From 95d234d0a00cf99e0a69285cb306513839d530bd Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 6 Mar 2024 13:37:23 -0500 Subject: [PATCH] Remove unused image and update overview.md --- .../images/enable-assigned-access-log.png | Bin 49008 -> 0 bytes .../configuration/assigned-access/overview.md | 5 +- .../assigned-access/recommendations.md | 168 +++--------------- 3 files changed, 24 insertions(+), 149 deletions(-) delete mode 100644 windows/configuration/assigned-access/images/enable-assigned-access-log.png diff --git a/windows/configuration/assigned-access/images/enable-assigned-access-log.png b/windows/configuration/assigned-access/images/enable-assigned-access-log.png deleted file mode 100644 index d16f04c43a42f91e5cb6630af07554e9e0ebbfda..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 49008 zcmbSz1z418xAsU#iHHaTf`A|(0s}}REu9KV58Wv>bPGx-B`MwAJv7oK(!J^K&iP-^ z?cV$Q&pF?B&Rlv8GjBY#o^{{rUh5sdSF&Q*m=7^QAP}~MxUf73ghB=aA<3g70pFlV zpVfR?P34E?=gIW3c`MtfpcV%Ay0|H)JXI4K1NHAZJ%aE&(>yz7aIv>$z zeLLT-M>L|5JqS^~X!{X{j)LSVKzb)lq#DemjgE!_DBw$+W!}F`y^-mfdN*9y};GC|DdA?|$ zhx@p#H$WSI^`0avaP+pEQH^u?wx(vKmX!Rf&}uV@AVDFkHqDC`&C4N8{5Vc4iuKxn zG^xmGcSQXVkL7sF#D@g_;hmYUGqF~gZWaTpU8|eP85(YFgoliyPHn^?!rAKr7154K z{NXFK*{6kcZ0ZWScYiNSI(sHzx&9lym6(s@0fdk0Eb#7(q#lzeIV{IzxSd35GMJc} z?mKMjEEdd+S1w0=RI+z_v3q1#4_hXqnLg<*fon`2SSvWecXGblt4XfBw-PU&g*W_O z+xeiTA}q|WQh^E#PsN{3yPap9YHSEi!IkSaUkzm8#8mThj}QO2JXgyv?aNd>qp77q zEYFUBIpVI~nQVAXrLP3FzkHZD{^v>x-x3iVL-l#?zng=KiqSILY`TnCjN_Vwe>8V| zIa%pYcSOT0hLD=rzOuc-xzZ#fJr6+cyHt{NDhb$%p&Q@y0iP)-@x_W@Q)3_{p}7ou zx`oVbyCw&E!b+No6CKH3zR0rE-(2#w3yfNU5gqzzb1x|TUQ-@#Noh4v5#M|a>{um^Na_@8QtWR1DSR^xjXjdp;%tn#fX`(`K)=-)jHyv1* z#5M1`d(w<826JHRdZ#wres{D(1#$7`}^N_Am)0fcu=Wg;uH~J{a z`l!4S4@}g{79E+?HaO~2X)n09b8B!_LFqH6EA$3Dp$VrhZMs3&30wo^3%llsQ@N*pQAG5Y15chTp7HnWy9^xGsJ8{jxPb3zl_%%xq9X{(7E?Y-47xjpf zNca8d(1hH?z>lo3-`<2=h_nirQ+JlNq?Ld@Ss#`k)9_zw4ZJ-LBH0i^>3BI@C?oiL z6Ae7JF30+FsgOM1VgJqL?a=(q&ow3d&AFkwBmJ$_3ylBpq9zM4?N7fCYR4LYJR~O8 z2LJr*QS&%ywAT5UuAs)t`OojHw5Q=7&|ep{B5zy+CGh$Krx5GsUmpAmCg8&miZB&6 zXjXoV%0+#R6swDO9KAdvPO*+ghp;vRb2SQLIoH=^<>t)d(#&Fe>*h+P*9+RlsHt`)3uCXFDK!iQ&sLm(=y|tYe!a^^#1X5Fi zh_6R895YUm=n(7b*$Ao$h91?Zf-MKTG$verj_HC52hKDbo?8}N#;VNH=O59j&oyA? zM=@TV2!nK?66)7-c~kX_tA$^3CFlDNGevywGgS{fX&NHue&UdDb+~{8H$pS+H8nV) z@3(c^|9R7$aEwa(#%$$JHJuK%D2D5PBHa-}^`w_b-P&Ik(JUzU1vH}FJkK22R&raP zD(;WGpjmpqA2X0JLShyzf>v$`5S8l}-*Z72b1y|iL~$b+*nah-$5@H<{O^dPanx~A zpP^6obhT9bMmoB~}T0*sv-P`R4itG3o}0ax>pkjt!dE`pl-vO2Z#i zAp#No1|pl>&&ftZBN)G1YfMzLD!a?Qc@ny<)}o%z)$BM`-EDbIfPfcXlklj|YY!}I zMx(gp@0hxZ5Uek(glPHTM8zLUcJYtFqjP7rBl{0WGH}Y}x-pj73^@zdbg-X4EJ3@u z-UEYD2@Yy(T77c!5hVSfFyI|B{O5--v<-^M2FT5ahJ{88=|e4wt{TvZufTE({)A!J3Xn9CUsU&wo?>^w&tjnr$lrQX*UN@t|<<75+~< zN@Uv9S?ml)H3h$Y`?h$Ij&FF&$KB^wS6Le??L$mA!8z@vQ(GJSqBUd~ay(0DRhX*CaUwHJ=TA+Z~C2V)9(G^z`NqSQT*D}ya7Tq-$D zH=X(LA2LeGeJ-y~H^kmf@Trzvu61sbDVd+2Sk_-gkmUV24Yw#b;49TUCo}Hl`=1v- z?K!wi+RwQ1pO5v`p!?dx2`h)|9k#vP-PW;Q5S!{h;{`gH5IaCW=Z76B#i7ZyvlZM< zwoN!)Ug3T^9Mr{e?6wwmn2iaA%WK*3bbNNyjkS()<^-Nl4u zJyr5XG|pVX!Rw{C^kWV8Fd5QncGdFP?ohkhgz9sAzG1H*CG?+*Ej&L2;bvqmb69w_ zom*SWH{Mdx$9I0VUSNnH*j;wsaNdS9#3#Oc(pqr24!0NXon~8Jh$MYxHP;bSy#c!Tis@!Eeq!w{u znNfE&I(qCrc_7DcS!3FN#+cxqlUh;rg(3&aQ}Zso4KSLmeDLet4Y48yvT*b2Qa!to zADV71YfXfQd>h_O?;bp-Bue#;YmwDKxwmdbE#Fbg zh-lqT=b;Mx+`@5o&wa`zf1x4GlFv@Ow@8R!_hP?K;j-4CC+2W{g#Ub_WY?jlygY)m z!eXjgzl%U}Yr6J@x0YW1R9`LLx^scW!DRNgZG!TPts=67YD0;&D|eN{F>u1!G;trl zxK-xSWB*)OzuQ@|X{lYjr8$3&SU$|EYsy*VTl{IJPS;S{*L=RKgCR;k+_mw6;7a=~ zf3!}yDW?$vX63dvI+UB$*Glft0ZTF%Y+aq~7X+&YUNo=kYEr;Cna-lmk`RjLyYAzA z(}<$#b9XvRXNT>oJFwj@&8y;?npnx5p&TXt!$Ac((_ARLJU!i@#UG!sW=Dv-v0WW* zPxd+e>^R-YL>_Fa;l9|$PjqqAY`6_QpTm)_WnAmukuHkW(#n}~ugV+NT`&XBj4~vf z?GMp#XfUWCtS+|;USAyo=T}*t9+OQSd#^YroSv!vYrj(o_#Nj{qTvN@Zioi+Pt6te zja#Z01xlh<7cGta({6`|s@+;d?O8X1$|>1sx9Ed?T!$8TqTD>7MW^4WG&$Kz*vrWav>AUc>d@yo#xvlBU zX{U`(r4pO>a3!I?Yx-9N?CJJn>Z7=9qj-|TkT*4dqFk&1*s>s(IPhH^US zP*Mr#l=7dfD;MiY=<3ePxt|SGOk1Che&{Z9K5x|Tm{yhl`02d(LKb~%$xj3@$jVeUZEAGJY!uBM2Lg(HDq=kU<>C0hn#!1cT{mZsKSHsuGxdjaP-gdD{Pfw1vT`Xnc>&Aua#^I+tc!d9QvnUtFtVix|*UxvX4bDRK;d}tF zs)Wn7XSnKhyjXU1-~V)( z!1K#H-2Mx^J6VQdBm!;kb$Y}Ne1WcLl{%SJTRqI_M? zk3v*yuFlp6-F92RizsN(rpHT4r2KA`w(Be<92OT#;?5gq9ZwxwK7H;CIa=B2APidh z-T`1OCuimiJn^Mh&0LYf{_1NIOzX0MXiYl2-DZEOkd+q4MP9if*OT?L{TbDF2Va8{ zs+!-@?K4Suibsh5mMekF^b0}^WK4T zX^|S-@BRR>{g^7d2Y9EiYhaxEimUmhw2_JAk^74WoGujXE)?8fKHe>hz$uHsrs}*s z(OELy;^FypSmb>2L)_f-&xtLmD}VD1r_*@}vR<{_u}@L&(4(DBz`tIzpFxAz>ir-r zPcwz@=8iC|8)3@X-O#Yg)GP$Seu4ruSpiHi7Vh*3Wq#J1?A!>9hC|w&eZAP1D_vA6 zyryWXlC)<*k$1}@u*)L`bP-mV5!(IoYb}riXK=DK4a8+|GZH#kvC(u)#?Jv?=ALc%;NoCGiPYk}DGrxQl`;=H=)PpXtQn3L1O2$3ar+njmgeIcMcpNJ z4;bV~xT@tLC0oGP81w?%9oblk(SnPe=Kgcs&ZpnBE%)U~yN=9bDQO5(bEe`dkjwz9 zT8n!4Il!l%C=4(|>; ziac|V)Lr^%xy|CQs6_fM49@wB!+{*ND*`lr(la2U`Q^hv4P;usP6oOEj$bZr{aQrO z4%%NQZorD@6@hr1nrk6Q*K%7CxYu3ztS>I%-`1aid_Hw8LtiB|^P?eym?TCw<~{(2 zbH7Wa{XC4??Slng$-sx*@SJL=y>218UlZE0{)86^go!;WqRO7DIa20cM;dod z`mt@knAqds|2x&a1r_vwpb+cYNhXb>9j@>dCKl+HtUyay?Apq8ZKI5opFRia32eE= zC(&MqUhRQbYtJ-j7H@$PgFT?)+&B^H+xgPigE>YH>6H~#gTTH1Ks}vbB#J=-{D4RI zN!i92IrduZ$c9()v4~o*SvyAlD<58#`_a*wAw4J_g}wMg^=+v8C0LYw zvf(+JdYtp6qE`-%zUdC70mVww;0*F<_cUn(n$HX}e6dgaL{3W68TLL3M(?V3ac009 z3#{a?sCdXB)IE!ZhIh{m9(r>wi4Sk?cD=h~cel~s`$S0XJScRlbeo-QXj!PHdY?{dIuR@yQ z&a1X^O<|ljQO{{MkY`|}H_oX}8ieq)$4+MB$qq8@dx3WD@@g;U=o!E{ z32MVl%15ckOk>e-|l?*Ljips;vEvJ z0^MYnzcWZsl(^WF&Zk`F=-t~eOWR3U7^W=tQ1j7Yrs?YdZV01UI~gOkJeDUr9n(*)gf+{#3G3QZ{=}kd>_c+_@LKwMs(kLxe$ZC$vj>L{BbT z9gzhs=$ub8X)eXO-9ULDNuf!_GVb#jJZ9!e?8ABwu$(L0J!kL}d{Weuyxoq4q2KPxEQtF8Sdig$%NkM(KhyJ3M5m6$#djT_f(m8yl?Rh4c-&#~F-#sIud(9|n#PBIe__rtw3t=X6)v$5hK^iLMd{xvRJ>AQk40J zY!LneJ_q+RvGJ5<8eN{`mozM6KDM_~%pa_)QuW|CaO?h1Zl|)Omu%O#%#8?nXck){ zMZZ{G8B$u>7Ckr)i3GDR1cAk#p+;hkS)&8f(+m-wYJ0}|8nmY>b7x*A9v^Q|Pi2{_ zle_GTnMru68)iIPf$)>E{Z196b@evd5}|=X{4`TQMJN#btYvNmRgHk=KYWHJA67BS zM485%DZTsbodQb4b%T?OiixeSt%)<;_j@nRWt6SS12dj4E8kl;?>EIb`Y##7zyxY| zFMICdiruS;JWRlU+UD?y_bqA>96tj4_u07Tw`Xr_;%&7(9$?BLk6sgVO9cdD3`!M zpv0h_;cKEiIw^U}bqQEQ#2_SGn=9ZpacjNo=h&~XRA2R1-QkO{^04gkhy?