T+)Bd30Z@H#*+ZZirf5R7sz^q3Q69#m^3z1VB_LPvc0*_m77%*Q2S-_bo$ zHCNTYe}m>-7Cl0>eTqA4DlyxFv^SRIusS=4lVu5*lNM#3HH|ROH~+{)3}KVf94SB6 zhoQbg#I3c&E0ud{#_O^{#3Ey66q2WWVMuWvDd&Qi)I&HWf2wv0ate0}9pZzh!ye=V zD~jZf-ee6PB^=&MDq#|YetfLSipchp;(coE)L?u1I>Qq%*K7MMfUVf4apo|{;h2R*cKEM` zYy3iQ4jq1d^8klV$u@73qPkq$_34M%PVFikb8ihgP=m;j5u=}_W3=*{6V7!08A?S@ z2_i%UNDy4obzR65*WOG0IRx8BjXT2^R z@{uE2fMKJ(?jgFXd+<&i3$k@9t-+6pecpmiZF}9w@J4BoP_(PNc2oxZD zgfFKTY4thU8m6CDWfub;Tg;fy+mq-ulCTu*TFGOyZ$l}XAe+iL4KXGX$fAzTSFCp) z39TpKJx5*rPm6w{*_(XKJ{C04tAH3_MZp#Lj=pk!p|+^bcmG+kY~fIWQ5;LX_Fbz*}14iqpo zKUGq#Uzg|j^g-V<;KO`yod{L;2>IGwgX0~pCnU%Ppk zB|%9Pu?9{&4TEIL^k4_ylao6$@^JJCp@bdE+yT-U`8vwjhe_e#^aakg4#sL6jCE60 zbhfKM3_dp#`V)c|#xYK4ruP3F!dL{SH#b^m772=1Y{1>w4FjI&$36vLxlg1jaEUoa7z7EESHy4yuliy+Kdf#u zW}zxOpX7P4jN=zr4Cuy%{ge2YCb*6Vn@_0Dp81UjF{q&)dVfot# z*jW99l;LT41D2NA<2x_+U4JIEGuA?cX^qB~HSRP(GF5j&>qgAcIlq7Mnh-)1YWuzTKw^*i!uWJ4JpM>>kl?vq4nSF>8m9mH^><{Np|fl z876G2SZm^0cq3;O3gWu*#l}XgSRHwVG{lAmeH^rZBHtO1Ldfwxud-oKVL5UKc6kgZ zN^5uUL!M_q(_zAvZCq}4Ny2^cmuQYvi8#%);Hf$#Fb_n;rWo4dW*6T1COKkhO3UJq5 z+0z7y|3tO$NnT?eia|Z=alA}p>^g4+0zK4|yR{gmO9Tv0?QA)B6V!VkgGYD+F1v)~ zMFl!F=V97R7WrLMbtfcNF*CnDaz2thE|4+>kLJTC0wab*=Z_!A{vN;UD>y%3+m$7M zw=ax#Kc{#zcBbF(IkdI$Z&J(xtnAM5CN+-QE4C>HLy^{hqey>@lML2%M#tmCnc(m; z#G2+5#*Y3Y?N!i}cr(k?==_AkW9ew4d-Vl}^N(4^%7@5kmFLPIkuu4dK?0f2(wbKO zyDh@?j=`G1`H0p7tvB3XEr^PfCf-Rd&^!Uk4FbHfT2;g`txuhYO2VqN;9!h(oG2aX zCKW6ZY0uyX`*EW~IW&C%O@-x5tdIfwkC9c~I`9;Z-RtcU_j|Z#PIP_VDfjmnd(VVx zbPJ}JawJ{}hK>tIoi*E2QD$FK-?F(4IQ6>zhjD=466KDB2m-m)1v|)EzvPVej>)1IlEC7 z!%32%WS^?r_=v~(O>^3Y8KwV(iJ|jaoP#;*Eso967%kIQhgLBFyz?|YA&?3(e*)rh znI7Y;z(E9)^RlX{qJPpRne`>EcxmLxPEUGTCQdT`!D_k{3Z z+EsJyq-xFAVEtoNAjTl`(N)4JpMVEAMmwmpfppOAIUw{xdTNXwQ?|Mb@^-p%r7tmpWq zgy+6UUD$CPwY-CAMh@&WCP^-Zp)gE7A;{tZt`d9nFvsl2iLj~?qMEC< z+o0?VrI;+6plqnnm9;tSTl=e*Ws?dfE{q_C2vaMld3eHTe>xc6);8=MRrs%Aef2An zIM$Jw>H6(j$F=(O&9^V+6f{XK!WxD<`hvg2l;u#@u*_v{=eS-;u^y+*jI|xPh9koe z?m{|}1PC+fcYKQ#7+?T@&m!=1A{n&0Qk+VpS;$g7pnKbMgJ2PKGmj*uq3T62oKh-- z;%AG!Ni>KW0}m&IS2b>dnUx!v!cnuzKPv~s?E~E*%tR8a$bF-D+jz1yBgK8L2WU(9 zQnUpmgai06ij$kNa~;w`NxF4jmk6t3eB5p&LUgg%}4R_ z_7#*fqp>)oz!UK(#@Te%6H%fIzNDW77>@MIKWh#dPai_x>Ea3ua-qF%^Msmq!!frP zMN;{XDXfu3wa-mCGx?KnTbpt4qh()@(%jYO)BqoN9^ioY7r=)->ltB85bq)`>i1He)# zI%6?p(R+!{>ABbgRFrWUh*)3q?(VWs72vX*+3u^^+F^xDErkw!G8N(}Lsesg!HPlC z1N?kW(yO&o%n(Q7L0=q^P+rqwA(e_d!|_{HuJHA1&$jnHb`g(+V3D1px(;Qu>^|mnEX4?a=sVHVX|7#%hlE3K==JzP=jv@^WdT1TA^t{|m{<>G zVc6!IV3wbcWx!?M$+_(9GIogrdd4tXdW=7a7GzO3rfiq2%ci-mAu-rP=@ZwEq?2(y zi2I{QX6L6MGH8Z(GAkK`)4|yb(PrW%-ZCOQUIyD3c(Sxh#W#tPeO%a0wf+}0hvv%c zay;g}T!ZALZ57h>qPOv428<6;*zc@sWRcHtf1^tdix7^qEJcEc%%7M5YrrsOe)~mE zp74Fj?pp9ekG?x9Qc}{{UE&5#HRSo=wdlYUc9IqIdWWjP)8wBm#th!hS&cVIhLmR( z>BHCS?3CN=su&d`_40~)hf|unX1}}CO7SyEknU=RR68e;_wTqk1Jl<(pyOEGnGH-l z;x@F_%Zn12e|6ZA`&cT`Y?ZkmtFzIGBYbzOM9O1hZ;UAZ3{ zj)J=*G~7GAiGBkLQU&E4i98(#&1O~$+KG81dgxM*B$CtKqb1H!-qc z1>TSkDxJ+Z&Qy3v;=z>P3#Qy*Q7y&(Cw2$tAiow1$^z9Z%w+5u2A&5~A48S4R>a%N z@)OE}VRFmzr_#J|`th%xZ7|oU%skKDf^%uj1wLtd#&eB70E;r@5)&IhkEwnh_Y<|rLbmmJr`h31xT+CeRxSOcL!c<44iVB zy(ba(hW|bf3SQxxC8V(^j4kGfq_l>c|sRr-O682YI>sQLlPQAd|Rl&ZNU6tVE_joO= zGcWsSF$tn_C1yD?epslU0y~RNV#-S@LxxmeYI5m`Z77Ps@_F=+g%nLq0Jv`s#%XwU zclPsP5|Wz0la3ZP-r;yF)>3&o>HGPqZXMqIo+1=u_3@A@f)h=#dgtijuW_NacnSOz zkJ-?zV^$XW6RJen4$dNe7PjadRr{5vW0Ic7(K$Y^MV@~tn_<~JNN9@AaV0oD%!_`1 zXTN1X-7xrB<{)fJ@N>T&kp2qeD>|6 z16!E*e$Q1tmF#?k#H0KzL2!A`{>PFPKE-4wnqB{Ft2UuJK}$QYs6%t}Rh7Y5K)Z+s z_~l*;ljZ_XWlqCBS#tdGn5&tKv3pX?w{&T=rsh`5>DpHn9AQKkS})*NaFOu$M0

LKTsFs?U1!150h9TN=A$+Eeyy7v!V)(RLM7oBZmm7R?>Jgixx;TC8y`5_qR@)?>Z1=$)-uaDR%KsVAZP zgJ&N(tU{WC>em-LA95c>>xD!&9XF%tr_%c$4PMRPvo_lQ6V-WTRmLD^k&0Fvt7imb zA~#uGQm4EX*?FHdPen^6OSHrM%q&iIDWlk?#}xAHU(91vnF)S0ZS;wrt=m*DVdPfZ zsgvc67q#^lp$g^|Vn3UHlzV^jn#?8qCfbH zBjOs%q$|E4v{8tMhhJC$l^Pg6(uplv2PMDK2H7B_CDd*XUb5edq#ebde1&>NdF!TO6|68 z=aWUW5Cx7Vs7im4yAl~v-nonJyuxM9LyF5YddubFpF0;i`XE7D$P94Bn-nPg(M{|$i@<3j>ip`7~yXldk z0_1<9)@0TbM6K|2IX3eodkq=@wtu=MO_?FpbDt|+mDclFm5!`%rMpR!o}imtb0am5 zwN0EoiA*dqBdC{rqD*1V2yB*t^rU8aqdo5N)PH9}a9t>G5`TJ`Q?!E-KNZsd*gTQt zAFLir41D11&3@Xbb$=*iDKqPTDkUKyQI+5lQBT}+b2!Oi8Xiu+!PuMWyy&?YlXeqhVC z!+JVTu#u4^BXb_ww0-?I{t=ZIb-A;@bA{F!<)}AKBc{f!;g*rO*S;32jDh{SGUfB; z@zkLKS7w)&LhY~U&^i9W;oW7|ORG$AdsBvE+#kAp zuHl_T4lX7tOw@*H?yZC>@3hGe$7L;bz1|WD4?f^VD^>romU<0lj@8zWkb}vpp9Wt? z=c$u5KJ8?*D+u`pCJNLUr}sM+$|Jo5-rP%Kk!9uILuItEtxS++x9wrP zNiRM5>7!ZCq3Wl9vRO0wv3ZtaV-c?4q%!i%nEaO%-N#=F?7+(b`uy8#H@s7p-p2}5 zQMwH6Egv%f$0kM1z#*a(={luQKDwdJM=ik-DKqxfi>W)V(QBHAIy3%w#p@4ov-b+* zy7wial8@($q4p#HkCMFgJ%xX}GsZjQb%bGoH+eYs`uzE79G^W6VSQt!w#?t%teYNOuaX~v(-fuEdVbIL!@LI{x+eiOKyz!yIPc4OqS8~4p?&Y?eYkh8 zIcu1Xb#+Bt7PrQ)(ij=Y#J6oKe#IjMFq-bTgYbc=p{k-2)$aUv@SqnqfsE&3$Pc#Z z7_e60wkDeEAJSmm8bq^}tfEVLT{L~-kZPg$M;7Og9o#?01i!zO=jCv$(7~tKG(s5^ zV}UZNeP7eJ!fjuFBd&)THi=eU^VYyq6i=eyK7TA0NAX2>EQTE=ecaD!m;IvCnGcy8)GZ2*+Ch+~j?+t2v$2?#oM9ay;;{hN3SuQWv9?5Y3k0bp^{RzI@ zH>xA%YY75c17}2ymG+^*-q%U%rwb9DE-SAPC$6N&`b@eA)I)-uJ7aRb&w%(|SgG$x z{NwJ?4eJXAe*>q5LV&Az+D20mf$;L$#zV!@W4>&;bP4Gz_+aGf0(Ow?h&QvTHi zhzUb7LgUJU{e$ekq<6jSa4+`NNiW({^S=E9(xxA%2RiKGE*h5hkFP5bf=O2i&h1e= z+Q_o^=+Oh3WN1=7B#JWDF+dspk_1mq-@K2(P~7ETVjQA?5`wg$Bo}?q8BBzwo0F3i zaau+8u`PUU#@hbh#?|q6O++Lz1NOVc?PyyoP+G&%@bV=#s5!3 z!BGad>wP!a@lEH|Nln>xSM`1L4)SPd?aJlPZ|QH@L@hMK-0BhYwaDw2fc4=ARnMO& zCLZq+qIXH;7f}kEX{4Xuaq`7W2+J0{Q@0i*8v*x561(aW8u!{BzRRT|V$n}3V-LmO zB(0Gt9)zpDx^~XsDMh|tYe1IG@4fr}eU`JA{6ksrrnb$iYTZWPS@}=6VsN(N(B(y+ zbZ0Vx$aY8%FsRPT=25uzLu+Hn%x3n^qM^UA=|hoT6qs0X0}PDa*uMD zy!s0&h9jn09AXMGq)* z*psCx*^h6vRg$%T=XDWqRD%sX=P-IpPmWg;ES^kvJ{EwE-o#!QGF+NuDL2-fo?kD= zd241et0G=RR3|(yLXeLuM>Z0h(5-;YWE)+5*{(UfZzM4kpD zW(EK8??zGvXG-VKg^17unCCw=npR#-oJ)G@L$h3NHKlOwA`Tv@_Iuj?aA1)8@yw`cmlE?w4yrPCQ?H^SOass*z_Ob^EVg}qM%G@p2N;&P101i1` zJ&DEX19w*cF~g3v8w`-JT7aSxwj9c3Iqf4AE$ zYHCCto4Rcm#b!eO$uB)N)Vy%aD~Vq2q>!P5|5~Odg6A`J9TB3Z8Rpo;5s4G||L0I- zS4gW?#IqBIqcYYTXRlG%s)``z8)Z>j)xy`MTTj)#w9LI^$xCVT(LO?Elk|pLFc7li zz+u5l%cXyb(7ToLjDt4n+TvHDkUs5vJdzm1DTh~XL5yOow1F? z&|bx1|4$dWw^l1^HW_AyBD#u4QrZ=j-)e5Mzk7YR41_AE|HbB0YEc(78W@-6Oz_Kx z6_fZakhWBM!5oa#x^LSJ8zjZ|a;Cyn*v-T~tFX@jptbCds*75)My(;x;v8XL;B?b&?b2lz&%MJ zf9(jwPhH=&uWO1+<6`-Xcb9ry5|Vu*U5=o~cBCu^`IR#-fnqOEVV^=Dq4UVbQuI#m zrkyo3J0-<{|96+uBv=$#KPH+KjF=J6W}}9f*wU*U>Wh= zP+=PKry5(!UJ#7Myb*d$*45E#hBGxrg}nukeL#a(mN3!Zm8L}BN0H2O(zL;K%*dcd zqA0l2xupe%4~pw4K(d~%D(&$93+48FP!`P1DiJ|COpe@A6N*V4its3f9lNKA zo30$inPd}2WjiBG#{-Xp^8wRG@{pen?8fMODEdSdc1E&%;-`c8=9azwY=)CQ-01B| zY^cfuLS6pOOO{~kw*#c5#S{b+Uab=MW3D7VAYA96_C*85K>-cSC5cZGt}~YL@-{IWKR@2%HZl!1PT|pZ1gMx88UgZhIzY);^CAv5S?0B6Fk2iMdB1CSUX6)t@uS_xI=pZg6VE=a z*@sx)0|?m<`K4g-ml#Q>45u29LY+>}Y;wG@`4vS^9cWRu!D#bPB3t(;0)Ly36DZ*{ z0djLf;a6|Qtw~w`hoBb+Yb%a^km;;;=E~@~Fj&yB*T4weWg!8!K4yO?9yl+EBGEh4 zi7-uwiks}hGeBkjc~8CcMRKC?E&U3fKj~@vOUik$UmgjwgAiIu-^Ed}y}?UN#2-}A z&JPv%mfgHo8PuTHb9PwxYW^1D5xf4$+WQ;+D^v}ndGX%n_P+nBm_A^CN;zKNr*g{>s)aN468MO(1yG_?IVn;dr_D@&7Fw)TAUv%qw+LSj}B{=t)W zB=qk|PCuhQUiytd|M6JBc5idAwkf-{;jS*FMc8vlTEYCr;g{ya%;6 zL4H7!m_%JiZbv&spaa?;{;q2GeahqEILMV+q>A@Z@0`J&?cB8}w%T;h-`kul=pS8H zSqpz8FO_l?vDc6|5;__$^GgwzxV}8C2-|MIUtM4ay`JoSJ+ybB-23h#9$F_a{O*A2 zuVfMvcH^&{TgP@n-G;D0kC8E`NX=QqnQ55uW^vSrD7m=NG9JWIeA_$5!X`{i{RY$a z6ek^~6Tg+x)|JE-eqviTAE%#m4 z1EyxHn7e;;7Wxmf-~}E9Xtl{<^ykSD;WELAefEp*v|Jqgfs8EV4yi;_84H3D`ta4f z<7Z*=NA~+nKv9F|7BcSwfLX)zj{No$Z6`ZCr#ICngEN$s#2q(tKEJe3F#`)CV>=revcP-va#UEVXwk-U|t`Os1f|pyqDmRMWa;EcUX$hIj zsEzcD7q{>#caNefg{6~KsCr8DHD*Anuw%BiyE)axUqT(L;&>MgzjYpe3Jx*Skt;Ud zmY%+-ZWq&I>#pV*Lx|gbec@sB-t3jI)HH4TuAo^2!;(}uihWM?1stNmvcWK#@aT}4 zys@pvmAtONJ8KU*l-SAXhZ^kwenfdcdBfUMI;4CI6 z27!%TDQ<^hd=be&Wu73(B*DClx|qCF?_&}N=^eA=nZ@k?cvS7JA#ml;IJh6&B|J;{ zA#cJxl_ZE{mvi*TdQ8qz+_WU5M$e7$#|6;L2Wbe&WE|H@)a2EY;#4)Hj%>uD0t`8l zm-0l%wm5}#FPU_GXt3O^OpyOkc2;pwec`)TK|&gokOnE~kZzC;5fPA*7Ab*&nV}J+ zQ@T4;8k8D91f;{ETVRMGW?(28>TG`J|GzkwXI*f^hP^*Cd+)W@`#kUWfrum$;FR2@ zI9G*0?kLVF|MmzYsNWX7p{9E0l^i1IfF@uQ{OHL7(csf366DB?nqs3;)wT$zCXM8N zDQ;4avvL6=t-FvVak^lMM?CJs1@h2slyO3zZjKk|mrruwS)nH}@rL(G6k>5S-|@)gwZ zSW>q&hUCkJ%Cd4&6uYpgrmsJ|_k=PkZba)XJJXWAl}`9E*WomX`?yAs#Jgf>`u+u6 z?md?sLc&w^bbbYwBvUj=>FEhShVYke{@Rm>#~wDSOAglQAMNyUS+(scB4W6sgVa5H zW3-aNFFTu9$^Jb0#`AgxY$Ioz?wylZ;F?;Prj%mPZVUeLBU&T@-fq$^;^AOOJ~*q0 z@H#BEIRBu0po6Viv{;%^Bk!~JKDjNi6*0QVT?*tP80XF)SiW`9Zr$v#nj@~Iz`7%=Y2L{0{X2EhbQiy#9n-3f5L(t z7m|DMu3`3mO@NBR_f8V^dG1JXK#C4?5sA(L(Byg%ykVNhd_Is4ODto#yWBAMYm?!I zRAerlD*!GJ5|XtN+A;r`s0~4;cC8!(H4)rAW+Jn~;$wEb&j(H7imm+XL>r3BldPO%JI@9!PrsYyo44incG~`W zv>&C)K0gM~DTkhh`G(P$FL3AQqB+Co7fU$$bL4q-U0v9C9`>o;E0PEGg-tZCitfwm zoc+=^oiT)dI+L_#(L+VbzhnokL>uIz)Nf|uhrYU#kPJm{7FPb8?MZz@5U2FXT0Ca+ z`~!@P(g_;Is-#TL7~Z@0LfyW{`$OWiD(Ne{Ft`ZO$9@)*ABg~~bW6$0<Qk)wA|7O1j;VhZ*tm~p6j`hBLME5(6 zeAPfya+c>ki&Are=Po(-~iA9qScW9}augC*9 zylkEwFR<1t7j=*~&b90;BCf$IoW^JS;)NqlL~gNc6ekCs;-S+ulei*%Nh0$(edBgp zVHw`CA&rtIP`gUYB1Rqmb?f$^+P{+w#05>ovtMBzb(e$6v# zMxTm=B&KJ`Y$(E0jXTvpd=fo|Mx6*FGa{w%v=>;-DZVYrfnaIntqq#k<|UX*sOPwL zp4Ul%3dSCXPmmXXPAk+cOXv^ON8Jilwki{#LwB*Z*B`o6D5y-*NRzv9->50_O6}=) zc6a8v=Pms@D~8k?Q)=_|3!}&Rvb*9jf$Qh*7T&418tP|kAX_r{kScp2SfUn+n9BU8 z>6+$?uS!waM90f2K_^2@OasF}_|~-wGxkN@0BG*XOxUO@jS|?5rnY^_S2Z(LKY!v> z*vSCjE`^l$TL*k=pPERs!$mP4)u;7Qd~YXPvm3%?C?>{7G%uC%h}fSPugF$$H7>f; zKHLERjIp?PoRtobLN%i4zRkEz58Xq%x3k|pJopk;VxQs!s|xWE7?luW)}FsTAPK}{ z4COD{o@G&E8;o{2m=q33?^zkR**D*ZzZ-7)k#O z@*khC?_<~@Do=$FPE{e`9Vm&5^Z=egCLwwcTkTik%3O78r754Ym2LonHw2*osA)y@%n@XqvbZF)+2`E&j#Qg*6_kvFd zj61*ez-N1kJ{(_ta)&jmSGHdz5cUu>~6{HNKyVH2F+6 zldh6D2i7Q?HduN^A%J9~*!dd(%?b-6{oE=4wm>yyNB)I-#tStpTR?rht^j6}@p-{^ zOVCVf(LUSa&jiOL{F4H!`Nv4*(-SjQ{p<-IX_l3P%jx{=o}{>_`%5g~4NPon;@xu% zGHB$#g*V}t1a|NaWJ>_jnwsf95GFf!*KWWs0CU{3)o)0bB#p~sN0Z&(Z!YKZLrHv_ z<8$E%(t$z0>}oEeL#*Fs7E^Irgr2vcL)g|An%j^f^@9a?I|r!e#*KV}1%VJS2IhQ-fsZBr zY9*QMa<8Abnbe*CO)6n|-1Sd+7CDpAlM&&{%8gMAeX+-ta%H$t51x^<@vqWWZ9|*8H+(BjMs{IX`+ZoyR#JIE%jcg(ykJw;hs_$C=ZXfclJJZ0e@h}>6!5ANT404z+b1^ zfBUxv=lXk67pvPtpKRzxo;o{frX&zGlGE|LW2 z^cCL=TO;}^7W9@SGE6$k67WRF=vgQ}qaFoPFq^MDw#$UG=x&jyDuo9)-ig21Pim6n z{qyr_)xk78M8gofL*0Y|T_{@U3k9=1d3$FPpZuL`0r7n8w6S*#z3<0HC&NO#Jc*E^ zgn0rbBfL%$*zy;A_-quP0(A1Q!sB0K6e(t7?|IK~HBxesX)@I@I*^??^7EF;vbRFb zy6S))gODi;=^&lur8TC+-5cQPy4D09(^ABdxc9T#gq3`yxkoMiD&6_j<0VY!3+9rS zzLDjvyv0$bvsu+kFZFw-R{AC3G^eV5JH|^sr*w=J3zao1pao%ZUuZmO&xp2%qMU^> zSD3ch-OS`iBAWUo)|8C)s@%4subN2KKt$4-Xc)~3uY2Vh@q}D{1kJ1SStnl|J&+Xq z>qWrTnb1;tAOq9Nl*B$YjT0a-6N@QlUI!?+G2e~m#ohfjiX}&s$Mb*dj4@+xeJe!g z@jJNu&z-k(v~{udO6^VsWFC9^Z`t~kR9#-3%~{)#C;o|CdYt9}$=`9r5`bjMD261p zep8q*$;@5|ePyKGon4h9UjNPxI*N~DUy9Qx_JPiXD&+<;Kt;Y**{VeQU)aqXqvWr4 zc~vZYXiL=tT%~o?0_-aizV4_5sA{F~^y^;5`|P(_dcJy73?d{vGzHstv7i}9_x6*Qs9fC{))}?2yH=;#I{5b6<)A5xDvK>>q1dtuayX^JhuB1Q{ z?6#!~+n1sBa}?r<%~D${ylR2FEu4>ZL8F571g}Th%9}oIQ;3oN6bk-4rTcBcxRt8g z`XILTY|0&$%>DRr+I@f&QJSR2D$iWg9k(;t4R;`iu#xD=n*H5tkff;QFg*e|-=Pu@0_ZVw8IU`U!DE9t{M(Q-F?r{D? z#$|YbyjD6kFG19{PbHw*c?C>D!b=qQqWVd!M8OHG&*we?yKI)dp2p$3OYE=Qh)nW) zmp{`Qbws5FK;g|*L-s~JgYRnWp`7H|UOlx@f8uZ^d%w;}Qqw$I%)0V|VHX#%+;+by zuPVI6xuWfPoL3qo96K%P&X=jj_YAxFLw+Cvc-d_p*oNx%ko7v`IuHPq4QQkS^^n5` zi(4!uGp(>=T^;gtULm4a7H~o=1_GM@P67u#^-+_^5kuPbNG@0fhd73Z{?SpJw2grj zvyk9Tm2e$)nHsxw`6*P)9s@rgGi&D7<#{5pG-lJc4;foFPfW0H zmc*T>w7{)Rz*bw&QM4KF<8kWuxWGoVnm8tzIMqueGv;}4K=PyF#650*ji$^7%)&LQ z>q;&=C3okKb0?~G%FQ7v((4#{(Ig$GA)Sx@HzS?qdDmwWH07U6<-yB7?I1J!1cXc= z#1cEmEU3NUCdkrE( z$Puob+|dpjpZTDsICaXi@bK^{n*GXP4#j5N)ix>XNq!NJpc<9{h1Dzi({uh1T7sPC z|A21h+C4QA^h5>vaT>FY<-kP1Uyy^5@^)Cm(W331B!fhnWNen3SEgi}RS2&B^IzC-Z2c#dt)|*s;b%x0&nX*fr`i=pX(~&hkw|?@Yk5 zkfRbdkQ3QCC}J^NedzqId8tS^hU2eyG|uNfGmMvF6;6Cts{QH+!|C}*6n5NN!seiM zesSU?Hvab8F-Wd7O8wBg&pAo~isNJ%thOl`a$|bzoeg(o($2C!z5IlXTT$Q&xTr}l zzd*qZe7Bdg%f6RaXHJhONQ|0gIET0&Rb@#-j8!>r--=nbdhJklOliXj*(3b zn2DQ;*lCsOBH^cSr~9B1Zg1}da<`!SBw64y8M3t0+>TZJ@WH{-eB#krAKqLnx~Gqo za0pN>z0oq2u-!PuNBLiLei3m}md}9S9@dKWC0hj$9Mm)LEj{nI$XrA-;VY00{*Lcz zrl$_?`eV>t-Gb9f<0`jP`~Exu^K|;WS*iO_@Z?d_&c-y!mcVrDlH46AEObnrk(}%g zo`>O|dK)%;kqF$5qZ!@_^`JoOd2k;IJc7A%X7=-5m!Ip)egvY~{;6QXn3a&fil&Qi zoho0P^$~$b#;%@4tKJ#|6mPfju+B7duexCxJ~nDr%U$(-vvc(p^?@LQj=j)7G znmDS@ogW4;ScIA^{o~g%jkJRtik`O}>1#%ynXe1Zw;uG=jooJXKZ>sFqqlGZO0P}2 zq0smdp%-nTQ~KuR9Iu5(8;>&2dKX))*UA;HoLHTziDN?@ZQpvoijrw}O^N)r$S`Kj z!<6*gro@cd3{%W}Rk5fWBlbJ>!xB1C*SMec{myOxlriY?aO2u^Ywt^Wh~>2cQ1jP* zyp!M$#kW3{!PF1}shHK|26tI;5!RZtnjWd9{RVXYoEFGt%pMTC@j42rGCLrK_+_T{ zI?saXyd^8{@}qx`(jol8y^1}mBo!AJA%HgKbZd$Hr!`YcDENXI<5`u3Mn1pvSt@J; z4{%hYL1B|;oi|r&2B%FBOZzDQ(i-y)V{xkc=b1kfon_U<5vteKbt&>Kcu}WxS3Y9# z?4H~0U<=-g4n$c1c~Hpn?~O`jT8RwtQgTi7SjKl23!m;q%C;6C&d<*LtdR8KjBJ5+H%lmZ zKl&}(+vIN?P8;W10_h~GvNdVDj`sDwV>)SPi|>~>F#Tb|>H7;U%l*f(b42jd>`Ds) zZfVDsn}*I#F$>?T#mmKC90>2kA0|QXS3d=H+BskYE!A$$O-12QC^Y z&m*2?q`=fp9nF1gv8HM0&E2Y0rog_Di4+by6KSg<`>QMHOsTUMRAN{pWwf5JMgmy5 zNxuv8BqVlOBVKZH4u1Bct((?ExLIm=_NUv2OTgM;if0*G-ZlC*#)M5zgV-~w^53E^ zJxuPFvN06=PQA*XToy;-<2DL$Fw6S-wzpSH8l&u4x=w1J-?{dvhI^U$>=}N_T`5J> zVk1>p^~KVyxV+}=iI3irKWkBzMAXO*7A;3ETHRo0l<%b6B~(mH`SX|6ZT#hz(igZK zcs|}2ljZV8{o&H=$v}&_xh4@IhkA+Ytvw=4B@2@%$mWSfmZv)ox&KsJ6-iMjJl7i_1&Jj9fO-fZvgBFgV8MAR zY2<3)$IfQSl&bk|Usi7Oay`pMMAWGxtzg>J@S7du&NuTZeEnVSX99goLpvCt`@Wf6 zuV+dW5p06K^}^7F9RmWkn-i5Z;8Hjr zP=1&?q#7&#j;zEGi`aE|+}Z0kXfc}acPto*fP_&-oo{qjYbwZJ?bNIK z_qk5fA0B_~#(Zqe@F}*GGXKmzv^K(3O=aQ}q z!PezDro~g^m>9%7A~xY?T$}YWMnKP9IadXNO#MJ zM1|#6nT<>N8)BKfoA@7CUv{ljYoV_OpvbYzgX{Ir^l-szZ&y|T73bFO!|+C>`+YQE zWBvIvocr)4ofz{$Fn-C^*-9s*Es-O1Uk(i&Q|^Zh`@8*ZObVGv;2IFc1LreC{)QlL zL$acV#597oRhXaRu+@JeUfvJ@^8kgQMk?8|)EPWfS+xc~R_=9Npgz6R z=zhDGxN*nxtsmQb}hb?Y|O;!A`l%L_QCdkFy&x1Ljd z*~DA5d6Ftg2}SWF%pHp8lZgxl)fmfc<#?rOl9uOq4w}3PR%Gu4w=FD1`!_0l{B)4i zG>)@B##_OMFGcWq>m*E zXwQJi>HY&+_17K`z_va?`~^zeOosJ+n-z=TjxLT^lRPq`om z)LK)0z0VkS0!&KpG8GBF&w^J1hI+JfQw*`kcT9tB`|9V{6IDogpgZcTQ;04j8jkJ8E**w5N0A6&Kii|$V?$r%Z7As@$1gO%|{YtW0#w2%BQI0^p7{T zD^(8&v71)a-1&^P7r%Rld{)1E!L>UA)htEwlH!|(Hj&$Yt`_~1`XbhHhxx{-_K1BE zj}6UB470$i z&&&I<^5fInuQ=%4E0Hg%#QN>q;mVxo`YSB5?rc_M$@PLn>$+3sthGMoB2vaZ$@2Iw zJo%+;GT|pe{~n!SUtOu}=FjM0RJ8kM+*Y zN$@^gAiLTk?N`&lIopgY4Me4TCyE;A@{h#7XQ$ZSCx;SN>mdF(=D#T#)7Mk*TV(_L zjET-^a~ID$H=FjVVz+rAbqnGpXF#+@8y^jZ4?}%u$!f1eeDzvD zb-1l#cUdQd&ty&YP3!grsj1>5Q&n1T15u!3o^toDs=@8w$n`v; z`+4t$4f7{lLg0-?G(+t8%fq2$^34!r3X#%FffuB!0hpBg%jEv%-qt7I207AZ~bCy z>h)@N1B`S=%q5m@IH|7H5LV}d#%X84;50?<>1#=lU%{X0lSUUcQT!yeM?BfF+5@~Lk=`k+G*Jcp=qK0 z?Ww9C=oX_>4Iz;*1#6iKsB0v&4pD3O>fy~@9i7jV1DlsMo!Iiy^*osV{JZ^LYa;NF z-GKy@aPhNGkHgc2nj=TS0chv(PsSm~vlZ9k;~xF|*BW0qg7OB-m%!PV=ub$(v&F9n zqBU7&pS}^1%tctgt_uP?QJyk(lh|G!Z#vIK^^1STikE8M8~%D%(DG3&pWvBE#|@Hh z&dd*EkAy~`a+m_kNBVZwVOk;?tqwBgC56`Bs=IUAZwu~)RV+8#d{|FfD_k|YYsrWp zP&$zL>!+|ZMj_pEKZ-yExBnid`&;*sjpDPPn6P#PhagYSU2-{si5kaa_jD4WXQif_lAZEs68ogaUn$j2a4tq zTR1^d9on`bZbdd&sq&uudWgzb>ol0q2COqwuBsV*|(c18bFKY1RTi1LNX z!E`)^2&AT**wqJ>&(@CmLz^h+RC_3Fmo4{i*A3DEK*$;YlULYPQ-ts{=->9RaVi9f z6YLthOQeZ&*tJXpr%1$SEL-PP4~ZnZ@5xY8omN#^$^hh`%tz|6b+FRlzPw`RcYP1= zGAV|(euna|%pQwA(5i>146SXE4%s1T1X~=XPc^~ADI*@s8LOA>=&E=Qn1%g;aj z1N(Gz&W7_;^AyJpJm)`nodt;VFRKo9jlxtLr!!mC4zo@}&h&@3Y*8H>w3%W1o{uB; zzMGyl>e0n$H@b94j@*Z42B~2UP6P8G*fm8JCS}3G4<_A*VlKn z?D$7p)+?OioOXO$j8V8{PSH+6Mu^{iml)deaCawud!qQGLKNuL+zLtLb-N(s3MQy0r~;fk{Wnr+mFcwG*=7wJm@?R7_T zJK;GP#okd5VGjZcGL8d{H>5unN9n^Kvg*LB?I^N+6Sbk(m|6XJH0v*UHSidhYpwds+rGnrKP&oObuM4z0gQJ@aXz!x;ZryCc zn2Nk5FO93y7XK2Xpqc0Gw(Vr|f56>4J2KX+N}#p^UW5i&(TcY|`GH0IDo;UfsbE}G z&zfnGQCu_WczDv5Bip}S-k9tO6XqtYr)VAckLHRt9h{4*cY;k+f z*0pfxr^TxD^oVZW<{n|=!3IlCo&F`DtnqYN*6D`Bk6ZuWg%J`%znS*0e``7D0)*WF zrVKQFP)8AiMPtCJ3F?muck0zw`mOSTWK2(KgV&-|ifVy*B#XZF=C{)7aw}<33$Jw; zC0EPqw8EC3UEn#9CEJMJZ}dJcWN`Q+Z}E-3qnD>Qx&BU3pVAWWz0(W+> zmfXd2i%~2hymlclH>t2C+$Q4t2!1RKKlOm z`mc4l0X-D+mb_9^i($bgxH2JF=>^2Ol}Uu)9u@N7Bcbzi20qb+o{%up>OIP*%N!+y z$l6NN?w>MyGTupL7+lTc1;>7~6^u|%ou;fsWbBAqT1Ki0F|+>T*+^Es@t5NIZ+cc( z3t(AE@}}(XSL=wwDpPWY2YjC+wlZlt|Mh-K@maB8k^)imah)Gpk_&HCgW1Ujr@Ui+ z`~1KU6N1!KTct#}BsFL-$ID~4MKo(m_#Sps3Z3@}pjbM+=}Le`4S}5%t}$-g?GFLd zJYkg)Q_uRpVL=PjDJtzY<&x*mWk3s@vXd5*$xV+>t`MtG)q{_hhxJwM(~s@X{}t=c zaxntpcHFc6WZGX)B0PI!8y?2~y|7ey2#C!^ypqqO{}JV*q0O0i{#^mLZ@Cg?GFKyy5VXje`wQhBGUgO>^If$2N?xv_MIj+2Pp8@;J zzw4*N+Ve47lCo(&v11ms&A+-Ye-Sm9?|t0*B-;*74I?`eT7%T7jIhE=sX9<95A9jM3fFX{9 zvG(rS9{w~N_}X9Xo=l7NKUuSldd>H)pV*-Gy!W#^$ssh-F()B%w%-}L!6k>FaY00h zz5mrH>q+o262^;@Ih*R5E`{6mK>1z&q}G z-EaRb6$KhZvfr=$n90?N^eCM4LN&OH%2$&HV@BBtgU znkzPAe{=4~3@x9$z;cP$b;rbU`H0_KFYdy*MCrmJ87~hNs`V74uCf|0sCQFr{r`?G zR2s)KVy~TyQ*^~(iEB@izQ@$$CI|Zbe&!VVovZv}U;1)!{sPr%oh9Y2G)FAj_D10P z=)OdW`!x~{dR}b>(R2+qAoGYnTZVQYBQ9K$^HPFNf#rg*NK12dC}?WGYE`|J^qs{pkeGVwpX@W`6%vX7^SYL3Fc4AGnyel#Pm)3uB)^XIBGHR zOGixMFotNtenx*!EgvWk8{qmf}U$iekov$Z2X zCF_{vnR`*T$32)z+LvAX;|||@p4LB6zUmY?ETI}YIRS*?VnEEbXm}i}2BSXbJ<3D( zV3(%~zZmF6`6iOTWpvJ(gmNE1_-ig9uX;HLt^Ayd0dQi#rx$D)Lu?WAKpuuH&0)O_ z&Xn2tz^tAt@>}tU+)nWD`}D-Si3ubUJ{6st&uVy(;~XB5@uX{U{)2{jFLz2uHMjy^ zNKoO^zqaXXj}!kzvFKAAw;yTjCe6b8T`71^xQtH|ByYgn4tl zd-rr2Hw99E8%YcU6SI%4lre>+=im6uVT<(T!(y+AQqj$_VpKiUbo$!lR2kKXY&@P< z0n^2FA$X3@ijJ!F(_K3BT6cY7PWnFA7YA)#?PfJ@cPy01xHdEg^^P7tCL7IDYb#gC zN-t(U{9}mud_`(M_irc&CN?5@(<=6?-241wjtZu$HP!(vtDCmWvn>zfL}S1&V>h5P z!&)?!q7wV<{wNfAS(T6 zqO(PEL{gt=*N(CkB4SH-6+7fWT|_Ed;ATK+BpXFOhhJ zC$;qlk8CI~kX_dS4b#N4Ldx!%jy+yb41vtDgb1t!)2l5+Hz7-m;pQjHtcjo@ayL~mS9x97^O zN#&A;lu5}6wjjuZ06|ymxP_j$(*eEpLjjhc!xq$8~!T-BZ33e=fX2x+@g`S*H2ztceG-{BO-PHxQYvO*}#0% z+DM_tT&F5ZZJSCCPC7_cKrb%%NnK2lEOCb0t9?(Nc%okY#pN2*c#KD)=KyoHJ4io~ z`@^Cpv71Fo##LI55q8Gulu(tHC%a#_F^{a3am@=7wDkT^hLB-yQJ)+4`lV2YbHFo{(0*xSodYAw7()2+PV(Etl7lLD}&2eoSETg~o z0(`pR%>3hD#aCtr!R@xA`s3l6ZRpVsE7UfOJh9MyQLA?B{=Ga=vDo( zC$C0LTqI9K%K)8Q^ZyA^z{_*NF7r7}y2f0tdGse^WlGlPVc) z%~M5AvPg*ktBkxv?0b1D)u!AvwRkOs`{y`ER?gU+Qpsiiz51YkM9+QbOn9COoJ}5d z7(b_J+uE%igNq0Ky6({~SQ30DkT%yXV`>GB(wP7Np89sp%T;I#Tr+u(kBTJA#;O!a zjs9_xUppOB172BB983Q&`1dg?{RO#dqQGPyu@jAS6hlNrk|mHU(l02^_dHXMSHbn& zy+`|Sa9nY5a8BI2rn-%{!il^37NU%wHREmlv;yM?GNlAZa@qST?6Ff)r_H^k3HI<0R~2d_7=wN$<3YM+{sNz2ioTFyJJ z@dR&TPzfC*>8^HqI{GxC4Bb3%3>vr0j_q}x_I?k%kOIa5)w|R0apCqtsq{`D()vs| zW_8_2C3xqEXZMn%AfU~^tKjJhOUv~YQ1EX_WEfgGse6j&pgICh>)l0TQMJ`*?)-Oh zcae1^Bi--Tb$c3mN4F1Aj%p7We#VJOItsaEAwy@ChpI4dn9g}<)(o0-!QI34{e@_z z-SPBhY;BByM=ZGUdB7NixyWTu$i>ksg$IRU!mE!K+rg;s*}C-8-G@Ght<_=@&DxWy z1mjqKcuV8`vM-P7q5ta>~axbdKZT|flOa( zWpuK620}|beDae=Zi|9VgW`q;iKVC!-)nO_FI`f995I#L7sK_(2nu^MN?N%q%9K=j zw88j<%CgBIj8gM-5i=<0!w5b?U;7n#ZVx%jQcjQ51Og!|(o6Mm(wvS(p3G_bDei2@ zp3IcuLD6Uzwa3M9R8h_K`uB8QDQ6u;K109$DIuFre7f{o%|$Fh$$oi9n&~=ft=&Qf z?#n5J4744RRe{P9N%Ssd;IztepU9I6U(f*bcGvU?*fmiU;|*A^ob>VuXt$o6$qIR- zd;D~aRAyjUK3h_SGoeN8Mm@jLzvR=!#J|}|Ky!Kuyj9G^+PuD~71?O29OKi@b<^dOqDwGVxi-+54WlGFJiu}mk=BzJSeQLru0 zjbc8HUQgG#s_y+@QDNcgbl2A*hSzK#S=iVC5kgP;=JIGFPGZ>vk2@du=Jk+w$sj*x zy_$|$q=}31W^UC!B%lfhw9d4nQf~#4Z2y|QWuq~cx7qF;=TCJxZ~6cK1yZE_SP8s1 z9(I)Xs_=h}d$c*Cy@H)?ie8Kd%G8Yj#J1dsWIi*{%A@yDsXVlAYk(_12M{O|N|t;U_}fw5HM~8ZMtJo{Kv0Rue*4+7#Da)|;H*=5Zkj;HzctX$ zyZ9wWk0KHH3jex5)25E4j&i%ER9}Z;=|tfR!2g7+TLOA+InZe>y7Y3Kd6oI*pE~QY z#>Qfc*TgN80krd_yo^f@so870D8bWukR^qz;>yVm44i)E)HE`qXI3fkEEjqnhdkihq-G2PgJYh>Bq+F<7X3`yTti#mn6Z~*z?R8lO`=e$+s7iz(ZTh2YiGdm2RU2 z3|qJ4(3$a)Ymv&d?#-*=pv_FjGN1v{5&4lwKw}I#>IGjy`80_%AHo;sOW^R++hPso zEa-YGi25ZVy-Tgqyj$D;;2jyJ$<^uVzQJFuyVcn~v(^!f8);_CF5d9d$kt=y-VKx@ ze}2^9Q_%G^oGuyHE)5IL{kj}b#>xY1!p}nMoh??KB z2$epz<_J}f*pQO*dol*|d@X$ir=M^pU4rf%p)lVYNjuj!k%{dRyf=~d{&{^XIRUP% zXn~vfQfjl-f`%M<9)35$l`4h(vVA(V2KZI(roh~=sQ1XKcb;63^=aejSwjcM74V{7 zkbhiQ`F32Cr}F5qPz0r4Oi5XA_1%PG?=$c<_7894;!JXS4eNbYw#Y zJrfG!P|@B^xAb*71T6!fxaE5xK<@lXP1Jv3qv??#cWSbeNgE910yg9BS)a+}mF^$t$0-_bpAP) za(b&P2*8uHKuTPHe_r7>Rj*{l4XGUB)-A+w%n$I<6g?J-1hX<}2mVg3!T74b!&3(C zodw`m(T*>(o(Z(=)l=^7$vBGoesv%eZyDuZ;hZ^nh^ttwTJC}`I zav#e~3Jf@nt=I7f7RS`e(YPZ6Oe#(;dHK()^;!k`Lg4OOWxcw!8Qfp!4^eky^5rv^gBQCA~LlQZR$g&kLWm>3-h{m z{%HguV_T4y-yF-Oh^WiXt`L_XgoXGRw6gtG?E2e*8}Eo`M>o^MPNQSmh@h5j>~VLH zxrL2J&~d^y_^o5-bpCyAa_rmC7ObPqy-p9RH`DgiFI0}}$I;?92m6;Y?5_E81;F8lw3&O! z!gH+E$zEA;ufzf8PsZhq$V-*3+vFumzerh@7a^LqOusLU+QJ!VfP86?wm1 z4;_1rkfq<}OcA!0yntIQ20^-*6|jX%fynm^>BmW5qXGVmKQw=MAj+lJ|0z`quXg*N zh^>7htAEO@?S<(};%w}y+8rPhzgRBko=ly_7;-|-xKn?CJ8x_kyqH`b^%3T}SSY9f z1hhP$izkn<#+1e&zFl+LuKfEgk@gL!{^VFNrp#n7AD1aRBmnZj%O-hqF%E`FQ zRaD8(29S84bYRPe;Oaq8gVq_n-SYB9@B+tjlM+_-dT%!0GI6x!y$`E$=Rl7m;6O+{ zYrptnWtAg;6QPZ%KPN#p#<**gZ|0*nN;jA<_rEp{v>L*h%&HCH59H)fP3dJ#R|h$_ zA`g+r)o-5k@*u!F)~e0f2n&J5a$R11Jsz;K$k7|d-AAV{Cyv7WUvv5pO(=-AsJ6N^ zx4hrH)FCyTw_ZnTQw(ZqW7jnuEwba!r%hWryoj9S&M$W-X!JW8VPKWOoA8`vpxT>? zs@<5Eh@#1rb2ngx-86$7IGc_pzR-;50A=Z&<9$8}yED{+`wQ`l%DS)*L83FORSL3A zvO$B-B@p%}-zLG`It(K!Ql#%ge;5oEq=y9yH0)Q)M(Et$ zJpxbGC=wv5ht0Eh!W6Y;+^jVnl@C$3&=Gl%53LoCTHciA%8<4Kgr|bd>6j30;#x`&Hn# zoRsT0a|Xbi`Kk8smDWlp#rCZkV?!#B>qPxs;@5N-g5#45w}kSOy}y4F0zpaqMQZ^_ zj4~@zciIt7U00;ee-@<10qBBj6aTUVB0&P3VH?lGN(^(Pa?(eBzE8O+cLEu4wlqZi z>sObrhj3j4ztxN(W&$EC(#9r-Sck$xm?*@~`SgNFFjCCyp)?U$f z6T5D`6`z^UCwTT(16&hK*t^6PpwxzQC8EhNb`FDO*SI1NBH(4CnnrLgNN_W)~&%~@{4gmJ!idgJosz#K1B1-q6orVUO{ z4M!*CWfyymN}6b@O#hCH9xqXYtXsd0xKqp?$K@qjkca-GgTv>u!{RfZyg_Xd!pnb} zTjeJrJboK0V1Ya(+&wF3%LUn%y&$UcKC;WtzXlu{N`o4Pad>DxCJZ*Z}#fjE>SX-`J1E650$03l4os67oN$T z%P*8%?7<|mk7Zzw=<0RgM<%%Ok_V|}Fhp|cb;WQhQc#)|jx<16;YF>mI?4PIB_;WCV#+9Bs zXcVkyu#7P$0QaSO0ezb$lbv8(H<<#=e-j)KSoC8%oH{W=GsNERZ~J;LM^kHDKhwuO zJ=JNuudeHK-i=+)TgYAi#wF0|GbvHAP|~ktb_9&4EFHJheVi^EBI&>2o^Zcg&C};h!&9kTnKyK467=dbB?hO|eW%Vb>J z0)4yg$~<&ui9EWzb$m7))gKB+?3v3JJn!_4zcc?9XdX$2<+QtT2Kj{6BoCnfoXtP= zW2SL{!;GYN1Y&GEht6|yX|>u0C>D7#A%3WeHa>Y)n3wzRc<`3&+qU{e(sH{R z0r)c4I!)k4ENE{`K%-CI$B8TmDEqiFyYjAx{0w%j6?s8#l0=Z#!9qdN5RpSyyAGl2 zyv2E~m8v|2MaVv$<=+J|*m0=Jo!+WD$Y0EjQIk>KbH0<9>8lhVg!Az0G$>gq>zjMBTr8iF=h)AQx zn7e}vz_@!qamX0h1%p8>(`%cMLFIVann+_3OBL;H0%waEc~yqI4NInKz*+{0-BXp3 z1MKmF+C6JT{P&%|8SF>pJczj?q6&jxb1Vig%sXeA4DKuWaB@>3Q!|>LY5RfQ zr5>op+BQ;n&bk)QdQ`h|J#}`C;Ksn5&03v49sn3EC=cD_VX-{Xd6v-lk^#m@K7cE2 zF1;zRFqB1~irHH^3#aZ&1rb71XZ18&M>_$wK#e?*aZ4L&WVzanHr19p8)~T0HC~Za zNdBgT9iTH#w}0mm*x9c=U~I1(5hndnU3L=(4eXWnIE+I8@_+`$lWr-8me0%0S|IxB16H_((M56!6V#YuL$L_9IN4)d{Vwp|u z(Gp@!s}CbN^^*asQ(o6sI$9D@g^f_hI8Emgc65im@9@%%g`nyObkz+1xzxvPboye3 zK&~*C?kFALL7qvY)g7AhNw!LB{}ME^yZ~r_$(W-ByP7?qik&5HcD9oJC-AVwSqqA_ z^FNtt(9-!TIR)&djEHWh=$*R{oJ6)+Y4OAl?ePX^&7EsB_!Qoxt(yw79IdhN6WF=r z9OR5pMt&9*a6P4PbRhim*NreW-CZrCOT3jVUmzE&9BrV2?O1mnI^ z6_hyS)`XKK7*)5%*0F0z7ZLNG?^Di_3C{V1i_XVC$9E?*hFA)CulDA4C^W6O_x0Ewvo%`m>u^9x@OyYmhZ%e`B@H7fzziL&20O-)Yx0;U}Em~ zqNGmXSDX9BycV$D8rEPvUoDm8zc>S`9t9nHTF2L8LYIzwUWzl`6LOE&?EjilYXs{zI<@>Z50h(laA9Ly zTYQrow!Kj?e)BoiZpnU(_m`t_#eNt%{>ps&z;g-O5i#NIUpOoV|t%Tv*|(F{{3;aLpqJAZ^k)<$WJ;@ z$V3}NvIu7pxrkod!i!ZlCs$o|=iyrZ&T+e3*wfX|UjpQUC+AI;OqBOT)0 z;5_#-h+FEHlek2fhd8WWG_84LG{nR3g{jhdqVd#Lo$yE{hTB)HVEz3%^iiN#i#E}l z1Euj;jMr59Nki4wFXAmu?trysTYJ{$%u(#Q_OwcQ3El69^&xO?P%?VAK^apFz|Dh= zY*_*8ne|S|B_@k)&aE?1s*3B1m4eB!GnuU+A;$y0ah$8}J)>(sfV{k(U_A?t%6`w;s5*#9eA zwd#NaOW4pJo68a}&AYEp2>rG@N+M+$HgV^4@_bTnqB*;QHUzS1Q8`b9_a-8;ehLlT zOiOGs>6TDgmXvkpBr7A;aQRpse;c2`T1@&LWnw~@LtPh<7}NTKcSP#up29?LH1jT# zK()+3*!@LwC+8A<+VF-VPv7q!hc33KXrAa_=V=P5JN_tG&@YQ5vl1r+k*Y)pyy8NW zlKm!=XXjc@H#QgnEP^}tYoOBYC44XcI6PY_iE0JrB*>_rUqxlvE64a7hsEz(@+*0V z7{yn4_NO?r`Q=)t>WS#b7P~o)37F z%VvNaM`Styx@PsE$_e(&CFR~QNWk);l~QE!w?7O{yJ@RQ3`SY?eEx*uFZ1_haGHMrWo-nCkg)Gtv-cm!SCB8( z)yUHNIy(N5QH{U(*@qKwn|SM--iVjoo{CDKcIhYqx|^K_paR^O#LQ*nO`#O zorDRu=kycT{Dq11{e8#GAz_vr2{w7)vG&mi8qKhu+853Bi}~SPw>7nVqA)Uy)=U29 z_YE>atq~)3F8xT7TP_}0aRT6{0eI^h1BR43X{9}N>zx3UW z+7eWMVWkKbQJu6CdpatK*@?So*8}}+o%tCrcMR6Eco0*Gx_bXzA+&f#R}zpb0V=Eq@m{Gf8vaZ6D5CXKsBHJ(c68Gy^_uI>CsJpoqJ+b?lBcg!fZOsSN ziaiyz!(kO3U17p9$Y#msg7}FW&i)4qzupJ$M*r8$Aeu^ZyZAAD42km;;BG8G+;}E*_5wT4m z)cp7nS?ma*{LoXM58CnsZq?99v+egF$-X?Lo>&9RZnT6sT+Y$gB%U=qi9CvIzeQ%M z@Zq8=A-sz^jsLY#Yiu1O(+3i=5x87xyozP_?-;WPoE+yQom;JHob3etPlDX8!LVj_ zgxE{+m5;9(MTu)Y`-w#5A3pFDFa1YThPZqGyIdHJa*87u(VO*l>$)dpDp3ng%F8KS zXOH<=_So_-`J0mihv_Ty1HOohBaRxsn&_AiwS38>uQpW6Oh!1BD9)q>#53IEny)J2 zOpu7jE#nm;q)?bG;d7FlXZ!Ii?%|zw4t`@!&)nC{Q@Df0VdY=>?d*7*G#1^GttyJv z%px;wOlS*Y2+E$dh;7(1@3HVK9LLd5Rf)U z=~@Zg;m3!C;|xb~Zf=6BvV_>y`qj6C0JiLOFjP3-qbfa%J|K>3oP&H8jBRFqbNM%V z(V-~D*}Y?BV@pj<-!j*Z`ZQOSWZ?~5cl4Lc3T;(Z1LJ~M+u=AcNmd@1=7+~f7J)qF zTG`OcuDjxnHAiZvv7cv>{`p6O5n?}W7ZCd-`VW z56hb;qH$w6f6mZ0oWn*)@4EQfdGSFOcZ#yN>R8l(rPhFN6X)v1o{vLA83QoniK;%n zd)vvx{LcLwAbCRTUQgQBt6@|TCpFD}_atmOkGQqE&n(Suj!p^xWGrtNR*L$E>Qkg# zH8}9@x7)@)=rLvF_B%Uf6<1C_6`rm%(>*8Fls9k~%}o``Cv|&$!wh7DEv%VAqF+M6S z{ZZ#&_h;VjGlx+!@sp+j_TaA%G>Rk=HT*QIP75tT%rtrorVs`Zgx<-(TcfI`zP~_<&WjHh~)K^8J1zfaMfM7 z=$R%JtJT=av5Ix!Ej+`@#ZJ@K53BL$VM(6LO-y4})rU5@ zzI~zI zTqa`qE{^4uv*Kk3Q4w1KKC^5P4(g^lHNXeK6YNG^bcoCQqB!vH;3xMi@nsAo+~b?d zhj!u3#Z_M^7+r&QTN^&d2!8sdHxjOoVBoX%q9a>5bY9auPUy3aK0P}<@7*<{o!uY- zRi3sFi3J?W-Cx{|^?9^%fz*e)NB2+vc?RvV{KTnnceU7W0MZUAfA*p_gXl&Gr`Hl` zx8zsvFEPBU4OUIVrytu<1=6ZhZZ~y>vkctn3&KtCfYnF5OQtL@tTMXPG@sJXAjQI# zK{+bLy^X#KfDlX>A~?MeaY2N{x3o+Z|$81+JJe2Yz9f;ZlvWmahlj;(8YQ2C(lRAv`M4# z#Qnv`ZMfJ{jirP$-}TB*Y;(RVMJ|L20ofu|X=vZ>Q(`MqSdS$i%zx95O9e6o1m|#{ z!j5%GV=cWUvR;^Ho9%s>jVa_ujatu7)@-Yuo$(iC9H4==M|3m+&Z z&+8Xro0`j_TX*1uKdC*J1V7Dfp5dG8w*;V$Fhw?(XU&2;A z%Qh8yrUbi`8PK|C+CHWLJ2ThPCy&%lSy^rU9L|A475%5q7DN<&r%_Nej~6=3>=qXx#Og}eEWvkh9$GO#T zULWI$LxeqyYuR}0^tBPdJG^85!`A2#+_ilM1xT1CpZXs7HEE+q5Tp7pkn?{)HNpSA zP|g1sz4JeLAy*1c!+JKsSM$m5w$`wCHR&hLMz&&UWBD?Q0K{ke=c8S!unWkr+0{J# zm7SKoZF7MP5vv9)6X1O+GXDI|l=x^0)Q!>spO|z&=X1TE&*rkbe)-^~9V({Kiq7$} zMNs>iZ6c2!h~jQ#Gx1sQvYV^7E6G_-{*fu_F?RcjV|*jPlf3fUoG5^|{hbrVtS^ZO zT&&e|j2#)3L#J$^urQ?AuAGu}Cqa-bLhdiqeD!`5Ow0s*T{_H~JD&4Jr zq~t%)6;pL@zd)p_dbX4#5Ru2?*a*mw*bJD+XIs!Yooi@_g-tb6|{)n7XFgD&eO<-OwdSJOBq-QUN}b-tGpTeqbIb?~XkKdJG)=43~Q4RNZy^ zyY|3fQz-#nAuK5)d`#;YkmrM>GDJPB?VGnh@Jb6*V6)~SeQIN<*t!2u+N?nVntt26 zHU(Qe!}R;A?Rs9E#?7hstLkepkRquYbC-Z72N*=ti+paA1<1 zQp+>N4~xRJ;$psx8YicYm}5?dNky%YiS^r!C@R?!seSaQ>AHoSzK!kZO2Z&9ye|m7 z4d1DIk3WA8wl+kl|cc3&H>if8^ujXtd@o<`5!O(TR{2ZZRH~886 ztec|WZUpOk27=Vf^Nm~0V9WM1c zjg;IhyQtDj#wWMwkDg_W?tc;-UVQ;%EjgCJ&eves;3@$8DKmYE$n=q@+emjP1m4LN zYZt)%B4pzEOCgkVrv(iQHS^0x^GbwCHX<=GdWgPbpz$(8o?SSRyc?4!f>-rdtoCXJ5MiA_I&Ngx(VEG$_wm zWE_qyRl>4v_ph!guV)S5gGik-P5YPg8>UsoEvq(?(&I>=){{sK&>|w5Nys1YZur+Ssm5aXhVFq!tc}pWZ zVPG}a^V+W=G{st@gk{qXI=-grEIhhCCxwOtzG%}2xmmo3)gI5nHNRJe?3^oLf*ov% zRQAO8tI|z~(XDOHfb!Bk3n=;vb9zw=gJ(J#-v*6jtBoAC{@xU|TYSi4-BTL*pZA5z zU-iAQ3jmK(1sF(jWMRg&KL7?mNK9v&gL@|jC)$&U>G#4?ckf=VP$QK37=rxYbE8}2 zUtbSi4;_H4&l@VOmt;#pJ095_pdlj3KQb(O*PX5G#Q^gcB;;(n$IACfIa29xeFwRKb!)nph5ENI#-t5J<;cqo0@TNuj>w^B@$=YxAUaQQ5No;2lRdr9m`rzIxCE zte;2Kkc)8H7hrM$&3Riuj6}*%YvDK6(WGu7s~iNG4jrok+*AC#Kz^4CF5DYbYRBzcR2V^WlqkAQc{gFt z8I(AH5fAcoKAiw6ex$&`e*yY4ZY~IQa8Bs0B#os1L7{;Vlk^1i+E84bnxOzIoDJdO zeWc`vZa(i>#fO|@ubwtK%(+MQxucB>d898!>;eOi1Q0E3bROr3u|s_uo()AOJVX}& z!hu<48C|?Y?{@7Vw+d^Pr`9gB6u{AN56-8U27;OV4{Kh-nx4|BjJ1FI!2aE6Pr`6S z@i~{r)dem{g8|?F1}T2sppR5j;pWwDTu@?+l+xNph6^aU?HCZ0dm>*JC3@bUnQq?@ zw95`SdP%RaI7Fc#!PjxkfZz2h>tJ*u>G7W+xtvg$t z0}R|drL9!}VN7r_+5~y=R<~z(dBizQs}NbaJU{>KqF;!Exhwc79qBPA64~S)rKuh{ z_k#unYpJW_2j1_GdC#sMcU{eJNS>=lS#VeNgMK*dp^YjLzJ#NO{lBqTw;}rPMNgaM z{FW?^l(u+gHHTN5^^QoKTXziYHrEDbp)JMbA8}1MJt?iDf@Nk8=0<tm!iNCh&qt%H>f+lv$rW6hR{&APsj}+* zMS6{i{H5i-FaodU2RtRl5hXtHGV3xgmVlLR{xz+AU5wSZ#(0tY#4O!qcZH^nUAt~! zfF37~009oyCFaxG6z(1%{SpsI73`%qi}Swt)Gas0)zY$3aDuu3X;l(ia$w@tkma!}e^lG6Gez+GFRAcE^Cf4{>X8`(wMI`a|r4sG$CkJyY;( zs?Xow9YQM7;=nNf2l;(BB7Dhf{~!e7Y_f>Q@c`xh^M>*L+P(H#8S6q%r|7hl@kI~l zK?0!}wQ)A=0HZyg6a;T~{M*78U${WVo5@Pr)nv6`q#8l zk%@1B-}}pel^|S(cYnx1{Q1aBeA?D!pw;PgM-w~F_i7?@Bv`vjY1+!g!7#|}?w|8e zE=!C5{XYA0%t~Gk82E;nou(0A20@PLjcfvz+|D7fadB~3QCS%t&(?0(-By$P$Yz4H zny0m()TSN(Q+h|2i$acKi-99u>p4wneT;NtO|1~`O+y*uT7?Li+~lZqk=Ja`<`Z01 zK453mS43hdmIAOIM;GTKVB=}G&SlMKri(n=oJYGJuzeBm7wOB(Km<;sN|SB;Z%t{U zz2E_oqbg+Cg4c4axftY4C&0Z zpoc*lW4iP<{YCuoE9?$O|?+Wi1n-%{&RM_@>bd*~`+pu{Gw1Om`l#wj@S@gCDUO0M4U;1Kml&zj!qSUVh znNRQMLYEf~uOukm8hh8?oqeO2J&mOB*P(*=0b63}W{HEo?Lv!3(L&JG#pkw@KN4a^ zVZ93IDbWKM4T_|LwGO1II%_4BU%_NQ{K@#0fQ8ozb>f=h^-}e83tF<`EY^xR+fSFbQ?W@#-6apo0);yM+<66ZtKUm_*ZK6R z(UC@>FEJL0Df^*VI0HJt?#9zIHW6eHPQo&%Y4_RI zHqy}RF!8<+B@L=QIDNkfv%g<-ZY;n-LOHl;S0FSPUV}RC%+!BQv8lW^4dqswYsXkE zr&5&WvNNTeTZg=662LBJaoo+K;O>*Y!SeBr^0F$aTm6dR#q$P4gPyJfQelSo@9Q?HKb`ez){uC z?}#sMNgxR&DNAQ9+0tS_QiFV%hLR>4Fn$Mq0p(Q=U*o9u*-|$>(lg@R-m24A^G{NG z_voWT0IBDx_t{pFH!7S+%<+EZHmc!$z))!WL);0QW3F#h(DS~5mnfXYHp3I zix|Gses4Wca5)%5t{e1o#ykbmJjpH8LC;$!{Z?K)=G!%4ZQ=RAGu(gasVU{+u`mRw1O440-0(p#v30 zO<{~hh3h0vn^(m-d)ENJ>rP%U2C5-N+g%to9?pG0t0w0bsx=&`Zy zx(0q@xoMIH!vUaQqpY z_s0V7HOYJv*CWriqxSC29rU84qf2RxuSZHJZ(jh9250`SPJkMNe5mhWD$`?@~d{ez1#Px$3|NsPnD| zsJ%ds95KTLHXW7)JZa%f1GNsSN7A0DPzrN2a`*k zm=U|#3srW~kg=A{6)_eG$>iQIU4)8(_E{!Vje91<^e7cCzUc^RR{g>sW*QRP(U|1u z^vwP`R|-{^tYR$7^34rsngsm;l1e1F-M>BL;Yn+T0~M}i9u+2SLdH#{Ur9RC+umzy zQ|N)qT1)KnD`k3?02Rdh)Uy)vJ#7=x9|Y_ERhLO4{UIjSRKB|EF&z#^^rUjXHz@o5 z7Ew~~_};2n3hy&L{cB5{XxQm-rW=LLDUu=yV9st^l{IQHD|KoQ@UqogT+C>w($P3v z$LUtChl}Sj?JX*@$RFd`(a+s&LrOPvPX`I?OyDB&T5`nN$Q$~$S%v_!nR)t)t zmFUJ(&13C1tIwLSb>3BpVf4@dFzOV;cQ&*X6sgaVjaX$C-;~>m>sU0CUaVc3i#@2- z9ud)VuM!}jQS6e}tz}D$7XHQC(4D)%W=l-}{lH@J50KlTXQF}sNC_SYZ z4<)f9vC&kaKMZc)Y2E6cR~>F>KUs;A6V&!#qNHia7-{v|>UIbpshKEszNNs0{dM-| z;?XPpa)Sp{r)=jKNl*HYIGFw|?de>cjEpue52w&)7h%+g32&;DiTQPSfiVbBWAgaZ z@aHU=YB!p-w441o$2mEIsDb@7$eX@#gJRh=%ErS~3WA0-iDw^N|! zY13if4Azg5tUvrH_>}#i-v7cZT#z2u;Nj0^+_pNj$NPS#OV@+%>N^LF2R`jc*avac zS83WltZs5t4;_Xj-y<93xX5|heh9TV(m<3q#7XGPC2FwUT&B>9ENF9zHOvhye z4IY8YKq3p56FqP$T{Z7W35#b0ir-%A7#TeYP6;fI(KlXf^gVog3rs#D@UvZl$2gn;#wpc=f^{4#1Wxb)||Hh zJ~*a1Y>Iwd<#4OD6jmx#ifQpPwm&hFTOp}vy=M})C}5aXxq1Nd>yXWhotzfD%W%u` z*7))?KmC<<6;3$_Q95=nyQ;OUWWo7j^w?=SL(SSojX|18zHQLg)=-Fb^;5-!)S>xK zp7~d`#RQB_&Y^~;L3!>i;lMcVzh4#~k|*^^Fz&cu>KBt?e4qO){8UN7kQY@cYZwc=OYFxeW3%LZC6B1^KWnK&sN?;Od)4&59r ziCMliGBeqzxxM1K(zoAkpf)GV?K8)cN{63N1yIeV(!_YH!0T<9-I#<+xj`(a4PXwYkDg$RE8wK)OoXk zq~-DLY1gJoO>|^zjNgaS)>g;aT4-gcIj)9jn-T$o2cq`7zRLa_@1`b?vcgRKKJQ)< zlhU>ikbLiOdQvRtB^;h(ajP{tyarYoxOK?bgzf~?zjsT5&|h?HsVakx^QnA__>*x% zb2)KF+wYd*6^slSS9M48^*L1}`wvTSRyK$RtW#a`Vje=2`@KX_dIE%|-qn;EuCqSM zI{9oNeA{$fU255vwCyOw;hoD{j#pe7c0q3BDd4IfQ#j`uzwNO+kF%d}-NFmFdJUV+ z(`UdC{5O}kptHdB2wdUys5kc;xYVM7=EcK`@~L>A=l0z69aXX>^@4dL;+`jZGVdtg zNGi4_M+6tLC;Htj@=$F1$1c@3-=S+Jo{JmF#|2N*EpI&y7!#IF)v+CC$M9CU?<97i zy)22d4JRe@%KwTeGar;ZjgBMnrF^zTYF?x$ZQ37U&!ZDqYEtkpwBm8NCmT6e)A>oG zJp$fB$!aPmV#gG4^d_f?*`yh^B=$=41jOgOYxj_*~C^bxe!1_Xbhk$^9S1c`YJwV=nTs+*d@6uvw$GlcI z3S9c**IUTB`hB*42s(@N+ht3BIW;)gPjxd7w`7`_({c$R`H9^5f#?!^)TA{w$P-P} z#C@0V_PYax(tmnLK#&R3ncnGE)fy>`VIlXM+0CKzTOZ`B>2d;<&n{yy+`re zNA=h!7Uj$a%taqyh+2-~cCgsH*>%*fMxHMOwI0_CSV(FHU{14 zf?X$%!zTTLc5JBPmv?oCfkO(o`!W0KbgQ>ror9i|ijOf6D}9q5PaPe?#uW=RO6 zg~DjJJ3kR3W~$A5ELf^KjttMfP;w+VOjmXcAl})B@+ubtKX9ijGJ=H!TDc#|3Onh8 z07a!MS&RLPv*Rn~jA7@AK9~p@aA_K47ndB-c$*(;Z9cd_Wd?FRrY4sq_zF-82KP$0 ztLE@S2W&sZ(mRe40}pM>`X1iDyT`IyAXh4=qp)z}49L{u=>u|Kmvk2I6$lCm1zL0k z-@007fN9@N^7HFtV7Uzhbb!rLM)$=a5_td)00cy)+=lhG4!c{*p#xp)>)oNGrd4HS zZ41)#pu13Z8+KLpq%kevYGw&+)`(9ZsG_^qVu66+$nHQB-hI>Ae0n!oC7Ba^Skbh2 z>MfLUL4H-=LBk0({6}gGLJNGQA8k;66TY*gM|EZ?Ha*!+sK#wn6g5wvUB5Y#%005k zx7mchSb?gK$|+F1Yu*IxLJ;OV^DSjX>RDn-*_8)bLKVqJog*_Edr3)X4(c#za)Ok0w4anuq00R?<%}8d81%7W` zO~88S=M&5J(~_zpib(l6;FP@Pz9ZW4j)!luY&x7`Vq!F;Pygh_0V}jiNvoa}b7U|w ersa><6?qT|v&!j?JPtU7Kv_XuzEajK_`d*lsulVG literal 51382 zcmeFZ2T;@7*Dj2T2N4wk4~R5Hsx&Fmi%4(Mn-CBX0@6f^v=GILD2Q|rLJ^P}=@1B5 zDAH@F0t(U+ij)vYNVq$k^S|%8bH8`y{lDMLH*>$a&M;1XWoMVQ*Iw&+o|Pz*n>wdY zUN}iZLvvbBSJRA!=4b*9%`ur1e}F5;-&eSS|Bm>Z>D-_x>*ZVqA84WKM(Q*)<*^L= zPRGG#`g^*z{xmeK{M5fAdS-mTX=uI~=xM531Usyf>8rdg6AKs>i?m-~NCf|KrHW@A z^)%fq?wpFgI&^B&*IDS9bNt2I!ul_iTUljV&sumf9Y3daJ;eFL?Gq1z=9TqNgWB0Yp#rjc}GBRKS|xV;QJo`eos}(6|VC3alEwUx=6tl;&=cHxJ&bK zFl8_@*@zr6uge_-E$VMZTnV>_Fi>xm1m{=%j53E)$hzXP(upCJ!b<)qA?lq^GUgXH zz6*y<>B=q`&QIRE!a~qF3a(%8Ot1#ReRm;lC;e^6r|~?FT6JN(9S5_pV5)p zRLEzphcZ(yDqdQZe;YSs$ln;!nR&sRj(W{qbHen(eLg`?^^W34)C;#o-(NB^^bvik zpnv$l(i55YRqtu%%W`F?w;z_L48G-w%i8Z)QlftTWTR`KZ{i?BJVX6-m38nfb3!vW z?C{m|3?6#ueopF*+sla0z>DdZ!=nPy>Y9Ejyw2v!cn9B1-a(Jrp-j81rKSg-EI6S zn}d8OX!~R1^}o6yTb0##Kp~B?h)PAJmMN1~Dlu$Lzn|iMQ4Stl(%Eo z-HetTK3DcC7As;uE=2pF&|cBPPp8gY?^g)~pBVtW5PEMrw=t6LgZp_uMY z2@R+jCC<%#kl$_U>{UD1w+%TLHW@SudGPu!utJ+#7lm~0@cMDuxvPh)qY1sC&UVm? z2D*HS_=dTKrYYVhE*BJp^zfZhQH&4ybcF7GNG^=B zg+Q*=FJ_`RBY_*YQv7>ovOdll9&a=bpJkEuV2)Njatv4Gaz!bs*wujj6kU>W%ZCf$jq8If{V1h}fBv?t>}}-QQ@(^`&MFtGs;n;NS683%R=0bXS3uj~C{)5>)Yc47x40kDS0??J^1~PjsEBcMXvBT!k+|YYihhCdVGkz@UR<*V`(Wyq6F5`wo=# zGYn1i-w^}gN##*OLX};Ois{Q+OWdsjjk{HJ-U0Ajq((kT)JRijWw6l@k={QvnPjb2 zxugz`&rkZaV17ep!s?QHm=mCePXo=;kEs`0f44!cNmo7hZ|rX*VvBJyl2KX1BH`hv zHKUaq=Mq9OCVUR8K1vO{c@i)Wfpxj&y&hBSN*BourDLuZyVUpnTR6S%Y{x>wDucHDa z_F-|JBPE4H`b!n4c}%L2aeCG(Xb{ukQl$LrD`eH#5w~{oD>C(H^CEiM3UHhE*-$6+ ztAB3YX^!$0FX&l$y~tbvim6it(pXt_b(q51F3K>{D6v(Ar(PKH#kfS9 znh*<6JyJ)c3$uoc1NUW9pNt)2RKD72iUB=^#O1N2C)2ui7a)8Sb}I>bMa>kcCPRYk z1x52h#N*+wHz-pnL}6{mwstYfY%I32Y0UREX%+QAdQd{q9Ho1ErcST6++$*E}%5rXW+c)3Q;)naV zr*}5)2Zk58rWZ=Y$*K#_O3&=eKOhq$OBe29BnHq5@t|BP>(>D`T#I3>RkM>ALGpwtcO8w z^wYoh%z3HBWjdJ^U&cUH6WwOVmoY?X6g9UuY_Ve#~`EM`J;zKp^vN0wVnyEk> zdHv6o_^&OMN?gi!-)3^r!JgUyG_dE|=qt0yj(>ZG#*aw|7^{)DP4CM6`@_EZ4a8V> zuz3;3LfJ{LN^Aibkx;eLKP~aUW~zeMo$uqZ7?xAJp7{H@nsWIR{D55e zPh0y>m+0@!eYkg(c-2Gt)#)&in>>`CJZ9Nrn6n8(|NGYcXS@HjVa{XXA$_I)byv~; z@`c>GvIXgT7)K9(?E)B5!$ z(n!u`nr9h%UQPVJ?`h5iFQh_?r2CZpw@W$xeQW-|j`zRic>m8o>;H>UO3DMD`uU{0 z2V?>gfISixqmFR0P~gTraKZXu+xWl&w&ss0rXmH{aVUbz`^dwmcR*TNEIW4lF}o6e z*j&dhixFh8y7*FGSn)(CuCy2+KObXO+c=rA>tK1y>l+8o{% z8TUJdb4zJHzUi*bQeJ)^kA*n|QbC3?@wy+814)aAJ0)78scyo*Po=oDX5y~)LluCU zAZx~)qZJ_sLK2B^&CxQ55-w%MXe0B?9&LsfoCk&r2hb}C${-PsDm-8d;#6$#X6}tB( zwG-_1H9WCArT*7j11ua{srpSoVMna?{O4a6g^tCa(66jTuXH z-(Pb}hu(!Oq)J04P!rr?E2g99^C1A`D2|2i&sFYY)P|mO1=&>lOrcQC&$&aFgdWHx z*}cl*InjAtKq&BFhWZ%$5WHd?wjKr*PYfn4>8N$~&YFlekym}KC1A@2xL_)fW@E82 zz#he7tXv-2NUw}*7>Sb4Vih58g0-=)sg zQm|nyj*tPhFW@9L;*u^sqDCBuz3cRzbVe+8-p=sgYM2iiKXP}gM-H)Jd9Y+~cE_o{ z^#t)z)~P#@6#-|5(DB5+kwwgBJ;Dc&ugSJ4G>QGOpkbm4U{B0VrBxYo=rZ5KD1Jz< zn2KRAXr<3yR*v+8PR&MT?^k>-XY}*nu)g$}{RQHq7FE&O^Xh8A0{s~4CTtx@6QjMI z$b!@(G^`vaI+weuf;est*`kJSDwQ^o^HyKJL>lKmH=}}(10$^(=MvKBV92(AG=aK9 z>@beFZ$%-X*I}5sST$7uqJEUOS&o#N*4d4D(CC5=6Ffb2p?|*c&Xim;fKGdd_coK8 z8&Lo*04Bw_bxA1suci3JM`y26y|UHU8gr87>S#%T`X1N~VNVtYk0G6Go9maq_h=DS41Ml@0F&cU7XX^+CN(BYdydB?o_CQMVmGO9I3 zeAHZC4;^iwLcdw!Lsge&g6Cf2<74hRPHvlYD$VTmZqH8_EgCoy&8o-U(lH@{F4fZ# z`E*HX4#_gTk6N0$3%fxOVV5CagYa7*E&^t z-ZPY}AuwNUL)kpM3_L>5cC=+_nosV`{v1WG1xow%%P(hVi?6G!a&*ZGq(*c1NKE>X% z?MpM{EqgM7`EKPUHlpaWbbLHiIB4|2<}J3?w z9kFz~_#E=D{B)n9_N~{x;d6%Ft}pE-o0thh0_nxUceUNn!W)8;1wpixGy=C^_a?|)HtzO#ZNdrMa0^J5wC%Um5Qz+mly@NksH5^=)S`M zDCy=j1e3awJfFCH-4A1FjS0C7VVf%3ko-A2FuR?x9$qlU5W47|Z0-7u zM=XZ_k;z@V@@={q_aeftcw=r%g(}Q>JW+2UXXD3X#u3IFV_zJk(Bbu~M{2ivm5`EF zQq}k_N6P&Xf-)xC>^YAKq~gYvJu3`Ng1oIst)l=t(>4w7Qz2M@jvCyW z?v4@m7ZVDEH(>Hc8&$UZHFCw`S=Jd>Djh@kde!!SGS;pMR#-RA{)tyJ-q5`M-8j9( zo3i87tt8;#QpFOH?NqI;mkymtRE;f z^~Pn~gE(jJy?4Cyayx2X-cX9IwN7%_AO$bA@Tw+RCXDn=M|Cjt8DC7h{mIUH`9BO5 zM=L`{?wFd~U0VZKcgCcp>K=RR>wfY}RJ*bWo6#2Eg4k+0Bp8Iw#e~L173sj`X+n3q z-#2F^w)JwZ2Tk89>e|Uw9Sa5~z1Cp)sV*nJ8MqvrU;zE#BIf9W)#}lh`z6hvJPStQ z8KH{yN==llQTVJc3}*+$#G^ZTxjDBd=rVeKdq_3gv}yGj@|r>?eigI2;V)+f4juJc z7aRHvNsb;y;nEgw)YcfHl=tBicB=&j3DD2t#!CVeub__B^)?d zd|P(byK$!?41*%hWO zSg#byc$Gq)pUP6!V>j|#D*07**~B-;E|>g>V%5p#0ng06Tf!>_%j+2Y8i~_tsjb?+ z`zEhQXBVRl%P}dLer@dd@1v4-$)8=`CG;Hxl(cU#2=BUZ^YL|;Y@xu7VU8b1}i zlG`6P`9lIS*0uM=C@bBCmrR%1tpSLBFwBPUs1ZRv`LLj`nbXndS}EW-*+1s~Y9U8_ zPjm(b$J_chGN!R@Aa0Od;LCZ*G55Q*YZ+S}T=ERR)*Cl=VAfRcOx>bv)GhiWs9LCT zmgT7t^21q0&tJIc19fP0@X!&5JCRb{OQ*@tFZ2;*#EO{TsQT7?sun{j`sY;I)xhkT z&bi3)L`t2k7N=`nu{uG2)OaLlNZrBDG+Y$f%Z(eAc-2(S`P^?YX92y?JdcUUCg*DI zcifyR@ZuHSF`v66X?|nA>Z5JMxJl%F@z^7mw?Yc(;N|w9A z+fJ}bfOsY7)2cH{$AFO|c$WQXje)2i(`&+Ri&mrer9b@!%-P|3ExE0F(Fwk}9s`4U z76>_|>tKK=zFa{Sn2O?77{DUlL;ZLq-4tmIlmk>uf^2W+zKLH-+V#17(g)(abI032 zCLv|rCgy9MzhqlKL(8jO4jhVLMEFFXQM!@5hI*w_;`<*9nFGl}tZplRD!x}PuJtKo=XYR~m{T$ZX`+&rJv3|l~*hxWEs zy2htqO6!024F@R%MFlJ0olu+j?O)^VCB1E|*BF^go@{2yl~9}}64PUvx#@KsZ~8@l zXvWsgN44kH-+lph@NsqaZ)fUId$xqgkfEMAZzUJy^D&3R3Qj(DBU!7D1?HoeJ2+2+ z$%92nt6Z`V<&WZ4?Po6?R9dULdJP?;wK_>Uad|wrUCTi7_he<5mh{BzP@cDOw;E6R zN+)%t?%8i0y*h%KFSt3Uyp3mv%;Kn{AfE4smPPw5*uQHAW8lIK=J`Q*eO<~==uaK6 zBTz|iM$s4urG7TO`lPCoxJK)txqXtS`z|~CSv~ptHX_7&2pvNa z%uPMjt3bl@!>&aK6F9$L^!vkfT82sQCDsl3Ec#~G- zPqAONX#{cM9Ou2s7joH9LiH;RW%mGui=zDM9!uHB(P_HLH~0BnM39aTg|nrlQBV`- zD@q0h0l=$t1-C!HB!K=^O8Ok&m?F7mAHBDzlw|ZuiOuEI9Qpm++2gJ?!P>L@quI3c z_B_Xw=XwJrd*4M9GO(p*AZuK`FWO&oUQF0LQ}V z`;t5@ds55%>nkNN&c`*d8WD~5e@ruP(XnuZ`N5p{th4Y*eU0)#c%8$EZ>X0{t6MEVR0S;mF7e$;>nJ1& z+8ZETvy8c-XdrkAy62jj)t#B-jdGL?lk?z=tyld+WMQfh2JsH~s;47I zo?))EtfK!MZtzAD{k2u&jrmRxlfK+dD5cGcpi_QJUU8}Mb#+l*mdskWXS>3&=oarj z621XV;-3y=(CVPe4ujxDZf=N1ocmEELLz&_O~nhQZ`+8@dcH~P?QK`c-y7OK(_4Sz zV84aus{4d-1t909rN4t=pJDj(?_rB?df!3%4fMG#FSc$wzGuBQjtazK3;gk+Z1WvY zzSl+9*{nnk)`$q)>h=Y&N2vOrL@i!1_YJAi11_7rf@7)T4NIr8s*%Skor~C(LnX6O z`wZ0$F|})-qmf_xk4X@hwdO~II5cJ)ZI?yCi6ORtz=5NK&tI}(RG&auwxXez*^?Mz zKa-I$C{iyIG_La2bjb$7tTTah=0b+_c)Dc>Tf7^#;>$Em5YD_{jVVN7w1fJbJ!aC1 zU9Qj6`)E2Ln{=y+;YHTXzg#}N4%QnA{}|#+F=)J7GCV5UG~Pvl!4n*}ZiDc?1ovid zE}Ci<8ecGoLLZbRZ|3n)ds6>%Rg3nz=;eqWy^bB0)*I!Pul^M5Nna7XlHU99fr3Nq z*Bjty6$D4CeU&SW(K!zx<5iI;AmkmEjt0SJCSF`?FL}Pp@aS)#AmB-S=k{)6WL->0 zeZ=k734N&3p;xnSKa4SXN$f4MU9@?c39Nada2c^)#kob7+`gCAd`cP#sXI_e1%4~L z%C`qYU2-|T>74Tf);Y24Lg`Po({B@JCj&7`?u`ck(NR$5ou-MQ6Pu z#Vc%%=dq?R!gs&oAXipU->_Z5;iof5f zC8g2VvXYtf!99s(TMo`vH?F2LZt5Y6@4kH8iJNNPl;(~la!1eEUV}XAd$AQ}pUzPJ zUT}BLGVblN;l7dFl+2aXA*$U*U()_q_t%ix)d@9RL1RvMascIF(ZQJG0dds&Q1%39 zjRw^>ZiW>vYUxqm`XkMB-!FT$6j>Hy2`sl9TD6kDH31CF3IKO7)b%S?FH_ez2IslO zw5=Q%p0lb$h@!0?Z#R;7Hg%F0hUGlXZ)n`O-n2BB0Pzu*^qG`A_({VAA%->Q*!>sb>vJ{J#~5Bo*LdiwJx$=oC!=WEq!XN^v5)Au)Szt~eRPV!Hl!^?{% zfzaXz&`We>`W@#Nb=)V{LNasyc<2Kt+1ulfvuHJZ?fS2Cp{NTMFI+c~2=i?~l z??-7A0L5#wb5ZEh*Jd_zF!r(itPMpwBkv^lg|C?RCkS?GMy)!YuO8u_hi$YGlyBK7Ir8n@M z(m9)-jxll`_HzDIB=f>4$m}%0LZGzsO4A!>GIxOx+2+VaAqHhIGz=ARybDxjrBndU ziUZKguS@{S>0k-lpW{J_H|@^0k!Y!uRjO145IvRNv}R8vQvp5nimOC%Z6T$!b{Yj# zgH4tyo8K-6Hl5n5o{LfHEh2!aDXmqZ;)0UxoaX3xG2cSj3HRL4NhdxR7u@0%DT4`wkN7Rb*j7b`GoM;Oe(rtIhec5 z6-W5)-}fOOU%x$Q;Axtkhd9QrVgCt<*+p;_psXCyQEx1ORaI4HI{ZOWo){ z$i`pq?zPZXFRTos@c%HfB4SbvO}K$uz@$%a=i7Sli=cz;y$gFv466jx_m*;FN1&Qw z>w;=~dYL=a`Cb5B1_19LreBPb(TVw8tyHCE;OFCP7KiW!eaRq8kEsck`J=cNZe@`w z?<9);0xr=O;S_#AnrWW4?V_e?s=3P@w0V%Uq#1w}KDg^RQfg<-<=4W5i*l*XexMyX z+(rdqMGy{0wzm)mjZL)T!w)cfJ-!i@6MzNARxvZbvx*HD%lHgLsSoFmL`q%U*nPwp zo`nLEL~UUl3!Gg$2{Q3I(k%bJ-1mE5h1&gfKVsS38b5>&L_1hOf`2~EG~={$9eD5 zEBCj{VSFd`GcuGH-}!6XjS4E6pU3sk&I2yN4oC=LxtzFM=_JbipmRmcb(ACTnj$v= z5s_YKfOk830koIIc%qX&%2~1jd39m={+=~d5yq}UU)I&5Eg*!s$#Ml58qN;a##2b^ z$Y~&~?VD)o5^oq@PkcuU`BEDiJjeld*xutTuj^2ezy)LEz#fIr?0Cqe%#`k?jW)WW zNn8yeDUln0*2{@Km6I67D|51wx*iz73Mft7638@t&ASZ*dpn`9!3R?kpxc$2a^i2&1OP@Z+pz>;H zJI3%B)kl4-0H@9N(R&h0Im@cL%8AzIzkeu{ z5n-Usn_EctErXwKYkAWLVLA-zkbODldb)^u$YzIN-<6>tMpw4a0@)u5 zKEcr55}ej>e6fn1S9xp6eJPc~GQlZ>UDZSBOp@9OeVy=&Zh&HMO}=l;E7Z{V%Z^}6 zl-g+O5)yJ{zGu|(+y^!NKzO@_w9(F^hASytd82WLecpy=#@B%Z5OW{*)lC%nPNLlh z^Cn*vARwk&6Y-zt)yH)kXNA4&DIAFKo<6C^O*Ybi^xr|tGK;G&SW?#1FwP$6NXKLgu;rr ztU=!zY^xa7d`CctpEWQ;7T?F;ynxx}6cDPEN`=j`AcP#8NBKh=8Z*fOe4s^9z@;2f`7yXn z(L+lu6&07=G8P4Dz|P!?qOS#EL*vHi_40r{1(pP6KgIY7zAKI!FRh1>nw{d&5B^Np zG)hLzYdph_kd(lfXa|p}gBCwFs+$OW2NVTntzlhti!`D*mrrLKfXG3Qg_)@fTRa!n zAz5#F)r`AgsKTY%DNO;P)t}ji`f)ptNSmW31ShQZy)*}1@k_x&MsgSl*%`NVZ#Vk8 zFo){9maFSr557xYiOaPVmpv?;PDd9vk6<@^qCTf?Aixq zUHOjZfiXRtr;EJLZA%|%hGg7CnoKx7=Ne?I{o4){VoPY%3ms2aBscm}*-rjsdnu~S zoJQn0?Ywfu+qG<9#5jt&JX>L#Jyi@k!>gAV3q z*4&osIDcg6E4T^quEtp5R?VpfcHKl#KhkVz@pNF){rZFMY;x6Q5V0Hu!Q7`#8uev& z<^&*VzK_pgLw`X1{=%RmJT!}=QZ3cX`ROCh=5YMflQB@&V1oW}T;julb_BlI(UPjr zfib3XN1CSJ3a+N%&{qSLbdh(>cz#pz(3)o>con-E`theFGSo5^gHmYF9G(YVY*kZ9+_%F!#&oV4#!78YCClQ4-c9u9+6ih^v9(jk^by)&gx*kAdY{ z57s%9@}NMGhE8E$_E_NzG&97Fj4oz0x}hDh8}WJ$xfrLzUAQv?Ke$`jBU`-X3sihm z{@gA$wXOH#jzz6cwh6rPb~6Z_u#=}`f#?&(J>?9*d8h@I6&OipNg}vPgxO|TyIK@r z_`_$A%@pEYKqY^GnKz&^=04N$aL(JS-K=5!u-3i(JB3QPW9e##9WkYT{ZRaXiLy&b zbeKoDK&s2jj&{|Zauj@1YniHI7ZRkQIdvp*&=lyKRo261NOync_Nf}}HSbg-F$8=4 z4<3(ZLKZV{Pd9)imbP{r(s1bHcCH8Z_*u5*IutmRuQi&P_WnCS}v zP7mWe2cpuzK;UaJ-YZo@H!EAB<$yh$R=LhmJSaRUg(WR- z2^YLGV>pW^9OK!&j=pWM^oo2%!!l@E}U9-qCV_=9sObxAP=Qr}1SE zFd=+xr!ZSo*+6Kkh=VB%@IOf0fMb-!-qPZey~4jl`wmktvv>B%=#dAlYk;qGAtyBT z74Mzfy7f+Ga3LENN&`;Aa!guq05j-%%N4{Llwx4rcpjtT*N{Im-jK z98srObeK65qnEne2*TRx9!;DepQ!8&TJG-RnEw3?<&b^9Ji+bHNhBJG6TPfEtx$F7_{~Hn9Al9sG(^`csY48-y6-f7gA#&p^ z9q8TE9Mfj`eyw9M#iPXr2MH~3nvpVy9isIBXxtR^g+~#2vC>VlZj#M=>Ey@2b8gWA zhr!$Hm@~xw1>`2RL{K(!wbRm)QDxf%UsH<~Q`vG)PV~+mX4lP#k}>7WF=6gpZ++b2 zsQgu^>bCyxv>%nkKmnZ;U!XC6fKwJw_C6AmBjCJO65$kx_4?5JQhSBDp(XC4;`CM~ z!Q!y=VdTmFz_@f&PzL7OIhIzlNPl~tv?peV#^RDwF5Eh}5QlCaqRsP3|DDojt0LPQ zaWlb$2L>-$zrur~CO5dsykv(^4>DT#<_%{fKrR+fenbVZPY7Xnh8FL~=;`X4v;`jn z4)qamsAoTF-Hc9JGai}^pl$?@FRU68%DLk?cNq|lLYB?+{2Crb=7G^G6lve2QC4Sq zsVKS(g+W)pDDEgTZ*%U9xWT;p@HVNh`-#hyA1Osmr$llMa$?meyWIrC{)GNi!3=My zgMfOoWU*4mIpXcT+&4`8>f;#4bU}gH%Of>WJk^U@?*^=57aqQ@yyO_TL*<=IfVRgH zp)xvudj?U{pNT?`2t&&%u!VqD^j9BhhJY7e*5{vHd& z{}d3~RXo+@H6dtDz@opfszFqTXERfq&y`8XDPAs=ju%LnwH2-|RJ5$^zai|jOI^=W zM@H|I>ljBt}*zIo$d$pe?DuSYD^x{1qIUqhqS2C*@T$E8}FZ=;yV#oV;EidB%Rhis6*+i zcwCVKJ%5yP*!lK;S+NhdY@TX5vmFuQCq%E09z7nXU2FiC5+3BDWLPEO=#0%2m6JN`sx{X3Th#}PPi1w4QC zSj$|FILU7dOHMJF_WJxn#nsD zP*-76Ko6uHY`5o#o^$Lx7EHwF8qiZ@_SLspRh1Q~y2HoBQF0>-PkK9-SL_?1S8>LA zEm0u$_P^z9CfT!)N%0$S-3fNHB-mb2VM#C@gRb^sI5oiBpJI$09H=_Gyb|4#=J2Qg z42;n8-EqN@(```o z@G%J5TwUNl!;FK!$YaDlZrMXB6U*X265nyaK4x!0qHl@>hA0Kb3O5 zjaNVvE$VhQ;iLOEhutRT0T78xd?5WXT4F1$5AX&m8Rqmk?&0t;4wT?MstnE)Du{W2 zHa8=WeiaM-s6+SzJFSUcv>==W&5H(shJGx47N8f3>eyvoo$uXSL^wLm*3x-zpMA+4 zG+^+hk|0TaQ2Q_;{{L64b+0t^ou4-TrFCNtkc&-QPJs|CcX+;!s-(|=Q}!@a3%Ls< zi6vCI=Uw32IlZ}Jp7TW15vkD^`WL@MVT}CjiwOyvRArzA#Q@O3k-R!X@g`f(WM@2P zRIQta%Z=ZO$5M-L^Tb70MrooM0i*yDy)q!rEGGUCo(vc=Dh9zqP*rs|Rq<%99Rz9? zV`?lgJ`Jl$`4SIqDlWgL<`-#yvbE+g`h_>5v6jf9Ah64^0OR8Xg_8_fAb=SM5{_c3 ztgOn_r(8>J0svF{*g#|$ByjiVb8BOe%nK1V)fx6$*&OX9)-D{w)l#CyKv;-tjVS-I z7)!yDZp_A>o~8!HSe5ks(Ni9$mB77-7e|+AAbd4r}PJJ0fF)hw4008l=?vb7B zzB2c8u0s%EFL9O{mKKAmYghuRF=Q$Gc@Y&23=}=rN3E4bKi!}fH&fw&yP&*tx$(RV zy}oqR7|;lXF1&i$dnf$IF`f@YATH?-QHlp)(sT`onza<@_yYKY0SZ)W4J>&~sG2L| z=Omb{y94j=)*}SOi~5#*7zjOWR?&oMhKOesd_rj0W<0|FUU`*Cul$DgFwwG7dLVT8wJ|L0=IPPR3zC+$`65nrV`bs?Eh>i;-n>`EdCd zP!3B~g(7Q(n_h0+s4xL#fluw1+btgE(L@gZWV6Z$4Bv=$w2y9~3gQ!7WI?$|0Ibk> zuXfU>fha-O>_qEog;X<;kGY!0kj6R%3Yh9c0Xb>s3kND769mS=aJMe#b$XkjOMw(N zop@r-iS*DJDfwG8-vE>=(kvaNe#;0WD3`>K>%o%T6M|nYb*J<`>j;q54w?ImT)kZ) z+YEww%XE1;Y#=hYgZQ znj+;#U{{Lf;UIjj$V5PJJ56r+bz{6~wgSv5lB`V4G~+vF?0e3u*vi==n-7jJOT{Yz z8XJ=PeO2alC7a`>mTE{DNXTsGvMT2;Oopx1Lla!m{MuJqSd2?Z*(7$1U_V-SLJ1Zs_fh~1mw7h*3drb`jtUxQcO=QR>&;qQsil60S*OL=ctU6<$ui ztHgLCE>*1NNkx1n0UfUWf%)y3o`igZTFBBBAu_xE>&FWzV#EOeugmp(_g6@EsR2$T zfE&q7S!rB&sHr1h!E5BN+BO**H+}ZU+wco(K4` zow0oIqpaW+0O$ugmYnvz;OO#BRmO=F*>>IK=SI^+keY*kpy*j6|1OHt0938kfRy;N zy|*t{+;4~EC$p7Z2tylvUHjQR$`7&eK-8HeYBd;i|J{3^fts-s zd7feRW9jb2qm(0W#@UO_*wq|15Bw1%dzJiKZ>*6HkOGhNOwQV;1yKU(h0?tGqe1W* z5~$)&Wzq}XouwiYLlPi=Ppx;_6J(dhkU@ss%o-{crHVJmuMB$@8^?Cjdsjhp2%V$& z)q*(*utX3%m8|M5uFtIuzmeRBI(}kH-FD&g+7U9k_tURh(c>eCexw)Ne`boNTVZidi^@b={wVTvsNK=wk z`%`3Ub_*o!O(?)uViiTjBYbLCqsKSyy_08HPgcu+X+~0%t_SMd(PicsB6I`Pa~nb@69%^ePCuS^kmXhy&x@q$j6iw6Jkc~iUA7xCI<8vaXf zxvpyo$n1}EY; zLku}_mdaFSMbkyVsYJnRSC-7K!jtPqo7d0leYDFE$zX=^om@8EKTq|j;l1k=VRN=g;`A>;I zv3WSKEmvOE{WdhKb+_|+B9K($ z?VA7^EgafEpSWKka=hGOwRj_2QG#>7v2xP#S7n)OLdttaqcKjA)cuX*0`lL}(BOUj zgT%zNwMo$HO7MFCRg`fxXC|%&JW6W59QLU%dWA=Ky`7Il_emdss^89-5hZRN^oST8 zba*nAOCOPfv5p_HNa_Dg=K_D&$u01^imR@aGI+#d?9q2pmW%{V0R0jOX2Pd3B|WCR zRT=U;Ng%-9LmoF}tP9p}N@(l4dSEfq{{Bhpl}gKED@-z@O2nC})IGW0l*WbQs)JC|$mO1JcaFkMn_U#mllV6aEk>-BgAN|fldHUMQJl~yej&0eHsP>ig4mB}^?k4KYTN-;foS%*r zpF2tYQ5!{ly29OiF)FWe4+8K!$Zuz|zMRRS++JZc86TH4o_sWk?OVGfEj1uGoZJ__ zAYFZRAShL{LdD|h;qa7x8($F$OuaSZib}9X`67QAcr>2cGIq7p;qZGm-$#Y5Ql$qd zM>u{iK4i6-7fDr{91iRbI7kuiasxkxU?3XAlMlvB&>~ln=vTX&d^L=8z-H@}(BBY8}6VZ0a2>Jr}<+ zH$E2ly7DI>PM(stBbGm&stuU5t7;d8xbhw+G!qsA_EKu6e19hUKtk5{*7@*_KQU`10L`pT!js3XB_5g4dc^*gI)5PHH?C+VDw5T{akJc3&4j?>4#(j%w}iW@zdAXN zed~@-Zd?_0qplnyE&p|P+PvI=H-oM|4So=Yy51+dU7k5ryRJ9BI%@ld2?u~><5>xC zv>tlBi>h~!8;5>~4IQ-E8_t}_s9KXnJRPity?byzs8G)AiunbJultoYRUnGJffO20 zyEx&)cybqv=E&1mUfnCx>N8dxs@i#7nM^$}`X^qhg*{}#OmmrW{w|Re!{0e8M#Jvy z@~gb~59TC+hqK`l^mIIxyAP9~Z&hU^*EmIbTwUIhEuk8L#V-c8KfdI?wXviwG<8tC z8sQVh#MAdj5##{N%h6EgCmRl*EmhC6S(@&yLx${YCR13c>Wwm4}ep%kD zzpV0*vXU1YCvHiy9!U5og>p2TH6<{M7(wp@?(|N3?1Bi?Zvmr7xuzHD+HGkKxhB1~ zX$sxP--{iP)#hdqQIz(CGUc8S2H71YYY*gcpVsTkODq=FNV8^(o6Z`rowwdUfW|sg#I+w4?cbJqtSG(u?beD zOEc73h7#-Nw&4H;xvo9LZWCqa@*SlGLT6q#t4_}Vsu2wdSS46b0_eDEfKTXY^R_qg z(*S3`hRA}BTg}7Q(ry&)w(gu*N_Tp#sQ9y3&yL|3hoe63F}sAbZnC}SLmGwNEF)y5 zie^2S&k!wnS?p8C)jSK%td7mRt>$}{NNsGY+u&HrqvDu)q$W-HP8Jk4BGQrk$Ub+S={hQ!vjm4;NW%< zi}!lPixYb+@VkbLXLN;H1QB?afLnY4Jc*kf+qO`~ic0gjVKLNhiIyQlx|lAu)}iye z=BQ1uzUxHG%gwv#)XksPX6r5*Skp3L;h30TX-5%ct~M&~N5%`O?yR-?wHqQg2U0Z- z;xjKu_dxL08wB_4QHduXyu0i|@vq*jUmzVq`nI|v1$-mDc@4!# zUuo;{e@fPUx+cvGzGmT=*J)brf>-c@KWdT4Zr?0#db92QMaONiy!g0+dpVO zajAP#=Nt@wtj9(bN4M@wAB^KD(Z-Cdy>hw;`KXoAGRF1p@Nnw(tyOLrQtWL*^lD_K zFul0r+;4H!_ib**z7)iwmUFJUZ}I|qE5GMRAT@UKxG=P!=?{7UsNQBA+3mOMtOh?; zK+`XyZocm=-~Mnpz-1e?m0P6MnO!%lP`1_mq_=_$UF#5pD1-kvC%L!dmq^%>4xPK& zluuUDp)?Apm}w%1C*tL3%A>)OZ)w799d2@a-IATa>vwbjp6W;pzZo1(a|x)m1ej}V zJ?jE*GSq8N@84_B_r8#6aK#>V!oy`22 zzt75*);tf`T6%ZZF7D)S8d%YKbn((=qq^f792$GQj`JzFY#7ab%Gowdt*91!zd#VR z7Hzkqpu#pS>NtJoC!=L7nOhwFsVk?ytgbsI=po~7O%=s@tS@rZ3p8Ng@Y)lz$MS5f z6#4gQ_%ih9TyQ!aA%J0`k-2UWU4E-WQOEyMwwTO*Sj}1GT{?)rJzyU04F*zJ$d}Zn zPV{kDv2&jVqM^CT+(0?>;uQS>HMZe0_oDkHhncSNW73~b&5oIio)Ol zqSguZ^|lEYgKaL}1$E2Dyf-%+(@B>cvi>recpMm}iQ0tZNMz^rD~G1?pE#n=-kxnG zZ8%fuR=IBnou|NOSLvN|P#GD$xOr-hNNB-pKe0Maabf3LUCVw7YkXKSyda~ZW@GQH zVaL1!DfvDVQh3RsEZHlCKN*e5{A+O3aoaloIe=ZR=GO7fGm8X~g00`{{=KFyb`lKx zj<{Q4=FzM`jqUg)%^6LvLje&gpR|9sy4k#)5cI(Q_3I1x7W_%T zn!S(>GPl2K^ZC-ZQ+*MS^|+niGnb(W&+|WTCozL!#jeKC)cnwxJ9M;uz%}q0fBFH< zWKQ&#UG#0gDg6P}hWVs|hhKFTa?$Xj7Pl8aI$N@1)k-Wpn=N1DYoWGyt(w2?7Bo8FtlH!zchJk`AeFZv$ZrA@VZd=M9thq9Ru9Z(K6 z{xG}n$4~kU;49BK6|g*rw=PSDB3MV4Z^(?hu77MP8yiK<-@#O_g!x8 zx~6lgKE1%^4RSkoRL5LL_hJ5_=#t_weRXP$bat?3x-{u0VY1Wg%=z>(<>%JvMAMba z)}m@LtU}Rxyj=q6L+n;|CcL3Me=s&|}F7b7WJ38Dlq2&;L=zUw5-fg`newn&jdZ<|K-Ey#A*kdHDf z>YEZ>$f~A4YVDp(hkGNd+f{_AZ$sR%&gs`@Cp}#J*E3VLJcnzur-ksYQpt+>U|`=Z^TEy&aRk$K5*2gNHeo zfX@L2bH5(M-OJC}BYbR;;5A7aYLKXJ&je0yzGGb&Ql24>KmEX*?M;D9+%7PT0+5q3 zp$RCx(|e`5p-H=5D0Hn5+Dtj7_}^?=YzqQ1YP@=-4NquaST4kk00Y{B32aW*&bYF%!DMxc=1U{{))50-(xw#rAeWa!cd|>=y)k~WR;oB`BEwL=Ikk2I5Dxg1>loY zO13KM&gT&qb&UZ|09dBa!1jkOv_pu_en^-CXieFp!rf0TN`;KfY{sQQ$~-c(9PJna z=VlELhW~HE{A^{FO#1>Q&gqw%Ko0+!%gpd(N`!>o{UCRED!HUG-vvS+mWkao6-*b+ zlA>m8;8)ReK9KTF9JS1R@#*%Q1x08Y!1op^8HDpwE(UlG-l`6;zWizTdKQb?6yjjR zrHc;69ZK7$41?g?Au>|VNMm4EYE=q$%0V*+DK#yQg6F?=H-I1L{TitoT4~nl7oWT9 z6@o3WUWk>?ioyzN(j;_{(?qPrAMi#aDCjBDTIp7 zBA@Fi+dACEw+NNLN*|9OghWpl^rZzZs+swm=Kxr${6aQk&=A|xG-F%Pb|E0?b@E#Y z++m-D@YeDC2M5Y}dt|+@{eDdCwJBd>3eOk%qPhraZ?$kntSGdVD^&6m3?-+C1tTZ+ zEM3C1ya~!{iCP4#{NOffMw7tS0xQ25cz~=E8)#B@wNktde$#+RkH0bUq})9dsr}Ic zSEou1pV2p;VcZN5R|PY9-Z4)1H)O(bud~~Lg>o0xzp}zhx5141|3ucLa?g*KwoB8? zb^9dw01vI?)PhS+BLh2u>cjvfk7a^YV`V>?rk^98oG@OXD}hujE6>N>T{?fNU)fc7wf*55A7EP( zu$~6{!K%9_LSJ0Elh&gd4X%^XQgY1_;;PR{ zUq6{1*I)D`Y%a-%*&GnDrx&&pIfD2OW-qA0S5sWoEI3_HRej)L^PY?LH)ji!L=g+r z-NoAYS-l1hcb-#SiWvBo=y1j>rS3@t<6$x*$tP3PTC$8Fa&=CjuQ+NV)576IWnRt@ zOk5%vxZl#%Xa+;W{mKhr>fNK-K4S(j!1(a*7s9^^yW4H$KTDr z2)%bqH4*6@%Kwb7i*;`UWJi10X19%u)g7@{3Xd~G&D8P2^6ym_jy!G)xg!E!%Eq!C z;nuf@dJJa&uqLRIv0#-w>rD^=W;1_AfvY=-%O4!CWL;dT#EYxgGV)sL^v^ZyCl1fZ zG*m7LLCkr$idw4nv0I>2IXv?|@zA8Bx9+7(LtEmE--rYjYB`kGvs@agONst9+53Xh zyF>8nFGWzxFW*=s#frT8ayWl^jbdxel&1BgmgAh>U;4$GPY;D-5fz?Nh_37m;0aoX z6r1{}s&gWI&y_f@1${J#7(gJeW*L2V_NSAWK~X1r6t*u2Ug`hbzC#ipJ&gWGAdeD_ zkz8yt-1{?h{rT|T1`CyZf>Mln?H1>G=#0V{?8AQVnE5N~1y90UsHwv*1{VJ?9Ln>0 zj5}GKUJ(2&-RPOS(BFi!fq1Tm93fm6{UauhS=9N8iL2#7R0A+5)un;{FG zgArZ_TxEGSlv&JsqqNNYLjk$ruDKP_gRwAwfyOZyh)=h8X5JY79HtCAW?_DmxR|<}NuIF{K zFXPLDfXbKcEyZCV_!$iNYohlGCt$~fEd0ZE$jdHFo}OIi^ZY|V0XZo9h8#69qoMX_ ziMfv+p7_x8BSB_bv#iHk@Rp!och-2Ox5DsPSXoW8L}8hEfXwFX>)OpHz&(W+vHSuT zE$^CizsK78;qAu~VC+HYb^VTb$FoZvAXfUPW2f0$VP*{ccnvr@UjI*cTw&%=aq?$) zd~*1xnw!ke@Hiv*|4af!n0xrYtXqKmU7&y|10+9*@#llzIaI-cMErjXr^-N>8IJp9 z;xGPWx?6Tgbvtnll=E)R?b3J%5R?p(LP1pJ1T{tVY( zPoyr}8Q2+pXnA=+t*TbW%0UrV{Od#bNpYM;HW0YTx8v)_l)#gb;Ov^2 z@B7OEEBvpT8j1Nw#9IH-{jDRcE$r<;07TvK=>n>@E~EXS*KjSgD;(`$sq0Gos8$+Z$T09 z)6PH4-u|`h@lSR2-e=&Qx#`tX&{jGbkrzxTCD&)>tue3qS9x$7_(Sw{l?U>;C@ zG!ah8b23q~^V2%;G<{XSys^`$m2#n>#f#lc< zppVd8j_S@j6*!kIC|Lp4$^7hR$)4@3k&1;z2LSv{$1r7{jy&#t(VgB;k!L=?5X;!; zzVWmYl}-&~X|=+Ju5c1n1#`4>6rmEE$I=d`$s`+pH&ig(MnE(B5m2R+l7&Rol?&?^ zT;UdzzEb+|*mQC>0@(tknG9WCrmqkM-}W1*tp{YL^%okYg~Eg2vQlC*ukOP{p&o z=P{PBS}*=X@_Mdbuob>ejd-;#NCiLNL?JqOFZ3Gu`dz7Kd`ekBKgH}Lctmk~u`dM0 zyJ97SinP9$IWLa*rF;3KPQjYD(}Vy|_lZh@PpsnT2I-cE9J_|I9HzUC#-nnqeK*M~ zMes1q>gv8;6`ZQZEX`>;X1TQ&Nk0~g&ORL58M;ZDHw-|9AWTv#43~#Dp6V{m`>DlB zZ4+T05IyU~x+RL(=$bFu%?pVP_8gE=^ICt}HT;67K~Co%&uTN3dr=YSac%r_530K1 zTcb{Pf#6Ug2=HQXdUok#CIU&}>nXN%ZX{E#Mopf!-g@d@`D4ps+Xtc#8?=I{>fvB3 zeVi4F=jN#UOvdM-9&oUq`519FJLHA!U`Da%tm51-PS4elyg;d#yE z6=R|YEnO)#Oab%I?DJ4vGRa#>?!j{^a^fJZ+acQ(zhv96ZGrz*vdWCdxU*`SPJ-;w zGrQ&fZz(M(@`KTofET*us^60`A%*2S?>U396n{a*9j>y%A(N%nrGQrb4zt>$^Iz?7pK9d-!{>9t(&JmcHEME2{kl^@Xgm&T+Z!so75FeJ#Y&}aMaJFb8ek+=*%Zu{KWhWvR7*u!r7gSxgEMd(bnV^|B^yCHx>NkRF zUkdV+HXHRb>FO;Gt2a`k_9=I-9@DQI9mEV-KJI8+@?scTlWry^Z&Yt6!)wm!#Wp5A zAh%*N_-{kPN68iI*oDT{;~H}4I!a_<07zinxly<#s*$B~%_1tKI%qsdFUaX>al4Fa z1*7Z0OD|Nr;HXPIf54CCfZ?httyEg5<9VZyjE14iXQ^7efqpa-3KdTs-dV1$;5B}e zRTEuUY3K9O0O_13fvI?9I$KWZ#McE6SDdEdXv5jv^&|L;u5AukSjXYTn@=B=3`Wek z1@2EWqz+!bG>xl*;@a$xK`Aq#l9{1)TWuKuxN*-ix0#8Snteg$$S8RB_#8U8V=9n4 zFrMF#tQ|;LyI?&Zfb{j9Y$VUOBfOUEKI+sJkclD7^nSEF;cPZTqKw%_);KW`zD=UU z7q7KK?IdPX_r&!VBuI!+1UXtxvW8#hN=@M^%&$o!mZf&gz$_F1f<(BT5&bIgq&E{6 zsw4DV?9+5+iJw!;*jB@2 zr6G~T@b-H5*iutD4SYp!CY(S{D&~K-C^fYYX;jAysU|um$r1rR{><*1Q7Pk7%V6PG z2vw0E`~d&OctBB7DMZy*xw^&t~?Jx#LN_X?Vx=EfF& z7D(U~qy^t;0~<@ocAC*m@yT>71!KeY@ujR8J|eH5@#UjXdYb-Fd~0VtFvW)Y9iDm- z+ri}UNRG{A9}p9>l28f>Ydv5Hso7sAy(y7NEz{_fQ*U*ftRbyz9%RRKX~5AaMQEPl zid`(vbfsW$n7mkpNdw!%gNneQ(>+lDqDbY2Ro4bJ@{2<(5kRUNvcjF7It#f z$USNy($bZD2XxzkL_+YI+L_d6+F`?ynT(aFi6bW=hfdF?cL|1m%}ylU3^s1NFoW43 zHuXxcJ1e%GpTwo{E0NI3)ptL5>an8S(WNqb65KN6^iXh^UgBm78rSO1M|y;8M$`>k z8ulhnhYn3ic%ZJp4Tn5Tn&JLP?s0+KdQq?7$wf-3X{Q^AQr8}#|v zz9u4vr!*?wD8ANFgmn*J^kfR=>Ra9AbPWl*%Y2vgA(ctq)+xRQ!c#Z&bA`<4o5+Ol z$4hI`Nk-Zp=rq-AXRwvrN+CV?lU!3_QR__B(zKh-@1HzJa&d?qzpw9eMxn`8rsctz zb9-n`KU?0UJaeB`%1@I+?fDdppkj16sQ@p0n-QV|FGRykN41Dt)Pqa8pKlxAH&z z|6{YT$&8WB=MkaVUuKJAeg!_MN;Wg1>vI`py~x$Cw|XbX&j%kD8-J~N5a(0fzkAZ@ zYP{=N^AtKFbCpvr_`H1X+UEc_#l$Gs_gl6X9JEaj;xxo|PiEXXv!xa9Cl7Y(8BmXVJOgyH^r+JcTy zuEuTYS~wg45_llooXoh!Zw~Tv;Y?y4`2l+1oih1Z z>p!%MIL<&MA!aeZT8|LESZA|tSX}1JL@01Sbd*!*Ep<&Nx>3Sw@2^yKznrh_19@->{zy6OQ0j72&8aTmSZdGk52c_IRRK3rV^ z*odsE5p0K7w2+PS46U&7w~$u zUYItN>yyf1#uDj4>#n%!M{kNoACl#}BBEh4N(2+~ZAQ;^KJoj-u22j7;AOH>`R6yr zg-iAFCJz}sjOACh5l6X!$`Buj&3r5BJg+sv<_?n8c7k1}`*cy;kw_~^Z3N&5wcqA zF*ZGN(iu~9s3yZ6w-n8~Fl>}6a1MeM&M#*8AY&lE*D(p+G77u>;vx=g2KchYehUle zi0HYfZvXlEd`w_KdxVMj>@a+xreJvu0+(CrhTO1*PB&t0EW0Gd4i908DKh2#X3F5$ zSkPiLpWarhet-~0(!=!BwH^-j_?C7zs0?u-PS(Oit73KZUs*QVe&ZeE<4E(JJ7bmV>ZTpzG24)|h>83a-*-yMcTR(epU*WtM68dOU3g1%#|wF4^;ws;j#Ijq*9p4<+jR=U7H_wMOP#o; zUMI;FV`aAcS@QbNR9mO_h=ji}YdE`%xy z%B8Jz-XM@4lKuRAF(x=2!FAo|d?eJgrg(ADr@Z&9zB*+2i$Kmtg7$&)V}9*!s)MPr z_;}~)41Cz|Awq$sy+W6qN(1xV4NeZt3xb^P=8=?-OA!gq&apW5)Sn5O#ddx*l=tI1 z%+3_n`rPOjb*sZq(oKAGm8vsCm1Usv`z=((fchvn01QZDn_hrp4NUzp5XuIJ}2(KuWCRv&=#h>B45t^`*&aMz~QCt;VUP6(Cr5_ z6=okO81%C=$2?3Bn}n6Y$b`S}6@n~8NYVg>r$mMyRx0;o;;dRmexnC$ZzhH@5_p-t zebSDcU?~{k0?cQffZ0b^25YBGi9Hf0I7WnayTKyt{H(d4-sMusS@q@llO!oA;C|yt zS_KXIu>Gm^o6*n1ez@a#4*B%!=)qklB8K|ob$c1Bizlx0ET}%H_2tT7x%2pm48!Db z^#ftr{v@?l&1^Z6d_mJvXD?PeEQo{cuU=7NC=BC@$&Ecx;5nY$oBa=l_Q`i>oD(_r zMn7V7<{{m0GQ`RytFE+R`6c1mJQ1YHP+OvQlL;as1tvpcV5tt34Pp+b&TlBT5k%>w zXKSlk$gdSx0f{90nh{?g$%&#{ln_ZTW_>M@Ix6Flwdxia)QJcTKY=InYe!NDp3r04 zAw*5+sL4qjYu))N9vTC?Fhp63Vm+eI3^c5?a}xO`L%scLSLI206%#qnx=qC=)Cbc; z_T#>Dv+&T%ir;IVJ=fvjV~ro8xR_e`eaoh8wtkyo#Sa-nTd!50ZRR-UT4O`;RirBN zw+E<2Qv8;myJ=WO*@7;ze=B+5alfy4`G?RNXh7hY)w9;ZL;AcvY~y6&Z6~C~_Jwq# zK+l}Uv^2VGJ4)K4S*kHZT1o_@i|kzO5ZNE~sNAax%y-tt=8q3Zxz=;4I$;q9Ne!A< zP2;1ZDeUeI@g-%2lMh4T?DZ?>{ZL+A+kmV>hJsfu-0+r?q!#z%Us;M5!Xxo%K^@ zF$FK@J)*FD*Te9Im{QY);5mCq-L@dB`6w5-x)-ujL@CkBEw)gHbQ8IXshyOTiVd~% zx$fTOL$z6NCU|}cQ;65}7N-~ayx=%`bKkn$d@dXlf$VyaI|R)PBWl?%t0z91Ox7Kc zITE|ESi@*XRqGB!Flou!VNat5ANM1?l)sgy^3YXpzs{y0KM1|o9{7k%YKvq|K9v8r z=nX(W-Z`C(2y41uVCL}t-)ZV_YD9jG{tkk^)Q+k(P;#8e_xj6ftS?4lT)j}EdP&P^srq&phOUm9zVOx@QB^+5)bkh6`D zZ1P?Ab$|8~2h*)a@y?I-t*!b!Z%$NJRvrT0B=`0M<|(lZ^XqjW3(Ty`$cq1wNYt8E z*>Am%Dix}cF52O4A7V4(sOc`dfK8BsN4~_-S{|;#BwzQPzD{w^9eS)&f+RQF$SWV} zG=dK0Rf4s_6^}X5=d<_&$n+K+Fy$W@E5B&1P_+~UaEk`USkhTkWtLg1~C+aGXOP5nI+ts|%JR2&(V8%bl1= zKy)EOCJ49e79A+X7@8oPlepO_I96@cf&sG%&Ncnw(xFAQ|F&&}6{J-qApY5he{K|C z*iv7Klz8r1PbW0ly|-|0c5PEj?G_A6i3ER0=iVtTvM412I{=GeLtM$=LWTnKBqCQA zk6w*3IlM3TLf6J0q^+*g=HXF0Jvy@KV6T)0B|ZtDK?&J86hH`k*WIPlg)ytY<*jC6 z7KkYHCI6#=uPf?h7m2C{m)jkD)x;sKBokTZXNJBTg~dm`ZVuyotlF|9!j~d*46S*7 zi$9QeQArkQm50PWurDmzw+JRfm%AOBL9dU3YBszS17=tP7+wYL)E33YOG{oIoEW8n zR+J{Pl$;HR&GW3uN(F@(CoDf;Ue4>0)v(cBmnRla`6id-ElWe@+=dOU`PFyVNW2!A z)FoN#)x{sLOzY$>6o4~z4M~Et{W7lq7o7nVU?80+lNv+(h1?RZrd(ze=xgQnwLSb3S^}muiksqUuzfF zrr8ReI&A;I_A)K(K$S7`LIX(#-By`N&iV5p8}64@vNkBM1+`#MEJWykAY ze-fsT@O!z=^VSa!uY}mJ&`Agi`R;TLD=p!Dh<58Of{Dj9pWLTrrP{OhQoyQa2he!f zJbu1I=)?2~xI5bH5w05l0BidH;YVRX?f++OxA*t_w+Rxxv?TAW_0D?|A`sMHLf=GJ zVZmGNSG_~3@@{uf;^}ZqR9(ADwr0mf5{h}NQ)`yGqx09@emjk2w4UtZBaEvQ)uz%w zIRn|lE=^9B3UEJiRIQP81mq)>G?f9$QoAeo2|Q@~g7vkJCi|lP?3Oa$J^48<|C$1B zB{2lT`EYHx-ra#JRg|wO|H7>-e~uC99u4^0JNfjT!W2;Dwl*R6jPYHqOvXT>c#J)(X6re~kj(V`FFjeE!Sj-+@5A z4L7`?cJ{{Xzw_Ld2Z@yRd6E{Fh9aRbj`5g}bN^=X3S3GKbclOSqng2Y(xb96&%Ls1 zY5kG&eCzx(ceiW%Yh-AcTKco=`xby}@X#z(>uMg^kVp}35_}?6PyWx;@9PDNq+4nJ zekL91b;5`|=7@b}_wP)piS$(U$r-(hFiILCXgT?rLl)VCBBPI92@isY;brv=p- z{gJbTQIAbZTqFls`l(e9iQ+MS}A@9=_q$sbS2D!A2W#RanZ=t<|# zQAPG;G+GyB9ongy{GiX(N|ayxrV?xnZK@i^75MiY?u43V8#K?A1-?C}%R@bqa8k_0 zC|t#v5~?t78CmCtNhi}tdids0S3`C(w47oT`3;Zkot9JT4Bm9n9ACSUy~-3!%o@TP z22b6Dyf!T#{@XsNceNeV1UlTfX1*i`*@fW8y!KVE4D3+FWFqoa&O)qa0FIIHDhF#b z6pQXbeCwRKor6#7MSVoo8L(6f^pKQ*C}KA`>JYjeKpOQZ1OFvWw-`I`lXC%(^Uf9~FKzW=y0mm;U?ggZ%wB-nX{D zuyf76YiEpADTEnWRJUs(-u6H2K{j zu7?*TG!JZ-YP>#1?Sso;z2|v=7rN($CFxP=6<89*3cf$J_W;|nG<58=IdpC7j=URv za&tb8u6qfro7r&LzTqx0aUb1F5G_m}gg!ZIIQ}N!mFgM@ne}E(q&B%?%V9fc<#$!IYBw_e8P3C zlTPAPDwiNo^gsRmK@>vGZnA6m`GR7K8K@VQ_Q*U) za%$|0M7vQZ?#4UqZ_6ywkOyJX3+?ZJjcvTMdC?h*b@v)QaH9G_(P`>!Uy{3D+kJF~ng?K)8B$x)xu1Tm}@A zeB|;p_dIiI^k^0kYu~^H%Uuk%+EKNDzFPeo+4u~>*qxK4-2A|R-U9}*1eAxIhd0xa zu_Q|HpjO|qBp3PnhMj0_>%U_8>U;nF@`s#d2_)#tjJyX|+1?TFHtY{Nl4r#L+_R<9?g< z++-3m^yy9@cRTYQa!zmj<;|>Dg|DFn4b{0v3(q!u*X)pE4o1ZOE#UzzFfcx90KNlu zo2RRH*#^>*byHZ45Fe99^4HC!SCqLwIkflj$V5$ii3_!0$*>LFbxv$r zJ@T3o;Z~j#1l;s%w0P%U;2D3#H9Y<~#3RZ+9h$a;V<-1_pXSor`WzHQ55NOTDf`Ra z#I&bFlL}VfNp7n11Huw#6!_n#GOOJA7z_A#hI{6S$g{fZVg2TJT-yXBKn3*X)P6L5y^vqlbY4Y zfnuuicuK0B>o%@_E2t5lpY_jKBW8ddJ0xHg^QsBO<@tv1oBtcQkjbT;9+K_+jSv+J zboN&DwZ-yuhp~*_g%$;yRpiX=Bhvh08BQg(#Nn!mS}oo2eFy(8u8n9T*CE*{+UoB_ zI*x$W&CuZUj2wrk?cJ!Ps15DGGy!{{OAPPt*Bq)iG_xvRuz|dNi79Bgh^+5c;%9Wr z5rP}lz(WESiY0UOB6KhR8Tefc%SBsIX6Qq0TpM>Z=G-0%<&M^C6zV9Z+)ur7b*_dc zC|G*DR1UU}q$jC~Xty(PH&?1dgMg@tM^jVnXBLsaD;L7wb5?l2aa&QYvZ<$7watOs z-Jc9$W3FwqcP0G0fibrF5OnT&ABh1yYbaLVP`rGgSERgmeUJ?IhsNKveRO2^Wc=I? z8B%*O_3`{){)_)CM7rq1#~?1<2>B&DDP~869xIPWi?C)@&}AL3hOh+4ViW7xTR(nm z)@-ngR;}El=iEZz{(d!U{+mH%MGrUrUJ$e%hijL^YwND__#?ly9{0RfO;SrH^p-4) ziDZks?^vIQjuCV}cC@aA%e#T*@pm$<7-OoI=UM1RJ-q6QBc=nf(XjXaC4pKK*09&b z%`mhulu?0l^~TTVmQe6exHL6nLl2T8oD&;Nmsg9j=E} z3>&oPs+MH}l9b=*>Fx&s;V+t?8+vS76DQ$%R>h!JM`+3`dV6QwEm0wlDk2lBlMq74d40~|y>;vEJ*(K)`w!wyO8<}f zh-)g-(2~?!p%aJ;tA|F{JJ}Ny{V%LqcZJ8}Tm6r$fMvoBimud$KXu`+Vi-H6^!Il7 z{StS}$ks?8H_}+lD@e?*&7PfFH+u>^@UP~JU-;s2;=O;x>itLlAK%=zeL~n1cPsPc z%)5Y!NAIkUdLFM?(-AQX7)gSgIzm&BmA zwf4K7Fh8=<2;AQM)yzggxo`iwzd`I=3dlqi0Fp`Vo_rsd|M1v<(l9BXb}D)vMVirn z33AVBo;HrzTXg(nq1umqWR!y!QbfbkmWbpxNAoy5#tX4DD>gGZyk&lg7WyLGqp1Pc zIX>(fIhP30Kn|>esJXlBbRsoAd?uzv>HxmCtrek)uc5d%Lh&Uw>m+Zqca48HQMaS& z7UeR!XMDi0Hv}48qc<@mJNs0(ZzaSQbm#P3eLEORpO{T;hrqsjG15G|T%m%0J8Ar{ z=+lLveU(YYQ2{Mm9}##H&XZoiYD6(=y>zNwk95_8^G>t&i#m;MVoE>sppPW2zPm(% zRO!*Y;&c;2>mO+m+{sDR3A0r+jBGga!X>>6F+PPy50OWtuX9^B9KBh2np}EED~b^D zkQ^y5;+_fCH(bPVs`EbPOzO>7NgV?D(`ot$KT3azo3R9v?R)1UuUISZ9d&h)~zCO zw=%F$ZENT3_Z=;|@kl>@LoJ?AdLWt9U)TJQ|GkrQI|t$+C+iA7g0Bc?7_GTqg(I$^ z6zB!IUxcVxf0jd3Wyy@xAafE%G>Fx7m6d|QvGjTL z!L;F3C3Ex-pOyj>BnysQH*SPE zv>2=_L>d;z+ZpG`A4*kKFtX?hF#e0V)7qe}a>*k`p{{gSdYzU_I;;wJ5=Jx4Z@HBz zhI|!jx9A8#+5R5P94E|=n(3ybGJ>97awbbC*k}827zHzYh zme*42f|r2f_;VO0MiRP2(5_cQY@*Qef-x!P#UYXFNP+Ihem(2(-}ow!i52&Hv>V=p z)C-cfS4%6Nv%JupryYD?J}tRk7@hi^>qk>(LacR9xlk*6tClEe`X3W&2vn+0kNRX_ zcEE|L&2G+OOT>k=JqLl)#rS1Ou@i&`Ne;59SL6$8ceU+u(;T*NUbmZ{fdz$bFSU^bIPYG$Rf3%PXO2?7*^5ht}Kxjy}VCd63X6q3Cz%V>VR;dgwc1v|F% zOV`xJb}->>tz93N_=1Ktb~_`p7O6B_)N0N&Azf~@xosE>`@rdL^P2Az1975={x`Qk zmZQ8~VS5LT(SZ>6QRr+ly3imPeAqgcT?a3NarLt$N8NpsoW1ciO}eh2J)%ZiOFw%1 z^_F(n9OJ;b-9Wc*{7TJ>Iq~jdi~JQ(iVa5!YO7cxTF?B^+2O{YTQ5ZF zUbfbUBVgcBC1mUbRKU)83q5A(M#^ZdPwOK~;}CLu%Y%EV!Hjpw#VecdRE=+lrY4F= zrq(=2{wj9Pat_{hd=eP2Iou^eXUjhdj%proja0|eIH8BJPDh&U71^^)O8>^^_Nt|! z0D$Fi&p0iW1m}`rb>dT(OSdFEj3;VyCp%Fe$2AaCQ_w2_i02OlT%T;ljvfj5z&HuJ zVkKSh3D?`(uIX(J34q)PDo@a~R3w8*Vr%d{f>irmy_w0yeCa8ied6SX`&}Fj6_^#E zfUJ+OM(>OVEgr~9Gb)R3^qD==VtXt9go6GTO@;G-{xyw2ci11eWP!>wwZC9#&=rzP5yhYQea> zY=_*e)R0K3esxn?Z+)rZ+?xN5M#LoEMdZdWW|@D>e=;GPpTK&gon{XlC_{nV$#s!T zP+elAvc(oOA_Hu5R zb_c=(45u|Oy$Vx)lZ6>3zlP^^J<+5nu6VN0*~kh1HB3e;*&^`fg+U#7`f6YNZ9Det z6;HdkepEZceM!Gfwe4+pNs`f!;0QK~K=H-232MKLwPy0@MO*6dbf4$_)yqaD`xEU9 zbr7GIy}~=wLlkIDdBtJBeiX{(-~F?2uj=mgrX7Fkl8&TYQeOPs;TJR6s_oC!+gpEz z#pUn5*V=N+NX0L}aAy|iadGG9M{WIoKqErY9f=79jBUrwojY!Tv)Xx)9bc^CGOmI2 z<4*8SF4#*d$7^Cv>}32DXzVzr^ZyoLBm%+h%XMrT$Mp4<*Iy0kWun_qqsFO@RqCwq zzf$I1Z8N7eHM86>J*gSkD0*Fw6QzO@&}9`XmBpWyTy=VX9QctQ+}K&xe&^4osl1r9 zWix7J{xXTf*lw+IP*h9bgXsy(3#9zle`~UgC;^&}H+?HIvCzQnD`-9MkON+34k`B! zc)y@b(+@oC{7N;I54p2r;672q`}nC$j@L|Fzs|v&f@{}C?rQNar0L_h_4ux-Bki0# zER;VH&N|h}8OL``ipAXm@$7)DqM8y}%{M^yvC(v|D*D&S2%v?9%Bq(}J&_a#2# zXSjLIUi(N^^@C1bEdAbEwUF*Ey6yY^_E9z3Ib(x33A0fUK%2e2_Mh8*6cXdazMX>O zc<*1wi0+>3_{D7IhjB4WwE7NH1tf;8R+t+HLdQ#MP1CR@-$xh1e_+H4TE%b)R&c5eJJ zu_n%~@Tl=;-_90;9)ONvl2F^rtH2vRkDeF$0b9_81+ZkHy@yHL>w)+%M~bH18l~KH zAsrt>Sb|c?%#qsG&o4mKlK~1av-PK2|G80Syb@Tkiq5tfi>xaNtL>H2`LKSdySF=R zBc7H&-3$5x1tGzTV1O!T2-WaH_Kh&3Nxdts;pqRo`>~5cDa}D|5mrIEvQ?f-y{kxXIu(cZ=JE@Al+ECnp8O`g)!t`2GPl@hbzZj#>m1X4_A;p$S*n^38t%j(b*r*Gyy>+03CbBFkW zqp-(1sR@=nHOoaWP8?%t4apL2W$NgDsmD8(F;_1Q8BC$&N3T_*D8xxFrEN*MI=baJ zX6;SFG&VVreyk?LKTNyTndk0xQUMGK*}3h~tYh>ghqm0S{>G20MCVn5(o~4r+205# zhB$KSq-Lne-r71xPBukDh0?@XL1*t~&eYspcNc7Vz)>NSiLJ&pG7zl5m%m}A70epX zH;Dbw4)ThpXPrS3aCyekwf-ZAb6B5Myl^|giHeTtm{?rYuQ~G-y*guu8~>Y-zVSz9 zFX7DJj!Wh(5$LfIE66T6m=c#Z{JNKNQv=U;eR?5nc-=*hu6sFG)`Q|S8q#E8i=6}+ zqlMaQb3W;BRjqHoJhabo$<(Q=@sK1-1nCB4{jci2GpecV-5VVp2fLtvA}}CTDN;lS zAy_C1BE3X}CleRELX@}4y{(cPa-$CtS7 zbpsh$x}T56ZnNrZe$do&L0s9Iw%G$>n*#Bv^B17dtTit%_flqWRg4v-xZc~*pG`0e zYf>ghOw$EM{9Y^G@MiBLwp4z7T>d3<)6>a2$QM-`WpsGnlw7$_0FyQkv2 z#XCX7EcLi%>eJer&Prz9O#9`ioW6lqjgq%E+Gr}SyHpF?!cxDkjISreyegRYp@Dom zvE6-A&ZSmuQDx-|+j~%J-M}Lj<05TBFgEc|cF6|fN`8M&bC5`)6ce;fxC@ivmh?Ou zBX#REsms_Ql6Uy>1q+d~h^fGvW_ZO~j9U8RlhX>`L0-h>CU{vae&x*TKWa7 zaE)hL%Q`f7u|21rRe~?Pe8=BE23jB`XTo$18MoKpOj1i1hHT=MRkII=D>r~j3f%JV zsaxy1jC*mSU+GtSEAaqnn&{jx*(lRN{*eHGt)q!Y;_xGnBB~w8zgXaVQvxzVvbE%K z4liCU##@cyQtnLlSH1hsb8cSS(_~S;8m-w3`T--4<#VtOX?{*SaAtn6!Cp>R4x-&! z=jBl-RGNn=nSV~Lk|^*LhfT^-W4ZW|IT&Md`WOT7@ z&BE*e#b-A94m!!@$aKn~z6v_@xI!wJy)gzxbzxcs8x<_P@+RExfE^RgA~^CG_Ca^F z2~ZSbBbal1?(gMqZidbS2_o683;cvukl*iGUJscWALYxiZ>wGJfZd*647r`4zo5KU z_N*)bp`d9af1N{WQAOlS0skim`MQULcu$Lv&-5B5z-ujR3?8nZ-!p~NnBuOnX{^)QmkHt(_n5;wK?&Sv|N$yS@#nh(! zAL;Q`vns5Y)OD_6)sU9L9f)_|aQ^)&>E;5>S4=2fuS-40V*wgONrw2E=R*e4sZ#I~ zHw;a+sd0KyM}F$b`oNS&0YM&r?glD>bsNJ`N-SSv#i|1gPpsm6@uASi_%@nC*)@u- z_JSV-TUzIlCp?wj9)d9j8U_x|Fz3puta&g+{l_C+9;hft(u?yoEkld!>6Uz@YIk+> z#^m_-)!J_AC7;=HeQ@4_rg)zZt&@epc@!7#*96&QXCB=DC_;UOJc(>qq^=WA#Vw(s z=nlB==c!DpI$-jc_$cC{ewrq=ynwj1{C0@El5FP&ftV43ys*o5k(RM?WUqlo|2}q)kzHVcIY9;7>X*4? zIwYhd(W(598RN_$GM)uCbuqb66E`oc1xH?wa6$7o6NhpwiDCiPn$6_`6ozL0nJ9pP8n1u`3YxP?