`_8kQut z5~a9T$zmX4u^~j@s5;b+SHs7mChBNdv)Z9ir&6LL0ZYx(;tC3>c=AbM<>gQl zg`tW9o3(d(mW0`9I>WORdwtn8b6#2kRzyw`4ol(P6x<8)bMae?MzIcG+M;E%$Bz!j zcn%A+nk%WBctV8NOY)30{HQGB+es1?hs3fiD2+dJyxJ!`Q#Vl)Lkh-rQtedg0ERM^ zbk9gqOW~FhyzogL_2Xg_T03gO+aUHGXK*N`Gr_0Wf-O@GY9S&Y&JA;oPTjG(Pc}e& z?}W?1^vre`&#%1#sUwuv^@p;z0kJV}AF5YM+@~}B&cll87L0=yJ9^Uz=AYWwomhel|WLa_au!Ysmdq!y)D$<3yi4RqTE!8 zX>tpH2?^dz&E72LQ}dJWjh9xUqOmfgd0zLljsDzk^enl>pd$%FGvq`?PkFm&Hd~?o zDX2z}@z&nk=W$SF)+U};F^Md)a4lrvX`b64rY18m*JV#;>n1Mm!}8vo8TA_H=Gf}8 zlKGsiDOIbH^dB!qc&*N3LMIkb3RV`&n%FR!yl+^*t_~Qbpzn!+dFvVn_Sy_J6dW9 zmM{A)Py@zkE!K8|J+pQLB%KmKbQac@6li604oB@9lm@SKu#aFP6i5!8<>cf*D;2K@ zl>Q*36s~Zz7h3wns@WRAB`9MLh3L79linTAR^Dp-gS0;}Ict|6sK&fIk?CDyD zBxm`3{bOS@GoCl+iKJ6#1P69z1hoOM^sP}?;9WdyERowDcm8>E{DQCpbkI{)EpTYB zH`NH7P67Gw*~56+Eptd2>IRa7;0*z-hJF+QXz*xoL8vdZo&F~U?XAVrmG3W!X-Q+t z>M~t@H=M8I*_5BQl$8B2Vc-AP}-7-6a+OEi#Hx&Bnpw0*@6q~CNKYP_sl!9fSZoLer zv3=%ssYt`%V|#vJlDR0b0c|I*gFM&P@laLQ^;Mo#k8pnZ19Sw&HrS`rlYAc}= zdD8cW3a&J{z#P>AxszA8g35Tjo@2Oo{DNrpKte36zD5A~s<+|5xd#b7M!N~cox5Ch^g>Ni~XhSF$qxi?b0Hqpv6w0pV zy%C;%z4CxsG3R^e!bu`0n_h&E9_8iaP&SG`x&M4IG0SatH0{&KcxOR{NCDO8{Epw~ zj^D~F3hqHwzCl&?FHech=;SQH1|61(Zv@`1<{DId6pne4)*YeV*3eCu(%t`F_1jG^ zxaiH*EB5a>i2aPD0(Oz%=-iouG#{A8TH-0exIbHOny(E=VT=qs%6()+o3_HQ!9A+V zKB_7kblFC$>?foC_lhwS!YLsRFycHsd?H`F)EK# z1^XuMdWtP=HgrZNmIp)+j~DqA-yB5pU&hsr6l6N@ zF$VCty2nu_sF|Jn;{=f3^SQ5G9uRwF@Miw#BPq7p@{lEDx>j3uYJ6<>?Xg8(rK!Sd z+4A=HmmfT(K;(+Rk-s%=&8$|U= z7hRe3W@tVAnT8)Xi6zhZVzS!O@ObDv#tc}Pocfu+zrPug;rmGldQid;?~OyhF=$U{ zAlazMcfmA1uJ;`f7zy|MeMb7zfaGmR@e>>Z#34fq<16o>-Ilkk9=l*1vcYupZ^G;w zT?pF%PW1!1;)0cg_(kaLy;r%pjPeJI&*E`waom-j46Wv3J#79)fi8UOgUd7l{@7kQ zdOZ}xbb8~_sKnspf^l!>y%W#MWCerM4U!A`_5ABp&yUBfWk`mn-m=gMBS;*B%h%ZI zHBpbhYE3`0>*7B_altOFQy#KTww0qEF@?Fy8hBFcleWYUgt{b*M{gz{^;kqY%(ZoJ^yxJq1OjmQ=dK~$Xj07{kN!uOd@g04X~D(M%@Q8K+YiDb@S->8 zPB~<&MCR+S?D``kOruZc>YtwVGAf@(GvZI}6R_F#DxjJ>S-Et-;4eGK0{h++rP-Gik2!0=u@qs)w z_(Kb#6#MtLZ8%r2?<+S|_)znjF=Iet zu#6LIuc7fy0>QX)aulsucXoDYnZEdf$nU!{bLTFU__%_Z5w2y()|bJ(32uHt-$&O; zsGJ|UH~z(z=J}2Vcxs0~z*j`N6ey z=ug6u^w%hJMKE-2IAT6CJ5iqiO5$x3556C#wbsdUgP1~M0ZMxLrbdR^%3xd8GO98^ zV@5`Y)B-2{*QOWE(KG1NDRl~KFOtU1QbX82JUrPkKQIGhy3Kz1UPnl&4=3c4x}z&I zWUY}^xK27PjDf;ml16n?k8l=tNvK$(Iqy9BrmP4XO`Otx)LJcp8U6R zS=BipJ_U|IMz8W4%bnh$6WWEH6DCM{AT^Xg2|o-{;u4vsb{$JnHVY4xzfn2^JyO$n zRLziC!J?_5)ghm?Ul8M(m#gj8b09N|mOsPFU>w)7Ge5C11{o~F2+T?MU9qZ)GSdw4 zE00NwB(S^N+X7h;ZwkAh$eSuLsJdc6TDE_o`Fx_~sP!|6E?&;OyS@}q>B0{z5!bP7 zpoB=D2|?s=Dx@H-87kL9-NyOmJQzs4HEQ@@I*Op)61@R5w^5(VXqsnOC3WwJ=9OvM z9g49IWti%T*IuN4vOU!x(u>a=&sLBdFIpT*n(%UZ(Y%Nnof}?#QJtsB=c;hxxy~UY z#a(ag=0dz*h6S^h^b>P5tH16v233o?sbvh~_Z(={Ku^~LG(F-P@7p%D@3#}#9t=qOEnfKzn1s0r9=?tg=rej_IX6ahFtfhVrG_7glIw)Ucf z4zXO*xLp;3fk%JN{Wo??I&Ni&dw$*WYBe^2HgTZ&M#!kWfZK~VF>eKv^~qMR@;dll zQ}z6y@6kCE7D`xGe`TrA{G5fP5`i^5La3Q}_PK;n^Xf%$?5R0B!m7ve%NbuZLhCjk zFr;!U7#G)tLw5OuJU#7jkqmR)W5t?r9~166n~m|YB9f$pq4#l`aL_47%Am4gb6hv9 z=&*vu=8ge)X2RfRF(?;cvzH~+@M(If!%fLJO{#evyEP=sk7E8MZ;>D2M{jy{h}cCs ze4%Ax2)QPal3Ors3VQ>^TZHWlaTy0^O?=c{b)@uwrxilzeA-6M+0oOui$B90xt-C# z^%}u$Vm{yPc%@ijBUl@Ew1*^pEUrje+e{7`3mDO zY@AWF-l2qHq*$F{@mrA_#U)n7A48Bq)U1r^sv7P%!fr8cxlDJFVkH?X_Q?)2a36at zP=@3~006z-a|sjNptf3c(LXbBgVE299AIf57oxNEj{U##+%6gQNx~F%6gq!Z6r{g3qMx>JD zQqW&K1{-}%rTr(hSh~dcMV!b1Hr$mXWuZRyd>l80&^V(FbI+gnQ8?vh|7;jDX@62! z^oEcUX8Ij@{1bD`XvN#J5qdVI^ytrj5Z4G!JOQ-pzmo&@p$dv?zPmGl%FNBJs-z_5 z1r(v`bqXq6&J{@!7nFr-S_WuH6}HXd70u%HCkfkTmbqk>nLT~YKB^c$4QaEae%g`bsU`R9GY_jI?`YzJ6!pz&mMw|3rpX#1KDu;u2xx~M)$(_d_k0uJh zG+#4({O`pKSQS&A=b|8m5@osPEa8uMa5|_&Sc<>iLy)NxxO8N(R`+XxI8o>hsUr)-P zk@KI|0--P`kb1bs33T=3uZafg(!PnoPgZ@l8P6QH7|*T_udonL6@bwI**gz}xaH1m z^RS;O8rk%#X_4AfE5#C%3pcrvs!C0FNT^~dG@S*x;TsZMyvz4+z51wcB*kV1dDlT5 zh8#@#d!j&~hK>gls5w_}ji=wTbd7MwW2jWcR)nJ(|=%(QyXJmhx)OB0}wL=V^X)12qS{)^S8>V;9@e^ zt#r~+pVWP=j>E0aL4jI-UqgTAuTti~?KS>!F@VBAT)$$qxgjapi3lj9YLl64p?XU7 z%ub_tWB}x=Qd2^U#2kW?6JqIZJ$N!`Dp&l)gF&knDGlSOB#OxG`EuxImalY1>xQZ* z9wY!V{`XP*Iu@QYl*wKGvaP7@ROpS~Rk)g@?1G4g**~V$x)^J`Gi;kb{NW|C$ljS6 zhtqKwG_$=8vcbkq*Km5($)Q;?3}%pgh_^;r)AGR&JDM#{tt5Bl(W6%R1I?5^qleI% ztX>My-Nir+KXwhB&lMUjz9OJ@&z%XMwm$d@ABoK2w#?yRDrC4&tQgCG8f-3D{FtWl z$6H<-gD1~zn)te!^j)2}f|JOMG}WR;#>+|%F~8>8 zTWWP&Q~T78c@0sErOO!c6;jYCqbx~g5Ut}W_r);z^?f^veoC39Mf$a5!rl_j=Vqvm z>_YM6T@;`Nf%eU&b3;4(T9t^kiE!?E$<~&&LDcDcK@SXbZgW3-K7mSim2;g(I`yA8 zJGh_t`HfngqDPj{KY9}e{jTU%QqR1*Cf7$*o|@0*e{!;Mv>9&i$3giqIHg3Fp&5fE zX=Fxpn0b<0+HxX9p$9*c3N0XFaTG>S67(*^k84r-)_X@9wl*h_E|HdGu@>RUj7y?=W3+$)?rFIGn) z(XwSev6^~F2>we~ORr!ZVt&O+6;~c4l#V*I0byxb3SD8y1=*D_)kh*HwSMk z3-{QugT$r&H;B=ltjUNN3(CnojpoZ-n+Zvcby|H#wRvVRY-9k%lBWN=6A1%q?_O6)5R){3op)Hs91K?hG?s>cW1U7 zmN!(DGAHEa-QG{F%bDoY$^WucQ7xmFQ02uws*h{e(|a3aj8O%>2c)kShp0I6&4@NX zz78xM&_(@KEAg~e=$A_3)X|6OdMYHq|KVBBU59aojwK@%xAqXMG)>LN3QLX+4<7&B z!*z5(K7vQwGS*kllD2vxXH;_MI&pVTPO3QEb|=h_yOQR;j>dKf#=3c5iFjOK)I;y3 zq@>u{**zij6BbG*VI5*5g_rKCs+}H|uau!UlknjZ^Wi>{6#k&v1^n~9ukUTXxVkA+ zu!lNF6SgNy`%dN|+A!inQ$yDoret;AEo!X4yF3Y5SW)d>g5u>IUG1{H+xMD_xumu? z2NxPV5VP_9L=tWdqXg_cXrUMKF--&KHTSErw>nr1?T;@*W=MN**(Qai)^%I0Yqbc$ ziP}|YL@Q$oKBCYBW2CelppT@!zb^}IudK7-q|yc}`2EICz@~)lO<{WQ04w0|25YW8UW9Tv=R79T@0IA|yUt%D_ms;m zQ_iu%N?JKO-LI8=doCjW0t<;w33az@mI563Q`X;@3aEWFTw|!a!@UWYTO9n3n^kDX zye!)-b~bZ4b%$mf3G6(MZ84$l%7+2D}k~dkbdD!vrYk<9FltKjz z<}y^PMz=No#%Z~l#zIrU`fKbT;kHBdEP!JEkD&pDupnu!f9N28KaK*3!+)S(+ZKP0 zbCU;DTI?Tv1v2_bVketO9v#2rtZNSkXvyU70NmXnyWwZo2;6`HXvqygodn_{0l@!c%xSqa3)@tkZ5^HSJsNF zCKqz9S=5qH7x(a&L~y-qzow#Tei>@}x0=6E$}v=t?SOLfv0yy))$Dk#>+%CbLAht- zE${Ovhrb_sd=<4=d;S*2JeBt|g1RoQxJHSMtHZtN<*Q`p5isBQ`G~7CB6UBF@u&@< zaIs1T(Wu>=Q8GJ|I91?xNp_lU>U6(!T(x)KdmoDo+QElI-)~roIwEqn@;SQXUE%V} zN*$HTan%jPb0KqPLjqzV2Jn0GTG@j6ge)>Wh2g8LSF&j-C;aiP?w8duR%KZ zFD7Tg+4Fc=%?X?;=Qw3~mufTI^;hBZboQjGR~M%Eef38!&1&(R$vFlQ4#s<;Pd1X%=S&2ciY7#&w*FK3nhTJx3rf~IFbPG+**dfo4A*XJ(+#lI zYRPztr}Bpw#mu*$n9~Z~Eu|N#H3@aZ&0o%ou>51L`Khi}yq42XG5$JZ!P(IUfn6RC zP5{F=6<*tvOFeR#^TtN3;+P_qD#8NV(e3t!HO-7^sT&hfG~-EEEc6FBlu z$K&y5PG&>1$#@9V3SFl5u`OLG_iVVh@p4BwjyiS)oRcGexbtM}J7D4{=X*sQ&J%;u ziGVyrQ;Jq;P4z-+I77-KX8#bFQ!aTyW&dlgAEb}?h~{x0aYuJRGL4i_%R)hFapo6M z)zqJ0--fdyS6d}UF<3`kM%X^3!UW$B(}l`E=-yo&SLw|ece3XGd!L&jg!RBgk0gkj zp9`;z$=RA;cI)O;@RPWzj-qC@K>1IiNg|?4hxj(FN+@vW*^%pK6WK-jfp9g|bHzR| zQjaH2`)+n#LFnuQ6A`{5jV0PFU(Qrv_}v)2@<7kC=)=e5%%TL+FPkjE-&R(PpwLGc zq7)&)v}iJi0c{ZTnqft^S_UVEM$!**-+bkSKiuz68s1A9E>032(^7MEf+vzaBc4MG z*vsx!WUDikPqV}SE@q;8_&79>rucJ4E@vXEU4U4M7{lCfueHX|aM%FuUv5ky9u^|$ zdeW48rFr>wA8Te~;!HE1HsO&<%^VsQoj5}s3_)ovte7bb`!Y>3KL6&CjCqOiqx|Yp zW};R@?l@iU%aLN@iB`h6ZWQ5osyG?fTp=jB-9y*GH(XrdF}Z2C`yV%+|8S$#a=PaR z-*MQU`=2WMVum3r8C~+S>xZ@dx)DqH5_#l)Egdt`Ln@=2NjEr?3 z*nDzY7G`?%KLO%A30EWL<>*+paf+`Y@0$Idm>qG4)xpy28v zu~cbu(lB?aE}w9WYtGca6ZQG8(lyyuU9j--2i>mW+8yx&WBCA;?RJ8WcPmX1_!xBC3bApoR7FBT?PV{-cC7V-&R#*JIegc-jPE4?$VnH&`3GP*JU@$_Y4+a z8}bE#N6(%lPw%Gn6|)IMVU$4cP4jQ-G$oRyB9&tu^**gIPL7_Crpn$w{E#9UVEBlis7w13y?pvyzDkPJm4T|d^0?~(1}!&-DJ zj^7-e0Gus{uZNbq1*c6QQi*H=MX$XI9G>;cmvFBI&} zUWk71^Yx)X7P$Q{n2iPm%Z`N$PWJjHi5eo!EG@M?Y2`q{Cgb1i>=%*vp9>eiZT2ZS zH=cp@KT(#)QylY?eO*t;ihIyqKwH2426U6r{Tto5mR}O=`&~I>)@Hu0Wl2DDwS)A) z4{905z4TtnzVmVAgaXe#p$)zsV(2p8f4ODL`^Q^H3)Is$V>8v^%!>_08^BLNEilm-qjY>Ij+*sG|C%+{o* z$jw?R)4{p4_xuiM?#tNJL?tqaw0lN~WGcx#XKXsG8QSZSbs^Nh(~b93xu7bh!MsQO zy|r;2k#QS5)>86cCkvpbUa8m6#l{z1bEdv$tG_q6_w@lZd}DXezo@sfsMr6s|7ZWC zBV}rMVyKd0kAYOgxPc74YQBVLb|Px|OZFJ0@4vBEbT!Y3*6_`|sDhfXsYyu|mCYcl zVn26Wv$~d2B6XUYLV9M_r}>`1c`W3=%>9PI0?E?5nX_P~pJpG)Q4_(+}Qg zf-2<*wnyM-bC<{DKeM>M89IQsq}xyu*DAeI!%YDxS`ozVkH+ER#$jux4Sw0i=k%(Q z1LHomb#JMd>D~E z-W!6K%h{!NjUyM}&pi`F`4WoHbI!(i^bl-?@t$!FHweZn3-9jtB6%}p&1pC zX&LfJ#5I7ouUd+-{Rj2u4lQLnaUV@M``B9OZtsBqvMGtoO|M~ly5TC7D4MP8tX(Hu zV}fqv^~lfiw-&DX=1OVZKPcsdel^b-IH+?xc>;-?q~OU+61cMVVTclKW|c=MjOb)6W~|cZN9kHBg9& z{4!a^7^en0QTct;mCJhYgx6?|$qB@5jsi753jHhpq66#!B+d7?fWfN>D+M$XQ?p6f z&}m_lnVX*{!4+5bDcwty+nU6+uszT4o^}RLLv&<}O>t}2#QrO8a zy^hl^y!!vBPrD zFUY54pP2&_M&3uTi!zU7+RLI0To>YB-6T%G0F|00RXb=P&{L*`E``r1-yzDYJ?TUU zd_vPSHA(F_gHRa7S8_{UqtnS=3zhF45wEhznS86%Daj_OEc9NzkY~JK43=j6A5ybG zTjZ1Nkr^ZypP_^*C3^-ED&A_L`BKJ(j;gy5gu$1p_ipT-uRA6Pj@@9j=1oggGsM~f z6V!#K->32L{oeI!t(2Hy-vc7n(AL)0mt{C>{jOSqnr#OCa3jOD&*p6_O#Owg^g!(% ze-aFjca)m()=vbEA%oi{>pEIB-tBhWFSMfY?sWSNXCY-ziYV#_Qqf}>a5-0(-&Pas zGi^SgW0lJ|<_6od3jo^ne^asl+d5}O>v$I1zl{6Xzk(oZ0k9hDOw*d0Y{(WMWhx&z z@?$nX!yrtTB->S7L=m0{CX7VjQIL&F-sZZTQjUolnTghSPi8Oh8xJ?xcO2f$`@-8l_3eKhE#8D#7IV5S6K6n6aYcs5V>BlkB^pKi{1? zW~$+nqA!~i5v85nOQ)2A_^8sV6^+AjGf|DTSRjGQ5JowRb|uzHKp}c?lW+0r-&+eM zRw@sKeS0c8zFGu4!zC)VDDG@~q8BJ;yP`)8|4wKAR>zbI&hwql(o@AZbH{D#Htf^{#|23oae&aOD_*wUIyIk79b-aWYJ=b^3q}n z1bW5P9!Z0?S4Q8HLv*c4{huqe@q5^X$MV1f*@X5ooos<7Q+b#iZ4cSt>=Pb&O$S10 zP{U}`96T;DGu8t>5Zr7rAaC-1GI*+7uPPcDB+y8%8K2v(RCHjk z1N;~Q3IO*$ZO-6-Qyr~c5dAh>=8YqN-2eR8zueW<}}$#~zz z?(0f0?u-><$3(jo-O0V#pF9uPfwzB~MknxKxX{rp5HE}~H?}<&N^Sdw%-ho4g!QO8ow~4<5yYIR#mf zx2}!gNtfpMP5pm1d?VTY8Rm#;kNfOu(E7H)?>S0G*WECX79bT5@^}Y4$VmPUs0al` zx!l|#6xc){Ep8xSAy@t@rl}l9y>tQcX^CKo-KUy>hzxqbH21d$vs#S7I@dpZfdZIa zBIv(N@ZDGj=cW)4?|@b|kmGSj`V;hB z2@@hzLP-YOv>5_wNBQ>=4^b2*T+3qiNbEi^3_Ya(xd23vk?<&zBI5qXyKZJgFNrpB z2CM0BA^HA^RG?r_AcJme-FRf&jNM%!(-CsSn}G9Kn7%@Qp6+R>y;k(gPYXcN5;_Jt z=D+d%X*o_y-Qs%b>6mA2s`hV{N(gGxyJL+{3r!> zHxT)Xh_%T^Q*FGGMWTd|>o;yiviU(I^W^u~Vb1(4m^S(1)?M%Dkp%?r1BQR4G6l7a zNIQe2^%jI$6>-~na(ts~8O!$k?B5M*Tu82#;^}-)``jqMaW?Dhj`zwv7_QlkNz9pm zfwE=L0LkmD2XnPp^Q~UOfoZaS&rve)IYWnSI=DSTm!6K;fu0HjhS{MPI!HkpTVD0%IEEVuS6xjXav-Wue>1tpJz z3!afz{zb*}rQ@JG*khA*Dpi)3Uti}=$nWKl8eo|O4q(Pglz-s~F@9(ey10SGO$>T~ za?M5m1Fg|EO^Z((4<(_oX8Gp1PbV9cc)waA8A(|7v;Kj2N0w|1%?t3K~!MqPC-B=1d$Sk z?i9hHLsF#$=~j{M9vVR!lGJYh?wIeeh_(PWmxg}(>wZpKanOYo3 zACWBSlxS2zM1DE%H?bFD9UNqW&@cQsXoU=#KV3wK8^hPW`+@i3+&d4M zpsMeDVGziJc>J=*qLw}a068UMujQ2@eftTBj*IVmcr7&mvS3$DAd`YL*MEMy{d<5T+%5u zi(3nKopM#sGi z8xP(p{d=ky;YK&Y(&z@650s#4OG^Gnegr9%4We3VF+ZOxf4m`)!Uai!+4#$L6>eKN zEgtSG`DYE;8SZUlDe#{R0Idfg9fos@n1BJdlqDwTHJ_Xu7Q5&Na#5_C_A~(*`IKs* zOBuAD_hM4C0}Pa2|1eiz_JI=Xm3@f*h_aSuGJ*4;P*fVtH#VZXTl~$=*PxbX%|Y4C$0&_6OnK zq4C3eap`aLMNKvcrREq`tQd_r8_OutNQw>EKiy(=BCPWNk-Ntp$iVJcZzqxRIcS)d z=Vy)=w*uaTEBn>$Q^iXip}dy>6r!edRfaq>EbKD}N+3!?0hY*c*6x09WvmM0%cT7} zoiO06LSH#TR354sP)ny>OP44L2q#STWKH^I6HT)-_{*Uk?Ws5$A4EeI7nJ$ltCT(X z7^0Fvc0VtnpkH^<=g~k3=PpClss1w*ZS5(5TG2J1#d5LtbtirC5bI z*iiD9Zl-7mJlcM&yY`xrA)TsVci4ilR8Br zJOG|YkJ~s?P@XEwTgz9GiMGvmnV`^l7P;#6>59o60J59Z!}UC@ z#EseCn&HAf_Y&U z9wY4fBk6(ENCKeNJ4vAy!yG}d>L)Wjt<6s{n%`%YZ3P*>RP&h;kEYAb3Y}NeSA`g* zFzCuqeU3;o`pArCT-lwW2s{1Ge_>R-UF)lJ5KS@IsmPh#`8>_ifHy<2TPgTL>6DT9 za|1VVFDGu*NMv0#3;RsP)F*&F6bFj^iLx~Uo>$0jWom$-L)cm$D$7pJ>wX~>YCK`w zzEOKrSBanBww{e;nJIz>*h>%#P38l=78(@zH}BHY(vpB~1AiC0r|-ydYR)1@jWO8M z^)M6(V*LuZT9EAZN(UT`pug#duiofz$rSELx4G6)_+L;DrV7l3WBj9QJWT=9ipLQGzv5qE5 z=(bCO=NmDAqa#4?MFmwO!^Tk-M#L6oa0st@&m^^-m@TX`HewY;bMFpMW|#po=?=^& zbz;Y^G$x;L4ZPgd$TaU;Df2Qy&G` zq^a#|%!96+-S}Z1*0y8BCl`yY5UXmr{?(iMh4dvH_EJe!)5@EQJW)g~x!8zf>-Pua z+NC{S<5}ncF0`E;76SCF&|57vvh7cz@904XRV3UR&wN5E`o+*nG@;1TG3H#wLtbLk zAv)gHR6%r&n@i8~uxL?+*k9YcM7h{s@B;D0hi7FU7A5`;#Ca=CBWqx^)VwoxphRed z)8&rz@-^PaYdzyOU;8{&GDyCq;=nHHo}IluLWxfXyl!yEUf#MilIW|CA1TT0O>)bV zG|A5<@C)P<<4bD9L3C>x8i!)0}%;b`Y%B~8O=y7Oca@1bA{ z;IuiMP&Bk$qaKyx7N}&G{{G4|Mb@R5x6vkp{n-W8x~Bz52nO6n>u`}Q^_rIGP%Mp# z*V^@0_ntUp=;mNSnUv*)F-Y~R;H^45Pcq(-hVJnqieP^mIF;GlGFjQc;K_J*1wG}K z`u^DD4#dTJ?Fg^Ea;LiAN2!!ajn`@AXb(%N2o~+B31YUaf*@95vg7=)fQ!qZg~gur zQQYzTKHqABC}CFRT2dO6Taqo0o4twqz~XuHc&3>_Z4X-T*;{qY!#WTuvNSBhty#YR z#xA^Hk})Vhrp?U&-m%X2+OC=N(O3xPyE`WZDxOG)w;LP`jh>s^ybN6J4O}=B*rsY< zR-w_uIXWk^f|V!q8Wqo$@b=4n>U&4;9jFddS)VOSA@~@kCaGKMaf;Rk2#Q^XBQFiZ zGLGPdqA}($w&Kq|@ z9w0b$EJn^w*f?m*LcAK1M0k4aTn>|4mB}<8Hp|~sgAzzDpni3P( z(Rb+Z;P~EM_>hG6)E4k?O(a*StE^TL7BVb|vU0yWi|yi)_Ws#2G138JrlGz(z(rmm ze|FP^%&CY7{1I3>5L5VbU`bMan=%7WU7o=8Vyrg+r(b&2^2S0~kBft*p6twrJRK66oFGXa_sb`dTJ6AgImBc3*!>!k}3KeLA* ztrU{!c@k#1gNOyZd;Olp@(H8G_#{HhZUufKqajG4A=lM{FAwsz6D&_BoU**y<#6zVBu^Rz=2T?)$+9k$C#W)XH@UoSqql0lHON z_Q1=P&?zo>T?FTLjT!1Lh*G2^^|P6ec9+-Lk` z@O;o$Bw)Ku-e}n^#WS@RPH~i9={8P{GKtkE20M*qmmeSy$MjuuFz=e=bpk%70JWpt zN%>)eyRsC3bpI0)yn#|dHO&FMs9_=rHlySF+K1Zt%3<<}*Ra;hbUE)yoW44Ov!%Dz z=P88*67GmsVjf-Aj&~8RqvZN{HxRm%G0KDte3u9E_wOofpY55nHHiY=6~vOjRrs2X zEeJ$>F+XD85PZSNJuL7Y66gwI-Gp4TEwNcU%_5U~m^+gPE@9f1dWl7Ue101#jdD?g$Jc(VW=awz9TwE{g{P^wffsN{f_ zJ>QLK0qj$jL@J){zg8vzRU%BY9A9wC1F!EI3M@#d3BT-cq;3_r{B1qt)2Q$3Du}S_ zzklWd9uP8`!bYUQKy1{10*`-L3lR>C|F~G^17?DjZUTPtYUTD@lL11Z4>^F62X#OS z060Cc`^1iKa(#QYnz**b#oF(=?Eqf)>{R;H1lmOvfWEpyC(}WXjsO}!ft0`8fOb4! zEA3Yq3(*8qNp*B?aaHcMTDTmjUiRG?bvXg-2iH^3K%f%gs9QjE4Me;;TD12>Dku5` zOUND=_NAFBd0rRXNx@9&9>Be>yZ^jbPJ!L-Eaw;=%x1{KYaeWLKaR%t8sR?R-o`HO z1VXd0`4-nk_t;EALPA8m0bI|`>@V%jy$hI<#{q$!