|++prvA0~t|HLxQ}37Y z^HUVdUrqPShm5c-lQq+7HpiX`2$*i$;dbEwJSD}zLe+_5>MhzQHmZLL7ycO2b@_Pr zpKqRmV&UdnpYKvOeEr}j3YzeoC(BkM{W=?-%A(}$7B?{0c9{Bo*6M&-+~c)Rfl}zg z1q+C=2VooO2tY`w{EV`Ex;G|5z3Xe2US!_Hv1ccCaToyEMcQ{9c8dTiAO|tvS6;&= zQulXV2kwL0rT|icbQT1+(Gl4<*=|t;ilkbeVrlzu^%>8>x6G&A;?L3{K-!8k@rqfX z71uqv(?n@(lFSg{YJQq|7bQlAC~Avzzrt$h|B6nBh@-v!PSVcohpdg9yTL|ZL)PJz z%g!}wkCw5Dofu6u3YDFlgeLXVFwNzxN(Wekm^UT)=Mz#~qJ<;=Tp(vdD?TPX(KZ8^ zs14$k$IGSEod;t%>p`xN6KlrHHyeWeN2}M(L|lJFFxu-6Og3sZmzdt1sQ+nYY(Q|E zl<8nevV~A(EWXW*x3we_K`6LRiA}Vx#kIMR3s0;mBrTH>SUMT?je2=i?^F&_l5#*_ z68&vo$LwqrH?mQEjnO>ZGB4n}Gwh+kH|b83T_ty`zrc5iLUr?x5}ZQ+0$K91DI<;f zAeH%6xa)X0p6S~pJ{^z9~E#uQsxeq^!sD^%J zpdC?!m})dUKbpk)(PA*O{KgyN0P)oKbo78gm6mcrQ{!PHk2WBDD&;iL zl;u|3##ZUg)_9vk3infBsC8FwA3G=QL76GxRGvsE_UsDIlVXcigZstgHRTqljf!vw zHf}UH0i4?(f)}77C$J(Yd$PLwR#)FXRGSaJq;|ro4F7xtj!iG;6`q({UU6a+@Sf90 zZXO07w?h%4nR6>lv{ut7ovBM7VP$4%6t;{Cl{;tYG?)wc0;1*jKvwUkk5bXd+WGpE zIe3!<<}YSOgSjBy`JHa1tkQHvM50b!OdYRpD0VynK-dPc#Y)4s~o0+U8kbcJ~hAqZeF6bNe1yX`MQ zT9y%CSaa;6YUKc<1aG5cUAh@$bXeR88Rw%#aSa&+&;m{*B64`>l~ntXNaz5T8i9DB zYzGw|1Sp6gWa^b<9l+7Ti9s_`DKgFVHZTtoz^Ur3IAT%CfO9oeMn~T_cBx<0W68Vl zOt`HR7NhGe(nWa%ivpna(0luQ!;Ub@a%Dw&%8OmPs2W5&e3u0%tau<0uW2nWH@lmXUEw5cn>KFYLcuXV?xJMMH7M(Q!;_pRzmQru(2h#hiJUVh;>> z(s7R1cbiws&b9bNE}y}4b1EV3%XT*k_UD*Nes38h#bwY^8+R2At?Om$j%;^4nI2P4 zE%%9bQyydW|4629EUPl~raBa3e3Ks~v9b~EuG9ge<7zpc5=U`9hX{)RnO)7ajSOlt zraV71dsrPyv(&{CphT+ipjwaHUW4e{O5Up@gb-|<3uxa9FC3+Sg zp^X{4PGv2kr>lO6AOz|u4u9&W)#$uKT4wJfu%D{{nOM z>|~)DliSsgwC~_*4WXecvCe_?_a4xb2%sk?xb{5*07wxq-+xzp>^QN-? zI1>DnC&1Z+kPc9iNoT9Rw@BRrIuANt(}UON0(IvxxL=|PYzd0gUi=f==W02>fU3^i zt$rK$l<#U=S+HyHbLzmww*7S6#&4l7wTYT0gc$L&K>9cq_%Sis-56(LTpKwyBY?(T zw^>ZL3#Sd@XsZ5avhd|Zlc?o0{RAoDCh4e}UK7wz#~ay&cW$FhTj>D^G0Q?o&PXYa zKo0Y8l|U^8J!Rgf#0=+&xtbp@wW8En9Gm6?6*xG8)@?Tu?<(!I$)pUD2#`o7OcO}6 z4`>@STi#*rO+Sk(w@V)-avl66ekmfiC(+#@A((N$=!khSS{#;r$v^uJ`wdu)g35PqIf4#!7YbUmK_EtQ3V@$=@Pv#oe6Vw zU4vyk$q54pROJVGOn1w8YkLUE9AK6eo=tgWjx_%?PY$Ms_j(?KN(PeZ{G4gnY@&eQm3NbH0U#4=!{3U*g z>VEI5cA1gfod4qqZN(SXNDv^M0YP&9+vuUm*gOgA8Mz9Hp@0XtGZL*b1i&_=45g=b zOU zONuP_zT|IcSx^s*k8s}IoF#&r1I&djKkga=kuPuX`j$92b$N<7x?&zwBWMEd3Vp9S zTD9&J5v%aIx8VS5u4A|9%DltKuz6zCyg{X2Y~Igf=819T!kgIAjkpwgFt4sZ{`PXr zW=Bg(Qj-RK)cBD;G2a3j;_U_X-LB|69_3O!@PTPwc??;z zKXx&PdDwMHlPzJnx8TXI;# z?+u=_eBnn;s((R6)B)%iR0>7#X_ju5?>K?v5>S*~RCU1Bi1Gbu=Y$KIAjkW6D(L^P z*ACZosYhWs+Et-VN9_AUQM#CxWOdA7Q}{Va2%1GUv|ueK%~XuB?*$z`&y<|bz_B3_ zV)m%yCZ89Gj@ngn@(M~)AyZ@*CE&O?QH7+38hMcL zK4tae>nY}xh69iVyK(Qh$(Jz~?Npn)>6M)gSDR(J^ii?CFwB(r$D5#yYB2nXA|X*S2k1Km>{NmItCc8bS?)t-F5>jj zNU9b3Wqacflc0UEPbY}XrI7)kk;{q>Qh)wt?s?O4Nb)!9P+(^E7${^nAHv*tTJh{X z2C{=?`}EaEkI`Qf%KLZXGQY+UbETU{4kYasIxlq5SsB7!LvPo z0y;^xZ@lh>NOQxQ+JH5x(@s!)1Q2C`-vLY+r>vMhzGtX%pPlL{LyKn3dvXUc2_PvJ z06^p6OSM3hgk_c6@O5~PfeIn%er`Pl*dF%!Iqe4)b?t@wu*MX<8;#VD;)Z}rX=k4;C_b4bm%e(0?^>J1)z4>O7TCc+XOAI5Jp|V1cyNmOD zt8$zgmMQ5f@4`(zpnhFFZn1RaEMYk&70c6FA;7g5whqy#%yW|MrJ;{N=6Ak`HyB7s z)(+M1^I$Ko)#YoWRKFW0sXl|RLxW}Cn5?_*9ymm{8563pL@JdQ3!d_vFIdQk+jOJB zRy#*495xULvMK6r?GJ3AxW&Ad@EYyM?y8 z%1UtcCI3_+YEpDYcvqIzB7o8yKT+jP{gKWp#;&b6)QtzObhG1|LIDdv6LM!+xbSRJ zg?2;fCDalk>F#V%FL&cbF*a$6TY*2e3u}*crPTh_F=&ueuD;G-1kdiBXhifL*xl7L(68 z{T>xn@)gY20mppS)!J(&c858TtMW2QO?3&O80rz&O(3YGMP?-BW{dPGQA?}~))f6h zY!B7)_+-j46E#HCrjk+WIctK~O^rBm=W7j%&^XQOP}rhS$^_eNE|IvBa#M5YT{ zzGCowYUQNarQRKH2Sj%|zP2*u&cB(ku^>3rUN=HE+DbgR6mV=XVRt7;biyAu-=yfG#PyT zV-59DTZ^e_nx=Zvp{6$q)uPYd)Tp9tQSGyAQS#FAK~VLg?3zukLIi;; z0?2D%M0(#J+@lgO@;L)X-kzosW)kHuJ}TeyvdUFUW%KWm-f%{&IOqe>oh7oZx4b-` zNk&&2`~$W;D;}Ow+AkH?)M-t>?4XQ?3~Nix7NbwF9EIRctezxef3-nPjM3psa`8uY zVj@08%P-?J29pS;4>FLQ+!*+7!#1@;6|X%&lkJ^c#tf+lgjawh?!g0BMy z#@F`#U{vqc=x(%ADo>wP`DS+M&MO2|U!_!K^LhJ8rvtYeHAY2t;sz$!**covj~YHn zlsJiYnmoAT#*GEF>;nLFP_bDhm_Hm&3XHF^EUZ&@FFlcb7T?$Vvex=E7Q&qu0% zvNhUIP*BKsJV+<4vzOJ}O^cu?#9U4?_czWuf~8ll>4|89Xn6|hbcw)TD+aYby} z+&KT;xTcMwu3W;6qf(llnz?2t6)VIHWgoBp9xaNH$JD2E7$m*eeo`2EDNHF>P*8>6 z`qbHUFWsY)@xeOt(adl!GF^_+AI`l_M69Za{+TrO3^r&KZCqSr>Ii(@LENcqZQ6P5 z&gV}e8Y(Gh$E5onEmEOKCt`Kmgv(q<8uOWkDs9y6#+CGH=y~VkFMy!Wwp)sw>`8T4 z=c*HE+TN%?B8olB(z9Q#m``&5drl5FNl5HKz#R5AVgpamJ2V@se!Bm8_cZEs_Bl;V z_k>%csTT#w8udpp{JT>gA{$SuDBYe_n<^~!v zu?s|XU%*`un7Vw>4elMCi|~EMP|Cb0zH5tJLI)IFfey=qSN9g0)5vePU}t+ z!}yM5k|3^gWz;vh)>qoZ;Bc~$%QDXy|YmYD*`uUrDwYFd& z+h(LBV2b6Z2%`c5%|J-%9Iy&30*sB{&mbI4fbPR(!LqCi7O~;1tVc@sokl?WOQdq~ zp8Y(VTY;#TLQljEQ04tKo-AS z(alFjpGsu)0B?D@l(QTCqt`zl1CjAQW0n5tUv}C^iQ@n;5i_&G>YjdYO)`IZ1r7U{UBdzEA|!cvbJj zY~1Od?_?FhmtsR+x}C;qiYi^@2=l3Ms(l^Q5i}+Ae>HQ}x?f!JzWE^}4$wTu1~kc)&uZo~V42*O~~-qT3liZ_h^+ zS^umPm9|?1?2sDgF?vtlOhw}oUx=YSeUZ?$*Ry2^UcRJ`M?yp{1=U99^&&@#Z#J_2 z;#zEia$-N$Hq9R2L z5uKDKg;K6ZCehZIm5*5(PL>i=30VRC znJ|pu>Iv0xGt{wghqx+X?qSRRpCKYe*X|nNb)m?oH2d@NHrd^h0PCK^ny;&N+cYB8 zToa4vJ$|&sT>XAAcm36YOtC$v?$Jnew=FMPm2gbnLDr?-Fw2#hy`;6xjVbqbRWGtq z@nLxlm!lIihK90( zwm1B^VI>+mPcT$ZnWDN%#o0Poy&1Cg0B28G2)&;x70H7&+jYI!u<1{75r{NJNrfXqNQ$Pqy1r1 zxj#k89zwq5UGf)g@2LsR9yWs*{0KZ847mSjMjxsN|M@fy|TBarKpjc2P7(PaG`Ky$I2`%U;X#7sshvuV}c zB~NzA<@~bpTZP^E^55<6slAH8=LVkussdju(yB^>`vFQx6RJDlo%ZEl6-%m`nu?WUUK8sU`{57XP7PamdQv^iT3>!DK zs>D%hRi|vmh;^-9N3E^HzV)XHF><==(6R>OABKz zO*HKxluQ)KE)`1%8=5gxY%fBEBIB(HKAdfjaeyzIwX-wo*Ep46w54bJqNvj$(FIj4 zmBGwwJ6iKT9K^^JQC?(!I(_IMI9rxCqHRTneujXv)uw-FwvXb|+(#(-_BO0#$eMd#KTFSm0}Y$L!obndWTR~=z%+H=#N0(0h7#iaV*JHD>Xk#Y#^jzKeqlDWNl zUCItOrKI>*Z|07<3OL*Vt9Rq8#>LxvGB=Gt4A*EE?emIXkNRMdUj35h0fXiKFqakH zb`mUOe?SP$p>h6besBDs2B&KAtKx;9IIY*Ak zHyiWyFi>}=kX;HYbJg*SPOkIh4&=cE2z9=1sxb69p~Xk3M>b6Mkzc{U)3~RxJXISs z@CfbDI-4F9`$sj${)d0e@t(BrYpq8 zbp!o2Gjfld3-&C)Dq2g{z4n@Fx*9Po^`)h?xL*y&Mv7R+F@H`!ON^Q^nz}q^O-g9O zBch9AOUk=g3PdD#+#D5)BC)1W8dKS!&wKF@w<~W!#6cu%sH@)zYfBf^7cw~MyEJ+p zPHm%!%KwfUSF8k1Qq25^W}or0l4c*@_Vd z=`0H&x3692%AdELzSuURCGgmT{~C}py-gXaI9&o3vX0-> zz3!fhS6L9#uKc70PMhMZt>eU2k-)v;qqmNM%;Rv|*0IT*sPoVFA%NVMkU-?$$8z{4 zi7(H!Q}}KPhFizgLL(Egw=aud<5z)XwvHVmynI^9vi9YI>d%Gvt>bqF)$d)0zy8_> zPW_uJTgP@XTSNJuHLNHyzdhDKPb@9wJC51_8wQg!cmecZW(1=JkkngjwtSNJo&8qE zvggrYw%sA)D~0;(3jHE&vR4I7oU&o$KZ8ror6xs6D<+pT{N*cZH@m<_jn!C})aiFV zQGxt3`Q$>rJ?_By@#R<=j5izV6xB-Hh$7}2CeM}fSf!pmAC4P{g*}`Z<*~*Y1H$Hd z*6Z_|Et!SY8!V~^0q5oY#}69qd5B~w8a?}EW({}u-xrN-Rq5NUR};)Af;sJJ8zQV# z4e%|2X~3x=J<)i=b2=li1o-4uLT5}n0lQ?#&yJp|uje?%sMEIr*4ehZ-Zh-)tijBG z(XTIOed!A=RAn=A{__uL3bq6iRx+wmZdTp1WdJt^na-Mrjrh|3F5ZZD=`pREuW?$R2#s3jaDn6^wijmvZJZvAm$FncVb2_{j=gxrECOVxDBe16lTyStYOd&d5PWDo0n2$y5M2r7#PKYrd4aqIiY?#Lp%9p9 z1lf(b(`UX&Z9ZVYHakL7Kjc{_PX-R(4yS$IqxQNjFXa6C2pn6BqW0m~L>`-1x*xLf zSGL-3?KoHVYgQ3!?kxa6-o?UfYV?-wpqP%ypDH-`P;OR5VVp#$wf|%Tv2 zsZY~4X>(KhoGdHBiyOh+q+p2}ie!0K=U=xNldN-XOvQJdK`L?)9cBiA4e!}by=&P%&NpiS-{*qMN zqp3TJ=?G>_M-f>Hi7#1MFy3^NkE12O=l=9L+u852-4cC@LcGRAGo1Rcfc>|jQ5#6F zPY<o5$22%I@5OjW{RRDcbPUZ~%CypG}}ph)ia8C|cfW!b-+E>;bTSzqy!s-CK(F zHJnx(2!ImM4$+eMX{4JO**oJ}0GL4pfsVcM{AB`7YuO^M%GhcnW0< z7P6uup5^HgFlYr|@%!W3^iUrqcsHj&hiT1=zp+F`k? zWSfOBN3^}SJp@bigN{4@DQl_h<2AD-T(A`Z*j5^XCk0PMm_&3ao2So^uwB2?#uE8n zeY0$FxgGwn+=Xr%Nnsz}vi@cZt@T9Q&C>mKan{KshSRzc&0~egDk2tQ&&4qtP+&iL zw=*a6LU*<4m3FC&rv5;1$~7`j{m?5BUu?s>M8bpH9pOyX25vmmWobpfp-LpJ_UYV; zG5JC19$LuJocxZt;f}?3uEBqe5Uja)ws|y_L>(akF&?+QT}uCkOZeU0HbqzDlAZ zL^gflS!IYa_tZ1l{c=M7QbL&$a+J-rnmlvU+3(`)8N>6Jl@2}nnHApkqX(7f=-uFtYA!2% zQ#o{?t@P0!o5dAfg#ly!L$%{ksH1j|gg8=WSS)-= zqe7v|Y_1K|a`La&O~e`(@iv=g?3t~V^QYkB&htKW6~_9ygg=V0LDaR@k5TEl%e)gj z(CuUY%^urUS&^#a$cn*^m1pMnM|H*#=^p}J(oP@N5uSnVd)sXyysVeT+js)AGl%H0 zk6bk!`;UdZw@bp$LIp4Tt6bM6tCUx}soHn+0xsl`{KY)v+N*~V7ZZcpOr5QW`uNf} zn0Zju8URi!*nxS@7=`PEQhVD_c9W5MrJpT7kc$Ks+xupNG4?^SuNax84QH)`z%};e z+RMao&6&>et25ne1tc@;>}z+_j;yb%&@`&M9-JI=b|~SToTjKS<6XUroAT%dDk0ly z2bALP`ls=N59HDdUw7%WuR>di!)MP=7P4&YnB;|>PILdHfog7jM~xb`-<^y(TcY-7 z`g_ckK6B;Kj!$kn!tdD&bwgx~`Db&YV9EL=ld{fdZ!i+RBy|QiqmVK>;u57Y7?SbQ z`DF>#byfeDf^}=YN0YhKu}c=J_rbU9=5|(xR0LX?Je|?_fScV*0S1V+dvp*9GkHfC zeG$uZlsaOF6PG2;jxgeOqOF!=D7AQz_<*$@bh{<|DmT?4bmoSdUGhf%h*?(0U#SP& zSy!9SOQwk=p7i}`BZWtrHvRiT@bhMVuB;uc(h?%AaOPjL<9)8bwNLN;*KGKU7^tuP z6XE_XDIY%l{QtUD|Kp3L6|tKC`nCV-l5X(K^i2_1+7!^_j1N9<4X7MHZ-$%|@h* z$y;wb79W6le!Q*CBUkA9am3bF-8C5Xkv)NRJ-Hl;#rqluZN1MbS8I}Ky{2!Z@le}Z zd~+6~2Wj8Kf93QZkEZMtty~QbFE?52(MVm*yq8b1%{CX;HH?O#a|B8U!aqAlvrO8O@70K&eHgchV*p75ruO%qe-D{W3 ycjUk0vD*`^@hh`eS5SA_H-lw&i9Z@&+2n=9t$nm8JM)VFj;n^(4N5NE3j06wNo8aJ diff --git a/windows/security/identity-protection/hello-for-business/images/pin-reset/pin-reset-service-prompt.png b/windows/security/identity-protection/hello-for-business/images/pin-reset/pin-reset-service-prompt.png index 755c1b66e00170e938c3094b4e8040f2f9ddeed5..295580ed834aaa05584d2e9d83fbc4482ac2380c 100644 GIT binary patch literal 136146 zcmeFY=RaKE7X}(3O0?02M0BE!UPc!}^dJdF??m+82?m2iiQW@IgwaMD45CG%2GMIq zH%ipe-O2ZNKllCx_jB)y`(o-jXYX~^Ui(?kUi&$5de7C!??1eM=gu8+4Rw_lckbLx zyK@KMl9&+pk7K6JE$)NFL*3Z>&K)4vzZagy3(mi|Kk>X@s43s68h*5e`$6ESq@#4_ zPHhtDmG!+lcWE3oRFqx?;O*q!Lpi9P_iZfh5@eWXKw4T`l>m5gie;?q)bV8u46rhu z>G=5QX;wmZHgyeue}6D3>0IE=QU1b){prq6Y#Vm({Zi(L{l2_Ns6*IBpu@TpHx!^u z%%(zGZ_p;J@qz88u=0Au?*?0W)q!bhXn603I|v07^{t#N1l*3aSu8EA-nLEN&Tobn znyf9pP&)4-6#^;P^uX|+B|ZwQx%GCs6&t)|6(l+@^!s1aLHKdE+3V43;zFF6Ll^>(>@pvrrk<-ubASWDW&%$>jzW9w?dyTc5wU z=(-WJ#zqy(hsw+3#r9{~{Zhru$ieh~iP!SprZ>=)W^A zKo)$D-M+tj01+rW2(QMRpgEt{s~LqX-P&eoXy;O={&!DZ-|!Xs7@5yQ@7;PUuMpe@ zAN10z3AG)MRgahsMP>aC`R{g!Q+gj&KbSKv6Z1s(h`8|5LRZ)mKwb>D!={}a1I7Qw z4Eh5<)BmhD7)g1bXgw5fBk}9YFI5tDKLES@y#LvA-&(X}D$(_6EJfSgZL`iL+_>&6 z56%7{H-q$_$B1k1XqO(xsE66_AMVawV)sYsq5YU&yN4Uq5lVbBv#s-Xw`^Orv`IpZ~Zs4L3gjs zEghGwg!sO+O0QUYy7kKrlQX=+_<;vVJMi$$J9_(?XPy!v2eL?S+BeM?VcB0gPfPw6Xh1>gG+~cqXG;gJDR&7W9wW0(X`=<@t(cCT z3+stT3Oy&@`156*{LP*mEFK9Io>i9Q22vp(kE-^<+~g=Pa+2IOHhle#>-?CxzTb4!2F)D` z!XUFuC7nd1ZNHO&eYanMohRXco1n$GX}AajrOA`24D8I*ncv==8}tRL=%fTFEz?GK zo`+on%@|a&V2>}&QKY`MHeQFTKleI`SbRnlF5$USo<)pe4)5lyqR8hF1A-M^I2Vp$ zl0WWPvpxevLfRL@E?vQ)7sub1IG(-pNDyp!4Tw}VR2k0BQrQ7eU|CggP`HUp0b7KW z%#Vg?Zn`NIcPv6r44TmK{4EBC#$2$+#=INcjoR$&LLFCL*v-#LEmIc3Lpa>ia?7^Q z@Wi1Md88<5|4ZeUxCyPR8i|OFR6k$3z1b)TyKn-(`OO2i?t-!!E?zET3I7q^mfSn0tP`si<6+ zoPGV-gSmon1GdsjZ%JnO>txbYh*-0hHEma*X&$}TaeKr1_-iaVcwQLd%X`F?0Vxu( zk7)TkoMGzL{P!*^ZmJ#Iaqql0iisZ4tVj?HCyx^ph(SRL_p?4_i%9 zn=jT#oiDGb+KwT6Ky8MAcJIHPAd85z_nNM;c3beB@*NQBK+(*gaQ*K!ZxoQ)grEKW zqr_t)Qd;mX(=u$vJpB4(FP^`OxDV$`_y1s4o|&Yd`M%9)*p52^YveusxR22K^s%r$ z`(aYcsPJBU(%+{XATCZf({0#qI^-Z^AIx+kGM!(GUET z`0)|g%?z+on*{|gg@{3-vo&k3Pv^kv<&$xiIFR3TQ`bB7a2U>e0FMPBM3mw%!Ph5K z?vRJ?A!Tx>)3$p*xeLj>xz&=GnYudH$ZNBd{x07IgQceV+|k{kjMao2c>=T#g_jrh zQ)nK0_Vl5>53U=P7rGKh<|gGl^B(V^4JJLMwt{s+=GuTs`C19h$DWtqe1*e7ky1jd zU7gI1g@hC8PZ~3I#C$q3;r|kfzgi@MDC&t#@WUPwQg1-&U|`Q~|2}_Z{fp8P%zN-6 z@t&L6%A9MHIYhim1fIS%F$ekWvGzP$lnc%d&I~Y_*2$F=a7pbp)9UKv8d0X5KNvh% zwd~;}4Tmg0MHXj^Q#1Ev1;cnuZQo0D%`21U1`yMCYMB7w#FBg5E(EnC3c%)Kfy#NU zv!3^5_Zkm6(V7g6UGhNBo?hC>gO$Em(Z}Yiu~)XCoFR!Rl2uPtUX-TcZ$*452;zf; zYw#a<$sZYNaIbZW7)HL#nD1+V=5w{+Km@k;j-VtWS+i&fv&eY6wLLmWDCdy!6lV2F zF9~hc(@Oi3oNS!M&{EJd+Rax|}9!{IAV95Ef zJSdMX6#9PoDNOVWt-l2D+1}c$mQb5`@q6cKc9?k0-}Uy(z1-@nU7|lQ;r8_$XXSJ1 zzQ#E>%;{2i`2PZ$fjpIzk=12C|j2CljEc)ekYWR{1Xgd z8_cRgWwW{9(#Fq6WxZ2z_UkF-z1qyhi}iFP3lbXu)%QtNViQp5RRR)qzMdP!^Yk4% z50$aX(j9&zV)Gv%>vb~-3~(IgxOA-O$B3MV+wfDr49y)El5idUumq!AW}AEEhR zdL2Xj^Jqj-vA8feuFxmNVLeGy!U|K_M1iIy#;*;=0URNzkad>oSbqc(&<^$dr9^bE zqEbhK)g9(D_JkP_2Xpq$ep%HsB2WCvg3yIUud0N?MJ57AqDE7bKSFV-`!dVk?9vO{ zdRk&wc4EET$X4CjsM;q5_Kx=+|I$MB^n3HDMIlHsAQ>}dsH4xmM2Ib1Ck(n5pOu#% zfPFp3YD5Pmo|GY=$&d#{!z2lkn{f%{4@|m;5vUD+zrHtom(9V=xhtvCk(ix;0jNSi z%RgMZXq}=`%y!q)$@aSL@{E3fSvlj8+EZ=5oKjt!QN%= znD49102{&qH$MdLC(V@2ZV#H6_|2Z`9klY2*MI=y91|O1E&4nEWUYfm;97d;m}U!A z%HY!lyHuUX61vgE1}bMxn>1&t7zi!ZKykj8s>=uFLv>>->1S3sTKV2ED*_&LmJ}@E zun&VZtfiiDs7QRx&0~=aobc#)oea$SNn)cf-B@G8m^N1Dd5Q~8u`AS#l@@F+4jG*jynWn(LwYc;;f{oK6;I*Mw zdMA-RB0`Pg{)JKB7%2pk6pv3$#G>OMn@Nt(gF!e3NYTuJ(JVA@SIiGQzs4Q`7$E{BCVMA4z z9dw>TcBkfB{A*CroJ*a~)1DMXIFwk~JM>8CE`Yv+L^ILWTpUo0>}Y1ukNstvXa{;6 zA@22vZLk5Ryw|O)AqVp|m3S^C`9+LS=}kiH8F*3h$2RNDyU+io1x@n6+))wMF#M8a zqbj7knXawMsk*GPhPzE+sJSHO#9IwMI>IDnh43D^n&xkEZu7Fz*C5vyc8+w$bignj zt9ZljublW>!x7L<2 zq*9UGrvdwb9^*N4M5fE7_<`adzZ$ou0RxQ>;}}^yNgzboBR?95H%Wz1!mCVL=zjic zIm-|Tm#YN0DEY`wCul^Y|6L8QmMLD+Js_z-AX;Wllb9{nLjHNdj_LMQuEfL>8(dhc z=st}cYb{wi27bSlll!R?;1UyT?W1TkuqN-67#xri=7tej6qWXi^j;b9+>6_2!(8p< z#Q(arddrARqjXdZcb3<;PLKxZLzt;DAUH&Wa8OCXSl4ga&@~q&m5v6&{A@PVc+pnM zcD;r__$HsjBa0;(X&=I5hdJOb_6^oH0|d-lwb8;bF>h~M^PciJb-Q*>#WW(I_WU6H zev=1PAWXBW_r06xBYSJ7F0VJFo@ZZk+?yNz5#nc@Jo5N$&mPFu59u&$-RrE$QE;Cx z@1C3I@p&D-zs_7AN!d-RDVOalZas&Bl0Dir8!}h~m^OGQ+D7!azHun^}v4BS}GuvZmj6|DWn_Sm>~f$Z@e+dp)sTOTKM zi9|a4LTg{S!P3(=)W@Q1EQctr?6L zO3Xx2vpCsN*r7JRlFh}AL2Ksc{?S?dheI-vZl^Q$Pzpg;6|OzoxxJX?Fqpa=vo^gjeiwDgloHFT@~E_FQR%f! z<<$>01!~|yO&3#>)LwWPj1&wm`XK!Y4(PjfJt*nr1X_-%nt6s8fYNIXQibbEnSP*g z>-(ZFY)Ug)*47k9Ja|}fMHqdeZHWue^jp-Or)O+vfFV(gZ6Lhfm2*;Kn?50H$c z`}DmHJMXOv==Gd_D{=6h(VgrrrDqJ1BmByZF}lyHx!1;tF)3A2lJ1KcAbYTvGe1N$ z#bex(;qKuN)T^$(hyC;V{cNG;%}GPk*wXCKPMH4=~eD0=t((P z#yAnu7{e4!bydu)x$H&<>@&@QDvv4cB%?0m=YR%Y-sTy6-&l%FV_q>L4lizK;TsMB8(MqB@zm7!Dtiud;u5=a~ znwxPXt{{fMp7LHqRQh0hetyFVCF%2;ezpsM7cswz-a{x&5lu=41%K%9X$pbl@%Q(` zO=TKHxp{N+E`UmCcO(N%)7z~0ZZUdXl2K5I`ymm+kt<9EgRs}Opx-zu@VNPPJ())o z1vf4DIU~!AM~95u)rktTRP;U=!jp*gZX6n9BWVDstvd)UKo9XVpm+*50gDZth*pS; z5|pQB?B_Gg!M5Mwv;1VYu1@&^UeTa?pngXcwbk{w~)~wqosK$-mZsyHT!}lD+aY-x$a2;OZAB?_TjmkZ?xfOkD zL(=Qs=0b3>iG>a|v33FDLmyV$kF!!f5K z>duRHY?~1DJy%jqttd74Pl_9;DorV94Gh#*z}IN06}KT#%|pL%(Ekt`&ggQxu95r1>8iBbj~`)sL~|gtg6yPe7qi0e z<}Xzh9h6+Hdt}F+)rYgY zsQ9^Ij+n#Krut}M<49hCfR(m~D>b!=r5$w4u~hDoZq}^Kws_gYu_P)9LeJGk+nn&; z7*2phvIK<^@I4bG#B?sa-~V6Bz7OCLK@6#o(^%D?7SC7jx%n4Sy7Gn^&gp+Ki>br5 zVh0aY@7A~lYG~t1j+;)e?|qXqnbDNdxGf3&ic3qxqp``+V`9#Y-tNzj_&nnMk0{)# z6=JFXNO5_J5lYibb~qj34dn^@E7+Z-eXbZj4#bXRuN5EtcPWm8A0HoGxYkCv?yYsY zR)y-dNl4eFN={XWqf3XBNiQym-gzYEdk{{X34*(Pe(f~Nc%5>x{1PwZ*;VDi`3P1J zK~Uldr~goB;rg-FJ?_SBC%Mri(rbIC`3OD97?bWr1%AE5*8XbB-;H%{m6k;F)ha6M z%rUXab2w*b{)f&L?@s>z%B!0Xj?Z1AJ_O$8u0WXHNx^-Ce?^L|TYWu_`PtY*?oueG z%iq`w3GB09nmGA2#k*ZMwt-d<*)KpKUo|Nohs~}J zW{Zs~?nLGH*uP}5G~VD}ceGB^N|)J%<5hDvCV}u$xNdUj7!KsA85d&VnOhFCPLG}$ zLdxCQg1AFXR7#2J*h%d&8blXnW|yeb_g^%TAqbwOsMf^`|7`8}j49K6IM%VTkeOKp z`jqJ_h?(X4Ltg?GqEvMfAnh=)<}=|CxEk{{UwfconM(2bIRqCQT7`9bjiSl+=1V(s zAs4eK;X{>IDd{{TU1@X{j(R1JT5PO-_B-p}9D(?s6<7`OZ}15L7d&eO_@W$mNS`Wu z{TWN&6&&cVyr3`g|Mi8yK7|-VTz>zn1Ho&xmlHV#s8@%)e3%Rhw}#mT_@V)AQ5Hfx6()zXn!x+7d>tjd+nZ9? z&;qUP@xiTS&&wg)74x~^g-@IN?B$KoKEai<&t!AUN1*y8%>9YiRW!_+zo+L^R^TFJ5waT1<$v+#m0~Zyd5q7 z$dT$zhHB88CdkOPmrpJ^sMybl&F{2@MmubyHdW>J_hoSV3ZucBG?9pkN-5)mDd|PJ zdV{RonZY~e1}X;9lVqx0yZr3m*5dqV2P-fz45f~k2-YU7Eh7(w<*sg zqqwHTsZZ6vG;fWL^XS`tDd&6b4V-YOxPKZ!qIR*MZ4;ONDj~$(3C}7+C?*Zl}S-_-1%{nZun^Y!{eHWh4%5lKHn+R&UTJblGr z?1dz8sjAvyt+;WNR(>L?+_^zpPV(hrgC8_$2OS2{I%;}GD*ixU(25@C_Pcrs;nG2N zV}n5>9dF~-YIfGTLt~)DogNdc_-f+>;7E;y=P{F^9NHn7I2;4B$aBN8&^IV&- zHqP0GmCKyaB>aXSms+wPc2%-_t#~Aiy#R(ee&F`X4Lz0Jp5eiya?oeDf?^lX!fSBadGtxi1>8Gg9zZu61lOdriYH{^{=ECL8@ye z$L{>Q?fpjb$2jgWvM@ z=@W9;vea{HFg z@H$oeP>Ysw1sc^q_R)+i{1D&4P`{hA(EE{ZqdVsi9DGd%z5m4+4_y@|}N>e?t(;0TTAX>f4xWk}y) zk7LDZTrc~8-Bqw!V>JBiFwvL5-UiW1+%MH$Zi9G-%FH+Ha!GFys?Hy!pOCgVK>>;` zM=@YA_mf#sBi;NOL=}c7;fc)r84fiO!!4R7MEcr7IW&P3n+2>^r&>*ivrNWeD-hGjjfhl z7m@6ALN=9=FH^Ujx)=L$S|)Ywe~sO`MA>qEL(?PVllFea8BwJV&1W{=HE1C7 zwafnfb*1PMkvKv1<=~)P2oUJ@3$gUR@h&*TB7e1{dd3lM91l-F4GuBSUaOqhsN*Ob zTdym~O)MQAP!rpT1}r4_O=-botIP3UYcugHk1m@V5UiT#`pPjG27Tmj`2t#$!5We` zZ7zxGLwv#wLsSod3#Py@HN6Ix@wM@kt++}DRr{2iwg+SEC7U7nHR!)GrdD>wz?F`H z*_R)zKWSS|(WR9%>_F5$(6`SoDjy35z5h7qWld+E%LVV>tH_N(9gEL(u1C|eRPX_0 zyZ~QC)zjlvQA>4%7zb4wxoLmZnc{_b<6GduIG?J$ff{nXM4JB{--!N1Ktg|YzkFa{ zUBRu-^wv>eq$DuuR5bUwznX$`<%=(c??#Nij#O>CLjen^792d|uY7fUIqlgSH{1Da zYBay(`8Crm7#XZiP%RBn@EP2DYCg7Ajb6l*HKx$%icKEDk5ql92Aj`9F8YSoqF+uX z9`+bN7^;t!8*l(!p;r#}RVOt_IrxPFyTqCHy1c@hyqL?|#cAbD4GLs&qgXoCj2aII z^B?AXDvw6&v>z{LwpR^`rh&_VR7;lP8$Y|W_#hYPVBC>fM15McvBYpW){oP7pv`TX zNj_kTj=ol}e6GDUp8Zd*J)TaX?grR3Vz5X%%TLltY3{+FQh~aIbMY+<<~uhOM`KJf z{nZxcjPt!_YS~@%5(FOGv)9BM2vTrUG?m}`@=lH_FFiv_XUiD_K_0?Y?XeP1)2}2r zP7}H+yv^xEUZwji(8krt*c7$GV2BOA(s(Ni$a(q2;M#)e>6H;lbyY8FxQ-9Hsel6$ zf3dF5ZvvPexTXIcw<*uAf7M`UPm<4<06?If)8#&WXfGX{$f9>Jo*!CgbEZX;#Nh|EI>WRg=dq~pmc00}3GD}VaWn7`dvhaNi#lNQ zaJ`-+qeEV15yGkQs*WJ2E^WfpAEEp(a1sl5EaE}IF|r63O!5R##)OVOLtv;&-Q))9 z=Cd0ThhR$8UV&4)NDRcg98xGV;FZ1i1Jh&N)IIW$Hi5uSZMB(azQsmSr(mstM_?%a z7sBIcFX6T_$g*xVddj7}uIz#gXxve5v2@=F9IAgy)zrr~wR+uN^Y!8d(9-neyn5~y z*p{WGeSh?5(?D?FfvA@c>ywerrTcf)SQ~xW53d3L7u)X#J)Gvf1!((dh68EN2h>cI9O2jMNOuD zlVE~{Xt~_2J#$3S#c+ZV@xLx35rh4DK9)u)T*z`r^;pLg9lNgpkyDeQ%#d$a|3%xI z04F6A&f>bBCn?`{$+lw(nQQ8Xr>Mq(hH7!~iO7yt5@=E5OTW;JZ}Hum+ou_-3oSgs zN}%AI1eL~U%P%Zj{WlQeQO{#dQhTE|s;TDc?YHUeUk1nYjo#6jr>2+IfBgE!p!|iT z>g31cC;8xT{{4dE+9KrG6nKtVMl--jL+gTz0~25_GqAn5lc1w57Ac`SZ&3UAi@=F- zhbhFs(yax52;~AEUlR9LV5-JZ@KFpX?O=Zha%j^}__4*XLk64HoHEw+=?9%XtueQY zRlO*Gi{yY!j;~IRAwfXhWFH7mZwhUc?hyTYrcE_)xK)txesu=SG ziv?sFlO9z$#qgnvjdL0Zj7s7+1vzw~hHYT;FoVi4`^jEWQrpo3sdp_KGEokN9W74q zi!1szSnnG1l5Iz(ypTC>!HQ3@C49x(x9h9sjQ9AvH81P5d_YlP&{`9!BEBh+S)~G+ z2@aUpJu{`V9{Qf?i*k7)C<83SsB3v#Kny<3$0OgU>iwoFH0X9-H@gVQFyOms)to7< z=Jjsd(Ek!j+wcXX<#%Dm@0r#{<|nCI1pX>a{y0Hyz;#m0yo9WB=WzDPqVzwqh0Ag> zf{SNM4&7fh4U}Gj;iw~ndz$=r%X#KewyH&<&tHxn$XTb-SuWNV$@!N$H}Oz1>F77p zrh8w6)Hw~&JP5RQyf%;JD|)QU(7TbKViXcyuo-vcIOSW?AaJeiQ~b@9KadwB>!>b# zfAn(Gz_MS%|1gj#!+e}>FGG&%rQ|gIb#8lyHfQnv7U_rpb}<6ObYa^8lavy1OgjW>5>^i3k;Pk~BWFM8 zI5_c?soUd^7rXX13Gkb^V~{p^?5p?t6mcV1(Oo2Iu-1ZV%rh$7s_BQ?=?4$V8umq- zq)X{)L^me~ZXC^ewP+(|L*2h@uC)uLM*%{kEt*~R%rR=S4-LgV3?CrNk%MC${^G6z zkiYRNN(+w0e#TdT=8KM)l+u0Dm`1dmCu(v965xoTim2mrc+Iw+!)`^e zJG1?oSv@gMkin0djx?slb`_N^9u0%F78A7md5G9l`o<(3hx6iY{xI(Zr8JDa{%(_U z;$PqlPaHtSuZc7HX9N$ce-Q|UYsTg$em0JWKAGvT$2ykO4YC7oEjVKkgui5pTHUVc z*QBe-5Zh&%rj;K`9jbp8?UeAEQ*L1pH+!Hl`%HfnZn`*z4$4d#tjf!(P8mpB#5!1( z@631cfZ0@>j~^--t3rJZQ3fMMbm``!*?!N?wq(>dnjVN4N6T4%;I^5aEpN3RKv(iD zmqS`)KDYUm!Ul`rW)=7QQJG~vi~}--{^5pF&*<|q&)ctX$9yvZ|2Ug8#3 zWBzgLb3d?>AhhgxwND_uF^i1sBHuo z1I`YTl_3wD^6?3FuCS6AZf)EQNXZ(~vMo>*p{V9*mrHOM4K>DQn$M-smViUejr7%C z-N!AW+7@w(C?b>mIKi)RBpcBA`DN-12R{QxG6hI#*?iNs*}$+Syg;|ody z73+*F(1q*(Uyec{_oEfttr}Uac{*c$`tM@X+LqG~Mrd$w5AQ4uqq;*$};BV(be zEomz<^oG>@eCL=p{-Q)?xB31MviUOT8n=PFB^D{_y!>_6bFx{If3fJ8)_gq0F0MDR zRGVy)&LD6tm3zBi#qMIi2oJ7Z^WAf@R@hK_GDUoRQ8u3a0P_2$+=QvFU<1*zJy1Uu zYcHQr2|KCUOo9T;wF-f0#(hVx4c|@1ecrraj~Hhn8gPJT+TWFR{i$9!(E4R~X)6FR zmZ_RAQx&A6&&VS)$!E-7$&*-)uGv0t_?L=QGc-sBs+yo1Y*f4|`$bcv{l`yU*gxT= zc6&C_*~oJhtz=H`W~h+R^`mGrC$aIP1V1QYFSJx)n??wtSY2q@FU1`NX9Yz z%gRnXy(yc@)c6Mc!?OaU`pZ?(0SxPe{xFyBpzrSx6vBC+$2xGQVWuy=(`)tj7t z0za`pe#DROe;n3yl@Y-ourCbz?z&F_+sfz`_@SGj$4;64jwx#<{SSRw``^3*CzfOF zNVbQ6=+b3+GXdA%;&wq#3}wo1RQg`7f8xzaHR-Ehg>JT~tN7hD067Nci_ta!Znx#H8Z2H>srafIPF{Pq^pDjG z^OR!|nB9VM@89t~;TiX86Cpg*eN5*saFV8?OSa4=2+yn9kKd;zVJ^>f?KAg-> zY{WPAm}Jx_TiV-UPr6_RwP8qH`*(9+1z)BX51$a}ApGa|Cm8eYCKYgRYiqmZFpau9qi$hMjm1ggC00> zoUazB7HVpjqMG;5g-Q>UxFww@LD&mSbt?(YV}g_vAnoHwoFaPlp9t^S`-gOieO+-! zq2`bry<)O|f*gOG&X}mP5hr77!R=t7Ow*DkcK@mL1W|vx^!9Q4ISF&tu}qOQW)K@A z;y=okA*VBrtsU39?t3$ig}#h#$WNEYUlez7dnsVtswzxfuQXsI-+$in=8)e1=6oZz zL+u@dNa0+@a|-^szkj+Ha9X)toDR>oX}58%<-O!A4~$bKUS+LyJ`}sKce!-i-ntw~ z`Y@a&{OZ81qO#GXY|YkF@%HLy=f{c^nUX0=o&cij#7hY;IP9Xix@d%bUTO;QW^ zvv!Ts`gnsEd|saA(znZ>PIr^AwQy6X@dD_Ymcm+Fas6pltBTuvGV`4LhbK{SCcy~kcYX~8e{+?lR*8&#zzXZ}oQ2w}Stgl-n#{P67pIVd`SwC;|HrT})r zYL=yb{nROtn`t}j=kGN6dBq&I*M?nO&XC?iu5?}d43c^$TKPvPS*@iT`BBOr>zy%H z?D18=$6Vpz#g6YKCOt;vv1VtvL4DgU-n`M90$KjO%UqP7zKfLZ`}EN-2QW9H6qJ43 zIeEltp1W-S{_6H4nayp#4NKwXx`_UQ6UP4&YhqVZbz5@X+h^qee#8H>&-=0zi4#*| z-D-P*-j=r)Q&GedkK{HQ7lWMr2Sxgj;a4jx);8C8M30sivF+IAy)GFHd`00PP8WI+ zbiS4uRS|r9jh*_&6~siWb|GxmN2zf3vGwY3V4)|DCW_Jch&mcj$*z?z)K{X5ok<yHW7Ne|<)dlNcAB;EYxwWVn> zh#$mhf(!KSD_ufb0ztt*G&=<$fKiV@&obaobTZI1Sq14J|89Kv$&*Ket?aJI0a#z7 z79yex9#$;Eq-fn2IAmh3nS+cCfE9Z1aG*JKx5&rGGgP+!;PAx-KEKYq$K`gYegOlw z?Y|yf|7pCn%CI)nwwl_(YlKEzYt;2qA<*j<=tO~Mzrlfj!U)5+Wrv?Wa;va6j&_)3 z=l6BJu?Vt;l_dRDmj&L6*nWp@{Olj;F>o1e%#1i=SW^#Vhr*%)zN*b}=0+P$`bj@G zo;!{~DyW0))7>hbO*FdNO=vAB+{tmmtR@|@>i#`jNs6sR{H^hz+}OjZhig0%uTq&W z#KH!1gUi7;>Uw^64&J(;`S!$j z{bh#utB~xV_0F}Pw}U4x67^%6{Lz6SgKc&-E6l;;O@C*ScBeXSe5bc#l(5|_H#L`6 z8;UH$g`VFZSmRsCI7(7(NKFYpxk1x+5S#uH4%n$5e{Rj9P8e=zQ3qMCYTdh!PY^X? z;#|3gL*c?@gyYAW`c#Y4bvs7Zu2m@}#kt!WnEi}>rYkHjE7KzA=k+?cgXBQ$8&07q zxmWf%@&2V>=>Ui`lSc$pVJm_nPp$$^F_upsK}XtFt#P)HdMnhv>r*aRT6uql$*?!y zuJ0WQSr_}HE#-L5t+;a@h*Kv=i*kn6>yACU)-(Ezht2+o2yEV3pn=8imSw#;#Lal3 zCP5qMc}weld+_VR)%@ltoczy_hht1tmb1zyv?g1!E0uh2+*P7fbFQ()se$r!X=Pnj zvUKO_byE11Z5HM|jFX($Xgj~d$uW=P_L1!7$EbNKwMSGcjwZAp*7>VZqV?ex4*?&K z86gTz9rfG;;iym(8Oq`~FCP%8iFoqx>Pdb;CggB#>86pYn&rs{ocLW* zY{=pcClO1C$Kf}8N|2u9G7;(=ja7c!jLU`eJR{r%0qoN2S+*Z03{3?Nia5js!xH5V zfAml)94%mozVwi0^-%W2HGNoJ#6;_&d%Hrg7fK>C{!5{ZQ+n-b-r8nF7TVm3SAQs< zKDg`@1Pcl^rkeZBaGm4gJ^2g|<=H|1qS=#X@gBWdazI4dqoB=C*}FZYU3R#{sw3EO zb$H${OVN~$fNSPA2H=v*h<`Qx$j>}<2A*R4Z9K2A zWqY0Q@^zubH$eb}Yox;Ogvp+cdd{2Pk2OL-WgkkrPw*#KF?oY^46`EhuOSfutwd&u zkb54w58;GZ{4!abSc&nEwKZC1akemMn-@E6n{>~Jw&FVpMt14^c@2AS2E*cHZQ0*v zNvg?B=L3SRgV%?d9b}W#_z4juNlS6D;yJQZ6~!!N`7E1J0}ru4LuPa@U0((}#G)oE zIjK5ijlWYM#*`v~aZ(E1-T#)0$e9+Hp88ydcU4hP2u=o6w2yUu?_o0?85dlemK97& z$~ToW$IMSgT2K>jrPDy3NHU(lfZcTup9^H0fTgx^*1AzK1NjwhVH3lrx#ELENxd;g zTSKX~&J5U_Wg4Na)~ZKm3+-tE(5e7=#&e#B(kIVf4NTdI46(RM-IChahqD`YpXlG*N#yf=)3-@z8{gxn@?O>t>6C5 zpl`xG-V)tO!0=>5?r3n?&*siGw&Rwm>he3dz4qHj#{)4Bgh^^ABbYW{Bz1S|ujfgx zx75(Yk8hC`_l;=q0e?~{=3j&i#RNQnx>_*e6X!N^ykJQ7aAId3G)SCFR3b>}=JRil z(g|=HdwCb#@c`L2!G>gi0Py^bBm0S+l><$|o~1N(WuKqaB3QWY*|N;~@gP~GXpoOK1`@hM3Roa9BFM%O{V#TwvTpB=_ z7bOC-uZTY~hus_%5_M`{z;2(iT<8Tb1JdgCXITQj?P|+VB|sy}I2ALDsxE)(hEdOo z{>=k$SGjCQWpd6wwpTGN(MGc1MJMy+$iCUC6z!-lb2XJJZs53h+u|CE%Wh;?HtII| z&d|S6EM(WC{}}GC3_vo>U5j)#lV$de9C;){Oys9$saMGHXBP5tAwZfOV}0P*NWz!U z;k3qqNL7BC3%aqS%Y4Z}&+SwB{Xkv76;5)>b`AB#iRoidVoXnnNAZ&fg2ToH-IxA6 z4g+Y15HXqgE`CTp18*)rmsw4IN-Z?_aF1VTnp#Nap&;M9`IW2nIfd9k)N+WRUUx#{ z>c=Pw&8xQ$s!o8}%Wo1p7oz53kHT2*S8NHgD7L<|mB6WO4G16^c)R1M zD7)m{-6paaN!K5Lgw$#CpcubrgBAV@7KGdu(N~?I!P;5}%93>oC@yI^eq&b&9pkwe z!^=CjMUzsNO_jl&$ZvtO3VROy5gwB`T6FIsn?VSWn(sIJ^$*{YV_|4lU13bf%?-9g z7X@?u9fx%p#KJ#h;?~c|QH3pM)GvxH?UhP+T(~sxZk|F6a_taU6wE{1hu`_6h{~78$7u1qVx>{Ud8x4_GpWbi)o)JIA`A z!61_Pq-b7Ou0QVc+Q{5mV4g=8$*}+LKY7M4hZdYn-OpMm+{EE&5dO2hfJcH`j-m>< zhafl_z37}PSmvV|*a+!4J?mZ*kaDfPwU0*4-e2Ie`YMd6Dglr5M*H&ljeJl*H(t7) zxE4&1^Rp`YcDnYX@j!`h*I+^G6^h1IzFj#915{HIfnA}o1^}!b@Hf|_7+gKXiPt;^ z*(4nsoGz)n$m>1^)nd#M(3xBU3KW^@BN zDf0-^Ny0rc{tVZl-nwq~#N$4qw|~F#&x!#Zy0-hTt-oRuH}OAaHx>+i|jh-F-BM58?Fec65b45BS}QD=a(;E8_=!mBX(O?CMIjtqQte18R>p6&v;9 zyTb0hIX0fp{5{R5L0s#R{1No_+>mSx>3R5(L)A*yl9*~1;4$Y;@SnkG&4jx$M#I&Ovv2l(a3r~qEo-dyH{kWi*vxT%2($?K*+*z# z8vVx9Z~5-iY2m-gzZ?2!;v$y&+5&ov#GBwObr-VA1vej>E+v*ZeYobyMCT))yp5nRzzte z;Tj=|5Xc?dQWh5tA3Dsl7<#8?Pr+{!k0D9$`}M}yA+DwTl~ckulvLOqFt2L?z343E zn(frlBM)Xa`!%T4pNCL@4b3Ne+yqw)d^%W);SlUF_g|10ly9IrGVfjRUs`y<@~xp! z_Rff#n5(>eFQ>rp;b}0Z8&qzMqFy&RqE;L-Jvh`DI3dZMb(26(LckUNatRf1XE%%f z4o#||k!P!Q!)9t#M$ec*W>W z*Yhp$wK%`J38%**fsYGGCBC8PdYkoD4|^}`_bX{o$tvZ+cSAnVBi2eMksp(SFxmBW zwi!o{{XDvO^< z5Xe1elyYjlTRVYpIiX3#g|n}XJ&d^PO{^X(r5wMf#ZQ*q0*ou>0lc;mhR@G!bB{-; zCm7}Lcu~?{RToO#+COU_jB1=EvMTv}ZS&Qov=ZzbT6&$eS>kGKeuY~_Jt)YBXg@wW z_2E)PNzK$nf2+S1qWXvmFi}(~eCR$yn;9klvN-p2_((Yz#{_Ui7}6(t>}54~tfY&) zp8cSD_teEzq}5nH;jHRu~;LeKmjuv%aBM0rZgDY$qDyZqT;}V z!zLf!`gRf|ueD~6@FHrW5jQwa#t5vlTCI`6Tr?;-Q}x2aOfBD3KH0KgPWNrEwT+H)&)ZPz(oIr+jcrnp z@k=HfPpiU)cTT0CUHh+Y3kI$UjTa15T>~U&d{R3m>sW?bgpyVE1R2$Hlzl=1z|r0^ zcKbD~n&aZmEXy^ykl0ZDiGw8rkL?_?!0Q>xrc$UIt^97*jd-=wuZvX&mE3#nFj=P_ z*lP)){?9SqHP7D-r=`amAJvUbeK9XQO(&9hNhrTg#-_Zrd}JmyKf>B`2L>C;v9y~~ zS{O;4X=DrRu`H>fkWZ?Ytu$t^nhtq5uq3^aN7E>dsI&!84}P{)l~&Z|x9XLieiFx@ zwQF1Rp*AS}De`teosl&}cIr@A3qZVdPn zlp`=;xLvDhS|2i6)l8x9%sALLS>=O-i9*Sbu!DSqM^qihJvO5Is-K1j5~E$w;3Rk^ z+((LOl&FU}-eESVZqiXpcIycQp#vyNSNOVFS5;it_)Otk@2*vT)A{=8Nj2i4Mg{{@ zct$*WuCAAn{OT&kHORx7wadU3s1)Y$zV69eTT~^zZ<^04+3PLcJKu$;1qYi|nGTHW zr-LH-Gw@*2jv#_>z5|a`)(1u2)=H3|?`n~ISD=MFt)%TPY5EzA_!5i&y2!BFwB^Uw zTe{&737-O0Uo8m6%Gf+<+9HGeAJo0~H=FYnpLACGk}J8M*YkP5-|qLvtj9`m zi-ip?oNSv;Or4UvVyaJ8#U4?SR_W?9BK9iIG&^RR zCwFy1*We=H&>5{_{^Iv|B+{C&TE(iWedj-5L*0`*F**L&u@*(Gfy(}{m-$a`w%?NL zGY$I4+Rd{-wZ7#ot9icVox%++4YRPqx_xCZjdzK6-#|p6mV<{Ru!CN!`2HS3coh%E z$NXS2dwC-VD!^tlb-SA+PawFOZtIL@P7$!1)k&?biA=eMX&En?sWr1BI<$Suf|M)} z(y;W}PK@uk$1)CPotgN-@`~1$)rI)@Q2=T~&sSzJoo}-ID7ciJ!rsoyuZ&8;0ixSi zcYFP>eK|M0B8fE2CV#X4MQTKptYuG1#?YBE{@q^uQK8r@y*M>8y!6urLHqCvgGmGP zx-X3Up%l_a9?8BUPj|U#elkpDKStl$MO^+zcn+uc+v@O5?72Ym@6VLV0Ek%r1^t3H z-+%I+G&AX9-U)$KGo}scVLmtr_mKnB*#VRtMYbMM(fNLGxTB#hM>0Fn#E!wX?Wboq zJ0nDT+Cod4Nb~#cfqQmg)JdjL%|M1O6!{x^K9GQHfPktsCA+MNd#9$^{VMycI)s64 zd)Jz)4K-G^BB_$^5rgX~LByLH>NW~W_&~bB{TEEH#p6<7o`^WxN=%vW?_eO`>C+Mg zBn-TsRov1{_o)UxB>rwb@>(Oe)^OoGmeFpl=E3|LNYz|B`d%tyvM>j0dwdkvap!Y) zC<0}fM?=4oo`(&bS^sFyKTPL3L#RmTFbq^y2N(vNvtWlmH{J5jnlA2JwKERcT|7i%1FdgK z1znPK4W10I_F8;~y*&%pcN}vytF3Hr6b5lL|F#i(wtlvMFRiee2X*$9G5|Tt!`8a? zc48tDJSo=P8g8yeEzTj3ANU%xzzvNnNwQYZKAX$YAz|MU5s3$B)!NyJutDRIJT<^4 z|7-8#{|%Abg7^yJdTqwVU~X3S=|BAUVm&ljwkowZT3%ok;{@%vYt&uGEC8Q8(p z8C?T79C=FDN8^nC(Rymb5G(FafpJ>~pwXbD{ziI<4A$HYz+Yg6s7r*}P}qDVG3ADw zTUXeCZNW+*-T^#k+JoZ6(9D3 zY_-X=?QJQvz!K`OX(Cw5EzJ@A1&}}A%t*IlqQr1IFPO1eiF!diVDQ_MdVPov=EDbs z=fFX?shF$NubKQLml7zgl55C>8SYYlw`y3m?W=B3k|_yYxnCaX{4Q2ov5Y^nf3Mt+dC)zq9>tn=J1^nG zPzvG5yf&4T^R{MAg5u`eG8%hICHx_~55o8gJI;gy+rS<&sWU}Z6iVzp<*(hpN6ct- zt})M?nvM7{SP;)-tuEtNUKUCU+*;XxUpz7n%I4y+Xr6CVM{!vb@ck&tCS-<(jokfF z3nriDyit&8AVcy^!k!!OwHaFb-V=>MXwR2f$cjR|>$B^$?}2>Pp0jHIr1DeJ`k-g( ztpCh24R@Pzm#%^4y86+1dzg5CP-DCP`_QQg z>CC}nBNVo2sFo}E^j#mWprR_*G&yz^cB~I>KQt}+b~fSof&SSELk<)av)8Jsn`LNZ zcD0((G`qEe{!SQ-w)X$l9#IAK!g9J?P+}Vk$xgt3||qd9uilLXi`8 zs3&k)@9_>&VNUMdDOjMrhte}W>MGxbJ)T6k`2MKZP^yG(?`oL=LK3nB!RufIWSp%B zHI*^Nw+p4HA^LsbFh{RH(A>x{`DOX=hyz^%?)8-B zqy|MOe_M@{b+w6&5`z5(>s6C~tMU%Q1yljM#H0+<**6yCF!uV>8~w*ah}UjKh_p!B zQu)65eX0~O%RFq%Ywgx9FN3f*-0_^3)7>lxk!T%lRA7mc^)FqEab4U~f=riy8yBp> zwjumja`31VaCo)CrAUcym2+OQkh@=C`?kVAW5g>n`|q66mp_J(V}vToxQY);s!Dh} zk7Gd8ybUPEkh33* z?0E=Wb*do{E57|8yg2H$Mv`p><~yw?=j12D|`z8}ZldWo<*^nGRi(;sEyKod%vtVg#mBpMo@sggf^KS}{LA*M)?rr;9o%-cy z{$bdd|GIy$hjCRy?!{7P&-^sfS%$EODA_&aa*jI~`Wf`#(vE+aSj>M;ox`QhtZC+! zP&v(ItA_3|At36Bi1%~u9MR{WX*-DzjN9$gE_x_ZE*e}W(p@z!nb-A) z-K`LQ0y*Mrs>Xer7Ny3uP33@BVDeu=`oc2qT5@HEYh0bs-DhzoR_6VwD;-n;E_87^ zWbe}cmn2Q6XVFk^%0((dtt(o(^{ z)t4DpX7wIrh>Gwz*}ptg_I>9t3pyHNwn?erjWoblr zx!!h~yy0^R49NwqKJN#?hy>w&2iZio649>3csY#W*aE2gb`?nU`@|mxxBy%U9w83F8>QHQ*0`?z2S9|thVKqk6_iFr~5+H#4Aqq zAKfAq*@*3=zrR0Ee5$dU6?4Yaet15~&%Y@E4W1QM^Hg0iQY+~X!yw=DQ0IJ__kWMs z_;A>C$FrID!iHOWgGYlIp8E3|blmt@L~VcLc~!ee zLyO>F;Whn$;kVz@ngIwG*(1zse3VsVs`&kDgyluvS5L>{MyHk^Xou0Q#h1v6^s;k!BF$nkhmx;r*)a17?tia$8+g5iYuS4u8dh&M`Az}f zIhv3r`ZoKPDGW|pH~+dns)aTM_VmMf@N13~0VCfVGbtkU5|9hG7XT@@F)B>d!1`l* z%fD;))9l47e$)VOqVibKDlg|~!6IcnP~0>x9=uOk2fWQj!29^pVd>z{y}Ty!M`81S z9|+2JSCAK|$xuCwQM+pU74q-8?MY9;8Q>a`)7As}d_AC3DZ9$GbM@9ISTMhGTaP;D zqv;>kVSKq7{O@uxrpX%{I?9_SmJJ`JjB;kJ=67HmEMN@fp za|F10AQL%MW9^LGI7Ax}U{o;Ykl)J#Hnr-e< zRx`g4@aH9y;pBqf2|FArT_kiEK(q+@CyWq9FEIy@w}JaSpT(i1md<< z%r`{uydL##gMY}8P5d!UQKM_{>oi%2RkoWJ@Ecc*2^Ii^)v3Uk{+^MI>#YBQCqOw# zM_@1Dan?$LE1W_#ewSps-HPCv)Q`}(N>JJbo&Es+$MOp@o#4E{gWf%#+hk9)YnMe8EB8G#ZpFl2)wTOq&I!YD37=EvWQZFmwt zw7q&|fQHX7VXnY6JZ5Dew+ZMpn+LF$j^mDKYRU}^&wGwY9AE)&xwTxMSO?+%0Bv7Q zv?<))UzZo0fQXI{Hc$XGiU2MQ94 zuu`VH<`0_J%`q8sDeAmy?+su*(H8=_^Bn@$&=3owX`BYKv#IgFXl4ywZ^R39i1!F4fTZ{rKu;X1`jZShg#-5fsHZlutlJsiF=|STgISi&KR3|g;&~SW*h?`ofjcf% zE=5^K60KD>+1s{yYML>JH?R zBwA9Hd0r0#^cj~gj5{HUaXEC)%s$Oz9r&RJpZ8luUrFYMHsOeN(N#mQr!2hUl>nyd z7f_hSMDpKv0C*Ua!L)A9dks^Iljon|1lFsZUcT8Z)<8F%{`lkbCt&eXv-!rFc>Yj) z&8~fSznjzV<{d|5t}>Zw<7gqS5Xr31^(V6~5$Zq(p8*(|x(O6q{JvqJz_*>RS2+JM zCGesrExaDpb+NdRyze^Zycmg@2LLVlavhn`5>)nyMh+~wSIN}v;O|}sO-u$6PHHFW z$Dx$le5?UdwNQDwO)Qbog>s4WcizI(u3h`vhWt z9OrS@HCRAp^?d8w_uF{?Pw}$1kQP9H(>i_H&HYPLR*90RNb+@;BB!FQ1n#NE>(fOw zHpe8p1nzD#(xK2gpaU>QV>k7wAq75>kb^dc%T6LuqiMe*6a|74v@A!nhEH_iuYdgs zW+X$9>7WY%7!eL8KkPj=BGi`ymzD4aM5*nB$w#k*qJq97)uz;yq0PN1<{!0!s(^+_#QBPNGi zRnMHtUSozEk`53JTzQ7d`?z))F1Jt#S}VZWA0{fdKwIJL?X_N-Jos*ANH}VU9FhIJ zfvBD7LI6g>#~j!XgCEQ=&_BQ`i@Z>u=CMKU7u@Cu_$_$~dBp)xAFVfh7g5Tril7NB6$)&$(=T1u-{(2_sM;Q-C7n;!xwTv<$Dmi@dW z=QEAAAQ7akaV0@1+Jm;Z8fh^VYF)hZ)YpLaIL-0lu$w<1BxrJ6kMe@Oz zMwVA%n$Yrdge^}0gP=>ELco212VXPQ(E&{dys+EuLOY9L5C)Y>ON>Vkz zNGg=MUBQsjT;CU9;u~;qV{V=N8%MgN_QFjS6^Y;^1kjKutR;c~!z|qAAcFJCT0WZZ zmJ5r`&{!y}ZPu%uLO_O0hs+vpH_}3nE-5pxD#xHSMH z<%loV+T^ye67H3`2Z^xRdUS`Afa)p5uv{Qfk|fb0^;L|ClLr%kEqOgO5anqkHKj%M^owbF+ZSx ztsbC|Ry2CxCOQ~yE@!_h{ke}+s{hW1hqVW>r4#3pwWI`f#Rzeq*S9`P;!!9sRCFlqXed(s;^hO*QC!yUth z2l^lW@9R6099e$Ywc}#S0ewN0m+jWzj7{(w$kv8QEZLYXGikoJh0!n%5QxxCS+mPv z(AGh=Y2T>39ImA*!U#Is!zEB1jvk%2x{ww%Ag1d++=^p57uAm#jITcTb$0bkh-F3l;GU;0F!kkmKk2H-B{GcCJBQ7!R=D&Ue3>kNPwbhu$B|c{Fvxp_Gb$-&!s=cBt zD%AI7T|6!ME@BMs6@=7S=6iS0MI`D6lp%Xl19t=$8FMH`7{0mWcVcUY(R#)WX@!hg zQz);zlMe46g|teQo75JK5G^E_62Oxhx2d2wp(R+| zSeiICQz(AzjW+X?^_oT~kKj4u_TBxJc3ETFeOw`>r}a1g^IQybCUa{AolS4Jf2W+O zIW)M4Rx*r$_qMi1nkXDg_7UZD-=9~4b`)jTexJa0lHqG z4?BEBCtGSOnLa~D@uToT4?LN9!(ENRa9bT|7k9SXK6>@DY?}Qkq66@X2lJ}_W^E7S z%(H4W&uZPjnn_h`9mw(gf?VT}0%iP9RvL^l=pi=qDu=^|w0`<|3`%CKy9P@YkFK}J<=Rj5 z&IWgCKYNksKrsQu?`1wk`QHcgs)HZ=Bwu5ldXy%Uxuo%!>*3fbZqk^NclbkA#;*4Z z8;z_XwH;!@4-i>YTVYwI>o=hQ!U7IY&cpCfn2et!Pi1Ggvpmwwz z)kv)zZy{|RznI+m9`~KBjPB5PX?v`TXZOE=;bQDw+b~)etJ$_6AMB~CuIVcHUvoVF z4A=qI1^07oI&rU~KsskUubBUHSf*>T3p7H#!I`G*h|KY3es_931Q|wX#uuHQ3nK;mYL5D>dpOA z1rRa59~P9PAc4w`gVmBGuNy27-}@?6)NhWYY+Hz@cGMVG@s1`aWC|le+7^wm8)6jO zXCjj)d!`*3#z*%tA|PqU84Ti2<+3CQd%W!Kby?}uF`wc~E%tIgm@J$DR^6JTSZho; zABM78&s}!VeLTBlB~u555Qmzi9D%$1nh$fk{Dufey#T@{<_O~vQ9buFOmUK%EVwWB za{3lUhM4DUpi!iDnvBF04VXPL3e~OXx>V9h_ZC!z^h@9Px>>x7QKW}>x!P)IT{zK$ z9?ViDO+x#{5C8cSF6o4p1yJGc?nEjSo$xUy7}sInWtltU-??P2zy#DbyRrZceRekiWB`=K2!R`j;DkusVeq*_~`appne)rPUC%)jfkNg%>~xH^480&i^& z2i=Vb<8%Qp?~7wtm|T7Wh%tMxt_%+orhH#qq|0oTa6km7*r}e_KWB=c-Lf~OwB6yg za;WI_QnTUXp^}JWJa_bwa9*i;S497fVbj5r&Q!+~Jom~E9Rk2y{a(5(o{Ao8DATr2PvM!uG*8m?`C^gz7`{8FL`^@x_Mg-c>H?g z)`)Bo?xUuQ3?9%Irfd+7>MJ>vlFX_-&M@GV6cHc3vs^RVh2MaQxdSy%EJwvTATl8` zm<1Bn;VQ;NEXp$``^@3HlIg6}lB6Kd)mcW{9SoR$R2Bf?G z2|gqFoR=t+5b~U>FzOIH0DvT(xX@uFSwOG>N)qG6<}&^7dhy?2U7tMVr6Ogz07>3p zE-xZd!@nq|jjf*+c~{Lf-3^?JKF_EWVAEzhHoE4Hb`n5o<5DIFH^4nbDtR5Z zWH-_oNyi?jB;SU(!nsSJLX=w(0be*vjHcVUW|`YlooSl%aFi)MoI666#fC4OrXr1$ z>cnM6C;d0uwhYgzJuM?W7I~u)rv&YGCW@2p3DV+Bgb!FiiDyVNp6@?N#bsctw2>D2 zm!ICzb`-te2*c8*vQKnX=Gg+mNv?i2CzrrQSmFY9*j$8Jf|-r^w}EC3dG5sx1wyg3uLwblGCuZXA#ea@#DZw3s zI3rmhPw4+cb;@&Wp^zBZ+;n8lUd#EQJ6YT^5Mr9>;*p#MO>x(P-B2&aTCb}q@Jq$S z#tc*SZJyBTq6qKTqCTBJs+A7lN@N}hm3Ku?cKq>0LBvy1_reZA&u8-n%{%eT8#Hje zT<$#DH$N%G#gqkVFI4g_Mjx{Fze)I?U`Lm_`)i_lQ+##$>#M(yzN?GA$aR?xLPZ{h zlO)VMoIl#K($;FywK6_46G=sAL?d!jZqJ>F8g$fqEACvtM(p8*!zUmp<6@|0)0MSIlTUuc6j7 zi?Cpjd(kAp9Uqm;VE8^WwwE=KVq6w&`1FqNq=J$u|1DRSO!W2ve)R>tJJpqIVf-=m zc2VpDdK4tsjHNR2DXl{E zMoPZ2WE$|czNU*#c7B~~6Gk*=$(pWp8UWhp_UF=_;-foqoTgHy6v1iM< zs>dYDbOgWxy9yZ&dc)b)nRx)f?C|`)sn=ZK^nxV>I0?Uz{h%cT5yl4W940}}tR=~( zUu`Y8t+lTu7C126i?jF8s`{@F(yTtob|WelDgm=FAS^m@K5rUBAAW}bk!o>}3-AXO z*8g`9#)nisVABsIm;V1hEyI`2Ykh!1&Dmk_!&>rP&mYVOxf!|%!#N7$KC(D1Ge`D( zm4I6Mpg45xV{ePqQxj!1vmo>51sgAbdZp|?O#HPqHPpb)!Y}B~b`cpBQxY;Sp)cdT zi+jFRh?h}I@O68=OwRUVOG~zDP(uLFn5{Ye>3;mJDLSi3l^=wCZ>1#p4Rij>3;BC4 zK_FUzqjMX`l&m?lG*xqU#Z+AsUX>c=Zb8iKXysg|C8plrsR@IQt&OLA%<1(@YZ4y_ z>>i#2Vg~fVK==}HNH-dZEI)s(wIAy;YWTDHaKV3t`gGRidp!{HY$(pKoTX-0{3!~> zH*5`TyZ{*krYi`y2qZZ;6onPbU4#RmyKHA{UXoq#x1BPVbcs%z0>&Bq`Fqx_)^O7a40?NWrr!npYQG3_8q1{x z;r4;8jh(thH&9^vnibg{G9~T6fpH_Xog00t0k~y4*gaYacLDXt512Oantc$64l<8L z!?>s`z)L#ewRW%%jUD|Uq(SvGYdDbq=U_X5q-yZh*`BRELR>SIF{lR!hq6vh1$k}?I(0bact$I&r9Pd% zC4vU$Ee`E=pi(OJ>RPbFJ6~_EO|GgqkF6yjrg8oKUp$lWH4yLg%DPz7t}O=H_UKD3IxA439ckb?^J4XTTF`U~r(clkK<;2y?!`EDqPtPq$J6Z}OOa zfPOlxS%YDw=Qr^92Yj{jfcrr=+i|1JMez#?{qY)75GW$w2IxFQ^y{0+0myzcSAAH0|@EPjrQb+qt(Thw;uHBucit;)%-`^) z%gGG@Qb-+(R0+TxVhK(Kw{Xw3V7-PFx1oMOt1a;CRk~5hcn8Yr78Jd^fY=J!9MDNE ztd=I8Tltjc2fqQQ04lBq<`poH0|Hma82$rPQjZ%6@z+CsMM#2!!Ga3l1cv4+KU zrmj@epoLaXZ*ss^7h@TKktE7UV(OQ9p?(GG{aGS*$uwWKlB+%zBtT%gSz<{q zfK06KO}G{mr?{?6{1>=Wz_TiFssF@X^@x#;{}sly_y1})pvNcq8iWv6Gv*QE#)0JS zHZYEW!>^5$5i1^Y-hUIX6J|KirLbhNB&&GbRajnyaSRV889f8;%qT{kJS*bS>t&h{ z`J4KadWhyv!0Qh;q?nSKlp%YDw(?s*I%2q%D&Lj4oG7`ygr>k|bHxXmqwhTrJazkqUh#xdQ7WHJ2e##Kuj~=L{(P!hTKv{_=Tx zOeMxunB?D0uy;4k>Z))q@NlrhORIk0l`FmZ^4A|Sjnj(6AoS7Nr>y1z=nqfTvYdmZ z`kL)=AIF^@{FehB9g9?AaeF{Z%5%vp#V+6*paGU;RC>=R&e7?K3sU4SPzm<|4uf4P zoe1g(&=nBtAnh~t`HzOc?2ep{Cslx}7$f&e+iBixtoNWpQt<-&DNe~7Us<0`B@-v! z><@lCA6HB+LYFI;PKEE_iQKct#4ZliC)B%w$P#Qnb~M0q%h~1h#Fw*Mx!g!R)8j7{o!(4_F$H`?@a=Q4ttAT1NtkWC z^))Hl8m2BpgJZEd{-4O+MN(An{Dru^+oVgq6WPv_ZxM6vy~_$C<+o2#v~AbeYQI_M z(&&310%;+KA{7N=mL73lsvIz9{hvbTpAu;Mil)XGD3=s{qSZgXOjadf@H#}LTsoOY z25lB+023s-zgTU>1wJlK)qq6CqI3^VcnM9b>B*C8Zq+L zwzAe#8&WzQsnweT=Iczt3^MadG%k?uR}|`e8Pw|h=|SYb%^sSsj;|S92sxI2dYKD6 z&$-#!*GQxGunCNE2Zq;k`gM;=9}NGfJ{k6@rWtE*slcqw0~t^{2xmO2oY*S)e~tcb zLejI0%Llwbk>YJ=-#*RWfcD*miQKaUm3`9^oH+^IAK6Dh+%oW_D*sX721EJ&+5~oi zG7@LbkPJ8g{O3PQRnyKixc1p?@S<|@E=}8VGfto4>HbtcXj+4Z$zLz!=J?}dV;Qw$ zIq%XhBKa&qd^f4t4&-75{{kH&o*VjyN52V6J%#MIs83a6D=vpqe@(RLwb!(8B(`k(^N9J_k2l%Irs|jljcRQ{hI?dDLVg{gWDb8u6ls z^?2BmxBOIQ^`C&+`GcNPMw7!|v7R#*Z)G`1v~Z0|Q804uCz@uwULrT5!z4vA7_&_yT)gAmA+Rjx@K9 zb+=ez`4{@w@{A6efze6=K>3E7zgv^N%Dyc@sI<@FB!CF8?8fN9LOmB1M+ zF5);VxcTYIAL49osmyOVALZMN6u+xwcFs74qa0j4%>Ng-Qg7HjjQk^J1WZRt9Lc9A z_Z(&1qv|}yt33Xw_A&ot;TZgdGtPZ_Aj>wGCgn2AF_w?}hc1iPcBV+wL`)h=a^SSXUhk}RPGMPkBe^~^ zSRJ$spLnwrM&6z+8E1s~&og(B`|cpND|kQ7N{0W7?fd1yoO(}Ka^~|M3+TdL{Z0C_ z@sLLlMp>U8;IGx)plboUBA_IkVu*^T9Hl8~d+3lJZkMMc{Gh%E@3kpJ;Il3CgAvez zB(~`xclwgw*j$8nMx`aS5N^{!#J5lfT@QO{Ah-G$rjR0D>|f-dYLMs3d_;BoH^=d-$`x6lKEYCuKgn7I1Y=>d52v{COYLW z4?st^dWA+MlgjTm;jnIHZWy*p#u!W}xjsFDNo2%5_%Pc#isx7D=UbGSW|b5%5*X~h z#S>H5haNdorF9)CKZS*{=q9OOp&QKDJjdR+bZeihRROgbSZV~rADWOeEkXCKUr?`9 z1_ax;Wq?kA3DKyXwb8Il?iWfK)V-H6b-2=>t++q-+`7iKMx5(UwT?b-qp`=;&Dg8u zB)=wUwab}d%}iy+ePzS;l9o^LV=cw`I(g#XlxC}ppAA*>mKcr9je8DgK6uefZg1cp*%oM;$C)R-K9Qn(QC}%U zs(EB)_c4&MD)jvJy?yrAc%{s}^j)PNdwv4|b^G2w!v$jiR2clDaG!5_V2g+oRf3gc z7iq#{8I$5ynxbr-_e{W0qG0vg@Z{*lzbAEV$&orl`mHglM<1k2aVWW4o=>b?F!W;)O@9n$^}2qD z*)+@(!$FuXjOKzNu9xW1;N}R!rfe}>8xjq+j3lQdS&QpzrHsPS^hLS8N-wB zoDX?&u7&!^T7F7|Yq(Q4biYdD%P06mU!8|ZDQu&w!tG;MU}K@ap~XcH zbCJf71AUIO+}Fi{6$DQOU;$`R>$0L|Owzco5HH&Or{pqYn90w^My(G$jhqD$ChwK) zmaT?Zkp955I{H3VeY!R4?i=_i#+RmA2(8UlTCRFpKOE)KOKE*v6e#~EN)Jyu66m9; z(ttFDqxCI}Sl6e49Rpk6Px%`QsyNXL)`t0t{K$e1{ke0)N|dkES8db^(xf73VS*LH zuWveYvi-TG7m-`^aamOofbQ2{@>?@=y8>cXeKMJnWI~y52myrnK`< zr^s(6=;z(Zy2=4|x*tVh0hNC<12AIa?nw?8lovG6Gg!%{7na-wYAM96Eeo7GD)iG5 zvJ5|jY#RLc?#I2)o}%H237)_voyvwnPJsR1?)T}ncrGpZQTSXzqI!klu(@UjS5DV_ zG8T8U(0l9v%{g=yL6Sh9iHnEP>jiUmx_|do7LoIE3zcI`+ME7A*7&iq3ekWG=0r_kSfP>6xyu zWduI}f#@IKkYw`r8*jqMEIvbCl%U)6Eb|fS`WsUvMqtx4WxM(%TS1!k14!MTP2U}= zu?Q@W(TRm5X#}IGx}JF>uSsUhyJx_+#1y1C zpAhPpsmd1i20(83HBqido1JW~#=XGVjMX9G<5nDNpX!Q3%3_xG zaJpjXTxTsd%q}l(00NiTXOp8^dVQGtUmzS`(smC;nM@swFsGp;uPfRicG}gLKgW88 zArw5QJ?Ak|B-l5wHcLKN3w!KkD8+8Ad@LzRZBo~gyG6~su0qvYRepD4!=`+`fU}B& zlrLlpEG!mStkxItS|OgqR-$)zyLV7?RL?U-{Utsd&3~;ePDl%(t@S5<&iSorCNb4} zndg)8^v^s|Uyod(a>c%Mc^F9je1+&pQ)V^dHLt?})Sb=Xq6aJ4@ixd+1#Lyo6NZWz_4|_*=^Qz6+3E!f#*e zAsJ$B0gx`-e&%)>sVX-6+iKVbw~(h_irTF7u*5!4q!kSZlEo};K4S?kxuim^DL(CjZILVo|yf_5o4Xad2N>mbY;*nY~_qpQp<=G6auH7_Ys$ zigEhFhsIVh=4#_Szt-zVd9KSGNg=hVZ{edHaYcHRQvwX7lAzJ45w<=yS1!9XVd8qk z{O>X=xY%u*xU_Wd+Q-FJ_deR?OW79l~EVg@xB4;53DHv#&l>Zg6kH-$CVQ{` z-;Op4rG_K*>H0cRsK`qN(8OWq=>whGt>$x8X?3aDu_hp26|AWc!6w_VTdYzk4K` zzraEeU3r}b2DBadAMT9%w<7C731i{i!&;7tHpSse$6PKo{?wV*F*+m*x%7|#YkPPY zIO5<2ZrQu} zjSZnCjEotnxISs>m(0<^U@)Br*+r1yI};koRl}U&=RgXaif9*LgdJdl5hf7IY(yjR ziP`_+Tgk=8vSn5e?j{_R>yGL$XB|cWOs4Z$c9X$iG4PQ2(kXt8IEQ%&y-T{5cP(0ZuU(bS51`P`+@=P zh5UpdQsz~_=Ne(I_7GX-s7NU9W3Be_txaSRlMcqqkGr?*Z|Tt2N7tkDh~12#W@hex zVb)AoR~lK{o8F6jUEDP;&mE0flTN1ELh+E@BP$VxuO!z@^qYy8j%Vs59+dHZWsW4= zX4~Cq!feAJ<33aGNGDD{;-X^X7$ifpA)cW=$tEKxR zB-)osy@~Tdq^};SCfEM4HRFH=*KN-^#~syQgP=8a9pL%6<++k?gFJs+P5~*Y0dPB7|Myy-)uT_{WMtmuA`#PPI0VB zBi1D=MYr2PAa+f7r>n?T#{-pdg2Rn}SM((AIvCskSy-{wJIbIc!wW{GfH-vCMG&Iw}fcQ?(2Qx^|?Cb#tU_`w7HJvZNE0G5qt2vYhr%ivt1dNx%nSE<~&`|nI1 zE}h6gn6buFMCJOB(DOaNSN}>vNrDi)Mb#=}7-F;XLcb9^d zcFp)0`=ZM*ll}c!r;VR9nz%lNgqRGH?7}ChrXRT8mcK9@x3kJaSb z4B|wOGr^Bgf2*ul}HP?fICKelHHt86HYBR;Jsa43wt?R{y=s9n2#7aff zWbj63xcuhRnPd@!S#gj=C$4;Lrt+^IXq1I6RiTKH-x<3?aws zIB|!%wg)h{Xs3?|@zyGL9h+#+oTInL!_!IWe#&iRPN7^NBJ-tc*PBa!JJ<~so%S*kF$$?5iuTSIdOvLI?PjClVo&-aR|2(I zG@`KsFH(uC2~Py=wg}TlZ-km^>RrcjfdEM&@t3u&&NrQnhew#Z$@l;AaU9$a(DXlS zcZkD67b+DCg77Enox>!>Dpk(ktges`t9-rK*Nj-Q{+-tk2Z=>S+)MN}j!vZ*Cdt2q z_7e}^I%NL%cJ5xDjd7akCDFR$i(gWFgpvb4snCm1`MXApmi`|vfi|)`?F6$ZmAO<> zah+6VJneA&j!Nvr{7FG|eQ~S4zp+A<9N!vST`UxEdOiJ#IrHCi89ANEZoOzluc{^#X1SKtTFSDwpG62Ctk?B8lCRjYDq zZXBbd`|i(UR`XJvx&E{)?{5kwcN&~2gX^};VsVOMCH6}rQ@gzgr<{9>V!L3t#E!oF=9`3m+<|_k z>oQT``v|Eu`8o7n4O^}IGSk$|q?#)$E?vZA>)npeG)GKX1bPURfry#jdW%TIi?<|M z)xwtJ6ioR8A4LaU9$5D?*5*}g&oI6}ae4$FXOYjGW z5yqJ2*&36MgkJ|bYffNJ$P0^lY%@j{18m?9(26GQqK)MG5Mrzz~i9x)9 zNkr+ZT6!8?cmx~}<8&?r-Dl~|XGcmhpMqeM2U~*WBH4ZquAtA_zjoreAmg2rCRImI z5^lyO`VYAd@s=C)jjXdL%g!pSsn09_NiP>hO31zD7_6>nI$1QZ0;_$G47m1!~m|BEpV+39{~M zu8Y+hR=@kh}l7*)JUABe<=35nLm1=cskaxH0#oX~@W9#!Us1fsd$K%;X9m{*e`fc>Xfn_8+TjY zmwS$2pa54>lx^#Mg*~zjb4c0x7L7O;7Vh>RQ`>*d9zna-QFC(M>#$YYr()`kJhtED z$^XgT9{WbbTt3xg*fWcOSh+l?oL3ZzsW_6x%*txjIti%!3afqm%&}K_Du03^gtx#o zm=*EXUlh@L?5k!U)%sC|PIirz1`TnbD?2DreL&BH^A#(AdbV^sZ&+AF13aiv4sO_n z=YVavly{&>@$Iqj(Nc-8SZM@;+#+4TOS!LY6ry4(QthRy0gL*a&iO=Ey?ug_n#ze z9`uViqAn@6820tvlr4ZVD%F2?+P@d`+M0tjjQ(}j-4tR&?zAuQC1RbP~=geYl`nfoHZD`S>sUtp~JkfwYR@k-ZQugNW)N@ zGv{}m#8tbz9RpjrEN@I0UCdSnxZd+^ipekT9opzjsj&xnPUi(|?xBCJzO*%ONi{P& zoYhc-VoXL&Y8BsZ(60kBuzsNGLPX_5woQ{2`_ma&+0ECz4=GpEzDL=|*}mPXd6;Du zwAPu{45@4%aH&Ef(627P&obhi`{@epad91A-Toiy{yUz{H~a&|yJ`EWS=1&$sZ|s; zV$WLDVFj&K)T&)#wX~?(d)KZKn^>V%5vx|z2sL7bm=W7~((mtg#-HcB&UwAg`7a^Q z{XEY-uKT*~>w3T6M>bHVmksx`Le1}+dE!P!5)I1^s$!i(UuHu&j{%QhPootQF{|bM z1NXpQfBG(=A+vAD%NuPiF6VEbog7qY8d~Rl_88KA|)DYu!vk^~z;n|jNRnpzw ztLXQCHeN6~A%bAB={*(a=@p~wYdMb-w^0DZssVvHIUw(U6c7zLNI4;qr5s#XJ@Xw7 z@r{ifNVXc0=9e(u>_t6Qc{ABeVjEZ5H$C29LA^I;vfL%*98ZAb>*>csxp&evgiw`R z3e#_fe|r6+oS;hl)(`}g-jG=1g`Zn#-4clB;hCIp0d7P-ZO9R|?-}y;^*}B1(oy@3 z?1X&n$--daANhtafkG&%T;gxr>jlQB!)4sjN;Z4I%5zh{w_p87RrV@G9%B0t9(+)M zz#rfUvB?BFgVUGKKOm0d_PdRyrg}SW9%!g&C+fD}{6|qzQIX14!O-m|)94$?r88Bm zWH$D%j4LB!fZ8zfVVSkPk0W(AEHCRef6FiWnU=#?&5*Go<)FK;{HWnu7;KND>_N`6 zByvrZ!K(yP8IiA~e?Wfp3Zd)vyEpy1Gd}~0^}Zct8=oHr1z_y099Kps@r8pKn_0~A zm;vqOdK(7T4SL2A)A7NtyP+J&i!M$4xOZWbYu@Mj@uYi93qO=hlhR}WywUk2O!%cT#^>+0^QV|2HrE8t8EPTo6PhYFiv}!>6i;Pwym@eeyJ%L4?PP{ zeg$T|lQ}(FKTmU^udnNmXL&d>rT1jA=hU;vk@c+kRs1 zkRj=S`D#p%kn2WCrDroO%i(*QSn}4mvg+ruf*rhA7ng6t6bkZbB;x2nc^{0~NL$)G4iiOS3HLhvD zZ6a7>+GDQ(Ll^zkn_=c8O~w!B>bzrdm1$X4h5pJ;s$|g({krA2jt-?%NuB`@V)M2x zm1m!zL?;}N`4yB%Svigu_9bL8;_0@YncMU~m2`aC%CUief8azs7&D&jlKly9>L(Yz zJKX{49L9rnnAJs?D2T*`!Z%Ui+bxw(g(PZPt<3tLyJ+8>FPj%E**=AiVuFSBJd}@# z?zl*1>ayE=JZF>>kc;I<-e|M(`ut4U{&&f;hiXP&NAX}2bf}Eqc9YI>_(W0t$|*tM z1t_C7nT;)^C`V6_BsJ=P6#(A;`R-N85FgztJL$iJG8JpLmL$t>Da5s_%6N16Z4d%LZ66PkU0xm%VrhcVGBAOd2dWU zO!M){py7;Y?u{Jt#{*EM4us3*^UIEee|HHU$TBci-*iOOMvy$p83 z$NQ{%Tk05n;)6Q93AFnR7ikTXvRw+xau5yc}O=S&y#`7n>mp z`=HKngNDj}o92FlJM;sB2F7D&r+@FvnB*NdRi3l`Gh}xF=(Bc-4j~D7;Y+NOlxsAb zV8R*zR7;V`>}zF>xR*rsK)-TAcR$@H-lrE^Und7KM>8_`7BX}1p|9ENNzCGZBKlID z{ar3wTMPw9M|sOX-cyvEg$f3q=ZMezzU*$xBztuHf_<4EUw41bO$IJCh1@@Qgh0`B zG;8S0`0KT93f1r16E_a+@n4lE?x0mlLwGDln>RmU=;WN9BftCGtYAAt1VX*#PokP| zctZ@hTz7}Q(?apO%X-%`Qm=KVDnt@P)79hJCiPdT8$zu+s)&n(bNpB^`ql&m z5sm5HN0;7{RhKQd*4D$D0ELt@`<$0) zy-OnZ=Xyo+P90zSxb(^?OFZnPblJxF%NcVicDgikAiIN#1Kd2>&l?B?Dxx!EGZ#pm%Ybd4mAkYng2T5$#V$h zyPW^_V>Gd3MSlML-4Q=NB@nVaJ15a5C|#eO4pRJQwS8-N?^{-Kx?^e>W-dObOL!*1 z=BDz34?hYTn2tHE3c`dRB6dGWKJ%_?=p99-jzs)$Lf^x-oSna%`JwgS9p|?Ksq9nM zn%?aJC9qEu%b3pckcKbwLV*FtA@_GHb#$*X3n^jC8`px^4NUQq9^GU%o)L3#ctw)I8RVZvVSfsl)t{{o@c zeQU?HT=q>0Ze{Biq;*DCeikf?whS zaTXL77o2ApA7V58GDQn4kj8X+bCxOWeNFjT=PMPzXm5MrdBHHf7LoBtqO<+$E|2t9 zujD(w8V3wa9dcdck~VKv=yyl4&Vv zzdiZo5|7(F-Ij0mrvKt|+W}V>y-bL(aCp;lrDVrKrgELplwd>8w}$Tc2Kk>0S(MH- z`OJt_D&lHMJm!7i*57lJ1VFD`Y2S;B_i8w^?6>T6S*xU`wcg%YjI5LqHie-lLy^9u zf+-#TzM==Sw;_Yq-I|inz81wI_Y*2Lm#In>SU{zPjZxfG^qZoGh`r&S#X>lY?hM3C z&N^fL@`11Q@esFZnK6XgVF zP<(=h_8fYMY^)p(2`S3t1^k1smJb36gP){=O6}gHXESGI{KfpfI{qXQy_|G8l7DC75dr?E-__mLSX|3fLcBaMA5dp_swj%DrAFIqF^{vo=u^5gr z>RH!6J3PyNS2MEPX4j>982TNHpO8%01o(D=?KjCqq?l7(6FyuLGpeQQ)>PUWa?&NY z*e=^9$upR_71rn5FWa}&7T7XmcJceY_ff|pMqT2SwBwVgziB(W*2GqyZmQzS+TCpL z=7qv$@d2kwtmwSS>-g=?(7=M$mDHWl8B|_q$jN^a2CZA+H=QHt)Ee(B!zEn4P*8aq z>3f^{C&=JFuV5Gv%}a9Ci@VM@U$LEmMtO1xbKb4%<~}grKM7}DIcJy<9#aC~q=c** z_b9C~N>mIW=i#A5-^#~!3QaN|eFYtL3V!V|5Z)u>;Rr~JM)e+3MAMn132I<>VS7Vn zCE!b}|2>99oYd@>BVpk>-NwV-3QF!h?xMkrMcw-Cn?zz?mTN>b>pI1pZ>n0ek?P6G ziMju&j`v1GwD0Y;&exmDDQ3GrnenS)>~7%*bGEv1QRh!xp?8-#?S8!$)MnLNZd{7b zfTe&_t!FxV_jf2AWzkO6gLcFXWO>uoi+9@Vlov!aILi^#Ot=y_m^QH}gfQo3O zbgZ$a8WXe5{WqB*{b3-sGv4aBz2$S^Yc*3o2WKA*Ui?7(Xc2QPOsC&uI9g6HcHWJk#XRpI3mF)W?D|ac zPX6p?8lE?B^ChBXN#elX)QW{Uow&E7?InD4I9Gl2AGV#*a}Yf437GOtP18+nrRRzhmi#GdKD(Abb^)V>2aMsrO?>$Rr7a4pDAISZwod z%5}jEttgfyuRrffnb!m>!Fl6rrcIMPS`D7vk>u{2Z7uSH44#8>ZdZx$+ga}zW=~8G zm!+7$TScC3d-XMDvsQeDTH2+o~}b@|3zR$L$^^D`M(c+duGL!Zg4ApXxX6sHIzOj4mR@v^$=5)wxR;bhaFD(hx{kc~$ z(L^X%V4YF&E#8)f3`RVg@P0L^L&)_m_Bm1ewaxeIIi)GT--v6f>Kvr?>_=WZ!@JME zoHCBvO(lIgzsnxJ4Lcd-#MOr)J@>HQg`tm=cNaY11)-AHws7&bpRQ=PqgAV(lYDJt zs+=&dEr8A_gtduVu5ut2O|%*n_Z~4{aaMTpGbeH5@K5a34$6wPA#DLSxeNv#?c3dl z2etkeQwj=I-TB6w6^ER4<^eF@ic7mM8C#NQgYPO=5TX(EPcpj&A>RXAw>{Z{{lUfp zHI|QvaSc(MPVS?9TYkB&1nxPfEA<1$)*XJoAKv$1>kqbWx$m0#oomw%9h)ui`3~d8 z@yVls3@NdM%70O;uz!I5V9@2OA3xzUd!J*hgj>(>J1h>b(L3|XWc7+2YK;eN9hl$q zMr?g4O466hCK8g(+Reg;lQJy&xr9&fdqs|m(1iv9XDB%zx!C5GwP+}w2D{@d0j8vYPbmG3Ay=jVR^pSz=#&Y(?; zY)b46@PA?|>ODNu|L?d2;5)w;5+ed2JRTCu9Tjil-IgEka$rMv^1^!2No1N7ny1M_Ly}8UC%4oS|D!QUDkaZo&os z;Ef9R!piC1kT;1qYJsc-$~X_3EInnL8M?DRfuBv2kP&b$2Bo*#-Xp6c**YoLUmHFV zUcN#`?$lqcetmU?Z6OgdK#eeyrKk`I7X|2NAJ=?Sxx~q$v#Omc+Jym70YK$`)@`(= zfb&biw_Y#JPAsd5o|3%ksIRKJ{aP5Hi1_1e7OMCJE4mLtq@Ku92b2zD=o53TVpIOd zDFLQZ)J@ibEgTEi7|9=)jqX?5i~0A@5Ic(h6^KQXK-$%)a=HHxG+(49lVZM+S_+{O z1mIl2AO1fB)k!Sj>ru1; z2Fz&^PE%JVbhG9BKUDNhr30@yoLF=8!QK)Ioql}*3!EUcc#5AW&)&27yAIHrl-Fy< z^EAwNgf>-LbtipRG@TIxc&{XV_w5h>>5bH|f9hk`To}NfM557BKC43{w+52V#A1rzeSJ>Z->k@rM$UHhlh8#6m6ygq&JaH9+}D_tiE4+11t?xf|*bQ9(C z+TZe<+T*{zo$K!bb&%@_Fnulws6*JAYqc1@R{E7B_--)>qLmRtI;K6{&!f52dQt&w}C6!+nMsqPPjKL=K? zud64}o4LdwJf!~Qf<}zcWvKNp6+l|o+#4v<4_N{Gv(DQl>PtfoT%_Ufehc8hcG!Ov zIF-HeNQF!O7cdi9&)@vUdegtzrWLb6CA?#ssK2RInpQey=GsL^GGGj4U_aB<|GxK+ zFUg{HppF*7d{_1Wln^=oS-YvlC%TUX5hvBxo|tHZOk5*C9@OOyrIl*+bAz-Lt`F}g zSOG)s_;|2c9cJCDZtY&^GHJw=}Y(e;jj1nn!YO%l>iMaEtNQFfCJb*E$p z6d^!U>TB?(lK>Q#e`=@)yc&cTQ6y%n4;%2g(78)Qo^% z6_GfcF|6J*)YqNrOO#QG00 zSE+v3X89D7q&q);=aNNPlS+|184-Jc%GmESz@kw)eenGQAW%q|i!k#b(^W`jOtRD?(Dr@r(8jQ{PAkubJ^!+8!G5|!IK z3Riss+clLe1qF}F-`9tAq>R&oJU|*i^JN@ia@!v$A9ZqAxKkQPRi1gam2>*>y+2 z=nK^d(CgP#-1mBEWqdX@(XvcpaP$Vi5rg;TNTO|xug=yDa|SEvLAR*0TMxU0KZ?^+ zGeN0FpBg0a6Q36uX%#C^CD;0Qo+DZa@P|V*C1RjBpM2S?VNQinetYS2|AFZ3gv0c* zJ^{Oj7&$56hX80{`qx1chG4Xc0MzI@<94OFKVUv7gO34aRt5n>Bhg9^%eF_i=|LNS z-jqKTxSPfO>q+N*IqJ?USA`A4ZxC{&U?gcsMP~j~W3x)0OaO~yQ85QVXWJE`U$=An z0T{j;IbKV#>Wwabi_C42{TxG(en!>5Al*NJ5|rOKjOs4b1?gG%U4;tYdU1Y7QiL8# z%R^2X^1xoDxl%QL0Ni|WexjU}(h>Sov6N%AqLCEocRJZYbyCZ zN>z$BIr9ZwjCcY8+PV;r3jp2WK|$5JYNT_t8YS(G{FFkShS2JgZ|(tT;f!g( zS7dhQEWR($O(HUTM~o-lk(_zhshr-q5S5aDXC#1Xl6*Saf5VD%vy%HI$sbpHg|feV z!$3ggzodFZW#gnJ^$nfU7^7bm0UreA!Wax*&nrH@Ql{uG2F@@d525=_4{-Q@v!b%C zu%#<&cnFa3P+wzOxP##4a0{b#V8fe@*z*rIFi?MJx_6sC_Zm6bZO3ugm*q~Unqf8P zf<%K`_U&CqFjyYPsIW)o| zoxNM+kh-Q^xr$$DDc0vaqwMtu06k+ou#;n$KHifQ#|HOh+tcKW=`>$(p*3iaB-kg+ zjd-DjJ{&ZaA)p8F$k8_>62-q&fq*JyM+DtGXq|dKfz?S7=&&t?k5$)G7C#qICt&hV+Zxp{xIp9 zjRf#P@!=Nu2Osa^Rsd_l4Df3N2D=-rq&{f#Ap2``tpp)BLgMZPHmx2k=E{Gc$$!0{ zHETXj`9N0^YaF%kVKl(@X_r&@b*hpPfR1+l^_ry!<;RLH5vVggHNlV0D;it%*4|Bz|=h%Qk)29bUx6|p629o(# z`QK>I2-yX1TvA}xZRJ&*MC$==neUDD0Vo&p8)w~YY8XGX3uP)Fa=FZ5xsK$(SX>uN z;$3c<49cLRq|bk@2NAEAbM2^#xxvr4K*`U3TexD^*hJfd+I;qPlq%}Rh0*ty4WS-3 z1FT>BE)Dlwp$wrUa`J{>&C#5qj>_mr`&{4opw~+wXj`q5gFZq4S~n%@q*J?S?--Gv z`%udEqwKk*c4L5(Oi`3MQk#uDem6%h)mf2MOo!uh6(CEu>!#?d^Vp4j^Uh9G7h)2i zS&)b6^F643FFf=ky@Nzj;-m4jF31Vxv``ooq(Rwkl${dV`@?*BEfc^ADe_ugwxM&G z&CLLOCaF@1Uq5;cFfG3jh}7dle|#{l}87nj{${ zx+)q?#UQZ|ex0MAv;V61L-hUS;x0=XBab#&$s2*`$~~=}1Evaf^&;B$K#gIv^L7zD z+NCd%_Z{fOjifB-z)12Zbuvm%tDbh7A_R679*JfrbV-KkP47`zwENWI+XxP)@-X6M zXN>-M^hF4W7v!aXHx{JY=%JDy%7fJ0f+WQJzSzE+&y^E8tLUpA1LFP`=5bk7U*S58 zLHy5$)43rDoOEh`|LjWENlOC}i93-cHmqz^6BEQ8(8q&mRegxs!vTFY^t$m7IV$8~ z+PZ2$pM=8LSVRVHZBao$O5t-X7vauF6B>0KE!-)=(0`j)_?tol61Nfd4M4kl#SH=4 z2(`80H+#^p+trGU5Z^J0WSl~;IGLJiVbTJ6n_mvcZ5^08V;CUMqheHxr%9Zyh1lB? zT3tDZjE-8qlPC8>Ve=yLcb;-p zte}3bHxg$?+k1I18|*#H-W_T8Ii5J@o!_(HSiBo1-MH+io(_w--t_CTg&8rG9wqvx z^Fxf(?u|C($5#qFgSBOJ$rZm4;xtOhGmA~rqg4K?TvIM{J*8Q&yYn`q&u$>kqi5W` zvdK7MkFNZEmkMuh<=5QAO@{K`=2=3SBpf97t)8uaj z$`DL^wBohLbv>1u5`0n@V(9!Y+tPAR?oJf49@E8Y#6D@X1V@V_9{PHMSh?Jp{WG%H zkBsCjeqfB_B;+QaF2670t(F*;pxBkXMCDIr%}!mH(9uwwLkV1Z8KeF6d)e#wy#Dt?wY_;GUV?Ys1f5`;?_oANy6gJVKHvG)oF#J;Eb)PWC+v zIVuk`Ve9WX`nWQfUKhz9A-6vXXL$6)8h|=RBJM~H>SkU&bG-y;2HMZhJxq#_pNnGrYhRrOpdHxjPOk#u! zaL`!YdNdfUlK=M5tmfB^&|^Xv3lFF}T&Df=RrM<|mnZTWhgDbhIp45|(QqE$hv;Yj zd8bcXa~Ne8-tKy;5hl+?SNyIs+U?}|jZWUdFORt2syFmxFIrRG_f(^ITnaC?e9AML zrj=bhF*uL>nQNr#^TG8J z1bs2fzx$E(Z} z3-{9geAAD+OCc%2Sd*n5V>#h*i7^cptmPPHj~N9Sxl^UWI>Brr)KU(YV9%ql(t0X= zW9xCY%Y*JA=)qYd8K#MK>BQY^FdV+yS*fUn7Jm>biVn@;S59zPJMO8P@nn07qssiQ z`Q3pKtK-_J;8b_-{q8Av?oH!7BaoHuQNdG_x!c*$a!WZy{NB4a{C|L4!3O6s_$JfzEk z?-EKhsQ=$DI@L6kQvY2DSVVG7USO>LUCR8wZ;>lU``?{oH5@~@68^WwUAiZ&9s_Ji zY1zNa1N_vLw>GB)h!cT64D8V(x33?+o0(Ge?C6 zWfn!mhSb^~l#|Dx}oqi}^l6b;IE+s&%?z z?WZ+``|yQlZoHO!be10Qp2)9U2~GcL^(^&J3vo)PKdvkoat94u%{2cj+zC&UNaNiT-c6l{CQ2hXE5VwjNpKSO40{pl%nb~$ zxl&w@*+lI|!L?hPT;_kQ!@z^viFKoQgXWU0XvsyJyBK%_%S`pn^uEo>m zu{>pWpB!f@CCQltKqkO@4Ug3Q;Q?jp&A9IYm>XJsm?vVugg>|)9bt?uZP*=DRZB*>v$8rS zI%P_j&}f>cnU}vBpYVNbS@EXoJg`tKbIoHyGFB5a1!~lnaY|^sc;NCd-z9b0{JdPU= zx|xV1Q25J`tG|$+Lpf-gaDUWDYK>&Ead=Rs=8wb%^}$R!ZC@M|JP$31&jic5=T{{g z@<*Dpahrsc5=}M#pg9%XvH0Ff?xAB}T-IjKn|yUFwYCEF*pp+LJy8#fWCYzNwaN<& z2^R(-Rm2Ic`~Sw=4YPDPgHUQ~Mv9e6NNI?YyeR3np1@I(Zpg!2Zml~o9Uf9*pq#{~ zKTdK^#{t5$BUSs5yth&{v$eZ{I1`nBjc_r7Y@6$$n4NmNK__@OKjN$}%;i-=Eg z2tLlz8G(y1FhbM3iUZw=(PfD?KWye6OtajaqbO#%lcpwJlMnax|M7B&I=1}8BvT#d z`>)Tqa%6+5GdCSe_+K5NN+|vQUM(q-#qyQ7XW~ppiJlrZIy?ZaTC}dc4_i(`H_ezX z7bp(iY@%C{s5>M1LwTrDkn^g$eUyfR&bIHhYV7F*w?p2ET9p6IWpbm4{Bft6N7=jQ zSsQf`CUeWy;*ADsQ)*mQ$!c0&f>H+~rPDQrG-FVX{^cXg7 z-`Aj&Q7aGEJ>^T!dhz!{riUU>hRRPo>M+tty$+|jS}i1xMtLr zr+=`@uM706R0Gl`R%sa1)XXn>2$a(M5`Krud4K|eBcxG7!^V-sLLB7TBse~7Q7mic z>o``(yJ3FM)5IpNmKJ`~rePGe8TM&Nm&1+!Uh zsK;;Tz+c@vMY9AiNbZGmcdEe&i$!P0JUA$fLpl217n6@$1y;e-sVZs{obgDv+AyUh zv-5I!1YX95s%wL~c38~aXdxepHH|aJH8h^)!EiV&aH6}7LvOj^ui00)*@7eCv$KTf zztYo_&Rg~o+(!tMG%D|9o&H&J54CS_SQ16_x{-N#VD{)RulMew$gr_J?9?7Q$vtkdrrH{7mYT{Ix`{vfA`*T|EgW~{iq#Se; zTl`&oVzU=`7p3tDXzKvhSYDn86^3)WIbfj4Mc)3p?8)m>GX$MV-A3@y*C{LfEcXx* zWiUG$A^mSm)!7_p6(E_B8lZ&jnj(mkL*5{epx7A)BptTb+#Awi@yf%v3&P5$$0cT?XN@)ad!I5(T%$bYN0w`QCAs%S&Lzsb?Y z(p@(_7n9an)R@D{W>0}O;*);h_tD~VVLrVQNRlJUcp`x05HSKyBWsNYc37PqlBw@A zAbH4G5eT=Uv1m7f?AEOrsb7)-A3!<;7K z6wgk>w38;*VasK;4?zhwKDZ%dvk8_JgQ)QX=RN`*L(YT(%lF=5H(R6@5H-5fJ^^Dc z%TW|xP5@WYQkdf=_7X6}NGFpMk|Ena^IMUbQxPqH_laM7P7)I&#(+r!r+7BN)}qMU zSyEZ3KeCCej#my=d&AWqtf@yF)@&axPor7Y{lz5Vp5X6R4c_xko z`{exQQ@CN4xjf%ALYAo{(L3|i7OZ>#N^tNO-eR{H%U*Addx|EG4gJs9(4ZJ=GzvO~ z<^dwCIek%M=_>REH&-=LJ5}$f^;8yg1$%i?OG7c!YYUdS6<4#Y;YtaX`D#BAW$_&zugpq=tNZi!dFTFY|AQtXJ4Avy{VaYqRUIGmM_vZ#JG86uPojOTGJ zd8!n@{6$T@TDz#Ldg^PGytE%?UDB+z%X~+|WGE@NS6@bGJhkyZu+nT_387&u(ty<$ zo2?w}G1P0hc1bYY8d%v{8cGdR;>G`M>`TRiEl0rjwa$mA)6?FM5BGBGmh;?$v>RHo zHVATeP3y>y7}M}EQKOEh!l>X{AgGa&K=P7|Iv338G0N7gYK-}zV7Q|&x79Q^-rc@t zNendVDer(y%qO`SbX?)4Vchy9!LhcR8R+oBvEft$mBOgIY$CKd0$cFxl0J#X@^c7E z6vUM0D;%pS7|qtkN}YGSN0V^WuXF@#a2TGlYUp&t8I5sq%hO{`j%{6WBgdJjjH>eQ1J^9p7#D&LB{i zxN39}r>#OJyD9uD zVRnQilk*l$DRpd^gL~|1!w`Ib#lx+MFeT(0oYx>qya5FwqRMHKPi(n%T#81zQ#5=v zse4M(b12ssz$?PQ%A|UtcI}NyMN&+D0XDPG;l4g?LR!y2Y;9&wAnQoei)i&V=iGR~ zNtXXuU(viYlO}%xJSzqWwVLjM)muYKf#WjpSf^{I#?un*yt(C!6=_jB3wsZ@{TUiE zdG)&!+)n9nX`5=#yqUmC4Ue8kPsnMNl?N9zPQsi+xMTOY;z=tNFv>!myd&r)7d(+V zM<5d_{LxKK{k}t~R?vEJ=ca7y%{paX$pQD9K2mpwM|k@hgF_ptoRoT&bN2~IEwXzM z(MD@NRW%-3z*ASFK|wxxvIIsyItVCn?QHjag{_swc;3|33^D_ROAT8wBL7z^?h1^&>r?o@t}WTrt4$!aE?M z?f6dysA8|v0-n&b;yIU$C&}|4yvG$T+yC$jJ)CyZ!L0B56U!p~@;S370?#Q)_RE{| zCe|V<)6_dzSGIEWd+*YWXh?=AX{ulV+ZrkY$PSu9$<}IULvQ6_>9o)UQV6~9RT;S3 zy}V-FE>OJ%0e%e3S&al>HB!b7XOTX0(a400!D(Q(^2B%+-A^~^1f+iZ3Xj`LzAj%Q zIayo>5~P4+*mqj(sI`Uo)T$=ja_tQ3lDDNbs(C7mwom@oii9c<@P26sPR7A3JglF- zF49odbjG<2ZlW>x8#&T6P1(_+Q-hrI@T)uj;`To`fgb*3w6ZCQ#7&3OM4_tjTX_z+ znC#)tIn*C8ci{-6qvWyg!>6b>td??Lt_>k~Y%pOS{~m~PS4XPpE-vm-iu(p~ZY2wv zTv4k05FK727_K42EsIlAM+BRdyXq*I3t7vQco_f*-{mr7Kh z)M;@fzh=E+6gaD!Mpi9kbFNjmNV)vt@wETTxtY(|!~P@Tjr~|;X7NG+VXfBt?8Ga# z6{qH+UZwMqbb4`el`&^Vb(Oj_jkiBG>yoY97Zah#ngME*jz*_+zUX;5ZKP8HlIxc7 zoIGd-S>^muY8TUp9*ywKjeyW#nga1H!Hfesz(9856@ei1OPY4lh1N4E(4_(}rJJ$Z zt%*ntIISRSY=n8E7K+*)0m{N|Aw557NmP%y8B1CsSOqv^;B)AsW^1cquVFAIRLP4p zCmt`xQlrd5%(<#md7##1UaPg9X)@bIYi) zW4O?(BOjqJ5W^(%S*_fk@Pm7``f7Z@_%3Xdrb7tZ2LbsL+Ds@71ggY4;kk=bX;HIB zj2IUQ5mqwQO0;n_`30kkkV!(=?97E{-bdV6-pj$*tnmr;tN&)zh8fWD+^ee0i|#r+ zu;F3_*6@-{ADl_*E8#c<7wX=TFx;hF2+6lu6+rOMYaC3p!XuwHGH6jqct5|MX&8hPyKR#2Ab&gi}Mc{}N&)JAYrd>;j%|~y! zW7(-^sZ;O8w$tzMl?z7tZE~UEwzy+y?36CXWOELbf<5z`@;s^2*ySBDx+n)H=D|pF z+V#)^Xq6;lP&Vk6H2Nin?#P5}ehjw)^{LI;G%E>LiFleYR6}mj*G2>xYk|#hs1o%M zsI^_Kw9{B+zb&7la5iIsjBkrK+_3DJi1znnOzJ6TNOknzg1kz05C6{uTTaF&zMQ-C zZ@~Ow9C#`J;s6}_Iw0oPzn-xoyRt5t+|chK=tW(QJ8e(RUemTsYYD`=XQz)OfUeu=+oInQ`0>_6;y%a*-ZT8n68)uK(7#ZX z3pZzC{e#X7R{+gr$SDonitUxYFfh?t`V(PUmS?pSsKVRl0N3y|%Q6_NX>N_Wg|N

qo)oC;lBdnzGBJvAPj}Zf zer#j<>XlNyNk|o;A#1&KbnUD>{I{u(`sQ%ES5N;lw_4q6WrpPiYZ+A!MUCaFbyJs7 zh6qm;9^4RN&eWVVE&ilG9(|jg_f^S!{+6K;1gOEx)?imU1ejm_a9L>^*Ls5ZaU{ixJEkiXSHYO!3-&?9sA zVBK_Ov=64424P)=h)q!Zn}w$pTQ_Y~bU(f@$Gas%A&ZPdDLw3#yl-y`K9f@CDY!n3 z`Ah5b6=gnQwYCST8f`+T>zddYf8jn7Izy_bQP9;X52_L2@k5O`Vd#Wfr$@r#0)o3pF5CV&&DuO2_tY#`L21UHzT*8xnQR=BRzI*~S-RX1BBo{b2U2 z{q|##D>R9_kuuYBn=mq78*0r~!Wl zIZC=0+x;A!(vDYUfQD4J6gjW>f_2Z3&6594(pdsDlqP?My^!0q*Mpj^Juys^o37ad zDtr8nn`y19PG`VL$Q~OVA(J)X)a9&>ux$ZO3Qxuf&IBxx%@wCg2lFh~bkPieVpBV$ zL;UwQGS2t+t$}qW`ZYHpk8g9=gkNbA6fgMf-_d)=ZB1SoyI2&!>**_}G3{K3apw6uh5N3LT)GFpA60WPs4nOu{=8Ot}i%Pffw zW=h6#bMY>k(vqABaG1%_{}^WQ|365JTrvbmkJnC)fQ)OnwX`$2mzyM!ujuPU_W*U6 zXZY{N;ojYonG17su;?T#Ky$3@ym{&9*mvtF%~6oM5L*r22erU!P!~Hsd^x5Jd3D(* z{9Cw!e+dj^Bv*nM@DfI1K0syP7I|vv9{)wM4X->RHx_QYvikx3!j{rK#P+8BDs`*= z`E=yds1c~rHd<3`#Ef`kUh_^j$$fKBlRUkR0cXxJkDIM6|!!bbHx1YwN zNKCEq%FRIGnwz7S&VK^h){jU1)Q#;G%^qH9Ab*3K+?{H~ zvOvVtA2_r#OrUC@M}*z*A+XyRswi=m#h$4^D*2o@Q~%iJ2n9s>2EJf3V=`o8tu;DA z;h-$hp490J+ki(Z{u^XC&1vuM^R>)Ll15y8tWE~rWL8x{Yi)b85?4DUy(t08_B?lg zKB@)!0dX@G37OoLc6dC4!|53I%8b*UFf3v@#Va0?5J zp4d^)hqC|xM(%4l>Ms@$n@Rprc2OXA+iP`AWwivP=Y`$7VelvSQGyn#ZgA^g25MoO z6kvQ-R{UzxX({7?^8!=YNKJ6Y2?AWN&i6NUD#}jdv;j}Nb3U3Y7DkS=?-{Py@v87} zSKUfQ6ZH2TG$+;ddp+0vd3$wOsY}a=xpnE<4B6C6@G@o6j&{Hfc;C?v5$2UGMTlQQ z_*dSUnD5$1QRn1u`{a(oRgEE~?3J(MhpB`47B^LRCK}2o-Vh*pkJN?)jD!Cz*)t$I zAem~?=tRCNeEC10fDXI-e}9(k|IrlQ|En6e-Il-DlgHoymNnFa%9C$q>s}{lL`&`Q zvSe$+lm0yJl8fW=3+c?3z(wY{9=Uh-l$z?wHoNQalNXsW>V3MZQ{kEFLuBm&_JVqSqk@zMV1nr*_Lln17bW7-PQ`|yp*4>WuM#cipy_b zm9KEw7|glm&odFTd0%cPe4PDkm>n+US*!&QST72AVAG=fcyE!7Sg+1XRXAJWl9w39 z^~q9!k>b~qOv|DS&$G)UeG&s)jNa>Jn#zrHcAT1>zJ-S7Zu8|_6 zTT1$6wA2_%Hv$Sn#weWw1O&eE{Q=uKXXorZ_jBLB>$>p%Gh1KV+M1=We|lfPI%&e+ z3)5~%yyMqE21hJfr3~_z1&6wh%U)1Oo>a;9x}DsXR?NUNBByx5`8+Z*wcC3U zcv5_GUTn%iGK-Mu!BvXcTw$87F_`ZD%Wi&-H)^+{4Z8^ZIbXV=I@!YU1-ex)-r(Q* zYRB$+=l?bQ=pOIt^rXjF)75H|LEypd-7r`EO`|HY(!!Ii7z4wKs?Fdh1upfG`<;>Q z`>VHWrN~Y<9>?#$$S*$6=gCqe8?^x6ChuG>*xj7i84<0w^A`3*<^oc7!@-f)-zl$O zz9;&8e%lj1c|WG~>V!WE%U^dz;`Do%#>kq@?~6oMOw8>wZg(~6{cjXQdGm|1`k4D% zTOpGxG~`n$n|wgpHU6TSst7nt+Bw*c_#!IebHf43o>%8nQIRL(Mv)K<$0b4W#eB6H zW!UnN*;K@lUuRVrxg>P_cJ5KF= zol2vaKD{5*f4M%#nNQijBjVi!M`(#=Izfn=y{o&d{^DhJa`I0Bxo^@$l_Ha^zBvSJ zUTy^KUsTPpCeFRJzs|8c&vC=V*NX)YKJ@xmU%Se2+00=TadQ@Rp>;V96sJe!zU&K*97ZIu= z$D}M&Gv9B|y6*NDw!6X^-QY0j^7NucXmTZ|qSp0tEeHPDvMa=AE*V1nsO&SGR^AHW z@Zr4k{~z(}g?8n(LYf{C1L+fmW z)QP2Gf?IwISy63u9j0CFi5xE*_&k(NV3Cq(S%*g!``e}BdI29$ zBW+qM!lY?&Gt-J$10+E^_IhXx^tyB4;S9p)1V^Fzqu^FwPGs|NQHizfD3oAPuu-W@Te&L z(k@az(N(eD6uMB?*a*p~(=XP{ML6mw6H!5zdXEB3EoVRgjYks?LS;Tnhqn2-mrucL z)BOc=wbYDM{357B6*#7Hcj}ge78%dex;BRvb;Bx-OZqC6u~*I&W3&7pZPv`tUVb5)Bt{VUJ zA4eP)aI=CAcjc!-swDsZsqcy5!M}uVu4(O?`Esap4C}Qr`=rZ`xb#}Qn5uj-Qfgfm z23xBR5&3}WTu?bf_wooI;Z`3$D`6;0pPXHZV^nN0O}(wqZQ!hDS9$K0@Lp!u;3yoz zZz}oe?*^_kR02{pvw^Rw4KGT2n!U^~s#Xz;ewY({@I%zeAZ4Tv95m`{*VQrk1pCwr zlzFhFB3YG;WP}qTYrL?e#O!;C))7A*+P!D}nCgl(k#+Oy2|&p@F{MqEodxx5v&}tY zk7osF>vUt67f!RDS+|2i1{ev<_TC=ZeTA+S2MEz!%d%^-Mi?qAO=JB(YKfI7# z7r6{HnkrBKYm={;_w`doWnYy6c|y6cf8#ve$z`kRW$VIib429)ZsGkUobkTPUSr^N z@p9cKUM{1OwSx~A$mBm1YtMhO4U6K;6`|2PT1a3T(oig>K3it)2^4DyDnFeLY?gs9 z9QgxPc$-a@mikWHO>fRD*l~s|3#j_}kn?>-Ck9W`Rcpv>ntd`_V6ARlr1oQ?$+E}P zxq+%#q}1!O4;VS5B5E%4i49o`T?DjYW@?WwBF`|xMd7o{e_|Kvh`bbZB39c@$kkOB)ryzzRnAZQ<@stWv#bR%p zDHsg~_;j1u!R_+T4_3<;cmx=Kf8Tm8QRHRyv#Qj$@6o}x@4qUytU8;+*I5wA)5cr) zAs=?Pyv#J=O&s12#A*{By0*3kP?& z0{tgGw>3qT*PH>ehm9t&QO;JjDFC!#g#EM;E~xN12%mH zj0a%~9KuRM6Enc&_mr$pVWNPQiF7YRYUogENQc5nS=Oe(labar-DUjiDr2EtJ~bK0 zN)e$*LXkf)CWRM2{NW?~AunmNahnWkny+LeJCHW88vJG4hD8z|2G-%sGY*~Or!24w zm+58gR;pBQLUR^Aquk-s3+PaU{vh9?aV}vI3tO4s+ZI%&Aj}?7Fm|&!N17KEl}E`C zW_-o3SJ$;{dwDX(6z(J0?t-Pl&OcOGR^()d-~4g>BEs=Q8b$2?C8CmIMl0ee(|UR~ zw~Bw3wHmA6{S_kom8Ul-@oV?5WwN`N@QKg_IHvX+wg~Lhz3gc zXHmpgcUviW0XT25iOWK&lIPE-kqTmVgsg^NJ}4_x*^mP@#K>Rmt3T758YEK3mRKDm zN%|fj?)T1`VIMjeS4~7`WvS?jY4lxGhN1~EmC9|YeVXZVw$9Ju(GPL!mVWotqtrbr z-=z?#C-;=EBi^siyP%q`uiXhDuK+9RkgWdA6XJ+BWF9XQ+fD*57TodB-}=#P)y+lw z@j;==M4#?hgnym~)x(x&H~6P&$8__h5Wq8_b7M9j3R!n!5lC}3EpbQ-;Sma$?K_B# zTuA!DrRTx3R%$oP<{4QjWaHM-jV@$nsM=vEexN5rn<+p9zfY$U0B}V zV%|UwTrFNVmI;_vMLo~WBRg?dFpN4hUvBg!SgMb=o{d743Zsr%1BMXQfj{@#)F;G* z(yyPdIz@msNvuHp5WvC>H>op0VLaA^N>@i-km5e>3SWio0p%QkG$bx=!vT0E#btsM zO-42qf`4)rQoa1kYs+u7$i*p}x3ytYBR;szh%G&H;>;!L)P;ZNl^ml%S~7qVO%>@V z&=~U7U1onE`f2#y#@|s{+x4Ts&NT?Df^o&zZ_8(s=ih$C$-=6_)Li-woW&FaIPU>h zl>Ax?);+kjK$VL$P`qs0aDO-QXxHo(cH#%%@EM0rlKw?p#2~F~hK$#vAn>b~a;^|w z4pf#pmtQ%~-Fllj%Q0({B;{dV+l8Wj!e?xjr&=iG368=n4fN z4uwcuu;wZF@jcP`{@(^(vuAYp3U$Erl0@EQr+cBn>&aezOYiSgZy2iHvyD#kqdrW5 zNn&1)#98O{UaSm1IJ6W7BLMRloctW9^t+wfhvX^@%VYFdb5FS#C~|!J2g$v}<>_L} z>AI?xR&6%nYwJfc@-duwFeZ&eG&&w>fswi55}Wd=cPj6qi%XjPFA`5^ zJ3@qU4@hUs{A0<`MM}8lguZ4mZL${3hpz;Dt=1<{q_--OAH>=az6hQ`uYkc?J1wK63| z^eOIH=2b~GT&`dS<{#j^`%F};`Y)bl=Ut;4=zWK*d-spj;~xU5O^4?h<6qCS z7bG&?2YnxS%c6c6BE*XM59p);;*3jGi$1PT?~%YKfWj46gIqe%E`%l-ro1Wao^6y*57yXLm*Pr`zkL_(pvsaTvnjm^avPcLDz|qxC1dW_nyYnJS%*B#BDp2F{R>@yPM2e!> z4~sU$h!ttQE$f?|BhH{Z%}>b&hqbS24j*JGj4zlArTvY#7hZ0g-ja3PO z$sjqEqGG?4FGxZf_pNY(@XCfZ-ZgQI>JGCm>e*8;%d|aQ=d@dF9<&&dx)ao(5yR9Z)>4q~{`A2yVnnE$~i}4-HI%%QQE0_%NXwCi`68<44 z9J?;d)cy=Vo@6<^wGw=rwED6WZZ5ikvEy>I9Q|u~a{jQssRq%66H0O%|W%mJ4}97cVR- zh!SVnuZi1;x2ubwU@CPYkQJn4b#`*{me#f^eKo==(7ke6FgFcX?hRcC~eE4xVW%YP-W^{tg7VUn$ z~dc33DLC2Fw}qSS*>EQ*EX`Z$(JW;E+M z_rr(`!=+f0)q^4>=*#X!=nD28!O6V&$`^>4b`+9vK9r9tFG zDrErwXkTF?R)Gm4)liUrfgnG)R0+vxG{b609xYxNbMJjpa_#;hqL)Z{_s-`}c?s){ z&F5b@x^VsiL_~f~T@U#|oedT!Cx;{xTUHXbj65ZW2rs=(E!y41Vk= zfZ|2hLKcNj5=r3>AVJtcaBFNPDKz0(63mSsW%MkL0vDLE6xt|^OZFsLGg+-%=3$Jf zHvYi7C1Q^<2kmU11T-5HSp2S+*+oMcov|sqTJJJG)3;G7n@33zRn0;R6XeFNXlra8 zXbDOB1@$~$mLCU%C0KHMV2liV1LK#~p6xzI)&g<%=R(9RC3akLv&IyJ3>})vd!><9 zot}dGMMYUIK#qysnE6gD=-*!c?q7bm7K7#@5t94Do@1r`m;6o($bhys zgEIXeO~|knAY?7g+xM#)_o6(@uja1()8dxH3Jw-JckTEiXaw-9jgTickobGNQ07yw z1jbTEU#>?am4@y-uV`tE6&^Hdiie-HDx^$)%nIfUtY6e^G?ij34>FlpV^*G{0hQaw z%Be!{g%G(38ne4a-;sPH@whQ+Y5a2{*O#)Ogd|9TKSo7?4X;RaMOrQ#Oi4`SLz<}p&su8glEA=Ux1tv2V~sQ^Ox*1Fvkv{2_aQ)vm{Q zW&-qnf&D8@IQPLt^@R{aOP#ex)8@prdLObXHPrpLE?!;ZAm)9t$gmYj?EzK z)Gn=XdsWEeZ$2K~|%vczsZb}bg?@DONo{Lw=&`$R0ejyK>d`R8zP>T?8S1B-x-jfEsY3v>?;Y2r(+#U9%-)ZG) zWjB7UB~{4=SW9sD@Uhd+)QQkdI<>R$8+E>%gQmOZz11-f;*eGF|LfN=>_DLq} zi48S$HYyuH#J{?QkC;A?Zg};8vWq<9ouD%d^HwZz%j?qlKa8{&P2}6byd+&SbUbDS zW2>X=ug^#2vwN>;sO?&k&8d^(nxhwg2gA60F+1($FfW<^BLYH zsf#4~nCHJtDS2jbxp+uDV|;P!SGT_38o7I+W}U3wBFU*%RDGjeutPz@ZbL|@pimpx zE;2v1z)uqTP$H|mzET)hXuBcvYDVjnf5YQB@&hY*?)b``c!TeboQSd=+UsmPo3`qj zBKPK{JIld@@XTkRkcq+8K*p1P`AvSjZj2Rzr42V`kOD<_P8_UVkZRDfvNDl-sftfcdM?EIp)S`AaCmedNGU z`q37y{>&;`?`?)i*2AUt$xF+zq~oi4>~w&#f>~0D_$p9renDVd*1R+HbV$ z5Q$HWtHR|S&p1n(-Jz`sUxkW(SXa1^XDKmxJ98PCj#6t)uZ+jfeJ3#hNQE9PgveV> z4gaQg8u(81+cjGKadD39P~yK3TdVh>55aY|vpj^@mpoLe#&=oV=kF)-Xl68SBGy+6 z6*T1egF@|7DFJR@DMAw9{~3i@W*o~qqsZpLJbEj5(+%^H?`v#{RF6weB|xrb5rw-oBe+Um-t@tD$YE)eTvQD%o~7_LH70mL0@ z-EQ7{U3`UdQY~MW)J(f$uQ-h)bLl0AM_mc`{wh;g1f>h`<+nB+X_DxB1MW1OmfZMj zc6Zx$Di(b0K%1{-PrfdfQ_O3a-VIy&$1i)XV|7h5kZU^)j#b$pNYm~Dquwhmhg2AT zKzY%Z(p^3BO! zAp$2L6XWBSU+Y&XqJ&TT8p=TD^^zGh`F_@@#v}VX4$K?c`Q{HXWppKM zi@@{WX^VKjft zUqR{C6Q#D>tn}hFWYKR!wbR4pv*k3~?!|*6ku~I0_wGHlGcyW-$CI@sUs}Q&n)V!v z&J@{xbz^4eKSg%l^Ia~mt)LUACW>>wf*G3)$#9E(xPfrn5Uh@iq*OV7^g zlJU*{IsGq1CTt?n$Ud&vBq#@;Zs->&j}X79oT_zU9m!J6JhPYifkL%~MvB1K(armP-`q<$cd?_Whlp)l+fbQ{R$vn|K#r!w-Y{+w)eMCDoaMQq*cNs zQtGNnDW!i?o+?(YaGx!N3iVl;q#Y_W^!HP|a(&k{yuQt5F}vZ5(_C#T9ES$Hbp zX_c81YU7KLeI>BW<}4(;kQ4fdfA+=RFH8C2* zI2Wg98yA+x`kMV?vw3ngy+@bjJy3U<2Ht&>CEb-zlm{lu!!1$Ch*c6zy9yc?hWLhu z5Zl~NrO(w16nf#wJ!Rzc=9~CV@$2=U!4|RC$Ja_WAhtga7Drd+Pq{q=1{JLyPj7vOMf7 zw)FyJZRO3^DtV9P8~@m??g}@Fn{sBpItvn7#~K(bhk)7EWkYZL*6k4O-%v|%BByDE zC)`iHoGh_PeILl$C*@My{X$i%kM*2roG~kV%nd;yc>%7_-hoG(Err)}NU6oJw11vc z-oov&m*ia&VGA-<4Th#H^?xTVn6KnN50IEID~z~$ zC6x30WPJ-yHcJ39a&?k8BPyQrmAgah6W(`FTowAgir$DT3fLT6g-5ZKKRR|jjJ$X!_B;o8-(GKYff#r*Swcr_(b4^k+%UB zo&UGto0TP3*&#b0eBmnV+G*1e zW?7#2lqRsqeF9o0a9Z_$5y6S$VISth$Wt{}5tmjR9)psgWs_VCzm*j1!m ze%48Odc41tlJTPyv56&&C<#j2863@woayc;__Q`*zWwy9czBYlx+mxkYgIeLBA;a| z9iX^Nuy=@!JBiyDHLdV1yuY-a;v+FNvKMX(?((epB*1|qNd6AqKYx_Sj6+<=xu@;7 z3geY9M|dU3JJ*K%PvTv+Mud7xylj)`28)%Z_|JHWdX8&D&YIAEKrZ?U?rug?P+IBO z-A^iQp<`{)n(S1lLY$}5W4szw}r1cMt7$5P1+ctd#);{jy zzz+{8=`Bx0bv%<@55`7t)J*0Lg1*-|n=7G_R=9u};Hn$iV>oHmcv z19F#nC@AWSJEc}3c^>Ik(Ms_U1G&@TBdf_T5=3btK5srr5jLbNTC+YsKuZ;R`zmd# zbTV=Ij(&gH{`{a!gt{pLCBXX7VT_kJ5`>PJU;C|;22L89EZ=A@VV_ac-n#mIDWa>v z-y?!(VRd0ovmFW+pr#fAzi=yFrrPl*-f=eF*4OmbXx?6%QC@WF{BCU&UjV4>&Ew=T zOg7^PYS^gkWm`7?zC&@Ks_@Vy6?O4szArqI9Y{gA^_2<3t8 z9nIr}yfLMp5_2noiR;NRGiC^;!VbMPuQfSQV%D}JkLg`}Kz()C{jJj2g!x-^f8ncF zV5?gRG0eEDbzvnX&AnwVT=ni=&}fAe^EO?0H|d7Lp8;YOpZ(`~X)KPWY?5rhR@$)v zMNgJrRjh=(O?0lgl(Si>b=HyjDSz7Fl1`-)qoJ@TtSeI=gaJBub6R;BFs>`&q-Atp zXzo3I-VLD~Gk%`(%y0O=OJDKT2NwREUFN0=;MSZ?CeqkhYAurg50vJ5(;2A9(?m8p znm6BY1`8!Pb_Z^c{%4sEgbq~^v4$Uh*bM#T3uX(_yBFA0a0VM=A*D32*vdYf@%Kj<}3`GoTMHWS?h^*&w+9ZJD+edUMw ze9rEKZfDx;pRD%I+&z4+A|jC)EolMX$(QWiAXq*ru={3AZgwDRmdpTzX zi8aYtM|$;IAzD1@cmd&4U7hCX!C}yU24HUI%JS2WM@?BN0-E}EsT9I#fgko=_JzM! zcOtpq+(?Jl&$2tRt;p_93@z@ihB#6FT&zC52ofs}-XGUy2t8*@X>VCAI>=j1G7A%A zh^X20(mLM14#N-2Lobs5SsKst#_;0B-#&yp{+Ms}-vhF}_Ey(;uL7O6Uyj@VF8^l* z@#Z>kY)Tg*#?5}1vyll7X zoL;nG+XMDFQ{D=~mj4^7)#9Hn70GqEle+a8A;-FoqZq;n%Nz$i&z*g$kUN4)+wI{- zlGyIfkv8PF6zPMXGo&rnQHrGGRttvBY0S1!%=?N0w&^OkC{Vc_J@qTCjilM?_qeK_ zer6$x!l{k1OADDD3-W^TMa4xM|}GyA3WI!uH+ zxbj8Mg@pf|GSATSG4;t=ZiXG-YXSN0DZBwDNzw;5z>c2{%LvW~CGwg6xGtw-=~DN4MFyN_-URL5y<6d8+}#!#%CZF<&Z ziN<+tX~1AWaqwu}LH1bC88Ec8xV+_srgl2|DT4JaVySrC(6&-!+LkxkbtT_YrdNgi ze8&Dv8-T1>-y<6Z9L8z}svAxVIjAxmYAyD4p5*6$T#^h9!>4eR5vJZI8^-#vd7PI~2 zoxjnAzb23Q>Os2Xd;}~l_xR=Uo_cMJf8J)<(qdm`@#R}Y-mjGXSLC<)o7(!^ivPT> z>KM537OV$}@J1REUDj}(QtPYY=9j-V|NWFTdQiU&dHVTxP~V?IegL_j_dC}?ZolKR zMV;e-rZCTdJ0K0ypLj#oYm8wKe9p-=d{?|THFjur zTyCZt4|vc}PbWf^Kp^;U_GiTRF1-u$DaeXW49!o3HtosC1T|eAzb(c4&K)cF&gIx+ zdlbY)LAgkb&0J9T+B)BmWgmqIYGS2pOtJo!67m|iKKFQSlINHv{|Y|p(~HL$ixb4R zag9N}?r=~bvNmla;IMZkr4DzOtS8l!?1L;lv~-U(O{*X?S?fyXX-;g5zr*UkRJ{4> z9yUl^miSm@KZbG2M+x<&EjgD!UI-vBj#<^VQ9eFY-2gXCu9}3oSs6aH@D80TXuKW5 z=}Ss}^+?SRbb;mA*I`k{vlw-nF8KqM_uYT1KVp=urW;k6%5=AX&5_lL{eEH2~mZ8Oz z_(JicX)i?!@tH4{{whpsv(EP9W9>~gvBTM-%v8IdvfN{0bwpO5Uezjt+q4*!MJQDU z-}wlx0k;F@z|}(DB=!h(2a5mlJHG9pHfZ}a36m7GWVD_x#jV;XJ5bTLkZFLI+Bov_ zI=)~MSzMH0jSuaZQxg!e?a zpYKLLUCnk-V+f4D0$Qpwtt1p3LHWzlo%Z5!