{qoQ_1&9r#QlZ%k8gFN$b5xx& zI{WRt9<$eJAJ3sKC1%HeG+`$lE;J(pZjG73kPWbQz-QG2d)Cklc&Z;;k-xHJxuz!s zeDLf+7Yd!fjL?50>TX9h=3#-u;zN?V>>AZ2P>A){+7MD^L53Tn$5Y8`DZR0}w~$n; z>`@vwQo}L9^4`MIeO2 zBf~$7euhy{s%tgfNO2u4H_^tLSn`XDpWr(q>$N0aAL6<&HhbCu+gCgz_G=_WNOlOH zvRz~|7f&|J~=r$9R24E~1%BX7i@gm4o zEnyiCmH;FKEzs|%=ujy%x)ZA84&~qTRHb2g7PMN{%dgCtE z{LGZkr(c4*eWF2GDc&3wsCOxlZqqu3!=y*4V*PD@o<{=*^f%r6 zTZ@cb&xoJ~sax1QEU#eI&8B(y1{cM@WE8Y&Ln)~`nyt%QQ+!CgO)+{tdJ$vv+nHFd zWn=<@o8(LDOh0eTY_4{Sbp2-4Jxe z=aP?KFugXty|-+q9xkb@m{k|^yu`{#M^IH2XXgI$kbhn{{fE5_^DF%ZnejLxAbMeW}2JtKsfRZBryEZ_=yr&~AbN1C-9hThVn@iem30XKhbcb%S2>-sS-Gn2i zZ?J@C0D;x#Q9ZXjUKe*puRrNKO?SOu)Vk;VY8d_=@MafkX| z+;%aW=s~^7{0FUo58$O)bw~E699-*p4(iZrRd$WyR+}P@^<&*a zEPb3)1cVp{e@ez#0vo?s&huD2jrR$C%Hr#cT7@vq8@0PqAFZT5o>9Nv1xL6xJ z2~bGJN|5p9Nk%it4JEznePLDd;DeOV*+V{Rw}J1XSf;vDc!$Vc-Zn+g@0y;xDuVqE$V2XL;fz7D%DuPOyE{j=URWTubuW)=QTyfRvu zqE`>A%q}?$x+-e&{40ITN+x>cY*!qNdJK5lzQ=bPrdyNiP zjgrTxFIZZpN%zKXSYCG@sC!O*&EX^8`Nre=vIE)dfKPcy`F_UN1Z(aC&Fep5ri$30 z8kj1Y55#i+K3V&OL9tS;U=y&%&3x2c=EBg1eUM@!+23tIxLc?FSKFPz{a>0Al zIWiFngs#pIVCVcJVYP$)bscH?s{Nywd2b+)0}i@~M816ohy|GrC(~r3uMRtlR=}7E zHT|?7KX`JQMO{nw9ns6bf2(D@tpp?m{x7WZ{w1Iu57Y^aMmp>`1q>ayqvlcCYj5K@ zXLi*TNXkfJ0V%){AmW_r3z~in!-4~-mc3lF&gHuX@9{^S=k5nxG9Djz>qoxq#u2^h z`%LD`EHb_bkik4Yw=cv3hrl0cC9ZM@GPmYW=s;V<$@D*<%iNH*xJKR7rIQ|QX{Q=G|X>4P! zsI+peJZqF~wr#cTWM2sEazr-zRz=1OxP*Wz2#uegpSLk(*Smu%w+jE(M4Pkm4_~wr zwGtY3aew`$qZm1mYYHmt+C0DVvvN2qhiq2jc*MlW%p+AG%uxL|sYOVfPAGBkI=j1* zGuO|b00ZYod{zWOTWB@$;3<1|C0Dn6aH(=FMI+>(f0w@-FS`+PqGAh>V?V#WTccdzFy!cujBsl_p6Veqs$9QTYwy>9?;s9n{j&LIlC zQ;6aZOIU!x(njS{G}sE+Ob~x|d&x~{`T2V5gOEq7s;tI#&7iz0rO6hDOQyP(IS;Hh zzY1iieUoqSR2byHV|kSp=M%C~TkIN^oMG>s;FeGpS)n|^Pn`7)GOA}c2tB*O|B=?> zHte5Gy_s0GTywLk;D!YsT6XRr`Rz0llSeWJX75tsgZ#-QC{6R{D?`_ZIqQ#>+L8nn z6CfVEeuBoS(a{g2dmg#Z1&%oxRffz1Z4pGY!`e3iZ}3z$qT`%mLc+Vte_~We>z1&h zu56*xa3@^>wCelywb9Oh$L9tTa>aQ`s6yxmj6R+1c+hDN?!|u6a{B z?;_wGmSX#@1%aI*(b_4XKRgPwJ^52nEp^)ygEqRITAT0Qe24E{-YRLwFj!>iAFWvj z0hcN;za6_vJ#+Iq&xgwHn1Y+V!Red&oxUfSz6D4X8#AP#zq&=8Jd+WFEDw5X4StLqlx z5t4HTSBT%1nOUwH^bX!IjXfy8R9I|=3`biQkgKaxV<+BcP`!TG(fPbPRe=w-1lSrn zIXQ8e4+XaC02g`5WqATVdX!mgbIn)eejUES)2D&!x?qjHCZ#ElmgEzc4qLDrQ@Dj@ zpsco{pQDMp;msC$s>8CEzTBDkuH-+m#;raF@PbXja~9^2J5#(dSD9Nd&}Qx~K1Nbl zp-yA1zZ{C17cBr)bOEzsI0jQrT?5aYu~HtrppX=^|L(md?gp3QKdUnJBg#&bpK6H9oSj}Hj+Z06=MfwYIf zP!0=xvRsZ9b-|wlD3y5cFsV3^M{ccsrj!Tw*CF)z@-p9$-}XOXwjFM}^tLD!juSlQ zE}bq`qL{t$VkXg;qnqhztFFL1!Dcf{!MeiCsw2$KfQx{_pPG@ZCu?y)NF$)l2@kLU z>0joO&;nC&1Mm%Sk|Y+&KiV?^Ya9&p9tT+sniV-s(`)Q~4XfC+aoMqnI~bZpj05U# zcLrvZ>|t}5mv8kvbXt&q=EkKPV|J@ZFNg6-s18p(M)wZqr+ZvTf!u8BZOQEq;M`FL zy_BRnwM#Z+c&=E#8DLOhMF2x`LlJ-isITjq=wMtW%(541;{7Yc$cmZu_7+5DVtm4{=c=nB4Z3<+ z2A?sKYG$TpX-C`$R5GN@LIa4JRS@jIH{1b;ZIr^z0mh1k^)xPuT%bwM?|T5+0qlW| zHonSlo=jcc-Cx30%}b_TjDS#?5ZQ(z6ZPW zFt4N41J+~L&d@$zVBSXi)9S8wlXf8OlgY@Ey3i;Krg?Z+*heD6RY zJA}XKpRjsEfTI<@>3P-#?ryi9tHSd0RU7`DA*;tA{K}J~)f8;o>9MZJ9vec#-rPf#Lj-ldkOG z?yxx%ta<==Cg8o#1Wfd^Wc|ISa0Ltd`A&^J8DJJFa(?W> z`d*?17~lDODpO9gr#Ye2?N6<~FG*>wOo36j7x2!0Ui7SD{&Tp^**39PuJ^9m8 z-@bI@$)-j{B{?F}f%A_LedklZh0|>G^D&+QNB~dyUk*B_I2v%O@w{K;lhl`S$kqG` zD5@Fcl}z*3^$zJ>HRA{CvMQM3B*g0Yc00`^EWh~n`S)R8w~^w!<=~4q$04tc8>h92 z1WLMe{?pk$B3h4@-J--SWB3zmi2>fftJ2U4^rl$6m)7Mc!9|`fhO9a7!VB^*fHa@n zIRpQY{!^21&^3Gs;oT*(>uzbv6_3^6MyLK=gl4mY1<63HxtK>e zX(b-TeUch_qGnoxI$;hT;LC1F5MS?6#umAJR|?*@*6`7%;)D#g>h``G4iyGC@z?{$ zfZQY5JeKfP%U61xa@n>5LkfeSn9j{~_wuZyfR%u$4w{6_ zzB7@)M`*Uzqub$f;Z|aARK0XaWWRNE7ToKrONILg9!<&RV$EQWEV*&CFo;s3g2H7w zww1;ZB7r18B+ym-VA+zWpGUf#x9`Aszu~aL<52&F@b6@Fak1p9abJBKkJ8N*zbtZ* z6L^ska}m*KGq54Q_^u_8DAqQ&cXdw!Mw}y5%&Jz{w>y7hN5A`j`2>v`~KDDv)b-^!eOY4 zX-0WwI;|Vua0Q!>X_G&g_Qq$&N{-o!U*}0ns@KCrM@Hb?{~%gFmuK9_^Yra#4=24o zD1kM*1BpJ;7mq*!C>){>l^lUA0%SReatG|r+st%}*3bf37=2_bOOP7I;;jG=WEHsXPN1X>{E=gXw9Kbq_d-P2z0s8ID$i6Cm zPbEoRDI;y=f>vRCJ$FV`gsx=cm53y*8!BxT@p(v?xb~$$kO574!>UCJv2H(Auxow| zRl!>H%pD;r$Z@4B;6a<8#WbbwYqaN8-APx8a2|Z3+G?NDrB!ZzRF-M>POB2lQ_yG9 zUi?AiJ92qp;p{=wOQe5_VLk!W82kO%uPz9XX2;RQre_KAM!@cTD^;g9vCW9=b(mg8 z8_}<9h)LM|`2N)rXV}+zGL(YR1w}x85kK~$k~Cq^gm-M4yh`@Em6fWVVHVmf?q{k` zU^Ign4P3V^FRo-W)`w~}Cetv@iBeK`-t^#2$>(N^_m4;kLXoh0*`8Dod?vuhUxHoA z{qy-ar)TVrcCS1$Nun=bzT7YLL4Hxho7Dl+=%0-U?C}cxwBr~J6;KZD8K^#F^)-?0yZFs_!xy140nQBZ_<+O6 z-w4rZQv z;0Cna5W5Qivn+{#)f4pXf3)#r5aJ}?%EN(YYq^XPqLY7bd@Z}79;ps%Vrs2u$rIpX z|Ct#7uM?*$eY#=I(JM`a;OQT&-{ER=iq+17+)H>m&2p@t(E!H9xAQjG-9FR~O)duP zr<2sleamj>et)dqI|LY{-wTtoGzo*F_n!^InEuJ>IHMW>Znt-Af#DXnF8=!;jTiX< zBD#NVQUNrMg!6xMYxkc>B+1cP*PMu$>O@65>tg--0X$&LLi}>O1U%3QFOf=7u-BH_8yRkVuceTSm4svtiCEgm0+N=5fX*X zMhRFr?8Q391&rB^x2#^2;i;N8RAglCN9AYEar!j6Q{FW1{>Y(X5(ISVKs1hzq%clr- zx~K2(%k_b(#Oi9`RdevZ#q-V`>x)e{@NX*5X9c#aL6Gd-w6OCJk&8^eMz^_8t9g%q z{)Bn{z<|p24_%P~8em(I*sUE+W3BS6Yo(=_^CO-k*@vSi*oxtNO8B+9v=(B2&EOY? zy@!r5eRVTJ4Ze5{hcxs47|8%CRu9C`Ay(nta<8@2paal=F(GxGM|rEC`!?v0&L*Z{ zFOE61J4P7o#fJ~jqPVT}<+KJprODKM)~)Rm@L;M!-c}_tO5AU zUMOG%n0G!v8tW;PewtaOg;MZL{kZjJMm?8OZpP}GT51LzVH=IAbnHMGCZbG1jlmfM zIucT3(W|frVHfs<;hN(>B9cxhG;KfyeTAUgMSCGO#&2ZbKoOrD-DJp!!joLJ7b6-MmKyPwLjym;PJ zj&+RF45Bh?u4r8%7`t?S$YYoqUAV!4A3COwn_B(d->eH0VBV@!k~XBf|94!4V7$}3 zZTFoV;0de;@;QIad#Ka8uj;O4F`s*XPKxZj;}=-(x#A`JRUl8c3_!=L!D5Cnn4xNU{2yfBaGnGv140zXV_;{ROIT z9c<7-R%8JAOIEw`Jj!u=lQ4%BgL8z~$_nOwez5j4OLc%C++%FEvqGS8~fJzf{ zQ8Lp;DG6;sft_D|Xi&`<;j(g<6fV0(kTrzh@`EtL(`({`Et$EnHdI^~h^$U98s>e+ zz5giPR3Ed()NF&Z*+j0asSHzT>gHj|8QozL9-j<@+Pc)&LKr&EI!cI&BjO*e{jc7_ z@XcI^;MoPFrxya2UnCL2Pag-HQCU?R1+c=0#K zCZWq74e*Ey)4BZZ-LE#;jF+$0m5Gs*aDy>9>bS2rN8aa&h^$9#ym9ndxwtCf9BBEY zF;8<}Ajw8UrSVCh$|9=G%?wK#i+p%DPWb6dIeKXFu1Lx+_1xzJhufC*iwUQaF=ylm zTFe6jAD+Bu*K#)??k-2={Ax~qc`$OHWN-gQzU%aCJ+ToqI`>dmRbo0>O9l@OX!sa{ zbMZjTB@J=Hz;69hIr%&2&1egsM=RA`HTD{!*3YFgf3WVUbajh-u9-KpS(?y# zaPdc)_!81rcL58aFy{kn%9yM>@WTb<_>PX)_|(Q!yXL%}MfJax(udSdb#5^CC(Id8B`46cd7sZPmK{}ZvH{Ak2;96w1?mfju8 zTpn%=*Yum1P&L9zdv_fsFIp2Y?W!Ep67^Nnp8%zsmo#01F9kvSClEAR5=rRhs7`rS zm4Da8ZQVXrz{QVs*zwUIrhUeGFAI@ogZk%4V};ghGz&D*?0{&jEmecZy)_tfVu?ZR zdu8%_3ok3UO~SL=?+UP|;&0_(Eyu`(Jf0RZX%-nJuYQwjbU!lKwz<&%3;Uq|tq@m* z3plNiZz{teDeRV;ArM_}4{Gl(s3^Tr$%fgYpzmbXJ{b5tf+-#O0 zmL&}B4j^`@x?8&6d|V}cykzno8%_4Ym8^aL8QA#qh z=a^`9t1c%8CcT+Q+eMWhdRcf#L1SD$T3MdD;QEXUUJr7S7J3U>qp)Z01r?;%O4URZ zNe8*3TPetnoiq62R$*WI`nY*{CvFqt;NWCEO}-{!AmY-Vcl0n<86U-fcv<{R91C1&t z-+CBNiVs#Rx3|+B29BNY)CSle2+G{Bs90~Je`bASb3w=*V~P<2h@3M2&fXY?G?05` zX$bq5IY#~L2*90}cCIW|7*=y6;U0l&zMR5>hvbm))z{GP24 z8Tgf~P-TP`$vppzPfs&BKZ*z1UnNk?5eSI+oJ|W5^0Y@QoO-jMQ3vZw4w04L4s3A! z{C#}^<*c8dddV}R>Ij#kwO6Z~TU%d=0ngne9>Z0~uK@8h(YHnxg|lv{(C@uR32rr7 z^R;xNc@(PR-?2sfTOoq`Cr3Qg?AMO^oHgLiRdsW5Op54a{Kd zZHJKnitwFQ|Mr-Ll|&Zc*jaAcz54kh=QU*kd?pegJtb2HbxsRXRRK37rXiO19ox$ zHV>7xU~o9&fwUJkZ2TFY+lMV1aUMEk{HK7$fz|4#@W-3!`j$r03+qpKhqk&*pZNlo zW-0e9z?-F-6YJ035Jk?ds|**e6I`0ZKgrelK`n-M*ueWrtY$l^syZFgW}(LeFGf#b zyZZ&>i@h#o79+leC+ixche8#5LrNCDeqRs|KeJnCa3zCcj8`h(>^dzCF@KynHK_Uq z!lz>c@^^E;kW1rIi5twb&29Ds+SqM8#RO z3at!GO6VMTIU{v~2T+}gd;rO7_3?4@YNb%+8vNw&fGIzp15X1E8~bK*@?p*8r2XQF zh0E4DrNHL;(donbFhNHfD3PvL1v}V$qe*r@=CT~k`#5yrK!ii?-Ks9Y1^+cQW3)<8s_Bx@FJ?3oAPa zwy4}J=<%OCLU95v1P!$NXRPx(0kAvLlRc;$v@@;PFcZ;cyIicG7Cuu{YVE|@?RJAj z9P5_`fTraFrOHs=AW^VWuLuaP*#Vh@L%X`Vus64GHg|$Fv2n1mad6ehNXrD-t&d0@ ze7YLGZG8#SBE2qw0y@0W0=pCV7#JR1SWg$M6ek&*DHZ#~IXE%xjX>-ZmL3(J9u<}c zU*uT2D4Gqyn4L7(Ar8z1*(1I9P-wOfv*&VLdk@*%X~zs*u&g+M=eFbVja#@p-UYjv zWcqOC^gCSW^1Qb7(@Ly;pCZ_NG{IV!gFI#r|yXEL-*bW83!9(*i2Wt;3) zC-ONq^t*#+wkkf_1Ilp8Z+B^^SD?%-L5Gm~kUlZz0>PyklfL6U)AAR%YYd(M!A*x~ zCp|YzI*C-jkxBD`tXjGelBD74tJ_I3{hyO0MKyh1Cz)TG0rgl25UPgyZ;f|?&M)D= zJCy$05@1l^Pus7%l(kO_B<)U&3#Ps-N)}gUtl#D@AgfARlT~(`=}z&a*NWnqx%^8T zu`Of(wVnT2Wgj4z3i4=Zuauy9{d&c&kz6tF@S$xRaZ*O1JdBWVSST(_(<2HR?p|PH zK+-5=r(4n-GUoBieh62Ttcf4pTO6YUbfjC4I^*hjNr@G3RAfv&r>cMveHF&PW%bBOS- z8#kQdBRo5DN(*H2mJHyh(uB z1~Fc-akvt)wn&sjkzDd5OJH+LLA(N^sWe1tB1R6C>~shG!u$UVh6+F}zAHGpd;=ZCDBXVdnKHQK3T53o3Y}CgIHdtvKt|QGi9-A z-a_iKv1~JK2zXe7{@I3Tk`Le|-9g{*5~un#j-J(CCSVt~o#K~oJ~9dAtUZ`dqW@wb znC!UyF4c@OW5D_O^mag6q0?c}sI%m`eEqMeBrH7D$HbX?e8kmQzeFa4SmTsd^-L!3 zB^{?4WY}@K3NA|RQl?`&IC4C#Dg+rFI!JNAeMtk-r2a>FLpgLVuA5QNgO5uSJmZi< zj8tKHN9$lVZwrn0QyxIBImIa)oejE*MlZ{4w_IFP+P}FW)9H{^X%|f@+AH478Lg6= zxg&2=S@T)n6Sj>I`MFNE0E}QH{L9IL!5O{?Hn#KMk6y+tPj5*lVnWRBv)Tc4v*9(r zWTfv;GH!nsg*s7HQ0;1E>9}X-&QbP45S_ZY?IgjLxKicjhC-P6UcEUBHyN-68D5^C zC{w(r`)6Cw*rl4U+n7t#QvZ3gg+A~_vB&%ea;D7^dQlKYmEnTTFv_@6X7O^oBkhet zJ;owOt4iW%1oMH&1B$=Sjq_*2?*sszs-G&jE2IG%o;4on3iY`4OH@7G3;-R{vU%7+ z>{IMsvUYR#hp0@!KrZg2kyaBcf-nH>ZoFGZa^iXMBl zUzXOVs%Hkd1?-Z@Hl(8fI&-buKX8-lhxj^xmtY<+O3@m&LmAI61|!8(A<&n-(yDf^ z(XC&)^fLp2P0M(Mo_E6Zb%34ZOqFLxTq;KT(-a_S;wZW-3g10*BQfB zD=hYwC@XDUjM|+(fCU|TNqKm&B1P``Vt1n9Y@d*&R)?xsj~%*@Bcb11$7m0_#kB;> z(XM+P*#AGw@LO5lfrPVXD_xnaEYq{WTm)^5c-juMTNY+hcku??KCzdghs|C9u@ar1 zWJ<)LD1^n0z8W{;<9kx=mu`Blw70}W^5?$@GnmCnlILjwNE-b}LOU+gDg7_*==1GM zLh6=#63s&48kR>!FKg3VQ9<0c4GKU6Y z;X^*9z2(0b0C+ty_y41|VhMPHD72R+AgHv|mpX4;sBiXTxd6K~fjDUZTsvgEw_7U( zd{;oX2-7#g?!|=Mkps$%CK0q3jm>&#OxB51C6YE@jC&T|aaq=$>211um_6}`#@K$8K5`0J5SX#Jfrjklfz`mhDrWh6d%4SGthHu|8wbag^ z!w@=oST2|7QO3Z)Teb~Hx%VntvsK=+9q;SS7yX6F!u2Xo-o!|{x8|g?T?M+98u0L~ zf)CWrvLkFZD(y}WW5IiMCb(<`yDGCWLIQg>Hi9&7uDEyJ2ZgHxulS1uB~ItRbXZ-- zg2kB}v#|>976w7W;vYs3b!>Cpfmx2`VvV{S4lTW5qn`}p6zJXkU=ixPmB3Z8-WjZ6 zSG#v)oOo6lgNG#p4DWnF#kj)sJ_*_5rFOFwzmH zPb~HaJpMIT>!>vIXk%+`Xh)czB5c^1tpujUS|p}3o6X|^q&3R5du=yo37jD4Jiq?T?-Fupz`34{zzKq*^E~9Ns1Yr^$nDMfo2^XOPY%f71nr7AoEN0s#>-{mZZak$Pm) z5ZuLX4waRsW?QQ8GC}O~a~K8ZlqvYtYg`fuspn1A| z2aHaiGJ>P^$KiZ<0RJiwaHxiskmD4vK@B87)V}{5V#6(7d>z@RS$QN&eVN5fMDuXp z6Ns_@@yvaqkM$o? z01w!nl=++zKRk@Ud=z`^m3y23V`6zi*%a*|5h3Afyr}I(5Eaf}kuB%u_XC8k!*~0K z#l%KW2;nx>o+8{HH?Hu#R>1<^!9A4o!`JRI^-aW20}de>J7PtQC&zR`dks;AHsTRn z5bnbjgjuV|&l3ki*9J5YZUO-Am7hdQARHoJ5P+`gRN4fs#K`s7h>RlyU+h12>0iW! z6hySFF!^9;9wW5}Qti&Apw)lOK9A#Rhw2dr4!ZQ2(2YOgW7=WHioz7w7l89yM@dit z{{H(HKRRhfrl$Ol58^3+@vEE9O^M2VU`Z=|Fkjp&I9Ou!HaFTKk+=1eFT+z3YqGSX zLStBLRWKeVTnU|Ui}LVghzQ%Bq)H(IS0PyB}9paRhJq?lTnC?GX%?BJa>k2~p@G?DT$U>;d3`HG-z#<>yKD z3-6A`a&;{jZ{1yxB6Q$~Kf1dvrI71TCr#l_vFsMP-s8FK<@KpJtJ+~v&lz(`q`N=# znJUp>q8?AEPPD9(g{ZIf70@fT$!XvH^n9N@JJ?YI3ulXS(Ha#Xkw9b+^;2nH-*V!d zP3>R z=PiY5K4{@-3u($p7*m7;pVMBnp=ASfF#sP}K7(TZXZY>G4b0A;dFzKQ!tX@IGj^+P z9N6W|(g0V*4dKX)&{2O+mH$L+@6$Tg)Z}$n;Q6`(plk8x;^9+sp6ma`)NHa}w6>=O z1;XZZHO_|Rl!wQ>G+|%^9zIILh5=0R;moK@d^ZB4mbRBemY<%8!AUORvIc$wgaqjc(LHrb7!l$T2;;*2- zs4yDwz2?pM;_$B_W2xDq{s}r9Y8W0R)KL}`B;NH^>~y*6v3g!yrf+i!{6|@yuut+X z>UNjeD!oab-%Ag7OuJm^Crq+e_#tuP8t2^!MZ2gpqgmEBY}&oc@@i^snex7t>aT(x zmm7KWR6;yAatnMHZA4@Ay!SdB#~P)1c=uYOaH z-qZ6{Ts_J__!dW7xY_;ExCUpteba}scNj4B-YMRA$GoX2k&}E}P-Fi&dH%9Cu|xZt zjD{Y|8~tjNCJ7>H-P5dg3@}lLD+JzN7>z7)L?L?*HpT0)LN&tN0*buNq>tbUF?E|P zI>h15|B$E|4Z$j_JimbCakf`X#Y-yI-sF zJ$@vge@ybJvD`i1J|azBJN3rA>H&g1;Wba-9nnj$^C0{oJBkneRj z=>Iyq_IN0_?*AA@7|Ky{FCmv`NOU71BP7Ws2QwL=+>%Qsw{oeWa*3l;DwNAn6h~5I zB9~mEK^b!ILULDxNWANrQ9tK*KJR;a-}!4k&wlo^_g;JLwf9oLi zqP*q~7L*EWuX}&?ZNPdF(Uynb7H7k{-i&BWaikfjj4Uo6G=cKmqNw6?@ zqS6?hYC4?i;c?(a=MI0BL(ca={~IsW7#6+j_v`wRN8>j8-ad3UuZ&W1>z$!4lc+!) z2F#5@7VLs=#fP}?EFQ%Ea{xNH)kN-El}s}2(sUT@6bW#;D^&YvHN8hE&*xgQZ|-#S z=eU_u+%t3@&89|t?*iM!gxuKI&MNfpBl&4(8inJeb28v@|M)uTgysG`G;Y8d;s(@n z%mNb$6qBa=%cn}NX{kO@UiZX0blEgMWBL3cCF{6l)2{?Q$1n!Y?BBzRI1H(K%ADPT zRQ)F(^$yhbX1?F5P_&_~CsWWN>34@D!L(Hpg1blVMNv{r!B0jiMU2{nZ|!{c0J1(9 z7vJ2_Mjj<*)4O*#Oy8b3+S4lJ95hpR%WdwUzUA#x_6fX?n-3I?cNMZ2sGV(b zx5haYq_)|(+R`%XIx*A-t0A(#+TO)KMJ-{7IwD|9 zv~nw?O*(QIYf1t>f3qaQhezN{gPbF zuJ0m&8G%Q*z3H{md%xqB;OY}H5EW#PJ-y_9iG^bF*Lt}f1Y29N;loA%`HF&6HHplW z^Jtp7OJ0=thg}qO|BTJ!R6)Ppg9OpCA4e1eQ8BR<&04qjOow7mNn9t4r6y%+Jd{YQ z(5ujm`vigKDA<-tQk?SL(#>Ydog8O=Y?pu6)j%tQXif4CX}e!_@CL=6T%0WF3IJN( zqe;T?7m}Nm@Y#l>Lwh4=$=CM9c-@{_CkXJ<P@fvSPw-fHy2fBm;n=KCa0`~M6Cd6g;Pl$Nqd!$5;QaR>D605fM z1%l`U$wg4HpG%#CI@Z_P3P~AW6 z10coGb~vR;Ixa=Uu>)4%5}9eG&h<2V1ee$xtYvio&>sM|+pXoU|IGU<18srto^ofc zfE-D?dJp~13427D)KOaO;kdqdFTE7raWGY)hK)~f(;M;(I-s3fL&vB8n!eDu&syP3 z=T$Y@?d!H`X{m;5_)lmSZ#fOoT7*U6~VpLcA~*@=MtK_?5gL;&cb8*U2?T zBE9tx&1%kW&+XB7Q$eqbxQK7!ise@weX=kQ2qJI~h|0$VHE50_GH6(eJEu5b%elkUPdu~x!q32uz-a$z4$ZEe3!2QN%l$4JCi51{^Ivgj=zK)!