@llx!9KPi&>#kT153)dfyynlix{^-wrTvLS>R(hoh8-P^Gz=n9C^S-4Sw18JlJ1P5QRyq?qw9 z2)Am7CJmEo;kOThtnVDDb!ZUi8l21DXJMrhnIUHT2s5)`NO@ds4L5xCo3`6hrC3_!Z;JL;VToiG9ry$<2oTs4#zd3IP_M0_e2Nz}IW@uLhTUG9E_Q!qSNS;P>p#!y?>*}B zjEaV&;~IChI0gb@U(7!k|H)H1^&KLaqNtsm0_B)%+qm&^noLAcB9dBLRH#VRPSHg1 zIvdTt>TGRv@l-RmhZEz1F#^&NB~!m2=wBSkSA6Rp;kaBLGd!#?Bq>KgYgk%-rpn^t zH2n)5X9N9ZNvQ8?$Sy3$el)XRQZ&uGcRHm^_0%xh{3U1LdgQ|I6-i|3S#~w_D4rl8uQlN{9>&7&k@l76O zSyS;$J9_)TY-KDW{Z0)0^j~TXx2s+^7W(4KXp^53Xl}R1_J_wHhEeA3O5c2?=o50j zZBK`PpAki|Vu+KgZepfVB{~?)P)w2#7GwBWcdTST7L>Lo&#tvQtG=JAs6e~RZmLdJ zYB)SNMzVRc9O8nHT~EHt9`*0{+%XyTBgidAGx`Mqb^Hzl?xk1`&J%6F%pM=yL#4z+ zL#bfQ&F?v89s;IZlOK;~&HX9Ba;hLFO9VB^he1~<@Ko`f0)j`*Jm!YvR1e~|@R&80 zc7%|c`8DvbOo+X&f`1AqE62JX-ceh=O$_d*@^?W*3KXZcB> zpMpI{bVhJLZfyk{;9S~OAA!F$IxCoG6&#jiF$kYm96_+L{ zLlBxD&Y5UGk>XVS*IN@{0+;T#e?BB8fNAYEmzEHZGVY?@0Dkh2D`^DY^4FcL;$t7l zkeY!zq0KcDig=b=rwK<|!HP~Lc#EbhOxHFMjwo@*yy*c&A{pE(s0r@1JG+pzov17R zb7#H9gf^ztE3`M&l1}JCD^u_6nG*4saj1P+9z?e`2+s0m5L?B4nyZ_B?#WfAHLA^K zqxN#Cfg>a5RAV4xT$0i=Noisz;vmv9D4S9pw|NKRXep!d2X)V>Rxsf@ zZ;o#+Z>l2cTj{ZRL=iN;DUi%3QKhW6R!{sUuQ_eceD4)goctqS8|wet^p#9ICIKn+ zstMQ1-27!o@*xDJh)89BySsts&&UoFWjJH-jtj(>DjH154S)x(^VbNl3Pe&sA&Df3 zg1*o}u{5Btf#FBWapW#A^^Vq)G`s_SVz7EW?~gZ(XgRYXX~L}^{S-BXV^wq%30x%N zW(tjP$XnLe-zN5$$i?y-yP&U!^(b44n$VuKT3*tT|e|7Buiu{G59_r*)hQtRDbr`v+89%$L$EznS}VB zlfZ|>XYcu<_Vnx&w8ST#_+xbW@MQ29w`x@Lk$GDtMKVw9Z%Rgegd(@+#iOygI#d1g zM#4i{V}Fz`o1DIa7blocLSVKDUkfV6dgx6X&5d7tyuPRYMlNihUCV3hg+xfw_p#m* zVQx^_bEN&9=wEa07c>)^4sdJBQYl^p$$7PA*=ufxq6PYc_oqn^APSn2O-lXrXqJ9h zjX!PIZG~w^BFBQAj;_TKOr|mLM?#yMp#$+oD<2@q4uxENS`WzLU8YwUj?C^JBoC(& zgqR1$yzuO9i{zzJkNucKY@%Hy5urcXzOL@HN35vo;)p=bHwnC|7YXu4*;Um=r^PN+-&S5^2o6YZk16ak|Ubk{Q^sZnwGUV8P#I(wpu>h(E%adv$cG(#QOsHF9_ z$uwO)%w#f30F%JJWkwzW&eBvPxgI0gzM$;YcW3MEIxZl0_i;sS|CH&dml4+c3kJN_e7+U03Jl(2rw{Z%}5RnAWEzq$}PX$vI5bKUHz)Ng) zG#49vF(h1X8I8?jHJ()kSf}A}acd~miOJ99Lt$>um$gl!M2`=F^hB{mLY@RyRO^7K zoiarcMZjIlVhFX`Gb*nNeOpW!t2XK9H&1oOIE4|rhDDB#*UdIfL8m#aR8vs4hW$=M z_QtUbJ%wXGx1hyliPh2$3u>*jR7HYo0A9TOH&t{o^3K+q8%QCfE?qAxtsOU@#w?MV z$I=$)xFn^fob62Vt6T3t2X{Vvq-GdW{J^vwmhLums}ZvTr!Xq}_E498o2+8Jrw{g^ z<{W)C_9~c3i2^8{Xe{+k1YYsyg_I*^&ZYdtTrMbGp=-bB4?kO6i4vzw;Ae>!V77pH z=@I+aM843tHu<7T_r=eoxe41`mP9;@0uZyj|Au+_0K?Ekr1)e4?Qm83hcCgoxB9hp(^B+^gbs#bhRA8MWDsX| zpi3V><@OV|)x|iS?XFxor*Jx^JaZJ;Y4*T41aGg}+&;~w?>HB9vsZv%o;F@WKdqoX zZ%b1kl@CjcPA>=PYA6452(@M^FSH7H-9DFj7MnN41=h~3wSkH|r(@lB@ps$hESLK4 zo!!dGqh!gEsylA6j_GLsj2OwL3^%!mUp=l3u2nAeLbL?nIC3AWmg@Lf&afCs3ftI~ zC&r$H_uz5E!0YBCvQh!h=!A@b2pn)_!6wRch3RnFop?rSDmhnI^V(mJiHe$9B*3hC zdaN)-@;>Qf>WHbR8Bx#b&C}cBrCez%;lJf@`cUJ^*A0%2mRCHDI*vS@pXO%kFDqK~ zOf9&JcQ_=S3d9dMsR} zypS$IKT=Ow({Vknoxkmb{^tvC&fu6|il}P)Ecebn{m+k|NSVB-0|!bC^~p;8ib1#T zepm-xvwGRyqljq`{a1iu^C>xu*X?6#iarik*TXM-o zAaUsBr{-bFt$KBLPy|5WyJ0gg5!gAm@S>jMsdrk!_`O!PgM1BWGhl=jODjVzUFO3{Dw-7}r`Rwk8E6mkzCG2TEYDy4f4eNO4 zEn@09N!rb4I`vH&vs+~SMa{_u#Ps`CLN3w&g$4K%-IK?!bs=YH6zkg)qs6E_IT#E7 z#CZWyQ$NElF5cdu&0ww@ypquXq5YDWoG>1v=?whl*xYd}0;~WQmS2O)F;-2<&}#U+ zy8stx@!HCCcn>0sVJ+}|GuQn08-+~)Z+*^>frd@>aCyrDg*()bdZ}%U8Bp(8E9%my zfBa$5WB^=JXW&iJt|(@u-7kSvAya($5hJPEYDZq+O zcz=AF-7`7XTV_nHmAn@i0HjB!`7=4fY27gnp;oc#Yb^6hKS+(Wr zwA^_@N4BvWoDb7zYv}gVwtKAW~<%5b;XCq{dLn%v!IV3)P+1 zEAx^X`YzVVB<>F{bYV62RMBnR(jND0Qc?vIXcb=*)pV5iUfg%ce`K=vUNmCRq!6JQ z_D039@9Aoxfu}y&P$YSl9cU#$*{gY)p`fCHTE?|QtXfF}IAk5)3S`DazfaW=i5i;J z>hGi|5J?B1=f_$l9HsBtCG*VM_klwHRYrmgmBSwG7#*;~&hfpEZ{-vM91dMgfeHmKR<z^YbMH%1ciYr7J?DVJbo>o2YT%!}?T#YX< zUZ$MJm%dyOUt`cyidzvVag7hpPborFo2xrQ)IGPJmw%4B3Gy?@;yjY$Sg>Bw!$z@ z6+I`~2q0S}Gp6=6=eyz%{KJy@!su{h_KsUkR`}MN@PI@W-KlSNQJ;JRd)H!IA5ogubGWnYfTh#{GV%NI@b z*Kzhdlbmn$t>;8{&Py;|hF5p}SqK&vSCd)y+zN@6U+wC4x6Y5Idg#|GRtoEey&-!W zxIpi(W?5GDYAbtekKzJ^p90`uY$UzU<8onbbn-JcEvPjFf39Tn@kMh>cRz85@ybdv zqte8tA9Ayme`YCc!s$^wJDAlqC5uuzE_Wqw2AQeJHyH6`U<1-C~=~JKrntQ=W(g$x5{}1Nxqf7#r$*82#mf0ZQ{@x9Ydq zsUM=uKOpYP$C`@R)gu0r#K7ogf7lXbm`ZXce5Dw0J!RFhxiP-RJOZY(miL`(`R_QC zY-=+CB0wAV3+fq+CTZzI;8mu*7vNVd?m9T(y3ry_eUh;&yY1!ZiR8yc(9ij;Ong95~$7vXz9%$ zF)Py&Bvaz{aPF@?>hnM+?9dtxXiFny9{1I`ZU~=nZ_cou*QK=tBK!-tYk3L&dtE1{EnhzrLZN35Uo_+mJfA*teJZ^!{AGp&VZ0m z=MO@9?&9L1uM)#U;d8eauN?Ly&pcwvgw1Bv2o#|yJ(KO-qf?s$p4i9@?XqEMO;gTF zNB;-;A9H8f7UlQ7eGmjx8kMdYkgfsgW+-V;I-~@oq#GoJp&3%TOG;W=1YsDy($Xai z!jOssNdK?#cO3U?xStJ==Hg=eg^4 z!2!q>xvB(^qDb#0q%*49V%Gbr2b@4Zd^d z;LnG9`#)EiKBhUs^NlrKvx@MR543$b8~%_|?SVzv(udE}hv#eKjeju>my2gs_?bWZ zM|*J)@f^QqjcUgghYU|r#Za;@G}h}tAtmM@$KN?3QDTj>-FFd7Px5fZ&R!Kru%xaw z1pg;AtaLCU-&3wNF2o;K&Ocl%DC+jTA2$#;CpCN$XbKQQMLJUmk_sL4+s#Tm!xod-Of7 zL%AL;2HoXlMvo5`q`Jt;et#O4adS49&KrYDn8v(rCnt1Gp0)pJbAx>>UWMM#pp(8N z`jL;PiC)SqJ%!&dH5kt+8;XS4uK*1v=zqrdwS@?Vc3ZaY$eE{SF_EX+Vln0#(?V4C z=}ppuvq8`5>@i5ehU%uVsgTu=5&nOfVtSq#n3RXp+zt2Aj6%EE-;Y4ko=M#P1~M_P zp`0>gzfFbb(!cH1caQue0pu-j-x6E5+Pmol8w_l<>@h6k3f|qqr+^MHjzRM7sr2lQ z(tYN17D#lA_uMWM*?jQ|x#@=nl)9rlOB2p7be;lhNz+L1>Q#{}a;w?9=O(4L?gjBN zn@$6R0U4CfQu(K>!|My3=wr7G`jXyO>6Xe;)eWsjmLq7t2HR;%q#hFk?+VS|zX^8S z&1ZiCx4T4>=a%0w%oOrU3rN=eH*1%9KzE=bH-g4v{`^ zq$Fdbm!|10$fX@PKqd@4s#iezTv(tLKd3+3ENv&Go}uTdS6*9tX%rP9Y9A|1L8WW0 zg8Ls>3g#Q^$etnQa$f*l+&N9Vsjfme8R1JXH^8W_|jz| z{Ei&}L7DA99+AI3X&o|JT@}+V+*$S|Q^sOl2X6o_mjP=h zAj9@JdF~_LSC0bbJWr~7lqXV$pEfH7K43#88B@Pa6Whp_$ftlE{B_56c`1T@U^Cx|mYdh1Oq%0?pOH zKozz>CO}gbO6TTNW2QCv#6AF^7m358=$F?CDr3`GpAzMZz~K+f*YDKO1Fh&9AXxEu z`kMJ1q55Ph!ru~z?6d+914g-s1`+rc*8Xll2dcvkc0l8vNpK1r$Jeq7!1$JrGu!j* zSds6DE&hI?E;v3Tb+@b2#+x)4HiT-T((}@(JZ5AS=B4B9KxeR=@Xx=8nb&w7Pzt_k zv`xv+Yue>hIarOnDy>Si+!poo9wKjV%eYC!ka>Tj%V) zu*9b(e*jk>XPJNzvg870)1FEMp#FQu`p0^I_xuFRTSzIlr?g{ZZ>NWtQ8eiLoMI)Q zjX1m3DfxM*xtS_8S0UF1kbxmReT}-aD!(a7$+3o&PYlXBjI;xmft8nEu@2Y4*Ehw= z#g&)o6nfCBlu*cTjyu(f8Q0lB@&cw?M43ogfC6GqJqg}>&s0gK1~$n&#?jM{#IeKf ztG}S2?;NuwapFiLlN3k)+sidMxN+I-WO69R&=j<~>!9lm>?`h5ckNON)P#?dd>?i6 zVDH%^1uglGmsoMKuKi+yo?_+S0h0;LpH<8I*Jf|dP;|fDNpsSI{x`$TVvWEl;n;}o zW{Id^QLciDP~c7~<13?xr6Y-lyhT6}|HTr-Qi8}4a4xq&&4)*HbDxHu0~J~?5y>Zh zG71F>RVVNO!ZFs$M_A|&wrXSy`4ZRWy6&sX`pgbm1$G(SLVVY zNiXRb}_k+q_zW^tThtS3mc1X{tuI>t_%8uOCn z8Bvnc0RSLyHpr=9*BS*$P5qpwP&a4;1nqPZct(tmhguGza>tmgQR!2CyR@yJcYw_5 zal{1Ywi@Yd@FD})lf%=Qdo4%HUXjVyq*Ct1%JX$;!~ra!|As{rX@|wm zztLGtPr`btoH~AR`z~l0SvLNzVhh}5y`BHK)jN+dXs_AcpZ%a9-Sc{u69 zkZD%#LhBNWX<)OL2|!R4|4CTeCZ}*euzvZH&kZpUXyzmhL@(zpZX^MG9Vmx@So4wAZ$$2M^@L!&5(by3c`4=1-RyFNIS6(^7`_szD}Kjm{4WaNk377@zq zcsrYBG5z>=q+bIh$x2Yt@x3W>a#rYurWTk0miiPH4!a0gJt~m|OhqB2lCu}eOyo)C zrm&uL>0~a3 z(!d)!q-`u5v~-Kv$=1y5nv$+Ex1rI1x8dW^Wal&Zl5xpfd617gD}C^uqTXhXeNfN@&YYQ?&Yb6tK@E9z}9XC;iw25joY_aRXosiCqPWo~*To@yVG31)Ew zwc2r}Qaii>EmXv6WvNQByq?uKJ=QhEe|8$%}goy&+(fN ze|&=yoqjV_@g5$Lij%FcYy;&~=FxcnScPR&i^KOP=nhe7GyNv92ENc(e!48k8_41g z2C;j{_)142tZLi$T#Mx8>(;1#K(2RTU^Ev8rT%QL^vqH#3k7UKjr45_i+qV`sOkp! z=KNFlKL~x3Oqi34o$eqFS8F)oq*Cx9c2Z4w8S%P4uknxyX@94jDMcMe;W-(-O-TYP z`0VR%$(wi<@Z|4`JX0ob9ErI@M1JBkQKPTgzVv|QT%HsC%q0c4PY%UOmW>&dzjIC{ z^RT}M7{}@GVaVW=l9+%Sc5yfN$4Nu$GQK@w^qf`kFi*u*gw9|QrSP2}Fg*Nq6dwK{ ze|m@(KLx9{+-%X;p}hI`cS@kXwq|><_iz5A;KKwna31)r!Q)d|7IX&!yl#$RYtoSn zERSTtd?m{46y)zHPZE40a3@93AO?>X%|wVz>^cm_YD+|T9OV-0n{jfQaM5WckuEVs zGlJW1KnB-z`tab+i-rS+^2xZ5Angk473b}y;Qd#p#3j_Z&yhyfNyjj;Bb)#N+9NdX z`EYI^`Jyq10s;z)GAz>%EtqCPyx+Pn6CggP|ImOh|<9B`Q8D^YG=$yRF2usG1@*nNWK-t31sAAgz4>r1g7fmS6V(jg8UK z&iTBSS%XmgS)dX+Vb5ZQZ;-CfKi`sNbBtPg#q-E8aNjKRz z>=QKeX))B7f&Zu-3x=#5<(QQos>tu~Yo5dRd+yHZ7jcG4*36{;i0oIZDJb=GYfsuU zIX*nF?CiNnM9!xf)R+DX`Af_@wrstpjTTWwm0k60IR=f1`BEp3oo()zjmfSC8^}q4 z;x)h;J;y_E5im6U2yYajJEX~8WkYXlzS#=g?|itI-t6bT zchPymywV2%6UGPr`}d|EN^IrNQwe79K!B0?;eXW&rGqp8UG8?;`vY zzepJ?OtV+3g~j><9Qhsi|5vEfe+wTtJh3^88!1214YW{SO8|_d9T^NW(`AcSAp8T4}dv^>&R}vz+<87e@qNxt8Fi( zMoqMNNTG;Uye89wM^%K|UI0lf!2dvZbM59}&G7bE;I>I}X<@AGqW9>s_k~SRQJRCy zo{5fEqSyDfyPfbN7eqo`0CqVIF`+EC<#g1a-<@KBWWQtlY zAHkAVG#-G=kF6z-y9VlUZy%sI5BryHeDV+XdG0FqMJ-d$KKLqwbk`{C#K;Ic7O?vd zni_LoWilbAs{bEcG)V}xeff`=%6!$&TuYgY%N4dbUCq9riLTyiC02*x#pw8wp{M|L`lU(==vOzcWb%?br(NBCq3-<%%uA>J4=W2W8~fT9A57?30k|BkFj+#- z9gnIxOQE-Y$2@&afk2-?MmY!%)GK#tD<`U@#V)Gaa->ZWIlyYuN*ylV3xM)Wu#@de zyES=rj!OY!UImOmRKg|7>guaiEh%-%G{7o4H&9{nTIt2%S1N{KvtCl%y$AXCx5#F`*p3Hbib^lW=nzH>+ zk1Q;~&3VOwM=PKv_twkV7ZCNP1m+yMr`N7m*0f50PrU(7oxo_wRD2W0jsbjX8DfLm z-4f{ISeIzgsm)dL87a=~(DFwcv}=DK6Gf#xZ+a%x9zBIw!>)9{>8osjJ^TFyfb*<# zRCL$!V5xAn)^6D7eLuFhVvre@_Owr`T(u}UAhe!A=pC`fuJNhrt@3o}PE6>I$d+$% zCuWiFVhTtQFXW>;87ZhOA-Vbv+ug;s+MA{Qq z$Sk-(AnFuI1SyI~AiqUr4b2if`R1ZX}~5oL{%)3VS{qU-!IU$L82uLsQXTx``Q3najyth-DG7F1!ElUSrCF}57H?Ui6^`-MoCfk(RH&ic&8D2}%GnRHF#l%;GgE(%TVXW# zt}IP9rgJil^-t|wKK#OVBt>>JvLM)WOzCgw&jbK$xLyomZRVvoN#yWxbF=v!>m;b&_s*%Qz+zw1f5ptG3OUY5 zCpjP8-kjy(Ym7v11Gv=ZM2&GoYhmZ%7yh2V`EKeO5+_)8vQ@z%g~Wq=-iQ^Jjvy)cG7PeRzv@oEWYyD$?R2aS8CfGB<&PHp_6-_Q`_4b zz4jz$n++3Io)Wuma6wUBB$T~Btl+?+nK=L!ql}VjJrFgQ7yYuu+r%Q{-hwZm9hGy& zR`r#hHhR+QWUBAG#PP4fyuXyq=DVst7bDDD5@iFcH7s6F30?4}=q+aMtg$P~_S~3J z%}j(Gb1)x+skX}HemKk+tsvwjTG<&r`GOS}2yFz5$c`;A%TM=$!Q(qY#oN8$)Ye1942<0cGpUFLU8K{+z_XtdS*6#{@vL|2W5s2SgIkFsT z$%AmjU{S7A+0U6tRfmm|X}-5l$uCFxr9xioM0`lt(MG; z-}V#b%KU1rzE9atbNkM7snjPQ+f|ZCSRGU{+{{5hMy@r9=C)VjG+QamB_-X9T9$c9 z-YtDCCA{8-OM+!s;B{q_)oD}KimBh(X?tJD39wsuUsx4o(S-HPI~Y- z1Rl!SC0T2xdYn-iUJ@i8c3t3AQHs$CSRe~|N(6SOza5r;yP3}HS<)k;#1!g~yz|bN z_mb@#D#zK+^sj5_!jMZ566tFF0Cm(ES|o!FnXQ(YC-eDE2wqD$z{Vvy9W2}Pdu8(t zYsFXszlIi6DbOd1`}oBxAEi|paG29IO6LXzjSe>tj5>Y>M4D#Snsx5Wg*c=wC|tu` z_<ax(v z^3^+qN%fW_r1Ak@i4rxs_bpz&_3+63>V!6So=_b*gD2V3qI)OnVvIM*aCISn_pBq(7F$4sNQ}Bj{WM$_-H2VSUH}pbh#I{vEI2BNJS7n3Asxd z{WU}~vKo&doyx|J_8i;j{l`H!$WGDQg5Cgg_0F1%8^D2oiV`df!1nx*8r$$Egx@&d zk{-x1o&!3k#Wz5J`~u$yg;(g-%SwEmMaPlfCM7%7E zB}2I9>+KFtPyEFM>6z?OQ1W}EjhX~eprX~zThXa{p=VhYmuNQIq)!&>cc|Yduz>4s z3SNYrzou{M*?80-j?O==@FHTr(~wuc0<`*S%E_01`Oiep~r>F-+~U{ zXE`(-Aq@3q9h2duM@Enxx`ypIFNQOSKO3h-(XgNmj{h-AB|Ic6iOYpKi&y`(&_&I- z!A+v1^_IiQA#)aG}+T~Z8OC9CCYN>3`z6bi@CM97On>& z%5C*t`Fk$#0ZIf7NZp}43~;--#YfTS)%3L$`^hMxnI;I$IyIT$(hxm|>w@b};QSLC zd0ZX#g{nXhj@bjqjRrXd(`PNYm%FVw!FMko!re}jc~?}85LrE{vu`oIi9;+2CI1jxM8oUAfHL*7P$AhaIa3lj%eZA890y0 zN28)X?5_CU?hCb(U%;r+T50qC8&?A`-G|U%=A|0#E9z@S%t*6?LvS+8Tjp=25)psb z00BOR{zfNYW|(E^tjP+Q>pH`KM-s(y{ZB72-K7tF*qk0K3KUDbw-sI2VyP9z?H%7- zE7my4ZLOihRcPtYaF2upQP0N&kSWC+&L@!pZ(DSdaA?41f-vIRq${k0p{BX>2snL@ zM4C2IC}@%r!!h)w_{7Ycqw{Yvv8E8izF!ae1Zl-oEa`CVYsC6#JkZY*{K+lyhrJ|! zO1_{H|zUI?cg6J>?Txof#g2uh$9X`~wZocSvGZ z>91>Iyh$iCk!pn*eX>GRxX?e?RDyzJkr}C^WyQ>$k4<}CE)f6_{f5gTguf&VQy|M* zZClH?Idg)d>wZ`VZJ^y|Wkk2Q>N z0_H-4$Io z6>y#FX~SqO#kfK*NOV!9-4`?~@!>RK4sUE;DZjnL74H;qbBF5zBS>nCk^&=9k~A4T z=^#^@bm2Dt1eNYew?KOiS9fK$QF?q#YtOY;zt#kQ`MBsXYtnLYmGy45VE;_K?5EsJEoBNE$ zL?dm}&+0145pAxP=gGobFo_1|za9JR1SBY%BX!^}_5m}{ar_09nxoSs{ zxZ+B}=EQ*^LNg*M+HSN#7Fi~;OI$J8iUGZ3g8m0%cq=YkV%R0w;*CFY=V zsxq*MoYW?MI2HMDK6sFoaB_=$q$EQ{GobBpr`N|_4nESZDCaye2e3?(iiE^FNitV1 zMK->G6kHkZ{&VMTi07syX*30&Jsa7OsHl{@xM}BL5vWFGpFtY*mSzxPX+}3JM)IdkU$=)3A#=K!oU(EgE+{zQf8CajUsBtL+q{J5>k>PM^MY;#O zd+%;9?k@0UP!Li%u`tTWKsfb(?$94@J>MbD_L#{_?ZmD8TD>cEeD5PQ0WpHEDvNW% zoKd6aPwh?F+Fdm9%5!%JX$mexkslSO+ZpX*a#QSH)qv~TQH)>hdNPvoB7ia~Jo!{r zvLy^E*1A1@y*#e9M!|r`>UzI1JDKWL^N#F>{_bn%P0e^>6;p514!8pp+Kbv4clU~d zcrX0{TU0#Al=%1?$!yS!f<<*a(Sgd$hNeNuZjJ(%+5GC0WshbVPIEc`N(2~$+3eB2}Q1>Fj=*&Til!tr@H z>;60X0YnLcxYy{u75;bl&WT~5(3VLicj7>OE9mo6#M?%yN58ur6Nnfp$92J0 zC0uHs9N$h#5`r%R0c5+EbMvF9$t0Mm^YcT?aYW7X!kV*D)SN?ST_IN?tYwFGvwkJ8 z^!5P3i7~vK2sgZh70^DPeA*YQ$U?-B*hF*Xcm!J~xaZQNC~_f8^M=)LZ>I5(176=W zM0#@^NM7$rQoL~gjFkx%eYKEv{35DO)&wbm;4OhYoWOOB!TGD1+@cJXM|;gwFXvI` z-bgDQWi+qy9TYguExyWtE5mg=Kdi;4Hx^EPC&d&!eZjOvq%T@IdIP%POdTpPmi!?h z`Of$qLyEykrETL_)4LQei@tf+<>}JJwp3vgI!<)o>_z7F9A%eP>h|-W$ip{s>PmU+X-L9diZoeuscv;~uaI zi!XVgB?sRq^~uZkpr!@M3q;SB^%fsAaEfb`s_TTNIq;$(J$rj*36m}Q1M2Nodi7ow zZ)_LHMY@8LY6-;KAdZU3LUz0x#_L27(!MiuZ}<>4v?RnGJY7K%E!-T#Q^*14%`!$a z!t+2&rt<0J(u}JNXi0E|3e*=}5xFm6Ilaa}C<7uJ!)KKrqJ3d-gJ5TjYkfEAyWZ(r zZ;#U$z*aH53Cp$Y8lqs|O~!B+R^0W*^R7sCjeU}BXqJSPpY%DvsY`i7( zp<~JMG~S$T2VbWM=R67ZKkUbeQo!G z98zGvS{HiMYl--jz1@Wr|%30ImzDV4=y|O$@6S_|0G2#sNY6KMYcZu)DpC1_(?He&a{dx~%$Srz%pIovuK zg@>$w*T{vlDrwzvx@tCN{_jSRrnTKN~_#&m* ze+>$$n29Q~K@S;(Pu`DtIuzF#;>nrr*-@anV$JQW&z(8^XX#S2{Si;s_l@x%v^2`f zlm4z?m9HW!id%XI3QPY z9?{d*K5BiUGo0Rl`MFB}?QeWbPP73N1w@5w)*~bOfw-izF~A)6elrIDZ^fOWz0LY> ziiESjc=dd%izMNQ*cZEC1bu9l%Dyq*v^)d!>85lW=zAx9UoM-kP>quTi zYo2#OeW%!%;S2$Vb)}AX#wKK5D}uAT)eF!=EYU{yqh-@E_dk(FIrCgN~#F989JoXvt-j8M)i2`V%)yfeWSCE zB%a};qO>Ok)fOxgj1cEfKEW`P4@y`hC5E8NRvTqyKv|OlEgZ+JQ(_UvCoWB*2WY*# zt`7&_xyF{E@5yWDi7P_jflaP_S|A=gGvP;>xK0AslbZAaU!Q;Me{3}n8dui*$VIdJ zM@+4a?jwgZP{yJC19Y)8BCThSPXQ;eo>Z-_r8TybGxwW!Pg~+%)6d2TCT9#34|_BrEEnVA6MK zTE(w2a3|DhDdA93q~i-!yU#v%NO^s;Sf3`~u#0|O51pfUuF~&7phTyl|5#WfGF+F* zewxes<$32^k{IgyZ!$9f&v;MD2?=B$rv#~ROaw>_i0kl=6?>C`9#KfItI=8wY1|;| zH#?Guyy_ED)@%dc!kK7ac@ZWw)qN8%HnDdr`teykJ z=*dt`fV?TEl)su(#}s52fM^dHr=h*-9V)8RN5Clf3@YR{L(fu76OkA5;qMX`0@Nz z)DssPdcU7R%lUVbjB;nAtr|~XsX^dS71CbI`wKcLoWjkGAVMqA5 zMr*!TpX{f1M_zOWN00z>S zCt)PYB^|DVf*@D?{inP6oJr;|AK`>t(yuA{FQea5 zW;yL(KxPazYcwUtPt6&MRw{ps(k97GWfkfb?MWIY@Lw}ItSWSL>4XyB8Ma2o;o4Vu z6AUTFB;>~&-c$UF=r}wJ3~$qpD}%kFnT%a!xvSE*bvP~GQIY;EBrB`?5G_4 zV6&R3K5Gvq-H{=)&xvq^< zb$bmx(p9^^DFkB5yv;GsLQ#x*(M^0UdM(XCXo_K|%2avRVf;V}Tt#KU=RD=b{!|v3 zQmji{El=qwu@aZ7c3<$ov(H{?kvEFB&{Cx6ROoMlicX779M8Z8%e=daWv-ZP<1C}S zu?h%iPp!s{*|jP)gUIo)|mO{o51pn!c@9UPZ}y;JjShquEy-oL!8b4sR9eVSQD zw_@r^vbTiq?5Lct8NGSBKnsi984KN(N(H6;xkfI-Hdm9+1ymz>Mm=bhCrMpDT0AYS z&*@|hxK(U9gbaJPa5gEBLC}8a(czc0dgWe-N6e+ch}R)wA323Dztm4KUb9;+#nD8E z&UDpl(2iv3*p=?QkicPV)w=%h)%Xti_!LhwGiEUXhf@7arm|o$@hb4TX@*R8{Idf6 z0}wR5Q#GARoikT;Xy(X|f9(aMW6x;oVCq=}e?ZI!&NwayMpUd$u+7=>uv8A7bf^d7bimZ5?U3enio&nk7RnTVY1s#1l# z%?xctG8n(c3krNraBrj6a>4A{?s*$sCb=OQ=l z-J9MzlA&L!3F0}L3|cmG)!jDeO%nGA+z%RQku(dbD}U*=N4PEN(Tx{C>hV#?UQEAk z#B8BIkhB>(>U4@kvY74jy|(54EE3yf%v`Zwp=fGHsbbg3A6Bz`;x_mAC*p7FmFf^) zv1o+Ku2~d>c+^~~ZFiE#EctKCl%oYbZ5O;7wE&`PobHRM3gU~LtY7J9+4VL(19lo> z&Yu^%j*-x!Osj?!)r*h$4$l%Ub{SO4I{&j`0tr{VuPYXQ>iD5oTJ9-IV%vOFSSjme z>;dBzRn^k#SlL-f)nv13PbXh%c#mW~INow46Um6{uy@r8dSib9s&Xj_GNVC5kJ{mG zLq{^at-__Ae3Q)w^DWoWWs6IL=7=D5wcrt%Eobs9@x*+DFv~_UUaYpUMuap3R51_b z)Jl|>IrwNWe~;Fky3u#STh-k(m}{2L0YKr-&1(5o{tLdoVz9iyy@v|Yuc zCrL5)E7~_n?!0x(K8<@CP}d5H!Gm&+^tApIf{QO(^A)x_R%q6-CXq0E87#;4+;iqN z+bcA4taH$217^edRop`y0_yD7Rh^A9ZAKQ$^AQeWCG69I7Ot_YbWC#_->7qoT0kXvx8V8wI5Pd`u9!a4WcT(Qy<(anQ zI?BqSz*y>HAWR5~&3u)9^ii&Ka_Vd#Jbm%K?N3EU7ei?ppAiK!n+DK0@HL<3#r@~U zq_$z-2{q0Ns#P=Uzq!7gABVv|aWN0;(Bw;{vRNiOG^cL9$TNGzM;Q}|v$#%v=6c6H z=~29-#lD&;n@xG!;_Z3|y4EvBrx1p&KTTOZE|P&rJu$+_&%-r5`GP+_ z@uBo(owBI97y(Zjp5W}Pgd|yQu<`~`!t=c5SHqUwZbFH((%oDA&Rq~dakDUX`X=ka6pD&Ipl4LW6Hc6}SSgOYey4-gX z4@J_KtN1u8&{F6J9=W4`iv&HIBp7=t;_ty!tR*~#v&?7L1YIy9B{X($WZB9C99j*2 z_h02=rOWR^!wkYF%}^TwmdXw?Jecu(`F4?+-rI6{aR%K(9JB4%uPV8NG2orx>w~}OZt>7UA0F!j@dK5r;FD5^30-D`!;HJI$ zTXbEEKNqTbc7Nl5?ZP#{ZQX52gvzzkAY?ruI!%Cq^;Ozbf4bKKnP*DjJkR`DlxItH zO{?(&qH!C#DR?+*J#B3~%2mit=p|sndr$zI;Z;Z%TIIKnYYR403n_AoU450`p(X9{ zhBtvUt8SX6j?uIe%{~Q-3=eWTw^&foUI?)qM>l8=!=F_|FjiCi>TL42Hz||L3QKR! zkh9QhEAaANF%!n->WZv=nNq5A*z&v0S9<;I=~S%WXC8+m!2>nh7AMw4dR&a<_m>$RThFXaM{jj27}%VIE1mD65X$35=6CD>SFDO z+Hyv-mIYohi&^I?R<%o#7tb)^{ztw7S^Z{a3W5iW?2&V+mLbE*fMNOji7;# zM=GRyiQ`-0|XASxwf&ouZ`q+`=2(oCMEFq{2+0E4{EW`*){1Uom>)cDV7ASPjYPR zRQux*uTVZs?yXLiAkz!|ExYBPdDsmEX=l$;aK~&TEF?YLd5-)yVs_fE;w0`eBqfehdU*F z@P**7MW5c>M+=RMBwV{424hI+nwk_w45`FFsgh~21C&GsoJI@n3zQe^u8`O^l3Y5} zRLvPiAml}#t)F6aDI~+a<=zTeN3x6M6_aa&jPq}&>1&>}E-WeB^+U2B0Bpa8YR@_JE6fPQSa(tE zj4RUjWm@`5$P`%++pWKSaT9yC<_y5ksku$G>)ufo$RSFn=u4uFo+W)2|54(37bh;f znWmuBp-4hlWk^Z~9PtZj)awa>o;=B(H~t|Tz-st!q%)X?axASM@U8Rv=I8~}=o0+E zf=APP84Hdb{3WCb=1jTI7uJ6*&h`3&*wnVMGpSA?j7o3cKx}sV-+#)QP8{f_^|5dH z9kKbch{kDX=*SxNTCg{-%fW11IVAmi4mTSv8W5UOe&m$hQACCAHKs5eVeE0>+ysvs zw_8TYCRxeOJITr!tU~?t)jn(2SfsodejXl_7RUB;!-?(j``sKD5$T^ zx&L_KWKmgf-=@p=E`8kHAce2|acW0B+J)C!h1ov;b$1693crI02mECm%j;Pav$wb3 z8bLlQIq0VHs}-(AI=o5P?!E-;~ zDXKwpg+^g{q{pP!ViOa5QE|2C^v-Hk;tii1R*ev)?!tck4upm&qRL^X#9!#h+2BG| z_Sn$v&pj z9B{QA(d{*?GfG|nz3}dqnxM2+@WMSb%Th0-x)gGkHBov~OiFdtBDYe;Z#7{1I8Roc z3FTrR?bf*V;~mGqgjuJnIg3;vD&QzByzQ0qrQv(=hb?5eg2*Rd?P6Sx5JYy!%gHDr6mx znR8sC=L>#CadEr~=d_{@sba|=p;M3L_^}!)A#pjaQvi*d_dM@ z_wDtO6)_X#hv{9^Ns@U~{O<{qvjvAj2#s((fi__@_(9iUr?U_!WHeKn3I^KT-c>@= zRMGH6e!>Ykf;>qe->|lYb<;dh8C@SNVy#?#`U{doD)?&RdnBCWftcMVikRZ#-t1t1 z`L6XXduiIO!yx1+k+3&KkxnQw9OJKQ(K#4xtyDk@VG76QRleJ&F+Tz(I3Gs3k^d&% zZ(j?wAIa($eqYt#y_LM*L7iWFx)yee`4uDAO)kxp^DWRx_23bR)5(tQ2NKDL%O61%tU({mQ)vpxhKmX zqnp}_{-Btg2+$ola?7phzIGG4Wd*axvr8Bxn&%x_RnlCg++6gvvB(T-a{1HDGnR!j3|+m_LTm*Lc!Pvj5eT zaNEi&5ntMl=sB zqFj$u$}9v1K^{zwrPbLiE94HXGmjQDdPmJeF4WR4hEuCLS;#%e#3R&62adC1`coXn zKK}-M(64!)7_97o8P|W%5?rA27ayqTd?}@bWEF_6cf^nA8y$6f0oFI_YatpmHTl_S zO(BVz+Uxu$pm&-nct^}8y}*o?KqPlcbt2p1BU=4ekPkAP$CWWpOfD>0GNtx9xxi#` zp5N)8r+DJqK3{Eop5QX!?21D%Rear27kHsy>Uw2O?Z4VBpcN^+6b?h1xrFx~1JHmz z|H2W=9BKU!p%NIaO_A%@G36jmv1^qp|Js8Kd%5%#DOl3!g9Z6oeB!+y;w(sxa>KtItg zM^|*!_hYO46BVxy(76ZrI8k0G7dUP0qn-brRTEo&@er@=wuqr~@z8u4?P^N!Tjg#R z;wo@4xmuaY_O6^D%H@`GoWFAZ1BW85KT-MsU?70eezchDZ^@2tm1FoVBBx+rTua}h z!O8q<{0mHBtVd=##^ zs2pQG)Q0<^hS;VbYDGQWG2hG}iY*r^Qsh+_bWHm|=KL{;msvZ_mGdL}JM_;uN9iXg zoUcPv%XsB3jWNb7ClB$Q9=L{%y!cI2SBK`Z3uVI@?Z01hEB5g%D@XV;JyL_m#C`;u zD7xU>jl>If&ed5|fSz$G!E#uUvd!JN4EdvFcq>U&J;$r0CD}oj4o~*gaOiAOBaAUa z8V{&Uy4y+Ib~)a$?;A1DHwnDv)I+H$+jGHr79gL?9@2LwJ8AR2s(>B#wgWws9sO~> zzo*JTaIHur4dv%Q^g!uRi0Z%wR7g^xc(`JFDvl^C!G28yVmG`Yf zYe|*lW!;!(k7!QBYGh8A~eP+(36~ zYbEk%AOl(mB?h4u`tBF&s5n4`A!%Ix<;BHR!)jkhM(qoiSt4!w}ha$#@Eam#D^3yHMzMf@WN9=bTK zVnwCLQF}Z2-2f3=Ia~h5m#~_-M`{l>KNOV0!J6&;{Gbf5E5T>lI5e&hMX1)ppaTbS zADJ!`2wXk>gGWjtchzDi#lNjFh(#;~^9IZa16mIGMUTlpfEcZ#*eyF8Ha~s!-*z7G zX3~Vlelnr2Hxe`;10udksfK;qnb$ZgI*O07?E&ORH1ufJ8fmrq2XNu047$gYR5A)6 z=7mK;Dmm?|&;ls#^W~k0h)cs`x`GfB!zQvh18$!^6=e1o`MHD%+U8 zm3#ir88%yTRJm`}tD`S>NjSL+6%SIwRQj_Yx+f+Jud?(K_A>U@{t8m=hoAquh(9-R zdgx2Kvc{l}YMXapSXvuXr}(L?I>&#l=)IG08W(KpH`T2F{^|#V6r6(9tjzms;=sq8 z0M_q{d3?kCTJIE}a!HX3NL#I6)IFAT09hJlw52IsOF}jqb?S?G0^7BK-E}O>{`Zp9 z&~3Z1_`D*3iW%!VrHz_sx(jU;P#Pm8<(u5#gIAg< zH6c)!xv){Q5Aw5-{9pq)1=xKptI4=0_vH8v?4i{<^goM934Na^xrzgFAzuk2LW`VT zEBRNINuhj>y6UdXTS=v@y(u=DynqqlEucu_i=m)6HY!e0UW^&x3?(|69DfUj>i1U@| zHV?;v)^DbezE$#mO!tO#gFAdkS)#^7!rh< ztCJ%@bXI4P!Y@}ili*scTdFBSmV)NN@R$7eEQ9z$2YYHZgZy3JZ+xfRk>`E8qIzSZ ze@FnPt!3~D8=#}{>7pB&7z;Fn!;>s2(b;l%H-;uR7PBO^Qjqj z6ltV&*ux!z%Se<6W`B~=^HPg6BaO`Kd**;Rs}zfD`IS+#aO>%lWo7LXis(h};PsE~ znaTQ6$HhxonSb|8K_21@6Bl>-ufXWc7r%aqvmlGBidV(nVD5{)BefA?ii{LbVTk|z zJ&K%Qw1Y7FyJ_l@I{-P;NQk>{u^W)f*Ak(q;ii{?Cr6}kqx2x5`aW0kB4-*sYZ{Wf zD`9I)=BoiJH^E+H998wQIQ2A+6_&qloCg59w57FyPLd)eNLj~uYDSH#BGWg-(Z*=n zzcn0o&LH3sUD}sGv54mxjd!Z6(UtXo)|Z{^Rg3f4lf2Rj4&^5IrZ%>cu@t&AsnWK8 z0mRe`eR)rZko#^kN0j^f2re)O^iq<>kp6npwhPEQ(-E{Ke$6d?Sut`M)4}aM466Q$ z8WF4CDzh)jBZZ_otAyN#@f!v+3rapZkohM*Qo8%THiZK#{D!ra=6b?dM%6VlZrwWY zJ=LI=R_`1fch`Qb8A9{1Nd0;nd?i|aF#B|sl$my8HfNPjYA;SJ8F+}Xvw?q#IXC7W zFMEVDY+Vd0c_^<&Mg3Hr^rC79h*x)@nX-3Ih=0=jaaIwkc1d`Q^RA#qd?^eY6$e)n z_-EMVmB#l!YbY}e41%DAPaJBecm{!j`p`>rWOlU!EG2}&?hi|`F=9)>k(1WhB&xadtI%x9n)w5$VhT_e+QmDTqps2 z^pq5tvIEJVd-1SQg9S-qa7zLvL^)yb6sEgabX%@&SdjKhIMZBRRyUBTh&(MRI#_*( z&81HJW5jD)>VV*-9b0q6GLXtw%;7tEM+A3HvRr{$Q5z9S`h$bsDo&sc>!90~+{&FR zgnTe15GuY#hz0)Z=nbv^3Fs29&=f_3as!y6zll!&;Q7&;1-}&UP^BW5@a3X_X%iqw z_al`PjGXj8S@v`?=FfimLm;-9!6`Y~qLcMF)$(?OkF< zLv7E5sJJI5vT1@;`xSrE4fdR4D=BCYLZ7OF8%FcxQiUl4P1>i(&-z;R=4E(Wr--0}s? z$0aOc4z}xG{Eu|?mHv}W7Ms!iT>uqI@u8@!257(?2tQ%D&hlzp6VWvIXCCHTs2zPe z9=jRRV^U?s(q`3PFd@1A%-p$_k8RNMjHq?k?4@9)W8kBC%dpE^Op$j2hI*J>9}0|o z`pAJpc&7I&=F!U;^lvIlQ+}~BxK!OYvzgWN;-iqtUTjx-X_Dfrk`JFNi5upI#To8z z+u8k-NFk-?^l80~y=Y$-Ld_2LOXsLo@ow4PCHti3jyra~G*)eB)}GWMep%-G}DZ zz9lhV!?#Y##-x1<>6#_UYjB)G3HWA~PQs!AD7DFK=XX6O@>*>U)72!UUeQ8k#h{@+x981y zy~gNagSN@zTN5ND zEzD4H;$!h|l9h1I80S$US|ytsifx|l83^@6T=u2wt>zdRsKQIBjCPPDCk)ACTW zh1h*K%YREB0_vzxmj+AImr4#a{eMPJ2pzh%my)%f%a5WIpYU!kwYzo*yDowr9?Z^- zP^O7oOp>^#nwK$t8V0)jJ`VRw2%hw|fuBstSleE4rVTPkO9<%M{SmXAV@7?{oZ~(* zJ|#V=Jn?z<@0o!koXoFzZ#9mM)@;wy`n~)%z1XM78mQXzj!xpJuo4zM6UF*pdl+(S>em$u+8Q}ZNvAG(xkEtn4JY@~|>dT_WsCOaRm6EI+z_?wm zxD<+OyHN9d$q+O9$Cxc_nWE-Ek$8~0?U~2%QaTuSy}MdEr(j!21#O+5%CtX|F6TI5 z%{~oYPW^Ci(u*xGf93g*T(Z#_^2}>G(PG3tg#McAxDkOJKh7WhbSXC@>_8TnV?fbp z?#paoCyV+BKOw?%!;U;XgYc5+SCws`_=&r%*N+`u^7-K$3g2yIzXta=>OlDdleP;v z&RW|!|H`b%+S=u77v2dp-K`bVoz=EuVPtHzSa;+{t>U?JG!hKOc4)EUyTJ+e7UNtt ztpJakS4O@|J>_{k%H~ouox!bHXqBM?^BQX#2w|dEaV2K@QN>!f(Ix`{44)mYRwC$NA!!2^*>nwc#C2bS0o}?>YB=fb|uQN{5 zp*&ZE-ET)p8|6u)A8SGtU#iw|Z`}#Dg*5f*TkX>)JXrU^4Zx2^rPfPgSTy(=ihDrX z)(a1pm!9Wuo*D!>i&FajYq2QqSg%`8uK9lHB%@zb^xkO62b<>ea{QX(6;q<1pw&n$*1xBNqM#0>2i>V3d(X5m`KrIW z&Y~Gk_*ozpYj&l_``BH@JYgebM)iTfS``) zIu}(Xacj)A$qq!6d>b38}v%;_? z#t_LdiJgtzq|Xyp=pX7s9YT;=?H0-H5-NH45HG8gK+TmWB?4~bw(->9mP*3*kByxA z?s{RG+)q4v?{D zDbX5qsLQ)x+>=m4Z6u z?3MTOoAqW$-SJ@Y%4NP<)hcdZ`2VlT*Ws4mFS^?J ztedqM|8FgO7Q;8IQU2W`H7@(kd&ctq9rvXAi5z=L_^=O$sG!Kaggx1h=e2}Xf?CXj z#{!<07X+Qa+FRcu{Xo@u^y}%T+U%;aU{cYkn9+Aj2vlwp0&X{ zQf57-T)2x1SRD$#o(X^0&IE6X1R#(%pXlf1EKgaFqPz#*YR~oSy@s4-TA66UOIgl( zml?gBOnVf5Qp&Rh+HCTx|0$DdoL|$|n@R7>-=h%ZV=T6gzGR&;!XBb0Npey{YQqf5 zgJOUp&QPXkwO6r`V$Yw$xDRAnq$$N%5&abh#P(>Q;GHzBkEd@3JhJLvkx$(8#jIG0 z{$3B@B9Y%-di2wbruiG1z%>zIU2H*Fw05J5oJ6qpLEDsq<`@^wG%Y(O?bovk6UDT& z3Owu`NUGG*^}QQ5Y>dCvCGW=3e8qIPb9U}$)>@?=j;ZbrCNrNcxNvgRMxUTsGYj8% z?2c>y4%5>!!-DqJ6nXF6f~^)_k@20YvtZ!Vza3Z2C#nODwXEI#S&CzVnTt17*)h>Q zT~{`fLEl6MGRm9aCyhKh;vLA8QQ+F3G1TUiC%0%OHiG0Q!|5V_sM*X%1IL_{B-b4k zrobK0BZ3^fO|$p48d^wU48KuSWR$FzWQ`7-jw@Tg*C;@zs%%a7)scZh*Mi;r@}e|M zO+xIoM}5;g41A1q?=K2Wo_jWb?6zikm2#f@ur0)>sIdyzoBe93&~H#+9l~1DVv-yA zyW8!sCO#(7qsCe!a9oG)A!iw^^*%Nr6qlSQM=gPq6W?qB2_YaoOrZN=SyUX371r^+ zGJ^kZdN}>;YMH{e<>5ONV%_*dg316foWa zYmU|<@m0uesWB(26U9!^|ekoDuSldsr!S-|wok+SPY*ccoC*~u1 zzpge*1>)X*( z^B#IK(Gm|wV?-~@1An>4PmwjSTS*mJ;f@A>hMF(wETlFaD_w3X{%UD8Dp+Hk+1Htf z{;s^Ud}$4?{eIbey2f+*rD;m`*ic?j@S45t67kSEK`z)}u9xo-Q+|cde^oTj#?q$- zHe4S=X!|Q9_@Y{UFyg!k#Z|}JtWNL4A#iY(o?S|nuE*`2>$aT<^u(jEMngNju+9iI9(aAQ-*(WE!;JWJ&>u`q8x_&O0r{5sr_64AtZcm6 z%lVH>6+xItO}0_e?Vrjs5Hy_h)$vN}=-RJz^>ixEN=#wh@oiOOx zQqbWIf;mk-2y$@t_22c68>{}V zoRAoX&QAdB2*log{O}#$!|$$&uhWpl04)Nz;0FUCX3s8Cn+pB6u>3dhuuru5$7BDnxJZLPXE0*$B{a8u$2$X%o$XnL^}c=EusehB#n1^cUETrVAqwE?Hn;ZA!$QIev26 zzj!2-pDUYFw*rPcp#Gq-3kW``G-O#DvDrrLYcc!wu!ouf=1`XSNnS~UalnWCM)4(} zabWsD0M(lx#3Z>+snEicKXmKt&H6bcgjCZtz=x1ZCbhNC= zoZT}$s}pfxf~?Bo)L=Z%eH<62NYGFj)|@+3Sl$+ai*d7#6u=7{Bk*(YeyR;NMyJKWPj+xEi;eMsd#0^iRdMfSG^^`w9$|3Pq8`vV{c?NK^fQd7_6J z$7_aiN%G!rI2Ct5>K@6VcA=O%-uhYt*94e~)tHI%Xwb<4xbyMp$X0owBE~jHg_lL6 z#;NQHl(iMbl9gVKFH*q33?Raxb_suCv(=O!H&|{AuE~M8#IPSDPF1%)r!T5|3E{N3 z%nN%{`v*Lr6vW*{t*lY6rqoJo`-_t$Wcp^G0Y%e??b5(~7kyaU@fVx6cu~ z$+udXYYq)r$Y43F?)WL&T9i~wb*$jOe$Vdw8+&b3*5|Mrz8nr!bvZ~|c-~Y0nR`b& zGyhcDjSWAr=JV-er0({&6BL#f9YWxzj1L?Ev%4BaZ; z@+0bALXC6OXX~r5z=Q`joK|UoYcxT!HR+Rg%x?giG?_N zgzG8Br5nT@t8tgZ_5G~!|C`1YnD}5B2vBxVqZr9u_!Mw|~F+J+$c zXoA)DM#YIk3F`4P^n;r42UPQ@ zQVbN24Eu{*2L^@4gb3F5L-LnQjox{o-=F?gHYzaP*C$PUgYPtTc@OToL97oYofcC; z-44dzT8dp{iePCB;d7GMQ3ALb)j+(EWS3v+NEWxdsgY$l7aTi)-Ed%obbj~VdN9{d z=>GgMVLZ!)Da~joWT()a2G>y@`>YZTS^T4s{KP2piSf%ZN7^Ff8O@ z+S=%9Sj*;n(d(gJ4soAlKaCR_*zTbaB)j9tL3kdGz#=kyNB(p2txWS0&+Bqoo>AmLE+wvVQl^gYecDwH0-}Jb=eV#&M zbBVtoK)#GF^Xi!Jq}ZI&aQx`$_KGFeiPH{eN)qHJD2?3?ZZ$`KvNbE053^by9Em7y z)s&t)IWleC(#u6-r@_PEZb=2F{z~F!ApeAkuTRW9(D;{Z#l)YB56_gFZz;WX@xJ zNp7z5UA8M6xis3eU??AwMqzOz3?^)MEO`uX1#*XHZ~~271u{6;p{k16_DZ`L7i^Iu zA!ssbUOt^ZwPJ3TVA)Eq4}!1^@Eu6OMap+CBWq=rnQ=zfbHE*=R_Le86W z?QL(fT?qxvS_Nyws^m6sF#LY%lJRNw%%#~SyF;4x%#*cxP+vAPQp|_7cJa$bft3qV zF?5ZKO%?;M2__v_c3rxhJYU>Ul*Xu6gUgxG3Sd3_&!vjr1H@+OsUU&W%czFm4=&zG z6L0F+wmv?{6Z_5VyefsEO{({Y=#>0?jiWEj9lJ^zIcz#l;zOn!y*;;5JmwcUd0?}u zV5YQn_*R4}cTC5tlJ$t$aDhbeFjA!e{J2cZ2BO)%<-t4Q$a=f*Xxb@C>J;6OChfEC zs`xwieQLofl#iIz5(h54Fp!-x$^ZQWgi+t2bKcxGAZ!+pI@UKALw3Tr_Oy2NfT`UP zgCS+=r`CbkpuUZc4YK&lb)pZ!Q5ekjtyI6l=Fh^h8{(0V8`8`Qs1Z#kOA`k2AG6j8 zoe9p6X(}vLYPQrk6mL zsdU#rz19@Y7^t#7yL#X*MuOAY*@WQ}3fJs||5WLTh8Hqa*N z8H3s>e&%xxW4%gpRoX57+jVd6cdXK%pD=w1KrROPm+exo5F>Y-PF}ruSa4-^eIkJA zDGR1Ss-JCAGJT_EmCK0NxiDDx{Wf|06IfOxu#5`o-akkqdlV&d&{4|*DL4sb_mHD* z#o!Kw1+8Yg8IK45Bf`Ec(0*uzK-LZg^$Fm%OY2pB&Na6>CY{(6Y*OA3Sn#=~Qn)@h z6RGER!znRh*H2xXsV?-Jl9@D75PtfftYL@>Xz!k`UaamvxJ4C} zLtCKQHp`hao0@BNr#F%Ks3te0Q}aQi4kRZgcQ5xOw=~x`FF^B9lqw598Ec&=y&5CY z_@DZp=PY>xun+H`5R81(<=*brOrXk0F_H$B><1>@k}&EN*z^q5<@S z!H<^ddmCn_j=QxRwV_}uFQ;d)&Bki`BR%{O#%BF@PoaP8@YKSRo&F%v^0PoxbF@BW z{Weq@p)MQT0wFrF$E;NZD^4L@AB~*;%Y@fm>G9=(c*?H6{nWer&2 zG55A*3HfG);nIYM=`Fle_3VrfeBs#C?%@j2;SlMf6Jc?CEj5+^4{DOONpvhOSzk25 zJ(2r35=Pi-y3Hu{#Qg&~<2K&=_+vq9F=eY-Y*7FDjTa9iNYW_B1ggXe?1?{l^kgT# z{vI7HG@U^)DZDLKu&=S8XC9V&{D8$Cxka{V;!g(OVzhBWX8WR>N|~UA%*So(OJ`f~ z(@L89J@f`T5e*Hn+|ugd&E!}@BCt*Is1#*c&d+|9p43eLrMwM2Z7j5L;=tZoU}~E@ z5%`=*fY{6Ez}FhNPfP7(2-osE2?Yx3&JoRv+Qk%ci0Uu19OTcvZZSN$6Iox!Z4fCS z8#C3lP1NKe!=Rk6$_RL-r(w@bu1Fr2Qb`*`QZ?&zUuBYr$@L9=*RR2!2SyO>ZuTER zL9RA;;)3GU{wzL^i+BYW!`m-L?ScXaU0yY!X@}~xZ!-X8XhHx|Qj*7!G>OBEM4H0n zr6E<}yDeun?Ve@t>a9cpEnV;PQwpjG)7jO7H1}oASVk3nhTdHUVLb^%5Ve%E=Ce)y zafS<##P34MW1*mXQAO{>s0muE_^;MII^q|P9o>7JNQBBQ_a)OFWo|gGMk%7ehQIizyFjwjz7sY?djPHYGv?s;wAGcbHtX`d133D9`Ck1r9N%=%*pVq?Pd;p=+

 | September 2024 | From 376abab3e7e40645c78b87532f472850c1ecf087 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 19 Feb 2025 11:26:33 -0800 Subject: [PATCH 118/123] edit --- windows/whats-new/deprecated-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index d2c4cc59ad..88573222b7 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -47,7 +47,7 @@ The features in this article are no longer being actively developed, and might b | Feature | Details and mitigation | Deprecation announced | |---|---|---| -| Line printer daemon (LPR/LPD) | Deprecation reminder: [The line printer daemon protocol (LPR/LPD) was deprecated](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing) starting in Windows Server 2012. As removal of the line printer daemon nears, we'd like to remind customers to ensure their environments are prepared for removal. When these features are eventually removed, clients that print to a server using this protocol, such as UNIX clients, will not be able to connect or print. Instead, UNIX clients should use IPP. Windows clients can connect to UNIX shared printers using the [Windows Standard Port Monitor](/troubleshoot/windows-server/printing/standard-port-monitor-for-tcpip). | [Original announcement: Windows Server 2012](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing)

Courtesy reminder: February 2025 | +| Line printer daemon (LPR/LPD) | Deprecation reminder: [The line printer daemon protocol (LPR/LPD) was deprecated](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing) starting in Windows Server 2012. As removal of the line printer daemon protocol nears, we'd like to remind customers to ensure their environments are prepared for removal. When these features are eventually removed, clients that print to a server using this protocol, such as UNIX clients, will not be able to connect or print. Instead, UNIX clients should use IPP. Windows clients can connect to UNIX shared printers using the [Windows Standard Port Monitor](/troubleshoot/windows-server/printing/standard-port-monitor-for-tcpip). | [Original announcement: Windows Server 2012](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing)

Courtesy reminder: February 2025 | | Location History | We are deprecating and removing the Location History feature, an [API](/uwp/api/windows.devices.geolocation.geolocator.getgeopositionhistoryasync) that allowed Cortana to access 24 hours of device history when location was enabled. With the removal of the Location History feature, location data will no longer be saved locally and the corresponding settings will also be removed from the **Privacy & Security** > **Location** page in **Settings**. | February 2025 | | Suggested actions | Suggested actions that appear when you copy a phone number or future date in Windows 11 are deprecated and will be removed in a future Windows 11 update. | December 2024 | | Legacy DRM services | Legacy DRM services, used by either Windows Media Player, Silverlight clients, Windows 7, or Windows 8 clients are deprecated. The following functionality won't work when these services are fully retired:
  • Playback of protected content in the legacy Windows Media Player on Windows 7
  • Playback of protected content in a Silverlight client and Windows 8 clients
  • In-home streaming playback from a Silverlight client or Windows 8 client to an Xbox 360
  • Playback of protected content ripped from a personal CD on Windows 7 clients using Windows Media Player
| September 2024 | From 53cb653df916a61e07967a7f5e7de862e9b9d211 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 19 Feb 2025 13:49:42 -0800 Subject: [PATCH 119/123] esu-faq-9828571 --- windows/whats-new/extended-security-updates.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/extended-security-updates.md b/windows/whats-new/extended-security-updates.md index 306de5a2a9..e5f8535abe 100644 --- a/windows/whats-new/extended-security-updates.md +++ b/windows/whats-new/extended-security-updates.md @@ -8,7 +8,7 @@ author: mestew manager: aaroncz ms.localizationpriority: medium ms.topic: conceptual -ms.date: 01/21/2025 +ms.date: 02/19/2025 ms.collection: - highpri - tier2 @@ -43,7 +43,9 @@ The following are frequently asked questions about the ESU program for Windows 1 ### How much does ESU cost? -Extended Security Updates for Windows 10 can be purchased today through the Microsoft Volume Licensing Program, at $61 USD per device for Year One. For more information, see [When to use Windows 10 Extended Security Updates](https://techcommunity.microsoft.com/blog/windows-itpro-blog/when-to-use-windows-10-extended-security-updates/4102628). The price doubles every consecutive year, for a maximum of three years. ESU is available at no additional cost for Windows 10 virtual machines running in Windows 365 or Azure Virtual Desktop. Additionally, Windows 10 endpoints connecting to Windows 365 Cloud PCs will be entitled to the ESU for up to three years, with an active Windows 365 subscription license. For more information about Windows 365, see [What is Windows 365?](/windows-365/overview). +Extended Security Updates for organizations and businesses on Windows 10 can be purchased today through the Microsoft Volume Licensing Program, at $61 USD per device for Year One. For more information, see [When to use Windows 10 Extended Security Updates](https://techcommunity.microsoft.com/blog/windows-itpro-blog/when-to-use-windows-10-extended-security-updates/4102628). The price doubles every consecutive year, for a maximum of three years. ESU is available at no additional cost for Windows 10 virtual machines running in Windows 365 or Azure Virtual Desktop. Additionally, Windows 10 endpoints connecting to Windows 365 Cloud PCs will be entitled to the ESU for up to three years, with an active Windows 365 subscription license. For more information about Windows 365, see [What is Windows 365?](/windows-365/overview). + +For individuals or Windows 10 Home customers, Extended Security Updates for Windows 10 will be available for purchase at $30 for one year. ### Is there a minimum license purchase requirement for Windows 10 ESU? From 10931aba279f233b52c861b2caf26d1d40f8a00a Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Thu, 20 Feb 2025 09:41:55 -0500 Subject: [PATCH 120/123] update based on new behavior --- .../start/includes/hide-recently-added-apps.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/windows/configuration/start/includes/hide-recently-added-apps.md b/windows/configuration/start/includes/hide-recently-added-apps.md index 43c642e888..5a79319379 100644 --- a/windows/configuration/start/includes/hide-recently-added-apps.md +++ b/windows/configuration/start/includes/hide-recently-added-apps.md @@ -7,9 +7,16 @@ ms.topic: include ### Hide recently added apps -With this policy setting, you can prevent the Start menu from displaying a list of recently installed applications. +With this policy setting, you can prevent the Start menu from displaying a list of recently installed applications: -If you enable this policy, the Start menu doesn't display the **Recently added** list. The corresponding setting is also disabled in Settings. +- If **enabled**, the Start menu doesn't display the **Recently added** list. The corresponding option in Settings can't be configured (greyed out) +- If **disabled** or **not configured**, the Start menu displays the **Recently added** list. The corresponding option in Settings can be configured + +> [!IMPORTANT] +> Starting in Windows 11, version 22H2 with [KB5048685](https://support.microsoft.com/topic/4602-ea3736d3-6948-4fd7-9faf-8d732ac2ed59), the policy setting behavior changed. +> +> - If **enabled**, the corresponding option in Settings can't be configured (greyed out). The policy setting doesn't affect the display of recently installed applications in the Recommended section of the Start menu +> - If **disabled** or **not configured**, the corresponding option in Settings can be configured | | Path | |--|--| From bd9be8f637e383f786d95bc1ab6ec1b9f3514d58 Mon Sep 17 00:00:00 2001 From: Ruchika Mittal Date: Thu, 20 Feb 2025 22:53:42 +0530 Subject: [PATCH 121/123] pencil edit --- .../start/includes/hide-recently-added-apps.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/configuration/start/includes/hide-recently-added-apps.md b/windows/configuration/start/includes/hide-recently-added-apps.md index 5a79319379..92a4d13c36 100644 --- a/windows/configuration/start/includes/hide-recently-added-apps.md +++ b/windows/configuration/start/includes/hide-recently-added-apps.md @@ -9,14 +9,14 @@ ms.topic: include With this policy setting, you can prevent the Start menu from displaying a list of recently installed applications: -- If **enabled**, the Start menu doesn't display the **Recently added** list. The corresponding option in Settings can't be configured (greyed out) -- If **disabled** or **not configured**, the Start menu displays the **Recently added** list. The corresponding option in Settings can be configured +- If **enabled**, the Start menu doesn't display the **Recently added** list. The corresponding option in Settings can't be configured (grayed out). +- If **disabled** or **not configured**, the Start menu displays the **Recently added** list. The corresponding option in Settings can be configured. > [!IMPORTANT] > Starting in Windows 11, version 22H2 with [KB5048685](https://support.microsoft.com/topic/4602-ea3736d3-6948-4fd7-9faf-8d732ac2ed59), the policy setting behavior changed. > -> - If **enabled**, the corresponding option in Settings can't be configured (greyed out). The policy setting doesn't affect the display of recently installed applications in the Recommended section of the Start menu -> - If **disabled** or **not configured**, the corresponding option in Settings can be configured +> - If **enabled**, the corresponding option in Settings can't be configured (grayed out). The policy setting doesn't affect the display of recently installed applications in the Recommended section of the Start menu. +> - If **disabled** or **not configured**, the corresponding option in Settings can be configured. | | Path | |--|--| From 4edd24a8c074cd06a21f06e2b9c74ec6bfee6f53 Mon Sep 17 00:00:00 2001 From: moon <134622706+YZRW@users.noreply.github.com> Date: Sun, 23 Feb 2025 10:11:20 +0800 Subject: [PATCH 122/123] Update configure-with-command-line.md Add the missing command in `Disable Windows Firewall`. --- .../windows-firewall/configure-with-command-line.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/operating-system-security/network-security/windows-firewall/configure-with-command-line.md b/windows/security/operating-system-security/network-security/windows-firewall/configure-with-command-line.md index 85561cf109..b332d7b87d 100644 --- a/windows/security/operating-system-security/network-security/windows-firewall/configure-with-command-line.md +++ b/windows/security/operating-system-security/network-security/windows-firewall/configure-with-command-line.md @@ -74,6 +74,10 @@ Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False # [:::image type="icon" source="images/cmd.svg"::: **Command Prompt**](#tab/cmd) +``` cmd +netsh.exe advfirewall set allprofiles state off +``` + --- ## Deploy basic firewall rules From 98aacbe3087c1705f234adc104f640d23b42b6a1 Mon Sep 17 00:00:00 2001 From: Anders Ahl <58516456+GenerAhl@users.noreply.github.com> Date: Mon, 24 Feb 2025 12:58:15 +0100 Subject: [PATCH 123/123] Update windows-autopatch-overview.md Clarifying when the change started. --- .../windows-autopatch/overview/windows-autopatch-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopatch/overview/windows-autopatch-overview.md b/windows/deployment/windows-autopatch/overview/windows-autopatch-overview.md index 97d26c798d..78bb2e7125 100644 --- a/windows/deployment/windows-autopatch/overview/windows-autopatch-overview.md +++ b/windows/deployment/windows-autopatch/overview/windows-autopatch-overview.md @@ -18,7 +18,7 @@ ms.reviewer: hathind # What is Windows Autopatch? > [!IMPORTANT] -> In September, Windows Update for Business deployment service unified under Windows Autopatch. Unification is going through a gradual rollout over the next several weeks. If your experience looks different from the documentation, you didn't receive the unified experience yet. Review [Prerequisites](../prepare/windows-autopatch-prerequisites.md) and [Features and capabilities](#features-and-capabilities) to understand licensing and feature entitlement. +> In September 2024, Windows Update for Business deployment service unified under Windows Autopatch. Unification is going through a gradual rollout over the next several weeks. If your experience looks different from the documentation, you didn't receive the unified experience yet. Review [Prerequisites](../prepare/windows-autopatch-prerequisites.md) and [Features and capabilities](#features-and-capabilities) to understand licensing and feature entitlement. Windows Autopatch is a cloud service that automates Windows, Microsoft 365 Apps for enterprise, Microsoft Edge, and Microsoft Teams updates to improve security and productivity across your organization.

yxx# zVC&pmpZo`yn4b$m&g}a$f$+2mQC6dU`~JT@5j1P%B2<89tmBC=*S7wo9wR!HqHp4* zjc|JZ(JvVufBjm{B*)dt82+T$e^1Mf6ryme-!b{)V2cwe>=(9z2cch|l9zqjn3d;! z(8)fa)?svZxk*zf{?_SfsOYuT7Z0ukX3bWNuuXge6)~}U5I1L^M*%YSKeE>kNDktG zaxi$y;;j2uA^#qajISm!3KBu2&V5ZV*R5Vvaauy6(j zEsO>I{S`BLDt7D2>f(gW>*w#y?zLxZuHP1bRov(}6+|Z}|3o;V z=xs0Ad8oYx4MzKGgfL0cpku46L9RgMMnPU#?P}Mie7|}xm6SDUq2YMjBvG0>TNKb# zv;)0A^xLg=<*@AKK?*E;YNd>Gz$8iaZ6L{Pdi=JnK3GlbcEMDCYeU5I8BLpSA+G6ukchOA+kykrYLAi=Us%l1XJ~I%@``m!>mRD#h{i*E}ks zWs-Xcl!(smGS24FAF_xmoHGJ;ZjwR^suc~3zpm!XysZ$SYCIIxr9F9|-CtBJEH-+f zPqJS6>Q1zrL6$zHyj004;0yv^&ACsUJLk@9r~0cNJ;*O={PW@NuhPY&cUYF49`R)T z`FGA~L_=)#1HAJY>EbO`y8c3NIghG}M!&v#A9|1I^Bs>S+6AWX&XO1Hla06qvQ zplR}anKtPSMqmu|%@7(cq}oEO{YTQMk$1Zu%{2zodfDSmJrAG>Gf7%eiUNsmR!AR0 z6L*_X_;H(|jiM1r%L7EQu-+f}`NHa^Y#!mQi;?>hwE_(1dp>oQd1`zIv1 zgMiyj*&Mv(Fpd7&-mggW<%1ftsjYz2hl~L1-JhoBwq`}BV_(QzQH}8NT=C|=U0F!L z-aRXcbSZCON?;x2xf^LO^Oxo6>Sz*eYkCy_DIa1B$j-8MbA|U!7w=nn3v_7o7kdt% zl4tAX<75>35m&BqODJ{0)a90>MN9oRPnH2SMFaW0riQ$U7c@s&gQ-~UVRw}*%xzDUb9Yu6`^lj5R=FvUS6A)31>6o&t6V^sY>Q+-rqJ-DIJ zqnhg>%IteD^*{~2My(#*b;eAEj8s-29Qdf{xSX4-)}OSU>{V1Rd`Udqt!T^d)&3kZ zkf}9F1qAM0{st3nxLpQ6<9JZ?Ki4N&jlzf%a;$qK#!ZDAZubdoujR8V9x+^SSs+9i zzv+vq0!H<*YdN4&PV8lA5LETnB%JtVHmFCkM+8x`J=UjN6(@~M8Flr!;G zib`%WH*LTQ(fcdZxO!Zy4fWIJ(v21C>BGZHyR@VhO0%|UDItGDC1b;b36;_E&5Sgf zOO2UcBdgr|LBm!xKKjqjlouxD-gm5c&*=v)2ci5wrW7)ZcpWg7r`3<<5>6s&fn%)c z1xIe2B&nJCfA1b=do#+%9HtF5%(9F!5ftVzIQYSX^A^$Fb&1_Jo zKXYqXlpjensZ2vm!a(-M6$pRK87z)opHrRs z@>}ENyGtm5uK?qKLQ-%l1@SnAWACAu|2FqyI08+918BlNsSFfxxGAl?R)DF?xM;~| zR)UeHE^99)A{t&gs%y#J%r$fNDb&(dFCkBroKbw+aXCltJY1nFHr98F_I=fne(W~5 z%ra0$)dBf2TDRW#sR%3}pudO-n#%kpC2hheq$^V^Y|XJKUPjfAUd?=`!GAN1nuYek zwd$3>v{^de3dW4IxL9zlvant-<#F-7pV`GGgJtMJa}lb+vj}2JerU1~XIRP`FPB$N zPxm-@!fDk{IOs1(v*W_3?M1>$^!Dq?G_Hf0w_?H*r%u|BXBqZNJm&$jFYLgz9lMlK zLP~*mO9s3t^=QXT;Tgmvud{>0>C&3Iaa7^6Ne2ctz_oz#nqv(> ze%(+mJVPleqCzjXf?H?GxjG!f9YHciHalet$iU#aEi>k~;U33OKk>+Pkv49H&jyfg zaXIpLAg8K>aU#D7*UgOjs17$2;i5&OSOoTj9;-sl5cRtQ7yf z#5J?6VBP!}m2m+E&qlBR7&T?G5@^=CCS||ValJyij#H_@xwqUND0mwX0meZwl=mBl zEqFDKgD0qC*+Xcq`s;d)L)(Y)^b`X#wca2MDqoADlMLIB!H=i{PKA9`p=uFwn{MOH z5)3SQT3SUEPH`e?Ja*V#g8}=vhAR#}%?`@L6q&b&BLW_t%nom|VwwL;{v-i7_i^8D zplP=#+ZX>2{ULDp?HvC6NOO>oa7q3z0^H{Zn&VLEWdG0%X7Ik~ErF#Q^T8LcXr9`Y z%Uk%@ z%Arw@S6tpIGU)I*{QM@rAL=}5JMP?wsZvzA-4uU-(Q5Tf|FdmzbToeaX8C#|Kz558 zuj1k#kACxOiPUo32YS%B=~x^(KeDD0cC5^_U8tDY(w6fo7>OqMDBt%_w98eas<_6D zH{1@4TImEId|KMqv$D*V_wE}z!)#CQUa2^7DFiUm%|BprT3H@sT1RmOSYM6L7kOWA zmVxIUwvIxz{$7>_o?VR3BH?2egz+r!n~^SUS0~MZ1*&7*2S^SKNU~wSeHeSU>`Kw$ z-8PmVGIOhc-1dw#uSF@qf?+k`>t(ye^8}dN4%YDu&!04(C0-5dgO|_pEZ*gu2`UQQ zy~R8Q@O`JjR_srH7v>;4=;uH`uNZaA=V0+tP3}LM{%Nn;_zpW5$L{Y3LLa|JZ3ZrU zIjCRY?;soHHnQSJ8k$YG9pmpXH{$~f`%S>V`k8*dguItDo@|F^g{ zd}b?VWV)n*>XVS>T!XzF$vk)9yVThD!N*b#Pq>G@*;u9#P}**LEvW#*a$xpZMjBjk z3AW#Zvf2+(Gi6hqxm=Tcw5KR^&|zn2_L98uqv%WKO{O4T?bm}q%EFU?Z}tH|Y>{9%vXi{ZWVx}sfC*0U zmA+GF_6D>f7nmyWCe-Vmi6VP;8XI3L6UPUBkP^;Vqmc#-!i8;@1WG zd9sJ`)A2k{Ha<@mTd4*05#!nWMvZHMU6)O<3m?e!GG;#76MI*+KCVhxDp*H<{QZ2s zBithk>fYB;s`LAlvC&L}U@w82(seuhWn@G=T$1UP6K*IjF1B}8=gNB6mv|vMVfmJ4 z0KP!@jrW|m@(wXnUmdUuzQ76bK;hv;A8Jo0WcGBTPykWl?Xy3`pYj|~Q{ zy!q5|YXdINy4~^^$DuVhYYLp%U$WIwK7L}B#k1eOw-7A$NITp#^3@&r#Z{NQY?gWO zNJ!J`PfxrNltXPwCp1^nN=%G&TCbZQs{+}G|J($E{k-#De}3n$_spZd$I1xA|a{aJb~Y1vCPONZa8n}vSzy8XNW8F8=@#TbOptqw}so> z-B<~3lQe(W(?EH9`cK#_StE4{yLhuW`jKA!O)NWoxo-x zP9rvp_D9_u6O^$BZ92{x@c2BBr%!}df;mS2G3)P@_ZkQ@z5Lb$#+XD8^%cdc^$=O*cTT}SSN;rq_uP~`fES5jbq_OcC>h0)wzzAy|lUDhP(=E&ABYa>zoSD?U1C9fwQrR^*^L+J@LM(%ouyp2nIv$)sO)?aMAo~4I zUbE}ged+DZHC!gLs?_=`y>wv9=OKAK4O2-HO=`b#Tz4b4W99QOe6mLmnyGMR=;CDG zGRXQXAx8aZsJBM`b?*ynUpf-@Or*ynuClnXCU;KCf|H?N;7k}ehDCy&f>D|DY`!txR#v$?5pn>k+^FrhY)whRcoyGa+i+u5? zc)2m+3;16kw@~Jww0GxIv%(1`{FeN887YSI#iG~q?&S}!%ca-s@BdU_atI^Xs_3wl zZSx9Me|+!7gD`wf!$TqX0X`&lOFvroyoNUh9~X8D{b`x-ZVZi=tcRVHc;K@TSK-+@ z^ZRM#9`i!SPoCqrL^3&At?ZN-XMXo4Yt7p|pC{a@YJ^?0Oyh22Df35DvveRU)0v}u zL&cu4=u(=QJJar(Y`+yPZ~Q76uG#W6>^#di5%pfRFIW3*$iM5Fd|uW=jf%+;e+5tj zw7Kd^Nfcao6Jban%cy@%hnTYktu>=yxOG6vOJ+zN!N0~+-fu+#1TXX72Iao(wIXjpi$L0RFG3;hyCinV$e$9 ziBBM$;=eDku?;EE8t2Zy9x)>$x=X^4c4{mBlNrGLq#=Do%rvEys#kz?bxUzc_GHo| zF-diKQnC;J`FN=gO~_E`j*9ip$K^X!3#Bq@D_(CIBAs6q=&~#+|B{nD!?#{th!6$8lF*$M9x|Y3YfOG2+_q~>P7_y*$K9wM z8Gmu12R4eSIYl=Xoh=mGwc8Op=-EvVsV)P$5mu{L* zK$!V2dn}{g;|=<38-Jnef_6GLe@9QA-~9Xc^aA>h!mzAs$;`M`a1+(F5uaBP>)@LF-iuKQ z-%-LK2=GkKzQ~LZn*HX})QJ3nHNKbxZHm)+d2ADs-04nx%@N1uzy~-Z7y{ID{oRPA z2yokT)d4G|xICY%;XaO%cjU($fyx(LW*=+XLh9~$MtxS5nnYF~bDT&=vMa4AhY%#X zuNizShiJBdF`pPR^{bbKgevA8XZ#1~fUdU2=5~d|cKlNcC+$2v!@SUbSM5Z(7zKR6 zz&$2TMDF4zif`P|(^2txixAQ*&>uo`+~Yksc_>o4aPf@@RiI^|hVh*8TIyn&h9A{R zh0UzOg`2qZSdG6%+au{Ob@jYr^9KacSZM1asK>V9>t%Ahlog-9hSJ?Vj0Z#B-Z9O| z#2Loo`q=1%&G1b1b06z6M7Utit9dB|dGyJ*aG$Ga7p)i_H*?7=Qi5hpy*cCT=_fRu z8-Z+A8KkX&>IHv~%aJLAPeF=uAG#2c%Bn(DK%l=H97_fJMjdlh8F?<6gNcg_{d#@M z#FYY|(Nqq>XTT%>%{rz&hOuP4sFTp6JuhvT85~X6kwbAV{pq?9+r*yvkCURE~3EdPV&_ zB&LNSjXaHX-$;wabX?+mRLu815f<*cN+1L5J|;P5buahuKZvAy^Mc{~K-%}FPf|2$ zZ#Ii#5m@qf0DoBe#=xz}k}AS~v^sucIazt44yRa*i^py&nx2UfS4&I{4E#3_0*tz8 zc~voMj}kV9bC4(__!Ctvi-Xny*s$gXcfb)r7=c|n#~XhoIOHbp*&aq6&-N>R#uQqY zYBcMEmBUMd7CalDgb>Q>ZJo++q@_|JH|ko!g!ciV(cr&}!*@jQSUMn+za+5oeAd_O_ggF}CXjXwi=Hne1JRiQR-qQ$86?2gMTvjrf}~u5f3H+W?ZL z=3Fknrr+#vQgQ$kz#eZYUTKqTc96X?U%u=sfy14nUh_ACMp&v>Fntbb16}M?)xars zDsLFrf~w&SAlI6_q3cnhE6TcHh^6sOIN@>G{3fiEh=d%kEQ%ri#vVEffKUr45nN;- zU!YShj-4snYAr8$kUi)$qtB!OpQR$j$b}&SS5fv#3nCB0@w{sE5ui{+{POB0K^V6DaS7-sn!Ba~oy!Bv4^7Bd`R(8F) zYcxK)R>&En8F)C|+!2uG+6MFN1kC-mRK&to*qQ#|{HLBUG<1nzT~KC&NV2DusDnu{ zsuI{uhY)O+hH)+OBe-@EqWpNvNkj#r6zT!U1tPH^B0>BJY?__vM~3;SA7bPG+3eV# z&TkM=1uI_&(e|sH>LWgnO)C!dwSbW%(VScXM?S#>$i=h4by;^OpLzDocoo(bK<*(G zURlD-a8H_i@F9kHft{)qrf)$4F&4$ZTrRAw*!(aY8UV=#zUr(an$%$R^tM894%OeQ zum9Szcz!I;sVQJ^b1J-(YC{<$`6|4Lup3xUBDCf)sGeVrbyNx8Ba&{jJjtvlsyy*xT$YRV4avy)E1$tE;X1#iEn0_oGMZ@Yy=%vXeoTi5=i4? zg@HvW75^TkBENd%Zs^Rj(?%MHpCpE<&|TIS?wT@%+J+DOA7_6V*Yx-QkK-={0i{E_ zK|;D~bW4j0h=8<6HzQS$kPZncX{AeYfJhAx216J%P#Ce%qh!?Y$@}xY^1u2&7r4aj zHpcCo^LU)cy$CAG?%|&E>Xy47bEfi1L>chtUo_wIzC0YJz?M0u#xK~fM-E9AnjVW7 z%g|NRfbTY$d#5S^tOU@I@^l5zmmA}_$UHLnyvvJbcQg4ON5v{17e|5q3Z8Jt`c@Sk zicHdYAhL)4#2POolbO4Hl0ghn?tf$wjDnGy z@iwm226FUclE(M-&yS*=Q}5ZH8{E3gab&=_`rpbxQB8BdRC#NnZh+iTmTjUP@vh>V zz~YtlnfLIbHx0!O}-8Xg%yDY#n=iIpJ#A>A+Kux|aIr1mmr11XRatJogvM>aA@;d(ZQRV2O_wxr4&Wbt&gJkmSBbohd+QI5y_TnPERSk( zIma@H#IhEH9|Rly$`n4=6=5m zC%6gy-#$ff%C9gHl|t`gp{Y|mL7LHt#d4VDRt#(eoC6Xze{60&lDq>R_?^*aGQU2) zW?Tn(DT8oz2v54+8v9{msm+VfaYS&O9a)%%>U)?vEzg(svxihh03b z2V;({J?irt?bXkM^G@OyNQO7If_7|ze}kC8+tqldy!QM=Gs!!|~i66+)J*MMMv?7 zLTJ7*?U>KMC_M2r!*d|_6deJghn=FWR%*S;$n+DQ6`ITrB@~Od?bk$Jm8y+T-7j)-4sX7p(vT65o{L+mdJ91BbH1Nk`!v|1lSs1Zmo8&wb@sjT)yXc{{0(n#|}9)q|1W9&fkxucp*KXLiHxvmpaWsFYX zsDU$~Q=@C)cUqyy-cNeW9B7P?3Ya^XaCJwCDd8OnS8>wJ$SZe_L_;QGSNC9hRN8BB z#P-VuvY)(iyitw)d62RhqyRI`Hw))B2&UjOzg8iJ zCu#2OCOBMOS(l+Z$t5$2j3K74#E?6nC^I%Fb|hoDs`T`%Cc*)2UPN+-;R^qoRG;RX zk)MnodFyxwrSX`uv~2=9K9IiQ5DAxnZ%|=M_a{Hi`9JhH;dXG6!b`!OloKJ>GVI}; z1uuF>mV=N^ktnoY3dYRPaS6yFdz>9v$uEjhM=D%H^7l=CxnO zJ5lF-VlL75z8t~2LdGPb4|C&ZxM(!>t;6fchl~vQ&FmOzL9G(#N z-g~-IZlqW{pTV@va;}_Xo<bBw3mk^a8$wXeGjOH|KOXCGbaTWusJ7I zKAzWBPG6lUou2N`71Y+2{3`VqeO_;nKTjJiAwzlo^76I0ay}&}BSJ99{Omi`fRBZB zxZ7)s!q-H36n$S5nkm7JEUS|E*_Oinf7*KA@l8=gAAYpl{0jOn_tl@^Q6ZPlKKEa> zUE(FiONjAiW$gZ0M;`Ja!-jQzCOHmW|K3L_{&oUt>)7Z6SiD8gpe55U%RrT|g zc;KB;Mxm(G$RqXO7+JTRAPLNplHWK7T^9ot9l=yHsYkH!TGv8mlAVcdul&ZG zO^W)4|8U=vc^J({X`1Ot`o||zJ6M+VEg`5-*X9lwJ2zkyUZ_yS?C-FaU|l7{cffnF z+83-p*Po-_g7grpisgwGdgO>RI6UW?~a5W)A^11hRu9~)6id|_oxlix6eY{nv5B7w>=^Vqxz_uHJ_>L2)nou^@;g#W>KNuJYL$nELyJwq z9Py=l_q4Us9Pqigof+f$zGoDW1~UlJiw`AZ)Z!==PR?YF2gLa6)%uSD7#To?_}X*H z&&v!7NHv%3{@eynCb7bzTV9CB$i08pnB2?N-%iB^dP7L0s71y@Ob?$hTU9)tyXTqu zj1Ip+ij0S{Fkh}&#J-T>Fs`U&dzRd(;kT}_w%Ut@r=bHsC<5!IS(j;W1EGdPgaSN6 z=}x5gG46jF{4)8b$_D=9S03+;C7UD^K%uQbD{YTF6lR?m= zCT;h!YXd&@*gF`lebOFG>2BJiu`Bh58oBjX?LCOaEgitjlL@rtdB_fbKhm_ zh7h~n$@b&&h@+_bSqfcIKU<2*ry9TPq_Xi8?=d0i$#qQS^x+^(hL!#0}fwWz`vNtGwnMbgtZI?KvU3BGB$J(WVE)k!T*Z3So* z@T>>j)zHyY>r}FTWue&Ew4b;oJa!KMgx;5%&Qj%>NJe}6x5vm6PT0S;o-)G`(FtE3 z=E94$6qTMi$4>WjH+7eigfCsSBy-E2N+rKWD`Bn|IW1rDB_79qdS;703QYLGV=ME; z_{`xUp!_=-FSCPW2mpnMV3%d|KA|!p{*?Ha1MNY$ME}>Qi{vT$tyIz|V8bom5q~Yd zN_t;HY-gce4lqg3{)DH>#XuMR2u=V#q$LxKVNf0VcVbD7c9OV1)a&;`Hg4l@})dMs4DN>;#u4a zhA`}NS;9ggQqsgu2-JiXYSlyN_J!GzD?G|icDa=VrFH)MLs0bubMf>LB!!UJhBm}5 z<1RHNM=w7`eYK2E*eA6-em?{^>n^oVy}zciPYz^r5rCx)1xy2+gKei@#EvHkAXCiY13 z=e)oPmsF0UX<1Xff+MzJhQM=u;Js&RmoHe`8u~V@EEc4B=^?CfKAff)0P&*-Ax8~* z9MubV{%b;YD}!-MeyDGNm)(2XrUXMr$2vBdMGod;>XFF}f5~LN>FXU0TP8lA&Mo{Da1vcQ}l{dpk`5(^^#Zd${1PZvE#k=jIy-> z5uk*T7}Lpn?NIhS#GWJVrN=kY@M>4@qQZo4)i^3e#+?SfA zS^VcD`TK_MBrsLxvuu%=uh2rH=vj zYmn&d`q#dO^hPXKw`mOSTvsuxc4n#>*=MN8Sy*@!KA@|u!~lCugdfRzP@hCf?o+C} zvO()O^j4D%QfxQr(4X3Q0b1tf!&e8X2nC8!GIMbmJv+DWSA(vo){@OAfwYl<*q*)t ztaP|k4tV*$_*DP;gM@#7aI+j^nS`ziUL5x&b`4x&s{&XWsz%shMTvw z2UIQ+VM5;H(Q@M9e^Gv`>W1$$8S}lT%4%tnrpz$!zVrd)9&Pw-oYkqmo*^X%w0xN1XeeMF^h~M?Uf#AxffkQqgNM zFubi(G_|1BTqPtiZYV|;MJcZSWQGKfgtcl+`cabSx!PBXCjv?XX2?%d148bG2+wbP ztC$t29Gw1CGZbTv3_N9I{km9Fzv90rE)xPyCLb8r_fb`{Hs_1hx5CTKcp#x?TxLhj z>ZHlWvr0OxR1{19^nA`W#K6d39$s}3ezkAcDS9Ob>Z$fx z5Eg;Ier>__I$GlDB4SDT4y`%yta-r+C)AkL>Uku6o3?-7D+wU3*|-$%N0Yccqf=DK zv?}}RT+t8B-n)WWXjwnjuN)GGz)M_|}_WX3DrG6avo2BOASa%nKx=~+Sw9(YmtId0(@70#yoyM)+rrWCj))}G1IZBN#`->YC zuA!T7Ljeu_qYs>zP7R;{{WLmV7WOF08Xk^D=s1!svdo(IPIk{}KFJhU zkGYf7!<21enPK>?~vw4^$p{Km=gK;HA2)vBQ&M4V6)wi+9b%@6`FaMAaa50udIk3ZoIefS38`WRHD} zTc5Jg#~N_RY{uEqlrj^2O?cMqBP8;uUFl*o_@v|ei77PkAgzLsijlONTICpQMDz8hst916ZQ_%RSPPy zgCH3xshUn;m!1r#lO>#66@tn2Z)PXDit%CwGm}1^TQfF($*0K4zImQ!5xx&_1@{bk= zCcfGEEV0p~t|xVpX9X10KT@8oLq5qsE(9ox+iLbcAodA|;EI3ypZ;GK6vM zm*%5e3l3E;5b5!J{#iOmZNY!n)pZx$<_UV4w)S3VnA{R_y3v6iW!@}Do0;od)hP;p z2YYMuSH%aCuXD{wqYtcg9x+(N7Qh}T`g8%dn2U#n-QPLb$Gm-rTOM{2zhXbJ?oa0q ztY08AD2$sA&ik~d`&G#xS=UGGyBXnDSiT2C9P)=?Ra<%+DRBFno=1kwN~5+7cD#vqltgN7Pud9g;G)ZrVl*jkJV<1^& z&Gs8TD&#wkAm%QK?4SWpviEnPF+s2V3=v3RAoe)%TgG%ftXsMJFtd4jJ{x9mu?y+b zU0t4>Y`~TjJZK;$&gKY{zI*#?<^wQ#Q6f;Nd*YW3gyQnw`{NC- z8^Q3S6!S9M{BXnbvuY#d>QsHXi;uZz#mEkctKIZG_{X<*bBV7nZ4qT&*XJMo|4KLW z9+Pvqy53YVZ&vu#<>%Io+RT6UHYO;#TpvUqoLz}@Z^n|;UqI|;A;+}_@W{_j3cc2A zh{=Z067dABKLH={(}%6FeyX+j$$g)k{*JSpp4Z0XChcVH4;mJhrcV-+admbhrWrL4 zK6wxB@=j2NZAcbbDr;m~59($kK~fl*azzlG^w_VCqv`G5lX`zFyNLc7((dZ`kCMz| zHv=oB+E0<5pCwh0z?ASLleu2$;cm+alk3{|=cM~eUVmk_VY-Nk{Jh!R9> z0$f}5v|5)(DqB#!aMl)5FX5Vg_==cn4xAx9-OBun-{}o-sY~C|WI&(75lJ(#m`?dV zGGQt&MsJN6Cnr~bFKfmRa$f>}ze6J1yK$=C-p)2JryraR6V4~@4-9kO)5l+a6tJ&Y z1KCbueNgnx;3o+$btNL`)nS9waE5I-@j*I^5K;?jox8NpMx;V9I+Wbk&P*56H)Yyi z*MZ+j@1cZgcypeDeKdRCuGW7jdh#F*vp!3-=F)fiy1Xo)C{(-CBheICfozzDo_k26rcjdI5wTB> zo1qoNXq5#_xZQHtm?t@J?T1-~P2{$57+PPgoG{VhD+sGddW^m)Uy?3cG;i$~RRP;| z%5F+rgFU+R@ISurr^8M0ckyBV4 zN*lz?^jrZTX=$nY8mU|zuRilfR4uwG0}A?2>)Y+hQ>q?o6XreGPt<-JjAK#B<65}msntS0&Hno_GMP= zR#@bIMB9>Kf>b9LMdu13MFCqYRWF>o~|t`{a_X9Z~1Z z-OIu5V*+V;55yB{q9~cY-h&9g#aoGR^}wawf0F!;U3yu)5gJ0(YaO(;XYCumt;ouG zQtK679h@nw7`vy{12-305zLE!e`)XvDqYCU?8_C2uy|bbGD`CzF+!1Pm`eV5xvTEM zQ(NC@aglBN|l7ZMFQ>xLdzx!HRB~U%PEvJ=!}~YzM_|?KR7uU zV2rMzjHA7(ibn;rt!7+%gK>Q-bw(+W#R~KfBwZa7M=Z&`Wq=;Nt8>%N3*2n8O08CW z9^bEzkIz?ZvLepw-KKGFMtaOO;^iO}K^j#aqb$iyAzj;>we|VMpl7&gE!iwXac1Xz zUWwO?|BB3)UJ|c$PFK=$p|9M$3bRGJ?E>SGFS%((z9kSZ4NLEPl~tGUe3CQ5I_ z&GF_;-|Ml;FD#Nr*;L}a^uqFcl|W30<2tJwd!m6{R`C~2ir#OquP za|4W>)3g7%eF=;eU$yu4%V~Uv{PS<7KH@tmgwQyuppULmGe4C9MQwT5ktY)zs(f<} z%f_2ZesRtbOz254g&g_Ys8IumeqovZs1K;e!>psqk!XF}7Z8;_H*$V_-?vL0u6)GS zXI-~0AA{Q{@@3<2jM)cos4X~CtDC9=Ak|TP_>Ui-`mK;aX`jZ@m+~k2#l(+EcQB^_ z_}h|77NE^*3`8BJ(@{T8)?K`1N)X3Nt#jIHqJBxjgkb4_L{5%8IGYb1Wn$4}`{Z0J zjQc#Gy8`R~f#s(XmHgMd5$#lk!&v`!EK5kTg=>J*<%RnAm&SST}NVOctW-4bB!SyBQRXXlxO%OpRLEvrg{Ho>{*o({Sd;Rl7j( z8kg;2Sw|&_(YFvGoY$XckIMY{nM5eXl$kk!qJPzL*sQs^#7rQR<8|9@!o&yuN7?ZV z;gf8-mB%B9aj6LIDXjVFoT|3b!k|~cA=?!RmpogsrhNn!Ry}<-0jUzAS^2%q?#D`t}xfrGh`%rE$?Ne_X-T%4&-K6_m@yQ9>E zBLAgS-*40;Je#wx{n=pyhO3Z>AIUx;T)CWnfY!1FNnTw60-JYTo))7%BLU6Rc|BM4 z>X1{UU3bd{*FG;+*46YXm;!9MauRg}KQ|vYxEa-?z`MR)sTWa%vo~xLx>hF9FE9K3 z{oedI#CF61y6Ae9zB1BbWUIW^M6DA45Bt@#AiFwfV(coib1UY! z)eL5+qP&gq55Fd7ya~t}ncW`e=UKcc8h1SYz5-ITmUWBhylCAn8+7;j2s z>o}|UAQo`}Gp`5=zgar&G6=p2IV3|5-#{uT5#4PzU97PH*D<|>YE(tLy*`a%?|VX~*sZzW_;7)0jvXZ3!n?RHH@~KJ;B*a2qmE zA8<1HXMa-Fdz+In<`Or13lKl4zxkJPqYK!$XmU~zUfjCH3~~=nf9ru(s=d69`+#Ly zN}~_JTi1yWtDFeD&;5?L4GRE@DFP=ZfXs4z$T(MOPAaw-)G3;#amVG-q8K-ptO`zod!x}EM3T#EAZVQsa`7Oee6;vd+zl&dak-_R4M4za_8|m zz!CjoX^riSpGGv`i4l4l-|?zoKg`87MT1`UPl8vDkUM zE_V}%JN-*Z!S1cGNSOW*q9S(pyPg8h#)?+r29^;Q^M`#m3OyUwxMpu{OSa|+SvmUhSMZ$?be^g1D@bsL?9}P z`uCgk1QzKdLS1oCV^M>=dfD2r7|KP47DL{0?4{qSLC>L;3w_1)uM4k&z@^toO|(5u z6Z9RPT|a|MIe_ra)LI_ps+;>at|vVPexuXfxDmAoN4#UGZb94odNTTwSQ--KJOZG_L59 zeMLt+(=|Lzg3JV>(|g9j>YR9ck0NdfK84ab|6?}kJo+F+>4*ZTFLzNC_tY>ubcC80 zY7`+RoLY_kkDW)O5;@eDpOK^40_W`3mBvnpj{)zcQ+2sP0j_#tN{Kcp?3&*6b8Dd_ zmS9N=<$r%x%gsax^g2}KqcwJ#VajNLdkD+Xk;)pPvKA8%|0}okC2Dj9{%8H@;+Ap9 z8Tj_q(a`)>IcSuD*|qTIasg1>I6sbeufvbM`zR%GVNH z`l_CWat1m7M?Q4g@@8$0+exYtEHI(lJ-szBLJ>h%0cRX5ls4{=Ft2+~nFBzvkwVN;gONjhA_OrR_m zihW~*1?R3Q!idK(#aD|4Z05#iBW(R{SPAJ8@SBKDfwRR&;TUspdhQ4+Qsvd6|4tNr zNSIPkr6Ix~<#Lh{9od6TIlkIlQR@Duw&+BG3_w%Ri!5o0#5A%@WfUz+WeD2zlOaAo z$r_`AbDu5vH_nZ4boDCkj+?BagNt zKIx^)P$u=w`Sy-dz%O`VE~RJd#BYPw2w?9vdq4Zp1X*%8zb1-=EiX)q8p7oLV~;1h z+$El~Z$3-!YnfU6%LTlyxnIC+2=E_pXr2r`hypYj6lC@H4=@}$K$H#M$^|+id6H8^ zS2LAUl`fUthP99$zY33zGx!$UkHhCsCJe-{Z{iSB<4EOSW^t4uoSO@uKVywc$sqTo zQ=IDV-|p9-jpoHBON0&qmtR>_C9#ksw*^#-lJZY{2w)Fo634)$In4Tv3!hk(302tL!uM;_98->n8^igTmaXrU^?`K0Xw9N4VRw}HlC;GG3xeK#_w+_rKkxHg?&|@p{J|@IQJJg6 z_vu1QlT8O5{SubA!-T!u6c%VTH^Oyh_$zx!7>Ma5J*14K}>^alyB7WP0H)qs?o#oj=6c<(02gYc{k>Eu1H6 z;AdmA(JK=!8>(WglaqWs z$3EtxN?aZ`=tO62LEB{=8bsvEX&1vS$=Q9z##|1&+JGNJU`4stKJz~va_ELk>TKX{ zz(e(X5|o+n%4AJi^2^M!P|j^b+4jN&>OJUBE zcSSjdeT*+i<>aV~AQM7|!md~ueboI;2d`eZb4m>*^qA8Kyi3* zfO83y`Geb4e$H3Xi{VMM*kMfC-4wwTVPApzy<{)!nf1;i9Z+`cB`z>aG>N5itj34% z+vd92aKq^g2?hy6X|*CBf{EohgX8kc_xY62dT79LU~me`u^=chRhgmS18=ofQJr7UHfJr z;H^v|NS3BgXRli?WR7S;cmKK%Jm1`|ZP{ugD#~gMD|@3>xo{+5y81Lv*~z!_GDiNx zQf)zYY`DIgr-?ij+5BehC4?uftDG3bEOO(@wI#L=Mwn*C`(G+-#%;D8lv} zxxT(t;?Xqhi(pg#wqw35C2Lri$tO}!ur^W5b7x(h0DNE4RyaWED4ltFMs{4lC*7=> zbo?&)vRkwNnFoEH=Uk(bZi4ym`Aqgv{rQ_9+{1^3=?1f~0o*>=HT-l*ZJyvMW?mGt z`WN-?LCX0;>|UnPzo~Py=KRgnapzVOVXa5NW4t|KVH3cKVyLkWLKAWS@2-?+Gx%0f_JimOMvP}*}I1P1U zoyM66m+e-*B}jeZ(=Az1)>y`6#d0PauAm$4?EUmJ+zybj6shP=`Pi$}YOdWM(cnHp~a|g!w!2 zev+BxFt#V&{KcGEzRv{B{x*opCxpj0%r`VaIn8yS3gy{Kw$^kt)CSH4CmqL#fJ>t7tN(Uc?K^a|A`|Lh;hi4apVcD)3D3NF2qRW>-pNDIbsMGo{y zG$0%87u?@B=6@sAwPb0wcSSUnum4pW!Ca6OllUZ@IMIxek zuY)-U^|;*VttADo4))C}0}wg+du`JPes23+(;?^~`J++ioZK1T!~Ka~&hV4A?6NVx ztDpLB@DoGaTlaqZ@3YS88$)1O=zHfby#)w%?hKM`1zq!HxuC`<=)7jB-k=7sEyqC4%QgZ&6-8NOE zJHlQTCk0IMgI}`&uR2PuSGtc88m?kmx|Bp>{}Q-0(+4o~IoyQ5HpshPr{&Z4{u@MF z!a|;N`e)rud)F>&xm2V!`zrCR!o;wuS93z&>?>ElkDDHs4fmqYU_)ezZfV5ep^iuz zWFpNU)+PgM(bBUSnp6_}K!oDQKLm`L_NzPk4aFnm_Icv&q-vO82`WmTAgcP0?vGS{ zvM@^uO=nc+^v+pC@gD>W*Iouc9poLg4Rz&KET(!);HQT&36)1DY;xH=cmEP1sKU7T zO*lNDr9+1`)pD0w;y-NT-y!FW+bQ5f)=nPssVOx`+Axcs0pRqM zSs>Q&UQCi{<+kZSmxT%45RLF@I7-_`l^PCwQh5H6d{LEKl)22EoH}pB$}_hB)D`ed zHm@<&5muEU_X4J$HxXCx)X1mm3oOk+Xb}JB?vY%S)E`EtWW5LA-dq1;MZ~Q|=NTRI zZ17>vVWlA49M%r<=sisIpDSdh_bN>ivAsl=J4KD&fL?cDcT_}sfJmIMH3no1)#E`ja&r^l+I%e|u^a&Y39i2^cB=yY~`4=j)S%a@;) zz0)QuYE8o=j{r7hf zqKezhfRNVcR!9pG0LenNgzgP(61o))&Lk2BI>wq0G&LFGgS6u+U}PwW+61_zufM5i zMK@y}7}WKdE8J!#4$GKuu*v9hkm|mBw=hJY7znl@E%Es(U!NR?vho_b=ar7vd0j`y z^-~eWkku11o5z2-h!uZtCORF0aEbdKh8dSzJx`@|k>Yv_Wlgt7i21VG@DPw3a+vdI zbk8tahL4&RO7MCO#3p)ZTQZ$<<`38@YD?$C z@u5tWV2ZftoBtZKBBCD=1P6^wUhv+Ta`q9V=8v?s2KV=CoNVc+bb|KzMK&9%*zH9s zW;MBw3UX#xkCeIZ?pyM};HWI2uHe~3D6QhZ zOCooxz-K9FGhVj~CyF&M^0|s&PFd^F;!W6-f83|bQU&SR`DY^owfljEbH#f*W9CYZ ze@&mQjMz*Dp`6eKGP$O8abcP^>a9;z986!X(rp_Wdqtw^(6uY_dnX}5Qb5PhTM7<)XiUzDwkolbx&FD^G&u(=71 z;xqE5aP+~Ik0+Svn;^K7{uQu8WQN`uBfU*_9kg&V>U8d_dm#1xJOG*b+CO0<@Px+L znEZZZC_)wk(INC0?$pfB>HA3ZQDrS=}f%o z73GQLk3Vtz2Q7yK0~g|7fUrLTV+!MkUMax}XE6xx<3vLN<&=F)uw;}1EJb0qEAIls z*mlh!1%2G@a2`+}YAqmW|F>p{3H4eai-;^2C7_{>5;V4{1T4<$K*RWzLLgt_Dg{KL zY8hciW1ov9iqEU4n&f>sDHM}F${AO&i9&aTWDwiCnJYfoP~;JTcF7#Gq|+T1lLY-T zVwz^PdBGzFHDgWL4(GfJ32OYswmgCx)pz{73{H;V>Ob)e-{+dc#?uhIIq2c~7+1FL zHeh>f83*1ITo&8{S2qJ(!ZT^2CtR0Cg@MKi3Q!9v zKay>e|Dy)zVTO!8V!MXZ)BEq;0kGDV9y@H%*kY~8@n5&OehmTAo41#c9j))Q^&d9y4>Jdr(q_PabS z%g{CAFCmD)mk;J+sS^|;O=M)H73Kk8x)?}1`>nV|#{5)=tTlWX{`OtUa4cWBm&=AFtemE3h6bW`}11&3uyi4HibUSSM`7`3^VCXeKPU5Z_&SYRohR#b zhbTtWpt@+%5Ji~BSnzP$mDOIUip|>h7Hsz|rW$=X@Kw!sE+||)K|kH|N{PZ?$%*BF zv4oN+_AFdBt!4OvG`D#P6GN+?0V&PGt#!rclQ5W6^yJJa3mKmaqb2p9R9evlW%?3i z#X_=CNULU#EUDbXLUz#(t7-v0;Yt_n9u?Q~3dAk8|3w(QLb#P+`I73L)HT{T@{#Ns zN0dENv6p-hh%~`+w||tY_clQ#Cg#(FB$MTj40O#~NAV)2%chjEK|y+J4X|PTYEkDI zmjDI9j7z|&;?}IfSxOza1^;g~7`&EU2in8`TS7EU#qO{F-?HHS|NXt_TYrrIExX)F zVkeFNxB4Z3|H=RT4Zu$)b#CDG@&DFXv^GCb)cP{;!aQa*!aL}45oB*;)sqE{-)!8HB$S;Vp*&xSMet6BwsNywZfp#qF@8% zBHA4hNVTxBZK!Yd+)CVOYI4&1;?<{zY0~dGxVUe@2{?GOAltJOT_K@*?tZb`W_)Yl zKU~;VOEd*|sI*`2xTxsg4vyj7dja+SfJAk9HPq>>E`$(o(J{mD`D=-LfC$|dP?;Z> zw~WgymQ^b4x@xR93*|_<7~yWAYE&R9O{c;-aQ&c1Z3+$Mv=*j%6D6&zM11&Ut zFLbzz*`vkuvy8`!&f2$7ozQCl!7~N`6Yb7x+%{k*yqkH73|e_YcTzRd#P-o~9Jbzl z3_Mx(vzPNlMtZ$+lV|7It6~>mr9*v$^IY^;`2jo!cY zpM%Hq6pXIS6&Cbd?Rr(J0J=r=?dboI;mq)(NPEchkRyT3GWLRifCYd|08dCo9n72NPlZUH&`h8gZoPnnKPksb9oFzEDG*+pDjCiua$Rn>y?-9 z-ev-?uiTv2-aONNSktxF>AGFpCW5~cY!bWJ#WqIbR{Q<=Lg1puv~!+EVD*gNA~yzZ zOO@S)|2>TNQT62cqP~j(b*km^6!5RA+q$?7oAAectIQgqv|pl6|LGP4aCVFlPNGX0 z`(4jMCOw%eRth4+ag)X(y7d%G05vIvq)o~x1zQE?{$ z$7{uYWw)W99Bt?oVit09u~M}BZ%DSnP!`z|Hen?#Q~?hnv?g%;jrDiO94s}oV4O}B ztPj)ZZG!F2mz$ifAfW#0>FmP&>ot{YZY1!XSjR%2%3s*)@=*uH5+t@sRb7LeX)M)Q zMPVZIjG`h^7?4e(J92g{O(5XZY*Vq&y~{T#3CZYCB@qExRZx<-!9u2XxjcOQFpzXazGJkP72yy{iP1*4Wm;YQ&bRwG0txsbnFa3;Cj892A+ z@@3tE{;`$kQ`bZOBRNG zLMWs_jG^0&E}HL=Pa4WpBCA{*cP0*4#8~!jy+{NvoC=X;;4b$Brlqa52!MmDQKo|2BxD6pR**LllYjh>Hr?n#sU+GP9BFEsNT@{)UeRNaDM9aPuE(>IxUve(8G| zMD|{8w2b4Xryl}TpiOIO$??y!D%}?so8{c63p|^RL-yjyQCc?$*5|MrE2T<#S<$qc z>z~`xLDwPA;yJJOZ0im3YLujRd(J<*W*g2zwA?Es3<{cF)NLO7ukC=*P0Y^a^;g#) zTh3;;%P#htA_OXfHpXomEDCzg+Nwu4Aw6C0oz7q*M3+QploDU-QNEzpMA_*=i{a^8 zwuUi62gfGkA;;KuqX}1;CqSpW`pWmzge8xNhWqEE-l0PPr05)AnyU#cB=nl@t~? zPJj*r;^7Q|lP0R4ixNcchixjBhdI85aIyhhZ`sjJ;sWe7Pzm@owUnsHqb-)hIf>w> zEZ784?2gA1_4X0G^G|F)n}8Q=a+*0qz0!yQW7$uUpnG^&z^whA>$LmASm2D}SeaReRO zp*-PT5iXEWPKF19e)#+L}y+8d2*qMMxmpSZp&2a56a)ir8 z1};%d7~gdII&-S4zy@6M$SShWx-X`RtO0kd?S!MIb279sJu>w=C$c9uJFE9cP;V~N`?mo4v>C|)N+If2$i%_~wak4yaD z@V<`hK*b!VjCoEBct+r?c(Zl0$z*|Q%?ZhuGp zg|P|%L(fl(3hX0OS9&=s+onF7O&7>mt%GJVLOSaVzhq#`tE!f3CNp?}#J5bT+;CJSeMSAvA@*f# z-n8pY`y-E*SztK5OK-#*&Ft?43CKE}wH(5>b4Swxt%Cu}xQ0CWo2a3q=my4rcd~v^ zY3Q#LCz62()yoDra5=-E3Q(*;&l>AKKhG+#cY+Vw=l+XUeT?w5i)v{h{d}?C8_5Vw zL-ZUyc*mC>OY=^ZGL?A@L1;tpDcj6a=?tKl^^oHDT;ON_qp=aOv7+7)CB*7jm!ANW z*2wZ58F`LpqbzLWJ>`Zlv1^Ku$tXBLCVPIZEn);vH`V8YAC>QW5#YWVhra`=Fud|dy2PVSs&f09_;I9)89X2Xw7GjBhz-o^-)ALlo?J~d3=9%*uxnK z0RtVN`#n2AQK=jHI9n)HZ2#M^pzZl6*RT#~m1C#67v;_jivofek>#T|;1KtgdRc#5Cp_djRm%z1t0nP=vCN3y%w z<=)*}uIuytUc+hpP2N3fGMI~#dNkBXG6H6<2r$XcX&|pLuHF>e#l+Un=<_9?9>4SD z2My}&(ip@^+vKQv)%gW{D^h)tqe2SodiD+#Cw2#u+<4x`sT7lX|Pw2>P28tx=__%Ne+p*SYk3rPc=-l0k#?Zjj%c z+ExSx&X2SS3*|%74u3p~UcAw(ii*7*L*i4IYQ%oBx7F7HFwUpHKZD~0zSH{v^83l( zmvl*!ceC92mq zE^5sbN^43H+_Lu04!g2(`I{^=A*%o7Q|ql6x4|#4yJBx#!J_KVo?^ia7q8YuhSncF z2zqRJvY@su=O$P&wLnDtp4(f#;=dyYxo$ zNr}o?TvL_QvD2EsP-~`5!pRq&8!4I`rC3IfdQ%ymk@Xxoev0cVKW77I%c9y&!3cl6 z{|)(VO3YZuiS+y;lZh`f>m+`6ua^2|fCc3S2=)41-$RAFED5>eL3d$}{=4)N&xvivtDuaZXGZd!`(RnEx;J2ve;Mgl zpn$588jMRI^GIe9BgXK>rOD{VZufhHYRq4?f$n)Xh5fpNknn5~6Goa7=wd$4dUe}D z&^(hy3d_gbaFxJIvCI6^8T~nspHq{k@8;#0qVve=`LTMFgTX~k$_}02UjxiyGiO5= z1-vY>7Bleg-0Yv9_Vkfq1i7TzEKKZuIe- z3oL4JBg;+gaDtu`B?lthP4V!l><)^U6#U63kaM-l5*daUB!s2R_yOZjh7$WY5xeHp z{yrUsF_v?vi=9qzQNAdVLace#f!hE8^~PrEp=N14k*KOq~+# zdA|a_50N^kSmM6t-yocrc=A``PaIs_aBchJH%JdlI~;8BXe=sr5Mh8j_VKPg{qj|cG3pz}@T(k>5+4SQCeRDkkKpLqAeF+nP za?$)6v)#%AKWS1u@Kb214r)%qaFr8ln{Xm?h4L+|H&M=DtDaMkFY0a5LDR8^RKDy&& zIxgIgj#&p;BTvHomBaV*<_+wARBVOshLcUFDkW!ABpi-X+noA>n_TmD0$}r= zd9q1-&3FA5+lwdD#VJFmeYl!u0NRr{+MifQMe|fz%;eMQaIHFXT$mLDfUED=5F@96 zl?mLf#=j=ac}1nuX;}WxI*q*J2$W{T!3s^k>^+%0D zQmBI=Ec{Ogd8Pb>4pk&79^6!L3B#oL9`mlE+jbBG+_3#;-S^a&I7leD0{4=@UN$uxr#G4BGS<04DZ7j5U~- z2s#Y`g&DuoCI)=UuOABne~y*9!;BhpGc9L&KFde zRRpKZ0}hzvv7z7PX}+oodrvZN*i;R_+{|^bwi$!hx@(_xX1nKbO>6`PC|#`b@Tm21 z9x>!YX}RL+uAClNFP@|YMI-kYIoKUD@Cn7$4lu{tmEzIY!`^}u(pwIo88b{l;q z5&pqH=7qtRTcExmU%i}&(`pHc#1C)+9zUCNONdWOr(ejbKBX=>6oq9#Pk6+n{+_(L zzNPt*ERQt_8)_kH^veb#OGjg$ z*%nkXV0uU%mpV_x< zTI3$t;pNHXKN#IYw2cd_95cP>`aj0);x^EkZN>2*K}=@NK`NITU#&{aHqDc|YDm8E zAK{j~xuxY~cpF46V|!UU{YYTKFYuFTvzQ+~*!Pzh&b@i(4Z?SvO9D5RJMOk;8T5(f z!Ldw8^!3_cbxlieL_4gQGcwXLX(YhYxWW5M`X*BOTZ3!4WYdc~3f|qrbgmn(LWa#};XiJPD~!2i<_#8udkzbd|$ce=0k<;YsSKd!aWT`&IsXxdMnmh7X(0(>{^Z|Zg z{U*#c$ZNr6?O%po>$Xm)?X+@>JDaE2r3n8!G6Z~` zBM~2^PNf$j`KRN~h1|U=JkFsPxp9uLp~E|P ziDN@!V<(WGO0^7g>~7Lx)?~R}`X3cApx*c0a>3{~mIuyq&8m&fIq&=@<^kw*^kmHq zW7XSoDW+>cBBa!Q1<=N9mrgpuBfrJ;hE;4#q-!|YW?!MshF=boNXK5z(N6BrHoG;u zsd?qqIr%8I<%M<|AhNVZU58g4bHFod0Fd+L*^9Ft8;pT4&X8vE&8Mr>5!l z^E+D;DcTds`lT<8V{@M?W_nz?A?`2(h4B0c0Z@g3JBw+Pwfxspz3(C7^Yt; zvHUR|G+r$A{hoYqDxr%`pob=?`(Ds1*C!vh;)q?tUovcZYCp*R@+4#Y?`bPB}jzYK6r`$gYh_y$u;b^orCWLn9+6BB9;4# z1hhP!-_DK)td4R?v8pIqHIK-$F`+1k#wufM5?{AvIAY>KVg4JkPUZ!m1?28N&z&+_ zzjJmReWyvni!PY|?dh|1=6o)Ze{A6euU#m#Og~Rer~6NSopU_qqc^6~;#jTQ1peBv zhjZK5?2YnfsLBx%3D_CaOBs3Dzq$iz))EVQTD;L(Z`KgUC{cIoxuv>=Azz3aZF031 z-v+cbsWjDHb1rXUu9hfTfxy_}vTu*-3^av%On#F41UvnCbFBX{G%vVYz|`#+=H5^- zs|3uFyArCb{HgqIyq5^KIN^A)=kcuYnU9!PdFSk z=)GJ=7uJ{20va7rmBHX6Lio?{Vzaf@WZZi^x%UJEPs--8wTyPJMaQs&Y72i%siC(}4WUS2auF&|p$;XFqP*$rjy7Cee>NBB zLS;U~Q7e2}%nvJ+f4AB+kuS;q_6be?(I)iBn_z8BSs5dnGWg;!{^X-R)gf;p z;L@)P@-2?uyl;Z%^N!p?i)>9hr*R?Fvv<#S^<_9d?Q1Ua3Ei#MwO&0AdG<>L<0J+=HQcm zyC&`}F>(VmgV%pyS1tQdp#hy5Qj=v4ln_7EX=px!lVsFrXO^)^rtPyK!t^Y0v`beV znbUUZkoS09%>?mnpvSr2qKad~p7+fw&10AU)hfB zlPWL9*ydD8VausSAkq9o4PQJGP=tLfxio#UA5p927(!9S)dHTuSw(VRTU5s|7B_EoCmgd%?GD<& zT*LfVo_{%Xx6;05sQA;>Of7e*Xb3nUpL&m^Hym8N0)Bir zTjO_lhRg+pPclrDKJH3!rWxji{5+5xxZp;MT28D52UwNouw~jk+9DepATJ?3hU;wY zo1omj_Tx6^%x_6qjq9YedQfr>H=Ny1og41x%nR|>S2iLv7=LT5RKevVB3Q0(tJNVW z9sk%Jr|S?^mP0EP7sDW#ca)BMkK!~CgVZ?PGIFJ@S`d2jhD!bF1pK`i{cJ<%m|9(* z_Q&p!TN-C?qPj^Hlie6)z{l#qK!&~5%LwW)!T7WF0vaZV(_M!#(R#ZV7eGPNBO0`I z-r)q*>CGQ$h7l0|dJW+3L1oi4?YBQGEy81z1DPH+l@+rZmzqlKv(wVaNOJPA@lY)+ ze9WeP9p%_Oc3vN=((C2%c#W6h)Z#h(QIBC>O`d;UsFz#{L>&~y%IzK{%nxK-aslQ< z0@o>4!ohh+vgeVZYX$n#{(}#6m47POkOhAw*i*u&Su%R%p+EvPte_^}!vH1j?y$L< zPm*&QD56HMC%`?HTDtK3<^k_Hn^L!++S9(UDW5s(D_N zs`>|pmC<$SgZJP1YD3^&jXquf(u&KeQixIPNR_Wt*Wh{}xQn|1$XJ|CbXrVv}*|$5B!O4lW+9>kEZBgkGG2 z*(!FYQ+EthhkaQ^%A?@d82}HHAp;4_5VX^@w{5I=jl-f2%_>yOHgxCbwH&m!(*^zJ z0WwL=fUk_*MbbdYkEQzFa=>52SD-MzVkXDb-Bm~7KlrKj6*CX)pwk`cFpW$R^~k%O$`&UCaJGqByGgRk{VxvI1*!gPv|E>uW=U|(R)$@j@RnU8VTVQFjg?5@ z19Y>J?@pJOk^~s`)^PfNo)R8!=J)|XIn7y7H)HtU6-0}m^kGSv;CeV0?wW_dMgjWz z@SFPz@t86M9@v^hnd8{V#n&&hVVv2P3Ni8PCo1_LT#Nqa@Q6T!%4ixNqmbYN=)2#k ztC#sjl9Jv0$c!QcPM<@sI{jbHvESQ2bqY-;=f!C&i2{9dc_a0Gyjj!l1kJJ4) zoGAi$UA1l%W~N+LRRNKC_bx(_{DDLkkuOcT=1*=NW|f42PV(-GEs|fw_1xVwj~N4& zyGFL#o+=5o9m$cALAp<>ZXq11xZ0&6<0@?5H)J}uiCqJPmKp&Wr{WzVRl<@B|I~+F z*?wW4II)o4lwAo;p8za#d?z&xA-*%?19qb@Y`X&4;dx36(~|!fx~_M`A@Lhd!GyxB z@`uZjJZeBt-+9tw)2F2*S@VzuY}4c@icGdo&Z@f!I3O6 zf$LewwO%uziqEWUzqxqJj{ch_;SgxZmDmUNToeUTcuDS~Is%hAv%~M))`mmUo2-pddik4@h228ob$k&UK&DwfFyYJ$`SvE&X3^K?LP( zY2Uc=fmcMJVmEuivW0NcC}u(IKa!hKriHh4JHKY)H1%Vw53?zU`1+WcV)*QW`CEh| zU`PYI!Z6K_DAm}EbqQ;AeT)5{3p1pPbf{|eq)+@0$-1*AxWhxrylH_`t<<7?cSt8h z{mynzHe_y_;;OPe5o`d|6WF7?)gsMfWmaw_NxtZ@NJW~{^pY>TYvMGM+;uRC&91DX zo;^e}V0|>ZrL*sAE#n^FQN70I)#i)1#-+tKzF3*Y2AjU^Xq|9R{eys?>RI5e8cmHO}wsx+uWseoU|a z>m@jt;yQ$8^z-5d?kqgE0Lu^$fZ_{Gu19*#p8!HjG31_;7l$&^+~*%q0L&obhy38x zUchRUS7M(gjOjyf*_PN)KlISRF(ini3g#O1^PAa8RKY2LH5TR%QBmgq%nW;>xHyt7 zP$bDi8}fwHjLT5lkNgruJKNkdZxX64T2M6)jd z1q-aqra&;@a0&6$_3#2IYO^%9@Wzp7Co5q-Fx$?quCBa5ntD}e_$p4AGn@${&Vpt_rmAK7)BHmS^xn*IwM zWjPeIj$oX@;P{J<=#PB`3sE4YHwch@{+8%*e)x|_ChtSUIV3a7)-pELPI(C0dz0a+&5=~SMsZ5 z{!tUK&m;iD^*x<0F;-k5Gjh}z4>Pb0C}K`W8j^{^2w4cfeDD+I-^wG2*k2# z0b{fI-RT9+#AY@vU5=N>87hx>nt>6=#dGHHN(VK-t|X49IHWIbvM zNW3gOn;D*sz}+NMCx_8vbM7O6ro*Ao!&+rv)#Y{b-wcDTFUr+LQ%_G%2JBp!8!}g2 z!HLIGJc&pSz#8INpWRla7pgH|3c%>xZ-fLUd(N|)^hP;D+$yqX)LR_ut(!4KJIT$F znUcGvnMI3hW6T@A*^udSL7RB;8jBvFU>?xhaxi(b_-p}1kkI)6WHoO!Ig$w^Io;bY zkyVbyua~#2>{0I?68p#vdq09)tOyGpMhIXXSRS&(>)?N3A%weI{Ow<4oQDi*|vWI zdk%9klu7KmmAFng=~*<%m>KNe-Jh>aBx;;|v^54SrX@w#{4Vj+SEYvKU9Rt}2Oxhu zx9~7125^Sb{DR7(BK7nvr~dBU>>_9;>S&}!YcPK_;V9_RF~c;WH5fAxqSnt4c9t~F zQjl|VoN@9Ec5*e8W7f@;vG3EMI>|v>EjQ}bwam1Jgz+X$HUwa@PR41WIqPOAtxK8Z z@t~$f-K{1Z$IP}&si-2TkB;wMMv4VxGgRxV=KnfyV|O?HWHjPDtnb+698d_)soB-M z0S(c(rc2)@wG=j;!_}{@I^B1bZdGQ@l3UYu8rIOHcau~=73luz=t+YzPpcr%QQGxH zdQWL6BwOtRGmP>lZ5R41iF~YDvxgG^24*8}6EpA?Oxx{(l++0~ zfh9N3m}zg>@kVAv&8G)r+8;kzpNU$>F7x3yWumT&O(w-7J++TT)kaJ^qGvKP3RR(5 zQt1SP`2X54bCLlUN?vO7R@EC#?Ph_N2+5*`$zF$iAU$iuoLg2v?0+~c*l6K|2qkx` z36&WP?>EhqDx6(E+Dpq>w2Z8qz*9iS15XErL#CzJTcxVmP7U5MiYFFpBjd-<<+3Q~ z*O43XeiBJa@&DYC(kH^JhY8BuY$2a!O}w~r7#&u?wM*IZb8)cSMN}(}p24CI^({0p zarLF~Q*OLm26DFN??^~X9PgEdYripZuqi@}Zn}FR-`LE~(Cq9YXdJR{g7zz%zS^$dvAs_d*u8$xQw1@;qD8F648Ez|hO3>kN>b8W0v^IY{#V z7YHG*>#S1>t~xg6Heub+e`pfYpzYsA-U9klyU~0U;(PrnA*Vbwst* zkSv`p>$C#4n$BxdMI9QQvTI-hLOiW{5@5j}gTtwV&66&;FnU^QmfY}bc2E36g`dMN zv0u#GvU2YnETRiM^Y6YdDk z<=cz7dbH$+uD37uXsfbqAv>hKIo#s2s0GjdddJGzJ<}4$BM}wf%m7={&JN&eWi8cE+)y+OIO**2{!%v>s&pQwCyR14ih8&jUy3 zr|kDs`K{XDe1FLM*YwRjqCTEv_3{qFe2#b5Go9GkRePA~u$uWFzVQRp4STtf-1r@u9iq9PO0dd2SoA6kt@KPhbczFW zY5&NW!+b@$0nw>MSt19_!`N{A31S}Y`+Z>vY^j4ouEtd@B1}^|)p6q8?J&wyj~*2l zfUU=DG$44)7Pi4_DZH->)i$QP)5v5nNhD`psjhiN*#(}y@~9-iZKU;c2LiF)LN;Rbu))3ZNM zQxz83>vC=}p3YUXeza0fneQBSxo`hnN^n>I0x7m{RrxH&iXDx=o_9IiJfLh1%*!bP zTZYmc+LsZk#@+*iZTjCr{%iG+?bus$9Z_vwt>065A}5rg{B^N91yh=G9D0?H_uQ}* zR3|hVwNEuIgbY&@s7ta z5AD-;GEQNgWu>Y10cBE^PfALQd;Odi+oYlfro@Eo!d}5;+-;w#Fj$l47}=((fc8yx zwO?T7c7G@nKp?B6eGts6e{Rk?W@6y{>+On;`gu9)PNNaGHo*lW1fLOly0vIFwZO*7 zPlp$(7;84=Xg{(EU9UJvzkx|M7funS{FCv8HK(u9SDAEZ!7HlA@vpKbCFcfBox>n@ zjz4q)ITm|;(vUhD&Kus-{1+l=>}f8r|4Z#TjAI#sFZoz^0^@?NT*fXN|U&?A!c08Ob=_y zqlC2Tpa`qG4O440u;rRQxqrsZEe z_<6CtX#BTllyg#xQaL^E7Yqd=r^#HIP2L_3yp;T$LOU*=5xBTsEbxS2h-}Nx(N?ue zJZ=iJf(|%g9q{HvRAotHUj1H_#Cnuvdrqx`O?qD_*pRdf=vpO1RDc?`h%yQMABMu4 z=Nmc1md~dzW*&pNuJg~e5u{dtF*b^k=ley66<%^M@-&ZF_k#qQ6W@jF>Kw6;-D zrYd15!77cA(^%7)0_hcKt%!MKePO?-|M~E}-{2@nYHn19#e{h+jwu{%b%SN0)sgRzX+*XCi6QZ?Ls9-~-FC=9D;DwpYGOYfxjG1Oz&TeqZ zYyX89r!*?jFMGGSv@Sfql{{Q}L1y%8?R^@(biSL3iVo>KLa3>De)*>4#3wJVbdS-m zxurybi1Y5@i20KICAIWhhW7EmaBQ~BK1v#~VH z(0=nPl@o4<+R)XeeyCWs%*8#*0PR0o`jRN=zZz@W$ttP`<1f@zpKA7KZRoy;s(&Aq zA~n&Z?J>nKi$Qvs{i{Qu$Im^GrP|wm6AE=B<6fb4EJBxvF4XMw{@J(hN!|tO9l!o? ze4{7!?LkjwkX7OKR`BvjaQaI7ItK0Wl;G*S7AxbWC`||3=QzasBXJDPjU~|D2b?AL zKi6ksc)wQj^29rZ`Z?qr71ghd6ZGT8^kNuJdYh3z_Jk6|_S@>h$(-SN^r)^$- zhHpQ(SlBa`bKpiermn{s8TN4=*V$6mQ1Ahq`E?CnzIES ztY$uI$-KInvxT!;rx$f?l}geX!+GYVV+ISbSS{D1&&iyl4IJ&7&)Ea0-r4Wf+sIUN z6?h2yh9Ka4#729%J4@)&<8Ql5Xq8_jrX#SWFB)f&Cevp}y}@UxZoPABT3_drCnLdI zD9W8byPx*dRyKyXDW88SFkH^ys^qjKx3}yvuyG z46;X#Kb4s{W=NUWSMtHBR6!8D;_pj;9;*BVhBHN+V5`)hl9j*?3LFO z>8M{*lBsbVmD;~9cCTF2%0?CR8C_(MI;BWkWmn4iC2ufyK1Nd$!@2f$lP1kbSnoYn z#E-)N3<&)i=AGM-`%N1lzok&}&fN8e1y^PLV?KKU4wXvNR`G{oT!xi@3QuXL*&)DQ z&Arm>Y0}5T0`!ih*{FbAb!W2YdaToFilKdPBFRFTLZ=M%B#Z>Qrkiz(r=!53h9ggA zhruTEz#RNzBsoug3%X6hxTQ^oE28#8&o|ym%^%ua0oW#FBIuS*L?UQnRKlj1D=h(v zY~2l3-=pE;G#xh=8gHA~*3c7z*O*4bM&E@OHYL38xC zc*ft&C~VEw>R5rG&nR1uDYcS^I5D72Y~}G~Xqfr6+-{vJ4*0zHo4bb~M@r?p<`NsC zYU~Zt`AiVQGf+sK<9lW0%ut=#ah|&yp^xuu&*Y%0sB;AJ-Td+1V(P;Rew2oU!L&5C z7}ql(-)iWm+2;VuCu7#jH0&$wET&BY#u6d%cIf0&S^GSWq|$7f=veK|sblxI>C#8DBz0HYk~h&|B> z->Lp>I<4kAJE$@05|1Au%W<9@rFLv@@_4IX4y$jPW+o**Th6mq@hd4B8Vzu3iw?G%%Hn4M02qzPBmr_G>2!`d0waVvbar4Sbq({ zvEwKHAzg4qwRJ@(JOzJ6G!xd7eQ@d5{hj)fn7Cf1#YywuZBh#UL`dccFmt*+%GTXU zp7`1OQ8}#QX7%UZA%=Eidhpi3KS;;N;rdtI<*v<;m%(X=wddegU-drFV?Yk5^g0qC zWLTTI=DF+!&);2S7OPhLEav-$sC%n?!HUHmzV%}e`lYZ0^6sDR4?RLI;DdT@D6>oFYJ|N=d~BfhS%7H&3e*WmKY%Mzh%tjVa6}nY}KHW zVk##Z|0ex5C4Fh7Ag9xMVGiS%@83%>mp}!;^rw ziQX5_bSy{{NN-}>aD+H68mOe}zEvC6{J6G#?MVDlPV&=8x+rJuFIpo#YxUNeMZ?;~ zv%d=`bVHl8SQg3@&HIgDFYq7Hb|H#&4I`EI8Xgi)dDUHdqYhTwreMOF)i)`@<`&&S}eVzOz=}UHLFn$oF zL-8I7>CtoMygfqFUH7Qc4E)JbMfPyJ-Q1M*adc3xz;;@zALi?J{!HnVsA{N0w9k}Z z3Aloea%4Hib7LHBS=(k+d(dqCy==Q=JC96imNL~IQpQyIr*!Af>84a3d`nynT`ph(@4JNi(dEuXwZ=v2vuTQb$?mZVht5zXB;ZU?#1Fzi% zl#f*6`rvRDPt;ShH8qSXkrlWP&`w9_STO!A9 z9NjUJjEfxM=N7QMK%=tOcg@tBI4`4tF%Yrh$Y zc(ySB(ki4Q^!2z$@-wrbo5?db?WGe3vAzdubMZb);@W&%n8jeC>%5}&TG(lywyx!* zb+*;mP0z`DHfbaY!@bA0sx!4oKLV&6TeO&Tktz&9z*D#n`IEU1dP(?NTVRxHWidT zZ*-{}w}SEbq9k_xA_x#`kcYBibBESERm$Yh{!`2FE`@%y#*jtwK?wbaVVPxk@#>dF{b5qC%B~X=`zfN?c zk-DtJ%1-Bp(>;L!c}KCWUq4N_UpPj}ItQv<_)5Fka$dLQE-pJ$VihGP+FhTm&sFwh zsejrfzebQtr5K=U-pr@D5ktBa&Q+i}vK=1&!MXP~Hg z{GLIJJJx}i>rT}5$-*s~i-hhoVPS11hX6AY zdR67FT0Z__&~~p!e>ej#u}JFfAW^Z_EbWjV2wUjV9`%-(VD6L{g$Gx8k z4+yPWV%(ju`>!Lk6fvv&jJo`lpVtz^fr~g%yi_EA{ycW2IsQi|Un zetLXO$0DE0vlXZ=TwiNsN~A-7LPHp+zMiv=c^L%!zg5LZ#Yn0EJj~0XNB6KUC^}zW zQ0^<;H5C@W{P%}gSg+pVCIKJ%ae=+Duqfz(`}Y5BxFPha9BwUFAHl z3uuzhJgb=$ssz%&>o%n3$%3D9^=mA8K0{HyNHHls(%FEro{8S+r zXfG_54uOx#?8&|?`?m&Ekv$oNz;~i}PNmrtE9H`bz~qkW-p)ZG?(;&_^D z_%Ch_j-8Q4mZ7iB&CM*wM}qJchfjAm>ks2tY~k)E#Sxy>z|WsPs;VPy7jsin`Q7RK zz}D|Jdr%5FlIpg$813!>2NTNWYVK6R} zGk+bKQzGkI%y~>4nJ};l9Yr;^p`3tSL`~QTdW{SXKMaQ7>^MjY?C%7=imhpu`V3v8 ztRqnux}PXL9rd$kE}fyG zqB^T_PsMNt{$>V(bdQ{YNzPlg5fbIi*?U74!9|MDvMKn+*YR-&S+ilaNSJqbS3 zKE7w}MMcHROZj(9!+_^E71dy%hKiDrzs)+4w$|17?ebaK;*MKRMkYokvE8NJSk0?a zxsqOb)E6CJha>5)M6jHB6nlp^VxLOsn8sgJ96XF~)K*y*X_Yu~!WdLut3{l?!}vm- zA2Fv$P)o^rqoc<-gCiZL2PFHU8u!r4>p}Y)A#D=lAC^m7$F02j>h^5N&CNR*(niL( zics?5TxhT=p+9<8S9tiY@Nk9cuM?ovALZ{%xv2)aWZ`tI-{86~til+6{WvJSzE>zb z3@N?WR%Uq|eCx@{_A{IZH5Wq1FMa#6SNeXJMp!5_;x#q6MOCHDhACa-rvGIpC446I zzG~BB2V=_hCvQs!UnG^^OFjF*zCYSCv?XVdPPl|}hf2#a(j*w6N*H+>oYotCmK>lu z-^)X}aidyUiX?L3t+1r-CFC*6m4^=^edWEbTr;h{YCm!zN^^#CaWMMA)Yi)jtGOp` zo6~iNvb#`vLiMoy%vroHA0PRFYT%>S4F7!b(stQ}RRj|<^U|+B4~+eKMihUWwi`>2 z`tz$lpBb2t5YAv4%1_v%E?8^_(ss+y%>DVknq6dKuvOUhL^zgmo9fy%CH(deDawC8 ze!C(-`A!z|X(;9M3UwG0<*)41EXv3{(fRjn%5ePe9v07!&fNI8^kK`Sbo1%knBq`N z&R}#pT-irVTtXZNA|&$@RRm&#-`Rj#< zA)s$O0rqm9YwjfMMGJl@b?g%jx4fWZB8w(iVffQwo_F||)HP~U^)mcs1HzfUH15v^ z8FJX@Wq5WACe#y0AjFaTbPtXWIw2V>6$v`BMNP{YL719^{kc$bmXR@WJE^TytnFwU zvs#$R^^4Lh>wlV+A{w@>2_qQbrsqh$dc_xKrjyVQW$#8&IXQO4^DKduBe_5S8Rb7L?UX29^x-*y`q zGQ|8&6n}<{fU%k`rzQScoV@3JO}q+2?DMz<$k7)Fz2_Y78EC)WajK8ORR1(1S@CXB zVI|Se+QN1I;|T_laa`DT-Gog^o28TT{u$Cb98#hKA?^}fbpcOth7A1^jwLuu*wCWIj?~@e@B*5n?>!Ghsbe?a+g1 zf`WN~yVlTJ&rYCcd&HVc%S&pamMYZYL1hrdSJC0vlHoB^m_kvko%?h~Ag1W4DwxQ| zlmASll&C-^Vh^pM>#|1wfHsOpcz*^P($KU~Kh1{{#@9IBn(-dVb7j&!A0?800k;@T z0P|-BiMX2KKOdzr?S0Yu_`ovpXcV~Ey*74Y`3?=vGzLFIZK)MA8+c-l*`iR|`^xRC9v7u ztpgn!ZZIMnj|+MgLA(&}Jj^v^eTuUe?`8Nw8|M0dY7zrvo$J z1&hz9qKyYkQXhK#dX$JHAHvxzX>sz4E((#3hk_om(3 zqFjAp3m?L^E$0a1DyYrdyIOPy!Y6Tb84h<= z*y{bc5C>75l)Q)=vU{Ib^E$&8Y`nQiUtVeu*7VW<%Rt%)sPKjILvF~V)~(O^YBIbG z?V3KAnm|dv!HS<)qkYsvK5Qc&DsB3Q8O)C^AJ)Wbt0*N~FO8wKU~2mU(m&e^6&~gu zaE2a3*U6B>a4yV#`x|Ve{=sybo;eeGIlxZTb=CQmIq8E>~d#**m3P zWsQbQDZ-Q~4|i-sEx??Ogci1R9fOnvy-iGrxIN_V?gyOVK9t~!CZ=Q@?0(>SCdmk5 z#!5ydy>s7G<^>)}(?YktaFZU}O*4f24wpsmAJB;{obC?7w)z>MY*=QWNry>hWMAGh zjBi?Zaj2<@VTui`w%oT1Y$lXz?th+RYxG_nmaT{oE3q_BNAJ=zBe#0RC_ZfI#J~KF zw31-sNaY-cd~vM_Uf5n~S3-ZZ`RiCbf}Chik4R zoO+XX7Hz274V0YcyR2P!^xNQ4;0c%h#`maG!1A~-Pm{Jz2V!k)O<#BQ`y3r6qz0i;pkDoBni}nv_5?s}ACqLF= zX_l2*gNf&{%>A_rD;ec;Krt{Q=Y?VTZXUTrDE1c!>)vf#5ukZ+)dP8h<7EDC2)|ii zU;x@61TJ;)yy_cZ;W%t(9{u8fS&uVJ2>d2+W^sMJNS7&VZ%u*A`uIe0XX&ea zW*wRAK;Sk{-Q*il)9au~5!tewrJ}lS`p?=aa#t#<@gUvGk@Dd2E<$%BRbFrE?$!t2 zwtj}2hVJuWNE$?u?9dOYpVyIwIz?Ey8{Vsv(?MJ9Y&4eL_aZQU4LHj=UvrD38Xt4Z z&$4&%ghv|W&z`M{_oT~F1dLKq8jOfB^|2-*^JaSReeNMOA>;=MRIDg>Z3moT+_tuE zlyH|g@jD31KUz`$<3~{^!S1B`=yL4u&pedPN+n|SPrRTEd@j{T<$rwt|Lo0ksGUBY zN6LCoM(OwEySbW{u4XKHO-4 z-%tRto>YcS2!8RRHVD?Ru>}-k+%Zx!peUES3hY+q&~Eb_(XC@7+I}{+0R54}y+tCI zmTHOnba#dU-*19W^0zf9hpQC>NZJ;ZA>TGZ>(7Pb6@t}q86_^956UJ(d_CVyO$`}1V* z2*dyKDi-j2^c~6zsjidn=Q_2ge?vtKotqVGUCL;el znbPL}{3?CWRL2vPt{nS#bV3Pj*iC67Xk5XcHvi{W<$&M!ouYK*_!B%$Sasol8IAwj zt5m`7Q_emBqee}&!$9qz`(H=nzkgLUXzC4)Z(!8^J@Ef&j{iOIfA-S9SNy+C&3_o) z|FNlwJ9+I7NOV8&|9ltrKXksIYj*%-VXV#-@W5v!`?(2776-2Q?fpL5888jq_X{;e zEDFPlD1nDlyQ0M8aVn{cRvdg|d-Hx9QCwm#FY4QK27&mbwQG z;}*`wY}VdG_l2o?c}_#0G@b~P95m4*)OK8QHhO;9^B%5SxPrd)N%qMr9cy2ibuYW5 z2T&jir&io}>aR>z395Gipr2ke)DHJAD?NJDyis405xm{?l$X)eCcptVyN~j_s#a2g z3iO!`Sf;!j_;7dJQ-kvxL$(v5@_N2!5=IL# zJ-Mi~Vc_+x!TT&vIA@s!gWRxu9Doe6Hl3V)-%F$8Hk0HjaL~(JvmX>kftJ&GoScQ#CJ+`q@Yzir` zz%InD?$*dbIzVPt6_MGVLgcNu(BOHc+r$~iR96g5IZKQT1I|1kLxxM+%Q#lD;bnOz zl|8aCqpzlb=e()%hLf9cJ*zY4Eybgs45pfiB9DkVHZfngg4QKGj)pD|22Zp!*q;ew zy1)4(i~a%4TtWCdR<$Te7-=Vyd?ZAN%Z*dC5HCkrCDyX9(Dufw9S1$B><#ZnBQ_T}vE0ajAT;$qrAc4axc5Ozo*~nB@3t8Kt6Fru4 zw!l^$cfWi6yg4-RFH$AV_wpu8afg{;Q5o2l?!)rEN6`xsV_}{`uZ}JB;#@Lr=4!C<4uFPK#l~dtMyaGfN~o}SHx}nVu1)uw z26FI;P;+jxNu`*S1_lwwD+V(W7jFZG5+kkfh1I(KPKdu{b(z#-cNE^yTFt}%Xsfei zL`Tl`?Y>HPsJPH5jcAB0#{;@4@lbpZhOkyq!PcEgT!;H)4EeUyMC!S2pbj^2%^DZj z@Hu{m?f%ZaKFQbP>s-a3&H+2U<}VaNDA~^-ctV>_ej2%%n0vk7s@Lv)h!e>f@|rv) zK93fD83PNUC(6jGf@}dTgCZ}tmWwE?C z%RLwF;fp$T=X(SJcH<}x>?_C9>=Wf*jjgDV-XCjwW@Om`+V_)rI)&sl5mppA(v5ji z8u^Kt%|nyvtZc&jNDaEz)UQN8dJGv3KP89JiM?;&K!3K?xOyk%nR?7*qNUsIqVM|Z zoHr*4VpYTsE2!OJO`JGAdJllb%}sk#&NP>96U3hW>=AN{&K&xC%&eNcSM%`3vR)jA#j;xyZ&|KQ zm-A#_*k`-zrI6u()zs5jl*n4MVsl+?J|7wbk@Ir8$3oZ|L*&dtaH@#v4I$ybiW`}R zAoL+(mQLFjs2o|T9j?gzsMpr_SJ?h`EkUei^%Oy%S6MxgbZszl4{~*xx>r+ppRe)E6pTLR3Cfk2*+5Z_-7pn5`Ff+_fu+z-W9h z3&=--ndUmt)bBIohze?XY?_uDB7O5!3|HkA!>3hZOTG3Z;H*n4wvl=w7Yt!EO0?I5 zl=MzjpKwdf3##3%e9E7p|Khj=6Ptee;x=4z{;HzOUl+i9ai*L149@4Nb~g;wK3p{@ z7Eg`Jwv8zlOI_8_bytUnV1eV?71818(1Pdia6xlKh8>^2RMyF{oDX8xf4s(2!|!aF zll|4Z)00IlJx1c0%@xP5b7pgo3e$^CVTig}U*HqRAd8Qtr()G>Cz7(#y6x{wG>T32 z`duSkyKvHuryuh2O$YSh`i*Dx+Qe^eZ?+!nT>QTpFZk&E7_X4R$#m=bs4%-x9>|g1 zc{Y!9{9t}I-;_vT#(`1(CauVMwht>64@XecZY?}Tc|C<+Y}#`76oDtNFfiRi{f-nL zt>EkG=y+K3QSImD$dD)sMUrvNM7*O=dphHTfUXa)Sfh>Xkz?<>=swDDx%Q8?2dr#d z^pG!5rYxO1q0PNM65VMdX!qvlf!`n0-@J8{JSE*J_Q`PePe23K3MSpHiLIA^M&6Bv zz_fK=#%Vhy>P3wI_lzOOp&gaX)c*J1Uagy>do!gsG}BgTe+~<4?EZe*|M2asM`2{q zs*i}%+^jl#SBIRKMfB6Tj2Yn+2@yrtslBh;BjD9GusMIW7Lohe`@462> zWQOUcHY$vDJ`wY>j+I=VKjP$1-gu~))Zr5q%>GaKa=rVQAN$t*_nK~mffm={)>kC{ z%j(u&RZ~?5q?p5o2Z@eMa%jUwD3b=$4jQeb@NH{>o9u63DY4o@V8e{Hv7LO$cN7%YkMc28@2;DW=^UFY?7 zRNJSAYB|7Hk=RTTH>uez+ZP_<0c#=GgT|uSeahRnM>u=<{xoDOWLW=2n1Pos`&PU& zEX=bw?pTKYaud5lfBT^h&g8lD{yF$pdsSBQi@mCY`iKJJi9ehB{-`P{>ca~R6=d_` zUlN$BVoNz$H&}#;2GMNCp|0&OLdKTRPG3l-0 z_4i()iCC$`H~PzVsfVu9Ow+F_bh}?LoUA*KglaFG$4c~e*n`&aPJyKZKh>;_QeI%Kr@cqC*VyRdG_CGUi*$RL>s@lq;1fU3{Xl~t2bG!9W#@}>z$~h z+}|zi5GEPaqclRSMmK9L_-o-LvZ8GNtP~aoYtMZLT+qzI>G}02*Vc%(E|cJje1j3v zF)As#Fv;tft8*%j&dce3<)JpzV zSh(?qFIpj9f90KM)U^%Mp$-t?$ggT;&*#-&-HOeLpD*%wtBp3{Kr6)LBbt2%1kK_|@J*?dA(hcz(Zf048nTTmJJpml{X4Vo^?V>wz)|2JI zmw49pVe@zT%N8P#v8v0FAXfbra>~Q3n>t?wNo{1J$QNanzO_>|1aB9<+PuXtR+C3G zPjVp!3v5^#`p~b)PMnQu5a>WeZzT@ywyDnYy`7)-J-Q&=uGQAQxzl_(=GgtfKfB=9 zbk@nm(wctgfYSpFxM6kB=MM9)&uN>!xm-Y6+*dqA50rZrRc>4@ky1{sYX=}nb_Q5UMo9*`? z@{IPm1KmA?<_+t9d7?!MM8~!WlacRxTJ4kw;nuULEv=8v<+bViOf^hl=-}77f!4-` zmyKXp(%Z}}|4|%eDbf7Bl+H9YY*6rI1SB1jg@Np~5lY&MQM>u##!0Y{0K}C(cKCU2 zzLl#8I_O_-3Tn>Bu!)z?={|J0z-E0_ZoTqLF|eKd)>kN_!N9N*a!XXr1jgX@@cd~0 zfI(WvMR)vPq27;l5H-@gH+ZOj#fXv7i%U$o^_)F_{8d`x${Y64i#J}z?Hg8&%3yx7 z)5h6Kk1@=^i{7Pjz6|He87AiOT~a@fR3>Rqxz+SZGs8z~2QXaiAjfWU^BYBIdfz_f zoxaA^ryZp;2SHB*rUh`c7g?S0AJC4e+DzL{FvM_$L|womlwIN0kW4b?%S^&js1OTq z&wc=O`Pc$CqOb_LK$i0)fB~ell*t5_LGVF!y%pH}`?KLdvGdM`k_%(OEh;T>N_x9b z(eD(n0ji-l2;8C?p##5NQUJG}te*T|sZZrbaIA&Prge^3nk&} zAc5`OUHqBylgD>n0&=in%B7~S`0lyed4Yg1plKW#(5j;YuRjqs?9n6IV6;}&F#EL` zgEWC5aG1N?1U;W_!9pW<04QYr8qGOrOt)YM;2%$EFdKoDKTmKU-0>OJS09@@ zYh66f>-=`?qWS`ugwpBQ#k2VP`>!kvB8R`5VoE*}uG5 z3?{LOOX_91?M7F|6+Qdp^ zs~^=zU=J1czZ-6Vh_}w&$+W?%2ovtJ z?NZ|nACfxYX}1gB1^=Xjy+7oKA;~Mbap$1NsqS!J5#Z!i5*(^oD{mhEte%O;=;rq7 zmB1+^F*#ZMpg?(nw!wR7xU0wu5b{uaMI5n~re zjiIC{hoyM~0KL-}y)!yD<2To8Q_1W7D~|9R=t!Dub{XV5JHCy^b80Fx~1BvZhkdeDF=wwLKq(7J}rrZtny zgRlG;NhbSe>%l<%QYJllKO6&eTV)$76)MHSyI!Ay^ZAtjV5TfVWv|4}*ZopS4;ynhxk3xhAg&5#ROM1RP{&Lm_ zwY`pdkgAJ5h?VNRaf`)kBdD58AzWD#LtrO?DWOqXy{@#%-F+L_T1=rnuQbmGdeI1> z64jC18fm7Be6M(ejIx_XrqVnz?E;Dq!rBFB zyX#5N*j172?m7R3mtZ#T{l0hLZ|S59U$!Hstgke06VqO276PGCo`-%=CcYPrIasBy ztwgCe3kiQ(U)D5Ci#W2be$XXUzpJZpL~|cq?SL~s0xFV_*M{|(i*b@DX~(J-d@3;< z5V*i44clJrhvkf1{9J+9a2~4&C9WwI6;qh-VxVynQ`mW!^wu?d^y0nrs2ln`IeJV& z*!J+RF!?V6wfCXFQ+`Mt$|hXvZNLIOtItK|jCv|{eda1pN7y^<^s{5;LoclDl4O`1 z?F-X=i)|3NG1&@Qd~OY#X+yTeS%5D(pL+Sd;tksT_$-&TiVhWf!|43JYeAufw9pyp zpAwl;a?<@FI!HZkL})3tn0q6`cj^%iJ)G*+R79F(;s2|O@6G#~u`kyxo9JDU>zzkM zY4%LzOk%}7rE;Yh7adI(|FC!?}`kZ$0ei+)|?fH<<+UAapy!==0a z+a_eEt9wdWM2T-JOG>>-L~Q7qezB`iu9QKO(dK}e;I?2|@TVogO{LF(4 z+7u?)oxB?DrA#qXOm#la*@(L|m_;&&M_`)Zyz^Bh`0JGPR_(N|j<$AOzu*?x{up&?2;6nzuN%0fj50fO5slH8UqlQ`xSY#8CGE-UT}|k$f-x&1kX)GjyvIIfc|l zvswu7(uab*l)r}?d`4@O9$Bl2uC`}bSkZbZ=3WewwMt_^SJe^AJJD;rBQxUj3F5@GNw1xFla+8AVHq7J%nG zM)P9nn^lCGnV?Jod)HrOyISbgRi26ZDt%nkFDE+VN_nlwdeY0k#t zH~#zhpT;xu2P>^w{_XKYq}$wM*yc|*gAcKS^pCM z%cMTA{qTi{@CD}HCiu{FoLwIfc@&Gz)CkPYD}4S;V8deTrWJs=#_)D$Z(AuDtRDri ze)1#l#T2;hHfUB8#3Zt-(P12KWCoLOi9Uf5hLiZBZr*iG@n@8kD%9NY80xQVH>vmO z_{McgUm=Q7bU2V{oLYyuUQeAnPLZ(ELBr>rnI2NDA1gFS-`rq?FbO?UD6nJU*2;2e zBkqmSiMQx2(;`eV*zV^NoEI)~8=WUSzYC`)UfhV!s;#L`zBhV8tm)SHQbd3E>bg}6 z{Q8=%#@8rmkiuHn8A$XkWsp3E9QOPjjrYxkAk0YpN%)4&*yX#xZ|^dM4G+~auCB*? zO|iMK1Kfx9ci0k)BNr^*z`iI}tvKp=ihgfmFISJrY2<78b=#bi7JJ?S#(Owq1?zAo zX}8elcJ@ir&-%)LolzP~i1S?yVh0_QV}dZ7PuoRo2FuA-`?!zl+un zW}GAKHLM+IJT6KT>%px0S$E@(yIc;f*=m?LrK)elgj6PHy>IFFpDKCsK-ZT?8d$X- z2B9q1f{f$(@2vT#%!crd$J&MsF9odn(#^y;>n;Xm^0F`1sMN>hwwvHnno|xbDh|A03+o z(VWwvlVv8(bM*kjE!rZ)j7Xw-{Vw)+RfOoMc>n^k`C);t^;;02e@fe{**vvlh}YM9 zOJ_7MK3WSOWWQ$w?R{Umi5+oH=b3Mz;+TNFeA;g`t=Vyt)D&vGFB_Obo&NziHH_kW zamTw1E#J5y{J#phm}>Bj;&&!4&J-~rQ!J-!pe8!v*C!yRDGA%=`}&yJQkQm_S%B{1 zzMB&Nqy&d1+a5wo>>$R?3S~rIFM0j=_5Ii%(6aan{DT<&|O0+f4)+4cW=hM?iiD6Cdk5`BD!>uSk070|kW!ifRmDxeZ!4NK= z^zk)7Ovv$$g(`f{p$YPK&)U=;4bt(cxI%dlh{>g1ak<1liGLR>K9qsA0!AFi8xl0A z#*n>Y%ht*xAH;o)@ci= z`LXwd_}mQJ266`*ACN@Qd%{`woS&e9L*CjQ(KWSnsZvG!HktwfO9_Y+oGa^kht#@tAbK*^9`G+m5+e>&|Vbp6mgWnSB3^nae!r zKZQ#!(eP<`-17S~-P%bzzzmlGeyvJr^JobK(#0SiYnEk=Ue>-fQ``O7AHSGn3b?i9 z641yJoZTRgfT+gT48W~0!$rLL?DuEI3Z1 zsK*H8G8lIY9Efi#XA2I5`lY(GXrZC3p4r@n$Ci$Rv=L_JGwwmj0#xT6lB}f#B$9yu zyBRfFxE;ePT1@u*y{4|`=u0&JtRFFCG+4U=QpxbKf>bvP_c_lV(Y2bX8d~m&dXJHJ zkJgRU5r*8hH(a>&)^DE5KznPjf!*y2vcsd#O@IX)h4bUgbM)sWa-{5KISTS>B!oB^ zLcW~qaN2os?bUl}^n-*b0wMUjN9UNU+IbvcMn@T%R(jiy(OkY>X)urJFzW8~&n1_jyZ&sqJUL2hKR-c6V#^!9A zdBL<@nP}kRle|$}Qho`^r86QEw8abil|TWZl5d=ol`F48fCT##uZbk)T{=kUeIVYD zT*8BW&#C-b=>_A@`>X$vAlB0_gN^w95N>*Glntk0|6|MEdq|aSjEDx4v4&c)z11w6 z1)^29H@e%}(|%wTV<^s&Ke%7Tf)&=TBVkqVg3cO+PVHsWPP0|te$$sMlT?T?yE5uW zW=!8Wf!U|!Pt%+J?IlNGiaJb!o23y$E+^oxmm+35JjTu8+P$G~Ya|S&w?F-^8lMAd z^6Xh%@1;r1YPWKlIMwxw)cM!A^1StimiunawFCkSaw>neovY)`kI~k6Lg_DtEN$hx zH2cF(M_A>tBjwGT7Tj0LVma^mXxJn@5ry!Ho@?^!jfgl`&=l)PGxe^8oIAOPa@6o$ z^s3huv}Bk6!g{`q5xr-?+4cjmz%lopELe$6L>6i`xIPpXAYO#N3}1RDN{~Q+Kr;Qq zvZqkzI+#os1smQYbU@#+s8?F=RZ^CMV;i`ywf^<7Q{ztog$2)AbHry5FW!FN7!ML{ z&v|JiVCmo&e*QQaHosL@fhgOIsr#AGF~OeCpgoDok{C4eZ>gxCiJLIuq*EFBUL9(- ziyqh*4skfB+Sz%p{r8X!j-qA@Z1*3-HHb!`W9~og%Mwn5`W-ftqTC0EXQ_Sxz z_q?D)5!T{B0R)uiVr7F2WS=BPJY(f#mYDLTE_Y5!p@1*AwCCnogD z3Sipcu1Vsc*df$XVR!Iu9p_9^-A=!pu8U<8C`9PoUo*@k7~w$hG=`ToBLQH0AtG~O zlJyHKM|QAl994@BIiZX~RV*SOdnK&9SRlwir`twnah8`yN z#dh6H<_2m$T9{8Io(ts>aY?~3>R*WX4gf;8OPwRT9&$Gnd-eUZ7zN^Gk%ICP+z`x;J_t|?O(Q_`V6?KAN6 z3j;)cvN|4Ac@)n&k{JVk{#Z_5PxBtuV74z0dB{B~KcQH}?nGwErL0^UmY|nUJHhql zC=y90}VWj{@zj6kQhV^Zm%t+x|fq_jZjz!Rq2_q;qwdzvQ!vb z21Hy;gtgnqF{m<++>>anhX*xs-AO+LejvKaO`uJt(;8apUD(DPQ?$cOJ zG(cP=WK-YgNyU7Q(`UVAi>nn6e6!v;ND>sFg^G{!HbLzkrzzgBJ$zzUA;FmPJOvV+ zU5^jJd!!WGKgAmQifnszaDQnLM=NG$u|I8H3Cz5B78^_$E%32_dw zdEhaIc6BuzhEsh5c~W&a(pq}tsT%xM1Y5+OMfN(Ckfc(Prljxvy7uyjeL-fJZ>6)v z*LAHv3aCfWifl7_pHxn%QevL}EcMD&!lmkb{kvDf0-72*23Pw9@bjI*mOQA*+UHDmmC~A%V#LQVdRvZ{_W; zhNb$Ku6)1cnfms)dH@C2*uP_MwB1wAqS8ENx^UOWM&=*@-ca%lZtW@{p~Ib0dD{fK z-3iOsTexA|d3>&Lz5ZA>>S2(n5?Z>yLndsP04Kjt^o)4xI|dQ24!zRKy|B(r zMRyWdJGpzSZ4ZgJD&&d$6{=tRsRdSRzMaeZ9Ptdoet5!Y@A^~tjr} z^2f>tq?eM8U*fSzac?kjF&+BYD&&tk->KP(RbZT5V(FQ?eCzI*T|PQ-_fPj6QkNRp z3xTz|9HSAYi5R+jkF44JcFBp5CVq_0RDl>mMQIprFACVLF`OGK>h~g+Uh_-h~zm zb9{NRAQBn^BuctzQF{!Nry(@8AB(L7@ip46om%^GtJN-!x*Ba??e=X6>_s7_qq@zR zgZ=A=(z_45mlAlJ+uSGFFHYD5xz>R&Q8z7l=lCb`btMg%+T>+B$|CpbZF_DYD5oh9 ze25OY*-yf_Cc5Rb!?_1K%3agWw#9wj60dWY= zzj_c<4~@yB^wccox!7$%Skl83cHbZ47j;}m!ipnr+D|%M;k-jsc;Op5_D@eUIX`OF zR&fZ93BF9SB^8ys&|l+#|KzqBN@(<*dzX2_RV+>oYVVlDPZT}<<+nsi@yU_-?7Ra^ zZ??ksA25%Ruay##M-G;K>daIgBGAvD?8a{lw96nK+Kt|pb|J;pv<0S;xF5vPUgsXD zM+u-O>t5E_F08n+=kIN}_-ND;G-rKTYi@|sV`;*evgpHx^=0p^N;b@VC_iZhS3X+2 zsc&&4nf+5dmmx@SxAH^-WO5Z%Ucj;C_ArTXa4Yz+QK; zzhzKtcuD-rQH>dWE{{N@jebt(o!S{Lmfv1keJ9RbM889~hNH@C57^&|1*zTG=Vh$M z=Sc$`{o7PV{QMeLE>R$+f$9N0$F(@?o3ATx9AjAy(vUfL*G^L_zp$GfrN3-{psw_LuU80LhZ`?jva`;1@7)D z%XffRF$BEEkoU*>=RCFAT`(wfetQMa4ewASdIYU&Z8H2+i^gBU;a#h=fTc?9x77}W z>%>z~L^tFt83N*26G}??wM5xFYSb-a0`ZJMv=o2A>*Q0B**%3W_i%}!429*4*MLHU zf7jGVhg+Tz{GFKu8DOB#hIj;SzM{YlYa14N8-fPbtaa_WZI8+&Do^U!=VnUEBYt0c zTW`0y#oF5clBmj&s_|u&h<+Xa_;uwQs+xM9N*3#fun$SA#zQtqLYb~y7MY`d3MvIPm~PW;FUy@#QkRK!tNtBg5|weYqi$D+ z8}N(bzm7_(RRmc>U^RI0X{Wmoqx%exSBsyvdSru@M9q6g4q$i%C+g27`l@w7V(pQv zZSjMH$8>T=x&0BJbJ!!n;RK%kWsWon9pE+Ti$ z;SAL^hPjihuEFD13nKeid2p8E4sJQFBJ%mNU%p0nJEdZ}JFcg6m_HQpssB1<1bbUp zV@cv?s?)9-tVj@0+}mu|@6@W;9!kDTPRO_<)n|<}-P(VcJs}?P-c{H#5EuIzd+89A z$CfJ6J;Lpp&iQl*#iU|Z`AJ6u$BX9zu{oGYw3dWR>{U|xUP>xccZTif>>C3Y>|3vV zr^KnTvYk`?Wc_{9Y+0smX_&YCaIzyV|B;)f(bT|Aq1Br06p9^;?2m^&vACU%7)OuW zRt+ARhVB-NGLtc>v(b#56miu}3WxdsdPKpAI0(s~2tBJHpma$=&^P)o@O6>Ppr(r_ zY*#jkQc}&Mtz;l_J`r4}J3+m8h9{V`t4qFdK`n19!7lner6!JiMZomOfEH;HMsgrJ zpG7ZP4gb!Y6nw_2+s+DpwsecmMh`=u!j^FTroVodIjDYrg6|7sLk7P18WGoD{%JJJ z%)*L@Jq1o=_;_Uhi4JOAaPw#G!1bGqrr@iQC&HM1N{RkI{oga=bY@`)ehs7B7U+s2 zPc3(2nw~c^th$FBHe)JdxQj@0!t1TeBakv_D^EilrXo~sQuZ>Xc{|w^U&+2eqazk5VEurRaMF~l_ z+1i3g9Me5l-|Laqd;1fkMHQQMhuKp92Hm)vz#&BQ)hKe z$qfTXrGye@x3XEn2KE&1k~p701L1I*=5{WHxu!CcxgtRKd3oJ3qijG2BeK}zepFB3 zhP9zkM`b-fE;7NGY?sZ;5*@B3r7Q5+k#r!r-eqHF`qg-O5aa`-c(iOjI*ewXj35Tk%h7mLU z+G=$OrSf-iMzD=e9`3UN&8%54PkJr!Gyej0bg8#wJ}P` zLcX@ba@-o#HR^fA6*lzc`qUnGTd*)Ir8DrD-UDB!~ifg{{ z(Uo|ZKe22oN&8h}BkKs6q}hY1hQeo#T&&fOn<^WjGz5B34g5;M?I*j2P%Q{ z3yaf`B1D|P#hVfnY@f~erde0-^Q*Q!yZ5`bEMskCHx1{TDyFD*Q zS-?+D9uJc|4NXUkntvk`-N{8w`^ghD`6fAqExd`|iDJ=Ga?B5to?T;rkk#s@*pkL_ zbmw*7WsRb{=lL_hNbsRo-Q(H& zak=Lym6~+a)DDbDwmG6QE_7z6dN;~V&R)RQf37A0>x?{bVhTz2-(grpvO7*ZWJ2Z> za?e21t>2mM@9y8k zkUG}4gYp=Z0tO=)#z@lE+x1c{sll6Of2_lC5KvO*bMXujpOHQ#znHOKg$eTTpm^$` zZTNJB75lL2-CrMwyY{PpvFmb&4Rdu5l{|+sEUx_IPH+G2*H!edkshY)CO7Te;uw&; z#CML!Ji{lzOGR7@h(HOG$vcZB#WduA#hA88T4>ZHu^(pBy3_2Jxf`%K)==yd*OJW& zFC-nYg@2bsoQ6i-i|XoywSNlHUlB(I*yF-$`c?m!8Ae8=jvlFpf!jdda;3`8fG|OP z_jr02>sF+irIIqc^S-S~rF`E|&Guo~c6g|tm#7R*(yMj!yUjDPpY_CjzBc++749&D zmGqRrfxM%B8<%odp@oHLid}g(cSRumH-4`E0J;@l*Ey>pcr4$PmX_I#T&oRRNvb+2*gQxT6_ai1Z-j=L1_douM_1tMF^1vNMto_2Q&=Tk~r`!ill=D=FiLG& zy5wD5eigC^@LisNyxw0t;I*u* ze|*LN_OoyPzdUcK`UE%<#iI_u?#BG!_>n7x$&?dE2;Y|#O~E-B*pju+>q|gVUo;L* z1aJajFvl8z%wtYC)<_H$|(yCM)uL zCpDP~$?NEZN(YC2)O~EFfaJHq%qA%5u|B*8q(zh|hK`1|D{XU}@H{q-lUJ z>zYu&`79MFaJWur9XM=3cXT43K%s4#06z!tVWz|U4WYtqO7&PBAaRV@tR5@X+1b!L z#hUUj0K~O)4~S55WNrgQ&^d@w#dZbG>)uB6#R1_B>c7*>6z?tm3;1ptC_c<)K)ip| zylIMiUwUK;8O^-MHx4+#j>B));?f>kE|hOsqJjh9O6Dm+yni20L@BRXyPb{gdvn=yaE$^2Lzc$OHA-}P$kW31E`1wJaEHBS9 zmKsVy%j=r>au1*W=uPqm7|Za8yLxGdau z4_3!D=FQQjkO1$GdT>-jQ_IW7I?+${i;0%f{T#ZcN=1sr6%r&u5P8n zuNe^fth)jne$RF9arLWr;eGNH5#L65zm=MYz_Fad7vSg^g6!ONj}lkPSybt_bkdpl z1X^_Gfvzr{@d48d@z&kp`#sPt0VR874507IR8yx$rQ`ZrfKsM=Sbt52NhZ;Q*V4_QngVqZNx>OHqSH;rCL2{`M9 ztPR7T0SvnT>MO&-h=?3&dzL9CjVA99Ky?{&AAF?Yv&KMx`7QzLrkOQedA_KN4L$a5 zCF%%NljilO3MoAb05zDFfoQX&7T(xGOTCoqqkcr3oq@7$n8G2y>UThU)eXkvpj0&U zgzBTKIyL|s$oWf04X&}6+d)t95U0D3=c~@x)3x-!aCkuHkyv<0<)97^@ID2<%tO!R z|Klm)g1FP&m=-bZo^otBZjA`!MR|Ug1KohGiy&Dy)yyMr%} z2qXkhRvFYp(GdzcI#SPA4v{ zNNQaWqdA*s2TKk}uX=6X8fOHCtL3R!>RdE(O^fi6la|PCw1}yROh%m5FTqTZf2oJA zt0(^Cza*b6OHI0+aPWQCu_i?NyvoMg_Xf#e z3YlK{m(#;t*U`Ef*m?ft5Pi8;acW37yw9hkQFOfWvGHkim+dC^y9sHd3xt`d5Jk1C zo4FjWC{a|f%5;YB?kfA`Z0H$%@6;uUXA;rkAGmCITW-|lB=v*UFGN9>e#~SKy04+% zX5DzbSgt_R7x9LExZn#v6-0ZXMJm4Rw*itOJ@8bUH?{Ct9re4gJ=%YWU$P~;wN~x& z2Oj+Bg3yPG2QNj?#q90_1#1!pqQDod1rLnRQe6 zIP2%z4O~-hvlCkQ1EMRVcw%bu51+b&(t0GN!9GS?)kR2CPSX8^r&d99D%G+lp!-U6 z5dYL+lUyS0`&s6+VL@MxN#zo@kQ0k_?y7A1zIvP9(P$ zeG7n8hH$|@eKXLhIQr+lG~9nJF#R@%Oni-hbUGg{YyL3p_`$eOJonMBk6fc6^Dbv8 zb*v{3v`C-Y$E&+v^BFNzA1SQyN%8rrPhuWAIY(O~gwWphSK6}wWz4I-V+l+lt|>3b zFqYe9*Njyn&Go3;s6k6<-TX$kC9lm!t9oMo3cjKRXvHQnoJ(I?j*+affVC#55Q-Fro zM9;fe?S9K_Oi^i$fUKXA&8Pw&<6Nq1PIa+X@WNb5-_YXnTfK(y=dC4u43h|Qc%L$B z)X{r8E@UJBI&EG`hOUJd+Mku2bZCx80#Gr3>c9WTOFT(@Y6yTa4iEF-@88*$PfHGh zcYX&N{9_ZAbLZ}F)PDD!zJ;PPM=8HgdHDa8cLM+Me|K^wIjE;;^PA&uba(#cS*s?{ zunYSdqRHMEEaiwPJ^*1gm*&Gbesi6w+dxwD&hg%RkJoAq6oARzDGsi-PS8;-8V3%uQcnKk>kPN3JVBkfpUt2bA-+_d z`C-Ls(_vAxiX$yfxUahU&hXZcEs&^r1)GkIxinI|4gui{AMWsf7?ppe;`o$f1ZG(^ zF>|>hINBkfw#>6hJp&Amsf0BxrRT8i7SOM^w{tz943*WzDL|G~WlI@1L0G|m$&Bt? zr`9J`hD-pr30?2RtHe_mKq`V$EwI>)Fiim26^F6Xd!&RX&+pn}NsI4F4@!J9bbG)l z2tee(wofR%KT7m0^T(-X4V!~f9V_tAJjAcX1@M$_O4*Fi`#uLMQ$v<++A!yo{_CU!5nllW*MHKMG!oC$52Q(-Rtwr z2a2tr+CHr%n^6$Uk>ehVY}#Y5RB+6zb|6LZX4W(g^I<+O>R^E_v5ZT4C>%rgkQf3p zu~ENk;D^-}_Lq8TPd(s|l8mGtQLN8ltN?+-&~pd~CctJrZaZnmV^X%^@Z)OU=MF=( z9{_y%C68C~C+>zFeFx?`kzp6A4pctlqc{EyB)oTNRcQcld+EJo=uF*C!o1e6fA%lY zKJ73$u7VD;-D`K=De=V$9yya}j`_hq%)#!N4dKiZ;>CL*$f1-UKm6EUr}xw3PQxi` zkdta{pQ)Tg(#3i?^UVvTna^1q_kL!-$~RQU84$byA{ic?OdeE_jNu5uVd4eVQaIRy~ElSE;6ibCm#b1;o{qvW%LPh_oh;q&a})UBvLrBq+# zaPXh+iDJz;6-&T)FQ#4I zI8s#fs4MvY(%kpIo{!HNa==NN9Jw!Pv8;bc=`hum1bP9kT)Ra}; zkWyAw!nq{-=uYA(abe4^^DuZ;ZI3}ZNiGD18vpvMRb?>!P7}=dhq88lvE!*nL<>Zv z_^TJLVi|cCB_(>yC#Eu+SSEWIX+iYL!$Bc0k~65c!ZN#xv-_TyzK#-ln12z6ZET1I z=Kw3$n%Lv2SEKv~(=Scbl~NBp613lJA^~|K9qO{%8p3p^b)qG=zzCqx zP`-{rZ=MTJBtq1tQ=1y^*f&faGQsw{-jx~Q+Ly+APWp_OoNO(su=TAmLM}jX78DYt z&Bg=Di$8Qg4B>&)=Wl=Z4qk< zw{#=!BM1<_gF8Be;V4KKLj}M+jlbQ=Ic8G?^S_U|`$u8@lI{LrWmB=yarMwg749Q? z5}{oUX7VwTdN0=467)iqd20)zupcN?4m^8ssKuaQtp-)t_V%;3k_4e9C$e6s+b*kD z&IvXotkrDaXQa;r86LyD zut6K$+AW2oLqs#qeAraU3%N+QL%gKFPHfko8kjbBzoTEW%1}8mVi%LuZjscU(<|Yp zbfav-|9}UTvn-mQlXkS=OIABC2^j5gMPGA-bO56>+nH!+c_jPupLo;M+sCK&9|Hvy zoc%NmE|1918PdJ?VN@a8tcL3ekmd8q^2z_6pA{U}OvqEoSN}%z#V*J@=&T0v;6%{W`C%&c2-ckHD1GsLm{_8on7(GQiM6%p`U7Yi3{VP zo0CU)WjNjrwde$Gh`vCxQe5%(D?s(c#JQLtyS!?DwYhd z9La=jtEFH$5kRAxquzfHo9zNqO&wp#u8fDHK>oa3)4AI-JFc2wp1!mzBiCm?|8V8J`qi^pFi#va$KlAM~^2R;bD`ibbIo-{@PFu7cKwH_J{0kbx2Kc9aJ9VKj2?$DJNXo;)5PYO6j`@oV3?#0RXWBiC4?#5cfVCTJ#OW z_V4?r=kJ`%u%zc1|C0%J5ny|vX+{S|AZZPun7yzhCOzka1BBr0Ws75hAg{Hw0}_h) zg<5>wn+ne!Kd#PQ7o|k1hnbc%V?hxBY(anQ%P|M&8MeplA5D!8=>KK|F3f-McHhwF z3ttt1=G_MnujS=H&8~m*)@1M&hneJv`F*QOnpvVN*OQvL&fdRV%Xx~;{5F`TesOyb zv@=CooT#zi_SnY{%W6m79RrVr#kFoFKLu$xC|ede9P%&ksTlQgPDJ|R)>Ir0EHVs^ zzW>ODt5=Ml&2gwiw#9^fky&WlZ(}Nuln21e`q!2|ER~m{Wc#I7Uea9>&7dW9WmWB` zhe1EU$%$hlc*XXyklh67>Z4^a4tdUD1K)9Uk``-D9B1ioi|I-v>Qj5q&M2ktvQs7YjL64w&21!M`E+B8}5N2LZaD2U{WAV;w&68&U8b*Vo!G!YaqR zNtB^lUk94l8}l6DG7W%VeuSZd`AnSVY#J-Oo1L%~IA^7B~eKXK#(gLEP@601yQ9aKsKTgYko;5&hzVgZ3b!^iiRN})UPi9_};=2{=M)vFOaNh1j!wX>Ehu@&q{AlC1gJ9?jwgOPP!K9T2d+eE zKc>VfwB7W_O%F2xA+5m+Dv!V-GBPQl!6_^wt8ZP|bPt(T!<86@WxcN@a-6u=%@dcF zhdFgKZs4?}bgk2so6q_{-hBU%N+KIL#jr8Fu{E@n|LBKnw=S+`oey?Sk)#6fLpKk-T5OV&`FFySjnU(lvw4?>f*G4wIo%as=3sEIM&Z zm;-zJBbItpfyUwvNQ)@Xd+?#{t+M5ulIddf_uoB<(dJz`*xdl|;ikjDdTa;pi!;ZX zUcPp%=0vFTzt=SatES(Be$k@odow6-(GPPxCbta@g!AvLrQ|T4`6lfy`jtRLlcRnt zf|9Hpw)K%$@Go3UKQM^j2~}dssp>sSvG5=ASm7JN^>AVB9Mh$vi?I;Dc>4S2^xinI z`G~yE@g#0%o7lC*Bv|WP<&SwU;MX24IBPh;IE&Sij!RV2sce;?^XIg+rb@QYpHgzZ zgIgVvuvF5pan3XQp}@x`E8`vsYl$Dul++jQe--m(vM?l2)!&0XRItmleidr10)ZU2WP7<^(kPsnvuoH)jjrfq$zQO60CIZ~WWd`3c0G9bnJof~y#v-B zmuEThck`?^yJ}A)VP-tvtK zR=H5xWIpF&A+cW)7fJo-1&)8TvJ$K!E@{O!*+ja89<%=9PR=X)papUC6{E8YU- zCvuFv!!3>`c>QkO26lZd)$bcY)`RMr8$ejdphL5n* zV$CR3dZ8!9neK+jjRls_+d|i*DRM4DN==KBhjoV6JpvZ2H^mpN7As#qc%F4V*(ta- z&iQfvsQg0K>#8Oqz%sOo0~yY={E+!udW&J?h3G8BTcu7ef8KU=z}A`$IA}A*bG8m_ zE9=V$gwh@Ty+LTc_~cMZUkdP8PDf!rOFZIF%A;`(Tg&a8T0BXi?K-Lp@t>pSfL!kY zP|yJ3$EUv23&?`!));23K_`@ov>We&N(8)^8dAP*!%IT7fQto zitt@A3klk||FSh7Gg{&hSABSJhM6-%08^{wF=wl%q))4yB8D>is8Z)CNcuR?l%6 zegBUj;rc3Ip4ektf`@>1LCj6}^15?JsEGNaJLx9N8U=wZ8*Uw!Vx&}Xw~r?sQ^|nZ)h*tag^)CgcgJbG+a~cz6GV5mqy(bas)<9ah0;u-{5NXZAW~<37YwAB63bu?L3rK-^{UJQl+rZG{yoYkrZuc7UuUoBT zp6Zs7QA$z!5y&D1y25MV?hLVaMeZu=3~J4UfUh`1Go=chS3#WY(#!9HtKiG(b&1}j zEmcb6aR-OVZ01VcHtA4xF0@8LuKF{uz+ANap+9!asvuGpnb*b*SsH(=$6Z#gx8)HM z0VN$`e($!|U4f63ucgR4ScM9%sj+ftvQjk@D@hL8EWDu$2r1^DLC(S6hp};_t@jFN)<)|}R_oSAAk=#g z+dCxNt(iVoLwhTP#3!A@$%xf{RwDg;z5u**W&3rE`N(6+=@BCFQq13LwH4Aq+78XG z!Rh9C-e0R#yfaeUB>HGQQq>ZZ*a;qrwfr&7>DT&wCgU}_@*}eu72>XqJ(KgL!*)UW z(-jfu7n@Qn$aWet7sk?z&t0pE^Q3OyV^mjtQ3m zp9sw}UmM&;8R+3x931SqpM8lp+xRja+xmbQMu|lvs#NnoZtvk87&+wvrQ<3juy!OS zAMasNrt6HFjXG5ntCXy^x6|h!OAW{0lbLnc!-n?OA$h`G0;=ne)J|<94RCK}O}#?` zG1>%)^CeHdc}Ay`d>hD7ND@=S!@cTK-eeV4JjM5wAvbfO3;L)r8Sfg*fNbk80U#TymSrGCD7D12O&d78@4%4};$^6Nwsov@Yfks)bt)GGFb zr&POnD=e9HYy~JVx43=htJetJbCHQkqSJ4dTR)^j^2(G5{HIi#`FX4P*U6Ej!55kE6oKXHaVx2;nU>W4wR76I8HZ z;EiNPT3p4O@tCgB9-~>m4FAu>F<#RU#S8`N2zqZ7TbJe@kY6#f38iuNJvnA3pyy&Z z_&lmO+RWDMj+v2}$-qV7sn%N=l)r0YlpG+>kr{d@G*7a6sH*FpNfOxs$NsydtT!5e zuLPH}LS?K*7L$(Io2`2BKi4q` z8H$@itU^UC)=Y%rmGWdls?4WapX7qan^#_ISOp9bWfN|u5$w}H+J)8-CtCUpqTfiu zYZMqCcL-TEU8lr<2FByFcqmHogbG-mxji zP*d$uTJPw`K|7rje_3J(^+AN7vFVk{Rlb6)6krjatPCVduw15ur_RpVQ&)v%5uQb6 z&KpGrC0Kf0j1YO&m`W5M;Q~{=&Z~JSJ0`h*bgrku%F$>Lb1!cwTZ%X#ptqFRCf&|s z`gzwHNW&tM(q)-?8ePQ2u0mu~f)d|pv332i z#J~a?VF?$W0;xhJ+v(z@Oji9KGR~L!(pm!@LZaiD`7}W;7c9N%Rq+JWzfQ*wq%!NQ ztHjo|ReK*3k}Vx$N|DQyRu}wpS3-1pl_pa#(Nlt!LCkrYV>U#5y{%5BW}^SR+}u>6 zi^}?pyfZ1rs$o@TPy@GP{mpZK{z%JD@_j=3$)iWoyv~Ur|Q(6nQQ#@@SjDdhJ&-MdR|C} z3Lk1*RB*`(Ipo}9tqmKowF~;zoY36To?GKY8i!5k9Z9xkx~L2>ddgkDV=o0eWaHd^ z8_IvWf0A^hUQaT+8E0lf!=wwtqN{0!3%O2BAGD%$M+QW?a@j$scV*jF!14rM3H z(S64Pg$lsKoWhv;3^lJ2wl4Lh(wTtRGNTzz7cox@j}T$oC>8KW$JOeIjNRVkUzlFvyO327hl)Lyz`pgmLhqJUe(X8f%5 z?BPXoo%^0W9bu{5VS&nAo&VY&R<65jaZ`owh|_@~Ony{O(l3h%=7r0GgdF$Dr6Fopf|^-q1xztUb0VNXSLb)A!z zss% z0G)d&fom1$pUEd2yq-N!R4_P_1?%u3_5_1?_IppxDgLZJ5>IJ_)M*w1CRFqg`2`nX z%g4{|%<>;1zi)XIlRS&A(LVE+$MyTISTxw4?YSfY+bD85)^0D^-`&H4}U4=*m9NUD6Db_B@ru7`LYvHyxVC3eWf z%TqD70E_`R?SS`;jPjm0v1+62Yu;jFPC0-Sr?81~o{EDM9);%DaWwV=0cDEHqRG zNDiLFYKJTnNTt{)H{_($3L=yD+da<~Vg}s*-fdEawd`P_c}r!L6>hn@?Vrk!t@>Bc zsjmjnPG=o+Reju;Ycq*I5^DL~QYmsLu#qa84_hJvO#J0gandAz9)6>EydW+O!9 zpou>ZwY3XVtIBEwTg=@;1`&j$nf`I;DRi0>s6@ukS9dKxenfqboU2teOKh}hM@v^j znvc{Li40bTMb!EQ?A$CzKl)4s!Hkk?&(~&N?wlBxjGyW@n2xHW@hY0Z3`|raR%=#Z z2W>~GcFg6wCu!UiE1lo?@@6`b_FvGqR$^nK!?<{o9JOkv&2TEtTuH6v=Y9Kb4#hol zDMlZk-%MVgQETu~AHUSxXg=bH8x`n>Vo!%-68t?T^n@(%;KK2@)A3r|u~Kcs-L(JGDer?SV-i%0Ni@bjR%g zEWA~N&7WVByX(;*vQ$Bb+vBj?DRZ>jP9l#n4z&`CHJX;0%p) zbApR~)4X*!vAf^C4;k1nk`gDLo>F zCrQ zm>W}%Pq<}TuGs}N#yJFkGdCaM9gu`pi6kfISQ4I$C~b?LjPAQua^tHDE!Z2;h1NMiTdLTkScL4v`3bG{LcC01^9^yPM)Lf;r$^#? zjG}KX~l4)QJ^PLeP0v ziY4n}w1(oRWqaqdiB{WU)u#rCU(ifNs!t0E;r63DdB=Oow2Oo+>4%CEzIT^o;}F?j z?BC!VM6S|UyQNOan<`NZy80Q&WGpPWL0F>sMFm`Tv@jG!J+3nQY1~U~)5N3N-kr4c z5UTE~Eha~mylKX^%*KUD5YQ&5D13#oHZUSx)DL(aqy1(w=+eiRB0FLQs+3rTjR`?C z+!%E`Bn6M(_2lCFj!Gg2PDd%(jSslpQFRT?FOxh2?pAlM(w^`|`zA>v@8(D66qphh z6+;x$kHTSn$yVA`nXmo)Z}hIDDdC&H70Dl@U|!MG=?$j1@Dm+vuTj1J>=-PW<(0H7 z+(PVr4C$9ge@aygMK(v545fS~;$ssayvb1^_R&c@P#mtHaCOzKv|me22C^~1I^)LI z(SqDUV;W65Z(e`C#ri$ixoI6$QCNEGdk_BzaNhO~D-AHjLnWd(fq?okGz6JpYTAoM zd0S8X*NGpKrU|{N37LzT8NYFl`nOv;vV&24lvYpFrLL+D-9(>TO`9b73Hwl~vdrUC zR#&KHz4JxPBuYfp={DYBnYJ-ClkEZm%USDq`+EU5xt{Xg-zVL<>>WI7z8n|drWBhP zK`V9kzK32IR5oEBCs(5}I1^fwWNTeOhJKVH@Tw z(Q|V{yS>hIZ=863Lo?QU&_4CY@i|w)D61aA`xDd?vU1HkJ6`-ng}c&9zTiIgH}m#s zpk=bld~kI7B5UdfcWoKl z(Ohg>Q#^wl=ZCATsw7T_VOFamc0JOvH0*{q)701z2Z zoi*PvL2lD5f#&VynPt`}^f`5RBaKui4LwI)Pj!D<-Ur}9*SqUTeuu7=M%#9D<(IzK zxnVCTDMuT2+_+9udw3)f_9xK1VCi~SNUi(Bf6?TaA;}gZex~ddS?Mz5hpD_Q+oTtq%^7+S5*;C zAE*=Q7$+Ox2=?|AA+?x~py{q%lGP)1Mh#Vm{R$?Ky%9=UXa*YX&oaPg7Mx$_ z?XPNXyaX8tW_cE0s{Q^dv~uqIRABj{{HvPbH_g|`I5rBOp@u23mg}<>~Q>q-U$l6N1m7$z?+`4HQLAPmNPErhV z3}NssFCz|@VH)x82Qv8WMNP7s{u)Ge#{7ugj1|Z zL~6l|1}_GC#({k&oG{gVrYd&F=8jH&bSe2sa6uXX-tOQ)Zrjl1 z4h4g@{@b=8gXeH}l)k!)#qF)yK*y#V7Dn1t3Nyx4cLN&rByTs;u9ZYba<7C+-p=>? zgi*;D39l$Z5u0LS_+ELOh4}VUeW~G;L34>G@}eXXSyoim4~j=AeRkb@*>*K_YD>|9 z@U~pa#+*)TP=;ef)+w9)YZx~2j@y~VYD^^wxbk@bV*dQ;^eLZs1=f`#4Uxwji`mca zxqe!66&|+6DqVZ7gn%~gvj~cO*A{ikJYrvR%qMX^wu%Xx!RCKADtXLI&upaKh&#E9 zCG7|+M^U9I-9KDV#j#SaRHCY4QWr0^U7dNu5}~P6qS)Q6^8}675HK{+e}e3$Q-1k1 z|F*CB=cZIfy8d$nm!J`m*IHMB;!E(PB1@2o$|pQW7ljHwIP3v7Z~PZs2ZcR{t#7So2%Uqsarh9aZs}n*%tVlzC>-m&ghEY|# z3p>WXd3r?}!~%P){z3&}q77`z1$bL#4L8gUw%62Io}C!G9wtpRXPr zNI4b$NziZD8w4APiVn=&W~O8HP>}nUoaWYfyn@lp4i!ey8Sg@V^9qL7aWmmLdB5AqdkU= zFl5`An$B%0kckLWxLs5H4aOq}X}eJ}N#6XFZ+3R519&$_a4&{c_KYGu3_|2=zlBDX z^n)3?*lHgkFIojLk}8MP96KA-{QeeX zlJXy3SfT(e3W`c=x+ciWZ(F5+-Bfus6W(?e$0pto@O&sUBA49t<1|Y4poHTHPW~qN zKG3h5<&pT~5O@hT9|5m_JG?2}|ErhabN_#lT;)FIIBkDhZWV$1M*rBpBn==TDs@6r z3Z8)V<)G&4T#beLys4=FXs`TiMG@1~-%XdlI3n{SV;{X>XFCzpzfbCG)^cQ5)=+a4 zvPPo?JR2#oOlfHf#6=PKTyjM0wRi4pD_Q-x(xsNjHG)(zu(+vkh|JXYZti5{D&DAV zqC8_=0_FWeTB8Nf1&~_4?$=Mx*=IN0G{w7f(ha#Gz3Td! z5Pge2I8an*?W6qdT`qzFMu>;}2Rzh|Cp`qnZRal_Q0Cp&a?FGb2i6M71Tss+kP9W! zh)oZ?Kk&F&m*}yZrexcvba;SQLc87*D@_^F*K|FSRoB2Ne_4x>=wy5&Tw~aovwr_@ zO>5I&xTVGLI0mLF!AT~2sDU*e-|0;{uw{}Ury-??Alr`o2M&(5#$A4K zQzh;XTZnC29swpEgmTHBey%QFZ*LlpN=; zqBn)Hpp4mx$2KPx4)Z-zZ;V9Uf6~cEKxu|~K2(L>sX zbxXyBsq`3eGYjjLoErl_NtJ59!+lz2`U?oULCmY`yaw{FW4m47Hjc$A34SaVIEN+k&TZStKP-yKSqQtTxjQ6^Y4m z^44xrB?}gtHH0ZjFc?Wo?)E5gE-d zE~nm85k2oa`!b?Rs3=abc|HyqL^V3Q$uk@|H8D~*CUs(cL$@8?n${8I(fS}iM~jq= z42DnVV`>9$I}UK2*gol2N@I0cbuA~i%ki-VW*s*qSSO|mcM92c3ImU~McD!c^`8FG z{@tA{W%8K20VKxWZsyHS_fDMKK9KKmEMur3YZ9Vi!awGv#yxy9L!{nD(N|n9g9#^; z=umUtus(ZAoqFduuHU35MwFsbJ`Sc@rk+XR452YN?wr}-gI**z5z`k zWsXPgEu5LP2B!o|#qd|*u@GqaxZ)mxX_sdjZ4!_V4@Z*qOl9*4dG2yV&6^O@)x=PW zjtyzEw~~lmgPJnL956$W$)c@^DRwuKn|TgC-r7ZGg)l=}16x&OVzMH3OJeIJ_G)@J z>$Z|m|v)kIOmLI3+y^6Uu+fZ3my;Y0KcQ;q*IaU}VAN|F?{lT}Q`re&7 z+BaM1!2 zP7XPz%%M`2J+`)t_K>2?z@WxZK-XuxKzUG`ZW4`tc>=uacA=o<89$F(DTOWdyj@&q zsLch%zqFp)o_lGp&Z`jasPtaAoZ~0t7Rk7Qp<7*`1Fr+ES-02m!*QrUf{=j;%@YlJ zbpFj7Oo!7@<3IE@BMYE!P5PV#uHDn8R9n=V(1aM$)R z5-hSp%EJSmBU6vvk#HYe*_j$sHgQ98ZCJA9DRTdr2I)>ND!0DOMPRHN@k;s8`trV$ zFJnqOTs4u3$)KLiw{kMayLBQU4GCpd*a2c(!B*ExB&Nx4B)m6Re7)3Nsb$j+ijjXl z9)&uc9!g$M+F=w=$fNz2vB6@DiA@RDD)qfa_&YyZab|0Q?peX@#Q3)2Y10i&)=5j! zWT={Jra_JGWSLXkn(G}?|D>id+Y6n zMR#oUDv}z$*)1MS`8X8!;sjODLDRg8l*@v)gOkn-wMCEB8=25`3Sc#n1CHj|4Z5Mh1(HX!cgbLQBt;DZ{ zWOGL)uNZGg#6}KBVvjqV5tPz3Km_0+U|;0UR)=nvVn2swYEQl-E~bZMOvPkAUqCxsY+80mTFHvT-z?s4csDr`Djk+{_O5o?Zc2o<#M3web0njk|BPmY1QIpylC#I?1p%%_ajE@0_%cU5|7eU!urA`_A?^bY6<5c1% zUyNH#VzQav*YV|>W(FA{kQ1_cNJVeQRG|`@%lb8#C%7`>iY6hg(2j-t9Se9P@0AdD z@Vjs7!%?Jny<;m-Qs7W5E0a#eFlevlqaxhy1|*-_Uakr$CgrZZo15aBa-q9U-s-24 zmygVp_CHypY&y;)K_*8m#8?tN#5%d2Q|k@^Hlvt9Mj>1MDs?B&Q3S$;o0}@2sq|wu zpfB1l%z7kYL_LsVo`d~d)pOX>M7Sp`BJjqGvmnQ0d7n^KS7CEF?S9ISzb99UQ!v<2 zi&_Cxr+UGdEisYF!0QpMS?FF*gP$ZuldX(Qt zh2$BD>6e&MB}wL!bgT;gX!V?%oIoPdzpFj(B3MvK!4RbAp;DlH2~2H2S9)q{6n%$2 zO7&KYt7$Tgeoop(Cu7pbjF}|@Q=>+Qq6dw?V{3vW9Vv~GB<}{Y0~SksoXrYhJwWXc zR=Y9EKQiT#=`%w_CoLi=CBm&}#eccF>J|1>3WR1Tf3r%-HZ-k2yv>}J7D`Yl&xs~c ziISMF9xI?lmgPP=UIl+yP4JOhwSv5#+Qf4D2=goN3=w}stV83oXq__ zM*1?LvkhZcEdInlndO}Y8)T;)1|acixx9_slZ<1i&XKtWj1V4ar&@}&y zy?JEjTRY{|PZ`2ys#ymX@uAt9sKe97E>MdDDZQUDZt|>;t}yG(n*BYVAa(`>VuhyN z-%zit>s`764F2k)=9^&x)(Xm#<;{Hb=r< zTqa)gT*ZOSHJ008H|UKEveLIgiBY8`?&XIr9hljQ4!*&aCIi0Uxj!$=T7gGU7JGJw zdWc+7sH9Ih2{;;k98esV1C5x}IcbC-kd1-X8Vq##k~o6-Kg1l*q4bCU^s&!wn%53K zlz%}vPx{vpBIb3O3zwYZ4Lpj;u{PcsPvo^V>Z&_~YNf4p_*wf@2iBIPw)v&e#!l(k zju)-~5(MY29@QK{+|YGB@=^&g)kW9$8$KotOHreaV zW25CbtK~#v_AdZSq2?LHCBu3+!+lZpl5ItY1)1js6XZ<(?*POsoGa*hT$(C zV^&i%g~vp?@m0MaoK3snXd=k3x3^qPY$F}YP@0V+vlvOL@G@t4J0D}OV5fiB_ZeBxqz*mGDZ zQr=GMvk+?0I|E}u$|YT-J9#us`WSPe*Bz*}*W>{zwi2exG1S}tY46*1gR#KguBgMM z{2k|r$;rNhAt_R4PP@(c26L}Zj1JFf=njc&+2T4)9VKemzR?pb<%z=8xe=RqKLG^fUd$U3 z?cTDYts+W}Q?YhjtcbN7fykY5ySF=jwsWVZo~6UCb|+G|l5&YNaZ33sl(Q%|y^-1n z@6K$CR57WHG@Cb}wzgdz!x5{)Xowy4=Tf@DBz%UlgB(0|`5*{vqAl-UKC!+W{FU+? zeUWw_ZDErh`0w$mOxiy!$1L(nu*3c1AZ1;o9*;WjxciUQr=7F(r+iBuFrKSe-&b+0 zf8BiSse($V{$sEF@k6%OH$b;8JYvSkTW`s)1eZOAuzaVE2L*)(tgfo$35wjdf?_RN zVkP>eQ5{wM>AWm_<5&v$$r%<*o*0kk{WQMe_Ik!633-?)37KMeQAwrd;Gg7b!7AKK zryo1w#`B)+2D+hL;Xo)wx`WOnuyX~huQHl+TNbw&9&+uLty}NzWLnFrA+t-eH`S}B zB5AMWc{#~*tyz+yHYQxcxmq9&Ij?4a`+ht8sDbsi8Erw&2e+f|KsVt!RVxn1P7p&< z79B#>;HJg*tf>W{8@5Kfds}v{<85!C{hsStH=OHx%kfR(QFyt*Y-q_u&)l^xFx*qF zp6)Y^O;A!00o{(GcCx%yIdX%NK<_?J8X|21`E{7I^NUE(OgrCfvK@=O7%5o_xaBCr z=pg)=DFN>#Ykt9C9G;!P?&(L~ba#taF~MT{$nExqkY3y9$eHck3^vpsNj-M?fc}CI z+QO1V>hbi7GDah zL@)na*6b-Rxvm*y`BuOf;(MYy00j@SEjJKcvBIe0#66W*gYAWFdP@}ve%gxfB(^1N zCfgmN$B7lb?l8de^iFM~#_Zb}s&CpSSU<2xS%{_ZQr${ie}4kq5|z9gpKR`_wk|Wv zToXoN$(2M5-ff%p&B!8Ur>9*^JVRTow4y(~Nu$Wsi7AW20s&I{^`KePWrPv3NI>oB zp=YW&S=YMIvdwN#n!SJSz_APkvDI^T>2J{Y^GmRyzq*dyzC!=;(SW{u*KKS6>l53l zDmQg!cpas6Jo{O)1lXadFp6UGdK$ZMRl03p`-1EHa++L!e-=-vA6Bpct%ehq2pu1< zVS5Yt|4dp=?Hm^_pyBV#UKNC&*rr)xDc+|WtTJB=Z^Aqu-WLK2Pnk2Q=U1#X^`xo; zWkQp%IVEM11fj^WkggDUyS3_}o9^~ll=_=lc&0T>X=L5)yQT1Yfp>OL&BVA2{Vy=- zc*bJiX0%TAA+_`MgoOMN_r~92L#QHmlE&-8l9;}eQ~DB_*s4IML3 z>g)*cD|ELWBX8}Ilj*#Iyr^{^-|odWjnhCW<^h0|Lbq?&B86nVXxcg&nKt<( z=PKxT&KK=Md%qK5h9;|tBB4EU^nx;+t>PJ}xN#J~+7X4!Q*%je9V1eHQtK2lRp;It zM0O#1pUFAt{Y3GF$aZAWVC>1i5=1UwoWI7u7^Z7CCHpqCwC{ggsY8j^JwM5Qysk1b zJQsL8p{b{1Y~@#H3_~D#luZv4hN(LijOCbK zJo7HJwwIqe8p!gu3T|odn>EdROgO`?CXgV)s7(<+WA-iGrMhuhZW9-1qm%f$H8!&9 z*Q(Eyb@=iV2p;8U8iYDfF#bQvJM(a;_y6zfwc3c?9>9+S;{*P%vo zb*C9*Z(Q%lu#%#&)ySt?&}J%n5vzx?`XwhNF!S=zX(yYwAdk_xw55#dh;D*k3z9Md zvH0iyu3RSe-kSE@jIfVG#twXnd+9ov&ieQyz`Toc-O(Jt3cK9w*EC3Sq_9j2N&gDw z`C|+dbQdpvqwe!$dlqxJaI4fQ8=kU;=bbAN!k9xLZlBhj2{cn^65PRJ@byn%7DROE z=9iEQna!tN1WspX3U?HxZ2ltu06YbezT=URr?r8B^KXQk-qBRNMz#Rpckk9Z=$;{Y zbK_y2;QjG7Czz~9!;jgE^B49Ad^UcVnG+5seQrY4?2@j?o~jL3+!ga9&_>|?)gO~V z|0R*eQ|j&VWtMdBaQF>=f>7Rk3Er+Uh55fXfi13QJ}ScQ;yiqquw8pA-@vkOKQCuc zXAt$Tr7J$k6TNz3`0iy{iF)4KX}U5lhy%zS&&dIoY2vrx1CJPATXdxmfdYdMDpXuf zos}7P{`PPHaxf=9$9XKYmuZ-;fgNnXnav&TLRc8%c&l$0pLq~AhB(`@Z7L zLL~%gzutaqWO+jV@q;|D-x4q2F7@^2Q;|vCfqls-^zrKD3^0eL4789IIOqAF-3`b~ z+SS4CExpStvbiP{I6u^~nm%#9S%rOy%DY-#w48hk`R%5M+jzs*ZuahH#byTy?y|=#1;iu^N5;@lLb~s#zD#?cX&>%HS(16b7j7QvR&{zymrrN&6>%fPN$DgDsTxKd&Lw@+b8He?wl<6KO`I~;`NeRjWf$6&UOx@bXxG9Z zz2oyGL2ChJ7q71*wlbg=y#ATez6-g`vjrlR&8B!PO3$UHAWy* zUO43Xb;uogKmWv`RC+Se%f7{wp(2ZcTjP2Kc`_`cO9e zsSM+Iwq`5K3eBRk)x4jHnh+7G7DT!gnE!@#Fh8Tn3*1e2nww&8^R0j)x>NUU{O6f+ z8Q5I5n}=SgYo)JukBVomEUstrWyEIDTbW4Z`ON~R)+{A7UW4>O2vmdSeJ^5*46Erf ze&#o_Ul+K$dQ2Vg_LxpwqVGkIUY+L01{r2U5f50*N4x~&OS9mEl0UPHq%GkQ>l;nd?cxd7T?Q) zs8JhmR(LwMXz0vba{@xu;k@f8Im{K#7s--ROO)30J;8xbyFszaFC21ASFuvHKNmjO zQA|8?>Wd+9-UJc^wY)^pgB53beo2%CJ-uc=NsQ9BIv zB$`v_M2aK08#birX|Jx?N373tnpSc8>8@*b?s^%s7mT`u4^fyNaA~vlV^q>g-z*YFfFhXHfUNF($%$;epp{p(Bp4e=bZRUsVbt*wsKcp zU|q;H&h8l41^2Gtyoy(r;e>$0wj(HS3Xr*NsSPR=qTlpQweH}lQk@G>sZ%Cwxf?+5#H+E@y2)n~ycG^OL|AXD<4gno zES!1#gbq#XCG~gmR%vN--S#k}Sa6gLRwj4C#j+(G-dy{PXfo(wG0|k+%9i7uXW<2B zj7@3|%1}?rP>M4FlTOL?pTk^qo%QqdJ6s$Qvie@0ZCzHFsnDO45Ao^pd;Ae(?p4Rm zhB%qy<=@(ceh)239gMqj! zyBcj1Wjx+oFU+VWD>+SRxR+!qgsImRD7N`ykPu*jB^8P7vs%-=hIfv;0=#Zu^Z(|&ol5SReie_NdsTYP2I$a2Df6{OO?tOL6Fi+5)w5C6Vq z!JhE7cc3Is5R#eZ-x@h{lth2Y$1k2!P$R)q*kU&IYj2CaZRgx!jU+;;OGWvX1F^lg zf!=)sh8p*$-@xH@hMDM9etPBnldR>(y(O|HG<3^#64%{-Ws8zyIUsYTaLCxA)GU1& zr~#&IJzw!|5u&aP=5Yg(e{=)_>p&n36sV+&8}$~8we1e>^t9PW(%Lv+zJRMx-d5Q~ z8rMs9@s!&Y`_xX(dNFIyC2Ft?yc1tGEwpordGRUq6u(JA8YCgsl3KaVDOWdv60@3b zg=$9}2>$2l!>22PhlvB{ew>NjXTk#iJcGE)e*U*?HLi#NcNZPCSnJ8H?vf4>4NTa*82l#za)maN++zS*2m7)ZU`uk7QfSY|E~EQW+AnR|-?%evtl$uD zLX>o9)H9UEuMq*4_u1^D6bR)E6kiE#lZT$n!pTslk7_)d%^hZ;=haz{mb!dxBd~AM zt-uwJg;0addiE@r_YS5s%i_;HYxd`#Hrc{1*oQlJ93}(78yh_G1a@KEohfR6g?e4{ zdmu5V;d9;KUWPeSSFsR<)U2qeg2dG4(?J3a?EZM4HyWb{RN{sX3X9Kx4~aRN)|j=8 zCch>?)7+e*S*BNT{KkHSnQ=`vQ=xm%K5M@zs3m*nya@5Y;Xs*2k>%4^#Pax+2!}8w zuYlIs+_V~ZsJe;2JPq^B)RqK3;2pmnqA)US(@>~qD8`uHw6%gbFa(Vc-wjmkiUR0Zl`^@j_Vtq+0ZIQTPg^@;;>(TMaazTgYPsP~fRXRtEukmi)`iR;L+7h9hD+5d89o|H85Suk0sXHlv1Lro!yryr{ zxoWHQbkh5&gOtNDL%ec%6^0QdqZuhkvX-)-*=~ zi7=RPgsPf2P~l*8o_;$xb7)#Jbv7Hp39cZnsaPlwRF2fZY7(iwTrBnbw5oK$vV&9_ zV>4oNb!8g7>HHuYN+KO&l!Tfj%B~l`0geB){tZQ`*KT+zJ?+=>?NQIZQkZ*GyBnlh z+(%PjonhHq7i`EZ_dU`wjFZ}9Y%$@YL(5SXYbB*g;xH<4xmH@b{wtC_#=Wannp+*+ zEgjfQ_3Up@tDs7j6}qF>;03(U51P^yIrX^uN}Zk3M_a^v1jgupDqPb(sGVN?4SJXH_zHhG1hygWHIA^X_^ z)2;#v>l&8#K=!21Af;MIN=Q9hk9y#eUcdAc6Sm|XecIH!(Y3S+-LH&nM7XrFXADxQ zeGK>jFhOXcN+~}jOnzGGHt5C!pNm>(Q}eCWo~Qd&3U*rP+RkxNi`m8zZDCVfx6QjU zGXY1bw?LnN-|e;D+txE|{)uY6EY}+IL);r{`k*n$b)#0j zW`AwIfrtd%==a_J)OyE;c zoUEU(ofl37VhqO}yQWcKQ6MJ$72S8BI)?SGV}MnI?Rh1gbXc0vJ?GGaYF2h|MZ;)? zXjed+d#+67AT~PQO&#q}AdOm{XAE*O+a1GXju>UDw&48^byoZjiFBxv{; zuY*1lEB-r^Z;jM2`h|jJr0{RSr_XXd2NyKQdr*mblEpkBsb8=6NjsUY9wG{x@3ZRK zL+!YRhc-*!0V7IiZKikjxS~wjY7o5b}H547%%SrLrD! z${XE1aea+BEZxnbC%By~cnc&OKW$TSMoRNQCL1cGCiY|n#_ji*1uXtoip>4tNQ*Y$5QLHp@@=a@p%ylAFq@79IP?VZ{8=@Y1yXXG#w znu#9C|Df#%$;zE3l&x7@W1BtE!nd!J+FgqbGWF2F>5~1lNNvGF%#MEa@guX^e+S;r z3mof1K71FfgR5%cxR4v9bke0_q?(l5qjIF|vAlOO-7Lb?uHLoUs61mP9$z?X+|*K& zLlqZ(8a&;U|5mZ&ocHm#AiVzyFbxfRMKYSDp7s*QpRgwrSzQ$0OXx&~L9hvQ$QY(M z9de5w&rYsDT6j`8w*$;y<|H*IgU)W;q^*Hk=c5>+lF^#+#_-kkceAPFUw!(CM?NN{ zxQ-+yWsx_R3-jJOpeEXChvsf=h9>&x+w)A-)U%82jhbAKl}mRhW5P#lZTqb8elLl@ zWDCE!DjD?Mqcg%g-bAl67soxZ@$*i^u@+)(B=K;F4n30$k)ik__t?1%K2V;b*v8Sr z8y(hYg_X+fyB*sOTuwLpB2??FwIVs`JO5>Y?hsegv(w+}|AfDGg%W?83e4&6I-JoB zD8KT(X&AI9{&&M-GD#;pgQ&}R&rQFDj-_XZCehiMZ5w!hyUEki>f6J)k>v2qJh407 zEZ_toq^WK5bq=L3qd$1L+S!BA{{ktZ%mpC_TKshkDWPQ%@y}PbQSFg!HX~dr$tb2> zlLL{4yNH`IFCy(-ZHU4bOT%cC6?mTdTGvy*xCUv=xnIgkI7D!UY3&gPIFJ5q_>l&$ zmr_(?h63pm>-U{zX>k0*iJ2;oA{u2{PVUqG)q@g~9~CpMB6R_k^#Z?@=jMU>9D1|+ z!viw8V|OyuvoxU>s^?Cq)#KbPjMoQ7X`@gs5l!8brUrZ_33orFR}Sc`(&g(_mvbjdn6LAV?!EM!;X?3pF5@(!J!yga#n2zyc$`=3{1^f{(P9>EJBgW&Bk&NLK8oGi^vwDA}9zL2~YmO&AE5M+XZI7Q4~go7Dt+zTynmLliODK~Y% zx`ssGu8y8*ljpv3y69$nq7&1eLEQvBmQ*V7&!0Uqh-C+U9G6LllLXcr*)VmM*U3I*C8R zAG~ZIT~jGt5{_7jI^&w5pSJE0G#mq_Adjg`tsPf_BaL_c`OM(Lr&+!gwL(fsl>3ch z&90ED^(Ib)_{sf-WGImwao4GtWt)a?+b(wcu3vAvCxVon9ZpP1TV-lc;XMX*IABl` z>)zbDp#{PoWh1r*Q&_r%rB$tNOWkd&mSOz&wFscY@EeF+q7Xw)KZCH{F6v=jFCv1GfaJdPQd=SPP+zTL0%M~r zb6M8%ki_JPhI?z~=n)HUScUU)BYTeDIn@H@?)OULH}{SwFe}WL%Pm3Zw@eK4Iy(Yo zFk%5LIu6bWQIPWf8b9QUTg52^UR}1j=_S6&>_QoF>DTcUYV?{rm7=kFea+Nf*Og=d zpMBh48xi)dq-ja0c*(2v1ID@5i)b%dF43|tjY-`7H}8jEKtjSf-%we#n#|buJeih# zx|3XP?)Yb=lhc>S`D?|7P>SuEF%`aDSrPk_s4~$vJtLn^G*g(Y=}l=VFy)y9Gtu@( zANe_gq4?Q)2!)uK&#Q?1_+kPf5?=h~X@V8V2Ug|6Q~H3PWZi;P#FJ&)~?jj*! z<*y|Eu1Of{w?csZ-{Hxs6p@qmIbIQPXM=a*_=#^4c8&&oH%d$j#7!&`A92H>Wvt`w z+Sx|qK~ABDc{&PZx=Oe=%L;7wE1P~gjCpBM(=P)vh>s@AC;FT1r)3Zf0sY!6r_>3m zntKba(!2K-KW)F2Vs?Ak3`0Kj*1X}3E591?zs0)151YQ#Jxps z*EFZ7)YA<8Q_YX#%tMt7)h15K(;KUH3oxX2I^mysV!XV+_N`?LMy(YHTtkcABz#Mk zS0NSDRnAz9^uONRH_pJ^6W3gfsw&ZORV|lWcV>%s%*VNoo@={X6Dg?(=c~Kv=&Fgg zlFK8B{E7-Wj^iCW+QfQcsTow&D887yt{}gEZyxkS_da>iLNKV0HAatmiH6Ib>CKI; ziI@LHx29QM5PfIRZrs{|+A?JAM{&r2b_;+Qh_y@!x z8<#rd?Q8@6k;IR6n;C>OUKhvPqrMl;$0F;$Hgx;S$^wnUdJQs>^J+6FL0{Q!A*o|( zR)Kw7S=>Pyk)0IeNqw@F-sX@UA*6JYQp*%7J``5~Cy7Zm zYC7wZ)tYJB#`y<8>{{@q#HW zTYUCKbmNsL@wF<8C295TR7+>t;_-NUV@g5Z8Eqm2pS8DN{*MY@*Hxb*kL^_#LkzY^ z5uKXsOr~Gv{Wx?dO2XlY48>ecBZhevlW}NqVcG0A6H%kAP7$jMh7Ua4y&x*fqSTgh z;wL1bQbo5|*GwQ?FnfH1*lEoEgL|-M1AQKy_)y&k*qPaL-XdRr@I16k_IVR7XZ$#U zcF$E9`|`;gowPyGMkBFZigVqIezQ@xCp@<@r3$-3kPQ0>)NgiU1pG<$cOw?Trn6>Mvg~GQB&GVZMM~)*F z%7<6gz#k@GKUBw98T@ovxHa^n=cO*p8#DJ<`8@SxnNyi=xlcc&I4?(yZ>C07c?Zp2 z^_VJ#cQcUbC~Ilr)}Zko>fJ-P!(28!kZqv`j>w6h?z8ti9LP6RRlRva^Z?6h*V~pVxVz;!kE2d#; zs@tfgL@|Q!d2NaN+8;DpVlXmPuX-u2m;DjqD?bYZirOzR6DzbPVIwiG7_vi7FEPPO zy!=IQ#eP@W3CpZ`ajeJ%5hJ~J4NpZNU;a_HOb_#4sNq;yX4zwcP3^->Ij?5ga}S}r z$)VvKWw#1E)J;eIqU1D^0@!j7^Oklwu1{T>h#okh{ET2OBO;n*>1|5k3?703VJ8!a zD!Qko9?ENn!_OeI6)P-Og(l>GOf=5!`IUSuGwI=FH%s(2DhWtJ{{UMy{zi!yh&*^J z{Hi=t?1#mK{eMS(Z%zqFUsM_X;R$iRtOGJEe8W8#YM$&Yanmv(_D=NwPNdbi^ni1e*Su@u_K-x25%Mp0{>8UsKASi?Ml#_fBHi2@5_fln@C`c(a!*pMI+8lyc->(;87ZJjO#Hv^bv&m0(;56RD|>jR?tHslJL>i(i2>~ zyq$N2>_vqbBo6f3fdbA6)P3O~uU$>TKnzqoo&dAiar<h*H_y^4uMKzF~jHb!UsZ z;lT6i=}cO4-a67K+ySTDPf3U{vY}=qsh!Toi*}Pj7a9dyf8?zlLicxaPMQU72AlqL zigfmf1>@sB6HEYtlFGhC8}=PZCn`~sE)E_}_+wG|RZT9WFoHyEh+Vc}LQc49H0Iv& zlIP2~9bYZxD$!lKk9F&Et2V9*S>DrO@g^We z+QgiN1_bgEO;RkK{8MlTd*6EQzf z%=8-XM`Uh~M2r|CF%$|(i*#lYgL^#jo$I^Bj__E0UbYoB(dLX5EG8NQ1mmd(aMtx3 z&XCYk)u*;bc;tG~ph~B%TnP`^7X^Q(^uo?>KD#bhxIj4MBs=BiSeTO^Kc!02&)g{l^b}nWza+z10x{uGydSk*g`w$2^k}_|o$Zv5 zh_iyzTQX29ASMqCJlDg^I9_$D!>8Y!I5cf7re&-8n}w*Qt;;17YT;$f!@i}kuO6N0 z4au=*^uv&CBLIg4`OQ#V6rH%$Mxcksdr%JV-idXYKTNpby=(Z=9ZZSD@5#5z>%MV* zb`A>sML}uQz_YPVezDQD$sE-wy!{yyPsrTXYY$#(G!E0VEq+bf^ulsd>nR>Ol@)!T z&h|7=#UiJ8hg zkf3;r1bp;N%~PzGh=m%a3Lj!iMdw=P*83raM5nVL1wcF3`4MZLIPlP`4P+gyG6{%V z32xmfuIG^c32bxsedS9417^5BN=`qW?ErJr&Qg(9vJwfl%5!hqGJxrPbfK(@;r&)u zYkZ<6x)w;#_zGe3oqa=onrO4zJeMFs9V4jS*^Ym)8fQ>*((La|o!FvK@j*FJ?VbIL z^*XL=b>ZyZmTTe3X4tdi37vk@!unw&#HE)O4k&B|$ZCuB`nNMFuM!$V2>)2r{<<#D z(D4Q@MrG)jqh&TvO`TGv@hWd!9`>8Gh1hsED5+%cxQ(+<3q8|th`_ovWY1k5cZ$2+*zS$pyn20`bX*jBX{vo6kuX($YNbL- z)X;omwhW|7wqGv&B);Xx_-;o+=dREM~3%geKAEX=DX`$CR969@UWKg|q+`yhE- zv*7k=Gr_iCb!{@HhCBuCz$bhKwp@WOU&=#=-nfvU6bkYiw{1ur>iSy_(#8q(N)V_07LQ2&kivJFRx?F&#nYte2F@;eF*``y!J*W5An!8`MUj0ewRKtNJ7@kFDmWPI)K~R4^pR1DIaCrT%n7F6V{TAIfyPysz?ni zCMmfXa5k2^9n5rR3vm**kl7<3O30$dOuYLR+#NbW(ptpv);5}PoTJ=KW-r&>%y3(X z=7AOk&a?a0 zaTFa;cXx7TkeYi<)RajAJ1I?oE`bU`V6(rU zw5BQe=^ne zf6un>p8!CdeX(bzOWVTr_|_ucB+;GoC18kee{Qg#oz^KHB2v06s07-}E+ixT<&rs9 zW&Zi;oe2;wEKfOpx>7{6j{WDSY7tO8h;{u~#^%J2pZ-5s-N4e-oh0_HxosY9_?gcu z2f(W}^v-&dZsLy7jvWfw$u!%QcbV|IpBXsf;B}qi+lZ_u{o!M?J>|;7Ea)zWSup*! zdRt1Nfb6vJdOERuhqqZb>2w85YG&_zvxnE_BCfOO1&uh1?x&uv|FOd1z~Sq5*R_|b z^_hDjSN7CD;e~8}rw$jG&cn9nww*BD>_1z9=|huWCH={|d38iPh?*Noue?(W_q)>F zORMYc3bA47G42I@eh(?3%(?x?n%j3`?`@AD>#S5xX?_kITzCxQ-3ns#YFa3sT&)Kd zWm^D$=qlp9N#9xje8r4*3m45Cf15=O4Ey`c<*@)$;(C4&xNwdB0z?qTj~T!{o}trBocxy`HmB zKKjrmqkWqa$@LpPWPDU@UZ_OEe|trE+mec5Q@6R1Ro&a=k<6+xfQ7=p1wbOXal$E_ z9-wpCZqr(L8L{D7LFXd?sOkq$BKGdv2FA*J;VO#VdFQv=n3he<0sv4ba~|g9XwR=; zq)Yp+E-2F`9&b0@TaVUU?54gI%1yK5MD_D3IIVAlZCEgF`HlN=RB(ps<A&IJBQpkNxnHBdN-sxV z4bZ#8Q*j|>WC z?4V}Kw^yXM^pVR-u57ZRhs;#)gm=ju0HZ56ocR$sKDy0u^+}e0APFgfIKQoXRk%ZH zzT>q6s!m-h%lW?j=}vj2Y+5S1{^UEw2R_h4*Z|19a#5d=iP#oBtb0*s?-?r*M-hKJ zot0}U2V}kkx=t~Zh)$n3$CT>xcpMAq=kkpmS*+`jmYQoz&70*7JHRB_NQcg+ z@IfNKE8v9O7{>9(aX$do&mZUIgnQ2whuF1ndbOFNlUn-U7`Z%JRXJ>%v%h@kJUynw z=cDW{`QwKh964X8l}%VxtIf|oxU&8`p0rbU{6g2$>T(S7+w%LKJ=;8Uu~ef#7`AOx z|ISMDD%Q^V`Tn#>mM+&9htgFI>jz(}A8+5eYj1gL-Q_!!M!oV7fKe&&Ffz}&$#^(` zdsDZ*LqC~(p@B(nSSE5uPB0?*RolbzvO#;DGv1E^5X=I;Th-B{ajBCq@gYQz_Q^CD zdM#3=zwgEZB3Jb>ckLd>(c(c1XOU`4iCpfxLUB{4WPD;=vNBW5`q0Rbs2cWy@u93ks_G(D9xa_&BNByejp3>{Nhlf(x`*i zbIz90-ix0zO1T=>Nd})XmQiM7Bi2b+0*mE&i5p!uLEf`Z_yYnZMN5Amj;ut;(gzFb60|} zz(OYR&*zNw25aWT@51q}tmbE48$e^gnF~^xJv9bKQ~(0FgV3qB?-um9(q?$^JUMF+ zf}S@G;=WIL&Ie7xmFvX}>59pSIo7=B=U~}u!i~zDJ}FVQoHNt?b7brVSG^Z4o3jbS z5SOhWbjwtA$PJSm&;^V*DOC9D^-Dj(9{zQq2a4Twd)6LDZay9cWSMMmH-D~@S9=3s zK<00U5DzOs1m+WL<`6$U!{y$*A`LwO5HddR_t#*k z|2)&e0xywjP}ElRJ%7k27O$QjxLx%9@sMuPMzvY`(yl*1bIX5zVds8NKRq-~A}r_C zX*|jLlKtC7ZyH5M**&AqG@}U)_VsyDZK4+U<(^yXb{1|OMW$ax?rlAg+Iz--z8Uh$ zZBQvYqi1TDnFq-bHOys!1fvHx_(jHdLdE<6y|HLu)b|LoZP znp4MRFUsDMeK6a=2WZ2WTboJSuT%4EINJ>&EY;xO{SV(~$c?oRxM6;-IVj|y-Tmj~ zI{cMeCl9GTy>IyI*j@!?k3*mCKm7CEue+?XR8IINU%0G%BI4$8Ov0ZEmoBskjqcM^2*MUIXy_ic9(`&Lc zt6!$iDk&+w-%75GR=>NkG+r6CNB96PU~}c`SNqPUTVYMEs?<;S2rCk}_&7URzr=!k+O7qwQtzQ@)QkBN*F`F8&ED%qVGdTT6W1 zO8DfzE=-R7t$3CD2c)#l@C0+aJ+O7J+uSCP>WC;k@aoHv%*FUy@ur@Ase!nQ5w;60 zjrwpf*iowFG7dJ^nS4?hAt!dEsDpOc3$k01YkdqB(G)uH^b-5FoNCSCDZhF4_>8VX z;iLBc8TP9ES8nKZL;i>MfaKS8ZcbYM5zOTT3%~soVVda~5_Lf4cUS(mS<4fQ1vn84 zuSn^8^{8(vQ0hpzF*|;^_aH1PgQ$PiDaD_$VXruS)@MFaKEV-t`kMTMvVj@Z0qwKJ zUCx{te;x6)TkkLD3znIrHeOyH!persi$>qo{?{eLtY02?X^jh4N0CXRWSd4qWQn>{vd{h>{Kr$j(VFK0PG!kajO;iFh_O?f-hXeEy`eWRfZAX(ulS~GmCgz%$4IQkyo z%59tq>Ri;%5}NN*Qm|FnB`}scB(+@Jq&M7Ub?@)4^I&sV77`^&{&=IJyNMu=4jvW| zkT-e0O2JCJ_~VWBy@>O=VIfC<6A;igw5v$(Qr;hWzWs_8Sn8>kTZI`BI!yXpylPSW zPJ)#2lfX)m>E{(U4rAR$f~DI0mkf=(364j{` Date: Thu, 13 Feb 2025 13:32:56 -0700 Subject: [PATCH 114/123] Update ms.topic --- .../mdm/Language-pack-management-csp.md | 3 +- .../mdm/accountmanagement-csp.md | 3 +- .../mdm/accountmanagement-ddf.md | 3 +- .../client-management/mdm/activesync-csp.md | 3 +- .../mdm/activesync-ddf-file.md | 3 +- .../mdm/applicationcontrol-csp-ddf.md | 3 +- .../mdm/applicationcontrol-csp.md | 3 +- .../client-management/mdm/applocker-csp.md | 3 +- .../mdm/applocker-ddf-file.md | 3 +- .../mdm/assignedaccess-csp.md | 3 +- .../mdm/assignedaccess-ddf.md | 3 +- .../client-management/mdm/bitlocker-csp.md | 3 +- .../mdm/bitlocker-ddf-file.md | 3 +- .../mdm/certificatestore-csp.md | 3 +- .../mdm/certificatestore-ddf-file.md | 3 +- .../mdm/clientcertificateinstall-csp.md | 3 +- .../mdm/clientcertificateinstall-ddf-file.md | 3 +- .../client-management/mdm/clouddesktop-csp.md | 3 +- .../mdm/clouddesktop-ddf-file.md | 3 +- .../mdm/declaredconfiguration-csp.md | 3 +- .../mdm/declaredconfiguration-ddf-file.md | 3 +- windows/client-management/mdm/defender-csp.md | 3 +- windows/client-management/mdm/defender-ddf.md | 3 +- .../client-management/mdm/devdetail-csp.md | 3 +- .../mdm/devdetail-ddf-file.md | 3 +- .../mdm/devicemanageability-csp.md | 3 +- .../mdm/devicemanageability-ddf.md | 3 +- .../mdm/devicepreparation-csp.md | 3 +- .../mdm/devicepreparation-ddf-file.md | 3 +- .../client-management/mdm/devicestatus-csp.md | 3 +- .../client-management/mdm/devicestatus-ddf.md | 3 +- windows/client-management/mdm/devinfo-csp.md | 3 +- .../client-management/mdm/devinfo-ddf-file.md | 3 +- .../mdm/diagnosticlog-csp.md | 3 +- .../mdm/diagnosticlog-ddf.md | 3 +- windows/client-management/mdm/dmacc-csp.md | 3 +- .../client-management/mdm/dmacc-ddf-file.md | 3 +- windows/client-management/mdm/dmclient-csp.md | 3 +- .../mdm/dmclient-ddf-file.md | 3 +- windows/client-management/mdm/email2-csp.md | 3 +- .../client-management/mdm/email2-ddf-file.md | 3 +- .../mdm/enterprisedesktopappmanagement-csp.md | 3 +- ...enterprisedesktopappmanagement-ddf-file.md | 3 +- .../mdm/enterprisemodernappmanagement-csp.md | 3 +- .../mdm/enterprisemodernappmanagement-ddf.md | 3 +- windows/client-management/mdm/euiccs-csp.md | 3 +- .../client-management/mdm/euiccs-ddf-file.md | 3 +- windows/client-management/mdm/firewall-csp.md | 3 +- .../mdm/firewall-ddf-file.md | 3 +- .../mdm/healthattestation-csp.md | 3 +- .../mdm/healthattestation-ddf.md | 3 +- .../mdm/language-pack-management-ddf-file.md | 3 +- windows/client-management/mdm/laps-csp.md | 3 +- .../client-management/mdm/laps-ddf-file.md | 3 +- .../client-management/mdm/networkproxy-csp.md | 3 +- .../client-management/mdm/networkproxy-ddf.md | 3 +- .../mdm/networkqospolicy-csp.md | 3 +- .../mdm/networkqospolicy-ddf.md | 3 +- .../client-management/mdm/nodecache-csp.md | 3 +- .../mdm/nodecache-ddf-file.md | 3 +- windows/client-management/mdm/office-csp.md | 3 +- windows/client-management/mdm/office-ddf.md | 3 +- .../mdm/passportforwork-csp.md | 3 +- .../mdm/passportforwork-ddf.md | 3 +- .../mdm/personaldataencryption-csp.md | 3 +- .../mdm/personaldataencryption-ddf-file.md | 3 +- .../mdm/personalization-csp.md | 3 +- .../mdm/personalization-ddf.md | 3 +- ...-in-policy-csp-supported-by-surface-hub.md | 3 +- .../mdm/policies-in-preview.md | 3 +- .../policy-configuration-service-provider.md | 3 +- .../mdm/policy-csp-abovelock.md | 3 +- .../mdm/policy-csp-accounts.md | 3 +- .../mdm/policy-csp-activexcontrols.md | 3 +- .../policy-csp-admx-activexinstallservice.md | 3 +- .../mdm/policy-csp-admx-addremoveprograms.md | 3 +- .../mdm/policy-csp-admx-admpwd.md | 3 +- .../mdm/policy-csp-admx-appcompat.md | 3 +- .../mdm/policy-csp-admx-appxpackagemanager.md | 3 +- .../mdm/policy-csp-admx-appxruntime.md | 3 +- .../mdm/policy-csp-admx-attachmentmanager.md | 3 +- .../mdm/policy-csp-admx-auditsettings.md | 3 +- .../mdm/policy-csp-admx-bits.md | 3 +- .../mdm/policy-csp-admx-ciphersuiteorder.md | 3 +- .../mdm/policy-csp-admx-com.md | 3 +- .../mdm/policy-csp-admx-controlpanel.md | 3 +- .../policy-csp-admx-controlpaneldisplay.md | 3 +- .../mdm/policy-csp-admx-cpls.md | 3 +- .../policy-csp-admx-credentialproviders.md | 3 +- .../mdm/policy-csp-admx-credssp.md | 3 +- .../mdm/policy-csp-admx-credui.md | 3 +- .../mdm/policy-csp-admx-ctrlaltdel.md | 3 +- .../mdm/policy-csp-admx-datacollection.md | 3 +- .../mdm/policy-csp-admx-dcom.md | 3 +- .../mdm/policy-csp-admx-desktop.md | 3 +- .../mdm/policy-csp-admx-devicecompat.md | 3 +- .../mdm/policy-csp-admx-deviceguard.md | 3 +- .../mdm/policy-csp-admx-deviceinstallation.md | 3 +- .../mdm/policy-csp-admx-devicesetup.md | 3 +- .../mdm/policy-csp-admx-dfs.md | 3 +- .../mdm/policy-csp-admx-digitallocker.md | 3 +- .../mdm/policy-csp-admx-diskdiagnostic.md | 3 +- .../mdm/policy-csp-admx-disknvcache.md | 3 +- .../mdm/policy-csp-admx-diskquota.md | 3 +- ...policy-csp-admx-distributedlinktracking.md | 3 +- .../mdm/policy-csp-admx-dnsclient.md | 3 +- .../mdm/policy-csp-admx-dwm.md | 3 +- .../mdm/policy-csp-admx-eaime.md | 3 +- .../mdm/policy-csp-admx-encryptfilesonmove.md | 3 +- .../mdm/policy-csp-admx-enhancedstorage.md | 3 +- .../mdm/policy-csp-admx-errorreporting.md | 3 +- .../mdm/policy-csp-admx-eventforwarding.md | 3 +- .../mdm/policy-csp-admx-eventlog.md | 3 +- .../mdm/policy-csp-admx-eventlogging.md | 3 +- .../mdm/policy-csp-admx-eventviewer.md | 3 +- .../mdm/policy-csp-admx-explorer.md | 3 +- .../mdm/policy-csp-admx-externalboot.md | 3 +- .../mdm/policy-csp-admx-filerecovery.md | 3 +- .../mdm/policy-csp-admx-filerevocation.md | 3 +- .../policy-csp-admx-fileservervssprovider.md | 3 +- .../mdm/policy-csp-admx-filesys.md | 3 +- .../mdm/policy-csp-admx-folderredirection.md | 3 +- .../mdm/policy-csp-admx-framepanes.md | 3 +- .../mdm/policy-csp-admx-fthsvc.md | 3 +- .../mdm/policy-csp-admx-globalization.md | 3 +- .../mdm/policy-csp-admx-grouppolicy.md | 3 +- .../mdm/policy-csp-admx-help.md | 3 +- .../mdm/policy-csp-admx-helpandsupport.md | 3 +- .../mdm/policy-csp-admx-hotspotauth.md | 3 +- .../mdm/policy-csp-admx-icm.md | 3 +- .../mdm/policy-csp-admx-iis.md | 3 +- .../mdm/policy-csp-admx-iscsi.md | 3 +- .../mdm/policy-csp-admx-kdc.md | 3 +- .../mdm/policy-csp-admx-kerberos.md | 3 +- .../mdm/policy-csp-admx-lanmanserver.md | 3 +- .../mdm/policy-csp-admx-lanmanworkstation.md | 3 +- .../mdm/policy-csp-admx-leakdiagnostic.md | 3 +- ...icy-csp-admx-linklayertopologydiscovery.md | 3 +- .../policy-csp-admx-locationprovideradm.md | 3 +- .../mdm/policy-csp-admx-logon.md | 3 +- ...icy-csp-admx-microsoftdefenderantivirus.md | 3 +- .../mdm/policy-csp-admx-mmc.md | 3 +- .../mdm/policy-csp-admx-mmcsnapins.md | 3 +- .../policy-csp-admx-mobilepcmobilitycenter.md | 3 +- ...y-csp-admx-mobilepcpresentationsettings.md | 3 +- .../mdm/policy-csp-admx-msapolicy.md | 3 +- .../mdm/policy-csp-admx-msched.md | 3 +- .../mdm/policy-csp-admx-msdt.md | 3 +- .../mdm/policy-csp-admx-msi.md | 3 +- .../mdm/policy-csp-admx-msifilerecovery.md | 3 +- .../mdm/policy-csp-admx-mss-legacy.md | 3 +- .../mdm/policy-csp-admx-nca.md | 3 +- .../mdm/policy-csp-admx-ncsi.md | 3 +- .../mdm/policy-csp-admx-netlogon.md | 3 +- .../mdm/policy-csp-admx-networkconnections.md | 3 +- .../mdm/policy-csp-admx-offlinefiles.md | 3 +- .../mdm/policy-csp-admx-pca.md | 3 +- .../mdm/policy-csp-admx-peertopeercaching.md | 3 +- .../mdm/policy-csp-admx-pentraining.md | 3 +- .../policy-csp-admx-performancediagnostics.md | 3 +- .../mdm/policy-csp-admx-power.md | 3 +- ...licy-csp-admx-powershellexecutionpolicy.md | 3 +- .../mdm/policy-csp-admx-previousversions.md | 3 +- .../mdm/policy-csp-admx-printing.md | 3 +- .../mdm/policy-csp-admx-printing2.md | 3 +- .../mdm/policy-csp-admx-programs.md | 3 +- .../mdm/policy-csp-admx-pushtoinstall.md | 3 +- .../mdm/policy-csp-admx-qos.md | 3 +- .../mdm/policy-csp-admx-radar.md | 3 +- .../mdm/policy-csp-admx-reliability.md | 3 +- .../mdm/policy-csp-admx-remoteassistance.md | 3 +- .../mdm/policy-csp-admx-removablestorage.md | 3 +- .../mdm/policy-csp-admx-rpc.md | 3 +- .../mdm/policy-csp-admx-sam.md | 3 +- .../mdm/policy-csp-admx-scripts.md | 3 +- .../mdm/policy-csp-admx-sdiageng.md | 3 +- .../mdm/policy-csp-admx-sdiagschd.md | 3 +- .../mdm/policy-csp-admx-securitycenter.md | 3 +- .../mdm/policy-csp-admx-sensors.md | 3 +- .../mdm/policy-csp-admx-servermanager.md | 3 +- .../mdm/policy-csp-admx-servicing.md | 3 +- .../mdm/policy-csp-admx-settingsync.md | 3 +- .../mdm/policy-csp-admx-sharedfolders.md | 3 +- .../mdm/policy-csp-admx-sharing.md | 3 +- ...csp-admx-shellcommandpromptregedittools.md | 3 +- .../mdm/policy-csp-admx-smartcard.md | 3 +- .../mdm/policy-csp-admx-snmp.md | 3 +- .../mdm/policy-csp-admx-soundrec.md | 3 +- .../mdm/policy-csp-admx-srmfci.md | 3 +- .../mdm/policy-csp-admx-startmenu.md | 3 +- .../mdm/policy-csp-admx-systemrestore.md | 3 +- .../mdm/policy-csp-admx-tabletpcinputpanel.md | 3 +- .../mdm/policy-csp-admx-tabletshell.md | 3 +- .../mdm/policy-csp-admx-taskbar.md | 3 +- .../mdm/policy-csp-admx-tcpip.md | 3 +- .../mdm/policy-csp-admx-terminalserver.md | 3 +- .../mdm/policy-csp-admx-thumbnails.md | 3 +- .../mdm/policy-csp-admx-touchinput.md | 3 +- .../mdm/policy-csp-admx-tpm.md | 3 +- ...y-csp-admx-userexperiencevirtualization.md | 3 +- .../mdm/policy-csp-admx-userprofiles.md | 3 +- .../mdm/policy-csp-admx-w32time.md | 3 +- .../mdm/policy-csp-admx-wcm.md | 3 +- .../mdm/policy-csp-admx-wdi.md | 3 +- .../mdm/policy-csp-admx-wincal.md | 3 +- .../mdm/policy-csp-admx-windowscolorsystem.md | 3 +- .../mdm/policy-csp-admx-windowsconnectnow.md | 3 +- .../mdm/policy-csp-admx-windowsexplorer.md | 3 +- .../mdm/policy-csp-admx-windowsmediadrm.md | 3 +- .../mdm/policy-csp-admx-windowsmediaplayer.md | 3 +- ...policy-csp-admx-windowsremotemanagement.md | 3 +- .../mdm/policy-csp-admx-windowsstore.md | 3 +- .../mdm/policy-csp-admx-wininit.md | 3 +- .../mdm/policy-csp-admx-winlogon.md | 3 +- .../mdm/policy-csp-admx-winsrv.md | 3 +- .../mdm/policy-csp-admx-wlansvc.md | 3 +- .../mdm/policy-csp-admx-wordwheel.md | 3 +- .../mdm/policy-csp-admx-workfoldersclient.md | 3 +- .../mdm/policy-csp-admx-wpn.md | 3 +- .../mdm/policy-csp-appdeviceinventory.md | 3 +- .../mdm/policy-csp-applicationdefaults.md | 3 +- .../mdm/policy-csp-applicationmanagement.md | 3 +- .../mdm/policy-csp-appruntime.md | 3 +- .../mdm/policy-csp-appvirtualization.md | 3 +- .../mdm/policy-csp-attachmentmanager.md | 3 +- .../client-management/mdm/policy-csp-audit.md | 3 +- .../mdm/policy-csp-authentication.md | 3 +- .../mdm/policy-csp-autoplay.md | 3 +- .../mdm/policy-csp-bitlocker.md | 3 +- .../client-management/mdm/policy-csp-bits.md | 3 +- .../mdm/policy-csp-bluetooth.md | 3 +- .../mdm/policy-csp-browser.md | 3 +- .../mdm/policy-csp-camera.md | 3 +- .../mdm/policy-csp-cellular.md | 3 +- .../mdm/policy-csp-clouddesktop.md | 3 +- .../mdm/policy-csp-connectivity.md | 11 ++-- .../mdm/policy-csp-controlpolicyconflict.md | 3 +- .../mdm/policy-csp-credentialproviders.md | 3 +- .../mdm/policy-csp-credentialsdelegation.md | 3 +- .../mdm/policy-csp-credentialsui.md | 3 +- .../mdm/policy-csp-cryptography.md | 3 +- .../mdm/policy-csp-dataprotection.md | 3 +- .../mdm/policy-csp-datausage.md | 3 +- .../mdm/policy-csp-defender.md | 3 +- .../mdm/policy-csp-deliveryoptimization.md | 3 +- .../mdm/policy-csp-desktop.md | 3 +- .../mdm/policy-csp-desktopappinstaller.md | 3 +- .../mdm/policy-csp-deviceguard.md | 3 +- .../mdm/policy-csp-devicehealthmonitoring.md | 3 +- .../mdm/policy-csp-deviceinstallation.md | 3 +- .../mdm/policy-csp-devicelock.md | 3 +- .../mdm/policy-csp-display.md | 3 +- .../mdm/policy-csp-dmaguard.md | 3 +- .../client-management/mdm/policy-csp-eap.md | 3 +- .../mdm/policy-csp-education.md | 3 +- .../mdm/policy-csp-enterprisecloudprint.md | 3 +- .../mdm/policy-csp-errorreporting.md | 3 +- .../mdm/policy-csp-eventlogservice.md | 3 +- .../mdm/policy-csp-experience.md | 3 +- .../mdm/policy-csp-exploitguard.md | 3 +- .../mdm/policy-csp-federatedauthentication.md | 3 +- .../mdm/policy-csp-fileexplorer.md | 3 +- .../mdm/policy-csp-filesystem.md | 3 +- .../client-management/mdm/policy-csp-games.md | 3 +- .../mdm/policy-csp-handwriting.md | 3 +- .../mdm/policy-csp-humanpresence.md | 3 +- .../mdm/policy-csp-internetexplorer.md | 3 +- .../mdm/policy-csp-kerberos.md | 3 +- .../mdm/policy-csp-kioskbrowser.md | 3 +- .../mdm/policy-csp-lanmanworkstation.md | 3 +- .../mdm/policy-csp-licensing.md | 3 +- ...policy-csp-localpoliciessecurityoptions.md | 55 ++++++++++--------- .../mdm/policy-csp-localusersandgroups.md | 3 +- .../mdm/policy-csp-lockdown.md | 3 +- .../client-management/mdm/policy-csp-lsa.md | 3 +- .../client-management/mdm/policy-csp-maps.md | 3 +- .../mdm/policy-csp-memorydump.md | 3 +- .../mdm/policy-csp-messaging.md | 3 +- .../mdm/policy-csp-mixedreality.md | 3 +- .../mdm/policy-csp-mssecurityguide.md | 3 +- .../mdm/policy-csp-msslegacy.md | 3 +- .../mdm/policy-csp-multitasking.md | 3 +- .../mdm/policy-csp-networkisolation.md | 3 +- .../mdm/policy-csp-networklistmanager.md | 3 +- .../mdm/policy-csp-newsandinterests.md | 3 +- .../mdm/policy-csp-notifications.md | 3 +- .../client-management/mdm/policy-csp-power.md | 3 +- .../mdm/policy-csp-printers.md | 3 +- .../mdm/policy-csp-privacy.md | 3 +- .../mdm/policy-csp-remoteassistance.md | 3 +- .../mdm/policy-csp-remotedesktop.md | 3 +- .../mdm/policy-csp-remotedesktopservices.md | 3 +- .../mdm/policy-csp-remotemanagement.md | 3 +- .../mdm/policy-csp-remoteprocedurecall.md | 3 +- .../mdm/policy-csp-remoteshell.md | 3 +- .../mdm/policy-csp-restrictedgroups.md | 3 +- .../mdm/policy-csp-search.md | 3 +- .../mdm/policy-csp-security.md | 3 +- .../mdm/policy-csp-servicecontrolmanager.md | 3 +- .../mdm/policy-csp-settings.md | 3 +- .../mdm/policy-csp-settingssync.md | 3 +- .../mdm/policy-csp-smartscreen.md | 3 +- .../mdm/policy-csp-speakforme.md | 3 +- .../mdm/policy-csp-speech.md | 3 +- .../client-management/mdm/policy-csp-start.md | 3 +- .../mdm/policy-csp-stickers.md | 3 +- .../mdm/policy-csp-storage.md | 3 +- .../client-management/mdm/policy-csp-sudo.md | 3 +- .../mdm/policy-csp-system.md | 3 +- .../mdm/policy-csp-systemservices.md | 3 +- .../mdm/policy-csp-taskmanager.md | 3 +- .../mdm/policy-csp-taskscheduler.md | 3 +- .../mdm/policy-csp-tenantdefinedtelemetry.md | 3 +- .../mdm/policy-csp-tenantrestrictions.md | 3 +- .../mdm/policy-csp-textinput.md | 3 +- .../mdm/policy-csp-timelanguagesettings.md | 3 +- .../mdm/policy-csp-troubleshooting.md | 3 +- .../mdm/policy-csp-update.md | 3 +- .../mdm/policy-csp-userrights.md | 3 +- ...olicy-csp-virtualizationbasedtechnology.md | 3 +- .../mdm/policy-csp-webthreatdefense.md | 3 +- .../client-management/mdm/policy-csp-wifi.md | 3 +- .../mdm/policy-csp-windowsai.md | 3 +- .../mdm/policy-csp-windowsautopilot.md | 3 +- .../policy-csp-windowsconnectionmanager.md | 3 +- ...olicy-csp-windowsdefendersecuritycenter.md | 3 +- .../mdm/policy-csp-windowsinkworkspace.md | 3 +- .../mdm/policy-csp-windowslogon.md | 3 +- .../mdm/policy-csp-windowspowershell.md | 3 +- .../mdm/policy-csp-windowssandbox.md | 3 +- .../mdm/policy-csp-wirelessdisplay.md | 3 +- .../mdm/printerprovisioning-csp.md | 3 +- .../mdm/printerprovisioning-ddf-file.md | 3 +- windows/client-management/mdm/reboot-csp.md | 3 +- .../client-management/mdm/reboot-ddf-file.md | 3 +- .../client-management/mdm/remotewipe-csp.md | 3 +- .../mdm/remotewipe-ddf-file.md | 3 +- .../mdm/rootcacertificates-csp.md | 3 +- .../mdm/rootcacertificates-ddf-file.md | 3 +- .../mdm/secureassessment-csp.md | 3 +- .../mdm/secureassessment-ddf-file.md | 3 +- windows/client-management/mdm/sharedpc-csp.md | 3 +- .../mdm/sharedpc-ddf-file.md | 3 +- windows/client-management/mdm/supl-csp.md | 3 +- .../client-management/mdm/supl-ddf-file.md | 3 +- .../client-management/mdm/surfacehub-csp.md | 3 +- .../mdm/surfacehub-ddf-file.md | 3 +- windows/client-management/mdm/vpnv2-csp.md | 3 +- .../client-management/mdm/vpnv2-ddf-file.md | 3 +- windows/client-management/mdm/wifi-csp.md | 3 +- .../client-management/mdm/wifi-ddf-file.md | 3 +- .../windowsdefenderapplicationguard-csp.md | 3 +- ...indowsdefenderapplicationguard-ddf-file.md | 3 +- .../mdm/windowslicensing-csp.md | 3 +- .../mdm/windowslicensing-ddf-file.md | 3 +- .../client-management/mdm/wirednetwork-csp.md | 3 +- .../mdm/wirednetwork-ddf-file.md | 3 +- 357 files changed, 744 insertions(+), 387 deletions(-) diff --git a/windows/client-management/mdm/Language-pack-management-csp.md b/windows/client-management/mdm/Language-pack-management-csp.md index 3fd4c9a6d5..9824f9f4bb 100644 --- a/windows/client-management/mdm/Language-pack-management-csp.md +++ b/windows/client-management/mdm/Language-pack-management-csp.md @@ -1,7 +1,8 @@ --- title: LanguagePackManagement CSP description: Learn more about the LanguagePackManagement CSP. -ms.date: 05/20/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/accountmanagement-csp.md b/windows/client-management/mdm/accountmanagement-csp.md index 55180da611..074e8fd82d 100644 --- a/windows/client-management/mdm/accountmanagement-csp.md +++ b/windows/client-management/mdm/accountmanagement-csp.md @@ -1,7 +1,8 @@ --- title: AccountManagement CSP description: Learn more about the AccountManagement CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/accountmanagement-ddf.md b/windows/client-management/mdm/accountmanagement-ddf.md index 06093b49ae..9fbf72a271 100644 --- a/windows/client-management/mdm/accountmanagement-ddf.md +++ b/windows/client-management/mdm/accountmanagement-ddf.md @@ -1,7 +1,8 @@ --- title: AccountManagement DDF file description: View the XML file containing the device description framework (DDF) for the AccountManagement configuration service provider. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/activesync-csp.md b/windows/client-management/mdm/activesync-csp.md index 8d862c057a..08d97f311c 100644 --- a/windows/client-management/mdm/activesync-csp.md +++ b/windows/client-management/mdm/activesync-csp.md @@ -1,7 +1,8 @@ --- title: ActiveSync CSP description: Learn more about the ActiveSync CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/activesync-ddf-file.md b/windows/client-management/mdm/activesync-ddf-file.md index 99038f75e0..7948682484 100644 --- a/windows/client-management/mdm/activesync-ddf-file.md +++ b/windows/client-management/mdm/activesync-ddf-file.md @@ -1,7 +1,8 @@ --- title: ActiveSync DDF file description: View the XML file containing the device description framework (DDF) for the ActiveSync configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/applicationcontrol-csp-ddf.md b/windows/client-management/mdm/applicationcontrol-csp-ddf.md index 8b27862509..9a4927ab7f 100644 --- a/windows/client-management/mdm/applicationcontrol-csp-ddf.md +++ b/windows/client-management/mdm/applicationcontrol-csp-ddf.md @@ -1,7 +1,8 @@ --- title: ApplicationControl DDF file description: View the XML file containing the device description framework (DDF) for the ApplicationControl configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/applicationcontrol-csp.md b/windows/client-management/mdm/applicationcontrol-csp.md index 7d20bc1c4c..8a598bacc1 100644 --- a/windows/client-management/mdm/applicationcontrol-csp.md +++ b/windows/client-management/mdm/applicationcontrol-csp.md @@ -1,7 +1,8 @@ --- title: ApplicationControl CSP description: Learn more about the ApplicationControl CSP. -ms.date: 01/31/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/applocker-csp.md b/windows/client-management/mdm/applocker-csp.md index b7c198fd13..668e1f1cc4 100644 --- a/windows/client-management/mdm/applocker-csp.md +++ b/windows/client-management/mdm/applocker-csp.md @@ -1,7 +1,8 @@ --- title: AppLocker CSP description: Learn more about the AppLocker CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/applocker-ddf-file.md b/windows/client-management/mdm/applocker-ddf-file.md index 9d1ededd2a..17e7c8517b 100644 --- a/windows/client-management/mdm/applocker-ddf-file.md +++ b/windows/client-management/mdm/applocker-ddf-file.md @@ -1,7 +1,8 @@ --- title: AppLocker DDF file description: View the XML file containing the device description framework (DDF) for the AppLocker configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/assignedaccess-csp.md b/windows/client-management/mdm/assignedaccess-csp.md index 279c109882..226d30cd6d 100644 --- a/windows/client-management/mdm/assignedaccess-csp.md +++ b/windows/client-management/mdm/assignedaccess-csp.md @@ -1,7 +1,8 @@ --- title: AssignedAccess CSP description: Learn more about the AssignedAccess CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/assignedaccess-ddf.md b/windows/client-management/mdm/assignedaccess-ddf.md index 81d21dbfab..5e6d4bba56 100644 --- a/windows/client-management/mdm/assignedaccess-ddf.md +++ b/windows/client-management/mdm/assignedaccess-ddf.md @@ -1,7 +1,8 @@ --- title: AssignedAccess DDF file description: View the XML file containing the device description framework (DDF) for the AssignedAccess configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 052ed1a825..00bdf3ecff 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -1,7 +1,8 @@ --- title: BitLocker CSP description: Learn more about the BitLocker CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/bitlocker-ddf-file.md b/windows/client-management/mdm/bitlocker-ddf-file.md index 1680ecfd3d..c8dd0ba91c 100644 --- a/windows/client-management/mdm/bitlocker-ddf-file.md +++ b/windows/client-management/mdm/bitlocker-ddf-file.md @@ -1,7 +1,8 @@ --- title: BitLocker DDF file description: View the XML file containing the device description framework (DDF) for the BitLocker configuration service provider. -ms.date: 08/07/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/certificatestore-csp.md b/windows/client-management/mdm/certificatestore-csp.md index fc94239b02..0f807dd26f 100644 --- a/windows/client-management/mdm/certificatestore-csp.md +++ b/windows/client-management/mdm/certificatestore-csp.md @@ -1,7 +1,8 @@ --- title: CertificateStore CSP description: Learn more about the CertificateStore CSP. -ms.date: 01/31/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/certificatestore-ddf-file.md b/windows/client-management/mdm/certificatestore-ddf-file.md index b552ae24ad..4bafa3afe1 100644 --- a/windows/client-management/mdm/certificatestore-ddf-file.md +++ b/windows/client-management/mdm/certificatestore-ddf-file.md @@ -1,7 +1,8 @@ --- title: CertificateStore DDF file description: View the XML file containing the device description framework (DDF) for the CertificateStore configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/clientcertificateinstall-csp.md b/windows/client-management/mdm/clientcertificateinstall-csp.md index 89b0a33e28..5e07bc1dce 100644 --- a/windows/client-management/mdm/clientcertificateinstall-csp.md +++ b/windows/client-management/mdm/clientcertificateinstall-csp.md @@ -1,7 +1,8 @@ --- title: ClientCertificateInstall CSP description: Learn more about the ClientCertificateInstall CSP. -ms.date: 04/10/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/clientcertificateinstall-ddf-file.md b/windows/client-management/mdm/clientcertificateinstall-ddf-file.md index 20bf836b45..0939486314 100644 --- a/windows/client-management/mdm/clientcertificateinstall-ddf-file.md +++ b/windows/client-management/mdm/clientcertificateinstall-ddf-file.md @@ -1,7 +1,8 @@ --- title: ClientCertificateInstall DDF file description: View the XML file containing the device description framework (DDF) for the ClientCertificateInstall configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/clouddesktop-csp.md b/windows/client-management/mdm/clouddesktop-csp.md index 253efc7e95..ad088e970b 100644 --- a/windows/client-management/mdm/clouddesktop-csp.md +++ b/windows/client-management/mdm/clouddesktop-csp.md @@ -1,7 +1,8 @@ --- title: CloudDesktop CSP description: Learn more about the CloudDesktop CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/clouddesktop-ddf-file.md b/windows/client-management/mdm/clouddesktop-ddf-file.md index 1cf28badea..d793b28c1c 100644 --- a/windows/client-management/mdm/clouddesktop-ddf-file.md +++ b/windows/client-management/mdm/clouddesktop-ddf-file.md @@ -1,7 +1,8 @@ --- title: CloudDesktop DDF file description: View the XML file containing the device description framework (DDF) for the CloudDesktop configuration service provider. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/declaredconfiguration-csp.md b/windows/client-management/mdm/declaredconfiguration-csp.md index e9843249a5..ffc4a8ffc6 100644 --- a/windows/client-management/mdm/declaredconfiguration-csp.md +++ b/windows/client-management/mdm/declaredconfiguration-csp.md @@ -1,7 +1,8 @@ --- title: DeclaredConfiguration CSP description: Learn more about the DeclaredConfiguration CSP. -ms.date: 11/05/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/declaredconfiguration-ddf-file.md b/windows/client-management/mdm/declaredconfiguration-ddf-file.md index 6d50da92cb..bd5711d552 100644 --- a/windows/client-management/mdm/declaredconfiguration-ddf-file.md +++ b/windows/client-management/mdm/declaredconfiguration-ddf-file.md @@ -1,7 +1,8 @@ --- title: DeclaredConfiguration DDF file description: View the XML file containing the device description framework (DDF) for the DeclaredConfiguration configuration service provider. -ms.date: 11/05/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index ac0fd65b21..b3beaf7ff2 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -1,7 +1,8 @@ --- title: Defender CSP description: Learn more about the Defender CSP. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/defender-ddf.md b/windows/client-management/mdm/defender-ddf.md index 1e199886e7..000fc9209d 100644 --- a/windows/client-management/mdm/defender-ddf.md +++ b/windows/client-management/mdm/defender-ddf.md @@ -1,7 +1,8 @@ --- title: Defender DDF file description: View the XML file containing the device description framework (DDF) for the Defender configuration service provider. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devdetail-csp.md b/windows/client-management/mdm/devdetail-csp.md index a348f66fcb..ca16215bc6 100644 --- a/windows/client-management/mdm/devdetail-csp.md +++ b/windows/client-management/mdm/devdetail-csp.md @@ -1,7 +1,8 @@ --- title: DevDetail CSP description: Learn more about the DevDetail CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devdetail-ddf-file.md b/windows/client-management/mdm/devdetail-ddf-file.md index c7b1a08470..c95e76c1f5 100644 --- a/windows/client-management/mdm/devdetail-ddf-file.md +++ b/windows/client-management/mdm/devdetail-ddf-file.md @@ -1,7 +1,8 @@ --- title: DevDetail DDF file description: View the XML file containing the device description framework (DDF) for the DevDetail configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devicemanageability-csp.md b/windows/client-management/mdm/devicemanageability-csp.md index 7ca0975068..6512893f20 100644 --- a/windows/client-management/mdm/devicemanageability-csp.md +++ b/windows/client-management/mdm/devicemanageability-csp.md @@ -1,7 +1,8 @@ --- title: DeviceManageability CSP description: Learn more about the DeviceManageability CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devicemanageability-ddf.md b/windows/client-management/mdm/devicemanageability-ddf.md index 4769870f2a..108d6f2baa 100644 --- a/windows/client-management/mdm/devicemanageability-ddf.md +++ b/windows/client-management/mdm/devicemanageability-ddf.md @@ -1,7 +1,8 @@ --- title: DeviceManageability DDF file description: View the XML file containing the device description framework (DDF) for the DeviceManageability configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devicepreparation-csp.md b/windows/client-management/mdm/devicepreparation-csp.md index b93cdfd164..d466c262e7 100644 --- a/windows/client-management/mdm/devicepreparation-csp.md +++ b/windows/client-management/mdm/devicepreparation-csp.md @@ -1,7 +1,8 @@ --- title: DevicePreparation CSP description: Learn more about the DevicePreparation CSP. -ms.date: 04/10/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devicepreparation-ddf-file.md b/windows/client-management/mdm/devicepreparation-ddf-file.md index 903c08866d..c0c37e1261 100644 --- a/windows/client-management/mdm/devicepreparation-ddf-file.md +++ b/windows/client-management/mdm/devicepreparation-ddf-file.md @@ -1,7 +1,8 @@ --- title: DevicePreparation DDF file description: View the XML file containing the device description framework (DDF) for the DevicePreparation configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devicestatus-csp.md b/windows/client-management/mdm/devicestatus-csp.md index c119bdbf72..9c6ace8133 100644 --- a/windows/client-management/mdm/devicestatus-csp.md +++ b/windows/client-management/mdm/devicestatus-csp.md @@ -1,7 +1,8 @@ --- title: DeviceStatus CSP description: Learn more about the DeviceStatus CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devicestatus-ddf.md b/windows/client-management/mdm/devicestatus-ddf.md index d1977f5eaa..19018f4905 100644 --- a/windows/client-management/mdm/devicestatus-ddf.md +++ b/windows/client-management/mdm/devicestatus-ddf.md @@ -1,7 +1,8 @@ --- title: DeviceStatus DDF file description: View the XML file containing the device description framework (DDF) for the DeviceStatus configuration service provider. -ms.date: 08/07/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devinfo-csp.md b/windows/client-management/mdm/devinfo-csp.md index 348fd292dc..66333fd3ba 100644 --- a/windows/client-management/mdm/devinfo-csp.md +++ b/windows/client-management/mdm/devinfo-csp.md @@ -1,7 +1,8 @@ --- title: DevInfo CSP description: Learn more about the DevInfo CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/devinfo-ddf-file.md b/windows/client-management/mdm/devinfo-ddf-file.md index a57636514a..39841d704f 100644 --- a/windows/client-management/mdm/devinfo-ddf-file.md +++ b/windows/client-management/mdm/devinfo-ddf-file.md @@ -1,7 +1,8 @@ --- title: DevInfo DDF file description: View the XML file containing the device description framework (DDF) for the DevInfo configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/diagnosticlog-csp.md b/windows/client-management/mdm/diagnosticlog-csp.md index 01c937ef35..971e077470 100644 --- a/windows/client-management/mdm/diagnosticlog-csp.md +++ b/windows/client-management/mdm/diagnosticlog-csp.md @@ -1,7 +1,8 @@ --- title: DiagnosticLog CSP description: Learn more about the DiagnosticLog CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/diagnosticlog-ddf.md b/windows/client-management/mdm/diagnosticlog-ddf.md index 03887d47c3..47b12ad46b 100644 --- a/windows/client-management/mdm/diagnosticlog-ddf.md +++ b/windows/client-management/mdm/diagnosticlog-ddf.md @@ -1,7 +1,8 @@ --- title: DiagnosticLog DDF file description: View the XML file containing the device description framework (DDF) for the DiagnosticLog configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/dmacc-csp.md b/windows/client-management/mdm/dmacc-csp.md index 271a68b16e..fa5cbb05be 100644 --- a/windows/client-management/mdm/dmacc-csp.md +++ b/windows/client-management/mdm/dmacc-csp.md @@ -1,7 +1,8 @@ --- title: DMAcc CSP description: Learn more about the DMAcc CSP. -ms.date: 04/10/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/dmacc-ddf-file.md b/windows/client-management/mdm/dmacc-ddf-file.md index 15fc5f3231..2d3fb556aa 100644 --- a/windows/client-management/mdm/dmacc-ddf-file.md +++ b/windows/client-management/mdm/dmacc-ddf-file.md @@ -1,7 +1,8 @@ --- title: DMAcc DDF file description: View the XML file containing the device description framework (DDF) for the DMAcc configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/dmclient-csp.md b/windows/client-management/mdm/dmclient-csp.md index 79e8b34817..dafa7bc0bb 100644 --- a/windows/client-management/mdm/dmclient-csp.md +++ b/windows/client-management/mdm/dmclient-csp.md @@ -1,7 +1,8 @@ --- title: DMClient CSP description: Learn more about the DMClient CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/dmclient-ddf-file.md b/windows/client-management/mdm/dmclient-ddf-file.md index b82d0fe21b..e56f464486 100644 --- a/windows/client-management/mdm/dmclient-ddf-file.md +++ b/windows/client-management/mdm/dmclient-ddf-file.md @@ -1,7 +1,8 @@ --- title: DMClient DDF file description: View the XML file containing the device description framework (DDF) for the DMClient configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/email2-csp.md b/windows/client-management/mdm/email2-csp.md index cb09b51a30..2e9994efd2 100644 --- a/windows/client-management/mdm/email2-csp.md +++ b/windows/client-management/mdm/email2-csp.md @@ -1,7 +1,8 @@ --- title: EMAIL2 CSP description: Learn more about the EMAIL2 CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/email2-ddf-file.md b/windows/client-management/mdm/email2-ddf-file.md index 144f69b17d..853b0143c9 100644 --- a/windows/client-management/mdm/email2-ddf-file.md +++ b/windows/client-management/mdm/email2-ddf-file.md @@ -1,7 +1,8 @@ --- title: EMAIL2 DDF file description: View the XML file containing the device description framework (DDF) for the EMAIL2 configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/enterprisedesktopappmanagement-csp.md b/windows/client-management/mdm/enterprisedesktopappmanagement-csp.md index e0331f74f7..1e7b4ce38f 100644 --- a/windows/client-management/mdm/enterprisedesktopappmanagement-csp.md +++ b/windows/client-management/mdm/enterprisedesktopappmanagement-csp.md @@ -1,7 +1,8 @@ --- title: EnterpriseDesktopAppManagement CSP description: Learn more about the EnterpriseDesktopAppManagement CSP. -ms.date: 05/20/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md b/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md index ba537d72e7..898fd84ff0 100644 --- a/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md +++ b/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md @@ -1,7 +1,8 @@ --- title: EnterpriseDesktopAppManagement DDF file description: View the XML file containing the device description framework (DDF) for the EnterpriseDesktopAppManagement configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/enterprisemodernappmanagement-csp.md b/windows/client-management/mdm/enterprisemodernappmanagement-csp.md index fc8a278aae..878a0a1212 100644 --- a/windows/client-management/mdm/enterprisemodernappmanagement-csp.md +++ b/windows/client-management/mdm/enterprisemodernappmanagement-csp.md @@ -1,7 +1,8 @@ --- title: EnterpriseModernAppManagement CSP description: Learn more about the EnterpriseModernAppManagement CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md b/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md index 5b95cba183..785c3ec2de 100644 --- a/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md +++ b/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md @@ -1,7 +1,8 @@ --- title: EnterpriseModernAppManagement DDF file description: View the XML file containing the device description framework (DDF) for the EnterpriseModernAppManagement configuration service provider. -ms.date: 09/11/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/euiccs-csp.md b/windows/client-management/mdm/euiccs-csp.md index a4af4d0697..d0c56c5e8c 100644 --- a/windows/client-management/mdm/euiccs-csp.md +++ b/windows/client-management/mdm/euiccs-csp.md @@ -1,7 +1,8 @@ --- title: eUICCs CSP description: Learn more about the eUICCs CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/euiccs-ddf-file.md b/windows/client-management/mdm/euiccs-ddf-file.md index 6a148a8d22..3b2b23d68b 100644 --- a/windows/client-management/mdm/euiccs-ddf-file.md +++ b/windows/client-management/mdm/euiccs-ddf-file.md @@ -1,7 +1,8 @@ --- title: eUICCs DDF file description: View the XML file containing the device description framework (DDF) for the eUICCs configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/firewall-csp.md b/windows/client-management/mdm/firewall-csp.md index 4d6dc724a9..e782cfc9c3 100644 --- a/windows/client-management/mdm/firewall-csp.md +++ b/windows/client-management/mdm/firewall-csp.md @@ -1,7 +1,8 @@ --- title: Firewall CSP description: Learn more about the Firewall CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/firewall-ddf-file.md b/windows/client-management/mdm/firewall-ddf-file.md index e48568b2b5..d0cc7b9d7c 100644 --- a/windows/client-management/mdm/firewall-ddf-file.md +++ b/windows/client-management/mdm/firewall-ddf-file.md @@ -1,7 +1,8 @@ --- title: Firewall DDF file description: View the XML file containing the device description framework (DDF) for the Firewall configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/healthattestation-csp.md b/windows/client-management/mdm/healthattestation-csp.md index a43aae095f..99029bde87 100644 --- a/windows/client-management/mdm/healthattestation-csp.md +++ b/windows/client-management/mdm/healthattestation-csp.md @@ -1,7 +1,8 @@ --- title: HealthAttestation CSP description: Learn more about the HealthAttestation CSP. -ms.date: 01/14/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/healthattestation-ddf.md b/windows/client-management/mdm/healthattestation-ddf.md index 5a273aecc4..3acbfc05ad 100644 --- a/windows/client-management/mdm/healthattestation-ddf.md +++ b/windows/client-management/mdm/healthattestation-ddf.md @@ -1,7 +1,8 @@ --- title: HealthAttestation DDF file description: View the XML file containing the device description framework (DDF) for the HealthAttestation configuration service provider. -ms.date: 01/14/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/language-pack-management-ddf-file.md b/windows/client-management/mdm/language-pack-management-ddf-file.md index 3739f4f142..1cbe49e886 100644 --- a/windows/client-management/mdm/language-pack-management-ddf-file.md +++ b/windows/client-management/mdm/language-pack-management-ddf-file.md @@ -1,7 +1,8 @@ --- title: LanguagePackManagement DDF file description: View the XML file containing the device description framework (DDF) for the LanguagePackManagement configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/laps-csp.md b/windows/client-management/mdm/laps-csp.md index b524fe09eb..0f5b037f09 100644 --- a/windows/client-management/mdm/laps-csp.md +++ b/windows/client-management/mdm/laps-csp.md @@ -1,7 +1,8 @@ --- title: LAPS CSP description: Learn more about the LAPS CSP. -ms.date: 11/05/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/laps-ddf-file.md b/windows/client-management/mdm/laps-ddf-file.md index 8924f4d542..f8f906fd5d 100644 --- a/windows/client-management/mdm/laps-ddf-file.md +++ b/windows/client-management/mdm/laps-ddf-file.md @@ -1,7 +1,8 @@ --- title: LAPS DDF file description: View the XML file containing the device description framework (DDF) for the LAPS configuration service provider. -ms.date: 11/05/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/networkproxy-csp.md b/windows/client-management/mdm/networkproxy-csp.md index 8eba61aa61..f8e643ccae 100644 --- a/windows/client-management/mdm/networkproxy-csp.md +++ b/windows/client-management/mdm/networkproxy-csp.md @@ -1,7 +1,8 @@ --- title: NetworkProxy CSP description: Learn more about the NetworkProxy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/networkproxy-ddf.md b/windows/client-management/mdm/networkproxy-ddf.md index 4448901798..99756c2d7c 100644 --- a/windows/client-management/mdm/networkproxy-ddf.md +++ b/windows/client-management/mdm/networkproxy-ddf.md @@ -1,7 +1,8 @@ --- title: NetworkProxy DDF file description: View the XML file containing the device description framework (DDF) for the NetworkProxy configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/networkqospolicy-csp.md b/windows/client-management/mdm/networkqospolicy-csp.md index 87c98019ce..3320f36adc 100644 --- a/windows/client-management/mdm/networkqospolicy-csp.md +++ b/windows/client-management/mdm/networkqospolicy-csp.md @@ -1,7 +1,8 @@ --- title: NetworkQoSPolicy CSP description: Learn more about the NetworkQoSPolicy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/networkqospolicy-ddf.md b/windows/client-management/mdm/networkqospolicy-ddf.md index 04b4528ac6..52080f9687 100644 --- a/windows/client-management/mdm/networkqospolicy-ddf.md +++ b/windows/client-management/mdm/networkqospolicy-ddf.md @@ -1,7 +1,8 @@ --- title: NetworkQoSPolicy DDF file description: View the XML file containing the device description framework (DDF) for the NetworkQoSPolicy configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/nodecache-csp.md b/windows/client-management/mdm/nodecache-csp.md index 53c5f2e391..91fb84f680 100644 --- a/windows/client-management/mdm/nodecache-csp.md +++ b/windows/client-management/mdm/nodecache-csp.md @@ -1,7 +1,8 @@ --- title: NodeCache CSP description: Learn more about the NodeCache CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/nodecache-ddf-file.md b/windows/client-management/mdm/nodecache-ddf-file.md index 4d442904e4..a635dca24e 100644 --- a/windows/client-management/mdm/nodecache-ddf-file.md +++ b/windows/client-management/mdm/nodecache-ddf-file.md @@ -1,7 +1,8 @@ --- title: NodeCache DDF file description: View the XML file containing the device description framework (DDF) for the NodeCache configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/office-csp.md b/windows/client-management/mdm/office-csp.md index 5dc08b8a09..0fe23966a6 100644 --- a/windows/client-management/mdm/office-csp.md +++ b/windows/client-management/mdm/office-csp.md @@ -1,7 +1,8 @@ --- title: Office CSP description: Learn more about the Office CSP. -ms.date: 10/10/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/office-ddf.md b/windows/client-management/mdm/office-ddf.md index e36405ce71..15d49860a7 100644 --- a/windows/client-management/mdm/office-ddf.md +++ b/windows/client-management/mdm/office-ddf.md @@ -1,7 +1,8 @@ --- title: Office DDF file description: View the XML file containing the device description framework (DDF) for the Office configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/passportforwork-csp.md b/windows/client-management/mdm/passportforwork-csp.md index 3dcbc10721..1151ff64a9 100644 --- a/windows/client-management/mdm/passportforwork-csp.md +++ b/windows/client-management/mdm/passportforwork-csp.md @@ -1,7 +1,8 @@ --- title: PassportForWork CSP description: Learn more about the PassportForWork CSP. -ms.date: 11/05/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/passportforwork-ddf.md b/windows/client-management/mdm/passportforwork-ddf.md index e53fb8e225..a40108a1d3 100644 --- a/windows/client-management/mdm/passportforwork-ddf.md +++ b/windows/client-management/mdm/passportforwork-ddf.md @@ -1,7 +1,8 @@ --- title: PassportForWork DDF file description: View the XML file containing the device description framework (DDF) for the PassportForWork configuration service provider. -ms.date: 11/05/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/personaldataencryption-csp.md b/windows/client-management/mdm/personaldataencryption-csp.md index 1efd2767f5..68a0344e14 100644 --- a/windows/client-management/mdm/personaldataencryption-csp.md +++ b/windows/client-management/mdm/personaldataencryption-csp.md @@ -1,7 +1,8 @@ --- title: Personal Data Encryption CSP description: Learn more about the Personal Data Encryption CSP. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/personaldataencryption-ddf-file.md b/windows/client-management/mdm/personaldataencryption-ddf-file.md index e59ad7a14f..9d837a739c 100644 --- a/windows/client-management/mdm/personaldataencryption-ddf-file.md +++ b/windows/client-management/mdm/personaldataencryption-ddf-file.md @@ -1,7 +1,8 @@ --- title: Personal Data Encryption DDF file description: View the XML file containing the device description framework (DDF) for the Personal Data Encryption configuration service provider. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/personalization-csp.md b/windows/client-management/mdm/personalization-csp.md index 56a05d8beb..b08ee9521e 100644 --- a/windows/client-management/mdm/personalization-csp.md +++ b/windows/client-management/mdm/personalization-csp.md @@ -1,7 +1,8 @@ --- title: Personalization CSP description: Learn more about the Personalization CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/personalization-ddf.md b/windows/client-management/mdm/personalization-ddf.md index 6cf4a75b50..66928db977 100644 --- a/windows/client-management/mdm/personalization-ddf.md +++ b/windows/client-management/mdm/personalization-ddf.md @@ -1,7 +1,8 @@ --- title: Personalization DDF file description: View the XML file containing the device description framework (DDF) for the Personalization configuration service provider. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policies-in-policy-csp-supported-by-surface-hub.md b/windows/client-management/mdm/policies-in-policy-csp-supported-by-surface-hub.md index 057bf0381f..efe09a55c0 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policies-in-policy-csp-supported-by-surface-hub.md @@ -1,7 +1,8 @@ --- title: Policies supported by Windows 10 Team description: Learn about the policies supported by Windows 10 Team. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policies-in-preview.md b/windows/client-management/mdm/policies-in-preview.md index 8bce8b6a6e..b3ead6b748 100644 --- a/windows/client-management/mdm/policies-in-preview.md +++ b/windows/client-management/mdm/policies-in-preview.md @@ -1,7 +1,8 @@ --- title: Configuration service provider preview policies description: Learn more about configuration service provider (CSP) policies that are available for Windows Insider Preview. -ms.date: 02/11/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 1823ce5450..dcd77fb5aa 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1,7 +1,8 @@ --- title: Policy CSP description: Learn more about the Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-abovelock.md b/windows/client-management/mdm/policy-csp-abovelock.md index 05e84c1ade..85f21fa615 100644 --- a/windows/client-management/mdm/policy-csp-abovelock.md +++ b/windows/client-management/mdm/policy-csp-abovelock.md @@ -1,7 +1,8 @@ --- title: AboveLock Policy CSP description: Learn more about the AboveLock Area in Policy CSP. -ms.date: 04/10/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-accounts.md b/windows/client-management/mdm/policy-csp-accounts.md index 472fa8e6dc..76022ccc57 100644 --- a/windows/client-management/mdm/policy-csp-accounts.md +++ b/windows/client-management/mdm/policy-csp-accounts.md @@ -1,7 +1,8 @@ --- title: Accounts Policy CSP description: Learn more about the Accounts Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-activexcontrols.md b/windows/client-management/mdm/policy-csp-activexcontrols.md index 7fe5d7be45..e5822bdb83 100644 --- a/windows/client-management/mdm/policy-csp-activexcontrols.md +++ b/windows/client-management/mdm/policy-csp-activexcontrols.md @@ -1,7 +1,8 @@ --- title: ActiveXControls Policy CSP description: Learn more about the ActiveXControls Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-activexinstallservice.md b/windows/client-management/mdm/policy-csp-admx-activexinstallservice.md index 23c46228c0..9fe709cf14 100644 --- a/windows/client-management/mdm/policy-csp-admx-activexinstallservice.md +++ b/windows/client-management/mdm/policy-csp-admx-activexinstallservice.md @@ -1,7 +1,8 @@ --- title: ADMX_ActiveXInstallService Policy CSP description: Learn more about the ADMX_ActiveXInstallService Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-addremoveprograms.md b/windows/client-management/mdm/policy-csp-admx-addremoveprograms.md index 5aa088da13..e652181356 100644 --- a/windows/client-management/mdm/policy-csp-admx-addremoveprograms.md +++ b/windows/client-management/mdm/policy-csp-admx-addremoveprograms.md @@ -1,7 +1,8 @@ --- title: ADMX_AddRemovePrograms Policy CSP description: Learn more about the ADMX_AddRemovePrograms Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-admpwd.md b/windows/client-management/mdm/policy-csp-admx-admpwd.md index 4522a908ac..a180c7b671 100644 --- a/windows/client-management/mdm/policy-csp-admx-admpwd.md +++ b/windows/client-management/mdm/policy-csp-admx-admpwd.md @@ -1,7 +1,8 @@ --- title: ADMX_AdmPwd Policy CSP description: Learn more about the ADMX_AdmPwd Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-appcompat.md b/windows/client-management/mdm/policy-csp-admx-appcompat.md index af4c3a1089..eeea7fe122 100644 --- a/windows/client-management/mdm/policy-csp-admx-appcompat.md +++ b/windows/client-management/mdm/policy-csp-admx-appcompat.md @@ -1,7 +1,8 @@ --- title: ADMX_AppCompat Policy CSP description: Learn more about the ADMX_AppCompat Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md b/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md index 3f48213786..dd10e18ae3 100644 --- a/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md +++ b/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md @@ -1,7 +1,8 @@ --- title: ADMX_AppxPackageManager Policy CSP description: Learn more about the ADMX_AppxPackageManager Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-appxruntime.md b/windows/client-management/mdm/policy-csp-admx-appxruntime.md index 1cc79f97a0..4dc7bea270 100644 --- a/windows/client-management/mdm/policy-csp-admx-appxruntime.md +++ b/windows/client-management/mdm/policy-csp-admx-appxruntime.md @@ -1,7 +1,8 @@ --- title: ADMX_AppXRuntime Policy CSP description: Learn more about the ADMX_AppXRuntime Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-attachmentmanager.md b/windows/client-management/mdm/policy-csp-admx-attachmentmanager.md index 03730b7ad4..654b4071c2 100644 --- a/windows/client-management/mdm/policy-csp-admx-attachmentmanager.md +++ b/windows/client-management/mdm/policy-csp-admx-attachmentmanager.md @@ -1,7 +1,8 @@ --- title: ADMX_AttachmentManager Policy CSP description: Learn more about the ADMX_AttachmentManager Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-auditsettings.md b/windows/client-management/mdm/policy-csp-admx-auditsettings.md index 3758b90ad9..a9d1568c27 100644 --- a/windows/client-management/mdm/policy-csp-admx-auditsettings.md +++ b/windows/client-management/mdm/policy-csp-admx-auditsettings.md @@ -1,7 +1,8 @@ --- title: ADMX_AuditSettings Policy CSP description: Learn more about the ADMX_AuditSettings Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-bits.md b/windows/client-management/mdm/policy-csp-admx-bits.md index c31407acd6..73bc2cb4d1 100644 --- a/windows/client-management/mdm/policy-csp-admx-bits.md +++ b/windows/client-management/mdm/policy-csp-admx-bits.md @@ -1,7 +1,8 @@ --- title: ADMX_Bits Policy CSP description: Learn more about the ADMX_Bits Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder.md b/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder.md index 54835ffbf0..c5ac251bbb 100644 --- a/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder.md +++ b/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder.md @@ -1,7 +1,8 @@ --- title: ADMX_CipherSuiteOrder Policy CSP description: Learn more about the ADMX_CipherSuiteOrder Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-com.md b/windows/client-management/mdm/policy-csp-admx-com.md index 308d376d86..d0d10f976e 100644 --- a/windows/client-management/mdm/policy-csp-admx-com.md +++ b/windows/client-management/mdm/policy-csp-admx-com.md @@ -1,7 +1,8 @@ --- title: ADMX_COM Policy CSP description: Learn more about the ADMX_COM Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-controlpanel.md b/windows/client-management/mdm/policy-csp-admx-controlpanel.md index db99a6aa70..ff11797b8f 100644 --- a/windows/client-management/mdm/policy-csp-admx-controlpanel.md +++ b/windows/client-management/mdm/policy-csp-admx-controlpanel.md @@ -1,7 +1,8 @@ --- title: ADMX_ControlPanel Policy CSP description: Learn more about the ADMX_ControlPanel Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md b/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md index 3afb3d8385..f52bcf1b61 100644 --- a/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md +++ b/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md @@ -1,7 +1,8 @@ --- title: ADMX_ControlPanelDisplay Policy CSP description: Learn more about the ADMX_ControlPanelDisplay Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-cpls.md b/windows/client-management/mdm/policy-csp-admx-cpls.md index 8ff5777e97..184afe4fb7 100644 --- a/windows/client-management/mdm/policy-csp-admx-cpls.md +++ b/windows/client-management/mdm/policy-csp-admx-cpls.md @@ -1,7 +1,8 @@ --- title: ADMX_Cpls Policy CSP description: Learn more about the ADMX_Cpls Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-credentialproviders.md b/windows/client-management/mdm/policy-csp-admx-credentialproviders.md index 66487275ce..30546fe858 100644 --- a/windows/client-management/mdm/policy-csp-admx-credentialproviders.md +++ b/windows/client-management/mdm/policy-csp-admx-credentialproviders.md @@ -1,7 +1,8 @@ --- title: ADMX_CredentialProviders Policy CSP description: Learn more about the ADMX_CredentialProviders Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-credssp.md b/windows/client-management/mdm/policy-csp-admx-credssp.md index 3384029777..96885646be 100644 --- a/windows/client-management/mdm/policy-csp-admx-credssp.md +++ b/windows/client-management/mdm/policy-csp-admx-credssp.md @@ -1,7 +1,8 @@ --- title: ADMX_CredSsp Policy CSP description: Learn more about the ADMX_CredSsp Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-credui.md b/windows/client-management/mdm/policy-csp-admx-credui.md index 1d6008f006..d0efc5270c 100644 --- a/windows/client-management/mdm/policy-csp-admx-credui.md +++ b/windows/client-management/mdm/policy-csp-admx-credui.md @@ -1,7 +1,8 @@ --- title: ADMX_CredUI Policy CSP description: Learn more about the ADMX_CredUI Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-ctrlaltdel.md b/windows/client-management/mdm/policy-csp-admx-ctrlaltdel.md index af5b17a0de..024f2b8973 100644 --- a/windows/client-management/mdm/policy-csp-admx-ctrlaltdel.md +++ b/windows/client-management/mdm/policy-csp-admx-ctrlaltdel.md @@ -1,7 +1,8 @@ --- title: ADMX_CtrlAltDel Policy CSP description: Learn more about the ADMX_CtrlAltDel Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-datacollection.md b/windows/client-management/mdm/policy-csp-admx-datacollection.md index da6c059f32..093fcaea64 100644 --- a/windows/client-management/mdm/policy-csp-admx-datacollection.md +++ b/windows/client-management/mdm/policy-csp-admx-datacollection.md @@ -1,7 +1,8 @@ --- title: ADMX_DataCollection Policy CSP description: Learn more about the ADMX_DataCollection Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-dcom.md b/windows/client-management/mdm/policy-csp-admx-dcom.md index 82338c786f..c36eaf9f96 100644 --- a/windows/client-management/mdm/policy-csp-admx-dcom.md +++ b/windows/client-management/mdm/policy-csp-admx-dcom.md @@ -1,7 +1,8 @@ --- title: ADMX_DCOM Policy CSP description: Learn more about the ADMX_DCOM Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-desktop.md b/windows/client-management/mdm/policy-csp-admx-desktop.md index 463d46efd4..47f5d14233 100644 --- a/windows/client-management/mdm/policy-csp-admx-desktop.md +++ b/windows/client-management/mdm/policy-csp-admx-desktop.md @@ -1,7 +1,8 @@ --- title: ADMX_Desktop Policy CSP description: Learn more about the ADMX_Desktop Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-devicecompat.md b/windows/client-management/mdm/policy-csp-admx-devicecompat.md index ee02c1fdb1..0b0dd73b2e 100644 --- a/windows/client-management/mdm/policy-csp-admx-devicecompat.md +++ b/windows/client-management/mdm/policy-csp-admx-devicecompat.md @@ -1,7 +1,8 @@ --- title: ADMX_DeviceCompat Policy CSP description: Learn more about the ADMX_DeviceCompat Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-deviceguard.md b/windows/client-management/mdm/policy-csp-admx-deviceguard.md index 2a743d498c..0e5aef2c55 100644 --- a/windows/client-management/mdm/policy-csp-admx-deviceguard.md +++ b/windows/client-management/mdm/policy-csp-admx-deviceguard.md @@ -1,7 +1,8 @@ --- title: ADMX_DeviceGuard Policy CSP description: Learn more about the ADMX_DeviceGuard Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-deviceinstallation.md b/windows/client-management/mdm/policy-csp-admx-deviceinstallation.md index 04bbcda528..ec022eae1a 100644 --- a/windows/client-management/mdm/policy-csp-admx-deviceinstallation.md +++ b/windows/client-management/mdm/policy-csp-admx-deviceinstallation.md @@ -1,7 +1,8 @@ --- title: ADMX_DeviceInstallation Policy CSP description: Learn more about the ADMX_DeviceInstallation Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-devicesetup.md b/windows/client-management/mdm/policy-csp-admx-devicesetup.md index 67eea97170..426b54f900 100644 --- a/windows/client-management/mdm/policy-csp-admx-devicesetup.md +++ b/windows/client-management/mdm/policy-csp-admx-devicesetup.md @@ -1,7 +1,8 @@ --- title: ADMX_DeviceSetup Policy CSP description: Learn more about the ADMX_DeviceSetup Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-dfs.md b/windows/client-management/mdm/policy-csp-admx-dfs.md index 6e3f90a479..b49427af7e 100644 --- a/windows/client-management/mdm/policy-csp-admx-dfs.md +++ b/windows/client-management/mdm/policy-csp-admx-dfs.md @@ -1,7 +1,8 @@ --- title: ADMX_DFS Policy CSP description: Learn more about the ADMX_DFS Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-digitallocker.md b/windows/client-management/mdm/policy-csp-admx-digitallocker.md index 44cc32a941..7dd12c55c1 100644 --- a/windows/client-management/mdm/policy-csp-admx-digitallocker.md +++ b/windows/client-management/mdm/policy-csp-admx-digitallocker.md @@ -1,7 +1,8 @@ --- title: ADMX_DigitalLocker Policy CSP description: Learn more about the ADMX_DigitalLocker Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-diskdiagnostic.md b/windows/client-management/mdm/policy-csp-admx-diskdiagnostic.md index a1d1ae6ea2..b37f4e7fbd 100644 --- a/windows/client-management/mdm/policy-csp-admx-diskdiagnostic.md +++ b/windows/client-management/mdm/policy-csp-admx-diskdiagnostic.md @@ -1,7 +1,8 @@ --- title: ADMX_DiskDiagnostic Policy CSP description: Learn more about the ADMX_DiskDiagnostic Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-disknvcache.md b/windows/client-management/mdm/policy-csp-admx-disknvcache.md index c05e1abb81..aa1b5c42c8 100644 --- a/windows/client-management/mdm/policy-csp-admx-disknvcache.md +++ b/windows/client-management/mdm/policy-csp-admx-disknvcache.md @@ -1,7 +1,8 @@ --- title: ADMX_DiskNVCache Policy CSP description: Learn more about the ADMX_DiskNVCache Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-diskquota.md b/windows/client-management/mdm/policy-csp-admx-diskquota.md index 9ed30a6596..4017ed9f80 100644 --- a/windows/client-management/mdm/policy-csp-admx-diskquota.md +++ b/windows/client-management/mdm/policy-csp-admx-diskquota.md @@ -1,7 +1,8 @@ --- title: ADMX_DiskQuota Policy CSP description: Learn more about the ADMX_DiskQuota Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-distributedlinktracking.md b/windows/client-management/mdm/policy-csp-admx-distributedlinktracking.md index 86db7ab46f..657c704404 100644 --- a/windows/client-management/mdm/policy-csp-admx-distributedlinktracking.md +++ b/windows/client-management/mdm/policy-csp-admx-distributedlinktracking.md @@ -1,7 +1,8 @@ --- title: ADMX_DistributedLinkTracking Policy CSP description: Learn more about the ADMX_DistributedLinkTracking Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-dnsclient.md b/windows/client-management/mdm/policy-csp-admx-dnsclient.md index 38077183bb..2fcb54aa93 100644 --- a/windows/client-management/mdm/policy-csp-admx-dnsclient.md +++ b/windows/client-management/mdm/policy-csp-admx-dnsclient.md @@ -1,7 +1,8 @@ --- title: ADMX_DnsClient Policy CSP description: Learn more about the ADMX_DnsClient Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-dwm.md b/windows/client-management/mdm/policy-csp-admx-dwm.md index 1cfe66691d..abf3f0c411 100644 --- a/windows/client-management/mdm/policy-csp-admx-dwm.md +++ b/windows/client-management/mdm/policy-csp-admx-dwm.md @@ -1,7 +1,8 @@ --- title: ADMX_DWM Policy CSP description: Learn more about the ADMX_DWM Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-eaime.md b/windows/client-management/mdm/policy-csp-admx-eaime.md index 8c7874f974..42f7ad4fe5 100644 --- a/windows/client-management/mdm/policy-csp-admx-eaime.md +++ b/windows/client-management/mdm/policy-csp-admx-eaime.md @@ -1,7 +1,8 @@ --- title: ADMX_EAIME Policy CSP description: Learn more about the ADMX_EAIME Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-encryptfilesonmove.md b/windows/client-management/mdm/policy-csp-admx-encryptfilesonmove.md index 4ff4c47c53..5260ac88e1 100644 --- a/windows/client-management/mdm/policy-csp-admx-encryptfilesonmove.md +++ b/windows/client-management/mdm/policy-csp-admx-encryptfilesonmove.md @@ -1,7 +1,8 @@ --- title: ADMX_EncryptFilesonMove Policy CSP description: Learn more about the ADMX_EncryptFilesonMove Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-enhancedstorage.md b/windows/client-management/mdm/policy-csp-admx-enhancedstorage.md index f9c29b883f..2c8d9514f5 100644 --- a/windows/client-management/mdm/policy-csp-admx-enhancedstorage.md +++ b/windows/client-management/mdm/policy-csp-admx-enhancedstorage.md @@ -1,7 +1,8 @@ --- title: ADMX_EnhancedStorage Policy CSP description: Learn more about the ADMX_EnhancedStorage Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-errorreporting.md b/windows/client-management/mdm/policy-csp-admx-errorreporting.md index 7c0a9b383c..7f1e33d55e 100644 --- a/windows/client-management/mdm/policy-csp-admx-errorreporting.md +++ b/windows/client-management/mdm/policy-csp-admx-errorreporting.md @@ -1,7 +1,8 @@ --- title: ADMX_ErrorReporting Policy CSP description: Learn more about the ADMX_ErrorReporting Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-eventforwarding.md b/windows/client-management/mdm/policy-csp-admx-eventforwarding.md index 13353ee9ca..74214050d6 100644 --- a/windows/client-management/mdm/policy-csp-admx-eventforwarding.md +++ b/windows/client-management/mdm/policy-csp-admx-eventforwarding.md @@ -1,7 +1,8 @@ --- title: ADMX_EventForwarding Policy CSP description: Learn more about the ADMX_EventForwarding Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-eventlog.md b/windows/client-management/mdm/policy-csp-admx-eventlog.md index 016c98016e..edb3cbcd0f 100644 --- a/windows/client-management/mdm/policy-csp-admx-eventlog.md +++ b/windows/client-management/mdm/policy-csp-admx-eventlog.md @@ -1,7 +1,8 @@ --- title: ADMX_EventLog Policy CSP description: Learn more about the ADMX_EventLog Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-eventlogging.md b/windows/client-management/mdm/policy-csp-admx-eventlogging.md index 3c13367734..0e2affb87c 100644 --- a/windows/client-management/mdm/policy-csp-admx-eventlogging.md +++ b/windows/client-management/mdm/policy-csp-admx-eventlogging.md @@ -1,7 +1,8 @@ --- title: ADMX_EventLogging Policy CSP description: Learn more about the ADMX_EventLogging Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-eventviewer.md b/windows/client-management/mdm/policy-csp-admx-eventviewer.md index 74f43583b2..809ac58355 100644 --- a/windows/client-management/mdm/policy-csp-admx-eventviewer.md +++ b/windows/client-management/mdm/policy-csp-admx-eventviewer.md @@ -1,7 +1,8 @@ --- title: ADMX_EventViewer Policy CSP description: Learn more about the ADMX_EventViewer Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-explorer.md b/windows/client-management/mdm/policy-csp-admx-explorer.md index ab3f86952a..54b2715072 100644 --- a/windows/client-management/mdm/policy-csp-admx-explorer.md +++ b/windows/client-management/mdm/policy-csp-admx-explorer.md @@ -1,7 +1,8 @@ --- title: ADMX_Explorer Policy CSP description: Learn more about the ADMX_Explorer Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-externalboot.md b/windows/client-management/mdm/policy-csp-admx-externalboot.md index 5f345d1ef6..2b32f842e4 100644 --- a/windows/client-management/mdm/policy-csp-admx-externalboot.md +++ b/windows/client-management/mdm/policy-csp-admx-externalboot.md @@ -1,7 +1,8 @@ --- title: ADMX_ExternalBoot Policy CSP description: Learn more about the ADMX_ExternalBoot Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-filerecovery.md b/windows/client-management/mdm/policy-csp-admx-filerecovery.md index f2b3cb91db..84e154a8f0 100644 --- a/windows/client-management/mdm/policy-csp-admx-filerecovery.md +++ b/windows/client-management/mdm/policy-csp-admx-filerecovery.md @@ -1,7 +1,8 @@ --- title: ADMX_FileRecovery Policy CSP description: Learn more about the ADMX_FileRecovery Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-filerevocation.md b/windows/client-management/mdm/policy-csp-admx-filerevocation.md index d75b0ff1aa..e17de8381a 100644 --- a/windows/client-management/mdm/policy-csp-admx-filerevocation.md +++ b/windows/client-management/mdm/policy-csp-admx-filerevocation.md @@ -1,7 +1,8 @@ --- title: ADMX_FileRevocation Policy CSP description: Learn more about the ADMX_FileRevocation Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-fileservervssprovider.md b/windows/client-management/mdm/policy-csp-admx-fileservervssprovider.md index f539b5910d..e9b8b96d7f 100644 --- a/windows/client-management/mdm/policy-csp-admx-fileservervssprovider.md +++ b/windows/client-management/mdm/policy-csp-admx-fileservervssprovider.md @@ -1,7 +1,8 @@ --- title: ADMX_FileServerVSSProvider Policy CSP description: Learn more about the ADMX_FileServerVSSProvider Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-filesys.md b/windows/client-management/mdm/policy-csp-admx-filesys.md index 7e30bbd527..33379196d4 100644 --- a/windows/client-management/mdm/policy-csp-admx-filesys.md +++ b/windows/client-management/mdm/policy-csp-admx-filesys.md @@ -1,7 +1,8 @@ --- title: ADMX_FileSys Policy CSP description: Learn more about the ADMX_FileSys Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-folderredirection.md b/windows/client-management/mdm/policy-csp-admx-folderredirection.md index bd04e0fa4f..72c19e4951 100644 --- a/windows/client-management/mdm/policy-csp-admx-folderredirection.md +++ b/windows/client-management/mdm/policy-csp-admx-folderredirection.md @@ -1,7 +1,8 @@ --- title: ADMX_FolderRedirection Policy CSP description: Learn more about the ADMX_FolderRedirection Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-framepanes.md b/windows/client-management/mdm/policy-csp-admx-framepanes.md index a6e699f57e..afba6b4512 100644 --- a/windows/client-management/mdm/policy-csp-admx-framepanes.md +++ b/windows/client-management/mdm/policy-csp-admx-framepanes.md @@ -1,7 +1,8 @@ --- title: ADMX_FramePanes Policy CSP description: Learn more about the ADMX_FramePanes Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-fthsvc.md b/windows/client-management/mdm/policy-csp-admx-fthsvc.md index 6151b18e4e..35b554fc9a 100644 --- a/windows/client-management/mdm/policy-csp-admx-fthsvc.md +++ b/windows/client-management/mdm/policy-csp-admx-fthsvc.md @@ -1,7 +1,8 @@ --- title: ADMX_fthsvc Policy CSP description: Learn more about the ADMX_fthsvc Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-globalization.md b/windows/client-management/mdm/policy-csp-admx-globalization.md index 80d999ad7a..56ed340242 100644 --- a/windows/client-management/mdm/policy-csp-admx-globalization.md +++ b/windows/client-management/mdm/policy-csp-admx-globalization.md @@ -1,7 +1,8 @@ --- title: ADMX_Globalization Policy CSP description: Learn more about the ADMX_Globalization Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-grouppolicy.md b/windows/client-management/mdm/policy-csp-admx-grouppolicy.md index e28587728d..990f6f9dcb 100644 --- a/windows/client-management/mdm/policy-csp-admx-grouppolicy.md +++ b/windows/client-management/mdm/policy-csp-admx-grouppolicy.md @@ -1,7 +1,8 @@ --- title: ADMX_GroupPolicy Policy CSP description: Learn more about the ADMX_GroupPolicy Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-help.md b/windows/client-management/mdm/policy-csp-admx-help.md index fdb73b28f4..5be7157ce1 100644 --- a/windows/client-management/mdm/policy-csp-admx-help.md +++ b/windows/client-management/mdm/policy-csp-admx-help.md @@ -1,7 +1,8 @@ --- title: ADMX_Help Policy CSP description: Learn more about the ADMX_Help Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-helpandsupport.md b/windows/client-management/mdm/policy-csp-admx-helpandsupport.md index 6f4a746867..e2d790f3ee 100644 --- a/windows/client-management/mdm/policy-csp-admx-helpandsupport.md +++ b/windows/client-management/mdm/policy-csp-admx-helpandsupport.md @@ -1,7 +1,8 @@ --- title: ADMX_HelpAndSupport Policy CSP description: Learn more about the ADMX_HelpAndSupport Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-hotspotauth.md b/windows/client-management/mdm/policy-csp-admx-hotspotauth.md index 25af4fd561..9d18ab87a6 100644 --- a/windows/client-management/mdm/policy-csp-admx-hotspotauth.md +++ b/windows/client-management/mdm/policy-csp-admx-hotspotauth.md @@ -1,7 +1,8 @@ --- title: ADMX_hotspotauth Policy CSP description: Learn more about the ADMX_hotspotauth Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-icm.md b/windows/client-management/mdm/policy-csp-admx-icm.md index c1437d3c2c..d844742ecd 100644 --- a/windows/client-management/mdm/policy-csp-admx-icm.md +++ b/windows/client-management/mdm/policy-csp-admx-icm.md @@ -1,7 +1,8 @@ --- title: ADMX_ICM Policy CSP description: Learn more about the ADMX_ICM Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-iis.md b/windows/client-management/mdm/policy-csp-admx-iis.md index 56fbe8386c..e007db0cf0 100644 --- a/windows/client-management/mdm/policy-csp-admx-iis.md +++ b/windows/client-management/mdm/policy-csp-admx-iis.md @@ -1,7 +1,8 @@ --- title: ADMX_IIS Policy CSP description: Learn more about the ADMX_IIS Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-iscsi.md b/windows/client-management/mdm/policy-csp-admx-iscsi.md index 8f386092d9..6f7a7b55be 100644 --- a/windows/client-management/mdm/policy-csp-admx-iscsi.md +++ b/windows/client-management/mdm/policy-csp-admx-iscsi.md @@ -1,7 +1,8 @@ --- title: ADMX_iSCSI Policy CSP description: Learn more about the ADMX_iSCSI Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-kdc.md b/windows/client-management/mdm/policy-csp-admx-kdc.md index 17a430e267..eb6ed09af8 100644 --- a/windows/client-management/mdm/policy-csp-admx-kdc.md +++ b/windows/client-management/mdm/policy-csp-admx-kdc.md @@ -1,7 +1,8 @@ --- title: ADMX_kdc Policy CSP description: Learn more about the ADMX_kdc Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-kerberos.md b/windows/client-management/mdm/policy-csp-admx-kerberos.md index 8458736726..480281a102 100644 --- a/windows/client-management/mdm/policy-csp-admx-kerberos.md +++ b/windows/client-management/mdm/policy-csp-admx-kerberos.md @@ -1,7 +1,8 @@ --- title: ADMX_Kerberos Policy CSP description: Learn more about the ADMX_Kerberos Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-lanmanserver.md b/windows/client-management/mdm/policy-csp-admx-lanmanserver.md