>?IE%!! zGd4@Iain}IS?;aCJAKXvA6j(q<>yX5K!d6mX@v3sTtXA2E--9wasgCOKysP8Zs2}K z=Odz;_Bl|@b5^5@@*;`Qz~0|R!iK1$T(x-K3I1~(!n5SBdi(-AG&G#*04I@@=lCp~ zPYlG${$x%6sbT8?1vVsvTen%!+X|rhOiRz*IQV)P(@S^kz=G)~Ip@y7?Dl&Od!*v} zhlXfgJ)FTi;r;URMb3d7e!nAPi%yg(_-bhHG`W*vw!IchRQ1PQG4W%>)|(gyVR*5z0C@GnMl!>zm^I zkyViM40*{$O9)`C6iB4zxy@hTcU!hi^o8w=D=Yp|0#sX-i+d45GTws) zztvW*&%^SBxXd@Cl+2v~)wi%F-7n&KK!|L&=uX)cyu|n|kE6KdzK7Q%Jj+@MI&3ul zXkJR3UG@rEjmXcnok4s1W_qqX`RMZ_JGQ>5(2I8oF=`jR>ypo5bLH&D z_4^&HjbtA=wPtV#{H;R<^4$SL*&s*!{|;Bm7$vAEg&)3JLq0?Q#aqG1=5m1vx9s1D z9Mym~W;3;XqGjx>QLW*X_+m#wk-d<=LUr!mbk-C$lPD)vV+Ej>Enwgv+kr4M2>nSJui~vtiSF2TlJb0m+cK~ut1j(l9L-N z$W5oy334WhT$f3?fx`BMzMGy=>@60auYEZ~$S8>_#h0VtP(NmyPvFAIZvPKoKJ^eT z@r04mPaU=Nyedkoam4uV#SBZKsSJRB7r9h2#SggO*2d;Sdq>9^-!UmQV+eR$kAYjV z^jvzjgM>hLLlr$~@3*-l;ZErj3CcEdJ|Ck@Q9R<1ayH5VxPj0+b2coC+S1aJT3>I{ zT6swYE|$n86NVE}MUQIbdDY40&pkQ}j1q?U-E+muuU*#SU;dX_h&2V7JN)$gO2RFZ zq%e{(x4Gw7SeLhoQSihR_*bh(Hg?p41od8N*;V6opHJZnDl8BFw$*@1oduq*WT z3kY~7Ovw#=c^$JPFT~s4b(_DpYA_r^J^@CP6v$`z<%PoY{=va8kY76cU)dfnw$wTW zJOMHYp(TjcC!(7w8+fMr^abfJEx{8DQIidn?46&yKR$p%>%?-lRx&lJt3zC z+A}u-ff_W+oZoad$|iLpjl##;aF|jkO-eqNNSXxjByUKUjiy)6t`g(Lfh6E`n6;Yg%{dVZrL)1WWhdZjG z1Drs(^qad*7X{ZWP;YyVi&*D9|PUa?(_@>4;1YRQ8#X=|m`PSyu41z$~PE;gm^>ve!{>(INZ5B)`- z^SKyUBvzN?*mR+&buDqYt6e~7g`6HCz=mV7b(cM)#9iXPla35e;jIrUd)nN$e3B0> zLJ%`Rj4ru{pRf0g|L8;Y8kr7)vGEb{j%oP*Sd|>Y_L%!P#51C(MxWHU&YoDE9ECxy zK^+@AA00hB!E0L z8ju_(tc4m++Y{@`Uty8P()YSR$mQHUgOCUqeOs28qZ0unh5ycxT^ [WHW-1]: /windows-hardware/customize/enterprise/custom-logon [WHW-2]: /windows-hardware/customize/enterprise/unified-write-filter [WHW-3]: /windows-hardware/customize/enterprise/wedl-assignedaccess + diff --git a/windows/configuration/assigned-access/recommendations.md b/windows/configuration/assigned-access/recommendations.md index 46bcbf4ad5..c22054acae 100644 --- a/windows/configuration/assigned-access/recommendations.md +++ b/windows/configuration/assigned-access/recommendations.md @@ -7,76 +7,45 @@ ms.date: 2/29/2024 # Assigned Access recommendations -## Before you begin +## Requirements - [User account control (UAC)](/windows/security/identity-protection/user-account-control/user-account-control-overview) must be turned on to enable kiosk mode. - Kiosk mode isn't supported over a remote desktop connection. Your kiosk users must sign in on the physical device that's set up as a kiosk. -- For kiosks in public-facing environments with auto sign-in enabled, you should use a user account with the least privileges, such as a local standard user account. -## Configuration recommendations +Recommendations + +- For kiosks in public-facing environments with auto sign-in enabled, you should use a user account with the least privileges, such as a local standard user account. For a more secure kiosk experience, we recommend that you make the following configuration changes to the device before you configure it as a kiosk: -- **Hide update notifications**. Starting with Windows 10 version 1809, you can hide notifications from showing on the devices. To enable this feature, you have the following options: +## Configure Windows updates - - **Use Group policy**: `Computer Configuration\Administrative Templates\Windows Components\Windows Update\Display options for update notifications` - - **Use an MDM provider**: This feature uses the [Update/UpdateNotificationLevel CSP](/windows/client-management/mdm/policy-csp-update#update-updatenotificationlevel). In Intune, you can use the [Windows update settings](/mem/intune/protect/windows-update-settings) to manage this feature. +### Hide update notifications - - **Use the registry**: +| | Path | +|--|--| +| **CSP** | `./Device/Vendor/MSFT/Policy/Config/Update/`[UpdateNotificationLevel](/windows/client-management/mdm/policy-csp-update#update-updatenotificationlevel) | +| **GPO** | **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Display options for update notifications**| - 1. Open Registry Editor (regedit). - 1. Go to `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate`. - 1. Create a **New** > **DWORD (32-bit) Value**. Enter `SetUpdateNotificationLevel`, and set its value to `1`. - 1. Create a **New** > **DWORD (32-bit) Value**. Enter `UpdateNotificationLevel`. For value, you can enter: - - `1`: Hides all notifications except restart warnings. - - `2`: Hides all notifications, including restart warnings. +### Enable and schedule automatic updates -- **Enable and schedule automatic updates**. To enable this feature, you have the following options: +| | Path | Value| +|--|--|--| +| **CSP** | `./Device/Vendor/MSFT/Policy/Config/Update/`[AllowAutoUpdate](/windows/client-management/mdm/policy-csp-update#update-update-allowautoupdate) | Select **3 - Auto install and restart at a specified time**| +| **GPO** | **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Configure Automatic Updates** | Select **4 - Auto download and schedule the install**| - - **Use Group policy**: `Computer Configuration\Administrative Templates\Windows Components\Windows Update\Configure Automatic Updates`. Select `4 - Auto download and schedule the install`. - - **Use an MDM provider**: This feature uses the [Update/AllowAutoUpdate CSP](/windows/client-management/mdm/policy-csp-update#update-allowautoupdate). Select `3 - Auto install and restart at a specified time`. In Intune, you can use the [Windows update settings](/mem/intune/protect/windows-update-settings) to manage this feature. - - You can also schedule automatic updates, including **Schedule Install Day**, **Schedule Install Time**, and **Schedule Install Week**. Installations can take between 30 minutes and 2 hours, depending on the device. Schedule updates to occur when a block of 3-4 hours is available. - -- **Enable automatic restart at the scheduled time**. To enable this feature, you have the following options: - - - **Use Group policy**: `Computer Configuration\Administrative Templates\Windows Components\Windows Update\Always automatically restart at the scheduled time`. Select `4 - Auto download and schedule the install`. - - - **Use an MDM provider**: This feature uses the [Update/ActiveHoursStart](/windows/client-management/mdm/policy-csp-update#update-activehoursstart) and [Update/ActiveHoursEnd](/windows/client-management/mdm/policy-csp-update#update-activehoursend) CSPs. In Intune, you can use the [Windows update settings](/mem/intune/protect/windows-update-settings) to manage this feature. - -- **Replace "blue screen" with blank screen for OS errors**. To enable this feature, use the Registry Editor: +## Replace *blue screen* with blank screen for OS errors 1. Open Registry Editor (regedit). 1. Go to `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl`. 1. Create a **New** > **DWORD (32-bit) Value**. Enter `DisplayDisabled`, and set its value to `1`. -- **Put device in "Tablet mode"**. If you want users to use the touch screen, without using a keyboard or mouse, then turn on tablet mode using the Settings app. If users won't interact with the kiosk, such as for a digital sign, then don't turn on this setting. - - Applies to Windows 10 only. Currently, Tablet mode isn't supported on Windows 11. - - Your options: - - - Use the **Settings** app: - 1. Open the **Settings** app. - 1. Go to **System** > **Tablet mode**. - 1. Configure the settings you want. - - - Use the **Action Center**: - 1. On your device, swipe in from the left. - 1. Select **Tablet mode**. - -- **Hide "Ease of access" feature on the sign-in screen**: To enable this feature, you have the following options: +### Hide *Ease of access* feature on the sign-in screen - **Use an MDM provider**: In Intune, you can use the [Control Panel and Settings](/mem/intune/configuration/device-restrictions-windows-10#control-panel-and-settings) to manage this feature. - **Use the registry**: For more information, see [how to disable the Ease of Access button in the registry](/windows-hardware/customize/enterprise/complementary-features-to-custom-logon#welcome-screen). -- **Disable the hardware power button**: To enable this feature, you have the following options: - - - **Use the Settings app**: - 1. Open the **Settings** app. - 1. Go to **System** > **Power & Sleep** > **Additional power settings** > **Choose what the power button does**. - 1. Select **Do nothing**. - 1. **Save changes**. +## Disable the hardware power button - **Use Group Policy**: Your options: @@ -102,7 +71,7 @@ For a more secure kiosk experience, we recommend that you make the following con - [Start settings in a device configuration profile](/mem/intune/configuration/device-restrictions-windows-10#start): This option shows this setting, and all the Start menu settings you can manage. -- **Remove the power button from the sign-in screen**. To enable this feature, you have the following options: +## Remove the power button from the sign-in screen - **Use Group Policy**: `Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Shutdown: Allow system to be shut down without having to log on`. Select **Disabled**. @@ -112,13 +81,8 @@ For a more secure kiosk experience, we recommend that you make the following con - `Local Policies Security Options\Shutdown Allow System To Be Shut Down Without Having To Log On`: Set to **Disabled**. -- **Disable the camera**: To enable this feature, you have the following options: - - **Use the Settings app**: - - 1. Open the **Settings** app. - 1. Go to **Privacy** > **Camera**. - 1. Select **Allow apps use my camera** > **Off**. +## Disable the camera - **Use Group Policy**: `Computer Configuration\Administrative Templates\Windows Components\Camera: Allow use of camera`: Select **Disabled**. @@ -129,13 +93,7 @@ For a more secure kiosk experience, we recommend that you make the following con - `Camera\Allow camera`: Set to **Not allowed**. -- **Turn off app notifications on the lock screen**: To enable this feature, you have the following options: - - - **Use the Settings app**: - - 1. Open the **Settings** app. - 1. Go to **System** > **Notifications & actions**. - 1. In **Show notifications on the lock screen**, select **Off**. +## Turn off app notifications on the lock screen - **Use Group policy**: - `Computer Configuration\Administrative Templates\System\Logon\Turn off app notifications on the lock screen`: Select **Enabled**. @@ -150,15 +108,9 @@ For a more secure kiosk experience, we recommend that you make the following con - `\Start Menu and Taskbar\Notifications\Turn off toast notifications on the lock screen`: Select **Enabled**. - `\System\Logon\Turn off app notifications on the lock screen`: Select **Enabled**. - When looking at settings, check the supported OS for each setting to make sure it applies. +## Disable removable media - - [Settings Catalog](/mem/intune/configuration/settings-catalog): This option lists all the settings you can configure, including the administrative templates used in on-premises Group Policy. Configure the following settings: - - - `\Start Menu and Taskbar\Notifications\Turn off toast notifications on the lock screen`: Select **Enabled**. - - `\System\Logon\Turn off app notifications on the lock screen`: Select **Enabled**. - -- **Disable removable media**: To enable this feature, you have the following options: - - **Use Group policy**: `Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions`. Review the available settings that apply to your situation. +- **Use Group policy**: `Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions`. Review the available settings that apply to your situation. To prevent this policy from affecting a member of the Administrators group, select `Allow administrators to override Device Installation Restriction policies` > **Enabled**. - **Use an MDM provider**: In Intune, you have the following options: - [General settings in a device configuration profile](/mem/intune/configuration/device-restrictions-windows-10#general): See the **Removable storage** setting, and more settings you can manage. @@ -174,8 +126,6 @@ For a more secure kiosk experience, we recommend that you