index 15984c691c..a8b4c178c4 100644 --- a/windows/client-management/mdm/policy-csp-admx-lanmanserver.md +++ b/windows/client-management/mdm/policy-csp-admx-lanmanserver.md @@ -1,7 +1,8 @@ --- title: ADMX_LanmanServer Policy CSP description: Learn more about the ADMX_LanmanServer Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md index b2fcbf19da..41d3f19fae 100644 --- a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md +++ b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md @@ -1,7 +1,8 @@ --- title: ADMX_LanmanWorkstation Policy CSP description: Learn more about the ADMX_LanmanWorkstation Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-leakdiagnostic.md b/windows/client-management/mdm/policy-csp-admx-leakdiagnostic.md index 794a21e5a0..6b146cf631 100644 --- a/windows/client-management/mdm/policy-csp-admx-leakdiagnostic.md +++ b/windows/client-management/mdm/policy-csp-admx-leakdiagnostic.md @@ -1,7 +1,8 @@ --- title: ADMX_LeakDiagnostic Policy CSP description: Learn more about the ADMX_LeakDiagnostic Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery.md b/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery.md index 636061e02e..e204763874 100644 --- a/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery.md +++ b/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery.md @@ -1,7 +1,8 @@ --- title: ADMX_LinkLayerTopologyDiscovery Policy CSP description: Learn more about the ADMX_LinkLayerTopologyDiscovery Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-locationprovideradm.md b/windows/client-management/mdm/policy-csp-admx-locationprovideradm.md index 872eaf9994..a412891fdb 100644 --- a/windows/client-management/mdm/policy-csp-admx-locationprovideradm.md +++ b/windows/client-management/mdm/policy-csp-admx-locationprovideradm.md @@ -1,7 +1,8 @@ --- title: ADMX_LocationProviderAdm Policy CSP description: Learn more about the ADMX_LocationProviderAdm Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-logon.md b/windows/client-management/mdm/policy-csp-admx-logon.md index dc5b8605ca..f54d096327 100644 --- a/windows/client-management/mdm/policy-csp-admx-logon.md +++ b/windows/client-management/mdm/policy-csp-admx-logon.md @@ -1,7 +1,8 @@ --- title: ADMX_Logon Policy CSP description: Learn more about the ADMX_Logon Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md index 4eee3e095e..6d97074dc2 100644 --- a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md +++ b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md @@ -1,7 +1,8 @@ --- title: ADMX_MicrosoftDefenderAntivirus Policy CSP description: Learn more about the ADMX_MicrosoftDefenderAntivirus Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-mmc.md b/windows/client-management/mdm/policy-csp-admx-mmc.md index 2b2fc19e76..ee0f2f64f1 100644 --- a/windows/client-management/mdm/policy-csp-admx-mmc.md +++ b/windows/client-management/mdm/policy-csp-admx-mmc.md @@ -1,7 +1,8 @@ --- title: ADMX_MMC Policy CSP description: Learn more about the ADMX_MMC Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-mmcsnapins.md b/windows/client-management/mdm/policy-csp-admx-mmcsnapins.md index 91840fc2df..3bfee0b99c 100644 --- a/windows/client-management/mdm/policy-csp-admx-mmcsnapins.md +++ b/windows/client-management/mdm/policy-csp-admx-mmcsnapins.md @@ -1,7 +1,8 @@ --- title: ADMX_MMCSnapins Policy CSP description: Learn more about the ADMX_MMCSnapins Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter.md b/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter.md index ef789f1e59..a1e72125dd 100644 --- a/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter.md +++ b/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter.md @@ -1,7 +1,8 @@ --- title: ADMX_MobilePCMobilityCenter Policy CSP description: Learn more about the ADMX_MobilePCMobilityCenter Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings.md b/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings.md index fd3c2b80c1..2bdad89c22 100644 --- a/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings.md +++ b/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings.md @@ -1,7 +1,8 @@ --- title: ADMX_MobilePCPresentationSettings Policy CSP description: Learn more about the ADMX_MobilePCPresentationSettings Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-msapolicy.md b/windows/client-management/mdm/policy-csp-admx-msapolicy.md index f15b1bf8f8..47fa9b04a4 100644 --- a/windows/client-management/mdm/policy-csp-admx-msapolicy.md +++ b/windows/client-management/mdm/policy-csp-admx-msapolicy.md @@ -1,7 +1,8 @@ --- title: ADMX_MSAPolicy Policy CSP description: Learn more about the ADMX_MSAPolicy Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-msched.md b/windows/client-management/mdm/policy-csp-admx-msched.md index 47f4f1113c..19b53cd8bd 100644 --- a/windows/client-management/mdm/policy-csp-admx-msched.md +++ b/windows/client-management/mdm/policy-csp-admx-msched.md @@ -1,7 +1,8 @@ --- title: ADMX_msched Policy CSP description: Learn more about the ADMX_msched Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-msdt.md b/windows/client-management/mdm/policy-csp-admx-msdt.md index 4824f2f7af..77e9a412d2 100644 --- a/windows/client-management/mdm/policy-csp-admx-msdt.md +++ b/windows/client-management/mdm/policy-csp-admx-msdt.md @@ -1,7 +1,8 @@ --- title: ADMX_MSDT Policy CSP description: Learn more about the ADMX_MSDT Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md index 104e20e9ca..d95bea4d31 100644 --- a/windows/client-management/mdm/policy-csp-admx-msi.md +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -1,7 +1,8 @@ --- title: ADMX_MSI Policy CSP description: Learn more about the ADMX_MSI Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-msifilerecovery.md b/windows/client-management/mdm/policy-csp-admx-msifilerecovery.md index 5fd4e17f27..ddea63e18e 100644 --- a/windows/client-management/mdm/policy-csp-admx-msifilerecovery.md +++ b/windows/client-management/mdm/policy-csp-admx-msifilerecovery.md @@ -1,7 +1,8 @@ --- title: ADMX_MsiFileRecovery Policy CSP description: Learn more about the ADMX_MsiFileRecovery Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-mss-legacy.md b/windows/client-management/mdm/policy-csp-admx-mss-legacy.md index a99b4bd0bf..f30f26a334 100644 --- a/windows/client-management/mdm/policy-csp-admx-mss-legacy.md +++ b/windows/client-management/mdm/policy-csp-admx-mss-legacy.md @@ -1,7 +1,8 @@ --- title: ADMX_MSS-legacy Policy CSP description: Learn more about the ADMX_MSS-legacy Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-nca.md b/windows/client-management/mdm/policy-csp-admx-nca.md index 4c6b4307a3..e1aa9cee16 100644 --- a/windows/client-management/mdm/policy-csp-admx-nca.md +++ b/windows/client-management/mdm/policy-csp-admx-nca.md @@ -1,7 +1,8 @@ --- title: ADMX_nca Policy CSP description: Learn more about the ADMX_nca Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-ncsi.md b/windows/client-management/mdm/policy-csp-admx-ncsi.md index 05752f6756..42de79d204 100644 --- a/windows/client-management/mdm/policy-csp-admx-ncsi.md +++ b/windows/client-management/mdm/policy-csp-admx-ncsi.md @@ -1,7 +1,8 @@ --- title: ADMX_NCSI Policy CSP description: Learn more about the ADMX_NCSI Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-netlogon.md b/windows/client-management/mdm/policy-csp-admx-netlogon.md index 3cad268ba1..7d9ab6185d 100644 --- a/windows/client-management/mdm/policy-csp-admx-netlogon.md +++ b/windows/client-management/mdm/policy-csp-admx-netlogon.md @@ -1,7 +1,8 @@ --- title: ADMX_Netlogon Policy CSP description: Learn more about the ADMX_Netlogon Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-networkconnections.md b/windows/client-management/mdm/policy-csp-admx-networkconnections.md index d79ef60825..9861e1f408 100644 --- a/windows/client-management/mdm/policy-csp-admx-networkconnections.md +++ b/windows/client-management/mdm/policy-csp-admx-networkconnections.md @@ -1,7 +1,8 @@ --- title: ADMX_NetworkConnections Policy CSP description: Learn more about the ADMX_NetworkConnections Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-offlinefiles.md b/windows/client-management/mdm/policy-csp-admx-offlinefiles.md index 1c2b4f1df2..ca14cf11b9 100644 --- a/windows/client-management/mdm/policy-csp-admx-offlinefiles.md +++ b/windows/client-management/mdm/policy-csp-admx-offlinefiles.md @@ -1,7 +1,8 @@ --- title: ADMX_OfflineFiles Policy CSP description: Learn more about the ADMX_OfflineFiles Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-pca.md b/windows/client-management/mdm/policy-csp-admx-pca.md index a2d2187900..12a079ed9c 100644 --- a/windows/client-management/mdm/policy-csp-admx-pca.md +++ b/windows/client-management/mdm/policy-csp-admx-pca.md @@ -1,7 +1,8 @@ --- title: ADMX_pca Policy CSP description: Learn more about the ADMX_pca Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-peertopeercaching.md b/windows/client-management/mdm/policy-csp-admx-peertopeercaching.md index 37985a6c6e..8a5e2e1eed 100644 --- a/windows/client-management/mdm/policy-csp-admx-peertopeercaching.md +++ b/windows/client-management/mdm/policy-csp-admx-peertopeercaching.md @@ -1,7 +1,8 @@ --- title: ADMX_PeerToPeerCaching Policy CSP description: Learn more about the ADMX_PeerToPeerCaching Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-pentraining.md b/windows/client-management/mdm/policy-csp-admx-pentraining.md index 44ee096673..dc5a034d65 100644 --- a/windows/client-management/mdm/policy-csp-admx-pentraining.md +++ b/windows/client-management/mdm/policy-csp-admx-pentraining.md @@ -1,7 +1,8 @@ --- title: ADMX_PenTraining Policy CSP description: Learn more about the ADMX_PenTraining Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-performancediagnostics.md b/windows/client-management/mdm/policy-csp-admx-performancediagnostics.md index d8152d1814..ce8ed0a6be 100644 --- a/windows/client-management/mdm/policy-csp-admx-performancediagnostics.md +++ b/windows/client-management/mdm/policy-csp-admx-performancediagnostics.md @@ -1,7 +1,8 @@ --- title: ADMX_PerformanceDiagnostics Policy CSP description: Learn more about the ADMX_PerformanceDiagnostics Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-power.md b/windows/client-management/mdm/policy-csp-admx-power.md index 0ae111ff74..80cb0391aa 100644 --- a/windows/client-management/mdm/policy-csp-admx-power.md +++ b/windows/client-management/mdm/policy-csp-admx-power.md @@ -1,7 +1,8 @@ --- title: ADMX_Power Policy CSP description: Learn more about the ADMX_Power Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy.md b/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy.md index d16b9ad08c..80bf7ac963 100644 --- a/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy.md +++ b/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy.md @@ -1,7 +1,8 @@ --- title: ADMX_PowerShellExecutionPolicy Policy CSP description: Learn more about the ADMX_PowerShellExecutionPolicy Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-previousversions.md b/windows/client-management/mdm/policy-csp-admx-previousversions.md index 48f1d71724..258e872a33 100644 --- a/windows/client-management/mdm/policy-csp-admx-previousversions.md +++ b/windows/client-management/mdm/policy-csp-admx-previousversions.md @@ -1,7 +1,8 @@ --- title: ADMX_PreviousVersions Policy CSP description: Learn more about the ADMX_PreviousVersions Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-printing.md b/windows/client-management/mdm/policy-csp-admx-printing.md index 3d3913d0a5..2c6b23768b 100644 --- a/windows/client-management/mdm/policy-csp-admx-printing.md +++ b/windows/client-management/mdm/policy-csp-admx-printing.md @@ -1,7 +1,8 @@ --- title: ADMX_Printing Policy CSP description: Learn more about the ADMX_Printing Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-printing2.md b/windows/client-management/mdm/policy-csp-admx-printing2.md index c71f46d09d..dd8543a643 100644 --- a/windows/client-management/mdm/policy-csp-admx-printing2.md +++ b/windows/client-management/mdm/policy-csp-admx-printing2.md @@ -1,7 +1,8 @@ --- title: ADMX_Printing2 Policy CSP description: Learn more about the ADMX_Printing2 Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-programs.md b/windows/client-management/mdm/policy-csp-admx-programs.md index 1c448b67f8..928117fb7b 100644 --- a/windows/client-management/mdm/policy-csp-admx-programs.md +++ b/windows/client-management/mdm/policy-csp-admx-programs.md @@ -1,7 +1,8 @@ --- title: ADMX_Programs Policy CSP description: Learn more about the ADMX_Programs Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-pushtoinstall.md b/windows/client-management/mdm/policy-csp-admx-pushtoinstall.md index 805395134d..21a5f026d6 100644 --- a/windows/client-management/mdm/policy-csp-admx-pushtoinstall.md +++ b/windows/client-management/mdm/policy-csp-admx-pushtoinstall.md @@ -1,7 +1,8 @@ --- title: ADMX_PushToInstall Policy CSP description: Learn more about the ADMX_PushToInstall Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-qos.md b/windows/client-management/mdm/policy-csp-admx-qos.md index 00a0b30f09..121df9124f 100644 --- a/windows/client-management/mdm/policy-csp-admx-qos.md +++ b/windows/client-management/mdm/policy-csp-admx-qos.md @@ -1,7 +1,8 @@ --- title: ADMX_QOS Policy CSP description: Learn more about the ADMX_QOS Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-radar.md b/windows/client-management/mdm/policy-csp-admx-radar.md index ffcba6e38e..9196f8c101 100644 --- a/windows/client-management/mdm/policy-csp-admx-radar.md +++ b/windows/client-management/mdm/policy-csp-admx-radar.md @@ -1,7 +1,8 @@ --- title: ADMX_Radar Policy CSP description: Learn more about the ADMX_Radar Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-reliability.md b/windows/client-management/mdm/policy-csp-admx-reliability.md index c5ac96a8e4..bc92e44fae 100644 --- a/windows/client-management/mdm/policy-csp-admx-reliability.md +++ b/windows/client-management/mdm/policy-csp-admx-reliability.md @@ -1,7 +1,8 @@ --- title: ADMX_Reliability Policy CSP description: Learn more about the ADMX_Reliability Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-remoteassistance.md b/windows/client-management/mdm/policy-csp-admx-remoteassistance.md index fa9cd31f9c..39a5c54ac1 100644 --- a/windows/client-management/mdm/policy-csp-admx-remoteassistance.md +++ b/windows/client-management/mdm/policy-csp-admx-remoteassistance.md @@ -1,7 +1,8 @@ --- title: ADMX_RemoteAssistance Policy CSP description: Learn more about the ADMX_RemoteAssistance Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-removablestorage.md b/windows/client-management/mdm/policy-csp-admx-removablestorage.md index 6010e92b08..6af1242454 100644 --- a/windows/client-management/mdm/policy-csp-admx-removablestorage.md +++ b/windows/client-management/mdm/policy-csp-admx-removablestorage.md @@ -1,7 +1,8 @@ --- title: ADMX_RemovableStorage Policy CSP description: Learn more about the ADMX_RemovableStorage Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-rpc.md b/windows/client-management/mdm/policy-csp-admx-rpc.md index c39da81dc2..20b71871da 100644 --- a/windows/client-management/mdm/policy-csp-admx-rpc.md +++ b/windows/client-management/mdm/policy-csp-admx-rpc.md @@ -1,7 +1,8 @@ --- title: ADMX_RPC Policy CSP description: Learn more about the ADMX_RPC Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-sam.md b/windows/client-management/mdm/policy-csp-admx-sam.md index 8e30372654..29c561bce4 100644 --- a/windows/client-management/mdm/policy-csp-admx-sam.md +++ b/windows/client-management/mdm/policy-csp-admx-sam.md @@ -1,7 +1,8 @@ --- title: ADMX_sam Policy CSP description: Learn more about the ADMX_sam Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-scripts.md b/windows/client-management/mdm/policy-csp-admx-scripts.md index e4f196f9c1..a6f14787c7 100644 --- a/windows/client-management/mdm/policy-csp-admx-scripts.md +++ b/windows/client-management/mdm/policy-csp-admx-scripts.md @@ -1,7 +1,8 @@ --- title: ADMX_Scripts Policy CSP description: Learn more about the ADMX_Scripts Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-sdiageng.md b/windows/client-management/mdm/policy-csp-admx-sdiageng.md index f1a0bd29ec..c7df498781 100644 --- a/windows/client-management/mdm/policy-csp-admx-sdiageng.md +++ b/windows/client-management/mdm/policy-csp-admx-sdiageng.md @@ -1,7 +1,8 @@ --- title: ADMX_sdiageng Policy CSP description: Learn more about the ADMX_sdiageng Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-sdiagschd.md b/windows/client-management/mdm/policy-csp-admx-sdiagschd.md index 449d3b0270..ddbaf8e3a1 100644 --- a/windows/client-management/mdm/policy-csp-admx-sdiagschd.md +++ b/windows/client-management/mdm/policy-csp-admx-sdiagschd.md @@ -1,7 +1,8 @@ --- title: ADMX_sdiagschd Policy CSP description: Learn more about the ADMX_sdiagschd Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-securitycenter.md b/windows/client-management/mdm/policy-csp-admx-securitycenter.md index 5d85d32ab3..f9bd2b2d9c 100644 --- a/windows/client-management/mdm/policy-csp-admx-securitycenter.md +++ b/windows/client-management/mdm/policy-csp-admx-securitycenter.md @@ -1,7 +1,8 @@ --- title: ADMX_Securitycenter Policy CSP description: Learn more about the ADMX_Securitycenter Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-sensors.md b/windows/client-management/mdm/policy-csp-admx-sensors.md index 3702686690..48ddd100cf 100644 --- a/windows/client-management/mdm/policy-csp-admx-sensors.md +++ b/windows/client-management/mdm/policy-csp-admx-sensors.md @@ -1,7 +1,8 @@ --- title: ADMX_Sensors Policy CSP description: Learn more about the ADMX_Sensors Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-servermanager.md b/windows/client-management/mdm/policy-csp-admx-servermanager.md index c61b343f81..3d6347374d 100644 --- a/windows/client-management/mdm/policy-csp-admx-servermanager.md +++ b/windows/client-management/mdm/policy-csp-admx-servermanager.md @@ -1,7 +1,8 @@ --- title: ADMX_ServerManager Policy CSP description: Learn more about the ADMX_ServerManager Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-servicing.md b/windows/client-management/mdm/policy-csp-admx-servicing.md index b7608a80f3..9b97bf82aa 100644 --- a/windows/client-management/mdm/policy-csp-admx-servicing.md +++ b/windows/client-management/mdm/policy-csp-admx-servicing.md @@ -1,7 +1,8 @@ --- title: ADMX_Servicing Policy CSP description: Learn more about the ADMX_Servicing Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-settingsync.md b/windows/client-management/mdm/policy-csp-admx-settingsync.md index 28649a54bb..32ec1c0f80 100644 --- a/windows/client-management/mdm/policy-csp-admx-settingsync.md +++ b/windows/client-management/mdm/policy-csp-admx-settingsync.md @@ -1,7 +1,8 @@ --- title: ADMX_SettingSync Policy CSP description: Learn more about the ADMX_SettingSync Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-sharedfolders.md b/windows/client-management/mdm/policy-csp-admx-sharedfolders.md index dc791f72b5..27e087cf56 100644 --- a/windows/client-management/mdm/policy-csp-admx-sharedfolders.md +++ b/windows/client-management/mdm/policy-csp-admx-sharedfolders.md @@ -1,7 +1,8 @@ --- title: ADMX_SharedFolders Policy CSP description: Learn more about the ADMX_SharedFolders Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-sharing.md b/windows/client-management/mdm/policy-csp-admx-sharing.md index fb685b026e..29aaa13813 100644 --- a/windows/client-management/mdm/policy-csp-admx-sharing.md +++ b/windows/client-management/mdm/policy-csp-admx-sharing.md @@ -1,7 +1,8 @@ --- title: ADMX_Sharing Policy CSP description: Learn more about the ADMX_Sharing Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md b/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md index 87242a5c8d..7868dc6f91 100644 --- a/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md +++ b/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md @@ -1,7 +1,8 @@ --- title: ADMX_ShellCommandPromptRegEditTools Policy CSP description: Learn more about the ADMX_ShellCommandPromptRegEditTools Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-smartcard.md b/windows/client-management/mdm/policy-csp-admx-smartcard.md index f7b65e39b9..f4a71bef5e 100644 --- a/windows/client-management/mdm/policy-csp-admx-smartcard.md +++ b/windows/client-management/mdm/policy-csp-admx-smartcard.md @@ -1,7 +1,8 @@ --- title: ADMX_Smartcard Policy CSP description: Learn more about the ADMX_Smartcard Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-snmp.md b/windows/client-management/mdm/policy-csp-admx-snmp.md index 36fe79b61d..2f50365b26 100644 --- a/windows/client-management/mdm/policy-csp-admx-snmp.md +++ b/windows/client-management/mdm/policy-csp-admx-snmp.md @@ -1,7 +1,8 @@ --- title: ADMX_Snmp Policy CSP description: Learn more about the ADMX_Snmp Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-soundrec.md b/windows/client-management/mdm/policy-csp-admx-soundrec.md index de2a3b6bf9..6094515818 100644 --- a/windows/client-management/mdm/policy-csp-admx-soundrec.md +++ b/windows/client-management/mdm/policy-csp-admx-soundrec.md @@ -1,7 +1,8 @@ --- title: ADMX_SoundRec Policy CSP description: Learn more about the ADMX_SoundRec Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-srmfci.md b/windows/client-management/mdm/policy-csp-admx-srmfci.md index 9f738881cb..d8c7480832 100644 --- a/windows/client-management/mdm/policy-csp-admx-srmfci.md +++ b/windows/client-management/mdm/policy-csp-admx-srmfci.md @@ -1,7 +1,8 @@ --- title: ADMX_srmfci Policy CSP description: Learn more about the ADMX_srmfci Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-startmenu.md b/windows/client-management/mdm/policy-csp-admx-startmenu.md index 7c490ba91b..2a80ace809 100644 --- a/windows/client-management/mdm/policy-csp-admx-startmenu.md +++ b/windows/client-management/mdm/policy-csp-admx-startmenu.md @@ -1,7 +1,8 @@ --- title: ADMX_StartMenu Policy CSP description: Learn more about the ADMX_StartMenu Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-systemrestore.md b/windows/client-management/mdm/policy-csp-admx-systemrestore.md index 5cabd1d034..eeb57dfceb 100644 --- a/windows/client-management/mdm/policy-csp-admx-systemrestore.md +++ b/windows/client-management/mdm/policy-csp-admx-systemrestore.md @@ -1,7 +1,8 @@ --- title: ADMX_SystemRestore Policy CSP description: Learn more about the ADMX_SystemRestore Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel.md b/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel.md index 53afd9ca6d..134dcb28e4 100644 --- a/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel.md +++ b/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel.md @@ -1,7 +1,8 @@ --- title: ADMX_TabletPCInputPanel Policy CSP description: Learn more about the ADMX_TabletPCInputPanel Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-tabletshell.md b/windows/client-management/mdm/policy-csp-admx-tabletshell.md index 54cd7e2993..2958e9e921 100644 --- a/windows/client-management/mdm/policy-csp-admx-tabletshell.md +++ b/windows/client-management/mdm/policy-csp-admx-tabletshell.md @@ -1,7 +1,8 @@ --- title: ADMX_TabletShell Policy CSP description: Learn more about the ADMX_TabletShell Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-taskbar.md b/windows/client-management/mdm/policy-csp-admx-taskbar.md index f2d2086000..a9a78648d1 100644 --- a/windows/client-management/mdm/policy-csp-admx-taskbar.md +++ b/windows/client-management/mdm/policy-csp-admx-taskbar.md @@ -1,7 +1,8 @@ --- title: ADMX_Taskbar Policy CSP description: Learn more about the ADMX_Taskbar Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-tcpip.md b/windows/client-management/mdm/policy-csp-admx-tcpip.md index 2cf61bd6b9..b9eca775bc 100644 --- a/windows/client-management/mdm/policy-csp-admx-tcpip.md +++ b/windows/client-management/mdm/policy-csp-admx-tcpip.md @@ -1,7 +1,8 @@ --- title: ADMX_tcpip Policy CSP description: Learn more about the ADMX_tcpip Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-terminalserver.md b/windows/client-management/mdm/policy-csp-admx-terminalserver.md index d6d10aed92..e5582ef354 100644 --- a/windows/client-management/mdm/policy-csp-admx-terminalserver.md +++ b/windows/client-management/mdm/policy-csp-admx-terminalserver.md @@ -1,7 +1,8 @@ --- title: ADMX_TerminalServer Policy CSP description: Learn more about the ADMX_TerminalServer Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-thumbnails.md b/windows/client-management/mdm/policy-csp-admx-thumbnails.md index bc47c28b99..68ed3bd626 100644 --- a/windows/client-management/mdm/policy-csp-admx-thumbnails.md +++ b/windows/client-management/mdm/policy-csp-admx-thumbnails.md @@ -1,7 +1,8 @@ --- title: ADMX_Thumbnails Policy CSP description: Learn more about the ADMX_Thumbnails Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-touchinput.md b/windows/client-management/mdm/policy-csp-admx-touchinput.md index 0dd7cbbfb3..6c4a106687 100644 --- a/windows/client-management/mdm/policy-csp-admx-touchinput.md +++ b/windows/client-management/mdm/policy-csp-admx-touchinput.md @@ -1,7 +1,8 @@ --- title: ADMX_TouchInput Policy CSP description: Learn more about the ADMX_TouchInput Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-tpm.md b/windows/client-management/mdm/policy-csp-admx-tpm.md index f32dd4464c..d562fe09f8 100644 --- a/windows/client-management/mdm/policy-csp-admx-tpm.md +++ b/windows/client-management/mdm/policy-csp-admx-tpm.md @@ -1,7 +1,8 @@ --- title: ADMX_TPM Policy CSP description: Learn more about the ADMX_TPM Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization.md b/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization.md index 32edc6861a..aa95c5771b 100644 --- a/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization.md +++ b/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization.md @@ -1,7 +1,8 @@ --- title: ADMX_UserExperienceVirtualization Policy CSP description: Learn more about the ADMX_UserExperienceVirtualization Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-userprofiles.md b/windows/client-management/mdm/policy-csp-admx-userprofiles.md index 2283c9803a..e169874574 100644 --- a/windows/client-management/mdm/policy-csp-admx-userprofiles.md +++ b/windows/client-management/mdm/policy-csp-admx-userprofiles.md @@ -1,7 +1,8 @@ --- title: ADMX_UserProfiles Policy CSP description: Learn more about the ADMX_UserProfiles Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-w32time.md b/windows/client-management/mdm/policy-csp-admx-w32time.md index 36500806d4..c5e04d51fe 100644 --- a/windows/client-management/mdm/policy-csp-admx-w32time.md +++ b/windows/client-management/mdm/policy-csp-admx-w32time.md @@ -1,7 +1,8 @@ --- title: ADMX_W32Time Policy CSP description: Learn more about the ADMX_W32Time Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-wcm.md b/windows/client-management/mdm/policy-csp-admx-wcm.md index 67bae2d6f2..eddfd41aa9 100644 --- a/windows/client-management/mdm/policy-csp-admx-wcm.md +++ b/windows/client-management/mdm/policy-csp-admx-wcm.md @@ -1,7 +1,8 @@ --- title: ADMX_WCM Policy CSP description: Learn more about the ADMX_WCM Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-wdi.md b/windows/client-management/mdm/policy-csp-admx-wdi.md index 1c28ee517e..886ee5fbba 100644 --- a/windows/client-management/mdm/policy-csp-admx-wdi.md +++ b/windows/client-management/mdm/policy-csp-admx-wdi.md @@ -1,7 +1,8 @@ --- title: ADMX_WDI Policy CSP description: Learn more about the ADMX_WDI Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-wincal.md b/windows/client-management/mdm/policy-csp-admx-wincal.md index 182bcadb67..fda5e84038 100644 --- a/windows/client-management/mdm/policy-csp-admx-wincal.md +++ b/windows/client-management/mdm/policy-csp-admx-wincal.md @@ -1,7 +1,8 @@ --- title: ADMX_WinCal Policy CSP description: Learn more about the ADMX_WinCal Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-windowscolorsystem.md b/windows/client-management/mdm/policy-csp-admx-windowscolorsystem.md index d975aa7c0c..938407c19d 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowscolorsystem.md +++ b/windows/client-management/mdm/policy-csp-admx-windowscolorsystem.md @@ -1,7 +1,8 @@ --- title: ADMX_WindowsColorSystem Policy CSP description: Learn more about the ADMX_WindowsColorSystem Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-windowsconnectnow.md b/windows/client-management/mdm/policy-csp-admx-windowsconnectnow.md index 581b608823..547df1e902 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsconnectnow.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsconnectnow.md @@ -1,7 +1,8 @@ --- title: ADMX_WindowsConnectNow Policy CSP description: Learn more about the ADMX_WindowsConnectNow Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md b/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md index edcd5eab3e..ee2d66d528 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md @@ -1,7 +1,8 @@ --- title: ADMX_WindowsExplorer Policy CSP description: Learn more about the ADMX_WindowsExplorer Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-windowsmediadrm.md b/windows/client-management/mdm/policy-csp-admx-windowsmediadrm.md index 1e41f5c049..ef7a2157f4 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsmediadrm.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsmediadrm.md @@ -1,7 +1,8 @@ --- title: ADMX_WindowsMediaDRM Policy CSP description: Learn more about the ADMX_WindowsMediaDRM Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer.md b/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer.md index 7f1dc35461..038328fa16 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer.md @@ -1,7 +1,8 @@ --- title: ADMX_WindowsMediaPlayer Policy CSP description: Learn more about the ADMX_WindowsMediaPlayer Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md b/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md index 6839ac8703..999113f8f3 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md @@ -1,7 +1,8 @@ --- title: ADMX_WindowsRemoteManagement Policy CSP description: Learn more about the ADMX_WindowsRemoteManagement Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-windowsstore.md b/windows/client-management/mdm/policy-csp-admx-windowsstore.md index 16548d4632..af0e371994 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsstore.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsstore.md @@ -1,7 +1,8 @@ --- title: ADMX_WindowsStore Policy CSP description: Learn more about the ADMX_WindowsStore Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-wininit.md b/windows/client-management/mdm/policy-csp-admx-wininit.md index 53c453b291..626f2e0cf7 100644 --- a/windows/client-management/mdm/policy-csp-admx-wininit.md +++ b/windows/client-management/mdm/policy-csp-admx-wininit.md @@ -1,7 +1,8 @@ --- title: ADMX_WinInit Policy CSP description: Learn more about the ADMX_WinInit Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-winlogon.md b/windows/client-management/mdm/policy-csp-admx-winlogon.md index 3777efde58..4921e607a7 100644 --- a/windows/client-management/mdm/policy-csp-admx-winlogon.md +++ b/windows/client-management/mdm/policy-csp-admx-winlogon.md @@ -1,7 +1,8 @@ --- title: ADMX_WinLogon Policy CSP description: Learn more about the ADMX_WinLogon Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-winsrv.md b/windows/client-management/mdm/policy-csp-admx-winsrv.md index 4bb456deae..aeb9221473 100644 --- a/windows/client-management/mdm/policy-csp-admx-winsrv.md +++ b/windows/client-management/mdm/policy-csp-admx-winsrv.md @@ -1,7 +1,8 @@ --- title: ADMX_Winsrv Policy CSP description: Learn more about the ADMX_Winsrv Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-wlansvc.md b/windows/client-management/mdm/policy-csp-admx-wlansvc.md index f757409689..27ddcde8a5 100644 --- a/windows/client-management/mdm/policy-csp-admx-wlansvc.md +++ b/windows/client-management/mdm/policy-csp-admx-wlansvc.md @@ -1,7 +1,8 @@ --- title: ADMX_wlansvc Policy CSP description: Learn more about the ADMX_wlansvc Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-wordwheel.md b/windows/client-management/mdm/policy-csp-admx-wordwheel.md index 100d06044e..a9e13d8d5a 100644 --- a/windows/client-management/mdm/policy-csp-admx-wordwheel.md +++ b/windows/client-management/mdm/policy-csp-admx-wordwheel.md @@ -1,7 +1,8 @@ --- title: ADMX_WordWheel Policy CSP description: Learn more about the ADMX_WordWheel Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-workfoldersclient.md b/windows/client-management/mdm/policy-csp-admx-workfoldersclient.md index 0cc0f52149..b89ba70666 100644 --- a/windows/client-management/mdm/policy-csp-admx-workfoldersclient.md +++ b/windows/client-management/mdm/policy-csp-admx-workfoldersclient.md @@ -1,7 +1,8 @@ --- title: ADMX_WorkFoldersClient Policy CSP description: Learn more about the ADMX_WorkFoldersClient Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-admx-wpn.md b/windows/client-management/mdm/policy-csp-admx-wpn.md index b1b7b3fd75..300f775095 100644 --- a/windows/client-management/mdm/policy-csp-admx-wpn.md +++ b/windows/client-management/mdm/policy-csp-admx-wpn.md @@ -1,7 +1,8 @@ --- title: ADMX_WPN Policy CSP description: Learn more about the ADMX_WPN Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-appdeviceinventory.md b/windows/client-management/mdm/policy-csp-appdeviceinventory.md index aa8f597ae9..93ca6fdfaa 100644 --- a/windows/client-management/mdm/policy-csp-appdeviceinventory.md +++ b/windows/client-management/mdm/policy-csp-appdeviceinventory.md @@ -1,7 +1,8 @@ --- title: AppDeviceInventory Policy CSP description: Learn more about the AppDeviceInventory Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-applicationdefaults.md b/windows/client-management/mdm/policy-csp-applicationdefaults.md index 8b9aeb6e3c..91b1fc4ac8 100644 --- a/windows/client-management/mdm/policy-csp-applicationdefaults.md +++ b/windows/client-management/mdm/policy-csp-applicationdefaults.md @@ -1,7 +1,8 @@ --- title: ApplicationDefaults Policy CSP description: Learn more about the ApplicationDefaults Area in Policy CSP. -ms.date: 09/11/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-applicationmanagement.md b/windows/client-management/mdm/policy-csp-applicationmanagement.md index 2fc29f5665..a35a33a38a 100644 --- a/windows/client-management/mdm/policy-csp-applicationmanagement.md +++ b/windows/client-management/mdm/policy-csp-applicationmanagement.md @@ -1,7 +1,8 @@ --- title: ApplicationManagement Policy CSP description: Learn more about the ApplicationManagement Area in Policy CSP. -ms.date: 02/11/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-appruntime.md b/windows/client-management/mdm/policy-csp-appruntime.md index 2b19c52a8c..f350d286be 100644 --- a/windows/client-management/mdm/policy-csp-appruntime.md +++ b/windows/client-management/mdm/policy-csp-appruntime.md @@ -1,7 +1,8 @@ --- title: AppRuntime Policy CSP description: Learn more about the AppRuntime Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-appvirtualization.md b/windows/client-management/mdm/policy-csp-appvirtualization.md index 220712712a..79c7021980 100644 --- a/windows/client-management/mdm/policy-csp-appvirtualization.md +++ b/windows/client-management/mdm/policy-csp-appvirtualization.md @@ -1,7 +1,8 @@ --- title: AppVirtualization Policy CSP description: Learn more about the AppVirtualization Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-attachmentmanager.md b/windows/client-management/mdm/policy-csp-attachmentmanager.md index c6597902db..66a283655a 100644 --- a/windows/client-management/mdm/policy-csp-attachmentmanager.md +++ b/windows/client-management/mdm/policy-csp-attachmentmanager.md @@ -1,7 +1,8 @@ --- title: AttachmentManager Policy CSP description: Learn more about the AttachmentManager Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-audit.md b/windows/client-management/mdm/policy-csp-audit.md index a3a20cf60a..6e6a59f438 100644 --- a/windows/client-management/mdm/policy-csp-audit.md +++ b/windows/client-management/mdm/policy-csp-audit.md @@ -1,7 +1,8 @@ --- title: Audit Policy CSP description: Learn more about the Audit Area in Policy CSP. -ms.date: 10/10/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-authentication.md b/windows/client-management/mdm/policy-csp-authentication.md index bfd166053c..b05b71eb8e 100644 --- a/windows/client-management/mdm/policy-csp-authentication.md +++ b/windows/client-management/mdm/policy-csp-authentication.md @@ -1,7 +1,8 @@ --- title: Authentication Policy CSP description: Learn more about the Authentication Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-autoplay.md b/windows/client-management/mdm/policy-csp-autoplay.md index f94c675d89..955e4d92ab 100644 --- a/windows/client-management/mdm/policy-csp-autoplay.md +++ b/windows/client-management/mdm/policy-csp-autoplay.md @@ -1,7 +1,8 @@ --- title: Autoplay Policy CSP description: Learn more about the Autoplay Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-bitlocker.md b/windows/client-management/mdm/policy-csp-bitlocker.md index 85ba82af82..308853dff2 100644 --- a/windows/client-management/mdm/policy-csp-bitlocker.md +++ b/windows/client-management/mdm/policy-csp-bitlocker.md @@ -1,7 +1,8 @@ --- title: Bitlocker Policy CSP description: Learn more about the Bitlocker Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-bits.md b/windows/client-management/mdm/policy-csp-bits.md index 40fec4ce18..eb4c4c5f2b 100644 --- a/windows/client-management/mdm/policy-csp-bits.md +++ b/windows/client-management/mdm/policy-csp-bits.md @@ -1,7 +1,8 @@ --- title: BITS Policy CSP description: Learn more about the BITS Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-bluetooth.md b/windows/client-management/mdm/policy-csp-bluetooth.md index fc321bd1b1..2155fd2918 100644 --- a/windows/client-management/mdm/policy-csp-bluetooth.md +++ b/windows/client-management/mdm/policy-csp-bluetooth.md @@ -1,7 +1,8 @@ --- title: Bluetooth Policy CSP description: Learn more about the Bluetooth Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index a86b54d3d2..1acad4511f 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -1,7 +1,8 @@ --- title: Browser Policy CSP description: Learn more about the Browser Area in Policy CSP. -ms.date: 09/11/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-camera.md b/windows/client-management/mdm/policy-csp-camera.md index 3882e07879..7e02fa6542 100644 --- a/windows/client-management/mdm/policy-csp-camera.md +++ b/windows/client-management/mdm/policy-csp-camera.md @@ -1,7 +1,8 @@ --- title: Camera Policy CSP description: Learn more about the Camera Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-cellular.md b/windows/client-management/mdm/policy-csp-cellular.md index a2cfae0564..b45e85ec8a 100644 --- a/windows/client-management/mdm/policy-csp-cellular.md +++ b/windows/client-management/mdm/policy-csp-cellular.md @@ -1,7 +1,8 @@ --- title: Cellular Policy CSP description: Learn more about the Cellular Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-clouddesktop.md b/windows/client-management/mdm/policy-csp-clouddesktop.md index cb287ddd00..d216746bc8 100644 --- a/windows/client-management/mdm/policy-csp-clouddesktop.md +++ b/windows/client-management/mdm/policy-csp-clouddesktop.md @@ -1,7 +1,8 @@ --- title: CloudDesktop Policy CSP description: Learn more about the CloudDesktop Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index ddefe2ddfe..157972e7a8 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -1,7 +1,8 @@ --- title: Connectivity Policy CSP description: Learn more about the Connectivity Area in Policy CSP. -ms.date: 02/11/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- @@ -314,7 +315,7 @@ This policy is deprecated. -This policy allows IT admins to turn off the ability to Link a Phone with a PC to continue reading, emailing and other tasks that require linking between Phone and PC. +This policy allows IT admins to turn off the ability to Link a Phone with a PC to continue reading, emailing and other tasks that requires linking between Phone and PC. - If you enable this policy setting, the Windows device will be able to enroll in Phone-PC linking functionality and participate in Continue on PC experiences. @@ -701,7 +702,7 @@ This policy makes all configurable settings in the 'Cellular' Settings page read -This policy allows IT admins to turn off CrossDeviceResume feature to continue tasks, such as browsing file, continue using 1P/3P apps that require linking between Phone and PC. +This policy allows IT admins to turn off CrossDeviceResume feature to continue tasks, such as browsing file, continue using 1. P/ 3. P apps that require linking between Phone and PC. - If you enable this policy setting, the Windows device won't receive any CrossDeviceResume notification. @@ -1012,9 +1013,9 @@ For more information, see [MS15-011: Vulnerability in Group Policy could allow r Determines whether a user can install and configure the Network Bridge. > [!IMPORTANT] -> This setting is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting doesn't apply. +> This settings is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting doesn't apply. -The Network Bridge allows users to create a layer 2 MAC bridge, enabling them to connect two or more network segments together. This connection appears in the Network Connections folder. +The Network Bridge allows users to create a layer 2 MAC bridge, enabling them to connect two or more network segements together. This connection appears in the Network Connections folder. If you disable this setting or don't configure it, the user will be able to create and modify the configuration of a Network Bridge. Enabling this setting doesn't remove an existing Network Bridge from the user's computer. diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md index 62f0079893..14777213d3 100644 --- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md +++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md @@ -1,7 +1,8 @@ --- title: ControlPolicyConflict Policy CSP description: Learn more about the ControlPolicyConflict Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-credentialproviders.md b/windows/client-management/mdm/policy-csp-credentialproviders.md index d73b3ade9c..543e2efb7f 100644 --- a/windows/client-management/mdm/policy-csp-credentialproviders.md +++ b/windows/client-management/mdm/policy-csp-credentialproviders.md @@ -1,7 +1,8 @@ --- title: CredentialProviders Policy CSP description: Learn more about the CredentialProviders Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-credentialsdelegation.md b/windows/client-management/mdm/policy-csp-credentialsdelegation.md index af3cee543f..263eb0058e 100644 --- a/windows/client-management/mdm/policy-csp-credentialsdelegation.md +++ b/windows/client-management/mdm/policy-csp-credentialsdelegation.md @@ -1,7 +1,8 @@ --- title: CredentialsDelegation Policy CSP description: Learn more about the CredentialsDelegation Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-credentialsui.md b/windows/client-management/mdm/policy-csp-credentialsui.md index f6f9d847a7..1e2a4e8319 100644 --- a/windows/client-management/mdm/policy-csp-credentialsui.md +++ b/windows/client-management/mdm/policy-csp-credentialsui.md @@ -1,7 +1,8 @@ --- title: CredentialsUI Policy CSP description: Learn more about the CredentialsUI Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-cryptography.md b/windows/client-management/mdm/policy-csp-cryptography.md index 11bf016054..709e9e57bd 100644 --- a/windows/client-management/mdm/policy-csp-cryptography.md +++ b/windows/client-management/mdm/policy-csp-cryptography.md @@ -1,7 +1,8 @@ --- title: Cryptography Policy CSP description: Learn more about the Cryptography Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-dataprotection.md b/windows/client-management/mdm/policy-csp-dataprotection.md index ed3d5d84d4..be943180ef 100644 --- a/windows/client-management/mdm/policy-csp-dataprotection.md +++ b/windows/client-management/mdm/policy-csp-dataprotection.md @@ -1,7 +1,8 @@ --- title: DataProtection Policy CSP description: Learn more about the DataProtection Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-datausage.md b/windows/client-management/mdm/policy-csp-datausage.md index 37ef82f657..d821a157ad 100644 --- a/windows/client-management/mdm/policy-csp-datausage.md +++ b/windows/client-management/mdm/policy-csp-datausage.md @@ -1,7 +1,8 @@ --- title: DataUsage Policy CSP description: Learn more about the DataUsage Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index fc264fa2a8..885ebb21e6 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -1,7 +1,8 @@ --- title: Defender Policy CSP description: Learn more about the Defender Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-deliveryoptimization.md b/windows/client-management/mdm/policy-csp-deliveryoptimization.md index 6fd24a5ef3..6bf367d3e9 100644 --- a/windows/client-management/mdm/policy-csp-deliveryoptimization.md +++ b/windows/client-management/mdm/policy-csp-deliveryoptimization.md @@ -1,7 +1,8 @@ --- title: DeliveryOptimization Policy CSP description: Learn more about the DeliveryOptimization Area in Policy CSP. -ms.date: 01/21/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-desktop.md b/windows/client-management/mdm/policy-csp-desktop.md index 60c0d9c6aa..c2c1c5c18b 100644 --- a/windows/client-management/mdm/policy-csp-desktop.md +++ b/windows/client-management/mdm/policy-csp-desktop.md @@ -1,7 +1,8 @@ --- title: Desktop Policy CSP description: Learn more about the Desktop Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md index c1806d30f7..eb317efb9d 100644 --- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md +++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md @@ -1,7 +1,8 @@ --- title: DesktopAppInstaller Policy CSP description: Learn more about the DesktopAppInstaller Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-deviceguard.md b/windows/client-management/mdm/policy-csp-deviceguard.md index ba7cfacf34..d015682073 100644 --- a/windows/client-management/mdm/policy-csp-deviceguard.md +++ b/windows/client-management/mdm/policy-csp-deviceguard.md @@ -1,7 +1,8 @@ --- title: DeviceGuard Policy CSP description: Learn more about the DeviceGuard Area in Policy CSP. -ms.date: 01/14/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md b/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md index 271866959b..8bdad4117d 100644 --- a/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md +++ b/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md @@ -1,7 +1,8 @@ --- title: DeviceHealthMonitoring Policy CSP description: Learn more about the DeviceHealthMonitoring Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-deviceinstallation.md b/windows/client-management/mdm/policy-csp-deviceinstallation.md index 87f3608dd1..d4c8aab970 100644 --- a/windows/client-management/mdm/policy-csp-deviceinstallation.md +++ b/windows/client-management/mdm/policy-csp-deviceinstallation.md @@ -1,7 +1,8 @@ --- title: DeviceInstallation Policy CSP description: Learn more about the DeviceInstallation Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-devicelock.md b/windows/client-management/mdm/policy-csp-devicelock.md index c294633d53..4bacc831f5 100644 --- a/windows/client-management/mdm/policy-csp-devicelock.md +++ b/windows/client-management/mdm/policy-csp-devicelock.md @@ -1,7 +1,8 @@ --- title: DeviceLock Policy CSP description: Learn more about the DeviceLock Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-display.md b/windows/client-management/mdm/policy-csp-display.md index 52da6d75c4..2c7e2917eb 100644 --- a/windows/client-management/mdm/policy-csp-display.md +++ b/windows/client-management/mdm/policy-csp-display.md @@ -1,7 +1,8 @@ --- title: Display Policy CSP description: Learn more about the Display Area in Policy CSP. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-dmaguard.md b/windows/client-management/mdm/policy-csp-dmaguard.md index ed3b7b4609..f3c22ca841 100644 --- a/windows/client-management/mdm/policy-csp-dmaguard.md +++ b/windows/client-management/mdm/policy-csp-dmaguard.md @@ -1,7 +1,8 @@ --- title: DmaGuard Policy CSP description: Learn more about the DmaGuard Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-eap.md b/windows/client-management/mdm/policy-csp-eap.md index 14022fde28..040155b5d6 100644 --- a/windows/client-management/mdm/policy-csp-eap.md +++ b/windows/client-management/mdm/policy-csp-eap.md @@ -1,7 +1,8 @@ --- title: Eap Policy CSP description: Learn more about the Eap Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-education.md b/windows/client-management/mdm/policy-csp-education.md index cfd49a1bf0..4efe4c1ad8 100644 --- a/windows/client-management/mdm/policy-csp-education.md +++ b/windows/client-management/mdm/policy-csp-education.md @@ -1,7 +1,8 @@ --- title: Education Policy CSP description: Learn more about the Education Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-enterprisecloudprint.md b/windows/client-management/mdm/policy-csp-enterprisecloudprint.md index 016c5d5a51..0d94ccfd85 100644 --- a/windows/client-management/mdm/policy-csp-enterprisecloudprint.md +++ b/windows/client-management/mdm/policy-csp-enterprisecloudprint.md @@ -1,7 +1,8 @@ --- title: EnterpriseCloudPrint Policy CSP description: Learn more about the EnterpriseCloudPrint Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-errorreporting.md b/windows/client-management/mdm/policy-csp-errorreporting.md index 50e401227e..1fc4e56ebb 100644 --- a/windows/client-management/mdm/policy-csp-errorreporting.md +++ b/windows/client-management/mdm/policy-csp-errorreporting.md @@ -1,7 +1,8 @@ --- title: ErrorReporting Policy CSP description: Learn more about the ErrorReporting Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-eventlogservice.md b/windows/client-management/mdm/policy-csp-eventlogservice.md index 83a5c6c350..e79a85ea8b 100644 --- a/windows/client-management/mdm/policy-csp-eventlogservice.md +++ b/windows/client-management/mdm/policy-csp-eventlogservice.md @@ -1,7 +1,8 @@ --- title: EventLogService Policy CSP description: Learn more about the EventLogService Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index d6932eb1ca..37d22f55dc 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -1,7 +1,8 @@ --- title: Experience Policy CSP description: Learn more about the Experience Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-exploitguard.md b/windows/client-management/mdm/policy-csp-exploitguard.md index 6d947b5cd3..1722439b80 100644 --- a/windows/client-management/mdm/policy-csp-exploitguard.md +++ b/windows/client-management/mdm/policy-csp-exploitguard.md @@ -1,7 +1,8 @@ --- title: ExploitGuard Policy CSP description: Learn more about the ExploitGuard Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-federatedauthentication.md b/windows/client-management/mdm/policy-csp-federatedauthentication.md index 4b4de43f51..da5662f29d 100644 --- a/windows/client-management/mdm/policy-csp-federatedauthentication.md +++ b/windows/client-management/mdm/policy-csp-federatedauthentication.md @@ -1,7 +1,8 @@ --- title: FederatedAuthentication Policy CSP description: Learn more about the FederatedAuthentication Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-fileexplorer.md b/windows/client-management/mdm/policy-csp-fileexplorer.md index 73f6d2a6de..e49af36ddf 100644 --- a/windows/client-management/mdm/policy-csp-fileexplorer.md +++ b/windows/client-management/mdm/policy-csp-fileexplorer.md @@ -1,7 +1,8 @@ --- title: FileExplorer Policy CSP description: Learn more about the FileExplorer Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-filesystem.md b/windows/client-management/mdm/policy-csp-filesystem.md index f1d4135999..bc73918bf9 100644 --- a/windows/client-management/mdm/policy-csp-filesystem.md +++ b/windows/client-management/mdm/policy-csp-filesystem.md @@ -1,7 +1,8 @@ --- title: FileSystem Policy CSP description: Learn more about the FileSystem Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-games.md b/windows/client-management/mdm/policy-csp-games.md index d16bea4048..42f5209042 100644 --- a/windows/client-management/mdm/policy-csp-games.md +++ b/windows/client-management/mdm/policy-csp-games.md @@ -1,7 +1,8 @@ --- title: Games Policy CSP description: Learn more about the Games Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-handwriting.md b/windows/client-management/mdm/policy-csp-handwriting.md index 6cd40803bd..2dc76390b0 100644 --- a/windows/client-management/mdm/policy-csp-handwriting.md +++ b/windows/client-management/mdm/policy-csp-handwriting.md @@ -1,7 +1,8 @@ --- title: Handwriting Policy CSP description: Learn more about the Handwriting Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-humanpresence.md b/windows/client-management/mdm/policy-csp-humanpresence.md index b27018ae74..38c80beebe 100644 --- a/windows/client-management/mdm/policy-csp-humanpresence.md +++ b/windows/client-management/mdm/policy-csp-humanpresence.md @@ -1,7 +1,8 @@ --- title: HumanPresence Policy CSP description: Learn more about the HumanPresence Area in Policy CSP. -ms.date: 01/14/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-internetexplorer.md b/windows/client-management/mdm/policy-csp-internetexplorer.md index 5cb73b8c77..c10d0663c7 100644 --- a/windows/client-management/mdm/policy-csp-internetexplorer.md +++ b/windows/client-management/mdm/policy-csp-internetexplorer.md @@ -1,7 +1,8 @@ --- title: InternetExplorer Policy CSP description: Learn more about the InternetExplorer Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-kerberos.md b/windows/client-management/mdm/policy-csp-kerberos.md index 092f0fcfa3..acc05b4bdf 100644 --- a/windows/client-management/mdm/policy-csp-kerberos.md +++ b/windows/client-management/mdm/policy-csp-kerberos.md @@ -1,7 +1,8 @@ --- title: Kerberos Policy CSP description: Learn more about the Kerberos Area in Policy CSP. -ms.date: 01/31/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-kioskbrowser.md b/windows/client-management/mdm/policy-csp-kioskbrowser.md index ab923304b0..061ecffdfa 100644 --- a/windows/client-management/mdm/policy-csp-kioskbrowser.md +++ b/windows/client-management/mdm/policy-csp-kioskbrowser.md @@ -1,7 +1,8 @@ --- title: KioskBrowser Policy CSP description: Learn more about the KioskBrowser Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-lanmanworkstation.md index b80bf2d206..69d9d6d17c 100644 --- a/windows/client-management/mdm/policy-csp-lanmanworkstation.md +++ b/windows/client-management/mdm/policy-csp-lanmanworkstation.md @@ -1,7 +1,8 @@ --- title: LanmanWorkstation Policy CSP description: Learn more about the LanmanWorkstation Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-licensing.md b/windows/client-management/mdm/policy-csp-licensing.md index 69f8d74490..b57d3f7614 100644 --- a/windows/client-management/mdm/policy-csp-licensing.md +++ b/windows/client-management/mdm/policy-csp-licensing.md @@ -1,7 +1,8 @@ --- title: Licensing Policy CSP description: Learn more about the Licensing Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index d0b6243ed4..9ce6bd86df 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -1,7 +1,8 @@ --- title: LocalPoliciesSecurityOptions Policy CSP description: Learn more about the LocalPoliciesSecurityOptions Area in Policy CSP. -ms.date: 02/11/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- @@ -3864,9 +3865,9 @@ System objects: Strengthen default permissions of internal system objects (e.g., -User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop. This policy setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts used by a standard user. +User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop. This policy setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts used by a standard user. -- Enabled: UIA programs, including Windows Remote Assistance, automatically disable the secure desktop for elevation prompts. If you don't disable the "User Account Control: Switch to the secure desktop when prompting for elevation" policy setting, the prompts appear on the interactive user's desktop instead of the secure desktop. +- Enabled: UIA programs, including Windows Remote Assistance, automatically disable the secure desktop for elevation prompts. If you don't disable the "User Account Control: Switch to the secure desktop when prompting for elevation" policy setting, the prompts appear on the interactive user's desktop instead of the secure desktop. - Disabled: (Default) The secure desktop can be disabled only by the user of the interactive desktop or by disabling the "User Account Control: Switch to the secure desktop when prompting for elevation" policy setting. @@ -3926,9 +3927,9 @@ User Account Control: Allow UIAccess applications to prompt for elevation withou -User Account Control: Behavior of the elevation prompt for administrators running with Administrator protection. This policy setting controls the behavior of the elevation prompt for administrators. The options are: +User Account Control: Behavior of the elevation prompt for administrators running with Administrator protection. This policy setting controls the behavior of the elevation prompt for administrators. The options are: -- Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged credentials. If the user enters valid credentials, the operation continues with the user's highest available privilege. +- Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged credentials. If the user enters valid credentials, the operation continues with the user's highest available privilege. - Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Allow changes or Don't allow. If the user selects Allow changes, the operation continues with the user's highest available privilege. @@ -3990,20 +3991,20 @@ User Account Control: Behavior of the elevation prompt for administrators runnin -User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode This policy setting controls the behavior of the elevation prompt for administrators. The options are: +User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode This policy setting controls the behavior of the elevation prompt for administrators. The options are: -- Elevate without prompting: Allows privileged accounts to perform an operation that requires elevation without requiring consent or credentials. +- Elevate without prompting: Allows privileged accounts to perform an operation that requires elevation without requiring consent or credentials. >[!NOTE] - > Use this option only in the most constrained environments. + > Use this option only in the most constrained environments. -- Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. +- Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. -- Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. +- Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. -- Prompt for credentials: When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. +- Prompt for credentials: When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. -- Prompt for consent: When an operation requires elevation of privilege, the user is prompted to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. +- Prompt for consent: When an operation requires elevation of privilege, the user is prompted to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. - Prompt for consent for non-Windows binaries: (Default) When an operation for a non-Microsoft application requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. @@ -4069,11 +4070,11 @@ User Account Control: Behavior of the elevation prompt for administrators in Adm -User Account Control: Behavior of the elevation prompt for standard users This policy setting controls the behavior of the elevation prompt for standard users. The options are: +User Account Control: Behavior of the elevation prompt for standard users This policy setting controls the behavior of the elevation prompt for standard users. The options are: -- Prompt for credentials: (Default) When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. +- Prompt for credentials: (Default) When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. -- Automatically deny elevation requests: When an operation requires elevation of privilege, a configurable access denied error message is displayed. An enterprise that's running desktops as standard user may choose this setting to reduce help desk calls. +- Automatically deny elevation requests: When an operation requires elevation of privilege, a configurable access denied error message is displayed. An enterprise that's running desktops as standard user may choose this setting to reduce help desk calls. - Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a different user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. @@ -4192,9 +4193,9 @@ User Account Control: Detect application installations and prompt for elevation -User Account Control: Only elevate executable files that are signed and validated This policy setting enforces public key infrastructure (PKI) signature checks for any interactive applications that request elevation of privilege. Enterprise administrators can control which applications are allowed to run by adding certificates to the Trusted Publishers certificate store on local computers. The options are: +User Account Control: Only elevate executable files that are signed and validated This policy setting enforces public key infrastructure (PKI) signature checks for any interactive applications that request elevation of privilege. Enterprise administrators can control which applications are allowed to run by adding certificates to the Trusted Publishers certificate store on local computers. The options are: -- Enabled: Enforces the PKI certification path validation for a given executable file before it's permitted to run. +- Enabled: Enforces the PKI certification path validation for a given executable file before it's permitted to run. - Disabled: (Default) Does not enforce PKI certification path validation before a given executable file is permitted to run. @@ -4254,9 +4255,9 @@ User Account Control: Only elevate executable files that are signed and validate -User Account Control: Only elevate UIAccess applications that are installed in secure locations This policy setting controls whether applications that request to run with a User Interface Accessibility (UIAccess) integrity level must reside in a secure location in the file system. Secure locations are limited to the following: - ..\Program Files\, including subfolders - ..\Windows\system32\ - ..\Program Files (x86)\, including subfolders for 64-bit versions of Windows Note: Windows enforces a public key infrastructure (PKI) signature check on any interactive application that requests to run with a UIAccess integrity level regardless of the state of this security setting. The options are: +User Account Control: Only elevate UIAccess applications that are installed in secure locations This policy setting controls whether applications that request to run with a User Interface Accessibility (UIAccess) integrity level must reside in a secure location in the file system. Secure locations are limited to the following: - ..\Program Files\, including subfolders - ..\Windows\system32\ - ..\Program Files (x86)\, including subfolders for 64-bit versions of Windows Note: Windows enforces a public key infrastructure (PKI) signature check on any interactive application that requests to run with a UIAccess integrity level regardless of the state of this security setting. The options are: -- Enabled: (Default) If an application resides in a secure location in the file system, it runs only with UIAccess integrity. +- Enabled: (Default) If an application resides in a secure location in the file system, it runs only with UIAccess integrity. - Disabled: An application runs with UIAccess integrity even if it doesn't reside in a secure location in the file system. @@ -4316,9 +4317,9 @@ User Account Control: Only elevate UIAccess applications that are installed in s -User Account Control: Turn on Admin Approval Mode This policy setting controls the behavior of all User Account Control (UAC) policy settings for the computer. If you change this policy setting, you must restart your computer. The options are: +User Account Control: Turn on Admin Approval Mode This policy setting controls the behavior of all User Account Control (UAC) policy settings for the computer. If you change this policy setting, you must restart your computer. The options are: -- Enabled: (Default) Admin Approval Mode is enabled. This policy must be enabled and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. +- Enabled: (Default) Admin Approval Mode is enabled. This policy must be enabled and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. - Disabled: Admin Approval Mode and all related UAC policy settings are disabled. @@ -4381,9 +4382,9 @@ User Account Control: Turn on Admin Approval Mode This policy setting controls t -User Account Control: Switch to the secure desktop when prompting for elevation This policy setting controls whether the elevation request prompt is displayed on the interactive user's desktop or the secure desktop. The options are: +User Account Control: Switch to the secure desktop when prompting for elevation This policy setting controls whether the elevation request prompt is displayed on the interactive user's desktop or the secure desktop. The options are: -- Enabled: (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users. +- Enabled: (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users. - Disabled: All elevation requests go to the interactive user's desktop. Prompt behavior policy settings for administrators and standard users are used. @@ -4501,9 +4502,9 @@ User Account Control: Configure type of Admin Approval Mode. This policy setting -User Account Control: Use Admin Approval Mode for the built-in Administrator account This policy setting controls the behavior of Admin Approval Mode for the built-in Administrator account. The options are: +User Account Control: Use Admin Approval Mode for the built-in Administrator account This policy setting controls the behavior of Admin Approval Mode for the built-in Administrator account. The options are: -- Enabled: The built-in Administrator account uses Admin Approval Mode. By default, any operation that requires elevation of privilege will prompt the user to approve the operation. +- Enabled: The built-in Administrator account uses Admin Approval Mode. By default, any operation that requires elevation of privilege will prompt the user to approve the operation. - Disabled: (Default) The built-in Administrator account runs all applications with full administrative privilege. @@ -4563,9 +4564,9 @@ User Account Control: Use Admin Approval Mode for the built-in Administrator acc -User Account Control: Virtualize file and registry write failures to per-user locations This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\system32, or HKLM\Software. The options are: +User Account Control: Virtualize file and registry write failures to per-user locations This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\system32, or HKLM\Software. The options are: -- Enabled: (Default) Application write failures are redirected at run time to defined user locations for both the file system and registry. +- Enabled: (Default) Application write failures are redirected at run time to defined user locations for both the file system and registry. - Disabled: Applications that write data to protected locations fail. diff --git a/windows/client-management/mdm/policy-csp-localusersandgroups.md b/windows/client-management/mdm/policy-csp-localusersandgroups.md index 08570e074e..da2922a942 100644 --- a/windows/client-management/mdm/policy-csp-localusersandgroups.md +++ b/windows/client-management/mdm/policy-csp-localusersandgroups.md @@ -1,7 +1,8 @@ --- title: LocalUsersAndGroups Policy CSP description: Learn more about the LocalUsersAndGroups Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-lockdown.md b/windows/client-management/mdm/policy-csp-lockdown.md index 95f4c33c50..11299e781b 100644 --- a/windows/client-management/mdm/policy-csp-lockdown.md +++ b/windows/client-management/mdm/policy-csp-lockdown.md @@ -1,7 +1,8 @@ --- title: LockDown Policy CSP description: Learn more about the LockDown Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-lsa.md b/windows/client-management/mdm/policy-csp-lsa.md index d29d14edd8..9338d13c66 100644 --- a/windows/client-management/mdm/policy-csp-lsa.md +++ b/windows/client-management/mdm/policy-csp-lsa.md @@ -1,7 +1,8 @@ --- title: LocalSecurityAuthority Policy CSP description: Learn more about the LocalSecurityAuthority Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-maps.md b/windows/client-management/mdm/policy-csp-maps.md index 7dc52aed91..0148a014f0 100644 --- a/windows/client-management/mdm/policy-csp-maps.md +++ b/windows/client-management/mdm/policy-csp-maps.md @@ -1,7 +1,8 @@ --- title: Maps Policy CSP description: Learn more about the Maps Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-memorydump.md b/windows/client-management/mdm/policy-csp-memorydump.md index d6550053a3..ae3cea44fd 100644 --- a/windows/client-management/mdm/policy-csp-memorydump.md +++ b/windows/client-management/mdm/policy-csp-memorydump.md @@ -1,7 +1,8 @@ --- title: MemoryDump Policy CSP description: Learn more about the MemoryDump Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-messaging.md b/windows/client-management/mdm/policy-csp-messaging.md index 30117ff84d..bdb2fb5e55 100644 --- a/windows/client-management/mdm/policy-csp-messaging.md +++ b/windows/client-management/mdm/policy-csp-messaging.md @@ -1,7 +1,8 @@ --- title: Messaging Policy CSP description: Learn more about the Messaging Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-mixedreality.md b/windows/client-management/mdm/policy-csp-mixedreality.md index c2b7e4d9b0..ace4441d82 100644 --- a/windows/client-management/mdm/policy-csp-mixedreality.md +++ b/windows/client-management/mdm/policy-csp-mixedreality.md @@ -1,7 +1,8 @@ --- title: MixedReality Policy CSP description: Learn more about the MixedReality Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-mssecurityguide.md b/windows/client-management/mdm/policy-csp-mssecurityguide.md index 75b88b507b..988bfdc000 100644 --- a/windows/client-management/mdm/policy-csp-mssecurityguide.md +++ b/windows/client-management/mdm/policy-csp-mssecurityguide.md @@ -1,7 +1,8 @@ --- title: MSSecurityGuide Policy CSP description: Learn more about the MSSecurityGuide Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-msslegacy.md b/windows/client-management/mdm/policy-csp-msslegacy.md index 6e60b0d9dd..ad3748f44a 100644 --- a/windows/client-management/mdm/policy-csp-msslegacy.md +++ b/windows/client-management/mdm/policy-csp-msslegacy.md @@ -1,7 +1,8 @@ --- title: MSSLegacy Policy CSP description: Learn more about the MSSLegacy Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-multitasking.md b/windows/client-management/mdm/policy-csp-multitasking.md index 84df0472de..06d1458a87 100644 --- a/windows/client-management/mdm/policy-csp-multitasking.md +++ b/windows/client-management/mdm/policy-csp-multitasking.md @@ -1,7 +1,8 @@ --- title: Multitasking Policy CSP description: Learn more about the Multitasking Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-networkisolation.md b/windows/client-management/mdm/policy-csp-networkisolation.md index 14633df6c8..6ec838f5ad 100644 --- a/windows/client-management/mdm/policy-csp-networkisolation.md +++ b/windows/client-management/mdm/policy-csp-networkisolation.md @@ -1,7 +1,8 @@ --- title: NetworkIsolation Policy CSP description: Learn more about the NetworkIsolation Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-networklistmanager.md b/windows/client-management/mdm/policy-csp-networklistmanager.md index a8158e010d..71e78973a4 100644 --- a/windows/client-management/mdm/policy-csp-networklistmanager.md +++ b/windows/client-management/mdm/policy-csp-networklistmanager.md @@ -1,7 +1,8 @@ --- title: NetworkListManager Policy CSP description: Learn more about the NetworkListManager Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-newsandinterests.md b/windows/client-management/mdm/policy-csp-newsandinterests.md index b070afc551..fe79c499b0 100644 --- a/windows/client-management/mdm/policy-csp-newsandinterests.md +++ b/windows/client-management/mdm/policy-csp-newsandinterests.md @@ -1,7 +1,8 @@ --- title: NewsAndInterests Policy CSP description: Learn more about the NewsAndInterests Area in Policy CSP. -ms.date: 02/11/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-notifications.md b/windows/client-management/mdm/policy-csp-notifications.md index 8c03b26633..30942a896d 100644 --- a/windows/client-management/mdm/policy-csp-notifications.md +++ b/windows/client-management/mdm/policy-csp-notifications.md @@ -1,7 +1,8 @@ --- title: Notifications Policy CSP description: Learn more about the Notifications Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-power.md b/windows/client-management/mdm/policy-csp-power.md index 165845af43..8e6e557bb7 100644 --- a/windows/client-management/mdm/policy-csp-power.md +++ b/windows/client-management/mdm/policy-csp-power.md @@ -1,7 +1,8 @@ --- title: Power Policy CSP description: Learn more about the Power Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-printers.md b/windows/client-management/mdm/policy-csp-printers.md index b852afb0b4..cb984a7530 100644 --- a/windows/client-management/mdm/policy-csp-printers.md +++ b/windows/client-management/mdm/policy-csp-printers.md @@ -1,7 +1,8 @@ --- title: Printers Policy CSP description: Learn more about the Printers Area in Policy CSP. -ms.date: 01/14/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-privacy.md b/windows/client-management/mdm/policy-csp-privacy.md index 35949bfb98..6ef4648bc0 100644 --- a/windows/client-management/mdm/policy-csp-privacy.md +++ b/windows/client-management/mdm/policy-csp-privacy.md @@ -1,7 +1,8 @@ --- title: Privacy Policy CSP description: Learn more about the Privacy Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-remoteassistance.md b/windows/client-management/mdm/policy-csp-remoteassistance.md index 1e190204ac..7e150cadbe 100644 --- a/windows/client-management/mdm/policy-csp-remoteassistance.md +++ b/windows/client-management/mdm/policy-csp-remoteassistance.md @@ -1,7 +1,8 @@ --- title: RemoteAssistance Policy CSP description: Learn more about the RemoteAssistance Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-remotedesktop.md b/windows/client-management/mdm/policy-csp-remotedesktop.md index f549cfc712..b6a52d4ce2 100644 --- a/windows/client-management/mdm/policy-csp-remotedesktop.md +++ b/windows/client-management/mdm/policy-csp-remotedesktop.md @@ -1,7 +1,8 @@ --- title: RemoteDesktop Policy CSP description: Learn more about the RemoteDesktop Area in Policy CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-remotedesktopservices.md b/windows/client-management/mdm/policy-csp-remotedesktopservices.md index 898fb3e01b..6075c67e97 100644 --- a/windows/client-management/mdm/policy-csp-remotedesktopservices.md +++ b/windows/client-management/mdm/policy-csp-remotedesktopservices.md @@ -1,7 +1,8 @@ --- title: RemoteDesktopServices Policy CSP description: Learn more about the RemoteDesktopServices Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-remotemanagement.md b/windows/client-management/mdm/policy-csp-remotemanagement.md index 0f19f54970..2269c3279d 100644 --- a/windows/client-management/mdm/policy-csp-remotemanagement.md +++ b/windows/client-management/mdm/policy-csp-remotemanagement.md @@ -1,7 +1,8 @@ --- title: RemoteManagement Policy CSP description: Learn more about the RemoteManagement Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-remoteprocedurecall.md b/windows/client-management/mdm/policy-csp-remoteprocedurecall.md index 53395cdd0b..891a76c576 100644 --- a/windows/client-management/mdm/policy-csp-remoteprocedurecall.md +++ b/windows/client-management/mdm/policy-csp-remoteprocedurecall.md @@ -1,7 +1,8 @@ --- title: RemoteProcedureCall Policy CSP description: Learn more about the RemoteProcedureCall Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-remoteshell.md b/windows/client-management/mdm/policy-csp-remoteshell.md index e7c0d076a7..e8ec5c3a48 100644 --- a/windows/client-management/mdm/policy-csp-remoteshell.md +++ b/windows/client-management/mdm/policy-csp-remoteshell.md @@ -1,7 +1,8 @@ --- title: RemoteShell Policy CSP description: Learn more about the RemoteShell Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-restrictedgroups.md b/windows/client-management/mdm/policy-csp-restrictedgroups.md index 6c8af25f6a..330359312f 100644 --- a/windows/client-management/mdm/policy-csp-restrictedgroups.md +++ b/windows/client-management/mdm/policy-csp-restrictedgroups.md @@ -1,7 +1,8 @@ --- title: RestrictedGroups Policy CSP description: Learn more about the RestrictedGroups Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-search.md b/windows/client-management/mdm/policy-csp-search.md index fc7b78d250..a0c7802840 100644 --- a/windows/client-management/mdm/policy-csp-search.md +++ b/windows/client-management/mdm/policy-csp-search.md @@ -1,7 +1,8 @@ --- title: Search Policy CSP description: Learn more about the Search Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-security.md b/windows/client-management/mdm/policy-csp-security.md index 25e55a8941..a640213a1c 100644 --- a/windows/client-management/mdm/policy-csp-security.md +++ b/windows/client-management/mdm/policy-csp-security.md @@ -1,7 +1,8 @@ --- title: Security Policy CSP description: Learn more about the Security Area in Policy CSP. -ms.date: 04/10/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md index 46c10a8e9a..0b7daa00a9 100644 --- a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md +++ b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md @@ -1,7 +1,8 @@ --- title: ServiceControlManager Policy CSP description: Learn more about the ServiceControlManager Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-settings.md b/windows/client-management/mdm/policy-csp-settings.md index bf9e5d11f5..89c42f0030 100644 --- a/windows/client-management/mdm/policy-csp-settings.md +++ b/windows/client-management/mdm/policy-csp-settings.md @@ -1,7 +1,8 @@ --- title: Settings Policy CSP description: Learn more about the Settings Area in Policy CSP. -ms.date: 05/20/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-settingssync.md b/windows/client-management/mdm/policy-csp-settingssync.md index 5016dff037..9b8ffbd08d 100644 --- a/windows/client-management/mdm/policy-csp-settingssync.md +++ b/windows/client-management/mdm/policy-csp-settingssync.md @@ -1,7 +1,8 @@ --- title: SettingsSync Policy CSP description: Learn more about the SettingsSync Area in Policy CSP. -ms.date: 02/11/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-smartscreen.md b/windows/client-management/mdm/policy-csp-smartscreen.md index 166eacb4b4..6f7fd23280 100644 --- a/windows/client-management/mdm/policy-csp-smartscreen.md +++ b/windows/client-management/mdm/policy-csp-smartscreen.md @@ -1,7 +1,8 @@ --- title: SmartScreen Policy CSP description: Learn more about the SmartScreen Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-speakforme.md b/windows/client-management/mdm/policy-csp-speakforme.md index b1be7a5fa4..d03ff6ce59 100644 --- a/windows/client-management/mdm/policy-csp-speakforme.md +++ b/windows/client-management/mdm/policy-csp-speakforme.md @@ -1,7 +1,8 @@ --- title: SpeakForMe Policy CSP description: Learn more about the SpeakForMe Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-speech.md b/windows/client-management/mdm/policy-csp-speech.md index 437f917212..7f7060963f 100644 --- a/windows/client-management/mdm/policy-csp-speech.md +++ b/windows/client-management/mdm/policy-csp-speech.md @@ -1,7 +1,8 @@ --- title: Speech Policy CSP description: Learn more about the Speech Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-start.md b/windows/client-management/mdm/policy-csp-start.md index bd79220cf2..8b02053b78 100644 --- a/windows/client-management/mdm/policy-csp-start.md +++ b/windows/client-management/mdm/policy-csp-start.md @@ -1,7 +1,8 @@ --- title: Start Policy CSP description: Learn more about the Start Area in Policy CSP. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-stickers.md b/windows/client-management/mdm/policy-csp-stickers.md index 34b5c89385..ce1b8bc8d9 100644 --- a/windows/client-management/mdm/policy-csp-stickers.md +++ b/windows/client-management/mdm/policy-csp-stickers.md @@ -1,7 +1,8 @@ --- title: Stickers Policy CSP description: Learn more about the Stickers Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-storage.md b/windows/client-management/mdm/policy-csp-storage.md index 78f789eba8..ef35797a4d 100644 --- a/windows/client-management/mdm/policy-csp-storage.md +++ b/windows/client-management/mdm/policy-csp-storage.md @@ -1,7 +1,8 @@ --- title: Storage Policy CSP description: Learn more about the Storage Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-sudo.md b/windows/client-management/mdm/policy-csp-sudo.md index 796c69e84b..eaa5e96654 100644 --- a/windows/client-management/mdm/policy-csp-sudo.md +++ b/windows/client-management/mdm/policy-csp-sudo.md @@ -1,7 +1,8 @@ --- title: Sudo Policy CSP description: Learn more about the Sudo Area in Policy CSP. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-system.md b/windows/client-management/mdm/policy-csp-system.md index 1f4fbbaa1e..98fd8a3ee9 100644 --- a/windows/client-management/mdm/policy-csp-system.md +++ b/windows/client-management/mdm/policy-csp-system.md @@ -1,7 +1,8 @@ --- title: System Policy CSP description: Learn more about the System Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-systemservices.md b/windows/client-management/mdm/policy-csp-systemservices.md index 10d548c65f..028d0720fb 100644 --- a/windows/client-management/mdm/policy-csp-systemservices.md +++ b/windows/client-management/mdm/policy-csp-systemservices.md @@ -1,7 +1,8 @@ --- title: SystemServices Policy CSP description: Learn more about the SystemServices Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-taskmanager.md b/windows/client-management/mdm/policy-csp-taskmanager.md index 439cfdb8d3..0de2582caa 100644 --- a/windows/client-management/mdm/policy-csp-taskmanager.md +++ b/windows/client-management/mdm/policy-csp-taskmanager.md @@ -1,7 +1,8 @@ --- title: TaskManager Policy CSP description: Learn more about the TaskManager Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-taskscheduler.md b/windows/client-management/mdm/policy-csp-taskscheduler.md index bfe95ab006..d8eae077b9 100644 --- a/windows/client-management/mdm/policy-csp-taskscheduler.md +++ b/windows/client-management/mdm/policy-csp-taskscheduler.md @@ -1,7 +1,8 @@ --- title: TaskScheduler Policy CSP description: Learn more about the TaskScheduler Area in Policy CSP. -ms.date: 09/11/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-tenantdefinedtelemetry.md b/windows/client-management/mdm/policy-csp-tenantdefinedtelemetry.md index 6c9181ab8c..00a0d03419 100644 --- a/windows/client-management/mdm/policy-csp-tenantdefinedtelemetry.md +++ b/windows/client-management/mdm/policy-csp-tenantdefinedtelemetry.md @@ -1,7 +1,8 @@ --- title: TenantDefinedTelemetry Policy CSP description: Learn more about the TenantDefinedTelemetry Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-tenantrestrictions.md b/windows/client-management/mdm/policy-csp-tenantrestrictions.md index 536b1b741f..92aabbaa29 100644 --- a/windows/client-management/mdm/policy-csp-tenantrestrictions.md +++ b/windows/client-management/mdm/policy-csp-tenantrestrictions.md @@ -1,7 +1,8 @@ --- title: TenantRestrictions Policy CSP description: Learn more about the TenantRestrictions Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-textinput.md b/windows/client-management/mdm/policy-csp-textinput.md index ef469c7c40..aeb348c64d 100644 --- a/windows/client-management/mdm/policy-csp-textinput.md +++ b/windows/client-management/mdm/policy-csp-textinput.md @@ -1,7 +1,8 @@ --- title: TextInput Policy CSP description: Learn more about the TextInput Area in Policy CSP. -ms.date: 11/05/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-timelanguagesettings.md b/windows/client-management/mdm/policy-csp-timelanguagesettings.md index cfd36f3bb7..46ccf7ac9e 100644 --- a/windows/client-management/mdm/policy-csp-timelanguagesettings.md +++ b/windows/client-management/mdm/policy-csp-timelanguagesettings.md @@ -1,7 +1,8 @@ --- title: TimeLanguageSettings Policy CSP description: Learn more about the TimeLanguageSettings Area in Policy CSP. -ms.date: 04/10/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-troubleshooting.md b/windows/client-management/mdm/policy-csp-troubleshooting.md index 4e27dcdaee..9445141187 100644 --- a/windows/client-management/mdm/policy-csp-troubleshooting.md +++ b/windows/client-management/mdm/policy-csp-troubleshooting.md @@ -1,7 +1,8 @@ --- title: Troubleshooting Policy CSP description: Learn more about the Troubleshooting Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 19a069926b..23b1f025ff 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -1,7 +1,8 @@ --- title: Update Policy CSP description: Learn more about the Update Area in Policy CSP. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 68db80419e..c489be1733 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -1,7 +1,8 @@ --- title: UserRights Policy CSP description: Learn more about the UserRights Area in Policy CSP. -ms.date: 09/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-virtualizationbasedtechnology.md b/windows/client-management/mdm/policy-csp-virtualizationbasedtechnology.md index bfea6628c8..2d9385587a 100644 --- a/windows/client-management/mdm/policy-csp-virtualizationbasedtechnology.md +++ b/windows/client-management/mdm/policy-csp-virtualizationbasedtechnology.md @@ -1,7 +1,8 @@ --- title: VirtualizationBasedTechnology Policy CSP description: Learn more about the VirtualizationBasedTechnology Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-webthreatdefense.md b/windows/client-management/mdm/policy-csp-webthreatdefense.md index 08d092b065..7b29ec716d 100644 --- a/windows/client-management/mdm/policy-csp-webthreatdefense.md +++ b/windows/client-management/mdm/policy-csp-webthreatdefense.md @@ -1,7 +1,8 @@ --- title: WebThreatDefense Policy CSP description: Learn more about the WebThreatDefense Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-wifi.md b/windows/client-management/mdm/policy-csp-wifi.md index 547985d9b2..9629567316 100644 --- a/windows/client-management/mdm/policy-csp-wifi.md +++ b/windows/client-management/mdm/policy-csp-wifi.md @@ -1,7 +1,8 @@ --- title: Wifi Policy CSP description: Learn more about the Wifi Area in Policy CSP. -ms.date: 11/05/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-windowsai.md b/windows/client-management/mdm/policy-csp-windowsai.md index 2188f397f9..64a8c63abe 100644 --- a/windows/client-management/mdm/policy-csp-windowsai.md +++ b/windows/client-management/mdm/policy-csp-windowsai.md @@ -1,7 +1,8 @@ --- title: WindowsAI Policy CSP description: Learn more about the WindowsAI Area in Policy CSP. -ms.date: 02/11/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-windowsautopilot.md b/windows/client-management/mdm/policy-csp-windowsautopilot.md index 1e3b68c37a..f10f3f5b34 100644 --- a/windows/client-management/mdm/policy-csp-windowsautopilot.md +++ b/windows/client-management/mdm/policy-csp-windowsautopilot.md @@ -1,7 +1,8 @@ --- title: WindowsAutopilot Policy CSP description: Learn more about the WindowsAutopilot Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md index ae7bafe0cf..c6e242ce9b 100644 --- a/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md +++ b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md @@ -1,7 +1,8 @@ --- title: WindowsConnectionManager Policy CSP description: Learn more about the WindowsConnectionManager Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md index bc665f2973..5893ab6810 100644 --- a/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md +++ b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md @@ -1,7 +1,8 @@ --- title: WindowsDefenderSecurityCenter Policy CSP description: Learn more about the WindowsDefenderSecurityCenter Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-windowsinkworkspace.md b/windows/client-management/mdm/policy-csp-windowsinkworkspace.md index c84c0bded7..541efe7904 100644 --- a/windows/client-management/mdm/policy-csp-windowsinkworkspace.md +++ b/windows/client-management/mdm/policy-csp-windowsinkworkspace.md @@ -1,7 +1,8 @@ --- title: WindowsInkWorkspace Policy CSP description: Learn more about the WindowsInkWorkspace Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-windowslogon.md b/windows/client-management/mdm/policy-csp-windowslogon.md index 64a1352741..8988bf7de4 100644 --- a/windows/client-management/mdm/policy-csp-windowslogon.md +++ b/windows/client-management/mdm/policy-csp-windowslogon.md @@ -1,7 +1,8 @@ --- title: WindowsLogon Policy CSP description: Learn more about the WindowsLogon Area in Policy CSP. -ms.date: 11/26/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-windowspowershell.md b/windows/client-management/mdm/policy-csp-windowspowershell.md index 9e4a87efb2..b69ea72761 100644 --- a/windows/client-management/mdm/policy-csp-windowspowershell.md +++ b/windows/client-management/mdm/policy-csp-windowspowershell.md @@ -1,7 +1,8 @@ --- title: WindowsPowerShell Policy CSP description: Learn more about the WindowsPowerShell Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-windowssandbox.md b/windows/client-management/mdm/policy-csp-windowssandbox.md index 3c26ac2f1a..d0946277b5 100644 --- a/windows/client-management/mdm/policy-csp-windowssandbox.md +++ b/windows/client-management/mdm/policy-csp-windowssandbox.md @@ -1,7 +1,8 @@ --- title: WindowsSandbox Policy CSP description: Learn more about the WindowsSandbox Area in Policy CSP. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/policy-csp-wirelessdisplay.md b/windows/client-management/mdm/policy-csp-wirelessdisplay.md index 70e8e67fba..9a7729d8ac 100644 --- a/windows/client-management/mdm/policy-csp-wirelessdisplay.md +++ b/windows/client-management/mdm/policy-csp-wirelessdisplay.md @@ -1,7 +1,8 @@ --- title: WirelessDisplay Policy CSP description: Learn more about the WirelessDisplay Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/printerprovisioning-csp.md b/windows/client-management/mdm/printerprovisioning-csp.md index 8667239d07..6b09526d28 100644 --- a/windows/client-management/mdm/printerprovisioning-csp.md +++ b/windows/client-management/mdm/printerprovisioning-csp.md @@ -1,7 +1,8 @@ --- title: PrinterProvisioning CSP description: Learn more about the PrinterProvisioning CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/printerprovisioning-ddf-file.md b/windows/client-management/mdm/printerprovisioning-ddf-file.md index e4db037ecb..3929db5f29 100644 --- a/windows/client-management/mdm/printerprovisioning-ddf-file.md +++ b/windows/client-management/mdm/printerprovisioning-ddf-file.md @@ -1,7 +1,8 @@ --- title: PrinterProvisioning DDF file description: View the XML file containing the device description framework (DDF) for the PrinterProvisioning configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/reboot-csp.md b/windows/client-management/mdm/reboot-csp.md index 7b8903d816..6280f7e382 100644 --- a/windows/client-management/mdm/reboot-csp.md +++ b/windows/client-management/mdm/reboot-csp.md @@ -1,7 +1,8 @@ --- title: Reboot CSP description: Learn more about the Reboot CSP. -ms.date: 02/11/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/reboot-ddf-file.md b/windows/client-management/mdm/reboot-ddf-file.md index 6a23c0924b..af569e0d56 100644 --- a/windows/client-management/mdm/reboot-ddf-file.md +++ b/windows/client-management/mdm/reboot-ddf-file.md @@ -1,7 +1,8 @@ --- title: Reboot DDF file description: View the XML file containing the device description framework (DDF) for the Reboot configuration service provider. -ms.date: 02/11/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/remotewipe-csp.md b/windows/client-management/mdm/remotewipe-csp.md index 1c0afff55f..97af6fd97c 100644 --- a/windows/client-management/mdm/remotewipe-csp.md +++ b/windows/client-management/mdm/remotewipe-csp.md @@ -1,7 +1,8 @@ --- title: RemoteWipe CSP description: Learn more about the RemoteWipe CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/remotewipe-ddf-file.md b/windows/client-management/mdm/remotewipe-ddf-file.md index 6ec9d27e89..40776b4b16 100644 --- a/windows/client-management/mdm/remotewipe-ddf-file.md +++ b/windows/client-management/mdm/remotewipe-ddf-file.md @@ -1,7 +1,8 @@ --- title: RemoteWipe DDF file description: View the XML file containing the device description framework (DDF) for the RemoteWipe configuration service provider. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/rootcacertificates-csp.md b/windows/client-management/mdm/rootcacertificates-csp.md index 6445586c10..6bb6c3faf5 100644 --- a/windows/client-management/mdm/rootcacertificates-csp.md +++ b/windows/client-management/mdm/rootcacertificates-csp.md @@ -1,7 +1,8 @@ --- title: RootCATrustedCertificates CSP description: Learn more about the RootCATrustedCertificates CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/rootcacertificates-ddf-file.md b/windows/client-management/mdm/rootcacertificates-ddf-file.md index 5479190d60..3528cce7c2 100644 --- a/windows/client-management/mdm/rootcacertificates-ddf-file.md +++ b/windows/client-management/mdm/rootcacertificates-ddf-file.md @@ -1,7 +1,8 @@ --- title: RootCATrustedCertificates DDF file description: View the XML file containing the device description framework (DDF) for the RootCATrustedCertificates configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/secureassessment-csp.md b/windows/client-management/mdm/secureassessment-csp.md index 172e2ef819..752bd84fea 100644 --- a/windows/client-management/mdm/secureassessment-csp.md +++ b/windows/client-management/mdm/secureassessment-csp.md @@ -1,7 +1,8 @@ --- title: SecureAssessment CSP description: Learn more about the SecureAssessment CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/secureassessment-ddf-file.md b/windows/client-management/mdm/secureassessment-ddf-file.md index 7d49cb3604..eb02e07a68 100644 --- a/windows/client-management/mdm/secureassessment-ddf-file.md +++ b/windows/client-management/mdm/secureassessment-ddf-file.md @@ -1,7 +1,8 @@ --- title: SecureAssessment DDF file description: View the XML file containing the device description framework (DDF) for the SecureAssessment configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/sharedpc-csp.md b/windows/client-management/mdm/sharedpc-csp.md index bdff7ac7bd..f78f9cba3b 100644 --- a/windows/client-management/mdm/sharedpc-csp.md +++ b/windows/client-management/mdm/sharedpc-csp.md @@ -1,7 +1,8 @@ --- title: SharedPC CSP description: Learn more about the SharedPC CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/sharedpc-ddf-file.md b/windows/client-management/mdm/sharedpc-ddf-file.md index 4412297df6..353d0ba339 100644 --- a/windows/client-management/mdm/sharedpc-ddf-file.md +++ b/windows/client-management/mdm/sharedpc-ddf-file.md @@ -1,7 +1,8 @@ --- title: SharedPC DDF file description: View the XML file containing the device description framework (DDF) for the SharedPC configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/supl-csp.md b/windows/client-management/mdm/supl-csp.md index 687edec2d2..7a65e1a5e3 100644 --- a/windows/client-management/mdm/supl-csp.md +++ b/windows/client-management/mdm/supl-csp.md @@ -1,7 +1,8 @@ --- title: SUPL CSP description: Learn more about the SUPL CSP. -ms.date: 11/27/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/supl-ddf-file.md b/windows/client-management/mdm/supl-ddf-file.md index 0797c3447b..64f70d8fef 100644 --- a/windows/client-management/mdm/supl-ddf-file.md +++ b/windows/client-management/mdm/supl-ddf-file.md @@ -1,7 +1,8 @@ --- title: SUPL DDF file description: View the XML file containing the device description framework (DDF) for the SUPL configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/surfacehub-csp.md b/windows/client-management/mdm/surfacehub-csp.md index 663982ef0f..b13fdc33e3 100644 --- a/windows/client-management/mdm/surfacehub-csp.md +++ b/windows/client-management/mdm/surfacehub-csp.md @@ -1,7 +1,8 @@ --- title: SurfaceHub CSP description: Learn more about the SurfaceHub CSP. -ms.date: 08/16/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/surfacehub-ddf-file.md b/windows/client-management/mdm/surfacehub-ddf-file.md index 1193b28214..575f8e582a 100644 --- a/windows/client-management/mdm/surfacehub-ddf-file.md +++ b/windows/client-management/mdm/surfacehub-ddf-file.md @@ -1,7 +1,8 @@ --- title: SurfaceHub DDF file description: View the XML file containing the device description framework (DDF) for the SurfaceHub configuration service provider. -ms.date: 08/16/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/vpnv2-csp.md b/windows/client-management/mdm/vpnv2-csp.md index f8ca2e1a8a..9c7df2dfd8 100644 --- a/windows/client-management/mdm/vpnv2-csp.md +++ b/windows/client-management/mdm/vpnv2-csp.md @@ -1,7 +1,8 @@ --- title: VPNv2 CSP description: Learn more about the VPNv2 CSP. -ms.date: 01/14/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/vpnv2-ddf-file.md b/windows/client-management/mdm/vpnv2-ddf-file.md index 8927c4cc29..2b6a1f45d4 100644 --- a/windows/client-management/mdm/vpnv2-ddf-file.md +++ b/windows/client-management/mdm/vpnv2-ddf-file.md @@ -1,7 +1,8 @@ --- title: VPNv2 DDF file description: View the XML file containing the device description framework (DDF) for the VPNv2 configuration service provider. -ms.date: 01/14/2025 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/wifi-csp.md b/windows/client-management/mdm/wifi-csp.md index da583b8cd9..33d21ef260 100644 --- a/windows/client-management/mdm/wifi-csp.md +++ b/windows/client-management/mdm/wifi-csp.md @@ -1,7 +1,8 @@ --- title: WiFi CSP description: Learn more about the WiFi CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/wifi-ddf-file.md b/windows/client-management/mdm/wifi-ddf-file.md index a2a8cf4407..5b19466938 100644 --- a/windows/client-management/mdm/wifi-ddf-file.md +++ b/windows/client-management/mdm/wifi-ddf-file.md @@ -1,7 +1,8 @@ --- title: WiFi DDF file description: View the XML file containing the device description framework (DDF) for the WiFi configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md index 10546d7713..0e493f19d0 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md @@ -1,7 +1,8 @@ --- title: WindowsDefenderApplicationGuard CSP description: Learn more about the WindowsDefenderApplicationGuard CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md index 06f96f2518..9af969aacd 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md @@ -1,7 +1,8 @@ --- title: WindowsDefenderApplicationGuard DDF file description: View the XML file containing the device description framework (DDF) for the WindowsDefenderApplicationGuard configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/windowslicensing-csp.md b/windows/client-management/mdm/windowslicensing-csp.md index 91e5d7b4ea..bef27c7ed9 100644 --- a/windows/client-management/mdm/windowslicensing-csp.md +++ b/windows/client-management/mdm/windowslicensing-csp.md @@ -1,7 +1,8 @@ --- title: WindowsLicensing CSP description: Learn more about the WindowsLicensing CSP. -ms.date: 08/06/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/windowslicensing-ddf-file.md b/windows/client-management/mdm/windowslicensing-ddf-file.md index d2abdc9fc4..22e3081e8b 100644 --- a/windows/client-management/mdm/windowslicensing-ddf-file.md +++ b/windows/client-management/mdm/windowslicensing-ddf-file.md @@ -1,7 +1,8 @@ --- title: WindowsLicensing DDF file description: View the XML file containing the device description framework (DDF) for the WindowsLicensing configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/wirednetwork-csp.md b/windows/client-management/mdm/wirednetwork-csp.md index 12bac7c750..253819df28 100644 --- a/windows/client-management/mdm/wirednetwork-csp.md +++ b/windows/client-management/mdm/wirednetwork-csp.md @@ -1,7 +1,8 @@ --- title: WiredNetwork CSP description: Learn more about the WiredNetwork CSP. -ms.date: 01/18/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- diff --git a/windows/client-management/mdm/wirednetwork-ddf-file.md b/windows/client-management/mdm/wirednetwork-ddf-file.md index 178bba80f3..9c796c3f69 100644 --- a/windows/client-management/mdm/wirednetwork-ddf-file.md +++ b/windows/client-management/mdm/wirednetwork-ddf-file.md @@ -1,7 +1,8 @@ --- title: WiredNetwork DDF file description: View the XML file containing the device description framework (DDF) for the WiredNetwork configuration service provider. -ms.date: 06/28/2024 +ms.date: 02/13/2025 +ms.topic: generated-reference --- From d63a45103668c80beb114cf4917f8024603f1b09 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Fri, 14 Feb 2025 11:01:00 -0700 Subject: [PATCH 115/123] Formatting fixes --- .../client-management/mdm/declaredconfiguration-csp.md | 6 +++--- windows/client-management/mdm/devdetail-csp.md | 4 ++-- .../client-management/mdm/policy-csp-appvirtualization.md | 4 ++-- windows/client-management/mdm/policy-csp-bluetooth.md | 4 ++-- windows/client-management/mdm/policy-csp-connectivity.md | 4 ++-- .../mdm/policy-csp-devicehealthmonitoring.md | 4 ++-- windows/client-management/mdm/policy-csp-eap.md | 4 ++-- .../client-management/mdm/policy-csp-remotemanagement.md | 4 ++-- windows/client-management/mdm/reboot-csp.md | 8 ++++---- 9 files changed, 21 insertions(+), 21 deletions(-) diff --git a/windows/client-management/mdm/declaredconfiguration-csp.md b/windows/client-management/mdm/declaredconfiguration-csp.md index ffc4a8ffc6..27ff417b8f 100644 --- a/windows/client-management/mdm/declaredconfiguration-csp.md +++ b/windows/client-management/mdm/declaredconfiguration-csp.md @@ -1,7 +1,7 @@ --- title: DeclaredConfiguration CSP description: Learn more about the DeclaredConfiguration CSP. -ms.date: 02/13/2025 +ms.date: 02/14/2025 ms.topic: generated-reference --- @@ -226,7 +226,7 @@ Uniquely identifies the configuration document. No other document can have this -The Document node's value is an XML based document containing a collection of settings and values to configure the specified scenario. The Declared Configuration stack verifies the syntax of the document, the stack marks the document to be processed asynchronously by the client. The stack then returns control back to the OMA-DM service. The stack, in turn, asynchronously processes the request. Below is an example of a specified desired state configuration using the Declared Configuration URI ./Device/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Documents/27FEA311-68. B9-4320-9. FC4-296. F6FDFAFE2/Document. +The Document node's value is an XML based document containing a collection of settings and values to configure the specified scenario. The Declared Configuration stack verifies the syntax of the document, the stack marks the document to be processed asynchronously by the client. The stack then returns control back to the OMA-DM service. The stack, in turn, asynchronously processes the request. Below is an example of a specified desired state configuration using the Declared Configuration URI ./Device/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Documents/27FEA311-68B9-4320-9FC4-296F6FDFAFE2/Document. @@ -591,7 +591,7 @@ Uniquely identifies the inventory document. No other document can have this id. -The Document node's value is an XML based document containing a collection of settings that will be used to retrieve their values. The Declared Configuration stack verifies the syntax of the document, the stack marks the document to be processed asynchronously by the client. The stack then returns control back to the OMA-DM service. The stack, in turn, asynchronously processes the request. Below is an example of a specified desired state configuration using the Declared Configuration URI ./Device/Vendor/MSFT/DeclaredConfiguration/Host/Inventory/Documents/27FEA311-68. B9-4320-9. FC4-296. F6FDFAFE2/Document. +The Document node's value is an XML based document containing a collection of settings that will be used to retrieve their values. The Declared Configuration stack verifies the syntax of the document, the stack marks the document to be processed asynchronously by the client. The stack then returns control back to the OMA-DM service. The stack, in turn, asynchronously processes the request. Below is an example of a specified desired state configuration using the Declared Configuration URI ./Device/Vendor/MSFT/DeclaredConfiguration/Host/Inventory/Documents/27FEA311-68B9-4320-9FC4-296F6FDFAFE2/Document. diff --git a/windows/client-management/mdm/devdetail-csp.md b/windows/client-management/mdm/devdetail-csp.md index ca16215bc6..98224519ff 100644 --- a/windows/client-management/mdm/devdetail-csp.md +++ b/windows/client-management/mdm/devdetail-csp.md @@ -1,7 +1,7 @@ --- title: DevDetail CSP description: Learn more about the DevDetail CSP. -ms.date: 02/13/2025 +ms.date: 02/14/2025 ms.topic: generated-reference --- @@ -400,7 +400,7 @@ Total free storage in MB from first internal drive on the device. -Returns the client local time in ISO 8601 format. Example: 2003-06-16. T18:37:44Z. +Returns the client local time in ISO 8601 format. Example: 2003-06-16T18:37:44Z. diff --git a/windows/client-management/mdm/policy-csp-appvirtualization.md b/windows/client-management/mdm/policy-csp-appvirtualization.md index 79c7021980..410bed737a 100644 --- a/windows/client-management/mdm/policy-csp-appvirtualization.md +++ b/windows/client-management/mdm/policy-csp-appvirtualization.md @@ -1,7 +1,7 @@ --- title: AppVirtualization Policy CSP description: Learn more about the AppVirtualization Area in Policy CSP. -ms.date: 02/13/2025 +ms.date: 02/14/2025 ms.topic: generated-reference --- @@ -313,7 +313,7 @@ Enables a UX to display to the user when a publishing refresh is performed on th Reporting Server URL: Displays the URL of reporting server. -Reporting Time: When the client data should be reported to the server. Acceptable range is 0~23, corresponding to the 24 hours in a day. A good practice is, don't set this time to a busy hour, e.g. 9. AM. +Reporting Time: When the client data should be reported to the server. Acceptable range is 0~23, corresponding to the 24 hours in a day. A good practice is, don't set this time to a busy hour, e.g. 9AM. Delay reporting for the random minutes: The maximum minutes of random delay on top of the reporting time. For a busy system, the random delay will help reduce the server load. diff --git a/windows/client-management/mdm/policy-csp-bluetooth.md b/windows/client-management/mdm/policy-csp-bluetooth.md index 2155fd2918..0d33c7e54f 100644 --- a/windows/client-management/mdm/policy-csp-bluetooth.md +++ b/windows/client-management/mdm/policy-csp-bluetooth.md @@ -1,7 +1,7 @@ --- title: Bluetooth Policy CSP description: Learn more about the Bluetooth Area in Policy CSP. -ms.date: 02/13/2025 +ms.date: 02/14/2025 ms.topic: generated-reference --- @@ -266,7 +266,7 @@ Sets the local Bluetooth device name. If this is set, the value that it's set to -Set a list of allowable services and profiles. String hex formatted array of Bluetooth service UUIDs in canonical format, delimited by semicolons. For example, {782AFCFC-7. CAA-436. C-8. BF0-78. CD0FFBD4AF}. The default value is an empty string. For more information, see ServicesAllowedList usage guide. +Set a list of allowable services and profiles. String hex formatted array of Bluetooth service UUIDs in canonical format, delimited by semicolons. For example, {782AFCFC-7CAA-436C-8BF0-78CD0FFBD4AF}. The default value is an empty string. For more information, see ServicesAllowedList usage guide. diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index 157972e7a8..c22245a862 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -1,7 +1,7 @@ --- title: Connectivity Policy CSP description: Learn more about the Connectivity Area in Policy CSP. -ms.date: 02/13/2025 +ms.date: 02/14/2025 ms.topic: generated-reference --- @@ -702,7 +702,7 @@ This policy makes all configurable settings in the 'Cellular' Settings page read -This policy allows IT admins to turn off CrossDeviceResume feature to continue tasks, such as browsing file, continue using 1. P/ 3. P apps that require linking between Phone and PC. +This policy allows IT admins to turn off CrossDeviceResume feature to continue tasks, such as browsing file, continue using 1P/ 3P apps that require linking between Phone and PC. - If you enable this policy setting, the Windows device won't receive any CrossDeviceResume notification. diff --git a/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md b/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md index 8bdad4117d..a91246ac62 100644 --- a/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md +++ b/windows/client-management/mdm/policy-csp-devicehealthmonitoring.md @@ -1,7 +1,7 @@ --- title: DeviceHealthMonitoring Policy CSP description: Learn more about the DeviceHealthMonitoring Area in Policy CSP. -ms.date: 02/13/2025 +ms.date: 02/14/2025 ms.topic: generated-reference --- @@ -31,7 +31,7 @@ ms.topic: generated-reference -Enable/disable 4. Nines device health monitoring on devices. +Enable/disable device health monitoring on devices. diff --git a/windows/client-management/mdm/policy-csp-eap.md b/windows/client-management/mdm/policy-csp-eap.md index 040155b5d6..64de1f0ca5 100644 --- a/windows/client-management/mdm/policy-csp-eap.md +++ b/windows/client-management/mdm/policy-csp-eap.md @@ -1,7 +1,7 @@ --- title: Eap Policy CSP description: Learn more about the Eap Area in Policy CSP. -ms.date: 02/13/2025 +ms.date: 02/14/2025 ms.topic: generated-reference --- @@ -31,7 +31,7 @@ ms.topic: generated-reference -Added in Windows 10, version 21. H1. Allow or disallow use of TLS 1.3 during EAP client authentication. +Added in Windows 10, version 21H1. Allow or disallow use of TLS 1.3 during EAP client authentication. diff --git a/windows/client-management/mdm/policy-csp-remotemanagement.md b/windows/client-management/mdm/policy-csp-remotemanagement.md index 2269c3279d..cd2bb62790 100644 --- a/windows/client-management/mdm/policy-csp-remotemanagement.md +++ b/windows/client-management/mdm/policy-csp-remotemanagement.md @@ -1,7 +1,7 @@ --- title: RemoteManagement Policy CSP description: Learn more about the RemoteManagement Area in Policy CSP. -ms.date: 02/13/2025 +ms.date: 02/14/2025 ms.topic: generated-reference --- @@ -286,7 +286,7 @@ For example, if you want the service to listen only on IPv4 addresses, leave the Ranges are specified using the syntax IP1-IP2. Multiple ranges are separated using "," (comma) as the delimiter. Example IPv4 filters:\n2.0.0.1-2.0.0.20, 24.0.0.1-24.0.0.22 -Example IPv6 filters:\n3FFE:FFFF:7654:FEDA:1245:BA98:0000:0000-3. FFE:FFFF:7654:FEDA:1245:BA98:3210:4562. +Example IPv6 filters:\n3FFE:FFFF:7654:FEDA:1245:BA98:0000:0000-3FFE:FFFF:7654:FEDA:1245:BA98:3210:4562. diff --git a/windows/client-management/mdm/reboot-csp.md b/windows/client-management/mdm/reboot-csp.md index 6280f7e382..3d72cde805 100644 --- a/windows/client-management/mdm/reboot-csp.md +++ b/windows/client-management/mdm/reboot-csp.md @@ -1,7 +1,7 @@ --- title: Reboot CSP description: Learn more about the Reboot CSP. -ms.date: 02/13/2025 +ms.date: 02/14/2025 ms.topic: generated-reference --- @@ -121,7 +121,7 @@ The supported operation is Get. -Value in ISO8601 date and time format (such as 2025-10-07. T10:35:00) is required. While it's supported to set either DailyRecurrent or WeeklyRecurrent schedules, it isn't supported to enable both settings simultaneously. A reboot will be scheduled to occur every day at the configured time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule. +Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. While it's supported to set either DailyRecurrent or WeeklyRecurrent schedules, it isn't supported to enable both settings simultaneously. A reboot will be scheduled to occur every day at the configured time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule. @@ -160,7 +160,7 @@ Value in ISO8601 date and time format (such as 2025-10-07. T10:35:00) is require -Value in ISO8601 date and time format (such as 2025-10-07. T10:35:00) is required. Both the date and time are required. A reboot will be scheduled to occur at the specified date and time. Setting a null (empty) date will delete the existing schedule. +Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. Both the date and time are required. A reboot will be scheduled to occur at the specified date and time. Setting a null (empty) date will delete the existing schedule. @@ -199,7 +199,7 @@ Value in ISO8601 date and time format (such as 2025-10-07. T10:35:00) is require -Value in ISO8601 date and time format (such as 2025-10-07. T10:35:00) is required. While it's supported to set either DailyRecurrent or WeeklyRecurrent schedules, it isn't supported to enable both settings simultaneously. A reboot will be scheduled to occur every week at the configured day and time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule. +Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. While it's supported to set either DailyRecurrent or WeeklyRecurrent schedules, it isn't supported to enable both settings simultaneously. A reboot will be scheduled to occur every week at the configured day and time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule. From ff8803eff70f3d964389f7d56a6c1a974c815517 Mon Sep 17 00:00:00 2001 From: Ruchika Mittal Date: Sat, 15 Feb 2025 01:01:18 +0530 Subject: [PATCH 116/123] acro fix --- windows/client-management/mdm/accountmanagement-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/accountmanagement-csp.md b/windows/client-management/mdm/accountmanagement-csp.md index 074e8fd82d..5dbbb32e91 100644 --- a/windows/client-management/mdm/accountmanagement-csp.md +++ b/windows/client-management/mdm/accountmanagement-csp.md @@ -135,7 +135,7 @@ Configures when profiles will be deleted. Allowed values: 0 (delete immediately -Enable profile lifetime mangement for shared or communal device scenarios. +Enable profile lifetime management for shared or communal device scenarios. From d65fe34bde2c4245baafe4594c2dfe802b0740cf Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 19 Feb 2025 11:13:28 -0800 Subject: [PATCH 117/123] edit --- windows/whats-new/deprecated-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index db54f1ca3a..d2c4cc59ad 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -47,7 +47,7 @@ The features in this article are no longer being actively developed, and might b | Feature | Details and mitigation | Deprecation announced | |---|---|---| -| Line Printer Daemon (LPR/LPD) | Deprecation reminder: [LPD was deprecated](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing) starting in Windows Server 2012. As removal of LPD nears, we'd like to remind customers to ensure their environments are prepared for removal. When this feature is removed, clients that print to a server using this protocol, such as UNIX clients, will not be able to connect or print. Instead, UNIX clients should use IPP. Windows clients can connect to UNIX shared printers using the [Windows Standard Port Monitor](/troubleshoot/windows-server/printing/standard-port-monitor-for-tcpip). | [Original announcement: Windows Server 2012](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing)

Courtesy reminder: February 2025 | +| Line printer daemon (LPR/LPD) | Deprecation reminder: [The line printer daemon protocol (LPR/LPD) was deprecated](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing) starting in Windows Server 2012. As removal of the line printer daemon nears, we'd like to remind customers to ensure their environments are prepared for removal. When these features are eventually removed, clients that print to a server using this protocol, such as UNIX clients, will not be able to connect or print. Instead, UNIX clients should use IPP. Windows clients can connect to UNIX shared printers using the [Windows Standard Port Monitor](/troubleshoot/windows-server/printing/standard-port-monitor-for-tcpip). | [Original announcement: Windows Server 2012](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831568(v=ws.11)#printing)