make the following con Logs can help you [troubleshoot issues](/troubleshoot/windows-client/shell-experience/kiosk-mode-issues-troubleshooting) kiosk issues. Logs about configuration and runtime issues can be obtained by enabling the **Applications and Services Logs\Microsoft\Windows\AssignedAccess\Operational** channel, which is disabled by default. -:::image type="content" source="images/enable-assigned-access-log.png" alt-text="On Windows client, open Event Viewer, right-click Operational, select enable log to turn on logging to help troubleshoot."::: - ## Automatic logon You may also want to set up **automatic logon** for your kiosk device. When your kiosk device restarts, from an update or power outage, you can sign in the Assigned Access account manually. Or, you can configure the device to sign in to the Assigned Access account automatically. Make sure that Group Policy settings applied to the device don't prevent automatic sign in. @@ -218,75 +168,3 @@ How to edit the registry to have an account sign in automatically: > [!WARNING] > Assigned access can be configured via WMI or CSP to run its applications under a domain user or service account, rather than a local account. However, use of domain user or service accounts introduces risks that an attacker subverting the Assigned Access application might gain access to sensitive domain resources that have been inadvertently left accessible to any domain account. We recommend that customers proceed with caution when using domain accounts with assigned access, and consider the domain resources potentially exposed by the decision to do so. -## Interactions and interoperability - -The following table describes some features that have interoperability issues we recommend that you consider when running assigned access. - -### Accessibility - -Assigned access doesn't change accessibility settings. We recommend that you use [Keyboard Filter](/windows-hardware/customize/enterprise/keyboardfilter) to block the following key combinations that open accessibility features: - - | Key combination | Blocked behavior | - | --- | --- | - | Left Alt + Left Shift + Print Screen | Open High Contrast dialog box | - | Left Alt + Left Shift + Num Lock | Open Mouse Keys dialog box | - | WIN + U | Open the Settings app accessibility panel | - -### Keyboard shortcuts - -The following keyboard shortcuts are blocked for any user account with Assigned Access: - -| Keyboard shortcut | Action | -|--|--| -| Ctrl + Shift + Esc | Open Task Manager | -| WIN + , (comma) | Temporarily peek at the desktop | -| WIN + A | Open Action center | -| WIN + Alt + D | Display and hide the date and time on the desktop | -| WIN + Ctrl + F | Find computer objects in Active Directory | -| WIN + D | Display and hide the desktop | -| WIN + E | Open File Explorer | -| WIN + F | Open Feedback Hub | -| WIN + G | Open Game bar when a game is open | -| WIN + I | Open Settings | -| WIN + J | Set focus to a Windows tip when one is available | -| WIN + O | Lock device orientation | -| WIN + Q | Open search | -| WIN + R | Open the Run dialog box | -| WIN + S | Open search | -| WIN + Shift + C | Open Cortana in listening mode | -| WIN + X | Open the Quick Link menu | -| LaunchApp1 | Open the app that is assigned to this key | -| LaunchApp2 | Open the app that is assigned to this key. On many Microsoft keyboards, the app is Calculator | -| LaunchMail | Open the default mail client | - -The following keyboard shortcuts are't blocked for any user account with Assigned Access. You can use [Keyboard Filter](/windows-hardware/customize/enterprise/keyboardfilter) to block these key combinations: - -| Keyboard shortcut | Action | -|--|--| -|Alt + F4|| -|Alt + Shift + Tab|| -|Alt + Tab|| - -> [!NOTE] -> Ctrl + Alt + Delete is the default keyboard shortcut to break out of Assigned Access. You can use *Keyboard Filter* to configure a different key combination to break out of Assigned Access by setting *BreakoutKeyScanCode* as described in [WEKF_Settings](/windows-hardware/customize/enterprise/wekf-settings). - -> [!CAUTION] -> Keyboard Filter settings apply to other standard accounts. - -- **Key sequences blocked by [Keyboard Filter](/windows-hardware/customize/enterprise/keyboardfilter)**: If Keyboard Filter is turned ON, then some key combinations are blocked automatically without you having to explicitly block them. For more information, see the [Keyboard Filter](/windows-hardware/customize/enterprise/keyboardfilter). - [Keyboard Filter](/windows-hardware/customize/enterprise/keyboardfilter) is only available on Windows client Enterprise or Education -- **Power button**: Customizations for the Power button complement assigned access, letting you implement features such as removing the power button from the Welcome screen. Removing the power button ensures the user can't turn off the device when it's in assigned access - For more information on removing the power button or disabling the physical power button, see [Custom Logon][WHW-1] -- **Unified Write Filter (UWF)**: UWFsettings apply to all users, including users with assigned access - For more information, see [Unified Write Filter][WHW-2] -- **WEDL_AssignedAccess class**: You can use this class to configure and manage basic lockdown features for assigned access. It's recommended to you use the Windows PowerShell cmdlets instead. - If you need to use Assigned Access API, see [WEDL_AssignedAccess][WHW-3] -- **Welcome Screen**: Customizations for the Welcome screen let you personalize not only how the Welcome screen looks, but for how it functions. You can disable the power or language button, or remove all user interface elements. There are many options to make the Welcome screen your own - -For more information, see [Custom Logon][WHW-1]. - - - -[WHW-1]: /windows-hardware/customize/enterprise/custom-logon -[WHW-2]: /windows-hardware/customize/enterprise/unified-write-filter -[WHW-3]: /windows-hardware/customize/enterprise/wedl-assignedaccess