Courtesy reminder: February 2025 | | Location History | We are deprecating and removing the Location History feature, an [API](/uwp/api/windows.devices.geolocation.geolocator.getgeopositionhistoryasync) that allowed Cortana to access 24 hours of device history when location was enabled. With the removal of the Location History feature, location data will no longer be saved locally and the corresponding settings will also be removed from the **Privacy & Security** > **Location** page in **Settings**. | February 2025 | | Suggested actions | Suggested actions that appear when you copy a phone number or future date in Windows 11 are deprecated and will be removed in a future Windows 11 update. | December 2024 | | Legacy DRM services | Legacy DRM services, used by either Windows Media Player, Silverlight clients, Windows 7, or Windows 8 clients are deprecated. The following functionality won't work when these services are fully retired:

>%)~xNtKs`i-P@igt|oozotxV{MigE#ANHR{v{@$ycSE@JU}9ln=*&Qf0OVI)Vi zBlpYuj;rtU8K@hjd6;fM#was$(nh=Y5bvUFc9hy}OOu(NHzNuB-aoF0@NwYvianT&K zrCTBDRS!i)^ps)>2^Zyk?FrVsyJ@q#79)FbTS z^)`sd1+DPTkwor&DQPZpLDXNi6OW9?BYSW$w(7F6t@<8bgSKLbNsHyVdl^E(9w8Gz ziFyH*ka-dvZX52Ew}^UJOa-GD9{M98gh@q7gMR3h;;gK%mXR!FEgT_)y0_*6-)sWN zeo*DsTV-s-QHR}V4{c_6eAKez{3_6C@Bp7OBl{n&Ei1t{Qud%!uXPVmV17v2qD`;y zoc3nb1oZ*|0K+yi@)WaxaJJJvvoDT)f!!J4m%$dd)wj7H`QAYn1a%B$bXd@1SWP-> z6Bbb;fY<2n$NHF$y%Df9JeQLQ2xWFf=<-?ct1Ax+tz?-x@`+U`(Y80UMU2Bdaaq#* zNXpU(`N^x%#!!ZsKU8l~lov)OLM6-o^12?7Vvr)oYYp(g(qPh=bWyEp_1O*gO(!I^5W?4Y1Id3azUD944!1@}-PJ4w0kU4N8=$yHDhGJvdx336d zQYX=SEs%2k)}*%*t`sPXP3S^X4Ug~>OM!1Q&j%oqPp_|7rZ+LHYwE)8#<#S~mG4#^ z<^G8gW5sANl#>CAc0$D%I6t{JDPT3*J1W4!Sv@lzG{Jr@iye~(QU&LATE=D3RVCZx zpLR;blC$~4KSu8dsvwgVcX;B|$$2`;`8Q}lmCQm98mc?XN}|!)2=cXGKL={Ki`h_s zED+NvyXt6lT;d!3B>A3zkS$o;PWtH)wzdFwhhS}^*0-xvRpO4Y)2GUl!k-B9B1KYr z-6+j5Y?TJKc;66y>W6cX%c4tw&!}mBzUbWa3&fH2&{#e4`oxe`(-yY~JWos&pIckg za_OYa`NvX*%LeB70|E{jGdRf*IE|UEqoh5p=^Ak>5J57Rec}J0;jq|6zVhh5 zwyqYee|@OEg(Q{d%}(9$2;?@PXQJO9#BeBo4>e5CP*>Xp5>CdRp3lye3>-bOsy+aU zdXdTdNq>I?;tSoiAeEMEdvsruyO3xs4#Dv#f? zR(J%UxhYvT$_>ZS{N2<-F(>d?f%Z6~#>^T*lI(as-+9#NJYUe=JR|fWck<4NTiP4FtaZ9^nPY(qSPpN=sdXn zkJ$3om!^I#q{G}uds^;B)Dt)(1M>6+srig;@GN^a;t2SxA2HYR>B6) z0Ly^jtWyMcQ<}4#@*n6s&f!W8kISzQlNeTV09YlkoOVqu)P#2kNJyBAj6)3#fCe({ zWo8p`s&+i$C8GwA2YWVZsyhC6hIu`uydWB=K%&uxYCMmB7$zqSxh|F*Ml%GDSnGQ( z1Xc(F(evFa8F$x;?(LzLQP%jSdy$HxI;+aM(Jloa?qZ?EAO3)Kp(XZIxenk?|f1ycVAZybucGJ-7ofl zC0hBC2xB|3gSkZ5+IT&4;7t9Eqopef^1<~9xz|M;{$3f0x_KS$^DGUhDULg&Pjv-` zIbivNYnzM|<dq;}7>d+sBFwiPYD(b1!(zAztBKJ!{;WvlxEq%Jm#vqJe%J zMsGhVzr=d9jUVdwXkZ^^td@}(80K;P&tWFK_t^&qn}nHc(rJfAap|bE%nAzuQW>sV z)0Pzb8`!Hei7fHFPz>Er2v(SRr-C}nwh|5zs95$?#FRJa*~5?N`&! zYOnBkef_s@y->_&mvbofL;MzJ?EO7nGf$NFveBWa+XkWTXbZ3F+S4&x9@VtBk>u5< zDm|6Z9;WdY>kTVn&Ll5f%ryxEUD@(*ab!w;p(tOx>9*(vhs|s%Tkn1uM!O_6>+&tUsM93#fe)%^5I^e4+(UFVtGT>xqjX%Rlz zN^mZJPdUnjn0L1?BIgvtNZ)s61zbOWw7f6NJ=PQ{+ZjGqr?pWQ;@VlQE0aTFURA9Y z2_&wcKqfq0f<;#GRlP2z=UOu?ZvZwA?fx+}y%I4Q(ML)+~h!WKi@DDK4Nd3Z9 zv-K|BGkWCGrmp0>K z*thTp;%%mzk>$!4H9?2qFoy@S#S}YgF_P9%V3P+uUl`!yeC9eCT$ZL>4S~^4dCyWM zX^6)*y?L+Ub$@~0{dl+|(xzBbgBUnbMtSnoZzk1Y7h7|z4y7#MoEPl&(_SX^P>yyJWr(toDy`B)*)(pakEh%r_`an5KhP zpJGIfk*3x~l-_?|tas+TFK9f-*KI^!)f!EPz%nO(bkO^oTjK}^a){e?cL}SkWBFz6 z2hHVcz4)2(~B=Tof+9ri?VX-a7> ziR#BuL%HlgCoE&33b^kMSN9-$;}_=-UA&;z0WjKTWpGcsg$pcT)>PBTnQ%G|HHGP9F&5~(i|VM?klatJ2nHF0 z(>r;mq#xhrEm`L0-sh}2fs(PmCODx@I)9;P$*~&#HmWyn*_Gq@hT~8~>Q^MlOvJay zr=ZM72$MZEMP`+6@PFhMH(?Rn9!%`4D_7FmkV2=;(uA^Ra9WsVJ&Tm!CZh(M7mxho zcwV2K%ig2d&4{NhJYzPaqh=e0R~EP-qyuPPnEN)hbfSw0Emfm*?b*imAbm7=ERTVF z6RCJ$8UNojWV8fL*c&DZ6wG(nA-J#S9JN(z0qJmz*u{Mp_oI+zXI+jWJlr^3=&-h< zHU^DGaNw#ms!B}qwmK}3B?`;@h|=Im;R@5t~wfC&9FN`dw= z>Im`+#EAX0fgCWX5iHyx5DYOt>0|b`U0rVW%c@M`gQ`%5H&rP_qXjYdf3}Rp^y5R-4)&4#SG0^*Prt%>}fV`hwEM~#KtB< zek$JwW@k6nrK7{SLnXWY@|l>K6dDOr*U!^L-3U;GyR-AQxRHpk@Flz!-!G?|Y8_rE zil-5a-QkKxT1XXHeO!+|upE44RepT}^z#*m()1spf<<)dIsV~D#u9U2U|{psty_S7 za?A_}S`gZQZ7oHi(AJ(k7-?M=(KNukoO4n+b!eaSox|QQLYq~2*ev__7dApm#e(?b z!yMaZnU^K>^dihHg9^u8?S67YuKpDB($3CK{&MO5Rx)15rtEj#^smU1y0gqbbxSrm z-`^F1m&^b8lc>_gNzv>ct+g0`{O=C};v>eA^B`74XqJ_arTale`UOnFg#PBB+D{TE zre_97y7MYP1`kzJ9c62h0U88cVm_es);Wp;=QzLkxH% zB=5tA4~Hck9e@QOX&JO0ROVh;4|}gZ&AdF{l^*u!Fjf6Mi8{{mi+Vbn*6Zm+s%B41 m%XWWrbF*N6bEme*;iLV^E4_Iorj5S=7sTA&>>raqWBvoxwY|gu literal 59295 zcmeGEcU03`_dbeRC?YD&O_7dLR3HLMhZv+60hJ~t(nWd)DUl*Y5Tr;EDWZr1(t8WN z7Xj&=P^1%T0wFmo?DsvtG0weXoOACT%2J! zW4#exPae*8KJ)gC0g7iFYmd_%(;kSLM~k@hRgFyfq?R2WBf}!=^!n@+qk59D1)qD5 zBLtu69L(Yq3A^w^I2+!^yAt8;W$*o&TJ92Ou)cf-n(R4M@6qtmJoMV)++TjkVnISE zg6R)uF!2rFBbT1YhP_03cM5jn-&Nc&$Y+Hxb#(m0A3f&l?d9rZMEnZ5FvSGhcB+I> zdvcdz`gp>9ah|hf$@3=Ib|8d=ummHv8O9dMvug~5FWrbW?kb~+hqJX%oINFUy}N8t zk0u_<;!FSUn)woJI}vhPc(WaYf4|_1em=LOl9sGEhX3r+En57evB*bSc$@$I9Wbr6 z)3|>>ZgGq6E%6rRA^-E>|7SOWymk*u$k)Tn9aFBmJg&wdQ3VnEBA$ZV0mWc%BNOZ|rw4 zJiONrg^CmXi(l{-AGrmWb5dav=~79*tl_lpUhlANL7iwAjRp>Xge<5(s@v8fXZPL7 zbDFfTxcY>+xCly$uJg&tEIg5hTJ^_kxpyh(FPMG5+kH|mc{paScL&wUo6hp>M~LS-i)GoE-d4DD)W;w*<*$fcrXA z-z46S(SL5|-tE9$=2?v5!3vb%{UL{GYqPuS<;0ixbFZvAW4T4@&5n*{38%BdfWm1R8!_b_o${cx@9g5xM-16Oa{w`@D|giN>XmB4lmQ)>1}_{ zWr9ebxcP^iE1Il^$8?XyO_vcDGL<4jj!@9kA?Q^zD9>fpO|8pdhpzm0hjg~JcCVKc zda{OjqNH~_%uFDBv)(JI$0cuhD)n|km>qufK?%5HcL~oK?-f;V{N^m)Ue{Z?<$`0~ zf$l*r{4{5V!teB8bX~kZ9lxKwwwj%uzpZfVYRz|Jc=KL66kqiE@0ZXV%kG3>Zwe|| z%nM^HI-?ouilgK8f`Yx`l$VFE$2Q9jy`T%^v${6% z%4{CHT);}2kHd(N;MbcwzEcH=({)LK+M^kt;kOJX;_H=Eq3r&cy#1IIhw7h?gr5FC4x>LDxcgDhB$?YT zN^5{q+-YI{k;(4QDMZh^t( zIpw8CR8q;jscug`iH0CgYLK}muUE4q(@C;GZm>}bba}`_8%hz!!8hJ}GBH{&N*Agh zSr}*2uHkk_6QBLrr7I8Rt4Pgt-MjTSmH$qVBpyyUfUoasYdxQ%#Sv|Al&Y){1zeOp ze?O`xLa_QrH35IJuGTN@=Rf7#-YeO+we0Mx*+W%zJ-J2LTTRr+o^0h?}}HJ{dVDRBaIQNapcn&Jbyi7$SDBwHNXJ7z~r zz0e!VM#*YNBV6z~x%oF*{IAp>U=QLez}~gKAz8YRb&Id=1#GJJ^l;K$nq%ae)J9>l zxd$BeBXIX*mVj56K4P(=%9GE`_!fC(CfmlQvKBX>#C|oZCxlfEo>u3TYW##feRJgX zLf`zh|4~h2%=mA`JA;t5q7A8#s)~Z7yh)L7`O3cX7mUG`(GV$iZ-J&@tp_~otpjI z&Eb@u75+EO_!I9Af=;^5-Ugej5dE(?$b;R5ae+ z0vSG0N$)&lCI5O!)np!psuC-r)YjU~`J!CQKUH4ig+sUZf0NlP9U?0#fovPjv1$0T z4Qx*ZB63ouyLj?zce@NMk4LFgh`}LA@xOsiC6G1%70vnE%c(_n?_QMkby#PRh%DQe zvA2ADCGc5v!Gk+lXbf*jT?UDVrA+}Ox?u=4@_6gxetYrB0~z$HGh2x88In-H`5%W# zx&@;kV4?})t{d6VQybO|R~%`gHpvnQ&ysi37~Xn*iO7hQinoVycUoGjrECgvF?tuL z_z3w``7RI2U{1Ia1&yD#f1E3>&a$)~8sgzY_2r*!5Anp`sNcFq$D^UumYv|oQ9xX6 z!8pcC5JJ4@w`=JOB##uMHA;(u3tA4Y*sQ=!aG_dlNd+aAfq7jUF_Y;M#iU@8@0Ov2q#yve-~la5>D z6|t#=4*HiD?U%g6)qa7DZgDTIIgTjw{nR=oEn(USrET< zS(Wgt;;ni^ZolKN8>_v=XD;bqPlLAJj{8=J7nTk1 zVZQ2d2P>h>M!&n=wwTT6$F^O8iGapi+ZWB=IBKu*6dB~<^X{5TZ0!3H4)>QLLQeg# z|HgeHg3yb}OGOR#7pH2H2NbkGyhNtzq>-Ls63T!6 z7Yf+Txj|qaI2;P05qw~HqXv1eY1`+dxK@8bI1j2@Ef#aaOH;6MocvHODb=-4Vz};T zMoPJCVXz2NU=c@7)3xp33eS>x-@9ZdXxmO6d1V1>qe5tMF=3Zys+e-==FsUQh9^k~ zl-ox0!yd=A?Q}cZhPla+_=M2!h3~UlD8^d*HGo@CQ_}peH4*=oQ@{NGE^a#e^#2po zHTRc%cKaVI67Iml+tLTWa3#?Uzz&1;A1V_a69hJs|9^g<{xQQBk6qET@ml+tt?P|x zX2%z*HUmIeuG)NSr->4x?w&-F(C?FbU;Tn(ExPT_RgekZk}NSk;@N3q6^;?>`w(91 z9HPQOXE1b~Cx8z;$rGTy_+A9KIs&?;{PO+2#D`Hys zzx4yN8E;T;<$@~q3$gIeRbunDpq7%T1(d)rv9!^fJszpZF?6WPdhY-DO4KDzUG7j; z5B;)4= zg?IX-wx5Awd?inXpYro(sjW)$Ge)3a=4gteB1{^$(>x3cVR2N&!6+PAyuy0_zjqh@PqwVi^y~FsK{q9c<+6K^ zQ2Vpog8J8Wj|)xI?~HkX%53z);K_%=KFRfGN1zPjSaPZbxNn%0!ANTp@BkuQ9}B_X zqt1YZK+B&f^sv*$2jmA1lJhX|F!3-8G1I^KTR^P&o!o|-zjZCHZJN{2$>qIXeySyV zvQaWTV(4g`81dK4HN(w4&^-V}EYYp)k}Y7^MsoINU`rPxe+dCNJL|JuH$i@>Jx`r| zOkTg-Zk!`KiT)PfMNmypN^RG=9^m%+sZ?p5hBU-Lu3Q zErPUiJ*4b@``V`pYo$Yva~+Q`tq^}9abfSC#0&ryn5~x`@w?-$n`NWAhW2H{dDZ4g z7BKHY72e)r_jJF*pPr0L-1!k3PuKugLoAS=6odnAVJputl;4R$nr_X^nG43$L1Jk` zi<-PUYv=czhu8jql9MOKbh$$1g)9ko)8zn5ORJP~QwgYbZp>YQU={lK0mqe8&zZT7 zmt&PM<>D`~;ZN&-eD*(HE!i4xvEF$1ZuMcH@V$-TlNLJ7XMm(w&D)pm1x#*S2#KYR zG2-+C*_XT(mkLX!<*%;?t5jQ?^gw{&nDQD4 zCbI!PretutY}DjHhF9*AkcxUu2C#6db+s~GlhxRbXh5qxXLObrmA~okWB6S~tGKV| z;y9^8){eU?b4=1TqE)C@qIWxPY2KF$TeX}ZT^iDa8r#=nmqnJYmiUPF2D&gVybcpE zlLV*Mlbx~1JVWGNj+u)Q#YvvtX#1qspV;(oYrI?pT%79~xmp-ufdQ$HynDsO7v1_Q zLZCdU69s2L117G#KGJlX7WE|__?duTmDtiwDGE?(M%hcU$-SbJdHyecuDYve94PHj zLFQ%Fetcak-ZWvs4~qJ>NO6r@cI<2`?G=>I5$wyyzn32X%7^irN#hSn{-b^urby42 zw(2kx?ACe^t%f`5Y1gbvw}3V7Arx(o?Do+-IWB&$-If`OZhiWFKo%#qQL~|}bPVyG zrz~MB9RudOPM*J`z!Hkn{LFi(G?}Xt!ZfKkE78Dcm1m90yM3SH+?u5w%5d+&9vM|3 zzd`Z0Jt^;AD)igQNYA#q-rKGMk&JtyBO!k7k8OJT|A}vn;zKn=U&VEcqm1T1hr5dO zSh62+Z)vT?9_@1gvwGa~T_rMZ66qi4G#5agU#bP&>k&CvSR1koXw7g-R~7vt)YyLX z9@{ExxW83@vbB~OA^53`8ru+jlDh3{ZDooISK76-q3}f^i40I_On!ue9>F3`JYpys zfkT=3_=fpO*db0Bm`|h)8rbODV;}MjzlWR(s$Plr8P?Ies%nrdTffo8XFlLXWc$cD z?MxwW1-FZ9u*)gTehL}+v$$okk~UK-y^Uzm#sPObW>+EdNa2wZ=aK8eMFV9feG%-q zIr8_J7+|G2*Tm=E+((k8JY9aS<$|dB*lIg77OjN_n_a@+Qq0qa2IK_}Rdr0~rdarRo z$n<*)x*G+yVU#6s{t|`ln%UE>o-MiCT0Awf_=6i7U+!0V7`UBMhD^%kk;9^2+S2jT zo58OQ&5kA4-S{fNQCv(anw#QNQH=>iw-it-9AjJ<6`3OL5@^;`L9t2cAp=-ARca`wqnIV z41KQvYngsK!e>^5Szz1-tWVdxq=90xRA)Q0>>Q=r|ODUMgQk(a4KX2&JJIkSt^v8R5oJo-SZ3_Jt zxMEU8?JP~dvpSEy?|c!bA^MYG?Xr@>vsneoCB4^5hO0K6mCZXrr@WVXS9A_eP_=LBj4D-73 zd7}_zyy*wAclsWKm|`3Acm7N6Lih;lLy-`pvPKg%^8k;hX{nDkoDw|NRb8DK%n(<7 zZi_~Fw{`tkp|YswcIqo;j)d$`)PKoOa@ejrO8Yr`Bot7D8WKG~8_~2&1Wa-iYN(Tg zXlWM{9mmLfbK#EQIT9ZAnyKD!HzH@sVlKz$=W5+(F<)A$-obw*P5g_&iwkDFF>k|3 zF9n!W-iuSZF0PKlh5RBU}XMc!uU9DaMNi@F!NjyXnRoUI+tSG5kv6>xD!L*>(jk zlj8ODZc|1}enI1Ew-L;p&8fEXSYCWJt!y!hBv@A(eud!EOW(%Lx8ic`uhhtwbuY06 zN3^w6Hd#~q5#%WR^~uW!!U6ptmps#5n)-W~BD*i0Bcgwqk6->NUPx+>#<)IPU?9OY z>UYkdJG|y2YT4U;vHa7=O$?XSl>VYB1a}m;->Halns_gLgk2W8s;os;Oi^JQ)^t}^ zd+adx{KgIJ?t<7~@h>!=c)UPH{QUPlF&k$Yr+-&?fWPsmyrE2>+BetAvpb6FZeV8r z@*^$9FKsQ+;;*=B{<#2~>s)hq{%wa6UsSrm20i%mH0bN8pTw2sD1|l|)a+on@#P5U zc&A?%Pm`I{DpiX*#V)52zl^C-po`$jn|gEB>PXLMhAm9hs`XQIQR-i*X0-B_9mGp}DY+LZeYoy5W5?RU+xgzi0td5;=<_TB*7SnTiNd`!e0 zbPkCPGS8*$=E9{e+b8NTaNXEOhtoZul)LOaa8q-Y$A*W8hYzkal-XKgo-Ug5Vv^oi zFa`ZB8xop23wm4krdz}1)6rMi(7)X?w~HGTIYa*{`c}{|T%o_HsVkQGrN#Heg)xLR zVj$Fn!>VOge`Q8&E8rsiJ;G#{@$tywe<%O%+Sy8{)*xbtY~g*)1!hwYqvOo@5in8DFux3Y))4j_Gx z2OD1I&os(hxczsdSmXNj<`8kyR*LtIZ;fue%IwZu38$kuB1s6NG!kv}_?fP9+a&gu z6Sj2oKoxBiaiPd+f@gP^FxL&9j9~I|#z0cTj8M#%xz9wXb%|ulH*$j`^HTw6S zwDqqt*Pe?!9k9$6jCur5qdEDyX|yU_4h(b7F}>(obEJd^a+7UMJLqHY*iMbU@v>l& zn(1P@o#Cuiix7MNiYenTdzca;SNkXHo&aB!z*`?<)M;mF&`Ch68xd~t7|pD<)xD5) zBB)JT&}y!kKKfj!nEbn%|8?3+*P*D(OIm4Jy&J1fpbL?_!DoHx-(k!w4$X{3yaMSjBc#ZdNW7pXelBJ4Oh2A1qa+C`vC4KmfmjJhbK^!eu?0t zk6@taYPd(|z>NO39LqdAS53C%z7L%j?+PBV9N5dd46|`UGMVxE+(~?+EZ1XQ6Xa`- z$Mz#+bMqO!pwDXszNjIT&JUH^uG{SO7n%!vPlv!gOvj2C{W`kyN`&B-H+m+n;*0XW z3%yc*m$4y54&o+j2$QQbu9)uA_}KNzcQGHA98F)EJtwi$L%6Yi-Q(sf5li9VPqtM& zc&jfBTsS1zX);Xg3xK-gK{vk&bp@AyAjxWcL@7PcQRj>{yobe-Ced#6IQ4VT8I`Lk z)gp>3)e!BWoQidey{9h@bN*rU$ZOr-+wA5!GiJ2^plMiOtk9%lZHqXt;ZfH&)?>sI zukxC;S@o|IY^mbfLj=3>*9&}E#l37!kH+Ks@~=oOr-ap8+C{l^rU(}&&h>|8ESAS& zCV1;DcDAO<4Fy`<032epYO=p6n5n+=b?Z_iAKir9^?0)Sg~TVd)EsXA+{ESdR@5K- zGLTynNyn-mG+d;*^2BX@+pFN^XsF9VuKhyRxM}-yb?9TbB3P;MR>h`jUQPE>6XxC{ z2AImrwP>$s(-C%88S?nQ!Xu_hqHWpbp-hf3;#6+lU6Lc3;0>Y+z7OmSoTm<$nv3j> z*}K9EOzuoe-eV6Go=NW|OqmF=qYU`ffvYtO-qC1@Lx8gB*X-znJ73jbQW|L8Fizuv z(6C!@V(=S-v(n>Tbom~i6>2tDUz6}Q4eeS`wh<4Qy#gZB9My_BX6cK-EUf3ZOtaF9 z&iEMw8cPO$&f>KQ6!z(c4V@N`*Ql5ydJb5A%TMZunzpgv=VEI#rPd;HN_fk?DG*N$ z&~*vH-}k=0$B@1ln_e(&_oXY9it5~G=a*g#hZZ@b3I793^5q^j)_ z8<`wdq*Lun2uMJIaC_`)}SZfd=&K)lr$$JdbJQAxcpfDG1NF$*hLWAgCykH=O})N8de z)LBDcox||ekA1Gq8r|zD%UJ9#WGA=Ze)`W)IEm$pF@^f~8xI6=d5i@{b1KgC51LTX zP!nis_qwri97UBjPpJw+ya!8qVGY>yo7l|Scu{}j~Fb7R~i2kGhL!D zS+V?znC0K|ZP-v|rXFewN@xCU*ytX#Jb&J6H7oI&Oa6-_ z{PO85?GI(7^sR$}J!gT-7JjXn&zz<>9cD+FoFOk?q;I)u{;;JOwc^)Iz}%IqLh}li zG+=v{6rpUYD`*NSYW#JLAisqUnrN8bE(*1D9g__&rGN!;CwJl0D zGUM*>8N8_9{aBFa_Oo!Et2;`IXCq|O(Zc`}u904Ueaxm36glJ)dRAlA=EqfsOZOs$ z>94X~+eK1MU-!Ckgj+nMdI4Lih)xN%7MC@^_#--%J6LyU?69Ym z<+o=Zv%Q%#-A?4kd=#5d1a(i_MNxEh4iEH0x+lSG#fb8&7eOF#zGl$6N32oYDm2OC zWVhtaEcFEDdwA8pp{V9nx=(!%iYkeygjaJ`rDtwN)TF54l-FNwiCHRozXul>1Y`V8CTH^j_Y>n5(4vQl3?;9e?bYn! zXW_UWihqz$bZ^i5=&NG*i+n{aVb4 zquP-eC1(hD;Zo7xn2hU+zNC*Q*Ix%yPZPWM{I9{Am1^Su28BG;#X_DyUQsxkAk5uHzurCSAq8Lxu=WlJXU z`#6^w{tu5q2k+7V<-ek<{|_DvL_|R9EAgyGCiHdq<8?ivH0Mke#Q7a`PX{7^%qBx} zx8tU@e}F|n-C@p*@6$)BfGH>C^=}T!N8S}GH78hmrc2>{( zGrV4HOx8V%oGcz=rtZ?-9W}H5Cptg{} zC3ep#XOYail+xUFcH_mc+aX-cm=e5i}e$6WyfxDX(v-zI#0-Ik#*>bY$fX*{aA&SJZ zfrMKs?2?$E4_*7x!qF@OS$!~Kn49V`VUy5sM`nP9lsoZF)%D)3m7;bw!)-ZPfC3J# zp=JPIJea?PKiP(FzkDqWvq}73bOOX)&i38Jl$i>)Ys%eWOi)7+JHQ;R zU5P)j>6O~(O~u~}Pl+vbeiMMpjM6rDce+$~Q}5sWbjdeL9@e?F_+D&AT)bL%{IMy& z7+pNjBN`t79{-d7ak#-EKm`}>yb|44bm>*_{e=jK!#_gdkErg>4dQpB ziMN*ue}j<=Hb@hNjq4PajW;!m@qTt{$~&?@egpAh%wAL ziTxH7@)B~ZqVP8s_vNX?$-^e+iSB|!yYg|Xl3g0F zC#k&CY8cUfB@Pkn6sk(T97IWFYobdu7hg^7V#*1>Uz*pf<@I1nQ*tUUubYu=g+?uBc&6H~GF zcA7kVRFZ!)3~I7z*mBT`g+xur8j&hy*(8J9KXSL)d=MqR5SHwQPE7US+HBhC5)XUSy?NlH~eqV`e2h=wh@Gr zyD~r1He)A(9*(tI5`fQ$IE`8<}^sG{YjZ3vQV%!ck#?604u;s1;sg?UM~s% z@?;Ez%-oyN(k{A2V6&w7JJ(UF0lOvLW62qdyFODwy%%hVf-#s1yLq5+cih_ozfId# zwGE@pithDsO(mjG#SF~}W12gk`29$8w=3gh8;Rg98dK1U4XKTvNBO-tiaU}?5QJI> z($cg)eiiq_2z1BR^tg)F8CUP{6}?xR9{T_ruSE_G?r~64kr2i1X3jTZ$vecBfFwvt z*8a1fSjE^Z=4BOpijIB+(((m$58yvaGdtEgyZ_Nv8g>_pp-}bl`WvIf_S5sO2KCKz zRa9~CMw{215^_5rlI6nf>OljchxQK+iHedMIg|z6w;&dY+E-z?1hEr8*RySry~Vc@ zBbe!`|A}NNrwyus|EcMhb3pp{%nVqRwfb%j-Qt7$Y?i%BH1%Ak|k;3tAVkj~1=oLeJKTK;k7j_s+^d@9ANEqa2i9kr;?91J#h`!4C9Z(D2^8Yr8hu)m|FK6)I zxBss_SRyH`rOE-pyME&3*Y`Q(Y+f&@Yt|arO!T8hqeG)5wpd#Yzg&D<# zkKdg&+j1X_8kI~qB2RNDA+?3opvOtB)M6HdZmVRjC^XbL07jI=4y+P5r_BEEGce$f z-%Hm6iQlMfSl4iPVV9`*e%HDkb~EaS!algly)YWH`)9gsVk=@DVga^>9<;r#(Z%DM z-iM}kHd8@sk9(|TMQEhL_Bw%4!nf6TZKZK{qN)A7(5(!)0_9_7S*`#nwJgX54rqD{L8k zWX^ihO%%M(h<=mm4{}sN`J_Wlb^l+f=C!YO4qq~4ObVgEGY;&@fXd3l_*#X&5x{E0 zqe%S0$F|@sWAMj%>EajlyOh3@?4Y1{6)ki4!~Uy@!wRuWM1EWEFfR3Cd@3m$TTry@ z@ehBeh{GqMrwxSCfrfM;B)0Ak^lPM$uggv&`RHad{X#l`rZ8gaLOnd&|FATG#&YRp zaoZ?mMAz-?KSxGffAr@7Od-5B^~EkF+B&-s+hK0oOT>n(-`dmk90%m-;jxJOYxElq z3D6_6g}v_J4E=NDnufq*%f`l>ny=;p(RXFOIY<`C+>hr#9?cm63H24RI|8KoKVcj1 zyfzLp$ATUb<>0m{6gULfnb8ZuhoCK8e-QZocO%?j?a=%om%C&K*b|>$ zo0zS=bb{|`e7$D3*E^eD&HV>{k6%+l!Nqbl#HLHxwngzaaogl=JaApi6ZcuaqhTB3 zbb(}=cnxH{?db?{=iA6+SEjz=w*9t!$_n>aazOsUDg_Rj1`a~w_ck37HU2mLDGHbq z*1x3Eow;f{N)}_faH*(KFta~pI-8L+Yux2{HM@Ue(`;o46ck3rf*&9W{Y3y6)JIvL z7t?oBlL`nC_%kD#!AAeeV^*5SSHh|$OqWbb~Y@}!&`#?ee^%h^v zL+IxWgQ)W8Wqbxpv{(w_AnTySM}f+55KQXqRn@Hwa)7yu9a2s zMWg)Ar@4~d@y_!lo4io0N@`nhwm^gSA9?=Nk5sxmHD5N~DQ?h8EnLcr1VFa#^~q+% zdL>U`=(LEuR82LRY-8f3K2!Ubw5r^&@nMtW;QHIx!M2z>I`3l#>8-X3XUY~fjn2uu)V&4QHZGOQah%K#r%>AiRC^~_l|u8 zPEW3ZUV>g=OViw$$l0xn7q}RyoE_>S#iH~=b>*R}s64G@tpmT4NNH|}Ci@xXFBWH& z+3GX%`&}2-qK!A+EOR#Fk~MQr!F-X0EJT*OFkT$#Co3=Z@dw#hhp4Ej^XXf9F`HIi zF5-`&)UerfsYU*=o8#SDIt7D3a8{>=^9Nq#J`a^>;t##YgqGKZ7rcSa!3-ah;buWe z!}Y<3YqMUVur<0nlz+=$C$VWf+(IcfRfSH~S?`_X?YQEAx3s31lJrx4f%H&O^^9Ul zo5bSV?QCtP*&*F2r4iGg?Ak@lC?5n6Oa&QEXqOpkkW{AX@D{bPz1zU-Y*7}Bu+?>u zyw8J=ZyaKToWTu`qNwLX!XEVq(Np`@o%-xKz0j>ltFqm1Pu6%hk`;CM4b# z*wu77tVQqwHFeb3`wokkrDC3>RNwElf`=1w8gq!huO);{OxP8*E;Oa23Qk1M9a8CD zu??cQPUp_%yGc4$c=#MqZoFIW&qtv;W7AcmAwr`79e|7S{0K$2pO&C0thNmHmz0W@ zSGo9pM)=Sd3C!HQGE(n_D45<7dYAFJTgd9raubM)g`gmtsZ!EJ@Q58xavR9rYC^nHFoQ9*Ya z7_NC-IgRpA(VED&e!eaooU`kt+(N(&4?&?H6mg(15QbnDyh4QK0* zC;Z|4B$n3?4eDGUv=J#7GaNA^({p*iscmcTEE5NEs*pWM(U1lQx&jH)#(fTI!dd}7 zM-Y0MJL54O)r+QJ(oegUwW?U@rEa<72skeDF*$$bC8c1w>w$~SiZ%PwAZ!(}v`_`| z_+(Kg%GO~Rbu*ZF{&=->adpp{Uv3^d2a12)O(+S&Y9)X7(6&+6!3DePJ|*~yQ8ESX zX8<`cTpuh!*%VyJl>r1t5h)P-|GOr&NMhCfR7ePuy6 z)w-_32UMcDt;Gy38WDcXb35^mg@9x`Y0p<&(?Hm^oDC{JNrXp3F#IOXs0fz-RO&anlr+xn6wFZvSi zw%rnSW#^VEj{oP>i*R~0YMzcuKi#liFaK!wIYNksST>>nOQwGP5;+MSBAW>iC#fY* z*Wp=2T&&Io_#v}GwHdtWXPZ`!(#>!`B8H9y1RmX^!=@vf;AxdDhQ<2EEVaaIW?+ZH zIu!u*=R*BKy0B3uzy~DSXPb`)J!WpJoOoBhCHJWm``|<8-GBS&GO;{~iz3O=U)p&= zcj2-S6FjqS3=lhpYihW|jH^^%b_yvW6#X;peE(So5$*rqT50+Jc!PUA?xV(fzba;4 z4>KS!t!vnoboLfO|Agq=wFEQ zGC*a#kjLWl!D|r0E@U0)OYhna$V`3vqE`B{St>B1 z1>4A30lZQ{IVf%=caYR(^IWjioj5^LBC;lm*BS?eiA170TN9`uM8uyA$9d8t$Etwn zl2}x@CcuvcEs7AnV=scP=A1!(0A!@VFdGSF)7$$*zU~0%J+DOd2=K(3VOn@)we7*_ z4+AaQQ!qK=6Z9v7Dp<1qJJnxGTPU38Z^>DqGm1DJm9*#K^PAmG?57OSZd=T0n3PZn z984F(L4x%wLHsFhJzq4|0>}U(d%$9s?0U_60o{}i5jU3&J(kkx2ZBrv59dANNGMTK zxk-s5Y7KONBynKw?`0y>s7tK6+#Al5yU}}VL{yNbWm1E*ypMB+g$S^2FbP4~t72LNP(9R!00CYe4JU+e> zR5ELCuMc#XDW};?g!lX{_8RZoyjK%aKNWOM@&{i11p^a}nN;Qm|197$f{aj&@`GTw zYjq89$Vo+;K!f@VsqPf%1k^JcQosys3 z22~DzQH}5>XBZ7fu3b!b9Blj6J}KbYf^s@V0ddYLJtm0{%9-r_Fmq-HMKb9*9+miIYeA6i?8bU%byueyHyJh zMKhn4gEQ~P;J_g3s{=5SN)?r0vpbw)_KaP9H)-EZf_EiCyU(4or3nD5dERNz%qW;i zT|~&=To7s!B$1*DCW_kJp9eC;+eh%a6Q_2E!2wIhr4s;w`=`3El3E&wmk%7MYBGr` z)QtF?`ft8Oi7EVeFwx3G0n=^0fa13H=peP+==f?m(`*TaxBy8IEUhpq!<)*Z! zG@i^1o5qZ@LzWupa}x>ZyY(5yn1t>jQ1k6^xJzlA_HcEXbvfHL^7I4VMmU#!j5XV_ zDt?2hyk8KB+pT7uYX7^vRNCEXe4I-$naaBf*zV!Vxb05gCBJxzXu-_@{XSr*y4mxw zcbqZrjm_>N3#b&C;`}#=6W#7LqJR^q){t(oc4ER4g@raEt3~N}YZeQsX<`j|szv7- zo0VNR)t)@Qy4g+QI8^EIiGfJhRf539>J@9a4&oLG%_9w~~*UMjyhhQ5{-xsP)Rx&vg5MkG&3txxI^YhxM%5U@VSOxm|M}HR?QnHx6HuG z9#%snP$WJ9j_LFo_h|!TNvk-SAorw9qU*RdQC_}+zk>#$XS6BA%^)R(QCG{uo(kiF zk@EueX+eD2JqFn~+HK$1eQL1{N66uJX3h=SMgDu&7^zI23G3o;a~CzWm82Rb#UeB8 z*6Ai-GUGyW%aq&e<*q>w4Nqk{>miIOJ&8h8d;ggIInlTzBnE7GVc|`fy!vi(XRkRG z>K?49Tk8{}8lA9QtNfLA;^6h#upayu!>g?t^HJf;U7G&8aR*uMgg<Idq+7pP> z+i;wwtU=-)kU2af=DnUGkP}C|eQWB$^tv8VrOw)a;iR8{>lg8edLmjXQ2Zi7<2sc_ z=|@}mxl6>_f>o~zbwYW91hn(8Uzc2!MQ5yJl=()Kn}ILL_%$jmu2b6{vp}9HLb(hI zH^~x|3n*#&Bd@AKRnxT(iCXpTTQrZMr~B2$BpwV`x4)`Cv%p9^puZ6xyrHw(uT1r-?XzYP@ng z`}31&w;>Jp=PxBk)%Lza#a==-zYD}iLpLJ+@h`66#nf{+Z3`E0Wo~149agSOeFlT( za;Zv}ggnm3)ymkCERR&MvW-~}j|C5+<|x*SM2W(Y?#PWxRK{aG6&1!l z`BR9Rt=!hsekY>CCOcJBxk~tJ{8jr1{`&&L+^S1YAPY@`7f)E1p0LfrH%c+(*z7;p z?iJCzbkrk>4Wkt5mc+vsWD#>9D?DxA22{~OmO(THjfqV2QnU8)71NE@!U8&)206+Z zCF9okitIn_+{LaA7)O17gI!^k8jf(O4>Jvtov+@my_f8nk$&t z{4w)P0Waa=6MZ`H?-fHw<|A8q1(>EFM>ThaAJL`8q*>c~_2;C4H@epbKsVILJYG;? z>gUodw~P;WoEY0jp4`*M}xvXbL#F{~r8WLe7LmoW`2@xSRtj3L-G2CuWz9MK4Q$ zIJ%C)57r!MTd9RGaAnB~#-!4jTsjsKBHGt@;(5mk$92B{xTt}#$K&zD@JoAC1@oNm z%W5`_xZeYN!Qa6)cO1Wi+!x9Z|L!W2B6eB@BUo`R@Wu zP?D@>O=Z#5;-ME*D}{#Pn3Cyp7YL7Rio19$py892g|x{UYdP%TbJl=Fl_WRi8SR3lbbcJ?pUDm^A#Hba0&p;~Y0aB;+L z!s4~N9ZHx!(I?Z^8woz$OK!;W-1^zgH$GTindG;a6)9>4HSZ@%{F4>>p)W4_U*Wi* ztasVJ{ikiZb2L-pY4PqQK%AZQ_$AFKEpA_sy8wf+b(M5i8Hd#e#!|DC%VfD++4h_r z(e^zj3m+94ci(t0?Eu(U4A)8cC`g7ihcq@gZ>`->)1~A3HM8{gLF>~PY}4ekPwd=$ zZ`zA6`G_csV!!Co>AbTta_3zhGwE8uI<}b*)`U(4Z(;!0byfE3M|p( zW|p*lM8vpt{mYx{)qI%DFNY%kELBTTr=Kc(H%nGU(o+3jJMA z>=d=4mpXlQXu-W$3z96|ljVC~z%$Xt=J-Ag)rvZGsF)v}ZyoI_Vag)x)2DMZP10Tkr)@q^VKrg_^r+h4L%$aeYYG7D6xRjG?Ky01&I_K&ePte{KrX? z0cpEQDwLVvbE<4xV+EYkjz zrz#iJNu&KLkc-UlN)5mMSUK>l{AVGgJa7W71@cE*LsL-YgAf7c>ah(^3I6!O8(;Zn zh*m*qBcW*0_42EVRv>cUzTlnd70eOVvQfVOo*z8|E*0|fCS`G5SwpB`gy3n^Oa5`I z#!-pLj9}A=p=Z~;ps!&PIYdBcZ%*~evIFsjM)q{lz7pYV;> zuWc-=4l~=_FTI;9%)_soQs@7j#KR2Y;o}_m{!gbvR;ozzW!1kEY1*XRkqbfEZNQyH zUWy>sn$|PbKMeS%Z6H7uOZL;M8QZbNY0p7blN<@z`ocfnDZV)T>>D?g_ju~!6W5_i z!SVLte-Jh`t45By3O4?@CWd;g?a21r8^AG!x8=eH&VD)s@CtSR-+f?os}|IdI$(Tq zTK9CDs_N(Q@YB zp?2Afiswk+S}p^@gIX%NCo2O7A!Owo>K{8zZxIf6QgS!@{4d zPuUaQ1EkE~w&(h%?Kd5Mroja#zMr4KB2L?SpAK6QzaSDwQ7&$%;x+Nh)oYOGQ=J3o z#7gxVyMwpClZA8123jnKuyz-jS1yUFe_e4l51UCr(RBe*f8aRG8&zF)ZDks5c7Vi8 zGUxQC`8ysorW5==n4!%AT~ZL0h_fGXx}>cbSlrNhRBN>TxL6Il?1RY1hi=c9!12q% zUStcDG$D*N1gvMy)p~^90d#u%_}B%D5Z{NdksEpaZrvM_g6BlD`?t~!8*US-CXU$I zQ>$9=Q0QF9D!}4Pxt)?t4%NyF=U$bxPWJiVeA9=Fa@Z1EhCd z)FWy|(ZfCrh-WEd>cG~8c&LhgL%<;5ryBD5S+x04;!&&8FBKGgP7R>N5U$U&z5_2K0)KogSI4G0z&Umv-r@o*i;jA%22SfCA{by|c^r zcWis8tn}v>_Upt;X8(p>BIx2@bTt(|IV(9S)J^|g&aNCZ?PB&3WzI8`cmKe4rVEaK zl=;mBEYb;EG=c)7ruT%nuW6#Upq!=ECdh+XsKsawh1Ql&!9tpDk!v8?K>!3Uo(@z= zik92fcxVzfq$tmFl+Ut!pXk&^(_U=u=95chIcA$Vo3A(5PdS(Qwh%1KHS-U3UZJ6?zN(F@m zNrs;S%|`OU*_f0|!N-H)X!BzPkbiiO%tae;o*cF69@cK{kqzePR(@u*UpPJ74;&Gn zr9~f*izSbSbFMH2pTZ|=-1H&PRFL5~pxB7gJs}A1jL6+QS@zYcL>%t#|KO&LZSm$H z;(1?A=&}TVqUg{*JzXpC%w`uVn_+UD{J?uRO=d)syh_vmz$)4kWs(ounzQIpTb*4uRAFc$8 z9{VU+e2D(C-yZ=#ly!$^Bb!0)e^?xh{ z`Ct9NY-tLr=07|K8j-wi>DdS+EeS~NxjR_sTV@QDI?J_I#UKxTE>g*nT`6k1BDM-V z=5m9;$!!EBp$9=WS~^rXKJt@+nO7D8ob0~>yJOL7ATzjvX^NJD-b52H{VZbbFl+Q$ z7V3H;Ks^Os!cb@Mw}#cP93Y)X&mRzhpbQ8_4bENL2S8+0(EXXz*R|v;iEY@E+Y?Yk zYCJUoB}|#2&y)nZ*J^TL_-u|Onfv1z+_#<+JUbQO^S%h?gi_U|^O=EA*JA{EDJ;-v z?q{A9@>@K3?e)fwqU^|Nz60>}k_g|sQgiXvBJRPpgpQp^CP ze9RxDvVjznyB7pI0FDhvQ|Ar_MnA==_&%sC=~7wc5faWdL?BzVEE(^C7p}-Z=|1_& z(QgG`%}|Kd%D)Z5w4)#fouu3p-<&fjVLA~|d}~i5U<(pSK;nnjoxR9O8VJX@>J}9{ z++w?lo(Jiwx|JtD*0lI=E3wYRFFQ(7 zONe-UF6a2i?_5v<#288)qpOFIur_B}!mIYDJmuR}>gPENH-9nFrtFVHW>jK{tox)~&oF;(* z>1(3dYX{nzMqd)n)7qu4c~>x9I5Eemr#}ALBXlPn(qXeRP*J(g2cy|u2@t%HfLKV+ z_=iGyeTnqzKJo;(2+q~D{MF{mHItYyfjpX;s-0vd`BnszD_WkH_8obPKq=jQ6WKHH zT9}?gEJSwGf%bV2q`#ho>)esQJ$kolheG!kNNx_ekDE|vgpUE0X+OTjWJ{H~ry}E) zWt;u!Yq79iaXOAoX&0`V~=n$bO4 zcw;5h)`rrRu@&WyZW5u9lm6^4>Iu@fO9r)iWa09O**AwP8VI||JwA3ra?}doRW?8+ z{|Nda;PqiDuAC{9T!Q4~*cYYrQmBK9eOz%s3 zutD1~`$-M!u4 zYye&8=6J`3l;5^g$r{7$&h#&cKSI0vyEFM&OM3YVK6R}_(-z1p!CDzu1so_~MUmSa6XIzninY2_@Q>UFTemC|HN0N39?`{>&xV40`v(h^ zO4L?-daBpf7;;koea0`px|(Z?GlD$=0defcB1R0AezzM%#B16Ql3;(WSlKneO$JmP zI=6x^c%Lu!U>W|+eRck!-fK_hRwUclnnDS?{2589Wq6fKU|HT`oESH?l4GK{TKhoI z_bZ|N6<)u|l~z{OEM5{*@xRdv%X7syu@1$gZLM>L-p_KhNA&Dh@LGBw^n?|9t@cAD zBUzy|&$#8WpVYfhh3-z!YN$iRot zogq-uCcg1Xi)ui<2Ngy~ggKu;m|7^1O)|L4d&b_q*54@LMG(cb;EU*@C)D&gxgjAMUHBDXF9sUOKOg7s?hwYxxEL2dP6y4Y*a_RXQ!Z3f9$KE>T` zRQ)lvV&jBLtr;tjAcQl3(`DAZpAt*~{Yy%0qne*UTshgV@RB2_A5cO~#~PZX(Jn-< zm$KN#mZcJW3^|WCi)^_33<(AaiH8;~(ej9qEX$yG3Jt5%;(sIFol4MZ$v1!eKEmd` zao^`~bRx0cRfH@)1ZgR^&(MPHB;g$g;zW1(xnAE%`{R3U(aL%OeyA9xXx!{&C!Fq( zxt;w0!x0@a>!v*<4@5PLkvlC6!}aD{MfV1zTunAe{b3rfF;!rd5do`A1VHeR`+-UR zqt2p{8`QvjxaAbbHAhL2Z*^qm(65y$g45CjkuVHkuHrDCo3qqan2EF;M&CdGS_}wl zS>cfP=GEqtj0Cmz;)#YxxIuf*g%)=6rZcA-4Za`6m+^5KLBRf3e0f;XSsq2o8#7_{ zPq#4r9v73M1=IVVn(*?GTw9O+^#aK^(zX>$*ELvHL=T6bx*prZk4E!fAKce43;7FG zUvPulL=LEGAy-?fcs2Q4n}8QsD9ObX)b(^&{u3HI-Vn&S`fq65d7B>n=wFk<_4#WQ z9XFN#4UOF*|CfixhG?Lv7aRmAkH;rnlgHZUDg~?NFK!U=5aKrFK_Mk=Ns*Caoqj8) zpAQ5#dIF%Y^<2p5^SVD2vz&*Vz}vO(6(TOYuvzok=~K&tSUIxuN!DK>kw2{PzC5T2Efju1Bu87XMcguWMy0JwhUpH zl$a38uRA>~qxAxj7Fq6Bg3EzR0dzqN7u?!GtRSgg_Tm7D!k1)zQ<@*#Rp2*HIXFuM z3~#PMPs4~=vr-NseCzR`05DlDF)s&SKym`; z=bWGBN8-4u&iBbsQh#^+0J0GgK-`%Jsfz=F$r0p|DN`Zi2=>=2Fo*`{Qgg5{(nJaA zX!SO;3o&vsej+jsW*z3b0VQ|RKHd*u!6c`4jwZ{#nn=$gA*3RtK5(@{y$J6E;jpa~ z8PTEPKn0&C3;Zfq)b!u7Co5CSd|~`};3r1e0S-U8#@3Oy^<~N4vUvMvj9G;Xe?2Fv zmt4aB$-U%b-bt2qxDII_&gs}(c7yfI9V_?@-3^w^S_HpoDDf`99z(valQoYzR-X@Y z0&ZB6C}ArQZ+h+mLH1DMShdNAr)_8w_EZqKmEE~3(8Z*^TXNxQNk%tWlhBejB3bgl ziqYe`ww~{1xOu)y+6Xw`yfbHnv_!90PJT|F{LExRXSqsrjs(VKc!P6J9uyy8caFia zhsJ8*NH3LqQdH7%RyF~wcP9Qk`IQrg( zENii!ZExe7H^iJ{BEj}qjd22Fg3>!@2VX!98cZCix^-{LZ$@4V2SgB72y=aEIjfNx zpg|i-bPxz($Aa@kwxU_)eG;+Ump7v{oy!G^o-u26YW05c{uQgXbodX`Sfx{U;ycL? zOKQE&#qE595FS3%XmjJzY3UI|)fbJLlPC)&^9|lNX{;(#4n?Dr%eIKm)SMp}n}O%? z`ym9T69!PKfy5XQgxCXDFd>H%dol5w4Yn2iYhrQ_RxXKu6!tS=u5tmj5r3FZwaA|B zMsvh=`qX;gc4L5MW+~}3OM{0`Y!ipbBUL3M`YYNCA2{m{;)?HE1Ce>v{;sC^;ls3O zYqYZ0LBjx2Heu;q?iZ;joe;_cCRZ;&>Vf@}c1R)i1*GG-BQ%}6Dj`n0Sl26u@W?T+gj6_RUfiH` zQ!V%Itm=~KZn-k+fOd6xh0)dGfHFG2n!kr?jn|!>tdn6rE3>2nUevPqO>f1ipk}kN z+m=dpFJ-|IZmEZZ&n)U(^9HfhlaFX*Vuk$@Zy{ygd9PIZ#T0?}=7;OJ@)hKO;#?|# zWVp+qTWy+tHCly^SWGXx;f?~uM|c6=;plDG-NqX>lzB>NS~dqMtcQpP9VEPWBd}s) zBh$7QZ7YUhTr63Kt8q23rWxAg(&*|W^<*vwxbN>7%KjHO!$||T{D9SEcptTCYuiL6 zmA_8>d;-=gQMx(t{|tx{BxGaGB73ufA?P zZ{Y;*1u5r-t(%;~HmoDu>eqNwH>klwzVX|M9}2%HE}co>NNb3F zzu3=MKl!6a`j@=*xFzSpg$1F7f)F=WjDs($?YOeR5$+cd^(P5FxNp{xq$}nydF6!H zS%l_#!c3<9eh4v`ub-DH{My~C7w0`tMZxU1YgBBdR!giGuG3sWPHR|Rx;xVnTk+L) z5ghq$E|fvLnsb%px`W{}@wXUQV6}RnFb7P4m>wMG3#EC;ZtB-JRxM_y=!4!5D*Q^L zb0#I#EP3QY(Sxx+kDgPO6YEw@NLKL2n!eb!7oC$S2vnyzAjH7_kaa5lX?T=Lf}D7r z{(&mhtrLC)b;tZwm5I*D!IICu9<|~bzU~-ryprUy@O%4FvG>6C3X9e-O@3kcpXUO{m_ zkf9c%NbS_Rvw59O2Z`lIB#LTMv;^O#MICC%$H?e! zSrmNZicdo~T6VFly^B^Oq&wu|+ze@xJFmz8(L`s{JQG9!~2Vs^YlE477C>j3?KZd zc6es4je&_icD);E)^HqcA(bEfS=V~9tf6YLhlg^d_Gr7e`|0|llIu|txGR}F+fQ%g zodFwy6Dn+2!eIL&QPxa@%(;vkNa7a%sMsD^6K_mSv-<4#)c>$VrjM}L)9%SpFEH!N zd_H-Tr|xA5zcOV`O!^fxhs)wP!%DU>8tANO#dua{hcOh?tuKUQ_rZIBYN-l_G0%I4@QA8@kfG*{EXncc5jQ!*oWI)}sev&dU z&Zh_^u_Leo!nKUYH^NQ97D>lQi9{JjI8}HgmFxN4PiiG?#=WcK6ePH~m-M2UTd)yv zJ((FK9h+9&Na0n=)X|yc*|SQ$iZn-kkG;8&%^1^{w*)5Fc%9{#R#V$>(n;(Q6l?Y* z$HBV9<(otdN%;Z$-Ai7x@-b-@+U^eu_B|-lsr`x^L-l5gtJ3RorK0#bJEID)-5o`D zIC!E`EHiY>W^u2Bgps+Gj!%VzPeXhD(vvhdK0a)#TJ5Egzl`^|n53%0GbG+h&Yo*)$Nsg7u{YM%QO zd83F$tU1b*A*)%)it2I6iGdu+j+-QsVT7K(<$kN2b7qw!_Qh2*E=PVum3mp8$w zrKkTT?U(YJAX5~-X-%z-x#3#}%||D$Oqa!4x-%vn!inG3DjDWjTCi7-LoS3%jxlcq z^mi+$6s?MkeRr`aKM-puC=FSyDiMNx0Uc4#SgnZzHDQ8fe zs9#%*drKM-9C07FeoM7D#Bs$;lJ6>CRZ_akw~_H1Y#HEYTZ9E1Xyj-PLd-{seBaT$ zQ>i|<)X=EH#@W$cFTyB_{7IOa`096<Qcu@9{zf(`&siw*VEz*wk=)LNk?2wmEA>Y6PjeJTJ zfBae?gmeOK`t&>)77Yua&-bgOiS_-ZLiWlQTQ2w`u&+NYb?KG{&o8 z_NZ|gp5!^pP#W8B#mEAnF+n#JD>O4k1;w8&SJa)XE`g*;0b*r_l270JJ54y-=?!6& zGV4jt*W`@pG6i(=vSuywmf=&+5KcH}dlV~j>a&1obt$PpNoj9j7#zpE5D8D`!uL4y z(FkK$L))^QeeQr0VMf88ZBegXO_t=_%#0gU4vRE3JwHUxj>Hm#I}r;X2Gb}y`n^J3 zHe$_-#=7ru342wBNMR*I1=)Yh1#2v_G25*)eECCTs!VHdD75OsJ{K#VWZvy~6)}xx zbQhQ0wD%zp0$tQKPg0vw@u>r;G^tE`w)u`vxmYVWh8U51Ug=-_m|MZbqOnegbYyZf z_jnUUn2%=}LhPVu``+zm1(A$sXG$ zR<4jXjiY-`H0O1F8W{fBp;@dsymVHQF+!P|8+Zng$OlG=k~g;@f1$AY{lJZz-|Yg$ zy>9L>VK;(Vj*0^1N7x-4DW?+olqgCAk57SE44t0S>(xJUtnzbY#^v&FD{~5wVT@qs z8rITU;17)qEiAc;l2c|!G{(uY`D3=5Fl!yh);7I6qiGNqk%dO6Wn!q@tq(|AT1M{3 zcKovKPhQtpxUg6qr2sIDtKH4D_9KSnuXfG=P}_WxXVqiw;LLmS$PATw`i!75 zwR%uW7)1N?G z9|#K;YB4K?YL!tWb1@@2bCn)^!L-|yHQXy(qm*T!y!HxoLn0Y@|D*d0Z8&9(LD}M` zi=b>K^KXLaf6AVdDFsf#x@8cp+dkE`h0D$d@>ZOCC)nLO#RkElR5}#u1c;N4%`ov# z@`pguc8yDUg=U~4;yeg3F@)C#lsYzx{wAHfOe3#{DD6|-77+kC{;uZ`swYbE@EL^x zxHE1prK$^J7d-&*Ro}qG^`1MRjyzUlcYiFLuLv3Ip%Rqgy*X);Ip}D)lrnj22l?!; zTDA0m1ib+QIuru!xI!o$xEvBtrM#nYsTI~ zj>Q7y_j4#Kf`TXpp?^XD>jTO7xzQcda%~X!CvJr%`vHhSBPc9AMgYLd?l)5K`9X$n zK)c?kzl;hJ9pXZyVKgc881=R;(l!vkRbc#`&_k)lk!*juau zl)jb#XvJi)mX*>_ItfodZ2WXdG`bWH7^%a z{7{B!e@;UunIwXr9~) znb`?o6c=9RUI&(#f6kk{0ib%}kh$MU@{wv)^d^`Xy33ihkk3}%%T93hoZh68MWG>L zJ+KDl=tRz6G-06<{Me5&FqiZTL2o=RRWS5Pp#03lm7D?D;q#!{ALD}+l@GKk^_b5g zy`|Dq_vfHmFr&kNJk_DXDom}FI7|G>mfHG9JZ{vB>N{~XLXYe?s7riJ(1f1Xs?6_l6#;*yD9UYLLJ!)6vw?M!aa5Mb_yO+2kTKz`{=&APkJU0dYseJF4&PsbKt;1xgKh+fA5xEbZL|}(z--i#17A$b;Eg0E`s;y0{_vHXif=t} z9GN}Vwl8iRZQ;=BO1M0ko5;UtZ zAAMrMl>G)Ogk}2l?tH2WUpDtPHfU++9{4htlG+YyPUug9;tl`rs^dcMb7jE!i!^^% zZ%eNmlvMi<^t!<`IHzm5v*|wB4%z`Pq@t!jHv!^Z9V&JSEJ1czqr_=qy0i<8JNv6% zrCj!paq3+`^XD#GJ?fc#;4;de1(!Q+@HM9vk{jjkP;mnZ*?LaIv)zT`b_ zJqi`R>A!%aAnA{emD?)lkdxZIwmNDDL!~fUwL7zyPqKmAoE&qBqJy*z6h$o(Bk>c^ zOaC1o8uP0eq|Z?MT+OXqSkK#ZnNg)Fh;k$06$s4me#LTu?ty~?G0oNNUAK)VLe{1N1jgXGGw*|A0Sit@9#Y6W z|F1Vwsnf=7#4_Z`Qzy*5UBHo|w!#Sj(l6N{G-0AAq3rh{c$E{Q>{~*Pg@cliVBHab z>|eVl>wa|vXi;uP+#xQTJ{jAKJMKWwq7Sw^JK-C^0zxC~NS`qYU6+eQagI35F=U&ZMIV|)}?5Te`z>pk1{65-nSq1Dkh%z57>WA|$ zjv?QN7;Bu4kX~e0*TDCn3trcCl4D5?m+o8go;Y9 z{uh2iXHeh~_$Q}wIxr{F4H6s+O~>$tvkkG3o#Wf3 zoLiDy%Owz)2151NEj6makEdzK)C@L&&$O$U%x~77!&xlfiQopjor5RCJ9BMg4w56x zoyWsNWI(~wmXF*>>_H=9K3Xd#!Bbk?c03YK83E)ffMo6hz&FtkLmNFrfZ)VMQQP`} zv}Yl{G{k294-$IHLuipS1<)`-3LYK?s+EM7F3glS6T1t6Pjm@l&7HjHxx(rs>WI0e zR0S3veTb=Y4$fJu1AS!&!(}%SHHBHE%os=`KeX?E3hlwcWAiC4X8$)SMyZ3X17ZR_ zS_LW0^R6CbD^1x@kCvF{_kPOXQDPri8sPo`RnwI^rjH*6Ap2kkE8xnKc%6Z_u7iL* zZ$*NHU_b8TP%%fntkDifmf3q0{Bj-aI>5uY{@E0~CSM_^XxaDUpCBje_*CM}Y!Ea#0wkwem0D3U>1Pc3Ol&;-1qcOJ?m+DGXKR5a@*&g7 z{L$O$jqtkN&$%?x2EWZaBv?0D6nEypLtrnP44eIE(|`R3)Y4_fGwO7WFbP&_!_Z7upp*1#iYrA7E=h{iR0D$3R#A$ zLFVxaMh1*x4IPE={t{&7CFRZh6b8uVMdhvG!JraZ%a|JiiYY>ycNNI*!F)zXZ9@{% zav_#rlprzKRO(Qy{CX3ixga$pO$BSRQCj2zle}(N%MKs}V;YL4sY80CK=C_hw@iI_*TLBm! zx4-HFB5TmGkA2}J{YFCSuK5nDoa1-}9&u^qlH24mODi3Wql zmC~Q1>MJSPig$LneI<(UW@gm->mcswNv09P9fJ{P22w1GO!_xN_Z}DgEw*S`5oekN zDm{g#Z1sKz()(!yE50nLehJSti>?IVAQ}dwDq_Mq995IZ`J!8Cl2rX%$IFhhoTwT1a+z(1^n0XfQ|%Q{0*dB4Zbb@X8d zp4SDY^=;w-iS6+Dau`HnONq#gla7ki)Z$JU`GjAx3W@v4#U z`e~^;qV|b@pt%tL1HG5gtozl?KUKUlK%>(zJ*A>o=OYJIH4iU-5D4H|iNa_ydT@Xv z-i++TVZ-sCoBCZX&^(kF=8eo_1v!)1&_kB)dRZhimwKQL#5Ke!agj-qXTs z&LKW6USuwcc(9WhZO~IRf)V)mvg771ue4cOkG?QkYV;l)D!rG&Atf!k<4o7}1 zy&@0TjgFxg3rBqtBmnUFiI|(|b&x)Fc{1b*gTm&Z+^+`7Ng5ML+p7nq@)>uHkK;$_ zro$;DN0_OqSF!;R-tUSJDWj@zMWO3`G8iUr}--2h?c+6ls5Y7s#HIbz&?sV0f zsZb@;xg)y=^arC=p}m%+c)|NUP3x>F*o_y3(Q{wKA*q+=B1Tx;v$ULkbo-a#0z#_A<+ zZqDiO-i*nSX=|qC^XBDWmzaD962CN1A13eLdFZ@Cb~fYGZzYFlBP6_GR(Z@#f(bdg zg`vYNjo}OUB_Gf%GJ8Nx#5GVhFsfF@{_6*oRB!N|<$=;)Gk!^4K)zUgVuX$y*>kz= zpRMQ*<(xR=?066$g*0m~lFSO-5PkI?2-t-{ORta%bVP_|v0HFij_-KgLx@S%q-Cd2 zhtBGWbt82jACPXn1g*vC$8t^nl8fIC`$?u&Gvgddn+Ht5U^QX}{Vy-n#DzQ9)32P0 zpZN#U=3V>mFLYRru^5HUroc<`5e-d$jdSh?!+b1!QB8V{< zexv@vI)jP@RO1SKd{^rVl*z$}{?FQ>{)A2s|I;3<|H&_1sRyUlM-cmX5D205&*n;! zeE!>I>mNucuN1-j7BEqAi~-Ncj<{abL_HuQ$_sK^EKAE5BfRJR<{9SSSK;Pw9t+QN zrVRhqCHgo+W|J4?IwJISD;l* zGAFDGurmOTld68R&;BBQOGA&EOfgkONk$7Uf;>#+;ng@zi>~HN)*5k-Ty8Q+C+HV7vKXYu)EZSubq73l%9 z`K+7RJ}~ho>G28}u%j4@gbIVyfdQ32T5&-=EY5G?b3t&6G;TtAiB_<__2621cojh1 zH3Th@@`m$EtsTY)KNm~q7pXsLl!`P<(9 z)<$&)n+fmJ=ui!3nu#LXsL3CSOWUpFb}p(zF1+5>-?6KAYECwvc|Ya6o8Oev-lDlU z9_3D#sestCyG3Lg!$^Is;XP|D)r?2S5`NVP-md!)UG{Ay^ zqn^rRgj1P}yy&**I_0e$j7~{2_#RRl2NcS# z4!$;aN&kxb3n5L3RWOFk0i5uYcLN^Y2vot+@!dLR=}hX&t1NGYV78CQ_^}l?2~;>E z-;$nv288vDOMoolSSR^l7D$Qdr!wfe|Awp_+0CrO7W&Ou~@d#u4Bhn>YVauJ;hX>8yAi z4wE)&V{2K{lcMBxFq32*#e&Pv(EN$ON{;z(gr16ffBu$`zN6Z17CIMD!B5~EOBz*T zJxOZgLOFeYzlx~XD#2RmIOo|LL(Dqf5;$+3;GV+93FwUp@{F+~E z0v{CfmM8ZZ$sk|89G^PlOZm{YWz62Uki0sr`;56SJ8qR0#fGV!s6YpX z?lyj`_L0Gi1H(U;cDpm2v3Tn`!E%+Q3@*?!rX@2GrQR+Q_)-8?E;cVnyr_=1dRqKR z#fkFP`+FydlP6m)D=?k}qb>WVKaHNsqt&XugdY@B9CM-&#BZj&a#Y)ag@ukLLqkbX zheWN~oZK{yrM4}P+>|1#$be|najBqNEh@Kn zXa>-I_R%{qsx@^jd;X*}Pf6yImox22qZdsP7X{;8u#5*q%`G*hgY}kT0gI5 zy|PP(%V;{(#LNj33P%%ml~@y`w&nDqT}tQ>&#%F;8^R;ZTB4Y}Z6X=4T6q+w}%Y6t|{6WWFXC$VtE0?geWTU4sOYh$B`pNaU5 zzgoh3Sn*h7bHW)uBrj$fbhx3Lz@*`O#T+?&`fPbWiK7}fy6_vm^hwdtyj|CbohA9i zblG{^ya24z%QLXJWVW=SrFhg5>E2vHnxFa`9*X$8%+v>f?we=~ z1JAmCyTgkA%i)*HS=d`p{eE zW6zGF&A6;NLr|W~f_HXj`%1xMCVtZ|jKz>HIemra@dVb2`6X6I#ubkF1ezvbZ5;Jg z?OYOlrwpA!NZ|?Jgye>Hk2eug={8=UzYXn)>_RRz>MQR!i+XQOaeu)ybky65iVJ*l z5N&y*nKr6IXimtdx-)90o5&EjW2dX?WFGcV*0Cf#sX8G!c22l#UA-Pbq{37xJnY+=%v%KabaSdC^K~gjVHTKumD+RxN z;oe_$BiRpp6oCB-S{t|K&YWU9iZ0sgt`g-(DeQ5w8t#Pq12&YcR;-;Oa`#i5#Ad>n z+LzihQiV*1RQsvrVwsI5`bjJ{e~E3}d-M}g?!GCfr#nBKG`VGm`e7&dBI4FKZO@#u zU}BvRcKiY-J|l9XJU^PSRQ_5Mc_eA4h!-`-`9|36eNe!fV$xzIYdSgLzSVcUv>VCJ zY<#zEW{cV<%1;C0{4}i<4-31}O~a6eeyZ?Rv7s_JVWqQUk)CPw=7X>4dq_Iv(SzT{ z9yo#p^kU;-gZ8MoSt7h7?{Q+^t&b@Jg9~9`$LJy0D85r<5CmIr+m)AWj}fAxMz@Ze zXjGB?qg=bLl5HpT6}5DcqfC>xD`kWj-1^9=&ztYX6MfnMzd| zuc89A&)$gxl2~0Nw)Zq>XXH1&LV8loF1(OIdaX4kYx}faG@bZr9%inVJ8^(^VADOl z=^{9M^!DY=CZAdS<@L!C)fwq|RDu$!Po!-nD_;ol<(K)EJ!*CAqMf%^_%|@`)^$S> zv#@k)Rt*GVna0sRcd|tB_cgWeuAPCLmlJx9+GmPu=?LscXfdZ_l9IWV6 zAI9Q%uIyQoS#etsPORY)YTLw&(&PEk;T&UsML*)0yH*>#ZD zuwl!)MxwYji=uw!`{Z{&@j9D5RVcn7S=w`$Wfo=KNGS`qKr9DDHXD`?vY*_oU5De> z2b%ZLp;#_X*W?qnZHMnvZ(-3pyq$KMnkiN_5r!^8!^bw)%jL>rX;E|0w%Fa)+`>qw zRMx(U{4QScvxjCw!^!aPri_G^`=wIlA!o$9L5LsriyEuXmuWu#SO-0au$t==8N2JvWNshR zl4yal#RyA>fcsf^6^veng6mADVMKf)MWA#tW$dS_ z$DzT&By((mhQE0-7+F!Ejc#CV_VU}OY_T7QcBYc(-RslZ_A1iy|Z`Xmlp=SSY zKTwDLggNY&kA8O^7X)0$__n*R8x>O?0qvcl$xk;KqaxKMrP@WH3|0r>ugI6+X9N~| zbM21GoNuL7i*G7DyLEWteK0Zr-vpuWevN+{xzx5<@HDUfLt}RgYA>PAyaPbnh$VCc$fxV?iLljMj zOs?FRk(lx40PZd=nw)Q?ld%Z;R(f=17*V>FS0D$#e?o+HPJ=r)Z&>#NbGfF&vDGsh zNt}>dsdc7up^@odZ#O~45YQ$_qV#<5V)~*6+ zN#Tiwn?M$wEty~VEdInrQ8b@@qOdnB9dvsOM^S$H6a`rt63mNVgC2=n8Y)jSdrn3~ ztv<$0YP9kkNbP+hO3(9tD}(Jt6B{btoPmywGNa=vp(vWBa+rl8Fc6kPK8HDtq zZ0URf!dNGG)vZz5n?$a|0Yz_4Lo;*5#gg{F6UflP@FNw*MU=-KRdGdGI=aQX2!xBHzB4kN z1SpV*dVed(PkrWcW$wjC1|ReI;R;e!2hOXH$X4<5?2d(HocUc?-|+1@W3zeo^n}CD z(P5uY*+I9O7MG#!-;+6u#)c zW%Zr6ddLO!*MKqSy|X(^a{1%suQgV8P;)nlf{mNfRRalz1*5jBPR~8^y^|!%EO!r! ziyDR#-)kNk!e3$DSR28Sm}aiXeTU<#eXT6K-tDu9&ZTYS>tf^`rb*mu_3(`AhKi1f zsHi!+)u`3>qL<=+UNwiMg^uidG9}3ehEnKb+JUX)S6`$w6vG!Y&_iR?rYDb|>*k)4 zx6Yl-4KfHOR%zmj_C4h z=+$MugTpo^eB|yUHAxY!Z1!wz1kU%OVC#%kI(jK2zm~ie>@#V_xlM}psF{KHD~nc| zxjr44T|=Dc>4DguXbIh1SXZ}Dw9m`PYekG@yyBl>dsn0f22gg~jObNqf z)S-%Gd7tqkf>~WYv7_B*qa&facM{6O(?1ZDQ#k{9i(hNFD-Y>I;yPL846Wi#m2H05 zU5rXj+dEqG{MCTg+si=Lvw%&zAK5fMZ>V z>1p@Dc$Y~X-q;IyKfSzp`nQq{FWt=czJvL&?1l7JY&c>Uhq3hyb&xPOG9yE49T`OYjdJdB3feSEg4yQU$IG z3buG3hfVCNbnt~lWXBKHOPcH7j4tC%F_a&=!f|WHWq!Sr6Lb6!Rmx7cHhZ(My|qPj z_o#w#A+RjN%2)*`<%-DOIy_>{Li)dN z_1r}bqjPQ*$d9O1q1W3xx_rp65q#c+P^_@hXfpd1;%Y5N7N`7>9mgM~;`x#C8CEq3 zsykl#b^8Vs;N--9GM0lfUA}M{jUxOQ=7r-hNyN-wB~DJb*Z!p=bFFGj@Y`h}mHE({ z`=S4_$FLZzB^neMS?f=67NRAUhw)M$BTRKy*0FpHw&%T>k%!;1H_V@`^DuJbARE}4F93)_-?WxnBfLdtGz zvzK?+XOZo!_xEL^h?R!X%}-_P6_*9KbtS2<_IrD4oX+~W@Z0RhcaKr)XGbp+_yl3u z+lF$QCyutbmtZAVmE7YxWO$}IM20&mwaeLOz`032EDqiyRw!GfRD4E=Ou6l_c%8^U z3aFN;^P(S(X6d-0h($FXHZC<@aoWU&?%5j3xaRloF-tu^0$ZT;U0laTYkrqeY6YFR zIod~+6;=1NTADAHhd^U`jKfGHg+&A<;zp^Bs^)8w^r3_+HEaG=E7mp=zb)fyat#{% z%2(op-)plViLHEeg7|*gVv2U1Tb!L7^$F6J{)OpNV^0F)u|kAN13hCxJ|c#AecMGV zByDd^+l6cwz0~phVO`eEvcw%R`1Ql_eTvpK5FQ>D4jO!Io%wExE%d1pOMLc06Vu*rwWjeLd%El#CXczPz71-b+5V!Lq zv1=p4348=Jv9Vt@y^jpg1QzpOi>KuGNINf7_BHE@QMuDH;s1W~EdjXgTi(LthJ^XZ zKo>lu)5A6KJ|RA*fan=0Ep4domN?HU2BcQaBhzEcrP{B`FY6I7K$fHk^44e&u~`R) zjhIguM{G>Z6^wF677|{LOvjz6Zp4v7Wwtp z*U$Av|BoMD6-Gkz7Vt|M)s+VHeQ$w#0Wa6u%tXh@I{F5t!LRt(DLTZ8zmjH!r5VqUQ@NpZJMhqQ0uSwf@iH_ZL&KM!ApBI{`~%+s)5w-1|EcXDUni~AFTAgQ z^eugz#kh)QdssuaZ+35gEB@=3E+_wIat-~)HJpIbVf>#!X%=+dxqp<^>WGKoxXGu%GOm-id2@E6p8 zjT>Zx8!|fzx!6F@hZ4p|40OJ+Wu!lYlpLn*H_LsJGa}}2)uGW=4O^bxTBQfYJXyE+ z_-ap*pGB6x8MU%CW>@5FUGYp5*OEm>A56kBlQ;_=;bDX_pbp&FQ`H&G2@TFGF;AyyS zN@`F#YjH9?57Pegve^L|r}QT;);H?5(IYxI`gs^fOx;PkdvHTpp& zdU)x})!)Ws4jQXbn;2@I1eO6%ByUkRFA7f@rNkU}N(L6!`U_=sb>Oa?Lfoj&pe<7y zqs1wI6sZ)YuO+y-x$V2x|IlDy$g-f6U(Dw?m15PFHZny7_#dOKcUg^U-gxGDFvD@B z`jeuzHiq6jLn15e*-;O@lHoq=9P2!7{qK)0M=C@2l!Q3FKO?TpMR5zfskJlD^#R|O z38+P%OD`k_so}yY7SmcGGm8X0qbr@6Qiq13lMiXm%gC{27e(0ih3Rso!HIhoqCNSupPb6er6X zO)70=yP>Bngr`(4YEF^YPU@YSrW5f#HY_3FhR@4Dnc+v3J2}AdBb2e~8e^Q)yn-y)9{lj_Y`^N7XGD796#r{LTB6+(> zQEY^T6n1MbMHgiA;<9FGWO}W>wt>3s>;F5o{B9OS3z!GT(49%Q&He@u-8;5PVKmBlq2}MZ4 zlhRH-ORK&`(DPmR*2QQ=?9HMUgvAk?f}Z4u_e`jXfp0vRxE_}^L)_PD}3o( z^G1GM11fHvW z#Da*5B1jXJCcPMX0v3>tpa>!c=}2M@hpq_-ND~4mp$kC~5v2!$v>=BP2qn@;#HfgDApu2}J?wo<>FMry%gr`t)4o>a$WAXCgGrzW>`nIoL=@ocEWbbF36ur&`z zYge8${_Fp0+jPN+m)Pi~=9D@%U(YI?y*xBKUeDS!xb41l_xyao{B*>J(r zPOR*K(=5-HL2hK#WH+I5bn1Uoq*8*i4ZRYJ7>So_qFvMcMq}-=ElJ0nemVm4jXk+?T}e?THao>#pGxYgjM-QrN{?VPmNv zLJ8a9Bq=yo-2gb|QYqVJl~wnNuXn2rinLtVmy*X`*q{ku?nxc5x!2@PdS+gcy8foc z*9;Y0L>7o$t+a{1Zz>)a{AFs}=r#uMA)fVGz^VS6X_SU*bhmZV+e2i)6+R(d1N(i)Dg4B_ zhk(i?bC+_#Gx}?$+1Hn!0NmlH(!bp(MpPfg_4b4j*(iL2as{MB*~Q?7X4h%B7EPfo zGtp}02O4xEc_SOO4)2s@xB4g+^5Va5{MkUu_UM=9xlXgfc^Oq3#p!hbRK53s^UV24 zH$$+%N|Nr*38MOP$h=0Q1<@Uv-8TX15gRheRZvZqSj0_aO zc*;Og>3y0H)2W^hbOVb3a1Toz4!C_9&{QHV=RSNDegHQxUmI9;bd|MEM4FW3A7nK_ ztJfJ3Gv~1>yHlGrfnHay*vqlLAbZES2r`4b5Hze4X2wFSkn79MYqCynPFn@^c9`=#^{rMrw`bG z9O2(CParDl9nC`$CCKAmBBPwxYF!%|XJ*iZCI8vFWtC4bMA zD$zkUz$%WR`UFwm4AlbbOGZD5M^SVAhL<+;krYFh>Xr)0?M2(sn&5n(&Go>g+oaX? z;8v1IhiOK6UwM*`pVxt_(4;{V2DB!w8c8u(+&Hq@zVqvWGfb#m2W+}~Wi3qnwuz-QE(v(rtdAUK zD~F}dRzC07riMy84%c$KH+YGXNs;0h0lr?~c!5gZR`{g6fNNpT**Ezra(^kfIGARD za4k1w{ev%Gs(saCcJzmGUcrQ9Jo82{D2yFA>Mi38EZ^sF5&+HGodXejNj409BgQzV zR28K+pFm#|z$xH(UiZn+&c3ZB!?#KPi#?st1TgsGG&)!mlYkPwe&vpQ`l$u+BDBoz zeJJQ?!UkT{p-zy{YZvys7g9s4QwU!VgHXy`tX+`?a#?DWy;YiL5=DyD^C+C56nCo&&UoY z?mT%R7%N)12da)XK5e5Twe_Rp+bZ_FgF|rCWsolWn@uw8a@6A0ohIFByIx@^R zxs`B-oAw%OF82^7NYtb|#xM0x#wnZ!wjZM*GcDyo7*bmt#bciHk37@Uau)uK*c-0@ ztB1rc7$&R3$HMpf9bg6|X<4nUJm0t`jNJWAVV{a;0Pyknps0=;UYVebtvG=ybSlLJ z<@8b&ck^EC2BL=C`FtajNb?R$VAQ1F|Le=fsZd(M4?$dJ3sM$*Vu=BtjtG|RCVGE} zu5sCl&#OXVMm)u@HGV>RO^pp^RB9jrCAoE7#Y7!!oriuqxT|ZGsArHZc&_LX?r%Ut zIP@NSQ>g}h18~R_-=;;nhr6!U`)X9B70h{%Wpk438cLIu%JSslb5C^qZfB6YtcR0& zZDi<<24PRCErf0#BCW~o%6p0wf$@h>z&>y~eU(E{yPn4MbWq8%0aCH8vRj^T(YJzb zcQ{{0DR7X#BuWF}LW_aR3XWBFS^%varCw}k@2pl5q3+L{R zk8bcSxa=HerXrW?#~PTFv7 zl=5~ZtS-gl+rd=^RRXCa_roWp^?KZwbO7=juV7_b0o4We>+7U9u(rWY4flIz`)TgsD{>7Tm-626`MT>xoOrA>G1jqL z1+5g2S{>sE#V4j+b{3UU!fu$BkQ;`LbFu_~_q}sFjwr$f4lI>c?K1l(mU?UrR za#J+*kuRs2cw?m@?0F+LzN)G1y+;cmV;@Yl$+k9c@ zMxBcu9-k49BF>I)I6*t`(H+Fqb2G)`!aZ~^-2I(GNnDDC$tlc0u>R=N4gKk_0MZ&q zs(rLL_FYLi$P?tI4|+k&^dlgmA1Pz&Ab!wMZBcbqxNHR?x+2r|0kq~-VhWJbih3ec zxbWkW3QS{8FH-4h*40V3bL}4+OkDE$r!CkIWbK`Ee6LO-H)fW2`1%SB460i%pdo1xZ@bUECHvw`ukEoT67suXu z)&W&6mWr}!fxF{@XN?tR{v{N>d~ksOkHh~ze;{4s-q5w`X-20V-Z)9&^vp~VG=Cv- zFmbN}Bj(;8pbs5L(q?vqs$nbMKc>cHc>qNhfa=mz+tb39$Y#I0QVj>q8|%XfQg5>S zjJvs&Zw%+foP*7<#T`eIhL&@NIxYi5xX;z*e`t>V<9en`xVv{Z(b)D*Sd~D4;Y0Re z^HrOMk2w~?&ur5Q#Pe><21+}e0?4YK-jKuA3-b+;bYyo`qW&%y%`8|1)UrkPP`#Ix zwEn$^55k8?xBeXcH!vgqiTAm3D!!ol$r)j9Rd&DRKk|o?eMr$z!m6h2YVOvcHN{fEj`{a{l02_r|1ww@+7l#& ztJLQHjjZQgT-lx|dKi`N$tn~8M~F*J1fQo0FOhuCgqXktrSaWY^pRAb59pz{Q%zlG zAX)G|x}!X~52rb$NrSq_P(qx#zPBf;%AD%g?H(=@?da{RS>9DL>t^kp)|t8q)dy#U zAUlf@$sPD7=+n5k8UpyT*N5rEIddi#v2i^*%lc2q`$B|WblzIK*bnInh`&4d{HVLo zCt!zTE9KWVzu{Ywr~{RXs3KywkjbFu+SVtwY^Yh~S_2|3tNusC;}h5TOK&A* zgK^nYN+$r7+a8b!P|`x6_O0zr>jj+y4UhPg?#H&h3@%#$bOqrtNIQ!>55*i67B z?V9hZTy@(GR32itat5gBRW2cr?8{z|MEe=}y$fhvVBl{>!)Ze=(e# z2+i%3%|*MEV*m>s&!WeM(6uBSdBuarTFY7|_oSJS+|l^CMc#+G1qCJHtKQ78cWDVd z^L(ULA&Wz}fbl~zGd(b$X#6Es94Hif#-WatI7N9Q!gkho?Ytu7=tS@6i68Lyjl+CkAw-(5Lf&$k%J%)G#PB5e zv$@z3dM11`P)37e!Sn)|ny&{cYpQseWb|i_b%1Of$nS#0oW%O1#2M`xE2rH-A0Ta{ zK6W0vsx31e-Fjs4VxB%`;6jd)O-Xt0>48~w#G3t^4^~!L%cx4W#k6;@m;1Se#H9PH zjED>n`y$l`c)=W-5H0ESjue-L>lU>dN##sVyjleO)Xbb>Y91@8X-2T9I@T*)NmrZ z#bT!$mh2cdkgwvIvkUBmkzf69D5pcCwnoWnu&>~X=M>kSZ&}1TS|uTg>8ZtRtnHwU zW5Acs_|+j&Qpi!Y&l}949#!3>Uf45#Fv{e1u12ZK@`57-+jx-lBF_ox;o*LudTR@t zewui*H?eGdk@ip3Pr1q7jPd>?N1JZ%%U3VR^Sr#ut6#E}KnZl~h=~;fIbWT;;L6Ie z{;RMg9K!NQ6HZmNmi>Y2?))v3dYqQ2ZVsNL2_H^L_lC!m3b=+>R$I&&IE33rV77k3 zqyE^&s!F@hD(ka-uZ`2St1kA-4hGjACt83Yndfgqbh1L`#mgUAlAh zms41koY{E1*sC`9aj43ph z0TDaDCB@mVk$c`DAE6kijI)q1q9MbIRxMH?Y*S&DHi@PtV*$j>E04Rq zm)@4YDBx9W%k=XI9?ba3zg)35U6$9i&aZnOAG>C2Cx}|^!Re5CIunW1Z$!aq+k4{n znDq419MW01l31z056$YDjQ%k*2~dluIPvz5S&(#2YJp{!tX4{1>YJ+6BJ`Y&v6-nj z@sn(}or|a!c0ZWdO|%K;-KpD{V>KZ45Sdn2c}aU*Vhb(d)g+&uOxD9JjYEVyqj2h9 zfZ$KRxhWwDzxs*YQLNeGB-SKVxGQaOz-3-8#pa6SBvQ&V>+3}E48THXdvHY(7@=(P|1GUag64Au5v24##giikzT#Wq(#O~n0p zp(;TDTMbTzalgC&C-&zoC|AP`%7}Q$Fo$<9CQbW)ndr!_9l64}KIUnCP9-tLouo$h zm^#NslQC#zicYexq1E=qJ?i!-E504xlWB=;i-YQBO0l{n7YH%((#E2dh=-Iq$R2~y zVQJZf4mCMX{oKo1K!fYKE)~r`TDE&%SkqN#+;0>Q0v2nveSb+MwEqBPDDC!IhIPB2 zdIZ}P?PV|ag8csr*wV9vXioCSU7uGIL-X|g#O9k;n;WeZ!`p;y7y3T!LtwGDU)@Ij z`MBy{-i}QAQ0|#A7*uQM4yNMXXQzPX?wP9}-b-F>9(u2!rcPKJwBUaYkq0fg;%7;+*7eUX~T+wxMj8I;?=Ae&Zgyi?migc6mQ$Q?M!*Y(N z=bXjNB*6V~5YXpPdsdJ%{yKF@BguUbYr{TFx{<|;RSq_uJ56C7<4^1QV?#Nq!PFB> zyk4?srn6yT*_LU!SL%P|(;;PJ1!D>jUgw>5yASTXHKuXf^J}37*8R=R^$RaKG62Oa z;0eb;)VIx2J80_PcxSGz6Soc_CQAYhW>V6kBxZlCdEOVov(hp?&0cqwuyl~kKuLh} zu%DGYqAK};_z%Q76&Sk9O0?$XBp>I~jguaxm1N#!Qz)SVk|_1|E?spL>vY%BFOu9& zjw2)W0o;^^Jps+RZr|umadJMGo!8zGI1!f*f`mq#u?oMWA$BmkSuIIIeQB`B!g~jS zYvr_ZXdBNFQW4nD$pj}ROAje^0zfg<9D|d#)M42sYy5N7I=|t?U__?W4LLfjqzu}OT(%MKL9hUV z*f=LSt?Bl(Y72>s&awO8m1&;o_K)|g(sZbY9V+s^IQ@oy-&GQLTK!b2?a$kd@$Twi}joWFZceTP7)10o>=eIkz|_ zT%nBBlM<(tB|!POk8VQ!wZK3PYRMi1!_%w?zwVQgJc5%SG*U3r8#~>D9kyp4!`wrtMW04`umAM z|J%s+a{ybFcJwHp3Wg+SWgx8#H+YT;`{ZqX24U07?=oMxe`1zr5gn8&n|n2OU#^b7 zJLQ;7AgUv^GqMd>hWC9920gHTLC^~S|0?R7IjH@-?2x#ei$g^3atH$%Mo=a|D!(H0 zZjdr5C#F!_qD9rH+=Eu`6PeG^G8VIpJ9-GeUg$Z+1142%9D&z{qpA*kt;if!{SO;b zRdxGcdjla&I)(Kv&3Wa=a;QF&%r>FRE%Pg)Tp?T$kWD^dq=TYv$OTdR=B@MMRcR}`zR zZeaJ0&C%|@9)1Xw@->)<5QbTX(ojet8HmS<%wuU>y%wK_d9YFGSTP#D2Cm%E)Od`f zY%TZTx3b|fP!Hc`t0E)OHca;OBE{)GHc&X(8_}yye8X}RYfLhfM?Zg|THx{c&CTF$ zIf8(=TwaADe+C3MmN~oN`+E4-jm7xcyQ5(F5wq~gQWzHdxi;mR=poV*fd(Cs$kvPm zl^&r36;eMyq1#Wt%f%~=AHq!UpU0)ORn~Y}0NGzSZj11cv@C;%)l}N~#&!JGDWF%DtiS?YzVb}bKQzDe0 zvipkEQ*TuBxHVh(;{I6qXcBqGkEllI8f5F4M>fPMXr8yYP0D4SZV$!M<9d%GT4LT- z9Vk+_TiuU=rC>-ZtfxTiGk@w0BgnIrnn}q`A2TWWids}NU&pL|(*%}Gc8&0szq&ZU zBM&QJ31u1!UpqZlz3)00(gpvWHqkYyVLqqh6hHg%zVFgiAVWI}`lh+WU@0^%JheNg zUoSu^LMC(8ot)$A*i|v)r+ARbbwt>9d)kP5_}TuHL(td`LHmbeIw=UvNb(zLWo);F zXlnY%h<8yiM!qP88Rm@Ib#4G2@2-$Wi&3|r6VjgZy3h6ukEo1(LAR7Td^EzOTT;L7 zdIYfgm*4!gXE})SL-cKLl9G!8Vifv$#_uuLGu!#0a(6*<)cTd8*BEyYp%0C*aF=on{Pz6M?GS2GkwDI2-*3 z^`mch z)nb!(QgeN)CjT9!>k*m7JEc(_FCsdL8cTPW%(}057gEp9}A%9+N8EA*P zSNoF9rzEEH;9U1vybJWwCJ<6L{K$G$n>@vy z>nJhMd1B?qI>s92C$=(C=infmv#6eHA|)5osPm?|P}{`|IH`Asuy%4~LsRh?_Cr$*~q zmKInM*H$Vc3&Ml`YWh&HCX|);auo05o)G%?V4#qQC79V(*v9dIS;Qme9)fgMG9@u;G#;Hh)nW7qkxYTQ_Hq2c2 zq7voT!fz&VQ-zh#0w~|aNj^3i5_ttCZFoM?r*@H4YP-ie{0BvA+DMh(hBl`*`Ep2p z=SDrJTjhgAWFDJ`Ex!B|QP{8gS`>%~0?1~E%WIJx=xfPUmy%oor!fZ5lghdSKmd?? z*r6=I(d-xo$d6|BLW1ozz_GW&!1thgKIU5>ytwCR{x9N%yb*}JW}LZ_!D6%fj)bS% z{nq--W~m_cwvWtZ6@Wk`<_VB1jMKEVG`Cf`yJdlpD-m4kF`tt@JIOpo1h{#gfqR*( zt1UnI-|um{9W~6>6_cHcQF@oXHP>V2%w?YVBEj`)v16;7FyP3qEcN+MaepUbCD~)M; zv~j%xfNx6xN}WG-$3A%`?Ysumcxu5}|4(zzSEEVcs%bS!W{EDO9~`hmWYP*FE5H52D( zD&~+sV&RNLeNxAz9OHa~^|c@HuWC9mKqn{<@I@^v7N}en*C#~ebg|o3?cN?TXIzqI zguqPKGDo7f!Ej6O_VsUM8HF=lgD7$Fy4a+g2+1+Ypd zygRwvEh`m8d2SU9Zcosfg#X_6IEU)9!(ehioSj!kp&1*^Hm7-5pM+H)bB`L!44|gY zjhbCoDnTr;G}xN$6^yAku; z7|eTCn(;g(5pN%|mi;I5KD;Y7{zMtvLa_wGXhA~D4C1=IiRBbge|jK1IuIlr=|1p~ z!~o!7*#5f0?y-#i;#M!e$9!S(#Q7*k72CIUX7TkVQG?%Y*n=M5*9wtst-Vf zFq;slaJ~)cu=+ebn<6kUTeND9>YV+#(F+u!5`F~0D(~weHO|-W@V&E$zGq$TT;} z4ru}iu!E85~cFI$@G zZl3qctrgR+4hAZhp8RaHqx#@b>!6Sh>P&P+ie4{ZE6<*-y)WZ;+8J{1v87MQJ3nd@ zo|0YU_UBrbAr*&!lxQ|Z9Ij!$B5L{c4I|C38}g0zx#n0p>^EF#|A!%(u?yj$q9#L> zSXyd#7ESJf{#tmAoY!diJx0=OG}#x?4lY`>%O3Vcxdp!f58mX{n!eOarigrc7_DJa z)mm4?O9Xro<>5C~Ik*5)Xe+-LsL&`rK)KWFq4TiL^D;fgQz{-ispJ>?ISmEk%#7 z1|P=|eko;Fsz& zRwnm{#m+v6S?*U+8ConemtvX^&`t#wA)UgkwnfzSyB`A{_V8{Rom2o*xfP=D;m~U5 z`iaxqezq;kLR+b<+>dsmCJGhL)9<@~s;j?gok71MX8yWezUVtnIcs!mfDg;p8_a>V zgRV(Ec8f@-PQ=(jG65{XU?z3&>9jg$4TB(gE%uca-X6>5tzNy2- zKw(btX)mpmcp>#3D}+*=S58RKp+{YrMG_$J*}U2JfeaQKNPgi0Y_>&xw`T93Ma*DTc9d%C1(wM- zdbk)7-KGv+-I>P`nZ#8hxMwSWBpooHq}{d5dFLmU6%i}(SQG=DFMJ_@nI(eT@dwq% z04(d`kD04Ua*}egD@Cqy<$2%QFIjmUhiXfYF8B0B*+}(}F25W<2a4wozMi|q}cXV`=RN}mNP^rQOLl#I^BjVWHG3EHP!u&U$B3gT*K z@C(&Zq3@xKHb3WWR!!-VyQ`;K;-8Pw=tW6K7>F7vG55PO7E~jNQQ<*A{79o5DM1jt z9&N>k|Bj%at`Y?BxY*9cu1Poj*L|4TmhsLh(cvkY59k_}gFn27bp~vozS=8%IpRwc zFwjg+Xk5I3CQA-1PrgtV(#C^Ub5$t*!6s!5V1(my{KHu^uJUJotW+m*%WW)F| zP8%ns#f7(M8Nt0vYp%%Pqu+ll9wNL<;~l6#%C?8c2MIOQ&}JEM$xiId0cgmgScDSw z=pO`icxxtxaub}|pK0@Z+jTlyFv$+TldhANvpSc7i9 z!9JG^*-3GiGM}=FuLsHvqbj@UHcu|ccSm*@9)9NgW)H|Y1b_~oerw6@M08w^zm>A| z`{&jkhaG^{n!YG|FKXb|n`0j&^A}Ux4oR0V0)WE7%kl9*QzyT| z0RoMHtnB{QOGb_ zVEo+EEI|5Bg5SlqGxNuzoaBUoPnrBIyxWHCUCp z-*f2kci@)hJn!&&ez~Ct_&{g=>vzX5vp1(w#xgaQVmj}gt=_!Tw0{tgVuDyr)r$kl zuB&!&Hf`R5i8>$;-_l?5Tm@#l?d}tjR4=Au&bSFwY7Y0P)DkxW=KTHoGpO-(3k$o| zd6%U+NE9@xA8?3g9fQlxl*GCEB6oV%e`>~0dxNe*Idh?wUOBv1EuH#{Ht1!;mxD zE7$H^76K}-3m3Olx2yo%LEpS4bkiM9w1E3G{DAutUV@BOpE`~M{R8{Hny8w1I??ei zua(Hv>QLvKA$!5R>2WuhzpOkmd>*Kp^xbYLnyny`QdUwW7>P|C&iYjYyr*1qq3vc^ z<@q;^@F`q{Cgc3>`3u1S5nVQNh6kEKp^Zg62ZwV_Hsu-JT|7Tuha5M_W%)uV9PgQt%~$lmH_utr}syk%QWAW0n{q?cPg?o_5}8 zU84gx8pM}B#xns&uocshR+fLm8fwk8vZ5?rBDMnTp4|+a@~#(Gw4OQNHI8a z&+*Z7hZC1?7)eiVCFjW<*2ZS&JbiQMx}xe~{Pi@WL}ohawTkMqToNw~^xZ1nt;P(X z+{Kz6tl9)nk{IDZ*ousgh+y5Qp1yl}(`LPura;3ze$7_h5oy2-UhzS>`>o&6ra2h79kMq0>ansS8G0qvGzTW7OV2X^?-gYeuNiL zWZ$`0AqrXnt{GZytm>NkcU$lse>=}OBl{3}#79f+76K3>QEAJ=y#Z5NNlNZ>v1N(+QrNM;v7v zANvw_7O^`YQ1vtb=(eV?#Nu{UsC1%-tK<~UoT-qmUP0+^i}QGbOklTjuw$qG*=Kox zyU3n;9cR^0noBIYQq0{d&}on_98| z=$1=>n8LL}S_r}0J6X(Ji4QK21v&7&pL!lk!y!lRtk_S02;P1(*hI!DdZy2>aD&Df z*u9l3v}grnT|rNH42lYN`H(j?*4vpx6h0%5yY%ejlQm-zDXNk@OD!`-DPiA5ey7); zPNpP8Ww4n6mEd*Om!+N$l2dg9)?in+0{dAUd1<3}aD+LmaR#ma{<)({%m?|zy zDej^|E0u??FZLgxb=BNw&sI+b!?xK>`0gX?Q`+tk<>_?!skh~`=3>5M0ia~T1A{?% zU@j2}24e+Q?(nFTwaKhyjy7!K{U;J@!-48|9FgB8t~77F!I9-RI=;eALVqVSr_2`h z%OeLw2zl7(gzvrY^2%^bL<<>K*3em{j?5j8qb@EQm2kar{h>IaZr^x=yJ&z#fJj*z z>O=T0^7~cMPxv8^SEnhm1c5W17Wy)`XOzx&A*>*DVvs{*{+@6B4p+qrX^q{Pg z3t3qT)@las&`EOu^Kw^ z`hDB6H-66Y+%jBTLy<<5Xy3zE4@W+dx(m-b`CrEladADl$ZO8U#dTBKmYa*K;Be## z;GbIuF~HwGk*bdQ!f=cX&( z2KkMaX6sf5yxUDdExPyN;WV#guC(QMs`N2ouB1exIoNpRD<@#-yz}Vci=;F1oWrgt zY1?Geu~*E&2J{2w{7A*mTEDyKg-R*pS<}AMJ?#61wivjMr4OO@B=e zGR0u!E^c-n-6u*9^_l4k1xyrvW;7?SRqj~j7I*9|Q4jp9lXe>Z`(lcbS%G-R1wQlb zkojG~{Ot`2Q@;*KhrEc&jGFe`*z%a^DmP;cZv{!XR2!9iYFbkTC7*nG=-=yMxQoVJ zp1Y`D9p)wZUMWBZk#@v>n@3g$B5!LxDCh-xaV^qlE^xnj_A=}C;mFmxgP02Ndc?Z$ z33<;Gmrq8X_*9;3G}n7t#Nz%nfS@!Wi22HjTsKmGZ}G#zbl3Q3-A3eKiYTY2ygQi{ zK4ow|Z<$8CR0$rjfr*XTr<^(_3GhwpGU5Zs9%JW)^|n41ah({u#6eNTQ3W+Y$?lIS z2BpoNeZV9pvC$G;P9ON_msjRzK&~4I>hzQHM4et>pXx8Ms5NB4bGGZ=GkoxSnC1SKy{T}$3`BIP_Ut#f>9WjOQw^ilvI1`T z-z9TGc8KK^zp}VY6kxw4dz|<%}9)CNhZN4o|uId{{JP9tR$1|G{ zndk_BrFXHCVw!X1OA|b8ecL;r5>1OTK`QCd*K6)V(L%4<4eiv5qP%E?I@x7{PJNq62pqBp9-XTxthde7KA#r=9>WIvnH+5@~~ zrow|s$>+;TX|HRFFm*S+VU(9W(&`CC25A3bDFYK4MYy zaa6lEg-00RB)n_R4G4XSK`h121>SFZHEY&3Mfailq^QC>3eE)Xr7lTF+6hO_D zs>7UE=poQpXp;rL>OD4w*F1qyiO`+5hC z+M=Q_PkGFCs#^vNxU>}dk5R)Bg{2jnL1(;CQ{!G=7BpR2D&%7&s<@_76fSf$W&!me z818%GauYFYZcpY9hZn89R>A}^#e65i4U>{7oAah)n6ea7e_eh1xBql!am{y8!{sY! zpsB%FVb0);Hr-^25=*@#mBuU!09HXmiIi4i;;U9nXBBbc-NFO+^qF%jj~Y7B0jg+4 zJ^HRn=@Of{pg&fe$R4f-?YwKjU3cf`CN+-k_^*d33^MT6f4Y)>*(1{Kmq?l;pKBuO&}uqkua} zMhbu<6wBu>eKt9bS?KOxRvm;6Ah$0l^x3#YumfJwiw#G^_yr6I*g<9q8rqXI<2|PH z>&}O={%%Qcq}0Xjm*`U!-c{uYY4gazWMbtH9w!sBcZei&yao1k1WQdi;}ue5<7k93-n7#Yy;f{favNZ=~Pm^ynhW3KOTCx*6YtT2b>&#iqj1X{Zvq~3i=fgO| zRqeBycX%KK^z;2B5%FQfTozPOA5sp*^o`9-@g&qHN_!5|i<4RP<1e>AKJOfUtYUS< zeLa*=J6u&xe{LulRJI*T5%+k7U0o*%FR+s&iF6CI+XwBw4Oo;3BToiyxeu`9c6)em zk^R)oRBvMiKF9(j)*z<)Ml_b)#SO#6)cSLOk&m>i_IqJJYWO)>4pa^`Eo96%|Hqc0 zPT?Lzz9{Wo*`yZ?c7+K?(W|gGv@K|V1tp`)7{IfJN7p?Q3p-h10YQBEs4iiudYpr& zTzX(oTa}qshSX6=7<1n`@Tlv^MbF4xE-#z*_f&QGSK7Yr1 ztT>Fdvu(f(XzE;~ZoTYvyNeyDTFlWntWad+OIFx&6si97qbE*k|G7Mz*VJyGZyHlo z_$-PhQq#a))OTYxXn&7gXbo5KGjdoVpLutA_r}*#@}7iCd}>YyF+XGWAL18qIeF6j z)e(l6cUhI1uzY;{EAn{QOR zTEJ_If&V%=5|ZwbtACB@A_CYgPx{knUfq}Xnyqr=xct78o_`u;C^ObKP^V)7N95U` z#_|`ifZ}%qexPf)uKj7eZHBM6ze$gg=9YQ#`cLDB3x9s`pJS0HjBfmCy!GPGFaCey zb{d1>Up`jpZvAe{1%!C&>H(JgK~S2*|7lpwCW<}1$oU^s|-u_MxFJ^V%S{_z#CQS1mtb?aUYw}1`@YZHP zU*znUZ2T+XivM(f+MT+IM}CY~f~a>CK*N=KtR4`6sC{Lzr}+xHYklS5dEkmHqx$V> zx>m$C7Gg;&xtCxRMlpo=;=#%RPL!RQYm-~?VQhi^3IDwcnI zO{wu6dI>rV1*F~o4glnz$+}?QYXvX+t5Y|J18BLY@hx8r@Jk&tU6<%fFq(J4m$kOy z+}VijzXPZ(J0a{Xt^YiC)S!9mN}JTqUt+Q;0N2$_zy7i%&C24qd@)Yx0(iAOps!4D z`*rgUS`bWG44${@!1I#A5C7K?0sHQ0T4@37!`_VKkfy?B`|MhUbZ&|%c=h>=72=V- z*mY+0=Dq{spON4Bp;-ZOLvbGg8hSiRb;kIB#4tW$$q!0vT1G7cy67`Gx+rH~>*BoN zJ2-kcr;ku*XZ_Kplg+GGeXzRSLkV_2pdhdln#VYi+|y-IR-n zfHDf926Vz2YCU4B00%#UY2lPO=kO!KYMR?vxpb|*p6K1MweHzm&6btVFdf6KsK>M& z=$DLeA_7ID12yNhSDa%$ri8B*_5nyg+Oa*&c5OsBBbS!??ujVW8VZce$I1D( z^=rp;6mOTqEVke0P3(pZ-!Sd-E#A45%>9A8oM{F;z-Q7ojBO%qT5a}KekhZGe5?2c zBQSodae-GpK(#jvR&O$zrQm+h%PGq}Hywwo4urEmc+qjc#=mdYMf~pZsu&T=wIFOy z&6LMQPz-c`E*G_~EF(~FQOGGC8!g5DmdEQ&zWpNEWR{8#&bZqRt z0+J_vui_-B6C2h81T^SU*+XN(uq5qj`wLDXvqi;lIamebTc6P`7?+{^RX7 zxNFm+9B}JP4SFC|=^S!1CZM%hdkw0!)^ z-aMV7YD>+#+Pqe_q2GxoRy4P;M)*}P3GTptjd2By4D9}HUSD`JOui3o@{Y4Xan9LB z{kz)BRT0=D6?kb|xPB3yef6yQR05ndyE8yX)omLk*Va9mZ~5{C%q+9XSP+`oK{CshUm19}?e^>L zJdpn{?}GDY6rk+*5~~zr9D@T&=4w-JHSoNf0zXywT#|<}tN*8CdbJ;jjfzo(|O-kiD~Gd)kf{F;EUbAOQBlc|c}+;FbFaeZ{-?)+oTkqlrcUNSGZ zIVbaAzkULoxnmk*JkWBeyz$v1`Wxz8+86el&7BC=lJ0hU=EqZd)9hskc(zehbz;*; z%;A*RNCm-YJDy*g42Jam$FITu7?dzU?f>jdXOFJS{KcPn*q1FQywuZrt3fEVQ`EbL zT#^@s-Ld)$rTT`O=EiG2(h#&j-3WOfAvPO-K6(86!qc_=bL?4>Z3s`va+x_(a7XzCA_iZ_hp?Qb%0nyaX zw?<*Ry=36iCr3V~)f@XsV&0NGz`yRI9^H+n#OCLU8DX7oTYUl diff --git a/windows/security/identity-protection/hello-for-business/images/pin-reset/pin-reset-service-prompt-2.png b/windows/security/identity-protection/hello-for-business/images/pin-reset/pin-reset-service-prompt-2.png index 86d43fcb2c9bdec7947fae29bf210dd2ae154903..882c46356a5996e9e9a387ae5efde1f10bb0f2bd 100644 GIT binary patch literal 135388 zcmeFZ^;eYN7d9*(kPvAZlo06}x?4&*Wq^^6A*CdT6zT3RK|;E_l&%4#8|kj0`@Qx1 ztoJ{7*YnH!1B(Ug=FGnL+2`ziUHjUEs;S80JR^PfJPMRtlNx%dLXAfL~P3SZ$X}!g8`|5^0~mhJ5)`@{ovY!fu3$mQe6n zPTK=xhwg02)86lFzh#+f)cDYBPjD+~;jY~aw`ptt@GSHC;B*3m z*>Bm=>a8r#a`8{={gH9BP}X}ZzcX$dS=l}Zh5&p?OsbpbMN_u|_gih6TWxU^q-pVe~Ams*bjEZUoAh}9*J`h$E6>&o{roi1h+B_Nk!a` z6|DZ87G$T6k3Roh2P_(ZZ$ip2>Aw9_;{Eer?B_2zi~<8m4BU5QNc1OgD8=r2`d)iJ z&lG?U?quxAz=HL~Hw+)wzN>%R)b-fO_vLc<^P_F7qU*|bf2PVV=#_cMn(`N$z`xdZ z*A8f=v5onB>x(3FyAZuxI1N9a(ml#&>fk-2@l9zyGeJ&j8|qsu!MEg&1f()(!_R?A3$NS*JmZNs@qvejr zD0+I~))NgjyT5;kd6G)6RF_L8?&H<>83naHCTwt}q7^wf`R!d~+BP0r+u0Zy9x0Ed z#Y1mGYMA_{l66(&U+)BP2>l8vGCwo?6~$8CxLRpGw_iHExysnPVGwM+Y|2<4c zEB~cw%o~WPhW6XT7T;YtUje~;?{QAkUT~+`P!v-}eNpO1i8 zS<1G3Q2)1PZ2;Q;p0UKjQuycI--Lt-|5nbWqhGE-;itIPkYU=w8m8 zZZ)Q&k0zpX|AG(&h2A=Mw%GOmfG%2}`ZC<_9|;NF2>%O4D-^83g!TC7#ct1Xx3$OH z+P#jM_vPPqr9V&93k&joywKey*y6iuCp!viu@GhgXRN}4t&6=a zNrD+py6;h>&1!_zM;vhEdab-!dZF#$C)r?YJxnU;Wr>nj88+x%-IelQV|9+638$dX zojbqz@JoKjRq024N#Ha{8%l!)t)5E{<;lk{d`7v3^f^i^$GS`Wc@g;Yq?D7p{w`2{K+)%rRQ*=DX)f56NO5rSJY`hLcLeY8Xp1aM!-wpbx;$9i@^GjP!dc zfoXDmbKHfu*yy-Mx*Uv0d1#&r1F@rpmxhpYbB4}Pk(Wz^;F9w6BY4J@{-%cGKCH)+ zK1w(H_Ui&N!B2U*&c9{aEaMWZxpQEI1n`5p>1Kv(udy~DOB~is8#tXJ__N7`oWGMK zK-IDc(||B5fY34)s^c?F>p4Yw0(aly#~Q?@*wr6YcCGpu6KwXo;*fa2_%NH%mG0@p;$+qE1lj486So)8(E zAP*XrU6b`)Q(HEYbX(ubX1p)J^wwLZ3X!Wp+d?$`y>AMh{M{ zc>~0X(vX~*%D3mQMP{&HNMoDeQ-yk-14;Y%aHnZ2tL0Z%2+M6KLzcrg*=W~r*7_7O zF0&A~0YY3~R4r~a`lJEluAnC1?MA#;unirk(=V5Omw_~;Xs|yjuohv!Xu?^L6)|n- zySV7FS9aLESAN=I-*JEO?;b9I|J#A^i>f2cw`kb8gc4X)iDM7Fun~Bpu|*c#{E=+B zuY8(!T5r6?R*+JWY?ZrU@UA2G;1d#D!ot;L)kef0?+hY>O$e7f zk3{W>&6$6qlYRV^Qu2Yp2RN;{4SxfT+qe_WUeqi$5=%jEnWeN+vTMvTKyss~FzeH( z*llUHupp2QuN)lUQjF&KB8@)~IJotL=~oWRK_x#0&9MW~ami<{GC4wN?pQ@Y2KFoy ztoz4}wg{qLt5r5V7)20~q0Q=id7b;d4tR5Q`CwVVdp&hIh4gbBKbvn0Xpc@ZzS@F7 zQz=9IpG7nhf;j$fO*~1vv9O)+qh2ZPJl?5z$3`Fp_bogCWft?gBGv>Wnt+Uu~a zP0s5~IBfXb>=gPCH#K#e8uPpE>vSmNI4a zdKaXmXX6yvcD6ttX1b*sF%8DP7|B#RiW<{|C?8k#)7960VqGEP&jro&VuZ68&pf+S z>n0$1kGbT1sc+bu7k(GxTN)iOYM&Q*iXWT6wDH#C4-gioQ-)&-tr?@OkTH4qF&WEG zCdKkKz0MKBMIfZ5?caSFdn-rxbJ?W=r=!_}rv@b&x{gn+!$=^D3F^jP#mX@$X)|@> z&JDs#;?kQ5Awzrp9|I^MqtE(N!0v8I#i8qrF@|_FSM3Z{vkq3&8(Q*B7$I)?r|#d( zC8etsQms@bP^iyQ+hsF?e|aHX9&H|o*X{9$#vbOduV~$AtmLcq(p0OFA~eVN2|B8d z2-Aaa&%t;h(x8FLRZ{g(7Sf*s7{-l2U35i!5F$ksA7Wf?ydgYY=@4{A!1o1@YA{1% zVN&O1Q<76f^Dc8X--vPeo3S6A>A|l(zQ4bo$5;vBXx}MF_qrzR1EPA%bqQ|qufiB7 zCrserB-Ws8J&5CfpTl=o=e%Cg7>KRa%-`D_l~YvW{)zc`Y)>rnxc=5?*rGy%Ty4@O zbvH7)H~&9I`NjPBzP#zFbn)PGeB(e!Oqu_1X5=q!n^Zre&bS~o>5wW>{9H`VGkCoi zNn!}c1;lH=s;_k>yrCVw7RlfGQaYf@h2RS)oavF8?Wl1Lmwgcb8>WKv1WQHhYJ;$3 zC1-NXS*6_5oRIIlEYw<^K*2v9uG%SS8HX-S0fK;YF_n>uu)N9fwx7NfwW^5W5v zpXH?W(uXoW(fO21d_{5?-G2VW=3+FC^?&k`!b^ev^K>V%Y5SkS`WF$qdt zFzLabI?o7fG2b|0kTrG@IECi zNlRLI>RoAUi28`kOA~czaJ=gvah1GBKMl-p<2 z`I49a2EIh_OlMs1AE}qr1<%pwk`#3hK28aZNt0I17(*AVOUmvX$NU6jo{Js-Kz-ov z-k-CnIH+Ip*z2VRp)pAgkI15#(802mRy%J7yc7qYhHnC{Td16(J{$fdclWuD$ZzmS zFZ$QKV;==s$p)(mS~e7V)N&-o?&Aod(HUToB=C#cOK+Yri&qwETP2hTn~}jcRo--o z=!U^b{-#Em0#6A+fjYb>O1^MUo9lyxZD$cmO{az=`69R0^6Omzy(uuQ!dDaP>!a9 zCP0uxz28NLF%-kmuA~>MZ__#GjhyWX{$tQQI+P-y!tsBlz&cU|&U>y!c^cs~-LbaN zuQ`2I^1ZB*p-ptE2_AIrwyaa#G4Jw+VWjPNPqS$;gBb&qID!9^NZf$})!Y?zbE&6^ z!0-YzBoz1GCFh%<%Cwa%UY2|;1#mnjOZN+tVKmTc0W-aG9QM72$Da$#9T*Ygnw?oLk@W_Rnf9l_fu!C zb}?I(G!X=nH#n_|GB9y>7JzM^ihy*$wdATSOMBqRvrCG_*hG3Dk6KGvn);OPTJ5zCha-0l z^FpW0Iu)}Z34gP#V?tm))=&{^_sVyVlC<^fgS$c~JkG$i_y38SrZp0s_f6t`+aO5H&4hr$~ew zZAR%;r~3fQ*6glJ&D_*1vafTT1q49rv!^`J5{fe}Wh49apU(zNi02Q{-5i!~8%s<) zrK#m?{jk`q13onR@vjz#{TQr1ta?hAOUUwOm0d5;&Nv;v>wE;mukSyS%@1?!ap+b( z_iX_6aO=$gU5U~qzZ5@JA_!>gaLnYUBn)Rev=3(o#gj9PW~h4Ir6(undc}8ur<=i9 zfA0`pTE<&O@bFL4Q2b6&#OkX6qH>2#EWU8oKN1N9pjEuzeM!QlVE+B{;1C+mmdJYp zbmMrRO=jwacafwUPaR+KaRi_GKHg?$Q_3&tyzE*~s}u<~YJ!DR22|z;*P2>Mf2I*} zOs0v#nnrW9l%b6VKaq4Gq+~lSg@1+Xq~bH2@~!b~Dx?18Dm=J9!7tTyc)rXS+faI< zVrvPM#+QA}vYp~C_4{~(kfh|>HUBvTl<@~^CJ;VqY?e3noju; ziV6t^7d_FDy8c5b>r6<$v*LBpBW+m?!8ZoiO=yT^LO0?qV6+GIgJdPlQ>OKTk|{Li zRqobKPCz;uCnZc6XT&5gHM=<6FD>(}oH9<7dP23X#MAR8qjH;SY_)RLv_6^^|20TF zic_5E#KOMv=Yf&{I79-Rx`A&@7G%NZjJY@zGIl;~xV#l@>znczQu3;VMKb29l9muX zsRt;+hO_bV2ukSe+o&j7O$a4IXJpJiJ>O&af**_BST<`K7pVC0)5sV4)y*;~a;afL zN-K%y)sJ+JK~8)FWG<3RA=sDhVDQ0Y>;y)Io^(tNmhi^#?yYUZqSjyfrkf`iZG-1o zE;^^bjucOzCq)`#7c$VYQ(@p56QmnKG=eStl`0K0+_#H(zMfT8OC*H4o_5tRfTrZT za*VNUO(5IHant!{j&?7#e_x1{j%^x(V?*S--z3QfkWJH!>_eh4b&1^c{EulX@}8FD zZN!VjfWQU1AFE^-PI`4+@xOf}>sD~+=KM0M6-hG^8ja_~6-onET&2SafuNPLvOW9x zNvRz_V*-0#XtsoXARe^yj{u4Nn(J~ z(T{g(RAZg|-S~V-0#PRowj6fU&m@94Xr6n{M<7zA^DiZs-*XVp|9)Qfr>IZp}wK8E{%vu1i!$rCV6PH>%(W_TDMaVgscW&fJ5 zwJlehHzA5#p>5c+&2E&sPv8WS`2MrQo5i3lME@a2j3I@TF96 zU3`_$+qS(j!s;cxvq!RakGIBZDT!^?C@CbS1=9LmbyddO*oc@6XO!ld4LjhVklEp@ z?(Buw*(XUnH#xwrsGD3io@?q|npgI~FVeG!QPE{2Vt+}^Ue7=;8QmHHnk&5uLxQ$K zD+yXK6*^@#kqxB@|85AgoD6hMV?yj`uwOhK&ss-~bY>aPNH~LDk8K};l+I@LACYd| zB%`pW6+L9ZkuE$w+U_skHO@9}V4b{t)-OOwk8k^6o)VR7V~S#}HA(IGai>NAzd?uF zbak5dFSpo6fi-9q(^}?My>v`S)DpDUtInHM>V9f)u0vM_>8$Wn&ge5=Tum zM%W9DeWv$1p7oM@WR}&=bbMc)E%IA_3&>sgCIFGimG4`;Y)&z;VvwEFbxx*duRM~M z*L6-A(^y6H`^(NbYOrvhih#dOYciR!ko%a0(5JC&p08C_xwRxYfA6jW99qWr@A4#( zKYB2lf;UP3ynDX$osO|j>E@%s0>Y3n8%}9sNUU#+(3y z&+39wNkMR>o5DXD(PYl3d6|zf71=QmHTg57>qD|9tAGzz5>WNd#x_da)2sdtyVq+Q zNVpfPQKF_7M$ZQ+9LNGG4k#h~cMQ~2}eg3n({3jca=nkFwC{;%90otyDQzy z%I>Z14Nx-Ei$q7AE#}88hH}MQ<;!4v#CYr(q>c+`Jh>z@c$t3+-g zMzlM}o?S6+u0H24P-v~t^kfrXdqG6*1&O$s8PZ z4h^Wh+#ze0T6(?RTNe7uBNF+;LX+_gU(rWLw-1FFYbukVj3o~gL5chj8uq*Lui(4Z z+q_wfK&@MJDrpy5Mo$!&$)^v6VIj;!gK#^Q@76p0)pDEO6&|G#x$`BA75ef}pRk1n zxG@il^x$i2BzW>f5Wdx*pw&{$olo8V&Pzo#L3Waf19C$|C2aw$_p;k8_9=_~pAk~a znvp6~n7@Np=|{CF;Y}_Uy{V&>%W`~encS-4#$o2{)>;Swmkdm8<4(w|E|hue0*0LP zw*MMsBQ7Sc_y@F6C-rQt8-nrh@a+}eWJ}NGL`?w zi_pGuP!ddQnwgq=^uG)XZ!l3Ttgj%@uQs**gDX2Ma53!bC^b8xO?f@AHtx~v`FTI_lO`$fq}wlO~c+UU6$H(9zmpG zC7KkBLui(%KM;gQP(0B#KOqxN)fbZkiY2*u-?}$4FLh^8&D9OUI!CLkNf9Ca%n5aE zLdHE?Am|<)W8n87G#DO-<7#*38iZ9%ZSyd6G*Wm;#KsVcp+E5(6q-vd@hW>77g-u} z;nv}EUm%p^Vq5ZJgA*KotRsx3L(BD0K)6kZ{v5m$&1WF#+!_lzMW3B0&aO ze}=-ukJ1kF_E*YS)&_5~UbqVc;P(Jq^Mr_A$zdE7zB=%LxE0>JX*R}2 zU46KBn1~`5nH&PQZRFHkxnH=&23E6_eEaq-&9i>ngR#bIGqh9ZEj@8rBBY;GXVs5d zQ5xi3A*Bx84Bg0Go@ZUyeb(RX?+t?6=I++HpqWBnLROiC7-;wIsyWh#=^%q&+4QMQ z_B5tm&nNaa+J{9$?pyd1Qvan8yP&4{lifq1skmahuBBhslT`{JtU)dmvaEQ1%XKL2 zsZVr;eGs*=e!^udM|Bjh=_FP(gdpm`Qc<5OE?rr6(bQ$37rK==`Ch%rtcR$utmN>q zT7>vM>Aa0GtF`0wa4$tDX&Fe8hu2HLlAm$1zLA(k7-bI6^|uZ;6X1akNWZSBH11xX zyiJl#f^gksxqxwN>|WQP2RQt}+)@T%4V4}bqMsi(w04v{+bKOlsL@x4kL)}fL{l}G zA8e-I`dW0WZnS&h+C3iulBOgC@Lj}4(RCg`f4Lo@7#z9p!AI4t1Lt;kZ!X{k-knU z792>A*{r>&jQT@YE8qCLbb_Q6IOH|>Lypo5S6-I@%Nnav7TOj`9j!K!eNTJ*HOVt` zbb;SAW}zWj)T%R6uVVIsvT1v;KYbubI3S%U2^tT3%Yc!Am9#bB;xkW;J!d{^30)85ws3k}IV?XnsC9tXN@`_4+7|IK;< ze$6r{yVM4`@PrCA$F+(Tml~|qlT)%c*DH9eb_C*|7ZrF((}OERduWzxK#MOSLS0wx zNyq&+6IkMV8M!tkuD>9wLkezFO;GsIkeioC1UowgWNhv^WRQL2{gtP|;#Q!3LR4#I zdeN<#5-8F4%5CwC^aNF1os97r1A7+pMj8YUIt|#O;8D|QpMMX@0VALt(>N?g&7~rn zi+J#r7l8!v3}fMFX0f;Wn6Z)I1m!O&63gui{MoU;y(-pW>{Jm{yxPF}DUjh>P&LSl z&{0NqD~TLK%Gib3kBoD^1KNNlYl?&(h_juR$DFdkO$&1tM|r6!v=4|b7cl#9@pV+- z`zcssLM79AGMB`HSZSN zU2i12A;una|;8R9s7ER~OKxQVGxa0AGs^^`3jpVMnV|$@4~FPZ3?! zPQ@Q2t4Atyr{HX3=9be>UWX-BE_6D(p8r_1zH(t5cPS5*vD8XIEC}bgnfk;(k#RnOm-3YXIn#P+DI`l0=lH-}{p{ZPMR2{@+ zanW6)PSd=mKOpX1&R7K6bP? zsXNyuJ(Qgt2l`)Qsz6wIg$;Z+64i(hk-a}6pqmrc$VeCunKM;rYf7K zFT4M|#7;W=cy!=X*-zAEOg3o!cuf7Ks^t%6BSY2t0Wx+#w4h0-hEzrB1({BxBh!WZ<_7nkM9@=5J ztlIF|CUtNeA(CtjchUp5*=QMAjKV+t?TowiQw3j*Y(@zmIy5Z0rW+>2^Rjc{1y~R) z^8TvlZfE|&H2Ud1|APB*`P`1Sqj8T`t%zS*a($~)8u17$A@p~(h<06Xy^T@iP=jzt zkFR>uCI$N^STa<+B*{=4^S+gj^!1UAW?4t>p71lhb;%H~b!7Pyld;n9;Y?{ww)U&l z!>hGuH{YA_Y#|pDh!*1|{RfKmlIE)2XC2Mcu)z0xGr<$Y-Z^jCSh}=M$0GhzP^Xkk zc(raW zda+Vn-~02$ox)&j7ii&A)^njYShe#|AN!)cG26HUoIP}$Z5 zoDrE-CKd`8^l!N$uzV`^{aokGz(w4!!FH9!jYLDJpxM1vLPs@nL_u3Ut>oA5SbJrg zdc82PmdkE~HH9YAx7<6k`+3NVNoeNT`bLRDCM+@;sTUYduMGGAm7%(u?HO1R3)5{=$@@$;{a+Z+6PgaV@ATK z=IZsn;Q>k%NF>n~@7|F>gn1E-LG@snemDVgmqBcb!mJKayw%`eykT|FynR;+uYz7m zsg4v556P;}4>z-kBqe4GL{);3Xt3B{(UdB*e1U&a(^ELW-@g$D|dyJYh@m#c({-NcW3<&d9B@=c}5k4r8!F(Qj zsY|S$O01&(5Z?VhR_6QeG6XCE388%Zfgs(5$@6o`CvV}9K!?md!okGScKIKI&Io6;ZJtzT6OT3^1TZh_rt~oYBgb}$CMRG4D3F73*SQ9SnWpQj^ z2JSBX%;BwG7T%-J3UOhmuEgrI-~+-4C}^P7sk)pATbRB4Ft;#3L3{D>1TM2uKlV_) zTeK@>s7@K{B67t44@|eDViD0_`PQKSY?sTjEM_U)#q~I8f;@#yxgg?_gQ-y#OJhd9 zeRTNPYcc_bqI$d4-*P;-VqJoVY`D+pf5x4^(KV+-G_yUlFqXF-UFfpFbm_#P41tya zLuS{D1|xtc#eqvCU&~Bect;B#00f3}(3VAyF73!m&oyd+Y z0NdCgeOSIJ#b{C}bybEvj6CCKS%meq#I<4+lpcvHXC+oDz_&zSfEL9eQeA(ZrrLWA)W9k!*&XhUR|eh@$CPpMB+I7@|fzt2jst^*H(6HWxHzCZVk zF4KjA(wV0kn&Gyxo{Xezd2>6w!;&W#$8L#a(kTu5Ny@ z+}7)kM?mkiLA)OsT z$$wR1>&D%Nm$3-JfM3FA?+u-!%@@O=pn5C)H^hnRsd8n^Ms&1+mOw%NI!|9KK39Tn zFYWLvg(UOnf97UbgXV#-CHsQ{xi|ACxe`^lh;@chQk_0Y9cS=Sh6uLNWN?{zIf1BD zs!T&6S|)HUl>u+srDWe@C}X*awa$et!;LDbiuYO+`Y3a_yAw+7IR4C~+u@}}>hznv z%W4e2t2FaHK^q~-rRBCZ(ZmfYOm#f0L4&sjTg#JY^olBO1>X+IJFh(TOQ6Dof{K=I z3B!9t`oRIRml{3)Wzt!e1TYQd;U7qRsZNfukpC_fE0a6vfE@AX8d9()EQcoKw^)8H zqFJ3&=hv4=#RhI+;EZHx197{eTyjvpTP3t|-h11z@A!WY%4MUFp9&Grlw{y@`15x9xmE-P z1%-+ieLo{M3m*EDLCYVXQ65@C5kB`Go2k7*Qvg2TZ-4*jkB(!VA(eK}h@b1Z^5Av3 z=(Y#|#I@dN$|FGJy}Oxa!^VF)%-y23vQ%I{xa-?#>L{)yZBL0>jYLlA+BaP;d5%*4 z6%3|(U(7BZuXNdL=Kfdh1!&tlvFmN?XM4-4dP&=Iy-MvUeeWFI0IYiJu?)yJ7lO#_ zwgX|Rq54z-r`{(|N%a0aoJ9LJk{EjZE~_0=IQ)T%=M13Ce4D^Z!>uF!CHJnsTE&M3 z0FR6!xJN}EQqIqfJ+^7Y90G4KYxh4Wm#5i}3;M3Ju*joe3fB}}&x1P8S}*Wn zvZ2rH{f?^dCtm^^K^pH1rpI#t!jkglK|oaX;bEK%jSO|l_u-V%@aPB8ZKAfp4hBi-FUd1Hq+Zm?i-}`*>;kMGa%ZnVn7xkv%bVPVmADF>71Z0at z8M-0AS8~JIKD8Xwr{8Y!ckGC20~?F^^vwHmaSK3G0@;**+)Ar4J5k|!uVfGn6nL<|VyuWmzkSAF6a(@yc- zc0oG?LfbMRXt(IajOl~0)*>(iQ#-BmC^!07j)_6?b*V}y*oi4{8#~3V$B0Ar`$;;^ zaa*K=oq=$xn5(E0*NOB=CHC@FFaN@*&jmL>pugiAkzu5Oug5OMS#Z1_28LkT?S0QD zwcBix@$Nf9ivS!j5&fzyUxalOv-fmVd|8*!Psk7uqb-)V9PTCoBQBSBr=z#mMJ^zb z^Z)ZgsC(TUv)t^p}k&W`Hm$j{)(vxjjTmgtcav%Rn>Ggz&KA@gYdf{+wJN)Ex;FpC*PRt5G-2MYQk0wf>6PsQuEf_ETC8^J4%W~6R zdCN#}c;Q+>x*hVp`Sz^`QR!yyF-k&D7)$x~_$!mF)S0wQSr%CLfBmkdGbC*oSc8Pf z3yt+&UE8`z(j-<-1<#d0k~?hBKeTinEMhb?I_qwc)nLs4S<;S z#)=baBw{r8q?Lin>-=lUBgoeoQ#$z;edbVa^7njETu z-Bk~(v~eVw2XUp`oF$Z25o-;i1K5Jw>r=l_tXE1JyK0R17iyG@+X%XKwod z_B8j^`(@+ToesLJL(DwmAZU@z>7|KwT7LAgoG{3@{uQTNjxC$5FWE^woz_u8;eoGg z>jcftnwOsKlGII@R)rX>WOlQ;aO=*GVE=! zBy2^)rdM0bub3?=ry;h|*_w-J8NfTYaG7F;-U<_nhl^WvBna+&^_qduwra0(ZMLs= z9W^X@lsuAs*9FB=msfFVWKTVIAMl4~vC;e%j{W)(bp^+4m3g1%z+OmsGj@iE3zh2^ zoE;!2d|u-@vA^1H>=goGXW!2}+--^9mf3BibzIa{G#z;#c|Kf0EiyOwpAxpvQ;HA$HWh7~56I+>tE(Nklv?i}C>YMw&veK`h&HG2F;FQtq_zg$3_J;) z_X0*Lj^P}!_(|N;4x&UqcEGQ;naG^>IA#2rDrsb+J|BcQ^C!Q_;We~oI7)#9}HyLm~s;LB5JY9jq#KQ6Kb=8l1mJ?bL#`L@@BW> zRxn$qSBlDB^#PFt)8DP_Ir7>PZdVd8zh)5M4-USK<)ZbjRULbGuckeLGCljl`mo>q z5^dF3n7JVBk5*UN(4T&<#j^Uj!3I_2$by7clg7Kea924!NAJp1K2-jxIbm6(C4=e9HN$<9ObXes^mh9}#%>a2;8uuX7%u6Cy)p)vK>`yOo22 zqR`>D5r3iRS$!8g-`Nd+qnv=s5|!MTbiOx zstZ!^B&O;N)!bsrd2PCcL{4j9->x6jf8YShd@;pYvB)ujrV^;bao;MSaUN8!0& zC2vhJsBCC`t>U`qqP?ur<)uMle5>%(EiP=9wyyNHo-8;X_k%n$?LA!hp!WURCGV6@ zR|6uZQ4Bd(tUgsQZ;>)(e*0O|lK-K6e2TsO%EVXM`saRv$|`-?!dC70)!dmMojk^) z3S61BSe{uV{)~!NUdF~e<1Dr4<=F<}8r=m{uX;0c_H&?NRP%=lF|O?wF&^SF`I}#H zdAUWE?B&m_gn%k1PV>p_vBt^zya{)}brWz{$h?_s9Ukv5FYl%GS1*tg?^UlqeE{kx zZ}D`zP?Onx44MQwLSjQgl@ewT`Niz`l6StrO|NaT;BrKVhp@ag{y*q3*$= zaW&ERo&rRiwOxgYd^r@B|@OJcCQV^38+ zW)caQe%)Vwy0OOrYUJ2OD(fZUf~<|;4J(B44bwdu!;N8;S4_fsHUUIm$ii%@5>hX4uxG#^PNxAgn!$AG&*#aJi*%l0#OSzi z-x?x*Ei%UUB;3%QB?+NQSCK&EXl(qAt?G{n+(Z`ymJ_)*&8N}NIe)Won!qzg&&W_e z`3E66L8A3yOy=P_*?snHit|dAiJgXJqGdjKPpyzO2%rD<-k7x(C&sbqBqt-)$B#Jl zLQa^@8<-hvU1lF$h}EK;*!e9>c`!8l_4RBVnj!<7w$&d`Y{ouP3O=r4wY6gX&?r_p zrk)J7<;^R#W$>G?P89o5+Ki}oIW#W)P5x~dQD>W^H}`U*$6I*`nn-pbti$dQ5vRpMvWu$itlxPd*&%UXV-vE-ke7NJ@Q`+skE6D^ zVDBziX%zPwJUoR_b3>|%b^qU`;FgnWtj{4)`kYjgDMjDvEN*jgg!BY^FrkBoZ+3(f6u>eWjIB-2|Lz2-Y!30Y*pb% ziEKmfo@X?Ix0M`LehG5TX5nV5P-S#kmA^v==|LLPUVg^Rc6K-_GyTq6$w-X?P&u@pvNzj30l9Z6?+Xdzm_@~g&KJX~#BRBAhCE&bIgm=BR1KeF@f zXT^9G&WwgG-N={w+j_Pv&-J|bUF1_^_|a8IzLmc0jyEEe$S80>H7k)7S}+7$Eykux zp#qQJ`l|#^#ztj_`QIk`C0_V7ikx&4d6RXrW`WSu9iyV9CN42vU3)P{0 zE=_k`)%xjm#qc*))JrVK)xiR>m(Et{2?Vx@Tq_=EFC>dC55MO(4Bn09*4wVcOu3$+ zxXcTg{D)6nMDp{9U(WYz)c0Y$fesCn+c_qAyCJ2EQz)V4N>6`H;rI6+E8OgmU@9Eq z%!%x5{Tw&2P?(4PG`V^(zu4`$w>y1Oq^pHVb48GtA$5Zl-bOv(*%E+pNe#n33#^T8 zw(knt0?%vy=lNs(XYk#G%XqNKSZ@R{_xH